{"push_id":1322448917,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"27891556e1b32e1bc84af1a2ef064a78d11c3556","before":"25eedae59e42a195103537f56c9e13b43f7e99d1","commits":[{"sha":"27891556e1b32e1bc84af1a2ef064a78d11c3556","author":{"name":"emaste","email":"d2b7c921af14e445b1748f9c47642fe92e2e657e@FreeBSD.org"},"message":"portsnap: only move expected snapshot contents from snap/ to files/\n\nPreviously it was possible to smuggle in addional files that would\nbe used by later portsnap runs. Now we only move those files expected\nto be in the snapshot into files/ and require that there are no\nunexpected files.\n\nThis was used by portsnap attacks 2, 3, and 4 in the \"non-cryptanalytic\nattacks against FreeBSD update components\" anonymous gist.\n\nReported by:\tanonymous gist\nReviewed by:\tallanjude, delphij\nMFC after:\tASAP\nSponsored by:\tThe FreeBSD Foundation\nDifferential Revision:\thttps://reviews.freebsd.org/D8052","distinct":true,"url":"https://api.github.com/repos/bsd-hacker/freebsd/commits/27891556e1b32e1bc84af1a2ef064a78d11c3556"}]}
{"actor":{"display_login":"bsd-hacker"}}