Function cli_checksum_line_digest

src/cli/cli.c:6723–6754

}

static bool cli_checksum_line_digest(const unsigned char *line, size_t line_length,
                                     const char *archive_name, size_t archive_name_length,
                                     char digest[SHA256_BUF_SIZE]) {
    if (!line || line_length <= SHA256_HEX_LEN ||
        (line[SHA256_HEX_LEN] != (unsigned char)' ' &&
         line[SHA256_HEX_LEN] != (unsigned char)'\t')) {
        return false;
    }
    size_t filename_offset = SHA256_HEX_LEN;
    while (filename_offset < line_length && (line[filename_offset] == (unsigned char)' ' ||
                                             line[filename_offset] == (unsigned char)'\t')) {
        filename_offset++;
    }
    if (filename_offset < line_length && line[filename_offset] == (unsigned char)'*') {
        filename_offset++;
    }
    if (line_length - filename_offset != archive_name_length ||
        memcmp(line + filename_offset, archive_name, archive_name_length) != 0) {
        return false;
    }

    static const char lower_hex[] = "0123456789abcdef";
    for (size_t i = 0; i < SHA256_HEX_LEN; i++) {
        int nibble = cli_checksum_hex_nibble(line[i]);
        if (nibble < 0) {
            return false;
        }
        digest[i] = lower_hex[nibble];
    }
    digest[SHA256_HEX_LEN] = '\0';
    return true;
}

/* Parse one downloaded checksum manifest without trusting line truncation or
 * substring matches. This non-header symbol is intentionally exercised by the