1. 30 Mar, 2018 2 commits
  2. 29 Mar, 2018 2 commits
  3. 28 Mar, 2018 2 commits
  4. 27 Mar, 2018 10 commits
  5. 26 Mar, 2018 2 commits
  6. 23 Mar, 2018 3 commits
  7. 20 Mar, 2018 3 commits
  8. 19 Mar, 2018 11 commits
  9. 13 Mar, 2018 1 commit
  10. 12 Mar, 2018 2 commits
  11. 11 Mar, 2018 1 commit
  12. 10 Mar, 2018 1 commit
    • index: error out on unreasonable prefix-compressed path lengths · 3db1af1f
      When computing the complete path length from the encoded
      prefix-compressed path, we end up just allocating the complete path
      without ever checking what the encoded path length actually is. This can
      easily lead to a denial of service by just encoding an unreasonable long
      path name inside of the index. Git already enforces a maximum path
      length of 4096 bytes. As we also have that enforcement ready in some
      places, just make sure that the resulting path is smaller than
      GIT_PATH_MAX.
      
      Reported-by: Krishna Ram Prakash R <krp@gtux.in>
      Reported-by: Vivek Parikh <viv0411.parikh@gmail.com>
      Patrick Steinhardt committed