thodg/libgit2/src

Diff

  • Show log

    Commit

  • Hash : 76e57b4e
    Author : Patrick Steinhardt
    Date : 2018-10-18T11:29:06 

    index: avoid out-of-bounds read when reading reuc entry stage

We use `git__strtol64` to parse file modes of the index entries, which
does not limit the parsed buffer length. As the index can be essentially
treated as "untrusted" in that the data stems from the file system, it
may be misformatted and may not contain terminating `NUL` bytes. This
may lead to out-of-bounds reads when trying to parse index entries with
such malformatted modes.

Fix the issue by using `git__strntol64` instead.

(cherry picked from commit 600ceadd1426b874ae0618651210a690a68b27e9)

kmx.io     mail     discord kmxgit v0.4.0