react-native-update 10.59.2 → 10.60.0

package/harmony/pushy/src/main/ets/ArchiveLimits.ts

@@ -4,51 +4,64 @@ import {
   ERROR_FILE_OPERATION_FAILED,
   ERROR_DELTA_FAILED,
   createPushyError,
+  getErrorMessage,
 } from './ErrorCodes';
-import { isReservedEntryName } from './InstallRecord';
+import NativePatchCore from './NativePatchCore';
 
-// ArkTS mirror of cpp/patch_core/archive_limits.h — keep in sync by hand
-// (harmony/pushy/src/test/check-constant-parity.js asserts the values match).
-// 损坏或恶意更新包的伤害上限:最多耗费有限的磁盘/内存/时间,绝不撑爆磁盘。
+// 解压资源上限的计数规则(条目数、单条/总解压量、压缩比、保留名、符号链接、
+// 未知长度下载的磁盘探测计划)只在 cpp/patch_core/archive_limits.h 里实现,
+// 三端共用(这里经 NAPI)。下面只镜像本端仍需自己比较的常量,
+// scripts/check-constant-parity.js 断言与头文件一致。
 export const MAX_ARCHIVE_BYTES = 512 * 1024 * 1024;
-export const MAX_TOTAL_UNCOMPRESSED_BYTES = 2048 * 1024 * 1024;
-export const MAX_ENTRY_BYTES = 512 * 1024 * 1024;
-export const MAX_ENTRIES = 20000;
-export const MAX_COMPRESSION_RATIO = 100;
-export const RATIO_CHECK_MIN_BYTES = 1 * 1024 * 1024;
 export const MAX_MANIFEST_BYTES = 16 * 1024 * 1024;
 export const FREE_DISK_MARGIN_BYTES = 64 * 1024 * 1024;
-export const UNKNOWN_LENGTH_FREE_SPACE_PROBE_BYTES = 8 * 1024 * 1024;
 
 /**
- * 解压前的总量校验(zlib.getOriginalSize 给出的归档解压后总字节数)。
- * zlib.decompressFile 没有逐条钩子,C++ 头文件里的逐条压缩比在这里只能按
- * 整包近似:总解压量超过上限、或(总量大于 RATIO_CHECK_MIN_BYTES 时)总压缩
- * 比超过 MAX_COMPRESSION_RATIO 即拒绝——20MB 归档 100:1 的 2GB 载荷在解压前
- * 就被挡下,而不是先解出来再量。
+ * 解压前的整包校验(zlib.getOriginalSize 给出的归档解压后总字节数):总解压
+ * 量上限与整包压缩比(archive_limits::CheckUncompressedSize)。鸿蒙的 zlib
+ * 只提供整包解压量与整包解压,拿不到条目的压缩尺寸,逐条压缩比无从查起;
+ * 20MB 归档 100:1 的 2GB 载荷在解压前就被挡下,解压后 checkExtractedDirectory
+ * 再逐条核对。
  */
 export function checkUncompressedSize(
   archiveBytes: number,
   uncompressedBytes: number,
 ): void {
-  if (uncompressedBytes > MAX_TOTAL_UNCOMPRESSED_BYTES) {
+  const reason = NativePatchCore.checkUncompressedSize(
+    archiveBytes,
+    uncompressedBytes,
+  );
+  if (reason !== undefined) {
+    throw createPushyError(ERROR_DELTA_FAILED, reason);
+  }
+}
+
+// 解压量取不到时拒绝的专属错误细节:与"超限"拒绝区分开,日志与遥测里一眼
+// 可辨(典型原因:设备 zlib 不认该归档格式/归档损坏)。不做任何放行回退。
+export const ORIGINAL_SIZE_UNAVAILABLE = 'archive expansion size unavailable';
+
+/**
+ * zlib.getOriginalSize 的结果校验。failure 非 undefined 表示调用本身抛错
+ * (其消息);否则校验返回值必须是有限非负数。任何一种都拒绝归档:不知道
+ * 展开量就放行,等于允许一个 20MB 的归档在解压后的统计跑到之前先写满磁盘。
+ */
+export function checkOriginalSize(
+  size: number | undefined,
+  failure?: string,
+): number {
+  if (failure !== undefined) {
     throw createPushyError(
       ERROR_DELTA_FAILED,
-      `archive expands beyond ${MAX_TOTAL_UNCOMPRESSED_BYTES} bytes ` +
-        `(${uncompressedBytes})`,
+      `${ORIGINAL_SIZE_UNAVAILABLE}: getOriginalSize failed: ${failure}`,
     );
   }
-  if (
-    uncompressedBytes > RATIO_CHECK_MIN_BYTES &&
-    archiveBytes > 0 &&
-    uncompressedBytes > archiveBytes * MAX_COMPRESSION_RATIO
-  ) {
+  if (typeof size !== 'number' || !Number.isFinite(size) || size < 0) {
     throw createPushyError(
       ERROR_DELTA_FAILED,
-      `archive compression ratio exceeds ${MAX_COMPRESSION_RATIO}:1 ` +
-        `(${uncompressedBytes}/${archiveBytes})`,
+      `${ORIGINAL_SIZE_UNAVAILABLE}: getOriginalSize returned ${String(size)}`,
     );
   }
+  return size;
 }
 
 /**
@@ -85,55 +98,18 @@ export async function ensureFreeSpace(
   }
 }
 
-export interface DirectoryMeasure {
-  entries: number;
-  bytes: number;
-}
-
 /**
- * 递归统计目录里的条目数与总字节数;两者任一超过上限立即抛错(不必扫完)。
- * 同一趟遍历里拒绝任意深度的 `.pushy-` 保留条目(完成记录只能由 SDK 写)。
+ * 解压后在 native 工作线程逐条核对刚解压的目录(archive_limits::
+ * CheckExtractedDirectory):条目数、单条大小、总字节数与整包压缩比,拒绝
+ * 任意深度的 `.pushy-` 保留条目(完成记录只能由 SDK 写)与符号链接。
  */
-export async function measureExtractedDirectory(
+export async function checkExtractedDirectory(
   directory: string,
-  acc: DirectoryMeasure = { entries: 0, bytes: 0 },
-): Promise<DirectoryMeasure> {
-  const names = (await fileIo.listFile(directory)).filter(
-    name => name !== '.' && name !== '..',
-  );
-  for (const name of names) {
-    if (isReservedEntryName(name)) {
-      throw createPushyError(
-        ERROR_DELTA_FAILED,
-        `archive contains reserved entry ${name}`,
-      );
-    }
-    const path = `${directory}/${name}`;
-    const stat = await fileIo.stat(path);
-    acc.entries += 1;
-    if (acc.entries > MAX_ENTRIES) {
-      throw createPushyError(
-        ERROR_DELTA_FAILED,
-        `archive has too many entries (> ${MAX_ENTRIES})`,
-      );
-    }
-    if (stat.isDirectory()) {
-      await measureExtractedDirectory(path, acc);
-      continue;
-    }
-    if (stat.size > MAX_ENTRY_BYTES) {
-      throw createPushyError(
-        ERROR_DELTA_FAILED,
-        `archive entry too large: ${name} (${stat.size} bytes)`,
-      );
-    }
-    acc.bytes += stat.size;
-    if (acc.bytes > MAX_TOTAL_UNCOMPRESSED_BYTES) {
-      throw createPushyError(
-        ERROR_DELTA_FAILED,
-        `archive expands beyond ${MAX_TOTAL_UNCOMPRESSED_BYTES} bytes`,
-      );
-    }
+  archiveBytes: number,
+): Promise<void> {
+  try {
+    await NativePatchCore.checkExtractedDirectory(directory, archiveBytes);
+  } catch (e) {
+    throw createPushyError(ERROR_DELTA_FAILED, getErrorMessage(e));
   }
-  return acc;
 }