| 1 | #!/bin/sh |
| 2 | |
| 3 | test_description=' |
| 4 | Test pruning of repositories with minor corruptions. The goal |
| 5 | here is that we should always be erring on the side of safety. So |
| 6 | if we see, for example, a ref with a bogus name, it is OK either to |
| 7 | bail out or to proceed using it as a reachable tip, but it is _not_ |
| 8 | OK to proceed as if it did not exist. Otherwise we might silently |
| 9 | delete objects that cannot be recovered. |
| 10 | |
| 11 | Note that we do assert command failure in these cases, because that is |
| 12 | what currently happens. If that changes, these tests should be revisited. |
| 13 | ' |
| 14 | GIT_TEST_DEFAULT_INITIAL_BRANCH_NAME=main |
| 15 | export GIT_TEST_DEFAULT_INITIAL_BRANCH_NAME |
| 16 | |
| 17 | . ./test-lib.sh |
| 18 | |
| 19 | test_expect_success 'disable reflogs' ' |
| 20 | git config core.logallrefupdates false && |
| 21 | git reflog expire --expire=all --all |
| 22 | ' |
| 23 | |
| 24 | create_bogus_ref () { |
| 25 | test-tool ref-store main update-ref msg "refs/heads/bogus..name" $bogus $ZERO_OID REF_SKIP_REFNAME_VERIFICATION && |
| 26 | test_when_finished "test-tool ref-store main delete-refs REF_NO_DEREF msg refs/heads/bogus..name" |
| 27 | } |
| 28 | |
| 29 | test_expect_success 'create history reachable only from a bogus-named ref' ' |
| 30 | test_tick && git commit --allow-empty -m main && |
| 31 | base=$(git rev-parse HEAD) && |
| 32 | test_tick && git commit --allow-empty -m bogus && |
| 33 | bogus=$(git rev-parse HEAD) && |
| 34 | git cat-file commit $bogus >saved && |
| 35 | git reset --hard HEAD^ |
| 36 | ' |
| 37 | |
| 38 | test_expect_success 'pruning does not drop bogus object' ' |
| 39 | test_when_finished "git hash-object -w -t commit saved" && |
| 40 | create_bogus_ref && |
| 41 | test_must_fail git prune --expire=now && |
| 42 | git cat-file -e $bogus |
| 43 | ' |
| 44 | |
| 45 | test_expect_success 'put bogus object into pack' ' |
| 46 | git tag reachable $bogus && |
| 47 | git repack -ad && |
| 48 | git tag -d reachable && |
| 49 | git cat-file -e $bogus |
| 50 | ' |
| 51 | |
| 52 | test_expect_success 'non-destructive repack bails on bogus ref' ' |
| 53 | create_bogus_ref && |
| 54 | test_must_fail git repack -adk |
| 55 | ' |
| 56 | |
| 57 | test_expect_success 'GIT_REF_PARANOIA=0 overrides safety' ' |
| 58 | create_bogus_ref && |
| 59 | GIT_REF_PARANOIA=0 git repack -adk |
| 60 | ' |
| 61 | |
| 62 | |
| 63 | test_expect_success 'destructive repack keeps packed object' ' |
| 64 | create_bogus_ref && |
| 65 | test_must_fail git repack -Ad --unpack-unreachable=now && |
| 66 | git cat-file -e $bogus && |
| 67 | test_must_fail git repack -ad && |
| 68 | git cat-file -e $bogus |
| 69 | ' |
| 70 | |
| 71 | test_expect_success 'destructive repack not confused by dangling symref' ' |
| 72 | test_when_finished "git symbolic-ref -d refs/heads/dangling" && |
| 73 | git symbolic-ref refs/heads/dangling refs/heads/does-not-exist && |
| 74 | git repack -ad && |
| 75 | test_must_fail git cat-file -e $bogus |
| 76 | ' |
| 77 | |
| 78 | # We create two new objects here, "one" and "two". Our |
| 79 | # main branch points to "two", which is deleted, |
| 80 | # corrupting the repository. But we'd like to make sure |
| 81 | # that the otherwise unreachable "one" is not pruned |
| 82 | # (since it is the user's best bet for recovering |
| 83 | # from the corruption). |
| 84 | # |
| 85 | # Note that we also point HEAD somewhere besides "two", |
| 86 | # as we want to make sure we test the case where we |
| 87 | # pick up the reference to "two" by iterating the refs, |
| 88 | # not by resolving HEAD. |
| 89 | test_expect_success 'create history with missing tip commit' ' |
| 90 | test_tick && git commit --allow-empty -m one && |
| 91 | recoverable=$(git rev-parse HEAD) && |
| 92 | git cat-file commit $recoverable >saved && |
| 93 | test_tick && git commit --allow-empty -m two && |
| 94 | missing=$(git rev-parse HEAD) && |
| 95 | git checkout --detach $base && |
| 96 | rm .git/objects/$(echo $missing | sed "s,..,&/,") && |
| 97 | test_must_fail git cat-file -e $missing |
| 98 | ' |
| 99 | |
| 100 | test_expect_success 'pruning with a corrupted tip does not drop history' ' |
| 101 | test_when_finished "git hash-object -w -t commit saved" && |
| 102 | test_must_fail git prune --expire=now && |
| 103 | git cat-file -e $recoverable |
| 104 | ' |
| 105 | |
| 106 | test_expect_success 'pack-refs does not silently delete broken loose ref' ' |
| 107 | git pack-refs --all --prune && |
| 108 | echo $missing >expect && |
| 109 | git rev-parse refs/heads/main >actual && |
| 110 | test_cmp expect actual |
| 111 | ' |
| 112 | |
| 113 | test_done |