Skip to content

Commit 56a5765

Browse files
gitstergitster
committed
Sync with Git 2.30.2 for CVE-2021-21300
Signed-off-by: Junio C Hamano <[email protected]>
2 parents 6c46f86 + 94f6e3e commit 56a5765

23 files changed

+292
-4
lines changed

‎Documentation/RelNotes/2.17.6.txt

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
Git v2.17.6 Release Notes
2+
=========================
3+
4+
This release addresses the security issues CVE-2021-21300.
5+
6+
Fixes since v2.17.5
7+
-------------------
8+
9+
* CVE-2021-21300:
10+
On case-insensitive file systems with support for symbolic links,
11+
if Git is configured globally to apply delay-capable clean/smudge
12+
filters (such as Git LFS), Git could be fooled into running
13+
remote code during a clone.
14+
15+
Credit for finding and fixing this vulnerability goes to Matheus
16+
Tavares, helped by Johannes Schindelin.

‎Documentation/RelNotes/2.18.5.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Git v2.18.5 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6 to address
5+
the security issue CVE-2021-21300; see the release notes for that
6+
version for details.

‎Documentation/RelNotes/2.19.6.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Git v2.19.6 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6 and
5+
v2.18.5 to address the security issue CVE-2021-21300; see the
6+
release notes for these versions for details.

‎Documentation/RelNotes/2.20.5.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Git v2.20.5 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5
5+
and v2.19.6 to address the security issue CVE-2021-21300; see
6+
the release notes for these versions for details.

‎Documentation/RelNotes/2.21.4.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Git v2.21.4 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6 and v2.20.5 to address the security issue CVE-2021-21300;
6+
see the release notes for these versions for details.

‎Documentation/RelNotes/2.22.5.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.22.5 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6,
5+
v2.18.5, v2.19.6, v2.20.5 and v2.21.4 to address the security
6+
issue CVE-2021-21300; see the release notes for these versions
7+
for details.

‎Documentation/RelNotes/2.23.4.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.23.4 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4 and v2.22.5 to address the security
6+
issue CVE-2021-21300; see the release notes for these versions
7+
for details.

‎Documentation/RelNotes/2.24.4.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.24.4 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5 and v2.23.4 to address the
6+
security issue CVE-2021-21300; see the release notes for these
7+
versions for details.

‎Documentation/RelNotes/2.25.5.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.25.5 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4 and v2.24.4 to address
6+
the security issue CVE-2021-21300; see the release notes for
7+
these versions for details.

‎Documentation/RelNotes/2.26.3.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.26.3 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4, v2.24.4 and v2.25.5
6+
to address the security issue CVE-2021-21300; see the release
7+
notes for these versions for details.

‎Documentation/RelNotes/2.27.1.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.27.1 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4, v2.24.4, v2.25.5
6+
and v2.26.3 to address the security issue CVE-2021-21300; see
7+
the release notes for these versions for details.

‎Documentation/RelNotes/2.28.1.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
Git v2.28.1 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4, v2.24.4, v2.25.5,
6+
v2.26.3 and v2.27.1 to address the security issue CVE-2021-21300;
7+
see the release notes for these versions for details.

‎Documentation/RelNotes/2.29.3.txt

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
Git v2.29.3 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6,
5+
v2.18.5, v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4, v2.24.4,
6+
v2.25.5, v2.26.3, v2.27.1 and v2.28.1 to address the security
7+
issue CVE-2021-21300; see the release notes for these versions
8+
for details.

‎Documentation/RelNotes/2.30.2.txt

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
Git v2.30.2 Release Notes
2+
=========================
3+
4+
This release merges up the fixes that appear in v2.17.6, v2.18.5,
5+
v2.19.6, v2.20.5, v2.21.4, v2.22.5, v2.23.4, v2.24.4, v2.25.5,
6+
v2.26.3, v2.27.1, v2.28.1 and v2.29.3 to address the security
7+
issue CVE-2021-21300; see the release notes for these versions
8+
for details.

‎cache.h

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1661,6 +1661,7 @@ int has_symlink_leading_path(const char *name, int len);
16611661
int threaded_has_symlink_leading_path(struct cache_def *, const char *, int);
16621662
int check_leading_path(const char *name, int len);
16631663
int has_dirs_only_path(const char *name, int len, int prefix_len);
1664+
void invalidate_lstat_cache(void);
16641665
void schedule_dir_for_removal(const char *name, int len);
16651666
void remove_scheduled_dirs(void);
16661667

‎compat/mingw.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -367,6 +367,8 @@ int mingw_rmdir(const char *pathname)
367367
ask_yes_no_if_possible("Deletion of directory '%s' failed. "
368368
"Should I try again?", pathname))
369369
ret = _wrmdir(wpathname);
370+
if (!ret)
371+
invalidate_lstat_cache();
370372
return ret;
371373
}
372374

‎git-compat-util.h

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -349,6 +349,11 @@ static inline int noop_core_config(const char *var, const char *value, void *cb)
349349
#define platform_core_config noop_core_config
350350
#endif
351351

352+
int lstat_cache_aware_rmdir(const char *path);
353+
#if !defined(__MINGW32__) && !defined(_MSC_VER)
354+
#define rmdir lstat_cache_aware_rmdir
355+
#endif
356+
352357
#ifndef has_dos_drive_prefix
353358
static inline int git_has_dos_drive_prefix(const char *path)
354359
{

‎run-command.c

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -993,6 +993,7 @@ int finish_command(struct child_process *cmd)
993993
int ret = wait_or_whine(cmd->pid, cmd->argv[0], 0);
994994
trace2_child_exit(cmd, ret);
995995
child_process_clear(cmd);
996+
invalidate_lstat_cache();
996997
return ret;
997998
}
998999

@@ -1294,13 +1295,19 @@ int start_async(struct async *async)
12941295
int finish_async(struct async *async)
12951296
{
12961297
#ifdef NO_PTHREADS
1297-
return wait_or_whine(async->pid, "child process", 0);
1298+
int ret = wait_or_whine(async->pid, "child process", 0);
1299+
1300+
invalidate_lstat_cache();
1301+
1302+
return ret;
12981303
#else
12991304
void *ret = (void *)(intptr_t)(-1);
13001305

13011306
if (pthread_join(async->tid, &ret))
13021307
error("pthread_join failed");
1308+
invalidate_lstat_cache();
13031309
return (int)(intptr_t)ret;
1310+
13041311
#endif
13051312
}
13061313

‎symlinks.c

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -267,6 +267,13 @@ int has_dirs_only_path(const char *name, int len, int prefix_len)
267267
*/
268268
static int threaded_has_dirs_only_path(struct cache_def *cache, const char *name, int len, int prefix_len)
269269
{
270+
/*
271+
* Note: this function is used by the checkout machinery, which also
272+
* takes care to properly reset the cache when it performs an operation
273+
* that would leave the cache outdated. If this function starts caching
274+
* anything else besides FL_DIR, remember to also invalidate the cache
275+
* when creating or deleting paths that might be in the cache.
276+
*/
270277
return lstat_cache(cache, name, len,
271278
FL_DIR|FL_FULLPATH, prefix_len) &
272279
FL_DIR;
@@ -321,3 +328,20 @@ void remove_scheduled_dirs(void)
321328
{
322329
do_remove_scheduled_dirs(0);
323330
}
331+
332+
void invalidate_lstat_cache(void)
333+
{
334+
reset_lstat_cache(&default_cache);
335+
}
336+
337+
#undef rmdir
338+
int lstat_cache_aware_rmdir(const char *path)
339+
{
340+
/* Any change in this function must be made also in `mingw_rmdir()` */
341+
int ret = rmdir(path);
342+
343+
if (!ret)
344+
invalidate_lstat_cache();
345+
346+
return ret;
347+
}

‎t/t0021-conversion.sh

Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -956,4 +956,85 @@ test_expect_success PERL 'invalid file in delayed checkout' '
956956
grep "error: external filter .* signaled that .unfiltered. is now available although it has not been delayed earlier" git-stderr.log
957957
'
958958

959+
for mode in 'case' 'utf-8'
960+
do
961+
case "$mode" in
962+
case) dir='A' symlink='a' mode_prereq='CASE_INSENSITIVE_FS' ;;
963+
utf-8)
964+
dir=$(printf "\141\314\210") symlink=$(printf "\303\244")
965+
mode_prereq='UTF8_NFD_TO_NFC' ;;
966+
esac
967+
968+
test_expect_success PERL,SYMLINKS,$mode_prereq \
969+
"delayed checkout with $mode-collision don't write to the wrong place" '
970+
test_config_global filter.delay.process \
971+
"\"$TEST_ROOT/rot13-filter.pl\" --always-delay delayed.log clean smudge delay" &&
972+
test_config_global filter.delay.required true &&
973+
974+
git init $mode-collision &&
975+
(
976+
cd $mode-collision &&
977+
mkdir target-dir &&
978+
979+
empty_oid=$(printf "" | git hash-object -w --stdin) &&
980+
symlink_oid=$(printf "%s" "$PWD/target-dir" | git hash-object -w --stdin) &&
981+
attr_oid=$(echo "$dir/z filter=delay" | git hash-object -w --stdin) &&
982+
983+
cat >objs <<-EOF &&
984+
100644 blob $empty_oid $dir/x
985+
100644 blob $empty_oid $dir/y
986+
100644 blob $empty_oid $dir/z
987+
120000 blob $symlink_oid $symlink
988+
100644 blob $attr_oid .gitattributes
989+
EOF
990+
991+
git update-index --index-info <objs &&
992+
git commit -m "test commit"
993+
) &&
994+
995+
git clone $mode-collision $mode-collision-cloned &&
996+
# Make sure z was really delayed
997+
grep "IN: smudge $dir/z .* \\[DELAYED\\]" $mode-collision-cloned/delayed.log &&
998+
999+
# Should not create $dir/z at $symlink/z
1000+
test_path_is_missing $mode-collision/target-dir/z
1001+
'
1002+
done
1003+
1004+
test_expect_success PERL,SYMLINKS,CASE_INSENSITIVE_FS \
1005+
"delayed checkout with submodule collision don't write to the wrong place" '
1006+
git init collision-with-submodule &&
1007+
(
1008+
cd collision-with-submodule &&
1009+
git config filter.delay.process "\"$TEST_ROOT/rot13-filter.pl\" --always-delay delayed.log clean smudge delay" &&
1010+
git config filter.delay.required true &&
1011+
1012+
# We need Git to treat the submodule "a" and the
1013+
# leading dir "A" as different paths in the index.
1014+
git config --local core.ignoreCase false &&
1015+
1016+
empty_oid=$(printf "" | git hash-object -w --stdin) &&
1017+
attr_oid=$(echo "A/B/y filter=delay" | git hash-object -w --stdin) &&
1018+
cat >objs <<-EOF &&
1019+
100644 blob $empty_oid A/B/x
1020+
100644 blob $empty_oid A/B/y
1021+
100644 blob $attr_oid .gitattributes
1022+
EOF
1023+
git update-index --index-info <objs &&
1024+
1025+
git init a &&
1026+
mkdir target-dir &&
1027+
symlink_oid=$(printf "%s" "$PWD/target-dir" | git -C a hash-object -w --stdin) &&
1028+
echo "120000 blob $symlink_oid b" >objs &&
1029+
git -C a update-index --index-info <objs &&
1030+
git -C a commit -m sub &&
1031+
git submodule add ./a &&
1032+
git commit -m super &&
1033+
1034+
git checkout --recurse-submodules . &&
1035+
grep "IN: smudge A/B/y .* \\[DELAYED\\]" delayed.log &&
1036+
test_path_is_missing target-dir/y
1037+
)
1038+
'
1039+
9591040
test_done

‎t/t0021/rot13-filter.pl

Lines changed: 18 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,15 @@
22
# Example implementation for the Git filter protocol version 2
33
# See Documentation/gitattributes.txt, section "Filter Protocol"
44
#
5-
# The first argument defines a debug log file that the script write to.
6-
# All remaining arguments define a list of supported protocol
7-
# capabilities ("clean", "smudge", etc).
5+
# Usage: rot13-filter.pl [--always-delay] <log path> <capabilities>
6+
#
7+
# Log path defines a debug log file that the script writes to. The
8+
# subsequent arguments define a list of supported protocol capabilities
9+
# ("clean", "smudge", etc).
10+
#
11+
# When --always-delay is given all pathnames with the "can-delay" flag
12+
# that don't appear on the list bellow are delayed with a count of 1
13+
# (see more below).
814
#
915
# This implementation supports special test cases:
1016
# (1) If data with the pathname "clean-write-fail.r" is processed with
@@ -53,6 +59,13 @@ sub gitperllib {
5359
use Git::Packet;
5460

5561
my $MAX_PACKET_CONTENT_SIZE = 65516;
62+
63+
my $always_delay = 0;
64+
if ( $ARGV[0] eq '--always-delay' ) {
65+
$always_delay = 1;
66+
shift @ARGV;
67+
}
68+
5669
my $log_file = shift @ARGV;
5770
my @capabilities = @ARGV;
5871

@@ -134,6 +147,8 @@ sub rot13 {
134147
if ( $buffer eq "can-delay=1" ) {
135148
if ( exists $DELAY{$pathname} and $DELAY{$pathname}{"requested"} == 0 ) {
136149
$DELAY{$pathname}{"requested"} = 1;
150+
} elsif ( !exists $DELAY{$pathname} and $always_delay ) {
151+
$DELAY{$pathname} = { "requested" => 1, "count" => 1 };
137152
}
138153
} elsif ($buffer =~ /^(ref|treeish|blob)=/) {
139154
print $debug " $buffer";

‎t/t2006-checkout-index-basic.sh

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,51 @@ test_expect_success 'checkout-index reports errors (stdin)' '
3131
test_must_fail git checkout-index --stdin 2>stderr &&
3232
test_i18ngrep not.in.the.cache stderr
3333
'
34+
for mode in 'case' 'utf-8'
35+
do
36+
case "$mode" in
37+
case) dir='A' symlink='a' mode_prereq='CASE_INSENSITIVE_FS' ;;
38+
utf-8)
39+
dir=$(printf "\141\314\210") symlink=$(printf "\303\244")
40+
mode_prereq='UTF8_NFD_TO_NFC' ;;
41+
esac
42+
43+
test_expect_success SYMLINKS,$mode_prereq \
44+
"checkout-index with $mode-collision don't write to the wrong place" '
45+
git init $mode-collision &&
46+
(
47+
cd $mode-collision &&
48+
mkdir target-dir &&
49+
50+
empty_obj_hex=$(git hash-object -w --stdin </dev/null) &&
51+
symlink_hex=$(printf "%s" "$PWD/target-dir" | git hash-object -w --stdin) &&
52+
53+
cat >objs <<-EOF &&
54+
100644 blob ${empty_obj_hex} ${dir}/x
55+
100644 blob ${empty_obj_hex} ${dir}/y
56+
100644 blob ${empty_obj_hex} ${dir}/z
57+
120000 blob ${symlink_hex} ${symlink}
58+
EOF
59+
60+
git update-index --index-info <objs &&
61+
62+
# Note: the order is important here to exercise the
63+
# case where the file at ${dir} has its type changed by
64+
# the time Git tries to check out ${dir}/z.
65+
#
66+
# Also, we use core.precomposeUnicode=false because we
67+
# want Git to treat the UTF-8 paths transparently on
68+
# Mac OS, matching what is in the index.
69+
#
70+
git -c core.precomposeUnicode=false checkout-index -f \
71+
${dir}/x ${dir}/y ${symlink} ${dir}/z &&
72+
73+
# Should not create ${dir}/z at ${symlink}/z
74+
test_path_is_missing target-dir/z
75+
76+
)
77+
'
78+
done
3479

3580
test_expect_success 'checkout-index --temp correctly reports error on missing blobs' '
3681
test_when_finished git reset --hard &&

0 commit comments

Comments
 (0)