mirror of
https://github.com/go-gitea/gitea.git
synced 2026-10-26 06:16:56 +09:00
42b1f95261
Bound the memory used when parsing uploaded packages, so instances with low memory limits survive non-standard packages. 1. Metadata files are read through a size-limited reader, archives themselves stay unbounded so large payloads keep working 2. zstd decoding caps the window at 128 MiB, the zstd CLI default 3. RPM headers go through a first-party reader with rpmlib's size and array count limits that allocates only what the upload contains, until https://github.com/sassoftware/go-rpmutils/pull/44 is released. Signing still verifies the payload digest, and its signature header matches rpmsign's byte for byte 4. Swift and NuGet read the zip entry they size-checked, a duplicate name could stand in for it before 5. Terraform states check `LIMIT_SIZE_TERRAFORM_STATE` before parsing, NuGet symbol PDBs share a 256 MiB budget 6. Oversized container configs are rejected instead of stored without metadata, invalid Vagrant boxes answer 400 instead of 500 Signed-off-by: techknowlogick <git@tklk.dev> Co-authored-by: techknowlogick <git@tklk.dev> Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: techknowlogick <techknowlogick@gitea.com>
98 lines
1.9 KiB
Go
98 lines
1.9 KiB
Go
// Copyright 2022 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package vagrant
|
|
|
|
import (
|
|
"archive/tar"
|
|
"compress/gzip"
|
|
"io"
|
|
"strings"
|
|
|
|
"gitea.dev/modules/json"
|
|
"gitea.dev/modules/packages"
|
|
"gitea.dev/modules/validation"
|
|
)
|
|
|
|
const (
|
|
PropertyProvider = "vagrant.provider"
|
|
)
|
|
|
|
// Metadata represents the metadata of a Vagrant package
|
|
type Metadata struct {
|
|
Author string `json:"author,omitempty"`
|
|
Description string `json:"description,omitempty"`
|
|
ProjectURL string `json:"project_url,omitempty"`
|
|
RepositoryURL string `json:"repository_url,omitempty"`
|
|
}
|
|
|
|
// ParseMetadataFromBox parses the metadata of a box file
|
|
func ParseMetadataFromBox(r io.Reader) (*Metadata, error) {
|
|
gzr, err := gzip.NewReader(r)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer gzr.Close()
|
|
|
|
tr := tar.NewReader(gzr)
|
|
for {
|
|
hd, err := tr.Next()
|
|
if err == io.EOF {
|
|
break
|
|
}
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if hd.Typeflag != tar.TypeReg {
|
|
continue
|
|
}
|
|
|
|
if hd.Name == "info.json" {
|
|
return ParseInfoFile(tr)
|
|
}
|
|
}
|
|
|
|
return &Metadata{}, nil
|
|
}
|
|
|
|
// ParseInfoFile parses a info.json file to retrieve the metadata of a Vagrant package
|
|
func ParseInfoFile(r io.Reader) (*Metadata, error) {
|
|
var values map[string]string
|
|
if err := json.NewDecoder(packages.NewLimitedReader(r, packages.MaxMetadataSize)).Decode(&values); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
m := &Metadata{}
|
|
|
|
// There is no defined format for this file, just try the common keys
|
|
for k, v := range values {
|
|
switch strings.ToLower(k) {
|
|
case "description":
|
|
fallthrough
|
|
case "short_description":
|
|
m.Description = v
|
|
case "website":
|
|
fallthrough
|
|
case "homepage":
|
|
fallthrough
|
|
case "url":
|
|
if validation.IsValidURL(v) {
|
|
m.ProjectURL = v
|
|
}
|
|
case "repository":
|
|
fallthrough
|
|
case "source":
|
|
if validation.IsValidURL(v) {
|
|
m.RepositoryURL = v
|
|
}
|
|
case "author":
|
|
fallthrough
|
|
case "authors":
|
|
m.Author = v
|
|
}
|
|
}
|
|
|
|
return m, nil
|
|
}
|