Re: [PATCH 2/2] commit-graph: fix buffer read-overflow

[Derrick Stolee]

On 12/5/2018 5:32 PM, Josh Steadmon wrote:
  
+		if (chunk_lookup + GRAPH_CHUNKLOOKUP_WIDTH > data + graph_size) {
+                       error(_("chunk lookup table entry missing; graph file may be 
incomplete"));
+                       free(graph);
+                       return NULL;
+               }

Something I forgot earlier: there are several tests in 
t5318-commit-graph.sh that use 'git commit-graph verify' to ensure we 
hit these error conditions on a corrupted commit-graph file. Could you 
try adding a test there that looks for this error message?

Thanks,
-Stolee