1 /*
2  * Copyright (c) 2019 Ori Bernstein <ori@openbsd.org>
3  * Copyright (c) 2020 Stefan Sperling <stsp@openbsd.org>
4  *
5  * Permission to use, copy, modify, and distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 #include <sys/stat.h>
19 #include <sys/time.h>
20 #include <sys/types.h>
21 #include <sys/uio.h>
22 #include <sys/mman.h>
23 
24 #include <stdint.h>
25 #include <errno.h>
26 #include <limits.h>
27 #include <signal.h>
28 #include <stdio.h>
29 #include <stdlib.h>
30 #include <string.h>
31 #include <ctype.h>
32 #include <fcntl.h>
33 #include <unistd.h>
34 #include <zlib.h>
35 #include <err.h>
36 #include <assert.h>
37 #include <dirent.h>
38 
39 #include "got_error.h"
40 #include "got_object.h"
41 
42 #include "got_compat.h"
43 
44 #include "got_lib_sha1.h"
45 #include "got_lib_delta.h"
46 #include "got_lib_inflate.h"
47 #include "got_lib_object.h"
48 #include "got_lib_object_parse.h"
49 #include "got_lib_object_idset.h"
50 #include "got_lib_privsep.h"
51 #include "got_lib_pack.h"
52 #include "got_lib_delta_cache.h"
53 
54 #ifndef nitems
55 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
56 #endif
57 
58 struct got_indexed_object {
59 	struct got_object_id id;
60 
61 	/*
62 	 * Has this object been fully resolved?
63 	 * If so, we know its ID, otherwise we don't and 'id' is invalid.
64 	 */
65 	int valid;
66 
67 	/* Offset of type+size field for this object in pack file. */
68 	off_t off;
69 
70 	/* Type+size values parsed from pack file. */
71 	uint8_t type;
72 	uint64_t size;
73 
74 	/* Length of on-disk type+size data. */
75 	size_t tslen; 
76 
77 	/* Length of object data following type+size. */
78 	size_t len; 
79 
80 	uint32_t crc;
81 
82 	union {
83 		struct {
84 			/* For ref deltas. */
85 			struct got_object_id ref_id;
86 		} ref;
87 		struct {
88 			/* For offset deltas. */
89 			off_t base_offset;
90 			size_t base_offsetlen;
91 		} ofs;
92 	} delta;
93 };
94 
95 static void
96 putbe32(char *b, uint32_t n)
97 {
98 	b[0] = n >> 24;
99 	b[1] = n >> 16;
100 	b[2] = n >> 8;
101 	b[3] = n >> 0;
102 }
103 
104 static const struct got_error *
105 get_obj_type_label(const char **label, int obj_type)
106 {
107 	const struct got_error *err = NULL;
108 
109 	switch (obj_type) {
110 	case GOT_OBJ_TYPE_BLOB:
111 		*label = GOT_OBJ_LABEL_BLOB;
112 		break;
113 	case GOT_OBJ_TYPE_TREE:
114 		*label = GOT_OBJ_LABEL_TREE;
115 		break;
116 	case GOT_OBJ_TYPE_COMMIT:
117 		*label = GOT_OBJ_LABEL_COMMIT;
118 		break;
119 	case GOT_OBJ_TYPE_TAG:
120 		*label = GOT_OBJ_LABEL_TAG;
121 		break;
122 	default:
123 		*label = NULL;
124 		err = got_error(GOT_ERR_OBJ_TYPE);
125 		break;
126 	}
127 
128 	return err;
129 }
130 
131 static const struct got_error *
132 read_checksum(uint32_t *crc, SHA1_CTX *sha1_ctx, int fd, size_t len)
133 {
134 	uint8_t buf[8192];
135 	size_t n;
136 	ssize_t r;
137 
138 	for (n = len; n > 0; n -= r){
139 		r = read(fd, buf, n > sizeof(buf) ? sizeof(buf) : n);
140 		if (r == -1)
141 			return got_error_from_errno("read");
142 		if (r == 0)
143 			break;
144 		if (crc)
145 			*crc = crc32(*crc, buf, r);
146 		if (sha1_ctx)
147 			SHA1Update(sha1_ctx, buf, r);
148 	}
149 
150 	return NULL;
151 }
152 
153 static const struct got_error *
154 read_file_sha1(SHA1_CTX *ctx, FILE *f, size_t len)
155 {
156 	uint8_t buf[8192];
157 	size_t n, r;
158 
159 	for (n = len; n > 0; n -= r) {
160 		r = fread(buf, 1, n > sizeof(buf) ? sizeof(buf) : n, f);
161 		if (r == 0) {
162 			if (feof(f))
163 				return NULL;
164 			return got_ferror(f, GOT_ERR_IO);
165 		}
166 		SHA1Update(ctx, buf, r);
167 	}
168 
169 	return NULL;
170 }
171 
172 static const struct got_error *
173 read_packed_object(struct got_pack *pack, struct got_indexed_object *obj,
174     FILE *tmpfile, SHA1_CTX *pack_sha1_ctx)
175 {
176 	const struct got_error *err = NULL;
177 	SHA1_CTX ctx;
178 	uint8_t *data = NULL;
179 	size_t datalen = 0;
180 	ssize_t n;
181 	char *header;
182 	size_t headerlen;
183 	const char *obj_label;
184 	size_t mapoff = obj->off;
185 	struct got_inflate_checksum csum;
186 
187 	memset(&csum, 0, sizeof(csum));
188 	csum.input_sha1 = pack_sha1_ctx;
189 	csum.input_crc = &obj->crc;
190 
191 	err = got_pack_parse_object_type_and_size(&obj->type, &obj->size,
192 	    &obj->tslen, pack, obj->off);
193 	if (err)
194 		return err;
195 
196 	if (pack->map) {
197 		obj->crc = crc32(obj->crc, pack->map + mapoff, obj->tslen);
198 		SHA1Update(pack_sha1_ctx, pack->map + mapoff, obj->tslen);
199 		mapoff += obj->tslen;
200 	} else {
201 		/* XXX Seek back and get the CRC of on-disk type+size bytes. */
202 		if (lseek(pack->fd, obj->off, SEEK_SET) == -1)
203 			return got_error_from_errno("lseek");
204 		err = read_checksum(&obj->crc, pack_sha1_ctx,
205 		    pack->fd, obj->tslen);
206 		if (err)
207 			return err;
208 	}
209 
210 	switch (obj->type) {
211 	case GOT_OBJ_TYPE_BLOB:
212 	case GOT_OBJ_TYPE_COMMIT:
213 	case GOT_OBJ_TYPE_TREE:
214 	case GOT_OBJ_TYPE_TAG:
215 		if (obj->size > GOT_DELTA_RESULT_SIZE_CACHED_MAX) {
216 			if (fseek(tmpfile, 0L, SEEK_SET) == -1) {
217 				err = got_error_from_errno("fseek");
218 				break;
219 			}
220 			if (pack->map) {
221 				err = got_inflate_to_file_mmap(&datalen,
222 				    &obj->len, &csum, pack->map, mapoff,
223 				    pack->filesize - mapoff, tmpfile);
224 			} else {
225 				err = got_inflate_to_file_fd(&datalen,
226 				    &obj->len, &csum, pack->fd, tmpfile);
227 			}
228 		} else {
229 			if (pack->map) {
230 				err = got_inflate_to_mem_mmap(&data, &datalen,
231 				    &obj->len, &csum, pack->map, mapoff,
232 				    pack->filesize - mapoff);
233 			} else {
234 				err = got_inflate_to_mem_fd(&data, &datalen,
235 				    &obj->len, &csum, obj->size, pack->fd);
236 			}
237 		}
238 		if (err)
239 			break;
240 		SHA1Init(&ctx);
241 		err = get_obj_type_label(&obj_label, obj->type);
242 		if (err) {
243 			free(data);
244 			break;
245 		}
246 		if (asprintf(&header, "%s %lld", obj_label,
247 		    (long long)obj->size) == -1) {
248 			err = got_error_from_errno("asprintf");
249 			free(data);
250 			break;
251 		}
252 		headerlen = strlen(header) + 1;
253 		SHA1Update(&ctx, header, headerlen);
254 		if (obj->size > GOT_DELTA_RESULT_SIZE_CACHED_MAX) {
255 			err = read_file_sha1(&ctx, tmpfile, datalen);
256 			if (err) {
257 				free(header);
258 				free(data);
259 				break;
260 			}
261 		} else
262 			SHA1Update(&ctx, data, datalen);
263 		SHA1Final(obj->id.sha1, &ctx);
264 		free(header);
265 		free(data);
266 		break;
267 	case GOT_OBJ_TYPE_REF_DELTA:
268 		memset(obj->id.sha1, 0xff, SHA1_DIGEST_LENGTH);
269 		if (pack->map) {
270 			if (mapoff + SHA1_DIGEST_LENGTH >= pack->filesize) {
271 				err = got_error(GOT_ERR_BAD_PACKFILE);
272 				break;
273 			}
274 			memcpy(obj->delta.ref.ref_id.sha1, pack->map + mapoff,
275 			    SHA1_DIGEST_LENGTH);
276 			obj->crc = crc32(obj->crc, pack->map + mapoff,
277 			    SHA1_DIGEST_LENGTH);
278 			SHA1Update(pack_sha1_ctx, pack->map + mapoff,
279 			    SHA1_DIGEST_LENGTH);
280 			mapoff += SHA1_DIGEST_LENGTH;
281 			err = got_inflate_to_mem_mmap(NULL, &datalen,
282 			    &obj->len, &csum, pack->map, mapoff,
283 			    pack->filesize - mapoff);
284 			if (err)
285 				break;
286 		} else {
287 			n = read(pack->fd, obj->delta.ref.ref_id.sha1,
288 			    SHA1_DIGEST_LENGTH);
289 			if (n == -1) {
290 				err = got_error_from_errno("read");
291 				break;
292 			}
293 			if (n < sizeof(obj->id)) {
294 				err = got_error(GOT_ERR_BAD_PACKFILE);
295 				break;
296 			}
297 			obj->crc = crc32(obj->crc, obj->delta.ref.ref_id.sha1,
298 			    SHA1_DIGEST_LENGTH);
299 			SHA1Update(pack_sha1_ctx, obj->delta.ref.ref_id.sha1,
300 			    SHA1_DIGEST_LENGTH);
301 			err = got_inflate_to_mem_fd(NULL, &datalen, &obj->len,
302 			    &csum, obj->size, pack->fd);
303 			if (err)
304 				break;
305 		}
306 		obj->len += SHA1_DIGEST_LENGTH;
307 		break;
308 	case GOT_OBJ_TYPE_OFFSET_DELTA:
309 		memset(obj->id.sha1, 0xff, SHA1_DIGEST_LENGTH);
310 		err = got_pack_parse_offset_delta(&obj->delta.ofs.base_offset,
311 		    &obj->delta.ofs.base_offsetlen, pack, obj->off,
312 		    obj->tslen);
313 		if (err)
314 			break;
315 
316 		if (pack->map) {
317 			obj->crc = crc32(obj->crc, pack->map + mapoff,
318 			    obj->delta.ofs.base_offsetlen);
319 			SHA1Update(pack_sha1_ctx, pack->map + mapoff,
320 			    obj->delta.ofs.base_offsetlen);
321 			mapoff += obj->delta.ofs.base_offsetlen;
322 			err = got_inflate_to_mem_mmap(NULL, &datalen,
323 			    &obj->len, &csum, pack->map, mapoff,
324 			    pack->filesize - mapoff);
325 			if (err)
326 				break;
327 		} else {
328 			/*
329 			 * XXX Seek back and get CRC and SHA1 of on-disk
330 			 * offset bytes.
331 			 */
332 			if (lseek(pack->fd, obj->off + obj->tslen, SEEK_SET)
333 			    == -1) {
334 				err = got_error_from_errno("lseek");
335 				break;
336 			}
337 			err = read_checksum(&obj->crc, pack_sha1_ctx,
338 			    pack->fd, obj->delta.ofs.base_offsetlen);
339 			if (err)
340 				break;
341 
342 			err = got_inflate_to_mem_fd(NULL, &datalen, &obj->len,
343 			    &csum, obj->size, pack->fd);
344 			if (err)
345 				break;
346 		}
347 		obj->len += obj->delta.ofs.base_offsetlen;
348 		break;
349 	default:
350 		err = got_error(GOT_ERR_OBJ_TYPE);
351 		break;
352 	}
353 
354 	return err;
355 }
356 
357 static const struct got_error *
358 hwrite(int fd, void *buf, int len, SHA1_CTX *ctx)
359 {
360 	ssize_t w;
361 
362 	SHA1Update(ctx, buf, len);
363 
364 	w = write(fd, buf, len);
365 	if (w == -1)
366 		return got_error_from_errno("write");
367 	if (w != len)
368 		return got_error(GOT_ERR_IO);
369 
370 	return NULL;
371 }
372 
373 static const struct got_error *
374 resolve_deltified_object(struct got_pack *pack, struct got_packidx *packidx,
375     struct got_indexed_object *obj, FILE *tmpfile, FILE *delta_base_file,
376     FILE *delta_accum_file)
377 {
378 	const struct got_error *err = NULL;
379 	struct got_delta_chain deltas;
380 	struct got_delta *delta;
381 	uint8_t *buf = NULL;
382 	size_t len = 0;
383 	SHA1_CTX ctx;
384 	char *header = NULL;
385 	size_t headerlen;
386 	uint64_t max_size;
387 	int base_obj_type;
388 	const char *obj_label;
389 
390 	deltas.nentries = 0;
391 	STAILQ_INIT(&deltas.entries);
392 
393 	err = got_pack_resolve_delta_chain(&deltas, packidx, pack,
394 	    obj->off, obj->tslen, obj->type, obj->size,
395 	    GOT_DELTA_CHAIN_RECURSION_MAX);
396 	if (err)
397 		goto done;
398 
399 	err = got_pack_get_delta_chain_max_size(&max_size, &deltas, pack);
400 	if (err)
401 		goto done;
402 	if (max_size > GOT_DELTA_RESULT_SIZE_CACHED_MAX) {
403 		rewind(tmpfile);
404 		rewind(delta_base_file);
405 		rewind(delta_accum_file);
406 		err = got_pack_dump_delta_chain_to_file(&len, &deltas,
407 		    pack, tmpfile, delta_base_file, delta_accum_file);
408 		if (err)
409 			goto done;
410 	} else {
411 		err = got_pack_dump_delta_chain_to_mem(&buf, &len,
412 		    &deltas, pack);
413 	}
414 	if (err)
415 		goto done;
416 
417 	err = got_delta_chain_get_base_type(&base_obj_type, &deltas);
418 	if (err)
419 		goto done;
420 	err = get_obj_type_label(&obj_label, base_obj_type);
421 	if (err)
422 		goto done;
423 	if (asprintf(&header, "%s %zd", obj_label, len) == -1) {
424 		err = got_error_from_errno("asprintf");
425 		goto done;
426 	}
427 	headerlen = strlen(header) + 1;
428 	SHA1Init(&ctx);
429 	SHA1Update(&ctx, header, headerlen);
430 	if (max_size > GOT_DELTA_RESULT_SIZE_CACHED_MAX) {
431 		err = read_file_sha1(&ctx, tmpfile, len);
432 		if (err)
433 			goto done;
434 	} else
435 		SHA1Update(&ctx, buf, len);
436 	SHA1Final(obj->id.sha1, &ctx);
437 done:
438 	free(buf);
439 	free(header);
440 	while (!STAILQ_EMPTY(&deltas.entries)) {
441 		delta = STAILQ_FIRST(&deltas.entries);
442 		STAILQ_REMOVE_HEAD(&deltas.entries, entry);
443 		free(delta);
444 	}
445 	return err;
446 }
447 
448 /* Determine the slot in the pack index a given object ID should use. */
449 static int
450 find_object_idx(struct got_packidx *packidx, uint8_t *sha1)
451 {
452 	u_int8_t id0 = sha1[0];
453 	uint32_t nindexed = be32toh(packidx->hdr.fanout_table[0xff]);
454 	int left = 0, right = nindexed - 1;
455 	int cmp = 0, i = 0;
456 
457 	if (id0 > 0)
458 		left = be32toh(packidx->hdr.fanout_table[id0 - 1]);
459 
460 	while (left <= right) {
461 		struct got_packidx_object_id *oid;
462 
463 		i = ((left + right) / 2);
464 		oid = &packidx->hdr.sorted_ids[i];
465 
466 		cmp = memcmp(sha1, oid->sha1, SHA1_DIGEST_LENGTH);
467 		if (cmp == 0)
468 			return -1; /* object already indexed */
469 		else if (cmp > 0)
470 			left = i + 1;
471 		else if (cmp < 0)
472 			right = i - 1;
473 	}
474 
475 	return left;
476 }
477 
478 #if 0
479 static void
480 print_packidx(struct got_packidx *packidx)
481 {
482 	uint32_t nindexed = be32toh(packidx->hdr.fanout_table[0xff]);
483 	int i;
484 
485 	fprintf(stderr, "object IDs:\n");
486 	for (i = 0; i < nindexed; i++) {
487 		char hex[SHA1_DIGEST_STRING_LENGTH];
488 		got_sha1_digest_to_str(packidx->hdr.sorted_ids[i].sha1,
489 		    hex, sizeof(hex));
490 		fprintf(stderr, "%s\n", hex);
491 	}
492 	fprintf(stderr, "\n");
493 
494 	fprintf(stderr, "object offsets:\n");
495 	for (i = 0; i < nindexed; i++) {
496 		uint32_t offset = be32toh(packidx->hdr.offsets[i]);
497 		if (offset & GOT_PACKIDX_OFFSET_VAL_IS_LARGE_IDX) {
498 			int j = offset & GOT_PACKIDX_OFFSET_VAL_MASK;
499 			fprintf(stderr, "%u -> %llu\n", offset, 
500 			    be64toh(packidx->hdr.large_offsets[j]));
501 		} else
502 			fprintf(stderr, "%u\n", offset);
503 	}
504 	fprintf(stderr, "\n");
505 
506 	fprintf(stderr, "fanout table:");
507 	for (i = 0; i <= 0xff; i++)
508 		fprintf(stderr, " %u", be32toh(packidx->hdr.fanout_table[i]));
509 	fprintf(stderr, "\n");
510 }
511 #endif
512 
513 static void
514 add_indexed_object(struct got_packidx *packidx, uint32_t idx,
515     struct got_indexed_object *obj)
516 {
517 	int i;
518 
519 	memcpy(packidx->hdr.sorted_ids[idx].sha1, obj->id.sha1,
520 	    SHA1_DIGEST_LENGTH);
521 	packidx->hdr.crc32[idx] = htobe32(obj->crc);
522 	if (obj->off < GOT_PACKIDX_OFFSET_VAL_IS_LARGE_IDX)
523 		packidx->hdr.offsets[idx] = htobe32(obj->off);
524 	else {
525 		packidx->hdr.offsets[idx] = htobe32(packidx->nlargeobj |
526 		    GOT_PACKIDX_OFFSET_VAL_IS_LARGE_IDX);
527 		packidx->hdr.large_offsets[packidx->nlargeobj] =
528 		    htobe64(obj->off);
529 		packidx->nlargeobj++;
530 	}
531 
532 	for (i = obj->id.sha1[0]; i <= 0xff; i++) {
533 		uint32_t n = be32toh(packidx->hdr.fanout_table[i]);
534 		packidx->hdr.fanout_table[i] = htobe32(n + 1);
535 	}
536 }
537 
538 static int
539 indexed_obj_cmp(const void *pa, const void *pb)
540 {
541 	struct got_indexed_object *a, *b;
542 
543 	a = (struct got_indexed_object *)pa;
544 	b = (struct got_indexed_object *)pb;
545 	return got_object_id_cmp(&a->id, &b->id);
546 }
547 
548 static void
549 make_packidx(struct got_packidx *packidx, int nobj,
550     struct got_indexed_object *objects)
551 {
552 	struct got_indexed_object *obj;
553 	int i;
554 	uint32_t idx = 0;
555 
556 	qsort(objects, nobj, sizeof(struct got_indexed_object),
557 	    indexed_obj_cmp);
558 
559 	memset(packidx->hdr.fanout_table, 0,
560 	    GOT_PACKIDX_V2_FANOUT_TABLE_ITEMS * sizeof(uint32_t));
561 	packidx->nlargeobj = 0;
562 
563 	for (i = 0; i < nobj; i++) {
564 		obj = &objects[i];
565 		if (obj->valid)
566 			add_indexed_object(packidx, idx++, obj);
567 	}
568 }
569 
570 static void
571 update_packidx(struct got_packidx *packidx, int nobj,
572     struct got_indexed_object *obj)
573 {
574 	int idx;
575 	uint32_t nindexed = be32toh(packidx->hdr.fanout_table[0xff]);
576 
577 	idx = find_object_idx(packidx, obj->id.sha1);
578 	if (idx == -1) {
579 		char hex[SHA1_DIGEST_STRING_LENGTH];
580 		got_sha1_digest_to_str(obj->id.sha1, hex, sizeof(hex));
581 		return; /* object already indexed */
582 	}
583 
584 	memmove(&packidx->hdr.sorted_ids[idx + 1],
585 	    &packidx->hdr.sorted_ids[idx],
586 	    sizeof(struct got_packidx_object_id) * (nindexed - idx));
587 	memmove(&packidx->hdr.offsets[idx + 1], &packidx->hdr.offsets[idx],
588 	    sizeof(uint32_t) * (nindexed - idx));
589 
590 	add_indexed_object(packidx, idx, obj);
591 }
592 
593 static const struct got_error *
594 send_index_pack_progress(struct imsgbuf *ibuf, int nobj_total,
595     int nobj_indexed, int nobj_loose, int nobj_resolved)
596 {
597 	struct got_imsg_index_pack_progress iprogress;
598 
599 	iprogress.nobj_total = nobj_total;
600 	iprogress.nobj_indexed = nobj_indexed;
601 	iprogress.nobj_loose = nobj_loose;
602 	iprogress.nobj_resolved = nobj_resolved;
603 
604 	if (imsg_compose(ibuf, GOT_IMSG_IDXPACK_PROGRESS, 0, 0, -1,
605 	    &iprogress, sizeof(iprogress)) == -1)
606 		return got_error_from_errno("imsg_compose IDXPACK_PROGRESS");
607 
608 	return got_privsep_flush_imsg(ibuf);
609 }
610 
611 static const struct got_error *
612 send_index_pack_done(struct imsgbuf *ibuf)
613 {
614 	if (imsg_compose(ibuf, GOT_IMSG_IDXPACK_DONE, 0, 0, -1, NULL, 0) == -1)
615 		return got_error_from_errno("imsg_compose FETCH");
616 	return got_privsep_flush_imsg(ibuf);
617 }
618 
619 
620 static const struct got_error *
621 index_pack(struct got_pack *pack, int idxfd, FILE *tmpfile,
622     FILE *delta_base_file, FILE *delta_accum_file, uint8_t *pack_sha1_expected,
623     struct imsgbuf *ibuf)
624 {
625 	const struct got_error *err;
626 	struct got_packfile_hdr hdr;
627 	struct got_packidx packidx;
628 	char buf[8];
629 	char pack_sha1[SHA1_DIGEST_LENGTH];
630 	int nobj, nvalid, nloose, nresolved = 0, i;
631 	struct got_indexed_object *objects = NULL, *obj;
632 	SHA1_CTX ctx;
633 	uint8_t packidx_hash[SHA1_DIGEST_LENGTH];
634 	ssize_t r, w;
635 	int pass, have_ref_deltas = 0, first_delta_idx = -1;
636 	size_t mapoff = 0;
637 	int p_indexed = 0, last_p_indexed = -1;
638 	int p_resolved = 0, last_p_resolved = -1;
639 
640 	/* Require that pack file header and SHA1 trailer are present. */
641 	if (pack->filesize < sizeof(hdr) + SHA1_DIGEST_LENGTH)
642 		return got_error_msg(GOT_ERR_BAD_PACKFILE,
643 		    "short pack file");
644 
645 	if (pack->map) {
646 		memcpy(&hdr, pack->map, sizeof(hdr));
647 		mapoff += sizeof(hdr);
648 	} else {
649 		r = read(pack->fd, &hdr, sizeof(hdr));
650 		if (r == -1)
651 			return got_error_from_errno("read");
652 		if (r < sizeof(hdr))
653 			return got_error_msg(GOT_ERR_BAD_PACKFILE,
654 			    "short pack file");
655 	}
656 
657 	if (hdr.signature != htobe32(GOT_PACKFILE_SIGNATURE))
658 		return got_error_msg(GOT_ERR_BAD_PACKFILE,
659 		    "bad packfile signature");
660 	if (hdr.version != htobe32(GOT_PACKFILE_VERSION))
661 		return got_error_msg(GOT_ERR_BAD_PACKFILE,
662 		    "bad packfile version");
663 	nobj = be32toh(hdr.nobjects);
664 	if (nobj == 0)
665 		return got_error_msg(GOT_ERR_BAD_PACKFILE,
666 		    "bad packfile with zero objects");
667 
668 	/* We compute the SHA1 of pack file contents and verify later on. */
669 	SHA1Init(&ctx);
670 	SHA1Update(&ctx, (void *)&hdr, sizeof(hdr));
671 
672 	/*
673 	 * Create an in-memory pack index which will grow as objects
674 	 * IDs in the pack file are discovered. Only fields used to
675 	 * read deltified objects will be needed by the pack.c library
676 	 * code, so setting up just a pack index header is sufficient.
677 	 */
678 	memset(&packidx, 0, sizeof(packidx));
679 	packidx.hdr.magic = malloc(sizeof(uint32_t));
680 	if (packidx.hdr.magic == NULL)
681 		return got_error_from_errno("malloc");
682 	*packidx.hdr.magic = htobe32(GOT_PACKIDX_V2_MAGIC);
683 	packidx.hdr.version = malloc(sizeof(uint32_t));
684 	if (packidx.hdr.version == NULL) {
685 		err = got_error_from_errno("malloc");
686 		goto done;
687 	}
688 	*packidx.hdr.version = htobe32(GOT_PACKIDX_VERSION);
689 	packidx.hdr.fanout_table = calloc(GOT_PACKIDX_V2_FANOUT_TABLE_ITEMS,
690 	    sizeof(uint32_t));
691 	if (packidx.hdr.fanout_table == NULL) {
692 		err = got_error_from_errno("calloc");
693 		goto done;
694 	}
695 	packidx.hdr.sorted_ids = calloc(nobj,
696 	    sizeof(struct got_packidx_object_id));
697 	if (packidx.hdr.sorted_ids == NULL) {
698 		err = got_error_from_errno("calloc");
699 		goto done;
700 	}
701 	packidx.hdr.crc32 = calloc(nobj, sizeof(uint32_t));
702 	if (packidx.hdr.crc32 == NULL) {
703 		err = got_error_from_errno("calloc");
704 		goto done;
705 	}
706 	packidx.hdr.offsets = calloc(nobj, sizeof(uint32_t));
707 	if (packidx.hdr.offsets == NULL) {
708 		err = got_error_from_errno("calloc");
709 		goto done;
710 	}
711 	/* Large offsets table is empty for pack files < 2 GB. */
712 	if (pack->filesize >= GOT_PACKIDX_OFFSET_VAL_IS_LARGE_IDX) {
713 		packidx.hdr.large_offsets = calloc(nobj, sizeof(uint64_t));
714 		if (packidx.hdr.large_offsets == NULL) {
715 			err = got_error_from_errno("calloc");
716 			goto done;
717 		}
718 	}
719 
720 	nvalid = 0;
721 	nloose = 0;
722 	objects = calloc(nobj, sizeof(struct got_indexed_object));
723 	if (objects == NULL)
724 		return got_error_from_errno("calloc");
725 
726 	/*
727 	 * First pass: locate all objects and identify un-deltified objects.
728 	 *
729 	 * When this pass has completed we will know offset, type, size, and
730 	 * CRC information for all objects in this pack file. We won't know
731 	 * any of the actual object IDs of deltified objects yet since we
732 	 * will not yet attempt to combine deltas.
733 	 */
734 	pass = 1;
735 	for (i = 0; i < nobj; i++) {
736 		/* Don't send too many progress privsep messages. */
737 		p_indexed = ((i + 1) * 100) / nobj;
738 		if (p_indexed != last_p_indexed) {
739 			err = send_index_pack_progress(ibuf, nobj, i + 1,
740 			    nloose, 0);
741 			if (err)
742 				goto done;
743 			last_p_indexed = p_indexed;
744 		}
745 
746 		obj = &objects[i];
747 		obj->crc = crc32(0L, NULL, 0);
748 
749 		/* Store offset to type+size information for this object. */
750 		if (pack->map) {
751 			obj->off = mapoff;
752 		} else {
753 			obj->off = lseek(pack->fd, 0, SEEK_CUR);
754 			if (obj->off == -1) {
755 				err = got_error_from_errno("lseek");
756 				goto done;
757 			}
758 		}
759 
760 		err = read_packed_object(pack, obj, tmpfile, &ctx);
761 		if (err)
762 			goto done;
763 
764 		if (pack->map) {
765 			mapoff += obj->tslen + obj->len;
766 		} else {
767 			if (lseek(pack->fd, obj->off + obj->tslen + obj->len,
768 			    SEEK_SET) == -1) {
769 				err = got_error_from_errno("lseek");
770 				goto done;
771 			}
772 		}
773 
774 		if (obj->type == GOT_OBJ_TYPE_BLOB ||
775 		    obj->type == GOT_OBJ_TYPE_TREE ||
776 		    obj->type == GOT_OBJ_TYPE_COMMIT ||
777 		    obj->type == GOT_OBJ_TYPE_TAG) {
778 			obj->valid = 1;
779 			nloose++;
780 		} else {
781 			if (first_delta_idx == -1)
782 				first_delta_idx = i;
783 			if (obj->type == GOT_OBJ_TYPE_REF_DELTA)
784 				have_ref_deltas = 1;
785 		}
786 	}
787 	nvalid = nloose;
788 
789 	/*
790 	 * Having done a full pass over the pack file and can now
791 	 * verify its checksum.
792 	 */
793 	SHA1Final(pack_sha1, &ctx);
794 	if (memcmp(pack_sha1_expected, pack_sha1, SHA1_DIGEST_LENGTH) != 0) {
795 		err = got_error_msg(GOT_ERR_BAD_PACKFILE,
796 		    "pack file checksum mismatch");
797 		goto done;
798 	}
799 
800 	/* Verify the SHA1 checksum stored at the end of the pack file. */
801 	if (pack->map) {
802 		memcpy(pack_sha1_expected, pack->map +
803 		    pack->filesize - SHA1_DIGEST_LENGTH,
804 		    SHA1_DIGEST_LENGTH);
805 	} else {
806 		ssize_t n;
807 		if (lseek(pack->fd, -SHA1_DIGEST_LENGTH, SEEK_END) == -1) {
808 			err = got_error_from_errno("lseek");
809 			goto done;
810 		}
811 		n = read(pack->fd, pack_sha1_expected, SHA1_DIGEST_LENGTH);
812 		if (n == -1) {
813 			err = got_error_from_errno("read");
814 			goto done;
815 		}
816 		if (n != SHA1_DIGEST_LENGTH) {
817 			err = got_error(GOT_ERR_IO);
818 			goto done;
819 		}
820 	}
821 	if (memcmp(pack_sha1, pack_sha1_expected, SHA1_DIGEST_LENGTH) != 0) {
822 		err = got_error_msg(GOT_ERR_BAD_PACKFILE,
823 		    "bad checksum in pack file trailer");
824 		goto done;
825 	}
826 
827 	if (first_delta_idx == -1)
828 		first_delta_idx = 0;
829 
830 	/* In order to resolve ref deltas we need an in-progress pack index. */
831 	if (have_ref_deltas)
832 		make_packidx(&packidx, nobj, objects);
833 
834 	/*
835 	 * Second pass: We can now resolve deltas to compute the IDs of
836 	 * objects which appear in deltified form. Because deltas can be
837 	 * chained this pass may require a couple of iterations until all
838 	 * IDs of deltified objects have been discovered.
839 	 */
840 	pass++;
841 	while (nvalid != nobj) {
842 		int n = 0;
843 		/*
844 		 * This loop will only run once unless the pack file
845 		 * contains ref deltas which refer to objects located
846 		 * later in the pack file, which is unusual.
847 		 * Offset deltas can always be resolved in one pass
848 		 * unless the packfile is corrupt.
849 		 */
850 		for (i = first_delta_idx; i < nobj; i++) {
851 			obj = &objects[i];
852 			if (obj->type != GOT_OBJ_TYPE_REF_DELTA &&
853 			    obj->type != GOT_OBJ_TYPE_OFFSET_DELTA)
854 				continue;
855 
856 			if (obj->valid)
857 				continue;
858 
859 			if (pack->map == NULL && lseek(pack->fd,
860 			    obj->off + obj->tslen, SEEK_SET) == -1) {
861 				err = got_error_from_errno("lseek");
862 				goto done;
863 			}
864 
865 			err = resolve_deltified_object(pack, &packidx, obj,
866 			    tmpfile, delta_base_file, delta_accum_file);
867 			if (err) {
868 				if (err->code != GOT_ERR_NO_OBJ)
869 					goto done;
870 				/*
871 				 * We cannot resolve this object yet because
872 				 * a delta base is unknown. Try again later.
873 				 */
874 				continue;
875 			}
876 
877 			obj->valid = 1;
878 			n++;
879 			if (have_ref_deltas)
880 				update_packidx(&packidx, nobj, obj);
881 			/* Don't send too many progress privsep messages. */
882 			p_resolved = ((nresolved + n) * 100) / nobj;
883 			if (p_resolved != last_p_resolved) {
884 				err = send_index_pack_progress(ibuf, nobj,
885 				    nobj, nloose, nresolved + n);
886 				if (err)
887 					goto done;
888 				last_p_resolved = p_resolved;
889 			}
890 
891 		}
892 		if (pass++ > 3 && n == 0) {
893 			static char msg[64];
894 			snprintf(msg, sizeof(msg), "could not resolve "
895 			    "any of deltas; packfile could be corrupt");
896 			err = got_error_msg(GOT_ERR_BAD_PACKFILE, msg);
897 			goto done;
898 
899 		}
900 		nresolved += n;
901 		nvalid += nresolved;
902 	}
903 
904 	if (nloose + nresolved != nobj) {
905 		static char msg[64];
906 		snprintf(msg, sizeof(msg), "discovered only %d of %d objects",
907 		    nloose + nresolved, nobj);
908 		err = got_error_msg(GOT_ERR_BAD_PACKFILE, msg);
909 		goto done;
910 	}
911 
912 	err = send_index_pack_progress(ibuf, nobj, nobj, nloose, nresolved);
913 	if (err)
914 		goto done;
915 
916 	make_packidx(&packidx, nobj, objects);
917 
918 	free(objects);
919 	objects = NULL;
920 
921 	SHA1Init(&ctx);
922 	putbe32(buf, GOT_PACKIDX_V2_MAGIC);
923 	putbe32(buf + 4, GOT_PACKIDX_VERSION);
924 	err = hwrite(idxfd, buf, 8, &ctx);
925 	if (err)
926 		goto done;
927 	err = hwrite(idxfd, packidx.hdr.fanout_table,
928 	    GOT_PACKIDX_V2_FANOUT_TABLE_ITEMS * sizeof(uint32_t), &ctx);
929 	if (err)
930 		goto done;
931 	err = hwrite(idxfd, packidx.hdr.sorted_ids,
932 	    nobj * SHA1_DIGEST_LENGTH, &ctx);
933 	if (err)
934 		goto done;
935 	err = hwrite(idxfd, packidx.hdr.crc32, nobj * sizeof(uint32_t), &ctx);
936 	if (err)
937 		goto done;
938 	err = hwrite(idxfd, packidx.hdr.offsets, nobj * sizeof(uint32_t),
939 	    &ctx);
940 	if (err)
941 		goto done;
942 	if (packidx.nlargeobj > 0) {
943 		err = hwrite(idxfd, packidx.hdr.large_offsets,
944 		    packidx.nlargeobj * sizeof(uint64_t), &ctx);
945 		if (err)
946 			goto done;
947 	}
948 	err = hwrite(idxfd, pack_sha1, SHA1_DIGEST_LENGTH, &ctx);
949 	if (err)
950 		goto done;
951 
952 	SHA1Final(packidx_hash, &ctx);
953 	w = write(idxfd, packidx_hash, sizeof(packidx_hash));
954 	if (w == -1) {
955 		err = got_error_from_errno("write");
956 		goto done;
957 	}
958 	if (w != sizeof(packidx_hash)) {
959 		err = got_error(GOT_ERR_IO);
960 		goto done;
961 	}
962 done:
963 	free(objects);
964 	free(packidx.hdr.magic);
965 	free(packidx.hdr.version);
966 	free(packidx.hdr.fanout_table);
967 	free(packidx.hdr.sorted_ids);
968 	free(packidx.hdr.offsets);
969 	free(packidx.hdr.large_offsets);
970 	return err;
971 }
972 
973 int
974 main(int argc, char **argv)
975 {
976 	const struct got_error *err = NULL, *close_err;
977 	struct imsgbuf ibuf;
978 	struct imsg imsg;
979 	size_t i;
980 	int idxfd = -1, tmpfd = -1;
981 	FILE *tmpfiles[3];
982 	struct got_pack pack;
983 	uint8_t pack_hash[SHA1_DIGEST_LENGTH];
984 	off_t packfile_size;
985 #if 0
986 	static int attached;
987 	while (!attached)
988 		sleep(1);
989 #endif
990 
991 	for (i = 0; i < nitems(tmpfiles); i++)
992 		tmpfiles[i] = NULL;
993 
994 	memset(&pack, 0, sizeof(pack));
995 	pack.fd = -1;
996 	pack.delta_cache = got_delta_cache_alloc(500,
997 	    GOT_DELTA_RESULT_SIZE_CACHED_MAX);
998 	if (pack.delta_cache == NULL) {
999 		err = got_error_from_errno("got_delta_cache_alloc");
1000 		goto done;
1001 	}
1002 
1003 	imsg_init(&ibuf, GOT_IMSG_FD_CHILD);
1004 #ifndef PROFILE
1005 	/* revoke access to most system calls */
1006 	if (pledge("stdio recvfd", NULL) == -1) {
1007 		err = got_error_from_errno("pledge");
1008 		got_privsep_send_error(&ibuf, err);
1009 		return 1;
1010 	}
1011 #endif
1012 	err = got_privsep_recv_imsg(&imsg, &ibuf, 0);
1013 	if (err)
1014 		goto done;
1015 	if (imsg.hdr.type == GOT_IMSG_STOP)
1016 		goto done;
1017 	if (imsg.hdr.type != GOT_IMSG_IDXPACK_REQUEST) {
1018 		err = got_error(GOT_ERR_PRIVSEP_MSG);
1019 		goto done;
1020 	}
1021 	if (imsg.hdr.len - IMSG_HEADER_SIZE != sizeof(pack_hash)) {
1022 		err = got_error(GOT_ERR_PRIVSEP_LEN);
1023 		goto done;
1024 	}
1025 	memcpy(pack_hash, imsg.data, sizeof(pack_hash));
1026 	pack.fd = imsg.fd;
1027 
1028 	err = got_privsep_recv_imsg(&imsg, &ibuf, 0);
1029 	if (err)
1030 		goto done;
1031 	if (imsg.hdr.type == GOT_IMSG_STOP)
1032 		goto done;
1033 	if (imsg.hdr.type != GOT_IMSG_IDXPACK_OUTFD) {
1034 		err = got_error(GOT_ERR_PRIVSEP_MSG);
1035 		goto done;
1036 	}
1037 	if (imsg.hdr.len - IMSG_HEADER_SIZE != 0) {
1038 		err = got_error(GOT_ERR_PRIVSEP_LEN);
1039 		goto done;
1040 	}
1041 	idxfd = imsg.fd;
1042 
1043 	for (i = 0; i < nitems(tmpfiles); i++) {
1044 		err = got_privsep_recv_imsg(&imsg, &ibuf, 0);
1045 		if (err)
1046 			goto done;
1047 		if (imsg.hdr.type == GOT_IMSG_STOP)
1048 			goto done;
1049 		if (imsg.hdr.type != GOT_IMSG_TMPFD) {
1050 			err = got_error(GOT_ERR_PRIVSEP_MSG);
1051 			goto done;
1052 		}
1053 		if (imsg.hdr.len - IMSG_HEADER_SIZE != 0) {
1054 			err = got_error(GOT_ERR_PRIVSEP_LEN);
1055 			goto done;
1056 		}
1057 		tmpfd = imsg.fd;
1058 		tmpfiles[i] = fdopen(tmpfd, "w+");
1059 		if (tmpfiles[i] == NULL) {
1060 			err = got_error_from_errno("fdopen");
1061 			goto done;
1062 		}
1063 		tmpfd = -1;
1064 	}
1065 
1066 	if (lseek(pack.fd, 0, SEEK_END) == -1) {
1067 		err = got_error_from_errno("lseek");
1068 		goto done;
1069 	}
1070 	packfile_size = lseek(pack.fd, 0, SEEK_CUR);
1071 	if (packfile_size == -1) {
1072 		err = got_error_from_errno("lseek");
1073 		goto done;
1074 	}
1075 	pack.filesize = packfile_size; /* XXX off_t vs size_t */
1076 
1077 	if (lseek(pack.fd, 0, SEEK_SET) == -1) {
1078 		err = got_error_from_errno("lseek");
1079 		goto done;
1080 	}
1081 
1082 #ifndef GOT_PACK_NO_MMAP
1083 	pack.map = mmap(NULL, pack.filesize, PROT_READ, MAP_PRIVATE,
1084 	    pack.fd, 0);
1085 	if (pack.map == MAP_FAILED)
1086 		pack.map = NULL; /* fall back to read(2) */
1087 #endif
1088 	err = index_pack(&pack, idxfd, tmpfiles[0], tmpfiles[1], tmpfiles[2],
1089 	    pack_hash, &ibuf);
1090 done:
1091 	close_err = got_pack_close(&pack);
1092 	if (close_err && err == NULL)
1093 		err = close_err;
1094 	if (idxfd != -1 && close(idxfd) == -1 && err == NULL)
1095 		err = got_error_from_errno("close");
1096 	if (tmpfd != -1 && close(tmpfd) == -1 && err == NULL)
1097 		err = got_error_from_errno("close");
1098 	for (i = 0; i < nitems(tmpfiles); i++) {
1099 		if (tmpfiles[i] != NULL && fclose(tmpfiles[i]) == EOF &&
1100 		    err == NULL)
1101 			err = got_error_from_errno("fclose");
1102 	}
1103 
1104 	if (err == NULL)
1105 		err = send_index_pack_done(&ibuf);
1106 	if (err) {
1107 		got_privsep_send_error(&ibuf, err);
1108 		fprintf(stderr, "%s: %s\n", getprogname(), err->msg);
1109 		got_privsep_send_error(&ibuf, err);
1110 		exit(1);
1111 	}
1112 
1113 	exit(0);
1114 }