summaryrefslogtreecommitdiffstats
path: root/contrib/persistent-https
diff options
context:
space:
mode:
authorChristian Couder <christian.couder@gmail.com>2026-04-07 13:52:37 +0200
committerJunio C Hamano <gitster@pobox.com>2026-04-07 08:45:43 -0700
commit3b4f0403d19738a26f0da58f4efc6f4e2473fcac (patch)
treecadeed1c6875e279ed9154a5e788ae97adf1fe31 /contrib/persistent-https
parent4ed9283b36bc8652954578c3024a00b6e70f8960 (diff)
downloadgit-3b4f0403d19738a26f0da58f4efc6f4e2473fcac.tar.gz
git-3b4f0403d19738a26f0da58f4efc6f4e2473fcac.zip
promisor-remote: reject empty name or URL in advertised remote
In parse_one_advertised_remote(), we check for a NULL remote name and remote URL, but not for empty ones. An empty URL seems possible as url_percent_decode("") doesn't return NULL. In promisor_config_info_list(), we ignore remotes with empty URLs, so a Git server should not advertise remotes with empty URLs. It's possible that a buggy or malicious server would do it though. So let's tighten the check in parse_one_advertised_remote() to also reject empty strings at parse time. Signed-off-by: Christian Couder <chriscool@tuxfamily.org> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'contrib/persistent-https')
0 files changed, 0 insertions, 0 deletions