-
-
Notifications
You must be signed in to change notification settings - Fork 32.4k
gh-108948: tarfile should handle sticky bit in FreeBSD #108950
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from 1 commit
6a4be8f
50729f7
3587710
41491bb
4f6536d
fe7dfed
4009573
7b784b5
02d7c21
94efbbb
d1824c8
bd1dba7
417e31a
83c08fc
54f5548
b60ada6
5a51aab
cac6595
23a6fd5
060bcb2
5ae3e30
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
- Loading branch information
There are no files selected for viewing
Original file line number | Diff line number | Diff line change | ||||||||
---|---|---|---|---|---|---|---|---|---|---|
|
@@ -3086,35 +3086,63 @@ def can_chmod_set_sticky_inner(): | |||||||||
|
||||||||||
|
||||||||||
@os_helper.skip_unless_working_chmod | ||||||||||
class FileModesTest(unittest.TestCase): | ||||||||||
@unittest.skipUnless(hasattr(errno, "EFTYPE"), "requires errno.EFTYPE") | ||||||||||
def test_extract_chmod_eftype(self): | ||||||||||
# Extracting a file as non-root should skip the sticky bit (gh-108948) | ||||||||||
# even on platforms where chmod fails with EFTYPE (i.e. FreeBSD). But | ||||||||||
# we need to take care that any other error is preserved. | ||||||||||
mode = "-rwxrwxrwt" | ||||||||||
expected_mode = mode if can_chmod_set_sticky() else "-rwxrwxrwx" | ||||||||||
class ExtractStickyFileTest(unittest.TestCase): | ||||||||||
|
||||||||||
# to use in mock tests, on platforms that don't have it | ||||||||||
fake_EFTYPE = getattr(errno, "EFTYPE", max(errno.errorcode) + 100) | ||||||||||
|
||||||||||
def setUp(self): | ||||||||||
self.test_dir = os.path.join(TEMPDIR, "chmod") | ||||||||||
os.mkdir(self.test_dir) | ||||||||||
self.addCleanup(os_helper.rmtree, self.test_dir) | ||||||||||
self.sticky_mode = "-rwxrwxrwt" | ||||||||||
self.non_sticky_mode = "-rwxrwxrwx" | ||||||||||
|
||||||||||
def extract_sticky_file(self, file_name="sticky"): | ||||||||||
with ArchiveMaker() as arc: | ||||||||||
arc.add("sticky1", mode=mode) | ||||||||||
arc.add("sticky2 8000 ", mode=mode) | ||||||||||
DIR = os.path.join(TEMPDIR, "chmod") | ||||||||||
os.mkdir(DIR) | ||||||||||
self.addCleanup(os_helper.rmtree, DIR) | ||||||||||
arc.add(file_name, mode=self.sticky_mode) | ||||||||||
with arc.open(errorlevel=2) as tar: | ||||||||||
# this should not raise: | ||||||||||
tar.extract("sticky1", DIR, filter="fully_trusted") | ||||||||||
got_mode = stat.filemode(os.stat(os.path.join(DIR, "sticky1")).st_mode) | ||||||||||
self.assertEqual(got_mode, expected_mode) | ||||||||||
|
||||||||||
# but we can create a situation where it does raise: | ||||||||||
with unittest.mock.patch("os.chmod") as mock: | ||||||||||
eftype_error = OSError(errno.EFTYPE, "EFTYPE") | ||||||||||
other_error = OSError(errno.EPERM, "different error") | ||||||||||
mock.side_effect = [eftype_error, other_error] | ||||||||||
with self.assertRaises(tarfile.ExtractError) as excinfo: | ||||||||||
tar.extract("sticky2", DIR, filter="fully_trusted") | ||||||||||
self.assertEqual(excinfo.exception.__cause__, other_error) | ||||||||||
self.assertEqual(excinfo.exception.__cause__.__cause__, eftype_error) | ||||||||||
tar.extract(file_name, self.test_dir, filter="fully_trusted") | ||||||||||
self.extracted_path = os.path.join(self.test_dir, file_name) | ||||||||||
|
||||||||||
def test_extract_chmod_eftype_success(self): | ||||||||||
# Extracting a file as non-root should skip the sticky bit (gh-108948) | ||||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||
# even on platforms where chmod fails with EFTYPE (i.e. FreeBSD) | ||||||||||
expected_mode = self.sticky_mode if can_chmod_set_sticky() else self.non_sticky_mode | ||||||||||
self.extract_sticky_file() | ||||||||||
got_mode = stat.filemode(os.stat(self.extracted_path).st_mode) | ||||||||||
self.assertEqual(got_mode, expected_mode) | ||||||||||
|
||||||||||
@unittest.mock.patch.object(errno, "EFTYPE", fake_EFTYPE, create=True) | ||||||||||
def test_extract_chmod_eftype_mock(self): | ||||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||
# Like test_extract_chmod_eftype_success but mock chmod so we can | ||||||||||
# explicitly test the case we want, regardless of the OS. | ||||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 8000 form>I would prefer to describe which code path is tested: Test chmod() failing with OSError(EFTYPE) and then pass when re-run without the sticky bit. |
||||||||||
with unittest.mock.patch("os.chmod") as mock: | ||||||||||
eftype_error = OSError(errno.EFTYPE, "EFTYPE") | ||||||||||
mock.side_effect = [eftype_error, None] | ||||||||||
self.extract_sticky_file() | ||||||||||
self.assertTrue(mock.call_count, 2) | ||||||||||
_, chmod_mode1 = mock.call_args_list[0].args | ||||||||||
_, chmod_mode2 = mock.call_args_list[1].args | ||||||||||
self.assertTrue(chmod_mode1 & stat.S_ISVTX) | ||||||||||
self.assertFalse(chmod_mode2 & stat.S_ISVTX) | ||||||||||
self.assertEqual(chmod_mode1 | chmod_mode2, chmod_mode1) | ||||||||||
|
||||||||||
@unittest.mock.patch.object(errno, "EFTYPE", fake_EFTYPE, create=True) | ||||||||||
def test_extract_chmod_eftype_error(self): | ||||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||
# Take care that any other error is preserved in the EFTYPE case. | ||||||||||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I suggest to add first (but preserve your longer comment): Test chmod() failing with OSError(EFTYPE) and then raise PermissionError() when re-run without the sticky bit. |
||||||||||
# It's hard to create a situation where chmod() fails with EFTYPE and, | ||||||||||
# retrying without the sticky bit, it fails with a different error. But | ||||||||||
# we can mock it, so we can exercise all branches. | ||||||||||
with unittest.mock.patch("os.chmod") as mock: | ||||||||||
eftype_error = OSError(errno.EFTYPE, "EFTYPE") | ||||||||||
other_error = OSError(errno.EPERM, "different error") | ||||||||||
mock.side_effect = [eftype_error, other_error] | ||||||||||
with self.assertRaises(tarfile.ExtractError, | ||||||||||
msg="could not change mode") as excinfo: | ||||||||||
self.extract_sticky_file() | ||||||||||
self.assertEqual(excinfo.exception.__cause__, other_error) | ||||||||||
self.assertEqual(excinfo.exception.__cause__.__cause__, eftype_error) | ||||||||||
Comment on lines
+3119
to
+3120
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||||||
|
||||||||||
|
||||||||||
class ReplaceTests(ReadTest, unittest.TestCase): | ||||||||||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
On most platforms, this test willl be run without EFTYPE. I suggest to remove it: