Artifact 313dd694f81a032d9b4fdc09aaee838cc1d181c344c6e08aa5c2c615a99301c0:
- File
repo_checkout.go
-
2026-10-25 21:08:25
— part of check-in
[2237a3781a]
on branch feat/carried-uuid-default-login
— fix: validate carried hashes and check FOSSIL_USER first
A carried file outside a sparse store's cone skips the held check, so any caller text of 40 bytes or more reached the F card verbatim, including a newline that writes a card of its own into the check-in. checkCarried now refuses a UUID that is not a lowercase SHA1 or SHA3-256 hash, which covers FileToCommit.UUID and the sparse checkout path alike (tracked in #486).
The default login follows fossil's db_create_default_users, which checks FOSSIL_USER before USER, LOGNAME and USERNAME (tracked in #487). (user: [email protected], size: 8292) [annotate] [blame] [check-ins using]
-
2026-10-25 22:23:31
— part of check-in
[d0abc1b3fa]
on branch main
— Merge pull request #494 from danmestas/feat/carried-uuid-default-login
feat(commit): carry files by UUID; fix Create's default login (user: [email protected], size: 8292) [annotate] [blame] [check-ins using]
-
2026-10-25 21:08:25
— part of check-in
[2237a3781a]
on branch feat/carried-uuid-default-login
— fix: validate carried hashes and check FOSSIL_USER first