A bug in svntest\main.py makes all py tests failed with -enable-sasl

2023-01-29 Thread VirusCamp
Hi, everyone. I found a bug in subversion-1.14.2\subversion\tests\cmdline\svntest\main.py. The bug makes `python win-tests.py --enable-sasl` failed for all py tests. ``` Traceback (most recent call last): File "D:\subversion-1.14.2\subversion\tests\cmdline\svntest\main.py", line 1927, in run

Re: Switching from SHA1 to a checksum type without known collisions in 1.15 working copy format

2023-01-29 Thread Evgeny Kotkov via dev
Daniel Shahaf writes: > > That could happen after a public disclosure of a pair of executable > > files/scripts where the forged version allows for remote code execution. > > Or maybe something similar with a file format that is often stored in > > repositories and that can be executed or used by

Re: Switching from SHA1 to a checksum type without known collisions in 1.15 working copy format

2023-01-29 Thread Evgeny Kotkov via dev
Daniel Shahaf writes: > > (I'm not saying that the above rules have to be used in this particular case > > and that a veto is invalid, but still thought it’s worth mentioning.) > > > > I vetoed the change because it hadn't been designed on the dev@ list, > had not garnered dev@'s consensus, and