Cygwin: flock: Fix overlap handling in lf_setlock() and lf_clearlock()

[newlib-cygwin.git] / winsup / cygwin / path.cc

/* path.cc: path support.

  This file is part of Cygwin.

  This software is a copyrighted work licensed under the terms of the
  Cygwin license.  Please consult the file "CYGWIN_LICENSE" for
  details. */

  /* This module's job is to
     - convert between POSIX and Win32 style filenames,
     - support the `mount' functionality,
     - support symlinks for files and directories

     Pathnames are handled as follows:

     - A \ or : in a path denotes a pure windows spec.
     - Paths beginning with // (or \\) are not translated (i.e. looked
       up in the mount table) and are assumed to be UNC path names.

     The goal in the above set of rules is to allow both POSIX and Win32
     flavors of pathnames without either interfering.  The rules are
     intended to be as close to a superset of both as possible.

     Note that you can have more than one path to a file.  The mount
     table is always prefered when translating Win32 paths to POSIX
     paths.  Win32 paths in mount table entries may be UNC paths or
     standard Win32 paths starting with <drive-letter>:

     Text vs Binary issues are not considered here in path style
     decisions, although the appropriate flags are retrieved and
     stored in various structures.

     Removing mounted filesystem support would simplify things greatly,
     but having it gives us a mechanism of treating disk that lives on a
     UNIX machine as having UNIX semantics [it allows one to edit a text
     file on that disk and not have cr's magically appear and perhaps
     break apps running on UNIX boxes].  It also useful to be able to
     layout a hierarchy without changing the underlying directories.

     The semantics of mounting file systems is not intended to precisely
     follow normal UNIX systems.

     Each DOS drive is defined to have a current directory.  Supporting
     this would complicate things so for now things are defined so that
     c: means c:\.
  */

/* This file includes both the XPG and GNU basename functions, with the
   former exported as "basename" for ABI compatibility but the latter
   declared as such for source compatibility with glibc.  This tells
   <string.h> not to declare the GNU variant in order to prevent a conflicting
   declaration error with the XPG variant implemented herein. */
#define basename basename
#include "winsup.h"
#include <w32api/winioctl.h>
#include <w32api/shlobj.h>
#include <sys/param.h>
#include <sys/cygwin.h>
#include <wctype.h>
#include <assert.h>
#include "cygerrno.h"
#include "path.h"
#include "fhandler.h"
#include "dtable.h"
#include "cygheap.h"
#include "shared_info.h"
#include "tls_pbuf.h"
#include "environ.h"
#undef basename

suffix_info stat_suffixes[] =
{
  suffix_info (""),
  suffix_info (".exe"),
  suffix_info (NULL)
};

class symlink_info
{
  char contents[SYMLINK_MAX + 1];
  char *ext_here;
  bool _ext_tacked_on;
  size_t _path_len;
  unsigned _path_flags;
  unsigned _mount_flags;
  unsigned _pc_flags;   /* Relevant pathconv_arg flags from path_conv caller */
  DWORD _fileattr;
  bool _issymlink;
  int _error;
  dev_t _dev;
  __mode_t _mode;
public:
  void reset () {
    clear_content ();
    path_flags (0);
    issymlink (true);
    dev (FH_NADA);
    /* mount_flags is an incoming value set in path_conv */
  }
  int check (char *path, const suffix_info *suffixes, fs_info &fs,
             path_conv_handle &conv_hdl);
  int set (char *path);
  bool parse_device (const char *);
  int check_sysfile (HANDLE h);
  int check_shortcut (HANDLE h);
  int check_reparse_point (HANDLE h, bool remote);
  int check_nfs_symlink (HANDLE h);
  int posixify (char *srcbuf);
  bool set_error (int);

  bool has_ext () const { return ext_here && *ext_here; }
  char *ext () const { return ext_here; }
  bool ext_tacked_on () const { return _ext_tacked_on; }
  void ext_tacked_on (bool _neto) { _ext_tacked_on = _neto; }
  const char *content () const { return contents; }
  void clear_content () { contents[0] = '\0'; }
  size_t path_len () const { return _path_len; }
  void path_len (size_t _pl) { _path_len = _pl; }
  unsigned path_flags () const { return _path_flags; }
  void path_flags (unsigned _pflags) { _path_flags = _pflags; }
  unsigned mount_flags () const { return _mount_flags; }
  void mount_flags (unsigned _mflags) { _mount_flags = _mflags; }
  unsigned pc_flags () const { return _pc_flags; }
  void pc_flags (unsigned _pflags) { _pc_flags = _pflags; }
  unsigned fileattr () const { return _fileattr; }
  void fileattr (unsigned _fflags) { _fileattr = _fflags; }
  bool issymlink () const { return _issymlink; }
  void issymlink (bool _is) { _issymlink = _is; }
  int error () const { return _error; }
  void error (int _err) { _error = _err; }
  bool isdevice () const { return _dev != FH_NADA; }
  dev_t dev () const { return _dev; }
  void dev (dev_t _ndev) { _dev = _ndev; }
  __mode_t mode () const { return _mode; }
  void mode (__mode_t _nmode) { _mode = _nmode; }
};

SRWLOCK NO_COPY cwdstuff::cwd_lock;

static const GUID GUID_shortcut
                        = { 0x00021401L, 0, 0, {0xc0, 0, 0, 0, 0, 0, 0, 0x46}};

enum
{
  WSH_FLAG_IDLIST = 0x01,       /* Contains an ITEMIDLIST. */
  WSH_FLAG_FILE = 0x02,         /* Contains a file locator element. */
  WSH_FLAG_DESC = 0x04,         /* Contains a description. */
  WSH_FLAG_RELPATH = 0x08,      /* Contains a relative path. */
  WSH_FLAG_WD = 0x10,           /* Contains a working dir. */
  WSH_FLAG_CMDLINE = 0x20,      /* Contains command line args. */
  WSH_FLAG_ICON = 0x40          /* Contains a custom icon. */
};

struct win_shortcut_hdr
{
  DWORD size;           /* Header size in bytes.  Must contain 0x4c. */
  GUID magic;           /* GUID of shortcut files. */
  DWORD flags;  /* Content flags.  See above. */

  /* The next fields from attr to icon_no are always set to 0 in Cygwin
     and U/Win shortcuts. */
  DWORD attr;   /* Target file attributes. */
  FILETIME ctime;       /* These filetime items are never touched by the */
  FILETIME mtime;       /* system, apparently. Values don't matter. */
  FILETIME atime;
  DWORD filesize;       /* Target filesize. */
  DWORD icon_no;        /* Icon number. */

  DWORD run;            /* Values defined in winuser.h. Use SW_NORMAL. */
  DWORD hotkey; /* Hotkey value. Set to 0.  */
  DWORD dummy[2];       /* Future extension probably. Always 0. */
};

/* Return non-zero if PATH1 is a prefix of PATH2.
   Both are assumed to be of the same path style and / vs \ usage.
   Neither may be "".
   LEN1 = strlen (PATH1).  It's passed because often it's already known.

   Examples:
   /foo/ is a prefix of /foo  <-- may seem odd, but desired
   /foo is a prefix of /foo/
   / is a prefix of /foo/bar
   / is not a prefix of foo/bar
   foo/ is a prefix foo/bar
   /foo is not a prefix of /foobar
*/

int
path_prefix_p (const char *path1, const char *path2, int len1,
               bool caseinsensitive)
{
  /* Handle case where PATH1 has trailing '/' and when it doesn't.  */
  if (len1 > 0 && isdirsep (path1[len1 - 1]))
    len1--;

  if (len1 == 0)
    return isdirsep (path2[0]) && !isdirsep (path2[1]);

  if (isdirsep (path2[len1]) || path2[len1] == 0 || path1[len1 - 1] == ':')
    return caseinsensitive ? strncasematch (path1, path2, len1)
                           : !strncmp (path1, path2, len1);

  return 0;
}

/* Return non-zero if paths match in first len chars.
   Check is dependent of the case sensitivity setting. */
int
pathnmatch (const char *path1, const char *path2, int len, bool caseinsensitive)
{
  return caseinsensitive
         ? strncasematch (path1, path2, len) : !strncmp (path1, path2, len);
}

/* Return non-zero if paths match. Check is dependent of the case
   sensitivity setting. */
int
pathmatch (const char *path1, const char *path2, bool caseinsensitive)
{
  return caseinsensitive
         ? strcasematch (path1, path2) : !strcmp (path1, path2);
}

/* TODO: This function is used in mkdir and rmdir to generate correct
   error messages in case of paths ending in /. or /.. components.
   Right now, normalize_posix_path will just normalize
   those components away, which changes the semantics.  */
bool
has_dot_last_component (const char *dir, bool test_dot_dot)
{
  /* SUSv3: . and .. are not allowed as last components in various system
     calls.  Don't test for backslash path separator since that's a Win32
     path following Win32 rules. */
  const char *last_comp = strchr (dir, '\0');

  if (last_comp == dir)
    return false;       /* Empty string.  Probably shouldn't happen here? */

  /* Detect run of trailing slashes */
  while (last_comp > dir && *--last_comp == '/')
    continue;

  /* Detect just a run of slashes or a path that does not end with a slash. */
  if (*last_comp != '.')
    return false;

  /* We know we have a trailing dot here.  Check that it really is a standalone "."
     path component by checking that it is at the beginning of the string or is
     preceded by a "/" */
  if (last_comp == dir || *--last_comp == '/')
    return true;

  /* If we're not checking for '..' we're done.  Ditto if we're now pointing to
     a non-dot. */
  if (!test_dot_dot || *last_comp != '.')
    return false;               /* either not testing for .. or this was not '..' */

  /* Repeat previous test for standalone or path component. */
  return last_comp == dir || last_comp[-1] == '/';
}

/* Normalize a POSIX path.
   All duplicate /'s, except for 2 leading /'s, are deleted.
   The result is 0 for success, or an errno error value.  */

int
normalize_posix_path (const char *src, char *dst, char *&tail)
{
  const char *in_src = src;
  char *dst_start = dst;
  bool check_parent = false;
  syscall_printf ("src %s", src);

  if ((isdrive (src) && isdirsep (src[2])) || *src == '\\')
    goto win32_path;

  tail = dst;
  if (!isslash (src[0]))
    {
      if (!cygheap->cwd.get (dst))
        return get_errno ();
      tail = strchr (tail, '\0');
      if (isslash (dst[0]) && isslash (dst[1]))
        ++dst_start;
      if (*src == '.')
        {
          if (tail == dst_start + 1 && *dst_start == '/')
             tail--;
          goto sawdot;
        }
      if (tail > dst && !isslash (tail[-1]))
        *tail++ = '/';
    }
  /* Two leading /'s?  If so, preserve them.  */
  else if (isslash (src[1]) && !isslash (src[2]))
    {
      *tail++ = *src++;
      ++dst_start;
    }

  while (*src)
    {
      if (*src == '\\')
        goto win32_path;
      /* Strip runs of /'s.  */
      if (!isslash (*src))
        *tail++ = *src++;
      else
        {
          check_parent = true;
          while (*++src)
            {
              if (isslash (*src))
                continue;

              if (*src != '.')
                break;

            sawdot:
              if (src[1] != '.')
                {
                  if (!src[1])
                    {
                      *tail++ = '/';
                      goto done;
                    }
                  if (!isslash (src[1]))
                    break;
                }
              else if (src[2] && !isslash (src[2]))
                break;
              else
                {
                  /* According to POSIX semantics all elements of path must
                     exist.  To follow it, we must validate our path before
                     removing the trailing component.  Check_parent is needed
                     for performance optimization, in order not to verify paths
                     which are already verified. For example this prevents
                     double check in case of foo/bar/../.. */
                  if (check_parent)
                    {
                      if (tail > dst_start) /* Don't check for / or // dir. */
                        {
                          *tail = 0;
                          debug_printf ("checking %s before '..'", dst);
                          /* In conjunction with native and NFS symlinks,
                             this call can result in a recursion which eats
                             up our tmp_pathbuf buffers.  This in turn results
                             in a api_fatal call.  To avoid that, we're
                             checking our remaining buffers and return an
                             error code instead.  Note that this only happens
                             if the path contains 15 or more relative native/NFS
                             symlinks with a ".." in the target path. */
                          tmp_pathbuf tp;
                          if (!tp.check_usage (4, 3))
                            return ELOOP;
                          path_conv head (dst, PC_SYM_FOLLOW | PC_POSIX);
                          if (!head.exists ())
                            return ENOENT;
                          if (!head.isdir ())
                            return ENOTDIR;
                          /* At this point, dst is a normalized path.  If the
                             normalized path created by path_conv does not
                             match the normalized path we're just testing, then
                             the path in dst contains native symlinks.  If we
                             just plunge along, removing the previous path
                             component, we may end up removing a symlink from
                             the path and the resulting path will be invalid.
                             So we replace dst with what we found in head
                             instead.  All the work replacing symlinks has been
                             done in that path anyway, so why repeat it? */
                          tail = stpcpy (dst, head.get_posix ());
                        }
                      check_parent = false;
                    }
                  while (tail > dst_start && !isslash (*--tail))
                    continue;
                  src++;
                }
            }

          *tail++ = '/';
        }
        if ((tail - dst) >= NT_MAX_PATH)
          {
            debug_printf ("ENAMETOOLONG = normalize_posix_path (%s)", src);
            return ENAMETOOLONG;
          }
    }

done:
  *tail = '\0';

  debug_printf ("%s = normalize_posix_path (%s)", dst, in_src);
  return 0;

win32_path:
  int err = normalize_win32_path (in_src, dst, tail);
  if (!err)
    for (char *p = dst; (p = strchr (p, '\\')); p++)
      *p = '/';
  return err ?: -1;
}

inline void
path_conv::add_ext_from_sym (symlink_info &sym)
{
  if (sym.has_ext ())
    {
      suffix = path + sym.path_len ();
      if (sym.ext_tacked_on ())
        strcpy ((char *) suffix, sym.ext ());
    }
}

static void mkrelpath (char *dst, bool caseinsensitive);

static void
mkrelpath (char *path, bool caseinsensitive)
{
  tmp_pathbuf tp;
  char *cwd_win32 = tp.c_get ();
  if (!cygheap->cwd.get (cwd_win32, 0))
    return;

  unsigned cwdlen = strlen (cwd_win32);
  if (!path_prefix_p (cwd_win32, path, cwdlen, caseinsensitive))
    return;

  size_t n = strlen (path);
  if (n < cwdlen)
    return;

  char *tail = path;
  if (n == cwdlen)
    tail += cwdlen;
  else
    tail += isdirsep (cwd_win32[cwdlen - 1]) ? cwdlen : cwdlen + 1;

  memmove (path, tail, strlen (tail) + 1);
  if (!*path)
    strcpy (path, ".");
}

void
path_conv::set_posix (const char *path_copy)
{
  if (path_copy)
    {
      size_t n = strlen (path_copy) + 1;
      char *p = (char *) crealloc_abort ((void *) posix_path, n);
      posix_path = (const char *) memcpy (p, path_copy, n);
    }
}

static inline void
str2uni_cat (UNICODE_STRING &tgt, const char *srcstr)
{
  int len = sys_mbstowcs (tgt.Buffer + tgt.Length / sizeof (WCHAR),
                          (tgt.MaximumLength - tgt.Length) / sizeof (WCHAR),
                          srcstr);
  if (len)
    tgt.Length += (len - 1) * sizeof (WCHAR);
}

PUNICODE_STRING
get_nt_native_path (const char *path, UNICODE_STRING& upath, bool dos)
{
  upath.Length = 0;
  if (path[0] == '/')           /* special path w/o NT path representation. */
    str2uni_cat (upath, path);
  else if (path[0] != '\\')     /* X:\...  or relative path. */
    {
      if (path[1] == ':')       /* X:\... */
        {
          RtlAppendUnicodeStringToString (&upath, &ro_u_natp);
          str2uni_cat (upath, path);
          /* The drive letter must be upper case. */
          upath.Buffer[4] = towupper (upath.Buffer[4]);
          transform_chars (&upath, 7);
        }
      else                      /* relative path */
        {
          str2uni_cat (upath, path);
          transform_chars (&upath, 0);
        }
    }
  else if (path[1] != '\\')     /* \Device\... */
    str2uni_cat (upath, path);
  else if ((path[2] != '.' && path[2] != '?')
           || path[3] != '\\')  /* \\server\share\... */
    {
      RtlAppendUnicodeStringToString (&upath, &ro_u_uncp);
      str2uni_cat (upath, path + 2);
      transform_chars (&upath, 8);
    }
  else                          /* \\.\device or \\?\foo */
    {
      RtlAppendUnicodeStringToString (&upath, &ro_u_natp);
      str2uni_cat (upath, path + 4);
    }
  if (dos)
    {
      /* Unfortunately we can't just use transform_chars with the tfx_rev_chars
         table since only leading and trailing spaces and dots are affected.
         So we step to every backslash and fix surrounding dots and spaces.
         That makes these broken filesystems a bit slower, but, hey. */
      PWCHAR cp = upath.Buffer + 7;
      PWCHAR cend = upath.Buffer + upath.Length / sizeof (WCHAR);
      while (++cp < cend)
        if (*cp == L'\\')
          {
            PWCHAR ccp = cp - 1;
            while (*ccp == L'.' || *ccp == L' ')
              *ccp-- |= 0xf000;
            while (cp[1] == L' ')
              *++cp |= 0xf000;
          }
      while (*--cp == L'.' || *cp == L' ')
        *cp |= 0xf000;
    }
  return &upath;
}

/* Handle with extrem care!  Only used in a certain instance in try_to_bin.
   Every other usage needs a careful check. */
void
path_conv::set_nt_native_path (PUNICODE_STRING new_path)
{
  wide_path = (PWCHAR) crealloc_abort (wide_path, new_path->MaximumLength);
  memcpy (wide_path, new_path->Buffer, new_path->Length);
  uni_path.Length = new_path->Length;
  uni_path.MaximumLength = new_path->MaximumLength;
  uni_path.Buffer = wide_path;
}

/* If suffix is not NULL, append the suffix string verbatim.
   This is used by fhandler_mqueue::mq_open to append an NTFS stream suffix. */
PUNICODE_STRING
path_conv::get_nt_native_path (PUNICODE_STRING suffix)
{
  PUNICODE_STRING res;
  if (wide_path)
    res = &uni_path;
  else if (!path)
    res = NULL;
  else
    {
      uni_path.Length = 0;
      uni_path.MaximumLength = (strlen (path) + 10) * sizeof (WCHAR);
      if (suffix)
        uni_path.MaximumLength += suffix->Length;
      wide_path = (PWCHAR) cmalloc_abort (HEAP_STR, uni_path.MaximumLength);
      uni_path.Buffer = wide_path;
      ::get_nt_native_path (path, uni_path, has_dos_filenames_only ());
      if (suffix)
        RtlAppendUnicodeStringToString (&uni_path, suffix);
      res = &uni_path;
    }
  return res;
}

PWCHAR
path_conv::get_wide_win32_path (PWCHAR wc)
{
  get_nt_native_path ();
  if (!wide_path)
    return NULL;
  wcpcpy (wc, wide_path);
  if (wc[1] == L'?')
    wc[1] = L'\\';
  return wc;
}

static DWORD
getfileattr (const char *path, bool caseinsensitive) /* path has to be always absolute. */
{
  tmp_pathbuf tp;
  UNICODE_STRING upath;
  OBJECT_ATTRIBUTES attr;
  FILE_BASIC_INFORMATION fbi;
  NTSTATUS status;
  IO_STATUS_BLOCK io;

  tp.u_get (&upath);
  InitializeObjectAttributes (&attr, &upath,
                              caseinsensitive ? OBJ_CASE_INSENSITIVE : 0,
                              NULL, NULL);
  get_nt_native_path (path, upath, false);

  status = NtQueryAttributesFile (&attr, &fbi);
  if (NT_SUCCESS (status))
    return fbi.FileAttributes;

  if (status != STATUS_OBJECT_NAME_NOT_FOUND
      && status != STATUS_NO_SUCH_FILE) /* File not found on 9x share */
    {
      /* File exists but access denied.  Try to get attribute through
         directory query. */
      UNICODE_STRING dirname, basename;
      HANDLE dir;
      FILE_BOTH_DIR_INFORMATION fdi;

      RtlSplitUnicodePath (&upath, &dirname, &basename);
      InitializeObjectAttributes (&attr, &dirname,
                                  caseinsensitive ? OBJ_CASE_INSENSITIVE : 0,
                                  NULL, NULL);
      status = NtOpenFile (&dir, SYNCHRONIZE | FILE_LIST_DIRECTORY,
                           &attr, &io, FILE_SHARE_VALID_FLAGS,
                           FILE_SYNCHRONOUS_IO_NONALERT
                           | FILE_OPEN_FOR_BACKUP_INTENT
                           | FILE_DIRECTORY_FILE);
      if (NT_SUCCESS (status))
        {
          status = NtQueryDirectoryFile (dir, NULL, NULL, 0, &io,
                                         &fdi, sizeof fdi,
                                         FileBothDirectoryInformation,
                                         TRUE, &basename, TRUE);
          NtClose (dir);
          if (NT_SUCCESS (status) || status == STATUS_BUFFER_OVERFLOW)
            return fdi.FileAttributes;
        }
    }
  SetLastError (RtlNtStatusToDosError (status));
  return INVALID_FILE_ATTRIBUTES;
}

/* Convert an arbitrary path SRC to a pure Win32 path, suitable for
   passing to Win32 API routines.

   If an error occurs, `error' is set to the errno value.
   Otherwise it is set to 0.

   follow_mode values:
        SYMLINK_FOLLOW      - convert to PATH symlink points to
        SYMLINK_NOFOLLOW    - convert to PATH of symlink itself
        SYMLINK_IGNORE      - do not check PATH for symlinks
        SYMLINK_CONTENTS    - just return symlink contents
*/

/* TODO: This implementation is only preliminary.  For internal
   purposes it's necessary to have a path_conv::check function which
   takes a UNICODE_STRING src path, otherwise we waste a lot of time
   for converting back and forth.  The below implementation does
   realy nothing but converting to char *, until path_conv handles
   wide-char paths directly. */
void
path_conv::check (const UNICODE_STRING *src, unsigned opt,
                  const suffix_info *suffixes)
{
  tmp_pathbuf tp;
  char *path = tp.c_get ();

  user_shared->warned_msdos = true;
  sys_wcstombs (path, NT_MAX_PATH, src->Buffer, src->Length / sizeof (WCHAR));
  path_conv::check (path, opt, suffixes);
}

void
path_conv::check (const char *src, unsigned opt,
                  const suffix_info *suffixes)
{
  /* The tmp_buf array is used when expanding symlinks.  It is NT_MAX_PATH * 2
     in length so that we can hold the expanded symlink plus a trailer.  */
  tmp_pathbuf tp;
  char *path_copy = tp.c_get ();
  char *pathbuf = tp.c_get ();
  char *tmp_buf = tp.t_get ();
  char *THIS_path = tp.c_get ();
  symlink_info sym;
  bool need_directory = 0;
  bool add_ext = false;
  bool is_relpath;
  char *tail, *path_end;
  virt_fileid () = -1;

#if 0
  static path_conv last_path_conv;
  static char last_src[CYG_MAX_PATH];

  if (*last_src && strcmp (last_src, src) == 0)
    {
      *this = last_path_conv;
      return;
    }
#endif

  __try
    {
      int loop = 0;
      mount_flags = 0;
      path_flags = 0;
      suffix = NULL;
      fileattr = INVALID_FILE_ATTRIBUTES;
      caseinsensitive = OBJ_CASE_INSENSITIVE;
      if (wide_path)
        cfree (wide_path);
      wide_path = NULL;
      if (path)
        {
          cfree (modifiable_path ());
          path = NULL;
        }
      close_conv_handle ();
      fs.clear ();
      if (posix_path)
        {
          cfree ((void *) posix_path);
          posix_path = NULL;
        }
      int component = 0;                // Number of translated components

      if (!(opt & PC_NULLEMPTY))
        error = 0;
      else if (!*src)
        {
          error = ENOENT;
          return;
        }

      bool is_msdos = false;
      /* This loop handles symlink expansion.  */
      for (;;)
        {
          is_relpath = !isabspath (src);
          error = normalize_posix_path (src, path_copy, tail);
          if (error > 0)
            return;
          if (error < 0)
            {
              if (component == 0)
                is_msdos = true;
              error = 0;
            }

          /* Detect if the user was looking for a directory.  We have to strip
             the trailing slash initially while trying to add extensions but
             take it into account during processing */
          if (tail > path_copy + 2 && isslash (tail[-1]))
            {
              need_directory = 1;
              *--tail = '\0';
            }
          path_end = tail;

          /* Scan path_copy from right to left looking either for a symlink
             or an actual existing file.  If an existing file is found, just
             return.  If a symlink is found, exit the for loop.
             Also: be careful to preserve the errno returned from
             symlink.check as the caller may need it. */
          /* FIXME: Do we have to worry about multiple \'s here? */
          component = 0;                // Number of translated components
          sym.clear_content ();
          sym.path_flags (0);

          int symlen = 0;

          /* Make sure to check certain flags on last component only. */
          for (unsigned pc_flags = opt & (PC_NO_ACCESS_CHECK | PC_KEEP_HANDLE
                                         | PC_SYM_FOLLOW | PC_SYM_NOFOLLOW_REP);
               ;
               pc_flags = opt & (PC_SYM_FOLLOW | PC_SYM_NOFOLLOW_REP))
            {
              const suffix_info *suff;
              char *full_path;

              /* Don't allow symlink.check to set anything in the path_conv
                 class if we're working on an inner component of the path */
              if (component)
                {
                  suff = NULL;
                  full_path = pathbuf;
                }
              else
                {
                  suff = suffixes;
                  full_path = THIS_path;
                }

    retry_fs_via_processfd:

              /* Convert to native path spec sans symbolic link info. */
              unsigned mnt_flags;
              error = mount_table->conv_to_win32_path (path_copy, full_path,
                                                       dev,
                                                       &mnt_flags);

              if (error)
                return;

              sym.pc_flags (pc_flags);
              sym.mount_flags (mnt_flags);

              if (!dev.exists ())
                {
                  error = ENXIO;
                  return;
                }

              if (iscygdrive_dev (dev))
                {
                  if (!component)
                    fileattr = FILE_ATTRIBUTE_DIRECTORY
                               | FILE_ATTRIBUTE_READONLY;
                  else
                    {
                      fileattr = getfileattr (THIS_path,
                                            sym.mount_flags () & MOUNT_NOPOSIX);
                      dev = FH_FS;
                    }
                  goto out;
                }
              else if (isdev_dev (dev))
                {
                  /* Make sure that the path handling goes on as with FH_FS. */
                }
              else if (isvirtual_dev (dev))
                {
                  /* FIXME: Calling build_fhandler here is not the right way to
                            handle this. */
                  fhandler_virtual *fh = (fhandler_virtual *)
                                         build_fh_dev (dev, path_copy);
                  virtual_ftype_t file_type;
                  if (!fh)
                    file_type = virt_none;
                  else
                    {
                      file_type = fh->exists ();
                      virt_fileid () = fh->fileid ();
                      if (file_type == virt_symlink
                          || file_type == virt_fdsymlink)
                        {
                          fh->fill_filebuf ();
                          symlen = sym.set (fh->get_filebuf ());
                        }
                      else if (file_type == virt_fsdir && dev == FH_PROCESSFD)
                        {
                          /* FIXME: This is YA bad hack to workaround that
                             we're checking for isvirtual_dev at this point.
                             This should only happen if the file is actually
                             a virtual file, and NOT already if the preceeding
                             path components constitute a virtual file.

                             Anyway, what we do here is this:  If the descriptor
                             symlink points to a dir, and if there are trailing
                             path components, it's actually pointing somewhere
                             else.  The format_process_fd function returns the
                             full path, resolved symlink plus trailing path
                             components, in its filebuf.  This is a POSIX path
                             we know nothing about, so we have to convert it to
                             native again, calling conv_to_win32_path.  Since
                             basically nothing happened yet, just copy it over
                             into full_path and jump back to the
                             conv_to_win32_path call.  What a mess. */
                          stpcpy (path_copy, fh->get_filebuf ());
                          delete fh;
                          goto retry_fs_via_processfd;
                        }
                      else if (file_type == virt_none && dev == FH_PROCESSFD)
                        {
                          error = get_errno ();
                          if (error)
                            {
                              delete fh;
                              return;
                            }
                        }
                      delete fh;
                    }
                  switch (file_type)
                    {
                      case virt_directory:
                      case virt_rootdir:
                        if (component == 0)
                          fileattr = FILE_ATTRIBUTE_DIRECTORY;
                        break;
                      case virt_file:
                        if (component == 0)
                          fileattr = 0;
                        break;
                      case virt_fdsymlink:
                        /* Allow open/linkat to do the right thing. */
                        if (opt & PC_SYM_NOFOLLOW_PROCFD)
                          {
                            opt &= ~PC_SYM_FOLLOW;
                            sym.path_flags (sym.path_flags ()
                                            | PATH_RESOLVE_PROCFD);
                          }
                        fallthrough;
                      case virt_symlink:
                        goto is_virtual_symlink;
                      case virt_pipe:
                        if (component == 0)
                          {
                            fileattr = 0;
                            dev.parse (FH_PIPE);
                          }
                        break;
                      case virt_socket:
                        if (component == 0)
                          {
                            fileattr = 0;
                            dev.parse (FH_SOCKET);
                          }
                        break;
                      case virt_fsdir:
                      case virt_fsfile:
                        /* Access to real file or directory via block device
                           entry in /proc/sys.  Convert to real file and go with
                           the flow. */
                        dev.parse (FH_FS);
                        goto is_fs_via_procsys;
                      case virt_blk:
                        /* Block special device.  Convert to a /dev/sd* like
                           block device unless the trailing slash has been
                           requested.  In this case, the target is the root
                           directory of the filesystem on this block device.
                           So we convert this to a real file and attach the
                           backslash. */
                        if (component == 0)
                          {
                            fileattr = FILE_ATTRIBUTE_DEVICE;
                            if (!need_directory)
                              /* Use a /dev/sd* device number > /dev/sddx.
                                 FIXME: Define a new major DEV_ice number. */
                              dev.parse (DEV_SD_HIGHPART_END, 9999);
                            else
                              {
                                dev.parse (FH_FS);
                                strcat (full_path, "\\");
                                fileattr |= FILE_ATTRIBUTE_DIRECTORY;
                              }
                            goto out;
                          }
                        break;
                      case virt_chr:
                        if (component == 0)
                          fileattr = FILE_ATTRIBUTE_DEVICE;
                        break;
                      default:
                        if (component == 0)
                          fileattr = INVALID_FILE_ATTRIBUTES;
                        goto virtual_component_retry;
                    }
                  if (component == 0 || dev != FH_NETDRIVE)
                    mount_flags |= MOUNT_RO;
                  goto out;
                }
              /* devn should not be a device.  If it is, then stop parsing. */
              else if (dev != FH_FS)
                {
                  fileattr = 0;
                  mount_flags = sym.mount_flags ();
                  if (component)
                    {
                      error = ENOTDIR;
                      return;
                    }
                  goto out;             /* Found a device.  Stop parsing. */
                }

              /* If path is only a drivename, Windows interprets it as the
                 current working directory on this drive instead of the root
                 dir which is what we want. So we need the trailing backslash
                 in this case. */
              if (full_path[0] && full_path[1] == ':' && full_path[2] == '\0')
                {
                  full_path[2] = '\\';
                  full_path[3] = '\0';
                }

              /* If the incoming path was given in DOS notation, always treat
                 it as caseinsensitive,noacl path.  This must be set before
                 calling sym.check, otherwise the path is potentially treated
                 casesensitive. */
              if (is_msdos)
                sym.mount_flags (sym.mount_flags ()
                                 | MOUNT_NOPOSIX | MOUNT_NOACL);

    is_fs_via_procsys:

              symlen = sym.check (full_path, suff, fs, conv_handle);

    is_virtual_symlink:

              if (sym.isdevice ())
                {
                  if (component)
                    {
                      error = ENOTDIR;
                      return;
                    }
                  dev.parse (sym.dev ());
                  dev.setfs (1);
                  dev.mode (sym.mode ());
                  fileattr = sym.fileattr ();
                  goto out;
                }

              if (sym.path_flags () & PATH_SOCKET)
                {
                  if (component)
                    {
                      error = ENOTDIR;
                      return;
                    }
                  fileattr = sym.fileattr ();
#ifdef __WITH_AF_UNIX
                  dev.parse ((sym.path_flags () & PATH_REP) ? FH_UNIX : FH_LOCAL);
#else
                  dev.parse (FH_LOCAL);
#endif /* __WITH_AF_UNIX */
                  dev.setfs (1);
                  mount_flags = sym.mount_flags ();
                  path_flags = sym.path_flags ();
                  goto out;
                }

              if (!component)
                {
                  /* Make sure that /dev always exists. */
                  fileattr = isdev_dev (dev) ? FILE_ATTRIBUTE_DIRECTORY
                                             : sym.fileattr ();
                  mount_flags = sym.mount_flags ();
                  path_flags = sym.path_flags ();
                }
              else if (isdev_dev (dev))
                {
                  /* If we're looking for a non-existing file below /dev,
                     make sure that the device type is converted to FH_FS, so
                     that subsequent code handles the file correctly.  Unless
                     /dev itself doesn't exist on disk.  In that case /dev
                     is handled as virtual filesystem, and virtual filesystems
                     are read-only.  The PC_KEEP_HANDLE check allows to check
                     for a call from an informational system call.  In that
                     case we just stick to ENOENT, and the device type doesn't
                     matter anyway. */
                  if (sym.error () == ENOENT && !(opt & PC_KEEP_HANDLE))
                    sym.error (EROFS);
                  else
                    dev = FH_FS;
                }

              /* If symlink.check found an existing non-symlink file, then
                 it sets the appropriate flag.  It also sets any suffix found
                 into `ext_here'. */
              if (!sym.issymlink ()
                  && sym.fileattr () != INVALID_FILE_ATTRIBUTES)
                {
                  error = sym.error ();
                  if (component == 0)
                    add_ext = true;
                  else if (!(sym.fileattr () & FILE_ATTRIBUTE_DIRECTORY))
                    {
                      error = ENOTDIR;
                      goto out;
                    }
                  goto out;     // file found
                }
              /* Found a symlink if symlen > 0 or short-circuited a native
                 symlink or junction point if symlen < 0.
                 If symlen > 0 and component == 0, then the src path itself
                 was a symlink.  If !follow_mode then we're done.  Otherwise
                 we have to insert the path found into the full path that we
                 are building and perform all of these operations again on the
                 newly derived path. */
              else if (symlen)
                {
                  /* if symlen is negativ, the actual native symlink or
                      junction point is an inner path component.  Just fix up
                      symlen to be positive and don't try any PC_SYM_FOLLOW
                      handling. */
                  if (symlen < 0)
                    symlen = -symlen;
                  else if (component == 0
                           && (!(opt & PC_SYM_FOLLOW)
                               || (is_winapi_reparse_point ()
                                   && (opt & PC_SYM_NOFOLLOW_REP))))
                    {
                      /* Usually a trailing slash requires to follow a symlink,
                         even with PC_SYM_NOFOLLOW.  The reason is that "foo/"
                         is equivalent to "foo/." so the symlink is in fact not
                         the last path component.

                         PC_SYM_NOFOLLOW_DIR is used to indicate that the
                         last path component is the target symlink and the
                         trailing slash is supposed to be ignored. */
                      if (!need_directory || (opt & PC_SYM_NOFOLLOW_DIR))
                        {
                          /* last component of path is a symlink. */
                          set_symlink (symlen);
                          /* make sure not to set errno to ENOTDIR. */
                          need_directory = 0;
                          if (opt & PC_SYM_CONTENTS)
                            {
                              strcpy (THIS_path, sym.content ());
                              goto out;
                            }
                          add_ext = true;
                          goto out;
                        }
                    }
                  /* Following a symlink we can't trust the collected
                     filesystem information any longer. */
                  fs.clear ();
                  /* Close handle, if we have any.  Otherwise we're collecting
                     handles while following symlinks. */
                  conv_handle.close ();
                  break;
                }
              else if (sym.error () && sym.error () != ENOENT)
                {
                  error = sym.error ();
                  goto out;
                }
              /* No existing file found. */

    virtual_component_retry:
              /* Find the new "tail" of the path, e.g. in '/for/bar/baz',
                 /baz is the tail. */
              if (tail != path_end)
                *tail = '/';
              while (--tail > path_copy + 1 && *tail != '/') {}
              /* Exit loop if there is no tail or we are at the
                 beginning of a UNC path */
              if (tail <= path_copy + 1)
                goto out;       // all done

              /* Haven't found an existing pathname component yet.
                 Pinch off the tail and try again. */
              *tail = '\0';
              component++;
            }

          /* Arrive here if above loop detected a symlink. */
          if (++loop > SYMLOOP_MAX)
            {
              error = ELOOP;   // Eep.
              return;
            }

          /* Place the link content, possibly with head and/or tail,
             in tmp_buf */

          char *headptr;
          if (isabspath (sym.content ()))
            headptr = tmp_buf;  /* absolute path */
          else
            {
              /* Copy the first part of the path (with ending /) and point to
                 the end. */
              char *prevtail = tail;
              while (--prevtail > path_copy  && *prevtail != '/') {}
              int headlen = prevtail - path_copy + 1;;
              memcpy (tmp_buf, path_copy, headlen);
              headptr = &tmp_buf[headlen];
            }

          /* Make sure there is enough space */
          if (headptr + symlen >= tmp_buf + (2 * NT_MAX_PATH))
            {
            too_long:
              error = ENAMETOOLONG;
              set_path ("::ENAMETOOLONG::");
              return;
            }

         /* Copy the symlink contents to the end of tmp_buf.
            Convert slashes. */
          for (const char *p = sym.content (); *p; p++)
            *headptr++ = *p == '\\' ? '/' : *p;
          *headptr = '\0';

          /* Copy any tail component (with the 0) */
          if (tail++ < path_end)
            {
              /* Add a slash if needed. There is space. */
              if (*(headptr - 1) != '/')
                *headptr++ = '/';
              int taillen = path_end - tail + 1;
              if (headptr + taillen > tmp_buf + (2 * NT_MAX_PATH))
                goto too_long;
              memcpy (headptr, tail, taillen);
            }

          /* Evaluate everything all over again. */
          src = tmp_buf;
        }

      if (!(opt & PC_SYM_CONTENTS))
        add_ext = true;

    out:
      set_path (THIS_path);
      if (add_ext)
        add_ext_from_sym (sym);
      if (dev == FH_NETDRIVE && component)
        {
          /* This case indicates a non-existant resp. a non-retrievable
             share.  This happens for instance if the share is a printer.
             In this case the path must not be treated like a FH_NETDRIVE,
             but like a FH_FS instead, so the usual open call for files
             is used on it. */
          dev.parse (FH_FS);
        }
      else if (isproc_dev (dev) && fileattr == INVALID_FILE_ATTRIBUTES)
        {
          /* FIXME: Usually we don't set error to ENOENT if a file doesn't
             exist.  This is typically indicated by the fileattr content.
             So, why here?  The downside is that cygwin_conv_path just gets
             an error for these paths so it reports the error back to the
             application.  Unlike in all other cases of non-existant files,
             for which check doesn't set error, so cygwin_conv_path just
             returns the path, as intended. */
          error = ENOENT;
          return;
        }
      else if (!need_directory || error)
        /* nothing to do */;
      else if (fileattr == INVALID_FILE_ATTRIBUTES)
        /* Reattach trailing dirsep in native path. */
        strcat (modifiable_path (), "\\");
      else if (fileattr & FILE_ATTRIBUTE_DIRECTORY)
        path_flags &= ~PATH_SYMLINK;
      else
        {
          debug_printf ("%s is a non-directory", path);
          error = ENOTDIR;
          return;
        }

      /* Restore last path component */
      if (tail < path_end && tail > path_copy + 1)
        *tail = '/';

      if (dev.isfs ())
        {
          /* If FS hasn't been checked already in symlink_info::check,
             do so now. */
          if (fs.inited ()|| fs.update (get_nt_native_path (), NULL))
            {
              /* Incoming DOS paths are treated like DOS paths in native
                 Windows applications.  No ACLs, just default settings. */
              if (is_msdos)
                fs.has_acls (false);
              debug_printf ("this->path(%s), has_acls(%d)",
                            path, fs.has_acls ());
              /* CV: We could use this->has_acls() but I want to make sure that
                 we don't forget that the MOUNT_NOACL flag must be taken into
                 account here. */
              if (!(mount_flags & MOUNT_NOACL) && fs.has_acls ())
                set_exec (0);  /* We really don't know if this is executable or
                                  not here but set it to not executable since
                                  it will be figured out later by anything
                                  which cares about this. */
            }
          /* If the FS has been found to have unreliable inodes, note
             that in mount_flags. */
          if (!fs.hasgood_inode ())
            mount_flags |= MOUNT_IHASH;
          /* If the OS is caseinsensitive or the FS is caseinsensitive,
             don't handle path casesensitive. */
          if (cygwin_shared->obcaseinsensitive || fs.caseinsensitive ())
            mount_flags |= MOUNT_NOPOSIX;
          caseinsensitive = (mount_flags & MOUNT_NOPOSIX)
                            ? OBJ_CASE_INSENSITIVE : 0;
          if (exec_state () != dont_know_if_executable)
            /* ok */;
          else if (isdir ())
            set_exec (1);
          else if (issymlink () || issocket ())
            set_exec (0);

          /* FIXME: bad hack alert!!!  We need a better solution */
          if (!strncmp (path_copy, MQ_PATH, MQ_LEN) && path_copy[MQ_LEN])
            dev.parse (FH_MQUEUE);
        }

      if (opt & PC_NOFULL)
        {
          if (is_relpath)
            {
              mkrelpath (this->modifiable_path (), !!caseinsensitive);
              /* Invalidate wide_path so that wide relpath can be created
                 in later calls to get_nt_native_path or get_wide_win32_path. */
              if (wide_path)
                cfree (wide_path);
              wide_path = NULL;
            }
          if (need_directory)
            {
              size_t n = strlen (this->path);
              /* Do not add trailing \ to UNC device names like \\.\a: */
              if (this->path[n - 1] != '\\' &&
                  (strncmp (this->path, "\\\\.\\", 4) != 0))
                {
                  this->modifiable_path ()[n] = '\\';
                  this->modifiable_path ()[n + 1] = '\0';
                }
            }
        }

      if (opt & PC_OPEN)
        path_flags |= PATH_OPEN;

      if (opt & PC_CTTY)
        path_flags |= PATH_CTTY;

      if (opt & PC_POSIX)
        set_posix (path_copy);

#if 0
      if (!error)
        {
          last_path_conv = *this;
          strcpy (last_src, src);
        }
#endif
    }
  __except (NO_ERROR)
    {
      error = EFAULT;
    }
  __endtry
}

struct pc_flat
{
  path_conv pc;
  HANDLE hdl;
  size_t name_len;
  size_t posix_len;
  char data[0];
};

void *
path_conv::serialize (HANDLE h, unsigned int &n) const
{
  pc_flat *pcf;
  size_t nlen = 0, plen = 0;
  char *p;

  if (path)
    nlen = strlen (path) + 1;
  if (posix_path)
    plen = strlen (posix_path) + 1;
  n = sizeof (pc_flat) + nlen + plen;
  pcf = (pc_flat *) cmalloc (HEAP_COMMUNE, n);
  if (!pcf)
    {
      n = 0;
      return NULL;
    }
  memcpy ((void *) &pcf->pc, this, sizeof *this);
  pcf->hdl = h;
  pcf->name_len = nlen;
  pcf->posix_len = plen;
  p = pcf->data;
  if (nlen)
    p = stpcpy (p, path) + 1;
  if (plen)
    stpcpy (p, posix_path);
  return pcf;
}

HANDLE
path_conv::deserialize (void *bufp)
{
  pc_flat *pcf = (pc_flat *) bufp;
  char *p;
  HANDLE ret;

  memcpy ((void *) this, &pcf->pc, sizeof *this);
  wide_path = uni_path.Buffer = NULL;
  uni_path.MaximumLength = uni_path.Length = 0;
  path = posix_path = NULL;
  p = pcf->data;
  if (pcf->name_len)
    {
      set_path (p);
      p += pcf->name_len;
    }
  if (pcf->posix_len)
    set_posix (p);
  dev.parse (pcf->pc.dev);
  ret = pcf->hdl;
  cfree (bufp);
  return ret;
}

path_conv::~path_conv ()
{
  if (posix_path)
    {
      cfree ((void *) posix_path);
      posix_path = NULL;
    }
  if (path)
    {
      cfree (modifiable_path ());
      path = NULL;
    }
  if (wide_path)
    {
      cfree (wide_path);
      wide_path = NULL;
    }
  close_conv_handle ();
}

bool
path_conv::is_binary ()
{
  tmp_pathbuf tp;
  PWCHAR bintest = tp.w_get ();
  DWORD bin;

  return GetBinaryTypeW (get_wide_win32_path (bintest), &bin)
         && (bin == SCS_32BIT_BINARY || bin == SCS_64BIT_BINARY);
}

/* Helper function to fill the fai datastructure for a file. */
NTSTATUS
file_get_fai (HANDLE h, PFILE_ALL_INFORMATION pfai)
{
  NTSTATUS status;
  IO_STATUS_BLOCK io;

  /* Some FSes (Netapps) don't implement FileNetworkOpenInformation. */
  status = NtQueryInformationFile (h, &io, pfai, sizeof *pfai,
                                   FileAllInformation);
  if (likely (status == STATUS_BUFFER_OVERFLOW))
    status = STATUS_SUCCESS;
  /* Filesystems with broken FileAllInformation exist, too.  See the thread
     starting with https://cygwin.com/ml/cygwin/2016-07/msg00350.html. */
  else if (!NT_SUCCESS (status) && status != STATUS_ACCESS_DENIED)
    {
      memset (pfai, 0, sizeof *pfai);
      status = NtQueryInformationFile (h, &io, &pfai->BasicInformation,
                                       sizeof pfai->BasicInformation,
                                       FileBasicInformation);
      if (NT_SUCCESS (status))
        {
          /* The return value of FileInternalInformation is largely ignored.
             We only make absolutely sure the inode number is set to 0 in
             case it fails. */
          status = NtQueryInformationFile (h, &io, &pfai->InternalInformation,
                                           sizeof pfai->InternalInformation,
                                           FileInternalInformation);
          if (!NT_SUCCESS (status))
            pfai->InternalInformation.IndexNumber.QuadPart = 0LL;
          status = NtQueryInformationFile (h, &io, &pfai->StandardInformation,
                                           sizeof pfai->StandardInformation,
                                           FileStandardInformation);
        }
    }
  return status;
}

/* Normalize a Win32 path.
   /'s are converted to \'s in the process.
   All duplicate \'s, except for 2 leading \'s, are deleted.

   The result is 0 for success, or an errno error value.
   FIXME: A lot of this should be mergeable with the POSIX critter.  */
int
normalize_win32_path (const char *src, char *dst, char *&tail)
{
  const char *src_start = src;
  const char *dst_start = dst;
  bool beg_src_slash = isdirsep (src[0]);

  tail = dst;
  /* Skip Win32 long path name prefix and NT object directory prefix. */
  if (beg_src_slash && (src[1] == '?' || isdirsep (src[1]))
      && src[2] == '?' && isdirsep (src[3]))
    {
      src += 4;
      if (isdrive (src) && (isdirsep (src[2]) || !src[2]))
        beg_src_slash = false;
      else if (!strncmp (src, "UNC", 3) && isdirsep (src[3]))
        /* native UNC path */
        src += 2; /* Fortunately the first char is not copied... */
      else
        return EINVAL;
    }
  if (beg_src_slash && isdirsep (src[1]))
    {
      if (isdirsep (src[2]))
        {
          /* More than two slashes are just folded into one. */
          src += 2;
          while (isdirsep (src[1]))
            ++src;
        }
      else
        {
          /* Two slashes start a network or device path. */
          *tail++ = '\\';
          src++;
          if (src[1] == '.' && isdirsep (src[2]))
            {
              *tail++ = '\\';
              *tail++ = '.';
              src += 2;
            }
        }
      dst = tail;
      /* If backslash is missing in src, add one. */
      if (!isdirsep (src[0]))
        *tail++ = '\\';
    }
  if (tail == dst_start)
    {
      if (isdrive (src))
        {
          /* Always convert drive letter to uppercase for case sensitivity. */
          *tail++ = cyg_toupper (*src++);
          *tail++ = *src++;
          dst = tail;
          /* If backslash is missing in src, add one. */
          if (!isdirsep (src[0]))
            *tail++ = '\\';
        }
      else if (*src != '/')
        {
          /* Make sure dst points to the rightmost backslash which must not
             be backtracked over during ".." evaluation.  This is either
             the backslash after the network path prefix (i.e. "\\") or
             the backslash after a drive letter (i.e. C:\"). */
          if (beg_src_slash)
            {
              tail += cygheap->cwd.get_drive (dst);
              /* network path, drive == '\\\\'?  Decrement tail to avoid
                 triple backslash in output. */
              if (dst[0] == '\\')
                --tail;
              dst = tail;
            }
          else if (cygheap->cwd.get (dst, 0))
            {
              tail = strchr (tail, '\0');
              if (tail[-1] != '\\')
                *tail++ = '\\';
              ++dst;
              if (dst[1] == '\\')
                ++dst;
            }
          else
            return get_errno ();
        }
    }

  /* At this point dst points to the first backslash, even if it only gets
     written in the first iteration of the following loop.  Backing up to
     handle ".." components can not underrun that border (thus avoiding
     subsequent buffer underruns with fatal results). */
  while (*src)
    {
      /* Strip duplicate /'s.  */
      if (isdirsep (src[0]) && isdirsep (src[1]))
        src++;
      /* Ignore "./".  */
      else if (src[0] == '.' && isdirsep (src[1])
               && (src == src_start || isdirsep (src[-1])))
        {
          src += 2;
          /* Skip /'s to the next path component. */
          while (isdirsep (*src))
            src++;
        }

      /* Backup if "..".  */
      else if (src[0] == '.' && src[1] == '.' && tail[-1] == '\\')
        {
          if (!isdirsep (src[2]) && src[2] != '\0')
              *tail++ = *src++;
          else
            {
              /* Back up over /, but not if it's the first one.  */
              if (tail > dst + 1)
                tail--;
              /* Now back up to the next /.  */
              while (tail > dst + 1 && tail[-1] != '\\' && tail[-2] != ':')
                tail--;
              src += 2;
              /* Skip /'s to the next path component. */
              while (isdirsep (*src))
                src++;
            }
        }
      /* Otherwise, add char to result.  */
      else
        {
          if (*src == '/')
            *tail++ = '\\';
          else
            *tail++ = *src;
          src++;
        }
      if ((tail - dst) >= NT_MAX_PATH)
        return ENAMETOOLONG;
    }
  if (tail > dst + 1 && tail[-1] == '.' && tail[-2] == '\\')
    tail--;
  *tail = '\0';
  debug_printf ("%s = normalize_win32_path (%s)", dst_start, src_start);
  return 0;
}

/* Various utilities.  */

/* nofinalslash: Remove trailing / and \ from SRC (except for the
   first one).  It is ok for src == dst.  */

void
nofinalslash (const char *src, char *dst)
{
  int len = strlen (src);
  if (src != dst)
    memcpy (dst, src, len + 1);
  while (len > 1 && isdirsep (dst[--len]))
    dst[len] = '\0';
}

/* conv_path_list: Convert a list of path names to/from Win32/POSIX. */

static int
conv_path_list (const char *src, char *dst, size_t size,
                cygwin_conv_path_t what)
{
  tmp_pathbuf tp;
  char src_delim, dst_delim;
  size_t len;
  bool env_cvt = false;

  if (what == (cygwin_conv_path_t) ENV_CVT)
    {
      what = CCP_WIN_A_TO_POSIX | CCP_RELATIVE;
      env_cvt = true;
    }
  if ((what & CCP_CONVTYPE_MASK) == CCP_WIN_A_TO_POSIX)
    {
      src_delim = ';';
      dst_delim = ':';
    }
  else
    {
      src_delim = ':';
      dst_delim = ';';
    }

  char *srcbuf;
  len = strlen (src) + 1;
  if (len <= NT_MAX_PATH * sizeof (WCHAR))
    srcbuf = (char *) tp.w_get ();
  else
    srcbuf = (char *) alloca (len);

  int err = 0;
  char *d = dst - 1;
  bool saw_empty = false;
  do
    {
      char *srcpath = srcbuf;
      char *s = strccpy (srcpath, &src, src_delim);
      size_t len = s - srcpath;
      if (len >= NT_MAX_PATH)
        {
          err = ENAMETOOLONG;
          break;
        }
      /* Paths in Win32 path lists in the environment (%Path%), are often
         enclosed in quotes (usually paths with spaces).  Trailing backslashes
         are common, too.  Remove them. */
      if (env_cvt && len)
        {
          if (*srcpath == '"')
            {
              ++srcpath;
              *--s = '\0';
              len -= 2;
            }
          while (len && s[-1] == '\\')
            {
              *--s = '\0';
              --len;
            }
        }
      if (len)
        {
          ++d;
          err = cygwin_conv_path (what, srcpath, d, size - (d - dst));
        }
      else if ((what & CCP_CONVTYPE_MASK) == CCP_POSIX_TO_WIN_A)
        {
          ++d;
          err = cygwin_conv_path (what, ".", d, size - (d - dst));
        }
      else
        {
          if (env_cvt)
            saw_empty = true;
          continue;
        }
      if (err)
        break;
      d = strchr (d, '\0');
      *d = dst_delim;
    }
  while (*src++);

  if (saw_empty)
    err = EIDRM;

  if (d < dst)
    d++;
  *d = '\0';
  return err;
}

/********************** Symbolic Link Support **************************/

/* Create a symlink from FROMPATH to TOPATH. */

extern "C" int
symlink (const char *oldpath, const char *newpath)
{
  path_conv win32_newpath;

  __try
    {
      if (!*oldpath || !*newpath)
        {
          set_errno (ENOENT);
          __leave;
        }

      /* Trailing dirsep is a no-no, only errno differs. */
      bool has_trailing_dirsep = isdirsep (newpath[strlen (newpath) - 1]);
      win32_newpath.check (newpath,
                           PC_SYM_NOFOLLOW | PC_SYM_NOFOLLOW_DIR | PC_POSIX,
                           stat_suffixes);

      if (win32_newpath.error || has_trailing_dirsep)
        {
          set_errno (win32_newpath.error ?:
                     win32_newpath.exists () ? EEXIST : ENOENT);
          __leave;
        }

      return symlink_worker (oldpath, win32_newpath, false);
    }
  __except (EFAULT) {}
  __endtry
  return -1;
}

static int
symlink_nfs (const char *oldpath, path_conv &win32_newpath)
{
  /* On NFS, create symlinks by calling NtCreateFile with an EA of type
     NfsSymlinkTargetName containing ... the symlink target name. */
  tmp_pathbuf tp;
  PFILE_FULL_EA_INFORMATION pffei;
  NTSTATUS status;
  HANDLE fh;
  OBJECT_ATTRIBUTES attr;
  IO_STATUS_BLOCK io;

  pffei = (PFILE_FULL_EA_INFORMATION) tp.w_get ();
  pffei->NextEntryOffset = 0;
  pffei->Flags = 0;
  pffei->EaNameLength = sizeof (NFS_SYML_TARGET) - 1;
  char *EaValue = stpcpy (pffei->EaName, NFS_SYML_TARGET) + 1;
  pffei->EaValueLength = sizeof (WCHAR) *
    (sys_mbstowcs ((PWCHAR) EaValue, NT_MAX_PATH, oldpath) - 1);
  status = NtCreateFile (&fh, FILE_WRITE_DATA | FILE_WRITE_EA | SYNCHRONIZE,
                         win32_newpath.get_object_attr (attr, sec_none_nih),
                         &io, NULL, FILE_ATTRIBUTE_SYSTEM,
                         FILE_SHARE_VALID_FLAGS, FILE_CREATE,
                         FILE_SYNCHRONOUS_IO_NONALERT
                         | FILE_OPEN_FOR_BACKUP_INTENT,
                         pffei, NT_MAX_PATH * sizeof (WCHAR));
  if (!NT_SUCCESS (status))
    {
      __seterrno_from_nt_status (status);
      return -1;
    }
  NtClose (fh);
  return 0;
}

/* Count backslashes between s and e. */
static inline int
cnt_bs (PWCHAR s, PWCHAR e)
{
  int num = 0;

  while (s < e)
    if (*s++ == L'\\')
      ++num;
  return num;
}

#ifndef SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE
#define SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE 2
#endif

static int
symlink_native (const char *oldpath, path_conv &win32_newpath)
{
  tmp_pathbuf tp;
  path_conv win32_oldpath;
  PUNICODE_STRING final_oldpath, final_newpath;
  UNICODE_STRING final_oldpath_buf;
  DWORD flags;

  if (isabspath (oldpath))
    {
      win32_oldpath.check (oldpath, PC_SYM_NOFOLLOW, stat_suffixes);
      final_oldpath = win32_oldpath.get_nt_native_path ();
    }
  else
    {
      /* The symlink target is relative to the directory in which
         the symlink gets created, not relative to the cwd.  Therefore
         we have to mangle the path quite a bit before calling path_conv. */
      ssize_t len = strrchr (win32_newpath.get_posix (), '/')
                    - win32_newpath.get_posix () + 1;
      char *absoldpath = tp.t_get ();
      stpcpy (stpncpy (absoldpath, win32_newpath.get_posix (), len),
              oldpath);
      win32_oldpath.check (absoldpath, PC_SYM_NOFOLLOW, stat_suffixes);

      /* Try hard to keep Windows symlink path relative. */

      /* 1. Find common path prefix.  Skip leading \\?\, but take pre-increment
            of the following loop into account. */
      PWCHAR c_old = win32_oldpath.get_nt_native_path ()->Buffer + 3;
      PWCHAR c_new = win32_newpath.get_nt_native_path ()->Buffer + 3;
      /* Windows compatible == always check case insensitive.  */
      while (towupper (*++c_old) == towupper (*++c_new))
        ;
      /* The last component could share a common prefix, so make sure we end
         up on the first char after the last common backslash. */
      while (c_old[-1] != L'\\')
        --c_old, --c_new;

      /* 2. Check if prefix is long enough.  The prefix must at least points to
            a complete device:  \\?\X:\ or \\?\UNC\server\share\ are the minimum
            prefix strings.  We start counting behind the \\?\ for speed. */
      int num = cnt_bs (win32_oldpath.get_nt_native_path ()->Buffer + 4, c_old);
      if (num < 1               /* locale drive. */
          || (win32_oldpath.get_nt_native_path ()->Buffer[5] != L':'
              && num < 3))      /* UNC path. */
        {
          /* 3a. No valid common path prefix: Create absolute symlink. */
          final_oldpath = win32_oldpath.get_nt_native_path ();
        }
      else
        {
          /* 3b. Common path prefx.  Count number of additional directories
                 in symlink's path, and prepend as much ".." path components
                 to the target path. */
          PWCHAR e_new = win32_newpath.get_nt_native_path ()->Buffer
                         + win32_newpath.get_nt_native_path ()->Length
                           / sizeof (WCHAR);
          num = cnt_bs (c_new, e_new);
          final_oldpath = &final_oldpath_buf;
          final_oldpath->Buffer = tp.w_get ();
          PWCHAR e_old = final_oldpath->Buffer;
          while (num-- > 0)
            e_old = wcpcpy (e_old, L"..\\");
          wcpcpy (e_old, c_old);
        }
    }
  /* If the symlink target doesn't exist, don't create native symlink.
     Otherwise the directory flag in the symlink is potentially wrong
     when the target comes into existence, and native tools will fail.
     This is so screwball. This is no problem on AFS, fortunately. */
  if (!win32_oldpath.exists () && !win32_oldpath.fs_is_afs ())
    {
      SetLastError (ERROR_FILE_NOT_FOUND);
      return -1;
    }
  /* Don't allow native symlinks to Cygwin special files.  However, the
     caller shoud know because this case shouldn't be covered by the
     default "nativestrict" behaviour, so we use a special return code. */
  if (win32_oldpath.isspecial ())
    return -2;
  /* Convert native paths to Win32 UNC paths. */
  final_newpath = win32_newpath.get_nt_native_path ();
  final_newpath->Buffer[1] = L'\\';
  /* oldpath may be relative.  Make sure to convert only absolute paths
     to Win32 paths. */
  if (final_oldpath->Buffer[0] == L'\\')
    {
      /* Starting with Windows 8.1, the ShellExecuteW function does not
         handle the long path prefix correctly for symlink targets.  Thus,
         we create simple short paths < MAX_PATH without long path prefix. */
      if (RtlEqualUnicodePathPrefix (final_oldpath, &ro_u_uncp, TRUE)
          && final_oldpath->Length < (MAX_PATH + 6) * sizeof (WCHAR))
        {
          final_oldpath->Buffer += 6;
          final_oldpath->Buffer[0] = L'\\';
        }
      else if (final_oldpath->Length < (MAX_PATH + 4) * sizeof (WCHAR))
        final_oldpath->Buffer += 4;
      else /* Stick to long path, fix native prefix for Win32 API calls. */
        final_oldpath->Buffer[1] = L'\\';
    }
  /* Try to create native symlink. */
  flags = win32_oldpath.isdir () ? SYMBOLIC_LINK_FLAG_DIRECTORY : 0;
  if (wincap.has_unprivileged_createsymlink ())
    flags |= SYMBOLIC_LINK_FLAG_ALLOW_UNPRIVILEGED_CREATE;
  if (!CreateSymbolicLinkW (final_newpath->Buffer, final_oldpath->Buffer,
                            flags))
    {
      /* Repair native newpath, we still need it. */
      final_newpath->Buffer[1] = L'?';
      return -1;
    }
  return 0;
}

#ifndef IO_REPARSE_TAG_LX_SYMLINK
#define IO_REPARSE_TAG_LX_SYMLINK       (0xa000001d)
#endif

typedef struct _REPARSE_LX_SYMLINK_BUFFER
{
  DWORD ReparseTag;
  WORD  ReparseDataLength;
  WORD  Reserved;
  struct {
    DWORD FileType;     /* Take member name with a grain of salt.  Value is
                           apparently always 2 for symlinks. */
    char  PathBuffer[1];/* POSIX path as given to symlink(2).
                           Path is not \0 terminated.
                           Length is ReparseDataLength - sizeof (FileType).
                           Always UTF-8.
                           Chars given in incompatible codesets, e. g. umlauts
                           in ISO-8859-x, are converted to the Unicode
                           REPLACEMENT CHARACTER 0xfffd == \xef\xbf\bd */
  } LxSymlinkReparseBuffer;
} REPARSE_LX_SYMLINK_BUFFER,*PREPARSE_LX_SYMLINK_BUFFER;

static int
symlink_wsl (const char *oldpath, path_conv &win32_newpath)
{
  tmp_pathbuf tp;
  PREPARSE_LX_SYMLINK_BUFFER rpl = (PREPARSE_LX_SYMLINK_BUFFER) tp.c_get ();
  char *path_buf = rpl->LxSymlinkReparseBuffer.PathBuffer;
  const int max_pathlen = MAXIMUM_REPARSE_DATA_BUFFER_SIZE
                          - offsetof (REPARSE_LX_SYMLINK_BUFFER,
                                      LxSymlinkReparseBuffer.PathBuffer);
  PWCHAR utf16 = tp.w_get ();
  NTSTATUS status;
  IO_STATUS_BLOCK io;
  OBJECT_ATTRIBUTES attr;
  HANDLE fh;
  int len;

  rpl->ReparseTag = IO_REPARSE_TAG_LX_SYMLINK;
  rpl->Reserved = 0;
  rpl->LxSymlinkReparseBuffer.FileType = 2;
  /* Convert cygdrive prefix to "/mnt" for WSL compatibility, but only if
     cygdrive prefix is not "/", otherwise suffer random "/mnt" symlinks... */
  if (mount_table->cygdrive_len > 1
      && path_prefix_p (mount_table->cygdrive, oldpath,
                        mount_table->cygdrive_len, false)
      && (strlen (oldpath + mount_table->cygdrive_len - 1) < 2
          || (islower (oldpath[mount_table->cygdrive_len])
              && (oldpath[mount_table->cygdrive_len + 1] == '/'
                  || oldpath[mount_table->cygdrive_len + 1] == '\0'))))
    stpcpy (stpcpy (path_buf, "/mnt"),
            oldpath + mount_table->cygdrive_len - 1);
  else
    *stpncpy (path_buf, oldpath, max_pathlen) = '\0';
  /* Convert target path to UTF-16 and then back to UTF-8 to make sure the
     WSL symlink is in UTF-8, independent of the current Cygwin codeset. */
  sys_mbstowcs (utf16, NT_MAX_PATH, path_buf);
  len = WideCharToMultiByte (CP_UTF8, 0, utf16, -1, path_buf, max_pathlen,
                             NULL, NULL);
  /* Length is omitting trailing \0. */
  rpl->ReparseDataLength = sizeof (DWORD) + len - 1;
  /* Create reparse point. */
  status = NtCreateFile (&fh, DELETE | FILE_GENERIC_WRITE
                             | READ_CONTROL | WRITE_DAC,
                         win32_newpath.get_object_attr (attr, sec_none_nih),
                         &io, NULL, FILE_ATTRIBUTE_NORMAL,
                         FILE_SHARE_VALID_FLAGS, FILE_CREATE,
                         FILE_SYNCHRONOUS_IO_NONALERT
                         | FILE_NON_DIRECTORY_FILE
                         | FILE_OPEN_FOR_BACKUP_INTENT
                         | FILE_OPEN_REPARSE_POINT,
                         NULL, 0);
  if (!NT_SUCCESS (status))
    {
      SetLastError (RtlNtStatusToDosError (status));
      return -1;
    }
  set_created_file_access (fh, win32_newpath, S_IFLNK | STD_RBITS | STD_WBITS);
  status = NtFsControlFile (fh, NULL, NULL, NULL, &io, FSCTL_SET_REPARSE_POINT,
                            (LPVOID) rpl, REPARSE_DATA_BUFFER_HEADER_SIZE
                                         + rpl->ReparseDataLength,
                            NULL, 0);
  if (!NT_SUCCESS (status))
    {
      SetLastError (RtlNtStatusToDosError (status));
      FILE_DISPOSITION_INFORMATION fdi = { TRUE };
      status = NtSetInformationFile (fh, &io, &fdi, sizeof fdi,
                                     FileDispositionInformation);
      NtClose (fh);
      if (!NT_SUCCESS (status))
        debug_printf ("Setting delete dispostion failed, status = %y", status);
      return -1;
    }
  NtClose (fh);
  return 0;
}

int
symlink_worker (const char *oldpath, path_conv &win32_newpath, bool isdevice)
{
  int res = -1;
  size_t len;
  char *buf, *cp;
  tmp_pathbuf tp;
  winsym_t wsym_type;

  /* POSIX says that empty 'newpath' is invalid input while empty
     'oldpath' is valid -- it's symlink resolver job to verify if
     symlink contents point to existing filesystem object */
  __try
    {
      if (strlen (oldpath) > SYMLINK_MAX)
        {
          set_errno (ENAMETOOLONG);
          __leave;
        }

      /* Default symlink type is determined by global allow_winsymlinks
         variable.  Device files are always shortcuts. */
      wsym_type = isdevice ? WSYM_lnk : allow_winsymlinks;
      /* NFS has its own, dedicated way to create symlinks. */
      if (win32_newpath.fs_is_nfs () && !isdevice)
        wsym_type = WSYM_nfs;
      /* MVFS doesn't handle the SYSTEM DOS attribute, but it handles the R/O
         attribute. Therefore we create symlinks on MVFS always as shortcuts. */
      else if (win32_newpath.fs_is_mvfs ())
        wsym_type = WSYM_lnk;
      /* AFS only supports native symlinks. */
      else if (win32_newpath.fs_is_afs ())
        wsym_type = WSYM_nativestrict;
      /* Don't try native symlinks on FSes not supporting reparse points. */
      else if ((wsym_type == WSYM_native || wsym_type == WSYM_nativestrict)
               && !(win32_newpath.fs_flags () & FILE_SUPPORTS_REPARSE_POINTS))
        wsym_type = WSYM_default;

      /* Attach .lnk suffix when shortcut is requested. */
      if (wsym_type == WSYM_lnk && !win32_newpath.exists ()
          && (isdevice || !win32_newpath.fs_is_nfs ()))
        {
          char *newplnk = tp.c_get ();
          stpcpy (stpcpy (newplnk, win32_newpath.get_posix ()), ".lnk");
          win32_newpath.check (newplnk, PC_SYM_NOFOLLOW | PC_POSIX);
        }

      if (win32_newpath.error)
        {
          set_errno (win32_newpath.error);
          __leave;
        }

      syscall_printf ("symlink (%s, %S) wsym_type %d", oldpath,
                      win32_newpath.get_nt_native_path (), wsym_type);

      if ((!isdevice && win32_newpath.exists ())
          || (win32_newpath.isdevice () && !win32_newpath.is_fs_special ()))
        {
          set_errno (EEXIST);
          __leave;
        }

      /* Handle NFS, native symlinks and WSL symlinks in their own functions. */
      switch (wsym_type)
        {
        case WSYM_nfs:
          res = symlink_nfs (oldpath, win32_newpath);
          __leave;
        case WSYM_native:
        case WSYM_nativestrict:
          res = symlink_native (oldpath, win32_newpath);
          if (!res)
            __leave;
          /* Strictly native?  Too bad, unless the target is a Cygwin
             special file. */
          if (res == -1 && wsym_type == WSYM_nativestrict)
            {
              __seterrno ();
              __leave;
            }
          /* Otherwise, fall back to default symlink type. */
          wsym_type = WSYM_default;
          fallthrough;
        case WSYM_default:
          if (win32_newpath.fs_flags () & FILE_SUPPORTS_REPARSE_POINTS)
            {
              res = symlink_wsl (oldpath, win32_newpath);
              if (!res)
                __leave;
            }
          /* On FSes not supporting reparse points, or in case of an error
             creating the WSL symlink, fall back to creating the plain old
             SYSTEM file symlink. */
          wsym_type = WSYM_sysfile;
          break;
        default:
          break;
        }

      if (wsym_type == WSYM_lnk)
        {
          path_conv win32_oldpath;
          ITEMIDLIST *pidl = NULL;
          size_t full_len = 0;
          unsigned short oldpath_len, desc_len, relpath_len, pidl_len = 0;
          char desc[MAX_PATH + 1], *relpath;

          if (!isdevice)
            {
              /* First create an IDLIST to learn how big our shortcut is
                 going to be. */
              IShellFolder *psl;

              /* The symlink target is relative to the directory in which the
                 symlink gets created, not relative to the cwd.  Therefore we
                 have to mangle the path quite a bit before calling path_conv.*/
              if (isabspath (oldpath))
                win32_oldpath.check (oldpath,
                                     PC_SYM_NOFOLLOW,
                                     stat_suffixes);
              else
                {
                  len = strrchr (win32_newpath.get_posix (), '/')
                        - win32_newpath.get_posix () + 1;
                  char *absoldpath = tp.t_get ();
                  stpcpy (stpncpy (absoldpath, win32_newpath.get_posix (),
                                   len),
                          oldpath);
                  win32_oldpath.check (absoldpath, PC_SYM_NOFOLLOW,
                                       stat_suffixes);
                }
              if (SUCCEEDED (SHGetDesktopFolder (&psl)))
                {
                  WCHAR wc_path[win32_oldpath.get_wide_win32_path_len () + 1];
                  win32_oldpath.get_wide_win32_path (wc_path);
                  /* Amazing but true:  Even though the ParseDisplayName method
                     takes a wide char path name, it does not understand the
                     Win32 prefix for long pathnames!  So we have to tack off
                     the prefix and convert the path to the "normal" syntax
                     for ParseDisplayName.  */
                  PWCHAR wc = wc_path + 4;
                  if (wc[1] != L':') /* native UNC path */
                    *(wc += 2) = L'\\';
                  HRESULT res;
                  if (SUCCEEDED (res = psl->ParseDisplayName (NULL, NULL, wc,
                                                              NULL, &pidl,
                                                              NULL)))
                    {
                      ITEMIDLIST *p;

                      for (p = pidl; p->mkid.cb > 0;
                           p = (ITEMIDLIST *)((char *) p + p->mkid.cb))
                        ;
                      pidl_len = (char *) p - (char *) pidl + 2;
                    }
                  psl->Release ();
                }
            }
          /* Compute size of shortcut file. */
          full_len = sizeof (win_shortcut_hdr);
          if (pidl_len)
            full_len += sizeof (unsigned short) + pidl_len;
          oldpath_len = strlen (oldpath);
          /* Unfortunately the length of the description is restricted to a
             length of 2000 bytes.  We don't want to add considerations for
             the different lengths and even 2000 bytes is not enough for long
             path names.  So what we do here is to set the description to the
             POSIX path only if the path is not longer than MAX_PATH characters.
             We append the full path name after the regular shortcut data
             (see below), which works fine with Windows Explorer as well
             as older Cygwin versions (as long as the whole file isn't bigger
             than 8K).  The description field is only used for backward
             compatibility to older Cygwin versions and those versions are
             not capable of handling long path names anyway. */
          desc_len = stpcpy (desc, oldpath_len > MAX_PATH
                                   ? "[path too long]" : oldpath) - desc;
          full_len += sizeof (unsigned short) + desc_len;
          /* Devices get the oldpath string unchanged as relative path. */
          if (isdevice)
            {
              relpath_len = oldpath_len;
              stpcpy (relpath = tp.c_get (), oldpath);
            }
          else
            {
              relpath_len = strlen (win32_oldpath.get_win32 ());
              stpcpy (relpath = tp.c_get (), win32_oldpath.get_win32 ());
            }
          full_len += sizeof (unsigned short) + relpath_len;
          full_len += sizeof (unsigned short) + oldpath_len;
          /* 1 byte more for trailing 0 written by stpcpy. */
          if (full_len < NT_MAX_PATH * sizeof (WCHAR))
            buf = tp.t_get ();
          else
            buf = (char *) alloca (full_len + 1);

          /* Create shortcut header */
          win_shortcut_hdr *shortcut_header = (win_shortcut_hdr *) buf;
          memset (shortcut_header, 0, sizeof *shortcut_header);
          shortcut_header->size = sizeof *shortcut_header;
          shortcut_header->magic = GUID_shortcut;
          shortcut_header->flags = (WSH_FLAG_DESC | WSH_FLAG_RELPATH);
          if (pidl)
            shortcut_header->flags |= WSH_FLAG_IDLIST;
          shortcut_header->run = SW_NORMAL;
          cp = buf + sizeof (win_shortcut_hdr);

          /* Create IDLIST */
          if (pidl)
            {
              *(unsigned short *)cp = pidl_len;
              memcpy (cp += 2, pidl, pidl_len);
              cp += pidl_len;
              CoTaskMemFree (pidl);
            }

          /* Create description */
          *(unsigned short *)cp = desc_len;
          cp = stpcpy (cp += 2, desc);

          /* Create relpath */
          *(unsigned short *)cp = relpath_len;
          cp = stpcpy (cp += 2, relpath);

          /* Append the POSIX path after the regular shortcut data for
             the long path support. */
          unsigned short *plen = (unsigned short *) cp;
          cp += 2;
          *(PWCHAR) cp = 0xfeff;                /* BOM */
          cp += 2;
          *plen = sys_mbstowcs ((PWCHAR) cp, NT_MAX_PATH, oldpath)
                  * sizeof (WCHAR);
          cp += *plen;
        }
      else /* wsym_type == WSYM_sysfile */
        {
          /* Default technique creating a symlink. */
          buf = tp.t_get ();
          cp = stpcpy (buf, SYMLINK_COOKIE);
          *(PWCHAR) cp = 0xfeff;                /* BOM */
          cp += 2;
          /* Note that the terminating nul is written.  */
          cp += sys_mbstowcs ((PWCHAR) cp, NT_MAX_PATH, oldpath)
                * sizeof (WCHAR);
        }

      OBJECT_ATTRIBUTES attr;
      IO_STATUS_BLOCK io;
      NTSTATUS status;
      ULONG access;
      HANDLE fh;

      access = DELETE | FILE_GENERIC_WRITE;
      if (isdevice && win32_newpath.exists ())
        {
          status = NtOpenFile (&fh, FILE_WRITE_ATTRIBUTES,
                               win32_newpath.get_object_attr (attr,
                                                              sec_none_nih),
                               &io, 0, FILE_OPEN_FOR_BACKUP_INTENT);
          if (!NT_SUCCESS (status))
            {
              __seterrno_from_nt_status (status);
              __leave;
            }
          status = NtSetAttributesFile (fh, FILE_ATTRIBUTE_NORMAL);
          NtClose (fh);
          if (!NT_SUCCESS (status))
            {
              __seterrno_from_nt_status (status);
              __leave;
            }
        }
      else if (!isdevice && win32_newpath.has_acls ()
               && !win32_newpath.isremote ())
        /* If the filesystem supports ACLs, we will overwrite the DACL after the
           call to NtCreateFile.  This requires a handle with READ_CONTROL and
           WRITE_DAC access, otherwise get_file_sd and set_file_sd both have to
           open the file again.
           FIXME: On remote NTFS shares open sometimes fails because even the
           creator of the file doesn't have the right to change the DACL.
           I don't know what setting that is or how to recognize such a share,
           so for now we don't request WRITE_DAC on remote drives. */
        access |= READ_CONTROL | WRITE_DAC;

      status = NtCreateFile (&fh, access,
                             win32_newpath.get_object_attr (attr, sec_none_nih),
                             &io, NULL, FILE_ATTRIBUTE_NORMAL,
                             FILE_SHARE_VALID_FLAGS,
                             isdevice ? FILE_OVERWRITE_IF : FILE_CREATE,
                             FILE_SYNCHRONOUS_IO_NONALERT
                             | FILE_NON_DIRECTORY_FILE
                             | FILE_OPEN_FOR_BACKUP_INTENT,
                             NULL, 0);
      if (!NT_SUCCESS (status))
        {
          __seterrno_from_nt_status (status);
          __leave;
        }
      if (io.Information == FILE_CREATED && win32_newpath.has_acls ())
        set_created_file_access (fh, win32_newpath,
                                 S_IFLNK | STD_RBITS | STD_WBITS);
      status = NtWriteFile (fh, NULL, NULL, NULL, &io, buf, cp - buf,
                            NULL, NULL);
      if (NT_SUCCESS (status) && io.Information == (ULONG) (cp - buf))
        {
          status = NtSetAttributesFile (fh, wsym_type == WSYM_lnk
                                            ? FILE_ATTRIBUTE_READONLY
                                            : FILE_ATTRIBUTE_SYSTEM);
          if (!NT_SUCCESS (status))
            debug_printf ("Setting attributes failed, status = %y", status);
          res = 0;
        }
      else
        {
          __seterrno_from_nt_status (status);
          FILE_DISPOSITION_INFORMATION fdi = { TRUE };
          status = NtSetInformationFile (fh, &io, &fdi, sizeof fdi,
                                         FileDispositionInformation);
          if (!NT_SUCCESS (status))
            debug_printf ("Setting delete dispostion failed, status = %y",
                          status);
        }
      NtClose (fh);

    }
  __except (EFAULT) {}
  __endtry
  syscall_printf ("%d = symlink_worker(%s, %s, %d)",
                  res, oldpath, win32_newpath.get_posix (), isdevice);
  return res;
}

static bool
cmp_shortcut_header (win_shortcut_hdr *file_header)
{
  /* A Cygwin or U/Win shortcut only contains a description and a relpath.
     Cygwin shortcuts also might contain an ITEMIDLIST. The run type is
     always set to SW_NORMAL. */
  return file_header->size == sizeof (win_shortcut_hdr)
      && !memcmp (&file_header->magic, &GUID_shortcut, sizeof GUID_shortcut)
      && (file_header->flags & ~WSH_FLAG_IDLIST)
         == (WSH_FLAG_DESC | WSH_FLAG_RELPATH)
      && file_header->run == SW_NORMAL;
}

int
symlink_info::check_shortcut (HANDLE h)
{
  tmp_pathbuf tp;
  win_shortcut_hdr *file_header;
  char *buf, *cp;
  unsigned short len;
  int res = 0;
  NTSTATUS status;
  IO_STATUS_BLOCK io;
  FILE_STANDARD_INFORMATION fsi;
  LARGE_INTEGER off = { QuadPart:0LL };

  status = NtQueryInformationFile (h, &io, &fsi, sizeof fsi,
                                   FileStandardInformation);
  if (!NT_SUCCESS (status))
    {
      set_error (EIO);
      return 0;
    }
  if (fsi.EndOfFile.QuadPart <= (LONGLONG) sizeof (win_shortcut_hdr)
      || fsi.EndOfFile.QuadPart > 4 * 65536)
    return 0;
  if (fsi.EndOfFile.LowPart < NT_MAX_PATH * sizeof (WCHAR))
    buf = (char *) tp.w_get ();
  else
    buf = (char *) alloca (fsi.EndOfFile.LowPart + 1);
  status = NtReadFile (h, NULL, NULL, NULL, &io, buf, fsi.EndOfFile.LowPart,
                       &off, NULL);
  if (!NT_SUCCESS (status))
    {
      if (status != STATUS_END_OF_FILE)
        set_error (EIO);
      return 0;
    }
  file_header = (win_shortcut_hdr *) buf;
  if (io.Information != fsi.EndOfFile.LowPart
      || !cmp_shortcut_header (file_header))
    return 0;
  cp = buf + sizeof (win_shortcut_hdr);
  if (file_header->flags & WSH_FLAG_IDLIST) /* Skip ITEMIDLIST */
    cp += *(unsigned short *) cp + 2;
  if (!(len = *(unsigned short *) cp))
    return 0;
  cp += 2;
  /* Check if this is a device file - these start with the sequence :\\ */
  if (strncmp (cp, ":\\", 2) == 0)
    res = strlen (strcpy (contents, cp)); /* Don't mess with device files */
  else
    {
      /* Has appended full path?  If so, use it instead of description. */
      unsigned short relpath_len = *(unsigned short *) (cp + len);
      if (cp + len + 2 + relpath_len < buf + fsi.EndOfFile.LowPart)
        {
          cp += len + 2 + relpath_len;
          len = *(unsigned short *) cp;
          cp += 2;
        }
      if (*(PWCHAR) cp == 0xfeff)       /* BOM */
        {
          char *tmpbuf = tp.c_get ();
          if (sys_wcstombs (tmpbuf, NT_MAX_PATH, (PWCHAR) (cp + 2))
              > SYMLINK_MAX)
            return 0;
          res = posixify (tmpbuf);
        }
      else if (len > SYMLINK_MAX)
        return 0;
      else
        {
          cp[len] = '\0';
          res = posixify (cp);
        }
    }
  if (res) /* It's a symlink.  */
    path_flags (path_flags () | PATH_SYMLINK | PATH_LNK);
  return res;
}

int
symlink_info::check_sysfile (HANDLE h)
{
  tmp_pathbuf tp;
  char cookie_buf[sizeof (SYMLINK_COOKIE) - 1];
  char *srcbuf = tp.c_get ();
  int res = 0;
  NTSTATUS status;
  IO_STATUS_BLOCK io;
  bool interix_symlink = false;
  LARGE_INTEGER off = { QuadPart:0LL };

  status = NtReadFile (h, NULL, NULL, NULL, &io, cookie_buf,
                       sizeof (cookie_buf), &off, NULL);
  if (!NT_SUCCESS (status))
    {
      debug_printf ("ReadFile1 failed %y", status);
      if (status != STATUS_END_OF_FILE)
        set_error (EIO);
      return 0;
    }
  off.QuadPart = io.Information;
  if (io.Information == sizeof (cookie_buf)
           && memcmp (cookie_buf, SYMLINK_COOKIE, sizeof (cookie_buf)) == 0)
    {
      /* It's a symlink.  */
      path_flags (path_flags () | PATH_SYMLINK);
    }
  else if (io.Information == sizeof (cookie_buf)
           && memcmp (cookie_buf, SOCKET_COOKIE, sizeof (cookie_buf)) == 0)
    path_flags (path_flags () | PATH_SOCKET);
  else if (io.Information >= sizeof (INTERIX_SYMLINK_COOKIE)
           && memcmp (cookie_buf, INTERIX_SYMLINK_COOKIE,
                      sizeof (INTERIX_SYMLINK_COOKIE) - 1) == 0)
    {
      /* It's an Interix symlink.  */
      path_flags (path_flags () | PATH_SYMLINK);
      interix_symlink = true;
      /* Interix symlink cookies are shorter than Cygwin symlink cookies, so
         in case of an Interix symlink cooky we have read too far into the
         file.  Set file pointer back to the position right after the cookie. */
      off.QuadPart = sizeof (INTERIX_SYMLINK_COOKIE) - 1;
    }
  if (path_flags () & PATH_SYMLINK)
    {
      status = NtReadFile (h, NULL, NULL, NULL, &io, srcbuf,
                           NT_MAX_PATH, &off, NULL);
      if (!NT_SUCCESS (status))
        {
          debug_printf ("ReadFile2 failed");
          if (status != STATUS_END_OF_FILE)
            set_error (EIO);
        }
      else if (*(PWCHAR) srcbuf == 0xfeff       /* BOM */
               || interix_symlink)
        {
          /* Add trailing 0 to Interix symlink target.  Skip BOM in Cygwin
             symlinks. */
          if (interix_symlink)
            ((PWCHAR) srcbuf)[io.Information / sizeof (WCHAR)] = L'\0';
          else
            srcbuf += 2;
          char *tmpbuf = tp.c_get ();
          if (sys_wcstombs (tmpbuf, NT_MAX_PATH, (PWCHAR) srcbuf)
              > SYMLINK_MAX)
            debug_printf ("symlink string too long");
          else
            res = posixify (tmpbuf);
        }
      else if (io.Information > SYMLINK_MAX + 1)
        debug_printf ("symlink string too long");
      else
        res = posixify (srcbuf);
    }
  return res;
}

typedef struct _REPARSE_APPEXECLINK_BUFFER
{
  DWORD ReparseTag;
  WORD  ReparseDataLength;
  WORD  Reserved;
  struct {
    DWORD Version;       /* Take member name with a grain of salt. */
    WCHAR Strings[1];    /* Four serialized, NUL-terminated WCHAR strings:
                           - Package ID
                           - Entry Point
                           - Executable Path
                           - Application Type
                           We're only interested in the Executable Path */
  } AppExecLinkReparseBuffer;
} REPARSE_APPEXECLINK_BUFFER,*PREPARSE_APPEXECLINK_BUFFER;

static bool
check_reparse_point_string (PUNICODE_STRING subst)
{
  /* Native mount points, or native non-relative symbolic links,
     can be treated as posix symlinks only if the SubstituteName
     can be converted from a native NT object namespace name to
     a win32 name. We only know how to convert names with two
     prefixes :
       "\??\UNC\..."
       "\??\X:..."
     Other reparse points will be treated as files or
     directories, not as posix symlinks.
     */
  if (RtlEqualUnicodePathPrefix (subst, &ro_u_natp, FALSE))
    {
      if (subst->Length >= 6 * sizeof(WCHAR) && subst->Buffer[5] == L':' &&
          (subst->Length == 6 * sizeof(WCHAR) || subst->Buffer[6] == L'\\'))
        return true;
      else if (subst->Length >= 8 * sizeof(WCHAR) &&
          wcsncmp (subst->Buffer + 4, L"UNC\\", 4) == 0)
        return true;
    }
  return false;
}

/* Return values:
    <0: Negative errno.
     0: Not a reparse point recognized by us.
    >0: Path flags for a recognized reparse point, always including PATH_REP.
*/
int
check_reparse_point_target (HANDLE h, bool remote, PREPARSE_DATA_BUFFER rp,
                            PUNICODE_STRING psymbuf)
{
  NTSTATUS status;
  IO_STATUS_BLOCK io;

  /* On remote drives or under heavy load, NtFsControlFile can return with
     STATUS_PENDING.  If so, instead of creating an event object, just set
     io.Status to an invalid value and perform a minimal wait until io.Status
     changed. */
  memset (&io, 0xff, sizeof io);
  status = NtFsControlFile (h, NULL, NULL, NULL, &io,
                            FSCTL_GET_REPARSE_POINT, NULL, 0, (LPVOID) rp,
                            MAXIMUM_REPARSE_DATA_BUFFER_SIZE);
  if (status == STATUS_PENDING)
    {
      while (io.Status == (NTSTATUS) 0xffffffff)
        Sleep (1L);
      status = io.Status;
    }
  if (!NT_SUCCESS (status))
    {
      debug_printf ("NtFsControlFile(FSCTL_GET_REPARSE_POINT) failed, %y",
                    status);
      /* When accessing the root dir of some remote drives (observed with
         OS X shares), the FILE_ATTRIBUTE_REPARSE_POINT flag is set, but
         the followup call to NtFsControlFile(FSCTL_GET_REPARSE_POINT)
         returns with STATUS_NOT_A_REPARSE_POINT.  That's quite buggy, but
         we cope here with this scenario by not setting an error code. */
      if (status == STATUS_NOT_A_REPARSE_POINT)
        return 0;
      return -EIO;
    }
  if (rp->ReparseTag == IO_REPARSE_TAG_SYMLINK)
    {
      /* Windows evaluates native symlink literally.  If a remote symlink
         points to, say, C:\foo, it will be handled as if the target is the
         local file C:\foo.  That comes in handy since that's how symlinks
         are treated under POSIX as well. */
      RtlInitCountedUnicodeString (psymbuf,
                (PWCHAR)((PBYTE) rp->SymbolicLinkReparseBuffer.PathBuffer
                         + rp->SymbolicLinkReparseBuffer.SubstituteNameOffset),
                rp->SymbolicLinkReparseBuffer.SubstituteNameLength);
      if ((rp->SymbolicLinkReparseBuffer.Flags & SYMLINK_FLAG_RELATIVE) ||
          check_reparse_point_string (psymbuf))
        return PATH_SYMLINK | PATH_REP;
    }
  else if (!remote && rp->ReparseTag == IO_REPARSE_TAG_MOUNT_POINT)
    {
      /* Don't handle junctions on remote filesystems as symlinks.  This type
         of reparse point is handled transparently by the OS so that the
         target of the junction is the remote directory it is supposed to
         point to.  If we handle it as symlink, it will be mistreated as
         pointing to a dir on the local system. */
      RtlInitCountedUnicodeString (psymbuf,
                  (PWCHAR)((PBYTE) rp->MountPointReparseBuffer.PathBuffer
                           + rp->MountPointReparseBuffer.SubstituteNameOffset),
                  rp->MountPointReparseBuffer.SubstituteNameLength);
      if (RtlEqualUnicodePathPrefix (psymbuf, &ro_u_volume, TRUE))
        {
          /* Volume mount point.  Not treated as symlink. The return
             value -EPERM is a hint for the caller to treat this as a
             volume mount point. */
          return -EPERM;
        }
      if (check_reparse_point_string (psymbuf))
        return PATH_SYMLINK | PATH_REP;
    }
  else if (!remote && rp->ReparseTag == IO_REPARSE_TAG_APPEXECLINK)
    {
      /* App execution aliases are commonly used by Windows Store apps. */
      PREPARSE_APPEXECLINK_BUFFER rpl = (PREPARSE_APPEXECLINK_BUFFER) rp;
      WCHAR *buf = rpl->AppExecLinkReparseBuffer.Strings;
      DWORD size = rp->ReparseDataLength / sizeof (WCHAR), n;

      /* It seems that app execution aliases have a payload of four
         NUL-separated wide string: package id, entry point, executable
         and application type. We're interested in the executable. */
      for (int i = 0; i < 3 && size > 0; i++)
        {
          n = wcsnlen (buf, size - 1);
          if (i == 2 && n > 0 && n < size)
            {
              RtlInitCountedUnicodeString (psymbuf, buf, n * sizeof (WCHAR));
              return PATH_SYMLINK | PATH_REP;
            }
          if (i == 2)
            break;
          buf += n + 1;
          size -= n + 1;
        }
    }
  else if (rp->ReparseTag == IO_REPARSE_TAG_LX_SYMLINK)
    {
      /* WSL symlink.  Problem: We have to convert the path to UTF-16 for
         the caller.  Reparse points are 16K max.  The buffer given to rp
         is 32K.  So there's enough trailing space in the buffer to convert
         to UTF-16 and let psymbuf point to it. */
      PREPARSE_LX_SYMLINK_BUFFER rpl = (PREPARSE_LX_SYMLINK_BUFFER) rp;
      char *path_buf = rpl->LxSymlinkReparseBuffer.PathBuffer;
      DWORD path_len = rpl->ReparseDataLength - sizeof (DWORD);
      bool full_path = false;
      const size_t drv_prefix_len = strlen ("/mnt");
      PBYTE utf16_ptr;
      PWCHAR utf16_buf;
      int utf16_bufsize;

      /* 0-terminate path_buf for easier testing. */
      path_buf[path_len] = '\0';
      if (path_prefix_p ("/mnt", path_buf, drv_prefix_len, false))
        {
          size_t len = strlen (path_buf);

          if (len <= drv_prefix_len + 1)
            {
              /* /mnt or /mnt/.  Replace with cygdrive prefix. */
              stpcpy (path_buf, mount_table->cygdrive);
              path_len = mount_table->cygdrive_len;
              if (len == drv_prefix_len)
                {
                  path_buf[mount_table->cygdrive_len - 1] = '\0';
                  --path_len;
                }
              rp->ReparseDataLength = path_len + sizeof (DWORD);
            }
          else if (islower (path_buf[drv_prefix_len + 1])
                   && (path_len == drv_prefix_len + 2
                       || path_buf[drv_prefix_len + 2] == '/'))
            {
              /* Skip forward to the slash leading the drive letter.
                 That leaves room for adding the colon. */
              path_buf += drv_prefix_len;
              path_len -= drv_prefix_len;
              full_path = true;
            }
        }
      /* Compute buffer for path converted to UTF-16. */
      utf16_ptr = (PBYTE) rpl + sizeof (REPARSE_LX_SYMLINK_BUFFER)
                  + rp->ReparseDataLength;
      /* Skip \0-termination added above. */
      ++utf16_ptr;
      /* Make sure pointer is aligned */
      while ((intptr_t) utf16_ptr % sizeof (WCHAR))
        ++utf16_ptr;
      utf16_buf = (PWCHAR) utf16_ptr;
      utf16_bufsize = NT_MAX_PATH - (utf16_buf - (PWCHAR) rpl);
      /* Now convert path to UTF-16. */
      utf16_bufsize = MultiByteToWideChar (CP_UTF8, 0, path_buf, path_len,
                                          utf16_buf, utf16_bufsize);
      if (utf16_bufsize)
        {
          if (full_path)
            {
              utf16_buf[0] = utf16_buf[1];      /* Move drive letter to front */
              utf16_buf[1] = L':';              /* Add colon */
            }
          RtlInitCountedUnicodeString (psymbuf, utf16_buf,
                                       utf16_bufsize * sizeof (WCHAR));
          return PATH_SYMLINK | PATH_REP | PATH_REP_NOAPI;
        }
      return -EIO;
    }
  else if (rp->ReparseTag == IO_REPARSE_TAG_CYGUNIX)
    {
      PREPARSE_GUID_DATA_BUFFER rgp = (PREPARSE_GUID_DATA_BUFFER) rp;

      if (memcmp (CYGWIN_SOCKET_GUID, &rgp->ReparseGuid, sizeof (GUID)) == 0)
#ifdef __WITH_AF_UNIX
        return PATH_SOCKET | PATH_REP | PATH_REP_NOAPI;
#else
        /* Recognize this as a reparse point but not as a socket.  */
        return PATH_REP | PATH_REP_NOAPI;
#endif
    }
  else if (rp->ReparseTag == IO_REPARSE_TAG_AF_UNIX)
    /* Native Windows AF_UNIX socket; recognize this as a reparse
       point but not as a socket. */
    return PATH_REP;
  return 0;
}

int
symlink_info::check_reparse_point (HANDLE h, bool remote)
{
  tmp_pathbuf tp;
  PREPARSE_DATA_BUFFER rp = (PREPARSE_DATA_BUFFER) tp.c_get ();
  UNICODE_STRING symbuf;
  char srcbuf[SYMLINK_MAX + 7];

  int ret = check_reparse_point_target (h, remote, rp, &symbuf);
  if (ret <= 0)
    {
      if (ret == -EIO)
        {
          set_error (EIO);
          return 0;
        }
      /* Maybe it's a reparse point, but it's certainly not one we recognize.
         Drop REPARSE attribute so we don't try to use the flag accidentally.
         It's just some arbitrary file or directory for us. */
      fileattr (fileattr () & ~FILE_ATTRIBUTE_REPARSE_POINT);
      return ret;
    }
  /* ret is > 0, so it's a known reparse point, path in symbuf. */
  path_flags (path_flags () | ret);
  if (ret & PATH_SYMLINK)
    {
      sys_wcstombs (srcbuf, SYMLINK_MAX + 7, symbuf.Buffer,
                    symbuf.Length / sizeof (WCHAR));
      /* A symlink is never a directory. */
      fileattr (fileattr () & ~FILE_ATTRIBUTE_DIRECTORY);
      return posixify (srcbuf);
    }
  else
    return 0;
}

int
symlink_info::check_nfs_symlink (HANDLE h)
{
  tmp_pathbuf tp;
  NTSTATUS status;
  IO_STATUS_BLOCK io;
  struct {
    FILE_GET_EA_INFORMATION fgei;
    char buf[sizeof (NFS_SYML_TARGET)];
  } fgei_buf;
  PFILE_FULL_EA_INFORMATION pffei;
  int res = 0;

  /* To find out if the file is a symlink and to get the symlink target,
     try to fetch the NfsSymlinkTargetName EA. */
  fgei_buf.fgei.NextEntryOffset = 0;
  fgei_buf.fgei.EaNameLength = sizeof (NFS_SYML_TARGET) - 1;
  stpcpy (fgei_buf.fgei.EaName, NFS_SYML_TARGET);
  pffei = (PFILE_FULL_EA_INFORMATION) tp.w_get ();
  status = NtQueryEaFile (h, &io, pffei, NT_MAX_PATH * sizeof (WCHAR), TRUE,
                          &fgei_buf.fgei, sizeof fgei_buf, NULL, TRUE);
  if (NT_SUCCESS (status) && pffei->EaValueLength > 0)
    {
      PWCHAR spath = (PWCHAR)
                     (pffei->EaName + pffei->EaNameLength + 1);
      res = sys_wcstombs (contents, SYMLINK_MAX + 1,
                          spath, pffei->EaValueLength);
      path_flags (path_flags () | PATH_SYMLINK);
    }
  return res;
}

int
symlink_info::posixify (char *srcbuf)
{
  /* The definition for a path in a native symlink is a bit weird.  The Flags
     value seem to contain 0 for absolute paths (stored as NT native path)
     and 1 for relative paths.  Relative paths are paths not starting with a
     drive letter.  These are not converted to NT native, but stored as
     given.  A path starting with a single backslash is relative to the
     current drive thus a "relative" value (Flags == 1).
     Funny enough it's possible to store paths with slashes instead of
     backslashes, but they are evaluated incorrectly by subsequent Windows
     calls like CreateFile (ERROR_INVALID_NAME).  So, what we do here is to
     take paths starting with slashes at face value, evaluating them as
     Cygwin specific POSIX paths.
     A path starting with two slashes(!) or backslashes is converted into an
     NT UNC path.  Unfortunately, in contrast to POSIX rules, paths starting
     with three or more (back)slashes are also converted into UNC paths,
     just incorrectly sticking to one redundant leading backslash.  We go
     along with this behaviour to avoid scenarios in which native tools access
     other files than Cygwin.
     The above rules are used exactly the same way on Cygwin specific symlinks
     (sysfiles and shortcuts) to eliminate non-POSIX paths in the output. */

  /* Eliminate native NT prefixes. */
  if (srcbuf[0] == '\\' && !strncmp (srcbuf + 1, "??\\", 3))
    {
      srcbuf += 4;
      if (srcbuf[1] != ':') /* native UNC path */
        *(srcbuf += 2) = '\\';
    }
  if (isdrive (srcbuf))
    mount_table->conv_to_posix_path (srcbuf, contents, 0);
  else if (srcbuf[0] == '\\')
    {
      if (srcbuf[1] == '\\') /* UNC path */
        slashify (srcbuf, contents, 0);
      else /* Paths starting with \ are current drive relative. */
        {
          char cvtbuf[SYMLINK_MAX + 1];

          stpcpy (cvtbuf + cygheap->cwd.get_drive (cvtbuf), srcbuf);
          mount_table->conv_to_posix_path (cvtbuf, contents, 0);
        }
    }
  else /* Everything else is taken as is. */
    slashify (srcbuf, contents, 0);
  return strlen (contents);
}

enum
{
  SCAN_BEG,
  SCAN_LNK,
  SCAN_HASLNK,
  SCAN_JUSTCHECK,
  SCAN_JUSTCHECKTHIS, /* Never try to append a suffix. */
  SCAN_APPENDLNK,
  SCAN_DONE,
};

class suffix_scan
{
  const suffix_info *suffixes, *suffixes_start;
  int nextstate;
  char *eopath;
public:
  const char *path;
  char *has (const char *, const suffix_info *);
  int next ();
  int lnk_match () {return nextstate >= SCAN_APPENDLNK;}
};

char *
suffix_scan::has (const char *in_path, const suffix_info *in_suffixes)
{
  nextstate = SCAN_BEG;
  suffixes = suffixes_start = in_suffixes;

  const char *fname = strrchr (in_path, '\\');
  fname = fname ? fname + 1 : in_path;
  char *ext_here = strrchr (fname, '.');
  path = in_path;
  eopath = strchr (path, '\0');

  if (!ext_here)
    goto noext;

  if (suffixes)
    {
      /* Check if the extension matches a known extension */
      for (const suffix_info *ex = in_suffixes; ex->name != NULL; ex++)
        if (ascii_strcasematch (ext_here, ex->name))
          {
            nextstate = SCAN_JUSTCHECK;
            suffixes = NULL;    /* Has an extension so don't scan for one. */
            goto done;
          }
    }

  /* Didn't match.  Use last resort -- .lnk. */
  if (ascii_strcasematch (ext_here, ".lnk"))
    {
      nextstate = SCAN_HASLNK;
      suffixes = NULL;
    }

 noext:
  ext_here = eopath;

 done:
  size_t namelen = eopath - fname;
  /* Avoid attaching suffixes if the resulting filename would be invalid.
     For performance reasons we don't check the length of a suffix, since
     we know that all suffixes are 4 chars in length.

     FIXME: This is not really correct.  A fully functional test should
            work on wide character paths.  This would probably also speed
            up symlink_info::check. */
  if (namelen > NAME_MAX - 4)
    {
      if (namelen > NAME_MAX)
        return NULL;
      nextstate = SCAN_JUSTCHECKTHIS;
      suffixes = NULL;
    }
  return ext_here;
}

int
suffix_scan::next ()
{
  for (;;)
    {
      if (!suffixes)
        switch (nextstate)
          {
          case SCAN_BEG:
            suffixes = suffixes_start;
            if (!suffixes)
              {
                nextstate = SCAN_LNK;
                return 1;
              }
            nextstate = SCAN_DONE;
            *eopath = '\0';
            return 0;
          case SCAN_HASLNK:
            nextstate = SCAN_APPENDLNK; /* Skip SCAN_BEG */
            return 1;
          case SCAN_JUSTCHECK:
            nextstate = SCAN_LNK;
            return 1;
          case SCAN_JUSTCHECKTHIS:
            nextstate = SCAN_DONE;
            return 1;
          case SCAN_LNK:
          case SCAN_APPENDLNK:
            nextstate = SCAN_DONE;
            strcat (eopath, ".lnk");
            return 1;
          default:
            *eopath = '\0';
            return 0;
          }

      if (suffixes && suffixes->name)
        {
          strcpy (eopath, suffixes->name);
          suffixes++;
          return 1;
        }
      suffixes = NULL;
      if (nextstate == SCAN_BEG)
        {
          nextstate = SCAN_LNK;
          *eopath = '\0';
        }
    }
}

bool
symlink_info::set_error (int in_errno)
{
  bool res;
  if (!(pc_flags () & PC_NO_ACCESS_CHECK)
        || in_errno == ENAMETOOLONG || in_errno == EIO)
    {
      error (in_errno);
      res = true;
    }
  else if (in_errno == ENOENT)
    res = true;
  else
    {
      fileattr (FILE_ATTRIBUTE_NORMAL);
      res = false;
    }
  return res;
}

bool
symlink_info::parse_device (const char *contents)
{
  char *endptr;
  _major_t mymajor;
  _major_t myminor;
  __mode_t mymode;

  mymajor = strtol (contents += 2, &endptr, 16);
  if (endptr == contents)
    return false;

  contents = endptr;
  myminor = strtol (++contents, &endptr, 16);
  if (endptr == contents)
    return false;

  contents = endptr;
  mymode = strtol (++contents, &endptr, 16);
  if (endptr == contents)
    return false;

  if ((mymode & S_IFMT) == S_IFIFO)
    dev (FH_FIFO);
  else
    dev (FHDEV (mymajor, myminor));
  mode (mymode);
  return true;
}

/* Probably we have a virtual drive input path and the resulting full path
   starts with the substitution.  Retrieve the target path of the virtual
   drive and try to revert what GetFinalPathNameByHandleW did to the
   drive letter. */
static bool
revert_virtual_drive (PUNICODE_STRING upath, PUNICODE_STRING fpath,
                      bool is_remote, ULONG ci_flag)
{
  /* Get the drive's target path. */
  WCHAR drive[3] = {(WCHAR) towupper (upath->Buffer[4]), L':', L'\0'};
  WCHAR target[MAX_PATH];
  UNICODE_STRING tpath;
  WCHAR *p;

  DWORD remlen = QueryDosDeviceW (drive, target, MAX_PATH);
  if (remlen < 3)
    return false;
  remlen -= 2; /* Two L'\0' */

  if (target[remlen - 1] == L'\\')
    remlen--;
  RtlInitCountedUnicodeString (&tpath, target, remlen * sizeof (WCHAR));

  const USHORT uncp_len = is_remote ? ro_u_uncp.Length / sizeof (WCHAR) - 1 : 0;

  if (is_remote)
    {
      /* target path starts with \??\UNC\. */
      if (RtlEqualUnicodePathPrefix (&tpath, &ro_u_uncp, TRUE))
        {
          remlen -= uncp_len;
          p = target + uncp_len;
        }
      /* target path starts with \Device\<redirector>. */
      else if ((p = wcschr (target, L';'))
               && p + 3 < target + remlen
               && wcsncmp (p + 1, drive, 2) == 0
               && (p = wcschr (p + 3, L'\\')))
        remlen -= p - target;
      else
        return false;
      if (wcsncasecmp (fpath->Buffer + uncp_len, p, remlen))
        return false;
    }
  else if (!RtlEqualUnicodePathPrefix (fpath, &tpath, TRUE))
    return false;
  /* Replace fpath with source drive letter and append reminder of
     final path after skipping target path */
  fpath->Buffer[4] = drive[0]; /* Drive letter */
  fpath->Buffer[5] = L':';
  WCHAR *to = fpath->Buffer + 6; /* Next to L':' */
  WCHAR *from = fpath->Buffer + uncp_len + remlen;
  memmove (to, from, (wcslen (from) + 1) * sizeof (WCHAR));
  fpath->Length -= (from - to) * sizeof (WCHAR);
  if (RtlEqualUnicodeString (upath, fpath, !!ci_flag))
    return false;
  return true;
}

/* Check if PATH is a symlink.  PATH must be a valid Win32 path name.

   If PATH is a symlink, put the value of the symlink--the file to
   which it points--into CONTENTS.

   Set PATH_SYMLINK if PATH is a symlink.

   If PATH is a symlink, return the length stored into CONTENTS.  If
   the inner components of PATH contain native symlinks or junctions,
   or if the drive is a virtual drive, compare PATH with the result
   returned by GetFinalPathNameByHandleA.  If they differ, store the
   final path in CONTENTS and return the negative of its length.  In
   all other cases, return 0.  */

int
symlink_info::check (char *path, const suffix_info *suffixes, fs_info &fs,
                     path_conv_handle &conv_hdl)
{
  int res;
  HANDLE h;
  NTSTATUS status;
  UNICODE_STRING upath;
  OBJECT_ATTRIBUTES attr;
  IO_STATUS_BLOCK io;
  suffix_scan suffix;
  bool had_ext;

  const ULONG ci_flag = cygwin_shared->obcaseinsensitive
                        || (mount_flags () & MOUNT_NOPOSIX)
                        ? OBJ_CASE_INSENSITIVE : 0;
  /* TODO: Temporarily do all char->UNICODE conversion here.  This should
     already be slightly faster than using Ascii functions. */
  tmp_pathbuf tp;
  tp.u_get (&upath);
  InitializeObjectAttributes (&attr, &upath, ci_flag, NULL, NULL);

  /* This label is used in case we encounter a FS which only handles
     DOS paths.  See below. */
  bool restarted = false;
restart:

  reset ();
  h = NULL;
  res = 0;

  PVOID eabuf = &nfs_aol_ffei;
  ULONG easize = sizeof nfs_aol_ffei;

  ext_here = suffix.has (path, suffixes);
  /* If the filename is too long, don't even try. */
  if (!ext_here)
    {
      set_error (ENAMETOOLONG);
      goto file_not_symlink;
    }

  had_ext = !!*ext_here;
  path_len (ext_here - path);

  while (suffix.next ())
    {
      res = 0;
      error (0);
      get_nt_native_path (suffix.path, upath, mount_flags () & MOUNT_DOS);
      if (h)
        {
          NtClose (h);
          h = NULL;
        }
      /* The EA given to NtCreateFile allows to get a handle to a symlink on
         an NFS share, rather than getting a handle to the target of the
         symlink (which would spoil the task of this method quite a bit).
         Fortunately it's ignored on most other file systems so we don't have
         to special case NFS too much. */
      status = NtCreateFile (&h,
                             READ_CONTROL | FILE_READ_ATTRIBUTES | FILE_READ_EA,
                             &attr, &io, NULL, 0, FILE_SHARE_VALID_FLAGS,
                             FILE_OPEN,
                             FILE_OPEN_REPARSE_POINT
                             | FILE_OPEN_FOR_BACKUP_INTENT,
                             eabuf, easize);
      debug_printf ("%y = NtCreateFile (%S)", status, &upath);
      /* No right to access EAs or EAs not supported? */
      if (!NT_SUCCESS (status)
          && (status == STATUS_ACCESS_DENIED
              || status == STATUS_EAS_NOT_SUPPORTED
              || status == STATUS_NOT_SUPPORTED
              || status == STATUS_INVALID_NETWORK_RESPONSE
              /* Or a bug in Samba 3.2.x (x <= 7) when accessing a share's
                 root dir which has EAs enabled? */
              || status == STATUS_INVALID_PARAMETER))
        {
          /* If EAs are not supported, there's no sense to check them again
             with suffixes attached.  So we set eabuf/easize to 0 here once. */
          if (status == STATUS_EAS_NOT_SUPPORTED
              || status == STATUS_NOT_SUPPORTED)
            {
              eabuf = NULL;
              easize = 0;
            }
          status = NtOpenFile (&h, READ_CONTROL | FILE_READ_ATTRIBUTES,
                               &attr, &io, FILE_SHARE_VALID_FLAGS,
                               FILE_OPEN_NO_RECALL
                               | FILE_OPEN_REPARSE_POINT
                               | FILE_OPEN_FOR_BACKUP_INTENT);
          debug_printf ("%y = NtOpenFile (no-EAs %S)", status, &upath);
        }
      if (status == STATUS_OBJECT_NAME_NOT_FOUND)
        {
          /* There are filesystems out in the wild (Netapp, NWFS, and others)
             which are uncapable of generating pathnames outside the Win32
             rules.  That means, filenames on these FSes must not have a
             leading space or trailing dots and spaces.  This code snippet
             manages them.  I really hope it's streamlined enough not to
             slow down normal operation.  This extra check only kicks in if
             we encountered a STATUS_OBJECT_NAME_NOT_FOUND *and* we didn't
             already attach a suffix. */
          if (!restarted && !*ext_here && ext_here[-1] != '\\'
              && !(mount_flags () & MOUNT_DOS))
            {
              /* Check for trailing dot or space or leading space in
                 last component. */
              char *p = ext_here - 1;
              if (*p != '.' && *p != ' ')
                {
                  while (*--p != '\\')
                    assert(p >= path);
                  if (*++p != ' ')
                    p = NULL;
                }
              if (p)
                {
                  /* If so, check if file resides on one of the known broken
                     FSes only supporting filenames following DOS rules. */
                  fs.update (&upath, NULL);
                  if (fs.has_dos_filenames_only ())
                    {
                      /* If so, try again.  Since we now know the FS, the
                         filenames will be tweaked to follow DOS rules via the
                         third parameter in the call to get_nt_native_path. */
                      mount_flags (mount_flags () | MOUNT_DOS);
                      restarted = true;
                      goto restart;
                    }
                }
            }
        }
      else if (status == STATUS_NETWORK_OPEN_RESTRICTION
               || status == STATUS_SYMLINK_CLASS_DISABLED)
        {
          /* These status codes are returned if you try to open a native
             symlink and the usage of this kind of symlink is forbidden
             (see fsutil).  Since we can't open them at all, not even for
             stat purposes, we have to return a POSIX error code which is
             at least a bit helpful.

             Additionally Windows 8 introduces a bug in NFS: If you have
             a symlink to a directory, with symlinks underneath, resolving
             the second level of symlinks fails if remote->remote symlinks
             are disabled in fsutil.  Unfortunately that's the default. */
          set_error (ELOOP);
          break;
        }

      if (NT_SUCCESS (status)
          /* Check file system while we're having the file open anyway.
             This speeds up path_conv noticably (~10%). */
          && (fs.inited () || fs.update (&upath, h)))
        {
          status = conv_hdl.get_finfo (h, fs.is_nfs ());
          if (NT_SUCCESS (status))
            fileattr (conv_hdl.get_dosattr (h, fs.is_nfs ()));
        }
      if (!NT_SUCCESS (status))
        {
          debug_printf ("%y = NtQueryInformationFile (%S)", status, &upath);
          fileattr (INVALID_FILE_ATTRIBUTES);

          /* One of the inner path components is invalid, or the path contains
             invalid characters.  Bail out with ENOENT.

             STATUS_IO_REPARSE_TAG_NOT_HANDLED is returned when trying to
             traversing a WSL symlink.  For all practical purposes it's
             equivalent to traversing SYSTEM- or LNK-type symlink returning
             STATUS_OBJECT_PATH_NOT_FOUND.

             Note that additional STATUS_OBJECT_PATH_INVALID and
             STATUS_OBJECT_PATH_SYNTAX_BAD status codes exist.  The first one
             is seemingly not generated by NtQueryInformationFile, the latter
             is only generated if the path is no absolute path within the
             NT name space, which should not happen and would point to an
             error in get_nt_native_path.  Both status codes are deliberately
             not tested here unless proved necessary. */
          if (status == STATUS_OBJECT_PATH_NOT_FOUND
              || status == STATUS_IO_REPARSE_TAG_NOT_HANDLED
              || status == STATUS_OBJECT_NAME_INVALID
              || status == STATUS_BAD_NETWORK_PATH
              || status == STATUS_BAD_NETWORK_NAME
              || status == STATUS_NO_MEDIA_IN_DEVICE)
            {
              set_error (ENOENT);
              if (ext_tacked_on () && !had_ext)
                {
                  *ext_here = '\0';
                  ext_tacked_on (false);
                  ext_here = NULL;
                  path_len (0);
                }
              goto file_not_symlink;
            }
          if (status != STATUS_OBJECT_NAME_NOT_FOUND
              && status != STATUS_NO_SUCH_FILE) /* ENOENT on NFS or 9x share */
            {
              /* The file exists, but the user can't access it for one reason
                 or the other.  To get the file attributes we try to access the
                 information by opening the parent directory and getting the
                 file attributes using a matching NtQueryDirectoryFile call. */
              UNICODE_STRING dirname, basename;
              OBJECT_ATTRIBUTES dattr;
              HANDLE dir;
              struct {
                FILE_ID_BOTH_DIR_INFORMATION fdi;
                WCHAR dummy_buf[NAME_MAX + 1];
              } fdi_buf;

              RtlSplitUnicodePath (&upath, &dirname, &basename);
              InitializeObjectAttributes (&dattr, &dirname, ci_flag,
                                          NULL, NULL);
              status = NtOpenFile (&dir, SYNCHRONIZE | FILE_LIST_DIRECTORY,
                                   &dattr, &io, FILE_SHARE_VALID_FLAGS,
                                   FILE_SYNCHRONOUS_IO_NONALERT
                                   | FILE_OPEN_FOR_BACKUP_INTENT
                                   | FILE_DIRECTORY_FILE);
              if (!NT_SUCCESS (status))
                {
                  debug_printf ("%y = NtOpenFile(%S)", status, &dirname);
                  /* There's a special case if the file is itself the root
                     of a drive which is not accessible by the current user.
                     This case is only recognized by the length of the
                     basename part.  If it's 0, the incoming file is the
                     root of a drive.  So we at least know it's a directory. */
                  if (basename.Length)
                    fileattr (FILE_ATTRIBUTE_DIRECTORY);
                  else
                    {
                      fileattr (0);
                      set_error (geterrno_from_nt_status (status));
                    }
                }
              else
                {
                  status = NtQueryDirectoryFile (dir, NULL, NULL, NULL, &io,
                                                 &fdi_buf, sizeof fdi_buf,
                                                 FileIdBothDirectoryInformation,
                                                 TRUE, &basename, TRUE);
                  /* Take the opportunity to check file system while we're
                     having the handle to the parent dir. */
                  fs.update (&upath, dir);
                  NtClose (dir);
                  if (!NT_SUCCESS (status))
                    {
                      debug_printf ("%y = NtQueryDirectoryFile(%S)",
                                    status, &dirname);
                      if (status == STATUS_NO_SUCH_FILE)
                        {
                          /* This can happen when trying to access files
                             which match DOS device names on SMB shares.
                             NtOpenFile failed with STATUS_ACCESS_DENIED,
                             but the NtQueryDirectoryFile tells us the
                             file doesn't exist.  We're suspicious in this
                             case and retry with the next suffix instead of
                             just giving up. */
                          set_error (ENOENT);
                          continue;
                        }
                      fileattr (0);
                    }
                  else
                    {
                      PFILE_ALL_INFORMATION pfai = conv_hdl.fai ();

                      fileattr (fdi_buf.fdi.FileAttributes);
                      memcpy (&pfai->BasicInformation.CreationTime,
                              &fdi_buf.fdi.CreationTime,
                              4 * sizeof (LARGE_INTEGER));
                      pfai->BasicInformation.FileAttributes = fileattr ();
                      pfai->StandardInformation.AllocationSize.QuadPart
                        = fdi_buf.fdi.AllocationSize.QuadPart;
                      pfai->StandardInformation.EndOfFile.QuadPart
                        = fdi_buf.fdi.EndOfFile.QuadPart;
                      pfai->StandardInformation.NumberOfLinks = 1;
                      pfai->InternalInformation.IndexNumber.QuadPart
                        = fdi_buf.fdi.FileId.QuadPart;
                    }
                }
              ext_tacked_on (!!*ext_here);
              goto file_not_symlink;
            }
          set_error (ENOENT);
          continue;
        }

      ext_tacked_on (!!*ext_here);
      /* Don't allow to returns directories with appended suffix.  If we found
         a directory with a suffix which has been appended here, then this
         directory doesn't match the request.  So, just do as usual if file
         hasn't been found. */
      if (ext_tacked_on () && !had_ext
          && (fileattr () & FILE_ATTRIBUTE_DIRECTORY))
        {
          fileattr (INVALID_FILE_ATTRIBUTES);
          set_error (ENOENT);
          continue;
        }

      /* Consider the situation where a virtual drive points to a native
         symlink.  Opening the virtual drive with FILE_OPEN_REPARSE_POINT
         actually opens the symlink.  If this symlink points to another
         directory using a relative path, symlink evaluation goes totally
         awry.  We never want a virtual drive evaluated as symlink. */
      if (upath.Length <= 14)
        goto file_not_symlink;

      /* Offline files, even if reparse points, are not symlinks. */
      if (isoffline (fileattr ()))
        goto file_not_symlink;

      /* Reparse points are potentially symlinks.  This check must be
         performed before checking the SYSTEM attribute for sysfile
         symlinks, since reparse points can have this flag set, too. */
      if (fileattr () & FILE_ATTRIBUTE_REPARSE_POINT)
        {
          res = check_reparse_point (h, fs.is_remote_drive ());
          if (res > 0)
            {
              /* A symlink is never a directory. */
              conv_hdl.fai ()->BasicInformation.FileAttributes
                &= ~FILE_ATTRIBUTE_DIRECTORY;
              break;
            }
          else if (res == 0 && (path_flags () & PATH_REP))
            /* Known reparse point but not a symlink. */
            goto file_not_symlink;
          else
            {
              /* Volume moint point or unrecognized reparse point type.
                 Make sure the open handle is not used in later stat calls.
                 The handle has been opened with the FILE_OPEN_REPARSE_POINT
                 flag, so it's a handle to the reparse point, not a handle
                 to the volumes root dir. */
              pc_flags (pc_flags () & ~PC_KEEP_HANDLE);
              /* Volume mount point:  The filesystem information for the top
                 level directory should be for the volume top level directory,
                 rather than for the reparse point itself.  So we fetch the
                 filesystem information again, but with a NULL handle.
                 This does what we want because fs_info::update opens the
                 handle without FILE_OPEN_REPARSE_POINT. */
              if (res < 0)
                fs.update (&upath, NULL);
            }
        }

      /* Windows shortcuts are potentially treated as symlinks.  Valid Cygwin
         & U/WIN shortcuts are R/O, but definitely not directories. */
      else if ((fileattr () & (FILE_ATTRIBUTE_READONLY
                               | FILE_ATTRIBUTE_DIRECTORY))
               == FILE_ATTRIBUTE_READONLY
               && suffix.lnk_match ())
        {
          HANDLE sym_h;

          status = NtOpenFile (&sym_h, SYNCHRONIZE | GENERIC_READ, &attr, &io,
                               FILE_SHARE_VALID_FLAGS,
                               FILE_OPEN_NO_RECALL
                               | FILE_OPEN_FOR_BACKUP_INTENT
                               | FILE_SYNCHRONOUS_IO_NONALERT);
          if (!NT_SUCCESS (status))
            res = 0;
          else
            {
              res = check_shortcut (sym_h);
              NtClose (sym_h);
            }
          if (!res)
            {
              /* If searching for `foo' and then finding a `foo.lnk' which
                 is no shortcut, return the same as if file not found. */
              if (ext_tacked_on ())
                {
                  fileattr (INVALID_FILE_ATTRIBUTES);
                  set_error (ENOENT);
                  continue;
                }
            }
          else if (contents[0] != ':' || contents[1] != '\\'
                   || !parse_device (contents))
            break;
          if (fs.is_nfs () && dev () == FH_FIFO)
            {
              conv_hdl.nfsattr ()->type = NF3FIFO;
              conv_hdl.nfsattr ()->mode = mode ();
              conv_hdl.nfsattr ()->size = 0;
              /* Marker for fhandler_base::fstat_by_nfs_ea not to override
                 the cached fattr3 data with fresh data from the filesystem,
                 even if the handle is used for other purposes than stat. */
              conv_hdl.nfsattr ()->filler1 = NF3FIFO;
            }
        }

      /* If searching for `foo' and then finding a `foo.lnk' which is
         no shortcut, return the same as if file not found. */
      else if (suffix.lnk_match () && ext_tacked_on ())
        {
          fileattr (INVALID_FILE_ATTRIBUTES);
          set_error (ENOENT);
          continue;
        }

      /* This is the old Cygwin method creating symlinks.  A symlink will
         have the `system' file attribute.  Only files can be symlinks
         (which can be symlinks to directories). */
      else if ((fileattr () & (FILE_ATTRIBUTE_SYSTEM
                               | FILE_ATTRIBUTE_DIRECTORY))
               == FILE_ATTRIBUTE_SYSTEM)
        {
          HANDLE sym_h;

          status = NtOpenFile (&sym_h, SYNCHRONIZE | GENERIC_READ, &attr, &io,
                               FILE_SHARE_VALID_FLAGS,
                               FILE_OPEN_NO_RECALL
                               | FILE_OPEN_FOR_BACKUP_INTENT
                               | FILE_SYNCHRONOUS_IO_NONALERT);

          if (!NT_SUCCESS (status))
            res = 0;
          else
            {
              res = check_sysfile (sym_h);
              NtClose (sym_h);
            }
          if (res)
            break;
        }

      /* If the file is on an NFS share and could be opened with extended
         attributes, check if it's a symlink or FIFO. */
      else if (fs.is_nfs ())
        {
          /* Make sure filler1 is 0, so we can use it safely as a marker. */
          conv_hdl.nfsattr ()->filler1 = 0;
          switch (conv_hdl.nfsattr ()->type & 7)
            {
            case NF3LNK:
              res = check_nfs_symlink (h);
              break;
            case NF3FIFO:
              /* Enable real FIFOs recognized as such. */
              dev (FH_FIFO);
              mode (S_IFIFO | (conv_hdl.nfsattr ()->mode & ~S_IFMT));
              break;
            default:
              break;
            }
          if (res)
            break;
        }

      /* Check if the inner path components contain native symlinks or
         junctions, or if the drive is a virtual drive.  Compare incoming
         path with path returned by GetFinalPathNameByHandleA.  If they
         differ, return the final path as symlink content and set symlen
         to a negative value.  This forces path_conv::check to restart
         symlink evaluation with the new path. */
      if ((pc_flags () & (PC_SYM_FOLLOW | PC_SYM_NOFOLLOW_REP))
          == PC_SYM_FOLLOW)
        {
          PWCHAR fpbuf = tp.w_get ();
          DWORD ret;

          ret = GetFinalPathNameByHandleW (h, fpbuf, NT_MAX_PATH, 0);
          if (ret)
            {
              UNICODE_STRING fpath;

              /* If incoming path has no trailing backslash, but final path
                 has one, drop trailing backslash from final path so the
                 below string comparison has a chance to succeed.
                 On the contrary, if incoming path has trailing backslash,
                 but final path does not have one, add trailing backslash
                 to the final path. */
              if (upath.Buffer[(upath.Length - 1) / sizeof (WCHAR)] != L'\\'
                  && fpbuf[ret - 1] == L'\\')
                fpbuf[--ret] = L'\0';
              if (upath.Buffer[(upath.Length - 1) / sizeof (WCHAR)] == L'\\'
                  && fpbuf[ret - 1] != L'\\' && ret < NT_MAX_PATH - 1)
                {
                  fpbuf[ret++] = L'\\';
                  fpbuf[ret] = L'\0';
                }
              fpbuf[1] = L'?';  /* \\?\ --> \??\ */
              RtlInitCountedUnicodeString (&fpath, fpbuf, ret * sizeof (WCHAR));
              if (!RtlEqualUnicodeString (&upath, &fpath, !!ci_flag))
                {
                  /* If the incoming path is a local drive letter path... */
                  if (!RtlEqualUnicodePathPrefix (&upath, &ro_u_uncp, TRUE))
                    {
                      /* ...and the final path is an UNC path, revert to the
                         drive letter path syntax. */
                      if (RtlEqualUnicodePathPrefix (&fpath, &ro_u_uncp, TRUE))
                        {
                          if (!revert_virtual_drive (&upath, &fpath, true,
                                                     ci_flag))
                            goto file_not_symlink;
                        }
                      /* ...otherwise, if the final path changes the drive
                         letter, let revert_virtual_drive check for a
                         virtual drive and revert that. */
                      else if (upath.Buffer[5] == L':'
                               && (WCHAR) towupper (upath.Buffer[4])
                                  != (WCHAR) towupper (fpath.Buffer[4]))
                        {
                          if (!revert_virtual_drive (&upath, &fpath, false,
                                                     ci_flag))
                            goto file_not_symlink;
                        }
                    }
                  /* upath.Buffer is big enough and unused from this point on.
                     Reuse it here, avoiding yet another buffer allocation. */
                  char *nfpath = (char *) upath.Buffer;
                  sys_wcstombs (nfpath, NT_MAX_PATH, fpbuf);
                  /* For final paths differing in inner path components return
                     length as negative value.  This informs path_conv::check
                     to skip realpath handling on the last path component. */
                  res = -posixify (nfpath);
                  break;
                }
            }
        }

    /* Normal file. */
    file_not_symlink:
      issymlink (false);
      syscall_printf ("%s", isdevice () ? "is a device" : "not a symlink");
      res = 0;
      break;
    }

  if (h)
    {
      if (pc_flags () & PC_KEEP_HANDLE)
        conv_hdl.set (h);
      else
        NtClose (h);
    }

  syscall_printf ("%d = symlink.check(%s, %p) (mount_flags %y, path_flags %y)",
                  res, suffix.path, contents, mount_flags (), path_flags ());
  return res;
}

/* "path" is the path in a virtual symlink.  Set a symlink_info struct from
   that and proceed with further path checking afterwards. */
int
symlink_info::set (char *path)
{
  strcpy (contents, path);
  mount_flags (0);
  path_flags (PATH_SYMLINK);
  fileattr (FILE_ATTRIBUTE_NORMAL);
  error (0);
  issymlink (true);
  ext_tacked_on (false);
  ext_here = NULL;
  path_len (0);
  dev (FH_NADA);
  return strlen (path);
}

/* readlink system call */

extern "C" ssize_t
readlink (const char *__restrict path, char *__restrict buf, size_t buflen)
{
  if (buflen < 0)
    {
      set_errno (ENAMETOOLONG);
      return -1;
    }

  path_conv pathbuf (path, PC_SYM_CONTENTS, stat_suffixes);

  if (pathbuf.error)
    {
      set_errno (pathbuf.error);
      syscall_printf ("-1 = readlink (%s, %p, %lu)", path, buf, buflen);
      return -1;
    }

  if (!pathbuf.exists ())
    {
      set_errno (ENOENT);
      return -1;
    }

  if (!pathbuf.issymlink ())
    {
      if (pathbuf.exists ())
        set_errno (EINVAL);
      return -1;
    }

  size_t pathbuf_len = strlen (pathbuf.get_win32 ());
  ssize_t len = MIN (buflen, pathbuf_len);
  memcpy (buf, pathbuf.get_win32 (), len);

  /* errno set by symlink.check if error */
  return len;
}

/* Some programs rely on st_dev/st_ino being unique for each file.
   Hash the path name and hope for the best.  The hash arg is not
   always initialized to zero since readdir needs to compute the
   dirent ino_t based on a combination of the hash of the directory
   done during the opendir call and the hash or the filename within
   the directory.  FIXME: Not bullet-proof. */
/* Cygwin internal */
ino_t
hash_path_name (ino_t hash, PUNICODE_STRING name)
{
  if (name->Length == 0)
    return hash;

  /* Build up hash. Name is already normalized */
  USHORT len = name->Length / sizeof (WCHAR);
  for (USHORT idx = 0; idx < len; ++idx)
    hash = RtlUpcaseUnicodeChar (name->Buffer[idx])
           + (hash << 6) + (hash << 16) - hash;
  return hash;
}

ino_t
hash_path_name (ino_t hash, PCWSTR name)
{
  UNICODE_STRING uname;
  RtlInitUnicodeString (&uname, name);
  return hash_path_name (hash, &uname);
}

ino_t
hash_path_name (ino_t hash, const char *name)
{
  UNICODE_STRING uname;
  tmp_pathbuf tp;

  tp.u_get (&uname);
  sys_mbstouni (&uname, HEAP_NOTHEAP, name);
  ino_t ret = hash_path_name (hash, &uname);
  return ret;
}

extern "C" char *
getcwd (char *buf, size_t ulen)
{
  char* res = NULL;

  __try
    {
      if (ulen == 0 && buf)
        set_errno (EINVAL);
      else
        res = cygheap->cwd.get (buf, 1, 1, ulen);
    }
  __except (EFAULT) {}
  __endtry
  return res;
}

/* getwd: Legacy. */
extern "C" char *
getwd (char *buf)
{
  return getcwd (buf, PATH_MAX + 1);  /*Per SuSv3!*/
}

extern "C" char *
get_current_dir_name (void)
{
  const char *pwd = getenv ("PWD");
  char *cwd = getcwd (NULL, 0);
  struct stat pwdbuf, cwdbuf;

  if (pwd && strcmp (pwd, cwd) != 0
      && stat (pwd, &pwdbuf) == 0
      && stat (cwd, &cwdbuf) == 0
      && pwdbuf.st_dev == cwdbuf.st_dev
      && pwdbuf.st_ino == cwdbuf.st_ino)
    {
      cwd = (char *) realloc (cwd, strlen (pwd) + 1);
      strcpy (cwd, pwd);
    }

  return cwd;
}

/* chdir: POSIX 5.2.1.1 */
extern "C" int
chdir (const char *in_dir)
{
  int res = -1;

  __try
    {
      if (!*in_dir)
        {
          set_errno (ENOENT);
          __leave;
        }

      syscall_printf ("dir '%s'", in_dir);

      /* Convert path.  PC_NONULLEMPTY ensures that we don't check for
         NULL/empty/invalid again. */
      path_conv path (in_dir, PC_SYM_FOLLOW | PC_POSIX | PC_NONULLEMPTY);
      if (path.error)
        {
          set_errno (path.error);
          syscall_printf ("-1 = chdir (%s)", in_dir);
          __leave;
        }

      const char *posix_cwd = NULL;
      dev_t devn = path.get_device ();
      if (!path.exists ())
        set_errno (ENOENT);
      else if (!path.isdir ())
        set_errno (ENOTDIR);
      else if (!isvirtual_dev (devn))
        {
          /* The sequence chdir("xx"); chdir(".."); must be a noop if xx
             is not a symlink. This is exploited by find.exe.
             The posix_cwd is just path.get_posix ().
             In other cases we let cwd.set obtain the Posix path through
             the mount table. */
          if (!isdrive (path.get_posix ()))
            posix_cwd = path.get_posix ();
          res = 0;
        }
      else
       {
         posix_cwd = path.get_posix ();
         res = 0;
       }

      if (!res)
        res = cygheap->cwd.set (&path, posix_cwd);

      /* Note that we're accessing cwd.posix without a lock here.
         I didn't think it was worth locking just for strace. */
      syscall_printf ("%R = chdir() cygheap->cwd.posix '%s' native '%S'", res,
                      cygheap->cwd.get_posix (), path.get_nt_native_path ());
    }
  __except (EFAULT)
    {
      res = -1;
    }
  __endtry
  return res;
}

extern "C" int
fchdir (int fd)
{
  int res;
  cygheap_fdget cfd (fd);
  if (cfd >= 0)
    res = chdir (cfd->get_name ());
  else
    res = -1;

  syscall_printf ("%R = fchdir(%d)", res, fd);
  return res;
}

/******************** Exported Path Routines *********************/

/* Cover functions to the path conversion routines.
   These are exported to the world as cygwin_foo by cygwin.din.  */

#define return_with_errno(x) \
  do {\
    int err = (x);\
    if (!err)\
     return 0;\
    set_errno (err);\
    return -1;\
  } while (0)

extern "C" ssize_t
cygwin_conv_path (cygwin_conv_path_t what, const void *from, void *to,
                  size_t size)
{
  tmp_pathbuf tp;
  path_conv p;
  size_t lsiz = 0;
  char *buf = NULL;
  PWCHAR path = NULL;
  int error = 0;
  int how = what & CCP_CONVFLAGS_MASK;
  what &= CCP_CONVTYPE_MASK;
  int ret = -1;

  __try
    {
      if (!from)
        {
          set_errno (EINVAL);
          __leave;
        }

      switch (what)
        {
        case CCP_POSIX_TO_WIN_A:
          {
            p.check ((const char *) from,
                     PC_POSIX | PC_SYM_FOLLOW | PC_SYM_NOFOLLOW_REP
                     | PC_NO_ACCESS_CHECK
                     | ((how & CCP_RELATIVE) ? PC_NOFULL : 0), stat_suffixes);
            if (p.error)
              {
                set_errno (p.error);
                __leave;
              }
            PUNICODE_STRING up = p.get_nt_native_path ();
            buf = tp.c_get ();
            sys_wcstombs (buf, NT_MAX_PATH,
                          up->Buffer, up->Length / sizeof (WCHAR));
            /* Convert native path to standard DOS path. */
            if (!strncmp (buf, "\\??\\", 4))
              {
                buf += 4;
                if (buf[1] != ':') /* native UNC path */
                  *(buf += 2) = '\\';
              }
            else if (*buf == '\\')
              {
                /* Device name points to somewhere else in the NT namespace.
                   Use GLOBALROOT prefix to convert to Win32 path. */
                char *p = buf + sys_wcstombs (buf, NT_MAX_PATH,
                                              ro_u_globalroot.Buffer,
                                              ro_u_globalroot.Length
                                              / sizeof (WCHAR));
                sys_wcstombs (p, NT_MAX_PATH - (p - buf),
                              up->Buffer, up->Length / sizeof (WCHAR));
              }
            lsiz = strlen (buf) + 1;
            /* TODO: Incoming "." is a special case which leads to a trailing
               backslash ".\\" in the Win32 path.  That's a result of the
               conversion in normalize_posix_path.  This should not occur
               so the below code is just a band-aid. */
            if ((how & CCP_RELATIVE) && !strcmp ((const char *) from, ".")
                && !strcmp (buf, ".\\"))
              {
                lsiz = 2;
                buf[1] = '\0';
              }
          }
          break;
        case CCP_POSIX_TO_WIN_W:
          p.check ((const char *) from,
                   PC_POSIX | PC_SYM_FOLLOW | PC_SYM_NOFOLLOW_REP
                   | PC_NO_ACCESS_CHECK
                   | ((how & CCP_RELATIVE) ? PC_NOFULL : 0), stat_suffixes);
          if (p.error)
            {
              set_errno (p.error);
              __leave;
            }
          /* Relative Windows paths are always restricted to MAX_PATH chars. */
          if ((how & CCP_RELATIVE) && !isabspath (p.get_win32 ())
              && sys_mbstowcs (NULL, 0, p.get_win32 ()) > MAX_PATH)
            {
              /* Recreate as absolute path. */
              p.check ((const char *) from, PC_POSIX | PC_SYM_FOLLOW
                                            | PC_NO_ACCESS_CHECK);
              if (p.error)
                {
                  set_errno (p.error);
                  __leave;
                }
            }
          lsiz = p.get_wide_win32_path_len () + 1;
          path = p.get_nt_native_path ()->Buffer;

          /* Convert native path to standard DOS path. */
          if (!wcsncmp (path, L"\\??\\", 4))
            {
              path[1] = L'\\';

              /* Drop long path prefix for short pathnames.  Unfortunately there's
                 quite a bunch of Win32 functions, especially in user32.dll,
                 apparently, which don't grok long path names at all, not even
                 in the UNICODE API. */
              if ((path[5] == L':' && lsiz <= MAX_PATH + 4)
                  || (!wcsncmp (path + 4, L"UNC\\", 4) && lsiz <= MAX_PATH + 6))
                {
                  path += 4;
                  lsiz -= 4;
                  if (path[1] != L':')
                    {
                      *(path += 2) = '\\';
                      lsiz -= 2;
                    }
                }
            }
          else if (*path == L'\\')
            {
              /* Device name points to somewhere else in the NT namespace.
                 Use GLOBALROOT prefix to convert to Win32 path. */
              to = (void *) wcpcpy ((wchar_t *) to, ro_u_globalroot.Buffer);
              lsiz += ro_u_globalroot.Length / sizeof (WCHAR);
            }
          /* TODO: Same ".\\" band-aid as in CCP_POSIX_TO_WIN_A case. */
          if ((how & CCP_RELATIVE) && !strcmp ((const char *) from, ".")
              && !wcscmp (path, L".\\"))
            {
              lsiz = 2;
              path[1] = L'\0';
            }
          lsiz *= sizeof (WCHAR);
          break;
        case CCP_WIN_A_TO_POSIX:
          buf = tp.c_get ();
          error = mount_table->conv_to_posix_path ((const char *) from, buf,
                                                   how | __CCP_APP_SLASH);
          if (error)
            {
              set_errno (p.error);
              __leave;
            }
          lsiz = strlen (buf) + 1;
          break;
        case CCP_WIN_W_TO_POSIX:
          buf = tp.c_get ();
          error = mount_table->conv_to_posix_path ((const PWCHAR) from, buf,
                                                   how | __CCP_APP_SLASH);
          if (error)
            {
              set_errno (error);
              __leave;
            }
          lsiz = strlen (buf) + 1;
          break;
        default:
          set_errno (EINVAL);
          __leave;
        }
      if (!size)
        {
          ret = lsiz;
          __leave;
        }
      if (size < lsiz)
        {
          set_errno (ENOSPC);
          __leave;
        }
      switch (what)
        {
        case CCP_POSIX_TO_WIN_A:
        case CCP_WIN_A_TO_POSIX:
        case CCP_WIN_W_TO_POSIX:
          stpcpy ((char *) to, buf);
          break;
        case CCP_POSIX_TO_WIN_W:
          wcpcpy ((PWCHAR) to, path);
          break;
        }
      ret = 0;
    }
  __except (EFAULT) {}
  __endtry
  return ret;
}

extern "C" void *
cygwin_create_path (cygwin_conv_path_t what, const void *from)
{
  void *to;
  ssize_t size = cygwin_conv_path (what, from, NULL, 0);
  if (size <= 0)
    to = NULL;
  else if (!(to = malloc (size)))
    to = NULL;
  if (cygwin_conv_path (what, from, to, size) == -1)
    {
      free (to);
      to = NULL;
    }
  return to;
}

/* The realpath function is required by POSIX:2008.  */

extern "C" char *
realpath (const char *__restrict path, char *__restrict resolved)
{
  tmp_pathbuf tp;
  char *tpath;

  /* Make sure the right errno is returned if path is NULL. */
  if (!path)
    {
      set_errno (EINVAL);
      return NULL;
    }

  /* Guard reading from a potentially invalid path and writing to a
     potentially invalid resolved. */
  __try
    {
      /* Win32 drive letter paths and, generally, any path starting with a
         backslash, have to be converted to a POSIX path first, because
         path_conv leaves the incoming path untouched except for converting
         backslashes to forward slashes.  This also covers '\\?\ and '\??\'
         path prefixes. */
      if (isdrive (path) || path[0] == '\\')
        {
          tpath = tp.c_get ();
          mount_table->conv_to_posix_path (path, tpath, 0);
        }
      else
        tpath = (char *) path;

      path_conv real_path (tpath, PC_SYM_FOLLOW | PC_POSIX, stat_suffixes);


      /* POSIX 2008 requires malloc'ing if resolved is NULL, and states
         that using non-NULL resolved is asking for portability
         problems.  */

      if (!real_path.error && real_path.exists ())
        {
          if (!resolved)
            {
              resolved = (char *)
                         malloc (strlen (real_path.get_posix ()) + 1);
              if (!resolved)
                return NULL;
            }
          strcpy (resolved, real_path.get_posix ());
          return resolved;
        }

      /* FIXME: on error, Linux puts the name of the path
         component which could not be resolved into RESOLVED, but POSIX
         does not require this.  */
      if (resolved)
        resolved[0] = '\0';
      set_errno (real_path.error ?: ENOENT);
    }
  __except (EFAULT) {}
  __endtry
  return NULL;
}

/* Linux provides this extension.  Since the only portable use of
   realpath requires a NULL second argument, we might as well have a
   one-argument wrapper.  */
extern "C" char *
canonicalize_file_name (const char *path)
{
  return realpath (path, NULL);
}

/* Return non-zero if path is a POSIX path list.
   This is exported to the world as cygwin_foo by cygwin.din.

DOCTOOL-START
<sect1 id="add-func-cygwin-posix-path-list-p">
  <para>Rather than use a mode to say what the "proper" path list
  format is, we allow any, and give apps the tools they need to
  convert between the two.  If a ';' is present in the path list it's
  a Win32 path list.  Otherwise, if the first path begins with
  [letter]: (in which case it can be the only element since if it
  wasn't a ';' would be present) it's a Win32 path list.  Otherwise,
  it's a POSIX path list.</para>
</sect1>
DOCTOOL-END
  */

extern "C" int
cygwin_posix_path_list_p (const char *path)
{
  int posix_p = !(strchr (path, ';') || isdrive (path));
  return posix_p;
}

/* These are used for apps that need to convert env vars like PATH back and
   forth.  The conversion is a two step process.  First, an upper bound on the
   size of the buffer needed is computed.  Then the conversion is done.  This
   allows the caller to use alloca if it wants.  */

static int
conv_path_list_buf_size (const char *path_list, bool to_posix)
{
  int i, num_elms, max_mount_path_len, size;
  const char *p;

  path_conv pc(".", PC_POSIX);
  /* The theory is that an upper bound is
     current_size + (num_elms * max_mount_path_len)  */
  /* FIXME: This method is questionable in the long run. */

  unsigned nrel;
  char delim = to_posix ? ';' : ':';
  for (p = path_list, num_elms = nrel = 0; p; num_elms++)
    {
      if (!isabspath (p))
        nrel++;
      p = strchr (++p, delim);
    }

  /* 7: strlen ("//c") + slop, a conservative initial value */
  for (max_mount_path_len = sizeof ("/cygdrive/X"), i = 0;
       i < mount_table->nmounts; i++)
    {
      int mount_len = (to_posix
                       ? mount_table->mount[i].posix_pathlen
                       : mount_table->mount[i].native_pathlen);
      if (max_mount_path_len < mount_len)
        max_mount_path_len = mount_len;
    }

  /* 100: slop */
  size = strlen (path_list)
    + (num_elms * max_mount_path_len)
    + (nrel * strlen (to_posix ? pc.get_posix () : pc.get_win32 ()))
    + 100;

  return size;
}

extern "C" ssize_t
env_PATH_to_posix (const void *win32, void *posix, size_t size)
{
  return_with_errno (conv_path_list ((const char *) win32, (char *) posix,
                                     size, ENV_CVT));
}

extern "C" ssize_t
cygwin_conv_path_list (cygwin_conv_path_t what, const void *from, void *to,
                       size_t size)
{
  int ret;
  char *winp = NULL;
  void *orig_to = NULL;
  tmp_pathbuf tp;

  switch (what & CCP_CONVTYPE_MASK)
    {
    case CCP_WIN_W_TO_POSIX:
      if (!sys_wcstombs_alloc (&winp, HEAP_NOTHEAP, (const wchar_t *) from,
                               (size_t) -1))
        return -1;
      what = (what & ~CCP_CONVTYPE_MASK) | CCP_WIN_A_TO_POSIX;
      from = (const void *) winp;
      break;
    case CCP_POSIX_TO_WIN_W:
      if (size == 0)
        return conv_path_list_buf_size ((const char *) from, 0)
               * sizeof (WCHAR);
      what = (what & ~CCP_CONVTYPE_MASK) | CCP_POSIX_TO_WIN_A;
      orig_to = to;
      to = (void *) tp.w_get ();
      size = 65536;
      break;
    }
  switch (what & CCP_CONVTYPE_MASK)
    {
    case CCP_WIN_A_TO_POSIX:
    case CCP_POSIX_TO_WIN_A:
      if (size == 0)
        return conv_path_list_buf_size ((const char *) from,
                                        what == CCP_WIN_A_TO_POSIX);
      ret = conv_path_list ((const char *) from, (char *) to, size, what);
      /* Free winp buffer in case of CCP_WIN_W_TO_POSIX. */
      if (winp)
        free (winp);
      /* Convert to WCHAR in case of CCP_POSIX_TO_WIN_W. */
      if (orig_to)
        sys_mbstowcs ((wchar_t *) orig_to, size / sizeof (WCHAR),
                      (const char *) to, (size_t) -1);
      return_with_errno (ret);
      break;
    default:
      break;
    }
  set_errno (EINVAL);
  return -1;
}

/* cygwin_split_path: Split a path into directory and file name parts.
   Buffers DIR and FILE are assumed to be big enough.

   Examples (path -> `dir' / `file'):
   / -> `/' / `'
   "" -> `.' / `'
   . -> `.' / `.' (FIXME: should this be `.' / `'?)
   .. -> `.' / `..' (FIXME: should this be `..' / `'?)
   foo -> `.' / `foo'
   foo/bar -> `foo' / `bar'
   foo/bar/ -> `foo' / `bar'
   /foo -> `/' / `foo'
   /foo/bar -> `/foo' / `bar'
   c: -> `c:/' / `'
   c:/ -> `c:/' / `'
   c:foo -> `c:/' / `foo'
   c:/foo -> `c:/' / `foo'
 */

extern "C" void
cygwin_split_path (const char *path, char *dir, char *file)
{
  int dir_started_p = 0;

  /* Deal with drives.
     Remember that c:foo <==> c:/foo.  */
  if (isdrive (path))
    {
      *dir++ = *path++;
      *dir++ = *path++;
      *dir++ = '/';
      if (!*path)
        {
          *dir = 0;
          *file = 0;
          return;
        }
      if (isdirsep (*path))
        ++path;
      dir_started_p = 1;
    }

  /* Determine if there are trailing slashes and "delete" them if present.
     We pretend as if they don't exist.  */
  const char *end = path + strlen (path);
  /* path + 1: keep leading slash.  */
  while (end > path + 1 && isdirsep (end[-1]))
    --end;

  /* At this point, END points to one beyond the last character
     (with trailing slashes "deleted").  */

  /* Point LAST_SLASH at the last slash (duh...).  */
  const char *last_slash;
  for (last_slash = end - 1; last_slash >= path; --last_slash)
    if (isdirsep (*last_slash))
      break;

  if (last_slash == path)
    {
      *dir++ = '/';
      *dir = 0;
    }
  else if (last_slash > path)
    {
      memcpy (dir, path, last_slash - path);
      dir[last_slash - path] = 0;
    }
  else
    {
      if (dir_started_p)
        ; /* nothing to do */
      else
        *dir++ = '.';
      *dir = 0;
    }

  memcpy (file, last_slash + 1, end - last_slash - 1);
  file[end - last_slash - 1] = 0;
}

/*****************************************************************************/

/* The find_fast_cwd_pointer function and parts of the
   cwdstuff::override_win32_cwd method are based on code using the
   following license:

   Copyright 2010 John Carey. All rights reserved.

   Redistribution and use in source and binary forms, with or without
   modification, are permitted provided that the following conditions
   are met:

      1. Redistributions of source code must retain the above
      copyright notice, this list of conditions and the following
      disclaimer.

      2. Redistributions in binary form must reproduce the above
      copyright notice, this list of conditions and the following
      disclaimer in the documentation and/or other materials provided
      with the distribution.

   THIS SOFTWARE IS PROVIDED BY JOHN CAREY ``AS IS'' AND ANY EXPRESS
   OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
   WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   ARE DISCLAIMED. IN NO EVENT SHALL JOHN CAREY OR CONTRIBUTORS BE
   LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
   CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
   OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
   BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
   LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
   USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
   DAMAGE. */

void
fcwd_access_t::CopyPath (UNICODE_STRING &target)
{
  /* Copy the Path contents over into the UNICODE_STRING referenced by
     target.  This is used to set the CurrentDirectoryName in the
     user parameter block. */
  target = Path;
}

void
fcwd_access_t::Free (PVOID heap)
{
  /* Decrement the reference count.  If it's down to 0, free
     structure from heap. */
  if (InterlockedDecrement (&ReferenceCount) == 0)
    {
      /* The handle on init is always a fresh one, not the handle inherited
         from the parent process.  We always have to close it here.
         Note: The handle could be NULL, if we cd'ed into a virtual dir. */
      HANDLE h = DirectoryHandle;
      if (h)
        NtClose (h);
      RtlFreeHeap (heap, 0, this);
    }
}

void
fcwd_access_t::FillIn (HANDLE dir, PUNICODE_STRING name,
                       ULONG old_dismount_count)
{
  /* Fill in all values into this FAST_CWD structure. */
  DirectoryHandle = dir;
  ReferenceCount = 1;
  OldDismountCount = old_dismount_count;
  /* The fcwd structure stores the device characteristics of the
     volume holding the dir.  RtlGetCurrentDirectory_U checks
     if the FILE_REMOVABLE_MEDIA flag is set and, if so, checks if
     the volume is still the same as the one used when opening
     the directory handle.
     We don't call NtQueryVolumeInformationFile for the \\?\PIPE,
     though.  It just returns STATUS_INVALID_HANDLE anyway. */
  FSCharacteristics = 0;
  if (name != &ro_u_pipedir)
    {
      IO_STATUS_BLOCK io;
      FILE_FS_DEVICE_INFORMATION ffdi;
      if (NT_SUCCESS (NtQueryVolumeInformationFile (dir, &io, &ffdi,
                      sizeof ffdi, FileFsDeviceInformation)))
        FSCharacteristics = ffdi.Characteristics;
    }
  RtlInitEmptyUnicodeString (&Path, Buffer, name->MaximumLength);
  RtlCopyUnicodeString (&Path, name);
  if (Path.Buffer[Path.Length / sizeof (WCHAR) - 1] != L'\\')
    {
      Path.Buffer[Path.Length / sizeof (WCHAR)] = L'\\';
      Path.Length += sizeof (WCHAR);
    }
}

void
fcwd_access_t::SetDirHandleFromBufferPointer (PWCHAR buf_p, HANDLE dir)
{
  /* Input: The buffer pointer as it's stored in the user parameter block
     and a directory handle.
     This function computes the address to the FAST_CWD structure based
     on the version and overwrites the directory handle.  It is only
     used if we couldn't figure out the address of fast_cwd_ptr. */
  fcwd_access_t *f_cwd;
  f_cwd = (fcwd_access_t *)
          ((PBYTE) buf_p - __builtin_offsetof (fcwd_access_t, Buffer));
  f_cwd->DirectoryHandle = dir;
}

/* This function scans the code in ntdll.dll to find the address of the
   global variable used to access the CWD.  While the pointer is global,
   it's not exported from the DLL, unfortunately.  Therefore we have to
   use some knowledge to figure out the address. */

#define peek32(x)       (*(int32_t *)(x))

static fcwd_access_t **
find_fast_cwd_pointer ()
{
  /* Fetch entry points of relevant functions in ntdll.dll. */
  HMODULE ntdll = GetModuleHandle ("ntdll.dll");
  if (!ntdll)
    return NULL;
  const uint8_t *get_dir = (const uint8_t *)
                           GetProcAddress (ntdll, "RtlGetCurrentDirectory_U");
  const uint8_t *ent_crit = (const uint8_t *)
                            GetProcAddress (ntdll, "RtlEnterCriticalSection");
  if (!get_dir || !ent_crit)
    return NULL;
  /* Search first relative call instruction in RtlGetCurrentDirectory_U. */
  const uint8_t *rcall = (const uint8_t *) memchr (get_dir, 0xe8, 80);
  if (!rcall)
    return NULL;
  /* Fetch offset from instruction and compute address of called function.
     This function actually fetches the current FAST_CWD instance and
     performs some other actions, not important to us. */
  const uint8_t *use_cwd = rcall + 5 + peek32 (rcall + 1);
  /* Next we search for the locking mechanism and perform a sanity check.
     On Pre-Windows 8 we basically look for the RtlEnterCriticalSection call.
     Windows 8 does not call RtlEnterCriticalSection.  The code manipulates
     the FastPebLock manually, probably because RtlEnterCriticalSection has
     been converted to an inline function.  Either way, we test if the code
     uses the FastPebLock. */
  const uint8_t *movrbx;
  const uint8_t *lock = (const uint8_t *)
                        memmem ((const char *) use_cwd, 80,
                                "\xf0\x0f\xba\x35", 4);
  if (lock)
    {
      /* The lock instruction tweaks the LockCount member, which is not at
         the start of the PRTL_CRITICAL_SECTION structure.  So we have to
         subtract the offset of LockCount to get the real address. */
      PRTL_CRITICAL_SECTION lockaddr =
        (PRTL_CRITICAL_SECTION) (lock + 9 + peek32 (lock + 4)
                                 - offsetof (RTL_CRITICAL_SECTION, LockCount));
      /* Test if lock address is FastPebLock. */
      if (lockaddr != NtCurrentTeb ()->Peb->FastPebLock)
        return NULL;
      /* Search `mov rel(%rip),%rbx'.  This is the instruction fetching the
         address of the current fcwd_access_t pointer, and it should be pretty
         near to the locking stuff. */
      movrbx = (const uint8_t *) memmem ((const char *) lock, 40,
                                         "\x48\x8b\x1d", 3);
    }
  else
    {
      /* Usually the callq RtlEnterCriticalSection follows right after
         fetching the lock address. */
      int call_rtl_offset = 7;
      /* Search `lea rel(%rip),%rcx'.  This loads the address of the lock into
         %rcx for the subsequent RtlEnterCriticalSection call. */
      lock = (const uint8_t *) memmem ((const char *) use_cwd, 80,
                                       "\x48\x8d\x0d", 3);
      if (!lock)
        {
          /* Windows 8.1 Preview calls `lea rel(rip),%r12' then some unrelated
             ops, then `mov %r12,%rcx', then `callq RtlEnterCriticalSection'. */
          lock = (const uint8_t *) memmem ((const char *) use_cwd, 80,
                                           "\x4c\x8d\x25", 3);
          call_rtl_offset = 14;
        }

      if (!lock)
        {
          /* A recent Windows 11 Preview calls `lea rel(rip),%r13' then
             some unrelated instructions, then `callq RtlEnterCriticalSection'.
             */
          lock = (const uint8_t *) memmem ((const char *) use_cwd, 80,
                                           "\x4c\x8d\x2d", 3);
          call_rtl_offset = 24;
        }

      if (!lock)
        {
          return NULL;
        }

      PRTL_CRITICAL_SECTION lockaddr =
        (PRTL_CRITICAL_SECTION) (lock + 7 + peek32 (lock + 3));
      /* Test if lock address is FastPebLock. */
      if (lockaddr != NtCurrentTeb ()->Peb->FastPebLock)
        return NULL;
      /* Next is the `callq RtlEnterCriticalSection'. */
      lock += call_rtl_offset;
      if (lock[0] != 0xe8)
        return NULL;
      const uint8_t *call_addr = (const uint8_t *)
                                 (lock + 5 + peek32 (lock + 1));
      if (call_addr != ent_crit)
        return NULL;
      /* In contrast to the above Windows 8 code, we don't have to search
         for the `mov rel(%rip),%rbx' instruction.  It follows right after
         the call to RtlEnterCriticalSection. */
      movrbx = lock + 5;
    }
  if (!movrbx)
    return NULL;
  /* Check that the next instruction tests if the fetched value is NULL. */
  const uint8_t *testrbx = (const uint8_t *)
                           memmem (movrbx + 7, 3, "\x48\x85\xdb", 3);
  if (!testrbx)
    return NULL;
  /* Compute address of the fcwd_access_t ** pointer. */
  return (fcwd_access_t **) (testrbx + peek32 (movrbx + 3));
}

static fcwd_access_t **
find_fast_cwd ()
{
  USHORT emulated, hosted;
  fcwd_access_t **f_cwd_ptr;

  /* First check if we're running in WOW64 on ARM64 emulating AMD64.  Skip
     fetching FAST_CWD pointer as long as there's no solution for finding
     it on that system. */
  if (IsWow64Process2 (GetCurrentProcess (), &emulated, &hosted)
      && hosted == IMAGE_FILE_MACHINE_ARM64)
    return NULL;

  /* Fetch the pointer but don't set the global fast_cwd_ptr yet.  First
     we have to make sure we know the version of the FAST_CWD structure
     used on the system. */
  f_cwd_ptr = find_fast_cwd_pointer ();
  if (!f_cwd_ptr)
    small_printf ("Cygwin WARNING:\n"
"  Couldn't compute FAST_CWD pointer.  This typically occurs if you're using\n"
"  an older Cygwin version on a newer Windows.  Please update to the latest\n"
"  available Cygwin version from https://cygwin.com/.  If the problem persists,\n"
"  please see https://cygwin.com/problems.html\n\n");

  /* Eventually, after we set the version as well, set fast_cwd_ptr. */
  return f_cwd_ptr;
}

void
cwdstuff::override_win32_cwd (bool init, ULONG old_dismount_count)
{
  HANDLE h = NULL;

  PEB &peb = *NtCurrentTeb ()->Peb;
  UNICODE_STRING &upp_cwd_str = peb.ProcessParameters->CurrentDirectoryName;
  HANDLE &upp_cwd_hdl = peb.ProcessParameters->CurrentDirectoryHandle;
  PUNICODE_STRING win32_cwd_ptr = error ? &ro_u_pipedir : &win32;

  if (fast_cwd_ptr == (fcwd_access_t **) -1)
    fast_cwd_ptr = find_fast_cwd ();
  if (fast_cwd_ptr)
    {
      /* If we got a valid value for fast_cwd_ptr, we can simply replace
         the RtlSetCurrentDirectory_U function entirely. */
      PVOID heap = peb.ProcessHeap;
      /* First allocate a new fcwd_access_t structure on the heap. */
      fcwd_access_t *f_cwd = (fcwd_access_t *)
                        RtlAllocateHeap (heap, 0,
                                         sizeof (fcwd_access_t)
                                         + win32_cwd_ptr->MaximumLength);
      if (!f_cwd)
        {
          debug_printf ("RtlAllocateHeap failed");
          return;
        }
      /* Fill in the values. */
      f_cwd->FillIn (dir, win32_cwd_ptr, old_dismount_count);
      /* Use PEB lock when switching fast_cwd_ptr to the new FAST_CWD
         structure and writing the CWD to the user process parameter
         block.  This is equivalent to calling RtlAcquirePebLock/
         RtlReleasePebLock, but without having to go through the FS
         selector again. */
      RtlEnterCriticalSection (peb.FastPebLock);
      fcwd_access_t *old_cwd = *fast_cwd_ptr;
      *fast_cwd_ptr = f_cwd;
      f_cwd->CopyPath (upp_cwd_str);
      upp_cwd_hdl = dir;
      RtlLeaveCriticalSection (peb.FastPebLock);
      if (old_cwd)
        old_cwd->Free (heap);
    }
  else
    {
      /* Fallback if we failed to find the fast_cwd_ptr value:

         - Call RtlSetCurrentDirectory_U.
         - Compute new FAST_CWD struct address from buffer pointer in the
           user process parameter block.
         - Replace the directory handle in the struct with our own handle.
         - Close the original handle.  RtlSetCurrentDirectory_U already
           closed our former dir handle -> no handle leak.

         Guard the entire operation with FastPebLock to avoid races
         accessing the PEB and FAST_CWD struct.

         Unfortunately this method is still prone to a directory usage
         race condition:

         - The directory is locked against deletion or renaming between the
           RtlSetCurrentDirectory_U and the subsequent NtClose call. */
      if (unlikely (upp_cwd_hdl == NULL) && init)
        return;
      RtlEnterCriticalSection (peb.FastPebLock);
      if (!init)
        {
          NTSTATUS status =
            RtlSetCurrentDirectory_U (win32_cwd_ptr);
          if (!NT_SUCCESS (status))
            {
              RtlLeaveCriticalSection (peb.FastPebLock);
              debug_printf ("RtlSetCurrentDirectory_U(%S) failed, %y",
                            win32_cwd_ptr);
              return;
            }
        }
      fcwd_access_t::SetDirHandleFromBufferPointer(upp_cwd_str.Buffer, dir);
      h = upp_cwd_hdl;
      upp_cwd_hdl = dir;
      RtlLeaveCriticalSection (peb.FastPebLock);
      /* The handle on init is always a fresh one, not the handle inherited
         from the parent process.  We always have to close it here. */
      NtClose (h);
    }
}

/* Initialize cwdstuff */
void
cwdstuff::init ()
{
  /* Cygwin processes inherit the cwd from their parent.  If the win32 path
     buffer is not NULL, the cwd struct is already set up, and we only
     have to override the Win32 CWD with ours. */
  if (win32.Buffer)
    override_win32_cwd (true, SharedUserData.DismountCount);
  else
    {
      /* Initialize fast_cwd stuff. */
      fast_cwd_ptr = (fcwd_access_t **) -1;
      /* Initially re-open the cwd to allow POSIX semantics. */
      set (NULL, NULL);
    }
}

/* Chdir and fill out the elements of a cwdstuff struct. */
int
cwdstuff::set (path_conv *nat_cwd, const char *posix_cwd)
{
  NTSTATUS status;
  UNICODE_STRING upath;
  OBJECT_ATTRIBUTES attr;
  PEB &peb = *NtCurrentTeb ()->Peb;
  bool virtual_path = false;
  bool unc_path = false;
  bool inaccessible_path = false;

  /* Here are the problems with using SetCurrentDirectory.  Just skip this
     comment if you don't like whining.

     - SetCurrentDirectory only supports paths of up to MAX_PATH - 1 chars,
       including a trailing backslash.  That's an absolute restriction, even
       in the UNICODE API.

     - SetCurrentDirectory fails for directories with strict permissions even
       for processes with the SE_BACKUP_NAME privilege enabled.  The reason
       is apparently that SetCurrentDirectory calls NtOpenFile without the
       FILE_OPEN_FOR_BACKUP_INTENT flag set.

     - SetCurrentDirectory does not support case-sensitivity.

     - Unlinking a cwd fails because SetCurrentDirectory seems to open
       directories so that deleting the directory is disallowed.

     - SetCurrentDirectory can naturally not work on virtual Cygwin paths
       like /proc or /cygdrive.

     Nevertheless, doing entirely without SetCurrentDirectory is not really
     feasible, because it breaks too many mixed applications using the Win32
     API.

     Therefore we handle the CWD all by ourselves and just keep the Win32
     CWD in sync.  However, to avoid surprising behaviour in the Win32 API
     when we are in a CWD which is inaccessible as Win32 CWD, we set the
     Win32 CWD to a "weird" directory in which all relative filesystem-related
     calls fail. */

  if (nat_cwd)
    {
      upath = *nat_cwd->get_nt_native_path ();
      if (nat_cwd->isspecial ())
        {
          virtual_path = true;
          /* But allow starting of native apps from /dev if /dev actually
             exists on disk. */
          if (isdev_dev (nat_cwd->dev))
            {
              FILE_BASIC_INFORMATION fbi;

              InitializeObjectAttributes (&attr, &upath,
                                          OBJ_CASE_INSENSITIVE | OBJ_INHERIT,
                                          NULL, NULL);
              status = NtQueryAttributesFile (&attr, &fbi);
              if (status != STATUS_OBJECT_NAME_NOT_FOUND
                  && status != STATUS_OBJECT_PATH_NOT_FOUND)
                virtual_path = false;
            }
        }
    }

  acquire_write ();

  /* Memorize old DismountCount before opening the dir.  This value is
     stored in the FAST_CWD structure.  It would be simpler to fetch the
     old DismountCount in override_win32_cwd, but Windows also fetches
     it before opening the directory handle.  It's not quite clear if
     that's really required, but since we don't know the side effects of
     this action, we better follow Windows' lead. */
  ULONG old_dismount_count = SharedUserData.DismountCount;
  /* Open a directory handle with FILE_OPEN_FOR_BACKUP_INTENT and with all
     sharing flags set.  The handle is right now used in exceptions.cc only,
     but that might change in future. */
  HANDLE h = NULL;
  if (!virtual_path)
    {
      IO_STATUS_BLOCK io;

      if (!nat_cwd)
        {
          /* On init, just reopen Win32 CWD with desired access flags.
             We can access the PEB without lock, because no other thread
             can change the CWD.  However, there's a chance that the handle
             is NULL, even though CurrentDirectoryName isn't so we have to
             be careful. */
          if (!peb.ProcessParameters->CurrentDirectoryHandle)
            {
              InitializeObjectAttributes (&attr,
                            &peb.ProcessParameters->CurrentDirectoryName,
                            OBJ_CASE_INSENSITIVE | OBJ_INHERIT, NULL, NULL);
            }
          else
            {
              RtlInitUnicodeString (&upath, L"");
              InitializeObjectAttributes (&attr,
                            &upath, OBJ_CASE_INSENSITIVE | OBJ_INHERIT,
                            peb.ProcessParameters->CurrentDirectoryHandle,
                            NULL);
            }
        }
      else
        InitializeObjectAttributes (&attr, &upath,
                        nat_cwd->objcaseinsensitive () | OBJ_INHERIT,
                        NULL, NULL);
      /* First try without FILE_OPEN_FOR_BACKUP_INTENT, to find out if the
         directory is valid for Win32 apps.  And, no, we can't just call
         SetCurrentDirectory here, since that would potentially break
         case-sensitivity. */
      status = NtOpenFile (&h, SYNCHRONIZE | FILE_TRAVERSE, &attr, &io,
                           FILE_SHARE_VALID_FLAGS,
                           FILE_DIRECTORY_FILE
                           | FILE_SYNCHRONOUS_IO_NONALERT);
      if (status == STATUS_ACCESS_DENIED)
        {
          status = NtOpenFile (&h, SYNCHRONIZE | FILE_TRAVERSE, &attr, &io,
                               FILE_SHARE_VALID_FLAGS,
                               FILE_DIRECTORY_FILE
                               | FILE_SYNCHRONOUS_IO_NONALERT
                               | FILE_OPEN_FOR_BACKUP_INTENT);
          inaccessible_path = true;
        }
      if (!NT_SUCCESS (status))
        {
          /* Called from chdir?  Just fail. */
          if (nat_cwd)
            {
              release_write ();
              __seterrno_from_nt_status (status);
              return -1;
            }
          /* Otherwise we're in init and posix hasn't been set yet.  Try to
             duplicate the handle instead.  If that fails, too, set dir to NULL
             and carry on.  This will at least set posix to some valid path at
             process startup, and subsequent getcwd calls don't EFAULT. */
          debug_printf ("WARNING: Can't reopen CWD %y '%S', status %y",
                        peb.ProcessParameters->CurrentDirectoryHandle,
                        &peb.ProcessParameters->CurrentDirectoryName,
                        status);
          if (!peb.ProcessParameters->CurrentDirectoryHandle
              || !DuplicateHandle (GetCurrentProcess (),
                        peb.ProcessParameters->CurrentDirectoryHandle,
                        GetCurrentProcess (), &h, 0, TRUE, 0))
            {
              if (peb.ProcessParameters->CurrentDirectoryHandle)
                debug_printf ("...and DuplicateHandle failed with %E.");
              h = NULL;
            }
        }
    }
  /* Set new handle.  Note that we simply overwrite the old handle here
     without closing it.  The handle is also used as Win32 CWD handle in
     the user parameter block, and it will be closed in override_win32_cwd,
     if required. */
  dir = h;

  if (!nat_cwd)
    {
      /* On init, just fetch the Win32 dir from the PEB.  We can access
         the PEB without lock, because no other thread can change the CWD
         at that time. */
      PUNICODE_STRING pdir = &peb.ProcessParameters->CurrentDirectoryName;
      RtlInitEmptyUnicodeString (&win32,
                                 (PWCHAR) crealloc_abort (win32.Buffer,
                                                          pdir->Length
                                                          + sizeof (WCHAR)),
                                 pdir->Length + sizeof (WCHAR));
      RtlCopyUnicodeString (&win32, pdir);

      PWSTR eoBuffer = win32.Buffer + (win32.Length / sizeof (WCHAR));
      /* Remove trailing slash if one exists. */
      if ((eoBuffer - win32.Buffer) > 3 && eoBuffer[-1] == L'\\')
        win32.Length -= sizeof (WCHAR);
      if (eoBuffer[0] == L'\\')
        unc_path = true;

      posix_cwd = NULL;
    }
  else
    {
      if (!virtual_path) /* don't mangle virtual path. */
        {
          /* Convert into Win32 path and compute length. */
          if (upath.Buffer[1] == L'?')
            {
              upath.Buffer += 4;
              upath.Length -= 4 * sizeof (WCHAR);
              if (upath.Buffer[1] != L':')
                {
                  /* UNC path */
                  upath.Buffer += 2;
                  upath.Length -= 2 * sizeof (WCHAR);
                  unc_path = true;
                }
            }
          else
            {
              /* Path via native NT namespace.  Prepend GLOBALROOT prefix
                 to create a valid Win32 path. */
              PWCHAR buf = (PWCHAR) alloca (upath.Length
                                            + ro_u_globalroot.Length
                                            + sizeof (WCHAR));
              wcpcpy (wcpcpy (buf, ro_u_globalroot.Buffer), upath.Buffer);
              upath.Buffer = buf;
              upath.Length += ro_u_globalroot.Length;
            }
          PWSTR eoBuffer = upath.Buffer + (upath.Length / sizeof (WCHAR));
          /* Remove trailing slash if one exists. */
          if ((eoBuffer - upath.Buffer) > 3 && eoBuffer[-1] == L'\\')
            upath.Length -= sizeof (WCHAR);
        }
      RtlInitEmptyUnicodeString (&win32,
                                 (PWCHAR) crealloc_abort (win32.Buffer,
                                                          upath.Length
                                                          + sizeof (WCHAR)),
                                 upath.Length + sizeof (WCHAR));
      RtlCopyUnicodeString (&win32, &upath);
      if (unc_path)
        win32.Buffer[0] = L'\\';
    }
  /* Make sure it's NUL-terminated. */
  win32.Buffer[win32.Length / sizeof (WCHAR)] = L'\0';

  /* Set drive_length, used in path conversion, and error code, used in
     spawn_guts to decide whether a native Win32 app can be started or not. */
  if (virtual_path)
    {
      drive_length = 0;
      error = ENOTDIR;
    }
  else
    {
      if (!unc_path)
        drive_length = 2;
      else
        {
          PWCHAR ptr = wcschr (win32.Buffer + 2, L'\\');
          if (ptr)
            ptr = wcschr (ptr + 1, L'\\');
          if (ptr)
            drive_length = ptr - win32.Buffer;
          else
            drive_length = win32.Length / sizeof (WCHAR);
        }
      if (inaccessible_path)
        error = EACCES;
      else if (win32.Length > (MAX_PATH - 2) * sizeof (WCHAR))
        error = ENAMETOOLONG;
      else
        error = 0;
    }
  /* Keep the Win32 CWD in sync.  Don't check for error, other than for
     strace output.  Try to keep overhead low. */
  override_win32_cwd (!nat_cwd, old_dismount_count);

  /* Eventually, create POSIX path if it's not set on entry. */
  tmp_pathbuf tp;
  if (!posix_cwd)
    {
      posix_cwd = (const char *) tp.c_get ();
      mount_table->conv_to_posix_path (win32.Buffer, (char *) posix_cwd, 0);
    }
  posix = (char *) crealloc_abort (posix, strlen (posix_cwd) + 1);
  stpcpy (posix, posix_cwd);

  release_write ();
  return 0;
}

const char *
cwdstuff::get_error_desc () const
{
  switch (cygheap->cwd.get_error ())
    {
    case EACCES:
      return "has restricted permissions which render it\n"
             "inaccessible as Win32 working directory";
    case ENOTDIR:
      return "is a virtual Cygwin directory which does\n"
             "not exist for a native Windows application";
    case ENAMETOOLONG:
      return "has a path longer than allowed for a\n"
             "Win32 working directory";
    default:
      break;
    }
  /* That shouldn't occur, unless we defined a new error code
     in cwdstuff::set. */
  return "is not accessible for some unknown reason";
}

/* Store incoming wchar_t path as current posix cwd.  This is called from
   setlocale so that the cwd is always stored in the right charset. */
void
cwdstuff::reset_posix (wchar_t *w_cwd)
{
  size_t len = sys_wcstombs (NULL, (size_t) -1, w_cwd);
  posix = (char *) crealloc_abort (posix, len + 1);
  sys_wcstombs (posix, len + 1, w_cwd);
}

char *
cwdstuff::get (char *buf, int need_posix, int with_chroot, unsigned ulen)
{
  tmp_pathbuf tp;

  errno = 0;
  if (ulen)
    /* nothing */;
  else if (buf == NULL)
    ulen = (unsigned) -1;
  else
    {
      set_errno (EINVAL);
      goto out;
    }

  acquire_read ();

  char *tocopy;
  if (!need_posix)
    {
      tocopy = tp.c_get ();
      sys_wcstombs (tocopy, NT_MAX_PATH, win32.Buffer,
                    win32.Length / sizeof (WCHAR));
    }
  else
    tocopy = posix;

  debug_printf ("posix %s", posix);
  if (strlen (tocopy) >= ulen)
    {
      set_errno (ERANGE);
      buf = NULL;
    }
  else
    {
      if (!buf)
        buf = (char *) malloc (strlen (tocopy) + 1);
      strcpy (buf, tocopy);
      if (!buf[0])      /* Should only happen when chroot */
        strcpy (buf, "/");
    }

  release_read ();

out:
  syscall_printf ("(%s) = cwdstuff::get (%p, %u, %d, %d), errno %d",
                  buf, buf, ulen, need_posix, with_chroot, errno);
  return buf;
}

/* No need to be reentrant or thread-safe according to SUSv3.
   / and \\ are treated equally.  Leading drive specifiers are
   kept intact as far as it makes sense.  Everything else is
   POSIX compatible. */
extern "C" char *
basename (char *path)
{
  static char buf[4];
  char *c, *d, *bs = path;

  if (!path || !*path)
    return strcpy (buf, ".");
  if (isalpha (path[0]) && path[1] == ':')
    bs += 2;
  else if (strspn (path, "/\\") > 1)
    ++bs;
  c = strrchr (bs, '/');
  if ((d = strrchr (c ?: bs, '\\')) > c)
    c = d;
  if (c)
    {
      /* Trailing (back)slashes are eliminated. */
      while (c && c > bs && c[1] == '\0')
        {
          *c = '\0';
          c = strrchr (bs, '/');
          if ((d = strrchr (c ?: bs, '\\')) > c)
            c = d;
        }
      if (c && (c > bs || c[1]))
        return c + 1;
    }
  else if (!bs[0])
    {
      stpncpy (buf, path, bs - path);
      stpcpy (buf + (bs - path), ".");
      return buf;
    }
  return path;
}

/* The differences with the POSIX version above:
   - declared in <string.h> (instead of <libgen.h>);
   - the argument is never modified, and therefore is marked const;
   - the empty string is returned if path is an empty string, "/", or ends
     with a trailing slash. */
extern "C" char *
__gnu_basename (const char *path)
{
  static char buf[1];
  char *c, *d, *bs = (char *)path;

  if (!path || !*path)
    return strcpy (buf, "");
  if (isalpha (path[0]) && path[1] == ':')
    bs += 2;
  else if (strspn (path, "/\\") > 1)
    ++bs;
  c = strrchr (bs, '/');
  if ((d = strrchr (c ?: bs, '\\')) > c)
    c = d;
  if (c)
    return c + 1;
  else if (!bs[0])
    return strcpy (buf, "");
  return (char *)path;
}

/* No need to be reentrant or thread-safe according to SUSv3.
   / and \\ are treated equally.  Leading drive specifiers and
   leading double (back)slashes are kept intact as far as it
   makes sense.  Everything else is POSIX compatible. */
extern "C" char *
dirname (char *path)
{
  static char buf[4];
  char *c, *d, *bs = path;

  if (!path || !*path)
    return strcpy (buf, ".");
  if (isalpha (path[0]) && path[1] == ':')
    bs += 2;
  else if (strspn (path, "/\\") == 2)
    ++bs;
  c = strrchr (bs, '/');
  if ((d = strrchr (c ?: bs, '\\')) > c)
    c = d;
  if (c)
    {
      /* Trailing (back)slashes are eliminated. */
      while (c && c > bs && c[1] == '\0')
        {
          *c = '\0';
          c = strrchr (bs, '/');
          if ((d = strrchr (c ?: bs, '\\')) > c)
            c = d;
        }
      if (!c)
        strcpy (bs, ".");
      else if (c > bs)
        {
          /* More trailing (back)slashes are eliminated. */
          while (c > bs && (*c == '/' || *c == '\\'))
            *c-- = '\0';
        }
      else
        c[1] = '\0';
    }
  else
    {
      stpncpy (buf, path, bs - path);
      stpcpy (buf + (bs - path), ".");
      return buf;
    }
  return path;
}