mirror of
https://github.com/containerd/containerd.git
synced 2026-11-06 13:27:16 +00:00
Nikolaus Schuetz
41f6f0e877
ParseSourceDateEpoch used strconv.ParseInt, which accepts a leading sign, so a
negative SOURCE_DATE_EPOCH was silently accepted and produced a pre-1970
timestamp with a nil error. That contradicts the function's own doc ("returns
an error if ... not well-formatted") and the reproducible-builds spec, where
SOURCE_DATE_EPOCH is a non-negative number of seconds since the Unix epoch.
Reject negative values and add a regression test.
Signed-off-by: Nikolaus Schuetz <nikolauspschuetz@gmail.com>
71 lines
2.1 KiB
Go
71 lines
2.1 KiB
Go
/*
|
|
Copyright The containerd Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// Package epoch provides SOURCE_DATE_EPOCH utilities.
|
|
package epoch
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strconv"
|
|
"time"
|
|
)
|
|
|
|
// SourceDateEpochEnv is the SOURCE_DATE_EPOCH env var.
|
|
// See https://reproducible-builds.org/docs/source-date-epoch/
|
|
const SourceDateEpochEnv = "SOURCE_DATE_EPOCH"
|
|
|
|
// SourceDateEpoch returns the SOURCE_DATE_EPOCH env var as *time.Time.
|
|
// If the env var is not set, SourceDateEpoch returns nil without an error.
|
|
func SourceDateEpoch() (*time.Time, error) {
|
|
v, ok := os.LookupEnv(SourceDateEpochEnv)
|
|
if !ok || v == "" {
|
|
return nil, nil // not an error
|
|
}
|
|
t, err := ParseSourceDateEpoch(v)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("invalid %s value: %w", SourceDateEpochEnv, err)
|
|
}
|
|
return t, nil
|
|
}
|
|
|
|
// ParseSourceDateEpoch parses the given source date epoch, as *time.Time.
|
|
// It returns an error if sourceDateEpoch is empty or not well-formatted.
|
|
func ParseSourceDateEpoch(sourceDateEpoch string) (*time.Time, error) {
|
|
if sourceDateEpoch == "" {
|
|
return nil, fmt.Errorf("value is empty")
|
|
}
|
|
i64, err := strconv.ParseInt(sourceDateEpoch, 10, 64)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("invalid value: %w", err)
|
|
}
|
|
if i64 < 0 {
|
|
return nil, fmt.Errorf("invalid value: %q must be non-negative", sourceDateEpoch)
|
|
}
|
|
unix := time.Unix(i64, 0).UTC()
|
|
return &unix, nil
|
|
}
|
|
|
|
// SetSourceDateEpoch sets the SOURCE_DATE_EPOCH env var.
|
|
func SetSourceDateEpoch(tm time.Time) {
|
|
_ = os.Setenv(SourceDateEpochEnv, fmt.Sprintf("%d", tm.Unix()))
|
|
}
|
|
|
|
// UnsetSourceDateEpoch unsets the SOURCE_DATE_EPOCH env var.
|
|
func UnsetSourceDateEpoch() {
|
|
_ = os.Unsetenv(SourceDateEpochEnv)
|
|
}
|