diff options
| author | Junio C Hamano <junkio@cox.net> | 2005-10-15 17:10:14 -0700 |
|---|---|---|
| committer | Junio C Hamano <junkio@cox.net> | 2005-10-15 17:10:14 -0700 |
| commit | 48bc2fb0cd9ca05005c2062c3493e62e13593f55 (patch) | |
| tree | 2c0bccb31f8215ae4b49f3b667e300e824792e0e | |
| parent | 652d5dc6c0aef842eafcd9d2f73a4836d20734e2 (diff) | |
| download | git-48bc2fb0cd9ca05005c2062c3493e62e13593f55.tar.gz git-48bc2fb0cd9ca05005c2062c3493e62e13593f55.tar.xz | |
Refuse to create funny refs in clone-pack, git-fetch and receive-pack.
Using git-check-ref-format, make sure we do not create refs with
funny names when cloning from elsewhere (clone-pack), fast forwarding
local heads (git-fetch), or somebody pushes into us (receive-pack).
Signed-off-by: Junio C Hamano <junkio@cox.net>
| -rw-r--r-- | clone-pack.c | 6 | ||||
| -rwxr-xr-x | git-parse-remote.sh | 6 | ||||
| -rw-r--r-- | receive-pack.c | 4 |
3 files changed, 16 insertions, 0 deletions
diff --git a/clone-pack.c b/clone-pack.c index c102ca885..48bee96a8 100644 --- a/clone-pack.c +++ b/clone-pack.c @@ -34,6 +34,12 @@ static void write_one_ref(struct ref *ref) int fd; char *hex; + if (!strncmp(ref->name, "refs/", 5) && + check_ref_format(ref->name + 5)) { + error("refusing to create funny ref '%s' locally", ref->name); + return; + } + if (safe_create_leading_directories(path)) die("unable to create leading directory for %s", ref->name); fd = open(path, O_CREAT | O_EXCL | O_WRONLY, 0666); diff --git a/git-parse-remote.sh b/git-parse-remote.sh index 4d8a572a9..32f10855b 100755 --- a/git-parse-remote.sh +++ b/git-parse-remote.sh @@ -94,6 +94,12 @@ canon_refs_list_for_fetch () { heads/* | tags/* ) local="refs/$local" ;; *) local="refs/heads/$local" ;; esac + + if local_ref_name=$(expr "$local" : 'refs/\(.*\)') + then + git-check-ref-format "$local_ref_name" || + die "* refusing to create funny ref '$local_ref_name' locally" + fi echo "${dot_prefix}${force}${remote}:${local}" dot_prefix=. done diff --git a/receive-pack.c b/receive-pack.c index 06857eb77..8f157bc3f 100644 --- a/receive-pack.c +++ b/receive-pack.c @@ -95,6 +95,10 @@ static int update(const char *name, char new_hex[60], *old_hex, *lock_name; int newfd, namelen, written; + if (!strncmp(name, "refs/", 5) && check_ref_format(name + 5)) + return error("refusing to create funny ref '%s' locally", + name); + namelen = strlen(name); lock_name = xmalloc(namelen + 10); memcpy(lock_name, name, namelen); |