FM / git-core

/usr/libexec/git-core

Name	Size	Mode	Actions
mergetools/	-	0755	rm
git	4397352	0755	edit dl rm
git-add	4397352	0755	edit dl rm
git-am	4397352	0755	edit dl rm
git-annotate	4397352	0755	edit dl rm
git-apply	4397352	0755	edit dl rm
git-archive	4397352	0755	edit dl rm
git-backfill	4397352	0755	edit dl rm
git-bisect	4397352	0755	edit dl rm
git-blame	4397352	0755	edit dl rm
git-branch	4397352	0755	edit dl rm
git-bugreport	4397352	0755	edit dl rm
git-bundle	4397352	0755	edit dl rm
git-cat-file	4397352	0755	edit dl rm
git-check-attr	4397352	0755	edit dl rm
git-check-ignore	4397352	0755	edit dl rm
git-check-mailmap	4397352	0755	edit dl rm
git-check-ref-format	4397352	0755	edit dl rm
git-checkout	4397352	0755	edit dl rm
git-checkout--worker	4397352	0755	edit dl rm
git-checkout-index	4397352	0755	edit dl rm
git-cherry	4397352	0755	edit dl rm
git-cherry-pick	4397352	0755	edit dl rm
git-clean	4397352	0755	edit dl rm
git-clone	4397352	0755	edit dl rm
git-column	4397352	0755	edit dl rm
git-commit	4397352	0755	edit dl rm
git-commit-graph	4397352	0755	edit dl rm
git-commit-tree	4397352	0755	edit dl rm
git-config	4397352	0755	edit dl rm
git-contacts	4509	0755	edit dl rm
git-count-objects	4397352	0755	edit dl rm
git-credential	4397352	0755	edit dl rm
git-credential-cache	4397352	0755	edit dl rm
git-credential-cache--daemon	4397352	0755	edit dl rm
git-credential-netrc	11246	0755	edit dl rm
git-credential-store	4397352	0755	edit dl rm
git-describe	4397352	0755	edit dl rm
git-diagnose	4397352	0755	edit dl rm
git-diff	4397352	0755	edit dl rm
git-diff-files	4397352	0755	edit dl rm
git-diff-index	4397352	0755	edit dl rm
git-diff-pairs	4397352	0755	edit dl rm
git-diff-tree	4397352	0755	edit dl rm
git-difftool	4397352	0755	edit dl rm
git-difftool--helper	2664	0755	edit dl rm
git-fast-export	4397352	0755	edit dl rm
git-fast-import	4397352	0755	edit dl rm
git-fetch	4397352	0755	edit dl rm
git-fetch-pack	4397352	0755	edit dl rm
git-filter-branch	15795	0755	edit dl rm
git-fmt-merge-msg	4397352	0755	edit dl rm
git-for-each-ref	4397352	0755	edit dl rm
git-for-each-repo	4397352	0755	edit dl rm
git-format-patch	4397352	0755	edit dl rm
git-fsck	4397352	0755	edit dl rm
git-fsck-objects	4397352	0755	edit dl rm
git-fsmonitor--daemon	4397352	0755	edit dl rm
git-gc	4397352	0755	edit dl rm
git-get-tar-commit-id	4397352	0755	edit dl rm
git-grep	4397352	0755	edit dl rm
git-hash-object	4397352	0755	edit dl rm
git-help	4397352	0755	edit dl rm
git-hook	4397352	0755	edit dl rm
git-http-backend	848848	0755	edit dl rm
git-http-fetch	933280	0755	edit dl rm
git-http-push	1295016	0755	edit dl rm
git-imap-send	920072	0755	edit dl rm
git-index-pack	4397352	0755	edit dl rm
git-init	4397352	0755	edit dl rm
git-init-db	4397352	0755	edit dl rm
git-interpret-trailers	4397352	0755	edit dl rm
git-last-modified	4397352	0755	edit dl rm
git-log	4397352	0755	edit dl rm
git-ls-files	4397352	0755	edit dl rm
git-ls-remote	4397352	0755	edit dl rm
git-ls-tree	4397352	0755	edit dl rm
git-mailinfo	4397352	0755	edit dl rm
git-mailsplit	4397352	0755	edit dl rm
git-maintenance	4397352	0755	edit dl rm
git-merge	4397352	0755	edit dl rm
git-merge-base	4397352	0755	edit dl rm
git-merge-file	4397352	0755	edit dl rm
git-merge-index	4397352	0755	edit dl rm
git-merge-octopus	2481	0755	edit dl rm
git-merge-one-file	3699	0755	edit dl rm
git-merge-ours	4397352	0755	edit dl rm
git-merge-recursive	4397352	0755	edit dl rm
git-merge-resolve	1230	0755	edit dl rm
git-merge-subtree	4397352	0755	edit dl rm
git-merge-tree	4397352	0755	edit dl rm
git-mergetool	11697	0755	edit dl rm
git-mergetool--lib	10908	0644	edit dl rm
git-mktag	4397352	0755	edit dl rm
git-mktree	4397352	0755	edit dl rm
git-multi-pack-index	4397352	0755	edit dl rm
git-mv	4397352	0755	edit dl rm
git-name-rev	4397352	0755	edit dl rm
git-notes	4397352	0755	edit dl rm
git-pack-objects	4397352	0755	edit dl rm
git-pack-redundant	4397352	0755	edit dl rm
git-pack-refs	4397352	0755	edit dl rm
git-patch-id	4397352	0755	edit dl rm
git-prune	4397352	0755	edit dl rm
git-prune-packed	4397352	0755	edit dl rm
git-pull	4397352	0755	edit dl rm
git-push	4397352	0755	edit dl rm
git-quiltimport	3700	0755	edit dl rm
git-range-diff	4397352	0755	edit dl rm
git-read-tree	4397352	0755	edit dl rm
git-rebase	4397352	0755	edit dl rm
git-receive-pack	4397352	0755	edit dl rm
git-reflog	4397352	0755	edit dl rm
git-refs	4397352	0755	edit dl rm
git-remote	4397352	0755	edit dl rm
git-remote-ext	4397352	0755	edit dl rm
git-remote-fd	4397352	0755	edit dl rm
git-remote-ftp	966840	0755	edit dl rm
git-remote-ftps	966840	0755	edit dl rm
git-remote-http	966840	0755	edit dl rm
git-remote-https	966840	0755	edit dl rm
git-repack	4397352	0755	edit dl rm
git-replace	4397352	0755	edit dl rm
git-replay	4397352	0755	edit dl rm
git-repo	4397352	0755	edit dl rm
git-request-pull	3996	0755	edit dl rm
git-rerere	4397352	0755	edit dl rm
git-reset	4397352	0755	edit dl rm
git-restore	4397352	0755	edit dl rm
git-rev-list	4397352	0755	edit dl rm
git-rev-parse	4397352	0755	edit dl rm
git-revert	4397352	0755	edit dl rm
git-rm	4397352	0755	edit dl rm
git-send-pack	4397352	0755	edit dl rm
git-sh-i18n	1683	0644	edit dl rm
git-sh-i18n--envsubst	831264	0755	edit dl rm
git-sh-setup	8398	0644	edit dl rm
git-shell	826960	0755	edit dl rm
git-shortlog	4397352	0755	edit dl rm
git-show	4397352	0755	edit dl rm
git-show-branch	4397352	0755	edit dl rm
git-show-index	4397352	0755	edit dl rm
git-show-ref	4397352	0755	edit dl rm
git-sparse-checkout	4397352	0755	edit dl rm
git-stage	4397352	0755	edit dl rm
git-stash	4397352	0755	edit dl rm
git-status	4397352	0755	edit dl rm
git-stripspace	4397352	0755	edit dl rm
git-submodule	10497	0755	edit dl rm
git-submodule--helper	4397352	0755	edit dl rm
git-switch	4397352	0755	edit dl rm
git-symbolic-ref	4397352	0755	edit dl rm
git-tag	4397352	0755	edit dl rm
git-unpack-file	4397352	0755	edit dl rm
git-unpack-objects	4397352	0755	edit dl rm
git-update-index	4397352	0755	edit dl rm
git-update-ref	4397352	0755	edit dl rm
git-update-server-info	4397352	0755	edit dl rm
git-upload-archive	4397352	0755	edit dl rm
git-upload-pack	4397352	0755	edit dl rm
git-var	4397352	0755	edit dl rm
git-verify-commit	4397352	0755	edit dl rm
git-verify-pack	4397352	0755	edit dl rm
git-verify-tag	4397352	0755	edit dl rm
git-version	4397352	0755	edit dl rm
git-web--browse	4405	0755	edit dl rm
git-whatchanged	4397352	0755	edit dl rm
git-worktree	4397352	0755	edit dl rm
git-write-tree	4397352	0755	edit dl rm
scalar	876968	0755	edit dl rm

Edit: /usr/libexec/git-core/git-credential-netrc (11246B)

#!/usr/bin/perl

use lib (split(/:/, $ENV{GITPERLLIB} || '/usr/share/perl5/vendor_perl'));

use strict;
use warnings;

use Getopt::Long;
use File::Basename;
use Git;

my $VERSION = "0.2";

my %options = (
	       help => 0,
	       debug => 0,
	       verbose => 0,
	       insecure => 0,
	       file => [],

# identical token maps, e.g. host -> host, will be inserted later
	       tmap => {
			port => 'protocol',
			machine => 'host',
			path => 'path',
			login => 'username',
			user => 'username',
			password => 'password',
		       }
	      );

# Map each credential protocol token to itself on the netrc side.
foreach (values %{$options{tmap}}) {
	$options{tmap}->{$_} = $_;
}

# Now, $options{tmap} has a mapping from the netrc format to the Git credential
# helper protocol.

# Next, we build the reverse token map.

# When $rmap{foo} contains 'bar', that means that what the Git credential helper
# protocol calls 'bar' is found as 'foo' in the netrc/authinfo file.  Keys in
# %rmap are what we expect to read from the netrc/authinfo file.

my %rmap;
foreach my $k (keys %{$options{tmap}}) {
	push @{$rmap{$options{tmap}->{$k}}}, $k;
}

Getopt::Long::Configure("bundling");

# TODO: maybe allow the token map $options{tmap} to be configurable.
GetOptions(\%options,
           "help|h",
           "debug|d",
           "insecure|k",
           "verbose|v",
           "file|f=s@",
           'gpg|g:s',
          );

if ($options{help}) {
	my $shortname = basename($0);
	$shortname =~ s/git-credential-//;

print <<EOHIPPUS;

$0 [(-f <authfile>)...] [-g <program>] [-d] [-v] [-k] get

Version $VERSION by tzz\@lifelogs.com.  License: BSD.

Options:

-f|--file <authfile>: specify netrc-style files.  Files with the .gpg
                        extension will be decrypted by GPG before parsing.
                        Multiple -f arguments are OK.  They are processed in
                        order, and the first matching entry found is returned
                        via the credential helper protocol (see below).

When no -f option is given, .authinfo.gpg, .netrc.gpg,
                        .authinfo, and .netrc files in your home directory are
                        used in this order.

-g|--gpg <program>  : specify the program for GPG. By default, this is the
                        value of gpg.program in the git repository or global
                        option or gpg.

-k|--insecure       : ignore bad file ownership or permissions

-d|--debug          : turn on debugging (developer info)

-v|--verbose        : be more verbose (show files and information found)

To enable this credential helper:

git config credential.helper '$shortname -f AUTHFILE1 -f AUTHFILE2'

(Note that Git will prepend "git-credential-" to the helper name and look for it
in the path.)

...and if you want lots of debugging info:

git config credential.helper '$shortname -f AUTHFILE -d'

...or to see the files opened and data found:

git config credential.helper '$shortname -f AUTHFILE -v'

Only "get" mode is supported by this credential helper.  It opens every
<authfile> and looks for the first entry that matches the requested search
criteria:

'port|protocol':
   The protocol that will be used (e.g., https). (protocol=X)

'machine|host':
   The remote hostname for a network credential. (host=X)

'path':
   The path with which the credential will be used. (path=X)

'login|user|username':
   The credential’s username, if we already have one. (username=X)

Thus, when we get this query on STDIN:

host=github.com
protocol=https
username=tzz

this credential helper will look for the first entry in every <authfile> that
matches

machine github.com port https login tzz

machine github.com protocol https login tzz

OR... etc. acceptable tokens as listed above.  Any unknown tokens are
simply ignored.

Then, the helper will print out whatever tokens it got from the entry, including
"password" tokens, mapping back to Git's helper protocol; e.g. "port" is mapped
back to "protocol".  Any redundant entry tokens (part of the original query) are
skipped.

Again, note that only the first matching entry from all the <authfile>s,
processed in the sequence given on the command line, is used.

Netrc/authinfo tokens can be quoted as 'STRING' or "STRING".

No caching is performed by this credential helper.

EOHIPPUS

exit 0;
}

my $mode = shift @ARGV;

# Credentials must get a parameter, so die if it's missing.
die "Syntax: $0 [(-f <authfile>)...] [-d] get" unless defined $mode;

# Only support 'get' mode; with any other unsupported ones we just exit.
exit 0 unless $mode eq 'get';

my $files = $options{file};

# if no files were given, use a predefined list.
# note that .gpg files come first
unless (scalar @$files) {
	my @candidates = qw[
				   ~/.authinfo.gpg
				   ~/.netrc.gpg
				   ~/.authinfo
				   ~/.netrc
			  ];

$files = $options{file} = [ map { glob $_ } @candidates ];
}

load_config(\%options);

my $query = read_credential_data_from_stdin();

FILE:
foreach my $file (@$files) {
	my $gpgmode = $file =~ m/\.gpg$/;
	unless (-r $file) {
		log_verbose("Unable to read $file; skipping it");
		next FILE;
	}

# the following check is copied from Net::Netrc, for non-GPG files
	# OS/2 and Win32 do not handle stat in a way compatible with this check :-(
	unless ($gpgmode || $options{insecure} ||
		$^O eq 'os2'
		|| $^O eq 'MSWin32'
		|| $^O eq 'MacOS'
		|| $^O =~ /^cygwin/) {
		my @stat = stat($file);

if (@stat) {
			if ($stat[2] & 077) {
				log_verbose("Insecure $file (mode=%04o); skipping it",
					    $stat[2] & 07777);
				next FILE;
			}

if ($stat[4] != $<) {
				log_verbose("Not owner of $file; skipping it");
				next FILE;
			}
		}
	}

my @entries = load_netrc($file, $gpgmode);

unless (scalar @entries) {
		if ($!) {
			log_verbose("Unable to open $file: $!");
		} else {
			log_verbose("No netrc entries found in $file");
		}

next FILE;
	}

my $entry = find_netrc_entry($query, @entries);
	if ($entry) {
		print_credential_data($entry, $query);
		# we're done!
		last FILE;
	}
}

exit 0;

sub load_netrc {
	my $file = shift @_;
	my $gpgmode = shift @_;

my $io;
	if ($gpgmode) {
		my @cmd = ($options{'gpg'}, qw(--decrypt), $file);
		log_verbose("Using GPG to open $file: [@cmd]");
		open $io, "-|", @cmd;
	} else {
		log_verbose("Opening $file...");
		open $io, '<', $file;
	}

# nothing to do if the open failed (we log the error later)
	return unless $io;

# Net::Netrc does this, but the functionality is merged with the file
	# detection logic, so we have to extract just the part we need
	my @netrc_entries = net_netrc_loader($io);

# these entries will use the credential helper protocol token names
	my @entries;

foreach my $nentry (@netrc_entries) {
		my %entry;
		my $num_port;

if (!defined $nentry->{machine}) {
			next;
		}
		if (defined $nentry->{port}) {
			$num_port = Git::port_num($nentry->{port});
			unless ($num_port) {
				printf(STDERR "ignoring invalid port `%s' " .
				       "from netrc file\n", $nentry->{port});
			}
			# Since we've already validated and converted
			# the port to its numerical value, do not
			# capture it as the `protocol' value, as used
			# to be the case for symbolic port names.
			delete $nentry->{port};
		}

# create the new entry for the credential helper protocol
		$entry{$options{tmap}->{$_}} = $nentry->{$_} foreach keys %$nentry;

# for "host X port Y" where Y is an integer (captured by
		# $num_port above), set the host to "X:Y"
		if (defined $entry{host} && defined $num_port) {
			$entry{host} = join(':', $entry{host}, $num_port);
		}

push @entries, \%entry;
	}

return @entries;
}

sub net_netrc_loader {
	my $fh = shift @_;
	my @entries;
	my ($mach, $macdef, $tok, @tok);

LINE:
	while (<$fh>) {
		undef $macdef if /\A\n\Z/;

if ($macdef) {
			next LINE;
		}

s/^\s*//;
		chomp;

while (length && s/^("((?:[^"]+|\\.)*)"|((?:[^\\\s]+|\\.)*))\s*//) {
			(my $tok = $+) =~ s/\\(.)/$1/g;
			push(@tok, $tok);
		}

TOKEN:
		while (@tok) {
			if ($tok[0] eq "default") {
				shift(@tok);
				$mach = { machine => undef };
				next TOKEN;
			}

$tok = shift(@tok);

if ($tok eq "machine") {
				my $host = shift @tok;
				$mach = { machine => $host };
				push @entries, $mach;
			} elsif (exists $options{tmap}->{$tok}) {
				unless ($mach) {
					log_debug("Skipping token $tok because no machine was given");
					next TOKEN;
				}

my $value = shift @tok;
				unless (defined $value) {
					log_debug("Token $tok had no value, skipping it.");
					next TOKEN;
				}

# Following line added by rmerrell to remove '/' escape char in .netrc
				$value =~ s/\/\\/\\/g;
				$mach->{$tok} = $value;
			} elsif ($tok eq "macdef") { # we ignore macros
				next TOKEN unless $mach;
				my $value = shift @tok;
				$macdef = 1;
			}
		}
	}

return @entries;
}

sub read_credential_data_from_stdin {
	# the query: start with every token with no value
	my %q = map { $_ => undef } values(%{$options{tmap}});

while (<STDIN>) {
		next unless m/^([^=]+)=(.+)/;

my ($token, $value) = ($1, $2);

# skip any unknown tokens
		next unless exists $q{$token};

$q{$token} = $value;
		log_debug("We were given search token $token and value $value");
	}

foreach (sort keys %q) {
		log_debug("Searching for %s = %s", $_, $q{$_} || '(any value)');
	}

return \%q;
}

# takes the search tokens and then a list of entries
# each entry is a hash reference
sub find_netrc_entry {
	my $query = shift @_;

ENTRY:
	foreach my $entry (@_)
	{
		my $entry_text = join ', ', map { "$_=$entry->{$_}" } keys %$entry;
		foreach my $check (sort keys %$query) {
			if (!defined $entry->{$check}) {
			        log_debug("OK: entry has no $check token, so any value satisfies check $check");
			} elsif (defined $query->{$check}) {
				log_debug("compare %s [%s] to [%s] (entry: %s)",
					  $check,
					  $entry->{$check},
					  $query->{$check},
					  $entry_text);
				unless ($query->{$check} eq $entry->{$check}) {
					next ENTRY;
				}
			} else {
				log_debug("OK: any value satisfies check $check");
			}
		}

return $entry;
	}

# nothing was found
	return;
}

sub print_credential_data {
	my $entry = shift @_;
	my $query = shift @_;

log_debug("entry has passed all the search checks");
 TOKEN:
	foreach my $git_token (sort keys %$entry) {
		log_debug("looking for useful token $git_token");
		# don't print unknown (to the credential helper protocol) tokens
		next TOKEN unless exists $query->{$git_token};

# don't print things asked in the query (the entry matches them)
		next TOKEN if defined $query->{$git_token};

log_debug("FOUND: $git_token=$entry->{$git_token}");
		printf "%s=%s\n", $git_token, $entry->{$git_token};
	}
}
sub load_config {
	# load settings from git config
	my $options = shift;
	# set from command argument, gpg.program option, or default to gpg
	$options->{'gpg'} //= Git::config('gpg.program')
	                  // 'gpg';
	log_verbose("using $options{'gpg'} for GPG operations");
}
sub log_verbose {
	return unless $options{verbose};
	printf STDERR @_;
	printf STDERR "\n";
}

sub log_debug {
	return unless $options{debug};
	printf STDERR @_;
	printf STDERR "\n";
}

cmd: