proxmox-mirrors/libgit2
1
0
Fork 0
mirror of https://git.proxmox.com/git/libgit2 synced 2025-05-06 01:45:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed a parsing issue in git_prettify_dir_path().

Browse Source
This commit is contained in:
nulltoken 2011-01-22 14:04:32 +01:00 committed by Vicent Marti
parent b29e8f1930
commit ae7ffea961
2 changed files with 50 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
src/fileops.c
View File

@ -394,8 +394,9 @@ static int retrieve_previous_path_component_start(const char *path)
int git_prettify_dir_path(char *buffer_out, const char *path)
{
int len = 0;
char *current;
char *current, *end;
const char *buffer_out_start, *buffer_end;
int only_dots;
buffer_out_start = buffer_out;
current = (char *)path;
@ -408,40 +409,52 @@ int git_prettify_dir_path(char *buffer_out, const char *path)
continue;
}
end = current;
only_dots = 1;
/* Seek end of path segment */
while (end < buffer_end && *end !='/')
{
only_dots &= (*end == '.');
end++;
}
/* Skip current directory */
if (*current == '.') {
current++;
/* Handle the double-dot upward directory navigation */
if (current < buffer_end && *current == '.') {
current++;
/* Guard against potential multiple dot path traversal (cf http://cwe.mitre.org/data/definitions/33.html) */
if (*current == '.')
return GIT_ERROR;
*buffer_out ='\0';
len = retrieve_previous_path_component_start(buffer_out_start);
if (len < GIT_SUCCESS)
return GIT_ERROR;
buffer_out = (char *)buffer_out_start + len;
}
if (current < buffer_end && *current == '/')
current++;
if (only_dots && end == current + 1)
{
current += 2;
continue;
}
*buffer_out++ = *current++;
/* Handle the double-dot upward directory navigation */
if (only_dots && end == current + 2)
{
*buffer_out ='\0';
len = retrieve_previous_path_component_start(buffer_out_start);
if (len < GIT_SUCCESS)
return GIT_ERROR;
buffer_out = (char *)buffer_out_start + len;
current += 3;
continue;
}
/* Guard against potential multiple dot path traversal (cf http://cwe.mitre.org/data/definitions/33.html) */
if (only_dots && end > current)
return GIT_ERROR;
/* Copy to output the path segment */
while (current < end)
{
*buffer_out++ = *current++;
len++;
}
*buffer_out++ = '/';
len++;
}
/* Add a trailing slash if required */
if (len > 0 && buffer_out_start[len-1] != '/')
*buffer_out++ = '/';
*buffer_out = '\0';
return GIT_SUCCESS;

10
tests/t0005-path.c
View File

@ -20,6 +20,10 @@ static int ensure_normalized(const char *input_path, const char *expected_path)
}
BEGIN_TEST(path_prettifying)
must_pass(ensure_normalized("./testrepo.git", "testrepo.git/"));
must_pass(ensure_normalized("./.git", ".git/"));
must_pass(ensure_normalized("./git.", "git./"));
must_pass(ensure_normalized("git./", "git./"));
must_pass(ensure_normalized("", ""));
must_pass(ensure_normalized(".", ""));
must_pass(ensure_normalized("./", ""));
@ -53,7 +57,11 @@ BEGIN_TEST(path_prettifying)
must_fail(ensure_normalized("d1/...", NULL));
must_fail(ensure_normalized("d1/.../", NULL));
must_fail(ensure_normalized("d1/.../d2", NULL));
must_pass(ensure_normalized("/./testrepo.git", "/testrepo.git/"));
must_pass(ensure_normalized("/./.git", "/.git/"));
must_pass(ensure_normalized("/./git.", "/git./"));
must_pass(ensure_normalized("/git./", "/git./"));
must_pass(ensure_normalized("/", "/"));
must_pass(ensure_normalized("//", "/"));
must_pass(ensure_normalized("///", "/"));