[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Filenames with trailing newlines wreak havoc

From: Daniel Shahaf <d.s_at_daniel.shahaf.name>
Date: Tue, 26 Mar 2013 18:29:20 +0200

Stefan Sperling wrote on Tue, Mar 26, 2013 at 17:27:00 +0100:
> On Tue, Mar 26, 2013 at 06:10:35PM +0200, Daniel Shahaf wrote:
> > I'd call it a DoS if you can commit such a file and can't later 'svn rm
> > URL' it.
> You cannot 'svnsync' the repository anymore, even if you rm the URL.
> So you can DoS a master/slave setup and force the slave to be
> out-of-date with no way to catch up until the revision is obliterated
> or repaired.

Fair enough. Infra would be interested in a pre-commit hook script that
checks for control characters in filenames and aborts the transaction.

Received on 2013-03-26 17:29:56 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.