mirror of
https://github.com/morluto/rea.git
synced 2026-10-19 04:19:54 -05:00
8e6f37e2a0
* fix(formats): preserve high bits in remaining magic-byte checks
Node's "ascii" decoder masks the high bit, so byte-for-byte signature
comparisons accepted lookalikes such as CD DA ("MZ" | 0x80) or a
high-bit "bplist00"/"NIBArchive" header. ac57c88ef fixed this for the
shared DOS/MZ reader; apply the same latin1 decoding to the remaining
signature checks: NativeAOT and Windows native loader MZ/PE, binary
plist and NIBArchive detection, and PNG IHDR checks.
Display-name decodes (section and metadata stream names) are unchanged.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* style(windows): format signature admission regressions
---------
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>
40 lines
1.4 KiB
JavaScript
40 lines
1.4 KiB
JavaScript
#!/usr/bin/env node
|
|
|
|
import { createHash } from "node:crypto";
|
|
import { readFile } from "node:fs/promises";
|
|
|
|
const root = new URL("../", import.meta.url);
|
|
const packageJson = JSON.parse(
|
|
await readFile(new URL("package.json", root), "utf8"),
|
|
);
|
|
const manifest = JSON.parse(
|
|
await readFile(new URL("native/windows/build/manifest.json", root), "utf8"),
|
|
);
|
|
const bytes = await readFile(
|
|
new URL("native/windows/build/rea-windows-x64.node", root),
|
|
);
|
|
if (
|
|
manifest.packageVersion !== packageJson.version ||
|
|
manifest.platform !== "win32" ||
|
|
manifest.architecture !== "x64" ||
|
|
manifest.abiVersion !== 1 ||
|
|
manifest.nodeApiVersion !== 8 ||
|
|
manifest.artifact !== "rea-windows-x64.node" ||
|
|
createHash("sha256").update(bytes).digest("hex") !== manifest.artifactSha256
|
|
)
|
|
throw new Error(
|
|
"Windows native artifact metadata or SHA-256 does not match this package; run the Windows native build lane.",
|
|
);
|
|
const offset = bytes.length >= 64 ? bytes.readUInt32LE(0x3c) : bytes.length;
|
|
if (
|
|
bytes.toString("latin1", 0, 2) !== "MZ" ||
|
|
offset > bytes.length - 26 ||
|
|
bytes.toString("latin1", offset, offset + 4) !== "PE\0\0" ||
|
|
bytes.readUInt16LE(offset + 4) !== 0x8664 ||
|
|
bytes.readUInt16LE(offset + 24) !== 0x20b
|
|
)
|
|
throw new Error("Windows native artifact must be a Windows x64 PE32+ image.");
|
|
process.stdout.write(
|
|
`${JSON.stringify({ ok: true, ...manifest, artifactBytes: bytes.length })}\n`,
|
|
);
|