chore: Basic UnixFS sanity checks

core/commands/files.go

@@ -94,6 +94,7 @@ cache, free memory and speed up read operations.`,
 const (
 	filesCidVersionOptionName = "cid-version"
 	filesHashOptionName       = "hash"
+	filesNoValidateOptionName = "no-validate"
 )
 
 var (
@@ -440,6 +441,7 @@ being GC'ed.
 	},
 	Options: []cmds.Option{
 		cmds.BoolOption(filesParentsOptionName, "p", "Make parent directories as needed."),
+		cmds.BoolOption(filesNoValidateOptionName, "Copy even if the node is not a valid UnixFS node."),
 	},
 	Run: func(req *cmds.Request, res cmds.ResponseEmitter, env cmds.Environment) error {
 		mkParents, _ := req.Options[filesParentsOptionName].(bool)
@@ -480,6 +482,19 @@ being GC'ed.
 			return fmt.Errorf("cp: cannot get node from path %s: %s", src, err)
 		}
 
+		force, _ := req.Options[filesNoValidateOptionName].(bool)
+		if !force {
+			// Check if it's a raw node
+			if _, ok := node.(*dag.RawNode); !ok {
+				if _, ok := node.(*dag.ProtoNode); !ok {
+					return fmt.Errorf("cp: source must be a UnixFS node or raw data")
+				}
+				if _, err = ft.FSNodeFromBytes(node.(*dag.ProtoNode).Data()); err != nil {
+					return fmt.Errorf("cp: source must be a UnixFS node or raw data: %s", err)
+				}
+			}
+		}
+
 		if mkParents {
 			err := ensureContainingDirectoryExists(nd.FilesRoot, dst, prefix)
 			if err != nil {

core/commands/files_test.go

@@ -0,0 +1,47 @@
+package commands
+
+import (
+	"context"
+	"io"
+	"testing"
+
+	dag "github.com/ipfs/boxo/ipld/merkledag"
+	cmds "github.com/ipfs/go-ipfs-cmds"
+	coremock "github.com/ipfs/kubo/core/mock"
+	"github.com/stretchr/testify/require"
+)
+
+func TestFilesCp_DagCborNodeFails(t *testing.T) {
+	ctx, cancel := context.WithCancel(context.Background())
+	defer cancel()
+
+	cmdCtx, err := coremock.MockCmdsCtx()
+	require.NoError(t, err)
+
+	node, err := cmdCtx.ConstructNode()
+	require.NoError(t, err)
+
+	invalidData := []byte{0x00}
+	protoNode := dag.NodeWithData(invalidData)
+	err = node.DAG.Add(ctx, protoNode)
+	require.NoError(t, err)
+
+	req := &cmds.Request{
+		Context: ctx,
+		Arguments: []string{
+			"/ipfs/" + protoNode.Cid().String(),
+			"/test-destination",
+		},
+		Options: map[string]interface{}{
+			"force": false,
+		},
+	}
+
+	_, pw := io.Pipe()
+	res, err := cmds.NewWriterResponseEmitter(pw, req)
+	require.NoError(t, err)
+
+	err = filesCpCmd.Run(req, res, &cmdCtx)
+	require.Error(t, err)
+	require.ErrorContains(t, err, "cp: source must be a UnixFS node or raw data")
+}