aboutsummaryrefslogtreecommitdiff
path: root/internal/iolimit/expect_length_reader.go
blob: 4e5e59507a2a86a2d29f708bd1ab5946654a946f (about) (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
package iolimit

import (
	"errors"
	"io"
)

// ErrExpectedLengthExceeded reports that a stream
// produced bytes beyond the expected length.
var ErrExpectedLengthExceeded = errors.New("iolimit: stream exceeded expected length")

// ExpectLengthReader wraps src and enforces an expected byte length.
//
// It returns io.ErrUnexpectedEOF
// if src ends before expected bytes are read.
// It returns ErrExpectedLengthExceeded
// if reads continue beyond the expected boundary
// and src still produces bytes.
//
// This reader does not drain src on close or at the expected boundary.
// As a result,
// overlength streams are detected only
// when a caller reads at or past the boundary.
func ExpectLengthReader(src io.Reader, expected int) io.Reader {
	return &expectLengthReader{
		src:       src,
		remaining: expected,
	}
}

type expectLengthReader struct {
	src       io.Reader
	remaining int
}

func (reader *expectLengthReader) Read(dst []byte) (int, error) {
	if len(dst) == 0 {
		return 0, nil
	}

	if reader.remaining == 0 {
		var probe [1]byte

		n, err := reader.src.Read(probe[:])
		if n > 0 {
			return 0, ErrExpectedLengthExceeded
		}

		if err == nil {
			return 0, nil
		}

		return 0, err
	}

	if len(dst) > reader.remaining {
		dst = dst[:reader.remaining]
	}

	n, err := reader.src.Read(dst)
	if n > 0 {
		reader.remaining -= n
	}

	if errors.Is(err, io.EOF) {
		if reader.remaining > 0 {
			return n, io.ErrUnexpectedEOF
		}

		if n > 0 {
			return n, nil
		}

		return 0, io.EOF
	}

	return n, err
}