1. 02 Apr, 2018 1 commit
  2. 30 Mar, 2018 1 commit
  3. 29 Mar, 2018 2 commits
  4. 28 Mar, 2018 2 commits
  5. 27 Mar, 2018 10 commits
  6. 26 Mar, 2018 2 commits
  7. 23 Mar, 2018 3 commits
  8. 20 Mar, 2018 3 commits
  9. 19 Mar, 2018 11 commits
  10. 13 Mar, 2018 1 commit
  11. 12 Mar, 2018 2 commits
  12. 11 Mar, 2018 1 commit
  13. 10 Mar, 2018 1 commit
    • index: error out on unreasonable prefix-compressed path lengths · 3db1af1f
      When computing the complete path length from the encoded
      prefix-compressed path, we end up just allocating the complete path
      without ever checking what the encoded path length actually is. This can
      easily lead to a denial of service by just encoding an unreasonable long
      path name inside of the index. Git already enforces a maximum path
      length of 4096 bytes. As we also have that enforcement ready in some
      places, just make sure that the resulting path is smaller than
      GIT_PATH_MAX.
      
      Reported-by: Krishna Ram Prakash R <krp@gtux.in>
      Reported-by: Vivek Parikh <viv0411.parikh@gmail.com>
      Patrick Steinhardt committed