Age	Commit message (Collapse)	Author	Lines
19 hours	Diff without asking xdiff for a minimal result	Bryce Kwon	-1/+3
	XDF_NEED_MINIMAL turns off the cost limit in xdiff, so a file whose lines were reordered took time quadratic in its length: 2.1 s for one of 40000 lines, now 38 ms. Git leaves it off by default as well.
19 hours	Search the log literally as intended	Bryce Kwon	-6/+13
	setup_revisions compiles the pattern itself, and the literal type cgit set afterwards came too late, so text that was no valid regular expression, such as an unbalanced bracket, ended in a 500.
23 hours	Test the features the suite never reached	Bryce Kwon	-0/+75
	Index sorting, the commit graph, the stats periods past a week, the hex dump of a binary file and a Lua filter's html_url_arg and html_include ran in no test.
23 hours	Run a config comment to the end of its line	Bryce Kwon	-1/+17
	skip_line stopped at a NUL as well as at a newline, so the rest of the comment after one was read as a setting.
23 hours	Give a repository without a path no age	Bryce Kwon	-0/+16
	The index built its paths from a NULL repo.path, which the C library prints as "(null)", so it looked for refs under that name in the working directory.
23 hours	End a long directory chain on its last link	Bryce Kwon	-1/+29
	Past fifteen single directories the row stopped after writing the next separator, which left it ending in a dangling " / ".
23 hours	Show an absolute link target as text	Bryce Kwon	-3/+30
	A symlink to /etc/passwd was resolved against the tree and linked to etc/passwd inside it, a different file or none at all.
23 hours	Find a compressor on the default path when unset	Bryce Kwon	-2/+28
	With no PATH in the environment, the check that a compressor exists gave up and refused every compressed snapshot, though execvp would have found it on the system's default path.
23 hours	Keep snapshot members from starting at a slash	Bryce Kwon	-1/+30
	A name that was all suffix, such as .tar, settled on a ref called v with an empty prefix, and an empty snapshot-prefix did the same for a snapshot asked for by id, so every member of the archive started at /.
23 hours	Say why an oversized readme leaves about empty	Bryce Kwon	-3/+31
	A readme past max-blob-size is never read, which left the about page with an empty block and no word of why.
23 hours	Offer tag snapshots only for a tagged commit	Bryce Kwon	-5/+23
	The tag page offered a download for a tag of a tree or a blob, which only led to a "Not a commit" page. The refs listing already checks.
23 hours	Refuse pathspec magic in the feed as in the log	Bryce Kwon	-0/+17
	A feed path starting with a colon reached git as pathspec magic, so an unknown magic word ended the request in a 500 and a known one changed what the path matched, while the log answers both with a 400.
23 hours	Date a reftable repository on the index	Bryce Kwon	-0/+15
	The idle column falls back on the mtime of the branch's loose ref or of packed-refs, and a reftable repository has neither, so its cell stayed empty. Git rewrites reftable/tables.list on every ref update.
23 hours	Answer dumb-clone HEAD from the ref store	Bryce Kwon	-5/+53
	A reftable repository keeps only a placeholder in its HEAD file, so a dumb clone was told HEAD named refs/heads/.invalid and checked nothing out. HEAD is now answered the way git's http-backend answers it.
23 hours	Make two branch conditions say what they rely on	Bryce Kwon	-2/+2
	cgit_parse_url tested ctx.repo where the loop sets repo_end alongside it, and the log's closing link kept a commit it never read. Clang's analyzer tripped on both.
23 hours	Close the tree row when a link target is unreadable	Bryce Kwon	-10/+14
	The row stopped at the error and left its cells open, so the rest of the listing rendered inside it.
23 hours	Correct three comments that drifted from the code	Bryce Kwon	-6/+7
23 hours	Cut text between characters, never inside one	Bryce Kwon	-9/+34
	The index description was cut at a byte count, which could split a multibyte character and leave an invalid sequence on the page. Commit subjects already backed up to the start of the character, so html_ntxt now does that for every caller.
23 hours	Verify the git tarball against its published sum	Bryce Kwon	-2/+11
	get-git built whatever the download produced. The tarball is now checked against the SHA-256 kernel.org publishes before it is unpacked, so a corrupt or substituted file stops there.
23 hours	Check cgit under sparse in its own dialect	Bryce Kwon	-1/+3
	The sparse rule put git's SPARSE_FLAGS last, and their -std=gnu99 overrode the gnu17 the sources are built as.
23 hours	Drop the NO_C99_FORMAT switch nothing reads	Bryce Kwon	-4/+0
	Neither cgit nor the bundled Git reads the macro it defined.
23 hours	Keep the two builds from sharing vendor/git at once	Bryce Kwon	-0/+5
	make -j cgit cgit-nolua ran both sub makes in the one Git tree side by side, compiling the same objects and archiving libgit.a twice at once.
23 hours	Build with the compiler the release script probed	Bryce Kwon	-2/+4
	Git's Makefile sets CC = cc, which wins over a CC in the environment, so CC=clang ./tools/release-build.sh probed clang's flags and then built with cc.
23 hours	Find libc's write when git writes first	Bryce Kwon	-0/+12
	A Lua build replaces write, and git can write before cmd_main reaches cgit_init_filters, as it does when GIT_TRACE2 is set, which called through a null pointer and crashed every request.
23 hours	Read a negative ref count as no limit	Bryce Kwon	-13/+33
	summary-branches, summary-tags and max-ref-count already listed every ref at 0, but a negative value reached qsort as a count and crashed the summary and refs pages, and emptied the branch switcher.
23 hours	Page a followed log by the name asked for	Bryce Kwon	-6/+15
	Each row of a followed log moves ctx.qry.vpath to the name its commit knew the file by, and the pager built its links from that, so past a rename both links named the old file and led to an empty page.
23 hours	Show the root commit in a followed log	Bryce Kwon	-13/+50
	A followed log diffs each commit against its parent to learn whether the file changed there, and a root commit was skipped rather than diffed against the empty tree, so a file created in the first commit never showed that commit.
23 hours	Peel an annotated tag before looking for a readme	Bryce Kwon	-0/+15
	Tag links carry the tag name as the head, so on any page reached from an annotated tag the about tab vanished and the about page redirected to the summary.
23 hours	Encode repository urls and the feed branch	Bryce Kwon	-27/+67
	Links built from the repository url, among them the description link on the index and the Atom and refs links, wrote it as configured, so a name holding a space, '#' or '?' broke them. The feed link in the page head did the same with the branch, which turned a '+' into a space.
23 hours	Hold object sizes in size_t as git 2.55 does	Bryce Kwon	-37/+37
	Git 2.55 moved object sizes from unsigned long to size_t. The two are the same type on 64-bit hosts, but not on a 32-bit one, where GCC 14 rejects the mismatched pointers, so cgit stopped compiling there.
37 hours	Say how to build cgit on musl	Bryce Kwon	-0/+6
	Git's code there needs the kernel headers and its bundled regex, and the build failed with nothing to say so.
37 hours	Build Git without translations or Tcl tools	Bryce Kwon	-10/+11
	cgit never shows Git's translations or runs its Tcl tools, yet building needed libintl and msgfmt for one and, under make test, tclsh for the other, which a musl system such as Alpine lacks.
38 hours	Name every Lua filter failure in the log	Bryce Kwon	-9/+30
	A script raising anything but a string handed die a null to print, and a Lua state that could not be created was used anyway once the filter closed.
38 hours	Let a Lua script write while it loads	Bryce Kwon	-2/+26
	A script's top level runs before cgit hooks stdout for it, and the unhook html() began with tripped an assert that aborted cgit.
38 hours	Claim and test Lua 5.5 for every extension	Bryce Kwon	-20/+20
	luaossl from release 20260910 and luaposix load under Lua 5.5, and cgit renders the same pages under it as under LuaJIT. Running the suites there already caught a write to a for loop's control variable, which 5.5 makes read-only.
38 hours	Detect Lua 5.5 when building	Bryce Kwon	-4/+4
	cgit builds against Lua 5.5 and serves the same pages with it, but a host whose only Lua was 5.5 got a binary without Lua from the search.
38 hours	Drop the highlighter's stale guard and dead branch	Bryce Kwon	-11/+2
	cgit runs as a CGI, so no interpreter outlives its request, and the lexers load once per process. The loop below already wrote nothing for an empty blob.
38 hours	Find a script's lexer from its shebang line	Bryce Kwon	-7/+16
	Scintillua's detect reads the first line as well as the name, and without it hooks, bin scripts and anything else lacking an extension stayed plain.
38 hours	Ship the example tracker links commented out	Bryce Kwon	-24/+43
	An unedited copy sent every #123, Closes: and Bug: mark to bugs.example.com, a link that is wrong for every site.
38 hours	Say that a protected repository stays on the index	Bryce Kwon	-0/+8
38 hours	Name the auth cookie __Host- where it can be	Bryce Kwon	-30/+71
	Without the prefix any host under the same domain could set a cgitauth cookie of its own, signing a visitor in as someone else or out.
38 hours	End a session when its account's hash changes	Bryce Kwon	-62/+108
	A session stayed good for its whole week after the password changed or the account went away, which is when ending it matters most.
38 hours	Load auth libraries only when a request needs one	Bryce Kwon	-18/+63
	Required at the top, a missing luaossl or luaposix failed every request to the site, public pages included, and each public page paid to load both.
38 hours	Say which hash kinds each system's crypt checks	Bryce Kwon	-4/+27
	The one recipe given, SHA-512 from Debian's mkpasswd, cannot log anyone in on OpenBSD, whose crypt checks only bcrypt, or on macOS, and libxcrypt, which most Linux distributions use, recommends yescrypt instead.
38 hours	Spend a missing account's login on a real hash	Bryce Kwon	-57/+99
	The fixed SHA-512 stand-in matched only the documented setup, so a site hashing with yescrypt, other rounds or bcrypt answered for missing and real names in different times, and on OpenBSD it failed at once.
38 hours	Turn down passwords past 256 bytes unchecked	Bryce Kwon	-2/+32
	SHA-crypt hashes the password in most of its rounds, so the 4 KB that cgit's POST limit lets through cost about fifteen ordinary logins per anonymous attempt.
38 hours	Read the auth cookie in linear time	Bryce Kwon	-14/+52
	Splitting the header with patterns that backtrack over spaces cost a quarter of a second per request at the 8 KB line most web servers allow, and a second at 16 KB, without any login. auth-file's trim had the same shape and now reads the cookie as well.
38 hours	Offer avatars at twice the size to dense screens	Bryce Kwon	-14/+23
	The 13 pixel icon came out blurred on the high density screens most phones and laptops have.
38 hours	Hash avatar addresses with SHA-256	Bryce Kwon	-13/+16
	Gravatar's documentation now describes SHA-256 hashes on gravatar.com alone, and Libravatar has long accepted them beside MD5.
38 hours	Mark avatar icons as decorative	Bryce Kwon	-11/+7
	A screen reader announced the service's name before every author.