mirrors/jgit - jgit - source @ dussan.org

History

Robin Rosenberg 42d7565ba9 Validate paths during DirCheckout DirCacheCheckout and CanonicalTreeParser cooperate. CanonicalTreeParser can detect malformed, potentially malicious tree entries and sets a flag, while DirCacheCheckout refuses to work with such paths. Malicious tree entries are ".", "..", ".git" (case insensitive), any name containing '/' and (on Windows '\') and also (on Windows) any paths ending in a combination of '.' or space or containing a ':'. We also forbid all special names like "con" etc on Windows. Some of the test can execute on any platform by enabling partial platform emulation. A new runtime exception, InvalidPathException, is introduced. For backwards compatibility it extends InvalidArgumentException. Change-Id: I86199105814b63d4340e5de0e471d0da6b579ead Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>		12 years ago
..
BaseDirCacheEditor.java	Initial JGit contribution to eclipse.org	14 years ago
DirCache.java	Move JGitText to an internal package	12 years ago
DirCacheBuildIterator.java	Update example code for obtaining a locked DirCache	12 years ago
DirCacheBuilder.java	Move JGitText to an internal package	12 years ago
DirCacheCheckout.java	Validate paths during DirCheckout	12 years ago
DirCacheEditor.java	Move JGitText to an internal package	12 years ago
DirCacheEntry.java	Validate paths during DirCheckout	12 years ago
DirCacheIterator.java	Fix TreeWalk bug comparing DirCache and WorkingTree with ANY_DIFF	13 years ago
DirCacheTree.java	Fix ArrayIndexOutOfBoundsException in DirCacheIterator	13 years ago
InvalidPathException.java	Validate paths during DirCheckout	12 years ago