From: Junio C Hamano <gitster@pobox.com>
Date: Fri, 21 Jun 2019 18:24:12 +0000 (-0700)
Subject: Merge branch 'md/url-parse-harden'
X-Git-Tag: v2.23.0-rc0~98
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f9089e8491fdf50d941f071552872e7cca0e2e04;p=thirdparty%2Fgit.git

Merge branch 'md/url-parse-harden'

The URL decoding code has been updated to avoid going past the end
of the string while parsing %-<hex>-<hex> sequence.

* md/url-parse-harden:
  url: do not allow %00 to represent NUL in URLs
  url: do not read past end of buffer
---

f9089e8491fdf50d941f071552872e7cca0e2e04