dir: special case check for the possibility that pathspec is NULL

Commits 404ebceda01c ("dir: also check directories for matching pathspecs", 2019-09-17) and 89a1f4aaf765 ("dir: if our pathspec might match files under a dir, recurse into it", 2019-09-17) added calls to match_pathspec() and do_match_pathspec() passing along their pathspec parameter. Both match_pathspec() and do_match_pathspec() assume the pathspec argument they are given is non-NULL. It turns out that unpack-tree.c's verify_clean_subdirectory() calls read_directory() with pathspec == NULL, and it is possible on case insensitive filesystems for that NULL to make it to these new calls to match_pathspec() and do_match_pathspec(). Add appropriate checks on the NULLness of pathspec to avoid a segfault. In case the negation throws anyone off (one of the calls was to do_match_pathspec() while the other was to !match_pathspec(), yet no negation of the NULLness of pathspec is used), there are two ways to understand the differences: * The code already handled the pathspec == NULL cases before this series, and this series only tried to change behavior when there was a pathspec, thus we only want to go into the if-block if pathspec is non-NULL. * One of the calls is for whether to recurse into a subdirectory, the other is for after we've recursed into it for whether we want to remove the subdirectory itself (i.e. the subdirectory didn't match but something under it could have). That difference in situation leads to the slight differences in logic used (well, that and the slightly unusual fact that we don't want empty pathspecs to remove untracked directories by default). Denton found and analyzed one issue and provided the patch for the match_pathspec() call, SZEDER figured out why the issue only reproduced for some folks and not others and provided the testcase, and I looked through the remainder of the series and noted the do_match_pathspec() call that should have the same check. Co-authored-by: Denton Liu <liu.denton@gmail.com> Co-authored-by: SZEDER Gábor <szeder.dev@gmail.com> Signed-off-by: Elijah Newren <newren@gmail.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>

Elijah Newren committed Oct 1, 2019 at 11:55 UTC 69f272b922df153c86db520bf9b6018a9808c2a6
2 files changed +25 -3
dir.c
+5 -3
@@ -1962,8 +1962,9 @@ static enum path_treatment read_directory_recursive(struct dir_struct *dir,
1962 ((state == path_untracked) &&
1963 (get_dtype(cdir.de, istate, path.buf, path.len) == DT_DIR) &&
1964 ((dir->flags & DIR_SHOW_IGNORED_TOO) ||
1965 - do_match_pathspec(istate, pathspec, path.buf, path.len,
1966 - baselen, NULL, DO_MATCH_LEADING_PATHSPEC) == MATCHED_RECURSIVELY_LEADING_PATHSPEC))) {
1965 + (pathspec &&
1966 + do_match_pathspec(istate, pathspec, path.buf, path.len,
1967 + baselen, NULL, DO_MATCH_LEADING_PATHSPEC) == MATCHED_RECURSIVELY_LEADING_PATHSPEC)))) {
1968 struct untracked_cache_dir *ud;
1969 ud = lookup_untracked(dir->untracked, untracked,
1970 path.buf + baselen,
@@ -1975,7 +1976,8 @@ static enum path_treatment read_directory_recursive(struct dir_struct *dir,
1976 if (subdir_state > dir_state)
1977 dir_state = subdir_state;
1978
1978 - if (!match_pathspec(istate, pathspec, path.buf, path.len,
1979 + if (pathspec &&
1980 + !match_pathspec(istate, pathspec, path.buf, path.len,
1981 0 /* prefix */, NULL,
1982 0 /* do NOT special case dirs */))
1983 state = path_none;
t/t0050-filesystem.sh
+20
@@ -131,4 +131,24 @@ $test_unicode 'merge (silent unicode normalization)' '
131 git merge topic
132 '
133
134 +test_expect_success CASE_INSENSITIVE_FS 'checkout with no pathspec and a case insensitive fs' '
135 + git init repo &&
136 + (
137 + cd repo &&
138 +
139 + >Gitweb &&
140 + git add Gitweb &&
141 + git commit -m "add Gitweb" &&
142 +
143 + git checkout --orphan todo &&
144 + git reset --hard &&
145 + mkdir -p gitweb/subdir &&
146 + >gitweb/subdir/file &&
147 + git add gitweb &&
148 + git commit -m "add gitweb/subdir/file" &&
149 +
150 + git checkout master
151 + )
152 +'
153 +
154 test_done