[PR #7311/a6c1a8ec backport][3.103] Harden RepositoryVersion against memoization issues

CHANGES/plugin_api/7272.bugfix

@@ -0,0 +1 @@
+Harden RepositoryVersion memoization against bugs that could lead to incorrect counts and repository content.

pulpcore/app/models/repository.py

@@ -1069,6 +1069,7 @@ def add_content(self, content):
                 complete RepositoryVersion
         """
 
+        assert issubclass(content.model, Content)
         if self.complete:
             raise ResourceImmutableError(self)
 
@@ -1077,6 +1078,7 @@ def add_content(self, content):
             .exclude(pulp_domain_id=get_domain_pk())
             .exists()
         )
+
         repo_content = []
         to_add = set(content.values_list("pk", flat=True)) - set(self._get_content_ids())
         with transaction.atomic():
@@ -1115,12 +1117,14 @@ def remove_content(self, content):
                 complete RepositoryVersion
         """
 
+        assert issubclass(content.model, Content)
         if self.complete:
             raise ResourceImmutableError(self)
 
         if not content or not content.count():
             return
 
+        # check that all content is within the current domain
         assert (
             not Content.objects.filter(pk__in=content)
             .exclude(pulp_domain_id=get_domain_pk())
@@ -1158,6 +1162,7 @@ def set_content(self, content):
             pulpcore.exception.ResourceImmutableError: if set_content is called on a
                 complete RepositoryVersion
         """
+        assert issubclass(content.model, Content)
         self.remove_content(self.content.exclude(pk__in=content))
         self.add_content(content.exclude(pk__in=self.content))
 
@@ -1307,6 +1312,9 @@ def _compute_counts(self):
         objects and makes new ones with each call.
         """
         with transaction.atomic():
+            # relatively inexpensive sanity check for memoization
+            assert len(self.content_ids) == self._content_relationships().count()
+            # delete existing content details and recompute them all
             RepositoryVersionContentDetails.objects.filter(repository_version=self).delete()
             counts_list = []
             for value, name in RepositoryVersionContentDetails.COUNT_TYPE_CHOICES: