0
0
mirror of https://github.com/go-gitea/gitea.git synced 2026-06-18 11:27:35 +02:00
Giteabot 3b705738ab
fix: bound CODEOWNERS regex match time (#38011) (#38025)
Backport #38011 by @bircni

User-supplied CODEOWNERS patterns were compiled without a match timeout,
so a crafted pattern (e.g. (a+)+) against a crafted file path could
backtrack for tens of seconds inside the PR creation transaction and
exhaust the database connection pool. Set MatchTimeout on each compiled
rule; the caller already treats match errors as non-matches.

Signed-off-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2026-06-07 16:40:34 +00:00
..
2025-10-19 00:37:50 +08:00
2025-10-19 00:37:50 +08:00
2026-02-28 11:23:20 -08:00