These Coverity reports are new as of this -rc cycle; Apart from the writev
one, I don't think any of these are pressing, in most cases I am still
puzzled why they were reported only now.
Johannes Schindelin (7):
wrapper: guard writev_in_full() against signed overflow
gpg-interface: make signature-prefix matching length-aware
midx: validate incremental MIDX pack IDs
rerere: do not record failed conflict resolution data
t/unit-tests: check reftable iterator initialization
oss-fuzz: handle reftable iterator initialization failures
test-read-midx: check midx_fill_entry() result
gpg-interface.c | 10 +++++-----
midx.c | 12 +++++++++---
oss-fuzz/fuzz-reftable.c | 18 ++++++++++--------
rerere.c | 30 ++++++++++++++++++++++++++----
t/helper/test-read-midx.c | 6 +++++-
t/unit-tests/u-reftable-table.c | 2 +-
wrapper.c | 4 ++++
7 files changed, 60 insertions(+), 22 deletions(-)
base-commit: 12cb6293d6288865c1a133cf22accbaf99d13eb6
Published-As: https://github.com/gitgitgadget/git/releases/tag/pr-2231%2Fdscho%2Ffix-coverity-high-severity-v1
Fetch-It-Via: git fetch https://github.com/gitgitgadget/git pr-2231/dscho/fix-coverity-high-severity-v1
Pull-Request: https://github.com/gitgitgadget/git/pull/2231
--
gitgitgadget