[Webkit-unassigned] [Bug 168774] Add a test verifying cache deduplication is not sensitive to SHA1 collision attack

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 24 06:24:18 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=168774

--- Comment #29 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
(In reply to comment #28)
> Oh wow, incredible.
> 
> Is it fixable, or are we just totally hosed? Are we going to need to delete
> all the SVN history since this commit from the server in order to avoid the
> hash collision?

It seems its not a problem with GIT, but with SVN ?

This simple SVN checkout on a new empty directory will fail:

$ svn co https://svn.webkit.org/repository/webkit/trunk/LayoutTests/http/tests/cache/

output: http://sprunge.us/XffD

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170224/3ffa923c/attachment.html>


More information about the webkit-unassigned mailing list