tree 81eace0c7987be3cf8370dc70ee8419f2b9e6220
parent 5a6ffcb8c62b38f903b4ebc74e97e476ebc6e9a5
author Jonathan Nieder <jrnieder@gmail.com> 1538100362 -0700
committer Jonathan Nieder <jrnieder@gmail.com> 1538102110 -0700

Fix CVE-2018-17456, arbitrary code execution via submodule URL and path

Apply the changes v2.14.4..v2.14.5 from upstream.

Also apply the error handling fix v2.13.0-rc2~10^2 (submodule_init:
die cleanly on submodules without url defined, 2017-04-24).  It's a
good change in its own right and the patches rely on it.

Signed-off-by: Jonathan Nieder <jrnieder@gmail.com>