delta/libgit2.git/tests/resources, branch ethomson/commit_create_cb

filter: introduce GIT_BLOB_FILTER_ATTRIBUTES_FROM_COMMIT

2021-07-22T20:40:42+00:00

Provide a mechanism to filter using attribute data from a specific
commit (making use of `GIT_ATTR_CHECK_INCLUDE_COMMIT`).

Add testcase

2021-05-13T00:42:25+00:00

commit-graph: Support lookups of entries in a commit-graph

2021-01-10T19:18:38+00:00

This change introduces `git_commit_graph_entry_find()` and
`git_commit_graph_entry_parent()`. These two functions allow a much
faster lookup of commits by ID, since the ODB does not need to be
consulted, the commit object does not need to be inflated, and the
contents of the commit object do not need to be parsed.

Part of: #5757

commit-graph: Introduce a parser for commit-graph files

2021-01-10T19:18:38+00:00

This change is the first in a series to add support for git's
commit-graph. This should speed up commit graph traversals by avoiding
object parsing and allowing some operations to terminate earlier.

Part of: #5757

multipack: Introduce a parser for multi-pack-index files

2020-10-05T12:08:38+00:00

This change is the first in a series to add support for git's
multi-pack-index. This should speed up large repositories significantly.

Part of: #5399

Fix config file parsing with multi line values containing quoted parts

2020-09-18T09:21:00+00:00

Signed-off-by: Sven Strickroth

blame: add option to ignore whitespace changes

2020-04-14T13:50:53+00:00

Fix segfault when calling git_blame_buffer()

2020-03-23T13:47:18+00:00

This change makes sure that the hunk is not null before trying to
dereference it. This avoids segfaults, especially when blaming against a
modified buffer (i.e. the index).

Fixes: #5443

refs: refuse to delete HEAD

2020-01-15T21:55:58+00:00

This requires adding a new symbolic ref to the testrepo fixture.
Some of the existing tests attempt to delete HEAD, expecting a different failure. Introduce and use a non-HEAD symbolic ref instead.
Adjust a few other tests as needed.

Fixes #5357

Disallow NTFS Alternate Data Stream attacks, even on Linux/macOS

2019-12-10T08:01:06+00:00

A little-known feature of NTFS is that it offers to store metadata in
so-called "Alternate Data Streams" (inspired by Apple's "resource
forks") that are copied together with the file they are associated with.
These Alternate Data Streams can be accessed via `::`.

Directories, too, have Alternate Data Streams, and they even have a
default stream type `$INDEX_ALLOCATION`. Which means that `abc/` and
`abc::$INDEX_ALLOCATION/` are actually equivalent.

This is of course another attack vector on the Git directory that we
definitely want to prevent.

On Windows, we already do this incidentally, by disallowing colons in
file/directory names.

While it looks as if files'/directories' Alternate Data Streams are not
accessible in the Windows Subsystem for Linux, and neither via
CIFS/SMB-mounted network shares in Linux, it _is_ possible to access
them on SMB-mounted network shares on macOS.

Therefore, let's go the extra mile and prevent this particular attack
_everywhere_. To keep things simple, let's just disallow *any* Alternate
Data Stream of `.git`.

This is libgit2's variant of CVE-2019-1352.

Signed-off-by: Johannes Schindelin