http: prefer CURLOPT_SEEKFUNCTION to CURLOPT_IOCTLFUNCTION

The IOCTLFUNCTION option has been deprecated, and generates a compiler warning in recent versions of curl. We can switch to using SEEKFUNCTION instead. It was added in 2008 via curl 7.18.0; our INSTALL file already indicates we require at least curl 7.19.4. But there's one catch: curl says we should use CURL_SEEKFUNC_{OK,FAIL}, and those didn't arrive until 7.19.5. One workaround would be to use a bare 0/1 here (or define our own macros). But let's just bump the minimum required version to 7.19.5. That version is only a minor version bump from our existing requirement, and is only a 2 month time bump for versions that are almost 13 years old. So it's not likely that anybody cares about the distinction. Switching means we have to rewrite the ioctl functions into seek functions. In some ways they are simpler (seeking is the only operation), but in some ways more complex (the ioctl allowed only a full rewind, but now we can seek to arbitrary offsets). Curl will only ever use SEEK_SET (per their documentation), so I didn't bother implementing anything else, since it would naturally be completely untested. This seems unlikely to change, but I added an assertion just in case. Likewise, I doubt curl will ever try to seek outside of the buffer sizes we've told it, but I erred on the defensive side here, rather than do an out-of-bounds read. Signed-off-by: Jeff King <peff@peff.net> Signed-off-by: Junio C Hamano <gitster@pobox.com>

Jeff King committed Jan 16, 2023 at 22:04 UTC fe7e44e1ab7dc1b39757a4bffdc577ed2755beb6
5 files changed +26 -30
INSTALL
+1 -1
@@ -139,7 +139,7 @@ Issues of note:
139 not need that functionality, use NO_CURL to build without
140 it.
141
142 - Git requires version "7.19.4" or later of "libcurl" to build
142 + Git requires version "7.19.5" or later of "libcurl" to build
143 without NO_CURL. This version requirement may be bumped in
144 the future.
145
http-push.c
+2 -2
@@ -203,8 +203,8 @@ static void curl_setup_http(CURL *curl, const char *url,
203 curl_easy_setopt(curl, CURLOPT_INFILE, buffer);
204 curl_easy_setopt(curl, CURLOPT_INFILESIZE, buffer->buf.len);
205 curl_easy_setopt(curl, CURLOPT_READFUNCTION, fread_buffer);
206 - curl_easy_setopt(curl, CURLOPT_IOCTLFUNCTION, ioctl_buffer);
207 - curl_easy_setopt(curl, CURLOPT_IOCTLDATA, buffer);
206 + curl_easy_setopt(curl, CURLOPT_SEEKFUNCTION, seek_buffer);
207 + curl_easy_setopt(curl, CURLOPT_SEEKDATA, buffer);
208 curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, write_fn);
209 curl_easy_setopt(curl, CURLOPT_NOBODY, 0);
210 curl_easy_setopt(curl, CURLOPT_CUSTOMREQUEST, custom_req);
http.c
+9 -11
@@ -157,21 +157,19 @@ size_t fread_buffer(char *ptr, size_t eltsize, size_t nmemb, void *buffer_)
157 return size / eltsize;
158 }
159
160 -curlioerr ioctl_buffer(CURL *handle, int cmd, void *clientp)
160 +int seek_buffer(void *clientp, curl_off_t offset, int origin)
161 {
162 struct buffer *buffer = clientp;
163
164 - switch (cmd) {
165 - case CURLIOCMD_NOP:
166 - return CURLIOE_OK;
167 -
168 - case CURLIOCMD_RESTARTREAD:
169 - buffer->posn = 0;
170 - return CURLIOE_OK;
171 -
172 - default:
173 - return CURLIOE_UNKNOWNCMD;
164 + if (origin != SEEK_SET)
165 + BUG("seek_buffer only handles SEEK_SET");
166 + if (offset < 0 || offset >= buffer->buf.len) {
167 + error("curl seek would be outside of buffer");
168 + return CURL_SEEKFUNC_FAIL;
169 }
170 +
171 + buffer->posn = offset;
172 + return CURL_SEEKFUNC_OK;
173 }
174
175 size_t fwrite_buffer(char *ptr, size_t eltsize, size_t nmemb, void *buffer_)
http.h
+1 -1
@@ -40,7 +40,7 @@ struct buffer {
40 size_t fread_buffer(char *ptr, size_t eltsize, size_t nmemb, void *strbuf);
41 size_t fwrite_buffer(char *ptr, size_t eltsize, size_t nmemb, void *strbuf);
42 size_t fwrite_null(char *ptr, size_t eltsize, size_t nmemb, void *strbuf);
43 -curlioerr ioctl_buffer(CURL *handle, int cmd, void *clientp);
43 +int seek_buffer(void *clientp, curl_off_t offset, int origin);
44
45 /* Slot lifecycle functions */
46 struct active_request_slot *get_active_slot(void);
remote-curl.c
+13 -15
@@ -717,25 +717,23 @@ static size_t rpc_out(void *ptr, size_t eltsize,
717 return avail;
718 }
719
720 -static curlioerr rpc_ioctl(CURL *handle, int cmd, void *clientp)
720 +static int rpc_seek(void *clientp, curl_off_t offset, int origin)
721 {
722 struct rpc_state *rpc = clientp;
723
724 - switch (cmd) {
725 - case CURLIOCMD_NOP:
726 - return CURLIOE_OK;
724 + if (origin != SEEK_SET)
725 + BUG("rpc_seek only handles SEEK_SET, not %d", origin);
726
728 - case CURLIOCMD_RESTARTREAD:
729 - if (rpc->initial_buffer) {
730 - rpc->pos = 0;
731 - return CURLIOE_OK;
727 + if (rpc->initial_buffer) {
728 + if (offset < 0 || offset > rpc->len) {
729 + error("curl seek would be outside of rpc buffer");
730 + return CURL_SEEKFUNC_FAIL;
731 }
733 - error(_("unable to rewind rpc post data - try increasing http.postBuffer"));
734 - return CURLIOE_FAILRESTART;
735 -
736 - default:
737 - return CURLIOE_UNKNOWNCMD;
732 + rpc->pos = offset;
733 + return CURL_SEEKFUNC_OK;
734 }
735 + error(_("unable to rewind rpc post data - try increasing http.postBuffer"));
736 + return CURL_SEEKFUNC_FAIL;
737 }
738
739 struct check_pktline_state {
@@ -959,8 +957,8 @@ retry:
957 rpc->initial_buffer = 1;
958 curl_easy_setopt(slot->curl, CURLOPT_READFUNCTION, rpc_out);
959 curl_easy_setopt(slot->curl, CURLOPT_INFILE, rpc);
962 - curl_easy_setopt(slot->curl, CURLOPT_IOCTLFUNCTION, rpc_ioctl);
963 - curl_easy_setopt(slot->curl, CURLOPT_IOCTLDATA, rpc);
960 + curl_easy_setopt(slot->curl, CURLOPT_SEEKFUNCTION, rpc_seek);
961 + curl_easy_setopt(slot->curl, CURLOPT_SEEKDATA, rpc);
962 if (options.verbosity > 1) {
963 fprintf(stderr, "POST %s (chunked)\n", rpc->service_name);
964 fflush(stderr);