Method _write_empty_index

bbot/modules/gitdumper.py:285–294

Replace the index with a valid empty one so downstream tools never read attacker-controlled index entries (CVE-2025-10283).

(folder)

    @staticmethod
    def _write_empty_index(folder):
        """Replace the index with a valid empty one so downstream tools
        never read attacker-controlled index entries (CVE-2025-10283)."""
        import hashlib
        import struct

        header = b"DIRC" + struct.pack(">II", 2, 0)
        index_path = folder / ".git" / "index"
        if index_path.exists():
            index_path.write_bytes(header + hashlib.sha1(header).digest())