Merge pull request #6823 from mattfarina/2sa

Fix error when loading irregular files

pkg/chartutil/load.go

@@ -355,6 +355,13 @@ func LoadDir(dir string) (*chart.Chart, error) {
 			return nil
 		}
 
+		// Irregular files include devices, sockets, and other uses of files that
+		// are not regular files. In Go they have a file mode type bit set.
+		// See https://golang.org/pkg/os/#FileMode for examples.
+		if !fi.Mode().IsRegular() {
+			return fmt.Errorf("cannot load irregular file %s as it has file mode type bits set", name)
+		}
+
 		data, err := ioutil.ReadFile(name)
 		if err != nil {
 			return fmt.Errorf("error reading %s: %s", n, err)

pkg/chartutil/load_test.go

@@ -23,6 +23,7 @@ import (
 	"os"
 	"path"
 	"path/filepath"
+	"runtime"
 	"strings"
 	"testing"
 	"time"
@@ -51,6 +52,40 @@ func TestLoadNonV1Chart(t *testing.T) {
 	t.Fatalf("chart with v2 apiVersion should not load")
 }
 
+func TestLoadDirWithSymlinks(t *testing.T) {
+	sym := filepath.Join("..", "frobnitz", "README.md")
+	link := filepath.Join("testdata", "frobnitz_symlinks", "README.md")
+
+	if err := os.Symlink(sym, link); err != nil {
+		t.Fatal(err)
+	}
+
+	defer os.Remove(link)
+
+	c, err := Load("testdata/frobnitz_symlinks")
+	if err != nil {
+		t.Fatalf("Failed to load testdata: %s", err)
+	}
+	verifyFrobnitz(t, c)
+	verifyChart(t, c)
+	verifyRequirements(t, c)
+}
+
+func TestLoadDirWithBadSymlinks(t *testing.T) {
+	if runtime.GOOS == "windows" {
+		t.Skip("test only works on unix systems with /dev/null present")
+	}
+
+	_, err := Load("testdata/bad_symlink")
+	if err == nil {
+		t.Fatal("Failed to detect bad symlink")
+	}
+
+	if !strings.HasPrefix(err.Error(), "cannot load irregular file") {
+		t.Errorf("Expected bad symlink error got %q", err)
+	}
+}
+
 func TestLoadFile(t *testing.T) {
 	c, err := Load("testdata/frobnitz-1.2.3.tgz")
 	if err != nil {

pkg/chartutil/testdata/bad_symlink/Chart.yaml

+apiVersion: v1
+name: badsymlink
+description: A bad symlink is in here
+version: "1.0.0"

pkg/chartutil/testdata/bad_symlink/LICENSE

+LICENSE placeholder.

pkg/chartutil/testdata/bad_symlink/README.md

+# Frobnitz
+
+This is an example chart.
+
+## Usage
+
+This is an example. It has no usage.
+
+## Development
+
+For developer info, see the top-level repository.

pkg/chartutil/testdata/bad_symlink/dnull

+/dev/null
\ No newline at end of file

pkg/chartutil/testdata/bad_symlink/templates/template.tpl

+Hello {{.Name | default "world"}}

pkg/chartutil/testdata/bad_symlink/values.yaml

+# A values file contains configuration.
+
+name: "Some Name"
+
+section:
+  name: "Name in a section"

pkg/chartutil/testdata/frobnitz_symlinks/.helmignore

+ignore/

pkg/chartutil/testdata/frobnitz_symlinks/Chart.yaml

+apiVersion: v1
+name: frobnitz
+description: This is a frobnitz.
+version: "1.2.3"
+keywords:
+  - frobnitz
+  - sprocket
+  - dodad
+maintainers:
+  - name: The Helm Team
+    email: helm@example.com
+  - name: Someone Else
+    email: nobody@example.com
+sources:
+  - https://example.com/foo/bar
+home: http://example.com
+icon: https://example.com/64x64.png
+annotations:
+  extrakey: extravalue
+  anotherkey: anothervalue

pkg/chartutil/testdata/frobnitz_symlinks/INSTALL.txt

+This is an install document. The client may display this.

pkg/chartutil/testdata/frobnitz_symlinks/LICENSE

+LICENSE placeholder.

pkg/chartutil/testdata/frobnitz_symlinks/charts/_ignore_me

+This should be ignored by the loader, but may be included in a chart.

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/Chart.yaml

+apiVersion: v1
+name: alpine
+description: Deploy a basic Alpine Linux pod
+version: 0.1.0
+home: https://helm.sh/helm

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/README.md

+This example was generated using the command `helm create alpine`.
+
+The `templates/` directory contains a very simple pod resource with a
+couple of parameters.
+
+The `values.toml` file contains the default values for the
+`alpine-pod.yaml` template.
+
+You can install this example using `helm install ./alpine`.

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/charts/mast1/Chart.yaml

+apiVersion: v1
+name: mast1
+description: A Helm chart for Kubernetes
+version: 0.1.0
+home: ""

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/charts/mast1/values.yaml

+# Default values for mast1.
+# This is a YAML-formatted file.
+# Declare name/value pairs to be passed into your templates.
+# name = "value"

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/templates/alpine-pod.yaml

+apiVersion: v1
+kind: Pod
+metadata:
+  name: {{.Release.Name}}-{{.Chart.Name}}
+  labels:
+    app.kubernetes.io/managed-by: {{.Release.Service}}
+    app.kubernetes.io/name: {{.Chart.Name}}
+    helm.sh/chart: "{{.Chart.Name}}-{{.Chart.Version}}"
+spec:
+  restartPolicy: {{default "Never" .restart_policy}}
+  containers:
+  - name: waiter
+    image: "alpine:3.9"
+    command: ["/bin/sleep","9000"]

pkg/chartutil/testdata/frobnitz_symlinks/charts/alpine/values.yaml

+# The pod name
+name: "my-alpine"