branch: restrict @-expansions when deleting
We use strbuf_branchname() to expand the branch name from the command line, so you can delete the branch given by @{-1}, for example. However, we allow other nonsense like "@", and we do not respect our "-r" flag (so we may end up deleting an oddly-named local ref instead of a remote one). We can fix this by passing the appropriate "allowed" flag to strbuf_branchname(). Signed-off-by: Jeff King <peff@peff.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>
This commit is contained in:

committed by
Junio C Hamano

parent
a356e8e2a7
commit
6b145e016a
@ -190,17 +190,20 @@ static int delete_branches(int argc, const char **argv, int force, int kinds,
|
||||
int ret = 0;
|
||||
int remote_branch = 0;
|
||||
struct strbuf bname = STRBUF_INIT;
|
||||
unsigned allowed_interpret;
|
||||
|
||||
switch (kinds) {
|
||||
case FILTER_REFS_REMOTES:
|
||||
fmt = "refs/remotes/%s";
|
||||
/* For subsequent UI messages */
|
||||
remote_branch = 1;
|
||||
allowed_interpret = INTERPRET_BRANCH_REMOTE;
|
||||
|
||||
force = 1;
|
||||
break;
|
||||
case FILTER_REFS_BRANCHES:
|
||||
fmt = "refs/heads/%s";
|
||||
allowed_interpret = INTERPRET_BRANCH_LOCAL;
|
||||
break;
|
||||
default:
|
||||
die(_("cannot use -a with -d"));
|
||||
@ -215,7 +218,7 @@ static int delete_branches(int argc, const char **argv, int force, int kinds,
|
||||
char *target = NULL;
|
||||
int flags = 0;
|
||||
|
||||
strbuf_branchname(&bname, argv[i], 0);
|
||||
strbuf_branchname(&bname, argv[i], allowed_interpret);
|
||||
free(name);
|
||||
name = mkpathdup(fmt, bname.buf);
|
||||
|
||||
|
Reference in New Issue
Block a user