Andy DixonandClaude
cddde5ca52
build.sh builds the Rust targets with the Go-era names, refuses an OUT that is /, $HOME or the tree, checks static linking and names the Go targets Rust cannot build. packaging/package.sh builds and inspects packages without signing or publishing; repo.sh reuses it. Seven fuzz targets (one found a URL-parser panic, fixed here with a regression test), cargo-deny policy, CI for lint, tests on Linux/macOS/Windows, cross builds with qemu runs, supply chain and fuzzing. Compatibility specification and security notes. Co-Authored-By: Claude <noreply@anthropic.com>
19 lines
762 B
Rust
19 lines
762 B
Rust
// SPDX-License-Identifier: GPL-3.0-or-later
|
|
//! Path validation: a valid vault name is clean, relative and confined; the
|
|
//! tar name check only ever yields valid-shaped relative names.
|
|
#![no_main]
|
|
use vault::store::VaultName;
|
|
|
|
libfuzzer_sys::fuzz_target!(|data: &[u8]| {
|
|
let Ok(s) = std::str::from_utf8(data) else { return };
|
|
if let Some(n) = VaultName::new(s) {
|
|
let n = n.as_str();
|
|
assert_eq!(vault::util::clean(n), n);
|
|
assert!(!n.starts_with('/') && !n.contains('\\') && !n.split('/').any(|c| c == ".." || c == "." || c.is_empty()));
|
|
assert!(n.len() <= 1024);
|
|
}
|
|
if let Some(n) = vault::absorb::safe_name(s) {
|
|
assert!(!n.is_empty() && !n.starts_with('/') && !n.split('/').any(|c| c == ".."));
|
|
}
|
|
});
|