From: Morten Welinder <mwelinder@gmail.com>
Date: Wed, 30 Apr 2008 00:45:42 GMT
Subject: Re: cvsimport and branches with "(" in the name
Message-ID: <118833cc0804291745m2da2a3bdl21a9440e961afb6@mail.gmail.com>
In-Reply-To: <20080429155238.GA18494@sigill.intra.peff.net>

>  -       system("git-update-ref $remote/$branch $cid") == 0
>  +       system('git-update-ref', "$remote/$branch", $cid) == 0

I hope there are no further such system calls left.  This could run arbitrary
commands if one was tricked into importing an evil repository.

Morten