Merge branch 'jc/hidden-refs'
Allow the server side to redact the refs/ namespace it shows to the client. Will merge to 'master'. * jc/hidden-refs: upload/receive-pack: allow hiding ref hierarchies upload-pack: simplify request validation upload-pack: share more code
This commit is contained in:
@ -12,6 +12,7 @@
|
||||
#include "run-command.h"
|
||||
#include "sigchain.h"
|
||||
#include "version.h"
|
||||
#include "string-list.h"
|
||||
|
||||
static const char upload_pack_usage[] = "git upload-pack [--strict] [--timeout=<n>] <dir>";
|
||||
|
||||
@ -28,7 +29,7 @@ static const char upload_pack_usage[] = "git upload-pack [--strict] [--timeout=<
|
||||
|
||||
static unsigned long oldest_have;
|
||||
|
||||
static int multi_ack, nr_our_refs;
|
||||
static int multi_ack;
|
||||
static int no_done;
|
||||
static int use_thin_pack, use_ofs_delta, use_include_tag;
|
||||
static int no_progress, daemon_mode;
|
||||
@ -139,7 +140,6 @@ static void create_pack_file(void)
|
||||
{
|
||||
struct async rev_list;
|
||||
struct child_process pack_objects;
|
||||
int create_full_pack = (nr_our_refs == want_obj.nr && !have_obj.nr);
|
||||
char data[8193], progress[128];
|
||||
char abort_msg[] = "aborting due to possible repository "
|
||||
"corruption on the remote side.";
|
||||
@ -151,9 +151,7 @@ static void create_pack_file(void)
|
||||
argv[arg++] = "pack-objects";
|
||||
if (!shallow_nr) {
|
||||
argv[arg++] = "--revs";
|
||||
if (create_full_pack)
|
||||
argv[arg++] = "--all";
|
||||
else if (use_thin_pack)
|
||||
if (use_thin_pack)
|
||||
argv[arg++] = "--thin";
|
||||
}
|
||||
|
||||
@ -185,15 +183,15 @@ static void create_pack_file(void)
|
||||
}
|
||||
else {
|
||||
FILE *pipe_fd = xfdopen(pack_objects.in, "w");
|
||||
if (!create_full_pack) {
|
||||
int i;
|
||||
for (i = 0; i < want_obj.nr; i++)
|
||||
fprintf(pipe_fd, "%s\n", sha1_to_hex(want_obj.objects[i].item->sha1));
|
||||
fprintf(pipe_fd, "--not\n");
|
||||
for (i = 0; i < have_obj.nr; i++)
|
||||
fprintf(pipe_fd, "%s\n", sha1_to_hex(have_obj.objects[i].item->sha1));
|
||||
}
|
||||
int i;
|
||||
|
||||
for (i = 0; i < want_obj.nr; i++)
|
||||
fprintf(pipe_fd, "%s\n",
|
||||
sha1_to_hex(want_obj.objects[i].item->sha1));
|
||||
fprintf(pipe_fd, "--not\n");
|
||||
for (i = 0; i < have_obj.nr; i++)
|
||||
fprintf(pipe_fd, "%s\n",
|
||||
sha1_to_hex(have_obj.objects[i].item->sha1));
|
||||
fprintf(pipe_fd, "\n");
|
||||
fflush(pipe_fd);
|
||||
fclose(pipe_fd);
|
||||
@ -729,15 +727,30 @@ static void receive_needs(void)
|
||||
free(shallows.objects);
|
||||
}
|
||||
|
||||
/* return non-zero if the ref is hidden, otherwise 0 */
|
||||
static int mark_our_ref(const char *refname, const unsigned char *sha1, int flag, void *cb_data)
|
||||
{
|
||||
struct object *o = lookup_unknown_object(sha1);
|
||||
|
||||
if (ref_is_hidden(refname))
|
||||
return 1;
|
||||
if (!o)
|
||||
die("git upload-pack: cannot find object %s:", sha1_to_hex(sha1));
|
||||
o->flags |= OUR_REF;
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int send_ref(const char *refname, const unsigned char *sha1, int flag, void *cb_data)
|
||||
{
|
||||
static const char *capabilities = "multi_ack thin-pack side-band"
|
||||
" side-band-64k ofs-delta shallow no-progress"
|
||||
" include-tag multi_ack_detailed";
|
||||
struct object *o = lookup_unknown_object(sha1);
|
||||
const char *refname_nons = strip_namespace(refname);
|
||||
unsigned char peeled[20];
|
||||
|
||||
if (mark_our_ref(refname, sha1, flag, cb_data))
|
||||
return 0;
|
||||
|
||||
if (capabilities)
|
||||
packet_write(1, "%s %s%c%s%s agent=%s\n",
|
||||
sha1_to_hex(sha1), refname_nons,
|
||||
@ -747,27 +760,11 @@ static int send_ref(const char *refname, const unsigned char *sha1, int flag, vo
|
||||
else
|
||||
packet_write(1, "%s %s\n", sha1_to_hex(sha1), refname_nons);
|
||||
capabilities = NULL;
|
||||
if (!(o->flags & OUR_REF)) {
|
||||
o->flags |= OUR_REF;
|
||||
nr_our_refs++;
|
||||
}
|
||||
if (!peel_ref(refname, peeled))
|
||||
packet_write(1, "%s %s^{}\n", sha1_to_hex(peeled), refname_nons);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int mark_our_ref(const char *refname, const unsigned char *sha1, int flag, void *cb_data)
|
||||
{
|
||||
struct object *o = parse_object(sha1);
|
||||
if (!o)
|
||||
die("git upload-pack: cannot find object %s:", sha1_to_hex(sha1));
|
||||
if (!(o->flags & OUR_REF)) {
|
||||
o->flags |= OUR_REF;
|
||||
nr_our_refs++;
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static void upload_pack(void)
|
||||
{
|
||||
if (advertise_refs || !stateless_rpc) {
|
||||
@ -789,6 +786,11 @@ static void upload_pack(void)
|
||||
}
|
||||
}
|
||||
|
||||
static int upload_pack_config(const char *var, const char *value, void *unused)
|
||||
{
|
||||
return parse_hide_refs_config(var, value, "uploadpack");
|
||||
}
|
||||
|
||||
int main(int argc, char **argv)
|
||||
{
|
||||
char *dir;
|
||||
@ -840,6 +842,7 @@ int main(int argc, char **argv)
|
||||
die("'%s' does not appear to be a git repository", dir);
|
||||
if (is_repository_shallow())
|
||||
die("attempt to fetch/clone from a shallow repository");
|
||||
git_config(upload_pack_config, NULL);
|
||||
if (getenv("GIT_DEBUG_SEND_PACK"))
|
||||
debug_fd = atoi(getenv("GIT_DEBUG_SEND_PACK"));
|
||||
upload_pack();
|
||||
|
Reference in New Issue
Block a user