Fixed the use of --protect-args (-s) with a daemon.
[rsync.git] / main.c
diff --git a/main.c b/main.c
index 65f9c0e107c8de949268986898b6825b9cde9e9e..8de7f1bde49b10257a4017c7e55723b1cce9579e 100644 (file)
--- a/main.c
+++ b/main.c
@@ -1,25 +1,28 @@
-/* -*- c-file-style: "linux" -*-
-
-   Copyright (C) 1996-2001 by Andrew Tridgell <tridge@samba.org>
-   Copyright (C) Paul Mackerras 1996
-   Copyright (C) 2001, 2002 by Martin Pool <mbp@samba.org>
-
-   This program is free software; you can redistribute it and/or modify
-   it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
-   (at your option) any later version.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-   GNU General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
+/*
+ * The startup routines, including main(), for rsync.
+ *
+ * Copyright (C) 1996-2001 Andrew Tridgell <tridge@samba.org>
+ * Copyright (C) 1996 Paul Mackerras
+ * Copyright (C) 2001, 2002 Martin Pool <mbp@samba.org>
+ * Copyright (C) 2003-2008 Wayne Davison
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; if not, visit the http://fsf.org website.
+ */
 
 #include "rsync.h"
+#include "ifuncs.h"
+#include "io.h"
 #if defined CONFIG_LOCALE && defined HAVE_LOCALE_H
 #include <locale.h>
 #endif
@@ -32,48 +35,73 @@ extern int am_server;
 extern int am_sender;
 extern int am_generator;
 extern int am_daemon;
+extern int inc_recurse;
 extern int blocking_io;
-extern int remove_sent_files;
-extern int daemon_over_rsh;
+extern int remove_source_files;
 extern int need_messages_from_generator;
 extern int kluge_around_eof;
 extern int do_stats;
-extern int log_got_error;
+extern int got_xfer_error;
 extern int module_id;
-extern int orig_umask;
 extern int copy_links;
+extern int copy_dirlinks;
+extern int copy_unsafe_links;
 extern int keep_dirlinks;
 extern int preserve_hard_links;
 extern int protocol_version;
-extern int always_checksum;
+extern int file_total;
 extern int recurse;
+extern int xfer_dirs;
+extern int protect_args;
 extern int relative_paths;
+extern int sanitize_paths;
+extern int curr_dir_depth;
+extern int curr_dir_len;
+extern int module_id;
 extern int rsync_port;
 extern int whole_file;
 extern int read_batch;
 extern int write_batch;
 extern int batch_fd;
-extern int batch_gen_fd;
 extern int filesfrom_fd;
+extern int connect_timeout;
 extern pid_t cleanup_child_pid;
+extern unsigned int module_dirlen;
 extern struct stats stats;
 extern char *filesfrom_host;
+extern char *partial_dir;
+extern char *dest_option;
+extern char *basis_dir[];
 extern char *rsync_path;
 extern char *shell_cmd;
 extern char *batch_name;
+extern char *password_file;
 extern char curr_dir[MAXPATHLEN];
+extern struct file_list *first_flist;
+extern struct filter_list_struct server_filter_list;
 
+uid_t our_uid;
 int local_server = 0;
-int pre_checksum = 0;
-struct file_list *the_file_list;
+int daemon_over_rsh = 0;
+mode_t orig_umask = 0;
+int batch_gen_fd = -1;
 
 /* There's probably never more than at most 2 outstanding child processes,
  * but set it higher, just in case. */
-#define MAXCHILDPROCS 5
+#define MAXCHILDPROCS 7
+
+#ifdef HAVE_SIGACTION
+# ifdef HAVE_SIGPROCMASK
+#  define SIGACTMASK(n,h) SIGACTION(n,h), sigaddset(&sigmask,(n))
+# else
+#  define SIGACTMASK(n,h) SIGACTION(n,h)
+# endif
+static struct sigaction sigact;
+#endif
 
 struct pid_status {
        pid_t pid;
-       int   status;
+       int status;
 } pid_stat_table[MAXCHILDPROCS];
 
 static time_t starttime, endtime;
@@ -81,51 +109,62 @@ static int64 total_read, total_written;
 
 static void show_malloc_stats(void);
 
-/****************************************************************************
-wait for a process to exit, calling io_flush while waiting
-****************************************************************************/
-static void wait_process(pid_t pid, int *code_ptr)
+/* Works like waitpid(), but if we already harvested the child pid in our
+ * remember_children(), we succeed instead of returning an error. */
+pid_t wait_process(pid_t pid, int *status_ptr, int flags)
 {
        pid_t waited_pid;
-       int cnt, status;
-
-       while ((waited_pid = waitpid(pid, &status, WNOHANG)) == 0) {
-               msleep(20);
-               io_flush(FULL_FLUSH);
-       }
+       
+       do {
+               waited_pid = waitpid(pid, status_ptr, flags);
+       } while (waited_pid == -1 && errno == EINTR);
 
        if (waited_pid == -1 && errno == ECHILD) {
-               /* status of requested child no longer available.
-                * check to see if it was processed by the sigchld_handler.
-                */
-               for (cnt = 0;  cnt < MAXCHILDPROCS; cnt++) {
+               /* Status of requested child no longer available:  check to
+                * see if it was processed by remember_children(). */
+               int cnt;
+               for (cnt = 0; cnt < MAXCHILDPROCS; cnt++) {
                        if (pid == pid_stat_table[cnt].pid) {
-                               waited_pid = pid;
-                               status = pid_stat_table[cnt].status;
+                               *status_ptr = pid_stat_table[cnt].status;
                                pid_stat_table[cnt].pid = 0;
-                               break;
+                               return pid;
                        }
                }
        }
 
+       return waited_pid;
+}
+
+/* Wait for a process to exit, calling io_flush while waiting. */
+static void wait_process_with_flush(pid_t pid, int *exit_code_ptr)
+{
+       pid_t waited_pid;
+       int status;
+
+       while ((waited_pid = wait_process(pid, &status, WNOHANG)) == 0) {
+               msleep(20);
+               io_flush(FULL_FLUSH);
+       }
+
        /* TODO: If the child exited on a signal, then log an
         * appropriate error message.  Perhaps we should also accept a
         * message describing the purpose of the child.  Also indicate
         * this to the caller so that they know something went wrong. */
-       if (waited_pid < 0)
-               *code_ptr = RERR_WAITCHILD;
-       else if (!WIFEXITED(status)) {
+       if (waited_pid < 0) {
+               rsyserr(FERROR, errno, "waitpid");
+               *exit_code_ptr = RERR_WAITCHILD;
+       } else if (!WIFEXITED(status)) {
 #ifdef WCOREDUMP
                if (WCOREDUMP(status))
-                       *code_ptr = RERR_CRASHED;
+                       *exit_code_ptr = RERR_CRASHED;
                else
 #endif
                if (WIFSIGNALED(status))
-                       *code_ptr = RERR_TERMINATED;
+                       *exit_code_ptr = RERR_TERMINATED;
                else
-                       *code_ptr = RERR_WAITCHILD;
+                       *exit_code_ptr = RERR_WAITCHILD;
        } else
-               *code_ptr = WEXITSTATUS(status);
+               *exit_code_ptr = WEXITSTATUS(status);
 }
 
 /* This function gets called from all 3 processes.  We want the client side
@@ -154,19 +193,18 @@ static void handle_stats(int f)
                return;
 
        if (am_daemon) {
-               log_exit(0, __FILE__, __LINE__);
                if (f == -1 || !am_sender)
                        return;
        }
 
        if (am_server) {
                if (am_sender) {
-                       write_longint(f, total_read);
-                       write_longint(f, total_written);
-                       write_longint(f, stats.total_size);
+                       write_varlong30(f, total_read, 3);
+                       write_varlong30(f, total_written, 3);
+                       write_varlong30(f, stats.total_size, 3);
                        if (protocol_version >= 29) {
-                               write_longint(f, stats.flist_buildtime);
-                               write_longint(f, stats.flist_xfertime);
+                               write_varlong30(f, stats.flist_buildtime, 3);
+                               write_varlong30(f, stats.flist_xfertime, 3);
                        }
                }
                return;
@@ -175,26 +213,26 @@ static void handle_stats(int f)
        /* this is the client */
 
        if (f < 0 && !am_sender) /* e.g. when we got an empty file list. */
-               ; 
+               ;
        else if (!am_sender) {
                /* Read the first two in opposite order because the meaning of
                 * read/write swaps when switching from sender to receiver. */
-               total_written = read_longint(f);
-               total_read = read_longint(f);
-               stats.total_size = read_longint(f);
+               total_written = read_varlong30(f, 3);
+               total_read = read_varlong30(f, 3);
+               stats.total_size = read_varlong30(f, 3);
                if (protocol_version >= 29) {
-                       stats.flist_buildtime = read_longint(f);
-                       stats.flist_xfertime = read_longint(f);
+                       stats.flist_buildtime = read_varlong30(f, 3);
+                       stats.flist_xfertime = read_varlong30(f, 3);
                }
        } else if (write_batch) {
                /* The --read-batch process is going to be a client
                 * receiver, so we need to give it the stats. */
-               write_longint(batch_fd, total_read);
-               write_longint(batch_fd, total_written);
-               write_longint(batch_fd, stats.total_size);
+               write_varlong30(batch_fd, total_read, 3);
+               write_varlong30(batch_fd, total_written, 3);
+               write_varlong30(batch_fd, stats.total_size, 3);
                if (protocol_version >= 29) {
-                       write_longint(batch_fd, stats.flist_buildtime);
-                       write_longint(batch_fd, stats.flist_xfertime);
+                       write_varlong30(batch_fd, stats.flist_buildtime, 3);
+                       write_varlong30(batch_fd, stats.flist_xfertime, 3);
                }
        }
 }
@@ -202,18 +240,20 @@ static void handle_stats(int f)
 static void output_summary(void)
 {
        if (do_stats) {
-               rprintf(FINFO,"\nNumber of files: %d\n", stats.num_files);
+               rprintf(FCLIENT, "\n");
+               rprintf(FINFO,"Number of files: %d\n", stats.num_files);
                rprintf(FINFO,"Number of files transferred: %d\n",
                        stats.num_transferred_files);
-               rprintf(FINFO,"Total file size: %.0f bytes\n",
-                       (double)stats.total_size);
-               rprintf(FINFO,"Total transferred file size: %.0f bytes\n",
-                       (double)stats.total_transferred_size);
-               rprintf(FINFO,"Literal data: %.0f bytes\n",
-                       (double)stats.literal_data);
-               rprintf(FINFO,"Matched data: %.0f bytes\n",
-                       (double)stats.matched_data);
-               rprintf(FINFO,"File list size: %d\n", stats.flist_size);
+               rprintf(FINFO,"Total file size: %s bytes\n",
+                       human_num(stats.total_size));
+               rprintf(FINFO,"Total transferred file size: %s bytes\n",
+                       human_num(stats.total_transferred_size));
+               rprintf(FINFO,"Literal data: %s bytes\n",
+                       human_num(stats.literal_data));
+               rprintf(FINFO,"Matched data: %s bytes\n",
+                       human_num(stats.matched_data));
+               rprintf(FINFO,"File list size: %s\n",
+                       human_num(stats.flist_size));
                if (stats.flist_buildtime) {
                        rprintf(FINFO,
                                "File list generation time: %.3f seconds\n",
@@ -222,20 +262,22 @@ static void output_summary(void)
                                "File list transfer time: %.3f seconds\n",
                                (double)stats.flist_xfertime / 1000);
                }
-               rprintf(FINFO,"Total bytes sent: %.0f\n",
-                       (double)total_written);
-               rprintf(FINFO,"Total bytes received: %.0f\n",
-                       (double)total_read);
+               rprintf(FINFO,"Total bytes sent: %s\n",
+                       human_num(total_written));
+               rprintf(FINFO,"Total bytes received: %s\n",
+                       human_num(total_read));
        }
 
        if (verbose || do_stats) {
+               rprintf(FCLIENT, "\n");
                rprintf(FINFO,
-                       "\nsent %.0f bytes  received %.0f bytes  %.2f bytes/sec\n",
-                       (double)total_written, (double)total_read,
-                       (total_written + total_read)/(0.5 + (endtime - starttime)));
-               rprintf(FINFO, "total size is %.0f  speedup is %.2f\n",
-                       (double)stats.total_size,
-                       (double)stats.total_size / (total_written+total_read));
+                       "sent %s bytes  received %s bytes  %s bytes/sec\n",
+                       human_num(total_written), human_num(total_read),
+                       human_dnum((total_written + total_read)/(0.5 + (endtime - starttime)), 2));
+               rprintf(FINFO, "total size is %s  speedup is %.2f%s\n",
+                       human_num(stats.total_size),
+                       (double)stats.total_size / (total_written+total_read),
+                       write_batch < 0 ? " (BATCH ONLY)" : dry_run ? " (DRY RUN)" : "");
        }
 
        fflush(stdout);
@@ -253,7 +295,8 @@ static void show_malloc_stats(void)
 
        mi = mallinfo();
 
-       rprintf(FINFO, "\n" RSYNC_NAME "[%d] (%s%s%s) heap statistics:\n",
+       rprintf(FCLIENT, "\n");
+       rprintf(FINFO, RSYNC_NAME "[%d] (%s%s%s) heap statistics:\n",
                getpid(), am_server ? "server " : "",
                am_daemon ? "daemon " : "", who_am_i());
        rprintf(FINFO, "  arena:     %10ld   (bytes from sbrk)\n",
@@ -283,16 +326,16 @@ static void show_malloc_stats(void)
 
 
 /* Start the remote shell.   cmd may be NULL to use the default. */
-static pid_t do_cmd(char *cmd, char *machine, char *user, char *path,
-                   int *f_in, int *f_out)
+static pid_t do_cmd(char *cmd, char *machine, char *user, char **remote_argv, int remote_argc,
+                   int *f_in_p, int *f_out_p)
 {
        int i, argc = 0;
        char *args[MAX_ARGS];
-       pid_t ret;
-       char *tok, *dir = NULL;
+       pid_t pid;
        int dash_l_set = 0;
 
        if (!read_batch && !local_server) {
+               char *t, *f, in_quote = '\0';
                char *rsh_env = getenv(RSYNC_RSH_ENV);
                if (!cmd)
                        cmd = rsh_env;
@@ -302,13 +345,37 @@ static pid_t do_cmd(char *cmd, char *machine, char *user, char *path,
                if (!cmd)
                        goto oom;
 
-               for (tok = strtok(cmd, " "); tok; tok = strtok(NULL, " ")) {
+               for (t = f = cmd; *f; f++) {
+                       if (*f == ' ')
+                               continue;
                        /* Comparison leaves rooms for server_options(). */
-                       if (argc >= MAX_ARGS - MAX_SERVER_ARGS) {
-                               rprintf(FERROR, "internal: args[] overflowed in do_cmd()\n");
-                               exit_cleanup(RERR_SYNTAX);
+                       if (argc >= MAX_ARGS - MAX_SERVER_ARGS)
+                               goto arg_overflow;
+                       args[argc++] = t;
+                       while (*f != ' ' || in_quote) {
+                               if (!*f) {
+                                       if (in_quote) {
+                                               rprintf(FERROR,
+                                                   "Missing trailing-%c in remote-shell command.\n",
+                                                   in_quote);
+                                               exit_cleanup(RERR_SYNTAX);
+                                       }
+                                       f--;
+                                       break;
+                               }
+                               if (*f == '\'' || *f == '"') {
+                                       if (!in_quote) {
+                                               in_quote = *f++;
+                                               continue;
+                                       }
+                                       if (*f == in_quote && *++f != in_quote) {
+                                               in_quote = '\0';
+                                               continue;
+                                       }
+                               }
+                               *t++ = *f++;
                        }
-                       args[argc++] = tok;
+                       *t++ = '\0';
                }
 
                /* check to see if we've already been given '-l user' in
@@ -347,134 +414,253 @@ static pid_t do_cmd(char *cmd, char *machine, char *user, char *path,
 
                server_options(args,&argc);
 
-               if (argc >= MAX_ARGS - 2) {
-                       rprintf(FERROR, "internal: args[] overflowed in do_cmd()\n");
-                       exit_cleanup(RERR_SYNTAX);
-               }
+               if (argc >= MAX_ARGS - 2)
+                       goto arg_overflow;
        }
 
        args[argc++] = ".";
 
-       if (!daemon_over_rsh && path && *path)
-               args[argc++] = path;
+       if (!daemon_over_rsh) {
+               while (remote_argc > 0) {
+                       if (argc >= MAX_ARGS - 1) {
+                         arg_overflow:
+                               rprintf(FERROR, "internal: args[] overflowed in do_cmd()\n");
+                               exit_cleanup(RERR_SYNTAX);
+                       }
+                       args[argc++] = *remote_argv++;
+                       remote_argc--;
+               }
+       }
 
        args[argc] = NULL;
 
        if (verbose > 3) {
-               rprintf(FINFO,"cmd=");
                for (i = 0; i < argc; i++)
-                       rprintf(FINFO, "%s ", safe_fname(args[i]));
-               rprintf(FINFO,"\n");
+                       rprintf(FCLIENT, "cmd[%d]=%s ", i, args[i]);
+               rprintf(FCLIENT, "\n");
        }
 
        if (read_batch) {
                int from_gen_pipe[2];
+               set_allow_inc_recurse();
                if (fd_pair(from_gen_pipe) < 0) {
                        rsyserr(FERROR, errno, "pipe");
                        exit_cleanup(RERR_IPC);
                }
                batch_gen_fd = from_gen_pipe[0];
-               *f_out = from_gen_pipe[1];
-               *f_in = batch_fd;
-               ret = -1; /* no child pid */
+               *f_out_p = from_gen_pipe[1];
+               *f_in_p = batch_fd;
+               pid = (pid_t)-1; /* no child pid */
+#ifdef ICONV_CONST
+               setup_iconv();
+#endif
        } else if (local_server) {
                /* If the user didn't request --[no-]whole-file, force
                 * it on, but only if we're not batch processing. */
                if (whole_file < 0 && !write_batch)
                        whole_file = 1;
-               ret = local_child(argc, args, f_in, f_out, child_main);
-       } else
-               ret = piped_child(args,f_in,f_out);
-
-       if (dir)
-               free(dir);
+               set_allow_inc_recurse();
+               pid = local_child(argc, args, f_in_p, f_out_p, child_main);
+#ifdef ICONV_CONST
+               setup_iconv();
+#endif
+       } else {
+               pid = piped_child(args, f_in_p, f_out_p);
+#ifdef ICONV_CONST
+               setup_iconv();
+#endif
+               if (protect_args)
+                       send_protected_args(*f_out_p, args);
+       }
 
-       return ret;
+       return pid;
 
-oom:
+  oom:
        out_of_memory("do_cmd");
        return 0; /* not reached */
 }
 
-
-static char *get_local_name(struct file_list *flist,char *name)
+/* The receiving side operates in one of two modes:
+ *
+ * 1. it receives any number of files into a destination directory,
+ * placing them according to their names in the file-list.
+ *
+ * 2. it receives a single file and saves it using the name in the
+ * destination path instead of its file-list name.  This requires a
+ * "local name" for writing out the destination file.
+ *
+ * So, our task is to figure out what mode/local-name we need.
+ * For mode 1, we change into the destination directory and return NULL.
+ * For mode 2, we change into the directory containing the destination
+ * file (if we aren't already there) and return the local-name. */
+static char *get_local_name(struct file_list *flist, char *dest_path)
 {
        STRUCT_STAT st;
-       int e;
+       int statret;
+       char *cp;
 
-       if (verbose > 2)
-               rprintf(FINFO,"get_local_name count=%d %s\n",
-                       flist->count, NS(name));
+       if (verbose > 2) {
+               rprintf(FINFO, "get_local_name count=%d %s\n",
+                       file_total, NS(dest_path));
+       }
 
-       if (!name)
+       if (!dest_path || list_only)
                return NULL;
 
-       if (do_stat(name,&st) == 0) {
+       /* See what currently exists at the destination. */
+       if ((statret = do_stat(dest_path, &st)) == 0) {
+               /* If the destination is a dir, enter it and use mode 1. */
                if (S_ISDIR(st.st_mode)) {
-                       if (!push_dir(name)) {
+                       if (!push_dir(dest_path, 0)) {
                                rsyserr(FERROR, errno, "push_dir#1 %s failed",
-                                       full_fname(name));
+                                       full_fname(dest_path));
                                exit_cleanup(RERR_FILESELECT);
                        }
                        return NULL;
                }
-               if (flist->count > 1) {
-                       rprintf(FERROR,"ERROR: destination must be a directory when copying more than 1 file\n");
+               if (file_total > 1) {
+                       rprintf(FERROR,
+                               "ERROR: destination must be a directory when"
+                               " copying more than 1 file\n");
+                       exit_cleanup(RERR_FILESELECT);
+               }
+               if (file_total == 1 && S_ISDIR(flist->files[0]->mode)) {
+                       rprintf(FERROR,
+                               "ERROR: cannot overwrite non-directory"
+                               " with a directory\n");
                        exit_cleanup(RERR_FILESELECT);
                }
-               return name;
+       } else if (errno != ENOENT) {
+               /* If we don't know what's at the destination, fail. */
+               rsyserr(FERROR, errno, "ERROR: cannot stat destination %s",
+                       full_fname(dest_path));
+               exit_cleanup(RERR_FILESELECT);
        }
 
-       if (flist->count <= 1 && ((e = strlen(name)) <= 1 || name[e-1] != '/'))
-               return name;
+       cp = strrchr(dest_path, '/');
 
-       if (do_mkdir(name,0777 & ~orig_umask) != 0) {
-               rsyserr(FERROR, errno, "mkdir %s failed", full_fname(name));
-               exit_cleanup(RERR_FILEIO);
-       }
-       if (verbose > 0)
-               rprintf(FINFO, "created directory %s\n", safe_fname(name));
+       /* If we need a destination directory because the transfer is not
+        * of a single non-directory or the user has requested one via a
+        * destination path ending in a slash, create one and use mode 1. */
+       if (file_total > 1 || (cp && !cp[1])) {
+               /* Lop off the final slash (if any). */
+               if (cp && !cp[1])
+                       *cp = '\0';
+
+               if (statret == 0) {
+                       rprintf(FERROR,
+                           "ERROR: destination path is not a directory\n");
+                       exit_cleanup(RERR_SYNTAX);
+               }
+
+               if (mkdir_defmode(dest_path) != 0) {
+                       rsyserr(FERROR, errno, "mkdir %s failed",
+                               full_fname(dest_path));
+                       exit_cleanup(RERR_FILEIO);
+               }
+
+               if (flist->high >= flist->low
+                && strcmp(flist->files[flist->low]->basename, ".") == 0)
+                       flist->files[0]->flags |= FLAG_DIR_CREATED;
+
+               if (verbose)
+                       rprintf(FINFO, "created directory %s\n", dest_path);
+
+               if (dry_run) {
+                       /* Indicate that dest dir doesn't really exist. */
+                       dry_run++;
+               }
+
+               if (!push_dir(dest_path, dry_run > 1)) {
+                       rsyserr(FERROR, errno, "push_dir#2 %s failed",
+                               full_fname(dest_path));
+                       exit_cleanup(RERR_FILESELECT);
+               }
 
-       if (dry_run) {
-               dry_run++;
                return NULL;
        }
 
-       if (!push_dir(name)) {
-               rsyserr(FERROR, errno, "push_dir#2 %s failed",
-                       full_fname(name));
+       /* Otherwise, we are writing a single file, possibly on top of an
+        * existing non-directory.  Change to the item's parent directory
+        * (if it has a path component), return the basename of the
+        * destination file as the local name, and use mode 2. */
+       if (!cp)
+               return dest_path;
+
+       if (cp == dest_path)
+               dest_path = "/";
+
+       *cp = '\0';
+       if (!push_dir(dest_path, 0)) {
+               rsyserr(FERROR, errno, "push_dir#3 %s failed",
+                       full_fname(dest_path));
                exit_cleanup(RERR_FILESELECT);
        }
+       *cp = '/';
 
-       return NULL;
+       return cp + 1;
 }
 
+/* This function checks on our alternate-basis directories.  If we're in
+ * dry-run mode and the destination dir does not yet exist, we'll try to
+ * tweak any dest-relative paths to make them work for a dry-run (the
+ * destination dir must be in curr_dir[] when this function is called).
+ * We also warn about any arg that is non-existent or not a directory. */
+static void check_alt_basis_dirs(void)
+{
+       STRUCT_STAT st;
+       char **dir_p, *slash = strrchr(curr_dir, '/');
+
+       for (dir_p = basis_dir; *dir_p; dir_p++) {
+               if (dry_run > 1 && **dir_p != '/') {
+                       int len = curr_dir_len + 1 + strlen(*dir_p) + 1;
+                       char *new = new_array(char, len);
+                       if (!new)
+                               out_of_memory("check_alt_basis_dirs");
+                       if (slash && strncmp(*dir_p, "../", 3) == 0) {
+                           /* We want to remove only one leading "../" prefix for
+                            * the directory we couldn't create in dry-run mode:
+                            * this ensures that any other ".." references get
+                            * evaluated the same as they would for a live copy. */
+                           *slash = '\0';
+                           pathjoin(new, len, curr_dir, *dir_p + 3);
+                           *slash = '/';
+                       } else
+                           pathjoin(new, len, curr_dir, *dir_p);
+                       *dir_p = new;
+               }
+               if (do_stat(*dir_p, &st) < 0) {
+                       rprintf(FWARNING, "%s arg does not exist: %s\n",
+                               dest_option, *dir_p);
+               } else if (!S_ISDIR(st.st_mode)) {
+                       rprintf(FWARNING, "%s arg is not a dir: %s\n",
+                               dest_option, *dir_p);
+               }
+       }
+}
 
 /* This is only called by the sender. */
-static void read_final_goodbye(int f_in, int f_out)
+static void read_final_goodbye(int f_in)
 {
-       int i;
+       int i, iflags, xlen;
+       uchar fnamecmp_type;
+       char xname[MAXPATHLEN];
 
        if (protocol_version < 29)
                i = read_int(f_in);
        else {
-               while ((i = read_int(f_in)) == the_file_list->count
-                   && read_shortint(f_in) == ITEM_IS_NEW) {
-                       /* Forward the keep-alive (no-op) to the receiver. */
-                       write_int(f_out, the_file_list->count);
-                       write_shortint(f_out, ITEM_IS_NEW);
-               }
+               i = read_ndx_and_attrs(f_in, &iflags, &fnamecmp_type,
+                                      xname, &xlen);
        }
 
-       if (i != -1) {
+       if (i != NDX_DONE) {
                rprintf(FERROR, "Invalid packet at end of run (%d) [%s]\n",
                        i, who_am_i());
                exit_cleanup(RERR_PROTOCOL);
        }
 }
 
-
-static void do_server_sender(int f_in, int f_out, int argc,char *argv[])
+static void do_server_sender(int f_in, int f_out, int argc, char *argv[])
 {
        struct file_list *flist;
        char *dir = argv[0];
@@ -489,58 +675,60 @@ static void do_server_sender(int f_in, int f_out, int argc,char *argv[])
                exit_cleanup(RERR_SYNTAX);
                return;
        }
-       if (am_daemon && lp_read_only(module_id) && remove_sent_files) {
+       if (am_daemon && lp_read_only(module_id) && remove_source_files) {
                rprintf(FERROR,
-                   "ERROR: --remove-sent-files cannot be used with a read-only module\n");
+                   "ERROR: --remove-%s-files cannot be used with a read-only module\n",
+                   remove_source_files == 1 ? "source" : "sent");
                exit_cleanup(RERR_SYNTAX);
                return;
        }
 
-       if (!relative_paths && !push_dir(dir)) {
-               rsyserr(FERROR, errno, "push_dir#3 %s failed",
-                       full_fname(dir));
-               exit_cleanup(RERR_FILESELECT);
+       if (!relative_paths) {
+               if (!push_dir(dir, 0)) {
+                       rsyserr(FERROR, errno, "push_dir#3 %s failed",
+                               full_fname(dir));
+                       exit_cleanup(RERR_FILESELECT);
+               }
        }
        argc--;
        argv++;
 
-       if (argc == 0 && (recurse || list_only)) {
+       if (argc == 0 && (recurse || xfer_dirs || list_only)) {
                argc = 1;
                argv--;
                argv[0] = ".";
        }
 
        flist = send_file_list(f_out,argc,argv);
-       if (!flist || flist->count == 0) {
+       if (!flist || flist->used == 0)
                exit_cleanup(0);
-       }
-       the_file_list = flist;
 
-       io_start_buffering_in();
-       io_start_buffering_out();
+       io_start_buffering_in(f_in);
 
-       send_files(flist,f_out,f_in);
+       send_files(f_in, f_out);
        io_flush(FULL_FLUSH);
        handle_stats(f_out);
        if (protocol_version >= 24)
-               read_final_goodbye(f_in, f_out);
+               read_final_goodbye(f_in);
        io_flush(FULL_FLUSH);
        exit_cleanup(0);
 }
 
 
-static int do_recv(int f_in,int f_out,struct file_list *flist,char *local_name)
+static int do_recv(int f_in, int f_out, char *local_name)
 {
        int pid;
-       int status = 0;
+       int exit_code = 0;
        int error_pipe[2];
 
        /* The receiving side mustn't obey this, or an existing symlink that
         * points to an identical file won't be replaced by the referent. */
-       copy_links = 0;
+       copy_links = copy_dirlinks = copy_unsafe_links = 0;
 
-       if (preserve_hard_links)
-               init_hard_links();
+#ifdef SUPPORT_HARD_LINKS
+       if (preserve_hard_links && !inc_recurse)
+               match_hard_links(first_flist);
+#endif
 
        if (fd_pair(error_pipe) < 0) {
                rsyserr(FERROR, errno, "pipe failed in do_recv");
@@ -560,26 +748,32 @@ static int do_recv(int f_in,int f_out,struct file_list *flist,char *local_name)
                        close(f_out);
 
                /* we can't let two processes write to the socket at one time */
-               close_multiplexing_out();
+               io_end_multiplex_out();
 
                /* set place to send errors */
                set_msg_fd_out(error_pipe[1]);
+               io_start_buffering_out(error_pipe[1]);
 
-               recv_files(f_in, flist, local_name);
+               recv_files(f_in, local_name);
                io_flush(FULL_FLUSH);
                handle_stats(f_in);
 
-               send_msg(MSG_DONE, "", 0);
+               send_msg(MSG_DONE, "", 1, 0);
+               write_varlong(error_pipe[1], stats.total_read, 3);
                io_flush(FULL_FLUSH);
 
                /* Handle any keep-alive packets from the post-processing work
                 * that the generator does. */
                if (protocol_version >= 29) {
+                       int iflags, xlen;
+                       uchar fnamecmp_type;
+                       char xname[MAXPATHLEN];
+
                        kluge_around_eof = -1;
 
                        /* This should only get stopped via a USR2 signal. */
-                       while (read_int(f_in) == flist->count
-                           && read_shortint(f_in) == ITEM_IS_NEW) {}
+                       read_ndx_and_attrs(f_in, &iflags, &fnamecmp_type,
+                                          xname, &xlen);
 
                        rprintf(FERROR, "Invalid packet at end of run [%s]\n",
                                who_am_i());
@@ -594,7 +788,8 @@ static int do_recv(int f_in,int f_out,struct file_list *flist,char *local_name)
        }
 
        am_generator = 1;
-       close_multiplexing_in();
+
+       io_end_multiplex_in();
        if (write_batch && !am_server)
                stop_write_batch();
 
@@ -602,34 +797,40 @@ static int do_recv(int f_in,int f_out,struct file_list *flist,char *local_name)
        if (f_in != f_out)
                close(f_in);
 
-       io_start_buffering_out();
+       io_start_buffering_out(f_out);
 
        set_msg_fd_in(error_pipe[0]);
+       io_start_buffering_in(error_pipe[0]);
+
+#ifdef SUPPORT_HARD_LINKS
+       if (preserve_hard_links && inc_recurse) {
+               struct file_list *flist;
+               for (flist = first_flist; flist; flist = flist->next)
+                       match_hard_links(flist);
+       }
+#endif
 
-       generate_files(f_out, flist, local_name);
+       generate_files(f_out, local_name);
 
        handle_stats(-1);
        io_flush(FULL_FLUSH);
        if (protocol_version >= 24) {
                /* send a final goodbye message */
-               write_int(f_out, -1);
+               write_ndx(f_out, NDX_DONE);
        }
        io_flush(FULL_FLUSH);
 
        set_msg_fd_in(-1);
        kill(pid, SIGUSR2);
-       wait_process(pid, &status);
-       return status;
+       wait_process_with_flush(pid, &exit_code);
+       return exit_code;
 }
 
-
-static void do_server_recv(int f_in, int f_out, int argc,char *argv[])
+static void do_server_recv(int f_in, int f_out, int argc, char *argv[])
 {
-       int status;
+       int exit_code;
        struct file_list *flist;
        char *local_name = NULL;
-       char *dir = NULL;
-       char olddir[sizeof curr_dir];
        int save_verbose = verbose;
 
        if (filesfrom_fd >= 0) {
@@ -649,19 +850,21 @@ static void do_server_recv(int f_in, int f_out, int argc,char *argv[])
                return;
        }
 
-
        if (argc > 0) {
-               dir = argv[0];
+               char *dir = argv[0];
                argc--;
                argv++;
-               if (!am_daemon && !push_dir(dir)) {
+               if (!am_daemon && !push_dir(dir, 0)) {
                        rsyserr(FERROR, errno, "push_dir#4 %s failed",
                                full_fname(dir));
                        exit_cleanup(RERR_FILESELECT);
                }
        }
 
-       io_start_buffering_in();
+       if (protocol_version >= 30)
+               io_start_multiplex_in();
+       else
+               io_start_buffering_in(f_in);
        recv_filter_list(f_in);
 
        if (filesfrom_fd >= 0) {
@@ -674,26 +877,51 @@ static void do_server_recv(int f_in, int f_out, int argc,char *argv[])
                filesfrom_fd = -1;
        }
 
-       strlcpy(olddir, curr_dir, sizeof olddir);
-       if (always_checksum && argc > 0)
-               pre_checksum = push_dir(argv[0]);
-
        flist = recv_file_list(f_in);
-       verbose = save_verbose;
        if (!flist) {
                rprintf(FERROR,"server_recv: recv_file_list error\n");
                exit_cleanup(RERR_FILESELECT);
        }
-       the_file_list = flist;
-
-       if (pre_checksum)
-               pop_dir(olddir);
+       if (inc_recurse && file_total == 1)
+               recv_additional_file_list(f_in);
+       verbose = save_verbose;
 
        if (argc > 0)
                local_name = get_local_name(flist,argv[0]);
 
-       status = do_recv(f_in,f_out,flist,local_name);
-       exit_cleanup(status);
+       /* Now that we know what our destination directory turned out to be,
+        * we can sanitize the --link-/copy-/compare-dest args correctly. */
+       if (sanitize_paths) {
+               char **dir_p;
+               for (dir_p = basis_dir; *dir_p; dir_p++)
+                       *dir_p = sanitize_path(NULL, *dir_p, NULL, curr_dir_depth);
+               if (partial_dir)
+                       partial_dir = sanitize_path(NULL, partial_dir, NULL, curr_dir_depth);
+       }
+       check_alt_basis_dirs();
+
+       if (server_filter_list.head) {
+               char **dir_p;
+               struct filter_list_struct *elp = &server_filter_list;
+
+               for (dir_p = basis_dir; *dir_p; dir_p++) {
+                       char *dir = *dir_p;
+                       if (*dir == '/')
+                               dir += module_dirlen;
+                       if (check_filter(elp, dir, 1) < 0)
+                               goto options_rejected;
+               }
+               if (partial_dir && *partial_dir == '/'
+                && check_filter(elp, partial_dir + module_dirlen, 1) < 0) {
+                   options_rejected:
+                       rprintf(FERROR,
+                               "Your options have been rejected by the server.\n");
+                       exit_cleanup(RERR_SYNTAX);
+               }
+       }
+
+       exit_code = do_recv(f_in, f_out, local_name);
+       exit_cleanup(exit_code);
 }
 
 
@@ -719,12 +947,10 @@ void start_server(int f_in, int f_out, int argc, char *argv[])
                keep_dirlinks = 0; /* Must be disabled on the sender. */
                if (need_messages_from_generator)
                        io_start_multiplex_in();
-
                recv_filter_list(f_in);
                do_server_sender(f_in, f_out, argc, argv);
-       } else {
+       } else
                do_server_recv(f_in, f_out, argc, argv);
-       }
        exit_cleanup(0);
 }
 
@@ -736,8 +962,7 @@ void start_server(int f_in, int f_out, int argc, char *argv[])
 int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
 {
        struct file_list *flist = NULL;
-       int status = 0, status2 = 0;
-       char olddir[sizeof curr_dir];
+       int exit_code = 0, exit_code2 = 0;
        char *local_name = NULL;
 
        cleanup_child_pid = pid;
@@ -749,9 +974,6 @@ int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
        io_set_sock_fds(f_in, f_out);
        setup_protocol(f_out,f_in);
 
-       if (protocol_version >= 23 && !read_batch)
-               io_start_multiplex_in();
-
        /* We set our stderr file handle to blocking because ssh might have
         * set it to non-blocking.  This can be particularly troublesome if
         * stderr is a clone of stdout, because ssh would have set our stdout
@@ -764,7 +986,10 @@ int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
 
        if (am_sender) {
                keep_dirlinks = 0; /* Must be disabled on the sender. */
-               io_start_buffering_out();
+               if (protocol_version >= 30)
+                       io_start_multiplex_out();
+               else
+                       io_start_buffering_out(f_out);
                if (!filesfrom_host)
                        set_msg_fd_in(f_in);
                send_filter_list(f_out);
@@ -777,30 +1002,38 @@ int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
                set_msg_fd_in(-1);
                if (verbose > 3)
                        rprintf(FINFO,"file list sent\n");
-               the_file_list = flist;
+
+               if (protocol_version >= 23)
+                       io_start_multiplex_in();
 
                io_flush(NORMAL_FLUSH);
-               send_files(flist,f_out,f_in);
+               send_files(f_in, f_out);
                io_flush(FULL_FLUSH);
                handle_stats(-1);
                if (protocol_version >= 24)
-                       read_final_goodbye(f_in, f_out);
+                       read_final_goodbye(f_in);
                if (pid != -1) {
                        if (verbose > 3)
                                rprintf(FINFO,"client_run waiting on %d\n", (int) pid);
                        io_flush(FULL_FLUSH);
-                       wait_process(pid, &status);
+                       wait_process_with_flush(pid, &exit_code);
                }
                output_summary();
                io_flush(FULL_FLUSH);
-               exit_cleanup(status);
+               exit_cleanup(exit_code);
        }
 
-       if (need_messages_from_generator && !read_batch)
-               io_start_multiplex_out();
+       if (!read_batch) {
+               if (protocol_version >= 23)
+                       io_start_multiplex_in();
+               if (need_messages_from_generator)
+                       io_start_multiplex_out();
+       }
 
-       if (argc == 0)
+       if (argc == 0) {
                list_only |= 1;
+               xfer_dirs |= 1;
+       }
 
        send_filter_list(read_batch ? -1 : f_out);
 
@@ -809,22 +1042,18 @@ int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
                filesfrom_fd = -1;
        }
 
-       strlcpy(olddir, curr_dir, sizeof olddir);
-       if (always_checksum)
-               pre_checksum = push_dir(argv[0]);
-
        if (write_batch && !am_server)
                start_write_batch(f_in);
        flist = recv_file_list(f_in);
-       the_file_list = flist;
-
-       if (pre_checksum)
-               pop_dir(olddir);
+       if (inc_recurse && file_total == 1)
+               recv_additional_file_list(f_in);
 
-       if (flist && flist->count > 0) {
+       if (flist && flist->used > 0) {
                local_name = get_local_name(flist, argv[0]);
 
-               status2 = do_recv(f_in, f_out, flist, local_name);
+               check_alt_basis_dirs();
+
+               exit_code2 = do_recv(f_in, f_out, local_name);
        } else {
                handle_stats(-1);
                output_summary();
@@ -834,13 +1063,13 @@ int client_run(int f_in, int f_out, pid_t pid, int argc, char *argv[])
                if (verbose > 3)
                        rprintf(FINFO,"client_run2 waiting on %d\n", (int) pid);
                io_flush(FULL_FLUSH);
-               wait_process(pid, &status);
+               wait_process_with_flush(pid, &exit_code);
        }
 
-       return MAX(status, status2);
+       return MAX(exit_code, exit_code2);
 }
 
-static int copy_argv (char *argv[])
+static int copy_argv(char *argv[])
 {
        int i;
 
@@ -866,64 +1095,69 @@ static int copy_argv (char *argv[])
  **/
 static int start_client(int argc, char *argv[])
 {
-       char *p;
-       char *shell_machine = NULL;
-       char *shell_path = NULL;
-       char *shell_user = NULL;
+       char *p, *shell_machine = NULL, *shell_user = NULL;
+       char **remote_argv;
+       int remote_argc;
+       int f_in, f_out;
        int ret;
        pid_t pid;
-       int f_in,f_out;
-       int rc;
 
        /* Don't clobber argv[] so that ps(1) can still show the right
         * command line. */
-       if ((rc = copy_argv(argv)))
-               return rc;
+       if ((ret = copy_argv(argv)) != 0)
+               return ret;
 
        if (!read_batch) { /* for read_batch, NO source is specified */
-               argc--;
-               shell_path = check_for_hostspec(argv[0], &shell_machine, &rsync_port);
-               if (shell_path) { /* source is remote */
-                       char *dummy1;
-                       int dummy2;
-                       if (argc && check_for_hostspec(argv[argc], &dummy1, &dummy2)) {
+               char *path = check_for_hostspec(argv[0], &shell_machine, &rsync_port);
+               if (path) { /* source is remote */
+                       char *dummy_host;
+                       int dummy_port = 0;
+                       *argv = path;
+                       remote_argv = argv;
+                       remote_argc = argc;
+                       argv += argc - 1;
+                       if (argc == 1 || **argv == ':')
+                               argc = 0; /* no dest arg */
+                       else if (check_for_hostspec(*argv, &dummy_host, &dummy_port)) {
                                rprintf(FERROR,
                                        "The source and destination cannot both be remote.\n");
                                exit_cleanup(RERR_SYNTAX);
+                       } else {
+                               remote_argc--; /* don't count dest */
+                               argc = 1;
                        }
-                       argv++;
                        if (filesfrom_host && *filesfrom_host
                            && strcmp(filesfrom_host, shell_machine) != 0) {
                                rprintf(FERROR,
                                        "--files-from hostname is not the same as the transfer hostname\n");
                                exit_cleanup(RERR_SYNTAX);
                        }
-                       if (rsync_port) {
-                               if (!shell_cmd) {
-                                       return start_socket_client(shell_machine,
-                                                                  shell_path,
-                                                                  argc, argv);
-                               }
-                               daemon_over_rsh = 1;
-                       }
-
                        am_sender = 0;
+                       if (rsync_port)
+                               daemon_over_rsh = shell_cmd ? 1 : -1;
                } else { /* source is local, check dest arg */
                        am_sender = 1;
 
-                       if (argc < 1) { /* destination required */
-                               usage(FERROR);
-                               exit_cleanup(RERR_SYNTAX);
+                       if (argc > 1) {
+                               p = argv[--argc];
+                               remote_argv = argv + argc;
+                       } else {
+                               static char *dotarg[1] = { "." };
+                               p = dotarg[0];
+                               remote_argv = dotarg;
+                               list_only |= 1;
+                               xfer_dirs |= 1;
                        }
+                       remote_argc = 1;
 
-                       shell_path = check_for_hostspec(argv[argc], &shell_machine, &rsync_port);
-                       if (shell_path && filesfrom_host && *filesfrom_host
+                       path = check_for_hostspec(p, &shell_machine, &rsync_port);
+                       if (path && filesfrom_host && *filesfrom_host
                            && strcmp(filesfrom_host, shell_machine) != 0) {
                                rprintf(FERROR,
                                        "--files-from hostname is not the same as the transfer hostname\n");
                                exit_cleanup(RERR_SYNTAX);
                        }
-                       if (!shell_path) { /* no hostspec found, so src & dest are local */
+                       if (!path) { /* no hostspec found, so src & dest are local */
                                local_server = 1;
                                if (filesfrom_host) {
                                        rprintf(FERROR,
@@ -931,23 +1165,78 @@ static int start_client(int argc, char *argv[])
                                        exit_cleanup(RERR_SYNTAX);
                                }
                                shell_machine = NULL;
-                               shell_path = argv[argc];
-                       } else if (rsync_port) {
-                               if (!shell_cmd) {
-                                       return start_socket_client(shell_machine,
-                                                                  shell_path,
-                                                                  argc, argv);
-                               }
-                               daemon_over_rsh = 1;
+                       } else { /* hostspec was found, so dest is remote */
+                               argv[argc] = path;
+                               if (rsync_port)
+                                       daemon_over_rsh = shell_cmd ? 1 : -1;
                        }
                }
        } else {  /* read_batch */
                local_server = 1;
-               shell_path = argv[argc-1];
-               if (check_for_hostspec(shell_path, &shell_machine, &rsync_port)) {
+               if (check_for_hostspec(argv[argc-1], &shell_machine, &rsync_port)) {
                        rprintf(FERROR, "remote destination is not allowed with --read-batch\n");
                        exit_cleanup(RERR_SYNTAX);
                }
+               remote_argv = argv + argc - 1;
+               remote_argc = 1;
+       }
+
+       if (am_sender) {
+               char *dummy_host;
+               int dummy_port = rsync_port;
+               int i;
+               /* For local source, extra source args must not have hostspec. */
+               for (i = 1; i < argc; i++) {
+                       if (check_for_hostspec(argv[i], &dummy_host, &dummy_port)) {
+                               rprintf(FERROR, "Unexpected remote arg: %s\n", argv[i]);
+                               exit_cleanup(RERR_SYNTAX);
+                       }
+               }
+       } else {
+               char *dummy_host;
+               int dummy_port = rsync_port;
+               int i;
+               /* For remote source, any extra source args must have either
+                * the same hostname or an empty hostname. */
+               for (i = 1; i < remote_argc; i++) {
+                       char *arg = check_for_hostspec(remote_argv[i], &dummy_host, &dummy_port);
+                       if (!arg) {
+                               rprintf(FERROR, "Unexpected local arg: %s\n", remote_argv[i]);
+                               rprintf(FERROR, "If arg is a remote file/dir, prefix it with a colon (:).\n");
+                               exit_cleanup(RERR_SYNTAX);
+                       }
+                       if (*dummy_host && strcmp(dummy_host, shell_machine) != 0) {
+                               rprintf(FERROR, "All source args must come from the same machine.\n");
+                               exit_cleanup(RERR_SYNTAX);
+                       }
+                       if (rsync_port != dummy_port) {
+                               if (!rsync_port || !dummy_port)
+                                       rprintf(FERROR, "All source args must use the same hostspec format.\n");
+                               else
+                                       rprintf(FERROR, "All source args must use the same port number.\n");
+                               exit_cleanup(RERR_SYNTAX);
+                       }
+                       remote_argv[i] = arg;
+               }
+               if (argc == 0) {
+                       list_only |= 1;
+                       xfer_dirs |= 1;
+               }
+       }
+
+       if (daemon_over_rsh < 0)
+               return start_socket_client(shell_machine, remote_argc, remote_argv, argc, argv);
+
+       if (password_file && !daemon_over_rsh) {
+               rprintf(FERROR, "The --password-file option may only be "
+                               "used when accessing an rsync daemon.\n");
+               exit_cleanup(RERR_SYNTAX);
+       }
+
+       if (connect_timeout) {
+               rprintf(FERROR, "The --contimeout option may only be "
+                               "used when connecting to an rsync daemon.\n");
+               exit_cleanup(RERR_SYNTAX);
        }
 
        if (shell_machine) {
@@ -961,31 +1250,18 @@ static int start_client(int argc, char *argv[])
 
        if (verbose > 3) {
                rprintf(FINFO,"cmd=%s machine=%s user=%s path=%s\n",
-                       shell_cmd ? safe_fname(shell_cmd) : "",
-                       shell_machine ? safe_fname(shell_machine) : "",
-                       shell_user ? safe_fname(shell_user) : "",
-                       shell_path ? safe_fname(shell_path) : "");
+                       NS(shell_cmd), NS(shell_machine), NS(shell_user),
+                       remote_argv ? NS(remote_argv[0]) : "");
        }
 
-       /* for remote source, only single dest arg can remain ... */
-       if (!am_sender && argc > 1) {
-               usage(FERROR);
-               exit_cleanup(RERR_SYNTAX);
-       }
-
-       /* ... or no dest at all */
-       if (!am_sender && argc == 0)
-               list_only |= 1;
-
-       pid = do_cmd(shell_cmd,shell_machine,shell_user,shell_path,
-                    &f_in,&f_out);
+       pid = do_cmd(shell_cmd, shell_machine, shell_user, remote_argv, remote_argc,
+                    &f_in, &f_out);
 
        /* if we're running an rsync server on the remote host over a
         * remote shell command, we need to do the RSYNCD protocol first */
        if (daemon_over_rsh) {
                int tmpret;
-               tmpret = start_inband_exchange(shell_user, shell_path,
-                                              f_in, f_out, argc);
+               tmpret = start_inband_exchange(f_in, f_out, shell_user, remote_argc, remote_argv);
                if (tmpret < 0)
                        return tmpret;
        }
@@ -1001,7 +1277,7 @@ static int start_client(int argc, char *argv[])
 
 static RETSIGTYPE sigusr1_handler(UNUSED(int val))
 {
-       exit_cleanup(RERR_SIGNAL);
+       exit_cleanup(RERR_SIGNAL1);
 }
 
 static RETSIGTYPE sigusr2_handler(UNUSED(int val))
@@ -1009,12 +1285,12 @@ static RETSIGTYPE sigusr2_handler(UNUSED(int val))
        if (!am_server)
                output_summary();
        close_all();
-       if (log_got_error)
+       if (got_xfer_error)
                _exit(RERR_PARTIAL);
        _exit(0);
 }
 
-static RETSIGTYPE sigchld_handler(UNUSED(int val))
+RETSIGTYPE remember_children(UNUSED(int val))
 {
 #ifdef WNOHANG
        int cnt, status;
@@ -1023,8 +1299,7 @@ static RETSIGTYPE sigchld_handler(UNUSED(int val))
         * get him to explain why he put it in, so rather than taking it
         * out we're instead saving the child exit statuses for later use.
         * The waitpid() loop presumably eliminates all possibility of leaving
-        * zombie children, maybe that's why he did it.
-        */
+        * zombie children, maybe that's why he did it. */
        while ((pid = waitpid(-1, &status, WNOHANG)) > 0) {
                /* save the child's exit status */
                for (cnt = 0; cnt < MAXCHILDPROCS; cnt++) {
@@ -1036,6 +1311,9 @@ static RETSIGTYPE sigchld_handler(UNUSED(int val))
                }
        }
 #endif
+#ifndef HAVE_SIGACTION
+       signal(SIGCHLD, remember_children);
+#endif
 }
 
 
@@ -1078,8 +1356,8 @@ static RETSIGTYPE rsync_panic_handler(UNUSED(int whatsig))
        char cmd_buf[300];
        int ret;
 
-       sprintf(cmd_buf, get_panic_action(),
-               getpid(), getpid());
+       snprintf(cmd_buf, sizeof cmd_buf, get_panic_action(),
+                getpid(), getpid());
 
        /* Unless we failed to execute gdb, we allow the process to
         * continue.  I'm not sure if that's right. */
@@ -1095,19 +1373,27 @@ int main(int argc,char *argv[])
        int ret;
        int orig_argc = argc;
        char **orig_argv = argv;
+#ifdef HAVE_SIGACTION
+# ifdef HAVE_SIGPROCMASK
+       sigset_t sigmask;
 
-       signal(SIGUSR1, sigusr1_handler);
-       signal(SIGUSR2, sigusr2_handler);
-       signal(SIGCHLD, sigchld_handler);
+       sigemptyset(&sigmask);
+# endif
+       sigact.sa_flags = SA_NOCLDSTOP;
+#endif
+       SIGACTMASK(SIGUSR1, sigusr1_handler);
+       SIGACTMASK(SIGUSR2, sigusr2_handler);
+       SIGACTMASK(SIGCHLD, remember_children);
 #ifdef MAINTAINER_MODE
-       signal(SIGSEGV, rsync_panic_handler);
-       signal(SIGFPE, rsync_panic_handler);
-       signal(SIGABRT, rsync_panic_handler);
-       signal(SIGBUS, rsync_panic_handler);
-#endif /* def MAINTAINER_MODE */
+       SIGACTMASK(SIGSEGV, rsync_panic_handler);
+       SIGACTMASK(SIGFPE, rsync_panic_handler);
+       SIGACTMASK(SIGABRT, rsync_panic_handler);
+       SIGACTMASK(SIGBUS, rsync_panic_handler);
+#endif
 
        starttime = time(NULL);
-       am_root = (MY_UID() == 0);
+       our_uid = MY_UID();
+       am_root = our_uid == 0;
 
        memset(&stats, 0, sizeof(stats));
 
@@ -1118,32 +1404,38 @@ int main(int argc,char *argv[])
 
        /* we set a 0 umask so that correct file permissions can be
         * carried across */
-       orig_umask = (int)umask(0);
+       orig_umask = umask(0);
 
-       if (!parse_arguments(&argc, (const char ***) &argv, 1)) {
+#if defined CONFIG_LOCALE && defined HAVE_SETLOCALE
+       setlocale(LC_CTYPE, "");
+#endif
+
+       if (!parse_arguments(&argc, (const char ***) &argv)) {
                /* FIXME: We ought to call the same error-handling
                 * code here, rather than relying on getopt. */
                option_error();
                exit_cleanup(RERR_SYNTAX);
        }
 
-       signal(SIGINT,SIGNAL_CAST sig_int);
-       signal(SIGHUP,SIGNAL_CAST sig_int);
-       signal(SIGTERM,SIGNAL_CAST sig_int);
+       SIGACTMASK(SIGINT, sig_int);
+       SIGACTMASK(SIGHUP, sig_int);
+       SIGACTMASK(SIGTERM, sig_int);
+#if defined HAVE_SIGACTION && HAVE_SIGPROCMASK
+       sigprocmask(SIG_UNBLOCK, &sigmask, NULL);
+#endif
 
        /* Ignore SIGPIPE; we consistently check error codes and will
         * see the EPIPE. */
-       signal(SIGPIPE, SIG_IGN);
-
-#if defined CONFIG_LOCALE && defined HAVE_SETLOCALE
-       setlocale(LC_CTYPE, "");
+       SIGACTION(SIGPIPE, SIG_IGN);
+#ifdef SIGXFSZ
+       SIGACTION(SIGXFSZ, SIG_IGN);
 #endif
 
        /* Initialize push_dir here because on some old systems getcwd
         * (implemented by forking "pwd" and reading its output) doesn't
         * work when there are other child processes.  Also, on all systems
         * that implement getcwd that way "pwd" can't be found after chroot. */
-       push_dir(NULL);
+       push_dir(NULL, 0);
 
        init_flist();
 
@@ -1165,13 +1457,30 @@ int main(int argc,char *argv[])
                }
                if (read_batch)
                        read_stream_flags(batch_fd);
+               else
+                       write_stream_flags(batch_fd);
+
        }
        if (write_batch < 0)
                dry_run = 1;
 
-       if (am_daemon && !am_server)
+       if (am_server) {
+#ifdef ICONV_CONST
+               setup_iconv();
+#endif
+       } else if (am_daemon)
                return daemon_main();
 
+       if (am_server && protect_args) {
+               char buf[MAXPATHLEN];
+               protect_args = 2;
+               read_args(STDIN_FILENO, NULL, buf, sizeof buf, 1, &argv, &argc, NULL);
+               if (!parse_arguments(&argc, (const char ***) &argv)) {
+                       option_error();
+                       exit_cleanup(RERR_SYNTAX);
+               }
+       }
+
        if (argc < 1) {
                usage(FERROR);
                exit_cleanup(RERR_SYNTAX);