1 /*
2  * Copyright (c) 2019 Stefan Sperling <stsp@openbsd.org>
3  *
4  * Permission to use, copy, modify, and distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <sys/types.h>
18 #include <sys/stat.h>
19 #include <sys/queue.h>
20 #include <sys/wait.h>
21 
22 #include <ctype.h>
23 #include <errno.h>
24 #include <fcntl.h>
25 #include <limits.h>
26 #include <stdio.h>
27 #include <stdlib.h>
28 #include <string.h>
29 #include <stdint.h>
30 #include <unistd.h>
31 #include <zlib.h>
32 
33 #include "got_compat.h"
34 
35 #include "got_error.h"
36 #include "got_object.h"
37 #include "got_repository.h"
38 #include "got_opentemp.h"
39 #include "got_path.h"
40 #include "got_sigs.h"
41 
42 #include "got_lib_sha1.h"
43 #include "got_lib_deflate.h"
44 #include "got_lib_delta.h"
45 #include "got_lib_object.h"
46 #include "got_lib_object_parse.h"
47 #include "got_lib_lockfile.h"
48 
49 #include "got_lib_object_create.h"
50 
51 #include "buf.h"
52 
53 #ifndef nitems
54 #define nitems(_a) (sizeof(_a) / sizeof((_a)[0]))
55 #endif
56 
57 static const struct got_error *
58 create_object_file(struct got_object_id *id, FILE *content,
59     off_t content_len, struct got_repository *repo)
60 {
61 	const struct got_error *err = NULL, *unlock_err = NULL;
62 	char *objpath = NULL, *tmppath = NULL;
63 	FILE *tmpfile = NULL;
64 	struct got_lockfile *lf = NULL;
65 	off_t tmplen = 0;
66 
67 	err = got_object_get_path(&objpath, id, repo);
68 	if (err)
69 		return err;
70 
71 	err = got_opentemp_named(&tmppath, &tmpfile, objpath);
72 	if (err) {
73 		char *parent_path;
74 		if (!(err->code == GOT_ERR_ERRNO && errno == ENOENT))
75 			goto done;
76 		err = got_path_dirname(&parent_path, objpath);
77 		if (err)
78 			goto done;
79 		err = got_path_mkdir(parent_path);
80 		free(parent_path);
81 		if (err)
82 			goto done;
83 		err = got_opentemp_named(&tmppath, &tmpfile, objpath);
84 		if (err)
85 			goto done;
86 	}
87 
88 	if (fchmod(fileno(tmpfile), GOT_DEFAULT_FILE_MODE) != 0) {
89 		err = got_error_from_errno2("fchmod", tmppath);
90 		goto done;
91 	}
92 
93 	err = got_deflate_to_file(&tmplen, content, content_len, tmpfile, NULL);
94 	if (err)
95 		goto done;
96 
97 	err = got_lockfile_lock(&lf, objpath, -1);
98 	if (err)
99 		goto done;
100 
101 	if (rename(tmppath, objpath) != 0) {
102 		err = got_error_from_errno3("rename", tmppath, objpath);
103 		goto done;
104 	}
105 	free(tmppath);
106 	tmppath = NULL;
107 done:
108 	free(objpath);
109 	if (tmppath) {
110 		if (unlink(tmppath) != 0 && err == NULL)
111 			err = got_error_from_errno2("unlink", tmppath);
112 		free(tmppath);
113 	}
114 	if (tmpfile && fclose(tmpfile) == EOF && err == NULL)
115 		err = got_error_from_errno("fclose");
116 	if (lf)
117 		unlock_err = got_lockfile_unlock(lf, -1);
118 	return err ? err : unlock_err;
119 }
120 
121 const struct got_error *
122 got_object_blob_file_create(struct got_object_id **id, FILE **blobfile,
123     off_t *blobsize, const char *ondisk_path)
124 {
125 	const struct got_error *err = NULL;
126 	char *header = NULL;
127 	int fd = -1;
128 	struct stat sb;
129 	SHA1_CTX sha1_ctx;
130 	size_t headerlen = 0, n;
131 
132 	*id = NULL;
133 	*blobfile = NULL;
134 	*blobsize = 0;
135 
136 	SHA1Init(&sha1_ctx);
137 
138 	fd = open(ondisk_path, O_RDONLY | O_NOFOLLOW | O_CLOEXEC);
139 	if (fd == -1) {
140 		if (!got_err_open_nofollow_on_symlink())
141 			return got_error_from_errno2("open", ondisk_path);
142 
143 		if (lstat(ondisk_path, &sb) == -1) {
144 			err = got_error_from_errno2("lstat", ondisk_path);
145 			goto done;
146 		}
147 	} else if (fstat(fd, &sb) == -1) {
148 		err = got_error_from_errno2("fstat", ondisk_path);
149 		goto done;
150 	}
151 
152 	if (asprintf(&header, "%s %lld", GOT_OBJ_LABEL_BLOB,
153 		(long long)sb.st_size) == -1) {
154 		err = got_error_from_errno("asprintf");
155 		goto done;
156 	}
157 	headerlen = strlen(header) + 1;
158 	SHA1Update(&sha1_ctx, header, headerlen);
159 
160 	*blobfile = got_opentemp();
161 	if (*blobfile == NULL) {
162 		err = got_error_from_errno("got_opentemp");
163 		goto done;
164 	}
165 
166 	n = fwrite(header, 1, headerlen, *blobfile);
167 	if (n != headerlen) {
168 		err = got_ferror(*blobfile, GOT_ERR_IO);
169 		goto done;
170 	}
171 	*blobsize += headerlen;
172 	for (;;) {
173 		char buf[PATH_MAX * 8];
174 		ssize_t inlen;
175 
176 		if (S_ISLNK(sb.st_mode)) {
177 			inlen = readlink(ondisk_path, buf, sizeof(buf));
178 			if (inlen == -1) {
179 				err = got_error_from_errno("readlink");
180 				goto done;
181 			}
182 		} else {
183 			inlen = read(fd, buf, sizeof(buf));
184 			if (inlen == -1) {
185 				err = got_error_from_errno("read");
186 				goto done;
187 			}
188 		}
189 		if (inlen == 0)
190 			break; /* EOF */
191 		SHA1Update(&sha1_ctx, buf, inlen);
192 		n = fwrite(buf, 1, inlen, *blobfile);
193 		if (n != inlen) {
194 			err = got_ferror(*blobfile, GOT_ERR_IO);
195 			goto done;
196 		}
197 		*blobsize += n;
198 		if (S_ISLNK(sb.st_mode))
199 			break;
200 	}
201 
202 	*id = malloc(sizeof(**id));
203 	if (*id == NULL) {
204 		err = got_error_from_errno("malloc");
205 		goto done;
206 	}
207 	SHA1Final((*id)->sha1, &sha1_ctx);
208 
209 	if (fflush(*blobfile) != 0) {
210 		err = got_error_from_errno("fflush");
211 		goto done;
212 	}
213 	rewind(*blobfile);
214 done:
215 	free(header);
216 	if (fd != -1 && close(fd) == -1 && err == NULL)
217 		err = got_error_from_errno("close");
218 	if (err) {
219 		free(*id);
220 		*id = NULL;
221 		if (*blobfile) {
222 			fclose(*blobfile);
223 			*blobfile = NULL;
224 		}
225 	}
226 	return err;
227 }
228 
229 const struct got_error *
230 got_object_blob_create(struct got_object_id **id, const char *ondisk_path,
231     struct got_repository *repo)
232 {
233 	const struct got_error *err = NULL;
234 	FILE *blobfile = NULL;
235 	off_t blobsize;
236 
237 	err = got_object_blob_file_create(id, &blobfile, &blobsize,
238 	    ondisk_path);
239 	if (err)
240 		return err;
241 
242 	err = create_object_file(*id, blobfile, blobsize, repo);
243 	if (fclose(blobfile) == EOF && err == NULL)
244 		err = got_error_from_errno("fclose");
245 	if (err) {
246 		free(*id);
247 		*id = NULL;
248 	}
249 	return err;
250 }
251 
252 static const struct got_error *
253 te_mode2str(char *buf, size_t len, struct got_tree_entry *te)
254 {
255 	int ret;
256 	mode_t mode;
257 
258 	/*
259 	 * Some Git implementations are picky about modes seen in tree entries.
260 	 * For best compatibility we normalize the file/directory mode here.
261 	 */
262 	if (S_ISREG(te->mode)) {
263 		mode = GOT_DEFAULT_FILE_MODE;
264 		if (te->mode & (S_IXUSR | S_IXGRP | S_IXOTH))
265 			mode |= S_IXUSR | S_IXGRP | S_IXOTH;
266 	} else if (got_object_tree_entry_is_submodule(te))
267 		mode = S_IFDIR | S_IFLNK;
268 	else if (S_ISLNK(te->mode))
269 		mode = S_IFLNK; /* Git leaves all the other bits unset. */
270 	else if (S_ISDIR(te->mode))
271 		mode = S_IFDIR; /* Git leaves all the other bits unset. */
272 	else
273 		return got_error(GOT_ERR_BAD_FILETYPE);
274 
275 	ret = snprintf(buf, len, "%o ", mode);
276 	if (ret == -1 || ret >= len)
277 		return got_error(GOT_ERR_NO_SPACE);
278 	return NULL;
279 }
280 
281 /*
282  * Git expects directory tree entries to be sorted with an imaginary slash
283  * appended to their name, and will break otherwise. Let's be nice.
284  * This function is intended to be used with mergesort(3) to sort an
285  * array of pointers to struct got_tree_entry objects.
286  */
287 static int
288 sort_tree_entries_the_way_git_likes_it(const void *arg1, const void *arg2)
289 {
290 	struct got_tree_entry * const *te1 = arg1;
291 	struct got_tree_entry * const *te2 = arg2;
292 	char name1[NAME_MAX + 2];
293 	char name2[NAME_MAX + 2];
294 
295 	strlcpy(name1, (*te1)->name, sizeof(name1));
296 	strlcpy(name2, (*te2)->name, sizeof(name2));
297 	if (S_ISDIR((*te1)->mode))
298 		strlcat(name1, "/", sizeof(name1));
299 	if (S_ISDIR((*te2)->mode))
300 		strlcat(name2, "/", sizeof(name2));
301 	return strcmp(name1, name2);
302 }
303 
304 const struct got_error *
305 got_object_tree_create(struct got_object_id **id,
306     struct got_pathlist_head *paths, int nentries, struct got_repository *repo)
307 {
308 	const struct got_error *err = NULL;
309 	char modebuf[sizeof("100644 ")];
310 	SHA1_CTX sha1_ctx;
311 	char *header = NULL;
312 	size_t headerlen, len = 0, n;
313 	FILE *treefile = NULL;
314 	off_t treesize = 0;
315 	struct got_pathlist_entry *pe;
316 	struct got_tree_entry **sorted_entries;
317 	struct got_tree_entry *te;
318 	int i;
319 
320 	*id = NULL;
321 
322 	SHA1Init(&sha1_ctx);
323 
324 	sorted_entries = calloc(nentries, sizeof(struct got_tree_entry *));
325 	if (sorted_entries == NULL)
326 		return got_error_from_errno("calloc");
327 
328 	i = 0;
329 	TAILQ_FOREACH(pe, paths, entry)
330 		sorted_entries[i++] = pe->data;
331 	mergesort(sorted_entries, nentries, sizeof(struct got_tree_entry *),
332 	    sort_tree_entries_the_way_git_likes_it);
333 
334 	for (i = 0; i < nentries; i++) {
335 		te = sorted_entries[i];
336 		err = te_mode2str(modebuf, sizeof(modebuf), te);
337 		if (err)
338 			goto done;
339 		len += strlen(modebuf) + strlen(te->name) + 1 +
340 		    SHA1_DIGEST_LENGTH;
341 	}
342 
343 	if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_TREE, len) == -1) {
344 		err = got_error_from_errno("asprintf");
345 		goto done;
346 	}
347 	headerlen = strlen(header) + 1;
348 	SHA1Update(&sha1_ctx, header, headerlen);
349 
350 	treefile = got_opentemp();
351 	if (treefile == NULL) {
352 		err = got_error_from_errno("got_opentemp");
353 		goto done;
354 	}
355 
356 	n = fwrite(header, 1, headerlen, treefile);
357 	if (n != headerlen) {
358 		err = got_ferror(treefile, GOT_ERR_IO);
359 		goto done;
360 	}
361 	treesize += headerlen;
362 
363 	for (i = 0; i < nentries; i++) {
364 		te = sorted_entries[i];
365 		err = te_mode2str(modebuf, sizeof(modebuf), te);
366 		if (err)
367 			goto done;
368 		len = strlen(modebuf);
369 		n = fwrite(modebuf, 1, len, treefile);
370 		if (n != len) {
371 			err = got_ferror(treefile, GOT_ERR_IO);
372 			goto done;
373 		}
374 		SHA1Update(&sha1_ctx, modebuf, len);
375 		treesize += n;
376 
377 		len = strlen(te->name) + 1; /* must include NUL */
378 		n = fwrite(te->name, 1, len, treefile);
379 		if (n != len) {
380 			err = got_ferror(treefile, GOT_ERR_IO);
381 			goto done;
382 		}
383 		SHA1Update(&sha1_ctx, te->name, len);
384 		treesize += n;
385 
386 		len = SHA1_DIGEST_LENGTH;
387 		n = fwrite(te->id.sha1, 1, len, treefile);
388 		if (n != len) {
389 			err = got_ferror(treefile, GOT_ERR_IO);
390 			goto done;
391 		}
392 		SHA1Update(&sha1_ctx, te->id.sha1, len);
393 		treesize += n;
394 	}
395 
396 	*id = malloc(sizeof(**id));
397 	if (*id == NULL) {
398 		err = got_error_from_errno("malloc");
399 		goto done;
400 	}
401 	SHA1Final((*id)->sha1, &sha1_ctx);
402 
403 	if (fflush(treefile) != 0) {
404 		err = got_error_from_errno("fflush");
405 		goto done;
406 	}
407 	rewind(treefile);
408 
409 	err = create_object_file(*id, treefile, treesize, repo);
410 done:
411 	free(header);
412 	free(sorted_entries);
413 	if (treefile && fclose(treefile) == EOF && err == NULL)
414 		err = got_error_from_errno("fclose");
415 	if (err) {
416 		free(*id);
417 		*id = NULL;
418 	}
419 	return err;
420 }
421 
422 const struct got_error *
423 got_object_commit_create(struct got_object_id **id,
424     struct got_object_id *tree_id, struct got_object_id_queue *parent_ids,
425     int nparents, const char *author, time_t author_time,
426     const char *committer, time_t committer_time,
427     const char *logmsg, struct got_repository *repo)
428 {
429 	const struct got_error *err = NULL;
430 	SHA1_CTX sha1_ctx;
431 	char *header = NULL, *tree_str = NULL;
432 	char *author_str = NULL, *committer_str = NULL;
433 	char *id_str = NULL;
434 	size_t headerlen, len = 0, n;
435 	FILE *commitfile = NULL;
436 	off_t commitsize = 0;
437 	struct got_object_qid *qid;
438 	char *msg0, *msg;
439 
440 	*id = NULL;
441 
442 	SHA1Init(&sha1_ctx);
443 
444 	msg0 = strdup(logmsg);
445 	if (msg0 == NULL)
446 		return got_error_from_errno("strdup");
447 	msg = msg0;
448 
449 	while (isspace((unsigned char)msg[0]))
450 		msg++;
451 	len = strlen(msg);
452 	while (len > 0 && isspace((unsigned char)msg[len - 1])) {
453 		msg[len - 1] = '\0';
454 		len--;
455 	}
456 
457 	if (asprintf(&author_str, "%s%s %lld +0000\n",
458 	    GOT_COMMIT_LABEL_AUTHOR, author, (long long)author_time) == -1)
459 		return got_error_from_errno("asprintf");
460 
461 	if (asprintf(&committer_str, "%s%s %lld +0000\n",
462 	    GOT_COMMIT_LABEL_COMMITTER, committer ? committer : author,
463 	    (long long)(committer ? committer_time : author_time))
464 	    == -1) {
465 		err = got_error_from_errno("asprintf");
466 		goto done;
467 	}
468 
469 	len = strlen(GOT_COMMIT_LABEL_TREE) + SHA1_DIGEST_STRING_LENGTH +
470 	    nparents *
471 	    (strlen(GOT_COMMIT_LABEL_PARENT) + SHA1_DIGEST_STRING_LENGTH) +
472 	    + strlen(author_str) + strlen(committer_str) + 2 + strlen(msg);
473 
474 	if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_COMMIT, len) == -1) {
475 		err = got_error_from_errno("asprintf");
476 		goto done;
477 	}
478 	headerlen = strlen(header) + 1;
479 	SHA1Update(&sha1_ctx, header, headerlen);
480 
481 	commitfile = got_opentemp();
482 	if (commitfile == NULL) {
483 		err = got_error_from_errno("got_opentemp");
484 		goto done;
485 	}
486 
487 	n = fwrite(header, 1, headerlen, commitfile);
488 	if (n != headerlen) {
489 		err = got_ferror(commitfile, GOT_ERR_IO);
490 		goto done;
491 	}
492 	commitsize += headerlen;
493 
494 	err = got_object_id_str(&id_str, tree_id);
495 	if (err)
496 		goto done;
497 	if (asprintf(&tree_str, "%s%s\n", GOT_COMMIT_LABEL_TREE, id_str)
498 	    == -1) {
499 		err = got_error_from_errno("asprintf");
500 		goto done;
501 	}
502 	len = strlen(tree_str);
503 	SHA1Update(&sha1_ctx, tree_str, len);
504 	n = fwrite(tree_str, 1, len, commitfile);
505 	if (n != len) {
506 		err = got_ferror(commitfile, GOT_ERR_IO);
507 		goto done;
508 	}
509 	commitsize += n;
510 
511 	if (parent_ids) {
512 		free(id_str);
513 		id_str = NULL;
514 		STAILQ_FOREACH(qid, parent_ids, entry) {
515 			char *parent_str = NULL;
516 
517 			err = got_object_id_str(&id_str, &qid->id);
518 			if (err)
519 				goto done;
520 			if (asprintf(&parent_str, "%s%s\n",
521 			    GOT_COMMIT_LABEL_PARENT, id_str) == -1) {
522 				err = got_error_from_errno("asprintf");
523 				goto done;
524 			}
525 			len = strlen(parent_str);
526 			SHA1Update(&sha1_ctx, parent_str, len);
527 			n = fwrite(parent_str, 1, len, commitfile);
528 			if (n != len) {
529 				err = got_ferror(commitfile, GOT_ERR_IO);
530 				free(parent_str);
531 				goto done;
532 			}
533 			commitsize += n;
534 			free(parent_str);
535 			free(id_str);
536 			id_str = NULL;
537 		}
538 	}
539 
540 	len = strlen(author_str);
541 	SHA1Update(&sha1_ctx, author_str, len);
542 	n = fwrite(author_str, 1, len, commitfile);
543 	if (n != len) {
544 		err = got_ferror(commitfile, GOT_ERR_IO);
545 		goto done;
546 	}
547 	commitsize += n;
548 
549 	len = strlen(committer_str);
550 	SHA1Update(&sha1_ctx, committer_str, len);
551 	n = fwrite(committer_str, 1, len, commitfile);
552 	if (n != len) {
553 		err = got_ferror(commitfile, GOT_ERR_IO);
554 		goto done;
555 	}
556 	commitsize += n;
557 
558 	SHA1Update(&sha1_ctx, "\n", 1);
559 	n = fwrite("\n", 1, 1, commitfile);
560 	if (n != 1) {
561 		err = got_ferror(commitfile, GOT_ERR_IO);
562 		goto done;
563 	}
564 	commitsize += n;
565 
566 	len = strlen(msg);
567 	SHA1Update(&sha1_ctx, msg, len);
568 	n = fwrite(msg, 1, len, commitfile);
569 	if (n != len) {
570 		err = got_ferror(commitfile, GOT_ERR_IO);
571 		goto done;
572 	}
573 	commitsize += n;
574 
575 	SHA1Update(&sha1_ctx, "\n", 1);
576 	n = fwrite("\n", 1, 1, commitfile);
577 	if (n != 1) {
578 		err = got_ferror(commitfile, GOT_ERR_IO);
579 		goto done;
580 	}
581 	commitsize += n;
582 
583 	*id = malloc(sizeof(**id));
584 	if (*id == NULL) {
585 		err = got_error_from_errno("malloc");
586 		goto done;
587 	}
588 	SHA1Final((*id)->sha1, &sha1_ctx);
589 
590 	if (fflush(commitfile) != 0) {
591 		err = got_error_from_errno("fflush");
592 		goto done;
593 	}
594 	rewind(commitfile);
595 
596 	err = create_object_file(*id, commitfile, commitsize, repo);
597 done:
598 	free(id_str);
599 	free(msg0);
600 	free(header);
601 	free(tree_str);
602 	free(author_str);
603 	free(committer_str);
604 	if (commitfile && fclose(commitfile) == EOF && err == NULL)
605 		err = got_error_from_errno("fclose");
606 	if (err) {
607 		free(*id);
608 		*id = NULL;
609 	}
610 	return err;
611 }
612 
613 const struct got_error *
614 got_object_tag_create(struct got_object_id **id,
615     const char *tag_name, struct got_object_id *object_id, const char *tagger,
616     time_t tagger_time, const char *tagmsg, const char *signer_id,
617     struct got_repository *repo, int verbosity)
618 {
619 	const struct got_error *err = NULL;
620 	SHA1_CTX sha1_ctx;
621 	char *header = NULL;
622 	char *tag_str = NULL, *tagger_str = NULL;
623 	char *id_str = NULL, *obj_str = NULL, *type_str = NULL;
624 	size_t headerlen, len = 0, sig_len = 0, n;
625 	FILE *tagfile = NULL;
626 	off_t tagsize = 0;
627 	char *msg0 = NULL, *msg;
628 	const char *obj_type_str;
629 	int obj_type;
630 	BUF *buf = NULL;
631 
632 	*id = NULL;
633 
634 	SHA1Init(&sha1_ctx);
635 
636 	err = got_object_id_str(&id_str, object_id);
637 	if (err)
638 		goto done;
639 	if (asprintf(&obj_str, "%s%s\n", GOT_TAG_LABEL_OBJECT, id_str) == -1) {
640 		err = got_error_from_errno("asprintf");
641 		goto done;
642 	}
643 
644 	err = got_object_get_type(&obj_type, repo, object_id);
645 	if (err)
646 		goto done;
647 
648 	switch (obj_type) {
649 	case GOT_OBJ_TYPE_BLOB:
650 		obj_type_str = GOT_OBJ_LABEL_BLOB;
651 		break;
652 	case GOT_OBJ_TYPE_TREE:
653 		obj_type_str = GOT_OBJ_LABEL_TREE;
654 		break;
655 	case GOT_OBJ_TYPE_COMMIT:
656 		obj_type_str = GOT_OBJ_LABEL_COMMIT;
657 		break;
658 	case GOT_OBJ_TYPE_TAG:
659 		obj_type_str = GOT_OBJ_LABEL_TAG;
660 		break;
661 	default:
662 		err = got_error(GOT_ERR_OBJ_TYPE);
663 		goto done;
664 	}
665 
666 	if (asprintf(&type_str, "%s%s\n", GOT_TAG_LABEL_TYPE,
667 	    obj_type_str) == -1) {
668 		err = got_error_from_errno("asprintf");
669 		goto done;
670 	}
671 
672 	if (asprintf(&tag_str, "%s%s\n", GOT_TAG_LABEL_TAG, tag_name) == -1) {
673 		err = got_error_from_errno("asprintf");
674 		goto done;
675 	}
676 
677 	if (asprintf(&tagger_str, "%s%s %lld +0000\n",
678 	    GOT_TAG_LABEL_TAGGER, tagger, (long long)tagger_time) == -1)
679 		return got_error_from_errno("asprintf");
680 
681 	msg0 = strdup(tagmsg);
682 	if (msg0 == NULL) {
683 		err = got_error_from_errno("strdup");
684 		goto done;
685 	}
686 	msg = msg0;
687 
688 	while (isspace((unsigned char)msg[0]))
689 		msg++;
690 
691 	if (signer_id) {
692 		FILE *out;
693 		pid_t pid;
694 		size_t len;
695 		int in_fd, out_fd;
696 		int status;
697 
698 		err = buf_alloc(&buf, 0);
699 		if (err)
700 			goto done;
701 
702 		/* signed message */
703 		err = buf_puts(&len, buf, obj_str);
704 		if (err)
705 			goto done;
706 		err = buf_puts(&len, buf, type_str);
707 		if (err)
708 			goto done;
709 		err = buf_puts(&len, buf, tag_str);
710 		if (err)
711 			goto done;
712 		err = buf_puts(&len, buf, tagger_str);
713 		if (err)
714 			goto done;
715 		err = buf_putc(buf, '\n');
716 		if (err)
717 			goto done;
718 		err = buf_puts(&len, buf, msg);
719 		if (err)
720 			goto done;
721 		err = buf_putc(buf, '\n');
722 		if (err)
723 			goto done;
724 
725 		err = got_sigs_sign_tag_ssh(&pid, &in_fd, &out_fd, signer_id,
726 		    verbosity);
727 		if (err)
728 			goto done;
729 		if (buf_write_fd(buf, in_fd) == -1) {
730 			err = got_error_from_errno("write");
731 			goto done;
732 		}
733 		if (close(in_fd) == -1) {
734 			err = got_error_from_errno("close");
735 			goto done;
736 		}
737 
738 		if (waitpid(pid, &status, 0) == -1) {
739 			err = got_error_from_errno("waitpid");
740 			goto done;
741 		}
742 		if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
743 			err = got_error(GOT_ERR_SIGNING_TAG);
744 			goto done;
745 		}
746 
747 		out = fdopen(out_fd, "r");
748 		if (out == NULL) {
749 			err = got_error_from_errno("fdopen");
750 			goto done;
751 		}
752 		buf_empty(buf);
753 		err = buf_load(&buf, out);
754 		if (err)
755 			goto done;
756 		sig_len = buf_len(buf) + 1;
757 		err = buf_putc(buf, '\0');
758 		if (err)
759 			goto done;
760 		if (close(out_fd) == -1) {
761 			err = got_error_from_errno("close");
762 			goto done;
763 		}
764 	}
765 
766 	len = strlen(obj_str) + strlen(type_str) + strlen(tag_str) +
767 	    strlen(tagger_str) + 1 + strlen(msg) + 1 + sig_len;
768 	if (asprintf(&header, "%s %zd", GOT_OBJ_LABEL_TAG, len) == -1) {
769 		err = got_error_from_errno("asprintf");
770 		goto done;
771 	}
772 
773 	headerlen = strlen(header) + 1;
774 	SHA1Update(&sha1_ctx, header, headerlen);
775 
776 	tagfile = got_opentemp();
777 	if (tagfile == NULL) {
778 		err = got_error_from_errno("got_opentemp");
779 		goto done;
780 	}
781 
782 	n = fwrite(header, 1, headerlen, tagfile);
783 	if (n != headerlen) {
784 		err = got_ferror(tagfile, GOT_ERR_IO);
785 		goto done;
786 	}
787 	tagsize += headerlen;
788 	len = strlen(obj_str);
789 	SHA1Update(&sha1_ctx, obj_str, len);
790 	n = fwrite(obj_str, 1, len, tagfile);
791 	if (n != len) {
792 		err = got_ferror(tagfile, GOT_ERR_IO);
793 		goto done;
794 	}
795 	tagsize += n;
796 	len = strlen(type_str);
797 	SHA1Update(&sha1_ctx, type_str, len);
798 	n = fwrite(type_str, 1, len, tagfile);
799 	if (n != len) {
800 		err = got_ferror(tagfile, GOT_ERR_IO);
801 		goto done;
802 	}
803 	tagsize += n;
804 
805 	len = strlen(tag_str);
806 	SHA1Update(&sha1_ctx, tag_str, len);
807 	n = fwrite(tag_str, 1, len, tagfile);
808 	if (n != len) {
809 		err = got_ferror(tagfile, GOT_ERR_IO);
810 		goto done;
811 	}
812 	tagsize += n;
813 
814 	len = strlen(tagger_str);
815 	SHA1Update(&sha1_ctx, tagger_str, len);
816 	n = fwrite(tagger_str, 1, len, tagfile);
817 	if (n != len) {
818 		err = got_ferror(tagfile, GOT_ERR_IO);
819 		goto done;
820 	}
821 	tagsize += n;
822 
823 	SHA1Update(&sha1_ctx, "\n", 1);
824 	n = fwrite("\n", 1, 1, tagfile);
825 	if (n != 1) {
826 		err = got_ferror(tagfile, GOT_ERR_IO);
827 		goto done;
828 	}
829 	tagsize += n;
830 
831 	len = strlen(msg);
832 	SHA1Update(&sha1_ctx, msg, len);
833 	n = fwrite(msg, 1, len, tagfile);
834 	if (n != len) {
835 		err = got_ferror(tagfile, GOT_ERR_IO);
836 		goto done;
837 	}
838 	tagsize += n;
839 
840 	SHA1Update(&sha1_ctx, "\n", 1);
841 	n = fwrite("\n", 1, 1, tagfile);
842 	if (n != 1) {
843 		err = got_ferror(tagfile, GOT_ERR_IO);
844 		goto done;
845 	}
846 	tagsize += n;
847 
848 	if (signer_id && buf_len(buf) > 0) {
849 		len = buf_len(buf);
850 		SHA1Update(&sha1_ctx, buf_get(buf), len);
851 		n = fwrite(buf_get(buf), 1, len, tagfile);
852 		if (n != len) {
853 			err = got_ferror(tagfile, GOT_ERR_IO);
854 			goto done;
855 		}
856 		tagsize += n;
857 	}
858 
859 	*id = malloc(sizeof(**id));
860 	if (*id == NULL) {
861 		err = got_error_from_errno("malloc");
862 		goto done;
863 	}
864 	SHA1Final((*id)->sha1, &sha1_ctx);
865 
866 	if (fflush(tagfile) != 0) {
867 		err = got_error_from_errno("fflush");
868 		goto done;
869 	}
870 	rewind(tagfile);
871 
872 	err = create_object_file(*id, tagfile, tagsize, repo);
873 done:
874 	free(msg0);
875 	free(header);
876 	free(obj_str);
877 	free(tagger_str);
878 	if (buf)
879 		buf_release(buf);
880 	if (tagfile && fclose(tagfile) == EOF && err == NULL)
881 		err = got_error_from_errno("fclose");
882 	if (err) {
883 		free(*id);
884 		*id = NULL;
885 	}
886 	return err;
887 }