Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: libgit2/libgit2
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 1e6aef7
Choose a base ref
...
head repository: libgit2/libgit2
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 0551dfd
Choose a head ref
  • 11 commits
  • 10 files changed
  • 5 contributors

Commits on Aug 10, 2026

  1. docs: fix six \param names that do not match the signatures

    - refdb_backend: the iterator callback documents `out` for an argument
      named `iter`; unlock documents `who`, which is the name `rename`
      uses, while unlock itself takes `sig`
    - utf-conv: git_utf8_from_16 documents `src_len`, an argument only
      git_utf8_from_16_with_len has
    - path_w32: both trim_end and remove_namespace document `path` for an
      argument named `str`
    - w32_util: filetime_to_timespec documents `FILETIME`, the type, where
      the argument is `ft`
    
    Comments only.
    karpovantonme committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    97c3475 View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2026

  1. Configuration menu
    Copy the full SHA
    95ff8c2 View commit details
    Browse the repository at this point in the history

Commits on Aug 12, 2026

  1. Configuration menu
    Copy the full SHA
    1e9bbdc View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    b0057d0 View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2026

  1. fix(zstream): fail on truncated input instead of looping forever

    `inflate()` reports `Z_BUF_ERROR` when a truncated stream exhausts
    its input before reaching `Z_STREAM_END`.
    
    The stock `zstream_seterr` suggests treating that as non-fatal
    so callers can retry with more input or output space.
    
    However,
    the drain loop in `git_zstream_get_output` can supply neither because
    
    * output space is still available
    * input is only refilled outside the loop
    
    It would leads to zero-progress forever.
    
    The problematic behavior was found in `git_odb_read`
    on a truncated loose object.
    
    The proposed fix here:
    Detect the stuck state in the drain loop and report an error.
    weihanglo committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    5254f5d View commit details
    Browse the repository at this point in the history
  2. test(zstream): reject truncated zlib streams

    When inflating a stream,
    if the stream is truncated midway,
    it must fail rather than loop forever.
    weihanglo committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    1c1ba2e View commit details
    Browse the repository at this point in the history
  3. test(odb): reads of truncated loose objects fail

    This ensure that `git_odb_read` fails
    when reading truncated loose object.
    
    If you move this before the fix commit,
    this loops forever
    weihanglo committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    d535450 View commit details
    Browse the repository at this point in the history
  4. CVE-2026-5917: Escape repo path in gen_proto()

    Takes inspiration from 346f28b
    
    Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
    sgallagher committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    5948ef3 View commit details
    Browse the repository at this point in the history
  5. Merge pull request #7347 from sgallagher/cve_2026_5917

    CVE-2026-5917: Escape repo path in gen_proto()
    ethomson authored Aug 13, 2026
    Configuration menu
    Copy the full SHA
    0b87f30 View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2026

  1. Merge pull request #7341 from karpovantonme/docs/param-names-match-si…

    …gnatures
    
    docs: fix six @PARAM names that do not match the signatures
    ethomson authored Aug 15, 2026
    Configuration menu
    Copy the full SHA
    0334930 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #7346 from weihanglo/zstream-infloop

    fix(zstream): fail on truncated input instead of looping forever
    ethomson authored Aug 15, 2026
    Configuration menu
    Copy the full SHA
    0551dfd View commit details
    Browse the repository at this point in the history
Loading