?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
The second batch
[git.git] / builtin / receive-pack.c
blobe8d7df14b6c00a511aaf537665e4562ab6f3454e
1 #include "builtin.h"
2 #include "abspath.h"
3 #include "repository.h"
4 #include "config.h"
5 #include "environment.h"
6 #include "gettext.h"
7 #include "hex.h"
8 #include "lockfile.h"
9 #include "pack.h"
10 #include "refs.h"
11 #include "pkt-line.h"
12 #include "sideband.h"
13 #include "run-command.h"
14 #include "hook.h"
15 #include "exec-cmd.h"
16 #include "commit.h"
17 #include "object.h"
18 #include "remote.h"
19 #include "connect.h"
20 #include "string-list.h"
21 #include "oid-array.h"
22 #include "connected.h"
23 #include "strvec.h"
24 #include "version.h"
25 #include "gpg-interface.h"
26 #include "sigchain.h"
27 #include "fsck.h"
28 #include "tmp-objdir.h"
29 #include "oidset.h"
30 #include "packfile.h"
31 #include "object-name.h"
32 #include "object-store-ll.h"
33 #include "path.h"
34 #include "protocol.h"
35 #include "commit-reach.h"
36 #include "server-info.h"
37 #include "trace.h"
38 #include "trace2.h"
39 #include "worktree.h"
40 #include "shallow.h"
41 #include "parse-options.h"
42
43 static const char * const receive_pack_usage[] = {
44 N_("git receive-pack <git-dir>"),
45 NULL
46 };
47
48 enum deny_action {
49 DENY_UNCONFIGURED,
50 DENY_IGNORE,
51 DENY_WARN,
52 DENY_REFUSE,
53 DENY_UPDATE_INSTEAD
54 };
55
56 static int deny_deletes;
57 static int deny_non_fast_forwards;
58 static enum deny_action deny_current_branch = DENY_UNCONFIGURED;
59 static enum deny_action deny_delete_current = DENY_UNCONFIGURED;
60 static int receive_fsck_objects = -1;
61 static int transfer_fsck_objects = -1;
62 static struct strbuf fsck_msg_types = STRBUF_INIT;
63 static int receive_unpack_limit = -1;
64 static int transfer_unpack_limit = -1;
65 static int advertise_atomic_push = 1;
66 static int advertise_push_options;
67 static int advertise_sid;
68 static int unpack_limit = 100;
69 static off_t max_input_size;
70 static int report_status;
71 static int report_status_v2;
72 static int use_sideband;
73 static int use_atomic;
74 static int use_push_options;
75 static int quiet;
76 static int prefer_ofs_delta = 1;
77 static int auto_update_server_info;
78 static int auto_gc = 1;
79 static int reject_thin;
80 static int stateless_rpc;
81 static const char *service_dir;
82 static const char *head_name;
83 static void *head_name_to_free;
84 static int sent_capabilities;
85 static int shallow_update;
86 static const char *alt_shallow_file;
87 static struct strbuf push_cert = STRBUF_INIT;
88 static struct object_id push_cert_oid;
89 static struct signature_check sigcheck;
90 static const char *push_cert_nonce;
91 static const char *cert_nonce_seed;
92 static struct strvec hidden_refs = STRVEC_INIT;
93
94 static const char *NONCE_UNSOLICITED = "UNSOLICITED";
95 static const char *NONCE_BAD = "BAD";
96 static const char *NONCE_MISSING = "MISSING";
97 static const char *NONCE_OK = "OK";
98 static const char *NONCE_SLOP = "SLOP";
99 static const char *nonce_status;
100 static long nonce_stamp_slop;
101 static timestamp_t nonce_stamp_slop_limit;
102 static struct ref_transaction *transaction;
103
104 static enum {
105 KEEPALIVE_NEVER = 0,
106 KEEPALIVE_AFTER_NUL,
107 KEEPALIVE_ALWAYS
108 } use_keepalive;
109 static int keepalive_in_sec = 5;
110
111 static struct tmp_objdir *tmp_objdir;
112
113 static struct proc_receive_ref {
114 unsigned int want_add:1,
115 want_delete:1,
116 want_modify:1,
117 negative_ref:1;
118 char *ref_prefix;
119 struct proc_receive_ref *next;
120 } *proc_receive_ref;
121
122 static void proc_receive_ref_append(const char *prefix);
123
124 static enum deny_action parse_deny_action(const char *var, const char *value)
125 {
126 if (value) {
127 if (!strcasecmp(value, "ignore"))
128 return DENY_IGNORE;
129 if (!strcasecmp(value, "warn"))
130 return DENY_WARN;
131 if (!strcasecmp(value, "refuse"))
132 return DENY_REFUSE;
133 if (!strcasecmp(value, "updateinstead"))
134 return DENY_UPDATE_INSTEAD;
135 }
136 if (git_config_bool(var, value))
137 return DENY_REFUSE;
138 return DENY_IGNORE;
139 }
140
141 static int receive_pack_config(const char *var, const char *value,
142 const struct config_context *ctx, void *cb)
143 {
144 const char *msg_id;
145 int status = parse_hide_refs_config(var, value, "receive", &hidden_refs);
146
147 if (status)
148 return status;
149
150 if (strcmp(var, "receive.denydeletes") == 0) {
151 deny_deletes = git_config_bool(var, value);
152 return 0;
153 }
154
155 if (strcmp(var, "receive.denynonfastforwards") == 0) {
156 deny_non_fast_forwards = git_config_bool(var, value);
157 return 0;
158 }
159
160 if (strcmp(var, "receive.unpacklimit") == 0) {
161 receive_unpack_limit = git_config_int(var, value, ctx->kvi);
162 return 0;
163 }
164
165 if (strcmp(var, "transfer.unpacklimit") == 0) {
166 transfer_unpack_limit = git_config_int(var, value, ctx->kvi);
167 return 0;
168 }
169
170 if (strcmp(var, "receive.fsck.skiplist") == 0) {
171 const char *path;
172
173 if (git_config_pathname(&path, var, value))
174 return 1;
175 strbuf_addf(&fsck_msg_types, "%cskiplist=%s",
176 fsck_msg_types.len ? ',' : '=', path);
177 free((char *)path);
178 return 0;
179 }
180
181 if (skip_prefix(var, "receive.fsck.", &msg_id)) {
182 if (!value)
183 return config_error_nonbool(var);
184 if (is_valid_msg_type(msg_id, value))
185 strbuf_addf(&fsck_msg_types, "%c%s=%s",
186 fsck_msg_types.len ? ',' : '=', msg_id, value);
187 else
188 warning("skipping unknown msg id '%s'", msg_id);
189 return 0;
190 }
191
192 if (strcmp(var, "receive.fsckobjects") == 0) {
193 receive_fsck_objects = git_config_bool(var, value);
194 return 0;
195 }
196
197 if (strcmp(var, "transfer.fsckobjects") == 0) {
198 transfer_fsck_objects = git_config_bool(var, value);
199 return 0;
200 }
201
202 if (!strcmp(var, "receive.denycurrentbranch")) {
203 deny_current_branch = parse_deny_action(var, value);
204 return 0;
205 }
206
207 if (strcmp(var, "receive.denydeletecurrent") == 0) {
208 deny_delete_current = parse_deny_action(var, value);
209 return 0;
210 }
211
212 if (strcmp(var, "repack.usedeltabaseoffset") == 0) {
213 prefer_ofs_delta = git_config_bool(var, value);
214 return 0;
215 }
216
217 if (strcmp(var, "receive.updateserverinfo") == 0) {
218 auto_update_server_info = git_config_bool(var, value);
219 return 0;
220 }
221
222 if (strcmp(var, "receive.autogc") == 0) {
223 auto_gc = git_config_bool(var, value);
224 return 0;
225 }
226
227 if (strcmp(var, "receive.shallowupdate") == 0) {
228 shallow_update = git_config_bool(var, value);
229 return 0;
230 }
231
232 if (strcmp(var, "receive.certnonceseed") == 0)
233 return git_config_string(&cert_nonce_seed, var, value);
234
235 if (strcmp(var, "receive.certnonceslop") == 0) {
236 nonce_stamp_slop_limit = git_config_ulong(var, value, ctx->kvi);
237 return 0;
238 }
239
240 if (strcmp(var, "receive.advertiseatomic") == 0) {
241 advertise_atomic_push = git_config_bool(var, value);
242 return 0;
243 }
244
245 if (strcmp(var, "receive.advertisepushoptions") == 0) {
246 advertise_push_options = git_config_bool(var, value);
247 return 0;
248 }
249
250 if (strcmp(var, "receive.keepalive") == 0) {
251 keepalive_in_sec = git_config_int(var, value, ctx->kvi);
252 return 0;
253 }
254
255 if (strcmp(var, "receive.maxinputsize") == 0) {
256 max_input_size = git_config_int64(var, value, ctx->kvi);
257 return 0;
258 }
259
260 if (strcmp(var, "receive.procreceiverefs") == 0) {
261 if (!value)
262 return config_error_nonbool(var);
263 proc_receive_ref_append(value);
264 return 0;
265 }
266
267 if (strcmp(var, "transfer.advertisesid") == 0) {
268 advertise_sid = git_config_bool(var, value);
269 return 0;
270 }
271
272 return git_default_config(var, value, ctx, cb);
273 }
274
275 static void show_ref(const char *path, const struct object_id *oid)
276 {
277 if (sent_capabilities) {
278 packet_write_fmt(1, "%s %s\n", oid_to_hex(oid), path);
279 } else {
280 struct strbuf cap = STRBUF_INIT;
281
282 strbuf_addstr(&cap,
283 "report-status report-status-v2 delete-refs side-band-64k quiet");
284 if (advertise_atomic_push)
285 strbuf_addstr(&cap, " atomic");
286 if (prefer_ofs_delta)
287 strbuf_addstr(&cap, " ofs-delta");
288 if (push_cert_nonce)
289 strbuf_addf(&cap, " push-cert=%s", push_cert_nonce);
290 if (advertise_push_options)
291 strbuf_addstr(&cap, " push-options");
292 if (advertise_sid)
293 strbuf_addf(&cap, " session-id=%s", trace2_session_id());
294 strbuf_addf(&cap, " object-format=%s", the_hash_algo->name);
295 strbuf_addf(&cap, " agent=%s", git_user_agent_sanitized());
296 packet_write_fmt(1, "%s %s%c%s\n",
297 oid_to_hex(oid), path, 0, cap.buf);
298 strbuf_release(&cap);
299 sent_capabilities = 1;
300 }
301 }
302
303 static int show_ref_cb(const char *path_full, const struct object_id *oid,
304 int flag UNUSED, void *data)
305 {
306 struct oidset *seen = data;
307 const char *path = strip_namespace(path_full);
308
309 if (ref_is_hidden(path, path_full, &hidden_refs))
310 return 0;
311
312 /*
313 * Advertise refs outside our current namespace as ".have"
314 * refs, so that the client can use them to minimize data
315 * transfer but will otherwise ignore them.
316 */
317 if (!path) {
318 if (oidset_insert(seen, oid))
319 return 0;
320 path = ".have";
321 } else {
322 oidset_insert(seen, oid);
323 }
324 show_ref(path, oid);
325 return 0;
326 }
327
328 static void show_one_alternate_ref(const struct object_id *oid,
329 void *data)
330 {
331 struct oidset *seen = data;
332
333 if (oidset_insert(seen, oid))
334 return;
335
336 show_ref(".have", oid);
337 }
338
339 static void write_head_info(void)
340 {
341 static struct oidset seen = OIDSET_INIT;
342
343 refs_for_each_fullref_in(get_main_ref_store(the_repository), "",
344 hidden_refs_to_excludes(&hidden_refs),
345 show_ref_cb, &seen);
346 for_each_alternate_ref(show_one_alternate_ref, &seen);
347 oidset_clear(&seen);
348 if (!sent_capabilities)
349 show_ref("capabilities^{}", null_oid());
350
351 advertise_shallow_grafts(1);
352
353 /* EOF */
354 packet_flush(1);
355 }
356
357 #define RUN_PROC_RECEIVE_SCHEDULED 1
358 #define RUN_PROC_RECEIVE_RETURNED 2
359 struct command {
360 struct command *next;
361 const char *error_string;
362 struct ref_push_report *report;
363 unsigned int skip_update:1,
364 did_not_exist:1,
365 run_proc_receive:2;
366 int index;
367 struct object_id old_oid;
368 struct object_id new_oid;
369 char ref_name[FLEX_ARRAY]; /* more */
370 };
371
372 static void proc_receive_ref_append(const char *prefix)
373 {
374 struct proc_receive_ref *ref_pattern;
375 char *p;
376 int len;
377
378 CALLOC_ARRAY(ref_pattern, 1);
379 p = strchr(prefix, ':');
380 if (p) {
381 while (prefix < p) {
382 if (*prefix == 'a')
383 ref_pattern->want_add = 1;
384 else if (*prefix == 'd')
385 ref_pattern->want_delete = 1;
386 else if (*prefix == 'm')
387 ref_pattern->want_modify = 1;
388 else if (*prefix == '!')
389 ref_pattern->negative_ref = 1;
390 prefix++;
391 }
392 prefix++;
393 } else {
394 ref_pattern->want_add = 1;
395 ref_pattern->want_delete = 1;
396 ref_pattern->want_modify = 1;
397 }
398 len = strlen(prefix);
399 while (len && prefix[len - 1] == '/')
400 len--;
401 ref_pattern->ref_prefix = xmemdupz(prefix, len);
402 if (!proc_receive_ref) {
403 proc_receive_ref = ref_pattern;
404 } else {
405 struct proc_receive_ref *end;
406
407 end = proc_receive_ref;
408 while (end->next)
409 end = end->next;
410 end->next = ref_pattern;
411 }
412 }
413
414 static int proc_receive_ref_matches(struct command *cmd)
415 {
416 struct proc_receive_ref *p;
417
418 if (!proc_receive_ref)
419 return 0;
420
421 for (p = proc_receive_ref; p; p = p->next) {
422 const char *match = p->ref_prefix;
423 const char *remains;
424
425 if (!p->want_add && is_null_oid(&cmd->old_oid))
426 continue;
427 else if (!p->want_delete && is_null_oid(&cmd->new_oid))
428 continue;
429 else if (!p->want_modify &&
430 !is_null_oid(&cmd->old_oid) &&
431 !is_null_oid(&cmd->new_oid))
432 continue;
433
434 if (skip_prefix(cmd->ref_name, match, &remains) &&
435 (!*remains || *remains == '/')) {
436 if (!p->negative_ref)
437 return 1;
438 } else if (p->negative_ref) {
439 return 1;
440 }
441 }
442 return 0;
443 }
444
445 static void report_message(const char *prefix, const char *err, va_list params)
446 {
447 int sz;
448 char msg[4096];
449
450 sz = xsnprintf(msg, sizeof(msg), "%s", prefix);
451 sz += vsnprintf(msg + sz, sizeof(msg) - sz, err, params);
452 if (sz > (sizeof(msg) - 1))
453 sz = sizeof(msg) - 1;
454 msg[sz++] = '\n';
455
456 if (use_sideband)
457 send_sideband(1, 2, msg, sz, use_sideband);
458 else
459 xwrite(2, msg, sz);
460 }
461
462 __attribute__((format (printf, 1, 2)))
463 static void rp_warning(const char *err, ...)
464 {
465 va_list params;
466 va_start(params, err);
467 report_message("warning: ", err, params);
468 va_end(params);
469 }
470
471 __attribute__((format (printf, 1, 2)))
472 static void rp_error(const char *err, ...)
473 {
474 va_list params;
475 va_start(params, err);
476 report_message("error: ", err, params);
477 va_end(params);
478 }
479
480 static int copy_to_sideband(int in, int out UNUSED, void *arg UNUSED)
481 {
482 char data[128];
483 int keepalive_active = 0;
484
485 if (keepalive_in_sec <= 0)
486 use_keepalive = KEEPALIVE_NEVER;
487 if (use_keepalive == KEEPALIVE_ALWAYS)
488 keepalive_active = 1;
489
490 while (1) {
491 ssize_t sz;
492
493 if (keepalive_active) {
494 struct pollfd pfd;
495 int ret;
496
497 pfd.fd = in;
498 pfd.events = POLLIN;
499 ret = poll(&pfd, 1, 1000 * keepalive_in_sec);
500
501 if (ret < 0) {
502 if (errno == EINTR)
503 continue;
504 else
505 break;
506 } else if (ret == 0) {
507 /* no data; send a keepalive packet */
508 static const char buf[] = "0005\1";
509 write_or_die(1, buf, sizeof(buf) - 1);
510 continue;
511 } /* else there is actual data to read */
512 }
513
514 sz = xread(in, data, sizeof(data));
515 if (sz <= 0)
516 break;
517
518 if (use_keepalive == KEEPALIVE_AFTER_NUL && !keepalive_active) {
519 const char *p = memchr(data, '\0', sz);
520 if (p) {
521 /*
522 * The NUL tells us to start sending keepalives. Make
523 * sure we send any other data we read along
524 * with it.
525 */
526 keepalive_active = 1;
527 send_sideband(1, 2, data, p - data, use_sideband);
528 send_sideband(1, 2, p + 1, sz - (p - data + 1), use_sideband);
529 continue;
530 }
531 }
532
533 /*
534 * Either we're not looking for a NUL signal, or we didn't see
535 * it yet; just pass along the data.
536 */
537 send_sideband(1, 2, data, sz, use_sideband);
538 }
539 close(in);
540 return 0;
541 }
542
543 static void hmac_hash(unsigned char *out,
544 const char *key_in, size_t key_len,
545 const char *text, size_t text_len)
546 {
547 unsigned char key[GIT_MAX_BLKSZ];
548 unsigned char k_ipad[GIT_MAX_BLKSZ];
549 unsigned char k_opad[GIT_MAX_BLKSZ];
550 int i;
551 git_hash_ctx ctx;
552
553 /* RFC 2104 2. (1) */
554 memset(key, '\0', GIT_MAX_BLKSZ);
555 if (the_hash_algo->blksz < key_len) {
556 the_hash_algo->init_fn(&ctx);
557 the_hash_algo->update_fn(&ctx, key_in, key_len);
558 the_hash_algo->final_fn(key, &ctx);
559 } else {
560 memcpy(key, key_in, key_len);
561 }
562
563 /* RFC 2104 2. (2) & (5) */
564 for (i = 0; i < sizeof(key); i++) {
565 k_ipad[i] = key[i] ^ 0x36;
566 k_opad[i] = key[i] ^ 0x5c;
567 }
568
569 /* RFC 2104 2. (3) & (4) */
570 the_hash_algo->init_fn(&ctx);
571 the_hash_algo->update_fn(&ctx, k_ipad, sizeof(k_ipad));
572 the_hash_algo->update_fn(&ctx, text, text_len);
573 the_hash_algo->final_fn(out, &ctx);
574
575 /* RFC 2104 2. (6) & (7) */
576 the_hash_algo->init_fn(&ctx);
577 the_hash_algo->update_fn(&ctx, k_opad, sizeof(k_opad));
578 the_hash_algo->update_fn(&ctx, out, the_hash_algo->rawsz);
579 the_hash_algo->final_fn(out, &ctx);
580 }
581
582 static char *prepare_push_cert_nonce(const char *path, timestamp_t stamp)
583 {
584 struct strbuf buf = STRBUF_INIT;
585 unsigned char hash[GIT_MAX_RAWSZ];
586
587 strbuf_addf(&buf, "%s:%"PRItime, path, stamp);
588 hmac_hash(hash, buf.buf, buf.len, cert_nonce_seed, strlen(cert_nonce_seed));
589 strbuf_release(&buf);
590
591 /* RFC 2104 5. HMAC-SHA1 or HMAC-SHA256 */
592 strbuf_addf(&buf, "%"PRItime"-%.*s", stamp, (int)the_hash_algo->hexsz, hash_to_hex(hash));
593 return strbuf_detach(&buf, NULL);
594 }
595
596 /*
597 * Return zero if a and b are equal up to n bytes and nonzero if they are not.
598 * This operation is guaranteed to run in constant time to avoid leaking data.
599 */
600 static int constant_memequal(const char *a, const char *b, size_t n)
601 {
602 int res = 0;
603 size_t i;
604
605 for (i = 0; i < n; i++)
606 res |= a[i] ^ b[i];
607 return res;
608 }
609
610 static const char *check_nonce(const char *buf)
611 {
612 size_t noncelen;
613 const char *found = find_commit_header(buf, "nonce", &noncelen);
614 char *nonce = found ? xmemdupz(found, noncelen) : NULL;
615 timestamp_t stamp, ostamp;
616 char *bohmac, *expect = NULL;
617 const char *retval = NONCE_BAD;
618
619 if (!nonce) {
620 retval = NONCE_MISSING;
621 goto leave;
622 } else if (!push_cert_nonce) {
623 retval = NONCE_UNSOLICITED;
624 goto leave;
625 } else if (!strcmp(push_cert_nonce, nonce)) {
626 retval = NONCE_OK;
627 goto leave;
628 }
629
630 if (!stateless_rpc) {
631 /* returned nonce MUST match what we gave out earlier */
632 retval = NONCE_BAD;
633 goto leave;
634 }
635
636 /*
637 * In stateless mode, we may be receiving a nonce issued by
638 * another instance of the server that serving the same
639 * repository, and the timestamps may not match, but the
640 * nonce-seed and dir should match, so we can recompute and
641 * report the time slop.
642 *
643 * In addition, when a nonce issued by another instance has
644 * timestamp within receive.certnonceslop seconds, we pretend
645 * as if we issued that nonce when reporting to the hook.
646 */
647
648 /* nonce is concat(<seconds-since-epoch>, "-", <hmac>) */
649 if (*nonce <= '0' || '9' < *nonce) {
650 retval = NONCE_BAD;
651 goto leave;
652 }
653 stamp = parse_timestamp(nonce, &bohmac, 10);
654 if (bohmac == nonce || bohmac[0] != '-') {
655 retval = NONCE_BAD;
656 goto leave;
657 }
658
659 expect = prepare_push_cert_nonce(service_dir, stamp);
660 if (noncelen != strlen(expect)) {
661 /* This is not even the right size. */
662 retval = NONCE_BAD;
663 goto leave;
664 }
665 if (constant_memequal(expect, nonce, noncelen)) {
666 /* Not what we would have signed earlier */
667 retval = NONCE_BAD;
668 goto leave;
669 }
670
671 /*
672 * By how many seconds is this nonce stale? Negative value
673 * would mean it was issued by another server with its clock
674 * skewed in the future.
675 */
676 ostamp = parse_timestamp(push_cert_nonce, NULL, 10);
677 nonce_stamp_slop = (long)ostamp - (long)stamp;
678
679 if (nonce_stamp_slop_limit &&
680 labs(nonce_stamp_slop) <= nonce_stamp_slop_limit) {
681 /*
682 * Pretend as if the received nonce (which passes the
683 * HMAC check, so it is not a forged by third-party)
684 * is what we issued.
685 */
686 free((void *)push_cert_nonce);
687 push_cert_nonce = xstrdup(nonce);
688 retval = NONCE_OK;
689 } else {
690 retval = NONCE_SLOP;
691 }
692
693 leave:
694 free(nonce);
695 free(expect);
696 return retval;
697 }
698
699 /*
700 * Return 1 if there is no push_cert or if the push options in push_cert are
701 * the same as those in the argument; 0 otherwise.
702 */
703 static int check_cert_push_options(const struct string_list *push_options)
704 {
705 const char *buf = push_cert.buf;
706
707 const char *option;
708 size_t optionlen;
709 int options_seen = 0;
710
711 int retval = 1;
712
713 if (!*buf)
714 return 1;
715
716 while ((option = find_commit_header(buf, "push-option", &optionlen))) {
717 buf = option + optionlen + 1;
718 options_seen++;
719 if (options_seen > push_options->nr
720 || xstrncmpz(push_options->items[options_seen - 1].string,
721 option, optionlen))
722 return 0;
723 }
724
725 if (options_seen != push_options->nr)
726 retval = 0;
727
728 return retval;
729 }
730
731 static void prepare_push_cert_sha1(struct child_process *proc)
732 {
733 static int already_done;
734
735 if (!push_cert.len)
736 return;
737
738 if (!already_done) {
739 int bogs /* beginning_of_gpg_sig */;
740
741 already_done = 1;
742 if (write_object_file(push_cert.buf, push_cert.len, OBJ_BLOB,
743 &push_cert_oid))
744 oidclr(&push_cert_oid);
745
746 memset(&sigcheck, '\0', sizeof(sigcheck));
747
748 bogs = parse_signed_buffer(push_cert.buf, push_cert.len);
749 sigcheck.payload = xmemdupz(push_cert.buf, bogs);
750 sigcheck.payload_len = bogs;
751 check_signature(&sigcheck, push_cert.buf + bogs,
752 push_cert.len - bogs);
753
754 nonce_status = check_nonce(sigcheck.payload);
755 }
756 if (!is_null_oid(&push_cert_oid)) {
757 strvec_pushf(&proc->env, "GIT_PUSH_CERT=%s",
758 oid_to_hex(&push_cert_oid));
759 strvec_pushf(&proc->env, "GIT_PUSH_CERT_SIGNER=%s",
760 sigcheck.signer ? sigcheck.signer : "");
761 strvec_pushf(&proc->env, "GIT_PUSH_CERT_KEY=%s",
762 sigcheck.key ? sigcheck.key : "");
763 strvec_pushf(&proc->env, "GIT_PUSH_CERT_STATUS=%c",
764 sigcheck.result);
765 if (push_cert_nonce) {
766 strvec_pushf(&proc->env,
767 "GIT_PUSH_CERT_NONCE=%s",
768 push_cert_nonce);
769 strvec_pushf(&proc->env,
770 "GIT_PUSH_CERT_NONCE_STATUS=%s",
771 nonce_status);
772 if (nonce_status == NONCE_SLOP)
773 strvec_pushf(&proc->env,
774 "GIT_PUSH_CERT_NONCE_SLOP=%ld",
775 nonce_stamp_slop);
776 }
777 }
778 }
779
780 struct receive_hook_feed_state {
781 struct command *cmd;
782 struct ref_push_report *report;
783 int skip_broken;
784 struct strbuf buf;
785 const struct string_list *push_options;
786 };
787
788 typedef int (*feed_fn)(void *, const char **, size_t *);
789 static int run_and_feed_hook(const char *hook_name, feed_fn feed,
790 struct receive_hook_feed_state *feed_state)
791 {
792 struct child_process proc = CHILD_PROCESS_INIT;
793 struct async muxer;
794 int code;
795 const char *hook_path = find_hook(hook_name);
796
797 if (!hook_path)
798 return 0;
799
800 strvec_push(&proc.args, hook_path);
801 proc.in = -1;
802 proc.stdout_to_stderr = 1;
803 proc.trace2_hook_name = hook_name;
804
805 if (feed_state->push_options) {
806 size_t i;
807 for (i = 0; i < feed_state->push_options->nr; i++)
808 strvec_pushf(&proc.env,
809 "GIT_PUSH_OPTION_%"PRIuMAX"=%s",
810 (uintmax_t)i,
811 feed_state->push_options->items[i].string);
812 strvec_pushf(&proc.env, "GIT_PUSH_OPTION_COUNT=%"PRIuMAX"",
813 (uintmax_t)feed_state->push_options->nr);
814 } else
815 strvec_pushf(&proc.env, "GIT_PUSH_OPTION_COUNT");
816
817 if (tmp_objdir)
818 strvec_pushv(&proc.env, tmp_objdir_env(tmp_objdir));
819
820 if (use_sideband) {
821 memset(&muxer, 0, sizeof(muxer));
822 muxer.proc = copy_to_sideband;
823 muxer.in = -1;
824 code = start_async(&muxer);
825 if (code)
826 return code;
827 proc.err = muxer.in;
828 }
829
830 prepare_push_cert_sha1(&proc);
831
832 code = start_command(&proc);
833 if (code) {
834 if (use_sideband)
835 finish_async(&muxer);
836 return code;
837 }
838
839 sigchain_push(SIGPIPE, SIG_IGN);
840
841 while (1) {
842 const char *buf;
843 size_t n;
844 if (feed(feed_state, &buf, &n))
845 break;
846 if (write_in_full(proc.in, buf, n) < 0)
847 break;
848 }
849 close(proc.in);
850 if (use_sideband)
851 finish_async(&muxer);
852
853 sigchain_pop(SIGPIPE);
854
855 return finish_command(&proc);
856 }
857
858 static int feed_receive_hook(void *state_, const char **bufp, size_t *sizep)
859 {
860 struct receive_hook_feed_state *state = state_;
861 struct command *cmd = state->cmd;
862
863 while (cmd &&
864 state->skip_broken && (cmd->error_string || cmd->did_not_exist))
865 cmd = cmd->next;
866 if (!cmd)
867 return -1; /* EOF */
868 if (!bufp)
869 return 0; /* OK, can feed something. */
870 strbuf_reset(&state->buf);
871 if (!state->report)
872 state->report = cmd->report;
873 if (state->report) {
874 struct object_id *old_oid;
875 struct object_id *new_oid;
876 const char *ref_name;
877
878 old_oid = state->report->old_oid ? state->report->old_oid : &cmd->old_oid;
879 new_oid = state->report->new_oid ? state->report->new_oid : &cmd->new_oid;
880 ref_name = state->report->ref_name ? state->report->ref_name : cmd->ref_name;
881 strbuf_addf(&state->buf, "%s %s %s\n",
882 oid_to_hex(old_oid), oid_to_hex(new_oid),
883 ref_name);
884 state->report = state->report->next;
885 if (!state->report)
886 state->cmd = cmd->next;
887 } else {
888 strbuf_addf(&state->buf, "%s %s %s\n",
889 oid_to_hex(&cmd->old_oid), oid_to_hex(&cmd->new_oid),
890 cmd->ref_name);
891 state->cmd = cmd->next;
892 }
893 if (bufp) {
894 *bufp = state->buf.buf;
895 *sizep = state->buf.len;
896 }
897 return 0;
898 }
899
900 static int run_receive_hook(struct command *commands,
901 const char *hook_name,
902 int skip_broken,
903 const struct string_list *push_options)
904 {
905 struct receive_hook_feed_state state;
906 int status;
907
908 strbuf_init(&state.buf, 0);
909 state.cmd = commands;
910 state.skip_broken = skip_broken;
911 state.report = NULL;
912 if (feed_receive_hook(&state, NULL, NULL))
913 return 0;
914 state.cmd = commands;
915 state.push_options = push_options;
916 status = run_and_feed_hook(hook_name, feed_receive_hook, &state);
917 strbuf_release(&state.buf);
918 return status;
919 }
920
921 static int run_update_hook(struct command *cmd)
922 {
923 struct child_process proc = CHILD_PROCESS_INIT;
924 int code;
925 const char *hook_path = find_hook("update");
926
927 if (!hook_path)
928 return 0;
929
930 strvec_push(&proc.args, hook_path);
931 strvec_push(&proc.args, cmd->ref_name);
932 strvec_push(&proc.args, oid_to_hex(&cmd->old_oid));
933 strvec_push(&proc.args, oid_to_hex(&cmd->new_oid));
934
935 proc.no_stdin = 1;
936 proc.stdout_to_stderr = 1;
937 proc.err = use_sideband ? -1 : 0;
938 proc.trace2_hook_name = "update";
939
940 code = start_command(&proc);
941 if (code)
942 return code;
943 if (use_sideband)
944 copy_to_sideband(proc.err, -1, NULL);
945 return finish_command(&proc);
946 }
947
948 static struct command *find_command_by_refname(struct command *list,
949 const char *refname)
950 {
951 for (; list; list = list->next)
952 if (!strcmp(list->ref_name, refname))
953 return list;
954 return NULL;
955 }
956
957 static int read_proc_receive_report(struct packet_reader *reader,
958 struct command *commands,
959 struct strbuf *errmsg)
960 {
961 struct command *cmd;
962 struct command *hint = NULL;
963 struct ref_push_report *report = NULL;
964 int new_report = 0;
965 int code = 0;
966 int once = 0;
967 int response = 0;
968
969 for (;;) {
970 struct object_id old_oid, new_oid;
971 const char *head;
972 const char *refname;
973 char *p;
974 enum packet_read_status status;
975
976 status = packet_reader_read(reader);
977 if (status != PACKET_READ_NORMAL) {
978 /* Check whether proc-receive exited abnormally */
979 if (status == PACKET_READ_EOF && !response) {
980 strbuf_addstr(errmsg, "proc-receive exited abnormally");
981 return -1;
982 }
983 break;
984 }
985 response++;
986
987 head = reader->line;
988 p = strchr(head, ' ');
989 if (!p) {
990 strbuf_addf(errmsg, "proc-receive reported incomplete status line: '%s'\n", head);
991 code = -1;
992 continue;
993 }
994 *p++ = '\0';
995 if (!strcmp(head, "option")) {
996 const char *key, *val;
997
998 if (!hint || !(report || new_report)) {
999 if (!once++)
1000 strbuf_addstr(errmsg, "proc-receive reported 'option' without a matching 'ok/ng' directive\n");
1001 code = -1;
1002 continue;
1003 }
1004 if (new_report) {
1005 if (!hint->report) {
1006 CALLOC_ARRAY(hint->report, 1);
1007 report = hint->report;
1008 } else {
1009 report = hint->report;
1010 while (report->next)
1011 report = report->next;
1012 report->next = xcalloc(1, sizeof(struct ref_push_report));
1013 report = report->next;
1014 }
1015 new_report = 0;
1016 }
1017 key = p;
1018 p = strchr(key, ' ');
1019 if (p)
1020 *p++ = '\0';
1021 val = p;
1022 if (!strcmp(key, "refname"))
1023 report->ref_name = xstrdup_or_null(val);
1024 else if (!strcmp(key, "old-oid") && val &&
1025 !parse_oid_hex(val, &old_oid, &val))
1026 report->old_oid = oiddup(&old_oid);
1027 else if (!strcmp(key, "new-oid") && val &&
1028 !parse_oid_hex(val, &new_oid, &val))
1029 report->new_oid = oiddup(&new_oid);
1030 else if (!strcmp(key, "forced-update"))
1031 report->forced_update = 1;
1032 else if (!strcmp(key, "fall-through"))
1033 /* Fall through, let 'receive-pack' to execute it. */
1034 hint->run_proc_receive = 0;
1035 continue;
1036 }
1037
1038 report = NULL;
1039 new_report = 0;
1040 refname = p;
1041 p = strchr(refname, ' ');
1042 if (p)
1043 *p++ = '\0';
1044 if (strcmp(head, "ok") && strcmp(head, "ng")) {
1045 strbuf_addf(errmsg, "proc-receive reported bad status '%s' on ref '%s'\n",
1046 head, refname);
1047 code = -1;
1048 continue;
1049 }
1050
1051 /* first try searching at our hint, falling back to all refs */
1052 if (hint)
1053 hint = find_command_by_refname(hint, refname);
1054 if (!hint)
1055 hint = find_command_by_refname(commands, refname);
1056 if (!hint) {
1057 strbuf_addf(errmsg, "proc-receive reported status on unknown ref: %s\n",
1058 refname);
1059 code = -1;
1060 continue;
1061 }
1062 if (!hint->run_proc_receive) {
1063 strbuf_addf(errmsg, "proc-receive reported status on unexpected ref: %s\n",
1064 refname);
1065 code = -1;
1066 continue;
1067 }
1068 hint->run_proc_receive |= RUN_PROC_RECEIVE_RETURNED;
1069 if (!strcmp(head, "ng")) {
1070 if (p)
1071 hint->error_string = xstrdup(p);
1072 else
1073 hint->error_string = "failed";
1074 code = -1;
1075 continue;
1076 }
1077 new_report = 1;
1078 }
1079
1080 for (cmd = commands; cmd; cmd = cmd->next)
1081 if (cmd->run_proc_receive && !cmd->error_string &&
1082 !(cmd->run_proc_receive & RUN_PROC_RECEIVE_RETURNED)) {
1083 cmd->error_string = "proc-receive failed to report status";
1084 code = -1;
1085 }
1086 return code;
1087 }
1088
1089 static int run_proc_receive_hook(struct command *commands,
1090 const struct string_list *push_options)
1091 {
1092 struct child_process proc = CHILD_PROCESS_INIT;
1093 struct async muxer;
1094 struct command *cmd;
1095 struct packet_reader reader;
1096 struct strbuf cap = STRBUF_INIT;
1097 struct strbuf errmsg = STRBUF_INIT;
1098 int hook_use_push_options = 0;
1099 int version = 0;
1100 int code;
1101 const char *hook_path = find_hook("proc-receive");
1102
1103 if (!hook_path) {
1104 rp_error("cannot find hook 'proc-receive'");
1105 return -1;
1106 }
1107
1108 strvec_push(&proc.args, hook_path);
1109 proc.in = -1;
1110 proc.out = -1;
1111 proc.trace2_hook_name = "proc-receive";
1112
1113 if (use_sideband) {
1114 memset(&muxer, 0, sizeof(muxer));
1115 muxer.proc = copy_to_sideband;
1116 muxer.in = -1;
1117 code = start_async(&muxer);
1118 if (code)
1119 return code;
1120 proc.err = muxer.in;
1121 } else {
1122 proc.err = 0;
1123 }
1124
1125 code = start_command(&proc);
1126 if (code) {
1127 if (use_sideband)
1128 finish_async(&muxer);
1129 return code;
1130 }
1131
1132 sigchain_push(SIGPIPE, SIG_IGN);
1133
1134 /* Version negotiaton */
1135 packet_reader_init(&reader, proc.out, NULL, 0,
1136 PACKET_READ_CHOMP_NEWLINE |
1137 PACKET_READ_GENTLE_ON_EOF);
1138 if (use_atomic)
1139 strbuf_addstr(&cap, " atomic");
1140 if (use_push_options)
1141 strbuf_addstr(&cap, " push-options");
1142 if (cap.len) {
1143 code = packet_write_fmt_gently(proc.in, "version=1%c%s\n", '\0', cap.buf + 1);
1144 strbuf_release(&cap);
1145 } else {
1146 code = packet_write_fmt_gently(proc.in, "version=1\n");
1147 }
1148 if (!code)
1149 code = packet_flush_gently(proc.in);
1150
1151 if (!code)
1152 for (;;) {
1153 int linelen;
1154 enum packet_read_status status;
1155
1156 status = packet_reader_read(&reader);
1157 if (status != PACKET_READ_NORMAL) {
1158 /* Check whether proc-receive exited abnormally */
1159 if (status == PACKET_READ_EOF)
1160 code = -1;
1161 break;
1162 }
1163
1164 if (reader.pktlen > 8 && starts_with(reader.line, "version=")) {
1165 version = atoi(reader.line + 8);
1166 linelen = strlen(reader.line);
1167 if (linelen < reader.pktlen) {
1168 const char *feature_list = reader.line + linelen + 1;
1169 if (parse_feature_request(feature_list, "push-options"))
1170 hook_use_push_options = 1;
1171 }
1172 }
1173 }
1174
1175 if (code) {
1176 strbuf_addstr(&errmsg, "fail to negotiate version with proc-receive hook");
1177 goto cleanup;
1178 }
1179
1180 switch (version) {
1181 case 0:
1182 /* fallthrough */
1183 case 1:
1184 break;
1185 default:
1186 strbuf_addf(&errmsg, "proc-receive version '%d' is not supported",
1187 version);
1188 code = -1;
1189 goto cleanup;
1190 }
1191
1192 /* Send commands */
1193 for (cmd = commands; cmd; cmd = cmd->next) {
1194 if (!cmd->run_proc_receive || cmd->skip_update || cmd->error_string)
1195 continue;
1196 code = packet_write_fmt_gently(proc.in, "%s %s %s",
1197 oid_to_hex(&cmd->old_oid),
1198 oid_to_hex(&cmd->new_oid),
1199 cmd->ref_name);
1200 if (code)
1201 break;
1202 }
1203 if (!code)
1204 code = packet_flush_gently(proc.in);
1205 if (code) {
1206 strbuf_addstr(&errmsg, "fail to write commands to proc-receive hook");
1207 goto cleanup;
1208 }
1209
1210 /* Send push options */
1211 if (hook_use_push_options) {
1212 struct string_list_item *item;
1213
1214 for_each_string_list_item(item, push_options) {
1215 code = packet_write_fmt_gently(proc.in, "%s", item->string);
1216 if (code)
1217 break;
1218 }
1219 if (!code)
1220 code = packet_flush_gently(proc.in);
1221 if (code) {
1222 strbuf_addstr(&errmsg,
1223 "fail to write push-options to proc-receive hook");
1224 goto cleanup;
1225 }
1226 }
1227
1228 /* Read result from proc-receive */
1229 code = read_proc_receive_report(&reader, commands, &errmsg);
1230
1231 cleanup:
1232 close(proc.in);
1233 close(proc.out);
1234 if (use_sideband)
1235 finish_async(&muxer);
1236 if (finish_command(&proc))
1237 code = -1;
1238 if (errmsg.len >0) {
1239 char *p = errmsg.buf;
1240
1241 p += errmsg.len - 1;
1242 if (*p == '\n')
1243 *p = '\0';
1244 rp_error("%s", errmsg.buf);
1245 strbuf_release(&errmsg);
1246 }
1247 sigchain_pop(SIGPIPE);
1248
1249 return code;
1250 }
1251
1252 static char *refuse_unconfigured_deny_msg =
1253 N_("By default, updating the current branch in a non-bare repository\n"
1254 "is denied, because it will make the index and work tree inconsistent\n"
1255 "with what you pushed, and will require 'git reset --hard' to match\n"
1256 "the work tree to HEAD.\n"
1257 "\n"
1258 "You can set the 'receive.denyCurrentBranch' configuration variable\n"
1259 "to 'ignore' or 'warn' in the remote repository to allow pushing into\n"
1260 "its current branch; however, this is not recommended unless you\n"
1261 "arranged to update its work tree to match what you pushed in some\n"
1262 "other way.\n"
1263 "\n"
1264 "To squelch this message and still keep the default behaviour, set\n"
1265 "'receive.denyCurrentBranch' configuration variable to 'refuse'.");
1266
1267 static void refuse_unconfigured_deny(void)
1268 {
1269 rp_error("%s", _(refuse_unconfigured_deny_msg));
1270 }
1271
1272 static char *refuse_unconfigured_deny_delete_current_msg =
1273 N_("By default, deleting the current branch is denied, because the next\n"
1274 "'git clone' won't result in any file checked out, causing confusion.\n"
1275 "\n"
1276 "You can set 'receive.denyDeleteCurrent' configuration variable to\n"
1277 "'warn' or 'ignore' in the remote repository to allow deleting the\n"
1278 "current branch, with or without a warning message.\n"
1279 "\n"
1280 "To squelch this message, you can set it to 'refuse'.");
1281
1282 static void refuse_unconfigured_deny_delete_current(void)
1283 {
1284 rp_error("%s", _(refuse_unconfigured_deny_delete_current_msg));
1285 }
1286
1287 static const struct object_id *command_singleton_iterator(void *cb_data);
1288 static int update_shallow_ref(struct command *cmd, struct shallow_info *si)
1289 {
1290 struct shallow_lock shallow_lock = SHALLOW_LOCK_INIT;
1291 struct oid_array extra = OID_ARRAY_INIT;
1292 struct check_connected_options opt = CHECK_CONNECTED_INIT;
1293 uint32_t mask = 1 << (cmd->index % 32);
1294 int i;
1295
1296 trace_printf_key(&trace_shallow,
1297 "shallow: update_shallow_ref %s\n", cmd->ref_name);
1298 for (i = 0; i < si->shallow->nr; i++)
1299 if (si->used_shallow[i] &&
1300 (si->used_shallow[i][cmd->index / 32] & mask) &&
1301 !delayed_reachability_test(si, i))
1302 oid_array_append(&extra, &si->shallow->oid[i]);
1303
1304 opt.env = tmp_objdir_env(tmp_objdir);
1305 setup_alternate_shallow(&shallow_lock, &opt.shallow_file, &extra);
1306 if (check_connected(command_singleton_iterator, cmd, &opt)) {
1307 rollback_shallow_file(the_repository, &shallow_lock);
1308 oid_array_clear(&extra);
1309 return -1;
1310 }
1311
1312 commit_shallow_file(the_repository, &shallow_lock);
1313
1314 /*
1315 * Make sure setup_alternate_shallow() for the next ref does
1316 * not lose these new roots..
1317 */
1318 for (i = 0; i < extra.nr; i++)
1319 register_shallow(the_repository, &extra.oid[i]);
1320
1321 si->shallow_ref[cmd->index] = 0;
1322 oid_array_clear(&extra);
1323 return 0;
1324 }
1325
1326 /*
1327 * NEEDSWORK: we should consolidate various implementions of "are we
1328 * on an unborn branch?" test into one, and make the unified one more
1329 * robust. !get_sha1() based check used here and elsewhere would not
1330 * allow us to tell an unborn branch from corrupt ref, for example.
1331 * For the purpose of fixing "deploy-to-update does not work when
1332 * pushing into an empty repository" issue, this should suffice for
1333 * now.
1334 */
1335 static int head_has_history(void)
1336 {
1337 struct object_id oid;
1338
1339 return !repo_get_oid(the_repository, "HEAD", &oid);
1340 }
1341
1342 static const char *push_to_deploy(unsigned char *sha1,
1343 struct strvec *env,
1344 const char *work_tree)
1345 {
1346 struct child_process child = CHILD_PROCESS_INIT;
1347
1348 strvec_pushl(&child.args, "update-index", "-q", "--ignore-submodules",
1349 "--refresh", NULL);
1350 strvec_pushv(&child.env, env->v);
1351 child.dir = work_tree;
1352 child.no_stdin = 1;
1353 child.stdout_to_stderr = 1;
1354 child.git_cmd = 1;
1355 if (run_command(&child))
1356 return "Up-to-date check failed";
1357
1358 /* run_command() does not clean up completely; reinitialize */
1359 child_process_init(&child);
1360 strvec_pushl(&child.args, "diff-files", "--quiet",
1361 "--ignore-submodules", "--", NULL);
1362 strvec_pushv(&child.env, env->v);
1363 child.dir = work_tree;
1364 child.no_stdin = 1;
1365 child.stdout_to_stderr = 1;
1366 child.git_cmd = 1;
1367 if (run_command(&child))
1368 return "Working directory has unstaged changes";
1369
1370 child_process_init(&child);
1371 strvec_pushl(&child.args, "diff-index", "--quiet", "--cached",
1372 "--ignore-submodules",
1373 /* diff-index with either HEAD or an empty tree */
1374 head_has_history() ? "HEAD" : empty_tree_oid_hex(),
1375 "--", NULL);
1376 strvec_pushv(&child.env, env->v);
1377 child.no_stdin = 1;
1378 child.no_stdout = 1;
1379 child.stdout_to_stderr = 0;
1380 child.git_cmd = 1;
1381 if (run_command(&child))
1382 return "Working directory has staged changes";
1383
1384 child_process_init(&child);
1385 strvec_pushl(&child.args, "read-tree", "-u", "-m", hash_to_hex(sha1),
1386 NULL);
1387 strvec_pushv(&child.env, env->v);
1388 child.dir = work_tree;
1389 child.no_stdin = 1;
1390 child.no_stdout = 1;
1391 child.stdout_to_stderr = 0;
1392 child.git_cmd = 1;
1393 if (run_command(&child))
1394 return "Could not update working tree to new HEAD";
1395
1396 return NULL;
1397 }
1398
1399 static const char *push_to_checkout_hook = "push-to-checkout";
1400
1401 static const char *push_to_checkout(unsigned char *hash,
1402 int *invoked_hook,
1403 struct strvec *env,
1404 const char *work_tree)
1405 {
1406 struct run_hooks_opt opt = RUN_HOOKS_OPT_INIT;
1407 opt.invoked_hook = invoked_hook;
1408
1409 strvec_pushf(env, "GIT_WORK_TREE=%s", absolute_path(work_tree));
1410 strvec_pushv(&opt.env, env->v);
1411 strvec_push(&opt.args, hash_to_hex(hash));
1412 if (run_hooks_opt(push_to_checkout_hook, &opt))
1413 return "push-to-checkout hook declined";
1414 else
1415 return NULL;
1416 }
1417
1418 static const char *update_worktree(unsigned char *sha1, const struct worktree *worktree)
1419 {
1420 const char *retval, *git_dir;
1421 struct strvec env = STRVEC_INIT;
1422 int invoked_hook;
1423
1424 if (!worktree || !worktree->path)
1425 BUG("worktree->path must be non-NULL");
1426
1427 if (worktree->is_bare)
1428 return "denyCurrentBranch = updateInstead needs a worktree";
1429 git_dir = get_worktree_git_dir(worktree);
1430
1431 strvec_pushf(&env, "GIT_DIR=%s", absolute_path(git_dir));
1432
1433 retval = push_to_checkout(sha1, &invoked_hook, &env, worktree->path);
1434 if (!invoked_hook)
1435 retval = push_to_deploy(sha1, &env, worktree->path);
1436
1437 strvec_clear(&env);
1438 return retval;
1439 }
1440
1441 static const char *update(struct command *cmd, struct shallow_info *si)
1442 {
1443 const char *name = cmd->ref_name;
1444 struct strbuf namespaced_name_buf = STRBUF_INIT;
1445 static char *namespaced_name;
1446 const char *ret;
1447 struct object_id *old_oid = &cmd->old_oid;
1448 struct object_id *new_oid = &cmd->new_oid;
1449 int do_update_worktree = 0;
1450 struct worktree **worktrees = get_worktrees();
1451 const struct worktree *worktree =
1452 find_shared_symref(worktrees, "HEAD", name);
1453
1454 /* only refs/... are allowed */
1455 if (!starts_with(name, "refs/") ||
1456 check_refname_format(name + 5, is_null_oid(new_oid) ?
1457 REFNAME_ALLOW_ONELEVEL : 0)) {
1458 rp_error("refusing to update funny ref '%s' remotely", name);
1459 ret = "funny refname";
1460 goto out;
1461 }
1462
1463 strbuf_addf(&namespaced_name_buf, "%s%s", get_git_namespace(), name);
1464 free(namespaced_name);
1465 namespaced_name = strbuf_detach(&namespaced_name_buf, NULL);
1466
1467 if (worktree && !worktree->is_bare) {
1468 switch (deny_current_branch) {
1469 case DENY_IGNORE:
1470 break;
1471 case DENY_WARN:
1472 rp_warning("updating the current branch");
1473 break;
1474 case DENY_REFUSE:
1475 case DENY_UNCONFIGURED:
1476 rp_error("refusing to update checked out branch: %s", name);
1477 if (deny_current_branch == DENY_UNCONFIGURED)
1478 refuse_unconfigured_deny();
1479 ret = "branch is currently checked out";
1480 goto out;
1481 case DENY_UPDATE_INSTEAD:
1482 /* pass -- let other checks intervene first */
1483 do_update_worktree = 1;
1484 break;
1485 }
1486 }
1487
1488 if (!is_null_oid(new_oid) && !repo_has_object_file(the_repository, new_oid)) {
1489 error("unpack should have generated %s, "
1490 "but I can't find it!", oid_to_hex(new_oid));
1491 ret = "bad pack";
1492 goto out;
1493 }
1494
1495 if (!is_null_oid(old_oid) && is_null_oid(new_oid)) {
1496 if (deny_deletes && starts_with(name, "refs/heads/")) {
1497 rp_error("denying ref deletion for %s", name);
1498 ret = "deletion prohibited";
1499 goto out;
1500 }
1501
1502 if (worktree || (head_name && !strcmp(namespaced_name, head_name))) {
1503 switch (deny_delete_current) {
1504 case DENY_IGNORE:
1505 break;
1506 case DENY_WARN:
1507 rp_warning("deleting the current branch");
1508 break;
1509 case DENY_REFUSE:
1510 case DENY_UNCONFIGURED:
1511 case DENY_UPDATE_INSTEAD:
1512 if (deny_delete_current == DENY_UNCONFIGURED)
1513 refuse_unconfigured_deny_delete_current();
1514 rp_error("refusing to delete the current branch: %s", name);
1515 ret = "deletion of the current branch prohibited";
1516 goto out;
1517 default:
1518 ret = "Invalid denyDeleteCurrent setting";
1519 goto out;
1520 }
1521 }
1522 }
1523
1524 if (deny_non_fast_forwards && !is_null_oid(new_oid) &&
1525 !is_null_oid(old_oid) &&
1526 starts_with(name, "refs/heads/")) {
1527 struct object *old_object, *new_object;
1528 struct commit *old_commit, *new_commit;
1529 int ret2;
1530
1531 old_object = parse_object(the_repository, old_oid);
1532 new_object = parse_object(the_repository, new_oid);
1533
1534 if (!old_object || !new_object ||
1535 old_object->type != OBJ_COMMIT ||
1536 new_object->type != OBJ_COMMIT) {
1537 error("bad sha1 objects for %s", name);
1538 ret = "bad ref";
1539 goto out;
1540 }
1541 old_commit = (struct commit *)old_object;
1542 new_commit = (struct commit *)new_object;
1543 ret2 = repo_in_merge_bases(the_repository, old_commit, new_commit);
1544 if (ret2 < 0)
1545 exit(128);
1546 if (!ret2) {
1547 rp_error("denying non-fast-forward %s"
1548 " (you should pull first)", name);
1549 ret = "non-fast-forward";
1550 goto out;
1551 }
1552 }
1553 if (run_update_hook(cmd)) {
1554 rp_error("hook declined to update %s", name);
1555 ret = "hook declined";
1556 goto out;
1557 }
1558
1559 if (do_update_worktree) {
1560 ret = update_worktree(new_oid->hash, worktree);
1561 if (ret)
1562 goto out;
1563 }
1564
1565 if (is_null_oid(new_oid)) {
1566 struct strbuf err = STRBUF_INIT;
1567 if (!parse_object(the_repository, old_oid)) {
1568 old_oid = NULL;
1569 if (ref_exists(name)) {
1570 rp_warning("allowing deletion of corrupt ref");
1571 } else {
1572 rp_warning("deleting a non-existent ref");
1573 cmd->did_not_exist = 1;
1574 }
1575 }
1576 if (ref_transaction_delete(transaction,
1577 namespaced_name,
1578 old_oid,
1579 0, "push", &err)) {
1580 rp_error("%s", err.buf);
1581 ret = "failed to delete";
1582 } else {
1583 ret = NULL; /* good */
1584 }
1585 strbuf_release(&err);
1586 }
1587 else {
1588 struct strbuf err = STRBUF_INIT;
1589 if (shallow_update && si->shallow_ref[cmd->index] &&
1590 update_shallow_ref(cmd, si)) {
1591 ret = "shallow error";
1592 goto out;
1593 }
1594
1595 if (ref_transaction_update(transaction,
1596 namespaced_name,
1597 new_oid, old_oid,
1598 0, "push",
1599 &err)) {
1600 rp_error("%s", err.buf);
1601 ret = "failed to update ref";
1602 } else {
1603 ret = NULL; /* good */
1604 }
1605 strbuf_release(&err);
1606 }
1607
1608 out:
1609 free_worktrees(worktrees);
1610 return ret;
1611 }
1612
1613 static void run_update_post_hook(struct command *commands)
1614 {
1615 struct command *cmd;
1616 struct child_process proc = CHILD_PROCESS_INIT;
1617 const char *hook;
1618
1619 hook = find_hook("post-update");
1620 if (!hook)
1621 return;
1622
1623 for (cmd = commands; cmd; cmd = cmd->next) {
1624 if (cmd->error_string || cmd->did_not_exist)
1625 continue;
1626 if (!proc.args.nr)
1627 strvec_push(&proc.args, hook);
1628 strvec_push(&proc.args, cmd->ref_name);
1629 }
1630 if (!proc.args.nr)
1631 return;
1632
1633 proc.no_stdin = 1;
1634 proc.stdout_to_stderr = 1;
1635 proc.err = use_sideband ? -1 : 0;
1636 proc.trace2_hook_name = "post-update";
1637
1638 if (!start_command(&proc)) {
1639 if (use_sideband)
1640 copy_to_sideband(proc.err, -1, NULL);
1641 finish_command(&proc);
1642 }
1643 }
1644
1645 static void check_aliased_update_internal(struct command *cmd,
1646 struct string_list *list,
1647 const char *dst_name, int flag)
1648 {
1649 struct string_list_item *item;
1650 struct command *dst_cmd;
1651
1652 if (!(flag & REF_ISSYMREF))
1653 return;
1654
1655 if (!dst_name) {
1656 rp_error("refusing update to broken symref '%s'", cmd->ref_name);
1657 cmd->skip_update = 1;
1658 cmd->error_string = "broken symref";
1659 return;
1660 }
1661 dst_name = strip_namespace(dst_name);
1662
1663 if (!(item = string_list_lookup(list, dst_name)))
1664 return;
1665
1666 cmd->skip_update = 1;
1667
1668 dst_cmd = (struct command *) item->util;
1669
1670 if (oideq(&cmd->old_oid, &dst_cmd->old_oid) &&
1671 oideq(&cmd->new_oid, &dst_cmd->new_oid))
1672 return;
1673
1674 dst_cmd->skip_update = 1;
1675
1676 rp_error("refusing inconsistent update between symref '%s' (%s..%s) and"
1677 " its target '%s' (%s..%s)",
1678 cmd->ref_name,
1679 repo_find_unique_abbrev(the_repository, &cmd->old_oid, DEFAULT_ABBREV),
1680 repo_find_unique_abbrev(the_repository, &cmd->new_oid, DEFAULT_ABBREV),
1681 dst_cmd->ref_name,
1682 repo_find_unique_abbrev(the_repository, &dst_cmd->old_oid, DEFAULT_ABBREV),
1683 repo_find_unique_abbrev(the_repository, &dst_cmd->new_oid, DEFAULT_ABBREV));
1684
1685 cmd->error_string = dst_cmd->error_string =
1686 "inconsistent aliased update";
1687 }
1688
1689 static void check_aliased_update(struct command *cmd, struct string_list *list)
1690 {
1691 struct strbuf buf = STRBUF_INIT;
1692 const char *dst_name;
1693 int flag;
1694
1695 strbuf_addf(&buf, "%s%s", get_git_namespace(), cmd->ref_name);
1696 dst_name = resolve_ref_unsafe(buf.buf, 0, NULL, &flag);
1697 check_aliased_update_internal(cmd, list, dst_name, flag);
1698 strbuf_release(&buf);
1699 }
1700
1701 static void check_aliased_updates(struct command *commands)
1702 {
1703 struct command *cmd;
1704 struct string_list ref_list = STRING_LIST_INIT_NODUP;
1705
1706 for (cmd = commands; cmd; cmd = cmd->next) {
1707 struct string_list_item *item =
1708 string_list_append(&ref_list, cmd->ref_name);
1709 item->util = (void *)cmd;
1710 }
1711 string_list_sort(&ref_list);
1712
1713 for (cmd = commands; cmd; cmd = cmd->next) {
1714 if (!cmd->error_string)
1715 check_aliased_update(cmd, &ref_list);
1716 }
1717
1718 string_list_clear(&ref_list, 0);
1719 }
1720
1721 static const struct object_id *command_singleton_iterator(void *cb_data)
1722 {
1723 struct command **cmd_list = cb_data;
1724 struct command *cmd = *cmd_list;
1725
1726 if (!cmd || is_null_oid(&cmd->new_oid))
1727 return NULL;
1728 *cmd_list = NULL; /* this returns only one */
1729 return &cmd->new_oid;
1730 }
1731
1732 static void set_connectivity_errors(struct command *commands,
1733 struct shallow_info *si)
1734 {
1735 struct command *cmd;
1736
1737 for (cmd = commands; cmd; cmd = cmd->next) {
1738 struct command *singleton = cmd;
1739 struct check_connected_options opt = CHECK_CONNECTED_INIT;
1740
1741 if (shallow_update && si->shallow_ref[cmd->index])
1742 /* to be checked in update_shallow_ref() */
1743 continue;
1744
1745 opt.env = tmp_objdir_env(tmp_objdir);
1746 if (!check_connected(command_singleton_iterator, &singleton,
1747 &opt))
1748 continue;
1749
1750 cmd->error_string = "missing necessary objects";
1751 }
1752 }
1753
1754 struct iterate_data {
1755 struct command *cmds;
1756 struct shallow_info *si;
1757 };
1758
1759 static const struct object_id *iterate_receive_command_list(void *cb_data)
1760 {
1761 struct iterate_data *data = cb_data;
1762 struct command **cmd_list = &data->cmds;
1763 struct command *cmd = *cmd_list;
1764
1765 for (; cmd; cmd = cmd->next) {
1766 if (shallow_update && data->si->shallow_ref[cmd->index])
1767 /* to be checked in update_shallow_ref() */
1768 continue;
1769 if (!is_null_oid(&cmd->new_oid) && !cmd->skip_update) {
1770 *cmd_list = cmd->next;
1771 return &cmd->new_oid;
1772 }
1773 }
1774 return NULL;
1775 }
1776
1777 static void reject_updates_to_hidden(struct command *commands)
1778 {
1779 struct strbuf refname_full = STRBUF_INIT;
1780 size_t prefix_len;
1781 struct command *cmd;
1782
1783 strbuf_addstr(&refname_full, get_git_namespace());
1784 prefix_len = refname_full.len;
1785
1786 for (cmd = commands; cmd; cmd = cmd->next) {
1787 if (cmd->error_string)
1788 continue;
1789
1790 strbuf_setlen(&refname_full, prefix_len);
1791 strbuf_addstr(&refname_full, cmd->ref_name);
1792
1793 if (!ref_is_hidden(cmd->ref_name, refname_full.buf, &hidden_refs))
1794 continue;
1795 if (is_null_oid(&cmd->new_oid))
1796 cmd->error_string = "deny deleting a hidden ref";
1797 else
1798 cmd->error_string = "deny updating a hidden ref";
1799 }
1800
1801 strbuf_release(&refname_full);
1802 }
1803
1804 static int should_process_cmd(struct command *cmd)
1805 {
1806 return !cmd->error_string && !cmd->skip_update;
1807 }
1808
1809 static void BUG_if_skipped_connectivity_check(struct command *commands,
1810 struct shallow_info *si)
1811 {
1812 struct command *cmd;
1813
1814 for (cmd = commands; cmd; cmd = cmd->next) {
1815 if (should_process_cmd(cmd) && si->shallow_ref[cmd->index])
1816 bug("connectivity check has not been run on ref %s",
1817 cmd->ref_name);
1818 }
1819 BUG_if_bug("connectivity check skipped???");
1820 }
1821
1822 static void execute_commands_non_atomic(struct command *commands,
1823 struct shallow_info *si)
1824 {
1825 struct command *cmd;
1826 struct strbuf err = STRBUF_INIT;
1827
1828 for (cmd = commands; cmd; cmd = cmd->next) {
1829 if (!should_process_cmd(cmd) || cmd->run_proc_receive)
1830 continue;
1831
1832 transaction = ref_transaction_begin(&err);
1833 if (!transaction) {
1834 rp_error("%s", err.buf);
1835 strbuf_reset(&err);
1836 cmd->error_string = "transaction failed to start";
1837 continue;
1838 }
1839
1840 cmd->error_string = update(cmd, si);
1841
1842 if (!cmd->error_string
1843 && ref_transaction_commit(transaction, &err)) {
1844 rp_error("%s", err.buf);
1845 strbuf_reset(&err);
1846 cmd->error_string = "failed to update ref";
1847 }
1848 ref_transaction_free(transaction);
1849 }
1850 strbuf_release(&err);
1851 }
1852
1853 static void execute_commands_atomic(struct command *commands,
1854 struct shallow_info *si)
1855 {
1856 struct command *cmd;
1857 struct strbuf err = STRBUF_INIT;
1858 const char *reported_error = "atomic push failure";
1859
1860 transaction = ref_transaction_begin(&err);
1861 if (!transaction) {
1862 rp_error("%s", err.buf);
1863 strbuf_reset(&err);
1864 reported_error = "transaction failed to start";
1865 goto failure;
1866 }
1867
1868 for (cmd = commands; cmd; cmd = cmd->next) {
1869 if (!should_process_cmd(cmd) || cmd->run_proc_receive)
1870 continue;
1871
1872 cmd->error_string = update(cmd, si);
1873
1874 if (cmd->error_string)
1875 goto failure;
1876 }
1877
1878 if (ref_transaction_commit(transaction, &err)) {
1879 rp_error("%s", err.buf);
1880 reported_error = "atomic transaction failed";
1881 goto failure;
1882 }
1883 goto cleanup;
1884
1885 failure:
1886 for (cmd = commands; cmd; cmd = cmd->next)
1887 if (!cmd->error_string)
1888 cmd->error_string = reported_error;
1889
1890 cleanup:
1891 ref_transaction_free(transaction);
1892 strbuf_release(&err);
1893 }
1894
1895 static void execute_commands(struct command *commands,
1896 const char *unpacker_error,
1897 struct shallow_info *si,
1898 const struct string_list *push_options)
1899 {
1900 struct check_connected_options opt = CHECK_CONNECTED_INIT;
1901 struct command *cmd;
1902 struct iterate_data data;
1903 struct async muxer;
1904 int err_fd = 0;
1905 int run_proc_receive = 0;
1906
1907 if (unpacker_error) {
1908 for (cmd = commands; cmd; cmd = cmd->next)
1909 cmd->error_string = "unpacker error";
1910 return;
1911 }
1912
1913 if (use_sideband) {
1914 memset(&muxer, 0, sizeof(muxer));
1915 muxer.proc = copy_to_sideband;
1916 muxer.in = -1;
1917 if (!start_async(&muxer))
1918 err_fd = muxer.in;
1919 /* ...else, continue without relaying sideband */
1920 }
1921
1922 data.cmds = commands;
1923 data.si = si;
1924 opt.err_fd = err_fd;
1925 opt.progress = err_fd && !quiet;
1926 opt.env = tmp_objdir_env(tmp_objdir);
1927 opt.exclude_hidden_refs_section = "receive";
1928
1929 if (check_connected(iterate_receive_command_list, &data, &opt))
1930 set_connectivity_errors(commands, si);
1931
1932 if (use_sideband)
1933 finish_async(&muxer);
1934
1935 reject_updates_to_hidden(commands);
1936
1937 /*
1938 * Try to find commands that have special prefix in their reference names,
1939 * and mark them to run an external "proc-receive" hook later.
1940 */
1941 if (proc_receive_ref) {
1942 for (cmd = commands; cmd; cmd = cmd->next) {
1943 if (!should_process_cmd(cmd))
1944 continue;
1945
1946 if (proc_receive_ref_matches(cmd)) {
1947 cmd->run_proc_receive = RUN_PROC_RECEIVE_SCHEDULED;
1948 run_proc_receive = 1;
1949 }
1950 }
1951 }
1952
1953 if (run_receive_hook(commands, "pre-receive", 0, push_options)) {
1954 for (cmd = commands; cmd; cmd = cmd->next) {
1955 if (!cmd->error_string)
1956 cmd->error_string = "pre-receive hook declined";
1957 }
1958 return;
1959 }
1960
1961 /*
1962 * If there is no command ready to run, should return directly to destroy
1963 * temporary data in the quarantine area.
1964 */
1965 for (cmd = commands; cmd && cmd->error_string; cmd = cmd->next)
1966 ; /* nothing */
1967 if (!cmd)
1968 return;
1969
1970 /*
1971 * Now we'll start writing out refs, which means the objects need
1972 * to be in their final positions so that other processes can see them.
1973 */
1974 if (tmp_objdir_migrate(tmp_objdir) < 0) {
1975 for (cmd = commands; cmd; cmd = cmd->next) {
1976 if (!cmd->error_string)
1977 cmd->error_string = "unable to migrate objects to permanent storage";
1978 }
1979 return;
1980 }
1981 tmp_objdir = NULL;
1982
1983 check_aliased_updates(commands);
1984
1985 free(head_name_to_free);
1986 head_name = head_name_to_free = resolve_refdup("HEAD", 0, NULL, NULL);
1987
1988 if (run_proc_receive &&
1989 run_proc_receive_hook(commands, push_options))
1990 for (cmd = commands; cmd; cmd = cmd->next)
1991 if (!cmd->error_string &&
1992 !(cmd->run_proc_receive & RUN_PROC_RECEIVE_RETURNED) &&
1993 (cmd->run_proc_receive || use_atomic))
1994 cmd->error_string = "fail to run proc-receive hook";
1995
1996 if (use_atomic)
1997 execute_commands_atomic(commands, si);
1998 else
1999 execute_commands_non_atomic(commands, si);
2000
2001 if (shallow_update)
2002 BUG_if_skipped_connectivity_check(commands, si);
2003 }
2004
2005 static struct command **queue_command(struct command **tail,
2006 const char *line,
2007 int linelen)
2008 {
2009 struct object_id old_oid, new_oid;
2010 struct command *cmd;
2011 const char *refname;
2012 int reflen;
2013 const char *p;
2014
2015 if (parse_oid_hex(line, &old_oid, &p) ||
2016 *p++ != ' ' ||
2017 parse_oid_hex(p, &new_oid, &p) ||
2018 *p++ != ' ')
2019 die("protocol error: expected old/new/ref, got '%s'", line);
2020
2021 refname = p;
2022 reflen = linelen - (p - line);
2023 FLEX_ALLOC_MEM(cmd, ref_name, refname, reflen);
2024 oidcpy(&cmd->old_oid, &old_oid);
2025 oidcpy(&cmd->new_oid, &new_oid);
2026 *tail = cmd;
2027 return &cmd->next;
2028 }
2029
2030 static void free_commands(struct command *commands)
2031 {
2032 while (commands) {
2033 struct command *next = commands->next;
2034
2035 free(commands);
2036 commands = next;
2037 }
2038 }
2039
2040 static void queue_commands_from_cert(struct command **tail,
2041 struct strbuf *push_cert)
2042 {
2043 const char *boc, *eoc;
2044
2045 if (*tail)
2046 die("protocol error: got both push certificate and unsigned commands");
2047
2048 boc = strstr(push_cert->buf, "\n\n");
2049 if (!boc)
2050 die("malformed push certificate %.*s", 100, push_cert->buf);
2051 else
2052 boc += 2;
2053 eoc = push_cert->buf + parse_signed_buffer(push_cert->buf, push_cert->len);
2054
2055 while (boc < eoc) {
2056 const char *eol = memchr(boc, '\n', eoc - boc);
2057 tail = queue_command(tail, boc, eol ? eol - boc : eoc - boc);
2058 boc = eol ? eol + 1 : eoc;
2059 }
2060 }
2061
2062 static struct command *read_head_info(struct packet_reader *reader,
2063 struct oid_array *shallow)
2064 {
2065 struct command *commands = NULL;
2066 struct command **p = &commands;
2067 for (;;) {
2068 int linelen;
2069
2070 if (packet_reader_read(reader) != PACKET_READ_NORMAL)
2071 break;
2072
2073 if (reader->pktlen > 8 && starts_with(reader->line, "shallow ")) {
2074 struct object_id oid;
2075 if (get_oid_hex(reader->line + 8, &oid))
2076 die("protocol error: expected shallow sha, got '%s'",
2077 reader->line + 8);
2078 oid_array_append(shallow, &oid);
2079 continue;
2080 }
2081
2082 linelen = strlen(reader->line);
2083 if (linelen < reader->pktlen) {
2084 const char *feature_list = reader->line + linelen + 1;
2085 const char *hash = NULL;
2086 const char *client_sid;
2087 size_t len = 0;
2088 if (parse_feature_request(feature_list, "report-status"))
2089 report_status = 1;
2090 if (parse_feature_request(feature_list, "report-status-v2"))
2091 report_status_v2 = 1;
2092 if (parse_feature_request(feature_list, "side-band-64k"))
2093 use_sideband = LARGE_PACKET_MAX;
2094 if (parse_feature_request(feature_list, "quiet"))
2095 quiet = 1;
2096 if (advertise_atomic_push
2097 && parse_feature_request(feature_list, "atomic"))
2098 use_atomic = 1;
2099 if (advertise_push_options
2100 && parse_feature_request(feature_list, "push-options"))
2101 use_push_options = 1;
2102 hash = parse_feature_value(feature_list, "object-format", &len, NULL);
2103 if (!hash) {
2104 hash = hash_algos[GIT_HASH_SHA1].name;
2105 len = strlen(hash);
2106 }
2107 if (xstrncmpz(the_hash_algo->name, hash, len))
2108 die("error: unsupported object format '%s'", hash);
2109 client_sid = parse_feature_value(feature_list, "session-id", &len, NULL);
2110 if (client_sid) {
2111 char *sid = xstrndup(client_sid, len);
2112 trace2_data_string("transfer", NULL, "client-sid", client_sid);
2113 free(sid);
2114 }
2115 }
2116
2117 if (!strcmp(reader->line, "push-cert")) {
2118 int true_flush = 0;
2119 int saved_options = reader->options;
2120 reader->options &= ~PACKET_READ_CHOMP_NEWLINE;
2121
2122 for (;;) {
2123 packet_reader_read(reader);
2124 if (reader->status == PACKET_READ_FLUSH) {
2125 true_flush = 1;
2126 break;
2127 }
2128 if (reader->status != PACKET_READ_NORMAL) {
2129 die("protocol error: got an unexpected packet");
2130 }
2131 if (!strcmp(reader->line, "push-cert-end\n"))
2132 break; /* end of cert */
2133 strbuf_addstr(&push_cert, reader->line);
2134 }
2135 reader->options = saved_options;
2136
2137 if (true_flush)
2138 break;
2139 continue;
2140 }
2141
2142 p = queue_command(p, reader->line, linelen);
2143 }
2144
2145 if (push_cert.len)
2146 queue_commands_from_cert(p, &push_cert);
2147
2148 return commands;
2149 }
2150
2151 static void read_push_options(struct packet_reader *reader,
2152 struct string_list *options)
2153 {
2154 while (1) {
2155 if (packet_reader_read(reader) != PACKET_READ_NORMAL)
2156 break;
2157
2158 string_list_append(options, reader->line);
2159 }
2160 }
2161
2162 static const char *parse_pack_header(struct pack_header *hdr)
2163 {
2164 switch (read_pack_header(0, hdr)) {
2165 case PH_ERROR_EOF:
2166 return "eof before pack header was fully read";
2167
2168 case PH_ERROR_PACK_SIGNATURE:
2169 return "protocol error (pack signature mismatch detected)";
2170
2171 case PH_ERROR_PROTOCOL:
2172 return "protocol error (pack version unsupported)";
2173
2174 default:
2175 return "unknown error in parse_pack_header";
2176
2177 case 0:
2178 return NULL;
2179 }
2180 }
2181
2182 static struct tempfile *pack_lockfile;
2183
2184 static void push_header_arg(struct strvec *args, struct pack_header *hdr)
2185 {
2186 strvec_pushf(args, "--pack_header=%"PRIu32",%"PRIu32,
2187 ntohl(hdr->hdr_version), ntohl(hdr->hdr_entries));
2188 }
2189
2190 static const char *unpack(int err_fd, struct shallow_info *si)
2191 {
2192 struct pack_header hdr;
2193 const char *hdr_err;
2194 int status;
2195 struct child_process child = CHILD_PROCESS_INIT;
2196 int fsck_objects = (receive_fsck_objects >= 0
2197 ? receive_fsck_objects
2198 : transfer_fsck_objects >= 0
2199 ? transfer_fsck_objects
2200 : 0);
2201
2202 hdr_err = parse_pack_header(&hdr);
2203 if (hdr_err) {
2204 if (err_fd > 0)
2205 close(err_fd);
2206 return hdr_err;
2207 }
2208
2209 if (si->nr_ours || si->nr_theirs) {
2210 alt_shallow_file = setup_temporary_shallow(si->shallow);
2211 strvec_push(&child.args, "--shallow-file");
2212 strvec_push(&child.args, alt_shallow_file);
2213 }
2214
2215 tmp_objdir = tmp_objdir_create("incoming");
2216 if (!tmp_objdir) {
2217 if (err_fd > 0)
2218 close(err_fd);
2219 return "unable to create temporary object directory";
2220 }
2221 strvec_pushv(&child.env, tmp_objdir_env(tmp_objdir));
2222
2223 /*
2224 * Normally we just pass the tmp_objdir environment to the child
2225 * processes that do the heavy lifting, but we may need to see these
2226 * objects ourselves to set up shallow information.
2227 */
2228 tmp_objdir_add_as_alternate(tmp_objdir);
2229
2230 if (ntohl(hdr.hdr_entries) < unpack_limit) {
2231 strvec_push(&child.args, "unpack-objects");
2232 push_header_arg(&child.args, &hdr);
2233 if (quiet)
2234 strvec_push(&child.args, "-q");
2235 if (fsck_objects)
2236 strvec_pushf(&child.args, "--strict%s",
2237 fsck_msg_types.buf);
2238 if (max_input_size)
2239 strvec_pushf(&child.args, "--max-input-size=%"PRIuMAX,
2240 (uintmax_t)max_input_size);
2241 child.no_stdout = 1;
2242 child.err = err_fd;
2243 child.git_cmd = 1;
2244 status = run_command(&child);
2245 if (status)
2246 return "unpack-objects abnormal exit";
2247 } else {
2248 char hostname[HOST_NAME_MAX + 1];
2249 char *lockfile;
2250
2251 strvec_pushl(&child.args, "index-pack", "--stdin", NULL);
2252 push_header_arg(&child.args, &hdr);
2253
2254 if (xgethostname(hostname, sizeof(hostname)))
2255 xsnprintf(hostname, sizeof(hostname), "localhost");
2256 strvec_pushf(&child.args,
2257 "--keep=receive-pack %"PRIuMAX" on %s",
2258 (uintmax_t)getpid(),
2259 hostname);
2260
2261 if (!quiet && err_fd)
2262 strvec_push(&child.args, "--show-resolving-progress");
2263 if (use_sideband)
2264 strvec_push(&child.args, "--report-end-of-input");
2265 if (fsck_objects)
2266 strvec_pushf(&child.args, "--strict%s",
2267 fsck_msg_types.buf);
2268 if (!reject_thin)
2269 strvec_push(&child.args, "--fix-thin");
2270 if (max_input_size)
2271 strvec_pushf(&child.args, "--max-input-size=%"PRIuMAX,
2272 (uintmax_t)max_input_size);
2273 child.out = -1;
2274 child.err = err_fd;
2275 child.git_cmd = 1;
2276 status = start_command(&child);
2277 if (status)
2278 return "index-pack fork failed";
2279
2280 lockfile = index_pack_lockfile(child.out, NULL);
2281 if (lockfile) {
2282 pack_lockfile = register_tempfile(lockfile);
2283 free(lockfile);
2284 }
2285 close(child.out);
2286
2287 status = finish_command(&child);
2288 if (status)
2289 return "index-pack abnormal exit";
2290 reprepare_packed_git(the_repository);
2291 }
2292 return NULL;
2293 }
2294
2295 static const char *unpack_with_sideband(struct shallow_info *si)
2296 {
2297 struct async muxer;
2298 const char *ret;
2299
2300 if (!use_sideband)
2301 return unpack(0, si);
2302
2303 use_keepalive = KEEPALIVE_AFTER_NUL;
2304 memset(&muxer, 0, sizeof(muxer));
2305 muxer.proc = copy_to_sideband;
2306 muxer.in = -1;
2307 if (start_async(&muxer))
2308 return NULL;
2309
2310 ret = unpack(muxer.in, si);
2311
2312 finish_async(&muxer);
2313 return ret;
2314 }
2315
2316 static void prepare_shallow_update(struct shallow_info *si)
2317 {
2318 int i, j, k, bitmap_size = DIV_ROUND_UP(si->ref->nr, 32);
2319
2320 ALLOC_ARRAY(si->used_shallow, si->shallow->nr);
2321 assign_shallow_commits_to_refs(si, si->used_shallow, NULL);
2322
2323 CALLOC_ARRAY(si->need_reachability_test, si->shallow->nr);
2324 CALLOC_ARRAY(si->reachable, si->shallow->nr);
2325 CALLOC_ARRAY(si->shallow_ref, si->ref->nr);
2326
2327 for (i = 0; i < si->nr_ours; i++)
2328 si->need_reachability_test[si->ours[i]] = 1;
2329
2330 for (i = 0; i < si->shallow->nr; i++) {
2331 if (!si->used_shallow[i])
2332 continue;
2333 for (j = 0; j < bitmap_size; j++) {
2334 if (!si->used_shallow[i][j])
2335 continue;
2336 si->need_reachability_test[i]++;
2337 for (k = 0; k < 32; k++)
2338 if (si->used_shallow[i][j] & (1U << k))
2339 si->shallow_ref[j * 32 + k]++;
2340 }
2341
2342 /*
2343 * true for those associated with some refs and belong
2344 * in "ours" list aka "step 7 not done yet"
2345 */
2346 si->need_reachability_test[i] =
2347 si->need_reachability_test[i] > 1;
2348 }
2349
2350 /*
2351 * keep hooks happy by forcing a temporary shallow file via
2352 * env variable because we can't add --shallow-file to every
2353 * command. check_connected() will be done with
2354 * true .git/shallow though.
2355 */
2356 setenv(GIT_SHALLOW_FILE_ENVIRONMENT, alt_shallow_file, 1);
2357 }
2358
2359 static void update_shallow_info(struct command *commands,
2360 struct shallow_info *si,
2361 struct oid_array *ref)
2362 {
2363 struct command *cmd;
2364 int *ref_status;
2365 remove_nonexistent_theirs_shallow(si);
2366 if (!si->nr_ours && !si->nr_theirs) {
2367 shallow_update = 0;
2368 return;
2369 }
2370
2371 for (cmd = commands; cmd; cmd = cmd->next) {
2372 if (is_null_oid(&cmd->new_oid))
2373 continue;
2374 oid_array_append(ref, &cmd->new_oid);
2375 cmd->index = ref->nr - 1;
2376 }
2377 si->ref = ref;
2378
2379 if (shallow_update) {
2380 prepare_shallow_update(si);
2381 return;
2382 }
2383
2384 ALLOC_ARRAY(ref_status, ref->nr);
2385 assign_shallow_commits_to_refs(si, NULL, ref_status);
2386 for (cmd = commands; cmd; cmd = cmd->next) {
2387 if (is_null_oid(&cmd->new_oid))
2388 continue;
2389 if (ref_status[cmd->index]) {
2390 cmd->error_string = "shallow update not allowed";
2391 cmd->skip_update = 1;
2392 }
2393 }
2394 free(ref_status);
2395 }
2396
2397 static void report(struct command *commands, const char *unpack_status)
2398 {
2399 struct command *cmd;
2400 struct strbuf buf = STRBUF_INIT;
2401
2402 packet_buf_write(&buf, "unpack %s\n",
2403 unpack_status ? unpack_status : "ok");
2404 for (cmd = commands; cmd; cmd = cmd->next) {
2405 if (!cmd->error_string)
2406 packet_buf_write(&buf, "ok %s\n",
2407 cmd->ref_name);
2408 else
2409 packet_buf_write(&buf, "ng %s %s\n",
2410 cmd->ref_name, cmd->error_string);
2411 }
2412 packet_buf_flush(&buf);
2413
2414 if (use_sideband)
2415 send_sideband(1, 1, buf.buf, buf.len, use_sideband);
2416 else
2417 write_or_die(1, buf.buf, buf.len);
2418 strbuf_release(&buf);
2419 }
2420
2421 static void report_v2(struct command *commands, const char *unpack_status)
2422 {
2423 struct command *cmd;
2424 struct strbuf buf = STRBUF_INIT;
2425 struct ref_push_report *report;
2426
2427 packet_buf_write(&buf, "unpack %s\n",
2428 unpack_status ? unpack_status : "ok");
2429 for (cmd = commands; cmd; cmd = cmd->next) {
2430 int count = 0;
2431
2432 if (cmd->error_string) {
2433 packet_buf_write(&buf, "ng %s %s\n",
2434 cmd->ref_name,
2435 cmd->error_string);
2436 continue;
2437 }
2438 packet_buf_write(&buf, "ok %s\n",
2439 cmd->ref_name);
2440 for (report = cmd->report; report; report = report->next) {
2441 if (count++ > 0)
2442 packet_buf_write(&buf, "ok %s\n",
2443 cmd->ref_name);
2444 if (report->ref_name)
2445 packet_buf_write(&buf, "option refname %s\n",
2446 report->ref_name);
2447 if (report->old_oid)
2448 packet_buf_write(&buf, "option old-oid %s\n",
2449 oid_to_hex(report->old_oid));
2450 if (report->new_oid)
2451 packet_buf_write(&buf, "option new-oid %s\n",
2452 oid_to_hex(report->new_oid));
2453 if (report->forced_update)
2454 packet_buf_write(&buf, "option forced-update\n");
2455 }
2456 }
2457 packet_buf_flush(&buf);
2458
2459 if (use_sideband)
2460 send_sideband(1, 1, buf.buf, buf.len, use_sideband);
2461 else
2462 write_or_die(1, buf.buf, buf.len);
2463 strbuf_release(&buf);
2464 }
2465
2466 static int delete_only(struct command *commands)
2467 {
2468 struct command *cmd;
2469 for (cmd = commands; cmd; cmd = cmd->next) {
2470 if (!is_null_oid(&cmd->new_oid))
2471 return 0;
2472 }
2473 return 1;
2474 }
2475
2476 int cmd_receive_pack(int argc, const char **argv, const char *prefix)
2477 {
2478 int advertise_refs = 0;
2479 struct command *commands;
2480 struct oid_array shallow = OID_ARRAY_INIT;
2481 struct oid_array ref = OID_ARRAY_INIT;
2482 struct shallow_info si;
2483 struct packet_reader reader;
2484
2485 struct option options[] = {
2486 OPT__QUIET(&quiet, N_("quiet")),
2487 OPT_HIDDEN_BOOL(0, "stateless-rpc", &stateless_rpc, NULL),
2488 OPT_HIDDEN_BOOL(0, "http-backend-info-refs", &advertise_refs, NULL),
2489 OPT_ALIAS(0, "advertise-refs", "http-backend-info-refs"),
2490 OPT_HIDDEN_BOOL(0, "reject-thin-pack-for-testing", &reject_thin, NULL),
2491 OPT_END()
2492 };
2493
2494 packet_trace_identity("receive-pack");
2495
2496 argc = parse_options(argc, argv, prefix, options, receive_pack_usage, 0);
2497
2498 if (argc > 1)
2499 usage_msg_opt(_("too many arguments"), receive_pack_usage, options);
2500 if (argc == 0)
2501 usage_msg_opt(_("you must specify a directory"), receive_pack_usage, options);
2502
2503 service_dir = argv[0];
2504
2505 setup_path();
2506
2507 if (!enter_repo(service_dir, 0))
2508 die("'%s' does not appear to be a git repository", service_dir);
2509
2510 git_config(receive_pack_config, NULL);
2511 if (cert_nonce_seed)
2512 push_cert_nonce = prepare_push_cert_nonce(service_dir, time(NULL));
2513
2514 if (0 <= receive_unpack_limit)
2515 unpack_limit = receive_unpack_limit;
2516 else if (0 <= transfer_unpack_limit)
2517 unpack_limit = transfer_unpack_limit;
2518
2519 switch (determine_protocol_version_server()) {
2520 case protocol_v2:
2521 /*
2522 * push support for protocol v2 has not been implemented yet,
2523 * so ignore the request to use v2 and fallback to using v0.
2524 */
2525 break;
2526 case protocol_v1:
2527 /*
2528 * v1 is just the original protocol with a version string,
2529 * so just fall through after writing the version string.
2530 */
2531 if (advertise_refs || !stateless_rpc)
2532 packet_write_fmt(1, "version 1\n");
2533
2534 /* fallthrough */
2535 case protocol_v0:
2536 break;
2537 case protocol_unknown_version:
2538 BUG("unknown protocol version");
2539 }
2540
2541 if (advertise_refs || !stateless_rpc) {
2542 write_head_info();
2543 }
2544 if (advertise_refs)
2545 return 0;
2546
2547 packet_reader_init(&reader, 0, NULL, 0,
2548 PACKET_READ_CHOMP_NEWLINE |
2549 PACKET_READ_DIE_ON_ERR_PACKET);
2550
2551 if ((commands = read_head_info(&reader, &shallow))) {
2552 const char *unpack_status = NULL;
2553 struct string_list push_options = STRING_LIST_INIT_DUP;
2554
2555 if (use_push_options)
2556 read_push_options(&reader, &push_options);
2557 if (!check_cert_push_options(&push_options)) {
2558 struct command *cmd;
2559 for (cmd = commands; cmd; cmd = cmd->next)
2560 cmd->error_string = "inconsistent push options";
2561 }
2562
2563 prepare_shallow_info(&si, &shallow);
2564 if (!si.nr_ours && !si.nr_theirs)
2565 shallow_update = 0;
2566 if (!delete_only(commands)) {
2567 unpack_status = unpack_with_sideband(&si);
2568 update_shallow_info(commands, &si, &ref);
2569 }
2570 use_keepalive = KEEPALIVE_ALWAYS;
2571 execute_commands(commands, unpack_status, &si,
2572 &push_options);
2573 delete_tempfile(&pack_lockfile);
2574 sigchain_push(SIGPIPE, SIG_IGN);
2575 if (report_status_v2)
2576 report_v2(commands, unpack_status);
2577 else if (report_status)
2578 report(commands, unpack_status);
2579 sigchain_pop(SIGPIPE);
2580 run_receive_hook(commands, "post-receive", 1,
2581 &push_options);
2582 run_update_post_hook(commands);
2583 free_commands(commands);
2584 string_list_clear(&push_options, 0);
2585 if (auto_gc) {
2586 struct child_process proc = CHILD_PROCESS_INIT;
2587
2588 if (prepare_auto_maintenance(1, &proc)) {
2589 proc.no_stdin = 1;
2590 proc.stdout_to_stderr = 1;
2591 proc.err = use_sideband ? -1 : 0;
2592
2593 if (!start_command(&proc)) {
2594 if (use_sideband)
2595 copy_to_sideband(proc.err, -1, NULL);
2596 finish_command(&proc);
2597 }
2598 }
2599 }
2600 if (auto_update_server_info)
2601 update_server_info(0);
2602 clear_shallow_info(&si);
2603 }
2604 if (use_sideband)
2605 packet_flush(1);
2606 oid_array_clear(&shallow);
2607 oid_array_clear(&ref);
2608 strvec_clear(&hidden_refs);
2609 free((void *)push_cert_nonce);
2610 return 0;
2611 }
The Best VCS Around