Andrew's git / gitweb.git / http.c
?
http.con commit Git 1.8.0-rc2 (cd46259)
   1#include "http.h"
   2#include "pack.h"
   3#include "sideband.h"
   4#include "run-command.h"
   5#include "url.h"
   6#include "credential.h"
   7#include "version.h"
   8
   9int active_requests;
  10int http_is_verbose;
  11size_t http_post_buffer = 16 * LARGE_PACKET_MAX;
  12
  13#if LIBCURL_VERSION_NUM >= 0x070a06
  14#define LIBCURL_CAN_HANDLE_AUTH_ANY
  15#endif
  16
  17static int min_curl_sessions = 1;
  18static int curl_session_count;
  19#ifdef USE_CURL_MULTI
  20static int max_requests = -1;
  21static CURLM *curlm;
  22#endif
  23#ifndef NO_CURL_EASY_DUPHANDLE
  24static CURL *curl_default;
  25#endif
  26
  27#define PREV_BUF_SIZE 4096
  28#define RANGE_HEADER_SIZE 30
  29
  30char curl_errorstr[CURL_ERROR_SIZE];
  31
  32static int curl_ssl_verify = -1;
  33static const char *ssl_cert;
  34#if LIBCURL_VERSION_NUM >= 0x070903
  35static const char *ssl_key;
  36#endif
  37#if LIBCURL_VERSION_NUM >= 0x070908
  38static const char *ssl_capath;
  39#endif
  40static const char *ssl_cainfo;
  41static long curl_low_speed_limit = -1;
  42static long curl_low_speed_time = -1;
  43static int curl_ftp_no_epsv;
  44static const char *curl_http_proxy;
  45static const char *curl_cookie_file;
  46static struct credential http_auth = CREDENTIAL_INIT;
  47static int http_proactive_auth;
  48static const char *user_agent;
  49
  50#if LIBCURL_VERSION_NUM >= 0x071700
  51/* Use CURLOPT_KEYPASSWD as is */
  52#elif LIBCURL_VERSION_NUM >= 0x070903
  53#define CURLOPT_KEYPASSWD CURLOPT_SSLKEYPASSWD
  54#else
  55#define CURLOPT_KEYPASSWD CURLOPT_SSLCERTPASSWD
  56#endif
  57
  58static struct credential cert_auth = CREDENTIAL_INIT;
  59static int ssl_cert_password_required;
  60
  61static struct curl_slist *pragma_header;
  62static struct curl_slist *no_pragma_header;
  63
  64static struct active_request_slot *active_queue_head;
  65
  66size_t fread_buffer(char *ptr, size_t eltsize, size_t nmemb, void *buffer_)
  67{
  68        size_t size = eltsize * nmemb;
  69        struct buffer *buffer = buffer_;
  70
  71        if (size > buffer->buf.len - buffer->posn)
  72                size = buffer->buf.len - buffer->posn;
  73        memcpy(ptr, buffer->buf.buf + buffer->posn, size);
  74        buffer->posn += size;
  75
  76        return size;
  77}
  78
  79#ifndef NO_CURL_IOCTL
  80curlioerr ioctl_buffer(CURL *handle, int cmd, void *clientp)
  81{
  82        struct buffer *buffer = clientp;
  83
  84        switch (cmd) {
  85        case CURLIOCMD_NOP:
  86                return CURLIOE_OK;
  87
  88        case CURLIOCMD_RESTARTREAD:
  89                buffer->posn = 0;
  90                return CURLIOE_OK;
  91
  92        default:
  93                return CURLIOE_UNKNOWNCMD;
  94        }
  95}
  96#endif
  97
  98size_t fwrite_buffer(char *ptr, size_t eltsize, size_t nmemb, void *buffer_)
  99{
 100        size_t size = eltsize * nmemb;
 101        struct strbuf *buffer = buffer_;
 102
 103        strbuf_add(buffer, ptr, size);
 104        return size;
 105}
 106
 107size_t fwrite_null(char *ptr, size_t eltsize, size_t nmemb, void *strbuf)
 108{
 109        return eltsize * nmemb;
 110}
 111
 112#ifdef USE_CURL_MULTI
 113static void process_curl_messages(void)
 114{
 115        int num_messages;
 116        struct active_request_slot *slot;
 117        CURLMsg *curl_message = curl_multi_info_read(curlm, &num_messages);
 118
 119        while (curl_message != NULL) {
 120                if (curl_message->msg == CURLMSG_DONE) {
 121                        int curl_result = curl_message->data.result;
 122                        slot = active_queue_head;
 123                        while (slot != NULL &&
 124                               slot->curl != curl_message->easy_handle)
 125                                slot = slot->next;
 126                        if (slot != NULL) {
 127                                curl_multi_remove_handle(curlm, slot->curl);
 128                                slot->curl_result = curl_result;
 129                                finish_active_slot(slot);
 130                        } else {
 131                                fprintf(stderr, "Received DONE message for unknown request!\n");
 132                        }
 133                } else {
 134                        fprintf(stderr, "Unknown CURL message received: %d\n",
 135                                (int)curl_message->msg);
 136                }
 137                curl_message = curl_multi_info_read(curlm, &num_messages);
 138        }
 139}
 140#endif
 141
 142static int http_options(const char *var, const char *value, void *cb)
 143{
 144        if (!strcmp("http.sslverify", var)) {
 145                curl_ssl_verify = git_config_bool(var, value);
 146                return 0;
 147        }
 148        if (!strcmp("http.sslcert", var))
 149                return git_config_string(&ssl_cert, var, value);
 150#if LIBCURL_VERSION_NUM >= 0x070903
 151        if (!strcmp("http.sslkey", var))
 152                return git_config_string(&ssl_key, var, value);
 153#endif
 154#if LIBCURL_VERSION_NUM >= 0x070908
 155        if (!strcmp("http.sslcapath", var))
 156                return git_config_string(&ssl_capath, var, value);
 157#endif
 158        if (!strcmp("http.sslcainfo", var))
 159                return git_config_string(&ssl_cainfo, var, value);
 160        if (!strcmp("http.sslcertpasswordprotected", var)) {
 161                if (git_config_bool(var, value))
 162                        ssl_cert_password_required = 1;
 163                return 0;
 164        }
 165        if (!strcmp("http.minsessions", var)) {
 166                min_curl_sessions = git_config_int(var, value);
 167#ifndef USE_CURL_MULTI
 168                if (min_curl_sessions > 1)
 169                        min_curl_sessions = 1;
 170#endif
 171                return 0;
 172        }
 173#ifdef USE_CURL_MULTI
 174        if (!strcmp("http.maxrequests", var)) {
 175                max_requests = git_config_int(var, value);
 176                return 0;
 177        }
 178#endif
 179        if (!strcmp("http.lowspeedlimit", var)) {
 180                curl_low_speed_limit = (long)git_config_int(var, value);
 181                return 0;
 182        }
 183        if (!strcmp("http.lowspeedtime", var)) {
 184                curl_low_speed_time = (long)git_config_int(var, value);
 185                return 0;
 186        }
 187
 188        if (!strcmp("http.noepsv", var)) {
 189                curl_ftp_no_epsv = git_config_bool(var, value);
 190                return 0;
 191        }
 192        if (!strcmp("http.proxy", var))
 193                return git_config_string(&curl_http_proxy, var, value);
 194
 195        if (!strcmp("http.cookiefile", var))
 196                return git_config_string(&curl_cookie_file, var, value);
 197
 198        if (!strcmp("http.postbuffer", var)) {
 199                http_post_buffer = git_config_int(var, value);
 200                if (http_post_buffer < LARGE_PACKET_MAX)
 201                        http_post_buffer = LARGE_PACKET_MAX;
 202                return 0;
 203        }
 204
 205        if (!strcmp("http.useragent", var))
 206                return git_config_string(&user_agent, var, value);
 207
 208        /* Fall back on the default ones */
 209        return git_default_config(var, value, cb);
 210}
 211
 212static void init_curl_http_auth(CURL *result)
 213{
 214        if (!http_auth.username)
 215                return;
 216
 217        credential_fill(&http_auth);
 218
 219#if LIBCURL_VERSION_NUM >= 0x071301
 220        curl_easy_setopt(result, CURLOPT_USERNAME, http_auth.username);
 221        curl_easy_setopt(result, CURLOPT_PASSWORD, http_auth.password);
 222#else
 223        {
 224                static struct strbuf up = STRBUF_INIT;
 225                strbuf_reset(&up);
 226                strbuf_addf(&up, "%s:%s",
 227                            http_auth.username, http_auth.password);
 228                curl_easy_setopt(result, CURLOPT_USERPWD, up.buf);
 229        }
 230#endif
 231}
 232
 233static int has_cert_password(void)
 234{
 235        if (ssl_cert == NULL || ssl_cert_password_required != 1)
 236                return 0;
 237        if (!cert_auth.password) {
 238                cert_auth.protocol = xstrdup("cert");
 239                cert_auth.path = xstrdup(ssl_cert);
 240                credential_fill(&cert_auth);
 241        }
 242        return 1;
 243}
 244
 245static CURL *get_curl_handle(void)
 246{
 247        CURL *result = curl_easy_init();
 248
 249        if (!curl_ssl_verify) {
 250                curl_easy_setopt(result, CURLOPT_SSL_VERIFYPEER, 0);
 251                curl_easy_setopt(result, CURLOPT_SSL_VERIFYHOST, 0);
 252        } else {
 253                /* Verify authenticity of the peer's certificate */
 254                curl_easy_setopt(result, CURLOPT_SSL_VERIFYPEER, 1);
 255                /* The name in the cert must match whom we tried to connect */
 256                curl_easy_setopt(result, CURLOPT_SSL_VERIFYHOST, 2);
 257        }
 258
 259#if LIBCURL_VERSION_NUM >= 0x070907
 260        curl_easy_setopt(result, CURLOPT_NETRC, CURL_NETRC_OPTIONAL);
 261#endif
 262#ifdef LIBCURL_CAN_HANDLE_AUTH_ANY
 263        curl_easy_setopt(result, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
 264#endif
 265
 266        if (http_proactive_auth)
 267                init_curl_http_auth(result);
 268
 269        if (ssl_cert != NULL)
 270                curl_easy_setopt(result, CURLOPT_SSLCERT, ssl_cert);
 271        if (has_cert_password())
 272                curl_easy_setopt(result, CURLOPT_KEYPASSWD, cert_auth.password);
 273#if LIBCURL_VERSION_NUM >= 0x070903
 274        if (ssl_key != NULL)
 275                curl_easy_setopt(result, CURLOPT_SSLKEY, ssl_key);
 276#endif
 277#if LIBCURL_VERSION_NUM >= 0x070908
 278        if (ssl_capath != NULL)
 279                curl_easy_setopt(result, CURLOPT_CAPATH, ssl_capath);
 280#endif
 281        if (ssl_cainfo != NULL)
 282                curl_easy_setopt(result, CURLOPT_CAINFO, ssl_cainfo);
 283        curl_easy_setopt(result, CURLOPT_FAILONERROR, 1);
 284
 285        if (curl_low_speed_limit > 0 && curl_low_speed_time > 0) {
 286                curl_easy_setopt(result, CURLOPT_LOW_SPEED_LIMIT,
 287                                 curl_low_speed_limit);
 288                curl_easy_setopt(result, CURLOPT_LOW_SPEED_TIME,
 289                                 curl_low_speed_time);
 290        }
 291
 292        curl_easy_setopt(result, CURLOPT_FOLLOWLOCATION, 1);
 293#if LIBCURL_VERSION_NUM >= 0x071301
 294        curl_easy_setopt(result, CURLOPT_POSTREDIR, CURL_REDIR_POST_ALL);
 295#elif LIBCURL_VERSION_NUM >= 0x071101
 296        curl_easy_setopt(result, CURLOPT_POST301, 1);
 297#endif
 298
 299        if (getenv("GIT_CURL_VERBOSE"))
 300                curl_easy_setopt(result, CURLOPT_VERBOSE, 1);
 301
 302        curl_easy_setopt(result, CURLOPT_USERAGENT,
 303                user_agent ? user_agent : git_user_agent());
 304
 305        if (curl_ftp_no_epsv)
 306                curl_easy_setopt(result, CURLOPT_FTP_USE_EPSV, 0);
 307
 308        if (curl_http_proxy) {
 309                curl_easy_setopt(result, CURLOPT_PROXY, curl_http_proxy);
 310                curl_easy_setopt(result, CURLOPT_PROXYAUTH, CURLAUTH_ANY);
 311        }
 312
 313        return result;
 314}
 315
 316static void set_from_env(const char **var, const char *envname)
 317{
 318        const char *val = getenv(envname);
 319        if (val)
 320                *var = val;
 321}
 322
 323void http_init(struct remote *remote, const char *url, int proactive_auth)
 324{
 325        char *low_speed_limit;
 326        char *low_speed_time;
 327
 328        http_is_verbose = 0;
 329
 330        git_config(http_options, NULL);
 331
 332        curl_global_init(CURL_GLOBAL_ALL);
 333
 334        http_proactive_auth = proactive_auth;
 335
 336        if (remote && remote->http_proxy)
 337                curl_http_proxy = xstrdup(remote->http_proxy);
 338
 339        pragma_header = curl_slist_append(pragma_header, "Pragma: no-cache");
 340        no_pragma_header = curl_slist_append(no_pragma_header, "Pragma:");
 341
 342#ifdef USE_CURL_MULTI
 343        {
 344                char *http_max_requests = getenv("GIT_HTTP_MAX_REQUESTS");
 345                if (http_max_requests != NULL)
 346                        max_requests = atoi(http_max_requests);
 347        }
 348
 349        curlm = curl_multi_init();
 350        if (curlm == NULL) {
 351                fprintf(stderr, "Error creating curl multi handle.\n");
 352                exit(1);
 353        }
 354#endif
 355
 356        if (getenv("GIT_SSL_NO_VERIFY"))
 357                curl_ssl_verify = 0;
 358
 359        set_from_env(&ssl_cert, "GIT_SSL_CERT");
 360#if LIBCURL_VERSION_NUM >= 0x070903
 361        set_from_env(&ssl_key, "GIT_SSL_KEY");
 362#endif
 363#if LIBCURL_VERSION_NUM >= 0x070908
 364        set_from_env(&ssl_capath, "GIT_SSL_CAPATH");
 365#endif
 366        set_from_env(&ssl_cainfo, "GIT_SSL_CAINFO");
 367
 368        set_from_env(&user_agent, "GIT_HTTP_USER_AGENT");
 369
 370        low_speed_limit = getenv("GIT_HTTP_LOW_SPEED_LIMIT");
 371        if (low_speed_limit != NULL)
 372                curl_low_speed_limit = strtol(low_speed_limit, NULL, 10);
 373        low_speed_time = getenv("GIT_HTTP_LOW_SPEED_TIME");
 374        if (low_speed_time != NULL)
 375                curl_low_speed_time = strtol(low_speed_time, NULL, 10);
 376
 377        if (curl_ssl_verify == -1)
 378                curl_ssl_verify = 1;
 379
 380        curl_session_count = 0;
 381#ifdef USE_CURL_MULTI
 382        if (max_requests < 1)
 383                max_requests = DEFAULT_MAX_REQUESTS;
 384#endif
 385
 386        if (getenv("GIT_CURL_FTP_NO_EPSV"))
 387                curl_ftp_no_epsv = 1;
 388
 389        if (url) {
 390                credential_from_url(&http_auth, url);
 391                if (!ssl_cert_password_required &&
 392                    getenv("GIT_SSL_CERT_PASSWORD_PROTECTED") &&
 393                    !prefixcmp(url, "https://"))
 394                        ssl_cert_password_required = 1;
 395        }
 396
 397#ifndef NO_CURL_EASY_DUPHANDLE
 398        curl_default = get_curl_handle();
 399#endif
 400}
 401
 402void http_cleanup(void)
 403{
 404        struct active_request_slot *slot = active_queue_head;
 405
 406        while (slot != NULL) {
 407                struct active_request_slot *next = slot->next;
 408                if (slot->curl != NULL) {
 409#ifdef USE_CURL_MULTI
 410                        curl_multi_remove_handle(curlm, slot->curl);
 411#endif
 412                        curl_easy_cleanup(slot->curl);
 413                }
 414                free(slot);
 415                slot = next;
 416        }
 417        active_queue_head = NULL;
 418
 419#ifndef NO_CURL_EASY_DUPHANDLE
 420        curl_easy_cleanup(curl_default);
 421#endif
 422
 423#ifdef USE_CURL_MULTI
 424        curl_multi_cleanup(curlm);
 425#endif
 426        curl_global_cleanup();
 427
 428        curl_slist_free_all(pragma_header);
 429        pragma_header = NULL;
 430
 431        curl_slist_free_all(no_pragma_header);
 432        no_pragma_header = NULL;
 433
 434        if (curl_http_proxy) {
 435                free((void *)curl_http_proxy);
 436                curl_http_proxy = NULL;
 437        }
 438
 439        if (cert_auth.password != NULL) {
 440                memset(cert_auth.password, 0, strlen(cert_auth.password));
 441                free(cert_auth.password);
 442                cert_auth.password = NULL;
 443        }
 444        ssl_cert_password_required = 0;
 445}
 446
 447struct active_request_slot *get_active_slot(void)
 448{
 449        struct active_request_slot *slot = active_queue_head;
 450        struct active_request_slot *newslot;
 451
 452#ifdef USE_CURL_MULTI
 453        int num_transfers;
 454
 455        /* Wait for a slot to open up if the queue is full */
 456        while (active_requests >= max_requests) {
 457                curl_multi_perform(curlm, &num_transfers);
 458                if (num_transfers < active_requests)
 459                        process_curl_messages();
 460        }
 461#endif
 462
 463        while (slot != NULL && slot->in_use)
 464                slot = slot->next;
 465
 466        if (slot == NULL) {
 467                newslot = xmalloc(sizeof(*newslot));
 468                newslot->curl = NULL;
 469                newslot->in_use = 0;
 470                newslot->next = NULL;
 471
 472                slot = active_queue_head;
 473                if (slot == NULL) {
 474                        active_queue_head = newslot;
 475                } else {
 476                        while (slot->next != NULL)
 477                                slot = slot->next;
 478                        slot->next = newslot;
 479                }
 480                slot = newslot;
 481        }
 482
 483        if (slot->curl == NULL) {
 484#ifdef NO_CURL_EASY_DUPHANDLE
 485                slot->curl = get_curl_handle();
 486#else
 487                slot->curl = curl_easy_duphandle(curl_default);
 488#endif
 489                curl_session_count++;
 490        }
 491
 492        active_requests++;
 493        slot->in_use = 1;
 494        slot->results = NULL;
 495        slot->finished = NULL;
 496        slot->callback_data = NULL;
 497        slot->callback_func = NULL;
 498        curl_easy_setopt(slot->curl, CURLOPT_COOKIEFILE, curl_cookie_file);
 499        curl_easy_setopt(slot->curl, CURLOPT_HTTPHEADER, pragma_header);
 500        curl_easy_setopt(slot->curl, CURLOPT_ERRORBUFFER, curl_errorstr);
 501        curl_easy_setopt(slot->curl, CURLOPT_CUSTOMREQUEST, NULL);
 502        curl_easy_setopt(slot->curl, CURLOPT_READFUNCTION, NULL);
 503        curl_easy_setopt(slot->curl, CURLOPT_WRITEFUNCTION, NULL);
 504        curl_easy_setopt(slot->curl, CURLOPT_POSTFIELDS, NULL);
 505        curl_easy_setopt(slot->curl, CURLOPT_UPLOAD, 0);
 506        curl_easy_setopt(slot->curl, CURLOPT_HTTPGET, 1);
 507        if (http_auth.password)
 508                init_curl_http_auth(slot->curl);
 509
 510        return slot;
 511}
 512
 513int start_active_slot(struct active_request_slot *slot)
 514{
 515#ifdef USE_CURL_MULTI
 516        CURLMcode curlm_result = curl_multi_add_handle(curlm, slot->curl);
 517        int num_transfers;
 518
 519        if (curlm_result != CURLM_OK &&
 520            curlm_result != CURLM_CALL_MULTI_PERFORM) {
 521                active_requests--;
 522                slot->in_use = 0;
 523                return 0;
 524        }
 525
 526        /*
 527         * We know there must be something to do, since we just added
 528         * something.
 529         */
 530        curl_multi_perform(curlm, &num_transfers);
 531#endif
 532        return 1;
 533}
 534
 535#ifdef USE_CURL_MULTI
 536struct fill_chain {
 537        void *data;
 538        int (*fill)(void *);
 539        struct fill_chain *next;
 540};
 541
 542static struct fill_chain *fill_cfg;
 543
 544void add_fill_function(void *data, int (*fill)(void *))
 545{
 546        struct fill_chain *new = xmalloc(sizeof(*new));
 547        struct fill_chain **linkp = &fill_cfg;
 548        new->data = data;
 549        new->fill = fill;
 550        new->next = NULL;
 551        while (*linkp)
 552                linkp = &(*linkp)->next;
 553        *linkp = new;
 554}
 555
 556void fill_active_slots(void)
 557{
 558        struct active_request_slot *slot = active_queue_head;
 559
 560        while (active_requests < max_requests) {
 561                struct fill_chain *fill;
 562                for (fill = fill_cfg; fill; fill = fill->next)
 563                        if (fill->fill(fill->data))
 564                                break;
 565
 566                if (!fill)
 567                        break;
 568        }
 569
 570        while (slot != NULL) {
 571                if (!slot->in_use && slot->curl != NULL
 572                        && curl_session_count > min_curl_sessions) {
 573                        curl_easy_cleanup(slot->curl);
 574                        slot->curl = NULL;
 575                        curl_session_count--;
 576                }
 577                slot = slot->next;
 578        }
 579}
 580
 581void step_active_slots(void)
 582{
 583        int num_transfers;
 584        CURLMcode curlm_result;
 585
 586        do {
 587                curlm_result = curl_multi_perform(curlm, &num_transfers);
 588        } while (curlm_result == CURLM_CALL_MULTI_PERFORM);
 589        if (num_transfers < active_requests) {
 590                process_curl_messages();
 591                fill_active_slots();
 592        }
 593}
 594#endif
 595
 596void run_active_slot(struct active_request_slot *slot)
 597{
 598#ifdef USE_CURL_MULTI
 599        fd_set readfds;
 600        fd_set writefds;
 601        fd_set excfds;
 602        int max_fd;
 603        struct timeval select_timeout;
 604        int finished = 0;
 605
 606        slot->finished = &finished;
 607        while (!finished) {
 608                step_active_slots();
 609
 610                if (slot->in_use) {
 611#if LIBCURL_VERSION_NUM >= 0x070f04
 612                        long curl_timeout;
 613                        curl_multi_timeout(curlm, &curl_timeout);
 614                        if (curl_timeout == 0) {
 615                                continue;
 616                        } else if (curl_timeout == -1) {
 617                                select_timeout.tv_sec  = 0;
 618                                select_timeout.tv_usec = 50000;
 619                        } else {
 620                                select_timeout.tv_sec  =  curl_timeout / 1000;
 621                                select_timeout.tv_usec = (curl_timeout % 1000) * 1000;
 622                        }
 623#else
 624                        select_timeout.tv_sec  = 0;
 625                        select_timeout.tv_usec = 50000;
 626#endif
 627
 628                        max_fd = -1;
 629                        FD_ZERO(&readfds);
 630                        FD_ZERO(&writefds);
 631                        FD_ZERO(&excfds);
 632                        curl_multi_fdset(curlm, &readfds, &writefds, &excfds, &max_fd);
 633
 634                        select(max_fd+1, &readfds, &writefds, &excfds, &select_timeout);
 635                }
 636        }
 637#else
 638        while (slot->in_use) {
 639                slot->curl_result = curl_easy_perform(slot->curl);
 640                finish_active_slot(slot);
 641        }
 642#endif
 643}
 644
 645static void closedown_active_slot(struct active_request_slot *slot)
 646{
 647        active_requests--;
 648        slot->in_use = 0;
 649}
 650
 651static void release_active_slot(struct active_request_slot *slot)
 652{
 653        closedown_active_slot(slot);
 654        if (slot->curl && curl_session_count > min_curl_sessions) {
 655#ifdef USE_CURL_MULTI
 656                curl_multi_remove_handle(curlm, slot->curl);
 657#endif
 658                curl_easy_cleanup(slot->curl);
 659                slot->curl = NULL;
 660                curl_session_count--;
 661        }
 662#ifdef USE_CURL_MULTI
 663        fill_active_slots();
 664#endif
 665}
 666
 667void finish_active_slot(struct active_request_slot *slot)
 668{
 669        closedown_active_slot(slot);
 670        curl_easy_getinfo(slot->curl, CURLINFO_HTTP_CODE, &slot->http_code);
 671
 672        if (slot->finished != NULL)
 673                (*slot->finished) = 1;
 674
 675        /* Store slot results so they can be read after the slot is reused */
 676        if (slot->results != NULL) {
 677                slot->results->curl_result = slot->curl_result;
 678                slot->results->http_code = slot->http_code;
 679        }
 680
 681        /* Run callback if appropriate */
 682        if (slot->callback_func != NULL)
 683                slot->callback_func(slot->callback_data);
 684}
 685
 686void finish_all_active_slots(void)
 687{
 688        struct active_request_slot *slot = active_queue_head;
 689
 690        while (slot != NULL)
 691                if (slot->in_use) {
 692                        run_active_slot(slot);
 693                        slot = active_queue_head;
 694                } else {
 695                        slot = slot->next;
 696                }
 697}
 698
 699/* Helpers for modifying and creating URLs */
 700static inline int needs_quote(int ch)
 701{
 702        if (((ch >= 'A') && (ch <= 'Z'))
 703                        || ((ch >= 'a') && (ch <= 'z'))
 704                        || ((ch >= '0') && (ch <= '9'))
 705                        || (ch == '/')
 706                        || (ch == '-')
 707                        || (ch == '.'))
 708                return 0;
 709        return 1;
 710}
 711
 712static char *quote_ref_url(const char *base, const char *ref)
 713{
 714        struct strbuf buf = STRBUF_INIT;
 715        const char *cp;
 716        int ch;
 717
 718        end_url_with_slash(&buf, base);
 719
 720        for (cp = ref; (ch = *cp) != 0; cp++)
 721                if (needs_quote(ch))
 722                        strbuf_addf(&buf, "%%%02x", ch);
 723                else
 724                        strbuf_addch(&buf, *cp);
 725
 726        return strbuf_detach(&buf, NULL);
 727}
 728
 729void append_remote_object_url(struct strbuf *buf, const char *url,
 730                              const char *hex,
 731                              int only_two_digit_prefix)
 732{
 733        end_url_with_slash(buf, url);
 734
 735        strbuf_addf(buf, "objects/%.*s/", 2, hex);
 736        if (!only_two_digit_prefix)
 737                strbuf_addf(buf, "%s", hex+2);
 738}
 739
 740char *get_remote_object_url(const char *url, const char *hex,
 741                            int only_two_digit_prefix)
 742{
 743        struct strbuf buf = STRBUF_INIT;
 744        append_remote_object_url(&buf, url, hex, only_two_digit_prefix);
 745        return strbuf_detach(&buf, NULL);
 746}
 747
 748int handle_curl_result(struct active_request_slot *slot)
 749{
 750        struct slot_results *results = slot->results;
 751
 752        if (results->curl_result == CURLE_OK) {
 753                credential_approve(&http_auth);
 754                return HTTP_OK;
 755        } else if (missing_target(results))
 756                return HTTP_MISSING_TARGET;
 757        else if (results->http_code == 401) {
 758                if (http_auth.username && http_auth.password) {
 759                        credential_reject(&http_auth);
 760                        return HTTP_NOAUTH;
 761                } else {
 762                        credential_fill(&http_auth);
 763                        init_curl_http_auth(slot->curl);
 764                        return HTTP_REAUTH;
 765                }
 766        } else {
 767#if LIBCURL_VERSION_NUM >= 0x070c00
 768                if (!curl_errorstr[0])
 769                        strlcpy(curl_errorstr,
 770                                curl_easy_strerror(results->curl_result),
 771                                sizeof(curl_errorstr));
 772#endif
 773                return HTTP_ERROR;
 774        }
 775}
 776
 777/* http_request() targets */
 778#define HTTP_REQUEST_STRBUF     0
 779#define HTTP_REQUEST_FILE       1
 780
 781static int http_request(const char *url, void *result, int target, int options)
 782{
 783        struct active_request_slot *slot;
 784        struct slot_results results;
 785        struct curl_slist *headers = NULL;
 786        struct strbuf buf = STRBUF_INIT;
 787        int ret;
 788
 789        slot = get_active_slot();
 790        slot->results = &results;
 791        curl_easy_setopt(slot->curl, CURLOPT_HTTPGET, 1);
 792
 793        if (result == NULL) {
 794                curl_easy_setopt(slot->curl, CURLOPT_NOBODY, 1);
 795        } else {
 796                curl_easy_setopt(slot->curl, CURLOPT_NOBODY, 0);
 797                curl_easy_setopt(slot->curl, CURLOPT_FILE, result);
 798
 799                if (target == HTTP_REQUEST_FILE) {
 800                        long posn = ftell(result);
 801                        curl_easy_setopt(slot->curl, CURLOPT_WRITEFUNCTION,
 802                                         fwrite);
 803                        if (posn > 0) {
 804                                strbuf_addf(&buf, "Range: bytes=%ld-", posn);
 805                                headers = curl_slist_append(headers, buf.buf);
 806                                strbuf_reset(&buf);
 807                        }
 808                } else
 809                        curl_easy_setopt(slot->curl, CURLOPT_WRITEFUNCTION,
 810                                         fwrite_buffer);
 811        }
 812
 813        strbuf_addstr(&buf, "Pragma:");
 814        if (options & HTTP_NO_CACHE)
 815                strbuf_addstr(&buf, " no-cache");
 816
 817        headers = curl_slist_append(headers, buf.buf);
 818
 819        curl_easy_setopt(slot->curl, CURLOPT_URL, url);
 820        curl_easy_setopt(slot->curl, CURLOPT_HTTPHEADER, headers);
 821        curl_easy_setopt(slot->curl, CURLOPT_ENCODING, "gzip");
 822
 823        if (start_active_slot(slot)) {
 824                run_active_slot(slot);
 825                ret = handle_curl_result(slot);
 826        } else {
 827                error("Unable to start HTTP request for %s", url);
 828                ret = HTTP_START_FAILED;
 829        }
 830
 831        curl_slist_free_all(headers);
 832        strbuf_release(&buf);
 833
 834        return ret;
 835}
 836
 837static int http_request_reauth(const char *url, void *result, int target,
 838                               int options)
 839{
 840        int ret = http_request(url, result, target, options);
 841        if (ret != HTTP_REAUTH)
 842                return ret;
 843        return http_request(url, result, target, options);
 844}
 845
 846int http_get_strbuf(const char *url, struct strbuf *result, int options)
 847{
 848        return http_request_reauth(url, result, HTTP_REQUEST_STRBUF, options);
 849}
 850
 851/*
 852 * Downloads a URL and stores the result in the given file.
 853 *
 854 * If a previous interrupted download is detected (i.e. a previous temporary
 855 * file is still around) the download is resumed.
 856 */
 857static int http_get_file(const char *url, const char *filename, int options)
 858{
 859        int ret;
 860        struct strbuf tmpfile = STRBUF_INIT;
 861        FILE *result;
 862
 863        strbuf_addf(&tmpfile, "%s.temp", filename);
 864        result = fopen(tmpfile.buf, "a");
 865        if (! result) {
 866                error("Unable to open local file %s", tmpfile.buf);
 867                ret = HTTP_ERROR;
 868                goto cleanup;
 869        }
 870
 871        ret = http_request_reauth(url, result, HTTP_REQUEST_FILE, options);
 872        fclose(result);
 873
 874        if ((ret == HTTP_OK) && move_temp_to_file(tmpfile.buf, filename))
 875                ret = HTTP_ERROR;
 876cleanup:
 877        strbuf_release(&tmpfile);
 878        return ret;
 879}
 880
 881int http_error(const char *url, int ret)
 882{
 883        /* http_request has already handled HTTP_START_FAILED. */
 884        if (ret != HTTP_START_FAILED)
 885                error("%s while accessing %s", curl_errorstr, url);
 886
 887        return ret;
 888}
 889
 890int http_fetch_ref(const char *base, struct ref *ref)
 891{
 892        char *url;
 893        struct strbuf buffer = STRBUF_INIT;
 894        int ret = -1;
 895
 896        url = quote_ref_url(base, ref->name);
 897        if (http_get_strbuf(url, &buffer, HTTP_NO_CACHE) == HTTP_OK) {
 898                strbuf_rtrim(&buffer);
 899                if (buffer.len == 40)
 900                        ret = get_sha1_hex(buffer.buf, ref->old_sha1);
 901                else if (!prefixcmp(buffer.buf, "ref: ")) {
 902                        ref->symref = xstrdup(buffer.buf + 5);
 903                        ret = 0;
 904                }
 905        }
 906
 907        strbuf_release(&buffer);
 908        free(url);
 909        return ret;
 910}
 911
 912/* Helpers for fetching packs */
 913static char *fetch_pack_index(unsigned char *sha1, const char *base_url)
 914{
 915        char *url, *tmp;
 916        struct strbuf buf = STRBUF_INIT;
 917
 918        if (http_is_verbose)
 919                fprintf(stderr, "Getting index for pack %s\n", sha1_to_hex(sha1));
 920
 921        end_url_with_slash(&buf, base_url);
 922        strbuf_addf(&buf, "objects/pack/pack-%s.idx", sha1_to_hex(sha1));
 923        url = strbuf_detach(&buf, NULL);
 924
 925        strbuf_addf(&buf, "%s.temp", sha1_pack_index_name(sha1));
 926        tmp = strbuf_detach(&buf, NULL);
 927
 928        if (http_get_file(url, tmp, 0) != HTTP_OK) {
 929                error("Unable to get pack index %s", url);
 930                free(tmp);
 931                tmp = NULL;
 932        }
 933
 934        free(url);
 935        return tmp;
 936}
 937
 938static int fetch_and_setup_pack_index(struct packed_git **packs_head,
 939        unsigned char *sha1, const char *base_url)
 940{
 941        struct packed_git *new_pack;
 942        char *tmp_idx = NULL;
 943        int ret;
 944
 945        if (has_pack_index(sha1)) {
 946                new_pack = parse_pack_index(sha1, NULL);
 947                if (!new_pack)
 948                        return -1; /* parse_pack_index() already issued error message */
 949                goto add_pack;
 950        }
 951
 952        tmp_idx = fetch_pack_index(sha1, base_url);
 953        if (!tmp_idx)
 954                return -1;
 955
 956        new_pack = parse_pack_index(sha1, tmp_idx);
 957        if (!new_pack) {
 958                unlink(tmp_idx);
 959                free(tmp_idx);
 960
 961                return -1; /* parse_pack_index() already issued error message */
 962        }
 963
 964        ret = verify_pack_index(new_pack);
 965        if (!ret) {
 966                close_pack_index(new_pack);
 967                ret = move_temp_to_file(tmp_idx, sha1_pack_index_name(sha1));
 968        }
 969        free(tmp_idx);
 970        if (ret)
 971                return -1;
 972
 973add_pack:
 974        new_pack->next = *packs_head;
 975        *packs_head = new_pack;
 976        return 0;
 977}
 978
 979int http_get_info_packs(const char *base_url, struct packed_git **packs_head)
 980{
 981        int ret = 0, i = 0;
 982        char *url, *data;
 983        struct strbuf buf = STRBUF_INIT;
 984        unsigned char sha1[20];
 985
 986        end_url_with_slash(&buf, base_url);
 987        strbuf_addstr(&buf, "objects/info/packs");
 988        url = strbuf_detach(&buf, NULL);
 989
 990        ret = http_get_strbuf(url, &buf, HTTP_NO_CACHE);
 991        if (ret != HTTP_OK)
 992                goto cleanup;
 993
 994        data = buf.buf;
 995        while (i < buf.len) {
 996                switch (data[i]) {
 997                case 'P':
 998                        i++;
 999                        if (i + 52 <= buf.len &&
1000                            !prefixcmp(data + i, " pack-") &&
1001                            !prefixcmp(data + i + 46, ".pack\n")) {
1002                                get_sha1_hex(data + i + 6, sha1);
1003                                fetch_and_setup_pack_index(packs_head, sha1,
1004                                                      base_url);
1005                                i += 51;
1006                                break;
1007                        }
1008                default:
1009                        while (i < buf.len && data[i] != '\n')
1010                                i++;
1011                }
1012                i++;
1013        }
1014
1015cleanup:
1016        free(url);
1017        return ret;
1018}
1019
1020void release_http_pack_request(struct http_pack_request *preq)
1021{
1022        if (preq->packfile != NULL) {
1023                fclose(preq->packfile);
1024                preq->packfile = NULL;
1025        }
1026        if (preq->range_header != NULL) {
1027                curl_slist_free_all(preq->range_header);
1028                preq->range_header = NULL;
1029        }
1030        preq->slot = NULL;
1031        free(preq->url);
1032}
1033
1034int finish_http_pack_request(struct http_pack_request *preq)
1035{
1036        struct packed_git **lst;
1037        struct packed_git *p = preq->target;
1038        char *tmp_idx;
1039        struct child_process ip;
1040        const char *ip_argv[8];
1041
1042        close_pack_index(p);
1043
1044        fclose(preq->packfile);
1045        preq->packfile = NULL;
1046
1047        lst = preq->lst;
1048        while (*lst != p)
1049                lst = &((*lst)->next);
1050        *lst = (*lst)->next;
1051
1052        tmp_idx = xstrdup(preq->tmpfile);
1053        strcpy(tmp_idx + strlen(tmp_idx) - strlen(".pack.temp"),
1054               ".idx.temp");
1055
1056        ip_argv[0] = "index-pack";
1057        ip_argv[1] = "-o";
1058        ip_argv[2] = tmp_idx;
1059        ip_argv[3] = preq->tmpfile;
1060        ip_argv[4] = NULL;
1061
1062        memset(&ip, 0, sizeof(ip));
1063        ip.argv = ip_argv;
1064        ip.git_cmd = 1;
1065        ip.no_stdin = 1;
1066        ip.no_stdout = 1;
1067
1068        if (run_command(&ip)) {
1069                unlink(preq->tmpfile);
1070                unlink(tmp_idx);
1071                free(tmp_idx);
1072                return -1;
1073        }
1074
1075        unlink(sha1_pack_index_name(p->sha1));
1076
1077        if (move_temp_to_file(preq->tmpfile, sha1_pack_name(p->sha1))
1078         || move_temp_to_file(tmp_idx, sha1_pack_index_name(p->sha1))) {
1079                free(tmp_idx);
1080                return -1;
1081        }
1082
1083        install_packed_git(p);
1084        free(tmp_idx);
1085        return 0;
1086}
1087
1088struct http_pack_request *new_http_pack_request(
1089        struct packed_git *target, const char *base_url)
1090{
1091        long prev_posn = 0;
1092        char range[RANGE_HEADER_SIZE];
1093        struct strbuf buf = STRBUF_INIT;
1094        struct http_pack_request *preq;
1095
1096        preq = xcalloc(1, sizeof(*preq));
1097        preq->target = target;
1098
1099        end_url_with_slash(&buf, base_url);
1100        strbuf_addf(&buf, "objects/pack/pack-%s.pack",
1101                sha1_to_hex(target->sha1));
1102        preq->url = strbuf_detach(&buf, NULL);
1103
1104        snprintf(preq->tmpfile, sizeof(preq->tmpfile), "%s.temp",
1105                sha1_pack_name(target->sha1));
1106        preq->packfile = fopen(preq->tmpfile, "a");
1107        if (!preq->packfile) {
1108                error("Unable to open local file %s for pack",
1109                      preq->tmpfile);
1110                goto abort;
1111        }
1112
1113        preq->slot = get_active_slot();
1114        curl_easy_setopt(preq->slot->curl, CURLOPT_FILE, preq->packfile);
1115        curl_easy_setopt(preq->slot->curl, CURLOPT_WRITEFUNCTION, fwrite);
1116        curl_easy_setopt(preq->slot->curl, CURLOPT_URL, preq->url);
1117        curl_easy_setopt(preq->slot->curl, CURLOPT_HTTPHEADER,
1118                no_pragma_header);
1119
1120        /*
1121         * If there is data present from a previous transfer attempt,
1122         * resume where it left off
1123         */
1124        prev_posn = ftell(preq->packfile);
1125        if (prev_posn>0) {
1126                if (http_is_verbose)
1127                        fprintf(stderr,
1128                                "Resuming fetch of pack %s at byte %ld\n",
1129                                sha1_to_hex(target->sha1), prev_posn);
1130                sprintf(range, "Range: bytes=%ld-", prev_posn);
1131                preq->range_header = curl_slist_append(NULL, range);
1132                curl_easy_setopt(preq->slot->curl, CURLOPT_HTTPHEADER,
1133                        preq->range_header);
1134        }
1135
1136        return preq;
1137
1138abort:
1139        free(preq->url);
1140        free(preq);
1141        return NULL;
1142}
1143
1144/* Helpers for fetching objects (loose) */
1145static size_t fwrite_sha1_file(char *ptr, size_t eltsize, size_t nmemb,
1146                               void *data)
1147{
1148        unsigned char expn[4096];
1149        size_t size = eltsize * nmemb;
1150        int posn = 0;
1151        struct http_object_request *freq =
1152                (struct http_object_request *)data;
1153        do {
1154                ssize_t retval = xwrite(freq->localfile,
1155                                        (char *) ptr + posn, size - posn);
1156                if (retval < 0)
1157                        return posn;
1158                posn += retval;
1159        } while (posn < size);
1160
1161        freq->stream.avail_in = size;
1162        freq->stream.next_in = (void *)ptr;
1163        do {
1164                freq->stream.next_out = expn;
1165                freq->stream.avail_out = sizeof(expn);
1166                freq->zret = git_inflate(&freq->stream, Z_SYNC_FLUSH);
1167                git_SHA1_Update(&freq->c, expn,
1168                                sizeof(expn) - freq->stream.avail_out);
1169        } while (freq->stream.avail_in && freq->zret == Z_OK);
1170        return size;
1171}
1172
1173struct http_object_request *new_http_object_request(const char *base_url,
1174        unsigned char *sha1)
1175{
1176        char *hex = sha1_to_hex(sha1);
1177        char *filename;
1178        char prevfile[PATH_MAX];
1179        int prevlocal;
1180        char prev_buf[PREV_BUF_SIZE];
1181        ssize_t prev_read = 0;
1182        long prev_posn = 0;
1183        char range[RANGE_HEADER_SIZE];
1184        struct curl_slist *range_header = NULL;
1185        struct http_object_request *freq;
1186
1187        freq = xcalloc(1, sizeof(*freq));
1188        hashcpy(freq->sha1, sha1);
1189        freq->localfile = -1;
1190
1191        filename = sha1_file_name(sha1);
1192        snprintf(freq->tmpfile, sizeof(freq->tmpfile),
1193                 "%s.temp", filename);
1194
1195        snprintf(prevfile, sizeof(prevfile), "%s.prev", filename);
1196        unlink_or_warn(prevfile);
1197        rename(freq->tmpfile, prevfile);
1198        unlink_or_warn(freq->tmpfile);
1199
1200        if (freq->localfile != -1)
1201                error("fd leakage in start: %d", freq->localfile);
1202        freq->localfile = open(freq->tmpfile,
1203                               O_WRONLY | O_CREAT | O_EXCL, 0666);
1204        /*
1205         * This could have failed due to the "lazy directory creation";
1206         * try to mkdir the last path component.
1207         */
1208        if (freq->localfile < 0 && errno == ENOENT) {
1209                char *dir = strrchr(freq->tmpfile, '/');
1210                if (dir) {
1211                        *dir = 0;
1212                        mkdir(freq->tmpfile, 0777);
1213                        *dir = '/';
1214                }
1215                freq->localfile = open(freq->tmpfile,
1216                                       O_WRONLY | O_CREAT | O_EXCL, 0666);
1217        }
1218
1219        if (freq->localfile < 0) {
1220                error("Couldn't create temporary file %s: %s",
1221                      freq->tmpfile, strerror(errno));
1222                goto abort;
1223        }
1224
1225        git_inflate_init(&freq->stream);
1226
1227        git_SHA1_Init(&freq->c);
1228
1229        freq->url = get_remote_object_url(base_url, hex, 0);
1230
1231        /*
1232         * If a previous temp file is present, process what was already
1233         * fetched.
1234         */
1235        prevlocal = open(prevfile, O_RDONLY);
1236        if (prevlocal != -1) {
1237                do {
1238                        prev_read = xread(prevlocal, prev_buf, PREV_BUF_SIZE);
1239                        if (prev_read>0) {
1240                                if (fwrite_sha1_file(prev_buf,
1241                                                     1,
1242                                                     prev_read,
1243                                                     freq) == prev_read) {
1244                                        prev_posn += prev_read;
1245                                } else {
1246                                        prev_read = -1;
1247                                }
1248                        }
1249                } while (prev_read > 0);
1250                close(prevlocal);
1251        }
1252        unlink_or_warn(prevfile);
1253
1254        /*
1255         * Reset inflate/SHA1 if there was an error reading the previous temp
1256         * file; also rewind to the beginning of the local file.
1257         */
1258        if (prev_read == -1) {
1259                memset(&freq->stream, 0, sizeof(freq->stream));
1260                git_inflate_init(&freq->stream);
1261                git_SHA1_Init(&freq->c);
1262                if (prev_posn>0) {
1263                        prev_posn = 0;
1264                        lseek(freq->localfile, 0, SEEK_SET);
1265                        if (ftruncate(freq->localfile, 0) < 0) {
1266                                error("Couldn't truncate temporary file %s: %s",
1267                                          freq->tmpfile, strerror(errno));
1268                                goto abort;
1269                        }
1270                }
1271        }
1272
1273        freq->slot = get_active_slot();
1274
1275        curl_easy_setopt(freq->slot->curl, CURLOPT_FILE, freq);
1276        curl_easy_setopt(freq->slot->curl, CURLOPT_WRITEFUNCTION, fwrite_sha1_file);
1277        curl_easy_setopt(freq->slot->curl, CURLOPT_ERRORBUFFER, freq->errorstr);
1278        curl_easy_setopt(freq->slot->curl, CURLOPT_URL, freq->url);
1279        curl_easy_setopt(freq->slot->curl, CURLOPT_HTTPHEADER, no_pragma_header);
1280
1281        /*
1282         * If we have successfully processed data from a previous fetch
1283         * attempt, only fetch the data we don't already have.
1284         */
1285        if (prev_posn>0) {
1286                if (http_is_verbose)
1287                        fprintf(stderr,
1288                                "Resuming fetch of object %s at byte %ld\n",
1289                                hex, prev_posn);
1290                sprintf(range, "Range: bytes=%ld-", prev_posn);
1291                range_header = curl_slist_append(range_header, range);
1292                curl_easy_setopt(freq->slot->curl,
1293                                 CURLOPT_HTTPHEADER, range_header);
1294        }
1295
1296        return freq;
1297
1298abort:
1299        free(freq->url);
1300        free(freq);
1301        return NULL;
1302}
1303
1304void process_http_object_request(struct http_object_request *freq)
1305{
1306        if (freq->slot == NULL)
1307                return;
1308        freq->curl_result = freq->slot->curl_result;
1309        freq->http_code = freq->slot->http_code;
1310        freq->slot = NULL;
1311}
1312
1313int finish_http_object_request(struct http_object_request *freq)
1314{
1315        struct stat st;
1316
1317        close(freq->localfile);
1318        freq->localfile = -1;
1319
1320        process_http_object_request(freq);
1321
1322        if (freq->http_code == 416) {
1323                warning("requested range invalid; we may already have all the data.");
1324        } else if (freq->curl_result != CURLE_OK) {
1325                if (stat(freq->tmpfile, &st) == 0)
1326                        if (st.st_size == 0)
1327                                unlink_or_warn(freq->tmpfile);
1328                return -1;
1329        }
1330
1331        git_inflate_end(&freq->stream);
1332        git_SHA1_Final(freq->real_sha1, &freq->c);
1333        if (freq->zret != Z_STREAM_END) {
1334                unlink_or_warn(freq->tmpfile);
1335                return -1;
1336        }
1337        if (hashcmp(freq->sha1, freq->real_sha1)) {
1338                unlink_or_warn(freq->tmpfile);
1339                return -1;
1340        }
1341        freq->rename =
1342                move_temp_to_file(freq->tmpfile, sha1_file_name(freq->sha1));
1343
1344        return freq->rename;
1345}
1346
1347void abort_http_object_request(struct http_object_request *freq)
1348{
1349        unlink_or_warn(freq->tmpfile);
1350
1351        release_http_object_request(freq);
1352}
1353
1354void release_http_object_request(struct http_object_request *freq)
1355{
1356        if (freq->localfile != -1) {
1357                close(freq->localfile);
1358                freq->localfile = -1;
1359        }
1360        if (freq->url != NULL) {
1361                free(freq->url);
1362                freq->url = NULL;
1363        }
1364        if (freq->slot != NULL) {
1365                freq->slot->callback_func = NULL;
1366                freq->slot->callback_data = NULL;
1367                release_active_slot(freq->slot);
1368                freq->slot = NULL;
1369        }
1370}