refs.c

   1 #include "refs.h"
   2 #include "cache.h"
   3
   4 #include <errno.h>
   5
   6 struct ref_list {
   7         struct ref_list *next;
   8         unsigned char flag; /* ISSYMREF? ISPACKED? */
   9         unsigned char sha1[20];
  10         char name[FLEX_ARRAY];
  11 };
  12
  13 static const char *parse_ref_line(char *line, unsigned char *sha1)
  14 {
  15         /*
  16          * 42: the answer to everything.
  17          *
  18          * In this case, it happens to be the answer to
  19          *  40 (length of sha1 hex representation)
  20          *  +1 (space in between hex and name)
  21          *  +1 (newline at the end of the line)
  22          */
  23         int len = strlen(line) - 42;
  24
  25         if (len <= 0)
  26                 return NULL;
  27         if (get_sha1_hex(line, sha1) < 0)
  28                 return NULL;
  29         if (!isspace(line[40]))
  30                 return NULL;
  31         line += 41;
  32         if (isspace(*line))
  33                 return NULL;
  34         if (line[len] != '\n')
  35                 return NULL;
  36         line[len] = 0;
  37         return line;
  38 }
  39
  40 static struct ref_list *add_ref(const char *name, const unsigned char *sha1,
  41                                 int flag, struct ref_list *list)
  42 {
  43         int len;
  44         struct ref_list **p = &list, *entry;
  45
  46         /* Find the place to insert the ref into.. */
  47         while ((entry = *p) != NULL) {
  48                 int cmp = strcmp(entry->name, name);
  49                 if (cmp > 0)
  50                         break;
  51
  52                 /* Same as existing entry? */
  53                 if (!cmp)
  54                         return list;
  55                 p = &entry->next;
  56         }
  57
  58         /* Allocate it and add it in.. */
  59         len = strlen(name) + 1;
  60         entry = xmalloc(sizeof(struct ref_list) + len);
  61         hashcpy(entry->sha1, sha1);
  62         memcpy(entry->name, name, len);
  63         entry->flag = flag;
  64         entry->next = *p;
  65         *p = entry;
  66         return list;
  67 }
  68
  69 /*
  70  * Future: need to be in "struct repository"
  71  * when doing a full libification.
  72  */
  73 struct cached_refs {
  74         char did_loose;
  75         char did_packed;
  76         struct ref_list *loose;
  77         struct ref_list *packed;
  78 } cached_refs;
  79
  80 static void free_ref_list(struct ref_list *list)
  81 {
  82         struct ref_list *next;
  83         for ( ; list; list = next) {
  84                 next = list->next;
  85                 free(list);
  86         }
  87 }
  88
  89 static void invalidate_cached_refs(void)
  90 {
  91         struct cached_refs *ca = &cached_refs;
  92
  93         if (ca->did_loose && ca->loose)
  94                 free_ref_list(ca->loose);
  95         if (ca->did_packed && ca->packed)
  96                 free_ref_list(ca->packed);
  97         ca->loose = ca->packed = NULL;
  98         ca->did_loose = ca->did_packed = 0;
  99 }
 100
 101 static struct ref_list *get_packed_refs(void)
 102 {
 103         if (!cached_refs.did_packed) {
 104                 struct ref_list *refs = NULL;
 105                 FILE *f = fopen(git_path("packed-refs"), "r");
 106                 if (f) {
 107                         struct ref_list *list = NULL;
 108                         char refline[PATH_MAX];
 109                         while (fgets(refline, sizeof(refline), f)) {
 110                                 unsigned char sha1[20];
 111                                 const char *name = parse_ref_line(refline, sha1);
 112                                 if (!name)
 113                                         continue;
 114                                 list = add_ref(name, sha1, REF_ISPACKED, list);
 115                         }
 116                         fclose(f);
 117                         refs = list;
 118                 }
 119                 cached_refs.packed = refs;
 120                 cached_refs.did_packed = 1;
 121         }
 122         return cached_refs.packed;
 123 }
 124
 125 static struct ref_list *get_ref_dir(const char *base, struct ref_list *list)
 126 {
 127         DIR *dir = opendir(git_path("%s", base));
 128
 129         if (dir) {
 130                 struct dirent *de;
 131                 int baselen = strlen(base);
 132                 char *ref = xmalloc(baselen + 257);
 133
 134                 memcpy(ref, base, baselen);
 135                 if (baselen && base[baselen-1] != '/')
 136                         ref[baselen++] = '/';
 137
 138                 while ((de = readdir(dir)) != NULL) {
 139                         unsigned char sha1[20];
 140                         struct stat st;
 141                         int flag;
 142                         int namelen;
 143
 144                         if (de->d_name[0] == '.')
 145                                 continue;
 146                         namelen = strlen(de->d_name);
 147                         if (namelen > 255)
 148                                 continue;
 149                         if (has_extension(de->d_name, ".lock"))
 150                                 continue;
 151                         memcpy(ref + baselen, de->d_name, namelen+1);
 152                         if (stat(git_path("%s", ref), &st) < 0)
 153                                 continue;
 154                         if (S_ISDIR(st.st_mode)) {
 155                                 list = get_ref_dir(ref, list);
 156                                 continue;
 157                         }
 158                         if (!resolve_ref(ref, sha1, 1, &flag)) {
 159                                 error("%s points nowhere!", ref);
 160                                 continue;
 161                         }
 162                         list = add_ref(ref, sha1, flag, list);
 163                 }
 164                 free(ref);
 165                 closedir(dir);
 166         }
 167         return list;
 168 }
 169
 170 static struct ref_list *get_loose_refs(void)
 171 {
 172         if (!cached_refs.did_loose) {
 173                 cached_refs.loose = get_ref_dir("refs", NULL);
 174                 cached_refs.did_loose = 1;
 175         }
 176         return cached_refs.loose;
 177 }
 178
 179 /* We allow "recursive" symbolic refs. Only within reason, though */
 180 #define MAXDEPTH 5
 181
 182 const char *resolve_ref(const char *ref, unsigned char *sha1, int reading, int *flag)
 183 {
 184         int depth = MAXDEPTH, len;
 185         char buffer[256];
 186         static char ref_buffer[256];
 187
 188         if (flag)
 189                 *flag = 0;
 190
 191         for (;;) {
 192                 const char *path = git_path("%s", ref);
 193                 struct stat st;
 194                 char *buf;
 195                 int fd;
 196
 197                 if (--depth < 0)
 198                         return NULL;
 199
 200                 /* Special case: non-existing file.
 201                  * Not having the refs/heads/new-branch is OK
 202                  * if we are writing into it, so is .git/HEAD
 203                  * that points at refs/heads/master still to be
 204                  * born.  It is NOT OK if we are resolving for
 205                  * reading.
 206                  */
 207                 if (lstat(path, &st) < 0) {
 208                         struct ref_list *list = get_packed_refs();
 209                         while (list) {
 210                                 if (!strcmp(ref, list->name)) {
 211                                         hashcpy(sha1, list->sha1);
 212                                         if (flag)
 213                                                 *flag |= REF_ISPACKED;
 214                                         return ref;
 215                                 }
 216                                 list = list->next;
 217                         }
 218                         if (reading || errno != ENOENT)
 219                                 return NULL;
 220                         hashclr(sha1);
 221                         return ref;
 222                 }
 223
 224                 /* Follow "normalized" - ie "refs/.." symlinks by hand */
 225                 if (S_ISLNK(st.st_mode)) {
 226                         len = readlink(path, buffer, sizeof(buffer)-1);
 227                         if (len >= 5 && !memcmp("refs/", buffer, 5)) {
 228                                 buffer[len] = 0;
 229                                 strcpy(ref_buffer, buffer);
 230                                 ref = ref_buffer;
 231                                 if (flag)
 232                                         *flag |= REF_ISSYMREF;
 233                                 continue;
 234                         }
 235                 }
 236
 237                 /* Is it a directory? */
 238                 if (S_ISDIR(st.st_mode)) {
 239                         errno = EISDIR;
 240                         return NULL;
 241                 }
 242
 243                 /*
 244                  * Anything else, just open it and try to use it as
 245                  * a ref
 246                  */
 247                 fd = open(path, O_RDONLY);
 248                 if (fd < 0)
 249                         return NULL;
 250                 len = read(fd, buffer, sizeof(buffer)-1);
 251                 close(fd);
 252
 253                 /*
 254                  * Is it a symbolic ref?
 255                  */
 256                 if (len < 4 || memcmp("ref:", buffer, 4))
 257                         break;
 258                 buf = buffer + 4;
 259                 len -= 4;
 260                 while (len && isspace(*buf))
 261                         buf++, len--;
 262                 while (len && isspace(buf[len-1]))
 263                         len--;
 264                 buf[len] = 0;
 265                 memcpy(ref_buffer, buf, len + 1);
 266                 ref = ref_buffer;
 267                 if (flag)
 268                         *flag |= REF_ISSYMREF;
 269         }
 270         if (len < 40 || get_sha1_hex(buffer, sha1))
 271                 return NULL;
 272         return ref;
 273 }
 274
 275 int create_symref(const char *ref_target, const char *refs_heads_master)
 276 {
 277         const char *lockpath;
 278         char ref[1000];
 279         int fd, len, written;
 280         const char *git_HEAD = git_path("%s", ref_target);
 281
 282 #ifndef NO_SYMLINK_HEAD
 283         if (prefer_symlink_refs) {
 284                 unlink(git_HEAD);
 285                 if (!symlink(refs_heads_master, git_HEAD))
 286                         return 0;
 287                 fprintf(stderr, "no symlink - falling back to symbolic ref\n");
 288         }
 289 #endif
 290
 291         len = snprintf(ref, sizeof(ref), "ref: %s\n", refs_heads_master);
 292         if (sizeof(ref) <= len) {
 293                 error("refname too long: %s", refs_heads_master);
 294                 return -1;
 295         }
 296         lockpath = mkpath("%s.lock", git_HEAD);
 297         fd = open(lockpath, O_CREAT | O_EXCL | O_WRONLY, 0666);
 298         written = write(fd, ref, len);
 299         close(fd);
 300         if (written != len) {
 301                 unlink(lockpath);
 302                 error("Unable to write to %s", lockpath);
 303                 return -2;
 304         }
 305         if (rename(lockpath, git_HEAD) < 0) {
 306                 unlink(lockpath);
 307                 error("Unable to create %s", git_HEAD);
 308                 return -3;
 309         }
 310         if (adjust_shared_perm(git_HEAD)) {
 311                 unlink(lockpath);
 312                 error("Unable to fix permissions on %s", lockpath);
 313                 return -4;
 314         }
 315         return 0;
 316 }
 317
 318 int read_ref(const char *ref, unsigned char *sha1)
 319 {
 320         if (resolve_ref(ref, sha1, 1, NULL))
 321                 return 0;
 322         return -1;
 323 }
 324
 325 static int do_one_ref(const char *base, each_ref_fn fn, int trim,
 326                       void *cb_data, struct ref_list *entry)
 327 {
 328         if (strncmp(base, entry->name, trim))
 329                 return 0;
 330         if (is_null_sha1(entry->sha1))
 331                 return 0;
 332         if (!has_sha1_file(entry->sha1)) {
 333                 error("%s does not point to a valid object!", entry->name);
 334                 return 0;
 335         }
 336         return fn(entry->name + trim, entry->sha1, entry->flag, cb_data);
 337 }
 338
 339 static int do_for_each_ref(const char *base, each_ref_fn fn, int trim,
 340                            void *cb_data)
 341 {
 342         int retval;
 343         struct ref_list *packed = get_packed_refs();
 344         struct ref_list *loose = get_loose_refs();
 345
 346         while (packed && loose) {
 347                 struct ref_list *entry;
 348                 int cmp = strcmp(packed->name, loose->name);
 349                 if (!cmp) {
 350                         packed = packed->next;
 351                         continue;
 352                 }
 353                 if (cmp > 0) {
 354                         entry = loose;
 355                         loose = loose->next;
 356                 } else {
 357                         entry = packed;
 358                         packed = packed->next;
 359                 }
 360                 retval = do_one_ref(base, fn, trim, cb_data, entry);
 361                 if (retval)
 362                         return retval;
 363         }
 364
 365         for (packed = packed ? packed : loose; packed; packed = packed->next) {
 366                 retval = do_one_ref(base, fn, trim, cb_data, packed);
 367                 if (retval)
 368                         return retval;
 369         }
 370         return 0;
 371 }
 372
 373 int head_ref(each_ref_fn fn, void *cb_data)
 374 {
 375         unsigned char sha1[20];
 376         int flag;
 377
 378         if (resolve_ref("HEAD", sha1, 1, &flag))
 379                 return fn("HEAD", sha1, flag, cb_data);
 380         return 0;
 381 }
 382
 383 int for_each_ref(each_ref_fn fn, void *cb_data)
 384 {
 385         return do_for_each_ref("refs/", fn, 0, cb_data);
 386 }
 387
 388 int for_each_tag_ref(each_ref_fn fn, void *cb_data)
 389 {
 390         return do_for_each_ref("refs/tags/", fn, 10, cb_data);
 391 }
 392
 393 int for_each_branch_ref(each_ref_fn fn, void *cb_data)
 394 {
 395         return do_for_each_ref("refs/heads/", fn, 11, cb_data);
 396 }
 397
 398 int for_each_remote_ref(each_ref_fn fn, void *cb_data)
 399 {
 400         return do_for_each_ref("refs/remotes/", fn, 13, cb_data);
 401 }
 402
 403 /* NEEDSWORK: This is only used by ssh-upload and it should go; the
 404  * caller should do resolve_ref or read_ref like everybody else.  Or
 405  * maybe everybody else should use get_ref_sha1() instead of doing
 406  * read_ref().
 407  */
 408 int get_ref_sha1(const char *ref, unsigned char *sha1)
 409 {
 410         if (check_ref_format(ref))
 411                 return -1;
 412         return read_ref(mkpath("refs/%s", ref), sha1);
 413 }
 414
 415 /*
 416  * Make sure "ref" is something reasonable to have under ".git/refs/";
 417  * We do not like it if:
 418  *
 419  * - any path component of it begins with ".", or
 420  * - it has double dots "..", or
 421  * - it has ASCII control character, "~", "^", ":" or SP, anywhere, or
 422  * - it ends with a "/".
 423  */
 424
 425 static inline int bad_ref_char(int ch)
 426 {
 427         return (((unsigned) ch) <= ' ' ||
 428                 ch == '~' || ch == '^' || ch == ':' ||
 429                 /* 2.13 Pattern Matching Notation */
 430                 ch == '?' || ch == '*' || ch == '[');
 431 }
 432
 433 int check_ref_format(const char *ref)
 434 {
 435         int ch, level;
 436         const char *cp = ref;
 437
 438         level = 0;
 439         while (1) {
 440                 while ((ch = *cp++) == '/')
 441                         ; /* tolerate duplicated slashes */
 442                 if (!ch)
 443                         return -1; /* should not end with slashes */
 444
 445                 /* we are at the beginning of the path component */
 446                 if (ch == '.' || bad_ref_char(ch))
 447                         return -1;
 448
 449                 /* scan the rest of the path component */
 450                 while ((ch = *cp++) != 0) {
 451                         if (bad_ref_char(ch))
 452                                 return -1;
 453                         if (ch == '/')
 454                                 break;
 455                         if (ch == '.' && *cp == '.')
 456                                 return -1;
 457                 }
 458                 level++;
 459                 if (!ch) {
 460                         if (level < 2)
 461                                 return -1; /* at least of form "heads/blah" */
 462                         return 0;
 463                 }
 464         }
 465 }
 466
 467 static struct ref_lock *verify_lock(struct ref_lock *lock,
 468         const unsigned char *old_sha1, int mustexist)
 469 {
 470         if (!resolve_ref(lock->ref_name, lock->old_sha1, mustexist, NULL)) {
 471                 error("Can't verify ref %s", lock->ref_name);
 472                 unlock_ref(lock);
 473                 return NULL;
 474         }
 475         if (hashcmp(lock->old_sha1, old_sha1)) {
 476                 error("Ref %s is at %s but expected %s", lock->ref_name,
 477                         sha1_to_hex(lock->old_sha1), sha1_to_hex(old_sha1));
 478                 unlock_ref(lock);
 479                 return NULL;
 480         }
 481         return lock;
 482 }
 483
 484 static int remove_empty_dir_recursive(char *path, int len)
 485 {
 486         DIR *dir = opendir(path);
 487         struct dirent *e;
 488         int ret = 0;
 489
 490         if (!dir)
 491                 return -1;
 492         if (path[len-1] != '/')
 493                 path[len++] = '/';
 494         while ((e = readdir(dir)) != NULL) {
 495                 struct stat st;
 496                 int namlen;
 497                 if ((e->d_name[0] == '.') &&
 498                     ((e->d_name[1] == 0) ||
 499                      ((e->d_name[1] == '.') && e->d_name[2] == 0)))
 500                         continue; /* "." and ".." */
 501
 502                 namlen = strlen(e->d_name);
 503                 if ((len + namlen < PATH_MAX) &&
 504                     strcpy(path + len, e->d_name) &&
 505                     !lstat(path, &st) &&
 506                     S_ISDIR(st.st_mode) &&
 507                     !remove_empty_dir_recursive(path, len + namlen))
 508                         continue; /* happy */
 509
 510                 /* path too long, stat fails, or non-directory still exists */
 511                 ret = -1;
 512                 break;
 513         }
 514         closedir(dir);
 515         if (!ret) {
 516                 path[len] = 0;
 517                 ret = rmdir(path);
 518         }
 519         return ret;
 520 }
 521
 522 static int remove_empty_directories(char *file)
 523 {
 524         /* we want to create a file but there is a directory there;
 525          * if that is an empty directory (or a directory that contains
 526          * only empty directories), remove them.
 527          */
 528         char path[PATH_MAX];
 529         int len = strlen(file);
 530
 531         if (len >= PATH_MAX) /* path too long ;-) */
 532                 return -1;
 533         strcpy(path, file);
 534         return remove_empty_dir_recursive(path, len);
 535 }
 536
 537 static struct ref_lock *lock_ref_sha1_basic(const char *ref, const unsigned char *old_sha1, int *flag)
 538 {
 539         char *ref_file;
 540         const char *orig_ref = ref;
 541         struct ref_lock *lock;
 542         struct stat st;
 543         int last_errno = 0;
 544         int mustexist = (old_sha1 && !is_null_sha1(old_sha1));
 545
 546         lock = xcalloc(1, sizeof(struct ref_lock));
 547         lock->lock_fd = -1;
 548
 549         ref = resolve_ref(ref, lock->old_sha1, mustexist, flag);
 550         if (!ref && errno == EISDIR) {
 551                 /* we are trying to lock foo but we used to
 552                  * have foo/bar which now does not exist;
 553                  * it is normal for the empty directory 'foo'
 554                  * to remain.
 555                  */
 556                 ref_file = git_path("%s", orig_ref);
 557                 if (remove_empty_directories(ref_file)) {
 558                         last_errno = errno;
 559                         error("there are still refs under '%s'", orig_ref);
 560                         goto error_return;
 561                 }
 562                 ref = resolve_ref(orig_ref, lock->old_sha1, mustexist, flag);
 563         }
 564         if (!ref) {
 565                 last_errno = errno;
 566                 error("unable to resolve reference %s: %s",
 567                         orig_ref, strerror(errno));
 568                 goto error_return;
 569         }
 570         if (is_null_sha1(lock->old_sha1)) {
 571                 /* The ref did not exist and we are creating it.
 572                  * Make sure there is no existing ref that is packed
 573                  * whose name begins with our refname, nor a ref whose
 574                  * name is a proper prefix of our refname.
 575                  */
 576                 int namlen = strlen(ref); /* e.g. 'foo/bar' */
 577                 struct ref_list *list = get_packed_refs();
 578                 while (list) {
 579                         /* list->name could be 'foo' or 'foo/bar/baz' */
 580                         int len = strlen(list->name);
 581                         int cmplen = (namlen < len) ? namlen : len;
 582                         const char *lead = (namlen < len) ? list->name : ref;
 583
 584                         if (!strncmp(ref, list->name, cmplen) &&
 585                             lead[cmplen] == '/') {
 586                                 error("'%s' exists; cannot create '%s'",
 587                                       list->name, ref);
 588                                 goto error_return;
 589                         }
 590                         list = list->next;
 591                 }
 592         }
 593
 594         lock->lk = xcalloc(1, sizeof(struct lock_file));
 595
 596         lock->ref_name = xstrdup(ref);
 597         lock->log_file = xstrdup(git_path("logs/%s", ref));
 598         ref_file = git_path("%s", ref);
 599         lock->force_write = lstat(ref_file, &st) && errno == ENOENT;
 600
 601         if (safe_create_leading_directories(ref_file)) {
 602                 last_errno = errno;
 603                 error("unable to create directory for %s", ref_file);
 604                 goto error_return;
 605         }
 606         lock->lock_fd = hold_lock_file_for_update(lock->lk, ref_file, 1);
 607
 608         return old_sha1 ? verify_lock(lock, old_sha1, mustexist) : lock;
 609
 610  error_return:
 611         unlock_ref(lock);
 612         errno = last_errno;
 613         return NULL;
 614 }
 615
 616 struct ref_lock *lock_ref_sha1(const char *ref, const unsigned char *old_sha1)
 617 {
 618         char refpath[PATH_MAX];
 619         if (check_ref_format(ref))
 620                 return NULL;
 621         strcpy(refpath, mkpath("refs/%s", ref));
 622         return lock_ref_sha1_basic(refpath, old_sha1, NULL);
 623 }
 624
 625 struct ref_lock *lock_any_ref_for_update(const char *ref, const unsigned char *old_sha1)
 626 {
 627         return lock_ref_sha1_basic(ref, old_sha1, NULL);
 628 }
 629
 630 static struct lock_file packlock;
 631
 632 static int repack_without_ref(const char *refname)
 633 {
 634         struct ref_list *list, *packed_ref_list;
 635         int fd;
 636         int found = 0;
 637
 638         packed_ref_list = get_packed_refs();
 639         for (list = packed_ref_list; list; list = list->next) {
 640                 if (!strcmp(refname, list->name)) {
 641                         found = 1;
 642                         break;
 643                 }
 644         }
 645         if (!found)
 646                 return 0;
 647         memset(&packlock, 0, sizeof(packlock));
 648         fd = hold_lock_file_for_update(&packlock, git_path("packed-refs"), 0);
 649         if (fd < 0)
 650                 return error("cannot delete '%s' from packed refs", refname);
 651
 652         for (list = packed_ref_list; list; list = list->next) {
 653                 char line[PATH_MAX + 100];
 654                 int len;
 655
 656                 if (!strcmp(refname, list->name))
 657                         continue;
 658                 len = snprintf(line, sizeof(line), "%s %s\n",
 659                                sha1_to_hex(list->sha1), list->name);
 660                 /* this should not happen but just being defensive */
 661                 if (len > sizeof(line))
 662                         die("too long a refname '%s'", list->name);
 663                 write_or_die(fd, line, len);
 664         }
 665         return commit_lock_file(&packlock);
 666 }
 667
 668 int delete_ref(const char *refname, unsigned char *sha1)
 669 {
 670         struct ref_lock *lock;
 671         int err, i, ret = 0, flag = 0;
 672
 673         lock = lock_ref_sha1_basic(refname, sha1, &flag);
 674         if (!lock)
 675                 return 1;
 676         if (!(flag & REF_ISPACKED)) {
 677                 /* loose */
 678                 i = strlen(lock->lk->filename) - 5; /* .lock */
 679                 lock->lk->filename[i] = 0;
 680                 err = unlink(lock->lk->filename);
 681                 if (err) {
 682                         ret = 1;
 683                         error("unlink(%s) failed: %s",
 684                               lock->lk->filename, strerror(errno));
 685                 }
 686                 lock->lk->filename[i] = '.';
 687         }
 688         /* removing the loose one could have resurrected an earlier
 689          * packed one.  Also, if it was not loose we need to repack
 690          * without it.
 691          */
 692         ret |= repack_without_ref(refname);
 693
 694         err = unlink(lock->log_file);
 695         if (err && errno != ENOENT)
 696                 fprintf(stderr, "warning: unlink(%s) failed: %s",
 697                         lock->log_file, strerror(errno));
 698         invalidate_cached_refs();
 699         unlock_ref(lock);
 700         return ret;
 701 }
 702
 703 void unlock_ref(struct ref_lock *lock)
 704 {
 705         if (lock->lock_fd >= 0) {
 706                 close(lock->lock_fd);
 707                 /* Do not free lock->lk -- atexit() still looks at them */
 708                 if (lock->lk)
 709                         rollback_lock_file(lock->lk);
 710         }
 711         free(lock->ref_name);
 712         free(lock->log_file);
 713         free(lock);
 714 }
 715
 716 static int log_ref_write(struct ref_lock *lock,
 717         const unsigned char *sha1, const char *msg)
 718 {
 719         int logfd, written, oflags = O_APPEND | O_WRONLY;
 720         unsigned maxlen, len;
 721         char *logrec;
 722         const char *committer;
 723
 724         if (log_all_ref_updates &&
 725             !strncmp(lock->ref_name, "refs/heads/", 11)) {
 726                 if (safe_create_leading_directories(lock->log_file) < 0)
 727                         return error("unable to create directory for %s",
 728                                 lock->log_file);
 729                 oflags |= O_CREAT;
 730         }
 731
 732         logfd = open(lock->log_file, oflags, 0666);
 733         if (logfd < 0) {
 734                 if (!(oflags & O_CREAT) && errno == ENOENT)
 735                         return 0;
 736
 737                 if ((oflags & O_CREAT) && errno == EISDIR) {
 738                         if (remove_empty_directories(lock->log_file)) {
 739                                 return error("There are still logs under '%s'",
 740                                              lock->log_file);
 741                         }
 742                         logfd = open(lock->log_file, oflags, 0666);
 743                 }
 744
 745                 if (logfd < 0)
 746                         return error("Unable to append to %s: %s",
 747                                      lock->log_file, strerror(errno));
 748         }
 749
 750         committer = git_committer_info(1);
 751         if (msg) {
 752                 maxlen = strlen(committer) + strlen(msg) + 2*40 + 5;
 753                 logrec = xmalloc(maxlen);
 754                 len = snprintf(logrec, maxlen, "%s %s %s\t%s\n",
 755                         sha1_to_hex(lock->old_sha1),
 756                         sha1_to_hex(sha1),
 757                         committer,
 758                         msg);
 759         }
 760         else {
 761                 maxlen = strlen(committer) + 2*40 + 4;
 762                 logrec = xmalloc(maxlen);
 763                 len = snprintf(logrec, maxlen, "%s %s %s\n",
 764                         sha1_to_hex(lock->old_sha1),
 765                         sha1_to_hex(sha1),
 766                         committer);
 767         }
 768         written = len <= maxlen ? write(logfd, logrec, len) : -1;
 769         free(logrec);
 770         close(logfd);
 771         if (written != len)
 772                 return error("Unable to append to %s", lock->log_file);
 773         return 0;
 774 }
 775
 776 int write_ref_sha1(struct ref_lock *lock,
 777         const unsigned char *sha1, const char *logmsg)
 778 {
 779         static char term = '\n';
 780
 781         if (!lock)
 782                 return -1;
 783         if (!lock->force_write && !hashcmp(lock->old_sha1, sha1)) {
 784                 unlock_ref(lock);
 785                 return 0;
 786         }
 787         if (write(lock->lock_fd, sha1_to_hex(sha1), 40) != 40 ||
 788             write(lock->lock_fd, &term, 1) != 1
 789                 || close(lock->lock_fd) < 0) {
 790                 error("Couldn't write %s", lock->lk->filename);
 791                 unlock_ref(lock);
 792                 return -1;
 793         }
 794         invalidate_cached_refs();
 795         if (log_ref_write(lock, sha1, logmsg) < 0) {
 796                 unlock_ref(lock);
 797                 return -1;
 798         }
 799         if (commit_lock_file(lock->lk)) {
 800                 error("Couldn't set %s", lock->ref_name);
 801                 unlock_ref(lock);
 802                 return -1;
 803         }
 804         lock->lock_fd = -1;
 805         unlock_ref(lock);
 806         return 0;
 807 }
 808
 809 int read_ref_at(const char *ref, unsigned long at_time, int cnt, unsigned char *sha1)
 810 {
 811         const char *logfile, *logdata, *logend, *rec, *lastgt, *lastrec;
 812         char *tz_c;
 813         int logfd, tz;
 814         struct stat st;
 815         unsigned long date;
 816         unsigned char logged_sha1[20];
 817
 818         logfile = git_path("logs/%s", ref);
 819         logfd = open(logfile, O_RDONLY, 0);
 820         if (logfd < 0)
 821                 die("Unable to read log %s: %s", logfile, strerror(errno));
 822         fstat(logfd, &st);
 823         if (!st.st_size)
 824                 die("Log %s is empty.", logfile);
 825         logdata = mmap(NULL, st.st_size, PROT_READ, MAP_PRIVATE, logfd, 0);
 826         close(logfd);
 827
 828         lastrec = NULL;
 829         rec = logend = logdata + st.st_size;
 830         while (logdata < rec) {
 831                 if (logdata < rec && *(rec-1) == '\n')
 832                         rec--;
 833                 lastgt = NULL;
 834                 while (logdata < rec && *(rec-1) != '\n') {
 835                         rec--;
 836                         if (*rec == '>')
 837                                 lastgt = rec;
 838                 }
 839                 if (!lastgt)
 840                         die("Log %s is corrupt.", logfile);
 841                 date = strtoul(lastgt + 1, &tz_c, 10);
 842                 if (date <= at_time || cnt == 0) {
 843                         if (lastrec) {
 844                                 if (get_sha1_hex(lastrec, logged_sha1))
 845                                         die("Log %s is corrupt.", logfile);
 846                                 if (get_sha1_hex(rec + 41, sha1))
 847                                         die("Log %s is corrupt.", logfile);
 848                                 if (hashcmp(logged_sha1, sha1)) {
 849                                         tz = strtoul(tz_c, NULL, 10);
 850                                         fprintf(stderr,
 851                                                 "warning: Log %s has gap after %s.\n",
 852                                                 logfile, show_rfc2822_date(date, tz));
 853                                 }
 854                         }
 855                         else if (date == at_time) {
 856                                 if (get_sha1_hex(rec + 41, sha1))
 857                                         die("Log %s is corrupt.", logfile);
 858                         }
 859                         else {
 860                                 if (get_sha1_hex(rec + 41, logged_sha1))
 861                                         die("Log %s is corrupt.", logfile);
 862                                 if (hashcmp(logged_sha1, sha1)) {
 863                                         tz = strtoul(tz_c, NULL, 10);
 864                                         fprintf(stderr,
 865                                                 "warning: Log %s unexpectedly ended on %s.\n",
 866                                                 logfile, show_rfc2822_date(date, tz));
 867                                 }
 868                         }
 869                         munmap((void*)logdata, st.st_size);
 870                         return 0;
 871                 }
 872                 lastrec = rec;
 873                 if (cnt > 0)
 874                         cnt--;
 875         }
 876
 877         rec = logdata;
 878         while (rec < logend && *rec != '>' && *rec != '\n')
 879                 rec++;
 880         if (rec == logend || *rec == '\n')
 881                 die("Log %s is corrupt.", logfile);
 882         date = strtoul(rec + 1, &tz_c, 10);
 883         tz = strtoul(tz_c, NULL, 10);
 884         if (get_sha1_hex(logdata, sha1))
 885                 die("Log %s is corrupt.", logfile);
 886         munmap((void*)logdata, st.st_size);
 887         fprintf(stderr, "warning: Log %s only goes back to %s.\n",
 888                 logfile, show_rfc2822_date(date, tz));
 889         return 0;
 890 }