Commit Briefs

97799ccd4b Thomas Adam

portable: add support for landlock

landlock is a new set of linux APIs that is conceptually similar to unveil(2): the idea is to restrict what a process can do on a specified part of the filesystem. There are some differences in the behaviour: the major one being that the landlock ruleset is inherited across execve(2). This just restricts the libexec helpers by completely revoking ANY filesystem access; after all they are the biggest attack surface. got send/fetch/clone *may* end up spawning ssh(1), so at the moment is not possible to landlock the main process. From Omar Polo.

diff | patch | tree

92a9e85d28 Thomas Adam

portable: add FreeBSD support

This adds the capability to compile got-portable on FreeBSD.

diff | patch | tree

dd038bc6ec Thomas Adam

portable: initial Linux compilation

This commit modifies the GoT main branch to be able to compile it under linux.

diff | patch | tree

d5c81d448a Stefan Sperling

verify object ID checksums while loose objects are being accessed

diff | patch | tree

12f2167a2e Stefan Sperling

add checksum parameters to got_inflate functions which did not provide them yet

diff | patch | tree

a859171129 Stefan Sperling

raw object size should not include the length of the object's header

This way, the size of a raw object is the same regardless of whether the object was found in a loose object file or in a pack file.

diff | patch | tree

282f42e5d1 Stefan Sperling

remove stray debug print which was accidentally committed

diff | patch | tree

e5ad73651d Stefan Sperling

fix file descriptor leak when got-read-object returns a raw object

diff | patch | tree

59d1e4a0a9 Stefan Sperling

implement raw object data access; this will be required for packing

diff | patch | tree

08578a35f6 Stefan Sperling

make close(2) failure checks consistent; check 'close() == -1' everywhere

ok millert, naddy

diff | patch | tree

23c57b285f Christian Weisgerber

Stop including <sys/syslimits.h> directly.

POSIX says the limits defined there are available from <limits.h>, which almost all affected source files already included anyway. ok millert stsp

diff | patch | tree

81a12da586 Christian Weisgerber

do not rely on <zlib.h> to pull in <unistd.h>

ok stsp

diff | patch | tree

12ce7a6cb2 Stefan Sperling

include <limits.h> instead of <sys/limits.h>; patch by Thomas Klausner

diff | patch | tree

638f902404 Stefan Sperling

rename got_error_prefix_errno() to got_error_from_errno()

diff | patch | tree

656b1f76d3 joshua stein

while (1) -> for (;;)

diff | patch | tree

230a42bdc6 joshua stein

got_error_from_errno -> got_error_prefix_errno

also add got_error_prefix_errno2 and got_error_prefix_errno3 which should hopefully all be merged into a single function with variadic args (but can't alloc mem)

diff | patch | tree

3a6ce05aff Stefan Sperling

check for errors from close(2)

diff | patch | tree

1785f84a3a Stefan Sperling

eliminate got_object_open() round-trip when opening commits

diff | patch | tree

f4a881ce8b Stefan Sperling

more support for tag objects; new code is not yet reachable

diff | patch | tree

c945ec50da Stefan Sperling

init output param in {parse,read}_object_header

diff | patch | tree

80d5f1347d Stefan Sperling

don't be noisy on stderr when Ctrl-C is hit

diff | patch | tree

99437157b9 Stefan Sperling

abort checkout operations cleanly when Ctrl-C is hit

diff | patch | tree

2ff12563f8 Stefan Sperling

fix 'make PROFILE=1' build

diff | patch | tree

876c234bd6 Stefan Sperling

start reading pack files with privsep; still WIP

diff | patch | tree

ad242220ad Stefan Sperling

implement fork+exec (and by the way, fix the build...)

diff | patch | tree