path.c 17.7 KB
Newer Older
1
/*
2
 * Utilities for paths and pathnames
3 4
 */
#include "cache.h"
5
#include "strbuf.h"
6
#include "string-list.h"
7

8
static int get_st_mode_bits(const char *path, int *mode)
9 10 11 12 13 14 15 16
{
	struct stat st;
	if (lstat(path, &st) < 0)
		return -1;
	*mode = st.st_mode;
	return 0;
}

17 18
static char bad_path[] = "/bad-path/";

19
static struct strbuf *get_pathname(void)
20
{
21 22 23
	static struct strbuf pathname_array[4] = {
		STRBUF_INIT, STRBUF_INIT, STRBUF_INIT, STRBUF_INIT
	};
24
	static int index;
25 26 27
	struct strbuf *sb = &pathname_array[3 & ++index];
	strbuf_reset(sb);
	return sb;
28 29
}

30 31 32 33 34 35 36 37 38 39 40
static char *cleanup_path(char *path)
{
	/* Clean it up */
	if (!memcmp(path, "./", 2)) {
		path += 2;
		while (*path == '/')
			path++;
	}
	return path;
}

41 42 43 44 45 46 47
static void strbuf_cleanup_path(struct strbuf *sb)
{
	char *path = cleanup_path(sb->buf);
	if (path > sb->buf)
		strbuf_remove(sb, 0, path - sb->buf);
}

48 49 50 51 52 53 54 55 56
char *mksnpath(char *buf, size_t n, const char *fmt, ...)
{
	va_list args;
	unsigned len;

	va_start(args, fmt);
	len = vsnprintf(buf, n, fmt, args);
	va_end(args);
	if (len >= n) {
57
		strlcpy(buf, bad_path, n);
58 59 60 61 62
		return buf;
	}
	return cleanup_path(buf);
}

63
static void vsnpath(struct strbuf *buf, const char *fmt, va_list args)
64 65
{
	const char *git_dir = get_git_dir();
66 67 68 69 70
	strbuf_addstr(buf, git_dir);
	if (buf->len && !is_dir_sep(buf->buf[buf->len - 1]))
		strbuf_addch(buf, '/');
	strbuf_vaddf(buf, fmt, args);
	strbuf_cleanup_path(buf);
71 72
}

73 74
char *git_snpath(char *buf, size_t n, const char *fmt, ...)
{
75
	struct strbuf sb = STRBUF_INIT;
76 77
	va_list args;
	va_start(args, fmt);
78
	vsnpath(&sb, fmt, args);
79
	va_end(args);
80 81 82 83 84 85
	if (sb.len >= n)
		strlcpy(buf, bad_path, n);
	else
		memcpy(buf, sb.buf, sb.len + 1);
	strbuf_release(&sb);
	return buf;
86 87 88 89
}

char *git_pathdup(const char *fmt, ...)
{
90
	struct strbuf path = STRBUF_INIT;
91 92
	va_list args;
	va_start(args, fmt);
93
	vsnpath(&path, fmt, args);
94
	va_end(args);
95
	return strbuf_detach(&path, NULL);
96 97
}

98 99 100 101 102 103 104
char *mkpathdup(const char *fmt, ...)
{
	struct strbuf sb = STRBUF_INIT;
	va_list args;
	va_start(args, fmt);
	strbuf_vaddf(&sb, fmt, args);
	va_end(args);
105 106
	strbuf_cleanup_path(&sb);
	return strbuf_detach(&sb, NULL);
107 108
}

109
const char *mkpath(const char *fmt, ...)
110 111
{
	va_list args;
112
	struct strbuf *pathname = get_pathname();
113
	va_start(args, fmt);
114
	strbuf_vaddf(pathname, fmt, args);
115
	va_end(args);
116
	return cleanup_path(pathname->buf);
117 118
}

119
const char *git_path(const char *fmt, ...)
120
{
121
	struct strbuf *pathname = get_pathname();
122 123
	va_list args;
	va_start(args, fmt);
124
	vsnpath(pathname, fmt, args);
125
	va_end(args);
126
	return pathname->buf;
127
}
128

129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146
void home_config_paths(char **global, char **xdg, char *file)
{
	char *xdg_home = getenv("XDG_CONFIG_HOME");
	char *home = getenv("HOME");
	char *to_free = NULL;

	if (!home) {
		if (global)
			*global = NULL;
	} else {
		if (!xdg_home) {
			to_free = mkpathdup("%s/.config", home);
			xdg_home = to_free;
		}
		if (global)
			*global = mkpathdup("%s/.gitconfig", home);
	}

147 148 149 150 151 152
	if (xdg) {
		if (!xdg_home)
			*xdg = NULL;
		else
			*xdg = mkpathdup("%s/git/%s", xdg_home, file);
	}
153 154 155 156

	free(to_free);
}

157
const char *git_path_submodule(const char *path, const char *fmt, ...)
158
{
159
	struct strbuf *buf = get_pathname();
160 161 162
	const char *git_dir;
	va_list args;

163 164 165 166
	strbuf_addstr(buf, path);
	if (buf->len && buf->buf[buf->len - 1] != '/')
		strbuf_addch(buf, '/');
	strbuf_addstr(buf, ".git");
167

168
	git_dir = read_gitfile(buf->buf);
169
	if (git_dir) {
170 171
		strbuf_reset(buf);
		strbuf_addstr(buf, git_dir);
172
	}
173
	strbuf_addch(buf, '/');
174 175

	va_start(args, fmt);
176
	strbuf_vaddf(buf, fmt, args);
177
	va_end(args);
178 179
	strbuf_cleanup_path(buf);
	return buf->buf;
180
}
181

182
int validate_headref(const char *path)
183 184 185
{
	struct stat st;
	char *buf, buffer[256];
186
	unsigned char sha1[20];
187 188
	int fd;
	ssize_t len;
189 190 191 192 193 194 195

	if (lstat(path, &st) < 0)
		return -1;

	/* Make sure it is a "refs/.." symlink */
	if (S_ISLNK(st.st_mode)) {
		len = readlink(path, buffer, sizeof(buffer)-1);
196
		if (len >= 5 && !memcmp("refs/", buffer, 5))
197 198 199 200 201 202 203 204 205 206
			return 0;
		return -1;
	}

	/*
	 * Anything else, just open it and try to see if it is a symbolic ref.
	 */
	fd = open(path, O_RDONLY);
	if (fd < 0)
		return -1;
207
	len = read_in_full(fd, buffer, sizeof(buffer)-1);
208 209 210 211 212
	close(fd);

	/*
	 * Is it a symbolic ref?
	 */
213
	if (len < 4)
214
		return -1;
215 216 217 218 219
	if (!memcmp("ref:", buffer, 4)) {
		buf = buffer + 4;
		len -= 4;
		while (len && isspace(*buf))
			buf++, len--;
220
		if (len >= 5 && !memcmp("refs/", buf, 5))
221 222 223 224 225 226 227
			return 0;
	}

	/*
	 * Is this a detached HEAD?
	 */
	if (!get_sha1_hex(buffer, sha1))
228
		return 0;
229

230 231 232
	return -1;
}

233
static struct passwd *getpw_str(const char *username, size_t len)
234
{
235
	struct passwd *pw;
236
	char *username_z = xmemdupz(username, len);
237 238 239 240
	pw = getpwnam(username_z);
	free(username_z);
	return pw;
}
241

242 243 244 245 246 247 248 249 250 251 252 253 254
/*
 * Return a string with ~ and ~user expanded via getpw*.  If buf != NULL,
 * then it is a newly allocated string. Returns NULL on getpw failure or
 * if path is NULL.
 */
char *expand_user_path(const char *path)
{
	struct strbuf user_path = STRBUF_INIT;
	const char *to_copy = path;

	if (path == NULL)
		goto return_null;
	if (path[0] == '~') {
255
		const char *first_slash = strchrnul(path, '/');
256 257
		const char *username = path + 1;
		size_t username_len = first_slash - username;
258 259
		if (username_len == 0) {
			const char *home = getenv("HOME");
260 261
			if (!home)
				goto return_null;
262
			strbuf_addstr(&user_path, home);
263 264 265 266
		} else {
			struct passwd *pw = getpw_str(username, username_len);
			if (!pw)
				goto return_null;
267
			strbuf_addstr(&user_path, pw->pw_dir);
268
		}
269
		to_copy = first_slash;
270
	}
271
	strbuf_addstr(&user_path, to_copy);
272 273 274 275
	return strbuf_detach(&user_path, NULL);
return_null:
	strbuf_release(&user_path);
	return NULL;
276 277
}

278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301
/*
 * First, one directory to try is determined by the following algorithm.
 *
 * (0) If "strict" is given, the path is used as given and no DWIM is
 *     done. Otherwise:
 * (1) "~/path" to mean path under the running user's home directory;
 * (2) "~user/path" to mean path under named user's home directory;
 * (3) "relative/path" to mean cwd relative directory; or
 * (4) "/absolute/path" to mean absolute directory.
 *
 * Unless "strict" is given, we try access() for existence of "%s.git/.git",
 * "%s/.git", "%s.git", "%s" in this order.  The first one that exists is
 * what we try.
 *
 * Second, we try chdir() to that.  Upon failure, we return NULL.
 *
 * Then, we try if the current directory is a valid git repository.
 * Upon failure, we return NULL.
 *
 * If all goes well, we return the directory we used to chdir() (but
 * before ~user is expanded), avoiding getcwd() resolving symbolic
 * links.  User relative paths are also returned as they are given,
 * except DWIM suffixing.
 */
302
const char *enter_repo(const char *path, int strict)
303
{
304 305 306 307
	static char used_path[PATH_MAX];
	static char validated_path[PATH_MAX];

	if (!path)
308 309
		return NULL;

310 311
	if (!strict) {
		static const char *suffix[] = {
312
			"/.git", "", ".git/.git", ".git", NULL,
313
		};
314
		const char *gitfile;
315 316
		int len = strlen(path);
		int i;
317
		while ((1 < len) && (path[len-1] == '/'))
318
			len--;
319

320
		if (PATH_MAX <= len)
321
			return NULL;
322 323 324 325 326
		strncpy(used_path, path, len); used_path[len] = 0 ;
		strcpy(validated_path, used_path);

		if (used_path[0] == '~') {
			char *newpath = expand_user_path(used_path);
327 328
			if (!newpath || (PATH_MAX - 10 < strlen(newpath))) {
				free(newpath);
329
				return NULL;
330 331 332 333 334 335 336 337
			}
			/*
			 * Copy back into the static buffer. A pity
			 * since newpath was not bounded, but other
			 * branches of the if are limited by PATH_MAX
			 * anyway.
			 */
			strcpy(used_path, newpath); free(newpath);
338 339 340
		}
		else if (PATH_MAX - 10 < len)
			return NULL;
341
		len = strlen(used_path);
342
		for (i = 0; suffix[i]; i++) {
343
			struct stat st;
344
			strcpy(used_path + len, suffix[i]);
345 346 347
			if (!stat(used_path, &st) &&
			    (S_ISREG(st.st_mode) ||
			    (S_ISDIR(st.st_mode) && is_git_directory(used_path)))) {
348 349 350 351
				strcat(validated_path, suffix[i]);
				break;
			}
		}
352 353 354 355 356 357
		if (!suffix[i])
			return NULL;
		gitfile = read_gitfile(used_path) ;
		if (gitfile)
			strcpy(used_path, gitfile);
		if (chdir(used_path))
358
			return NULL;
359
		path = validated_path;
360
	}
361 362
	else if (chdir(path))
		return NULL;
363

364
	if (access("objects", X_OK) == 0 && access("refs", X_OK) == 0 &&
365
	    validate_headref("HEAD") == 0) {
René Scharfe's avatar
René Scharfe committed
366
		set_git_dir(".");
367
		check_repository_format();
368
		return path;
369 370 371 372
	}

	return NULL;
}
373

374
static int calc_shared_perm(int mode)
375
{
376
	int tweak;
377

378
	if (shared_repository < 0)
379
		tweak = -shared_repository;
380
	else
381
		tweak = shared_repository;
382 383 384 385 386 387 388 389 390

	if (!(mode & S_IWUSR))
		tweak &= ~0222;
	if (mode & S_IXUSR)
		/* Copy read bits to execute bits */
		tweak |= (tweak & 0444) >> 2;
	if (shared_repository < 0)
		mode = (mode & ~0777) | tweak;
	else
391
		mode |= tweak;
392

393 394 395 396 397 398 399 400 401 402 403 404 405 406 407
	return mode;
}


int adjust_shared_perm(const char *path)
{
	int old_mode, new_mode;

	if (!shared_repository)
		return 0;
	if (get_st_mode_bits(path, &old_mode) < 0)
		return -1;

	new_mode = calc_shared_perm(old_mode);
	if (S_ISDIR(old_mode)) {
408
		/* Copy read bits to execute bits */
409 410
		new_mode |= (new_mode & 0444) >> 2;
		new_mode |= FORCE_DIR_SET_GID;
411 412
	}

413 414
	if (((old_mode ^ new_mode) & ~S_IFMT) &&
			chmod(path, (new_mode & ~S_IFMT)) < 0)
415 416 417
		return -2;
	return 0;
}
418

419 420 421 422 423 424 425 426 427 428
static int have_same_root(const char *path1, const char *path2)
{
	int is_abs1, is_abs2;

	is_abs1 = is_absolute_path(path1);
	is_abs2 = is_absolute_path(path2);
	return (is_abs1 && is_abs2 && tolower(path1[0]) == tolower(path2[0])) ||
	       (!is_abs1 && !is_abs2);
}

429 430 431 432 433 434 435 436
/*
 * Give path as relative to prefix.
 *
 * The strbuf may or may not be used, so do not assume it contains the
 * returned path.
 */
const char *relative_path(const char *in, const char *prefix,
			  struct strbuf *sb)
437
{
438 439 440 441
	int in_len = in ? strlen(in) : 0;
	int prefix_len = prefix ? strlen(prefix) : 0;
	int in_off = 0;
	int prefix_off = 0;
442 443
	int i = 0, j = 0;

444 445 446 447 448
	if (!in_len)
		return "./";
	else if (!prefix_len)
		return in;

449 450 451 452 453 454 455 456 457 458
	if (have_same_root(in, prefix)) {
		/* bypass dos_drive, for "c:" is identical to "C:" */
		if (has_dos_drive_prefix(in)) {
			i = 2;
			j = 2;
		}
	} else {
		return in;
	}

459 460 461
	while (i < prefix_len && j < in_len && prefix[i] == in[j]) {
		if (is_dir_sep(prefix[i])) {
			while (is_dir_sep(prefix[i]))
462
				i++;
463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
			while (is_dir_sep(in[j]))
				j++;
			prefix_off = i;
			in_off = j;
		} else {
			i++;
			j++;
		}
	}

	if (
	    /* "prefix" seems like prefix of "in" */
	    i >= prefix_len &&
	    /*
	     * but "/foo" is not a prefix of "/foobar"
	     * (i.e. prefix not end with '/')
	     */
	    prefix_off < prefix_len) {
		if (j >= in_len) {
			/* in="/a/b", prefix="/a/b" */
			in_off = in_len;
		} else if (is_dir_sep(in[j])) {
			/* in="/a/b/c", prefix="/a/b" */
			while (is_dir_sep(in[j]))
487
				j++;
488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522
			in_off = j;
		} else {
			/* in="/a/bbb/c", prefix="/a/b" */
			i = prefix_off;
		}
	} else if (
		   /* "in" is short than "prefix" */
		   j >= in_len &&
		   /* "in" not end with '/' */
		   in_off < in_len) {
		if (is_dir_sep(prefix[i])) {
			/* in="/a/b", prefix="/a/b/c/" */
			while (is_dir_sep(prefix[i]))
				i++;
			in_off = in_len;
		}
	}
	in += in_off;
	in_len -= in_off;

	if (i >= prefix_len) {
		if (!in_len)
			return "./";
		else
			return in;
	}

	strbuf_reset(sb);
	strbuf_grow(sb, in_len);

	while (i < prefix_len) {
		if (is_dir_sep(prefix[i])) {
			strbuf_addstr(sb, "../");
			while (is_dir_sep(prefix[i]))
				i++;
523 524 525 526
			continue;
		}
		i++;
	}
527 528 529 530 531 532
	if (!is_dir_sep(prefix[prefix_len - 1]))
		strbuf_addstr(sb, "../");

	strbuf_addstr(sb, in);

	return sb->buf;
533
}
534

535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579
/*
 * A simpler implementation of relative_path
 *
 * Get relative path by removing "prefix" from "in". This function
 * first appears in v1.5.6-1-g044bbbc, and makes git_dir shorter
 * to increase performance when traversing the path to work_tree.
 */
const char *remove_leading_path(const char *in, const char *prefix)
{
	static char buf[PATH_MAX + 1];
	int i = 0, j = 0;

	if (!prefix || !prefix[0])
		return in;
	while (prefix[i]) {
		if (is_dir_sep(prefix[i])) {
			if (!is_dir_sep(in[j]))
				return in;
			while (is_dir_sep(prefix[i]))
				i++;
			while (is_dir_sep(in[j]))
				j++;
			continue;
		} else if (in[j] != prefix[i]) {
			return in;
		}
		i++;
		j++;
	}
	if (
	    /* "/foo" is a prefix of "/foo" */
	    in[j] &&
	    /* "/foo" is not a prefix of "/foobar" */
	    !is_dir_sep(prefix[i-1]) && !is_dir_sep(in[j])
	   )
		return in;
	while (is_dir_sep(in[j]))
		j++;
	if (!in[j])
		strcpy(buf, ".");
	else
		strcpy(buf, in + j);
	return buf;
}

580
/*
581
 * It is okay if dst == src, but they should not overlap otherwise.
582
 *
583 584 585
 * Performs the following normalizations on src, storing the result in dst:
 * - Ensures that components are separated by '/' (Windows only)
 * - Squashes sequences of '/'.
586 587
 * - Removes "." components.
 * - Removes ".." components, and the components the precede them.
588 589
 * Returns failure (non-zero) if a ".." component appears as first path
 * component anytime during the normalization. Otherwise, returns success (0).
590 591 592
 *
 * Note that this function is purely textual.  It does not follow symlinks,
 * verify the existence of the path, or make any system calls.
593 594 595 596 597 598
 *
 * prefix_len != NULL is for a specific case of prefix_pathspec():
 * assume that src == dst and src[0..prefix_len-1] is already
 * normalized, any time "../" eats up to the prefix_len part,
 * prefix_len is reduced. In the end prefix_len is the remaining
 * prefix that has not been overridden by user pathspec.
599
 */
600
int normalize_path_copy_len(char *dst, const char *src, int *prefix_len)
601
{
602
	char *dst0;
603

604 605 606
	if (has_dos_drive_prefix(src)) {
		*dst++ = *src++;
		*dst++ = *src++;
607
	}
608
	dst0 = dst;
609

610
	if (is_dir_sep(*src)) {
611
		*dst++ = '/';
612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650
		while (is_dir_sep(*src))
			src++;
	}

	for (;;) {
		char c = *src;

		/*
		 * A path component that begins with . could be
		 * special:
		 * (1) "." and ends   -- ignore and terminate.
		 * (2) "./"           -- ignore them, eat slash and continue.
		 * (3) ".." and ends  -- strip one and terminate.
		 * (4) "../"          -- strip one, eat slash and continue.
		 */
		if (c == '.') {
			if (!src[1]) {
				/* (1) */
				src++;
			} else if (is_dir_sep(src[1])) {
				/* (2) */
				src += 2;
				while (is_dir_sep(*src))
					src++;
				continue;
			} else if (src[1] == '.') {
				if (!src[2]) {
					/* (3) */
					src += 2;
					goto up_one;
				} else if (is_dir_sep(src[2])) {
					/* (4) */
					src += 3;
					while (is_dir_sep(*src))
						src++;
					goto up_one;
				}
			}
		}
651

652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668
		/* copy up to the next '/', and eat all '/' */
		while ((c = *src++) != '\0' && !is_dir_sep(c))
			*dst++ = c;
		if (is_dir_sep(c)) {
			*dst++ = '/';
			while (is_dir_sep(c))
				c = *src++;
			src--;
		} else if (!c)
			break;
		continue;

	up_one:
		/*
		 * dst0..dst is prefix portion, and dst[-1] is '/';
		 * go up one level.
		 */
669 670
		dst--;	/* go to trailing '/' */
		if (dst <= dst0)
671
			return -1;
672 673 674
		/* Windows: dst[-1] cannot be backslash anymore */
		while (dst0 < dst && dst[-1] != '/')
			dst--;
675 676
		if (prefix_len && *prefix_len > dst - dst0)
			*prefix_len = dst - dst0;
677
	}
678
	*dst = '\0';
679
	return 0;
680
}
681

682 683 684 685 686
int normalize_path_copy(char *dst, const char *src)
{
	return normalize_path_copy_len(dst, src, NULL);
}

687 688
/*
 * path = Canonical absolute path
689 690
 * prefixes = string_list containing normalized, absolute paths without
 * trailing slashes (except for the root directory, which is denoted by "/").
691
 *
692
 * Determines, for each path in prefixes, whether the "prefix"
693 694
 * is an ancestor directory of path.  Returns the length of the longest
 * ancestor directory, excluding any trailing slashes, or -1 if no prefix
695 696
 * is an ancestor.  (Note that this means 0 is returned if prefixes is
 * ["/"].) "/foo" is not considered an ancestor of "/foobar".  Directories
697 698
 * are not considered to be their own ancestors.  path must be in a
 * canonical form: empty components, or "." or ".." components are not
699
 * allowed.
700
 */
701
int longest_ancestor_length(const char *path, struct string_list *prefixes)
702
{
703
	int i, max_len = -1;
704

705
	if (!strcmp(path, "/"))
706 707
		return -1;

708 709
	for (i = 0; i < prefixes->nr; i++) {
		const char *ceil = prefixes->items[i].string;
710 711
		int len = strlen(ceil);

712 713 714 715 716 717
		if (len == 1 && ceil[0] == '/')
			len = 0; /* root matches anything, with length 0 */
		else if (!strncmp(path, ceil, len) && path[len] == '/')
			; /* match of length len */
		else
			continue; /* no match */
718

719
		if (len > max_len)
720 721 722 723 724
			max_len = len;
	}

	return max_len;
}
725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760

/* strip arbitrary amount of directory separators at end of path */
static inline int chomp_trailing_dir_sep(const char *path, int len)
{
	while (len && is_dir_sep(path[len - 1]))
		len--;
	return len;
}

/*
 * If path ends with suffix (complete path components), returns the
 * part before suffix (sans trailing directory separators).
 * Otherwise returns NULL.
 */
char *strip_path_suffix(const char *path, const char *suffix)
{
	int path_len = strlen(path), suffix_len = strlen(suffix);

	while (suffix_len) {
		if (!path_len)
			return NULL;

		if (is_dir_sep(path[path_len - 1])) {
			if (!is_dir_sep(suffix[suffix_len - 1]))
				return NULL;
			path_len = chomp_trailing_dir_sep(path, path_len);
			suffix_len = chomp_trailing_dir_sep(suffix, suffix_len);
		}
		else if (path[--path_len] != suffix[--suffix_len])
			return NULL;
	}

	if (path_len && !is_dir_sep(path[path_len - 1]))
		return NULL;
	return xstrndup(path, chomp_trailing_dir_sep(path, path_len));
}
761 762 763 764 765 766 767 768

int daemon_avoid_alias(const char *p)
{
	int sl, ndot;

	/*
	 * This resurrects the belts and suspenders paranoia check by HPA
	 * done in <[email protected]> thread, now enter_repo()
769
	 * does not do getcwd() based path canonicalization.
770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807
	 *
	 * sl becomes true immediately after seeing '/' and continues to
	 * be true as long as dots continue after that without intervening
	 * non-dot character.
	 */
	if (!p || (*p != '/' && *p != '~'))
		return -1;
	sl = 1; ndot = 0;
	p++;

	while (1) {
		char ch = *p++;
		if (sl) {
			if (ch == '.')
				ndot++;
			else if (ch == '/') {
				if (ndot < 3)
					/* reject //, /./ and /../ */
					return -1;
				ndot = 0;
			}
			else if (ch == 0) {
				if (0 < ndot && ndot < 3)
					/* reject /.$ and /..$ */
					return -1;
				return 0;
			}
			else
				sl = ndot = 0;
		}
		else if (ch == 0)
			return 0;
		else if (ch == '/') {
			sl = 1;
			ndot = 0;
		}
	}
}