thodg/libgit2/src

Diff

  • Show log

    Commit

  • Hash : 1a3fa1f5
    Author : Patrick Steinhardt
    Date : 2018-10-18T11:25:59 

    commit_list: avoid use of strtol64 without length limit

When quick-parsing a commit, we use `git__strtol64` to parse the
commit's time. The buffer that's passed to `commit_quick_parse` is the
raw data of an ODB object, though, whose data may not be properly
formatted and also does not have to be `NUL` terminated. This may lead
to out-of-bound reads.

Use `git__strntol64` to avoid this problem.

kmx.io     mail     discord kmxgit v0.4.0