commit 7c1a278d99a18445e12bd55e308cd69080963198
author Petr Baudis <pasky@suse.cz> Sat Sep 23 01:08:45 2006 +0200
committer Junio C Hamano <junkio@cox.net> Fri Sep 22 16:53:31 2006 -0700
tree 45a248ea8f94c7c90953ef74a51e4b22bc69593b
parent afdcec73660737d0ac28a808829ab76587a9befa

Fix buggy ref recording

There is a format string vulnerability introduced with the packed refs
file format.

Signed-off-by: Petr Baudis <pasky@suse.cz>
Signed-off-by: Junio C Hamano <junkio@cox.net>

refs.c

diff --git a/refs.c b/refs.c
index 40f16af..5fdf9c4 100644
--- a/refs.c
+++ b/refs.c
@@ -472,7 +472,7 @@
 
 	lock->ref_name = xstrdup(ref);
 	lock->log_file = xstrdup(git_path("logs/%s", ref));
-	ref_file = git_path(ref);
+	ref_file = git_path("%s", ref);
 	lock->force_write = lstat(ref_file, &st) && errno == ENOENT;
 
 	if (safe_create_leading_directories(ref_file))