upstream/mercurial-mirror Files · tests/fakemergerecord.py

convert: test for shell injection in git calls (SEC)...

convert: test for shell injection in git calls (SEC) CVE-2016-3069 (5/5) Before recent refactoring we were not escaping calls to git at all which made such injections possible. Let's have a test for that to avoid this problem in the future. Reported by Blake Burkhart.

Siddharth Agarwal - - Load All Authors

File last commit:

r27027:a01ecbcf default


                r28663:ae279d4a

3.7.3 stable

Download file

             fakemergerecord.py
        
                    25 lines
            
             | 686 B
            
                | text/x-python
            
             |
                PythonLexer
            
             / tests / fakemergerecord.py
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      # Extension to write out fake unsupported records into the merge state

      #

      #

      from __future__ import absolute_import

      from mercurial import (

          cmdutil,

          merge,

      )

      cmdtable = {}

      command = cmdutil.command(cmdtable)

      @command('fakemergerecord',

               [('X', 'mandatory', None, 'add a fake mandatory record'),

                ('x', 'advisory', None, 'add a fake advisory record')], '')

      def fakemergerecord(ui, repo, *pats, **opts):

          ms = merge.mergestate.read(repo)

          records = ms._makerecords()

          if opts.get('mandatory'):

              records.append(('X', 'mandatory record'))

          if opts.get('advisory'):

              records.append(('x', 'advisory record'))

          ms._writerecords(records)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				# Extension to write out fake unsupported records into the merge state
				#
				#

				from __future__ import absolute_import

				from mercurial import (
				cmdutil,
				merge,
				)

				cmdtable = {}
				command = cmdutil.command(cmdtable)

				@command('fakemergerecord',
				[('X', 'mandatory', None, 'add a fake mandatory record'),
				('x', 'advisory', None, 'add a fake advisory record')], '')
				def fakemergerecord(ui, repo, pats, *opts):
				ms = merge.mergestate.read(repo)
				records = ms._makerecords()
				if opts.get('mandatory'):
				records.append(('X', 'mandatory record'))
				if opts.get('advisory'):
				records.append(('x', 'advisory record'))
				ms._writerecords(records)