Validate attachment's hash after downloading

boards/models/post/sync.py

@@ -1,7 +1,7 b''
 import xml.etree.ElementTree as et
 
 from boards.models.attachment.downloaders import download
-from boards.utils import get_file_mimetype
+from boards.utils import get_file_mimetype, get_file_hash
 from django.db import transaction
 from boards.models import KeyPair, GlobalId, Signature, Post, Tag
 
@@ -178,16 +178,20 b' class SyncManager:'
                         attached_file = download(hostname + url)
                         if attached_file is None:
                             raise SyncException('File was not dowloaded')
+
+                        hash = get_file_hash(file)
+                        if hash != attachment.text:
+                            raise SyncException('File hash does not match attachment hash')
+
                         files.append(attached_file)
-                        # TODO Check hash
 
                     Post.objects.import_post(
                         title=title, text=text, pub_time=pub_time,
                         opening_post=opening_post, tags=tags,
                         global_id=global_id, files=files)
         else:
-            # TODO Throw an exception?
-            pass
+            raise SyncException('Sync node returned an error: {}'.format(
+                tag_status.text))
 
     @staticmethod
     def generate_response_pull():