From: Johannes Schindelin Date: Mon, 16 Sep 2019 11:26:40 +0000 (+0200) Subject: Merge branch 'fix-mingw-quoting-bug' X-Git-Tag: v2.24.1~1^2~1^2~1^2~3^2~3^2~1^2~1^2~2^2~2^2~2^2~3 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5532ebdeb7ac56d952addb94ea9741d3c8f5b6f6;p=thirdparty%2Fgit.git Merge branch 'fix-mingw-quoting-bug' This patch fixes a vulnerability in the Windows-specific code where a submodule names ending in a backslash were quoted incorrectly, and that bug could be abused to insert command-line parameters e.g. to `ssh` in a recursive clone. Note: this bug is Windows-only, as we have to construct a command line for the process-to-spawn, unlike Linux/macOS, where `execv()` accepts an already-split command line. While at it, other quoting issues are fixed as well. Signed-off-by: Johannes Schindelin --- 5532ebdeb7ac56d952addb94ea9741d3c8f5b6f6