aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rwxr-xr-xbuild.sh27
-rw-r--r--src/lpm.c1662
-rw-r--r--src/lpm.lua75
3 files changed, 970 insertions, 794 deletions
diff --git a/build.sh b/build.sh
index 9d7659f..8792fc0 100755
--- a/build.sh
+++ b/build.sh
@@ -7,8 +7,18 @@
: ${BIN=lpm}
: ${JOBS=4}
+# The build options are available:
+# clean Cleans the build directory.
+# -g Compile with debug support.
+# -l<library> Compiles against the shared system version of the specified library.
+# -DLPM_NO_GIT Compiles without libgit2 support.
+# -DLPM_NO_NETWORK Compiles without network support.
+# -DLPM_NO_THREADS Compiles without threading support.
+# -DLPM_VERSION Sets the specific version.
+# -DLPM_STATIC Bundles lpm.lua into the binary executable.
+
SRCS="src/*.c"
-COMPILE_FLAGS="$CFLAGS -I`pwd`/lib/prefix/include" # We specifically rename this and LDFLAGS, because exotic build environments export these to subprcoesses.
+COMPILE_FLAGS="$CFLAGS -I`pwd`/lib/prefix/include" # We specifically rename this and LDFLAGS, because exotic build environments export these to subprocesses.
LINK_FLAGS="$LDFLAGS -lm -L`pwd`/lib/prefix/lib -L`pwd`/lib/prefix/lib64" # And ideally we don't want to mess with the underlying build processes, unless we're explicit about it.
[[ "$@" == "clean" ]] && rm -rf lib/libgit2/build lib/zlib/build lib/libzip/build lib/xz/build lib/mbedtls/build lib/prefix lua $BIN *.exe src/lpm.luac src/lpm.lua.c && exit 0
@@ -27,12 +37,13 @@ if [[ "$@" != *"-llzma"* ]]; then
[ ! -e "lib/xz/build" ] && { cd lib/xz && mkdir build && cd build && CFLAGS="$COMPILE_FLAGS -Wno-incompatible-pointer-types" cmake .. -G "Unix Makefiles" $CMAKE_DEFAULT_FLAGS -DHAVE_ENCODERS=false && $MAKE -j $JOBS && $MAKE install && cd ../../../ || exit -1; }
LINK_FLAGS="$LINK_FLAGS -llzma"
fi
-if [[ "$@" != *"-lmbedtls"* && "$@" != *"-lmbedcrypto"* && "$@" != *"-lmbedx509"* ]]; then
+if [[ "$@" != *"-DLPM_NO_NETWORK"* && "$@" != *"-lmbedtls"* && "$@" != *"-lmbedcrypto"* && "$@" != *"-lmbedx509"* ]]; then
[ ! -e "lib/mbedtls/build" ] && { cd lib/mbedtls && mkdir build && cd build && CFLAGS="$COMPILE_FLAGS $CFLAGS_MBEDTLS -DMBEDTLS_MD4_C=1 -DMBEDTLS_DEBUG_C -w" cmake .. $CMAKE_DEFAULT_FLAGS -G "Unix Makefiles" -DENABLE_TESTING=OFF -DENABLE_PROGRAMS=OFF $SSL_CONFIGURE && CFLAGS="$COMPILE_FLAGS $CFLAGS_MBEDTLS -DMBEDTLS_MD4_C=1 -w" $MAKE -j $JOBS && $MAKE install && cd ../../../ || exit -1; }
LINK_FLAGS="$LINK_FLAGS -lmbedtls -lmbedx509 -lmbedcrypto"
fi
-if [[ "$@" != *"-lgit2"* ]]; then
- [ ! -e "lib/libgit2/build" ] && { cd lib/libgit2 && mkdir build && cd build && cmake .. -G "Unix Makefiles" $GIT2_CONFIGURE $CMAKE_DEFAULT_FLAGS -DBUILD_TESTS=OFF -DBUILD_CLI=OFF -DREGEX_BACKEND=builtin -DUSE_SSH=OFF -DUSE_HTTPS=mbedTLS && $MAKE -j $JOBS && $MAKE install && cd ../../../ || exit -1; }
+if [[ "$@" != *"-DLPM_NO_GIT"* && "$@" != *"-lgit2"* ]]; then
+ [[ "$@" != *"-DLPM_NO_NETWORK"* ]] && USE_HTTPS="mbedTLS" || USE_HTTPS="OFF"
+ [ ! -e "lib/libgit2/build" ] && { cd lib/libgit2 && mkdir build && cd build && cmake .. -G "Unix Makefiles" $GIT2_CONFIGURE $CMAKE_DEFAULT_FLAGS -DBUILD_TESTS=OFF -DBUILD_CLI=OFF -DREGEX_BACKEND=builtin -DUSE_SSH=OFF -DUSE_HTTPS=$USE_HTTPS && $MAKE -j $JOBS && $MAKE install && cd ../../../ || exit -1; }
LINK_FLAGS="-lgit2 $LINK_FLAGS"
fi
if [[ "$@" != *"-lzip"* ]]; then
@@ -48,9 +59,11 @@ if [[ "$@" == *"-DLPM_STATIC"* ]]; then
./lua.exe -e 'io.open("src/lpm.lua.c", "wb"):write("unsigned char lpm_luac[] = \""..string.dump(load(io.lines("src/lpm.lua","L"), "=lpm.lua")):gsub(".",function(c) return string.format("\\x%02X",string.byte(c)) end).."\";unsigned int lpm_luac_len = sizeof(lpm_luac)-1;")'
fi
-[[ $OSTYPE != 'msys'* && $CC != *'mingw'* && $CC != "emcc" ]] && COMPILE_FLAGS="$COMPILE_FLAGS -DLUA_USE_LINUX" && LINK_FLAGS="$LINK_FLAGS -ldl"
-[[ $OSTYPE == 'msys'* || $CC == *'mingw'* ]] && LINK_FLAGS="$LINK_FLAGS -lbcrypt -lws2_32 -lz -lwinhttp -lole32 -lcrypt32 -lrpcrt4 -lsecur32"
-[[ $OSTYPE == *'darwin'* ]] && LINK_FLAGS="$LINK_FLAGS -liconv -framework Security -framework Foundation"
+[[ $OSTYPE != 'msys'* && $CC != *'mingw'* && $CC != "emcc" ]] && COMPILE_FLAGS="$COMPILE_FLAGS -DLUA_USE_LINUX" && LINK_FLAGS="$LINK_FLAGS -ldl"
+[[ $OSTYPE == 'msys'* || $CC == *'mingw'* ]] && LINK_FLAGS="$LINK_FLAGS -lbcrypt -lz -lole32 -lcrypt32 -lrpcrt4 -lsecur32"
+[[ $OSTYPE == 'msys'* || $CC == *'mingw'* ]] && "$@" != *"-DLPM_NO_NETWORK"* && LINK_FLAGS="$LINK_FLAGS -lws2_32 -lwinhttp"
+[[ $OSTYPE == *'darwin'* ]] && LINK_FLAGS="$LINK_FLAGS -liconv -framework Foundation"
+[[ $OSTYPE == *'darwin'* ]] && "$@" != *"-DLPM_NO_NETWORK"* && LINK_FLAGS="$LINK_FLAGS -framework Security"
[[ " $@" != *" -g"* && " $@" != *" -O"* ]] && COMPILE_FLAGS="$COMPILE_FLAGS -O3" && LINK_FLAGS="$LINK_FLAGS -s -flto"
$CC $COMPILE_FLAGS $SRCS $@ -o $BIN $LINK_FLAGS
diff --git a/src/lpm.c b/src/lpm.c
index 905506e..0db5d01 100644
--- a/src/lpm.c
+++ b/src/lpm.c
@@ -1,61 +1,67 @@
#ifdef _WIN32
#include <direct.h>
- #include <winsock2.h>
#include <windows.h>
#include <fileapi.h>
#else
#ifndef LPM_NO_THRAEDS
#include <pthread.h>
#endif
- #include <netdb.h>
- #include <sys/socket.h>
#include <sys/ioctl.h>
- #include <arpa/inet.h>
#include <libgen.h>
#include <termios.h>
#define MAX_PATH PATH_MAX
#endif
-#include <assert.h>
-#include <git2.h>
#include <string.h>
#include <stdio.h>
#include <errno.h>
-#include <lua.h>
-#include <lualib.h>
-#include <lauxlib.h>
#include <ctype.h>
#include <dirent.h>
#include <unistd.h>
#include <fcntl.h>
-
#include <sys/stat.h>
#include <sys/file.h>
-#include <git2.h>
-#include <lzma.h>
-#include <mbedtls/sha256.h>
-#include <mbedtls/x509.h>
-#include <mbedtls/entropy.h>
-#include <mbedtls/ctr_drbg.h>
-#include <mbedtls/ssl.h>
-#include <mbedtls/error.h>
-#if MBEDTLS_VERSION_MAJOR < 3
- #include <mbedtls/net.h>
-#else
- #include <mbedtls/net_sockets.h>
+
+#include <lua.h>
+#include <lualib.h>
+#include <lauxlib.h>
+
+#ifndef LPM_NO_GIT
+ #include <git2.h>
#endif
-#ifdef MBEDTLS_DEBUG_C
- #include <mbedtls/debug.h>
+
+#ifndef LPM_NO_NETWORK
+ #include <mbedtls/x509.h>
+ #include <mbedtls/entropy.h>
+ #include <mbedtls/ctr_drbg.h>
+ #include <mbedtls/ssl.h>
+ #include <mbedtls/error.h>
+ #if MBEDTLS_VERSION_MAJOR < 3
+ #include <mbedtls/net.h>
+ #else
+ #include <mbedtls/net_sockets.h>
+ #endif
+ #ifdef MBEDTLS_DEBUG_C
+ #include <mbedtls/debug.h>
+ #endif
+ #ifdef _WIN32
+ #include <winsock2.h>
+ #else
+ #include <netdb.h>
+ #include <arpa/inet.h>
+ #include <sys/socket.h>
+ #ifdef __APPLE__
+ #include <Security/Security.h>
+ #endif
+ #endif
#endif
#include <zlib.h>
+#include <lzma.h>
#include <microtar.h>
#include <zip.h>
-#ifdef __APPLE__
- #include <Security/Security.h>
-#endif
#define HTTPS_RESPONSE_HEADER_BUFFER_LENGTH 8192
@@ -228,6 +234,7 @@ static FILE* lua_fopen(lua_State* L, const char* path, const char* mode) {
#endif
}
+/** Hashing stuff; would have taken from mbedtls, but cannot guarantee it'll be there. **/
static char hex_digits[] = "0123456789abcdef";
static void lua_pushhexstring(lua_State* L, const unsigned char* buffer, size_t length) {
char hex_buffer[length * 2 + 1];
@@ -238,34 +245,162 @@ static void lua_pushhexstring(lua_State* L, const unsigned char* buffer, size_t
lua_pushlstring(L, hex_buffer, length * 2);
}
+typedef struct {
+ unsigned char data[64];
+ int datalen;
+ unsigned long long bitlen;
+ int state[8];
+} SHA256_CTX;
+#define ROTLEFT(a,b) (((a) << (b)) | ((a) >> (32-(b))))
+#define ROTRIGHT(a,b) (((a) >> (b)) | ((a) << (32-(b))))
+#define CH(x,y,z) (((x) & (y)) ^ (~(x) & (z)))
+#define MAJ(x,y,z) (((x) & (y)) ^ ((x) & (z)) ^ ((y) & (z)))
+#define EP0(x) (ROTRIGHT(x,2) ^ ROTRIGHT(x,13) ^ ROTRIGHT(x,22))
+#define EP1(x) (ROTRIGHT(x,6) ^ ROTRIGHT(x,11) ^ ROTRIGHT(x,25))
+#define SIG0(x) (ROTRIGHT(x,7) ^ ROTRIGHT(x,18) ^ ((x) >> 3))
+#define SIG1(x) (ROTRIGHT(x,17) ^ ROTRIGHT(x,19) ^ ((x) >> 10))
+static void sha256_transform(SHA256_CTX *ctx, const unsigned char* data) {
+ static const int k[64] = {
+ 0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
+ 0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
+ 0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
+ 0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
+ 0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
+ 0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
+ 0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
+ 0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
+ };
+
+ int a, b, c, d, e, f, g, h, i, j, t1, t2, m[64];
+
+ for (i = 0, j = 0; i < 16; ++i, j += 4)
+ m[i] = (data[j] << 24) | (data[j + 1] << 16) | (data[j + 2] << 8) | (data[j + 3]);
+ for ( ; i < 64; ++i)
+ m[i] = SIG1(m[i - 2]) + m[i - 7] + SIG0(m[i - 15]) + m[i - 16];
+
+ a = ctx->state[0];
+ b = ctx->state[1];
+ c = ctx->state[2];
+ d = ctx->state[3];
+ e = ctx->state[4];
+ f = ctx->state[5];
+ g = ctx->state[6];
+ h = ctx->state[7];
+
+ for (i = 0; i < 64; ++i) {
+ t1 = h + EP1(e) + CH(e,f,g) + k[i] + m[i];
+ t2 = EP0(a) + MAJ(a,b,c);
+ h = g;
+ g = f;
+ f = e;
+ e = d + t1;
+ d = c;
+ c = b;
+ b = a;
+ a = t1 + t2;
+ }
+
+ ctx->state[0] += a;
+ ctx->state[1] += b;
+ ctx->state[2] += c;
+ ctx->state[3] += d;
+ ctx->state[4] += e;
+ ctx->state[5] += f;
+ ctx->state[6] += g;
+ ctx->state[7] += h;
+}
+
+static void sha256_init(SHA256_CTX *ctx) {
+ ctx->datalen = 0;
+ ctx->bitlen = 0;
+ ctx->state[0] = 0x6a09e667;
+ ctx->state[1] = 0xbb67ae85;
+ ctx->state[2] = 0x3c6ef372;
+ ctx->state[3] = 0xa54ff53a;
+ ctx->state[4] = 0x510e527f;
+ ctx->state[5] = 0x9b05688c;
+ ctx->state[6] = 0x1f83d9ab;
+ ctx->state[7] = 0x5be0cd19;
+}
+
+static void sha256_update(SHA256_CTX *ctx, const unsigned char* data, size_t len) {
+ for (int i = 0; i < len; ++i) {
+ ctx->data[ctx->datalen] = data[i];
+ ctx->datalen++;
+ if (ctx->datalen == 64) {
+ sha256_transform(ctx, ctx->data);
+ ctx->bitlen += 512;
+ ctx->datalen = 0;
+ }
+ }
+}
+
+static void sha256_final(SHA256_CTX *ctx, unsigned char* hash) {
+ int i = ctx->datalen;
+
+ // Pad whatever data is left in the buffer.
+ if (ctx->datalen < 56) {
+ ctx->data[i++] = 0x80;
+ while (i < 56)
+ ctx->data[i++] = 0x00;
+ }
+ else {
+ ctx->data[i++] = 0x80;
+ while (i < 64)
+ ctx->data[i++] = 0x00;
+ sha256_transform(ctx, ctx->data);
+ memset(ctx->data, 0, 56);
+ }
+
+ // Append to the padding the total message's length in bits and transform.
+ ctx->bitlen += ctx->datalen * 8;
+ ctx->data[63] = ctx->bitlen;
+ ctx->data[62] = ctx->bitlen >> 8;
+ ctx->data[61] = ctx->bitlen >> 16;
+ ctx->data[60] = ctx->bitlen >> 24;
+ ctx->data[59] = ctx->bitlen >> 32;
+ ctx->data[58] = ctx->bitlen >> 40;
+ ctx->data[57] = ctx->bitlen >> 48;
+ ctx->data[56] = ctx->bitlen >> 56;
+ sha256_transform(ctx, ctx->data);
+
+ // Since this implementation uses little endian byte ordering and SHA uses big endian,
+ // reverse all the bytes when copying the final state to the output hash.
+ for (i = 0; i < 4; ++i) {
+ hash[i] = (ctx->state[0] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 4] = (ctx->state[1] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 8] = (ctx->state[2] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 12] = (ctx->state[3] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 16] = (ctx->state[4] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 20] = (ctx->state[5] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 24] = (ctx->state[6] >> (24 - i * 8)) & 0x000000ff;
+ hash[i + 28] = (ctx->state[7] >> (24 - i * 8)) & 0x000000ff;
+ }
+}
static int lpm_hash(lua_State* L) {
size_t len;
const char* data = luaL_checklstring(L, 1, &len);
const char* type = luaL_optstring(L, 2, "string");
static const int digest_length = 32;
unsigned char buffer[digest_length];
- mbedtls_sha256_context hash_ctx;
- mbedtls_sha256_init(&hash_ctx);
- mbedtls_sha256_starts(&hash_ctx, 0);
+ SHA256_CTX hash_ctx;
+ sha256_init(&hash_ctx);
if (strcmp(type, "file") == 0) {
FILE* file = lua_fopen(L, data, "rb");
- if (!file) {
- mbedtls_sha256_free(&hash_ctx);
+ if (!file)
return luaL_error(L, "can't open %s", data);
- }
while (1) {
unsigned char chunk[4096];
size_t bytes = fread(chunk, 1, sizeof(chunk), file);
- mbedtls_sha256_update(&hash_ctx, chunk, bytes);
+ sha256_update(&hash_ctx, chunk, bytes);
if (bytes < sizeof(chunk))
break;
}
fclose(file);
} else {
- mbedtls_sha256_update(&hash_ctx, data, len);
+ sha256_update(&hash_ctx, data, len);
}
- mbedtls_sha256_finish(&hash_ctx, buffer);
- mbedtls_sha256_free(&hash_ctx);
+ sha256_final(&hash_ctx, buffer);
lua_pushhexstring(L, buffer, digest_length);
return 1;
}
@@ -451,423 +586,276 @@ static int lpm_stat(lua_State *L) {
return 1;
}
/** END STOLEN LITE CODE **/
-
-static const char* git_error_last_string() {
- const git_error* last_error = git_error_last();
- return last_error->message;
+static int print_trace;
+static int lpm_trace(lua_State* L) {
+ print_trace = lua_toboolean(L, 1) ? 1 : 0;
+ return 0;
}
-static int git_get_id(git_oid* commit_id, git_repository* repository, const char* name) {
- int length = strlen(name);
- int is_hex = 1;
- for (int i = 0; is_hex && i < length; ++i)
- is_hex = isxdigit(name[i]);
- if (!is_hex || length < 3)
- return git_reference_name_to_id(commit_id, repository, name);
- if (length < GIT_OID_SHA1_SIZE*2) {
- if (length % 2 != 0)
- return -1;
- git_commit* commit;
- git_oid oid = {0};
- for (int i = 0; i < length/2; ++i)
- oid.id[i] |= (name[i] - '0') << ((i % 2) * 4);
- int ret = git_commit_lookup_prefix(&commit, repository, &oid, length/2);
- if (ret)
- return ret;
- git_oid_cpy(commit_id, git_commit_id(commit));
- git_commit_free(commit);
- return 0;
+#ifndef LPM_NO_GIT
+ static const char* git_error_last_string() {
+ const git_error* last_error = git_error_last();
+ return last_error->message;
}
- return git_oid_fromstr(commit_id, name);
-}
-static git_repository* luaL_checkgitrepo(lua_State* L, int index) {
- const char* path = luaL_checkstring(L, index);
- git_repository* repository;
- if (git_repository_open(&repository, path))
- return (void*)(long long)luaL_error(L, "git open error: %s", git_error_last_string());
- return repository;
-}
+ static int git_get_id(git_oid* commit_id, git_repository* repository, const char* name) {
+ int length = strlen(name);
+ int is_hex = 1;
+ for (int i = 0; is_hex && i < length; ++i)
+ is_hex = isxdigit(name[i]);
+ if (!is_hex || length < 3)
+ return git_reference_name_to_id(commit_id, repository, name);
+ if (length < GIT_OID_SHA1_SIZE*2) {
+ if (length % 2 != 0)
+ return -1;
+ git_commit* commit;
+ git_oid oid = {0};
+ for (int i = 0; i < length/2; ++i)
+ oid.id[i] |= (name[i] - '0') << ((i % 2) * 4);
+ int ret = git_commit_lookup_prefix(&commit, repository, &oid, length/2);
+ if (ret)
+ return ret;
+ git_oid_cpy(commit_id, git_commit_id(commit));
+ git_commit_free(commit);
+ return 0;
+ }
+ return git_oid_fromstr(commit_id, name);
+ }
+ static git_repository* luaL_checkgitrepo(lua_State* L, int index) {
+ const char* path = luaL_checkstring(L, index);
+ git_repository* repository;
+ if (git_repository_open(&repository, path))
+ return (void*)(long long)luaL_error(L, "git open error: %s", git_error_last_string());
+ return repository;
+ }
-static git_commit* git_retrieve_commit(git_repository* repository, const char* commit_name) {
- git_oid commit_id;
- git_commit* commit;
- if (git_get_id(&commit_id, repository, commit_name) || git_commit_lookup(&commit, repository, &commit_id))
- return NULL;
- return commit;
-}
-// We move this out of main, because this is a significantly expensive function,
-// and we don't need to call it every time we run lpm.
-static int git_initialized = 0;
-static int git_cert_type = 0;
-static char git_cert_path[MAX_PATH];
-static void git_init() {
- if (!git_initialized) {
- git_libgit2_init();
- if (git_cert_type)
- git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, git_cert_type == 2 ? git_cert_path : NULL, git_cert_type == 1 ? git_cert_path : NULL);
- git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_SYSTEM, ".");
- git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_GLOBAL, ".");
- git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_XDG, ".");
- git_initialized = 1;
+ static git_commit* git_retrieve_commit(git_repository* repository, const char* commit_name) {
+ git_oid commit_id;
+ git_commit* commit;
+ if (git_get_id(&commit_id, repository, commit_name) || git_commit_lookup(&commit, repository, &commit_id))
+ return NULL;
+ return commit;
}
-}
-
-static int lpm_reset(lua_State* L) {
- git_init();
- git_repository* repository = luaL_checkgitrepo(L, 1);
- const char* commit_name = luaL_checkstring(L, 2);
- const char* type = luaL_checkstring(L, 3);
- git_commit* commit = git_retrieve_commit(repository, commit_name);
- if (!commit) {
- git_repository_free(repository);
- return luaL_error(L, "git retrieve commit error: %s", git_error_last_string());
+ // We move this out of main, because this is a significantly expensive function,
+ // and we don't need to call it every time we run lpm.
+ static int git_initialized = 0;
+ static int git_cert_type = 0;
+ static char git_cert_path[MAX_PATH];
+ static void git_init() {
+ if (!git_initialized) {
+ git_libgit2_init();
+ if (git_cert_type)
+ git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, git_cert_type == 2 ? git_cert_path : NULL, git_cert_type == 1 ? git_cert_path : NULL);
+ git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_SYSTEM, ".");
+ git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_GLOBAL, ".");
+ git_libgit2_opts(GIT_OPT_SET_SEARCH_PATH, GIT_CONFIG_LEVEL_XDG, ".");
+ git_initialized = 1;
+ }
}
- git_reset_t reset_type = GIT_RESET_SOFT;
- if (strcmp(type, "mixed") == 0)
- reset_type = GIT_RESET_MIXED;
- else if (strcmp(type, "hard") == 0)
- reset_type = GIT_RESET_HARD;
- int result = git_reset(repository, (git_object*)commit, reset_type, NULL);
- git_commit_free(commit);
- git_repository_free(repository);
- if (result)
- return luaL_error(L, "git reset error: %s", git_error_last_string());
- return 0;
-}
-static int lpm_init(lua_State* L) {
- git_init();
- const char* path = luaL_checkstring(L, 1);
- const char* url = luaL_checkstring(L, 2);
- git_repository* repository;
- if (git_repository_init(&repository, path, 0))
- return luaL_error(L, "git init error: %s", git_error_last_string());
- git_remote* remote;
- if (git_remote_create(&remote, repository, "origin", url)) {
+ static int lpm_reset(lua_State* L) {
+ git_init();
+ git_repository* repository = luaL_checkgitrepo(L, 1);
+ const char* commit_name = luaL_checkstring(L, 2);
+ const char* type = luaL_checkstring(L, 3);
+ git_commit* commit = git_retrieve_commit(repository, commit_name);
+ if (!commit) {
+ git_repository_free(repository);
+ return luaL_error(L, "git retrieve commit error: %s", git_error_last_string());
+ }
+ git_reset_t reset_type = GIT_RESET_SOFT;
+ if (strcmp(type, "mixed") == 0)
+ reset_type = GIT_RESET_MIXED;
+ else if (strcmp(type, "hard") == 0)
+ reset_type = GIT_RESET_HARD;
+ int result = git_reset(repository, (git_object*)commit, reset_type, NULL);
+ git_commit_free(commit);
git_repository_free(repository);
- return luaL_error(L, "git remote add error: %s", git_error_last_string());
+ if (result)
+ return luaL_error(L, "git reset error: %s", git_error_last_string());
+ return 0;
}
- git_remote_free(remote);
- git_repository_free(repository);
- return 0;
-}
-
-static int no_verify_ssl, has_setup_ssl, print_trace;
-static mbedtls_x509_crt x509_certificate;
-static mbedtls_entropy_context entropy_context;
-static mbedtls_ctr_drbg_context drbg_context;
-static mbedtls_ssl_config ssl_config;
-static mbedtls_ssl_context ssl_context;
-
-static int lpm_git_transport_certificate_check_cb(struct git_cert *cert, int valid, const char *host, void *payload) {
- return 0; // If no_verify_ssl is enabled, basically always return 0 when this is set as callback.
-}
-typedef struct {
- git_repository* repository;
- lua_State* L;
- char refspec[512];
- int depth;
- int threaded;
- int callback_function;
- git_transfer_progress progress;
- int progress_update;
- int complete;
- int error_code;
- char data[512];
- lpm_thread_t* thread;
-} fetch_context_t;
-
-static int lpm_fetch_callback(lua_State* L, const git_transfer_progress *stats) {
- lua_pushinteger(L, stats->received_bytes);
- lua_pushinteger(L, stats->total_objects);
- lua_pushinteger(L, stats->indexed_objects);
- lua_pushinteger(L, stats->received_objects);
- lua_pushinteger(L, stats->local_objects);
- lua_pushinteger(L, stats->total_deltas);
- lua_pushinteger(L, stats->indexed_deltas);
- return lua_pcall(L, 7, 0, 0);
-}
-
-static int lpm_git_transfer_progress_cb(const git_transfer_progress *stats, void *payload) {
- fetch_context_t* context = (fetch_context_t*)payload;
- if (!context->threaded) {
- if (context->callback_function) {
- lua_rawgeti(context->L, LUA_REGISTRYINDEX, context->callback_function);
- lpm_fetch_callback(context->L, stats);
+ static int lpm_init(lua_State* L) {
+ git_init();
+ const char* path = luaL_checkstring(L, 1);
+ const char* url = luaL_checkstring(L, 2);
+ git_repository* repository;
+ if (git_repository_init(&repository, path, 0))
+ return luaL_error(L, "git init error: %s", git_error_last_string());
+ git_remote* remote;
+ if (git_remote_create(&remote, repository, "origin", url)) {
+ git_repository_free(repository);
+ return luaL_error(L, "git remote add error: %s", git_error_last_string());
}
- } else {
- context->progress = *stats;
- context->progress_update = 1;
+ git_remote_free(remote);
+ git_repository_free(repository);
+ return 0;
}
- return 0;
-}
-static int lua_is_main_thread(lua_State* L) {
- #ifndef LPM_NO_THREADS
- int is_main = lua_pushthread(L);
- lua_pop(L, 1);
- return is_main;
- #else
- return 1;
- #endif
-}
-static void* lpm_fetch_thread(void* ctx) {
- git_remote* remote;
- fetch_context_t* context = (fetch_context_t*)ctx;
- int error = git_remote_lookup(&remote, context->repository, "origin");
- if (error && !context->error_code) {
- snprintf(context->data, sizeof(context->data), "git remote fetch error: %s", git_error_last_string());
- context->error_code = error;
- return NULL;
+ typedef struct {
+ git_repository* repository;
+ lua_State* L;
+ char refspec[512];
+ int depth;
+ int threaded;
+ int callback_function;
+ git_transfer_progress progress;
+ int progress_update;
+ int complete;
+ int error_code;
+ char data[512];
+ lpm_thread_t* thread;
+ } fetch_context_t;
+
+ static int lpm_fetch_callback(lua_State* L, const git_transfer_progress *stats) {
+ lua_pushinteger(L, stats->received_bytes);
+ lua_pushinteger(L, stats->total_objects);
+ lua_pushinteger(L, stats->indexed_objects);
+ lua_pushinteger(L, stats->received_objects);
+ lua_pushinteger(L, stats->local_objects);
+ lua_pushinteger(L, stats->total_deltas);
+ lua_pushinteger(L, stats->indexed_deltas);
+ return lua_pcall(L, 7, 0, 0);
}
- git_fetch_options fetch_opts = GIT_FETCH_OPTIONS_INIT;
- fetch_opts.download_tags = GIT_REMOTE_DOWNLOAD_TAGS_ALL;
- fetch_opts.callbacks.payload = context;
- #if (LIBGIT2_VER_MAJOR == 1 && LIBGIT2_VER_MINOR >= 7) || LIBGIT2_VER_MAJOR > 1
- fetch_opts.depth = context->depth;
- #endif
- if (no_verify_ssl)
- fetch_opts.callbacks.certificate_check = lpm_git_transport_certificate_check_cb;
- fetch_opts.callbacks.transfer_progress = lpm_git_transfer_progress_cb;
- char* strings[] = { context->refspec };
- git_strarray array = { strings, 1 };
-
- error = git_remote_connect(remote, GIT_DIRECTION_FETCH, &fetch_opts.callbacks, NULL, NULL) ||
- git_remote_download(remote, context->refspec[0] ? &array : NULL, &fetch_opts) ||
- git_remote_update_tips(remote, &fetch_opts.callbacks, fetch_opts.update_fetchhead, fetch_opts.download_tags, NULL);
- if (!error && !context->error_code) {
- git_buf branch_name = {0};
- if (!git_remote_default_branch(&branch_name, remote)) {
- strncpy(context->data, branch_name.ptr, sizeof(context->data));
- git_buf_dispose(&branch_name);
+
+ static int lpm_git_transfer_progress_cb(const git_transfer_progress *stats, void *payload) {
+ fetch_context_t* context = (fetch_context_t*)payload;
+ if (!context->threaded) {
+ if (context->callback_function) {
+ lua_rawgeti(context->L, LUA_REGISTRYINDEX, context->callback_function);
+ lpm_fetch_callback(context->L, stats);
+ }
+ } else {
+ context->progress = *stats;
+ context->progress_update = 1;
}
+ return 0;
}
- git_remote_disconnect(remote);
- git_remote_free(remote);
- if (error && !context->error_code) {
- snprintf(context->data, sizeof(context->data), "git remote fetch error: %s", git_error_last_string());
- context->error_code = error;
- }
- context->complete = 1;
- return NULL;
-}
+ static int lua_is_main_thread(lua_State* L) {
+ #ifndef LPM_NO_THREADS
+ int is_main = lua_pushthread(L);
+ lua_pop(L, 1);
+ return is_main;
+ #else
+ return 1;
+ #endif
+ }
-static int lpm_fetchk(lua_State* L, int status, lua_KContext ctx) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, (int)ctx);
- fetch_context_t* context = lua_touserdata(L, -1);
- lua_pop(L, 1);
- if (context->threaded && !context->error_code && context->callback_function && context->progress_update) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
- context->error_code = lpm_fetch_callback(L, &context->progress);
- if (context->error_code)
- strncpy(context->data, lua_tostring(L, -1), sizeof(context->data));
+ static int no_verify_ssl;
+ static int lpm_git_transport_certificate_check_cb(struct git_cert *cert, int valid, const char *host, void *payload) {
+ return 0; // If no_verify_ssl is enabled, basically always return 0 when this is set as callback.
}
- if (context->complete || context->error_code) {
- join_thread(context->thread);
- git_repository_free(context->repository);
- lua_pushstring(L, context->data[0] == 0 ? NULL : context->data);
- if (context->callback_function) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
- lua_pushboolean(L, 1);
- lua_pcall(L, 1, 0, 0);
- luaL_unref(L, LUA_REGISTRYINDEX, context->callback_function);
+
+ static void* lpm_fetch_thread(void* ctx) {
+ git_remote* remote;
+ fetch_context_t* context = (fetch_context_t*)ctx;
+ int error = git_remote_lookup(&remote, context->repository, "origin");
+ if (error && !context->error_code) {
+ snprintf(context->data, sizeof(context->data), "git remote fetch error: %s", git_error_last_string());
+ context->error_code = error;
+ return NULL;
}
- luaL_unref(L, LUA_REGISTRYINDEX, (int)ctx);
- if (context->error_code) {
- return lua_error(L);
+ git_fetch_options fetch_opts = GIT_FETCH_OPTIONS_INIT;
+ fetch_opts.download_tags = GIT_REMOTE_DOWNLOAD_TAGS_ALL;
+ fetch_opts.callbacks.payload = context;
+ #if (LIBGIT2_VER_MAJOR == 1 && LIBGIT2_VER_MINOR >= 7) || LIBGIT2_VER_MAJOR > 1
+ fetch_opts.depth = context->depth;
+ #endif
+ if (no_verify_ssl)
+ fetch_opts.callbacks.certificate_check = lpm_git_transport_certificate_check_cb;
+ fetch_opts.callbacks.transfer_progress = lpm_git_transfer_progress_cb;
+ char* strings[] = { context->refspec };
+ git_strarray array = { strings, 1 };
+
+ error = git_remote_connect(remote, GIT_DIRECTION_FETCH, &fetch_opts.callbacks, NULL, NULL) ||
+ git_remote_download(remote, context->refspec[0] ? &array : NULL, &fetch_opts) ||
+ git_remote_update_tips(remote, &fetch_opts.callbacks, fetch_opts.update_fetchhead, fetch_opts.download_tags, NULL);
+ if (!error && !context->error_code) {
+ git_buf branch_name = {0};
+ if (!git_remote_default_branch(&branch_name, remote)) {
+ strncpy(context->data, branch_name.ptr, sizeof(context->data));
+ git_buf_dispose(&branch_name);
+ }
}
- return 1;
+ git_remote_disconnect(remote);
+ git_remote_free(remote);
+ if (error && !context->error_code) {
+ snprintf(context->data, sizeof(context->data), "git remote fetch error: %s", git_error_last_string());
+ context->error_code = error;
+ }
+ context->complete = 1;
+ return NULL;
}
- assert(context->threaded);
- return lua_yieldk(L, 0, (lua_KContext)ctx, lpm_fetchk);
-}
-static int lpm_fetch(lua_State* L) {
- git_init();
- int args = lua_gettop(L);
- fetch_context_t* context = lua_newuserdata(L, sizeof(fetch_context_t));
- memset(context, 0, sizeof(fetch_context_t));
- context->repository = luaL_checkgitrepo(L, 1);
- const char* refspec = args >= 3 ? luaL_optstring(L, 3, NULL) : NULL;
- context->depth = args >= 4 && lua_toboolean(L, 4) ? GIT_FETCH_DEPTH_FULL : 1;
- context->L = L;
- context->threaded = !lua_is_main_thread(L);
- if (refspec)
- strncpy(context->refspec, refspec, sizeof(context->refspec));
- if (lua_type(L, 2) == LUA_TFUNCTION) {
- lua_pushvalue(L, 2);
- context->callback_function = luaL_ref(L, LUA_REGISTRYINDEX);
- }
- int ctx = luaL_ref(L, LUA_REGISTRYINDEX);
- if (lua_is_main_thread(L)) {
- lpm_fetch_thread(context);
- return lpm_fetchk(L, 0, ctx);
- } else {
- context->thread = create_thread(lpm_fetch_thread, context);
+ static int lpm_fetchk(lua_State* L, int status, lua_KContext ctx) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, (int)ctx);
+ fetch_context_t* context = lua_touserdata(L, -1);
+ lua_pop(L, 1);
+ if (context->threaded && !context->error_code && context->callback_function && context->progress_update) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
+ context->error_code = lpm_fetch_callback(L, &context->progress);
+ if (context->error_code)
+ strncpy(context->data, lua_tostring(L, -1), sizeof(context->data));
+ }
+ if (context->complete || context->error_code) {
+ join_thread(context->thread);
+ git_repository_free(context->repository);
+ lua_pushstring(L, context->data[0] == 0 ? NULL : context->data);
+ if (context->callback_function) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
+ lua_pushboolean(L, 1);
+ lua_pcall(L, 1, 0, 0);
+ luaL_unref(L, LUA_REGISTRYINDEX, context->callback_function);
+ }
+ luaL_unref(L, LUA_REGISTRYINDEX, (int)ctx);
+ if (context->error_code) {
+ return lua_error(L);
+ }
+ return 1;
+ }
return lua_yieldk(L, 0, (lua_KContext)ctx, lpm_fetchk);
}
-}
-
-
-static void lpm_tls_debug(void *ctx, int level, const char *file, int line, const char *str) {
- fprintf(stderr, "%s:%04d: |%d| %s", file, line, level, str);
- fflush(stderr);
-}
-
-static void lpm_libgit2_debug(git_trace_level_t level, const char *msg) {
- fprintf(stderr, "[libgit2]: %s\n", msg);
- fflush(stderr);
-}
-static int lpm_trace(lua_State* L) {
- print_trace = lua_toboolean(L, 1) ? 1 : 0;
- return 0;
-}
-
-static int luaL_mbedtls_error(lua_State* L, int code, const char* str, ...) {
- char vsnbuffer[1024];
- char mbed_buffer[128];
- mbedtls_strerror(code, mbed_buffer, sizeof(mbed_buffer));
- va_list va;
- va_start(va, str);
- vsnprintf(vsnbuffer, sizeof(vsnbuffer), str, va);
- va_end(va);
- return luaL_error(L, "%s: %s", vsnbuffer, mbed_buffer);
-}
-
-
-static int lpm_certs(lua_State* L) {
- const char* type = luaL_checkstring(L, 1);
- int status;
- if (has_setup_ssl) {
- mbedtls_ssl_config_free(&ssl_config);
- mbedtls_ctr_drbg_free(&drbg_context);
- mbedtls_entropy_free(&entropy_context);
- mbedtls_x509_crt_free(&x509_certificate);
- }
- mbedtls_x509_crt_init(&x509_certificate);
- mbedtls_entropy_init(&entropy_context);
- mbedtls_ctr_drbg_init(&drbg_context);
- if ((status = mbedtls_ctr_drbg_seed(&drbg_context, mbedtls_entropy_func, &entropy_context, NULL, 0)) != 0)
- return luaL_mbedtls_error(L, status, "failed to setup mbedtls_x509");
- mbedtls_ssl_config_init(&ssl_config);
- status = mbedtls_ssl_config_defaults(&ssl_config, MBEDTLS_SSL_IS_CLIENT, MBEDTLS_SSL_TRANSPORT_STREAM, MBEDTLS_SSL_PRESET_DEFAULT);
- if (status)
- return luaL_mbedtls_error(L, status, "can't set ssl_config defaults");
- mbedtls_ssl_conf_max_version(&ssl_config, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3);
- mbedtls_ssl_conf_min_version(&ssl_config, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3);
- mbedtls_ssl_conf_authmode(&ssl_config, MBEDTLS_SSL_VERIFY_REQUIRED);
- mbedtls_ssl_conf_rng(&ssl_config, mbedtls_ctr_drbg_random, &drbg_context);
- mbedtls_ssl_conf_read_timeout(&ssl_config, 5000);
- #if defined(MBEDTLS_DEBUG_C)
- if (print_trace) {
- mbedtls_debug_set_threshold(5);
- mbedtls_ssl_conf_dbg(&ssl_config, lpm_tls_debug, NULL);
+ static int lpm_fetch(lua_State* L) {
git_init();
- git_trace_set(GIT_TRACE_TRACE, lpm_libgit2_debug);
- }
- #endif
- has_setup_ssl = 1;
- if (strcmp(type, "noverify") == 0) {
- no_verify_ssl = 1;
- mbedtls_ssl_conf_authmode(&ssl_config, MBEDTLS_SSL_VERIFY_OPTIONAL);
- if (print_trace) {
- fprintf(stderr, "[ssl] SSL verify set to optional.\n");
- fflush(stderr);
+ int args = lua_gettop(L);
+ fetch_context_t* context = lua_newuserdata(L, sizeof(fetch_context_t));
+ memset(context, 0, sizeof(fetch_context_t));
+ context->repository = luaL_checkgitrepo(L, 1);
+ const char* refspec = args >= 3 ? luaL_optstring(L, 3, NULL) : NULL;
+ context->depth = args >= 4 && lua_toboolean(L, 4) ? GIT_FETCH_DEPTH_FULL : 1;
+ context->L = L;
+ context->threaded = !lua_is_main_thread(L);
+ if (refspec)
+ strncpy(context->refspec, refspec, sizeof(context->refspec));
+ if (lua_type(L, 2) == LUA_TFUNCTION) {
+ lua_pushvalue(L, 2);
+ context->callback_function = luaL_ref(L, LUA_REGISTRYINDEX);
}
- } else {
- const char* path = luaL_checkstring(L, 2);
- if (strcmp(type, "dir") == 0) {
- git_cert_type = 1;
- if (git_initialized)
- git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, NULL, path);
- strncpy(git_cert_path, path, MAX_PATH);
- if (print_trace) {
- fprintf(stderr, "[ssl] SSL directory set to %s.\n", git_cert_path);
- fflush(stderr);
- }
- status = mbedtls_x509_crt_parse_path(&x509_certificate, path);
- if (status < 0)
- return luaL_mbedtls_error(L, status, "mbedtls_x509_crt_parse_path failed to parse all CA certificates in %s", path);
- if (status > 0 && print_trace) {
- fprintf(stderr, "[ssl] mbedtls_x509_crt_parse_path on %s failed to parse %d certificates, but still succeeded.\n", path, status);
- fflush(stderr);
- }
- mbedtls_ssl_conf_ca_chain(&ssl_config, &x509_certificate, NULL);
+ int ctx = luaL_ref(L, LUA_REGISTRYINDEX);
+ if (lua_is_main_thread(L)) {
+ lpm_fetch_thread(context);
+ return lpm_fetchk(L, 0, ctx);
} else {
- if (strcmp(type, "system") == 0) {
- #if _WIN32
- FILE* file = lua_fopen(L, path, "wb");
- if (!file)
- return luaL_error(L, "can't open cert store %s for writing: %s", path, strerror(errno));
- HCERTSTORE hSystemStore = CertOpenSystemStore(0, TEXT("ROOT"));
- if (!hSystemStore) {
- fclose(file);
- return luaL_error(L, "error getting system certificate store");
- }
- PCCERT_CONTEXT pCertContext = NULL;
- while (1) {
- pCertContext = CertEnumCertificatesInStore(hSystemStore, pCertContext);
- if (!pCertContext)
- break;
- BYTE keyUsage[2];
- if (pCertContext->dwCertEncodingType & X509_ASN_ENCODING && (CertGetIntendedKeyUsage(pCertContext->dwCertEncodingType, pCertContext->pCertInfo, keyUsage, sizeof(keyUsage)) && (keyUsage[0] & CERT_KEY_CERT_SIGN_KEY_USAGE))) {
- DWORD size = 0;
- CryptBinaryToString(pCertContext->pbCertEncoded, pCertContext->cbCertEncoded, CRYPT_STRING_BASE64HEADER, NULL, &size);
- char* buffer = malloc(size);
- CryptBinaryToString(pCertContext->pbCertEncoded, pCertContext->cbCertEncoded, CRYPT_STRING_BASE64HEADER, buffer, &size);
- fwrite(buffer, sizeof(char), size, file);
- free(buffer);
- }
- }
- fclose(file);
- CertCloseStore(hSystemStore, 0);
- if (print_trace) {
- fprintf(stderr, "[ssl] SSL file pulled from system store and written to %s.\n", path);
- fflush(stderr);
- }
- #elif __APPLE__ // https://developer.apple.com/forums/thread/691009; see also curl's mac version
- return luaL_error(L, "can't use system on mac yet");
- #else
- return luaL_error(L, "can't use system certificates except on windows or mac");
- #endif
- }
- git_cert_type = 2;
- if (git_initialized)
- git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, path, NULL);
- strncpy(git_cert_path, path, MAX_PATH);
- if (print_trace) {
- fprintf(stderr, "[ssl] SSL file set to %s.\n", git_cert_path);
- fflush(stderr);
- }
- status = mbedtls_x509_crt_parse_file(&x509_certificate, path);
- if (status < 0)
- return luaL_mbedtls_error(L, status, "mbedtls_x509_crt_parse_file failed to parse CA certificate %s", path);
- if (status > 0 && print_trace) {
- fprintf(stderr, "[ssl] mbedtls_x509_crt_parse_file on %s failed to parse %d certificates, but still still succeeded.\n", path, status);
- fflush(stderr);
- }
- mbedtls_ssl_conf_ca_chain(&ssl_config, &x509_certificate, NULL);
- if (print_trace) {
- fprintf(stderr, "[ssl] SSL file set to %s.\n", path);
- fflush(stderr);
- }
+ context->thread = create_thread(lpm_fetch_thread, context);
+ return lua_yieldk(L, 0, (lua_KContext)ctx, lpm_fetchk);
}
}
- return 0;
-}
-
+#else
+ static int lpm_init(lua_State* L) { return luaL_error(L, "this binary was compiled without git support"); }
+ static int lpm_fetch(lua_State* L) { return luaL_error(L, "this binary was compiled without git support"); }
+ static int lpm_reset(lua_State* L) { return luaL_error(L, "this binary was compiled without git support"); }
+#endif
static int mkdirp(lua_State* L, char* path, int len) {
for (int i = 0; i < len; ++i) {
@@ -1234,388 +1222,544 @@ static int lpm_extract(lua_State* L) {
return 0;
}
+#ifndef LPM_NO_NETWORK
+ static int has_setup_ssl;
+ static mbedtls_x509_crt x509_certificate;
+ static mbedtls_entropy_context entropy_context;
+ static mbedtls_ctr_drbg_context drbg_context;
+ static mbedtls_ssl_config ssl_config;
+ static mbedtls_ssl_context ssl_context;
+
+ static void lpm_tls_debug(void *ctx, int level, const char *file, int line, const char *str) {
+ fprintf(stderr, "%s:%04d: |%d| %s", file, line, level, str);
+ fflush(stderr);
+ }
-static int strncicmp(const char* a, const char* b, int n) {
- for (int i = 0; i < n; ++i) {
- if (a[i] == 0 && b[i] != 0) return -1;
- if (a[i] != 0 && b[i] == 0) return 1;
- int lowera = tolower(a[i]), lowerb = tolower(b[i]);
- if (lowera == lowerb) continue;
- if (lowera < lowerb) return -1;
- return 1;
+ static void lpm_libgit2_debug(git_trace_level_t level, const char *msg) {
+ fprintf(stderr, "[libgit2]: %s\n", msg);
+ fflush(stderr);
}
- return 0;
-}
-static const char* strnstr_local(const char* haystack, const char* needle, int n) {
- int len = strlen(needle);
- for (int i = 0; i <= n - len; ++i) {
- if (strncmp(&haystack[i], needle, len) == 0)
- return &haystack[i];
+
+ static int luaL_mbedtls_error(lua_State* L, int code, const char* str, ...) {
+ char vsnbuffer[1024];
+ char mbed_buffer[128];
+ mbedtls_strerror(code, mbed_buffer, sizeof(mbed_buffer));
+ va_list va;
+ va_start(va, str);
+ vsnprintf(vsnbuffer, sizeof(vsnbuffer), str, va);
+ va_end(va);
+ return luaL_error(L, "%s: %s", vsnbuffer, mbed_buffer);
}
- return NULL;
-}
-static const char* get_header(const char* buffer, const char* header, int* len) {
- const char* line_end = strstr(buffer, "\r\n");
- const char* header_end = strstr(buffer, "\r\n\r\n");
- int header_len = strlen(header);
- while (line_end && line_end < header_end) {
- if (strncicmp(line_end + 2, header, header_len) == 0) {
- const char* offset = line_end + header_len + 3;
- while (*offset == ' ') { ++offset; }
- const char* end = strstr(offset, "\r\n");
- if (len)
- *len = end - offset;
- return offset;
+
+ static int lpm_certs(lua_State* L) {
+ const char* type = luaL_checkstring(L, 1);
+ int status;
+ if (has_setup_ssl) {
+ mbedtls_ssl_config_free(&ssl_config);
+ mbedtls_ctr_drbg_free(&drbg_context);
+ mbedtls_entropy_free(&entropy_context);
+ mbedtls_x509_crt_free(&x509_certificate);
+ }
+ mbedtls_x509_crt_init(&x509_certificate);
+ mbedtls_entropy_init(&entropy_context);
+ mbedtls_ctr_drbg_init(&drbg_context);
+ if ((status = mbedtls_ctr_drbg_seed(&drbg_context, mbedtls_entropy_func, &entropy_context, NULL, 0)) != 0)
+ return luaL_mbedtls_error(L, status, "failed to setup mbedtls_x509");
+ mbedtls_ssl_config_init(&ssl_config);
+ status = mbedtls_ssl_config_defaults(&ssl_config, MBEDTLS_SSL_IS_CLIENT, MBEDTLS_SSL_TRANSPORT_STREAM, MBEDTLS_SSL_PRESET_DEFAULT);
+ if (status)
+ return luaL_mbedtls_error(L, status, "can't set ssl_config defaults");
+ mbedtls_ssl_conf_max_version(&ssl_config, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3);
+ mbedtls_ssl_conf_min_version(&ssl_config, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3);
+ mbedtls_ssl_conf_authmode(&ssl_config, MBEDTLS_SSL_VERIFY_REQUIRED);
+ mbedtls_ssl_conf_rng(&ssl_config, mbedtls_ctr_drbg_random, &drbg_context);
+ mbedtls_ssl_conf_read_timeout(&ssl_config, 5000);
+ #if defined(MBEDTLS_DEBUG_C)
+ if (print_trace) {
+ mbedtls_debug_set_threshold(5);
+ mbedtls_ssl_conf_dbg(&ssl_config, lpm_tls_debug, NULL);
+ git_init();
+ git_trace_set(GIT_TRACE_TRACE, lpm_libgit2_debug);
}
- line_end = strstr(line_end + 2, "\r\n");
+ #endif
+ has_setup_ssl = 1;
+ if (strcmp(type, "noverify") == 0) {
+ no_verify_ssl = 1;
+ mbedtls_ssl_conf_authmode(&ssl_config, MBEDTLS_SSL_VERIFY_OPTIONAL);
+ if (print_trace) {
+ fprintf(stderr, "[ssl] SSL verify set to optional.\n");
+ fflush(stderr);
+ }
+ } else {
+ const char* path = luaL_checkstring(L, 2);
+ if (strcmp(type, "dir") == 0) {
+ git_cert_type = 1;
+ if (git_initialized)
+ git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, NULL, path);
+ strncpy(git_cert_path, path, MAX_PATH);
+ if (print_trace) {
+ fprintf(stderr, "[ssl] SSL directory set to %s.\n", git_cert_path);
+ fflush(stderr);
+ }
+ status = mbedtls_x509_crt_parse_path(&x509_certificate, path);
+ if (status < 0)
+ return luaL_mbedtls_error(L, status, "mbedtls_x509_crt_parse_path failed to parse all CA certificates in %s", path);
+ if (status > 0 && print_trace) {
+ fprintf(stderr, "[ssl] mbedtls_x509_crt_parse_path on %s failed to parse %d certificates, but still succeeded.\n", path, status);
+ fflush(stderr);
+ }
+ mbedtls_ssl_conf_ca_chain(&ssl_config, &x509_certificate, NULL);
+ } else {
+ if (strcmp(type, "system") == 0) {
+ #if _WIN32
+ FILE* file = lua_fopen(L, path, "wb");
+ if (!file)
+ return luaL_error(L, "can't open cert store %s for writing: %s", path, strerror(errno));
+ HCERTSTORE hSystemStore = CertOpenSystemStore(0, TEXT("ROOT"));
+ if (!hSystemStore) {
+ fclose(file);
+ return luaL_error(L, "error getting system certificate store");
+ }
+ PCCERT_CONTEXT pCertContext = NULL;
+ while (1) {
+ pCertContext = CertEnumCertificatesInStore(hSystemStore, pCertContext);
+ if (!pCertContext)
+ break;
+ BYTE keyUsage[2];
+ if (pCertContext->dwCertEncodingType & X509_ASN_ENCODING && (CertGetIntendedKeyUsage(pCertContext->dwCertEncodingType, pCertContext->pCertInfo, keyUsage, sizeof(keyUsage)) && (keyUsage[0] & CERT_KEY_CERT_SIGN_KEY_USAGE))) {
+ DWORD size = 0;
+ CryptBinaryToString(pCertContext->pbCertEncoded, pCertContext->cbCertEncoded, CRYPT_STRING_BASE64HEADER, NULL, &size);
+ char* buffer = malloc(size);
+ CryptBinaryToString(pCertContext->pbCertEncoded, pCertContext->cbCertEncoded, CRYPT_STRING_BASE64HEADER, buffer, &size);
+ fwrite(buffer, sizeof(char), size, file);
+ free(buffer);
+ }
+ }
+ fclose(file);
+ CertCloseStore(hSystemStore, 0);
+ if (print_trace) {
+ fprintf(stderr, "[ssl] SSL file pulled from system store and written to %s.\n", path);
+ fflush(stderr);
+ }
+ #elif __APPLE__ // https://developer.apple.com/forums/thread/691009; see also curl's mac version
+ return luaL_error(L, "can't use system on mac yet");
+ #else
+ return luaL_error(L, "can't use system certificates except on windows or mac");
+ #endif
+ }
+ git_cert_type = 2;
+ if (git_initialized)
+ git_libgit2_opts(GIT_OPT_SET_SSL_CERT_LOCATIONS, path, NULL);
+ strncpy(git_cert_path, path, MAX_PATH);
+ if (print_trace) {
+ fprintf(stderr, "[ssl] SSL file set to %s.\n", git_cert_path);
+ fflush(stderr);
+ }
+ status = mbedtls_x509_crt_parse_file(&x509_certificate, path);
+ if (status < 0)
+ return luaL_mbedtls_error(L, status, "mbedtls_x509_crt_parse_file failed to parse CA certificate %s", path);
+ if (status > 0 && print_trace) {
+ fprintf(stderr, "[ssl] mbedtls_x509_crt_parse_file on %s failed to parse %d certificates, but still still succeeded.\n", path, status);
+ fflush(stderr);
+ }
+ mbedtls_ssl_conf_ca_chain(&ssl_config, &x509_certificate, NULL);
+ if (print_trace) {
+ fprintf(stderr, "[ssl] SSL file set to %s.\n", path);
+ fflush(stderr);
+ }
+ }
+ }
+ return 0;
}
- return NULL;
-}
-typedef enum {
- STATE_CONNECT,
- STATE_HANDSHAKE,
- STATE_SEND,
- STATE_RECV_HEADER,
- STATE_RECV_BODY
-} get_state_e;
+ static int strncicmp(const char* a, const char* b, int n) {
+ for (int i = 0; i < n; ++i) {
+ if (a[i] == 0 && b[i] != 0) return -1;
+ if (a[i] != 0 && b[i] == 0) return 1;
+ int lowera = tolower(a[i]), lowerb = tolower(b[i]);
+ if (lowera == lowerb) continue;
+ if (lowera < lowerb) return -1;
+ return 1;
+ }
+ return 0;
+ }
+
+ static const char* strnstr_local(const char* haystack, const char* needle, int n) {
+ int len = strlen(needle);
+ for (int i = 0; i <= n - len; ++i) {
+ if (strncmp(&haystack[i], needle, len) == 0)
+ return &haystack[i];
+ }
+ return NULL;
+ }
+
+ static const char* get_header(const char* buffer, const char* header, int* len) {
+ const char* line_end = strstr(buffer, "\r\n");
+ const char* header_end = strstr(buffer, "\r\n\r\n");
+ int header_len = strlen(header);
+ while (line_end && line_end < header_end) {
+ if (strncicmp(line_end + 2, header, header_len) == 0) {
+ const char* offset = line_end + header_len + 3;
+ while (*offset == ' ') { ++offset; }
+ const char* end = strstr(offset, "\r\n");
+ if (len)
+ *len = end - offset;
+ return offset;
+ }
+ line_end = strstr(line_end + 2, "\r\n");
+ }
+ return NULL;
+ }
-typedef struct {
- get_state_e state;
- int s;
- int is_ssl;
- mbedtls_ssl_context ssl;
- mbedtls_net_context net;
- int lua_buffer;
- FILE* file;
- char address[1024];
- int error_code;
- char error[256];
- char hostname[256];
- char rest[2048];
- int callback_function;
-
- char buffer[HTTPS_RESPONSE_HEADER_BUFFER_LENGTH];
- int buffer_length;
-
- int content_length;
- int chunk_length;
- int chunked;
- int chunk_written;
- int total_downloaded;
-} get_context_t;
-
-
-static int lpm_socket_write(get_context_t* context, int len) {
- return context->is_ssl ? mbedtls_ssl_write(&context->ssl, context->buffer, len) : write(context->s, context->buffer, len);
-}
-static int lpm_socket_read(get_context_t* context, int len) {
- if (len == -1)
- len = sizeof(context->buffer) - context->buffer_length;
- if (len == 0)
+ typedef enum {
+ STATE_CONNECT,
+ STATE_HANDSHAKE,
+ STATE_SEND,
+ STATE_RECV_HEADER,
+ STATE_RECV_BODY
+ } get_state_e;
+
+ typedef struct {
+ get_state_e state;
+ int s;
+ int is_ssl;
+ mbedtls_ssl_context ssl;
+ mbedtls_net_context net;
+ int lua_buffer;
+ FILE* file;
+ char address[1024];
+ int error_code;
+ char error[256];
+ char hostname[256];
+ char rest[2048];
+ int callback_function;
+
+ char buffer[HTTPS_RESPONSE_HEADER_BUFFER_LENGTH];
+ int buffer_length;
+
+ int content_length;
+ int chunk_length;
+ int chunked;
+ int chunk_written;
+ int total_downloaded;
+ } get_context_t;
+
+
+ static int lpm_socket_write(get_context_t* context, int len) {
+ return context->is_ssl ? mbedtls_ssl_write(&context->ssl, context->buffer, len) : write(context->s, context->buffer, len);
+ }
+
+ static int lpm_socket_read(get_context_t* context, int len) {
+ if (len == -1)
+ len = sizeof(context->buffer) - context->buffer_length;
+ if (len == 0)
+ return len;
+ len = context->is_ssl ? mbedtls_ssl_read(&context->ssl, &context->buffer[context->buffer_length], len) : read(context->s, &context->buffer[context->buffer_length], len);
+ if (len > 0)
+ context->buffer_length += len;
return len;
- len = context->is_ssl ? mbedtls_ssl_read(&context->ssl, &context->buffer[context->buffer_length], len) : read(context->s, &context->buffer[context->buffer_length], len);
- if (len > 0)
- context->buffer_length += len;
- return len;
-}
+ }
+
+ static int lpm_get_error(get_context_t* context, int error_code, const char* str, ...) {
+ if (error_code) {
+ context->error_code = error_code;
+ char mbed_buffer[256];
+ mbedtls_strerror(error_code, mbed_buffer, sizeof(mbed_buffer));
+ int error_len = context->is_ssl ? strlen(mbed_buffer) : strlen(strerror(error_code));
+ va_list va;
+ int offset = 0;
+ va_start(va, str);
+ offset = vsnprintf(context->buffer, sizeof(context->buffer), str, va);
+ va_end(va);
+ if (offset < sizeof(context->buffer) - 2) {
+ strcat(context->buffer, ": ");
+ if (offset < sizeof(context->buffer) - error_len - 2)
+ strcat(context->buffer, context->is_ssl ? mbed_buffer : strerror(error_code));
+ }
+ }
+ return error_code;
+ }
-static int lpm_get_error(get_context_t* context, int error_code, const char* str, ...) {
- if (error_code) {
- context->error_code = error_code;
- char mbed_buffer[256];
- mbedtls_strerror(error_code, mbed_buffer, sizeof(mbed_buffer));
- int error_len = context->is_ssl ? strlen(mbed_buffer) : strlen(strerror(error_code));
+ static int lpm_set_error(get_context_t* context, const char* str, ...) {
va_list va;
int offset = 0;
va_start(va, str);
- offset = vsnprintf(context->buffer, sizeof(context->buffer), str, va);
+ offset = vsnprintf(context->error, sizeof(context->error), str, va);
va_end(va);
- if (offset < sizeof(context->buffer) - 2) {
- strcat(context->buffer, ": ");
- if (offset < sizeof(context->buffer) - error_len - 2)
- strcat(context->buffer, context->is_ssl ? mbed_buffer : strerror(error_code));
- }
+ context->error_code = -1;
+ return offset;
}
- return error_code;
-}
-
-static int lpm_set_error(get_context_t* context, const char* str, ...) {
- va_list va;
- int offset = 0;
- va_start(va, str);
- offset = vsnprintf(context->error, sizeof(context->error), str, va);
- va_end(va);
- context->error_code = -1;
- return offset;
-}
-static int lpm_getk(lua_State* L, int status, lua_KContext ctx) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, ctx);
- get_context_t* context = (get_context_t*)lua_touserdata(L, -1);
- lua_pop(L,1);
- switch (context->state) {
- case STATE_HANDSHAKE: {
- int status = mbedtls_ssl_handshake(&context->ssl);
- if (status == MBEDTLS_ERR_SSL_WANT_READ || status == MBEDTLS_ERR_SSL_WANT_WRITE)
- return lua_yieldk(L, 0, ctx, lpm_getk);
- if (
- lpm_get_error(context, status, "can't handshake") ||
- lpm_get_error(context, mbedtls_ssl_get_verify_result(&context->ssl), "can't verify result")
- )
- goto cleanup;
- context->state = STATE_SEND;
- }
- case STATE_SEND: {
- context->buffer_length = snprintf(context->buffer, sizeof(context->buffer), "GET %s HTTP/1.1\r\nHost: %s\r\nConnection: close\r\n\r\n", context->rest, context->hostname);
- int length = lpm_socket_write(context, context->buffer_length);
- if (length < context->buffer_length && lpm_get_error(context, length, "can't write to socket"))
- goto cleanup;
- context->buffer_length = 0;
- context->buffer[0] = 0;
- context->state = STATE_RECV_HEADER;
- }
- case STATE_RECV_HEADER: {
- const char* header_end;
- while (1) {
- header_end = strstr(context->buffer, "\r\n\r\n");
- if (!header_end && context->buffer_length >= sizeof(context->buffer) - 1 && lpm_set_error(context, "response header buffer length exceeded"))
+ static int lpm_getk(lua_State* L, int status, lua_KContext ctx) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, ctx);
+ get_context_t* context = (get_context_t*)lua_touserdata(L, -1);
+ lua_pop(L,1);
+ switch (context->state) {
+ case STATE_HANDSHAKE: {
+ int status = mbedtls_ssl_handshake(&context->ssl);
+ if (status == MBEDTLS_ERR_SSL_WANT_READ || status == MBEDTLS_ERR_SSL_WANT_WRITE)
+ return lua_yieldk(L, 0, ctx, lpm_getk);
+ if (
+ lpm_get_error(context, status, "can't handshake") ||
+ lpm_get_error(context, mbedtls_ssl_get_verify_result(&context->ssl), "can't verify result")
+ )
goto cleanup;
- if (!header_end) {
- int length = lpm_socket_read(context, -1);
- if (length < 0 && lpm_get_error(context, length, "can't read from socket"))
- goto cleanup;
- if (length == 0)
- return lua_yieldk(L, 0, ctx, lpm_getk);
- } else {
- header_end += 4;
- const char* protocol_end = strnstr_local(context->buffer, " ", context->buffer_length);
- int code = atoi(protocol_end + 1);
- if (code != 200) {
- if (code >= 301 && code <= 303) {
- const char* location = get_header(context->buffer, "location", &context->buffer_length);
- if (location) {
- lua_pushnil(L);
- lua_newtable(L);
- lua_pushlstring(L, location, context->buffer_length);
- lua_setfield(L, -2, "location");
- } else
- lpm_set_error(context, "received invalid %d-response", code);
- } else
- lpm_set_error(context, "received non 200-response of %d", code);
- goto report;
- }
- const char* transfer_encoding = get_header(context->buffer, "transfer-encoding", NULL);
- context->chunked = transfer_encoding && strncmp(transfer_encoding, "chunked", 7) == 0 ? 1 : 0;
- const char* content_length_value = get_header(context->buffer, "content-length", NULL);
- context->content_length = content_length_value ? atoi(content_length_value) : -1;
- context->buffer_length -= (header_end - context->buffer);
- if (context->buffer_length > 0)
- memmove(context->buffer, header_end, context->buffer_length);
- context->chunk_length = !context->chunked && context->content_length == -1 ? INT_MAX : context->content_length;
- context->state = STATE_RECV_BODY;
- break;
- }
+ context->state = STATE_SEND;
}
- }
- case STATE_RECV_BODY: {
- while (1) {
- // If we have an unknown amount of chunk bytes to be fetched, determine the size of the next chunk.
- while (context->chunk_length == -1) {
- char* newline = (char*)strnstr_local(context->buffer, "\r\n", context->buffer_length);
- if (newline) {
- *newline = '\0';
- if ((sscanf(context->buffer, "%x", &context->chunk_length) != 1 && lpm_set_error(context, "error retrieving chunk length")))
- goto cleanup;
- else if (context->chunk_length == 0)
- goto finish;
- context->buffer_length -= (newline + 2 - context->buffer);
- if (context->buffer_length > 0)
- memmove(context->buffer, newline + 2, context->buffer_length);
- } else if (context->buffer_length >= sizeof(context->buffer) && lpm_set_error(context, "can't find chunk length")) {
+ case STATE_SEND: {
+ context->buffer_length = snprintf(context->buffer, sizeof(context->buffer), "GET %s HTTP/1.1\r\nHost: %s\r\nConnection: close\r\n\r\n", context->rest, context->hostname);
+ int length = lpm_socket_write(context, context->buffer_length);
+ if (length < context->buffer_length && lpm_get_error(context, length, "can't write to socket"))
+ goto cleanup;
+ context->buffer_length = 0;
+ context->buffer[0] = 0;
+ context->state = STATE_RECV_HEADER;
+ }
+ case STATE_RECV_HEADER: {
+ const char* header_end;
+ while (1) {
+ header_end = strstr(context->buffer, "\r\n\r\n");
+ if (!header_end && context->buffer_length >= sizeof(context->buffer) - 1 && lpm_set_error(context, "response header buffer length exceeded"))
goto cleanup;
- } else {
+ if (!header_end) {
int length = lpm_socket_read(context, -1);
- if ((length <= 0 || (context->is_ssl && length == MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY)) && lpm_get_error(context, length, "error retrieving full repsonse"))
+ if (length < 0 && lpm_get_error(context, length, "can't read from socket"))
goto cleanup;
if (length == 0)
return lua_yieldk(L, 0, ctx, lpm_getk);
+ } else {
+ header_end += 4;
+ const char* protocol_end = strnstr_local(context->buffer, " ", context->buffer_length);
+ int code = atoi(protocol_end + 1);
+ if (code != 200) {
+ if (code >= 301 && code <= 303) {
+ const char* location = get_header(context->buffer, "location", &context->buffer_length);
+ if (location) {
+ lua_pushnil(L);
+ lua_newtable(L);
+ lua_pushlstring(L, location, context->buffer_length);
+ lua_setfield(L, -2, "location");
+ } else
+ lpm_set_error(context, "received invalid %d-response", code);
+ } else
+ lpm_set_error(context, "received non 200-response of %d", code);
+ goto report;
+ }
+ const char* transfer_encoding = get_header(context->buffer, "transfer-encoding", NULL);
+ context->chunked = transfer_encoding && strncmp(transfer_encoding, "chunked", 7) == 0 ? 1 : 0;
+ const char* content_length_value = get_header(context->buffer, "content-length", NULL);
+ context->content_length = content_length_value ? atoi(content_length_value) : -1;
+ context->buffer_length -= (header_end - context->buffer);
+ if (context->buffer_length > 0)
+ memmove(context->buffer, header_end, context->buffer_length);
+ context->chunk_length = !context->chunked && context->content_length == -1 ? INT_MAX : context->content_length;
+ context->state = STATE_RECV_BODY;
+ break;
}
}
- if (context->buffer_length > 0) {
- int to_write = imin(context->chunk_length - context->chunk_written, context->buffer_length);
- if (to_write > 0) {
- context->total_downloaded += to_write;
- context->chunk_written += to_write;
- if (context->callback_function) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
- lua_pushinteger(L, context->total_downloaded);
- if (context->content_length == -1)
- lua_pushnil(L);
- else
- lua_pushinteger(L, context->content_length);
- lua_call(L, 2, 0);
+ }
+ case STATE_RECV_BODY: {
+ while (1) {
+ // If we have an unknown amount of chunk bytes to be fetched, determine the size of the next chunk.
+ while (context->chunk_length == -1) {
+ char* newline = (char*)strnstr_local(context->buffer, "\r\n", context->buffer_length);
+ if (newline) {
+ *newline = '\0';
+ if ((sscanf(context->buffer, "%x", &context->chunk_length) != 1 && lpm_set_error(context, "error retrieving chunk length")))
+ goto cleanup;
+ else if (context->chunk_length == 0)
+ goto finish;
+ context->buffer_length -= (newline + 2 - context->buffer);
+ if (context->buffer_length > 0)
+ memmove(context->buffer, newline + 2, context->buffer_length);
+ } else if (context->buffer_length >= sizeof(context->buffer) && lpm_set_error(context, "can't find chunk length")) {
+ goto cleanup;
+ } else {
+ int length = lpm_socket_read(context, -1);
+ if ((length <= 0 || (context->is_ssl && length == MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY)) && lpm_get_error(context, length, "error retrieving full repsonse"))
+ goto cleanup;
+ if (length == 0)
+ return lua_yieldk(L, 0, ctx, lpm_getk);
+ }
+ }
+ if (context->buffer_length > 0) {
+ int to_write = imin(context->chunk_length - context->chunk_written, context->buffer_length);
+ if (to_write > 0) {
+ context->total_downloaded += to_write;
+ context->chunk_written += to_write;
+ if (context->callback_function) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
+ lua_pushinteger(L, context->total_downloaded);
+ if (context->content_length == -1)
+ lua_pushnil(L);
+ else
+ lua_pushinteger(L, context->content_length);
+ lua_call(L, 2, 0);
+ }
+ if (context->file)
+ fwrite(context->buffer, sizeof(char), to_write, context->file);
+ else {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->lua_buffer);
+ lua_pushlstring(L, context->buffer, to_write);
+ lua_rawseti(L, -2, lua_rawlen(L, -2) + 1);
+ lua_pop(L, 1);
+ }
+ context->buffer_length -= to_write;
+ if (context->buffer_length > 0)
+ memmove(context->buffer, &context->buffer[to_write], context->buffer_length);
}
- if (context->file)
- fwrite(context->buffer, sizeof(char), to_write, context->file);
- else {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->lua_buffer);
- lua_pushlstring(L, context->buffer, to_write);
- lua_rawseti(L, -2, lua_rawlen(L, -2) + 1);
- lua_pop(L, 1);
+ if (context->chunk_written == context->chunk_length) {
+ if (!context->chunked)
+ goto finish;
+ if (context->buffer_length >= 2) {
+ if (!strnstr_local(context->buffer, "\r\n", 2) && lpm_set_error(context, "invalid end to chunk"))
+ goto cleanup;
+ memmove(context->buffer, &context->buffer[2], context->buffer_length - 2);
+ context->buffer_length -= 2;
+ context->chunk_length = -1;
+ }
}
- context->buffer_length -= to_write;
- if (context->buffer_length > 0)
- memmove(context->buffer, &context->buffer[to_write], context->buffer_length);
}
- if (context->chunk_written == context->chunk_length) {
- if (!context->chunked)
+ if (context->chunk_length > 0) {
+ int length = lpm_socket_read(context, imin(sizeof(context->buffer) - context->buffer_length, context->chunk_length - context->chunk_written + (context->chunked ? 2 : 0)));
+ if ((!context->is_ssl && length == 0) || (context->is_ssl && context->content_length == -1 && length == MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY))
goto finish;
- if (context->buffer_length >= 2) {
- if (!strnstr_local(context->buffer, "\r\n", 2) && lpm_set_error(context, "invalid end to chunk"))
- goto cleanup;
- memmove(context->buffer, &context->buffer[2], context->buffer_length - 2);
- context->buffer_length -= 2;
- context->chunk_length = -1;
- }
+ if (length < 0 && lpm_get_error(context, length, "error retrieving full chunk"))
+ goto cleanup;
+ if (length == 0)
+ return lua_yieldk(L, 0, ctx, lpm_getk);
}
}
- if (context->chunk_length > 0) {
- int length = lpm_socket_read(context, imin(sizeof(context->buffer) - context->buffer_length, context->chunk_length - context->chunk_written + (context->chunked ? 2 : 0)));
- if ((!context->is_ssl && length == 0) || (context->is_ssl && context->content_length == -1 && length == MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY))
- goto finish;
- if (length < 0 && lpm_get_error(context, length, "error retrieving full chunk"))
- goto cleanup;
- if (length == 0)
- return lua_yieldk(L, 0, ctx, lpm_getk);
- }
}
}
- }
- finish:
- if (context->file) {
- lua_pushnil(L);
- lua_newtable(L);
- } else {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->lua_buffer);
- size_t len = lua_rawlen(L, -1);
- luaL_Buffer b;
- int table = lua_gettop(L);
- luaL_buffinit(L, &b);
- for (int i = 1; i <= len; ++i) {
- lua_rawgeti(L, table, i);
- size_t str_len;
- const char* str = lua_tolstring(L, -1, &str_len);
+ finish:
+ if (context->file) {
+ lua_pushnil(L);
+ lua_newtable(L);
+ } else {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->lua_buffer);
+ size_t len = lua_rawlen(L, -1);
+ luaL_Buffer b;
+ int table = lua_gettop(L);
+ luaL_buffinit(L, &b);
+ for (int i = 1; i <= len; ++i) {
+ lua_rawgeti(L, table, i);
+ size_t str_len;
+ const char* str = lua_tolstring(L, -1, &str_len);
+ lua_pop(L, 1);
+ luaL_addlstring(&b, str, str_len);
+ }
lua_pop(L, 1);
- luaL_addlstring(&b, str, str_len);
+ luaL_pushresult(&b);
+ lua_newtable(L);
}
- lua_pop(L, 1);
- luaL_pushresult(&b);
- lua_newtable(L);
- }
- if (context->content_length != -1 && context->total_downloaded != context->content_length && lpm_set_error(context, "error retrieving full response"))
- goto cleanup;
- report:
- if (context->callback_function && !context->error_code) {
- lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
- lua_pushboolean(L, 1);
- lua_call(L, 1, 0);
- }
- cleanup:
- if (context->is_ssl) {
- mbedtls_ssl_free(&context->ssl);
- mbedtls_net_free(&context->net);
- } else {
- close(context->s);
- }
- if (context->callback_function)
- luaL_unref(L, LUA_REGISTRYINDEX, context->callback_function);
- if (context->file)
- fclose(context->file);
- else
- luaL_unref(L, LUA_REGISTRYINDEX, context->lua_buffer);
- if (context->error_code)
- return luaL_error(L, "%s", context->error);
- return 2;
-}
-
-static int lpm_get(lua_State* L) {
- get_context_t* context = lua_newuserdata(L, sizeof(get_context_t));
- memset(context, 0, sizeof(get_context_t));
- int threaded = !lua_is_main_thread(L);
-
- const char* protocol = luaL_checkstring(L, 1);
- strncpy(context->hostname, luaL_checkstring(L, 2), sizeof(context->hostname));
- strncpy(context->rest, luaL_checkstring(L, 4), sizeof(context->rest));
- const char* path = luaL_optstring(L, 5, NULL);
- if (path) {
- if ((context->file = lua_fopen(L, path, "wb")) == NULL)
- return luaL_error(L, "can't open file %s: %s", path, strerror(errno));
- } else {
- lua_newtable(L);
- context->lua_buffer = luaL_ref(L, LUA_REGISTRYINDEX);
- }
- if (lua_type(L, 6) == LUA_TFUNCTION) {
- lua_pushvalue(L, 6);
- context->callback_function = luaL_ref(L, LUA_REGISTRYINDEX);
- }
- context->state = STATE_CONNECT;
-
- if (strcmp(protocol, "https") == 0) {
- const char* port = lua_tostring(L, 3);
- // https://gist.github.com/Barakat/675c041fd94435b270a25b5881987a30
- mbedtls_ssl_init(&context->ssl);
- mbedtls_net_init(&context->net);
- if (threaded)
- mbedtls_net_set_nonblock(&context->net);
- else
- mbedtls_net_set_block(&context->net);
- mbedtls_ssl_set_bio(&context->ssl, &context->net, mbedtls_net_send, mbedtls_net_recv, NULL);
- if (
- lpm_get_error(context, mbedtls_ssl_setup(&context->ssl, &ssl_config), "can't set up ssl") ||
- lpm_get_error(context, mbedtls_net_connect(&context->net, context->hostname, port, MBEDTLS_NET_PROTO_TCP), "can't set hostname") ||
- lpm_get_error(context, mbedtls_ssl_set_hostname(&context->ssl, context->hostname), "can't set hostname")
- ) {
+ if (context->content_length != -1 && context->total_downloaded != context->content_length && lpm_set_error(context, "error retrieving full response"))
+ goto cleanup;
+ report:
+ if (context->callback_function && !context->error_code) {
+ lua_rawgeti(L, LUA_REGISTRYINDEX, context->callback_function);
+ lua_pushboolean(L, 1);
+ lua_call(L, 1, 0);
+ }
+ cleanup:
+ if (context->is_ssl) {
mbedtls_ssl_free(&context->ssl);
mbedtls_net_free(&context->net);
+ } else {
+ close(context->s);
+ }
+ if (context->callback_function)
+ luaL_unref(L, LUA_REGISTRYINDEX, context->callback_function);
+ if (context->file)
+ fclose(context->file);
+ else
+ luaL_unref(L, LUA_REGISTRYINDEX, context->lua_buffer);
+ if (context->error_code)
return luaL_error(L, "%s", context->error);
+ return 2;
+ }
+
+ static int lpm_get(lua_State* L) {
+ get_context_t* context = lua_newuserdata(L, sizeof(get_context_t));
+ memset(context, 0, sizeof(get_context_t));
+ int threaded = !lua_is_main_thread(L);
+
+ const char* protocol = luaL_checkstring(L, 1);
+ strncpy(context->hostname, luaL_checkstring(L, 2), sizeof(context->hostname));
+ strncpy(context->rest, luaL_checkstring(L, 4), sizeof(context->rest));
+ const char* path = luaL_optstring(L, 5, NULL);
+ if (path) {
+ if ((context->file = lua_fopen(L, path, "wb")) == NULL)
+ return luaL_error(L, "can't open file %s: %s", path, strerror(errno));
+ } else {
+ lua_newtable(L);
+ context->lua_buffer = luaL_ref(L, LUA_REGISTRYINDEX);
}
- context->is_ssl = 1;
- context->state = STATE_HANDSHAKE;
- } else {
- int port = luaL_checkinteger(L, 3);
- struct hostent *host = gethostbyname(context->hostname);
- struct sockaddr_in dest_addr = {0};
- if (!host)
- return luaL_error(L, "can't resolve hostname %s", context->hostname);
- context->s = socket(AF_INET, SOCK_STREAM, 0);
- if (threaded) {
- #if _WIN32
- unsigned long ul = 1;
- ioctlsocket(context->s, FIONBIO, (unsigned long *) &ul);
- #else
- fcntl(context->s, F_SETFL, fcntl(context->s, F_GETFL, 0) | O_NONBLOCK);
- #endif
+ if (lua_type(L, 6) == LUA_TFUNCTION) {
+ lua_pushvalue(L, 6);
+ context->callback_function = luaL_ref(L, LUA_REGISTRYINDEX);
}
- dest_addr.sin_family = AF_INET;
- dest_addr.sin_port = htons(port);
- dest_addr.sin_addr.s_addr = *(long*)(host->h_addr);
- const char* ip = inet_ntoa(dest_addr.sin_addr);
- if (connect(context->s, (struct sockaddr *) &dest_addr, sizeof(struct sockaddr)) == -1 ) {
- close(context->s);
- return luaL_error(L, "can't connect to host %s [%s] on port %d", context->hostname, ip, port);
+ context->state = STATE_CONNECT;
+
+ if (strcmp(protocol, "https") == 0) {
+ const char* port = lua_tostring(L, 3);
+ // https://gist.github.com/Barakat/675c041fd94435b270a25b5881987a30
+ mbedtls_ssl_init(&context->ssl);
+ mbedtls_net_init(&context->net);
+ if (threaded)
+ mbedtls_net_set_nonblock(&context->net);
+ else
+ mbedtls_net_set_block(&context->net);
+ mbedtls_ssl_set_bio(&context->ssl, &context->net, mbedtls_net_send, mbedtls_net_recv, NULL);
+ if (
+ lpm_get_error(context, mbedtls_ssl_setup(&context->ssl, &ssl_config), "can't set up ssl") ||
+ lpm_get_error(context, mbedtls_net_connect(&context->net, context->hostname, port, MBEDTLS_NET_PROTO_TCP), "can't set hostname") ||
+ lpm_get_error(context, mbedtls_ssl_set_hostname(&context->ssl, context->hostname), "can't set hostname")
+ ) {
+ mbedtls_ssl_free(&context->ssl);
+ mbedtls_net_free(&context->net);
+ return luaL_error(L, "%s", context->error);
+ }
+ context->is_ssl = 1;
+ context->state = STATE_HANDSHAKE;
+ } else {
+ int port = luaL_checkinteger(L, 3);
+ struct hostent *host = gethostbyname(context->hostname);
+ struct sockaddr_in dest_addr = {0};
+ if (!host)
+ return luaL_error(L, "can't resolve hostname %s", context->hostname);
+ context->s = socket(AF_INET, SOCK_STREAM, 0);
+ if (threaded) {
+ #if _WIN32
+ unsigned long ul = 1;
+ ioctlsocket(context->s, FIONBIO, (unsigned long *) &ul);
+ #else
+ fcntl(context->s, F_SETFL, fcntl(context->s, F_GETFL, 0) | O_NONBLOCK);
+ #endif
+ }
+ dest_addr.sin_family = AF_INET;
+ dest_addr.sin_port = htons(port);
+ dest_addr.sin_addr.s_addr = *(long*)(host->h_addr);
+ const char* ip = inet_ntoa(dest_addr.sin_addr);
+ if (connect(context->s, (struct sockaddr *) &dest_addr, sizeof(struct sockaddr)) == -1 ) {
+ close(context->s);
+ return luaL_error(L, "can't connect to host %s [%s] on port %d", context->hostname, ip, port);
+ }
+ context->state = STATE_SEND;
}
- context->state = STATE_SEND;
+ if (!threaded)
+ return lpm_getk(L, 0, luaL_ref(L, LUA_REGISTRYINDEX));
+ return lua_yieldk(L, 0, luaL_ref(L, LUA_REGISTRYINDEX), lpm_getk);
}
- if (!threaded)
- return lpm_getk(L, 0, luaL_ref(L, LUA_REGISTRYINDEX));
- return lua_yieldk(L, 0, luaL_ref(L, LUA_REGISTRYINDEX), lpm_getk);
-}
+#else
+ static int lpm_get(lua_State* L) { return luaL_error(L, "this binary was compiled without network suport"); }
+ static int lpm_certs(lua_State* L) { return luaL_error(L, "this binary was compiled without network suport"); }
+#endif
static int lpm_chdir(lua_State* L) {
@@ -1807,6 +1951,18 @@ int main(int argc, char* argv[]) {
lua_setglobal(L, "VERSION");
lua_pushliteral(L, ARCH_PLATFORM);
lua_setglobal(L, "PLATFORM");
+ #ifdef LPM_NO_NETWORK
+ lua_pushboolean(L, 1);
+ #else
+ lua_pushboolean(L, 0);
+ #endif
+ lua_setglobal(L, "NO_NETWORK");
+ #ifdef LPM_NO_GIT
+ lua_pushboolean(L, 1);
+ #else
+ lua_pushboolean(L, 0);
+ #endif
+ lua_setglobal(L, "NO_GIT");
#if _WIN32
DWORD handles[] = { STD_OUTPUT_HANDLE, STD_ERROR_HANDLE };
int setVirtualProcessing = 0;
@@ -1871,7 +2027,9 @@ int main(int argc, char* argv[]) {
}
int status = lua_tointeger(L, -1);
lua_close(L);
- if (git_initialized)
- git_libgit2_shutdown();
+ #ifndef LPM_NO_GIT
+ if (git_initialized)
+ git_libgit2_shutdown();
+ #endif
return status;
}
diff --git a/src/lpm.lua b/src/lpm.lua
index 111fcc3..55ee00b 100644
--- a/src/lpm.lua
+++ b/src/lpm.lua
@@ -2379,7 +2379,8 @@ xpcall(function()
["ssl-certs"] = "string", force = "flag", arch = "array", ["assume-yes"] = "flag",
["no-install-optional"] = "flag", datadir = "string", binary = "string", trace = "flag", progress = "flag",
symlink = "flag", reinstall = "flag", ["no-color"] = "flag", config = "string", table = "string", header = "string",
- repository = "string", ephemeral = "flag", mask = "array", raw = "string", plugin = "array",
+ repository = "string", ephemeral = "flag", mask = "array", raw = "string", plugin = "array", ["no-network"] = "flag",
+ ["no-git"] = "flag",
-- filtration flags
author = "array", tag = "array", stub = "array", dependency = "array", status = "array",
type = "array", name = "array"
@@ -2629,6 +2630,8 @@ not commonly used publically.
PROGRESS = ARGS["progress"]
REINSTALL = ARGS["reinstall"]
NO_COLOR = ARGS["no-color"]
+ if not NO_NETWORK then NO_NETWORK = ARGS["no-network"] end
+ if not NO_GIT then NO_GIT = ARGS["no-git"] end
DATADIR = common.normalize_path(ARGS["datadir"])
BINARY = common.normalize_path(ARGS["binary"])
NO_INSTALL_OPTIONAL = ARGS["no-install-optional"]
@@ -2705,43 +2708,45 @@ not commonly used publically.
repositories = {}
if ARGS[2] == "purge" then return lpm.purge() end
local ssl_certs = ARGS["ssl-certs"] or os.getenv("SSL_CERT_DIR") or os.getenv("SSL_CERT_FILE")
- if ssl_certs then
- if ssl_certs == "noverify" then
- system.certs("noverify")
- else
- local stat = system.stat(ssl_certs)
- if not stat then error("can't find " .. ssl_certs) end
- system.certs(stat.type, ssl_certs)
- end
- else
- local paths = { -- https://serverfault.com/questions/62496/ssl-certificate-location-on-unix-linux#comment1155804_62500
- "/etc/ssl/certs/ca-certificates.crt", -- Debian/Ubuntu/Gentoo etc.
- "/etc/pki/tls/certs/ca-bundle.crt", -- Fedora/RHEL 6
- "/etc/ssl/ca-bundle.pem", -- OpenSUSE
- "/etc/pki/tls/cacert.pem", -- OpenELEC
- "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", -- CentOS/RHEL 7
- "/etc/ssl/cert.pem", -- Alpine Linux (and Mac OSX)
- "/etc/ssl/certs", -- SLES10/SLES11, https://golang.org/issue/12139
- "/system/etc/security/cacerts", -- Android
- "/usr/local/share/certs", -- FreeBSD
- "/etc/pki/tls/certs", -- Fedora/RHEL
- "/etc/openssl/certs", -- NetBSD
- "/var/ssl/certs", -- AIX
- }
- if PLATFORM == "windows" then
- common.mkdirp(TMPDIR)
- system.certs("system", TMPDIR .. PATHSEP .. "certs.crt")
+ if not NO_NETWORK then
+ if ssl_certs then
+ if ssl_certs == "noverify" then
+ system.certs("noverify")
+ else
+ local stat = system.stat(ssl_certs)
+ if not stat then error("can't find " .. ssl_certs) end
+ system.certs(stat.type, ssl_certs)
+ end
else
- local has_certs = false
- for i, path in ipairs(paths) do
- local stat = system.stat(path)
- if stat then
- has_certs = true
- system.certs(stat.type, path)
- break
+ local paths = { -- https://serverfault.com/questions/62496/ssl-certificate-location-on-unix-linux#comment1155804_62500
+ "/etc/ssl/certs/ca-certificates.crt", -- Debian/Ubuntu/Gentoo etc.
+ "/etc/pki/tls/certs/ca-bundle.crt", -- Fedora/RHEL 6
+ "/etc/ssl/ca-bundle.pem", -- OpenSUSE
+ "/etc/pki/tls/cacert.pem", -- OpenELEC
+ "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", -- CentOS/RHEL 7
+ "/etc/ssl/cert.pem", -- Alpine Linux (and Mac OSX)
+ "/etc/ssl/certs", -- SLES10/SLES11, https://golang.org/issue/12139
+ "/system/etc/security/cacerts", -- Android
+ "/usr/local/share/certs", -- FreeBSD
+ "/etc/pki/tls/certs", -- Fedora/RHEL
+ "/etc/openssl/certs", -- NetBSD
+ "/var/ssl/certs", -- AIX
+ }
+ if PLATFORM == "windows" then
+ common.mkdirp(TMPDIR)
+ system.certs("system", TMPDIR .. PATHSEP .. "certs.crt")
+ else
+ local has_certs = false
+ for i, path in ipairs(paths) do
+ local stat = system.stat(path)
+ if stat then
+ has_certs = true
+ system.certs(stat.type, path)
+ break
+ end
end
+ if not has_certs then error("can't autodetect your system's SSL ceritficates; please specify specify a certificate bundle or certificate directory with --ssl-certs") end
end
- if not has_certs then error("can't autodetect your system's SSL ceritficates; please specify specify a certificate bundle or certificate directory with --ssl-certs") end
end
end
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-21 14:39:16 +0000