cmd_upload names files $(date +%Y%m%d-%H%M%S)-$name. Two image.png uploads in the same second both returned …-195630-image.png, and the file held only the second one's bytes.
Fix: create the file with mktemp (or a counter plus set -o noclobber).
_Source: engineering review, 2026-10-07._
`cmd_upload` names files `$(date +%Y%m%d-%H%M%S)-$name`. Two `image.png` uploads in the same second both returned `…-195630-image.png`, and the file held only the second one's bytes.
**Fix:** create the file with `mktemp` (or a counter plus `set -o noclobber`).
jared
added this to the v0.5.0 hardening + header/phone milestone 2026-10-07 20:04:27 -04:00
jared
added the bug label 2026-10-07 20:04:27 -04:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Source: engineering review, 2026-10-07.
cmd_uploadnames files$(date +%Y%m%d-%H%M%S)-$name. Twoimage.pnguploads in the same second both returned…-195630-image.png, and the file held only the second one's bytes.Fix: create the file with
mktemp(or a counter plusset -o noclobber).