<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/libgit2.git, branch cmn/tmp</title>
<subtitle>github.com: libgit2/libgit2.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/'/>
<entry>
<title>crashdebug</title>
<updated>2017-11-21T14:11:50+00:00</updated>
<author>
<name>Carlos Martín Nieto</name>
<email>cmn@dwim.me</email>
</author>
<published>2017-11-21T14:11:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=1e3a2797660ee61fd835739240bb8a2215cede80'/>
<id>1e3a2797660ee61fd835739240bb8a2215cede80</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Bump version to 0.25.1</title>
<updated>2017-01-06T17:15:53+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@github.com</email>
</author>
<published>2017-01-06T17:15:53+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=a5cf255b471ad7113247d552d5695db0cb720882'/>
<id>a5cf255b471ad7113247d552d5695db0cb720882</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch '25_smartpktparse' into maint/v0.25</title>
<updated>2017-01-06T17:12:16+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@github.com</email>
</author>
<published>2017-01-06T17:12:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=6850b516b9bb7de6d8e7e1f8355acf05a7a91d98'/>
<id>6850b516b9bb7de6d8e7e1f8355acf05a7a91d98</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>smart_pkt: treat empty packet lines as error</title>
<updated>2017-01-06T17:11:58+00:00</updated>
<author>
<name>Patrick Steinhardt</name>
<email>ps@pks.im</email>
</author>
<published>2016-11-15T10:44:51+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=2fdef641fd0dd2828bd948234ae86de75221a11a'/>
<id>2fdef641fd0dd2828bd948234ae86de75221a11a</id>
<content type='text'>
The Git protocol does not specify what should happen in the case
of an empty packet line (that is a packet line "0004"). We
currently indicate success, but do not return a packet in the
case where we hit an empty line. The smart protocol was not
prepared to handle such packets in all cases, though, resulting
in a `NULL` pointer dereference.

Fix the issue by returning an error instead. As such kind of
packets is not even specified by upstream, this is the right
thing to do.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The Git protocol does not specify what should happen in the case
of an empty packet line (that is a packet line "0004"). We
currently indicate success, but do not return a packet in the
case where we hit an empty line. The smart protocol was not
prepared to handle such packets in all cases, though, resulting
in a `NULL` pointer dereference.

Fix the issue by returning an error instead. As such kind of
packets is not even specified by upstream, this is the right
thing to do.
</pre>
</div>
</content>
</entry>
<entry>
<title>smart_pkt: verify packet length exceeds PKT_LEN_SIZE</title>
<updated>2017-01-06T17:11:44+00:00</updated>
<author>
<name>Patrick Steinhardt</name>
<email>ps@pks.im</email>
</author>
<published>2016-11-15T10:36:27+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=66e3774d279672ee51c3b54545a79d20d1ada834'/>
<id>66e3774d279672ee51c3b54545a79d20d1ada834</id>
<content type='text'>
Each packet line in the Git protocol is prefixed by a four-byte
length of how much data will follow, which we parse in
`git_pkt_parse_line`. The transmitted length can either be equal
to zero in case of a flush packet or has to be at least of length
four, as it also includes the encoded length itself. Not
checking this may result in a buffer overflow as we directly pass
the length to functions which accept a `size_t` length as
parameter.

Fix the issue by verifying that non-flush packets have at least a
length of `PKT_LEN_SIZE`.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Each packet line in the Git protocol is prefixed by a four-byte
length of how much data will follow, which we parse in
`git_pkt_parse_line`. The transmitted length can either be equal
to zero in case of a flush packet or has to be at least of length
four, as it also includes the encoded length itself. Not
checking this may result in a buffer overflow as we directly pass
the length to functions which accept a `size_t` length as
parameter.

Fix the issue by verifying that non-flush packets have at least a
length of `PKT_LEN_SIZE`.
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch '25_certcheckcb' into maint/v0.25</title>
<updated>2017-01-06T17:10:49+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@github.com</email>
</author>
<published>2017-01-06T17:10:49+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=ab8a0fdb31ff7e944d01348f28a2da19e50f8839'/>
<id>ab8a0fdb31ff7e944d01348f28a2da19e50f8839</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>http: perform 'badssl' check also via certificate callback</title>
<updated>2017-01-06T17:09:52+00:00</updated>
<author>
<name>Carlos Martín Nieto</name>
<email>cmn@dwim.me</email>
</author>
<published>2017-01-06T10:51:31+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=98d66240ecb7765e191da19b535c75c92ccc90fe'/>
<id>98d66240ecb7765e191da19b535c75c92ccc90fe</id>
<content type='text'>
Make sure that the callbacks do also get a 'valid' value of zero when
the certificate we're looking at is in valid and assert that within the
test.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Make sure that the callbacks do also get a 'valid' value of zero when
the certificate we're looking at is in valid and assert that within the
test.
</pre>
</div>
</content>
</entry>
<entry>
<title>http: check certificate validity before clobbering the error variable</title>
<updated>2017-01-06T17:09:39+00:00</updated>
<author>
<name>Etienne Samson</name>
<email>samson.etienne@gmail.com</email>
</author>
<published>2016-12-21T20:24:33+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=9a64e62f0f20c9cf9b2e1609f037060eb2d8eb22'/>
<id>9a64e62f0f20c9cf9b2e1609f037060eb2d8eb22</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #3980 from tiennou/doc-fixes</title>
<updated>2016-12-20T19:14:20+00:00</updated>
<author>
<name>Carlos Martín Nieto</name>
<email>carlosmn@github.com</email>
</author>
<published>2016-12-20T19:14:20+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=75db289a041b1f1084768244e167b953ac7eeaa5'/>
<id>75db289a041b1f1084768244e167b953ac7eeaa5</id>
<content type='text'>
Documentation fixes</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Documentation fixes</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #4041 from libgit2/cmn/bump-pretend-git</title>
<updated>2016-12-20T17:17:12+00:00</updated>
<author>
<name>Edward Thomson</name>
<email>ethomson@github.com</email>
</author>
<published>2016-12-20T17:17:12+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/libgit2.git/commit/?id=42864e5842045b656f470c03de9f2a10591d794f'/>
<id>42864e5842045b656f470c03de9f2a10591d794f</id>
<content type='text'>
http: bump the pretend git version in the User-Agent</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
http: bump the pretend git version in the User-Agent</pre>
</div>
</content>
</entry>
</feed>
