git.99rst.org / git.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: 167d02a d37dc23)
Merge branch 'md/url-parse-harden' into maint
authorJunio C Hamano <redacted>
Thu, 25 Jul 2019 21:27:13 +0000 (14:27 -0700)
committerJunio C Hamano <redacted>
Thu, 25 Jul 2019 21:27:13 +0000 (14:27 -0700)
The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.

* md/url-parse-harden:
  url: do not allow %00 to represent NUL in URLs
  url: do not read past end of buffer


Trivial merge
git clone https://git.99rst.org/PROJECT