aboutsummaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorRafael G. Martins <rafael@rafaelmartins.eng.br>2022-02-10 03:45:16 +0100
committerRafael G. Martins <rafael@rafaelmartins.eng.br>2022-02-10 03:45:16 +0100
commitcb0e788e98482b3cbf983bbecfb802a9cfaf2447 (patch)
tree9b3f151f49c07eacba8992282c97f2ae2b731413 /src
parent8e74dace4b878027405c267670f559ff761f8ea6 (diff)
downloadblogc-cb0e788e98482b3cbf983bbecfb802a9cfaf2447.tar.gz
blogc-cb0e788e98482b3cbf983bbecfb802a9cfaf2447.tar.bz2
blogc-cb0e788e98482b3cbf983bbecfb802a9cfaf2447.zip
git-receiver: pre-receive: validate ref prefix
Diffstat (limited to 'src')
-rw-r--r--src/blogc-git-receiver/pre-receive-parser.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/blogc-git-receiver/pre-receive-parser.c b/src/blogc-git-receiver/pre-receive-parser.c
index 52b0b76..61a533c 100644
--- a/src/blogc-git-receiver/pre-receive-parser.c
+++ b/src/blogc-git-receiver/pre-receive-parser.c
@@ -64,7 +64,9 @@ bgr_pre_receive_parse(const char *input, size_t input_len)
if (c != '\n')
break;
state = START_OLD;
- if (current - start > 11) {
+ if ((current - start > 11) &&
+ (0 == strncmp("refs/heads/", input + start, 11)))
+ {
char *key = bc_strndup(input + start + 11, current - start - 11);
bc_trie_insert(rv, key, bc_strndup(input + start_new, start - 1 - start_new));
free(key);