]> git.ipfire.org Git - thirdparty/git.git/commitdiff
Merge branch 'tb/config-copy-or-rename-in-file-injection'
authorTaylor Blau <me@ttaylorr.com>
Fri, 14 Apr 2023 15:46:59 +0000 (11:46 -0400)
committerJohannes Schindelin <johannes.schindelin@gmx.de>
Mon, 17 Apr 2023 19:15:42 +0000 (21:15 +0200)
Avoids issues with renaming or deleting sections with long lines, where
configuration values may be interpreted as sections, leading to
configuration injection. Addresses CVE-2023-29007.

* tb/config-copy-or-rename-in-file-injection:
  config.c: disallow overly-long lines in `copy_or_rename_section_in_file()`
  config.c: avoid integer truncation in `copy_or_rename_section_in_file()`
  config: avoid fixed-sized buffer when renaming/deleting a section
  t1300: demonstrate failure when renaming sections with long lines

Signed-off-by: Taylor Blau <me@ttaylorr.com>

Trivial merge