h dZddlZddlmZmZmZmZmZmZm Z ddl m Z m Z ddl mZmZddlmZddlmZmZdd lmZejeZgd Zeee jee jfZd Zd ed eeddffdZd ede jde jd eedeffdZe ddZ e ddZ!e deZ"e dedZ#dedee"de fd eeee"fde ffdZ$dedee!de fdee!ge#fd eeee#fde ffdZ%e&dfdeedeed ee'd e(fd!Z)dS)"z Module defining common helpers for use by rules and policies. In principle, these aren't relevant to the high-level validation API. N)Callable FrozenSet GeneratorOptionalSetTupleTypeVar)genericmisc) PdfObject Reference)HistoricalResolver)ModificationLevelSuspiciousModification)ReferenceUpdate)qualifyqualify_transformingsafe_whitelistcompare_key_refs compare_dictsassert_not_streamcjt|tjrtd|jddS)zT Throw :class:`.SuspiciousModification` if the argument is a stream object. z!Unexpected stream encountered at !N) isinstancer StreamObjectr container_ref)objs ^/var/www/html/Sam_Eipo/venv/lib/python3.11/site-packages/pyhanko/sign/diff_analysis/commons.pyrr sF#w+,, $ D0A D D D     oldreturnc#K|r!t|||kr't||VdS||r|VdStd|d)a~ Checks whether an indirect reference in a PDF structure can be updated without clobbering an older object in a way that causes ramifications at the PDF syntax level. The following are verified: - Does the old reference point to a non-stream object? - If the new reference is equal to the old one, does the new reference point to a non-stream object? - If the new reference is not equal to the old one, is the new reference a newly defined object? This is a generator for syntactical convenience and integration with internal APIs, but it will always yield at most one element. zUpdate clobbers or reuses z in an unexpected way.N)r get_objectis_ref_availabler)r!old_refnew_refs rrr*s(0',,..///'',,..///  g & &  $ H H H H   r old_dictnew_dictc#K ||}t|tjr|j}|}nd}n#t $rdx}}YnwxYw ||}t|tjr|j}|}nd}n&#t $r|td|dYdSwxYw|t|||Ed{V||fS)a Ensure that updating a key in a dictionary has no undesirable side effects. The following scenarios are allowed: 0. replacing a direct value with another direct value 1. adding a key in new_dict 2. replacing a direct value in old_dict with a reference in new_dict 3. the reverse (allowed by default) 4. replacing a reference with another reference (that doesn't override anything else) The restrictions of `safe_whitelist` apply to this function as well. Note: this routine is only safe to use if the structure of the resulting values is also checked. Otherwise, it can lead to reference leaks if one is not careful. NzKey z was deleted from dictionary)NN) raw_getrr IndirectObject referencer$KeyErrorrr)keyr!r(r) old_value old_value_ref new_value new_value_refs rrrLsL0)$$S)) i!7 8 8 !%/M!,,..II M )))$(( ) $$S)) i!7 8 8 !%/M!,,..II M   (8s888 zz  !#}mDDDDDDDDD i s%A AA#"A#'A B55CCRT) covariant QualifyIn) contravariantRefToUpd)bound OutRefUpd)r9r5level rule_resultc(t||dS)a This is a helper function for rule implementors. It attaches a fixed modification level to an existing reference update generator, respecting the original generator's return value (if relevant). A prototypical use would be of the following form: .. code-block:: python def some_generator_function(): # do stuff for ref in some_list: # do stuff yield ref # do more stuff return summary_value # ... def some_qualified_generator_function(): summary_value = yield from qualify( ModificationLevel.FORM_FILLING, some_generator_function() ) Provided that ``some_generator_function`` yields :class:`~.generic.ReferenceUpdate` objects, the yield type of the resulting generator will be tuples of the form ``(level, ref)``. :param level: The modification level to set. :param rule_result: A generator that outputs references to be whitelisted. :return: A converted generator that outputs references qualified at the modification level specified. c|SN)xs rzqualify..sr ) transform)r)r;r<s rrrsT {kk J J JJr rCc8tj|fdS)a This is a version of :func:`.qualify` that additionally allows a transformation to be applied to the output of the rule. :param level: The modification level to set. :param rule_result: A generator that outputs references to be whitelisted. :param transform: Function to apply to the reference object before appending the modification level and yielding it. :return: A converted generator that outputs references qualified at the modification level specified. c|fSr?r@)refr;rCs rrBz&qualify_transforming..s%3!8r )r map_with_return)r;r<rCs` `rrrs-(  88888  r ignoredc dt|tjstjdt|tjst dt |t |t||z }t||z }||kr|rt d|d|ddS|D]O}| |}| |}||kr|rt d|d|d |dSPd S) zP Compare entries in two dictionaries, optionally ignoring certain keys. z?Encountered unexpected non-dictionary object in prior revision.z.Dict is overridden by non-dict in new revisionzDict keys differ: z vs. .FzValues for dict key z differ:z changed to T) rr DictionaryObjectr PdfReadErrorrrsetkeysr+) r(r)rH raise_exc new_dict_keys old_dict_keysknew_valold_vals rrrs h 8 9 9  M    h 8 9 9 $ <   hh ((72M ((72M %%  (M]MM]MMM 5   ""1%%""1%% g   ,616666,366 uu  4r )*__doc__loggingtypingrrrrrrr pyhanko.pdf_utilsr r pyhanko.pdf_utils.genericr r pyhanko.pdf_utils.readerr policy_apirr rules_apir getLogger__name__logger__all__ TwoVersionsrrrKrr4r6r8r:rr frozensetstrboolrr@r rresPPPPPPPPPPPPPPPPPP++++++++::::::::777777AAAAAAAA&&&&&&  8 $ $   HW./':K1LLM      y$$%    D3 3 &3 & 3 y$ +, 3 3 3 3 l GC4    GKt 4 4 4 7:_ 5 5 5 GK$ G G G *K *K8T1,-*Ku&014:;*K*K*K*KZ 9dA-. Y./u& 12D!;< 8(ikk ++y!+y!+s^+  ++++++r