always use absolute path in LocalStorage

go-gitea · Mar 16, 2023 · cb9c518 · cb9c518
1 parent 32dfaa7
commit cb9c518
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 11 deletions.
diff --git a/modules/storage/local.go b/modules/storage/local.go
@@ -5,6 +5,7 @@ package storage
 
 import (
 	"context"
+	"fmt"
 	"io"
 	"net/url"
 	"os"
@@ -40,13 +41,19 @@ func NewLocalStorage(ctx context.Context, cfg interface{}) (ObjectStorage, error
 	}
 	config := configInterface.(LocalStorageConfig)
 
+	if !filepath.IsAbs(config.Path) {
+		return nil, fmt.Errorf("LocalStorageConfig.Path should have been prepared by setting/storage.go and should be an absolute path, but not: %q", config.Path)
+	}
 	log.Info("Creating new Local Storage at %s", config.Path)
 	if err := os.MkdirAll(config.Path, os.ModePerm); err != nil {
 		return nil, err
 	}
 
 	if config.TemporaryPath == "" {
-		config.TemporaryPath = config.Path + "/tmp"
+		config.TemporaryPath = filepath.Join(config.Path, "tmp")
+	}
+	if !filepath.IsAbs(config.TemporaryPath) {
+		return nil, fmt.Errorf("LocalStorageConfig.TemporaryPath should be an absolute path, but not: %q", config.TemporaryPath)
 	}
 
 	return &LocalStorage{

diff --git a/modules/storage/local_test.go b/modules/storage/local_test.go
@@ -20,29 +20,29 @@ func TestBuildLocalPath(t *testing.T) {
 		expected string
 	}{
 		{
-			"a",
+			"/a",
 			"0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
-			"a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
+			"/a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
 		},
 		{
-			"a",
+			"/a",
 			"../0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
-			"a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
+			"/a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
 		},
 		{
-			"a",
+			"/a",
 			"0\\a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
-			"a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
+			"/a/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
 		},
 		{
-			"b",
+			"/b",
 			"a/../0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
-			"b/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
+			"/b/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
 		},
 		{
-			"b",
+			"/b",
 			"a\\..\\0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
-			"b/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
+			"/b/0/a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a14",
 		},
 	}