[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Files with identical SHA1 breaks the repo

From: Branko Čibej <brane_at_apache.org>
Date: Fri, 24 Feb 2017 12:18:05 +0100

On 24.02.2017 11:51, Stefan Sperling wrote:
> On Thu, Feb 23, 2017 at 09:02:28PM +0100, Øyvind A. Holm wrote:
>> Earlier today, the first known SHA1 collision was presented:
>>
>> https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
>> http://shattered.io/
>>
>> It turns out that adding these two PDF files to a svn repository makes
>> it impossible to checkout the repository properly if both files exist in
>> the repo. This script demonstrates what happens:
> As a workaround, disable rep-sharing and the error goes away.

This is precisely why rep-sharing is disabled by default when the
repository is created.

-- Brane
Received on 2017-02-24 12:18:11 CET

This is an archived mail posted to the Subversion Dev mailing list.