1 /*
2  * Copyright (c) 2018, 2019 Stefan Sperling <stsp@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/types.h>
18 #include <sys/queue.h>
19 #include <sys/stat.h>
20 
21 #include <errno.h>
22 #include <ctype.h>
23 #include <dirent.h>
24 #include <limits.h>
25 #include <sha1.h>
26 #include <stdio.h>
27 #include <stdlib.h>
28 #include <string.h>
29 #include <unistd.h>
30 #include <util.h>
31 #include <zlib.h>
32 #include <time.h>
33 #include <libgen.h>
34 
35 #include "got_error.h"
36 #include "got_object.h"
37 #include "got_repository.h"
38 #include "got_reference.h"
39 #include "got_opentemp.h"
40 #include "got_path.h"
41 
42 #include "got_lib_sha1.h"
43 #include "got_lib_delta.h"
44 #include "got_lib_inflate.h"
45 #include "got_lib_object.h"
46 #include "got_lib_object_idset.h"
47 #include "got_lib_lockfile.h"
48 
49 #ifndef nitems
50 #define nitems(_a) (sizeof(_a) / sizeof((_a)[0]))
51 #endif
52 
53 #define GOT_REF_HEADS	"heads"
54 #define GOT_REF_TAGS	"tags"
55 #define GOT_REF_REMOTES	"remotes"
56 
57 /*
58  * We do not resolve tags yet, and don't yet care about sorting refs either,
59  * so packed-refs files we write contain a minimal header which disables all
60  * packed-refs "traits" supported by Git.
61  */
62 #define GOT_PACKED_REFS_HEADER	"# pack-refs with:"
63 
64 /* A symbolic reference. */
65 struct got_symref {
66 	char *name;
67 	char *ref;
68 };
69 
70 #define GOT_REF_RECURSE_MAX	20
71 
72 /* A non-symbolic reference (there is no better designation). */
73 struct got_ref {
74 	char *name;
75 	u_int8_t sha1[SHA1_DIGEST_LENGTH];
76 };
77 
78 /* A reference which points to an arbitrary object. */
79 struct got_reference {
80 	unsigned int flags;
81 #define GOT_REF_IS_SYMBOLIC	0x01
82 #define GOT_REF_IS_PACKED	0x02
83 
84 	union {
85 		struct got_ref ref;
86 		struct got_symref symref;
87 	} ref;
88 
89 	struct got_lockfile *lf;
90 	time_t mtime;
91 
92 	/* Cached timestamp for got_ref_cmp_by_commit_timestamp_descending() */
93 	time_t committer_time;
94 };
95 
96 static const struct got_error *
97 alloc_ref(struct got_reference **ref, const char *name,
98     struct got_object_id *id, int flags, time_t mtime)
99 {
100 	const struct got_error *err = NULL;
101 
102 	*ref = calloc(1, sizeof(**ref));
103 	if (*ref == NULL)
104 		return got_error_from_errno("calloc");
105 
106 	memcpy((*ref)->ref.ref.sha1, id->sha1, sizeof((*ref)->ref.ref.sha1));
107 	(*ref)->flags = flags;
108 	(*ref)->ref.ref.name = strdup(name);
109 	(*ref)->mtime = mtime;
110 	if ((*ref)->ref.ref.name == NULL) {
111 		err = got_error_from_errno("strdup");
112 		got_ref_close(*ref);
113 		*ref = NULL;
114 	}
115 	return err;
116 }
117 
118 static const struct got_error *
119 alloc_symref(struct got_reference **ref, const char *name,
120     const char *target_ref, int flags)
121 {
122 	const struct got_error *err = NULL;
123 
124 	*ref = calloc(1, sizeof(**ref));
125 	if (*ref == NULL)
126 		return got_error_from_errno("calloc");
127 
128 	(*ref)->flags = GOT_REF_IS_SYMBOLIC | flags;
129 	(*ref)->ref.symref.name = strdup(name);
130 	if ((*ref)->ref.symref.name == NULL) {
131 		err = got_error_from_errno("strdup");
132 		got_ref_close(*ref);
133 		*ref = NULL;
134 		return err;
135 	}
136 	(*ref)->ref.symref.ref = strdup(target_ref);
137 	if ((*ref)->ref.symref.ref == NULL) {
138 		err = got_error_from_errno("strdup");
139 		got_ref_close(*ref);
140 		*ref = NULL;
141 	}
142 	return err;
143 }
144 
145 static const struct got_error *
146 parse_symref(struct got_reference **ref, const char *name, const char *line)
147 {
148 	if (line[0] == '\0')
149 		return got_error(GOT_ERR_BAD_REF_DATA);
150 
151 	return alloc_symref(ref, name, line, 0);
152 }
153 
154 static const struct got_error *
155 parse_ref_line(struct got_reference **ref, const char *name, const char *line,
156     time_t mtime)
157 {
158 	struct got_object_id id;
159 
160 	if (strncmp(line, "ref: ", 5) == 0) {
161 		line += 5;
162 		return parse_symref(ref, name, line);
163 	}
164 
165 	if (!got_parse_sha1_digest(id.sha1, line))
166 		return got_error(GOT_ERR_BAD_REF_DATA);
167 
168 	return alloc_ref(ref, name, &id, 0, mtime);
169 }
170 
171 static const struct got_error *
172 parse_ref_file(struct got_reference **ref, const char *name,
173     const char *absname, const char *abspath, int lock)
174 {
175 	const struct got_error *err = NULL;
176 	FILE *f;
177 	char *line = NULL;
178 	size_t linesize = 0;
179 	ssize_t linelen;
180 	struct got_lockfile *lf = NULL;
181 	struct stat sb;
182 
183 	if (lock) {
184 		err = got_lockfile_lock(&lf, abspath, -1);
185 		if (err) {
186 			if (err->code == GOT_ERR_ERRNO && errno == ENOENT)
187 				err = got_error_not_ref(name);
188 			return err;
189 		}
190 	}
191 
192 	f = fopen(abspath, "rb");
193 	if (f == NULL) {
194 		if (errno != ENOTDIR && errno != ENOENT)
195 			err = got_error_from_errno2("fopen", abspath);
196 		else
197 			err = got_error_not_ref(name);
198 		if (lock)
199 			got_lockfile_unlock(lf, -1);
200 		return err;
201 	}
202 	if (fstat(fileno(f), &sb) == -1) {
203 		err = got_error_from_errno2("fstat", abspath);
204 		goto done;
205 	}
206 
207 	linelen = getline(&line, &linesize, f);
208 	if (linelen == -1) {
209 		if (feof(f))
210 			err = NULL; /* ignore empty files (could be locks) */
211 		else {
212 			if (errno == EISDIR)
213 				err = got_error(GOT_ERR_NOT_REF);
214 			else if (ferror(f))
215 				err = got_ferror(f, GOT_ERR_IO);
216 			else
217 				err = got_error_from_errno2("getline", abspath);
218 		}
219 		if (lock)
220 			got_lockfile_unlock(lf, -1);
221 		goto done;
222 	}
223 	while (linelen > 0 && line[linelen - 1] == '\n') {
224 		line[linelen - 1] = '\0';
225 		linelen--;
226 	}
227 
228 	err = parse_ref_line(ref, absname, line, sb.st_mtime);
229 	if (lock) {
230 		if (err)
231 			got_lockfile_unlock(lf, -1);
232 		else {
233 			if (*ref)
234 				(*ref)->lf = lf;
235 			else
236 				got_lockfile_unlock(lf, -1);
237 		}
238 	}
239 done:
240 	free(line);
241 	if (fclose(f) == EOF && err == NULL) {
242 		err = got_error_from_errno("fclose");
243 		if (*ref) {
244 			if (lock)
245 				got_ref_unlock(*ref);
246 			got_ref_close(*ref);
247 			*ref = NULL;
248 		}
249 	}
250 	return err;
251 }
252 
253 static int
254 is_well_known_ref(const char *refname)
255 {
256 	return (strcmp(refname, GOT_REF_HEAD) == 0 ||
257 	    strcmp(refname, GOT_REF_ORIG_HEAD) == 0 ||
258 	    strcmp(refname, GOT_REF_MERGE_HEAD) == 0 ||
259 	    strcmp(refname, GOT_REF_FETCH_HEAD) == 0);
260 }
261 
262 static char *
263 get_refs_dir_path(struct got_repository *repo, const char *refname)
264 {
265 	if (is_well_known_ref(refname) || strncmp(refname, "refs/", 5) == 0)
266 		return strdup(got_repo_get_path_git_dir(repo));
267 
268 	return got_repo_get_path_refs(repo);
269 }
270 
271 int
272 got_ref_name_is_valid(const char *name)
273 {
274 	const char *s, *seg;
275 	const char forbidden[] = { ' ', '~', '^', ':', '?', '*', '[' , '\\' };
276 	const char *forbidden_seq[] = { "//", "..", "@{" };
277 	const char *lfs = GOT_LOCKFILE_SUFFIX;
278 	const size_t lfs_len = sizeof(GOT_LOCKFILE_SUFFIX) - 1;
279 	size_t i;
280 
281 	if (name[0] == '@' && name[1] == '\0')
282 		return 0;
283 
284 	s = name;
285 	seg = s;
286 	if (seg[0] == '\0' || seg[0] == '.' || seg[0] == '/')
287 		return 0;
288 	while (*s) {
289 		for (i = 0; i < nitems(forbidden); i++) {
290 			if (*s == forbidden[i])
291 				return 0;
292 		}
293 		for (i = 0; i < nitems(forbidden_seq); i++) {
294 			if (s[0] == forbidden_seq[i][0] &&
295 			    s[1] == forbidden_seq[i][1])
296 				return 0;
297 		}
298 		if (iscntrl((unsigned char)s[0]))
299 			return 0;
300 		if (s[0] == '.' && s[1] == '\0')
301 			return 0;
302 		if (*s == '/') {
303 			const char *nextseg = s + 1;
304 			if (nextseg[0] == '\0' || nextseg[0] == '.' ||
305 			    nextseg[0] == '/')
306 				return 0;
307 			if (seg <= s - lfs_len &&
308 			    strncmp(s - lfs_len, lfs, lfs_len) == 0)
309 				return 0;
310 			seg = nextseg;
311 		}
312 		s++;
313 	}
314 
315 	if (seg <= s - lfs_len &&
316 	    strncmp(s - lfs_len, lfs, lfs_len) == 0)
317 		return 0;
318 
319 	return 1;
320 }
321 
322 const struct got_error *
323 got_ref_alloc(struct got_reference **ref, const char *name,
324     struct got_object_id *id)
325 {
326 	if (!got_ref_name_is_valid(name))
327 		return got_error_path(name, GOT_ERR_BAD_REF_NAME);
328 
329 	return alloc_ref(ref, name, id, 0, 0);
330 }
331 
332 const struct got_error *
333 got_ref_alloc_symref(struct got_reference **ref, const char *name,
334 	struct got_reference *target_ref)
335 {
336 	if (!got_ref_name_is_valid(name))
337 		return got_error_path(name, GOT_ERR_BAD_REF_NAME);
338 
339 	return alloc_symref(ref, name, got_ref_get_name(target_ref), 0);
340 }
341 
342 static const struct got_error *
343 parse_packed_ref_line(struct got_reference **ref, const char *abs_refname,
344     const char *line, time_t mtime)
345 {
346 	struct got_object_id id;
347 	const char *name;
348 
349 	*ref = NULL;
350 
351 	if (line[0] == '#' || line[0] == '^')
352 		return NULL;
353 
354 	if (!got_parse_sha1_digest(id.sha1, line))
355 		return got_error(GOT_ERR_BAD_REF_DATA);
356 
357 	if (abs_refname) {
358 		if (strcmp(line + SHA1_DIGEST_STRING_LENGTH, abs_refname) != 0)
359 			return NULL;
360 		name = abs_refname;
361 	} else
362 		name = line + SHA1_DIGEST_STRING_LENGTH;
363 
364 	return alloc_ref(ref, name, &id, GOT_REF_IS_PACKED, mtime);
365 }
366 
367 static const struct got_error *
368 open_packed_ref(struct got_reference **ref, FILE *f, const char **subdirs,
369     int nsubdirs, const char *refname, time_t mtime)
370 {
371 	const struct got_error *err = NULL;
372 	char *abs_refname;
373 	char *line = NULL;
374 	size_t linesize = 0;
375 	ssize_t linelen;
376 	int i, ref_is_absolute = (strncmp(refname, "refs/", 5) == 0);
377 
378 	*ref = NULL;
379 
380 	if (ref_is_absolute)
381 		abs_refname = (char *)refname;
382 	do {
383 		linelen = getline(&line, &linesize, f);
384 		if (linelen == -1) {
385 			if (feof(f))
386 				break;
387 			err = got_ferror(f, GOT_ERR_BAD_REF_DATA);
388 			break;
389 		}
390 		if (linelen > 0 && line[linelen - 1] == '\n')
391 			line[linelen - 1] = '\0';
392 		for (i = 0; i < nsubdirs; i++) {
393 			if (!ref_is_absolute &&
394 			    asprintf(&abs_refname, "refs/%s/%s", subdirs[i],
395 			    refname) == -1)
396 				return got_error_from_errno("asprintf");
397 			err = parse_packed_ref_line(ref, abs_refname, line,
398 			    mtime);
399 			if (!ref_is_absolute)
400 				free(abs_refname);
401 			if (err || *ref != NULL)
402 				break;
403 		}
404 		if (err)
405 			break;
406 	} while (*ref == NULL);
407 	free(line);
408 
409 	return err;
410 }
411 
412 static const struct got_error *
413 open_ref(struct got_reference **ref, const char *path_refs, const char *subdir,
414     const char *name, int lock)
415 {
416 	const struct got_error *err = NULL;
417 	char *path = NULL;
418 	char *absname = NULL;
419 	int ref_is_absolute = (strncmp(name, "refs/", 5) == 0);
420 	int ref_is_well_known = (subdir[0] == '\0' && is_well_known_ref(name));
421 
422 	*ref = NULL;
423 
424 	if (!got_ref_name_is_valid(name))
425 		return got_error_path(name, GOT_ERR_BAD_REF_NAME);
426 
427 	if (ref_is_absolute || ref_is_well_known) {
428 		if (asprintf(&path, "%s/%s", path_refs, name) == -1)
429 			return got_error_from_errno("asprintf");
430 		absname = (char *)name;
431 	} else {
432 		if (asprintf(&path, "%s/%s%s%s", path_refs, subdir,
433 		    subdir[0] ? "/" : "", name) == -1)
434 			return got_error_from_errno("asprintf");
435 
436 		if (asprintf(&absname, "refs/%s%s%s",
437 		    subdir, subdir[0] ? "/" : "", name) == -1) {
438 			err = got_error_from_errno("asprintf");
439 			goto done;
440 		}
441 	}
442 
443 	err = parse_ref_file(ref, name, absname, path, lock);
444 done:
445 	if (!ref_is_absolute && !ref_is_well_known)
446 		free(absname);
447 	free(path);
448 	return err;
449 }
450 
451 const struct got_error *
452 got_ref_open(struct got_reference **ref, struct got_repository *repo,
453     const char *refname, int lock)
454 {
455 	const struct got_error *err = NULL;
456 	char *path_refs = NULL;
457 	const char *subdirs[] = {
458 	    GOT_REF_HEADS, GOT_REF_TAGS, GOT_REF_REMOTES
459 	};
460 	size_t i;
461 	int well_known = is_well_known_ref(refname);
462 	struct got_lockfile *lf = NULL;
463 
464 	*ref = NULL;
465 
466 	path_refs = get_refs_dir_path(repo, refname);
467 	if (path_refs == NULL) {
468 		err = got_error_from_errno2("get_refs_dir_path", refname);
469 		goto done;
470 	}
471 
472 	if (well_known) {
473 		err = open_ref(ref, path_refs, "", refname, lock);
474 	} else {
475 		char *packed_refs_path;
476 		FILE *f;
477 
478 		/* Search on-disk refs before packed refs! */
479 		for (i = 0; i < nitems(subdirs); i++) {
480 			err = open_ref(ref, path_refs, subdirs[i], refname,
481 			    lock);
482 			if ((err && err->code != GOT_ERR_NOT_REF) || *ref)
483 				goto done;
484 		}
485 
486 		packed_refs_path = got_repo_get_path_packed_refs(repo);
487 		if (packed_refs_path == NULL) {
488 			err = got_error_from_errno(
489 			    "got_repo_get_path_packed_refs");
490 			goto done;
491 		}
492 
493 		if (lock) {
494 			err = got_lockfile_lock(&lf, packed_refs_path, -1);
495 			if (err)
496 				goto done;
497 		}
498 		f = fopen(packed_refs_path, "rb");
499 		free(packed_refs_path);
500 		if (f != NULL) {
501 			struct stat sb;
502 			if (fstat(fileno(f), &sb) == -1) {
503 				err = got_error_from_errno2("fstat",
504 				    packed_refs_path);
505 				goto done;
506 			}
507 			err = open_packed_ref(ref, f, subdirs, nitems(subdirs),
508 			    refname, sb.st_mtime);
509 			if (!err) {
510 				if (fclose(f) == EOF) {
511 					err = got_error_from_errno("fclose");
512 					got_ref_close(*ref);
513 					*ref = NULL;
514 				} else if (*ref)
515 					(*ref)->lf = lf;
516 			}
517 		}
518 	}
519 done:
520 	if (!err && *ref == NULL)
521 		err = got_error_not_ref(refname);
522 	if (err && lf)
523 		got_lockfile_unlock(lf, -1);
524 	free(path_refs);
525 	return err;
526 }
527 
528 void
529 got_ref_close(struct got_reference *ref)
530 {
531 	if (ref->flags & GOT_REF_IS_SYMBOLIC) {
532 		free(ref->ref.symref.name);
533 		free(ref->ref.symref.ref);
534 	} else
535 		free(ref->ref.ref.name);
536 	free(ref);
537 }
538 
539 struct got_reference *
540 got_ref_dup(struct got_reference *ref)
541 {
542 	struct got_reference *ret;
543 
544 	ret = calloc(1, sizeof(*ret));
545 	if (ret == NULL)
546 		return NULL;
547 
548 	ret->flags = ref->flags;
549 	if (ref->flags & GOT_REF_IS_SYMBOLIC) {
550 		ret->ref.symref.name = strdup(ref->ref.symref.name);
551 		if (ret->ref.symref.name == NULL) {
552 			free(ret);
553 			return NULL;
554 		}
555 		ret->ref.symref.ref = strdup(ref->ref.symref.ref);
556 		if (ret->ref.symref.ref == NULL) {
557 			free(ret->ref.symref.name);
558 			free(ret);
559 			return NULL;
560 		}
561 	} else {
562 		ret->ref.ref.name = strdup(ref->ref.ref.name);
563 		if (ret->ref.ref.name == NULL) {
564 			free(ret);
565 			return NULL;
566 		}
567 		memcpy(ret->ref.ref.sha1, ref->ref.ref.sha1,
568 		    sizeof(ret->ref.ref.sha1));
569 	}
570 
571 	return ret;
572 }
573 
574 const struct got_error *
575 got_reflist_entry_dup(struct got_reflist_entry **newp,
576     struct got_reflist_entry *re)
577 {
578 	const struct got_error *err = NULL;
579 	struct got_reflist_entry *new;
580 
581 	*newp = NULL;
582 
583 	new = malloc(sizeof(*new));
584 	if (new == NULL)
585 		return got_error_from_errno("malloc");
586 
587 	new->ref = got_ref_dup(re->ref);
588 	if (new->ref == NULL) {
589 		err = got_error_from_errno("got_ref_dup");
590 		free(new);
591 		return err;
592 	}
593 
594 	*newp = new;
595 	return NULL;
596 }
597 
598 const struct got_error *
599 got_ref_resolve_symbolic(struct got_reference **resolved,
600     struct got_repository *repo, struct got_reference *ref)
601 {
602 	struct got_reference *nextref;
603 	const struct got_error *err;
604 
605 	err = got_ref_open(&nextref, repo, ref->ref.symref.ref, 0);
606 	if (err)
607 		return err;
608 
609 	if (nextref->flags & GOT_REF_IS_SYMBOLIC)
610 		err = got_ref_resolve_symbolic(resolved, repo, nextref);
611 	else
612 		*resolved = got_ref_dup(nextref);
613 
614 	got_ref_close(nextref);
615 	return err;
616 }
617 
618 static const struct got_error *
619 ref_resolve(struct got_object_id **id, struct got_repository *repo,
620     struct got_reference *ref, int recursion)
621 {
622 	const struct got_error *err;
623 
624 	if (recursion <= 0)
625 		return got_error_msg(GOT_ERR_RECURSION,
626 		    "reference recursion limit reached");
627 
628 	if (ref->flags & GOT_REF_IS_SYMBOLIC) {
629 		struct got_reference *resolved = NULL;
630 		err = got_ref_resolve_symbolic(&resolved, repo, ref);
631 		if (err == NULL)
632 			err = ref_resolve(id, repo, resolved, --recursion);
633 		if (resolved)
634 			got_ref_close(resolved);
635 		return err;
636 	}
637 
638 	*id = calloc(1, sizeof(**id));
639 	if (*id == NULL)
640 		return got_error_from_errno("calloc");
641 	memcpy((*id)->sha1, ref->ref.ref.sha1, sizeof((*id)->sha1));
642 	return NULL;
643 }
644 
645 const struct got_error *
646 got_ref_resolve(struct got_object_id **id, struct got_repository *repo,
647     struct got_reference *ref)
648 {
649 	return ref_resolve(id, repo, ref, GOT_REF_RECURSE_MAX);
650 }
651 
652 char *
653 got_ref_to_str(struct got_reference *ref)
654 {
655 	char *str;
656 
657 	if (ref->flags & GOT_REF_IS_SYMBOLIC)
658 		return strdup(ref->ref.symref.ref);
659 
660 	str = malloc(SHA1_DIGEST_STRING_LENGTH);
661 	if (str == NULL)
662 		return NULL;
663 
664 	if (got_sha1_digest_to_str(ref->ref.ref.sha1, str,
665 	    SHA1_DIGEST_STRING_LENGTH) == NULL) {
666 		free(str);
667 		return NULL;
668 	}
669 
670 	return str;
671 }
672 
673 const char *
674 got_ref_get_name(struct got_reference *ref)
675 {
676 	if (ref->flags & GOT_REF_IS_SYMBOLIC)
677 		return ref->ref.symref.name;
678 
679 	return ref->ref.ref.name;
680 }
681 
682 const char *
683 got_ref_get_symref_target(struct got_reference *ref)
684 {
685 	if (ref->flags & GOT_REF_IS_SYMBOLIC)
686 		return ref->ref.symref.ref;
687 
688 	return NULL;
689 }
690 
691 time_t
692 got_ref_get_mtime(struct got_reference *ref)
693 {
694 	return ref->mtime;
695 }
696 
697 const struct got_error *
698 got_ref_cmp_by_name(void *arg, int *cmp, struct got_reference *re1,
699     struct got_reference* re2)
700 {
701 	const char *name1 = got_ref_get_name(re1);
702 	const char *name2 = got_ref_get_name(re2);
703 
704 	*cmp = got_path_cmp(name1, name2, strlen(name1), strlen(name2));
705 	return NULL;
706 }
707 
708 const struct got_error *
709 got_ref_cmp_tags(void *arg, int *cmp, struct got_reference *ref1,
710     struct got_reference *ref2)
711 {
712 	const struct got_error *err = NULL;
713 	struct got_repository *repo = arg;
714 	struct got_object_id *id1, *id2 = NULL;
715 	struct got_tag_object *tag1 = NULL, *tag2 = NULL;
716 	struct got_commit_object *commit1 = NULL, *commit2 = NULL;
717 	time_t time1, time2;
718 
719 	*cmp = 0;
720 
721 	err = got_ref_resolve(&id1, repo, ref1);
722 	if (err)
723 		return err;
724 	err = got_object_open_as_tag(&tag1, repo, id1);
725 	if (err) {
726 		if (err->code != GOT_ERR_OBJ_TYPE)
727 			goto done;
728 		/* "lightweight" tag */
729 		err = got_object_open_as_commit(&commit1, repo, id1);
730 		if (err)
731 			goto done;
732 		time1 = got_object_commit_get_committer_time(commit1);
733 	} else
734 		time1 = got_object_tag_get_tagger_time(tag1);
735 
736 	err = got_ref_resolve(&id2, repo, ref2);
737 	if (err)
738 		goto done;
739 	err = got_object_open_as_tag(&tag2, repo, id2);
740 	if (err) {
741 		if (err->code != GOT_ERR_OBJ_TYPE)
742 			goto done;
743 		/* "lightweight" tag */
744 		err = got_object_open_as_commit(&commit2, repo, id2);
745 		if (err)
746 			goto done;
747 		time2 = got_object_commit_get_committer_time(commit2);
748 	} else
749 		time2 = got_object_tag_get_tagger_time(tag2);
750 
751 	/* Put latest tags first. */
752 	if (time1 < time2)
753 		*cmp = 1;
754 	else if (time1 > time2)
755 		*cmp = -1;
756 	else
757 		err = got_ref_cmp_by_name(NULL, cmp, ref2, ref1);
758 done:
759 	free(id1);
760 	free(id2);
761 	if (tag1)
762 		got_object_tag_close(tag1);
763 	if (tag2)
764 		got_object_tag_close(tag2);
765 	if (commit1)
766 		got_object_commit_close(commit1);
767 	if (commit2)
768 		got_object_commit_close(commit2);
769 	return err;
770 }
771 
772 static const struct got_error *
773 get_committer_time(struct got_reference *ref, struct got_repository *repo)
774 {
775 	const struct got_error *err = NULL;
776 	int obj_type;
777 	struct got_commit_object *commit = NULL;
778 	struct got_tag_object *tag = NULL;
779 	struct got_object_id *id = NULL;
780 
781 	err = got_ref_resolve(&id, repo, ref);
782 	if (err)
783 		return err;
784 
785 	err = got_object_get_type(&obj_type, repo, id);
786 	if (err)
787 		goto done;
788 
789 	switch (obj_type) {
790 	case GOT_OBJ_TYPE_COMMIT:
791 		err = got_object_open_as_commit(&commit, repo, id);
792 		if (err)
793 			goto done;
794 		ref->committer_time =
795 		    got_object_commit_get_committer_time(commit);
796 		break;
797 	case GOT_OBJ_TYPE_TAG:
798 		err = got_object_open_as_tag(&tag, repo, id);
799 		if (err)
800 			goto done;
801 		ref->committer_time = got_object_tag_get_tagger_time(tag);
802 		break;
803 	default:
804 		/* best effort for other object types */
805 		ref->committer_time = got_ref_get_mtime(ref);
806 		break;
807 	}
808 done:
809 	free(id);
810 	if (commit)
811 		got_object_commit_close(commit);
812 	if (tag)
813 		got_object_tag_close(tag);
814 	return err;
815 }
816 
817 const struct got_error *
818 got_ref_cmp_by_commit_timestamp_descending(void *arg, int *cmp,
819     struct got_reference *ref1, struct got_reference *ref2)
820 {
821 	const struct got_error *err = NULL;
822 	struct got_repository *repo = arg;
823 
824 	*cmp = 0;
825 
826 	if (ref1->committer_time == 0) {
827 		err = get_committer_time(ref1, repo);
828 		if (err)
829 			return err;
830 	}
831 	if (ref2->committer_time == 0) {
832 		err = get_committer_time(ref2, repo);
833 		if (err)
834 			return err;
835 	}
836 
837 	if (ref1->committer_time < ref2->committer_time)
838 		*cmp = 1;
839 	else if (ref2->committer_time < ref1->committer_time)
840 		*cmp = -1;
841 
842 	return err;
843 }
844 
845 const struct got_error *
846 got_reflist_insert(struct got_reflist_entry **newp, struct got_reflist_head *refs,
847     struct got_reference *ref, got_ref_cmp_cb cmp_cb, void *cmp_arg)
848 {
849 	const struct got_error *err;
850 	struct got_reflist_entry *new, *re;
851 	int cmp;
852 
853 	*newp = NULL;
854 
855 	new = malloc(sizeof(*new));
856 	if (new == NULL)
857 		return got_error_from_errno("malloc");
858 	new->ref = ref;
859 	*newp = new;
860 
861 	/*
862 	 * We must de-duplicate entries on insert because packed-refs may
863 	 * contain redundant entries. On-disk refs take precedence.
864 	 * This code assumes that on-disk revs are read before packed-refs.
865 	 * We're iterating the list anyway, so insert elements sorted by name.
866 	 *
867 	 * Many callers will provide paths in a somewhat sorted order.
868 	 * Iterating backwards from the tail of the list should be more
869 	 * efficient than traversing through the entire list each time
870 	 * an element is inserted.
871 	 */
872 	re = TAILQ_LAST(refs, got_reflist_head);
873 	while (re) {
874 		err = (*cmp_cb)(cmp_arg, &cmp, re->ref, new->ref);
875 		if (err)
876 			return err;
877 		if (cmp == 0) {
878 			/* duplicate */
879 			free(new);
880 			*newp = NULL;
881 			return NULL;
882 		} else if (cmp < 0) {
883 			TAILQ_INSERT_AFTER(refs, re, new, entry);
884 			return NULL;
885 		}
886 		re = TAILQ_PREV(re, got_reflist_head, entry);
887 	}
888 
889 	TAILQ_INSERT_HEAD(refs, new, entry);
890 	return NULL;
891 }
892 
893 const struct got_error *
894 got_reflist_sort(struct got_reflist_head *refs,
895     got_ref_cmp_cb cmp_cb, void *cmp_arg)
896 {
897 	const struct got_error *err = NULL;
898 	struct got_reflist_entry *re, *tmp, *new;
899 	struct got_reflist_head sorted;
900 
901 	TAILQ_INIT(&sorted);
902 
903 	TAILQ_FOREACH_SAFE(re, refs, entry, tmp) {
904 		struct got_reference *ref = re->ref;
905 		TAILQ_REMOVE(refs, re, entry);
906 		free(re);
907 		err = got_reflist_insert(&new, &sorted, ref, cmp_cb, cmp_arg);
908 		if (err || new == NULL /* duplicate */)
909 			got_ref_close(ref);
910 		if (err)
911 			return err;
912 	}
913 
914 	TAILQ_CONCAT(refs, &sorted, entry);
915 	return NULL;
916 }
917 
918 static const struct got_error *
919 gather_on_disk_refs(struct got_reflist_head *refs, const char *path_refs,
920     const char *subdir, struct got_repository *repo,
921     got_ref_cmp_cb cmp_cb, void *cmp_arg)
922 {
923 	const struct got_error *err = NULL;
924 	DIR *d = NULL;
925 	char *path_subdir;
926 
927 	while (subdir[0] == '/')
928 		subdir++;
929 
930 	if (asprintf(&path_subdir, "%s/%s", path_refs, subdir) == -1)
931 		return got_error_from_errno("asprintf");
932 
933 	d = opendir(path_subdir);
934 	if (d == NULL)
935 		goto done;
936 
937 	for (;;) {
938 		struct dirent *dent;
939 		struct got_reference *ref;
940 		char *child;
941 		int type;
942 
943 		dent = readdir(d);
944 		if (dent == NULL)
945 			break;
946 
947 		if (strcmp(dent->d_name, ".") == 0 ||
948 		    strcmp(dent->d_name, "..") == 0)
949 			continue;
950 
951 		err = got_path_dirent_type(&type, path_subdir, dent);
952 		if (err)
953 			break;
954 
955 		switch (type) {
956 		case DT_REG:
957 			err = open_ref(&ref, path_refs, subdir, dent->d_name,
958 			    0);
959 			if (err)
960 				goto done;
961 			if (ref) {
962 				struct got_reflist_entry *new;
963 				err = got_reflist_insert(&new, refs, ref,
964 				    cmp_cb, cmp_arg);
965 				if (err || new == NULL /* duplicate */)
966 					got_ref_close(ref);
967 				if (err)
968 					goto done;
969 			}
970 			break;
971 		case DT_DIR:
972 			if (asprintf(&child, "%s%s%s", subdir,
973 			    subdir[0] == '\0' ? "" : "/", dent->d_name) == -1) {
974 				err = got_error_from_errno("asprintf");
975 				break;
976 			}
977 			err = gather_on_disk_refs(refs, path_refs, child, repo,
978 			    cmp_cb, cmp_arg);
979 			free(child);
980 			break;
981 		default:
982 			break;
983 		}
984 	}
985 done:
986 	if (d)
987 		closedir(d);
988 	free(path_subdir);
989 	return err;
990 }
991 
992 const struct got_error *
993 got_ref_list(struct got_reflist_head *refs, struct got_repository *repo,
994     const char *ref_namespace, got_ref_cmp_cb cmp_cb, void *cmp_arg)
995 {
996 	const struct got_error *err;
997 	char *packed_refs_path, *path_refs = NULL;
998 	char *abs_namespace = NULL;
999 	char *buf = NULL, *ondisk_ref_namespace = NULL;
1000 	char *line = NULL;
1001 	FILE *f = NULL;
1002 	struct got_reference *ref;
1003 	struct got_reflist_entry *new;
1004 
1005 	if (ref_namespace == NULL || ref_namespace[0] == '\0') {
1006 		path_refs = get_refs_dir_path(repo, GOT_REF_HEAD);
1007 		if (path_refs == NULL) {
1008 			err = got_error_from_errno("get_refs_dir_path");
1009 			goto done;
1010 		}
1011 		err = open_ref(&ref, path_refs, "", GOT_REF_HEAD, 0);
1012 		if (err)
1013 			goto done;
1014 		err = got_reflist_insert(&new, refs, ref, cmp_cb, cmp_arg);
1015 		if (err || new == NULL /* duplicate */)
1016 			got_ref_close(ref);
1017 		if (err && err->code != GOT_ERR_NOT_REF)
1018 			goto done;
1019 	} else {
1020 		/* Try listing a single reference. */
1021 		const char *refname = ref_namespace;
1022 		path_refs = get_refs_dir_path(repo, refname);
1023 		if (path_refs == NULL) {
1024 			err = got_error_from_errno("get_refs_dir_path");
1025 			goto done;
1026 		}
1027 		err = open_ref(&ref, path_refs, "", refname, 0);
1028 		if (err) {
1029 			if (err->code != GOT_ERR_NOT_REF)
1030 				goto done;
1031 			/* Try to look up references in a given namespace. */
1032 		} else {
1033 			err = got_reflist_insert(&new, refs, ref,
1034 			    cmp_cb, cmp_arg);
1035 			if (err || new == NULL /* duplicate */)
1036 				got_ref_close(ref);
1037 			return err;
1038 		}
1039 	}
1040 
1041 	if (ref_namespace) {
1042 		size_t len;
1043 		/* Canonicalize the path to eliminate double-slashes if any. */
1044 		if (asprintf(&abs_namespace, "/%s", ref_namespace) == -1) {
1045 			err = got_error_from_errno("asprintf");
1046 			goto done;
1047 		}
1048 		len = strlen(abs_namespace) + 1;
1049 		buf = malloc(len);
1050 		if (buf == NULL) {
1051 			err = got_error_from_errno("malloc");
1052 			goto done;
1053 		}
1054 		err = got_canonpath(abs_namespace, buf, len);
1055 		if (err)
1056 			goto done;
1057 		ondisk_ref_namespace = buf;
1058 		while (ondisk_ref_namespace[0] == '/')
1059 			ondisk_ref_namespace++;
1060 		if (strncmp(ondisk_ref_namespace, "refs/", 5) == 0)
1061 			ondisk_ref_namespace += 5;
1062 		else if (strcmp(ondisk_ref_namespace, "refs") == 0)
1063 			ondisk_ref_namespace = "";
1064 	}
1065 
1066 	/* Gather on-disk refs before parsing packed-refs. */
1067 	free(path_refs);
1068 	path_refs = get_refs_dir_path(repo, "");
1069 	if (path_refs == NULL) {
1070 		err = got_error_from_errno("get_refs_dir_path");
1071 		goto done;
1072 	}
1073 	err = gather_on_disk_refs(refs, path_refs,
1074 	    ondisk_ref_namespace ? ondisk_ref_namespace : "", repo,
1075 	    cmp_cb, cmp_arg);
1076 	if (err)
1077 		goto done;
1078 
1079 	/*
1080 	 * The packed-refs file may contain redundant entries, in which
1081 	 * case on-disk refs take precedence.
1082 	 */
1083 	packed_refs_path = got_repo_get_path_packed_refs(repo);
1084 	if (packed_refs_path == NULL) {
1085 		err = got_error_from_errno("got_repo_get_path_packed_refs");
1086 		goto done;
1087 	}
1088 
1089 	f = fopen(packed_refs_path, "r");
1090 	free(packed_refs_path);
1091 	if (f) {
1092 		size_t linesize = 0;
1093 		ssize_t linelen;
1094 		struct stat sb;
1095 
1096 		if (fstat(fileno(f), &sb) == -1) {
1097 			err = got_error_from_errno2("fstat", packed_refs_path);
1098 			goto done;
1099 		}
1100 		for (;;) {
1101 			linelen = getline(&line, &linesize, f);
1102 			if (linelen == -1) {
1103 				if (feof(f))
1104 					break;
1105 				err = got_ferror(f, GOT_ERR_BAD_REF_DATA);
1106 				goto done;
1107 			}
1108 			if (linelen > 0 && line[linelen - 1] == '\n')
1109 				line[linelen - 1] = '\0';
1110 			err = parse_packed_ref_line(&ref, NULL, line,
1111 			    sb.st_mtime);
1112 			if (err)
1113 				goto done;
1114 			if (ref) {
1115 				if (ref_namespace) {
1116 					const char *name;
1117 					name = got_ref_get_name(ref);
1118 					if (!got_path_is_child(name,
1119 					    ref_namespace,
1120 					    strlen(ref_namespace))) {
1121 						got_ref_close(ref);
1122 						continue;
1123 					}
1124 				}
1125 				err = got_reflist_insert(&new, refs, ref,
1126 				    cmp_cb, cmp_arg);
1127 				if (err || new == NULL /* duplicate */)
1128 					got_ref_close(ref);
1129 				if (err)
1130 					goto done;
1131 			}
1132 		}
1133 	}
1134 done:
1135 	free(abs_namespace);
1136 	free(buf);
1137 	free(line);
1138 	free(path_refs);
1139 	if (f && fclose(f) == EOF && err == NULL)
1140 		err = got_error_from_errno("fclose");
1141 	return err;
1142 }
1143 
1144 void
1145 got_ref_list_free(struct got_reflist_head *refs)
1146 {
1147 	struct got_reflist_entry *re;
1148 
1149 	while ((re = TAILQ_FIRST(refs))) {
1150 		TAILQ_REMOVE(refs, re, entry);
1151 		got_ref_close(re->ref);
1152 		free(re);
1153 	}
1154 
1155 }
1156 
1157 int
1158 got_ref_is_symbolic(struct got_reference *ref)
1159 {
1160 	return (ref->flags & GOT_REF_IS_SYMBOLIC);
1161 }
1162 
1163 const struct got_error *
1164 got_ref_change_ref(struct got_reference *ref, struct got_object_id *id)
1165 {
1166 	if (ref->flags & GOT_REF_IS_SYMBOLIC)
1167 		return got_error(GOT_ERR_BAD_REF_TYPE);
1168 
1169 	memcpy(ref->ref.ref.sha1, id->sha1, sizeof(ref->ref.ref.sha1));
1170 	return NULL;
1171 }
1172 
1173 const struct got_error *
1174 got_ref_change_symref(struct got_reference *ref, const char *refname)
1175 {
1176 	char *new_name;
1177 
1178 	if ((ref->flags & GOT_REF_IS_SYMBOLIC) == 0)
1179 		return got_error(GOT_ERR_BAD_REF_TYPE);
1180 
1181 	new_name = strdup(refname);
1182 	if (new_name == NULL)
1183 		return got_error_from_errno("strdup");
1184 
1185 	free(ref->ref.symref.ref);
1186 	ref->ref.symref.ref = new_name;
1187 	return NULL;
1188 }
1189 
1190 const struct got_error *
1191 got_ref_change_symref_to_ref(struct got_reference *symref,
1192     struct got_object_id *id)
1193 {
1194 	if ((symref->flags & GOT_REF_IS_SYMBOLIC) == 0)
1195 		return got_error(GOT_ERR_BAD_REF_TYPE);
1196 
1197 	symref->ref.ref.name = symref->ref.symref.name;
1198 	memcpy(symref->ref.ref.sha1, id->sha1, SHA1_DIGEST_LENGTH);
1199 	symref->flags &= ~GOT_REF_IS_SYMBOLIC;
1200 	return NULL;
1201 }
1202 
1203 const struct got_error *
1204 got_ref_write(struct got_reference *ref, struct got_repository *repo)
1205 {
1206 	const struct got_error *err = NULL, *unlock_err = NULL;
1207 	const char *name = got_ref_get_name(ref);
1208 	char *path_refs = NULL, *path = NULL, *tmppath = NULL;
1209 	struct got_lockfile *lf = NULL;
1210 	FILE *f = NULL;
1211 	size_t n;
1212 	struct stat sb;
1213 
1214 	path_refs = get_refs_dir_path(repo, name);
1215 	if (path_refs == NULL) {
1216 		err = got_error_from_errno2("get_refs_dir_path", name);
1217 		goto done;
1218 	}
1219 
1220 	if (asprintf(&path, "%s/%s", path_refs, name) == -1) {
1221 		err = got_error_from_errno("asprintf");
1222 		goto done;
1223 	}
1224 
1225 	err = got_opentemp_named(&tmppath, &f, path);
1226 	if (err) {
1227 		char *parent;
1228 		if (!(err->code == GOT_ERR_ERRNO && errno == ENOENT))
1229 			goto done;
1230 		err = got_path_dirname(&parent, path);
1231 		if (err)
1232 			goto done;
1233 		err = got_path_mkdir(parent);
1234 		free(parent);
1235 		if (err)
1236 			goto done;
1237 		err = got_opentemp_named(&tmppath, &f, path);
1238 		if (err)
1239 			goto done;
1240 	}
1241 
1242 	if (ref->flags & GOT_REF_IS_SYMBOLIC) {
1243 		n = fprintf(f, "ref: %s\n", ref->ref.symref.ref);
1244 		if (n != strlen(ref->ref.symref.ref) + 6) {
1245 			err = got_ferror(f, GOT_ERR_IO);
1246 			goto done;
1247 		}
1248 	} else {
1249 		char hex[SHA1_DIGEST_STRING_LENGTH];
1250 		if (got_sha1_digest_to_str(ref->ref.ref.sha1, hex,
1251 		    sizeof(hex)) == NULL) {
1252 			err = got_error(GOT_ERR_BAD_REF_DATA);
1253 			goto done;
1254 		}
1255 		n = fprintf(f, "%s\n", hex);
1256 		if (n != sizeof(hex)) {
1257 			err = got_ferror(f, GOT_ERR_IO);
1258 			goto done;
1259 		}
1260 	}
1261 
1262 	if (ref->lf == NULL) {
1263 		err = got_lockfile_lock(&lf, path, -1);
1264 		if (err)
1265 			goto done;
1266 	}
1267 
1268 	/* XXX: check if old content matches our expectations? */
1269 
1270 	if (stat(path, &sb) != 0) {
1271 		if (errno != ENOENT) {
1272 			err = got_error_from_errno2("stat", path);
1273 			goto done;
1274 		}
1275 		sb.st_mode = GOT_DEFAULT_FILE_MODE;
1276 	}
1277 
1278 	if (fchmod(fileno(f), sb.st_mode) != 0) {
1279 		err = got_error_from_errno2("fchmod", tmppath);
1280 		goto done;
1281 	}
1282 
1283 	if (rename(tmppath, path) != 0) {
1284 		err = got_error_from_errno3("rename", tmppath, path);
1285 		goto done;
1286 	}
1287 	free(tmppath);
1288 	tmppath = NULL;
1289 
1290 	if (stat(path, &sb) == -1) {
1291 		err = got_error_from_errno2("stat", path);
1292 		goto done;
1293 	}
1294 	ref->mtime = sb.st_mtime;
1295 done:
1296 	if (ref->lf == NULL && lf)
1297 		unlock_err = got_lockfile_unlock(lf, -1);
1298 	if (f) {
1299 		if (fclose(f) == EOF && err == NULL)
1300 			err = got_error_from_errno("fclose");
1301 	}
1302 	free(path_refs);
1303 	free(path);
1304 	if (tmppath) {
1305 		if (unlink(tmppath) != 0 && err == NULL)
1306 			err = got_error_from_errno2("unlink", tmppath);
1307 		free(tmppath);
1308 	}
1309 	return err ? err : unlock_err;
1310 }
1311 
1312 static const struct got_error *
1313 delete_packed_ref(struct got_reference *delref, struct got_repository *repo)
1314 {
1315 	const struct got_error *err = NULL, *unlock_err = NULL;
1316 	struct got_lockfile *lf = NULL;
1317 	FILE *f = NULL, *tmpf = NULL;
1318 	char *line = NULL, *packed_refs_path, *tmppath = NULL;
1319 	size_t linesize = 0;
1320 	struct got_reflist_head refs;
1321 	int found_delref = 0;
1322 
1323 	/* The packed-refs file does not cotain symbolic references. */
1324 	if (delref->flags & GOT_REF_IS_SYMBOLIC)
1325 		return got_error(GOT_ERR_BAD_REF_DATA);
1326 
1327 	TAILQ_INIT(&refs);
1328 
1329 	packed_refs_path = got_repo_get_path_packed_refs(repo);
1330 	if (packed_refs_path == NULL)
1331 		return got_error_from_errno("got_repo_get_path_packed_refs");
1332 
1333 	err = got_opentemp_named(&tmppath, &tmpf, packed_refs_path);
1334 	if (err)
1335 		goto done;
1336 
1337 	if (delref->lf == NULL) {
1338 		err = got_lockfile_lock(&lf, packed_refs_path, -1);
1339 		if (err)
1340 			goto done;
1341 	}
1342 
1343 	f = fopen(packed_refs_path, "r");
1344 	if (f == NULL) {
1345 		err = got_error_from_errno2("fopen", packed_refs_path);
1346 		goto done;
1347 	}
1348 	for (;;) {
1349 		ssize_t linelen;
1350 		struct got_reference *ref;
1351 		struct got_reflist_entry *new;
1352 
1353 		linelen = getline(&line, &linesize, f);
1354 		if (linelen == -1) {
1355 			if (feof(f))
1356 				break;
1357 			err = got_ferror(f, GOT_ERR_BAD_REF_DATA);
1358 			goto done;
1359 		}
1360 		if (linelen > 0 && line[linelen - 1] == '\n')
1361 			line[linelen - 1] = '\0';
1362 		err = parse_packed_ref_line(&ref, NULL, line, 0);
1363 		if (err)
1364 			goto done;
1365 		if (ref == NULL)
1366 			continue;
1367 
1368 		if (strcmp(ref->ref.ref.name, delref->ref.ref.name) == 0 &&
1369 		    memcmp(ref->ref.ref.sha1, delref->ref.ref.sha1,
1370 		    sizeof(delref->ref.ref.sha1)) == 0) {
1371 			found_delref = 1;
1372 			got_ref_close(ref);
1373 			continue;
1374 		}
1375 
1376 		err = got_reflist_insert(&new, &refs, ref,
1377 		    got_ref_cmp_by_name, NULL);
1378 		if (err || new == NULL /* duplicate */)
1379 			got_ref_close(ref);
1380 		if (err)
1381 			goto done;
1382 	}
1383 
1384 	if (found_delref) {
1385 		struct got_reflist_entry *re;
1386 		size_t n;
1387 		struct stat sb;
1388 
1389 		n = fprintf(tmpf, "%s\n", GOT_PACKED_REFS_HEADER);
1390 		if (n != sizeof(GOT_PACKED_REFS_HEADER)) {
1391 			err = got_ferror(f, GOT_ERR_IO);
1392 			goto done;
1393 		}
1394 
1395 		TAILQ_FOREACH(re, &refs, entry) {
1396 			char hex[SHA1_DIGEST_STRING_LENGTH];
1397 
1398 			if (got_sha1_digest_to_str(re->ref->ref.ref.sha1, hex,
1399 			    sizeof(hex)) == NULL) {
1400 				err = got_error(GOT_ERR_BAD_REF_DATA);
1401 				goto done;
1402 			}
1403 			n = fprintf(tmpf, "%s ", hex);
1404 			if (n != sizeof(hex)) {
1405 				err = got_ferror(f, GOT_ERR_IO);
1406 				goto done;
1407 			}
1408 			n = fprintf(tmpf, "%s\n", re->ref->ref.ref.name);
1409 			if (n != strlen(re->ref->ref.ref.name) + 1) {
1410 				err = got_ferror(f, GOT_ERR_IO);
1411 				goto done;
1412 			}
1413 		}
1414 
1415 		if (fflush(tmpf) != 0) {
1416 			err = got_error_from_errno("fflush");
1417 			goto done;
1418 		}
1419 
1420 		if (fstat(fileno(f), &sb) != 0) {
1421 			if (errno != ENOENT) {
1422 				err = got_error_from_errno2("fstat",
1423 				    packed_refs_path);
1424 				goto done;
1425 			}
1426 			sb.st_mode = GOT_DEFAULT_FILE_MODE;
1427 		}
1428 
1429 		if (fchmod(fileno(tmpf), sb.st_mode) != 0) {
1430 			err = got_error_from_errno2("fchmod", tmppath);
1431 			goto done;
1432 		}
1433 
1434 		if (rename(tmppath, packed_refs_path) != 0) {
1435 			err = got_error_from_errno3("rename", tmppath,
1436 			    packed_refs_path);
1437 			goto done;
1438 		}
1439 	}
1440 done:
1441 	if (delref->lf == NULL && lf)
1442 		unlock_err = got_lockfile_unlock(lf, -1);
1443 	if (f) {
1444 		if (fclose(f) == EOF && err == NULL)
1445 			err = got_error_from_errno("fclose");
1446 	}
1447 	if (tmpf) {
1448 		unlink(tmppath);
1449 		if (fclose(tmpf) == EOF && err == NULL)
1450 			err = got_error_from_errno("fclose");
1451 	}
1452 	free(tmppath);
1453 	free(packed_refs_path);
1454 	free(line);
1455 	got_ref_list_free(&refs);
1456 	return err ? err : unlock_err;
1457 }
1458 
1459 static const struct got_error *
1460 delete_loose_ref(struct got_reference *ref, struct got_repository *repo)
1461 {
1462 	const struct got_error *err = NULL, *unlock_err = NULL;
1463 	const char *name = got_ref_get_name(ref);
1464 	char *path_refs = NULL, *path = NULL;
1465 	struct got_lockfile *lf = NULL;
1466 
1467 	path_refs = get_refs_dir_path(repo, name);
1468 	if (path_refs == NULL) {
1469 		err = got_error_from_errno2("get_refs_dir_path", name);
1470 		goto done;
1471 	}
1472 
1473 	if (asprintf(&path, "%s/%s", path_refs, name) == -1) {
1474 		err = got_error_from_errno("asprintf");
1475 		goto done;
1476 	}
1477 
1478 	if (ref->lf == NULL) {
1479 		err = got_lockfile_lock(&lf, path, -1);
1480 		if (err)
1481 			goto done;
1482 	}
1483 
1484 	/* XXX: check if old content matches our expectations? */
1485 
1486 	if (unlink(path) != 0)
1487 		err = got_error_from_errno2("unlink", path);
1488 done:
1489 	if (ref->lf == NULL && lf)
1490 		unlock_err = got_lockfile_unlock(lf, -1);
1491 
1492 	free(path_refs);
1493 	free(path);
1494 	return err ? err : unlock_err;
1495 }
1496 
1497 const struct got_error *
1498 got_ref_delete(struct got_reference *ref, struct got_repository *repo)
1499 {
1500 	const struct got_error *err = NULL;
1501 	struct got_reference *ref2;
1502 
1503 	if (ref->flags & GOT_REF_IS_PACKED) {
1504 		err = delete_packed_ref(ref, repo);
1505 		if (err)
1506 			return err;
1507 
1508 		err = got_ref_open(&ref2, repo, got_ref_get_name(ref), 0);
1509 		if (err) {
1510 			if (err->code == GOT_ERR_NOT_REF)
1511 				return NULL;
1512 			return err;
1513 		}
1514 
1515 		err = delete_loose_ref(ref2, repo);
1516 		got_ref_close(ref2);
1517 		return err;
1518 	} else {
1519 		err = delete_loose_ref(ref, repo);
1520 		if (err)
1521 			return err;
1522 
1523 		err = got_ref_open(&ref2, repo, got_ref_get_name(ref), 0);
1524 		if (err) {
1525 			if (err->code == GOT_ERR_NOT_REF)
1526 				return NULL;
1527 			return err;
1528 		}
1529 
1530 		err = delete_packed_ref(ref2, repo);
1531 		got_ref_close(ref2);
1532 		return err;
1533 	}
1534 }
1535 
1536 const struct got_error *
1537 got_ref_unlock(struct got_reference *ref)
1538 {
1539 	const struct got_error *err;
1540 	err = got_lockfile_unlock(ref->lf, -1);
1541 	ref->lf = NULL;
1542 	return err;
1543 }
1544 
1545 struct got_reflist_object_id_map {
1546 	struct got_object_idset *idset;
1547 };
1548 
1549 struct got_reflist_object_id_map_entry {
1550 	struct got_reflist_head refs;
1551 };
1552 
1553 static const struct got_error *
1554 add_object_id_map_entry(struct got_object_idset *idset,
1555     struct got_object_id *id, struct got_reflist_entry *re)
1556 {
1557 	const struct got_error *err = NULL;
1558 	struct got_reflist_object_id_map_entry *ent;
1559 	struct got_reflist_entry *new;
1560 
1561 	ent = got_object_idset_get(idset, id);
1562 	if (ent == NULL) {
1563 		ent = malloc(sizeof(*ent));
1564 		if (ent == NULL)
1565 			return got_error_from_errno("malloc");
1566 
1567 		TAILQ_INIT(&ent->refs);
1568 		err = got_object_idset_add(idset, id, ent);
1569 		if (err)
1570 			return err;
1571 	}
1572 
1573 	err = got_reflist_entry_dup(&new, re);
1574 	if (err)
1575 		return err;
1576 
1577 	TAILQ_INSERT_TAIL(&ent->refs, new, entry);
1578 	return NULL;
1579 }
1580 
1581 const struct got_error *
1582 got_reflist_object_id_map_create(struct got_reflist_object_id_map **map,
1583     struct got_reflist_head *refs, struct got_repository *repo)
1584 {
1585 	const struct got_error *err = NULL;
1586 	struct got_object_idset *idset;
1587 	struct got_object_id *id = NULL;
1588 	struct got_reflist_entry *re;
1589 
1590 	idset = got_object_idset_alloc();
1591 	if (idset == NULL)
1592 		return got_error_from_errno("got_object_idset_alloc");
1593 
1594 	*map = malloc(sizeof(**map));
1595 	if (*map == NULL) {
1596 		got_object_idset_free(idset);
1597 		return got_error_from_errno("malloc");
1598 	}
1599 	(*map)->idset = idset;
1600 
1601 	TAILQ_FOREACH(re, refs, entry) {
1602 		struct got_tag_object *tag = NULL;
1603 
1604 		err = got_ref_resolve(&id, repo, re->ref);
1605 		if (err)
1606 			goto done;
1607 
1608 		err = add_object_id_map_entry(idset, id, re);
1609 		if (err)
1610 			goto done;
1611 
1612 		if (strstr(got_ref_get_name(re->ref), "/tags/") == NULL) {
1613 			free(id);
1614 			id = NULL;
1615 			continue;
1616 		}
1617 
1618 		err = got_object_open_as_tag(&tag, repo, id);
1619 		if (err) {
1620 			if (err->code != GOT_ERR_OBJ_TYPE)
1621 				goto done;
1622 			/* Ref points at something other than a tag. */
1623 			err = NULL;
1624 			tag = NULL;
1625 			free(id);
1626 			id = NULL;
1627 			continue;
1628 		}
1629 
1630 		err = add_object_id_map_entry(idset,
1631 		    got_object_tag_get_object_id(tag), re);
1632 		got_object_tag_close(tag);
1633 		if (err)
1634 			goto done;
1635 
1636 		free(id);
1637 		id = NULL;
1638 	}
1639 done:
1640 	free(id);
1641 	if (err) {
1642 		got_reflist_object_id_map_free(*map);
1643 		*map = NULL;
1644 	}
1645 	return err;
1646 }
1647 
1648 struct got_reflist_head *
1649 got_reflist_object_id_map_lookup(struct got_reflist_object_id_map *map,
1650     struct got_object_id *id)
1651 {
1652 	struct got_reflist_object_id_map_entry *ent;
1653 	ent = got_object_idset_get(map->idset, id);
1654 	if (ent)
1655 		return &ent->refs;
1656 	return NULL;
1657 }
1658 
1659 static const struct got_error *
1660 free_id_map_entry(struct got_object_id *id, void *data, void *arg)
1661 {
1662 	struct got_reflist_object_id_map_entry *ent = data;
1663 
1664 	got_ref_list_free(&ent->refs);
1665 	free(ent);
1666 	return NULL;
1667 }
1668 
1669 void
1670 got_reflist_object_id_map_free(struct got_reflist_object_id_map *map)
1671 {
1672 	got_object_idset_for_each(map->idset, free_id_map_entry, NULL);
1673 	got_object_idset_free(map->idset);
1674 	free(map);
1675 }