mirror of
https://github.com/openwrt/packages.git
synced 2026-05-31 06:51:51 +08:00
Alexandru Ardelean
f662de1b96
Fixes symlink traversal vulnerability (CVE-2025-26625) that allowed writing files outside the repository on checkout/pull. Other changes since 3.5.1: - Add --refetch option to force re-download of LFS objects - Add --json and --dry-run options for fetch operations - Improve .netrc handling on Windows and macOS root CA support - Upgrade to Go 1.25 (requires Linux kernel 3.2+) Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
15 lines
420 B
Bash
15 lines
420 B
Bash
#!/bin/sh
|
|
|
|
[ "$1" = "git-lfs" ] || exit 0
|
|
|
|
# Verify git-lfs registers itself as a git extension and core commands work
|
|
git lfs help 2>&1 | grep -q "track"
|
|
|
|
# Verify git-lfs env shows it is wired into git
|
|
git lfs env 2>&1 | grep -qi "git\|lfs\|endpoint"
|
|
|
|
# Verify key subcommands are available
|
|
git lfs help track 2>&1 | grep -qi "track"
|
|
git lfs help push 2>&1 | grep -qi "push"
|
|
git lfs help pull 2>&1 | grep -qi "pull"
|