From: "Ævar Arnfjörð Bjarmason" <avarab@gmail.com>
To: Junio C Hamano <gitster@pobox.com>
Cc: "René Scharfe" <l.s.r@web.de>, "Git List" <git@vger.kernel.org>
Subject: Re: PATCH] bisect--helper: plug strvec leak in bisect_start()
Date: Thu, 06 Oct 2022 23:35:19 +0200 [thread overview]
Message-ID: <221006.86a668r5mf.gmgdl@evledraar.gmail.com> (raw)
In-Reply-To: <xmqqy1tunjgp.fsf@gitster.g>
On Wed, Oct 05 2022, Junio C Hamano wrote:
> Ævar Arnfjörð Bjarmason <avarab@gmail.com> writes:
>
>> But I don't get it in this case, why not just:
>>
>> diff --git a/builtin/bisect--helper.c b/builtin/bisect--helper.c
>> index 4e97817fba5..f9645a9d0df 100644
>> --- a/builtin/bisect--helper.c
>> +++ b/builtin/bisect--helper.c
>> @@ -763,11 +763,9 @@ static enum bisect_error bisect_start(struct bisect_terms *terms, const char **a
>> strbuf_read_file(&start_head, git_path_bisect_start(), 0);
>> strbuf_trim(&start_head);
>> if (!no_checkout) {
>> - struct strvec argv = STRVEC_INIT;
>> + const char *argv[] = { "checkout", start_head.buf, "--", NULL };
>>
>> - strvec_pushl(&argv, "checkout", start_head.buf,
>> - "--", NULL);
>> - if (run_command_v_opt(argv.v, RUN_GIT_CMD)) {
>> + if (run_command_v_opt(argv, RUN_GIT_CMD)) {
>> res = error(_("checking out '%s' failed."
>> " Try 'git bisect start "
>> "<valid-branch>'."),
>>
>> The common pattern for run_command_v_opt() callers that don't need a
>> dynamic list is exactly that.
>
> I think you answered it yourself. start_head.buf is not known at
> compilation time, and there may be some superstition (it may not be
> a mere superstition, but conservatism) about older compiler not
> grokking it.
I think we're thoroughly past that hump as we have a hard requirement on
designated initializers.
Anyway, I believe GCC's -std=c89 wtith -pedantic catches this, e.g. for
bisect--helper.c (the latter is the above patch):
$ make -k git-objs CFLAGS=-std=c89 2>&1|grep 'initializer element is not computable at load time'|grep bisect
builtin/bisect--helper.c:534:43: error: initializer element is not computable at load time [-Werror=pedantic]
builtin/bisect--helper.c:768:60: error: initializer element is not computable at load time [-Werror=pedantic]
For the former we've had:
static int prepare_revs(struct bisect_terms *terms, struct rev_info *revs)
[...]
struct add_bisect_ref_data cb = { revs };
In the same file since 517ecb3161d (bisect--helper: reimplement
`bisect_next` and `bisect_auto_next` shell functions in C, 2020-09-24).
Other prior art, just taking the char[] ones (and not even all of them):
builtin/merge-index.c:12:37: error: initializer element is not computable at load time [-Werror=pedantic]
12 | const char *arguments[] = { pgm, "", "", "", path, "", "", "", NULL };
builtin/remote.c:95:41: error: initializer element is not computable at load time [-Werror=pedantic]
95 | const char *argv[] = { "fetch", name, NULL, NULL };
archive.c:408:33: error: initializer element is not computable at load time [-Werror=pedantic]
408 | const char *paths[] = { path, NULL };
merge-ort.c:1699:45: error: initializer element is not computable at load time [-Werror=pedantic]
1699 | "--all", merged_revision, NULL };
So I think we can safely use this.
next prev parent reply other threads:[~2022-10-06 21:42 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-10-04 16:06 PATCH] bisect--helper: plug strvec leak in bisect_start() René Scharfe
2022-10-05 7:29 ` Ævar Arnfjörð Bjarmason
2022-10-05 15:43 ` René Scharfe
2022-10-05 19:44 ` Junio C Hamano
2022-10-06 21:35 ` Ævar Arnfjörð Bjarmason [this message]
2022-10-06 21:53 ` Junio C Hamano
2022-10-07 15:08 ` [PATCH v2] bisect--helper: plug strvec leak René Scharfe
2022-10-07 17:21 ` Junio C Hamano
2022-10-11 2:39 ` Jeff King
2022-10-11 5:42 ` Junio C Hamano
2022-10-11 7:29 ` Ævar Arnfjörð Bjarmason
2022-10-11 13:21 ` Jeff King
2022-10-11 13:20 ` Jeff King
2022-10-11 17:11 ` Junio C Hamano
2022-10-11 18:13 ` Ævar Arnfjörð Bjarmason
2022-10-11 21:43 ` Junio C Hamano
2022-10-14 19:44 ` Jeff King
2022-10-14 20:23 ` Junio C Hamano
2022-10-15 6:51 ` René Scharfe
2022-10-15 18:21 ` Jeff King
2022-10-05 19:41 ` PATCH] bisect--helper: plug strvec leak in bisect_start() Junio C Hamano
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=221006.86a668r5mf.gmgdl@evledraar.gmail.com \
--to=avarab@gmail.com \
--cc=git@vger.kernel.org \
--cc=gitster@pobox.com \
--cc=l.s.r@web.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).