Revision 32c6dca8c428672c11a2a0ddf3cb2f7476caff86 authored by Junio C Hamano on 17 March 2016, 16:55:54 UTC, committed by Junio C Hamano on 17 March 2016, 18:22:24 UTC
Bugfix patches were backported from the 'master' front to plug heap
corruption holes, to catch integer overflow in the computation of
pathname lengths, and to get rid of the name_path API.  Both of
these would have resulted in writing over an under-allocated buffer
when formulating pathnames while tree traversal.

* jk/path-name-safety-2.4:
  list-objects: pass full pathname to callbacks
  list-objects: drop name_path entirely
  list-objects: convert name_path to a strbuf
  show_object_with_name: simplify by using path_name()
  http-push: stop using name_path
  tree-diff: catch integer overflow in combine_diff_path allocation
  add helpers for detecting size_t overflow
2 parent s a2558fb + 2824e18
History
File Mode Size
bitmap.c -rw-r--r-- 5.0 KB
ewah_bitmap.c -rw-r--r-- 16.2 KB
ewah_io.c -rw-r--r-- 5.2 KB
ewah_rlw.c -rw-r--r-- 2.9 KB
ewok.h -rw-r--r-- 6.6 KB
ewok_rlw.h -rw-r--r-- 3.1 KB

back to top