thodg/libgit2/src

Diff

  • Show log

    Commit

  • Hash : f647bbc8
    Author : Patrick Steinhardt
    Date : 2018-10-29T17:25:09 

    tree: fix mode parsing reading out-of-bounds

When parsing a tree entry's mode, we will eagerly parse until we hit a
character that is not in the accepted set of octal digits '0' - '7'. If
the provided buffer is not a NUL terminated one, we may thus read
out-of-bounds.

Fix the issue by passing the buffer length to `parse_mode` and paying
attention to it. Note that this is not a vulnerability in our usual code
paths, as all object data read from the ODB is NUL terminated.

kmx.io     mail     discord kmxgit v0.4.0