From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Mon, 22 Sep 2008 12:41:20 GMT
Subject: Re: [PATCH] git-remote: do not use user input in a printf format string
Message-ID: <alpine.DEB.1.00.0809221440590.13830@pacific.mpi-cbg.de.mpi-cbg.de>
In-Reply-To: <1222081405-12113-1-git-send-email-johannes.sixt@telecom.at>

Hi,

On Mon, 22 Sep 2008, Johannes Sixt wrote:

> 'git remote show' substituted the remote name into a string that was 
> later used as a printf format string. If a remote name contains a printf 
> format specifier like this:
> 
>    $ git remote add foo%sbar .
> 
> then the command
> 
>    $ git remote show foo%sbar
> 
> would print garbage (if you are lucky) or crash. This fixes it.

Thanks,
Dscho