• T
    Fix buffer overflow in config parser · e0b3cc0d
    Thomas Jarosch 提交于
    When interpreting a config value, the config parser reads in 1+ space
    character(s) and puts -one- space character in the buffer as soon as
    the first non-space character is encountered (if not inside quotes).
    
    Unfortunately the buffer size check lacks the extra space character
    which gets inserted at the next non-space character, resulting in
    a crash with a specially crafted config entry.
    
    The unit test now uses Java to compile a platform independent
    .NET framework to output the test string in C# :o)
    
        Read: Thanks to Johannes Sixt for the correct printf call
        which replaces the perl invocation.
    Signed-off-by: NThomas Jarosch <thomas.jarosch@intra2net.com>
    Signed-off-by: NJunio C Hamano <gitster@pobox.com>
    e0b3cc0d
config.c 26.5 KB