Welcome to mirror list, hosted at ThFree Co, Russian Federation.

gitlab.com/gitlab-org/gitaly.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-21Version 1.65.2v1.65.21-65-stableJacob Vosmaer
2019-11-21Merge branch 'security-limit-rpc-negotiation-phase-1-65' into '1-65-stable'Jacob Vosmaer
Limit the negotiation phase for certain Gitaly RPCs See merge request gitlab/gitaly!47
2019-11-21Limit the negotiation phase for certain Gitaly RPCsNick Thomas
In most cases, Gitaly trusts that the caller of the RPC has validated that the user is permitted to perform the action represented by the RPC and doesn't repeat any access control checks. Where an RPC reads data from a client-controlled stream before acting, the time between the check and the operation can be artificially extended. This can lead to security issues where Solve this by placing a limit on the *negotiation phase* of two RPCs that are known to be vulnerable: * ssh.SSHUploadPack * ssh.SSHUploadArchive These RPCs are known not to be vulnerable, for one reason or another: * ssh.SSHReceivePack * smarthttp.ReceivePack The smarthttp.UploadPack RPC is vulnerable, but the vulnerability is being handled in Workhorse.
2019-10-24Merge branch 'fix-protoc-gen-gitaly-1-65' into '1-65-stable'John Cai
Fix protoc-gen-gitaly in 1-65-stable See merge request gitlab-org/gitaly!1581
2019-10-24Fix protoc-gen-gitaly in 1-65-stableJacob Vosmaer
2019-09-23Version 1.65.1v1.65.1Paul Okstad
2019-09-23Merge branch 'security-backport-39' into '1-65-stable'John Cai
Backport !39 into 1-65-stable See merge request gitlab/gitaly!43
2019-09-23Backport !39 into 1-65-stablePaul Okstad
2019-09-23Fix SearchFilesByContent RPC flag injectionPaul Okstad
2019-09-18Version 1.65.0v1.65.0Jacob Vosmaer
2019-09-18Merge branch 'jv-walker-nil-checks' into 'master'Zeger-Jan van de Weg
Prevent nil panics in housekeeping.Perform See merge request gitlab-org/gitaly!1492
2019-09-18Prevent nil panics in housekeeping.PerformJacob Vosmaer
2019-09-18Merge branch 'sh-upgrade-rouge-3.11.0' into 'master'Paul Okstad
Upgrade Rouge to v3.11.0 See merge request gitlab-org/gitaly!1493
2019-09-18Merge branch 'zj-label-issue-template' into 'master'Paul Okstad
Labels update in the feature flag issue template See merge request gitlab-org/gitaly!1489
2019-09-18Merge branch 'po-git-dsl' into 'master'John Cai
Git command DSL Closes #1996, #1991, and #1847 See merge request gitlab-org/gitaly!1476
2019-09-18Git command DSLPaul Okstad
2019-09-17Upgrade Rouge to v3.11.0Stan Hu
This fixes the JSON parser bug present in v3.8.0+(https://github.com/rouge-ruby/rouge/issues/1330) and adds support for a number of new lexers.
2019-09-17Merge branch 'po-demo-fix-replication' into 'master'Paul Okstad
Replicator fixes from demo See merge request gitlab-org/gitaly!1487
2019-09-17Fix replicator bug due to bad mergePaul Okstad
Add tests as well to give coverage to the processReplJob method
2019-09-17Merge branch 'jv-document-elk-latency' into 'master'Paul Okstad
Add documentation snippet for ELK graphs See merge request gitlab-org/gitaly!1491
2019-09-17Add documentation snippet for ELK graphsJacob Vosmaer
2019-09-16Merge branch 'zj-update-downstreamer' into 'master'John Cai
Update downstream script to single code base See merge request gitlab-org/gitaly!1488
2019-09-16Labels update in the feature flag issue templateZeger-Jan van de Weg
2019-09-16Update downstream script to single code baseZeger-Jan van de Weg
2019-09-13Merge branch 'zj-commit-feature-flag' into 'master'John Cai
Remove get-commit-signatures feature flag Closes #1604 and #1921 See merge request gitlab-org/gitaly!1484
2019-09-13Merge branch 'jc-add-replication-latency' into 'master'John Cai
Measure replication latency Closes #1882 See merge request gitlab-org/gitaly!1481
2019-09-13Measure replication latencyJohn Cai
2019-09-13Version 1.64.0v1.64.01-64-stableZeger-Jan van de Weg
2019-09-13Merge branch 'po-deprecation-warnings' into 'master'Zeger-Jan van de Weg
Add dedicated CI job for deprecation warnings See merge request gitlab-org/gitaly!1480
2019-09-13Add dedicated CI job for deprecation warningsPaul Okstad
2019-09-13Merge branch 'add-first-parent-to-find-commits' into 'master'John Cai
Add first_parent to find-commits and count-commits See merge request gitlab-org/gitaly!1463
2019-09-13Add first_parent to find-commits and count-commitsJohan Henkens
2019-09-12Fix mktree not having an authroZeger-Jan van de Weg
Allows me to run this test locally again, as we dynamically set an author now.
2019-09-12Remove get-commit-signature feature flagZeger-Jan van de Weg
Rewritten to go, behind a feature flag in: https://gitlab.com/gitlab-org/gitaly/issues/1604 The go code works great on production, so the feature flag can be removed. Closes https://gitlab.com/gitlab-org/gitaly/issues/1604
2019-09-12Merge branch 'jc-confirm-checksums' into 'master'Zeger-Jan van de Weg
Confirm checksums after replication Closes #1922 See merge request gitlab-org/gitaly!1479
2019-09-12Merge branch 'jc-fix-publish-script' into 'master'Zeger-Jan van de Weg
Fix publish script See merge request gitlab-org/gitaly!1478
2019-09-12Confirm checksums after replicationJohn Cai
2019-09-11Merge branch 'zj-set-git-ident-tests-remoteservice' into 'master'John Cai
Use testhelper.CreateTag to have a Git ident See merge request gitlab-org/gitaly!1474
2019-09-11Merge branch 'sh-update-rouge' into 'master'John Cai
Update Rouge to v3.10.0 See merge request gitlab-org/gitaly!1475
2019-09-10Fix publish scriptJohn Cai
2019-09-10Version 1.63.0v1.63.01-63-stableJohn Cai
2019-09-10Merge branch 'jc-fix-attributes-perm-changelog-entry' into 'master'Zeger-Jan van de Weg
Removing @ in author line for changelog entry See merge request gitlab-org/gitaly!1477
2019-09-10Removing @ in author line for changelog entryJohn Cai
2019-09-06Merge branch 'jc-rename-repository' into 'master'Paul Okstad
RenameRepository RPC Closes #1912 See merge request gitlab-org/gitaly!1471
2019-09-06Update Rouge to v3.10.0Stan Hu
This keeps the version used in Gitaly consistent with CE/EE to save a little space.
2019-09-06Add RenameRepository RPCJohn Cai
2019-09-06Use testhelper.CreateTag to have a Git identZeger-Jan van de Weg
Locally I can't run some tests as Git would like to know the identity of the user creating new objects. In my case these object creations get the following message: ``` testhelper.go:184: *** Please tell me who you are. Run git config --global user.email "you@example.com" git config --global user.name "Your Name" to set your account's default identity. Omit --global to set the identity only in this repository. fatal: empty ident name (for <zegerjan@callisto.localdomain>) not allowed ``` Now, this leverages system packages on the Git side to determine the identname. In our case I think the best way to move forward is just to use the `testhelper.CreateTag()`, which sets the ident for us.
2019-09-06Merge branch 'jc-remove-repository' into 'master'Paul Okstad
Add RemoveRepository RPC Closes #1908 See merge request gitlab-org/gitaly!1470
2019-09-05Merge branch 'attribute-perm' into 'master'Paul Okstad
Maintain permissions for attribute file while applying attribute Closes #1855 See merge request gitlab-org/gitaly!1466
2019-09-05Maintain permissions for attribute file while applying attributeNilesh Kevlani