Welcome to mirror list, hosted at ThFree Co, Russian Federation.

git.zx2c4.com/cgit.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2018-08-03 16:46:11 +0300
committerJason A. Donenfeld <Jason@zx2c4.com>2018-08-03 18:04:03 +0300
commit53efaf30b50f095cad8c160488c74bba3e3b2680 (patch)
tree48c0be88bfef03400ddd4b3871baf9de9dbe0b77 /parsing.c
parentc679d9010451b986bae719a6abe0458af2b2dfb9 (diff)
clone: fix directory traversal
This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com>
Diffstat (limited to 'parsing.c')
0 files changed, 0 insertions, 0 deletions