Re: What's cooking in git.git (topics)

From: Fedor Sergeev <fedor.sergeev@sun.com>
Date: Apr 23, 2008, 09:16 UTC
Message-ID: <alpine.WNT.1.10.0804231313550.2728@theodor>
In-Reply-To: <200804231047.41315.robin.rosenberg.lists@dewire.com>

On Wed, 23 Apr 2008, Robin Rosenberg wrote:

Show 8 quoted lines

> onsdagen den 23 april 2008 09.47.57 skrev Fedor Sergeev:
>> If one manages to hack on repository one can modify it enormous amount of
>> ways, including spoofing on SHA (providing wrong contents for it - does
>> git verify that when getting a pack?), utilizing bugs in git etc...
>
> The pack transfer protocol does not transfer the SHA of objects, only the
> contents is transferred. The SHA-1 is (has to be since it is not sent)
> reconstructed on the receiving end.

Thats nice. Then I agree its difficult to spoil superproject out of submodule other than it just does not checkout.

regards,
   Fedor.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.