Macintosh-HW/RASCSI
1
0
Fork 0
mirror of https://github.com/akuker/RASCSI.git synced 2024-12-25 03:32:16 +00:00
Code Issues Projects Releases Wiki Activity

Add client side image size validation (#322)

Browse Source
This commit is contained in:
Daniel Markstedt 2021-10-13 18:00:41 -07:00 committed by GitHub
parent e34529fa2c
commit e58f96318a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/web/web.py
View File

@ -336,8 +336,15 @@ def attach():
kwargs = {"unit": int(un), "image": file_name} kwargs = {"unit": int(un), "image": file_name}
# The most common block size is 512 bytes
expected_block_size = 512
if device_type != "": if device_type != "":
kwargs["device_type"] = device_type kwargs["device_type"] = device_type
if device_type == "SCCD":
expected_block_size = 2048
elif device_type == "SAHD":
expected_block_size = 256
# Attempt to load the device properties file: # Attempt to load the device properties file:
# same base path but PROPERTIES_SUFFIX instead of the original suffix. # same base path but PROPERTIES_SUFFIX instead of the original suffix.
@ -356,10 +363,15 @@ def attach():
kwargs["product"] = conf["product"] kwargs["product"] = conf["product"]
kwargs["revision"] = conf["revision"] kwargs["revision"] = conf["revision"]
kwargs["block_size"] = conf["block_size"] kwargs["block_size"] = conf["block_size"]
expected_block_size = conf["block_size"]
process = attach_image(scsi_id, **kwargs) process = attach_image(scsi_id, **kwargs)
if process["status"] == True: if process["status"] == True:
flash(f"Attached {file_name} to SCSI ID {scsi_id} LUN {un}!") flash(f"Attached {file_name} to SCSI ID {scsi_id} LUN {un}!")
if int(file_size) % int(expected_block_size):
flash(f"The image file size {file_size} bytes is not a multiple of \
{expected_block_size}. The image may be corrupted \
so proceed with caution.", "error")
return redirect(url_for("index")) return redirect(url_for("index"))
else: else:
flash(f"Failed to attach {file_name} to SCSI ID {scsi_id} LUN {un}!", "error") flash(f"Failed to attach {file_name} to SCSI ID {scsi_id} LUN {un}!", "error")