git, branch v1.6.6.3Mirror of https://git.kernel.org/pub/scm/git/git.git/
https://www.git.shady.money/git/atom?h=v1.6.6.32010-12-15T19:32:57ZGit 1.6.6.32010-12-15T19:32:57ZJunio C Hamanogitster@pobox.com2010-12-15T19:32:57Zurn:sha1:abf411e28d9df669b0e690578a1eb95c0bd29847
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.5.92010-12-15T19:27:41ZJunio C Hamanogitster@pobox.com2010-12-15T19:27:41Zurn:sha1:ec82874ad47627a44b6b22a6645551a214293711
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.4.52010-12-15T19:19:11ZJunio C Hamanogitster@pobox.com2010-12-15T19:19:11Zurn:sha1:88fcc52e4468d5dfef4f50d2bdee4b168a855368
Signed-off-by: Junio C Hamano <gitster@pobox.com>
gitweb: Introduce esc_attr to escape attributes of HTML elements2010-12-15T19:16:31ZJakub Narebskijnareb@gmail.com2010-12-14T23:34:01Zurn:sha1:3017ed62f47ce14a959e2d315c434d4980cf4243
It is needed only to escape attributes of handcrafted HTML elements,
and not those generated using CGI.pm subroutines / methods for HTML
generation.
While at it, add esc_url and esc_html where needed, and prefer to use
CGI.pm HTML generating methods than handcrafted HTML code. Most of
those are probably unnecessary (could be exploited only by person with
write access to gitweb config, or at least access to the repository).
This fixes CVE-2010-3906
Reported-by: Emanuele Gentili <e.gentili@tigersecurity.it>
Helped-by: John 'Warthog9' Hawley <warthog9@kernel.org>
Helped-by: Jonathan Nieder <jrnieder@gmail.com>
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Merge branch 'maint-1.6.5' into maint-1.6.62010-07-26T04:52:29ZJunio C Hamanogitster@pobox.com2010-07-26T04:52:29Zurn:sha1:ad336054068074ed614d0bb54bb169e5263499d7
* maint-1.6.5:
request-pull.txt: Document -p option
Check size of path buffer before writing into it
rev-parse: fix --parse-opt --keep-dashdash --stop-at-non-option
request-pull.txt: Document -p option2010-07-26T04:52:19ZStephen Boydbebarino@gmail.com2010-07-23T16:31:27Zurn:sha1:d8e3ac7e7264863544c95069024f1cbaedb5db3d
Signed-off-by: Stephen Boyd <bebarino@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Merge branch 'maint-1.6.4' into maint-1.6.52010-07-26T04:51:58ZJunio C Hamanogitster@pobox.com2010-07-26T04:51:58Zurn:sha1:a07b10c8f930e88386d3b7424f25190af554275e
* maint-1.6.4:
Check size of path buffer before writing into it
rev-parse: fix --parse-opt --keep-dashdash --stop-at-non-option
Check size of path buffer before writing into it2010-07-25T17:33:47ZGreg Brockmangdb@MIT.EDU2010-07-20T04:46:21Zurn:sha1:1b0b962d771fb734cbf273f216b487bb58dec7b9
This prevents a buffer overrun that could otherwise be triggered by
creating a file called '.git' with contents
gitdir: (something really long)
Signed-off-by: Greg Brockman <gdb@mit.edu>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
rev-parse: fix --parse-opt --keep-dashdash --stop-at-non-option2010-07-07T18:11:50ZUwe Kleine-Königu.kleine-koenig@pengutronix.de2010-07-06T14:46:05Zurn:sha1:29981380d03ffa63765dbeaea53a7ac9e8d6bc4f
The ?: operator has a lower priority than |, so the implicit associativity
made the 6th argument of parse_options be PARSE_OPT_KEEP_DASHDASH if
keep_dashdash was true discarding PARSE_OPT_STOP_AT_NON_OPTION and
PARSE_OPT_SHELL_EVAL.
Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
MSVC: Fix build by adding missing termios.h dummy2010-04-19T08:28:21ZJohannes Sixtj6t@kdbg.org2010-04-19T07:37:20Zurn:sha1:b75686455c0524f167b6a878c124df40db34b325
A use of this header file was introduced in eb80042 (Add missing #include
to support TIOCGWINSZ on Solaris, 2010-01-11).
Signed-off-by: Johannes Sixt <j6t@kdbg.org>
Signed-off-by: Junio C Hamano <gitster@pobox.com>