| commit | 65d30a19de282d781c59bb7f807459cb5b29de1e | |
| author | Johannes Schindelin <johannes.schindelin@gmx.de> | |
| Mon, 16 Sep 2019 11:26:40 +0000 (16 13:26 +0200) | ||
| committer | Johannes Schindelin <johannes.schindelin@gmx.de> | |
| Thu, 5 Dec 2019 14:37:09 +0000 (5 15:37 +0100) | ||
| tree | ce238c2e1919a98b6079d1d81c69d3e464d754c9 | treesnapshot (tar.gz zip) |
| parent | 5532ebdeb7ac56d952addb94ea9741d3c8f5b6f6 | commitdiff |
| parent | d2c84dad1c88f40906799bc879f70b965efd8ba6 | commitdiff |
Merge branch 'win32-filenames-cannot-have-trailing-spaces-or-periods'
On Windows, filenames cannot have trailing spaces or periods, when
opening such paths, they are stripped automatically. Read: you can open
the file `README` via the file name `README . . .`. This ambiguity can
be used in combination with other security bugs to cause e.g. remote
code execution during recursive clones. This patch series fixes that.
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
On Windows, filenames cannot have trailing spaces or periods, when
opening such paths, they are stripped automatically. Read: you can open
the file `README` via the file name `README . . .`. This ambiguity can
be used in combination with other security bugs to cause e.g. remote
code execution during recursive clones. This patch series fixes that.
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
| compat/mingw.c | diff1 | diff2 | blobhistory |
| t/t7415-submodule-names.sh | diff1 | diff2 | blobhistory |