op public repos

Blob

Date:: Fri Oct 28 20:39:21 2022 UTC
Message:: remove sendfd pledge promise from gotd repo_read process Have the parent process send one end of the pipe directly to gotsh(1), such that repo_write can run without "sendfd". Combining "sendfd" and "recvfd" in the same process is frowned upon. ok tracey
Actions:: History | Blame | Raw File
1 /*
2  * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/queue.h>
18 #include <sys/types.h>
19 
20 #include <event.h>
21 #include <errno.h>
22 #include <imsg.h>
23 #include <signal.h>
24 #include <stdlib.h>
25 #include <limits.h>
26 #include <poll.h>
27 #include <sha1.h>
28 #include <siphash.h>
29 #include <stdio.h>
30 #include <string.h>
31 #include <unistd.h>
32 
33 #include "got_error.h"
34 #include "got_cancel.h"
35 #include "got_object.h"
36 #include "got_repository.h"
37 #include "got_reference.h"
38 #include "got_repository_admin.h"
39 
40 #include "got_lib_delta.h"
41 #include "got_lib_object.h"
42 #include "got_lib_object_idset.h"
43 #include "got_lib_sha1.h"
44 #include "got_lib_pack.h"
45 #include "got_lib_ratelimit.h"
46 #include "got_lib_pack_create.h"
47 #include "got_lib_poll.h"
48 
49 #include "log.h"
50 #include "gotd.h"
51 #include "repo_read.h"
52 
53 #ifndef nitems
54 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
55 #endif
56 
57 static struct repo_read {
58 	pid_t pid;
59 	const char *title;
60 	struct got_repository *repo;
61 	int *pack_fds;
62 	int *temp_fds;
63 } repo_read;
64 
65 struct repo_read_client {
66 	STAILQ_ENTRY(repo_read_client)	 entry;
67 	uint32_t			 id;
68 	int				 fd;
69 	int				 delta_cache_fd;
70 	int				 report_progress;
71 	int				 pack_pipe;
72 	struct gotd_object_id_array	 want_ids;
73 	struct gotd_object_id_array	 have_ids;
74 };
75 STAILQ_HEAD(repo_read_clients, repo_read_client);
76 
77 static struct repo_read_clients repo_read_clients[GOTD_CLIENT_TABLE_SIZE];
78 static SIPHASH_KEY clients_hash_key;
79 
80 static uint64_t
81 client_hash(uint32_t client_id)
82 {
83 	return SipHash24(&clients_hash_key, &client_id, sizeof(client_id));
84 }
85 
86 static void
87 add_client(struct repo_read_client *client, uint32_t client_id, int fd)
88 {
89 	uint64_t slot;
90 
91 	client->id = client_id;
92 	client->fd = fd;
93 	client->delta_cache_fd = -1;
94 	client->pack_pipe = -1;
95 	slot = client_hash(client->id) % nitems(repo_read_clients);
96 	STAILQ_INSERT_HEAD(&repo_read_clients[slot], client, entry);
97 }
98 
99 static struct repo_read_client *
100 find_client(uint32_t client_id)
101 {
102 	uint64_t slot;
103 	struct repo_read_client *c;
104 
105 	slot = client_hash(client_id) % nitems(repo_read_clients);
106 	STAILQ_FOREACH(c, &repo_read_clients[slot], entry) {
107 		if (c->id == client_id)
108 			return c;
109 	}
110 
111 	return NULL;
112 }
113 
114 static volatile sig_atomic_t sigint_received;
115 static volatile sig_atomic_t sigterm_received;
116 
117 static void
118 catch_sigint(int signo)
119 {
120 	sigint_received = 1;
121 }
122 
123 static void
124 catch_sigterm(int signo)
125 {
126 	sigterm_received = 1;
127 }
128 
129 static const struct got_error *
130 check_cancelled(void *arg)
131 {
132 	if (sigint_received || sigterm_received)
133 		return got_error(GOT_ERR_CANCELLED);
134 
135 	return NULL;
136 }
137 
138 static const struct got_error *
139 send_symref(struct got_reference *symref, struct imsgbuf *ibuf)
140 {
141 	const struct got_error *err = NULL;
142 	struct gotd_imsg_symref isymref;
143 	const char *refname = got_ref_get_name(symref);
144 	const char *target = got_ref_get_symref_target(symref);
145 	size_t len;
146 	struct ibuf *wbuf;
147 	struct got_object_id *target_id;
148 
149 	err = got_ref_resolve(&target_id, repo_read.repo, symref);
150 	if (err)
151 		return err;
152 
153 	memset(&isymref, 0, sizeof(isymref));
154 	isymref.name_len = strlen(refname);
155 	isymref.target_len = strlen(target);
156 	memcpy(isymref.target_id, target_id->sha1, sizeof(isymref.target_id));
157 
158 	len = sizeof(isymref) + isymref.name_len + isymref.target_len;
159 	if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE) {
160 		err = got_error(GOT_ERR_NO_SPACE);
161 		goto done;
162 	}
163 
164 	wbuf = imsg_create(ibuf, GOTD_IMSG_SYMREF, 0, 0, len);
165 	if (wbuf == NULL) {
166 		err = got_error_from_errno("imsg_create SYMREF");
167 		goto done;
168 	}
169 
170 	if (imsg_add(wbuf, &isymref, sizeof(isymref)) == -1) {
171 		err = got_error_from_errno("imsg_add SYMREF");
172 		goto done;
173 	}
174 	if (imsg_add(wbuf, refname, isymref.name_len) == -1) {
175 		err = got_error_from_errno("imsg_add SYMREF");
176 		goto done;
177 	}
178 	if (imsg_add(wbuf, target, isymref.target_len) == -1) {
179 		err = got_error_from_errno("imsg_add SYMREF");
180 		goto done;
181 	}
182 
183 	wbuf->fd = -1;
184 	imsg_close(ibuf, wbuf);
185 done:
186 	free(target_id);
187 	return err;
188 }
189 
190 static const struct got_error *
191 send_peeled_tag_ref(struct got_reference *ref, struct got_object *obj,
192     struct imsgbuf *ibuf)
193 {
194 	const struct got_error *err = NULL;
195 	struct got_tag_object *tag;
196 	size_t namelen, len;
197 	char *peeled_refname = NULL;
198 	struct got_object_id *id;
199 	struct ibuf *wbuf;
200 
201 	err = got_object_tag_open(&tag, repo_read.repo, obj);
202 	if (err)
203 		return err;
204 
205 	if (asprintf(&peeled_refname, "%s^{}", got_ref_get_name(ref)) == -1) {
206 		err = got_error_from_errno("asprintf");
207 		goto done;
208 	}
209 
210 	id = got_object_tag_get_object_id(tag);
211 	namelen = strlen(peeled_refname);
212 
213 	len = sizeof(struct gotd_imsg_ref) + namelen;
214 	if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE) {
215 		err = got_error(GOT_ERR_NO_SPACE);
216 		goto done;
217 	}
218 
219 	wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_READ,
220 	    repo_read.pid, len);
221 	if (wbuf == NULL) {
222 		err = got_error_from_errno("imsg_create MREF");
223 		goto done;
224 	}
225 
226 	/* Keep in sync with struct gotd_imsg_ref definition. */
227 	if (imsg_add(wbuf, id->sha1, SHA1_DIGEST_LENGTH) == -1) {
228 		err = got_error_from_errno("imsg_add REF");
229 		goto done;
230 	}
231 	if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1) {
232 		err = got_error_from_errno("imsg_add REF");
233 		goto done;
234 	}
235 	if (imsg_add(wbuf, peeled_refname, namelen) == -1) {
236 		err = got_error_from_errno("imsg_add REF");
237 		goto done;
238 	}
239 
240 	wbuf->fd = -1;
241 	imsg_close(ibuf, wbuf);
242 done:
243 	got_object_tag_close(tag);
244 	return err;
245 }
246 
247 static const struct got_error *
248 send_ref(struct got_reference *ref, struct imsgbuf *ibuf)
249 {
250 	const struct got_error *err;
251 	const char *refname = got_ref_get_name(ref);
252 	size_t namelen;
253 	struct got_object_id *id = NULL;
254 	struct got_object *obj = NULL;
255 	size_t len;
256 	struct ibuf *wbuf;
257 
258 	namelen = strlen(refname);
259 
260 	len = sizeof(struct gotd_imsg_ref) + namelen;
261 	if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE)
262 		return got_error(GOT_ERR_NO_SPACE);
263 
264 	err = got_ref_resolve(&id, repo_read.repo, ref);
265 	if (err)
266 		return err;
267 
268 	wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_READ,
269 	    repo_read.pid, len);
270 	if (wbuf == NULL) {
271 		err = got_error_from_errno("imsg_create REF");
272 		goto done;
273 	}
274 
275 	/* Keep in sync with struct gotd_imsg_ref definition. */
276 	if (imsg_add(wbuf, id->sha1, SHA1_DIGEST_LENGTH) == -1)
277 		return got_error_from_errno("imsg_add REF");
278 	if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1)
279 		return got_error_from_errno("imsg_add REF");
280 	if (imsg_add(wbuf, refname, namelen) == -1)
281 		return got_error_from_errno("imsg_add REF");
282 
283 	wbuf->fd = -1;
284 	imsg_close(ibuf, wbuf);
285 
286 	err = got_object_open(&obj, repo_read.repo, id);
287 	if (err)
288 		goto done;
289 	if (obj->type == GOT_OBJ_TYPE_TAG)
290 		err = send_peeled_tag_ref(ref, obj, ibuf);
291 done:
292 	if (obj)
293 		got_object_close(obj);
294 	free(id);
295 	return err;
296 }
297 
298 static const struct got_error *
299 list_refs(struct repo_read_client **client, struct imsg *imsg)
300 {
301 	const struct got_error *err;
302 	struct got_reflist_head refs;
303 	struct got_reflist_entry *re;
304 	struct gotd_imsg_list_refs_internal ireq;
305 	size_t datalen;
306 	struct gotd_imsg_reflist irefs;
307 	struct imsgbuf ibuf;
308 	int client_fd = imsg->fd;
309 
310 	TAILQ_INIT(&refs);
311 
312 	if (client_fd == -1)
313 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
314 
315 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
316 	if (datalen != sizeof(ireq))
317 		return got_error(GOT_ERR_PRIVSEP_LEN);
318 	memcpy(&ireq, imsg->data, sizeof(ireq));
319 
320 	*client = find_client(ireq.client_id);
321 	if (*client)
322 		return got_error_msg(GOT_ERR_CLIENT_ID, "duplicate client ID");
323 
324 	*client = calloc(1, sizeof(**client));
325 	if (*client == NULL)
326 		return got_error_from_errno("calloc");
327 	add_client(*client, ireq.client_id, client_fd);
328 
329 	imsg_init(&ibuf, client_fd);
330 
331 	err = got_ref_list(&refs, repo_read.repo, "",
332 	    got_ref_cmp_by_name, NULL);
333 	if (err)
334 		return err;
335 
336 	memset(&irefs, 0, sizeof(irefs));
337 	TAILQ_FOREACH(re, &refs, entry) {
338 		struct got_object_id *id;
339 		int obj_type;
340 
341 		if (got_ref_is_symbolic(re->ref)) {
342 			const char *refname = got_ref_get_name(re->ref);
343 			if (strcmp(refname, GOT_REF_HEAD) == 0)
344 				irefs.nrefs++;
345 			continue;
346 		}
347 
348 		irefs.nrefs++;
349 
350 		/* Account for a peeled tag refs. */
351 		err = got_ref_resolve(&id, repo_read.repo, re->ref);
352 		if (err)
353 			goto done;
354 		err = got_object_get_type(&obj_type, repo_read.repo, id);	
355 		free(id);
356 		if (err)
357 			goto done;
358 		if (obj_type == GOT_OBJ_TYPE_TAG)
359 			irefs.nrefs++;
360 	}
361 
362 	if (imsg_compose(&ibuf, GOTD_IMSG_REFLIST, PROC_REPO_READ,
363 	    repo_read.pid, -1, &irefs, sizeof(irefs)) == -1) {
364 		err = got_error_from_errno("imsg_compose REFLIST");
365 		goto done;
366 	}
367 
368 	/*
369 	 * Send the HEAD symref first. In Git-protocol versions < 2
370 	 * the HEAD symref must be announced on the initial line of
371 	 * the server's ref advertisement.
372 	 * For now, we do not advertise symrefs other than HEAD.
373 	 */
374 	TAILQ_FOREACH(re, &refs, entry) {
375 		if (!got_ref_is_symbolic(re->ref) ||
376 		    strcmp(got_ref_get_name(re->ref), GOT_REF_HEAD) != 0)
377 			continue;
378 		err = send_symref(re->ref, &ibuf);
379 		if (err)
380 			goto done;
381 		break;
382 	}
383 	TAILQ_FOREACH(re, &refs, entry) {
384 		if (got_ref_is_symbolic(re->ref))
385 			continue;
386 		err = send_ref(re->ref, &ibuf);
387 		if (err)
388 			goto done;
389 	}
390 
391 	err = gotd_imsg_flush(&ibuf);
392 done:
393 	got_ref_list_free(&refs);
394 	imsg_clear(&ibuf);
395 	return err;
396 }
397 
398 static const struct got_error *
399 record_object_id(struct gotd_object_id_array *array, struct got_object_id *id)
400 {
401 	const size_t alloc_chunksz = 256;
402 
403 	if (array->ids == NULL) {
404 		array->ids = reallocarray(NULL, alloc_chunksz,
405 		    sizeof(*array->ids));
406 		if (array->ids == NULL)
407 			return got_error_from_errno("reallocarray");
408 		array->nalloc = alloc_chunksz;
409 		array->nids = 0;
410 	} else if (array->nalloc <= array->nids) {
411 		struct got_object_id **new;
412 		new = recallocarray(array->ids, array->nalloc,
413 		    array->nalloc + alloc_chunksz, sizeof(*new));
414 		if (new == NULL)
415 			return got_error_from_errno("recallocarray");
416 		array->ids = new;
417 		array->nalloc += alloc_chunksz;
418 	}
419 
420 	array->ids[array->nids] = got_object_id_dup(id);
421 	if (array->ids[array->nids] == NULL)
422 		return got_error_from_errno("got_object_id_dup");
423 	array->nids++;
424 	return NULL;
425 }
426 
427 static void
428 free_object_ids(struct gotd_object_id_array *array)
429 {
430 	size_t i;
431 
432 	for (i = 0; i < array->nids; i++)
433 		free(array->ids[i]);
434 	free(array->ids);
435 
436 	array->ids = NULL;
437 	array->nalloc = 0;
438 	array->nids = 0;
439 }
440 
441 static const struct got_error *
442 recv_want(struct repo_read_client **client, struct imsg *imsg)
443 {
444 	const struct got_error *err;
445 	struct gotd_imsg_want iwant;
446 	size_t datalen;
447 	char hex[SHA1_DIGEST_STRING_LENGTH];
448 	struct got_object_id id;
449 	int obj_type;
450 	struct imsgbuf ibuf;
451 
452 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
453 	if (datalen != sizeof(iwant))
454 		return got_error(GOT_ERR_PRIVSEP_LEN);
455 	memcpy(&iwant, imsg->data, sizeof(iwant));
456 
457 	memset(&id, 0, sizeof(id));
458 	memcpy(id.sha1, iwant.object_id, SHA1_DIGEST_LENGTH);
459 
460 	if (log_getverbose() > 0 &&
461 	    got_sha1_digest_to_str(id.sha1, hex, sizeof(hex)))
462 		log_debug("client wants %s", hex);
463 
464 	*client = find_client(iwant.client_id);
465 	if (*client == NULL)
466 		return got_error(GOT_ERR_CLIENT_ID);
467 
468 	imsg_init(&ibuf, (*client)->fd);
469 
470 	err = got_object_get_type(&obj_type, repo_read.repo, &id);
471 	if (err)
472 		return err;
473 
474 	if (obj_type != GOT_OBJ_TYPE_COMMIT &&
475 	    obj_type != GOT_OBJ_TYPE_TAG)
476 		return got_error(GOT_ERR_OBJ_TYPE);
477 
478 	err = record_object_id(&(*client)->want_ids, &id);
479 	if (err)
480 		return err;
481 
482 	gotd_imsg_send_ack(&id, &ibuf, PROC_REPO_READ, repo_read.pid);
483 	imsg_clear(&ibuf);
484 	return err;
485 }
486 
487 static const struct got_error *
488 recv_have(struct repo_read_client **client, struct imsg *imsg)
489 {
490 	const struct got_error *err;
491 	struct gotd_imsg_have ihave;
492 	size_t datalen;
493 	char hex[SHA1_DIGEST_STRING_LENGTH];
494 	struct got_object_id id;
495 	int obj_type;
496 	struct imsgbuf ibuf;
497 
498 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
499 	if (datalen != sizeof(ihave))
500 		return got_error(GOT_ERR_PRIVSEP_LEN);
501 	memcpy(&ihave, imsg->data, sizeof(ihave));
502 
503 	memset(&id, 0, sizeof(id));
504 	memcpy(id.sha1, ihave.object_id, SHA1_DIGEST_LENGTH);
505 
506 	if (log_getverbose() > 0 &&
507 	    got_sha1_digest_to_str(id.sha1, hex, sizeof(hex)))
508 		log_debug("client has %s", hex);
509 
510 	*client = find_client(ihave.client_id);
511 	if (*client == NULL)
512 		return got_error(GOT_ERR_CLIENT_ID);
513 
514 	imsg_init(&ibuf, (*client)->fd);
515 
516 	err = got_object_get_type(&obj_type, repo_read.repo, &id);
517 	if (err) {
518 		if (err->code == GOT_ERR_NO_OBJ) {
519 			gotd_imsg_send_nak(&id, &ibuf,
520 			    PROC_REPO_READ, repo_read.pid);
521 			err = NULL;
522 		}
523 		goto done;
524 	}
525 
526 	if (obj_type != GOT_OBJ_TYPE_COMMIT &&
527 	    obj_type != GOT_OBJ_TYPE_TAG) {
528 		gotd_imsg_send_nak(&id, &ibuf, PROC_REPO_READ, repo_read.pid);
529 		err = got_error(GOT_ERR_OBJ_TYPE);
530 		goto done;
531 	}
532 
533 	err = record_object_id(&(*client)->have_ids, &id);
534 	if (err)
535 		return err;
536 
537 	gotd_imsg_send_ack(&id, &ibuf, PROC_REPO_READ, repo_read.pid);
538 done:
539 	imsg_clear(&ibuf);
540 	return err;
541 }
542 
543 struct repo_read_pack_progress_arg {
544 	int report_progress;
545 	struct imsgbuf *ibuf;
546 	int sent_ready;
547 };
548 
549 static const struct got_error *
550 pack_progress(void *arg, int ncolored, int nfound, int ntrees,
551     off_t packfile_size, int ncommits, int nobj_total, int nobj_deltify,
552     int nobj_written)
553 {
554 	struct repo_read_pack_progress_arg *a = arg;
555 	struct gotd_imsg_packfile_progress iprog;
556 	int ret;
557 
558 	if (!a->report_progress)
559 		return NULL;
560 	if (packfile_size > 0 && a->sent_ready)
561 		return NULL;
562 
563 	memset(&iprog, 0, sizeof(iprog));
564 	iprog.ncolored = ncolored;
565 	iprog.nfound = nfound;
566 	iprog.ntrees = ntrees;
567 	iprog.packfile_size = packfile_size;
568 	iprog.ncommits = ncommits;
569 	iprog.nobj_total = nobj_total;
570 	iprog.nobj_deltify = nobj_deltify;
571 	iprog.nobj_written = nobj_written;
572 
573 	/* Using synchronous writes since we are blocking the event loop. */
574 	if (packfile_size == 0) {
575 		ret = imsg_compose(a->ibuf, GOTD_IMSG_PACKFILE_PROGRESS,
576 		    PROC_REPO_READ, repo_read.pid, -1, &iprog, sizeof(iprog));
577 		if (ret == -1) {
578 			return got_error_from_errno("imsg compose "
579 			    "PACKFILE_PROGRESS");
580 		}	
581 	} else {
582 		a->sent_ready = 1;
583 		ret = imsg_compose(a->ibuf, GOTD_IMSG_PACKFILE_READY,
584 		    PROC_REPO_READ, repo_read.pid, -1, &iprog, sizeof(iprog));
585 		if (ret == -1) {
586 			return got_error_from_errno("imsg compose "
587 			    "PACKFILE_READY");
588 		}
589 	}
590 
591 	return gotd_imsg_flush(a->ibuf);
592 }
593 
594 static const struct got_error *
595 receive_delta_cache_fd(struct repo_read_client **client, struct imsg *imsg,
596     struct gotd_imsgev *iev)
597 {
598 	struct gotd_imsg_send_packfile ireq;
599 	size_t datalen;
600 
601 	log_debug("receving delta cache file");
602 
603 	if (imsg->fd == -1)
604 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
605 
606 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
607 	if (datalen != sizeof(ireq))
608 		return got_error(GOT_ERR_PRIVSEP_LEN);
609 	memcpy(&ireq, imsg->data, sizeof(ireq));
610 
611 	*client = find_client(ireq.client_id);
612 	if (*client == NULL)
613 		return got_error(GOT_ERR_CLIENT_ID);
614 
615 	if ((*client)->delta_cache_fd != -1)
616 		return got_error(GOT_ERR_PRIVSEP_MSG);
617 
618 	(*client)->delta_cache_fd = imsg->fd;
619 	(*client)->report_progress = ireq.report_progress;
620 	return NULL;
621 }
622 
623 static const struct got_error *
624 receive_pack_pipe(struct repo_read_client **client, struct imsg *imsg,
625     struct gotd_imsgev *iev)
626 {
627 	struct gotd_imsg_packfile_pipe ireq;
628 	size_t datalen;
629 
630 	log_debug("receving pack pipe descriptor");
631 
632 	if (imsg->fd == -1)
633 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
634 
635 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
636 	if (datalen != sizeof(ireq))
637 		return got_error(GOT_ERR_PRIVSEP_LEN);
638 	memcpy(&ireq, imsg->data, sizeof(ireq));
639 
640 	*client = find_client(ireq.client_id);
641 	if (*client == NULL)
642 		return got_error(GOT_ERR_CLIENT_ID);
643 	if ((*client)->pack_pipe != -1)
644 		return got_error(GOT_ERR_PRIVSEP_MSG);
645 
646 	(*client)->pack_pipe = imsg->fd;
647 	return NULL;
648 }
649 
650 static const struct got_error *
651 send_packfile(struct repo_read_client *client, struct imsg *imsg,
652     struct gotd_imsgev *iev)
653 {
654 	const struct got_error *err = NULL;
655 	struct gotd_imsg_packfile_done idone;
656 	uint8_t packsha1[SHA1_DIGEST_LENGTH];
657 	char hex[SHA1_DIGEST_STRING_LENGTH];
658 	FILE *delta_cache = NULL;
659 	struct imsgbuf ibuf;
660 	struct repo_read_pack_progress_arg pa;
661 	struct got_ratelimit rl;
662 
663 	log_debug("packfile request received");
664 
665 	got_ratelimit_init(&rl, 2, 0);
666 
667 	if (client->delta_cache_fd == -1 || client->pack_pipe == -1)
668 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
669 
670 	imsg_init(&ibuf, client->fd);
671 
672 	delta_cache = fdopen(client->delta_cache_fd, "w+");
673 	if (delta_cache == NULL) {
674 		err = got_error_from_errno("fdopen");
675 		goto done;
676 	}
677 	client->delta_cache_fd = -1;
678 
679 	memset(&pa, 0, sizeof(pa));
680 	pa.ibuf = &ibuf;
681 	pa.report_progress = client->report_progress;
682 
683 	err = got_pack_create(packsha1, client->pack_pipe, delta_cache,
684 	    client->have_ids.ids, client->have_ids.nids,
685 	    client->want_ids.ids, client->want_ids.nids,
686 	    repo_read.repo, 0, 1, pack_progress, &pa, &rl,
687 	    check_cancelled, NULL);
688 	if (err)
689 		goto done;
690 	
691 	if (log_getverbose() > 0 &&
692 	    got_sha1_digest_to_str(packsha1, hex, sizeof(hex)))
693 		log_debug("sent pack-%s.pack", hex);
694 
695 	memset(&idone, 0, sizeof(idone));
696 	idone.client_id = client->id;
697 	if (gotd_imsg_compose_event(iev, GOTD_IMSG_PACKFILE_DONE,
698 	    PROC_REPO_READ, -1, &idone, sizeof(idone)) == -1)
699 		err = got_error_from_errno("imsg compose PACKFILE_DONE");
700 done:
701 	if (delta_cache != NULL && fclose(delta_cache) == EOF && err == NULL)
702 		err = got_error_from_errno("fclose");
703 	imsg_clear(&ibuf);
704 	return err;
705 }
706 
707 static const struct got_error *
708 recv_disconnect(struct imsg *imsg)
709 {
710 	const struct got_error *err = NULL;
711 	struct gotd_imsg_disconnect idisconnect;
712 	size_t datalen;
713 	int client_fd, delta_cache_fd, pack_pipe;
714 	struct repo_read_client *client = NULL;
715 	uint64_t slot;
716 
717 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
718 	if (datalen != sizeof(idisconnect))
719 		return got_error(GOT_ERR_PRIVSEP_LEN);
720 	memcpy(&idisconnect, imsg->data, sizeof(idisconnect));
721 
722 	log_debug("client disconnecting");
723 
724 	client = find_client(idisconnect.client_id);
725 	if (client == NULL)
726 		return got_error(GOT_ERR_CLIENT_ID);
727 
728 	slot = client_hash(client->id) % nitems(repo_read_clients);
729 	STAILQ_REMOVE(&repo_read_clients[slot], client, repo_read_client,
730 	    entry);
731 	free_object_ids(&client->have_ids);
732 	free_object_ids(&client->want_ids);
733 	client_fd = client->fd;
734 	delta_cache_fd = client->delta_cache_fd;
735 	pack_pipe = client->pack_pipe;
736 	free(client);
737 	if (close(client_fd) == -1)
738 		err = got_error_from_errno("close");
739 	if (delta_cache_fd != -1 && close(delta_cache_fd) == -1 && err == NULL)
740 		return got_error_from_errno("close");
741 	if (pack_pipe != -1 && close(pack_pipe) == -1 && err == NULL)
742 		return got_error_from_errno("close");
743 	return err;
744 }
745 
746 static void
747 repo_read_dispatch(int fd, short event, void *arg)
748 {
749 	const struct got_error *err = NULL;
750 	struct gotd_imsgev *iev = arg;
751 	struct imsgbuf *ibuf = &iev->ibuf;
752 	struct imsg imsg;
753 	ssize_t n;
754 	int shut = 0;
755 	struct repo_read_client *client = NULL;
756 
757 	if (event & EV_READ) {
758 		if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
759 			fatal("imsg_read error");
760 		if (n == 0)	/* Connection closed. */
761 			shut = 1;
762 	}
763 
764 	if (event & EV_WRITE) {
765 		n = msgbuf_write(&ibuf->w);
766 		if (n == -1 && errno != EAGAIN)
767 			fatal("msgbuf_write");
768 		if (n == 0)	/* Connection closed. */
769 			shut = 1;
770 	}
771 
772 	while (err == NULL && check_cancelled(NULL) == NULL) {
773 		client = NULL;
774 		if ((n = imsg_get(ibuf, &imsg)) == -1)
775 			fatal("%s: imsg_get", __func__);
776 		if (n == 0)	/* No more messages. */
777 			break;
778 
779 		switch (imsg.hdr.type) {
780 		case GOTD_IMSG_LIST_REFS_INTERNAL:
781 			err = list_refs(&client, &imsg);
782 			if (err)
783 				log_warnx("%s: ls-refs: %s", repo_read.title,
784 				    err->msg);
785 			break;
786 		case GOTD_IMSG_WANT:
787 			err = recv_want(&client, &imsg);
788 			if (err)
789 				log_warnx("%s: want-line: %s", repo_read.title,
790 				    err->msg);
791 			break;
792 		case GOTD_IMSG_HAVE:
793 			err = recv_have(&client, &imsg);
794 			if (err)
795 				log_warnx("%s: have-line: %s", repo_read.title,
796 				    err->msg);
797 			break;
798 		case GOTD_IMSG_SEND_PACKFILE:
799 			err = receive_delta_cache_fd(&client, &imsg, iev);
800 			if (err)
801 				log_warnx("%s: receiving delta cache: %s",
802 				    repo_read.title, err->msg);
803 			break;
804 		case GOTD_IMSG_PACKFILE_PIPE:
805 			err = receive_pack_pipe(&client, &imsg, iev);
806 			if (err) {
807 				log_warnx("%s: receiving pack pipe: %s",
808 				    repo_read.title, err->msg);
809 				break;
810 			}
811 			if (client->pack_pipe == -1)
812 				break;
813 			err = send_packfile(client, &imsg, iev);
814 			if (err)
815 				log_warnx("%s: sending packfile: %s",
816 				    repo_read.title, err->msg);
817 			break;
818 		case GOTD_IMSG_DISCONNECT:
819 			err = recv_disconnect(&imsg);
820 			if (err)
821 				log_warnx("%s: disconnect: %s",
822 				    repo_read.title, err->msg);
823 			break;
824 		default:
825 			log_debug("%s: unexpected imsg %d", repo_read.title,
826 			    imsg.hdr.type);
827 			break;
828 		}
829 
830 		imsg_free(&imsg);
831 	}
832 
833 	if (!shut && check_cancelled(NULL) == NULL) {
834 		if (err &&
835 		    gotd_imsg_send_error_event(iev, PROC_REPO_READ,
836 		        client ? client->id : 0, err) == -1) {
837 			log_warnx("could not send error to parent: %s",
838 			    err->msg);
839 		}
840 		gotd_imsg_event_add(iev);
841 	} else {
842 		/* This pipe is dead. Remove its event handler */
843 		event_del(&iev->ev);
844 		event_loopexit(NULL);
845 	}
846 }
847 
848 void
849 repo_read_main(const char *title, int *pack_fds, int *temp_fds)
850 {
851 	const struct got_error *err = NULL;
852 	struct gotd_imsgev iev;
853 
854 	repo_read.title = title;
855 	repo_read.pid = getpid();
856 	repo_read.pack_fds = pack_fds;
857 	repo_read.temp_fds = temp_fds;
858 
859 	arc4random_buf(&clients_hash_key, sizeof(clients_hash_key));
860 
861 	/*
862 	 * Open a repository in the root directory.
863 	 * We are already in chroot at this point.
864 	 */
865 	err = got_repo_open(&repo_read.repo, "/", NULL, pack_fds);
866 	if (err)
867 		goto done;
868 	if (!got_repo_is_bare(repo_read.repo)) {
869 		err = got_error_msg(GOT_ERR_NOT_GIT_REPO,
870 		    "bare git repository required");
871 		goto done;
872 	}
873 
874 	got_repo_temp_fds_set(repo_read.repo, temp_fds);
875 
876 	signal(SIGINT, catch_sigint);
877 	signal(SIGTERM, catch_sigterm);
878 	signal(SIGPIPE, SIG_IGN);
879 	signal(SIGHUP, SIG_IGN);
880 
881 	imsg_init(&iev.ibuf, GOTD_SOCK_FILENO);
882 	iev.handler = repo_read_dispatch;
883 	iev.events = EV_READ;
884 	iev.handler_arg = NULL;
885 	event_set(&iev.ev, iev.ibuf.fd, EV_READ, repo_read_dispatch, &iev);
886 	if (event_add(&iev.ev, NULL) == -1) {
887 		err = got_error_from_errno("event_add");
888 		goto done;
889 	}
890 
891 	event_dispatch();
892 done:
893 	if (err)
894 		log_warnx("%s: %s", title, err->msg);
895 	repo_read_shutdown();
896 }
897 
898 void
899 repo_read_shutdown(void)
900 {
901 	log_debug("%s: shutting down", repo_read.title);
902 	if (repo_read.repo)
903 		got_repo_close(repo_read.repo);
904 	got_repo_pack_fds_close(repo_read.pack_fds);
905 	got_repo_temp_fds_close(repo_read.temp_fds);
906 	exit(0);
907 }