-
-
Notifications
You must be signed in to change notification settings - Fork 2k
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
The .gitleaksignore is usually part of the folder to scan, so this is part of external input to the tool.
It is possible to put a symlink to /dev/random into git, this will make the scanner run OOM.
To Reproduce
Steps to reproduce the behavior:
ln -s /dev/random .gitleaksignore
Expected behavior
Either don't follow symlinks or check the input is not malformed.
Basic Info (please complete the following information):
- OS: Linux
- Gitleaks Version: 8.18.2
cc @zricethezav
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working