Junio C Hamano <gitster@xxxxxxxxx> writes: > * js/commit-graph-read-overflow-fix (2019-01-15) 3 commits > - Makefile: correct example fuzz build > - commit-graph: fix buffer read-overflow > - commit-graph, fuzz: add fuzzer for commit-graph > > The code to read the commit-graph file was not prepared to see a > corrupt size field in the file, and ended up reading beyond the end > of the buffer. > > ... > * js/commit-graph-chunk-table-fix (2018-12-14) 3 commits > - Makefile: correct example fuzz build > - commit-graph: fix buffer read-overflow > - commit-graph, fuzz: add fuzzer for commit-graph > > The codepath to read from the commit-graph file attempted to read > past the end of it when the file's table-of-contents was corrupt. -EIWASSTUPID These are the same thing, different iterations. I'll keep the original topic branch name and have the updated patches there. Sorry about the confusion.
