)]}'
{
  "commit": "c88341b7e1a5ca3c384c2a3aeb62b72fffbd8c00",
  "tree": "dda3fdb59e924cc866ac64baeec7d0cc093cdbe1",
  "parents": [
    "237edbc58d77729588ed657ffe5d0f6908268e59"
  ],
  "author": {
    "name": "Johannes Schindelin",
    "email": "johannes.schindelin@gmx.de",
    "time": "Thu Sep 17 17:52:36 2026 +0000"
  },
  "committer": {
    "name": "Junio C Hamano",
    "email": "gitster@pobox.com",
    "time": "Thu Sep 17 12:43:47 2026 -0700"
  },
  "message": "test-read-midx: check midx_fill_entry() result\n\nThe `--show-objects` mode of `read_midx_file()` uses the output of\n`midx_fill_entry()` without checking whether the lookup succeeded. A\nfailed lookup or unavailable pack can leave that output unusable,\nallowing malformed or concurrently changed MIDX data to make this test\nhelper crash instead of reporting a controlled error.\n\nReject the entry unless `midx_fill_entry()` returns `MIDX_FILL_HIT`. The\nunchecked call was introduced by 86d174b7246b\n(t/helper/test-read-midx.c: add \u0027--show-objects\u0027, 2021-03-30); later\nincremental-MIDX changes expanded the possible failure modes, but this\nremains a test-helper robustness issue, not a production Git attack\nsurface or an arbitrary-code-execution vulnerability.\n\nIt is unclear why Coverity reports this issue in Git for Windows only\nafter merging v2.56.0-rc0; The issue was not reported before.\n\nAssisted-by: GPT-5.6 Luna\nSigned-off-by: Johannes Schindelin \u003cjohannes.schindelin@gmx.de\u003e\nSigned-off-by: Junio C Hamano \u003cgitster@pobox.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "83b07c6236b167048fed413decb15d58caa767bc",
      "old_mode": 33188,
      "old_path": "t/helper/test-read-midx.c",
      "new_id": "412089563f5a7c00c156d68554d8882347171c9c",
      "new_mode": 33188,
      "new_path": "t/helper/test-read-midx.c"
    }
  ]
}