When running with --fake-super, get/put ACLs from/to an xattr and don't
[rsync/rsync.git] / io.c
1 /*
2  * Socket and pipe I/O utilities used in rsync.
3  *
4  * Copyright (C) 1996-2001 Andrew Tridgell
5  * Copyright (C) 1996 Paul Mackerras
6  * Copyright (C) 2001, 2002 Martin Pool <mbp@samba.org>
7  * Copyright (C) 2003-2007 Wayne Davison
8  *
9  * This program is free software; you can redistribute it and/or modify
10  * it under the terms of the GNU General Public License as published by
11  * the Free Software Foundation; either version 3 of the License, or
12  * (at your option) any later version.
13  *
14  * This program is distributed in the hope that it will be useful,
15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17  * GNU General Public License for more details.
18  *
19  * You should have received a copy of the GNU General Public License along
20  * with this program; if not, visit the http://fsf.org website.
21  */
22
23 /* Rsync provides its own multiplexing system, which is used to send
24  * stderr and stdout over a single socket.
25  *
26  * For historical reasons this is off during the start of the
27  * connection, but it's switched on quite early using
28  * io_start_multiplex_out() and io_start_multiplex_in(). */
29
30 #include "rsync.h"
31 #include "ifuncs.h"
32
33 /** If no timeout is specified then use a 60 second select timeout */
34 #define SELECT_TIMEOUT 60
35
36 extern int bwlimit;
37 extern size_t bwlimit_writemax;
38 extern int io_timeout;
39 extern int allowed_lull;
40 extern int am_server;
41 extern int am_daemon;
42 extern int am_sender;
43 extern int am_generator;
44 extern int inc_recurse;
45 extern int io_error;
46 extern int eol_nulls;
47 extern int flist_eof;
48 extern int read_batch;
49 extern int csum_length;
50 extern int protect_args;
51 extern int checksum_seed;
52 extern int protocol_version;
53 extern int remove_source_files;
54 extern int preserve_hard_links;
55 extern struct stats stats;
56 extern struct file_list *cur_flist;
57 #ifdef ICONV_OPTION
58 extern int filesfrom_convert;
59 extern iconv_t ic_send, ic_recv;
60 #endif
61
62 const char phase_unknown[] = "unknown";
63 int ignore_timeout = 0;
64 int batch_fd = -1;
65 int msgdone_cnt = 0;
66
67 /* Ignore an EOF error if non-zero. See whine_about_eof(). */
68 int kluge_around_eof = 0;
69
70 int msg_fd_in = -1;
71 int msg_fd_out = -1;
72 int sock_f_in = -1;
73 int sock_f_out = -1;
74
75 static int iobuf_f_in = -1;
76 static char *iobuf_in;
77 static size_t iobuf_in_siz;
78 static size_t iobuf_in_ndx;
79 static size_t iobuf_in_remaining;
80
81 static int iobuf_f_out = -1;
82 static char *iobuf_out;
83 static int iobuf_out_cnt;
84
85 int flist_forward_from = -1;
86
87 static int io_multiplexing_out;
88 static int io_multiplexing_in;
89 static time_t last_io_in;
90 static time_t last_io_out;
91 static int no_flush;
92
93 static int write_batch_monitor_in = -1;
94 static int write_batch_monitor_out = -1;
95
96 static int io_filesfrom_f_in = -1;
97 static int io_filesfrom_f_out = -1;
98 static xbuf ff_buf = EMPTY_XBUF;
99 static char ff_lastchar;
100 #ifdef ICONV_OPTION
101 static xbuf iconv_buf = EMPTY_XBUF;
102 #endif
103 static int defer_forwarding_messages = 0;
104 static int select_timeout = SELECT_TIMEOUT;
105 static int active_filecnt = 0;
106 static OFF_T active_bytecnt = 0;
107
108 static char int_byte_extra[64] = {
109         0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* (00 - 3F)/4 */
110         0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* (40 - 7F)/4 */
111         1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, /* (80 - BF)/4 */
112         2, 2, 2, 2, 2, 2, 2, 2, 3, 3, 3, 3, 4, 4, 5, 6, /* (C0 - FF)/4 */
113 };
114
115 enum festatus { FES_SUCCESS, FES_REDO, FES_NO_SEND };
116
117 static void readfd(int fd, char *buffer, size_t N);
118 static void writefd(int fd, const char *buf, size_t len);
119 static void writefd_unbuffered(int fd, const char *buf, size_t len);
120 static void mplex_write(int fd, enum msgcode code, const char *buf, size_t len, int convert);
121
122 struct flist_ndx_item {
123         struct flist_ndx_item *next;
124         int ndx;
125 };
126
127 struct flist_ndx_list {
128         struct flist_ndx_item *head, *tail;
129 };
130
131 static struct flist_ndx_list redo_list, hlink_list;
132
133 struct msg_list_item {
134         struct msg_list_item *next;
135         char convert;
136         char buf[1];
137 };
138
139 struct msg_list {
140         struct msg_list_item *head, *tail;
141 };
142
143 static struct msg_list msg_queue;
144
145 static void flist_ndx_push(struct flist_ndx_list *lp, int ndx)
146 {
147         struct flist_ndx_item *item;
148
149         if (!(item = new(struct flist_ndx_item)))
150                 out_of_memory("flist_ndx_push");
151         item->next = NULL;
152         item->ndx = ndx;
153         if (lp->tail)
154                 lp->tail->next = item;
155         else
156                 lp->head = item;
157         lp->tail = item;
158 }
159
160 static int flist_ndx_pop(struct flist_ndx_list *lp)
161 {
162         struct flist_ndx_item *next;
163         int ndx;
164
165         if (!lp->head)
166                 return -1;
167
168         ndx = lp->head->ndx;
169         next = lp->head->next;
170         free(lp->head);
171         lp->head = next;
172         if (!next)
173                 lp->tail = NULL;
174
175         return ndx;
176 }
177
178 static void got_flist_entry_status(enum festatus status, const char *buf)
179 {
180         int ndx = IVAL(buf, 0);
181         struct file_list *flist = flist_for_ndx(ndx);
182
183         assert(flist != NULL);
184         assert(ndx >= flist->ndx_start);
185
186         if (remove_source_files) {
187                 active_filecnt--;
188                 active_bytecnt -= F_LENGTH(flist->files[ndx - flist->ndx_start]);
189         }
190
191         if (inc_recurse)
192                 flist->in_progress--;
193
194         switch (status) {
195         case FES_SUCCESS:
196                 if (remove_source_files)
197                         send_msg(MSG_SUCCESS, buf, 4, 0);
198                 if (preserve_hard_links) {
199                         struct file_struct *file = flist->files[ndx - flist->ndx_start];
200                         if (F_IS_HLINKED(file))
201                                 flist_ndx_push(&hlink_list, ndx);
202                 }
203                 break;
204         case FES_REDO:
205                 if (inc_recurse)
206                         flist->to_redo++;
207                 flist_ndx_push(&redo_list, ndx);
208                 break;
209         case FES_NO_SEND:
210                 break;
211         }
212 }
213
214 static void check_timeout(void)
215 {
216         time_t t;
217
218         if (!io_timeout || ignore_timeout)
219                 return;
220
221         if (!last_io_in) {
222                 last_io_in = time(NULL);
223                 return;
224         }
225
226         t = time(NULL);
227
228         if (t - last_io_in >= io_timeout) {
229                 if (!am_server && !am_daemon) {
230                         rprintf(FERROR, "io timeout after %d seconds -- exiting\n",
231                                 (int)(t-last_io_in));
232                 }
233                 exit_cleanup(RERR_TIMEOUT);
234         }
235 }
236
237 /* Note the fds used for the main socket (which might really be a pipe
238  * for a local transfer, but we can ignore that). */
239 void io_set_sock_fds(int f_in, int f_out)
240 {
241         sock_f_in = f_in;
242         sock_f_out = f_out;
243 }
244
245 void set_io_timeout(int secs)
246 {
247         io_timeout = secs;
248
249         if (!io_timeout || io_timeout > SELECT_TIMEOUT)
250                 select_timeout = SELECT_TIMEOUT;
251         else
252                 select_timeout = io_timeout;
253
254         allowed_lull = read_batch ? 0 : (io_timeout + 1) / 2;
255 }
256
257 /* Setup the fd used to receive MSG_* messages.  Only needed during the
258  * early stages of being a local sender (up through the sending of the
259  * file list) or when we're the generator (to fetch the messages from
260  * the receiver). */
261 void set_msg_fd_in(int fd)
262 {
263         msg_fd_in = fd;
264 }
265
266 /* Setup the fd used to send our MSG_* messages.  Only needed when
267  * we're the receiver (to send our messages to the generator). */
268 void set_msg_fd_out(int fd)
269 {
270         msg_fd_out = fd;
271         set_nonblocking(msg_fd_out);
272 }
273
274 /* Add a message to the pending MSG_* list. */
275 static void msg_list_add(struct msg_list *lst, int code, const char *buf, int len, int convert)
276 {
277         struct msg_list_item *m;
278         int sz = len + 4 + sizeof m[0] - 1;
279
280         if (!(m = (struct msg_list_item *)new_array(char, sz)))
281                 out_of_memory("msg_list_add");
282         m->next = NULL;
283         m->convert = convert;
284         SIVAL(m->buf, 0, ((code+MPLEX_BASE)<<24) | len);
285         memcpy(m->buf + 4, buf, len);
286         if (lst->tail)
287                 lst->tail->next = m;
288         else
289                 lst->head = m;
290         lst->tail = m;
291 }
292
293 static void msg_flush(void)
294 {
295         if (am_generator) {
296                 while (msg_queue.head && io_multiplexing_out) {
297                         struct msg_list_item *m = msg_queue.head;
298                         int len = IVAL(m->buf, 0) & 0xFFFFFF;
299                         int tag = *((uchar*)m->buf+3) - MPLEX_BASE;
300                         if (!(msg_queue.head = m->next))
301                                 msg_queue.tail = NULL;
302                         stats.total_written += len + 4;
303                         defer_forwarding_messages++;
304                         mplex_write(sock_f_out, tag, m->buf + 4, len, m->convert);
305                         defer_forwarding_messages--;
306                         free(m);
307                 }
308         } else {
309                 while (msg_queue.head) {
310                         struct msg_list_item *m = msg_queue.head;
311                         int len = IVAL(m->buf, 0) & 0xFFFFFF;
312                         int tag = *((uchar*)m->buf+3) - MPLEX_BASE;
313                         if (!(msg_queue.head = m->next))
314                                 msg_queue.tail = NULL;
315                         defer_forwarding_messages++;
316                         mplex_write(msg_fd_out, tag, m->buf + 4, len, m->convert);
317                         defer_forwarding_messages--;
318                         free(m);
319                 }
320         }
321 }
322
323 /* Read a message from the MSG_* fd and handle it.  This is called either
324  * during the early stages of being a local sender (up through the sending
325  * of the file list) or when we're the generator (to fetch the messages
326  * from the receiver). */
327 static void read_msg_fd(void)
328 {
329         char buf[2048];
330         size_t n;
331         struct file_list *flist;
332         int fd = msg_fd_in;
333         int tag, len;
334
335         /* Temporarily disable msg_fd_in.  This is needed to avoid looping back
336          * to this routine from writefd_unbuffered(). */
337         no_flush++;
338         msg_fd_in = -1;
339         defer_forwarding_messages++;
340
341         readfd(fd, buf, 4);
342         tag = IVAL(buf, 0);
343
344         len = tag & 0xFFFFFF;
345         tag = (tag >> 24) - MPLEX_BASE;
346
347         switch (tag) {
348         case MSG_DONE:
349                 if (len < 0 || len > 1 || !am_generator) {
350                   invalid_msg:
351                         rprintf(FERROR, "invalid message %d:%d [%s%s]\n",
352                                 tag, len, who_am_i(),
353                                 inc_recurse ? "/inc" : "");
354                         exit_cleanup(RERR_STREAMIO);
355                 }
356                 if (len) {
357                         readfd(fd, buf, len);
358                         stats.total_read = read_varlong(fd, 3);
359                 }
360                 msgdone_cnt++;
361                 break;
362         case MSG_REDO:
363                 if (len != 4 || !am_generator)
364                         goto invalid_msg;
365                 readfd(fd, buf, 4);
366                 got_flist_entry_status(FES_REDO, buf);
367                 break;
368         case MSG_FLIST:
369                 if (len != 4 || !am_generator || !inc_recurse)
370                         goto invalid_msg;
371                 readfd(fd, buf, 4);
372                 /* Read extra file list from receiver. */
373                 assert(iobuf_in != NULL);
374                 assert(iobuf_f_in == fd);
375                 if (verbose > 3) {
376                         rprintf(FINFO, "[%s] receiving flist for dir %d\n",
377                                 who_am_i(), IVAL(buf,0));
378                 }
379                 flist = recv_file_list(fd);
380                 flist->parent_ndx = IVAL(buf,0);
381 #ifdef SUPPORT_HARD_LINKS
382                 if (preserve_hard_links)
383                         match_hard_links(flist);
384 #endif
385                 break;
386         case MSG_FLIST_EOF:
387                 if (len != 0 || !am_generator || !inc_recurse)
388                         goto invalid_msg;
389                 flist_eof = 1;
390                 break;
391         case MSG_DELETED:
392                 if (len >= (int)sizeof buf || !am_generator)
393                         goto invalid_msg;
394                 readfd(fd, buf, len);
395                 send_msg(MSG_DELETED, buf, len, 1);
396                 break;
397         case MSG_SUCCESS:
398                 if (len != 4 || !am_generator)
399                         goto invalid_msg;
400                 readfd(fd, buf, 4);
401                 got_flist_entry_status(FES_SUCCESS, buf);
402                 break;
403         case MSG_NO_SEND:
404                 if (len != 4 || !am_generator)
405                         goto invalid_msg;
406                 readfd(fd, buf, 4);
407                 got_flist_entry_status(FES_NO_SEND, buf);
408                 break;
409         case MSG_SOCKERR:
410         case MSG_CLIENT:
411                 if (!am_generator)
412                         goto invalid_msg;
413                 if (tag == MSG_SOCKERR)
414                         io_end_multiplex_out();
415                 /* FALL THROUGH */
416         case MSG_INFO:
417         case MSG_ERROR:
418         case MSG_LOG:
419                 while (len) {
420                         n = len;
421                         if (n >= sizeof buf)
422                                 n = sizeof buf - 1;
423                         readfd(fd, buf, n);
424                         rwrite((enum logcode)tag, buf, n, !am_generator);
425                         len -= n;
426                 }
427                 break;
428         default:
429                 rprintf(FERROR, "unknown message %d:%d [%s]\n",
430                         tag, len, who_am_i());
431                 exit_cleanup(RERR_STREAMIO);
432         }
433
434         no_flush--;
435         msg_fd_in = fd;
436         if (!--defer_forwarding_messages)
437                 msg_flush();
438 }
439
440 /* This is used by the generator to limit how many file transfers can
441  * be active at once when --remove-source-files is specified.  Without
442  * this, sender-side deletions were mostly happening at the end. */
443 void increment_active_files(int ndx, int itemizing, enum logcode code)
444 {
445         /* TODO: tune these limits? */
446         while (active_filecnt >= (active_bytecnt >= 128*1024 ? 10 : 50)) {
447                 check_for_finished_files(itemizing, code, 0);
448                 if (iobuf_out_cnt)
449                         io_flush(NORMAL_FLUSH);
450                 else
451                         read_msg_fd();
452         }
453
454         active_filecnt++;
455         active_bytecnt += F_LENGTH(cur_flist->files[ndx - cur_flist->ndx_start]);
456 }
457
458 /* Write an message to a multiplexed stream. If this fails, rsync exits. */
459 static void mplex_write(int fd, enum msgcode code, const char *buf, size_t len, int convert)
460 {
461         char buffer[BIGPATHBUFLEN]; /* Oversized for use by iconv code. */
462         size_t n = len;
463
464         SIVAL(buffer, 0, ((MPLEX_BASE + (int)code)<<24) + len);
465
466 #ifdef ICONV_OPTION
467         if (convert && ic_send == (iconv_t)-1)
468 #endif
469                 convert = 0;
470
471         if (convert || n > 1024 - 4) /* BIGPATHBUFLEN can handle 1024 bytes */
472                 n = 0;
473         else
474                 memcpy(buffer + 4, buf, n);
475
476         writefd_unbuffered(fd, buffer, n+4);
477
478         len -= n;
479         buf += n;
480
481 #ifdef ICONV_OPTION
482         if (convert) {
483                 xbuf outbuf, inbuf;
484
485                 INIT_CONST_XBUF(outbuf, buffer);
486                 INIT_XBUF(inbuf, (char*)buf, len, -1);
487
488                 defer_forwarding_messages++;
489                 do {
490                         iconvbufs(ic_send, &inbuf, &outbuf,
491                                   ICB_INCLUDE_BAD | ICB_INCLUDE_INCOMPLETE);
492                         writefd_unbuffered(fd, outbuf.buf, outbuf.len);
493                 } while (inbuf.len);
494                 if (!--defer_forwarding_messages)
495                         msg_flush();
496         } else
497 #endif
498         if (len) {
499                 defer_forwarding_messages++;
500                 writefd_unbuffered(fd, buf, len);
501                 if (!--defer_forwarding_messages)
502                         msg_flush();
503         }
504 }
505
506 int send_msg(enum msgcode code, const char *buf, int len, int convert)
507 {
508         if (msg_fd_out < 0) {
509                 if (!defer_forwarding_messages)
510                         return io_multiplex_write(code, buf, len, convert);
511                 if (!io_multiplexing_out)
512                         return 0;
513                 msg_list_add(&msg_queue, code, buf, len, convert);
514                 return 1;
515         }
516         if (flist_forward_from >= 0)
517                 msg_list_add(&msg_queue, code, buf, len, convert);
518         else
519                 mplex_write(msg_fd_out, code, buf, len, convert);
520         return 1;
521 }
522
523 void send_msg_int(enum msgcode code, int num)
524 {
525         char numbuf[4];
526         SIVAL(numbuf, 0, num);
527         send_msg(code, numbuf, 4, 0);
528 }
529
530 void wait_for_receiver(void)
531 {
532         if (iobuf_out_cnt)
533                 io_flush(NORMAL_FLUSH);
534         else
535                 read_msg_fd();
536 }
537
538 int get_redo_num(void)
539 {
540         return flist_ndx_pop(&redo_list);
541 }
542
543 int get_hlink_num(void)
544 {
545         return flist_ndx_pop(&hlink_list);
546 }
547
548 /**
549  * When we're the receiver and we have a local --files-from list of names
550  * that needs to be sent over the socket to the sender, we have to do two
551  * things at the same time: send the sender a list of what files we're
552  * processing and read the incoming file+info list from the sender.  We do
553  * this by augmenting the read_timeout() function to copy this data.  It
554  * uses ff_buf to read a block of data from f_in (when it is ready, since
555  * it might be a pipe) and then blast it out f_out (when it is ready to
556  * receive more data).
557  */
558 void io_set_filesfrom_fds(int f_in, int f_out)
559 {
560         io_filesfrom_f_in = f_in;
561         io_filesfrom_f_out = f_out;
562         alloc_xbuf(&ff_buf, 2048);
563 #ifdef ICONV_OPTION
564         if (protect_args)
565                 alloc_xbuf(&iconv_buf, 1024);
566 #endif
567 }
568
569 /* It's almost always an error to get an EOF when we're trying to read from the
570  * network, because the protocol is (for the most part) self-terminating.
571  *
572  * There is one case for the receiver when it is at the end of the transfer
573  * (hanging around reading any keep-alive packets that might come its way): if
574  * the sender dies before the generator's kill-signal comes through, we can end
575  * up here needing to loop until the kill-signal arrives.  In this situation,
576  * kluge_around_eof will be < 0.
577  *
578  * There is another case for older protocol versions (< 24) where the module
579  * listing was not terminated, so we must ignore an EOF error in that case and
580  * exit.  In this situation, kluge_around_eof will be > 0. */
581 static void whine_about_eof(int fd)
582 {
583         if (kluge_around_eof && fd == sock_f_in) {
584                 int i;
585                 if (kluge_around_eof > 0)
586                         exit_cleanup(0);
587                 /* If we're still here after 10 seconds, exit with an error. */
588                 for (i = 10*1000/20; i--; )
589                         msleep(20);
590         }
591
592         rprintf(FERROR, RSYNC_NAME ": connection unexpectedly closed "
593                 "(%.0f bytes received so far) [%s]\n",
594                 (double)stats.total_read, who_am_i());
595
596         exit_cleanup(RERR_STREAMIO);
597 }
598
599 /**
600  * Read from a socket with I/O timeout. return the number of bytes
601  * read. If no bytes can be read then exit, never return a number <= 0.
602  *
603  * TODO: If the remote shell connection fails, then current versions
604  * actually report an "unexpected EOF" error here.  Since it's a
605  * fairly common mistake to try to use rsh when ssh is required, we
606  * should trap that: if we fail to read any data at all, we should
607  * give a better explanation.  We can tell whether the connection has
608  * started by looking e.g. at whether the remote version is known yet.
609  */
610 static int read_timeout(int fd, char *buf, size_t len)
611 {
612         int n, cnt = 0;
613
614         io_flush(FULL_FLUSH);
615
616         while (cnt == 0) {
617                 /* until we manage to read *something* */
618                 fd_set r_fds, w_fds;
619                 struct timeval tv;
620                 int maxfd = fd;
621                 int count;
622
623                 FD_ZERO(&r_fds);
624                 FD_ZERO(&w_fds);
625                 FD_SET(fd, &r_fds);
626                 if (io_filesfrom_f_out >= 0) {
627                         int new_fd;
628                         if (ff_buf.len == 0) {
629                                 if (io_filesfrom_f_in >= 0) {
630                                         FD_SET(io_filesfrom_f_in, &r_fds);
631                                         new_fd = io_filesfrom_f_in;
632                                 } else {
633                                         io_filesfrom_f_out = -1;
634                                         new_fd = -1;
635                                 }
636                         } else {
637                                 FD_SET(io_filesfrom_f_out, &w_fds);
638                                 new_fd = io_filesfrom_f_out;
639                         }
640                         if (new_fd > maxfd)
641                                 maxfd = new_fd;
642                 }
643
644                 tv.tv_sec = select_timeout;
645                 tv.tv_usec = 0;
646
647                 errno = 0;
648
649                 count = select(maxfd + 1, &r_fds, &w_fds, NULL, &tv);
650
651                 if (count <= 0) {
652                         if (errno == EBADF) {
653                                 defer_forwarding_messages = 0;
654                                 exit_cleanup(RERR_SOCKETIO);
655                         }
656                         check_timeout();
657                         continue;
658                 }
659
660                 if (io_filesfrom_f_out >= 0) {
661                         if (ff_buf.len) {
662                                 if (FD_ISSET(io_filesfrom_f_out, &w_fds)) {
663                                         int l = write(io_filesfrom_f_out,
664                                                       ff_buf.buf + ff_buf.pos,
665                                                       ff_buf.len);
666                                         if (l > 0) {
667                                                 if (!(ff_buf.len -= l))
668                                                         ff_buf.pos = 0;
669                                                 else
670                                                         ff_buf.pos += l;
671                                         } else if (errno != EINTR) {
672                                                 /* XXX should we complain? */
673                                                 io_filesfrom_f_out = -1;
674                                         }
675                                 }
676                         } else if (io_filesfrom_f_in >= 0) {
677                                 if (FD_ISSET(io_filesfrom_f_in, &r_fds)) {
678 #ifdef ICONV_OPTION
679                                         xbuf *ibuf = filesfrom_convert ? &iconv_buf : &ff_buf;
680 #else
681                                         xbuf *ibuf = &ff_buf;
682 #endif
683                                         int l = read(io_filesfrom_f_in, ibuf->buf, ibuf->size);
684                                         if (l <= 0) {
685                                                 if (l == 0 || errno != EINTR) {
686                                                         /* Send end-of-file marker */
687                                                         memcpy(ff_buf.buf, "\0\0", 2);
688                                                         ff_buf.len = ff_lastchar? 2 : 1;
689                                                         ff_buf.pos = 0;
690                                                         io_filesfrom_f_in = -1;
691                                                 }
692                                         } else {
693 #ifdef ICONV_OPTION
694                                                 if (filesfrom_convert) {
695                                                         iconv_buf.pos = 0;
696                                                         iconv_buf.len = l;
697                                                         iconvbufs(ic_send, &iconv_buf, &ff_buf,
698                                                             ICB_EXPAND_OUT|ICB_INCLUDE_BAD|ICB_INCLUDE_INCOMPLETE);
699                                                         l = ff_buf.len;
700                                                 }
701 #endif
702                                                 if (!eol_nulls) {
703                                                         char *s = ff_buf.buf + l;
704                                                         /* Transform CR and/or LF into '\0' */
705                                                         while (s-- > ff_buf.buf) {
706                                                                 if (*s == '\n' || *s == '\r')
707                                                                         *s = '\0';
708                                                         }
709                                                 }
710                                                 if (!ff_lastchar) {
711                                                         /* Last buf ended with a '\0', so don't
712                                                          * let this buf start with one. */
713                                                         while (l && ff_buf.buf[ff_buf.pos] == '\0')
714                                                                 ff_buf.pos++, l--;
715                                                 }
716                                                 if (!l)
717                                                         ff_buf.pos = 0;
718                                                 else {
719                                                         char *f = ff_buf.buf + ff_buf.pos;
720                                                         char *t = f;
721                                                         char *eob = f + l;
722                                                         /* Eliminate any multi-'\0' runs. */
723                                                         while (f != eob) {
724                                                                 if (!(*t++ = *f++)) {
725                                                                         while (f != eob && !*f)
726                                                                                 f++, l--;
727                                                                 }
728                                                         }
729                                                         ff_lastchar = f[-1];
730                                                 }
731                                                 ff_buf.len = l;
732                                         }
733                                 }
734                         }
735                 }
736
737                 if (!FD_ISSET(fd, &r_fds))
738                         continue;
739
740                 n = read(fd, buf, len);
741
742                 if (n <= 0) {
743                         if (n == 0)
744                                 whine_about_eof(fd); /* Doesn't return. */
745                         if (errno == EINTR || errno == EWOULDBLOCK
746                             || errno == EAGAIN)
747                                 continue;
748
749                         /* Don't write errors on a dead socket. */
750                         if (fd == sock_f_in) {
751                                 io_end_multiplex_out();
752                                 rsyserr(FSOCKERR, errno, "read error");
753                         } else
754                                 rsyserr(FERROR, errno, "read error");
755                         exit_cleanup(RERR_STREAMIO);
756                 }
757
758                 buf += n;
759                 len -= n;
760                 cnt += n;
761
762                 if (fd == sock_f_in && io_timeout)
763                         last_io_in = time(NULL);
764         }
765
766         return cnt;
767 }
768
769 /* Read a line into the "buf" buffer. */
770 int read_line(int fd, char *buf, size_t bufsiz, int flags)
771 {
772         char ch, *s, *eob;
773         int cnt;
774
775 #ifdef ICONV_OPTION
776         if (flags & RL_CONVERT && iconv_buf.size < bufsiz)
777                 realloc_xbuf(&iconv_buf, bufsiz + 1024);
778 #endif
779
780   start:
781 #ifdef ICONV_OPTION
782         s = flags & RL_CONVERT ? iconv_buf.buf : buf;
783 #else
784         s = buf;
785 #endif
786         eob = s + bufsiz - 1;
787         while (1) {
788                 cnt = read(fd, &ch, 1);
789                 if (cnt < 0 && (errno == EWOULDBLOCK
790                   || errno == EINTR || errno == EAGAIN)) {
791                         struct timeval tv;
792                         fd_set r_fds, e_fds;
793                         FD_ZERO(&r_fds);
794                         FD_SET(fd, &r_fds);
795                         FD_ZERO(&e_fds);
796                         FD_SET(fd, &e_fds);
797                         tv.tv_sec = select_timeout;
798                         tv.tv_usec = 0;
799                         if (!select(fd+1, &r_fds, NULL, &e_fds, &tv))
800                                 check_timeout();
801                         /*if (FD_ISSET(fd, &e_fds))
802                                 rprintf(FINFO, "select exception on fd %d\n", fd); */
803                         continue;
804                 }
805                 if (cnt != 1)
806                         break;
807                 if (flags & RL_EOL_NULLS ? ch == '\0' : (ch == '\r' || ch == '\n')) {
808                         /* Skip empty lines if dumping comments. */
809                         if (flags & RL_DUMP_COMMENTS && s == buf)
810                                 continue;
811                         break;
812                 }
813                 if (s < eob)
814                         *s++ = ch;
815         }
816         *s = '\0';
817
818         if (flags & RL_DUMP_COMMENTS && (*buf == '#' || *buf == ';'))
819                 goto start;
820
821 #ifdef ICONV_OPTION
822         if (flags & RL_CONVERT) {
823                 xbuf outbuf;
824                 INIT_XBUF(outbuf, buf, 0, bufsiz);
825                 iconv_buf.pos = 0;
826                 iconv_buf.len = s - iconv_buf.buf;
827                 iconvbufs(ic_recv, &iconv_buf, &outbuf,
828                           ICB_INCLUDE_BAD | ICB_INCLUDE_INCOMPLETE);
829                 outbuf.buf[outbuf.len] = '\0';
830                 return outbuf.len;
831         }
832 #endif
833
834         return s - buf;
835 }
836
837 int read_args(int f_in, char *mod_name, char *buf, size_t bufsiz, int rl_nulls,
838               char ***argv_p, int *argc_p, char **request_p)
839 {
840         int maxargs = MAX_ARGS;
841         int dot_pos = 0;
842         int argc = 0;
843         char **argv, *p;
844         int rl_flags = (rl_nulls ? RL_EOL_NULLS : 0);
845
846 #ifdef ICONV_OPTION
847         rl_flags |= (protect_args && ic_recv != (iconv_t)-1 ? RL_CONVERT : 0);
848 #endif
849
850         if (!(argv = new_array(char *, maxargs)))
851                 out_of_memory("read_args");
852         if (mod_name)
853                 argv[argc++] = "rsyncd";
854
855         while (1) {
856                 if (read_line(f_in, buf, bufsiz, rl_flags) == 0)
857                         break;
858
859                 if (argc == maxargs) {
860                         maxargs += MAX_ARGS;
861                         if (!(argv = realloc_array(argv, char *, maxargs)))
862                                 out_of_memory("read_args");
863                 }
864
865                 if (dot_pos) {
866                         if (request_p) {
867                                 *request_p = strdup(buf);
868                                 request_p = NULL;
869                         }
870                         if (mod_name)
871                                 glob_expand_module(mod_name, buf, &argv, &argc, &maxargs);
872                         else
873                                 glob_expand(buf, &argv, &argc, &maxargs);
874                 } else {
875                         if (!(p = strdup(buf)))
876                                 out_of_memory("read_args");
877                         argv[argc++] = p;
878                         if (*p == '.' && p[1] == '\0')
879                                 dot_pos = argc;
880                 }
881         }
882
883         *argc_p = argc;
884         *argv_p = argv;
885
886         return dot_pos ? dot_pos : argc;
887 }
888
889 int io_start_buffering_out(int f_out)
890 {
891         if (iobuf_out) {
892                 assert(f_out == iobuf_f_out);
893                 return 0;
894         }
895         if (!(iobuf_out = new_array(char, IO_BUFFER_SIZE)))
896                 out_of_memory("io_start_buffering_out");
897         iobuf_out_cnt = 0;
898         iobuf_f_out = f_out;
899         return 1;
900 }
901
902 int io_start_buffering_in(int f_in)
903 {
904         if (iobuf_in) {
905                 assert(f_in == iobuf_f_in);
906                 return 0;
907         }
908         iobuf_in_siz = 2 * IO_BUFFER_SIZE;
909         if (!(iobuf_in = new_array(char, iobuf_in_siz)))
910                 out_of_memory("io_start_buffering_in");
911         iobuf_f_in = f_in;
912         return 1;
913 }
914
915 void io_end_buffering_in(void)
916 {
917         if (!iobuf_in)
918                 return;
919         free(iobuf_in);
920         iobuf_in = NULL;
921         iobuf_in_ndx = 0;
922         iobuf_in_remaining = 0;
923         iobuf_f_in = -1;
924 }
925
926 void io_end_buffering_out(void)
927 {
928         if (!iobuf_out)
929                 return;
930         io_flush(FULL_FLUSH);
931         free(iobuf_out);
932         iobuf_out = NULL;
933         iobuf_f_out = -1;
934 }
935
936 void maybe_flush_socket(int important)
937 {
938         if (iobuf_out && iobuf_out_cnt
939          && (important || time(NULL) - last_io_out >= 5))
940                 io_flush(NORMAL_FLUSH);
941 }
942
943 void maybe_send_keepalive(void)
944 {
945         if (time(NULL) - last_io_out >= allowed_lull) {
946                 if (!iobuf_out || !iobuf_out_cnt) {
947                         if (protocol_version < 29)
948                                 return; /* there's nothing we can do */
949                         if (protocol_version >= 30)
950                                 send_msg(MSG_NOOP, "", 0, 0);
951                         else {
952                                 write_int(sock_f_out, cur_flist->used);
953                                 write_shortint(sock_f_out, ITEM_IS_NEW);
954                         }
955                 }
956                 if (iobuf_out)
957                         io_flush(NORMAL_FLUSH);
958         }
959 }
960
961 void start_flist_forward(int f_in)
962 {
963         assert(iobuf_out != NULL);
964         assert(iobuf_f_out == msg_fd_out);
965         flist_forward_from = f_in;
966 }
967
968 void stop_flist_forward()
969 {
970         flist_forward_from = -1;
971         io_flush(FULL_FLUSH);
972 }
973
974 /**
975  * Continue trying to read len bytes - don't return until len has been
976  * read.
977  **/
978 static void read_loop(int fd, char *buf, size_t len)
979 {
980         while (len) {
981                 int n = read_timeout(fd, buf, len);
982
983                 buf += n;
984                 len -= n;
985         }
986 }
987
988 /**
989  * Read from the file descriptor handling multiplexing - return number
990  * of bytes read.
991  *
992  * Never returns <= 0.
993  */
994 static int readfd_unbuffered(int fd, char *buf, size_t len)
995 {
996         size_t msg_bytes;
997         int tag, cnt = 0;
998         char line[BIGPATHBUFLEN];
999
1000         if (!iobuf_in || fd != iobuf_f_in)
1001                 return read_timeout(fd, buf, len);
1002
1003         if (!io_multiplexing_in && iobuf_in_remaining == 0) {
1004                 iobuf_in_remaining = read_timeout(fd, iobuf_in, iobuf_in_siz);
1005                 iobuf_in_ndx = 0;
1006         }
1007
1008         while (cnt == 0) {
1009                 if (iobuf_in_remaining) {
1010                         len = MIN(len, iobuf_in_remaining);
1011                         memcpy(buf, iobuf_in + iobuf_in_ndx, len);
1012                         iobuf_in_ndx += len;
1013                         iobuf_in_remaining -= len;
1014                         cnt = len;
1015                         break;
1016                 }
1017
1018                 read_loop(fd, line, 4);
1019                 tag = IVAL(line, 0);
1020
1021                 msg_bytes = tag & 0xFFFFFF;
1022                 tag = (tag >> 24) - MPLEX_BASE;
1023
1024                 switch (tag) {
1025                 case MSG_DATA:
1026                         if (msg_bytes > iobuf_in_siz) {
1027                                 if (!(iobuf_in = realloc_array(iobuf_in, char,
1028                                                                msg_bytes)))
1029                                         out_of_memory("readfd_unbuffered");
1030                                 iobuf_in_siz = msg_bytes;
1031                         }
1032                         read_loop(fd, iobuf_in, msg_bytes);
1033                         iobuf_in_remaining = msg_bytes;
1034                         iobuf_in_ndx = 0;
1035                         break;
1036                 case MSG_NOOP:
1037                         if (am_sender)
1038                                 maybe_send_keepalive();
1039                         break;
1040                 case MSG_IO_ERROR:
1041                         if (msg_bytes != 4)
1042                                 goto invalid_msg;
1043                         read_loop(fd, line, msg_bytes);
1044                         io_error |= IVAL(line, 0);
1045                         break;
1046                 case MSG_DELETED:
1047                         if (msg_bytes >= sizeof line)
1048                                 goto overflow;
1049 #ifdef ICONV_OPTION
1050                         if (ic_recv != (iconv_t)-1) {
1051                                 xbuf outbuf, inbuf;
1052                                 char ibuf[512];
1053                                 int add_null = 0;
1054                                 int pos = 0;
1055
1056                                 INIT_CONST_XBUF(outbuf, line);
1057                                 inbuf.buf = ibuf;
1058
1059                                 while (msg_bytes) {
1060                                         inbuf.len = msg_bytes > sizeof ibuf
1061                                                   ? sizeof ibuf : msg_bytes;
1062                                         read_loop(fd, inbuf.buf, inbuf.len);
1063                                         if (!(msg_bytes -= inbuf.len)
1064                                          && !ibuf[inbuf.len-1])
1065                                                 inbuf.len--, add_null = 1;
1066                                         if (iconvbufs(ic_send, &inbuf, &outbuf,
1067                                             ICB_INCLUDE_BAD | ICB_INCLUDE_INCOMPLETE) < 0)
1068                                                 goto overflow;
1069                                         pos = -1;
1070                                 }
1071                                 if (add_null) {
1072                                         if (outbuf.len == outbuf.size)
1073                                                 goto overflow;
1074                                         outbuf.buf[outbuf.len++] = '\0';
1075                                 }
1076                                 msg_bytes = outbuf.len;
1077                         } else
1078 #endif
1079                                 read_loop(fd, line, msg_bytes);
1080                         /* A directory name was sent with the trailing null */
1081                         if (msg_bytes > 0 && !line[msg_bytes-1])
1082                                 log_delete(line, S_IFDIR);
1083                         else {
1084                                 line[msg_bytes] = '\0';
1085                                 log_delete(line, S_IFREG);
1086                         }
1087                         break;
1088                 case MSG_SUCCESS:
1089                         if (msg_bytes != 4) {
1090                           invalid_msg:
1091                                 rprintf(FERROR, "invalid multi-message %d:%ld [%s]\n",
1092                                         tag, (long)msg_bytes, who_am_i());
1093                                 exit_cleanup(RERR_STREAMIO);
1094                         }
1095                         read_loop(fd, line, msg_bytes);
1096                         successful_send(IVAL(line, 0));
1097                         break;
1098                 case MSG_NO_SEND:
1099                         if (msg_bytes != 4)
1100                                 goto invalid_msg;
1101                         read_loop(fd, line, msg_bytes);
1102                         send_msg_int(MSG_NO_SEND, IVAL(line, 0));
1103                         break;
1104                 case MSG_INFO:
1105                 case MSG_ERROR:
1106                         if (msg_bytes >= sizeof line) {
1107                             overflow:
1108                                 rprintf(FERROR,
1109                                         "multiplexing overflow %d:%ld [%s]\n",
1110                                         tag, (long)msg_bytes, who_am_i());
1111                                 exit_cleanup(RERR_STREAMIO);
1112                         }
1113                         read_loop(fd, line, msg_bytes);
1114                         rwrite((enum logcode)tag, line, msg_bytes, 1);
1115                         break;
1116                 default:
1117                         rprintf(FERROR, "unexpected tag %d [%s]\n",
1118                                 tag, who_am_i());
1119                         exit_cleanup(RERR_STREAMIO);
1120                 }
1121         }
1122
1123         if (iobuf_in_remaining == 0)
1124                 io_flush(NORMAL_FLUSH);
1125
1126         return cnt;
1127 }
1128
1129 /* Do a buffered read from fd.  Don't return until all N bytes have
1130  * been read.  If all N can't be read then exit with an error. */
1131 static void readfd(int fd, char *buffer, size_t N)
1132 {
1133         int  cnt;
1134         size_t total = 0;
1135
1136         while (total < N) {
1137                 cnt = readfd_unbuffered(fd, buffer + total, N-total);
1138                 total += cnt;
1139         }
1140
1141         if (fd == write_batch_monitor_in) {
1142                 if ((size_t)write(batch_fd, buffer, total) != total)
1143                         exit_cleanup(RERR_FILEIO);
1144         }
1145
1146         if (fd == flist_forward_from)
1147                 writefd(iobuf_f_out, buffer, total);
1148
1149         if (fd == sock_f_in)
1150                 stats.total_read += total;
1151 }
1152
1153 unsigned short read_shortint(int f)
1154 {
1155         char b[2];
1156         readfd(f, b, 2);
1157         return (UVAL(b, 1) << 8) + UVAL(b, 0);
1158 }
1159
1160 int32 read_int(int f)
1161 {
1162         char b[4];
1163         int32 num;
1164
1165         readfd(f, b, 4);
1166         num = IVAL(b, 0);
1167 #if SIZEOF_INT32 > 4
1168         if (num & (int32)0x80000000)
1169                 num |= ~(int32)0xffffffff;
1170 #endif
1171         return num;
1172 }
1173
1174 int32 read_varint(int f)
1175 {
1176         union {
1177             char b[5];
1178             int32 x;
1179         } u;
1180         uchar ch;
1181         int extra;
1182
1183         u.x = 0;
1184         readfd(f, (char*)&ch, 1);
1185         extra = int_byte_extra[ch / 4];
1186         if (extra) {
1187                 uchar bit = ((uchar)1<<(8-extra));
1188                 if (extra >= (int)sizeof u.b) {
1189                         rprintf(FERROR, "Overflow in read_varint()\n");
1190                         exit_cleanup(RERR_STREAMIO);
1191                 }
1192                 readfd(f, u.b, extra);
1193                 u.b[extra] = ch & (bit-1);
1194         } else
1195                 u.b[0] = ch;
1196 #if CAREFUL_ALIGNMENT
1197         u.x = IVAL(u.b,0);
1198 #endif
1199 #if SIZEOF_INT32 > 4
1200         if (u.x & (int32)0x80000000)
1201                 u.x |= ~(int32)0xffffffff;
1202 #endif
1203         return u.x;
1204 }
1205
1206 int64 read_varlong(int f, uchar min_bytes)
1207 {
1208         union {
1209             char b[9];
1210             int64 x;
1211         } u;
1212         char b2[8];
1213         int extra;
1214
1215 #if SIZEOF_INT64 < 8
1216         memset(u.b, 0, 8);
1217 #else
1218         u.x = 0;
1219 #endif
1220         readfd(f, b2, min_bytes);
1221         memcpy(u.b, b2+1, min_bytes-1);
1222         extra = int_byte_extra[CVAL(b2, 0) / 4];
1223         if (extra) {
1224                 uchar bit = ((uchar)1<<(8-extra));
1225                 if (min_bytes + extra > (int)sizeof u.b) {
1226                         rprintf(FERROR, "Overflow in read_varlong()\n");
1227                         exit_cleanup(RERR_STREAMIO);
1228                 }
1229                 readfd(f, u.b + min_bytes - 1, extra);
1230                 u.b[min_bytes + extra - 1] = CVAL(b2, 0) & (bit-1);
1231 #if SIZEOF_INT64 < 8
1232                 if (min_bytes + extra > 5 || u.b[4] || CVAL(u.b,3) & 0x80) {
1233                         rprintf(FERROR, "Integer overflow: attempted 64-bit offset\n");
1234                         exit_cleanup(RERR_UNSUPPORTED);
1235                 }
1236 #endif
1237         } else
1238                 u.b[min_bytes + extra - 1] = CVAL(b2, 0);
1239 #if SIZEOF_INT64 < 8
1240         u.x = IVAL(u.b,0);
1241 #elif CAREFUL_ALIGNMENT
1242         u.x = IVAL(u.b,0) | (((int64)IVAL(u.b,4))<<32);
1243 #endif
1244         return u.x;
1245 }
1246
1247 int64 read_longint(int f)
1248 {
1249 #if SIZEOF_INT64 >= 8
1250         char b[9];
1251 #endif
1252         int32 num = read_int(f);
1253
1254         if (num != (int32)0xffffffff)
1255                 return num;
1256
1257 #if SIZEOF_INT64 < 8
1258         rprintf(FERROR, "Integer overflow: attempted 64-bit offset\n");
1259         exit_cleanup(RERR_UNSUPPORTED);
1260 #else
1261         readfd(f, b, 8);
1262         return IVAL(b,0) | (((int64)IVAL(b,4))<<32);
1263 #endif
1264 }
1265
1266 void read_buf(int f, char *buf, size_t len)
1267 {
1268         readfd(f,buf,len);
1269 }
1270
1271 void read_sbuf(int f, char *buf, size_t len)
1272 {
1273         readfd(f, buf, len);
1274         buf[len] = '\0';
1275 }
1276
1277 uchar read_byte(int f)
1278 {
1279         uchar c;
1280         readfd(f, (char *)&c, 1);
1281         return c;
1282 }
1283
1284 int read_vstring(int f, char *buf, int bufsize)
1285 {
1286         int len = read_byte(f);
1287
1288         if (len & 0x80)
1289                 len = (len & ~0x80) * 0x100 + read_byte(f);
1290
1291         if (len >= bufsize) {
1292                 rprintf(FERROR, "over-long vstring received (%d > %d)\n",
1293                         len, bufsize - 1);
1294                 return -1;
1295         }
1296
1297         if (len)
1298                 readfd(f, buf, len);
1299         buf[len] = '\0';
1300         return len;
1301 }
1302
1303 /* Populate a sum_struct with values from the socket.  This is
1304  * called by both the sender and the receiver. */
1305 void read_sum_head(int f, struct sum_struct *sum)
1306 {
1307         sum->count = read_int(f);
1308         if (sum->count < 0) {
1309                 rprintf(FERROR, "Invalid checksum count %ld [%s]\n",
1310                         (long)sum->count, who_am_i());
1311                 exit_cleanup(RERR_PROTOCOL);
1312         }
1313         sum->blength = read_int(f);
1314         if (sum->blength < 0 || sum->blength > MAX_BLOCK_SIZE) {
1315                 rprintf(FERROR, "Invalid block length %ld [%s]\n",
1316                         (long)sum->blength, who_am_i());
1317                 exit_cleanup(RERR_PROTOCOL);
1318         }
1319         sum->s2length = protocol_version < 27 ? csum_length : (int)read_int(f);
1320         if (sum->s2length < 0 || sum->s2length > MAX_DIGEST_LEN) {
1321                 rprintf(FERROR, "Invalid checksum length %d [%s]\n",
1322                         sum->s2length, who_am_i());
1323                 exit_cleanup(RERR_PROTOCOL);
1324         }
1325         sum->remainder = read_int(f);
1326         if (sum->remainder < 0 || sum->remainder > sum->blength) {
1327                 rprintf(FERROR, "Invalid remainder length %ld [%s]\n",
1328                         (long)sum->remainder, who_am_i());
1329                 exit_cleanup(RERR_PROTOCOL);
1330         }
1331 }
1332
1333 /* Send the values from a sum_struct over the socket.  Set sum to
1334  * NULL if there are no checksums to send.  This is called by both
1335  * the generator and the sender. */
1336 void write_sum_head(int f, struct sum_struct *sum)
1337 {
1338         static struct sum_struct null_sum;
1339
1340         if (sum == NULL)
1341                 sum = &null_sum;
1342
1343         write_int(f, sum->count);
1344         write_int(f, sum->blength);
1345         if (protocol_version >= 27)
1346                 write_int(f, sum->s2length);
1347         write_int(f, sum->remainder);
1348 }
1349
1350 /**
1351  * Sleep after writing to limit I/O bandwidth usage.
1352  *
1353  * @todo Rather than sleeping after each write, it might be better to
1354  * use some kind of averaging.  The current algorithm seems to always
1355  * use a bit less bandwidth than specified, because it doesn't make up
1356  * for slow periods.  But arguably this is a feature.  In addition, we
1357  * ought to take the time used to write the data into account.
1358  *
1359  * During some phases of big transfers (file FOO is uptodate) this is
1360  * called with a small bytes_written every time.  As the kernel has to
1361  * round small waits up to guarantee that we actually wait at least the
1362  * requested number of microseconds, this can become grossly inaccurate.
1363  * We therefore keep track of the bytes we've written over time and only
1364  * sleep when the accumulated delay is at least 1 tenth of a second.
1365  **/
1366 static void sleep_for_bwlimit(int bytes_written)
1367 {
1368         static struct timeval prior_tv;
1369         static long total_written = 0;
1370         struct timeval tv, start_tv;
1371         long elapsed_usec, sleep_usec;
1372
1373 #define ONE_SEC 1000000L /* # of microseconds in a second */
1374
1375         if (!bwlimit_writemax)
1376                 return;
1377
1378         total_written += bytes_written;
1379
1380         gettimeofday(&start_tv, NULL);
1381         if (prior_tv.tv_sec) {
1382                 elapsed_usec = (start_tv.tv_sec - prior_tv.tv_sec) * ONE_SEC
1383                              + (start_tv.tv_usec - prior_tv.tv_usec);
1384                 total_written -= elapsed_usec * bwlimit / (ONE_SEC/1024);
1385                 if (total_written < 0)
1386                         total_written = 0;
1387         }
1388
1389         sleep_usec = total_written * (ONE_SEC/1024) / bwlimit;
1390         if (sleep_usec < ONE_SEC / 10) {
1391                 prior_tv = start_tv;
1392                 return;
1393         }
1394
1395         tv.tv_sec  = sleep_usec / ONE_SEC;
1396         tv.tv_usec = sleep_usec % ONE_SEC;
1397         select(0, NULL, NULL, NULL, &tv);
1398
1399         gettimeofday(&prior_tv, NULL);
1400         elapsed_usec = (prior_tv.tv_sec - start_tv.tv_sec) * ONE_SEC
1401                      + (prior_tv.tv_usec - start_tv.tv_usec);
1402         total_written = (sleep_usec - elapsed_usec) * bwlimit / (ONE_SEC/1024);
1403 }
1404
1405 /* Write len bytes to the file descriptor fd, looping as necessary to get
1406  * the job done and also (in certain circumstances) reading any data on
1407  * msg_fd_in to avoid deadlock.
1408  *
1409  * This function underlies the multiplexing system.  The body of the
1410  * application never calls this function directly. */
1411 static void writefd_unbuffered(int fd, const char *buf, size_t len)
1412 {
1413         size_t n, total = 0;
1414         fd_set w_fds, r_fds, e_fds;
1415         int maxfd, count, cnt, using_r_fds;
1416         int defer_inc = 0;
1417         struct timeval tv;
1418
1419         if (no_flush++)
1420                 defer_forwarding_messages++, defer_inc++;
1421
1422         while (total < len) {
1423                 FD_ZERO(&w_fds);
1424                 FD_SET(fd, &w_fds);
1425                 FD_ZERO(&e_fds);
1426                 FD_SET(fd, &e_fds);
1427                 maxfd = fd;
1428
1429                 if (msg_fd_in >= 0) {
1430                         FD_ZERO(&r_fds);
1431                         FD_SET(msg_fd_in, &r_fds);
1432                         if (msg_fd_in > maxfd)
1433                                 maxfd = msg_fd_in;
1434                         using_r_fds = 1;
1435                 } else
1436                         using_r_fds = 0;
1437
1438                 tv.tv_sec = select_timeout;
1439                 tv.tv_usec = 0;
1440
1441                 errno = 0;
1442                 count = select(maxfd + 1, using_r_fds ? &r_fds : NULL,
1443                                &w_fds, &e_fds, &tv);
1444
1445                 if (count <= 0) {
1446                         if (count < 0 && errno == EBADF)
1447                                 exit_cleanup(RERR_SOCKETIO);
1448                         check_timeout();
1449                         continue;
1450                 }
1451
1452                 /*if (FD_ISSET(fd, &e_fds))
1453                         rprintf(FINFO, "select exception on fd %d\n", fd); */
1454
1455                 if (using_r_fds && FD_ISSET(msg_fd_in, &r_fds))
1456                         read_msg_fd();
1457
1458                 if (!FD_ISSET(fd, &w_fds))
1459                         continue;
1460
1461                 n = len - total;
1462                 if (bwlimit_writemax && n > bwlimit_writemax)
1463                         n = bwlimit_writemax;
1464                 cnt = write(fd, buf + total, n);
1465
1466                 if (cnt <= 0) {
1467                         if (cnt < 0) {
1468                                 if (errno == EINTR)
1469                                         continue;
1470                                 if (errno == EWOULDBLOCK || errno == EAGAIN) {
1471                                         msleep(1);
1472                                         continue;
1473                                 }
1474                         }
1475
1476                         /* Don't try to write errors back across the stream. */
1477                         if (fd == sock_f_out)
1478                                 io_end_multiplex_out();
1479                         /* Don't try to write errors down a failing msg pipe. */
1480                         if (am_server && fd == msg_fd_out)
1481                                 exit_cleanup(RERR_STREAMIO);
1482                         rsyserr(FERROR, errno,
1483                                 "writefd_unbuffered failed to write %ld bytes [%s]",
1484                                 (long)len, who_am_i());
1485                         /* If the other side is sending us error messages, try
1486                          * to grab any messages they sent before they died. */
1487                         while (!am_server && fd == sock_f_out && io_multiplexing_in) {
1488                                 char buf[1024];
1489                                 set_io_timeout(30);
1490                                 ignore_timeout = 0;
1491                                 readfd_unbuffered(sock_f_in, buf, sizeof buf);
1492                         }
1493                         exit_cleanup(RERR_STREAMIO);
1494                 }
1495
1496                 total += cnt;
1497                 defer_forwarding_messages++, defer_inc++;
1498
1499                 if (fd == sock_f_out) {
1500                         if (io_timeout || am_generator)
1501                                 last_io_out = time(NULL);
1502                         sleep_for_bwlimit(cnt);
1503                 }
1504         }
1505
1506         no_flush--;
1507         if (!(defer_forwarding_messages -= defer_inc))
1508                 msg_flush();
1509 }
1510
1511 void io_flush(int flush_it_all)
1512 {
1513         if (!iobuf_out_cnt || no_flush)
1514                 return;
1515
1516         if (io_multiplexing_out)
1517                 mplex_write(sock_f_out, MSG_DATA, iobuf_out, iobuf_out_cnt, 0);
1518         else
1519                 writefd_unbuffered(iobuf_f_out, iobuf_out, iobuf_out_cnt);
1520         iobuf_out_cnt = 0;
1521
1522         if (flush_it_all && !defer_forwarding_messages)
1523                 msg_flush();
1524 }
1525
1526 static void writefd(int fd, const char *buf, size_t len)
1527 {
1528         if (fd == sock_f_out)
1529                 stats.total_written += len;
1530
1531         if (fd == write_batch_monitor_out) {
1532                 if ((size_t)write(batch_fd, buf, len) != len)
1533                         exit_cleanup(RERR_FILEIO);
1534         }
1535
1536         if (!iobuf_out || fd != iobuf_f_out) {
1537                 writefd_unbuffered(fd, buf, len);
1538                 return;
1539         }
1540
1541         while (len) {
1542                 int n = MIN((int)len, IO_BUFFER_SIZE - iobuf_out_cnt);
1543                 if (n > 0) {
1544                         memcpy(iobuf_out+iobuf_out_cnt, buf, n);
1545                         buf += n;
1546                         len -= n;
1547                         iobuf_out_cnt += n;
1548                 }
1549
1550                 if (iobuf_out_cnt == IO_BUFFER_SIZE)
1551                         io_flush(NORMAL_FLUSH);
1552         }
1553 }
1554
1555 void write_shortint(int f, unsigned short x)
1556 {
1557         char b[2];
1558         b[0] = (char)x;
1559         b[1] = (char)(x >> 8);
1560         writefd(f, b, 2);
1561 }
1562
1563 void write_int(int f, int32 x)
1564 {
1565         char b[4];
1566         SIVAL(b, 0, x);
1567         writefd(f, b, 4);
1568 }
1569
1570 void write_varint(int f, int32 x)
1571 {
1572         char b[5];
1573         uchar bit;
1574         int cnt = 4;
1575
1576         SIVAL(b, 1, x);
1577
1578         while (cnt > 1 && b[cnt] == 0)
1579                 cnt--;
1580         bit = ((uchar)1<<(7-cnt+1));
1581         if (CVAL(b, cnt) >= bit) {
1582                 cnt++;
1583                 *b = ~(bit-1);
1584         } else if (cnt > 1)
1585                 *b = b[cnt] | ~(bit*2-1);
1586         else
1587                 *b = b[cnt];
1588
1589         writefd(f, b, cnt);
1590 }
1591
1592 void write_varlong(int f, int64 x, uchar min_bytes)
1593 {
1594         char b[9];
1595         uchar bit;
1596         int cnt = 8;
1597
1598         SIVAL(b, 1, x);
1599 #if SIZEOF_INT64 >= 8
1600         SIVAL(b, 5, x >> 32);
1601 #else
1602         if (x <= 0x7FFFFFFF && x >= 0)
1603                 memset(b + 5, 0, 4);
1604         else {
1605                 rprintf(FERROR, "Integer overflow: attempted 64-bit offset\n");
1606                 exit_cleanup(RERR_UNSUPPORTED);
1607         }
1608 #endif
1609
1610         while (cnt > min_bytes && b[cnt] == 0)
1611                 cnt--;
1612         bit = ((uchar)1<<(7-cnt+min_bytes));
1613         if (CVAL(b, cnt) >= bit) {
1614                 cnt++;
1615                 *b = ~(bit-1);
1616         } else if (cnt > min_bytes)
1617                 *b = b[cnt] | ~(bit*2-1);
1618         else
1619                 *b = b[cnt];
1620
1621         writefd(f, b, cnt);
1622 }
1623
1624 /*
1625  * Note: int64 may actually be a 32-bit type if ./configure couldn't find any
1626  * 64-bit types on this platform.
1627  */
1628 void write_longint(int f, int64 x)
1629 {
1630         char b[12], * const s = b+4;
1631
1632         SIVAL(s, 0, x);
1633         if (x <= 0x7FFFFFFF && x >= 0) {
1634                 writefd(f, s, 4);
1635                 return;
1636         }
1637
1638 #if SIZEOF_INT64 < 8
1639         rprintf(FERROR, "Integer overflow: attempted 64-bit offset\n");
1640         exit_cleanup(RERR_UNSUPPORTED);
1641 #else
1642         memset(b, 0xFF, 4);
1643         SIVAL(s, 4, x >> 32);
1644         writefd(f, b, 12);
1645 #endif
1646 }
1647
1648 void write_buf(int f, const char *buf, size_t len)
1649 {
1650         writefd(f,buf,len);
1651 }
1652
1653 /** Write a string to the connection */
1654 void write_sbuf(int f, const char *buf)
1655 {
1656         writefd(f, buf, strlen(buf));
1657 }
1658
1659 void write_byte(int f, uchar c)
1660 {
1661         writefd(f, (char *)&c, 1);
1662 }
1663
1664 void write_vstring(int f, const char *str, int len)
1665 {
1666         uchar lenbuf[3], *lb = lenbuf;
1667
1668         if (len > 0x7F) {
1669                 if (len > 0x7FFF) {
1670                         rprintf(FERROR,
1671                                 "attempting to send over-long vstring (%d > %d)\n",
1672                                 len, 0x7FFF);
1673                         exit_cleanup(RERR_PROTOCOL);
1674                 }
1675                 *lb++ = len / 0x100 + 0x80;
1676         }
1677         *lb = len;
1678
1679         writefd(f, (char*)lenbuf, lb - lenbuf + 1);
1680         if (len)
1681                 writefd(f, str, len);
1682 }
1683
1684 /* Send a file-list index using a byte-reduction method. */
1685 void write_ndx(int f, int32 ndx)
1686 {
1687         static int32 prev_positive = -1, prev_negative = 1;
1688         int32 diff, cnt = 0;
1689         char b[6];
1690
1691         if (protocol_version < 30 || read_batch) {
1692                 write_int(f, ndx);
1693                 return;
1694         }
1695
1696         /* Send NDX_DONE as a single-byte 0 with no side effects.  Send
1697          * negative nums as a positive after sending a leading 0xFF. */
1698         if (ndx >= 0) {
1699                 diff = ndx - prev_positive;
1700                 prev_positive = ndx;
1701         } else if (ndx == NDX_DONE) {
1702                 *b = 0;
1703                 writefd(f, b, 1);
1704                 return;
1705         } else {
1706                 b[cnt++] = (char)0xFF;
1707                 ndx = -ndx;
1708                 diff = ndx - prev_negative;
1709                 prev_negative = ndx;
1710         }
1711
1712         /* A diff of 1 - 253 is sent as a one-byte diff; a diff of 254 - 32767
1713          * or 0 is sent as a 0xFE + a two-byte diff; otherwise we send 0xFE
1714          * & all 4 bytes of the (non-negative) num with the high-bit set. */
1715         if (diff < 0xFE && diff > 0)
1716                 b[cnt++] = (char)diff;
1717         else if (diff < 0 || diff > 0x7FFF) {
1718                 b[cnt++] = (char)0xFE;
1719                 b[cnt++] = (char)((ndx >> 24) | 0x80);
1720                 b[cnt++] = (char)ndx;
1721                 b[cnt++] = (char)(ndx >> 8);
1722                 b[cnt++] = (char)(ndx >> 16);
1723         } else {
1724                 b[cnt++] = (char)0xFE;
1725                 b[cnt++] = (char)(diff >> 8);
1726                 b[cnt++] = (char)diff;
1727         }
1728         writefd(f, b, cnt);
1729 }
1730
1731 /* Receive a file-list index using a byte-reduction method. */
1732 int32 read_ndx(int f)
1733 {
1734         static int32 prev_positive = -1, prev_negative = 1;
1735         int32 *prev_ptr, num;
1736         char b[4];
1737
1738         if (protocol_version < 30)
1739                 return read_int(f);
1740
1741         readfd(f, b, 1);
1742         if (CVAL(b, 0) == 0xFF) {
1743                 readfd(f, b, 1);
1744                 prev_ptr = &prev_negative;
1745         } else if (CVAL(b, 0) == 0)
1746                 return NDX_DONE;
1747         else
1748                 prev_ptr = &prev_positive;
1749         if (CVAL(b, 0) == 0xFE) {
1750                 readfd(f, b, 2);
1751                 if (CVAL(b, 0) & 0x80) {
1752                         b[3] = CVAL(b, 0) & ~0x80;
1753                         b[0] = b[1];
1754                         readfd(f, b+1, 2);
1755                         num = IVAL(b, 0);
1756                 } else
1757                         num = (UVAL(b,0)<<8) + UVAL(b,1) + *prev_ptr;
1758         } else
1759                 num = UVAL(b, 0) + *prev_ptr;
1760         *prev_ptr = num;
1761         if (prev_ptr == &prev_negative)
1762                 num = -num;
1763         return num;
1764 }
1765
1766 /* Read a line of up to bufsiz-1 characters into buf.  Strips
1767  * the (required) trailing newline and all carriage returns.
1768  * Returns 1 for success; 0 for I/O error or truncation. */
1769 int read_line_old(int f, char *buf, size_t bufsiz)
1770 {
1771         bufsiz--; /* leave room for the null */
1772         while (bufsiz > 0) {
1773                 buf[0] = 0;
1774                 read_buf(f, buf, 1);
1775                 if (buf[0] == 0)
1776                         return 0;
1777                 if (buf[0] == '\n')
1778                         break;
1779                 if (buf[0] != '\r') {
1780                         buf++;
1781                         bufsiz--;
1782                 }
1783         }
1784         *buf = '\0';
1785         return bufsiz > 0;
1786 }
1787
1788 void io_printf(int fd, const char *format, ...)
1789 {
1790         va_list ap;
1791         char buf[BIGPATHBUFLEN];
1792         int len;
1793
1794         va_start(ap, format);
1795         len = vsnprintf(buf, sizeof buf, format, ap);
1796         va_end(ap);
1797
1798         if (len < 0)
1799                 exit_cleanup(RERR_STREAMIO);
1800
1801         if (len > (int)sizeof buf) {
1802                 rprintf(FERROR, "io_printf() was too long for the buffer.\n");
1803                 exit_cleanup(RERR_STREAMIO);
1804         }
1805
1806         write_sbuf(fd, buf);
1807 }
1808
1809 /** Setup for multiplexing a MSG_* stream with the data stream. */
1810 void io_start_multiplex_out(void)
1811 {
1812         io_flush(NORMAL_FLUSH);
1813         io_start_buffering_out(sock_f_out);
1814         io_multiplexing_out = 1;
1815 }
1816
1817 /** Setup for multiplexing a MSG_* stream with the data stream. */
1818 void io_start_multiplex_in(void)
1819 {
1820         io_flush(NORMAL_FLUSH);
1821         io_start_buffering_in(sock_f_in);
1822         io_multiplexing_in = 1;
1823 }
1824
1825 /** Write an message to the multiplexed data stream. */
1826 int io_multiplex_write(enum msgcode code, const char *buf, size_t len, int convert)
1827 {
1828         if (!io_multiplexing_out)
1829                 return 0;
1830         io_flush(NORMAL_FLUSH);
1831         stats.total_written += (len+4);
1832         mplex_write(sock_f_out, code, buf, len, convert);
1833         return 1;
1834 }
1835
1836 void io_end_multiplex_in(void)
1837 {
1838         io_multiplexing_in = 0;
1839         io_end_buffering_in();
1840 }
1841
1842 /** Stop output multiplexing. */
1843 void io_end_multiplex_out(void)
1844 {
1845         io_multiplexing_out = 0;
1846         io_end_buffering_out();
1847 }
1848
1849 void start_write_batch(int fd)
1850 {
1851         /* Some communication has already taken place, but we don't
1852          * enable batch writing until here so that we can write a
1853          * canonical record of the communication even though the
1854          * actual communication so far depends on whether a daemon
1855          * is involved. */
1856         write_int(batch_fd, protocol_version);
1857         write_int(batch_fd, checksum_seed);
1858
1859         if (am_sender)
1860                 write_batch_monitor_out = fd;
1861         else
1862                 write_batch_monitor_in = fd;
1863 }
1864
1865 void stop_write_batch(void)
1866 {
1867         write_batch_monitor_out = -1;
1868         write_batch_monitor_in = -1;
1869 }