git.99rst.org / git.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: e694ea5 d37dc23)
Merge branch 'md/url-parse-harden'
authorJunio C Hamano <redacted>
Fri, 21 Jun 2019 18:24:12 +0000 (11:24 -0700)
committerJunio C Hamano <redacted>
Fri, 21 Jun 2019 18:24:12 +0000 (11:24 -0700)
commitf9089e8491fdf50d941f071552872e7cca0e2e04
treeab8824d37b8f1d178f41ee5f6aa142aef0bef09ctree | snapshot
parente694ea5e04ea2cabc64ade337063b5562810b268commit | diff
parentd37dc239a427a367427f9c4fdf12a148ad811968commit | diff
Merge branch 'md/url-parse-harden'

The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.

* md/url-parse-harden:
  url: do not allow %00 to represent NUL in URLs
  url: do not read past end of buffer
git clone https://git.99rst.org/PROJECT