hg-core: return Err if `offset != bytes.len()`

(D8958#inline-14994 followup 2/2)

[X] make `Index` owner of its bytes
[X] make `Index::new` return an error if `offset != bytes.len()`

Differential Revision: https://phab.mercurial-scm.org/D9107

rust/hg-core/src/revlog/index.rs

@@ -2,6 +2,7 b' use std::ops::Deref;'
 
 use byteorder::{BigEndian, ByteOrder};
 
+use crate::revlog::revlog::RevlogError;
 use crate::revlog::{Revision, NULL_REVISION};
 
 pub const INDEX_ENTRY_SIZE: usize = 64;
@@ -17,7 +18,9 b' pub struct Index {'
 impl Index {
     /// Create an index from bytes.
     /// Calculate the start of each entry when is_inline is true.
-    pub fn new(bytes: Box<dyn Deref<Target = [u8]> + Send>) -> Self {
+    pub fn new(
+        bytes: Box<dyn Deref<Target = [u8]> + Send>,
+    ) -> Result<Self, RevlogError> {
         if is_inline(&bytes) {
             let mut offset: usize = 0;
             let mut offsets = Vec::new();
@@ -33,15 +36,19 b' impl Index {'
                 offset += INDEX_ENTRY_SIZE + entry.compressed_len();
             }
 
-            Self {
-                bytes,
-                offsets: Some(offsets),
+            if offset == bytes.len() {
+                Ok(Self {
+                    bytes,
+                    offsets: Some(offsets),
+                })
+            } else {
+                Err(RevlogError::Corrupted)
             }
         } else {
-            Self {
+            Ok(Self {
                 bytes,
                 offsets: None,
-            }
+            })
         }
     }
 

rust/hg-core/src/revlog/revlog.rs

@@ -56,7 +56,7 b' impl Revlog {'
             return Err(RevlogError::UnsuportedVersion(version));
         }
 
-        let index = Index::new(Box::new(index_mmap));
+        let index = Index::new(Box::new(index_mmap))?;
 
         // TODO load data only when needed //
         // type annotation required