1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
package repository
import (
"bufio"
"bytes"
"context"
"crypto/sha1"
"encoding/hex"
"math/big"
"regexp"
"strings"
"gitlab.com/gitlab-org/gitaly/v14/internal/git"
"gitlab.com/gitlab-org/gitaly/v14/proto/go/gitalypb"
"google.golang.org/grpc/codes"
"google.golang.org/grpc/status"
)
var refWhitelist = regexp.MustCompile(`HEAD|(refs/(heads|tags|keep-around|merge-requests|environments|notes)/)`)
func (s *server) CalculateChecksum(ctx context.Context, in *gitalypb.CalculateChecksumRequest) (*gitalypb.CalculateChecksumResponse, error) {
repo := in.GetRepository()
repoPath, err := s.locator.GetRepoPath(repo)
if err != nil {
return nil, err
}
cmd, err := s.gitCmdFactory.New(ctx, repo, git.SubCmd{Name: "show-ref", Flags: []git.Option{git.Flag{Name: "--head"}}})
if err != nil {
if _, ok := status.FromError(err); ok {
return nil, err
}
return nil, status.Errorf(codes.Internal, "CalculateChecksum: gitCommand: %v", err)
}
var checksum *big.Int
scanner := bufio.NewScanner(cmd)
for scanner.Scan() {
ref := scanner.Bytes()
if !refWhitelist.Match(ref) {
continue
}
h := sha1.New()
// hash.Hash will never return an error.
_, _ = h.Write(ref)
hash := hex.EncodeToString(h.Sum(nil))
hashIntBase16, _ := (&big.Int{}).SetString(hash, 16)
if checksum == nil {
checksum = hashIntBase16
} else {
checksum.Xor(checksum, hashIntBase16)
}
}
if err := scanner.Err(); err != nil {
return nil, status.Errorf(codes.Internal, err.Error())
}
if err := cmd.Wait(); checksum == nil || err != nil {
if s.isValidRepo(ctx, repo) {
return &gitalypb.CalculateChecksumResponse{Checksum: git.ZeroOID.String()}, nil
}
return nil, status.Errorf(codes.DataLoss, "CalculateChecksum: not a git repository '%s'", repoPath)
}
return &gitalypb.CalculateChecksumResponse{Checksum: hex.EncodeToString(checksum.Bytes())}, nil
}
func (s *server) isValidRepo(ctx context.Context, repo *gitalypb.Repository) bool {
stdout := &bytes.Buffer{}
cmd, err := s.gitCmdFactory.New(ctx, repo,
git.SubCmd{
Name: "rev-parse",
Flags: []git.Option{
git.Flag{Name: "--is-bare-repository"},
},
},
git.WithStdout(stdout),
)
if err != nil {
return false
}
if err := cmd.Wait(); err != nil {
return false
}
return strings.EqualFold(strings.TrimRight(stdout.String(), "\n"), "true")
}
|
