| commit | f9089e8491fdf50d941f071552872e7cca0e2e04 | |
| author | Junio C Hamano <gitster@pobox.com> | |
| Fri, 21 Jun 2019 18:24:12 +0000 (21 11:24 -0700) | ||
| committer | Junio C Hamano <gitster@pobox.com> | |
| Fri, 21 Jun 2019 18:24:12 +0000 (21 11:24 -0700) | ||
| tree | ab8824d37b8f1d178f41ee5f6aa142aef0bef09c | treesnapshot (tar.gz zip) |
| parent | e694ea5e04ea2cabc64ade337063b5562810b268 | commitdiff |
| parent | d37dc239a427a367427f9c4fdf12a148ad811968 | commitdiff |
Merge branch 'md/url-parse-harden'
The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.
* md/url-parse-harden:
url: do not allow %00 to represent NUL in URLs
url: do not read past end of buffer
The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.
* md/url-parse-harden:
url: do not allow %00 to represent NUL in URLs
url: do not read past end of buffer