Tonis Tiigi f83dedd8dd source/git: reject option-like refs in git bundle operations ...

Validate the default branch returned by ls-remote before using it, so a
malicious remote cannot advertise a HEAD symref such as  that would
later be reused as an argument to other git commands.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit a838953fe8776d68379d32a7af0776d538215763)
(cherry picked from commit eb63c321e8)

2026-07-16 17:36:38 -07:00

84 KiB

Raw Permalink Blame History

View Raw