commit 3af5bc7c0bbac60aae03923bb2b0e1f80909016b
from: Stefan Sperling <stsp@stsp.name>
date: Wed Mar 18 16:13:48 2020 UTC

do not allow passing arbitrary options to SSH

commit - 967f7d1fd3c54a53b769a145c1c5b63b6c7cef33
commit + 3af5bc7c0bbac60aae03923bb2b0e1f80909016b
blob - 0f64ab46423531dde2762bce31e0c9ee831bace5
blob + 4a328e642feaf96554b13d853b193a2d4213fbef
--- lib/fetch.c
+++ lib/fetch.c
@@ -105,7 +105,7 @@ dial_ssh(int *fetchfd, const char *host, const char *p
 		n = snprintf(cmd, sizeof(cmd), "git-%s-pack", direction);
 		if (n < 0 || n >= sizeof(cmd))
 			err(1, "snprintf");
-		if (execl(GOT_FETCH_PATH_SSH, GOT_FETCH_PATH_SSH,
+		if (execl(GOT_FETCH_PATH_SSH, GOT_FETCH_PATH_SSH, "--",
 		    host, cmd, path, NULL) == -1)
 			err(1, "execl");
 		abort(); /* not reached */