delta/patch.git - git.savannah.gnu.org: git/patch.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	maint: update all copyright year number ranges	Jim Meyering	2012-01-01	1	-1/+1
\| \| \| \|	Run "make update-copyright".
*	don't warn twice about the same invalid file name	Jim Meyering	2011-02-17	1	-0/+24
\| \| \| \| \|	* src/pch.c (name_is_valid): Don't warn about the same name twice. * tests/bad-filenames (emit_patch): Exercise the new code.
*	Ignore dangerous filenames instead of failing immediately	Andreas Gruenbacher	2011-02-16	1	-15/+82
\| \| \| \| \| \| \| \| \| \|	* src/pch.c (name_is_valid): New function. (intuit_diff_type, best_name): Use name_is_valid() here. (strip_leading_slashes): Remove name validation tests from here. * tests/bad-filenames: Add more tests for covering more of the file name guessing corner cases in intuit_diff_type(), update the existing tests. * NEWS: Update.
*	Do not let a malicious patch create files above current directory	Jim Meyering	2011-02-03	1	-0/+49
	This addresses CVE-2010-4651, reported by Jakub Wilk. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4651 * src/util.c (strip_leading_slashes): Reject absolute file names and file names containing a component of "..". * tests/bad-filenames: New file. Test for this. * tests/Makefile.am (TESTS): Add it. Improvements by Andreas Gruenbacher.