lfs

Feb 16, 2017 GO-2021-0073 +2 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

  GO-2025-4038: Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Changes in this version

+ const LogDiffAdditions

+ const LogDiffDeletions

+ const PlatformLinux

+ const PlatformOSX

+ const PlatformOther

+ const PlatformUndetermined

+ const PlatformWindows

+ const ScanAllMode

+ const ScanLeftToRemoteMode

+ const ScanRefsMode

+ func AllObjects() []localstorage.Object

+ func ClearTempObjects() error

+ func CloneFile(writer io.Writer, reader io.Reader) (bool, error) — darwin/amd64, js/wasm, windows/amd64

+ func ConvertCwdFilesRelativeToRepo(cwdchan <-chan string) (<-chan string, error)

+ func ConvertRepoFilesRelativeToCwd(repochan <-chan string) (<-chan string, error)

+ func CopyFileContents(src string, dst string) error

+ func GetHookInstallSteps() string

+ func IsWindows() bool

+ func LinkOrCopy(src string, dst string) error

+ func LinkOrCopyFromReference(oid string, size int64) error

+ func LocalMediaPathReadOnly(oid string) string

+ func LocalObjectTempDir() string

+ func LocalReferencePath(sha string) string

+ func ObjectExistsOfSize(oid string, size int64) bool

+ func PointerSmudgeToFile(filename string, ptr *Pointer, download bool, manifest *transfer.Manifest, ...) error

+ func ScanObjectsChan() <-chan localstorage.Object

+ type Attribute struct

+ Properties map[string]string

+ Section string

+ Upgradeables map[string][]string

+ func (a *Attribute) Install(opt InstallOptions) error

+ func (a *Attribute) Uninstall()

+ type BaseChannelWrapper struct

+ func (w *BaseChannelWrapper) Wait() error

+ type Batcher struct

+ func NewBatcher(batchSize int) *Batcher

+ func (b *Batcher) Add(ts ...interface{})

+ func (b *Batcher) Exit()

+ func (b *Batcher) Flush()

+ func (b *Batcher) Next() []interface{}

+ type ByPriority []*PointerExtension

+ func (p ByPriority) Len() int

+ func (p ByPriority) Less(i, j int) bool

+ func (p ByPriority) Swap(i, j int)

+ type ChannelWrapper interface

+ Wait func() error

type Downloadable

+ func (d *Downloadable) LegacyCheck() (*api.ObjectResource, error)

+ func (d *Downloadable) Path() string

+ type Hook struct

+ Contents string

+ Type string

+ Upgradeables []string

+ func (h *Hook) Dir() string

+ func (h *Hook) Exists() bool

+ func (h *Hook) Install(force bool) error

+ func (h *Hook) Path() string

+ func (h *Hook) Uninstall() error

+ func (h *Hook) Upgrade() error

+ type InstallOptions struct

+ Force bool

+ Local bool

+ System bool

+ type LogDiffDirection byte

+ type Platform int

+ func GetPlatform() Platform

type Pointer

+ Extensions []*PointerExtension

+ func DecodePointerFromFile(file string) (*Pointer, error)

+ type PointerChannelWrapper struct

+ Results <-chan *WrappedPointer

+ func NewPointerChannelWrapper(pointerChan <-chan *WrappedPointer, errorChan <-chan error) *PointerChannelWrapper

+ func ScanPreviousVersionsToChan(ref string, since time.Time) (*PointerChannelWrapper, error)

+ func ScanRefsToChan(refLeft, refRight string, opt *ScanRefsOptions) (*PointerChannelWrapper, error)

+ func ScanUnpushedToChan(remoteName string) (*PointerChannelWrapper, error)

+ type PointerExtension struct

+ Name string

+ Oid string

+ OidType string

+ Priority int

+ func NewPointerExtension(name string, priority int, oid string) *PointerExtension

type ScanRefsOptions

+ RemoteName string

+ ScanMode ScanningMode

+ func NewScanRefsOptions() *ScanRefsOptions

+ func (o *ScanRefsOptions) GetName(sha string) (string, bool)

+ func (o *ScanRefsOptions) SetName(sha, name string)

+ type ScanningMode int

+ type StringChannelWrapper struct

+ Results <-chan string

+ func NewStringChannelWrapper(stringChan <-chan string, errorChan <-chan error) *StringChannelWrapper

type TransferQueue

+ func NewDownloadCheckQueue(files int, size int64) *TransferQueue

+ func (q *TransferQueue) Skip(size int64)

+ func (q *TransferQueue) Wait()

type Transferable

+ LegacyCheck func() (*api.ObjectResource, error)

+ Path func() string

+ type TreeBlob struct

+ Filename string

+ Sha1 string

+ type TreeBlobChannelWrapper struct

+ Results <-chan TreeBlob

+ func NewTreeBlobChannelWrapper(treeBlobChan <-chan TreeBlob, errorChan <-chan error) *TreeBlobChannelWrapper

type Uploadable

+ func (u *Uploadable) LegacyCheck() (*api.ObjectResource, error)

+ func (u *Uploadable) Path() string

type WrappedPointer

+ func ScanPreviousVersions(ref string, since time.Time) ([]*WrappedPointer, error)

+ func ScanTree(ref string) ([]*WrappedPointer, error)

+ func ScanUnpushed(remoteName string) ([]*WrappedPointer, error)

Jul 29, 2015 GO-2021-0073 +3 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

  GO-2025-4038: Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Changes in this version

+ var GitCommit string

Jul 31, 2015 GO-2021-0073 +3 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

  GO-2025-4038: Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Jul 23, 2015 GO-2021-0073 +3 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

  GO-2025-4038: Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Changes in this version

+ func UninstallFilters() error

+ func UninstallHooks() error

type CleanedPointerError

+ Pointer *Pointer

type Configuration

+ func (c *Configuration) PrivateAccess() bool

+ func (c *Configuration) SetPrivateAccess()

+ func (c *Configuration) Setenv(key, value string) error

type Endpoint

+ SshPort string

+ type ScanRefsOptions struct

+ SkipDeletedBlobs bool

Jun 19, 2015 GO-2021-0073 +3 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

  GO-2025-4038: Git LFS may write to arbitrary files via crafted symlinks in github.com/git-lfs/git-lfs

Changes in this version

+ const EndpointUrlUnknown

+ func LogHttpStats()

+ func LogTransfer(key string, res *http.Response)

+ func PointerSmudgeObject(ptr *Pointer, obj *objectResource, cb CopyCallback) error

type Configuration

+ func (c *Configuration) BatchTransfer() bool

+ func (c *Configuration) ConcurrentTransfers() int

+ func (c *Configuration) Getenv(key string) string

+ func (c *Configuration) GetenvBool(key string, def bool) bool

+ type Downloadable struct

+ Pointer *WrappedPointer

+ func NewDownloadable(p *WrappedPointer) *Downloadable

+ func (d *Downloadable) Check() (*objectResource, *WrappedError)

+ func (d *Downloadable) Name() string

+ func (d *Downloadable) Object() *objectResource

+ func (d *Downloadable) Oid() string

+ func (d *Downloadable) SetObject(o *objectResource)

+ func (d *Downloadable) Size() int64

+ func (d *Downloadable) Transfer(cb CopyCallback) *WrappedError

type Endpoint

+ func NewEndpoint(url string) Endpoint

+ func NewEndpointFromCloneURL(url string) Endpoint

+ type HttpClient struct

+ func (c *HttpClient) Do(req *http.Request) (*http.Response, error)

+ type TransferQueue struct

+ func NewDownloadQueue(workers, files int) *TransferQueue

+ func (q *TransferQueue) Add(t Transferable)

+ func (q *TransferQueue) Errors() []*WrappedError

+ func (q *TransferQueue) Process()

+ func (q *TransferQueue) Watch() chan string

+ type Transferable interface

+ Check func() (*objectResource, *WrappedError)

+ Name func() string

+ Object func() *objectResource

+ Oid func() string

+ SetObject func(*objectResource)

+ Size func() int64

+ Transfer func(CopyCallback) *WrappedError

type Uploadable

+ OidPath string

+ func (u *Uploadable) Check() (*objectResource, *WrappedError)

+ func (u *Uploadable) Name() string

+ func (u *Uploadable) Object() *objectResource

+ func (u *Uploadable) Oid() string

+ func (u *Uploadable) SetObject(o *objectResource)

+ func (u *Uploadable) Transfer(cb CopyCallback) *WrappedError

type WrappedError

+ func Batch(objects []*objectResource) ([]*objectResource, *WrappedError)

+ func DownloadCheck(oid string) (*objectResource, *WrappedError)

+ func DownloadObject(obj *objectResource) (io.ReadCloser, int64, *WrappedError)

+ func UploadCheck(oidPath string) (*objectResource, *WrappedError)

+ func UploadObject(o *objectResource, cb CopyCallback) *WrappedError

+ type WrappedPointer struct

+ Name string

+ Sha1 string

+ Size int64

+ SrcName string

+ Status string

Apr 30, 2015 GO-2021-0073 +2 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

Changes in this version

+ func EncodePointer(writer io.Writer, pointer *Pointer) (int, error)

+ func NewUploadable(oid, filename string, index, totalFiles int) (*Uploadable, *WrappedError)

+ func PointerClean(reader io.Reader, size int64, cb CopyCallback) (*cleanedAsset, error)

+ func PointerSmudge(writer io.Writer, ptr *Pointer, workingfile string, cb CopyCallback) error

+ func ScanIndex() ([]*wrappedPointer, error)

+ func ScanRefs(refLeft, refRight string) ([]*wrappedPointer, error)

+ type CleanedPointerError struct

+ Bytes []byte

+ func (e *CleanedPointerError) Error() string

type Configuration

+ func (c *Configuration) ConcurrentUploads() int

type HookExists

+ Contents string

+ type Pointer struct

+ Oid string

+ OidType string

+ Size int64

+ Version string

+ func DecodeFrom(reader io.Reader) ([]byte, *Pointer, error)

+ func DecodePointer(reader io.Reader) (*Pointer, error)

+ func NewPointer(oid string, size int64) *Pointer

+ func (p *Pointer) Encode(writer io.Writer) (int, error)

+ func (p *Pointer) Encoded() string

+ func (p *Pointer) Smudge(writer io.Writer, workingfile string, cb CopyCallback) error

+ type SmudgeError struct

+ Filename string

+ Oid string

+ type UploadQueue struct

+ func NewUploadQueue(workers, files int) *UploadQueue

+ func (q *UploadQueue) Add(u *Uploadable)

+ func (q *UploadQueue) Errors() []*WrappedError

+ func (q *UploadQueue) Process()

+ type Uploadable struct

+ CB CopyCallback

+ Filename string

+ OIDPath string

+ Size int64

May 13, 2015 GO-2021-0073 +2 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

Apr 8, 2015 GO-2021-0073 +2 more

  GO-2021-0073: Arbitrary command execution in github.com/git-lfs/git-lfs

  GO-2021-0098: Arbitrary code execution on Windows in github.com/git-lfs/git-lfs

  GO-2025-3390: Git LFS permits exfiltration of credentials via crafted HTTP URLs in github.com/git-lfs/git-lfs

Changes in this version

+ const Version

+ var Config = NewConfig()

+ var LargeSizeThreshold = 5 * 1024 * 1024

+ var LocalGitDir string

+ var LocalLogDir string

+ var LocalMediaDir string

+ var LocalWorkingDir string

+ var NotInARepositoryError = errors.New("Not in a repository")

+ var TempDir = filepath.Join(os.TempDir(), "git-lfs")

+ var UserAgent string

+ func CopyWithCallback(writer io.Writer, reader io.Reader, totalSize int64, cb CopyCallback) (int64, error)

+ func DoHTTP(c *Configuration, req *http.Request) (*http.Response, error)

+ func Environ() []string

+ func InRepo() bool

+ func InstallFilters() error

+ func InstallHooks(force bool) error

+ func LocalMediaPath(sha string) (string, error)

+ func ObjectUrl(endpoint Endpoint, oid string) (*url.URL, error)

+ func ResetTempDir() error

+ func Stack() []byte

+ func TempFile(prefix string) (*os.File, error)

+ type AltConfig struct

+ Media struct{ ... }

+ Remote map[string]...

+ type CallbackReader struct

+ C CopyCallback

+ ReadSize int64

+ TotalSize int64

+ func (w *CallbackReader) Read(p []byte) (int, error)

+ type ClientError struct

+ DocumentationUrl string

+ Message string

+ RequestId string

+ func (e *ClientError) Error() string

+ type Configuration struct

+ CurrentRemote string

+ func NewConfig() *Configuration

+ func (c *Configuration) Endpoint() Endpoint

+ func (c *Configuration) GitConfig(key string) (string, bool)

+ func (c *Configuration) HttpClient() *http.Client

+ func (c *Configuration) ObjectUrl(oid string) (*url.URL, error)

+ func (c *Configuration) RemoteEndpoint(remote string) Endpoint

+ func (c *Configuration) Remotes() []string

+ func (c *Configuration) SetConfig(key, value string)

+ type CopyCallback func(int64, int64) error

+ func CopyCallbackFile(event, filename string, index, totalFiles int) (CopyCallback, *os.File, error)

+ type CredentialCmd struct

+ SubCommand string

+ func NewCommand(input Creds, subCommand string) *CredentialCmd

+ func (c *CredentialCmd) Credentials() Creds

+ func (c *CredentialCmd) StdoutString() string

+ type Creds map[string]string

+ func (c Creds) Buffer() *bytes.Buffer

+ type Endpoint struct

+ SshPath string

+ SshUserAndHost string

+ Url string

+ type HookExists struct

+ Name string

+ Path string

+ func (e *HookExists) Error() string

+ type WrappedError struct

+ Err error

+ Message string

+ Panic bool

+ func Download(oid string) (io.ReadCloser, int64, *WrappedError)

+ func Error(err error) *WrappedError

+ func Errorf(err error, format string, args ...interface{}) *WrappedError

+ func Upload(oidPath, filename string, cb CopyCallback) *WrappedError

+ func (e *WrappedError) Context() map[string]string

+ func (e *WrappedError) Del(key string)

+ func (e *WrappedError) Error() string

+ func (e *WrappedError) Errorf(format string, args ...interface{})

+ func (e *WrappedError) Get(key string) string

+ func (e *WrappedError) InnerError() string

+ func (e *WrappedError) Set(key, value string)

+ func (e *WrappedError) Stack() []byte