Page MenuHomePhabricator
Differential D12112

Fix Mercurial command injection vulnerability
ClosedPublic
Actions

Authored by epriestley on Mar 19 2015, 2:50 AM.
Tags
None
Referenced Files
F15575782: D12112.diff
Tue, May 6, 6:52 AM
F15555712: D12112.id.diff
Mon, Apr 28, 12:44 PM
F15549023: D12112.diff
Sun, Apr 27, 3:25 AM
F15543605: D12112.id.diff
Fri, Apr 25, 11:43 PM
F15525540: D12112.id.diff
Mon, Apr 21, 3:10 PM
F15475518: D12112.id29137.diff
Apr 6 2025, 8:07 PM
F15463308: D12112.id29137.diff
Apr 1 2025, 10:21 PM
F15460915: D12112.id29134.diff
Apr 1 2025, 3:20 AM
View All Files
Subscribers
epriestley
Tokens
"Yellow Medal" token, awarded by btrahan.

Details

Reviewers
btrahan
Commits
Restricted Diffusion Commit
rP80b8dc521d14: Fix Mercurial command injection vulnerability
Summary

See http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html.

Test Plan

Crafted bad remote URL; got error instead of code execution.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
src/
2 lines
applications/
config/
check/
13 lines
repository/
constants/
22 lines
engine/
30 lines

Diff 29137

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/config/check/PhabricatorBinariesSetupCheck.php

Loading...
View Options

src/applications/repository/constants/PhabricatorRepositoryVersion.php

Loading...
View Options

src/applications/repository/engine/PhabricatorRepositoryPullEngine.php

Loading...
Phabricator · Built by Phacility