Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use path not filepath in routers/editor #14390

Merged

Conversation

zeripath
Copy link
Contributor

The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton art27@cantab.net

The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>
@GiteaBot GiteaBot added the lgtm/need 1 This PR needs approval from one additional maintainer to be merged. label Jan 18, 2021
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Jan 18, 2021
@lafriks
Copy link
Member

lafriks commented Jan 18, 2021

🚀

@codecov-io
Copy link

Codecov Report

Merging #14390 (3f3b6c9) into master (6ff63c8) will increase coverage by 0.01%.
The diff coverage is 33.33%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master   #14390      +/-   ##
==========================================
+ Coverage   41.84%   41.85%   +0.01%     
==========================================
  Files         744      744              
  Lines       79746    79746              
==========================================
+ Hits        33367    33375       +8     
+ Misses      40869    40860       -9     
- Partials     5510     5511       +1     
Impacted Files Coverage Δ
routers/repo/editor.go 23.80% <33.33%> (ø)
modules/util/timer.go 42.85% <0.00%> (-42.86%) ⬇️
modules/git/tree_nogogit.go 60.86% <0.00%> (-8.70%) ⬇️
modules/git/repo_language_stats_nogogit.go 57.44% <0.00%> (-4.26%) ⬇️
modules/indexer/stats/db.go 56.00% <0.00%> (-4.00%) ⬇️
models/error.go 38.98% <0.00%> (+0.48%) ⬆️
services/pull/pull.go 42.64% <0.00%> (+0.49%) ⬆️
models/gpg_key.go 53.90% <0.00%> (+0.57%) ⬆️
modules/queue/workerpool.go 60.00% <0.00%> (+1.22%) ⬆️
models/unit.go 49.31% <0.00%> (+2.73%) ⬆️
... and 2 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6ff63c8...3f3b6c9. Read the comment docs.

@6543 6543 merged commit b59ed41 into go-gitea:master Jan 18, 2021
@rt-95
Copy link

rt-95 commented Jan 19, 2021

Hi, I am the problem's reporter. Could I cite this page to get a cve id?(For the sake of confirmation) :p

@lunny
Copy link
Member

lunny commented Jan 19, 2021

Hi, I am the problem's reporter. Could I cite this page to get a cve id?(For the sake of confirmation) :p

Please.

6543 pushed a commit to 6543-forks/gitea that referenced this pull request Jan 19, 2021
The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>
@6543 6543 added the backport/done All backports for this PR have been created label Jan 19, 2021
a1012112796 added a commit to a1012112796/gitea that referenced this pull request Jan 19, 2021
* master: (27 commits)
  Use path not filepath in routers/editor (go-gitea#14390)
  Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  Check if label template exist first (go-gitea#14384)
  Allow passcode invalid error to appear (go-gitea#14371)
  exclude authored PRs from Review Requested filter (go-gitea#14368)
  Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  Implement ghost comment mitigation (go-gitea#14349)
  Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  Add review requested filter on pull request overview (go-gitea#13701)
  escape branch names in compare url (go-gitea#14364)
  label and milestone webhooks on issue/pull creation (go-gitea#14363)
  Fix middlewares sequences (go-gitea#14354)
  Sort issue search results by revelance (go-gitea#14353)
  KanBan: be able to set default board (go-gitea#14147)
  ...
lunny pushed a commit that referenced this pull request Jan 19, 2021
The incorrect use of filepath instead of path means that
it is possible to cause a stackoverflow on Windows

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: zeripath <art27@cantab.net>
Co-authored-by: Lauris BH <lauris@nix.lv>
@zeripath zeripath deleted the use-path-not-filepath-in-routers-editor branch January 19, 2021 18:00
@go-gitea go-gitea locked and limited conversation to collaborators Mar 11, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
backport/done All backports for this PR have been created lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. type/bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants