1 /*
2  * Copyright (c) 2018, 2019 Ori Bernstein <ori@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/types.h>
18 #include <sys/stat.h>
19 #include <sys/queue.h>
20 #include <sys/uio.h>
21 #include <sys/socket.h>
22 #include <sys/wait.h>
23 #include <sys/resource.h>
24 #include <sys/socket.h>
25 
26 #include <endian.h>
27 #include <errno.h>
28 #include <err.h>
29 #include <fcntl.h>
30 #include <stdio.h>
31 #include <stdlib.h>
32 #include <string.h>
33 #include <stdint.h>
34 #include <sha1.h>
35 #include <unistd.h>
36 #include <zlib.h>
37 #include <ctype.h>
38 #include <limits.h>
39 #include <imsg.h>
40 #include <time.h>
41 #include <uuid.h>
42 #include <netdb.h>
43 #include <netinet/in.h>
44 
45 #include "got_error.h"
46 #include "got_reference.h"
47 #include "got_repository.h"
48 #include "got_path.h"
49 #include "got_cancel.h"
50 #include "got_worktree.h"
51 #include "got_object.h"
52 #include "got_opentemp.h"
53 #include "got_fetch.h"
54 
55 #include "got_lib_delta.h"
56 #include "got_lib_inflate.h"
57 #include "got_lib_object.h"
58 #include "got_lib_object_parse.h"
59 #include "got_lib_object_create.h"
60 #include "got_lib_pack.h"
61 #include "got_lib_sha1.h"
62 #include "got_lib_privsep.h"
63 #include "got_lib_object_cache.h"
64 #include "got_lib_repository.h"
65 
66 #ifndef nitems
67 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
68 #endif
69 
70 #ifndef MIN
71 #define	MIN(_a,_b) ((_a) < (_b) ? (_a) : (_b))
72 #endif
73 
74 static int
75 hassuffix(char *base, char *suf)
76 {
77 	int nb, ns;
78 
79 	nb = strlen(base);
80 	ns = strlen(suf);
81 	if (ns <= nb && strcmp(base + (nb - ns), suf) == 0)
82 		return 1;
83 	return 0;
84 }
85 
86 static const struct got_error *
87 dial_ssh(pid_t *fetchpid, int *fetchfd, const char *host, const char *port,
88     const char *path, const char *direction, int verbosity)
89 {
90 	const struct got_error *error = NULL;
91 	int pid, pfd[2];
92 	char cmd[64];
93 	char *argv[11];
94 	int i = 0, j;
95 
96 	*fetchpid = -1;
97 	*fetchfd = -1;
98 
99 	argv[i++] = GOT_FETCH_PATH_SSH;
100 	if (port != NULL) {
101 		argv[i++] = "-p";
102 		argv[i++] = (char *)port;
103 	}
104 	if (verbosity == -1) {
105 		argv[i++] = "-q";
106 	} else {
107 		/* ssh(1) allows up to 3 "-v" options. */
108 		for (j = 0; j < MIN(3, verbosity); j++)
109 			argv[i++] = "-v";
110 	}
111 	argv[i++] = "--";
112 	argv[i++] = (char *)host;
113 	argv[i++] = (char *)cmd;
114 	argv[i++] = (char *)path;
115 	argv[i++] = NULL;
116 
117 	if (pipe(pfd) == -1)
118 		return got_error_from_errno("pipe");
119 
120 	pid = fork();
121 	if (pid == -1) {
122 		error = got_error_from_errno("fork");
123 		close(pfd[0]);
124 		close(pfd[1]);
125 		return error;
126 	} else if (pid == 0) {
127 		int n;
128 		close(pfd[1]);
129 		dup2(pfd[0], 0);
130 		dup2(pfd[0], 1);
131 		n = snprintf(cmd, sizeof(cmd), "git-%s-pack", direction);
132 		if (n < 0 || n >= sizeof(cmd))
133 			err(1, "snprintf");
134 		if (execv(GOT_FETCH_PATH_SSH, argv) == -1)
135 			err(1, "execl");
136 		abort(); /* not reached */
137 	} else {
138 		close(pfd[0]);
139 		*fetchpid = pid;
140 		*fetchfd = pfd[1];
141 		return NULL;
142 	}
143 }
144 
145 static const struct got_error *
146 dial_git(int *fetchfd, const char *host, const char *port, const char *path,
147     const char *direction)
148 {
149 	const struct got_error *err = NULL;
150 	struct addrinfo hints, *servinfo, *p;
151 	char *cmd = NULL, *pkt = NULL;
152 	int fd = -1, totlen, r, eaicode;
153 
154 	*fetchfd = -1;
155 
156 	if (port == NULL)
157 		port = GOT_DEFAULT_GIT_PORT_STR;
158 
159 	memset(&hints, 0, sizeof hints);
160 	hints.ai_family = AF_UNSPEC;
161 	hints.ai_socktype = SOCK_STREAM;
162 	eaicode = getaddrinfo(host, port, &hints, &servinfo);
163 	if (eaicode) {
164 		char msg[512];
165 		snprintf(msg, sizeof(msg), "%s: %s", host,
166 		    gai_strerror(eaicode));
167 		return got_error_msg(GOT_ERR_ADDRINFO, msg);
168 	}
169 
170 	for (p = servinfo; p != NULL; p = p->ai_next) {
171 		if ((fd = socket(p->ai_family, p->ai_socktype,
172 		    p->ai_protocol)) == -1)
173 			continue;
174 		if (connect(fd, p->ai_addr, p->ai_addrlen) == 0) {
175 			err = NULL;
176 			break;
177 		}
178 		err = got_error_from_errno("connect");
179 		close(fd);
180 	}
181 	if (p == NULL)
182 		goto done;
183 
184 	if (asprintf(&cmd, "git-%s-pack %s", direction, path) == -1) {
185 		err = got_error_from_errno("asprintf");
186 		goto done;
187 	}
188 	totlen = 4 + strlen(cmd) + 1 + strlen("host=") + strlen(host) + 1;
189 	if (asprintf(&pkt, "%04x%s", totlen, cmd) == -1) {
190 		err = got_error_from_errno("asprintf");
191 		goto done;
192 	}
193 	r = write(fd, pkt, strlen(pkt) + 1);
194 	if (r == -1) {
195 		err = got_error_from_errno("write");
196 		goto done;
197 	}
198 	if (asprintf(&pkt, "host=%s", host) == -1) {
199 		err = got_error_from_errno("asprintf");
200 		goto done;
201 	}
202 	r = write(fd, pkt, strlen(pkt) + 1);
203 	if (r == -1) {
204 		err = got_error_from_errno("write");
205 		goto done;
206 	}
207 done:
208 	free(cmd);
209 	free(pkt);
210 	if (err) {
211 		if (fd != -1)
212 			close(fd);
213 	} else
214 		*fetchfd = fd;
215 	return err;
216 }
217 
218 const struct got_error *
219 got_fetch_connect(pid_t *fetchpid, int *fetchfd, const char *proto,
220     const char *host, const char *port, const char *server_path, int verbosity)
221 {
222 	const struct got_error *err = NULL;
223 
224 	*fetchpid = -1;
225 	*fetchfd = -1;
226 
227 	if (strcmp(proto, "ssh") == 0 || strcmp(proto, "git+ssh") == 0)
228 		err = dial_ssh(fetchpid, fetchfd, host, port, server_path,
229 		    "upload", verbosity);
230 	else if (strcmp(proto, "git") == 0)
231 		err = dial_git(fetchfd, host, port, server_path, "upload");
232 	else if (strcmp(proto, "http") == 0 || strcmp(proto, "git+http") == 0)
233 		err = got_error_path(proto, GOT_ERR_NOT_IMPL);
234 	else
235 		err = got_error_path(proto, GOT_ERR_BAD_PROTO);
236 	return err;
237 }
238 
239 const struct got_error *
240 got_fetch_parse_uri(char **proto, char **host, char **port,
241     char **server_path, char **repo_name, const char *uri)
242 {
243 	const struct got_error *err = NULL;
244 	char *s, *p, *q;
245 	int n;
246 
247 	*proto = *host = *port = *server_path = *repo_name = NULL;
248 
249 	p = strstr(uri, "://");
250 	if (!p) {
251 		/* Try parsing Git's "scp" style URL syntax. */
252 		*proto = strdup("ssh");
253 		if (proto == NULL) {
254 			err = got_error_from_errno("strdup");
255 			goto done;
256 		}
257 		s = (char *)uri;
258 		q = strchr(s, ':');
259 		if (q == NULL) {
260 			err = got_error(GOT_ERR_PARSE_URI);
261 			goto done;
262 		}
263 		/* No slashes allowed before first colon. */
264 		p = strchr(s, '/');
265 		if (p && q > p) {
266 			err = got_error(GOT_ERR_PARSE_URI);
267 			goto done;
268 		}
269 		*host = strndup(s, q - s);
270 		if (*host == NULL) {
271 			err = got_error_from_errno("strndup");
272 			goto done;
273 		}
274 		p = q + 1;
275 	} else {
276 		*proto = strndup(uri, p - uri);
277 		if (proto == NULL) {
278 			err = got_error_from_errno("strndup");
279 			goto done;
280 		}
281 		s = p + 3;
282 
283 		p = strstr(s, "/");
284 		if (p == NULL || strlen(p) == 1) {
285 			err = got_error(GOT_ERR_PARSE_URI);
286 			goto done;
287 		}
288 
289 		q = memchr(s, ':', p - s);
290 		if (q) {
291 			*host = strndup(s, q - s);
292 			if (*host == NULL) {
293 				err = got_error_from_errno("strndup");
294 				goto done;
295 			}
296 			*port = strndup(q + 1, p - (q + 1));
297 			if (*port == NULL) {
298 				err = got_error_from_errno("strndup");
299 				goto done;
300 			}
301 		} else {
302 			*host = strndup(s, p - s);
303 			if (*host == NULL) {
304 				err = got_error_from_errno("strndup");
305 				goto done;
306 			}
307 		}
308 	}
309 
310 	while (p[0] == '/' && p[1] == '/')
311 		p++;
312 	*server_path = strdup(p);
313 	if (*server_path == NULL) {
314 		err = got_error_from_errno("strdup");
315 		goto done;
316 	}
317 	got_path_strip_trailing_slashes(*server_path);
318 
319 	p = strrchr(p, '/');
320 	if (!p || strlen(p) <= 1) {
321 		err = got_error(GOT_ERR_PARSE_URI);
322 		goto done;
323 	}
324 	p++;
325 	n = strlen(p);
326 	if (n == 0) {
327 		err = got_error(GOT_ERR_PARSE_URI);
328 		goto done;
329 	}
330 	if (hassuffix(p, ".git"))
331 		n -= 4;
332 	*repo_name = strndup(p, (p + n) - p);
333 	if (*repo_name == NULL) {
334 		err = got_error_from_errno("strndup");
335 		goto done;
336 	}
337 done:
338 	if (err) {
339 		free(*proto);
340 		*proto = NULL;
341 		free(*host);
342 		*host = NULL;
343 		free(*port);
344 		*port = NULL;
345 		free(*server_path);
346 		*server_path = NULL;
347 		free(*repo_name);
348 		*repo_name = NULL;
349 	}
350 	return err;
351 }
352 
353 const struct got_error*
354 got_fetch_pack(struct got_object_id **pack_hash, struct got_pathlist_head *refs,
355     struct got_pathlist_head *symrefs, const char *remote_name,
356     int mirror_references, int fetch_all_branches,
357     struct got_pathlist_head *wanted_branches,
358     struct got_pathlist_head *wanted_refs, int list_refs_only, int verbosity,
359     int fetchfd, struct got_repository *repo,
360     got_fetch_progress_cb progress_cb, void *progress_arg)
361 {
362 	size_t i;
363 	int imsg_fetchfds[2], imsg_idxfds[2];
364 	int packfd = -1, npackfd = -1, idxfd = -1, nidxfd = -1, nfetchfd = -1;
365 	int tmpfds[3];
366 	int fetchstatus, idxstatus, done = 0;
367 	const struct got_error *err;
368 	struct imsgbuf fetchibuf, idxibuf;
369 	pid_t fetchpid, idxpid;
370 	char *tmppackpath = NULL, *tmpidxpath = NULL;
371 	char *packpath = NULL, *idxpath = NULL, *id_str = NULL;
372 	const char *repo_path = NULL;
373 	struct got_pathlist_head have_refs;
374 	struct got_pathlist_entry *pe;
375 	struct got_reflist_head my_refs;
376 	struct got_reflist_entry *re;
377 	off_t packfile_size = 0;
378 	struct got_packfile_hdr pack_hdr;
379 	uint32_t nobj = 0;
380 	char *ref_prefix = NULL;
381 	size_t ref_prefixlen = 0;
382 	char *path;
383 	char *progress = NULL;
384 
385 	*pack_hash = NULL;
386 
387 	/*
388 	 * Prevent fetching of references that won't make any
389 	 * sense outside of the remote repository's context.
390 	 */
391 	TAILQ_FOREACH(pe, wanted_refs, entry) {
392 		const char *refname = pe->path;
393 		if (strncmp(refname, "refs/got/", 9) == 0 ||
394 		    strncmp(refname, "got/", 4) == 0 ||
395 		    strncmp(refname, "refs/remotes/", 13) == 0 ||
396 		    strncmp(refname, "remotes/", 8) == 0)
397 			return got_error_path(refname, GOT_ERR_FETCH_BAD_REF);
398 	}
399 
400 	if (!list_refs_only)
401 		repo_path = got_repo_get_path_git_dir(repo);
402 
403 	for (i = 0; i < nitems(tmpfds); i++)
404 		tmpfds[i] = -1;
405 
406 	TAILQ_INIT(&have_refs);
407 	SIMPLEQ_INIT(&my_refs);
408 
409 	if (!mirror_references) {
410 		if (asprintf(&ref_prefix, "refs/remotes/%s/",
411 		    remote_name) == -1)
412 			return got_error_from_errno("asprintf");
413 		ref_prefixlen = strlen(ref_prefix);
414 	}
415 
416 	if (!list_refs_only) {
417 		err = got_ref_list(&my_refs, repo, NULL,
418 		    got_ref_cmp_by_name, NULL);
419 		if (err)
420 			goto done;
421 	}
422 
423 	SIMPLEQ_FOREACH(re, &my_refs, entry) {
424 		struct got_object_id *id;
425 		const char *refname;
426 
427 		if (got_ref_is_symbolic(re->ref))
428 			continue;
429 
430 		refname = got_ref_get_name(re->ref);
431 
432 		if (mirror_references) {
433 			char *name;
434 			err = got_ref_resolve(&id, repo, re->ref);
435 			if (err)
436 				goto done;
437 			name = strdup(refname);
438 			if (name == NULL) {
439 				err = got_error_from_errno("strdup");
440 				goto done;
441 			}
442 			err = got_pathlist_append(&have_refs, name, id);
443 			if (err)
444 				goto done;
445 			continue;
446 		}
447 
448 		if (strncmp("refs/tags/", refname, 10) == 0) {
449 			char *tagname;
450 
451 			err = got_ref_resolve(&id, repo, re->ref);
452 			if (err)
453 				goto done;
454 			tagname = strdup(refname);
455 			if (tagname == NULL) {
456 				err = got_error_from_errno("strdup");
457 				goto done;
458 			}
459 			err = got_pathlist_append(&have_refs, tagname, id);
460 			if (err) {
461 				free(tagname);
462 				goto done;
463 			}
464 		}
465 
466 		if (strncmp(ref_prefix, refname, ref_prefixlen) == 0) {
467 			char *branchname;
468 
469 			err = got_ref_resolve(&id, repo, re->ref);
470 			if (err)
471 				goto done;
472 
473 			if (asprintf(&branchname, "refs/heads/%s",
474 			    refname + ref_prefixlen) == -1) {
475 				err = got_error_from_errno("asprintf");
476 				goto done;
477 			}
478 			err = got_pathlist_append(&have_refs, branchname, id);
479 			if (err) {
480 				free(branchname);
481 				goto done;
482 			}
483 		}
484 	}
485 
486 	if (list_refs_only) {
487 		packfd = got_opentempfd();
488 		if (packfd == -1) {
489 			err = got_error_from_errno("got_opentempfd");
490 			goto done;
491 		}
492 	} else {
493 		if (asprintf(&path, "%s/%s/fetching.pack",
494 		    repo_path, GOT_OBJECTS_PACK_DIR) == -1) {
495 			err = got_error_from_errno("asprintf");
496 			goto done;
497 		}
498 		err = got_opentemp_named_fd(&tmppackpath, &packfd, path);
499 		free(path);
500 		if (err)
501 			goto done;
502 		if (fchmod(packfd, GOT_DEFAULT_FILE_MODE) != 0) {
503 			err = got_error_from_errno2("fchmod", tmppackpath);
504 			goto done;
505 		}
506 	}
507 	if (list_refs_only) {
508 		idxfd = got_opentempfd();
509 		if (idxfd == -1) {
510 			err = got_error_from_errno("got_opentempfd");
511 			goto done;
512 		}
513 	} else {
514 		if (asprintf(&path, "%s/%s/fetching.idx",
515 		    repo_path, GOT_OBJECTS_PACK_DIR) == -1) {
516 			err = got_error_from_errno("asprintf");
517 			goto done;
518 		}
519 		err = got_opentemp_named_fd(&tmpidxpath, &idxfd, path);
520 		free(path);
521 		if (err)
522 			goto done;
523 		if (fchmod(idxfd, GOT_DEFAULT_FILE_MODE) != 0) {
524 			err = got_error_from_errno2("fchmod", tmpidxpath);
525 			goto done;
526 		}
527 	}
528 	nidxfd = dup(idxfd);
529 	if (nidxfd == -1) {
530 		err = got_error_from_errno("dup");
531 		goto done;
532 	}
533 
534 	for (i = 0; i < nitems(tmpfds); i++) {
535 		tmpfds[i] = got_opentempfd();
536 		if (tmpfds[i] == -1) {
537 			err = got_error_from_errno("got_opentempfd");
538 			goto done;
539 		}
540 	}
541 
542 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_fetchfds) == -1) {
543 		err = got_error_from_errno("socketpair");
544 		goto done;
545 	}
546 
547 	fetchpid = fork();
548 	if (fetchpid == -1) {
549 		err = got_error_from_errno("fork");
550 		goto done;
551 	} else if (fetchpid == 0){
552 		got_privsep_exec_child(imsg_fetchfds,
553 		    GOT_PATH_PROG_FETCH_PACK, tmppackpath);
554 	}
555 
556 	if (close(imsg_fetchfds[1]) != 0) {
557 		err = got_error_from_errno("close");
558 		goto done;
559 	}
560 	imsg_init(&fetchibuf, imsg_fetchfds[0]);
561 	nfetchfd = dup(fetchfd);
562 	if (nfetchfd == -1) {
563 		err = got_error_from_errno("dup");
564 		goto done;
565 	}
566 	err = got_privsep_send_fetch_req(&fetchibuf, nfetchfd, &have_refs,
567 	    fetch_all_branches, wanted_branches, wanted_refs,
568 	    list_refs_only, verbosity);
569 	if (err != NULL)
570 		goto done;
571 	nfetchfd = -1;
572 	npackfd = dup(packfd);
573 	if (npackfd == -1) {
574 		err = got_error_from_errno("dup");
575 		goto done;
576 	}
577 	err = got_privsep_send_fetch_outfd(&fetchibuf, npackfd);
578 	if (err != NULL)
579 		goto done;
580 	npackfd = -1;
581 
582 	packfile_size = 0;
583 	progress = calloc(GOT_FETCH_PKTMAX, 1);
584 	if (progress == NULL) {
585 		err = got_error_from_errno("calloc");
586 		goto done;
587 	}
588 
589 	*pack_hash = calloc(1, sizeof(**pack_hash));
590 	if (*pack_hash == NULL) {
591 		err = got_error_from_errno("calloc");
592 		goto done;
593 	}
594 
595 	while (!done) {
596 		struct got_object_id *id = NULL;
597 		char *refname = NULL;
598 		char *server_progress = NULL;
599 		off_t packfile_size_cur = 0;
600 
601 		err = got_privsep_recv_fetch_progress(&done,
602 		    &id, &refname, symrefs, &server_progress,
603 		    &packfile_size_cur, (*pack_hash)->sha1, &fetchibuf);
604 		if (err != NULL)
605 			goto done;
606 		if (!done && refname && id) {
607 			err = got_pathlist_insert(NULL, refs, refname, id);
608 			if (err)
609 				goto done;
610 		} else if (!done && server_progress) {
611 			char *p;
612 			/*
613 			 * XXX git-daemon tends to send batched output with
614 			 * lines spanning separate packets. Buffer progress
615 			 * output until we see a CR or LF to avoid giving
616 			 * partial lines of progress output to the callback.
617 			 */
618 			if (strlcat(progress, server_progress,
619 			    GOT_FETCH_PKTMAX) >= GOT_FETCH_PKTMAX) {
620 				progress[0] = '\0'; /* discard */
621 				continue;
622 			}
623 			while ((p = strchr(progress, '\r')) != NULL ||
624 			    (p = strchr(progress, '\n')) != NULL) {
625 				char *s;
626 				size_t n;
627 				char c = *p;
628 				*p = '\0';
629 				if (asprintf(&s, "%s%s", progress,
630 				    c == '\n' ? "\n" : "") == -1) {
631 					err = got_error_from_errno("asprintf");
632 					goto done;
633 				}
634 				err = progress_cb(progress_arg, s,
635 				    packfile_size_cur, 0, 0, 0, 0);
636 				free(s);
637 				if (err)
638 					break;
639 				n = strlen(progress);
640 				if (n < GOT_FETCH_PKTMAX - 1) {
641 					memmove(progress, &progress[n + 1],
642 					    GOT_FETCH_PKTMAX - n - 1);
643 				} else
644 					progress[0] = '\0';
645 			}
646 			free(server_progress);
647 			if (err)
648 				goto done;
649 		} else if (!done && packfile_size_cur != packfile_size) {
650 			err = progress_cb(progress_arg, NULL,
651 			    packfile_size_cur, 0, 0, 0, 0);
652 			if (err)
653 				break;
654 			packfile_size = packfile_size_cur;
655 		}
656 	}
657 	if (waitpid(fetchpid, &fetchstatus, 0) == -1) {
658 		err = got_error_from_errno("waitpid");
659 		goto done;
660 	}
661 
662 	if (lseek(packfd, 0, SEEK_SET) == -1) {
663 		err = got_error_from_errno("lseek");
664 		goto done;
665 	}
666 
667 	/* If zero data was fetched without error we are already up-to-date. */
668 	if (packfile_size == 0) {
669 		free(*pack_hash);
670 		*pack_hash = NULL;
671 		goto done;
672 	} else if (packfile_size < sizeof(pack_hdr) + SHA1_DIGEST_LENGTH) {
673 		err = got_error_msg(GOT_ERR_BAD_PACKFILE, "short pack file");
674 		goto done;
675 	} else {
676 		ssize_t n;
677 
678 		n = read(packfd, &pack_hdr, sizeof(pack_hdr));
679 		if (n == -1) {
680 			err = got_error_from_errno("read");
681 			goto done;
682 		}
683 		if (n != sizeof(pack_hdr)) {
684 			err = got_error(GOT_ERR_IO);
685 			goto done;
686 		}
687 		if (pack_hdr.signature != htobe32(GOT_PACKFILE_SIGNATURE)) {
688 			err = got_error_msg(GOT_ERR_BAD_PACKFILE,
689 			    "bad pack file signature");
690 			goto done;
691 		}
692 		if (pack_hdr.version != htobe32(GOT_PACKFILE_VERSION)) {
693 			err = got_error_msg(GOT_ERR_BAD_PACKFILE,
694 			    "bad pack file version");
695 			goto done;
696 		}
697 		nobj = be32toh(pack_hdr.nobjects);
698 		if (nobj == 0 &&
699 		    packfile_size > sizeof(pack_hdr) + SHA1_DIGEST_LENGTH)
700 			return got_error_msg(GOT_ERR_BAD_PACKFILE,
701 			    "bad pack file with zero objects");
702 		if (nobj != 0 &&
703 		    packfile_size <= sizeof(pack_hdr) + SHA1_DIGEST_LENGTH)
704 			return got_error_msg(GOT_ERR_BAD_PACKFILE,
705 			    "empty pack file with non-zero object count");
706 	}
707 
708 	/*
709 	 * If the pack file contains no objects, we may only need to update
710 	 * references in our repository. The caller will take care of that.
711 	 */
712 	if (nobj == 0)
713 		goto done;
714 
715 	if (lseek(packfd, 0, SEEK_SET) == -1) {
716 		err = got_error_from_errno("lseek");
717 		goto done;
718 	}
719  
720 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, imsg_idxfds) == -1) {
721 		err = got_error_from_errno("socketpair");
722 		goto done;
723 	}
724 	idxpid = fork();
725 	if (idxpid == -1) {
726 		err= got_error_from_errno("fork");
727 		goto done;
728 	} else if (idxpid == 0)
729 		got_privsep_exec_child(imsg_idxfds,
730 		    GOT_PATH_PROG_INDEX_PACK, tmppackpath);
731 	if (close(imsg_idxfds[1]) != 0) {
732 		err = got_error_from_errno("close");
733 		goto done;
734 	}
735 	imsg_init(&idxibuf, imsg_idxfds[0]);
736 
737 	npackfd = dup(packfd);
738 	if (npackfd == -1) {
739 		err = got_error_from_errno("dup");
740 		goto done;
741 	}
742 	err = got_privsep_send_index_pack_req(&idxibuf, (*pack_hash)->sha1,
743 	    npackfd);
744 	if (err != NULL)
745 		goto done;
746 	npackfd = -1;
747 	err = got_privsep_send_index_pack_outfd(&idxibuf, nidxfd);
748 	if (err != NULL)
749 		goto done;
750 	nidxfd = -1;
751 	for (i = 0; i < nitems(tmpfds); i++) {
752 		err = got_privsep_send_tmpfd(&idxibuf, tmpfds[i]);
753 		if (err != NULL)
754 			goto done;
755 		tmpfds[i] = -1;
756 	}
757 	done = 0;
758 	while (!done) {
759 		int nobj_total, nobj_indexed, nobj_loose, nobj_resolved;
760 
761 		err = got_privsep_recv_index_progress(&done, &nobj_total,
762 		    &nobj_indexed, &nobj_loose, &nobj_resolved,
763 		    &idxibuf);
764 		if (err != NULL)
765 			goto done;
766 		if (nobj_indexed != 0) {
767 			err = progress_cb(progress_arg, NULL,
768 			    packfile_size, nobj_total,
769 			    nobj_indexed, nobj_loose, nobj_resolved);
770 			if (err)
771 				break;
772 		}
773 		imsg_clear(&idxibuf);
774 	}
775 	if (close(imsg_idxfds[0]) == -1) {
776 		err = got_error_from_errno("close");
777 		goto done;
778 	}
779 	if (waitpid(idxpid, &idxstatus, 0) == -1) {
780 		err = got_error_from_errno("waitpid");
781 		goto done;
782 	}
783 
784 	err = got_object_id_str(&id_str, *pack_hash);
785 	if (err)
786 		goto done;
787 	if (asprintf(&packpath, "%s/%s/pack-%s.pack",
788 	    repo_path, GOT_OBJECTS_PACK_DIR, id_str) == -1) {
789 		err = got_error_from_errno("asprintf");
790 		goto done;
791 	}
792 
793 	if (asprintf(&idxpath, "%s/%s/pack-%s.idx",
794 	    repo_path, GOT_OBJECTS_PACK_DIR, id_str) == -1) {
795 		err = got_error_from_errno("asprintf");
796 		goto done;
797 	}
798 
799 	if (rename(tmppackpath, packpath) == -1) {
800 		err = got_error_from_errno3("rename", tmppackpath, packpath);
801 		goto done;
802 	}
803 	free(tmppackpath);
804 	tmppackpath = NULL;
805 	if (rename(tmpidxpath, idxpath) == -1) {
806 		err = got_error_from_errno3("rename", tmpidxpath, idxpath);
807 		goto done;
808 	}
809 	free(tmpidxpath);
810 	tmpidxpath = NULL;
811 
812 done:
813 	if (tmppackpath && unlink(tmppackpath) == -1 && err == NULL)
814 		err = got_error_from_errno2("unlink", tmppackpath);
815 	if (tmpidxpath && unlink(tmpidxpath) == -1 && err == NULL)
816 		err = got_error_from_errno2("unlink", tmpidxpath);
817 	if (nfetchfd != -1 && close(nfetchfd) == -1 && err == NULL)
818 		err = got_error_from_errno("close");
819 	if (npackfd != -1 && close(npackfd) == -1 && err == NULL)
820 		err = got_error_from_errno("close");
821 	if (packfd != -1 && close(packfd) == -1 && err == NULL)
822 		err = got_error_from_errno("close");
823 	if (idxfd != -1 && close(idxfd) == -1 && err == NULL)
824 		err = got_error_from_errno("close");
825 	for (i = 0; i < nitems(tmpfds); i++) {
826 		if (tmpfds[i] != -1 && close(tmpfds[i]) == -1 && err == NULL)
827 			err = got_error_from_errno("close");
828 	}
829 	free(tmppackpath);
830 	free(tmpidxpath);
831 	free(idxpath);
832 	free(packpath);
833 	free(ref_prefix);
834 	free(progress);
835 
836 	TAILQ_FOREACH(pe, &have_refs, entry) {
837 		free((char *)pe->path);
838 		free(pe->data);
839 	}
840 	got_pathlist_free(&have_refs);
841 	got_ref_list_free(&my_refs);
842 	if (err) {
843 		free(*pack_hash);
844 		*pack_hash = NULL;
845 		TAILQ_FOREACH(pe, refs, entry) {
846 			free((void *)pe->path);
847 			free(pe->data);
848 		}
849 		got_pathlist_free(refs);
850 		TAILQ_FOREACH(pe, symrefs, entry) {
851 			free((void *)pe->path);
852 			free(pe->data);
853 		}
854 		got_pathlist_free(symrefs);
855 	}
856 	return err;
857 }