builtin / fsck.con commit memory_limit: use git_env_ulong() to parse GIT_ALLOC_LIMIT (9927d96)
   1#include "builtin.h"
   2#include "cache.h"
   3#include "commit.h"
   4#include "tree.h"
   5#include "blob.h"
   6#include "tag.h"
   7#include "refs.h"
   8#include "pack.h"
   9#include "cache-tree.h"
  10#include "tree-walk.h"
  11#include "fsck.h"
  12#include "parse-options.h"
  13#include "dir.h"
  14#include "progress.h"
  15#include "streaming.h"
  16
  17#define REACHABLE 0x0001
  18#define SEEN      0x0002
  19#define HAS_OBJ   0x0004
  20
  21static int show_root;
  22static int show_tags;
  23static int show_unreachable;
  24static int include_reflogs = 1;
  25static int check_full = 1;
  26static int check_strict;
  27static int keep_cache_objects;
  28static unsigned char head_sha1[20];
  29static const char *head_points_at;
  30static int errors_found;
  31static int write_lost_and_found;
  32static int verbose;
  33static int show_progress = -1;
  34static int show_dangling = 1;
  35#define ERROR_OBJECT 01
  36#define ERROR_REACHABLE 02
  37#define ERROR_PACK 04
  38
  39#ifdef NO_D_INO_IN_DIRENT
  40#define SORT_DIRENT 0
  41#define DIRENT_SORT_HINT(de) 0
  42#else
  43#define SORT_DIRENT 1
  44#define DIRENT_SORT_HINT(de) ((de)->d_ino)
  45#endif
  46
  47static void objreport(struct object *obj, const char *severity,
  48                      const char *err, va_list params)
  49{
  50        fprintf(stderr, "%s in %s %s: ",
  51                severity, typename(obj->type), sha1_to_hex(obj->sha1));
  52        vfprintf(stderr, err, params);
  53        fputs("\n", stderr);
  54}
  55
  56__attribute__((format (printf, 2, 3)))
  57static int objerror(struct object *obj, const char *err, ...)
  58{
  59        va_list params;
  60        va_start(params, err);
  61        errors_found |= ERROR_OBJECT;
  62        objreport(obj, "error", err, params);
  63        va_end(params);
  64        return -1;
  65}
  66
  67__attribute__((format (printf, 3, 4)))
  68static int fsck_error_func(struct object *obj, int type, const char *err, ...)
  69{
  70        va_list params;
  71        va_start(params, err);
  72        objreport(obj, (type == FSCK_WARN) ? "warning" : "error", err, params);
  73        va_end(params);
  74        return (type == FSCK_WARN) ? 0 : 1;
  75}
  76
  77static struct object_array pending;
  78
  79static int mark_object(struct object *obj, int type, void *data)
  80{
  81        struct object *parent = data;
  82
  83        /*
  84         * The only case data is NULL or type is OBJ_ANY is when
  85         * mark_object_reachable() calls us.  All the callers of
  86         * that function has non-NULL obj hence ...
  87         */
  88        if (!obj) {
  89                /* ... these references to parent->fld are safe here */
  90                printf("broken link from %7s %s\n",
  91                           typename(parent->type), sha1_to_hex(parent->sha1));
  92                printf("broken link from %7s %s\n",
  93                           (type == OBJ_ANY ? "unknown" : typename(type)), "unknown");
  94                errors_found |= ERROR_REACHABLE;
  95                return 1;
  96        }
  97
  98        if (type != OBJ_ANY && obj->type != type)
  99                /* ... and the reference to parent is safe here */
 100                objerror(parent, "wrong object type in link");
 101
 102        if (obj->flags & REACHABLE)
 103                return 0;
 104        obj->flags |= REACHABLE;
 105        if (!(obj->flags & HAS_OBJ)) {
 106                if (parent && !has_sha1_file(obj->sha1)) {
 107                        printf("broken link from %7s %s\n",
 108                                 typename(parent->type), sha1_to_hex(parent->sha1));
 109                        printf("              to %7s %s\n",
 110                                 typename(obj->type), sha1_to_hex(obj->sha1));
 111                        errors_found |= ERROR_REACHABLE;
 112                }
 113                return 1;
 114        }
 115
 116        add_object_array(obj, NULL, &pending);
 117        return 0;
 118}
 119
 120static void mark_object_reachable(struct object *obj)
 121{
 122        mark_object(obj, OBJ_ANY, NULL);
 123}
 124
 125static int traverse_one_object(struct object *obj)
 126{
 127        int result;
 128        struct tree *tree = NULL;
 129
 130        if (obj->type == OBJ_TREE) {
 131                tree = (struct tree *)obj;
 132                if (parse_tree(tree) < 0)
 133                        return 1; /* error already displayed */
 134        }
 135        result = fsck_walk(obj, mark_object, obj);
 136        if (tree)
 137                free_tree_buffer(tree);
 138        return result;
 139}
 140
 141static int traverse_reachable(void)
 142{
 143        struct progress *progress = NULL;
 144        unsigned int nr = 0;
 145        int result = 0;
 146        if (show_progress)
 147                progress = start_progress_delay(_("Checking connectivity"), 0, 0, 2);
 148        while (pending.nr) {
 149                struct object_array_entry *entry;
 150                struct object *obj;
 151
 152                entry = pending.objects + --pending.nr;
 153                obj = entry->item;
 154                result |= traverse_one_object(obj);
 155                display_progress(progress, ++nr);
 156        }
 157        stop_progress(&progress);
 158        return !!result;
 159}
 160
 161static int mark_used(struct object *obj, int type, void *data)
 162{
 163        if (!obj)
 164                return 1;
 165        obj->used = 1;
 166        return 0;
 167}
 168
 169/*
 170 * Check a single reachable object
 171 */
 172static void check_reachable_object(struct object *obj)
 173{
 174        /*
 175         * We obviously want the object to be parsed,
 176         * except if it was in a pack-file and we didn't
 177         * do a full fsck
 178         */
 179        if (!(obj->flags & HAS_OBJ)) {
 180                if (has_sha1_pack(obj->sha1))
 181                        return; /* it is in pack - forget about it */
 182                printf("missing %s %s\n", typename(obj->type), sha1_to_hex(obj->sha1));
 183                errors_found |= ERROR_REACHABLE;
 184                return;
 185        }
 186}
 187
 188/*
 189 * Check a single unreachable object
 190 */
 191static void check_unreachable_object(struct object *obj)
 192{
 193        /*
 194         * Missing unreachable object? Ignore it. It's not like
 195         * we miss it (since it can't be reached), nor do we want
 196         * to complain about it being unreachable (since it does
 197         * not exist).
 198         */
 199        if (!obj->parsed)
 200                return;
 201
 202        /*
 203         * Unreachable object that exists? Show it if asked to,
 204         * since this is something that is prunable.
 205         */
 206        if (show_unreachable) {
 207                printf("unreachable %s %s\n", typename(obj->type), sha1_to_hex(obj->sha1));
 208                return;
 209        }
 210
 211        /*
 212         * "!used" means that nothing at all points to it, including
 213         * other unreachable objects. In other words, it's the "tip"
 214         * of some set of unreachable objects, usually a commit that
 215         * got dropped.
 216         *
 217         * Such starting points are more interesting than some random
 218         * set of unreachable objects, so we show them even if the user
 219         * hasn't asked for _all_ unreachable objects. If you have
 220         * deleted a branch by mistake, this is a prime candidate to
 221         * start looking at, for example.
 222         */
 223        if (!obj->used) {
 224                if (show_dangling)
 225                        printf("dangling %s %s\n", typename(obj->type),
 226                               sha1_to_hex(obj->sha1));
 227                if (write_lost_and_found) {
 228                        char *filename = git_path("lost-found/%s/%s",
 229                                obj->type == OBJ_COMMIT ? "commit" : "other",
 230                                sha1_to_hex(obj->sha1));
 231                        FILE *f;
 232
 233                        if (safe_create_leading_directories(filename)) {
 234                                error("Could not create lost-found");
 235                                return;
 236                        }
 237                        if (!(f = fopen(filename, "w")))
 238                                die_errno("Could not open '%s'", filename);
 239                        if (obj->type == OBJ_BLOB) {
 240                                if (stream_blob_to_fd(fileno(f), obj->sha1, NULL, 1))
 241                                        die_errno("Could not write '%s'", filename);
 242                        } else
 243                                fprintf(f, "%s\n", sha1_to_hex(obj->sha1));
 244                        if (fclose(f))
 245                                die_errno("Could not finish '%s'",
 246                                          filename);
 247                }
 248                return;
 249        }
 250
 251        /*
 252         * Otherwise? It's there, it's unreachable, and some other unreachable
 253         * object points to it. Ignore it - it's not interesting, and we showed
 254         * all the interesting cases above.
 255         */
 256}
 257
 258static void check_object(struct object *obj)
 259{
 260        if (verbose)
 261                fprintf(stderr, "Checking %s\n", sha1_to_hex(obj->sha1));
 262
 263        if (obj->flags & REACHABLE)
 264                check_reachable_object(obj);
 265        else
 266                check_unreachable_object(obj);
 267}
 268
 269static void check_connectivity(void)
 270{
 271        int i, max;
 272
 273        /* Traverse the pending reachable objects */
 274        traverse_reachable();
 275
 276        /* Look up all the requirements, warn about missing objects.. */
 277        max = get_max_object_index();
 278        if (verbose)
 279                fprintf(stderr, "Checking connectivity (%d objects)\n", max);
 280
 281        for (i = 0; i < max; i++) {
 282                struct object *obj = get_indexed_object(i);
 283
 284                if (obj)
 285                        check_object(obj);
 286        }
 287}
 288
 289static int fsck_obj(struct object *obj)
 290{
 291        if (obj->flags & SEEN)
 292                return 0;
 293        obj->flags |= SEEN;
 294
 295        if (verbose)
 296                fprintf(stderr, "Checking %s %s\n",
 297                        typename(obj->type), sha1_to_hex(obj->sha1));
 298
 299        if (fsck_walk(obj, mark_used, NULL))
 300                objerror(obj, "broken links");
 301        if (fsck_object(obj, check_strict, fsck_error_func))
 302                return -1;
 303
 304        if (obj->type == OBJ_TREE) {
 305                struct tree *item = (struct tree *) obj;
 306
 307                free_tree_buffer(item);
 308        }
 309
 310        if (obj->type == OBJ_COMMIT) {
 311                struct commit *commit = (struct commit *) obj;
 312
 313                free_commit_buffer(commit);
 314
 315                if (!commit->parents && show_root)
 316                        printf("root %s\n", sha1_to_hex(commit->object.sha1));
 317        }
 318
 319        if (obj->type == OBJ_TAG) {
 320                struct tag *tag = (struct tag *) obj;
 321
 322                if (show_tags && tag->tagged) {
 323                        printf("tagged %s %s", typename(tag->tagged->type), sha1_to_hex(tag->tagged->sha1));
 324                        printf(" (%s) in %s\n", tag->tag, sha1_to_hex(tag->object.sha1));
 325                }
 326        }
 327
 328        return 0;
 329}
 330
 331static int fsck_sha1(const unsigned char *sha1)
 332{
 333        struct object *obj = parse_object(sha1);
 334        if (!obj) {
 335                errors_found |= ERROR_OBJECT;
 336                return error("%s: object corrupt or missing",
 337                             sha1_to_hex(sha1));
 338        }
 339        obj->flags |= HAS_OBJ;
 340        return fsck_obj(obj);
 341}
 342
 343static int fsck_obj_buffer(const unsigned char *sha1, enum object_type type,
 344                           unsigned long size, void *buffer, int *eaten)
 345{
 346        struct object *obj;
 347        obj = parse_object_buffer(sha1, type, size, buffer, eaten);
 348        if (!obj) {
 349                errors_found |= ERROR_OBJECT;
 350                return error("%s: object corrupt or missing", sha1_to_hex(sha1));
 351        }
 352        obj->flags = HAS_OBJ;
 353        return fsck_obj(obj);
 354}
 355
 356/*
 357 * This is the sorting chunk size: make it reasonably
 358 * big so that we can sort well..
 359 */
 360#define MAX_SHA1_ENTRIES (1024)
 361
 362struct sha1_entry {
 363        unsigned long ino;
 364        unsigned char sha1[20];
 365};
 366
 367static struct {
 368        unsigned long nr;
 369        struct sha1_entry *entry[MAX_SHA1_ENTRIES];
 370} sha1_list;
 371
 372static int ino_compare(const void *_a, const void *_b)
 373{
 374        const struct sha1_entry *a = _a, *b = _b;
 375        unsigned long ino1 = a->ino, ino2 = b->ino;
 376        return ino1 < ino2 ? -1 : ino1 > ino2 ? 1 : 0;
 377}
 378
 379static void fsck_sha1_list(void)
 380{
 381        int i, nr = sha1_list.nr;
 382
 383        if (SORT_DIRENT)
 384                qsort(sha1_list.entry, nr,
 385                      sizeof(struct sha1_entry *), ino_compare);
 386        for (i = 0; i < nr; i++) {
 387                struct sha1_entry *entry = sha1_list.entry[i];
 388                unsigned char *sha1 = entry->sha1;
 389
 390                sha1_list.entry[i] = NULL;
 391                fsck_sha1(sha1);
 392                free(entry);
 393        }
 394        sha1_list.nr = 0;
 395}
 396
 397static void add_sha1_list(unsigned char *sha1, unsigned long ino)
 398{
 399        struct sha1_entry *entry = xmalloc(sizeof(*entry));
 400        int nr;
 401
 402        entry->ino = ino;
 403        hashcpy(entry->sha1, sha1);
 404        nr = sha1_list.nr;
 405        if (nr == MAX_SHA1_ENTRIES) {
 406                fsck_sha1_list();
 407                nr = 0;
 408        }
 409        sha1_list.entry[nr] = entry;
 410        sha1_list.nr = ++nr;
 411}
 412
 413static inline int is_loose_object_file(struct dirent *de,
 414                                       char *name, unsigned char *sha1)
 415{
 416        if (strlen(de->d_name) != 38)
 417                return 0;
 418        memcpy(name + 2, de->d_name, 39);
 419        return !get_sha1_hex(name, sha1);
 420}
 421
 422static void fsck_dir(int i, char *path)
 423{
 424        DIR *dir = opendir(path);
 425        struct dirent *de;
 426        char name[100];
 427
 428        if (!dir)
 429                return;
 430
 431        if (verbose)
 432                fprintf(stderr, "Checking directory %s\n", path);
 433
 434        sprintf(name, "%02x", i);
 435        while ((de = readdir(dir)) != NULL) {
 436                unsigned char sha1[20];
 437
 438                if (is_dot_or_dotdot(de->d_name))
 439                        continue;
 440                if (is_loose_object_file(de, name, sha1)) {
 441                        add_sha1_list(sha1, DIRENT_SORT_HINT(de));
 442                        continue;
 443                }
 444                if (starts_with(de->d_name, "tmp_obj_"))
 445                        continue;
 446                fprintf(stderr, "bad sha1 file: %s/%s\n", path, de->d_name);
 447        }
 448        closedir(dir);
 449}
 450
 451static int default_refs;
 452
 453static int fsck_handle_reflog_ent(unsigned char *osha1, unsigned char *nsha1,
 454                const char *email, unsigned long timestamp, int tz,
 455                const char *message, void *cb_data)
 456{
 457        struct object *obj;
 458
 459        if (verbose)
 460                fprintf(stderr, "Checking reflog %s->%s\n",
 461                        sha1_to_hex(osha1), sha1_to_hex(nsha1));
 462
 463        if (!is_null_sha1(osha1)) {
 464                obj = lookup_object(osha1);
 465                if (obj) {
 466                        obj->used = 1;
 467                        mark_object_reachable(obj);
 468                }
 469        }
 470        obj = lookup_object(nsha1);
 471        if (obj) {
 472                obj->used = 1;
 473                mark_object_reachable(obj);
 474        }
 475        return 0;
 476}
 477
 478static int fsck_handle_reflog(const char *logname, const unsigned char *sha1, int flag, void *cb_data)
 479{
 480        for_each_reflog_ent(logname, fsck_handle_reflog_ent, NULL);
 481        return 0;
 482}
 483
 484static int fsck_handle_ref(const char *refname, const unsigned char *sha1, int flag, void *cb_data)
 485{
 486        struct object *obj;
 487
 488        obj = parse_object(sha1);
 489        if (!obj) {
 490                error("%s: invalid sha1 pointer %s", refname, sha1_to_hex(sha1));
 491                /* We'll continue with the rest despite the error.. */
 492                return 0;
 493        }
 494        if (obj->type != OBJ_COMMIT && is_branch(refname))
 495                error("%s: not a commit", refname);
 496        default_refs++;
 497        obj->used = 1;
 498        mark_object_reachable(obj);
 499
 500        return 0;
 501}
 502
 503static void get_default_heads(void)
 504{
 505        if (head_points_at && !is_null_sha1(head_sha1))
 506                fsck_handle_ref("HEAD", head_sha1, 0, NULL);
 507        for_each_ref(fsck_handle_ref, NULL);
 508        if (include_reflogs)
 509                for_each_reflog(fsck_handle_reflog, NULL);
 510
 511        /*
 512         * Not having any default heads isn't really fatal, but
 513         * it does mean that "--unreachable" no longer makes any
 514         * sense (since in this case everything will obviously
 515         * be unreachable by definition.
 516         *
 517         * Showing dangling objects is valid, though (as those
 518         * dangling objects are likely lost heads).
 519         *
 520         * So we just print a warning about it, and clear the
 521         * "show_unreachable" flag.
 522         */
 523        if (!default_refs) {
 524                fprintf(stderr, "notice: No default references\n");
 525                show_unreachable = 0;
 526        }
 527}
 528
 529static void fsck_object_dir(const char *path)
 530{
 531        int i;
 532        struct progress *progress = NULL;
 533
 534        if (verbose)
 535                fprintf(stderr, "Checking object directory\n");
 536
 537        if (show_progress)
 538                progress = start_progress(_("Checking object directories"), 256);
 539        for (i = 0; i < 256; i++) {
 540                static char dir[4096];
 541                sprintf(dir, "%s/%02x", path, i);
 542                fsck_dir(i, dir);
 543                display_progress(progress, i+1);
 544        }
 545        stop_progress(&progress);
 546        fsck_sha1_list();
 547}
 548
 549static int fsck_head_link(void)
 550{
 551        int flag;
 552        int null_is_error = 0;
 553
 554        if (verbose)
 555                fprintf(stderr, "Checking HEAD link\n");
 556
 557        head_points_at = resolve_ref_unsafe("HEAD", head_sha1, 0, &flag);
 558        if (!head_points_at)
 559                return error("Invalid HEAD");
 560        if (!strcmp(head_points_at, "HEAD"))
 561                /* detached HEAD */
 562                null_is_error = 1;
 563        else if (!starts_with(head_points_at, "refs/heads/"))
 564                return error("HEAD points to something strange (%s)",
 565                             head_points_at);
 566        if (is_null_sha1(head_sha1)) {
 567                if (null_is_error)
 568                        return error("HEAD: detached HEAD points at nothing");
 569                fprintf(stderr, "notice: HEAD points to an unborn branch (%s)\n",
 570                        head_points_at + 11);
 571        }
 572        return 0;
 573}
 574
 575static int fsck_cache_tree(struct cache_tree *it)
 576{
 577        int i;
 578        int err = 0;
 579
 580        if (verbose)
 581                fprintf(stderr, "Checking cache tree\n");
 582
 583        if (0 <= it->entry_count) {
 584                struct object *obj = parse_object(it->sha1);
 585                if (!obj) {
 586                        error("%s: invalid sha1 pointer in cache-tree",
 587                              sha1_to_hex(it->sha1));
 588                        return 1;
 589                }
 590                obj->used = 1;
 591                mark_object_reachable(obj);
 592                if (obj->type != OBJ_TREE)
 593                        err |= objerror(obj, "non-tree in cache-tree");
 594        }
 595        for (i = 0; i < it->subtree_nr; i++)
 596                err |= fsck_cache_tree(it->down[i]->cache_tree);
 597        return err;
 598}
 599
 600static char const * const fsck_usage[] = {
 601        N_("git fsck [options] [<object>...]"),
 602        NULL
 603};
 604
 605static struct option fsck_opts[] = {
 606        OPT__VERBOSE(&verbose, N_("be verbose")),
 607        OPT_BOOL(0, "unreachable", &show_unreachable, N_("show unreachable objects")),
 608        OPT_BOOL(0, "dangling", &show_dangling, N_("show dangling objects")),
 609        OPT_BOOL(0, "tags", &show_tags, N_("report tags")),
 610        OPT_BOOL(0, "root", &show_root, N_("report root nodes")),
 611        OPT_BOOL(0, "cache", &keep_cache_objects, N_("make index objects head nodes")),
 612        OPT_BOOL(0, "reflogs", &include_reflogs, N_("make reflogs head nodes (default)")),
 613        OPT_BOOL(0, "full", &check_full, N_("also consider packs and alternate objects")),
 614        OPT_BOOL(0, "strict", &check_strict, N_("enable more strict checking")),
 615        OPT_BOOL(0, "lost-found", &write_lost_and_found,
 616                                N_("write dangling objects in .git/lost-found")),
 617        OPT_BOOL(0, "progress", &show_progress, N_("show progress")),
 618        OPT_END(),
 619};
 620
 621int cmd_fsck(int argc, const char **argv, const char *prefix)
 622{
 623        int i, heads;
 624        struct alternate_object_database *alt;
 625
 626        errors_found = 0;
 627        check_replace_refs = 0;
 628
 629        argc = parse_options(argc, argv, prefix, fsck_opts, fsck_usage, 0);
 630
 631        if (show_progress == -1)
 632                show_progress = isatty(2);
 633        if (verbose)
 634                show_progress = 0;
 635
 636        if (write_lost_and_found) {
 637                check_full = 1;
 638                include_reflogs = 0;
 639        }
 640
 641        fsck_head_link();
 642        fsck_object_dir(get_object_directory());
 643
 644        prepare_alt_odb();
 645        for (alt = alt_odb_list; alt; alt = alt->next) {
 646                char namebuf[PATH_MAX];
 647                int namelen = alt->name - alt->base;
 648                memcpy(namebuf, alt->base, namelen);
 649                namebuf[namelen - 1] = 0;
 650                fsck_object_dir(namebuf);
 651        }
 652
 653        if (check_full) {
 654                struct packed_git *p;
 655                uint32_t total = 0, count = 0;
 656                struct progress *progress = NULL;
 657
 658                prepare_packed_git();
 659
 660                if (show_progress) {
 661                        for (p = packed_git; p; p = p->next) {
 662                                if (open_pack_index(p))
 663                                        continue;
 664                                total += p->num_objects;
 665                        }
 666
 667                        progress = start_progress(_("Checking objects"), total);
 668                }
 669                for (p = packed_git; p; p = p->next) {
 670                        /* verify gives error messages itself */
 671                        if (verify_pack(p, fsck_obj_buffer,
 672                                        progress, count))
 673                                errors_found |= ERROR_PACK;
 674                        count += p->num_objects;
 675                }
 676                stop_progress(&progress);
 677        }
 678
 679        heads = 0;
 680        for (i = 0; i < argc; i++) {
 681                const char *arg = argv[i];
 682                unsigned char sha1[20];
 683                if (!get_sha1(arg, sha1)) {
 684                        struct object *obj = lookup_object(sha1);
 685
 686                        /* Error is printed by lookup_object(). */
 687                        if (!obj)
 688                                continue;
 689
 690                        obj->used = 1;
 691                        mark_object_reachable(obj);
 692                        heads++;
 693                        continue;
 694                }
 695                error("invalid parameter: expected sha1, got '%s'", arg);
 696        }
 697
 698        /*
 699         * If we've not been given any explicit head information, do the
 700         * default ones from .git/refs. We also consider the index file
 701         * in this case (ie this implies --cache).
 702         */
 703        if (!heads) {
 704                get_default_heads();
 705                keep_cache_objects = 1;
 706        }
 707
 708        if (keep_cache_objects) {
 709                read_cache();
 710                for (i = 0; i < active_nr; i++) {
 711                        unsigned int mode;
 712                        struct blob *blob;
 713                        struct object *obj;
 714
 715                        mode = active_cache[i]->ce_mode;
 716                        if (S_ISGITLINK(mode))
 717                                continue;
 718                        blob = lookup_blob(active_cache[i]->sha1);
 719                        if (!blob)
 720                                continue;
 721                        obj = &blob->object;
 722                        obj->used = 1;
 723                        mark_object_reachable(obj);
 724                }
 725                if (active_cache_tree)
 726                        fsck_cache_tree(active_cache_tree);
 727        }
 728
 729        check_connectivity();
 730        return errors_found;
 731}