| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273 |
- # -*- coding: utf-8 -*-
- """提交前体检：logs/ 下的产物里有没有混进机构密钥。
- 只打计数与文件名（文件名不是秘密），绝不打印密钥本身或长度以外的信息。"""
- import io, os, re, sys
- YML = "java/src/main/resources/application.yml"
- VAR = re.compile(r"^\$\{([A-Za-z0-9_]+):(.*)\}$")
- def read_block(path, top):
- lines = io.open(path, encoding="utf-8", errors="replace").read().split("\n")
- start = None
- for i, ln in enumerate(lines):
- if re.match(r"^%s:\s*$" % re.escape(top), ln):
- start = i; break
- if start is None:
- raise SystemExit("找不到顶层段 %s:" % top)
- out = {}
- for j in range(start + 1, len(lines)):
- ln = lines[j]
- if ln.strip() == "" or ln.lstrip().startswith("#"):
- continue
- if not ln.startswith((" ", "\t")):
- break
- m = re.match(r"^\s+([A-Za-z0-9_.\-]+):\s*(.*)$", ln)
- if m:
- out[m.group(1)] = re.split(r"\s+#", m.group(2), maxsplit=1)[0].strip().strip("'\"")
- return out
- cfg = read_block(YML, "leshouying")
- raw = cfg.get("key", "")
- m = VAR.match(raw)
- KEY = (os.environ.get(m.group(1)) or m.group(2)) if m else raw
- print("密钥长度 = %d（只打长度）" % len(KEY))
- if len(KEY) < 8:
- raise SystemExit("密钥太短，无法作为搜索针，体检作废")
- needle = KEY.encode("utf-8")
- # 正对照：密钥必然在 application.yml 里；扫不到说明扫描器/针是坏的
- def hits(path):
- try:
- return io.open(path, "rb").read().count(needle)
- except Exception:
- return 0
- pos = hits(YML)
- print("正对照 application.yml 命中 = %d %s" % (pos, "OK" if pos >= 1 else "!! 扫描器失效，体检作废"))
- if pos < 1:
- raise SystemExit(1)
- dirs = ["logs/_lsy-lc", "logs/_lsy-lc2", "logs/_lsy-lc3", "logs/_lsy-ctl"]
- loose = ["logs/_lsy-lifecycle.py", "logs/_lsy-lifecycle.txt",
- "logs/_lsy-refund-unlock.py", "logs/_lsy-refund-unlock.txt",
- "logs/_lsy-round3.py", "logs/_lsy-round3.txt",
- "logs/_lsy-close-control.py", "logs/_lsy-close-control.txt"]
- files = list(loose)
- for d in dirs:
- if os.path.isdir(d):
- for n in sorted(os.listdir(d)):
- files.append(os.path.join(d, n))
- bad, n = [], 0
- for f in files:
- n += 1
- c = hits(f)
- if c:
- bad.append((f, c))
- print("扫描文件数 = %d" % n)
- print("含密钥的文件数 = %d" % len(bad))
- for f, c in bad:
- print(" !! %s 命中 %d 次" % (f, c))
- print("结论: %s" % ("干净，可提交" if not bad else "**有泄漏，不得提交**"))
|
