From f72734ff7712d6aae837f940a45d6e7508bb182c Mon Sep 17 00:00:00 2001 From: Brad King Date: Thu, 20 Oct 2022 13:38:20 -0400 Subject: [PATCH] Tests: Explicitly allow usage of git file-based protocol in test cases Due to CVE-2022-39253, Git 2.30.6 sets `protocol.file.allow=user` by default. The change has also been backported to other Git versions by distros. This breaks some of our test cases that use the file-based protocol locally to simulate real workflows without requiring network access. In these cases the file protocol is safe, so explicitly enable it in the tests. (cherry picked from commit 79ce0f434e916684d734e136b92e14f472a9d14a) --- Tests/CMakeLists.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Tests/CMakeLists.txt b/Tests/CMakeLists.txt index 8e7c04fbd0..d011020f99 100644 --- a/Tests/CMakeLists.txt +++ b/Tests/CMakeLists.txt @@ -1540,6 +1540,7 @@ if(BUILD_TESTING) ) list(APPEND TEST_BUILD_DIRS "${CMake_BINARY_DIR}/Tests/ExternalProject") set_tests_properties(ExternalProject PROPERTIES + ENVIRONMENT GIT_ALLOW_PROTOCOL=file RUN_SERIAL 1 TIMEOUT ${CMAKE_LONG_TEST_TIMEOUT}) @@ -2653,6 +2654,7 @@ if(BUILD_TESTING) -P "${CMake_BINARY_DIR}/Tests/CTestUpdateGIT.cmake" ) list(APPEND TEST_BUILD_DIRS "${CMake_BINARY_DIR}/Tests/${CTestUpdateGIT_DIR}") + set_property(TEST CTest.UpdateGIT PROPERTY ENVIRONMENT GIT_ALLOW_PROTOCOL=file) endif() # Test CTest Update with HG -- 2.31.1