@push.rocks/smartlinuxrepo 0.0.0-stage → 0.1.0

package/dist_ts/readers/gzipmember.js

@@ -0,0 +1,176 @@
+import * as plugins from '../plugins.js';
+import { LinuxRepoError, limitExceeded, truncated } from '../shared/errors.js';
+import { concatBytes, READ_CHUNK_BYTES, readExact, readUpTo } from './bytes.js';
+const FLAG_HCRC = 0x02;
+const FLAG_EXTRA = 0x04;
+const FLAG_NAME = 0x08;
+const FLAG_COMMENT = 0x10;
+/**
+ * Reads exactly one gzip member (RFC 1952) from `inputArg` and leaves the
+ * reader positioned at the first byte after it, so concatenated members (an
+ * apk v2 package) can be read one at a time with their exact boundaries.
+ *
+ * The header is parsed here; the deflate data is inflated with
+ * `zlib.createInflateRaw()`, whose `bytesWritten` counts only the bytes the
+ * deflate stream consumed, and the bytes past the stream's end are pushed back
+ * with `unread`. The trailer's CRC-32 and ISIZE are checked. Returns `null`
+ * when the input ends exactly where a member would start.
+ */
+export async function readGzipMember(inputArg, optionsArg) {
+    const sha1 = plugins.crypto.createHash('sha1');
+    let memberBytes = 0;
+    const account = (bytesArg) => {
+        memberBytes += bytesArg.length;
+        if (memberBytes > optionsArg.maxMemberBytes) {
+            throw limitExceeded(optionsArg.memberLimit, optionsArg.maxMemberBytes, 'gzip member');
+        }
+        sha1.update(bytesArg);
+    };
+    // header
+    const fixed = await readUpTo(inputArg, 10);
+    if (fixed.length === 0) {
+        return null;
+    }
+    if (fixed[0] !== 0x1f || (fixed.length > 1 && fixed[1] !== 0x8b) || (fixed.length > 2 && fixed[2] !== 0x08)) {
+        throw new LinuxRepoError('malformed-archive', 'input is not a gzip member', { field: 'gzip header' });
+    }
+    if (fixed.length < 10) {
+        throw truncated('gzip header');
+    }
+    account(fixed);
+    let headerCrc = plugins.zlib.crc32(fixed);
+    const flags = fixed[3];
+    if ((flags & FLAG_EXTRA) !== 0) {
+        const lengthBytes = await readExact(inputArg, 2, 'gzip header');
+        account(lengthBytes);
+        headerCrc = plugins.zlib.crc32(lengthBytes, headerCrc);
+        const extra = await readExact(inputArg, lengthBytes[0] | (lengthBytes[1] << 8), 'gzip header');
+        account(extra);
+        headerCrc = plugins.zlib.crc32(extra, headerCrc);
+    }
+    for (const flag of [FLAG_NAME, FLAG_COMMENT]) {
+        if ((flags & flag) !== 0) {
+            const text = await readZeroTerminated(inputArg, optionsArg.maxHeaderBytes);
+            account(text);
+            headerCrc = plugins.zlib.crc32(text, headerCrc);
+        }
+    }
+    if ((flags & FLAG_HCRC) !== 0) {
+        const stored = await readExact(inputArg, 2, 'gzip header');
+        account(stored);
+        if ((stored[0] | (stored[1] << 8)) !== (headerCrc & 0xffff)) {
+            throw new LinuxRepoError('malformed-archive', 'gzip header CRC mismatch', { field: 'gzip header' });
+        }
+    }
+    // deflate data
+    const output = await inflateRawMember(inputArg, optionsArg, account);
+    // trailer
+    const trailer = await readExact(inputArg, 8, 'gzip trailer');
+    account(trailer);
+    const view = new DataView(trailer.buffer, trailer.byteOffset, trailer.byteLength);
+    if (view.getUint32(0, true) !== output.crc || view.getUint32(4, true) !== output.bytes.length % 0x1_0000_0000) {
+        throw new LinuxRepoError('malformed-archive', 'gzip trailer does not match the data', { field: 'gzip trailer' });
+    }
+    return { output: output.bytes, memberBytes, memberSha1: sha1.digest('hex') };
+}
+async function inflateRawMember(inputArg, optionsArg, accountArg) {
+    const inflate = plugins.zlib.createInflateRaw();
+    const chunks = [];
+    let outputBytes = 0;
+    let crc = 0;
+    let failure = null;
+    let streamError = null;
+    inflate.on('data', (chunk) => {
+        if (failure !== null) {
+            return;
+        }
+        outputBytes += chunk.length;
+        if (outputBytes > optionsArg.maxOutputBytes) {
+            failure = limitExceeded(optionsArg.outputLimit, optionsArg.maxOutputBytes, 'decompressed gzip member');
+            inflate.destroy();
+            return;
+        }
+        crc = plugins.zlib.crc32(chunk, crc);
+        chunks.push(chunk);
+    });
+    inflate.on('error', (error) => {
+        streamError ??= error;
+    });
+    try {
+        for (;;) {
+            const chunk = await inputArg.read(READ_CHUNK_BYTES);
+            if (chunk === null) {
+                throw truncated('gzip member');
+            }
+            const before = inflate.bytesWritten;
+            try {
+                await writeChunk(inflate, chunk);
+            }
+            catch (error) {
+                throw failure ?? mapInflateError(streamError ?? error);
+            }
+            if (failure !== null) {
+                throw failure;
+            }
+            const consumed = inflate.bytesWritten - before;
+            accountArg(chunk.subarray(0, consumed));
+            if (consumed < chunk.length) {
+                inputArg.unread(chunk.subarray(consumed));
+                break;
+            }
+        }
+        if (!inflate.readableEnded) {
+            await new Promise((resolve) => inflate.once('end', resolve));
+        }
+        if (failure !== null) {
+            throw failure;
+        }
+        return { bytes: concatBytes(chunks, outputBytes), crc };
+    }
+    finally {
+        inflate.destroy();
+    }
+}
+/** Writes one chunk and waits until the stream processed it, failing if the stream closes first. */
+function writeChunk(streamArg, chunkArg) {
+    return new Promise((resolve, reject) => {
+        const onClose = () => reject(new Error('inflate stream closed'));
+        streamArg.once('close', onClose);
+        streamArg.write(chunkArg, (error) => {
+            streamArg.off('close', onClose);
+            if (error) {
+                reject(error);
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+}
+function mapInflateError(errorArg) {
+    return new LinuxRepoError('malformed-archive', 'gzip member has corrupt deflate data', { field: 'gzip member' }, {
+        cause: errorArg,
+    });
+}
+async function readZeroTerminated(inputArg, maxBytesArg) {
+    const parts = [];
+    let total = 0;
+    for (;;) {
+        const chunk = await inputArg.read(READ_CHUNK_BYTES);
+        if (chunk === null) {
+            throw truncated('gzip header');
+        }
+        const nul = chunk.indexOf(0);
+        const take = nul < 0 ? chunk : chunk.subarray(0, nul + 1);
+        total += take.length;
+        if (total > maxBytesArg) {
+            throw limitExceeded('maxHeaderBytes', maxBytesArg, 'gzip header string');
+        }
+        parts.push(take);
+        if (nul >= 0) {
+            inputArg.unread(chunk.subarray(nul + 1));
+            return concatBytes(parts, total);
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/readers/tar.d.ts

@@ -0,0 +1,85 @@
+import type { ILinuxPackageLimits } from '../shared/limits.js';
+import { LimitedReader, type IByteReader } from './bytes.js';
+export interface ITarEntry {
+    /**
+     * The final name: PAX `path`, else GNU long name, else USTAR prefix + name;
+     * a recognised PAX GNU sparse header's `GNU.sparse.name` wins. Bytes are
+     * decoded as Gitea's JSON stores a Go string (`decodeGoUtf8`). The name is
+     * reported as it stands: no normalisation of `./`, `..` or absolute paths.
+     */
+    name: string;
+    /** The link target; empty for `'g'`, as Go returns it. */
+    linkName: string;
+    /**
+     * The header's mode field as Go `archive/tar` parses it (octal or base-256;
+     * a field Go cannot parse fails the archive, as in Go); 0 for `'g'`, as Go
+     * returns it.
+     */
+    mode: bigint;
+    /**
+     * The type flag. Go's legacy `\0` becomes `'0'`, or `'5'` when the name ends
+     * with `/`. `'g'` is a PAX global header, returned as an entry as Go does.
+     */
+    typeflag: string;
+    /**
+     * Data bytes readable through `body` (0 for header-only types and `'g'`);
+     * for a sparse entry, the real size Go reports, any non-negative int64.
+     * Stored data above `Number.MAX_SAFE_INTEGER` bytes is refused.
+     */
+    size: bigint;
+    /**
+     * An old GNU (`'S'`) or PAX GNU 0.0, 0.1 or 1.0 sparse entry whose map Go
+     * accepts. The codec does not expand holes: reading its data (through
+     * `body` or `readTarEntryData`) is refused with `unsupported-package-format`,
+     * a known difference from Gitea; skipping it works.
+     */
+    sparse: boolean;
+    body: LimitedReader;
+}
+export interface ITarReaderOptions {
+    /** Entries returned per archive. */
+    maxEntries: number;
+    /**
+     * One header chain: header blocks, PAX records, GNU long names and old GNU
+     * sparse extension blocks. A PAX GNU 1.0 map, which heads the entry's data,
+     * is bounded by Go's 1 MiB cap only.
+     */
+    maxHeaderBytes: number;
+}
+/**
+ * A bounded ustar reader following Go `archive/tar` (Gitea's reader):
+ * USTAR, PAX (`x`, `g`), GNU long names (`L`, `K`), STAR prefixes, Go's
+ * pre-1.8 GNU prefix fallback, base-256 numbers and signed or unsigned
+ * checksums. A header Go refuses for an unparseable numeric field is refused. The archive ends at two zero
+ * blocks, at a clean end of input on a header boundary (apk segments have no
+ * end marker), or when the input ends inside the padding after an entry.
+ * Sparse maps (old GNU, PAX GNU 0.0, 0.1 and 1.0) are read and validated as
+ * Go does; the holes are not expanded, so a sparse entry's data can only be
+ * skipped.
+ */
+export declare class TarReader {
+    private readonly input;
+    private readonly options;
+    private done;
+    private current;
+    private pad;
+    private entries;
+    constructor(input: IByteReader, options: ITarReaderOptions);
+    next(): Promise<ITarEntry | null>;
+    /**
+     * Go `readOldGNUSparseMap` (reader.go:478-525) and the map check of
+     * `handleSparseFile`; returns the real size. The map fills the header's
+     * sparse array and extension blocks; Go gives up once its arrays reach
+     * 1 MiB (`errSparseTooLong`), whatever `maxHeaderBytes` allows.
+     */
+    private readOldGnuSparseMap;
+    private countEntry;
+    /** Reads the pending padding; false when the input ended inside it (a clean end, as in Go). */
+    private consumePadding;
+    private finish;
+}
+/**
+ * Reads a whole entry's data into memory, refusing entries larger than
+ * `maxBytesArg` before reading them, and sparse entries at all.
+ */
+export declare function readTarEntryData(entryArg: ITarEntry, maxBytesArg: number, limitArg: keyof ILinuxPackageLimits): Promise<Uint8Array>;