ui-repolist.c: do not return random/stale data from read_agefile

When git/date.c:parse_date() cannot parse its input it returns -1. But
read_agefile() checks if the result is different from zero, essentialy
returning random data from the date buffer when parsing fails. This
patch fixes the issue by verifying that the result from parse_date()
is positive.

Noticed-by: Julius Plenz <plenz@cis.fu-berlin.de>
Signed-off-by: Lars Hjemli <hjemli@gmail.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/ui-repolist.c b/ui-repolist.c
index 2c98668..e138f59 100644
--- a/ui-repolist.c
+++ b/ui-repolist.c
@@ -1,55 +1,55 @@
 /* ui-repolist.c: functions for generating the repolist page
  *
  * Copyright (C) 2006 Lars Hjemli
  *
  * Licensed under GNU General Public License v2
  *   (see COPYING for full license text)
  */
 
 #include "cgit.h"
 #include "html.h"
 #include "ui-shared.h"
 
 time_t read_agefile(char *path)
 {
         time_t result;
         size_t size;
         char *buf;
         static char buf2[64];
 
         if (readfile(path, &buf, &size))
                 return -1;
 
-        if (parse_date(buf, buf2, sizeof(buf2)))
+        if (parse_date(buf, buf2, sizeof(buf2)) > 0)
                 result = strtoul(buf2, NULL, 10);
         else
                 result = 0;
         free(buf);
         return result;
 }
 
 static int get_repo_modtime(const struct cgit_repo *repo, time_t *mtime)
 {
         char *path;
         struct stat s;
         struct cgit_repo *r = (struct cgit_repo *)repo;
 
         if (repo->mtime != -1) {
                 *mtime = repo->mtime;
                 return 1;
         }
         path = fmt("%s/%s", repo->path, ctx.cfg.agefile);
         if (stat(path, &s) == 0) {
                 *mtime = read_agefile(path);
                 r->mtime = *mtime;
                 return 1;
         }
 
         path = fmt("%s/refs/heads/%s", repo->path, repo->defbranch);
         if (stat(path, &s) == 0)
                 *mtime = s.st_mtime;
         else
                 *mtime = 0;
 
         r->mtime = *mtime;
         return (r->mtime != 0);