Merged in the security fixes from 2.5.7.
[rsync/rsync.git] / receiver.c
1 /* -*- c-file-style: "linux" -*-
2    
3    Copyright (C) 1996-2000 by Andrew Tridgell
4    Copyright (C) Paul Mackerras 1996
5    
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 2 of the License, or
9    (at your option) any later version.
10    
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15    
16    You should have received a copy of the GNU General Public License
17    along with this program; if not, write to the Free Software
18    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
19 */
20
21 #include "rsync.h"
22
23 extern int verbose;
24 extern int recurse;
25 extern int delete_mode;
26 extern int protocol_version;
27 extern int csum_length;
28 extern struct stats stats;
29 extern int dry_run;
30 extern int am_server;
31 extern int relative_paths;
32 extern int preserve_hard_links;
33 extern int cvs_exclude;
34 extern int io_error;
35 extern char *tmpdir;
36 extern char *compare_dest;
37 extern int make_backups;
38 extern int do_progress;
39 extern char *backup_dir;
40 extern char *backup_suffix;
41 extern int backup_suffix_len;
42
43 static struct delete_list {
44         DEV64_T dev;
45         INO64_T inode;
46 } *delete_list;
47 static int dlist_len, dlist_alloc_len;
48
49 /* yuck! This function wouldn't have been necessary if I had the sorting
50    algorithm right. Unfortunately fixing the sorting algorithm would introduce
51    a backward incompatibility as file list indexes are sent over the link.
52 */
53 static int delete_already_done(struct file_list *flist,int j)
54 {
55         int i;
56         STRUCT_STAT st;
57
58         if (link_stat(f_name(flist->files[j]), &st)) return 1;
59
60         for (i=0;i<dlist_len;i++) {
61                 if (st.st_ino == delete_list[i].inode &&
62                     (DEV64_T)st.st_dev == delete_list[i].dev)
63                         return 1;
64         }
65
66         return 0;
67 }
68
69 static void add_delete_entry(struct file_struct *file)
70 {
71         if (dlist_len == dlist_alloc_len) {
72                 dlist_alloc_len += 1024;
73                 delete_list = realloc_array(delete_list, struct delete_list,
74                                             dlist_alloc_len);
75                 if (!delete_list) out_of_memory("add_delete_entry");
76         }
77
78         delete_list[dlist_len].dev = file->dev;
79         delete_list[dlist_len].inode = file->inode;
80         dlist_len++;
81
82         if (verbose > 3)
83                 rprintf(FINFO,"added %s to delete list\n", f_name(file));
84 }
85
86 static void delete_one(char *fn, int is_dir)
87 {
88         if (!is_dir) {
89                 if (robust_unlink(fn) != 0) {
90                         rprintf(FERROR, "delete_one: unlink %s failed: %s\n",
91                                 full_fname(fn), strerror(errno));
92                 } else if (verbose) {
93                         rprintf(FINFO, "deleting %s\n", fn);
94                 }
95         } else {    
96                 if (do_rmdir(fn) != 0) {
97                         if (errno != ENOTEMPTY && errno != EEXIST) {
98                                 rprintf(FERROR, "delete_one: rmdir %s failed: %s\n",
99                                         full_fname(fn), strerror(errno));
100                         }
101                 } else if (verbose) {
102                         rprintf(FINFO, "deleting directory %s\n", fn);
103                 }
104         }
105 }
106
107
108 static int is_backup_file(char *fn)
109 {
110         int k = strlen(fn) - backup_suffix_len;
111         return k > 0 && strcmp(fn+k, backup_suffix) == 0;
112 }
113
114
115 /* this deletes any files on the receiving side that are not present
116    on the sending side. For version 1.6.4 I have changed the behaviour
117    to match more closely what most people seem to expect of this option */
118 void delete_files(struct file_list *flist)
119 {
120         struct file_list *local_file_list;
121         int i, j;
122         char *name;
123         extern int module_id;
124         extern int ignore_errors;
125         extern int max_delete;
126         static int deletion_count;
127
128         if (cvs_exclude)
129                 add_cvs_excludes();
130
131         if (io_error && !(lp_ignore_errors(module_id) || ignore_errors)) {
132                 rprintf(FINFO,"IO error encountered - skipping file deletion\n");
133                 return;
134         }
135
136         for (j=0;j<flist->count;j++) {
137                 if (!S_ISDIR(flist->files[j]->mode) || 
138                     !(flist->files[j]->flags & FLAG_DELETE)) continue;
139
140                 if (protocol_version < 19 &&
141                     delete_already_done(flist, j)) continue;
142
143                 name = strdup(f_name(flist->files[j]));
144
145                 if (!(local_file_list = send_file_list(-1,1,&name))) {
146                         free(name);
147                         continue;
148                 }
149
150                 if (verbose > 1)
151                         rprintf(FINFO,"deleting in %s\n", name);
152
153                 for (i=local_file_list->count-1;i>=0;i--) {
154                         if (max_delete && deletion_count > max_delete) break;
155                         if (!local_file_list->files[i]->basename) continue;
156                         if (protocol_version < 19 &&
157                             S_ISDIR(local_file_list->files[i]->mode))
158                                 add_delete_entry(local_file_list->files[i]);
159                         if (-1 == flist_find(flist,local_file_list->files[i])) {
160                                 char *f = f_name(local_file_list->files[i]);
161                                 if (make_backups && (backup_dir || !is_backup_file(f))) {
162                                         (void) make_backup(f);
163                                         if (verbose)
164                                                 rprintf(FINFO, "deleting %s\n", f);
165                                 } else {
166                                         int mode = local_file_list->files[i]->mode;
167                                         delete_one(f, S_ISDIR(mode) != 0);
168                                 }
169                                 deletion_count++;
170                         }
171                 }
172                 flist_free(local_file_list);
173                 free(name);
174         }
175 }
176
177
178 /*
179  * get_tmpname() - create a tmp filename for a given filename
180  *
181  *   If a tmpdir is defined, use that as the directory to
182  *   put it in.  Otherwise, the tmp filename is in the same
183  *   directory as the given name.  Note that there may be no
184  *   directory at all in the given name!
185  *      
186  *   The tmp filename is basically the given filename with a
187  *   dot prepended, and .XXXXXX appended (for mkstemp() to
188  *   put its unique gunk in).  Take care to not exceed
189  *   either the MAXPATHLEN or NAME_MAX, esp. the last, as
190  *   the basename basically becomes 8 chars longer. In that
191  *   case, the original name is shortened sufficiently to
192  *   make it all fit.
193  *      
194  *   Of course, there's no real reason for the tmp name to
195  *   look like the original, except to satisfy us humans.
196  *   As long as it's unique, rsync will work.
197  */
198
199 static int get_tmpname(char *fnametmp, char *fname)
200 {
201         char *f;
202         int     length = 0;
203         int     maxname;
204
205         if (tmpdir) {
206                 strlcpy(fnametmp, tmpdir, MAXPATHLEN - 2);
207                 length = strlen(fnametmp);
208                 fnametmp[length++] = '/';
209                 fnametmp[length] = '\0';        /* always NULL terminated */
210         }
211
212         if ((f = strrchr(fname, '/')) != NULL) {
213                 ++f;
214                 if (!tmpdir) {
215                         length = f - fname;
216                         /* copy up to and including the slash */
217                         strlcpy(fnametmp, fname, length + 1);
218                 }
219         } else {
220                 f = fname;
221         } 
222         fnametmp[length++] = '.';
223         fnametmp[length] = '\0';                /* always NULL terminated */
224
225         maxname = MIN(MAXPATHLEN - 7 - length, NAME_MAX - 8);
226
227         if (maxname < 1) {
228                 rprintf(FERROR, "temporary filename too long: %s\n", fname);
229                 fnametmp[0] = '\0';
230                 return 0;
231         }
232
233         strlcpy(fnametmp + length, f, maxname); 
234         strcat(fnametmp + length, ".XXXXXX");
235
236         return 1;
237 }
238
239
240 static int receive_data(int f_in,struct map_struct *buf,int fd,char *fname,
241                         OFF_T total_size)
242 {
243         int i;
244         struct sum_struct sum;
245         unsigned int len;
246         OFF_T offset = 0;
247         OFF_T offset2;
248         char *data;
249         static char file_sum1[MD4_SUM_LENGTH];
250         static char file_sum2[MD4_SUM_LENGTH];
251         char *map=NULL;
252         
253         read_sum_head(f_in, &sum);
254         
255         sum_init();
256         
257         for (i=recv_token(f_in,&data); i != 0; i=recv_token(f_in,&data)) {
258                 if (do_progress)
259                         show_progress(offset, total_size);
260
261                 if (i > 0) {
262                         extern int cleanup_got_literal;
263
264                         if (verbose > 3) {
265                                 rprintf(FINFO,"data recv %d at %.0f\n",
266                                         i,(double)offset);
267                         }
268
269                         stats.literal_data += i;
270                         cleanup_got_literal = 1;
271       
272                         sum_update(data,i);
273
274                         if (fd != -1 && write_file(fd,data,i) != i) {
275                                 rprintf(FERROR, "write failed on %s: %s\n",
276                                         full_fname(fname), strerror(errno));
277                                 exit_cleanup(RERR_FILEIO);
278                         }
279                         offset += i;
280                         continue;
281                 } 
282
283                 i = -(i+1);
284                 offset2 = i*(OFF_T)sum.blength;
285                 len = sum.blength;
286                 if (i == (int) sum.count-1 && sum.remainder != 0)
287                         len = sum.remainder;
288                 
289                 stats.matched_data += len;
290                 
291                 if (verbose > 3)
292                         rprintf(FINFO,"chunk[%d] of size %d at %.0f offset=%.0f\n",
293                                 i,len,(double)offset2,(double)offset);
294                 
295                 if (buf) {
296                         map = map_ptr(buf,offset2,len);
297                 
298                         see_token(map, len);
299                         sum_update(map,len);
300                 }
301                 
302                 if (fd != -1 && write_file(fd,map,len) != (int) len) {
303                         rprintf(FERROR, "write failed on %s: %s\n",
304                                 full_fname(fname), strerror(errno));
305                         exit_cleanup(RERR_FILEIO);
306                 }
307                 offset += len;
308         }
309
310         if (do_progress)
311                 end_progress(total_size);
312
313         if (fd != -1 && offset > 0 && sparse_end(fd) != 0) {
314                 rprintf(FERROR, "write failed on %s: %s\n",
315                         full_fname(fname), strerror(errno));
316                 exit_cleanup(RERR_FILEIO);
317         }
318
319         sum_end(file_sum1);
320
321         read_buf(f_in,file_sum2,MD4_SUM_LENGTH);
322         if (verbose > 2) {
323                 rprintf(FINFO,"got file_sum\n");
324         }
325         if (fd != -1
326             && memcmp(file_sum1,file_sum2,MD4_SUM_LENGTH) != 0) {
327                 return 0;
328         }
329         return 1;
330 }
331
332
333 /**
334  * main routine for receiver process.
335  *
336  * Receiver process runs on the same host as the generator process. */
337 int recv_files(int f_in,struct file_list *flist,char *local_name,int f_gen)
338 {  
339         int fd1,fd2;
340         STRUCT_STAT st;
341         char *fname;
342         char template[MAXPATHLEN];
343         char fnametmp[MAXPATHLEN];
344         char *fnamecmp;
345         char fnamecmpbuf[MAXPATHLEN];
346         struct map_struct *buf;
347         int i;
348         struct file_struct *file;
349         int phase=0;
350         int recv_ok;
351         extern struct stats stats;              
352         extern int preserve_perms;
353         extern int delete_after;
354         extern int orig_umask;
355         struct stats initial_stats;
356
357         if (verbose > 2) {
358                 rprintf(FINFO,"recv_files(%d) starting\n",flist->count);
359         }
360
361         while (1) {      
362                 cleanup_disable();
363
364                 i = read_int(f_in);
365                 if (i == -1) {
366                         if (phase==0) {
367                                 phase++;
368                                 csum_length = SUM_LENGTH;
369                                 if (verbose > 2)
370                                         rprintf(FINFO,"recv_files phase=%d\n",phase);
371                                 write_int(f_gen,-1);
372                                 continue;
373                         }
374                         break;
375                 }
376
377                 if (i < 0 || i >= flist->count) {
378                         rprintf(FERROR,"Invalid file index %d in recv_files (count=%d)\n", 
379                                 i, flist->count);
380                         exit_cleanup(RERR_PROTOCOL);
381                 }
382
383                 file = flist->files[i];
384                 fname = f_name(file);
385
386                 stats.num_transferred_files++;
387                 stats.total_transferred_size += file->length;
388
389                 if (local_name)
390                         fname = local_name;
391
392                 if (dry_run) {
393                         if (!am_server && verbose) {    /* log transfer */
394                                 rprintf(FINFO, "%s\n", fname);
395                         }
396                         continue;
397                 }
398
399                 initial_stats = stats;
400
401                 if (verbose > 2)
402                         rprintf(FINFO,"recv_files(%s)\n",fname);
403
404                 fnamecmp = fname;
405
406                 /* open the file */  
407                 fd1 = do_open(fnamecmp, O_RDONLY, 0);
408
409                 if ((fd1 == -1) && (compare_dest != NULL)) {
410                         /* try the file at compare_dest instead */
411                         snprintf(fnamecmpbuf,MAXPATHLEN,"%s/%s",
412                                                 compare_dest,fname);
413                         fnamecmp = fnamecmpbuf;
414                         fd1 = do_open(fnamecmp, O_RDONLY, 0);
415                 }
416
417                 if (fd1 != -1 && do_fstat(fd1,&st) != 0) {
418                         rprintf(FERROR, "fstat %s failed: %s\n",
419                                 full_fname(fnamecmp), strerror(errno));
420                         receive_data(f_in,NULL,-1,NULL,file->length);
421                         close(fd1);
422                         continue;
423                 }
424
425                 if (fd1 != -1 && S_ISDIR(st.st_mode) && fnamecmp == fname) {
426                         /* this special handling for directories
427                          * wouldn't be necessary if robust_rename()
428                          * and the underlying robust_unlink could cope
429                          * with directories
430                          */
431                         rprintf(FERROR,"recv_files: %s is a directory\n",
432                                 full_fname(fnamecmp));
433                         receive_data(f_in, NULL, -1, NULL, file->length);
434                         close(fd1);
435                         continue;
436                 }
437
438                 if (fd1 != -1 && !S_ISREG(st.st_mode)) {
439                         close(fd1);
440                         fd1 = -1;
441                         buf = NULL;
442                 }
443
444                 if (fd1 != -1 && !preserve_perms) {
445                         /* if the file exists already and we aren't preserving
446                            permissions then act as though the remote end sent
447                            us the file permissions we already have */
448                         file->mode = st.st_mode;
449                 }
450
451                 if (fd1 != -1 && st.st_size > 0) {
452                         buf = map_file(fd1,st.st_size);
453                         if (verbose > 2)
454                                 rprintf(FINFO,"recv mapped %s of size %.0f\n",fnamecmp,(double)st.st_size);
455                 } else {
456                         buf = NULL;
457                 }
458
459                 if (!get_tmpname(fnametmp,fname)) {
460                         if (buf) unmap_file(buf);
461                         if (fd1 != -1) close(fd1);
462                         continue;
463                 }
464
465                 strlcpy(template, fnametmp, sizeof(template));
466
467                 /* we initially set the perms without the
468                    setuid/setgid bits to ensure that there is no race
469                    condition. They are then correctly updated after
470                    the lchown. Thanks to snabb@epipe.fi for pointing
471                    this out.  We also set it initially without group
472                    access because of a similar race condition. */
473                 fd2 = do_mkstemp(fnametmp, file->mode & INITACCESSPERMS);
474
475                 /* in most cases parent directories will already exist
476                    because their information should have been previously
477                    transferred, but that may not be the case with -R */
478                 if (fd2 == -1 && relative_paths && errno == ENOENT && 
479                     create_directory_path(fnametmp, orig_umask) == 0) {
480                         strlcpy(fnametmp, template, sizeof(fnametmp));
481                         fd2 = do_mkstemp(fnametmp, file->mode & INITACCESSPERMS);
482                 }
483                 if (fd2 == -1) {
484                         rprintf(FERROR, "mkstemp %s failed: %s\n",
485                                 full_fname(fnametmp), strerror(errno));
486                         receive_data(f_in,buf,-1,NULL,file->length);
487                         if (buf) unmap_file(buf);
488                         if (fd1 != -1) close(fd1);
489                         continue;
490                 }
491       
492                 cleanup_set(fnametmp, fname, file, buf, fd1, fd2);
493
494                 if (!am_server && verbose) {    /* log transfer */
495                         rprintf(FINFO, "%s\n", fname);
496                 }
497
498                 /* recv file data */
499                 recv_ok = receive_data(f_in,buf,fd2,fname,file->length);
500
501                 log_recv(file, &initial_stats);
502                 
503                 if (buf) unmap_file(buf);
504                 if (fd1 != -1) {
505                         close(fd1);
506                 }
507                 close(fd2);
508                 
509                 if (verbose > 2)
510                         rprintf(FINFO,"renaming %s to %s\n",fnametmp,fname);
511
512                 finish_transfer(fname, fnametmp, file);
513
514                 cleanup_disable();
515
516                 if (!recv_ok) {
517                         if (csum_length == SUM_LENGTH) {
518                                 rprintf(FERROR,"ERROR: file corruption in %s. File changed during transfer?\n",
519                                         full_fname(fname));
520                         } else {
521                                 if (verbose > 1)
522                                         rprintf(FINFO,"redoing %s(%d)\n",fname,i);
523                                 write_int(f_gen,i);
524                         }
525                 }
526         }
527
528         if (delete_after) {
529                 if (recurse && delete_mode && !local_name && flist->count>0) {
530                         delete_files(flist);
531                 }
532         }
533
534         if (preserve_hard_links)
535                 do_hard_links();
536
537         /* now we need to fix any directory permissions that were 
538            modified during the transfer */
539         for (i = 0; i < flist->count; i++) {
540                 file = flist->files[i];
541                 if (!file->basename || !S_ISDIR(file->mode)) continue;
542                 recv_generator(local_name?local_name:f_name(file),flist,i,-1);
543         }
544
545         if (verbose > 2)
546                 rprintf(FINFO,"recv_files finished\n");
547         
548         return 0;
549 }
550