github.com/palisadeinc/bor@v0.0.0-20230615125219-ab7196213d15/common/path.go (about)

     1  // Copyright 2014 The go-ethereum Authors
     2  // This file is part of the go-ethereum library.
     3  //
     4  // The go-ethereum library is free software: you can redistribute it and/or modify
     5  // it under the terms of the GNU Lesser General Public License as published by
     6  // the Free Software Foundation, either version 3 of the License, or
     7  // (at your option) any later version.
     8  //
     9  // The go-ethereum library is distributed in the hope that it will be useful,
    10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    12  // GNU Lesser General Public License for more details.
    13  //
    14  // You should have received a copy of the GNU Lesser General Public License
    15  // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
    16  
    17  package common
    18  
    19  import (
    20  	"fmt"
    21  	"os"
    22  	"path/filepath"
    23  	"runtime"
    24  )
    25  
    26  // MakeName creates a node name that follows the ethereum convention
    27  // for such names. It adds the operation system name and Go runtime version
    28  // the name.
    29  func MakeName(name, version string) string {
    30  	return fmt.Sprintf("%s/v%s/%s/%s", name, version, runtime.GOOS, runtime.Version())
    31  }
    32  
    33  // FileExist checks if a file exists at filePath.
    34  func FileExist(filePath string) bool {
    35  	_, err := os.Stat(filePath)
    36  	if err != nil && os.IsNotExist(err) {
    37  		return false
    38  	}
    39  
    40  	return true
    41  }
    42  
    43  // AbsolutePath returns datadir + filename, or filename if it is absolute.
    44  func AbsolutePath(datadir string, filename string) string {
    45  	if filepath.IsAbs(filename) {
    46  		return filename
    47  	}
    48  	return filepath.Join(datadir, filename)
    49  }
    50  
    51  // VerifyPath sanitizes the path to avoid Path Traversal vulnerability
    52  func VerifyPath(path string) (string, error) {
    53  	c := filepath.Clean(path)
    54  
    55  	r, err := filepath.EvalSymlinks(c)
    56  	if err != nil {
    57  		return c, fmt.Errorf("unsafe or invalid path specified: %s", path)
    58  	} else {
    59  		return r, nil
    60  	}
    61  }
    62  
    63  // VerifyCrasher sanitizes the path to avoid Path Traversal vulnerability and reads the file from that path, returning its content
    64  func VerifyCrasher(crasher string) []byte {
    65  	canonicalPath, err := VerifyPath(crasher)
    66  	if err != nil {
    67  		fmt.Println("path not verified: " + err.Error())
    68  		return nil
    69  	}
    70  
    71  	data, err := os.ReadFile(canonicalPath)
    72  	if err != nil {
    73  		fmt.Fprintf(os.Stderr, "error loading crasher %v: %v", canonicalPath, err)
    74  		os.Exit(1)
    75  	}
    76  
    77  	return data
    78  }