From 4ebb94ec3cf70462a626c0d659d93066927a203b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lauren=C8=9Biu=20Nicola?= <lnicola@dend.ro>
Date: Tue, 14 Sep 2021 11:33:42 +0300
Subject: [PATCH] Validate git commit hashes

---
 src/main.rs | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/main.rs b/src/main.rs
index 54e2e3c..c39f219 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -416,6 +416,16 @@ fn run() -> Result<(), Error> {
         ));
     }
 
+    if args
+        .commits
+        .iter()
+        .any(|hash| hash.len() != 40 || hash.chars().any(|c| !c.is_ascii_hexdigit()))
+    {
+        return Err(Error::msg(
+            "commit identifiers must be full-length git commit hashes",
+        ));
+    }
+
     let host = args.host.as_deref().unwrap_or(env!("HOST"));
 
     let components = args.components.iter().map(Deref::deref).collect::<Vec<_>>();