diff --git a/setup.py b/setup.py index 98a844269..370e0801f 100644 --- a/setup.py +++ b/setup.py @@ -66,7 +66,7 @@ install_requires = [ # we are rather picky about msgpack versions, because a good working msgpack is # very important for borg, see: https://github.com/borgbackup/borg/issues/3753 - 'msgpack >=0.5.6, <=1.0.3, !=1.0.1', + 'msgpack >=1.0.3, <=1.0.3', # Please note: # using any other version is not supported by borg development and # any feedback related to issues caused by this will be ignored. diff --git a/src/borg/helpers/msgpack.py b/src/borg/helpers/msgpack.py index 3e2e00a63..2ace88fee 100644 --- a/src/borg/helpers/msgpack.py +++ b/src/borg/helpers/msgpack.py @@ -30,8 +30,6 @@ version = mp_version -_post_100 = version >= (1, 0, 0) - class PackException(Exception): """Exception while msgpack packing""" @@ -73,35 +71,19 @@ def pack(o, stream, *, use_bin_type=False, unicode_errors=None, **kwargs): raise PackException(e) -# Note: after requiring msgpack >= 0.6.1 we can remove the max_*_len args and -# rely on msgpack auto-computing DoS-safe max values from len(data) for -# unpack(data) or from max_buffer_len for Unpacker(max_buffer_len=N). -# maybe we can also use that to simplify get_limited_unpacker(). - class Unpacker(mp_Unpacker): def __init__(self, file_like=None, *, read_size=0, use_list=True, raw=True, object_hook=None, object_pairs_hook=None, list_hook=None, unicode_errors=None, max_buffer_size=0, ext_hook=ExtType, - strict_map_key=False, - max_str_len=2147483647, # 2**32-1 - max_bin_len=2147483647, - max_array_len=2147483647, - max_map_len=2147483647, - max_ext_len=2147483647): + strict_map_key=False): assert raw is True assert unicode_errors is None kw = dict(file_like=file_like, read_size=read_size, use_list=use_list, raw=raw, object_hook=object_hook, object_pairs_hook=object_pairs_hook, list_hook=list_hook, unicode_errors=unicode_errors, max_buffer_size=max_buffer_size, ext_hook=ext_hook, - max_str_len=max_str_len, - max_bin_len=max_bin_len, - max_array_len=max_array_len, - max_map_len=max_map_len, - max_ext_len=max_ext_len) - if _post_100: - kw['strict_map_key'] = strict_map_key + strict_map_key=strict_map_key) super().__init__(**kw) def unpack(self): @@ -125,23 +107,12 @@ def __next__(self): def unpackb(packed, *, raw=True, unicode_errors=None, strict_map_key=False, - max_str_len=2147483647, # 2**32-1 - max_bin_len=2147483647, - max_array_len=2147483647, - max_map_len=2147483647, - max_ext_len=2147483647, **kwargs): assert unicode_errors is None try: kw = dict(raw=raw, unicode_errors=unicode_errors, - max_str_len=max_str_len, - max_bin_len=max_bin_len, - max_array_len=max_array_len, - max_map_len=max_map_len, - max_ext_len=max_ext_len) + strict_map_key=strict_map_key) kw.update(kwargs) - if _post_100: - kw['strict_map_key'] = strict_map_key return mp_unpackb(packed, **kw) except Exception as e: raise UnpackException(e) @@ -149,23 +120,12 @@ def unpackb(packed, *, raw=True, unicode_errors=None, def unpack(stream, *, raw=True, unicode_errors=None, strict_map_key=False, - max_str_len=2147483647, # 2**32-1 - max_bin_len=2147483647, - max_array_len=2147483647, - max_map_len=2147483647, - max_ext_len=2147483647, **kwargs): assert unicode_errors is None try: kw = dict(raw=raw, unicode_errors=unicode_errors, - max_str_len=max_str_len, - max_bin_len=max_bin_len, - max_array_len=max_array_len, - max_map_len=max_map_len, - max_ext_len=max_ext_len) + strict_map_key=strict_map_key) kw.update(kwargs) - if _post_100: - kw['strict_map_key'] = strict_map_key return mp_unpack(stream, **kw) except Exception as e: raise UnpackException(e) @@ -182,38 +142,21 @@ def is_slow_msgpack(): def is_supported_msgpack(): # DO NOT CHANGE OR REMOVE! See also requirements and comments in setup.py. import msgpack - return (0, 5, 6) <= msgpack.version <= (1, 0, 3) and \ - msgpack.version not in [(1, 0, 1), ] # < add bad releases here to deny list + return (1, 0, 3) <= msgpack.version <= (1, 0, 3) and \ + msgpack.version not in [] # < add bad releases here to deny list def get_limited_unpacker(kind): """return a limited Unpacker because we should not trust msgpack data received from remote""" + # Note: msgpack >= 0.6.1 auto-computes DoS-safe max values from len(data) for + # unpack(data) or from max_buffer_size for Unpacker(max_buffer_size=N). args = dict(use_list=False, # return tuples, not lists - max_bin_len=0, # not used - max_ext_len=0, # not used max_buffer_size=3 * max(BUFSIZE, MAX_OBJECT_SIZE), - max_str_len=MAX_OBJECT_SIZE, # a chunk or other repo object ) - if kind == 'server': - args.update(dict(max_array_len=100, # misc. cmd tuples - max_map_len=100, # misc. cmd dicts - )) - elif kind == 'client': - args.update(dict(max_array_len=LIST_SCAN_LIMIT, # result list from repo.list() / .scan() - max_map_len=100, # misc. result dicts - )) - elif kind == 'manifest': + if kind in ('server', 'client'): + pass # nothing special + elif kind in ('manifest', 'key'): args.update(dict(use_list=True, # default value - max_array_len=100, # ITEM_KEYS ~= 22 - max_map_len=MAX_ARCHIVES, # list of archives - max_str_len=255, # archive name - object_hook=StableDict, - )) - elif kind == 'key': - args.update(dict(use_list=True, # default value - max_array_len=0, # not used - max_map_len=10, # EncryptedKey dict - max_str_len=4000, # inner key data object_hook=StableDict, )) else: