Junio C Hamano [off-list ref] writes:
* js/commit-graph-read-overflow-fix (2019-01-15) 3 commits
- Makefile: correct example fuzz build
- commit-graph: fix buffer read-overflow
- commit-graph, fuzz: add fuzzer for commit-graph
The code to read the commit-graph file was not prepared to see a
corrupt size field in the file, and ended up reading beyond the end
of the buffer.
...
* js/commit-graph-chunk-table-fix (2018-12-14) 3 commits
- Makefile: correct example fuzz build
- commit-graph: fix buffer read-overflow
- commit-graph, fuzz: add fuzzer for commit-graph
The codepath to read from the commit-graph file attempted to read
past the end of it when the file's table-of-contents was corrupt.
-EIWASSTUPID
These are the same thing, different iterations. I'll keep the
original topic branch name and have the updated patches there.
Sorry about the confusion.