girder 5.0.21.dev8__tar.gz → 5.0.22.dev2__tar.gz

{girder-5.0.21.dev8/girder.egg-info → girder-5.0.22.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: girder
-Version: 5.0.21.dev8
+Version: 5.0.22.dev2
 Summary: Web-based data management platform
 Home-page: https://girder.readthedocs.org
 Author: Kitware, Inc.

{girder-5.0.21.dev8 → girder-5.0.22.dev2}/girder/utility/filesystem_assetstore_adapter.py

@@ -180,43 +180,67 @@ class FilesystemAssetstoreAdapter(AbstractAssetstoreAdapter):
         # Restore the internal state of the streaming SHA-512 checksum
         checksum = _hash_state.restoreHex(upload['sha512state'], 'sha512')
 
-        if self.requestOffset(upload) > upload['received']:
-            # This probably means the server died midway through writing last
-            # chunk to disk, and the database record was not updated. This
-            # means we need to update the sha512 state with the difference.
-            with open(upload['tempFile'], 'rb') as tempFile:
-                tempFile.seek(upload['received'])
-                while True:
-                    data = tempFile.read(BUF_SIZE)
+        # Hold a lock on the temp file while the chunk is written, validated,
+        # and (if invalid) rolled back.  Without this, a concurrent request
+        # for the same upload could append its bytes after ours before we
+        # reject and truncate, so the rollback would remove the wrong data
+        # and leave the rejected bytes in the middle of the file.
+        with filelock.FileLock(self._tempLockPath(upload)):
+            start = self.requestOffset(upload)
+            if start > upload['received']:
+                # This probably means the server died midway through writing
+                # last chunk to disk, and the database record was not
+                # updated. This means we need to update the sha512 state
+                # with the difference.
+                with open(upload['tempFile'], 'rb') as tempFile:
+                    tempFile.seek(upload['received'])
+                    while True:
+                        data = tempFile.read(BUF_SIZE)
+                        if not data:
+                            break
+                        checksum.update(data)
+
+            with open(upload['tempFile'], 'a+b') as tempFile:
+                size = 0
+                while not upload['received'] + size > upload['size']:
+                    data = chunk.read(BUF_SIZE)
                     if not data:
                         break
+                    size += len(data)
+                    tempFile.write(data)
                     checksum.update(data)
+            chunk.close()
 
-        with open(upload['tempFile'], 'a+b') as tempFile:
-            size = 0
-            while not upload['received'] + size > upload['size']:
-                data = chunk.read(BUF_SIZE)
-                if not data:
-                    break
-                size += len(data)
-                tempFile.write(data)
-                checksum.update(data)
-        chunk.close()
-
-        try:
-            self.checkUploadSize(upload, size)
-        except ValidationException:
-            # Use the actual file size minus what we just wrote to handle
-            # concurrent uploads that may have updated upload['received'].
-            with open(upload['tempFile'], 'a+b') as tempFile:
-                tempFile.truncate(os.path.getsize(upload['tempFile']) - size)
-            raise
+            try:
+                self.checkUploadSize(upload, size)
+            except ValidationException:
+                # Roll back to where the file ended before this chunk was
+                # written; nothing else can have appended while we hold the
+                # lock.
+                with open(upload['tempFile'], 'a+b') as tempFile:
+                    tempFile.truncate(start)
+                raise
 
         # Persist the internal state of the checksum
         upload['sha512state'] = _hash_state.serializeHex(checksum)
         upload['received'] += size
         return upload
 
+    def _tempLockPath(self, upload):
+        """
+        Returns the path of the lock file guarding an upload's temp file.
+        """
+        return upload['tempFile'] + '.lock'
+
+    def _removeTempLock(self, upload):
+        """
+        Removes the lock file guarding an upload's temp file, if present.
+        """
+        try:
+            os.unlink(self._tempLockPath(upload))
+        except OSError:
+            pass
+
     def requestOffset(self, upload):
         """
         Returns the size of the temp file.
@@ -260,6 +284,7 @@ class FilesystemAssetstoreAdapter(AbstractAssetstoreAdapter):
             except OSError:
                 # some filesystems may not support POSIX permissions
                 pass
+        self._removeTempLock(upload)
 
         file['sha512'] = hash
         file['path'] = path
@@ -348,6 +373,7 @@ class FilesystemAssetstoreAdapter(AbstractAssetstoreAdapter):
         """
         if os.path.exists(upload['tempFile']):
             os.unlink(upload['tempFile'])
+        self._removeTempLock(upload)
 
     def importFile(self, item, path, user, name=None, mimeType=None, **kwargs):
         """

{girder-5.0.21.dev8 → girder-5.0.22.dev2/girder.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: girder
-Version: 5.0.21.dev8
+Version: 5.0.22.dev2
 Summary: Web-based data management platform
 Home-page: https://girder.readthedocs.org
 Author: Kitware, Inc.

girder-5.0.22.dev2/girder.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "5.0.21",
+  "distance": 2,
+  "node": "g8482491c53f963f09bcc6acabf8429a2bff865bb",
+  "dirty": false,
+  "branch": "master",
+  "node_date": "2026-10-27"
+}

girder-5.0.21.dev8/girder.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "5.0.20",
-  "distance": 8,
-  "node": "gb5282b67496d4c7a90f63fbe2b27af069a9371a6",
-  "dirty": false,
-  "branch": "master",
-  "node_date": "2026-10-26"
-}