upstream/mercurial-mirror Files · tests/test-relink.t

dispatch: protect against malicious 'hg serve --stdio' invocations (sec)...

dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it. mitrandir@fb.com provided some extra fixes for the dispatch code and for hg-ssh in places that I overlooked.

Pierre-Yves David - - Load All Authors

File last commit:

r25125:bd625cd4 default


                r32050:77eaf953

4.1.3 stable

Download file

             test-relink.t
        
                    100 lines
            
             | 2.5 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-relink.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #require hardlink

        $ echo "[extensions]" >> $HGRCPATH

        $ echo "relink=" >> $HGRCPATH

        $ fix_path() {

        >     tr '\\' /

        > }

        $ cat > arelinked.py <<EOF

        > import sys, os

        > from mercurial import util

        > path1, path2 = sys.argv[1:3]

        > if util.samefile(path1, path2):

        >     print '%s == %s' % (path1, path2)

        > else:

        >     print '%s != %s' % (path1, path2)

        > EOF

      create source repository

        $ hg init repo

        $ cd repo

        $ echo a > a

        $ echo b > b

        $ hg ci -Am addfile

        adding a

        adding b

        $ cat "$TESTDIR/binfile.bin" >> a

        $ cat "$TESTDIR/binfile.bin" >> b

        $ hg ci -Am changefiles

      make another commit to create files larger than 1 KB to test

      formatting of final byte count

        $ cat "$TESTDIR/binfile.bin" >> a

        $ cat "$TESTDIR/binfile.bin" >> b

        $ hg ci -m anotherchange

      don't sit forever trying to double-lock the source repo

        $ hg relink .

        relinking $TESTTMP/repo/.hg/store to $TESTTMP/repo/.hg/store (glob)

        there is nothing to relink

      Test files are read in binary mode

        $ $PYTHON -c "file('.hg/store/data/dummy.i', 'wb').write('a\r\nb\n')"

        $ cd ..

      clone and pull to break links

        $ hg clone --pull -r0 repo clone

        adding changesets

        adding manifests

        adding file changes

        added 1 changesets with 2 changes to 2 files

        updating to branch default

        2 files updated, 0 files merged, 0 files removed, 0 files unresolved

        $ cd clone

        $ hg pull -q

        $ echo b >> b

        $ hg ci -m changeb

        created new head

        $ $PYTHON -c "file('.hg/store/data/dummy.i', 'wb').write('a\nb\r\n')"

      relink

        $ hg relink --debug --config progress.debug=true | fix_path

        relinking $TESTTMP/repo/.hg/store to $TESTTMP/clone/.hg/store

        tip has 2 files, estimated total number of files: 3

        collecting: 00changelog.i 1/3 files (33.33%)

        collecting: 00manifest.i 2/3 files (66.67%)

        collecting: a.i 3/3 files (100.00%)

        collecting: b.i 4/3 files (133.33%)

        collecting: dummy.i 5/3 files (166.67%)

        collected 5 candidate storage files

        not linkable: 00changelog.i

        not linkable: 00manifest.i

        pruning: data/a.i 3/5 files (60.00%)

        not linkable: data/b.i

        pruning: data/dummy.i 5/5 files (100.00%)

        pruned down to 2 probably relinkable files

        relinking: data/a.i 1/2 files (50.00%)

        not linkable: data/dummy.i

        relinked 1 files (1.36 KB reclaimed)

        $ cd ..

      check hardlinks

        $ python arelinked.py repo/.hg/store/data/a.i clone/.hg/store/data/a.i

        repo/.hg/store/data/a.i == clone/.hg/store/data/a.i

        $ python arelinked.py repo/.hg/store/data/b.i clone/.hg/store/data/b.i

        repo/.hg/store/data/b.i != clone/.hg/store/data/b.i

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#require hardlink

				$ echo "[extensions]" >> $HGRCPATH
				$ echo "relink=" >> $HGRCPATH

				$ fix_path() {
				> tr '\\' /
				> }

				$ cat > arelinked.py <<EOF
				> import sys, os
				> from mercurial import util
				> path1, path2 = sys.argv[1:3]
				> if util.samefile(path1, path2):
				> print '%s == %s' % (path1, path2)
				> else:
				> print '%s != %s' % (path1, path2)
				> EOF


				create source repository

				$ hg init repo
				$ cd repo
				$ echo a > a
				$ echo b > b
				$ hg ci -Am addfile
				adding a
				adding b
				$ cat "$TESTDIR/binfile.bin" >> a
				$ cat "$TESTDIR/binfile.bin" >> b
				$ hg ci -Am changefiles

				make another commit to create files larger than 1 KB to test
				formatting of final byte count

				$ cat "$TESTDIR/binfile.bin" >> a
				$ cat "$TESTDIR/binfile.bin" >> b
				$ hg ci -m anotherchange

				don't sit forever trying to double-lock the source repo

				$ hg relink .
				relinking $TESTTMP/repo/.hg/store to $TESTTMP/repo/.hg/store (glob)
				there is nothing to relink


				Test files are read in binary mode

				$ $PYTHON -c "file('.hg/store/data/dummy.i', 'wb').write('a\r\nb\n')"
				$ cd ..


				clone and pull to break links

				$ hg clone --pull -r0 repo clone
				adding changesets
				adding manifests
				adding file changes
				added 1 changesets with 2 changes to 2 files
				updating to branch default
				2 files updated, 0 files merged, 0 files removed, 0 files unresolved
				$ cd clone
				$ hg pull -q
				$ echo b >> b
				$ hg ci -m changeb
				created new head
				$ $PYTHON -c "file('.hg/store/data/dummy.i', 'wb').write('a\nb\r\n')"


				relink

				$ hg relink --debug --config progress.debug=true \| fix_path
				relinking $TESTTMP/repo/.hg/store to $TESTTMP/clone/.hg/store
				tip has 2 files, estimated total number of files: 3
				collecting: 00changelog.i 1/3 files (33.33%)
				collecting: 00manifest.i 2/3 files (66.67%)
				collecting: a.i 3/3 files (100.00%)
				collecting: b.i 4/3 files (133.33%)
				collecting: dummy.i 5/3 files (166.67%)
				collected 5 candidate storage files
				not linkable: 00changelog.i
				not linkable: 00manifest.i
				pruning: data/a.i 3/5 files (60.00%)
				not linkable: data/b.i
				pruning: data/dummy.i 5/5 files (100.00%)
				pruned down to 2 probably relinkable files
				relinking: data/a.i 1/2 files (50.00%)
				not linkable: data/dummy.i
				relinked 1 files (1.36 KB reclaimed)
				$ cd ..


				check hardlinks

				$ python arelinked.py repo/.hg/store/data/a.i clone/.hg/store/data/a.i
				repo/.hg/store/data/a.i == clone/.hg/store/data/a.i
				$ python arelinked.py repo/.hg/store/data/b.i clone/.hg/store/data/b.i
				repo/.hg/store/data/b.i != clone/.hg/store/data/b.i