?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
bump version number
[got-portable.git] / gotd / repo_write.c
blob58219b54d1c2ae9d34d51338eb944eda43105fca
1 /*
2 * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
3 *
4 * Permission to use, copy, modify, and distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17 #include "got_compat.h"
18
19 #include <sys/queue.h>
20 #include <sys/stat.h>
21 #include <sys/types.h>
22
23 #include <ctype.h>
24 #include <event.h>
25 #include <errno.h>
26 #include <imsg.h>
27 #include <signal.h>
28 #include <stdio.h>
29 #include <stdlib.h>
30 #include <string.h>
31 #include <limits.h>
32 #include <poll.h>
33 #include <unistd.h>
34 #include <zlib.h>
35
36 #include "buf.h"
37
38 #include "got_error.h"
39 #include "got_repository.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_path.h"
43 #include "got_diff.h"
44 #include "got_cancel.h"
45 #include "got_commit_graph.h"
46 #include "got_opentemp.h"
47
48 #include "got_lib_delta.h"
49 #include "got_lib_delta_cache.h"
50 #include "got_lib_hash.h"
51 #include "got_lib_object.h"
52 #include "got_lib_object_cache.h"
53 #include "got_lib_object_idset.h"
54 #include "got_lib_object_parse.h"
55 #include "got_lib_ratelimit.h"
56 #include "got_lib_pack.h"
57 #include "got_lib_pack_index.h"
58 #include "got_lib_repository.h"
59 #include "got_lib_poll.h"
60
61 #include "log.h"
62 #include "gotd.h"
63 #include "repo_write.h"
64
65 #ifndef nitems
66 #define nitems(_a) (sizeof((_a)) / sizeof((_a)[0]))
67 #endif
68
69 static struct repo_write {
70 pid_t pid;
71 const char *title;
72 struct got_repository *repo;
73 int *pack_fds;
74 int *temp_fds;
75 int session_fd;
76 struct gotd_imsgev session_iev;
77 struct got_pathlist_head *protected_tag_namespaces;
78 struct got_pathlist_head *protected_branch_namespaces;
79 struct got_pathlist_head *protected_branches;
80 struct {
81 FILE *f1;
82 FILE *f2;
83 int fd1;
84 int fd2;
85 } diff;
86 int refs_listed;
87 } repo_write;
88
89 struct gotd_ref_update {
90 STAILQ_ENTRY(gotd_ref_update) entry;
91 struct got_reference *ref;
92 int ref_is_new;
93 int delete_ref;
94 struct got_object_id old_id;
95 struct got_object_id new_id;
96 };
97 STAILQ_HEAD(gotd_ref_updates, gotd_ref_update);
98
99 static struct repo_write_client {
100 uint32_t id;
101 int fd;
102 int pack_pipe;
103 struct got_pack pack;
104 uint8_t pack_sha1[SHA1_DIGEST_LENGTH];
105 int packidx_fd;
106 struct gotd_ref_updates ref_updates;
107 int nref_updates;
108 int nref_del;
109 int nref_new;
110 int nref_move;
111 } repo_write_client;
112
113 static volatile sig_atomic_t sigint_received;
114 static volatile sig_atomic_t sigterm_received;
115
116 static void
117 catch_sigint(int signo)
118 {
119 sigint_received = 1;
120 }
121
122 static void
123 catch_sigterm(int signo)
124 {
125 sigterm_received = 1;
126 }
127
128 static const struct got_error *
129 check_cancelled(void *arg)
130 {
131 if (sigint_received || sigterm_received)
132 return got_error(GOT_ERR_CANCELLED);
133
134 return NULL;
135 }
136
137 static const struct got_error *
138 send_peeled_tag_ref(struct got_reference *ref, struct got_object *obj,
139 struct imsgbuf *ibuf)
140 {
141 const struct got_error *err = NULL;
142 struct got_tag_object *tag;
143 size_t namelen, len;
144 char *peeled_refname = NULL;
145 struct got_object_id *id;
146 struct ibuf *wbuf;
147
148 err = got_object_tag_open(&tag, repo_write.repo, obj);
149 if (err)
150 return err;
151
152 if (asprintf(&peeled_refname, "%s^{}", got_ref_get_name(ref)) == -1) {
153 err = got_error_from_errno("asprintf");
154 goto done;
155 }
156
157 id = got_object_tag_get_object_id(tag);
158 namelen = strlen(peeled_refname);
159
160 len = sizeof(struct gotd_imsg_ref) + namelen;
161 if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE) {
162 err = got_error(GOT_ERR_NO_SPACE);
163 goto done;
164 }
165
166 wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_WRITE,
167 repo_write.pid, len);
168 if (wbuf == NULL) {
169 err = got_error_from_errno("imsg_create REF");
170 goto done;
171 }
172
173 /* Keep in sync with struct gotd_imsg_ref definition. */
174 if (imsg_add(wbuf, id->hash, SHA1_DIGEST_LENGTH) == -1) {
175 err = got_error_from_errno("imsg_add REF");
176 goto done;
177 }
178 if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1) {
179 err = got_error_from_errno("imsg_add REF");
180 goto done;
181 }
182 if (imsg_add(wbuf, peeled_refname, namelen) == -1) {
183 err = got_error_from_errno("imsg_add REF");
184 goto done;
185 }
186
187 imsg_close(ibuf, wbuf);
188 done:
189 got_object_tag_close(tag);
190 return err;
191 }
192
193 static const struct got_error *
194 send_ref(struct got_reference *ref, struct imsgbuf *ibuf)
195 {
196 const struct got_error *err;
197 const char *refname = got_ref_get_name(ref);
198 size_t namelen;
199 struct got_object_id *id = NULL;
200 struct got_object *obj = NULL;
201 size_t len;
202 struct ibuf *wbuf;
203
204 namelen = strlen(refname);
205
206 len = sizeof(struct gotd_imsg_ref) + namelen;
207 if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE)
208 return got_error(GOT_ERR_NO_SPACE);
209
210 err = got_ref_resolve(&id, repo_write.repo, ref);
211 if (err)
212 return err;
213
214 wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_WRITE,
215 repo_write.pid, len);
216 if (wbuf == NULL) {
217 err = got_error_from_errno("imsg_create REF");
218 goto done;
219 }
220
221 /* Keep in sync with struct gotd_imsg_ref definition. */
222 if (imsg_add(wbuf, id->hash, SHA1_DIGEST_LENGTH) == -1)
223 return got_error_from_errno("imsg_add REF");
224 if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1)
225 return got_error_from_errno("imsg_add REF");
226 if (imsg_add(wbuf, refname, namelen) == -1)
227 return got_error_from_errno("imsg_add REF");
228
229 imsg_close(ibuf, wbuf);
230
231 err = got_object_open(&obj, repo_write.repo, id);
232 if (err)
233 goto done;
234 if (obj->type == GOT_OBJ_TYPE_TAG)
235 err = send_peeled_tag_ref(ref, obj, ibuf);
236 done:
237 if (obj)
238 got_object_close(obj);
239 free(id);
240 return err;
241 }
242
243 static const struct got_error *
244 list_refs(struct imsg *imsg)
245 {
246 const struct got_error *err;
247 struct repo_write_client *client = &repo_write_client;
248 struct got_reflist_head refs;
249 struct got_reflist_entry *re;
250 size_t datalen;
251 struct gotd_imsg_reflist irefs;
252 struct imsgbuf ibuf;
253
254 TAILQ_INIT(&refs);
255
256 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
257 if (datalen != 0)
258 return got_error(GOT_ERR_PRIVSEP_LEN);
259
260 if (repo_write.refs_listed) {
261 return got_error_msg(GOT_ERR_CLIENT_ID,
262 "duplicate list-refs request");
263 }
264 repo_write.refs_listed = 1;
265
266 client->fd = imsg_get_fd(imsg);
267 if (client->fd == -1)
268 return got_error(GOT_ERR_PRIVSEP_NO_FD);
269
270 client->nref_updates = 0;
271 client->nref_del = 0;
272 client->nref_new = 0;
273 client->nref_move = 0;
274
275 imsg_init(&ibuf, client->fd);
276
277 err = got_ref_list(&refs, repo_write.repo, "",
278 got_ref_cmp_by_name, NULL);
279 if (err)
280 return err;
281
282 memset(&irefs, 0, sizeof(irefs));
283 TAILQ_FOREACH(re, &refs, entry) {
284 struct got_object_id *id;
285 int obj_type;
286
287 if (got_ref_is_symbolic(re->ref))
288 continue;
289
290 irefs.nrefs++;
291
292 /* Account for a peeled tag refs. */
293 err = got_ref_resolve(&id, repo_write.repo, re->ref);
294 if (err)
295 goto done;
296 err = got_object_get_type(&obj_type, repo_write.repo, id);
297 free(id);
298 if (err)
299 goto done;
300 if (obj_type == GOT_OBJ_TYPE_TAG)
301 irefs.nrefs++;
302 }
303
304 if (imsg_compose(&ibuf, GOTD_IMSG_REFLIST, PROC_REPO_WRITE,
305 repo_write.pid, -1, &irefs, sizeof(irefs)) == -1) {
306 err = got_error_from_errno("imsg_compose REFLIST");
307 goto done;
308 }
309
310 TAILQ_FOREACH(re, &refs, entry) {
311 if (got_ref_is_symbolic(re->ref))
312 continue;
313 err = send_ref(re->ref, &ibuf);
314 if (err)
315 goto done;
316 }
317
318 err = gotd_imsg_flush(&ibuf);
319 done:
320 got_ref_list_free(&refs);
321 imsg_clear(&ibuf);
322 return err;
323 }
324
325 static const struct got_error *
326 validate_namespace(const char *namespace)
327 {
328 size_t len = strlen(namespace);
329
330 if (len < 5 || strncmp("refs/", namespace, 5) != 0 ||
331 namespace[len -1] != '/') {
332 return got_error_fmt(GOT_ERR_BAD_REF_NAME,
333 "reference namespace '%s'", namespace);
334 }
335
336 return NULL;
337 }
338
339 static const struct got_error *
340 protect_ref_namespace(const char *refname, const char *namespace)
341 {
342 const struct got_error *err;
343
344 err = validate_namespace(namespace);
345 if (err)
346 return err;
347
348 if (strncmp(namespace, refname, strlen(namespace)) == 0)
349 return got_error_fmt(GOT_ERR_REFS_PROTECTED, "%s", namespace);
350
351 return NULL;
352 }
353
354 static const struct got_error *
355 verify_object_type(struct got_object_id *id, int expected_obj_type,
356 struct got_pack *pack, struct got_packidx *packidx)
357 {
358 const struct got_error *err;
359 char hex[SHA1_DIGEST_STRING_LENGTH];
360 struct got_object *obj;
361 int idx;
362 const char *typestr;
363
364 idx = got_packidx_get_object_idx(packidx, id);
365 if (idx == -1) {
366 got_object_id_hex(id, hex, sizeof(hex));
367 return got_error_fmt(GOT_ERR_BAD_PACKFILE,
368 "object %s is missing from pack file", hex);
369 }
370
371 err = got_object_open_from_packfile(&obj, id, pack, packidx,
372 idx, repo_write.repo);
373 if (err)
374 return err;
375
376 if (obj->type != expected_obj_type) {
377 got_object_id_hex(id, hex, sizeof(hex));
378 got_object_type_label(&typestr, expected_obj_type);
379 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
380 "%s is not pointing at a %s object", hex, typestr);
381 }
382 got_object_close(obj);
383 return err;
384 }
385
386 static const struct got_error *
387 protect_tag_namespace(const char *namespace, struct got_pack *pack,
388 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
389 {
390 const struct got_error *err;
391
392 err = validate_namespace(namespace);
393 if (err)
394 return err;
395
396 if (strncmp(namespace, got_ref_get_name(ref_update->ref),
397 strlen(namespace)) != 0)
398 return NULL;
399
400 if (!ref_update->ref_is_new)
401 return got_error_fmt(GOT_ERR_REFS_PROTECTED, "%s", namespace);
402
403 return verify_object_type(&ref_update->new_id, GOT_OBJ_TYPE_TAG,
404 pack, packidx);
405 }
406
407 static const struct got_error *
408 protect_require_yca(struct got_object_id *tip_id,
409 size_t max_commits_to_traverse, struct got_pack *pack,
410 struct got_packidx *packidx, struct got_reference *ref)
411 {
412 const struct got_error *err;
413 uint8_t *buf = NULL;
414 size_t len;
415 struct got_object_id *expected_yca_id = NULL;
416 struct got_object *obj = NULL;
417 struct got_commit_object *commit = NULL;
418 char hex[SHA1_DIGEST_STRING_LENGTH];
419 const struct got_object_id_queue *parent_ids;
420 struct got_object_id_queue ids;
421 struct got_object_qid *pid, *qid;
422 struct got_object_idset *traversed_set = NULL;
423 int found_yca = 0, obj_type;
424
425 STAILQ_INIT(&ids);
426
427 err = got_ref_resolve(&expected_yca_id, repo_write.repo, ref);
428 if (err)
429 return err;
430
431 err = got_object_get_type(&obj_type, repo_write.repo, expected_yca_id);
432 if (err)
433 goto done;
434
435 if (obj_type != GOT_OBJ_TYPE_COMMIT) {
436 got_object_id_hex(expected_yca_id, hex, sizeof(hex));
437 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
438 "%s is not pointing at a commit object", hex);
439 goto done;
440 }
441
442 traversed_set = got_object_idset_alloc();
443 if (traversed_set == NULL) {
444 err = got_error_from_errno("got_object_idset_alloc");
445 goto done;
446 }
447
448 err = got_object_qid_alloc(&qid, tip_id);
449 if (err)
450 goto done;
451 STAILQ_INSERT_TAIL(&ids, qid, entry);
452 while (!STAILQ_EMPTY(&ids)) {
453 err = check_cancelled(NULL);
454 if (err)
455 break;
456
457 qid = STAILQ_FIRST(&ids);
458 if (got_object_id_cmp(&qid->id, expected_yca_id) == 0) {
459 found_yca = 1;
460 break;
461 }
462
463 if (got_object_idset_num_elements(traversed_set) >=
464 max_commits_to_traverse)
465 break;
466
467 if (got_object_idset_contains(traversed_set, &qid->id)) {
468 STAILQ_REMOVE_HEAD(&ids, entry);
469 got_object_qid_free(qid);
470 qid = NULL;
471 continue;
472 }
473 err = got_object_idset_add(traversed_set, &qid->id, NULL);
474 if (err)
475 goto done;
476
477 err = got_object_open(&obj, repo_write.repo, &qid->id);
478 if (err && err->code != GOT_ERR_NO_OBJ)
479 goto done;
480 err = NULL;
481 if (obj) {
482 err = got_object_commit_open(&commit, repo_write.repo,
483 obj);
484 if (err)
485 goto done;
486 } else {
487 int idx;
488
489 idx = got_packidx_get_object_idx(packidx, &qid->id);
490 if (idx == -1) {
491 got_object_id_hex(&qid->id, hex, sizeof(hex));
492 err = got_error_fmt(GOT_ERR_BAD_PACKFILE,
493 "object %s is missing from pack file", hex);
494 goto done;
495 }
496
497 err = got_object_open_from_packfile(&obj, &qid->id,
498 pack, packidx, idx, repo_write.repo);
499 if (err)
500 goto done;
501
502 if (obj->type != GOT_OBJ_TYPE_COMMIT) {
503 got_object_id_hex(&qid->id, hex, sizeof(hex));
504 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
505 "%s is not pointing at a commit object",
506 hex);
507 goto done;
508 }
509
510 err = got_packfile_extract_object_to_mem(&buf, &len,
511 obj, pack);
512 if (err)
513 goto done;
514
515 err = got_object_parse_commit(&commit, buf, len,
516 GOT_HASH_SHA1);
517 if (err)
518 goto done;
519
520 free(buf);
521 buf = NULL;
522 }
523
524 got_object_close(obj);
525 obj = NULL;
526
527 STAILQ_REMOVE_HEAD(&ids, entry);
528 got_object_qid_free(qid);
529 qid = NULL;
530
531 if (got_object_commit_get_nparents(commit) == 0)
532 break;
533
534 parent_ids = got_object_commit_get_parent_ids(commit);
535 STAILQ_FOREACH(pid, parent_ids, entry) {
536 err = check_cancelled(NULL);
537 if (err)
538 goto done;
539 err = got_object_qid_alloc(&qid, &pid->id);
540 if (err)
541 goto done;
542 STAILQ_INSERT_TAIL(&ids, qid, entry);
543 qid = NULL;
544 }
545 got_object_commit_close(commit);
546 commit = NULL;
547 }
548
549 if (!found_yca) {
550 err = got_error_fmt(GOT_ERR_REF_PROTECTED, "%s",
551 got_ref_get_name(ref));
552 }
553 done:
554 got_object_idset_free(traversed_set);
555 got_object_id_queue_free(&ids);
556 free(buf);
557 if (obj)
558 got_object_close(obj);
559 if (commit)
560 got_object_commit_close(commit);
561 free(expected_yca_id);
562 return err;
563 }
564
565 static const struct got_error *
566 protect_branch_namespace(const char *namespace, struct got_pack *pack,
567 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
568 {
569 const struct got_error *err;
570
571 err = validate_namespace(namespace);
572 if (err)
573 return err;
574
575 if (strncmp(namespace, got_ref_get_name(ref_update->ref),
576 strlen(namespace)) != 0)
577 return NULL;
578
579 if (ref_update->ref_is_new) {
580 return verify_object_type(&ref_update->new_id,
581 GOT_OBJ_TYPE_COMMIT, pack, packidx);
582 }
583
584 return protect_require_yca(&ref_update->new_id,
585 be32toh(packidx->hdr.fanout_table[0xff]), pack, packidx,
586 ref_update->ref);
587 }
588
589 static const struct got_error *
590 protect_branch(const char *refname, struct got_pack *pack,
591 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
592 {
593 if (strcmp(refname, got_ref_get_name(ref_update->ref)) != 0)
594 return NULL;
595
596 /* Always allow new branches to be created. */
597 if (ref_update->ref_is_new) {
598 return verify_object_type(&ref_update->new_id,
599 GOT_OBJ_TYPE_COMMIT, pack, packidx);
600 }
601
602 return protect_require_yca(&ref_update->new_id,
603 be32toh(packidx->hdr.fanout_table[0xff]), pack, packidx,
604 ref_update->ref);
605 }
606
607 static const struct got_error *
608 recv_ref_update(struct imsg *imsg)
609 {
610 static const char zero_id[SHA1_DIGEST_LENGTH];
611 const struct got_error *err = NULL;
612 struct repo_write_client *client = &repo_write_client;
613 struct gotd_imsg_ref_update iref;
614 size_t datalen;
615 char *refname = NULL;
616 struct got_reference *ref = NULL;
617 struct got_object_id *id = NULL;
618 struct imsgbuf ibuf;
619 struct gotd_ref_update *ref_update = NULL;
620
621 log_debug("ref-update received");
622
623 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
624 if (datalen < sizeof(iref))
625 return got_error(GOT_ERR_PRIVSEP_LEN);
626 memcpy(&iref, imsg->data, sizeof(iref));
627 if (datalen != sizeof(iref) + iref.name_len)
628 return got_error(GOT_ERR_PRIVSEP_LEN);
629
630 imsg_init(&ibuf, client->fd);
631
632 refname = strndup(imsg->data + sizeof(iref), iref.name_len);
633 if (refname == NULL)
634 return got_error_from_errno("strndup");
635
636 ref_update = calloc(1, sizeof(*ref_update));
637 if (ref_update == NULL) {
638 err = got_error_from_errno("malloc");
639 goto done;
640 }
641
642 memcpy(ref_update->old_id.hash, iref.old_id, SHA1_DIGEST_LENGTH);
643 memcpy(ref_update->new_id.hash, iref.new_id, SHA1_DIGEST_LENGTH);
644
645 err = got_ref_open(&ref, repo_write.repo, refname, 0);
646 if (err) {
647 if (err->code != GOT_ERR_NOT_REF)
648 goto done;
649 if (memcmp(ref_update->new_id.hash,
650 zero_id, sizeof(zero_id)) == 0) {
651 err = got_error_fmt(GOT_ERR_BAD_OBJ_ID,
652 "%s", refname);
653 goto done;
654 }
655 err = got_ref_alloc(&ref, refname, &ref_update->new_id);
656 if (err)
657 goto done;
658 ref_update->ref_is_new = 1;
659 client->nref_new++;
660 }
661 if (got_ref_is_symbolic(ref)) {
662 err = got_error_fmt(GOT_ERR_BAD_REF_TYPE,
663 "'%s' is a symbolic reference and cannot "
664 "be updated", got_ref_get_name(ref));
665 goto done;
666 }
667 if (strncmp("refs/", got_ref_get_name(ref), 5) != 0) {
668 err = got_error_fmt(GOT_ERR_BAD_REF_NAME,
669 "%s: does not begin with 'refs/'",
670 got_ref_get_name(ref));
671 goto done;
672 }
673
674 err = protect_ref_namespace(got_ref_get_name(ref), "refs/got/");
675 if (err)
676 goto done;
677 err = protect_ref_namespace(got_ref_get_name(ref), "refs/remotes/");
678 if (err)
679 goto done;
680
681 if (!ref_update->ref_is_new) {
682 /*
683 * Ensure the client's idea of this update is still valid.
684 * At this point we can only return an error, to prevent
685 * the client from uploading a pack file which will likely
686 * have to be discarded.
687 */
688 err = got_ref_resolve(&id, repo_write.repo, ref);
689 if (err)
690 goto done;
691
692 if (got_object_id_cmp(id, &ref_update->old_id) != 0) {
693 err = got_error_fmt(GOT_ERR_REF_BUSY,
694 "%s has been modified by someone else "
695 "while transaction was in progress",
696 got_ref_get_name(ref));
697 goto done;
698 }
699 }
700
701 gotd_imsg_send_ack(&ref_update->new_id, &ibuf, PROC_REPO_WRITE,
702 repo_write.pid);
703
704 ref_update->ref = ref;
705 if (memcmp(ref_update->new_id.hash, zero_id, sizeof(zero_id)) == 0) {
706 ref_update->delete_ref = 1;
707 client->nref_del++;
708 }
709 STAILQ_INSERT_HEAD(&client->ref_updates, ref_update, entry);
710 client->nref_updates++;
711 ref = NULL;
712 ref_update = NULL;
713 done:
714 if (ref)
715 got_ref_close(ref);
716 free(ref_update);
717 free(refname);
718 free(id);
719 return err;
720 }
721
722 static const struct got_error *
723 pack_index_progress(void *arg, uint32_t nobj_total, uint32_t nobj_indexed,
724 uint32_t nobj_loose, uint32_t nobj_resolved)
725 {
726 int p_indexed = 0, p_resolved = 0;
727 int nobj_delta = nobj_total - nobj_loose;
728
729 if (nobj_total > 0)
730 p_indexed = (nobj_indexed * 100) / nobj_total;
731
732 if (nobj_delta > 0)
733 p_resolved = (nobj_resolved * 100) / nobj_delta;
734
735 if (p_resolved > 0) {
736 log_debug("indexing %d objects %d%%; resolving %d deltas %d%%",
737 nobj_total, p_indexed, nobj_delta, p_resolved);
738 } else
739 log_debug("indexing %d objects %d%%", nobj_total, p_indexed);
740
741 return NULL;
742 }
743
744 static const struct got_error *
745 read_more_pack_stream(int infd, BUF *buf, size_t minsize)
746 {
747 const struct got_error *err = NULL;
748 uint8_t readahead[65536];
749 size_t have, newlen;
750
751 err = got_poll_read_full(infd, &have,
752 readahead, sizeof(readahead), minsize);
753 if (err)
754 return err;
755
756 err = buf_append(&newlen, buf, readahead, have);
757 if (err)
758 return err;
759 return NULL;
760 }
761
762 static const struct got_error *
763 copy_object_type_and_size(uint8_t *type, uint64_t *size, int infd, int outfd,
764 off_t *outsize, BUF *buf, size_t *buf_pos, struct got_hash *ctx)
765 {
766 const struct got_error *err = NULL;
767 uint8_t t = 0;
768 uint64_t s = 0;
769 uint8_t sizebuf[8];
770 size_t i = 0;
771 off_t obj_offset = *outsize;
772
773 do {
774 /* We do not support size values which don't fit in 64 bit. */
775 if (i > 9)
776 return got_error_fmt(GOT_ERR_OBJ_TOO_LARGE,
777 "packfile offset %lld", (long long)obj_offset);
778
779 if (buf_len(buf) - *buf_pos < sizeof(sizebuf[0])) {
780 err = read_more_pack_stream(infd, buf,
781 sizeof(sizebuf[0]));
782 if (err)
783 return err;
784 }
785
786 sizebuf[i] = buf_getc(buf, *buf_pos);
787 *buf_pos += sizeof(sizebuf[i]);
788
789 if (i == 0) {
790 t = (sizebuf[i] & GOT_PACK_OBJ_SIZE0_TYPE_MASK) >>
791 GOT_PACK_OBJ_SIZE0_TYPE_MASK_SHIFT;
792 s = (sizebuf[i] & GOT_PACK_OBJ_SIZE0_VAL_MASK);
793 } else {
794 size_t shift = 4 + 7 * (i - 1);
795 s |= ((sizebuf[i] & GOT_PACK_OBJ_SIZE_VAL_MASK) <<
796 shift);
797 }
798 i++;
799 } while (sizebuf[i - 1] & GOT_PACK_OBJ_SIZE_MORE);
800
801 err = got_pack_hwrite(outfd, sizebuf, i, ctx);
802 if (err)
803 return err;
804 *outsize += i;
805
806 *type = t;
807 *size = s;
808 return NULL;
809 }
810
811 static const struct got_error *
812 copy_ref_delta(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
813 struct got_hash *ctx)
814 {
815 const struct got_error *err = NULL;
816 size_t remain = buf_len(buf) - *buf_pos;
817
818 if (remain < SHA1_DIGEST_LENGTH) {
819 err = read_more_pack_stream(infd, buf,
820 SHA1_DIGEST_LENGTH - remain);
821 if (err)
822 return err;
823 }
824
825 err = got_pack_hwrite(outfd, buf_get(buf) + *buf_pos,
826 SHA1_DIGEST_LENGTH, ctx);
827 if (err)
828 return err;
829
830 *buf_pos += SHA1_DIGEST_LENGTH;
831 return NULL;
832 }
833
834 static const struct got_error *
835 copy_offset_delta(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
836 struct got_hash *ctx)
837 {
838 const struct got_error *err = NULL;
839 uint64_t o = 0;
840 uint8_t offbuf[8];
841 size_t i = 0;
842 off_t obj_offset = *outsize;
843
844 do {
845 /* We do not support offset values which don't fit in 64 bit. */
846 if (i > 8)
847 return got_error_fmt(GOT_ERR_OBJ_TOO_LARGE,
848 "packfile offset %lld", (long long)obj_offset);
849
850 if (buf_len(buf) - *buf_pos < sizeof(offbuf[0])) {
851 err = read_more_pack_stream(infd, buf,
852 sizeof(offbuf[0]));
853 if (err)
854 return err;
855 }
856
857 offbuf[i] = buf_getc(buf, *buf_pos);
858 *buf_pos += sizeof(offbuf[i]);
859
860 if (i == 0)
861 o = (offbuf[i] & GOT_PACK_OBJ_DELTA_OFF_VAL_MASK);
862 else {
863 o++;
864 o <<= 7;
865 o += (offbuf[i] & GOT_PACK_OBJ_DELTA_OFF_VAL_MASK);
866 }
867 i++;
868 } while (offbuf[i - 1] & GOT_PACK_OBJ_DELTA_OFF_MORE);
869
870 if (o < sizeof(struct got_packfile_hdr) || o > *outsize)
871 return got_error(GOT_ERR_PACK_OFFSET);
872
873 err = got_pack_hwrite(outfd, offbuf, i, ctx);
874 if (err)
875 return err;
876
877 *outsize += i;
878 return NULL;
879 }
880
881 static const struct got_error *
882 copy_zstream(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
883 struct got_hash *ctx)
884 {
885 const struct got_error *err = NULL;
886 z_stream z;
887 int zret;
888 char voidbuf[1024];
889 size_t consumed_total = 0;
890 off_t zstream_offset = *outsize;
891
892 memset(&z, 0, sizeof(z));
893
894 z.zalloc = Z_NULL;
895 z.zfree = Z_NULL;
896 zret = inflateInit(&z);
897 if (zret != Z_OK) {
898 if (zret == Z_ERRNO)
899 return got_error_from_errno("inflateInit");
900 if (zret == Z_MEM_ERROR) {
901 errno = ENOMEM;
902 return got_error_from_errno("inflateInit");
903 }
904 return got_error_msg(GOT_ERR_DECOMPRESSION,
905 "inflateInit failed");
906 }
907
908 while (zret != Z_STREAM_END) {
909 size_t last_total_in, consumed;
910
911 /*
912 * Decompress into the void. Object data will be parsed
913 * later, when the pack file is indexed. For now, we just
914 * want to locate the end of the compressed stream.
915 */
916 while (zret != Z_STREAM_END && buf_len(buf) - *buf_pos > 0) {
917 last_total_in = z.total_in;
918 z.next_in = buf_get(buf) + *buf_pos;
919 z.avail_in = buf_len(buf) - *buf_pos;
920 z.next_out = voidbuf;
921 z.avail_out = sizeof(voidbuf);
922
923 zret = inflate(&z, Z_SYNC_FLUSH);
924 if (zret != Z_OK && zret != Z_BUF_ERROR &&
925 zret != Z_STREAM_END) {
926 err = got_error_fmt(GOT_ERR_DECOMPRESSION,
927 "packfile offset %lld",
928 (long long)zstream_offset);
929 goto done;
930 }
931 consumed = z.total_in - last_total_in;
932
933 err = got_pack_hwrite(outfd, buf_get(buf) + *buf_pos,
934 consumed, ctx);
935 if (err)
936 goto done;
937
938 err = buf_discard(buf, *buf_pos + consumed);
939 if (err)
940 goto done;
941 *buf_pos = 0;
942
943 consumed_total += consumed;
944 }
945
946 if (zret != Z_STREAM_END) {
947 err = read_more_pack_stream(infd, buf, 1);
948 if (err)
949 goto done;
950 }
951 }
952
953 if (err == NULL)
954 *outsize += consumed_total;
955 done:
956 inflateEnd(&z);
957 return err;
958 }
959
960 static const struct got_error *
961 validate_object_type(int obj_type)
962 {
963 switch (obj_type) {
964 case GOT_OBJ_TYPE_BLOB:
965 case GOT_OBJ_TYPE_COMMIT:
966 case GOT_OBJ_TYPE_TREE:
967 case GOT_OBJ_TYPE_TAG:
968 case GOT_OBJ_TYPE_REF_DELTA:
969 case GOT_OBJ_TYPE_OFFSET_DELTA:
970 return NULL;
971 default:
972 break;
973 }
974
975 return got_error(GOT_ERR_OBJ_TYPE);
976 }
977
978 static const struct got_error *
979 ensure_all_objects_exist_locally(struct gotd_ref_updates *ref_updates)
980 {
981 const struct got_error *err = NULL;
982 struct gotd_ref_update *ref_update;
983 struct got_object *obj;
984
985 STAILQ_FOREACH(ref_update, ref_updates, entry) {
986 err = got_object_open(&obj, repo_write.repo,
987 &ref_update->new_id);
988 if (err)
989 return err;
990 got_object_close(obj);
991 }
992
993 return NULL;
994 }
995
996 static const struct got_error *
997 recv_packdata(off_t *outsize, uint32_t *nobj, uint8_t *sha1,
998 int infd, int outfd)
999 {
1000 const struct got_error *err;
1001 struct repo_write_client *client = &repo_write_client;
1002 struct got_packfile_hdr hdr;
1003 size_t have;
1004 uint32_t nhave = 0;
1005 struct got_hash ctx;
1006 uint8_t expected_sha1[SHA1_DIGEST_LENGTH];
1007 char hex[SHA1_DIGEST_STRING_LENGTH];
1008 BUF *buf = NULL;
1009 size_t buf_pos = 0, remain;
1010 ssize_t w;
1011
1012 *outsize = 0;
1013 *nobj = 0;
1014
1015 /* if only deleting references there's nothing to read */
1016 if (client->nref_updates == client->nref_del)
1017 return NULL;
1018
1019 got_hash_init(&ctx, GOT_HASH_SHA1);
1020
1021 err = got_poll_read_full(infd, &have, &hdr, sizeof(hdr), sizeof(hdr));
1022 if (err)
1023 return err;
1024 if (have != sizeof(hdr))
1025 return got_error_msg(GOT_ERR_BAD_PACKFILE, "short pack file");
1026 *outsize += have;
1027
1028 if (hdr.signature != htobe32(GOT_PACKFILE_SIGNATURE))
1029 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1030 "bad packfile signature");
1031 if (hdr.version != htobe32(GOT_PACKFILE_VERSION))
1032 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1033 "bad packfile version");
1034
1035 *nobj = be32toh(hdr.nobjects);
1036 if (*nobj == 0) {
1037 /*
1038 * Clients which are creating new references only
1039 * will send us an empty pack file.
1040 */
1041 if (client->nref_updates > 0 &&
1042 client->nref_updates == client->nref_new)
1043 return NULL;
1044
1045 /*
1046 * Clients which only move existing refs will send us an empty
1047 * pack file. All referenced objects must exist locally.
1048 */
1049 err = ensure_all_objects_exist_locally(&client->ref_updates);
1050 if (err) {
1051 if (err->code != GOT_ERR_NO_OBJ)
1052 return err;
1053 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1054 "bad packfile with zero objects");
1055 }
1056
1057 client->nref_move = client->nref_updates;
1058 return NULL;
1059 }
1060
1061 log_debug("expecting %d objects", *nobj);
1062
1063 err = got_pack_hwrite(outfd, &hdr, sizeof(hdr), &ctx);
1064 if (err)
1065 return err;
1066
1067 err = buf_alloc(&buf, 65536);
1068 if (err)
1069 return err;
1070
1071 while (nhave != *nobj) {
1072 uint8_t obj_type;
1073 uint64_t obj_size;
1074
1075 err = copy_object_type_and_size(&obj_type, &obj_size,
1076 infd, outfd, outsize, buf, &buf_pos, &ctx);
1077 if (err)
1078 goto done;
1079
1080 err = validate_object_type(obj_type);
1081 if (err)
1082 goto done;
1083
1084 if (obj_type == GOT_OBJ_TYPE_REF_DELTA) {
1085 err = copy_ref_delta(infd, outfd, outsize,
1086 buf, &buf_pos, &ctx);
1087 if (err)
1088 goto done;
1089 } else if (obj_type == GOT_OBJ_TYPE_OFFSET_DELTA) {
1090 err = copy_offset_delta(infd, outfd, outsize,
1091 buf, &buf_pos, &ctx);
1092 if (err)
1093 goto done;
1094 }
1095
1096 err = copy_zstream(infd, outfd, outsize, buf, &buf_pos, &ctx);
1097 if (err)
1098 goto done;
1099
1100 nhave++;
1101 }
1102
1103 log_debug("received %u objects", *nobj);
1104
1105 got_hash_final(&ctx, expected_sha1);
1106
1107 remain = buf_len(buf) - buf_pos;
1108 if (remain < SHA1_DIGEST_LENGTH) {
1109 err = read_more_pack_stream(infd, buf,
1110 SHA1_DIGEST_LENGTH - remain);
1111 if (err)
1112 return err;
1113 }
1114
1115 got_sha1_digest_to_str(expected_sha1, hex, sizeof(hex));
1116 log_debug("expect SHA1: %s", hex);
1117 got_sha1_digest_to_str(buf_get(buf) + buf_pos, hex, sizeof(hex));
1118 log_debug("actual SHA1: %s", hex);
1119
1120 if (memcmp(buf_get(buf) + buf_pos, expected_sha1,
1121 SHA1_DIGEST_LENGTH) != 0) {
1122 err = got_error(GOT_ERR_PACKFILE_CSUM);
1123 goto done;
1124 }
1125
1126 memcpy(sha1, expected_sha1, SHA1_DIGEST_LENGTH);
1127
1128 w = write(outfd, expected_sha1, SHA1_DIGEST_LENGTH);
1129 if (w == -1) {
1130 err = got_error_from_errno("write");
1131 goto done;
1132 }
1133 if (w != SHA1_DIGEST_LENGTH) {
1134 err = got_error(GOT_ERR_IO);
1135 goto done;
1136 }
1137
1138 *outsize += SHA1_DIGEST_LENGTH;
1139
1140 if (fsync(outfd) == -1) {
1141 err = got_error_from_errno("fsync");
1142 goto done;
1143 }
1144 if (lseek(outfd, 0L, SEEK_SET) == -1) {
1145 err = got_error_from_errno("lseek");
1146 goto done;
1147 }
1148 done:
1149 buf_free(buf);
1150 return err;
1151 }
1152
1153 static const struct got_error *
1154 report_pack_status(const struct got_error *unpack_err)
1155 {
1156 const struct got_error *err = NULL;
1157 struct repo_write_client *client = &repo_write_client;
1158 struct gotd_imsg_packfile_status istatus;
1159 struct ibuf *wbuf;
1160 struct imsgbuf ibuf;
1161 const char *unpack_ok = "unpack ok\n";
1162 size_t len;
1163
1164 imsg_init(&ibuf, client->fd);
1165
1166 if (unpack_err)
1167 istatus.reason_len = strlen(unpack_err->msg);
1168 else
1169 istatus.reason_len = strlen(unpack_ok);
1170
1171 len = sizeof(istatus) + istatus.reason_len;
1172 wbuf = imsg_create(&ibuf, GOTD_IMSG_PACKFILE_STATUS, PROC_REPO_WRITE,
1173 repo_write.pid, len);
1174 if (wbuf == NULL) {
1175 err = got_error_from_errno("imsg_create PACKFILE_STATUS");
1176 goto done;
1177 }
1178
1179 if (imsg_add(wbuf, &istatus, sizeof(istatus)) == -1) {
1180 err = got_error_from_errno("imsg_add PACKFILE_STATUS");
1181 goto done;
1182 }
1183
1184 if (imsg_add(wbuf, err ? err->msg : unpack_ok,
1185 istatus.reason_len) == -1) {
1186 err = got_error_from_errno("imsg_add PACKFILE_STATUS");
1187 goto done;
1188 }
1189
1190 imsg_close(&ibuf, wbuf);
1191
1192 err = gotd_imsg_flush(&ibuf);
1193 done:
1194 imsg_clear(&ibuf);
1195 return err;
1196 }
1197
1198 static const struct got_error *
1199 recv_packfile(int *have_packfile, struct imsg *imsg)
1200 {
1201 const struct got_error *err = NULL, *unpack_err;
1202 struct repo_write_client *client = &repo_write_client;
1203 struct gotd_imsg_recv_packfile ireq;
1204 struct got_object_id id;
1205 FILE *tempfiles[3] = { NULL, NULL, NULL };
1206 struct repo_tempfile {
1207 int fd;
1208 int idx;
1209 } repo_tempfiles[3] = { { - 1, - 1 }, { - 1, - 1 }, { - 1, - 1 }, };
1210 int i;
1211 size_t datalen;
1212 struct imsgbuf ibuf;
1213 struct got_ratelimit rl;
1214 struct got_pack *pack = NULL;
1215 off_t pack_filesize = 0;
1216 uint32_t nobj = 0;
1217
1218 log_debug("packfile request received");
1219
1220 *have_packfile = 0;
1221 got_ratelimit_init(&rl, 2, 0);
1222
1223 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1224 if (datalen != sizeof(ireq))
1225 return got_error(GOT_ERR_PRIVSEP_LEN);
1226 memcpy(&ireq, imsg->data, sizeof(ireq));
1227
1228 if (client->pack_pipe == -1 || client->packidx_fd == -1)
1229 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1230
1231 imsg_init(&ibuf, client->fd);
1232
1233 pack = &client->pack;
1234 memset(pack, 0, sizeof(*pack));
1235 pack->fd = imsg_get_fd(imsg);
1236 if (pack->fd == -1)
1237 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1238
1239 err = got_delta_cache_alloc(&pack->delta_cache);
1240 if (err)
1241 goto done;
1242
1243 for (i = 0; i < nitems(repo_tempfiles); i++) {
1244 struct repo_tempfile *t = &repo_tempfiles[i];
1245 err = got_repo_temp_fds_get(&t->fd, &t->idx, repo_write.repo);
1246 if (err)
1247 goto done;
1248 }
1249
1250 for (i = 0; i < nitems(tempfiles); i++) {
1251 int fd;
1252 FILE *f;
1253
1254 fd = dup(repo_tempfiles[i].fd);
1255 if (fd == -1) {
1256 err = got_error_from_errno("dup");
1257 goto done;
1258 }
1259 f = fdopen(fd, "w+");
1260 if (f == NULL) {
1261 err = got_error_from_errno("fdopen");
1262 close(fd);
1263 goto done;
1264 }
1265 tempfiles[i] = f;
1266 }
1267
1268 err = gotd_imsg_flush(&ibuf);
1269 if (err)
1270 goto done;
1271
1272 log_debug("receiving pack data");
1273 unpack_err = recv_packdata(&pack_filesize, &nobj,
1274 client->pack_sha1, client->pack_pipe, pack->fd);
1275 if (ireq.report_status) {
1276 err = report_pack_status(unpack_err);
1277 if (err) {
1278 /* Git clients hang up after sending the pack file. */
1279 if (err->code == GOT_ERR_EOF)
1280 err = NULL;
1281 }
1282 }
1283 if (unpack_err)
1284 err = unpack_err;
1285 if (err)
1286 goto done;
1287
1288 log_debug("pack data received");
1289
1290 /*
1291 * Clients which are creating new references only will
1292 * send us an empty pack file.
1293 */
1294 if (nobj == 0 &&
1295 pack_filesize == sizeof(struct got_packfile_hdr) &&
1296 client->nref_updates > 0 &&
1297 client->nref_updates == client->nref_new)
1298 goto done;
1299
1300 /*
1301 * Clients which are deleting references only will send
1302 * no pack file.
1303 */
1304 if (nobj == 0 &&
1305 client->nref_del > 0 &&
1306 client->nref_updates == client->nref_del)
1307 goto done;
1308
1309 /*
1310 * Clients which only move existing refs will send us an empty
1311 * pack file. All referenced objects must exist locally.
1312 */
1313 if (nobj == 0 &&
1314 pack_filesize == sizeof(struct got_packfile_hdr) &&
1315 client->nref_move > 0 &&
1316 client->nref_updates == client->nref_move)
1317 goto done;
1318
1319 pack->filesize = pack_filesize;
1320 *have_packfile = 1;
1321
1322 memset(&id, 0, sizeof(id));
1323 memcpy(&id.hash, client->pack_sha1, SHA1_DIGEST_LENGTH);
1324 id.algo = GOT_HASH_SHA1;
1325
1326 log_debug("begin indexing pack (%lld bytes in size)",
1327 (long long)pack->filesize);
1328 err = got_pack_index(pack, client->packidx_fd,
1329 tempfiles[0], tempfiles[1], tempfiles[2], &id,
1330 pack_index_progress, NULL, &rl);
1331 if (err)
1332 goto done;
1333 log_debug("done indexing pack");
1334
1335 if (fsync(client->packidx_fd) == -1) {
1336 err = got_error_from_errno("fsync");
1337 goto done;
1338 }
1339 if (lseek(client->packidx_fd, 0L, SEEK_SET) == -1)
1340 err = got_error_from_errno("lseek");
1341 done:
1342 if (close(client->pack_pipe) == -1 && err == NULL)
1343 err = got_error_from_errno("close");
1344 client->pack_pipe = -1;
1345 for (i = 0; i < nitems(repo_tempfiles); i++) {
1346 struct repo_tempfile *t = &repo_tempfiles[i];
1347 if (t->idx != -1)
1348 got_repo_temp_fds_put(t->idx, repo_write.repo);
1349 }
1350 for (i = 0; i < nitems(tempfiles); i++) {
1351 if (tempfiles[i] && fclose(tempfiles[i]) == EOF && err == NULL)
1352 err = got_error_from_errno("fclose");
1353 }
1354 if (err)
1355 got_pack_close(pack);
1356 imsg_clear(&ibuf);
1357 return err;
1358 }
1359
1360 static const struct got_error *
1361 verify_packfile(void)
1362 {
1363 const struct got_error *err = NULL, *close_err;
1364 struct repo_write_client *client = &repo_write_client;
1365 struct gotd_ref_update *ref_update;
1366 struct got_packidx *packidx = NULL;
1367 struct stat sb;
1368 char *id_str = NULL;
1369 struct got_object *obj = NULL;
1370 struct got_pathlist_entry *pe;
1371 char hex[SHA1_DIGEST_STRING_LENGTH];
1372
1373 if (STAILQ_EMPTY(&client->ref_updates)) {
1374 return got_error_msg(GOT_ERR_BAD_REQUEST,
1375 "cannot verify pack file without any ref-updates");
1376 }
1377
1378 if (client->pack.fd == -1) {
1379 return got_error_msg(GOT_ERR_BAD_REQUEST,
1380 "invalid pack file handle during pack verification");
1381 }
1382 if (client->packidx_fd == -1) {
1383 return got_error_msg(GOT_ERR_BAD_REQUEST,
1384 "invalid pack index handle during pack verification");
1385 }
1386
1387 if (fstat(client->packidx_fd, &sb) == -1)
1388 return got_error_from_errno("pack index fstat");
1389
1390 packidx = malloc(sizeof(*packidx));
1391 memset(packidx, 0, sizeof(*packidx));
1392 packidx->fd = client->packidx_fd;
1393 client->packidx_fd = -1;
1394 packidx->len = sb.st_size;
1395
1396 err = got_packidx_init_hdr(packidx, 1, client->pack.filesize);
1397 if (err)
1398 return err;
1399
1400 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1401 if (ref_update->delete_ref)
1402 continue;
1403
1404 TAILQ_FOREACH(pe, repo_write.protected_tag_namespaces, entry) {
1405 err = protect_tag_namespace(pe->path, &client->pack,
1406 packidx, ref_update);
1407 if (err)
1408 goto done;
1409 }
1410
1411 /*
1412 * Objects which already exist in our repository need
1413 * not be present in the pack file.
1414 */
1415 err = got_object_open(&obj, repo_write.repo,
1416 &ref_update->new_id);
1417 if (err && err->code != GOT_ERR_NO_OBJ)
1418 goto done;
1419 err = NULL;
1420 if (obj) {
1421 got_object_close(obj);
1422 obj = NULL;
1423 } else {
1424 int idx = got_packidx_get_object_idx(packidx,
1425 &ref_update->new_id);
1426 if (idx == -1) {
1427 got_object_id_hex(&ref_update->new_id,
1428 hex, sizeof(hex));
1429 err = got_error_fmt(GOT_ERR_BAD_PACKFILE,
1430 "object %s is missing from pack file",
1431 hex);
1432 goto done;
1433 }
1434 }
1435
1436 TAILQ_FOREACH(pe, repo_write.protected_branch_namespaces,
1437 entry) {
1438 err = protect_branch_namespace(pe->path,
1439 &client->pack, packidx, ref_update);
1440 if (err)
1441 goto done;
1442 }
1443 TAILQ_FOREACH(pe, repo_write.protected_branches, entry) {
1444 err = protect_branch(pe->path, &client->pack,
1445 packidx, ref_update);
1446 if (err)
1447 goto done;
1448 }
1449 }
1450
1451 done:
1452 close_err = got_packidx_close(packidx);
1453 if (close_err && err == NULL)
1454 err = close_err;
1455 free(id_str);
1456 if (obj)
1457 got_object_close(obj);
1458 return err;
1459 }
1460
1461 static const struct got_error *
1462 protect_refs_from_deletion(void)
1463 {
1464 const struct got_error *err = NULL;
1465 struct repo_write_client *client = &repo_write_client;
1466 struct gotd_ref_update *ref_update;
1467 struct got_pathlist_entry *pe;
1468 const char *refname;
1469
1470 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1471 if (!ref_update->delete_ref)
1472 continue;
1473
1474 refname = got_ref_get_name(ref_update->ref);
1475
1476 TAILQ_FOREACH(pe, repo_write.protected_tag_namespaces, entry) {
1477 err = protect_ref_namespace(refname, pe->path);
1478 if (err)
1479 return err;
1480 }
1481
1482 TAILQ_FOREACH(pe, repo_write.protected_branch_namespaces,
1483 entry) {
1484 err = protect_ref_namespace(refname, pe->path);
1485 if (err)
1486 return err;
1487 }
1488
1489 TAILQ_FOREACH(pe, repo_write.protected_branches, entry) {
1490 if (strcmp(refname, pe->path) == 0) {
1491 return got_error_fmt(GOT_ERR_REF_PROTECTED,
1492 "%s", refname);
1493 }
1494 }
1495 }
1496
1497 return NULL;
1498 }
1499
1500 static const struct got_error *
1501 install_packfile(struct gotd_imsgev *iev)
1502 {
1503 struct repo_write_client *client = &repo_write_client;
1504 struct gotd_imsg_packfile_install inst;
1505 int ret;
1506
1507 memset(&inst, 0, sizeof(inst));
1508 memcpy(inst.pack_sha1, client->pack_sha1, SHA1_DIGEST_LENGTH);
1509
1510 ret = gotd_imsg_compose_event(iev, GOTD_IMSG_PACKFILE_INSTALL,
1511 PROC_REPO_WRITE, -1, &inst, sizeof(inst));
1512 if (ret == -1)
1513 return got_error_from_errno("imsg_compose PACKFILE_INSTALL");
1514
1515 return NULL;
1516 }
1517
1518 static const struct got_error *
1519 send_ref_updates_start(int nref_updates, struct gotd_imsgev *iev)
1520 {
1521 struct gotd_imsg_ref_updates_start istart;
1522 int ret;
1523
1524 memset(&istart, 0, sizeof(istart));
1525 istart.nref_updates = nref_updates;
1526
1527 ret = gotd_imsg_compose_event(iev, GOTD_IMSG_REF_UPDATES_START,
1528 PROC_REPO_WRITE, -1, &istart, sizeof(istart));
1529 if (ret == -1)
1530 return got_error_from_errno("imsg_compose REF_UPDATES_START");
1531
1532 return NULL;
1533 }
1534
1535
1536 static const struct got_error *
1537 send_ref_update(struct gotd_ref_update *ref_update, struct gotd_imsgev *iev)
1538 {
1539 struct gotd_imsg_ref_update iref;
1540 const char *refname = got_ref_get_name(ref_update->ref);
1541 struct ibuf *wbuf;
1542 size_t len;
1543
1544 memset(&iref, 0, sizeof(iref));
1545 memcpy(iref.old_id, ref_update->old_id.hash, SHA1_DIGEST_LENGTH);
1546 memcpy(iref.new_id, ref_update->new_id.hash, SHA1_DIGEST_LENGTH);
1547 iref.ref_is_new = ref_update->ref_is_new;
1548 iref.delete_ref = ref_update->delete_ref;
1549 iref.name_len = strlen(refname);
1550
1551 len = sizeof(iref) + iref.name_len;
1552 wbuf = imsg_create(&iev->ibuf, GOTD_IMSG_REF_UPDATE, PROC_REPO_WRITE,
1553 repo_write.pid, len);
1554 if (wbuf == NULL)
1555 return got_error_from_errno("imsg_create REF_UPDATE");
1556
1557 if (imsg_add(wbuf, &iref, sizeof(iref)) == -1)
1558 return got_error_from_errno("imsg_add REF_UPDATE");
1559 if (imsg_add(wbuf, refname, iref.name_len) == -1)
1560 return got_error_from_errno("imsg_add REF_UPDATE");
1561
1562 imsg_close(&iev->ibuf, wbuf);
1563
1564 gotd_imsg_event_add(iev);
1565 return NULL;
1566 }
1567
1568 static const struct got_error *
1569 update_refs(struct gotd_imsgev *iev)
1570 {
1571 const struct got_error *err = NULL;
1572 struct repo_write_client *client = &repo_write_client;
1573 struct gotd_ref_update *ref_update;
1574
1575 err = send_ref_updates_start(client->nref_updates, iev);
1576 if (err)
1577 return err;
1578
1579 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1580 err = send_ref_update(ref_update, iev);
1581 if (err)
1582 goto done;
1583 }
1584 done:
1585 return err;
1586 }
1587
1588 static const struct got_error *
1589 receive_pack_pipe(struct imsg *imsg, struct gotd_imsgev *iev)
1590 {
1591 struct repo_write_client *client = &repo_write_client;
1592 size_t datalen;
1593
1594 log_debug("receiving pack pipe descriptor");
1595
1596 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1597 if (datalen != 0)
1598 return got_error(GOT_ERR_PRIVSEP_LEN);
1599
1600 if (client->pack_pipe != -1)
1601 return got_error(GOT_ERR_PRIVSEP_MSG);
1602
1603 client->pack_pipe = imsg_get_fd(imsg);
1604 if (client->pack_pipe == -1)
1605 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1606
1607 return NULL;
1608 }
1609
1610 static const struct got_error *
1611 receive_pack_idx(struct imsg *imsg, struct gotd_imsgev *iev)
1612 {
1613 struct repo_write_client *client = &repo_write_client;
1614 size_t datalen;
1615
1616 log_debug("receiving pack index output file");
1617
1618 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1619 if (datalen != 0)
1620 return got_error(GOT_ERR_PRIVSEP_LEN);
1621
1622 if (client->packidx_fd != -1)
1623 return got_error(GOT_ERR_PRIVSEP_MSG);
1624
1625 client->packidx_fd = imsg_get_fd(imsg);
1626 if (client->packidx_fd == -1)
1627 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1628
1629 return NULL;
1630 }
1631
1632 static const struct got_error *
1633 notify_removed_ref(const char *refname, struct got_object_id *id,
1634 struct gotd_imsgev *iev, int fd)
1635 {
1636 const struct got_error *err;
1637 char *id_str;
1638
1639 err = got_object_id_str(&id_str, id);
1640 if (err)
1641 return err;
1642
1643 dprintf(fd, "Removed %s: %s\n", refname, id_str);
1644 free(id_str);
1645 return err;
1646 }
1647
1648 static const char *
1649 format_author(char *author)
1650 {
1651 char *smallerthan;
1652
1653 smallerthan = strchr(author, '<');
1654 if (smallerthan && smallerthan[1] != '\0')
1655 author = smallerthan + 1;
1656 author[strcspn(author, "@>")] = '\0';
1657
1658 return author;
1659 }
1660
1661 static const struct got_error *
1662 print_commit_oneline(struct got_commit_object *commit, struct got_object_id *id,
1663 struct got_repository *repo, int fd)
1664 {
1665 const struct got_error *err = NULL;
1666 char *id_str = NULL, *logmsg0 = NULL;
1667 char *s, *nl;
1668 char *committer = NULL, *author = NULL;
1669 time_t committer_time;
1670
1671 err = got_object_id_str(&id_str, id);
1672 if (err)
1673 return err;
1674
1675 committer_time = got_object_commit_get_committer_time(commit);
1676
1677 err = got_object_commit_get_logmsg(&logmsg0, commit);
1678 if (err)
1679 goto done;
1680
1681 s = logmsg0;
1682 while (isspace((unsigned char)s[0]))
1683 s++;
1684
1685 nl = strchr(s, '\n');
1686 if (nl) {
1687 *nl = '\0';
1688 }
1689
1690 if (strcmp(got_object_commit_get_author(commit),
1691 got_object_commit_get_committer(commit)) != 0) {
1692 author = strdup(got_object_commit_get_author(commit));
1693 if (author == NULL) {
1694 err = got_error_from_errno("strdup");
1695 goto done;
1696 }
1697 dprintf(fd, "%lld %.7s %.8s %s\n", (long long)committer_time,
1698 id_str, format_author(author), s);
1699 } else {
1700 committer = strdup(got_object_commit_get_committer(commit));
1701 dprintf(fd, "%lld %.7s %.8s %s\n", (long long)committer_time,
1702 id_str, format_author(committer), s);
1703 }
1704
1705 if (fsync(fd) == -1 && err == NULL)
1706 err = got_error_from_errno("fsync");
1707 done:
1708 free(id_str);
1709 free(logmsg0);
1710 free(committer);
1711 free(author);
1712 return err;
1713 }
1714
1715 static const struct got_error *
1716 print_diffstat(struct got_diffstat_cb_arg *dsa, int fd)
1717 {
1718 struct got_pathlist_entry *pe;
1719
1720 TAILQ_FOREACH(pe, dsa->paths, entry) {
1721 struct got_diff_changed_path *cp = pe->data;
1722 int pad = dsa->max_path_len - pe->path_len + 1;
1723
1724 dprintf(fd, " %c %s%*c | %*d+ %*d-\n", cp->status,
1725 pe->path, pad, ' ', dsa->add_cols + 1, cp->add,
1726 dsa->rm_cols + 1, cp->rm);
1727 }
1728 dprintf(fd,
1729 "\n%d file%s changed, %d insertion%s(+), %d deletion%s(-)\n\n",
1730 dsa->nfiles, dsa->nfiles > 1 ? "s" : "", dsa->ins,
1731 dsa->ins != 1 ? "s" : "", dsa->del, dsa->del != 1 ? "s" : "");
1732
1733 return NULL;
1734 }
1735
1736 static const struct got_error *
1737 print_commit(struct got_commit_object *commit, struct got_object_id *id,
1738 struct got_repository *repo, struct got_pathlist_head *changed_paths,
1739 struct got_diffstat_cb_arg *diffstat, int fd)
1740 {
1741 const struct got_error *err = NULL;
1742 char *id_str, *logmsg0, *logmsg, *line;
1743 time_t committer_time;
1744 const char *author, *committer;
1745
1746 err = got_object_id_str(&id_str, id);
1747 if (err)
1748 return err;
1749
1750 dprintf(fd, "commit %s\n", id_str);
1751 free(id_str);
1752 id_str = NULL;
1753 dprintf(fd, "from: %s\n", got_object_commit_get_author(commit));
1754 author = got_object_commit_get_author(commit);
1755 committer = got_object_commit_get_committer(commit);
1756 if (strcmp(author, committer) != 0)
1757 dprintf(fd, "via: %s\n", committer);
1758 committer_time = got_object_commit_get_committer_time(commit);
1759 dprintf(fd, "date: %lld\n", (long long)committer_time);
1760 if (got_object_commit_get_nparents(commit) > 1) {
1761 const struct got_object_id_queue *parent_ids;
1762 struct got_object_qid *qid;
1763 int n = 1;
1764 parent_ids = got_object_commit_get_parent_ids(commit);
1765 STAILQ_FOREACH(qid, parent_ids, entry) {
1766 err = got_object_id_str(&id_str, &qid->id);
1767 if (err)
1768 goto done;
1769 dprintf(fd, "parent %d: %s\n", n++, id_str);
1770 free(id_str);
1771 id_str = NULL;
1772 }
1773 }
1774
1775 err = got_object_commit_get_logmsg(&logmsg0, commit);
1776 if (err)
1777 goto done;
1778
1779 dprintf(fd, "messagelen: %zu\n", strlen(logmsg0));
1780
1781 logmsg = logmsg0;
1782 do {
1783 line = strsep(&logmsg, "\n");
1784 if (line)
1785 dprintf(fd, " %s\n", line);
1786 } while (line);
1787 free(logmsg0);
1788
1789 err = print_diffstat(diffstat, fd);
1790 if (err)
1791 goto done;
1792
1793 if (fsync(fd) == -1 && err == NULL)
1794 err = got_error_from_errno("fsync");
1795 done:
1796 free(id_str);
1797 return err;
1798 }
1799
1800 static const struct got_error *
1801 get_changed_paths(struct got_pathlist_head *paths,
1802 struct got_commit_object *commit, struct got_repository *repo,
1803 struct got_diffstat_cb_arg *dsa)
1804 {
1805 const struct got_error *err = NULL;
1806 struct got_object_id *tree_id1 = NULL, *tree_id2 = NULL;
1807 struct got_tree_object *tree1 = NULL, *tree2 = NULL;
1808 struct got_object_qid *qid;
1809 got_diff_blob_cb cb = got_diff_tree_collect_changed_paths;
1810 FILE *f1 = repo_write.diff.f1, *f2 = repo_write.diff.f2;
1811 int fd1 = repo_write.diff.fd1, fd2 = repo_write.diff.fd2;
1812
1813 if (dsa)
1814 cb = got_diff_tree_compute_diffstat;
1815
1816 err = got_opentemp_truncate(f1);
1817 if (err)
1818 return err;
1819 err = got_opentemp_truncate(f2);
1820 if (err)
1821 return err;
1822 err = got_opentemp_truncatefd(fd1);
1823 if (err)
1824 return err;
1825 err = got_opentemp_truncatefd(fd2);
1826 if (err)
1827 return err;
1828
1829 qid = STAILQ_FIRST(got_object_commit_get_parent_ids(commit));
1830 if (qid != NULL) {
1831 struct got_commit_object *pcommit;
1832 err = got_object_open_as_commit(&pcommit, repo,
1833 &qid->id);
1834 if (err)
1835 return err;
1836
1837 tree_id1 = got_object_id_dup(
1838 got_object_commit_get_tree_id(pcommit));
1839 if (tree_id1 == NULL) {
1840 got_object_commit_close(pcommit);
1841 return got_error_from_errno("got_object_id_dup");
1842 }
1843 got_object_commit_close(pcommit);
1844
1845 }
1846
1847 if (tree_id1) {
1848 err = got_object_open_as_tree(&tree1, repo, tree_id1);
1849 if (err)
1850 goto done;
1851 }
1852
1853 tree_id2 = got_object_commit_get_tree_id(commit);
1854 err = got_object_open_as_tree(&tree2, repo, tree_id2);
1855 if (err)
1856 goto done;
1857
1858 err = got_diff_tree(tree1, tree2, f1, f2, fd1, fd2, "", "", repo,
1859 cb, dsa ? (void *)dsa : paths, dsa ? 1 : 0);
1860 done:
1861 if (tree1)
1862 got_object_tree_close(tree1);
1863 if (tree2)
1864 got_object_tree_close(tree2);
1865 free(tree_id1);
1866 return err;
1867 }
1868
1869 static const struct got_error *
1870 print_commits(struct got_object_id *root_id, struct got_object_id *end_id,
1871 struct got_repository *repo, int fd)
1872 {
1873 const struct got_error *err;
1874 struct got_commit_graph *graph;
1875 struct got_object_id_queue reversed_commits;
1876 struct got_object_qid *qid;
1877 struct got_commit_object *commit = NULL;
1878 struct got_pathlist_head changed_paths;
1879 int ncommits = 0;
1880 const int shortlog_threshold = 50;
1881
1882 STAILQ_INIT(&reversed_commits);
1883 TAILQ_INIT(&changed_paths);
1884
1885 /* XXX first-parent only for now */
1886 err = got_commit_graph_open(&graph, "/", 1);
1887 if (err)
1888 return err;
1889 err = got_commit_graph_bfsort(graph, root_id, repo,
1890 check_cancelled, NULL);
1891 if (err)
1892 goto done;
1893 for (;;) {
1894 struct got_object_id id;
1895
1896 err = got_commit_graph_iter_next(&id, graph, repo,
1897 check_cancelled, NULL);
1898 if (err) {
1899 if (err->code == GOT_ERR_ITER_COMPLETED)
1900 err = NULL;
1901 break;
1902 }
1903
1904 err = got_object_open_as_commit(&commit, repo, &id);
1905 if (err)
1906 break;
1907
1908 if (end_id && got_object_id_cmp(&id, end_id) == 0)
1909 break;
1910
1911 err = got_object_qid_alloc(&qid, &id);
1912 if (err)
1913 break;
1914
1915 STAILQ_INSERT_HEAD(&reversed_commits, qid, entry);
1916 ncommits++;
1917 got_object_commit_close(commit);
1918
1919 if (end_id == NULL)
1920 break;
1921 }
1922
1923 STAILQ_FOREACH(qid, &reversed_commits, entry) {
1924 struct got_diffstat_cb_arg dsa = { 0, 0, 0, 0, 0, 0,
1925 &changed_paths, 0, 0, GOT_DIFF_ALGORITHM_PATIENCE };
1926
1927 err = got_object_open_as_commit(&commit, repo, &qid->id);
1928 if (err)
1929 break;
1930
1931 if (ncommits > shortlog_threshold) {
1932 err = print_commit_oneline(commit, &qid->id,
1933 repo, fd);
1934 if (err)
1935 break;
1936 } else {
1937 err = get_changed_paths(&changed_paths, commit,
1938 repo, &dsa);
1939 if (err)
1940 break;
1941 err = print_commit(commit, &qid->id, repo,
1942 &changed_paths, &dsa, fd);
1943 }
1944 got_object_commit_close(commit);
1945 commit = NULL;
1946 got_pathlist_free(&changed_paths, GOT_PATHLIST_FREE_ALL);
1947 }
1948 done:
1949 if (commit)
1950 got_object_commit_close(commit);
1951 while (!STAILQ_EMPTY(&reversed_commits)) {
1952 qid = STAILQ_FIRST(&reversed_commits);
1953 STAILQ_REMOVE_HEAD(&reversed_commits, entry);
1954 got_object_qid_free(qid);
1955 }
1956 got_pathlist_free(&changed_paths, GOT_PATHLIST_FREE_ALL);
1957 got_commit_graph_close(graph);
1958 return err;
1959 }
1960
1961 static const struct got_error *
1962 print_tag(struct got_object_id *id,
1963 const char *refname, struct got_repository *repo, int fd)
1964 {
1965 const struct got_error *err = NULL;
1966 struct got_tag_object *tag = NULL;
1967 const char *tagger = NULL;
1968 char *id_str = NULL, *tagmsg0 = NULL, *tagmsg, *line;
1969 time_t tagger_time;
1970
1971 err = got_object_open_as_tag(&tag, repo, id);
1972 if (err)
1973 return err;
1974
1975 tagger = got_object_tag_get_tagger(tag);
1976 tagger_time = got_object_tag_get_tagger_time(tag);
1977 err = got_object_id_str(&id_str,
1978 got_object_tag_get_object_id(tag));
1979 if (err)
1980 goto done;
1981
1982 dprintf(fd, "tag %s\n", refname);
1983 dprintf(fd, "from: %s\n", tagger);
1984 dprintf(fd, "date: %lld\n", (long long)tagger_time);
1985
1986 switch (got_object_tag_get_object_type(tag)) {
1987 case GOT_OBJ_TYPE_BLOB:
1988 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_BLOB, id_str);
1989 break;
1990 case GOT_OBJ_TYPE_TREE:
1991 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_TREE, id_str);
1992 break;
1993 case GOT_OBJ_TYPE_COMMIT:
1994 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_COMMIT, id_str);
1995 break;
1996 case GOT_OBJ_TYPE_TAG:
1997 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_TAG, id_str);
1998 break;
1999 default:
2000 break;
2001 }
2002
2003 tagmsg0 = strdup(got_object_tag_get_message(tag));
2004 if (tagmsg0 == NULL) {
2005 err = got_error_from_errno("strdup");
2006 goto done;
2007 }
2008
2009 dprintf(fd, "messagelen: %zu\n", strlen(tagmsg0));
2010
2011 tagmsg = tagmsg0;
2012 do {
2013 line = strsep(&tagmsg, "\n");
2014 if (line)
2015 dprintf(fd, " %s\n", line);
2016 } while (line);
2017 free(tagmsg0);
2018 done:
2019 if (tag)
2020 got_object_tag_close(tag);
2021 free(id_str);
2022 return err;
2023 }
2024
2025 static const struct got_error *
2026 notify_changed_ref(const char *refname, struct got_object_id *old_id,
2027 struct got_object_id *new_id, struct gotd_imsgev *iev, int fd)
2028 {
2029 const struct got_error *err;
2030 int old_obj_type, new_obj_type;
2031 const char *label;
2032 char *new_id_str = NULL;
2033
2034 err = got_object_get_type(&old_obj_type, repo_write.repo, old_id);
2035 if (err)
2036 return err;
2037
2038 err = got_object_get_type(&new_obj_type, repo_write.repo, new_id);
2039 if (err)
2040 return err;
2041
2042 switch (new_obj_type) {
2043 case GOT_OBJ_TYPE_COMMIT:
2044 err = print_commits(new_id,
2045 old_obj_type == GOT_OBJ_TYPE_COMMIT ? old_id : NULL,
2046 repo_write.repo, fd);
2047 break;
2048 case GOT_OBJ_TYPE_TAG:
2049 err = print_tag(new_id, refname, repo_write.repo, fd);
2050 break;
2051 default:
2052 err = got_object_type_label(&label, new_obj_type);
2053 if (err)
2054 goto done;
2055 err = got_object_id_str(&new_id_str, new_id);
2056 if (err)
2057 goto done;
2058 dprintf(fd, "%s: %s object %s\n", refname, label, new_id_str);
2059 break;
2060 }
2061 done:
2062 free(new_id_str);
2063 return err;
2064 }
2065
2066 static const struct got_error *
2067 notify_created_ref(const char *refname, struct got_object_id *id,
2068 struct gotd_imsgev *iev, int fd)
2069 {
2070 const struct got_error *err;
2071 int obj_type;
2072
2073 err = got_object_get_type(&obj_type, repo_write.repo, id);
2074 if (err)
2075 return err;
2076
2077 if (obj_type == GOT_OBJ_TYPE_TAG)
2078 return print_tag(id, refname, repo_write.repo, fd);
2079
2080 return print_commits(id, NULL, repo_write.repo, fd);
2081 }
2082
2083 static const struct got_error *
2084 render_notification(struct imsg *imsg, struct gotd_imsgev *iev)
2085 {
2086 const struct got_error *err = NULL;
2087 struct gotd_imsg_notification_content ireq;
2088 size_t datalen, len;
2089 char *refname = NULL;
2090 struct ibuf *wbuf;
2091 int fd = -1;
2092
2093 fd = imsg_get_fd(imsg);
2094 if (fd == -1)
2095 return got_error(GOT_ERR_PRIVSEP_NO_FD);
2096
2097 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
2098 if (datalen < sizeof(ireq)) {
2099 err = got_error(GOT_ERR_PRIVSEP_LEN);
2100 goto done;
2101 }
2102
2103 memcpy(&ireq, imsg->data, sizeof(ireq));
2104
2105 if (datalen != sizeof(ireq) + ireq.refname_len) {
2106 err = got_error(GOT_ERR_PRIVSEP_LEN);
2107 goto done;
2108 }
2109
2110 refname = strndup(imsg->data + sizeof(ireq), ireq.refname_len);
2111 if (refname == NULL) {
2112 err = got_error_from_errno("strndup");
2113 goto done;
2114 }
2115
2116 switch (ireq.action) {
2117 case GOTD_NOTIF_ACTION_CREATED:
2118 err = notify_created_ref(refname, &ireq.new_id, iev, fd);
2119 break;
2120 case GOTD_NOTIF_ACTION_REMOVED:
2121 err = notify_removed_ref(refname, &ireq.old_id, iev, fd);
2122 break;
2123 case GOTD_NOTIF_ACTION_CHANGED:
2124 err = notify_changed_ref(refname, &ireq.old_id, &ireq.new_id,
2125 iev, fd);
2126 break;
2127 }
2128 if (err != NULL)
2129 goto done;
2130
2131 if (fsync(fd) == -1) {
2132 err = got_error_from_errno("fsync");
2133 goto done;
2134 }
2135
2136 len = sizeof(ireq) + ireq.refname_len;
2137 wbuf = imsg_create(&iev->ibuf, GOTD_IMSG_NOTIFY, PROC_REPO_WRITE,
2138 repo_write.pid, len);
2139 if (wbuf == NULL) {
2140 err = got_error_from_errno("imsg_create REF");
2141 goto done;
2142 }
2143 if (imsg_add(wbuf, &ireq, sizeof(ireq)) == -1) {
2144 err = got_error_from_errno("imsg_add NOTIFY");
2145 goto done;
2146 }
2147 if (imsg_add(wbuf, refname, ireq.refname_len) == -1) {
2148 err = got_error_from_errno("imsg_add NOTIFY");
2149 goto done;
2150 }
2151
2152 imsg_close(&iev->ibuf, wbuf);
2153 gotd_imsg_event_add(iev);
2154 done:
2155 free(refname);
2156 if (fd != -1 && close(fd) == -1 && err == NULL)
2157 err = got_error_from_errno("close");
2158 return err;
2159 }
2160
2161 static void
2162 repo_write_dispatch_session(int fd, short event, void *arg)
2163 {
2164 const struct got_error *err = NULL;
2165 struct gotd_imsgev *iev = arg;
2166 struct imsgbuf *ibuf = &iev->ibuf;
2167 struct imsg imsg;
2168 struct repo_write_client *client = &repo_write_client;
2169 ssize_t n;
2170 int shut = 0, have_packfile = 0;
2171
2172 if (event & EV_READ) {
2173 if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
2174 fatal("imsg_read error");
2175 if (n == 0) /* Connection closed. */
2176 shut = 1;
2177 }
2178
2179 if (event & EV_WRITE) {
2180 n = msgbuf_write(&ibuf->w);
2181 if (n == -1 && errno != EAGAIN)
2182 fatal("msgbuf_write");
2183 if (n == 0) /* Connection closed. */
2184 shut = 1;
2185 }
2186
2187 for (;;) {
2188 if ((n = imsg_get(ibuf, &imsg)) == -1)
2189 fatal("%s: imsg_get error", __func__);
2190 if (n == 0) /* No more messages. */
2191 break;
2192
2193 if (imsg.hdr.type != GOTD_IMSG_LIST_REFS_INTERNAL &&
2194 !repo_write.refs_listed) {
2195 err = got_error(GOT_ERR_PRIVSEP_MSG);
2196 break;
2197 }
2198
2199 switch (imsg.hdr.type) {
2200 case GOTD_IMSG_LIST_REFS_INTERNAL:
2201 err = list_refs(&imsg);
2202 if (err)
2203 log_warnx("ls-refs: %s", err->msg);
2204 break;
2205 case GOTD_IMSG_REF_UPDATE:
2206 err = recv_ref_update(&imsg);
2207 if (err)
2208 log_warnx("ref-update: %s", err->msg);
2209 break;
2210 case GOTD_IMSG_PACKFILE_PIPE:
2211 err = receive_pack_pipe(&imsg, iev);
2212 if (err) {
2213 log_warnx("receiving pack pipe: %s", err->msg);
2214 break;
2215 }
2216 break;
2217 case GOTD_IMSG_PACKIDX_FILE:
2218 err = receive_pack_idx(&imsg, iev);
2219 if (err) {
2220 log_warnx("receiving pack index: %s",
2221 err->msg);
2222 break;
2223 }
2224 break;
2225 case GOTD_IMSG_RECV_PACKFILE:
2226 err = protect_refs_from_deletion();
2227 if (err)
2228 break;
2229 err = recv_packfile(&have_packfile, &imsg);
2230 if (err) {
2231 log_warnx("receive packfile: %s", err->msg);
2232 break;
2233 }
2234 if (have_packfile) {
2235 err = verify_packfile();
2236 if (err) {
2237 log_warnx("verify packfile: %s",
2238 err->msg);
2239 break;
2240 }
2241 err = install_packfile(iev);
2242 if (err) {
2243 log_warnx("install packfile: %s",
2244 err->msg);
2245 break;
2246 }
2247 /*
2248 * Ensure we re-read the pack index list
2249 * upon next access.
2250 */
2251 repo_write.repo->pack_path_mtime.tv_sec = 0;
2252 repo_write.repo->pack_path_mtime.tv_nsec = 0;
2253 }
2254 err = update_refs(iev);
2255 if (err) {
2256 log_warnx("update refs: %s", err->msg);
2257 }
2258 break;
2259 case GOTD_IMSG_NOTIFY:
2260 err = render_notification(&imsg, iev);
2261 if (err) {
2262 log_warnx("render notification: %s", err->msg);
2263 shut = 1;
2264 }
2265 break;
2266 default:
2267 log_debug("unexpected imsg %d", imsg.hdr.type);
2268 break;
2269 }
2270
2271 imsg_free(&imsg);
2272 }
2273
2274 if (!shut && check_cancelled(NULL) == NULL) {
2275 if (err &&
2276 gotd_imsg_send_error_event(iev, PROC_REPO_WRITE,
2277 client->id, err) == -1) {
2278 log_warnx("could not send error to parent: %s",
2279 err->msg);
2280 }
2281 gotd_imsg_event_add(iev);
2282 } else {
2283 /* This pipe is dead. Remove its event handler */
2284 event_del(&iev->ev);
2285 event_loopexit(NULL);
2286 }
2287 }
2288
2289 static const struct got_error *
2290 recv_connect(struct imsg *imsg)
2291 {
2292 struct gotd_imsgev *iev = &repo_write.session_iev;
2293 size_t datalen;
2294
2295 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
2296 if (datalen != 0)
2297 return got_error(GOT_ERR_PRIVSEP_LEN);
2298
2299 if (repo_write.session_fd != -1)
2300 return got_error(GOT_ERR_PRIVSEP_MSG);
2301
2302 repo_write.session_fd = imsg_get_fd(imsg);
2303 if (repo_write.session_fd == -1)
2304 return got_error(GOT_ERR_PRIVSEP_NO_FD);
2305
2306 imsg_init(&iev->ibuf, repo_write.session_fd);
2307 iev->handler = repo_write_dispatch_session;
2308 iev->events = EV_READ;
2309 iev->handler_arg = NULL;
2310 event_set(&iev->ev, iev->ibuf.fd, EV_READ,
2311 repo_write_dispatch_session, iev);
2312 gotd_imsg_event_add(iev);
2313
2314 return NULL;
2315 }
2316
2317 static void
2318 repo_write_dispatch(int fd, short event, void *arg)
2319 {
2320 const struct got_error *err = NULL;
2321 struct gotd_imsgev *iev = arg;
2322 struct imsgbuf *ibuf = &iev->ibuf;
2323 struct imsg imsg;
2324 ssize_t n;
2325 int shut = 0;
2326 struct repo_write_client *client = &repo_write_client;
2327
2328 if (event & EV_READ) {
2329 if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
2330 fatal("imsg_read error");
2331 if (n == 0) { /* Connection closed. */
2332 shut = 1;
2333 goto done;
2334 }
2335 }
2336
2337 if (event & EV_WRITE) {
2338 n = msgbuf_write(&ibuf->w);
2339 if (n == -1 && errno != EAGAIN)
2340 fatal("msgbuf_write");
2341 if (n == 0) { /* Connection closed. */
2342 shut = 1;
2343 goto done;
2344 }
2345 }
2346
2347 while (err == NULL) {
2348 err = check_cancelled(NULL);
2349 if (err)
2350 break;
2351 if ((n = imsg_get(ibuf, &imsg)) == -1)
2352 fatal("%s: imsg_get", __func__);
2353 if (n == 0) /* No more messages. */
2354 break;
2355
2356 switch (imsg.hdr.type) {
2357 case GOTD_IMSG_CONNECT_REPO_CHILD:
2358 err = recv_connect(&imsg);
2359 break;
2360 default:
2361 log_debug("unexpected imsg %d", imsg.hdr.type);
2362 err = got_error(GOT_ERR_PRIVSEP_MSG);
2363 break;
2364 }
2365
2366 imsg_free(&imsg);
2367 }
2368
2369 if (err && gotd_imsg_send_error_event(iev, PROC_REPO_WRITE,
2370 client->id, err) == -1)
2371 log_warnx("could not send error to parent: %s", err->msg);
2372 done:
2373 if (!shut) {
2374 gotd_imsg_event_add(iev);
2375 } else {
2376 /* This pipe is dead. Remove its event handler */
2377 event_del(&iev->ev);
2378 event_loopexit(NULL);
2379 }
2380 }
2381
2382 void
2383 repo_write_main(const char *title, const char *repo_path,
2384 int *pack_fds, int *temp_fds,
2385 FILE *diff_f1, FILE *diff_f2, int diff_fd1, int diff_fd2,
2386 struct got_pathlist_head *protected_tag_namespaces,
2387 struct got_pathlist_head *protected_branch_namespaces,
2388 struct got_pathlist_head *protected_branches)
2389 {
2390 const struct got_error *err = NULL;
2391 struct repo_write_client *client = &repo_write_client;
2392 struct gotd_imsgev iev;
2393
2394 client->fd = -1;
2395 client->pack_pipe = -1;
2396 client->packidx_fd = -1;
2397 client->pack.fd = -1;
2398
2399 repo_write.title = title;
2400 repo_write.pid = getpid();
2401 repo_write.pack_fds = pack_fds;
2402 repo_write.temp_fds = temp_fds;
2403 repo_write.session_fd = -1;
2404 repo_write.session_iev.ibuf.fd = -1;
2405 repo_write.protected_tag_namespaces = protected_tag_namespaces;
2406 repo_write.protected_branch_namespaces = protected_branch_namespaces;
2407 repo_write.protected_branches = protected_branches;
2408 repo_write.diff.f1 = diff_f1;
2409 repo_write.diff.f2 = diff_f2;
2410 repo_write.diff.fd1 = diff_fd1;
2411 repo_write.diff.fd2 = diff_fd2;
2412
2413 STAILQ_INIT(&repo_write_client.ref_updates);
2414
2415 err = got_repo_open(&repo_write.repo, repo_path, NULL, pack_fds);
2416 if (err)
2417 goto done;
2418 if (!got_repo_is_bare(repo_write.repo)) {
2419 err = got_error_msg(GOT_ERR_NOT_GIT_REPO,
2420 "bare git repository required");
2421 goto done;
2422 }
2423 if (got_repo_get_object_format(repo_write.repo) != GOT_HASH_SHA1) {
2424 err = got_error_msg(GOT_ERR_NOT_IMPL,
2425 "sha256 object IDs unsupported in network protocol");
2426 goto done;
2427 }
2428
2429 got_repo_temp_fds_set(repo_write.repo, temp_fds);
2430
2431 signal(SIGINT, catch_sigint);
2432 signal(SIGTERM, catch_sigterm);
2433 signal(SIGPIPE, SIG_IGN);
2434 signal(SIGHUP, SIG_IGN);
2435
2436 imsg_init(&iev.ibuf, GOTD_FILENO_MSG_PIPE);
2437 iev.handler = repo_write_dispatch;
2438 iev.events = EV_READ;
2439 iev.handler_arg = NULL;
2440 event_set(&iev.ev, iev.ibuf.fd, EV_READ, repo_write_dispatch, &iev);
2441 if (gotd_imsg_compose_event(&iev, GOTD_IMSG_REPO_CHILD_READY,
2442 PROC_REPO_WRITE, -1, NULL, 0) == -1) {
2443 err = got_error_from_errno("imsg compose REPO_CHILD_READY");
2444 goto done;
2445 }
2446
2447 event_dispatch();
2448 done:
2449 if (fclose(diff_f1) == EOF && err == NULL)
2450 err = got_error_from_errno("fclose");
2451 if (fclose(diff_f2) == EOF && err == NULL)
2452 err = got_error_from_errno("fclose");
2453 if (close(diff_fd1) == -1 && err == NULL)
2454 err = got_error_from_errno("close");
2455 if (close(diff_fd2) == -1 && err == NULL)
2456 err = got_error_from_errno("close");
2457 if (err)
2458 log_warnx("%s: %s", title, err->msg);
2459 repo_write_shutdown();
2460 }
2461
2462 void
2463 repo_write_shutdown(void)
2464 {
2465 struct repo_write_client *client = &repo_write_client;
2466 struct gotd_ref_update *ref_update;
2467
2468 log_debug("%s: shutting down", repo_write.title);
2469
2470 while (!STAILQ_EMPTY(&client->ref_updates)) {
2471 ref_update = STAILQ_FIRST(&client->ref_updates);
2472 STAILQ_REMOVE_HEAD(&client->ref_updates, entry);
2473 got_ref_close(ref_update->ref);
2474 free(ref_update);
2475 }
2476
2477 got_pack_close(&client->pack);
2478 if (client->fd != -1)
2479 close(client->fd);
2480 if (client->pack_pipe != -1)
2481 close(client->pack_pipe);
2482 if (client->packidx_fd != -1)
2483 close(client->packidx_fd);
2484
2485 if (repo_write.repo)
2486 got_repo_close(repo_write.repo);
2487 got_repo_pack_fds_close(repo_write.pack_fds);
2488 got_repo_temp_fds_close(repo_write.temp_fds);
2489 if (repo_write.session_fd != -1)
2490 close(repo_write.session_fd);
2491 exit(0);
2492 }
portable version of Game of Trees