op public repos

Blob

Date:: Mon Feb 11 11:32:53 2019 UTC
Message:: check for errors from close(2)
Actions:: History | Blame | Raw File
1 /*
2  * Copyright (c) 2018, 2019 Stefan Sperling <stsp@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/types.h>
18 #include <sys/stat.h>
19 #include <sys/queue.h>
20 #include <sys/uio.h>
21 #include <sys/socket.h>
22 #include <sys/wait.h>
23 #include <sys/syslimits.h>
24 
25 #include <errno.h>
26 #include <fcntl.h>
27 #include <stdio.h>
28 #include <stdlib.h>
29 #include <string.h>
30 #include <stdint.h>
31 #include <sha1.h>
32 #include <zlib.h>
33 #include <ctype.h>
34 #include <limits.h>
35 #include <imsg.h>
36 #include <time.h>
37 
38 #include "got_error.h"
39 #include "got_object.h"
40 #include "got_repository.h"
41 #include "got_opentemp.h"
42 
43 #include "got_lib_sha1.h"
44 #include "got_lib_delta.h"
45 #include "got_lib_path.h"
46 #include "got_lib_inflate.h"
47 #include "got_lib_object.h"
48 #include "got_lib_privsep.h"
49 #include "got_lib_object_idcache.h"
50 #include "got_lib_object_cache.h"
51 #include "got_lib_object_parse.h"
52 #include "got_lib_pack.h"
53 #include "got_lib_repository.h"
54 
55 #ifndef MIN
56 #define	MIN(_a,_b) ((_a) < (_b) ? (_a) : (_b))
57 #endif
58 
59 struct got_object_id *
60 got_object_id_dup(struct got_object_id *id1)
61 {
62 	struct got_object_id *id2;
63 
64 	id2 = malloc(sizeof(*id2));
65 	if (id2 == NULL)
66 		return NULL;
67 	memcpy(id2, id1, sizeof(*id2));
68 	return id2;
69 }
70 
71 struct got_object_id *
72 got_object_get_id(struct got_object *obj)
73 {
74 	return &obj->id;
75 }
76 
77 const struct got_error *
78 got_object_get_id_str(char **outbuf, struct got_object *obj)
79 {
80 	return got_object_id_str(outbuf, &obj->id);
81 }
82 
83 const struct got_error *
84 got_object_get_type(int *type, struct got_repository *repo,
85     struct got_object_id *id)
86 {
87 	const struct got_error *err = NULL;
88 	struct got_object *obj;
89 
90 	err = got_object_open(&obj, repo, id);
91 	if (err)
92 		return err;
93 
94 	switch (obj->type) {
95 	case GOT_OBJ_TYPE_COMMIT:
96 	case GOT_OBJ_TYPE_TREE:
97 	case GOT_OBJ_TYPE_BLOB:
98 	case GOT_OBJ_TYPE_TAG:
99 		*type = obj->type;
100 		break;
101 	default:
102 		err = got_error(GOT_ERR_OBJ_TYPE);
103 		break;
104 	}
105 
106 	got_object_close(obj);
107 	return err;
108 }
109 
110 static const struct got_error *
111 object_path(char **path, struct got_object_id *id, struct got_repository *repo)
112 {
113 	const struct got_error *err = NULL;
114 	char *hex = NULL;
115 	char *path_objects = got_repo_get_path_objects(repo);
116 
117 	*path = NULL;
118 
119 	if (path_objects == NULL)
120 		return got_error_from_errno();
121 
122 	err = got_object_id_str(&hex, id);
123 	if (err)
124 		goto done;
125 
126 	if (asprintf(path, "%s/%.2x/%s", path_objects,
127 	    id->sha1[0], hex + 2) == -1)
128 		err = got_error_from_errno();
129 
130 done:
131 	free(hex);
132 	free(path_objects);
133 	return err;
134 }
135 
136 static const struct got_error *
137 open_loose_object(int *fd, struct got_object_id *id,
138     struct got_repository *repo)
139 {
140 	const struct got_error *err = NULL;
141 	char *path;
142 
143 	err = object_path(&path, id, repo);
144 	if (err)
145 		return err;
146 	*fd = open(path, O_RDONLY | O_NOFOLLOW, GOT_DEFAULT_FILE_MODE);
147 	if (*fd == -1) {
148 		err = got_error_from_errno();
149 		goto done;
150 	}
151 done:
152 	free(path);
153 	return err;
154 }
155 
156 static const struct got_error *
157 get_packfile_path(char **path_packfile, struct got_packidx *packidx)
158 {
159 	size_t size;
160 
161 	/* Packfile path contains ".pack" instead of ".idx", so add one byte. */
162 	size = strlen(packidx->path_packidx) + 2;
163 	if (size < GOT_PACKFILE_NAMELEN + 1)
164 		return got_error(GOT_ERR_BAD_PATH);
165 
166 	*path_packfile = malloc(size);
167 	if (*path_packfile == NULL)
168 		return got_error_from_errno();
169 
170 	/* Copy up to and excluding ".idx". */
171 	if (strlcpy(*path_packfile, packidx->path_packidx,
172 	    size - strlen(GOT_PACKIDX_SUFFIX) - 1) >= size)
173 		return got_error(GOT_ERR_NO_SPACE);
174 
175 	if (strlcat(*path_packfile, GOT_PACKFILE_SUFFIX, size) >= size)
176 		return got_error(GOT_ERR_NO_SPACE);
177 
178 	return NULL;
179 }
180 
181 static void
182 exec_privsep_child(int imsg_fds[2], const char *path, const char *repo_path)
183 {
184 	if (close(imsg_fds[0]) != 0) {
185 		fprintf(stderr, "%s: %s\n", getprogname(),
186 		    strerror(errno));
187 		_exit(1);
188 	}
189 
190 	if (dup2(imsg_fds[1], GOT_IMSG_FD_CHILD) == -1) {
191 		fprintf(stderr, "%s: %s\n", getprogname(),
192 		    strerror(errno));
193 		_exit(1);
194 	}
195 	if (closefrom(GOT_IMSG_FD_CHILD + 1) == -1) {
196 		fprintf(stderr, "%s: %s\n", getprogname(),
197 		    strerror(errno));
198 		_exit(1);
199 	}
200 
201 	if (execl(path, path, repo_path, (char *)NULL) == -1) {
202 		fprintf(stderr, "%s: %s: %s\n", getprogname(), path,
203 		    strerror(errno));
204 		_exit(1);
205 	}
206 }
207 
208 static const struct got_error *
209 request_packed_object(struct got_object **obj, struct got_pack *pack, int idx,
210     struct got_object_id *id)
211 {
212 	const struct got_error *err = NULL;
213 	struct imsgbuf *ibuf = pack->privsep_child->ibuf;
214 
215 	err = got_privsep_send_packed_obj_req(ibuf, idx, id);
216 	if (err)
217 		return err;
218 
219 	err = got_privsep_recv_obj(obj, ibuf);
220 	if (err)
221 		return err;
222 
223 	(*obj)->path_packfile = strdup(pack->path_packfile);
224 	if ((*obj)->path_packfile == NULL) {
225 		err = got_error_from_errno();
226 		return err;
227 	}
228 	memcpy(&(*obj)->id, id, sizeof((*obj)->id));
229 
230 	return NULL;
231 }
232 
233 static const struct got_error *
234 start_pack_privsep_child(struct got_pack *pack, struct got_packidx *packidx)
235 {
236 	const struct got_error *err = NULL;
237 	int imsg_fds[2];
238 	pid_t pid;
239 	struct imsgbuf *ibuf;
240 
241 	ibuf = calloc(1, sizeof(*ibuf));
242 	if (ibuf == NULL)
243 		return got_error_from_errno();
244 
245 	pack->privsep_child = calloc(1, sizeof(*pack->privsep_child));
246 	if (pack->privsep_child == NULL) {
247 		err = got_error_from_errno();
248 		free(ibuf);
249 		return err;
250 	}
251 
252 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1) {
253 		err = got_error_from_errno();
254 		goto done;
255 	}
256 
257 	pid = fork();
258 	if (pid == -1) {
259 		err = got_error_from_errno();
260 		goto done;
261 	} else if (pid == 0) {
262 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_PACK,
263 		    pack->path_packfile);
264 		/* not reached */
265 	}
266 
267 	if (close(imsg_fds[1]) != 0)
268 		return got_error_from_errno();
269 	pack->privsep_child->imsg_fd = imsg_fds[0];
270 	pack->privsep_child->pid = pid;
271 	imsg_init(ibuf, imsg_fds[0]);
272 	pack->privsep_child->ibuf = ibuf;
273 
274 	err = got_privsep_init_pack_child(ibuf, pack, packidx);
275 	if (err) {
276 		const struct got_error *child_err;
277 		err = got_privsep_send_stop(pack->privsep_child->imsg_fd);
278 		child_err = got_privsep_wait_for_child(
279 		    pack->privsep_child->pid);
280 		if (child_err && err == NULL)
281 			err = child_err;
282 	}
283 done:
284 	if (err) {
285 		free(ibuf);
286 		free(pack->privsep_child);
287 		pack->privsep_child = NULL;
288 	}
289 	return err;
290 }
291 
292 static const struct got_error *
293 read_packed_object_privsep(struct got_object **obj,
294     struct got_repository *repo, struct got_pack *pack,
295     struct got_packidx *packidx, int idx, struct got_object_id *id)
296 {
297 	const struct got_error *err = NULL;
298 
299 	if (pack->privsep_child)
300 		return request_packed_object(obj, pack, idx, id);
301 
302 	err = start_pack_privsep_child(pack, packidx);
303 	if (err)
304 		return err;
305 
306 	return request_packed_object(obj, pack, idx, id);
307 }
308 
309 
310 static const struct got_error *
311 open_packed_object(struct got_object **obj, struct got_object_id *id,
312     struct got_repository *repo)
313 {
314 	const struct got_error *err = NULL;
315 	struct got_pack *pack = NULL;
316 	struct got_packidx *packidx = NULL;
317 	int idx;
318 	char *path_packfile;
319 
320 	err = got_repo_search_packidx(&packidx, &idx, repo, id);
321 	if (err)
322 		return err;
323 
324 	err = get_packfile_path(&path_packfile, packidx);
325 	if (err)
326 		return err;
327 
328 	pack = got_repo_get_cached_pack(repo, path_packfile);
329 	if (pack == NULL) {
330 		err = got_repo_cache_pack(&pack, repo, path_packfile, packidx);
331 		if (err)
332 			goto done;
333 	}
334 
335 	err = read_packed_object_privsep(obj, repo, pack, packidx, idx, id);
336 	if (err)
337 		goto done;
338 
339 	err = got_repo_cache_pack(NULL, repo, (*obj)->path_packfile, packidx);
340 done:
341 	free(path_packfile);
342 	return err;
343 }
344 
345 static const struct got_error *
346 request_object(struct got_object **obj, struct got_repository *repo, int fd)
347 {
348 	const struct got_error *err = NULL;
349 	struct imsgbuf *ibuf;
350 
351 	ibuf = repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_OBJECT].ibuf;
352 
353 	err = got_privsep_send_obj_req(ibuf, fd);
354 	if (err)
355 		return err;
356 
357 	return got_privsep_recv_obj(obj, ibuf);
358 }
359 
360 static const struct got_error *
361 read_object_header_privsep(struct got_object **obj, struct got_repository *repo,
362     int obj_fd)
363 {
364 	int imsg_fds[2];
365 	pid_t pid;
366 	struct imsgbuf *ibuf;
367 
368 	if (repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_OBJECT].imsg_fd != -1)
369 		return request_object(obj, repo, obj_fd);
370 
371 	ibuf = calloc(1, sizeof(*ibuf));
372 	if (ibuf == NULL)
373 		return got_error_from_errno();
374 
375 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1)
376 		return got_error_from_errno();
377 
378 	pid = fork();
379 	if (pid == -1)
380 		return got_error_from_errno();
381 	else if (pid == 0) {
382 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_OBJECT,
383 		    repo->path);
384 		/* not reached */
385 	}
386 
387 	if (close(imsg_fds[1]) != 0)
388 		return got_error_from_errno();
389 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_OBJECT].imsg_fd =
390 	    imsg_fds[0];
391 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_OBJECT].pid = pid;
392 	imsg_init(ibuf, imsg_fds[0]);
393 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_OBJECT].ibuf = ibuf;
394 
395 	return request_object(obj, repo, obj_fd);
396 }
397 
398 
399 const struct got_error *
400 got_object_open(struct got_object **obj, struct got_repository *repo,
401     struct got_object_id *id)
402 {
403 	const struct got_error *err = NULL;
404 	char *path;
405 	int fd;
406 
407 	*obj = got_repo_get_cached_object(repo, id);
408 	if (*obj != NULL) {
409 		(*obj)->refcnt++;
410 		return NULL;
411 	}
412 
413 	err = open_packed_object(obj, id, repo);
414 	if (err && err->code != GOT_ERR_NO_OBJ)
415 		return err;
416 	if (*obj) {
417 		(*obj)->refcnt++;
418 		return got_repo_cache_object(repo, id, *obj);
419 	}
420 
421 	err = object_path(&path, id, repo);
422 	if (err)
423 		return err;
424 
425 	fd = open(path, O_RDONLY | O_NOFOLLOW, GOT_DEFAULT_FILE_MODE);
426 	if (fd == -1) {
427 		if (errno == ENOENT)
428 			err = got_error_no_obj(id);
429 		else
430 			err = got_error_from_errno();
431 		goto done;
432 	} else {
433 		err = read_object_header_privsep(obj, repo, fd);
434 		if (err)
435 			goto done;
436 		memcpy((*obj)->id.sha1, id->sha1, SHA1_DIGEST_LENGTH);
437 	}
438 
439 	(*obj)->refcnt++;
440 	err = got_repo_cache_object(repo, id, *obj);
441 done:
442 	free(path);
443 	if (fd != -1 && close(fd) != 0 && errno != EBADF && err == NULL)
444 		err = got_error_from_errno();
445 	return err;
446 
447 }
448 
449 const struct got_error *
450 got_object_open_by_id_str(struct got_object **obj, struct got_repository *repo,
451     const char *id_str)
452 {
453 	struct got_object_id id;
454 
455 	if (!got_parse_sha1_digest(id.sha1, id_str))
456 		return got_error(GOT_ERR_BAD_OBJ_ID_STR);
457 
458 	return got_object_open(obj, repo, &id);
459 }
460 
461 const struct got_error *
462 got_object_resolve_id_str(struct got_object_id **id,
463     struct got_repository *repo, const char *id_str)
464 {
465 	const struct got_error *err = NULL;
466 	struct got_object *obj;
467 
468 	err = got_object_open_by_id_str(&obj, repo, id_str);
469 	if (err)
470 		return err;
471 
472 	*id = got_object_id_dup(got_object_get_id(obj));
473 	got_object_close(obj);
474 	if (*id == NULL)
475 		return got_error_from_errno();
476 
477 	return NULL;
478 }
479 
480 static const struct got_error *
481 request_packed_commit(struct got_commit_object **commit, struct got_pack *pack,
482     int pack_idx, struct got_object_id *id)
483 {
484 	const struct got_error *err = NULL;
485 
486 	err = got_privsep_send_commit_req(pack->privsep_child->ibuf, -1, id,
487 	    pack_idx);
488 	if (err)
489 		return err;
490 
491 	return got_privsep_recv_commit(commit, pack->privsep_child->ibuf);
492 }
493 
494 static const struct got_error *
495 read_packed_commit_privsep(struct got_commit_object **commit,
496     struct got_pack *pack, struct got_packidx *packidx, int idx,
497     struct got_object_id *id)
498 {
499 	const struct got_error *err = NULL;
500 
501 	if (pack->privsep_child)
502 		return request_packed_commit(commit, pack, idx, id);
503 
504 	err = start_pack_privsep_child(pack, packidx);
505 	if (err)
506 		return err;
507 
508 	return request_packed_commit(commit, pack, idx, id);
509 }
510 
511 static const struct got_error *
512 request_commit(struct got_commit_object **commit, struct got_repository *repo,
513     int fd)
514 {
515 	const struct got_error *err = NULL;
516 	struct imsgbuf *ibuf;
517 
518 	ibuf = repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_COMMIT].ibuf;
519 
520 	err = got_privsep_send_commit_req(ibuf, fd, NULL, -1);
521 	if (err)
522 		return err;
523 
524 	return got_privsep_recv_commit(commit, ibuf);
525 }
526 
527 static const struct got_error *
528 read_commit_privsep(struct got_commit_object **commit, int obj_fd,
529     struct got_repository *repo)
530 {
531 	int imsg_fds[2];
532 	pid_t pid;
533 	struct imsgbuf *ibuf;
534 
535 	if (repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_COMMIT].imsg_fd != -1)
536 		return request_commit(commit, repo, obj_fd);
537 
538 	ibuf = calloc(1, sizeof(*ibuf));
539 	if (ibuf == NULL)
540 		return got_error_from_errno();
541 
542 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1)
543 		return got_error_from_errno();
544 
545 	pid = fork();
546 	if (pid == -1)
547 		return got_error_from_errno();
548 	else if (pid == 0) {
549 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_COMMIT,
550 		    repo->path);
551 		/* not reached */
552 	}
553 
554 	if (close(imsg_fds[1]) != 0)
555 		return got_error_from_errno();
556 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_COMMIT].imsg_fd =
557 	    imsg_fds[0];
558 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_COMMIT].pid = pid;
559 	imsg_init(ibuf, imsg_fds[0]);
560 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_COMMIT].ibuf = ibuf;
561 
562 	return request_commit(commit, repo, obj_fd);
563 }
564 
565 
566 static const struct got_error *
567 open_commit(struct got_commit_object **commit,
568     struct got_repository *repo, struct got_object_id *id, int check_cache)
569 {
570 	const struct got_error *err = NULL;
571 	struct got_packidx *packidx = NULL;
572 	int idx;
573 	char *path_packfile;
574 
575 	if (check_cache) {
576 		*commit = got_repo_get_cached_commit(repo, id);
577 		if (*commit != NULL) {
578 			(*commit)->refcnt++;
579 			return NULL;
580 		}
581 	} else
582 		*commit = NULL;
583 
584 	err = got_repo_search_packidx(&packidx, &idx, repo, id);
585 	if (err == NULL) {
586 		struct got_pack *pack = NULL;
587 
588 		err = get_packfile_path(&path_packfile, packidx);
589 		if (err)
590 			return err;
591 
592 		pack = got_repo_get_cached_pack(repo, path_packfile);
593 		if (pack == NULL) {
594 			err = got_repo_cache_pack(&pack, repo, path_packfile,
595 			    packidx);
596 			if (err)
597 				return err;
598 		}
599 		err = read_packed_commit_privsep(commit, pack,
600 		    packidx, idx, id);
601 	} else if (err->code == GOT_ERR_NO_OBJ) {
602 		int fd;
603 
604 		err = open_loose_object(&fd, id, repo);
605 		if (err)
606 			return err;
607 		err = read_commit_privsep(commit, fd, repo);
608 		if (close(fd) != 0 && errno != EBADF && err == NULL)
609 			err = got_error_from_errno();
610 	}
611 
612 	if (err == NULL) {
613 		(*commit)->refcnt++;
614 		err = got_repo_cache_commit(repo, id, *commit);
615 	}
616 
617 	return err;
618 }
619 
620 const struct got_error *
621 got_object_open_as_commit(struct got_commit_object **commit,
622     struct got_repository *repo, struct got_object_id *id)
623 {
624 	*commit = got_repo_get_cached_commit(repo, id);
625 	if (*commit != NULL) {
626 		(*commit)->refcnt++;
627 		return NULL;
628 	}
629 
630 	return open_commit(commit, repo, id, 0);
631 }
632 
633 const struct got_error *
634 got_object_commit_open(struct got_commit_object **commit,
635     struct got_repository *repo, struct got_object *obj)
636 {
637 	return open_commit(commit, repo, got_object_get_id(obj), 1);
638 }
639 
640 const struct got_error *
641 got_object_qid_alloc(struct got_object_qid **qid, struct got_object_id *id)
642 {
643 	const struct got_error *err = NULL;
644 
645 	*qid = calloc(1, sizeof(**qid));
646 	if (*qid == NULL)
647 		return got_error_from_errno();
648 
649 	(*qid)->id = got_object_id_dup(id);
650 	if ((*qid)->id == NULL) {
651 		err = got_error_from_errno();
652 		got_object_qid_free(*qid);
653 		*qid = NULL;
654 		return err;
655 	}
656 
657 	return NULL;
658 }
659 
660 static const struct got_error *
661 request_packed_tree(struct got_tree_object **tree, struct got_pack *pack,
662     int pack_idx, struct got_object_id *id)
663 {
664 	const struct got_error *err = NULL;
665 
666 	err = got_privsep_send_tree_req(pack->privsep_child->ibuf, -1, id,
667 	    pack_idx);
668 	if (err)
669 		return err;
670 
671 	return got_privsep_recv_tree(tree, pack->privsep_child->ibuf);
672 }
673 
674 static const struct got_error *
675 read_packed_tree_privsep(struct got_tree_object **tree,
676     struct got_pack *pack, struct got_packidx *packidx, int idx,
677     struct got_object_id *id)
678 {
679 	const struct got_error *err = NULL;
680 
681 	if (pack->privsep_child)
682 		return request_packed_tree(tree, pack, idx, id);
683 
684 	err = start_pack_privsep_child(pack, packidx);
685 	if (err)
686 		return err;
687 
688 	return request_packed_tree(tree, pack, idx, id);
689 }
690 
691 static const struct got_error *
692 request_tree(struct got_tree_object **tree, struct got_repository *repo,
693     int fd)
694 {
695 	const struct got_error *err = NULL;
696 	struct imsgbuf *ibuf;
697 
698 	ibuf = repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TREE].ibuf;
699 
700 	err = got_privsep_send_tree_req(ibuf, fd, NULL, -1);
701 	if (err)
702 		return err;
703 
704 	return got_privsep_recv_tree(tree, ibuf);
705 }
706 
707 const struct got_error *
708 read_tree_privsep(struct got_tree_object **tree, int obj_fd,
709     struct got_repository *repo)
710 {
711 	int imsg_fds[2];
712 	pid_t pid;
713 	struct imsgbuf *ibuf;
714 
715 	if (repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TREE].imsg_fd != -1)
716 		return request_tree(tree, repo, obj_fd);
717 
718 	ibuf = calloc(1, sizeof(*ibuf));
719 	if (ibuf == NULL)
720 		return got_error_from_errno();
721 
722 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1)
723 		return got_error_from_errno();
724 
725 	pid = fork();
726 	if (pid == -1)
727 		return got_error_from_errno();
728 	else if (pid == 0) {
729 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_TREE,
730 		    repo->path);
731 		/* not reached */
732 	}
733 
734 	if (close(imsg_fds[1]) != 0)
735 		return got_error_from_errno();
736 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TREE].imsg_fd =
737 	    imsg_fds[0];
738 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TREE].pid = pid;
739 	imsg_init(ibuf, imsg_fds[0]);
740 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TREE].ibuf = ibuf;
741 
742 
743 	return request_tree(tree, repo, obj_fd);
744 }
745 
746 static const struct got_error *
747 open_tree(struct got_tree_object **tree, struct got_repository *repo,
748     struct got_object_id *id, int check_cache)
749 {
750 	const struct got_error *err = NULL;
751 	struct got_packidx *packidx = NULL;
752 	int idx;
753 	char *path_packfile;
754 
755 	if (check_cache) {
756 		*tree = got_repo_get_cached_tree(repo, id);
757 		if (*tree != NULL) {
758 			(*tree)->refcnt++;
759 			return NULL;
760 		}
761 	} else
762 		*tree = NULL;
763 
764 	err = got_repo_search_packidx(&packidx, &idx, repo, id);
765 	if (err == NULL) {
766 		struct got_pack *pack = NULL;
767 
768 		err = get_packfile_path(&path_packfile, packidx);
769 		if (err)
770 			return err;
771 
772 		pack = got_repo_get_cached_pack(repo, path_packfile);
773 		if (pack == NULL) {
774 			err = got_repo_cache_pack(&pack, repo, path_packfile,
775 			    packidx);
776 			if (err)
777 				return err;
778 		}
779 		err = read_packed_tree_privsep(tree, pack,
780 		    packidx, idx, id);
781 	} else if (err->code == GOT_ERR_NO_OBJ) {
782 		int fd;
783 
784 		err = open_loose_object(&fd, id, repo);
785 		if (err)
786 			return err;
787 		err = read_tree_privsep(tree, fd, repo);
788 		if (close(fd) != 0 && errno != EBADF && err == NULL)
789 			err = got_error_from_errno();
790 	}
791 
792 	if (err == NULL) {
793 		(*tree)->refcnt++;
794 		err = got_repo_cache_tree(repo, id, *tree);
795 	}
796 
797 	return err;
798 }
799 
800 const struct got_error *
801 got_object_open_as_tree(struct got_tree_object **tree,
802     struct got_repository *repo, struct got_object_id *id)
803 {
804 	*tree = got_repo_get_cached_tree(repo, id);
805 	if (*tree != NULL) {
806 		(*tree)->refcnt++;
807 		return NULL;
808 	}
809 
810 	return open_tree(tree, repo, id, 0);
811 }
812 
813 const struct got_error *
814 got_object_tree_open(struct got_tree_object **tree,
815     struct got_repository *repo, struct got_object *obj)
816 {
817 	return open_tree(tree, repo, got_object_get_id(obj), 1);
818 }
819 
820 const struct got_tree_entries *
821 got_object_tree_get_entries(struct got_tree_object *tree)
822 {
823 	return &tree->entries;
824 }
825 
826 static const struct got_error *
827 request_packed_blob(uint8_t **outbuf, size_t *size, size_t *hdrlen, int outfd,
828     struct got_pack *pack, struct got_packidx *packidx, int idx,
829     struct got_object_id *id)
830 {
831 	const struct got_error *err = NULL;
832 	int outfd_child;
833 	int basefd, accumfd; /* temporary files for delta application */
834 
835 	basefd = got_opentempfd();
836 	if (basefd == -1)
837 		return got_error_from_errno();
838 	accumfd = got_opentempfd();
839 	if (accumfd == -1)
840 		return got_error_from_errno();
841 
842 	outfd_child = dup(outfd);
843 	if (outfd_child == -1)
844 		return got_error_from_errno();
845 
846 	err = got_privsep_send_blob_req(pack->privsep_child->ibuf, -1, id, idx);
847 	if (err)
848 		return err;
849 
850 	err = got_privsep_send_blob_outfd(pack->privsep_child->ibuf,
851 	    outfd_child);
852 	if (err) {
853 		close(outfd_child);
854 		return err;
855 	}
856 	err = got_privsep_send_tmpfd(pack->privsep_child->ibuf,
857 	    basefd);
858 	if (err) {
859 		close(basefd);
860 		close(accumfd);
861 		close(outfd_child);
862 		return err;
863 	}
864 
865 	err = got_privsep_send_tmpfd(pack->privsep_child->ibuf,
866 	    accumfd);
867 	if (err) {
868 		close(accumfd);
869 		close(outfd_child);
870 		return err;
871 	}
872 
873 	err = got_privsep_recv_blob(outbuf, size, hdrlen,
874 	    pack->privsep_child->ibuf);
875 	if (err)
876 		return err;
877 
878 	if (lseek(outfd, SEEK_SET, 0) == -1)
879 		err = got_error_from_errno();
880 
881 	return err;
882 }
883 
884 static const struct got_error *
885 read_packed_blob_privsep(uint8_t **outbuf, size_t *size, size_t *hdrlen,
886     int outfd, struct got_pack *pack, struct got_packidx *packidx, int idx,
887     struct got_object_id *id)
888 {
889 	const struct got_error *err = NULL;
890 
891 	if (pack->privsep_child == NULL) {
892 		err = start_pack_privsep_child(pack, packidx);
893 		if (err)
894 			return err;
895 	}
896 
897 	return request_packed_blob(outbuf, size, hdrlen, outfd, pack, packidx,
898 	    idx, id);
899 }
900 
901 static const struct got_error *
902 request_blob(uint8_t **outbuf, size_t *size, size_t *hdrlen, int outfd,
903     int infd, struct imsgbuf *ibuf)
904 {
905 	const struct got_error *err = NULL;
906 	int outfd_child;
907 
908 	outfd_child = dup(outfd);
909 	if (outfd_child == -1)
910 		return got_error_from_errno();
911 
912 	err = got_privsep_send_blob_req(ibuf, infd, NULL, -1);
913 	if (err)
914 		return err;
915 
916 	err = got_privsep_send_blob_outfd(ibuf, outfd_child);
917 	if (err) {
918 		close(outfd_child);
919 		return err;
920 	}
921 
922 	err = got_privsep_recv_blob(outbuf, size, hdrlen, ibuf);
923 	if (err)
924 		return err;
925 
926 	if (lseek(outfd, SEEK_SET, 0) == -1)
927 		return got_error_from_errno();
928 
929 	return err;
930 }
931 
932 static const struct got_error *
933 read_blob_privsep(uint8_t **outbuf, size_t *size, size_t *hdrlen,
934     int outfd, int infd, struct got_repository *repo)
935 {
936 	int imsg_fds[2];
937 	pid_t pid;
938 	struct imsgbuf *ibuf;
939 
940 	if (repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_BLOB].imsg_fd != -1) {
941 		ibuf = repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_BLOB].ibuf;
942 		return request_blob(outbuf, size, hdrlen, outfd, infd, ibuf);
943 	}
944 
945 	ibuf = calloc(1, sizeof(*ibuf));
946 	if (ibuf == NULL)
947 		return got_error_from_errno();
948 
949 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1)
950 		return got_error_from_errno();
951 
952 	pid = fork();
953 	if (pid == -1)
954 		return got_error_from_errno();
955 	else if (pid == 0) {
956 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_BLOB,
957 		    repo->path);
958 		/* not reached */
959 	}
960 
961 	if (close(imsg_fds[1]) != 0)
962 		return got_error_from_errno();
963 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_BLOB].imsg_fd =
964 	    imsg_fds[0];
965 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_BLOB].pid = pid;
966 	imsg_init(ibuf, imsg_fds[0]);
967 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_BLOB].ibuf = ibuf;
968 
969 	return request_blob(outbuf, size, hdrlen, outfd, infd, ibuf);
970 }
971 
972 static const struct got_error *
973 open_blob(struct got_blob_object **blob, struct got_repository *repo,
974     struct got_object_id *id, size_t blocksize)
975 {
976 	const struct got_error *err = NULL;
977 	struct got_packidx *packidx = NULL;
978 	int idx;
979 	char *path_packfile;
980 	uint8_t *outbuf;
981 	int outfd;
982 	size_t size, hdrlen;
983 	struct stat sb;
984 
985 	*blob = calloc(1, sizeof(**blob));
986 	if (*blob == NULL)
987 		return got_error_from_errno();
988 
989 	outfd = got_opentempfd();
990 	if (outfd == -1)
991 		return got_error_from_errno();
992 
993 	(*blob)->read_buf = malloc(blocksize);
994 	if ((*blob)->read_buf == NULL) {
995 		err = got_error_from_errno();
996 		goto done;
997 	}
998 
999 	err = got_repo_search_packidx(&packidx, &idx, repo, id);
1000 	if (err == NULL) {
1001 		struct got_pack *pack = NULL;
1002 
1003 		err = get_packfile_path(&path_packfile, packidx);
1004 		if (err)
1005 			goto done;
1006 
1007 		pack = got_repo_get_cached_pack(repo, path_packfile);
1008 		if (pack == NULL) {
1009 			err = got_repo_cache_pack(&pack, repo, path_packfile,
1010 			    packidx);
1011 			if (err)
1012 				goto done;
1013 		}
1014 		err = read_packed_blob_privsep(&outbuf, &size, &hdrlen, outfd,
1015 		    pack, packidx, idx, id);
1016 	} else if (err->code == GOT_ERR_NO_OBJ) {
1017 		int infd;
1018 
1019 		err = open_loose_object(&infd, id, repo);
1020 		if (err)
1021 			goto done;
1022 		err = read_blob_privsep(&outbuf, &size, &hdrlen, outfd, infd,
1023 		    repo);
1024 		if (close(infd) != 0 && errno != EBADF && err == NULL)
1025 			err = got_error_from_errno();
1026 	}
1027 	if (err)
1028 		goto done;
1029 
1030 	if (hdrlen > size) {
1031 		err = got_error(GOT_ERR_BAD_OBJ_HDR);
1032 		goto done;
1033 	}
1034 
1035 	if (outbuf) {
1036 		if (close(outfd) != 0 && err == NULL)
1037 			err = got_error_from_errno();
1038 		outfd = -1;
1039 		(*blob)->f = fmemopen(outbuf, size, "rb");
1040 		if ((*blob)->f == NULL) {
1041 			err = got_error_from_errno();
1042 			free(outbuf);
1043 			goto done;
1044 		}
1045 		(*blob)->data = outbuf;
1046 	} else {
1047 		if (fstat(outfd, &sb) == -1) {
1048 			err = got_error_from_errno();
1049 			goto done;
1050 		}
1051 
1052 		if (sb.st_size != size) {
1053 			err = got_error(GOT_ERR_PRIVSEP_LEN);
1054 			goto done;
1055 		}
1056 
1057 		(*blob)->f = fdopen(outfd, "rb");
1058 		if ((*blob)->f == NULL) {
1059 			err = got_error_from_errno();
1060 			close(outfd);
1061 			outfd = -1;
1062 			goto done;
1063 		}
1064 	}
1065 
1066 	(*blob)->hdrlen = hdrlen;
1067 	(*blob)->blocksize = blocksize;
1068 	memcpy(&(*blob)->id.sha1, id->sha1, SHA1_DIGEST_LENGTH);
1069 
1070 done:
1071 	if (err) {
1072 		if (*blob) {
1073 			if ((*blob)->f)
1074 				fclose((*blob)->f);
1075 			free((*blob)->read_buf);
1076 			free((*blob)->data);
1077 			free(*blob);
1078 			*blob = NULL;
1079 		} else if (outfd != -1)
1080 			close(outfd);
1081 	}
1082 	return err;
1083 }
1084 
1085 const struct got_error *
1086 got_object_open_as_blob(struct got_blob_object **blob,
1087     struct got_repository *repo, struct got_object_id *id,
1088     size_t blocksize)
1089 {
1090 	return open_blob(blob, repo, id, blocksize);
1091 }
1092 
1093 const struct got_error *
1094 got_object_blob_open(struct got_blob_object **blob,
1095     struct got_repository *repo, struct got_object *obj, size_t blocksize)
1096 {
1097 	return open_blob(blob, repo, got_object_get_id(obj), blocksize);
1098 }
1099 
1100 const struct got_error *
1101 got_object_blob_close(struct got_blob_object *blob)
1102 {
1103 	const struct got_error *err = NULL;
1104 	free(blob->read_buf);
1105 	if (fclose(blob->f) != 0)
1106 		err = got_error_from_errno();
1107 	free(blob->data);
1108 	free(blob);
1109 	return err;
1110 }
1111 
1112 char *
1113 got_object_blob_id_str(struct got_blob_object *blob, char *buf, size_t size)
1114 {
1115 	return got_sha1_digest_to_str(blob->id.sha1, buf, size);
1116 }
1117 
1118 size_t
1119 got_object_blob_get_hdrlen(struct got_blob_object *blob)
1120 {
1121 	return blob->hdrlen;
1122 }
1123 
1124 const uint8_t *
1125 got_object_blob_get_read_buf(struct got_blob_object *blob)
1126 {
1127 	return blob->read_buf;
1128 }
1129 
1130 const struct got_error *
1131 got_object_blob_read_block(size_t *outlenp, struct got_blob_object *blob)
1132 {
1133 	size_t n;
1134 
1135 	n = fread(blob->read_buf, 1, blob->blocksize, blob->f);
1136 	if (n == 0 && ferror(blob->f))
1137 		return got_ferror(blob->f, GOT_ERR_IO);
1138 	*outlenp = n;
1139 	return NULL;
1140 }
1141 
1142 const struct got_error *
1143 got_object_blob_dump_to_file(size_t *total_len, int *nlines,
1144     FILE *outfile, struct got_blob_object *blob)
1145 {
1146 	const struct got_error *err = NULL;
1147 	size_t n, len, hdrlen;
1148 	const uint8_t *buf;
1149 	int i;
1150 
1151 	if (total_len)
1152 		*total_len = 0;
1153 	if (nlines)
1154 		*nlines = 0;
1155 
1156 	hdrlen = got_object_blob_get_hdrlen(blob);
1157 	do {
1158 		err = got_object_blob_read_block(&len, blob);
1159 		if (err)
1160 			return err;
1161 		if (len == 0)
1162 			break;
1163 		if (total_len)
1164 			*total_len += len;
1165 		buf = got_object_blob_get_read_buf(blob);
1166 		if (nlines) {
1167 			for (i = 0; i < len; i++) {
1168 				if (buf[i] == '\n')
1169 					(*nlines)++;
1170 			}
1171 		}
1172 		/* Skip blob object header first time around. */
1173 		n = fwrite(buf + hdrlen, 1, len - hdrlen, outfile);
1174 		if (n != len - hdrlen)
1175 			return got_ferror(outfile, GOT_ERR_IO);
1176 		hdrlen = 0;
1177 	} while (len != 0);
1178 
1179 	if (fflush(outfile) != 0)
1180 		return got_error_from_errno();
1181 	rewind(outfile);
1182 
1183 	return NULL;
1184 }
1185 
1186 static const struct got_error *
1187 request_packed_tag(struct got_tag_object **tag, struct got_pack *pack,
1188     int pack_idx, struct got_object_id *id)
1189 {
1190 	const struct got_error *err = NULL;
1191 
1192 	err = got_privsep_send_tag_req(pack->privsep_child->ibuf, -1, id,
1193 	    pack_idx);
1194 	if (err)
1195 		return err;
1196 
1197 	return got_privsep_recv_tag(tag, pack->privsep_child->ibuf);
1198 }
1199 
1200 static const struct got_error *
1201 read_packed_tag_privsep(struct got_tag_object **tag,
1202     struct got_pack *pack, struct got_packidx *packidx, int idx,
1203     struct got_object_id *id)
1204 {
1205 	const struct got_error *err = NULL;
1206 
1207 	if (pack->privsep_child)
1208 		return request_packed_tag(tag, pack, idx, id);
1209 
1210 	err = start_pack_privsep_child(pack, packidx);
1211 	if (err)
1212 		return err;
1213 
1214 	return request_packed_tag(tag, pack, idx, id);
1215 }
1216 
1217 static const struct got_error *
1218 request_tag(struct got_tag_object **tag, struct got_repository *repo,
1219     int fd)
1220 {
1221 	const struct got_error *err = NULL;
1222 	struct imsgbuf *ibuf;
1223 
1224 	ibuf = repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TAG].ibuf;
1225 
1226 	err = got_privsep_send_tag_req(ibuf, fd, NULL, -1);
1227 	if (err)
1228 		return err;
1229 
1230 	return got_privsep_recv_tag(tag, ibuf);
1231 }
1232 
1233 static const struct got_error *
1234 read_tag_privsep(struct got_tag_object **tag, int obj_fd,
1235     struct got_repository *repo)
1236 {
1237 	int imsg_fds[2];
1238 	pid_t pid;
1239 	struct imsgbuf *ibuf;
1240 
1241 	if (repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TAG].imsg_fd != -1)
1242 		return request_tag(tag, repo, obj_fd);
1243 
1244 	ibuf = calloc(1, sizeof(*ibuf));
1245 	if (ibuf == NULL)
1246 		return got_error_from_errno();
1247 
1248 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fds) == -1)
1249 		return got_error_from_errno();
1250 
1251 	pid = fork();
1252 	if (pid == -1)
1253 		return got_error_from_errno();
1254 	else if (pid == 0) {
1255 		exec_privsep_child(imsg_fds, GOT_PATH_PROG_READ_TAG,
1256 		    repo->path);
1257 		/* not reached */
1258 	}
1259 
1260 	if (close(imsg_fds[1]) != 0)
1261 		return got_error_from_errno();
1262 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TAG].imsg_fd =
1263 	    imsg_fds[0];
1264 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TAG].pid = pid;
1265 	imsg_init(ibuf, imsg_fds[0]);
1266 	repo->privsep_children[GOT_REPO_PRIVSEP_CHILD_TAG].ibuf = ibuf;
1267 
1268 	return request_tag(tag, repo, obj_fd);
1269 }
1270 
1271 static const struct got_error *
1272 open_tag(struct got_tag_object **tag, struct got_repository *repo,
1273     struct got_object_id *id, int check_cache)
1274 {
1275 	const struct got_error *err = NULL;
1276 	struct got_packidx *packidx = NULL;
1277 	int idx;
1278 	char *path_packfile;
1279 
1280 	if (check_cache) {
1281 		*tag = got_repo_get_cached_tag(repo, id);
1282 		if (*tag != NULL) {
1283 			(*tag)->refcnt++;
1284 			return NULL;
1285 		}
1286 	} else
1287 		*tag = NULL;
1288 
1289 	err = got_repo_search_packidx(&packidx, &idx, repo, id);
1290 	if (err == NULL) {
1291 		struct got_pack *pack = NULL;
1292 
1293 		err = get_packfile_path(&path_packfile, packidx);
1294 		if (err)
1295 			return err;
1296 
1297 		pack = got_repo_get_cached_pack(repo, path_packfile);
1298 		if (pack == NULL) {
1299 			err = got_repo_cache_pack(&pack, repo, path_packfile,
1300 			    packidx);
1301 			if (err)
1302 				return err;
1303 		}
1304 		err = read_packed_tag_privsep(tag, pack,
1305 		    packidx, idx, id);
1306 	} else if (err->code == GOT_ERR_NO_OBJ) {
1307 		int fd;
1308 
1309 		err = open_loose_object(&fd, id, repo);
1310 		if (err)
1311 			return err;
1312 		err = read_tag_privsep(tag, fd, repo);
1313 		if (close(fd) != 0 && errno != EBADF && err == NULL)
1314 			err = got_error_from_errno();
1315 	}
1316 
1317 	if (err == NULL) {
1318 		(*tag)->refcnt++;
1319 		err = got_repo_cache_tag(repo, id, *tag);
1320 	}
1321 
1322 	return err;
1323 }
1324 
1325 const struct got_error *
1326 got_object_open_as_tag(struct got_tag_object **tag,
1327     struct got_repository *repo, struct got_object_id *id)
1328 {
1329 	*tag = got_repo_get_cached_tag(repo, id);
1330 	if (*tag != NULL) {
1331 		(*tag)->refcnt++;
1332 		return NULL;
1333 	}
1334 
1335 	return open_tag(tag, repo, id, 0);
1336 }
1337 
1338 const struct got_error *
1339 got_object_tag_open(struct got_tag_object **tag,
1340     struct got_repository *repo, struct got_object *obj)
1341 {
1342 	return open_tag(tag, repo, got_object_get_id(obj), 1);
1343 }
1344 
1345 int
1346 got_object_tag_get_object_type(struct got_tag_object *tag)
1347 {
1348 	return tag->obj_type;
1349 }
1350 
1351 struct got_object_id *
1352 got_object_tag_get_object_id(struct got_tag_object *tag)
1353 {
1354 	return &tag->id;
1355 }
1356 
1357 static struct got_tree_entry *
1358 find_entry_by_name(struct got_tree_object *tree, const char *name, size_t len)
1359 {
1360 	struct got_tree_entry *te;
1361 
1362 	/* Note that tree entries are sorted in strncmp() order. */
1363 	SIMPLEQ_FOREACH(te, &tree->entries.head, entry) {
1364 		int cmp = strncmp(te->name, name, len);
1365 		if (cmp < 0)
1366 			continue;
1367 		if (cmp > 0)
1368 			break;
1369 		if (te->name[len] == '\0')
1370 			return te;
1371 	}
1372 	return NULL;
1373 }
1374 
1375 const struct got_error *
1376 got_object_id_by_path(struct got_object_id **id, struct got_repository *repo,
1377     struct got_object_id *commit_id, const char *path)
1378 {
1379 	const struct got_error *err = NULL;
1380 	struct got_commit_object *commit = NULL;
1381 	struct got_tree_object *tree = NULL;
1382 	struct got_tree_entry *te = NULL;
1383 	const char *seg, *s;
1384 	size_t seglen;
1385 
1386 	*id = NULL;
1387 
1388 	/* We are expecting an absolute in-repository path. */
1389 	if (path[0] != '/')
1390 		return got_error(GOT_ERR_NOT_ABSPATH);
1391 
1392 	err = got_object_open_as_commit(&commit, repo, commit_id);
1393 	if (err)
1394 		goto done;
1395 
1396 	/* Handle opening of root of commit's tree. */
1397 	if (path[1] == '\0') {
1398 		*id = got_object_id_dup(commit->tree_id);
1399 		if (*id == NULL)
1400 			err = got_error_from_errno();
1401 		goto done;
1402 	}
1403 
1404 	err = got_object_open_as_tree(&tree, repo, commit->tree_id);
1405 	if (err)
1406 		goto done;
1407 
1408 	s = path;
1409 	s++; /* skip leading '/' */
1410 	seg = s;
1411 	seglen = 0;
1412 	while (*s) {
1413 		struct got_tree_object *next_tree;
1414 
1415 		if (*s != '/') {
1416 			s++;
1417 			seglen++;
1418 			if (*s)
1419 				continue;
1420 		}
1421 
1422 		te = find_entry_by_name(tree, seg, seglen);
1423 		if (te == NULL) {
1424 			err = got_error(GOT_ERR_NO_TREE_ENTRY);
1425 			goto done;
1426 		}
1427 
1428 		if (*s == '\0')
1429 			break;
1430 
1431 		seg = s + 1;
1432 		seglen = 0;
1433 		s++;
1434 		if (*s) {
1435 			err = got_object_open_as_tree(&next_tree, repo,
1436 			    te->id);
1437 			te = NULL;
1438 			if (err)
1439 				goto done;
1440 			got_object_tree_close(tree);
1441 			tree = next_tree;
1442 		}
1443 	}
1444 
1445 	if (te) {
1446 		*id = got_object_id_dup(te->id);
1447 		if (*id == NULL)
1448 			return got_error_from_errno();
1449 	} else
1450 		err = got_error(GOT_ERR_NO_TREE_ENTRY);
1451 done:
1452 	if (commit)
1453 		got_object_commit_close(commit);
1454 	if (tree)
1455 		got_object_tree_close(tree);
1456 	return err;
1457 }
1458 
1459 const struct got_error *
1460 got_object_tree_path_changed(int *changed,
1461     struct got_tree_object *tree01, struct got_tree_object *tree02,
1462     const char *path, struct got_repository *repo)
1463 {
1464 	const struct got_error *err = NULL;
1465 	struct got_tree_object *tree1 = NULL, *tree2 = NULL;
1466 	struct got_tree_entry *te1 = NULL, *te2 = NULL;
1467 	const char *seg, *s;
1468 	size_t seglen;
1469 
1470 	*changed = 0;
1471 
1472 	/* We are expecting an absolute in-repository path. */
1473 	if (path[0] != '/')
1474 		return got_error(GOT_ERR_NOT_ABSPATH);
1475 
1476 	/* We not do support comparing the root path. */
1477 	if (path[1] == '\0')
1478 		return got_error(GOT_ERR_BAD_PATH);
1479 
1480 	tree1 = tree01;
1481 	tree2 = tree02;
1482 	s = path;
1483 	s++; /* skip leading '/' */
1484 	seg = s;
1485 	seglen = 0;
1486 	while (*s) {
1487 		struct got_tree_object *next_tree1, *next_tree2;
1488 
1489 		if (*s != '/') {
1490 			s++;
1491 			seglen++;
1492 			if (*s)
1493 				continue;
1494 		}
1495 
1496 		te1 = find_entry_by_name(tree1, seg, seglen);
1497 		if (te1 == NULL) {
1498 			err = got_error(GOT_ERR_NO_OBJ);
1499 			goto done;
1500 		}
1501 
1502 		te2 = find_entry_by_name(tree2, seg, seglen);
1503 		if (te2 == NULL) {
1504 			*changed = 1;
1505 			goto done;
1506 		}
1507 
1508 		if (te1->mode != te2->mode) {
1509 			*changed = 1;
1510 			goto done;
1511 		}
1512 
1513 		if (got_object_id_cmp(te1->id, te2->id) == 0) {
1514 			*changed = 0;
1515 			goto done;
1516 		}
1517 
1518 		if (*s == '\0') { /* final path element */
1519 			*changed = 1;
1520 			goto done;
1521 		}
1522 
1523 		seg = s + 1;
1524 		s++;
1525 		seglen = 0;
1526 		if (*s) {
1527 			err = got_object_open_as_tree(&next_tree1, repo,
1528 			    te1->id);
1529 			te1 = NULL;
1530 			if (err)
1531 				goto done;
1532 			if (tree1 != tree01)
1533 				got_object_tree_close(tree1);
1534 			tree1 = next_tree1;
1535 
1536 			err = got_object_open_as_tree(&next_tree2, repo,
1537 			    te2->id);
1538 			te2 = NULL;
1539 			if (err)
1540 				goto done;
1541 			if (tree2 != tree02)
1542 				got_object_tree_close(tree2);
1543 			tree2 = next_tree2;
1544 		}
1545 	}
1546 done:
1547 	if (tree1 && tree1 != tree01)
1548 		got_object_tree_close(tree1);
1549 	if (tree2 && tree2 != tree02)
1550 		got_object_tree_close(tree2);
1551 	return err;
1552 }