upstream/mercurial-mirror Files · tests/test-revlog.t

pycompat: custom implementation of urllib.parse.quote()...

pycompat: custom implementation of urllib.parse.quote() urllib.parse.quote() accepts either str or bytes and returns str. There exists a urllib.parse.quote_from_bytes() which only accepts bytes. We should probably use that to retain strong typing and avoid surprises. In addition, since nearly all strings in Mercurial are bytes, we probably don't want quote() returning unicode. So, this patch implements a custom quote() that only accepts bytes and returns bytes. The quoted URL should only contain URL safe characters which is a strict subset of ASCII. So `.encode('ascii', 'strict')` should be safe.

Maciej Fijalkowski - - Load All Authors

File last commit:

r28783:d9179856 default


                r31400:fb1f7033

default

Download file

             test-revlog.t
        
                    15 lines
            
             | 653 B
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-revlog.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      Test for CVE-2016-3630

        $ hg init

        >>> open("a.i", "w").write(

        ... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD

        ... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""

        ... .decode("base64").decode("zlib"))

        $ hg debugindex a.i

           rev    offset  length  delta linkrev nodeid       p1           p2

             0         0      19     -1       2 99e0332bd498 000000000000 000000000000

             1        19      12      0       3 6674f57a23d8 99e0332bd498 000000000000

        $ hg debugdata a.i 1 2>&1 | egrep 'Error:.*decoded'

        (mercurial.mpatch.)?mpatchError: patch cannot be decoded (re)

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				Test for CVE-2016-3630

				$ hg init

				>>> open("a.i", "w").write(
				... """eJxjYGZgZIAAYQYGxhgom+k/FMx8YKx9ZUaKSOyqo4cnuKb8mbqHV5cBCVTMWb1Cwqkhe4Gsg9AD
				... Joa3dYtcYYYBAQ8Qr4OqZAYRICPTSr5WKd/42rV36d+8/VmrNpv7NP1jQAXrQE4BqQUARngwVA=="""
				... .decode("base64").decode("zlib"))

				$ hg debugindex a.i
				rev offset length delta linkrev nodeid p1 p2
				0 0 19 -1 2 99e0332bd498 000000000000 000000000000
				1 19 12 0 3 6674f57a23d8 99e0332bd498 000000000000
				$ hg debugdata a.i 1 2>&1 \| egrep 'Error:.*decoded'
				(mercurial.mpatch.)?mpatchError: patch cannot be decoded (re)