Skip to content
Snippets Groups Projects
  • Yuya Nishihara's avatar
    3fee7f7d2da0
    ssh: unban the use of pipe character in user@host:port string · 3fee7f7d2da0
    Yuya Nishihara authored
    This vulnerability was fixed by the previous patch and there were more ways
    to exploit than using '|shellcmd'. So it doesn't make sense to reject only
    pipe character.
    
    Test cases are updated to actually try to exploit the bug. As the SSH bridge
    of git/svn subrepos are not managed by our code, the tests for non-hg subrepos
    are just removed.
    
    This may be folded into the original patches.
    3fee7f7d2da0
    History
    ssh: unban the use of pipe character in user@host:port string
    Yuya Nishihara authored
    This vulnerability was fixed by the previous patch and there were more ways
    to exploit than using '|shellcmd'. So it doesn't make sense to reject only
    pipe character.
    
    Test cases are updated to actually try to exploit the bug. As the SSH bridge
    of git/svn subrepos are not managed by our code, the tests for non-hg subrepos
    are just removed.
    
    This may be folded into the original patches.