Add git2::opts::strict_hash_verification

Author: taralx

libgit2-sys/lib.rs

@@ -1778,6 +1778,42 @@ git_enum! {
     }
 }
 
+git_enum! {
+    pub enum git_libgit2_opt_t {
+        GIT_OPT_GET_MWINDOW_SIZE = 0,
+        GIT_OPT_SET_MWINDOW_SIZE,
+        GIT_OPT_GET_MWINDOW_MAPPED_LIMIT,
+        GIT_OPT_SET_MWINDOW_MAPPED_LIMIT,
+        GIT_OPT_GET_SEARCH_PATH,
+        GIT_OPT_SET_SEARCH_PATH,
+        GIT_OPT_SET_CACHE_OBJECT_LIMIT,
+        GIT_OPT_SET_CACHE_MAX_SIZE,
+        GIT_OPT_ENABLE_CACHING,
+        GIT_OPT_GET_CACHED_MEMORY,
+        GIT_OPT_GET_TEMPLATE_PATH,
+        GIT_OPT_SET_TEMPLATE_PATH,
+        GIT_OPT_SET_SSL_CERT_LOCATIONS,
+        GIT_OPT_SET_USER_AGENT,
+        GIT_OPT_ENABLE_STRICT_OBJECT_CREATION,
+        GIT_OPT_ENABLE_STRICT_SYMBOLIC_REF_CREATION,
+        GIT_OPT_SET_SSL_CIPHERS,
+        GIT_OPT_GET_USER_AGENT,
+        GIT_OPT_ENABLE_OFS_DELTA,
+        GIT_OPT_ENABLE_FSYNC_GITDIR,
+        GIT_OPT_GET_WINDOWS_SHAREMODE,
+        GIT_OPT_SET_WINDOWS_SHAREMODE,
+        GIT_OPT_ENABLE_STRICT_HASH_VERIFICATION,
+        GIT_OPT_SET_ALLOCATOR,
+        GIT_OPT_ENABLE_UNSAVED_INDEX_SAFETY,
+        GIT_OPT_GET_PACK_MAX_OBJECTS,
+        GIT_OPT_SET_PACK_MAX_OBJECTS,
+        GIT_OPT_DISABLE_PACK_KEEP_FILE_CHECKS,
+        GIT_OPT_ENABLE_HTTP_EXPECT_CONTINUE,
+        GIT_OPT_GET_MWINDOW_FILE_LIMIT,
+        GIT_OPT_SET_MWINDOW_FILE_LIMIT,
+    }
+}
+
 extern "C" {
     // threads
     pub fn git_libgit2_init() -> c_int;
@@ -3722,6 +3758,8 @@ extern "C" {
         commit: *mut git_commit,
         given_opts: *const git_revert_options,
     ) -> c_int;
+
+    pub fn git_libgit2_opts(option: c_int, ...) -> c_int;
 }
 
 pub fn init() {

src/lib.rs

@@ -638,6 +638,7 @@ mod util;
 pub mod build;
 pub mod cert;
 pub mod oid_array;
+pub mod opts;
 pub mod string_array;
 pub mod transport;
 

src/opts.rs

@@ -0,0 +1,26 @@
+//! Bindings to libgit2's git_libgit2_opts function.
+
+use crate::raw;
+
+/// Controls whether or not libgit2 will verify that objects loaded have the
+/// expected hash. Enabled by default, but disabling this can significantly
+/// improve performance at the cost of correctness.
+pub fn strict_hash_verification(enabled: bool) {
+    let error = unsafe {
+        raw::git_libgit2_opts(
+            raw::GIT_OPT_ENABLE_STRICT_HASH_VERIFICATION as libc::c_int,
+            if enabled { 1 } else { 0 } as libc::c_int,
+        )
+    };
+    // This function cannot actually fail, but the function has an error return
+    // for other options that can.
+    debug_assert!(error >= 0);
+}
+
+#[cfg(test)]
+mod test {
+    #[test]
+    fn smoke() {
+        super::strict_hash_verification(false);
+    }
+}