This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * Pterodactyl - Panel |
||
4 | * Copyright (c) 2015 - 2017 Dane Everitt <[email protected]>. |
||
5 | * |
||
6 | * Permission is hereby granted, free of charge, to any person obtaining a copy |
||
7 | * of this software and associated documentation files (the "Software"), to deal |
||
8 | * in the Software without restriction, including without limitation the rights |
||
9 | * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell |
||
10 | * copies of the Software, and to permit persons to whom the Software is |
||
11 | * furnished to do so, subject to the following conditions: |
||
12 | * |
||
13 | * The above copyright notice and this permission notice shall be included in all |
||
14 | * copies or substantial portions of the Software. |
||
15 | * |
||
16 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR |
||
17 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, |
||
18 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE |
||
19 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER |
||
20 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, |
||
21 | * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE |
||
22 | * SOFTWARE. |
||
23 | */ |
||
24 | |||
25 | namespace Pterodactyl\Services; |
||
26 | |||
27 | use DB; |
||
28 | use Pterodactyl\Models\Node; |
||
29 | use Pterodactyl\Models\Server; |
||
30 | use Pterodactyl\Models\Location; |
||
31 | use Pterodactyl\Exceptions\AutoDeploymentException; |
||
32 | |||
33 | class DeploymentService |
||
34 | { |
||
35 | /** |
||
36 | * Eloquent model representing the allocation to use. |
||
37 | * |
||
38 | * @var \Pterodactyl\Models\Allocation |
||
39 | */ |
||
40 | protected $allocation; |
||
41 | |||
42 | /** |
||
43 | * Amount of disk to be used by the server. |
||
44 | * |
||
45 | * @var int |
||
46 | */ |
||
47 | protected $disk; |
||
48 | |||
49 | /** |
||
50 | * Amount of memory to be used by the sever. |
||
51 | * |
||
52 | * @var int |
||
53 | */ |
||
54 | protected $memory; |
||
55 | |||
56 | /** |
||
57 | * Eloquent model representing the location to use. |
||
58 | * |
||
59 | * @var \Pterodactyl\Models\Location |
||
60 | */ |
||
61 | protected $location; |
||
62 | |||
63 | /** |
||
64 | * Eloquent model representing the node to use. |
||
65 | * |
||
66 | * @var \Pterodactyl\Models\Node |
||
67 | */ |
||
68 | protected $node; |
||
69 | |||
70 | /** |
||
71 | * Set the location to use when auto-deploying. |
||
72 | * |
||
73 | * @param int|\Pterodactyl\Models\Location $location |
||
74 | * @return void |
||
75 | */ |
||
76 | public function setLocation($location) |
||
77 | { |
||
78 | $this->location = ($location instanceof Location) ? $location : Location::with('nodes')->findOrFail($location); |
||
0 ignored issues
–
show
|
|||
79 | if (! $this->location->relationLoaded('nodes')) { |
||
80 | $this->location->load('nodes'); |
||
81 | } |
||
82 | |||
83 | if (count($this->location->nodes) < 1) { |
||
84 | throw new AutoDeploymentException('The location provided does not contain any nodes and cannot be used.'); |
||
85 | } |
||
86 | |||
87 | return $this; |
||
88 | } |
||
89 | |||
90 | /** |
||
91 | * Set the node to use when auto-deploying. |
||
92 | * |
||
93 | * @param int|\Pterodactyl\Models\Node $node |
||
94 | * @return void |
||
95 | */ |
||
96 | public function setNode($node) |
||
97 | { |
||
98 | $this->node = ($node instanceof Node) ? $node : Node::findOrFail($node); |
||
99 | if (! $this->node->relationLoaded('allocations')) { |
||
100 | $this->node->load('allocations'); |
||
101 | } |
||
102 | |||
103 | $this->setLocation($this->node->location); |
||
104 | |||
105 | return $this; |
||
106 | } |
||
107 | |||
108 | /** |
||
109 | * Set the amount of disk space to be used by the new server. |
||
110 | * |
||
111 | * @param int $disk |
||
112 | * @return void |
||
113 | */ |
||
114 | public function setDisk(int $disk) |
||
115 | { |
||
116 | $this->disk = $disk; |
||
117 | |||
118 | return $this; |
||
119 | } |
||
120 | |||
121 | /** |
||
122 | * Set the amount of memory to be used by the new server. |
||
123 | * |
||
124 | * @param int $memory |
||
125 | * @return void |
||
126 | */ |
||
127 | public function setMemory(int $memory) |
||
128 | { |
||
129 | $this->memory = $memory; |
||
130 | |||
131 | return $this; |
||
132 | } |
||
133 | |||
134 | /** |
||
135 | * Return a random location model. |
||
136 | * |
||
137 | * @param array $exclude |
||
138 | * @return void; |
||
0 ignored issues
–
show
The doc-type
void; could not be parsed: Expected "|" or "end of type", but got ";" at position 4. (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. ![]() |
|||
139 | */ |
||
140 | protected function findLocation(array $exclude = []) |
||
141 | { |
||
142 | $location = Location::with('nodes')->whereNotIn('id', $exclude)->inRandomOrder()->first(); |
||
143 | |||
144 | if (! $location) { |
||
145 | throw new AutoDeploymentException('Unable to locate a suitable location to select a node from.'); |
||
146 | } |
||
147 | |||
148 | if (count($location->nodes) < 1) { |
||
149 | return $this->findLocation(array_merge($exclude, [$location->id])); |
||
150 | } |
||
151 | |||
152 | $this->setLocation($location); |
||
153 | } |
||
154 | |||
155 | /** |
||
156 | * Return a model instance of a random node. |
||
157 | * |
||
158 | * @return void; |
||
0 ignored issues
–
show
The doc-type
void; could not be parsed: Expected "|" or "end of type", but got ";" at position 4. (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. ![]() |
|||
159 | */ |
||
160 | protected function findNode(array $exclude = []) |
||
161 | { |
||
162 | if (! $this->location) { |
||
163 | $this->setLocation($this->findLocation()); |
||
164 | } |
||
165 | |||
166 | $select = $this->location->nodes->whereNotIn('id', $exclude); |
||
167 | if (count($select) < 1) { |
||
168 | throw new AutoDeploymentException('Unable to find a suitable node within the assigned location with enough space.'); |
||
169 | } |
||
170 | |||
171 | // Check usage, select new node if necessary |
||
172 | $this->setNode($select->random()); |
||
173 | if (! $this->checkNodeUsage()) { |
||
174 | return $this->findNode(array_merge($exclude, [$this->node()->id])); |
||
175 | } |
||
176 | } |
||
177 | |||
178 | /** |
||
179 | * Checks that a node's allocation limits will not be passed |
||
180 | * with the assigned limits. |
||
181 | * |
||
182 | * @return bool |
||
183 | */ |
||
184 | protected function checkNodeUsage() |
||
185 | { |
||
186 | if (! $this->disk && ! $this->memory) { |
||
187 | return true; |
||
188 | } |
||
189 | |||
190 | $totals = Server::select(DB::raw('SUM(memory) as memory, SUM(disk) as disk'))->where('node_id', $this->node()->id)->first(); |
||
191 | |||
192 | if ($this->memory) { |
||
193 | $limit = ($this->node()->memory * (1 + ($this->node()->memory_overallocate / 100))); |
||
194 | |||
195 | if (($totals->memory + $this->memory) > $limit) { |
||
196 | return false; |
||
197 | } |
||
198 | } |
||
199 | |||
200 | if ($this->disk) { |
||
201 | $limit = ($this->node()->disk * (1 + ($this->node()->disk_overallocate / 100))); |
||
202 | |||
203 | if (($totals->disk + $this->disk) > $limit) { |
||
204 | return false; |
||
205 | } |
||
206 | } |
||
207 | |||
208 | return true; |
||
209 | } |
||
210 | |||
211 | /** |
||
212 | * Return the assigned node for this auto-deployment. |
||
213 | * |
||
214 | * @return \Pterodactyl\Models\Node |
||
215 | */ |
||
216 | public function node() |
||
217 | { |
||
218 | return $this->node; |
||
219 | } |
||
220 | |||
221 | /** |
||
222 | * Return the assigned location for this auto-deployment. |
||
223 | * |
||
224 | * @return \Pterodactyl\Models\Location |
||
225 | */ |
||
226 | public function location() |
||
227 | { |
||
228 | return $this->location; |
||
229 | } |
||
230 | |||
231 | /** |
||
232 | * Return the assigned location for this auto-deployment. |
||
233 | * |
||
234 | * @return \Pterodactyl\Models\Allocation |
||
235 | */ |
||
236 | public function allocation() |
||
237 | { |
||
238 | return $this->allocation; |
||
239 | } |
||
240 | |||
241 | /** |
||
242 | * Select and return the node to be used by the auto-deployment system. |
||
243 | * |
||
244 | * @return void |
||
245 | */ |
||
246 | public function select() |
||
247 | { |
||
248 | if (! $this->node) { |
||
249 | $this->findNode(); |
||
250 | } |
||
251 | |||
252 | // Set the Allocation |
||
253 | $this->allocation = $this->node()->allocations->where('server_id', null)->random(); |
||
254 | if (! $this->allocation) { |
||
255 | throw new AutoDeploymentException('Unable to find a suitable allocation to assign to this server.'); |
||
256 | } |
||
257 | } |
||
258 | } |
||
259 |
It seems like the method you are trying to call exists only in some of the possible types.
Let’s take a look at an example:
Available Fixes
Add an additional type-check:
Only allow a single type to be passed if the variable comes from a parameter: