2 * Various trivial helper wrappers around standard functions
7 static int memory_limit_check(size_t size, int gentle)
9 static size_t limit = 0;
11 limit = git_env_ulong("GIT_ALLOC_LIMIT", 0);
17 error("attempting to allocate %"PRIuMAX" over limit %"PRIuMAX,
18 (uintmax_t)size, (uintmax_t)limit);
21 die("attempting to allocate %"PRIuMAX" over limit %"PRIuMAX,
22 (uintmax_t)size, (uintmax_t)limit);
27 char *xstrdup(const char *str)
29 char *ret = strdup(str);
31 die("Out of memory, strdup failed");
35 static void *do_xmalloc(size_t size, int gentle)
39 if (memory_limit_check(size, gentle))
46 die("Out of memory, malloc failed (tried to allocate %lu bytes)",
49 error("Out of memory, malloc failed (tried to allocate %lu bytes)",
55 memset(ret, 0xA5, size);
60 void *xmalloc(size_t size)
62 return do_xmalloc(size, 0);
65 static void *do_xmallocz(size_t size, int gentle)
68 if (unsigned_add_overflows(size, 1)) {
70 error("Data too large to fit into virtual memory space.");
73 die("Data too large to fit into virtual memory space.");
75 ret = do_xmalloc(size + 1, gentle);
77 ((char*)ret)[size] = 0;
81 void *xmallocz(size_t size)
83 return do_xmallocz(size, 0);
86 void *xmallocz_gently(size_t size)
88 return do_xmallocz(size, 1);
92 * xmemdupz() allocates (len + 1) bytes of memory, duplicates "len" bytes of
93 * "data" to the allocated memory, zero terminates the allocated memory,
94 * and returns a pointer to the allocated memory. If the allocation fails,
97 void *xmemdupz(const void *data, size_t len)
99 return memcpy(xmallocz(len), data, len);
102 char *xstrndup(const char *str, size_t len)
104 char *p = memchr(str, '\0', len);
105 return xmemdupz(str, p ? p - str : len);
108 int xstrncmpz(const char *s, const char *t, size_t len)
110 int res = strncmp(s, t, len);
113 return s[len] == '\0' ? 0 : 1;
116 void *xrealloc(void *ptr, size_t size)
120 memory_limit_check(size, 0);
121 ret = realloc(ptr, size);
123 ret = realloc(ptr, 1);
125 die("Out of memory, realloc failed");
129 void *xcalloc(size_t nmemb, size_t size)
133 if (unsigned_mult_overflows(nmemb, size))
134 die("data too large to fit into virtual memory space");
136 memory_limit_check(size * nmemb, 0);
137 ret = calloc(nmemb, size);
138 if (!ret && (!nmemb || !size))
141 die("Out of memory, calloc failed");
146 * Limit size of IO chunks, because huge chunks only cause pain. OS X
147 * 64-bit is buggy, returning EINVAL if len >= INT_MAX; and even in
148 * the absence of bugs, large chunks can result in bad latencies when
149 * you decide to kill the process.
151 * We pick 8 MiB as our default, but if the platform defines SSIZE_MAX
152 * that is smaller than that, clip it to SSIZE_MAX, as a call to
153 * read(2) or write(2) larger than that is allowed to fail. As the last
154 * resort, we allow a port to pass via CFLAGS e.g. "-DMAX_IO_SIZE=value"
155 * to override this, if the definition of SSIZE_MAX given by the platform
159 # define MAX_IO_SIZE_DEFAULT (8*1024*1024)
160 # if defined(SSIZE_MAX) && (SSIZE_MAX < MAX_IO_SIZE_DEFAULT)
161 # define MAX_IO_SIZE SSIZE_MAX
163 # define MAX_IO_SIZE MAX_IO_SIZE_DEFAULT
168 * xopen() is the same as open(), but it die()s if the open() fails.
170 int xopen(const char *path, int oflag, ...)
176 * va_arg() will have undefined behavior if the specified type is not
177 * compatible with the argument type. Since integers are promoted to
178 * ints, we fetch the next argument as an int, and then cast it to a
179 * mode_t to avoid undefined behavior.
183 mode = va_arg(ap, int);
187 int fd = open(path, oflag, mode);
193 if ((oflag & O_RDWR) == O_RDWR)
194 die_errno(_("could not open '%s' for reading and writing"), path);
195 else if ((oflag & O_WRONLY) == O_WRONLY)
196 die_errno(_("could not open '%s' for writing"), path);
198 die_errno(_("could not open '%s' for reading"), path);
202 static int handle_nonblock(int fd, short poll_events, int err)
206 if (err != EAGAIN && err != EWOULDBLOCK)
210 pfd.events = poll_events;
213 * no need to check for errors, here;
214 * a subsequent read/write will detect unrecoverable errors
221 * xread() is the same a read(), but it automatically restarts read()
222 * operations with a recoverable error (EAGAIN and EINTR). xread()
223 * DOES NOT GUARANTEE that "len" bytes is read even if the data is available.
225 ssize_t xread(int fd, void *buf, size_t len)
228 if (len > MAX_IO_SIZE)
231 nr = read(fd, buf, len);
235 if (handle_nonblock(fd, POLLIN, errno))
243 * xwrite() is the same a write(), but it automatically restarts write()
244 * operations with a recoverable error (EAGAIN and EINTR). xwrite() DOES NOT
245 * GUARANTEE that "len" bytes is written even if the operation is successful.
247 ssize_t xwrite(int fd, const void *buf, size_t len)
250 if (len > MAX_IO_SIZE)
253 nr = write(fd, buf, len);
257 if (handle_nonblock(fd, POLLOUT, errno))
266 * xpread() is the same as pread(), but it automatically restarts pread()
267 * operations with a recoverable error (EAGAIN and EINTR). xpread() DOES
268 * NOT GUARANTEE that "len" bytes is read even if the data is available.
270 ssize_t xpread(int fd, void *buf, size_t len, off_t offset)
273 if (len > MAX_IO_SIZE)
276 nr = pread(fd, buf, len, offset);
277 if ((nr < 0) && (errno == EAGAIN || errno == EINTR))
283 ssize_t read_in_full(int fd, void *buf, size_t count)
289 ssize_t loaded = xread(fd, p, count);
302 ssize_t write_in_full(int fd, const void *buf, size_t count)
308 ssize_t written = xwrite(fd, p, count);
323 ssize_t pread_in_full(int fd, void *buf, size_t count, off_t offset)
329 ssize_t loaded = xpread(fd, p, count, offset);
347 die_errno("dup failed");
352 * xfopen() is the same as fopen(), but it die()s if the fopen() fails.
354 FILE *xfopen(const char *path, const char *mode)
357 FILE *fp = fopen(path, mode);
363 if (*mode && mode[1] == '+')
364 die_errno(_("could not open '%s' for reading and writing"), path);
365 else if (*mode == 'w' || *mode == 'a')
366 die_errno(_("could not open '%s' for writing"), path);
368 die_errno(_("could not open '%s' for reading"), path);
372 FILE *xfdopen(int fd, const char *mode)
374 FILE *stream = fdopen(fd, mode);
376 die_errno("Out of memory? fdopen failed");
380 FILE *fopen_for_writing(const char *path)
382 FILE *ret = fopen(path, "w");
384 if (!ret && errno == EPERM) {
386 ret = fopen(path, "w");
393 static void warn_on_inaccessible(const char *path)
395 warning_errno(_("unable to access '%s'"), path);
398 int warn_on_fopen_errors(const char *path)
400 if (errno != ENOENT && errno != ENOTDIR) {
401 warn_on_inaccessible(path);
408 FILE *fopen_or_warn(const char *path, const char *mode)
410 FILE *fp = fopen(path, mode);
415 warn_on_fopen_errors(path);
419 int xmkstemp(char *filename_template)
422 char origtemplate[PATH_MAX];
423 strlcpy(origtemplate, filename_template, sizeof(origtemplate));
425 fd = mkstemp(filename_template);
427 int saved_errno = errno;
428 const char *nonrelative_template;
430 if (strlen(filename_template) != strlen(origtemplate))
431 filename_template = origtemplate;
433 nonrelative_template = absolute_path(filename_template);
435 die_errno("Unable to create temporary file '%s'",
436 nonrelative_template);
441 /* Adapted from libiberty's mkstemp.c. */
444 #define TMP_MAX 16384
446 int git_mkstemps_mode(char *pattern, int suffix_len, int mode)
448 static const char letters[] =
449 "abcdefghijklmnopqrstuvwxyz"
450 "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
452 static const int num_letters = ARRAY_SIZE(letters) - 1;
453 static const char x_pattern[] = "XXXXXX";
454 static const int num_x = ARRAY_SIZE(x_pattern) - 1;
457 char *filename_template;
461 len = strlen(pattern);
463 if (len < num_x + suffix_len) {
468 if (strncmp(&pattern[len - num_x - suffix_len], x_pattern, num_x)) {
474 * Replace pattern's XXXXXX characters with randomness.
475 * Try TMP_MAX different filenames.
477 gettimeofday(&tv, NULL);
478 value = ((uint64_t)tv.tv_usec << 16) ^ tv.tv_sec ^ getpid();
479 filename_template = &pattern[len - num_x - suffix_len];
480 for (count = 0; count < TMP_MAX; ++count) {
483 /* Fill in the random bits. */
484 for (i = 0; i < num_x; i++) {
485 filename_template[i] = letters[v % num_letters];
489 fd = open(pattern, O_CREAT | O_EXCL | O_RDWR, mode);
493 * Fatal error (EPERM, ENOSPC etc).
494 * It doesn't make sense to loop.
499 * This is a random value. It is only necessary that
500 * the next TMP_MAX values generated by adding 7777 to
501 * VALUE are different with (module 2^32).
505 /* We return the null string if we can't find a unique file name. */
510 int git_mkstemp_mode(char *pattern, int mode)
512 /* mkstemp is just mkstemps with no suffix */
513 return git_mkstemps_mode(pattern, 0, mode);
516 int xmkstemp_mode(char *filename_template, int mode)
519 char origtemplate[PATH_MAX];
520 strlcpy(origtemplate, filename_template, sizeof(origtemplate));
522 fd = git_mkstemp_mode(filename_template, mode);
524 int saved_errno = errno;
525 const char *nonrelative_template;
527 if (!filename_template[0])
528 filename_template = origtemplate;
530 nonrelative_template = absolute_path(filename_template);
532 die_errno("Unable to create temporary file '%s'",
533 nonrelative_template);
538 static int warn_if_unremovable(const char *op, const char *file, int rc)
541 if (!rc || errno == ENOENT)
544 warning_errno("unable to %s '%s'", op, file);
549 int unlink_or_msg(const char *file, struct strbuf *err)
551 int rc = unlink(file);
555 if (!rc || errno == ENOENT)
558 strbuf_addf(err, "unable to unlink '%s': %s",
559 file, strerror(errno));
563 int unlink_or_warn(const char *file)
565 return warn_if_unremovable("unlink", file, unlink(file));
568 int rmdir_or_warn(const char *file)
570 return warn_if_unremovable("rmdir", file, rmdir(file));
573 int remove_or_warn(unsigned int mode, const char *file)
575 return S_ISGITLINK(mode) ? rmdir_or_warn(file) : unlink_or_warn(file);
578 static int access_error_is_ok(int err, unsigned flag)
580 return (is_missing_file_error(err) ||
581 ((flag & ACCESS_EACCES_OK) && err == EACCES));
584 int access_or_warn(const char *path, int mode, unsigned flag)
586 int ret = access(path, mode);
587 if (ret && !access_error_is_ok(errno, flag))
588 warn_on_inaccessible(path);
592 int access_or_die(const char *path, int mode, unsigned flag)
594 int ret = access(path, mode);
595 if (ret && !access_error_is_ok(errno, flag))
596 die_errno(_("unable to access '%s'"), path);
602 struct strbuf sb = STRBUF_INIT;
603 if (strbuf_getcwd(&sb))
604 die_errno(_("unable to get current working directory"));
605 return strbuf_detach(&sb, NULL);
608 int xsnprintf(char *dst, size_t max, const char *fmt, ...)
614 len = vsnprintf(dst, max, fmt, ap);
618 BUG("your snprintf is broken");
620 BUG("attempt to snprintf into too-small buffer");
624 void write_file_buf(const char *path, const char *buf, size_t len)
626 int fd = xopen(path, O_WRONLY | O_CREAT | O_TRUNC, 0666);
627 if (write_in_full(fd, buf, len) < 0)
628 die_errno(_("could not write to '%s'"), path);
630 die_errno(_("could not close '%s'"), path);
633 void write_file(const char *path, const char *fmt, ...)
636 struct strbuf sb = STRBUF_INIT;
638 va_start(params, fmt);
639 strbuf_vaddf(&sb, fmt, params);
642 strbuf_complete_line(&sb);
644 write_file_buf(path, sb.buf, sb.len);
648 void sleep_millisec(int millisec)
650 poll(NULL, 0, millisec);
653 int xgethostname(char *buf, size_t len)
656 * If the full hostname doesn't fit in buf, POSIX does not
657 * specify whether the buffer will be null-terminated, so to
658 * be safe, do it ourselves.
660 int ret = gethostname(buf, len);
666 int is_empty_or_missing_file(const char *filename)
670 if (stat(filename, &st) < 0) {
673 die_errno(_("could not stat %s"), filename);