1511507 - Content verification for partial clone data fetching code in robustcheckout

Status: ASSIGNED

(Developer Services :: Mercurial: hg.mozilla.org, enhancement)

Description

[Gregory Szorc [:gps]]

robustcheckout is performing Mercurial wire protocol requests to retrieve raw file data for specific revisions (e.g. to resolve the set of files in a sparse profile). Per discussions with kang, we need to validate the hashes of retrieved data before operating on the data in order to preserve existing content integrity protections of Mercurial.

(Mercurial validates hashes on store reads. But since we're fetching data from the wire protocol without going through the store APIs, there is the potential for the data to be corrupted over the wire.)

As part of implementing this, we should have a test that ensures that tampered data is detected and the client refuses to operate on it.