Verify package name(s) when using an update whitelist

doc/03-cli.md

@@ -70,6 +70,10 @@ If you just want to update a few packages and not all, you can list them as such
 
     $ php composer.phar update vendor/package vendor/package2
 
+To rewrite the lock file without updating any packages:
+
+    $ php composer.phar update nothing
+
 ### Options
 
 * **--prefer-source:** Install packages from `source` when available.

src/Composer/Command/RequireCommand.php

@@ -100,7 +100,7 @@ protected function execute(InputInterface $input, OutputInterface $output)
             ->setPreferSource($input->getOption('prefer-source'))
             ->setDevMode($input->getOption('dev'))
             ->setUpdate(true)
-            ->setUpdateWhitelist($requirements);
+            ->setUpdateWhitelist(array_keys($requirements));
         ;
 
         return $install->run() ? 0 : 1;

src/Composer/Command/UpdateCommand.php

@@ -12,6 +12,7 @@
 
 namespace Composer\Command;
 
+use Composer\Exception\UnknownPackageException;
 use Composer\Installer;
 use Symfony\Component\Console\Input\InputInterface;
 use Symfony\Component\Console\Input\InputOption;
@@ -59,15 +60,21 @@ protected function execute(InputInterface $input, OutputInterface $output)
         $io = $this->getIO();
         $install = Installer::create($io, $composer);
 
-        $install
-            ->setDryRun($input->getOption('dry-run'))
-            ->setVerbose($input->getOption('verbose'))
-            ->setPreferSource($input->getOption('prefer-source'))
-            ->setDevMode($input->getOption('dev'))
-            ->setRunScripts(!$input->getOption('no-scripts'))
-            ->setUpdate(true)
-            ->setUpdateWhitelist($input->getArgument('packages'))
-        ;
+        try {
+            $install
+                ->setDryRun($input->getOption('dry-run'))
+                ->setVerbose($input->getOption('verbose'))
+                ->setPreferSource($input->getOption('prefer-source'))
+                ->setDevMode($input->getOption('dev'))
+                ->setRunScripts(!$input->getOption('no-scripts'))
+                ->setUpdate(true)
+                ->setUpdateWhitelist($input->getArgument('packages'))
+            ;
+        } catch (UnknownPackageException $e) {
+            $io->write('<error>' . $e->getMessage() . '</error>');
+
+            return 1;
+        }
 
         if ($input->getOption('no-custom-installers')) {
             $install->disableCustomInstallers();

src/Composer/Exception/UnknownPackageException.php

@@ -0,0 +1,24 @@
+<?php
+
+/*
+* This file is part of Composer.
+*
+* (c) Nils Adermann <naderman@naderman.de>
+*     Jordi Boggiano <j.boggiano@seld.be>
+*
+* For the full copyright and license information, please view the LICENSE
+* file that was distributed with this source code.
+*/
+
+namespace Composer\Exception;
+
+/**
+ * Unknown package exception.
+ *
+ * Used when a package isn't found in a list of valid packages.
+ *
+ * @author Chris Wilkinson <chriswilkinson84@gmail.com>
+ */
+class UnknownPackageException extends \UnexpectedValueException
+{
+}

src/Composer/Installer.php

@@ -20,6 +20,7 @@
 use Composer\DependencyResolver\Solver;
 use Composer\DependencyResolver\SolverProblemsException;
 use Composer\Downloader\DownloadManager;
+use Composer\Exception\UnknownPackageException;
 use Composer\Installer\InstallationManager;
 use Composer\Config;
 use Composer\Installer\NoopInstaller;
@@ -740,12 +741,44 @@ public function setVerbose($verbose = true)
      * restrict the update operation to a few packages, all other packages
      * that are already installed will be kept at their current version
      *
-     * @param  array     $packages
+     * @param  array $packages Array of package names
      * @return Installer
+     * @throws UnknownPackageException If a package name is not known
      */
     public function setUpdateWhitelist(array $packages)
     {
-        $this->updateWhitelist = array_flip(array_map('strtolower', $packages));
+        if (count($packages) === 0) {
+            $this->updateWhitelist = array();
+            return $this;
+        }
+
+        $lowercasePackages = array_map('strtolower', $packages);
+
+        if (count($packages) > 1 || $packages[0] !== 'nothing') {
+            $knownPackages = array();
+            foreach ($this->repositoryManager->getLocalRepository()->getPackages() as $localPackage) {
+                $knownPackages = array_merge($knownPackages, $localPackage->getNames());
+            }
+            foreach ($this->package->getRequires() as $requiredPackage) {
+                $knownPackages[] = $requiredPackage->getTarget();
+            }
+            if ($this->devMode) {
+                foreach ($this->repositoryManager->getLocalDevRepository()->getPackages() as $localPackage) {
+                    $knownPackages = array_merge($knownPackages, $localPackage->getNames());
+                }
+                foreach ($this->package->getDevRequires() as $requiredPackage) {
+                    $knownPackages[] = $requiredPackage->getTarget();
+                }
+            }
+
+            foreach ($lowercasePackages as $key => $package) {
+                if (!in_array($package, $knownPackages)) {
+                    throw new UnknownPackageException('Package ' . $packages[$key] . ' not known');
+                }
+            }
+        }
+
+        $this->updateWhitelist = array_flip($lowercasePackages);
 
         return $this;
     }