From: Junio C Hamano Date: Wed, 16 Jan 2019 04:46:16 GMT Subject: Re: What's cooking in git.git (Jan 2019, #02; Tue, 15) Message-ID: In-Reply-To: Junio C Hamano writes: > * js/commit-graph-read-overflow-fix (2019-01-15) 3 commits > - Makefile: correct example fuzz build > - commit-graph: fix buffer read-overflow > - commit-graph, fuzz: add fuzzer for commit-graph > > The code to read the commit-graph file was not prepared to see a > corrupt size field in the file, and ended up reading beyond the end > of the buffer. > > ... > * js/commit-graph-chunk-table-fix (2018-12-14) 3 commits > - Makefile: correct example fuzz build > - commit-graph: fix buffer read-overflow > - commit-graph, fuzz: add fuzzer for commit-graph > > The codepath to read from the commit-graph file attempted to read > past the end of it when the file's table-of-contents was corrupt. -EIWASSTUPID These are the same thing, different iterations. I'll keep the original topic branch name and have the updated patches there. Sorry about the confusion.