Add patch from Cygwin project that fixes arbitrary code execution vulnerability. References: https://cygwin.com/pipermail/cygwin-announce/2021-April/010018.html https://github.com/me-and/Cygwin-Git/security/advisories/GHSA-rmp3-wq55-f557
12 lines
332 B
Diff
12 lines
332 B
Diff
--- origsrc/git-v2.31.1/read-cache.c 2021-03-26 21:49:41.000000000 +0000
|
|
+++ src/git-v2.31.1/read-cache.c 2021-04-22 13:58:29.584542300 +0100
|
|
@@ -985,7 +985,7 @@ inside:
|
|
}
|
|
}
|
|
if (protect_ntfs) {
|
|
-#ifdef GIT_WINDOWS_NATIVE
|
|
+#if defined GIT_WINDOWS_NATIVE || defined __CYGWIN__
|
|
if (c == '\\')
|
|
return 0;
|
|
#endif
|