fsck: detect submodule urls starting with dash
authorJeff King <peff@peff.net>
Mon, 24 Sep 2018 08:37:17 +0000 (04:37 -0400)
committerJunio C Hamano <gitster@pobox.com>
Thu, 27 Sep 2018 18:41:26 +0000 (11:41 -0700)
commita124133e1e6ab5c7a9fef6d0e6bcb084e3455b46
treeb2feaba2c06781e934d4888f89a1dbe632a49777
parente43aab778c72250e11eb00e31dc6be90072a1637
fsck: detect submodule urls starting with dash

Urls with leading dashes can cause mischief on older
versions of Git. We should detect them so that they can be
rejected by receive.fsckObjects, preventing modern versions
of git from being a vector by which attacks can spread.

Signed-off-by: Jeff King <peff@peff.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
fsck.c
t/t7416-submodule-dash-url.sh