Convert the verify_pack callback to struct object_id

Make the verify_pack_callback take a pointer to struct object_id. Change the pack checksum to use GIT_MAX_RAWSZ, even though it is not strictly an object ID. Doing so ensures resilience against future hash size changes, and allows us to remove hard-coded assumptions about how big the buffer needs to be. Also, use a union to convert the pointer from nth_packed_object_sha1 to to a pointer to struct object_id. This behavior is compatible with GCC and clang and explicitly sanctioned by C11. The alternatives are to just perform a cast, which would run afoul of strict aliasing rules, but should just work, and changing the pointer into an instance of struct object_id and copying the value. The latter operation could seriously bloat memory usage on fsck, which already uses a lot of memory on some repositories. Signed-off-by: brian m. carlson <sandals@crustytoothpaste.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>

brian m. carlson committed May 6, 2017 at 22:10 UTC 9fd750461befcaf984d5966606308c8cd6912f3c
3 files changed +18 -15
builtin/fsck.c
+3 -3
@@ -377,7 +377,7 @@ static int fsck_obj(struct object *obj)
377 return 0;
378 }
379
380 -static int fsck_obj_buffer(const unsigned char *sha1, enum object_type type,
380 +static int fsck_obj_buffer(const struct object_id *oid, enum object_type type,
381 unsigned long size, void *buffer, int *eaten)
382 {
383 /*
@@ -385,10 +385,10 @@ static int fsck_obj_buffer(const unsigned char *sha1, enum object_type type,
385 * verify_packfile(), data_valid variable for details.
386 */
387 struct object *obj;
388 - obj = parse_object_buffer(sha1, type, size, buffer, eaten);
388 + obj = parse_object_buffer(oid->hash, type, size, buffer, eaten);
389 if (!obj) {
390 errors_found |= ERROR_OBJECT;
391 - return error("%s: object corrupt or missing", sha1_to_hex(sha1));
391 + return error("%s: object corrupt or missing", oid_to_hex(oid));
392 }
393 obj->flags = HAS_OBJ;
394 return fsck_obj(obj);
pack-check.c
+14 -11
@@ -5,7 +5,10 @@
5
6 struct idx_entry {
7 off_t offset;
8 - const unsigned char *sha1;
8 + union idx_entry_object {
9 + const unsigned char *hash;
10 + struct object_id *oid;
11 + } oid;
12 unsigned int nr;
13 };
14
@@ -51,7 +54,7 @@ static int verify_packfile(struct packed_git *p,
54 off_t index_size = p->index_size;
55 const unsigned char *index_base = p->index_data;
56 git_SHA_CTX ctx;
54 - unsigned char sha1[20], *pack_sig;
57 + unsigned char hash[GIT_MAX_RAWSZ], *pack_sig;
58 off_t offset = 0, pack_sig_ofs = 0;
59 uint32_t nr_objects, i;
60 int err = 0;
@@ -71,9 +74,9 @@ static int verify_packfile(struct packed_git *p,
74 remaining -= (unsigned int)(offset - pack_sig_ofs);
75 git_SHA1_Update(&ctx, in, remaining);
76 } while (offset < pack_sig_ofs);
74 - git_SHA1_Final(sha1, &ctx);
77 + git_SHA1_Final(hash, &ctx);
78 pack_sig = use_pack(p, w_curs, pack_sig_ofs, NULL);
76 - if (hashcmp(sha1, pack_sig))
79 + if (hashcmp(hash, pack_sig))
80 err = error("%s SHA1 checksum mismatch",
81 p->pack_name);
82 if (hashcmp(index_base + index_size - 40, pack_sig))
@@ -90,8 +93,8 @@ static int verify_packfile(struct packed_git *p,
93 entries[nr_objects].offset = pack_sig_ofs;
94 /* first sort entries by pack offset, since unpacking them is more efficient that way */
95 for (i = 0; i < nr_objects; i++) {
93 - entries[i].sha1 = nth_packed_object_sha1(p, i);
94 - if (!entries[i].sha1)
96 + entries[i].oid.hash = nth_packed_object_sha1(p, i);
97 + if (!entries[i].oid.hash)
98 die("internal error pack-check nth-packed-object");
99 entries[i].offset = nth_packed_object_offset(p, i);
100 entries[i].nr = i;
@@ -112,7 +115,7 @@ static int verify_packfile(struct packed_git *p,
115 if (check_pack_crc(p, w_curs, offset, len, nr))
116 err = error("index CRC mismatch for object %s "
117 "from %s at offset %"PRIuMAX"",
115 - sha1_to_hex(entries[i].sha1),
118 + oid_to_hex(entries[i].oid.oid),
119 p->pack_name, (uintmax_t)offset);
120 }
121
@@ -135,14 +138,14 @@ static int verify_packfile(struct packed_git *p,
138
139 if (data_valid && !data)
140 err = error("cannot unpack %s from %s at offset %"PRIuMAX"",
138 - sha1_to_hex(entries[i].sha1), p->pack_name,
141 + oid_to_hex(entries[i].oid.oid), p->pack_name,
142 (uintmax_t)entries[i].offset);
140 - else if (check_sha1_signature(entries[i].sha1, data, size, typename(type)))
143 + else if (check_sha1_signature(entries[i].oid.hash, data, size, typename(type)))
144 err = error("packed %s from %s is corrupt",
142 - sha1_to_hex(entries[i].sha1), p->pack_name);
145 + oid_to_hex(entries[i].oid.oid), p->pack_name);
146 else if (fn) {
147 int eaten = 0;
145 - err |= fn(entries[i].sha1, type, size, data, &eaten);
148 + err |= fn(entries[i].oid.oid, type, size, data, &eaten);
149 if (eaten)
150 data = NULL;
151 }
pack.h
+1 -1
@@ -75,7 +75,7 @@ struct pack_idx_entry {
75
76 struct progress;
77 /* Note, the data argument could be NULL if object type is blob */
78 -typedef int (*verify_fn)(const unsigned char*, enum object_type, unsigned long, void*, int*);
78 +typedef int (*verify_fn)(const struct object_id *, enum object_type, unsigned long, void*, int*);
79
80 extern const char *write_idx_file(const char *index_name, struct pack_idx_entry **objects, int nr_objects, const struct pack_idx_option *, const unsigned char *sha1);
81 extern int check_pack_crc(struct packed_git *p, struct pack_window **w_curs, off_t offset, off_t len, unsigned int nr);