Merge branch 'ab/sha1dc'
[git] / apply.c
1 /*
2  * apply.c
3  *
4  * Copyright (C) Linus Torvalds, 2005
5  *
6  * This applies patches on top of some (arbitrary) version of the SCM.
7  *
8  */
9
10 #include "cache.h"
11 #include "config.h"
12 #include "blob.h"
13 #include "delta.h"
14 #include "diff.h"
15 #include "dir.h"
16 #include "xdiff-interface.h"
17 #include "ll-merge.h"
18 #include "lockfile.h"
19 #include "parse-options.h"
20 #include "quote.h"
21 #include "rerere.h"
22 #include "apply.h"
23
24 static void git_apply_config(void)
25 {
26         git_config_get_string_const("apply.whitespace", &apply_default_whitespace);
27         git_config_get_string_const("apply.ignorewhitespace", &apply_default_ignorewhitespace);
28         git_config(git_default_config, NULL);
29 }
30
31 static int parse_whitespace_option(struct apply_state *state, const char *option)
32 {
33         if (!option) {
34                 state->ws_error_action = warn_on_ws_error;
35                 return 0;
36         }
37         if (!strcmp(option, "warn")) {
38                 state->ws_error_action = warn_on_ws_error;
39                 return 0;
40         }
41         if (!strcmp(option, "nowarn")) {
42                 state->ws_error_action = nowarn_ws_error;
43                 return 0;
44         }
45         if (!strcmp(option, "error")) {
46                 state->ws_error_action = die_on_ws_error;
47                 return 0;
48         }
49         if (!strcmp(option, "error-all")) {
50                 state->ws_error_action = die_on_ws_error;
51                 state->squelch_whitespace_errors = 0;
52                 return 0;
53         }
54         if (!strcmp(option, "strip") || !strcmp(option, "fix")) {
55                 state->ws_error_action = correct_ws_error;
56                 return 0;
57         }
58         return error(_("unrecognized whitespace option '%s'"), option);
59 }
60
61 static int parse_ignorewhitespace_option(struct apply_state *state,
62                                                  const char *option)
63 {
64         if (!option || !strcmp(option, "no") ||
65             !strcmp(option, "false") || !strcmp(option, "never") ||
66             !strcmp(option, "none")) {
67                 state->ws_ignore_action = ignore_ws_none;
68                 return 0;
69         }
70         if (!strcmp(option, "change")) {
71                 state->ws_ignore_action = ignore_ws_change;
72                 return 0;
73         }
74         return error(_("unrecognized whitespace ignore option '%s'"), option);
75 }
76
77 int init_apply_state(struct apply_state *state,
78                      const char *prefix,
79                      struct lock_file *lock_file)
80 {
81         memset(state, 0, sizeof(*state));
82         state->prefix = prefix;
83         state->prefix_length = state->prefix ? strlen(state->prefix) : 0;
84         state->lock_file = lock_file;
85         state->newfd = -1;
86         state->apply = 1;
87         state->line_termination = '\n';
88         state->p_value = 1;
89         state->p_context = UINT_MAX;
90         state->squelch_whitespace_errors = 5;
91         state->ws_error_action = warn_on_ws_error;
92         state->ws_ignore_action = ignore_ws_none;
93         state->linenr = 1;
94         string_list_init(&state->fn_table, 0);
95         string_list_init(&state->limit_by_name, 0);
96         string_list_init(&state->symlink_changes, 0);
97         strbuf_init(&state->root, 0);
98
99         git_apply_config();
100         if (apply_default_whitespace && parse_whitespace_option(state, apply_default_whitespace))
101                 return -1;
102         if (apply_default_ignorewhitespace && parse_ignorewhitespace_option(state, apply_default_ignorewhitespace))
103                 return -1;
104         return 0;
105 }
106
107 void clear_apply_state(struct apply_state *state)
108 {
109         string_list_clear(&state->limit_by_name, 0);
110         string_list_clear(&state->symlink_changes, 0);
111         strbuf_release(&state->root);
112
113         /* &state->fn_table is cleared at the end of apply_patch() */
114 }
115
116 static void mute_routine(const char *msg, va_list params)
117 {
118         /* do nothing */
119 }
120
121 int check_apply_state(struct apply_state *state, int force_apply)
122 {
123         int is_not_gitdir = !startup_info->have_repository;
124
125         if (state->apply_with_reject && state->threeway)
126                 return error(_("--reject and --3way cannot be used together."));
127         if (state->cached && state->threeway)
128                 return error(_("--cached and --3way cannot be used together."));
129         if (state->threeway) {
130                 if (is_not_gitdir)
131                         return error(_("--3way outside a repository"));
132                 state->check_index = 1;
133         }
134         if (state->apply_with_reject) {
135                 state->apply = 1;
136                 if (state->apply_verbosity == verbosity_normal)
137                         state->apply_verbosity = verbosity_verbose;
138         }
139         if (!force_apply && (state->diffstat || state->numstat || state->summary || state->check || state->fake_ancestor))
140                 state->apply = 0;
141         if (state->check_index && is_not_gitdir)
142                 return error(_("--index outside a repository"));
143         if (state->cached) {
144                 if (is_not_gitdir)
145                         return error(_("--cached outside a repository"));
146                 state->check_index = 1;
147         }
148         if (state->check_index)
149                 state->unsafe_paths = 0;
150         if (!state->lock_file)
151                 return error("BUG: state->lock_file should not be NULL");
152
153         if (state->apply_verbosity <= verbosity_silent) {
154                 state->saved_error_routine = get_error_routine();
155                 state->saved_warn_routine = get_warn_routine();
156                 set_error_routine(mute_routine);
157                 set_warn_routine(mute_routine);
158         }
159
160         return 0;
161 }
162
163 static void set_default_whitespace_mode(struct apply_state *state)
164 {
165         if (!state->whitespace_option && !apply_default_whitespace)
166                 state->ws_error_action = (state->apply ? warn_on_ws_error : nowarn_ws_error);
167 }
168
169 /*
170  * This represents one "hunk" from a patch, starting with
171  * "@@ -oldpos,oldlines +newpos,newlines @@" marker.  The
172  * patch text is pointed at by patch, and its byte length
173  * is stored in size.  leading and trailing are the number
174  * of context lines.
175  */
176 struct fragment {
177         unsigned long leading, trailing;
178         unsigned long oldpos, oldlines;
179         unsigned long newpos, newlines;
180         /*
181          * 'patch' is usually borrowed from buf in apply_patch(),
182          * but some codepaths store an allocated buffer.
183          */
184         const char *patch;
185         unsigned free_patch:1,
186                 rejected:1;
187         int size;
188         int linenr;
189         struct fragment *next;
190 };
191
192 /*
193  * When dealing with a binary patch, we reuse "leading" field
194  * to store the type of the binary hunk, either deflated "delta"
195  * or deflated "literal".
196  */
197 #define binary_patch_method leading
198 #define BINARY_DELTA_DEFLATED   1
199 #define BINARY_LITERAL_DEFLATED 2
200
201 /*
202  * This represents a "patch" to a file, both metainfo changes
203  * such as creation/deletion, filemode and content changes represented
204  * as a series of fragments.
205  */
206 struct patch {
207         char *new_name, *old_name, *def_name;
208         unsigned int old_mode, new_mode;
209         int is_new, is_delete;  /* -1 = unknown, 0 = false, 1 = true */
210         int rejected;
211         unsigned ws_rule;
212         int lines_added, lines_deleted;
213         int score;
214         int extension_linenr; /* first line specifying delete/new/rename/copy */
215         unsigned int is_toplevel_relative:1;
216         unsigned int inaccurate_eof:1;
217         unsigned int is_binary:1;
218         unsigned int is_copy:1;
219         unsigned int is_rename:1;
220         unsigned int recount:1;
221         unsigned int conflicted_threeway:1;
222         unsigned int direct_to_threeway:1;
223         struct fragment *fragments;
224         char *result;
225         size_t resultsize;
226         char old_sha1_prefix[41];
227         char new_sha1_prefix[41];
228         struct patch *next;
229
230         /* three-way fallback result */
231         struct object_id threeway_stage[3];
232 };
233
234 static void free_fragment_list(struct fragment *list)
235 {
236         while (list) {
237                 struct fragment *next = list->next;
238                 if (list->free_patch)
239                         free((char *)list->patch);
240                 free(list);
241                 list = next;
242         }
243 }
244
245 static void free_patch(struct patch *patch)
246 {
247         free_fragment_list(patch->fragments);
248         free(patch->def_name);
249         free(patch->old_name);
250         free(patch->new_name);
251         free(patch->result);
252         free(patch);
253 }
254
255 static void free_patch_list(struct patch *list)
256 {
257         while (list) {
258                 struct patch *next = list->next;
259                 free_patch(list);
260                 list = next;
261         }
262 }
263
264 /*
265  * A line in a file, len-bytes long (includes the terminating LF,
266  * except for an incomplete line at the end if the file ends with
267  * one), and its contents hashes to 'hash'.
268  */
269 struct line {
270         size_t len;
271         unsigned hash : 24;
272         unsigned flag : 8;
273 #define LINE_COMMON     1
274 #define LINE_PATCHED    2
275 };
276
277 /*
278  * This represents a "file", which is an array of "lines".
279  */
280 struct image {
281         char *buf;
282         size_t len;
283         size_t nr;
284         size_t alloc;
285         struct line *line_allocated;
286         struct line *line;
287 };
288
289 static uint32_t hash_line(const char *cp, size_t len)
290 {
291         size_t i;
292         uint32_t h;
293         for (i = 0, h = 0; i < len; i++) {
294                 if (!isspace(cp[i])) {
295                         h = h * 3 + (cp[i] & 0xff);
296                 }
297         }
298         return h;
299 }
300
301 /*
302  * Compare lines s1 of length n1 and s2 of length n2, ignoring
303  * whitespace difference. Returns 1 if they match, 0 otherwise
304  */
305 static int fuzzy_matchlines(const char *s1, size_t n1,
306                             const char *s2, size_t n2)
307 {
308         const char *last1 = s1 + n1 - 1;
309         const char *last2 = s2 + n2 - 1;
310         int result = 0;
311
312         /* ignore line endings */
313         while ((*last1 == '\r') || (*last1 == '\n'))
314                 last1--;
315         while ((*last2 == '\r') || (*last2 == '\n'))
316                 last2--;
317
318         /* skip leading whitespaces, if both begin with whitespace */
319         if (s1 <= last1 && s2 <= last2 && isspace(*s1) && isspace(*s2)) {
320                 while (isspace(*s1) && (s1 <= last1))
321                         s1++;
322                 while (isspace(*s2) && (s2 <= last2))
323                         s2++;
324         }
325         /* early return if both lines are empty */
326         if ((s1 > last1) && (s2 > last2))
327                 return 1;
328         while (!result) {
329                 result = *s1++ - *s2++;
330                 /*
331                  * Skip whitespace inside. We check for whitespace on
332                  * both buffers because we don't want "a b" to match
333                  * "ab"
334                  */
335                 if (isspace(*s1) && isspace(*s2)) {
336                         while (isspace(*s1) && s1 <= last1)
337                                 s1++;
338                         while (isspace(*s2) && s2 <= last2)
339                                 s2++;
340                 }
341                 /*
342                  * If we reached the end on one side only,
343                  * lines don't match
344                  */
345                 if (
346                     ((s2 > last2) && (s1 <= last1)) ||
347                     ((s1 > last1) && (s2 <= last2)))
348                         return 0;
349                 if ((s1 > last1) && (s2 > last2))
350                         break;
351         }
352
353         return !result;
354 }
355
356 static void add_line_info(struct image *img, const char *bol, size_t len, unsigned flag)
357 {
358         ALLOC_GROW(img->line_allocated, img->nr + 1, img->alloc);
359         img->line_allocated[img->nr].len = len;
360         img->line_allocated[img->nr].hash = hash_line(bol, len);
361         img->line_allocated[img->nr].flag = flag;
362         img->nr++;
363 }
364
365 /*
366  * "buf" has the file contents to be patched (read from various sources).
367  * attach it to "image" and add line-based index to it.
368  * "image" now owns the "buf".
369  */
370 static void prepare_image(struct image *image, char *buf, size_t len,
371                           int prepare_linetable)
372 {
373         const char *cp, *ep;
374
375         memset(image, 0, sizeof(*image));
376         image->buf = buf;
377         image->len = len;
378
379         if (!prepare_linetable)
380                 return;
381
382         ep = image->buf + image->len;
383         cp = image->buf;
384         while (cp < ep) {
385                 const char *next;
386                 for (next = cp; next < ep && *next != '\n'; next++)
387                         ;
388                 if (next < ep)
389                         next++;
390                 add_line_info(image, cp, next - cp, 0);
391                 cp = next;
392         }
393         image->line = image->line_allocated;
394 }
395
396 static void clear_image(struct image *image)
397 {
398         free(image->buf);
399         free(image->line_allocated);
400         memset(image, 0, sizeof(*image));
401 }
402
403 /* fmt must contain _one_ %s and no other substitution */
404 static void say_patch_name(FILE *output, const char *fmt, struct patch *patch)
405 {
406         struct strbuf sb = STRBUF_INIT;
407
408         if (patch->old_name && patch->new_name &&
409             strcmp(patch->old_name, patch->new_name)) {
410                 quote_c_style(patch->old_name, &sb, NULL, 0);
411                 strbuf_addstr(&sb, " => ");
412                 quote_c_style(patch->new_name, &sb, NULL, 0);
413         } else {
414                 const char *n = patch->new_name;
415                 if (!n)
416                         n = patch->old_name;
417                 quote_c_style(n, &sb, NULL, 0);
418         }
419         fprintf(output, fmt, sb.buf);
420         fputc('\n', output);
421         strbuf_release(&sb);
422 }
423
424 #define SLOP (16)
425
426 static int read_patch_file(struct strbuf *sb, int fd)
427 {
428         if (strbuf_read(sb, fd, 0) < 0)
429                 return error_errno("git apply: failed to read");
430
431         /*
432          * Make sure that we have some slop in the buffer
433          * so that we can do speculative "memcmp" etc, and
434          * see to it that it is NUL-filled.
435          */
436         strbuf_grow(sb, SLOP);
437         memset(sb->buf + sb->len, 0, SLOP);
438         return 0;
439 }
440
441 static unsigned long linelen(const char *buffer, unsigned long size)
442 {
443         unsigned long len = 0;
444         while (size--) {
445                 len++;
446                 if (*buffer++ == '\n')
447                         break;
448         }
449         return len;
450 }
451
452 static int is_dev_null(const char *str)
453 {
454         return skip_prefix(str, "/dev/null", &str) && isspace(*str);
455 }
456
457 #define TERM_SPACE      1
458 #define TERM_TAB        2
459
460 static int name_terminate(int c, int terminate)
461 {
462         if (c == ' ' && !(terminate & TERM_SPACE))
463                 return 0;
464         if (c == '\t' && !(terminate & TERM_TAB))
465                 return 0;
466
467         return 1;
468 }
469
470 /* remove double slashes to make --index work with such filenames */
471 static char *squash_slash(char *name)
472 {
473         int i = 0, j = 0;
474
475         if (!name)
476                 return NULL;
477
478         while (name[i]) {
479                 if ((name[j++] = name[i++]) == '/')
480                         while (name[i] == '/')
481                                 i++;
482         }
483         name[j] = '\0';
484         return name;
485 }
486
487 static char *find_name_gnu(struct apply_state *state,
488                            const char *line,
489                            const char *def,
490                            int p_value)
491 {
492         struct strbuf name = STRBUF_INIT;
493         char *cp;
494
495         /*
496          * Proposed "new-style" GNU patch/diff format; see
497          * http://marc.info/?l=git&m=112927316408690&w=2
498          */
499         if (unquote_c_style(&name, line, NULL)) {
500                 strbuf_release(&name);
501                 return NULL;
502         }
503
504         for (cp = name.buf; p_value; p_value--) {
505                 cp = strchr(cp, '/');
506                 if (!cp) {
507                         strbuf_release(&name);
508                         return NULL;
509                 }
510                 cp++;
511         }
512
513         strbuf_remove(&name, 0, cp - name.buf);
514         if (state->root.len)
515                 strbuf_insert(&name, 0, state->root.buf, state->root.len);
516         return squash_slash(strbuf_detach(&name, NULL));
517 }
518
519 static size_t sane_tz_len(const char *line, size_t len)
520 {
521         const char *tz, *p;
522
523         if (len < strlen(" +0500") || line[len-strlen(" +0500")] != ' ')
524                 return 0;
525         tz = line + len - strlen(" +0500");
526
527         if (tz[1] != '+' && tz[1] != '-')
528                 return 0;
529
530         for (p = tz + 2; p != line + len; p++)
531                 if (!isdigit(*p))
532                         return 0;
533
534         return line + len - tz;
535 }
536
537 static size_t tz_with_colon_len(const char *line, size_t len)
538 {
539         const char *tz, *p;
540
541         if (len < strlen(" +08:00") || line[len - strlen(":00")] != ':')
542                 return 0;
543         tz = line + len - strlen(" +08:00");
544
545         if (tz[0] != ' ' || (tz[1] != '+' && tz[1] != '-'))
546                 return 0;
547         p = tz + 2;
548         if (!isdigit(*p++) || !isdigit(*p++) || *p++ != ':' ||
549             !isdigit(*p++) || !isdigit(*p++))
550                 return 0;
551
552         return line + len - tz;
553 }
554
555 static size_t date_len(const char *line, size_t len)
556 {
557         const char *date, *p;
558
559         if (len < strlen("72-02-05") || line[len-strlen("-05")] != '-')
560                 return 0;
561         p = date = line + len - strlen("72-02-05");
562
563         if (!isdigit(*p++) || !isdigit(*p++) || *p++ != '-' ||
564             !isdigit(*p++) || !isdigit(*p++) || *p++ != '-' ||
565             !isdigit(*p++) || !isdigit(*p++))   /* Not a date. */
566                 return 0;
567
568         if (date - line >= strlen("19") &&
569             isdigit(date[-1]) && isdigit(date[-2]))     /* 4-digit year */
570                 date -= strlen("19");
571
572         return line + len - date;
573 }
574
575 static size_t short_time_len(const char *line, size_t len)
576 {
577         const char *time, *p;
578
579         if (len < strlen(" 07:01:32") || line[len-strlen(":32")] != ':')
580                 return 0;
581         p = time = line + len - strlen(" 07:01:32");
582
583         /* Permit 1-digit hours? */
584         if (*p++ != ' ' ||
585             !isdigit(*p++) || !isdigit(*p++) || *p++ != ':' ||
586             !isdigit(*p++) || !isdigit(*p++) || *p++ != ':' ||
587             !isdigit(*p++) || !isdigit(*p++))   /* Not a time. */
588                 return 0;
589
590         return line + len - time;
591 }
592
593 static size_t fractional_time_len(const char *line, size_t len)
594 {
595         const char *p;
596         size_t n;
597
598         /* Expected format: 19:41:17.620000023 */
599         if (!len || !isdigit(line[len - 1]))
600                 return 0;
601         p = line + len - 1;
602
603         /* Fractional seconds. */
604         while (p > line && isdigit(*p))
605                 p--;
606         if (*p != '.')
607                 return 0;
608
609         /* Hours, minutes, and whole seconds. */
610         n = short_time_len(line, p - line);
611         if (!n)
612                 return 0;
613
614         return line + len - p + n;
615 }
616
617 static size_t trailing_spaces_len(const char *line, size_t len)
618 {
619         const char *p;
620
621         /* Expected format: ' ' x (1 or more)  */
622         if (!len || line[len - 1] != ' ')
623                 return 0;
624
625         p = line + len;
626         while (p != line) {
627                 p--;
628                 if (*p != ' ')
629                         return line + len - (p + 1);
630         }
631
632         /* All spaces! */
633         return len;
634 }
635
636 static size_t diff_timestamp_len(const char *line, size_t len)
637 {
638         const char *end = line + len;
639         size_t n;
640
641         /*
642          * Posix: 2010-07-05 19:41:17
643          * GNU: 2010-07-05 19:41:17.620000023 -0500
644          */
645
646         if (!isdigit(end[-1]))
647                 return 0;
648
649         n = sane_tz_len(line, end - line);
650         if (!n)
651                 n = tz_with_colon_len(line, end - line);
652         end -= n;
653
654         n = short_time_len(line, end - line);
655         if (!n)
656                 n = fractional_time_len(line, end - line);
657         end -= n;
658
659         n = date_len(line, end - line);
660         if (!n) /* No date.  Too bad. */
661                 return 0;
662         end -= n;
663
664         if (end == line)        /* No space before date. */
665                 return 0;
666         if (end[-1] == '\t') {  /* Success! */
667                 end--;
668                 return line + len - end;
669         }
670         if (end[-1] != ' ')     /* No space before date. */
671                 return 0;
672
673         /* Whitespace damage. */
674         end -= trailing_spaces_len(line, end - line);
675         return line + len - end;
676 }
677
678 static char *find_name_common(struct apply_state *state,
679                               const char *line,
680                               const char *def,
681                               int p_value,
682                               const char *end,
683                               int terminate)
684 {
685         int len;
686         const char *start = NULL;
687
688         if (p_value == 0)
689                 start = line;
690         while (line != end) {
691                 char c = *line;
692
693                 if (!end && isspace(c)) {
694                         if (c == '\n')
695                                 break;
696                         if (name_terminate(c, terminate))
697                                 break;
698                 }
699                 line++;
700                 if (c == '/' && !--p_value)
701                         start = line;
702         }
703         if (!start)
704                 return squash_slash(xstrdup_or_null(def));
705         len = line - start;
706         if (!len)
707                 return squash_slash(xstrdup_or_null(def));
708
709         /*
710          * Generally we prefer the shorter name, especially
711          * if the other one is just a variation of that with
712          * something else tacked on to the end (ie "file.orig"
713          * or "file~").
714          */
715         if (def) {
716                 int deflen = strlen(def);
717                 if (deflen < len && !strncmp(start, def, deflen))
718                         return squash_slash(xstrdup(def));
719         }
720
721         if (state->root.len) {
722                 char *ret = xstrfmt("%s%.*s", state->root.buf, len, start);
723                 return squash_slash(ret);
724         }
725
726         return squash_slash(xmemdupz(start, len));
727 }
728
729 static char *find_name(struct apply_state *state,
730                        const char *line,
731                        char *def,
732                        int p_value,
733                        int terminate)
734 {
735         if (*line == '"') {
736                 char *name = find_name_gnu(state, line, def, p_value);
737                 if (name)
738                         return name;
739         }
740
741         return find_name_common(state, line, def, p_value, NULL, terminate);
742 }
743
744 static char *find_name_traditional(struct apply_state *state,
745                                    const char *line,
746                                    char *def,
747                                    int p_value)
748 {
749         size_t len;
750         size_t date_len;
751
752         if (*line == '"') {
753                 char *name = find_name_gnu(state, line, def, p_value);
754                 if (name)
755                         return name;
756         }
757
758         len = strchrnul(line, '\n') - line;
759         date_len = diff_timestamp_len(line, len);
760         if (!date_len)
761                 return find_name_common(state, line, def, p_value, NULL, TERM_TAB);
762         len -= date_len;
763
764         return find_name_common(state, line, def, p_value, line + len, 0);
765 }
766
767 /*
768  * Given the string after "--- " or "+++ ", guess the appropriate
769  * p_value for the given patch.
770  */
771 static int guess_p_value(struct apply_state *state, const char *nameline)
772 {
773         char *name, *cp;
774         int val = -1;
775
776         if (is_dev_null(nameline))
777                 return -1;
778         name = find_name_traditional(state, nameline, NULL, 0);
779         if (!name)
780                 return -1;
781         cp = strchr(name, '/');
782         if (!cp)
783                 val = 0;
784         else if (state->prefix) {
785                 /*
786                  * Does it begin with "a/$our-prefix" and such?  Then this is
787                  * very likely to apply to our directory.
788                  */
789                 if (!strncmp(name, state->prefix, state->prefix_length))
790                         val = count_slashes(state->prefix);
791                 else {
792                         cp++;
793                         if (!strncmp(cp, state->prefix, state->prefix_length))
794                                 val = count_slashes(state->prefix) + 1;
795                 }
796         }
797         free(name);
798         return val;
799 }
800
801 /*
802  * Does the ---/+++ line have the POSIX timestamp after the last HT?
803  * GNU diff puts epoch there to signal a creation/deletion event.  Is
804  * this such a timestamp?
805  */
806 static int has_epoch_timestamp(const char *nameline)
807 {
808         /*
809          * We are only interested in epoch timestamp; any non-zero
810          * fraction cannot be one, hence "(\.0+)?" in the regexp below.
811          * For the same reason, the date must be either 1969-12-31 or
812          * 1970-01-01, and the seconds part must be "00".
813          */
814         const char stamp_regexp[] =
815                 "^(1969-12-31|1970-01-01)"
816                 " "
817                 "[0-2][0-9]:[0-5][0-9]:00(\\.0+)?"
818                 " "
819                 "([-+][0-2][0-9]:?[0-5][0-9])\n";
820         const char *timestamp = NULL, *cp, *colon;
821         static regex_t *stamp;
822         regmatch_t m[10];
823         int zoneoffset;
824         int hourminute;
825         int status;
826
827         for (cp = nameline; *cp != '\n'; cp++) {
828                 if (*cp == '\t')
829                         timestamp = cp + 1;
830         }
831         if (!timestamp)
832                 return 0;
833         if (!stamp) {
834                 stamp = xmalloc(sizeof(*stamp));
835                 if (regcomp(stamp, stamp_regexp, REG_EXTENDED)) {
836                         warning(_("Cannot prepare timestamp regexp %s"),
837                                 stamp_regexp);
838                         return 0;
839                 }
840         }
841
842         status = regexec(stamp, timestamp, ARRAY_SIZE(m), m, 0);
843         if (status) {
844                 if (status != REG_NOMATCH)
845                         warning(_("regexec returned %d for input: %s"),
846                                 status, timestamp);
847                 return 0;
848         }
849
850         zoneoffset = strtol(timestamp + m[3].rm_so + 1, (char **) &colon, 10);
851         if (*colon == ':')
852                 zoneoffset = zoneoffset * 60 + strtol(colon + 1, NULL, 10);
853         else
854                 zoneoffset = (zoneoffset / 100) * 60 + (zoneoffset % 100);
855         if (timestamp[m[3].rm_so] == '-')
856                 zoneoffset = -zoneoffset;
857
858         /*
859          * YYYY-MM-DD hh:mm:ss must be from either 1969-12-31
860          * (west of GMT) or 1970-01-01 (east of GMT)
861          */
862         if ((zoneoffset < 0 && memcmp(timestamp, "1969-12-31", 10)) ||
863             (0 <= zoneoffset && memcmp(timestamp, "1970-01-01", 10)))
864                 return 0;
865
866         hourminute = (strtol(timestamp + 11, NULL, 10) * 60 +
867                       strtol(timestamp + 14, NULL, 10) -
868                       zoneoffset);
869
870         return ((zoneoffset < 0 && hourminute == 1440) ||
871                 (0 <= zoneoffset && !hourminute));
872 }
873
874 /*
875  * Get the name etc info from the ---/+++ lines of a traditional patch header
876  *
877  * FIXME! The end-of-filename heuristics are kind of screwy. For existing
878  * files, we can happily check the index for a match, but for creating a
879  * new file we should try to match whatever "patch" does. I have no idea.
880  */
881 static int parse_traditional_patch(struct apply_state *state,
882                                    const char *first,
883                                    const char *second,
884                                    struct patch *patch)
885 {
886         char *name;
887
888         first += 4;     /* skip "--- " */
889         second += 4;    /* skip "+++ " */
890         if (!state->p_value_known) {
891                 int p, q;
892                 p = guess_p_value(state, first);
893                 q = guess_p_value(state, second);
894                 if (p < 0) p = q;
895                 if (0 <= p && p == q) {
896                         state->p_value = p;
897                         state->p_value_known = 1;
898                 }
899         }
900         if (is_dev_null(first)) {
901                 patch->is_new = 1;
902                 patch->is_delete = 0;
903                 name = find_name_traditional(state, second, NULL, state->p_value);
904                 patch->new_name = name;
905         } else if (is_dev_null(second)) {
906                 patch->is_new = 0;
907                 patch->is_delete = 1;
908                 name = find_name_traditional(state, first, NULL, state->p_value);
909                 patch->old_name = name;
910         } else {
911                 char *first_name;
912                 first_name = find_name_traditional(state, first, NULL, state->p_value);
913                 name = find_name_traditional(state, second, first_name, state->p_value);
914                 free(first_name);
915                 if (has_epoch_timestamp(first)) {
916                         patch->is_new = 1;
917                         patch->is_delete = 0;
918                         patch->new_name = name;
919                 } else if (has_epoch_timestamp(second)) {
920                         patch->is_new = 0;
921                         patch->is_delete = 1;
922                         patch->old_name = name;
923                 } else {
924                         patch->old_name = name;
925                         patch->new_name = xstrdup_or_null(name);
926                 }
927         }
928         if (!name)
929                 return error(_("unable to find filename in patch at line %d"), state->linenr);
930
931         return 0;
932 }
933
934 static int gitdiff_hdrend(struct apply_state *state,
935                           const char *line,
936                           struct patch *patch)
937 {
938         return 1;
939 }
940
941 /*
942  * We're anal about diff header consistency, to make
943  * sure that we don't end up having strange ambiguous
944  * patches floating around.
945  *
946  * As a result, gitdiff_{old|new}name() will check
947  * their names against any previous information, just
948  * to make sure..
949  */
950 #define DIFF_OLD_NAME 0
951 #define DIFF_NEW_NAME 1
952
953 static int gitdiff_verify_name(struct apply_state *state,
954                                const char *line,
955                                int isnull,
956                                char **name,
957                                int side)
958 {
959         if (!*name && !isnull) {
960                 *name = find_name(state, line, NULL, state->p_value, TERM_TAB);
961                 return 0;
962         }
963
964         if (*name) {
965                 int len = strlen(*name);
966                 char *another;
967                 if (isnull)
968                         return error(_("git apply: bad git-diff - expected /dev/null, got %s on line %d"),
969                                      *name, state->linenr);
970                 another = find_name(state, line, NULL, state->p_value, TERM_TAB);
971                 if (!another || memcmp(another, *name, len + 1)) {
972                         free(another);
973                         return error((side == DIFF_NEW_NAME) ?
974                             _("git apply: bad git-diff - inconsistent new filename on line %d") :
975                             _("git apply: bad git-diff - inconsistent old filename on line %d"), state->linenr);
976                 }
977                 free(another);
978         } else {
979                 if (!starts_with(line, "/dev/null\n"))
980                         return error(_("git apply: bad git-diff - expected /dev/null on line %d"), state->linenr);
981         }
982
983         return 0;
984 }
985
986 static int gitdiff_oldname(struct apply_state *state,
987                            const char *line,
988                            struct patch *patch)
989 {
990         return gitdiff_verify_name(state, line,
991                                    patch->is_new, &patch->old_name,
992                                    DIFF_OLD_NAME);
993 }
994
995 static int gitdiff_newname(struct apply_state *state,
996                            const char *line,
997                            struct patch *patch)
998 {
999         return gitdiff_verify_name(state, line,
1000                                    patch->is_delete, &patch->new_name,
1001                                    DIFF_NEW_NAME);
1002 }
1003
1004 static int parse_mode_line(const char *line, int linenr, unsigned int *mode)
1005 {
1006         char *end;
1007         *mode = strtoul(line, &end, 8);
1008         if (end == line || !isspace(*end))
1009                 return error(_("invalid mode on line %d: %s"), linenr, line);
1010         return 0;
1011 }
1012
1013 static int gitdiff_oldmode(struct apply_state *state,
1014                            const char *line,
1015                            struct patch *patch)
1016 {
1017         return parse_mode_line(line, state->linenr, &patch->old_mode);
1018 }
1019
1020 static int gitdiff_newmode(struct apply_state *state,
1021                            const char *line,
1022                            struct patch *patch)
1023 {
1024         return parse_mode_line(line, state->linenr, &patch->new_mode);
1025 }
1026
1027 static int gitdiff_delete(struct apply_state *state,
1028                           const char *line,
1029                           struct patch *patch)
1030 {
1031         patch->is_delete = 1;
1032         free(patch->old_name);
1033         patch->old_name = xstrdup_or_null(patch->def_name);
1034         return gitdiff_oldmode(state, line, patch);
1035 }
1036
1037 static int gitdiff_newfile(struct apply_state *state,
1038                            const char *line,
1039                            struct patch *patch)
1040 {
1041         patch->is_new = 1;
1042         free(patch->new_name);
1043         patch->new_name = xstrdup_or_null(patch->def_name);
1044         return gitdiff_newmode(state, line, patch);
1045 }
1046
1047 static int gitdiff_copysrc(struct apply_state *state,
1048                            const char *line,
1049                            struct patch *patch)
1050 {
1051         patch->is_copy = 1;
1052         free(patch->old_name);
1053         patch->old_name = find_name(state, line, NULL, state->p_value ? state->p_value - 1 : 0, 0);
1054         return 0;
1055 }
1056
1057 static int gitdiff_copydst(struct apply_state *state,
1058                            const char *line,
1059                            struct patch *patch)
1060 {
1061         patch->is_copy = 1;
1062         free(patch->new_name);
1063         patch->new_name = find_name(state, line, NULL, state->p_value ? state->p_value - 1 : 0, 0);
1064         return 0;
1065 }
1066
1067 static int gitdiff_renamesrc(struct apply_state *state,
1068                              const char *line,
1069                              struct patch *patch)
1070 {
1071         patch->is_rename = 1;
1072         free(patch->old_name);
1073         patch->old_name = find_name(state, line, NULL, state->p_value ? state->p_value - 1 : 0, 0);
1074         return 0;
1075 }
1076
1077 static int gitdiff_renamedst(struct apply_state *state,
1078                              const char *line,
1079                              struct patch *patch)
1080 {
1081         patch->is_rename = 1;
1082         free(patch->new_name);
1083         patch->new_name = find_name(state, line, NULL, state->p_value ? state->p_value - 1 : 0, 0);
1084         return 0;
1085 }
1086
1087 static int gitdiff_similarity(struct apply_state *state,
1088                               const char *line,
1089                               struct patch *patch)
1090 {
1091         unsigned long val = strtoul(line, NULL, 10);
1092         if (val <= 100)
1093                 patch->score = val;
1094         return 0;
1095 }
1096
1097 static int gitdiff_dissimilarity(struct apply_state *state,
1098                                  const char *line,
1099                                  struct patch *patch)
1100 {
1101         unsigned long val = strtoul(line, NULL, 10);
1102         if (val <= 100)
1103                 patch->score = val;
1104         return 0;
1105 }
1106
1107 static int gitdiff_index(struct apply_state *state,
1108                          const char *line,
1109                          struct patch *patch)
1110 {
1111         /*
1112          * index line is N hexadecimal, "..", N hexadecimal,
1113          * and optional space with octal mode.
1114          */
1115         const char *ptr, *eol;
1116         int len;
1117
1118         ptr = strchr(line, '.');
1119         if (!ptr || ptr[1] != '.' || 40 < ptr - line)
1120                 return 0;
1121         len = ptr - line;
1122         memcpy(patch->old_sha1_prefix, line, len);
1123         patch->old_sha1_prefix[len] = 0;
1124
1125         line = ptr + 2;
1126         ptr = strchr(line, ' ');
1127         eol = strchrnul(line, '\n');
1128
1129         if (!ptr || eol < ptr)
1130                 ptr = eol;
1131         len = ptr - line;
1132
1133         if (40 < len)
1134                 return 0;
1135         memcpy(patch->new_sha1_prefix, line, len);
1136         patch->new_sha1_prefix[len] = 0;
1137         if (*ptr == ' ')
1138                 return gitdiff_oldmode(state, ptr + 1, patch);
1139         return 0;
1140 }
1141
1142 /*
1143  * This is normal for a diff that doesn't change anything: we'll fall through
1144  * into the next diff. Tell the parser to break out.
1145  */
1146 static int gitdiff_unrecognized(struct apply_state *state,
1147                                 const char *line,
1148                                 struct patch *patch)
1149 {
1150         return 1;
1151 }
1152
1153 /*
1154  * Skip p_value leading components from "line"; as we do not accept
1155  * absolute paths, return NULL in that case.
1156  */
1157 static const char *skip_tree_prefix(struct apply_state *state,
1158                                     const char *line,
1159                                     int llen)
1160 {
1161         int nslash;
1162         int i;
1163
1164         if (!state->p_value)
1165                 return (llen && line[0] == '/') ? NULL : line;
1166
1167         nslash = state->p_value;
1168         for (i = 0; i < llen; i++) {
1169                 int ch = line[i];
1170                 if (ch == '/' && --nslash <= 0)
1171                         return (i == 0) ? NULL : &line[i + 1];
1172         }
1173         return NULL;
1174 }
1175
1176 /*
1177  * This is to extract the same name that appears on "diff --git"
1178  * line.  We do not find and return anything if it is a rename
1179  * patch, and it is OK because we will find the name elsewhere.
1180  * We need to reliably find name only when it is mode-change only,
1181  * creation or deletion of an empty file.  In any of these cases,
1182  * both sides are the same name under a/ and b/ respectively.
1183  */
1184 static char *git_header_name(struct apply_state *state,
1185                              const char *line,
1186                              int llen)
1187 {
1188         const char *name;
1189         const char *second = NULL;
1190         size_t len, line_len;
1191
1192         line += strlen("diff --git ");
1193         llen -= strlen("diff --git ");
1194
1195         if (*line == '"') {
1196                 const char *cp;
1197                 struct strbuf first = STRBUF_INIT;
1198                 struct strbuf sp = STRBUF_INIT;
1199
1200                 if (unquote_c_style(&first, line, &second))
1201                         goto free_and_fail1;
1202
1203                 /* strip the a/b prefix including trailing slash */
1204                 cp = skip_tree_prefix(state, first.buf, first.len);
1205                 if (!cp)
1206                         goto free_and_fail1;
1207                 strbuf_remove(&first, 0, cp - first.buf);
1208
1209                 /*
1210                  * second points at one past closing dq of name.
1211                  * find the second name.
1212                  */
1213                 while ((second < line + llen) && isspace(*second))
1214                         second++;
1215
1216                 if (line + llen <= second)
1217                         goto free_and_fail1;
1218                 if (*second == '"') {
1219                         if (unquote_c_style(&sp, second, NULL))
1220                                 goto free_and_fail1;
1221                         cp = skip_tree_prefix(state, sp.buf, sp.len);
1222                         if (!cp)
1223                                 goto free_and_fail1;
1224                         /* They must match, otherwise ignore */
1225                         if (strcmp(cp, first.buf))
1226                                 goto free_and_fail1;
1227                         strbuf_release(&sp);
1228                         return strbuf_detach(&first, NULL);
1229                 }
1230
1231                 /* unquoted second */
1232                 cp = skip_tree_prefix(state, second, line + llen - second);
1233                 if (!cp)
1234                         goto free_and_fail1;
1235                 if (line + llen - cp != first.len ||
1236                     memcmp(first.buf, cp, first.len))
1237                         goto free_and_fail1;
1238                 return strbuf_detach(&first, NULL);
1239
1240         free_and_fail1:
1241                 strbuf_release(&first);
1242                 strbuf_release(&sp);
1243                 return NULL;
1244         }
1245
1246         /* unquoted first name */
1247         name = skip_tree_prefix(state, line, llen);
1248         if (!name)
1249                 return NULL;
1250
1251         /*
1252          * since the first name is unquoted, a dq if exists must be
1253          * the beginning of the second name.
1254          */
1255         for (second = name; second < line + llen; second++) {
1256                 if (*second == '"') {
1257                         struct strbuf sp = STRBUF_INIT;
1258                         const char *np;
1259
1260                         if (unquote_c_style(&sp, second, NULL))
1261                                 goto free_and_fail2;
1262
1263                         np = skip_tree_prefix(state, sp.buf, sp.len);
1264                         if (!np)
1265                                 goto free_and_fail2;
1266
1267                         len = sp.buf + sp.len - np;
1268                         if (len < second - name &&
1269                             !strncmp(np, name, len) &&
1270                             isspace(name[len])) {
1271                                 /* Good */
1272                                 strbuf_remove(&sp, 0, np - sp.buf);
1273                                 return strbuf_detach(&sp, NULL);
1274                         }
1275
1276                 free_and_fail2:
1277                         strbuf_release(&sp);
1278                         return NULL;
1279                 }
1280         }
1281
1282         /*
1283          * Accept a name only if it shows up twice, exactly the same
1284          * form.
1285          */
1286         second = strchr(name, '\n');
1287         if (!second)
1288                 return NULL;
1289         line_len = second - name;
1290         for (len = 0 ; ; len++) {
1291                 switch (name[len]) {
1292                 default:
1293                         continue;
1294                 case '\n':
1295                         return NULL;
1296                 case '\t': case ' ':
1297                         /*
1298                          * Is this the separator between the preimage
1299                          * and the postimage pathname?  Again, we are
1300                          * only interested in the case where there is
1301                          * no rename, as this is only to set def_name
1302                          * and a rename patch has the names elsewhere
1303                          * in an unambiguous form.
1304                          */
1305                         if (!name[len + 1])
1306                                 return NULL; /* no postimage name */
1307                         second = skip_tree_prefix(state, name + len + 1,
1308                                                   line_len - (len + 1));
1309                         if (!second)
1310                                 return NULL;
1311                         /*
1312                          * Does len bytes starting at "name" and "second"
1313                          * (that are separated by one HT or SP we just
1314                          * found) exactly match?
1315                          */
1316                         if (second[len] == '\n' && !strncmp(name, second, len))
1317                                 return xmemdupz(name, len);
1318                 }
1319         }
1320 }
1321
1322 static int check_header_line(struct apply_state *state, struct patch *patch)
1323 {
1324         int extensions = (patch->is_delete == 1) + (patch->is_new == 1) +
1325                          (patch->is_rename == 1) + (patch->is_copy == 1);
1326         if (extensions > 1)
1327                 return error(_("inconsistent header lines %d and %d"),
1328                              patch->extension_linenr, state->linenr);
1329         if (extensions && !patch->extension_linenr)
1330                 patch->extension_linenr = state->linenr;
1331         return 0;
1332 }
1333
1334 /* Verify that we recognize the lines following a git header */
1335 static int parse_git_header(struct apply_state *state,
1336                             const char *line,
1337                             int len,
1338                             unsigned int size,
1339                             struct patch *patch)
1340 {
1341         unsigned long offset;
1342
1343         /* A git diff has explicit new/delete information, so we don't guess */
1344         patch->is_new = 0;
1345         patch->is_delete = 0;
1346
1347         /*
1348          * Some things may not have the old name in the
1349          * rest of the headers anywhere (pure mode changes,
1350          * or removing or adding empty files), so we get
1351          * the default name from the header.
1352          */
1353         patch->def_name = git_header_name(state, line, len);
1354         if (patch->def_name && state->root.len) {
1355                 char *s = xstrfmt("%s%s", state->root.buf, patch->def_name);
1356                 free(patch->def_name);
1357                 patch->def_name = s;
1358         }
1359
1360         line += len;
1361         size -= len;
1362         state->linenr++;
1363         for (offset = len ; size > 0 ; offset += len, size -= len, line += len, state->linenr++) {
1364                 static const struct opentry {
1365                         const char *str;
1366                         int (*fn)(struct apply_state *, const char *, struct patch *);
1367                 } optable[] = {
1368                         { "@@ -", gitdiff_hdrend },
1369                         { "--- ", gitdiff_oldname },
1370                         { "+++ ", gitdiff_newname },
1371                         { "old mode ", gitdiff_oldmode },
1372                         { "new mode ", gitdiff_newmode },
1373                         { "deleted file mode ", gitdiff_delete },
1374                         { "new file mode ", gitdiff_newfile },
1375                         { "copy from ", gitdiff_copysrc },
1376                         { "copy to ", gitdiff_copydst },
1377                         { "rename old ", gitdiff_renamesrc },
1378                         { "rename new ", gitdiff_renamedst },
1379                         { "rename from ", gitdiff_renamesrc },
1380                         { "rename to ", gitdiff_renamedst },
1381                         { "similarity index ", gitdiff_similarity },
1382                         { "dissimilarity index ", gitdiff_dissimilarity },
1383                         { "index ", gitdiff_index },
1384                         { "", gitdiff_unrecognized },
1385                 };
1386                 int i;
1387
1388                 len = linelen(line, size);
1389                 if (!len || line[len-1] != '\n')
1390                         break;
1391                 for (i = 0; i < ARRAY_SIZE(optable); i++) {
1392                         const struct opentry *p = optable + i;
1393                         int oplen = strlen(p->str);
1394                         int res;
1395                         if (len < oplen || memcmp(p->str, line, oplen))
1396                                 continue;
1397                         res = p->fn(state, line + oplen, patch);
1398                         if (res < 0)
1399                                 return -1;
1400                         if (check_header_line(state, patch))
1401                                 return -1;
1402                         if (res > 0)
1403                                 return offset;
1404                         break;
1405                 }
1406         }
1407
1408         return offset;
1409 }
1410
1411 static int parse_num(const char *line, unsigned long *p)
1412 {
1413         char *ptr;
1414
1415         if (!isdigit(*line))
1416                 return 0;
1417         *p = strtoul(line, &ptr, 10);
1418         return ptr - line;
1419 }
1420
1421 static int parse_range(const char *line, int len, int offset, const char *expect,
1422                        unsigned long *p1, unsigned long *p2)
1423 {
1424         int digits, ex;
1425
1426         if (offset < 0 || offset >= len)
1427                 return -1;
1428         line += offset;
1429         len -= offset;
1430
1431         digits = parse_num(line, p1);
1432         if (!digits)
1433                 return -1;
1434
1435         offset += digits;
1436         line += digits;
1437         len -= digits;
1438
1439         *p2 = 1;
1440         if (*line == ',') {
1441                 digits = parse_num(line+1, p2);
1442                 if (!digits)
1443                         return -1;
1444
1445                 offset += digits+1;
1446                 line += digits+1;
1447                 len -= digits+1;
1448         }
1449
1450         ex = strlen(expect);
1451         if (ex > len)
1452                 return -1;
1453         if (memcmp(line, expect, ex))
1454                 return -1;
1455
1456         return offset + ex;
1457 }
1458
1459 static void recount_diff(const char *line, int size, struct fragment *fragment)
1460 {
1461         int oldlines = 0, newlines = 0, ret = 0;
1462
1463         if (size < 1) {
1464                 warning("recount: ignore empty hunk");
1465                 return;
1466         }
1467
1468         for (;;) {
1469                 int len = linelen(line, size);
1470                 size -= len;
1471                 line += len;
1472
1473                 if (size < 1)
1474                         break;
1475
1476                 switch (*line) {
1477                 case ' ': case '\n':
1478                         newlines++;
1479                         /* fall through */
1480                 case '-':
1481                         oldlines++;
1482                         continue;
1483                 case '+':
1484                         newlines++;
1485                         continue;
1486                 case '\\':
1487                         continue;
1488                 case '@':
1489                         ret = size < 3 || !starts_with(line, "@@ ");
1490                         break;
1491                 case 'd':
1492                         ret = size < 5 || !starts_with(line, "diff ");
1493                         break;
1494                 default:
1495                         ret = -1;
1496                         break;
1497                 }
1498                 if (ret) {
1499                         warning(_("recount: unexpected line: %.*s"),
1500                                 (int)linelen(line, size), line);
1501                         return;
1502                 }
1503                 break;
1504         }
1505         fragment->oldlines = oldlines;
1506         fragment->newlines = newlines;
1507 }
1508
1509 /*
1510  * Parse a unified diff fragment header of the
1511  * form "@@ -a,b +c,d @@"
1512  */
1513 static int parse_fragment_header(const char *line, int len, struct fragment *fragment)
1514 {
1515         int offset;
1516
1517         if (!len || line[len-1] != '\n')
1518                 return -1;
1519
1520         /* Figure out the number of lines in a fragment */
1521         offset = parse_range(line, len, 4, " +", &fragment->oldpos, &fragment->oldlines);
1522         offset = parse_range(line, len, offset, " @@", &fragment->newpos, &fragment->newlines);
1523
1524         return offset;
1525 }
1526
1527 /*
1528  * Find file diff header
1529  *
1530  * Returns:
1531  *  -1 if no header was found
1532  *  -128 in case of error
1533  *   the size of the header in bytes (called "offset") otherwise
1534  */
1535 static int find_header(struct apply_state *state,
1536                        const char *line,
1537                        unsigned long size,
1538                        int *hdrsize,
1539                        struct patch *patch)
1540 {
1541         unsigned long offset, len;
1542
1543         patch->is_toplevel_relative = 0;
1544         patch->is_rename = patch->is_copy = 0;
1545         patch->is_new = patch->is_delete = -1;
1546         patch->old_mode = patch->new_mode = 0;
1547         patch->old_name = patch->new_name = NULL;
1548         for (offset = 0; size > 0; offset += len, size -= len, line += len, state->linenr++) {
1549                 unsigned long nextlen;
1550
1551                 len = linelen(line, size);
1552                 if (!len)
1553                         break;
1554
1555                 /* Testing this early allows us to take a few shortcuts.. */
1556                 if (len < 6)
1557                         continue;
1558
1559                 /*
1560                  * Make sure we don't find any unconnected patch fragments.
1561                  * That's a sign that we didn't find a header, and that a
1562                  * patch has become corrupted/broken up.
1563                  */
1564                 if (!memcmp("@@ -", line, 4)) {
1565                         struct fragment dummy;
1566                         if (parse_fragment_header(line, len, &dummy) < 0)
1567                                 continue;
1568                         error(_("patch fragment without header at line %d: %.*s"),
1569                                      state->linenr, (int)len-1, line);
1570                         return -128;
1571                 }
1572
1573                 if (size < len + 6)
1574                         break;
1575
1576                 /*
1577                  * Git patch? It might not have a real patch, just a rename
1578                  * or mode change, so we handle that specially
1579                  */
1580                 if (!memcmp("diff --git ", line, 11)) {
1581                         int git_hdr_len = parse_git_header(state, line, len, size, patch);
1582                         if (git_hdr_len < 0)
1583                                 return -128;
1584                         if (git_hdr_len <= len)
1585                                 continue;
1586                         if (!patch->old_name && !patch->new_name) {
1587                                 if (!patch->def_name) {
1588                                         error(Q_("git diff header lacks filename information when removing "
1589                                                         "%d leading pathname component (line %d)",
1590                                                         "git diff header lacks filename information when removing "
1591                                                         "%d leading pathname components (line %d)",
1592                                                         state->p_value),
1593                                                      state->p_value, state->linenr);
1594                                         return -128;
1595                                 }
1596                                 patch->old_name = xstrdup(patch->def_name);
1597                                 patch->new_name = xstrdup(patch->def_name);
1598                         }
1599                         if ((!patch->new_name && !patch->is_delete) ||
1600                             (!patch->old_name && !patch->is_new)) {
1601                                 error(_("git diff header lacks filename information "
1602                                              "(line %d)"), state->linenr);
1603                                 return -128;
1604                         }
1605                         patch->is_toplevel_relative = 1;
1606                         *hdrsize = git_hdr_len;
1607                         return offset;
1608                 }
1609
1610                 /* --- followed by +++ ? */
1611                 if (memcmp("--- ", line,  4) || memcmp("+++ ", line + len, 4))
1612                         continue;
1613
1614                 /*
1615                  * We only accept unified patches, so we want it to
1616                  * at least have "@@ -a,b +c,d @@\n", which is 14 chars
1617                  * minimum ("@@ -0,0 +1 @@\n" is the shortest).
1618                  */
1619                 nextlen = linelen(line + len, size - len);
1620                 if (size < nextlen + 14 || memcmp("@@ -", line + len + nextlen, 4))
1621                         continue;
1622
1623                 /* Ok, we'll consider it a patch */
1624                 if (parse_traditional_patch(state, line, line+len, patch))
1625                         return -128;
1626                 *hdrsize = len + nextlen;
1627                 state->linenr += 2;
1628                 return offset;
1629         }
1630         return -1;
1631 }
1632
1633 static void record_ws_error(struct apply_state *state,
1634                             unsigned result,
1635                             const char *line,
1636                             int len,
1637                             int linenr)
1638 {
1639         char *err;
1640
1641         if (!result)
1642                 return;
1643
1644         state->whitespace_error++;
1645         if (state->squelch_whitespace_errors &&
1646             state->squelch_whitespace_errors < state->whitespace_error)
1647                 return;
1648
1649         err = whitespace_error_string(result);
1650         if (state->apply_verbosity > verbosity_silent)
1651                 fprintf(stderr, "%s:%d: %s.\n%.*s\n",
1652                         state->patch_input_file, linenr, err, len, line);
1653         free(err);
1654 }
1655
1656 static void check_whitespace(struct apply_state *state,
1657                              const char *line,
1658                              int len,
1659                              unsigned ws_rule)
1660 {
1661         unsigned result = ws_check(line + 1, len - 1, ws_rule);
1662
1663         record_ws_error(state, result, line + 1, len - 2, state->linenr);
1664 }
1665
1666 /*
1667  * Parse a unified diff. Note that this really needs to parse each
1668  * fragment separately, since the only way to know the difference
1669  * between a "---" that is part of a patch, and a "---" that starts
1670  * the next patch is to look at the line counts..
1671  */
1672 static int parse_fragment(struct apply_state *state,
1673                           const char *line,
1674                           unsigned long size,
1675                           struct patch *patch,
1676                           struct fragment *fragment)
1677 {
1678         int added, deleted;
1679         int len = linelen(line, size), offset;
1680         unsigned long oldlines, newlines;
1681         unsigned long leading, trailing;
1682
1683         offset = parse_fragment_header(line, len, fragment);
1684         if (offset < 0)
1685                 return -1;
1686         if (offset > 0 && patch->recount)
1687                 recount_diff(line + offset, size - offset, fragment);
1688         oldlines = fragment->oldlines;
1689         newlines = fragment->newlines;
1690         leading = 0;
1691         trailing = 0;
1692
1693         /* Parse the thing.. */
1694         line += len;
1695         size -= len;
1696         state->linenr++;
1697         added = deleted = 0;
1698         for (offset = len;
1699              0 < size;
1700              offset += len, size -= len, line += len, state->linenr++) {
1701                 if (!oldlines && !newlines)
1702                         break;
1703                 len = linelen(line, size);
1704                 if (!len || line[len-1] != '\n')
1705                         return -1;
1706                 switch (*line) {
1707                 default:
1708                         return -1;
1709                 case '\n': /* newer GNU diff, an empty context line */
1710                 case ' ':
1711                         oldlines--;
1712                         newlines--;
1713                         if (!deleted && !added)
1714                                 leading++;
1715                         trailing++;
1716                         if (!state->apply_in_reverse &&
1717                             state->ws_error_action == correct_ws_error)
1718                                 check_whitespace(state, line, len, patch->ws_rule);
1719                         break;
1720                 case '-':
1721                         if (state->apply_in_reverse &&
1722                             state->ws_error_action != nowarn_ws_error)
1723                                 check_whitespace(state, line, len, patch->ws_rule);
1724                         deleted++;
1725                         oldlines--;
1726                         trailing = 0;
1727                         break;
1728                 case '+':
1729                         if (!state->apply_in_reverse &&
1730                             state->ws_error_action != nowarn_ws_error)
1731                                 check_whitespace(state, line, len, patch->ws_rule);
1732                         added++;
1733                         newlines--;
1734                         trailing = 0;
1735                         break;
1736
1737                 /*
1738                  * We allow "\ No newline at end of file". Depending
1739                  * on locale settings when the patch was produced we
1740                  * don't know what this line looks like. The only
1741                  * thing we do know is that it begins with "\ ".
1742                  * Checking for 12 is just for sanity check -- any
1743                  * l10n of "\ No newline..." is at least that long.
1744                  */
1745                 case '\\':
1746                         if (len < 12 || memcmp(line, "\\ ", 2))
1747                                 return -1;
1748                         break;
1749                 }
1750         }
1751         if (oldlines || newlines)
1752                 return -1;
1753         if (!deleted && !added)
1754                 return -1;
1755
1756         fragment->leading = leading;
1757         fragment->trailing = trailing;
1758
1759         /*
1760          * If a fragment ends with an incomplete line, we failed to include
1761          * it in the above loop because we hit oldlines == newlines == 0
1762          * before seeing it.
1763          */
1764         if (12 < size && !memcmp(line, "\\ ", 2))
1765                 offset += linelen(line, size);
1766
1767         patch->lines_added += added;
1768         patch->lines_deleted += deleted;
1769
1770         if (0 < patch->is_new && oldlines)
1771                 return error(_("new file depends on old contents"));
1772         if (0 < patch->is_delete && newlines)
1773                 return error(_("deleted file still has contents"));
1774         return offset;
1775 }
1776
1777 /*
1778  * We have seen "diff --git a/... b/..." header (or a traditional patch
1779  * header).  Read hunks that belong to this patch into fragments and hang
1780  * them to the given patch structure.
1781  *
1782  * The (fragment->patch, fragment->size) pair points into the memory given
1783  * by the caller, not a copy, when we return.
1784  *
1785  * Returns:
1786  *   -1 in case of error,
1787  *   the number of bytes in the patch otherwise.
1788  */
1789 static int parse_single_patch(struct apply_state *state,
1790                               const char *line,
1791                               unsigned long size,
1792                               struct patch *patch)
1793 {
1794         unsigned long offset = 0;
1795         unsigned long oldlines = 0, newlines = 0, context = 0;
1796         struct fragment **fragp = &patch->fragments;
1797
1798         while (size > 4 && !memcmp(line, "@@ -", 4)) {
1799                 struct fragment *fragment;
1800                 int len;
1801
1802                 fragment = xcalloc(1, sizeof(*fragment));
1803                 fragment->linenr = state->linenr;
1804                 len = parse_fragment(state, line, size, patch, fragment);
1805                 if (len <= 0) {
1806                         free(fragment);
1807                         return error(_("corrupt patch at line %d"), state->linenr);
1808                 }
1809                 fragment->patch = line;
1810                 fragment->size = len;
1811                 oldlines += fragment->oldlines;
1812                 newlines += fragment->newlines;
1813                 context += fragment->leading + fragment->trailing;
1814
1815                 *fragp = fragment;
1816                 fragp = &fragment->next;
1817
1818                 offset += len;
1819                 line += len;
1820                 size -= len;
1821         }
1822
1823         /*
1824          * If something was removed (i.e. we have old-lines) it cannot
1825          * be creation, and if something was added it cannot be
1826          * deletion.  However, the reverse is not true; --unified=0
1827          * patches that only add are not necessarily creation even
1828          * though they do not have any old lines, and ones that only
1829          * delete are not necessarily deletion.
1830          *
1831          * Unfortunately, a real creation/deletion patch do _not_ have
1832          * any context line by definition, so we cannot safely tell it
1833          * apart with --unified=0 insanity.  At least if the patch has
1834          * more than one hunk it is not creation or deletion.
1835          */
1836         if (patch->is_new < 0 &&
1837             (oldlines || (patch->fragments && patch->fragments->next)))
1838                 patch->is_new = 0;
1839         if (patch->is_delete < 0 &&
1840             (newlines || (patch->fragments && patch->fragments->next)))
1841                 patch->is_delete = 0;
1842
1843         if (0 < patch->is_new && oldlines)
1844                 return error(_("new file %s depends on old contents"), patch->new_name);
1845         if (0 < patch->is_delete && newlines)
1846                 return error(_("deleted file %s still has contents"), patch->old_name);
1847         if (!patch->is_delete && !newlines && context && state->apply_verbosity > verbosity_silent)
1848                 fprintf_ln(stderr,
1849                            _("** warning: "
1850                              "file %s becomes empty but is not deleted"),
1851                            patch->new_name);
1852
1853         return offset;
1854 }
1855
1856 static inline int metadata_changes(struct patch *patch)
1857 {
1858         return  patch->is_rename > 0 ||
1859                 patch->is_copy > 0 ||
1860                 patch->is_new > 0 ||
1861                 patch->is_delete ||
1862                 (patch->old_mode && patch->new_mode &&
1863                  patch->old_mode != patch->new_mode);
1864 }
1865
1866 static char *inflate_it(const void *data, unsigned long size,
1867                         unsigned long inflated_size)
1868 {
1869         git_zstream stream;
1870         void *out;
1871         int st;
1872
1873         memset(&stream, 0, sizeof(stream));
1874
1875         stream.next_in = (unsigned char *)data;
1876         stream.avail_in = size;
1877         stream.next_out = out = xmalloc(inflated_size);
1878         stream.avail_out = inflated_size;
1879         git_inflate_init(&stream);
1880         st = git_inflate(&stream, Z_FINISH);
1881         git_inflate_end(&stream);
1882         if ((st != Z_STREAM_END) || stream.total_out != inflated_size) {
1883                 free(out);
1884                 return NULL;
1885         }
1886         return out;
1887 }
1888
1889 /*
1890  * Read a binary hunk and return a new fragment; fragment->patch
1891  * points at an allocated memory that the caller must free, so
1892  * it is marked as "->free_patch = 1".
1893  */
1894 static struct fragment *parse_binary_hunk(struct apply_state *state,
1895                                           char **buf_p,
1896                                           unsigned long *sz_p,
1897                                           int *status_p,
1898                                           int *used_p)
1899 {
1900         /*
1901          * Expect a line that begins with binary patch method ("literal"
1902          * or "delta"), followed by the length of data before deflating.
1903          * a sequence of 'length-byte' followed by base-85 encoded data
1904          * should follow, terminated by a newline.
1905          *
1906          * Each 5-byte sequence of base-85 encodes up to 4 bytes,
1907          * and we would limit the patch line to 66 characters,
1908          * so one line can fit up to 13 groups that would decode
1909          * to 52 bytes max.  The length byte 'A'-'Z' corresponds
1910          * to 1-26 bytes, and 'a'-'z' corresponds to 27-52 bytes.
1911          */
1912         int llen, used;
1913         unsigned long size = *sz_p;
1914         char *buffer = *buf_p;
1915         int patch_method;
1916         unsigned long origlen;
1917         char *data = NULL;
1918         int hunk_size = 0;
1919         struct fragment *frag;
1920
1921         llen = linelen(buffer, size);
1922         used = llen;
1923
1924         *status_p = 0;
1925
1926         if (starts_with(buffer, "delta ")) {
1927                 patch_method = BINARY_DELTA_DEFLATED;
1928                 origlen = strtoul(buffer + 6, NULL, 10);
1929         }
1930         else if (starts_with(buffer, "literal ")) {
1931                 patch_method = BINARY_LITERAL_DEFLATED;
1932                 origlen = strtoul(buffer + 8, NULL, 10);
1933         }
1934         else
1935                 return NULL;
1936
1937         state->linenr++;
1938         buffer += llen;
1939         while (1) {
1940                 int byte_length, max_byte_length, newsize;
1941                 llen = linelen(buffer, size);
1942                 used += llen;
1943                 state->linenr++;
1944                 if (llen == 1) {
1945                         /* consume the blank line */
1946                         buffer++;
1947                         size--;
1948                         break;
1949                 }
1950                 /*
1951                  * Minimum line is "A00000\n" which is 7-byte long,
1952                  * and the line length must be multiple of 5 plus 2.
1953                  */
1954                 if ((llen < 7) || (llen-2) % 5)
1955                         goto corrupt;
1956                 max_byte_length = (llen - 2) / 5 * 4;
1957                 byte_length = *buffer;
1958                 if ('A' <= byte_length && byte_length <= 'Z')
1959                         byte_length = byte_length - 'A' + 1;
1960                 else if ('a' <= byte_length && byte_length <= 'z')
1961                         byte_length = byte_length - 'a' + 27;
1962                 else
1963                         goto corrupt;
1964                 /* if the input length was not multiple of 4, we would
1965                  * have filler at the end but the filler should never
1966                  * exceed 3 bytes
1967                  */
1968                 if (max_byte_length < byte_length ||
1969                     byte_length <= max_byte_length - 4)
1970                         goto corrupt;
1971                 newsize = hunk_size + byte_length;
1972                 data = xrealloc(data, newsize);
1973                 if (decode_85(data + hunk_size, buffer + 1, byte_length))
1974                         goto corrupt;
1975                 hunk_size = newsize;
1976                 buffer += llen;
1977                 size -= llen;
1978         }
1979
1980         frag = xcalloc(1, sizeof(*frag));
1981         frag->patch = inflate_it(data, hunk_size, origlen);
1982         frag->free_patch = 1;
1983         if (!frag->patch)
1984                 goto corrupt;
1985         free(data);
1986         frag->size = origlen;
1987         *buf_p = buffer;
1988         *sz_p = size;
1989         *used_p = used;
1990         frag->binary_patch_method = patch_method;
1991         return frag;
1992
1993  corrupt:
1994         free(data);
1995         *status_p = -1;
1996         error(_("corrupt binary patch at line %d: %.*s"),
1997               state->linenr-1, llen-1, buffer);
1998         return NULL;
1999 }
2000
2001 /*
2002  * Returns:
2003  *   -1 in case of error,
2004  *   the length of the parsed binary patch otherwise
2005  */
2006 static int parse_binary(struct apply_state *state,
2007                         char *buffer,
2008                         unsigned long size,
2009                         struct patch *patch)
2010 {
2011         /*
2012          * We have read "GIT binary patch\n"; what follows is a line
2013          * that says the patch method (currently, either "literal" or
2014          * "delta") and the length of data before deflating; a
2015          * sequence of 'length-byte' followed by base-85 encoded data
2016          * follows.
2017          *
2018          * When a binary patch is reversible, there is another binary
2019          * hunk in the same format, starting with patch method (either
2020          * "literal" or "delta") with the length of data, and a sequence
2021          * of length-byte + base-85 encoded data, terminated with another
2022          * empty line.  This data, when applied to the postimage, produces
2023          * the preimage.
2024          */
2025         struct fragment *forward;
2026         struct fragment *reverse;
2027         int status;
2028         int used, used_1;
2029
2030         forward = parse_binary_hunk(state, &buffer, &size, &status, &used);
2031         if (!forward && !status)
2032                 /* there has to be one hunk (forward hunk) */
2033                 return error(_("unrecognized binary patch at line %d"), state->linenr-1);
2034         if (status)
2035                 /* otherwise we already gave an error message */
2036                 return status;
2037
2038         reverse = parse_binary_hunk(state, &buffer, &size, &status, &used_1);
2039         if (reverse)
2040                 used += used_1;
2041         else if (status) {
2042                 /*
2043                  * Not having reverse hunk is not an error, but having
2044                  * a corrupt reverse hunk is.
2045                  */
2046                 free((void*) forward->patch);
2047                 free(forward);
2048                 return status;
2049         }
2050         forward->next = reverse;
2051         patch->fragments = forward;
2052         patch->is_binary = 1;
2053         return used;
2054 }
2055
2056 static void prefix_one(struct apply_state *state, char **name)
2057 {
2058         char *old_name = *name;
2059         if (!old_name)
2060                 return;
2061         *name = prefix_filename(state->prefix, *name);
2062         free(old_name);
2063 }
2064
2065 static void prefix_patch(struct apply_state *state, struct patch *p)
2066 {
2067         if (!state->prefix || p->is_toplevel_relative)
2068                 return;
2069         prefix_one(state, &p->new_name);
2070         prefix_one(state, &p->old_name);
2071 }
2072
2073 /*
2074  * include/exclude
2075  */
2076
2077 static void add_name_limit(struct apply_state *state,
2078                            const char *name,
2079                            int exclude)
2080 {
2081         struct string_list_item *it;
2082
2083         it = string_list_append(&state->limit_by_name, name);
2084         it->util = exclude ? NULL : (void *) 1;
2085 }
2086
2087 static int use_patch(struct apply_state *state, struct patch *p)
2088 {
2089         const char *pathname = p->new_name ? p->new_name : p->old_name;
2090         int i;
2091
2092         /* Paths outside are not touched regardless of "--include" */
2093         if (0 < state->prefix_length) {
2094                 int pathlen = strlen(pathname);
2095                 if (pathlen <= state->prefix_length ||
2096                     memcmp(state->prefix, pathname, state->prefix_length))
2097                         return 0;
2098         }
2099
2100         /* See if it matches any of exclude/include rule */
2101         for (i = 0; i < state->limit_by_name.nr; i++) {
2102                 struct string_list_item *it = &state->limit_by_name.items[i];
2103                 if (!wildmatch(it->string, pathname, 0, NULL))
2104                         return (it->util != NULL);
2105         }
2106
2107         /*
2108          * If we had any include, a path that does not match any rule is
2109          * not used.  Otherwise, we saw bunch of exclude rules (or none)
2110          * and such a path is used.
2111          */
2112         return !state->has_include;
2113 }
2114
2115 /*
2116  * Read the patch text in "buffer" that extends for "size" bytes; stop
2117  * reading after seeing a single patch (i.e. changes to a single file).
2118  * Create fragments (i.e. patch hunks) and hang them to the given patch.
2119  *
2120  * Returns:
2121  *   -1 if no header was found or parse_binary() failed,
2122  *   -128 on another error,
2123  *   the number of bytes consumed otherwise,
2124  *     so that the caller can call us again for the next patch.
2125  */
2126 static int parse_chunk(struct apply_state *state, char *buffer, unsigned long size, struct patch *patch)
2127 {
2128         int hdrsize, patchsize;
2129         int offset = find_header(state, buffer, size, &hdrsize, patch);
2130
2131         if (offset < 0)
2132                 return offset;
2133
2134         prefix_patch(state, patch);
2135
2136         if (!use_patch(state, patch))
2137                 patch->ws_rule = 0;
2138         else
2139                 patch->ws_rule = whitespace_rule(patch->new_name
2140                                                  ? patch->new_name
2141                                                  : patch->old_name);
2142
2143         patchsize = parse_single_patch(state,
2144                                        buffer + offset + hdrsize,
2145                                        size - offset - hdrsize,
2146                                        patch);
2147
2148         if (patchsize < 0)
2149                 return -128;
2150
2151         if (!patchsize) {
2152                 static const char git_binary[] = "GIT binary patch\n";
2153                 int hd = hdrsize + offset;
2154                 unsigned long llen = linelen(buffer + hd, size - hd);
2155
2156                 if (llen == sizeof(git_binary) - 1 &&
2157                     !memcmp(git_binary, buffer + hd, llen)) {
2158                         int used;
2159                         state->linenr++;
2160                         used = parse_binary(state, buffer + hd + llen,
2161                                             size - hd - llen, patch);
2162                         if (used < 0)
2163                                 return -1;
2164                         if (used)
2165                                 patchsize = used + llen;
2166                         else
2167                                 patchsize = 0;
2168                 }
2169                 else if (!memcmp(" differ\n", buffer + hd + llen - 8, 8)) {
2170                         static const char *binhdr[] = {
2171                                 "Binary files ",
2172                                 "Files ",
2173                                 NULL,
2174                         };
2175                         int i;
2176                         for (i = 0; binhdr[i]; i++) {
2177                                 int len = strlen(binhdr[i]);
2178                                 if (len < size - hd &&
2179                                     !memcmp(binhdr[i], buffer + hd, len)) {
2180                                         state->linenr++;
2181                                         patch->is_binary = 1;
2182                                         patchsize = llen;
2183                                         break;
2184                                 }
2185                         }
2186                 }
2187
2188                 /* Empty patch cannot be applied if it is a text patch
2189                  * without metadata change.  A binary patch appears
2190                  * empty to us here.
2191                  */
2192                 if ((state->apply || state->check) &&
2193                     (!patch->is_binary && !metadata_changes(patch))) {
2194                         error(_("patch with only garbage at line %d"), state->linenr);
2195                         return -128;
2196                 }
2197         }
2198
2199         return offset + hdrsize + patchsize;
2200 }
2201
2202 static void reverse_patches(struct patch *p)
2203 {
2204         for (; p; p = p->next) {
2205                 struct fragment *frag = p->fragments;
2206
2207                 SWAP(p->new_name, p->old_name);
2208                 SWAP(p->new_mode, p->old_mode);
2209                 SWAP(p->is_new, p->is_delete);
2210                 SWAP(p->lines_added, p->lines_deleted);
2211                 SWAP(p->old_sha1_prefix, p->new_sha1_prefix);
2212
2213                 for (; frag; frag = frag->next) {
2214                         SWAP(frag->newpos, frag->oldpos);
2215                         SWAP(frag->newlines, frag->oldlines);
2216                 }
2217         }
2218 }
2219
2220 static const char pluses[] =
2221 "++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++";
2222 static const char minuses[]=
2223 "----------------------------------------------------------------------";
2224
2225 static void show_stats(struct apply_state *state, struct patch *patch)
2226 {
2227         struct strbuf qname = STRBUF_INIT;
2228         char *cp = patch->new_name ? patch->new_name : patch->old_name;
2229         int max, add, del;
2230
2231         quote_c_style(cp, &qname, NULL, 0);
2232
2233         /*
2234          * "scale" the filename
2235          */
2236         max = state->max_len;
2237         if (max > 50)
2238                 max = 50;
2239
2240         if (qname.len > max) {
2241                 cp = strchr(qname.buf + qname.len + 3 - max, '/');
2242                 if (!cp)
2243                         cp = qname.buf + qname.len + 3 - max;
2244                 strbuf_splice(&qname, 0, cp - qname.buf, "...", 3);
2245         }
2246
2247         if (patch->is_binary) {
2248                 printf(" %-*s |  Bin\n", max, qname.buf);
2249                 strbuf_release(&qname);
2250                 return;
2251         }
2252
2253         printf(" %-*s |", max, qname.buf);
2254         strbuf_release(&qname);
2255
2256         /*
2257          * scale the add/delete
2258          */
2259         max = max + state->max_change > 70 ? 70 - max : state->max_change;
2260         add = patch->lines_added;
2261         del = patch->lines_deleted;
2262
2263         if (state->max_change > 0) {
2264                 int total = ((add + del) * max + state->max_change / 2) / state->max_change;
2265                 add = (add * max + state->max_change / 2) / state->max_change;
2266                 del = total - add;
2267         }
2268         printf("%5d %.*s%.*s\n", patch->lines_added + patch->lines_deleted,
2269                 add, pluses, del, minuses);
2270 }
2271
2272 static int read_old_data(struct stat *st, const char *path, struct strbuf *buf)
2273 {
2274         switch (st->st_mode & S_IFMT) {
2275         case S_IFLNK:
2276                 if (strbuf_readlink(buf, path, st->st_size) < 0)
2277                         return error(_("unable to read symlink %s"), path);
2278                 return 0;
2279         case S_IFREG:
2280                 if (strbuf_read_file(buf, path, st->st_size) != st->st_size)
2281                         return error(_("unable to open or read %s"), path);
2282                 convert_to_git(&the_index, path, buf->buf, buf->len, buf, 0);
2283                 return 0;
2284         default:
2285                 return -1;
2286         }
2287 }
2288
2289 /*
2290  * Update the preimage, and the common lines in postimage,
2291  * from buffer buf of length len. If postlen is 0 the postimage
2292  * is updated in place, otherwise it's updated on a new buffer
2293  * of length postlen
2294  */
2295
2296 static void update_pre_post_images(struct image *preimage,
2297                                    struct image *postimage,
2298                                    char *buf,
2299                                    size_t len, size_t postlen)
2300 {
2301         int i, ctx, reduced;
2302         char *new, *old, *fixed;
2303         struct image fixed_preimage;
2304
2305         /*
2306          * Update the preimage with whitespace fixes.  Note that we
2307          * are not losing preimage->buf -- apply_one_fragment() will
2308          * free "oldlines".
2309          */
2310         prepare_image(&fixed_preimage, buf, len, 1);
2311         assert(postlen
2312                ? fixed_preimage.nr == preimage->nr
2313                : fixed_preimage.nr <= preimage->nr);
2314         for (i = 0; i < fixed_preimage.nr; i++)
2315                 fixed_preimage.line[i].flag = preimage->line[i].flag;
2316         free(preimage->line_allocated);
2317         *preimage = fixed_preimage;
2318
2319         /*
2320          * Adjust the common context lines in postimage. This can be
2321          * done in-place when we are shrinking it with whitespace
2322          * fixing, but needs a new buffer when ignoring whitespace or
2323          * expanding leading tabs to spaces.
2324          *
2325          * We trust the caller to tell us if the update can be done
2326          * in place (postlen==0) or not.
2327          */
2328         old = postimage->buf;
2329         if (postlen)
2330                 new = postimage->buf = xmalloc(postlen);
2331         else
2332                 new = old;
2333         fixed = preimage->buf;
2334
2335         for (i = reduced = ctx = 0; i < postimage->nr; i++) {
2336                 size_t l_len = postimage->line[i].len;
2337                 if (!(postimage->line[i].flag & LINE_COMMON)) {
2338                         /* an added line -- no counterparts in preimage */
2339                         memmove(new, old, l_len);
2340                         old += l_len;
2341                         new += l_len;
2342                         continue;
2343                 }
2344
2345                 /* a common context -- skip it in the original postimage */
2346                 old += l_len;
2347
2348                 /* and find the corresponding one in the fixed preimage */
2349                 while (ctx < preimage->nr &&
2350                        !(preimage->line[ctx].flag & LINE_COMMON)) {
2351                         fixed += preimage->line[ctx].len;
2352                         ctx++;
2353                 }
2354
2355                 /*
2356                  * preimage is expected to run out, if the caller
2357                  * fixed addition of trailing blank lines.
2358                  */
2359                 if (preimage->nr <= ctx) {
2360                         reduced++;
2361                         continue;
2362                 }
2363
2364                 /* and copy it in, while fixing the line length */
2365                 l_len = preimage->line[ctx].len;
2366                 memcpy(new, fixed, l_len);
2367                 new += l_len;
2368                 fixed += l_len;
2369                 postimage->line[i].len = l_len;
2370                 ctx++;
2371         }
2372
2373         if (postlen
2374             ? postlen < new - postimage->buf
2375             : postimage->len < new - postimage->buf)
2376                 die("BUG: caller miscounted postlen: asked %d, orig = %d, used = %d",
2377                     (int)postlen, (int) postimage->len, (int)(new - postimage->buf));
2378
2379         /* Fix the length of the whole thing */
2380         postimage->len = new - postimage->buf;
2381         postimage->nr -= reduced;
2382 }
2383
2384 static int line_by_line_fuzzy_match(struct image *img,
2385                                     struct image *preimage,
2386                                     struct image *postimage,
2387                                     unsigned long try,
2388                                     int try_lno,
2389                                     int preimage_limit)
2390 {
2391         int i;
2392         size_t imgoff = 0;
2393         size_t preoff = 0;
2394         size_t postlen = postimage->len;
2395         size_t extra_chars;
2396         char *buf;
2397         char *preimage_eof;
2398         char *preimage_end;
2399         struct strbuf fixed;
2400         char *fixed_buf;
2401         size_t fixed_len;
2402
2403         for (i = 0; i < preimage_limit; i++) {
2404                 size_t prelen = preimage->line[i].len;
2405                 size_t imglen = img->line[try_lno+i].len;
2406
2407                 if (!fuzzy_matchlines(img->buf + try + imgoff, imglen,
2408                                       preimage->buf + preoff, prelen))
2409                         return 0;
2410                 if (preimage->line[i].flag & LINE_COMMON)
2411                         postlen += imglen - prelen;
2412                 imgoff += imglen;
2413                 preoff += prelen;
2414         }
2415
2416         /*
2417          * Ok, the preimage matches with whitespace fuzz.
2418          *
2419          * imgoff now holds the true length of the target that
2420          * matches the preimage before the end of the file.
2421          *
2422          * Count the number of characters in the preimage that fall
2423          * beyond the end of the file and make sure that all of them
2424          * are whitespace characters. (This can only happen if
2425          * we are removing blank lines at the end of the file.)
2426          */
2427         buf = preimage_eof = preimage->buf + preoff;
2428         for ( ; i < preimage->nr; i++)
2429                 preoff += preimage->line[i].len;
2430         preimage_end = preimage->buf + preoff;
2431         for ( ; buf < preimage_end; buf++)
2432                 if (!isspace(*buf))
2433                         return 0;
2434
2435         /*
2436          * Update the preimage and the common postimage context
2437          * lines to use the same whitespace as the target.
2438          * If whitespace is missing in the target (i.e.
2439          * if the preimage extends beyond the end of the file),
2440          * use the whitespace from the preimage.
2441          */
2442         extra_chars = preimage_end - preimage_eof;
2443         strbuf_init(&fixed, imgoff + extra_chars);
2444         strbuf_add(&fixed, img->buf + try, imgoff);
2445         strbuf_add(&fixed, preimage_eof, extra_chars);
2446         fixed_buf = strbuf_detach(&fixed, &fixed_len);
2447         update_pre_post_images(preimage, postimage,
2448                                fixed_buf, fixed_len, postlen);
2449         return 1;
2450 }
2451
2452 static int match_fragment(struct apply_state *state,
2453                           struct image *img,
2454                           struct image *preimage,
2455                           struct image *postimage,
2456                           unsigned long try,
2457                           int try_lno,
2458                           unsigned ws_rule,
2459                           int match_beginning, int match_end)
2460 {
2461         int i;
2462         char *fixed_buf, *buf, *orig, *target;
2463         struct strbuf fixed;
2464         size_t fixed_len, postlen;
2465         int preimage_limit;
2466
2467         if (preimage->nr + try_lno <= img->nr) {
2468                 /*
2469                  * The hunk falls within the boundaries of img.
2470                  */
2471                 preimage_limit = preimage->nr;
2472                 if (match_end && (preimage->nr + try_lno != img->nr))
2473                         return 0;
2474         } else if (state->ws_error_action == correct_ws_error &&
2475                    (ws_rule & WS_BLANK_AT_EOF)) {
2476                 /*
2477                  * This hunk extends beyond the end of img, and we are
2478                  * removing blank lines at the end of the file.  This
2479                  * many lines from the beginning of the preimage must
2480                  * match with img, and the remainder of the preimage
2481                  * must be blank.
2482                  */
2483                 preimage_limit = img->nr - try_lno;
2484         } else {
2485                 /*
2486                  * The hunk extends beyond the end of the img and
2487                  * we are not removing blanks at the end, so we
2488                  * should reject the hunk at this position.
2489                  */
2490                 return 0;
2491         }
2492
2493         if (match_beginning && try_lno)
2494                 return 0;
2495
2496         /* Quick hash check */
2497         for (i = 0; i < preimage_limit; i++)
2498                 if ((img->line[try_lno + i].flag & LINE_PATCHED) ||
2499                     (preimage->line[i].hash != img->line[try_lno + i].hash))
2500                         return 0;
2501
2502         if (preimage_limit == preimage->nr) {
2503                 /*
2504                  * Do we have an exact match?  If we were told to match
2505                  * at the end, size must be exactly at try+fragsize,
2506                  * otherwise try+fragsize must be still within the preimage,
2507                  * and either case, the old piece should match the preimage
2508                  * exactly.
2509                  */
2510                 if ((match_end
2511                      ? (try + preimage->len == img->len)
2512                      : (try + preimage->len <= img->len)) &&
2513                     !memcmp(img->buf + try, preimage->buf, preimage->len))
2514                         return 1;
2515         } else {
2516                 /*
2517                  * The preimage extends beyond the end of img, so
2518                  * there cannot be an exact match.
2519                  *
2520                  * There must be one non-blank context line that match
2521                  * a line before the end of img.
2522                  */
2523                 char *buf_end;
2524
2525                 buf = preimage->buf;
2526                 buf_end = buf;
2527                 for (i = 0; i < preimage_limit; i++)
2528                         buf_end += preimage->line[i].len;
2529
2530                 for ( ; buf < buf_end; buf++)
2531                         if (!isspace(*buf))
2532                                 break;
2533                 if (buf == buf_end)
2534                         return 0;
2535         }
2536
2537         /*
2538          * No exact match. If we are ignoring whitespace, run a line-by-line
2539          * fuzzy matching. We collect all the line length information because
2540          * we need it to adjust whitespace if we match.
2541          */
2542         if (state->ws_ignore_action == ignore_ws_change)
2543                 return line_by_line_fuzzy_match(img, preimage, postimage,
2544                                                 try, try_lno, preimage_limit);
2545
2546         if (state->ws_error_action != correct_ws_error)
2547                 return 0;
2548
2549         /*
2550          * The hunk does not apply byte-by-byte, but the hash says
2551          * it might with whitespace fuzz. We weren't asked to
2552          * ignore whitespace, we were asked to correct whitespace
2553          * errors, so let's try matching after whitespace correction.
2554          *
2555          * While checking the preimage against the target, whitespace
2556          * errors in both fixed, we count how large the corresponding
2557          * postimage needs to be.  The postimage prepared by
2558          * apply_one_fragment() has whitespace errors fixed on added
2559          * lines already, but the common lines were propagated as-is,
2560          * which may become longer when their whitespace errors are
2561          * fixed.
2562          */
2563
2564         /* First count added lines in postimage */
2565         postlen = 0;
2566         for (i = 0; i < postimage->nr; i++) {
2567                 if (!(postimage->line[i].flag & LINE_COMMON))
2568                         postlen += postimage->line[i].len;
2569         }
2570
2571         /*
2572          * The preimage may extend beyond the end of the file,
2573          * but in this loop we will only handle the part of the
2574          * preimage that falls within the file.
2575          */
2576         strbuf_init(&fixed, preimage->len + 1);
2577         orig = preimage->buf;
2578         target = img->buf + try;
2579         for (i = 0; i < preimage_limit; i++) {
2580                 size_t oldlen = preimage->line[i].len;
2581                 size_t tgtlen = img->line[try_lno + i].len;
2582                 size_t fixstart = fixed.len;
2583                 struct strbuf tgtfix;
2584                 int match;
2585
2586                 /* Try fixing the line in the preimage */
2587                 ws_fix_copy(&fixed, orig, oldlen, ws_rule, NULL);
2588
2589                 /* Try fixing the line in the target */
2590                 strbuf_init(&tgtfix, tgtlen);
2591                 ws_fix_copy(&tgtfix, target, tgtlen, ws_rule, NULL);
2592
2593                 /*
2594                  * If they match, either the preimage was based on
2595                  * a version before our tree fixed whitespace breakage,
2596                  * or we are lacking a whitespace-fix patch the tree
2597                  * the preimage was based on already had (i.e. target
2598                  * has whitespace breakage, the preimage doesn't).
2599                  * In either case, we are fixing the whitespace breakages
2600                  * so we might as well take the fix together with their
2601                  * real change.
2602                  */
2603                 match = (tgtfix.len == fixed.len - fixstart &&
2604                          !memcmp(tgtfix.buf, fixed.buf + fixstart,
2605                                              fixed.len - fixstart));
2606
2607                 /* Add the length if this is common with the postimage */
2608                 if (preimage->line[i].flag & LINE_COMMON)
2609                         postlen += tgtfix.len;
2610
2611                 strbuf_release(&tgtfix);
2612                 if (!match)
2613                         goto unmatch_exit;
2614
2615                 orig += oldlen;
2616                 target += tgtlen;
2617         }
2618
2619
2620         /*
2621          * Now handle the lines in the preimage that falls beyond the
2622          * end of the file (if any). They will only match if they are
2623          * empty or only contain whitespace (if WS_BLANK_AT_EOL is
2624          * false).
2625          */
2626         for ( ; i < preimage->nr; i++) {
2627                 size_t fixstart = fixed.len; /* start of the fixed preimage */
2628                 size_t oldlen = preimage->line[i].len;
2629                 int j;
2630
2631                 /* Try fixing the line in the preimage */
2632                 ws_fix_copy(&fixed, orig, oldlen, ws_rule, NULL);
2633
2634                 for (j = fixstart; j < fixed.len; j++)
2635                         if (!isspace(fixed.buf[j]))
2636                                 goto unmatch_exit;
2637
2638                 orig += oldlen;
2639         }
2640
2641         /*
2642          * Yes, the preimage is based on an older version that still
2643          * has whitespace breakages unfixed, and fixing them makes the
2644          * hunk match.  Update the context lines in the postimage.
2645          */
2646         fixed_buf = strbuf_detach(&fixed, &fixed_len);
2647         if (postlen < postimage->len)
2648                 postlen = 0;
2649         update_pre_post_images(preimage, postimage,
2650                                fixed_buf, fixed_len, postlen);
2651         return 1;
2652
2653  unmatch_exit:
2654         strbuf_release(&fixed);
2655         return 0;
2656 }
2657
2658 static int find_pos(struct apply_state *state,
2659                     struct image *img,
2660                     struct image *preimage,
2661                     struct image *postimage,
2662                     int line,
2663                     unsigned ws_rule,
2664                     int match_beginning, int match_end)
2665 {
2666         int i;
2667         unsigned long backwards, forwards, try;
2668         int backwards_lno, forwards_lno, try_lno;
2669
2670         /*
2671          * If match_beginning or match_end is specified, there is no
2672          * point starting from a wrong line that will never match and
2673          * wander around and wait for a match at the specified end.
2674          */
2675         if (match_beginning)
2676                 line = 0;
2677         else if (match_end)
2678                 line = img->nr - preimage->nr;
2679
2680         /*
2681          * Because the comparison is unsigned, the following test
2682          * will also take care of a negative line number that can
2683          * result when match_end and preimage is larger than the target.
2684          */
2685         if ((size_t) line > img->nr)
2686                 line = img->nr;
2687
2688         try = 0;
2689         for (i = 0; i < line; i++)
2690                 try += img->line[i].len;
2691
2692         /*
2693          * There's probably some smart way to do this, but I'll leave
2694          * that to the smart and beautiful people. I'm simple and stupid.
2695          */
2696         backwards = try;
2697         backwards_lno = line;
2698         forwards = try;
2699         forwards_lno = line;
2700         try_lno = line;
2701
2702         for (i = 0; ; i++) {
2703                 if (match_fragment(state, img, preimage, postimage,
2704                                    try, try_lno, ws_rule,
2705                                    match_beginning, match_end))
2706                         return try_lno;
2707
2708         again:
2709                 if (backwards_lno == 0 && forwards_lno == img->nr)
2710                         break;
2711
2712                 if (i & 1) {
2713                         if (backwards_lno == 0) {
2714                                 i++;
2715                                 goto again;
2716                         }
2717                         backwards_lno--;
2718                         backwards -= img->line[backwards_lno].len;
2719                         try = backwards;
2720                         try_lno = backwards_lno;
2721                 } else {
2722                         if (forwards_lno == img->nr) {
2723                                 i++;
2724                                 goto again;
2725                         }
2726                         forwards += img->line[forwards_lno].len;
2727                         forwards_lno++;
2728                         try = forwards;
2729                         try_lno = forwards_lno;
2730                 }
2731
2732         }
2733         return -1;
2734 }
2735
2736 static void remove_first_line(struct image *img)
2737 {
2738         img->buf += img->line[0].len;
2739         img->len -= img->line[0].len;
2740         img->line++;
2741         img->nr--;
2742 }
2743
2744 static void remove_last_line(struct image *img)
2745 {
2746         img->len -= img->line[--img->nr].len;
2747 }
2748
2749 /*
2750  * The change from "preimage" and "postimage" has been found to
2751  * apply at applied_pos (counts in line numbers) in "img".
2752  * Update "img" to remove "preimage" and replace it with "postimage".
2753  */
2754 static void update_image(struct apply_state *state,
2755                          struct image *img,
2756                          int applied_pos,
2757                          struct image *preimage,
2758                          struct image *postimage)
2759 {
2760         /*
2761          * remove the copy of preimage at offset in img
2762          * and replace it with postimage
2763          */
2764         int i, nr;
2765         size_t remove_count, insert_count, applied_at = 0;
2766         char *result;
2767         int preimage_limit;
2768
2769         /*
2770          * If we are removing blank lines at the end of img,
2771          * the preimage may extend beyond the end.
2772          * If that is the case, we must be careful only to
2773          * remove the part of the preimage that falls within
2774          * the boundaries of img. Initialize preimage_limit
2775          * to the number of lines in the preimage that falls
2776          * within the boundaries.
2777          */
2778         preimage_limit = preimage->nr;
2779         if (preimage_limit > img->nr - applied_pos)
2780                 preimage_limit = img->nr - applied_pos;
2781
2782         for (i = 0; i < applied_pos; i++)
2783                 applied_at += img->line[i].len;
2784
2785         remove_count = 0;
2786         for (i = 0; i < preimage_limit; i++)
2787                 remove_count += img->line[applied_pos + i].len;
2788         insert_count = postimage->len;
2789
2790         /* Adjust the contents */
2791         result = xmalloc(st_add3(st_sub(img->len, remove_count), insert_count, 1));
2792         memcpy(result, img->buf, applied_at);
2793         memcpy(result + applied_at, postimage->buf, postimage->len);
2794         memcpy(result + applied_at + postimage->len,
2795                img->buf + (applied_at + remove_count),
2796                img->len - (applied_at + remove_count));
2797         free(img->buf);
2798         img->buf = result;
2799         img->len += insert_count - remove_count;
2800         result[img->len] = '\0';
2801
2802         /* Adjust the line table */
2803         nr = img->nr + postimage->nr - preimage_limit;
2804         if (preimage_limit < postimage->nr) {
2805                 /*
2806                  * NOTE: this knows that we never call remove_first_line()
2807                  * on anything other than pre/post image.
2808                  */
2809                 REALLOC_ARRAY(img->line, nr);
2810                 img->line_allocated = img->line;
2811         }
2812         if (preimage_limit != postimage->nr)
2813                 memmove(img->line + applied_pos + postimage->nr,
2814                         img->line + applied_pos + preimage_limit,
2815                         (img->nr - (applied_pos + preimage_limit)) *
2816                         sizeof(*img->line));
2817         memcpy(img->line + applied_pos,
2818                postimage->line,
2819                postimage->nr * sizeof(*img->line));
2820         if (!state->allow_overlap)
2821                 for (i = 0; i < postimage->nr; i++)
2822                         img->line[applied_pos + i].flag |= LINE_PATCHED;
2823         img->nr = nr;
2824 }
2825
2826 /*
2827  * Use the patch-hunk text in "frag" to prepare two images (preimage and
2828  * postimage) for the hunk.  Find lines that match "preimage" in "img" and
2829  * replace the part of "img" with "postimage" text.
2830  */
2831 static int apply_one_fragment(struct apply_state *state,
2832                               struct image *img, struct fragment *frag,
2833                               int inaccurate_eof, unsigned ws_rule,
2834                               int nth_fragment)
2835 {
2836         int match_beginning, match_end;
2837         const char *patch = frag->patch;
2838         int size = frag->size;
2839         char *old, *oldlines;
2840         struct strbuf newlines;
2841         int new_blank_lines_at_end = 0;
2842         int found_new_blank_lines_at_end = 0;
2843         int hunk_linenr = frag->linenr;
2844         unsigned long leading, trailing;
2845         int pos, applied_pos;
2846         struct image preimage;
2847         struct image postimage;
2848
2849         memset(&preimage, 0, sizeof(preimage));
2850         memset(&postimage, 0, sizeof(postimage));
2851         oldlines = xmalloc(size);
2852         strbuf_init(&newlines, size);
2853
2854         old = oldlines;
2855         while (size > 0) {
2856                 char first;
2857                 int len = linelen(patch, size);
2858                 int plen;
2859                 int added_blank_line = 0;
2860                 int is_blank_context = 0;
2861                 size_t start;
2862
2863                 if (!len)
2864                         break;
2865
2866                 /*
2867                  * "plen" is how much of the line we should use for
2868                  * the actual patch data. Normally we just remove the
2869                  * first character on the line, but if the line is
2870                  * followed by "\ No newline", then we also remove the
2871                  * last one (which is the newline, of course).
2872                  */
2873                 plen = len - 1;
2874                 if (len < size && patch[len] == '\\')
2875                         plen--;
2876                 first = *patch;
2877                 if (state->apply_in_reverse) {
2878                         if (first == '-')
2879                                 first = '+';
2880                         else if (first == '+')
2881                                 first = '-';
2882                 }
2883
2884                 switch (first) {
2885                 case '\n':
2886                         /* Newer GNU diff, empty context line */
2887                         if (plen < 0)
2888                                 /* ... followed by '\No newline'; nothing */
2889                                 break;
2890                         *old++ = '\n';
2891                         strbuf_addch(&newlines, '\n');
2892                         add_line_info(&preimage, "\n", 1, LINE_COMMON);
2893                         add_line_info(&postimage, "\n", 1, LINE_COMMON);
2894                         is_blank_context = 1;
2895                         break;
2896                 case ' ':
2897                         if (plen && (ws_rule & WS_BLANK_AT_EOF) &&
2898                             ws_blank_line(patch + 1, plen, ws_rule))
2899                                 is_blank_context = 1;
2900                 case '-':
2901                         memcpy(old, patch + 1, plen);
2902                         add_line_info(&preimage, old, plen,
2903                                       (first == ' ' ? LINE_COMMON : 0));
2904                         old += plen;
2905                         if (first == '-')
2906                                 break;
2907                 /* Fall-through for ' ' */
2908                 case '+':
2909                         /* --no-add does not add new lines */
2910                         if (first == '+' && state->no_add)
2911                                 break;
2912
2913                         start = newlines.len;
2914                         if (first != '+' ||
2915                             !state->whitespace_error ||
2916                             state->ws_error_action != correct_ws_error) {
2917                                 strbuf_add(&newlines, patch + 1, plen);
2918                         }
2919                         else {
2920                                 ws_fix_copy(&newlines, patch + 1, plen, ws_rule, &state->applied_after_fixing_ws);
2921                         }
2922                         add_line_info(&postimage, newlines.buf + start, newlines.len - start,
2923                                       (first == '+' ? 0 : LINE_COMMON));
2924                         if (first == '+' &&
2925                             (ws_rule & WS_BLANK_AT_EOF) &&
2926                             ws_blank_line(patch + 1, plen, ws_rule))
2927                                 added_blank_line = 1;
2928                         break;
2929                 case '@': case '\\':
2930                         /* Ignore it, we already handled it */
2931                         break;
2932                 default:
2933                         if (state->apply_verbosity > verbosity_normal)
2934                                 error(_("invalid start of line: '%c'"), first);
2935                         applied_pos = -1;
2936                         goto out;
2937                 }
2938                 if (added_blank_line) {
2939                         if (!new_blank_lines_at_end)
2940                                 found_new_blank_lines_at_end = hunk_linenr;
2941                         new_blank_lines_at_end++;
2942                 }
2943                 else if (is_blank_context)
2944                         ;
2945                 else
2946                         new_blank_lines_at_end = 0;
2947                 patch += len;
2948                 size -= len;
2949                 hunk_linenr++;
2950         }
2951         if (inaccurate_eof &&
2952             old > oldlines && old[-1] == '\n' &&
2953             newlines.len > 0 && newlines.buf[newlines.len - 1] == '\n') {
2954                 old--;
2955                 strbuf_setlen(&newlines, newlines.len - 1);
2956         }
2957
2958         leading = frag->leading;
2959         trailing = frag->trailing;
2960
2961         /*
2962          * A hunk to change lines at the beginning would begin with
2963          * @@ -1,L +N,M @@
2964          * but we need to be careful.  -U0 that inserts before the second
2965          * line also has this pattern.
2966          *
2967          * And a hunk to add to an empty file would begin with
2968          * @@ -0,0 +N,M @@
2969          *
2970          * In other words, a hunk that is (frag->oldpos <= 1) with or
2971          * without leading context must match at the beginning.
2972          */
2973         match_beginning = (!frag->oldpos ||
2974                            (frag->oldpos == 1 && !state->unidiff_zero));
2975
2976         /*
2977          * A hunk without trailing lines must match at the end.
2978          * However, we simply cannot tell if a hunk must match end
2979          * from the lack of trailing lines if the patch was generated
2980          * with unidiff without any context.
2981          */
2982         match_end = !state->unidiff_zero && !trailing;
2983
2984         pos = frag->newpos ? (frag->newpos - 1) : 0;
2985         preimage.buf = oldlines;
2986         preimage.len = old - oldlines;
2987         postimage.buf = newlines.buf;
2988         postimage.len = newlines.len;
2989         preimage.line = preimage.line_allocated;
2990         postimage.line = postimage.line_allocated;
2991
2992         for (;;) {
2993
2994                 applied_pos = find_pos(state, img, &preimage, &postimage, pos,
2995                                        ws_rule, match_beginning, match_end);
2996
2997                 if (applied_pos >= 0)
2998                         break;
2999
3000                 /* Am I at my context limits? */
3001                 if ((leading <= state->p_context) && (trailing <= state->p_context))
3002                         break;
3003                 if (match_beginning || match_end) {
3004                         match_beginning = match_end = 0;
3005                         continue;
3006                 }
3007
3008                 /*
3009                  * Reduce the number of context lines; reduce both
3010                  * leading and trailing if they are equal otherwise
3011                  * just reduce the larger context.
3012                  */
3013                 if (leading >= trailing) {
3014                         remove_first_line(&preimage);
3015                         remove_first_line(&postimage);
3016                         pos--;
3017                         leading--;
3018                 }
3019                 if (trailing > leading) {
3020                         remove_last_line(&preimage);
3021                         remove_last_line(&postimage);
3022                         trailing--;
3023                 }
3024         }
3025
3026         if (applied_pos >= 0) {
3027                 if (new_blank_lines_at_end &&
3028                     preimage.nr + applied_pos >= img->nr &&
3029                     (ws_rule & WS_BLANK_AT_EOF) &&
3030                     state->ws_error_action != nowarn_ws_error) {
3031                         record_ws_error(state, WS_BLANK_AT_EOF, "+", 1,
3032                                         found_new_blank_lines_at_end);
3033                         if (state->ws_error_action == correct_ws_error) {
3034                                 while (new_blank_lines_at_end--)
3035                                         remove_last_line(&postimage);
3036                         }
3037                         /*
3038                          * We would want to prevent write_out_results()
3039                          * from taking place in apply_patch() that follows
3040                          * the callchain led us here, which is:
3041                          * apply_patch->check_patch_list->check_patch->
3042                          * apply_data->apply_fragments->apply_one_fragment
3043                          */
3044                         if (state->ws_error_action == die_on_ws_error)
3045                                 state->apply = 0;
3046                 }
3047
3048                 if (state->apply_verbosity > verbosity_normal && applied_pos != pos) {
3049                         int offset = applied_pos - pos;
3050                         if (state->apply_in_reverse)
3051                                 offset = 0 - offset;
3052                         fprintf_ln(stderr,
3053                                    Q_("Hunk #%d succeeded at %d (offset %d line).",
3054                                       "Hunk #%d succeeded at %d (offset %d lines).",
3055                                       offset),
3056                                    nth_fragment, applied_pos + 1, offset);
3057                 }
3058
3059                 /*
3060                  * Warn if it was necessary to reduce the number
3061                  * of context lines.
3062                  */
3063                 if ((leading != frag->leading ||
3064                      trailing != frag->trailing) && state->apply_verbosity > verbosity_silent)
3065                         fprintf_ln(stderr, _("Context reduced to (%ld/%ld)"
3066                                              " to apply fragment at %d"),
3067                                    leading, trailing, applied_pos+1);
3068                 update_image(state, img, applied_pos, &preimage, &postimage);
3069         } else {
3070                 if (state->apply_verbosity > verbosity_normal)
3071                         error(_("while searching for:\n%.*s"),
3072                               (int)(old - oldlines), oldlines);
3073         }
3074
3075 out:
3076         free(oldlines);
3077         strbuf_release(&newlines);
3078         free(preimage.line_allocated);
3079         free(postimage.line_allocated);
3080
3081         return (applied_pos < 0);
3082 }
3083
3084 static int apply_binary_fragment(struct apply_state *state,
3085                                  struct image *img,
3086                                  struct patch *patch)
3087 {
3088         struct fragment *fragment = patch->fragments;
3089         unsigned long len;
3090         void *dst;
3091
3092         if (!fragment)
3093                 return error(_("missing binary patch data for '%s'"),
3094                              patch->new_name ?
3095                              patch->new_name :
3096                              patch->old_name);
3097
3098         /* Binary patch is irreversible without the optional second hunk */
3099         if (state->apply_in_reverse) {
3100                 if (!fragment->next)
3101                         return error(_("cannot reverse-apply a binary patch "
3102                                        "without the reverse hunk to '%s'"),
3103                                      patch->new_name
3104                                      ? patch->new_name : patch->old_name);
3105                 fragment = fragment->next;
3106         }
3107         switch (fragment->binary_patch_method) {
3108         case BINARY_DELTA_DEFLATED:
3109                 dst = patch_delta(img->buf, img->len, fragment->patch,
3110                                   fragment->size, &len);
3111                 if (!dst)
3112                         return -1;
3113                 clear_image(img);
3114                 img->buf = dst;
3115                 img->len = len;
3116                 return 0;
3117         case BINARY_LITERAL_DEFLATED:
3118                 clear_image(img);
3119                 img->len = fragment->size;
3120                 img->buf = xmemdupz(fragment->patch, img->len);
3121                 return 0;
3122         }
3123         return -1;
3124 }
3125
3126 /*
3127  * Replace "img" with the result of applying the binary patch.
3128  * The binary patch data itself in patch->fragment is still kept
3129  * but the preimage prepared by the caller in "img" is freed here
3130  * or in the helper function apply_binary_fragment() this calls.
3131  */
3132 static int apply_binary(struct apply_state *state,
3133                         struct image *img,
3134                         struct patch *patch)
3135 {
3136         const char *name = patch->old_name ? patch->old_name : patch->new_name;
3137         struct object_id oid;
3138
3139         /*
3140          * For safety, we require patch index line to contain
3141          * full 40-byte textual SHA1 for old and new, at least for now.
3142          */
3143         if (strlen(patch->old_sha1_prefix) != 40 ||
3144             strlen(patch->new_sha1_prefix) != 40 ||
3145             get_oid_hex(patch->old_sha1_prefix, &oid) ||
3146             get_oid_hex(patch->new_sha1_prefix, &oid))
3147                 return error(_("cannot apply binary patch to '%s' "
3148                                "without full index line"), name);
3149
3150         if (patch->old_name) {
3151                 /*
3152                  * See if the old one matches what the patch
3153                  * applies to.
3154                  */
3155                 hash_sha1_file(img->buf, img->len, blob_type, oid.hash);
3156                 if (strcmp(oid_to_hex(&oid), patch->old_sha1_prefix))
3157                         return error(_("the patch applies to '%s' (%s), "
3158                                        "which does not match the "
3159                                        "current contents."),
3160                                      name, oid_to_hex(&oid));
3161         }
3162         else {
3163                 /* Otherwise, the old one must be empty. */
3164                 if (img->len)
3165                         return error(_("the patch applies to an empty "
3166                                        "'%s' but it is not empty"), name);
3167         }
3168
3169         get_oid_hex(patch->new_sha1_prefix, &oid);
3170         if (is_null_oid(&oid)) {
3171                 clear_image(img);
3172                 return 0; /* deletion patch */
3173         }
3174
3175         if (has_sha1_file(oid.hash)) {
3176                 /* We already have the postimage */
3177                 enum object_type type;
3178                 unsigned long size;
3179                 char *result;
3180
3181                 result = read_sha1_file(oid.hash, &type, &size);
3182                 if (!result)
3183                         return error(_("the necessary postimage %s for "
3184                                        "'%s' cannot be read"),
3185                                      patch->new_sha1_prefix, name);
3186                 clear_image(img);
3187                 img->buf = result;
3188                 img->len = size;
3189         } else {
3190                 /*
3191                  * We have verified buf matches the preimage;
3192                  * apply the patch data to it, which is stored
3193                  * in the patch->fragments->{patch,size}.
3194                  */
3195                 if (apply_binary_fragment(state, img, patch))
3196                         return error(_("binary patch does not apply to '%s'"),
3197                                      name);
3198
3199                 /* verify that the result matches */
3200                 hash_sha1_file(img->buf, img->len, blob_type, oid.hash);
3201                 if (strcmp(oid_to_hex(&oid), patch->new_sha1_prefix))
3202                         return error(_("binary patch to '%s' creates incorrect result (expecting %s, got %s)"),
3203                                 name, patch->new_sha1_prefix, oid_to_hex(&oid));
3204         }
3205
3206         return 0;
3207 }
3208
3209 static int apply_fragments(struct apply_state *state, struct image *img, struct patch *patch)
3210 {
3211         struct fragment *frag = patch->fragments;
3212         const char *name = patch->old_name ? patch->old_name : patch->new_name;
3213         unsigned ws_rule = patch->ws_rule;
3214         unsigned inaccurate_eof = patch->inaccurate_eof;
3215         int nth = 0;
3216
3217         if (patch->is_binary)
3218                 return apply_binary(state, img, patch);
3219
3220         while (frag) {
3221                 nth++;
3222                 if (apply_one_fragment(state, img, frag, inaccurate_eof, ws_rule, nth)) {
3223                         error(_("patch failed: %s:%ld"), name, frag->oldpos);
3224                         if (!state->apply_with_reject)
3225                                 return -1;
3226                         frag->rejected = 1;
3227                 }
3228                 frag = frag->next;
3229         }
3230         return 0;
3231 }
3232
3233 static int read_blob_object(struct strbuf *buf, const struct object_id *oid, unsigned mode)
3234 {
3235         if (S_ISGITLINK(mode)) {
3236                 strbuf_grow(buf, 100);
3237                 strbuf_addf(buf, "Subproject commit %s\n", oid_to_hex(oid));
3238         } else {
3239                 enum object_type type;
3240                 unsigned long sz;
3241                 char *result;
3242
3243                 result = read_sha1_file(oid->hash, &type, &sz);
3244                 if (!result)
3245                         return -1;
3246                 /* XXX read_sha1_file NUL-terminates */
3247                 strbuf_attach(buf, result, sz, sz + 1);
3248         }
3249         return 0;
3250 }
3251
3252 static int read_file_or_gitlink(const struct cache_entry *ce, struct strbuf *buf)
3253 {
3254         if (!ce)
3255                 return 0;
3256         return read_blob_object(buf, &ce->oid, ce->ce_mode);
3257 }
3258
3259 static struct patch *in_fn_table(struct apply_state *state, const char *name)
3260 {
3261         struct string_list_item *item;
3262
3263         if (name == NULL)
3264                 return NULL;
3265
3266         item = string_list_lookup(&state->fn_table, name);
3267         if (item != NULL)
3268                 return (struct patch *)item->util;
3269
3270         return NULL;
3271 }
3272
3273 /*
3274  * item->util in the filename table records the status of the path.
3275  * Usually it points at a patch (whose result records the contents
3276  * of it after applying it), but it could be PATH_WAS_DELETED for a
3277  * path that a previously applied patch has already removed, or
3278  * PATH_TO_BE_DELETED for a path that a later patch would remove.
3279  *
3280  * The latter is needed to deal with a case where two paths A and B
3281  * are swapped by first renaming A to B and then renaming B to A;
3282  * moving A to B should not be prevented due to presence of B as we
3283  * will remove it in a later patch.
3284  */
3285 #define PATH_TO_BE_DELETED ((struct patch *) -2)
3286 #define PATH_WAS_DELETED ((struct patch *) -1)
3287
3288 static int to_be_deleted(struct patch *patch)
3289 {
3290         return patch == PATH_TO_BE_DELETED;
3291 }
3292
3293 static int was_deleted(struct patch *patch)
3294 {
3295         return patch == PATH_WAS_DELETED;
3296 }
3297
3298 static void add_to_fn_table(struct apply_state *state, struct patch *patch)
3299 {
3300         struct string_list_item *item;
3301
3302         /*
3303          * Always add new_name unless patch is a deletion
3304          * This should cover the cases for normal diffs,
3305          * file creations and copies
3306          */
3307         if (patch->new_name != NULL) {
3308                 item = string_list_insert(&state->fn_table, patch->new_name);
3309                 item->util = patch;
3310         }
3311
3312         /*
3313          * store a failure on rename/deletion cases because
3314          * later chunks shouldn't patch old names
3315          */
3316         if ((patch->new_name == NULL) || (patch->is_rename)) {
3317                 item = string_list_insert(&state->fn_table, patch->old_name);
3318                 item->util = PATH_WAS_DELETED;
3319         }
3320 }
3321
3322 static void prepare_fn_table(struct apply_state *state, struct patch *patch)
3323 {
3324         /*
3325          * store information about incoming file deletion
3326          */
3327         while (patch) {
3328                 if ((patch->new_name == NULL) || (patch->is_rename)) {
3329                         struct string_list_item *item;
3330                         item = string_list_insert(&state->fn_table, patch->old_name);
3331                         item->util = PATH_TO_BE_DELETED;
3332                 }
3333                 patch = patch->next;
3334         }
3335 }
3336
3337 static int checkout_target(struct index_state *istate,
3338                            struct cache_entry *ce, struct stat *st)
3339 {
3340         struct checkout costate = CHECKOUT_INIT;
3341
3342         costate.refresh_cache = 1;
3343         costate.istate = istate;
3344         if (checkout_entry(ce, &costate, NULL) || lstat(ce->name, st))
3345                 return error(_("cannot checkout %s"), ce->name);
3346         return 0;
3347 }
3348
3349 static struct patch *previous_patch(struct apply_state *state,
3350                                     struct patch *patch,
3351                                     int *gone)
3352 {
3353         struct patch *previous;
3354
3355         *gone = 0;
3356         if (patch->is_copy || patch->is_rename)
3357                 return NULL; /* "git" patches do not depend on the order */
3358
3359         previous = in_fn_table(state, patch->old_name);
3360         if (!previous)
3361                 return NULL;
3362
3363         if (to_be_deleted(previous))
3364                 return NULL; /* the deletion hasn't happened yet */
3365
3366         if (was_deleted(previous))
3367                 *gone = 1;
3368
3369         return previous;
3370 }
3371
3372 static int verify_index_match(const struct cache_entry *ce, struct stat *st)
3373 {
3374         if (S_ISGITLINK(ce->ce_mode)) {
3375                 if (!S_ISDIR(st->st_mode))
3376                         return -1;
3377                 return 0;
3378         }
3379         return ce_match_stat(ce, st, CE_MATCH_IGNORE_VALID|CE_MATCH_IGNORE_SKIP_WORKTREE);
3380 }
3381
3382 #define SUBMODULE_PATCH_WITHOUT_INDEX 1
3383
3384 static int load_patch_target(struct apply_state *state,
3385                              struct strbuf *buf,
3386                              const struct cache_entry *ce,
3387                              struct stat *st,
3388                              const char *name,
3389                              unsigned expected_mode)
3390 {
3391         if (state->cached || state->check_index) {
3392                 if (read_file_or_gitlink(ce, buf))
3393                         return error(_("failed to read %s"), name);
3394         } else if (name) {
3395                 if (S_ISGITLINK(expected_mode)) {
3396                         if (ce)
3397                                 return read_file_or_gitlink(ce, buf);
3398                         else
3399                                 return SUBMODULE_PATCH_WITHOUT_INDEX;
3400                 } else if (has_symlink_leading_path(name, strlen(name))) {
3401                         return error(_("reading from '%s' beyond a symbolic link"), name);
3402                 } else {
3403                         if (read_old_data(st, name, buf))
3404                                 return error(_("failed to read %s"), name);
3405                 }
3406         }
3407         return 0;
3408 }
3409
3410 /*
3411  * We are about to apply "patch"; populate the "image" with the
3412  * current version we have, from the working tree or from the index,
3413  * depending on the situation e.g. --cached/--index.  If we are
3414  * applying a non-git patch that incrementally updates the tree,
3415  * we read from the result of a previous diff.
3416  */
3417 static int load_preimage(struct apply_state *state,
3418                          struct image *image,
3419                          struct patch *patch, struct stat *st,
3420                          const struct cache_entry *ce)
3421 {
3422         struct strbuf buf = STRBUF_INIT;
3423         size_t len;
3424         char *img;
3425         struct patch *previous;
3426         int status;
3427
3428         previous = previous_patch(state, patch, &status);
3429         if (status)
3430                 return error(_("path %s has been renamed/deleted"),
3431                              patch->old_name);
3432         if (previous) {
3433                 /* We have a patched copy in memory; use that. */
3434                 strbuf_add(&buf, previous->result, previous->resultsize);
3435         } else {
3436                 status = load_patch_target(state, &buf, ce, st,
3437                                            patch->old_name, patch->old_mode);
3438                 if (status < 0)
3439                         return status;
3440                 else if (status == SUBMODULE_PATCH_WITHOUT_INDEX) {
3441                         /*
3442                          * There is no way to apply subproject
3443                          * patch without looking at the index.
3444                          * NEEDSWORK: shouldn't this be flagged
3445                          * as an error???
3446                          */
3447                         free_fragment_list(patch->fragments);
3448                         patch->fragments = NULL;
3449                 } else if (status) {
3450                         return error(_("failed to read %s"), patch->old_name);
3451                 }
3452         }
3453
3454         img = strbuf_detach(&buf, &len);
3455         prepare_image(image, img, len, !patch->is_binary);
3456         return 0;
3457 }
3458
3459 static int three_way_merge(struct image *image,
3460                            char *path,
3461                            const struct object_id *base,
3462                            const struct object_id *ours,
3463                            const struct object_id *theirs)
3464 {
3465         mmfile_t base_file, our_file, their_file;
3466         mmbuffer_t result = { NULL };
3467         int status;
3468
3469         read_mmblob(&base_file, base);
3470         read_mmblob(&our_file, ours);
3471         read_mmblob(&their_file, theirs);
3472         status = ll_merge(&result, path,
3473                           &base_file, "base",
3474                           &our_file, "ours",
3475                           &their_file, "theirs", NULL);
3476         free(base_file.ptr);
3477         free(our_file.ptr);
3478         free(their_file.ptr);
3479         if (status < 0 || !result.ptr) {
3480                 free(result.ptr);
3481                 return -1;
3482         }
3483         clear_image(image);
3484         image->buf = result.ptr;
3485         image->len = result.size;
3486
3487         return status;
3488 }
3489
3490 /*
3491  * When directly falling back to add/add three-way merge, we read from
3492  * the current contents of the new_name.  In no cases other than that
3493  * this function will be called.
3494  */
3495 static int load_current(struct apply_state *state,
3496                         struct image *image,
3497                         struct patch *patch)
3498 {
3499         struct strbuf buf = STRBUF_INIT;
3500         int status, pos;
3501         size_t len;
3502         char *img;
3503         struct stat st;
3504         struct cache_entry *ce;
3505         char *name = patch->new_name;
3506         unsigned mode = patch->new_mode;
3507
3508         if (!patch->is_new)
3509                 die("BUG: patch to %s is not a creation", patch->old_name);
3510
3511         pos = cache_name_pos(name, strlen(name));
3512         if (pos < 0)
3513                 return error(_("%s: does not exist in index"), name);
3514         ce = active_cache[pos];
3515         if (lstat(name, &st)) {
3516                 if (errno != ENOENT)
3517                         return error_errno("%s", name);
3518                 if (checkout_target(&the_index, ce, &st))
3519                         return -1;
3520         }
3521         if (verify_index_match(ce, &st))
3522                 return error(_("%s: does not match index"), name);
3523
3524         status = load_patch_target(state, &buf, ce, &st, name, mode);
3525         if (status < 0)
3526                 return status;
3527         else if (status)
3528                 return -1;
3529         img = strbuf_detach(&buf, &len);
3530         prepare_image(image, img, len, !patch->is_binary);
3531         return 0;
3532 }
3533
3534 static int try_threeway(struct apply_state *state,
3535                         struct image *image,
3536                         struct patch *patch,
3537                         struct stat *st,
3538                         const struct cache_entry *ce)
3539 {
3540         struct object_id pre_oid, post_oid, our_oid;
3541         struct strbuf buf = STRBUF_INIT;
3542         size_t len;
3543         int status;
3544         char *img;
3545         struct image tmp_image;
3546
3547         /* No point falling back to 3-way merge in these cases */
3548         if (patch->is_delete ||
3549             S_ISGITLINK(patch->old_mode) || S_ISGITLINK(patch->new_mode))
3550                 return -1;
3551
3552         /* Preimage the patch was prepared for */
3553         if (patch->is_new)
3554                 write_sha1_file("", 0, blob_type, pre_oid.hash);
3555         else if (get_sha1(patch->old_sha1_prefix, pre_oid.hash) ||
3556                  read_blob_object(&buf, &pre_oid, patch->old_mode))
3557                 return error(_("repository lacks the necessary blob to fall back on 3-way merge."));
3558
3559         if (state->apply_verbosity > verbosity_silent)
3560                 fprintf(stderr, _("Falling back to three-way merge...\n"));
3561
3562         img = strbuf_detach(&buf, &len);
3563         prepare_image(&tmp_image, img, len, 1);
3564         /* Apply the patch to get the post image */
3565         if (apply_fragments(state, &tmp_image, patch) < 0) {
3566                 clear_image(&tmp_image);
3567                 return -1;
3568         }
3569         /* post_oid is theirs */
3570         write_sha1_file(tmp_image.buf, tmp_image.len, blob_type, post_oid.hash);
3571         clear_image(&tmp_image);
3572
3573         /* our_oid is ours */
3574         if (patch->is_new) {
3575                 if (load_current(state, &tmp_image, patch))
3576                         return error(_("cannot read the current contents of '%s'"),
3577                                      patch->new_name);
3578         } else {
3579                 if (load_preimage(state, &tmp_image, patch, st, ce))
3580                         return error(_("cannot read the current contents of '%s'"),
3581                                      patch->old_name);
3582         }
3583         write_sha1_file(tmp_image.buf, tmp_image.len, blob_type, our_oid.hash);
3584         clear_image(&tmp_image);
3585
3586         /* in-core three-way merge between post and our using pre as base */
3587         status = three_way_merge(image, patch->new_name,
3588                                  &pre_oid, &our_oid, &post_oid);
3589         if (status < 0) {
3590                 if (state->apply_verbosity > verbosity_silent)
3591                         fprintf(stderr,
3592                                 _("Failed to fall back on three-way merge...\n"));
3593                 return status;
3594         }
3595
3596         if (status) {
3597                 patch->conflicted_threeway = 1;
3598                 if (patch->is_new)
3599                         oidclr(&patch->threeway_stage[0]);
3600                 else
3601                         oidcpy(&patch->threeway_stage[0], &pre_oid);
3602                 oidcpy(&patch->threeway_stage[1], &our_oid);
3603                 oidcpy(&patch->threeway_stage[2], &post_oid);
3604                 if (state->apply_verbosity > verbosity_silent)
3605                         fprintf(stderr,
3606                                 _("Applied patch to '%s' with conflicts.\n"),
3607                                 patch->new_name);
3608         } else {
3609                 if (state->apply_verbosity > verbosity_silent)
3610                         fprintf(stderr,
3611                                 _("Applied patch to '%s' cleanly.\n"),
3612                                 patch->new_name);
3613         }
3614         return 0;
3615 }
3616
3617 static int apply_data(struct apply_state *state, struct patch *patch,
3618                       struct stat *st, const struct cache_entry *ce)
3619 {
3620         struct image image;
3621
3622         if (load_preimage(state, &image, patch, st, ce) < 0)
3623                 return -1;
3624
3625         if (patch->direct_to_threeway ||
3626             apply_fragments(state, &image, patch) < 0) {
3627                 /* Note: with --reject, apply_fragments() returns 0 */
3628                 if (!state->threeway || try_threeway(state, &image, patch, st, ce) < 0)
3629                         return -1;
3630         }
3631         patch->result = image.buf;
3632         patch->resultsize = image.len;
3633         add_to_fn_table(state, patch);
3634         free(image.line_allocated);
3635
3636         if (0 < patch->is_delete && patch->resultsize)
3637                 return error(_("removal patch leaves file contents"));
3638
3639         return 0;
3640 }
3641
3642 /*
3643  * If "patch" that we are looking at modifies or deletes what we have,
3644  * we would want it not to lose any local modification we have, either
3645  * in the working tree or in the index.
3646  *
3647  * This also decides if a non-git patch is a creation patch or a
3648  * modification to an existing empty file.  We do not check the state
3649  * of the current tree for a creation patch in this function; the caller
3650  * check_patch() separately makes sure (and errors out otherwise) that
3651  * the path the patch creates does not exist in the current tree.
3652  */
3653 static int check_preimage(struct apply_state *state,
3654                           struct patch *patch,
3655                           struct cache_entry **ce,
3656                           struct stat *st)
3657 {
3658         const char *old_name = patch->old_name;
3659         struct patch *previous = NULL;
3660         int stat_ret = 0, status;
3661         unsigned st_mode = 0;
3662
3663         if (!old_name)
3664                 return 0;
3665
3666         assert(patch->is_new <= 0);
3667         previous = previous_patch(state, patch, &status);
3668
3669         if (status)
3670                 return error(_("path %s has been renamed/deleted"), old_name);
3671         if (previous) {
3672                 st_mode = previous->new_mode;
3673         } else if (!state->cached) {
3674                 stat_ret = lstat(old_name, st);
3675                 if (stat_ret && errno != ENOENT)
3676                         return error_errno("%s", old_name);
3677         }
3678
3679         if (state->check_index && !previous) {
3680                 int pos = cache_name_pos(old_name, strlen(old_name));
3681                 if (pos < 0) {
3682                         if (patch->is_new < 0)
3683                                 goto is_new;
3684                         return error(_("%s: does not exist in index"), old_name);
3685                 }
3686                 *ce = active_cache[pos];
3687                 if (stat_ret < 0) {
3688                         if (checkout_target(&the_index, *ce, st))
3689                                 return -1;
3690                 }
3691                 if (!state->cached && verify_index_match(*ce, st))
3692                         return error(_("%s: does not match index"), old_name);
3693                 if (state->cached)
3694                         st_mode = (*ce)->ce_mode;
3695         } else if (stat_ret < 0) {
3696                 if (patch->is_new < 0)
3697                         goto is_new;
3698                 return error_errno("%s", old_name);
3699         }
3700
3701         if (!state->cached && !previous)
3702                 st_mode = ce_mode_from_stat(*ce, st->st_mode);
3703
3704         if (patch->is_new < 0)
3705                 patch->is_new = 0;
3706         if (!patch->old_mode)
3707                 patch->old_mode = st_mode;
3708         if ((st_mode ^ patch->old_mode) & S_IFMT)
3709                 return error(_("%s: wrong type"), old_name);
3710         if (st_mode != patch->old_mode)
3711                 warning(_("%s has type %o, expected %o"),
3712                         old_name, st_mode, patch->old_mode);
3713         if (!patch->new_mode && !patch->is_delete)
3714                 patch->new_mode = st_mode;
3715         return 0;
3716
3717  is_new:
3718         patch->is_new = 1;
3719         patch->is_delete = 0;
3720         FREE_AND_NULL(patch->old_name);
3721         return 0;
3722 }
3723
3724
3725 #define EXISTS_IN_INDEX 1
3726 #define EXISTS_IN_WORKTREE 2
3727
3728 static int check_to_create(struct apply_state *state,
3729                            const char *new_name,
3730                            int ok_if_exists)
3731 {
3732         struct stat nst;
3733
3734         if (state->check_index &&
3735             cache_name_pos(new_name, strlen(new_name)) >= 0 &&
3736             !ok_if_exists)
3737                 return EXISTS_IN_INDEX;
3738         if (state->cached)
3739                 return 0;
3740
3741         if (!lstat(new_name, &nst)) {
3742                 if (S_ISDIR(nst.st_mode) || ok_if_exists)
3743                         return 0;
3744                 /*
3745                  * A leading component of new_name might be a symlink
3746                  * that is going to be removed with this patch, but
3747                  * still pointing at somewhere that has the path.
3748                  * In such a case, path "new_name" does not exist as
3749                  * far as git is concerned.
3750                  */
3751                 if (has_symlink_leading_path(new_name, strlen(new_name)))
3752                         return 0;
3753
3754                 return EXISTS_IN_WORKTREE;
3755         } else if (!is_missing_file_error(errno)) {
3756                 return error_errno("%s", new_name);
3757         }
3758         return 0;
3759 }
3760
3761 static uintptr_t register_symlink_changes(struct apply_state *state,
3762                                           const char *path,
3763                                           uintptr_t what)
3764 {
3765         struct string_list_item *ent;
3766
3767         ent = string_list_lookup(&state->symlink_changes, path);
3768         if (!ent) {
3769                 ent = string_list_insert(&state->symlink_changes, path);
3770                 ent->util = (void *)0;
3771         }
3772         ent->util = (void *)(what | ((uintptr_t)ent->util));
3773         return (uintptr_t)ent->util;
3774 }
3775
3776 static uintptr_t check_symlink_changes(struct apply_state *state, const char *path)
3777 {
3778         struct string_list_item *ent;
3779
3780         ent = string_list_lookup(&state->symlink_changes, path);
3781         if (!ent)
3782                 return 0;
3783         return (uintptr_t)ent->util;
3784 }
3785
3786 static void prepare_symlink_changes(struct apply_state *state, struct patch *patch)
3787 {
3788         for ( ; patch; patch = patch->next) {
3789                 if ((patch->old_name && S_ISLNK(patch->old_mode)) &&
3790                     (patch->is_rename || patch->is_delete))
3791                         /* the symlink at patch->old_name is removed */
3792                         register_symlink_changes(state, patch->old_name, APPLY_SYMLINK_GOES_AWAY);
3793
3794                 if (patch->new_name && S_ISLNK(patch->new_mode))
3795                         /* the symlink at patch->new_name is created or remains */
3796                         register_symlink_changes(state, patch->new_name, APPLY_SYMLINK_IN_RESULT);
3797         }
3798 }
3799
3800 static int path_is_beyond_symlink_1(struct apply_state *state, struct strbuf *name)
3801 {
3802         do {
3803                 unsigned int change;
3804
3805                 while (--name->len && name->buf[name->len] != '/')
3806                         ; /* scan backwards */
3807                 if (!name->len)
3808                         break;
3809                 name->buf[name->len] = '\0';
3810                 change = check_symlink_changes(state, name->buf);
3811                 if (change & APPLY_SYMLINK_IN_RESULT)
3812                         return 1;
3813                 if (change & APPLY_SYMLINK_GOES_AWAY)
3814                         /*
3815                          * This cannot be "return 0", because we may
3816                          * see a new one created at a higher level.
3817                          */
3818                         continue;
3819
3820                 /* otherwise, check the preimage */
3821                 if (state->check_index) {
3822                         struct cache_entry *ce;
3823
3824                         ce = cache_file_exists(name->buf, name->len, ignore_case);
3825                         if (ce && S_ISLNK(ce->ce_mode))
3826                                 return 1;
3827                 } else {
3828                         struct stat st;
3829                         if (!lstat(name->buf, &st) && S_ISLNK(st.st_mode))
3830                                 return 1;
3831                 }
3832         } while (1);
3833         return 0;
3834 }
3835
3836 static int path_is_beyond_symlink(struct apply_state *state, const char *name_)
3837 {
3838         int ret;
3839         struct strbuf name = STRBUF_INIT;
3840
3841         assert(*name_ != '\0');
3842         strbuf_addstr(&name, name_);
3843         ret = path_is_beyond_symlink_1(state, &name);
3844         strbuf_release(&name);
3845
3846         return ret;
3847 }
3848
3849 static int check_unsafe_path(struct patch *patch)
3850 {
3851         const char *old_name = NULL;
3852         const char *new_name = NULL;
3853         if (patch->is_delete)
3854                 old_name = patch->old_name;
3855         else if (!patch->is_new && !patch->is_copy)
3856                 old_name = patch->old_name;
3857         if (!patch->is_delete)
3858                 new_name = patch->new_name;
3859
3860         if (old_name && !verify_path(old_name))
3861                 return error(_("invalid path '%s'"), old_name);
3862         if (new_name && !verify_path(new_name))
3863                 return error(_("invalid path '%s'"), new_name);
3864         return 0;
3865 }
3866
3867 /*
3868  * Check and apply the patch in-core; leave the result in patch->result
3869  * for the caller to write it out to the final destination.
3870  */
3871 static int check_patch(struct apply_state *state, struct patch *patch)
3872 {
3873         struct stat st;
3874         const char *old_name = patch->old_name;
3875         const char *new_name = patch->new_name;
3876         const char *name = old_name ? old_name : new_name;
3877         struct cache_entry *ce = NULL;
3878         struct patch *tpatch;
3879         int ok_if_exists;
3880         int status;
3881
3882         patch->rejected = 1; /* we will drop this after we succeed */
3883
3884         status = check_preimage(state, patch, &ce, &st);
3885         if (status)
3886                 return status;
3887         old_name = patch->old_name;
3888
3889         /*
3890          * A type-change diff is always split into a patch to delete
3891          * old, immediately followed by a patch to create new (see
3892          * diff.c::run_diff()); in such a case it is Ok that the entry
3893          * to be deleted by the previous patch is still in the working
3894          * tree and in the index.
3895          *
3896          * A patch to swap-rename between A and B would first rename A
3897          * to B and then rename B to A.  While applying the first one,
3898          * the presence of B should not stop A from getting renamed to
3899          * B; ask to_be_deleted() about the later rename.  Removal of
3900          * B and rename from A to B is handled the same way by asking
3901          * was_deleted().
3902          */
3903         if ((tpatch = in_fn_table(state, new_name)) &&
3904             (was_deleted(tpatch) || to_be_deleted(tpatch)))
3905                 ok_if_exists = 1;
3906         else
3907                 ok_if_exists = 0;
3908
3909         if (new_name &&
3910             ((0 < patch->is_new) || patch->is_rename || patch->is_copy)) {
3911                 int err = check_to_create(state, new_name, ok_if_exists);
3912
3913                 if (err && state->threeway) {
3914                         patch->direct_to_threeway = 1;
3915                 } else switch (err) {
3916                 case 0:
3917                         break; /* happy */
3918                 case EXISTS_IN_INDEX:
3919                         return error(_("%s: already exists in index"), new_name);
3920                         break;
3921                 case EXISTS_IN_WORKTREE:
3922                         return error(_("%s: already exists in working directory"),
3923                                      new_name);
3924                 default:
3925                         return err;
3926                 }
3927
3928                 if (!patch->new_mode) {
3929                         if (0 < patch->is_new)
3930                                 patch->new_mode = S_IFREG | 0644;
3931                         else
3932                                 patch->new_mode = patch->old_mode;
3933                 }
3934         }
3935
3936         if (new_name && old_name) {
3937                 int same = !strcmp(old_name, new_name);
3938                 if (!patch->new_mode)
3939                         patch->new_mode = patch->old_mode;
3940                 if ((patch->old_mode ^ patch->new_mode) & S_IFMT) {
3941                         if (same)
3942                                 return error(_("new mode (%o) of %s does not "
3943                                                "match old mode (%o)"),
3944                                         patch->new_mode, new_name,
3945                                         patch->old_mode);
3946                         else
3947                                 return error(_("new mode (%o) of %s does not "
3948                                                "match old mode (%o) of %s"),
3949                                         patch->new_mode, new_name,
3950                                         patch->old_mode, old_name);
3951                 }
3952         }
3953
3954         if (!state->unsafe_paths && check_unsafe_path(patch))
3955                 return -128;
3956
3957         /*
3958          * An attempt to read from or delete a path that is beyond a
3959          * symbolic link will be prevented by load_patch_target() that
3960          * is called at the beginning of apply_data() so we do not
3961          * have to worry about a patch marked with "is_delete" bit
3962          * here.  We however need to make sure that the patch result
3963          * is not deposited to a path that is beyond a symbolic link
3964          * here.
3965          */
3966         if (!patch->is_delete && path_is_beyond_symlink(state, patch->new_name))
3967                 return error(_("affected file '%s' is beyond a symbolic link"),
3968                              patch->new_name);
3969
3970         if (apply_data(state, patch, &st, ce) < 0)
3971                 return error(_("%s: patch does not apply"), name);
3972         patch->rejected = 0;
3973         return 0;
3974 }
3975
3976 static int check_patch_list(struct apply_state *state, struct patch *patch)
3977 {
3978         int err = 0;
3979
3980         prepare_symlink_changes(state, patch);
3981         prepare_fn_table(state, patch);
3982         while (patch) {
3983                 int res;
3984                 if (state->apply_verbosity > verbosity_normal)
3985                         say_patch_name(stderr,
3986                                        _("Checking patch %s..."), patch);
3987                 res = check_patch(state, patch);
3988                 if (res == -128)
3989                         return -128;
3990                 err |= res;
3991                 patch = patch->next;
3992         }
3993         return err;
3994 }
3995
3996 static int read_apply_cache(struct apply_state *state)
3997 {
3998         if (state->index_file)
3999                 return read_cache_from(state->index_file);
4000         else
4001                 return read_cache();
4002 }
4003
4004 /* This function tries to read the object name from the current index */
4005 static int get_current_oid(struct apply_state *state, const char *path,
4006                            struct object_id *oid)
4007 {
4008         int pos;
4009
4010         if (read_apply_cache(state) < 0)
4011                 return -1;
4012         pos = cache_name_pos(path, strlen(path));
4013         if (pos < 0)
4014                 return -1;
4015         oidcpy(oid, &active_cache[pos]->oid);
4016         return 0;
4017 }
4018
4019 static int preimage_oid_in_gitlink_patch(struct patch *p, struct object_id *oid)
4020 {
4021         /*
4022          * A usable gitlink patch has only one fragment (hunk) that looks like:
4023          * @@ -1 +1 @@
4024          * -Subproject commit <old sha1>
4025          * +Subproject commit <new sha1>
4026          * or
4027          * @@ -1 +0,0 @@
4028          * -Subproject commit <old sha1>
4029          * for a removal patch.
4030          */
4031         struct fragment *hunk = p->fragments;
4032         static const char heading[] = "-Subproject commit ";
4033         char *preimage;
4034
4035         if (/* does the patch have only one hunk? */
4036             hunk && !hunk->next &&
4037             /* is its preimage one line? */
4038             hunk->oldpos == 1 && hunk->oldlines == 1 &&
4039             /* does preimage begin with the heading? */
4040             (preimage = memchr(hunk->patch, '\n', hunk->size)) != NULL &&
4041             starts_with(++preimage, heading) &&
4042             /* does it record full SHA-1? */
4043             !get_oid_hex(preimage + sizeof(heading) - 1, oid) &&
4044             preimage[sizeof(heading) + GIT_SHA1_HEXSZ - 1] == '\n' &&
4045             /* does the abbreviated name on the index line agree with it? */
4046             starts_with(preimage + sizeof(heading) - 1, p->old_sha1_prefix))
4047                 return 0; /* it all looks fine */
4048
4049         /* we may have full object name on the index line */
4050         return get_oid_hex(p->old_sha1_prefix, oid);
4051 }
4052
4053 /* Build an index that contains the just the files needed for a 3way merge */
4054 static int build_fake_ancestor(struct apply_state *state, struct patch *list)
4055 {
4056         struct patch *patch;
4057         struct index_state result = { NULL };
4058         static struct lock_file lock;
4059         int res;
4060
4061         /* Once we start supporting the reverse patch, it may be
4062          * worth showing the new sha1 prefix, but until then...
4063          */
4064         for (patch = list; patch; patch = patch->next) {
4065                 struct object_id oid;
4066                 struct cache_entry *ce;
4067                 const char *name;
4068
4069                 name = patch->old_name ? patch->old_name : patch->new_name;
4070                 if (0 < patch->is_new)
4071                         continue;
4072
4073                 if (S_ISGITLINK(patch->old_mode)) {
4074                         if (!preimage_oid_in_gitlink_patch(patch, &oid))
4075                                 ; /* ok, the textual part looks sane */
4076                         else
4077                                 return error(_("sha1 information is lacking or "
4078                                                "useless for submodule %s"), name);
4079                 } else if (!get_sha1_blob(patch->old_sha1_prefix, oid.hash)) {
4080                         ; /* ok */
4081                 } else if (!patch->lines_added && !patch->lines_deleted) {
4082                         /* mode-only change: update the current */
4083                         if (get_current_oid(state, patch->old_name, &oid))
4084                                 return error(_("mode change for %s, which is not "
4085                                                "in current HEAD"), name);
4086                 } else
4087                         return error(_("sha1 information is lacking or useless "
4088                                        "(%s)."), name);
4089
4090                 ce = make_cache_entry(patch->old_mode, oid.hash, name, 0, 0);
4091                 if (!ce)
4092                         return error(_("make_cache_entry failed for path '%s'"),
4093                                      name);
4094                 if (add_index_entry(&result, ce, ADD_CACHE_OK_TO_ADD)) {
4095                         free(ce);
4096                         return error(_("could not add %s to temporary index"),
4097                                      name);
4098                 }
4099         }
4100
4101         hold_lock_file_for_update(&lock, state->fake_ancestor, LOCK_DIE_ON_ERROR);
4102         res = write_locked_index(&result, &lock, COMMIT_LOCK);
4103         discard_index(&result);
4104
4105         if (res)
4106                 return error(_("could not write temporary index to %s"),
4107                              state->fake_ancestor);
4108
4109         return 0;
4110 }
4111
4112 static void stat_patch_list(struct apply_state *state, struct patch *patch)
4113 {
4114         int files, adds, dels;
4115
4116         for (files = adds = dels = 0 ; patch ; patch = patch->next) {
4117                 files++;
4118                 adds += patch->lines_added;
4119                 dels += patch->lines_deleted;
4120                 show_stats(state, patch);
4121         }
4122
4123         print_stat_summary(stdout, files, adds, dels);
4124 }
4125
4126 static void numstat_patch_list(struct apply_state *state,
4127                                struct patch *patch)
4128 {
4129         for ( ; patch; patch = patch->next) {
4130                 const char *name;
4131                 name = patch->new_name ? patch->new_name : patch->old_name;
4132                 if (patch->is_binary)
4133                         printf("-\t-\t");
4134                 else
4135                         printf("%d\t%d\t", patch->lines_added, patch->lines_deleted);
4136                 write_name_quoted(name, stdout, state->line_termination);
4137         }
4138 }
4139
4140 static void show_file_mode_name(const char *newdelete, unsigned int mode, const char *name)
4141 {
4142         if (mode)
4143                 printf(" %s mode %06o %s\n", newdelete, mode, name);
4144         else
4145                 printf(" %s %s\n", newdelete, name);
4146 }
4147
4148 static void show_mode_change(struct patch *p, int show_name)
4149 {
4150         if (p->old_mode && p->new_mode && p->old_mode != p->new_mode) {
4151                 if (show_name)
4152                         printf(" mode change %06o => %06o %s\n",
4153                                p->old_mode, p->new_mode, p->new_name);
4154                 else
4155                         printf(" mode change %06o => %06o\n",
4156                                p->old_mode, p->new_mode);
4157         }
4158 }
4159
4160 static void show_rename_copy(struct patch *p)
4161 {
4162         const char *renamecopy = p->is_rename ? "rename" : "copy";
4163         const char *old, *new;
4164
4165         /* Find common prefix */
4166         old = p->old_name;
4167         new = p->new_name;
4168         while (1) {
4169                 const char *slash_old, *slash_new;
4170                 slash_old = strchr(old, '/');
4171                 slash_new = strchr(new, '/');
4172                 if (!slash_old ||
4173                     !slash_new ||
4174                     slash_old - old != slash_new - new ||
4175                     memcmp(old, new, slash_new - new))
4176                         break;
4177                 old = slash_old + 1;
4178                 new = slash_new + 1;
4179         }
4180         /* p->old_name thru old is the common prefix, and old and new
4181          * through the end of names are renames
4182          */
4183         if (old != p->old_name)
4184                 printf(" %s %.*s{%s => %s} (%d%%)\n", renamecopy,
4185                        (int)(old - p->old_name), p->old_name,
4186                        old, new, p->score);
4187         else
4188                 printf(" %s %s => %s (%d%%)\n", renamecopy,
4189                        p->old_name, p->new_name, p->score);
4190         show_mode_change(p, 0);
4191 }
4192
4193 static void summary_patch_list(struct patch *patch)
4194 {
4195         struct patch *p;
4196
4197         for (p = patch; p; p = p->next) {
4198                 if (p->is_new)
4199                         show_file_mode_name("create", p->new_mode, p->new_name);
4200                 else if (p->is_delete)
4201                         show_file_mode_name("delete", p->old_mode, p->old_name);
4202                 else {
4203                         if (p->is_rename || p->is_copy)
4204                                 show_rename_copy(p);
4205                         else {
4206                                 if (p->score) {
4207                                         printf(" rewrite %s (%d%%)\n",
4208                                                p->new_name, p->score);
4209                                         show_mode_change(p, 0);
4210                                 }
4211                                 else
4212                                         show_mode_change(p, 1);
4213                         }
4214                 }
4215         }
4216 }
4217
4218 static void patch_stats(struct apply_state *state, struct patch *patch)
4219 {
4220         int lines = patch->lines_added + patch->lines_deleted;
4221
4222         if (lines > state->max_change)
4223                 state->max_change = lines;
4224         if (patch->old_name) {
4225                 int len = quote_c_style(patch->old_name, NULL, NULL, 0);
4226                 if (!len)
4227                         len = strlen(patch->old_name);
4228                 if (len > state->max_len)
4229                         state->max_len = len;
4230         }
4231         if (patch->new_name) {
4232                 int len = quote_c_style(patch->new_name, NULL, NULL, 0);
4233                 if (!len)
4234                         len = strlen(patch->new_name);
4235                 if (len > state->max_len)
4236                         state->max_len = len;
4237         }
4238 }
4239
4240 static int remove_file(struct apply_state *state, struct patch *patch, int rmdir_empty)
4241 {
4242         if (state->update_index) {
4243                 if (remove_file_from_cache(patch->old_name) < 0)
4244                         return error(_("unable to remove %s from index"), patch->old_name);
4245         }
4246         if (!state->cached) {
4247                 if (!remove_or_warn(patch->old_mode, patch->old_name) && rmdir_empty) {
4248                         remove_path(patch->old_name);
4249                 }
4250         }
4251         return 0;
4252 }
4253
4254 static int add_index_file(struct apply_state *state,
4255                           const char *path,
4256                           unsigned mode,
4257                           void *buf,
4258                           unsigned long size)
4259 {
4260         struct stat st;
4261         struct cache_entry *ce;
4262         int namelen = strlen(path);
4263         unsigned ce_size = cache_entry_size(namelen);
4264
4265         if (!state->update_index)
4266                 return 0;
4267
4268         ce = xcalloc(1, ce_size);
4269         memcpy(ce->name, path, namelen);
4270         ce->ce_mode = create_ce_mode(mode);
4271         ce->ce_flags = create_ce_flags(0);
4272         ce->ce_namelen = namelen;
4273         if (S_ISGITLINK(mode)) {
4274                 const char *s;
4275
4276                 if (!skip_prefix(buf, "Subproject commit ", &s) ||
4277                     get_oid_hex(s, &ce->oid)) {
4278                         free(ce);
4279                        return error(_("corrupt patch for submodule %s"), path);
4280                 }
4281         } else {
4282                 if (!state->cached) {
4283                         if (lstat(path, &st) < 0) {
4284                                 free(ce);
4285                                 return error_errno(_("unable to stat newly "
4286                                                      "created file '%s'"),
4287                                                    path);
4288                         }
4289                         fill_stat_cache_info(ce, &st);
4290                 }
4291                 if (write_sha1_file(buf, size, blob_type, ce->oid.hash) < 0) {
4292                         free(ce);
4293                         return error(_("unable to create backing store "
4294                                        "for newly created file %s"), path);
4295                 }
4296         }
4297         if (add_cache_entry(ce, ADD_CACHE_OK_TO_ADD) < 0) {
4298                 free(ce);
4299                 return error(_("unable to add cache entry for %s"), path);
4300         }
4301
4302         return 0;
4303 }
4304
4305 /*
4306  * Returns:
4307  *  -1 if an unrecoverable error happened
4308  *   0 if everything went well
4309  *   1 if a recoverable error happened
4310  */
4311 static int try_create_file(const char *path, unsigned int mode, const char *buf, unsigned long size)
4312 {
4313         int fd, res;
4314         struct strbuf nbuf = STRBUF_INIT;
4315
4316         if (S_ISGITLINK(mode)) {
4317                 struct stat st;
4318                 if (!lstat(path, &st) && S_ISDIR(st.st_mode))
4319                         return 0;
4320                 return !!mkdir(path, 0777);
4321         }
4322
4323         if (has_symlinks && S_ISLNK(mode))
4324                 /* Although buf:size is counted string, it also is NUL
4325                  * terminated.
4326                  */
4327                 return !!symlink(buf, path);
4328
4329         fd = open(path, O_CREAT | O_EXCL | O_WRONLY, (mode & 0100) ? 0777 : 0666);
4330         if (fd < 0)
4331                 return 1;
4332
4333         if (convert_to_working_tree(path, buf, size, &nbuf)) {
4334                 size = nbuf.len;
4335                 buf  = nbuf.buf;
4336         }
4337
4338         res = write_in_full(fd, buf, size) < 0;
4339         if (res)
4340                 error_errno(_("failed to write to '%s'"), path);
4341         strbuf_release(&nbuf);
4342
4343         if (close(fd) < 0 && !res)
4344                 return error_errno(_("closing file '%s'"), path);
4345
4346         return res ? -1 : 0;
4347 }
4348
4349 /*
4350  * We optimistically assume that the directories exist,
4351  * which is true 99% of the time anyway. If they don't,
4352  * we create them and try again.
4353  *
4354  * Returns:
4355  *   -1 on error
4356  *   0 otherwise
4357  */
4358 static int create_one_file(struct apply_state *state,
4359                            char *path,
4360                            unsigned mode,
4361                            const char *buf,
4362                            unsigned long size)
4363 {
4364         int res;
4365
4366         if (state->cached)
4367                 return 0;
4368
4369         res = try_create_file(path, mode, buf, size);
4370         if (res < 0)
4371                 return -1;
4372         if (!res)
4373                 return 0;
4374
4375         if (errno == ENOENT) {
4376                 if (safe_create_leading_directories(path))
4377                         return 0;
4378                 res = try_create_file(path, mode, buf, size);
4379                 if (res < 0)
4380                         return -1;
4381                 if (!res)
4382                         return 0;
4383         }
4384
4385         if (errno == EEXIST || errno == EACCES) {
4386                 /* We may be trying to create a file where a directory
4387                  * used to be.
4388                  */
4389                 struct stat st;
4390                 if (!lstat(path, &st) && (!S_ISDIR(st.st_mode) || !rmdir(path)))
4391                         errno = EEXIST;
4392         }
4393
4394         if (errno == EEXIST) {
4395                 unsigned int nr = getpid();
4396
4397                 for (;;) {
4398                         char newpath[PATH_MAX];
4399                         mksnpath(newpath, sizeof(newpath), "%s~%u", path, nr);
4400                         res = try_create_file(newpath, mode, buf, size);
4401                         if (res < 0)
4402                                 return -1;
4403                         if (!res) {
4404                                 if (!rename(newpath, path))
4405                                         return 0;
4406                                 unlink_or_warn(newpath);
4407                                 break;
4408                         }
4409                         if (errno != EEXIST)
4410                                 break;
4411                         ++nr;
4412                 }
4413         }
4414         return error_errno(_("unable to write file '%s' mode %o"),
4415                            path, mode);
4416 }
4417
4418 static int add_conflicted_stages_file(struct apply_state *state,
4419                                        struct patch *patch)
4420 {
4421         int stage, namelen;
4422         unsigned ce_size, mode;
4423         struct cache_entry *ce;
4424
4425         if (!state->update_index)
4426                 return 0;
4427         namelen = strlen(patch->new_name);
4428         ce_size = cache_entry_size(namelen);
4429         mode = patch->new_mode ? patch->new_mode : (S_IFREG | 0644);
4430
4431         remove_file_from_cache(patch->new_name);
4432         for (stage = 1; stage < 4; stage++) {
4433                 if (is_null_oid(&patch->threeway_stage[stage - 1]))
4434                         continue;
4435                 ce = xcalloc(1, ce_size);
4436                 memcpy(ce->name, patch->new_name, namelen);
4437                 ce->ce_mode = create_ce_mode(mode);
4438                 ce->ce_flags = create_ce_flags(stage);
4439                 ce->ce_namelen = namelen;
4440                 oidcpy(&ce->oid, &patch->threeway_stage[stage - 1]);
4441                 if (add_cache_entry(ce, ADD_CACHE_OK_TO_ADD) < 0) {
4442                         free(ce);
4443                         return error(_("unable to add cache entry for %s"),
4444                                      patch->new_name);
4445                 }
4446         }
4447
4448         return 0;
4449 }
4450
4451 static int create_file(struct apply_state *state, struct patch *patch)
4452 {
4453         char *path = patch->new_name;
4454         unsigned mode = patch->new_mode;
4455         unsigned long size = patch->resultsize;
4456         char *buf = patch->result;
4457
4458         if (!mode)
4459                 mode = S_IFREG | 0644;
4460         if (create_one_file(state, path, mode, buf, size))
4461                 return -1;
4462
4463         if (patch->conflicted_threeway)
4464                 return add_conflicted_stages_file(state, patch);
4465         else
4466                 return add_index_file(state, path, mode, buf, size);
4467 }
4468
4469 /* phase zero is to remove, phase one is to create */
4470 static int write_out_one_result(struct apply_state *state,
4471                                 struct patch *patch,
4472                                 int phase)
4473 {
4474         if (patch->is_delete > 0) {
4475                 if (phase == 0)
4476                         return remove_file(state, patch, 1);
4477                 return 0;
4478         }
4479         if (patch->is_new > 0 || patch->is_copy) {
4480                 if (phase == 1)
4481                         return create_file(state, patch);
4482                 return 0;
4483         }
4484         /*
4485          * Rename or modification boils down to the same
4486          * thing: remove the old, write the new
4487          */
4488         if (phase == 0)
4489                 return remove_file(state, patch, patch->is_rename);
4490         if (phase == 1)
4491                 return create_file(state, patch);
4492         return 0;
4493 }
4494
4495 static int write_out_one_reject(struct apply_state *state, struct patch *patch)
4496 {
4497         FILE *rej;
4498         char namebuf[PATH_MAX];
4499         struct fragment *frag;
4500         int cnt = 0;
4501         struct strbuf sb = STRBUF_INIT;
4502
4503         for (cnt = 0, frag = patch->fragments; frag; frag = frag->next) {
4504                 if (!frag->rejected)
4505                         continue;
4506                 cnt++;
4507         }
4508
4509         if (!cnt) {
4510                 if (state->apply_verbosity > verbosity_normal)
4511                         say_patch_name(stderr,
4512                                        _("Applied patch %s cleanly."), patch);
4513                 return 0;
4514         }
4515
4516         /* This should not happen, because a removal patch that leaves
4517          * contents are marked "rejected" at the patch level.
4518          */
4519         if (!patch->new_name)
4520                 die(_("internal error"));
4521
4522         /* Say this even without --verbose */
4523         strbuf_addf(&sb, Q_("Applying patch %%s with %d reject...",
4524                             "Applying patch %%s with %d rejects...",
4525                             cnt),
4526                     cnt);
4527         if (state->apply_verbosity > verbosity_silent)
4528                 say_patch_name(stderr, sb.buf, patch);
4529         strbuf_release(&sb);
4530
4531         cnt = strlen(patch->new_name);
4532         if (ARRAY_SIZE(namebuf) <= cnt + 5) {
4533                 cnt = ARRAY_SIZE(namebuf) - 5;
4534                 warning(_("truncating .rej filename to %.*s.rej"),
4535                         cnt - 1, patch->new_name);
4536         }
4537         memcpy(namebuf, patch->new_name, cnt);
4538         memcpy(namebuf + cnt, ".rej", 5);
4539
4540         rej = fopen(namebuf, "w");
4541         if (!rej)
4542                 return error_errno(_("cannot open %s"), namebuf);
4543
4544         /* Normal git tools never deal with .rej, so do not pretend
4545          * this is a git patch by saying --git or giving extended
4546          * headers.  While at it, maybe please "kompare" that wants
4547          * the trailing TAB and some garbage at the end of line ;-).
4548          */
4549         fprintf(rej, "diff a/%s b/%s\t(rejected hunks)\n",
4550                 patch->new_name, patch->new_name);
4551         for (cnt = 1, frag = patch->fragments;
4552              frag;
4553              cnt++, frag = frag->next) {
4554                 if (!frag->rejected) {
4555                         if (state->apply_verbosity > verbosity_silent)
4556                                 fprintf_ln(stderr, _("Hunk #%d applied cleanly."), cnt);
4557                         continue;
4558                 }
4559                 if (state->apply_verbosity > verbosity_silent)
4560                         fprintf_ln(stderr, _("Rejected hunk #%d."), cnt);
4561                 fprintf(rej, "%.*s", frag->size, frag->patch);
4562                 if (frag->patch[frag->size-1] != '\n')
4563                         fputc('\n', rej);
4564         }
4565         fclose(rej);
4566         return -1;
4567 }
4568
4569 /*
4570  * Returns:
4571  *  -1 if an error happened
4572  *   0 if the patch applied cleanly
4573  *   1 if the patch did not apply cleanly
4574  */
4575 static int write_out_results(struct apply_state *state, struct patch *list)
4576 {
4577         int phase;
4578         int errs = 0;
4579         struct patch *l;
4580         struct string_list cpath = STRING_LIST_INIT_DUP;
4581
4582         for (phase = 0; phase < 2; phase++) {
4583                 l = list;
4584                 while (l) {
4585                         if (l->rejected)
4586                                 errs = 1;
4587                         else {
4588                                 if (write_out_one_result(state, l, phase)) {
4589                                         string_list_clear(&cpath, 0);
4590                                         return -1;
4591                                 }
4592                                 if (phase == 1) {
4593                                         if (write_out_one_reject(state, l))
4594                                                 errs = 1;
4595                                         if (l->conflicted_threeway) {
4596                                                 string_list_append(&cpath, l->new_name);
4597                                                 errs = 1;
4598                                         }
4599                                 }
4600                         }
4601                         l = l->next;
4602                 }
4603         }
4604
4605         if (cpath.nr) {
4606                 struct string_list_item *item;
4607
4608                 string_list_sort(&cpath);
4609                 if (state->apply_verbosity > verbosity_silent) {
4610                         for_each_string_list_item(item, &cpath)
4611                                 fprintf(stderr, "U %s\n", item->string);
4612                 }
4613                 string_list_clear(&cpath, 0);
4614
4615                 rerere(0);
4616         }
4617
4618         return errs;
4619 }
4620
4621 /*
4622  * Try to apply a patch.
4623  *
4624  * Returns:
4625  *  -128 if a bad error happened (like patch unreadable)
4626  *  -1 if patch did not apply and user cannot deal with it
4627  *   0 if the patch applied
4628  *   1 if the patch did not apply but user might fix it
4629  */
4630 static int apply_patch(struct apply_state *state,
4631                        int fd,
4632                        const char *filename,
4633                        int options)
4634 {
4635         size_t offset;
4636         struct strbuf buf = STRBUF_INIT; /* owns the patch text */
4637         struct patch *list = NULL, **listp = &list;
4638         int skipped_patch = 0;
4639         int res = 0;
4640
4641         state->patch_input_file = filename;
4642         if (read_patch_file(&buf, fd) < 0)
4643                 return -128;
4644         offset = 0;
4645         while (offset < buf.len) {
4646                 struct patch *patch;
4647                 int nr;
4648
4649                 patch = xcalloc(1, sizeof(*patch));
4650                 patch->inaccurate_eof = !!(options & APPLY_OPT_INACCURATE_EOF);
4651                 patch->recount =  !!(options & APPLY_OPT_RECOUNT);
4652                 nr = parse_chunk(state, buf.buf + offset, buf.len - offset, patch);
4653                 if (nr < 0) {
4654                         free_patch(patch);
4655                         if (nr == -128) {
4656                                 res = -128;
4657                                 goto end;
4658                         }
4659                         break;
4660                 }
4661                 if (state->apply_in_reverse)
4662                         reverse_patches(patch);
4663                 if (use_patch(state, patch)) {
4664                         patch_stats(state, patch);
4665                         *listp = patch;
4666                         listp = &patch->next;
4667                 }
4668                 else {
4669                         if (state->apply_verbosity > verbosity_normal)
4670                                 say_patch_name(stderr, _("Skipped patch '%s'."), patch);
4671                         free_patch(patch);
4672                         skipped_patch++;
4673                 }
4674                 offset += nr;
4675         }
4676
4677         if (!list && !skipped_patch) {
4678                 error(_("unrecognized input"));
4679                 res = -128;
4680                 goto end;
4681         }
4682
4683         if (state->whitespace_error && (state->ws_error_action == die_on_ws_error))
4684                 state->apply = 0;
4685
4686         state->update_index = state->check_index && state->apply;
4687         if (state->update_index && state->newfd < 0) {
4688                 if (state->index_file)
4689                         state->newfd = hold_lock_file_for_update(state->lock_file,
4690                                                                  state->index_file,
4691                                                                  LOCK_DIE_ON_ERROR);
4692                 else
4693                         state->newfd = hold_locked_index(state->lock_file, LOCK_DIE_ON_ERROR);
4694         }
4695
4696         if (state->check_index && read_apply_cache(state) < 0) {
4697                 error(_("unable to read index file"));
4698                 res = -128;
4699                 goto end;
4700         }
4701
4702         if (state->check || state->apply) {
4703                 int r = check_patch_list(state, list);
4704                 if (r == -128) {
4705                         res = -128;
4706                         goto end;
4707                 }
4708                 if (r < 0 && !state->apply_with_reject) {
4709                         res = -1;
4710                         goto end;
4711                 }
4712         }
4713
4714         if (state->apply) {
4715                 int write_res = write_out_results(state, list);
4716                 if (write_res < 0) {
4717                         res = -128;
4718                         goto end;
4719                 }
4720                 if (write_res > 0) {
4721                         /* with --3way, we still need to write the index out */
4722                         res = state->apply_with_reject ? -1 : 1;
4723                         goto end;
4724                 }
4725         }
4726
4727         if (state->fake_ancestor &&
4728             build_fake_ancestor(state, list)) {
4729                 res = -128;
4730                 goto end;
4731         }
4732
4733         if (state->diffstat && state->apply_verbosity > verbosity_silent)
4734                 stat_patch_list(state, list);
4735
4736         if (state->numstat && state->apply_verbosity > verbosity_silent)
4737                 numstat_patch_list(state, list);
4738
4739         if (state->summary && state->apply_verbosity > verbosity_silent)
4740                 summary_patch_list(list);
4741
4742 end:
4743         free_patch_list(list);
4744         strbuf_release(&buf);
4745         string_list_clear(&state->fn_table, 0);
4746         return res;
4747 }
4748
4749 static int apply_option_parse_exclude(const struct option *opt,
4750                                       const char *arg, int unset)
4751 {
4752         struct apply_state *state = opt->value;
4753         add_name_limit(state, arg, 1);
4754         return 0;
4755 }
4756
4757 static int apply_option_parse_include(const struct option *opt,
4758                                       const char *arg, int unset)
4759 {
4760         struct apply_state *state = opt->value;
4761         add_name_limit(state, arg, 0);
4762         state->has_include = 1;
4763         return 0;
4764 }
4765
4766 static int apply_option_parse_p(const struct option *opt,
4767                                 const char *arg,
4768                                 int unset)
4769 {
4770         struct apply_state *state = opt->value;
4771         state->p_value = atoi(arg);
4772         state->p_value_known = 1;
4773         return 0;
4774 }
4775
4776 static int apply_option_parse_space_change(const struct option *opt,
4777                                            const char *arg, int unset)
4778 {
4779         struct apply_state *state = opt->value;
4780         if (unset)
4781                 state->ws_ignore_action = ignore_ws_none;
4782         else
4783                 state->ws_ignore_action = ignore_ws_change;
4784         return 0;
4785 }
4786
4787 static int apply_option_parse_whitespace(const struct option *opt,
4788                                          const char *arg, int unset)
4789 {
4790         struct apply_state *state = opt->value;
4791         state->whitespace_option = arg;
4792         if (parse_whitespace_option(state, arg))
4793                 exit(1);
4794         return 0;
4795 }
4796
4797 static int apply_option_parse_directory(const struct option *opt,
4798                                         const char *arg, int unset)
4799 {
4800         struct apply_state *state = opt->value;
4801         strbuf_reset(&state->root);
4802         strbuf_addstr(&state->root, arg);
4803         strbuf_complete(&state->root, '/');
4804         return 0;
4805 }
4806
4807 int apply_all_patches(struct apply_state *state,
4808                       int argc,
4809                       const char **argv,
4810                       int options)
4811 {
4812         int i;
4813         int res;
4814         int errs = 0;
4815         int read_stdin = 1;
4816
4817         for (i = 0; i < argc; i++) {
4818                 const char *arg = argv[i];
4819                 char *to_free = NULL;
4820                 int fd;
4821
4822                 if (!strcmp(arg, "-")) {
4823                         res = apply_patch(state, 0, "<stdin>", options);
4824                         if (res < 0)
4825                                 goto end;
4826                         errs |= res;
4827                         read_stdin = 0;
4828                         continue;
4829                 } else
4830                         arg = to_free = prefix_filename(state->prefix, arg);
4831
4832                 fd = open(arg, O_RDONLY);
4833                 if (fd < 0) {
4834                         error(_("can't open patch '%s': %s"), arg, strerror(errno));
4835                         res = -128;
4836                         free(to_free);
4837                         goto end;
4838                 }
4839                 read_stdin = 0;
4840                 set_default_whitespace_mode(state);
4841                 res = apply_patch(state, fd, arg, options);
4842                 close(fd);
4843                 free(to_free);
4844                 if (res < 0)
4845                         goto end;
4846                 errs |= res;
4847         }
4848         set_default_whitespace_mode(state);
4849         if (read_stdin) {
4850                 res = apply_patch(state, 0, "<stdin>", options);
4851                 if (res < 0)
4852                         goto end;
4853                 errs |= res;
4854         }
4855
4856         if (state->whitespace_error) {
4857                 if (state->squelch_whitespace_errors &&
4858                     state->squelch_whitespace_errors < state->whitespace_error) {
4859                         int squelched =
4860                                 state->whitespace_error - state->squelch_whitespace_errors;
4861                         warning(Q_("squelched %d whitespace error",
4862                                    "squelched %d whitespace errors",
4863                                    squelched),
4864                                 squelched);
4865                 }
4866                 if (state->ws_error_action == die_on_ws_error) {
4867                         error(Q_("%d line adds whitespace errors.",
4868                                  "%d lines add whitespace errors.",
4869                                  state->whitespace_error),
4870                               state->whitespace_error);
4871                         res = -128;
4872                         goto end;
4873                 }
4874                 if (state->applied_after_fixing_ws && state->apply)
4875                         warning(Q_("%d line applied after"
4876                                    " fixing whitespace errors.",
4877                                    "%d lines applied after"
4878                                    " fixing whitespace errors.",
4879                                    state->applied_after_fixing_ws),
4880                                 state->applied_after_fixing_ws);
4881                 else if (state->whitespace_error)
4882                         warning(Q_("%d line adds whitespace errors.",
4883                                    "%d lines add whitespace errors.",
4884                                    state->whitespace_error),
4885                                 state->whitespace_error);
4886         }
4887
4888         if (state->update_index) {
4889                 res = write_locked_index(&the_index, state->lock_file, COMMIT_LOCK);
4890                 if (res) {
4891                         error(_("Unable to write new index file"));
4892                         res = -128;
4893                         goto end;
4894                 }
4895                 state->newfd = -1;
4896         }
4897
4898         res = !!errs;
4899
4900 end:
4901         if (state->newfd >= 0) {
4902                 rollback_lock_file(state->lock_file);
4903                 state->newfd = -1;
4904         }
4905
4906         if (state->apply_verbosity <= verbosity_silent) {
4907                 set_error_routine(state->saved_error_routine);
4908                 set_warn_routine(state->saved_warn_routine);
4909         }
4910
4911         if (res > -1)
4912                 return res;
4913         return (res == -1 ? 1 : 128);
4914 }
4915
4916 int apply_parse_options(int argc, const char **argv,
4917                         struct apply_state *state,
4918                         int *force_apply, int *options,
4919                         const char * const *apply_usage)
4920 {
4921         struct option builtin_apply_options[] = {
4922                 { OPTION_CALLBACK, 0, "exclude", state, N_("path"),
4923                         N_("don't apply changes matching the given path"),
4924                         0, apply_option_parse_exclude },
4925                 { OPTION_CALLBACK, 0, "include", state, N_("path"),
4926                         N_("apply changes matching the given path"),
4927                         0, apply_option_parse_include },
4928                 { OPTION_CALLBACK, 'p', NULL, state, N_("num"),
4929                         N_("remove <num> leading slashes from traditional diff paths"),
4930                         0, apply_option_parse_p },
4931                 OPT_BOOL(0, "no-add", &state->no_add,
4932                         N_("ignore additions made by the patch")),
4933                 OPT_BOOL(0, "stat", &state->diffstat,
4934                         N_("instead of applying the patch, output diffstat for the input")),
4935                 OPT_NOOP_NOARG(0, "allow-binary-replacement"),
4936                 OPT_NOOP_NOARG(0, "binary"),
4937                 OPT_BOOL(0, "numstat", &state->numstat,
4938                         N_("show number of added and deleted lines in decimal notation")),
4939                 OPT_BOOL(0, "summary", &state->summary,
4940                         N_("instead of applying the patch, output a summary for the input")),
4941                 OPT_BOOL(0, "check", &state->check,
4942                         N_("instead of applying the patch, see if the patch is applicable")),
4943                 OPT_BOOL(0, "index", &state->check_index,
4944                         N_("make sure the patch is applicable to the current index")),
4945                 OPT_BOOL(0, "cached", &state->cached,
4946                         N_("apply a patch without touching the working tree")),
4947                 OPT_BOOL(0, "unsafe-paths", &state->unsafe_paths,
4948                         N_("accept a patch that touches outside the working area")),
4949                 OPT_BOOL(0, "apply", force_apply,
4950                         N_("also apply the patch (use with --stat/--summary/--check)")),
4951                 OPT_BOOL('3', "3way", &state->threeway,
4952                          N_( "attempt three-way merge if a patch does not apply")),
4953                 OPT_FILENAME(0, "build-fake-ancestor", &state->fake_ancestor,
4954                         N_("build a temporary index based on embedded index information")),
4955                 /* Think twice before adding "--nul" synonym to this */
4956                 OPT_SET_INT('z', NULL, &state->line_termination,
4957                         N_("paths are separated with NUL character"), '\0'),
4958                 OPT_INTEGER('C', NULL, &state->p_context,
4959                                 N_("ensure at least <n> lines of context match")),
4960                 { OPTION_CALLBACK, 0, "whitespace", state, N_("action"),
4961                         N_("detect new or modified lines that have whitespace errors"),
4962                         0, apply_option_parse_whitespace },
4963                 { OPTION_CALLBACK, 0, "ignore-space-change", state, NULL,
4964                         N_("ignore changes in whitespace when finding context"),
4965                         PARSE_OPT_NOARG, apply_option_parse_space_change },
4966                 { OPTION_CALLBACK, 0, "ignore-whitespace", state, NULL,
4967                         N_("ignore changes in whitespace when finding context"),
4968                         PARSE_OPT_NOARG, apply_option_parse_space_change },
4969                 OPT_BOOL('R', "reverse", &state->apply_in_reverse,
4970                         N_("apply the patch in reverse")),
4971                 OPT_BOOL(0, "unidiff-zero", &state->unidiff_zero,
4972                         N_("don't expect at least one line of context")),
4973                 OPT_BOOL(0, "reject", &state->apply_with_reject,
4974                         N_("leave the rejected hunks in corresponding *.rej files")),
4975                 OPT_BOOL(0, "allow-overlap", &state->allow_overlap,
4976                         N_("allow overlapping hunks")),
4977                 OPT__VERBOSE(&state->apply_verbosity, N_("be verbose")),
4978                 OPT_BIT(0, "inaccurate-eof", options,
4979                         N_("tolerate incorrectly detected missing new-line at the end of file"),
4980                         APPLY_OPT_INACCURATE_EOF),
4981                 OPT_BIT(0, "recount", options,
4982                         N_("do not trust the line counts in the hunk headers"),
4983                         APPLY_OPT_RECOUNT),
4984                 { OPTION_CALLBACK, 0, "directory", state, N_("root"),
4985                         N_("prepend <root> to all filenames"),
4986                         0, apply_option_parse_directory },
4987                 OPT_END()
4988         };
4989
4990         return parse_options(argc, argv, state->prefix, builtin_apply_options, apply_usage, 0);
4991 }