builtin-init-db.con commit push: fix segfault for odd config (db03b55)
   1/*
   2 * GIT - The information manager from hell
   3 *
   4 * Copyright (C) Linus Torvalds, 2005
   5 */
   6#include "cache.h"
   7#include "builtin.h"
   8#include "exec_cmd.h"
   9
  10#ifndef DEFAULT_GIT_TEMPLATE_DIR
  11#define DEFAULT_GIT_TEMPLATE_DIR "/usr/share/git-core/templates"
  12#endif
  13
  14#ifdef NO_TRUSTABLE_FILEMODE
  15#define TEST_FILEMODE 0
  16#else
  17#define TEST_FILEMODE 1
  18#endif
  19
  20static int init_is_bare_repository = 0;
  21static int init_shared_repository = -1;
  22
  23static void safe_create_dir(const char *dir, int share)
  24{
  25        if (mkdir(dir, 0777) < 0) {
  26                if (errno != EEXIST) {
  27                        perror(dir);
  28                        exit(1);
  29                }
  30        }
  31        else if (share && adjust_shared_perm(dir))
  32                die("Could not make %s writable by group", dir);
  33}
  34
  35static void copy_templates_1(char *path, int baselen,
  36                             char *template, int template_baselen,
  37                             DIR *dir)
  38{
  39        struct dirent *de;
  40
  41        /* Note: if ".git/hooks" file exists in the repository being
  42         * re-initialized, /etc/core-git/templates/hooks/update would
  43         * cause "git init" to fail here.  I think this is sane but
  44         * it means that the set of templates we ship by default, along
  45         * with the way the namespace under .git/ is organized, should
  46         * be really carefully chosen.
  47         */
  48        safe_create_dir(path, 1);
  49        while ((de = readdir(dir)) != NULL) {
  50                struct stat st_git, st_template;
  51                int namelen;
  52                int exists = 0;
  53
  54                if (de->d_name[0] == '.')
  55                        continue;
  56                namelen = strlen(de->d_name);
  57                if ((PATH_MAX <= baselen + namelen) ||
  58                    (PATH_MAX <= template_baselen + namelen))
  59                        die("insanely long template name %s", de->d_name);
  60                memcpy(path + baselen, de->d_name, namelen+1);
  61                memcpy(template + template_baselen, de->d_name, namelen+1);
  62                if (lstat(path, &st_git)) {
  63                        if (errno != ENOENT)
  64                                die("cannot stat %s", path);
  65                }
  66                else
  67                        exists = 1;
  68
  69                if (lstat(template, &st_template))
  70                        die("cannot stat template %s", template);
  71
  72                if (S_ISDIR(st_template.st_mode)) {
  73                        DIR *subdir = opendir(template);
  74                        int baselen_sub = baselen + namelen;
  75                        int template_baselen_sub = template_baselen + namelen;
  76                        if (!subdir)
  77                                die("cannot opendir %s", template);
  78                        path[baselen_sub++] =
  79                                template[template_baselen_sub++] = '/';
  80                        path[baselen_sub] =
  81                                template[template_baselen_sub] = 0;
  82                        copy_templates_1(path, baselen_sub,
  83                                         template, template_baselen_sub,
  84                                         subdir);
  85                        closedir(subdir);
  86                }
  87                else if (exists)
  88                        continue;
  89                else if (S_ISLNK(st_template.st_mode)) {
  90                        char lnk[256];
  91                        int len;
  92                        len = readlink(template, lnk, sizeof(lnk));
  93                        if (len < 0)
  94                                die("cannot readlink %s", template);
  95                        if (sizeof(lnk) <= len)
  96                                die("insanely long symlink %s", template);
  97                        lnk[len] = 0;
  98                        if (symlink(lnk, path))
  99                                die("cannot symlink %s %s", lnk, path);
 100                }
 101                else if (S_ISREG(st_template.st_mode)) {
 102                        if (copy_file(path, template, st_template.st_mode))
 103                                die("cannot copy %s to %s", template, path);
 104                }
 105                else
 106                        error("ignoring template %s", template);
 107        }
 108}
 109
 110static void copy_templates(const char *template_dir)
 111{
 112        char path[PATH_MAX];
 113        char template_path[PATH_MAX];
 114        int template_len;
 115        DIR *dir;
 116        const char *git_dir = get_git_dir();
 117        int len = strlen(git_dir);
 118
 119        if (!template_dir)
 120                template_dir = getenv(TEMPLATE_DIR_ENVIRONMENT);
 121        if (!template_dir)
 122                template_dir = system_path(DEFAULT_GIT_TEMPLATE_DIR);
 123        if (!template_dir[0])
 124                return;
 125        strcpy(template_path, template_dir);
 126        template_len = strlen(template_path);
 127        if (template_path[template_len-1] != '/') {
 128                template_path[template_len++] = '/';
 129                template_path[template_len] = 0;
 130        }
 131        dir = opendir(template_path);
 132        if (!dir) {
 133                fprintf(stderr, "warning: templates not found %s\n",
 134                        template_dir);
 135                return;
 136        }
 137
 138        /* Make sure that template is from the correct vintage */
 139        strcpy(template_path + template_len, "config");
 140        repository_format_version = 0;
 141        git_config_from_file(check_repository_format_version,
 142                             template_path, NULL);
 143        template_path[template_len] = 0;
 144
 145        if (repository_format_version &&
 146            repository_format_version != GIT_REPO_VERSION) {
 147                fprintf(stderr, "warning: not copying templates of "
 148                        "a wrong format version %d from '%s'\n",
 149                        repository_format_version,
 150                        template_dir);
 151                closedir(dir);
 152                return;
 153        }
 154
 155        memcpy(path, git_dir, len);
 156        if (len && path[len - 1] != '/')
 157                path[len++] = '/';
 158        path[len] = 0;
 159        copy_templates_1(path, len,
 160                         template_path, template_len,
 161                         dir);
 162        closedir(dir);
 163}
 164
 165static int create_default_files(const char *template_path)
 166{
 167        const char *git_dir = get_git_dir();
 168        unsigned len = strlen(git_dir);
 169        static char path[PATH_MAX];
 170        struct stat st1;
 171        char repo_version_string[10];
 172        char junk[2];
 173        int reinit;
 174        int filemode;
 175
 176        if (len > sizeof(path)-50)
 177                die("insane git directory %s", git_dir);
 178        memcpy(path, git_dir, len);
 179
 180        if (len && path[len-1] != '/')
 181                path[len++] = '/';
 182
 183        /*
 184         * Create .git/refs/{heads,tags}
 185         */
 186        safe_create_dir(git_path("refs"), 1);
 187        safe_create_dir(git_path("refs/heads"), 1);
 188        safe_create_dir(git_path("refs/tags"), 1);
 189
 190        /* First copy the templates -- we might have the default
 191         * config file there, in which case we would want to read
 192         * from it after installing.
 193         */
 194        copy_templates(template_path);
 195
 196        git_config(git_default_config, NULL);
 197        is_bare_repository_cfg = init_is_bare_repository;
 198        if (init_shared_repository != -1)
 199                shared_repository = init_shared_repository;
 200
 201        /*
 202         * We would have created the above under user's umask -- under
 203         * shared-repository settings, we would need to fix them up.
 204         */
 205        if (shared_repository) {
 206                adjust_shared_perm(get_git_dir());
 207                adjust_shared_perm(git_path("refs"));
 208                adjust_shared_perm(git_path("refs/heads"));
 209                adjust_shared_perm(git_path("refs/tags"));
 210        }
 211
 212        /*
 213         * Create the default symlink from ".git/HEAD" to the "master"
 214         * branch, if it does not exist yet.
 215         */
 216        strcpy(path + len, "HEAD");
 217        reinit = (!access(path, R_OK)
 218                  || readlink(path, junk, sizeof(junk)-1) != -1);
 219        if (!reinit) {
 220                if (create_symref("HEAD", "refs/heads/master", NULL) < 0)
 221                        exit(1);
 222        }
 223
 224        /* This forces creation of new config file */
 225        sprintf(repo_version_string, "%d", GIT_REPO_VERSION);
 226        git_config_set("core.repositoryformatversion", repo_version_string);
 227
 228        path[len] = 0;
 229        strcpy(path + len, "config");
 230
 231        /* Check filemode trustability */
 232        filemode = TEST_FILEMODE;
 233        if (TEST_FILEMODE && !lstat(path, &st1)) {
 234                struct stat st2;
 235                filemode = (!chmod(path, st1.st_mode ^ S_IXUSR) &&
 236                                !lstat(path, &st2) &&
 237                                st1.st_mode != st2.st_mode);
 238        }
 239        git_config_set("core.filemode", filemode ? "true" : "false");
 240
 241        if (is_bare_repository())
 242                git_config_set("core.bare", "true");
 243        else {
 244                const char *work_tree = get_git_work_tree();
 245                git_config_set("core.bare", "false");
 246                /* allow template config file to override the default */
 247                if (log_all_ref_updates == -1)
 248                    git_config_set("core.logallrefupdates", "true");
 249                if (prefixcmp(git_dir, work_tree) ||
 250                    strcmp(git_dir + strlen(work_tree), "/.git")) {
 251                        git_config_set("core.worktree", work_tree);
 252                }
 253        }
 254
 255        if (!reinit) {
 256                /* Check if symlink is supported in the work tree */
 257                path[len] = 0;
 258                strcpy(path + len, "tXXXXXX");
 259                if (!close(xmkstemp(path)) &&
 260                    !unlink(path) &&
 261                    !symlink("testing", path) &&
 262                    !lstat(path, &st1) &&
 263                    S_ISLNK(st1.st_mode))
 264                        unlink(path); /* good */
 265                else
 266                        git_config_set("core.symlinks", "false");
 267
 268                /* Check if the filesystem is case-insensitive */
 269                path[len] = 0;
 270                strcpy(path + len, "CoNfIg");
 271                if (!access(path, F_OK))
 272                        git_config_set("core.ignorecase", "true");
 273        }
 274
 275        return reinit;
 276}
 277
 278int init_db(const char *template_dir, unsigned int flags)
 279{
 280        const char *sha1_dir;
 281        char *path;
 282        int len, reinit;
 283
 284        safe_create_dir(get_git_dir(), 0);
 285
 286        init_is_bare_repository = is_bare_repository();
 287
 288        /* Check to see if the repository version is right.
 289         * Note that a newly created repository does not have
 290         * config file, so this will not fail.  What we are catching
 291         * is an attempt to reinitialize new repository with an old tool.
 292         */
 293        check_repository_format();
 294
 295        reinit = create_default_files(template_dir);
 296
 297        sha1_dir = get_object_directory();
 298        len = strlen(sha1_dir);
 299        path = xmalloc(len + 40);
 300        memcpy(path, sha1_dir, len);
 301
 302        safe_create_dir(sha1_dir, 1);
 303        strcpy(path+len, "/pack");
 304        safe_create_dir(path, 1);
 305        strcpy(path+len, "/info");
 306        safe_create_dir(path, 1);
 307
 308        if (shared_repository) {
 309                char buf[10];
 310                /* We do not spell "group" and such, so that
 311                 * the configuration can be read by older version
 312                 * of git. Note, we use octal numbers for new share modes,
 313                 * and compatibility values for PERM_GROUP and
 314                 * PERM_EVERYBODY.
 315                 */
 316                if (shared_repository == PERM_GROUP)
 317                        sprintf(buf, "%d", OLD_PERM_GROUP);
 318                else if (shared_repository == PERM_EVERYBODY)
 319                        sprintf(buf, "%d", OLD_PERM_EVERYBODY);
 320                else
 321                        sprintf(buf, "0%o", shared_repository);
 322                git_config_set("core.sharedrepository", buf);
 323                git_config_set("receive.denyNonFastforwards", "true");
 324        }
 325
 326        if (!(flags & INIT_DB_QUIET))
 327                printf("%s%s Git repository in %s/\n",
 328                       reinit ? "Reinitialized existing" : "Initialized empty",
 329                       shared_repository ? " shared" : "",
 330                       get_git_dir());
 331
 332        return 0;
 333}
 334
 335static int guess_repository_type(const char *git_dir)
 336{
 337        char cwd[PATH_MAX];
 338        const char *slash;
 339
 340        /*
 341         * "GIT_DIR=. git init" is always bare.
 342         * "GIT_DIR=`pwd` git init" too.
 343         */
 344        if (!strcmp(".", git_dir))
 345                return 1;
 346        if (!getcwd(cwd, sizeof(cwd)))
 347                die("cannot tell cwd");
 348        if (!strcmp(git_dir, cwd))
 349                return 1;
 350        /*
 351         * "GIT_DIR=.git or GIT_DIR=something/.git is usually not.
 352         */
 353        if (!strcmp(git_dir, ".git"))
 354                return 0;
 355        slash = strrchr(git_dir, '/');
 356        if (slash && !strcmp(slash, "/.git"))
 357                return 0;
 358
 359        /*
 360         * Otherwise it is often bare.  At this point
 361         * we are just guessing.
 362         */
 363        return 1;
 364}
 365
 366static const char init_db_usage[] =
 367"git init [-q | --quiet] [--bare] [--template=<template-directory>] [--shared[=<permissions>]]";
 368
 369/*
 370 * If you want to, you can share the DB area with any number of branches.
 371 * That has advantages: you can save space by sharing all the SHA1 objects.
 372 * On the other hand, it might just make lookup slower and messier. You
 373 * be the judge.  The default case is to have one DB per managed directory.
 374 */
 375int cmd_init_db(int argc, const char **argv, const char *prefix)
 376{
 377        const char *git_dir;
 378        const char *template_dir = NULL;
 379        unsigned int flags = 0;
 380        int i;
 381
 382        for (i = 1; i < argc; i++, argv++) {
 383                const char *arg = argv[1];
 384                if (!prefixcmp(arg, "--template="))
 385                        template_dir = arg+11;
 386                else if (!strcmp(arg, "--bare")) {
 387                        static char git_dir[PATH_MAX+1];
 388                        is_bare_repository_cfg = 1;
 389                        setenv(GIT_DIR_ENVIRONMENT, getcwd(git_dir,
 390                                                sizeof(git_dir)), 0);
 391                } else if (!strcmp(arg, "--shared"))
 392                        init_shared_repository = PERM_GROUP;
 393                else if (!prefixcmp(arg, "--shared="))
 394                        init_shared_repository = git_config_perm("arg", arg+9);
 395                else if (!strcmp(arg, "-q") || !strcmp(arg, "--quiet"))
 396                        flags |= INIT_DB_QUIET;
 397                else
 398                        usage(init_db_usage);
 399        }
 400
 401        /*
 402         * GIT_WORK_TREE makes sense only in conjunction with GIT_DIR
 403         * without --bare.  Catch the error early.
 404         */
 405        git_dir = getenv(GIT_DIR_ENVIRONMENT);
 406        if ((!git_dir || is_bare_repository_cfg == 1)
 407            && getenv(GIT_WORK_TREE_ENVIRONMENT))
 408                die("%s (or --work-tree=<directory>) not allowed without "
 409                    "specifying %s (or --git-dir=<directory>)",
 410                    GIT_WORK_TREE_ENVIRONMENT,
 411                    GIT_DIR_ENVIRONMENT);
 412
 413        /*
 414         * Set up the default .git directory contents
 415         */
 416        if (!git_dir)
 417                git_dir = DEFAULT_GIT_DIR_ENVIRONMENT;
 418
 419        if (is_bare_repository_cfg < 0)
 420                is_bare_repository_cfg = guess_repository_type(git_dir);
 421
 422        if (!is_bare_repository_cfg) {
 423                if (git_dir) {
 424                        const char *git_dir_parent = strrchr(git_dir, '/');
 425                        if (git_dir_parent) {
 426                                char *rel = xstrndup(git_dir, git_dir_parent - git_dir);
 427                                git_work_tree_cfg = xstrdup(make_absolute_path(rel));
 428                                free(rel);
 429                        }
 430                }
 431                if (!git_work_tree_cfg) {
 432                        git_work_tree_cfg = xcalloc(PATH_MAX, 1);
 433                        if (!getcwd(git_work_tree_cfg, PATH_MAX))
 434                                die ("Cannot access current working directory.");
 435                }
 436                if (access(get_git_work_tree(), X_OK))
 437                        die ("Cannot access work tree '%s'",
 438                             get_git_work_tree());
 439        }
 440
 441        set_git_dir(make_absolute_path(git_dir));
 442
 443        return init_db(template_dir, flags);
 444}