]> git.ipfire.org Git - thirdparty/git.git/commit - credential-cache--daemon.c
credential-cache--daemon: disallow relative socket path
authorJon Griffiths <jon_p_griffiths@yahoo.com>
Tue, 23 Feb 2016 07:15:41 +0000 (02:15 -0500)
committerJunio C Hamano <gitster@pobox.com>
Tue, 23 Feb 2016 20:56:27 +0000 (12:56 -0800)
commitbd93b8d9becb01d21871b63e34c2e824c60b1e8c
treec4cd9322a3d3a18f0a1ebf1480870d667521e942
parenta6e5e2864f96ebce9ec6656841c8965bcdf1b37f
credential-cache--daemon: disallow relative socket path

Relative socket paths are dangerous since the user cannot generally
control when the daemon starts (initially, after a timeout, kill or
crash). Since the daemon creates but does not delete the socket
directory, this could lead to spurious directory creation relative
to the users cwd.

Suggested-by: Jeff King <peff@peff.net>
Signed-off-by: Jon Griffiths <jon_p_griffiths@yahoo.com>
Signed-off-by: Jeff King <peff@peff.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Documentation/git-credential-cache.txt
credential-cache--daemon.c