1 /*
2  * Copyright (c) 2024 Omar Polo <op@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/time.h>
18 #include <sys/types.h>
19 #include <sys/socket.h>
20 
21 #include <err.h>
22 #include <errno.h>
23 #include <fcntl.h>
24 #include <limits.h>
25 #include <netdb.h>
26 #include <poll.h>
27 #include <stdio.h>
28 #include <stdlib.h>
29 #include <string.h>
30 #include <unistd.h>
31 
32 #include "got_opentemp.h"
33 #include "got_version.h"
34 
35 #include "bufio.h"
36 #include "utf8d.h"
37 
38 #define USERAGENT	 "got-notify-http/" GOT_VERSION_STR
39 
40 static int		 http_timeout = 300;	/* 5 minutes in seconds */
41 
42 __dead static void
43 usage(void)
44 {
45 	fprintf(stderr, "usage: %s [-c] -r repo -h host -p port path\n",
46 	    getprogname());
47 	exit(1);
48 }
49 
50 static int
51 dial(const char *host, const char *port)
52 {
53 	struct addrinfo	 hints, *res, *res0;
54 	const char	*cause = NULL;
55 	int		 s, error, save_errno;
56 
57 	memset(&hints, 0, sizeof(hints));
58 	hints.ai_family = AF_UNSPEC;
59 	hints.ai_socktype = SOCK_STREAM;
60 	error = getaddrinfo(host, port, &hints, &res0);
61 	if (error)
62 		errx(1, "failed to resolve %s:%s: %s", host, port,
63 		    gai_strerror(error));
64 
65 	s = -1;
66 	for (res = res0; res; res = res->ai_next) {
67 		s = socket(res->ai_family, res->ai_socktype,
68 		    res->ai_protocol);
69 		if (s == -1) {
70 			cause = "socket";
71 			continue;
72 		}
73 
74 		if (connect(s, res->ai_addr, res->ai_addrlen) == -1) {
75 			cause = "connect";
76 			save_errno = errno;
77 			close(s);
78 			errno = save_errno;
79 			s = -1;
80 			continue;
81 		}
82 
83 		break;
84 	}
85 
86 	freeaddrinfo(res0);
87 	if (s == -1)
88 		err(1, "%s", cause);
89 	return s;
90 }
91 
92 static void
93 escape(FILE *fp, const uint8_t *s)
94 {
95 	uint32_t codepoint, state;
96 	const uint8_t *start = s;
97 
98 	state = 0;
99 	for (; *s; ++s) {
100 		switch (decode(&state, &codepoint, *s)) {
101 		case UTF8_ACCEPT:
102 			switch (codepoint) {
103 			case '"':
104 			case '\\':
105 				fprintf(fp, "\\%c", *s);
106 				break;
107 			case '\b':
108 				fprintf(fp, "\\b");
109 				break;
110 			case '\f':
111 				fprintf(fp, "\\f");
112 				break;
113 			case '\n':
114 				fprintf(fp, "\\n");
115 				break;
116 			case '\r':
117 				fprintf(fp, "\\r");
118 				break;
119 			case '\t':
120 				fprintf(fp, "\\t");
121 				break;
122 			default:
123 				/* other control characters */
124 				if (codepoint < ' ' || codepoint == 0x7F) {
125 					fprintf(fp, "\\u%04x", codepoint);
126 					break;
127 				}
128 				fwrite(start, 1, s - start + 1, fp);
129 				break;
130 			}
131 			start = s + 1;
132 			break;
133 
134 		case UTF8_REJECT:
135 			/* bad UTF-8 sequence; try to recover */
136 			fputs("\\uFFFD", fp);
137 			state = UTF8_ACCEPT;
138 			start = s + 1;
139 			break;
140 		}
141         }
142 }
143 
144 static void
145 json_field(FILE *fp, const char *key, const char *val, int comma)
146 {
147 	fprintf(fp, "\"%s\":\"", key);
148 	escape(fp, val);
149 	fprintf(fp, "\"%s", comma ? "," : "");
150 }
151 
152 static void
153 json_author(FILE *fp, const char *type, char *address, int comma)
154 {
155 	char	*gt, *lt, *at, *email, *endname;
156 
157 	fprintf(fp, "\"%s\":{", type);
158 
159 	gt = strchr(address, '<');
160 	if (gt != NULL) {
161 		/* long format, e.g. "Omar Polo <op@openbsd.org>" */
162 
163 		json_field(fp, "full", address, 1);
164 
165 		endname = gt;
166 		while (endname > address && endname[-1] == ' ')
167 			endname--;
168 
169 		*endname = '\0';
170 		json_field(fp, "name", address, 1);
171 
172 		email = gt + 1;
173 		lt = strchr(email, '>');
174 		if (lt)
175 			*lt = '\0';
176 
177 		json_field(fp, "mail", email, 1);
178 
179 		at = strchr(email, '@');
180 		if (at)
181 			*at = '\0';
182 
183 		json_field(fp, "user", email, 0);
184 	} else {
185 		/* short format only shows the username */
186 		json_field(fp, "user", address, 0);
187 	}
188 
189 	fprintf(fp, "}%s", comma ? "," : "");
190 }
191 
192 static int
193 jsonify_branch_rm(FILE *fp, char *line, const char *repo)
194 {
195 	char	*ref, *id;
196 
197 	line = strchr(line, ' ');
198 	if (line == NULL)
199 		errx(1, "invalid branch rm line");
200 	line += strspn(line, " ");
201 
202 	ref = line;
203 
204 	line = strchr(line, ':');
205 	if (line == NULL)
206 		errx(1, "invalid branch rm line");
207 	*line++ = '\0';
208 	id = line + strspn(line, " ");
209 
210 	fputc('{', fp);
211 	json_field(fp, "type", "branch-deleted", 1);
212 	json_field(fp, "repo", repo, 1);
213 	json_field(fp, "ref", ref, 1);
214 	json_field(fp, "id", id, 0);
215 	fputc('}', fp);
216 
217 	return 0;
218 }
219 
220 static int
221 jsonify_commit_short(FILE *fp, char *line, const char *repo)
222 {
223 	char	*t, *date, *id, *author, *message;
224 
225 	t = line;
226 	date = t;
227 	if ((t = strchr(t, ' ')) == NULL)
228       			errx(1, "malformed line");
229 	*t++ = '\0';
230 
231 	id = t;
232 	if ((t = strchr(t, ' ')) == NULL)
233       			errx(1, "malformed line");
234 	*t++ = '\0';
235 
236 	author = t;
237 	if ((t = strchr(t, ' ')) == NULL)
238       			errx(1, "malformed line");
239 	*t++ = '\0';
240 
241 	message = t;
242 
243 	fprintf(fp, "{\"type\":\"commit\",\"short\":true,");
244 	json_field(fp, "repo", repo, 1);
245 	json_field(fp, "id", id, 1);
246 	json_author(fp, "committer", author, 1);
247 	json_field(fp, "date", date, 1);
248 	json_field(fp, "short_message", message, 0);
249 	fprintf(fp, "}");
250 
251 	return 0;
252 }
253 
254 static int
255 jsonify_commit(FILE *fp, const char *repo, char **line, ssize_t *linesize)
256 {
257 	const char	*errstr;
258 	char		*author = NULL;
259 	char		*filename, *t;
260 	char		*l;
261 	ssize_t		 linelen;
262 	int		 parent = 0;
263 	int		 msglen = 0, msgwrote = 0;
264 	int		 n, files = 0;
265 	int		 done = 0;
266 	enum {
267 		P_FROM,
268 		P_VIA,
269 		P_DATE,
270 		P_PARENT,
271 		P_MSGLEN,
272 		P_MSG,
273 		P_DST,
274 		P_SUM,
275 	} phase = P_FROM;
276 
277 	l = *line;
278 	if (strncmp(l, "commit ", 7) != 0)
279 		errx(1, "%s: unexpected line: %s", __func__, l);
280 	l += 7;
281 
282 	fprintf(fp, "{\"type\":\"commit\",\"short\":false,");
283 	json_field(fp, "repo", repo, 1);
284 	json_field(fp, "id", l, 1);
285 
286 	while (!done) {
287 		if ((linelen = getline(line, linesize, stdin)) == -1)
288 			break;
289 
290 		if ((*line)[linelen - 1] == '\n')
291 			(*line)[--linelen] = '\0';
292 
293 		l = *line;
294 		switch (phase) {
295 		case P_FROM:
296 			if (strncmp(l, "from: ", 6) != 0)
297 				errx(1, "unexpected from line");
298 			l += 6;
299 
300 			author = strdup(l);
301 			if (author == NULL)
302 				err(1, "strdup");
303 
304 			json_author(fp, "author", l, 1);
305 
306 			phase = P_VIA;
307 			break;
308 
309 		case P_VIA:
310 			/* optional */
311 			if (!strncmp(l, "via: ", 5)) {
312 				l += 5;
313 				json_author(fp, "committer", l, 1);
314 				phase = P_DATE;
315 				break;
316 			}
317 
318 			if (author == NULL) /* impossible */
319 				err(1, "from not specified");
320 			json_author(fp, "committer", author, 1);
321 			free(author);
322 			author = NULL;
323 
324 			phase = P_DATE;
325 			/* fallthrough */
326 
327 		case P_DATE:
328 			/* optional */
329 			if (!strncmp(l, "date: ", 6)) {
330 				l += 6;
331 				json_field(fp, "date", l, 1);
332 				phase = P_PARENT;
333 				break;
334 			}
335 			phase = P_PARENT;
336 			/* fallthough */
337 
338 		case P_PARENT:
339 			/* optional - more than one */
340 			if (!strncmp(l, "parent ", 7)) {
341 				l += 7;
342 				l += strcspn(l, ":");
343 				l += strspn(l, " ");
344 
345 				if (parent == 0) {
346 					parent = 1;
347 					fprintf(fp, "\"parents\":[");
348 				}
349 
350 				fputc('"', fp);
351 				escape(fp, l);
352 				fputc('"', fp);
353 
354 				break;
355 			}
356 			if (parent != 0) {
357 				fprintf(fp, "],");
358 				parent = 0;
359 			}
360 			phase = P_MSGLEN;
361 			/* fallthrough */
362 
363 		case P_MSGLEN:
364 			if (strncmp(l, "messagelen: ", 12) != 0)
365 				errx(1, "unexpected messagelen line");
366 			l += 12;
367 			msglen = strtonum(l, 1, INT_MAX, &errstr);
368 			if (errstr)
369 				errx(1, "message len is %s: %s", errstr, l);
370 
371 			msglen++;
372 
373 			phase = P_MSG;
374 			break;
375 
376 		case P_MSG:
377 			/*
378 			 * The commit message is indented with one extra
379 			 * space which is not accounted for in messagelen,
380 			 * but we also strip the trailing \n so that
381 			 * accounts for it.
382 			 *
383 			 * Since we read line-by-line and there is always
384 			 * a \n added at the end of the message,
385 			 * tolerate one byte less than advertised.
386 			 */
387 			if (*l != ' ')
388 				errx(1, "unexpected line in commit message");
389 
390 			l++; /* skip leading space */
391 			linelen--;
392 
393 			if (msgwrote == 0 && linelen != 0) {
394 				json_field(fp, "short_message", l, 1);
395 				fprintf(fp, "\"message\":\"");
396 				escape(fp, l);
397 				escape(fp, "\n");
398 				msgwrote += linelen;
399 			} else if (msgwrote != 0) {
400 				escape(fp, l);
401 				escape(fp, "\n");
402 			}
403 
404 			msglen -= linelen + 1;
405 			if (msglen <= 1) {
406 				fprintf(fp, "\",");
407 				phase = P_DST;
408 				break;
409 			}
410 			break;
411 
412 		case P_DST:
413 			if (files == 0 && !strcmp(l, " "))
414 				break;
415 
416 			if (files == 0)
417 				fputs("\"diffstat\":{\"files\":[", fp);
418 
419 			if (*l == '\0') {
420 				fputs("],", fp);
421 				phase = P_SUM;
422 				break;
423 			}
424 
425 			if (*l != ' ')
426 				errx(1, "bad diffstat line");
427 			l++;
428 
429 			if (files != 0)
430 				fputc(',', fp);
431 			fputc('{', fp);
432 
433 			switch (*l) {
434 			case 'A':
435 				json_field(fp, "action", "added", 1);
436 				break;
437 			case 'D':
438 				json_field(fp, "action", "deleted", 1);
439 				break;
440 			case 'M':
441 				json_field(fp, "action", "modified", 1);
442 				break;
443 			case 'm':
444 				json_field(fp, "action", "mode changed", 1);
445 				break;
446 			default:
447 				json_field(fp, "action", "unknown", 1);
448 				break;
449 			}
450 
451 			l++;
452 			while (*l == ' ')
453 				*l++ = '\0';
454 			if (*l == '\0')
455 				errx(1, "invalid diffstat: no filename");
456 
457 			filename = l;
458 			l = strrchr(l, '|');
459 			if (l == NULL)
460 				errx(1, "invalid diffstat: no separator");
461 			t = l - 1;
462 			while (t > filename && *t == ' ')
463 				*t-- = '\0';
464 			json_field(fp, "file", filename, 1);
465 
466 			l++;
467 			while (*l == ' ')
468 				l++;
469 
470 			t = strchr(l, '+');
471 			if (t == NULL)
472 				errx(1, "invalid diffstat: no added counter");
473 			*t++ = '\0';
474 
475 			n = strtonum(l, 0, INT_MAX, &errstr);
476 			if (errstr)
477 				errx(1, "added counter is %s: %s", errstr, l);
478 			fprintf(fp, "\"added\":%d,", n);
479 
480 			l = ++t;
481 			while (*l == ' ')
482 				l++;
483 
484 			t = strchr(l, '-');
485 			if (t == NULL)
486 				errx(1, "invalid diffstat: no del counter");
487 			*t = '\0';
488 
489 			n = strtonum(l, 0, INT_MAX, &errstr);
490 			if (errstr)
491 				errx(1, "del counter is %s: %s", errstr, l);
492 			fprintf(fp, "\"removed\":%d", n);
493 
494 			fputc('}', fp);
495 
496 			files++;
497 
498 			break;
499 
500 		case P_SUM:
501 			fputs("\"total\":{", fp);
502 
503 			t = l;
504 			l = strchr(l, ' ');
505 			if (l == NULL)
506 				errx(1, "missing number of additions");
507 			*l++ = '\0';
508 
509 			n = strtonum(t, 0, INT_MAX, &errstr);
510 			if (errstr)
511 				errx(1, "add counter is %s: %s", errstr, t);
512 			fprintf(fp, "\"added\":%d,", n);
513 
514 			l = strchr(l, ',');
515 			if (l == NULL)
516 				errx(1, "missing number of deletions");
517 			l++;
518 			while (*l == ' ')
519 				l++;
520 
521 			t = strchr(l, ' ');
522 			if (t == NULL)
523 				errx(1, "malformed diffstat sum line");
524 			*t = '\0';
525 
526 			n = strtonum(l, 0, INT_MAX, &errstr);
527 			if (errstr)
528 				errx(1, "del counter is %s: %s", errstr, l);
529 			fprintf(fp, "\"removed\":%d", n);
530 
531 			fputs("}}", fp);
532 			done = 1;
533 			break;
534 
535 		default:
536 			/* unreachable */
537 			errx(1, "unexpected line: %s", *line);
538 		}
539 	}
540 	if (ferror(stdin))
541 		err(1, "getline");
542 	if (!done)
543 		errx(1, "unexpected EOF");
544 	fputc('}', fp);
545 
546 	return 0;
547 }
548 
549 static int
550 jsonify_tag(FILE *fp, const char *repo, char **line, ssize_t *linesize)
551 {
552 	const char	*errstr;
553 	char		*l;
554 	ssize_t		 linelen;
555 	int		 msglen = 0, msgwrote = 0;
556 	int		 done = 0;
557 	enum {
558 		P_FROM,
559 		P_DATE,
560 		P_OBJECT,
561 		P_MSGLEN,
562 		P_MSG,
563 	} phase = P_FROM;
564 
565 	l = *line;
566 	if (strncmp(l, "tag ", 4) != 0)
567 		errx(1, "%s: unexpected line: %s", __func__, l);
568 	l += 4;
569 
570 	fputc('{', fp);
571 	json_field(fp, "type", "tag", 1);
572 	json_field(fp, "repo", repo, 1);
573 	json_field(fp, "tag", l, 1);
574 
575 	while (!done) {
576 		if ((linelen = getline(line, linesize, stdin)) == -1)
577 			break;
578 
579 		if ((*line)[linelen - 1] == '\n')
580 			(*line)[--linelen] = '\0';
581 
582 		l = *line;
583 		switch (phase) {
584 		case P_FROM:
585 			if (strncmp(l, "from: ", 6) != 0)
586 				errx(1, "unexpected from line");
587 			l += 6;
588 
589 			json_author(fp, "tagger", l, 1);
590 
591 			phase = P_DATE;
592 			break;
593 
594 		case P_DATE:
595 			/* optional */
596 			if (!strncmp(l, "date: ", 6)) {
597 				l += 6;
598 				json_field(fp, "date", l, 1);
599 				phase = P_OBJECT;
600 				break;
601 			}
602 			phase = P_OBJECT;
603 			/* fallthough */
604 
605 		case P_OBJECT:
606 			/* optional */
607 			if (!strncmp(l, "object: ", 8)) {
608 				char *type, *id;
609 
610 				l += 8;
611 				type = l;
612 				id = strchr(l, ' ');
613 				if (id == NULL)
614 					errx(1, "malformed tag object line");
615 				*id++ = '\0';
616 
617 				fputs("\"object\":{", fp);
618 				json_field(fp, "type", type, 1);
619 				json_field(fp, "id", id, 0);
620 				fputs("},", fp);
621 
622 				phase = P_MSGLEN;
623 				break;
624 			}
625 			phase = P_MSGLEN;
626 			/* fallthrough */
627 
628 		case P_MSGLEN:
629 			if (strncmp(l, "messagelen: ", 12) != 0)
630 				errx(1, "unexpected messagelen line");
631 			l += 12;
632 			msglen = strtonum(l, 1, INT_MAX, &errstr);
633 			if (errstr)
634 				errx(1, "message len is %s: %s", errstr, l);
635 
636 			msglen++;
637 
638 			phase = P_MSG;
639 			break;
640 
641 		case P_MSG:
642 			if (*l != ' ')
643 				errx(1, "unexpected line in tag message");
644 
645 			l++; /* skip leading space */
646 			linelen--;
647 
648 			if (msgwrote == 0 && linelen != 0) {
649 				fprintf(fp, "\"message\":\"");
650 				escape(fp, l);
651 				escape(fp, "\n");
652 				msgwrote += linelen;
653 			} else if (msgwrote != 0) {
654 				escape(fp, l);
655 				escape(fp, "\n");
656 			}
657 
658 			msglen -= linelen + 1;
659 			if (msglen <= 0) {
660 				fprintf(fp, "\"");
661 				done = 1;
662 				break;
663 			}
664 			break;
665 
666 		default:
667 			/* unreachable */
668 			errx(1, "unexpected line: %s", *line);
669 		}
670 	}
671 	if (ferror(stdin))
672 		err(1, "getline");
673 	if (!done)
674 		errx(1, "unexpected EOF");
675 	fputc('}', fp);
676 
677 	return 0;
678 }
679 
680 static int
681 jsonify(FILE *fp, const char *repo)
682 {
683 	char		*line = NULL;
684 	size_t		 linesize = 0;
685 	ssize_t		 linelen;
686 	int		 needcomma = 0;
687 
688 	fprintf(fp, "{\"notifications\":[");
689 	while ((linelen = getline(&line, &linesize, stdin)) != -1) {
690 		if (line[linelen - 1] == '\n')
691 			line[--linelen] = '\0';
692 
693 		if (*line == '\0')
694 			continue;
695 
696 		if (needcomma)
697 			fputc(',', fp);
698 		needcomma = 1;
699 
700 		if (strncmp(line, "Removed refs/heads/", 19) == 0) {
701 			if (jsonify_branch_rm(fp, line, repo) == -1)
702 				err(1, "jsonify_branch_rm");
703 			continue;
704 		}
705 
706 		if (strncmp(line, "commit ", 7) == 0) {
707 			if (jsonify_commit(fp, repo, &line, &linesize) == -1)
708 				err(1, "jsonify_commit");
709 			continue;
710 		}
711 
712 		if (*line >= '0' && *line <= '9') {
713 			if (jsonify_commit_short(fp, line, repo) == -1)
714 				err(1, "jsonify_commit_short");
715 			continue;
716 		}
717 
718 		if (strncmp(line, "tag ", 4) == 0) {
719 			if (jsonify_tag(fp, repo, &line, &linesize) == -1)
720 				err(1, "jsonify_tag");
721 			continue;
722 		}
723 
724 		errx(1, "unexpected line: %s", line);
725 	}
726 	if (ferror(stdin))
727 		err(1, "getline");
728 	fprintf(fp, "]}");
729 
730 	return 0;
731 }
732 
733 static char *
734 basic_auth(const char *username, const char *password)
735 {
736 	char	*tmp;
737 	int	 len;
738 
739 	len = asprintf(&tmp, "%s:%s", username, password);
740 	if (len == -1)
741 		err(1, "asprintf");
742 
743 	/* XXX base64-ify */
744 	return tmp;
745 }
746 
747 static inline int
748 bufio2poll(struct bufio *bio)
749 {
750 	int f, ret = 0;
751 
752 	f = bufio_ev(bio);
753 	if (f & BUFIO_WANT_READ)
754 		ret |= POLLIN;
755 	if (f & BUFIO_WANT_WRITE)
756 		ret |= POLLOUT;
757 	return ret;
758 }
759 
760 int
761 main(int argc, char **argv)
762 {
763 	FILE		*tmpfp;
764 	struct bufio	 bio;
765 	struct pollfd	 pfd;
766 	struct timespec	 timeout;
767 	const char	*username;
768 	const char	*password;
769 	const char	*timeoutstr;
770 	const char	*errstr;
771 	const char	*repo = NULL;
772 	const char	*host = NULL, *port = NULL, *path = NULL;
773 	char		*auth, *line, *spc;
774 	size_t		 len;
775 	ssize_t		 r;
776 	off_t		 paylen;
777 	int		 tls = 0;
778 	int		 response_code = 0, done = 0;
779 	int		 ch, flags, ret, nonstd = 0;
780 
781 #ifndef PROFILE
782 	if (pledge("stdio rpath tmppath dns inet", NULL) == -1)
783 		err(1, "pledge");
784 #endif
785 
786 	while ((ch = getopt(argc, argv, "ch:p:r:")) != -1) {
787 		switch (ch) {
788 		case 'c':
789 			tls = 1;
790 			break;
791 		case 'h':
792 			host = optarg;
793 			break;
794 		case 'p':
795 			port = optarg;
796 			break;
797 		case 'r':
798 			repo = optarg;
799 			break;
800 		default:
801 			usage();
802 		}
803 	}
804 	argc -= optind;
805 	argv += optind;
806 
807 	if (host == NULL || repo == NULL || argc != 1)
808 		usage();
809 	if (tls && port == NULL)
810 		port = "443";
811 	path = argv[0];
812 
813 	username = getenv("GOT_NOTIFY_HTTP_USER");
814 	password = getenv("GOT_NOTIFY_HTTP_PASS");
815 	if ((username != NULL && password == NULL) ||
816 	    (username == NULL && password != NULL))
817 		errx(1, "username or password are not specified");
818 	if (username && *password == '\0')
819 		errx(1, "password can't be empty");
820 
821 	/* used by the regression test suite */
822 	timeoutstr = getenv("GOT_NOTIFY_TIMEOUT");
823 	if (timeoutstr) {
824 		http_timeout = strtonum(timeoutstr, 0, 600, &errstr);
825 		if (errstr != NULL)
826 			errx(1, "timeout in seconds is %s: %s",
827 			    errstr, timeoutstr);
828 	}
829 
830 	memset(&timeout, 0, sizeof(timeout));
831 	timeout.tv_sec = http_timeout;
832 
833 	tmpfp = got_opentemp();
834 	if (tmpfp == NULL)
835 		err(1, "opentemp");
836 
837 	jsonify(tmpfp, repo);
838 
839 	paylen = ftello(tmpfp);
840 	if (paylen == -1)
841 		err(1, "ftello");
842 	if (fseeko(tmpfp, 0, SEEK_SET) == -1)
843 		err(1, "fseeko");
844 
845 #ifndef PROFILE
846 	/* drop tmppath */
847 	if (pledge("stdio rpath dns inet", NULL) == -1)
848 		err(1, "pledge");
849 #endif
850 
851 	memset(&pfd, 0, sizeof(pfd));
852 	pfd.fd = dial(host, port);
853 
854 	if ((flags = fcntl(pfd.fd, F_GETFL)) == -1)
855 		err(1, "fcntl(F_GETFL)");
856 	if (fcntl(pfd.fd, F_SETFL, flags | O_NONBLOCK) == -1)
857 		err(1, "fcntl(F_SETFL)");
858 
859 	if (bufio_init(&bio) == -1)
860 		err(1, "bufio_init");
861 	bufio_set_fd(&bio, pfd.fd);
862 	if (tls && bufio_starttls(&bio, host, 0, NULL, 0, NULL, 0) == -1)
863 		err(1, "bufio_starttls");
864 
865 #ifndef PROFILE
866 	/* drop rpath dns inet */
867 	if (pledge("stdio", NULL) == -1)
868 		err(1, "pledge");
869 #endif
870 
871 	if ((!tls && strcmp(port, "80") != 0) ||
872 	    (tls && strcmp(port, "443")) != 0)
873 		nonstd = 1;
874 
875 	ret = bufio_compose_fmt(&bio,
876 	    "POST %s HTTP/1.1\r\n"
877 	    "Host: %s%s%s\r\n"
878 	    "Content-Type: application/json\r\n"
879 	    "Content-Length: %lld\r\n"
880 	    "User-Agent: %s\r\n"
881 	    "Connection: close\r\n",
882 	    path, host,
883 	    nonstd ? ":" : "", nonstd ? port : "",
884 	    (long long)paylen, USERAGENT);
885 	if (ret == -1)
886 		err(1, "bufio_compose_fmt");
887 
888 	if (username) {
889 		auth = basic_auth(username, password);
890 		ret = bufio_compose_fmt(&bio, "Authorization: basic %s\r\n",
891 		    auth);
892 		if (ret == -1)
893 			err(1, "bufio_compose_fmt");
894 		free(auth);
895 	}
896 
897 	if (bufio_compose(&bio, "\r\n", 2) == -1)
898 		err(1, "bufio_compose");
899 
900 	while (!done) {
901 		struct timespec	 elapsed, start, stop;
902 		char		 buf[BUFSIZ];
903 
904 		pfd.events = bufio2poll(&bio);
905 		clock_gettime(CLOCK_MONOTONIC, &start);
906 		ret = ppoll(&pfd, 1, &timeout, NULL);
907 		if (ret == -1)
908 			err(1, "poll");
909 		clock_gettime(CLOCK_MONOTONIC, &stop);
910 		timespecsub(&stop, &start, &elapsed);
911 		timespecsub(&timeout, &elapsed, &timeout);
912 		if (ret == 0 || timeout.tv_sec <= 0)
913 			errx(1, "timeout");
914 
915 		if (bio.wbuf.len > 0 && (pfd.revents & POLLOUT)) {
916 			if (bufio_write(&bio) == -1 && errno != EAGAIN)
917 				errx(1, "bufio_write: %s", bufio_io_err(&bio));
918 		}
919 		if (pfd.revents & POLLIN) {
920 			r = bufio_read(&bio);
921 			if (r == -1 && errno != EAGAIN)
922 				errx(1, "bufio_read: %s", bufio_io_err(&bio));
923 			if (r == 0)
924 				errx(1, "unexpected EOF");
925 
926 			for (;;) {
927 				line = buf_getdelim(&bio.rbuf, "\r\n", &len);
928 				if (line == NULL)
929 					break;
930 				if (response_code && *line == '\0') {
931 					/*
932 					 * end of headers, don't bother
933 					 * reading the body, if there is.
934 					 */
935 					done = 1;
936 					break;
937 				}
938 				if (response_code) {
939 					buf_drain(&bio.rbuf, len);
940 					continue;
941 				}
942 				spc = strchr(line, ' ');
943 				if (spc == NULL)
944 					errx(1, "bad reply");
945 				*spc++ = '\0';
946 				if (strcasecmp(line, "HTTP/1.1") != 0)
947 					errx(1, "unexpected protocol: %s",
948 					    line);
949 				line = spc;
950 
951 				spc = strchr(line, ' ');
952 				if (spc == NULL)
953 					errx(1, "bad reply");
954 				*spc++ = '\0';
955 
956 				response_code = strtonum(line, 100, 599,
957 				    &errstr);
958 				if (errstr != NULL)
959 					errx(1, "response code is %s: %s",
960 					    errstr, line);
961 
962 				buf_drain(&bio.rbuf, len);
963 			}
964 			if (done)
965 				break;
966 		}
967 
968 		if (!feof(tmpfp) && bio.wbuf.len < sizeof(buf)) {
969 			len = fread(buf, 1, sizeof(buf), tmpfp);
970 			if (len == 0) {
971 				if (ferror(tmpfp))
972 					err(1, "fread");
973 				continue;
974 			}
975 
976 			if (bufio_compose(&bio, buf, len) == -1)
977 				err(1, "buf_compose");
978 		}
979 	}
980 
981 	if (response_code >= 200 && response_code < 300)
982 		return 0;
983 	errx(1, "request failed with code %d", response_code);
984 }