Merge branch 'jt/fetch-pack-loosen-validation-with-packfile-uri'
[git] / transport.c
1 #include "cache.h"
2 #include "config.h"
3 #include "transport.h"
4 #include "run-command.h"
5 #include "pkt-line.h"
6 #include "fetch-pack.h"
7 #include "remote.h"
8 #include "connect.h"
9 #include "send-pack.h"
10 #include "walker.h"
11 #include "bundle.h"
12 #include "dir.h"
13 #include "refs.h"
14 #include "refspec.h"
15 #include "branch.h"
16 #include "url.h"
17 #include "submodule.h"
18 #include "string-list.h"
19 #include "oid-array.h"
20 #include "sigchain.h"
21 #include "transport-internal.h"
22 #include "protocol.h"
23 #include "object-store.h"
24 #include "color.h"
25
26 static int transport_use_color = -1;
27 static char transport_colors[][COLOR_MAXLEN] = {
28         GIT_COLOR_RESET,
29         GIT_COLOR_RED           /* REJECTED */
30 };
31
32 enum color_transport {
33         TRANSPORT_COLOR_RESET = 0,
34         TRANSPORT_COLOR_REJECTED = 1
35 };
36
37 static int transport_color_config(void)
38 {
39         const char *keys[] = {
40                 "color.transport.reset",
41                 "color.transport.rejected"
42         }, *key = "color.transport";
43         char *value;
44         int i;
45         static int initialized;
46
47         if (initialized)
48                 return 0;
49         initialized = 1;
50
51         if (!git_config_get_string(key, &value))
52                 transport_use_color = git_config_colorbool(key, value);
53
54         if (!want_color_stderr(transport_use_color))
55                 return 0;
56
57         for (i = 0; i < ARRAY_SIZE(keys); i++)
58                 if (!git_config_get_string(keys[i], &value)) {
59                         if (!value)
60                                 return config_error_nonbool(keys[i]);
61                         if (color_parse(value, transport_colors[i]) < 0)
62                                 return -1;
63                 }
64
65         return 0;
66 }
67
68 static const char *transport_get_color(enum color_transport ix)
69 {
70         if (want_color_stderr(transport_use_color))
71                 return transport_colors[ix];
72         return "";
73 }
74
75 static void set_upstreams(struct transport *transport, struct ref *refs,
76         int pretend)
77 {
78         struct ref *ref;
79         for (ref = refs; ref; ref = ref->next) {
80                 const char *localname;
81                 const char *tmp;
82                 const char *remotename;
83                 int flag = 0;
84                 /*
85                  * Check suitability for tracking. Must be successful /
86                  * already up-to-date ref create/modify (not delete).
87                  */
88                 if (ref->status != REF_STATUS_OK &&
89                         ref->status != REF_STATUS_UPTODATE)
90                         continue;
91                 if (!ref->peer_ref)
92                         continue;
93                 if (is_null_oid(&ref->new_oid))
94                         continue;
95
96                 /* Follow symbolic refs (mainly for HEAD). */
97                 localname = ref->peer_ref->name;
98                 remotename = ref->name;
99                 tmp = resolve_ref_unsafe(localname, RESOLVE_REF_READING,
100                                          NULL, &flag);
101                 if (tmp && flag & REF_ISSYMREF &&
102                         starts_with(tmp, "refs/heads/"))
103                         localname = tmp;
104
105                 /* Both source and destination must be local branches. */
106                 if (!localname || !starts_with(localname, "refs/heads/"))
107                         continue;
108                 if (!remotename || !starts_with(remotename, "refs/heads/"))
109                         continue;
110
111                 if (!pretend)
112                         install_branch_config(BRANCH_CONFIG_VERBOSE,
113                                 localname + 11, transport->remote->name,
114                                 remotename);
115                 else
116                         printf(_("Would set upstream of '%s' to '%s' of '%s'\n"),
117                                 localname + 11, remotename + 11,
118                                 transport->remote->name);
119         }
120 }
121
122 struct bundle_transport_data {
123         int fd;
124         struct bundle_header header;
125         unsigned get_refs_from_bundle_called : 1;
126 };
127
128 static struct ref *get_refs_from_bundle(struct transport *transport,
129                                         int for_push,
130                                         const struct strvec *ref_prefixes)
131 {
132         struct bundle_transport_data *data = transport->data;
133         struct ref *result = NULL;
134         int i;
135
136         if (for_push)
137                 return NULL;
138
139         data->get_refs_from_bundle_called = 1;
140
141         if (data->fd > 0)
142                 close(data->fd);
143         data->fd = read_bundle_header(transport->url, &data->header);
144         if (data->fd < 0)
145                 die(_("could not read bundle '%s'"), transport->url);
146
147         transport->hash_algo = data->header.hash_algo;
148
149         for (i = 0; i < data->header.references.nr; i++) {
150                 struct ref_list_entry *e = data->header.references.list + i;
151                 struct ref *ref = alloc_ref(e->name);
152                 oidcpy(&ref->old_oid, &e->oid);
153                 ref->next = result;
154                 result = ref;
155         }
156         return result;
157 }
158
159 static int fetch_refs_from_bundle(struct transport *transport,
160                                int nr_heads, struct ref **to_fetch)
161 {
162         struct bundle_transport_data *data = transport->data;
163         int ret;
164
165         if (!data->get_refs_from_bundle_called)
166                 get_refs_from_bundle(transport, 0, NULL);
167         ret = unbundle(the_repository, &data->header, data->fd,
168                            transport->progress ? BUNDLE_VERBOSE : 0);
169         transport->hash_algo = data->header.hash_algo;
170         return ret;
171 }
172
173 static int close_bundle(struct transport *transport)
174 {
175         struct bundle_transport_data *data = transport->data;
176         if (data->fd > 0)
177                 close(data->fd);
178         free(data);
179         return 0;
180 }
181
182 struct git_transport_data {
183         struct git_transport_options options;
184         struct child_process *conn;
185         int fd[2];
186         unsigned got_remote_heads : 1;
187         enum protocol_version version;
188         struct oid_array extra_have;
189         struct oid_array shallow;
190 };
191
192 static int set_git_option(struct git_transport_options *opts,
193                           const char *name, const char *value)
194 {
195         if (!strcmp(name, TRANS_OPT_UPLOADPACK)) {
196                 opts->uploadpack = value;
197                 return 0;
198         } else if (!strcmp(name, TRANS_OPT_RECEIVEPACK)) {
199                 opts->receivepack = value;
200                 return 0;
201         } else if (!strcmp(name, TRANS_OPT_THIN)) {
202                 opts->thin = !!value;
203                 return 0;
204         } else if (!strcmp(name, TRANS_OPT_FOLLOWTAGS)) {
205                 opts->followtags = !!value;
206                 return 0;
207         } else if (!strcmp(name, TRANS_OPT_KEEP)) {
208                 opts->keep = !!value;
209                 return 0;
210         } else if (!strcmp(name, TRANS_OPT_UPDATE_SHALLOW)) {
211                 opts->update_shallow = !!value;
212                 return 0;
213         } else if (!strcmp(name, TRANS_OPT_DEPTH)) {
214                 if (!value)
215                         opts->depth = 0;
216                 else {
217                         char *end;
218                         opts->depth = strtol(value, &end, 0);
219                         if (*end)
220                                 die(_("transport: invalid depth option '%s'"), value);
221                 }
222                 return 0;
223         } else if (!strcmp(name, TRANS_OPT_DEEPEN_SINCE)) {
224                 opts->deepen_since = value;
225                 return 0;
226         } else if (!strcmp(name, TRANS_OPT_DEEPEN_NOT)) {
227                 opts->deepen_not = (const struct string_list *)value;
228                 return 0;
229         } else if (!strcmp(name, TRANS_OPT_DEEPEN_RELATIVE)) {
230                 opts->deepen_relative = !!value;
231                 return 0;
232         } else if (!strcmp(name, TRANS_OPT_FROM_PROMISOR)) {
233                 opts->from_promisor = !!value;
234                 return 0;
235         } else if (!strcmp(name, TRANS_OPT_NO_DEPENDENTS)) {
236                 opts->no_dependents = !!value;
237                 return 0;
238         } else if (!strcmp(name, TRANS_OPT_LIST_OBJECTS_FILTER)) {
239                 list_objects_filter_die_if_populated(&opts->filter_options);
240                 parse_list_objects_filter(&opts->filter_options, value);
241                 return 0;
242         }
243         return 1;
244 }
245
246 static int connect_setup(struct transport *transport, int for_push)
247 {
248         struct git_transport_data *data = transport->data;
249         int flags = transport->verbose > 0 ? CONNECT_VERBOSE : 0;
250
251         if (data->conn)
252                 return 0;
253
254         switch (transport->family) {
255         case TRANSPORT_FAMILY_ALL: break;
256         case TRANSPORT_FAMILY_IPV4: flags |= CONNECT_IPV4; break;
257         case TRANSPORT_FAMILY_IPV6: flags |= CONNECT_IPV6; break;
258         }
259
260         data->conn = git_connect(data->fd, transport->url,
261                                  for_push ? data->options.receivepack :
262                                  data->options.uploadpack,
263                                  flags);
264
265         return 0;
266 }
267
268 static void die_if_server_options(struct transport *transport)
269 {
270         if (!transport->server_options || !transport->server_options->nr)
271                 return;
272         advise(_("see protocol.version in 'git help config' for more details"));
273         die(_("server options require protocol version 2 or later"));
274 }
275
276 /*
277  * Obtains the protocol version from the transport and writes it to
278  * transport->data->version, first connecting if not already connected.
279  *
280  * If the protocol version is one that allows skipping the listing of remote
281  * refs, and must_list_refs is 0, the listing of remote refs is skipped and
282  * this function returns NULL. Otherwise, this function returns the list of
283  * remote refs.
284  */
285 static struct ref *handshake(struct transport *transport, int for_push,
286                              const struct strvec *ref_prefixes,
287                              int must_list_refs)
288 {
289         struct git_transport_data *data = transport->data;
290         struct ref *refs = NULL;
291         struct packet_reader reader;
292
293         connect_setup(transport, for_push);
294
295         packet_reader_init(&reader, data->fd[0], NULL, 0,
296                            PACKET_READ_CHOMP_NEWLINE |
297                            PACKET_READ_GENTLE_ON_EOF |
298                            PACKET_READ_DIE_ON_ERR_PACKET);
299
300         data->version = discover_version(&reader);
301         switch (data->version) {
302         case protocol_v2:
303                 if (must_list_refs)
304                         get_remote_refs(data->fd[1], &reader, &refs, for_push,
305                                         ref_prefixes,
306                                         transport->server_options,
307                                         transport->stateless_rpc);
308                 break;
309         case protocol_v1:
310         case protocol_v0:
311                 die_if_server_options(transport);
312                 get_remote_heads(&reader, &refs,
313                                  for_push ? REF_NORMAL : 0,
314                                  &data->extra_have,
315                                  &data->shallow);
316                 break;
317         case protocol_unknown_version:
318                 BUG("unknown protocol version");
319         }
320         data->got_remote_heads = 1;
321         transport->hash_algo = reader.hash_algo;
322
323         if (reader.line_peeked)
324                 BUG("buffer must be empty at the end of handshake()");
325
326         return refs;
327 }
328
329 static struct ref *get_refs_via_connect(struct transport *transport, int for_push,
330                                         const struct strvec *ref_prefixes)
331 {
332         return handshake(transport, for_push, ref_prefixes, 1);
333 }
334
335 static int fetch_refs_via_pack(struct transport *transport,
336                                int nr_heads, struct ref **to_fetch)
337 {
338         int ret = 0;
339         struct git_transport_data *data = transport->data;
340         struct ref *refs = NULL;
341         struct fetch_pack_args args;
342         struct ref *refs_tmp = NULL;
343
344         memset(&args, 0, sizeof(args));
345         args.uploadpack = data->options.uploadpack;
346         args.keep_pack = data->options.keep;
347         args.lock_pack = 1;
348         args.use_thin_pack = data->options.thin;
349         args.include_tag = data->options.followtags;
350         args.verbose = (transport->verbose > 1);
351         args.quiet = (transport->verbose < 0);
352         args.no_progress = !transport->progress;
353         args.depth = data->options.depth;
354         args.deepen_since = data->options.deepen_since;
355         args.deepen_not = data->options.deepen_not;
356         args.deepen_relative = data->options.deepen_relative;
357         args.check_self_contained_and_connected =
358                 data->options.check_self_contained_and_connected;
359         args.cloning = transport->cloning;
360         args.update_shallow = data->options.update_shallow;
361         args.from_promisor = data->options.from_promisor;
362         args.no_dependents = data->options.no_dependents;
363         args.filter_options = data->options.filter_options;
364         args.stateless_rpc = transport->stateless_rpc;
365         args.server_options = transport->server_options;
366         args.negotiation_tips = data->options.negotiation_tips;
367
368         if (!data->got_remote_heads) {
369                 int i;
370                 int must_list_refs = 0;
371                 for (i = 0; i < nr_heads; i++) {
372                         if (!to_fetch[i]->exact_oid) {
373                                 must_list_refs = 1;
374                                 break;
375                         }
376                 }
377                 refs_tmp = handshake(transport, 0, NULL, must_list_refs);
378         }
379
380         if (data->version == protocol_unknown_version)
381                 BUG("unknown protocol version");
382         else if (data->version <= protocol_v1)
383                 die_if_server_options(transport);
384
385         refs = fetch_pack(&args, data->fd,
386                           refs_tmp ? refs_tmp : transport->remote_refs,
387                           to_fetch, nr_heads, &data->shallow,
388                           &transport->pack_lockfiles, data->version);
389
390         close(data->fd[0]);
391         close(data->fd[1]);
392         if (finish_connect(data->conn))
393                 ret = -1;
394         data->conn = NULL;
395         data->got_remote_heads = 0;
396         data->options.self_contained_and_connected =
397                 args.self_contained_and_connected;
398         data->options.connectivity_checked = args.connectivity_checked;
399
400         if (refs == NULL)
401                 ret = -1;
402         if (report_unmatched_refs(to_fetch, nr_heads))
403                 ret = -1;
404
405         free_refs(refs_tmp);
406         free_refs(refs);
407         return ret;
408 }
409
410 static int push_had_errors(struct ref *ref)
411 {
412         for (; ref; ref = ref->next) {
413                 switch (ref->status) {
414                 case REF_STATUS_NONE:
415                 case REF_STATUS_UPTODATE:
416                 case REF_STATUS_OK:
417                         break;
418                 default:
419                         return 1;
420                 }
421         }
422         return 0;
423 }
424
425 int transport_refs_pushed(struct ref *ref)
426 {
427         for (; ref; ref = ref->next) {
428                 switch(ref->status) {
429                 case REF_STATUS_NONE:
430                 case REF_STATUS_UPTODATE:
431                         break;
432                 default:
433                         return 1;
434                 }
435         }
436         return 0;
437 }
438
439 void transport_update_tracking_ref(struct remote *remote, struct ref *ref, int verbose)
440 {
441         struct refspec_item rs;
442
443         if (ref->status != REF_STATUS_OK && ref->status != REF_STATUS_UPTODATE)
444                 return;
445
446         memset(&rs, 0, sizeof(rs));
447         rs.src = ref->name;
448         rs.dst = NULL;
449
450         if (!remote_find_tracking(remote, &rs)) {
451                 if (verbose)
452                         fprintf(stderr, "updating local tracking ref '%s'\n", rs.dst);
453                 if (ref->deletion) {
454                         delete_ref(NULL, rs.dst, NULL, 0);
455                 } else
456                         update_ref("update by push", rs.dst, &ref->new_oid,
457                                    NULL, 0, 0);
458                 free(rs.dst);
459         }
460 }
461
462 static void print_ref_status(char flag, const char *summary,
463                              struct ref *to, struct ref *from, const char *msg,
464                              int porcelain, int summary_width)
465 {
466         if (porcelain) {
467                 if (from)
468                         fprintf(stdout, "%c\t%s:%s\t", flag, from->name, to->name);
469                 else
470                         fprintf(stdout, "%c\t:%s\t", flag, to->name);
471                 if (msg)
472                         fprintf(stdout, "%s (%s)\n", summary, msg);
473                 else
474                         fprintf(stdout, "%s\n", summary);
475         } else {
476                 const char *red = "", *reset = "";
477                 if (push_had_errors(to)) {
478                         red = transport_get_color(TRANSPORT_COLOR_REJECTED);
479                         reset = transport_get_color(TRANSPORT_COLOR_RESET);
480                 }
481                 fprintf(stderr, " %s%c %-*s%s ", red, flag, summary_width,
482                         summary, reset);
483                 if (from)
484                         fprintf(stderr, "%s -> %s", prettify_refname(from->name), prettify_refname(to->name));
485                 else
486                         fputs(prettify_refname(to->name), stderr);
487                 if (msg) {
488                         fputs(" (", stderr);
489                         fputs(msg, stderr);
490                         fputc(')', stderr);
491                 }
492                 fputc('\n', stderr);
493         }
494 }
495
496 static void print_ok_ref_status(struct ref *ref, int porcelain, int summary_width)
497 {
498         if (ref->deletion)
499                 print_ref_status('-', "[deleted]", ref, NULL, NULL,
500                                  porcelain, summary_width);
501         else if (is_null_oid(&ref->old_oid))
502                 print_ref_status('*',
503                         (starts_with(ref->name, "refs/tags/") ? "[new tag]" :
504                         "[new branch]"),
505                         ref, ref->peer_ref, NULL, porcelain, summary_width);
506         else {
507                 struct strbuf quickref = STRBUF_INIT;
508                 char type;
509                 const char *msg;
510
511                 strbuf_add_unique_abbrev(&quickref, &ref->old_oid,
512                                          DEFAULT_ABBREV);
513                 if (ref->forced_update) {
514                         strbuf_addstr(&quickref, "...");
515                         type = '+';
516                         msg = "forced update";
517                 } else {
518                         strbuf_addstr(&quickref, "..");
519                         type = ' ';
520                         msg = NULL;
521                 }
522                 strbuf_add_unique_abbrev(&quickref, &ref->new_oid,
523                                          DEFAULT_ABBREV);
524
525                 print_ref_status(type, quickref.buf, ref, ref->peer_ref, msg,
526                                  porcelain, summary_width);
527                 strbuf_release(&quickref);
528         }
529 }
530
531 static int print_one_push_status(struct ref *ref, const char *dest, int count,
532                                  int porcelain, int summary_width)
533 {
534         if (!count) {
535                 char *url = transport_anonymize_url(dest);
536                 fprintf(porcelain ? stdout : stderr, "To %s\n", url);
537                 free(url);
538         }
539
540         switch(ref->status) {
541         case REF_STATUS_NONE:
542                 print_ref_status('X', "[no match]", ref, NULL, NULL,
543                                  porcelain, summary_width);
544                 break;
545         case REF_STATUS_REJECT_NODELETE:
546                 print_ref_status('!', "[rejected]", ref, NULL,
547                                  "remote does not support deleting refs",
548                                  porcelain, summary_width);
549                 break;
550         case REF_STATUS_UPTODATE:
551                 print_ref_status('=', "[up to date]", ref,
552                                  ref->peer_ref, NULL, porcelain, summary_width);
553                 break;
554         case REF_STATUS_REJECT_NONFASTFORWARD:
555                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
556                                  "non-fast-forward", porcelain, summary_width);
557                 break;
558         case REF_STATUS_REJECT_ALREADY_EXISTS:
559                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
560                                  "already exists", porcelain, summary_width);
561                 break;
562         case REF_STATUS_REJECT_FETCH_FIRST:
563                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
564                                  "fetch first", porcelain, summary_width);
565                 break;
566         case REF_STATUS_REJECT_NEEDS_FORCE:
567                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
568                                  "needs force", porcelain, summary_width);
569                 break;
570         case REF_STATUS_REJECT_STALE:
571                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
572                                  "stale info", porcelain, summary_width);
573                 break;
574         case REF_STATUS_REJECT_SHALLOW:
575                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
576                                  "new shallow roots not allowed",
577                                  porcelain, summary_width);
578                 break;
579         case REF_STATUS_REMOTE_REJECT:
580                 print_ref_status('!', "[remote rejected]", ref,
581                                  ref->deletion ? NULL : ref->peer_ref,
582                                  ref->remote_status, porcelain, summary_width);
583                 break;
584         case REF_STATUS_EXPECTING_REPORT:
585                 print_ref_status('!', "[remote failure]", ref,
586                                  ref->deletion ? NULL : ref->peer_ref,
587                                  "remote failed to report status",
588                                  porcelain, summary_width);
589                 break;
590         case REF_STATUS_ATOMIC_PUSH_FAILED:
591                 print_ref_status('!', "[rejected]", ref, ref->peer_ref,
592                                  "atomic push failed", porcelain, summary_width);
593                 break;
594         case REF_STATUS_OK:
595                 print_ok_ref_status(ref, porcelain, summary_width);
596                 break;
597         }
598
599         return 1;
600 }
601
602 static int measure_abbrev(const struct object_id *oid, int sofar)
603 {
604         char hex[GIT_MAX_HEXSZ + 1];
605         int w = find_unique_abbrev_r(hex, oid, DEFAULT_ABBREV);
606
607         return (w < sofar) ? sofar : w;
608 }
609
610 int transport_summary_width(const struct ref *refs)
611 {
612         int maxw = -1;
613
614         for (; refs; refs = refs->next) {
615                 maxw = measure_abbrev(&refs->old_oid, maxw);
616                 maxw = measure_abbrev(&refs->new_oid, maxw);
617         }
618         if (maxw < 0)
619                 maxw = FALLBACK_DEFAULT_ABBREV;
620         return (2 * maxw + 3);
621 }
622
623 void transport_print_push_status(const char *dest, struct ref *refs,
624                                   int verbose, int porcelain, unsigned int *reject_reasons)
625 {
626         struct ref *ref;
627         int n = 0;
628         char *head;
629         int summary_width = transport_summary_width(refs);
630
631         if (transport_color_config() < 0)
632                 warning(_("could not parse transport.color.* config"));
633
634         head = resolve_refdup("HEAD", RESOLVE_REF_READING, NULL, NULL);
635
636         if (verbose) {
637                 for (ref = refs; ref; ref = ref->next)
638                         if (ref->status == REF_STATUS_UPTODATE)
639                                 n += print_one_push_status(ref, dest, n,
640                                                            porcelain, summary_width);
641         }
642
643         for (ref = refs; ref; ref = ref->next)
644                 if (ref->status == REF_STATUS_OK)
645                         n += print_one_push_status(ref, dest, n,
646                                                    porcelain, summary_width);
647
648         *reject_reasons = 0;
649         for (ref = refs; ref; ref = ref->next) {
650                 if (ref->status != REF_STATUS_NONE &&
651                     ref->status != REF_STATUS_UPTODATE &&
652                     ref->status != REF_STATUS_OK)
653                         n += print_one_push_status(ref, dest, n,
654                                                    porcelain, summary_width);
655                 if (ref->status == REF_STATUS_REJECT_NONFASTFORWARD) {
656                         if (head != NULL && !strcmp(head, ref->name))
657                                 *reject_reasons |= REJECT_NON_FF_HEAD;
658                         else
659                                 *reject_reasons |= REJECT_NON_FF_OTHER;
660                 } else if (ref->status == REF_STATUS_REJECT_ALREADY_EXISTS) {
661                         *reject_reasons |= REJECT_ALREADY_EXISTS;
662                 } else if (ref->status == REF_STATUS_REJECT_FETCH_FIRST) {
663                         *reject_reasons |= REJECT_FETCH_FIRST;
664                 } else if (ref->status == REF_STATUS_REJECT_NEEDS_FORCE) {
665                         *reject_reasons |= REJECT_NEEDS_FORCE;
666                 }
667         }
668         free(head);
669 }
670
671 static int git_transport_push(struct transport *transport, struct ref *remote_refs, int flags)
672 {
673         struct git_transport_data *data = transport->data;
674         struct send_pack_args args;
675         int ret = 0;
676
677         if (transport_color_config() < 0)
678                 return -1;
679
680         if (!data->got_remote_heads)
681                 get_refs_via_connect(transport, 1, NULL);
682
683         memset(&args, 0, sizeof(args));
684         args.send_mirror = !!(flags & TRANSPORT_PUSH_MIRROR);
685         args.force_update = !!(flags & TRANSPORT_PUSH_FORCE);
686         args.use_thin_pack = data->options.thin;
687         args.verbose = (transport->verbose > 0);
688         args.quiet = (transport->verbose < 0);
689         args.progress = transport->progress;
690         args.dry_run = !!(flags & TRANSPORT_PUSH_DRY_RUN);
691         args.porcelain = !!(flags & TRANSPORT_PUSH_PORCELAIN);
692         args.atomic = !!(flags & TRANSPORT_PUSH_ATOMIC);
693         args.push_options = transport->push_options;
694         args.url = transport->url;
695
696         if (flags & TRANSPORT_PUSH_CERT_ALWAYS)
697                 args.push_cert = SEND_PACK_PUSH_CERT_ALWAYS;
698         else if (flags & TRANSPORT_PUSH_CERT_IF_ASKED)
699                 args.push_cert = SEND_PACK_PUSH_CERT_IF_ASKED;
700         else
701                 args.push_cert = SEND_PACK_PUSH_CERT_NEVER;
702
703         switch (data->version) {
704         case protocol_v2:
705                 die(_("support for protocol v2 not implemented yet"));
706                 break;
707         case protocol_v1:
708         case protocol_v0:
709                 ret = send_pack(&args, data->fd, data->conn, remote_refs,
710                                 &data->extra_have);
711                 break;
712         case protocol_unknown_version:
713                 BUG("unknown protocol version");
714         }
715
716         close(data->fd[1]);
717         close(data->fd[0]);
718         /*
719          * Atomic push may abort the connection early and close the pipe,
720          * which may cause an error for `finish_connect()`. Ignore this error
721          * for atomic git-push.
722          */
723         if (ret || args.atomic)
724                 finish_connect(data->conn);
725         else
726                 ret = finish_connect(data->conn);
727         data->conn = NULL;
728         data->got_remote_heads = 0;
729
730         return ret;
731 }
732
733 static int connect_git(struct transport *transport, const char *name,
734                        const char *executable, int fd[2])
735 {
736         struct git_transport_data *data = transport->data;
737         data->conn = git_connect(data->fd, transport->url,
738                                  executable, 0);
739         fd[0] = data->fd[0];
740         fd[1] = data->fd[1];
741         return 0;
742 }
743
744 static int disconnect_git(struct transport *transport)
745 {
746         struct git_transport_data *data = transport->data;
747         if (data->conn) {
748                 if (data->got_remote_heads && !transport->stateless_rpc)
749                         packet_flush(data->fd[1]);
750                 close(data->fd[0]);
751                 close(data->fd[1]);
752                 finish_connect(data->conn);
753         }
754
755         free(data);
756         return 0;
757 }
758
759 static struct transport_vtable taken_over_vtable = {
760         NULL,
761         get_refs_via_connect,
762         fetch_refs_via_pack,
763         git_transport_push,
764         NULL,
765         disconnect_git
766 };
767
768 void transport_take_over(struct transport *transport,
769                          struct child_process *child)
770 {
771         struct git_transport_data *data;
772
773         if (!transport->smart_options)
774                 BUG("taking over transport requires non-NULL "
775                     "smart_options field.");
776
777         data = xcalloc(1, sizeof(*data));
778         data->options = *transport->smart_options;
779         data->conn = child;
780         data->fd[0] = data->conn->out;
781         data->fd[1] = data->conn->in;
782         data->got_remote_heads = 0;
783         transport->data = data;
784
785         transport->vtable = &taken_over_vtable;
786         transport->smart_options = &(data->options);
787
788         transport->cannot_reuse = 1;
789 }
790
791 static int is_file(const char *url)
792 {
793         struct stat buf;
794         if (stat(url, &buf))
795                 return 0;
796         return S_ISREG(buf.st_mode);
797 }
798
799 static int external_specification_len(const char *url)
800 {
801         return strchr(url, ':') - url;
802 }
803
804 static const struct string_list *protocol_whitelist(void)
805 {
806         static int enabled = -1;
807         static struct string_list allowed = STRING_LIST_INIT_DUP;
808
809         if (enabled < 0) {
810                 const char *v = getenv("GIT_ALLOW_PROTOCOL");
811                 if (v) {
812                         string_list_split(&allowed, v, ':', -1);
813                         string_list_sort(&allowed);
814                         enabled = 1;
815                 } else {
816                         enabled = 0;
817                 }
818         }
819
820         return enabled ? &allowed : NULL;
821 }
822
823 enum protocol_allow_config {
824         PROTOCOL_ALLOW_NEVER = 0,
825         PROTOCOL_ALLOW_USER_ONLY,
826         PROTOCOL_ALLOW_ALWAYS
827 };
828
829 static enum protocol_allow_config parse_protocol_config(const char *key,
830                                                         const char *value)
831 {
832         if (!strcasecmp(value, "always"))
833                 return PROTOCOL_ALLOW_ALWAYS;
834         else if (!strcasecmp(value, "never"))
835                 return PROTOCOL_ALLOW_NEVER;
836         else if (!strcasecmp(value, "user"))
837                 return PROTOCOL_ALLOW_USER_ONLY;
838
839         die(_("unknown value for config '%s': %s"), key, value);
840 }
841
842 static enum protocol_allow_config get_protocol_config(const char *type)
843 {
844         char *key = xstrfmt("protocol.%s.allow", type);
845         char *value;
846
847         /* first check the per-protocol config */
848         if (!git_config_get_string(key, &value)) {
849                 enum protocol_allow_config ret =
850                         parse_protocol_config(key, value);
851                 free(key);
852                 free(value);
853                 return ret;
854         }
855         free(key);
856
857         /* if defined, fallback to user-defined default for unknown protocols */
858         if (!git_config_get_string("protocol.allow", &value)) {
859                 enum protocol_allow_config ret =
860                         parse_protocol_config("protocol.allow", value);
861                 free(value);
862                 return ret;
863         }
864
865         /* fallback to built-in defaults */
866         /* known safe */
867         if (!strcmp(type, "http") ||
868             !strcmp(type, "https") ||
869             !strcmp(type, "git") ||
870             !strcmp(type, "ssh") ||
871             !strcmp(type, "file"))
872                 return PROTOCOL_ALLOW_ALWAYS;
873
874         /* known scary; err on the side of caution */
875         if (!strcmp(type, "ext"))
876                 return PROTOCOL_ALLOW_NEVER;
877
878         /* unknown; by default let them be used only directly by the user */
879         return PROTOCOL_ALLOW_USER_ONLY;
880 }
881
882 int is_transport_allowed(const char *type, int from_user)
883 {
884         const struct string_list *whitelist = protocol_whitelist();
885         if (whitelist)
886                 return string_list_has_string(whitelist, type);
887
888         switch (get_protocol_config(type)) {
889         case PROTOCOL_ALLOW_ALWAYS:
890                 return 1;
891         case PROTOCOL_ALLOW_NEVER:
892                 return 0;
893         case PROTOCOL_ALLOW_USER_ONLY:
894                 if (from_user < 0)
895                         from_user = git_env_bool("GIT_PROTOCOL_FROM_USER", 1);
896                 return from_user;
897         }
898
899         BUG("invalid protocol_allow_config type");
900 }
901
902 void transport_check_allowed(const char *type)
903 {
904         if (!is_transport_allowed(type, -1))
905                 die(_("transport '%s' not allowed"), type);
906 }
907
908 static struct transport_vtable bundle_vtable = {
909         NULL,
910         get_refs_from_bundle,
911         fetch_refs_from_bundle,
912         NULL,
913         NULL,
914         close_bundle
915 };
916
917 static struct transport_vtable builtin_smart_vtable = {
918         NULL,
919         get_refs_via_connect,
920         fetch_refs_via_pack,
921         git_transport_push,
922         connect_git,
923         disconnect_git
924 };
925
926 struct transport *transport_get(struct remote *remote, const char *url)
927 {
928         const char *helper;
929         struct transport *ret = xcalloc(1, sizeof(*ret));
930
931         ret->progress = isatty(2);
932         string_list_init(&ret->pack_lockfiles, 1);
933
934         if (!remote)
935                 BUG("No remote provided to transport_get()");
936
937         ret->got_remote_refs = 0;
938         ret->remote = remote;
939         helper = remote->foreign_vcs;
940
941         if (!url && remote->url)
942                 url = remote->url[0];
943         ret->url = url;
944
945         /* maybe it is a foreign URL? */
946         if (url) {
947                 const char *p = url;
948
949                 while (is_urlschemechar(p == url, *p))
950                         p++;
951                 if (starts_with(p, "::"))
952                         helper = xstrndup(url, p - url);
953         }
954
955         if (helper) {
956                 transport_helper_init(ret, helper);
957         } else if (starts_with(url, "rsync:")) {
958                 die(_("git-over-rsync is no longer supported"));
959         } else if (url_is_local_not_ssh(url) && is_file(url) && is_bundle(url, 1)) {
960                 struct bundle_transport_data *data = xcalloc(1, sizeof(*data));
961                 transport_check_allowed("file");
962                 ret->data = data;
963                 ret->vtable = &bundle_vtable;
964                 ret->smart_options = NULL;
965         } else if (!is_url(url)
966                 || starts_with(url, "file://")
967                 || starts_with(url, "git://")
968                 || starts_with(url, "ssh://")
969                 || starts_with(url, "git+ssh://") /* deprecated - do not use */
970                 || starts_with(url, "ssh+git://") /* deprecated - do not use */
971                 ) {
972                 /*
973                  * These are builtin smart transports; "allowed" transports
974                  * will be checked individually in git_connect.
975                  */
976                 struct git_transport_data *data = xcalloc(1, sizeof(*data));
977                 ret->data = data;
978                 ret->vtable = &builtin_smart_vtable;
979                 ret->smart_options = &(data->options);
980
981                 data->conn = NULL;
982                 data->got_remote_heads = 0;
983         } else {
984                 /* Unknown protocol in URL. Pass to external handler. */
985                 int len = external_specification_len(url);
986                 char *handler = xmemdupz(url, len);
987                 transport_helper_init(ret, handler);
988         }
989
990         if (ret->smart_options) {
991                 ret->smart_options->thin = 1;
992                 ret->smart_options->uploadpack = "git-upload-pack";
993                 if (remote->uploadpack)
994                         ret->smart_options->uploadpack = remote->uploadpack;
995                 ret->smart_options->receivepack = "git-receive-pack";
996                 if (remote->receivepack)
997                         ret->smart_options->receivepack = remote->receivepack;
998         }
999
1000         ret->hash_algo = &hash_algos[GIT_HASH_SHA1];
1001
1002         return ret;
1003 }
1004
1005 const struct git_hash_algo *transport_get_hash_algo(struct transport *transport)
1006 {
1007         return transport->hash_algo;
1008 }
1009
1010 int transport_set_option(struct transport *transport,
1011                          const char *name, const char *value)
1012 {
1013         int git_reports = 1, protocol_reports = 1;
1014
1015         if (transport->smart_options)
1016                 git_reports = set_git_option(transport->smart_options,
1017                                              name, value);
1018
1019         if (transport->vtable->set_option)
1020                 protocol_reports = transport->vtable->set_option(transport,
1021                                                                  name, value);
1022
1023         /* If either report is 0, report 0 (success). */
1024         if (!git_reports || !protocol_reports)
1025                 return 0;
1026         /* If either reports -1 (invalid value), report -1. */
1027         if ((git_reports == -1) || (protocol_reports == -1))
1028                 return -1;
1029         /* Otherwise if both report unknown, report unknown. */
1030         return 1;
1031 }
1032
1033 void transport_set_verbosity(struct transport *transport, int verbosity,
1034         int force_progress)
1035 {
1036         if (verbosity >= 1)
1037                 transport->verbose = verbosity <= 3 ? verbosity : 3;
1038         if (verbosity < 0)
1039                 transport->verbose = -1;
1040
1041         /**
1042          * Rules used to determine whether to report progress (processing aborts
1043          * when a rule is satisfied):
1044          *
1045          *   . Report progress, if force_progress is 1 (ie. --progress).
1046          *   . Don't report progress, if force_progress is 0 (ie. --no-progress).
1047          *   . Don't report progress, if verbosity < 0 (ie. -q/--quiet ).
1048          *   . Report progress if isatty(2) is 1.
1049          **/
1050         if (force_progress >= 0)
1051                 transport->progress = !!force_progress;
1052         else
1053                 transport->progress = verbosity >= 0 && isatty(2);
1054 }
1055
1056 static void die_with_unpushed_submodules(struct string_list *needs_pushing)
1057 {
1058         int i;
1059
1060         fprintf(stderr, _("The following submodule paths contain changes that can\n"
1061                         "not be found on any remote:\n"));
1062         for (i = 0; i < needs_pushing->nr; i++)
1063                 fprintf(stderr, "  %s\n", needs_pushing->items[i].string);
1064         fprintf(stderr, _("\nPlease try\n\n"
1065                           "     git push --recurse-submodules=on-demand\n\n"
1066                           "or cd to the path and use\n\n"
1067                           "     git push\n\n"
1068                           "to push them to a remote.\n\n"));
1069
1070         string_list_clear(needs_pushing, 0);
1071
1072         die(_("Aborting."));
1073 }
1074
1075 static int run_pre_push_hook(struct transport *transport,
1076                              struct ref *remote_refs)
1077 {
1078         int ret = 0, x;
1079         struct ref *r;
1080         struct child_process proc = CHILD_PROCESS_INIT;
1081         struct strbuf buf;
1082         const char *argv[4];
1083
1084         if (!(argv[0] = find_hook("pre-push")))
1085                 return 0;
1086
1087         argv[1] = transport->remote->name;
1088         argv[2] = transport->url;
1089         argv[3] = NULL;
1090
1091         proc.argv = argv;
1092         proc.in = -1;
1093         proc.trace2_hook_name = "pre-push";
1094
1095         if (start_command(&proc)) {
1096                 finish_command(&proc);
1097                 return -1;
1098         }
1099
1100         sigchain_push(SIGPIPE, SIG_IGN);
1101
1102         strbuf_init(&buf, 256);
1103
1104         for (r = remote_refs; r; r = r->next) {
1105                 if (!r->peer_ref) continue;
1106                 if (r->status == REF_STATUS_REJECT_NONFASTFORWARD) continue;
1107                 if (r->status == REF_STATUS_REJECT_STALE) continue;
1108                 if (r->status == REF_STATUS_UPTODATE) continue;
1109
1110                 strbuf_reset(&buf);
1111                 strbuf_addf( &buf, "%s %s %s %s\n",
1112                          r->peer_ref->name, oid_to_hex(&r->new_oid),
1113                          r->name, oid_to_hex(&r->old_oid));
1114
1115                 if (write_in_full(proc.in, buf.buf, buf.len) < 0) {
1116                         /* We do not mind if a hook does not read all refs. */
1117                         if (errno != EPIPE)
1118                                 ret = -1;
1119                         break;
1120                 }
1121         }
1122
1123         strbuf_release(&buf);
1124
1125         x = close(proc.in);
1126         if (!ret)
1127                 ret = x;
1128
1129         sigchain_pop(SIGPIPE);
1130
1131         x = finish_command(&proc);
1132         if (!ret)
1133                 ret = x;
1134
1135         return ret;
1136 }
1137
1138 int transport_push(struct repository *r,
1139                    struct transport *transport,
1140                    struct refspec *rs, int flags,
1141                    unsigned int *reject_reasons)
1142 {
1143         *reject_reasons = 0;
1144
1145         if (transport_color_config() < 0)
1146                 return -1;
1147
1148         if (transport->vtable->push_refs) {
1149                 struct ref *remote_refs;
1150                 struct ref *local_refs = get_local_heads();
1151                 int match_flags = MATCH_REFS_NONE;
1152                 int verbose = (transport->verbose > 0);
1153                 int quiet = (transport->verbose < 0);
1154                 int porcelain = flags & TRANSPORT_PUSH_PORCELAIN;
1155                 int pretend = flags & TRANSPORT_PUSH_DRY_RUN;
1156                 int push_ret, ret, err;
1157                 struct strvec ref_prefixes = STRVEC_INIT;
1158
1159                 if (check_push_refs(local_refs, rs) < 0)
1160                         return -1;
1161
1162                 refspec_ref_prefixes(rs, &ref_prefixes);
1163
1164                 trace2_region_enter("transport_push", "get_refs_list", r);
1165                 remote_refs = transport->vtable->get_refs_list(transport, 1,
1166                                                                &ref_prefixes);
1167                 trace2_region_leave("transport_push", "get_refs_list", r);
1168
1169                 strvec_clear(&ref_prefixes);
1170
1171                 if (flags & TRANSPORT_PUSH_ALL)
1172                         match_flags |= MATCH_REFS_ALL;
1173                 if (flags & TRANSPORT_PUSH_MIRROR)
1174                         match_flags |= MATCH_REFS_MIRROR;
1175                 if (flags & TRANSPORT_PUSH_PRUNE)
1176                         match_flags |= MATCH_REFS_PRUNE;
1177                 if (flags & TRANSPORT_PUSH_FOLLOW_TAGS)
1178                         match_flags |= MATCH_REFS_FOLLOW_TAGS;
1179
1180                 if (match_push_refs(local_refs, &remote_refs, rs, match_flags))
1181                         return -1;
1182
1183                 if (transport->smart_options &&
1184                     transport->smart_options->cas &&
1185                     !is_empty_cas(transport->smart_options->cas))
1186                         apply_push_cas(transport->smart_options->cas,
1187                                        transport->remote, remote_refs);
1188
1189                 set_ref_status_for_push(remote_refs,
1190                         flags & TRANSPORT_PUSH_MIRROR,
1191                         flags & TRANSPORT_PUSH_FORCE);
1192
1193                 if (!(flags & TRANSPORT_PUSH_NO_HOOK))
1194                         if (run_pre_push_hook(transport, remote_refs))
1195                                 return -1;
1196
1197                 if ((flags & (TRANSPORT_RECURSE_SUBMODULES_ON_DEMAND |
1198                               TRANSPORT_RECURSE_SUBMODULES_ONLY)) &&
1199                     !is_bare_repository()) {
1200                         struct ref *ref = remote_refs;
1201                         struct oid_array commits = OID_ARRAY_INIT;
1202
1203                         trace2_region_enter("transport_push", "push_submodules", r);
1204                         for (; ref; ref = ref->next)
1205                                 if (!is_null_oid(&ref->new_oid))
1206                                         oid_array_append(&commits,
1207                                                           &ref->new_oid);
1208
1209                         if (!push_unpushed_submodules(r,
1210                                                       &commits,
1211                                                       transport->remote,
1212                                                       rs,
1213                                                       transport->push_options,
1214                                                       pretend)) {
1215                                 oid_array_clear(&commits);
1216                                 trace2_region_leave("transport_push", "push_submodules", r);
1217                                 die(_("failed to push all needed submodules"));
1218                         }
1219                         oid_array_clear(&commits);
1220                         trace2_region_leave("transport_push", "push_submodules", r);
1221                 }
1222
1223                 if (((flags & TRANSPORT_RECURSE_SUBMODULES_CHECK) ||
1224                      ((flags & (TRANSPORT_RECURSE_SUBMODULES_ON_DEMAND |
1225                                 TRANSPORT_RECURSE_SUBMODULES_ONLY)) &&
1226                       !pretend)) && !is_bare_repository()) {
1227                         struct ref *ref = remote_refs;
1228                         struct string_list needs_pushing = STRING_LIST_INIT_DUP;
1229                         struct oid_array commits = OID_ARRAY_INIT;
1230
1231                         trace2_region_enter("transport_push", "check_submodules", r);
1232                         for (; ref; ref = ref->next)
1233                                 if (!is_null_oid(&ref->new_oid))
1234                                         oid_array_append(&commits,
1235                                                           &ref->new_oid);
1236
1237                         if (find_unpushed_submodules(r,
1238                                                      &commits,
1239                                                      transport->remote->name,
1240                                                      &needs_pushing)) {
1241                                 oid_array_clear(&commits);
1242                                 trace2_region_leave("transport_push", "check_submodules", r);
1243                                 die_with_unpushed_submodules(&needs_pushing);
1244                         }
1245                         string_list_clear(&needs_pushing, 0);
1246                         oid_array_clear(&commits);
1247                         trace2_region_leave("transport_push", "check_submodules", r);
1248                 }
1249
1250                 if (!(flags & TRANSPORT_RECURSE_SUBMODULES_ONLY)) {
1251                         trace2_region_enter("transport_push", "push_refs", r);
1252                         push_ret = transport->vtable->push_refs(transport, remote_refs, flags);
1253                         trace2_region_leave("transport_push", "push_refs", r);
1254                 } else
1255                         push_ret = 0;
1256                 err = push_had_errors(remote_refs);
1257                 ret = push_ret | err;
1258
1259                 if (!quiet || err)
1260                         transport_print_push_status(transport->url, remote_refs,
1261                                         verbose | porcelain, porcelain,
1262                                         reject_reasons);
1263
1264                 if (flags & TRANSPORT_PUSH_SET_UPSTREAM)
1265                         set_upstreams(transport, remote_refs, pretend);
1266
1267                 if (!(flags & (TRANSPORT_PUSH_DRY_RUN |
1268                                TRANSPORT_RECURSE_SUBMODULES_ONLY))) {
1269                         struct ref *ref;
1270                         for (ref = remote_refs; ref; ref = ref->next)
1271                                 transport_update_tracking_ref(transport->remote, ref, verbose);
1272                 }
1273
1274                 if (porcelain && !push_ret)
1275                         puts("Done");
1276                 else if (!quiet && !ret && !transport_refs_pushed(remote_refs))
1277                         fprintf(stderr, "Everything up-to-date\n");
1278
1279                 return ret;
1280         }
1281         return 1;
1282 }
1283
1284 const struct ref *transport_get_remote_refs(struct transport *transport,
1285                                             const struct strvec *ref_prefixes)
1286 {
1287         if (!transport->got_remote_refs) {
1288                 transport->remote_refs =
1289                         transport->vtable->get_refs_list(transport, 0,
1290                                                          ref_prefixes);
1291                 transport->got_remote_refs = 1;
1292         }
1293
1294         return transport->remote_refs;
1295 }
1296
1297 int transport_fetch_refs(struct transport *transport, struct ref *refs)
1298 {
1299         int rc;
1300         int nr_heads = 0, nr_alloc = 0, nr_refs = 0;
1301         struct ref **heads = NULL;
1302         struct ref *rm;
1303
1304         for (rm = refs; rm; rm = rm->next) {
1305                 nr_refs++;
1306                 if (rm->peer_ref &&
1307                     !is_null_oid(&rm->old_oid) &&
1308                     oideq(&rm->peer_ref->old_oid, &rm->old_oid))
1309                         continue;
1310                 ALLOC_GROW(heads, nr_heads + 1, nr_alloc);
1311                 heads[nr_heads++] = rm;
1312         }
1313
1314         if (!nr_heads) {
1315                 /*
1316                  * When deepening of a shallow repository is requested,
1317                  * then local and remote refs are likely to still be equal.
1318                  * Just feed them all to the fetch method in that case.
1319                  * This condition shouldn't be met in a non-deepening fetch
1320                  * (see builtin/fetch.c:quickfetch()).
1321                  */
1322                 ALLOC_ARRAY(heads, nr_refs);
1323                 for (rm = refs; rm; rm = rm->next)
1324                         heads[nr_heads++] = rm;
1325         }
1326
1327         rc = transport->vtable->fetch(transport, nr_heads, heads);
1328
1329         free(heads);
1330         return rc;
1331 }
1332
1333 void transport_unlock_pack(struct transport *transport)
1334 {
1335         int i;
1336
1337         for (i = 0; i < transport->pack_lockfiles.nr; i++)
1338                 unlink_or_warn(transport->pack_lockfiles.items[i].string);
1339         string_list_clear(&transport->pack_lockfiles, 0);
1340 }
1341
1342 int transport_connect(struct transport *transport, const char *name,
1343                       const char *exec, int fd[2])
1344 {
1345         if (transport->vtable->connect)
1346                 return transport->vtable->connect(transport, name, exec, fd);
1347         else
1348                 die(_("operation not supported by protocol"));
1349 }
1350
1351 int transport_disconnect(struct transport *transport)
1352 {
1353         int ret = 0;
1354         if (transport->vtable->disconnect)
1355                 ret = transport->vtable->disconnect(transport);
1356         free(transport);
1357         return ret;
1358 }
1359
1360 /*
1361  * Strip username (and password) from a URL and return
1362  * it in a newly allocated string.
1363  */
1364 char *transport_anonymize_url(const char *url)
1365 {
1366         char *scheme_prefix, *anon_part;
1367         size_t anon_len, prefix_len = 0;
1368
1369         anon_part = strchr(url, '@');
1370         if (url_is_local_not_ssh(url) || !anon_part)
1371                 goto literal_copy;
1372
1373         anon_len = strlen(++anon_part);
1374         scheme_prefix = strstr(url, "://");
1375         if (!scheme_prefix) {
1376                 if (!strchr(anon_part, ':'))
1377                         /* cannot be "me@there:/path/name" */
1378                         goto literal_copy;
1379         } else {
1380                 const char *cp;
1381                 /* make sure scheme is reasonable */
1382                 for (cp = url; cp < scheme_prefix; cp++) {
1383                         switch (*cp) {
1384                                 /* RFC 1738 2.1 */
1385                         case '+': case '.': case '-':
1386                                 break; /* ok */
1387                         default:
1388                                 if (isalnum(*cp))
1389                                         break;
1390                                 /* it isn't */
1391                                 goto literal_copy;
1392                         }
1393                 }
1394                 /* @ past the first slash does not count */
1395                 cp = strchr(scheme_prefix + 3, '/');
1396                 if (cp && cp < anon_part)
1397                         goto literal_copy;
1398                 prefix_len = scheme_prefix - url + 3;
1399         }
1400         return xstrfmt("%.*s%.*s", (int)prefix_len, url,
1401                        (int)anon_len, anon_part);
1402 literal_copy:
1403         return xstrdup(url);
1404 }