tree 844124df0896caa172359b472bf436c8d13be969
parent 3be4cf09cd3d0747af3ecdb8dc3962a0969b731e
author Jeff King <peff@peff.net> 1501270135 -0400
committer Junio C Hamano <gitster@pobox.com> 1501282495 -0700

connect: reject paths that look like command line options

If we get a repo path like "-repo.git", we may try to invoke
"git-upload-pack -repo.git". This is going to fail, since
upload-pack will interpret it as a set of bogus options. But
let's reject this before we even run the sub-program, since
we would not want to allow any mischief with repo names that
actually are real command-line options.

You can still ask for such a path via git-daemon, but there's no
security problem there, because git-daemon enters the repo itself
and then passes "."  on the command line.

Signed-off-by: Jeff King <peff@peff.net>
Reviewed-by: Jonathan Nieder <jrnieder@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>