diff options
author | Junio C Hamano <gitster@pobox.com> | 2020-01-22 15:07:31 -0800 |
---|---|---|
committer | Junio C Hamano <gitster@pobox.com> | 2020-01-22 15:07:31 -0800 |
commit | 36da2a86352cf9db5796dc3d81e8a5571cd5647b (patch) | |
tree | d388da3d082ffbeda7dc4d327bec1d9e9c14722c | |
parent | Merge branch 'bc/run-command-nullness-after-free-fix' (diff) | |
parent | unpack-trees: watch for out-of-range index position (diff) | |
download | tgif-36da2a86352cf9db5796dc3d81e8a5571cd5647b.tar.xz |
Merge branch 'es/unpack-trees-oob-fix'
The code that tries to skip over the entries for the paths in a
single directory using the cache-tree was not careful enough
against corrupt index file.
* es/unpack-trees-oob-fix:
unpack-trees: watch for out-of-range index position
-rw-r--r-- | unpack-trees.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/unpack-trees.c b/unpack-trees.c index 4c68dbdb43..d5f4d997da 100644 --- a/unpack-trees.c +++ b/unpack-trees.c @@ -696,9 +696,11 @@ static int index_pos_by_traverse_info(struct name_entry *names, if (pos >= 0) BUG("This is a directory and should not exist in index"); pos = -pos - 1; - if (!starts_with(o->src_index->cache[pos]->name, name.buf) || + if (pos >= o->src_index->cache_nr || + !starts_with(o->src_index->cache[pos]->name, name.buf) || (pos > 0 && starts_with(o->src_index->cache[pos-1]->name, name.buf))) - BUG("pos must point at the first entry in this directory"); + BUG("pos %d doesn't point to the first entry of %s in index", + pos, name.buf); strbuf_release(&name); return pos; } |