git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH 3/9] git-verify-pack: more careful path handling

From
Rene Scharfe <rene.scharfe@lsrfire.ath.cx>
Date
Aug 10, 2006, 15:02 UTC
Message-ID
<11552221581834-git-send-email-rene.scharfe@lsrfire.ath.cx>
In-Reply-To
<11552221582769-git-send-email-rene.scharfe@lsrfire.ath.cx>

Use strlcpy() to copy the filename into a buffer and complain if it doesn't fit. Also move the path buffer into verify_one_pack(); it is used only there. Now we can const'ify the first argument of this function.

Signed-off-by: Rene Scharfe <rene.scharfe@lsrfire.ath.cx>
---
 verify-pack.c |   14 ++++++++------
 1 files changed, 8 insertions(+), 6 deletions(-)
diff --git a/verify-pack.c b/verify-pack.c
index 7201596..2c814a6 100644
--- a/verify-pack.c
+++ b/verify-pack.c
@@ -1,10 +1,15 @@
 #include "cache.h"
 #include "pack.h"
 
-static int verify_one_pack(char *arg, int verbose)
+static int verify_one_pack(const char *path, int verbose)
 {
-	int len = strlen(arg);
+	char arg[PATH_MAX];
+	int len;
 	struct packed_git *g;
+
+	len = strlcpy(arg, path, PATH_MAX);
+	if (len >= PATH_MAX)
+		return error("name too long: %s", path);
 	
 	while (1) {
 		/* Should name foo.idx, but foo.pack may be named;
@@ -37,8 +42,6 @@ int main(int ac, char **av)
 	int nothing_done = 1;
 
 	while (1 < ac) {
-		char path[PATH_MAX];
-
 		if (!no_more_options && av[1][0] == '-') {
 			if (!strcmp("-v", av[1]))
 				verbose = 1;
@@ -48,8 +51,7 @@ int main(int ac, char **av)
 				usage(verify_pack_usage);
 		}
 		else {
-			strcpy(path, av[1]);
-			if (verify_one_pack(path, verbose))
+			if (verify_one_pack(av[1], verbose))
 				errs++;
 			nothing_done = 0;
 		}
-- 
1.4.2.rc2.g822a
Previous: Rene ScharfeNext: Rene Scharfe
Message 9 of 18 in “git-verify-pack: clean up and make builtin”
  1. 0/9 git-verify-pack: clean up and make builtinRene Scharfe, Aug 10, 2006
  2. 1/9 Add has_extension()Rene Scharfe, Aug 10, 2006
  3. Johannes SchindelinAug 10, 2006
  4. Rene ScharfeAug 10, 2006
  5. Fredrik KuivinenAug 10, 2006
  6. Rene ScharfeAug 10, 2006
  7. Fredrik KuivinenAug 10, 2006
  8. 2/9 git-verify-pack: show usage when no pack was specifiedRene Scharfe, Aug 10, 2006
  9. 3/9 git-verify-pack: more careful path handlingRene Scharfe, Aug 10, 2006
  10. 4/9 git-verify-pack: insist on .idx extensionRene Scharfe, Aug 10, 2006
  11. 5/9 git-verify-pack: get rid of while loopRene Scharfe, Aug 10, 2006
  12. 6/9 git-verify-pack: free pack after use and a cleanupRene Scharfe, Aug 10, 2006
  13. 7/9 git-verify-pack: buffer overrun paranoiaRene Scharfe, Aug 10, 2006
  14. 8/9 git-verify-pack: no need to count errorsRene Scharfe, Aug 10, 2006
  15. Johannes SchindelinAug 10, 2006
  16. Rene ScharfeAug 10, 2006
  17. 9/9 git-verify-pack: make builtinRene Scharfe, Aug 10, 2006
  18. Johannes SchindelinAug 10, 2006

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.