debianqueued 65.5 KB
Newer Older
1 2 3 4 5 6
#!/usr/bin/perl -w
#
# debianqueued -- daemon for managing Debian upload queues
#
# Copyright (C) 1997 Roman Hodek <Roman.Hodek@informatik.uni-erlangen.de>
# Copyright (C) 2001-2007 Ryan Murray <rmurray@debian.org>
7
# Copyright (C) 2008 Thomas Viehmann <tv@beamnet.de>
8 9 10 11 12 13 14 15 16 17 18
#
# This program is free software.  You can redistribute it and/or
# modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation: either version 2 or
# (at your option) any later version.
# This program comes with ABSOLUTELY NO WARRANTY!
#

require 5.002;
use strict;
use POSIX;
S
Stephen Gran 已提交
19
use POSIX qw( strftime sys_stat_h sys_wait_h signal_h );
20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45
use Net::Ping;
use Net::FTP;
use Socket qw( PF_INET AF_INET SOCK_STREAM );
use Config;

# ---------------------------------------------------------------------------
#								configuration
# ---------------------------------------------------------------------------

package conf;
($conf::queued_dir = (($0 !~ m,^/,) ? POSIX::getcwd()."/" : "") . $0)
	=~ s,/[^/]+$,,;
require "$conf::queued_dir/config";
my $junk = $conf::debug; # avoid spurious warnings about unused vars
$junk = $conf::ssh_key_file;
$junk = $conf::stray_remove_timeout;
$junk = $conf::problem_report_timeout;
$junk = $conf::queue_delay;
$junk = $conf::keep_files;
$junk = $conf::valid_files;
$junk = $conf::max_upload_retries;
$junk = $conf::upload_delay_1;
$junk = $conf::upload_delay_2;
$junk = $conf::ar;
$junk = $conf::gzip;
$junk = $conf::cp;
46
#$junk = $conf::ls;
47 48 49 50 51 52 53
$junk = $conf::chmod;
$junk = $conf::ftpdebug;
$junk = $conf::ftptimeout;
$junk = $conf::no_changes_timeout;
$junk = @conf::nonus_packages;
$junk = @conf::test_binaries;
$junk = @conf::maintainer_mail;
54
$junk = @conf::targetdir_delayed;
55
$junk = $conf::mail ||= '/usr/sbin/sendmail';
56 57 58 59 60
$conf::target = "localhost" if $conf::upload_method eq "copy";
package main;

($main::progname = $0) =~ s,.*/,,;

61 62
my %packages = ();

63 64 65 66 67 68 69 70
# extract -r and -k args
$main::arg = "";
if (@ARGV == 1 && $ARGV[0] =~ /^-[rk]$/) {
	$main::arg = ($ARGV[0] eq '-k') ? "kill" : "restart";
	shift @ARGV;
}

# test for another instance of the queued already running
71
my ($pid, $delayed_dirs, $adelayedcore);
72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
if (open( PIDFILE, "<$conf::pidfile" )) {
	chomp( $pid = <PIDFILE> );
	close( PIDFILE );
	if (!$pid) {
		# remove stale pid file
		unlink( $conf::pidfile );
	}
	elsif ($main::arg) {
		local($|) = 1;
		print "Killing running daemon (pid $pid) ...";
		kill( 15, $pid );
		my $cnt = 20;
		while( kill( 0, $pid ) && $cnt-- > 0 ) {
			sleep 1;
			print ".";
		}
		if (kill( 0, $pid )) {
			print " failed!\nProcess $pid still running.\n";
			exit 1;
		}
		print "ok\n";
		if (-e "$conf::incoming/core") {
			unlink( "$conf::incoming/core" );
			print "(Removed core file)\n";
		}
97 98 99 100 101 102 103 104 105
		for ($delayed_dirs = 0; $delayed_dirs <= $conf::max_delayed; 
			 $delayed_dirs++) {
			$adelayedcore = sprintf( "$conf::incoming_delayed/core",
									 $delayed_dirs );
			if (-e $adelayedcore) {
				unlink( $adelayedcore );
				print "(Removed core file)\n";
			}
		}
106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180
		exit 0 if $main::arg eq "kill";
	}
	else {
		die "Another $main::progname is already running (pid $pid)\n"
			if $pid && kill( 0, $pid );
	}
}
elsif ($main::arg eq "kill") {
	die "No daemon running\n";
}
elsif ($main::arg eq "restart") {
	print "(No daemon running; starting anyway)\n";
}

# if started without arguments (initial invocation), then fork
if (!@ARGV) {
	# now go to background
	die "$main::progname: fork failed: $!\n" unless defined( $pid = fork );
	if ($pid) {
		# parent: wait for signal from child (SIGCHLD or SIGUSR1) and exit
		my $sigset = POSIX::SigSet->new();
		$sigset->emptyset();
		$SIG{"CHLD"} = sub { };
		$SIG{"USR1"} = sub { };
		POSIX::sigsuspend( $sigset );
		waitpid( $pid, WNOHANG );
		if (kill( 0, $pid )) {
			print "Daemon started in background (pid $pid)\n";
			exit 0;
		}
		else {
			exit 1;
		}
	}
	else {
		# child
		setsid;
		if ($conf::upload_method eq "ssh") { 
			# exec an ssh-agent that starts us again
			# force shell to be /bin/sh, ssh-agent may base its decision
			# whether to use a fd or a Unix socket on the shell...
			$ENV{"SHELL"} = "/bin/sh";
			exec $conf::ssh_agent, $0, "startup", getppid();
			die "$main::progname: Could not exec $conf::ssh_agent: $!\n";
		}
		else {
			# no need to exec, just set up @ARGV as expected below
			@ARGV = ("startup", getppid());
		}
	}
}
die "Please start without any arguments.\n"
	if @ARGV != 2 || $ARGV[0] ne "startup";
my $parent_pid = $ARGV[1];

do {
	my $version;
	($version = 'Release: 0.9 $Revision: 1.51 $ $Date: 1999/07/08 09:43:21 $ $Author: ftplinux $') =~ s/\$ ?//g;
	print "debianqueued $version\n";
};

# check if all programs exist
my $prg;
foreach $prg ( $conf::gpg, $conf::ssh, $conf::scp, $conf::ssh_agent,
			   $conf::ssh_add, $conf::md5sum, $conf::mail, $conf::mkfifo ) {
	die "Required program $prg doesn't exist or isn't executable\n"
		if ! -x $prg;
# check for correct upload method
die "Bad upload method '$conf::upload_method'.\n"
	if $conf::upload_method ne "ssh" &&
	   $conf::upload_method ne "ftp" &&
	   $conf::upload_method ne "copy";
die "No keyrings\n" if ! @conf::keyrings;

}
181 182 183 184 185 186 187 188
die "statusfile path must be absolute."
	if $conf::statusfile !~ m,^/,;
die "upload and target queue paths must be absolute."
	if $conf::incoming !~ m,^/, ||
	   $conf::incoming_delayed !~ m,^/, ||
	   $conf::targetdir !~ m,^/, ||
	   $conf::targetdir_delayed !~ m,^/,;

189 190 191 192 193 194 195 196

# ---------------------------------------------------------------------------
#							   initializations
# ---------------------------------------------------------------------------

# prototypes
sub calc_delta();
sub check_dir();
197
sub get_filelist_from_known_good_changes($);
198
sub age_delayed_queues();
199 200
sub process_changes($\@);
sub process_commands($);
201 202
sub age_delayed_queues();
sub is_on_target($\@);
203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360
sub copy_to_target(@);
sub pgp_check($);
sub check_alive(;$);
sub check_incoming_writable();
sub fork_statusd();
sub write_status_file();
sub print_status($$$$$$);
sub format_status_num(\$$);
sub format_status_str(\$$);
sub send_status();
sub ftp_open();
sub ftp_cmd($@);
sub ftp_close();
sub ftp_response();
sub ftp_code();
sub ftp_error();
sub ssh_cmd($);
sub scp_cmd(@);
sub local_cmd($;$);
sub check_alive(;$);
sub check_incoming_writable();
sub rm(@);
sub md5sum($);
sub is_debian_file($);
sub get_maintainer($);
sub debian_file_stem($);
sub msg($@);
sub debug(@);
sub init_mail(;$);
sub finish_mail();
sub send_mail($$$);
sub try_to_get_mail_addr($$);
sub format_time();
sub print_time($);
sub block_signals();
sub unblock_signals();
sub close_log($);
sub kid_died($);
sub restart_statusd();
sub fatal_signal($);

$ENV{"PATH"} = "/bin:/usr/bin";
$ENV{"IFS"} = "" if defined($ENV{"IFS"} && $ENV{"IFS"} ne "");

# constants for stat
sub ST_DEV()   { 0 }
sub ST_INO()   { 1 }
sub ST_MODE()  { 2 }
sub ST_NLINK() { 3 }
sub ST_UID()   { 4 }
sub ST_GID()   { 5 }
sub ST_RDEV()  { 6 }
sub ST_SIZE()  { 7 }
sub ST_ATIME() { 8 }
sub ST_MTIME() { 9 }
sub ST_CTIME() { 10 }
# fixed lengths of data items passed over status pipe
sub STATNUM_LEN() { 30 }
sub STATSTR_LEN() { 128 }

# init list of signals
defined $Config{sig_name} or die "$main::progname: No signal list defined!\n";
my $i = 0;
my $name;
foreach $name (split( ' ', $Config{sig_name} )) {
	$main::signo{$name} = $i++;
}

@main::fatal_signals = qw( INT QUIT ILL TRAP ABRT BUS FPE USR2 SEGV PIPE
						   TERM XCPU XFSZ PWR );

$main::block_sigset = POSIX::SigSet->new;
$main::block_sigset->addset( $main::signo{"INT"} );
$main::block_sigset->addset( $main::signo{"TERM"} );

# some constant net stuff
$main::tcp_proto = (getprotobyname('tcp'))[2]
	or die "Cannot get protocol number for 'tcp'\n";
my $used_service = ($conf::upload_method eq "ssh") ? "ssh" : "ftp";
$main::echo_port = (getservbyname($used_service, 'tcp'))[2]
	or die "Cannot get port number for service '$used_service'\n";

# clear queue of stored mails
@main::stored_mails = ();

# run ssh-add to bring the key into the agent (will use stdin/stdout)
if ($conf::upload_method eq "ssh") {
	system "$conf::ssh_add $conf::ssh_key_file"
		and die "$main::progname: Running $conf::ssh_add failed ".
				"(exit status ", $? >> 8, ")\n";
}

# change to queue dir
chdir( $conf::incoming )
	or die "$main::progname: cannot cd to $conf::incoming: $!\n";

# needed before /dev/null redirects, some system send a SIGHUP when loosing
# the controlling tty
$SIG{"HUP"} = "IGNORE";

# open logfile, make it unbuffered
open( LOG, ">>$conf::logfile" )
	or die "Cannot open my logfile $conf::logfile: $!\n";
chmod( 0644, $conf::logfile )
	or die "Cannot set modes of $conf::logfile: $!\n";
select( (select(LOG), $| = 1)[0] );

sleep( 1 );
$SIG{"HUP"} = \&close_log;

# redirect stdin, ... to /dev/null
open( STDIN, "</dev/null" )
	or die "$main::progname: Can't redirect stdin to /dev/null: $!\n";
open( STDOUT, ">&LOG" )
	or die "$main::progname: Can't redirect stdout to $conf::logfile: $!\n";
open( STDERR, ">&LOG" )
	or die "$main::progname: Can't redirect stderr to $conf::logfile: $!\n";
# ok, from this point usually no "die" anymore, stderr is gone!
msg( "log", "daemon (pid $$) started\n" );

# initialize variables used by send_status before launching the status daemon
$main::dstat = "i";
format_status_num( $main::next_run, time+10 );
format_status_str( $main::current_changes, "" );
check_alive();
$main::incoming_writable = 1; # assume this for now

# start the daemon watching the 'status' FIFO
if ($conf::statusfile && $conf::statusdelay == 0) {
	$main::statusd_pid = fork_statusd();
	$SIG{"CHLD"} = \&kid_died; # watch out for dead status daemon
	# SIGUSR1 triggers status info
	$SIG{"USR1"} = \&send_status;
}
$main::maind_pid = $$;

END { kill( $main::signo{"ABRT"}, $$ ) if defined $main::signo{"ABRT"}; }

# write the pid file
open( PIDFILE, ">$conf::pidfile" )
	or msg( "log", "Can't open $conf::pidfile: $!\n" );
printf PIDFILE "%5d\n", $$;
close( PIDFILE );
chmod( 0644, $conf::pidfile )
	or die "Cannot set modes of $conf::pidfile: $!\n";

# other signals will just log an error and exit
foreach ( @main::fatal_signals ) {
	$SIG{$_} = \&fatal_signal;
}

# send signal to user-started process that we're ready and it can exit
kill( $main::signo{"USR1"}, $parent_pid );

# ---------------------------------------------------------------------------
#								 the mainloop
# ---------------------------------------------------------------------------

361 362 363 364
# default to classical incoming/target
$main::current_incoming = $conf::incoming;
$main::current_targetdir = $conf::targetdir;

365 366 367 368 369 370 371
$main::dstat = "i";
write_status_file() if $conf::statusdelay;
while( 1 ) {

	# ping target only if there is the possibility that we'll contact it (but
	# also don't wait too long).
	my @have_changes = <*.changes *.commands>;
372 373 374 375 376
	for ( my $delayed_dirs = 0; $delayed_dirs <= $conf::max_delayed; 
		  $delayed_dirs++) {
		my $adelayeddir = sprintf( "$conf::incoming_delayed",
								   $delayed_dirs );
		push( @have_changes,
377
			  <$adelayeddir/*.changes> );
378
	}
379 380 381 382 383 384 385 386 387
	check_alive() if @have_changes || (time - $main::last_ping_time) > 8*60*60;

	if (@have_changes && $main::target_up) {
		check_incoming_writable if !$main::incoming_writable;
		check_dir() if $main::incoming_writable;
	}
	$main::dstat = "i";
	write_status_file() if $conf::statusdelay;

388 389 390 391
	if ($conf::upload_method eq "copy") {
		age_delayed_queues();
	}

392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427
	# sleep() returns if we received a signal (SIGUSR1 for status FIFO), so
	# calculate the end time once and wait for it being reached.
	format_status_num( $main::next_run, time + $conf::queue_delay );
	my $delta;
	while( ($delta = calc_delta()) > 0 ) {
		debug( "mainloop sleeping $delta secs" );
		sleep( $delta );
		# check if statusd died, if using status FIFO, or update status file
		if ($conf::statusdelay) {
			write_status_file();
		}
		else {
			restart_statusd();
		}
	}
}

sub calc_delta() {
	my $delta;
	
	$delta = $main::next_run - time;
	$delta = $conf::statusdelay
		if $conf::statusdelay && $conf::statusdelay < $delta;
	return $delta;
}


# ---------------------------------------------------------------------------
#							main working functions
# ---------------------------------------------------------------------------


#
# main function for checking the incoming dir
#
sub check_dir() {
428 429
	my( @files, @changes, @keep_files, @this_keep_files, @stats, $file ,
		$adelay );
430 431 432 433 434 435 436 437 438 439 440 441 442 443 444
	
	debug( "starting checkdir" );
	$main::dstat = "c";
	write_status_file() if $conf::statusdelay;

	# test if needed binaries are available; this is if they're on maybe
	# slow-mounted NFS filesystems
	foreach (@conf::test_binaries) {
		next if -f $_;
		# maybe the mount succeeds now
		sleep 5;
		next if -f $_;
		msg( "log", "binary test failed for $_; delaying queue run\n");
		goto end_run;
	}
445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469

	for ( $adelay=-1; $adelay <= $conf::max_delayed; $adelay++ ) {
		if ( $adelay == -1 ) {
			$main::current_incoming = $conf::incoming;
			$main::current_incoming_short = "";
			$main::current_targetdir = $conf::targetdir;
		}
		else {
			$main::current_incoming = sprintf( $conf::incoming_delayed,
											   $adelay );
			$main::current_incoming_short = sprintf( "DELAYED/%d-day",
													 $adelay );
			$main::current_targetdir = sprintf( $conf::targetdir_delayed,
												$adelay );
		}

		# need to clear directory specific variables
		undef ( @keep_files );
		undef ( @this_keep_files );

		chdir ( $main::current_incoming )
			or (msg( "log",
					 "Cannot change to dir ".
					 "${main::current_incoming_short}: $!\n" ),
				return);
470 471 472 473 474 475 476 477 478 479 480 481

		# look for *.commands files but not in delayed queues
		if ( $adelay==-1 ) {
			foreach $file ( <*.commands> ) {
				init_mail( $file );
				block_signals();
				process_commands( $file );
				unblock_signals();
				$main::dstat = "c";
				write_status_file() if $conf::statusdelay;
				finish_mail();
			}
482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501
		}
		opendir( INC, "." )
			or (msg( "log", "Cannot open dir ${main::current_incoming_short}: $!\n" ),
				return);
		@files = readdir( INC );
		closedir( INC );

		# process all .changes files found
		@changes = grep /\.changes$/, @files;
		push( @keep_files, @changes ); # .changes files aren't stray
		foreach $file ( @changes ) {
			init_mail( $file );
			# wrap in an eval to allow jumpbacks to here with die in case
			# of errors
			block_signals();
			eval { process_changes( $file, @this_keep_files ); };
			unblock_signals();
			msg( "log,mail", $@ ) if $@;
			$main::dstat = "c";
			write_status_file() if $conf::statusdelay;
502
		
503 504 505 506
			# files which are ok in conjunction with this .changes
			debug( "$file tells to keep @this_keep_files" );
			push( @keep_files, @this_keep_files );
			finish_mail();
507

508 509 510 511
			# break out of this loop if the incoming dir has become unwritable
			goto end_run if !$main::incoming_writable;
		}
		ftp_close() if $conf::upload_method eq "ftp";
512

513 514 515 516
		# find files which aren't related to any .changes
		foreach $file ( @files ) {
			# filter out files we never want to delete
			next if ! -f $file ||	# may have disappeared in the meantime
517 518 519
			    $file eq "." || $file eq ".." ||
			    (grep { $_ eq $file } @keep_files) ||
				$file =~ /$conf::keep_files/;
520 521 522 523 524 525 526 527 528 529 530
			# Delete such files if they're older than
			# $stray_remove_timeout; they could be part of an
			# yet-incomplete upload, with the .changes still missing.
			# Cannot send any notification, since owner unknown.
			next if !(@stats = stat( $file ));
			my $age = time - $stats[ST_MTIME];
			my( $maint, $pattern, @job_files );
			if ($file =~ /^junk-for-writable-test/ ||
				$file !~ m,$conf::valid_files, ||
				$age >= $conf::stray_remove_timeout) {
				msg( "log", "Deleted stray file ${main::current_incoming_short}/$file\n" ) if rm( $file );
531
			}
532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585
			elsif ($age > $conf::no_changes_timeout &&
				   is_debian_file( $file ) &&
				   # not already reported
				   !($stats[ST_MODE] & S_ISGID) &&
				   ($pattern = debian_file_stem( $file )) &&
				   (@job_files = glob($pattern)) &&
				   # If a .changes is in the list, it has the same stem as the
				   # found file (probably a .orig.tar.gz). Don't report in this
				   # case.
				   !(grep( /\.changes$/, @job_files ))) {
				$maint = get_maintainer( $file );
				# Don't send a mail if this looks like the recompilation of a
				# package for a non-i386 arch. For those, the maintainer field is
				# useless :-(
				if (!grep( /(\.dsc|_(i386|all)\.deb)$/, @job_files )) {
					msg( "log", "Found an upload without .changes and with no ",
						        ".dsc file\n" );
					msg( "log", "Not sending a report, because probably ",
						        "recompilation job\n" );
				}
				elsif ($maint) {
					init_mail();
					$main::mail_addr = $maint;
					$main::mail_addr = $1 if $main::mail_addr =~ /<([^>]*)>/;
					$main::mail_subject = "Incomplete upload found in ".
						                  "Debian upload queue";
					msg( "mail", "Probably you are the uploader of the following ".
								 "file(s) in\n" );
					msg( "mail", "the Debian upload queue directory:\n  " );
					msg( "mail", join( "\n  ", @job_files ), "\n" );
					msg( "mail", "This looks like an upload, but a .changes file ".
								 "is missing, so the job\n" );
					msg( "mail", "cannot be processed.\n\n" );
					msg( "mail", "If no .changes file arrives within ",
								 print_time( $conf::stray_remove_timeout - $age ),
								 ", the files will be deleted.\n\n" );
					msg( "mail", "If you didn't upload those files, please just ".
								 "ignore this message.\n" );
					finish_mail();
					msg( "log", "Sending problem report for an upload without a ".
								".changes\n" );
					msg( "log", "Maintainer: $maint\n" );
				}
				else {
					msg( "log", "Found an upload without .changes, but can't ".
								"find a maintainer address\n" );
				}
				msg( "log", "Files: @job_files\n" );
				# remember we already have sent a mail regarding this file
				foreach ( @job_files ) {
					my @st = stat($_);
					next if !@st; # file may have disappeared in the meantime
					chmod +($st[ST_MODE] |= S_ISGID), $_;
				}
586 587
			}
			else {
588 589
				debug( "found stray file ${main::current_incoming_short}/$file, deleting in ",
					   print_time($conf::stray_remove_timeout - $age) );
590 591 592
			}
		}
	}
593
	chdir( $conf::incoming );
594 595 596 597 598 599

  end_run:
	$main::dstat = "i";
	write_status_file() if $conf::statusdelay;
}

600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629
sub get_filelist_from_known_good_changes($) {
	my $changes = shift;

	local( *CHANGES );
	my(@filenames);

	# parse the .changes file
	open( CHANGES, "<$changes" )
		or die "$changes: $!\n";
	outer_loop: while( <CHANGES> ) {
		if (/^Files:/i) {
			while( <CHANGES> ) {
				redo outer_loop if !/^\s/;
				my @field = split( /\s+/ );
				next if @field != 6;
				# forbid shell meta chars in the name, we pass it to a
				# subshell several times...
				$field[5] =~ /^([a-zA-Z0-9.+_:@=%-][~a-zA-Z0-9.+_:@=%-]*)/;
				if ($1 ne $field[5]) {
					msg( "log", "found suspicious filename $field[5]\n" );
					next;
				}
				push( @filenames, $field[5] );
			}
		}
	}
	close( CHANGES );
	return @filenames;
}

630 631 632 633 634 635 636 637 638 639 640 641
#
# process one .changes file
#
sub process_changes($\@) {
	my $changes = shift;
	my $keep_list = shift;
	my( $pgplines, @files, @filenames, @changes_stats, $failure_file,
	    $retries, $last_retry, $upload_time, $file, $do_report, $ls_l,
	    $problems_reported, $errs, $pkgname, $signator );
	local( *CHANGES );
	local( *FAILS );

642
	format_status_str( $main::current_changes, "$main::current_incoming_short/$changes" );
643 644 645 646
	$main::dstat = "c";
	write_status_file() if $conf::statusdelay;

	@$keep_list = ();
647
	msg( "log", "processing ${main::current_incoming_short}/$changes\n" );
648 649 650

	# parse the .changes file
	open( CHANGES, "<$changes" )
651
		or die "Cannot open ${main::current_incoming_short}/$changes: $!\n";
652 653 654 655 656 657 658 659 660 661 662 663 664 665
	$pgplines = 0;
	$main::mail_addr = "";
	@files = ();
	outer_loop: while( <CHANGES> ) {
		if (/^---+(BEGIN|END) PGP .*---+$/) {
			++$pgplines;
		}
		elsif (/^Maintainer:\s*/i) {
			chomp( $main::mail_addr = $' );
			$main::mail_addr = $1 if $main::mail_addr =~ /<([^>]*)>/;
		}
		elsif (/^Source:\s*/i) {
			chomp( $pkgname = $' );
			$pkgname =~ s/\s+$//;
666
                        $main::packages{$pkgname}++;
667 668 669 670 671 672 673 674 675 676 677
		}
		elsif (/^Files:/i) {
			while( <CHANGES> ) {
				redo outer_loop if !/^\s/;
				my @field = split( /\s+/ );
				next if @field != 6;
				# forbid shell meta chars in the name, we pass it to a
				# subshell several times...
				$field[5] =~ /^([a-zA-Z0-9.+_:@=%-][~a-zA-Z0-9.+_:@=%-]*)/;
				if ($1 ne $field[5]) {
					msg( "log", "found suspicious filename $field[5]\n" );
678
					msg( "mail", "File '$field[5]' mentioned in $main::current_incoming_short/$changes\n",
679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699
						 "has bad characters in its name. Removed.\n" );
					rm( $field[5] );
					next;
				}
				push( @files, { md5  => $field[1],
								size => $field[2],
								name => $field[5] } );
				push( @filenames, $field[5] );
				debug( "includes file $field[5], size $field[2], ",
					   "md5 $field[1]" );
			}
		}
	}
	close( CHANGES );

	# tell check_dir that the files mentioned in this .changes aren't stray,
	# we know about them somehow
	@$keep_list = @filenames;

	# some consistency checks
	if (!$main::mail_addr) {
700
		msg( "log,mail", "$main::current_incoming_short/$changes doesn't contain a Maintainer: field; ".
701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721
			 "cannot process\n" );
		goto remove_only_changes;
	}
	if ($main::mail_addr !~ /^(buildd_\S+-\S+|\S+\@\S+\.\S+)/) {
		# doesn't look like a mail address, maybe only the name
		my( $new_addr, @addr_list );
		if ($new_addr = try_to_get_mail_addr( $main::mail_addr, \@addr_list )){
			# substitute (unique) found addr, but give a warning
			msg( "mail", "(The Maintainer: field didn't contain a proper ".
						 "mail address.\n" );
			msg( "mail", "Looking for `$main::mail_addr' in the Debian ".
						 "keyring gave your address\n" );
			msg( "mail", "as unique result, so I used this.)\n" );
			msg( "log", "Substituted $new_addr for malformed ".
						"$main::mail_addr\n" );
			$main::mail_addr = $new_addr;
		}
		else {
			# not found or not unique: hold the job and inform queue maintainer
			my $old_addr = $main::mail_addr;
			$main::mail_addr = $conf::maintainer_mail;
722 723
			msg( "mail", "The job ${main::current_incoming_short}/$changes doesn't have a correct email\n" );
		    msg( "mail", "address in the Maintainer: field:\n" );
724 725 726 727 728 729
			msg( "mail", "  $old_addr\n" );
			msg( "mail", "A check for this in the Debian keyring gave:\n" );
			msg( "mail", @addr_list ?
						 "  " . join( ", ", @addr_list ) . "\n" :
						 "  nothing\n" );
			msg( "mail", "Please fix this manually\n" );
730
			msg( "log", "Bad Maintainer: field in ${main::current_incoming_short}/$changes: $old_addr\n" );
731 732 733 734
			goto remove_only_changes;
		}
	}
	if ($pgplines < 3) {
735
		msg( "log,mail", "$main::current_incoming_short/$changes isn't signed with PGP/GnuPG\n" );
736 737 738 739
		msg( "log", "(uploader $main::mail_addr)\n" );
		goto remove_only_changes;
	}
	if (!@files) {
740
		msg( "log,mail", "$main::current_incoming_short/$changes doesn't mention any files\n" );
741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760
		msg( "log", "(uploader $main::mail_addr)\n" );
		goto remove_only_changes;
	}

	# check for packages that shouldn't be processed
	if (grep( $_ eq $pkgname, @conf::nonus_packages )) {
		msg( "log,mail", "$pkgname is a package that must be uploaded ".
			             "to nonus.debian.org\n" );
		msg( "log,mail", "instead of target.\n" );
		msg( "log,mail", "Job rejected and removed all files belonging ".
						 "to it:\n" );
		msg( "log,mail", "  ", join( ", ", @filenames ), "\n" );
		rm( $changes, @filenames );
		return;
	}

	$failure_file = $changes . ".failures";
	$retries = $last_retry = 0;
	if (-f $failure_file) {
		open( FAILS, "<$failure_file" )
761
			or die "Cannot open $main::current_incoming_short/$failure_file: $!\n";
762 763 764 765 766 767 768 769
		my $line = <FAILS>;
		close( FAILS );
		( $retries, $last_retry ) = ( $1, $2 ) if $line =~ /^(\d+)\s+(\d+)$/;
		push( @$keep_list, $failure_file );
	}

	# run PGP on the file to check the signature
	if (!($signator = pgp_check( $changes ))) {
770
		msg( "log,mail", "$main::current_incoming_short/$changes has bad PGP/GnuPG signature!\n" );
771 772
		msg( "log", "(uploader $main::mail_addr)\n" );
	  remove_only_changes:
773
		msg( "log,mail", "Removing $main::current_incoming_short/$changes, but keeping its associated ",
774 775 776 777 778 779 780 781 782 783 784 785 786 787
			             "files for now.\n" );
		rm( $changes );
		# Set SGID bit on associated files, so that the test for Debian files
		# without a .changes doesn't consider them.
		foreach ( @filenames ) {
			my @st = stat($_);
			next if !@st; # file may have disappeared in the meantime
			chmod +($st[ST_MODE] |= S_ISGID), $_;
		}
		return;
	}
	elsif ($signator eq "LOCAL ERROR") {
		# An error has appened when starting pgp... Don't process the file,
		# but also don't delete it
788
		debug( "Can't PGP/GnuPG check $main::current_incoming_short/$changes -- don't process it for now" );
789 790 791
		return;
	}

792
	die "Cannot stat ${main::current_incoming_short}/$changes (??): $!\n"
793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853
		if !(@changes_stats = stat( $changes ));
	# Make $upload_time the maximum of all modification times of files
	# related to this .changes (and the .changes it self). This is the
	# last time something changes to these files.
	$upload_time = $changes_stats[ST_MTIME];
	for $file ( @files ) {
		my @stats;
		next if !(@stats = stat( $file->{"name"} ));
		$file->{"stats"} = \@stats;
		$upload_time = $stats[ST_MTIME] if $stats[ST_MTIME] > $upload_time;
	}

	$do_report = (time - $upload_time) > $conf::problem_report_timeout;
	$problems_reported = $changes_stats[ST_MODE] & S_ISGID;
	# if any of the files is newer than the .changes' ctime (the time
	# we sent a report and set the sticky bit), send new problem reports
	if ($problems_reported && $changes_stats[ST_CTIME] < $upload_time) {
		$problems_reported = 0;
		chmod +($changes_stats[ST_MODE] &= ~S_ISGID), $changes;
		debug( "upload_time>changes-ctime => resetting problems reported" );
	}
	debug( "do_report=$do_report problems_reported=$problems_reported" );
	
	# now check all files for correct size and md5 sum
	for $file ( @files ) {
		my $filename = $file->{"name"};
		if (!defined( $file->{"stats"} )) {
			# could be an upload that isn't complete yet, be quiet,
			# but don't process the file;
			msg( "log,mail", "$filename doesn't exist\n" )
				if $do_report && !$problems_reported;
			msg( "log", "$filename doesn't exist (ignored for now)\n" )
				if !$do_report;
			msg( "log", "$filename doesn't exist (already reported)\n" )
				if $problems_reported;
			++$errs;
		}
		elsif ($file->{"stats"}->[ST_SIZE] < $file->{"size"} && !$do_report) {
			# could be an upload that isn't complete yet, be quiet,
			# but don't process the file
			msg( "log", "$filename is too small (ignored for now)\n" );
			++$errs;
		}
		elsif ($file->{"stats"}->[ST_SIZE] != $file->{"size"}) {
			msg( "log,mail", "$filename has incorrect size; deleting it\n" );
			rm( $filename );
			++$errs;
		}
		elsif (md5sum( $filename ) ne $file->{"md5"}) {
			msg( "log,mail", "$filename has incorrect md5 checksum; ",
				             "deleting it\n" );
			rm( $filename );
			++$errs;
		}
	}

	if ($errs) {
		if ((time - $upload_time) > $conf::bad_changes_timeout) {
			# if a .changes fails for a really long time (several days
			# or so), remove it and all associated files
			msg( "log,mail",
854
				 "$main::current_incoming_short/$changes couldn't be processed for ",
855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892
				 int($conf::bad_changes_timeout/(60*60)),
				 " hours and is now deleted\n" );
			msg( "log,mail",
				 "All files it mentions are also removed:\n" );
			msg( "log,mail", "  ", join( ", ", @filenames ), "\n" );
			rm( $changes, @filenames, $failure_file );
		}
		elsif ($do_report && !$problems_reported) {
			# otherwise, send a problem report, if not done already
			msg( "mail",
				 "Due to the errors above, the .changes file couldn't ",
				 "be processed.\n",
				 "Please fix the problems for the upload to happen.\n" );
			# remember we already have sent a mail regarding this file
			debug( "Sending problem report mail and setting SGID bit" );
			my $mode = $changes_stats[ST_MODE] |= S_ISGID;
			msg( "log", "chmod failed: $!" ) if (chmod ($mode, $changes) != 1);
		}
		# else: be quiet
		
		return;
	}

	# if this upload already failed earlier, wait until the delay requirement
	# is fulfilled
	if ($retries > 0 && (time - $last_retry) <
		($retries == 1 ? $conf::upload_delay_1 : $conf::upload_delay_2)) {
		msg( "log", "delaying retry of upload\n" );
		return;
	}

	if ($conf::upload_method eq "ftp") {
		return if !ftp_open();
	}

	# check if the job is already present on target
	# (moved to here, to avoid bothering target as long as there are errors in
	# the job)
893
	if ($ls_l = is_on_target( $changes, @filenames )) {
894
		msg( "log,mail", "$main::current_incoming_short/$changes is already present on target host:\n" );
895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988
		msg( "log,mail", "$ls_l\n" );
		msg( "mail", "Either you already uploaded it, or someone else ",
			         "came first.\n" );
		msg( "log,mail", "Job $changes removed.\n" );
		rm( $changes, @filenames, $failure_file );
		return;
	}
		
	# clear sgid bit before upload, scp would copy it to target. We don't need
	# it anymore, we know there are no problems if we come here. Also change
	# mode of files to 644 if this should be done locally.
	$changes_stats[ST_MODE] &= ~S_ISGID;
	if (!$conf::chmod_on_target) {
		$changes_stats[ST_MODE] &= ~0777;
		$changes_stats[ST_MODE] |= 0644;
	}
	chmod +($changes_stats[ST_MODE]), $changes;

	# try uploading to target
	if (!copy_to_target( $changes, @filenames )) {
		# if the upload failed, increment the retry counter and remember the
		# current time; both things are written to the .failures file. Don't
		# increment the fail counter if the error was due to incoming
		# unwritable.
		return if !$main::incoming_writable;
		if (++$retries >= $conf::max_upload_retries) {
			msg( "log,mail",
				 "$changes couldn't be uploaded for $retries times now.\n" );
			msg( "log,mail",
				 "Giving up and removing it and its associated files:\n" );
			msg( "log,mail", "  ", join( ", ", @filenames ), "\n" );
			rm( $changes, @filenames, $failure_file );
		}
		else {
			$last_retry = time;
			if (open( FAILS, ">$failure_file" )) {
				print FAILS "$retries $last_retry\n";
				close( FAILS );
				chmod( 0600, $failure_file )
					or die "Cannot set modes of $failure_file: $!\n";
			}
			push( @$keep_list, $failure_file );
			debug( "now $retries failed uploads" );
			msg( "mail",
				 "The upload will be retried in ",
				 print_time( $retries == 1 ? $conf::upload_delay_1 :
							 $conf::upload_delay_2 ), "\n" );
		}
		return;
	}

	# If the files were uploaded ok, remove them
	rm( $changes, @filenames, $failure_file );

	msg( "mail", "$changes uploaded successfully to $conf::target\n" );
	msg( "mail", "along with the files:\n  ",
		         join( "\n  ", @filenames ), "\n" );
	msg( "log", "$changes processed successfully (uploader $main::mail_addr)\n" );

	# Check for files that have the same stem as the .changes (and weren't
	# mentioned there) and delete them. It happens often enough that people
	# upload a .orig.tar.gz where it isn't needed and also not in the
	# .changes. Explicitly deleting it (and not waiting for the
	# $stray_remove_timeout) reduces clutter in the queue dir and maybe also
	# educates uploaders :-)

#	my $pattern = debian_file_stem( $changes );
#	my $spattern = substr( $pattern, 0, -1 ); # strip off '*' at end
#	my @other_files = glob($pattern);
	# filter out files that have a Debian revision at all and a different
	# revision. Those belong to a different upload.
#	if ($changes =~ /^\Q$spattern\E-([\d.+-]+)/) {
#		my $this_rev = $1;
#		@other_files = grep( !/^\Q$spattern\E-([\d.+-]+)/ || $1 eq $this_rev,
#							 @other_files);
	#}
	# Also do not remove those files if a .changes is among them. Then there
	# is probably a second upload for another version or another architecture.
#	if (@other_files && !grep( /\.changes$/, @other_files )) {
#		rm( @other_files );
#		msg( "mail", "\nThe following file(s) seemed to belong to the same ".
#					 "upload, but weren't listed\n" );
#		msg( "mail", "in the .changes file:\n  " );
#		msg( "mail", join( "\n  ", @other_files ), "\n" );
#		msg( "mail", "They have been deleted.\n" );
#		msg( "log", "Deleted files in upload not in $changes: @other_files\n" );
	#}
}

#
# process one .commands file
#
sub process_commands($) {
	my $commands = shift;
989
	my( @cmds, $cmd, $pgplines, $signator );
990
	local( *COMMANDS );
991
	my( @files, $file, @removed, $target_delay );
992 993 994 995 996
	
	format_status_str( $main::current_changes, $commands );
	$main::dstat = "c";
	write_status_file() if $conf::statusdelay;
	
997
	msg( "log", "processing $main::current_incoming_short/$commands\n" );
998 999 1000

	# parse the .commands file
	if (!open( COMMANDS, "<$commands" )) {
1001
		msg( "log", "Cannot open $main::current_incoming_short/$commands: $!\n" );
1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032
		return;
	}
	$pgplines = 0;
	$main::mail_addr = "";
	@cmds = ();
	outer_loop: while( <COMMANDS> ) {
		if (/^---+(BEGIN|END) PGP .*---+$/) {
			++$pgplines;
		}
		elsif (/^Uploader:\s*/i) {
			chomp( $main::mail_addr = $' );
			$main::mail_addr = $1 if $main::mail_addr =~ /<([^>]*)>/;
		}
		elsif (/^Commands:/i) {
			$_ = $';
			for(;;) {
				s/^\s*(.*)\s*$/$1/; # delete whitespace at both ends
				if (!/^\s*$/) {
					push( @cmds, $_ );
					debug( "includes cmd $_" );
				}
				last outer_loop if !defined( $_ = scalar(<COMMANDS>) );
				chomp;
				redo outer_loop if !/^\s/ || /^$/;
			}
		}
	}
	close( COMMANDS );
	
	# some consistency checks
	if (!$main::mail_addr || $main::mail_addr !~ /^\S+\@\S+\.\S+/) {
1033
		msg( "log,mail", "$main::current_incoming_short/$commands contains no or bad Uploader: field: ".
1034
						 "$main::mail_addr\n" );
1035
		msg( "log,mail", "cannot process $main::current_incoming_short/$commands\n" );
1036 1037 1038 1039 1040 1041
		$main::mail_addr = "";
		goto remove;
	}
	msg( "log", "(command uploader $main::mail_addr)\n" );

	if ($pgplines < 3) {
1042
		msg( "log,mail", "$main::current_incoming_short/$commands isn't signed with PGP/GnuPG\n" );
1043 1044
		msg( "mail", "or the uploaded file is broken. Make sure to transfer in binary mode\n" );
		msg( "mail", "or better yet - use dcut for commands files\n");
1045 1046 1047 1048 1049
		goto remove;
	}
	
	# run PGP on the file to check the signature
	if (!($signator = pgp_check( $commands ))) {
1050
		msg( "log,mail", "$main::current_incoming_short/$commands has bad PGP/GnuPG signature!\n" );
1051
	  remove:
1052
		msg( "log,mail", "Removing $main::current_incoming_short/$commands\n" );
1053 1054 1055 1056 1057 1058
		rm( $commands );
		return;
	}
	elsif ($signator eq "LOCAL ERROR") {
		# An error has appened when starting pgp... Don't process the file,
		# but also don't delete it
1059
		debug( "Can't PGP/GnuPG check $main::current_incoming_short/$commands -- don't process it for now" );
1060 1061 1062 1063 1064
		return;
	}
	msg( "log", "(PGP/GnuPG signature by $signator)\n" );

	# now process commands
1065
	msg( "mail", "Log of processing your commands file $main::current_incoming_short/$commands:\n\n" );
1066 1067 1068
	foreach $cmd ( @cmds ) {
		my @word = split( /\s+/, $cmd );
		msg( "mail,log", "> @word\n" );
1069
        my $selecteddelayed = -1;
1070
		next if @word < 1;
1071

1072 1073
		if ($word[0] eq "rm") {
			foreach ( @word[1..$#word] ) {
1074
				my $origword = $_;
1075
				if (m,^DELAYED/([0-9]+)-day/,) {
1076 1077 1078
					$selecteddelayed = $1;
                    s,^DELAYED/[0-9]+-day/,,;
				}
1079 1080 1081 1082
				if ($origword eq "--searchdirs") {
					$selecteddelayed = -2;
				}
				elsif (m,/,) {
1083
					msg( "mail,log", "$_: filename may not contain slashes except for DELAYED/#-day/ prefixes\n" );
1084
				}
1085 1086
				else {
					# process wildcards but also plain names
1087
					my (@thesefiles);
1088 1089 1090 1091
					my $pat = quotemeta($_);
					$pat =~ s/\\\*/.*/g;
					$pat =~ s/\\\?/.?/g;
					$pat =~ s/\\([][])/$1/g;
1092 1093 1094 1095

					if ( $selecteddelayed < 0) { # scanning or explicitly incoming
						opendir( DIR, "." );
						push (@thesefiles, grep /^$pat$/, readdir(DIR) );
1096
						closedir( DIR );
1097
					}
1098 1099 1100 1101 1102
					if ( $selecteddelayed >= 0) {
						my $dir = sprintf( $conf::incoming_delayed, $selecteddelayed );
						opendir( DIR, $dir );
						push( @thesefiles, map ("$dir/$_", grep /^$pat$/, readdir(DIR) ));
						closedir( DIR );
1103
					}
1104 1105 1106 1107 1108 1109
					elsif ( $selecteddelayed == -2) {
						for ( my($adelay)=0; (! @thesefiles) && $adelay <= $conf::max_delayed; $adelay++ ) {
							my $dir = sprintf( $conf::incoming_delayed, $adelay );
							opendir( DIR, $dir);
							push( @thesefiles, map ("$dir/$_", grep /^$pat$/, readdir(DIR) ));
							closedir( DIR );
1110 1111
						}
					}
1112
					push (@files, @thesefiles);
1113 1114 1115
					if (! @thesefiles) {
						msg( "mail,log", "$origword did not match anything\n" );
					}
1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134
				}
			}
			if (!@files) {
				msg( "mail,log", "No files to delete\n" );
			}
			else {
				@removed = ();
				foreach $file ( @files ) {
					if (!-f $file) {
						msg( "mail,log", "$file: no such file\n" );
					}
					elsif ($file =~ /$conf::keep_files/) {
						msg( "mail,log", "$file is protected, cannot ".
							 "remove\n" );
					}
					elsif (!unlink( $file )) {
						msg( "mail,log", "$file: rm: $!\n" );
					}
					else {
1135
                        $file =~ s,$conf::incoming/?,,;
1136 1137 1138 1139 1140 1141
						push( @removed, $file );
					}
				}
				msg( "mail,log", "Files removed: @removed\n" ) if @removed;
			}
		}
1142
		elsif ($word[0] eq "reschedule") {
1143 1144 1145
			if (@word != 3) {
				msg( "mail,log", "Wrong number of arguments\n" );
			}
1146 1147 1148
			elsif ($conf::upload_method ne "copy") {
				msg( "mail,log", "reschedule not available\n" );
			}
1149
			elsif ($word[1] =~ m,/, || $word[1] !~ m/\.changes/) {
1150
				msg( "mail,log", "$word[1]: filename may not contain slashes and must be .changes\n" );
1151
			}
1152
			elsif (! (($target_delay) = $word[2] =~ m,^([0-9]+)-day$,) || $target_delay > $conf::max_delayed) {
1153
				msg( "mail,log", "$word[2]: rescheduling target must be #-day with # between 0 and $conf::max_delayed (in particular, no '/' allowed)\n");
1154 1155
			}
			elsif ($word[1] =~ /$conf::keep_files/) {
1156
				msg( "mail,log", "$word[1] is protected, cannot do stuff with it\n" );
1157 1158
			}
			else {
1159 1160 1161 1162 1163 1164 1165 1166
				my($adelay);
				for ( $adelay=0; $adelay <= $conf::max_delayed && ! -f (sprintf( "$conf::targetdir_delayed",$adelay )."/$word[1]"); $adelay++ ) {
				}
				if ( $adelay > $conf::max_delayed) {
					msg( "mail,log", "$word[1] not found\n" );
				}
				elsif ($adelay == $target_delay) {
					msg( "mail,log", "$word[1] already is in $word[2]\n" );
1167 1168
				}
				else {
1169 1170 1171 1172 1173 1174
					my(@thesefiles);
					my($dir) = sprintf( "$conf::targetdir_delayed",$adelay );
					my($target_dir) = sprintf( "$conf::targetdir_delayed",$target_delay );
					push (@thesefiles, $word[1]);
					push (@thesefiles, get_filelist_from_known_good_changes("$dir/$word[1]"));
					for my $afile(@thesefiles) {
1175 1176 1177
						if ($afile =~ m/\.changes$/) {
							utime undef,undef,("$dir/$afile");
						}
1178 1179 1180 1181 1182 1183 1184
						if (! rename "$dir/$afile","$target_dir/$afile") {
							msg( "mail,log", "rename: $!\n" );
						}
						else {
							msg( "mail,log", "$afile moved to $target_delay-day\n" );
						}
					}
1185 1186 1187
				}
			}
		}
1188 1189 1190 1191 1192 1193 1194 1195 1196 1197
		elsif ($word[0] eq "cancel") {
			if (@word != 2) {
				msg( "mail,log", "Wrong number of arguments\n" );
			}
			elsif ($conf::upload_method ne "copy") {
				msg( "mail,log", "cancel not available\n" );
			}
			elsif ($word[1] !~ m,^[a-zA-Z0-9.+_:@=%-][~a-zA-Z0-9.+_:@=%-]*\.changes$,) {
				msg( "mail,log", "argument to cancel must be one .changes filename without path\n" );
			}
1198
		    my (@files) = ();
1199 1200 1201
			for ( my($adelay)=0; $adelay <= $conf::max_delayed; $adelay++ ) {
				my($dir) = sprintf( "$conf::targetdir_delayed",$adelay );
				if (-f "$dir/$word[1]") {
1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220
					@removed = ();
					push (@files, "$word[1]");
					push (@files,get_filelist_from_known_good_changes("$dir/$word[1]"));
					foreach $file ( @files ) {
						if (!-f "$dir/$file") {
							msg( "mail,log", "$dir/$file: no such file\n" );
						}
						elsif ("$dir/$file" =~ /$conf::keep_files/) {
							msg( "mail,log", "$dir/$file is protected, cannot ".
								 "remove\n" );
						}
						elsif (!unlink( "$dir/$file" )) {
							msg( "mail,log", "$dir/$file: rm: $!\n" );
						}
						else {
							push( @removed, $file );
						}
					}
				    msg( "mail,log", "Files removed from $adelay-day: @removed\n" ) if @removed;
1221 1222 1223 1224 1225 1226
				}
			}
			if (!@files) {
				msg( "mail,log", "No upload found: $word[1]\n" );
			}
		}
1227 1228 1229 1230 1231
		else {
			msg( "mail,log", "unknown command $word[0]\n" );
		}
	}
	rm( $commands );
1232
	msg( "log", "-- End of $main::current_incoming_short/$commands processing\n" );
1233 1234
}

1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246
sub age_delayed_queues() {
	for ( my($adelay)=0 ; $adelay <= $conf::max_delayed ; $adelay++ ) {
		my($dir) = sprintf( "$conf::targetdir_delayed",$adelay );
		my($target_dir);
		if ($adelay == 0) {
		    $target_dir = $conf::targetdir;
		}
		else {
			$target_dir = sprintf( "$conf::targetdir_delayed",$adelay-1 );
		}
		for my $achanges (<$dir/*.changes>) {
			my $mtime = (stat($achanges))[9];
1247
			if ($mtime + 24*60*60 <= time || $adelay==0) {
1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263
				utime undef,undef,($achanges);
				my @thesefiles = ($achanges =~ m,.*/([^/]*),);
				push (@thesefiles, get_filelist_from_known_good_changes($achanges));
				for my $afile(@thesefiles) {
					if (! rename "$dir/$afile","$target_dir/$afile") {
						msg( "log", "rename: $!\n" );
					}
					else {
						msg( "log", "$afile moved to $target_dir\n" );
					}
				}
			}
		}
	}
}

1264 1265 1266
#
# check if a file is already on target
#
1267
sub is_on_target($\@) {
1268
	my $file = shift;
1269
	my $filelist = shift;
1270 1271
	my $msg;
	my $stat;
1272

1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292
	if ($conf::upload_method eq "ssh") {
		($msg, $stat) = ssh_cmd( "ls -l $file" );
	}
	elsif ($conf::upload_method eq "ftp") {
		my $err;
		($msg, $err) = ftp_cmd( "dir", $file );
		if ($err) {
			$stat = 1;
			$msg = $err;
		}
		elsif (!$msg) {
			$stat = 1;
			$msg = "ls: no such file\n";
		}
		else {
			$stat = 0;
			$msg = join( "\n", @$msg );
		}
	}
	else {
1293 1294
		my @allfiles = ($file);
		push ( @allfiles, @$filelist);
1295 1296
		$stat = 1;
		$msg = "no such file";
1297
		for my $afile(@allfiles) {
T
Thomas Viehmann 已提交
1298
			if (-f "$conf::targetdir/$afile") {
1299 1300 1301
				$stat = 0;
        	    $msg = "$afile";
			}
1302 1303
		}
		for ( my($adelay)=0 ; $adelay <= $conf::max_delayed && $stat ; $adelay++ ) {
1304 1305 1306 1307 1308
			for my $afile(@allfiles) {
				if (-f (sprintf( "$conf::targetdir_delayed",$adelay )."/$afile")) {
					$stat = 0;
					$msg = sprintf( "%d-day",$adelay )."/$afile";
				}
1309 1310
			}
		}
1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340
	}
	chomp( $msg );
	debug( "exit status: $stat, output was: $msg" );

	return "" if $stat && $msg =~ /no such file/i; # file not present
	msg( "log", "strange ls -l output on target:\n", $msg ), return ""
		if $stat || $@; # some other error, but still try to upload

	# ls -l returned 0 -> file already there
	$msg =~ s/\s\s+/ /g; # make multiple spaces into one, to save space
	return $msg;
}

#
# copy a list of files to target
#
sub copy_to_target(@) {
	my @files = @_;
	my( @md5sum, @expected_files, $sum, $name, $msgs, $stat );
	
	$main::dstat = "u";
	write_status_file() if $conf::statusdelay;

	# copy the files
	if ($conf::upload_method eq "ssh") {
		($msgs, $stat) = scp_cmd( @files );
		goto err if $stat;
	}
	elsif ($conf::upload_method eq "ftp") {
		my($rv, $file);
1341 1342 1343 1344
		if (!$main::FTP_chan->cwd( $main::current_targetdir )) {
			msg( "log,mail", "Can't cd to $main::current_targetdir on $conf::target\n" );
			goto err;
		}
1345 1346 1347 1348 1349 1350
		foreach $file (@files) {
			($rv, $msgs) = ftp_cmd( "put", $file );
			goto err if !$rv;
		}
	}
	else {
1351
		($msgs, $stat) = local_cmd( "$conf::cp @files $main::current_targetdir", 'NOCD' );
1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472
		goto err if $stat;
	}
	
	# check md5sums or sizes on target against our own
	my $have_md5sums = 1;
	if ($conf::upload_method eq "ssh") {
		($msgs, $stat) = ssh_cmd( "md5sum @files" );
		goto err if $stat;
		@md5sum = split( "\n", $msgs );
	}
	elsif ($conf::upload_method eq "ftp") {
		my ($rv, $err, $file);
		foreach $file (@files) {
			($rv, $err) = ftp_cmd( "quot", "site", "md5sum", $file );
			if ($err) {
				next if ftp_code() == 550; # file not found
				if (ftp_code() == 500) { # unimplemented
					$have_md5sums = 0;
					goto get_sizes_instead;
				}
				$msgs = $err;
				goto err;
			}
			chomp( my $t = ftp_response() );
			push( @md5sum, $t );
		}
		if (!$have_md5sums) {
		  get_sizes_instead:
			foreach $file (@files) {
				($rv, $err) = ftp_cmd( "size", $file );
				if ($err) {
					next if ftp_code() == 550; # file not found
					$msgs = $err;
					goto err;
				}
				push( @md5sum, "$rv $file" );
			}
		}
	}
	else {
		($msgs, $stat) = local_cmd( "$conf::md5sum @files" );
		goto err if $stat;
		@md5sum = split( "\n", $msgs );
	}
	
	@expected_files = @files;
	foreach (@md5sum) {
		chomp;
		($sum,$name) = split;
		next if !grep { $_ eq $name } @files; # a file we didn't upload??
		next if $sum eq "md5sum:"; # looks like an error message
		if (($have_md5sums && $sum ne md5sum( $name )) ||
			(!$have_md5sums && $sum != (-s $name))) {
			msg( "log,mail", "Upload of $name to $conf::target failed ",
				 "(".($have_md5sums ? "md5sum" : "size")." mismatch)\n" );
			goto err;
		}
		# seen that file, remove it from expect list
		@expected_files = map { $_ eq $name ? () : $_ } @expected_files;
	}
	if (@expected_files) {
		msg( "log,mail", "Failed to upload the files\n" );
		msg( "log,mail", "  ", join( ", ", @expected_files ), "\n" );
		msg( "log,mail", "(Not present on target after upload)\n" );
		goto err;
	}

	if ($conf::chmod_on_target) {
		# change file's mode explicitly to 644 on target
		if ($conf::upload_method eq "ssh") {
			($msgs, $stat) = ssh_cmd( "chmod 644 @files" );
			goto err if $stat;
		}
		elsif ($conf::upload_method eq "ftp") {
			my ($rv, $file);
			foreach $file (@files) {
				($rv, $msgs) = ftp_cmd( "quot", "site", "chmod", "644", $file );
				msg( "log", "Can't chmod $file on target:\n$msgs" )
					if $msgs;
				goto err if !$rv;
			}
		}
		else {
			($msgs, $stat) = local_cmd( "$conf::chmod 644 @files" );
			goto err if $stat;
		}
	}

	$main::dstat = "c";
	write_status_file() if $conf::statusdelay;
	return 1;
	
  err:
	msg( "log,mail", "Upload to $conf::target failed",
		 $? ? ", last exit status ".sprintf( "%s", $?>>8 ) : "", "\n" );
	msg( "log,mail", "Error messages:\n", $msgs )
		if $msgs;

	# If "permission denied" was among the errors, test if the incoming is
	# writable at all.
	if ($msgs =~ /(permission denied|read-?only file)/i) {
		if (!check_incoming_writable()) {
			msg( "log,mail", "(The incoming directory seems to be ",
				             "unwritable.)\n" );
		}
	}

	# remove bad files or an incomplete upload on target
	if ($conf::upload_method eq "ssh") {
		ssh_cmd( "rm -f @files" );
	}
	elsif ($conf::upload_method eq "ftp") {
		my $file;
		foreach $file (@files) {
			my ($rv, $err);
			($rv, $err) = ftp_cmd( "delete", $file );
			msg( "log", "Can't delete $file on target:\n$err" )
				if $err;
		}
	}
	else {
1473
		my @tfiles = map { "$main::current_targetdir/$_" } @files;
1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491
		debug( "executing unlink(@tfiles)" );
		rm( @tfiles );
	}
	$main::dstat = "c";
	write_status_file() if $conf::statusdelay;
	return 0;
}

#
# check if a file is correctly signed with PGP
#
sub pgp_check($) {
	my $file = shift;
	my $output = "";
	my $signator;
	my $found = 0;
	my $stat;
	local( *PIPE );
1492

1493 1494 1495 1496 1497
	$stat = 1;
	if (-x $conf::gpg) {
		debug( "executing $conf::gpg --no-options --batch ".
		   "--no-default-keyring --always-trust ".
		   "--keyring ". join (" --keyring ",@conf::keyrings).
1498
		   " --verify '$file'" );
1499 1500 1501
		if (!open( PIPE, "$conf::gpg --no-options --batch ".
		   "--no-default-keyring --always-trust ".
		   "--keyring " . join (" --keyring ",@conf::keyrings).
1502
		   " --verify '$file'".
1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728
		   " 2>&1 |" )) {
			msg( "log", "Can't open pipe to $conf::gpg: $!\n" );
			return "LOCAL ERROR";
		}
		$output .= $_ while( <PIPE> );
		close( PIPE );
		$stat = $?;
	}

	if ($stat) {
		msg( "log,mail", "GnuPG signature check failed on $file\n" );
		msg( "mail", $output );
		msg( "log,mail", "(Exit status ", $stat >> 8, ")\n" );
		return "";
	}

	$output =~ /^(gpg: )?good signature from (user )?"(.*)"\.?$/im;
	($signator = $3) ||= "unknown signator";
	if ($conf::debug) {
		debug( "GnuPG signature ok (by $signator)" );
	}
	return $signator;
}


# ---------------------------------------------------------------------------
#							  the status daemon
# ---------------------------------------------------------------------------

#
# fork a subprocess that watches the 'status' FIFO
# 
# that process blocks until someone opens the FIFO, then sends a
# signal (SIGUSR1) to the main process, expects 
#
sub fork_statusd() {
	my $statusd_pid;
	my $main_pid = $$;
	my $errs;
	local( *STATFIFO );

	$statusd_pid = open( STATUSD, "|-" );
	die "cannot fork: $!\n" if !defined( $statusd_pid );
	# parent just returns
	if ($statusd_pid) {
		msg( "log", "forked status daemon (pid $statusd_pid)\n" );
		return $statusd_pid;
	}
	# child: the status FIFO daemon

	# ignore SIGPIPE here, in case some closes the FIFO without completely
	# reading it
	$SIG{"PIPE"} = "IGNORE";
	# also ignore SIGCLD, we don't want to inherit the restart-statusd handler
	# from our parent
	$SIG{"CHLD"} = "DEFAULT";
	
	rm( $conf::statusfile );
	$errs = `$conf::mkfifo $conf::statusfile`;
	die "$main::progname: cannot create named pipe $conf::statusfile: $errs"
		if $?;
	chmod( 0644, $conf::statusfile )
		or die "Cannot set modes of $conf::statusfile: $!\n";

	# close log file, so that log rotating works
	close( LOG );
	close( STDOUT );
	close( STDERR );
	
	while( 1 ) {
		my( $status, $mup, $incw, $ds, $next_run, $last_ping, $currch, $l );

		# open the FIFO for writing; this blocks until someone (probably ftpd)
		# opens it for reading
		open( STATFIFO, ">$conf::statusfile" )
			or die "Cannot open $conf::statusfile\n";
		select( STATFIFO );
		# tell main daemon to send us status infos
		kill( $main::signo{"USR1"}, $main_pid );

		# get the infos from stdin; must loop until enough bytes received!
		my $expect_len = 3 + 2*STATNUM_LEN + STATSTR_LEN;
		for( $status = ""; ($l = length($status)) < $expect_len; ) {
			sysread( STDIN, $status, $expect_len-$l, $l );
		}

		# disassemble the status byte stream
		my $pos = 0;
		foreach ( [ mup => 1 ], [ incw => 1 ], [ ds => 1 ],
				  [ next_run => STATNUM_LEN ], [ last_ping => STATNUM_LEN ],
				  [ currch => STATSTR_LEN ] ) {
			eval "\$$_->[0] = substr( \$status, $pos, $_->[1] );";
			$pos += $_->[1];
		}
		$currch =~ s/\n+//g;

		print_status( $mup, $incw, $ds, $next_run, $last_ping, $currch );
		close( STATFIFO );

		# This sleep is necessary so that we can't reopen the FIFO
		# immediately, in case the reader hasn't closed it yet if we get to
		# the open again. Is there a better solution for this??
		sleep 1;
	}
}

#
# update the status file, in case we use a plain file and not a FIFO
#
sub write_status_file() {

	return if !$conf::statusfile;
	
	open( STATFILE, ">$conf::statusfile" ) or
		(msg( "log", "Could not open $conf::statusfile: $!\n" ), return);
	my $oldsel = select( STATFILE );

	print_status( $main::target_up, $main::incoming_writable, $main::dstat,
				  $main::next_run, $main::last_ping_time,
				  $main::current_changes );

	select( $oldsel );
	close( STATFILE );
}

sub print_status($$$$$$) {
	my $mup = shift;
	my $incw = shift;
	my $ds = shift;
	my $next_run = shift;
	my $last_ping = shift;
	my $currch = shift;
	my $approx;
	my $version;

	($version = 'Release: 0.9 $Revision: 1.51 $') =~ s/\$ ?//g;
	print "debianqueued $version\n";
	
	$approx = $conf::statusdelay ? "approx. " : "";
	
	if ($mup eq "0") {
		print "$conf::target is down, queue pausing\n";
		return;
	}
	elsif ($conf::upload_method ne "copy") {
		print "$conf::target seems to be up, last ping $approx",
			  print_time(time-$last_ping), " ago\n";
	}

	if ($incw eq "0") {
		print "The incoming directory is not writable, queue pausing\n";
		return;
	}
	
	if ($ds eq "i") {
		print "Next queue check in $approx",print_time($next_run-time),"\n";
		return;
	}
	elsif ($ds eq "c") {
		print "Checking queue directory\n";
	}
	elsif ($ds eq "u") {
		print "Uploading to $conf::target\n";
	}
	else {
		print "Bad status data from daemon: \"$mup$incw$ds\"\n";
		return;
	}
	
	print "Current job is $currch\n" if $currch;
}		

#
# format a number for sending to statusd (fixed length STATNUM_LEN)
#
sub format_status_num(\$$) {
	my $varref = shift;
	my $num = shift;
	
	$$varref = sprintf "%".STATNUM_LEN."d", $num;
}

#
# format a string for sending to statusd (fixed length STATSTR_LEN)
#
sub format_status_str(\$$) {
	my $varref = shift;
	my $str = shift;

	$$varref = substr( $str, 0, STATSTR_LEN );
	$$varref .= "\n" x (STATSTR_LEN - length($$varref));
}

#
# send a status string to the status daemon
#
# Avoid all operations that could call malloc() here! Most libc
# implementations aren't reentrant, so we may not call it from a
# signal handler. So use only already-defined variables.
#
sub send_status() {
    local $! = 0; # preserve errno
	
	# re-setup handler, in case we have broken SysV signals
	$SIG{"USR1"} = \&send_status;

	syswrite( STATUSD, $main::target_up, 1 );
	syswrite( STATUSD, $main::incoming_writable, 1 );
	syswrite( STATUSD, $main::dstat, 1 );
	syswrite( STATUSD, $main::next_run, STATNUM_LEN );
	syswrite( STATUSD, $main::last_ping_time, STATNUM_LEN );
	syswrite( STATUSD, $main::current_changes, STATSTR_LEN );
}


# ---------------------------------------------------------------------------
#							    FTP functions
# ---------------------------------------------------------------------------

#
# open FTP connection to target host if not already open
#
sub ftp_open() {

	if ($main::FTP_chan) {
		# is already open, but might have timed out; test with a cwd
1729
		return $main::FTP_chan if $main::FTP_chan->cwd( $main::current_targetdir );
1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747
		# cwd didn't work, channel is closed, try to reopen it
		$main::FTP_chan = undef;
	}
	
	if (!($main::FTP_chan = Net::FTP->new( $conf::target,
										   Debug => $conf::ftpdebug,
										   Timeout => $conf::ftptimeout ))) {
		msg( "log,mail", "Cannot open FTP server $conf::target\n" );
		goto err;
	}
	if (!$main::FTP_chan->login()) {
		msg( "log,mail", "Anonymous login on FTP server $conf::target failed\n" );
		goto err;
	}
	if (!$main::FTP_chan->binary()) {
		msg( "log,mail", "Can't set binary FTP mode on $conf::target\n" );
		goto err;
	}
1748 1749
	if (!$main::FTP_chan->cwd( $main::current_targetdir )) {
		msg( "log,mail", "Can't cd to $main::current_targetdir on $conf::target\n" );
1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811
		goto err;
	}
	debug( "opened FTP channel to $conf::target" );
	return 1;

  err:
	$main::FTP_chan = undef;
	return 0;
}

sub ftp_cmd($@) {
	my $cmd = shift;
	my ($rv, $err);
	my $direct_resp_cmd = ($cmd eq "quot");
	
	debug( "executing FTP::$cmd(".join(", ",@_).")" );
	$SIG{"ALRM"} = sub { die "timeout in FTP::$cmd\n" } ;
	alarm( $conf::remote_timeout );
	eval { $rv = $main::FTP_chan->$cmd( @_ ); };
	alarm( 0 );
	$err = "";
	$rv = (ftp_code() =~ /^2/) ? 1 : 0 if $direct_resp_cmd;
	if ($@) {
		$err = $@;
		undef $rv;
	}
	elsif (!$rv) {
		$err = ftp_response();
	}
	return ($rv, $err);
}

sub ftp_close() {
	if ($main::FTP_chan) {
		$main::FTP_chan->quit();
		$main::FTP_chan = undef;
	}
	return 1;
}

sub ftp_response() {
	return join( '', @{${*$main::FTP_chan}{'net_cmd_resp'}} );
}

sub ftp_code() {
	return ${*$main::FTP_chan}{'net_cmd_code'};
}

sub ftp_error() {
	my $code = ftp_code();
	return ($code =~ /^[45]/) ? 1 : 0;
}

# ---------------------------------------------------------------------------
#							  utility functions
# ---------------------------------------------------------------------------

sub ssh_cmd($) {
	my $cmd = shift;
	my ($msg, $stat);

	my $ecmd = "$conf::ssh $conf::ssh_options $conf::target ".
1812
			   "-l $conf::targetlogin \'cd $main::current_targetdir; $cmd\'";
1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831
	debug( "executing $ecmd" );
	$SIG{"ALRM"} = sub { die "timeout in ssh command\n" } ;
	alarm( $conf::remote_timeout );
	eval { $msg = `$ecmd 2>&1`; };
	alarm( 0 );
	if ($@) {
		$msg = $@;
		$stat = 1;
	}
	else {
		$stat = $?;
	}
	return ($msg, $stat);
}

sub scp_cmd(@) {
	my ($msg, $stat);

	my $ecmd = "$conf::scp $conf::ssh_options @_ ".
1832
			   "$conf::targetlogin\@$conf::target:$main::current_targetdir";
1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852
	debug( "executing $ecmd" );
	$SIG{"ALRM"} = sub { die "timeout in scp\n" } ;
	alarm( $conf::remote_timeout );
	eval { $msg = `$ecmd 2>&1`; };
	alarm( 0 );
	if ($@) {
		$msg = $@;
		$stat = 1;
	}
	else {
		$stat = $?;
	}
	return ($msg, $stat);
}

sub local_cmd($;$) {
	my $cmd = shift;
	my $nocd = shift;
	my ($msg, $stat);

1853
	my $ecmd = ($nocd ? "" : "cd $main::current_targetdir; ") . $cmd;
1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092
	debug( "executing $ecmd" );
	$msg = `($ecmd) 2>&1`;
	$stat = $?;
	return ($msg, $stat);
	
}

#
# check if target is alive (code stolen from Net::Ping.pm)
#
sub check_alive(;$) {
    my $timeout = shift;
    my( $saddr, $ret, $target_ip );
    local( *PINGSOCK );

	if ($conf::upload_method eq "copy") {
		format_status_num( $main::last_ping_time, time );
		$main::target_up = 1;
		return;
	}
	
    $timeout ||= 30;

	if (!($target_ip = (gethostbyname($conf::target))[4])) {
		msg( "log", "Cannot get IP address of $conf::target\n" );
		$ret = 0;
		goto out;
	}
    $saddr = pack( 'S n a4 x8', AF_INET, $main::echo_port, $target_ip );
    $SIG{'ALRM'} = sub { die } ;
    alarm( $timeout );
    
	$ret = $main::tcp_proto; # avoid warnings about unused variable
    $ret = 0;
    eval <<'EOM' ;
    return unless socket( PINGSOCK, PF_INET, SOCK_STREAM, $main::tcp_proto );
    return unless connect( PINGSOCK, $saddr );
    $ret = 1;
EOM
    alarm( 0 );
    close( PINGSOCK );
	msg( "log", "pinging $conf::target: " . ($ret ? "ok" : "down") . "\n" );
  out:
	$main::target_up = $ret ? "1" : "0";
	format_status_num( $main::last_ping_time, time );
	write_status_file() if $conf::statusdelay;
}

#
# check if incoming dir on target is writable
#
sub check_incoming_writable() {
	my $testfile = ".debianqueued-testfile";
	my ($msg, $stat);

	if ($conf::upload_method eq "ssh") {
		($msg, $stat) = ssh_cmd( "rm -f $testfile; touch $testfile; ".
								 "rm -f $testfile" );
	}
	elsif ($conf::upload_method eq "ftp") {
		my $file = "junk-for-writable-test-".format_time();
		$file =~ s/[ :.]/-/g;
		local( *F );
		open( F, ">$file" ); close( F );
		my $rv;
		($rv, $msg) = ftp_cmd( "put", $file );
		$stat = 0;
		$msg = "" if !defined $msg;
		unlink $file;
		ftp_cmd( "delete", $file );
	}
	elsif ($conf::upload_method eq "copy") {
		($msg, $stat) = local_cmd( "rm -f $testfile; touch $testfile; ".
								   "rm -f $testfile" );
	}
	chomp( $msg );
	debug( "exit status: $stat, output was: $msg" );

	if (!$stat) {
		# change incoming_writable only if ssh didn't return an error
		$main::incoming_writable =
			($msg =~ /(permission denied|read-?only file|cannot create)/i) ? "0":"1";
	}
	else {
		debug( "local error, keeping old status" );
	}
	debug( "incoming_writable = $main::incoming_writable" );
	write_status_file() if $conf::statusdelay;
	return $main::incoming_writable;
}

#
# remove a list of files, log failing ones
#
sub rm(@) {
	my $done = 0;

	foreach ( @_ ) {
		(unlink $_ and ++$done)
			or $! == ENOENT or msg( "log", "Could not delete $_: $!\n" );
	}
	return $done;
}

#
# get md5 checksum of a file
#
sub md5sum($) {
	my $file = shift;
	my $line;

	chomp( $line = `$conf::md5sum $file` );
	debug( "md5sum($file): ", $? ? "exit status $?" :
		                      $line =~ /^(\S+)/ ? $1 : "match failed" );
	return $? ? "" : $line =~ /^(\S+)/ ? $1 : "";
}

#
# check if a file probably belongs to a Debian upload
#
sub is_debian_file($) {
	my $file = shift;
	return $file =~ /\.(deb|dsc|(diff|tar)\.gz)$/ &&
		   $file !~ /\.orig\.tar\.gz/;
}

#
# try to extract maintainer email address from some a non-.changes file
# return "" if not possible
#
sub get_maintainer($) {
	my $file = shift;
	my $maintainer = "";
	local( *F );
	
	if ($file =~ /\.diff\.gz$/) {
		# parse a diff 
		open( F, "$conf::gzip -dc '$file' 2>/dev/null |" ) or return "";
		while( <F> ) {
			# look for header line of a file */debian/control
			last if m,^\+\+\+\s+[^/]+/debian/control(\s+|$),;
		}
		while( <F> ) {
			last if /^---/; # end of control file patch, no Maintainer: found
			# inside control file patch look for Maintainer: field
			$maintainer = $1, last if /^\+Maintainer:\s*(.*)$/i;
		}
		while( <F> ) { } # read to end of file to avoid broken pipe
		close( F ) or return "";
	}
	elsif ($file =~ /\.(deb|dsc|tar\.gz)$/) {
		if ($file =~ /\.deb$/ && $conf::ar) {
			# extract control.tar.gz from .deb with ar, then let tar extract
			# the control file itself
			open( F, "($conf::ar p '$file' control.tar.gz | ".
				     "$conf::tar -xOf - ".
				     "--use-compress-program $conf::gzip ".
				     "control) 2>/dev/null |" )
				or return "";
		}
		elsif ($file =~ /\.dsc$/) {
			# just do a plain grep
			debug( "get_maint: .dsc, no cmd" );
			open( F, "<$file" ) or return "";
		}
		elsif ($file =~ /\.tar\.gz$/) {
			# let tar extract a file */debian/control
			open(F, "$conf::tar -xOf '$file' ".
				    "--use-compress-program $conf::gzip ".
				    "\\*/debian/control 2>&1 |")
				or return "";
		}
		else {
			return "";
		}
		while( <F> ) {
			$maintainer = $1, last if /^Maintainer:\s*(.*)$/i;
		}
		close( F ) or return "";
	}

	return $maintainer;
}

#
# return a pattern that matches all files that probably belong to one job
#
sub debian_file_stem($) {
	my $file = shift;
	my( $pkg, $version );

	# strip file suffix
	$file =~ s,\.(deb|dsc|changes|(orig\.)?tar\.gz|diff\.gz)$,,;
	# if not is *_* (name_version), can't derive a stem and return just
	# the file's name
	return $file if !($file =~ /^([^_]+)_([^_]+)/);
	($pkg, $version) = ($1, $2);
	# strip Debian revision from version
	$version =~ s/^(.*)-[\d.+-]+$/$1/;

	return "${pkg}_${version}*";
}
	
#
# output a messages to several destinations
#
# first arg is a comma-separated list of destinations; valid are "log"
# and "mail"; rest is stuff to be printed, just as with print
# 
sub msg($@) {
	my @dest = split( ',', shift );

	if (grep /log/, @dest ) {
		my $now = format_time();
		print LOG "$now ", @_;
	}

	if (grep /mail/, @dest ) {
		$main::mail_text .= join( '', @_ );
	}
}

#
# print a debug messages, if $debug is true
#
sub debug(@) {
	return if !$conf::debug;
	my $now = format_time();
	print LOG "$now DEBUG ", @_, "\n";
}

#
# intialize the "mail" destination of msg() (this clears text,
# address, subject, ...)
#
sub init_mail(;$) {
	my $file = shift;

	$main::mail_addr = "";
2093
	$main::mail_text = "";
2094
        %main::packages  = ();
2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135
	$main::mail_subject = $file ? "Processing of $file" : "";
}

#
# finalize mail to be sent from msg(): check if something present, and
# then send out
#
sub finish_mail() {

	debug( "No mail for $main::mail_addr" )
		if $main::mail_addr && !$main::mail_text;
	return unless $main::mail_addr && $main::mail_text;

	if (!send_mail($main::mail_addr, $main::mail_subject, $main::mail_text)) {
		# store this mail in memory so it isn't lost if executing sendmail
		# failed.
		push( @main::stored_mails, { addr    => $main::mail_addr,
									 subject => $main::mail_subject,
									 text    => $main::mail_text } );
	}
	init_mail();

	# try to send out stored mails
	my $mailref;
	while( $mailref = shift(@main::stored_mails) ) {
		if (!send_mail( $mailref->{'addr'}, $mailref->{'subject'},
					    $mailref->{'text'} )) {
			unshift( @main::stored_mails, $mailref );
			last;
		}
	}
}

#
# send one mail
#
sub send_mail($$$) {
	my $addr = shift;
	my $subject = shift;
	my $text = shift;

2136
	my $package = keys %main::packages ? join(' ', keys %main::packages) : "";
2137

2138
	use Email::Send;
2139 2140 2141 2142

        unless (defined($Email::Send::Sendmail::SENDMAIL)) {
		$Email::Send::Sendmail::SENDMAIL = $conf::mail;
	}
2143

2144
	my $date = sprintf "%s", strftime("%a, %d %b %Y %T %z", (localtime(time)));
2145
	my $message = <<__MESSAGE__;
2146
To: $addr
2147
From: Archive Administrator <dak\@ftp-master.debian.org>
2148
Subject: $subject
S
Stephen Gran 已提交
2149
Date: $date
2150
X-Debian: DAK
2151 2152
__MESSAGE__

2153 2154 2155
	if (length $package) {
		$message .= "X-Debian-Package: $package\n";
	}
2156

2157 2158
	$message .= "\n$text";
	$message .= "\nGreetings,\n\n\tYour Debian queue daemon\n";
2159

2160 2161 2162 2163
	my $mail = Email::Send->new;
	for ( qw[Sendmail SMTP] ) {
		$mail->mailer($_) and last if $mail->mailer_available($_);
	}
2164

2165 2166 2167 2168
	my $ret = $mail->send($message);
	if ($ret && $ret !~ /Message sent|success/) {
		return 0;
	}
2169

2170
	return 1;
2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245 2246 2247 2248 2249 2250 2251 2252 2253 2254 2255 2256 2257 2258 2259 2260 2261 2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306
}

#
# try to find a mail address for a name in the keyrings
#
sub try_to_get_mail_addr($$) {
	my $name = shift;
	my $listref = shift;

	@$listref = ();
	open( F, "$conf::gpg --no-options --batch --no-default-keyring ".
		"--always-trust --keyring ".
		join (" --keyring ",@conf::keyrings).
		" --list-keys |" )
		or return "";
	while( <F> ) {
		if (/^pub / && / $name /) {
			/<([^>]*)>/;
			push( @$listref, $1 );
		}
	}
	close( F );

	return (@$listref >= 1) ? $listref->[0] : "";
}

#
# return current time as string
#
sub format_time() {
	my $t;

	# omit weekday and year for brevity
	($t = localtime) =~ /^\w+\s(.*)\s\d+$/;
	return $1;
}

sub print_time($) {
	my $secs = shift;
	my $hours = int($secs/(60*60));

	$secs -= $hours*60*60;
	return sprintf "%d:%02d:%02d", $hours, int($secs/60), $secs % 60;
}

#
# block some signals during queue processing
# 
# This is just to avoid data inconsistency or uploads being aborted in the
# middle. Only "soft" signals are blocked, i.e. SIGINT and SIGTERM, try harder
# ones if you really want to kill the daemon at once.
#
sub block_signals() {
	POSIX::sigprocmask( SIG_BLOCK, $main::block_sigset );
}

sub unblock_signals() {
	POSIX::sigprocmask( SIG_UNBLOCK, $main::block_sigset );
}

#
# process SIGHUP: close log file and reopen it (for logfile cycling)
#
sub close_log($) {
	close( LOG );
	close( STDOUT );
	close( STDERR );

	open( LOG, ">>$conf::logfile" )
		or die "Cannot open my logfile $conf::logfile: $!\n";
	chmod( 0644, $conf::logfile )
		or msg( "log", "Cannot set modes of $conf::logfile: $!\n" );
	select( (select(LOG), $| = 1)[0] );

	open( STDOUT, ">&LOG" )
		or msg( "log", "$main::progname: Can't redirect stdout to ".
			    "$conf::logfile: $!\n" );
	open( STDERR, ">&LOG" )
		or msg( "log", "$main::progname: Can't redirect stderr to ".
			    "$conf::logfile: $!\n" );
	msg( "log", "Restart after SIGHUP\n" );
}

#
# process SIGCHLD: check if it was our statusd process
#
sub kid_died($) {
	my $pid;

	# reap statusd, so that it's no zombie when we try to kill(0) it
	waitpid( $main::statusd_pid, WNOHANG );

# Uncomment the following line if your Perl uses unreliable System V signal
# (i.e. if handlers reset to default if the signal is delivered).
# (Unfortunately, the re-setup can't be done in any case, since on some
# systems this will cause the SIGCHLD to be delivered again if there are
# still unreaped children :-(( )
	
#	 $SIG{"CHLD"} = \&kid_died; # resetup handler for SysV
}

sub restart_statusd() {
	# restart statusd if it died
	if (!kill( 0, $main::statusd_pid)) {
		close( STATUSD ); # close out pipe end
		$main::statusd_pid = fork_statusd();
	}
}

#
# process a fatal signal: cleanup and exit
#
sub fatal_signal($) {
	my $signame = shift;
	my $sig;
	
	# avoid recursions of fatal_signal in case of BSD signals
	foreach $sig ( qw( ILL ABRT BUS FPE SEGV PIPE ) ) {
		$SIG{$sig} = "DEFAULT";
	}

	if ($$ == $main::maind_pid) {
		# only the main daemon should do this
		kill( $main::signo{"TERM"}, $main::statusd_pid )
			if defined $main::statusd_pid;
		unlink( $conf::statusfile, $conf::pidfile );
	}
	msg( "log", "Caught SIG$signame -- exiting (pid $$)\n" );
	exit 1;
}


# Local Variables:
#  tab-width: 4
#  fill-column: 78
# End: