borg2: index rebuild trusts pack headers
Open
cmd: check
security
- Dominant language
- Python
- Stars
- 13.7k
- Forks
- 875
- Avg merge
- 11h 15m
- Merged PRs (30d)
- 192
Description
IIRC the pack headers are not authenticated when it rebuilds the index.
Contributor guide
Research direction
Start by tracing the borg2 index-rebuild path and how it handles pack headers, then verify whether header authentication is performed during rebuilding. The issue does not name files or tests, so identify the relevant code and regression coverage before defining completion.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100