Got Mirror

Blob

Date:: Thu Sep 1 14:45:48 2022 UTC
Message:: gotwebd: free qs->headref before overwriting it
Actions:: History | Blame | Raw File
1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
5  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
6  *
7  * Permission to use, copy, modify, and distribute this software for any
8  * purpose with or without fee is hereby granted, provided that the above
9  * copyright notice and this permission notice appear in all copies.
10  *
11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18  */
19 
20 #include <net/if.h>
21 #include <netinet/in.h>
22 #include <sys/queue.h>
23 #include <sys/stat.h>
24 #include <sys/types.h>
25 
26 #include <dirent.h>
27 #include <errno.h>
28 #include <event.h>
29 #include <imsg.h>
30 #include <sha1.h>
31 #include <stdio.h>
32 #include <stdlib.h>
33 #include <string.h>
34 #include <unistd.h>
35 
36 #include "got_error.h"
37 #include "got_object.h"
38 #include "got_reference.h"
39 #include "got_repository.h"
40 #include "got_path.h"
41 #include "got_cancel.h"
42 #include "got_worktree.h"
43 #include "got_diff.h"
44 #include "got_commit_graph.h"
45 #include "got_blame.h"
46 #include "got_privsep.h"
47 
48 #include "proc.h"
49 #include "gotwebd.h"
50 
51 enum gotweb_ref_tm {
52 	TM_DIFF,
53 	TM_LONG,
54 };
55 
56 static const struct querystring_keys querystring_keys[] = {
57 	{ "action",		ACTION },
58 	{ "commit",		COMMIT },
59 	{ "file",		RFILE },
60 	{ "folder",		FOLDER },
61 	{ "headref",		HEADREF },
62 	{ "index_page",		INDEX_PAGE },
63 	{ "path",		PATH },
64 	{ "page",		PAGE },
65 };
66 
67 static const struct action_keys action_keys[] = {
68 	{ "blame",	BLAME },
69 	{ "blob",	BLOB },
70 	{ "briefs",	BRIEFS },
71 	{ "commits",	COMMITS },
72 	{ "diff",	DIFF },
73 	{ "error",	ERR },
74 	{ "index",	INDEX },
75 	{ "summary",	SUMMARY },
76 	{ "tag",	TAG },
77 	{ "tags",	TAGS },
78 	{ "tree",	TREE },
79 };
80 
81 static const struct got_error *gotweb_init_querystring(struct querystring **);
82 static const struct got_error *gotweb_parse_querystring(struct querystring **,
83     char *);
84 static const struct got_error *gotweb_assign_querystring(struct querystring **,
85     char *, char *);
86 static const struct got_error *gotweb_render_header(struct request *);
87 static const struct got_error *gotweb_render_footer(struct request *);
88 static const struct got_error *gotweb_render_index(struct request *);
89 static const struct got_error *gotweb_init_repo_dir(struct repo_dir **,
90     const char *);
91 static const struct got_error *gotweb_load_got_path(struct request *c,
92     struct repo_dir *);
93 static const struct got_error *gotweb_get_repo_description(char **,
94     struct server *, char *);
95 static const struct got_error *gotweb_get_clone_url(char **, struct server *,
96     char *);
97 static const struct got_error *gotweb_render_navs(struct request *);
98 static const struct got_error *gotweb_render_blame(struct request *);
99 static const struct got_error *gotweb_render_briefs(struct request *);
100 static const struct got_error *gotweb_render_commits(struct request *);
101 static const struct got_error *gotweb_render_diff(struct request *);
102 static const struct got_error *gotweb_render_summary(struct request *);
103 static const struct got_error *gotweb_render_tag(struct request *);
104 static const struct got_error *gotweb_render_tags(struct request *);
105 static const struct got_error *gotweb_render_tree(struct request *);
106 static const struct got_error *gotweb_render_branches(struct request *);
107 
108 static void gotweb_free_querystring(struct querystring *);
109 static void gotweb_free_repo_dir(struct repo_dir *);
110 
111 struct server *gotweb_get_server(uint8_t *, uint8_t *);
112 
113 void
114 gotweb_process_request(struct request *c)
115 {
116 	const struct got_error *error = NULL, *error2 = NULL;
117 	struct server *srv = NULL;
118 	struct querystring *qs = NULL;
119 	struct repo_dir *repo_dir = NULL;
120 	uint8_t err[] = "gotwebd experienced an error: ";
121 	int r, html = 0;
122 
123 	/* init the transport */
124 	error = gotweb_init_transport(&c->t);
125 	if (error) {
126 		log_warnx("%s: %s", __func__, error->msg);
127 		return;
128 	}
129 	/* don't process any further if client disconnected */
130 	if (c->sock->client_status == CLIENT_DISCONNECT)
131 		return;
132 	/* get the gotwebd server */
133 	srv = gotweb_get_server(c->server_name, c->http_host);
134 	if (srv == NULL) {
135 		log_warnx("%s: error server is NULL", __func__);
136 		goto err;
137 	}
138 	c->srv = srv;
139 	/* parse our querystring */
140 	error = gotweb_init_querystring(&qs);
141 	if (error) {
142 		log_warnx("%s: %s", __func__, error->msg);
143 		goto err;
144 	}
145 	c->t->qs = qs;
146 	error = gotweb_parse_querystring(&qs, c->querystring);
147 	if (error) {
148 		log_warnx("%s: %s", __func__, error->msg);
149 		goto err;
150 	}
151 
152 	/*
153 	 * certain actions require a commit id in the querystring. this stops
154 	 * bad actors from exploiting this by manually manipulating the
155 	 * querystring.
156 	 */
157 
158 	if (qs->commit == NULL && (qs->action == BLAME || qs->action == BLOB ||
159 	    qs->action == DIFF)) {
160 		error2 = got_error(GOT_ERR_QUERYSTRING);
161 		goto render;
162 	}
163 
164 	if (qs->action != INDEX) {
165 		error = gotweb_init_repo_dir(&repo_dir, qs->path);
166 		if (error)
167 			goto done;
168 		error = gotweb_load_got_path(c, repo_dir);
169 		c->t->repo_dir = repo_dir;
170 		if (error && error->code != GOT_ERR_LONELY_PACKIDX)
171 			goto err;
172 	}
173 
174 	/* render top of page */
175 	if (qs != NULL && qs->action == BLOB) {
176 		error = got_get_repo_commits(c, 1);
177 		if (error)
178 			goto done;
179 		error = got_output_file_blob(c);
180 		if (error) {
181 			log_warnx("%s: %s", __func__, error->msg);
182 			goto err;
183 		}
184 		goto done;
185 	} else {
186 render:
187 		error = gotweb_render_content_type(c, "text/html");
188 		if (error) {
189 			log_warnx("%s: %s", __func__, error->msg);
190 			goto err;
191 		}
192 		html = 1;
193 	}
194 
195 	error = gotweb_render_header(c);
196 	if (error) {
197 		log_warnx("%s: %s", __func__, error->msg);
198 		goto err;
199 	}
200 
201 	if (error2) {
202 		error = error2;
203 		goto err;
204 	}
205 
206 	switch(qs->action) {
207 	case BLAME:
208 		error = gotweb_render_blame(c);
209 		if (error) {
210 			log_warnx("%s: %s", __func__, error->msg);
211 			goto err;
212 		}
213 		break;
214 	case BRIEFS:
215 		error = gotweb_render_briefs(c);
216 		if (error) {
217 			log_warnx("%s: %s", __func__, error->msg);
218 			goto err;
219 		}
220 		break;
221 	case COMMITS:
222 		error = gotweb_render_commits(c);
223 		if (error) {
224 			log_warnx("%s: %s", __func__, error->msg);
225 			goto err;
226 		}
227 		break;
228 	case DIFF:
229 		error = gotweb_render_diff(c);
230 		if (error) {
231 			log_warnx("%s: %s", __func__, error->msg);
232 			goto err;
233 		}
234 		break;
235 	case INDEX:
236 		error = gotweb_render_index(c);
237 		if (error) {
238 			log_warnx("%s: %s", __func__, error->msg);
239 			goto err;
240 		}
241 		break;
242 	case SUMMARY:
243 		error = gotweb_render_summary(c);
244 		if (error) {
245 			log_warnx("%s: %s", __func__, error->msg);
246 			goto err;
247 		}
248 		break;
249 	case TAG:
250 		error = gotweb_render_tag(c);
251 		if (error) {
252 			log_warnx("%s: %s", __func__, error->msg);
253 			goto err;
254 		}
255 		break;
256 	case TAGS:
257 		error = gotweb_render_tags(c);
258 		if (error) {
259 			log_warnx("%s: %s", __func__, error->msg);
260 			goto err;
261 		}
262 		break;
263 	case TREE:
264 		error = gotweb_render_tree(c);
265 		if (error) {
266 			log_warnx("%s: %s", __func__, error->msg);
267 			goto err;
268 		}
269 		break;
270 	case ERR:
271 	default:
272 		r = fcgi_printf(c, "<div id='err_content'>%s</div>\n",
273 		    "Erorr: Bad Querystring");
274 		if (r == -1)
275 			goto err;
276 		break;
277 	}
278 
279 	goto done;
280 err:
281 	if (html && fcgi_printf(c, "<div id='err_content'>") == -1)
282 		return;
283 	if (fcgi_printf(c, "%s", err) == -1)
284 		return;
285 	if (error) {
286 		if (fcgi_printf(c, "%s", error->msg) == -1)
287 			return;
288 	} else {
289 		if (fcgi_printf(c, "see daemon logs for details") == -1)
290 			return;
291 	}
292 	if (html && fcgi_printf(c, "</div>\n") == -1)
293 		return;
294 done:
295 	if (html && srv != NULL)
296 		gotweb_render_footer(c);
297 }
298 
299 struct server *
300 gotweb_get_server(uint8_t *server_name, uint8_t *subdomain)
301 {
302 	struct server *srv = NULL;
303 
304 	/* check against the server name first */
305 	if (strlen(server_name) > 0)
306 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
307 			if (strcmp(srv->name, server_name) == 0)
308 				goto done;
309 
310 	/* check against subdomain second */
311 	if (strlen(subdomain) > 0)
312 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
313 			if (strcmp(srv->name, subdomain) == 0)
314 				goto done;
315 
316 	/* if those fail, send first server */
317 	TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
318 		if (srv != NULL)
319 			break;
320 done:
321 	return srv;
322 };
323 
324 const struct got_error *
325 gotweb_init_transport(struct transport **t)
326 {
327 	const struct got_error *error = NULL;
328 
329 	*t = calloc(1, sizeof(**t));
330 	if (*t == NULL)
331 		return got_error_from_errno2("%s: calloc", __func__);
332 
333 	TAILQ_INIT(&(*t)->repo_commits);
334 	TAILQ_INIT(&(*t)->repo_tags);
335 
336 	(*t)->repo = NULL;
337 	(*t)->repo_dir = NULL;
338 	(*t)->qs = NULL;
339 	(*t)->next_id = NULL;
340 	(*t)->prev_id = NULL;
341 	(*t)->next_disp = 0;
342 	(*t)->prev_disp = 0;
343 
344 	return error;
345 }
346 
347 static const struct got_error *
348 gotweb_init_querystring(struct querystring **qs)
349 {
350 	const struct got_error *error = NULL;
351 
352 	*qs = calloc(1, sizeof(**qs));
353 	if (*qs == NULL)
354 		return got_error_from_errno2("%s: calloc", __func__);
355 
356 	(*qs)->headref = strdup("HEAD");
357 	if ((*qs)->headref == NULL) {
358 		free(*qs);
359 		*qs = NULL;
360 		return got_error_from_errno2("%s: strdup", __func__);
361 	}
362 
363 	(*qs)->action = INDEX;
364 	(*qs)->commit = NULL;
365 	(*qs)->file = NULL;
366 	(*qs)->folder = NULL;
367 	(*qs)->index_page = 0;
368 	(*qs)->index_page_str = NULL;
369 	(*qs)->path = NULL;
370 
371 	return error;
372 }
373 
374 static const struct got_error *
375 gotweb_parse_querystring(struct querystring **qs, char *qst)
376 {
377 	const struct got_error *error = NULL;
378 	char *tok1 = NULL, *tok1_pair = NULL, *tok1_end = NULL;
379 	char *tok2 = NULL, *tok2_pair = NULL, *tok2_end = NULL;
380 
381 	if (qst == NULL)
382 		return error;
383 
384 	tok1 = strdup(qst);
385 	if (tok1 == NULL)
386 		return got_error_from_errno2("%s: strdup", __func__);
387 
388 	tok1_pair = tok1;
389 	tok1_end = tok1;
390 
391 	while (tok1_pair != NULL) {
392 		strsep(&tok1_end, "&");
393 
394 		tok2 = strdup(tok1_pair);
395 		if (tok2 == NULL) {
396 			free(tok1);
397 			return got_error_from_errno2("%s: strdup", __func__);
398 		}
399 
400 		tok2_pair = tok2;
401 		tok2_end = tok2;
402 
403 		while (tok2_pair != NULL) {
404 			strsep(&tok2_end, "=");
405 			if (tok2_end) {
406 				error = gotweb_assign_querystring(qs, tok2_pair,
407 				    tok2_end);
408 				if (error)
409 					goto err;
410 			}
411 			tok2_pair = tok2_end;
412 		}
413 		free(tok2);
414 		tok1_pair = tok1_end;
415 	}
416 	free(tok1);
417 	return error;
418 err:
419 	free(tok2);
420 	free(tok1);
421 	return error;
422 }
423 
424 static const struct got_error *
425 gotweb_assign_querystring(struct querystring **qs, char *key, char *value)
426 {
427 	const struct got_error *error = NULL;
428 	const char *errstr;
429 	int a_cnt, el_cnt;
430 
431 	for (el_cnt = 0; el_cnt < QSELEM__MAX; el_cnt++) {
432 		if (strcmp(key, querystring_keys[el_cnt].name) != 0)
433 			continue;
434 
435 		switch (querystring_keys[el_cnt].element) {
436 		case ACTION:
437 			for (a_cnt = 0; a_cnt < ACTIONS__MAX; a_cnt++) {
438 				if (strcmp(value, action_keys[a_cnt].name) != 0)
439 					continue;
440 				else if (strcmp(value,
441 				    action_keys[a_cnt].name) == 0){
442 					(*qs)->action =
443 					    action_keys[a_cnt].action;
444 					goto qa_found;
445 				}
446 			}
447 			(*qs)->action = ERR;
448 qa_found:
449 			break;
450 		case COMMIT:
451 			(*qs)->commit = strdup(value);
452 			if ((*qs)->commit == NULL) {
453 				error = got_error_from_errno2("%s: strdup",
454 				    __func__);
455 				goto done;
456 			}
457 			break;
458 		case RFILE:
459 			(*qs)->file = strdup(value);
460 			if ((*qs)->file == NULL) {
461 				error = got_error_from_errno2("%s: strdup",
462 				    __func__);
463 				goto done;
464 			}
465 			break;
466 		case FOLDER:
467 			(*qs)->folder = strdup(value);
468 			if ((*qs)->folder == NULL) {
469 				error = got_error_from_errno2("%s: strdup",
470 				    __func__);
471 				goto done;
472 			}
473 			break;
474 		case HEADREF:
475 			free((*qs)->headref);
476 			(*qs)->headref = strdup(value);
477 			if ((*qs)->headref == NULL) {
478 				error = got_error_from_errno2("%s: strdup",
479 				    __func__);
480 				goto done;
481 			}
482 			break;
483 		case INDEX_PAGE:
484 			if (strlen(value) == 0)
485 				break;
486 			(*qs)->index_page_str = strdup(value);
487 			if ((*qs)->index_page_str == NULL) {
488 				error = got_error_from_errno2("%s: strdup",
489 				    __func__);
490 				goto done;
491 			}
492 			(*qs)->index_page = strtonum(value, INT64_MIN,
493 			    INT64_MAX, &errstr);
494 			if (errstr) {
495 				error = got_error_from_errno3("%s: strtonum %s",
496 				    __func__, errstr);
497 				goto done;
498 			}
499 			if ((*qs)->index_page < 0) {
500 				(*qs)->index_page = 0;
501 				sprintf((*qs)->index_page_str, "%d", 0);
502 			}
503 			break;
504 		case PATH:
505 			(*qs)->path = strdup(value);
506 			if ((*qs)->path == NULL) {
507 				error = got_error_from_errno2("%s: strdup",
508 				    __func__);
509 				goto done;
510 			}
511 			break;
512 		case PAGE:
513 			if (strlen(value) == 0)
514 				break;
515 			(*qs)->page_str = strdup(value);
516 			if ((*qs)->page_str == NULL) {
517 				error = got_error_from_errno2("%s: strdup",
518 				    __func__);
519 				goto done;
520 			}
521 			(*qs)->page = strtonum(value, INT64_MIN,
522 			    INT64_MAX, &errstr);
523 			if (errstr) {
524 				error = got_error_from_errno3("%s: strtonum %s",
525 				    __func__, errstr);
526 				goto done;
527 			}
528 			if ((*qs)->page < 0) {
529 				(*qs)->page = 0;
530 				sprintf((*qs)->page_str, "%d", 0);
531 			}
532 			break;
533 		default:
534 			break;
535 		}
536 	}
537 done:
538 	return error;
539 }
540 
541 void
542 gotweb_free_repo_tag(struct repo_tag *rt)
543 {
544 	if (rt != NULL) {
545 		free(rt->commit_id);
546 		free(rt->tag_name);
547 		free(rt->tag_commit);
548 		free(rt->commit_msg);
549 		free(rt->tagger);
550 	}
551 	free(rt);
552 }
553 
554 void
555 gotweb_free_repo_commit(struct repo_commit *rc)
556 {
557 	if (rc != NULL) {
558 		free(rc->path);
559 		free(rc->refs_str);
560 		free(rc->commit_id);
561 		free(rc->parent_id);
562 		free(rc->tree_id);
563 		free(rc->author);
564 		free(rc->committer);
565 		free(rc->commit_msg);
566 	}
567 	free(rc);
568 }
569 
570 static void
571 gotweb_free_querystring(struct querystring *qs)
572 {
573 	if (qs != NULL) {
574 		free(qs->commit);
575 		free(qs->file);
576 		free(qs->folder);
577 		free(qs->headref);
578 		free(qs->index_page_str);
579 		free(qs->path);
580 		free(qs->page_str);
581 	}
582 	free(qs);
583 }
584 
585 static void
586 gotweb_free_repo_dir(struct repo_dir *repo_dir)
587 {
588 	if (repo_dir != NULL) {
589 		free(repo_dir->name);
590 		free(repo_dir->owner);
591 		free(repo_dir->description);
592 		free(repo_dir->url);
593 		free(repo_dir->age);
594 		free(repo_dir->path);
595 	}
596 	free(repo_dir);
597 }
598 
599 void
600 gotweb_free_transport(struct transport *t)
601 {
602 	struct repo_commit *rc = NULL, *trc = NULL;
603 	struct repo_tag *rt = NULL, *trt = NULL;
604 
605 	TAILQ_FOREACH_SAFE(rc, &t->repo_commits, entry, trc) {
606 		TAILQ_REMOVE(&t->repo_commits, rc, entry);
607 		gotweb_free_repo_commit(rc);
608 	}
609 	TAILQ_FOREACH_SAFE(rt, &t->repo_tags, entry, trt) {
610 		TAILQ_REMOVE(&t->repo_tags, rt, entry);
611 		gotweb_free_repo_tag(rt);
612 	}
613 	gotweb_free_repo_dir(t->repo_dir);
614 	gotweb_free_querystring(t->qs);
615 	free(t->next_id);
616 	free(t->prev_id);
617 	free(t);
618 }
619 
620 const struct got_error *
621 gotweb_render_content_type(struct request *c, const uint8_t *type)
622 {
623 	const char *csp = "default-src 'self'; script-src 'none'; "
624 		"object-src 'none';";
625 
626 	fcgi_printf(c,
627 	    "Content-Security-Policy: %s\r\n"
628 	    "Content-Type: %s\r\n\r\n",
629 	    csp, type);
630 	return NULL;
631 }
632 
633 const struct got_error *
634 gotweb_render_content_type_file(struct request *c, const uint8_t *type,
635     char *file)
636 {
637 	fcgi_printf(c, "Content-type: %s\r\n"
638 	    "Content-disposition: attachment; filename=%s\r\n\r\n",
639 	    type, file);
640 	return NULL;
641 }
642 
643 static const struct got_error *
644 gotweb_render_header(struct request *c)
645 {
646 	struct server *srv = c->srv;
647 	struct querystring *qs = c->t->qs;
648 	int r;
649 
650 	r = fcgi_printf(c, "<!doctype html>\n"
651 	    "<html>\n"
652 	    "<head>\n"
653 	    "<title>%s</title>\n"
654 	    "<meta charset='utf-8' />\n"
655 	    "<meta name='viewport' content='initial-scale=.75' />\n"
656 	    "<meta name='msapplication-TileColor' content='#da532c' />\n"
657 	    "<meta name='theme-color' content='#ffffff'/>\n"
658 	    "<link rel='apple-touch-icon' sizes='180x180'"
659 	    " href='%sapple-touch-icon.png' />\n"
660 	    "<link rel='icon' type='image/png' sizes='32x32'"
661 	    " href='%sfavicon-32x32.png' />\n"
662 	    "<link rel='icon' type='image/png' sizes='16x16'"
663 	    " href='%sfavicon-16x16.png' />\n"
664 	    "<link rel='manifest' href='%ssite.webmanifest'/>\n"
665 	    "<link rel='mask-icon' href='%ssafari-pinned-tab.svg' />\n"
666 	    "<link rel='stylesheet' type='text/css' href='%s%s' />\n"
667 	    "</head>\n"
668 	    "<body>\n"
669 	    "<div id='gw_body'>\n"
670 	    "<div id='header'>\n"
671 	    "<div id='got_link'>"
672 	    "<a href='%s' target='_blank'>"
673 	    "<img src='%s%s' alt='logo' id='logo' />"
674 	    "</a>\n"
675 	    "</div>\n"		/* #got_link */
676 	    "</div>\n"		/* #header */
677 	    "<div id='site_path'>\n"
678 	    "<div id='site_link'>\n"
679 	    "<a href='?index_page=%d'>%s</a>",
680 	    c->script_name,
681 	    c->script_name,
682 	    c->script_name,
683 	    c->script_name,
684 	    c->script_name,
685 	    srv->site_name,
686 	    c->script_name, srv->custom_css,
687 	    srv->logo_url,
688 	    c->script_name, srv->logo,
689 	    qs->index_page, srv->site_link);
690 	if (r == -1)
691 		goto done;
692 
693 	if (qs != NULL) {
694 		if (qs->path != NULL) {
695 			r = fcgi_printf(c, " / "
696 			    "<a href='?index_page=%d&path=%s&action=summary'>"
697 			    "%s</a>",
698 			    qs->index_page, qs->path, qs->path);
699 			if (r == -1)
700 				goto done;
701 		}
702 		if (qs->action != INDEX) {
703 			const char *action = "";
704 
705 			switch (qs->action) {
706 			case BLAME:
707 				action = "blame";
708 				break;
709 			case BRIEFS:
710 				action = "briefs";
711 				break;
712 			case COMMITS:
713 				action = "commits";
714 				break;
715 			case DIFF:
716 				action = "diff";
717 				break;
718 			case SUMMARY:
719 				action = "summary";
720 				break;
721 			case TAG:
722 				action = "tag";
723 				break;
724 			case TAGS:
725 				action = "tags";
726 				break;
727 			case TREE:
728 				action = "tree";
729 				break;
730 			}
731 
732 			if (fcgi_printf(c, " / %s", action) == -1)
733 				goto done;
734 		}
735 	}
736 
737 	fcgi_printf(c, "</div>\n"	/* #site_path */
738 	    "</div>\n"			/* #site_link */
739 	    "<div id='content'>\n");
740 
741 done:
742 	return NULL;
743 }
744 
745 static const struct got_error *
746 gotweb_render_footer(struct request *c)
747 {
748 	const struct got_error *error = NULL;
749 	struct server *srv = c->srv;
750 	const char *siteowner = "&nbsp;";
751 	char *escaped_owner = NULL;
752 
753 	if (srv->show_site_owner) {
754 		error = gotweb_escape_html(&escaped_owner, srv->site_owner);
755 		if (error)
756 			return error;
757 		siteowner = escaped_owner;
758 	}
759 
760 	fcgi_printf(c, "<div id='site_owner_wrapper'>\n"
761 	    "<div id='site_owner'>%s</div>\n"
762 	    "</div>\n"		/* #site_owner_wrapper */
763 	    "</div>\n"		/* #content */
764 	    "</div>\n"		/* #gw_body */
765 	    "</body>\n</html>\n", siteowner);
766 
767 	free(escaped_owner);
768 	return NULL;
769 }
770 
771 static const struct got_error *
772 gotweb_render_navs(struct request *c)
773 {
774 	const struct got_error *error = NULL;
775 	struct transport *t = c->t;
776 	struct querystring *qs = t->qs;
777 	struct server *srv = c->srv;
778 	char *nhref = NULL, *phref = NULL;
779 	int r, disp = 0;
780 
781 	r = fcgi_printf(c, "<div id='np_wrapper'>\n<div id='nav_prev'>\n");
782 	if (r == -1)
783 		goto done;
784 
785 	switch(qs->action) {
786 	case INDEX:
787 		if (qs->index_page > 0) {
788 			if (asprintf(&phref, "index_page=%d",
789 			    qs->index_page - 1) == -1) {
790 				error = got_error_from_errno2("%s: asprintf",
791 				    __func__);
792 				goto done;
793 			}
794 			disp = 1;
795 		}
796 		break;
797 	case BRIEFS:
798 		if (t->prev_id && qs->commit != NULL &&
799 		    strcmp(qs->commit, t->prev_id) != 0) {
800 			if (asprintf(&phref, "index_page=%d&path=%s&page=%d"
801 			    "&action=briefs&commit=%s&headref=%s",
802 			    qs->index_page, qs->path, qs->page - 1, t->prev_id,
803 			    qs->headref) == -1) {
804 				error = got_error_from_errno2("%s: asprintf",
805 				    __func__);
806 				goto done;
807 			}
808 			disp = 1;
809 		}
810 		break;
811 	case COMMITS:
812 		if (t->prev_id && qs->commit != NULL &&
813 		    strcmp(qs->commit, t->prev_id) != 0) {
814 			if (asprintf(&phref, "index_page=%d&path=%s&page=%d"
815 			    "&action=commits&commit=%s&headref=%s&folder=%s"
816 			    "&file=%s",
817 			    qs->index_page, qs->path, qs->page - 1, t->prev_id,
818 			    qs->headref, qs->folder ? qs->folder : "",
819 			    qs->file ? qs->file : "") == -1) {
820 				error = got_error_from_errno2("%s: asprintf",
821 				    __func__);
822 				goto done;
823 			}
824 			disp = 1;
825 		}
826 		break;
827 	case TAGS:
828 		if (t->prev_id && qs->commit != NULL &&
829 		    strcmp(qs->commit, t->prev_id) != 0) {
830 			if (asprintf(&phref, "index_page=%d&path=%s&page=%d"
831 			    "&action=tags&commit=%s&headref=%s",
832 			    qs->index_page, qs->path, qs->page - 1, t->prev_id,
833 			    qs->headref) == -1) {
834 				error = got_error_from_errno2("%s: asprintf",
835 				    __func__);
836 				goto done;
837 			}
838 			disp = 1;
839 		}
840 		break;
841 	default:
842 		disp = 0;
843 		break;
844 	}
845 
846 	if (disp) {
847 		r = fcgi_printf(c, "<a href='?%s'>Previous</a>", phref);
848 		if (r == -1)
849 			goto done;
850 	}
851 
852 	r = fcgi_printf(c, "</div>\n"	/* #nav_prev */
853 	    "<div id='nav_next'>");
854 	if (r == -1)
855 		goto done;
856 
857 	disp = 0;
858 	switch(qs->action) {
859 	case INDEX:
860 		if (t->next_disp == srv->max_repos_display &&
861 		    t->repos_total != (qs->index_page + 1) *
862 		    srv->max_repos_display) {
863 			if (asprintf(&nhref, "index_page=%d",
864 			    qs->index_page + 1) == -1) {
865 				error = got_error_from_errno2("%s: asprintf",
866 				    __func__);
867 				goto done;
868 			}
869 			disp = 1;
870 		}
871 		break;
872 	case BRIEFS:
873 		if (t->next_id) {
874 			if (asprintf(&nhref, "index_page=%d&path=%s&page=%d"
875 			    "&action=briefs&commit=%s&headref=%s",
876 			    qs->index_page, qs->path, qs->page + 1, t->next_id,
877 			    qs->headref) == -1) {
878 				error = got_error_from_errno2("%s: asprintf",
879 				    __func__);
880 				goto done;
881 			}
882 			disp = 1;
883 		}
884 		break;
885 	case COMMITS:
886 		if (t->next_id) {
887 			if (asprintf(&nhref, "index_page=%d&path=%s&page=%d"
888 			    "&action=commits&commit=%s&headref=%s&folder=%s"
889 			    "&file=%s",
890 			    qs->index_page, qs->path, qs->page + 1, t->next_id,
891 			    qs->headref, qs->folder ? qs->folder : "",
892 			    qs->file ? qs->file : "") == -1) {
893 				error = got_error_from_errno2("%s: asprintf",
894 				    __func__);
895 				goto done;
896 			}
897 			disp = 1;
898 		}
899 		break;
900 	case TAGS:
901 		if (t->next_id) {
902 			if (asprintf(&nhref, "index_page=%d&path=%s&page=%d"
903 			    "&action=tags&commit=%s&headref=%s",
904 			    qs->index_page, qs->path, qs->page + 1, t->next_id,
905 			    qs->headref) == -1) {
906 				error = got_error_from_errno2("%s: asprintf",
907 				    __func__);
908 				goto done;
909 			}
910 			disp = 1;
911 		}
912 		break;
913 	default:
914 		disp = 0;
915 		break;
916 	}
917 	if (disp) {
918 		r = fcgi_printf(c, "<a href='?%s'>Next</a>", nhref);
919 		if (r == -1)
920 			goto done;
921 	}
922 	fcgi_printf(c, "</div>\n"); /* #nav_next */
923 	fcgi_printf(c, "</div>\n"); /* #np_wrapper */
924 done:
925 	free(t->next_id);
926 	t->next_id = NULL;
927 	free(t->prev_id);
928 	t->prev_id = NULL;
929 	free(phref);
930 	free(nhref);
931 	return error;
932 }
933 
934 static const struct got_error *
935 gotweb_render_index(struct request *c)
936 {
937 	const struct got_error *error = NULL;
938 	struct server *srv = c->srv;
939 	struct transport *t = c->t;
940 	struct querystring *qs = t->qs;
941 	struct repo_dir *repo_dir = NULL;
942 	DIR *d;
943 	struct dirent **sd_dent;
944 	const char *index_page_str;
945 	char *c_path = NULL;
946 	struct stat st;
947 	unsigned int d_cnt, d_i, d_disp = 0;
948 	int r;
949 
950 	index_page_str = qs->index_page_str ? qs->index_page_str : "";
951 
952 	d = opendir(srv->repos_path);
953 	if (d == NULL) {
954 		error = got_error_from_errno2("opendir", srv->repos_path);
955 		return error;
956 	}
957 
958 	d_cnt = scandir(srv->repos_path, &sd_dent, NULL, alphasort);
959 	if (d_cnt == -1) {
960 		error = got_error_from_errno2("scandir", srv->repos_path);
961 		goto done;
962 	}
963 
964 	/* get total count of repos */
965 	for (d_i = 0; d_i < d_cnt; d_i++) {
966 		if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
967 		    strcmp(sd_dent[d_i]->d_name, "..") == 0)
968 			continue;
969 
970 		if (asprintf(&c_path, "%s/%s", srv->repos_path,
971 		    sd_dent[d_i]->d_name) == -1) {
972 			error = got_error_from_errno("asprintf");
973 			return error;
974 		}
975 
976 		if (lstat(c_path, &st) == 0 && S_ISDIR(st.st_mode) &&
977 		    !got_path_dir_is_empty(c_path))
978 			t->repos_total++;
979 		free(c_path);
980 		c_path = NULL;
981 	}
982 
983 	r = fcgi_printf(c, "<div id='index_header'>\n"
984 	    "<div id='index_header_project'>Project</div>\n");
985 	if (r == -1)
986 		goto done;
987 
988 	if (srv->show_repo_description)
989 		if (fcgi_printf(c, "<div id='index_header_description'>"
990 		    "Description</div>\n") == -1)
991 			goto done;
992 	if (srv->show_repo_owner)
993 		if (fcgi_printf(c, "<div id='index_header_owner'>"
994 		    "Owner</div>\n") == -1)
995 			goto done;
996 	if (srv->show_repo_age)
997 		if (fcgi_printf(c, "<div id='index_header_age'>"
998 		    "Last Change</div>\n") == -1)
999 			goto done;
1000 	if (fcgi_printf(c, "</div>\n") == -1) /* #index_header */
1001 		goto done;
1002 
1003 	for (d_i = 0; d_i < d_cnt; d_i++) {
1004 		if (srv->max_repos > 0 && (d_i - 2) == srv->max_repos)
1005 			break; /* account for parent and self */
1006 
1007 		if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
1008 		    strcmp(sd_dent[d_i]->d_name, "..") == 0)
1009 			continue;
1010 
1011 		if (qs->index_page > 0 && (qs->index_page *
1012 		    srv->max_repos_display) > t->prev_disp) {
1013 			t->prev_disp++;
1014 			continue;
1015 		}
1016 
1017 		error = gotweb_init_repo_dir(&repo_dir, sd_dent[d_i]->d_name);
1018 		if (error)
1019 			goto done;
1020 
1021 		error = gotweb_load_got_path(c, repo_dir);
1022 		if (error && error->code == GOT_ERR_NOT_GIT_REPO) {
1023 			error = NULL;
1024 			continue;
1025 		}
1026 		else if (error && error->code != GOT_ERR_LONELY_PACKIDX)
1027 			goto done;
1028 
1029 		if (lstat(repo_dir->path, &st) == 0 &&
1030 		    S_ISDIR(st.st_mode) &&
1031 		    !got_path_dir_is_empty(repo_dir->path))
1032 			goto render;
1033 		else {
1034 			gotweb_free_repo_dir(repo_dir);
1035 			repo_dir = NULL;
1036 			continue;
1037 		}
1038 render:
1039 		d_disp++;
1040 		t->prev_disp++;
1041 
1042 		r = fcgi_printf(c, "<div class='index_wrapper'>\n"
1043 		    "<div class='index_project'>"
1044 		    "<a href='?index_page=%s&path=%s&action=summary'>"
1045 		    " %s "
1046 		    "</a>"
1047 		    "</div>",	/* .index_project */
1048 		    index_page_str, repo_dir->name,
1049 		    repo_dir->name);
1050 		if (r == -1)
1051 			goto done;
1052 
1053 		if (srv->show_repo_description) {
1054 			r = fcgi_printf(c,
1055 			    "<div class='index_project_description'>\n"
1056 			    "%s</div>\n", repo_dir->description);
1057 			if (r == -1)
1058 				goto done;
1059 		}
1060 
1061 		if (srv->show_repo_owner) {
1062 			r = fcgi_printf(c, "<div class='index_project_owner'>"
1063 			    "%s</div>\n", repo_dir->owner);
1064 			if (r == -1)
1065 				goto done;
1066 		}
1067 
1068 		if (srv->show_repo_age) {
1069 			r = fcgi_printf(c, "<div class='index_project_age'>"
1070 			    "%s</div>\n", repo_dir->age);
1071 			if (r == -1)
1072 				goto done;
1073 		}
1074 
1075 		r = fcgi_printf(c, "<div class='navs_wrapper'>"
1076 		    "<div class='navs'>"
1077 		    "<a href='?index_page=%s&path=%s&action=summary'>"
1078 		    "summary"
1079 		    "</a> | "
1080 		    "<a href='?index_page=%s&path=%s&action=briefs'>"
1081 		    "commit briefs"
1082 		    "</a> | "
1083 		    "<a href='?index_page=%s&path=%s&action=commits'>"
1084 		    "commits"
1085 		    "</a> | "
1086 		    "<a href='?index_page=%s&path=%s&action=tags'>"
1087 		    "tags"
1088 		    "</a> | "
1089 		    "<a href='?index_page=%s&path=%s&action=tree'>"
1090 		    "tree"
1091 		    "</a>"
1092 		    "</div>"	/* .navs */
1093 		    "<div class='dotted_line'></div>\n"
1094 		    "</div>\n"	/* .navs_wrapper */
1095 		    "</div>\n",	/* .index_wrapper */
1096 		    index_page_str, repo_dir->name,
1097 		    index_page_str, repo_dir->name,
1098 		    index_page_str, repo_dir->name,
1099 		    index_page_str, repo_dir->name,
1100 		    index_page_str, repo_dir->name);
1101 		if (r == -1)
1102 			goto done;
1103 
1104 		gotweb_free_repo_dir(repo_dir);
1105 		repo_dir = NULL;
1106 		t->next_disp++;
1107 		if (d_disp == srv->max_repos_display)
1108 			break;
1109 	}
1110 	if (srv->max_repos_display == 0)
1111 		goto done;
1112 	if (srv->max_repos > 0 && srv->max_repos < srv->max_repos_display)
1113 		goto done;
1114 	if (t->repos_total <= srv->max_repos ||
1115 	    t->repos_total <= srv->max_repos_display)
1116 		goto done;
1117 
1118 	error = gotweb_render_navs(c);
1119 	if (error)
1120 		goto done;
1121 done:
1122 	if (d != NULL && closedir(d) == EOF && error == NULL)
1123 		error = got_error_from_errno("closedir");
1124 	return error;
1125 }
1126 
1127 static const struct got_error *
1128 gotweb_render_blame(struct request *c)
1129 {
1130 	const struct got_error *error = NULL;
1131 	struct transport *t = c->t;
1132 	struct repo_commit *rc = NULL;
1133 	char *age = NULL, *msg = NULL;
1134 	int r;
1135 
1136 	error = got_get_repo_commits(c, 1);
1137 	if (error)
1138 		return error;
1139 
1140 	rc = TAILQ_FIRST(&t->repo_commits);
1141 
1142 	error = gotweb_get_time_str(&age, rc->committer_time, TM_LONG);
1143 	if (error)
1144 		goto done;
1145 	error = gotweb_escape_html(&msg, rc->commit_msg);
1146 	if (error)
1147 		goto done;
1148 
1149 	r = fcgi_printf(c, "<div id='blame_title_wrapper'>\n"
1150 	    "<div id='blame_title'>Blame</div>\n"
1151 	    "</div>\n"		/* #blame_title_wrapper */
1152 	    "<div id='blame_content'>\n"
1153 	    "<div id='blame_header_wrapper'>\n"
1154 	    "<div id='blame_header'>\n"
1155 	    "<div class='header_age_title'>Date:</div>\n"
1156 	    "<div class='header_age'>%s</div>\n"
1157 	    "<div id='header_commit_msg_title'>Message:</div>\n"
1158 	    "<div id='header_commit_msg'>%s</div>\n"
1159 	    "</div>\n"		/* #blame_header */
1160 	    "</div>\n"		/* #blame_header_wrapper */
1161 	    "<div class='dotted_line'></div>\n"
1162 	    "<div id='blame'>\n",
1163 	    age,
1164 	    msg);
1165 	if (r == -1)
1166 		goto done;
1167 
1168 	error = got_output_file_blame(c);
1169 	if (error)
1170 		goto done;
1171 
1172 	fcgi_printf(c, "</div>\n"	/* #blame */
1173 	    "</div>\n");		/* #blame_content */
1174 done:
1175 	free(age);
1176 	free(msg);
1177 	return error;
1178 }
1179 
1180 static const struct got_error *
1181 gotweb_render_briefs(struct request *c)
1182 {
1183 	const struct got_error *error = NULL;
1184 	struct repo_commit *rc = NULL;
1185 	struct server *srv = c->srv;
1186 	struct transport *t = c->t;
1187 	struct querystring *qs = t->qs;
1188 	struct repo_dir *repo_dir = t->repo_dir;
1189 	const char *index_page_str;
1190 	char *smallerthan, *newline;
1191 	char *age = NULL, *author = NULL, *msg = NULL;
1192 	int r;
1193 
1194 	index_page_str = qs->index_page_str ? qs->index_page_str : "";
1195 
1196 	r = fcgi_printf(c, "<div id='briefs_title_wrapper'>\n"
1197 	    "<div id='briefs_title'>Commit Briefs</div>\n"
1198 	    "</div>\n"	/* #briefs_title_wrapper */
1199 	    "<div id='briefs_content'>\n");
1200 	if (r == -1)
1201 		goto done;
1202 
1203 	if (qs->action == SUMMARY) {
1204 		qs->action = BRIEFS;
1205 		error = got_get_repo_commits(c, D_MAXSLCOMMDISP);
1206 	} else
1207 		error = got_get_repo_commits(c, srv->max_commits_display);
1208 	if (error)
1209 		goto done;
1210 
1211 	TAILQ_FOREACH(rc, &t->repo_commits, entry) {
1212 		error = gotweb_get_time_str(&age, rc->committer_time, TM_DIFF);
1213 		if (error)
1214 			goto done;
1215 
1216 		smallerthan = strchr(rc->author, '<');
1217 		if (smallerthan)
1218 			*smallerthan = '\0';
1219 
1220 		newline = strchr(rc->commit_msg, '\n');
1221 		if (newline)
1222 			*newline = '\0';
1223 
1224 		error = gotweb_escape_html(&author, rc->author);
1225 		if (error)
1226 			goto done;
1227 		error = gotweb_escape_html(&msg, rc->commit_msg);
1228 		if (error)
1229 			goto done;
1230 
1231 		r = fcgi_printf(c, "<div class='briefs_age'>%s</div>\n"
1232 		    "<div class='briefs_author'>%s</div>\n"
1233 		    "<div class='briefs_log'>"
1234 		    "<a href='?index_page=%s&path=%s&action=diff&commit=%s"
1235 		    "&headref=%s'>%s</a>",
1236 		    age,
1237 		    author,
1238 		    index_page_str, repo_dir->name, rc->commit_id, qs->headref,
1239 		    msg);
1240 		if (r == -1)
1241 			goto done;
1242 
1243 		if (rc->refs_str) {
1244 			char *refs;
1245 
1246 			error = gotweb_escape_html(&refs, rc->refs_str);
1247 			if (error)
1248 				goto done;
1249 			r = fcgi_printf(c,
1250 			    " <span class='refs_str'>(%s)</span>", refs);
1251 			free(refs);
1252 			if (r == -1)
1253 				goto done;
1254 		}
1255 		if (fcgi_printf(c, "</div>\n") == -1) /* .briefs_log */
1256 			goto done;
1257 
1258 		r = fcgi_printf(c, "<div class='navs_wrapper'>\n"
1259 		    "<div class='navs'>"
1260 		    "<a href='?index_page=%s&path=%s&action=diff&commit=%s"
1261 		    "&headref=%s'>diff</a>"
1262 		    " | "
1263 		    "<a href='?index_page=%s&path=%s&action=tree&commit=%s"
1264 		    "&headref=%s'>tree</a>"
1265 		    "</div>\n"	/* .navs */
1266 		    "</div>\n"	/* .navs_wrapper */
1267 		    "<div class='dotted_line'></div>\n",
1268 		    index_page_str, repo_dir->name, rc->commit_id, qs->headref,
1269 		    index_page_str, repo_dir->name, rc->commit_id, qs->headref);
1270 		if (r == -1)
1271 			goto done;
1272 
1273 		free(age);
1274 		age = NULL;
1275 		free(author);
1276 		author = NULL;
1277 		free(msg);
1278 		msg = NULL;
1279 	}
1280 
1281 	if (t->next_id || t->prev_id) {
1282 		error = gotweb_render_navs(c);
1283 		if (error)
1284 			goto done;
1285 	}
1286 	fcgi_printf(c, "</div>\n"); /* #briefs_content */
1287 done:
1288 	free(age);
1289 	free(author);
1290 	free(msg);
1291 	return error;
1292 }
1293 
1294 static const struct got_error *
1295 gotweb_render_commits(struct request *c)
1296 {
1297 	const struct got_error *error = NULL;
1298 	struct repo_commit *rc = NULL;
1299 	struct server *srv = c->srv;
1300 	struct transport *t = c->t;
1301 	struct querystring *qs = t->qs;
1302 	struct repo_dir *repo_dir = t->repo_dir;
1303 	const char *index_page_str;
1304 	char *age = NULL, *author = NULL, *msg = NULL;
1305 	int r;
1306 
1307 	index_page_str = qs->index_page_str ? qs->index_page_str : "";
1308 
1309 	r = fcgi_printf(c, "<div class='commits_title_wrapper'>\n"
1310 	    "<div class='commits_title'>Commits</div>\n"
1311 	    "</div>\n"		/* .commits_title_wrapper */
1312 	    "<div class='commits_content'>\n");
1313 	if (r == -1)
1314 		goto done;
1315 
1316 	error = got_get_repo_commits(c, srv->max_commits_display);
1317 	if (error)
1318 		goto done;
1319 
1320 	TAILQ_FOREACH(rc, &t->repo_commits, entry) {
1321 		error = gotweb_get_time_str(&age, rc->committer_time, TM_LONG);
1322 		if (error)
1323 			goto done;
1324 		error = gotweb_escape_html(&author, rc->author);
1325 		if (error)
1326 			goto done;
1327 		error = gotweb_escape_html(&msg, rc->commit_msg);
1328 		if (error)
1329 			goto done;
1330 
1331 		r = fcgi_printf(c, "<div class='commits_header_wrapper'>\n"
1332 		    "<div class='commits_header'>\n"
1333 		    "<div class='header_commit_title'>Commit:</div>\n"
1334 		    "<div class='header_commit'>%s</div>\n"
1335 		    "<div class='header_author_title'>Author:</div>\n"
1336 		    "<div class='header_author'>%s</div>\n"
1337 		    "<div class='header_age_title'>Date:</div>\n"
1338 		    "<div class='header_age'>%s</div>\n"
1339 		    "</div>\n"	/* .commits_header */
1340 		    "</div>\n"	/* .commits_header_wrapper */
1341 		    "<div class='dotted_line'></div>\n"
1342 		    "<div class='commit'>\n%s</div>\n",
1343 		    rc->commit_id,
1344 		    author,
1345 		    age,
1346 		    msg);
1347 		if (r == -1)
1348 			goto done;
1349 
1350 		r = fcgi_printf(c, "<div class='navs_wrapper'>\n"
1351 		    "<div class='navs'>"
1352 		    "<a href='?index_page=%s&path=%s&action=diff&commit=%s'>"
1353 		    "diff</a>"
1354 		    " | "
1355 		    "<a href='?index_page=%s&path=%s&action=tree&commit=%s'>"
1356 		    "tree</a>"
1357 		    "</div>\n"	/* .navs */
1358 		    "</div>\n"	/* .navs_wrapper */
1359 		    "<div class='dotted_line'></div>\n",
1360 		    index_page_str, repo_dir->name, rc->commit_id,
1361 		    index_page_str, repo_dir->name, rc->commit_id);
1362 		if (r == -1)
1363 			goto done;
1364 
1365 		free(age);
1366 		age = NULL;
1367 		free(author);
1368 		author = NULL;
1369 		free(msg);
1370 		msg = NULL;
1371 	}
1372 
1373 	if (t->next_id || t->prev_id) {
1374 		error = gotweb_render_navs(c);
1375 		if (error)
1376 			goto done;
1377 	}
1378 	fcgi_printf(c, "</div>\n"); /* .commits_content */
1379 done:
1380 	free(age);
1381 	free(author);
1382 	free(msg);
1383 	return error;
1384 }
1385 
1386 static const struct got_error *
1387 gotweb_render_branches(struct request *c)
1388 {
1389 	const struct got_error *error = NULL;
1390 	struct got_reflist_head refs;
1391 	struct got_reflist_entry *re;
1392 	struct transport *t = c->t;
1393 	struct querystring *qs = t->qs;
1394 	struct got_repository *repo = t->repo;
1395 	const char *index_page_str;
1396 	char *age = NULL;
1397 	int r;
1398 
1399 	index_page_str = qs->index_page_str ? qs->index_page_str : "";
1400 
1401 	TAILQ_INIT(&refs);
1402 
1403 	error = got_ref_list(&refs, repo, "refs/heads",
1404 	    got_ref_cmp_by_name, NULL);
1405 	if (error)
1406 		goto done;
1407 
1408 	r = fcgi_printf(c, "<div id='branches_title_wrapper'>\n"
1409 	    "<div id='branches_title'>Branches</div>\n"
1410 	    "</div>\n"	/* #branches_title_wrapper */
1411 	    "<div id='branches_content'>\n");
1412 	if (r == -1)
1413 		goto done;
1414 
1415 	TAILQ_FOREACH(re, &refs, entry) {
1416 		const char *refname = NULL;
1417 		char *escaped_refname = NULL;
1418 
1419 		if (got_ref_is_symbolic(re->ref))
1420 			continue;
1421 
1422 		refname = got_ref_get_name(re->ref);
1423 		if (refname == NULL) {
1424 			error = got_error_from_errno("strdup");
1425 			goto done;
1426 		}
1427 		if (strncmp(refname, "refs/heads/", 11) != 0)
1428 			continue;
1429 
1430 		error = got_get_repo_age(&age, c, qs->path, refname,
1431 		    TM_DIFF);
1432 		if (error)
1433 			goto done;
1434 
1435 		if (strncmp(refname, "refs/heads/", 11) == 0)
1436 			refname += 11;
1437 		error = gotweb_escape_html(&escaped_refname, refname);
1438 		if (error)
1439 			goto done;
1440 
1441 		r = fcgi_printf(c, "<div class='branches_wrapper'>\n"
1442 		    "<div class='branches_age'>%s</div>\n"
1443 		    "<div class='branches_space'>&nbsp;</div>\n"
1444 		    "<div class='branch'>"
1445 		    "<a href='?index_page=%s&path=%s&action=summary&headref=%s'>"
1446 		    "%s</a>"
1447 		    "</div>\n"	/* .branch */
1448 		    "<div class='navs_wrapper'>\n"
1449 		    "<div class='navs'>"
1450 		    "<a href='?index_page=%s&path=%s&action=summary&headref=%s'>"
1451 		    "summary</a>"
1452 		    " | "
1453 		    "<a href='?index_page=%s&path=%s&action=briefs&headref=%s'>"
1454 		    "commit briefs</a>"
1455 		    " | "
1456 		    "<a href='?index_page=%s&path=%s&action=commits&headref=%s'>"
1457 		    "commits</a>"
1458 		    "</div>\n"	/* .navs */
1459 		    "</div>\n"	/* .navs_wrapper */
1460 		    "<div class='dotted_line'></div>\n"
1461 		    "</div>\n",	/* .branches_wrapper */
1462 		    age ? age : "",
1463 		    index_page_str, qs->path, refname,
1464 		    escaped_refname,
1465 		    index_page_str, qs->path, refname,
1466 		    index_page_str, qs->path, refname,
1467 		    index_page_str, qs->path, refname);
1468 		free(escaped_refname);
1469 		if (r == -1)
1470 			goto done;
1471 
1472 		free(age);
1473 		age = NULL;
1474 
1475 	}
1476 	fcgi_printf(c, "</div>\n"); /* #branches_content */
1477 done:
1478 	return error;
1479 }
1480 
1481 static const struct got_error *
1482 gotweb_render_tree(struct request *c)
1483 {
1484 	const struct got_error *error = NULL;
1485 	struct transport *t = c->t;
1486 	struct repo_commit *rc = NULL;
1487 	char *age = NULL, *msg = NULL;
1488 	int r;
1489 
1490 	error = got_get_repo_commits(c, 1);
1491 	if (error)
1492 		return error;
1493 
1494 	rc = TAILQ_FIRST(&t->repo_commits);
1495 
1496 	error = gotweb_get_time_str(&age, rc->committer_time, TM_LONG);
1497 	if (error)
1498 		goto done;
1499 
1500 	error = gotweb_escape_html(&msg, rc->commit_msg);
1501 	if (error)
1502 		goto done;
1503 
1504 	r = fcgi_printf(c, "<div id='tree_title_wrapper'>\n"
1505 	    "<div id='tree_title'>Tree</div>\n"
1506 	    "</div>\n"		/* #tree_title_wrapper */
1507 	    "<div id='tree_content'>\n"
1508 	    "<div id='tree_header_wrapper'>\n"
1509 	    "<div id='tree_header'>\n"
1510 	    "<div id='header_tree_title'>Tree:</div>\n"
1511 	    "<div id='header_tree'>%s</div>\n"
1512 	    "<div class='header_age_title'>Date:</div>\n"
1513 	    "<div class='header_age'>%s</div>\n"
1514 	    "<div id='header_commit_msg_title'>Message:</div>\n"
1515 	    "<div id='header_commit_msg'>%s</div>\n"
1516 	    "</div>\n"		/* #tree_header */
1517 	    "</div>\n"		/* #tree_header_wrapper */
1518 	    "<div class='dotted_line'></div>\n"
1519 	    "<div id='tree'>\n",
1520 	    rc->tree_id,
1521 	    age,
1522 	    msg);
1523 	if (r == -1)
1524 		goto done;
1525 
1526 	error = got_output_repo_tree(c);
1527 	if (error)
1528 		goto done;
1529 
1530 	fcgi_printf(c, "</div>\n"); /* #tree */
1531 	fcgi_printf(c, "</div>\n"); /* #tree_content */
1532 done:
1533 	free(age);
1534 	free(msg);
1535 	return error;
1536 }
1537 
1538 static const struct got_error *
1539 gotweb_render_diff(struct request *c)
1540 {
1541 	const struct got_error *error = NULL;
1542 	struct transport *t = c->t;
1543 	struct repo_commit *rc = NULL;
1544 	char *age = NULL, *author = NULL, *msg = NULL;
1545 	int r;
1546 
1547 	error = got_get_repo_commits(c, 1);
1548 	if (error)
1549 		return error;
1550 
1551 	rc = TAILQ_FIRST(&t->repo_commits);
1552 
1553 	error = gotweb_get_time_str(&age, rc->committer_time, TM_LONG);
1554 	if (error)
1555 		goto done;
1556 	error = gotweb_escape_html(&author, rc->author);
1557 	if (error)
1558 		goto done;
1559 	error = gotweb_escape_html(&msg, rc->commit_msg);
1560 	if (error)
1561 		goto done;
1562 
1563 	r = fcgi_printf(c, "<div id='diff_title_wrapper'>\n"
1564 	    "<div id='diff_title'>Commit Diff</div>\n"
1565 	    "</div>\n"		/* #diff_title_wrapper */
1566 	    "<div id='diff_content'>\n"
1567 	    "<div id='diff_header_wrapper'>\n"
1568 	    "<div id='diff_header'>\n"
1569 	    "<div id='header_diff_title'>Diff:</div>\n"
1570 	    "<div id='header_diff'>%s<br />%s</div>\n"
1571 	    "<div class='header_commit_title'>Commit:</div>\n"
1572 	    "<div class='header_commit'>%s</div>\n"
1573 	    "<div id='header_tree_title'>Tree:</div>\n"
1574 	    "<div id='header_tree'>%s</div>\n"
1575 	    "<div class='header_author_title'>Author:</div>\n"
1576 	    "<div class='header_author'>%s</div>\n"
1577 	    "<div class='header_age_title'>Date:</div>\n"
1578 	    "<div class='header_age'>%s</div>\n"
1579 	    "<div id='header_commit_msg_title'>Message:</div>\n"
1580 	    "<div id='header_commit_msg'>%s</div>\n"
1581 	    "</div>\n"		/* #diff_header */
1582 	    "</div>\n"		/* #diff_header_wrapper */
1583 	    "<div class='dotted_line'></div>\n"
1584 	    "<div id='diff'>\n",
1585 	    rc->parent_id, rc->commit_id,
1586 	    rc->commit_id,
1587 	    rc->tree_id,
1588 	    author,
1589 	    age,
1590 	    msg);
1591 	if (r == -1)
1592 		goto done;
1593 
1594 	error = got_output_repo_diff(c);
1595 	if (error)
1596 		goto done;
1597 
1598 	fcgi_printf(c, "</div>\n"); /* #diff */
1599 	fcgi_printf(c, "</div>\n"); /* #diff_content */
1600 done:
1601 	free(age);
1602 	free(author);
1603 	free(msg);
1604 	return error;
1605 }
1606 
1607 static const struct got_error *
1608 gotweb_render_summary(struct request *c)
1609 {
1610 	const struct got_error *error = NULL;
1611 	struct transport *t = c->t;
1612 	struct server *srv = c->srv;
1613 	int r;
1614 
1615 	if (fcgi_printf(c, "<div id='summary_wrapper'>\n") == -1)
1616 		goto done;
1617 
1618 	if (srv->show_repo_description) {
1619 		r = fcgi_printf(c,
1620 		    "<div id='description_title'>Description:</div>\n"
1621 		    "<div id='description'>%s</div>\n",
1622 		    t->repo_dir->description ? t->repo_dir->description : "");
1623 		if (r == -1)
1624 			goto done;
1625 	}
1626 
1627 	if (srv->show_repo_owner) {
1628 		r = fcgi_printf(c,
1629 		    "<div id='repo_owner_title'>Owner:</div>\n"
1630 		    "<div id='repo_owner'>%s</div>\n",
1631 		    t->repo_dir->owner ? t->repo_dir->owner : "");
1632 		if (r == -1)
1633 			goto done;
1634 	}
1635 
1636 	if (srv->show_repo_age) {
1637 		r = fcgi_printf(c,
1638 		    "<div id='last_change_title'>Last Change:</div>\n"
1639 		    "<div id='last_change'>%s</div>\n",
1640 		    t->repo_dir->age);
1641 		if (r == -1)
1642 			goto done;
1643 	}
1644 
1645 	if (srv->show_repo_cloneurl) {
1646 		r = fcgi_printf(c,
1647 		    "<div id='cloneurl_title'>Clone URL:</div>\n"
1648 		    "<div id='cloneurl'>%s</div>\n",
1649 		    t->repo_dir->url ? t->repo_dir->url : "");
1650 		if (r == -1)
1651 			goto done;
1652 	}
1653 
1654 	r = fcgi_printf(c, "</div>\n"); /* #summary_wrapper */
1655 	if (r == -1)
1656 		goto done;
1657 
1658 	error = gotweb_render_briefs(c);
1659 	if (error) {
1660 		log_warnx("%s: %s", __func__, error->msg);
1661 		goto done;
1662 	}
1663 
1664 	error = gotweb_render_tags(c);
1665 	if (error) {
1666 		log_warnx("%s: %s", __func__, error->msg);
1667 		goto done;
1668 	}
1669 
1670 	error = gotweb_render_branches(c);
1671 	if (error)
1672 		log_warnx("%s: %s", __func__, error->msg);
1673 done:
1674 	return error;
1675 }
1676 
1677 static const struct got_error *
1678 gotweb_render_tag(struct request *c)
1679 {
1680 	const struct got_error *error = NULL;
1681 	struct repo_tag *rt = NULL;
1682 	struct transport *t = c->t;
1683 	char *tagname = NULL, *age = NULL, *author = NULL, *msg = NULL;
1684 
1685 	error = got_get_repo_tags(c, 1);
1686 	if (error)
1687 		goto done;
1688 
1689 	if (t->tag_count == 0) {
1690 		error = got_error_set_errno(GOT_ERR_BAD_OBJ_ID,
1691 		    "bad commit id");
1692 		goto done;
1693 	}
1694 
1695 	rt = TAILQ_LAST(&t->repo_tags, repo_tags_head);
1696 
1697 	error = gotweb_get_time_str(&age, rt->tagger_time, TM_LONG);
1698 	if (error)
1699 		goto done;
1700 	error = gotweb_escape_html(&author, rt->tagger);
1701 	if (error)
1702 		goto done;
1703 	error = gotweb_escape_html(&msg, rt->commit_msg);
1704 	if (error)
1705 		goto done;
1706 
1707 	tagname = rt->tag_name;
1708 	if (strncmp(tagname, "refs/", 5) == 0)
1709 		tagname += 5;
1710 	error = gotweb_escape_html(&tagname, tagname);
1711 	if (error)
1712 		goto done;
1713 
1714 	fcgi_printf(c, "<div id='tags_title_wrapper'>\n"
1715 	    "<div id='tags_title'>Tag</div>\n"
1716 	    "</div>\n"		/* #tags_title_wrapper */
1717 	    "<div id='tags_content'>\n"
1718 	    "<div id='tag_header_wrapper'>\n"
1719 	    "<div id='tag_header'>\n"
1720 	    "<div class='header_commit_title'>Commit:</div>\n"
1721 	    "<div class='header_commit'>%s"
1722 	    " <span class='refs_str'>(%s)</span></div>\n"
1723 	    "<div class='header_author_title'>Tagger:</div>\n"
1724 	    "<div class='header_author'>%s</div>\n"
1725 	    "<div class='header_age_title'>Date:</div>\n"
1726 	    "<div class='header_age'>%s</div>\n"
1727 	    "<div id='header_commit_msg_title'>Message:</div>\n"
1728 	    "<div id='header_commit_msg'>%s</div>\n"
1729 	    "</div>\n"		/* #tag_header */
1730 	    "<div class='dotted_line'></div>\n"
1731 	    "<div id='tag_commit'>\n%s</div>"
1732 	    "</div>",		/* tag_header_wrapper */
1733 	    rt->commit_id,
1734 	    tagname,
1735 	    author,
1736 	    age,
1737 	    msg,
1738 	    rt->tag_commit);
1739 
1740 done:
1741 	free(age);
1742 	free(author);
1743 	free(msg);
1744 	return error;
1745 }
1746 
1747 static const struct got_error *
1748 gotweb_render_tags(struct request *c)
1749 {
1750 	const struct got_error *error = NULL;
1751 	struct repo_tag *rt = NULL;
1752 	struct server *srv = c->srv;
1753 	struct transport *t = c->t;
1754 	struct querystring *qs = t->qs;
1755 	struct repo_dir *repo_dir = t->repo_dir;
1756 	const char *index_page_str;
1757 	char *age = NULL, *tagname = NULL, *msg = NULL, *newline;
1758 	int r, commit_found = 0;
1759 
1760 	index_page_str = qs->index_page_str ? qs->index_page_str : "";
1761 
1762 	if (qs->action == BRIEFS) {
1763 		qs->action = TAGS;
1764 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
1765 	} else
1766 		error = got_get_repo_tags(c, srv->max_commits_display);
1767 	if (error)
1768 		goto done;
1769 
1770 	r = fcgi_printf(c, "<div id='tags_title_wrapper'>\n"
1771 	    "<div id='tags_title'>Tags</div>\n"
1772 	    "</div>\n"		/* #tags_title_wrapper */
1773 	    "<div id='tags_content'>\n");
1774 	if (r == -1)
1775 		goto done;
1776 
1777 	if (t->tag_count == 0) {
1778 		r = fcgi_printf(c, "<div id='err_content'>%s\n</div>\n",
1779 		    "This repository contains no tags");
1780 		if (r == -1)
1781 			goto done;
1782 	}
1783 
1784 	TAILQ_FOREACH(rt, &t->repo_tags, entry) {
1785 		if (commit_found == 0 && qs->commit != NULL) {
1786 			if (strcmp(qs->commit, rt->commit_id) != 0)
1787 				continue;
1788 			else
1789 				commit_found = 1;
1790 		}
1791 		error = gotweb_get_time_str(&age, rt->tagger_time, TM_DIFF);
1792 		if (error)
1793 			goto done;
1794 
1795 		tagname = rt->tag_name;
1796 		if (strncmp(tagname, "refs/tags/", 10) == 0)
1797 			tagname += 10;
1798 		error = gotweb_escape_html(&tagname, tagname);
1799 		if (error)
1800 			goto done;
1801 
1802 		if (rt->tag_commit != NULL) {
1803 			newline = strchr(rt->tag_commit, '\n');
1804 			if (newline)
1805 				*newline = '\0';
1806 			error = gotweb_escape_html(&msg, rt->tag_commit);
1807 			if (error)
1808 				goto done;
1809 		}
1810 
1811 		r = fcgi_printf(c, "<div class='tag_age'>%s</div>\n"
1812 		    "<div class='tag'>%s</div>\n"
1813 		    "<div class='tag_log'>"
1814 		    "<a href='?index_page=%s&path=%s&action=tag&commit=%s'>"
1815 		    "%s</a>"
1816 		    "</div>\n"	/* .tag_log */
1817 		    "<div class='navs_wrapper'>\n"
1818 		    "<div class='navs'>"
1819 		    "<a href='?index_page=%s&path=%s&action=tag&commit=%s'>"
1820 		    "tag</a>"
1821 		    " | "
1822 		    "<a href='?index_page=%s&path=%s&action=briefs&commit=%s'>"
1823 		    "commit briefs</a>"
1824 		    " | "
1825 		    "<a href='?index_page=%s&path=%s&action=commits&commit=%s'>"
1826 		    "commits</a>"
1827 		    "</div>\n"	/* .navs */
1828 		    "</div>\n"	/* .navs_wrapper */
1829 		    "<div class='dotted_line'></div>\n",
1830 		    age,
1831 		    tagname,
1832 		    index_page_str, repo_dir->name, rt->commit_id,
1833 		    msg ? msg : "",
1834 		    index_page_str, repo_dir->name, rt->commit_id,
1835 		    index_page_str, repo_dir->name, rt->commit_id,
1836 		    index_page_str, repo_dir->name, rt->commit_id);
1837 		if (r == -1)
1838 			goto done;
1839 
1840 		free(age);
1841 		age = NULL;
1842 		free(tagname);
1843 		tagname = NULL;
1844 		free(msg);
1845 		msg = NULL;
1846 	}
1847 	if (t->next_id || t->prev_id) {
1848 		error = gotweb_render_navs(c);
1849 		if (error)
1850 			goto done;
1851 	}
1852 	fcgi_printf(c, "</div>\n"); /* #tags_content */
1853 done:
1854 	free(age);
1855 	free(tagname);
1856 	free(msg);
1857 	return error;
1858 }
1859 
1860 const struct got_error *
1861 gotweb_escape_html(char **escaped_html, const char *orig_html)
1862 {
1863 	const struct got_error *error = NULL;
1864 	struct escape_pair {
1865 		char c;
1866 		const char *s;
1867 	} esc[] = {
1868 		{ '>', "&gt;" },
1869 		{ '<', "&lt;" },
1870 		{ '&', "&amp;" },
1871 		{ '"', "&quot;" },
1872 		{ '\'', "&apos;" },
1873 		{ '\n', "<br />" },
1874 	};
1875 	size_t orig_len, len;
1876 	int i, j, x;
1877 
1878 	orig_len = strlen(orig_html);
1879 	len = orig_len;
1880 	for (i = 0; i < orig_len; i++) {
1881 		for (j = 0; j < nitems(esc); j++) {
1882 			if (orig_html[i] != esc[j].c)
1883 				continue;
1884 			len += strlen(esc[j].s) - 1 /* escaped char */;
1885 		}
1886 	}
1887 
1888 	*escaped_html = calloc(len + 1 /* NUL */, sizeof(**escaped_html));
1889 	if (*escaped_html == NULL)
1890 		return got_error_from_errno("calloc");
1891 
1892 	x = 0;
1893 	for (i = 0; i < orig_len; i++) {
1894 		int escaped = 0;
1895 		for (j = 0; j < nitems(esc); j++) {
1896 			if (orig_html[i] != esc[j].c)
1897 				continue;
1898 
1899 			if (strlcat(*escaped_html, esc[j].s, len + 1)
1900 			    >= len + 1) {
1901 				error = got_error(GOT_ERR_NO_SPACE);
1902 				goto done;
1903 			}
1904 			x += strlen(esc[j].s);
1905 			escaped = 1;
1906 			break;
1907 		}
1908 		if (!escaped) {
1909 			(*escaped_html)[x] = orig_html[i];
1910 			x++;
1911 		}
1912 	}
1913 done:
1914 	if (error) {
1915 		free(*escaped_html);
1916 		*escaped_html = NULL;
1917 	} else {
1918 		(*escaped_html)[x] = '\0';
1919 	}
1920 
1921 	return error;
1922 }
1923 
1924 static struct got_repository *
1925 find_cached_repo(struct server *srv, const char *path)
1926 {
1927 	int i;
1928 
1929 	for (i = 0; i < srv->ncached_repos; i++) {
1930 		if (strcmp(srv->cached_repos[i].path, path) == 0)
1931 			return srv->cached_repos[i].repo;
1932 	}
1933 
1934 	return NULL;
1935 }
1936 
1937 static const struct got_error *
1938 cache_repo(struct got_repository **new, struct server *srv,
1939     struct repo_dir *repo_dir, struct socket *sock)
1940 {
1941 	const struct got_error *error = NULL;
1942 	struct got_repository *repo;
1943 	struct cached_repo *cr;
1944 	int evicted = 0;
1945 
1946 	if (srv->ncached_repos >= nitems(srv->cached_repos)) {
1947 		cr = &srv->cached_repos[srv->ncached_repos - 1];
1948 		error = got_repo_close(cr->repo);
1949 		memset(cr, 0, sizeof(*cr));
1950 		srv->ncached_repos--;
1951 		if (error)
1952 			return error;
1953 		memmove(&srv->cached_repos[1], &srv->cached_repos[0],
1954 		    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1955 		cr = &srv->cached_repos[0];
1956 		evicted = 1;
1957 	} else {
1958 		cr = &srv->cached_repos[srv->ncached_repos];
1959 	}
1960 
1961 	error = got_repo_open(&repo, repo_dir->path, NULL, sock->pack_fds);
1962 	if (error) {
1963 		if (evicted) {
1964 			memmove(&srv->cached_repos[0], &srv->cached_repos[1],
1965 			    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1966 		}
1967 		return error;
1968 	}
1969 
1970 	if (strlcpy(cr->path, repo_dir->path, sizeof(cr->path))
1971 	    >= sizeof(cr->path)) {
1972 		if (evicted) {
1973 			memmove(&srv->cached_repos[0], &srv->cached_repos[1],
1974 			    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1975 		}
1976 		return got_error(GOT_ERR_NO_SPACE);
1977 	}
1978 
1979 	cr->repo = repo;
1980 	srv->ncached_repos++;
1981 	*new = repo;
1982 	return NULL;
1983 }
1984 
1985 static const struct got_error *
1986 gotweb_load_got_path(struct request *c, struct repo_dir *repo_dir)
1987 {
1988 	const struct got_error *error = NULL;
1989 	struct socket *sock = c->sock;
1990 	struct server *srv = c->srv;
1991 	struct transport *t = c->t;
1992 	struct got_repository *repo = NULL;
1993 	DIR *dt;
1994 	char *dir_test;
1995 
1996 	if (asprintf(&dir_test, "%s/%s/%s", srv->repos_path, repo_dir->name,
1997 	    GOTWEB_GIT_DIR) == -1)
1998 		return got_error_from_errno("asprintf");
1999 
2000 	dt = opendir(dir_test);
2001 	if (dt == NULL) {
2002 		free(dir_test);
2003 	} else {
2004 		repo_dir->path = dir_test;
2005 		dir_test = NULL;
2006 		goto done;
2007 	}
2008 
2009 	if (asprintf(&dir_test, "%s/%s", srv->repos_path,
2010 	    repo_dir->name) == -1)
2011 		return got_error_from_errno("asprintf");
2012 
2013 	dt = opendir(dir_test);
2014 	if (dt == NULL) {
2015 		error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
2016 		goto err;
2017 	} else {
2018 		repo_dir->path = dir_test;
2019 		dir_test = NULL;
2020 	}
2021 
2022 done:
2023 	repo = find_cached_repo(srv, repo_dir->path);
2024 	if (repo == NULL) {
2025 		error = cache_repo(&repo, srv, repo_dir, sock);
2026 		if (error)
2027 			goto err;
2028 	}
2029 	t->repo = repo;
2030 	error = gotweb_get_repo_description(&repo_dir->description, srv,
2031 	    repo_dir->path);
2032 	if (error)
2033 		goto err;
2034 	error = got_get_repo_owner(&repo_dir->owner, c, repo_dir->path);
2035 	if (error)
2036 		goto err;
2037 	error = got_get_repo_age(&repo_dir->age, c, repo_dir->path,
2038 	    NULL, TM_DIFF);
2039 	if (error)
2040 		goto err;
2041 	error = gotweb_get_clone_url(&repo_dir->url, srv, repo_dir->path);
2042 err:
2043 	free(dir_test);
2044 	if (dt != NULL && closedir(dt) == EOF && error == NULL)
2045 		error = got_error_from_errno("closedir");
2046 	return error;
2047 }
2048 
2049 static const struct got_error *
2050 gotweb_init_repo_dir(struct repo_dir **repo_dir, const char *dir)
2051 {
2052 	const struct got_error *error;
2053 
2054 	*repo_dir = calloc(1, sizeof(**repo_dir));
2055 	if (*repo_dir == NULL)
2056 		return got_error_from_errno("calloc");
2057 
2058 	if (asprintf(&(*repo_dir)->name, "%s", dir) == -1) {
2059 		error = got_error_from_errno("asprintf");
2060 		free(*repo_dir);
2061 		*repo_dir = NULL;
2062 		return error;
2063 	}
2064 	(*repo_dir)->owner = NULL;
2065 	(*repo_dir)->description = NULL;
2066 	(*repo_dir)->url = NULL;
2067 	(*repo_dir)->age = NULL;
2068 	(*repo_dir)->path = NULL;
2069 
2070 	return NULL;
2071 }
2072 
2073 static const struct got_error *
2074 gotweb_get_repo_description(char **description, struct server *srv, char *dir)
2075 {
2076 	const struct got_error *error = NULL;
2077 	FILE *f = NULL;
2078 	char *d_file = NULL;
2079 	unsigned int len;
2080 	size_t n;
2081 
2082 	*description = NULL;
2083 	if (srv->show_repo_description == 0)
2084 		return NULL;
2085 
2086 	if (asprintf(&d_file, "%s/description", dir) == -1)
2087 		return got_error_from_errno("asprintf");
2088 
2089 	f = fopen(d_file, "r");
2090 	if (f == NULL) {
2091 		if (errno != ENOENT && errno != EACCES)
2092 			error = got_error_from_errno2("fopen", d_file);
2093 		goto done;
2094 	}
2095 
2096 	if (fseek(f, 0, SEEK_END) == -1) {
2097 		error = got_ferror(f, GOT_ERR_IO);
2098 		goto done;
2099 	}
2100 	len = ftell(f);
2101 	if (len == -1) {
2102 		error = got_ferror(f, GOT_ERR_IO);
2103 		goto done;
2104 	}
2105 
2106 	if (len == 0) {
2107 		*description = strdup("");
2108 		if (*description == NULL)
2109 			error = got_error_from_errno("strdup");
2110 		goto done;
2111 	}
2112 
2113 	if (fseek(f, 0, SEEK_SET) == -1) {
2114 		error = got_ferror(f, GOT_ERR_IO);
2115 		goto done;
2116 	}
2117 	*description = calloc(len + 1, sizeof(**description));
2118 	if (*description == NULL) {
2119 		error = got_error_from_errno("calloc");
2120 		goto done;
2121 	}
2122 
2123 	n = fread(*description, 1, len, f);
2124 	if (n == 0 && ferror(f))
2125 		error = got_ferror(f, GOT_ERR_IO);
2126 done:
2127 	if (f != NULL && fclose(f) == EOF && error == NULL)
2128 		error = got_error_from_errno("fclose");
2129 	free(d_file);
2130 	return error;
2131 }
2132 
2133 static const struct got_error *
2134 gotweb_get_clone_url(char **url, struct server *srv, char *dir)
2135 {
2136 	const struct got_error *error = NULL;
2137 	FILE *f;
2138 	char *d_file = NULL;
2139 	unsigned int len;
2140 	size_t n;
2141 
2142 	*url = NULL;
2143 
2144 	if (srv->show_repo_cloneurl == 0)
2145 		return NULL;
2146 
2147 	if (asprintf(&d_file, "%s/cloneurl", dir) == -1)
2148 		return got_error_from_errno("asprintf");
2149 
2150 	f = fopen(d_file, "r");
2151 	if (f == NULL) {
2152 		if (errno != ENOENT && errno != EACCES)
2153 			error = got_error_from_errno2("fopen", d_file);
2154 		goto done;
2155 	}
2156 
2157 	if (fseek(f, 0, SEEK_END) == -1) {
2158 		error = got_ferror(f, GOT_ERR_IO);
2159 		goto done;
2160 	}
2161 	len = ftell(f);
2162 	if (len == -1) {
2163 		error = got_ferror(f, GOT_ERR_IO);
2164 		goto done;
2165 	}
2166 	if (len == 0)
2167 		goto done;
2168 
2169 	if (fseek(f, 0, SEEK_SET) == -1) {
2170 		error = got_ferror(f, GOT_ERR_IO);
2171 		goto done;
2172 	}
2173 
2174 	*url = calloc(len + 1, sizeof(**url));
2175 	if (*url == NULL) {
2176 		error = got_error_from_errno("calloc");
2177 		goto done;
2178 	}
2179 
2180 	n = fread(*url, 1, len, f);
2181 	if (n == 0 && ferror(f))
2182 		error = got_ferror(f, GOT_ERR_IO);
2183 done:
2184 	if (f != NULL && fclose(f) == EOF && error == NULL)
2185 		error = got_error_from_errno("fclose");
2186 	free(d_file);
2187 	return error;
2188 }
2189 
2190 const struct got_error *
2191 gotweb_get_time_str(char **repo_age, time_t committer_time, int ref_tm)
2192 {
2193 	struct tm tm;
2194 	long long diff_time;
2195 	const char *years = "years ago", *months = "months ago";
2196 	const char *weeks = "weeks ago", *days = "days ago";
2197 	const char *hours = "hours ago",  *minutes = "minutes ago";
2198 	const char *seconds = "seconds ago", *now = "right now";
2199 	char *s;
2200 	char datebuf[29];
2201 
2202 	*repo_age = NULL;
2203 
2204 	switch (ref_tm) {
2205 	case TM_DIFF:
2206 		diff_time = time(NULL) - committer_time;
2207 		if (diff_time > 60 * 60 * 24 * 365 * 2) {
2208 			if (asprintf(repo_age, "%lld %s",
2209 			    (diff_time / 60 / 60 / 24 / 365), years) == -1)
2210 				return got_error_from_errno("asprintf");
2211 		} else if (diff_time > 60 * 60 * 24 * (365 / 12) * 2) {
2212 			if (asprintf(repo_age, "%lld %s",
2213 			    (diff_time / 60 / 60 / 24 / (365 / 12)),
2214 			    months) == -1)
2215 				return got_error_from_errno("asprintf");
2216 		} else if (diff_time > 60 * 60 * 24 * 7 * 2) {
2217 			if (asprintf(repo_age, "%lld %s",
2218 			    (diff_time / 60 / 60 / 24 / 7), weeks) == -1)
2219 				return got_error_from_errno("asprintf");
2220 		} else if (diff_time > 60 * 60 * 24 * 2) {
2221 			if (asprintf(repo_age, "%lld %s",
2222 			    (diff_time / 60 / 60 / 24), days) == -1)
2223 				return got_error_from_errno("asprintf");
2224 		} else if (diff_time > 60 * 60 * 2) {
2225 			if (asprintf(repo_age, "%lld %s",
2226 			    (diff_time / 60 / 60), hours) == -1)
2227 				return got_error_from_errno("asprintf");
2228 		} else if (diff_time > 60 * 2) {
2229 			if (asprintf(repo_age, "%lld %s", (diff_time / 60),
2230 			    minutes) == -1)
2231 				return got_error_from_errno("asprintf");
2232 		} else if (diff_time > 2) {
2233 			if (asprintf(repo_age, "%lld %s", diff_time,
2234 			    seconds) == -1)
2235 				return got_error_from_errno("asprintf");
2236 		} else {
2237 			if (asprintf(repo_age, "%s", now) == -1)
2238 				return got_error_from_errno("asprintf");
2239 		}
2240 		break;
2241 	case TM_LONG:
2242 		if (gmtime_r(&committer_time, &tm) == NULL)
2243 			return got_error_from_errno("gmtime_r");
2244 
2245 		s = asctime_r(&tm, datebuf);
2246 		if (s == NULL)
2247 			return got_error_from_errno("asctime_r");
2248 
2249 		if (asprintf(repo_age, "%s UTC", datebuf) == -1)
2250 			return got_error_from_errno("asprintf");
2251 		break;
2252 	}
2253 	return NULL;
2254 }