1 /*
2  * Copyright (c) 2018, 2019, 2020 Stefan Sperling <stsp@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/stat.h>
18 #include <sys/types.h>
19 #include <sys/queue.h>
20 #include <sys/uio.h>
21 #include <sys/time.h>
22 #include <sys/mman.h>
23 
24 #include <inttypes.h>
25 #include <limits.h>
26 #include <signal.h>
27 #include <stdint.h>
28 #include <stdio.h>
29 #include <stdlib.h>
30 #include <string.h>
31 #include <unistd.h>
32 #include <zlib.h>
33 
34 #include "got_compat.h"
35 
36 #include "got_error.h"
37 #include "got_object.h"
38 #include "got_path.h"
39 
40 #include "got_lib_delta.h"
41 #include "got_lib_delta_cache.h"
42 #include "got_lib_object.h"
43 #include "got_lib_object_cache.h"
44 #include "got_lib_object_parse.h"
45 #include "got_lib_object_idset.h"
46 #include "got_lib_privsep.h"
47 #include "got_lib_pack.h"
48 
49 #ifndef nitems
50 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
51 #endif
52 
53 static volatile sig_atomic_t sigint_received;
54 
55 static void
56 catch_sigint(int signo)
57 {
58 	sigint_received = 1;
59 }
60 
61 static const struct got_error *
62 open_object(struct got_object **obj, struct got_pack *pack,
63     struct got_packidx *packidx, int idx, struct got_object_id *id,
64     struct got_object_cache *objcache)
65 {
66 	const struct got_error *err;
67 
68 	err = got_packfile_open_object(obj, pack, packidx, idx, id);
69 	if (err)
70 		return err;
71 	(*obj)->refcnt++;
72 
73 	err = got_object_cache_add(objcache, id, *obj);
74 	if (err) {
75 		if (err->code == GOT_ERR_OBJ_EXISTS ||
76 		    err->code == GOT_ERR_OBJ_TOO_LARGE)
77 			err = NULL;
78 		return err;
79 	}
80 	(*obj)->refcnt++;
81 	return NULL;
82 }
83 
84 static const struct got_error *
85 object_request(struct imsg *imsg, struct imsgbuf *ibuf, struct got_pack *pack,
86     struct got_packidx *packidx, struct got_object_cache *objcache)
87 {
88 	const struct got_error *err = NULL;
89 	struct got_imsg_packed_object iobj;
90 	struct got_object *obj;
91 	struct got_object_id id;
92 	size_t datalen;
93 
94 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
95 	if (datalen != sizeof(iobj))
96 		return got_error(GOT_ERR_PRIVSEP_LEN);
97 	memcpy(&iobj, imsg->data, sizeof(iobj));
98 	memcpy(&id, &iobj.id, sizeof(id));
99 
100 	obj = got_object_cache_get(objcache, &id);
101 	if (obj) {
102 		obj->refcnt++;
103 	} else {
104 		err = open_object(&obj, pack, packidx, iobj.idx, &id,
105 		    objcache);
106 		if (err)
107 			goto done;
108 	}
109 
110 	err = got_privsep_send_obj(ibuf, obj);
111 done:
112 	got_object_close(obj);
113 	return err;
114 }
115 
116 static const struct got_error *
117 open_commit(struct got_commit_object **commit, struct got_pack *pack,
118     struct got_packidx *packidx, int obj_idx, struct got_object_id *id,
119     struct got_object_cache *objcache)
120 {
121 	const struct got_error *err = NULL;
122 	struct got_object *obj = NULL;
123 	uint8_t *buf = NULL;
124 	size_t len;
125 
126 	*commit = NULL;
127 
128 	obj = got_object_cache_get(objcache, id);
129 	if (obj) {
130 		obj->refcnt++;
131 	} else {
132 		err = open_object(&obj, pack, packidx, obj_idx, id,
133 		    objcache);
134 		if (err)
135 			return err;
136 	}
137 
138 	err = got_packfile_extract_object_to_mem(&buf, &len, obj, pack);
139 	if (err)
140 		goto done;
141 
142 	obj->size = len;
143 
144 	err = got_object_parse_commit(commit, buf, len);
145 done:
146 	got_object_close(obj);
147 	free(buf);
148 	return err;
149 }
150 
151 static const struct got_error *
152 commit_request(struct imsg *imsg, struct imsgbuf *ibuf, struct got_pack *pack,
153     struct got_packidx *packidx, struct got_object_cache *objcache)
154 {
155 	const struct got_error *err = NULL;
156 	struct got_imsg_packed_object iobj;
157 	struct got_commit_object *commit = NULL;
158 	struct got_object_id id;
159 	size_t datalen;
160 
161 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
162 	if (datalen != sizeof(iobj))
163 		return got_error(GOT_ERR_PRIVSEP_LEN);
164 	memcpy(&iobj, imsg->data, sizeof(iobj));
165 	memcpy(&id, &iobj.id, sizeof(id));
166 
167 	err = open_commit(&commit, pack, packidx, iobj.idx, &id, objcache);
168 	if (err)
169 		goto done;
170 
171 	err = got_privsep_send_commit(ibuf, commit);
172 done:
173 	if (commit)
174 		got_object_commit_close(commit);
175 	if (err) {
176 		if (err->code == GOT_ERR_PRIVSEP_PIPE)
177 			err = NULL;
178 		else
179 			got_privsep_send_error(ibuf, err);
180 	}
181 
182 	return err;
183 }
184 
185 static const struct got_error *
186 open_tree(uint8_t **buf, struct got_parsed_tree_entry **entries, size_t *nentries,
187     size_t *nentries_alloc, struct got_pack *pack, struct got_packidx *packidx,
188     int obj_idx, struct got_object_id *id, struct got_object_cache *objcache)
189 {
190 	const struct got_error *err = NULL;
191 	struct got_object *obj = NULL;
192 	size_t len;
193 
194 	*buf = NULL;
195 	*nentries = 0;
196 
197 	obj = got_object_cache_get(objcache, id);
198 	if (obj) {
199 		obj->refcnt++;
200 	} else {
201 		err = open_object(&obj, pack, packidx, obj_idx, id,
202 		    objcache);
203 		if (err)
204 			return err;
205 	}
206 
207 	err = got_packfile_extract_object_to_mem(buf, &len, obj, pack);
208 	if (err)
209 		goto done;
210 
211 	obj->size = len;
212 
213 	err = got_object_parse_tree(entries, nentries, nentries_alloc,
214 	    *buf, len);
215 done:
216 	got_object_close(obj);
217 	if (err) {
218 		free(*buf);
219 		*buf = NULL;
220 	}
221 	return err;
222 }
223 
224 static const struct got_error *
225 tree_request(struct imsg *imsg, struct imsgbuf *ibuf, struct got_pack *pack,
226     struct got_packidx *packidx, struct got_object_cache *objcache,
227     struct got_parsed_tree_entry **entries, size_t *nentries,
228     size_t *nentries_alloc)
229 {
230 	const struct got_error *err = NULL;
231 	struct got_imsg_packed_object iobj;
232 	uint8_t *buf = NULL;
233 	struct got_object_id id;
234 	size_t datalen;
235 
236 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
237 	if (datalen != sizeof(iobj))
238 		return got_error(GOT_ERR_PRIVSEP_LEN);
239 	memcpy(&iobj, imsg->data, sizeof(iobj));
240 	memcpy(&id, &iobj.id, sizeof(id));
241 
242 	err = open_tree(&buf, entries, nentries, nentries_alloc,
243 	    pack, packidx, iobj.idx, &id, objcache);
244 	if (err)
245 		return err;
246 
247 	err = got_privsep_send_tree(ibuf, *entries, *nentries);
248 	free(buf);
249 	if (err) {
250 		if (err->code == GOT_ERR_PRIVSEP_PIPE)
251 			err = NULL;
252 		else
253 			got_privsep_send_error(ibuf, err);
254 	}
255 
256 	return err;
257 }
258 
259 static const struct got_error *
260 receive_file(FILE **f, struct imsgbuf *ibuf, uint32_t imsg_code)
261 {
262 	const struct got_error *err;
263 	struct imsg imsg;
264 	size_t datalen;
265 
266 	err = got_privsep_recv_imsg(&imsg, ibuf, 0);
267 	if (err)
268 		return err;
269 
270 	if (imsg.hdr.type != imsg_code) {
271 		err = got_error(GOT_ERR_PRIVSEP_MSG);
272 		goto done;
273 	}
274 
275 	datalen = imsg.hdr.len - IMSG_HEADER_SIZE;
276 	if (datalen != 0) {
277 		err = got_error(GOT_ERR_PRIVSEP_LEN);
278 		goto done;
279 	}
280 	if (imsg.fd == -1) {
281 		err = got_error(GOT_ERR_PRIVSEP_NO_FD);
282 		goto done;
283 	}
284 
285 	*f = fdopen(imsg.fd, "w+");
286 	if (*f == NULL) {
287 		err = got_error_from_errno("fdopen");
288 		close(imsg.fd);
289 		goto done;
290 	}
291 done:
292 	imsg_free(&imsg);
293 	return err;
294 }
295 
296 static const struct got_error *
297 receive_tempfile(FILE **f, const char *mode, struct imsg *imsg,
298     struct imsgbuf *ibuf)
299 {
300 	size_t datalen;
301 
302 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
303 	if (datalen != 0)
304 		return got_error(GOT_ERR_PRIVSEP_LEN);
305 
306 	if (imsg->fd == -1)
307 		return got_error(GOT_ERR_PRIVSEP_NO_FD);
308 
309 	*f = fdopen(imsg->fd, mode);
310 	if (*f == NULL)
311 		return got_error_from_errno("fdopen");
312 	imsg->fd = -1;
313 
314 	return NULL;
315 }
316 
317 static const struct got_error *
318 blob_request(struct imsg *imsg, struct imsgbuf *ibuf, struct got_pack *pack,
319     struct got_packidx *packidx, struct got_object_cache *objcache,
320     FILE *basefile, FILE *accumfile)
321 {
322 	const struct got_error *err = NULL;
323 	struct got_imsg_packed_object iobj;
324 	struct got_object *obj = NULL;
325 	FILE *outfile = NULL;
326 	struct got_object_id id;
327 	size_t datalen;
328 	uint64_t blob_size;
329 	uint8_t *buf = NULL;
330 
331 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
332 	if (datalen != sizeof(iobj))
333 		return got_error(GOT_ERR_PRIVSEP_LEN);
334 	memcpy(&iobj, imsg->data, sizeof(iobj));
335 	memcpy(&id, &iobj.id, sizeof(id));
336 
337 	obj = got_object_cache_get(objcache, &id);
338 	if (obj) {
339 		obj->refcnt++;
340 	} else {
341 		err = open_object(&obj, pack, packidx, iobj.idx, &id,
342 		    objcache);
343 		if (err)
344 			return err;
345 	}
346 
347 	err = receive_file(&outfile, ibuf, GOT_IMSG_BLOB_OUTFD);
348 	if (err)
349 		goto done;
350 
351 	if (obj->flags & GOT_OBJ_FLAG_DELTIFIED) {
352 		err = got_pack_get_max_delta_object_size(&blob_size, obj, pack);
353 		if (err)
354 			goto done;
355 	} else
356 		blob_size = obj->size;
357 
358 	if (blob_size <= GOT_PRIVSEP_INLINE_BLOB_DATA_MAX)
359 		err = got_packfile_extract_object_to_mem(&buf, &obj->size,
360 		    obj, pack);
361 	else
362 		err = got_packfile_extract_object(pack, obj, outfile, basefile,
363 		    accumfile);
364 	if (err)
365 		goto done;
366 
367 	err = got_privsep_send_blob(ibuf, obj->size, obj->hdrlen, buf);
368 done:
369 	free(buf);
370 	if (outfile && fclose(outfile) == EOF && err == NULL)
371 		err = got_error_from_errno("fclose");
372 	got_object_close(obj);
373 	if (err && err->code != GOT_ERR_PRIVSEP_PIPE)
374 		got_privsep_send_error(ibuf, err);
375 
376 	return err;
377 }
378 
379 static const struct got_error *
380 tag_request(struct imsg *imsg, struct imsgbuf *ibuf, struct got_pack *pack,
381     struct got_packidx *packidx, struct got_object_cache *objcache)
382 {
383 	const struct got_error *err = NULL;
384 	struct got_imsg_packed_object iobj;
385 	struct got_object *obj = NULL;
386 	struct got_tag_object *tag = NULL;
387 	uint8_t *buf = NULL;
388 	size_t len;
389 	struct got_object_id id;
390 	size_t datalen;
391 
392 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
393 	if (datalen != sizeof(iobj))
394 		return got_error(GOT_ERR_PRIVSEP_LEN);
395 	memcpy(&iobj, imsg->data, sizeof(iobj));
396 	memcpy(&id, &iobj.id, sizeof(id));
397 
398 	obj = got_object_cache_get(objcache, &id);
399 	if (obj) {
400 		obj->refcnt++;
401 	} else {
402 		err = open_object(&obj, pack, packidx, iobj.idx, &id,
403 		    objcache);
404 		if (err)
405 			return err;
406 	}
407 
408 	err = got_packfile_extract_object_to_mem(&buf, &len, obj, pack);
409 	if (err)
410 		goto done;
411 
412 	obj->size = len;
413 	err = got_object_parse_tag(&tag, buf, len);
414 	if (err)
415 		goto done;
416 
417 	err = got_privsep_send_tag(ibuf, tag);
418 done:
419 	free(buf);
420 	got_object_close(obj);
421 	if (tag)
422 		got_object_tag_close(tag);
423 	if (err) {
424 		if (err->code == GOT_ERR_PRIVSEP_PIPE)
425 			err = NULL;
426 		else
427 			got_privsep_send_error(ibuf, err);
428 	}
429 
430 	return err;
431 }
432 
433 static struct got_parsed_tree_entry *
434 find_entry_by_name(struct got_parsed_tree_entry *entries, int nentries,
435     const char *name, size_t len)
436 {
437 	struct got_parsed_tree_entry *pte;
438 	int cmp, i;
439 
440 	/* Note that tree entries are sorted in strncmp() order. */
441 	for (i = 0; i < nentries; i++) {
442 		pte = &entries[i];
443 		cmp = strncmp(pte->name, name, len);
444 		if (cmp < 0)
445 			continue;
446 		if (cmp > 0)
447 			break;
448 		if (pte->name[len] == '\0')
449 			return pte;
450 	}
451 	return NULL;
452 }
453 
454 static const struct got_error *
455 tree_path_changed(int *changed, uint8_t **buf1, uint8_t **buf2,
456     struct got_parsed_tree_entry **entries1, size_t *nentries1,
457     size_t *nentries_alloc1,
458     struct got_parsed_tree_entry **entries2, size_t *nentries2,
459     size_t *nentries_alloc2,
460     const char *path, struct got_pack *pack, struct got_packidx *packidx,
461     struct imsgbuf *ibuf, struct got_object_cache *objcache)
462 {
463 	const struct got_error *err = NULL;
464 	struct got_parsed_tree_entry *pte1 = NULL, *pte2 = NULL;
465 	const char *seg, *s;
466 	size_t seglen;
467 
468 	*changed = 0;
469 
470 	/* We not do support comparing the root path. */
471 	if (got_path_is_root_dir(path))
472 		return got_error_path(path, GOT_ERR_BAD_PATH);
473 
474 	s = path;
475 	while (*s == '/')
476 		s++;
477 	seg = s;
478 	seglen = 0;
479 	while (*s) {
480 		if (*s != '/') {
481 			s++;
482 			seglen++;
483 			if (*s)
484 				continue;
485 		}
486 
487 		pte1 = find_entry_by_name(*entries1, *nentries1, seg, seglen);
488 		if (pte1 == NULL) {
489 			err = got_error(GOT_ERR_NO_OBJ);
490 			break;
491 		}
492 
493 		pte2 = find_entry_by_name(*entries2, *nentries2, seg, seglen);
494 		if (pte2 == NULL) {
495 			*changed = 1;
496 			break;
497 		}
498 
499 		if (pte1->mode != pte2->mode) {
500 			*changed = 1;
501 			break;
502 		}
503 
504 		if (memcmp(pte1->id, pte2->id, SHA1_DIGEST_LENGTH) == 0) {
505 			*changed = 0;
506 			break;
507 		}
508 
509 		if (*s == '\0') { /* final path element */
510 			*changed = 1;
511 			break;
512 		}
513 
514 		seg = s + 1;
515 		s++;
516 		seglen = 0;
517 		if (*s) {
518 			struct got_object_id id1, id2;
519 			int idx;
520 
521 			memcpy(id1.sha1, pte1->id, SHA1_DIGEST_LENGTH);
522 			idx = got_packidx_get_object_idx(packidx, &id1);
523 			if (idx == -1) {
524 				err = got_error_no_obj(&id1);
525 				break;
526 			}
527 			*nentries1 = 0;
528 			free(*buf1);
529 			*buf1 = NULL;
530 			err = open_tree(buf1, entries1, nentries1,
531 			    nentries_alloc1, pack, packidx, idx, &id1,
532 			    objcache);
533 			pte1 = NULL;
534 			if (err)
535 				break;
536 
537 			memcpy(id2.sha1, pte2->id, SHA1_DIGEST_LENGTH);
538 			idx = got_packidx_get_object_idx(packidx, &id2);
539 			if (idx == -1) {
540 				err = got_error_no_obj(&id2);
541 				break;
542 			}
543 			*nentries2 = 0;
544 			free(*buf2);
545 			*buf2 = NULL;
546 			err = open_tree(buf2, entries2, nentries2,
547 			    nentries_alloc2, pack, packidx, idx, &id2,
548 			    objcache);
549 			pte2 = NULL;
550 			if (err)
551 				break;
552 		}
553 	}
554 
555 	return err;
556 }
557 
558 static const struct got_error *
559 send_traversed_commits(struct got_object_id *commit_ids, size_t ncommits,
560     struct imsgbuf *ibuf)
561 {
562 	struct ibuf *wbuf;
563 	size_t i;
564 
565 	wbuf = imsg_create(ibuf, GOT_IMSG_TRAVERSED_COMMITS, 0, 0,
566 	    sizeof(struct got_imsg_traversed_commits) +
567 	    ncommits * sizeof(commit_ids[0]));
568 	if (wbuf == NULL)
569 		return got_error_from_errno("imsg_create TRAVERSED_COMMITS");
570 
571 	if (imsg_add(wbuf, &ncommits, sizeof(ncommits)) == -1)
572 		return got_error_from_errno("imsg_add TRAVERSED_COMMITS");
573 
574 	for (i = 0; i < ncommits; i++) {
575 		struct got_object_id *id = &commit_ids[i];
576 		if (imsg_add(wbuf, id, sizeof(*id)) == -1) {
577 			return got_error_from_errno(
578 			    "imsg_add TRAVERSED_COMMITS");
579 		}
580 	}
581 
582 	wbuf->fd = -1;
583 	imsg_close(ibuf, wbuf);
584 
585 	return got_privsep_flush_imsg(ibuf);
586 }
587 
588 static const struct got_error *
589 send_commit_traversal_done(struct imsgbuf *ibuf)
590 {
591 	if (imsg_compose(ibuf, GOT_IMSG_COMMIT_TRAVERSAL_DONE, 0, 0, -1,
592 	    NULL, 0) == -1)
593 		return got_error_from_errno("imsg_compose TRAVERSAL_DONE");
594 
595 	return got_privsep_flush_imsg(ibuf);
596 }
597 
598 static const struct got_error *
599 commit_traversal_request(struct imsg *imsg, struct imsgbuf *ibuf,
600     struct got_pack *pack, struct got_packidx *packidx,
601     struct got_object_cache *objcache)
602 {
603 	const struct got_error *err = NULL;
604 	struct got_imsg_commit_traversal_request ctreq;
605 	struct got_object_qid *pid;
606 	struct got_commit_object *commit = NULL, *pcommit = NULL;
607 	struct got_parsed_tree_entry *entries = NULL, *pentries = NULL;
608 	size_t nentries = 0, nentries_alloc = 0;
609 	size_t pnentries = 0, pnentries_alloc = 0;
610 	struct got_object_id id;
611 	size_t datalen;
612 	char *path = NULL;
613 	const int min_alloc = 64;
614 	int changed = 0, ncommits = 0, nallocated = 0;
615 	struct got_object_id *commit_ids = NULL;
616 
617 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
618 	if (datalen < sizeof(ctreq))
619 		return got_error(GOT_ERR_PRIVSEP_LEN);
620 	memcpy(&ctreq, imsg->data, sizeof(ctreq));
621 	memcpy(&id, &ctreq.iobj.id, sizeof(id));
622 
623 	if (datalen != sizeof(ctreq) + ctreq.path_len)
624 		return got_error(GOT_ERR_PRIVSEP_LEN);
625 	if (ctreq.path_len == 0)
626 		return got_error(GOT_ERR_PRIVSEP_LEN);
627 
628 	path = strndup(imsg->data + sizeof(ctreq), ctreq.path_len);
629 	if (path == NULL)
630 		return got_error_from_errno("strndup");
631 
632 	nallocated = min_alloc;
633 	commit_ids = reallocarray(NULL, nallocated, sizeof(*commit_ids));
634 	if (commit_ids == NULL)
635 		return got_error_from_errno("reallocarray");
636 
637 	do {
638 		const size_t max_datalen = MAX_IMSGSIZE - IMSG_HEADER_SIZE;
639 		int idx;
640 
641 		if (sigint_received) {
642 			err = got_error(GOT_ERR_CANCELLED);
643 			goto done;
644 		}
645 
646 		if (commit == NULL) {
647 			idx = got_packidx_get_object_idx(packidx, &id);
648 			if (idx == -1)
649 				break;
650 			err = open_commit(&commit, pack, packidx,
651 			    idx, &id, objcache);
652 			if (err) {
653 				if (err->code != GOT_ERR_NO_OBJ)
654 					goto done;
655 				err = NULL;
656 				break;
657 			}
658 		}
659 
660 		if (sizeof(struct got_imsg_traversed_commits) +
661 		    ncommits * sizeof(commit_ids[0]) >= max_datalen) {
662 			err = send_traversed_commits(commit_ids, ncommits,
663 			    ibuf);
664 			if (err)
665 				goto done;
666 			ncommits = 0;
667 		}
668 		ncommits++;
669 		if (ncommits > nallocated) {
670 			struct got_object_id *new;
671 			nallocated += min_alloc;
672 			new = reallocarray(commit_ids, nallocated,
673 			    sizeof(*commit_ids));
674 			if (new == NULL) {
675 				err = got_error_from_errno("reallocarray");
676 				goto done;
677 			}
678 			commit_ids = new;
679 		}
680 		memcpy(&commit_ids[ncommits - 1], &id, sizeof(id));
681 
682 		pid = STAILQ_FIRST(&commit->parent_ids);
683 		if (pid == NULL)
684 			break;
685 
686 		idx = got_packidx_get_object_idx(packidx, &pid->id);
687 		if (idx == -1)
688 			break;
689 
690 		err = open_commit(&pcommit, pack, packidx, idx, &pid->id,
691 		    objcache);
692 		if (err) {
693 			if (err->code != GOT_ERR_NO_OBJ)
694 				goto done;
695 			err = NULL;
696 			break;
697 		}
698 
699 		if (path[0] == '/' && path[1] == '\0') {
700 			if (got_object_id_cmp(pcommit->tree_id,
701 			    commit->tree_id) != 0) {
702 				changed = 1;
703 				break;
704 			}
705 		} else {
706 			int pidx;
707 			uint8_t *buf = NULL, *pbuf = NULL;
708 
709 			idx = got_packidx_get_object_idx(packidx,
710 			    commit->tree_id);
711 			if (idx == -1)
712 				break;
713 			pidx = got_packidx_get_object_idx(packidx,
714 			    pcommit->tree_id);
715 			if (pidx == -1)
716 				break;
717 
718 			err = open_tree(&buf, &entries, &nentries,
719 			    &nentries_alloc, pack, packidx, idx,
720 			    commit->tree_id, objcache);
721 			if (err)
722 				goto done;
723 			err = open_tree(&pbuf, &pentries, &pnentries,
724 			    &pnentries_alloc, pack, packidx, pidx,
725 			    pcommit->tree_id, objcache);
726 			if (err) {
727 				free(buf);
728 				goto done;
729 			}
730 
731 			err = tree_path_changed(&changed, &buf, &pbuf,
732 			    &entries, &nentries, &nentries_alloc,
733 			    &pentries, &pnentries, &pnentries_alloc,
734 			    path, pack, packidx, ibuf, objcache);
735 
736 			nentries = 0;
737 			free(buf);
738 			pnentries = 0;
739 			free(pbuf);
740 			if (err) {
741 				if (err->code != GOT_ERR_NO_OBJ)
742 					goto done;
743 				err = NULL;
744 				break;
745 			}
746 		}
747 
748 		if (!changed) {
749 			memcpy(&id, &pid->id, sizeof(id));
750 			got_object_commit_close(commit);
751 			commit = pcommit;
752 			pcommit = NULL;
753 		}
754 	} while (!changed);
755 
756 	if (ncommits > 0) {
757 		err = send_traversed_commits(commit_ids, ncommits, ibuf);
758 		if (err)
759 			goto done;
760 
761 		if (changed) {
762 			err = got_privsep_send_commit(ibuf, commit);
763 			if (err)
764 				goto done;
765 		}
766 	}
767 	err = send_commit_traversal_done(ibuf);
768 done:
769 	free(path);
770 	free(commit_ids);
771 	if (commit)
772 		got_object_commit_close(commit);
773 	if (pcommit)
774 		got_object_commit_close(pcommit);
775 	free(entries);
776 	free(pentries);
777 	if (err) {
778 		if (err->code == GOT_ERR_PRIVSEP_PIPE)
779 			err = NULL;
780 		else
781 			got_privsep_send_error(ibuf, err);
782 	}
783 
784 	return err;
785 }
786 
787 static const struct got_error *
788 raw_object_request(struct imsg *imsg, struct imsgbuf *ibuf,
789     struct got_pack *pack, struct got_packidx *packidx,
790     struct got_object_cache *objcache, FILE *basefile, FILE *accumfile)
791 {
792 	const struct got_error *err = NULL;
793 	uint8_t *buf = NULL;
794 	uint64_t size = 0;
795 	FILE *outfile = NULL;
796 	struct got_imsg_packed_object iobj;
797 	struct got_object *obj;
798 	struct got_object_id id;
799 	size_t datalen;
800 
801 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
802 	if (datalen != sizeof(iobj))
803 		return got_error(GOT_ERR_PRIVSEP_LEN);
804 	memcpy(&iobj, imsg->data, sizeof(iobj));
805 	memcpy(&id, &iobj.id, sizeof(id));
806 
807 	obj = got_object_cache_get(objcache, &id);
808 	if (obj) {
809 		obj->refcnt++;
810 	} else {
811 		err = open_object(&obj, pack, packidx, iobj.idx, &id,
812 		    objcache);
813 		if (err)
814 			return err;
815 	}
816 
817 	err = receive_file(&outfile, ibuf, GOT_IMSG_RAW_OBJECT_OUTFD);
818 	if (err)
819 		return err;
820 
821 	if (obj->flags & GOT_OBJ_FLAG_DELTIFIED) {
822 		err = got_pack_get_max_delta_object_size(&size, obj, pack);
823 		if (err)
824 			goto done;
825 	} else
826 		size = obj->size;
827 
828 	if (size <= GOT_PRIVSEP_INLINE_OBJECT_DATA_MAX)
829 		err = got_packfile_extract_object_to_mem(&buf, &obj->size,
830 		    obj, pack);
831 	else
832 		err = got_packfile_extract_object(pack, obj, outfile, basefile,
833 		    accumfile);
834 	if (err)
835 		goto done;
836 
837 	err = got_privsep_send_raw_obj(ibuf, obj->size, obj->hdrlen, buf);
838 done:
839 	free(buf);
840 	if (outfile && fclose(outfile) == EOF && err == NULL)
841 		err = got_error_from_errno("fclose");
842 	got_object_close(obj);
843 	if (err && err->code != GOT_ERR_PRIVSEP_PIPE)
844 		got_privsep_send_error(ibuf, err);
845 
846 	return err;
847 }
848 
849 static const struct got_error *
850 get_base_object_id(struct got_object_id *base_id, struct got_packidx *packidx,
851     off_t base_offset)
852 {
853 	const struct got_error *err;
854 	int idx;
855 
856 	err = got_packidx_get_offset_idx(&idx, packidx, base_offset);
857 	if (err)
858 		return err;
859 	if (idx == -1)
860 		return got_error(GOT_ERR_BAD_PACKIDX);
861 
862 	return got_packidx_get_object_id(base_id, packidx, idx);
863 }
864 
865 static const struct got_error *
866 raw_delta_request(struct imsg *imsg, struct imsgbuf *ibuf,
867     FILE *delta_outfile, struct got_pack *pack,
868     struct got_packidx *packidx)
869 {
870 	const struct got_error *err = NULL;
871 	struct got_imsg_raw_delta_request req;
872 	size_t datalen, delta_size, delta_compressed_size;
873 	off_t delta_offset, delta_data_offset;
874 	uint8_t *delta_buf = NULL;
875 	struct got_object_id id, base_id;
876 	off_t base_offset, delta_out_offset = 0;
877 	uint64_t base_size = 0, result_size = 0;
878 	size_t w;
879 
880 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
881 	if (datalen != sizeof(req))
882 		return got_error(GOT_ERR_PRIVSEP_LEN);
883 	memcpy(&req, imsg->data, sizeof(req));
884 	memcpy(&id, &req.id, sizeof(id));
885 
886 	imsg->fd = -1;
887 
888 	err = got_packfile_extract_raw_delta(&delta_buf, &delta_size,
889 	    &delta_compressed_size, &delta_offset, &delta_data_offset,
890 	    &base_offset, &base_id, &base_size, &result_size,
891 	    pack, packidx, req.idx);
892 	if (err)
893 		goto done;
894 
895 	/*
896 	 * If this is an offset delta we must determine the base
897 	 * object ID ourselves.
898 	 */
899 	if (base_offset != 0) {
900 		err = get_base_object_id(&base_id, packidx, base_offset);
901 		if (err)
902 			goto done;
903 	}
904 
905 	delta_out_offset = ftello(delta_outfile);
906 	w = fwrite(delta_buf, 1, delta_compressed_size, delta_outfile);
907 	if (w != delta_compressed_size) {
908 		err = got_ferror(delta_outfile, GOT_ERR_IO);
909 		goto done;
910 	}
911 	if (fflush(delta_outfile) == -1) {
912 		err = got_error_from_errno("fflush");
913 		goto done;
914 	}
915 
916 	err = got_privsep_send_raw_delta(ibuf, base_size, result_size,
917 	    delta_size, delta_compressed_size, delta_offset, delta_out_offset,
918 	    &base_id);
919 done:
920 	free(delta_buf);
921 	return err;
922 }
923 
924 struct search_deltas_arg {
925 	struct imsgbuf *ibuf;
926 	struct got_packidx *packidx;
927 	struct got_pack *pack;
928 	struct got_object_idset *idset;
929 	struct got_imsg_reused_delta deltas[GOT_IMSG_REUSED_DELTAS_MAX_NDELTAS];
930 	size_t ndeltas;
931 };
932 
933 static const struct got_error *
934 search_delta_for_object(struct got_object_id *id, void *data, void *arg)
935 {
936 	const struct got_error *err;
937 	struct search_deltas_arg *a = arg;
938 	int obj_idx;
939 	uint8_t *delta_buf = NULL;
940 	uint64_t base_size, result_size;
941 	size_t delta_size, delta_compressed_size;
942 	off_t delta_offset, delta_data_offset, base_offset;
943 	struct got_object_id base_id;
944 
945 	if (sigint_received)
946 		return got_error(GOT_ERR_CANCELLED);
947 
948 	obj_idx = got_packidx_get_object_idx(a->packidx, id);
949 	if (obj_idx == -1)
950 		return NULL; /* object not present in our pack file */
951 
952 	err = got_packfile_extract_raw_delta(&delta_buf, &delta_size,
953 	    &delta_compressed_size, &delta_offset, &delta_data_offset,
954 	    &base_offset, &base_id, &base_size, &result_size,
955 	    a->pack, a->packidx, obj_idx);
956 	if (err) {
957 		if (err->code == GOT_ERR_OBJ_TYPE)
958 			return NULL; /* object not stored as a delta */
959 		return err;
960 	}
961 
962 	/*
963 	 * If this is an offset delta we must determine the base
964 	 * object ID ourselves.
965 	 */
966 	if (base_offset != 0) {
967 		err = get_base_object_id(&base_id, a->packidx, base_offset);
968 		if (err)
969 			goto done;
970 	}
971 
972 	if (got_object_idset_contains(a->idset, &base_id)) {
973 		struct got_imsg_reused_delta *delta;
974 
975 		delta = &a->deltas[a->ndeltas++];
976 		memcpy(&delta->id, id, sizeof(delta->id));
977 		memcpy(&delta->base_id, &base_id, sizeof(delta->base_id));
978 		delta->base_size = base_size;
979 		delta->result_size = result_size;
980 		delta->delta_size = delta_size;
981 		delta->delta_compressed_size = delta_compressed_size;
982 		delta->delta_offset = delta_data_offset;
983 
984 		if (a->ndeltas >= GOT_IMSG_REUSED_DELTAS_MAX_NDELTAS) {
985 			err = got_privsep_send_reused_deltas(a->ibuf,
986 			    a->deltas, a->ndeltas);
987 			if (err)
988 				goto done;
989 			a->ndeltas = 0;
990 		}
991 	}
992 done:
993 	free(delta_buf);
994 	return err;
995 }
996 
997 static const struct got_error *
998 recv_object_ids(struct got_object_idset *idset, struct imsgbuf *ibuf)
999 {
1000 	const struct got_error *err = NULL;
1001 	int done = 0;
1002 	struct got_object_id *ids;
1003 	size_t nids, i;
1004 
1005 	for (;;) {
1006 		err = got_privsep_recv_object_idlist(&done, &ids, &nids, ibuf);
1007 		if (err || done)
1008 			break;
1009 		for (i = 0; i < nids; i++) {
1010 			err = got_object_idset_add(idset, &ids[i], NULL);
1011 			if (err) {
1012 				free(ids);
1013 				return err;
1014 			}
1015 		}
1016 		free(ids);
1017 	}
1018 
1019 	return err;
1020 }
1021 
1022 static const struct got_error *
1023 recv_object_id_queue(struct got_object_id_queue *queue,
1024     struct got_object_idset *queued_ids, struct imsgbuf *ibuf)
1025 {
1026 	const struct got_error *err = NULL;
1027 	int done = 0;
1028 	struct got_object_qid *qid;
1029 	struct got_object_id *ids;
1030 	size_t nids, i;
1031 
1032 	for (;;) {
1033 		err = got_privsep_recv_object_idlist(&done, &ids, &nids, ibuf);
1034 		if (err || done)
1035 			break;
1036 		for (i = 0; i < nids; i++) {
1037 			err = got_object_qid_alloc_partial(&qid);
1038 			if (err)
1039 				return err;
1040 			memcpy(&qid->id, &ids[i], sizeof(qid->id));
1041 			STAILQ_INSERT_TAIL(queue, qid, entry);
1042 			err = got_object_idset_add(queued_ids, &qid->id, NULL);
1043 			if (err)
1044 				return err;
1045 		}
1046 	}
1047 
1048 	return err;
1049 }
1050 
1051 static const struct got_error *
1052 delta_reuse_request(struct imsg *imsg, struct imsgbuf *ibuf,
1053     struct got_pack *pack, struct got_packidx *packidx)
1054 {
1055 	const struct got_error *err = NULL;
1056 	struct got_object_idset *idset;
1057 	struct search_deltas_arg sda;
1058 
1059 	idset = got_object_idset_alloc();
1060 	if (idset == NULL)
1061 		return got_error_from_errno("got_object_idset_alloc");
1062 
1063 	err = recv_object_ids(idset, ibuf);
1064 	if (err)
1065 		return err;
1066 
1067 	memset(&sda, 0, sizeof(sda));
1068 	sda.ibuf = ibuf;
1069 	sda.idset = idset;
1070 	sda.pack = pack;
1071 	sda.packidx = packidx;
1072 	err = got_object_idset_for_each(idset, search_delta_for_object, &sda);
1073 	if (err)
1074 		goto done;
1075 
1076 	if (sda.ndeltas > 0) {
1077 		err = got_privsep_send_reused_deltas(ibuf, sda.deltas,
1078 		    sda.ndeltas);
1079 		if (err)
1080 			goto done;
1081 	}
1082 
1083 	err = got_privsep_send_reused_deltas_done(ibuf);
1084 done:
1085 	got_object_idset_free(idset);
1086 	return err;
1087 }
1088 
1089 static const struct got_error *
1090 receive_packidx(struct got_packidx **packidx, struct imsgbuf *ibuf)
1091 {
1092 	const struct got_error *err = NULL;
1093 	struct imsg imsg;
1094 	struct got_imsg_packidx ipackidx;
1095 	size_t datalen;
1096 	struct got_packidx *p;
1097 
1098 	*packidx = NULL;
1099 
1100 	err = got_privsep_recv_imsg(&imsg, ibuf, 0);
1101 	if (err)
1102 		return err;
1103 
1104 	p = calloc(1, sizeof(*p));
1105 	if (p == NULL) {
1106 		err = got_error_from_errno("calloc");
1107 		goto done;
1108 	}
1109 
1110 	if (imsg.hdr.type != GOT_IMSG_PACKIDX) {
1111 		err = got_error(GOT_ERR_PRIVSEP_MSG);
1112 		goto done;
1113 	}
1114 
1115 	if (imsg.fd == -1) {
1116 		err = got_error(GOT_ERR_PRIVSEP_NO_FD);
1117 		goto done;
1118 	}
1119 
1120 	datalen = imsg.hdr.len - IMSG_HEADER_SIZE;
1121 	if (datalen != sizeof(ipackidx)) {
1122 		err = got_error(GOT_ERR_PRIVSEP_LEN);
1123 		goto done;
1124 	}
1125 	memcpy(&ipackidx, imsg.data, sizeof(ipackidx));
1126 
1127 	p->len = ipackidx.len;
1128 	p->fd = dup(imsg.fd);
1129 	if (p->fd == -1) {
1130 		err = got_error_from_errno("dup");
1131 		goto done;
1132 	}
1133 	if (lseek(p->fd, 0, SEEK_SET) == -1) {
1134 		err = got_error_from_errno("lseek");
1135 		goto done;
1136 	}
1137 
1138 #ifndef GOT_PACK_NO_MMAP
1139 	if (p->len > 0 && p->len <= SIZE_MAX) {
1140 		p->map = mmap(NULL, p->len, PROT_READ, MAP_PRIVATE, p->fd, 0);
1141 		if (p->map == MAP_FAILED)
1142 			p->map = NULL; /* fall back to read(2) */
1143 	}
1144 #endif
1145 	err = got_packidx_init_hdr(p, 1, ipackidx.packfile_size);
1146 done:
1147 	if (err) {
1148 		if (imsg.fd != -1)
1149 			close(imsg.fd);
1150 		got_packidx_close(p);
1151 	} else
1152 		*packidx = p;
1153 	imsg_free(&imsg);
1154 	return err;
1155 }
1156 
1157 static const struct got_error *
1158 send_tree_enumeration_done(struct imsgbuf *ibuf)
1159 {
1160 	if (imsg_compose(ibuf, GOT_IMSG_TREE_ENUMERATION_DONE, 0, 0, -1,
1161 	    NULL, 0) == -1)
1162 		return got_error_from_errno("imsg_compose TREE_ENUMERATION_DONE");
1163 
1164 	return got_privsep_flush_imsg(ibuf);
1165 }
1166 
1167 struct enumerated_tree {
1168 	struct got_object_id id;
1169 	char *path;
1170 	uint8_t *buf;
1171 	struct got_parsed_tree_entry *entries;
1172 	int nentries;
1173 };
1174 
1175 static const struct got_error *
1176 enumerate_tree(int *have_all_entries, struct imsgbuf *ibuf, size_t *totlen,
1177     struct got_object_id *tree_id,
1178     const char *path, struct got_pack *pack, struct got_packidx *packidx,
1179     struct got_object_cache *objcache, struct got_object_idset *idset,
1180     struct enumerated_tree **trees, size_t *nalloc, size_t *ntrees)
1181 {
1182 	const struct got_error *err = NULL;
1183 	struct got_object_id_queue ids;
1184 	struct got_object_qid *qid;
1185 	uint8_t *buf = NULL;
1186 	struct got_parsed_tree_entry *entries = NULL;
1187 	size_t nentries = 0, nentries_alloc = 0, i;
1188 	struct enumerated_tree *tree;
1189 
1190 	*ntrees = 0;
1191 	*have_all_entries = 1;
1192 	STAILQ_INIT(&ids);
1193 
1194 	err = got_object_qid_alloc_partial(&qid);
1195 	if (err)
1196 		return err;
1197 	memcpy(&qid->id, tree_id, sizeof(*tree_id));
1198 	qid->data = strdup(path);
1199 	if (qid->data == NULL) {
1200 		err = got_error_from_errno("strdup");
1201 		goto done;
1202 	}
1203 	STAILQ_INSERT_TAIL(&ids, qid, entry);
1204 	qid = NULL;
1205 
1206 	/* Traverse the tree hierarchy, gather tree object IDs and paths. */
1207 	do {
1208 		const char *path;
1209 		int idx, i;
1210 
1211 		if (sigint_received) {
1212 			err = got_error(GOT_ERR_CANCELLED);
1213 			goto done;
1214 		}
1215 
1216 		qid = STAILQ_FIRST(&ids);
1217 		STAILQ_REMOVE_HEAD(&ids, entry);
1218 		path = qid->data;
1219 
1220 		idx = got_packidx_get_object_idx(packidx, &qid->id);
1221 		if (idx == -1) {
1222 			*have_all_entries = 0;
1223 			break;
1224 		}
1225 
1226 		err = open_tree(&buf, &entries, &nentries, &nentries_alloc,
1227 		    pack, packidx, idx, &qid->id, objcache);
1228 		if (err) {
1229 			if (err->code != GOT_ERR_NO_OBJ)
1230 				goto done;
1231 		}
1232 
1233 		err = got_object_idset_add(idset, &qid->id, NULL);
1234 		if (err)
1235 			goto done;
1236 
1237 		for (i = 0; i < nentries; i++) {
1238 			struct got_object_qid *eqid = NULL;
1239 			struct got_parsed_tree_entry *pte = &entries[i];
1240 			char *p;
1241 
1242 			if (!S_ISDIR(pte->mode))
1243 				continue;
1244 
1245 			err = got_object_qid_alloc_partial(&eqid);
1246 			if (err)
1247 				goto done;
1248 			memcpy(eqid->id.sha1, pte->id, sizeof(eqid->id.sha1));
1249 
1250 			if (got_object_idset_contains(idset, &eqid->id)) {
1251 				got_object_qid_free(eqid);
1252 				continue;
1253 			}
1254 
1255 			if (asprintf(&p, "%s%s%s", path,
1256 			    got_path_is_root_dir(path) ? "" : "/",
1257 			    pte->name) == -1) {
1258 				err = got_error_from_errno("asprintf");
1259 				got_object_qid_free(eqid);
1260 				goto done;
1261 			}
1262 			eqid->data = p;
1263 			STAILQ_INSERT_TAIL(&ids, eqid, entry);
1264 		}
1265 
1266 		if (*ntrees >= *nalloc) {
1267 			struct enumerated_tree *new;
1268 			new = recallocarray(*trees, *nalloc, *nalloc + 16,
1269 			    sizeof(*new));
1270 			if (new == NULL) {
1271 				err = got_error_from_errno("malloc");
1272 				goto done;
1273 			}
1274 			*trees = new;
1275 			*nalloc += 16;
1276 		}
1277 		tree = &(*trees)[*ntrees];
1278 		(*ntrees)++;
1279 		memcpy(&tree->id, &qid->id, sizeof(tree->id));
1280 		tree->path = qid->data;
1281 		tree->buf = buf;
1282 		buf = NULL;
1283 		tree->entries = entries;
1284 		entries = NULL;
1285 		nentries_alloc = 0;
1286 		tree->nentries = nentries;
1287 		nentries = 0;
1288 
1289 		got_object_qid_free(qid);
1290 		qid = NULL;
1291 	} while (!STAILQ_EMPTY(&ids));
1292 
1293 	if (*have_all_entries) {
1294 		int i;
1295 		/*
1296 		 * We have managed to traverse all entries in the hierarchy.
1297 		 * Tell the main process what we have found.
1298 		 */
1299 		for (i = 0; i < *ntrees; i++) {
1300 			tree = &(*trees)[i];
1301 			err = got_privsep_send_enumerated_tree(totlen,
1302 			    ibuf, &tree->id, tree->path, tree->entries,
1303 			    tree->nentries);
1304 			if (err)
1305 				goto done;
1306 			free(tree->buf);
1307 			tree->buf = NULL;
1308 			free(tree->path);
1309 			tree->path = NULL;
1310 			free(tree->entries);
1311 			tree->entries = NULL;
1312 		}
1313 		*ntrees = 0; /* don't loop again below to free memory */
1314 
1315 		err = send_tree_enumeration_done(ibuf);
1316 	} else {
1317 		/*
1318 		 * We can only load fully packed tree hierarchies on
1319 		 * behalf of the main process, otherwise the main process
1320 		 * gets a wrong idea about which tree objects have
1321 		 * already been traversed.
1322 		 * Indicate a missing entry for the root of this tree.
1323 		 * The main process should continue by loading this
1324 		 * entire tree the slow way.
1325 		 */
1326 		err = got_privsep_send_enumerated_tree(totlen, ibuf,
1327 		    tree_id, "/", NULL, -1);
1328 		if (err)
1329 			goto done;
1330 	}
1331 done:
1332 	free(buf);
1333 	free(entries);
1334 	for (i = 0; i < *ntrees; i++) {
1335 		tree = &(*trees)[i];
1336 		free(tree->buf);
1337 		tree->buf = NULL;
1338 		free(tree->path);
1339 		tree->path = NULL;
1340 		free(tree->entries);
1341 		tree->entries = NULL;
1342 	}
1343 	if (qid)
1344 		free(qid->data);
1345 	got_object_qid_free(qid);
1346 	got_object_id_queue_free(&ids);
1347 	if (err) {
1348 		if (err->code == GOT_ERR_PRIVSEP_PIPE)
1349 			err = NULL;
1350 		else
1351 			got_privsep_send_error(ibuf, err);
1352 	}
1353 
1354 	return err;
1355 }
1356 
1357 static const struct got_error *
1358 enumeration_request(struct imsg *imsg, struct imsgbuf *ibuf,
1359     struct got_pack *pack, struct got_packidx *packidx,
1360     struct got_object_cache *objcache)
1361 {
1362 	const struct got_error *err = NULL;
1363 	struct got_object_id_queue commit_ids;
1364 	const struct got_object_id_queue *parents = NULL;
1365 	struct got_object_qid *qid = NULL;
1366 	struct got_object *obj = NULL;
1367 	struct got_commit_object *commit = NULL;
1368 	struct got_object_id *tree_id = NULL;
1369 	size_t totlen = 0;
1370 	struct got_object_idset *idset, *queued_ids = NULL;
1371 	int i, idx, have_all_entries = 1;
1372 	struct enumerated_tree *trees = NULL;
1373 	size_t ntrees = 0, nalloc = 16;
1374 
1375 	STAILQ_INIT(&commit_ids);
1376 
1377 	trees = calloc(nalloc, sizeof(*trees));
1378 	if (trees == NULL)
1379 		return got_error_from_errno("calloc");
1380 
1381 	idset = got_object_idset_alloc();
1382 	if (idset == NULL) {
1383 		err = got_error_from_errno("got_object_idset_alloc");
1384 		goto done;
1385 	}
1386 
1387 	queued_ids = got_object_idset_alloc();
1388 	if (queued_ids == NULL) {
1389 		err = got_error_from_errno("got_object_idset_alloc");
1390 		goto done;
1391 	}
1392 
1393 	err = recv_object_id_queue(&commit_ids, queued_ids, ibuf);
1394 	if (err)
1395 		goto done;
1396 
1397 	if (STAILQ_EMPTY(&commit_ids)) {
1398 		err = got_error(GOT_ERR_PRIVSEP_MSG);
1399 		goto done;
1400 	}
1401 
1402 	err = recv_object_ids(idset, ibuf);
1403 	if (err)
1404 		goto done;
1405 
1406 	while (!STAILQ_EMPTY(&commit_ids)) {
1407 		if (sigint_received) {
1408 			err = got_error(GOT_ERR_CANCELLED);
1409 			goto done;
1410 		}
1411 
1412 		qid = STAILQ_FIRST(&commit_ids);
1413 		STAILQ_REMOVE_HEAD(&commit_ids, entry);
1414 
1415 		if (got_object_idset_contains(idset, &qid->id)) {
1416 			got_object_qid_free(qid);
1417 			qid = NULL;
1418 			continue;
1419 		}
1420 
1421 		idx = got_packidx_get_object_idx(packidx, &qid->id);
1422 		if (idx == -1) {
1423 			have_all_entries = 0;
1424 			break;
1425 		}
1426 
1427 		err = open_object(&obj, pack, packidx, idx, &qid->id,
1428 		    objcache);
1429 		if (err)
1430 			goto done;
1431 		if (obj->type == GOT_OBJ_TYPE_TAG) {
1432 			struct got_tag_object *tag;
1433 			uint8_t *buf;
1434 			size_t len;
1435 			err = got_packfile_extract_object_to_mem(&buf,
1436 			    &len, obj, pack);
1437 			if (err)
1438 				goto done;
1439 			obj->size = len;
1440 			err = got_object_parse_tag(&tag, buf, len);
1441 			if (err) {
1442 				free(buf);
1443 				goto done;
1444 			}
1445 			idx = got_packidx_get_object_idx(packidx, &tag->id);
1446 			if (idx == -1) {
1447 				have_all_entries = 0;
1448 				break;
1449 			}
1450 			err = open_commit(&commit, pack, packidx, idx,
1451 			    &tag->id, objcache);
1452 			got_object_tag_close(tag);
1453 			free(buf);
1454 			if (err)
1455 				goto done;
1456 		} else if (obj->type == GOT_OBJ_TYPE_COMMIT) {
1457 			err = open_commit(&commit, pack, packidx, idx,
1458 			    &qid->id, objcache);
1459 			if (err)
1460 				goto done;
1461 		} else {
1462 			err = got_error(GOT_ERR_OBJ_TYPE);
1463 			goto done;
1464 		}
1465 		got_object_close(obj);
1466 		obj = NULL;
1467 
1468 		err = got_privsep_send_enumerated_commit(ibuf, &qid->id,
1469 		    got_object_commit_get_committer_time(commit));
1470 		if (err)
1471 			goto done;
1472 
1473 		tree_id = got_object_commit_get_tree_id(commit);
1474 		idx = got_packidx_get_object_idx(packidx, tree_id);
1475 		if (idx == -1) {
1476 			have_all_entries = 0;
1477 			err = got_privsep_send_enumerated_tree(&totlen, ibuf,
1478 			    tree_id, "/", NULL, -1);
1479 			if (err)
1480 				goto done;
1481 			break;
1482 		}
1483 
1484 		if (got_object_idset_contains(idset, tree_id)) {
1485 			got_object_qid_free(qid);
1486 			qid = NULL;
1487 			err = send_tree_enumeration_done(ibuf);
1488 			if (err)
1489 				goto done;
1490 			continue;
1491 		}
1492 
1493 		err = enumerate_tree(&have_all_entries, ibuf, &totlen,
1494 		    tree_id, "/", pack, packidx, objcache, idset,
1495 		    &trees, &nalloc, &ntrees);
1496 		if (err)
1497 			goto done;
1498 
1499 		if (!have_all_entries)
1500 			break;
1501 
1502 		got_object_qid_free(qid);
1503 		qid = NULL;
1504 
1505 		parents = got_object_commit_get_parent_ids(commit);
1506 		if (parents) {
1507 			struct got_object_qid *pid;
1508 			STAILQ_FOREACH(pid, parents, entry) {
1509 				if (got_object_idset_contains(idset, &pid->id))
1510 					continue;
1511 				if (got_object_idset_contains(queued_ids, &pid->id))
1512 					continue;
1513 				err = got_object_qid_alloc_partial(&qid);
1514 				if (err)
1515 					goto done;
1516 				memcpy(&qid->id, &pid->id, sizeof(qid->id));
1517 				STAILQ_INSERT_TAIL(&commit_ids, qid, entry);
1518 				qid = NULL;
1519 			}
1520 		}
1521 
1522 		got_object_commit_close(commit);
1523 		commit = NULL;
1524 	}
1525 
1526 	if (have_all_entries) {
1527 		err = got_privsep_send_object_enumeration_done(ibuf);
1528 		if (err)
1529 			goto done;
1530 	} else {
1531 		err = got_privsep_send_object_enumeration_incomplete(ibuf);
1532 		if (err)
1533 			goto done;
1534 	}
1535 done:
1536 	if (obj)
1537 		got_object_close(obj);
1538 	if (commit)
1539 		got_object_commit_close(commit);
1540 	got_object_qid_free(qid);
1541 	got_object_id_queue_free(&commit_ids);
1542 	if (idset)
1543 		got_object_idset_free(idset);
1544 	if (queued_ids)
1545 		got_object_idset_free(queued_ids);
1546 	for (i = 0; i < ntrees; i++) {
1547 		struct enumerated_tree *tree = &trees[i];
1548 		free(tree->buf);
1549 		free(tree->path);
1550 		free(tree->entries);
1551 	}
1552 	free(trees);
1553 	return err;
1554 }
1555 
1556 enum findtwixt_color {
1557 	COLOR_KEEP = 0,
1558 	COLOR_DROP,
1559 	COLOR_SKIP,
1560 	COLOR_MAX,
1561 };
1562 
1563 static const struct got_error *
1564 paint_commit(struct got_object_qid *qid, intptr_t color)
1565 {
1566 	if (color < 0 || color >= COLOR_MAX)
1567 		return got_error(GOT_ERR_RANGE);
1568 
1569 	qid->data = (void *)color;
1570 	return NULL;
1571 }
1572 
1573 static const struct got_error *
1574 queue_commit_id(struct got_object_id_queue *ids, struct got_object_id *id,
1575     intptr_t color)
1576 {
1577 	const struct got_error *err;
1578 	struct got_object_qid *qid;
1579 
1580 	err = got_object_qid_alloc_partial(&qid);
1581 	if (err)
1582 		return err;
1583 
1584 	memcpy(&qid->id, id, sizeof(qid->id));
1585 	STAILQ_INSERT_TAIL(ids, qid, entry);
1586 	return paint_commit(qid, color);
1587 }
1588 
1589 static const struct got_error *
1590 paint_commits(struct got_object_id_queue *ids, int *nids,
1591     struct got_object_idset *keep, struct got_object_idset *drop,
1592     struct got_object_idset *skip, struct got_pack *pack,
1593     struct got_packidx *packidx, struct imsgbuf *ibuf,
1594     struct got_object_cache *objcache)
1595 {
1596 	const struct got_error *err = NULL;
1597 	struct got_commit_object *commit = NULL;
1598 	struct got_object_id_queue painted;
1599 	const struct got_object_id_queue *parents;
1600 	struct got_object_qid *qid = NULL;
1601 	int nqueued = *nids, nskip = 0, npainted = 0;
1602 
1603 	STAILQ_INIT(&painted);
1604 
1605 	while (!STAILQ_EMPTY(ids) && nskip != nqueued) {
1606 		int idx;
1607 		intptr_t color;
1608 
1609 		if (sigint_received) {
1610 			err = got_error(GOT_ERR_CANCELLED);
1611 			goto done;
1612 		}
1613 
1614 		qid = STAILQ_FIRST(ids);
1615 		idx = got_packidx_get_object_idx(packidx, &qid->id);
1616 		if (idx == -1) {
1617 			qid = NULL;
1618 			break;
1619 		}
1620 
1621 		STAILQ_REMOVE_HEAD(ids, entry);
1622 		nqueued--;
1623 		color = (intptr_t)qid->data;
1624 		if (color == COLOR_SKIP)
1625 			nskip--;
1626 
1627 		if (got_object_idset_contains(skip, &qid->id)) {
1628 			got_object_qid_free(qid);
1629 			qid = NULL;
1630 			continue;
1631 		}
1632 
1633 		switch (color) {
1634 		case COLOR_KEEP:
1635 			if (got_object_idset_contains(keep, &qid->id)) {
1636 				got_object_qid_free(qid);
1637 				qid = NULL;
1638 				continue;
1639 			}
1640 			if (got_object_idset_contains(drop, &qid->id)) {
1641 				err = paint_commit(qid, COLOR_SKIP);
1642 				if (err)
1643 					goto done;
1644 			}
1645 			err = got_object_idset_add(keep, &qid->id, NULL);
1646 			if (err)
1647 				goto done;
1648 			break;
1649 		case COLOR_DROP:
1650 			if (got_object_idset_contains(drop, &qid->id)) {
1651 				got_object_qid_free(qid);
1652 				qid = NULL;
1653 				continue;
1654 			}
1655 			if (got_object_idset_contains(keep, &qid->id)) {
1656 				err = paint_commit(qid, COLOR_SKIP);
1657 				if (err)
1658 					goto done;
1659 			}
1660 			err = got_object_idset_add(drop, &qid->id, NULL);
1661 			if (err)
1662 				goto done;
1663 			break;
1664 		case COLOR_SKIP:
1665 			if (!got_object_idset_contains(skip, &qid->id)) {
1666 				err = got_object_idset_add(skip, &qid->id,
1667 				    NULL);
1668 				if (err)
1669 					goto done;
1670 			}
1671 			break;
1672 		default:
1673 			/* should not happen */
1674 			err = got_error_fmt(GOT_ERR_NOT_IMPL,
1675 			    "%s invalid commit color %"PRIdPTR, __func__,
1676 			    color);
1677 			goto done;
1678 		}
1679 
1680 		err = open_commit(&commit, pack, packidx, idx, &qid->id,
1681 		    objcache);
1682 		if (err)
1683 			goto done;
1684 
1685 		parents = got_object_commit_get_parent_ids(commit);
1686 		if (parents) {
1687 			struct got_object_qid *pid;
1688 			color = (intptr_t)qid->data;
1689 			STAILQ_FOREACH(pid, parents, entry) {
1690 				err = queue_commit_id(ids, &pid->id, color);
1691 				if (err)
1692 					goto done;
1693 				nqueued++;
1694 				if (color == COLOR_SKIP)
1695 					nskip++;
1696 			}
1697 		}
1698 
1699 		got_object_commit_close(commit);
1700 		commit = NULL;
1701 
1702 		STAILQ_INSERT_TAIL(&painted, qid, entry);
1703 		qid = NULL;
1704 		npainted++;
1705 
1706 		err = got_privsep_send_painted_commits(ibuf, &painted,
1707 		    &npainted, 1, 0);
1708 		if (err)
1709 			goto done;
1710 	}
1711 
1712 	err = got_privsep_send_painted_commits(ibuf, &painted, &npainted, 1, 1);
1713 	if (err)
1714 		goto done;
1715 
1716 	*nids = nqueued;
1717 done:
1718 	if (commit)
1719 		got_object_commit_close(commit);
1720 	got_object_qid_free(qid);
1721 	return err;
1722 }
1723 
1724 static void
1725 commit_painting_free(struct got_object_idset **keep,
1726     struct got_object_idset **drop,
1727     struct got_object_idset **skip)
1728 {
1729 	if (*keep) {
1730 		got_object_idset_free(*keep);
1731 		*keep = NULL;
1732 	}
1733 	if (*drop) {
1734 		got_object_idset_free(*drop);
1735 		*drop = NULL;
1736 	}
1737 	if (*skip) {
1738 		got_object_idset_free(*skip);
1739 		*skip = NULL;
1740 	}
1741 }
1742 
1743 static const struct got_error *
1744 commit_painting_init(struct imsgbuf *ibuf, struct got_object_idset **keep,
1745     struct got_object_idset **drop, struct got_object_idset **skip)
1746 {
1747 	const struct got_error *err = NULL;
1748 
1749 	*keep = got_object_idset_alloc();
1750 	if (*keep == NULL) {
1751 		err = got_error_from_errno("got_object_idset_alloc");
1752 		goto done;
1753 	}
1754 	*drop = got_object_idset_alloc();
1755 	if (*drop == NULL) {
1756 		err = got_error_from_errno("got_object_idset_alloc");
1757 		goto done;
1758 	}
1759 	*skip = got_object_idset_alloc();
1760 	if (*skip == NULL) {
1761 		err = got_error_from_errno("got_object_idset_alloc");
1762 		goto done;
1763 	}
1764 
1765 	err = recv_object_ids(*keep, ibuf);
1766 	if (err)
1767 		goto done;
1768 	err = recv_object_ids(*drop, ibuf);
1769 	if (err)
1770 		goto done;
1771 	err = recv_object_ids(*skip, ibuf);
1772 	if (err)
1773 		goto done;
1774 
1775 done:
1776 	if (err)
1777 		commit_painting_free(keep, drop, skip);
1778 
1779 	return err;
1780 }
1781 
1782 static const struct got_error *
1783 commit_painting_request(struct imsg *imsg, struct imsgbuf *ibuf,
1784     struct got_pack *pack, struct got_packidx *packidx,
1785     struct got_object_cache *objcache, struct got_object_idset *keep,
1786     struct got_object_idset *drop, struct got_object_idset *skip)
1787 {
1788 	const struct got_error *err = NULL;
1789 	struct got_imsg_commit_painting_request ireq;
1790 	struct got_object_id id;
1791 	size_t datalen;
1792 	struct got_object_id_queue ids;
1793 	int nids = 0;
1794 
1795 	STAILQ_INIT(&ids);
1796 
1797 	datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1798 	if (datalen != sizeof(ireq))
1799 		return got_error(GOT_ERR_PRIVSEP_LEN);
1800 	memcpy(&ireq, imsg->data, sizeof(ireq));
1801 	memcpy(&id, &ireq.id, sizeof(id));
1802 
1803 	err = queue_commit_id(&ids, &id, ireq.color);
1804 	if (err)
1805 		return err;
1806 	nids = 1;
1807 
1808 	err = paint_commits(&ids, &nids, keep, drop, skip,
1809 	    pack, packidx, ibuf, objcache);
1810 	if (err)
1811 		goto done;
1812 
1813 	err = got_privsep_send_painted_commits(ibuf, &ids, &nids, 0, 1);
1814 	if (err)
1815 		goto done;
1816 
1817 	err = got_privsep_send_painting_commits_done(ibuf);
1818 done:
1819 	got_object_id_queue_free(&ids);
1820 	return err;
1821 }
1822 
1823 static const struct got_error *
1824 receive_pack(struct got_pack **packp, struct imsgbuf *ibuf)
1825 {
1826 	const struct got_error *err = NULL;
1827 	struct imsg imsg;
1828 	struct got_imsg_pack ipack;
1829 	size_t datalen;
1830 	struct got_pack *pack;
1831 
1832 	*packp = NULL;
1833 
1834 	err = got_privsep_recv_imsg(&imsg, ibuf, 0);
1835 	if (err)
1836 		return err;
1837 
1838 	pack = calloc(1, sizeof(*pack));
1839 	if (pack == NULL) {
1840 		err = got_error_from_errno("calloc");
1841 		goto done;
1842 	}
1843 
1844 	if (imsg.hdr.type != GOT_IMSG_PACK) {
1845 		err = got_error(GOT_ERR_PRIVSEP_MSG);
1846 		goto done;
1847 	}
1848 
1849 	if (imsg.fd == -1) {
1850 		err = got_error(GOT_ERR_PRIVSEP_NO_FD);
1851 		goto done;
1852 	}
1853 
1854 	datalen = imsg.hdr.len - IMSG_HEADER_SIZE;
1855 	if (datalen != sizeof(ipack)) {
1856 		err = got_error(GOT_ERR_PRIVSEP_LEN);
1857 		goto done;
1858 	}
1859 	memcpy(&ipack, imsg.data, sizeof(ipack));
1860 
1861 	pack->filesize = ipack.filesize;
1862 	pack->fd = dup(imsg.fd);
1863 	if (pack->fd == -1) {
1864 		err = got_error_from_errno("dup");
1865 		goto done;
1866 	}
1867 	if (lseek(pack->fd, 0, SEEK_SET) == -1) {
1868 		err = got_error_from_errno("lseek");
1869 		goto done;
1870 	}
1871 	pack->path_packfile = strdup(ipack.path_packfile);
1872 	if (pack->path_packfile == NULL) {
1873 		err = got_error_from_errno("strdup");
1874 		goto done;
1875 	}
1876 
1877 	err = got_delta_cache_alloc(&pack->delta_cache);
1878 	if (err)
1879 		goto done;
1880 
1881 #ifndef GOT_PACK_NO_MMAP
1882 	if (pack->filesize > 0 && pack->filesize <= SIZE_MAX) {
1883 		pack->map = mmap(NULL, pack->filesize, PROT_READ, MAP_PRIVATE,
1884 		    pack->fd, 0);
1885 		if (pack->map == MAP_FAILED)
1886 			pack->map = NULL; /* fall back to read(2) */
1887 	}
1888 #endif
1889 done:
1890 	if (err) {
1891 		if (imsg.fd != -1)
1892 			close(imsg.fd);
1893 		free(pack);
1894 	} else
1895 		*packp = pack;
1896 	imsg_free(&imsg);
1897 	return err;
1898 }
1899 
1900 int
1901 main(int argc, char *argv[])
1902 {
1903 	const struct got_error *err = NULL;
1904 	struct imsgbuf ibuf;
1905 	struct imsg imsg;
1906 	struct got_packidx *packidx = NULL;
1907 	struct got_pack *pack = NULL;
1908 	struct got_object_cache objcache;
1909 	FILE *basefile = NULL, *accumfile = NULL, *delta_outfile = NULL;
1910 	struct got_object_idset *keep = NULL, *drop = NULL, *skip = NULL;
1911 	struct got_parsed_tree_entry *entries = NULL;
1912 	size_t nentries = 0, nentries_alloc = 0;
1913 
1914 	//static int attached;
1915 	//while (!attached) sleep(1);
1916 
1917 	signal(SIGINT, catch_sigint);
1918 
1919 	imsg_init(&ibuf, GOT_IMSG_FD_CHILD);
1920 
1921 	err = got_object_cache_init(&objcache, GOT_OBJECT_CACHE_TYPE_OBJ);
1922 	if (err) {
1923 		err = got_error_from_errno("got_object_cache_init");
1924 		got_privsep_send_error(&ibuf, err);
1925 		return 1;
1926 	}
1927 
1928 #ifndef PROFILE
1929 	/* revoke access to most system calls */
1930 	if (pledge("stdio recvfd", NULL) == -1) {
1931 		err = got_error_from_errno("pledge");
1932 		got_privsep_send_error(&ibuf, err);
1933 		return 1;
1934 	}
1935 
1936 	/* revoke fs access */
1937 	if (landlock_no_fs() == -1) {
1938 		err = got_error_from_errno("landlock_no_fs");
1939 		got_privsep_send_error(&ibuf, err);
1940 		return 1;
1941 	}
1942 	if (cap_enter() == -1) {
1943 		err = got_error_from_errno("cap_enter");
1944 		got_privsep_send_error(&ibuf, err);
1945 		return 1;
1946 	}
1947 #endif
1948 
1949 	err = receive_packidx(&packidx, &ibuf);
1950 	if (err) {
1951 		got_privsep_send_error(&ibuf, err);
1952 		return 1;
1953 	}
1954 
1955 	err = receive_pack(&pack, &ibuf);
1956 	if (err) {
1957 		got_privsep_send_error(&ibuf, err);
1958 		return 1;
1959 	}
1960 
1961 	for (;;) {
1962 		imsg.fd = -1;
1963 
1964 		if (sigint_received) {
1965 			err = got_error(GOT_ERR_CANCELLED);
1966 			break;
1967 		}
1968 
1969 		err = got_privsep_recv_imsg(&imsg, &ibuf, 0);
1970 		if (err) {
1971 			if (err->code == GOT_ERR_PRIVSEP_PIPE)
1972 				err = NULL;
1973 			break;
1974 		}
1975 
1976 		if (imsg.hdr.type == GOT_IMSG_STOP)
1977 			break;
1978 
1979 		switch (imsg.hdr.type) {
1980 		case GOT_IMSG_TMPFD:
1981 			if (basefile == NULL) {
1982 				err = receive_tempfile(&basefile, "w+",
1983 				   &imsg, &ibuf);
1984 			} else if (accumfile == NULL) {
1985 				err = receive_tempfile(&accumfile, "w+",
1986 				   &imsg, &ibuf);
1987 			} else
1988 				err = got_error(GOT_ERR_PRIVSEP_MSG);
1989 			break;
1990 		case GOT_IMSG_PACKED_OBJECT_REQUEST:
1991 			err = object_request(&imsg, &ibuf, pack, packidx,
1992 			    &objcache);
1993 			break;
1994 		case GOT_IMSG_PACKED_RAW_OBJECT_REQUEST:
1995 			if (basefile == NULL || accumfile == NULL) {
1996 				err = got_error(GOT_ERR_PRIVSEP_MSG);
1997 				break;
1998 			}
1999 			err = raw_object_request(&imsg, &ibuf, pack, packidx,
2000 			    &objcache, basefile, accumfile);
2001 			break;
2002 		case GOT_IMSG_RAW_DELTA_OUTFD:
2003 			if (delta_outfile != NULL) {
2004 				err = got_error(GOT_ERR_PRIVSEP_MSG);
2005 				break;
2006 			}
2007 			err = receive_tempfile(&delta_outfile, "w",
2008 			    &imsg, &ibuf);
2009 			break;
2010 		case GOT_IMSG_RAW_DELTA_REQUEST:
2011 			if (delta_outfile == NULL) {
2012 				err = got_error(GOT_ERR_PRIVSEP_NO_FD);
2013 				break;
2014 			}
2015 			err = raw_delta_request(&imsg, &ibuf, delta_outfile,
2016 			    pack, packidx);
2017 			break;
2018 		case GOT_IMSG_DELTA_REUSE_REQUEST:
2019 			err = delta_reuse_request(&imsg, &ibuf, pack, packidx);
2020 			break;
2021 		case GOT_IMSG_COMMIT_REQUEST:
2022 			err = commit_request(&imsg, &ibuf, pack, packidx,
2023 			    &objcache);
2024 			break;
2025 		case GOT_IMSG_TREE_REQUEST:
2026 			err = tree_request(&imsg, &ibuf, pack, packidx,
2027 			    &objcache, &entries, &nentries, &nentries_alloc);
2028 			break;
2029 		case GOT_IMSG_BLOB_REQUEST:
2030 			if (basefile == NULL || accumfile == NULL) {
2031 				err = got_error(GOT_ERR_PRIVSEP_MSG);
2032 				break;
2033 			}
2034 			err = blob_request(&imsg, &ibuf, pack, packidx,
2035 			    &objcache, basefile, accumfile);
2036 			break;
2037 		case GOT_IMSG_TAG_REQUEST:
2038 			err = tag_request(&imsg, &ibuf, pack, packidx,
2039 			    &objcache);
2040 			break;
2041 		case GOT_IMSG_COMMIT_TRAVERSAL_REQUEST:
2042 			err = commit_traversal_request(&imsg, &ibuf, pack,
2043 			    packidx, &objcache);
2044 			break;
2045 		case GOT_IMSG_OBJECT_ENUMERATION_REQUEST:
2046 			err = enumeration_request(&imsg, &ibuf, pack,
2047 			    packidx, &objcache);
2048 			break;
2049 		case GOT_IMSG_COMMIT_PAINTING_INIT:
2050 			commit_painting_free(&keep, &drop, &skip);
2051 			err = commit_painting_init(&ibuf, &keep, &drop, &skip);
2052 			break;
2053 		case GOT_IMSG_COMMIT_PAINTING_REQUEST:
2054 			if (keep == NULL || drop == NULL || skip == NULL) {
2055 				err = got_error(GOT_ERR_PRIVSEP_MSG);
2056 				break;
2057 			}
2058 			err = commit_painting_request(&imsg, &ibuf, pack,
2059 			    packidx, &objcache, keep, drop, skip);
2060 			break;
2061 		case GOT_IMSG_COMMIT_PAINTING_DONE:
2062 			commit_painting_free(&keep, &drop, &skip);
2063 			break;
2064 		default:
2065 			err = got_error(GOT_ERR_PRIVSEP_MSG);
2066 			break;
2067 		}
2068 
2069 		if (imsg.fd != -1 && close(imsg.fd) == -1 && err == NULL)
2070 			err = got_error_from_errno("close");
2071 		imsg_free(&imsg);
2072 		if (err)
2073 			break;
2074 	}
2075 
2076 	free(entries);
2077 	commit_painting_free(&keep, &drop, &skip);
2078 	if (packidx)
2079 		got_packidx_close(packidx);
2080 	if (pack)
2081 		got_pack_close(pack);
2082 	got_object_cache_close(&objcache);
2083 	imsg_clear(&ibuf);
2084 	if (basefile && fclose(basefile) == EOF && err == NULL)
2085 		err = got_error_from_errno("fclose");
2086 	if (accumfile && fclose(accumfile) == EOF && err == NULL)
2087 		err = got_error_from_errno("fclose");
2088 	if (delta_outfile && fclose(delta_outfile) == EOF && err == NULL)
2089 		err = got_error_from_errno("fclose");
2090 	if (err) {
2091 		if (!sigint_received && err->code != GOT_ERR_PRIVSEP_PIPE) {
2092 			fprintf(stderr, "%s: %s\n", getprogname(), err->msg);
2093 			got_privsep_send_error(&ibuf, err);
2094 		}
2095 	}
2096 	if (close(GOT_IMSG_FD_CHILD) == -1 && err == NULL)
2097 		err = got_error_from_errno("close");
2098 	return err ? 1 : 0;
2099 }