mirror of
https://github.com/Cacti/spine.git
synced 2026-10-23 03:27:10 +09:00
Introduce bounded native interfaces and grouped runtime state, then link regression and fault contracts against the real poller implementations. The contracts capture CLI/configuration input, availability combinations, SNMP request/response ownership, script framing, reindexing, output persistence, worker completion and shutdown. This foundational change is larger because the shared interfaces and their existing production contracts must move together; later changes have separate review boundaries. Step 1/14 of the complete C17/native-correctness series. Base: develop. Earlier validation, before this review follow-up, in isolated copied snapshots on Linux arm64: - Clean GCC build and make check: 13 passed, 0 existing prerequisite skips, 0 failures. - ASan/UBSan: 12 passed, 1 existing privilege/allocator-interposition prerequisite skips, 0 failures; no sanitizer findings. - Production source/profile integrity verification against disposable MariaDB and loopback SNMP fixtures passed. - Release archive extracted into a separate source tree and built/tested out of tree; fuzz checks passed. Earlier local profiles retain source hashes for the copied validation tree; GitHub checks validate the published commit. No production database/device, host installation or live privilege change is part of validation. Existing prerequisite skips were retained; no test or finding was suppressed to obtain a pass. The worker contracts publish owned heap state and release it only after joining workers and restoring the runtime table. Coverage counters use atomic updates; cppcheck receives an explicit model of the fatal exit contract. Fixture images use public mirrors to avoid shared Docker Hub pull limits. Series navigation: review and merge in order. Every PR targets the preceding branch so its diff contains one step. 1. [refactor(core): add bounded native interfaces and polling contracts](https://github.com/Cacti/spine/pull/638) 2. [fix(privileges): drop root before input and retain owned ICMP sockets](https://github.com/Cacti/spine/pull/639) 3. [fix(poller): isolate worker failures and bound database reconnects](https://github.com/Cacti/spine/pull/640) 4. [fix(results): normalize output and unify SNMP batch persistence](https://github.com/Cacti/spine/pull/641) 5. [fix(runtime): bound probe retries and validate CLI and configuration](https://github.com/Cacti/spine/pull/642) 6. [build: select GNU C17 explicitly and probe hardening support](https://github.com/Cacti/spine/pull/643) 7. [fix(threads): size worker stacks and guard size arithmetic](https://github.com/Cacti/spine/pull/644) 8. [refactor(c17): simplify ownership guards and share test support](https://github.com/Cacti/spine/pull/645) 9. [refactor(core): extract configuration polling and runtime modules](https://github.com/Cacti/spine/pull/646) 10. [fix(boundaries): validate script slots and make cleanup portable](https://github.com/Cacti/spine/pull/647) 11. [refactor(layout): organize responsibilities and separate main from runtime](https://github.com/Cacti/spine/pull/648) 12. [docs(license): adopt SPDX notices and retain contributor credits](https://github.com/Cacti/spine/pull/649) 13. [test(runtime): measure all suites and cover protocol boundaries](https://github.com/Cacti/spine/pull/650) 14. [build(ci): validate connectors time width and native C17 modules](https://github.com/Cacti/spine/pull/651) Review follow-up (2026-10-09): Publish the decoded GET/GETNEXT status back to the host so availability checks observe exception and missing-response failures, while preserving the legacy transport-success behavior for agent PDU errors. Updated step 1 snapshot: isolated Linux arm64 build and make check passed (13 passed, no skips or failures). The restacked tip passes all five clang-tidy gate regression tests and real clang-tidy analysis (26 reviewed baseline findings, no new findings). Actionlint and matching DCO trailers pass. The setuid test also passes when run in the separate disposable root container. GitHub checks validate the updated published commits; earlier profile/archive/sanitizer evidence above belongs to the previous revisions. --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
122 lines
4.0 KiB
Bash
122 lines
4.0 KiB
Bash
#!/usr/bin/env bash
|
|
# +-------------------------------------------------------------------------+
|
|
# | Copyright (C) 2004-2026 The Cacti Group |
|
|
# | |
|
|
# | This program is free software; you can redistribute it and/or |
|
|
# | modify it under the terms of the GNU General Public License |
|
|
# | as published by the Free Software Foundation; either version 2 |
|
|
# | of the License, or (at your option) any later version. |
|
|
# | |
|
|
# | This program is distributed in the hope that it will be useful, |
|
|
# | but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
# | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
# | GNU General Public License for more details. |
|
|
# +-------------------------------------------------------------------------+
|
|
# | Cacti: The Complete RRDTool-based Graphing Solution |
|
|
# +-------------------------------------------------------------------------+
|
|
# | This code is designed, written, and maintained by the Cacti Group. See |
|
|
# | about.php and/or the AUTHORS file for specific developer information. |
|
|
# +-------------------------------------------------------------------------+
|
|
# | http://www.cacti.net/ |
|
|
# +-------------------------------------------------------------------------+
|
|
|
|
update_copyright() {
|
|
local original_file=$1
|
|
local file=$original_file
|
|
file=${file/$SCRIPT_BASE/}
|
|
printf -v line "%60s" "$file"
|
|
if [[ -z "$ERRORS_ONLY" ]]; then
|
|
echo -n "$line"
|
|
line=
|
|
fi
|
|
|
|
old_reg="20[0-9][0-9][ ]*-[ ]*20[0-9][0-9]"
|
|
old_data=$(grep -c -e "$old_reg" "$original_file" 2>/dev/null)
|
|
new_reg="2004-$YEAR"
|
|
|
|
|
|
if [[ $old_data -eq 0 ]]; then
|
|
old_reg="(Copyright.*) 20[0-9][0-9] "
|
|
old_data=$(grep -c -e "$old_reg" "$original_file" 2>/dev/null)
|
|
new_reg="\1 2004-$YEAR"
|
|
|
|
fi
|
|
|
|
if [[ $old_data -gt 0 ]]; then
|
|
old_data=$(grep -e "$old_reg" "$original_file" 2>/dev/null)
|
|
new_data=$(echo "$old_data" | sed -r s/"$old_reg"/"$new_reg"/g)
|
|
if [[ "$old_data" == "$new_data" ]]; then
|
|
if [[ -z "$ERRORS_ONLY" ]]; then
|
|
echo "$line Skipping Copyright Data"
|
|
fi
|
|
else
|
|
echo "$line Updating Copyright Data"
|
|
printf '%60s %s\n' "==============================" "===================="
|
|
printf '%60s %s\n' "$old_data" "=>"
|
|
printf '%60s %s\n' "$new_data" ""
|
|
sed -i -r s/"$old_reg"/"$new_reg"/g "$original_file"
|
|
printf '%60s %s\n' "==============================" "===================="
|
|
fi
|
|
else
|
|
echo "$line Copyright not found!"
|
|
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)
|
|
SCRIPT_BASE=$(realpath "${SCRIPT_DIR}/")/
|
|
|
|
BAD_FOLDERS="\.git include/vendor \*\*/vendor include/fa cache include/js scripts"
|
|
SCRIPT_EXCLUSION=
|
|
for f in $BAD_FOLDERS; do
|
|
SCRIPT_EXCLUSION="$SCRIPT_EXCLUSION -not -path ${SCRIPT_BASE}$f/\* "
|
|
done
|
|
|
|
|
|
YEAR=$(date +"%Y")
|
|
EXT="" # "sh sql php js md conf c h ac dist"
|
|
ERRORS_ONLY=1
|
|
while [[ -n "$1" ]]; do
|
|
case $1 in
|
|
"--help")
|
|
echo "NOTE: Checks all Cacti pages for this years copyright"
|
|
echo ""
|
|
echo "usage: copyright_year.sh [-a]"
|
|
echo ""
|
|
;;
|
|
"-E" | "-e")
|
|
shift
|
|
EXT="$1"
|
|
;;
|
|
"-A" | "-a")
|
|
ERRORS_ONLY=
|
|
echo "Searching..."
|
|
;;
|
|
*) ;;
|
|
|
|
esac
|
|
shift
|
|
done
|
|
|
|
# ----------------------------------------------
|
|
# PHP / JS / MD Files
|
|
# ----------------------------------------------
|
|
SCRIPT_INCLUSION=
|
|
SCRIPT_SEPARATOR=
|
|
for ext in $EXT; do
|
|
if [[ -n "$SCRIPT_INCLUSION" ]]; then
|
|
SCRIPT_SEPARATOR="-o "
|
|
fi
|
|
SCRIPT_INCLUSION="$SCRIPT_INCLUSION $SCRIPT_SEPARATOR-name \*.$ext"
|
|
done
|
|
|
|
if [[ -n "$SCRIPT_INCLUSION" ]]; then
|
|
SCRIPT_INCLUSION="\( $SCRIPT_INCLUSION \)"
|
|
fi
|
|
|
|
SCRIPT_CMD="find ${SCRIPT_BASE} -type f $SCRIPT_INCLUSION $SCRIPT_EXCLUSION -print0"
|
|
bash -c "$SCRIPT_CMD" | while IFS= read -r -d '' file; do
|
|
update_copyright "${file}"
|
|
done
|