From 654dbd112ab7cbe0a162afaab645a971da62d433 Mon Sep 17 00:00:00 2001 From: Petr Stodulka Date: Wed, 17 May 2017 11:37:01 +0200 Subject: [PATCH] Fix CVE-2017-8386 See the commit 3ec804490 in upstream repository for more info. --- shell.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/shell.c b/shell.c index 1429870..72ed0fa 100644 --- a/shell.c +++ b/shell.c @@ -13,7 +13,7 @@ static int do_generic_cmd(const char *me, char *arg) const char *my_argv[4]; setup_path(); - if (!arg || !(arg = sq_dequote(arg))) + if (!arg || !(arg = sq_dequote(arg)) || *arg == '-') die("bad argument"); if (prefixcmp(me, "git-")) die("bad command"); -- 2.9.4