cgit/cgit.c, branch v1.1

Use skip_prefix() to get rid of magic constants

2016-10-12T12:13:10Z

Signed-off-by: Lukas Fleischer

cgit: replace 'unsigned char sha1[20]' with 'struct object_id oid'

2016-10-04T07:47:18Z

Upstream git is replacing 'unsigned char sha1[20]' with 'struct object_id oid'. We have some code that can be changed independent from upstream. So here we go...

git: update to v2.10.0

2016-09-04T10:38:18Z

Upstream continues to replace unsigned char *sha1 with struct object_id old_oid. This makes the required changes. The git lib has its own main function now. Rename our main function to cmd_main, it is called from main then.

Fix qry.head leak on error

2016-07-11T23:06:04Z

This is run soon before exiting so it wasn't leaked for long. Signed-off-by: Richard Maw

Hosted on HTTPS now

2016-06-07T12:49:35Z

ui-shared: add homepage to tabs

2016-02-22T17:40:13Z

Signed-off-by: Jason A. Donenfeld

ui-plain: add enable-html-serving flag

2016-01-14T14:42:56Z

Unrestricts plain/ to contents likely to be executed by browser.

ui-blob: Do not accept mimetype from user

2016-01-14T13:31:13Z

filter: avoid integer overflow in authenticate_post

2015-11-24T10:31:43Z

ctx.env.content_length is an unsigned int, coming from the CONTENT_LENGTH environment variable, which is parsed by strtoul. The HTTP/1.1 spec says that "any Content-Length greater than or equal to zero is a valid value." By storing this into an int, we potentially overflow it, resulting in the following bounding check failing, leading to a buffer overflow. Reported-by: Erik Cabetas Signed-off-by: Jason A. Donenfeld

cgit.c: remove useless null check

2015-10-09T08:54:19Z

Everywhere else in this function we do not check whether the value is null and parse_configfile() never passes a null value to this callback. Coverity-id: 13846 Signed-off-by: John Keeping