Repository navigation

Security release v0.26.7 - #4835

Merged

pks-t merged 28 commits into

libgit2:maint/v0.26from

pks-t:pks/v0.26.7

Oct 5, 2018

Merged

Security release v0.26.7#4835
pks-t merged 28 commits into
libgit2:maint/v0.26from
pks-t:pks/v0.26.7

Commits on Oct 1, 2018
- config: convert unbounded recursion into a loop
  
  nelhage
  authored and
  pks-t
  committed
  da70156
- config: Fix a leak parsing multi-line config entries
  
  nelhage
  authored and
  pks-t
  committed
  c18c913
- config_parse: refactor error handling when parsing multiline variables
  pks-t
  committed
  c4db171
- Prevent heap-buffer-overflow
  
  bisho
  authored and
  pks-t
  committed
  ffc2056
- Fix 'invalid packet line' for ng packets containing errors
  
  cschlack
  authored and
  pks-t
  committed
  8ced462
- Remove GIT_PKT_PACK entirely
  
  nelhage
  authored and
  pks-t
  committed
  c83c59b
- Small style tweak, and set an error
  
  nelhage
  authored and
  pks-t
  committed
  e91024e
- smart: typedef git_pkt_type and clarify recv_pkt return type
  
  tiennou
  authored and
  pks-t
  committed
  9561ec8
- Verify ref_pkt's are long enough
  
  nelhage
  authored and
  pks-t
  committed
  5f55778
- util: introduce `git__prefixncmp` and consolidate implementations
  
  ethomson
  authored and
  pks-t
  committed
  a8db6c9
Commits on Oct 3, 2018
- tests: verify parsing logic for smart packets
  pks-t
  committed
  5d108c9
- smart_pkt: honor line length when determining packet type
  pks-t
  committed
  a7e87dd
- smart_pkt: explicitly avoid integer overflows when parsing packets
  pks-t
  committed
  cfb9802
- smart_pkt: check whether error packets are prefixed with "ERR "
  pks-t
  committed
  e14dab2
- smart_pkt: adjust style of "ref" packet parsing function
  pks-t
  committed
  3fd6ce0
- smart_pkt: fix buffer overflow when parsing "ACK" packets
  pks-t
  committed
  82c3fc3
- smart_pkt: fix buffer overflow when parsing "ok" packets
  pks-t
  committed
  8cd0a89
- smart_pkt: fix "ng" parser accepting non-space character
  pks-t
  committed
  02e4b27
- smart_pkt: fix buffer overflow when parsing "unpack" packets
  pks-t
  committed
  a8356af
- smart_pkt: reorder and rename parameters of `git_pkt_parse_line`
  pks-t
  committed
  3bbda7d
- smart_pkt: return parsed length via out-parameter
  pks-t
  committed
  5836d8b
- smart_pkt: do not accept callers passing in no line length
  pks-t
  committed
  21a2318
Commits on Oct 5, 2018
- tests: always unlink created config files
  pks-t
  committed
  232fc46
- config_file: properly ignore includes without "path" value
  pks-t
  committed
  7493743
- submodule: add failing test for option-injection protection in url and path
  
  carlosmn
  authored and
  pks-t
  committed
  7e8d978
- submodule: ignore path and url attributes if they look like options
  
  carlosmn
  authored and
  pks-t
  committed
  b93e82d
- CHANGELOG: update for v0.26.7
  pks-t
  committed
  b1d3968
- version: raise to v0.26.7
  pks-t
  committed
  9102156

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Repository navigation

Security release v0.26.7 - #4835

Security release v0.26.7#4835
pks-t merged 28 commits into
libgit2:maint/v0.26from
pks-t:pks/v0.26.7

Commits on Oct 1, 2018

config: convert unbounded recursion into a loop

config: Fix a leak parsing multi-line config entries

config_parse: refactor error handling when parsing multiline variables

Prevent heap-buffer-overflow

Fix 'invalid packet line' for ng packets containing errors

Remove GIT_PKT_PACK entirely

Small style tweak, and set an error

smart: typedef git_pkt_type and clarify recv_pkt return type

Verify ref_pkt's are long enough

util: introduce `git__prefixncmp` and consolidate implementations

Commits on Oct 3, 2018

tests: verify parsing logic for smart packets

smart_pkt: honor line length when determining packet type

smart_pkt: explicitly avoid integer overflows when parsing packets

smart_pkt: check whether error packets are prefixed with "ERR "

smart_pkt: adjust style of "ref" packet parsing function

smart_pkt: fix buffer overflow when parsing "ACK" packets

smart_pkt: fix buffer overflow when parsing "ok" packets

smart_pkt: fix "ng" parser accepting non-space character

smart_pkt: fix buffer overflow when parsing "unpack" packets

smart_pkt: reorder and rename parameters of `git_pkt_parse_line`

smart_pkt: return parsed length via out-parameter

smart_pkt: do not accept callers passing in no line length

Commits on Oct 5, 2018

tests: always unlink created config files

config_file: properly ignore includes without "path" value

submodule: add failing test for option-injection protection in url and path

submodule: ignore path and url attributes if they look like options

CHANGELOG: update for v0.26.7

version: raise to v0.26.7