Two regexes in parsePatch disagree about when a line with prefix `diff ` is a patch header

[ExplodingCabbage]

Namely, this regex...

/^(Index:\s|diff\s|---\s|\+\+\+\s|===================================================================)/

... and this regex:

/^(?:Index:|diff(?: -r \w+)+)\s+(.+?)\s*$/

In the former, diff bla matches; in the latter, it does not. This surely has some buggy or at least weird-and-arbitrary consequences.

[guiyi-he]

Since the vulnerability is fixed, would you mind creating a GitHub Security Advisory for this report and requesting a CVE via GitHub?

[ExplodingCabbage]

I don't think this issue is related to the vuln, @ShiyuBanzhou - it's a separate bug with less significant consequences.

(Edit: following comments about the vuln migrated to #644.)