diff options
| author | Christian Couder <christian.couder@gmail.com> | 2026-04-07 13:52:37 +0200 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2026-04-07 08:45:43 -0700 |
| commit | 3b4f0403d19738a26f0da58f4efc6f4e2473fcac (patch) | |
| tree | cadeed1c6875e279ed9154a5e788ae97adf1fe31 /contrib/persistent-https | |
| parent | 4ed9283b36bc8652954578c3024a00b6e70f8960 (diff) | |
| download | git-3b4f0403d19738a26f0da58f4efc6f4e2473fcac.tar.gz git-3b4f0403d19738a26f0da58f4efc6f4e2473fcac.zip | |
promisor-remote: reject empty name or URL in advertised remote
In parse_one_advertised_remote(), we check for a NULL remote name and
remote URL, but not for empty ones. An empty URL seems possible as
url_percent_decode("") doesn't return NULL.
In promisor_config_info_list(), we ignore remotes with empty URLs, so a
Git server should not advertise remotes with empty URLs. It's possible
that a buggy or malicious server would do it though.
So let's tighten the check in parse_one_advertised_remote() to also
reject empty strings at parse time.
Signed-off-by: Christian Couder <chriscool@tuxfamily.org>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'contrib/persistent-https')
0 files changed, 0 insertions, 0 deletions
