| commit | 53efaf30b50f095cad8c160488c74bba3e3b2680 | [log] [tgz] |
|---|---|---|
| author | Jason A. Donenfeld <Jason@zx2c4.com> | Fri Aug 03 15:46:11 2018 +0200 |
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | Fri Aug 03 17:04:03 2018 +0200 |
| tree | 48c0be88bfef03400ddd4b3871baf9de9dbe0b77 | |
| parent | c679d9010451b986bae719a6abe0458af2b2dfb9 [diff] |
clone: fix directory traversal This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com>
