|  | @@ -71,33 +71,18 @@ def pack(o, stream, *, use_bin_type=False, unicode_errors=None, **kwargs):
 | 
	
		
			
				|  |  |          raise PackException(e)
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  | -# Note: after requiring msgpack >= 0.6.1 we can remove the max_*_len args and
 | 
	
		
			
				|  |  | -#       rely on msgpack auto-computing DoS-safe max values from len(data) for
 | 
	
		
			
				|  |  | -#       unpack(data) or from max_buffer_len for Unpacker(max_buffer_len=N).
 | 
	
		
			
				|  |  | -#       maybe we can also use that to simplify get_limited_unpacker().
 | 
	
		
			
				|  |  | -
 | 
	
		
			
				|  |  |  class Unpacker(mp_Unpacker):
 | 
	
		
			
				|  |  |      def __init__(self, file_like=None, *, read_size=0, use_list=True, raw=True,
 | 
	
		
			
				|  |  |                   object_hook=None, object_pairs_hook=None, list_hook=None,
 | 
	
		
			
				|  |  |                   unicode_errors=None, max_buffer_size=0,
 | 
	
		
			
				|  |  |                   ext_hook=ExtType,
 | 
	
		
			
				|  |  | -                 strict_map_key=False,
 | 
	
		
			
				|  |  | -                 max_str_len=2147483647,  # 2**32-1
 | 
	
		
			
				|  |  | -                 max_bin_len=2147483647,
 | 
	
		
			
				|  |  | -                 max_array_len=2147483647,
 | 
	
		
			
				|  |  | -                 max_map_len=2147483647,
 | 
	
		
			
				|  |  | -                 max_ext_len=2147483647):
 | 
	
		
			
				|  |  | +                 strict_map_key=False):
 | 
	
		
			
				|  |  |          assert raw is True
 | 
	
		
			
				|  |  |          assert unicode_errors is None
 | 
	
		
			
				|  |  |          kw = dict(file_like=file_like, read_size=read_size, use_list=use_list, raw=raw,
 | 
	
		
			
				|  |  |                    object_hook=object_hook, object_pairs_hook=object_pairs_hook, list_hook=list_hook,
 | 
	
		
			
				|  |  |                    unicode_errors=unicode_errors, max_buffer_size=max_buffer_size,
 | 
	
		
			
				|  |  |                    ext_hook=ext_hook,
 | 
	
		
			
				|  |  | -                  max_str_len=max_str_len,
 | 
	
		
			
				|  |  | -                  max_bin_len=max_bin_len,
 | 
	
		
			
				|  |  | -                  max_array_len=max_array_len,
 | 
	
		
			
				|  |  | -                  max_map_len=max_map_len,
 | 
	
		
			
				|  |  | -                  max_ext_len=max_ext_len,
 | 
	
		
			
				|  |  |                    strict_map_key=strict_map_key)
 | 
	
		
			
				|  |  |          super().__init__(**kw)
 | 
	
		
			
				|  |  |  
 | 
	
	
		
			
				|  | @@ -122,20 +107,10 @@ class Unpacker(mp_Unpacker):
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  def unpackb(packed, *, raw=True, unicode_errors=None,
 | 
	
		
			
				|  |  |              strict_map_key=False,
 | 
	
		
			
				|  |  | -            max_str_len=2147483647,  # 2**32-1
 | 
	
		
			
				|  |  | -            max_bin_len=2147483647,
 | 
	
		
			
				|  |  | -            max_array_len=2147483647,
 | 
	
		
			
				|  |  | -            max_map_len=2147483647,
 | 
	
		
			
				|  |  | -            max_ext_len=2147483647,
 | 
	
		
			
				|  |  |              **kwargs):
 | 
	
		
			
				|  |  |      assert unicode_errors is None
 | 
	
		
			
				|  |  |      try:
 | 
	
		
			
				|  |  |          kw = dict(raw=raw, unicode_errors=unicode_errors,
 | 
	
		
			
				|  |  | -                  max_str_len=max_str_len,
 | 
	
		
			
				|  |  | -                  max_bin_len=max_bin_len,
 | 
	
		
			
				|  |  | -                  max_array_len=max_array_len,
 | 
	
		
			
				|  |  | -                  max_map_len=max_map_len,
 | 
	
		
			
				|  |  | -                  max_ext_len=max_ext_len,
 | 
	
		
			
				|  |  |                    strict_map_key=strict_map_key)
 | 
	
		
			
				|  |  |          kw.update(kwargs)
 | 
	
		
			
				|  |  |          return mp_unpackb(packed, **kw)
 | 
	
	
		
			
				|  | @@ -145,20 +120,10 @@ def unpackb(packed, *, raw=True, unicode_errors=None,
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  def unpack(stream, *, raw=True, unicode_errors=None,
 | 
	
		
			
				|  |  |             strict_map_key=False,
 | 
	
		
			
				|  |  | -           max_str_len=2147483647,  # 2**32-1
 | 
	
		
			
				|  |  | -           max_bin_len=2147483647,
 | 
	
		
			
				|  |  | -           max_array_len=2147483647,
 | 
	
		
			
				|  |  | -           max_map_len=2147483647,
 | 
	
		
			
				|  |  | -           max_ext_len=2147483647,
 | 
	
		
			
				|  |  |             **kwargs):
 | 
	
		
			
				|  |  |      assert unicode_errors is None
 | 
	
		
			
				|  |  |      try:
 | 
	
		
			
				|  |  |          kw = dict(raw=raw, unicode_errors=unicode_errors,
 | 
	
		
			
				|  |  | -                  max_str_len=max_str_len,
 | 
	
		
			
				|  |  | -                  max_bin_len=max_bin_len,
 | 
	
		
			
				|  |  | -                  max_array_len=max_array_len,
 | 
	
		
			
				|  |  | -                  max_map_len=max_map_len,
 | 
	
		
			
				|  |  | -                  max_ext_len=max_ext_len,
 | 
	
		
			
				|  |  |                    strict_map_key=strict_map_key)
 | 
	
		
			
				|  |  |          kw.update(kwargs)
 | 
	
		
			
				|  |  |          return mp_unpack(stream, **kw)
 | 
	
	
		
			
				|  | @@ -183,32 +148,15 @@ def is_supported_msgpack():
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  def get_limited_unpacker(kind):
 | 
	
		
			
				|  |  |      """return a limited Unpacker because we should not trust msgpack data received from remote"""
 | 
	
		
			
				|  |  | +    # Note: msgpack >= 0.6.1 auto-computes DoS-safe max values from len(data) for
 | 
	
		
			
				|  |  | +    #       unpack(data) or from max_buffer_size for Unpacker(max_buffer_size=N).
 | 
	
		
			
				|  |  |      args = dict(use_list=False,  # return tuples, not lists
 | 
	
		
			
				|  |  | -                max_bin_len=0,  # not used
 | 
	
		
			
				|  |  | -                max_ext_len=0,  # not used
 | 
	
		
			
				|  |  |                  max_buffer_size=3 * max(BUFSIZE, MAX_OBJECT_SIZE),
 | 
	
		
			
				|  |  | -                max_str_len=MAX_OBJECT_SIZE,  # a chunk or other repo object
 | 
	
		
			
				|  |  |                  )
 | 
	
		
			
				|  |  | -    if kind == 'server':
 | 
	
		
			
				|  |  | -        args.update(dict(max_array_len=100,  # misc. cmd tuples
 | 
	
		
			
				|  |  | -                         max_map_len=100,  # misc. cmd dicts
 | 
	
		
			
				|  |  | -                         ))
 | 
	
		
			
				|  |  | -    elif kind == 'client':
 | 
	
		
			
				|  |  | -        args.update(dict(max_array_len=LIST_SCAN_LIMIT,  # result list from repo.list() / .scan()
 | 
	
		
			
				|  |  | -                         max_map_len=100,  # misc. result dicts
 | 
	
		
			
				|  |  | -                         ))
 | 
	
		
			
				|  |  | -    elif kind == 'manifest':
 | 
	
		
			
				|  |  | -        args.update(dict(use_list=True,  # default value
 | 
	
		
			
				|  |  | -                         max_array_len=100,  # ITEM_KEYS ~= 22
 | 
	
		
			
				|  |  | -                         max_map_len=MAX_ARCHIVES,  # list of archives
 | 
	
		
			
				|  |  | -                         max_str_len=255,  # archive name
 | 
	
		
			
				|  |  | -                         object_hook=StableDict,
 | 
	
		
			
				|  |  | -                         ))
 | 
	
		
			
				|  |  | -    elif kind == 'key':
 | 
	
		
			
				|  |  | +    if kind in ('server', 'client'):
 | 
	
		
			
				|  |  | +        pass  # nothing special
 | 
	
		
			
				|  |  | +    elif kind in ('manifest', 'key'):
 | 
	
		
			
				|  |  |          args.update(dict(use_list=True,  # default value
 | 
	
		
			
				|  |  | -                         max_array_len=0,  # not used
 | 
	
		
			
				|  |  | -                         max_map_len=10,  # EncryptedKey dict
 | 
	
		
			
				|  |  | -                         max_str_len=4000,  # inner key data
 | 
	
		
			
				|  |  |                           object_hook=StableDict,
 | 
	
		
			
				|  |  |                           ))
 | 
	
		
			
				|  |  |      else:
 |