mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-10-29 07:06:24 +08:00
Davanum Srinivas
11f5f2467c
jsonpointer v1.0.2 fixes two uncaught panics in the name provider and in Pointer.Set (GHSA-cqr7-r6x2-9cqf, GHSA-m8w9-vj7g-gxgg). Signed-off-by: Davanum Srinivas <davanum@gmail.com>
82 lines
3.0 KiB
Go
82 lines
3.0 KiB
Go
// SPDX-FileCopyrightText: Copyright (c) 2015-2025 go-swagger maintainers
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package jsonpointer
|
|
|
|
import (
|
|
"fmt"
|
|
"reflect"
|
|
)
|
|
|
|
type pointerError string
|
|
|
|
func (e pointerError) Error() string {
|
|
return string(e)
|
|
}
|
|
|
|
const (
|
|
// ErrPointer is a sentinel error raised by all errors from this package.
|
|
ErrPointer pointerError = "JSON pointer error"
|
|
|
|
// ErrInvalidStart states that a JSON pointer must start with a separator ("/").
|
|
ErrInvalidStart pointerError = `JSON pointer must be empty or start with a "` + pointerSeparator + `"`
|
|
|
|
// ErrUnsupportedValueType indicates that a value of the wrong type is being set.
|
|
ErrUnsupportedValueType pointerError = "only structs, pointers, maps and slices are supported for setting values"
|
|
|
|
// ErrDashToken indicates use of the RFC 6901 "-" reference token in a context where it cannot be
|
|
// resolved.
|
|
//
|
|
// Per RFC 6901 §4 the "-" token refers to the (nonexistent) element after the last array element.
|
|
// It may only be used as the terminal token of a [Pointer.Set] against a slice, where it means
|
|
// "append".
|
|
//
|
|
// Any other use (get, offset, intermediate traversal, non-slice target) is an error condition that
|
|
// wraps this sentinel.
|
|
ErrDashToken pointerError = `the "-" array token cannot be resolved here` //nolint:gosec // G101 false positive: this is a JSON Pointer reference token, not a credential.
|
|
)
|
|
|
|
const dashToken = "-"
|
|
|
|
func errNoKey(key string) error {
|
|
return fmt.Errorf("object has no key %q: %w", key, ErrPointer)
|
|
}
|
|
|
|
func errOutOfBounds(length, idx int) error {
|
|
return fmt.Errorf("index out of bounds array[0,%d] index '%d': %w", length-1, idx, ErrPointer)
|
|
}
|
|
|
|
func errInvalidReference(token string) error {
|
|
return fmt.Errorf("invalid token reference %q: %w", token, ErrPointer)
|
|
}
|
|
|
|
func errNoField(token string) error {
|
|
return fmt.Errorf("object has no field %q: %w", token, ErrPointer)
|
|
}
|
|
|
|
// errUnreachableField reports a field that exists on the type but cannot be reached on this value,
|
|
// because it is promoted through a nil embedded pointer.
|
|
func errUnreachableField(name string, cause error) error {
|
|
return fmt.Errorf("cannot reach field %q: %w: %w", name, cause, ErrPointer)
|
|
}
|
|
|
|
// errMapKey reports a reference token that cannot serve as a key of the target map type.
|
|
//
|
|
// JSON object member names are strings, so only maps keyed by a string type (or by an interface
|
|
// type a string satisfies) can be addressed by a JSON pointer.
|
|
func errMapKey(token string, mapType reflect.Type) error {
|
|
return fmt.Errorf("can't use token %q as a key of map type %v: %w", token, mapType, ErrPointer)
|
|
}
|
|
|
|
func errDashOnGet() error {
|
|
return fmt.Errorf("cannot resolve %q token on get: %w: %w", dashToken, ErrDashToken, ErrPointer)
|
|
}
|
|
|
|
func errDashIntermediate() error {
|
|
return fmt.Errorf("the %q token may only appear as the terminal token of a pointer: %w: %w", dashToken, ErrDashToken, ErrPointer)
|
|
}
|
|
|
|
func errDashOnOffset() error {
|
|
return fmt.Errorf("cannot compute offset for %q token (nonexistent element): %w: %w", dashToken, ErrDashToken, ErrPointer)
|
|
}
|