summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authornagachika <nagachika@ruby-lang.org>2022-10-20 20:30:06 +0900
committerusa <usa@garbagecollect.jp>2022-11-24 11:20:51 +0900
commit25df68ae91ce0f6e8b78aa42e840e785e5e191ed (patch)
tree9b2fc5b3f06a13c65e81f080f2079e207a3ebd04
parentf33522baac8320883c0acac226d8fab29c9df400 (diff)
merge revision(s) dae843f6b7502f921a7e66f39e3714a39d860181,86096a91d55f72620e0f8ca8634da5fa342dc35b:
Bypass git submodule add/update with git config protocol.file.allow=always option. Co-authored-by: Nobuyoshi Nakada <nobu@ruby-lang.org> --- test/rubygems/test_gem_source_git.rb | 5 +++++ 1 file changed, 5 insertions(+) [rubygems/rubygems] Use [] instead of double-quotes --- test/rubygems/test_gem_source_git.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
-rw-r--r--test/rubygems/test_gem_source_git.rb5
1 files changed, 5 insertions, 0 deletions
diff --git a/test/rubygems/test_gem_source_git.rb b/test/rubygems/test_gem_source_git.rb
index 22fbdee05e..6d7b6b0383 100644
--- a/test/rubygems/test_gem_source_git.rb
+++ b/test/rubygems/test_gem_source_git.rb
@@ -64,6 +64,11 @@ class TestGemSourceGit < Gem::TestCase
end
def test_checkout_submodules
+ # We need to allow to checkout submodules with file:// protocol
+ # CVE-2022-39253
+ # https://lore.kernel.org/lkml/xmqq4jw1uku5.fsf@gitster.g/
+ system(@git, *%W[config --global protocol.file.allow always])
+
source = Gem::Source::Git.new @name, @repository, 'master', true
git_gem 'b'