"David Rydh" <dary@xxxxxxxxxxxxxxxxx> writes: > This commit also fixed two potentially dangerous uses of > prefix_filename() -- which returns static storage space -- in > builtin-config.c and hash-object.c. This should probably be a separate patch. builtin-hash-object.c also uses prefix_filename() first to obtain vpath without strdup() and then uses the function to create arg, which seems to be unsafe to me. I've looked at all the hits from $ git grep -n -e prefix_filename\( -- '*.c' and other places seem to be Ok. -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html