2 * I'm tired of doing "vsnprintf()" etc just to open a
3 * file, so here's a "return static buffer with printf"
6 * It's obviously not thread-safe. Sue me. But it's quite
7 * useful for doing things like
9 * f = open(mkpath("%s/%s.git", base, name), O_RDONLY);
11 * which is what it's designed for.
16 static char bad_path
[] = "/bad-path/";
18 static char *get_pathname(void)
20 static char pathname_array
[4][PATH_MAX
];
22 return pathname_array
[3 & ++index
];
25 static char *cleanup_path(char *path
)
28 if (!memcmp(path
, "./", 2)) {
36 char *mksnpath(char *buf
, size_t n
, const char *fmt
, ...)
42 len
= vsnprintf(buf
, n
, fmt
, args
);
45 strlcpy(buf
, bad_path
, n
);
48 return cleanup_path(buf
);
51 static char *git_vsnpath(char *buf
, size_t n
, const char *fmt
, va_list args
)
53 const char *git_dir
= get_git_dir();
56 len
= strlen(git_dir
);
59 memcpy(buf
, git_dir
, len
);
60 if (len
&& !is_dir_sep(git_dir
[len
-1]))
62 len
+= vsnprintf(buf
+ len
, n
- len
, fmt
, args
);
65 return cleanup_path(buf
);
67 strlcpy(buf
, bad_path
, n
);
71 char *git_snpath(char *buf
, size_t n
, const char *fmt
, ...)
75 (void)git_vsnpath(buf
, n
, fmt
, args
);
80 char *git_pathdup(const char *fmt
, ...)
85 (void)git_vsnpath(path
, sizeof(path
), fmt
, args
);
90 char *mkpath(const char *fmt
, ...)
94 char *pathname
= get_pathname();
97 len
= vsnprintf(pathname
, PATH_MAX
, fmt
, args
);
101 return cleanup_path(pathname
);
104 char *git_path(const char *fmt
, ...)
106 const char *git_dir
= get_git_dir();
107 char *pathname
= get_pathname();
111 len
= strlen(git_dir
);
112 if (len
> PATH_MAX
-100)
114 memcpy(pathname
, git_dir
, len
);
115 if (len
&& git_dir
[len
-1] != '/')
116 pathname
[len
++] = '/';
118 len
+= vsnprintf(pathname
+ len
, PATH_MAX
- len
, fmt
, args
);
122 return cleanup_path(pathname
);
125 char *git_path_submodule(const char *path
, const char *fmt
, ...)
127 char *pathname
= get_pathname();
128 struct strbuf buf
= STRBUF_INIT
;
134 if (len
> PATH_MAX
-100)
137 strbuf_addstr(&buf
, path
);
138 if (len
&& path
[len
-1] != '/')
139 strbuf_addch(&buf
, '/');
140 strbuf_addstr(&buf
, ".git");
142 git_dir
= read_gitfile(buf
.buf
);
145 strbuf_addstr(&buf
, git_dir
);
147 strbuf_addch(&buf
, '/');
149 if (buf
.len
>= PATH_MAX
)
151 memcpy(pathname
, buf
.buf
, buf
.len
+ 1);
153 strbuf_release(&buf
);
154 len
= strlen(pathname
);
157 len
+= vsnprintf(pathname
+ len
, PATH_MAX
- len
, fmt
, args
);
161 return cleanup_path(pathname
);
164 int validate_headref(const char *path
)
167 char *buf
, buffer
[256];
168 unsigned char sha1
[20];
172 if (lstat(path
, &st
) < 0)
175 /* Make sure it is a "refs/.." symlink */
176 if (S_ISLNK(st
.st_mode
)) {
177 len
= readlink(path
, buffer
, sizeof(buffer
)-1);
178 if (len
>= 5 && !memcmp("refs/", buffer
, 5))
184 * Anything else, just open it and try to see if it is a symbolic ref.
186 fd
= open(path
, O_RDONLY
);
189 len
= read_in_full(fd
, buffer
, sizeof(buffer
)-1);
193 * Is it a symbolic ref?
197 if (!memcmp("ref:", buffer
, 4)) {
200 while (len
&& isspace(*buf
))
202 if (len
>= 5 && !memcmp("refs/", buf
, 5))
207 * Is this a detached HEAD?
209 if (!get_sha1_hex(buffer
, sha1
))
215 static struct passwd
*getpw_str(const char *username
, size_t len
)
218 char *username_z
= xmalloc(len
+ 1);
219 memcpy(username_z
, username
, len
);
220 username_z
[len
] = '\0';
221 pw
= getpwnam(username_z
);
227 * Return a string with ~ and ~user expanded via getpw*. If buf != NULL,
228 * then it is a newly allocated string. Returns NULL on getpw failure or
231 char *expand_user_path(const char *path
)
233 struct strbuf user_path
= STRBUF_INIT
;
234 const char *first_slash
= strchrnul(path
, '/');
235 const char *to_copy
= path
;
239 if (path
[0] == '~') {
240 const char *username
= path
+ 1;
241 size_t username_len
= first_slash
- username
;
242 if (username_len
== 0) {
243 const char *home
= getenv("HOME");
246 strbuf_add(&user_path
, home
, strlen(home
));
248 struct passwd
*pw
= getpw_str(username
, username_len
);
251 strbuf_add(&user_path
, pw
->pw_dir
, strlen(pw
->pw_dir
));
253 to_copy
= first_slash
;
255 strbuf_add(&user_path
, to_copy
, strlen(to_copy
));
256 return strbuf_detach(&user_path
, NULL
);
258 strbuf_release(&user_path
);
263 * First, one directory to try is determined by the following algorithm.
265 * (0) If "strict" is given, the path is used as given and no DWIM is
267 * (1) "~/path" to mean path under the running user's home directory;
268 * (2) "~user/path" to mean path under named user's home directory;
269 * (3) "relative/path" to mean cwd relative directory; or
270 * (4) "/absolute/path" to mean absolute directory.
272 * Unless "strict" is given, we try access() for existence of "%s.git/.git",
273 * "%s/.git", "%s.git", "%s" in this order. The first one that exists is
276 * Second, we try chdir() to that. Upon failure, we return NULL.
278 * Then, we try if the current directory is a valid git repository.
279 * Upon failure, we return NULL.
281 * If all goes well, we return the directory we used to chdir() (but
282 * before ~user is expanded), avoiding getcwd() resolving symbolic
283 * links. User relative paths are also returned as they are given,
284 * except DWIM suffixing.
286 const char *enter_repo(const char *path
, int strict
)
288 static char used_path
[PATH_MAX
];
289 static char validated_path
[PATH_MAX
];
295 static const char *suffix
[] = {
296 ".git/.git", "/.git", ".git", "", NULL
,
298 int len
= strlen(path
);
300 while ((1 < len
) && (path
[len
-1] == '/'))
305 strncpy(used_path
, path
, len
); used_path
[len
] = 0 ;
306 strcpy(validated_path
, used_path
);
308 if (used_path
[0] == '~') {
309 char *newpath
= expand_user_path(used_path
);
310 if (!newpath
|| (PATH_MAX
- 10 < strlen(newpath
))) {
315 * Copy back into the static buffer. A pity
316 * since newpath was not bounded, but other
317 * branches of the if are limited by PATH_MAX
320 strcpy(used_path
, newpath
); free(newpath
);
322 else if (PATH_MAX
- 10 < len
)
324 len
= strlen(used_path
);
325 for (i
= 0; suffix
[i
]; i
++) {
326 strcpy(used_path
+ len
, suffix
[i
]);
327 if (!access(used_path
, F_OK
)) {
328 strcat(validated_path
, suffix
[i
]);
332 if (!suffix
[i
] || chdir(used_path
))
334 path
= validated_path
;
336 else if (chdir(path
))
339 if (access("objects", X_OK
) == 0 && access("refs", X_OK
) == 0 &&
340 validate_headref("HEAD") == 0) {
342 check_repository_format();
349 int set_shared_perm(const char *path
, int mode
)
352 int tweak
, shared
, orig_mode
;
354 if (!shared_repository
) {
356 return chmod(path
, mode
& ~S_IFMT
);
360 if (lstat(path
, &st
) < 0)
366 if (shared_repository
< 0)
367 shared
= -shared_repository
;
369 shared
= shared_repository
;
372 if (!(mode
& S_IWUSR
))
375 /* Copy read bits to execute bits */
376 tweak
|= (tweak
& 0444) >> 2;
377 if (shared_repository
< 0)
378 mode
= (mode
& ~0777) | tweak
;
383 /* Copy read bits to execute bits */
384 mode
|= (shared
& 0444) >> 2;
385 mode
|= FORCE_DIR_SET_GID
;
388 if (((shared_repository
< 0
389 ? (orig_mode
& (FORCE_DIR_SET_GID
| 0777))
390 : (orig_mode
& mode
)) != mode
) &&
391 chmod(path
, (mode
& ~S_IFMT
)) < 0)
396 const char *relative_path(const char *abs
, const char *base
)
398 static char buf
[PATH_MAX
+ 1];
401 if (!base
|| !base
[0])
404 if (is_dir_sep(base
[i
])) {
405 if (!is_dir_sep(abs
[j
]))
407 while (is_dir_sep(base
[i
]))
409 while (is_dir_sep(abs
[j
]))
412 } else if (abs
[j
] != base
[i
]) {
419 /* "/foo" is a prefix of "/foo" */
421 /* "/foo" is not a prefix of "/foobar" */
422 !is_dir_sep(base
[i
-1]) && !is_dir_sep(abs
[j
])
425 while (is_dir_sep(abs
[j
]))
430 strcpy(buf
, abs
+ j
);
435 * It is okay if dst == src, but they should not overlap otherwise.
437 * Performs the following normalizations on src, storing the result in dst:
438 * - Ensures that components are separated by '/' (Windows only)
439 * - Squashes sequences of '/'.
440 * - Removes "." components.
441 * - Removes ".." components, and the components the precede them.
442 * Returns failure (non-zero) if a ".." component appears as first path
443 * component anytime during the normalization. Otherwise, returns success (0).
445 * Note that this function is purely textual. It does not follow symlinks,
446 * verify the existence of the path, or make any system calls.
448 int normalize_path_copy(char *dst
, const char *src
)
452 if (has_dos_drive_prefix(src
)) {
458 if (is_dir_sep(*src
)) {
460 while (is_dir_sep(*src
))
468 * A path component that begins with . could be
470 * (1) "." and ends -- ignore and terminate.
471 * (2) "./" -- ignore them, eat slash and continue.
472 * (3) ".." and ends -- strip one and terminate.
473 * (4) "../" -- strip one, eat slash and continue.
479 } else if (is_dir_sep(src
[1])) {
482 while (is_dir_sep(*src
))
485 } else if (src
[1] == '.') {
490 } else if (is_dir_sep(src
[2])) {
493 while (is_dir_sep(*src
))
500 /* copy up to the next '/', and eat all '/' */
501 while ((c
= *src
++) != '\0' && !is_dir_sep(c
))
505 while (is_dir_sep(c
))
514 * dst0..dst is prefix portion, and dst[-1] is '/';
517 dst
--; /* go to trailing '/' */
520 /* Windows: dst[-1] cannot be backslash anymore */
521 while (dst0
< dst
&& dst
[-1] != '/')
529 * path = Canonical absolute path
530 * prefix_list = Colon-separated list of absolute paths
532 * Determines, for each path in prefix_list, whether the "prefix" really
533 * is an ancestor directory of path. Returns the length of the longest
534 * ancestor directory, excluding any trailing slashes, or -1 if no prefix
535 * is an ancestor. (Note that this means 0 is returned if prefix_list is
536 * "/".) "/foo" is not considered an ancestor of "/foobar". Directories
537 * are not considered to be their own ancestors. path must be in a
538 * canonical form: empty components, or "." or ".." components are not
539 * allowed. prefix_list may be null, which is like "".
541 int longest_ancestor_length(const char *path
, const char *prefix_list
)
543 char buf
[PATH_MAX
+1];
544 const char *ceil
, *colon
;
545 int len
, max_len
= -1;
547 if (prefix_list
== NULL
|| !strcmp(path
, "/"))
550 for (colon
= ceil
= prefix_list
; *colon
; ceil
= colon
+1) {
551 for (colon
= ceil
; *colon
&& *colon
!= PATH_SEP
; colon
++);
553 if (len
== 0 || len
> PATH_MAX
|| !is_absolute_path(ceil
))
555 strlcpy(buf
, ceil
, len
+1);
556 if (normalize_path_copy(buf
, buf
) < 0)
559 if (len
> 0 && buf
[len
-1] == '/')
562 if (!strncmp(path
, buf
, len
) &&
572 /* strip arbitrary amount of directory separators at end of path */
573 static inline int chomp_trailing_dir_sep(const char *path
, int len
)
575 while (len
&& is_dir_sep(path
[len
- 1]))
581 * If path ends with suffix (complete path components), returns the
582 * part before suffix (sans trailing directory separators).
583 * Otherwise returns NULL.
585 char *strip_path_suffix(const char *path
, const char *suffix
)
587 int path_len
= strlen(path
), suffix_len
= strlen(suffix
);
593 if (is_dir_sep(path
[path_len
- 1])) {
594 if (!is_dir_sep(suffix
[suffix_len
- 1]))
596 path_len
= chomp_trailing_dir_sep(path
, path_len
);
597 suffix_len
= chomp_trailing_dir_sep(suffix
, suffix_len
);
599 else if (path
[--path_len
] != suffix
[--suffix_len
])
603 if (path_len
&& !is_dir_sep(path
[path_len
- 1]))
605 return xstrndup(path
, chomp_trailing_dir_sep(path
, path_len
));
608 int daemon_avoid_alias(const char *p
)
613 * This resurrects the belts and suspenders paranoia check by HPA
614 * done in <435560F7.4080006@zytor.com> thread, now enter_repo()
615 * does not do getcwd() based path canonicalization.
617 * sl becomes true immediately after seeing '/' and continues to
618 * be true as long as dots continue after that without intervening
621 if (!p
|| (*p
!= '/' && *p
!= '~'))
631 else if (ch
== '/') {
633 /* reject //, /./ and /../ */
638 if (0 < ndot
&& ndot
< 3)
639 /* reject /.$ and /..$ */
648 else if (ch
== '/') {
655 int offset_1st_component(const char *path
)
657 if (has_dos_drive_prefix(path
))
658 return 2 + is_dir_sep(path
[2]);
659 return is_dir_sep(path
[0]);