Function cbm_cli_checksum_manifest_digest

src/cli/cli.c:6760–6843

Parse one downloaded checksum manifest without trusting line truncation or * substring matches. This non-header symbol is intentionally exercised by the * focused CLI regression tests. Duplicate entries are accepted only when they * name the exact artifact and normalize to the same SHA-256 digest. */

 * focused CLI regression tests. Duplicate entries are accepted only when they
 * name the exact artifact and normalize to the same SHA-256 digest. */
int cbm_cli_checksum_manifest_digest(const char *manifest_path, const char *archive_name, char *out,
                                     size_t out_size) {
    if (out && out_size > 0) {
        out[0] = '\0';
    }
    if (!manifest_path || !archive_name || !archive_name[0] || !out || out_size < SHA256_BUF_SIZE ||
        strchr(archive_name, '\n') || strchr(archive_name, '\r')) {
        return CLI_ERR;
    }

    FILE *fp = cbm_fopen(manifest_path, "rb");
    if (!fp) {
        return CLI_ERR;
    }
    unsigned char *manifest = malloc(CHECKSUM_MANIFEST_MAX_BYTES + 1U);
    if (!manifest) {
        (void)fclose(fp);
        return CLI_ERR;
    }
    size_t manifest_length = 0;
    bool read_ok = true;
    while (manifest_length <= CHECKSUM_MANIFEST_MAX_BYTES) {
        size_t capacity = CHECKSUM_MANIFEST_MAX_BYTES + 1U - manifest_length;
        size_t count = fread(manifest + manifest_length, 1, capacity, fp);
        manifest_length += count;
        if (ferror(fp)) {
            read_ok = false;
            break;
        }
        if (feof(fp)) {
            break;
        }
        if (count == 0) {
            read_ok = false;
            break;
        }
    }
    if (fclose(fp) != 0) {
        read_ok = false;
    }
    if (!read_ok || manifest_length == 0 || manifest_length > CHECKSUM_MANIFEST_MAX_BYTES ||
        memchr(manifest, '\0', manifest_length)) {
        free(manifest);
        return CLI_ERR;
    }

    size_t archive_name_length = strlen(archive_name);
    char selected[SHA256_BUF_SIZE] = {0};
    bool found = false;
    const unsigned char *cursor = manifest;
    const unsigned char *end = manifest + manifest_length;
    while (cursor < end) {
        const unsigned char *newline = memchr(cursor, '\n', (size_t)(end - cursor));
        const unsigned char *line_end = newline ? newline : end;
        size_t line_length = (size_t)(line_end - cursor);
        if (line_length > 0 && cursor[line_length - 1U] == (unsigned char)'\r') {
            line_length--;
        }