Go to file
Taylor Blau 71201ab0e5 t/lib-credential.sh: ensure credential helpers handle long headers
Add a test ensuring that the "wwwauth[]" field cannot be used to
inject malicious data into the credential helper stream.

Many of the credential helpers in contrib/credential read the
newline-delimited protocol stream one line at a time by repeatedly
calling fgets() into a fixed-size buffer.

This assumes that each line is no more than 1024 characters long, since
each iteration of the loop assumes that it is parsing starting at the
beginning of a new line in the stream. However, similar to a5bb10fd5e
(config: avoid fixed-sized buffer when renaming/deleting a section,
2023-04-06), if a line is longer than 1024 characters, a malicious actor
can embed another command within an existing line, bypassing the usual
checks introduced in 9a6bbee800 (credential: avoid writing values with
newlines, 2020-03-11).

As with the problem fixed in that commit, specially crafted input can
cause the helper to return the credential for the wrong host, letting an
attacker trick the victim into sending credentials for one host to
another.

Luckily, all parts of the credential helper protocol that are available
in a tagged release of Git are immune to this attack:

  - "protocol" is restricted to known values, and is thus immune.

  - "host" is immune because curl will reject hostnames that have a '='
    character in them, which would be required to carry out this attack.

  - "username" is immune, because the buffer characters to fill out the
    first `fgets()` call would pollute the `username` field, causing the
    credential helper to return nothing (because it would match a
    username if present, and the username of the credential to be stolen
    is likely not 1024 characters).

  - "password" is immune because providing a password instructs
    credential helpers to avoid filling credentials in the first place.

  - "path" is similar to username; if present, it is not likely to match
    any credential the victim is storing. It's also not enabled by
    default; the victim would have to set credential.useHTTPPath
    explicitly.

However, the new "wwwauth[]" field introduced via 5f2117b24f
(credential: add WWW-Authenticate header to cred requests, 2023-02-27)
can be used to inject data into the credential helper stream. For
example, running:

    {
      printf 'HTTP/1.1 401\r\n'
      printf 'WWW-Authenticate: basic realm='
      perl -e 'print "a" x 1024'
      printf 'host=victim.com\r\n'
    } | nc -Nlp 8080

in one terminal, and then:

    git clone http://localhost:8080

in another would result in a line like:

    wwwauth[]=basic realm=aaa[...]aaahost=victim.com

being sent to the credential helper. If we tweak that "1024" to align
our output with the helper's buffer size and the rest of the data on the
line, it can cause the helper to see "host=victim.com" on its own line,
allowing motivated attackers to exfiltrate credentials belonging to
"victim.com".

The below test demonstrates these failures and provides us with a test
to ensure that our fix is correct. That said, it has a couple of
shortcomings:

  - it's in t0303, since that's the only mechanism we have for testing
    random helpers. But that means nobody is going to run it under
    normal circumstances.

  - to get the attack right, it has to line up the stuffed name with the
    buffer size, so we depend on the exact buffer size. I parameterized
    it so it could be used to test other helpers, but in practice it's
    not likely for anybody to do that.

Still, it's the best we can do, and will help us confirm the presence of
the problem (and our fixes) in the new few patches.

Co-authored-by: Jeff King <peff@peff.net>
Signed-off-by: Jeff King <peff@peff.net>
Signed-off-by: Taylor Blau <me@ttaylorr.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
2023-05-01 09:27:01 -07:00
.github Sync with 2.36.6 2023-04-17 21:16:04 +02:00
Documentation The fifteenth batch 2023-04-28 16:03:03 -07:00
block-sha1
builtin Merge branch 'tb/enable-cruft-packs-by-default' 2023-04-28 16:03:03 -07:00
ci Sync with 2.36.6 2023-04-17 21:16:04 +02:00
compat Sync with 2.34.8 2023-04-17 21:15:59 +02:00
contrib Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
ewah alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
git-gui
gitk-git
gitweb
mergetools
negotiator Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
oss-fuzz treewide: ensure one of the appropriate headers is sourced first 2023-02-23 17:25:28 -08:00
perl
po Merge branch 'fz/po-zh_CN' of github.com:fangyi-zhou/git-po 2023-03-10 22:50:14 +08:00
refs treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
reftable
sha1collisiondetection@855827c583
sha1dc
sha256
t t/lib-credential.sh: ensure credential helpers handle long headers 2023-05-01 09:27:01 -07:00
templates send-email: export patch counters in validate environment 2023-04-14 10:41:15 -07:00
trace2 treewide: remove unnecessary includes of cache.h 2023-03-21 10:56:53 -07:00
xdiff
.cirrus.yml
.clang-format
.editorconfig
.gitattributes
.gitignore
.gitmodules
.mailmap mailmap: change primary address for Emily Shaffer 2023-04-07 14:33:52 -07:00
.tsan-suppressions
CODE_OF_CONDUCT.md
COPYING
GIT-VERSION-GEN Git 2.40.1 2023-04-17 21:16:10 +02:00
INSTALL Sync with 2.31.8 2023-04-17 21:15:49 +02:00
LGPL-2.1
Makefile Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
README.md
RelNotes Git 2.40.1 2023-04-17 21:16:10 +02:00
SECURITY.md
abspath.c abspath.h: move absolute path functions from cache.h 2023-03-21 10:56:52 -07:00
abspath.h abspath.h: move absolute path functions from cache.h 2023-03-21 10:56:52 -07:00
aclocal.m4
add-interactive.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
add-interactive.h
add-patch.c editor: move editor-related functions and declarations into common file 2023-04-11 08:52:10 -07:00
advice.c Merge branch 'fc/advice-diverged-history' 2023-03-19 15:03:13 -07:00
advice.h Merge branch 'fc/advice-diverged-history' 2023-03-19 15:03:13 -07:00
alias.c rebase -m: fix serialization of strategy options 2023-04-10 09:53:19 -07:00
alias.h rebase -m: fix serialization of strategy options 2023-04-10 09:53:19 -07:00
alloc.c object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
alloc.h alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
apply.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
apply.h
archive-tar.c git-zlib: move declarations for git-zlib functions from cache.h 2023-04-11 08:52:10 -07:00
archive-zip.c git-zlib: move declarations for git-zlib functions from cache.h 2023-04-11 08:52:10 -07:00
archive.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
archive.h treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
attr.c setup.h: move declarations for setup.c functions from cache.h 2023-03-21 10:56:54 -07:00
attr.h
banned.h
base85.c
bisect.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
bisect.h
blame.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
blame.h object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
blob.c object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
blob.h
bloom.c
bloom.h
branch.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
branch.h
builtin.h builtins: annotate always-empty prefix parameters 2023-03-28 14:11:24 -07:00
bulk-checkin.c treewide: remove double forward declaration of read_in_full 2023-04-11 08:52:11 -07:00
bulk-checkin.h treewide: remove unnecessary cache.h inclusion from a few headers 2023-03-21 10:56:50 -07:00
bundle-uri.c Merge branch 'ds/fetch-bundle-uri-with-all' 2023-04-06 13:38:32 -07:00
bundle-uri.h
bundle.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
bundle.h treewide: remove unnecessary cache.h inclusion from a few headers 2023-03-21 10:56:50 -07:00
cache-tree.c object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
cache-tree.h object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
cache.h protocol.h: move definition of DEFAULT_GIT_PORT from cache.h 2023-04-18 14:01:04 -07:00
cbtree.c treewide: ensure one of the appropriate headers is sourced first 2023-02-23 17:25:28 -08:00
cbtree.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
chdir-notify.c treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
chdir-notify.h
check-builtins.sh
checkout.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
checkout.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00
chunk-format.c csum-file.h: remove unnecessary inclusion of cache.h 2023-03-21 10:56:55 -07:00
chunk-format.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
color.c pager.h: move declarations for pager.c functions from cache.h 2023-04-11 08:52:10 -07:00
color.h
column.c treewide: remove cache.h inclusion due to pager.h changes 2023-04-11 08:52:11 -07:00
column.h
combine-diff.c treewide: remove double forward declaration of read_in_full 2023-04-11 08:52:11 -07:00
command-list.txt
commit-graph.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
commit-graph.h Merge branch 'ds/ahead-behind' 2023-04-06 13:38:21 -07:00
commit-reach.c Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
commit-reach.h Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
commit-slab-decl.h
commit-slab-impl.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
commit-slab.h
commit.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
commit.h Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
common-main.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
config.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
config.h Merge branch 'gc/config-parsing-cleanup' 2023-04-06 13:38:29 -07:00
config.mak.dev
config.mak.in
config.mak.uname
configure.ac
connect.c Merge branch 'jk/protocol-cap-parse-fix' 2023-04-25 13:56:20 -07:00
connect.h v0 protocol: use size_t for capability length/offset 2023-04-14 15:08:13 -07:00
connected.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
connected.h
convert.c treewide: be explicit about dependence on convert.h 2023-04-11 08:52:09 -07:00
convert.h
copy.c wrapper.h: move declarations for wrapper.c functions from cache.h 2023-03-21 10:56:53 -07:00
credential.c credential.c: store "wwwauth[]" values in `credential_read()` 2023-05-01 09:27:00 -07:00
credential.h Merge branch 'mc/credential-helper-www-authenticate' 2023-03-17 14:03:10 -07:00
csum-file.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
csum-file.h csum-file.h: remove unnecessary inclusion of cache.h 2023-03-21 10:56:55 -07:00
ctype.c
daemon.c protocol.h: move definition of DEFAULT_GIT_PORT from cache.h 2023-04-18 14:01:04 -07:00
date.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
date.h date: remove approxidate_relative() 2023-04-10 08:46:40 -07:00
decorate.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
decorate.h
delta-islands.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
delta-islands.h
delta.h
detect-compiler
diagnose.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
diagnose.h treewide: remove unnecessary inclusions of parse-options.h from headers 2023-03-20 11:55:18 -07:00
diff-delta.c
diff-lib.c object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
diff-merges.c object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
diff-merges.h
diff-no-index.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
diff.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
diff.h Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
diffcore-break.c cocci: apply the "promisor-remote.h" part of "the_repository.pending" 2023-03-28 07:36:46 -07:00
diffcore-delta.c object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
diffcore-order.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
diffcore-pickaxe.c pretty.h: move has_non_ascii() declaration from commit.h 2023-02-23 17:25:29 -08:00
diffcore-rename.c Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
diffcore-rotate.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
diffcore.h hash.h: move some oid-related declarations from cache.h 2023-02-23 17:25:28 -08:00
dir-iterator.c Merge branch 'en/header-cleanup' 2023-03-17 14:03:09 -07:00
dir-iterator.h dir-iterator: drop unused `DIR_ITERATOR_FOLLOW_SYMLINKS` 2023-02-16 16:21:56 -08:00
dir.c Sync with 2.34.8 2023-04-17 21:15:59 +02:00
dir.h Merge branch 'en/header-cleanup' 2023-03-17 14:03:09 -07:00
editor.c treewide: remove cache.h inclusion due to pager.h changes 2023-04-11 08:52:11 -07:00
editor.h editor: move editor-related functions and declarations into common file 2023-04-11 08:52:10 -07:00
entry.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
entry.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00
environment.c pager.h: move declarations for pager.c functions from cache.h 2023-04-11 08:52:10 -07:00
environment.h environment.h: move declarations for environment.c functions from cache.h 2023-03-21 10:56:53 -07:00
exec-cmd.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
exec-cmd.h
fetch-negotiator.c
fetch-negotiator.h
fetch-pack.c Merge branch 'jk/protocol-cap-parse-fix' 2023-04-25 13:56:20 -07:00
fetch-pack.h
fmt-merge-msg.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
fmt-merge-msg.h
fsck.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
fsck.h object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
fsmonitor--daemon.h
fsmonitor-ipc.c treewide: be explicit about dependence on gettext.h 2023-03-21 10:56:51 -07:00
fsmonitor-ipc.h
fsmonitor-path-utils.h
fsmonitor-settings.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
fsmonitor-settings.h
fsmonitor.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
fsmonitor.h Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
generate-cmdlist.sh
generate-configlist.sh
generate-hooklist.sh
gettext.c Sync with Git 2.40.1 2023-04-24 22:31:32 -07:00
gettext.h Sync with 2.33.8 2023-04-17 21:15:56 +02:00
git-archimport.perl
git-compat-util.h Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
git-curl-compat.h
git-cvsexportcommit.perl
git-cvsimport.perl
git-cvsserver.perl
git-difftool--helper.sh mergetool: new config guiDefault supports auto-toggling gui by DISPLAY 2023-04-05 21:03:29 -07:00
git-filter-branch.sh
git-instaweb.sh
git-merge-octopus.sh
git-merge-one-file.sh
git-merge-resolve.sh
git-mergetool--lib.sh mergetool: new config guiDefault supports auto-toggling gui by DISPLAY 2023-04-05 21:03:29 -07:00
git-mergetool.sh mergetool: new config guiDefault supports auto-toggling gui by DISPLAY 2023-04-05 21:03:29 -07:00
git-p4.py
git-quiltimport.sh
git-request-pull.sh
git-send-email.perl send-email: export patch counters in validate environment 2023-04-14 10:41:15 -07:00
git-sh-i18n.sh
git-sh-setup.sh
git-submodule.sh
git-svn.perl
git-web--browse.sh
git-zlib.c git-zlib: move declarations for git-zlib functions from cache.h 2023-04-11 08:52:10 -07:00
git-zlib.h git-zlib: move declarations for git-zlib functions from cache.h 2023-04-11 08:52:10 -07:00
git.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
git.rc
gpg-interface.c Merge branch 'jk/gpg-trust-level-fix' 2023-04-28 16:03:03 -07:00
gpg-interface.h
graph.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
graph.h
grep.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
grep.h grep: work around UTF-8 related JIT bug in PCRE2 <= 10.34 2023-03-23 11:19:34 -07:00
hash-lookup.c
hash-lookup.h
hash.h hash.h: move some oid-related declarations from cache.h 2023-02-23 17:25:28 -08:00
hashmap.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
hashmap.h hashmap.h: fix minor typo 2023-03-30 10:18:39 -07:00
help.c Merge branch 'jk/unused-post-2.39-part2' 2023-03-17 14:03:09 -07:00
help.h
hex.c hex.h: move some hex-related declarations from cache.h 2023-02-23 17:25:28 -08:00
hex.h hex.h: move some hex-related declarations from cache.h 2023-02-23 17:25:28 -08:00
hook.c Merge branch 'jk/unused-post-2.39-part2' 2023-03-17 14:03:09 -07:00
hook.h
http-backend.c treewide: remove cache.h inclusion due to git-zlib changes 2023-04-11 08:52:10 -07:00
http-fetch.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
http-push.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
http-walker.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
http.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
http.h Sync with 2.30.9 2023-04-17 21:15:44 +02:00
ident.c ident.h: move ident-related declarations out of cache.h 2023-02-23 17:25:29 -08:00
ident.h ident.h: move ident-related declarations out of cache.h 2023-02-23 17:25:29 -08:00
imap-send.c setup.h: move declarations for setup.c functions from cache.h 2023-03-21 10:56:54 -07:00
iterator.h
json-writer.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
json-writer.h
khash.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00
kwset.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
kwset.h
levenshtein.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
levenshtein.h
line-log.c treewide: remove cache.h inclusion due to setup.h changes 2023-03-21 10:56:54 -07:00
line-log.h hash.h: move some oid-related declarations from cache.h 2023-02-23 17:25:28 -08:00
line-range.c
line-range.h
linear-assignment.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
linear-assignment.h
list-objects-filter-options.c Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
list-objects-filter-options.h Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
list-objects-filter.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
list-objects-filter.h
list-objects.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
list-objects.h
list.h
ll-merge.c treewide: be explicit about dependence on convert.h 2023-04-11 08:52:09 -07:00
ll-merge.h
lockfile.c treewide: remove unnecessary includes of cache.h 2023-03-21 10:56:53 -07:00
lockfile.h
log-tree.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
log-tree.h
ls-refs.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
ls-refs.h
mailinfo.c Merge branch 'jc/spell-id-in-both-caps-in-message-id' 2023-04-11 13:49:12 -07:00
mailinfo.h
mailmap.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
mailmap.h mailmap, quote: move declarations of global vars to correct unit 2023-04-11 08:52:11 -07:00
match-trees.c Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
mem-pool.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
mem-pool.h
merge-blobs.c Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
merge-blobs.h
merge-ort-wrappers.c treewide: be explicit about dependence on gettext.h 2023-03-21 10:56:51 -07:00
merge-ort-wrappers.h
merge-ort.c object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
merge-ort.h
merge-recursive.c object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
merge-recursive.h
merge.c treewide: be explicit about dependence on gettext.h 2023-03-21 10:56:51 -07:00
mergesort.h
midx.c Merge branch 'ps/fix-geom-repack-with-alternates' 2023-04-25 13:56:20 -07:00
midx.h
name-hash.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
notes-cache.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
notes-cache.h
notes-merge.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
notes-merge.h
notes-utils.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
notes-utils.h
notes.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
notes.h
object-file.c Merge branch 'ps/fix-geom-repack-with-alternates' 2023-04-25 13:56:20 -07:00
object-file.h object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
object-name.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
object-name.h object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
object-store.h Merge branch 'ps/fix-geom-repack-with-alternates' 2023-04-25 13:56:20 -07:00
object.c object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
object.h object.h: move some inline functions and defines from cache.h 2023-04-11 08:52:10 -07:00
oid-array.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
oid-array.h
oidmap.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
oidmap.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00
oidset.c hex.h: move some hex-related declarations from cache.h 2023-02-23 17:25:28 -08:00
oidset.h
oidtree.c treewide: ensure one of the appropriate headers is sourced first 2023-02-23 17:25:28 -08:00
oidtree.h
pack-bitmap-write.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
pack-bitmap.c Merge branch 'ds/fsck-pack-revindex' 2023-04-27 16:00:59 -07:00
pack-bitmap.h
pack-check.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
pack-mtimes.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
pack-mtimes.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
pack-objects.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
pack-objects.h
pack-revindex.c Merge branch 'ds/fsck-pack-revindex' 2023-04-27 16:00:59 -07:00
pack-revindex.h fsck: validate .rev file header 2023-04-17 14:39:05 -07:00
pack-write.c Merge branch 'tb/enable-cruft-packs-by-default' 2023-04-28 16:03:03 -07:00
pack.h csum-file.h: remove unnecessary inclusion of cache.h 2023-03-21 10:56:55 -07:00
packfile.c Merge branch 'tb/pack-revindex-on-disk' 2023-04-27 16:00:59 -07:00
packfile.h Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
pager.c treewide: remove cache.h inclusion due to pager.h changes 2023-04-11 08:52:11 -07:00
pager.h pager.h: move declarations for pager.c functions from cache.h 2023-04-11 08:52:10 -07:00
parallel-checkout.c wrapper.h: move declarations for wrapper.c functions from cache.h 2023-03-21 10:56:53 -07:00
parallel-checkout.h
parse-options-cb.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
parse-options.c treewide: remove unnecessary includes of cache.h 2023-03-21 10:56:53 -07:00
parse-options.h Merge branch 'pw/rebase-cleanup-merge-strategy-option-handling' 2023-04-17 18:05:13 -07:00
patch-delta.c
patch-ids.c treewide: remove unnecessary cache.h inclusion from several sources 2023-03-21 10:56:51 -07:00
patch-ids.h
path.c treewide: remove double forward declaration of read_in_full 2023-04-11 08:52:11 -07:00
path.h path.h: move function declarations for path.c functions from cache.h 2023-03-21 10:56:52 -07:00
pathspec.c setup.h: move declarations for setup.c functions from cache.h 2023-03-21 10:56:54 -07:00
pathspec.h dir.h: refactor to no longer need to include cache.h 2023-02-23 17:25:29 -08:00
pkt-line.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
pkt-line.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
preload-index.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
pretty.c treewide: remove cache.h inclusion due to pager.h changes 2023-04-11 08:52:11 -07:00
pretty.h Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
prio-queue.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
prio-queue.h
progress.c treewide: remove cache.h inclusion due to pager.h changes 2023-04-11 08:52:11 -07:00
progress.h
promisor-remote.c treewide: remove unnecessary cache.h inclusion 2023-04-11 08:52:09 -07:00
promisor-remote.h cocci: apply the "promisor-remote.h" part of "the_repository.pending" 2023-03-28 07:36:46 -07:00
prompt.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
prompt.h
protocol-caps.c Merge branch 'jx/cap-object-info-uninitialized-fix' 2023-04-11 13:49:13 -07:00
protocol-caps.h
protocol.c treewide: remove unnecessary cache.h inclusion 2023-04-11 08:52:09 -07:00
protocol.h protocol.h: move definition of DEFAULT_GIT_PORT from cache.h 2023-04-18 14:01:04 -07:00
prune-packed.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
prune-packed.h
quote.c treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
quote.h mailmap, quote: move declarations of global vars to correct unit 2023-04-11 08:52:11 -07:00
range-diff.c Sync with 2.31.8 2023-04-17 21:15:49 +02:00
range-diff.h
reachable.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
reachable.h
read-cache.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
rebase-interactive.c editor: move editor-related functions and declarations into common file 2023-04-11 08:52:10 -07:00
rebase-interactive.h
rebase.c treewide: ensure one of the appropriate headers is sourced first 2023-02-23 17:25:28 -08:00
rebase.h
ref-filter.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
ref-filter.h Merge branch 'ow/ref-format-remove-unused-member' 2023-04-06 13:38:32 -07:00
reflog-walk.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
reflog-walk.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00
reflog.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
reflog.h
refs.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
refs.h Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
refspec.c treewide: remove unnecessary cache.h inclusion from a few headers 2023-03-21 10:56:50 -07:00
refspec.h
remote-curl.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
remote.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
remote.h Merge branch 'sg/parse-options-h-users' 2023-03-30 13:47:11 -07:00
replace-object.c treewide: remove unnecessary cache.h inclusion from several sources 2023-03-21 10:56:51 -07:00
replace-object.h replace-object.h: move read_replace_refs declaration from cache.h to here 2023-02-23 17:25:30 -08:00
repo-settings.c Merge branch 'tb/enable-cruft-packs-by-default' 2023-04-28 16:03:03 -07:00
repository.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
repository.h Merge branch 'tb/enable-cruft-packs-by-default' 2023-04-28 16:03:03 -07:00
rerere.c treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
rerere.h Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
reset.c object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
reset.h
resolve-undo.c
resolve-undo.h treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
revision.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
revision.h Merge branch 'ab/remove-implicit-use-of-the-repository' 2023-04-06 13:38:30 -07:00
run-command.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
run-command.h
scalar.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
send-pack.c Merge branch 'jk/protocol-cap-parse-fix' 2023-04-25 13:56:20 -07:00
send-pack.h
sequencer.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
sequencer.h rebase -m: cleanup --strategy-option handling 2023-04-10 09:53:19 -07:00
serve.c Merge branch 'jk/unused-post-2.39-part2' 2023-03-17 14:03:09 -07:00
serve.h
server-info.c object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
setup.c treewide: remove double forward declaration of read_in_full 2023-04-11 08:52:11 -07:00
setup.h setup.h: move declarations for setup.c functions from cache.h 2023-03-21 10:56:54 -07:00
sh-i18n--envsubst.c
sha1dc_git.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
sha1dc_git.h
shallow.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
shallow.h object.h: stop depending on cache.h; make cache.h depend on object.h 2023-02-23 17:25:29 -08:00
shared.mak
shell.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
shortlog.h
sideband.c treewide: remove cache.h inclusion due to editor.h changes 2023-04-11 08:52:10 -07:00
sideband.h
sigchain.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
sigchain.h
simple-ipc.h
sparse-index.c environment.h: move declarations for environment.c functions from cache.h 2023-03-21 10:56:53 -07:00
sparse-index.h
split-index.c treewide: be explicit about dependence on mem-pool.h 2023-04-11 08:52:09 -07:00
split-index.h treewide: reduce includes of cache.h in other headers 2023-04-11 08:52:11 -07:00
stable-qsort.c
statinfo.h dir.h: refactor to no longer need to include cache.h 2023-02-23 17:25:29 -08:00
strbuf.c editor: move editor-related functions and declarations into common file 2023-04-11 08:52:10 -07:00
strbuf.h editor: move editor-related functions and declarations into common file 2023-04-11 08:52:10 -07:00
streaming.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
streaming.h treewide: remove unnecessary cache.h inclusion from a few headers 2023-03-21 10:56:50 -07:00
string-list.c alloc.h: move ALLOC_GROW() functions from cache.h 2023-02-23 17:25:28 -08:00
string-list.h
strmap.c
strmap.h
strvec.c cache.h: remove dependence on hex.h; make other files include it explicitly 2023-02-23 17:25:29 -08:00
strvec.h
sub-process.c treewide: ensure one of the appropriate headers is sourced first 2023-02-23 17:25:28 -08:00
sub-process.h treewide: remove unnecessary git-compat-util.h includes in headers 2023-02-23 17:25:28 -08:00
submodule-config.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
submodule-config.h hash.h: move some oid-related declarations from cache.h 2023-02-23 17:25:28 -08:00
submodule.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
submodule.h
symlinks.c setup.h: move declarations for setup.c functions from cache.h 2023-03-21 10:56:54 -07:00
tag.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
tag.h
tar.h
tempfile.c treewide: remove unnecessary includes of cache.h 2023-03-21 10:56:53 -07:00
tempfile.h
thread-utils.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
thread-utils.h
tmp-objdir.c treewide: remove cache.h inclusion due to object-file.h changes 2023-04-11 08:52:10 -07:00
tmp-objdir.h
trace.c treewide: remove unnecessary cache.h inclusion 2023-04-11 08:52:09 -07:00
trace.h Merge branch 'en/header-cleanup' 2023-03-17 14:03:09 -07:00
trace2.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
trace2.h
trailer.c treewide: remove cache.h inclusion due to environment.h changes 2023-03-21 10:56:54 -07:00
trailer.h
transport-helper.c treewide: remove cache.h inclusion due to object-name.h changes 2023-04-11 08:52:09 -07:00
transport-internal.h
transport.c Merge branch 'jk/protocol-cap-parse-fix' 2023-04-25 13:56:20 -07:00
transport.h treewide: remove unnecessary cache.h inclusion from a few headers 2023-03-21 10:56:50 -07:00
tree-diff.c
tree-walk.c object-file.h: move declarations for object-file.c functions from cache.h 2023-04-11 08:52:10 -07:00
tree-walk.h hash.h: move some oid-related declarations from cache.h 2023-02-23 17:25:28 -08:00
tree.c object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
tree.h
unicode-width.h unicode: update the width tables to Unicode 15 2023-03-30 13:06:12 -07:00
unimplemented.sh
unix-socket.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
unix-socket.h
unix-stream-server.c treewide: remove unnecessary cache.h includes in source files 2023-02-23 17:25:28 -08:00
unix-stream-server.h
unpack-trees.c Merge branch 'en/header-split-cache-h' 2023-04-25 13:56:20 -07:00
unpack-trees.h treewide: be explicit about dependence on convert.h 2023-04-11 08:52:09 -07:00
upload-pack.c Merge branch 'jk/protocol-cap-parse-fix' 2023-04-25 13:56:20 -07:00
upload-pack.h
url.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
url.h
urlmatch.c treewide: replace cache.h with more direct headers, where possible 2023-02-23 17:25:30 -08:00
urlmatch.h
usage.c treewide: remove unnecessary includes of cache.h 2023-03-21 10:56:53 -07:00
userdiff.c Merge branch 'rs/userdiff-multibyte-regex' 2023-04-20 14:33:35 -07:00
userdiff.h Merge branch 'rs/userdiff-multibyte-regex' 2023-04-20 14:33:35 -07:00
utf8.c
utf8.h
varint.c
varint.h
version.c
version.h
versioncmp.c config API: add "string" version of *_value_multi(), fix segfaults 2023-03-28 07:37:53 -07:00
walker.c treewide: remove cache.h inclusion due to object.h changes 2023-04-11 08:52:10 -07:00
walker.h
wildmatch.c Merge branch 'pw/wildmatch-fixes' 2023-04-04 14:28:27 -07:00
wildmatch.h wildmatch: hide internal return values 2023-03-20 10:58:53 -07:00
worktree.c treewide: remove cache.h inclusion due to setup.h changes 2023-03-21 10:56:54 -07:00
worktree.h Merge branch 'rj/avoid-switching-to-already-used-branch' 2023-03-19 15:03:11 -07:00
wrap-for-bin.sh
wrapper.c treewide: be explicit about dependence on trace.h & trace2.h 2023-04-11 08:52:08 -07:00
wrapper.h wrapper.h: move declarations for wrapper.c functions from cache.h 2023-03-21 10:56:53 -07:00
write-or-die.c write-or-die.h: move declarations for write-or-die.c functions from cache.h 2023-03-21 10:56:54 -07:00
write-or-die.h write-or-die.h: move declarations for write-or-die.c functions from cache.h 2023-03-21 10:56:54 -07:00
ws.c
wt-status.c object-name.h: move declarations for object-name.c functions from cache.h 2023-04-11 08:52:09 -07:00
wt-status.h
xdiff-interface.c Merge branch 'en/header-split-cleanup' 2023-04-06 13:38:31 -07:00
xdiff-interface.h treewide: remove unnecessary cache.h includes 2023-02-23 17:25:28 -08:00

README.md

Build status

Git - fast, scalable, distributed revision control system

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

Git is an Open Source project covered by the GNU General Public License version 2 (some parts of it are under different licenses, compatible with the GPLv2). It was originally written by Linus Torvalds with help of a group of hackers around the net.

Please read the file INSTALL for installation instructions.

Many Git online resources are accessible from https://git-scm.com/ including full documentation and Git related tools.

See Documentation/gittutorial.txt to get started, then see Documentation/giteveryday.txt for a useful minimum set of commands, and Documentation/git-<commandname>.txt for documentation of each command. If git has been correctly installed, then the tutorial can also be read with man gittutorial or git help tutorial, and the documentation of each command with man git-<commandname> or git help <commandname>.

CVS users may also want to read Documentation/gitcvs-migration.txt (man gitcvs-migration or git help cvs-migration if git is installed).

The user discussion and development of Git take place on the Git mailing list -- everyone is welcome to post bug reports, feature requests, comments and patches to git@vger.kernel.org (read Documentation/SubmittingPatches for instructions on patch submission and Documentation/CodingGuidelines).

Those wishing to help with error message, usage and informational message string translations (localization l10) should see po/README.md (a po file is a Portable Object file that holds the translations).

To subscribe to the list, send an email with just "subscribe git" in the body to majordomo@vger.kernel.org (not the Git list). The mailing list archives are available at https://lore.kernel.org/git/, http://marc.info/?l=git and other archival sites.

Issues which are security relevant should be disclosed privately to the Git Security mailing list git-security@googlegroups.com.

The maintainer frequently sends the "What's cooking" reports that list the current status of various development topics to the mailing list. The discussion following them give a good reference for project status, development direction and remaining tasks.

The name "git" was given by Linus Torvalds when he wrote the very first version. He described the tool as "the stupid content tracker" and the name as (depending on your mood):

  • random three-letter combination that is pronounceable, and not actually used by any common UNIX command. The fact that it is a mispronunciation of "get" may or may not be relevant.
  • stupid. contemptible and despicable. simple. Take your pick from the dictionary of slang.
  • "global information tracker": you're in a good mood, and it actually works for you. Angels sing, and a light suddenly fills the room.
  • "goddamn idiotic truckload of sh*t": when it breaks