From: Zibran Khan <kali834x@gmail.com>
Date: Wed, 12 Aug 2026 21:33:43 +0000 (+0530)
Subject: core: don't skip entries in _ostree_validate_structureof_xattrs
X-Git-Tag: archive/raspbian/2026.4-1+rpi1^2~9^2^2~3^2
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=7da79688c91981973a7fa235727ceb0313014cb6;p=ostree.git

core: don't skip entries in _ostree_validate_structureof_xattrs

the for loop already advances the index, but the body incremented it a
second time, so only even-indexed xattrs were examined and the empty-name,
duplicate-name and sort-order checks skipped half the array. a crafted
dirmeta from a remote could hide an unsorted or duplicate xattr in an odd
slot and still pass ostree_validate_structureof_dirmeta.
---

diff --git a/src/libostree/ostree-core.c b/src/libostree/ostree-core.c
index 12d11421..468b961d 100644
--- a/src/libostree/ostree-core.c
+++ b/src/libostree/ostree-core.c
@@ -2351,7 +2351,6 @@ _ostree_validate_structureof_xattrs (GVariant *xattrs, GError **error)
                                previous, name, i);
         }
       previous = name;
-      i++;
     }
   return TRUE;
 }
diff --git a/tests/test-basic-c.c b/tests/test-basic-c.c
index 555c5802..81397f67 100644
--- a/tests/test-basic-c.c
+++ b/tests/test-basic-c.c
@@ -593,6 +593,19 @@ test_dirmeta_xattrs (void)
                                                 g_variant_builder_end (xattr_builder));
   g_assert (!ostree_validate_structureof_dirmeta (dirmeta, error));
   g_assert_error (local_error, G_IO_ERROR, G_IO_ERROR_FAILED);
+  g_clear_error (&local_error);
+
+  /* Every entry must be checked, including those at odd indices; a duplicate
+   * name in the second slot must still be rejected. */
+  g_autoptr (GVariantBuilder) dup_builder = g_variant_builder_new (G_VARIANT_TYPE ("a(ayay)"));
+  g_variant_builder_add (dup_builder, "(@ay@ay)", g_variant_new_bytestring ("user.a"),
+                         g_variant_new_bytestring (data));
+  g_variant_builder_add (dup_builder, "(@ay@ay)", g_variant_new_bytestring ("user.a"),
+                         g_variant_new_bytestring (data));
+  g_autoptr (GVariant) dup_dirmeta = g_variant_new ("(uuu@a(ayay))", uidgid, uidgid, mode,
+                                                    g_variant_builder_end (dup_builder));
+  g_assert (!ostree_validate_structureof_dirmeta (dup_dirmeta, error));
+  g_assert_error (local_error, G_IO_ERROR, G_IO_ERROR_FAILED);
 }
 
 int