diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2015-12-01 15:32:37 +0000 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2015-12-01 15:32:37 +0000 |
| commit | 785484d2ae5af1254fbb3baa2775acc930e85d88 (patch) | |
| tree | e56212f69a217845e081110fc152174d2b52ff8f /bin/gitlab-shell | |
| parent | 216d7e15fe06917198891a895f762ba84fdcc4d4 (diff) | |
| parent | 9d12fa78d8eb10235dbd287478a3c861dc5a7a25 (diff) | |
| download | gitlab-shell-785484d2ae5af1254fbb3baa2775acc930e85d88.tar.gz | |
Merge branch 'stricter-exec_cmd' into 'master'
Stricter exec cmd
In response to the gitlab-shell 2.6.6-2.6.7 remote code execution
vulnerability.
See merge request !33
Diffstat (limited to 'bin/gitlab-shell')
| -rwxr-xr-x | bin/gitlab-shell | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/bin/gitlab-shell b/bin/gitlab-shell index 084f0c9..f145a1b 100755 --- a/bin/gitlab-shell +++ b/bin/gitlab-shell @@ -17,7 +17,7 @@ require_relative '../lib/gitlab_init' # require File.join(ROOT_PATH, 'lib', 'gitlab_shell') -if GitlabShell.new(key_id, original_cmd).exec +if GitlabShell.new(key_id).exec(original_cmd) exit 0 else exit 1 |