|Resolved||Krinkle||T203694 Run ForeignResourceManager verification on MediaWiki core commits|
|Resolved||Krinkle||T216620 Add error detection to HTTP fetch in foreign resources checker before gzipping|
I'd prefer to decline this as it is working fine. I assume this task originated from my suspicion that the Phar logic was causing issues with the Moment.js tar unpacking in February - where we saw a consistent "Segmentation fault" error.
I suspected at the time it may've been due to some logic there being intended for Phar-specific logic and not regular tarballs.
However, I was wrong about that.
- The problem was that we were feeding it an HTML body from a HTTP 302 response from GitHub, not an actual tarball.
- It turns out the tarball/phar unpacking logic is pretty well separated with parameters to trigger one or the other.
I don't mind making the code more elaborate later on, but in its currently form I'd rather not fix something we haven't found to have any kind of issue :)
The checker now validates the HTTP status code before trying to feed response body to the decompressor, thus avoid the weird corruption we saw, and offering useful error messages that would have prevented the problem that led to this report at c96f90cb2b44.