summarylogtreecommitdiffstats
path: root/check-pacman-mtree-0.9.lua
blob: f009ff0adab2b6d5dda222f964897407388ecdbe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
#!/usr/bin/luajit

-- version 0.8
-- https://aur.archlinux.org/packages/check-pacman-mtree/

--require "strict"

local ffi = require "ffi"

local C = ffi.C
local libcrypto = ffi.load("crypto")
local libz = ffi.load("z")

local function hex_from_ffi_str(s,n)
        return string.format(string.rep('%02x',n), string.byte(ffi.string(s,n),1,n))
end

local function C_error(str)
      return string.format(str .. ': %s', ffi.string(C.strerror(ffi.errno())))
end


ffi.cdef[[
   static const int LINE_SIZE = 1024;
   static const int BUFFER_SIZE = 32768;

   //libc start
   static const int O_RDONLY = 0;
   static const int SEEK_SET = 0;
   static const int SEEK_END = 2;
   static const int ENOENT = 2;
   char *strerror(int);
   int open (const char *, int, ...);
   int read(int , void *, int);
   int close(int);
   int lseek(int , int , int );
   int readlink(const char *, char *,int);

   //libc stop

   //openssl start
   static const int EVP_MAX_MD_SIZE = 64;
   void *EVP_md5(void);
   void *EVP_sha256(void);
   void *EVP_MD_CTX_new(void);
   int EVP_DigestInit(void *, void *);
   int EVP_DigestUpdate(void *,const void *,int);
   int EVP_DigestFinal_ex(void *,unsigned char *,unsigned int *);
   void EVP_MD_CTX_free(void *);
   //openssl stop

   //zlib start
   void * gzopen (const char *, const char *);
   int gzclose (void * );
   char * gzgets (void * , char *, int );
   //zlib stop
]]

local function printf_(...)
   return io.write(string.format(...),"\n")
end

-- if size matches we will not do md5/sha256
-- set size to -1 to force MD
local function get_size_md5_sha256(file,size)

   local fh,mdctx_md5,mdctx_sha256
   local fs_size,ret_2,ret_3

   do

      fh = C.open(file,C.O_RDONLY)
      if fh == -1 then return nil,C_error("open " .. file),ffi.errno() end

      fs_size = C.lseek(fh,0,C.SEEK_END)
   
      if size ~= -1 and fs_size ~= size then goto clean_up_short end
      --goto clean_up_short
   
   
      C.lseek(fh,0,C.SEEK_SET)
   
      mdctx_md5 = libcrypto.EVP_MD_CTX_new()
      mdctx_sha256 = libcrypto.EVP_MD_CTX_new()
   
      if mdctx_md5 == nil or mdctx_sha256 == nil then
            ret_2 = "libcrypto.EVP_MD_CTX_new md5/sha256 failed " .. file
            goto clean_up
      end
   
      local md_value_md5 = ffi.new("char[?]",C.EVP_MAX_MD_SIZE)
      local md_value_sha256 = ffi.new("char[?]",C.EVP_MAX_MD_SIZE)
   
      local md_len_md5 = ffi.new("int[1]")
      local md_len_sha256 = ffi.new("int[1]")
   
      local buffer = ffi.new("char[?]",C.BUFFER_SIZE)
   
      if md_value_md5 == nil or md_value_sha256 == nil or md_len_md5 == nil or
         md_len_sha256 == nil or buffer == nil then
         ret_2 = "ffi.new failed " ..file
         goto clean_up
      end
   
      if libcrypto.EVP_DigestInit(mdctx_md5, libcrypto.EVP_md5()) ~= 1 or
         libcrypto.EVP_DigestInit(mdctx_sha256, libcrypto.EVP_sha256()) ~= 1 then
            ret_2 = "libcrypto.EVP_DigestInit md5/sha256 failed " .. file
            goto clean_up
      end
   
      while (1) do
         local n = C.read(fh,buffer, C.BUFFER_SIZE)
         --we should make something better for read ret < 0
         if n <= 0 then break end
         if libcrypto.EVP_DigestUpdate(mdctx_md5,buffer,n) ~= 1 or
            libcrypto.EVP_DigestUpdate(mdctx_sha256,buffer,n) ~= 1 then
               ret_2 = "libcrypto.EVP_DigestUpdate md5/sha256 failed " .. file
               goto clean_up
         end
      end
   
      if libcrypto.EVP_DigestFinal_ex(mdctx_md5, md_value_md5, md_len_md5) ~= 1 or
         libcrypto.EVP_DigestFinal_ex(mdctx_sha256, md_value_sha256, md_len_sha256) ~= 1 then
           ret_2 = "libcrypto.EVP_DigestFinal_ex md5/sha256 failed " .. file
           goto clean_up
      end
   
      ret_2,ret_3 = hex_from_ffi_str(md_value_md5,md_len_md5[0]),hex_from_ffi_str(md_value_sha256,md_len_sha256[0])

   end

   ::clean_up::
      if mdctx_md5 ~= nil then libcrypto.EVP_MD_CTX_free(mdctx_md5) end
      if mdctx_sha256 ~= nil then libcrypto.EVP_MD_CTX_free(mdctx_sha256) end

   ::clean_up_short::
      if fh >= 0 then C.close(fh) end

   return fs_size,ret_2,ret_3

end

local function get_symlink(file)
   local line = ffi.new("char[?]",C.LINE_SIZE)
   if line == nil then return nil,"ffi.new failed " ..file end
   local size = C.readlink(file,line,C.LINE_SIZE-1)

   if size == -1 then return nil,C_error("readlink " .. file),ffi.errno() end

   return ffi.string(line,size)
end

local function check_1_mtree_file(pkg,fs_root,verbose,file)
   local line = ffi.new("char[?]",C.LINE_SIZE)
   if line == nil then return nil,"ffi.new failed " ..file end

   local gz_fh = libz.gzopen(file,"r")
   if gz_fh == nil then return nil,C_error("gzopen " .. file) end
   --libz.gzbuffer(gz_fh,65536)

   local file,root_file,size,md5,sha256
   local fs_size,symlink_linkto,link_fs
   local status,msg,aaa,bbb
   local l_line
   while(1) do
      if libz.gzgets(gz_fh,line,C.LINE_SIZE) == nil then break end
      
      l_line = ffi.string(line)
      file,size,sha256 = string.match(l_line, "^(%S+) .* size=(%S+).* sha256digest=(%S+)")
      if file and size and sha256 then
         if size then size=tonumber(size) end
      else
         file,symlink_linkto = string.match(l_line,"^(%S+) .* type=link link=(.*)%s$")
         if file and symlink_linkto then
            --printf_("symlink_name=%s symlink_linkto=%s",file,symlink_linkto)
            symlink_linkto = string.gsub(symlink_linkto,"\\%d%d%d",
               function(str) return string.char(tonumber(string.sub(str,2,-1),8)) end
            )
         else goto continue
         end
      end

      --print (file,size,md5,sha256)
      file = string.gsub(file,"^%./","",1)
      if file == '.PKGINFO' or file == '.INSTALL' or file == '.CHANGELOG' then
         goto continue
      end
      if file == '.BUILDINFO' then
         goto continue
      end

      file = string.gsub(file,"\\%d%d%d",
         function(str) return string.char(tonumber(string.sub(str,2,-1),8)) end
      )
      --print (file,size,md5,sha256)
      root_file = fs_root .. file

      if not size then
         --goto continue
         -- we are here so this is not a file, so maybe symlink or other type
         link_fs,aaa,bbb = get_symlink(root_file)
         -- status is nil so in aaa we have str_err and in bbb we have C.errno
         if link_fs == nil then
            if(bbb == C.ENOENT) then
            --if(string.match(msg,"No such file")) then
               if verbose > 0 then
                  printf_("EXTRA_MTREE pkg=%s symlink=%s link=%s",pkg,file,symlink_linkto)
               else
                  printf_("EXTRA_MTREE pkg=%s symlink=%s",pkg,file)
               end
            else
               printf_("FAIL check_symlink %s",aaa)
            end
         else
            if link_fs ~= symlink_linkto then
                  if verbose > 0 then
                     printf_("DIFF pkg=%s symlink=%s link_mtree=%s link_fs=%s",pkg,file,symlink_linkto,link_fs)
                  else
                     printf_("DIFF pkg=%s symlink=%s",pkg,file)
                  end
            end
         end

         goto continue
      end

      -- here we are in type=file case

      -- goto continue

      if verbose > 0 then fs_size,aaa,bbb = get_size_md5_sha256(root_file,-1)
      else fs_size,aaa,bbb = get_size_md5_sha256(root_file,size)
      end

      if not fs_size then
         -- fs_size is nil so in aaa we have str_err and in bbb we have C.errno
         if(bbb == C.ENOENT) then
         --if(string.match(msg,"No such file")) then
            if verbose > 0 then
               printf_("EXTRA_MTREE pkg=%s file=%s size_mtree=%s sha256_mtree=%s",pkg,file,size,sha256)
            else
               printf_("EXTRA_MTREE pkg=%s file=%s",pkg,file)
            end
         else
            printf_("FAIL get_size_md5_sha256 %s",aaa)
         end
         goto continue
      end

      --print(file,type(size),size,type(fs_size),fs_size,aaa,bbb)
      if fs_size ~= size or bbb ~= sha256 then
         if verbose > 0 then
            printf_("DIFF pkg=%s file=%s size_mtree=%d size_fs=%d sha256_mtree=%s sha256_fs=%s",pkg,file,size,fs_size,sha256,bbb)
         else 
            printf_("DIFF pkg=%s file=%s",pkg,file)
         end
         goto continue
      end

      
      --printf_("MATCH pkg=%s file=%s",pkg,file)
      
      --C.printf("LINE %s",line)

      ::continue::
   end
   
   libz.gzclose(ffi.gc(gz_fh,nil))

   return true
end


local function main(arg)
   local mtree_root = "/var/lib/pacman/local"
   local fs_root = "/"
   local pacman_list_pkg = "pacman -Q"
   local msg
   local check_all_pkgs = false
   local verbose = 0

   if not arg[1] then
      print("usage: " .. arg[0] .. " [ -a | pkg1 pkg2...] [-v | -vv] )")
      print("-a  = all pkgs")
      print("-v  = verbose(include size/sha256)")
      print("-vv = even more verbose(show PKG= lines)")
      --printf_("%c%c%c@%04x.%c%c%c",99,103,109,255,110,101,116)
      
      return -1
   end

   for i,v in pairs(arg) do
      if i < 1 then goto continue end
      if v == '-v' then
         verbose = verbose + 1
         arg[i] = nil
      elseif v == '-vv' then
         verbose = verbose + 2
         arg[i] = nil
      elseif v == '-a' then
         check_all_pkgs = true
      elseif v == '-av' then
         check_all_pkgs = true
         verbose = verbose + 1
      elseif v == '-avv' then
         check_all_pkgs = true
         verbose = verbose + 2
      end
      ::continue::
   end
   
   --local file = io.stdin
   --if arg[1] and arg[1] ~= '-' then
   --   file,msg = io.open (arg[1])
   --   assert(file,msg)
   --end

   local fh_cmd,msg = io.popen(pacman_list_pkg,"r")
   if not fh_cmd then
      printf_("pacman cmd error %s",msg)
      return
   end

   for pkg in fh_cmd:lines() do
   --for pkg in io.stdin:lines() do
   --for pkg in lfs.dir(mtree_root) do
      if pkg == "." or pkg == ".." then goto continue end

      if not check_all_pkgs then
         local match = false
         for i,k in pairs(arg) do
            if i >= 1 and string.match(pkg,k) then
               match = true
               break
            end
         end
         if not match then goto continue end

      end
      pkg = string.gsub(pkg," ","-")
      --local pkg,ver = string.match(line, "^(%S+) (%S+)")
      if verbose > 1 then printf_("PKG=%s",pkg) end
      local ret,msg = check_1_mtree_file(pkg,fs_root,verbose,string.format("%s/%s/mtree",mtree_root,pkg))
      if not ret then printf_("FAIL mtree_file pkg=%s %s",pkg,msg) end
      
      ::continue::
   end

   fh_cmd:close()
   --if file ~= io.stdin then file:close() end
   
end
-----------------------------------------------------------
-----------------------------------------------------------
--print(check_symlink(arg[1],arg[2]))
return main(arg)