xref: /freebsd/crypto/openssh/sftp-client.c (revision 193d9e768ba63fcfb187cfd17f461f7d41345048)
1 /* $OpenBSD: sftp-client.c,v 1.124 2016/05/25 23:48:45 schwarze Exp $ */
2 /*
3  * Copyright (c) 2001-2004 Damien Miller <djm@openbsd.org>
4  *
5  * Permission to use, copy, modify, and distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 /* XXX: memleaks */
19 /* XXX: signed vs unsigned */
20 /* XXX: remove all logging, only return status codes */
21 /* XXX: copy between two remote sites */
22 
23 #include "includes.h"
24 
25 #include <sys/param.h>	/* MIN MAX */
26 #include <sys/types.h>
27 #ifdef HAVE_SYS_STATVFS_H
28 #include <sys/statvfs.h>
29 #endif
30 #include "openbsd-compat/sys-queue.h"
31 #ifdef HAVE_SYS_STAT_H
32 # include <sys/stat.h>
33 #endif
34 #ifdef HAVE_SYS_TIME_H
35 # include <sys/time.h>
36 #endif
37 #include <sys/uio.h>
38 
39 #include <dirent.h>
40 #include <errno.h>
41 #include <fcntl.h>
42 #include <signal.h>
43 #include <stdarg.h>
44 #include <stdio.h>
45 #include <stdlib.h>
46 #include <string.h>
47 #include <unistd.h>
48 
49 #include "xmalloc.h"
50 #include "ssherr.h"
51 #include "sshbuf.h"
52 #include "log.h"
53 #include "atomicio.h"
54 #include "progressmeter.h"
55 #include "misc.h"
56 #include "utf8.h"
57 
58 #include "sftp.h"
59 #include "sftp-common.h"
60 #include "sftp-client.h"
61 
62 extern volatile sig_atomic_t interrupted;
63 extern int showprogress;
64 
65 /* Minimum amount of data to read at a time */
66 #define MIN_READ_SIZE	512
67 
68 /* Maximum depth to descend in directory trees */
69 #define MAX_DIR_DEPTH 64
70 
71 struct sftp_conn {
72 	int fd_in;
73 	int fd_out;
74 	u_int transfer_buflen;
75 	u_int num_requests;
76 	u_int version;
77 	u_int msg_id;
78 #define SFTP_EXT_POSIX_RENAME	0x00000001
79 #define SFTP_EXT_STATVFS	0x00000002
80 #define SFTP_EXT_FSTATVFS	0x00000004
81 #define SFTP_EXT_HARDLINK	0x00000008
82 #define SFTP_EXT_FSYNC		0x00000010
83 	u_int exts;
84 	u_int64_t limit_kbps;
85 	struct bwlimit bwlimit_in, bwlimit_out;
86 };
87 
88 static u_char *
89 get_handle(struct sftp_conn *conn, u_int expected_id, size_t *len,
90     const char *errfmt, ...) __attribute__((format(printf, 4, 5)));
91 
92 /* ARGSUSED */
93 static int
94 sftpio(void *_bwlimit, size_t amount)
95 {
96 	struct bwlimit *bwlimit = (struct bwlimit *)_bwlimit;
97 
98 	bandwidth_limit(bwlimit, amount);
99 	return 0;
100 }
101 
102 static void
103 send_msg(struct sftp_conn *conn, struct sshbuf *m)
104 {
105 	u_char mlen[4];
106 	struct iovec iov[2];
107 
108 	if (sshbuf_len(m) > SFTP_MAX_MSG_LENGTH)
109 		fatal("Outbound message too long %zu", sshbuf_len(m));
110 
111 	/* Send length first */
112 	put_u32(mlen, sshbuf_len(m));
113 	iov[0].iov_base = mlen;
114 	iov[0].iov_len = sizeof(mlen);
115 	iov[1].iov_base = (u_char *)sshbuf_ptr(m);
116 	iov[1].iov_len = sshbuf_len(m);
117 
118 	if (atomiciov6(writev, conn->fd_out, iov, 2,
119 	    conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_out) !=
120 	    sshbuf_len(m) + sizeof(mlen))
121 		fatal("Couldn't send packet: %s", strerror(errno));
122 
123 	sshbuf_reset(m);
124 }
125 
126 static void
127 get_msg(struct sftp_conn *conn, struct sshbuf *m)
128 {
129 	u_int msg_len;
130 	u_char *p;
131 	int r;
132 
133 	if ((r = sshbuf_reserve(m, 4, &p)) != 0)
134 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
135 	if (atomicio6(read, conn->fd_in, p, 4,
136 	    conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_in) != 4) {
137 		if (errno == EPIPE)
138 			fatal("Connection closed");
139 		else
140 			fatal("Couldn't read packet: %s", strerror(errno));
141 	}
142 
143 	if ((r = sshbuf_get_u32(m, &msg_len)) != 0)
144 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
145 	if (msg_len > SFTP_MAX_MSG_LENGTH)
146 		fatal("Received message too long %u", msg_len);
147 
148 	if ((r = sshbuf_reserve(m, msg_len, &p)) != 0)
149 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
150 	if (atomicio6(read, conn->fd_in, p, msg_len,
151 	    conn->limit_kbps > 0 ? sftpio : NULL, &conn->bwlimit_in)
152 	    != msg_len) {
153 		if (errno == EPIPE)
154 			fatal("Connection closed");
155 		else
156 			fatal("Read packet: %s", strerror(errno));
157 	}
158 }
159 
160 static void
161 send_string_request(struct sftp_conn *conn, u_int id, u_int code, const char *s,
162     u_int len)
163 {
164 	struct sshbuf *msg;
165 	int r;
166 
167 	if ((msg = sshbuf_new()) == NULL)
168 		fatal("%s: sshbuf_new failed", __func__);
169 	if ((r = sshbuf_put_u8(msg, code)) != 0 ||
170 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
171 	    (r = sshbuf_put_string(msg, s, len)) != 0)
172 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
173 	send_msg(conn, msg);
174 	debug3("Sent message fd %d T:%u I:%u", conn->fd_out, code, id);
175 	sshbuf_free(msg);
176 }
177 
178 static void
179 send_string_attrs_request(struct sftp_conn *conn, u_int id, u_int code,
180     const void *s, u_int len, Attrib *a)
181 {
182 	struct sshbuf *msg;
183 	int r;
184 
185 	if ((msg = sshbuf_new()) == NULL)
186 		fatal("%s: sshbuf_new failed", __func__);
187 	if ((r = sshbuf_put_u8(msg, code)) != 0 ||
188 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
189 	    (r = sshbuf_put_string(msg, s, len)) != 0 ||
190 	    (r = encode_attrib(msg, a)) != 0)
191 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
192 	send_msg(conn, msg);
193 	debug3("Sent message fd %d T:%u I:%u", conn->fd_out, code, id);
194 	sshbuf_free(msg);
195 }
196 
197 static u_int
198 get_status(struct sftp_conn *conn, u_int expected_id)
199 {
200 	struct sshbuf *msg;
201 	u_char type;
202 	u_int id, status;
203 	int r;
204 
205 	if ((msg = sshbuf_new()) == NULL)
206 		fatal("%s: sshbuf_new failed", __func__);
207 	get_msg(conn, msg);
208 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
209 	    (r = sshbuf_get_u32(msg, &id)) != 0)
210 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
211 
212 	if (id != expected_id)
213 		fatal("ID mismatch (%u != %u)", id, expected_id);
214 	if (type != SSH2_FXP_STATUS)
215 		fatal("Expected SSH2_FXP_STATUS(%u) packet, got %u",
216 		    SSH2_FXP_STATUS, type);
217 
218 	if ((r = sshbuf_get_u32(msg, &status)) != 0)
219 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
220 	sshbuf_free(msg);
221 
222 	debug3("SSH2_FXP_STATUS %u", status);
223 
224 	return status;
225 }
226 
227 static u_char *
228 get_handle(struct sftp_conn *conn, u_int expected_id, size_t *len,
229     const char *errfmt, ...)
230 {
231 	struct sshbuf *msg;
232 	u_int id, status;
233 	u_char type;
234 	u_char *handle;
235 	char errmsg[256];
236 	va_list args;
237 	int r;
238 
239 	va_start(args, errfmt);
240 	if (errfmt != NULL)
241 		vsnprintf(errmsg, sizeof(errmsg), errfmt, args);
242 	va_end(args);
243 
244 	if ((msg = sshbuf_new()) == NULL)
245 		fatal("%s: sshbuf_new failed", __func__);
246 	get_msg(conn, msg);
247 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
248 	    (r = sshbuf_get_u32(msg, &id)) != 0)
249 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
250 
251 	if (id != expected_id)
252 		fatal("%s: ID mismatch (%u != %u)",
253 		    errfmt == NULL ? __func__ : errmsg, id, expected_id);
254 	if (type == SSH2_FXP_STATUS) {
255 		if ((r = sshbuf_get_u32(msg, &status)) != 0)
256 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
257 		if (errfmt != NULL)
258 			error("%s: %s", errmsg, fx2txt(status));
259 		sshbuf_free(msg);
260 		return(NULL);
261 	} else if (type != SSH2_FXP_HANDLE)
262 		fatal("%s: Expected SSH2_FXP_HANDLE(%u) packet, got %u",
263 		    errfmt == NULL ? __func__ : errmsg, SSH2_FXP_HANDLE, type);
264 
265 	if ((r = sshbuf_get_string(msg, &handle, len)) != 0)
266 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
267 	sshbuf_free(msg);
268 
269 	return handle;
270 }
271 
272 static Attrib *
273 get_decode_stat(struct sftp_conn *conn, u_int expected_id, int quiet)
274 {
275 	struct sshbuf *msg;
276 	u_int id;
277 	u_char type;
278 	int r;
279 	static Attrib a;
280 
281 	if ((msg = sshbuf_new()) == NULL)
282 		fatal("%s: sshbuf_new failed", __func__);
283 	get_msg(conn, msg);
284 
285 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
286 	    (r = sshbuf_get_u32(msg, &id)) != 0)
287 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
288 
289 	debug3("Received stat reply T:%u I:%u", type, id);
290 	if (id != expected_id)
291 		fatal("ID mismatch (%u != %u)", id, expected_id);
292 	if (type == SSH2_FXP_STATUS) {
293 		u_int status;
294 
295 		if ((r = sshbuf_get_u32(msg, &status)) != 0)
296 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
297 		if (quiet)
298 			debug("Couldn't stat remote file: %s", fx2txt(status));
299 		else
300 			error("Couldn't stat remote file: %s", fx2txt(status));
301 		sshbuf_free(msg);
302 		return(NULL);
303 	} else if (type != SSH2_FXP_ATTRS) {
304 		fatal("Expected SSH2_FXP_ATTRS(%u) packet, got %u",
305 		    SSH2_FXP_ATTRS, type);
306 	}
307 	if ((r = decode_attrib(msg, &a)) != 0) {
308 		error("%s: couldn't decode attrib: %s", __func__, ssh_err(r));
309 		sshbuf_free(msg);
310 		return NULL;
311 	}
312 	sshbuf_free(msg);
313 
314 	return &a;
315 }
316 
317 static int
318 get_decode_statvfs(struct sftp_conn *conn, struct sftp_statvfs *st,
319     u_int expected_id, int quiet)
320 {
321 	struct sshbuf *msg;
322 	u_char type;
323 	u_int id;
324 	u_int64_t flag;
325 	int r;
326 
327 	if ((msg = sshbuf_new()) == NULL)
328 		fatal("%s: sshbuf_new failed", __func__);
329 	get_msg(conn, msg);
330 
331 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
332 	    (r = sshbuf_get_u32(msg, &id)) != 0)
333 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
334 
335 	debug3("Received statvfs reply T:%u I:%u", type, id);
336 	if (id != expected_id)
337 		fatal("ID mismatch (%u != %u)", id, expected_id);
338 	if (type == SSH2_FXP_STATUS) {
339 		u_int status;
340 
341 		if ((r = sshbuf_get_u32(msg, &status)) != 0)
342 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
343 		if (quiet)
344 			debug("Couldn't statvfs: %s", fx2txt(status));
345 		else
346 			error("Couldn't statvfs: %s", fx2txt(status));
347 		sshbuf_free(msg);
348 		return -1;
349 	} else if (type != SSH2_FXP_EXTENDED_REPLY) {
350 		fatal("Expected SSH2_FXP_EXTENDED_REPLY(%u) packet, got %u",
351 		    SSH2_FXP_EXTENDED_REPLY, type);
352 	}
353 
354 	memset(st, 0, sizeof(*st));
355 	if ((r = sshbuf_get_u64(msg, &st->f_bsize)) != 0 ||
356 	    (r = sshbuf_get_u64(msg, &st->f_frsize)) != 0 ||
357 	    (r = sshbuf_get_u64(msg, &st->f_blocks)) != 0 ||
358 	    (r = sshbuf_get_u64(msg, &st->f_bfree)) != 0 ||
359 	    (r = sshbuf_get_u64(msg, &st->f_bavail)) != 0 ||
360 	    (r = sshbuf_get_u64(msg, &st->f_files)) != 0 ||
361 	    (r = sshbuf_get_u64(msg, &st->f_ffree)) != 0 ||
362 	    (r = sshbuf_get_u64(msg, &st->f_favail)) != 0 ||
363 	    (r = sshbuf_get_u64(msg, &st->f_fsid)) != 0 ||
364 	    (r = sshbuf_get_u64(msg, &flag)) != 0 ||
365 	    (r = sshbuf_get_u64(msg, &st->f_namemax)) != 0)
366 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
367 
368 	st->f_flag = (flag & SSH2_FXE_STATVFS_ST_RDONLY) ? ST_RDONLY : 0;
369 	st->f_flag |= (flag & SSH2_FXE_STATVFS_ST_NOSUID) ? ST_NOSUID : 0;
370 
371 	sshbuf_free(msg);
372 
373 	return 0;
374 }
375 
376 struct sftp_conn *
377 do_init(int fd_in, int fd_out, u_int transfer_buflen, u_int num_requests,
378     u_int64_t limit_kbps)
379 {
380 	u_char type;
381 	struct sshbuf *msg;
382 	struct sftp_conn *ret;
383 	int r;
384 
385 	ret = xcalloc(1, sizeof(*ret));
386 	ret->msg_id = 1;
387 	ret->fd_in = fd_in;
388 	ret->fd_out = fd_out;
389 	ret->transfer_buflen = transfer_buflen;
390 	ret->num_requests = num_requests;
391 	ret->exts = 0;
392 	ret->limit_kbps = 0;
393 
394 	if ((msg = sshbuf_new()) == NULL)
395 		fatal("%s: sshbuf_new failed", __func__);
396 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_INIT)) != 0 ||
397 	    (r = sshbuf_put_u32(msg, SSH2_FILEXFER_VERSION)) != 0)
398 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
399 	send_msg(ret, msg);
400 
401 	sshbuf_reset(msg);
402 
403 	get_msg(ret, msg);
404 
405 	/* Expecting a VERSION reply */
406 	if ((r = sshbuf_get_u8(msg, &type)) != 0)
407 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
408 	if (type != SSH2_FXP_VERSION) {
409 		error("Invalid packet back from SSH2_FXP_INIT (type %u)",
410 		    type);
411 		sshbuf_free(msg);
412 		free(ret);
413 		return(NULL);
414 	}
415 	if ((r = sshbuf_get_u32(msg, &ret->version)) != 0)
416 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
417 
418 	debug2("Remote version: %u", ret->version);
419 
420 	/* Check for extensions */
421 	while (sshbuf_len(msg) > 0) {
422 		char *name;
423 		u_char *value;
424 		size_t vlen;
425 		int known = 0;
426 
427 		if ((r = sshbuf_get_cstring(msg, &name, NULL)) != 0 ||
428 		    (r = sshbuf_get_string(msg, &value, &vlen)) != 0)
429 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
430 		if (strcmp(name, "posix-rename@openssh.com") == 0 &&
431 		    strcmp((char *)value, "1") == 0) {
432 			ret->exts |= SFTP_EXT_POSIX_RENAME;
433 			known = 1;
434 		} else if (strcmp(name, "statvfs@openssh.com") == 0 &&
435 		    strcmp((char *)value, "2") == 0) {
436 			ret->exts |= SFTP_EXT_STATVFS;
437 			known = 1;
438 		} else if (strcmp(name, "fstatvfs@openssh.com") == 0 &&
439 		    strcmp((char *)value, "2") == 0) {
440 			ret->exts |= SFTP_EXT_FSTATVFS;
441 			known = 1;
442 		} else if (strcmp(name, "hardlink@openssh.com") == 0 &&
443 		    strcmp((char *)value, "1") == 0) {
444 			ret->exts |= SFTP_EXT_HARDLINK;
445 			known = 1;
446 		} else if (strcmp(name, "fsync@openssh.com") == 0 &&
447 		    strcmp((char *)value, "1") == 0) {
448 			ret->exts |= SFTP_EXT_FSYNC;
449 			known = 1;
450 		}
451 		if (known) {
452 			debug2("Server supports extension \"%s\" revision %s",
453 			    name, value);
454 		} else {
455 			debug2("Unrecognised server extension \"%s\"", name);
456 		}
457 		free(name);
458 		free(value);
459 	}
460 
461 	sshbuf_free(msg);
462 
463 	/* Some filexfer v.0 servers don't support large packets */
464 	if (ret->version == 0)
465 		ret->transfer_buflen = MIN(ret->transfer_buflen, 20480);
466 
467 	ret->limit_kbps = limit_kbps;
468 	if (ret->limit_kbps > 0) {
469 		bandwidth_limit_init(&ret->bwlimit_in, ret->limit_kbps,
470 		    ret->transfer_buflen);
471 		bandwidth_limit_init(&ret->bwlimit_out, ret->limit_kbps,
472 		    ret->transfer_buflen);
473 	}
474 
475 	return ret;
476 }
477 
478 u_int
479 sftp_proto_version(struct sftp_conn *conn)
480 {
481 	return conn->version;
482 }
483 
484 int
485 do_close(struct sftp_conn *conn, const u_char *handle, u_int handle_len)
486 {
487 	u_int id, status;
488 	struct sshbuf *msg;
489 	int r;
490 
491 	if ((msg = sshbuf_new()) == NULL)
492 		fatal("%s: sshbuf_new failed", __func__);
493 
494 	id = conn->msg_id++;
495 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_CLOSE)) != 0 ||
496 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
497 	    (r = sshbuf_put_string(msg, handle, handle_len)) != 0)
498 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
499 	send_msg(conn, msg);
500 	debug3("Sent message SSH2_FXP_CLOSE I:%u", id);
501 
502 	status = get_status(conn, id);
503 	if (status != SSH2_FX_OK)
504 		error("Couldn't close file: %s", fx2txt(status));
505 
506 	sshbuf_free(msg);
507 
508 	return status == SSH2_FX_OK ? 0 : -1;
509 }
510 
511 
512 static int
513 do_lsreaddir(struct sftp_conn *conn, const char *path, int print_flag,
514     SFTP_DIRENT ***dir)
515 {
516 	struct sshbuf *msg;
517 	u_int count, id, i, expected_id, ents = 0;
518 	size_t handle_len;
519 	u_char type, *handle;
520 	int status = SSH2_FX_FAILURE;
521 	int r;
522 
523 	if (dir)
524 		*dir = NULL;
525 
526 	id = conn->msg_id++;
527 
528 	if ((msg = sshbuf_new()) == NULL)
529 		fatal("%s: sshbuf_new failed", __func__);
530 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_OPENDIR)) != 0 ||
531 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
532 	    (r = sshbuf_put_cstring(msg, path)) != 0)
533 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
534 	send_msg(conn, msg);
535 
536 	handle = get_handle(conn, id, &handle_len,
537 	    "remote readdir(\"%s\")", path);
538 	if (handle == NULL) {
539 		sshbuf_free(msg);
540 		return -1;
541 	}
542 
543 	if (dir) {
544 		ents = 0;
545 		*dir = xcalloc(1, sizeof(**dir));
546 		(*dir)[0] = NULL;
547 	}
548 
549 	for (; !interrupted;) {
550 		id = expected_id = conn->msg_id++;
551 
552 		debug3("Sending SSH2_FXP_READDIR I:%u", id);
553 
554 		sshbuf_reset(msg);
555 		if ((r = sshbuf_put_u8(msg, SSH2_FXP_READDIR)) != 0 ||
556 		    (r = sshbuf_put_u32(msg, id)) != 0 ||
557 		    (r = sshbuf_put_string(msg, handle, handle_len)) != 0)
558 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
559 		send_msg(conn, msg);
560 
561 		sshbuf_reset(msg);
562 
563 		get_msg(conn, msg);
564 
565 		if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
566 		    (r = sshbuf_get_u32(msg, &id)) != 0)
567 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
568 
569 		debug3("Received reply T:%u I:%u", type, id);
570 
571 		if (id != expected_id)
572 			fatal("ID mismatch (%u != %u)", id, expected_id);
573 
574 		if (type == SSH2_FXP_STATUS) {
575 			u_int rstatus;
576 
577 			if ((r = sshbuf_get_u32(msg, &rstatus)) != 0)
578 				fatal("%s: buffer error: %s",
579 				    __func__, ssh_err(r));
580 			debug3("Received SSH2_FXP_STATUS %d", rstatus);
581 			if (rstatus == SSH2_FX_EOF)
582 				break;
583 			error("Couldn't read directory: %s", fx2txt(rstatus));
584 			goto out;
585 		} else if (type != SSH2_FXP_NAME)
586 			fatal("Expected SSH2_FXP_NAME(%u) packet, got %u",
587 			    SSH2_FXP_NAME, type);
588 
589 		if ((r = sshbuf_get_u32(msg, &count)) != 0)
590 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
591 		if (count == 0)
592 			break;
593 		debug3("Received %d SSH2_FXP_NAME responses", count);
594 		for (i = 0; i < count; i++) {
595 			char *filename, *longname;
596 			Attrib a;
597 
598 			if ((r = sshbuf_get_cstring(msg, &filename,
599 			    NULL)) != 0 ||
600 			    (r = sshbuf_get_cstring(msg, &longname,
601 			    NULL)) != 0)
602 				fatal("%s: buffer error: %s",
603 				    __func__, ssh_err(r));
604 			if ((r = decode_attrib(msg, &a)) != 0) {
605 				error("%s: couldn't decode attrib: %s",
606 				    __func__, ssh_err(r));
607 				free(filename);
608 				free(longname);
609 				sshbuf_free(msg);
610 				return -1;
611 			}
612 
613 			if (print_flag)
614 				mprintf("%s\n", longname);
615 
616 			/*
617 			 * Directory entries should never contain '/'
618 			 * These can be used to attack recursive ops
619 			 * (e.g. send '../../../../etc/passwd')
620 			 */
621 			if (strchr(filename, '/') != NULL) {
622 				error("Server sent suspect path \"%s\" "
623 				    "during readdir of \"%s\"", filename, path);
624 			} else if (dir) {
625 				*dir = xreallocarray(*dir, ents + 2, sizeof(**dir));
626 				(*dir)[ents] = xcalloc(1, sizeof(***dir));
627 				(*dir)[ents]->filename = xstrdup(filename);
628 				(*dir)[ents]->longname = xstrdup(longname);
629 				memcpy(&(*dir)[ents]->a, &a, sizeof(a));
630 				(*dir)[++ents] = NULL;
631 			}
632 			free(filename);
633 			free(longname);
634 		}
635 	}
636 	status = 0;
637 
638  out:
639 	sshbuf_free(msg);
640 	do_close(conn, handle, handle_len);
641 	free(handle);
642 
643 	if (status != 0 && dir != NULL) {
644 		/* Don't return results on error */
645 		free_sftp_dirents(*dir);
646 		*dir = NULL;
647 	} else if (interrupted && dir != NULL && *dir != NULL) {
648 		/* Don't return partial matches on interrupt */
649 		free_sftp_dirents(*dir);
650 		*dir = xcalloc(1, sizeof(**dir));
651 		**dir = NULL;
652 	}
653 
654 	return status;
655 }
656 
657 int
658 do_readdir(struct sftp_conn *conn, const char *path, SFTP_DIRENT ***dir)
659 {
660 	return(do_lsreaddir(conn, path, 0, dir));
661 }
662 
663 void free_sftp_dirents(SFTP_DIRENT **s)
664 {
665 	int i;
666 
667 	if (s == NULL)
668 		return;
669 	for (i = 0; s[i]; i++) {
670 		free(s[i]->filename);
671 		free(s[i]->longname);
672 		free(s[i]);
673 	}
674 	free(s);
675 }
676 
677 int
678 do_rm(struct sftp_conn *conn, const char *path)
679 {
680 	u_int status, id;
681 
682 	debug2("Sending SSH2_FXP_REMOVE \"%s\"", path);
683 
684 	id = conn->msg_id++;
685 	send_string_request(conn, id, SSH2_FXP_REMOVE, path, strlen(path));
686 	status = get_status(conn, id);
687 	if (status != SSH2_FX_OK)
688 		error("Couldn't delete file: %s", fx2txt(status));
689 	return status == SSH2_FX_OK ? 0 : -1;
690 }
691 
692 int
693 do_mkdir(struct sftp_conn *conn, const char *path, Attrib *a, int print_flag)
694 {
695 	u_int status, id;
696 
697 	id = conn->msg_id++;
698 	send_string_attrs_request(conn, id, SSH2_FXP_MKDIR, path,
699 	    strlen(path), a);
700 
701 	status = get_status(conn, id);
702 	if (status != SSH2_FX_OK && print_flag)
703 		error("Couldn't create directory: %s", fx2txt(status));
704 
705 	return status == SSH2_FX_OK ? 0 : -1;
706 }
707 
708 int
709 do_rmdir(struct sftp_conn *conn, const char *path)
710 {
711 	u_int status, id;
712 
713 	id = conn->msg_id++;
714 	send_string_request(conn, id, SSH2_FXP_RMDIR, path,
715 	    strlen(path));
716 
717 	status = get_status(conn, id);
718 	if (status != SSH2_FX_OK)
719 		error("Couldn't remove directory: %s", fx2txt(status));
720 
721 	return status == SSH2_FX_OK ? 0 : -1;
722 }
723 
724 Attrib *
725 do_stat(struct sftp_conn *conn, const char *path, int quiet)
726 {
727 	u_int id;
728 
729 	id = conn->msg_id++;
730 
731 	send_string_request(conn, id,
732 	    conn->version == 0 ? SSH2_FXP_STAT_VERSION_0 : SSH2_FXP_STAT,
733 	    path, strlen(path));
734 
735 	return(get_decode_stat(conn, id, quiet));
736 }
737 
738 Attrib *
739 do_lstat(struct sftp_conn *conn, const char *path, int quiet)
740 {
741 	u_int id;
742 
743 	if (conn->version == 0) {
744 		if (quiet)
745 			debug("Server version does not support lstat operation");
746 		else
747 			logit("Server version does not support lstat operation");
748 		return(do_stat(conn, path, quiet));
749 	}
750 
751 	id = conn->msg_id++;
752 	send_string_request(conn, id, SSH2_FXP_LSTAT, path,
753 	    strlen(path));
754 
755 	return(get_decode_stat(conn, id, quiet));
756 }
757 
758 #ifdef notyet
759 Attrib *
760 do_fstat(struct sftp_conn *conn, const u_char *handle, u_int handle_len,
761     int quiet)
762 {
763 	u_int id;
764 
765 	id = conn->msg_id++;
766 	send_string_request(conn, id, SSH2_FXP_FSTAT, handle,
767 	    handle_len);
768 
769 	return(get_decode_stat(conn, id, quiet));
770 }
771 #endif
772 
773 int
774 do_setstat(struct sftp_conn *conn, const char *path, Attrib *a)
775 {
776 	u_int status, id;
777 
778 	id = conn->msg_id++;
779 	send_string_attrs_request(conn, id, SSH2_FXP_SETSTAT, path,
780 	    strlen(path), a);
781 
782 	status = get_status(conn, id);
783 	if (status != SSH2_FX_OK)
784 		error("Couldn't setstat on \"%s\": %s", path,
785 		    fx2txt(status));
786 
787 	return status == SSH2_FX_OK ? 0 : -1;
788 }
789 
790 int
791 do_fsetstat(struct sftp_conn *conn, const u_char *handle, u_int handle_len,
792     Attrib *a)
793 {
794 	u_int status, id;
795 
796 	id = conn->msg_id++;
797 	send_string_attrs_request(conn, id, SSH2_FXP_FSETSTAT, handle,
798 	    handle_len, a);
799 
800 	status = get_status(conn, id);
801 	if (status != SSH2_FX_OK)
802 		error("Couldn't fsetstat: %s", fx2txt(status));
803 
804 	return status == SSH2_FX_OK ? 0 : -1;
805 }
806 
807 char *
808 do_realpath(struct sftp_conn *conn, const char *path)
809 {
810 	struct sshbuf *msg;
811 	u_int expected_id, count, id;
812 	char *filename, *longname;
813 	Attrib a;
814 	u_char type;
815 	int r;
816 
817 	expected_id = id = conn->msg_id++;
818 	send_string_request(conn, id, SSH2_FXP_REALPATH, path,
819 	    strlen(path));
820 
821 	if ((msg = sshbuf_new()) == NULL)
822 		fatal("%s: sshbuf_new failed", __func__);
823 
824 	get_msg(conn, msg);
825 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
826 	    (r = sshbuf_get_u32(msg, &id)) != 0)
827 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
828 
829 	if (id != expected_id)
830 		fatal("ID mismatch (%u != %u)", id, expected_id);
831 
832 	if (type == SSH2_FXP_STATUS) {
833 		u_int status;
834 
835 		if ((r = sshbuf_get_u32(msg, &status)) != 0)
836 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
837 		error("Couldn't canonicalize: %s", fx2txt(status));
838 		sshbuf_free(msg);
839 		return NULL;
840 	} else if (type != SSH2_FXP_NAME)
841 		fatal("Expected SSH2_FXP_NAME(%u) packet, got %u",
842 		    SSH2_FXP_NAME, type);
843 
844 	if ((r = sshbuf_get_u32(msg, &count)) != 0)
845 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
846 	if (count != 1)
847 		fatal("Got multiple names (%d) from SSH_FXP_REALPATH", count);
848 
849 	if ((r = sshbuf_get_cstring(msg, &filename, NULL)) != 0 ||
850 	    (r = sshbuf_get_cstring(msg, &longname, NULL)) != 0 ||
851 	    (r = decode_attrib(msg, &a)) != 0)
852 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
853 
854 	debug3("SSH_FXP_REALPATH %s -> %s size %lu", path, filename,
855 	    (unsigned long)a.size);
856 
857 	free(longname);
858 
859 	sshbuf_free(msg);
860 
861 	return(filename);
862 }
863 
864 int
865 do_rename(struct sftp_conn *conn, const char *oldpath, const char *newpath,
866     int force_legacy)
867 {
868 	struct sshbuf *msg;
869 	u_int status, id;
870 	int r, use_ext = (conn->exts & SFTP_EXT_POSIX_RENAME) && !force_legacy;
871 
872 	if ((msg = sshbuf_new()) == NULL)
873 		fatal("%s: sshbuf_new failed", __func__);
874 
875 	/* Send rename request */
876 	id = conn->msg_id++;
877 	if (use_ext) {
878 		if ((r = sshbuf_put_u8(msg, SSH2_FXP_EXTENDED)) != 0 ||
879 		    (r = sshbuf_put_u32(msg, id)) != 0 ||
880 		    (r = sshbuf_put_cstring(msg,
881 		    "posix-rename@openssh.com")) != 0)
882 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
883 	} else {
884 		if ((r = sshbuf_put_u8(msg, SSH2_FXP_RENAME)) != 0 ||
885 		    (r = sshbuf_put_u32(msg, id)) != 0)
886 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
887 	}
888 	if ((r = sshbuf_put_cstring(msg, oldpath)) != 0 ||
889 	    (r = sshbuf_put_cstring(msg, newpath)) != 0)
890 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
891 	send_msg(conn, msg);
892 	debug3("Sent message %s \"%s\" -> \"%s\"",
893 	    use_ext ? "posix-rename@openssh.com" :
894 	    "SSH2_FXP_RENAME", oldpath, newpath);
895 	sshbuf_free(msg);
896 
897 	status = get_status(conn, id);
898 	if (status != SSH2_FX_OK)
899 		error("Couldn't rename file \"%s\" to \"%s\": %s", oldpath,
900 		    newpath, fx2txt(status));
901 
902 	return status == SSH2_FX_OK ? 0 : -1;
903 }
904 
905 int
906 do_hardlink(struct sftp_conn *conn, const char *oldpath, const char *newpath)
907 {
908 	struct sshbuf *msg;
909 	u_int status, id;
910 	int r;
911 
912 	if ((conn->exts & SFTP_EXT_HARDLINK) == 0) {
913 		error("Server does not support hardlink@openssh.com extension");
914 		return -1;
915 	}
916 
917 	if ((msg = sshbuf_new()) == NULL)
918 		fatal("%s: sshbuf_new failed", __func__);
919 
920 	/* Send link request */
921 	id = conn->msg_id++;
922 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_EXTENDED)) != 0 ||
923 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
924 	    (r = sshbuf_put_cstring(msg, "hardlink@openssh.com")) != 0 ||
925 	    (r = sshbuf_put_cstring(msg, oldpath)) != 0 ||
926 	    (r = sshbuf_put_cstring(msg, newpath)) != 0)
927 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
928 	send_msg(conn, msg);
929 	debug3("Sent message hardlink@openssh.com \"%s\" -> \"%s\"",
930 	       oldpath, newpath);
931 	sshbuf_free(msg);
932 
933 	status = get_status(conn, id);
934 	if (status != SSH2_FX_OK)
935 		error("Couldn't link file \"%s\" to \"%s\": %s", oldpath,
936 		    newpath, fx2txt(status));
937 
938 	return status == SSH2_FX_OK ? 0 : -1;
939 }
940 
941 int
942 do_symlink(struct sftp_conn *conn, const char *oldpath, const char *newpath)
943 {
944 	struct sshbuf *msg;
945 	u_int status, id;
946 	int r;
947 
948 	if (conn->version < 3) {
949 		error("This server does not support the symlink operation");
950 		return(SSH2_FX_OP_UNSUPPORTED);
951 	}
952 
953 	if ((msg = sshbuf_new()) == NULL)
954 		fatal("%s: sshbuf_new failed", __func__);
955 
956 	/* Send symlink request */
957 	id = conn->msg_id++;
958 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_SYMLINK)) != 0 ||
959 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
960 	    (r = sshbuf_put_cstring(msg, oldpath)) != 0 ||
961 	    (r = sshbuf_put_cstring(msg, newpath)) != 0)
962 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
963 	send_msg(conn, msg);
964 	debug3("Sent message SSH2_FXP_SYMLINK \"%s\" -> \"%s\"", oldpath,
965 	    newpath);
966 	sshbuf_free(msg);
967 
968 	status = get_status(conn, id);
969 	if (status != SSH2_FX_OK)
970 		error("Couldn't symlink file \"%s\" to \"%s\": %s", oldpath,
971 		    newpath, fx2txt(status));
972 
973 	return status == SSH2_FX_OK ? 0 : -1;
974 }
975 
976 int
977 do_fsync(struct sftp_conn *conn, u_char *handle, u_int handle_len)
978 {
979 	struct sshbuf *msg;
980 	u_int status, id;
981 	int r;
982 
983 	/* Silently return if the extension is not supported */
984 	if ((conn->exts & SFTP_EXT_FSYNC) == 0)
985 		return -1;
986 
987 	/* Send fsync request */
988 	if ((msg = sshbuf_new()) == NULL)
989 		fatal("%s: sshbuf_new failed", __func__);
990 	id = conn->msg_id++;
991 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_EXTENDED)) != 0 ||
992 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
993 	    (r = sshbuf_put_cstring(msg, "fsync@openssh.com")) != 0 ||
994 	    (r = sshbuf_put_string(msg, handle, handle_len)) != 0)
995 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
996 	send_msg(conn, msg);
997 	debug3("Sent message fsync@openssh.com I:%u", id);
998 	sshbuf_free(msg);
999 
1000 	status = get_status(conn, id);
1001 	if (status != SSH2_FX_OK)
1002 		error("Couldn't sync file: %s", fx2txt(status));
1003 
1004 	return status;
1005 }
1006 
1007 #ifdef notyet
1008 char *
1009 do_readlink(struct sftp_conn *conn, const char *path)
1010 {
1011 	struct sshbuf *msg;
1012 	u_int expected_id, count, id;
1013 	char *filename, *longname;
1014 	Attrib a;
1015 	u_char type;
1016 	int r;
1017 
1018 	expected_id = id = conn->msg_id++;
1019 	send_string_request(conn, id, SSH2_FXP_READLINK, path, strlen(path));
1020 
1021 	if ((msg = sshbuf_new()) == NULL)
1022 		fatal("%s: sshbuf_new failed", __func__);
1023 
1024 	get_msg(conn, msg);
1025 	if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
1026 	    (r = sshbuf_get_u32(msg, &id)) != 0)
1027 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1028 
1029 	if (id != expected_id)
1030 		fatal("ID mismatch (%u != %u)", id, expected_id);
1031 
1032 	if (type == SSH2_FXP_STATUS) {
1033 		u_int status;
1034 
1035 		if ((r = sshbuf_get_u32(msg, &status)) != 0)
1036 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
1037 		error("Couldn't readlink: %s", fx2txt(status));
1038 		sshbuf_free(msg);
1039 		return(NULL);
1040 	} else if (type != SSH2_FXP_NAME)
1041 		fatal("Expected SSH2_FXP_NAME(%u) packet, got %u",
1042 		    SSH2_FXP_NAME, type);
1043 
1044 	if ((r = sshbuf_get_u32(msg, &count)) != 0)
1045 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1046 	if (count != 1)
1047 		fatal("Got multiple names (%d) from SSH_FXP_READLINK", count);
1048 
1049 	if ((r = sshbuf_get_cstring(msg, &filename, NULL)) != 0 ||
1050 	    (r = sshbuf_get_cstring(msg, &longname, NULL)) != 0 ||
1051 	    (r = decode_attrib(msg, &a)) != 0)
1052 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1053 
1054 	debug3("SSH_FXP_READLINK %s -> %s", path, filename);
1055 
1056 	free(longname);
1057 
1058 	sshbuf_free(msg);
1059 
1060 	return filename;
1061 }
1062 #endif
1063 
1064 int
1065 do_statvfs(struct sftp_conn *conn, const char *path, struct sftp_statvfs *st,
1066     int quiet)
1067 {
1068 	struct sshbuf *msg;
1069 	u_int id;
1070 	int r;
1071 
1072 	if ((conn->exts & SFTP_EXT_STATVFS) == 0) {
1073 		error("Server does not support statvfs@openssh.com extension");
1074 		return -1;
1075 	}
1076 
1077 	id = conn->msg_id++;
1078 
1079 	if ((msg = sshbuf_new()) == NULL)
1080 		fatal("%s: sshbuf_new failed", __func__);
1081 	sshbuf_reset(msg);
1082 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_EXTENDED)) != 0 ||
1083 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
1084 	    (r = sshbuf_put_cstring(msg, "statvfs@openssh.com")) != 0 ||
1085 	    (r = sshbuf_put_cstring(msg, path)) != 0)
1086 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1087 	send_msg(conn, msg);
1088 	sshbuf_free(msg);
1089 
1090 	return get_decode_statvfs(conn, st, id, quiet);
1091 }
1092 
1093 #ifdef notyet
1094 int
1095 do_fstatvfs(struct sftp_conn *conn, const u_char *handle, u_int handle_len,
1096     struct sftp_statvfs *st, int quiet)
1097 {
1098 	struct sshbuf *msg;
1099 	u_int id;
1100 
1101 	if ((conn->exts & SFTP_EXT_FSTATVFS) == 0) {
1102 		error("Server does not support fstatvfs@openssh.com extension");
1103 		return -1;
1104 	}
1105 
1106 	id = conn->msg_id++;
1107 
1108 	if ((msg = sshbuf_new()) == NULL)
1109 		fatal("%s: sshbuf_new failed", __func__);
1110 	sshbuf_reset(msg);
1111 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_EXTENDED)) != 0 ||
1112 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
1113 	    (r = sshbuf_put_cstring(msg, "fstatvfs@openssh.com")) != 0 ||
1114 	    (r = sshbuf_put_string(msg, handle, handle_len)) != 0)
1115 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1116 	send_msg(conn, msg);
1117 	sshbuf_free(msg);
1118 
1119 	return get_decode_statvfs(conn, st, id, quiet);
1120 }
1121 #endif
1122 
1123 static void
1124 send_read_request(struct sftp_conn *conn, u_int id, u_int64_t offset,
1125     u_int len, const u_char *handle, u_int handle_len)
1126 {
1127 	struct sshbuf *msg;
1128 	int r;
1129 
1130 	if ((msg = sshbuf_new()) == NULL)
1131 		fatal("%s: sshbuf_new failed", __func__);
1132 	sshbuf_reset(msg);
1133 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_READ)) != 0 ||
1134 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
1135 	    (r = sshbuf_put_string(msg, handle, handle_len)) != 0 ||
1136 	    (r = sshbuf_put_u64(msg, offset)) != 0 ||
1137 	    (r = sshbuf_put_u32(msg, len)) != 0)
1138 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1139 	send_msg(conn, msg);
1140 	sshbuf_free(msg);
1141 }
1142 
1143 int
1144 do_download(struct sftp_conn *conn, const char *remote_path,
1145     const char *local_path, Attrib *a, int preserve_flag, int resume_flag,
1146     int fsync_flag)
1147 {
1148 	Attrib junk;
1149 	struct sshbuf *msg;
1150 	u_char *handle;
1151 	int local_fd = -1, write_error;
1152 	int read_error, write_errno, reordered = 0, r;
1153 	u_int64_t offset = 0, size, highwater;
1154 	u_int mode, id, buflen, num_req, max_req, status = SSH2_FX_OK;
1155 	off_t progress_counter;
1156 	size_t handle_len;
1157 	struct stat st;
1158 	struct request {
1159 		u_int id;
1160 		size_t len;
1161 		u_int64_t offset;
1162 		TAILQ_ENTRY(request) tq;
1163 	};
1164 	TAILQ_HEAD(reqhead, request) requests;
1165 	struct request *req;
1166 	u_char type;
1167 
1168 	TAILQ_INIT(&requests);
1169 
1170 	if (a == NULL && (a = do_stat(conn, remote_path, 0)) == NULL)
1171 		return -1;
1172 
1173 	/* Do not preserve set[ug]id here, as we do not preserve ownership */
1174 	if (a->flags & SSH2_FILEXFER_ATTR_PERMISSIONS)
1175 		mode = a->perm & 0777;
1176 	else
1177 		mode = 0666;
1178 
1179 	if ((a->flags & SSH2_FILEXFER_ATTR_PERMISSIONS) &&
1180 	    (!S_ISREG(a->perm))) {
1181 		error("Cannot download non-regular file: %s", remote_path);
1182 		return(-1);
1183 	}
1184 
1185 	if (a->flags & SSH2_FILEXFER_ATTR_SIZE)
1186 		size = a->size;
1187 	else
1188 		size = 0;
1189 
1190 	buflen = conn->transfer_buflen;
1191 	if ((msg = sshbuf_new()) == NULL)
1192 		fatal("%s: sshbuf_new failed", __func__);
1193 
1194 	attrib_clear(&junk); /* Send empty attributes */
1195 
1196 	/* Send open request */
1197 	id = conn->msg_id++;
1198 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_OPEN)) != 0 ||
1199 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
1200 	    (r = sshbuf_put_cstring(msg, remote_path)) != 0 ||
1201 	    (r = sshbuf_put_u32(msg, SSH2_FXF_READ)) != 0 ||
1202 	    (r = encode_attrib(msg, &junk)) != 0)
1203 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1204 	send_msg(conn, msg);
1205 	debug3("Sent message SSH2_FXP_OPEN I:%u P:%s", id, remote_path);
1206 
1207 	handle = get_handle(conn, id, &handle_len,
1208 	    "remote open(\"%s\")", remote_path);
1209 	if (handle == NULL) {
1210 		sshbuf_free(msg);
1211 		return(-1);
1212 	}
1213 
1214 	local_fd = open(local_path,
1215 	    O_WRONLY | O_CREAT | (resume_flag ? 0 : O_TRUNC), mode | S_IWUSR);
1216 	if (local_fd == -1) {
1217 		error("Couldn't open local file \"%s\" for writing: %s",
1218 		    local_path, strerror(errno));
1219 		goto fail;
1220 	}
1221 	offset = highwater = 0;
1222 	if (resume_flag) {
1223 		if (fstat(local_fd, &st) == -1) {
1224 			error("Unable to stat local file \"%s\": %s",
1225 			    local_path, strerror(errno));
1226 			goto fail;
1227 		}
1228 		if (st.st_size < 0) {
1229 			error("\"%s\" has negative size", local_path);
1230 			goto fail;
1231 		}
1232 		if ((u_int64_t)st.st_size > size) {
1233 			error("Unable to resume download of \"%s\": "
1234 			    "local file is larger than remote", local_path);
1235  fail:
1236 			do_close(conn, handle, handle_len);
1237 			sshbuf_free(msg);
1238 			free(handle);
1239 			if (local_fd != -1)
1240 				close(local_fd);
1241 			return -1;
1242 		}
1243 		offset = highwater = st.st_size;
1244 	}
1245 
1246 	/* Read from remote and write to local */
1247 	write_error = read_error = write_errno = num_req = 0;
1248 	max_req = 1;
1249 	progress_counter = offset;
1250 
1251 	if (showprogress && size != 0)
1252 		start_progress_meter(remote_path, size, &progress_counter);
1253 
1254 	while (num_req > 0 || max_req > 0) {
1255 		u_char *data;
1256 		size_t len;
1257 
1258 		/*
1259 		 * Simulate EOF on interrupt: stop sending new requests and
1260 		 * allow outstanding requests to drain gracefully
1261 		 */
1262 		if (interrupted) {
1263 			if (num_req == 0) /* If we haven't started yet... */
1264 				break;
1265 			max_req = 0;
1266 		}
1267 
1268 		/* Send some more requests */
1269 		while (num_req < max_req) {
1270 			debug3("Request range %llu -> %llu (%d/%d)",
1271 			    (unsigned long long)offset,
1272 			    (unsigned long long)offset + buflen - 1,
1273 			    num_req, max_req);
1274 			req = xcalloc(1, sizeof(*req));
1275 			req->id = conn->msg_id++;
1276 			req->len = buflen;
1277 			req->offset = offset;
1278 			offset += buflen;
1279 			num_req++;
1280 			TAILQ_INSERT_TAIL(&requests, req, tq);
1281 			send_read_request(conn, req->id, req->offset,
1282 			    req->len, handle, handle_len);
1283 		}
1284 
1285 		sshbuf_reset(msg);
1286 		get_msg(conn, msg);
1287 		if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
1288 		    (r = sshbuf_get_u32(msg, &id)) != 0)
1289 			fatal("%s: buffer error: %s", __func__, ssh_err(r));
1290 		debug3("Received reply T:%u I:%u R:%d", type, id, max_req);
1291 
1292 		/* Find the request in our queue */
1293 		for (req = TAILQ_FIRST(&requests);
1294 		    req != NULL && req->id != id;
1295 		    req = TAILQ_NEXT(req, tq))
1296 			;
1297 		if (req == NULL)
1298 			fatal("Unexpected reply %u", id);
1299 
1300 		switch (type) {
1301 		case SSH2_FXP_STATUS:
1302 			if ((r = sshbuf_get_u32(msg, &status)) != 0)
1303 				fatal("%s: buffer error: %s",
1304 				    __func__, ssh_err(r));
1305 			if (status != SSH2_FX_EOF)
1306 				read_error = 1;
1307 			max_req = 0;
1308 			TAILQ_REMOVE(&requests, req, tq);
1309 			free(req);
1310 			num_req--;
1311 			break;
1312 		case SSH2_FXP_DATA:
1313 			if ((r = sshbuf_get_string(msg, &data, &len)) != 0)
1314 				fatal("%s: buffer error: %s",
1315 				    __func__, ssh_err(r));
1316 			debug3("Received data %llu -> %llu",
1317 			    (unsigned long long)req->offset,
1318 			    (unsigned long long)req->offset + len - 1);
1319 			if (len > req->len)
1320 				fatal("Received more data than asked for "
1321 				    "%zu > %zu", len, req->len);
1322 			if ((lseek(local_fd, req->offset, SEEK_SET) == -1 ||
1323 			    atomicio(vwrite, local_fd, data, len) != len) &&
1324 			    !write_error) {
1325 				write_errno = errno;
1326 				write_error = 1;
1327 				max_req = 0;
1328 			}
1329 			else if (!reordered && req->offset <= highwater)
1330 				highwater = req->offset + len;
1331 			else if (!reordered && req->offset > highwater)
1332 				reordered = 1;
1333 			progress_counter += len;
1334 			free(data);
1335 
1336 			if (len == req->len) {
1337 				TAILQ_REMOVE(&requests, req, tq);
1338 				free(req);
1339 				num_req--;
1340 			} else {
1341 				/* Resend the request for the missing data */
1342 				debug3("Short data block, re-requesting "
1343 				    "%llu -> %llu (%2d)",
1344 				    (unsigned long long)req->offset + len,
1345 				    (unsigned long long)req->offset +
1346 				    req->len - 1, num_req);
1347 				req->id = conn->msg_id++;
1348 				req->len -= len;
1349 				req->offset += len;
1350 				send_read_request(conn, req->id,
1351 				    req->offset, req->len, handle, handle_len);
1352 				/* Reduce the request size */
1353 				if (len < buflen)
1354 					buflen = MAX(MIN_READ_SIZE, len);
1355 			}
1356 			if (max_req > 0) { /* max_req = 0 iff EOF received */
1357 				if (size > 0 && offset > size) {
1358 					/* Only one request at a time
1359 					 * after the expected EOF */
1360 					debug3("Finish at %llu (%2d)",
1361 					    (unsigned long long)offset,
1362 					    num_req);
1363 					max_req = 1;
1364 				} else if (max_req <= conn->num_requests) {
1365 					++max_req;
1366 				}
1367 			}
1368 			break;
1369 		default:
1370 			fatal("Expected SSH2_FXP_DATA(%u) packet, got %u",
1371 			    SSH2_FXP_DATA, type);
1372 		}
1373 	}
1374 
1375 	if (showprogress && size)
1376 		stop_progress_meter();
1377 
1378 	/* Sanity check */
1379 	if (TAILQ_FIRST(&requests) != NULL)
1380 		fatal("Transfer complete, but requests still in queue");
1381 	/* Truncate at highest contiguous point to avoid holes on interrupt */
1382 	if (read_error || write_error || interrupted) {
1383 		if (reordered && resume_flag) {
1384 			error("Unable to resume download of \"%s\": "
1385 			    "server reordered requests", local_path);
1386 		}
1387 		debug("truncating at %llu", (unsigned long long)highwater);
1388 		if (ftruncate(local_fd, highwater) == -1)
1389 			error("ftruncate \"%s\": %s", local_path,
1390 			    strerror(errno));
1391 	}
1392 	if (read_error) {
1393 		error("Couldn't read from remote file \"%s\" : %s",
1394 		    remote_path, fx2txt(status));
1395 		status = -1;
1396 		do_close(conn, handle, handle_len);
1397 	} else if (write_error) {
1398 		error("Couldn't write to \"%s\": %s", local_path,
1399 		    strerror(write_errno));
1400 		status = SSH2_FX_FAILURE;
1401 		do_close(conn, handle, handle_len);
1402 	} else {
1403 		if (do_close(conn, handle, handle_len) != 0 || interrupted)
1404 			status = SSH2_FX_FAILURE;
1405 		else
1406 			status = SSH2_FX_OK;
1407 		/* Override umask and utimes if asked */
1408 #ifdef HAVE_FCHMOD
1409 		if (preserve_flag && fchmod(local_fd, mode) == -1)
1410 #else
1411 		if (preserve_flag && chmod(local_path, mode) == -1)
1412 #endif /* HAVE_FCHMOD */
1413 			error("Couldn't set mode on \"%s\": %s", local_path,
1414 			    strerror(errno));
1415 		if (preserve_flag &&
1416 		    (a->flags & SSH2_FILEXFER_ATTR_ACMODTIME)) {
1417 			struct timeval tv[2];
1418 			tv[0].tv_sec = a->atime;
1419 			tv[1].tv_sec = a->mtime;
1420 			tv[0].tv_usec = tv[1].tv_usec = 0;
1421 			if (utimes(local_path, tv) == -1)
1422 				error("Can't set times on \"%s\": %s",
1423 				    local_path, strerror(errno));
1424 		}
1425 		if (fsync_flag) {
1426 			debug("syncing \"%s\"", local_path);
1427 			if (fsync(local_fd) == -1)
1428 				error("Couldn't sync file \"%s\": %s",
1429 				    local_path, strerror(errno));
1430 		}
1431 	}
1432 	close(local_fd);
1433 	sshbuf_free(msg);
1434 	free(handle);
1435 
1436 	return(status);
1437 }
1438 
1439 static int
1440 download_dir_internal(struct sftp_conn *conn, const char *src, const char *dst,
1441     int depth, Attrib *dirattrib, int preserve_flag, int print_flag,
1442     int resume_flag, int fsync_flag)
1443 {
1444 	int i, ret = 0;
1445 	SFTP_DIRENT **dir_entries;
1446 	char *filename, *new_src, *new_dst;
1447 	mode_t mode = 0777;
1448 
1449 	if (depth >= MAX_DIR_DEPTH) {
1450 		error("Maximum directory depth exceeded: %d levels", depth);
1451 		return -1;
1452 	}
1453 
1454 	if (dirattrib == NULL &&
1455 	    (dirattrib = do_stat(conn, src, 1)) == NULL) {
1456 		error("Unable to stat remote directory \"%s\"", src);
1457 		return -1;
1458 	}
1459 	if (!S_ISDIR(dirattrib->perm)) {
1460 		error("\"%s\" is not a directory", src);
1461 		return -1;
1462 	}
1463 	if (print_flag)
1464 		mprintf("Retrieving %s\n", src);
1465 
1466 	if (dirattrib->flags & SSH2_FILEXFER_ATTR_PERMISSIONS)
1467 		mode = dirattrib->perm & 01777;
1468 	else {
1469 		debug("Server did not send permissions for "
1470 		    "directory \"%s\"", dst);
1471 	}
1472 
1473 	if (mkdir(dst, mode) == -1 && errno != EEXIST) {
1474 		error("mkdir %s: %s", dst, strerror(errno));
1475 		return -1;
1476 	}
1477 
1478 	if (do_readdir(conn, src, &dir_entries) == -1) {
1479 		error("%s: Failed to get directory contents", src);
1480 		return -1;
1481 	}
1482 
1483 	for (i = 0; dir_entries[i] != NULL && !interrupted; i++) {
1484 		filename = dir_entries[i]->filename;
1485 
1486 		new_dst = path_append(dst, filename);
1487 		new_src = path_append(src, filename);
1488 
1489 		if (S_ISDIR(dir_entries[i]->a.perm)) {
1490 			if (strcmp(filename, ".") == 0 ||
1491 			    strcmp(filename, "..") == 0)
1492 				continue;
1493 			if (download_dir_internal(conn, new_src, new_dst,
1494 			    depth + 1, &(dir_entries[i]->a), preserve_flag,
1495 			    print_flag, resume_flag, fsync_flag) == -1)
1496 				ret = -1;
1497 		} else if (S_ISREG(dir_entries[i]->a.perm) ) {
1498 			if (do_download(conn, new_src, new_dst,
1499 			    &(dir_entries[i]->a), preserve_flag,
1500 			    resume_flag, fsync_flag) == -1) {
1501 				error("Download of file %s to %s failed",
1502 				    new_src, new_dst);
1503 				ret = -1;
1504 			}
1505 		} else
1506 			logit("%s: not a regular file\n", new_src);
1507 
1508 		free(new_dst);
1509 		free(new_src);
1510 	}
1511 
1512 	if (preserve_flag) {
1513 		if (dirattrib->flags & SSH2_FILEXFER_ATTR_ACMODTIME) {
1514 			struct timeval tv[2];
1515 			tv[0].tv_sec = dirattrib->atime;
1516 			tv[1].tv_sec = dirattrib->mtime;
1517 			tv[0].tv_usec = tv[1].tv_usec = 0;
1518 			if (utimes(dst, tv) == -1)
1519 				error("Can't set times on \"%s\": %s",
1520 				    dst, strerror(errno));
1521 		} else
1522 			debug("Server did not send times for directory "
1523 			    "\"%s\"", dst);
1524 	}
1525 
1526 	free_sftp_dirents(dir_entries);
1527 
1528 	return ret;
1529 }
1530 
1531 int
1532 download_dir(struct sftp_conn *conn, const char *src, const char *dst,
1533     Attrib *dirattrib, int preserve_flag, int print_flag, int resume_flag,
1534     int fsync_flag)
1535 {
1536 	char *src_canon;
1537 	int ret;
1538 
1539 	if ((src_canon = do_realpath(conn, src)) == NULL) {
1540 		error("Unable to canonicalize path \"%s\"", src);
1541 		return -1;
1542 	}
1543 
1544 	ret = download_dir_internal(conn, src_canon, dst, 0,
1545 	    dirattrib, preserve_flag, print_flag, resume_flag, fsync_flag);
1546 	free(src_canon);
1547 	return ret;
1548 }
1549 
1550 int
1551 do_upload(struct sftp_conn *conn, const char *local_path,
1552     const char *remote_path, int preserve_flag, int resume, int fsync_flag)
1553 {
1554 	int r, local_fd;
1555 	u_int status = SSH2_FX_OK;
1556 	u_int id;
1557 	u_char type;
1558 	off_t offset, progress_counter;
1559 	u_char *handle, *data;
1560 	struct sshbuf *msg;
1561 	struct stat sb;
1562 	Attrib a, *c = NULL;
1563 	u_int32_t startid;
1564 	u_int32_t ackid;
1565 	struct outstanding_ack {
1566 		u_int id;
1567 		u_int len;
1568 		off_t offset;
1569 		TAILQ_ENTRY(outstanding_ack) tq;
1570 	};
1571 	TAILQ_HEAD(ackhead, outstanding_ack) acks;
1572 	struct outstanding_ack *ack = NULL;
1573 	size_t handle_len;
1574 
1575 	TAILQ_INIT(&acks);
1576 
1577 	if ((local_fd = open(local_path, O_RDONLY, 0)) == -1) {
1578 		error("Couldn't open local file \"%s\" for reading: %s",
1579 		    local_path, strerror(errno));
1580 		return(-1);
1581 	}
1582 	if (fstat(local_fd, &sb) == -1) {
1583 		error("Couldn't fstat local file \"%s\": %s",
1584 		    local_path, strerror(errno));
1585 		close(local_fd);
1586 		return(-1);
1587 	}
1588 	if (!S_ISREG(sb.st_mode)) {
1589 		error("%s is not a regular file", local_path);
1590 		close(local_fd);
1591 		return(-1);
1592 	}
1593 	stat_to_attrib(&sb, &a);
1594 
1595 	a.flags &= ~SSH2_FILEXFER_ATTR_SIZE;
1596 	a.flags &= ~SSH2_FILEXFER_ATTR_UIDGID;
1597 	a.perm &= 0777;
1598 	if (!preserve_flag)
1599 		a.flags &= ~SSH2_FILEXFER_ATTR_ACMODTIME;
1600 
1601 	if (resume) {
1602 		/* Get remote file size if it exists */
1603 		if ((c = do_stat(conn, remote_path, 0)) == NULL) {
1604 			close(local_fd);
1605 			return -1;
1606 		}
1607 
1608 		if ((off_t)c->size >= sb.st_size) {
1609 			error("destination file bigger or same size as "
1610 			      "source file");
1611 			close(local_fd);
1612 			return -1;
1613 		}
1614 
1615 		if (lseek(local_fd, (off_t)c->size, SEEK_SET) == -1) {
1616 			close(local_fd);
1617 			return -1;
1618 		}
1619 	}
1620 
1621 	if ((msg = sshbuf_new()) == NULL)
1622 		fatal("%s: sshbuf_new failed", __func__);
1623 
1624 	/* Send open request */
1625 	id = conn->msg_id++;
1626 	if ((r = sshbuf_put_u8(msg, SSH2_FXP_OPEN)) != 0 ||
1627 	    (r = sshbuf_put_u32(msg, id)) != 0 ||
1628 	    (r = sshbuf_put_cstring(msg, remote_path)) != 0 ||
1629 	    (r = sshbuf_put_u32(msg, SSH2_FXF_WRITE|SSH2_FXF_CREAT|
1630 	    (resume ? SSH2_FXF_APPEND : SSH2_FXF_TRUNC))) != 0 ||
1631 	    (r = encode_attrib(msg, &a)) != 0)
1632 		fatal("%s: buffer error: %s", __func__, ssh_err(r));
1633 	send_msg(conn, msg);
1634 	debug3("Sent message SSH2_FXP_OPEN I:%u P:%s", id, remote_path);
1635 
1636 	sshbuf_reset(msg);
1637 
1638 	handle = get_handle(conn, id, &handle_len,
1639 	    "remote open(\"%s\")", remote_path);
1640 	if (handle == NULL) {
1641 		close(local_fd);
1642 		sshbuf_free(msg);
1643 		return -1;
1644 	}
1645 
1646 	startid = ackid = id + 1;
1647 	data = xmalloc(conn->transfer_buflen);
1648 
1649 	/* Read from local and write to remote */
1650 	offset = progress_counter = (resume ? c->size : 0);
1651 	if (showprogress)
1652 		start_progress_meter(local_path, sb.st_size,
1653 		    &progress_counter);
1654 
1655 	for (;;) {
1656 		int len;
1657 
1658 		/*
1659 		 * Can't use atomicio here because it returns 0 on EOF,
1660 		 * thus losing the last block of the file.
1661 		 * Simulate an EOF on interrupt, allowing ACKs from the
1662 		 * server to drain.
1663 		 */
1664 		if (interrupted || status != SSH2_FX_OK)
1665 			len = 0;
1666 		else do
1667 			len = read(local_fd, data, conn->transfer_buflen);
1668 		while ((len == -1) &&
1669 		    (errno == EINTR || errno == EAGAIN || errno == EWOULDBLOCK));
1670 
1671 		if (len == -1)
1672 			fatal("Couldn't read from \"%s\": %s", local_path,
1673 			    strerror(errno));
1674 
1675 		if (len != 0) {
1676 			ack = xcalloc(1, sizeof(*ack));
1677 			ack->id = ++id;
1678 			ack->offset = offset;
1679 			ack->len = len;
1680 			TAILQ_INSERT_TAIL(&acks, ack, tq);
1681 
1682 			sshbuf_reset(msg);
1683 			if ((r = sshbuf_put_u8(msg, SSH2_FXP_WRITE)) != 0 ||
1684 			    (r = sshbuf_put_u32(msg, ack->id)) != 0 ||
1685 			    (r = sshbuf_put_string(msg, handle,
1686 			    handle_len)) != 0 ||
1687 			    (r = sshbuf_put_u64(msg, offset)) != 0 ||
1688 			    (r = sshbuf_put_string(msg, data, len)) != 0)
1689 				fatal("%s: buffer error: %s",
1690 				    __func__, ssh_err(r));
1691 			send_msg(conn, msg);
1692 			debug3("Sent message SSH2_FXP_WRITE I:%u O:%llu S:%u",
1693 			    id, (unsigned long long)offset, len);
1694 		} else if (TAILQ_FIRST(&acks) == NULL)
1695 			break;
1696 
1697 		if (ack == NULL)
1698 			fatal("Unexpected ACK %u", id);
1699 
1700 		if (id == startid || len == 0 ||
1701 		    id - ackid >= conn->num_requests) {
1702 			u_int rid;
1703 
1704 			sshbuf_reset(msg);
1705 			get_msg(conn, msg);
1706 			if ((r = sshbuf_get_u8(msg, &type)) != 0 ||
1707 			    (r = sshbuf_get_u32(msg, &rid)) != 0)
1708 				fatal("%s: buffer error: %s",
1709 				    __func__, ssh_err(r));
1710 
1711 			if (type != SSH2_FXP_STATUS)
1712 				fatal("Expected SSH2_FXP_STATUS(%d) packet, "
1713 				    "got %d", SSH2_FXP_STATUS, type);
1714 
1715 			if ((r = sshbuf_get_u32(msg, &status)) != 0)
1716 				fatal("%s: buffer error: %s",
1717 				    __func__, ssh_err(r));
1718 			debug3("SSH2_FXP_STATUS %u", status);
1719 
1720 			/* Find the request in our queue */
1721 			for (ack = TAILQ_FIRST(&acks);
1722 			    ack != NULL && ack->id != rid;
1723 			    ack = TAILQ_NEXT(ack, tq))
1724 				;
1725 			if (ack == NULL)
1726 				fatal("Can't find request for ID %u", rid);
1727 			TAILQ_REMOVE(&acks, ack, tq);
1728 			debug3("In write loop, ack for %u %u bytes at %lld",
1729 			    ack->id, ack->len, (long long)ack->offset);
1730 			++ackid;
1731 			progress_counter += ack->len;
1732 			free(ack);
1733 		}
1734 		offset += len;
1735 		if (offset < 0)
1736 			fatal("%s: offset < 0", __func__);
1737 	}
1738 	sshbuf_free(msg);
1739 
1740 	if (showprogress)
1741 		stop_progress_meter();
1742 	free(data);
1743 
1744 	if (status != SSH2_FX_OK) {
1745 		error("Couldn't write to remote file \"%s\": %s",
1746 		    remote_path, fx2txt(status));
1747 		status = SSH2_FX_FAILURE;
1748 	}
1749 
1750 	if (close(local_fd) == -1) {
1751 		error("Couldn't close local file \"%s\": %s", local_path,
1752 		    strerror(errno));
1753 		status = SSH2_FX_FAILURE;
1754 	}
1755 
1756 	/* Override umask and utimes if asked */
1757 	if (preserve_flag)
1758 		do_fsetstat(conn, handle, handle_len, &a);
1759 
1760 	if (fsync_flag)
1761 		(void)do_fsync(conn, handle, handle_len);
1762 
1763 	if (do_close(conn, handle, handle_len) != 0)
1764 		status = SSH2_FX_FAILURE;
1765 
1766 	free(handle);
1767 
1768 	return status == SSH2_FX_OK ? 0 : -1;
1769 }
1770 
1771 static int
1772 upload_dir_internal(struct sftp_conn *conn, const char *src, const char *dst,
1773     int depth, int preserve_flag, int print_flag, int resume, int fsync_flag)
1774 {
1775 	int ret = 0;
1776 	DIR *dirp;
1777 	struct dirent *dp;
1778 	char *filename, *new_src, *new_dst;
1779 	struct stat sb;
1780 	Attrib a, *dirattrib;
1781 
1782 	if (depth >= MAX_DIR_DEPTH) {
1783 		error("Maximum directory depth exceeded: %d levels", depth);
1784 		return -1;
1785 	}
1786 
1787 	if (stat(src, &sb) == -1) {
1788 		error("Couldn't stat directory \"%s\": %s",
1789 		    src, strerror(errno));
1790 		return -1;
1791 	}
1792 	if (!S_ISDIR(sb.st_mode)) {
1793 		error("\"%s\" is not a directory", src);
1794 		return -1;
1795 	}
1796 	if (print_flag)
1797 		mprintf("Entering %s\n", src);
1798 
1799 	attrib_clear(&a);
1800 	stat_to_attrib(&sb, &a);
1801 	a.flags &= ~SSH2_FILEXFER_ATTR_SIZE;
1802 	a.flags &= ~SSH2_FILEXFER_ATTR_UIDGID;
1803 	a.perm &= 01777;
1804 	if (!preserve_flag)
1805 		a.flags &= ~SSH2_FILEXFER_ATTR_ACMODTIME;
1806 
1807 	/*
1808 	 * sftp lacks a portable status value to match errno EEXIST,
1809 	 * so if we get a failure back then we must check whether
1810 	 * the path already existed and is a directory.
1811 	 */
1812 	if (do_mkdir(conn, dst, &a, 0) != 0) {
1813 		if ((dirattrib = do_stat(conn, dst, 0)) == NULL)
1814 			return -1;
1815 		if (!S_ISDIR(dirattrib->perm)) {
1816 			error("\"%s\" exists but is not a directory", dst);
1817 			return -1;
1818 		}
1819 	}
1820 
1821 	if ((dirp = opendir(src)) == NULL) {
1822 		error("Failed to open dir \"%s\": %s", src, strerror(errno));
1823 		return -1;
1824 	}
1825 
1826 	while (((dp = readdir(dirp)) != NULL) && !interrupted) {
1827 		if (dp->d_ino == 0)
1828 			continue;
1829 		filename = dp->d_name;
1830 		new_dst = path_append(dst, filename);
1831 		new_src = path_append(src, filename);
1832 
1833 		if (lstat(new_src, &sb) == -1) {
1834 			logit("%s: lstat failed: %s", filename,
1835 			    strerror(errno));
1836 			ret = -1;
1837 		} else if (S_ISDIR(sb.st_mode)) {
1838 			if (strcmp(filename, ".") == 0 ||
1839 			    strcmp(filename, "..") == 0)
1840 				continue;
1841 
1842 			if (upload_dir_internal(conn, new_src, new_dst,
1843 			    depth + 1, preserve_flag, print_flag, resume,
1844 			    fsync_flag) == -1)
1845 				ret = -1;
1846 		} else if (S_ISREG(sb.st_mode)) {
1847 			if (do_upload(conn, new_src, new_dst,
1848 			    preserve_flag, resume, fsync_flag) == -1) {
1849 				error("Uploading of file %s to %s failed!",
1850 				    new_src, new_dst);
1851 				ret = -1;
1852 			}
1853 		} else
1854 			logit("%s: not a regular file\n", filename);
1855 		free(new_dst);
1856 		free(new_src);
1857 	}
1858 
1859 	do_setstat(conn, dst, &a);
1860 
1861 	(void) closedir(dirp);
1862 	return ret;
1863 }
1864 
1865 int
1866 upload_dir(struct sftp_conn *conn, const char *src, const char *dst,
1867     int preserve_flag, int print_flag, int resume, int fsync_flag)
1868 {
1869 	char *dst_canon;
1870 	int ret;
1871 
1872 	if ((dst_canon = do_realpath(conn, dst)) == NULL) {
1873 		error("Unable to canonicalize path \"%s\"", dst);
1874 		return -1;
1875 	}
1876 
1877 	ret = upload_dir_internal(conn, src, dst_canon, 0, preserve_flag,
1878 	    print_flag, resume, fsync_flag);
1879 
1880 	free(dst_canon);
1881 	return ret;
1882 }
1883 
1884 char *
1885 path_append(const char *p1, const char *p2)
1886 {
1887 	char *ret;
1888 	size_t len = strlen(p1) + strlen(p2) + 2;
1889 
1890 	ret = xmalloc(len);
1891 	strlcpy(ret, p1, len);
1892 	if (p1[0] != '\0' && p1[strlen(p1) - 1] != '/')
1893 		strlcat(ret, "/", len);
1894 	strlcat(ret, p2, len);
1895 
1896 	return(ret);
1897 }
1898 
1899