lib/object_create.c

   1 /*
   2  * Copyright (c) 2019 Stefan Sperling <stsp@openbsd.org>
   3  *
   4  * Permission to use, copy, modify, and distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16
  17 #include "got_compat.h"
  18
  19 #include <sys/types.h>
  20 #include <sys/stat.h>
  21 #include <sys/queue.h>
  22 #include <sys/wait.h>
  23
  24 #include <ctype.h>
  25 #include <errno.h>
  26 #include <fcntl.h>
  27 #include <limits.h>
  28 #include <stdio.h>
  29 #include <stdlib.h>
  30 #include <string.h>
  31 #include <stdint.h>
  32 #include <unistd.h>
  33 #include <zlib.h>
  34
  35 #include "got_error.h"
  36 #include "got_object.h"
  37 #include "got_repository.h"
  38 #include "got_opentemp.h"
  39 #include "got_path.h"
  40 #include "got_sigs.h"
  41
  42 #include "got_lib_hash.h"
  43 #include "got_lib_deflate.h"
  44 #include "got_lib_delta.h"
  45 #include "got_lib_object.h"
  46 #include "got_lib_object_parse.h"
  47 #include "got_lib_lockfile.h"
  48
  49 #include "got_lib_object_create.h"
  50
  51 #include "buf.h"
  52
  53 #ifndef nitems
  54 #define nitems(_a) (sizeof(_a) / sizeof((_a)[0]))
  55 #endif
  56
  57 static const struct got_error *
  58 create_object_file(struct got_object_id *id, FILE *content,
  59     off_t content_len, struct got_repository *repo)
  60 {
  61         const struct got_error *err = NULL, *unlock_err = NULL;
  62         char *objpath = NULL, *tmppath = NULL;
  63         FILE *tmpfile = NULL;
  64         struct got_lockfile *lf = NULL;
  65         off_t tmplen = 0;
  66
  67         err = got_object_get_path(&objpath, id, repo);
  68         if (err)
  69                 return err;
  70
  71         err = got_opentemp_named(&tmppath, &tmpfile, objpath, "");
  72         if (err) {
  73                 char *parent_path;
  74                 if (!(err->code == GOT_ERR_ERRNO && errno == ENOENT))
  75                         goto done;
  76                 err = got_path_dirname(&parent_path, objpath);
  77                 if (err)
  78                         goto done;
  79                 err = got_path_mkdir(parent_path);
  80                 free(parent_path);
  81                 if (err)
  82                         goto done;
  83                 err = got_opentemp_named(&tmppath, &tmpfile, objpath, "");
  84                 if (err)
  85                         goto done;
  86         }
  87
  88         if (fchmod(fileno(tmpfile), GOT_DEFAULT_FILE_MODE) != 0) {
  89                 err = got_error_from_errno2("fchmod", tmppath);
  90                 goto done;
  91         }
  92
  93         err = got_deflate_to_file(&tmplen, content, content_len, tmpfile, NULL);
  94         if (err)
  95                 goto done;
  96
  97         err = got_lockfile_lock(&lf, objpath, -1);
  98         if (err)
  99                 goto done;
 100
 101         if (rename(tmppath, objpath) != 0) {
 102                 err = got_error_from_errno3("rename", tmppath, objpath);
 103                 goto done;
 104         }
 105         free(tmppath);
 106         tmppath = NULL;
 107 done:
 108         free(objpath);
 109         if (tmppath) {
 110                 if (unlink(tmppath) != 0 && err == NULL)
 111                         err = got_error_from_errno2("unlink", tmppath);
 112                 free(tmppath);
 113         }
 114         if (tmpfile && fclose(tmpfile) == EOF && err == NULL)
 115                 err = got_error_from_errno("fclose");
 116         if (lf)
 117                 unlock_err = got_lockfile_unlock(lf, -1);
 118         return err ? err : unlock_err;
 119 }
 120
 121 const struct got_error *
 122 got_object_blob_file_create(struct got_object_id **id, FILE **blobfile,
 123     off_t *blobsize, const char *ondisk_path, struct got_repository *repo)
 124 {
 125         const struct got_error *err = NULL;
 126         char *header = NULL;
 127         int fd = -1;
 128         struct stat sb;
 129         struct got_hash ctx;
 130         size_t headerlen = 0, n;
 131
 132         *id = NULL;
 133         *blobfile = NULL;
 134         *blobsize = 0;
 135
 136         got_hash_init(&ctx, got_repo_get_object_format(repo));
 137
 138         fd = open(ondisk_path, O_RDONLY | O_NOFOLLOW | O_CLOEXEC);
 139         if (fd == -1) {
 140                 if (!got_err_open_nofollow_on_symlink())
 141                         return got_error_from_errno2("open", ondisk_path);
 142
 143                 if (lstat(ondisk_path, &sb) == -1) {
 144                         err = got_error_from_errno2("lstat", ondisk_path);
 145                         goto done;
 146                 }
 147         } else if (fstat(fd, &sb) == -1) {
 148                 err = got_error_from_errno2("fstat", ondisk_path);
 149                 goto done;
 150         }
 151
 152         if (asprintf(&header, "%s %lld", GOT_OBJ_LABEL_BLOB,
 153                 (long long)sb.st_size) == -1) {
 154                 err = got_error_from_errno("asprintf");
 155                 goto done;
 156         }
 157         headerlen = strlen(header) + 1;
 158         got_hash_update(&ctx, header, headerlen);
 159
 160         *blobfile = got_opentemp();
 161         if (*blobfile == NULL) {
 162                 err = got_error_from_errno("got_opentemp");
 163                 goto done;
 164         }
 165
 166         n = fwrite(header, 1, headerlen, *blobfile);
 167         if (n != headerlen) {
 168                 err = got_ferror(*blobfile, GOT_ERR_IO);
 169                 goto done;
 170         }
 171         *blobsize += headerlen;
 172         for (;;) {
 173                 char buf[PATH_MAX * 8];
 174                 ssize_t inlen;
 175
 176                 if (S_ISLNK(sb.st_mode)) {
 177                         inlen = readlink(ondisk_path, buf, sizeof(buf));
 178                         if (inlen == -1) {
 179                                 err = got_error_from_errno("readlink");
 180                                 goto done;
 181                         }
 182                 } else {
 183                         inlen = read(fd, buf, sizeof(buf));
 184                         if (inlen == -1) {
 185                                 err = got_error_from_errno("read");
 186                                 goto done;
 187                         }
 188                 }
 189                 if (inlen == 0)
 190                         break; /* EOF */
 191                 got_hash_update(&ctx, buf, inlen);
 192                 n = fwrite(buf, 1, inlen, *blobfile);
 193                 if (n != inlen) {
 194                         err = got_ferror(*blobfile, GOT_ERR_IO);
 195                         goto done;
 196                 }
 197                 *blobsize += n;
 198                 if (S_ISLNK(sb.st_mode))
 199                         break;
 200         }
 201
 202         *id = calloc(1, sizeof(**id));
 203         if (*id == NULL) {
 204                 err = got_error_from_errno("calloc");
 205                 goto done;
 206         }
 207         got_hash_final_object_id(&ctx, *id);
 208
 209         if (fflush(*blobfile) != 0) {
 210                 err = got_error_from_errno("fflush");
 211                 goto done;
 212         }
 213         rewind(*blobfile);
 214 done:
 215         free(header);
 216         if (fd != -1 && close(fd) == -1 && err == NULL)
 217                 err = got_error_from_errno("close");
 218         if (err) {
 219                 free(*id);
 220                 *id = NULL;
 221                 if (*blobfile) {
 222                         fclose(*blobfile);
 223                         *blobfile = NULL;
 224                 }
 225         }
 226         return err;
 227 }
 228
 229 const struct got_error *
 230 got_object_blob_create(struct got_object_id **id, const char *ondisk_path,
 231     struct got_repository *repo)
 232 {
 233         const struct got_error *err = NULL;
 234         FILE *blobfile = NULL;
 235         off_t blobsize;
 236
 237         err = got_object_blob_file_create(id, &blobfile, &blobsize,
 238             ondisk_path, repo);
 239         if (err)
 240                 return err;
 241
 242         err = create_object_file(*id, blobfile, blobsize, repo);
 243         if (fclose(blobfile) == EOF && err == NULL)
 244                 err = got_error_from_errno("fclose");
 245         if (err) {
 246                 free(*id);
 247                 *id = NULL;
 248         }
 249         return err;
 250 }
 251
 252 static const struct got_error *
 253 te_mode2str(char *buf, size_t len, struct got_tree_entry *te)
 254 {
 255         int ret;
 256         mode_t mode;
 257
 258         /*
 259          * Some Git implementations are picky about modes seen in tree entries.
 260          * For best compatibility we normalize the file/directory mode here.
 261          */
 262         if (S_ISREG(te->mode)) {
 263                 mode = GOT_DEFAULT_FILE_MODE;
 264                 if (te->mode & (S_IXUSR | S_IXGRP | S_IXOTH))
 265                         mode |= S_IXUSR | S_IXGRP | S_IXOTH;
 266         } else if (got_object_tree_entry_is_submodule(te))
 267                 mode = S_IFDIR | S_IFLNK;
 268         else if (S_ISLNK(te->mode))
 269                 mode = S_IFLNK; /* Git leaves all the other bits unset. */
 270         else if (S_ISDIR(te->mode))
 271                 mode = S_IFDIR; /* Git leaves all the other bits unset. */
 272         else
 273                 return got_error(GOT_ERR_BAD_FILETYPE);
 274
 275         ret = snprintf(buf, len, "%o ", mode);
 276         if (ret < 0 || (size_t)ret >= len)
 277                 return got_error(GOT_ERR_NO_SPACE);
 278         return NULL;
 279 }
 280
 281 /*
 282  * Git expects directory tree entries to be sorted with an imaginary slash
 283  * appended to their name, and will break otherwise. Let's be nice.
 284  * This function is intended to be used with mergesort(3) to sort an
 285  * array of pointers to struct got_tree_entry objects.
 286  */
 287 static int
 288 sort_tree_entries_the_way_git_likes_it(const void *arg1, const void *arg2)
 289 {
 290         struct got_tree_entry * const *te1 = arg1;
 291         struct got_tree_entry * const *te2 = arg2;
 292         char name1[NAME_MAX + 2];
 293         char name2[NAME_MAX + 2];
 294
 295         strlcpy(name1, (*te1)->name, sizeof(name1));
 296         strlcpy(name2, (*te2)->name, sizeof(name2));
 297         if (S_ISDIR((*te1)->mode))
 298                 strlcat(name1, "/", sizeof(name1));
 299         if (S_ISDIR((*te2)->mode))
 300                 strlcat(name2, "/", sizeof(name2));
 301         return strcmp(name1, name2);
 302 }
 303
 304 const struct got_error *
 305 got_object_tree_create(struct got_object_id **id,
 306     struct got_pathlist_head *paths, int nentries, struct got_repository *repo)
 307 {
 308         const struct got_error *err = NULL;
 309         char modebuf[sizeof("100644 ")];
 310         struct got_hash ctx;
 311         char *header = NULL;
 312         size_t headerlen, len = 0, n, digest_len;
 313         FILE *treefile = NULL;
 314         off_t treesize = 0;
 315         struct got_pathlist_entry *pe;
 316         struct got_tree_entry **sorted_entries;
 317         struct got_tree_entry *te;
 318         enum got_hash_algorithm algo;
 319         int i;
 320
 321         *id = NULL;
 322
 323         algo = got_repo_get_object_format(repo);
 324         digest_len = got_hash_digest_length(algo);
 325         got_hash_init(&ctx, algo);
 326
 327         sorted_entries = calloc(nentries, sizeof(struct got_tree_entry *));
 328         if (sorted_entries == NULL)
 329                 return got_error_from_errno("calloc");
 330
 331         i = 0;
 332         RB_FOREACH(pe, got_pathlist_head, paths)
 333                 sorted_entries[i++] = pe->data;
 334         mergesort(sorted_entries, nentries, sizeof(struct got_tree_entry *),
 335             sort_tree_entries_the_way_git_likes_it);
 336
 337         for (i = 0; i < nentries; i++) {
 338                 te = sorted_entries[i];
 339                 err = te_mode2str(modebuf, sizeof(modebuf), te);
 340                 if (err)
 341                         goto done;
 342                 len += strlen(modebuf) + strlen(te->name) + 1 + digest_len;
 343         }
 344
 345         if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_TREE, len) == -1) {
 346                 err = got_error_from_errno("asprintf");
 347                 goto done;
 348         }
 349         headerlen = strlen(header) + 1;
 350         got_hash_update(&ctx, header, headerlen);
 351
 352         treefile = got_opentemp();
 353         if (treefile == NULL) {
 354                 err = got_error_from_errno("got_opentemp");
 355                 goto done;
 356         }
 357
 358         n = fwrite(header, 1, headerlen, treefile);
 359         if (n != headerlen) {
 360                 err = got_ferror(treefile, GOT_ERR_IO);
 361                 goto done;
 362         }
 363         treesize += headerlen;
 364
 365         for (i = 0; i < nentries; i++) {
 366                 te = sorted_entries[i];
 367                 err = te_mode2str(modebuf, sizeof(modebuf), te);
 368                 if (err)
 369                         goto done;
 370                 len = strlen(modebuf);
 371                 n = fwrite(modebuf, 1, len, treefile);
 372                 if (n != len) {
 373                         err = got_ferror(treefile, GOT_ERR_IO);
 374                         goto done;
 375                 }
 376                 got_hash_update(&ctx, modebuf, len);
 377                 treesize += n;
 378
 379                 len = strlen(te->name) + 1; /* must include NUL */
 380                 n = fwrite(te->name, 1, len, treefile);
 381                 if (n != len) {
 382                         err = got_ferror(treefile, GOT_ERR_IO);
 383                         goto done;
 384                 }
 385                 got_hash_update(&ctx, te->name, len);
 386                 treesize += n;
 387
 388                 len = digest_len;
 389                 n = fwrite(te->id.hash, 1, len, treefile);
 390                 if (n != len) {
 391                         err = got_ferror(treefile, GOT_ERR_IO);
 392                         goto done;
 393                 }
 394                 got_hash_update(&ctx, te->id.hash, len);
 395                 treesize += n;
 396         }
 397
 398         *id = calloc(1, sizeof(**id));
 399         if (*id == NULL) {
 400                 err = got_error_from_errno("calloc");
 401                 goto done;
 402         }
 403         got_hash_final_object_id(&ctx, *id);
 404
 405         if (fflush(treefile) != 0) {
 406                 err = got_error_from_errno("fflush");
 407                 goto done;
 408         }
 409         rewind(treefile);
 410
 411         err = create_object_file(*id, treefile, treesize, repo);
 412 done:
 413         free(header);
 414         free(sorted_entries);
 415         if (treefile && fclose(treefile) == EOF && err == NULL)
 416                 err = got_error_from_errno("fclose");
 417         if (err) {
 418                 free(*id);
 419                 *id = NULL;
 420         }
 421         return err;
 422 }
 423
 424 const struct got_error *
 425 got_object_commit_create(struct got_object_id **id,
 426     struct got_object_id *tree_id, struct got_object_id_queue *parent_ids,
 427     int nparents, const char *author, time_t author_time,
 428     const char *committer, time_t committer_time,
 429     const char *logmsg, struct got_repository *repo)
 430 {
 431         const struct got_error *err = NULL;
 432         struct got_hash ctx;
 433         char *header = NULL, *tree_str = NULL;
 434         char *author_str = NULL, *committer_str = NULL;
 435         char *id_str = NULL;
 436         size_t headerlen, len = 0, n, digest_string_len;
 437         FILE *commitfile = NULL;
 438         off_t commitsize = 0;
 439         struct got_object_qid *qid;
 440         enum got_hash_algorithm algo;
 441         char *msg0, *msg;
 442
 443         *id = NULL;
 444
 445         algo = got_repo_get_object_format(repo);
 446         digest_string_len = got_hash_digest_string_length(algo);
 447         got_hash_init(&ctx, algo);
 448
 449         msg0 = strdup(logmsg);
 450         if (msg0 == NULL)
 451                 return got_error_from_errno("strdup");
 452         msg = msg0;
 453
 454         while (isspace((unsigned char)msg[0]))
 455                 msg++;
 456         len = strlen(msg);
 457         while (len > 0 && isspace((unsigned char)msg[len - 1])) {
 458                 msg[len - 1] = '\0';
 459                 len--;
 460         }
 461
 462         if (asprintf(&author_str, "%s%s %lld +0000\n",
 463             GOT_COMMIT_LABEL_AUTHOR, author, (long long)author_time) == -1) {
 464                 err = got_error_from_errno("asprintf");
 465                 goto done;
 466         }
 467
 468         if (asprintf(&committer_str, "%s%s %lld +0000\n",
 469             GOT_COMMIT_LABEL_COMMITTER, committer ? committer : author,
 470             (long long)(committer ? committer_time : author_time))
 471             == -1) {
 472                 err = got_error_from_errno("asprintf");
 473                 goto done;
 474         }
 475
 476         len = strlen(GOT_COMMIT_LABEL_TREE) + digest_string_len +
 477             nparents *
 478             (strlen(GOT_COMMIT_LABEL_PARENT) + digest_string_len) +
 479             + strlen(author_str) + strlen(committer_str) + 2 + strlen(msg);
 480
 481         if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_COMMIT, len) == -1) {
 482                 err = got_error_from_errno("asprintf");
 483                 goto done;
 484         }
 485         headerlen = strlen(header) + 1;
 486         got_hash_update(&ctx, header, headerlen);
 487
 488         commitfile = got_opentemp();
 489         if (commitfile == NULL) {
 490                 err = got_error_from_errno("got_opentemp");
 491                 goto done;
 492         }
 493
 494         n = fwrite(header, 1, headerlen, commitfile);
 495         if (n != headerlen) {
 496                 err = got_ferror(commitfile, GOT_ERR_IO);
 497                 goto done;
 498         }
 499         commitsize += headerlen;
 500
 501         err = got_object_id_str(&id_str, tree_id);
 502         if (err)
 503                 goto done;
 504         if (asprintf(&tree_str, "%s%s\n", GOT_COMMIT_LABEL_TREE, id_str)
 505             == -1) {
 506                 err = got_error_from_errno("asprintf");
 507                 goto done;
 508         }
 509         len = strlen(tree_str);
 510         got_hash_update(&ctx, tree_str, len);
 511         n = fwrite(tree_str, 1, len, commitfile);
 512         if (n != len) {
 513                 err = got_ferror(commitfile, GOT_ERR_IO);
 514                 goto done;
 515         }
 516         commitsize += n;
 517
 518         if (parent_ids) {
 519                 free(id_str);
 520                 id_str = NULL;
 521                 STAILQ_FOREACH(qid, parent_ids, entry) {
 522                         char *parent_str = NULL;
 523
 524                         err = got_object_id_str(&id_str, &qid->id);
 525                         if (err)
 526                                 goto done;
 527                         if (asprintf(&parent_str, "%s%s\n",
 528                             GOT_COMMIT_LABEL_PARENT, id_str) == -1) {
 529                                 err = got_error_from_errno("asprintf");
 530                                 goto done;
 531                         }
 532                         len = strlen(parent_str);
 533                         got_hash_update(&ctx, parent_str, len);
 534                         n = fwrite(parent_str, 1, len, commitfile);
 535                         if (n != len) {
 536                                 err = got_ferror(commitfile, GOT_ERR_IO);
 537                                 free(parent_str);
 538                                 goto done;
 539                         }
 540                         commitsize += n;
 541                         free(parent_str);
 542                         free(id_str);
 543                         id_str = NULL;
 544                 }
 545         }
 546
 547         len = strlen(author_str);
 548         got_hash_update(&ctx, author_str, len);
 549         n = fwrite(author_str, 1, len, commitfile);
 550         if (n != len) {
 551                 err = got_ferror(commitfile, GOT_ERR_IO);
 552                 goto done;
 553         }
 554         commitsize += n;
 555
 556         len = strlen(committer_str);
 557         got_hash_update(&ctx, committer_str, len);
 558         n = fwrite(committer_str, 1, len, commitfile);
 559         if (n != len) {
 560                 err = got_ferror(commitfile, GOT_ERR_IO);
 561                 goto done;
 562         }
 563         commitsize += n;
 564
 565         got_hash_update(&ctx, "\n", 1);
 566         n = fwrite("\n", 1, 1, commitfile);
 567         if (n != 1) {
 568                 err = got_ferror(commitfile, GOT_ERR_IO);
 569                 goto done;
 570         }
 571         commitsize += n;
 572
 573         len = strlen(msg);
 574         got_hash_update(&ctx, msg, len);
 575         n = fwrite(msg, 1, len, commitfile);
 576         if (n != len) {
 577                 err = got_ferror(commitfile, GOT_ERR_IO);
 578                 goto done;
 579         }
 580         commitsize += n;
 581
 582         got_hash_update(&ctx, "\n", 1);
 583         n = fwrite("\n", 1, 1, commitfile);
 584         if (n != 1) {
 585                 err = got_ferror(commitfile, GOT_ERR_IO);
 586                 goto done;
 587         }
 588         commitsize += n;
 589
 590         *id = calloc(1, sizeof(**id));
 591         if (*id == NULL) {
 592                 err = got_error_from_errno("calloc");
 593                 goto done;
 594         }
 595         got_hash_final_object_id(&ctx, *id);
 596
 597         if (fflush(commitfile) != 0) {
 598                 err = got_error_from_errno("fflush");
 599                 goto done;
 600         }
 601         rewind(commitfile);
 602
 603         err = create_object_file(*id, commitfile, commitsize, repo);
 604 done:
 605         free(id_str);
 606         free(msg0);
 607         free(header);
 608         free(tree_str);
 609         free(author_str);
 610         free(committer_str);
 611         if (commitfile && fclose(commitfile) == EOF && err == NULL)
 612                 err = got_error_from_errno("fclose");
 613         if (err) {
 614                 free(*id);
 615                 *id = NULL;
 616         }
 617         return err;
 618 }
 619
 620 const struct got_error *
 621 got_object_tag_create(struct got_object_id **id,
 622     const char *tag_name, struct got_object_id *object_id, const char *tagger,
 623     time_t tagger_time, const char *tagmsg, const char *signer_id,
 624     struct got_repository *repo, int verbosity)
 625 {
 626         const struct got_error *err = NULL;
 627         struct got_hash ctx;
 628         char *header = NULL;
 629         char *tag_str = NULL, *tagger_str = NULL;
 630         char *id_str = NULL, *obj_str = NULL, *type_str = NULL;
 631         size_t headerlen, len = 0, sig_len = 0, n;
 632         FILE *tagfile = NULL;
 633         off_t tagsize = 0;
 634         char *msg0 = NULL, *msg;
 635         const char *obj_type_str;
 636         int obj_type;
 637         BUF *buf = NULL;
 638
 639         *id = NULL;
 640
 641         got_hash_init(&ctx, got_repo_get_object_format(repo));
 642
 643         err = got_object_id_str(&id_str, object_id);
 644         if (err)
 645                 goto done;
 646         if (asprintf(&obj_str, "%s%s\n", GOT_TAG_LABEL_OBJECT, id_str) == -1) {
 647                 err = got_error_from_errno("asprintf");
 648                 goto done;
 649         }
 650
 651         err = got_object_get_type(&obj_type, repo, object_id);
 652         if (err)
 653                 goto done;
 654
 655         switch (obj_type) {
 656         case GOT_OBJ_TYPE_BLOB:
 657                 obj_type_str = GOT_OBJ_LABEL_BLOB;
 658                 break;
 659         case GOT_OBJ_TYPE_TREE:
 660                 obj_type_str = GOT_OBJ_LABEL_TREE;
 661                 break;
 662         case GOT_OBJ_TYPE_COMMIT:
 663                 obj_type_str = GOT_OBJ_LABEL_COMMIT;
 664                 break;
 665         case GOT_OBJ_TYPE_TAG:
 666                 obj_type_str = GOT_OBJ_LABEL_TAG;
 667                 break;
 668         default:
 669                 err = got_error(GOT_ERR_OBJ_TYPE);
 670                 goto done;
 671         }
 672
 673         if (asprintf(&type_str, "%s%s\n", GOT_TAG_LABEL_TYPE,
 674             obj_type_str) == -1) {
 675                 err = got_error_from_errno("asprintf");
 676                 goto done;
 677         }
 678
 679         if (asprintf(&tag_str, "%s%s\n", GOT_TAG_LABEL_TAG, tag_name) == -1) {
 680                 err = got_error_from_errno("asprintf");
 681                 goto done;
 682         }
 683
 684         if (asprintf(&tagger_str, "%s%s %lld +0000\n",
 685             GOT_TAG_LABEL_TAGGER, tagger, (long long)tagger_time) == -1)
 686                 return got_error_from_errno("asprintf");
 687
 688         msg0 = strdup(tagmsg);
 689         if (msg0 == NULL) {
 690                 err = got_error_from_errno("strdup");
 691                 goto done;
 692         }
 693         msg = msg0;
 694
 695         while (isspace((unsigned char)msg[0]))
 696                 msg++;
 697
 698         if (signer_id) {
 699                 pid_t pid;
 700                 size_t len;
 701                 int in_fd, out_fd;
 702                 int status;
 703
 704                 err = buf_alloc(&buf, 0);
 705                 if (err)
 706                         goto done;
 707
 708                 /* signed message */
 709                 err = buf_puts(&len, buf, obj_str);
 710                 if (err)
 711                         goto done;
 712                 err = buf_puts(&len, buf, type_str);
 713                 if (err)
 714                         goto done;
 715                 err = buf_puts(&len, buf, tag_str);
 716                 if (err)
 717                         goto done;
 718                 err = buf_puts(&len, buf, tagger_str);
 719                 if (err)
 720                         goto done;
 721                 err = buf_putc(buf, '\n');
 722                 if (err)
 723                         goto done;
 724                 err = buf_puts(&len, buf, msg);
 725                 if (err)
 726                         goto done;
 727                 err = buf_putc(buf, '\n');
 728                 if (err)
 729                         goto done;
 730
 731                 err = got_sigs_sign_tag_ssh(&pid, &in_fd, &out_fd, signer_id,
 732                     verbosity);
 733                 if (err)
 734                         goto done;
 735                 if (buf_write_fd(buf, in_fd) == -1) {
 736                         err = got_error_from_errno("write");
 737                         goto done;
 738                 }
 739                 if (close(in_fd) == -1) {
 740                         err = got_error_from_errno("close");
 741                         goto done;
 742                 }
 743
 744                 if (waitpid(pid, &status, 0) == -1) {
 745                         err = got_error_from_errno("waitpid");
 746                         goto done;
 747                 }
 748                 if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
 749                         err = got_error(GOT_ERR_SIGNING_TAG);
 750                         goto done;
 751                 }
 752
 753                 buf_empty(buf);
 754                 err = buf_load_fd(&buf, out_fd);
 755                 if (err)
 756                         goto done;
 757                 sig_len = buf_len(buf);
 758                 if (close(out_fd) == -1) {
 759                         err = got_error_from_errno("close");
 760                         goto done;
 761                 }
 762         }
 763
 764         len = strlen(obj_str) + strlen(type_str) + strlen(tag_str) +
 765             strlen(tagger_str) + 1 + strlen(msg) + 1 + sig_len;
 766         if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_TAG, len) == -1) {
 767                 err = got_error_from_errno("asprintf");
 768                 goto done;
 769         }
 770
 771         headerlen = strlen(header) + 1;
 772         got_hash_update(&ctx, header, headerlen);
 773
 774         tagfile = got_opentemp();
 775         if (tagfile == NULL) {
 776                 err = got_error_from_errno("got_opentemp");
 777                 goto done;
 778         }
 779
 780         n = fwrite(header, 1, headerlen, tagfile);
 781         if (n != headerlen) {
 782                 err = got_ferror(tagfile, GOT_ERR_IO);
 783                 goto done;
 784         }
 785         tagsize += headerlen;
 786         len = strlen(obj_str);
 787         got_hash_update(&ctx, obj_str, len);
 788         n = fwrite(obj_str, 1, len, tagfile);
 789         if (n != len) {
 790                 err = got_ferror(tagfile, GOT_ERR_IO);
 791                 goto done;
 792         }
 793         tagsize += n;
 794         len = strlen(type_str);
 795         got_hash_update(&ctx, type_str, len);
 796         n = fwrite(type_str, 1, len, tagfile);
 797         if (n != len) {
 798                 err = got_ferror(tagfile, GOT_ERR_IO);
 799                 goto done;
 800         }
 801         tagsize += n;
 802
 803         len = strlen(tag_str);
 804         got_hash_update(&ctx, tag_str, len);
 805         n = fwrite(tag_str, 1, len, tagfile);
 806         if (n != len) {
 807                 err = got_ferror(tagfile, GOT_ERR_IO);
 808                 goto done;
 809         }
 810         tagsize += n;
 811
 812         len = strlen(tagger_str);
 813         got_hash_update(&ctx, tagger_str, len);
 814         n = fwrite(tagger_str, 1, len, tagfile);
 815         if (n != len) {
 816                 err = got_ferror(tagfile, GOT_ERR_IO);
 817                 goto done;
 818         }
 819         tagsize += n;
 820
 821         got_hash_update(&ctx, "\n", 1);
 822         n = fwrite("\n", 1, 1, tagfile);
 823         if (n != 1) {
 824                 err = got_ferror(tagfile, GOT_ERR_IO);
 825                 goto done;
 826         }
 827         tagsize += n;
 828
 829         len = strlen(msg);
 830         got_hash_update(&ctx, msg, len);
 831         n = fwrite(msg, 1, len, tagfile);
 832         if (n != len) {
 833                 err = got_ferror(tagfile, GOT_ERR_IO);
 834                 goto done;
 835         }
 836         tagsize += n;
 837
 838         got_hash_update(&ctx, "\n", 1);
 839         n = fwrite("\n", 1, 1, tagfile);
 840         if (n != 1) {
 841                 err = got_ferror(tagfile, GOT_ERR_IO);
 842                 goto done;
 843         }
 844         tagsize += n;
 845
 846         if (signer_id && buf_len(buf) > 0) {
 847                 len = buf_len(buf);
 848                 got_hash_update(&ctx, buf_get(buf), len);
 849                 n = fwrite(buf_get(buf), 1, len, tagfile);
 850                 if (n != len) {
 851                         err = got_ferror(tagfile, GOT_ERR_IO);
 852                         goto done;
 853                 }
 854                 tagsize += n;
 855         }
 856
 857         *id = calloc(1, sizeof(**id));
 858         if (*id == NULL) {
 859                 err = got_error_from_errno("calloc");
 860                 goto done;
 861         }
 862         got_hash_final_object_id(&ctx, *id);
 863
 864         if (fflush(tagfile) != 0) {
 865                 err = got_error_from_errno("fflush");
 866                 goto done;
 867         }
 868         rewind(tagfile);
 869
 870         err = create_object_file(*id, tagfile, tagsize, repo);
 871 done:
 872         free(msg0);
 873         free(header);
 874         free(obj_str);
 875         free(tagger_str);
 876         if (buf)
 877                 buf_release(buf);
 878         if (tagfile && fclose(tagfile) == EOF && err == NULL)
 879                 err = got_error_from_errno("fclose");
 880         if (err) {
 881                 free(*id);
 882                 *id = NULL;
 883         }
 884         return err;
 885 }