git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] git-remote: do not use user input in a printf format string

From
Johannes Schindelin <johannes.schindelin@gmx.de>
Date
Sep 22, 2008, 12:41 UTC
Message-ID
<alpine.DEB.1.00.0809221440590.13830@pacific.mpi-cbg.de.mpi-cbg.de>
In-Reply-To
<1222081405-12113-1-git-send-email-johannes.sixt@telecom.at>
Hi,
On Mon, 22 Sep 2008, Johannes Sixt wrote:
Show 11 quoted lines
> 'git remote show' substituted the remote name into a string that was 
> later used as a printf format string. If a remote name contains a printf 
> format specifier like this:
> 
>    $ git remote add foo%sbar .
> 
> then the command
> 
>    $ git remote show foo%sbar
> 
> would print garbage (if you are lucky) or crash. This fixes it.

Thanks, Dscho

Previous: Johannes Sixt
Message 2 of 2 in “git-remote: do not use user input in a printf format string”
  1. git-remote: do not use user input in a printf format stringJohannes Sixt, Sep 22, 2008
  2. Johannes SchindelinSep 22, 2008

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.