Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Use path not filepath in routers/editor #14390

Merged

Conversation

zeripath
Copy link
Contributor

The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton art27@cantab.net

The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>
@GiteaBot GiteaBot added the lgtm/need 1 This PR needs approval from one additional maintainer to be merged. label Jan 18, 2021
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Jan 18, 2021
@lafriks
Copy link
Member

lafriks commented Jan 18, 2021

🚀

@codecov-io
Copy link

Codecov Report

Merging #14390 (3f3b6c9) into master (6ff63c8) will increase coverage by 0.01%.
The diff coverage is 33.33%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master   #14390      +/-   ##
==========================================
+ Coverage   41.84%   41.85%   +0.01%     
==========================================
  Files         744      744              
  Lines       79746    79746              
==========================================
+ Hits        33367    33375       +8     
+ Misses      40869    40860       -9     
- Partials     5510     5511       +1     
Impacted Files Coverage Δ
routers/repo/editor.go 23.80% <33.33%> (ø)
modules/util/timer.go 42.85% <0.00%> (-42.86%) ⬇️
modules/git/tree_nogogit.go 60.86% <0.00%> (-8.70%) ⬇️
modules/git/repo_language_stats_nogogit.go 57.44% <0.00%> (-4.26%) ⬇️
modules/indexer/stats/db.go 56.00% <0.00%> (-4.00%) ⬇️
models/error.go 38.98% <0.00%> (+0.48%) ⬆️
services/pull/pull.go 42.64% <0.00%> (+0.49%) ⬆️
models/gpg_key.go 53.90% <0.00%> (+0.57%) ⬆️
modules/queue/workerpool.go 60.00% <0.00%> (+1.22%) ⬆️
models/unit.go 49.31% <0.00%> (+2.73%) ⬆️
... and 2 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6ff63c8...3f3b6c9. Read the comment docs.

@6543 6543 merged commit b59ed41 into go-gitea:master Jan 18, 2021
@rt-95
Copy link

rt-95 commented Jan 19, 2021

Hi, I am the problem's reporter. Could I cite this page to get a cve id?(For the sake of confirmation) :p

@lunny
Copy link
Member

lunny commented Jan 19, 2021

Hi, I am the problem's reporter. Could I cite this page to get a cve id?(For the sake of confirmation) :p

Please.

6543 pushed a commit to 6543-forks/gitea that referenced this pull request Jan 19, 2021
The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>
@6543 6543 added the backport/done All backports for this PR have been created label Jan 19, 2021
a1012112796 added a commit to a1012112796/gitea that referenced this pull request Jan 19, 2021
* master: (27 commits)
  Use path not filepath in routers/editor (go-gitea#14390)
  Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  Check if label template exist first (go-gitea#14384)
  Allow passcode invalid error to appear (go-gitea#14371)
  exclude authored PRs from Review Requested filter (go-gitea#14368)
  Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  Implement ghost comment mitigation (go-gitea#14349)
  Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  Add review requested filter on pull request overview (go-gitea#13701)
  escape branch names in compare url (go-gitea#14364)
  label and milestone webhooks on issue/pull creation (go-gitea#14363)
  Fix middlewares sequences (go-gitea#14354)
  Sort issue search results by revelance (go-gitea#14353)
  KanBan: be able to set default board (go-gitea#14147)
  ...
lunny pushed a commit that referenced this pull request Jan 19, 2021
The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: zeripath <art27@cantab.net>
Co-authored-by: Lauris BH <lauris@nix.lv>
@zeripath zeripath deleted the use-path-not-filepath-in-routers-editor branch January 19, 2021 18:00
@go-gitea go-gitea locked and limited conversation to collaborators Mar 11, 2021
# for free to subscribe to this conversation on GitHub. Already have an account? #.
Labels
backport/done All backports for this PR have been created lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. type/bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants