]> git.ipfire.org Git - thirdparty/git.git/commit
Merge branch 'win32-accommodate-funny-drive-names'
authorJohannes Schindelin <johannes.schindelin@gmx.de>
Mon, 16 Sep 2019 11:26:40 +0000 (13:26 +0200)
committerJohannes Schindelin <johannes.schindelin@gmx.de>
Thu, 5 Dec 2019 14:37:09 +0000 (15:37 +0100)
commit2ddcccf97a717f9df17a4843c39e3c4f1df49fec
tree6d63983b124cf3793eee811811281ca131cebbb7
parent65d30a19de282d781c59bb7f807459cb5b29de1e
parentf82a97eb9197c1e3768e72648f37ce0ca3233734
Merge branch 'win32-accommodate-funny-drive-names'

While the only permitted drive letters for physical drives on Windows
are letters of the US-English alphabet, this restriction does not apply
to virtual drives assigned via `subst <letter>: <path>`.

To prevent targeted attacks against systems where "funny" drive letters
such as `1` or `!` are assigned, let's handle them as regular drive
letters on Windows.

This fixes CVE-2019-1351.

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
compat/mingw.c