]> git.ipfire.org Git - thirdparty/git.git/blame - builtin/verify-tag.c
builtin/verify-tag.c: ignore SIGPIPE in gpg-interface
[thirdparty/git.git] / builtin / verify-tag.c
CommitLineData
2ae68fcb
CR
1/*
2 * Builtin "git verify-tag"
3 *
4 * Copyright (c) 2007 Carlos Rica <jasampler@gmail.com>
5 *
6 * Based on git-verify-tag.sh
7 */
8#include "cache.h"
9#include "builtin.h"
10#include "tag.h"
11#include "run-command.h"
12#include <signal.h>
4855b2a2 13#include "parse-options.h"
2f47eae2 14#include "gpg-interface.h"
2ae68fcb 15
4855b2a2 16static const char * const verify_tag_usage[] = {
9c9b4f2f 17 N_("git verify-tag [-v | --verbose] <tag>..."),
4855b2a2
SB
18 NULL
19};
2ae68fcb 20
e18443ec 21static int run_gpg_verify(const char *buf, unsigned long size, unsigned flags)
2ae68fcb 22{
a4cc18f2 23 struct signature_check sigc;
2f47eae2 24 int len;
434060ec 25 int ret;
2ae68fcb 26
a4cc18f2 27 memset(&sigc, 0, sizeof(sigc));
28
ac58c4c7 29 len = parse_signature(buf, size);
2ae68fcb 30
ca194d50 31 if (size == len) {
e18443ec 32 if (flags & GPG_VERIFY_VERBOSE)
ca194d50 33 write_in_full(1, buf, len);
2f47eae2 34 return error("no signature found");
ca194d50 35 }
2ae68fcb 36
434060ec 37 ret = check_signature(buf, len, buf + len, size - len, &sigc);
e18443ec 38 print_signature_buffer(&sigc, flags);
a4cc18f2 39
40 signature_check_clear(&sigc);
434060ec 41 return ret;
2ae68fcb
CR
42}
43
e18443ec 44static int verify_tag(const char *name, unsigned flags)
2ae68fcb
CR
45{
46 enum object_type type;
47 unsigned char sha1[20];
48 char *buf;
49 unsigned long size;
50 int ret;
51
52 if (get_sha1(name, sha1))
53 return error("tag '%s' not found.", name);
54
55 type = sha1_object_info(sha1, NULL);
56 if (type != OBJ_TAG)
57 return error("%s: cannot verify a non-tag object of type %s.",
58 name, typename(type));
59
60 buf = read_sha1_file(sha1, &type, &size);
61 if (!buf)
62 return error("%s: unable to read file.", name);
63
e18443ec 64 ret = run_gpg_verify(buf, size, flags);
2ae68fcb
CR
65
66 free(buf);
67 return ret;
68}
69
a2c25061
AZ
70static int git_verify_tag_config(const char *var, const char *value, void *cb)
71{
72 int status = git_gpg_config(var, value, cb);
73 if (status)
74 return status;
75 return git_default_config(var, value, cb);
76}
77
2ae68fcb
CR
78int cmd_verify_tag(int argc, const char **argv, const char *prefix)
79{
80 int i = 1, verbose = 0, had_error = 0;
e18443ec 81 unsigned flags = 0;
4855b2a2 82 const struct option verify_tag_options[] = {
f6008eb2 83 OPT__VERBOSE(&verbose, N_("print tag contents")),
e18443ec 84 OPT_BIT(0, "raw", &flags, N_("print raw gpg status output"), GPG_VERIFY_RAW),
4855b2a2
SB
85 OPT_END()
86 };
2ae68fcb 87
a2c25061 88 git_config(git_verify_tag_config, NULL);
2ae68fcb 89
4855b2a2
SB
90 argc = parse_options(argc, argv, prefix, verify_tag_options,
91 verify_tag_usage, PARSE_OPT_KEEP_ARGV0);
d2761895 92 if (argc <= i)
4855b2a2 93 usage_with_options(verify_tag_usage, verify_tag_options);
d2761895 94
e18443ec 95 if (verbose)
96 flags |= GPG_VERIFY_VERBOSE;
97
2ae68fcb 98 while (i < argc)
e18443ec 99 if (verify_tag(argv[i++], flags))
2ae68fcb
CR
100 had_error = 1;
101 return had_error;
102}