diff options
| author | theworstcomrade <4lbercik@gmail.com> | 2022-02-18 16:28:03 +0100 |
|---|---|---|
| committer | theworstcomrade <4lbercik@gmail.com> | 2022-02-18 16:28:03 +0100 |
| commit | 8f6e8bbefd9b319c89f6ee9fdd37859599c5a424 (patch) | |
| tree | 474e2c4ab91e15403d52349d52425cdd3326f0fa | |
| parent | d0b48f3f4888d69a7b59024114bff897f24561b2 (diff) | |
| download | gitpython-fix.tar.gz | |
Low risk ReDoS vulnfix
https://huntr.dev/bounties/8549d81f-dc45-4af7-9f2a-2d70752d8524/
| -rw-r--r-- | git/remote.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/git/remote.py b/git/remote.py index 7d5918a5..56f3c5b3 100644 --- a/git/remote.py +++ b/git/remote.py @@ -273,7 +273,7 @@ class FetchInfo(IterableObj, object): NEW_TAG, NEW_HEAD, HEAD_UPTODATE, TAG_UPDATE, REJECTED, FORCED_UPDATE, \ FAST_FORWARD, ERROR = [1 << x for x in range(8)] - _re_fetch_result = re.compile(r'^\s*(.) (\[?[\w\s\.$@]+\]?)\s+(.+) -> ([^\s]+)( \(.*\)?$)?') + _re_fetch_result = re.compile(r'^\s*(.) (\[[\w\s\.$@]+\]|[\w\.$@]+)\s+(.+) -> ([^\s]+)( \(.*\)?$)?') _flag_map: Dict[flagKeyLiteral, int] = { '!': ERROR, |