actions/golangci-lint-action
2
0
Fork 0
mirror of https://github.com/golangci/golangci-lint-action.git synced 2025-12-12 14:01:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

build(deps): bump tmp from 0.2.3 to 0.2.4 (#1264)

Browse source 
Co-authored-by: Fernandez Ludovic <ldez@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2025-08-06 20:00:05 +00:00 committed by GitHub
parent 3d16f46f22
commit f9e969abf5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 396 additions and 279 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

332
dist/post_run/index.js generated vendored
View file

@ -61304,34 +61304,24 @@ const _c = { fs: fs.constants, os: os.constants };
/* /*
* The working inner variables. * The working inner variables.
*/ */
const const // the random characters to choose from
// the random characters to choose from
RANDOM_CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz', RANDOM_CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz',
TEMPLATE_PATTERN = /XXXXXX/, TEMPLATE_PATTERN = /XXXXXX/,
DEFAULT_TRIES = 3, DEFAULT_TRIES = 3,
CREATE_FLAGS = (_c.O_CREAT || _c.fs.O_CREAT) | (_c.O_EXCL || _c.fs.O_EXCL) | (_c.O_RDWR || _c.fs.O_RDWR), CREATE_FLAGS = (_c.O_CREAT || _c.fs.O_CREAT) | (_c.O_EXCL || _c.fs.O_EXCL) | (_c.O_RDWR || _c.fs.O_RDWR),
// constants are off on the windows platform and will not match the actual errno codes // constants are off on the windows platform and will not match the actual errno codes
IS_WIN32 = os.platform() === 'win32', IS_WIN32 = os.platform() === 'win32',
EBADF = _c.EBADF || _c.os.errno.EBADF, EBADF = _c.EBADF || _c.os.errno.EBADF,
ENOENT = _c.ENOENT || _c.os.errno.ENOENT, ENOENT = _c.ENOENT || _c.os.errno.ENOENT,
DIR_MODE = 0o700 /* 448 */, DIR_MODE = 0o700 /* 448 */,
FILE_MODE = 0o600 /* 384 */, FILE_MODE = 0o600 /* 384 */,
EXIT = 'exit', EXIT = 'exit',
// this will hold the objects need to be removed on exit // this will hold the objects need to be removed on exit
_removeObjects = [], _removeObjects = [],
// API change in fs.rmdirSync leads to error when passing in a second parameter, e.g. the callback // API change in fs.rmdirSync leads to error when passing in a second parameter, e.g. the callback
FN_RMDIR_SYNC = fs.rmdirSync.bind(fs); FN_RMDIR_SYNC = fs.rmdirSync.bind(fs);
let let _gracefulCleanup = false;
_gracefulCleanup = false;
/** /**
* Recursively remove a directory and its contents. * Recursively remove a directory and its contents.
@ -61361,38 +61351,35 @@ function FN_RIMRAF_SYNC(dirPath) {
* @param {?tmpNameCallback} callback the callback function * @param {?tmpNameCallback} callback the callback function
*/ */
function tmpName(options, callback) { function tmpName(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
try { _assertAndSanitizeOptions(opts, function (err, sanitizedOptions) {
_assertAndSanitizeOptions(opts); if (err) return cb(err);
} catch (err) {
return cb(err);
}
let tries = opts.tries; let tries = sanitizedOptions.tries;
(function _getUniqueName() { (function _getUniqueName() {
try { try {
const name = _generateTmpName(opts); const name = _generateTmpName(sanitizedOptions);
// check whether the path exists then retry if needed // check whether the path exists then retry if needed
fs.stat(name, function (err) { fs.stat(name, function (err) {
/* istanbul ignore else */
if (!err) {
/* istanbul ignore else */ /* istanbul ignore else */
if (tries-- > 0) return _getUniqueName(); if (!err) {
/* istanbul ignore else */
if (tries-- > 0) return _getUniqueName();
return cb(new Error('Could not get a unique tmp filename, max tries reached ' + name)); return cb(new Error('Could not get a unique tmp filename, max tries reached ' + name));
} }
cb(null, name); cb(null, name);
}); });
} catch (err) { } catch (err) {
cb(err); cb(err);
} }
}()); })();
});
} }
/** /**
@ -61403,15 +61390,14 @@ function tmpName(options, callback) {
* @throws {Error} if the options are invalid or could not generate a filename * @throws {Error} if the options are invalid or could not generate a filename
*/ */
function tmpNameSync(options) { function tmpNameSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
_assertAndSanitizeOptions(opts); const sanitizedOptions = _assertAndSanitizeOptionsSync(opts);
let tries = opts.tries; let tries = sanitizedOptions.tries;
do { do {
const name = _generateTmpName(opts); const name = _generateTmpName(sanitizedOptions);
try { try {
fs.statSync(name); fs.statSync(name);
} catch (e) { } catch (e) {
@ -61429,8 +61415,7 @@ function tmpNameSync(options) {
* @param {?fileCallback} callback * @param {?fileCallback} callback
*/ */
function file(options, callback) { function file(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
@ -61467,13 +61452,12 @@ function file(options, callback) {
* @throws {Error} if cannot create a file * @throws {Error} if cannot create a file
*/ */
function fileSync(options) { function fileSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
const discardOrDetachDescriptor = opts.discardDescriptor || opts.detachDescriptor; const discardOrDetachDescriptor = opts.discardDescriptor || opts.detachDescriptor;
const name = tmpNameSync(opts); const name = tmpNameSync(opts);
var fd = fs.openSync(name, CREATE_FLAGS, opts.mode || FILE_MODE); let fd = fs.openSync(name, CREATE_FLAGS, opts.mode || FILE_MODE);
/* istanbul ignore else */ /* istanbul ignore else */
if (opts.discardDescriptor) { if (opts.discardDescriptor) {
fs.closeSync(fd); fs.closeSync(fd);
@ -61494,8 +61478,7 @@ function fileSync(options) {
* @param {?dirCallback} callback * @param {?dirCallback} callback
*/ */
function dir(options, callback) { function dir(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
@ -61522,8 +61505,7 @@ function dir(options, callback) {
* @throws {Error} if it cannot create a directory * @throws {Error} if it cannot create a directory
*/ */
function dirSync(options) { function dirSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
const name = tmpNameSync(opts); const name = tmpNameSync(opts);
@ -61574,8 +61556,7 @@ function _removeFileSync(fdPath) {
} finally { } finally {
try { try {
fs.unlinkSync(fdPath[1]); fs.unlinkSync(fdPath[1]);
} } catch (e) {
catch (e) {
// reraise any unanticipated error // reraise any unanticipated error
if (!_isENOENT(e)) rethrownException = e; if (!_isENOENT(e)) rethrownException = e;
} }
@ -61647,7 +61628,6 @@ function _prepareRemoveCallback(removeFunction, fileOrDirName, sync, cleanupCall
// if sync is true, the next parameter will be ignored // if sync is true, the next parameter will be ignored
return function _cleanupCallback(next) { return function _cleanupCallback(next) {
/* istanbul ignore else */ /* istanbul ignore else */
if (!called) { if (!called) {
// remove cleanupCallback from cache // remove cleanupCallback from cache
@ -61660,7 +61640,7 @@ function _prepareRemoveCallback(removeFunction, fileOrDirName, sync, cleanupCall
if (sync || removeFunction === FN_RMDIR_SYNC || removeFunction === FN_RIMRAF_SYNC) { if (sync || removeFunction === FN_RMDIR_SYNC || removeFunction === FN_RIMRAF_SYNC) {
return removeFunction(fileOrDirName); return removeFunction(fileOrDirName);
} else { } else {
return removeFunction(fileOrDirName, next || function() {}); return removeFunction(fileOrDirName, next || function () {});
} }
} }
}; };
@ -61695,8 +61675,7 @@ function _garbageCollector() {
* @private * @private
*/ */
function _randomChars(howMany) { function _randomChars(howMany) {
let let value = [],
value = [],
rnd = null; rnd = null;
// make sure that we do not fail because we ran out of entropy // make sure that we do not fail because we ran out of entropy
@ -61706,24 +61685,13 @@ function _randomChars(howMany) {
rnd = crypto.pseudoRandomBytes(howMany); rnd = crypto.pseudoRandomBytes(howMany);
} }
for (var i = 0; i < howMany; i++) { for (let i = 0; i < howMany; i++) {
value.push(RANDOM_CHARS[rnd[i] % RANDOM_CHARS.length]); value.push(RANDOM_CHARS[rnd[i] % RANDOM_CHARS.length]);
} }
return value.join(''); return value.join('');
} }
/**
* Helper which determines whether a string s is blank, that is undefined, or empty or null.
*
* @private
* @param {string} s
* @returns {Boolean} true whether the string s is blank, false otherwise
*/
function _isBlank(s) {
return s === null || _isUndefined(s) || !s.trim();
}
/** /**
* Checks whether the `obj` parameter is defined or not. * Checks whether the `obj` parameter is defined or not.
* *
@ -61765,6 +61733,51 @@ function _parseArguments(options, callback) {
return [actualOptions, callback]; return [actualOptions, callback];
} }
/**
* Resolve the specified path name in respect to tmpDir.
*
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @private
*/
function _resolvePath(name, tmpDir, cb) {
const pathToResolve = path.isAbsolute(name) ? name : path.join(tmpDir, name);
fs.stat(pathToResolve, function (err) {
if (err) {
fs.realpath(path.dirname(pathToResolve), function (err, parentDir) {
if (err) return cb(err);
cb(null, path.join(parentDir, path.basename(pathToResolve)));
});
} else {
fs.realpath(path, cb);
}
});
}
/**
* Resolve the specified path name in respect to tmpDir.
*
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @private
*/
function _resolvePathSync(name, tmpDir) {
const pathToResolve = path.isAbsolute(name) ? name : path.join(tmpDir, name);
try {
fs.statSync(pathToResolve);
return fs.realpathSync(pathToResolve);
} catch (_err) {
const parentDir = fs.realpathSync(path.dirname(pathToResolve));
return path.join(parentDir, path.basename(pathToResolve));
}
}
/** /**
* Generates a new temporary name. * Generates a new temporary name.
* *
@ -61773,16 +61786,17 @@ function _parseArguments(options, callback) {
* @private * @private
*/ */
function _generateTmpName(opts) { function _generateTmpName(opts) {
const tmpDir = opts.tmpdir; const tmpDir = opts.tmpdir;
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(opts.name)) if (!_isUndefined(opts.name)) {
return path.join(tmpDir, opts.dir, opts.name); return path.join(tmpDir, opts.dir, opts.name);
}
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(opts.template)) if (!_isUndefined(opts.template)) {
return path.join(tmpDir, opts.dir, opts.template).replace(TEMPLATE_PATTERN, _randomChars(6)); return path.join(tmpDir, opts.dir, opts.template).replace(TEMPLATE_PATTERN, _randomChars(6));
}
// prefix and postfix // prefix and postfix
const name = [ const name = [
@ -61798,33 +61812,32 @@ function _generateTmpName(opts) {
} }
/** /**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing * Asserts and sanitizes the basic options.
* options.
* *
* @param {Options} options
* @private * @private
*/ */
function _assertAndSanitizeOptions(options) { function _assertOptionsBase(options) {
if (!_isUndefined(options.name)) {
const name = options.name;
options.tmpdir = _getTmpDir(options); // assert that name is not absolute and does not contain a path
if (path.isAbsolute(name)) throw new Error(`name option must not contain an absolute path, found "${name}".`);
const tmpDir = options.tmpdir; // must not fail on valid .<name> or ..<name> or similar such constructs
const basename = path.basename(name);
/* istanbul ignore else */ if (basename === '..' || basename === '.' || basename !== name)
if (!_isUndefined(options.name)) throw new Error(`name option must not contain a path, found "${name}".`);
_assertIsRelative(options.name, 'name', tmpDir);
/* istanbul ignore else */
if (!_isUndefined(options.dir))
_assertIsRelative(options.dir, 'dir', tmpDir);
/* istanbul ignore else */
if (!_isUndefined(options.template)) {
_assertIsRelative(options.template, 'template', tmpDir);
if (!options.template.match(TEMPLATE_PATTERN))
throw new Error(`Invalid template, found "${options.template}".`);
} }
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(options.tries) && isNaN(options.tries) || options.tries < 0) if (!_isUndefined(options.template) && !options.template.match(TEMPLATE_PATTERN)) {
throw new Error(`Invalid template, found "${options.template}".`);
}
/* istanbul ignore else */
if ((!_isUndefined(options.tries) && isNaN(options.tries)) || options.tries < 0) {
throw new Error(`Invalid tries, found "${options.tries}".`); throw new Error(`Invalid tries, found "${options.tries}".`);
}
// if a name was specified we will try once // if a name was specified we will try once
options.tries = _isUndefined(options.name) ? options.tries || DEFAULT_TRIES : 1; options.tries = _isUndefined(options.name) ? options.tries || DEFAULT_TRIES : 1;
@ -61833,65 +61846,103 @@ function _assertAndSanitizeOptions(options) {
options.discardDescriptor = !!options.discardDescriptor; options.discardDescriptor = !!options.discardDescriptor;
options.unsafeCleanup = !!options.unsafeCleanup; options.unsafeCleanup = !!options.unsafeCleanup;
// sanitize dir, also keep (multiple) blanks if the user, purportedly sane, requests us to
options.dir = _isUndefined(options.dir) ? '' : path.relative(tmpDir, _resolvePath(options.dir, tmpDir));
options.template = _isUndefined(options.template) ? undefined : path.relative(tmpDir, _resolvePath(options.template, tmpDir));
// sanitize further if template is relative to options.dir
options.template = _isBlank(options.template) ? undefined : path.relative(options.dir, options.template);
// for completeness' sake only, also keep (multiple) blanks if the user, purportedly sane, requests us to // for completeness' sake only, also keep (multiple) blanks if the user, purportedly sane, requests us to
options.name = _isUndefined(options.name) ? undefined : options.name;
options.prefix = _isUndefined(options.prefix) ? '' : options.prefix; options.prefix = _isUndefined(options.prefix) ? '' : options.prefix;
options.postfix = _isUndefined(options.postfix) ? '' : options.postfix; options.postfix = _isUndefined(options.postfix) ? '' : options.postfix;
} }
/** /**
* Resolve the specified path name in respect to tmpDir. * Gets the relative directory to tmpDir.
* *
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @param name
* @param tmpDir
* @returns {string}
* @private * @private
*/ */
function _resolvePath(name, tmpDir) { function _getRelativePath(option, name, tmpDir, cb) {
if (name.startsWith(tmpDir)) { if (_isUndefined(name)) return cb(null);
return path.resolve(name);
} else { _resolvePath(name, tmpDir, function (err, resolvedPath) {
return path.resolve(path.join(tmpDir, name)); if (err) return cb(err);
}
const relativePath = path.relative(tmpDir, resolvedPath);
if (!resolvedPath.startsWith(tmpDir)) {
return cb(new Error(`${option} option must be relative to "${tmpDir}", found "${relativePath}".`));
}
cb(null, relativePath);
});
} }
/** /**
* Asserts whether specified name is relative to the specified tmpDir. * Gets the relative path to tmpDir.
* *
* @param {string} name
* @param {string} option
* @param {string} tmpDir
* @throws {Error}
* @private * @private
*/ */
function _assertIsRelative(name, option, tmpDir) { function _getRelativePathSync(option, name, tmpDir) {
if (option === 'name') { if (_isUndefined(name)) return;
// assert that name is not absolute and does not contain a path
if (path.isAbsolute(name)) const resolvedPath = _resolvePathSync(name, tmpDir);
throw new Error(`${option} option must not contain an absolute path, found "${name}".`); const relativePath = path.relative(tmpDir, resolvedPath);
// must not fail on valid .<name> or ..<name> or similar such constructs
let basename = path.basename(name); if (!resolvedPath.startsWith(tmpDir)) {
if (basename === '..' || basename === '.' || basename !== name) throw new Error(`${option} option must be relative to "${tmpDir}", found "${relativePath}".`);
throw new Error(`${option} option must not contain a path, found "${name}".`);
} }
else { // if (option === 'dir' || option === 'template') {
// assert that dir or template are relative to tmpDir return relativePath;
if (path.isAbsolute(name) && !name.startsWith(tmpDir)) { }
throw new Error(`${option} option must be relative to "${tmpDir}", found "${name}".`);
/**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing
* options.
*
* @private
*/
function _assertAndSanitizeOptions(options, cb) {
_getTmpDir(options, function (err, tmpDir) {
if (err) return cb(err);
options.tmpdir = tmpDir;
try {
_assertOptionsBase(options, tmpDir);
} catch (err) {
return cb(err);
} }
let resolvedPath = _resolvePath(name, tmpDir);
if (!resolvedPath.startsWith(tmpDir)) // sanitize dir, also keep (multiple) blanks if the user, purportedly sane, requests us to
throw new Error(`${option} option must be relative to "${tmpDir}", found "${resolvedPath}".`); _getRelativePath('dir', options.dir, tmpDir, function (err, dir) {
} if (err) return cb(err);
options.dir = _isUndefined(dir) ? '' : dir;
// sanitize further if template is relative to options.dir
_getRelativePath('template', options.template, tmpDir, function (err, template) {
if (err) return cb(err);
options.template = template;
cb(null, options);
});
});
});
}
/**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing
* options.
*
* @private
*/
function _assertAndSanitizeOptionsSync(options) {
const tmpDir = (options.tmpdir = _getTmpDirSync(options));
_assertOptionsBase(options, tmpDir);
const dir = _getRelativePathSync('dir', options.dir, tmpDir);
options.dir = _isUndefined(dir) ? '' : dir;
options.template = _getRelativePathSync('template', options.template, tmpDir);
return options;
} }
/** /**
@ -61949,11 +62000,18 @@ function setGracefulCleanup() {
* Returns the currently configured tmp dir from os.tmpdir(). * Returns the currently configured tmp dir from os.tmpdir().
* *
* @private * @private
* @param {?Options} options
* @returns {string} the currently configured tmp dir
*/ */
function _getTmpDir(options) { function _getTmpDir(options, cb) {
return path.resolve(options && options.tmpdir || os.tmpdir()); return fs.realpath((options && options.tmpdir) || os.tmpdir(), cb);
}
/**
* Returns the currently configured tmp dir from os.tmpdir().
*
* @private
*/
function _getTmpDirSync(options) {
return fs.realpathSync((options && options.tmpdir) || os.tmpdir());
} }
// Install process exit listener // Install process exit listener
@ -62054,7 +62112,7 @@ Object.defineProperty(module.exports, "tmpdir", ({
enumerable: true, enumerable: true,
configurable: false, configurable: false,
get: function () { get: function () {
return _getTmpDir(); return _getTmpDirSync();
} }
})); }));

332
dist/run/index.js generated vendored
View file

@ -61304,34 +61304,24 @@ const _c = { fs: fs.constants, os: os.constants };
/* /*
* The working inner variables. * The working inner variables.
*/ */
const const // the random characters to choose from
// the random characters to choose from
RANDOM_CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz', RANDOM_CHARS = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz',
TEMPLATE_PATTERN = /XXXXXX/, TEMPLATE_PATTERN = /XXXXXX/,
DEFAULT_TRIES = 3, DEFAULT_TRIES = 3,
CREATE_FLAGS = (_c.O_CREAT || _c.fs.O_CREAT) | (_c.O_EXCL || _c.fs.O_EXCL) | (_c.O_RDWR || _c.fs.O_RDWR), CREATE_FLAGS = (_c.O_CREAT || _c.fs.O_CREAT) | (_c.O_EXCL || _c.fs.O_EXCL) | (_c.O_RDWR || _c.fs.O_RDWR),
// constants are off on the windows platform and will not match the actual errno codes // constants are off on the windows platform and will not match the actual errno codes
IS_WIN32 = os.platform() === 'win32', IS_WIN32 = os.platform() === 'win32',
EBADF = _c.EBADF || _c.os.errno.EBADF, EBADF = _c.EBADF || _c.os.errno.EBADF,
ENOENT = _c.ENOENT || _c.os.errno.ENOENT, ENOENT = _c.ENOENT || _c.os.errno.ENOENT,
DIR_MODE = 0o700 /* 448 */, DIR_MODE = 0o700 /* 448 */,
FILE_MODE = 0o600 /* 384 */, FILE_MODE = 0o600 /* 384 */,
EXIT = 'exit', EXIT = 'exit',
// this will hold the objects need to be removed on exit // this will hold the objects need to be removed on exit
_removeObjects = [], _removeObjects = [],
// API change in fs.rmdirSync leads to error when passing in a second parameter, e.g. the callback // API change in fs.rmdirSync leads to error when passing in a second parameter, e.g. the callback
FN_RMDIR_SYNC = fs.rmdirSync.bind(fs); FN_RMDIR_SYNC = fs.rmdirSync.bind(fs);
let let _gracefulCleanup = false;
_gracefulCleanup = false;
/** /**
* Recursively remove a directory and its contents. * Recursively remove a directory and its contents.
@ -61361,38 +61351,35 @@ function FN_RIMRAF_SYNC(dirPath) {
* @param {?tmpNameCallback} callback the callback function * @param {?tmpNameCallback} callback the callback function
*/ */
function tmpName(options, callback) { function tmpName(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
try { _assertAndSanitizeOptions(opts, function (err, sanitizedOptions) {
_assertAndSanitizeOptions(opts); if (err) return cb(err);
} catch (err) {
return cb(err);
}
let tries = opts.tries; let tries = sanitizedOptions.tries;
(function _getUniqueName() { (function _getUniqueName() {
try { try {
const name = _generateTmpName(opts); const name = _generateTmpName(sanitizedOptions);
// check whether the path exists then retry if needed // check whether the path exists then retry if needed
fs.stat(name, function (err) { fs.stat(name, function (err) {
/* istanbul ignore else */
if (!err) {
/* istanbul ignore else */ /* istanbul ignore else */
if (tries-- > 0) return _getUniqueName(); if (!err) {
/* istanbul ignore else */
if (tries-- > 0) return _getUniqueName();
return cb(new Error('Could not get a unique tmp filename, max tries reached ' + name)); return cb(new Error('Could not get a unique tmp filename, max tries reached ' + name));
} }
cb(null, name); cb(null, name);
}); });
} catch (err) { } catch (err) {
cb(err); cb(err);
} }
}()); })();
});
} }
/** /**
@ -61403,15 +61390,14 @@ function tmpName(options, callback) {
* @throws {Error} if the options are invalid or could not generate a filename * @throws {Error} if the options are invalid or could not generate a filename
*/ */
function tmpNameSync(options) { function tmpNameSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
_assertAndSanitizeOptions(opts); const sanitizedOptions = _assertAndSanitizeOptionsSync(opts);
let tries = opts.tries; let tries = sanitizedOptions.tries;
do { do {
const name = _generateTmpName(opts); const name = _generateTmpName(sanitizedOptions);
try { try {
fs.statSync(name); fs.statSync(name);
} catch (e) { } catch (e) {
@ -61429,8 +61415,7 @@ function tmpNameSync(options) {
* @param {?fileCallback} callback * @param {?fileCallback} callback
*/ */
function file(options, callback) { function file(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
@ -61467,13 +61452,12 @@ function file(options, callback) {
* @throws {Error} if cannot create a file * @throws {Error} if cannot create a file
*/ */
function fileSync(options) { function fileSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
const discardOrDetachDescriptor = opts.discardDescriptor || opts.detachDescriptor; const discardOrDetachDescriptor = opts.discardDescriptor || opts.detachDescriptor;
const name = tmpNameSync(opts); const name = tmpNameSync(opts);
var fd = fs.openSync(name, CREATE_FLAGS, opts.mode || FILE_MODE); let fd = fs.openSync(name, CREATE_FLAGS, opts.mode || FILE_MODE);
/* istanbul ignore else */ /* istanbul ignore else */
if (opts.discardDescriptor) { if (opts.discardDescriptor) {
fs.closeSync(fd); fs.closeSync(fd);
@ -61494,8 +61478,7 @@ function fileSync(options) {
* @param {?dirCallback} callback * @param {?dirCallback} callback
*/ */
function dir(options, callback) { function dir(options, callback) {
const const args = _parseArguments(options, callback),
args = _parseArguments(options, callback),
opts = args[0], opts = args[0],
cb = args[1]; cb = args[1];
@ -61522,8 +61505,7 @@ function dir(options, callback) {
* @throws {Error} if it cannot create a directory * @throws {Error} if it cannot create a directory
*/ */
function dirSync(options) { function dirSync(options) {
const const args = _parseArguments(options),
args = _parseArguments(options),
opts = args[0]; opts = args[0];
const name = tmpNameSync(opts); const name = tmpNameSync(opts);
@ -61574,8 +61556,7 @@ function _removeFileSync(fdPath) {
} finally { } finally {
try { try {
fs.unlinkSync(fdPath[1]); fs.unlinkSync(fdPath[1]);
} } catch (e) {
catch (e) {
// reraise any unanticipated error // reraise any unanticipated error
if (!_isENOENT(e)) rethrownException = e; if (!_isENOENT(e)) rethrownException = e;
} }
@ -61647,7 +61628,6 @@ function _prepareRemoveCallback(removeFunction, fileOrDirName, sync, cleanupCall
// if sync is true, the next parameter will be ignored // if sync is true, the next parameter will be ignored
return function _cleanupCallback(next) { return function _cleanupCallback(next) {
/* istanbul ignore else */ /* istanbul ignore else */
if (!called) { if (!called) {
// remove cleanupCallback from cache // remove cleanupCallback from cache
@ -61660,7 +61640,7 @@ function _prepareRemoveCallback(removeFunction, fileOrDirName, sync, cleanupCall
if (sync || removeFunction === FN_RMDIR_SYNC || removeFunction === FN_RIMRAF_SYNC) { if (sync || removeFunction === FN_RMDIR_SYNC || removeFunction === FN_RIMRAF_SYNC) {
return removeFunction(fileOrDirName); return removeFunction(fileOrDirName);
} else { } else {
return removeFunction(fileOrDirName, next || function() {}); return removeFunction(fileOrDirName, next || function () {});
} }
} }
}; };
@ -61695,8 +61675,7 @@ function _garbageCollector() {
* @private * @private
*/ */
function _randomChars(howMany) { function _randomChars(howMany) {
let let value = [],
value = [],
rnd = null; rnd = null;
// make sure that we do not fail because we ran out of entropy // make sure that we do not fail because we ran out of entropy
@ -61706,24 +61685,13 @@ function _randomChars(howMany) {
rnd = crypto.pseudoRandomBytes(howMany); rnd = crypto.pseudoRandomBytes(howMany);
} }
for (var i = 0; i < howMany; i++) { for (let i = 0; i < howMany; i++) {
value.push(RANDOM_CHARS[rnd[i] % RANDOM_CHARS.length]); value.push(RANDOM_CHARS[rnd[i] % RANDOM_CHARS.length]);
} }
return value.join(''); return value.join('');
} }
/**
* Helper which determines whether a string s is blank, that is undefined, or empty or null.
*
* @private
* @param {string} s
* @returns {Boolean} true whether the string s is blank, false otherwise
*/
function _isBlank(s) {
return s === null || _isUndefined(s) || !s.trim();
}
/** /**
* Checks whether the `obj` parameter is defined or not. * Checks whether the `obj` parameter is defined or not.
* *
@ -61765,6 +61733,51 @@ function _parseArguments(options, callback) {
return [actualOptions, callback]; return [actualOptions, callback];
} }
/**
* Resolve the specified path name in respect to tmpDir.
*
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @private
*/
function _resolvePath(name, tmpDir, cb) {
const pathToResolve = path.isAbsolute(name) ? name : path.join(tmpDir, name);
fs.stat(pathToResolve, function (err) {
if (err) {
fs.realpath(path.dirname(pathToResolve), function (err, parentDir) {
if (err) return cb(err);
cb(null, path.join(parentDir, path.basename(pathToResolve)));
});
} else {
fs.realpath(path, cb);
}
});
}
/**
* Resolve the specified path name in respect to tmpDir.
*
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @private
*/
function _resolvePathSync(name, tmpDir) {
const pathToResolve = path.isAbsolute(name) ? name : path.join(tmpDir, name);
try {
fs.statSync(pathToResolve);
return fs.realpathSync(pathToResolve);
} catch (_err) {
const parentDir = fs.realpathSync(path.dirname(pathToResolve));
return path.join(parentDir, path.basename(pathToResolve));
}
}
/** /**
* Generates a new temporary name. * Generates a new temporary name.
* *
@ -61773,16 +61786,17 @@ function _parseArguments(options, callback) {
* @private * @private
*/ */
function _generateTmpName(opts) { function _generateTmpName(opts) {
const tmpDir = opts.tmpdir; const tmpDir = opts.tmpdir;
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(opts.name)) if (!_isUndefined(opts.name)) {
return path.join(tmpDir, opts.dir, opts.name); return path.join(tmpDir, opts.dir, opts.name);
}
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(opts.template)) if (!_isUndefined(opts.template)) {
return path.join(tmpDir, opts.dir, opts.template).replace(TEMPLATE_PATTERN, _randomChars(6)); return path.join(tmpDir, opts.dir, opts.template).replace(TEMPLATE_PATTERN, _randomChars(6));
}
// prefix and postfix // prefix and postfix
const name = [ const name = [
@ -61798,33 +61812,32 @@ function _generateTmpName(opts) {
} }
/** /**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing * Asserts and sanitizes the basic options.
* options.
* *
* @param {Options} options
* @private * @private
*/ */
function _assertAndSanitizeOptions(options) { function _assertOptionsBase(options) {
if (!_isUndefined(options.name)) {
const name = options.name;
options.tmpdir = _getTmpDir(options); // assert that name is not absolute and does not contain a path
if (path.isAbsolute(name)) throw new Error(`name option must not contain an absolute path, found "${name}".`);
const tmpDir = options.tmpdir; // must not fail on valid .<name> or ..<name> or similar such constructs
const basename = path.basename(name);
/* istanbul ignore else */ if (basename === '..' || basename === '.' || basename !== name)
if (!_isUndefined(options.name)) throw new Error(`name option must not contain a path, found "${name}".`);
_assertIsRelative(options.name, 'name', tmpDir);
/* istanbul ignore else */
if (!_isUndefined(options.dir))
_assertIsRelative(options.dir, 'dir', tmpDir);
/* istanbul ignore else */
if (!_isUndefined(options.template)) {
_assertIsRelative(options.template, 'template', tmpDir);
if (!options.template.match(TEMPLATE_PATTERN))
throw new Error(`Invalid template, found "${options.template}".`);
} }
/* istanbul ignore else */ /* istanbul ignore else */
if (!_isUndefined(options.tries) && isNaN(options.tries) || options.tries < 0) if (!_isUndefined(options.template) && !options.template.match(TEMPLATE_PATTERN)) {
throw new Error(`Invalid template, found "${options.template}".`);
}
/* istanbul ignore else */
if ((!_isUndefined(options.tries) && isNaN(options.tries)) || options.tries < 0) {
throw new Error(`Invalid tries, found "${options.tries}".`); throw new Error(`Invalid tries, found "${options.tries}".`);
}
// if a name was specified we will try once // if a name was specified we will try once
options.tries = _isUndefined(options.name) ? options.tries || DEFAULT_TRIES : 1; options.tries = _isUndefined(options.name) ? options.tries || DEFAULT_TRIES : 1;
@ -61833,65 +61846,103 @@ function _assertAndSanitizeOptions(options) {
options.discardDescriptor = !!options.discardDescriptor; options.discardDescriptor = !!options.discardDescriptor;
options.unsafeCleanup = !!options.unsafeCleanup; options.unsafeCleanup = !!options.unsafeCleanup;
// sanitize dir, also keep (multiple) blanks if the user, purportedly sane, requests us to
options.dir = _isUndefined(options.dir) ? '' : path.relative(tmpDir, _resolvePath(options.dir, tmpDir));
options.template = _isUndefined(options.template) ? undefined : path.relative(tmpDir, _resolvePath(options.template, tmpDir));
// sanitize further if template is relative to options.dir
options.template = _isBlank(options.template) ? undefined : path.relative(options.dir, options.template);
// for completeness' sake only, also keep (multiple) blanks if the user, purportedly sane, requests us to // for completeness' sake only, also keep (multiple) blanks if the user, purportedly sane, requests us to
options.name = _isUndefined(options.name) ? undefined : options.name;
options.prefix = _isUndefined(options.prefix) ? '' : options.prefix; options.prefix = _isUndefined(options.prefix) ? '' : options.prefix;
options.postfix = _isUndefined(options.postfix) ? '' : options.postfix; options.postfix = _isUndefined(options.postfix) ? '' : options.postfix;
} }
/** /**
* Resolve the specified path name in respect to tmpDir. * Gets the relative directory to tmpDir.
* *
* The specified name might include relative path components, e.g. ../
* so we need to resolve in order to be sure that is is located inside tmpDir
*
* @param name
* @param tmpDir
* @returns {string}
* @private * @private
*/ */
function _resolvePath(name, tmpDir) { function _getRelativePath(option, name, tmpDir, cb) {
if (name.startsWith(tmpDir)) { if (_isUndefined(name)) return cb(null);
return path.resolve(name);
} else { _resolvePath(name, tmpDir, function (err, resolvedPath) {
return path.resolve(path.join(tmpDir, name)); if (err) return cb(err);
}
const relativePath = path.relative(tmpDir, resolvedPath);
if (!resolvedPath.startsWith(tmpDir)) {
return cb(new Error(`${option} option must be relative to "${tmpDir}", found "${relativePath}".`));
}
cb(null, relativePath);
});
} }
/** /**
* Asserts whether specified name is relative to the specified tmpDir. * Gets the relative path to tmpDir.
* *
* @param {string} name
* @param {string} option
* @param {string} tmpDir
* @throws {Error}
* @private * @private
*/ */
function _assertIsRelative(name, option, tmpDir) { function _getRelativePathSync(option, name, tmpDir) {
if (option === 'name') { if (_isUndefined(name)) return;
// assert that name is not absolute and does not contain a path
if (path.isAbsolute(name)) const resolvedPath = _resolvePathSync(name, tmpDir);
throw new Error(`${option} option must not contain an absolute path, found "${name}".`); const relativePath = path.relative(tmpDir, resolvedPath);
// must not fail on valid .<name> or ..<name> or similar such constructs
let basename = path.basename(name); if (!resolvedPath.startsWith(tmpDir)) {
if (basename === '..' || basename === '.' || basename !== name) throw new Error(`${option} option must be relative to "${tmpDir}", found "${relativePath}".`);
throw new Error(`${option} option must not contain a path, found "${name}".`);
} }
else { // if (option === 'dir' || option === 'template') {
// assert that dir or template are relative to tmpDir return relativePath;
if (path.isAbsolute(name) && !name.startsWith(tmpDir)) { }
throw new Error(`${option} option must be relative to "${tmpDir}", found "${name}".`);
/**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing
* options.
*
* @private
*/
function _assertAndSanitizeOptions(options, cb) {
_getTmpDir(options, function (err, tmpDir) {
if (err) return cb(err);
options.tmpdir = tmpDir;
try {
_assertOptionsBase(options, tmpDir);
} catch (err) {
return cb(err);
} }
let resolvedPath = _resolvePath(name, tmpDir);
if (!resolvedPath.startsWith(tmpDir)) // sanitize dir, also keep (multiple) blanks if the user, purportedly sane, requests us to
throw new Error(`${option} option must be relative to "${tmpDir}", found "${resolvedPath}".`); _getRelativePath('dir', options.dir, tmpDir, function (err, dir) {
} if (err) return cb(err);
options.dir = _isUndefined(dir) ? '' : dir;
// sanitize further if template is relative to options.dir
_getRelativePath('template', options.template, tmpDir, function (err, template) {
if (err) return cb(err);
options.template = template;
cb(null, options);
});
});
});
}
/**
* Asserts whether the specified options are valid, also sanitizes options and provides sane defaults for missing
* options.
*
* @private
*/
function _assertAndSanitizeOptionsSync(options) {
const tmpDir = (options.tmpdir = _getTmpDirSync(options));
_assertOptionsBase(options, tmpDir);
const dir = _getRelativePathSync('dir', options.dir, tmpDir);
options.dir = _isUndefined(dir) ? '' : dir;
options.template = _getRelativePathSync('template', options.template, tmpDir);
return options;
} }
/** /**
@ -61949,11 +62000,18 @@ function setGracefulCleanup() {
* Returns the currently configured tmp dir from os.tmpdir(). * Returns the currently configured tmp dir from os.tmpdir().
* *
* @private * @private
* @param {?Options} options
* @returns {string} the currently configured tmp dir
*/ */
function _getTmpDir(options) { function _getTmpDir(options, cb) {
return path.resolve(options && options.tmpdir || os.tmpdir()); return fs.realpath((options && options.tmpdir) || os.tmpdir(), cb);
}
/**
* Returns the currently configured tmp dir from os.tmpdir().
*
* @private
*/
function _getTmpDirSync(options) {
return fs.realpathSync((options && options.tmpdir) || os.tmpdir());
} }
// Install process exit listener // Install process exit listener
@ -62054,7 +62112,7 @@ Object.defineProperty(module.exports, "tmpdir", ({
enumerable: true, enumerable: true,
configurable: false, configurable: false,
get: function () { get: function () {
return _getTmpDir(); return _getTmpDirSync();
} }
})); }));

9
package-lock.json generated
View file

@ -20,7 +20,7 @@
"@types/semver": "^7.7.0", "@types/semver": "^7.7.0",
"@types/tmp": "^0.2.6", "@types/tmp": "^0.2.6",
"@types/which": "^3.0.4", "@types/which": "^3.0.4",
"tmp": "^0.2.3", "tmp": "^0.2.4",
"which": "^5.0.0" "which": "^5.0.0"
}, },
"devDependencies": { "devDependencies": {
@ -4024,9 +4024,10 @@
"dev": true "dev": true
}, },
"node_modules/tmp": { "node_modules/tmp": {
"version": "0.2.3", "version": "0.2.4",
"resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz", "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.4.tgz",
"integrity": "sha512-nZD7m9iCPC5g0pYmcaxogYKggSfLsdxl8of3Q/oIbqCqLLIO9IAF0GWjX1z9NZRHPiXv8Wex4yDCaZsgEw0Y8w==", "integrity": "sha512-UdiSoX6ypifLmrfQ/XfiawN6hkjSBpCjhKxxZcWlUUmoXLaCKQU0bx4HF/tdDK2uzRuchf1txGvrWBzYREssoQ==",
"license": "MIT",
"engines": { "engines": {
"node": ">=14.14" "node": ">=14.14"
} }

2
package.json
View file

@ -35,7 +35,7 @@
"@types/semver": "^7.7.0", "@types/semver": "^7.7.0",
"@types/tmp": "^0.2.6", "@types/tmp": "^0.2.6",
"@types/which": "^3.0.4", "@types/which": "^3.0.4",
"tmp": "^0.2.3", "tmp": "^0.2.4",
"which": "^5.0.0" "which": "^5.0.0"
}, },
"devDependencies": { "devDependencies": {