From: Jason A. Donenfeld <Jason@zx2c4.com>
Date: Fri, 3 Aug 2018 13:46:11 +0000 (+0200)
Subject: clone: fix directory traversal
X-Git-Url: https://gitweb.ps.run/ps-cgit/commitdiff_plain/53efaf30b50f095cad8c160488c74bba3e3b2680?hp=53efaf30b50f095cad8c160488c74bba3e3b2680

clone: fix directory traversal

This was introduced in the initial version of this code, way back when
in 2008.

$ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd
root:x:0:0:root:/root:/bin/sh
...

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Reported-by: Jann Horn <jannh@google.com>
---