git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH 1/3] t5313: test bounds-checks of corrupted/malicious pack/idx files

From
Junio C Hamano <gitster@pobox.com>
Date
Feb 25, 2016, 20:31 UTC
Message-ID
<xmqq4mcwo7lb.fsf@gitster.mtv.corp.google.com>
In-Reply-To
<56CF523A.8050208@kdbg.org>
Johannes Sixt <j6t@kdbg.org> writes:
Show 8 quoted lines
> Am 25.02.2016 um 15:21 schrieb Jeff King:
>> +munge () {
>> +	printf "$3" | dd of="$1" bs=1 conv=notrunc seek=$2
>> +}
>
> Instead of adding another call of dd, would it be an option to insert
> the following patch at the front of this series and then use
> test_overwrite_bytes?

It would be an option, but I'd want to merge this to 'next' today without waiting for a reroll. Change from dd to custom script can be done as a follow-up topic after the dust settles, if necessary.

Thanks.
Previous: Johannes SixtNext: Jeff King
Message 4 of 10 in “out-of-bounds access from corrupted .idx files”
  1. 0/3 out-of-bounds access from corrupted .idx filesJeff King, Feb 25, 2016
  2. 1/3 t5313: test bounds-checks of corrupted/malicious pack/idx filesJeff King, Feb 25, 2016
  3. Johannes SixtFeb 25, 2016
  4. Junio C HamanoFeb 25, 2016
  5. Jeff KingFeb 25, 2016
  6. 2/3 nth_packed_object_offset: bounds-check extended offsetJeff King, Feb 25, 2016
  7. 3/3 use_pack: handle signed off_t overflowJeff King, Feb 25, 2016
  8. 4/3 sha1_file.c: mark strings for translationNguyễn Thái Ngọc Duy, Feb 27, 2016
  9. Junio C HamanoFeb 27, 2016
  10. Jeff KingFeb 27, 2016

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.