49a1a2525a871ba408146cd57e6b82cc43898f5e
   1#include "cache.h"
   2#include "dir.h"
   3
   4static int inside_git_dir = -1;
   5static int inside_work_tree = -1;
   6
   7const char *prefix_path(const char *prefix, int len, const char *path)
   8{
   9        const char *orig = path;
  10        char *sanitized = xmalloc(len + strlen(path) + 1);
  11        if (is_absolute_path(orig))
  12                strcpy(sanitized, path);
  13        else {
  14                if (len)
  15                        memcpy(sanitized, prefix, len);
  16                strcpy(sanitized + len, path);
  17        }
  18        if (normalize_path_copy(sanitized, sanitized))
  19                goto error_out;
  20        if (is_absolute_path(orig)) {
  21                size_t root_len, len, total;
  22                const char *work_tree = get_git_work_tree();
  23                if (!work_tree)
  24                        goto error_out;
  25                len = strlen(work_tree);
  26                root_len = offset_1st_component(work_tree);
  27                total = strlen(sanitized) + 1;
  28                if (strncmp(sanitized, work_tree, len) ||
  29                    (len > root_len && sanitized[len] != '\0' && sanitized[len] != '/')) {
  30                error_out:
  31                        die("'%s' is outside repository", orig);
  32                }
  33                if (sanitized[len] == '/')
  34                        len++;
  35                memmove(sanitized, sanitized + len, total - len);
  36        }
  37        return sanitized;
  38}
  39
  40/*
  41 * Unlike prefix_path, this should be used if the named file does
  42 * not have to interact with index entry; i.e. name of a random file
  43 * on the filesystem.
  44 */
  45const char *prefix_filename(const char *pfx, int pfx_len, const char *arg)
  46{
  47        static char path[PATH_MAX];
  48#ifndef WIN32
  49        if (!pfx || !*pfx || is_absolute_path(arg))
  50                return arg;
  51        memcpy(path, pfx, pfx_len);
  52        strcpy(path + pfx_len, arg);
  53#else
  54        char *p;
  55        /* don't add prefix to absolute paths, but still replace '\' by '/' */
  56        if (is_absolute_path(arg))
  57                pfx_len = 0;
  58        else
  59                memcpy(path, pfx, pfx_len);
  60        strcpy(path + pfx_len, arg);
  61        for (p = path + pfx_len; *p; p++)
  62                if (*p == '\\')
  63                        *p = '/';
  64#endif
  65        return path;
  66}
  67
  68int check_filename(const char *prefix, const char *arg)
  69{
  70        const char *name;
  71        struct stat st;
  72
  73        name = prefix ? prefix_filename(prefix, strlen(prefix), arg) : arg;
  74        if (!lstat(name, &st))
  75                return 1; /* file exists */
  76        if (errno == ENOENT || errno == ENOTDIR)
  77                return 0; /* file does not exist */
  78        die_errno("failed to stat '%s'", arg);
  79}
  80
  81static void NORETURN die_verify_filename(const char *prefix, const char *arg)
  82{
  83        unsigned char sha1[20];
  84        unsigned mode;
  85        /* try a detailed diagnostic ... */
  86        get_sha1_with_mode_1(arg, sha1, &mode, 0, prefix);
  87        /* ... or fall back the most general message. */
  88        die("ambiguous argument '%s': unknown revision or path not in the working tree.\n"
  89            "Use '--' to separate paths from revisions", arg);
  90
  91}
  92
  93/*
  94 * Verify a filename that we got as an argument for a pathspec
  95 * entry. Note that a filename that begins with "-" never verifies
  96 * as true, because even if such a filename were to exist, we want
  97 * it to be preceded by the "--" marker (or we want the user to
  98 * use a format like "./-filename")
  99 */
 100void verify_filename(const char *prefix, const char *arg)
 101{
 102        if (*arg == '-')
 103                die("bad flag '%s' used after filename", arg);
 104        if (check_filename(prefix, arg))
 105                return;
 106        die_verify_filename(prefix, arg);
 107}
 108
 109/*
 110 * Opposite of the above: the command line did not have -- marker
 111 * and we parsed the arg as a refname.  It should not be interpretable
 112 * as a filename.
 113 */
 114void verify_non_filename(const char *prefix, const char *arg)
 115{
 116        if (!is_inside_work_tree() || is_inside_git_dir())
 117                return;
 118        if (*arg == '-')
 119                return; /* flag */
 120        if (!check_filename(prefix, arg))
 121                return;
 122        die("ambiguous argument '%s': both revision and filename\n"
 123            "Use '--' to separate filenames from revisions", arg);
 124}
 125
 126const char **get_pathspec(const char *prefix, const char **pathspec)
 127{
 128        const char *entry = *pathspec;
 129        const char **src, **dst;
 130        int prefixlen;
 131
 132        if (!prefix && !entry)
 133                return NULL;
 134
 135        if (!entry) {
 136                static const char *spec[2];
 137                spec[0] = prefix;
 138                spec[1] = NULL;
 139                return spec;
 140        }
 141
 142        /* Otherwise we have to re-write the entries.. */
 143        src = pathspec;
 144        dst = pathspec;
 145        prefixlen = prefix ? strlen(prefix) : 0;
 146        while (*src) {
 147                const char *p = prefix_path(prefix, prefixlen, *src);
 148                *(dst++) = p;
 149                src++;
 150        }
 151        *dst = NULL;
 152        if (!*pathspec)
 153                return NULL;
 154        return pathspec;
 155}
 156
 157/*
 158 * Test if it looks like we're at a git directory.
 159 * We want to see:
 160 *
 161 *  - either an objects/ directory _or_ the proper
 162 *    GIT_OBJECT_DIRECTORY environment variable
 163 *  - a refs/ directory
 164 *  - either a HEAD symlink or a HEAD file that is formatted as
 165 *    a proper "ref:", or a regular file HEAD that has a properly
 166 *    formatted sha1 object name.
 167 */
 168static int is_git_directory(const char *suspect)
 169{
 170        char path[PATH_MAX];
 171        size_t len = strlen(suspect);
 172
 173        if (PATH_MAX <= len + strlen("/objects"))
 174                die("Too long path: %.*s", 60, suspect);
 175        strcpy(path, suspect);
 176        if (getenv(DB_ENVIRONMENT)) {
 177                if (access(getenv(DB_ENVIRONMENT), X_OK))
 178                        return 0;
 179        }
 180        else {
 181                strcpy(path + len, "/objects");
 182                if (access(path, X_OK))
 183                        return 0;
 184        }
 185
 186        strcpy(path + len, "/refs");
 187        if (access(path, X_OK))
 188                return 0;
 189
 190        strcpy(path + len, "/HEAD");
 191        if (validate_headref(path))
 192                return 0;
 193
 194        return 1;
 195}
 196
 197int is_inside_git_dir(void)
 198{
 199        if (inside_git_dir < 0)
 200                inside_git_dir = is_inside_dir(get_git_dir());
 201        return inside_git_dir;
 202}
 203
 204int is_inside_work_tree(void)
 205{
 206        if (inside_work_tree < 0)
 207                inside_work_tree = is_inside_dir(get_git_work_tree());
 208        return inside_work_tree;
 209}
 210
 211/*
 212 * set_work_tree() is only ever called if you set GIT_DIR explicitly.
 213 * The old behaviour (which we retain here) is to set the work tree root
 214 * to the cwd, unless overridden by the config, the command line, or
 215 * GIT_WORK_TREE.
 216 */
 217static const char *set_work_tree(const char *dir)
 218{
 219        char buffer[PATH_MAX + 1];
 220
 221        if (!getcwd(buffer, sizeof(buffer)))
 222                die ("Could not get the current working directory");
 223        git_work_tree_cfg = xstrdup(buffer);
 224        inside_work_tree = 1;
 225
 226        return NULL;
 227}
 228
 229void setup_work_tree(void)
 230{
 231        const char *work_tree, *git_dir;
 232        static int initialized = 0;
 233
 234        if (initialized)
 235                return;
 236        work_tree = get_git_work_tree();
 237        git_dir = get_git_dir();
 238        if (!is_absolute_path(git_dir))
 239                git_dir = make_absolute_path(git_dir);
 240        if (!work_tree || chdir(work_tree))
 241                die("This operation must be run in a work tree");
 242        set_git_dir(make_relative_path(git_dir, work_tree));
 243        initialized = 1;
 244}
 245
 246static int check_repository_format_gently(const char *gitdir, int *nongit_ok)
 247{
 248        char repo_config[PATH_MAX+1];
 249
 250        /*
 251         * git_config() can't be used here because it calls git_pathdup()
 252         * to get $GIT_CONFIG/config. That call will make setup_git_env()
 253         * set git_dir to ".git".
 254         *
 255         * We are in gitdir setup, no git dir has been found useable yet.
 256         * Use a gentler version of git_config() to check if this repo
 257         * is a good one.
 258         */
 259        snprintf(repo_config, PATH_MAX, "%s/config", gitdir);
 260        git_config_early(check_repository_format_version, NULL, repo_config);
 261        if (GIT_REPO_VERSION < repository_format_version) {
 262                if (!nongit_ok)
 263                        die ("Expected git repo version <= %d, found %d",
 264                             GIT_REPO_VERSION, repository_format_version);
 265                warning("Expected git repo version <= %d, found %d",
 266                        GIT_REPO_VERSION, repository_format_version);
 267                warning("Please upgrade Git");
 268                *nongit_ok = -1;
 269                return -1;
 270        }
 271        return 0;
 272}
 273
 274/*
 275 * Try to read the location of the git directory from the .git file,
 276 * return path to git directory if found.
 277 */
 278const char *read_gitfile_gently(const char *path)
 279{
 280        char *buf;
 281        char *dir;
 282        const char *slash;
 283        struct stat st;
 284        int fd;
 285        size_t len;
 286
 287        if (stat(path, &st))
 288                return NULL;
 289        if (!S_ISREG(st.st_mode))
 290                return NULL;
 291        fd = open(path, O_RDONLY);
 292        if (fd < 0)
 293                die_errno("Error opening '%s'", path);
 294        buf = xmalloc(st.st_size + 1);
 295        len = read_in_full(fd, buf, st.st_size);
 296        close(fd);
 297        if (len != st.st_size)
 298                die("Error reading %s", path);
 299        buf[len] = '\0';
 300        if (prefixcmp(buf, "gitdir: "))
 301                die("Invalid gitfile format: %s", path);
 302        while (buf[len - 1] == '\n' || buf[len - 1] == '\r')
 303                len--;
 304        if (len < 9)
 305                die("No path in gitfile: %s", path);
 306        buf[len] = '\0';
 307        dir = buf + 8;
 308
 309        if (!is_absolute_path(dir) && (slash = strrchr(path, '/'))) {
 310                size_t pathlen = slash+1 - path;
 311                size_t dirlen = pathlen + len - 8;
 312                dir = xmalloc(dirlen + 1);
 313                strncpy(dir, path, pathlen);
 314                strncpy(dir + pathlen, buf + 8, len - 8);
 315                dir[dirlen] = '\0';
 316                free(buf);
 317                buf = dir;
 318        }
 319
 320        if (!is_git_directory(dir))
 321                die("Not a git repository: %s", dir);
 322        path = make_absolute_path(dir);
 323
 324        free(buf);
 325        return path;
 326}
 327
 328static const char *setup_explicit_git_dir(const char *gitdirenv,
 329                                const char *work_tree_env, int *nongit_ok)
 330{
 331        static char buffer[1024 + 1];
 332        const char *retval;
 333
 334        if (PATH_MAX - 40 < strlen(gitdirenv))
 335                die("'$%s' too big", GIT_DIR_ENVIRONMENT);
 336        if (!is_git_directory(gitdirenv)) {
 337                if (nongit_ok) {
 338                        *nongit_ok = 1;
 339                        return NULL;
 340                }
 341                die("Not a git repository: '%s'", gitdirenv);
 342        }
 343        if (!work_tree_env) {
 344                retval = set_work_tree(gitdirenv);
 345                /* config may override worktree */
 346                if (check_repository_format_gently(gitdirenv, nongit_ok))
 347                        return NULL;
 348                return retval;
 349        }
 350        if (check_repository_format_gently(gitdirenv, nongit_ok))
 351                return NULL;
 352        retval = get_relative_cwd(buffer, sizeof(buffer) - 1,
 353                        get_git_work_tree());
 354        if (!retval || !*retval)
 355                return NULL;
 356        set_git_dir(make_absolute_path(gitdirenv));
 357        if (chdir(work_tree_env) < 0)
 358                die_errno ("Could not chdir to '%s'", work_tree_env);
 359        strcat(buffer, "/");
 360        return retval;
 361}
 362
 363static int cwd_contains_git_dir(const char **gitfile_dirp)
 364{
 365        const char *gitfile_dir = read_gitfile_gently(DEFAULT_GIT_DIR_ENVIRONMENT);
 366        *gitfile_dirp = gitfile_dir;
 367        if (gitfile_dir) {
 368                if (set_git_dir(gitfile_dir))
 369                        die("Repository setup failed");
 370                return 1;
 371        }
 372        if (is_git_directory(DEFAULT_GIT_DIR_ENVIRONMENT)) {
 373                *gitfile_dirp = DEFAULT_GIT_DIR_ENVIRONMENT;
 374                return 1;
 375        }
 376        return 0;
 377}
 378
 379static const char *setup_discovered_git_dir(const char *work_tree_env,
 380                                            const char *gitdir,
 381                                            int offset, int len,
 382                                            char *cwd, int *nongit_ok)
 383{
 384        int root_len;
 385
 386        inside_git_dir = 0;
 387        if (!work_tree_env)
 388                inside_work_tree = 1;
 389        root_len = offset_1st_component(cwd);
 390        git_work_tree_cfg = xstrndup(cwd, offset > root_len ? offset : root_len);
 391        if (check_repository_format_gently(gitdir, nongit_ok))
 392                return NULL;
 393        if (offset == len)
 394                return NULL;
 395
 396        /* Make "offset" point to past the '/', and add a '/' at the end */
 397        offset++;
 398        cwd[len++] = '/';
 399        cwd[len] = 0;
 400        return cwd + offset;
 401}
 402
 403static const char *setup_bare_git_dir(const char *work_tree_env,
 404                int offset, int len, char *cwd, int *nongit_ok)
 405{
 406        int root_len;
 407
 408        inside_git_dir = 1;
 409        if (!work_tree_env)
 410                inside_work_tree = 0;
 411        if (offset != len) {
 412                if (chdir(cwd))
 413                        die_errno("Cannot come back to cwd");
 414                root_len = offset_1st_component(cwd);
 415                cwd[offset > root_len ? offset : root_len] = '\0';
 416                set_git_dir(cwd);
 417                check_repository_format_gently(cwd, nongit_ok);
 418        }
 419        else {
 420                set_git_dir(".");
 421                check_repository_format_gently(".", nongit_ok);
 422        }
 423        return NULL;
 424}
 425
 426static const char *setup_nongit(const char *cwd, int *nongit_ok)
 427{
 428        if (!nongit_ok)
 429                die("Not a git repository (or any of the parent directories): %s", DEFAULT_GIT_DIR_ENVIRONMENT);
 430        if (chdir(cwd))
 431                die_errno("Cannot come back to cwd");
 432        *nongit_ok = 1;
 433        return NULL;
 434}
 435
 436static dev_t get_device_or_die(const char *path, const char *prefix)
 437{
 438        struct stat buf;
 439        if (stat(path, &buf))
 440                die_errno("failed to stat '%s%s%s'",
 441                                prefix ? prefix : "",
 442                                prefix ? "/" : "", path);
 443        return buf.st_dev;
 444}
 445
 446/*
 447 * We cannot decide in this function whether we are in the work tree or
 448 * not, since the config can only be read _after_ this function was called.
 449 */
 450static const char *setup_git_directory_gently_1(int *nongit_ok)
 451{
 452        const char *work_tree_env = getenv(GIT_WORK_TREE_ENVIRONMENT);
 453        const char *env_ceiling_dirs = getenv(CEILING_DIRECTORIES_ENVIRONMENT);
 454        static char cwd[PATH_MAX+1];
 455        const char *gitdirenv;
 456        const char *gitfile_dir;
 457        int len, offset, ceil_offset;
 458        dev_t current_device = 0;
 459        int one_filesystem = 1;
 460
 461        /*
 462         * Let's assume that we are in a git repository.
 463         * If it turns out later that we are somewhere else, the value will be
 464         * updated accordingly.
 465         */
 466        if (nongit_ok)
 467                *nongit_ok = 0;
 468
 469        /*
 470         * If GIT_DIR is set explicitly, we're not going
 471         * to do any discovery, but we still do repository
 472         * validation.
 473         */
 474        gitdirenv = getenv(GIT_DIR_ENVIRONMENT);
 475        if (gitdirenv)
 476                return setup_explicit_git_dir(gitdirenv, work_tree_env, nongit_ok);
 477
 478        if (!getcwd(cwd, sizeof(cwd)-1))
 479                die_errno("Unable to read current working directory");
 480
 481        ceil_offset = longest_ancestor_length(cwd, env_ceiling_dirs);
 482        if (ceil_offset < 0 && has_dos_drive_prefix(cwd))
 483                ceil_offset = 1;
 484
 485        /*
 486         * Test in the following order (relative to the cwd):
 487         * - .git (file containing "gitdir: <path>")
 488         * - .git/
 489         * - ./ (bare)
 490         * - ../.git
 491         * - ../.git/
 492         * - ../ (bare)
 493         * - ../../.git/
 494         *   etc.
 495         */
 496        offset = len = strlen(cwd);
 497        one_filesystem = !git_env_bool("GIT_DISCOVERY_ACROSS_FILESYSTEM", 0);
 498        if (one_filesystem)
 499                current_device = get_device_or_die(".", NULL);
 500        for (;;) {
 501                if (cwd_contains_git_dir(&gitfile_dir))
 502                        return setup_discovered_git_dir(work_tree_env,
 503                                                        gitfile_dir,
 504                                                        offset, len,
 505                                                        cwd, nongit_ok);
 506                if (is_git_directory("."))
 507                        return setup_bare_git_dir(work_tree_env, offset,
 508                                                        len, cwd, nongit_ok);
 509                while (--offset > ceil_offset && cwd[offset] != '/');
 510                if (offset <= ceil_offset)
 511                        return setup_nongit(cwd, nongit_ok);
 512                if (one_filesystem) {
 513                        dev_t parent_device = get_device_or_die("..", cwd);
 514                        if (parent_device != current_device) {
 515                                if (nongit_ok) {
 516                                        if (chdir(cwd))
 517                                                die_errno("Cannot come back to cwd");
 518                                        *nongit_ok = 1;
 519                                        return NULL;
 520                                }
 521                                cwd[offset] = '\0';
 522                                die("Not a git repository (or any parent up to mount parent %s)\n"
 523                                "Stopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set).", cwd);
 524                        }
 525                }
 526                if (chdir("..")) {
 527                        cwd[offset] = '\0';
 528                        die_errno("Cannot change to '%s/..'", cwd);
 529                }
 530        }
 531}
 532
 533const char *setup_git_directory_gently(int *nongit_ok)
 534{
 535        const char *prefix;
 536
 537        prefix = setup_git_directory_gently_1(nongit_ok);
 538        if (startup_info)
 539                startup_info->have_repository = !nongit_ok || !*nongit_ok;
 540        return prefix;
 541}
 542
 543int git_config_perm(const char *var, const char *value)
 544{
 545        int i;
 546        char *endptr;
 547
 548        if (value == NULL)
 549                return PERM_GROUP;
 550
 551        if (!strcmp(value, "umask"))
 552                return PERM_UMASK;
 553        if (!strcmp(value, "group"))
 554                return PERM_GROUP;
 555        if (!strcmp(value, "all") ||
 556            !strcmp(value, "world") ||
 557            !strcmp(value, "everybody"))
 558                return PERM_EVERYBODY;
 559
 560        /* Parse octal numbers */
 561        i = strtol(value, &endptr, 8);
 562
 563        /* If not an octal number, maybe true/false? */
 564        if (*endptr != 0)
 565                return git_config_bool(var, value) ? PERM_GROUP : PERM_UMASK;
 566
 567        /*
 568         * Treat values 0, 1 and 2 as compatibility cases, otherwise it is
 569         * a chmod value to restrict to.
 570         */
 571        switch (i) {
 572        case PERM_UMASK:               /* 0 */
 573                return PERM_UMASK;
 574        case OLD_PERM_GROUP:           /* 1 */
 575                return PERM_GROUP;
 576        case OLD_PERM_EVERYBODY:       /* 2 */
 577                return PERM_EVERYBODY;
 578        }
 579
 580        /* A filemode value was given: 0xxx */
 581
 582        if ((i & 0600) != 0600)
 583                die("Problem with core.sharedRepository filemode value "
 584                    "(0%.3o).\nThe owner of files must always have "
 585                    "read and write permissions.", i);
 586
 587        /*
 588         * Mask filemode value. Others can not get write permission.
 589         * x flags for directories are handled separately.
 590         */
 591        return -(i & 0666);
 592}
 593
 594int check_repository_format_version(const char *var, const char *value, void *cb)
 595{
 596        if (strcmp(var, "core.repositoryformatversion") == 0)
 597                repository_format_version = git_config_int(var, value);
 598        else if (strcmp(var, "core.sharedrepository") == 0)
 599                shared_repository = git_config_perm(var, value);
 600        else if (strcmp(var, "core.bare") == 0) {
 601                is_bare_repository_cfg = git_config_bool(var, value);
 602                if (is_bare_repository_cfg == 1)
 603                        inside_work_tree = -1;
 604        } else if (strcmp(var, "core.worktree") == 0) {
 605                if (!value)
 606                        return config_error_nonbool(var);
 607                free(git_work_tree_cfg);
 608                git_work_tree_cfg = xstrdup(value);
 609                inside_work_tree = -1;
 610        }
 611        return 0;
 612}
 613
 614int check_repository_format(void)
 615{
 616        return check_repository_format_gently(get_git_dir(), NULL);
 617}
 618
 619/*
 620 * Returns the "prefix", a path to the current working directory
 621 * relative to the work tree root, or NULL, if the current working
 622 * directory is not a strict subdirectory of the work tree root. The
 623 * prefix always ends with a '/' character.
 624 */
 625const char *setup_git_directory(void)
 626{
 627        const char *retval = setup_git_directory_gently(NULL);
 628
 629        /* If the work tree is not the default one, recompute prefix */
 630        if (inside_work_tree < 0) {
 631                static char buffer[PATH_MAX + 1];
 632                char *rel;
 633                if (retval && chdir(retval))
 634                        die_errno ("Could not jump back into original cwd");
 635                rel = get_relative_cwd(buffer, PATH_MAX, get_git_work_tree());
 636                if (rel && *rel && chdir(get_git_work_tree()))
 637                        die_errno ("Could not jump to working directory");
 638                return rel && *rel ? strcat(rel, "/") : NULL;
 639        }
 640
 641        return retval;
 642}