comparison contrib/hgsh/hgsh.c @ 2602:9cbeef33eaa3

contrib/hgsh: make to work with remote clone over ssh.

2601:00fc88b0b256

    execv(hg_shell, nargv);
    perror(hg_shell);
    exit(EX_OSFILE);
}

/*
 * paranoid wrapper, runs hg executable in server mode.
 */
static void serve_data(int argc, char **argv)
{
    char *hg_root = HG_ROOT;
    char *repo, *abspath;
    char *nargv[6];
    struct stat st;
    size_t repolen;
    int i;

    if (strcmp(argv[1], "-c") != 0) {
        goto badargs;
    }

    if (sscanf(argv[2], "hg -R %as serve --stdio", &repo) != 1) {
        goto badargs;
    }

    repolen = repo ? strlen(repo) : 0;

    if (repolen == 0) {
        goto badargs;
    }

    if (hg_root) {
        if (asprintf(&abspath, "%s/%s/.hg/data", hg_root, repo) == -1) {
            goto badargs;
        }

        /*
         * attempt to stop break out from inside the repository tree. could
         * do something more clever here, because e.g. we could traverse a
         * symlink that looks safe, but really breaks us out of tree.
         */

        if (strstr(abspath, "/../") != NULL) {
            goto badargs;
        }

        /* verify that we really are looking at valid repo. */

        if (stat(abspath, &st) == -1) {
            perror(repo);
            exit(EX_DATAERR);
        }

        if (chdir(hg_root) == -1) {
            perror(hg_root);
            exit(EX_SOFTWARE);
        }
    }

    i = 0;
    nargv[i++] = HG;
    nargv[i++] = "-R";
    nargv[i++] = repo;
    nargv[i++] = "serve";
    nargv[i++] = "--stdio";
    nargv[i] = NULL;

    if (debug) {
        print_cmdline(i, nargv);
    }

2602:9cbeef33eaa3

    execv(hg_shell, nargv);
    perror(hg_shell);
    exit(EX_OSFILE);
}

enum cmdline {
    hg_init,
    hg_serve,
};

    
/*
 * paranoid wrapper, runs hg executable in server mode.
 */
static void serve_data(int argc, char **argv)
{
    char *hg_root = HG_ROOT;
    char *repo, *repo_root;
    enum cmdline cmd;
    char *nargv[6];
    struct stat st;
    size_t repolen;
    int i;

    if (strcmp(argv[1], "-c") != 0) {
        goto badargs;
    }

    if (sscanf(argv[2], "hg init %as", &repo) == 1) {
	cmd = hg_init;
    }
    else if (sscanf(argv[2], "hg -R %as serve --stdio", &repo) == 1) {
	cmd = hg_serve;
    } else {
        goto badargs;
    }

    repolen = repo ? strlen(repo) : 0;

    if (repolen == 0) {
        goto badargs;
    }

    if (hg_root) {
        if (asprintf(&repo_root, "%s/%s/", hg_root, repo) == -1) {
            goto badargs;
        }

        /*
         * attempt to stop break out from inside the repository tree. could
         * do something more clever here, because e.g. we could traverse a
         * symlink that looks safe, but really breaks us out of tree.
         */

        if (strstr(repo_root, "/../") != NULL) {
            goto badargs;
        }

	/* only hg init expects no repo. */

	if (cmd != hg_init) {
	    char *abs_path;
	    
	    if (asprintf(&abs_path, "%s.hg/data", repo_root) == -1) {
		goto badargs;
	    }

	    /* verify that we really are looking at valid repo. */

	    if (stat(abs_path, &st) == -1) {
		perror(repo);
		exit(EX_DATAERR);
	    }
	}

        if (chdir(hg_root) == -1) {
            perror(hg_root);
            exit(EX_SOFTWARE);
        }
    }

    i = 0;

    switch (cmd) {
    case hg_serve:
	nargv[i++] = HG;
	nargv[i++] = "-R";
	nargv[i++] = repo;
	nargv[i++] = "serve";
	nargv[i++] = "--stdio";
	break;
    case hg_init:
	nargv[i++] = HG;
	nargv[i++] = "init";
	nargv[i++] = repo;
	break;
    }
    
    nargv[i] = NULL;

    if (debug) {
        print_cmdline(i, nargv);
    }