summaryrefslogtreecommitdiff
path: root/tests/diff/blob.c
diff options
context:
space:
mode:
authorPatrick Steinhardt <ps@pks.im>2016-06-06 12:59:17 +0200
committerPatrick Steinhardt <ps@pks.im>2016-06-07 09:14:14 +0200
commit7d02019a07840c0263ab935f626af8002af12a91 (patch)
tree2b25b50c792047a7836cd761f32cfce6e2a1ff54 /tests/diff/blob.c
parentf0ee795ccb552b87637c7973ac64f64437baa041 (diff)
downloadlibgit2-7d02019a07840c0263ab935f626af8002af12a91.tar.gz
transports: smart: fix potential invalid memory dereferences
When we receive a packet of exactly four bytes encoding its length as those four bytes it can be treated as an empty line. While it is not really specified how those empty lines should be treated, we currently ignore them and do not return an error when trying to parse it but simply advance the data pointer. Callers invoking `git_pkt_parse_line` are currently not prepared to handle this case as they do not explicitly check this case. While they could always reset the passed out-pointer to `NULL` before calling `git_pkt_parse_line` and determine if the pointer has been set afterwards, it makes more sense to update `git_pkt_parse_line` to set the out-pointer to `NULL` itself when it encounters such an empty packet. Like this it is guaranteed that there will be no invalid memory references to free'd pointers. As such, the issue has been fixed such that `git_pkt_parse_line` always sets the packet out pointer to `NULL` when an empty packet has been received and callers check for this condition, skipping such packets.
Diffstat (limited to 'tests/diff/blob.c')
0 files changed, 0 insertions, 0 deletions