/* * Routines that are exclusive to the generator process. * * Copyright (C) 1996-2000 Andrew Tridgell * Copyright (C) 1996 Paul Mackerras * Copyright (C) 2002 Martin Pool * Copyright (C) 2003-2023 Wayne Davison * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License along * with this program; if not, visit the http://fsf.org website. */ #include "rsync.h" #include "inums.h" #include "ifuncs.h" extern int dry_run; extern int do_xfers; extern int stdout_format_has_i; extern int logfile_format_has_i; extern int am_root; extern int operator_path_resolve; extern int am_server; extern int am_daemon; extern int inc_recurse; extern int relative_paths; extern int implied_dirs; extern int keep_dirlinks; extern int write_devices; extern int preserve_acls; extern int preserve_xattrs; extern int preserve_links; extern int preserve_devices; extern int preserve_specials; extern int drop_devices; extern int preserve_hard_links; extern int preserve_executability; extern int preserve_perms; extern int preserve_mtimes; extern int omit_dir_times; extern int omit_link_times; extern int delete_mode; extern int delete_before; extern int delete_during; extern int delete_after; extern int missing_args; extern int msgdone_cnt; extern int ignore_errors; extern int remove_source_files; extern int delay_updates; extern int delay_symlinks; extern int update_only; extern int human_readable; extern int ignore_existing; extern int ignore_non_existing; extern int want_xattr_optim; extern int modify_window; extern int inplace; extern int append_mode; extern int make_backups; extern int csum_length; extern int xfer_sum_len; extern int ignore_times; extern int size_only; extern OFF_T max_size; extern OFF_T min_size; extern int io_error; extern int flist_eof; extern int allowed_lull; extern int sock_f_out; extern int protocol_version; extern int file_total; extern int fuzzy_basis; extern int always_checksum; extern int flist_csum_len; extern char *partial_dir; extern int alt_dest_type; extern int whole_file; extern int list_only; extern int read_batch; extern int write_batch; extern int safe_symlinks; extern int32 block_size; extern int unsort_ndx; extern int max_delete; extern int force_delete; extern int one_file_system; extern int skipped_deletes; extern dev_t filesystem_dev; extern mode_t orig_umask; extern uid_t our_uid; extern char *tmpdir; extern char *basis_dir[MAX_BASIS_DIRS+1]; extern struct file_list *cur_flist, *first_flist, *dir_flist; extern filter_rule_list filter_list, daemon_filter_list; int maybe_ATTRS_REPORT = 0; int maybe_ATTRS_ACCURATE_TIME = 0; static dev_t dev_zero; static int deldelay_size = 0, deldelay_cnt = 0; static char *deldelay_buf = NULL; static int deldelay_fd = -1; static int loopchk_limit; static int dir_tweaking; static int symlink_timeset_failed_flags; static int need_retouch_dir_times; static int need_retouch_dir_perms; static const char *solo_file = NULL; /* With --delay-symlinks, new and changed symlinks are deferred here and created * only after the receiver has put every file into place (including any * --delay-updates renames). Each entry keeps what recv_generator() needs to * itemize and log the link once it has been created. */ struct deferred_symlink { struct file_struct *file; int ndx; char *fname; int itemizing; enum logcode code; }; static int defer_symlinks; static item_list deferred_symlinks = EMPTY_ITEM_LIST; #ifdef SUPPORT_LINKS static void defer_symlink(struct file_struct *file, int ndx, const char *fname, int itemizing, enum logcode code) { struct deferred_symlink *ds = EXPAND_ITEM_LIST(&deferred_symlinks, struct deferred_symlink, 100); ds->file = file; ds->ndx = ndx; if (!(ds->fname = strdup(fname))) out_of_memory("defer_symlink"); ds->itemizing = itemizing; ds->code = code; } #endif /* Forward declarations. */ #ifdef SUPPORT_HARD_LINKS static void handle_skipped_hlink(struct file_struct *file, int itemizing, enum logcode code, int f_out); #endif /* Deferred symlinks are created and itemized in the delay-updates phase, so * that phase must not be ended early either, and the deletion stats must wait * for any directory that a deferred symlink replaces. */ #define EARLY_DELAY_DONE_MSG() (!delay_updates && !defer_symlinks) #define EARLY_DELETE_DONE_MSG() \ (!(delete_during == 2 || delete_after || defer_symlinks)) static int start_delete_delay_temp(void) { char fnametmp[MAXPATHLEN]; int save_dry_run = dry_run; dry_run = 0; if (!get_tmpname(fnametmp, "deldelay", False) || (deldelay_fd = do_mkstemp(fnametmp, 0600)) < 0) { rprintf(FINFO, "NOTE: Unable to create delete-delay temp file%s.\n", inc_recurse ? "" : " -- switching to --delete-after"); delete_during = 0; delete_after = !inc_recurse; dry_run = save_dry_run; return 0; } unlink(fnametmp); dry_run = save_dry_run; return 1; } static int flush_delete_delay(void) { if (deldelay_fd < 0 && !start_delete_delay_temp()) return 0; if (write(deldelay_fd, deldelay_buf, deldelay_cnt) != deldelay_cnt) { rsyserr(FERROR, errno, "flush of delete-delay buffer"); delete_during = 0; delete_after = !inc_recurse; close(deldelay_fd); return 0; } deldelay_cnt = 0; return 1; } static int remember_delete(struct file_struct *file, const char *fname, int flags) { int len; if (deldelay_cnt == deldelay_size && !flush_delete_delay()) return 0; if (flags & DEL_NO_UID_WRITE) deldelay_buf[deldelay_cnt++] = '!'; while (1) { len = snprintf(deldelay_buf + deldelay_cnt, deldelay_size - deldelay_cnt, "%x %s%c", (int)file->mode, fname, '\0'); if ((deldelay_cnt += len) <= deldelay_size) break; deldelay_cnt -= len; if (!flush_delete_delay()) return 0; } return 1; } static int read_delay_line(char *buf, int *flags_p) { static int read_pos = 0; unsigned int mode; int j, len; char *bp, *past_space; while (1) { for (j = read_pos; j < deldelay_cnt && deldelay_buf[j]; j++) {} if (j < deldelay_cnt) break; if (deldelay_fd < 0) { if (j > read_pos) goto invalid_data; return -1; } deldelay_cnt -= read_pos; if (deldelay_cnt == deldelay_size) goto invalid_data; if (deldelay_cnt && read_pos) { memmove(deldelay_buf, deldelay_buf + read_pos, deldelay_cnt); } len = read(deldelay_fd, deldelay_buf + deldelay_cnt, deldelay_size - deldelay_cnt); if (len == 0) { if (deldelay_cnt) { rprintf(FERROR, "ERROR: unexpected EOF in delete-delay file.\n"); } return -1; } if (len < 0) { rsyserr(FERROR, errno, "reading delete-delay file"); return -1; } deldelay_cnt += len; read_pos = 0; } bp = deldelay_buf + read_pos; if (*bp == '!') { bp++; *flags_p = DEL_NO_UID_WRITE; } else *flags_p = 0; if (sscanf(bp, "%x ", &mode) != 1) { goto invalid_data; } past_space = strchr(bp, ' '); if (!past_space) { goto invalid_data; } past_space++; /* Name length + NUL. Computed from past_space directly: the old * `j - read_pos - (past_space - bp)` form was off by +1 when a '!' * prefix had advanced bp past read_pos, over-reading deldelay_buf * by one byte on a buffer-filling final entry. */ len = (deldelay_buf + j) - past_space + 1; read_pos = j + 1; if (len > MAXPATHLEN) { rprintf(FERROR, "ERROR: filename too long in delete-delay file.\n"); return -1; } /* The caller needs the name in a MAXPATHLEN buffer, so we copy it * instead of returning a pointer to our buffer. */ memcpy(buf, past_space, len); return mode; invalid_data: rprintf(FERROR, "ERROR: invalid data in delete-delay file.\n"); return -1; } static void do_delayed_deletions(char *delbuf) { int mode, flags; if (deldelay_fd >= 0) { if (deldelay_cnt && !flush_delete_delay()) return; lseek(deldelay_fd, 0, 0); } while ((mode = read_delay_line(delbuf, &flags)) >= 0) delete_item(delbuf, mode, flags | DEL_RECURSE); if (deldelay_fd >= 0) close(deldelay_fd); } /* This function is used to implement per-directory deletion, and is used by * all the --delete-WHEN options. Note that the fbuf pointer must point to a * MAXPATHLEN buffer with the name of the directory in it (the functions we * call will append names onto the end, but the old dir value will be restored * on exit). */ static void delete_in_dir(char *fbuf, struct file_struct *file, dev_t fs_dev) { static int already_warned = 0; static struct hashtable *dev_tbl; struct file_list *dirlist; char delbuf[MAXPATHLEN]; int dlen, i; if (!fbuf) { change_local_filter_dir(NULL, 0, 0); return; } if (DEBUG_GTE(DEL, 2)) rprintf(FINFO, "delete_in_dir(%s)\n", fbuf); if (allowed_lull) maybe_send_keepalive(time(NULL), MSK_ALLOW_FLUSH); if (io_error & IOERR_GENERAL && !ignore_errors) { if (already_warned) return; rprintf(FINFO, "IO error encountered -- skipping file deletion\n"); already_warned = 1; return; } dlen = strlen(fbuf); change_local_filter_dir(fbuf, dlen, F_DEPTH(file)); if (one_file_system) { if (!dev_tbl) dev_tbl = hashtable_create(16, HT_KEY64); if (file->flags & FLAG_TOP_DIR) { hashtable_find(dev_tbl, fs_dev+1, ""); filesystem_dev = fs_dev; } else if (filesystem_dev != fs_dev) { if (!hashtable_find(dev_tbl, fs_dev+1, NULL)) return; filesystem_dev = fs_dev; /* it's a prior top-dir dev */ } } dirlist = get_dirlist(fbuf, dlen, 0); /* If an item in dirlist is not found in flist, delete it * from the filesystem. */ for (i = dirlist->used; i--; ) { struct file_struct *fp = dirlist->files[i]; if (!F_IS_ACTIVE(fp)) continue; if (fp->flags & FLAG_MOUNT_DIR && S_ISDIR(fp->mode)) { if (INFO_GTE(MOUNT, 1)) rprintf(FINFO, "cannot delete mount point: %s\n", f_name(fp, NULL)); continue; } /* Here we want to match regardless of file type. Replacement * of a file with one of another type is handled separately by * a delete_item call with a DEL_MAKE_ROOM flag. */ if (flist_find_ignore_dirness(cur_flist, fp) < 0) { int flags = DEL_RECURSE; if (!(fp->mode & S_IWUSR) && !am_root && fp->flags & FLAG_OWNED_BY_US) flags |= DEL_NO_UID_WRITE; f_name(fp, delbuf); if (delete_during == 2) { if (!remember_delete(fp, delbuf, flags)) break; } else delete_item(delbuf, fp->mode, flags); } } flist_free(dirlist); } /* This deletes any files on the receiving side that are not present on the * sending side. This is used by --delete-before and --delete-after. */ static void do_delete_pass(void) { char fbuf[MAXPATHLEN]; STRUCT_STAT st; int j; /* dry_run is incremented when the destination doesn't exist yet. */ if (dry_run > 1 || list_only) return; for (j = 0; j < cur_flist->used; j++) { struct file_struct *file = cur_flist->sorted[j]; if (!F_IS_ACTIVE(file)) continue; f_name(file, fbuf); if (!(file->flags & FLAG_CONTENT_DIR)) { change_local_filter_dir(fbuf, strlen(fbuf), F_DEPTH(file)); continue; } if (DEBUG_GTE(DEL, 1) && file->flags & FLAG_TOP_DIR) rprintf(FINFO, "deleting in %s\n", fbuf); if (link_stat(fbuf, &st, keep_dirlinks) < 0 || !S_ISDIR(st.st_mode)) continue; delete_in_dir(fbuf, file, st.st_dev); } delete_in_dir(NULL, NULL, dev_zero); if (INFO_GTE(FLIST, 2) && !am_server) { rprintf(FINFO, " "); rput_progress(); } } static inline int mtime_differs(STRUCT_STAT *stp, struct file_struct *file) { #ifdef ST_MTIME_NSEC return !same_time(stp->st_mtime, stp->ST_MTIME_NSEC, file->modtime, F_MOD_NSEC_or_0(file)); #else return !same_time(stp->st_mtime, 0, file->modtime, 0); #endif } static inline int any_time_differs(stat_x *sxp, struct file_struct *file, UNUSED(const char *fname)) { int differs = mtime_differs(&sxp->st, file); #ifdef SUPPORT_CRTIMES if (!differs && crtimes_ndx) { if (sxp->crtime == 0) sxp->crtime = get_create_time(fname, &sxp->st); differs = !same_time(sxp->crtime, 0, F_CRTIME(file), 0); } #endif return differs; } static inline int perms_differ(struct file_struct *file, stat_x *sxp) { if (preserve_perms) return !BITS_EQUAL(sxp->st.st_mode, file->mode, CHMOD_BITS); if (preserve_executability) return (sxp->st.st_mode & 0111 ? 1 : 0) ^ (file->mode & 0111 ? 1 : 0); return 0; } static inline int ownership_differs(struct file_struct *file, stat_x *sxp) { if (am_root && uid_ndx && sxp->st.st_uid != (uid_t)F_OWNER(file)) return 1; if (gid_ndx && !(file->flags & FLAG_SKIP_GROUP) && sxp->st.st_gid != (gid_t)F_GROUP(file)) return 1; return 0; } #ifdef SUPPORT_ACLS static inline int acls_differ(const char *fname, struct file_struct *file, stat_x *sxp) { if (preserve_acls) { if (!ACL_READY(*sxp)) get_acl(fname, sxp); if (set_acl(NULL, file, sxp, file->mode)) return 1; } return 0; } #endif #ifdef SUPPORT_XATTRS static inline int xattrs_differ(const char *fname, struct file_struct *file, stat_x *sxp) { if (preserve_xattrs) { if (!XATTR_READY(*sxp)) get_xattr(fname, -1, sxp); if (xattr_diff(file, sxp, 0)) return 1; } return 0; } #endif int unchanged_attrs(const char *fname, struct file_struct *file, stat_x *sxp) { if (S_ISLNK(file->mode)) { #ifdef CAN_SET_SYMLINK_TIMES if (preserve_mtimes && !omit_link_times && any_time_differs(sxp, file, fname)) return 0; #endif #ifdef CAN_CHMOD_SYMLINK if (perms_differ(file, sxp)) return 0; #endif #ifdef CAN_CHOWN_SYMLINK if (ownership_differs(file, sxp)) return 0; #endif #if defined SUPPORT_ACLS && 0 /* no current symlink-ACL support */ if (acls_differ(fname, file, sxp)) return 0; #endif #if defined SUPPORT_XATTRS && !defined NO_SYMLINK_XATTRS if (xattrs_differ(fname, file, sxp)) return 0; #endif } else { if (preserve_mtimes && any_time_differs(sxp, file, fname)) return 0; if (perms_differ(file, sxp)) return 0; if (ownership_differs(file, sxp)) return 0; #ifdef SUPPORT_ACLS if (acls_differ(fname, file, sxp)) return 0; #endif #ifdef SUPPORT_XATTRS if (xattrs_differ(fname, file, sxp)) return 0; #endif } return 1; } void itemize(const char *fnamecmp, struct file_struct *file, int ndx, int statret, stat_x *sxp, int32 iflags, uchar fnamecmp_type, const char *xname) { if (statret >= 0) { /* A from-dest-dir statret can == 1! */ int keep_time = !preserve_mtimes ? 0 : S_ISDIR(file->mode) ? !omit_dir_times : S_ISLNK(file->mode) ? !omit_link_times : 1; if (S_ISREG(file->mode) && F_LENGTH(file) != sxp->st.st_size) iflags |= ITEM_REPORT_SIZE; if (file->flags & FLAG_TIME_FAILED) { /* symlinks only */ if (iflags & ITEM_LOCAL_CHANGE) iflags |= symlink_timeset_failed_flags; } else if (keep_time ? mtime_differs(&sxp->st, file) : iflags & (ITEM_TRANSFER|ITEM_LOCAL_CHANGE) && !(iflags & ITEM_MATCHED) && (!(iflags & ITEM_XNAME_FOLLOWS) || *xname)) iflags |= ITEM_REPORT_TIME; if (atimes_ndx && !S_ISDIR(file->mode) && !S_ISLNK(file->mode) && !same_time(F_ATIME(file), 0, sxp->st.st_atime, 0)) iflags |= ITEM_REPORT_ATIME; #ifdef SUPPORT_CRTIMES if (crtimes_ndx) { if (sxp->crtime == 0) sxp->crtime = get_create_time(fnamecmp, &sxp->st); if (!same_time(sxp->crtime, 0, F_CRTIME(file), 0)) iflags |= ITEM_REPORT_CRTIME; } #endif #ifndef CAN_CHMOD_SYMLINK if (S_ISLNK(file->mode)) { ; } else #endif if (preserve_perms) { if (!BITS_EQUAL(sxp->st.st_mode, file->mode, CHMOD_BITS)) iflags |= ITEM_REPORT_PERMS; } else if (preserve_executability && ((sxp->st.st_mode & 0111 ? 1 : 0) ^ (file->mode & 0111 ? 1 : 0))) iflags |= ITEM_REPORT_PERMS; if (uid_ndx && am_root && (uid_t)F_OWNER(file) != sxp->st.st_uid) iflags |= ITEM_REPORT_OWNER; if (gid_ndx && !(file->flags & FLAG_SKIP_GROUP) && sxp->st.st_gid != (gid_t)F_GROUP(file)) iflags |= ITEM_REPORT_GROUP; #ifdef SUPPORT_ACLS if (preserve_acls && !S_ISLNK(file->mode)) { if (!ACL_READY(*sxp)) get_acl(fnamecmp, sxp); if (set_acl(NULL, file, sxp, file->mode)) iflags |= ITEM_REPORT_ACL; } #endif #ifdef SUPPORT_XATTRS if (preserve_xattrs) { if (!XATTR_READY(*sxp)) get_xattr(fnamecmp, -1, sxp); if (xattr_diff(file, sxp, 1)) iflags |= ITEM_REPORT_XATTR; } #endif } else { #ifdef SUPPORT_XATTRS if (preserve_xattrs && xattr_diff(file, NULL, 1)) iflags |= ITEM_REPORT_XATTR; #endif iflags |= ITEM_IS_NEW; } iflags &= 0xffff; if ((iflags & (SIGNIFICANT_ITEM_FLAGS|ITEM_REPORT_XATTR) || INFO_GTE(NAME, 2) || stdout_format_has_i > 1 || (xname && *xname)) && !read_batch) { if (protocol_version >= 29) { if (ndx >= 0) write_ndx(sock_f_out, ndx); write_shortint(sock_f_out, iflags); if (iflags & ITEM_BASIS_TYPE_FOLLOWS) write_byte(sock_f_out, fnamecmp_type); if (iflags & ITEM_XNAME_FOLLOWS) write_vstring(sock_f_out, xname, strlen(xname)); #ifdef SUPPORT_XATTRS if (preserve_xattrs && do_xfers && iflags & (ITEM_REPORT_XATTR|ITEM_TRANSFER)) { int fd = iflags & ITEM_REPORT_XATTR && !(want_xattr_optim && BITS_SET(iflags, ITEM_XNAME_FOLLOWS|ITEM_LOCAL_CHANGE)) ? sock_f_out : -1; send_xattr_request(NULL, file, fd); } #endif } else if (ndx >= 0) { enum logcode code = logfile_format_has_i ? FINFO : FCLIENT; log_item(code, file, iflags, xname); } } } static enum filetype get_file_type(mode_t mode) { if (S_ISREG(mode)) return FT_REG; if (S_ISLNK(mode)) return FT_SYMLINK; if (S_ISDIR(mode)) return FT_DIR; if (IS_SPECIAL(mode)) return FT_SPECIAL; if (IS_DEVICE(mode)) return FT_DEVICE; return FT_UNSUPPORTED; } /* Perform our quick-check heuristic for determining if a file is unchanged. */ int quick_check_ok(enum filetype ftype, const char *fn, struct file_struct *file, STRUCT_STAT *st) { switch (ftype) { case FT_REG: if (st->st_size != F_LENGTH(file)) return 0; /* If always_checksum is set then we use the checksum instead * of the file mtime to determine whether to sync. */ if (always_checksum > 0) { char sum[MAX_DIGEST_LEN]; file_checksum(fn, st, sum); return memcmp(sum, F_SUM(file), flist_csum_len) == 0; } if (size_only > 0) return 1; if (ignore_times) return 0; if (mtime_differs(st, file)) return 0; break; case FT_DIR: break; case FT_SYMLINK: { #ifdef SUPPORT_LINKS char lnk[MAXPATHLEN]; int len = do_readlink(fn, lnk, MAXPATHLEN-1); if (len <= 0) return 0; lnk[len] = '\0'; if (strcmp(lnk, F_SYMLINK(file)) != 0) return 0; break; #else return -1; #endif } case FT_SPECIAL: if (!BITS_EQUAL(file->mode, st->st_mode, _S_IFMT)) return 0; break; case FT_DEVICE: { uint32 *devp = F_RDEV_P(file); if (st->st_rdev != MAKEDEV(DEV_MAJOR(devp), DEV_MINOR(devp))) return 0; break; } case FT_UNSUPPORTED: return -1; } return 1; } /* * set (initialize) the size entries in the per-file sum_struct * calculating dynamic block and checksum sizes. * * This is only called from generate_and_send_sums() but is a separate * function to encapsulate the logic. * * The block size is a rounded square root of file length. * * The checksum size is determined according to: * blocksum_bits = BLOCKSUM_BIAS + 2*log2(file_len) - log2(block_len) * provided by Donovan Baarda which gives a probability of rsync * algorithm corrupting data and falling back using the whole md4 * checksums. * * This might be made one of several selectable heuristics. */ static void sum_sizes_sqroot(struct sum_struct *sum, int64 len) { int32 blength; int s2length; /* The strong sum can be no longer than the negotiated checksum digest: * a short checksum (e.g. xxh64 = 8 bytes, when xxh128/xxh3 are absent) * makes xfer_sum_len < SUM_LENGTH, and the sender rejects an s2length * larger than xfer_sum_len (io.c). */ int max_s2length = MIN(SUM_LENGTH, xfer_sum_len); int64 l; if (len < 0) { /* The file length overflowed our int64 var, so we can't process this file. */ sum->count = -1; /* indicate overflow error */ return; } if (block_size) blength = block_size; else if (len <= BLOCK_SIZE * BLOCK_SIZE) blength = BLOCK_SIZE; else { int32 max_blength = protocol_version < 30 ? OLD_MAX_BLOCK_SIZE : MAX_BLOCK_SIZE; int32 c; for (c = 1, l = len; l >>= 2; c <<= 1) {} if (c < 0 || c >= max_blength) blength = max_blength; else { blength = 0; do { blength |= c; if (len < (int64)blength * blength) blength &= ~c; c >>= 1; } while (c >= 8); /* round to multiple of 8 */ blength = MAX(blength, BLOCK_SIZE); } } if (protocol_version < 27) { s2length = csum_length; } else if (csum_length == SUM_LENGTH) { s2length = max_s2length; } else { int32 c; int b = BLOCKSUM_BIAS; for (l = len; l >>= 1; b += 2) {} for (c = blength; (c >>= 1) && b; b--) {} /* add a bit, subtract rollsum, round up. */ s2length = (b + 1 - 32 + 7) / 8; /* --optimize in compiler-- */ s2length = MAX(s2length, csum_length); s2length = MIN(s2length, max_s2length); } sum->flength = len; sum->blength = blength; sum->s2length = s2length; sum->remainder = (int32)(len % blength); sum->count = (int32)(l = (len / blength) + (sum->remainder != 0)); if ((int64)sum->count != l) sum->count = -1; if (sum->count && DEBUG_GTE(DELTASUM, 2)) { rprintf(FINFO, "count=%s rem=%ld blength=%ld s2length=%d flength=%s\n", big_num(sum->count), (long)sum->remainder, (long)sum->blength, sum->s2length, big_num(sum->flength)); } } /* * Generate and send a stream of signatures/checksums that describe a buffer * * Generate approximately one checksum every block_len bytes. */ static int generate_and_send_sums(int fd, OFF_T len, int f_out, int f_copy) { int32 i; struct map_struct *mapbuf; struct sum_struct sum; OFF_T offset = 0; sum_sizes_sqroot(&sum, len); if (sum.count < 0) return -1; write_sum_head(f_out, &sum); if (append_mode > 0 && f_copy < 0) return 0; if (len > 0) mapbuf = map_file(fd, len, MAX_MAP_SIZE, sum.blength); else mapbuf = NULL; for (i = 0; i < sum.count; i++) { int32 n1 = (int32)MIN(len, (OFF_T)sum.blength); char *map = map_ptr(mapbuf, offset, n1); char sum2[MAX_DIGEST_LEN]; uint32 sum1; len -= n1; offset += n1; if (f_copy >= 0) { full_write(f_copy, map, n1); if (append_mode > 0) continue; } sum1 = get_checksum1(map, n1); get_checksum2(map, n1, sum2); if (DEBUG_GTE(DELTASUM, 3)) { rprintf(FINFO, "chunk[%s] offset=%s len=%ld sum1=%08lx\n", big_num(i), big_num(offset - n1), (long)n1, (unsigned long)sum1); } write_int(f_out, sum1); write_buf(f_out, sum2, sum.s2length); } if (mapbuf) unmap_file(mapbuf); return 0; } /* Try to find a filename in the same dir as "fname" with a similar name. */ static struct file_struct *find_fuzzy(struct file_struct *file, struct file_list *dirlist_array[], uchar *fnamecmp_type_ptr) { int fname_len, fname_suf_len; const char *fname_suf, *fname = file->basename; uint32 lowest_dist = 25 << 16; /* ignore a distance greater than 25 */ int i, j; struct file_struct *lowest_fp = NULL; fname_len = strlen(fname); fname_suf = find_filename_suffix(fname, fname_len, &fname_suf_len); /* Try to find an exact size+mtime match first. */ for (i = 0; i < fuzzy_basis; i++) { struct file_list *dirlist = dirlist_array[i]; if (!dirlist) continue; for (j = 0; j < dirlist->used; j++) { struct file_struct *fp = dirlist->files[j]; if (!F_IS_ACTIVE(fp)) continue; if (!S_ISREG(fp->mode) || !F_LENGTH(fp) || fp->flags & FLAG_FILE_SENT) continue; if (F_LENGTH(fp) == F_LENGTH(file) && same_time(fp->modtime, 0, file->modtime, 0)) { if (DEBUG_GTE(FUZZY, 2)) rprintf(FINFO, "fuzzy size/modtime match for %s\n", f_name(fp, NULL)); *fnamecmp_type_ptr = FNAMECMP_FUZZY + i; return fp; } } } for (i = 0; i < fuzzy_basis; i++) { struct file_list *dirlist = dirlist_array[i]; if (!dirlist) continue; for (j = 0; j < dirlist->used; j++) { struct file_struct *fp = dirlist->files[j]; const char *suf, *name; int len, suf_len; uint32 dist; if (!F_IS_ACTIVE(fp)) continue; if (!S_ISREG(fp->mode) || !F_LENGTH(fp) || fp->flags & FLAG_FILE_SENT) continue; name = fp->basename; len = strlen(name); suf = find_filename_suffix(name, len, &suf_len); dist = fuzzy_distance(name, len, fname, fname_len, lowest_dist); /* Add some extra weight to how well the suffixes match unless we've already disqualified * this file based on a heuristic. */ if (dist < 0xFFFF0000U) { dist += fuzzy_distance(suf, suf_len, fname_suf, fname_suf_len, 0xFFFF0000U) * 10; } if (DEBUG_GTE(FUZZY, 2)) { rprintf(FINFO, "fuzzy distance for %s = %d.%05d\n", f_name(fp, NULL), (int)(dist>>16), (int)(dist&0xFFFF)); } if (dist <= lowest_dist) { lowest_dist = dist; lowest_fp = fp; *fnamecmp_type_ptr = FNAMECMP_FUZZY + i; } } } return lowest_fp; } /* Copy a file found in our --copy-dest handling. */ static int copy_altdest_file(const char *src, const char *dest, struct file_struct *file) { char buf[MAXPATHLEN]; const char *copy_to, *partialptr; int save_preserve_xattrs = preserve_xattrs; int ok, fd_w; if (inplace) { /* Let copy_file open the destination in place. */ fd_w = -1; copy_to = dest; } else { fd_w = open_tmpfile(buf, dest, file); if (fd_w < 0) return -1; copy_to = buf; } cleanup_set(copy_to, NULL, NULL, -1, -1); if (copy_file(src, copy_to, fd_w, file->mode) < 0) { if (INFO_GTE(COPY, 1)) { rsyserr(FINFO, errno, "copy_file %s => %s", full_fname(src), copy_to); } /* Try to clean up. copy_to's parent components are peer-named * and can be raced to a symlink, so resolve each with O_NOFOLLOW * via do_unlink_at() like the other generator-side unlinks. */ do_unlink_at(copy_to); cleanup_disable(); return -1; } partialptr = partial_dir ? partial_dir_fname(dest) : NULL; preserve_xattrs = 0; /* xattrs were copied with file */ ok = finish_transfer(dest, copy_to, src, partialptr, file, 1, 0); preserve_xattrs = save_preserve_xattrs; cleanup_disable(); return ok ? 0 : -1; } /* Stat an alternate-basis candidate (basis_dir[j]/fname) for a daemon /./ * inner-module chroot through the secure resolver, so a --compare/copy/link-dest * basis can't reach outside the inner module via a symlinked parent (the kernel * chroot confines only the outer path). secure_relative_open() refuses a parent * that escapes beneath the module root. Plain link_stat() everywhere else -- * the non-chroot daemon sanitizes basis paths already, and a local receiver must * still follow an operator's --link-dest=../backup. */ static int basis_link_stat(const char *path, STRUCT_STAT *stp) { extern int am_chrooted; extern int operator_path_resolve; extern unsigned int module_dirlen; #if defined AT_FDCWD && defined O_NOFOLLOW && defined O_DIRECTORY /* The basis dir (--link-dest/--compare-dest/--copy-dest) is an operator- * supplied path. For a non-daemon receiver, resolve it with the ownership * walk: a symlink component owned by uid 0 or the euid (the operator's own * basis dir, e.g. --link-dest=/var/backups) is followed, a foreign-owned one * is refused -- absolute and relative alike. Refusing it makes the basis * look absent, so the file transfers normally instead of being read/linked/ * skipped through an attacker's symlink. --insecure-links restores legacy * following; a daemon keeps its stronger confinement (chroot / secure * resolver) below. Only when am_root >= 0: link_stat_at() omits the * fake-super %stat xattr that link_stat() folds in, so --fake-super keeps * the plain path (a lower-severity, non-root basis lookup). */ if (!am_daemon && am_root >= 0 && !symlink_optout_allowed()) { const char *leaf; int dfd = owner_walk_parent(path, &leaf); int r, e; if (dfd < 0) return -1; r = link_stat_at(dfd, leaf, stp, 0); e = errno; close(dfd); errno = e; return r; } /* A non-chroot daemon serving an operator/peer alt-dest basis: resolve through * the ownership walk with module-ROOT confinement (operator_path_resolve) so an * in-module symlink whose target lands OUTSIDE the module is refused -- the * basis then looks absent and the file transfers normally instead of being * stat'd/read/linked through the link (closes the --compare-dest=/E read * oracle). "insecure links = yes" falls through to the legacy link_stat() * below, restoring 3.2.7 following. Only an ABSOLUTE basis (rooted under the * module by check_alt_basis_dirs, so it can reach an in-module symlink) is * confined here; a RELATIVE basis (--link-dest=../01) is a dest-relative * sibling whose "../" is already clamped to the module root by sanitize_path, * and must keep the plain link_stat below (#915/#930). The leaf is taken * under the confined parent with O_NOFOLLOW/AT_SYMLINK_NOFOLLOW, so * --copy-links can't follow a leaf symlink out of the module. */ if (am_daemon && !am_chrooted && path[0] == '/' && !symlink_optout_allowed()) { const char *leaf; int dfd, e, save = operator_path_resolve; operator_path_resolve = 1; dfd = owner_walk_parent(path, &leaf); operator_path_resolve = save; if (dfd < 0) return -1; if (am_root >= 0) { int r = do_lstat_atfd(dfd, leaf, stp); e = errno; close(dfd); errno = e; return r; } #ifdef SUPPORT_XATTRS { /* --fake-super: O_NOFOLLOW-open the held leaf (the daemon owns its * fake-super files) so the %stat xattr link_stat() would fold is * preserved while a leaf symlink is still refused. */ int lfd = do_open_atfd(dfd, leaf, O_RDONLY | O_NOFOLLOW | O_NONBLOCK, 0); STRUCT_STAT xst; e = errno; close(dfd); if (lfd < 0) { errno = e; return -1; } if (do_fstat(lfd, stp) < 0) { e = errno; close(lfd); errno = e; return -1; } if (get_stat_xattr(NULL, lfd, stp, &xst) == 0) *stp = xst; close(lfd); return 0; } #else { int r = do_lstat_atfd(dfd, leaf, stp); e = errno; close(dfd); errno = e; return r; } #endif } #endif if (am_daemon && am_chrooted && module_dirlen && path[0] != '/' && !symlink_optout_allowed()) { const char *slash = strrchr(path, '/'); if (slash) { char dir[MAXPATHLEN]; size_t dlen = (size_t)(slash - path); int dfd, r, e; if (dlen >= sizeof dir) { errno = ENAMETOOLONG; return -1; } memcpy(dir, path, dlen); dir[dlen] = '\0'; if ((dfd = secure_relative_dirfd(NULL, dir)) < 0) return -1; r = link_stat_at(dfd, slash + 1, stp, 0); e = errno; close(dfd); errno = e; return r; } } return link_stat(path, stp, 0); } /* This is only called for regular files. We return -2 if we've finished * handling the file, -1 if no dest-linking occurred, or a non-negative * value if we found an alternate basis file. If we're called with the * find_exact_for_existing flag, the destination file already exists, so * we only try to find an exact alt-dest match. In this case, the returns * are only -2 & -1 (both as above). */ static int try_dests_reg(struct file_struct *file, char *fname, int ndx, char *cmpbuf, stat_x *sxp, int find_exact_for_existing, int itemizing, enum logcode code) { STRUCT_STAT real_st = sxp->st; int best_match = -1; int match_level = 0; int j = 0; do { pathjoin(cmpbuf, MAXPATHLEN, basis_dir[j], fname); if (basis_link_stat(cmpbuf, &sxp->st) < 0 || !S_ISREG(sxp->st.st_mode)) continue; if (match_level == 0) { best_match = j; match_level = 1; } if (!quick_check_ok(FT_REG, cmpbuf, file, &sxp->st)) continue; if (match_level == 1) { best_match = j; match_level = 2; } if (unchanged_attrs(cmpbuf, file, sxp)) { best_match = j; match_level = 3; break; } free_stat_x(sxp); } while (basis_dir[++j] != NULL); if (!match_level) goto got_nothing_for_ya; if (j != best_match) { j = best_match; pathjoin(cmpbuf, MAXPATHLEN, basis_dir[j], fname); if (basis_link_stat(cmpbuf, &sxp->st) < 0) goto got_nothing_for_ya; } if (match_level == 3 && alt_dest_type != COPY_DEST) { if (find_exact_for_existing) { if (alt_dest_type == LINK_DEST && real_st.st_dev == sxp->st.st_dev && real_st.st_ino == sxp->st.st_ino) return -1; if (do_unlink_at(fname) < 0 && errno != ENOENT) goto got_nothing_for_ya; } #ifdef SUPPORT_HARD_LINKS if (alt_dest_type == LINK_DEST) { /* For a NON-daemon receiver the basis dir is an operator path: * resolve the link source via the ownership walk so a foreign-owned * symlink raced in after the basis_link_stat() check is still * refused (matching basis_link_stat's !am_daemon gate). A daemon * keeps its stronger module-anchored confinement (do_link_at's * secure_relpath_active path) -- the ownership walk would follow an * operator-owned symlink out of the module. */ int hlok, op = !am_daemon; if (op) operator_path_resolve = 1; hlok = hard_link_one(file, fname, cmpbuf, 1); if (op) operator_path_resolve = 0; if (!hlok) goto try_a_copy; if (atimes_ndx) set_file_attrs(fname, file, sxp, NULL, 0); if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sxp->st, itemizing, code, j); if (!maybe_ATTRS_REPORT && (INFO_GTE(NAME, 2) || stdout_format_has_i > 1)) { itemize(cmpbuf, file, ndx, 1, sxp, ITEM_LOCAL_CHANGE | ITEM_XNAME_FOLLOWS, 0, ""); } } else #endif { if (itemizing) itemize(cmpbuf, file, ndx, 0, sxp, 0, 0, NULL); } if (INFO_GTE(NAME, 2) && maybe_ATTRS_REPORT) rprintf(FCLIENT, "%s is uptodate\n", fname); return -2; } if (find_exact_for_existing) goto got_nothing_for_ya; if (match_level >= 2) { #ifdef SUPPORT_HARD_LINKS try_a_copy: /* Copy the file locally. */ #endif /* NB: the copy-dest basis read is deliberately NOT routed through the * ownership walk: copy_altdest_file()->copy_file() also opens the dest * and copies xattrs through a held O_NOFOLLOW fd, and forcing * operator_path_resolve across that re-opens the copy_xattrs parent- * symlink race (copy-xattrs-symlink-race). basis_link_stat() already * refuses a foreign-owned basis symlink, closing the static escape; the * post-stat race on an absolute copy-dest basis is a documented residual. */ if (!dry_run && copy_altdest_file(cmpbuf, fname, file) < 0) { if (find_exact_for_existing) /* Can get here via hard-link failure */ goto got_nothing_for_ya; return -1; } if (itemizing) itemize(cmpbuf, file, ndx, 0, sxp, ITEM_LOCAL_CHANGE, 0, NULL); if (maybe_ATTRS_REPORT && ((!itemizing && INFO_GTE(NAME, 1) && match_level == 2) || (INFO_GTE(NAME, 2) && match_level == 3))) { code = match_level == 3 ? FCLIENT : FINFO; rprintf(code, "%s%s\n", fname, match_level == 3 ? " is uptodate" : ""); } #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sxp->st, itemizing, code, -1); #endif return -2; } return FNAMECMP_BASIS_DIR_LOW + j; got_nothing_for_ya: sxp->st = real_st; return -1; } /* This is only called for non-regular files. We return -2 if we've finished * handling the file, -3 if we matched one but the destination refused to * hard-link it (the caller creates it instead, and must not report it again), * or -1 if no dest-linking occurred, or a non-negative value if we found an * alternate basis file. */ static int try_dests_non(struct file_struct *file, char *fname, int ndx, char *cmpbuf, stat_x *sxp, int itemizing, enum logcode code) { int best_match = -1; int match_level = 0; enum filetype ftype = get_file_type(file->mode); int j = 0; #ifndef SUPPORT_LINKS if (ftype == FT_SYMLINK) return -1; #endif if (ftype == FT_REG || ftype == FT_UNSUPPORTED) { rprintf(FERROR, "internal: try_dests_non() called with invalid mode (%o)\n", (int)file->mode); exit_cleanup(RERR_UNSUPPORTED); } do { pathjoin(cmpbuf, MAXPATHLEN, basis_dir[j], fname); if (basis_link_stat(cmpbuf, &sxp->st) < 0) continue; if (ftype != get_file_type(sxp->st.st_mode)) continue; if (match_level < 1) { match_level = 1; best_match = j; } if (!quick_check_ok(ftype, cmpbuf, file, &sxp->st)) continue; if (match_level < 2) { match_level = 2; best_match = j; } if (unchanged_attrs(cmpbuf, file, sxp)) { match_level = 3; best_match = j; break; } } while (basis_dir[++j] != NULL); if (!match_level) return -1; if (j != best_match) { j = best_match; pathjoin(cmpbuf, MAXPATHLEN, basis_dir[j], fname); if (basis_link_stat(cmpbuf, &sxp->st) < 0) return -1; } if (match_level == 3) { int cannot_hardlink = 0; #ifdef SUPPORT_HARD_LINKS if (alt_dest_type == LINK_DEST #ifndef CAN_HARDLINK_SYMLINK && !S_ISLNK(file->mode) #endif #ifndef CAN_HARDLINK_SPECIAL && !IS_SPECIAL(file->mode) && !IS_DEVICE(file->mode) #endif && !S_ISDIR(file->mode)) { if (do_link_at(cmpbuf, fname) < 0) { /* CAN_HARDLINK_SYMLINK/_SPECIAL answer for whatever * filesystem the build tree sat on; the destination is * free to disagree, and one host can hold both (macOS * builds on APFS, backs up to HFS+). A refusal here is * that same answer arriving late, so fall back to a copy * as a build without the macro does -- the caller creates * the entry either way, so failing the transfer only cost * the exit status. * * Every errno, as the regular-file path next door already * does (try_dests_reg -> hard_link_one -> try_a_copy). * Picking out the "cannot" errnos is not possible anyway: * link(2) documents EPERM both for a filesystem with no * hard-link support and for an ordinary permission * refusal, and FUSE reports ENOSYS for the same thing. * * The rest report themselves: ENOSPC/EDQUOT/EROFS fail the * copy too, EMLINK and EXDEV mean it was never linkable. * EIO alone goes unremarked, deliberately -- a diagnostic * here lands in --link-dest's itemised output. */ cannot_hardlink = 1; match_level = 2; } else if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, NULL, itemizing, code, -1); } else #endif match_level = 2; if (itemizing && stdout_format_has_i && (INFO_GTE(NAME, 2) || stdout_format_has_i > 1)) { int chg = alt_dest_type == COMPARE_DEST && ftype != FT_DIR ? 0 : ITEM_LOCAL_CHANGE + (match_level == 3 ? ITEM_XNAME_FOLLOWS : 0); char *lp = match_level == 3 ? "" : NULL; itemize(cmpbuf, file, ndx, 0, sxp, chg + ITEM_MATCHED, 0, lp); } if (INFO_GTE(NAME, 2) && maybe_ATTRS_REPORT) { rprintf(FCLIENT, "%s%s is uptodate\n", fname, ftype == FT_DIR ? "/" : ""); } /* -2 tells the caller the entry is already up to date, which for * --link-dest means "skip it". We could not link it, so say -3 * instead: no caller claims that, and the fall-through creates the * entry -- the same place a build without the macro ends up. */ return cannot_hardlink ? -3 : -2; } return j; } static void list_file_entry(struct file_struct *f) { char permbuf[PERMSTRING_SIZE]; const char *mtime_str = timestring(f->modtime); int size_width = human_readable ? 14 : 11; int mtime_width = 1 + strlen(mtime_str); int atime_width = atimes_ndx ? mtime_width : 0; int crtime_width = crtimes_ndx ? mtime_width : 0; if (!F_IS_ACTIVE(f)) { /* this can happen if duplicate names were removed */ return; } /* TODO: indicate '+' if the entry has an ACL. */ if (missing_args == 2 && f->mode == 0) { rprintf(FINFO, "%-*s %s\n", 10 + 1 + size_width + mtime_width + atime_width + crtime_width, "*missing", f_name(f, NULL)); } else { const char *atime_str = atimes_ndx && !S_ISDIR(f->mode) ? timestring(F_ATIME(f)) : ""; const char *crtime_str = crtimes_ndx ? timestring(F_CRTIME(f)) : ""; const char *arrow, *lnk; permstring(permbuf, f->mode); #ifdef SUPPORT_LINKS if (preserve_links && S_ISLNK(f->mode)) { arrow = " -> "; lnk = F_SYMLINK(f); } else #endif arrow = lnk = ""; rprintf(FINFO, "%s %*s %s%*s%*s %s%s%s\n", permbuf, size_width, human_num(F_LENGTH(f)), timestring(f->modtime), atime_width, atime_str, crtime_width, crtime_str, f_name(f, NULL), arrow, lnk); } } static int phase = 0; static int dflt_perms; static int implied_dirs_are_missing; /* Helper for recv_generator's skip_dir and dry_missing_dir tests. */ static BOOL is_below(struct file_struct *file, struct file_struct *subtree) { return F_DEPTH(file) > F_DEPTH(subtree) && (!implied_dirs_are_missing || f_name_has_prefix(file, subtree)); } /* Acts on the indicated item in cur_flist whose name is fname. If a dir, * make sure it exists, and has the right permissions/timestamp info. For * all other non-regular files (symlinks, etc.) we create them here. For * regular files that have changed, we try to find a basis file and then * start sending checksums. The ndx is the file's unique index value. * * The fname parameter must point to a MAXPATHLEN buffer! (e.g it gets * passed to delete_item(), which can use it during a recursive delete.) * * Note that f_out is set to -1 when doing final directory-permission and * modification-time repair. */ /* Held-dirfd helpers for the per-entry ops below: when the secure resolver is * active they act on the entry's basename relative to its cached directory fd * (held_dfd_for, keyed on file->dirname), else fall back to the full-path * do_*_at wrappers (behaviour-identical). held_dfd_for() declines when fname * isn't in file->dirname (e.g. the single-file local_name dest), and the leaf * is derived from fname, not file->basename. */ static int gen_entry_stat(const char *fname, struct file_struct *file, STRUCT_STAT *stp, int follow_dirlinks) { int dfd; /* link_stat_at folds in no fake-super xattr, so only use it when * am_root >= 0 (where link_stat's get_stat_xattr is a no-op anyway). */ if (am_root >= 0 && (dfd = held_dfd_for(fname, file)) >= 0) { const char *slash = strrchr(fname, '/'); return link_stat_at(dfd, slash ? slash + 1 : fname, stp, follow_dirlinks); } return link_stat(fname, stp, follow_dirlinks); } static int gen_entry_mkdir(char *fname, struct file_struct *file, mode_t mode) { int dfd = held_dfd_for(fname, file); if (dfd >= 0) { const char *slash = strrchr(fname, '/'); return do_mkdir_atfd(dfd, slash ? slash + 1 : fname, mode); } return do_mkdir_at(fname, mode); } static int gen_entry_chmod(const char *fname, struct file_struct *file, mode_t mode) { int dfd = held_dfd_for(fname, file); if (dfd >= 0) { const char *slash = strrchr(fname, '/'); return do_chmod_atfd(dfd, slash ? slash + 1 : fname, mode); } return do_chmod_at(fname, mode); } static void gen_entry_set_times(const char *fname, struct file_struct *file, STRUCT_STAT *stp) { int dfd = held_dfd_for(fname, file); if (dfd >= 0) { const char *slash = strrchr(fname, '/'); if (set_times_at(dfd, slash ? slash + 1 : fname, stp) != -2) return; /* handled (success or error) by the at-on-dfd tier */ } set_times(fname, stp); } static int gen_entry_symlink(const char *slnk, const char *path, struct file_struct *file) { int dfd = held_dfd_for(path, file); if (dfd >= 0) { const char *slash = strrchr(path, '/'); return do_symlink_atfd(slnk, dfd, slash ? slash + 1 : path); } return do_symlink_at(slnk, path); } /* True when this build compiled no fd-relative primitive able to create this * kind of node. That is a property of the build, not of the call, so it is * decided here rather than inferred from an errno. */ static int no_atfd_mknod_primitive(mode_t mode) { #ifndef AT_FDCWD (void)mode; return 1; #else /* --fake-super creates the placeholder with openat(), which exists * wherever AT_FDCWD does, so a failure there is a real failure and is * deliberately NOT retried unconfined -- even though a runtime denial * (a seccomp policy permitting open() but not openat()) would then fail * a create that the errno-based test used to let through. */ if (am_root < 0) return 0; # ifdef HAVE_MKNODAT (void)mode; return 0; # elif defined(HAVE_MKFIFOAT) return !S_ISFIFO(mode); /* FIFOs are covered; device nodes are not */ # else (void)mode; return 1; # endif #endif } static int gen_entry_mknod(const char *path, struct file_struct *file, mode_t mode, dev_t rdev) { int dfd; /* do_mknod_atfd can't create a socket (no portable bindat); fall back. */ if (!S_ISSOCK(mode) && (dfd = held_dfd_for(path, file)) >= 0) { const char *slash = strrchr(path, '/'); int ret = do_mknod_atfd(dfd, slash ? slash + 1 : path, mode, rdev); /* Fall through to the unconfined path-based create only where this * build compiled no fd-relative primitive for this kind of node -- * SECURITY.md's rule for a platform that cannot be secure at all. * Testing errno == ENOSYS is not that test: a live mknodat() or * mkfifoat() can return ENOSYS too (an unimplemented FUSE mknod, * or seccomp), which would drop confinement on a platform that * does have the secure primitive. */ if (ret == 0 || !no_atfd_mknod_primitive(mode)) return ret; } return do_mknod_at(path, mode, rdev); } static int gen_entry_unlink(const char *path, struct file_struct *file) { int dfd = held_dfd_for(path, file); if (dfd >= 0) { const char *slash = strrchr(path, '/'); return do_unlink_atfd(dfd, slash ? slash + 1 : path, 0); } return do_unlink_at(path); } /* opath and npath are both expected to live in the entry's directory (the * tmp -> final rename); when both resolve to the held dir fd the rename is a * single renameat() within it, else fall back to the full-path wrapper. */ static int gen_entry_rename(const char *opath, const char *npath, struct file_struct *file) { int odfd = held_dfd_for(opath, file); int ndfd = held_dfd_for(npath, file); if (odfd >= 0 && ndfd >= 0) { const char *os = strrchr(opath, '/'); const char *ns = strrchr(npath, '/'); return do_rename_atfd(odfd, os ? os + 1 : opath, ndfd, ns ? ns + 1 : npath); } return do_rename_at(opath, npath); } #ifdef SUPPORT_XATTRS /* Copy xattrs from src onto fname through a held, O_NOFOLLOW-opened fd so a * parent-symlink race can't redirect the setxattr. A hardened receiver always * uses a confined fd -- via the cached dir fd, or a secure re-pin when that * misses -- and refuses rather than path-write if it can't pin; only a * non-hardened receiver falls back to the path-based copy (matches * set_file_attrs' held-fd handling). */ static int gen_entry_copy_xattrs(const char *src, const char *fname, struct file_struct *file) { int dfd = held_dfd_for(fname, file); int xfd = -1, sfd = -1, ret; if (dfd >= 0) { const char *slash = strrchr(fname, '/'); xfd = openat(dfd, slash ? slash + 1 : fname, O_RDONLY | O_NOFOLLOW | O_NONBLOCK | O_NOCTTY | O_CLOEXEC); if (xfd < 0) { /* We hold a confined parent dirfd but couldn't pin the * leaf (e.g. it was raced to a symlink) -- refuse rather * than fall back to a path-based set that would follow the * parent components. */ rsyserr(FERROR_XFER, errno, "gen_entry_copy_xattrs: openat(%s) failed", full_fname(fname)); return -1; } } #if defined AT_FDCWD && defined O_NOFOLLOW else if (secure_relpath_active()) { /* No cached parent dirfd (a path deeper than the dirfd cache, or a raced * parent) but we must confine: re-pin the dest leaf through the secure * resolver so copy_xattrs uses fsetxattr, not a path-based lsetxattr a * flipped parent could redirect out of tree. A raced parent/leaf makes * this fail -> refuse rather than path-write. */ int odir = 0; # ifdef O_DIRECTORY if (S_ISDIR(file->mode)) odir = O_DIRECTORY; # endif xfd = secure_relative_open(NULL, fname, O_RDONLY | O_NOFOLLOW | O_NONBLOCK | O_NOCTTY | O_CLOEXEC | odir, 0); if (xfd < 0) { rsyserr(FERROR_XFER, errno, "gen_entry_copy_xattrs: secure open of %s failed", full_fname(fname)); return -1; } } #endif /* Pin the SOURCE (alt-dest basis) leaf too so the xattr READ can't be raced * out of tree (copy_file does the same for its content+xattr source). A * relative basis goes through the RESOLVE_BENEATH resolver; an absolute one * through the operator ownership walk. Refuse (don't path-read) when we are * meant to confine but can't pin; a non-hardened receiver path-reads (sfd<0). */ #if defined AT_FDCWD && defined O_NOFOLLOW if (secure_relpath_active() && src && *src && !symlink_optout_allowed()) { int odir = 0; #ifdef O_DIRECTORY if (S_ISDIR(file->mode)) /* secure_relative_open rejects a dir leaf without this */ odir = O_DIRECTORY; #endif if (src[0] != '/') sfd = secure_relative_open(NULL, src, O_RDONLY | O_NOFOLLOW | odir, 0); else { int save = operator_path_resolve, sdfd, e; const char *leaf; operator_path_resolve = 1; sdfd = owner_walk_parent(src, &leaf); operator_path_resolve = save; if (sdfd >= 0) { sfd = openat(sdfd, leaf, O_RDONLY | O_NOFOLLOW | odir | O_NONBLOCK | O_NOCTTY | O_CLOEXEC); e = errno; close(sdfd); errno = e; } } if (sfd < 0) { rsyserr(FERROR_XFER, errno, "gen_entry_copy_xattrs: secure open of basis %s failed", full_fname(src)); if (xfd >= 0) close(xfd); return -1; } } #endif ret = copy_xattrs(src, sfd, fname, xfd); if (sfd >= 0) close(sfd); if (xfd >= 0) close(xfd); return ret; } #endif static void recv_generator(char *fname, struct file_struct *file, int ndx, int itemizing, enum logcode code, int f_out) { static const char *parent_dirname = ""; static struct file_struct *prior_dir_file = NULL; /* Missing dir not created due to --dry-run; will still be scanned. */ static struct file_struct *dry_missing_dir = NULL; /* Missing dir whose contents are skipped altogether due to * --ignore-non-existing, daemon exclude, or mkdir failure. */ static struct file_struct *skip_dir = NULL; static struct file_list *fuzzy_dirlist[MAX_BASIS_DIRS+1]; static int need_fuzzy_dirlist = 0; struct file_struct *fuzzy_file = NULL; int fd = -1, f_copy = -1; stat_x sx = {0}, real_sx = {0}; STRUCT_STAT partial_st; struct file_struct *back_file = NULL; int statret, real_ret, stat_errno; char *fnamecmp, *partialptr, *backupptr = NULL; char fnamecmpbuf[MAXPATHLEN]; uchar fnamecmp_type; int del_opts = delete_mode || force_delete ? DEL_RECURSE : 0; enum filetype stype, ftype = get_file_type(file->mode); int is_dir = ftype != FT_DIR ? 0 : inc_recurse && ndx != cur_flist->ndx_start - 1 ? -1 : 1; if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "recv_generator(%s,%d)\n", fname, ndx); if (list_only) { if (is_dir < 0 || (is_dir && !implied_dirs && file->flags & FLAG_IMPLIED_DIR)) return; list_file_entry(file); return; } maybe_ATTRS_ACCURATE_TIME = always_checksum ? ATTRS_ACCURATE_TIME : 0; if (skip_dir) { if (is_below(file, skip_dir)) { if (is_dir) file->flags |= FLAG_MISSING_DIR; #ifdef SUPPORT_HARD_LINKS else if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif return; } skip_dir = NULL; } init_stat_x(&sx); if (daemon_filter_list.head && (*fname != '.' || fname[1])) { if (check_filter(&daemon_filter_list, FLOG, fname, is_dir) < 0) { if (is_dir < 0) return; #ifdef SUPPORT_HARD_LINKS if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif rprintf(FERROR_XFER, "ERROR: daemon refused to receive %s \"%s\"\n", is_dir ? "directory" : "file", fname); if (is_dir) goto skipping_dir_contents; return; } } if (dry_run > 1 || (dry_missing_dir && is_below(file, dry_missing_dir))) { int i; parent_is_dry_missing: for (i = 0; i < fuzzy_basis; i++) { if (fuzzy_dirlist[i]) { flist_free(fuzzy_dirlist[i]); fuzzy_dirlist[i] = NULL; } } parent_dirname = ""; statret = -1; stat_errno = ENOENT; } else { const char *dn = file->dirname ? file->dirname : "."; dry_missing_dir = NULL; if (parent_dirname != dn && strcmp(parent_dirname, dn) != 0) { /* Each parent dir must be in the file list or the flist data is bad. * Optimization: most of the time the parent dir will be the last dir * this function was asked to process in the file list. */ if (!inc_recurse && (*dn != '.' || dn[1]) /* Avoid an issue with --relative and the "." dir. */ && (!prior_dir_file || strcmp(dn, f_name(prior_dir_file, NULL)) != 0)) { int ok = 0, j = flist_find_name(cur_flist, dn, -1); if (j >= 0) { struct file_struct *f = cur_flist->sorted[j]; if (S_ISDIR(f->mode) || (missing_args == 2 && !file->mode && !f->mode)) ok = 1; } /* The --delete-missing-args option can actually put invalid entries into * the file list, so if that option was specified, we'll just complain about * it and allow it. */ if (!ok && missing_args == 2 && file->mode == 0 && j < 0) rprintf(FERROR, "WARNING: parent dir is absent in the file list: %s\n", dn); else if (!ok) { rprintf(FERROR, "ABORTING due to invalid path from sender: %s/%s\n", dn, file->basename); exit_cleanup(RERR_PROTOCOL); } } if (relative_paths && !implied_dirs && file->mode != 0 && do_stat_at(dn, &sx.st) < 0) { if (dry_run) goto parent_is_dry_missing; if (make_path(fname, MKP_DROP_NAME | MKP_SKIP_SLASH) < 0) { rsyserr(FERROR_XFER, errno, "recv_generator: mkdir %s failed", full_fname(dn)); } } if (fuzzy_basis) { int i; for (i = 0; i < fuzzy_basis; i++) { if (fuzzy_dirlist[i]) { flist_free(fuzzy_dirlist[i]); fuzzy_dirlist[i] = NULL; } } need_fuzzy_dirlist = 1; } #ifdef SUPPORT_ACLS if (!preserve_perms) dflt_perms = default_perms_for_dir(dn); #endif } parent_dirname = dn; statret = gen_entry_stat(fname, file, &sx.st, keep_dirlinks && is_dir); stat_errno = errno; } if (missing_args == 2 && file->mode == 0) { if (filter_list.head && check_filter(&filter_list, FINFO, fname, is_dir) < 0) return; if (statret == 0) delete_item(fname, sx.st.st_mode, del_opts); return; } if (ignore_non_existing > 0 && statret == -1 && stat_errno == ENOENT) { if (is_dir) { if (is_dir < 0) return; skip_dir = file; file->flags |= FLAG_MISSING_DIR; } #ifdef SUPPORT_HARD_LINKS else if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif if (INFO_GTE(SKIP, 1)) { rprintf(FINFO, "not creating new %s \"%s\"\n", is_dir ? "directory" : "file", fname); } return; } if (statret == 0 && !(sx.st.st_mode & S_IWUSR) && !am_root && sx.st.st_uid == our_uid) del_opts |= DEL_NO_UID_WRITE; if (statret == 0) stype = get_file_type(sx.st.st_mode); else stype = FT_UNSUPPORTED; if (ignore_existing > 0 && statret == 0 && (!is_dir || stype != FT_DIR)) { if (INFO_GTE(SKIP, 1) && is_dir >= 0) { const char *suf = ""; if (INFO_GTE(SKIP, 2)) { if (ftype != stype) suf = " (type change)"; else if (!quick_check_ok(ftype, fname, file, &sx.st)) suf = always_checksum ? " (sum change)" : " (file change)"; else if (!unchanged_attrs(fname, file, &sx)) suf = " (attr change)"; else suf = " (uptodate)"; } rprintf(FINFO, "%s exists%s\n", fname, suf); } #ifdef SUPPORT_HARD_LINKS if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif goto cleanup; } fnamecmp = fname; if (is_dir) { mode_t added_perms; if (!implied_dirs && file->flags & FLAG_IMPLIED_DIR) goto cleanup; if (am_root < 0) { /* For --fake-super, the dir must be useable by the copying * user, just like it would be for root. */ added_perms = S_IRUSR|S_IWUSR|S_IXUSR; } else added_perms = 0; if (is_dir < 0) { if (!preserve_mtimes || omit_dir_times) goto cleanup; /* In inc_recurse mode we want to make sure any missing * directories get created while we're still processing * the parent dir (which allows us to touch the parent * dir's mtime right away). We will handle the dir in * full later (right before we handle its contents). */ if (statret == 0 && (stype == FT_DIR || delete_item(fname, sx.st.st_mode, del_opts | DEL_FOR_DIR) != 0)) goto cleanup; /* Any errors get reported later. */ if (gen_entry_mkdir(fname, file, (file->mode|added_perms) & 0700) == 0) file->flags |= FLAG_DIR_CREATED; goto cleanup; } /* The file to be received is a directory, so we need * to prepare appropriately. If there is already a * file of that name and it is *not* a directory, then * we need to delete it. If it doesn't exist, then * (perhaps recursively) create it. */ if (statret == 0 && stype != FT_DIR) { if (delete_item(fname, sx.st.st_mode, del_opts | DEL_FOR_DIR) != 0) goto skipping_dir_contents; statret = -1; } if (dry_run && statret != 0) { if (!dry_missing_dir) dry_missing_dir = file; file->flags |= FLAG_MISSING_DIR; } init_stat_x(&real_sx); real_sx.st = sx.st; real_ret = statret; if (file->flags & FLAG_DIR_CREATED) statret = -1; if (!preserve_perms) { /* See comment in non-dir code below. */ file->mode = dest_mode(file->mode, sx.st.st_mode, dflt_perms, statret == 0); } if (statret != 0 && basis_dir[0] != NULL) { int j = try_dests_non(file, fname, ndx, fnamecmpbuf, &sx, itemizing, code); if (j == -2) { itemizing = 0; code = FNONE; statret = 1; } else if (j >= 0) { statret = 1; fnamecmp = fnamecmpbuf; } } if (itemizing && f_out != -1) { itemize(fnamecmp, file, ndx, statret, &sx, statret ? ITEM_LOCAL_CHANGE : 0, 0, NULL); } if (real_ret != 0 && gen_entry_mkdir(fname, file, file->mode|added_perms) < 0 && errno != EEXIST) { /* The parent may have just been created by make_path(), so * drop any cached (failed) dir fd before the retry. */ reset_dir_fd_cache(); if (!relative_paths || errno != ENOENT || make_path(fname, MKP_DROP_NAME | MKP_SKIP_SLASH) < 0 || (gen_entry_mkdir(fname, file, file->mode|added_perms) < 0 && errno != EEXIST)) { rsyserr(FERROR_XFER, errno, "recv_generator: mkdir %s failed", full_fname(fname)); skipping_dir_contents: rprintf(FERROR, "*** Skipping any contents from this failed directory ***\n"); skip_dir = file; file->flags |= FLAG_MISSING_DIR; goto cleanup; } } #ifdef SUPPORT_XATTRS if (preserve_xattrs && statret == 1) gen_entry_copy_xattrs(fnamecmpbuf, fname, file); #endif if (set_file_attrs(fname, file, real_ret ? NULL : &real_sx, NULL, 0) && INFO_GTE(NAME, 1) && code != FNONE && f_out != -1) rprintf(code, "%s/\n", fname); /* We need to ensure that the dirs in the transfer have both * readable and writable permissions during the time we are * putting files within them. This is then restored to the * former permissions after the transfer is done. */ #ifdef HAVE_CHMOD if (!am_root && (file->mode & S_IRWXU) != S_IRWXU && dir_tweaking) { mode_t mode = file->mode | S_IRWXU; if (gen_entry_chmod(fname, file, mode) < 0) { rsyserr(FERROR_XFER, errno, "failed to modify permissions on %s", full_fname(fname)); } need_retouch_dir_perms = 1; } #endif if (real_ret != 0 && one_file_system) real_sx.st.st_dev = filesystem_dev; if (inc_recurse) { if (one_file_system) { uint32 *devp = F_DIR_DEV_P(file); DEV_MAJOR(devp) = major(real_sx.st.st_dev); DEV_MINOR(devp) = minor(real_sx.st.st_dev); } } else if (delete_during && f_out != -1 && !phase && !(file->flags & FLAG_MISSING_DIR)) { if (file->flags & FLAG_CONTENT_DIR) delete_in_dir(fname, file, real_sx.st.st_dev); else change_local_filter_dir(fname, strlen(fname), F_DEPTH(file)); } prior_dir_file = file; goto cleanup; } /* If we're not preserving permissions, change the file-list's * mode based on the local permissions and some heuristics. */ if (!preserve_perms) { int exists = statret == 0 && stype != FT_DIR; file->mode = dest_mode(file->mode, sx.st.st_mode, dflt_perms, exists); } #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_HLINK_NOT_FIRST(file) && hard_link_check(file, ndx, fname, statret, &sx, itemizing, code)) goto cleanup; #endif if (preserve_links && ftype == FT_SYMLINK) { #ifdef SUPPORT_LINKS const char *sl = F_SYMLINK(file); if (safe_symlinks && unsafe_symlink(sl, fname)) { if (INFO_GTE(NAME, 1)) { if (solo_file) { /* fname contains the destination path, but we * want to report the source path. */ fname = f_name(file, NULL); } rprintf(FINFO, "ignoring unsafe symlink \"%s\" -> \"%s\"\n", fname, sl); } goto cleanup; } if (statret == 0) { if (stype == FT_SYMLINK && quick_check_ok(stype, fname, file, &sx.st)) { /* The link is pointing to the right place. */ set_file_attrs(fname, file, &sx, NULL, maybe_ATTRS_REPORT); if (itemizing) itemize(fname, file, ndx, 0, &sx, 0, 0, NULL); #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sx.st, itemizing, code, -1); #endif if (remove_source_files == 1) goto return_with_success; goto cleanup; } } else if (basis_dir[0] != NULL) { int j = try_dests_non(file, fname, ndx, fnamecmpbuf, &sx, itemizing, code); if (j == -3) { /* The destination cannot hard-link this type. Land exactly * where a build without CAN_HARDLINK_SYMLINK lands: create * the entry, but leave the reporting to the itemisation * try_dests_non() already emitted. */ itemizing = 0; code = FNONE; } else if (j == -2) { #ifndef CAN_HARDLINK_SYMLINK if (alt_dest_type == LINK_DEST) { /* Resort to --copy-dest behavior. */ } else #endif if (alt_dest_type != COPY_DEST) goto cleanup; itemizing = 0; code = FNONE; } else if (j >= 0) { statret = 1; fnamecmp = fnamecmpbuf; } } if (defer_symlinks) { defer_symlink(file, ndx, fname, itemizing, code); goto cleanup; } if (atomic_create(file, fname, sl, NULL, MAKEDEV(0, 0), &sx, statret == 0 ? DEL_FOR_SYMLINK : 0)) { set_file_attrs(fname, file, NULL, NULL, 0); if (itemizing) { if (statret == 0 && stype != FT_SYMLINK) statret = -1; itemize(fnamecmp, file, ndx, statret, &sx, ITEM_LOCAL_CHANGE|ITEM_REPORT_CHANGE, 0, NULL); } if (code != FNONE && INFO_GTE(NAME, 1)) rprintf(code, "%s -> %s\n", fname, sl); #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, NULL, itemizing, code, -1); #endif /* This does not check remove_source_files == 1 * because this is one of the items that the old * --remove-sent-files option would remove. */ if (remove_source_files) goto return_with_success; } #endif goto cleanup; } /* --drop-D refuses to CREATE devices/specials without touching * preserve_devices/preserve_specials, which also frame the file list's * rdev fields -- clearing those on one end of a connection alone * desynchronises it. Falls through to the "skipping non-regular file" * path below, exactly as --no-D reaches it. */ if (!drop_devices && ((am_root && preserve_devices && ftype == FT_DEVICE) || (preserve_specials && ftype == FT_SPECIAL))) { dev_t rdev; int del_for_flag; /* Whether the dest existed, captured before the type-mismatch * flip below clears statret -- so atomic_create() gets a delete * flag (and reads sx.st) only when sx.st was actually stat'd. */ int dest_existed = (statret == 0); if (ftype == FT_DEVICE) { uint32 *devp = F_RDEV_P(file); rdev = MAKEDEV(DEV_MAJOR(devp), DEV_MINOR(devp)); del_for_flag = DEL_FOR_DEVICE; } else { rdev = 0; del_for_flag = DEL_FOR_SPECIAL; } if (statret == 0) { if (ftype != stype) statret = -1; else if (quick_check_ok(ftype, fname, file, &sx.st)) { /* The device or special file is identical. */ set_file_attrs(fname, file, &sx, NULL, maybe_ATTRS_REPORT); if (itemizing) itemize(fname, file, ndx, 0, &sx, 0, 0, NULL); #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sx.st, itemizing, code, -1); #endif if (remove_source_files == 1) goto return_with_success; goto cleanup; } } else if (basis_dir[0] != NULL) { int j = try_dests_non(file, fname, ndx, fnamecmpbuf, &sx, itemizing, code); if (j == -3) { /* As above: a destination that cannot hard-link this type * behaves like a build without CAN_HARDLINK_SPECIAL. */ itemizing = 0; code = FNONE; } else if (j == -2) { #ifndef CAN_HARDLINK_SPECIAL if (alt_dest_type == LINK_DEST) { /* Resort to --copy-dest behavior. */ } else #endif if (alt_dest_type != COPY_DEST) goto cleanup; itemizing = 0; code = FNONE; } else if (j >= 0) { statret = 1; fnamecmp = fnamecmpbuf; } } if (DEBUG_GTE(GENR, 1)) { rprintf(FINFO, "mknod(%s, 0%o, [%ld,%ld])\n", fname, (int)file->mode, (long)major(rdev), (long)minor(rdev)); } if (atomic_create(file, fname, NULL, NULL, rdev, &sx, dest_existed ? del_for_flag : 0)) { set_file_attrs(fname, file, NULL, NULL, 0); if (itemizing) { itemize(fnamecmp, file, ndx, statret, &sx, ITEM_LOCAL_CHANGE|ITEM_REPORT_CHANGE, 0, NULL); } if (code != FNONE && INFO_GTE(NAME, 1)) rprintf(code, "%s\n", fname); #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, NULL, itemizing, code, -1); #endif if (remove_source_files == 1) goto return_with_success; } goto cleanup; } if (ftype != FT_REG) { if (INFO_GTE(NONREG, 1)) { if (solo_file) fname = f_name(file, NULL); rprintf(FINFO, "skipping non-regular file \"%s\"\n", fname); } goto cleanup; } if (max_size >= 0 && F_LENGTH(file) > max_size) { if (INFO_GTE(SKIP, 1)) { if (solo_file) fname = f_name(file, NULL); rprintf(FINFO, "%s is over max-size\n", fname); } goto cleanup; } if (min_size >= 0 && F_LENGTH(file) < min_size) { if (INFO_GTE(SKIP, 1)) { if (solo_file) fname = f_name(file, NULL); rprintf(FINFO, "%s is under min-size\n", fname); } goto cleanup; } if (update_only > 0 && statret == 0 && stype == ftype && file->modtime - sx.st.st_mtime < modify_window) { if (INFO_GTE(SKIP, 1)) rprintf(FINFO, "%s is newer\n", fname); #ifdef SUPPORT_HARD_LINKS if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif goto cleanup; } fnamecmp_type = FNAMECMP_FNAME; if (statret == 0 && !(stype == FT_REG || (write_devices && stype == FT_DEVICE))) { if (delete_item(fname, sx.st.st_mode, del_opts | DEL_FOR_FILE) != 0) goto cleanup; statret = -1; stat_errno = ENOENT; } if (basis_dir[0] != NULL && (statret != 0 || alt_dest_type != COPY_DEST)) { int j = try_dests_reg(file, fname, ndx, fnamecmpbuf, &sx, statret == 0, itemizing, code); if (j == -2) { if (remove_source_files == 1) goto return_with_success; goto cleanup; } if (j >= 0) { fnamecmp = fnamecmpbuf; fnamecmp_type = j; statret = 0; } } init_stat_x(&real_sx); real_sx.st = sx.st; /* Don't copy xattr/acl pointers, as they would free wrong. */ real_ret = statret; if (partial_dir && (partialptr = partial_dir_fname(fname)) != NULL && link_stat(partialptr, &partial_st, 0) == 0 && S_ISREG(partial_st.st_mode)) { if (statret != 0) goto prepare_to_open; } else partialptr = NULL; if (statret != 0 && fuzzy_basis) { if (need_fuzzy_dirlist) { const char *dn = file->dirname ? file->dirname : "."; int i; strlcpy(fnamecmpbuf, dn, sizeof fnamecmpbuf); for (i = 0; i < fuzzy_basis; i++) { if (i && pathjoin(fnamecmpbuf, MAXPATHLEN, basis_dir[i-1], dn) >= MAXPATHLEN) continue; fuzzy_dirlist[i] = get_dirlist(fnamecmpbuf, -1, GDL_IGNORE_FILTER_RULES | GDL_PERHAPS_DIR); if (fuzzy_dirlist[i] && fuzzy_dirlist[i]->used == 0) { flist_free(fuzzy_dirlist[i]); fuzzy_dirlist[i] = NULL; } } need_fuzzy_dirlist = 0; } /* Sets fnamecmp_type to FNAMECMP_FUZZY or above. */ fuzzy_file = find_fuzzy(file, fuzzy_dirlist, &fnamecmp_type); if (fuzzy_file) { f_name(fuzzy_file, fnamecmpbuf); if (DEBUG_GTE(FUZZY, 1)) { rprintf(FINFO, "fuzzy basis selected for %s: %s\n", fname, fnamecmpbuf); } sx.st.st_size = F_LENGTH(fuzzy_file); statret = 0; fnamecmp = fnamecmpbuf; } } if (statret != 0) { #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_HLINK_NOT_LAST(file)) { cur_flist->in_progress++; goto cleanup; } #endif if (stat_errno == ENOENT) goto notify_others; rsyserr(FERROR_XFER, stat_errno, "recv_generator: failed to stat %s", full_fname(fname)); goto cleanup; } if (write_devices && IS_DEVICE(sx.st.st_mode) && sx.st.st_size == 0) { /* This early open into fd skips the regular open below. */ if ((fd = do_open_nofollow(fnamecmp, O_RDONLY)) >= 0) real_sx.st.st_size = sx.st.st_size = get_device_size(fd, fnamecmp); } if (fnamecmp_type <= FNAMECMP_BASIS_DIR_HIGH) ; else if (fnamecmp_type >= FNAMECMP_FUZZY) ; else if (quick_check_ok(FT_REG, fnamecmp, file, &sx.st)) { if (partialptr) { /* The --partial-dir basis is an operator/peer path: unlink it * through the exclude-aware ownership walk so a symlinked * partial-dir can't delete a file in an excluded subtree. */ operator_path_resolve = 1; do_unlink_at(partialptr); operator_path_resolve = 0; handle_partial_dir(partialptr, PDIR_DELETE); } set_file_attrs(fname, file, &sx, NULL, maybe_ATTRS_REPORT | maybe_ATTRS_ACCURATE_TIME); if (itemizing) itemize(fnamecmp, file, ndx, statret, &sx, 0, 0, NULL); #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sx.st, itemizing, code, -1); #endif if (remove_source_files != 1) goto cleanup; return_with_success: if (!dry_run) send_msg_success(fname, ndx); goto cleanup; } if (append_mode > 0 && sx.st.st_size >= F_LENGTH(file)) { #ifdef SUPPORT_HARD_LINKS if (F_IS_HLINKED(file)) handle_skipped_hlink(file, itemizing, code, f_out); #endif goto cleanup; } prepare_to_open: if (partialptr) { sx.st = partial_st; fnamecmp = partialptr; fnamecmp_type = FNAMECMP_PARTIAL_DIR; statret = 0; } if (!do_xfers) goto notify_others; if (read_batch || whole_file) { if (inplace && make_backups > 0 && fnamecmp_type == FNAMECMP_FNAME) { /* The --backup-dir (backupptr) is an operator path; this in-place * backup bypasses make_backup(), so set operator_path_resolve here * too -- get_backup_name() (make_path) and copy_file() then resolve * it with the ownership walk instead of following any symlink. */ operator_path_resolve = 1; if (!(backupptr = get_backup_name(fname))) { operator_path_resolve = 0; goto cleanup; } if (!(back_file = make_file(fname, NULL, NULL, 0, NO_FILTERS))) { operator_path_resolve = 0; goto pretend_missing; } if (copy_file(fname, backupptr, -1, back_file->mode) < 0) { operator_path_resolve = 0; unmake_file(back_file); back_file = NULL; goto cleanup; } operator_path_resolve = 0; } goto notify_others; } if (fuzzy_dirlist[0]) { int j = flist_find(fuzzy_dirlist[0], file); if (j >= 0) /* don't use changing file as future fuzzy basis */ fuzzy_dirlist[0]->files[j]->flags |= FLAG_FILE_SENT; } /* open the file */ if (fd < 0 && (fd = do_open_checklinks(fnamecmp)) < 0) { rsyserr(FERROR, errno, "failed to open %s, continuing", full_fname(fnamecmp)); pretend_missing: /* pretend the file didn't exist */ #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_HLINK_NOT_LAST(file)) { cur_flist->in_progress++; goto cleanup; } #endif statret = real_ret = -1; goto notify_others; } if (inplace && make_backups > 0 && fnamecmp_type == FNAMECMP_FNAME) { /* Operator --backup-dir, bypassing make_backup(): resolve get_backup_name() * (make_path), the unlink and the create with the ownership walk. */ operator_path_resolve = 1; if (!(backupptr = get_backup_name(fname))) { operator_path_resolve = 0; goto cleanup; } if (!(back_file = make_file(fname, NULL, NULL, 0, NO_FILTERS))) { operator_path_resolve = 0; goto pretend_missing; } if (robust_unlink(backupptr) && errno != ENOENT) { operator_path_resolve = 0; rsyserr(FERROR_XFER, errno, "unlink %s", full_fname(backupptr)); unmake_file(back_file); back_file = NULL; goto cleanup; } if ((f_copy = do_open_at(backupptr, O_WRONLY | O_CREAT | O_TRUNC | O_EXCL, 0600)) < 0) { operator_path_resolve = 0; rsyserr(FERROR_XFER, errno, "open %s", full_fname(backupptr)); unmake_file(back_file); back_file = NULL; goto cleanup; } operator_path_resolve = 0; fnamecmp_type = FNAMECMP_BACKUP; } if (DEBUG_GTE(DELTASUM, 3)) { rprintf(FINFO, "gen mapped %s of size %s\n", fnamecmp, big_num(sx.st.st_size)); } if (DEBUG_GTE(DELTASUM, 2)) rprintf(FINFO, "generating and sending sums for %d\n", ndx); notify_others: if (remove_source_files && !delay_updates && !phase && !dry_run) increment_active_files(ndx, itemizing, code); if (inc_recurse && (!dry_run || write_batch < 0)) cur_flist->in_progress++; #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) file->flags |= FLAG_FILE_SENT; #endif write_ndx(f_out, ndx); if (itemizing) { int iflags = ITEM_TRANSFER; if (always_checksum > 0) iflags |= ITEM_REPORT_CHANGE; if (fnamecmp_type != FNAMECMP_FNAME) iflags |= ITEM_BASIS_TYPE_FOLLOWS; if (fnamecmp_type >= FNAMECMP_FUZZY) iflags |= ITEM_XNAME_FOLLOWS; itemize(fnamecmp, file, -1, real_ret, &real_sx, iflags, fnamecmp_type, fuzzy_file ? fuzzy_file->basename : NULL); free_stat_x(&real_sx); } if (!do_xfers) { #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && F_IS_HLINKED(file)) finish_hard_link(file, fname, ndx, &sx.st, itemizing, code, -1); #endif goto cleanup; } if (read_batch) goto cleanup; if (statret != 0 || whole_file) write_sum_head(f_out, NULL); else if (sx.st.st_size <= 0) { write_sum_head(f_out, NULL); } else { if (generate_and_send_sums(fd, sx.st.st_size, f_out, f_copy) < 0) { rprintf(FWARNING, "WARNING: file is too large for checksum sending: %s\n", fnamecmp); write_sum_head(f_out, NULL); } } cleanup: if (fd >= 0) close(fd); if (back_file) { int save_preserve_xattrs = preserve_xattrs; #ifdef SUPPORT_XATTRS /* The delta-backup path wrote backupptr via the held f_copy, so * copy its xattrs through that fd here. The whole-file/inplace * path (f_copy < 0) backed it up via copy_file(), which already * copied the xattrs through its own held fd -- don't repeat it * with a path-based set a parent-symlink race could redirect. */ if (preserve_xattrs && f_copy >= 0) { /* Read fname's xattrs through a confined fd so the copy onto the * held backup fd can't be fed an out-of-module source by a raced * parent symlink; a hardened race skips rather than path-reads. */ int bfd = backup_source_fd(fname); if (!backup_metadata_hardened() || bfd >= 0) copy_xattrs(fname, bfd, backupptr, f_copy); if (bfd >= 0) close(bfd); preserve_xattrs = 0; } #endif if (f_copy >= 0) close(f_copy); /* backupptr's data/xattrs were written safely (confined create under * operator_path_resolve, held-fd xattr copy above). This metadata set * re-resolves backupptr by path and is NOT wrapped in operator mode: * set_file_attrs() also drives the path-based xattr set whose held-fd * race-fix operator mode would defeat (cf. the copy-dest note in * try_dests_reg). The static --backup-dir escape is already closed; a * parent-symlink flipped in after the confined create races only these * chmod/chown/times -- a documented residual. */ set_file_attrs(backupptr, back_file, NULL, NULL, 0); preserve_xattrs = save_preserve_xattrs; if (INFO_GTE(BACKUP, 1)) { rprintf(FINFO, "backed up %s to %s\n", fname, backupptr); } unmake_file(back_file); } free_stat_x(&sx); free_stat_x(&real_sx); } /* If we are replacing an existing hard link, symlink, device, or special file, * create a temp-name item and rename it into place. A symlimk specifies slnk, * a hard link specifies hlnk, otherwise we create a device based on rdev. * Specify 0 for the del_for_flag if there is not a file to replace. This * returns 1 on success and 0 on failure. */ int atomic_create(struct file_struct *file, char *fname, const char *slnk, const char *hlnk, dev_t rdev, stat_x *sxp, int del_for_flag) { char tmpname[MAXPATHLEN]; const char *create_name; int skip_atomic, dir_in_the_way = del_for_flag && S_ISDIR(sxp->st.st_mode); if (!del_for_flag || dir_in_the_way || tmpdir || !get_tmpname(tmpname, fname, True)) skip_atomic = 1; else skip_atomic = 0; if (del_for_flag) { if (make_backups > 0 && !dir_in_the_way) { if (!make_backup(fname, skip_atomic)) return 0; } else if (skip_atomic) { int del_opts = delete_mode || force_delete ? DEL_RECURSE : 0; if (delete_item(fname, sxp->st.st_mode, del_opts | del_for_flag) != 0) return 0; } } create_name = skip_atomic ? fname : tmpname; if (slnk) { #ifdef SUPPORT_LINKS if (gen_entry_symlink(slnk, create_name, file) < 0) { rsyserr(FERROR_XFER, errno, "symlink %s -> \"%s\" failed", full_fname(create_name), slnk); return 0; } #else return 0; #endif } else if (hlnk) { #ifdef SUPPORT_HARD_LINKS if (!hard_link_one(file, create_name, hlnk, 0)) return 0; #else return 0; #endif } else { if (gen_entry_mknod(create_name, file, file->mode, rdev) < 0) { int e = errno; /* A nested socket can't be created race-safely where there is no * bindat() (the BSDs, macOS, Solaris): syscall.c returns EOPNOTSUPP * rather than re-resolving an unsafe parent. A socket inode is only * a placeholder -- a live socket isn't usefully transferred -- so * skip it with a warning instead of failing the whole transfer * (got_xfer_error -> exit 23). Top-level sockets still create via * the path-based bind() fallback. */ if (S_ISSOCK(file->mode) && (e == EOPNOTSUPP || e == ENOSYS)) { rprintf(FWARNING, "skipping socket (creation unsupported here): %s\n", full_fname(create_name)); return 0; } rsyserr(FERROR_XFER, e, "mknod %s failed", full_fname(create_name)); return 0; } } if (!skip_atomic) { if (gen_entry_rename(tmpname, fname, file) < 0) { char *full_tmpname = strdup(full_fname(tmpname)); if (full_tmpname == NULL) out_of_memory("atomic_create"); rsyserr(FERROR_XFER, errno, "rename %s -> \"%s\" failed", full_tmpname, full_fname(fname)); free(full_tmpname); gen_entry_unlink(tmpname, file); return 0; } } return 1; } #ifdef SUPPORT_HARD_LINKS static void handle_skipped_hlink(struct file_struct *file, int itemizing, enum logcode code, int f_out) { char fbuf[MAXPATHLEN]; int new_last_ndx; struct file_list *save_flist = cur_flist; /* If we skip the last item in a chain of links and there was a * prior non-skipped hard-link waiting to finish, finish it now. */ if ((new_last_ndx = skip_hard_link(file, &cur_flist)) < 0) return; file = cur_flist->files[new_last_ndx - cur_flist->ndx_start]; cur_flist->in_progress--; /* undo prior increment */ f_name(file, fbuf); recv_generator(fbuf, file, new_last_ndx, itemizing, code, f_out); cur_flist = save_flist; } #endif static void touch_up_dirs(struct file_list *flist, int ndx) { static int counter = 0; struct file_struct *file; char *fname; BOOL fix_dir_perms; int i, start, end; if (ndx < 0) { start = 0; end = flist->used - 1; } else start = end = ndx; /* Fix any directory permissions that were modified during the * transfer and/or re-set any tweaked modified-time values. */ for (i = start; i <= end; i++, counter++) { file = flist->files[i]; if (!F_IS_ACTIVE(file)) continue; if (!S_ISDIR(file->mode) || (!implied_dirs && file->flags & FLAG_IMPLIED_DIR)) continue; if (DEBUG_GTE(TIME, 2)) { fname = f_name(file, NULL); rprintf(FINFO, "touch_up_dirs: %s (%d)\n", NS(fname), i); } /* Be sure not to retouch permissions with --fake-super. */ fix_dir_perms = !am_root && !(file->mode & S_IWUSR); if (file->flags & FLAG_MISSING_DIR || !(need_retouch_dir_times || fix_dir_perms)) continue; fname = f_name(file, NULL); if (fix_dir_perms) gen_entry_chmod(fname, file, file->mode); if (need_retouch_dir_times) { STRUCT_STAT st; if (gen_entry_stat(fname, file, &st, 0) == 0 && mtime_differs(&st, file)) { st.st_mtime = file->modtime; #ifdef ST_MTIME_NSEC st.ST_MTIME_NSEC = F_MOD_NSEC_or_0(file); #endif gen_entry_set_times(fname, file, &st); } } if (counter >= loopchk_limit) { if (allowed_lull) maybe_send_keepalive(time(NULL), MSK_ALLOW_FLUSH); else maybe_flush_socket(0); counter = 0; } } } void check_for_finished_files(int itemizing, enum logcode code, int check_redo) { struct file_struct *file; struct file_list *flist; char fbuf[MAXPATHLEN]; int ndx; while (1) { #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && (ndx = get_hlink_num()) != -1) { int send_failed = (ndx == -2); if (send_failed) ndx = get_hlink_num(); flist = flist_for_ndx(ndx, "check_for_finished_files.1"); if (ndx < flist->ndx_start) exit_cleanup(RERR_PROTOCOL); file = flist->files[ndx - flist->ndx_start]; assert(file->flags & FLAG_HLINKED); if (send_failed) handle_skipped_hlink(file, itemizing, code, sock_f_out); else finish_hard_link(file, f_name(file, fbuf), ndx, NULL, itemizing, code, -1); flist->in_progress--; continue; } #endif if (check_redo && (ndx = get_redo_num()) != -1) { OFF_T save_max_size = max_size; OFF_T save_min_size = min_size; csum_length = SUM_LENGTH; max_size = -1; min_size = -1; ignore_existing = -ignore_existing; ignore_non_existing = -ignore_non_existing; update_only = -update_only; always_checksum = -always_checksum; size_only = -size_only; append_mode = -append_mode; make_backups = -make_backups; /* avoid dup backup w/inplace */ ignore_times++; flist = cur_flist; cur_flist = flist_for_ndx(ndx, "check_for_finished_files.2"); if (ndx < cur_flist->ndx_start) exit_cleanup(RERR_PROTOCOL); file = cur_flist->files[ndx - cur_flist->ndx_start]; if (solo_file) strlcpy(fbuf, solo_file, sizeof fbuf); else f_name(file, fbuf); recv_generator(fbuf, file, ndx, itemizing, code, sock_f_out); cur_flist->to_redo--; cur_flist = flist; csum_length = SHORT_SUM_LENGTH; max_size = save_max_size; min_size = save_min_size; ignore_existing = -ignore_existing; ignore_non_existing = -ignore_non_existing; update_only = -update_only; always_checksum = -always_checksum; size_only = -size_only; append_mode = -append_mode; make_backups = -make_backups; ignore_times--; continue; } if (cur_flist == first_flist) break; /* We only get here if inc_recurse is enabled. */ if (first_flist->in_progress || first_flist->to_redo) break; write_ndx(sock_f_out, NDX_DONE); if (!read_batch && !flist_eof) { int old_total = 0; for (flist = first_flist; flist != cur_flist; flist = flist->next) old_total += flist->used; maybe_flush_socket(!flist_eof && file_total - old_total < MIN_FILECNT_LOOKAHEAD/2); } if (delete_during == 2 || !dir_tweaking) { /* Skip directory touch-up. */ } else if (first_flist->parent_ndx >= 0 && first_flist->parent_ndx < dir_flist->used) touch_up_dirs(dir_flist, first_flist->parent_ndx); flist_free(first_flist); /* updates first_flist */ } } /* Create the symlinks deferred by recv_generator(), then itemize and log each * one as recv_generator() would have. We re-stat each destination because the * transfer may have changed what's there. A link that can't be created is * reported as an error and not itemized. */ static void create_deferred_symlinks(void) { #ifdef SUPPORT_LINKS struct deferred_symlink *ds = deferred_symlinks.items; size_t i; for (i = 0; i < deferred_symlinks.count; i++) { struct file_struct *file = ds[i].file; /* atomic_create() can delete a directory in the way, which builds * its entries' paths in this buffer, so it must be MAXPATHLEN. */ char fname[MAXPATHLEN]; stat_x sx; int statret; strlcpy(fname, ds[i].fname, sizeof fname); free(ds[i].fname); init_stat_x(&sx); statret = gen_entry_stat(fname, file, &sx.st, 0); if (atomic_create(file, fname, F_SYMLINK(file), NULL, MAKEDEV(0, 0), &sx, statret == 0 ? DEL_FOR_SYMLINK : 0)) { set_file_attrs(fname, file, NULL, NULL, 0); if (ds[i].itemizing) { if (statret == 0 && !S_ISLNK(sx.st.st_mode)) statret = -1; itemize(fname, file, ds[i].ndx, statret, &sx, ITEM_LOCAL_CHANGE|ITEM_REPORT_CHANGE, 0, NULL); } if (ds[i].code != FNONE && INFO_GTE(NAME, 1)) rprintf(ds[i].code, "%s -> %s\n", fname, F_SYMLINK(file)); } free_stat_x(&sx); } deferred_symlinks.count = 0; #endif } void generate_files(int f_out, const char *local_name) { int i, ndx, next_loopchk = 0; char fbuf[MAXPATHLEN]; int itemizing; enum logcode code; int save_info_flist = info_levels[INFO_FLIST]; int save_info_progress = info_levels[INFO_PROGRESS]; if (protocol_version >= 29) { itemizing = 1; maybe_ATTRS_REPORT = stdout_format_has_i ? 0 : ATTRS_REPORT; code = logfile_format_has_i ? FNONE : FLOG; } else if (am_daemon) { itemizing = logfile_format_has_i && do_xfers; maybe_ATTRS_REPORT = ATTRS_REPORT; code = itemizing || !do_xfers ? FCLIENT : FINFO; } else if (!am_server) { itemizing = stdout_format_has_i; maybe_ATTRS_REPORT = stdout_format_has_i ? 0 : ATTRS_REPORT; code = itemizing ? FNONE : FINFO; } else { itemizing = 0; maybe_ATTRS_REPORT = ATTRS_REPORT; code = FINFO; } solo_file = local_name; dir_tweaking = !(list_only || solo_file || dry_run); need_retouch_dir_times = preserve_mtimes && !omit_dir_times; loopchk_limit = allowed_lull ? allowed_lull * 5 : 200; symlink_timeset_failed_flags = ITEM_REPORT_TIME | (protocol_version >= 30 || !am_server ? ITEM_REPORT_TIMEFAIL : 0); implied_dirs_are_missing = relative_paths && !implied_dirs && protocol_version < 30; /* A dry run creates nothing, so its symlinks take the normal path. */ defer_symlinks = delay_symlinks && !dry_run; if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "generator starting pid=%d\n", (int)getpid()); if (delete_before && !solo_file && cur_flist->used > 0) do_delete_pass(); if (delete_during == 2) { deldelay_size = BIGPATHBUFLEN * 4; deldelay_buf = new_array(char, deldelay_size); } info_levels[INFO_FLIST] = info_levels[INFO_PROGRESS] = 0; if (append_mode > 0 || whole_file < 0) whole_file = 0; if (DEBUG_GTE(FLIST, 1)) { rprintf(FINFO, "delta-transmission %s\n", whole_file ? "disabled for local transfer or --whole-file" : "enabled"); } dflt_perms = (ACCESSPERMS & ~orig_umask); do { #ifdef SUPPORT_HARD_LINKS if (preserve_hard_links && inc_recurse) { while (!flist_eof && file_total < MIN_FILECNT_LOOKAHEAD/2) wait_for_receiver(); } #endif if (inc_recurse && cur_flist->parent_ndx >= 0 && cur_flist->parent_ndx < dir_flist->used) { struct file_struct *fp = dir_flist->files[cur_flist->parent_ndx]; if (solo_file) strlcpy(fbuf, solo_file, sizeof fbuf); else f_name(fp, fbuf); ndx = cur_flist->ndx_start - 1; recv_generator(fbuf, fp, ndx, itemizing, code, f_out); if (delete_during && dry_run < 2 && !list_only && !(fp->flags & FLAG_MISSING_DIR)) { if (fp->flags & FLAG_CONTENT_DIR) { dev_t dirdev; if (one_file_system) { uint32 *devp = F_DIR_DEV_P(fp); dirdev = MAKEDEV(DEV_MAJOR(devp), DEV_MINOR(devp)); } else dirdev = MAKEDEV(0, 0); delete_in_dir(fbuf, fp, dirdev); } else change_local_filter_dir(fbuf, strlen(fbuf), F_DEPTH(fp)); } } for (i = cur_flist->low; i <= cur_flist->high; i++) { struct file_struct *file = cur_flist->sorted[i]; if (!F_IS_ACTIVE(file)) continue; if (unsort_ndx) ndx = F_NDX(file); else ndx = i + cur_flist->ndx_start; if (solo_file) strlcpy(fbuf, solo_file, sizeof fbuf); else f_name(file, fbuf); recv_generator(fbuf, file, ndx, itemizing, code, f_out); check_for_finished_files(itemizing, code, 0); if (i + cur_flist->ndx_start >= next_loopchk) { if (allowed_lull) maybe_send_keepalive(time(NULL), MSK_ALLOW_FLUSH); else maybe_flush_socket(0); next_loopchk += loopchk_limit; } } if (!inc_recurse) { write_ndx(f_out, NDX_DONE); break; } while (1) { check_for_finished_files(itemizing, code, 1); if (cur_flist->next || flist_eof) break; wait_for_receiver(); } } while ((cur_flist = cur_flist->next) != NULL); if (delete_during) delete_in_dir(NULL, NULL, dev_zero); phase++; if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "generate_files phase=%d\n", phase); while (1) { check_for_finished_files(itemizing, code, 1); if (msgdone_cnt) break; wait_for_receiver(); } phase++; if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "generate_files phase=%d\n", phase); write_ndx(f_out, NDX_DONE); /* Reduce round-trip lag-time for a useless delay-updates phase. */ if (protocol_version >= 29 && EARLY_DELAY_DONE_MSG()) write_ndx(f_out, NDX_DONE); if (protocol_version >= 31 && EARLY_DELETE_DONE_MSG()) { if (delete_mode || force_delete || read_batch) write_del_stats(f_out); if (EARLY_DELAY_DONE_MSG()) /* Can't send this before delay */ write_ndx(f_out, NDX_DONE); } /* Read MSG_DONE for the redo phase (and any prior messages). */ while (1) { check_for_finished_files(itemizing, code, 0); if (msgdone_cnt > 1) break; wait_for_receiver(); } /* The receiver has now put every file into place, including any * --delay-updates renames, and the sender is still reading the itemized * output, so the deferred symlinks can be created and reported. */ if (defer_symlinks) create_deferred_symlinks(); if (protocol_version >= 29) { phase++; if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "generate_files phase=%d\n", phase); if (!EARLY_DELAY_DONE_MSG()) { write_ndx(f_out, NDX_DONE); if (protocol_version >= 31 && EARLY_DELETE_DONE_MSG()) write_ndx(f_out, NDX_DONE); } /* Read MSG_DONE for delay-updates phase & prior messages. */ while (msgdone_cnt == 2) wait_for_receiver(); } info_levels[INFO_FLIST] = save_info_flist; info_levels[INFO_PROGRESS] = save_info_progress; if (delete_during == 2) do_delayed_deletions(fbuf); if (delete_after && !solo_file && file_total > 0) do_delete_pass(); if (max_delete >= 0 && skipped_deletes) { rprintf(FWARNING, "Deletions stopped due to --max-delete limit (%s skipped)\n", comma_num(skipped_deletes)); io_error |= IOERR_DEL_LIMIT; } if (protocol_version >= 31) { if (!EARLY_DELETE_DONE_MSG()) { if (delete_mode || force_delete || read_batch) write_del_stats(f_out); write_ndx(f_out, NDX_DONE); } /* Read MSG_DONE for late-delete phase & prior messages. */ while (msgdone_cnt == 3) wait_for_receiver(); } if ((need_retouch_dir_perms || need_retouch_dir_times) && dir_tweaking && (!inc_recurse || delete_during == 2)) touch_up_dirs(dir_flist, -1); if (DEBUG_GTE(GENR, 1)) rprintf(FINFO, "generate_files finished\n"); }