From f714f589c5548c24e5d897ac5f59706a3a8be21c Mon Sep 17 00:00:00 2001
From: Jon Ayers <jon@coder.com>
Date: Fri, 13 Mar 2026 16:26:12 -0500
Subject: [PATCH] fix: fork gvisor to avoid integer overflow (#23055)

---
 go.mod | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/go.mod b/go.mod
index 7ce29746ee..f51c23806b 100644
--- a/go.mod
+++ b/go.mod
@@ -43,6 +43,10 @@ replace tailscale.com => github.com/coder/tailscale v1.1.1-0.20260306035934-af5c
 // 2. update to the latest gVisor
 replace github.com/tailscale/wireguard-go => github.com/coder/wireguard-go v0.0.0-20260113101225-9b7a56210e49
 
+// We use a fork to fix an integer overflow issue that causes occasional crashes in workspace agents.
+// See https://github.com/coder/coder/issues/20885
+replace gvisor.dev => github.com/coder/gvisor v0.0.0-20260313164934-7a658db7b714
+
 // Switch to our fork that imports fixes from http://github.com/tailscale/ssh.
 // See: https://github.com/coder/coder/issues/3371
 //