mirror of
				https://gitee.com/gitea/gitea
				synced 2025-11-04 08:30:25 +08:00 
			
		
		
		
	Close #14601 Fix #3690 Revive of #14601. Updated to current code, cleanup and added more read/write checks. Signed-off-by: Andrew Thornton <art27@cantab.net> Signed-off-by: Andre Bruch <ab@andrebruch.com> Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: Norwin <git@nroo.de> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
		
			
				
	
	
		
			53 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			53 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
// Copyright 2021 The Gitea Authors. All rights reserved.
 | 
						|
// SPDX-License-Identifier: MIT
 | 
						|
 | 
						|
package attachment
 | 
						|
 | 
						|
import (
 | 
						|
	"bytes"
 | 
						|
	"context"
 | 
						|
	"fmt"
 | 
						|
	"io"
 | 
						|
 | 
						|
	"code.gitea.io/gitea/models/db"
 | 
						|
	repo_model "code.gitea.io/gitea/models/repo"
 | 
						|
	"code.gitea.io/gitea/modules/storage"
 | 
						|
	"code.gitea.io/gitea/modules/upload"
 | 
						|
	"code.gitea.io/gitea/modules/util"
 | 
						|
 | 
						|
	"github.com/google/uuid"
 | 
						|
)
 | 
						|
 | 
						|
// NewAttachment creates a new attachment object, but do not verify.
 | 
						|
func NewAttachment(attach *repo_model.Attachment, file io.Reader) (*repo_model.Attachment, error) {
 | 
						|
	if attach.RepoID == 0 {
 | 
						|
		return nil, fmt.Errorf("attachment %s should belong to a repository", attach.Name)
 | 
						|
	}
 | 
						|
 | 
						|
	err := db.WithTx(db.DefaultContext, func(ctx context.Context) error {
 | 
						|
		attach.UUID = uuid.New().String()
 | 
						|
		size, err := storage.Attachments.Save(attach.RelativePath(), file, -1)
 | 
						|
		if err != nil {
 | 
						|
			return fmt.Errorf("Create: %w", err)
 | 
						|
		}
 | 
						|
		attach.Size = size
 | 
						|
 | 
						|
		return db.Insert(ctx, attach)
 | 
						|
	})
 | 
						|
 | 
						|
	return attach, err
 | 
						|
}
 | 
						|
 | 
						|
// UploadAttachment upload new attachment into storage and update database
 | 
						|
func UploadAttachment(file io.Reader, allowedTypes string, opts *repo_model.Attachment) (*repo_model.Attachment, error) {
 | 
						|
	buf := make([]byte, 1024)
 | 
						|
	n, _ := util.ReadAtMost(file, buf)
 | 
						|
	buf = buf[:n]
 | 
						|
 | 
						|
	if err := upload.Verify(buf, opts.Name, allowedTypes); err != nil {
 | 
						|
		return nil, err
 | 
						|
	}
 | 
						|
 | 
						|
	return NewAttachment(opts, io.MultiReader(bytes.NewReader(buf), file))
 | 
						|
}
 |