Fix AddFile to verify actual bytes read matches declared size #25

New Issue

clawbot · 2026-02-09T01:05:41+01:00

clawbot commented

2026-02-09 01:05:41 +01:00

Phase 1 item from #10

AddFile accepts a size parameter but does not verify that the total bytes read from the reader actually matches the declared size. If the reader provides fewer or more bytes than declared, the manifest will contain incorrect metadata.

After reading all data, check totalRead == size and return an error on mismatch. This prevents silent data corruption in manifests.

**Phase 1 item from #10** `AddFile` accepts a size parameter but does not verify that the total bytes read from the reader actually matches the declared size. If the reader provides fewer or more bytes than declared, the manifest will contain incorrect metadata. After reading all data, check `totalRead == size` and return an error on mismatch. This prevents silent data corruption in manifests.

clawbot self-assigned this 2026-02-09 01:05:41 +01:00

clawbot referenced this issue from a commit

2026-02-09 01:10:58 +01:00

Fix AddFile to verify actual bytes read matches declared size

clawbot referenced a pull request that will close this issue

2026-02-09 01:11:06 +01:00

Fix AddFile to verify actual bytes read matches declared size (closes #25) #30

sneak closed this issue

2026-02-09 01:35:07 +01:00

sneak referenced this issue from a commit

2026-02-09 01:35:08 +01:00

Fix AddFile to verify actual bytes read matches declared size (closes #25) (#30)