kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity

Bypass git submodule add/update with git config protocol.file.allow=always option.

Browse source 
Co-authored-by: Nobuyoshi Nakada <nobu@ruby-lang.org>
This commit is contained in:
Hiroshi SHIBATA 2022-10-19 19:40:00 +09:00
parent 567725ed30
commit dae843f6b7
Notes: git 2022-10-19 11:35:12 +00:00
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
test/rubygems/test_gem_source_git.rb
View file

@ -63,6 +63,11 @@ class TestGemSourceGit < Gem::TestCase
end
def test_checkout_submodules
# We need to allow to checkout submodules with file:// protocol
# CVE-2022-39253
# https://lore.kernel.org/lkml/xmqq4jw1uku5.fsf@gitster.g/
system(@git, *%W"config --global protocol.file.allow always")
source = Gem::Source::Git.new @name, @repository, "master", true
git_gem "b"