From: Martin Koegler Date: Fri, 04 Jan 2008 19:37:17 GMT Subject: [PATCH] receive-pack: reject invalid refnames Message-ID: <1199475437933-git-send-email-mkoegler@auto.tuwien.ac.at> Signed-off-by: Martin Koegler --- receive-pack.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/receive-pack.c b/receive-pack.c index d0a563d..3267495 100644 --- a/receive-pack.c +++ b/receive-pack.c @@ -165,7 +165,8 @@ static const char *update(struct command *cmd) unsigned char *new_sha1 = cmd->new_sha1; struct ref_lock *lock; - if (!prefixcmp(name, "refs/") && check_ref_format(name + 5)) { + /* only refs/... are allowed */ + if (prefixcmp(name, "refs/") || check_ref_format(name + 5)) { error("refusing to create funny ref '%s' remotely", name); return "funny refname"; } -- 1.4.4.4