From 0ce67150e04a1df32b06495fa04328302b3a2fef Mon Sep 17 00:00:00 2001 From: Runxi Yu Date: Tue, 25 Mar 2025 13:25:54 +0800 Subject: [PATCH] Fix out of bounds in commit path handling --- http_server.go | 4 ++++ diff --git a/http_server.go b/http_server.go index c8528feac9d2a2c3883901c388bad0d09d0e3cfe..de78650824ea93745d6a4cb17350f13e6a2f8167 100644 --- a/http_server.go +++ b/http_server.go @@ -220,6 +220,10 @@ return } httpHandleRepoLog(writer, request, params) case "commit": + if len(segments) != sepIndex+5 { + errorPage400(writer, params, "Incorrect number of parameters") + return + } if redirectNoDir(writer, request) { return } -- 2.48.1