builtin/receive-pack.c

   1 #include "builtin.h"
   2 #include "pack.h"
   3 #include "refs.h"
   4 #include "pkt-line.h"
   5 #include "sideband.h"
   6 #include "run-command.h"
   7 #include "exec_cmd.h"
   8 #include "commit.h"
   9 #include "object.h"
  10 #include "remote.h"
  11 #include "connect.h"
  12 #include "transport.h"
  13 #include "string-list.h"
  14 #include "sha1-array.h"
  15 #include "connected.h"
  16 #include "argv-array.h"
  17 #include "version.h"
  18
  19 static const char receive_pack_usage[] = "git receive-pack <git-dir>";
  20
  21 enum deny_action {
  22         DENY_UNCONFIGURED,
  23         DENY_IGNORE,
  24         DENY_WARN,
  25         DENY_REFUSE
  26 };
  27
  28 static int deny_deletes;
  29 static int deny_non_fast_forwards;
  30 static enum deny_action deny_current_branch = DENY_UNCONFIGURED;
  31 static enum deny_action deny_delete_current = DENY_UNCONFIGURED;
  32 static int receive_fsck_objects = -1;
  33 static int transfer_fsck_objects = -1;
  34 static int receive_unpack_limit = -1;
  35 static int transfer_unpack_limit = -1;
  36 static int unpack_limit = 100;
  37 static int report_status;
  38 static int use_sideband;
  39 static int quiet;
  40 static int prefer_ofs_delta = 1;
  41 static int auto_update_server_info;
  42 static int auto_gc = 1;
  43 static int fix_thin = 1;
  44 static const char *head_name;
  45 static void *head_name_to_free;
  46 static int sent_capabilities;
  47 static int shallow_update;
  48 static const char *alt_shallow_file;
  49
  50 static enum deny_action parse_deny_action(const char *var, const char *value)
  51 {
  52         if (value) {
  53                 if (!strcasecmp(value, "ignore"))
  54                         return DENY_IGNORE;
  55                 if (!strcasecmp(value, "warn"))
  56                         return DENY_WARN;
  57                 if (!strcasecmp(value, "refuse"))
  58                         return DENY_REFUSE;
  59         }
  60         if (git_config_bool(var, value))
  61                 return DENY_REFUSE;
  62         return DENY_IGNORE;
  63 }
  64
  65 static int receive_pack_config(const char *var, const char *value, void *cb)
  66 {
  67         int status = parse_hide_refs_config(var, value, "receive");
  68
  69         if (status)
  70                 return status;
  71
  72         if (strcmp(var, "receive.denydeletes") == 0) {
  73                 deny_deletes = git_config_bool(var, value);
  74                 return 0;
  75         }
  76
  77         if (strcmp(var, "receive.denynonfastforwards") == 0) {
  78                 deny_non_fast_forwards = git_config_bool(var, value);
  79                 return 0;
  80         }
  81
  82         if (strcmp(var, "receive.unpacklimit") == 0) {
  83                 receive_unpack_limit = git_config_int(var, value);
  84                 return 0;
  85         }
  86
  87         if (strcmp(var, "transfer.unpacklimit") == 0) {
  88                 transfer_unpack_limit = git_config_int(var, value);
  89                 return 0;
  90         }
  91
  92         if (strcmp(var, "receive.fsckobjects") == 0) {
  93                 receive_fsck_objects = git_config_bool(var, value);
  94                 return 0;
  95         }
  96
  97         if (strcmp(var, "transfer.fsckobjects") == 0) {
  98                 transfer_fsck_objects = git_config_bool(var, value);
  99                 return 0;
 100         }
 101
 102         if (!strcmp(var, "receive.denycurrentbranch")) {
 103                 deny_current_branch = parse_deny_action(var, value);
 104                 return 0;
 105         }
 106
 107         if (strcmp(var, "receive.denydeletecurrent") == 0) {
 108                 deny_delete_current = parse_deny_action(var, value);
 109                 return 0;
 110         }
 111
 112         if (strcmp(var, "repack.usedeltabaseoffset") == 0) {
 113                 prefer_ofs_delta = git_config_bool(var, value);
 114                 return 0;
 115         }
 116
 117         if (strcmp(var, "receive.updateserverinfo") == 0) {
 118                 auto_update_server_info = git_config_bool(var, value);
 119                 return 0;
 120         }
 121
 122         if (strcmp(var, "receive.autogc") == 0) {
 123                 auto_gc = git_config_bool(var, value);
 124                 return 0;
 125         }
 126
 127         if (strcmp(var, "receive.shallowupdate") == 0) {
 128                 shallow_update = git_config_bool(var, value);
 129                 return 0;
 130         }
 131
 132         return git_default_config(var, value, cb);
 133 }
 134
 135 static void show_ref(const char *path, const unsigned char *sha1)
 136 {
 137         if (ref_is_hidden(path))
 138                 return;
 139
 140         if (sent_capabilities)
 141                 packet_write(1, "%s %s\n", sha1_to_hex(sha1), path);
 142         else
 143                 packet_write(1, "%s %s%c%s%s agent=%s\n",
 144                              sha1_to_hex(sha1), path, 0,
 145                              " report-status delete-refs side-band-64k quiet",
 146                              prefer_ofs_delta ? " ofs-delta" : "",
 147                              git_user_agent_sanitized());
 148         sent_capabilities = 1;
 149 }
 150
 151 static int show_ref_cb(const char *path, const unsigned char *sha1, int flag, void *unused)
 152 {
 153         path = strip_namespace(path);
 154         /*
 155          * Advertise refs outside our current namespace as ".have"
 156          * refs, so that the client can use them to minimize data
 157          * transfer but will otherwise ignore them. This happens to
 158          * cover ".have" that are thrown in by add_one_alternate_ref()
 159          * to mark histories that are complete in our alternates as
 160          * well.
 161          */
 162         if (!path)
 163                 path = ".have";
 164         show_ref(path, sha1);
 165         return 0;
 166 }
 167
 168 static void show_one_alternate_sha1(const unsigned char sha1[20], void *unused)
 169 {
 170         show_ref(".have", sha1);
 171 }
 172
 173 static void collect_one_alternate_ref(const struct ref *ref, void *data)
 174 {
 175         struct sha1_array *sa = data;
 176         sha1_array_append(sa, ref->old_sha1);
 177 }
 178
 179 static void write_head_info(void)
 180 {
 181         struct sha1_array sa = SHA1_ARRAY_INIT;
 182         for_each_alternate_ref(collect_one_alternate_ref, &sa);
 183         sha1_array_for_each_unique(&sa, show_one_alternate_sha1, NULL);
 184         sha1_array_clear(&sa);
 185         for_each_ref(show_ref_cb, NULL);
 186         if (!sent_capabilities)
 187                 show_ref("capabilities^{}", null_sha1);
 188
 189         advertise_shallow_grafts(1);
 190
 191         /* EOF */
 192         packet_flush(1);
 193 }
 194
 195 struct command {
 196         struct command *next;
 197         const char *error_string;
 198         unsigned int skip_update:1,
 199                      did_not_exist:1;
 200         int index;
 201         unsigned char old_sha1[20];
 202         unsigned char new_sha1[20];
 203         char ref_name[FLEX_ARRAY]; /* more */
 204 };
 205
 206 static void rp_error(const char *err, ...) __attribute__((format (printf, 1, 2)));
 207 static void rp_warning(const char *err, ...) __attribute__((format (printf, 1, 2)));
 208
 209 static void report_message(const char *prefix, const char *err, va_list params)
 210 {
 211         int sz = strlen(prefix);
 212         char msg[4096];
 213
 214         strncpy(msg, prefix, sz);
 215         sz += vsnprintf(msg + sz, sizeof(msg) - sz, err, params);
 216         if (sz > (sizeof(msg) - 1))
 217                 sz = sizeof(msg) - 1;
 218         msg[sz++] = '\n';
 219
 220         if (use_sideband)
 221                 send_sideband(1, 2, msg, sz, use_sideband);
 222         else
 223                 xwrite(2, msg, sz);
 224 }
 225
 226 static void rp_warning(const char *err, ...)
 227 {
 228         va_list params;
 229         va_start(params, err);
 230         report_message("warning: ", err, params);
 231         va_end(params);
 232 }
 233
 234 static void rp_error(const char *err, ...)
 235 {
 236         va_list params;
 237         va_start(params, err);
 238         report_message("error: ", err, params);
 239         va_end(params);
 240 }
 241
 242 static int copy_to_sideband(int in, int out, void *arg)
 243 {
 244         char data[128];
 245         while (1) {
 246                 ssize_t sz = xread(in, data, sizeof(data));
 247                 if (sz <= 0)
 248                         break;
 249                 send_sideband(1, 2, data, sz, use_sideband);
 250         }
 251         close(in);
 252         return 0;
 253 }
 254
 255 typedef int (*feed_fn)(void *, const char **, size_t *);
 256 static int run_and_feed_hook(const char *hook_name, feed_fn feed, void *feed_state)
 257 {
 258         struct child_process proc;
 259         struct async muxer;
 260         const char *argv[2];
 261         int code;
 262
 263         argv[0] = find_hook(hook_name);
 264         if (!argv[0])
 265                 return 0;
 266
 267         argv[1] = NULL;
 268
 269         memset(&proc, 0, sizeof(proc));
 270         proc.argv = argv;
 271         proc.in = -1;
 272         proc.stdout_to_stderr = 1;
 273
 274         if (use_sideband) {
 275                 memset(&muxer, 0, sizeof(muxer));
 276                 muxer.proc = copy_to_sideband;
 277                 muxer.in = -1;
 278                 code = start_async(&muxer);
 279                 if (code)
 280                         return code;
 281                 proc.err = muxer.in;
 282         }
 283
 284         code = start_command(&proc);
 285         if (code) {
 286                 if (use_sideband)
 287                         finish_async(&muxer);
 288                 return code;
 289         }
 290
 291         while (1) {
 292                 const char *buf;
 293                 size_t n;
 294                 if (feed(feed_state, &buf, &n))
 295                         break;
 296                 if (write_in_full(proc.in, buf, n) != n)
 297                         break;
 298         }
 299         close(proc.in);
 300         if (use_sideband)
 301                 finish_async(&muxer);
 302         return finish_command(&proc);
 303 }
 304
 305 struct receive_hook_feed_state {
 306         struct command *cmd;
 307         int skip_broken;
 308         struct strbuf buf;
 309 };
 310
 311 static int feed_receive_hook(void *state_, const char **bufp, size_t *sizep)
 312 {
 313         struct receive_hook_feed_state *state = state_;
 314         struct command *cmd = state->cmd;
 315
 316         while (cmd &&
 317                state->skip_broken && (cmd->error_string || cmd->did_not_exist))
 318                 cmd = cmd->next;
 319         if (!cmd)
 320                 return -1; /* EOF */
 321         strbuf_reset(&state->buf);
 322         strbuf_addf(&state->buf, "%s %s %s\n",
 323                     sha1_to_hex(cmd->old_sha1), sha1_to_hex(cmd->new_sha1),
 324                     cmd->ref_name);
 325         state->cmd = cmd->next;
 326         if (bufp) {
 327                 *bufp = state->buf.buf;
 328                 *sizep = state->buf.len;
 329         }
 330         return 0;
 331 }
 332
 333 static int run_receive_hook(struct command *commands, const char *hook_name,
 334                             int skip_broken)
 335 {
 336         struct receive_hook_feed_state state;
 337         int status;
 338
 339         strbuf_init(&state.buf, 0);
 340         state.cmd = commands;
 341         state.skip_broken = skip_broken;
 342         if (feed_receive_hook(&state, NULL, NULL))
 343                 return 0;
 344         state.cmd = commands;
 345         status = run_and_feed_hook(hook_name, feed_receive_hook, &state);
 346         strbuf_release(&state.buf);
 347         return status;
 348 }
 349
 350 static int run_update_hook(struct command *cmd)
 351 {
 352         const char *argv[5];
 353         struct child_process proc;
 354         int code;
 355
 356         argv[0] = find_hook("update");
 357         if (!argv[0])
 358                 return 0;
 359
 360         argv[1] = cmd->ref_name;
 361         argv[2] = sha1_to_hex(cmd->old_sha1);
 362         argv[3] = sha1_to_hex(cmd->new_sha1);
 363         argv[4] = NULL;
 364
 365         memset(&proc, 0, sizeof(proc));
 366         proc.no_stdin = 1;
 367         proc.stdout_to_stderr = 1;
 368         proc.err = use_sideband ? -1 : 0;
 369         proc.argv = argv;
 370
 371         code = start_command(&proc);
 372         if (code)
 373                 return code;
 374         if (use_sideband)
 375                 copy_to_sideband(proc.err, -1, NULL);
 376         return finish_command(&proc);
 377 }
 378
 379 static int is_ref_checked_out(const char *ref)
 380 {
 381         if (is_bare_repository())
 382                 return 0;
 383
 384         if (!head_name)
 385                 return 0;
 386         return !strcmp(head_name, ref);
 387 }
 388
 389 static char *refuse_unconfigured_deny_msg[] = {
 390         "By default, updating the current branch in a non-bare repository",
 391         "is denied, because it will make the index and work tree inconsistent",
 392         "with what you pushed, and will require 'git reset --hard' to match",
 393         "the work tree to HEAD.",
 394         "",
 395         "You can set 'receive.denyCurrentBranch' configuration variable to",
 396         "'ignore' or 'warn' in the remote repository to allow pushing into",
 397         "its current branch; however, this is not recommended unless you",
 398         "arranged to update its work tree to match what you pushed in some",
 399         "other way.",
 400         "",
 401         "To squelch this message and still keep the default behaviour, set",
 402         "'receive.denyCurrentBranch' configuration variable to 'refuse'."
 403 };
 404
 405 static void refuse_unconfigured_deny(void)
 406 {
 407         int i;
 408         for (i = 0; i < ARRAY_SIZE(refuse_unconfigured_deny_msg); i++)
 409                 rp_error("%s", refuse_unconfigured_deny_msg[i]);
 410 }
 411
 412 static char *refuse_unconfigured_deny_delete_current_msg[] = {
 413         "By default, deleting the current branch is denied, because the next",
 414         "'git clone' won't result in any file checked out, causing confusion.",
 415         "",
 416         "You can set 'receive.denyDeleteCurrent' configuration variable to",
 417         "'warn' or 'ignore' in the remote repository to allow deleting the",
 418         "current branch, with or without a warning message.",
 419         "",
 420         "To squelch this message, you can set it to 'refuse'."
 421 };
 422
 423 static void refuse_unconfigured_deny_delete_current(void)
 424 {
 425         int i;
 426         for (i = 0;
 427              i < ARRAY_SIZE(refuse_unconfigured_deny_delete_current_msg);
 428              i++)
 429                 rp_error("%s", refuse_unconfigured_deny_delete_current_msg[i]);
 430 }
 431
 432 static int command_singleton_iterator(void *cb_data, unsigned char sha1[20]);
 433 static int update_shallow_ref(struct command *cmd, struct shallow_info *si)
 434 {
 435         static struct lock_file shallow_lock;
 436         struct sha1_array extra = SHA1_ARRAY_INIT;
 437         const char *alt_file;
 438         uint32_t mask = 1 << (cmd->index % 32);
 439         int i;
 440
 441         trace_printf_key("GIT_TRACE_SHALLOW",
 442                          "shallow: update_shallow_ref %s\n", cmd->ref_name);
 443         for (i = 0; i < si->shallow->nr; i++)
 444                 if (si->used_shallow[i] &&
 445                     (si->used_shallow[i][cmd->index / 32] & mask) &&
 446                     !delayed_reachability_test(si, i))
 447                         sha1_array_append(&extra, si->shallow->sha1[i]);
 448
 449         setup_alternate_shallow(&shallow_lock, &alt_file, &extra);
 450         if (check_shallow_connected(command_singleton_iterator,
 451                                     0, cmd, alt_file)) {
 452                 rollback_lock_file(&shallow_lock);
 453                 sha1_array_clear(&extra);
 454                 return -1;
 455         }
 456
 457         commit_lock_file(&shallow_lock);
 458
 459         /*
 460          * Make sure setup_alternate_shallow() for the next ref does
 461          * not lose these new roots..
 462          */
 463         for (i = 0; i < extra.nr; i++)
 464                 register_shallow(extra.sha1[i]);
 465
 466         si->shallow_ref[cmd->index] = 0;
 467         sha1_array_clear(&extra);
 468         return 0;
 469 }
 470
 471 static const char *update(struct command *cmd, struct shallow_info *si)
 472 {
 473         const char *name = cmd->ref_name;
 474         struct strbuf namespaced_name_buf = STRBUF_INIT;
 475         const char *namespaced_name;
 476         unsigned char *old_sha1 = cmd->old_sha1;
 477         unsigned char *new_sha1 = cmd->new_sha1;
 478         struct ref_lock *lock;
 479
 480         /* only refs/... are allowed */
 481         if (!starts_with(name, "refs/") || check_refname_format(name + 5, 0)) {
 482                 rp_error("refusing to create funny ref '%s' remotely", name);
 483                 return "funny refname";
 484         }
 485
 486         strbuf_addf(&namespaced_name_buf, "%s%s", get_git_namespace(), name);
 487         namespaced_name = strbuf_detach(&namespaced_name_buf, NULL);
 488
 489         if (is_ref_checked_out(namespaced_name)) {
 490                 switch (deny_current_branch) {
 491                 case DENY_IGNORE:
 492                         break;
 493                 case DENY_WARN:
 494                         rp_warning("updating the current branch");
 495                         break;
 496                 case DENY_REFUSE:
 497                 case DENY_UNCONFIGURED:
 498                         rp_error("refusing to update checked out branch: %s", name);
 499                         if (deny_current_branch == DENY_UNCONFIGURED)
 500                                 refuse_unconfigured_deny();
 501                         return "branch is currently checked out";
 502                 }
 503         }
 504
 505         if (!is_null_sha1(new_sha1) && !has_sha1_file(new_sha1)) {
 506                 error("unpack should have generated %s, "
 507                       "but I can't find it!", sha1_to_hex(new_sha1));
 508                 return "bad pack";
 509         }
 510
 511         if (!is_null_sha1(old_sha1) && is_null_sha1(new_sha1)) {
 512                 if (deny_deletes && starts_with(name, "refs/heads/")) {
 513                         rp_error("denying ref deletion for %s", name);
 514                         return "deletion prohibited";
 515                 }
 516
 517                 if (!strcmp(namespaced_name, head_name)) {
 518                         switch (deny_delete_current) {
 519                         case DENY_IGNORE:
 520                                 break;
 521                         case DENY_WARN:
 522                                 rp_warning("deleting the current branch");
 523                                 break;
 524                         case DENY_REFUSE:
 525                         case DENY_UNCONFIGURED:
 526                                 if (deny_delete_current == DENY_UNCONFIGURED)
 527                                         refuse_unconfigured_deny_delete_current();
 528                                 rp_error("refusing to delete the current branch: %s", name);
 529                                 return "deletion of the current branch prohibited";
 530                         }
 531                 }
 532         }
 533
 534         if (deny_non_fast_forwards && !is_null_sha1(new_sha1) &&
 535             !is_null_sha1(old_sha1) &&
 536             starts_with(name, "refs/heads/")) {
 537                 struct object *old_object, *new_object;
 538                 struct commit *old_commit, *new_commit;
 539
 540                 old_object = parse_object(old_sha1);
 541                 new_object = parse_object(new_sha1);
 542
 543                 if (!old_object || !new_object ||
 544                     old_object->type != OBJ_COMMIT ||
 545                     new_object->type != OBJ_COMMIT) {
 546                         error("bad sha1 objects for %s", name);
 547                         return "bad ref";
 548                 }
 549                 old_commit = (struct commit *)old_object;
 550                 new_commit = (struct commit *)new_object;
 551                 if (!in_merge_bases(old_commit, new_commit)) {
 552                         rp_error("denying non-fast-forward %s"
 553                                  " (you should pull first)", name);
 554                         return "non-fast-forward";
 555                 }
 556         }
 557         if (run_update_hook(cmd)) {
 558                 rp_error("hook declined to update %s", name);
 559                 return "hook declined";
 560         }
 561
 562         if (is_null_sha1(new_sha1)) {
 563                 if (!parse_object(old_sha1)) {
 564                         old_sha1 = NULL;
 565                         if (ref_exists(name)) {
 566                                 rp_warning("Allowing deletion of corrupt ref.");
 567                         } else {
 568                                 rp_warning("Deleting a non-existent ref.");
 569                                 cmd->did_not_exist = 1;
 570                         }
 571                 }
 572                 if (delete_ref(namespaced_name, old_sha1, 0)) {
 573                         rp_error("failed to delete %s", name);
 574                         return "failed to delete";
 575                 }
 576                 return NULL; /* good */
 577         }
 578         else {
 579                 if (shallow_update && si->shallow_ref[cmd->index] &&
 580                     update_shallow_ref(cmd, si))
 581                         return "shallow error";
 582
 583                 lock = lock_any_ref_for_update(namespaced_name, old_sha1,
 584                                                0, NULL);
 585                 if (!lock) {
 586                         rp_error("failed to lock %s", name);
 587                         return "failed to lock";
 588                 }
 589                 if (write_ref_sha1(lock, new_sha1, "push")) {
 590                         return "failed to write"; /* error() already called */
 591                 }
 592                 return NULL; /* good */
 593         }
 594 }
 595
 596 static void run_update_post_hook(struct command *commands)
 597 {
 598         struct command *cmd;
 599         int argc;
 600         const char **argv;
 601         struct child_process proc;
 602         char *hook;
 603
 604         hook = find_hook("post-update");
 605         for (argc = 0, cmd = commands; cmd; cmd = cmd->next) {
 606                 if (cmd->error_string || cmd->did_not_exist)
 607                         continue;
 608                 argc++;
 609         }
 610         if (!argc || !hook)
 611                 return;
 612
 613         argv = xmalloc(sizeof(*argv) * (2 + argc));
 614         argv[0] = hook;
 615
 616         for (argc = 1, cmd = commands; cmd; cmd = cmd->next) {
 617                 char *p;
 618                 if (cmd->error_string || cmd->did_not_exist)
 619                         continue;
 620                 p = xmalloc(strlen(cmd->ref_name) + 1);
 621                 strcpy(p, cmd->ref_name);
 622                 argv[argc] = p;
 623                 argc++;
 624         }
 625         argv[argc] = NULL;
 626
 627         memset(&proc, 0, sizeof(proc));
 628         proc.no_stdin = 1;
 629         proc.stdout_to_stderr = 1;
 630         proc.err = use_sideband ? -1 : 0;
 631         proc.argv = argv;
 632
 633         if (!start_command(&proc)) {
 634                 if (use_sideband)
 635                         copy_to_sideband(proc.err, -1, NULL);
 636                 finish_command(&proc);
 637         }
 638 }
 639
 640 static void check_aliased_update(struct command *cmd, struct string_list *list)
 641 {
 642         struct strbuf buf = STRBUF_INIT;
 643         const char *dst_name;
 644         struct string_list_item *item;
 645         struct command *dst_cmd;
 646         unsigned char sha1[20];
 647         char cmd_oldh[41], cmd_newh[41], dst_oldh[41], dst_newh[41];
 648         int flag;
 649
 650         strbuf_addf(&buf, "%s%s", get_git_namespace(), cmd->ref_name);
 651         dst_name = resolve_ref_unsafe(buf.buf, sha1, 0, &flag);
 652         strbuf_release(&buf);
 653
 654         if (!(flag & REF_ISSYMREF))
 655                 return;
 656
 657         dst_name = strip_namespace(dst_name);
 658         if (!dst_name) {
 659                 rp_error("refusing update to broken symref '%s'", cmd->ref_name);
 660                 cmd->skip_update = 1;
 661                 cmd->error_string = "broken symref";
 662                 return;
 663         }
 664
 665         if ((item = string_list_lookup(list, dst_name)) == NULL)
 666                 return;
 667
 668         cmd->skip_update = 1;
 669
 670         dst_cmd = (struct command *) item->util;
 671
 672         if (!hashcmp(cmd->old_sha1, dst_cmd->old_sha1) &&
 673             !hashcmp(cmd->new_sha1, dst_cmd->new_sha1))
 674                 return;
 675
 676         dst_cmd->skip_update = 1;
 677
 678         strcpy(cmd_oldh, find_unique_abbrev(cmd->old_sha1, DEFAULT_ABBREV));
 679         strcpy(cmd_newh, find_unique_abbrev(cmd->new_sha1, DEFAULT_ABBREV));
 680         strcpy(dst_oldh, find_unique_abbrev(dst_cmd->old_sha1, DEFAULT_ABBREV));
 681         strcpy(dst_newh, find_unique_abbrev(dst_cmd->new_sha1, DEFAULT_ABBREV));
 682         rp_error("refusing inconsistent update between symref '%s' (%s..%s) and"
 683                  " its target '%s' (%s..%s)",
 684                  cmd->ref_name, cmd_oldh, cmd_newh,
 685                  dst_cmd->ref_name, dst_oldh, dst_newh);
 686
 687         cmd->error_string = dst_cmd->error_string =
 688                 "inconsistent aliased update";
 689 }
 690
 691 static void check_aliased_updates(struct command *commands)
 692 {
 693         struct command *cmd;
 694         struct string_list ref_list = STRING_LIST_INIT_NODUP;
 695
 696         for (cmd = commands; cmd; cmd = cmd->next) {
 697                 struct string_list_item *item =
 698                         string_list_append(&ref_list, cmd->ref_name);
 699                 item->util = (void *)cmd;
 700         }
 701         sort_string_list(&ref_list);
 702
 703         for (cmd = commands; cmd; cmd = cmd->next) {
 704                 if (!cmd->error_string)
 705                         check_aliased_update(cmd, &ref_list);
 706         }
 707
 708         string_list_clear(&ref_list, 0);
 709 }
 710
 711 static int command_singleton_iterator(void *cb_data, unsigned char sha1[20])
 712 {
 713         struct command **cmd_list = cb_data;
 714         struct command *cmd = *cmd_list;
 715
 716         if (!cmd || is_null_sha1(cmd->new_sha1))
 717                 return -1; /* end of list */
 718         *cmd_list = NULL; /* this returns only one */
 719         hashcpy(sha1, cmd->new_sha1);
 720         return 0;
 721 }
 722
 723 static void set_connectivity_errors(struct command *commands,
 724                                     struct shallow_info *si)
 725 {
 726         struct command *cmd;
 727
 728         for (cmd = commands; cmd; cmd = cmd->next) {
 729                 struct command *singleton = cmd;
 730                 if (shallow_update && si->shallow_ref[cmd->index])
 731                         /* to be checked in update_shallow_ref() */
 732                         continue;
 733                 if (!check_everything_connected(command_singleton_iterator,
 734                                                 0, &singleton))
 735                         continue;
 736                 cmd->error_string = "missing necessary objects";
 737         }
 738 }
 739
 740 struct iterate_data {
 741         struct command *cmds;
 742         struct shallow_info *si;
 743 };
 744
 745 static int iterate_receive_command_list(void *cb_data, unsigned char sha1[20])
 746 {
 747         struct iterate_data *data = cb_data;
 748         struct command **cmd_list = &data->cmds;
 749         struct command *cmd = *cmd_list;
 750
 751         for (; cmd; cmd = cmd->next) {
 752                 if (shallow_update && data->si->shallow_ref[cmd->index])
 753                         /* to be checked in update_shallow_ref() */
 754                         continue;
 755                 if (!is_null_sha1(cmd->new_sha1) && !cmd->skip_update) {
 756                         hashcpy(sha1, cmd->new_sha1);
 757                         *cmd_list = cmd->next;
 758                         return 0;
 759                 }
 760         }
 761         *cmd_list = NULL;
 762         return -1; /* end of list */
 763 }
 764
 765 static void reject_updates_to_hidden(struct command *commands)
 766 {
 767         struct command *cmd;
 768
 769         for (cmd = commands; cmd; cmd = cmd->next) {
 770                 if (cmd->error_string || !ref_is_hidden(cmd->ref_name))
 771                         continue;
 772                 if (is_null_sha1(cmd->new_sha1))
 773                         cmd->error_string = "deny deleting a hidden ref";
 774                 else
 775                         cmd->error_string = "deny updating a hidden ref";
 776         }
 777 }
 778
 779 static void execute_commands(struct command *commands,
 780                              const char *unpacker_error,
 781                              struct shallow_info *si)
 782 {
 783         int checked_connectivity;
 784         struct command *cmd;
 785         unsigned char sha1[20];
 786         struct iterate_data data;
 787
 788         if (unpacker_error) {
 789                 for (cmd = commands; cmd; cmd = cmd->next)
 790                         cmd->error_string = "unpacker error";
 791                 return;
 792         }
 793
 794         data.cmds = commands;
 795         data.si = si;
 796         if (check_everything_connected(iterate_receive_command_list, 0, &data))
 797                 set_connectivity_errors(commands, si);
 798
 799         reject_updates_to_hidden(commands);
 800
 801         if (run_receive_hook(commands, "pre-receive", 0)) {
 802                 for (cmd = commands; cmd; cmd = cmd->next) {
 803                         if (!cmd->error_string)
 804                                 cmd->error_string = "pre-receive hook declined";
 805                 }
 806                 return;
 807         }
 808
 809         check_aliased_updates(commands);
 810
 811         free(head_name_to_free);
 812         head_name = head_name_to_free = resolve_refdup("HEAD", sha1, 0, NULL);
 813
 814         checked_connectivity = 1;
 815         for (cmd = commands; cmd; cmd = cmd->next) {
 816                 if (cmd->error_string)
 817                         continue;
 818
 819                 if (cmd->skip_update)
 820                         continue;
 821
 822                 cmd->error_string = update(cmd, si);
 823                 if (shallow_update && !cmd->error_string &&
 824                     si->shallow_ref[cmd->index]) {
 825                         error("BUG: connectivity check has not been run on ref %s",
 826                               cmd->ref_name);
 827                         checked_connectivity = 0;
 828                 }
 829         }
 830
 831         if (shallow_update && !checked_connectivity)
 832                 error("BUG: run 'git fsck' for safety.\n"
 833                       "If there are errors, try to remove "
 834                       "the reported refs above");
 835 }
 836
 837 static struct command *read_head_info(struct sha1_array *shallow)
 838 {
 839         struct command *commands = NULL;
 840         struct command **p = &commands;
 841         for (;;) {
 842                 char *line;
 843                 unsigned char old_sha1[20], new_sha1[20];
 844                 struct command *cmd;
 845                 char *refname;
 846                 int len, reflen;
 847
 848                 line = packet_read_line(0, &len);
 849                 if (!line)
 850                         break;
 851
 852                 if (len == 48 && starts_with(line, "shallow ")) {
 853                         if (get_sha1_hex(line + 8, old_sha1))
 854                                 die("protocol error: expected shallow sha, got '%s'", line + 8);
 855                         sha1_array_append(shallow, old_sha1);
 856                         continue;
 857                 }
 858
 859                 if (len < 83 ||
 860                     line[40] != ' ' ||
 861                     line[81] != ' ' ||
 862                     get_sha1_hex(line, old_sha1) ||
 863                     get_sha1_hex(line + 41, new_sha1))
 864                         die("protocol error: expected old/new/ref, got '%s'",
 865                             line);
 866
 867                 refname = line + 82;
 868                 reflen = strlen(refname);
 869                 if (reflen + 82 < len) {
 870                         const char *feature_list = refname + reflen + 1;
 871                         if (parse_feature_request(feature_list, "report-status"))
 872                                 report_status = 1;
 873                         if (parse_feature_request(feature_list, "side-band-64k"))
 874                                 use_sideband = LARGE_PACKET_MAX;
 875                         if (parse_feature_request(feature_list, "quiet"))
 876                                 quiet = 1;
 877                 }
 878                 cmd = xcalloc(1, sizeof(struct command) + len - 80);
 879                 hashcpy(cmd->old_sha1, old_sha1);
 880                 hashcpy(cmd->new_sha1, new_sha1);
 881                 memcpy(cmd->ref_name, line + 82, len - 81);
 882                 *p = cmd;
 883                 p = &cmd->next;
 884         }
 885         return commands;
 886 }
 887
 888 static const char *parse_pack_header(struct pack_header *hdr)
 889 {
 890         switch (read_pack_header(0, hdr)) {
 891         case PH_ERROR_EOF:
 892                 return "eof before pack header was fully read";
 893
 894         case PH_ERROR_PACK_SIGNATURE:
 895                 return "protocol error (pack signature mismatch detected)";
 896
 897         case PH_ERROR_PROTOCOL:
 898                 return "protocol error (pack version unsupported)";
 899
 900         default:
 901                 return "unknown error in parse_pack_header";
 902
 903         case 0:
 904                 return NULL;
 905         }
 906 }
 907
 908 static const char *pack_lockfile;
 909
 910 static const char *unpack(int err_fd, struct shallow_info *si)
 911 {
 912         struct pack_header hdr;
 913         struct argv_array av = ARGV_ARRAY_INIT;
 914         const char *hdr_err;
 915         int status;
 916         char hdr_arg[38];
 917         struct child_process child;
 918         int fsck_objects = (receive_fsck_objects >= 0
 919                             ? receive_fsck_objects
 920                             : transfer_fsck_objects >= 0
 921                             ? transfer_fsck_objects
 922                             : 0);
 923
 924         hdr_err = parse_pack_header(&hdr);
 925         if (hdr_err) {
 926                 if (err_fd > 0)
 927                         close(err_fd);
 928                 return hdr_err;
 929         }
 930         snprintf(hdr_arg, sizeof(hdr_arg),
 931                         "--pack_header=%"PRIu32",%"PRIu32,
 932                         ntohl(hdr.hdr_version), ntohl(hdr.hdr_entries));
 933
 934         if (si->nr_ours || si->nr_theirs) {
 935                 alt_shallow_file = setup_temporary_shallow(si->shallow);
 936                 argv_array_pushl(&av, "--shallow-file", alt_shallow_file, NULL);
 937         }
 938
 939         memset(&child, 0, sizeof(child));
 940         if (ntohl(hdr.hdr_entries) < unpack_limit) {
 941                 argv_array_pushl(&av, "unpack-objects", hdr_arg, NULL);
 942                 if (quiet)
 943                         argv_array_push(&av, "-q");
 944                 if (fsck_objects)
 945                         argv_array_push(&av, "--strict");
 946                 child.argv = av.argv;
 947                 child.no_stdout = 1;
 948                 child.err = err_fd;
 949                 child.git_cmd = 1;
 950                 status = run_command(&child);
 951                 if (status)
 952                         return "unpack-objects abnormal exit";
 953         } else {
 954                 int s;
 955                 char keep_arg[256];
 956
 957                 s = sprintf(keep_arg, "--keep=receive-pack %"PRIuMAX" on ", (uintmax_t) getpid());
 958                 if (gethostname(keep_arg + s, sizeof(keep_arg) - s))
 959                         strcpy(keep_arg + s, "localhost");
 960
 961                 argv_array_pushl(&av, "index-pack",
 962                                  "--stdin", hdr_arg, keep_arg, NULL);
 963                 if (fsck_objects)
 964                         argv_array_push(&av, "--strict");
 965                 if (fix_thin)
 966                         argv_array_push(&av, "--fix-thin");
 967                 child.argv = av.argv;
 968                 child.out = -1;
 969                 child.err = err_fd;
 970                 child.git_cmd = 1;
 971                 status = start_command(&child);
 972                 if (status)
 973                         return "index-pack fork failed";
 974                 pack_lockfile = index_pack_lockfile(child.out);
 975                 close(child.out);
 976                 status = finish_command(&child);
 977                 if (status)
 978                         return "index-pack abnormal exit";
 979                 reprepare_packed_git();
 980         }
 981         return NULL;
 982 }
 983
 984 static const char *unpack_with_sideband(struct shallow_info *si)
 985 {
 986         struct async muxer;
 987         const char *ret;
 988
 989         if (!use_sideband)
 990                 return unpack(0, si);
 991
 992         memset(&muxer, 0, sizeof(muxer));
 993         muxer.proc = copy_to_sideband;
 994         muxer.in = -1;
 995         if (start_async(&muxer))
 996                 return NULL;
 997
 998         ret = unpack(muxer.in, si);
 999
1000         finish_async(&muxer);
1001         return ret;
1002 }
1003
1004 static void prepare_shallow_update(struct command *commands,
1005                                    struct shallow_info *si)
1006 {
1007         int i, j, k, bitmap_size = (si->ref->nr + 31) / 32;
1008
1009         si->used_shallow = xmalloc(sizeof(*si->used_shallow) *
1010                                    si->shallow->nr);
1011         assign_shallow_commits_to_refs(si, si->used_shallow, NULL);
1012
1013         si->need_reachability_test =
1014                 xcalloc(si->shallow->nr, sizeof(*si->need_reachability_test));
1015         si->reachable =
1016                 xcalloc(si->shallow->nr, sizeof(*si->reachable));
1017         si->shallow_ref = xcalloc(si->ref->nr, sizeof(*si->shallow_ref));
1018
1019         for (i = 0; i < si->nr_ours; i++)
1020                 si->need_reachability_test[si->ours[i]] = 1;
1021
1022         for (i = 0; i < si->shallow->nr; i++) {
1023                 if (!si->used_shallow[i])
1024                         continue;
1025                 for (j = 0; j < bitmap_size; j++) {
1026                         if (!si->used_shallow[i][j])
1027                                 continue;
1028                         si->need_reachability_test[i]++;
1029                         for (k = 0; k < 32; k++)
1030                                 if (si->used_shallow[i][j] & (1 << k))
1031                                         si->shallow_ref[j * 32 + k]++;
1032                 }
1033
1034                 /*
1035                  * true for those associated with some refs and belong
1036                  * in "ours" list aka "step 7 not done yet"
1037                  */
1038                 si->need_reachability_test[i] =
1039                         si->need_reachability_test[i] > 1;
1040         }
1041
1042         /*
1043          * keep hooks happy by forcing a temporary shallow file via
1044          * env variable because we can't add --shallow-file to every
1045          * command. check_everything_connected() will be done with
1046          * true .git/shallow though.
1047          */
1048         setenv(GIT_SHALLOW_FILE_ENVIRONMENT, alt_shallow_file, 1);
1049 }
1050
1051 static void update_shallow_info(struct command *commands,
1052                                 struct shallow_info *si,
1053                                 struct sha1_array *ref)
1054 {
1055         struct command *cmd;
1056         int *ref_status;
1057         remove_nonexistent_theirs_shallow(si);
1058         if (!si->nr_ours && !si->nr_theirs) {
1059                 shallow_update = 0;
1060                 return;
1061         }
1062
1063         for (cmd = commands; cmd; cmd = cmd->next) {
1064                 if (is_null_sha1(cmd->new_sha1))
1065                         continue;
1066                 sha1_array_append(ref, cmd->new_sha1);
1067                 cmd->index = ref->nr - 1;
1068         }
1069         si->ref = ref;
1070
1071         if (shallow_update) {
1072                 prepare_shallow_update(commands, si);
1073                 return;
1074         }
1075
1076         ref_status = xmalloc(sizeof(*ref_status) * ref->nr);
1077         assign_shallow_commits_to_refs(si, NULL, ref_status);
1078         for (cmd = commands; cmd; cmd = cmd->next) {
1079                 if (is_null_sha1(cmd->new_sha1))
1080                         continue;
1081                 if (ref_status[cmd->index]) {
1082                         cmd->error_string = "shallow update not allowed";
1083                         cmd->skip_update = 1;
1084                 }
1085         }
1086         free(ref_status);
1087 }
1088
1089 static void report(struct command *commands, const char *unpack_status)
1090 {
1091         struct command *cmd;
1092         struct strbuf buf = STRBUF_INIT;
1093
1094         packet_buf_write(&buf, "unpack %s\n",
1095                          unpack_status ? unpack_status : "ok");
1096         for (cmd = commands; cmd; cmd = cmd->next) {
1097                 if (!cmd->error_string)
1098                         packet_buf_write(&buf, "ok %s\n",
1099                                          cmd->ref_name);
1100                 else
1101                         packet_buf_write(&buf, "ng %s %s\n",
1102                                          cmd->ref_name, cmd->error_string);
1103         }
1104         packet_buf_flush(&buf);
1105
1106         if (use_sideband)
1107                 send_sideband(1, 1, buf.buf, buf.len, use_sideband);
1108         else
1109                 write_or_die(1, buf.buf, buf.len);
1110         strbuf_release(&buf);
1111 }
1112
1113 static int delete_only(struct command *commands)
1114 {
1115         struct command *cmd;
1116         for (cmd = commands; cmd; cmd = cmd->next) {
1117                 if (!is_null_sha1(cmd->new_sha1))
1118                         return 0;
1119         }
1120         return 1;
1121 }
1122
1123 int cmd_receive_pack(int argc, const char **argv, const char *prefix)
1124 {
1125         int advertise_refs = 0;
1126         int stateless_rpc = 0;
1127         int i;
1128         char *dir = NULL;
1129         struct command *commands;
1130         struct sha1_array shallow = SHA1_ARRAY_INIT;
1131         struct sha1_array ref = SHA1_ARRAY_INIT;
1132         struct shallow_info si;
1133
1134         packet_trace_identity("receive-pack");
1135
1136         argv++;
1137         for (i = 1; i < argc; i++) {
1138                 const char *arg = *argv++;
1139
1140                 if (*arg == '-') {
1141                         if (!strcmp(arg, "--quiet")) {
1142                                 quiet = 1;
1143                                 continue;
1144                         }
1145
1146                         if (!strcmp(arg, "--advertise-refs")) {
1147                                 advertise_refs = 1;
1148                                 continue;
1149                         }
1150                         if (!strcmp(arg, "--stateless-rpc")) {
1151                                 stateless_rpc = 1;
1152                                 continue;
1153                         }
1154                         if (!strcmp(arg, "--reject-thin-pack-for-testing")) {
1155                                 fix_thin = 0;
1156                                 continue;
1157                         }
1158
1159                         usage(receive_pack_usage);
1160                 }
1161                 if (dir)
1162                         usage(receive_pack_usage);
1163                 dir = xstrdup(arg);
1164         }
1165         if (!dir)
1166                 usage(receive_pack_usage);
1167
1168         setup_path();
1169
1170         if (!enter_repo(dir, 0))
1171                 die("'%s' does not appear to be a git repository", dir);
1172
1173         git_config(receive_pack_config, NULL);
1174
1175         if (0 <= transfer_unpack_limit)
1176                 unpack_limit = transfer_unpack_limit;
1177         else if (0 <= receive_unpack_limit)
1178                 unpack_limit = receive_unpack_limit;
1179
1180         if (advertise_refs || !stateless_rpc) {
1181                 write_head_info();
1182         }
1183         if (advertise_refs)
1184                 return 0;
1185
1186         if ((commands = read_head_info(&shallow)) != NULL) {
1187                 const char *unpack_status = NULL;
1188
1189                 prepare_shallow_info(&si, &shallow);
1190                 if (!si.nr_ours && !si.nr_theirs)
1191                         shallow_update = 0;
1192                 if (!delete_only(commands)) {
1193                         unpack_status = unpack_with_sideband(&si);
1194                         update_shallow_info(commands, &si, &ref);
1195                 }
1196                 execute_commands(commands, unpack_status, &si);
1197                 if (pack_lockfile)
1198                         unlink_or_warn(pack_lockfile);
1199                 if (report_status)
1200                         report(commands, unpack_status);
1201                 run_receive_hook(commands, "post-receive", 1);
1202                 run_update_post_hook(commands);
1203                 if (auto_gc) {
1204                         const char *argv_gc_auto[] = {
1205                                 "gc", "--auto", "--quiet", NULL,
1206                         };
1207                         int opt = RUN_GIT_CMD | RUN_COMMAND_STDOUT_TO_STDERR;
1208                         run_command_v_opt(argv_gc_auto, opt);
1209                 }
1210                 if (auto_update_server_info)
1211                         update_server_info(0);
1212                 clear_shallow_info(&si);
1213         }
1214         if (use_sideband)
1215                 packet_flush(1);
1216         sha1_array_clear(&shallow);
1217         sha1_array_clear(&ref);
1218         return 0;
1219 }