upstream/mercurial-mirror Files · tests/test-revlog.t

sslutil: inform the user about how to fix an incomplete certificate chain...

sslutil: inform the user about how to fix an incomplete certificate chain This is a Windows only thing. Unfortunately, the socket is closed at this point (so the certificate is unavailable to check the chain). That means it's printed out when verification fails as a guess, on the assumption that 1) most of the time verification won't fail, and 2) sites using expired or certs that are too new will be rare. Maybe this is an argument for adding more functionality to debugssl, to test for problems and print certificate info. Or maybe it's an argument for bundling certificates with the Windows builds. That idea was set aside when the enhanced SSL code went in last summer, and it looks like there were issues with using certifi on Windows anyway[1]. This was tested by deleting the certificate out of certmgr.msc > "Third-Party Root Certification Authorities" > "Certificates", seeing `hg pull` fail (with the new message), trying this command, and then successfully performing the pull command. [1] https://www.mercurial-scm.org/pipermail/mercurial-devel/2016-October/089573.html

Gregory Szorc - - Load All Authors

File last commit:

r32391:36d3559c default


                r33494:30f2715b

default

Download file

             test-revlog.t
        
                    47 lines
            
             | 1.3 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-revlog.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

        $ hg init empty-repo

        $ cd empty-repo

      Flags on revlog version 0 are rejected

        >>> with open('.hg/store/00changelog.i', 'wb') as fh:

        ...     fh.write('\x00\x01\x00\x00')

        $ hg log

        abort: unknown flags (0x01) in version 0 revlog 00changelog.i!

        [255]

      Unknown flags on revlog version 1 are rejected

        >>> with open('.hg/store/00changelog.i', 'wb') as fh:

        ...     fh.write('\x00\x04\x00\x01')

        $ hg log

        abort: unknown flags (0x04) in version 1 revlog 00changelog.i!

        [255]

      Unknown version is rejected

        >>> with open('.hg/store/00changelog.i', 'wb') as fh:

        ...     fh.write('\x00\x00\x00\x02')

        $ hg log

        abort: unknown version (2) in revlog 00changelog.i!

        [255]

        $ cd ..

      Test for CVE-2016-3630

        $ hg init

        >>> open("a.i", "w").write(

        ... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD

        ... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""

        ... .decode("base64").decode("zlib"))

        $ hg debugindex a.i

           rev    offset  length  delta linkrev nodeid       p1           p2

             0         0      19     -1       2 99e0332bd498 000000000000 000000000000

             1        19      12      0       3 6674f57a23d8 99e0332bd498 000000000000

        $ hg debugdata a.i 1 2>&1 | egrep 'Error:.*decoded'

        (mercurial\.\w+\.mpatch\.)?mpatchError: patch cannot be decoded (re)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				$ hg init empty-repo
				$ cd empty-repo

				Flags on revlog version 0 are rejected

				>>> with open('.hg/store/00changelog.i', 'wb') as fh:
				... fh.write('\x00\x01\x00\x00')

				$ hg log
				abort: unknown flags (0x01) in version 0 revlog 00changelog.i!
				[255]

				Unknown flags on revlog version 1 are rejected

				>>> with open('.hg/store/00changelog.i', 'wb') as fh:
				... fh.write('\x00\x04\x00\x01')

				$ hg log
				abort: unknown flags (0x04) in version 1 revlog 00changelog.i!
				[255]

				Unknown version is rejected

				>>> with open('.hg/store/00changelog.i', 'wb') as fh:
				... fh.write('\x00\x00\x00\x02')

				$ hg log
				abort: unknown version (2) in revlog 00changelog.i!
				[255]

				$ cd ..

				Test for CVE-2016-3630

				$ hg init

				>>> open("a.i", "w").write(
				... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD
				... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""
				... .decode("base64").decode("zlib"))

				$ hg debugindex a.i
				rev offset length delta linkrev nodeid p1 p2
				0 0 19 -1 2 99e0332bd498 000000000000 000000000000
				1 19 12 0 3 6674f57a23d8 99e0332bd498 000000000000
				$ hg debugdata a.i 1 2>&1 \| egrep 'Error:.*decoded'
				(mercurial\.\w+\.mpatch\.)?mpatchError: patch cannot be decoded (re)