lint: Clean up golangci-lint v1.60 complaints

This cleans up the linting results by adding checks for
integer underflow/overflow in several places, suppressing the error in
places where it has been checked, or fixing the types when possible.

cmd/gen-manifests/main.go

@@ -13,6 +13,7 @@ import (
 	"flag"
 	"fmt"
 	"io"
+	"math"
 	"os"
 	"path/filepath"
 	"sort"
@@ -446,9 +447,9 @@ func mergeOverrides(base, overrides composeRequest) composeRequest {
 func main() {
 	// common args
 	var outputDir, cacheRoot string
-	var nWorkers int
+	var nWorkers uint
 	flag.StringVar(&outputDir, "output", "test/data/manifests/", "manifest store directory")
-	flag.IntVar(&nWorkers, "workers", 16, "number of workers to run concurrently")
+	flag.UintVar(&nWorkers, "workers", 16, "number of workers to run concurrently")
 	flag.StringVar(&cacheRoot, "cache", "/tmp/rpmmd", "rpm metadata cache directory")
 
 	// manifest selection args
@@ -459,6 +460,11 @@ func main() {
 
 	flag.Parse()
 
+	// nWorkers cannot be larger than uint32
+	if nWorkers > math.MaxUint32 {
+		panic(fmt.Sprintf("--workers must be %d or less.", math.MaxUint32))
+	}
+
 	seedArg := int64(0)
 	darm := readRepos()
 	distroFac := distrofactory.NewDefault()
@@ -536,6 +542,8 @@ func main() {
 
 	nJobs := len(jobs)
 	fmt.Printf("Collected %d jobs\n", nJobs)
+	// nWorkers has been tested to be <= math.MaxUint32
+	/* #nosec G115 */
 	wq := newWorkerQueue(uint32(nWorkers), uint32(nJobs))
 	wq.start()
 	fmt.Printf("Initialised %d workers\n", nWorkers)

cmd/gen-manifests/workerqueue.go

@@ -94,7 +94,7 @@ func (wq *workerQueue) startMessagePrinter() {
 		var msglen int
 		for msg := range wq.msgQueue {
 			// clear previous line (avoids leftover trailing characters from progress)
-			fmt.Printf(strings.Repeat(" ", msglen) + "\r")
+			fmt.Print(strings.Repeat(" ", msglen) + "\r")
 			fmt.Println(msg)
 			msglen, _ = fmt.Printf(" == Jobs == Queue: %4d  Active: %4d  Total: %4d\r", len(wq.jobQueue), wq.activeWorkers, wq.njobs)
 		}

cmd/osbuild-worker-executor/handler_build.go

@@ -202,7 +202,7 @@ func handleIncludedSources(atar *tar.Reader, buildDir string) error {
 
 		// this assume "well" behaving tars, i.e. all dirs that lead
 		// up to the tar are included etc
-		mode := os.FileMode(hdr.Mode)
+		mode := hdr.FileInfo().Mode()
 		switch hdr.Typeflag {
 		case tar.TypeDir:
 			if err := os.Mkdir(target, mode); err != nil {

cmd/osbuild-worker/config.go

@@ -3,6 +3,7 @@ package main
 import (
 	"fmt"
 	"os"
+	"time"
 
 	"github.com/BurntSushi/toml"
 	"github.com/osbuild/osbuild-composer/internal/upload/azure"
@@ -20,7 +21,7 @@ type kerberosConfig struct {
 
 type kojiServerConfig struct {
 	Kerberos           *kerberosConfig `toml:"kerberos,omitempty"`
-	RelaxTimeoutFactor uint            `toml:"relax_timeout_factor"`
+	RelaxTimeoutFactor time.Duration   `toml:"relax_timeout_factor"`
 }
 
 type gcpConfig struct {

cmd/osbuild-worker/jobimpl-file-resolve.go

@@ -28,7 +28,7 @@ func (impl *FileResolveJobImpl) Run(job worker.Job) error {
 			}
 		}
 
-		if result.Results == nil || len(result.Results) == 0 {
+		if len(result.Results) == 0 {
 			logWithId.Infof("Resolving file contents failed: %v", err)
 			result.JobError = clienterrors.New(
 				clienterrors.ErrorRemoteFileResolution,

cmd/osbuild-worker/jobimpl-koji-finalize.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"fmt"
+	"math"
 	"net/url"
 	"time"
 
@@ -102,7 +103,14 @@ func (impl *KojiFinalizeJobImpl) Run(job worker.Job) error {
 		// Fail the Koji build if the job error is set and the necessary
 		// information to identify the job are available.
 		if kojiFinalizeJobResult.JobError != nil && initArgs != nil {
-			err = impl.kojiFail(args.Server, int(initArgs.BuildID), initArgs.Token)
+			/* #nosec G115 */
+			buildID := int(initArgs.BuildID)
+			// Make sure that signed integer conversion didn't underflow
+			if buildID < 0 {
+				logWithId.Errorf("BuildID integer underflow: %d", initArgs.BuildID)
+				return
+			}
+			err = impl.kojiFail(args.Server, buildID, initArgs.Token)
 			if err != nil {
 				logWithId.Errorf("Failing Koji job failed: %v", err)
 			}
@@ -305,13 +313,19 @@ func (impl *KojiFinalizeJobImpl) Run(job worker.Job) error {
 		}
 	}
 
+	// Make sure StartTime cannot overflow the int64 conversion
+	if args.StartTime > math.MaxInt64 {
+		return fmt.Errorf("StartTime integer overflow: %d", args.StartTime)
+	}
+	/* #nosec G115 */
+	startTime := int64(args.StartTime)
 	build := koji.Build{
 		BuildID:   initArgs.BuildID,
 		TaskID:    args.TaskID,
 		Name:      args.Name,
 		Version:   args.Version,
 		Release:   args.Release,
-		StartTime: int64(args.StartTime),
+		StartTime: startTime,
 		EndTime:   time.Now().Unix(),
 		Extra: koji.BuildExtra{
 			TypeInfo: koji.TypeInfoBuild{

cmd/osbuild-worker/main.go

@@ -39,7 +39,7 @@ type connectionConfig struct {
 
 type kojiServer struct {
 	creds              koji.GSSAPICredentials
-	relaxTimeoutFactor uint
+	relaxTimeoutFactor time.Duration
 }
 
 // Represents the implementation of a job type as defined by the worker API.