main.c

   1 /*
   2  * The startup routines, including main(), for rsync.
   3  *
   4  * Copyright (C) 1996-2001 Andrew Tridgell <tridge@samba.org>
   5  * Copyright (C) 1996 Paul Mackerras
   6  * Copyright (C) 2001, 2002 Martin Pool <mbp@samba.org>
   7  * Copyright (C) 2003-2020 Wayne Davison
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 3 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  * GNU General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License along
  20  * with this program; if not, visit the http://fsf.org website.
  21  */
  22
  23 #include "rsync.h"
  24 #include "inums.h"
  25 #include "ifuncs.h"
  26 #include "io.h"
  27 #if defined CONFIG_LOCALE && defined HAVE_LOCALE_H
  28 #include <locale.h>
  29 #endif
  30 #include <popt.h>
  31 #ifdef __TANDEM
  32 #include <floss.h(floss_execlp)>
  33 #endif
  34
  35 extern int dry_run;
  36 extern int list_only;
  37 extern int io_timeout;
  38 extern int am_root;
  39 extern int am_server;
  40 extern int am_sender;
  41 extern int am_daemon;
  42 extern int inc_recurse;
  43 extern int blocking_io;
  44 extern int always_checksum;
  45 extern int remove_source_files;
  46 extern int output_needs_newline;
  47 extern int called_from_signal_handler;
  48 extern int need_messages_from_generator;
  49 extern int kluge_around_eof;
  50 extern int got_xfer_error;
  51 extern int msgs2stderr;
  52 extern int module_id;
  53 extern int read_only;
  54 extern int copy_links;
  55 extern int copy_dirlinks;
  56 extern int copy_unsafe_links;
  57 extern int keep_dirlinks;
  58 extern int preserve_hard_links;
  59 extern int protocol_version;
  60 extern int mkpath_dest_arg;
  61 extern int file_total;
  62 extern int recurse;
  63 extern int xfer_dirs;
  64 extern int protect_args;
  65 extern int relative_paths;
  66 extern int sanitize_paths;
  67 extern int curr_dir_depth;
  68 extern int curr_dir_len;
  69 extern int module_id;
  70 extern int rsync_port;
  71 extern int whole_file;
  72 extern int read_batch;
  73 extern int write_batch;
  74 extern int batch_fd;
  75 extern int sock_f_in;
  76 extern int sock_f_out;
  77 extern int filesfrom_fd;
  78 extern int connect_timeout;
  79 extern int send_msgs_to_gen;
  80 extern dev_t filesystem_dev;
  81 extern pid_t cleanup_child_pid;
  82 extern size_t bwlimit_writemax;
  83 extern unsigned int module_dirlen;
  84 extern BOOL flist_receiving_enabled;
  85 extern BOOL want_progress_now;
  86 extern BOOL shutting_down;
  87 extern int backup_dir_len;
  88 extern int basis_dir_cnt;
  89 extern int default_af_hint;
  90 extern struct stats stats;
  91 extern char *stdout_format;
  92 extern char *logfile_format;
  93 extern char *filesfrom_host;
  94 extern char *partial_dir;
  95 extern char *rsync_path;
  96 extern char *shell_cmd;
  97 extern char *password_file;
  98 extern char *backup_dir;
  99 extern char *copy_as;
 100 extern char *tmpdir;
 101 extern char curr_dir[MAXPATHLEN];
 102 extern char backup_dir_buf[MAXPATHLEN];
 103 extern char *basis_dir[MAX_BASIS_DIRS+1];
 104 extern struct file_list *first_flist;
 105 extern filter_rule_list daemon_filter_list;
 106
 107 uid_t our_uid;
 108 gid_t our_gid;
 109 int am_receiver = 0;  /* Only set to 1 after the receiver/generator fork. */
 110 int am_generator = 0; /* Only set to 1 after the receiver/generator fork. */
 111 int local_server = 0;
 112 int daemon_connection = 0; /* 0 = no daemon, 1 = daemon via remote shell, -1 = daemon via socket */
 113 mode_t orig_umask = 0;
 114 int batch_gen_fd = -1;
 115 int sender_keeps_checksum = 0;
 116 int raw_argc, cooked_argc;
 117 char **raw_argv, **cooked_argv;
 118
 119 /* There's probably never more than at most 2 outstanding child processes,
 120  * but set it higher, just in case. */
 121 #define MAXCHILDPROCS 7
 122
 123 #ifdef HAVE_SIGACTION
 124 # ifdef HAVE_SIGPROCMASK
 125 #  define SIGACTMASK(n,h) SIGACTION(n,h), sigaddset(&sigmask,(n))
 126 # else
 127 #  define SIGACTMASK(n,h) SIGACTION(n,h)
 128 # endif
 129 static struct sigaction sigact;
 130 #endif
 131
 132 struct pid_status {
 133         pid_t pid;
 134         int status;
 135 } pid_stat_table[MAXCHILDPROCS];
 136
 137 static time_t starttime, endtime;
 138 static int64 total_read, total_written;
 139
 140 static void show_malloc_stats(void);
 141
 142 /* Works like waitpid(), but if we already harvested the child pid in our
 143  * remember_children(), we succeed instead of returning an error. */
 144 pid_t wait_process(pid_t pid, int *status_ptr, int flags)
 145 {
 146         pid_t waited_pid;
 147
 148         do {
 149                 waited_pid = waitpid(pid, status_ptr, flags);
 150         } while (waited_pid == -1 && errno == EINTR);
 151
 152         if (waited_pid == -1 && errno == ECHILD) {
 153                 /* Status of requested child no longer available:  check to
 154                  * see if it was processed by remember_children(). */
 155                 int cnt;
 156                 for (cnt = 0; cnt < MAXCHILDPROCS; cnt++) {
 157                         if (pid == pid_stat_table[cnt].pid) {
 158                                 *status_ptr = pid_stat_table[cnt].status;
 159                                 pid_stat_table[cnt].pid = 0;
 160                                 return pid;
 161                         }
 162                 }
 163         }
 164
 165         return waited_pid;
 166 }
 167
 168 int shell_exec(const char *cmd)
 169 {
 170         char *shell = getenv("RSYNC_SHELL");
 171         int status;
 172         pid_t pid;
 173
 174         if (!shell)
 175                 return system(cmd);
 176
 177         if ((pid = fork()) < 0)
 178                 return -1;
 179
 180         if (pid == 0) {
 181                 execlp(shell, shell, "-c", cmd, NULL);
 182                 _exit(1);
 183         }
 184
 185         int ret = wait_process(pid, &status, 0);
 186         return ret < 0 ? -1 : status;
 187 }
 188
 189 /* Wait for a process to exit, calling io_flush while waiting. */
 190 static void wait_process_with_flush(pid_t pid, int *exit_code_ptr)
 191 {
 192         pid_t waited_pid;
 193         int status;
 194
 195         while ((waited_pid = wait_process(pid, &status, WNOHANG)) == 0) {
 196                 msleep(20);
 197                 io_flush(FULL_FLUSH);
 198         }
 199
 200         /* TODO: If the child exited on a signal, then log an
 201          * appropriate error message.  Perhaps we should also accept a
 202          * message describing the purpose of the child.  Also indicate
 203          * this to the caller so that they know something went wrong. */
 204         if (waited_pid < 0) {
 205                 rsyserr(FERROR, errno, "waitpid");
 206                 *exit_code_ptr = RERR_WAITCHILD;
 207         } else if (!WIFEXITED(status)) {
 208 #ifdef WCOREDUMP
 209                 if (WCOREDUMP(status))
 210                         *exit_code_ptr = RERR_CRASHED;
 211                 else
 212 #endif
 213                 if (WIFSIGNALED(status))
 214                         *exit_code_ptr = RERR_TERMINATED;
 215                 else
 216                         *exit_code_ptr = RERR_WAITCHILD;
 217         } else
 218                 *exit_code_ptr = WEXITSTATUS(status);
 219 }
 220
 221 void write_del_stats(int f)
 222 {
 223         if (read_batch)
 224                 write_int(f, NDX_DEL_STATS);
 225         else
 226                 write_ndx(f, NDX_DEL_STATS);
 227         write_varint(f, stats.deleted_files - stats.deleted_dirs
 228                       - stats.deleted_symlinks - stats.deleted_devices
 229                       - stats.deleted_specials);
 230         write_varint(f, stats.deleted_dirs);
 231         write_varint(f, stats.deleted_symlinks);
 232         write_varint(f, stats.deleted_devices);
 233         write_varint(f, stats.deleted_specials);
 234 }
 235
 236 void read_del_stats(int f)
 237 {
 238         stats.deleted_files = read_varint(f);
 239         stats.deleted_files += stats.deleted_dirs = read_varint(f);
 240         stats.deleted_files += stats.deleted_symlinks = read_varint(f);
 241         stats.deleted_files += stats.deleted_devices = read_varint(f);
 242         stats.deleted_files += stats.deleted_specials = read_varint(f);
 243 }
 244
 245 static void become_copy_as_user()
 246 {
 247         char *gname;
 248         uid_t uid;
 249         gid_t gid;
 250
 251         if (!copy_as)
 252                 return;
 253
 254         if (DEBUG_GTE(CMD, 2))
 255                 rprintf(FINFO, "[%s] copy_as=%s\n", who_am_i(), copy_as);
 256
 257         if ((gname = strchr(copy_as, ':')) != NULL)
 258                 *gname++ = '\0';
 259
 260         if (!user_to_uid(copy_as, &uid, True)) {
 261                 rprintf(FERROR, "Invalid copy-as user: %s\n", copy_as);
 262                 exit_cleanup(RERR_SYNTAX);
 263         }
 264
 265         if (gname) {
 266                 if (!group_to_gid(gname, &gid, True)) {
 267                         rprintf(FERROR, "Invalid copy-as group: %s\n", gname);
 268                         exit_cleanup(RERR_SYNTAX);
 269                 }
 270         } else {
 271                 struct passwd *pw;
 272                 if ((pw = getpwuid(uid)) == NULL) {
 273                         rsyserr(FERROR, errno, "getpwuid failed");
 274                         exit_cleanup(RERR_SYNTAX);
 275                 }
 276                 gid = pw->pw_gid;
 277         }
 278
 279         if (setgid(gid) < 0) {
 280                 rsyserr(FERROR, errno, "setgid failed");
 281                 exit_cleanup(RERR_SYNTAX);
 282         }
 283 #ifdef HAVE_SETGROUPS
 284         if (setgroups(1, &gid)) {
 285                 rsyserr(FERROR, errno, "setgroups failed");
 286                 exit_cleanup(RERR_SYNTAX);
 287         }
 288 #endif
 289 #ifdef HAVE_INITGROUPS
 290         if (!gname && initgroups(copy_as, gid) < 0) {
 291                 rsyserr(FERROR, errno, "initgroups failed");
 292                 exit_cleanup(RERR_SYNTAX);
 293         }
 294 #endif
 295
 296         if (setuid(uid) < 0
 297 #ifdef HAVE_SETEUID
 298          || seteuid(uid) < 0
 299 #endif
 300         ) {
 301                 rsyserr(FERROR, errno, "setuid failed");
 302                 exit_cleanup(RERR_SYNTAX);
 303         }
 304
 305         our_uid = MY_UID();
 306         our_gid = MY_GID();
 307         am_root = (our_uid == ROOT_UID);
 308
 309         if (gname)
 310                 gname[-1] = ':';
 311 }
 312
 313 /* This function gets called from all 3 processes.  We want the client side
 314  * to actually output the text, but the sender is the only process that has
 315  * all the stats we need.  So, if we're a client sender, we do the report.
 316  * If we're a server sender, we write the stats on the supplied fd.  If
 317  * we're the client receiver we read the stats from the supplied fd and do
 318  * the report.  All processes might also generate a set of debug stats, if
 319  * the verbose level is high enough (this is the only thing that the
 320  * generator process and the server receiver ever do here). */
 321 static void handle_stats(int f)
 322 {
 323         endtime = time(NULL);
 324
 325         /* Cache two stats because the read/write code can change it. */
 326         total_read = stats.total_read;
 327         total_written = stats.total_written;
 328
 329         if (INFO_GTE(STATS, 3)) {
 330                 /* These come out from every process */
 331                 show_malloc_stats();
 332                 show_flist_stats();
 333         }
 334
 335         if (am_generator)
 336                 return;
 337
 338         if (am_daemon) {
 339                 if (f == -1 || !am_sender)
 340                         return;
 341         }
 342
 343         if (am_server) {
 344                 if (am_sender) {
 345                         write_varlong30(f, total_read, 3);
 346                         write_varlong30(f, total_written, 3);
 347                         write_varlong30(f, stats.total_size, 3);
 348                         if (protocol_version >= 29) {
 349                                 write_varlong30(f, stats.flist_buildtime, 3);
 350                                 write_varlong30(f, stats.flist_xfertime, 3);
 351                         }
 352                 }
 353                 return;
 354         }
 355
 356         /* this is the client */
 357
 358         if (f < 0 && !am_sender) /* e.g. when we got an empty file list. */
 359                 ;
 360         else if (!am_sender) {
 361                 /* Read the first two in opposite order because the meaning of
 362                  * read/write swaps when switching from sender to receiver. */
 363                 total_written = read_varlong30(f, 3);
 364                 total_read = read_varlong30(f, 3);
 365                 stats.total_size = read_varlong30(f, 3);
 366                 if (protocol_version >= 29) {
 367                         stats.flist_buildtime = read_varlong30(f, 3);
 368                         stats.flist_xfertime = read_varlong30(f, 3);
 369                 }
 370         } else if (write_batch) {
 371                 /* The --read-batch process is going to be a client
 372                  * receiver, so we need to give it the stats. */
 373                 write_varlong30(batch_fd, total_read, 3);
 374                 write_varlong30(batch_fd, total_written, 3);
 375                 write_varlong30(batch_fd, stats.total_size, 3);
 376                 if (protocol_version >= 29) {
 377                         write_varlong30(batch_fd, stats.flist_buildtime, 3);
 378                         write_varlong30(batch_fd, stats.flist_xfertime, 3);
 379                 }
 380         }
 381 }
 382
 383 static void output_itemized_counts(const char *prefix, int *counts)
 384 {
 385         static char *labels[] = { "reg", "dir", "link", "dev", "special" };
 386         char buf[1024], *pre = " (";
 387         int j, len = 0;
 388         int total = counts[0];
 389         if (total) {
 390                 counts[0] -= counts[1] + counts[2] + counts[3] + counts[4];
 391                 for (j = 0; j < 5; j++) {
 392                         if (counts[j]) {
 393                                 len += snprintf(buf+len, sizeof buf - len - 2,
 394                                         "%s%s: %s",
 395                                         pre, labels[j], comma_num(counts[j]));
 396                                 pre = ", ";
 397                         }
 398                 }
 399                 buf[len++] = ')';
 400         }
 401         buf[len] = '\0';
 402         rprintf(FINFO, "%s: %s%s\n", prefix, comma_num(total), buf);
 403 }
 404
 405 static const char *bytes_per_sec_human_dnum(void)
 406 {
 407         if (starttime == (time_t)-1 || endtime == (time_t)-1)
 408                 return "UNKNOWN";
 409         return human_dnum((total_written + total_read) / (0.5 + (endtime - starttime)), 2);
 410 }
 411
 412 static void output_summary(void)
 413 {
 414         if (INFO_GTE(STATS, 2)) {
 415                 rprintf(FCLIENT, "\n");
 416                 output_itemized_counts("Number of files", &stats.num_files);
 417                 if (protocol_version >= 29)
 418                         output_itemized_counts("Number of created files", &stats.created_files);
 419                 if (protocol_version >= 31)
 420                         output_itemized_counts("Number of deleted files", &stats.deleted_files);
 421                 rprintf(FINFO,"Number of regular files transferred: %s\n",
 422                         comma_num(stats.xferred_files));
 423                 rprintf(FINFO,"Total file size: %s bytes\n",
 424                         human_num(stats.total_size));
 425                 rprintf(FINFO,"Total transferred file size: %s bytes\n",
 426                         human_num(stats.total_transferred_size));
 427                 rprintf(FINFO,"Literal data: %s bytes\n",
 428                         human_num(stats.literal_data));
 429                 rprintf(FINFO,"Matched data: %s bytes\n",
 430                         human_num(stats.matched_data));
 431                 rprintf(FINFO,"File list size: %s\n",
 432                         human_num(stats.flist_size));
 433                 if (stats.flist_buildtime) {
 434                         rprintf(FINFO,
 435                                 "File list generation time: %s seconds\n",
 436                                 comma_dnum((double)stats.flist_buildtime / 1000, 3));
 437                         rprintf(FINFO,
 438                                 "File list transfer time: %s seconds\n",
 439                                 comma_dnum((double)stats.flist_xfertime / 1000, 3));
 440                 }
 441                 rprintf(FINFO,"Total bytes sent: %s\n",
 442                         human_num(total_written));
 443                 rprintf(FINFO,"Total bytes received: %s\n",
 444                         human_num(total_read));
 445         }
 446
 447         if (INFO_GTE(STATS, 1)) {
 448                 rprintf(FCLIENT, "\n");
 449                 rprintf(FINFO,
 450                         "sent %s bytes  received %s bytes  %s bytes/sec\n",
 451                         human_num(total_written), human_num(total_read),
 452                         bytes_per_sec_human_dnum());
 453                 rprintf(FINFO, "total size is %s  speedup is %s%s\n",
 454                         human_num(stats.total_size),
 455                         comma_dnum((double)stats.total_size / (total_written+total_read), 2),
 456                         write_batch < 0 ? " (BATCH ONLY)" : dry_run ? " (DRY RUN)" : "");
 457         }
 458
 459         fflush(stdout);
 460         fflush(stderr);
 461 }
 462
 463
 464 /**
 465  * If our C library can get malloc statistics, then show them to FINFO
 466  **/
 467 static void show_malloc_stats(void)
 468 {
 469 #ifdef HAVE_MALLINFO
 470         struct mallinfo mi;
 471
 472         mi = mallinfo();
 473
 474         rprintf(FCLIENT, "\n");
 475         rprintf(FINFO, RSYNC_NAME "[%d] (%s%s%s) heap statistics:\n",
 476                 (int)getpid(), am_server ? "server " : "",
 477                 am_daemon ? "daemon " : "", who_am_i());
 478         rprintf(FINFO, "  arena:     %10ld   (bytes from sbrk)\n",
 479                 (long)mi.arena);
 480         rprintf(FINFO, "  ordblks:   %10ld   (chunks not in use)\n",
 481                 (long)mi.ordblks);
 482         rprintf(FINFO, "  smblks:    %10ld\n",
 483                 (long)mi.smblks);
 484         rprintf(FINFO, "  hblks:     %10ld   (chunks from mmap)\n",
 485                 (long)mi.hblks);
 486         rprintf(FINFO, "  hblkhd:    %10ld   (bytes from mmap)\n",
 487                 (long)mi.hblkhd);
 488         rprintf(FINFO, "  allmem:    %10ld   (bytes from sbrk + mmap)\n",
 489                 (long)mi.arena + mi.hblkhd);
 490         rprintf(FINFO, "  usmblks:   %10ld\n",
 491                 (long)mi.usmblks);
 492         rprintf(FINFO, "  fsmblks:   %10ld\n",
 493                 (long)mi.fsmblks);
 494         rprintf(FINFO, "  uordblks:  %10ld   (bytes used)\n",
 495                 (long)mi.uordblks);
 496         rprintf(FINFO, "  fordblks:  %10ld   (bytes free)\n",
 497                 (long)mi.fordblks);
 498         rprintf(FINFO, "  keepcost:  %10ld   (bytes in releasable chunk)\n",
 499                 (long)mi.keepcost);
 500 #endif /* HAVE_MALLINFO */
 501 }
 502
 503
 504 /* Start the remote shell.   cmd may be NULL to use the default. */
 505 static pid_t do_cmd(char *cmd, char *machine, char *user, char **remote_argv, int remote_argc,
 506                     int *f_in_p, int *f_out_p)
 507 {
 508         int i, argc = 0;
 509         char *args[MAX_ARGS], *need_to_free = NULL;
 510         pid_t pid;
 511         int dash_l_set = 0;
 512
 513         if (!read_batch && !local_server) {
 514                 char *t, *f, in_quote = '\0';
 515                 char *rsh_env = getenv(RSYNC_RSH_ENV);
 516                 if (!cmd)
 517                         cmd = rsh_env;
 518                 if (!cmd)
 519                         cmd = RSYNC_RSH;
 520                 cmd = need_to_free = strdup(cmd);
 521
 522                 for (t = f = cmd; *f; f++) {
 523                         if (*f == ' ')
 524                                 continue;
 525                         /* Comparison leaves rooms for server_options(). */
 526                         if (argc >= MAX_ARGS - MAX_SERVER_ARGS)
 527                                 goto arg_overflow;
 528                         args[argc++] = t;
 529                         while (*f != ' ' || in_quote) {
 530                                 if (!*f) {
 531                                         if (in_quote) {
 532                                                 rprintf(FERROR,
 533                                                         "Missing trailing-%c in remote-shell command.\n",
 534                                                         in_quote);
 535                                                 exit_cleanup(RERR_SYNTAX);
 536                                         }
 537                                         f--;
 538                                         break;
 539                                 }
 540                                 if (*f == '\'' || *f == '"') {
 541                                         if (!in_quote) {
 542                                                 in_quote = *f++;
 543                                                 continue;
 544                                         }
 545                                         if (*f == in_quote && *++f != in_quote) {
 546                                                 in_quote = '\0';
 547                                                 continue;
 548                                         }
 549                                 }
 550                                 *t++ = *f++;
 551                         }
 552                         *t++ = '\0';
 553                 }
 554
 555                 /* NOTE: must preserve t == start of command name until the end of the args handling! */
 556                 if ((t = strrchr(cmd, '/')) != NULL)
 557                         t++;
 558                 else
 559                         t = cmd;
 560
 561                 /* Check to see if we've already been given '-l user' in the remote-shell command. */
 562                 for (i = 0; i < argc-1; i++) {
 563                         if (!strcmp(args[i], "-l") && args[i+1][0] != '-')
 564                                 dash_l_set = 1;
 565                 }
 566
 567 #ifdef HAVE_REMSH
 568                 /* remsh (on HPUX) takes the arguments the other way around */
 569                 args[argc++] = machine;
 570                 if (user && !(daemon_connection && dash_l_set)) {
 571                         args[argc++] = "-l";
 572                         args[argc++] = user;
 573                 }
 574 #else
 575                 if (user && !(daemon_connection && dash_l_set)) {
 576                         args[argc++] = "-l";
 577                         args[argc++] = user;
 578                 }
 579 #ifdef AF_INET
 580                 if (default_af_hint == AF_INET && strcmp(t, "ssh") == 0)
 581                         args[argc++] = "-4"; /* we're using ssh so we can add a -4 option */
 582 #endif
 583 #ifdef AF_INET6
 584                 if (default_af_hint == AF_INET6 && strcmp(t, "ssh") == 0)
 585                         args[argc++] = "-6"; /* we're using ssh so we can add a -6 option */
 586 #endif
 587                 args[argc++] = machine;
 588 #endif
 589
 590                 args[argc++] = rsync_path;
 591
 592                 if (blocking_io < 0 && (strcmp(t, "rsh") == 0 || strcmp(t, "remsh") == 0))
 593                         blocking_io = 1;
 594
 595                 if (daemon_connection > 0) {
 596                         args[argc++] = "--server";
 597                         args[argc++] = "--daemon";
 598                 } else
 599                         server_options(args, &argc);
 600
 601                 if (argc >= MAX_ARGS - 2)
 602                         goto arg_overflow;
 603         }
 604
 605         args[argc++] = ".";
 606
 607         if (!daemon_connection) {
 608                 while (remote_argc > 0) {
 609                         if (argc >= MAX_ARGS - 1) {
 610                           arg_overflow:
 611                                 rprintf(FERROR, "internal: args[] overflowed in do_cmd()\n");
 612                                 exit_cleanup(RERR_SYNTAX);
 613                         }
 614                         if (**remote_argv == '-') {
 615                                 if (asprintf(args + argc++, "./%s", *remote_argv++) < 0)
 616                                         out_of_memory("do_cmd");
 617                         } else
 618                                 args[argc++] = *remote_argv++;
 619                         remote_argc--;
 620                 }
 621         }
 622
 623         args[argc] = NULL;
 624
 625         if (DEBUG_GTE(CMD, 2)) {
 626                 for (i = 0; i < argc; i++)
 627                         rprintf(FCLIENT, "cmd[%d]=%s ", i, args[i]);
 628                 rprintf(FCLIENT, "\n");
 629         }
 630
 631         if (read_batch) {
 632                 int from_gen_pipe[2];
 633                 set_allow_inc_recurse();
 634                 if (fd_pair(from_gen_pipe) < 0) {
 635                         rsyserr(FERROR, errno, "pipe");
 636                         exit_cleanup(RERR_IPC);
 637                 }
 638                 batch_gen_fd = from_gen_pipe[0];
 639                 *f_out_p = from_gen_pipe[1];
 640                 *f_in_p = batch_fd;
 641                 pid = (pid_t)-1; /* no child pid */
 642 #ifdef ICONV_CONST
 643                 setup_iconv();
 644 #endif
 645         } else if (local_server) {
 646                 /* If the user didn't request --[no-]whole-file, force
 647                  * it on, but only if we're not batch processing. */
 648                 if (whole_file < 0 && !write_batch)
 649                         whole_file = 1;
 650                 set_allow_inc_recurse();
 651                 pid = local_child(argc, args, f_in_p, f_out_p, child_main);
 652 #ifdef ICONV_CONST
 653                 setup_iconv();
 654 #endif
 655         } else {
 656                 pid = piped_child(args, f_in_p, f_out_p);
 657 #ifdef ICONV_CONST
 658                 setup_iconv();
 659 #endif
 660                 if (protect_args && !daemon_connection)
 661                         send_protected_args(*f_out_p, args);
 662         }
 663
 664         if (need_to_free)
 665                 free(need_to_free);
 666
 667         return pid;
 668 }
 669
 670 /* The receiving side operates in one of two modes:
 671  *
 672  * 1. it receives any number of files into a destination directory,
 673  * placing them according to their names in the file-list.
 674  *
 675  * 2. it receives a single file and saves it using the name in the
 676  * destination path instead of its file-list name.  This requires a
 677  * "local name" for writing out the destination file.
 678  *
 679  * So, our task is to figure out what mode/local-name we need.
 680  * For mode 1, we change into the destination directory and return NULL.
 681  * For mode 2, we change into the directory containing the destination
 682  * file (if we aren't already there) and return the local-name. */
 683 static char *get_local_name(struct file_list *flist, char *dest_path)
 684 {
 685         STRUCT_STAT st;
 686         int statret, trailing_slash;
 687         char *cp;
 688
 689         if (DEBUG_GTE(RECV, 1)) {
 690                 rprintf(FINFO, "get_local_name count=%d %s\n",
 691                         file_total, NS(dest_path));
 692         }
 693
 694         if (!dest_path || list_only)
 695                 return NULL;
 696
 697         /* Treat an empty string as a copy into the current directory. */
 698         if (!*dest_path)
 699                 dest_path = ".";
 700
 701         if (daemon_filter_list.head) {
 702                 char *slash = strrchr(dest_path, '/');
 703                 if (slash && (slash[1] == '\0' || (slash[1] == '.' && slash[2] == '\0')))
 704                         *slash = '\0';
 705                 else
 706                         slash = NULL;
 707                 if ((*dest_path != '.' || dest_path[1] != '\0')
 708                  && (check_filter(&daemon_filter_list, FLOG, dest_path, 0) < 0
 709                   || check_filter(&daemon_filter_list, FLOG, dest_path, 1) < 0)) {
 710                         rprintf(FERROR, "ERROR: daemon has excluded destination \"%s\"\n",
 711                                 dest_path);
 712                         exit_cleanup(RERR_FILESELECT);
 713                 }
 714                 if (slash)
 715                         *slash = '/';
 716         }
 717
 718         /* See what currently exists at the destination. */
 719         statret = do_stat(dest_path, &st);
 720         cp = strrchr(dest_path, '/');
 721         trailing_slash = cp && !cp[1];
 722
 723         if (mkpath_dest_arg && statret < 0 && (cp || file_total > 1)) {
 724                 int save_errno = errno;
 725                 int ret = make_path(dest_path, file_total > 1 && !trailing_slash ? 0 : MKP_DROP_NAME);
 726                 if (ret < 0)
 727                         goto mkdir_error;
 728                 if (ret && INFO_GTE(NAME, 1)) {
 729                         if (file_total == 1 || trailing_slash)
 730                                 *cp = '\0';
 731                         rprintf(FINFO, "created %d director%s for %s\n", ret, ret == 1 ? "y" : "ies", dest_path);
 732                         if (file_total == 1 || trailing_slash)
 733                                 *cp = '/';
 734                 }
 735                 if (ret)
 736                         statret = do_stat(dest_path, &st);
 737                 else
 738                         errno = save_errno;
 739         }
 740
 741         if (statret == 0) {
 742                 /* If the destination is a dir, enter it and use mode 1. */
 743                 if (S_ISDIR(st.st_mode)) {
 744                         if (!change_dir(dest_path, CD_NORMAL)) {
 745                                 rsyserr(FERROR, errno, "change_dir#1 %s failed",
 746                                         full_fname(dest_path));
 747                                 exit_cleanup(RERR_FILESELECT);
 748                         }
 749                         filesystem_dev = st.st_dev; /* ensures --force works right w/-x */
 750                         return NULL;
 751                 }
 752                 if (file_total > 1) {
 753                         rprintf(FERROR,
 754                                 "ERROR: destination must be a directory when"
 755                                 " copying more than 1 file\n");
 756                         exit_cleanup(RERR_FILESELECT);
 757                 }
 758                 if (file_total == 1 && S_ISDIR(flist->files[0]->mode)) {
 759                         rprintf(FERROR,
 760                                 "ERROR: cannot overwrite non-directory"
 761                                 " with a directory\n");
 762                         exit_cleanup(RERR_FILESELECT);
 763                 }
 764         } else if (errno != ENOENT) {
 765                 /* If we don't know what's at the destination, fail. */
 766                 rsyserr(FERROR, errno, "ERROR: cannot stat destination %s",
 767                         full_fname(dest_path));
 768                 exit_cleanup(RERR_FILESELECT);
 769         }
 770
 771         /* If we need a destination directory because the transfer is not
 772          * of a single non-directory or the user has requested one via a
 773          * destination path ending in a slash, create one and use mode 1. */
 774         if (file_total > 1 || trailing_slash) {
 775                 if (trailing_slash)
 776                         *cp = '\0'; /* Lop off the final slash (if any). */
 777
 778                 if (statret == 0) {
 779                         rprintf(FERROR, "ERROR: destination path is not a directory\n");
 780                         exit_cleanup(RERR_SYNTAX);
 781                 }
 782
 783                 if (do_mkdir(dest_path, ACCESSPERMS) != 0) {
 784                     mkdir_error:
 785                         rsyserr(FERROR, errno, "mkdir %s failed",
 786                                 full_fname(dest_path));
 787                         exit_cleanup(RERR_FILEIO);
 788                 }
 789
 790                 if (flist->high >= flist->low
 791                  && strcmp(flist->files[flist->low]->basename, ".") == 0)
 792                         flist->files[0]->flags |= FLAG_DIR_CREATED;
 793
 794                 if (INFO_GTE(NAME, 1))
 795                         rprintf(FINFO, "created directory %s\n", dest_path);
 796
 797                 if (dry_run) {
 798                         /* Indicate that dest dir doesn't really exist. */
 799                         dry_run++;
 800                 }
 801
 802                 if (!change_dir(dest_path, dry_run > 1 ? CD_SKIP_CHDIR : CD_NORMAL)) {
 803                         rsyserr(FERROR, errno, "change_dir#2 %s failed",
 804                                 full_fname(dest_path));
 805                         exit_cleanup(RERR_FILESELECT);
 806                 }
 807
 808                 return NULL;
 809         }
 810
 811         /* Otherwise, we are writing a single file, possibly on top of an
 812          * existing non-directory.  Change to the item's parent directory
 813          * (if it has a path component), return the basename of the
 814          * destination file as the local name, and use mode 2. */
 815         if (!cp)
 816                 return dest_path;
 817
 818         if (cp == dest_path)
 819                 dest_path = "/";
 820
 821         *cp = '\0';
 822         if (!change_dir(dest_path, CD_NORMAL)) {
 823                 rsyserr(FERROR, errno, "change_dir#3 %s failed",
 824                         full_fname(dest_path));
 825                 exit_cleanup(RERR_FILESELECT);
 826         }
 827         *cp = '/';
 828
 829         return cp + 1;
 830 }
 831
 832 /* This function checks on our alternate-basis directories.  If we're in
 833  * dry-run mode and the destination dir does not yet exist, we'll try to
 834  * tweak any dest-relative paths to make them work for a dry-run (the
 835  * destination dir must be in curr_dir[] when this function is called).
 836  * We also warn about any arg that is non-existent or not a directory. */
 837 static void check_alt_basis_dirs(void)
 838 {
 839         STRUCT_STAT st;
 840         char *slash = strrchr(curr_dir, '/');
 841         int j;
 842
 843         for (j = 0; j < basis_dir_cnt; j++) {
 844                 char *bdir = basis_dir[j];
 845                 int bd_len = strlen(bdir);
 846                 if (bd_len > 1 && bdir[bd_len-1] == '/')
 847                         bdir[--bd_len] = '\0';
 848                 if (dry_run > 1 && *bdir != '/') {
 849                         int len = curr_dir_len + 1 + bd_len + 1;
 850                         char *new = new_array(char, len);
 851                         if (slash && strncmp(bdir, "../", 3) == 0) {
 852                                 /* We want to remove only one leading "../" prefix for
 853                                  * the directory we couldn't create in dry-run mode:
 854                                  * this ensures that any other ".." references get
 855                                  * evaluated the same as they would for a live copy. */
 856                                 *slash = '\0';
 857                                 pathjoin(new, len, curr_dir, bdir + 3);
 858                                 *slash = '/';
 859                         } else
 860                                 pathjoin(new, len, curr_dir, bdir);
 861                         basis_dir[j] = bdir = new;
 862                 }
 863                 if (do_stat(bdir, &st) < 0)
 864                         rprintf(FWARNING, "%s arg does not exist: %s\n", alt_dest_opt(0), bdir);
 865                 else if (!S_ISDIR(st.st_mode))
 866                         rprintf(FWARNING, "%s arg is not a dir: %s\n", alt_dest_opt(0), bdir);
 867         }
 868 }
 869
 870 /* This is only called by the sender. */
 871 static void read_final_goodbye(int f_in, int f_out)
 872 {
 873         int i, iflags, xlen;
 874         uchar fnamecmp_type;
 875         char xname[MAXPATHLEN];
 876
 877         shutting_down = True;
 878
 879         if (protocol_version < 29)
 880                 i = read_int(f_in);
 881         else {
 882                 i = read_ndx_and_attrs(f_in, f_out, &iflags, &fnamecmp_type, xname, &xlen);
 883                 if (protocol_version >= 31 && i == NDX_DONE) {
 884                         if (am_sender)
 885                                 write_ndx(f_out, NDX_DONE);
 886                         else {
 887                                 if (batch_gen_fd >= 0) {
 888                                         while (read_int(batch_gen_fd) != NDX_DEL_STATS) {}
 889                                         read_del_stats(batch_gen_fd);
 890                                 }
 891                                 write_int(f_out, NDX_DONE);
 892                         }
 893                         i = read_ndx_and_attrs(f_in, f_out, &iflags, &fnamecmp_type, xname, &xlen);
 894                 }
 895         }
 896
 897         if (i != NDX_DONE) {
 898                 rprintf(FERROR, "Invalid packet at end of run (%d) [%s]\n",
 899                         i, who_am_i());
 900                 exit_cleanup(RERR_PROTOCOL);
 901         }
 902 }
 903
 904 static void do_server_sender(int f_in, int f_out, int argc, char *argv[])
 905 {
 906         struct file_list *flist;
 907         char *dir;
 908
 909         if (DEBUG_GTE(SEND, 1))
 910                 rprintf(FINFO, "server_sender starting pid=%d\n", (int)getpid());
 911
 912         if (am_daemon && lp_write_only(module_id)) {
 913                 rprintf(FERROR, "ERROR: module is write only\n");
 914                 exit_cleanup(RERR_SYNTAX);
 915         }
 916         if (am_daemon && read_only && remove_source_files) {
 917                 rprintf(FERROR,
 918                         "ERROR: --remove-%s-files cannot be used with a read-only module\n",
 919                         remove_source_files == 1 ? "source" : "sent");
 920                 exit_cleanup(RERR_SYNTAX);
 921         }
 922         if (argc < 1) {
 923                 rprintf(FERROR, "ERROR: do_server_sender called without args\n");
 924                 exit_cleanup(RERR_SYNTAX);
 925         }
 926
 927         become_copy_as_user();
 928
 929         dir = argv[0];
 930         if (!relative_paths) {
 931                 if (!change_dir(dir, CD_NORMAL)) {
 932                         rsyserr(FERROR, errno, "change_dir#3 %s failed",
 933                                 full_fname(dir));
 934                         exit_cleanup(RERR_FILESELECT);
 935                 }
 936         }
 937         argc--;
 938         argv++;
 939
 940         if (argc == 0 && (recurse || xfer_dirs || list_only)) {
 941                 argc = 1;
 942                 argv--;
 943                 argv[0] = ".";
 944         }
 945
 946         flist = send_file_list(f_out,argc,argv);
 947         if (!flist || flist->used == 0) {
 948                 /* Make sure input buffering is off so we can't hang in noop_io_until_death(). */
 949                 io_end_buffering_in(0);
 950                 /* TODO:  we should really exit in a more controlled manner. */
 951                 exit_cleanup(0);
 952         }
 953
 954         io_start_buffering_in(f_in);
 955
 956         send_files(f_in, f_out);
 957         io_flush(FULL_FLUSH);
 958         handle_stats(f_out);
 959         if (protocol_version >= 24)
 960                 read_final_goodbye(f_in, f_out);
 961         io_flush(FULL_FLUSH);
 962         exit_cleanup(0);
 963 }
 964
 965
 966 static int do_recv(int f_in, int f_out, char *local_name)
 967 {
 968         int pid;
 969         int exit_code = 0;
 970         int error_pipe[2];
 971
 972         /* The receiving side mustn't obey this, or an existing symlink that
 973          * points to an identical file won't be replaced by the referent. */
 974         copy_links = copy_dirlinks = copy_unsafe_links = 0;
 975
 976 #ifdef SUPPORT_HARD_LINKS
 977         if (preserve_hard_links && !inc_recurse)
 978                 match_hard_links(first_flist);
 979 #endif
 980
 981         if (fd_pair(error_pipe) < 0) {
 982                 rsyserr(FERROR, errno, "pipe failed in do_recv");
 983                 exit_cleanup(RERR_IPC);
 984         }
 985
 986         if (backup_dir) {
 987                 STRUCT_STAT st;
 988                 int ret;
 989                 if (backup_dir_len > 1)
 990                         backup_dir_buf[backup_dir_len-1] = '\0';
 991                 ret = do_stat(backup_dir_buf, &st);
 992                 if (ret != 0 || !S_ISDIR(st.st_mode)) {
 993                         if (ret == 0) {
 994                                 rprintf(FERROR, "The backup-dir is not a directory: %s\n", backup_dir_buf);
 995                                 exit_cleanup(RERR_SYNTAX);
 996                         }
 997                         if (errno != ENOENT) {
 998                                 rprintf(FERROR, "Failed to stat %s: %s\n", backup_dir_buf, strerror(errno));
 999                                 exit_cleanup(RERR_FILEIO);
1000                         }
1001                         if (INFO_GTE(BACKUP, 1))
1002                                 rprintf(FINFO, "(new) backup_dir is %s\n", backup_dir_buf);
1003                 } else if (INFO_GTE(BACKUP, 1))
1004                         rprintf(FINFO, "backup_dir is %s\n", backup_dir_buf);
1005                 if (backup_dir_len > 1)
1006                         backup_dir_buf[backup_dir_len-1] = '/';
1007         }
1008
1009         if (tmpdir) {
1010                 STRUCT_STAT st;
1011                 int ret = do_stat(tmpdir, &st);
1012                 if (ret < 0 || !S_ISDIR(st.st_mode)) {
1013                         if (ret == 0) {
1014                                 rprintf(FERROR, "The temp-dir is not a directory: %s\n", tmpdir);
1015                                 exit_cleanup(RERR_SYNTAX);
1016                         }
1017                         if (errno == ENOENT) {
1018                                 rprintf(FERROR, "The temp-dir does not exist: %s\n", tmpdir);
1019                                 exit_cleanup(RERR_SYNTAX);
1020                         }
1021                         rprintf(FERROR, "Failed to stat temp-dir %s: %s\n", tmpdir, strerror(errno));
1022                         exit_cleanup(RERR_FILEIO);
1023                 }
1024         }
1025
1026         io_flush(FULL_FLUSH);
1027
1028         if ((pid = do_fork()) == -1) {
1029                 rsyserr(FERROR, errno, "fork failed in do_recv");
1030                 exit_cleanup(RERR_IPC);
1031         }
1032
1033         if (pid == 0) {
1034                 am_receiver = 1;
1035                 send_msgs_to_gen = am_server;
1036
1037                 close(error_pipe[0]);
1038
1039                 /* We can't let two processes write to the socket at one time. */
1040                 io_end_multiplex_out(MPLX_SWITCHING);
1041                 if (f_in != f_out)
1042                         close(f_out);
1043                 sock_f_out = -1;
1044                 f_out = error_pipe[1];
1045
1046                 bwlimit_writemax = 0; /* receiver doesn't need to do this */
1047
1048                 if (read_batch)
1049                         io_start_buffering_in(f_in);
1050                 io_start_multiplex_out(f_out);
1051
1052                 recv_files(f_in, f_out, local_name);
1053                 io_flush(FULL_FLUSH);
1054                 handle_stats(f_in);
1055
1056                 if (output_needs_newline) {
1057                         fputc('\n', stdout);
1058                         output_needs_newline = 0;
1059                 }
1060
1061                 write_int(f_out, NDX_DONE);
1062                 send_msg(MSG_STATS, (char*)&stats.total_read, sizeof stats.total_read, 0);
1063                 io_flush(FULL_FLUSH);
1064
1065                 /* Handle any keep-alive packets from the post-processing work
1066                  * that the generator does. */
1067                 if (protocol_version >= 29) {
1068                         kluge_around_eof = -1;
1069
1070                         /* This should only get stopped via a USR2 signal. */
1071                         read_final_goodbye(f_in, f_out);
1072
1073                         rprintf(FERROR, "Invalid packet at end of run [%s]\n",
1074                                 who_am_i());
1075                         exit_cleanup(RERR_PROTOCOL);
1076                 }
1077
1078                 /* Finally, we go to sleep until our parent kills us with a
1079                  * USR2 signal.  We sleep for a short time, as on some OSes
1080                  * a signal won't interrupt a sleep! */
1081                 while (1)
1082                         msleep(20);
1083         }
1084
1085         am_generator = 1;
1086         flist_receiving_enabled = True;
1087
1088         io_end_multiplex_in(MPLX_SWITCHING);
1089         if (write_batch && !am_server)
1090                 stop_write_batch();
1091
1092         close(error_pipe[1]);
1093         if (f_in != f_out)
1094                 close(f_in);
1095         sock_f_in = -1;
1096         f_in = error_pipe[0];
1097
1098         io_start_buffering_out(f_out);
1099         io_start_multiplex_in(f_in);
1100
1101 #ifdef SUPPORT_HARD_LINKS
1102         if (preserve_hard_links && inc_recurse) {
1103                 struct file_list *flist;
1104                 for (flist = first_flist; flist; flist = flist->next)
1105                         match_hard_links(flist);
1106         }
1107 #endif
1108
1109         generate_files(f_out, local_name);
1110
1111         handle_stats(-1);
1112         io_flush(FULL_FLUSH);
1113         shutting_down = True;
1114         if (protocol_version >= 24) {
1115                 /* send a final goodbye message */
1116                 write_ndx(f_out, NDX_DONE);
1117         }
1118         io_flush(FULL_FLUSH);
1119
1120         kill(pid, SIGUSR2);
1121         wait_process_with_flush(pid, &exit_code);
1122         return exit_code;
1123 }
1124
1125 static void do_server_recv(int f_in, int f_out, int argc, char *argv[])
1126 {
1127         int exit_code;
1128         struct file_list *flist;
1129         char *local_name = NULL;
1130         int negated_levels;
1131
1132         if (filesfrom_fd >= 0 && msgs2stderr != 1 && protocol_version < 31) {
1133                 /* We can't mix messages with files-from data on the socket,
1134                  * so temporarily turn off info/debug messages. */
1135                 negate_output_levels();
1136                 negated_levels = 1;
1137         } else
1138                 negated_levels = 0;
1139
1140         if (DEBUG_GTE(RECV, 1))
1141                 rprintf(FINFO, "server_recv(%d) starting pid=%d\n", argc, (int)getpid());
1142
1143         if (am_daemon && read_only) {
1144                 rprintf(FERROR,"ERROR: module is read only\n");
1145                 exit_cleanup(RERR_SYNTAX);
1146                 return;
1147         }
1148
1149         become_copy_as_user();
1150
1151         if (argc > 0) {
1152                 char *dir = argv[0];
1153                 argc--;
1154                 argv++;
1155                 if (!am_daemon && !change_dir(dir, CD_NORMAL)) {
1156                         rsyserr(FERROR, errno, "change_dir#4 %s failed",
1157                                 full_fname(dir));
1158                         exit_cleanup(RERR_FILESELECT);
1159                 }
1160         }
1161
1162         if (protocol_version >= 30)
1163                 io_start_multiplex_in(f_in);
1164         else
1165                 io_start_buffering_in(f_in);
1166         recv_filter_list(f_in);
1167
1168         if (filesfrom_fd >= 0) {
1169                 /* We need to send the files-from names to the sender at the
1170                  * same time that we receive the file-list from them, so we
1171                  * need the IO routines to automatically write out the names
1172                  * onto our f_out socket as we read the file-list.  This
1173                  * avoids both deadlock and extra delays/buffers. */
1174                 start_filesfrom_forwarding(filesfrom_fd);
1175                 filesfrom_fd = -1;
1176         }
1177
1178         flist = recv_file_list(f_in, -1);
1179         if (!flist) {
1180                 rprintf(FERROR,"server_recv: recv_file_list error\n");
1181                 exit_cleanup(RERR_FILESELECT);
1182         }
1183         if (inc_recurse && file_total == 1)
1184                 recv_additional_file_list(f_in);
1185
1186         if (negated_levels)
1187                 negate_output_levels();
1188
1189         if (argc > 0)
1190                 local_name = get_local_name(flist,argv[0]);
1191
1192         /* Now that we know what our destination directory turned out to be,
1193          * we can sanitize the --link-/copy-/compare-dest args correctly. */
1194         if (sanitize_paths) {
1195                 char **dir_p;
1196                 for (dir_p = basis_dir; *dir_p; dir_p++)
1197                         *dir_p = sanitize_path(NULL, *dir_p, NULL, curr_dir_depth, SP_DEFAULT);
1198                 if (partial_dir)
1199                         partial_dir = sanitize_path(NULL, partial_dir, NULL, curr_dir_depth, SP_DEFAULT);
1200         }
1201         check_alt_basis_dirs();
1202
1203         if (daemon_filter_list.head) {
1204                 char **dir_p;
1205                 filter_rule_list *elp = &daemon_filter_list;
1206
1207                 for (dir_p = basis_dir; *dir_p; dir_p++) {
1208                         char *dir = *dir_p;
1209                         if (*dir == '/')
1210                                 dir += module_dirlen;
1211                         if (check_filter(elp, FLOG, dir, 1) < 0)
1212                                 goto options_rejected;
1213                 }
1214                 if (partial_dir && *partial_dir == '/'
1215                  && check_filter(elp, FLOG, partial_dir + module_dirlen, 1) < 0) {
1216                     options_rejected:
1217                         rprintf(FERROR, "Your options have been rejected by the server.\n");
1218                         exit_cleanup(RERR_SYNTAX);
1219                 }
1220         }
1221
1222         exit_code = do_recv(f_in, f_out, local_name);
1223         exit_cleanup(exit_code);
1224 }
1225
1226
1227 int child_main(int argc, char *argv[])
1228 {
1229         start_server(STDIN_FILENO, STDOUT_FILENO, argc, argv);
1230         return 0;
1231 }
1232
1233
1234 void start_server(int f_in, int f_out, int argc, char *argv[])
1235 {
1236         set_nonblocking(f_in);
1237         set_nonblocking(f_out);
1238
1239         io_set_sock_fds(f_in, f_out);
1240         setup_protocol(f_out, f_in);
1241
1242         if (protocol_version >= 23)
1243                 io_start_multiplex_out(f_out);
1244         if (am_daemon && io_timeout && protocol_version >= 31)
1245                 send_msg_int(MSG_IO_TIMEOUT, io_timeout);
1246
1247         if (am_sender) {
1248                 keep_dirlinks = 0; /* Must be disabled on the sender. */
1249                 if (need_messages_from_generator)
1250                         io_start_multiplex_in(f_in);
1251                 else
1252                         io_start_buffering_in(f_in);
1253                 recv_filter_list(f_in);
1254                 do_server_sender(f_in, f_out, argc, argv);
1255         } else
1256                 do_server_recv(f_in, f_out, argc, argv);
1257         exit_cleanup(0);
1258 }
1259
1260 /* This is called once the connection has been negotiated.  It is used
1261  * for rsyncd, remote-shell, and local connections. */
1262 int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
1263 {
1264         struct file_list *flist = NULL;
1265         int exit_code = 0, exit_code2 = 0;
1266         char *local_name = NULL;
1267
1268         cleanup_child_pid = pid;
1269         if (!read_batch) {
1270                 set_nonblocking(f_in);
1271                 set_nonblocking(f_out);
1272         }
1273
1274         io_set_sock_fds(f_in, f_out);
1275         setup_protocol(f_out,f_in);
1276
1277         /* We set our stderr file handle to blocking because ssh might have
1278          * set it to non-blocking.  This can be particularly troublesome if
1279          * stderr is a clone of stdout, because ssh would have set our stdout
1280          * to non-blocking at the same time (which can easily cause us to lose
1281          * output from our print statements).  This kluge shouldn't cause ssh
1282          * any problems for how we use it.  Note also that we delayed setting
1283          * this until after the above protocol setup so that we know for sure
1284          * that ssh is done twiddling its file descriptors.  */
1285         set_blocking(STDERR_FILENO);
1286
1287         if (am_sender) {
1288                 keep_dirlinks = 0; /* Must be disabled on the sender. */
1289
1290                 if (always_checksum
1291                  && (log_format_has(stdout_format, 'C')
1292                   || log_format_has(logfile_format, 'C')))
1293                         sender_keeps_checksum = 1;
1294
1295                 if (protocol_version >= 30)
1296                         io_start_multiplex_out(f_out);
1297                 else
1298                         io_start_buffering_out(f_out);
1299                 if (protocol_version >= 31 || (!filesfrom_host && protocol_version >= 23))
1300                         io_start_multiplex_in(f_in);
1301                 else
1302                         io_start_buffering_in(f_in);
1303                 send_filter_list(f_out);
1304                 if (filesfrom_host)
1305                         filesfrom_fd = f_in;
1306
1307                 if (write_batch && !am_server)
1308                         start_write_batch(f_out);
1309
1310                 become_copy_as_user();
1311
1312                 flist = send_file_list(f_out, argc, argv);
1313                 if (DEBUG_GTE(FLIST, 3))
1314                         rprintf(FINFO,"file list sent\n");
1315
1316                 if (protocol_version < 31 && filesfrom_host && protocol_version >= 23)
1317                         io_start_multiplex_in(f_in);
1318
1319                 io_flush(NORMAL_FLUSH);
1320                 send_files(f_in, f_out);
1321                 io_flush(FULL_FLUSH);
1322                 handle_stats(-1);
1323                 if (protocol_version >= 24)
1324                         read_final_goodbye(f_in, f_out);
1325                 if (pid != -1) {
1326                         if (DEBUG_GTE(EXIT, 2))
1327                                 rprintf(FINFO,"client_run waiting on %d\n", (int) pid);
1328                         io_flush(FULL_FLUSH);
1329                         wait_process_with_flush(pid, &exit_code);
1330                 }
1331                 output_summary();
1332                 io_flush(FULL_FLUSH);
1333                 exit_cleanup(exit_code);
1334         }
1335
1336         if (!read_batch) {
1337                 if (protocol_version >= 23)
1338                         io_start_multiplex_in(f_in);
1339                 if (need_messages_from_generator)
1340                         io_start_multiplex_out(f_out);
1341                 else
1342                         io_start_buffering_out(f_out);
1343         }
1344
1345         become_copy_as_user();
1346
1347         send_filter_list(read_batch ? -1 : f_out);
1348
1349         if (filesfrom_fd >= 0) {
1350                 start_filesfrom_forwarding(filesfrom_fd);
1351                 filesfrom_fd = -1;
1352         }
1353
1354         if (write_batch && !am_server)
1355                 start_write_batch(f_in);
1356         flist = recv_file_list(f_in, -1);
1357         if (inc_recurse && file_total == 1)
1358                 recv_additional_file_list(f_in);
1359
1360         if (flist && flist->used > 0) {
1361                 local_name = get_local_name(flist, argv[0]);
1362
1363                 check_alt_basis_dirs();
1364
1365                 exit_code2 = do_recv(f_in, f_out, local_name);
1366         } else {
1367                 handle_stats(-1);
1368                 output_summary();
1369         }
1370
1371         if (pid != -1) {
1372                 if (DEBUG_GTE(RECV, 1))
1373                         rprintf(FINFO,"client_run2 waiting on %d\n", (int) pid);
1374                 io_flush(FULL_FLUSH);
1375                 wait_process_with_flush(pid, &exit_code);
1376         }
1377
1378         return MAX(exit_code, exit_code2);
1379 }
1380
1381 static void dup_argv(char *argv[])
1382 {
1383         int i;
1384
1385         for (i = 0; argv[i]; i++)
1386                 argv[i] = strdup(argv[i]);
1387 }
1388
1389
1390 /* Start a client for either type of remote connection.  Work out
1391  * whether the arguments request a remote shell or rsyncd connection,
1392  * and call the appropriate connection function, then run_client.
1393  *
1394  * Calls either start_socket_client (for sockets) or do_cmd and
1395  * client_run (for ssh). */
1396 static int start_client(int argc, char *argv[])
1397 {
1398         char *p, *shell_machine = NULL, *shell_user = NULL;
1399         char **remote_argv;
1400         int remote_argc, env_port = rsync_port;
1401         int f_in, f_out;
1402         int ret;
1403         pid_t pid;
1404
1405         /* Don't clobber argv[] so that ps(1) can still show the right
1406          * command line. */
1407         dup_argv(argv);
1408
1409         if (!read_batch) { /* for read_batch, NO source is specified */
1410                 char *path = check_for_hostspec(argv[0], &shell_machine, &rsync_port);
1411                 if (path) { /* source is remote */
1412                         char *dummy_host;
1413                         int dummy_port = 0;
1414                         *argv = path;
1415                         remote_argv = argv;
1416                         remote_argc = argc;
1417                         argv += argc - 1;
1418                         if (argc == 1 || **argv == ':')
1419                                 argc = 0; /* no dest arg */
1420                         else if (check_for_hostspec(*argv, &dummy_host, &dummy_port)) {
1421                                 rprintf(FERROR,
1422                                         "The source and destination cannot both be remote.\n");
1423                                 exit_cleanup(RERR_SYNTAX);
1424                         } else {
1425                                 remote_argc--; /* don't count dest */
1426                                 argc = 1;
1427                         }
1428                         if (filesfrom_host && *filesfrom_host && strcmp(filesfrom_host, shell_machine) != 0) {
1429                                 rprintf(FERROR,
1430                                         "--files-from hostname is not the same as the transfer hostname\n");
1431                                 exit_cleanup(RERR_SYNTAX);
1432                         }
1433                         am_sender = 0;
1434                         if (rsync_port)
1435                                 daemon_connection = shell_cmd ? 1 : -1;
1436                 } else { /* source is local, check dest arg */
1437                         am_sender = 1;
1438
1439                         if (argc > 1) {
1440                                 p = argv[--argc];
1441                                 remote_argv = argv + argc;
1442                         } else {
1443                                 static char *dotarg[1] = { "." };
1444                                 p = dotarg[0];
1445                                 remote_argv = dotarg;
1446                         }
1447                         remote_argc = 1;
1448
1449                         path = check_for_hostspec(p, &shell_machine, &rsync_port);
1450                         if (path && filesfrom_host && *filesfrom_host && strcmp(filesfrom_host, shell_machine) != 0) {
1451                                 rprintf(FERROR,
1452                                         "--files-from hostname is not the same as the transfer hostname\n");
1453                                 exit_cleanup(RERR_SYNTAX);
1454                         }
1455                         if (!path) { /* no hostspec found, so src & dest are local */
1456                                 local_server = 1;
1457                                 if (filesfrom_host) {
1458                                         rprintf(FERROR,
1459                                                 "--files-from cannot be remote when the transfer is local\n");
1460                                         exit_cleanup(RERR_SYNTAX);
1461                                 }
1462                                 shell_machine = NULL;
1463                                 rsync_port = 0;
1464                         } else { /* hostspec was found, so dest is remote */
1465                                 argv[argc] = path;
1466                                 if (rsync_port)
1467                                         daemon_connection = shell_cmd ? 1 : -1;
1468                         }
1469                 }
1470         } else {  /* read_batch */
1471                 local_server = 1;
1472                 if (check_for_hostspec(argv[argc-1], &shell_machine, &rsync_port)) {
1473                         rprintf(FERROR, "remote destination is not allowed with --read-batch\n");
1474                         exit_cleanup(RERR_SYNTAX);
1475                 }
1476                 remote_argv = argv += argc - 1;
1477                 remote_argc = argc = 1;
1478                 rsync_port = 0;
1479         }
1480
1481         if (!rsync_port && remote_argc && !**remote_argv) /* Turn an empty arg into a dot dir. */
1482                 *remote_argv = ".";
1483
1484         if (am_sender) {
1485                 char *dummy_host;
1486                 int dummy_port = rsync_port;
1487                 int i;
1488                 if (!argv[0][0])
1489                         goto invalid_empty;
1490                 /* For local source, extra source args must not have hostspec. */
1491                 for (i = 1; i < argc; i++) {
1492                         if (!argv[i][0]) {
1493                             invalid_empty:
1494                                 rprintf(FERROR, "Empty source arg specified.\n");
1495                                 exit_cleanup(RERR_SYNTAX);
1496                         }
1497                         if (check_for_hostspec(argv[i], &dummy_host, &dummy_port)) {
1498                                 rprintf(FERROR, "Unexpected remote arg: %s\n", argv[i]);
1499                                 exit_cleanup(RERR_SYNTAX);
1500                         }
1501                 }
1502         } else {
1503                 char *dummy_host;
1504                 int dummy_port = rsync_port;
1505                 int i;
1506                 /* For remote source, any extra source args must have either
1507                  * the same hostname or an empty hostname. */
1508                 for (i = 1; i < remote_argc; i++) {
1509                         char *arg = check_for_hostspec(remote_argv[i], &dummy_host, &dummy_port);
1510                         if (!arg) {
1511                                 rprintf(FERROR, "Unexpected local arg: %s\n", remote_argv[i]);
1512                                 rprintf(FERROR, "If arg is a remote file/dir, prefix it with a colon (:).\n");
1513                                 exit_cleanup(RERR_SYNTAX);
1514                         }
1515                         if (*dummy_host && strcmp(dummy_host, shell_machine) != 0) {
1516                                 rprintf(FERROR, "All source args must come from the same machine.\n");
1517                                 exit_cleanup(RERR_SYNTAX);
1518                         }
1519                         if (rsync_port != dummy_port) {
1520                                 if (!rsync_port || !dummy_port)
1521                                         rprintf(FERROR, "All source args must use the same hostspec format.\n");
1522                                 else
1523                                         rprintf(FERROR, "All source args must use the same port number.\n");
1524                                 exit_cleanup(RERR_SYNTAX);
1525                         }
1526                         if (!rsync_port && !*arg) /* Turn an empty arg into a dot dir. */
1527                                 arg = ".";
1528                         remote_argv[i] = arg;
1529                 }
1530         }
1531
1532         if (rsync_port < 0)
1533                 rsync_port = RSYNC_PORT;
1534         else
1535                 env_port = rsync_port;
1536
1537         if (daemon_connection < 0)
1538                 return start_socket_client(shell_machine, remote_argc, remote_argv, argc, argv);
1539
1540         if (password_file && !daemon_connection) {
1541                 rprintf(FERROR, "The --password-file option may only be "
1542                                 "used when accessing an rsync daemon.\n");
1543                 exit_cleanup(RERR_SYNTAX);
1544         }
1545
1546         if (connect_timeout) {
1547                 rprintf(FERROR, "The --contimeout option may only be "
1548                                 "used when connecting to an rsync daemon.\n");
1549                 exit_cleanup(RERR_SYNTAX);
1550         }
1551
1552         if (shell_machine) {
1553                 p = strrchr(shell_machine,'@');
1554                 if (p) {
1555                         *p = 0;
1556                         shell_user = shell_machine;
1557                         shell_machine = p+1;
1558                 }
1559         }
1560
1561         if (DEBUG_GTE(CMD, 2)) {
1562                 rprintf(FINFO,"cmd=%s machine=%s user=%s path=%s\n",
1563                         NS(shell_cmd), NS(shell_machine), NS(shell_user),
1564                         NS(remote_argv[0]));
1565         }
1566
1567 #ifdef HAVE_PUTENV
1568         if (daemon_connection)
1569                 set_env_num("RSYNC_PORT", env_port);
1570 #endif
1571
1572         pid = do_cmd(shell_cmd, shell_machine, shell_user, remote_argv, remote_argc, &f_in, &f_out);
1573
1574         /* if we're running an rsync server on the remote host over a
1575          * remote shell command, we need to do the RSYNCD protocol first */
1576         if (daemon_connection) {
1577                 int tmpret;
1578                 tmpret = start_inband_exchange(f_in, f_out, shell_user, remote_argc, remote_argv);
1579                 if (tmpret < 0)
1580                         return tmpret;
1581         }
1582
1583         ret = client_run(f_in, f_out, pid, argc, argv);
1584
1585         fflush(stdout);
1586         fflush(stderr);
1587
1588         return ret;
1589 }
1590
1591
1592 static void sigusr1_handler(UNUSED(int val))
1593 {
1594         called_from_signal_handler = 1;
1595         exit_cleanup(RERR_SIGNAL1);
1596 }
1597
1598 static void sigusr2_handler(UNUSED(int val))
1599 {
1600         if (!am_server)
1601                 output_summary();
1602         close_all();
1603         if (got_xfer_error)
1604                 _exit(RERR_PARTIAL);
1605         _exit(0);
1606 }
1607
1608 #if defined SIGINFO || defined SIGVTALRM
1609 static void siginfo_handler(UNUSED(int val))
1610 {
1611         if (!am_server && !INFO_GTE(PROGRESS, 1))
1612                 want_progress_now = True;
1613 }
1614 #endif
1615
1616 void remember_children(UNUSED(int val))
1617 {
1618 #ifdef WNOHANG
1619         int cnt, status;
1620         pid_t pid;
1621         /* An empty waitpid() loop was put here by Tridge and we could never
1622          * get him to explain why he put it in, so rather than taking it
1623          * out we're instead saving the child exit statuses for later use.
1624          * The waitpid() loop presumably eliminates all possibility of leaving
1625          * zombie children, maybe that's why he did it. */
1626         while ((pid = waitpid(-1, &status, WNOHANG)) > 0) {
1627                 /* save the child's exit status */
1628                 for (cnt = 0; cnt < MAXCHILDPROCS; cnt++) {
1629                         if (pid_stat_table[cnt].pid == 0) {
1630                                 pid_stat_table[cnt].pid = pid;
1631                                 pid_stat_table[cnt].status = status;
1632                                 break;
1633                         }
1634                 }
1635         }
1636 #endif
1637 #ifndef HAVE_SIGACTION
1638         signal(SIGCHLD, remember_children);
1639 #endif
1640 }
1641
1642
1643 /**
1644  * This routine catches signals and tries to send them to gdb.
1645  *
1646  * Because it's called from inside a signal handler it ought not to
1647  * use too many library routines.
1648  *
1649  * @todo Perhaps use "screen -X" instead/as well, to help people
1650  * debugging without easy access to X.  Perhaps use an environment
1651  * variable, or just call a script?
1652  *
1653  * @todo The /proc/ magic probably only works on Linux (and
1654  * Solaris?)  Can we be more portable?
1655  **/
1656 #ifdef MAINTAINER_MODE
1657 const char *get_panic_action(void)
1658 {
1659         const char *cmd_fmt = getenv("RSYNC_PANIC_ACTION");
1660
1661         if (cmd_fmt)
1662                 return cmd_fmt;
1663         return "xterm -display :0 -T Panic -n Panic -e gdb /proc/%d/exe %d";
1664 }
1665
1666
1667 /**
1668  * Handle a fatal signal by launching a debugger, controlled by $RSYNC_PANIC_ACTION.
1669  *
1670  * This signal handler is only installed if we were configured with
1671  * --enable-maintainer-mode.  Perhaps it should always be on and we
1672  * should just look at the environment variable, but I'm a bit leery
1673  * of a signal sending us into a busy loop.
1674  **/
1675 static void rsync_panic_handler(UNUSED(int whatsig))
1676 {
1677         char cmd_buf[300];
1678         int ret, pid_int = getpid();
1679
1680         snprintf(cmd_buf, sizeof cmd_buf, get_panic_action(), pid_int, pid_int);
1681
1682         /* Unless we failed to execute gdb, we allow the process to
1683          * continue.  I'm not sure if that's right. */
1684         ret = shell_exec(cmd_buf);
1685         if (ret)
1686                 _exit(ret);
1687 }
1688 #endif
1689
1690
1691 int main(int argc,char *argv[])
1692 {
1693         int ret;
1694
1695         raw_argc = argc;
1696         raw_argv = argv;
1697
1698 #ifdef HAVE_SIGACTION
1699 # ifdef HAVE_SIGPROCMASK
1700         sigset_t sigmask;
1701
1702         sigemptyset(&sigmask);
1703 # endif
1704         sigact.sa_flags = SA_NOCLDSTOP;
1705 #endif
1706         SIGACTMASK(SIGUSR1, sigusr1_handler);
1707         SIGACTMASK(SIGUSR2, sigusr2_handler);
1708         SIGACTMASK(SIGCHLD, remember_children);
1709 #ifdef MAINTAINER_MODE
1710         SIGACTMASK(SIGSEGV, rsync_panic_handler);
1711         SIGACTMASK(SIGFPE, rsync_panic_handler);
1712         SIGACTMASK(SIGABRT, rsync_panic_handler);
1713         SIGACTMASK(SIGBUS, rsync_panic_handler);
1714 #endif
1715 #ifdef SIGINFO
1716         SIGACTMASK(SIGINFO, siginfo_handler);
1717 #endif
1718 #ifdef SIGVTALRM
1719         SIGACTMASK(SIGVTALRM, siginfo_handler);
1720 #endif
1721
1722         starttime = time(NULL);
1723         our_uid = MY_UID();
1724         our_gid = MY_GID();
1725         am_root = our_uid == ROOT_UID;
1726
1727         memset(&stats, 0, sizeof(stats));
1728
1729         /* Even a non-daemon runs needs the default config values to be set, e.g.
1730          * lp_dont_compress() is queried when no --skip-compress option is set. */
1731         reset_daemon_vars();
1732
1733         if (argc < 2) {
1734                 usage(FERROR);
1735                 exit_cleanup(RERR_SYNTAX);
1736         }
1737
1738         /* Get the umask for use in permission calculations.  We no longer set
1739          * it to zero; that is ugly and pointless now that all the callers that
1740          * relied on it have been reeducated to work with default ACLs. */
1741         umask(orig_umask = umask(0));
1742
1743 #if defined CONFIG_LOCALE && defined HAVE_SETLOCALE
1744         setlocale(LC_CTYPE, "");
1745 #endif
1746
1747         if (!parse_arguments(&argc, (const char ***) &argv)) {
1748                 option_error();
1749                 exit_cleanup(RERR_SYNTAX);
1750         }
1751         if (write_batch
1752          && poptDupArgv(argc, (const char **)argv, &cooked_argc, (const char ***)&cooked_argv) != 0)
1753                 out_of_memory("main");
1754
1755         SIGACTMASK(SIGINT, sig_int);
1756         SIGACTMASK(SIGHUP, sig_int);
1757         SIGACTMASK(SIGTERM, sig_int);
1758 #if defined HAVE_SIGACTION && HAVE_SIGPROCMASK
1759         sigprocmask(SIG_UNBLOCK, &sigmask, NULL);
1760 #endif
1761
1762         /* Ignore SIGPIPE; we consistently check error codes and will
1763          * see the EPIPE. */
1764         SIGACTION(SIGPIPE, SIG_IGN);
1765 #ifdef SIGXFSZ
1766         SIGACTION(SIGXFSZ, SIG_IGN);
1767 #endif
1768
1769         /* Initialize change_dir() here because on some old systems getcwd
1770          * (implemented by forking "pwd" and reading its output) doesn't
1771          * work when there are other child processes.  Also, on all systems
1772          * that implement getcwd that way "pwd" can't be found after chroot. */
1773         change_dir(NULL, CD_NORMAL);
1774
1775         if ((write_batch || read_batch) && !am_server) {
1776                 open_batch_files(); /* sets batch_fd */
1777                 if (read_batch)
1778                         read_stream_flags(batch_fd);
1779                 else
1780                         write_stream_flags(batch_fd);
1781         }
1782         if (write_batch < 0)
1783                 dry_run = 1;
1784
1785         if (am_server) {
1786 #ifdef ICONV_CONST
1787                 setup_iconv();
1788 #endif
1789         } else if (am_daemon)
1790                 return daemon_main();
1791
1792         if (am_server && protect_args) {
1793                 char buf[MAXPATHLEN];
1794                 protect_args = 2;
1795                 read_args(STDIN_FILENO, NULL, buf, sizeof buf, 1, &argv, &argc, NULL);
1796                 if (!parse_arguments(&argc, (const char ***) &argv)) {
1797                         option_error();
1798                         exit_cleanup(RERR_SYNTAX);
1799                 }
1800         }
1801
1802         if (argc < 1) {
1803                 usage(FERROR);
1804                 exit_cleanup(RERR_SYNTAX);
1805         }
1806
1807         if (am_server) {
1808                 set_nonblocking(STDIN_FILENO);
1809                 set_nonblocking(STDOUT_FILENO);
1810                 if (am_daemon)
1811                         return start_daemon(STDIN_FILENO, STDOUT_FILENO);
1812                 start_server(STDIN_FILENO, STDOUT_FILENO, argc, argv);
1813         }
1814
1815         ret = start_client(argc, argv);
1816         if (ret == -1)
1817                 exit_cleanup(RERR_STARTCLIENT);
1818         else
1819                 exit_cleanup(ret);
1820
1821         return ret;
1822 }