> - system("git-update-ref $remote/$branch $cid") == 0
> + system('git-update-ref', "$remote/$branch", $cid) == 0
I hope there are no further such system calls left. This could run arbitrary
commands if one was tricked into importing an evil repository.
Morten
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
