summaryrefslogtreecommitdiff
path: root/builtin/merge-base.c
diff options
context:
space:
mode:
authorLibravatar Junio C Hamano <gitster@pobox.com>2015-01-30 15:34:13 -0800
committerLibravatar Junio C Hamano <gitster@pobox.com>2015-02-10 13:41:39 -0800
commitfdc2c3a926c21e24986677abd02c8bc568a5de32 (patch)
tree1ee77daa3090efe28fa2fc2659863fba6e2793d3 /builtin/merge-base.c
parentapply: do not read from the filesystem under --index (diff)
downloadtgif-fdc2c3a926c21e24986677abd02c8bc568a5de32.tar.xz
apply: do not read from beyond a symbolic link
We should reject a patch, whether it renames/copies dir/file to elsewhere with or without modificiation, or updates dir/file in place, if "dir/" part is actually a symbolic link to elsewhere, by making sure that the code to read the preimage does not read from a path that is beyond a symbolic link. Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'builtin/merge-base.c')
0 files changed, 0 insertions, 0 deletions