[v2,0/2] Harden url.c URL-decoding logic

Message ID	cover.1559670300.git.matvore@google.com (mailing list archive)
Headers	show Return-Path: <git-owner@kernel.org> Date: Tue, 4 Jun 2019 10:57:03 -0700 Message-Id: <cover.1559670300.git.matvore@google.com> Mime-Version: 1.0 Subject: [PATCH v2 0/2] Harden url.c URL-decoding logic From: Matthew DeVore <matvore@google.com> To: git@vger.kernel.org Cc: Matthew DeVore <matvore@google.com>, sandals@crustytoothpaste.net, jeffhostetler@microsoft.com, l.s.r@web.de, gitster@pobox.com, spearce@spearce.org, jrn@google.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Sender: git-owner@vger.kernel.org Precedence: bulk
Series	Harden url.c URL-decoding logic \| expand [v2,0/2] Harden url.c URL-decoding logic [v2,1/2] url: do not read past end of buffer [v2,2/2] url: do not allow %00 to represent NUL in URLs

Message ID

cover.1559670300.git.matvore@google.com (mailing list archive)

Headers

Date: Tue,  4 Jun 2019 10:57:03 -0700
Message-Id: <cover.1559670300.git.matvore@google.com>
Mime-Version: 1.0
Subject: [PATCH v2 0/2] Harden url.c URL-decoding logic
From: Matthew DeVore <matvore@google.com>
To: git@vger.kernel.org
Cc: Matthew DeVore <matvore@google.com>, sandals@crustytoothpaste.net,
        jeffhostetler@microsoft.com, l.s.r@web.de, gitster@pobox.com,
        spearce@spearce.org, jrn@google.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Sender: git-owner@vger.kernel.org
Precedence: bulk

Series

Harden url.c URL-decoding logic | expand

Message

Matthew DeVore June 4, 2019, 5:57 p.m. UTC

This roll-up includes simple but important fixes from Brian Carlson and René
Scharfe.

 - fix typo of "NUL" in commit heading
 - re-enable %-decoding in non-NULL-terminated strings

Matthew DeVore (2):
  url: do not read past end of buffer
  url: do not allow %00 to represent NUL in URLs

 url.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comments

Matthew DeVore June 4, 2019, 9:13 p.m. UTC | #1

First message had incorrect recipient list. Re-sending with non-typo'd Jeff's
e-mail address.

Someone also politely reminded me off-band that I should make subsequent
versions of patchsets be respond-to on the cover-letter of v1 of that patchset.
I will do that from next time.