emo/xbps
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Verify index-meta for in-memory sync

Browse Source
This commit is contained in:
Piotr Wójcik
2019-10-01 21:18:25 +02:00
committed by Juan RP
parent 61ef5c3f8a
commit a1481cb285
3 changed files with 38 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
lib/plist_fetch.c
View File

@@ -180,8 +180,13 @@ xbps_repo_fetch_remote(struct xbps_repo *repo, const char *url)
{
struct archive *a;
struct archive_entry *entry;
xbps_dictionary_t idxmeta_tmp = NULL;
size_t meta_signature_len = 0;
uint8_t i = 0;
bool verified = false;
const char *signature_type = NULL;
unsigned char *meta_digest = NULL;
unsigned char *meta_signature = NULL;
assert(url);
assert(repo);
@@ -199,9 +204,14 @@ xbps_repo_fetch_remote(struct xbps_repo *repo, const char *url)
if (strcmp(bfile, XBPS_REPOIDX_META) == 0) {
buf = xbps_archive_get_file(a, entry);
repo->idxmeta = xbps_dictionary_internalize(buf);
meta_digest = xbps_buffer_hash_raw(buf, strlen(buf));
idxmeta_tmp = xbps_dictionary_internalize(buf);
free(buf);
i++;
} else if (strcmp(bfile, XBPS_REPOIDXMETA_SIG) == 0) {
meta_signature = (unsigned char *) xbps_archive_get_file(a, entry);
meta_signature_len = (size_t) archive_entry_size(entry);
i++;
} else if (strcmp(bfile, XBPS_REPOIDX) == 0) {
buf = xbps_archive_get_file(a, entry);
repo->idx = xbps_dictionary_internalize(buf);
@@ -210,17 +220,30 @@ xbps_repo_fetch_remote(struct xbps_repo *repo, const char *url)
} else {
archive_read_data_skip(a);
}
if (i == 2)
if (i == 3)
break;
}
archive_read_finish(a);
verified = xbps_verify_digest_signature(repo, idxmeta_tmp, meta_signature, meta_signature_len, meta_digest);
if (verified) {
xbps_dbg_printf(repo->xhp, "Verification of repo's '%s' signature passed.\n", url);
} else {
xbps_warn_printf("Verification of repo's '%s' signature failed. Taking safe part.\n", url);
idxmeta_tmp = get_safe_idxmeta(idxmeta_tmp);
}
repo->idxmeta = idxmeta_tmp;
if (xbps_dictionary_get_cstring_nocopy(repo->idxmeta, "signature-type", &signature_type))
repo->is_signed = true;
if (xbps_object_type(repo->idx) == XBPS_TYPE_DICTIONARY)
return true;
free(meta_digest);
free(meta_signature);
return false;
}