Mercurial > hg
comparison tests/test-convert.t @ 29051:a56296f55a5e stable 3.8.1
convert: pass absolute paths to git (SEC)
Fixes CVE-2016-3105 (1/1).
Previously, it was possible for the repository path passed to git-ls-remote
to be misinterpreted as a URL.
Always passing an absolute path to git is a simple way to avoid this.
| author | Blake Burkhart <bburky@bburky.com> |
|---|---|
| date | Wed, 06 Apr 2016 22:57:46 -0500 |
| parents | 58f8b29c37ff |
| children | 22c53b3a390d |
comparison
equal
deleted
inserted
replaced
| 29050:27ad6cae7785 | 29051:a56296f55a5e |
|---|---|
| 420 | 420 |
| 421 $ PATH="$BINDIR" $PYTHON "$BINDIR"/hg convert emptydir | 421 $ PATH="$BINDIR" $PYTHON "$BINDIR"/hg convert emptydir |
| 422 assuming destination emptydir-hg | 422 assuming destination emptydir-hg |
| 423 initializing destination emptydir-hg repository | 423 initializing destination emptydir-hg repository |
| 424 emptydir does not look like a CVS checkout | 424 emptydir does not look like a CVS checkout |
| 425 emptydir does not look like a Git repository | 425 $TESTTMP/emptydir does not look like a Git repository |
| 426 emptydir does not look like a Subversion repository | 426 emptydir does not look like a Subversion repository |
| 427 emptydir is not a local Mercurial repository | 427 emptydir is not a local Mercurial repository |
| 428 emptydir does not look like a darcs repository | 428 emptydir does not look like a darcs repository |
| 429 emptydir does not look like a monotone repository | 429 emptydir does not look like a monotone repository |
| 430 emptydir does not look like a GNU Arch repository | 430 emptydir does not look like a GNU Arch repository |