Error out when user doesn't have access permission to the repository
[git/jnareb-git/bp-gitweb.git] / connect.c
blob3aefd4ace590082b85bd3c4b9b41b8d1f1c72268
1 #include "git-compat-util.h"
2 #include "cache.h"
3 #include "pkt-line.h"
4 #include "quote.h"
5 #include "refs.h"
6 #include "run-command.h"
7 #include "remote.h"
9 static char *server_capabilities;
11 static int check_ref(const char *name, int len, unsigned int flags)
13 if (!flags)
14 return 1;
16 if (len < 5 || memcmp(name, "refs/", 5))
17 return 0;
19 /* Skip the "refs/" part */
20 name += 5;
21 len -= 5;
23 /* REF_NORMAL means that we don't want the magic fake tag refs */
24 if ((flags & REF_NORMAL) && check_ref_format(name) < 0)
25 return 0;
27 /* REF_HEADS means that we want regular branch heads */
28 if ((flags & REF_HEADS) && !memcmp(name, "heads/", 6))
29 return 1;
31 /* REF_TAGS means that we want tags */
32 if ((flags & REF_TAGS) && !memcmp(name, "tags/", 5))
33 return 1;
35 /* All type bits clear means that we are ok with anything */
36 return !(flags & ~REF_NORMAL);
39 int check_ref_type(const struct ref *ref, int flags)
41 return check_ref(ref->name, strlen(ref->name), flags);
45 * Read all the refs from the other end
47 struct ref **get_remote_heads(int in, struct ref **list,
48 int nr_match, char **match,
49 unsigned int flags)
51 *list = NULL;
52 for (;;) {
53 struct ref *ref;
54 unsigned char old_sha1[20];
55 static char buffer[1000];
56 char *name;
57 int len, name_len;
59 len = packet_read_line(in, buffer, sizeof(buffer));
60 if (!len)
61 break;
62 if (buffer[len-1] == '\n')
63 buffer[--len] = 0;
65 if (len < 42 || get_sha1_hex(buffer, old_sha1) || buffer[40] != ' ')
66 die("protocol error: expected sha/ref, got '%s'", buffer);
67 name = buffer + 41;
69 name_len = strlen(name);
70 if (len != name_len + 41) {
71 if (server_capabilities)
72 free(server_capabilities);
73 server_capabilities = xstrdup(name + name_len + 1);
76 if (!check_ref(name, name_len, flags))
77 continue;
78 if (nr_match && !path_match(name, nr_match, match))
79 continue;
80 ref = alloc_ref(name_len + 1);
81 hashcpy(ref->old_sha1, old_sha1);
82 memcpy(ref->name, buffer + 41, name_len + 1);
83 *list = ref;
84 list = &ref->next;
86 return list;
89 int server_supports(const char *feature)
91 return server_capabilities &&
92 strstr(server_capabilities, feature) != NULL;
95 int get_ack(int fd, unsigned char *result_sha1)
97 static char line[1000];
98 int len = packet_read_line(fd, line, sizeof(line));
100 if (!len)
101 die("git-fetch-pack: expected ACK/NAK, got EOF");
102 if (line[len-1] == '\n')
103 line[--len] = 0;
104 if (!strcmp(line, "NAK"))
105 return 0;
106 if (!prefixcmp(line, "ACK ")) {
107 if (!get_sha1_hex(line+4, result_sha1)) {
108 if (strstr(line+45, "continue"))
109 return 2;
110 return 1;
113 die("git-fetch_pack: expected ACK/NAK, got '%s'", line);
116 int path_match(const char *path, int nr, char **match)
118 int i;
119 int pathlen = strlen(path);
121 for (i = 0; i < nr; i++) {
122 char *s = match[i];
123 int len = strlen(s);
125 if (!len || len > pathlen)
126 continue;
127 if (memcmp(path + pathlen - len, s, len))
128 continue;
129 if (pathlen > len && path[pathlen - len - 1] != '/')
130 continue;
131 *s = 0;
132 return (i + 1);
134 return 0;
137 enum protocol {
138 PROTO_LOCAL = 1,
139 PROTO_SSH,
140 PROTO_GIT,
143 static enum protocol get_protocol(const char *name)
145 if (!strcmp(name, "ssh"))
146 return PROTO_SSH;
147 if (!strcmp(name, "git"))
148 return PROTO_GIT;
149 if (!strcmp(name, "git+ssh"))
150 return PROTO_SSH;
151 if (!strcmp(name, "ssh+git"))
152 return PROTO_SSH;
153 if (!strcmp(name, "file"))
154 return PROTO_LOCAL;
155 die("I don't handle protocol '%s'", name);
158 #define STR_(s) # s
159 #define STR(s) STR_(s)
161 #ifndef NO_IPV6
163 static const char *ai_name(const struct addrinfo *ai)
165 static char addr[INET_ADDRSTRLEN];
166 if ( AF_INET == ai->ai_family ) {
167 struct sockaddr_in *in;
168 in = (struct sockaddr_in *)ai->ai_addr;
169 inet_ntop(ai->ai_family, &in->sin_addr, addr, sizeof(addr));
170 } else if ( AF_INET6 == ai->ai_family ) {
171 struct sockaddr_in6 *in;
172 in = (struct sockaddr_in6 *)ai->ai_addr;
173 inet_ntop(ai->ai_family, &in->sin6_addr, addr, sizeof(addr));
174 } else {
175 strcpy(addr, "(unknown)");
177 return addr;
181 * Returns a connected socket() fd, or else die()s.
183 static int git_tcp_connect_sock(char *host, int flags)
185 int sockfd = -1, saved_errno = 0;
186 char *colon, *end;
187 const char *port = STR(DEFAULT_GIT_PORT);
188 struct addrinfo hints, *ai0, *ai;
189 int gai;
190 int cnt = 0;
192 if (host[0] == '[') {
193 end = strchr(host + 1, ']');
194 if (end) {
195 *end = 0;
196 end++;
197 host++;
198 } else
199 end = host;
200 } else
201 end = host;
202 colon = strchr(end, ':');
204 if (colon) {
205 *colon = 0;
206 port = colon + 1;
207 if (!*port)
208 port = "<none>";
211 memset(&hints, 0, sizeof(hints));
212 hints.ai_socktype = SOCK_STREAM;
213 hints.ai_protocol = IPPROTO_TCP;
215 if (flags & CONNECT_VERBOSE)
216 fprintf(stderr, "Looking up %s ... ", host);
218 gai = getaddrinfo(host, port, &hints, &ai);
219 if (gai)
220 die("Unable to look up %s (port %s) (%s)", host, port, gai_strerror(gai));
222 if (flags & CONNECT_VERBOSE)
223 fprintf(stderr, "done.\nConnecting to %s (port %s) ... ", host, port);
225 for (ai0 = ai; ai; ai = ai->ai_next) {
226 sockfd = socket(ai->ai_family,
227 ai->ai_socktype, ai->ai_protocol);
228 if (sockfd < 0) {
229 saved_errno = errno;
230 continue;
232 if (connect(sockfd, ai->ai_addr, ai->ai_addrlen) < 0) {
233 saved_errno = errno;
234 fprintf(stderr, "%s[%d: %s]: errno=%s\n",
235 host,
236 cnt,
237 ai_name(ai),
238 strerror(saved_errno));
239 close(sockfd);
240 sockfd = -1;
241 continue;
243 if (flags & CONNECT_VERBOSE)
244 fprintf(stderr, "%s ", ai_name(ai));
245 break;
248 freeaddrinfo(ai0);
250 if (sockfd < 0)
251 die("unable to connect a socket (%s)", strerror(saved_errno));
253 if (flags & CONNECT_VERBOSE)
254 fprintf(stderr, "done.\n");
256 return sockfd;
259 #else /* NO_IPV6 */
262 * Returns a connected socket() fd, or else die()s.
264 static int git_tcp_connect_sock(char *host, int flags)
266 int sockfd = -1, saved_errno = 0;
267 char *colon, *end;
268 char *port = STR(DEFAULT_GIT_PORT), *ep;
269 struct hostent *he;
270 struct sockaddr_in sa;
271 char **ap;
272 unsigned int nport;
273 int cnt;
275 if (host[0] == '[') {
276 end = strchr(host + 1, ']');
277 if (end) {
278 *end = 0;
279 end++;
280 host++;
281 } else
282 end = host;
283 } else
284 end = host;
285 colon = strchr(end, ':');
287 if (colon) {
288 *colon = 0;
289 port = colon + 1;
292 if (flags & CONNECT_VERBOSE)
293 fprintf(stderr, "Looking up %s ... ", host);
295 he = gethostbyname(host);
296 if (!he)
297 die("Unable to look up %s (%s)", host, hstrerror(h_errno));
298 nport = strtoul(port, &ep, 10);
299 if ( ep == port || *ep ) {
300 /* Not numeric */
301 struct servent *se = getservbyname(port,"tcp");
302 if ( !se )
303 die("Unknown port %s\n", port);
304 nport = se->s_port;
307 if (flags & CONNECT_VERBOSE)
308 fprintf(stderr, "done.\nConnecting to %s (port %s) ... ", host, port);
310 for (cnt = 0, ap = he->h_addr_list; *ap; ap++, cnt++) {
311 sockfd = socket(he->h_addrtype, SOCK_STREAM, 0);
312 if (sockfd < 0) {
313 saved_errno = errno;
314 continue;
317 memset(&sa, 0, sizeof sa);
318 sa.sin_family = he->h_addrtype;
319 sa.sin_port = htons(nport);
320 memcpy(&sa.sin_addr, *ap, he->h_length);
322 if (connect(sockfd, (struct sockaddr *)&sa, sizeof sa) < 0) {
323 saved_errno = errno;
324 fprintf(stderr, "%s[%d: %s]: errno=%s\n",
325 host,
326 cnt,
327 inet_ntoa(*(struct in_addr *)&sa.sin_addr),
328 strerror(saved_errno));
329 close(sockfd);
330 sockfd = -1;
331 continue;
333 if (flags & CONNECT_VERBOSE)
334 fprintf(stderr, "%s ",
335 inet_ntoa(*(struct in_addr *)&sa.sin_addr));
336 break;
339 if (sockfd < 0)
340 die("unable to connect a socket (%s)", strerror(saved_errno));
342 if (flags & CONNECT_VERBOSE)
343 fprintf(stderr, "done.\n");
345 return sockfd;
348 #endif /* NO_IPV6 */
351 static void git_tcp_connect(int fd[2], char *host, int flags)
353 int sockfd = git_tcp_connect_sock(host, flags);
355 fd[0] = sockfd;
356 fd[1] = dup(sockfd);
360 static char *git_proxy_command;
361 static const char *rhost_name;
362 static int rhost_len;
364 static int git_proxy_command_options(const char *var, const char *value)
366 if (!strcmp(var, "core.gitproxy")) {
367 const char *for_pos;
368 int matchlen = -1;
369 int hostlen;
371 if (git_proxy_command)
372 return 0;
373 /* [core]
374 * ;# matches www.kernel.org as well
375 * gitproxy = netcatter-1 for kernel.org
376 * gitproxy = netcatter-2 for sample.xz
377 * gitproxy = netcatter-default
379 for_pos = strstr(value, " for ");
380 if (!for_pos)
381 /* matches everybody */
382 matchlen = strlen(value);
383 else {
384 hostlen = strlen(for_pos + 5);
385 if (rhost_len < hostlen)
386 matchlen = -1;
387 else if (!strncmp(for_pos + 5,
388 rhost_name + rhost_len - hostlen,
389 hostlen) &&
390 ((rhost_len == hostlen) ||
391 rhost_name[rhost_len - hostlen -1] == '.'))
392 matchlen = for_pos - value;
393 else
394 matchlen = -1;
396 if (0 <= matchlen) {
397 /* core.gitproxy = none for kernel.org */
398 if (matchlen == 4 &&
399 !memcmp(value, "none", 4))
400 matchlen = 0;
401 git_proxy_command = xmemdupz(value, matchlen);
403 return 0;
406 return git_default_config(var, value);
409 static int git_use_proxy(const char *host)
411 rhost_name = host;
412 rhost_len = strlen(host);
413 git_proxy_command = getenv("GIT_PROXY_COMMAND");
414 git_config(git_proxy_command_options);
415 rhost_name = NULL;
416 return (git_proxy_command && *git_proxy_command);
419 static void git_proxy_connect(int fd[2], char *host)
421 const char *port = STR(DEFAULT_GIT_PORT);
422 char *colon, *end;
423 const char *argv[4];
424 struct child_process proxy;
426 if (host[0] == '[') {
427 end = strchr(host + 1, ']');
428 if (end) {
429 *end = 0;
430 end++;
431 host++;
432 } else
433 end = host;
434 } else
435 end = host;
436 colon = strchr(end, ':');
438 if (colon) {
439 *colon = 0;
440 port = colon + 1;
443 argv[0] = git_proxy_command;
444 argv[1] = host;
445 argv[2] = port;
446 argv[3] = NULL;
447 memset(&proxy, 0, sizeof(proxy));
448 proxy.argv = argv;
449 proxy.in = -1;
450 proxy.out = -1;
451 if (start_command(&proxy))
452 die("cannot start proxy %s", argv[0]);
453 fd[0] = proxy.out; /* read from proxy stdout */
454 fd[1] = proxy.in; /* write to proxy stdin */
457 #define MAX_CMD_LEN 1024
459 char *get_port(char *host)
461 char *end;
462 char *p = strchr(host, ':');
464 if (p) {
465 strtol(p+1, &end, 10);
466 if (*end == '\0') {
467 *p = '\0';
468 return p+1;
472 return NULL;
476 * This returns NULL if the transport protocol does not need fork(2), or a
477 * struct child_process object if it does. Once done, finish the connection
478 * with finish_connect() with the value returned from this function
479 * (it is safe to call finish_connect() with NULL to support the former
480 * case).
482 * If it returns, the connect is successful; it just dies on errors.
484 struct child_process *git_connect(int fd[2], const char *url_orig,
485 const char *prog, int flags)
487 char *url = xstrdup(url_orig);
488 char *host, *path = url;
489 char *end;
490 int c;
491 struct child_process *conn;
492 enum protocol protocol = PROTO_LOCAL;
493 int free_path = 0;
494 char *port = NULL;
495 const char **arg;
496 struct strbuf cmd;
498 /* Without this we cannot rely on waitpid() to tell
499 * what happened to our children.
501 signal(SIGCHLD, SIG_DFL);
503 host = strstr(url, "://");
504 if(host) {
505 *host = '\0';
506 protocol = get_protocol(url);
507 host += 3;
508 c = '/';
509 } else {
510 host = url;
511 c = ':';
514 if (host[0] == '[') {
515 end = strchr(host + 1, ']');
516 if (end) {
517 *end = 0;
518 end++;
519 host++;
520 } else
521 end = host;
522 } else
523 end = host;
525 path = strchr(end, c);
526 if (path) {
527 if (c == ':') {
528 protocol = PROTO_SSH;
529 *path++ = '\0';
531 } else
532 path = end;
534 if (!path || !*path)
535 die("No path specified. See 'man git-pull' for valid url syntax");
538 * null-terminate hostname and point path to ~ for URL's like this:
539 * ssh://host.xz/~user/repo
541 if (protocol != PROTO_LOCAL && host != url) {
542 char *ptr = path;
543 if (path[1] == '~')
544 path++;
545 else {
546 path = xstrdup(ptr);
547 free_path = 1;
550 *ptr = '\0';
554 * Add support for ssh port: ssh://host.xy:<port>/...
556 if (protocol == PROTO_SSH && host != url)
557 port = get_port(host);
559 if (protocol == PROTO_GIT) {
560 /* These underlying connection commands die() if they
561 * cannot connect.
563 char *target_host = xstrdup(host);
564 if (git_use_proxy(host))
565 git_proxy_connect(fd, host);
566 else
567 git_tcp_connect(fd, host, flags);
569 * Separate original protocol components prog and path
570 * from extended components with a NUL byte.
572 packet_write(fd[1],
573 "%s %s%chost=%s%c",
574 prog, path, 0,
575 target_host, 0);
576 free(target_host);
577 free(url);
578 if (free_path)
579 free(path);
580 return NULL;
583 conn = xcalloc(1, sizeof(*conn));
585 strbuf_init(&cmd, MAX_CMD_LEN);
586 strbuf_addstr(&cmd, prog);
587 strbuf_addch(&cmd, ' ');
588 sq_quote_buf(&cmd, path);
589 if (cmd.len >= MAX_CMD_LEN)
590 die("command line too long");
592 conn->in = conn->out = -1;
593 conn->argv = arg = xcalloc(6, sizeof(*arg));
594 if (protocol == PROTO_SSH) {
595 const char *ssh = getenv("GIT_SSH");
596 if (!ssh) ssh = "ssh";
598 *arg++ = ssh;
599 if (port) {
600 *arg++ = "-p";
601 *arg++ = port;
603 *arg++ = host;
605 else {
606 /* remove these from the environment */
607 const char *env[] = {
608 ALTERNATE_DB_ENVIRONMENT,
609 DB_ENVIRONMENT,
610 GIT_DIR_ENVIRONMENT,
611 GIT_WORK_TREE_ENVIRONMENT,
612 GRAFT_ENVIRONMENT,
613 INDEX_ENVIRONMENT,
614 NULL
616 conn->env = env;
617 *arg++ = "sh";
618 *arg++ = "-c";
620 *arg++ = cmd.buf;
621 *arg = NULL;
623 if (start_command(conn))
624 die("unable to fork");
626 fd[0] = conn->out; /* read from child's stdout */
627 fd[1] = conn->in; /* write to child's stdin */
628 strbuf_release(&cmd);
629 free(url);
630 if (free_path)
631 free(path);
632 return conn;
635 int finish_connect(struct child_process *conn)
637 int code;
638 if (!conn)
639 return 0;
641 code = finish_command(conn);
642 free(conn->argv);
643 free(conn);
644 return code;