mirrors/git
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'jk/pack-idx-corruption-safety'

Browse Source 
The code to read the pack data using the offsets stored in the pack
idx file has been made more carefully check the validity of the
data in the idx.

* jk/pack-idx-corruption-safety:
  sha1_file.c: mark strings for translation
  use_pack: handle signed off_t overflow
  nth_packed_object_offset: bounds-check extended offset
  t5313: test bounds-checks of corrupted/malicious pack/idx files
This commit is contained in:
Junio C Hamano
2016-03-04 13:45:46 -08:00
parent bc0ffd41b9 7465feba51
commit 090de6b289
4 changed files with 207 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
builtin/index-pack.c
View File

@ -1514,6 +1514,7 @@ static void read_v2_anomalous_offsets(struct packed_git *p,
if (!(off & 0x80000000))
continue;
off = off & 0x7fffffff;
check_pack_index_ptr(p, &idx2[off * 2]);
if (idx2[off * 2])
continue;
/*