scriptc

mirror of https://github.com/vercel-labs/scriptc.git synced 2026-11-11 02:03:59 +08:00

Files

T

Chris Tate 1d579ea5a2 Check the identity of the open file a runtime pack artifact is read from

Staging stat'ed an artifact's path, read the path, and stat'ed it again.
When the path was a symbolic link switched to another file of the same
size during the read and back before the second stat, both identities
were those of the verified file, so the bytes of the other file were
staged without hashing. Staging now opens the artifact once and takes
both identities from the open file with fstat, so they describe the
file the bytes come from.

A test switches the artifact's link to a same-sized file during the read
and checks that the staged copy has the verified bytes.

2026-10-24 16:05:19 -05:00

ambient

zlib: Brotli compression and decompression over the vendored brotli 1.2.0 (#2053 )

2026-10-24 00:30:21 -05:00

native

Refresh the native compiler's optimization profile

2026-10-24 11:47:19 -05:00

shims

Address review feedback on request-body streaming

2026-10-23 05:22:01 -05:00

src

Check the identity of the open file a runtime pack artifact is read from