xiaoxia
fe2ab121e7
CI/CD Pipeline / Validate Code Quality And Tests (push) Failing after 40s
CI/CD Pipeline / Unit Tests (push) Failing after 1m42s
CI/CD Pipeline / Integration Tests (push) Successful in 1m20s
CI/CD Pipeline / Frontend Lint (push) Has been cancelled
CI/CD Pipeline / Build Staging API Image (push) Has been cancelled
CI/CD Pipeline / Build Staging Worker Image (push) Has been cancelled
CI/CD Pipeline / Build Staging Web Image (push) Has been cancelled
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (push) Has been cancelled
CI/CD Pipeline / Staging E2E Tests (push) Has been cancelled
CI/CD Pipeline / Staging API Integration Tests (push) Has been cancelled
CI/CD Pipeline / Build Production API Image (push) Has been cancelled
CI/CD Pipeline / Build Production Worker Image (push) Has been cancelled
CI/CD Pipeline / Build Production Web Image (push) Has been cancelled
CI/CD Pipeline / Deploy Production (push) Has been cancelled
CI/CD Pipeline / Production Browser E2E (push) Has been cancelled
fix(security): 后端安全技术债务第二轮（P1+P2+P2） - audio_merger裸subprocess下沉 + ffmpeg_utils架构下沉到packages/shared - _verify_url_accessible重定向每跳SSRF校验 - url_security下载文件魔数校验 - 新增33个单测
80 lines
3.0 KiB
Python
Executable File
80 lines
3.0 KiB
Python
Executable File
"""FFmpeg 共享工具 — packages/shared 层.
|
|
|
|
仅包含与业务无关的底层原语：FFmpeg/FFprobe 二进制路径、run_ffmpeg 执行器。
|
|
业务相关的滤镜构建、视频探测等留在 apps/worker/video_processing/ffmpeg_utils.py。
|
|
|
|
application 层和 worker 层都可以引用本模块，避免跨层依赖。
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
import shutil
|
|
import subprocess # nosec B404
|
|
from pathlib import Path
|
|
from typing import Any
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
# ── 常量 ──────────────────────────────────────────────────────────────────────
|
|
|
|
FFMPEG_BIN: str = shutil.which("ffmpeg") or "ffmpeg"
|
|
FFPROBE_BIN: str = shutil.which("ffprobe") or "ffprobe"
|
|
|
|
# FFmpeg 执行默认超时（秒），防止 FFmpeg hang 住导致进程永久阻塞
|
|
# 默认 30 分钟，足够处理大部分短视频渲染；超长视频可单独传参覆盖
|
|
DEFAULT_FFMPEG_TIMEOUT = 1800
|
|
|
|
|
|
# ── FFmpeg 执行 ───────────────────────────────────────────────────────────────
|
|
|
|
|
|
def run_ffmpeg(
|
|
command: list[str],
|
|
*,
|
|
capture_output: bool = True,
|
|
timeout: int | None = DEFAULT_FFMPEG_TIMEOUT,
|
|
) -> tuple[str, str]:
|
|
"""执行 FFmpeg 命令（统一入口）。
|
|
|
|
Args:
|
|
command: 完整的 ffmpeg 命令列表（含 "ffmpeg" 本身）
|
|
capture_output: 是否捕获 stdout/stderr
|
|
timeout: 超时时间（秒），默认 1800s（30分钟）；None 表示不设超时（不推荐）
|
|
|
|
Returns:
|
|
(stdout, stderr) 元组
|
|
|
|
Raises:
|
|
subprocess.CalledProcessError: 命令执行失败时抛出，
|
|
异常信息包含完整 stderr 以便排查。
|
|
subprocess.TimeoutExpired: 超时未完成时抛出，FFmpeg 进程会被 kill。
|
|
"""
|
|
try:
|
|
result = subprocess.run( # nosec B603
|
|
command,
|
|
check=True,
|
|
stdout=subprocess.PIPE if capture_output else None,
|
|
stderr=subprocess.PIPE if capture_output else None,
|
|
text=True,
|
|
timeout=timeout,
|
|
)
|
|
return (result.stdout or "", result.stderr or "")
|
|
except subprocess.TimeoutExpired:
|
|
logger.error(
|
|
"FFmpeg 命令超时 (%ds): command=%s",
|
|
timeout or -1,
|
|
" ".join(str(c) for c in command[:20]),
|
|
)
|
|
raise
|
|
except subprocess.CalledProcessError as e:
|
|
# 把完整 stderr 打到日志，方便排查 exit code 183 等问题
|
|
stderr_text = (e.stderr or "").strip()
|
|
logger.error(
|
|
"FFmpeg 命令失败: exit_code=%d command=%s\nstderr:\n%s",
|
|
e.returncode,
|
|
" ".join(str(c) for c in command[:20]), # 截断过长的命令
|
|
stderr_text[:5000], # 截断过长的 stderr
|
|
)
|
|
raise
|