lib/commit: always validate metadata
authorLuca BRUNO <luca.bruno@coreos.com>
Wed, 19 Jan 2022 13:44:10 +0000 (13:44 +0000)
committerLuca BRUNO <luca.bruno@coreos.com>
Wed, 19 Jan 2022 14:10:24 +0000 (14:10 +0000)
This tweaks commit logic in order to always validate metadata,
including on commits where the expected checksum is already known.

src/libostree/ostree-repo-commit.c

index e2c86d960d5ce7bd186e77c5b3e2a938f38eeec2..a5aa63b05263866acd68ecf3cbfd8e672a89ef11 100644 (file)
@@ -2478,12 +2478,8 @@ ostree_repo_write_metadata (OstreeRepo         *self,
       normalized = g_variant_get_normal_form (object);
     }
 
-  /* For untrusted objects, verify their structure here */
-  if (expected_checksum)
-    {
-      if (!_ostree_validate_structureof_metadata (objtype, object, error))
-        return FALSE;
-    }
+  if (!_ostree_validate_structureof_metadata (objtype, object, error))
+    return FALSE;
 
   g_autoptr(GBytes) vdata = g_variant_get_data_as_bytes (normalized);
   if (!write_metadata_object (self, objtype, expected_checksum,