1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
package repository
import (
"bufio"
"bytes"
"crypto/sha1"
"encoding/hex"
"math/big"
"regexp"
"strings"
"gitlab.com/gitlab-org/gitaly-proto/go/gitalypb"
"gitlab.com/gitlab-org/gitaly/internal/git"
"gitlab.com/gitlab-org/gitaly/internal/git/alternates"
"gitlab.com/gitlab-org/gitaly/internal/helper"
"golang.org/x/net/context"
"google.golang.org/grpc/codes"
"google.golang.org/grpc/status"
)
const blankChecksum = "0000000000000000000000000000000000000000"
var refWhitelist = regexp.MustCompile(`HEAD|(refs/(heads|tags|keep-around|merge-requests|environments|notes)/)`)
func (s *server) CalculateChecksum(ctx context.Context, in *gitalypb.CalculateChecksumRequest) (*gitalypb.CalculateChecksumResponse, error) {
repo := in.GetRepository()
repoPath, err := helper.GetRepoPath(repo)
if err != nil {
return nil, err
}
args := []string{
"show-ref",
"--head",
}
cmd, err := git.Command(ctx, repo, args...)
if err != nil {
if _, ok := status.FromError(err); ok {
return nil, err
}
return nil, status.Errorf(codes.Internal, "CalculateChecksum: gitCommand: %v", err)
}
var checksum *big.Int
scanner := bufio.NewScanner(cmd)
for scanner.Scan() {
ref := scanner.Bytes()
if !refWhitelist.Match(ref) {
continue
}
h := sha1.New()
h.Write(ref)
hash := hex.EncodeToString(h.Sum(nil))
hashIntBase16, _ := new(big.Int).SetString(hash, 16)
if checksum == nil {
checksum = hashIntBase16
} else {
checksum.Xor(checksum, hashIntBase16)
}
}
if err := scanner.Err(); err != nil {
return nil, status.Errorf(codes.Internal, err.Error())
}
if err := cmd.Wait(); err != nil {
if isValidRepo(ctx, repo) {
return &gitalypb.CalculateChecksumResponse{Checksum: blankChecksum}, nil
}
return nil, status.Errorf(codes.DataLoss, "CalculateChecksum: not a git repository '%s'", repoPath)
}
return &gitalypb.CalculateChecksumResponse{Checksum: hex.EncodeToString(checksum.Bytes())}, nil
}
func isValidRepo(ctx context.Context, repo *gitalypb.Repository) bool {
repoPath, env, err := alternates.PathAndEnv(repo)
if err != nil {
return false
}
args := []string{"-C", repoPath, "rev-parse", "--is-inside-git-dir"}
stdout := &bytes.Buffer{}
cmd, err := git.BareCommand(ctx, nil, stdout, nil, env, args...)
if err != nil {
return false
}
if err := cmd.Wait(); err != nil {
return false
}
return strings.EqualFold(strings.TrimRight(stdout.String(), "\n"), "true")
}
|
