[REPRO] 2026-07-04T21:10:08+00:00 Project cache dir: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce
[REPRO] 2026-07-04T21:10:08+00:00 Repo path: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/repo
[REPRO] 2026-07-04T21:10:08+00:00 Fetching origin...
[REPRO] 2026-07-04T21:10:09+00:00 Ticket-named commit: 588860e3 (588860e30721bf5453b0440c390865a8e85dcae5)
[REPRO] 2026-07-04T21:10:09+00:00 Working vulnerable commit: 588860e3^1 (3309a6cac05335aa4371a0c3750b42fbe05d3cb4)
[REPRO] 2026-07-04T21:10:09+00:00 Exporting vulnerable source to /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln
[REPRO] 2026-07-04T21:10:09+00:00 Building vulnerable binary...
rm -rf out
rm -rf libcivetweb.a
rm -rf libcivetweb.so
rm -rf libcivetweb.so.1
rm -rf libcivetweb.so.1.17.0
rm -rf civetweb
rm -f civetweb_test
cc -c -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -O2 -DNDEBUG -DOPENSSL_API_1_1 -fPIC src/civetweb.c -o out/src/civetweb.o
cc -c -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -O2 -DNDEBUG -DOPENSSL_API_1_1 src/main.c -o out/src/main.o
cc -o civetweb -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -O2 -DNDEBUG -DOPENSSL_API_1_1  out/src/civetweb.o out/src/main.o  -lpthread -lm  -lrt -ldl
[REPRO] 2026-07-04T21:10:10+00:00 Exporting fixed source to /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed
[REPRO] 2026-07-04T21:10:11+00:00 Building fixed binary (NO_POPEN)...
rm -rf out
rm -rf libcivetweb.a
rm -rf libcivetweb.so
rm -rf libcivetweb.so.1
rm -rf libcivetweb.so.1.17.0
rm -rf civetweb
rm -f civetweb_test
cc -c -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -DNO_POPEN -O2 -DNDEBUG -DOPENSSL_API_1_1 -fPIC src/civetweb.c -o out/src/civetweb.o
cc -c -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -DNO_POPEN -O2 -DNDEBUG -DOPENSSL_API_1_1 src/main.c -o out/src/main.o
cc -o civetweb -Wall -Wextra -Wshadow -Wformat-security -Winit-self -Wmissing-prototypes -DLINUX -Iinclude  -DUSE_STACK_SIZE=102400 -DNO_POPEN -O2 -DNDEBUG -DOPENSSL_API_1_1  out/src/civetweb.o out/src/main.o  -lpthread -lm  -lrt -ldl
[REPRO] 2026-07-04T21:10:12+00:00 Vulnerable binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-vuln/civetweb
[REPRO] 2026-07-04T21:10:12+00:00 Fixed binary: /data/pruva/project-cache/6eacbfa0-3b74-40a4-9c42-461898bc0bce/build-fixed/civetweb
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 1 server PID 435506 on port 8080
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 1 healthy
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 1 PUT status: 200
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 1 GET status: 200
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 1 GET body:
uid=1000(vscode) gid=1000(vscode) groups=1000(vscode),962(962)
Linux d778bdddc001 7.0.14-arch1-1 #1 SMP PREEMPT_DYNAMIC Sat, 27 Jun 2026 16:15:10 +0000 x86_64 GNU/Linux
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 2 server PID 435537 on port 8081
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 2 healthy
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 2 PUT status: 200
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 2 GET status: 200
[REPRO] 2026-07-04T21:10:12+00:00 vulnerable attempt 2 GET body:
uid=1000(vscode) gid=1000(vscode) groups=1000(vscode),962(962)
Linux d778bdddc001 7.0.14-arch1-1 #1 SMP PREEMPT_DYNAMIC Sat, 27 Jun 2026 16:15:10 +0000 x86_64 GNU/Linux
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 1 server PID 435568 on port 8082
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 1 healthy
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 1 PUT status: 200
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 1 GET status: 200
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 1 GET body:
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 2 server PID 435596 on port 8083
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 2 healthy
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 2 PUT status: 200
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 2 GET status: 200
[REPRO] 2026-07-04T21:10:12+00:00 fixed attempt 2 GET body:
[REPRO] 2026-07-04T21:10:12+00:00 Vulnerable attempt 1 command output: true
[REPRO] 2026-07-04T21:10:12+00:00 Vulnerable attempt 2 command output: true
[REPRO] 2026-07-04T21:10:12+00:00 Fixed attempt 1 command output: false
[REPRO] 2026-07-04T21:10:12+00:00 Fixed attempt 2 command output: false
[REPRO] 2026-07-04T21:10:12+00:00 Overall confirmation: true
[REPRO] 2026-07-04T21:10:12+00:00 Wrote runtime manifest: /data/pruva/runs/9abbeb7f-454b-47eb-b206-0b53a534d423/bundle/repro/runtime_manifest.json
[REPRO] 2026-07-04T21:10:12+00:00 Reproduction succeeded.