diff options
author | Matheus Tavares <matheus.bernardino@usp.br> | 2020-01-16 05:39:51 +0300 |
---|---|---|
committer | Junio C Hamano <gitster@pobox.com> | 2020-01-18 00:52:14 +0300 |
commit | d5b0bac52841857b5ba197ca931ecf729fdbc63e (patch) | |
tree | c62f4c933d0c0f79cde157c53c081308f624f2d9 /builtin/grep.c | |
parent | faf123c730df1a545e2dc7ca82fd437e93fc519c (diff) |
grep: fix racy calls in grep_objects()
deref_tag() calls is_promisor_object() and parse_object(), both of which
perform lazy initializations and other thread-unsafe operations. If it
was only called by grep_objects() this wouldn't be a problem as the
latter is only executed by the main thread. However, deref_tag() is also
present in read_object_file()'s call stack. So calling deref_tag() in
grep_objects() without acquiring the grep_read_mutex may incur in a race
condition with object reading operations (such as the ones internally
performed by fill_textconv(), called at fill_textconv_grep()). The same
problem happens with the call to gitmodules_config_oid() which also has
parse_object() in its call stack. Fix that protecting both calls with
the said grep_read_mutex.
Signed-off-by: Matheus Tavares <matheus.bernardino@usp.br>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'builtin/grep.c')
-rw-r--r-- | builtin/grep.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/builtin/grep.c b/builtin/grep.c index 896e7effcea..91fc032a324 100644 --- a/builtin/grep.c +++ b/builtin/grep.c @@ -658,13 +658,18 @@ static int grep_objects(struct grep_opt *opt, const struct pathspec *pathspec, for (i = 0; i < nr; i++) { struct object *real_obj; + + grep_read_lock(); real_obj = deref_tag(opt->repo, list->objects[i].item, NULL, 0); + grep_read_unlock(); /* load the gitmodules file for this rev */ if (recurse_submodules) { submodule_free(opt->repo); + grep_read_lock(); gitmodules_config_oid(&real_obj->oid); + grep_read_unlock(); } if (grep_object(opt, pathspec, real_obj, list->objects[i].name, list->objects[i].path)) { |