Mercurial > hg
comparison tests/test-convert.t @ 29051:a56296f55a5e stable 3.8.1
convert: pass absolute paths to git (SEC)
Fixes CVE-2016-3105 (1/1).
Previously, it was possible for the repository path passed to git-ls-remote
to be misinterpreted as a URL.
Always passing an absolute path to git is a simple way to avoid this.
author | Blake Burkhart <bburky@bburky.com> |
---|---|
date | Wed, 06 Apr 2016 22:57:46 -0500 |
parents | 58f8b29c37ff |
children | 22c53b3a390d |
comparison
equal
deleted
inserted
replaced
29050:27ad6cae7785 | 29051:a56296f55a5e |
---|---|
420 | 420 |
421 $ PATH="$BINDIR" $PYTHON "$BINDIR"/hg convert emptydir | 421 $ PATH="$BINDIR" $PYTHON "$BINDIR"/hg convert emptydir |
422 assuming destination emptydir-hg | 422 assuming destination emptydir-hg |
423 initializing destination emptydir-hg repository | 423 initializing destination emptydir-hg repository |
424 emptydir does not look like a CVS checkout | 424 emptydir does not look like a CVS checkout |
425 emptydir does not look like a Git repository | 425 $TESTTMP/emptydir does not look like a Git repository |
426 emptydir does not look like a Subversion repository | 426 emptydir does not look like a Subversion repository |
427 emptydir is not a local Mercurial repository | 427 emptydir is not a local Mercurial repository |
428 emptydir does not look like a darcs repository | 428 emptydir does not look like a darcs repository |
429 emptydir does not look like a monotone repository | 429 emptydir does not look like a monotone repository |
430 emptydir does not look like a GNU Arch repository | 430 emptydir does not look like a GNU Arch repository |