Bypass git submodule add/update with git config protocol.file.allow=always option.

Co-authored-by: Nobuyoshi Nakada <[email protected]>

1 files changed, 5 insertions, 0 deletions

diff --git a/test/rubygems/test_gem_source_git.rb b/test/rubygems/test_gem_source_git.rb
index 5702da0597..c3b324771f 100644
--- a/test/rubygems/test_gem_source_git.rb
+++ b/test/rubygems/test_gem_source_git.rb
@@ -63,6 +63,11 @@ class TestGemSourceGit < Gem::TestCase
   end
 
   def test_checkout_submodules
+    # We need to allow to checkout submodules with file:// protocol
+    # CVE-2022-39253
+    # https://lore.kernel.org/lkml/[email protected]/
+    system(@git, *%W"config --global protocol.file.allow always")
+
     source = Gem::Source::Git.new @name, @repository, "master", true
 
     git_gem "b"