Add validation for file format of downloaded upstream files

aristanetworks · Jan 2, 2024 · 181ad26 · 181ad26
1 parent 42dedb3
commit 181ad26
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/impl/create_srpm.go b/impl/create_srpm.go
@@ -192,6 +192,13 @@ func (bldr *srpmBuilder) verifyUpstreamSrpm() error {
 			bldr.errPrefix)
 	}
 
+	// Check if downloaded file is a valid rpm
+	err := util.RunSystemCmd("rpm", "-q", "-p", upstreamSrpmFilePath)
+	if err != nil {
+		return fmt.Errorf("%sDownloaded SRPM file is not a valid rpm: %s",
+			bldr.errPrefix, err)
+	}
+
 	if !upstreamSrc.skipSigCheck {
 		if err := util.VerifyRpmSignature(upstreamSrpmFilePath, bldr.errPrefix); err != nil {
 			return err