jgit/org.eclipse.jgit
Robin Rosenberg 42d7565ba9 Validate paths during DirCheckout
DirCacheCheckout and CanonicalTreeParser cooperate. CanonicalTreeParser
can detect malformed, potentially malicious tree entries and sets a
flag, while DirCacheCheckout refuses to work with such paths.

Malicious tree entries are ".", "..", ".git" (case insensitive), any
name containing '/' and (on Windows '\') and also (on Windows)
any paths ending in a combination of '.' or space or containing a ':'.
We also forbid all special names like "con" etc on Windows.

Some of the test can execute on any platform by enabling partial
platform emulation.

A new runtime exception, InvalidPathException, is introduced. For
backwards compatibility it extends InvalidArgumentException.

Change-Id: I86199105814b63d4340e5de0e471d0da6b579ead
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>
2012-04-23 22:37:50 +02:00
..
.settings Enforce the use of Java5 API:s only (with a few exceptions) 2011-12-16 01:01:36 +01:00
META-INF Do not import/export empty org.eclipse.jgit package 2012-03-13 09:10:10 -07:00
findBugs [findBugs] Silence returning null for StringUtils.toBooleanOrNull() 2011-11-16 20:55:34 +01:00
resources/org/eclipse/jgit Externalize parsing exception message for RebaseCommand#Action 2012-04-02 11:36:29 +02:00
src/org/eclipse/jgit Validate paths during DirCheckout 2012-04-23 22:37:50 +02:00
.classpath Externalize strings from JGit 2010-05-19 14:37:16 -07:00
.fbprefs Initial JGit contribution to eclipse.org 2009-09-29 16:47:03 -07:00
.gitignore Finish removing Apache Felix maven-bundle-plugin 2010-01-12 11:46:55 -08:00
.project Revert "Hide Maven target directories from Eclipse" 2010-08-28 09:50:50 +02:00
about.html Add missing about.html files to all shipped bundles 2011-06-08 21:51:51 +02:00
build.properties Add "resources/" as a source folder 2010-06-05 14:39:27 +02:00
plugin.properties Remove incubation marker 2011-05-31 22:53:53 +02:00
pom.xml Include eclipse.inf 2012-03-03 00:53:00 +01:00