I'm curious what sort of vulnerabilities this could expose.
Conflicting git check ins, breaking cache layers, tampering with downloads, etc
Conflicting git check ins, breaking cache layers, tampering with downloads, etc
2. git stores the length of a blob before hashing [1] which makes it harder (but not impossible) to perform such attacks [2]
[1] http://www.git-scm.com/book/en/v2/Git-Internals-Git-Objects#... [2] http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/13493...