Page MenuHomePhabricator
Differential D12112

Fix Mercurial command injection vulnerability
ClosedPublic
Actions

Authored by epriestley on Mar 19 2015, 2:50 AM.
Tags
None
Referenced Files
F13258107: D12112.id29137.diff
Sun, May 26, 6:46 AM
F13252439: D12112.diff
Sat, May 25, 1:26 AM
F13228345: D12112.id29137.diff
Mon, May 20, 8:43 AM
F13228344: D12112.id29134.diff
Mon, May 20, 8:43 AM
F13228314: D12112.id.diff
Mon, May 20, 8:38 AM
F13228259: D12112.diff
Mon, May 20, 8:14 AM
F13205465: D12112.diff
Wed, May 15, 1:58 AM
F13199894: D12112.id29134.diff
Mon, May 13, 7:55 PM
View All Files
Subscribers
epriestley
Tokens
"Yellow Medal" token, awarded by btrahan.

Details

Reviewers
btrahan
Commits
Restricted Diffusion Commit
rP80b8dc521d14: Fix Mercurial command injection vulnerability
Summary

See http://chargen.matasano.com/chargen/2015/3/17/this-new-vulnerability-mercurial-command-injection-cve-2014-9462.html.

Test Plan

Crafted bad remote URL; got error instead of code execution.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
src/
2 lines
applications/
config/
check/
13 lines
repository/
constants/
22 lines
engine/
30 lines

Diff 29137

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/config/check/PhabricatorBinariesSetupCheck.php

Loading...
View Options

src/applications/repository/constants/PhabricatorRepositoryVersion.php

Loading...
View Options

src/applications/repository/engine/PhabricatorRepositoryPullEngine.php

Loading...
Phabricator · Built by Phacility