summaryrefslogtreecommitdiff
path: root/bundle.h
diff options
context:
space:
mode:
authorJeff King <peff@peff.net>2019-09-15 16:51:56 (GMT)
committerJunio C Hamano <gitster@pobox.com>2019-09-16 19:47:51 (GMT)
commita4cafc737916c2df5a52875cb1d0976662e3ab0e (patch)
treeb72a97006bc1b19b1007d92955f9cf1943849b96 /bundle.h
parentcf34337f9886bb45f16f0114dc8f3265aea912ce (diff)
downloadgit-a4cafc737916c2df5a52875cb1d0976662e3ab0e.zip
git-a4cafc737916c2df5a52875cb1d0976662e3ab0e.tar.gz
git-a4cafc737916c2df5a52875cb1d0976662e3ab0e.tar.bz2
list-objects-filter: use empty string instead of NULL for sparse "base"
We use add_excludes_from_blob_to_list() to parse a sparse blob. Since we don't have a base path, we pass NULL and 0 for the base and baselen, respectively. But the rest of the exclude code passes a literal empty string instead of NULL for this case. And indeed, we eventually end up with match_pathname() calling fspathncmp(), which then calls the system strncmp(path, base, baselen). This works on many platforms, which notice that baselen is 0 and do not look at the bytes of "base" at all. But it does violate the C standard, and building with SANITIZE=undefined will complain. You can also see it by instrumenting fspathncmp like this: diff --git a/dir.c b/dir.c index d021c908e5..4bb3d3ec96 100644 --- a/dir.c +++ b/dir.c @@ -71,6 +71,8 @@ int fspathcmp(const char *a, const char *b) int fspathncmp(const char *a, const char *b, size_t count) { + if (!a || !b) + BUG("null fspathncmp arguments"); return ignore_case ? strncasecmp(a, b, count) : strncmp(a, b, count); } We could perhaps be more defensive in match_pathname(), but even if we did so, it makes sense for this code to match the rest of the exclude callers. Signed-off-by: Jeff King <peff@peff.net> Acked-by: Jeff Hostetler <jeffhost@microsoft.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'bundle.h')
0 files changed, 0 insertions, 0 deletions