ejPKUddlmZgdZddlZddlZddlZddlZddlZddlZddl m Z m Z ddlm Z m Z mZmZmZmZddlmZddlmZddlmZmZmZerddlZdd lmZmZdd l mZd?dZd@dZ dAdZ!e dBdZ"dCdZ#dDdZ$dEd#Z%dFd%Z&dFd&Z'ejd'kr dGd*Z(dHd+Z)ndHd,Z)dId.Z*dJd1Z+edKd3Z,dLd7Z-dMd9Z.ejd'kZ/d:e0d;<ejd'ko ej1ej2vZ3d:e0d<<ej1ej4vZ5d:e0d=<gd>Z6dS)N) annotations)pathlibplatformsecretsN)contextmanagersuppress)EACCESEINVALEIOEISDIRENOSYSEXDEV)cache)Path) TYPE_CHECKINGFinalcast)Callable Generator)AbstractContextManagerfdintdatabytesreturnNonect|}|r>tj||x}dkrttd||d}| HX&&  |I%&&D <7 " "!&*=xHH H(8(CCC   , Ebi i2#<< )DD 777 E   HX         FF f&98DDD E E E Es %% C55 DD Path | strcXt|jdddS)zp Ensure the directory containing the file exists (create it if necessary). :param filename: file. T)parentsexist_okN)rparentmkdir)r's r$ensure_directory_existsrBXs, NNt<<<<>BBCC%cdtj|}tt5t ||j|jtjtj ||r!t| ddddS#1swxYwYdS)a Remove *lock_file* while it still names the file open as *fd*; the caller closes the descriptor afterwards. Where the platform has an atomic exchange, a stale break takes the file through it, so a peer's marker found at the path goes back. Otherwise the path is unlinked by name if it still names this file. The open descriptor keeps the inode allocated, so a matching number cannot belong to a successor's marker. :raises OSError: if the descriptor cannot be read or the unlink fails. N) rrLrr9break_lock_filest_mtimerMpathsamestatr-runlink)rCrowns r$remove_own_filerXs"C # $ $%% 3<<<< 7  BHY// 5 5 % OO " " $ $ $%%%%%%%%%%%%%%%%%%sA/B%%B),B) directoryos.stat_resultr@ int | Nonectjdkr>|jtjzr*|jt j|jhvrdn|jSdS)a Return the uid that owns *directory* when another account controls it under a sticky parent. A lock that keeps its ownership records in a directory relies on them staying in place. The sticky bit (a directory flag that lets only a file's owner remove it) on a parent such as ``/tmp`` stops other accounts from renaming the directory away. A directory that this account or the parent's owner owns is therefore safe there. One that another account owns is outside the lock's control. Without the sticky bit, any process that can create the directory can also rename this account's own one away, so a refusal there would change nothing. Linux applies the same rule for ``fs.protected_regular``. :param directory: ``lstat`` of the directory found in place. :param parent: ``stat`` of the directory that holds it. :returns: the owning uid when another account controls the directory, otherwise ``None``. r*N)r1rr0r.S_ISVTXst_uidrgeteuid)rYr@s r$foreign_directory_ownerr`sK" |w6>DL#@ 'BJLL&-+HHHttiN^^ 4r& mtime_beforefloat ino_beforec2tj|x}j|ks |j|krdS|dtjdt jd}trt||||dStrt||||dSdS)a Remove the lock file a caller found stale with modification time *mtime_before* and inode *ino_before*. The caller keeps the judged file open until we return, through :func:`pin_inode` or its own descriptor, so no other file can carry *ino_before* meanwhile. Right before breaking we ``lstat`` the lock again and leave it alone if a peer recreated it since the caller judged it stale, as Mercurial re-reads a lock under its break lock. On Linux (``renameat2``) and macOS (``renamex_np``) the platform can exchange two names in one step. There we swap the marker with a placeholder of our own, so the lock path never stands empty, and a contender that polls meanwhile finds a file it cannot parse and waits. If the file we took is not the one judged stale, a peer recreated the lock, and a second exchange puts it back. Otherwise we remove it and then our placeholder. Of several processes racing to break the same lock, only one takes the stale file. Windows cannot exchange names, but it refuses to rename a marker its live holder keeps open. There we rename the marker aside and, if it was recreated after all, link it back. ``link`` never replaces a name, so a marker a third process created meanwhile keeps the path. Elsewhere without an exchange (NFS, SMB and other filesystems that refuse it, platforms without the call) a rename would leave the path empty beside a possibly live holder. We then do not move the marker, and the caller waits for ``timeout`` or ``break_lock()``. We compare inodes as well as modification times, because NFS and FAT store coarse modification times. The times are compared for equality, since a file's owner can set any time. We ``lstat`` so a symlink a peer swaps in is never followed. The break name carries a random token so no other process can guess it. :param lock_file: path to the lock file to break. :param mtime_before: modification time the caller saw when it judged the lock stale. :param ino_before: inode number the caller saw when it judged the lock stale. :raises OSError: if taking the marker fails, for example because the file vanished, another user owns it in a sticky directory, or on Windows its holder keeps it open. Nz.break..) rr-rSrMgetpidr token_hexexchange_supported _swap_out_MOVES_WITHOUT_EXCHANGE_break_by_rename)rCrarccurrent break_paths r$rRrRs@8I&&&0L@@GNV`D`D` )WW")++WW@QRT@U@UWWJJ)ZzBBBBB JJ jIIIIIJJr&rnc tj|tjtjztjzt tddzd} t |dtjdt||}n#t$rd}YnwxYw|s8t|  tj |dStj|x}j|kr|j|krt| tjtj|tj|r!t| n1t||t| tj |dS#tj |wxYw)NrHrizfilelock/break  F)rrKO_WRONLYO_CREATO_EXCLrIr%rgencodeexchange_namesr!rrVrNr-rSrMrTrUrL)rCrnrarcr exchangedgrabbeds r$rjrjs BK"*$> %%r&sourcetargetc tdt\}}|tj|tj||x}sdS|tt t ttdtttdthvrdSt|tj ||d|)a" Swap the names *source* and *target* in one step, so neither ever stands empty, where :func:`exchange_supported`. :returns: ``False`` where the filesystem cannot, so the caller falls back :raises OSError: for any other failure, such as a missing name or a denied rename z.tuple[Callable[[bytes, bytes, int], int], int]TENOTSUP EOPNOTSUPPFN) rrrfsencoder r rrIerrnor!strerror)rrrenamer exchange_flagerrors r$rurus""RT`TbTbccG]WR[00"+f2E2E}UU UEt y&(I(I7SXZfhnKoKopppu %U++VT6 B BBr&5tuple[Callable[[bytes, bytes, int], int], int] | NonecP ddln#t$rYdSwxYwtjdvr't jddx}dS|dfStjdkrGjddjjjjg_ j _ dfd }|dfSdS)Nr>linuxandroidT) use_errnodarwinrrrrOrrcH|||dkrdnjSNr) get_errno)rrrOctypes renamex_nps r$call_renamex_npz%_rename_call..call_renamex_np@s1" 66599Q>>11DTFDTDVDV Vr&rrrrrOrrr) r ImportErrorr1r _renameat2CDLLrc_char_pc_uintargtypesc_intrestype) renameat2rrrs @@r$rr/s tt |+++#KFK$E$E$EFF FI O4!| |x'FK===H %O #\  W W W W W W W## 4s  libc ctypes.CDLL)Callable[[bytes, bytes, int], int] | Nonec ddlddddddddddd }|tjxdS|jj_d dfd }|S)Nri<iai~iiei[) x86_64i386i686armv7larmv8laarch64riscv64 loongarch64ppc64les390xirrrrOrrcjjj|jj|j|f}|dkrdnjSr)c_longrrrr)rrrO argumentsat_fdcwdrnumbersyscalls r$call_renameat2z"_renameat2..call_renameat2_s FM& ! ! FL " " FOF # # FL " " FOF # # FM%  GY'1,,qq2B&2B2D2DDr&r)rgetrmachinerrr)rnumbersrrrrrs @@@@r$rrGsMMM  G++h.00111:t\GmGOH E E E E E E E E E r&namec|trtj|ddStj|dt dS)Nrz)_SUPPORTS_UTIME_FDrutime_SUPPORTS_UTIME_NOFOLLOW)rrs r$touchrmsD  THT4-E)EFFFFFFr&z Final[bool]rkrr) rRrBrurir`rPr;rXrr}r%)rrrrrr)r'r(rr)r'r<rr)rCr(rrD)rCr(rrrr)rYrZr@rZrr[)rCr(rarbrcrrr) rCr(rnr(rarbrcrrr)rTr(rr)rTr(rr)rr)rr(rr(rr)rr)rrrr)rr(rrrr)7 __future__r__lazy_modules__rrrrr.r1 contextlibrrr r r r r r functoolsrrrtypingrrrrcollections.abcrrrr%r;rBrPrXr`rRrjrlr{r}rirurrrrk__annotations__r supports_fdrr8r__all__rr&r$rs."""""""555  ////////<<<<<<<<<<<<<<<<----------2MMM33333333111111((((*)E)E)E)EX====!!!!H%%%%$,&J&J&J&JR6 $ $ $ $ <7JJJJ)))))&&&& CCCC$.####LGGGG(+|w'>>>>>#&,'"9"Xbh".>XXXXX(*B4O(OOOOO   r&