git: update to v2.38.1

[ps-cgit] / ui-snapshot.c

diff --git a/ui-snapshot.c b/ui-snapshot.c
index f9879ed6a829bba87716374921ef3d6a6788d260..18361a65538485c7543cc0cb9e123fd84cf8dae0 100644 (file)
--- a/ui-snapshot.c
+++ b/ui-snapshot.c
@@ -1,155 +1,316 @@
 /* ui-snapshot.c: generate snapshot of a commit
  *
 /* ui-snapshot.c: generate snapshot of a commit
  *

- * Copyright (C) 2006 Lars Hjemli
+ * Copyright (C) 2006-2014 cgit Development Team <cgit@lists.zx2c4.com>

  *
  * Licensed under GNU General Public License v2
  *   (see COPYING for full license text)
  */
 
 #include "cgit.h"
  *
  * Licensed under GNU General Public License v2
  *   (see COPYING for full license text)
  */
 
 #include "cgit.h"

+#include "ui-snapshot.h"
+#include "html.h"
+#include "ui-shared.h"

 
 

-static int write_compressed_tar_archive(struct archiver_args *args,const char *filter)
+static int write_archive_type(const char *format, const char *hex, const char *prefix)

 {
 {

-       int rw[2];
-       pid_t gzpid;
-       int stdout2;
-       int status;
-       int rv;
-
-       stdout2 = chk_non_negative(dup(STDIN_FILENO), "Preserving STDOUT before compressing");
-       chk_zero(pipe(rw), "Opening pipe from compressor subprocess");
-       gzpid = chk_non_negative(fork(), "Forking compressor subprocess");
-       if(gzpid==0) {
-               /* child */
-               chk_zero(close(rw[1]), "Closing write end of pipe in child");
-               chk_zero(close(STDIN_FILENO), "Closing STDIN");
-               chk_non_negative(dup2(rw[0],STDIN_FILENO), "Redirecting compressor input to stdin");
-               execlp(filter,filter,NULL);
-               _exit(-1);
+       struct strvec argv = STRVEC_INIT;
+       const char **nargv;
+       int result;
+       strvec_push(&argv, "snapshot");
+       strvec_push(&argv, format);
+       if (prefix) {
+               struct strbuf buf = STRBUF_INIT;
+               strbuf_addstr(&buf, prefix);
+               strbuf_addch(&buf, '/');
+               strvec_push(&argv, "--prefix");
+               strvec_push(&argv, buf.buf);
+               strbuf_release(&buf);

        }
        }

-       /* parent */
-       chk_zero(close(rw[0]), "Closing read end of pipe");
-       chk_non_negative(dup2(rw[1],STDOUT_FILENO), "Redirecting output to compressor");
-       
-       rv = write_tar_archive(args);
-
-       chk_zero(close(STDOUT_FILENO), "Closing STDOUT redirected to compressor");
-       chk_non_negative(dup2(stdout2,STDOUT_FILENO), "Restoring uncompressed STDOUT");
-       chk_zero(close(stdout2), "Closing uncompressed STDOUT");
-       chk_zero(close(rw[1]), "Closing write end of pipe in parent");
-       chk_positive(waitpid(gzpid,&status,0), "Waiting on compressor process");
-       if(! ( WIFEXITED(status) && WEXITSTATUS(status)==0 ) )
-               cgit_print_error("Failed to compress archive");
+       strvec_push(&argv, hex);
+       /*
+        * Now we need to copy the pointers to arguments into a new
+        * structure because write_archive will rearrange its arguments
+        * which may result in duplicated/missing entries causing leaks
+        * or double-frees in strvec_clear.
+        */
+       nargv = xmalloc(sizeof(char *) * (argv.nr + 1));
+       /* strvec guarantees a trailing NULL entry. */
+       memcpy(nargv, argv.v, sizeof(char *) * (argv.nr + 1));
+
+       result = write_archive(argv.nr, nargv, NULL, the_repository, NULL, 0);
+       strvec_clear(&argv);
+       free(nargv);
+       return result;
+}
+
+static int write_tar_archive(const char *hex, const char *prefix)
+{
+       return write_archive_type("--format=tar", hex, prefix);
+}
+
+static int write_zip_archive(const char *hex, const char *prefix)
+{
+       return write_archive_type("--format=zip", hex, prefix);
+}

 
 

+static int write_compressed_tar_archive(const char *hex,
+                                       const char *prefix,
+                                       char *filter_argv[])
+{
+       int rv;
+       struct cgit_exec_filter f;
+       cgit_exec_filter_init(&f, filter_argv[0], filter_argv);
+
+       cgit_open_filter(&f.base);
+       rv = write_tar_archive(hex, prefix);
+       cgit_close_filter(&f.base);

        return rv;
 }
 
        return rv;
 }
 

-static int write_tar_gzip_archive(struct archiver_args *args)
+static int write_tar_gzip_archive(const char *hex, const char *prefix)
+{
+       char *argv[] = { "gzip", "-n", NULL };
+       return write_compressed_tar_archive(hex, prefix, argv);
+}
+
+static int write_tar_bzip2_archive(const char *hex, const char *prefix)
+{
+       char *argv[] = { "bzip2", NULL };
+       return write_compressed_tar_archive(hex, prefix, argv);
+}
+
+static int write_tar_lzip_archive(const char *hex, const char *prefix)
+{
+       char *argv[] = { "lzip", NULL };
+       return write_compressed_tar_archive(hex, prefix, argv);
+}
+
+static int write_tar_xz_archive(const char *hex, const char *prefix)

 {
 {

-       return write_compressed_tar_archive(args,"gzip");
+       char *argv[] = { "xz", NULL };
+       return write_compressed_tar_archive(hex, prefix, argv);

 }
 }

-static int write_tar_bzip2_archive(struct archiver_args *args)
+
+static int write_tar_zstd_archive(const char *hex, const char *prefix)

 {
 {

-       return write_compressed_tar_archive(args,"bzip2");
+       char *argv[] = { "zstd", "-T0", NULL };
+       return write_compressed_tar_archive(hex, prefix, argv);

 }
 
 }
 

-static const struct snapshot_archive_t {
-       const char *suffix;
-       const char *mimetype;
-       write_archive_fn_t write_func;
-       int bit;
-}      snapshot_archives[] = {
-       { ".zip", "application/x-zip", write_zip_archive, 0x1 },
-       { ".tar.gz", "application/x-tar", write_tar_gzip_archive, 0x2 },
-       { ".tar.bz2", "application/x-tar", write_tar_bzip2_archive, 0x4 },
-       { ".tar", "application/x-tar", write_tar_archive, 0x8 }
+const struct cgit_snapshot_format cgit_snapshot_formats[] = {
+       /* .tar must remain the 0 index */
+       { ".tar",       "application/x-tar",    write_tar_archive       },
+       { ".tar.gz",    "application/x-gzip",   write_tar_gzip_archive  },
+       { ".tar.bz2",   "application/x-bzip2",  write_tar_bzip2_archive },
+       { ".tar.lz",    "application/x-lzip",   write_tar_lzip_archive  },
+       { ".tar.xz",    "application/x-xz",     write_tar_xz_archive    },
+       { ".tar.zst",   "application/x-zstd",   write_tar_zstd_archive  },
+       { ".zip",       "application/x-zip",    write_zip_archive       },
+       { NULL }

 };
 
 };
 

-void cgit_print_snapshot(struct cacheitem *item, const char *head,
+static struct notes_tree snapshot_sig_notes[ARRAY_SIZE(cgit_snapshot_formats)];
+
+const struct object_id *cgit_snapshot_get_sig(const char *ref,
+                                             const struct cgit_snapshot_format *f)
+{
+       struct notes_tree *tree;
+       struct object_id oid;
+
+       if (get_oid(ref, &oid))
+               return NULL;
+
+       tree = &snapshot_sig_notes[f - &cgit_snapshot_formats[0]];
+       if (!tree->initialized) {
+               struct strbuf notes_ref = STRBUF_INIT;
+
+               strbuf_addf(&notes_ref, "refs/notes/signatures/%s",
+                           f->suffix + 1);
+
+               init_notes(tree, notes_ref.buf, combine_notes_ignore, 0);
+               strbuf_release(&notes_ref);
+       }
+
+       return get_note(tree, &oid);
+}
+
+static const struct cgit_snapshot_format *get_format(const char *filename)
+{
+       const struct cgit_snapshot_format *fmt;
+
+       for (fmt = cgit_snapshot_formats; fmt->suffix; fmt++) {
+               if (ends_with(filename, fmt->suffix))
+                       return fmt;
+       }
+       return NULL;
+}
+
+const unsigned cgit_snapshot_format_bit(const struct cgit_snapshot_format *f)
+{
+       return BIT(f - &cgit_snapshot_formats[0]);
+}
+
+static int make_snapshot(const struct cgit_snapshot_format *format,

                         const char *hex, const char *prefix,
                         const char *hex, const char *prefix,

-                        const char *filename, int snapshots)
-{
-       int fnl = strlen(filename);
-       int f, n;
-
-       n = sizeof(snapshot_archives) / sizeof(*snapshot_archives);
-       for(f=0; f<n; f++) {
-               const struct snapshot_archive_t* sat = &snapshot_archives[f];
-               int sl;
-               if(!(snapshots & sat->bit))
-                       continue;
-               sl = strlen(sat->suffix);
-               if(fnl<sl || strcmp(&filename[fnl-sl],sat->suffix))
-                       continue;
-
-               struct archiver_args args;
-               struct commit *commit;
-               unsigned char sha1[20];
-
-               if (!hex)
-                       hex = head;
-               if(get_sha1(hex, sha1)) {
-                       cgit_print_error(fmt("Bad object id: %s", hex));
-                       return;
-               }
-               commit = lookup_commit_reference(sha1);
+                        const char *filename)
+{
+       struct object_id oid;

 
 

-               if(!commit) {
-                       cgit_print_error(fmt("Not a commit reference: %s", hex));
-                       return;;
-               }
+       if (get_oid(hex, &oid)) {
+               cgit_print_error_page(404, "Not found",
+                               "Bad object id: %s", hex);
+               return 1;
+       }
+       if (!lookup_commit_reference(the_repository, &oid)) {
+               cgit_print_error_page(400, "Bad request",
+                               "Not a commit reference: %s", hex);
+               return 1;
+       }
+       ctx.page.etag = oid_to_hex(&oid);
+       ctx.page.mimetype = xstrdup(format->mimetype);
+       ctx.page.filename = xstrdup(filename);
+       cgit_print_http_headers();
+       init_archivers();
+       format->write_func(hex, prefix);
+       return 0;
+}

 
 

-               memset(&args,0,sizeof(args));
-               args.base = fmt("%s/", prefix);
-               args.tree = commit->tree;
+static int write_sig(const struct cgit_snapshot_format *format,
+                    const char *hex, const char *archive,
+                    const char *filename)
+{
+       const struct object_id *note = cgit_snapshot_get_sig(hex, format);
+       enum object_type type;
+       unsigned long size;
+       char *buf;

 
 

-               cgit_print_snapshot_start(sat->mimetype, filename, item);
-               (*sat->write_func)(&args);
-               return;
+       if (!note) {
+               cgit_print_error_page(404, "Not found",
+                               "No signature for %s", archive);
+               return 0;

        }
        }

-       cgit_print_error(fmt("Unsupported snapshot format: %s", filename));
+
+       buf = read_object_file(note, &type, &size);
+       if (!buf) {
+               cgit_print_error_page(404, "Not found", "Not found");
+               return 0;
+       }
+
+       html("X-Content-Type-Options: nosniff\n");
+       html("Content-Security-Policy: default-src 'none'\n");
+       ctx.page.etag = oid_to_hex(note);
+       ctx.page.mimetype = xstrdup("application/pgp-signature");
+       ctx.page.filename = xstrdup(filename);
+       cgit_print_http_headers();
+
+       html_raw(buf, size);
+       free(buf);
+       return 0;

 }
 
 }
 

-void cgit_print_snapshot_links(const char *repo, const char *head,
-                              const char *hex, int snapshots)
+/* Try to guess the requested revision from the requested snapshot name.
+ * First the format extension is stripped, e.g. "cgit-0.7.2.tar.gz" become
+ * "cgit-0.7.2". If this is a valid commit object name we've got a winner.
+ * Otherwise, if the snapshot name has a prefix matching the result from
+ * repo_basename(), we strip the basename and any following '-' and '_'
+ * characters ("cgit-0.7.2" -> "0.7.2") and check the resulting name once
+ * more. If this still isn't a valid commit object name, we check if pre-
+ * pending a 'v' or a 'V' to the remaining snapshot name ("0.7.2" ->
+ * "v0.7.2") gives us something valid.
+ */
+static const char *get_ref_from_filename(const struct cgit_repo *repo,
+                                        const char *filename,
+                                        const struct cgit_snapshot_format *format)

 {
 {

-       char *filename;
-       int f, n;
+       const char *reponame;
+       struct object_id oid;
+       struct strbuf snapshot = STRBUF_INIT;
+       int result = 1;

 
 

-       n = sizeof(snapshot_archives) / sizeof(*snapshot_archives);
-       for(f=0; f<n ;f++) {
-               const struct snapshot_archive_t* sat = &snapshot_archives[f];
-               if(!(snapshots & sat->bit))
-                       continue;
-               filename = fmt("%s-%s%s", cgit_repobasename(repo), hex,
-                              sat->suffix);
-               cgit_snapshot_link(filename, NULL, NULL, (char *)head,
-                                  (char *)hex, filename);
-               html("<br/>");
+       strbuf_addstr(&snapshot, filename);
+       strbuf_setlen(&snapshot, snapshot.len - strlen(format->suffix));
+
+       if (get_oid(snapshot.buf, &oid) == 0)
+               goto out;
+
+       reponame = cgit_snapshot_prefix(repo);
+       if (starts_with(snapshot.buf, reponame)) {
+               const char *new_start = snapshot.buf;
+               new_start += strlen(reponame);
+               while (new_start && (*new_start == '-' || *new_start == '_'))
+                       new_start++;
+               strbuf_splice(&snapshot, 0, new_start - snapshot.buf, "", 0);

        }
        }

+
+       if (get_oid(snapshot.buf, &oid) == 0)
+               goto out;
+
+       strbuf_insert(&snapshot, 0, "v", 1);
+       if (get_oid(snapshot.buf, &oid) == 0)
+               goto out;
+
+       strbuf_splice(&snapshot, 0, 1, "V", 1);
+       if (get_oid(snapshot.buf, &oid) == 0)
+               goto out;
+
+       result = 0;
+       strbuf_release(&snapshot);
+
+out:
+       return result ? strbuf_detach(&snapshot, NULL) : NULL;

 }
 
 }
 

-int cgit_parse_snapshots_mask(const char *str)
-{
-       static const char *delim = " \t,:/|;";
-       int f, tl, rv = 0;
-       /* favor legacy setting */
-       if(atoi(str)) return 1;
-       for(;;) {
-               str += strspn(str,delim);
-               tl = strcspn(str,delim);
-               if(!tl)
-                       break;
-               for(f=0;f<(sizeof(snapshot_archives)/sizeof(*snapshot_archives));++f) {
-                       const struct snapshot_archive_t* sat = &snapshot_archives[f];
-                       if(! ( strncmp(sat->suffix,str,tl) && strncmp(sat->suffix+1,str,tl-1) ) ) {
-                               rv |= sat->bit;
-                               break;
-                       }
+void cgit_print_snapshot(const char *head, const char *hex,
+                        const char *filename, int dwim)
+{
+       const struct cgit_snapshot_format* f;
+       const char *sig_filename = NULL;
+       char *adj_filename = NULL;
+       char *prefix = NULL;
+
+       if (!filename) {
+               cgit_print_error_page(400, "Bad request",
+                               "No snapshot name specified");
+               return;
+       }
+
+       if (ends_with(filename, ".asc")) {
+               sig_filename = filename;
+
+               /* Strip ".asc" from filename for common format processing */
+               adj_filename = xstrdup(filename);
+               adj_filename[strlen(adj_filename) - 4] = '\0';
+               filename = adj_filename;
+       }
+
+       f = get_format(filename);
+       if (!f || (!sig_filename && !(ctx.repo->snapshots & cgit_snapshot_format_bit(f)))) {
+               cgit_print_error_page(400, "Bad request",
+                               "Unsupported snapshot format: %s", filename);
+               return;
+       }
+
+       if (!hex && dwim) {
+               hex = get_ref_from_filename(ctx.repo, filename, f);
+               if (hex == NULL) {
+                       cgit_print_error_page(404, "Not found", "Not found");
+                       return;

                }
                }

-               str += tl;
+               prefix = xstrdup(filename);
+               prefix[strlen(filename) - strlen(f->suffix)] = '\0';

        }
        }

-       return rv;
-}

 
 

-/* vim:set sw=8: */
+       if (!hex)
+               hex = head;
+
+       if (!prefix)
+               prefix = xstrdup(cgit_snapshot_prefix(ctx.repo));
+
+       if (sig_filename)
+               write_sig(f, hex, filename, sig_filename);
+       else
+               make_snapshot(f, hex, prefix, filename);
+
+       free(prefix);
+       free(adj_filename);
+}