mirror of
https://github.com/knutwurst/patchdl.git
synced 2026-10-19 19:01:38 +02:00
Knutwurst
b727fd430f
The allowlist carried a non-Sony host for a lookup that was never built; the function was a stub that always returned -1. Removing both leaves behaviour unchanged and keeps every request on the PlayStation CDN.
69 lines
2.0 KiB
C
69 lines
2.0 KiB
C
/* SPDX-License-Identifier: GPL-3.0-or-later
|
|
* Copyright (C) 2026 Knutwurst
|
|
*
|
|
* PatchDL is free software: you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License as published by the Free
|
|
* Software Foundation, either version 3 of the License, or (at your option)
|
|
* any later version. See the LICENSE file in the project root for details.
|
|
*/
|
|
|
|
#include "patchdl_resolve.h"
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
#define DB_PATH "/data/patchdl/db/ps5_xml.tsv"
|
|
|
|
static int
|
|
lookup_tsv(const char *title_id, char *url_out, size_t url_sz) {
|
|
FILE *fp;
|
|
char line[1024];
|
|
|
|
fp = fopen(DB_PATH, "r");
|
|
if (!fp) return -1;
|
|
|
|
while (fgets(line, sizeof(line), fp)) {
|
|
char *tab = strchr(line, '\t');
|
|
if (!tab) continue;
|
|
*tab = '\0';
|
|
if (strcmp(line, title_id)) continue;
|
|
|
|
char *url = tab + 1;
|
|
size_t len = strlen(url);
|
|
while (len > 0 && (url[len - 1] == '\n' || url[len - 1] == '\r'))
|
|
url[--len] = '\0';
|
|
if (len == 0 || len >= url_sz) {
|
|
fclose(fp);
|
|
return -1;
|
|
}
|
|
/* Defense in depth: the TSV file lives under /data/patchdl, writable
|
|
by anyone with /data access. patchdl_http_get also enforces
|
|
host_allowed, but rejecting non-https / non-Sony schemes here means
|
|
a poisoned line can't even reach the network layer. */
|
|
if (strncmp(url, "https://", 8) != 0) {
|
|
fclose(fp);
|
|
return -1;
|
|
}
|
|
memcpy(url_out, url, len + 1);
|
|
fclose(fp);
|
|
return 0;
|
|
}
|
|
fclose(fp);
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
patchdl_resolve_url(const char *title_id, char *url_out, size_t url_sz) {
|
|
if (!title_id) return -1;
|
|
|
|
/* Only PS5 native title IDs (PPSA/PPSE/PPSH/PPSJ/PPSC) */
|
|
if (strncmp(title_id, "PPSA", 4) &&
|
|
strncmp(title_id, "PPSE", 4) &&
|
|
strncmp(title_id, "PPSH", 4) &&
|
|
strncmp(title_id, "PPSJ", 4) &&
|
|
strncmp(title_id, "PPSC", 4))
|
|
return -1;
|
|
|
|
return lookup_tsv(title_id, url_out, url_sz);
|
|
}
|