daklib/queue.py

   1 #!/usr/bin/env python
   2 # vim:set et sw=4:
   3
   4 """
   5 Queue utility functions for dak
   6
   7 @contact: Debian FTP Master <ftpmaster@debian.org>
   8 @copyright: 2001 - 2006 James Troup <james@nocrew.org>
   9 @copyright: 2009  Joerg Jaspert <joerg@debian.org>
  10 @license: GNU General Public License version 2 or later
  11 """
  12
  13 # This program is free software; you can redistribute it and/or modify
  14 # it under the terms of the GNU General Public License as published by
  15 # the Free Software Foundation; either version 2 of the License, or
  16 # (at your option) any later version.
  17
  18 # This program is distributed in the hope that it will be useful,
  19 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  20 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  21 # GNU General Public License for more details.
  22
  23 # You should have received a copy of the GNU General Public License
  24 # along with this program; if not, write to the Free Software
  25 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  26
  27 ###############################################################################
  28
  29 import cPickle
  30 import errno
  31 import os
  32 import pg
  33 import stat
  34 import sys
  35 import time
  36 import apt_inst
  37 import apt_pkg
  38 import utils
  39 import commands
  40 import shutil
  41 import textwrap
  42 from types import *
  43
  44 import yaml
  45
  46 from dak_exceptions import *
  47 from changes import *
  48 from regexes import *
  49 from config import Config
  50 from holding import Holding
  51 from dbconn import *
  52 from summarystats import SummaryStats
  53 from utils import parse_changes, check_dsc_files
  54 from textutils import fix_maintainer
  55 from binary import Binary
  56
  57 ###############################################################################
  58
  59 def get_type(f, session):
  60     """
  61     Get the file type of C{f}
  62
  63     @type f: dict
  64     @param f: file entry from Changes object
  65
  66     @type session: SQLA Session
  67     @param session: SQL Alchemy session object
  68
  69     @rtype: string
  70     @return: filetype
  71
  72     """
  73     # Determine the type
  74     if f.has_key("dbtype"):
  75         file_type = f["dbtype"]
  76     elif re_source_ext.match(f["type"]):
  77         file_type = "dsc"
  78     else:
  79         utils.fubar("invalid type (%s) for new.  Dazed, confused and sure as heck not continuing." % (file_type))
  80
  81     # Validate the override type
  82     type_id = get_override_type(file_type, session)
  83     if type_id is None:
  84         utils.fubar("invalid type (%s) for new.  Say wha?" % (file_type))
  85
  86     return file_type
  87
  88 ################################################################################
  89
  90 # Determine what parts in a .changes are NEW
  91
  92 def determine_new(changes, files, warn=1):
  93     """
  94     Determine what parts in a C{changes} file are NEW.
  95
  96     @type changes: Upload.Pkg.changes dict
  97     @param changes: Changes dictionary
  98
  99     @type files: Upload.Pkg.files dict
 100     @param files: Files dictionary
 101
 102     @type warn: bool
 103     @param warn: Warn if overrides are added for (old)stable
 104
 105     @rtype: dict
 106     @return: dictionary of NEW components.
 107
 108     """
 109     new = {}
 110
 111     session = DBConn().session()
 112
 113     # Build up a list of potentially new things
 114     for name, f in files.items():
 115         # Skip byhand elements
 116         if f["type"] == "byhand":
 117             continue
 118         pkg = f["package"]
 119         priority = f["priority"]
 120         section = f["section"]
 121         file_type = get_type(f, session)
 122         component = f["component"]
 123
 124         if file_type == "dsc":
 125             priority = "source"
 126
 127         if not new.has_key(pkg):
 128             new[pkg] = {}
 129             new[pkg]["priority"] = priority
 130             new[pkg]["section"] = section
 131             new[pkg]["type"] = file_type
 132             new[pkg]["component"] = component
 133             new[pkg]["files"] = []
 134         else:
 135             old_type = new[pkg]["type"]
 136             if old_type != file_type:
 137                 # source gets trumped by deb or udeb
 138                 if old_type == "dsc":
 139                     new[pkg]["priority"] = priority
 140                     new[pkg]["section"] = section
 141                     new[pkg]["type"] = file_type
 142                     new[pkg]["component"] = component
 143
 144         new[pkg]["files"].append(name)
 145
 146         if f.has_key("othercomponents"):
 147             new[pkg]["othercomponents"] = f["othercomponents"]
 148
 149     for suite in changes["suite"].keys():
 150         for pkg in new.keys():
 151             ql = get_override(pkg, suite, new[pkg]["component"], new[pkg]["type"], session)
 152             if len(ql) > 0:
 153                 for file_entry in new[pkg]["files"]:
 154                     if files[file_entry].has_key("new"):
 155                         del files[file_entry]["new"]
 156                 del new[pkg]
 157
 158     if warn:
 159         for s in ['stable', 'oldstable']:
 160             if changes["suite"].has_key(s):
 161                 print "WARNING: overrides will be added for %s!" % s
 162         for pkg in new.keys():
 163             if new[pkg].has_key("othercomponents"):
 164                 print "WARNING: %s already present in %s distribution." % (pkg, new[pkg]["othercomponents"])
 165
 166     session.close()
 167
 168     return new
 169
 170 ################################################################################
 171
 172 def check_valid(new):
 173     """
 174     Check if section and priority for NEW packages exist in database.
 175     Additionally does sanity checks:
 176       - debian-installer packages have to be udeb (or source)
 177       - non debian-installer packages can not be udeb
 178       - source priority can only be assigned to dsc file types
 179
 180     @type new: dict
 181     @param new: Dict of new packages with their section, priority and type.
 182
 183     """
 184     for pkg in new.keys():
 185         section_name = new[pkg]["section"]
 186         priority_name = new[pkg]["priority"]
 187         file_type = new[pkg]["type"]
 188
 189         section = get_section(section_name)
 190         if section is None:
 191             new[pkg]["section id"] = -1
 192         else:
 193             new[pkg]["section id"] = section.section_id
 194
 195         priority = get_priority(priority_name)
 196         if priority is None:
 197             new[pkg]["priority id"] = -1
 198         else:
 199             new[pkg]["priority id"] = priority.priority_id
 200
 201         # Sanity checks
 202         di = section_name.find("debian-installer") != -1
 203
 204         # If d-i, we must be udeb and vice-versa
 205         if     (di and file_type not in ("udeb", "dsc")) or \
 206            (not di and file_type == "udeb"):
 207             new[pkg]["section id"] = -1
 208
 209         # If dsc we need to be source and vice-versa
 210         if (priority == "source" and file_type != "dsc") or \
 211            (priority != "source" and file_type == "dsc"):
 212             new[pkg]["priority id"] = -1
 213
 214 ###############################################################################
 215
 216 def lookup_uid_from_fingerprint(fpr, session):
 217     uid = None
 218     uid_name = ""
 219     # This is a stupid default, but see the comments below
 220     is_dm = False
 221
 222     user = get_uid_from_fingerprint(fpr, session)
 223
 224     if user is not None:
 225         uid = user.uid
 226         if user.name is None:
 227             uid_name = ''
 228         else:
 229             uid_name = user.name
 230
 231         # Check the relevant fingerprint (which we have to have)
 232         for f in user.fingerprint:
 233             if f.fingerprint == fpr:
 234                 is_dm = f.keyring.debian_maintainer
 235                 break
 236
 237     return (uid, uid_name, is_dm)
 238
 239 ###############################################################################
 240
 241 # Used by Upload.check_timestamps
 242 class TarTime(object):
 243     def __init__(self, future_cutoff, past_cutoff):
 244         self.reset()
 245         self.future_cutoff = future_cutoff
 246         self.past_cutoff = past_cutoff
 247
 248     def reset(self):
 249         self.future_files = {}
 250         self.ancient_files = {}
 251
 252     def callback(self, Kind, Name, Link, Mode, UID, GID, Size, MTime, Major, Minor):
 253         if MTime > self.future_cutoff:
 254             self.future_files[Name] = MTime
 255         if MTime < self.past_cutoff:
 256             self.ancient_files[Name] = MTime
 257
 258 ###############################################################################
 259
 260 class Upload(object):
 261     """
 262     Everything that has to do with an upload processed.
 263
 264     """
 265     def __init__(self):
 266         self.logger = None
 267         self.pkg = Changes()
 268         self.reset()
 269
 270     ###########################################################################
 271
 272     def reset (self):
 273         """ Reset a number of internal variables."""
 274
 275         # Initialize the substitution template map
 276         cnf = Config()
 277         self.Subst = {}
 278         self.Subst["__ADMIN_ADDRESS__"] = cnf["Dinstall::MyAdminAddress"]
 279         self.Subst["__BUG_SERVER__"] = cnf["Dinstall::BugServer"]
 280         self.Subst["__DISTRO__"] = cnf["Dinstall::MyDistribution"]
 281         self.Subst["__DAK_ADDRESS__"] = cnf["Dinstall::MyEmailAddress"]
 282
 283         self.rejects = []
 284         self.warnings = []
 285         self.notes = []
 286
 287         self.pkg.reset()
 288
 289     def package_info(self):
 290         msg = ''
 291
 292         if len(self.rejects) > 0:
 293             msg += "Reject Reasons:\n"
 294             msg += "\n".join(self.rejects)
 295
 296         if len(self.warnings) > 0:
 297             msg += "Warnings:\n"
 298             msg += "\n".join(self.warnings)
 299
 300         if len(self.notes) > 0:
 301             msg += "Notes:\n"
 302             msg += "\n".join(self.notes)
 303
 304         return msg
 305
 306     ###########################################################################
 307     def update_subst(self):
 308         """ Set up the per-package template substitution mappings """
 309
 310         cnf = Config()
 311
 312         # If 'dak process-unchecked' crashed out in the right place, architecture may still be a string.
 313         if not self.pkg.changes.has_key("architecture") or not \
 314            isinstance(self.pkg.changes["architecture"], DictType):
 315             self.pkg.changes["architecture"] = { "Unknown" : "" }
 316
 317         # and maintainer2047 may not exist.
 318         if not self.pkg.changes.has_key("maintainer2047"):
 319             self.pkg.changes["maintainer2047"] = cnf["Dinstall::MyEmailAddress"]
 320
 321         self.Subst["__ARCHITECTURE__"] = " ".join(self.pkg.changes["architecture"].keys())
 322         self.Subst["__CHANGES_FILENAME__"] = os.path.basename(self.pkg.changes_file)
 323         self.Subst["__FILE_CONTENTS__"] = self.pkg.changes.get("filecontents", "")
 324
 325         # For source uploads the Changed-By field wins; otherwise Maintainer wins.
 326         if self.pkg.changes["architecture"].has_key("source") and \
 327            self.pkg.changes["changedby822"] != "" and \
 328            (self.pkg.changes["changedby822"] != self.pkg.changes["maintainer822"]):
 329
 330             self.Subst["__MAINTAINER_FROM__"] = self.pkg.changes["changedby2047"]
 331             self.Subst["__MAINTAINER_TO__"] = "%s, %s" % (self.pkg.changes["changedby2047"], self.pkg.changes["maintainer2047"])
 332             self.Subst["__MAINTAINER__"] = self.pkg.changes.get("changed-by", "Unknown")
 333         else:
 334             self.Subst["__MAINTAINER_FROM__"] = self.pkg.changes["maintainer2047"]
 335             self.Subst["__MAINTAINER_TO__"] = self.pkg.changes["maintainer2047"]
 336             self.Subst["__MAINTAINER__"] = self.pkg.changes.get("maintainer", "Unknown")
 337
 338         if "sponsoremail" in self.pkg.changes:
 339             self.Subst["__MAINTAINER_TO__"] += ", %s" % self.pkg.changes["sponsoremail"]
 340
 341         if cnf.has_key("Dinstall::TrackingServer") and self.pkg.changes.has_key("source"):
 342             self.Subst["__MAINTAINER_TO__"] += "\nBcc: %s@%s" % (self.pkg.changes["source"], cnf["Dinstall::TrackingServer"])
 343
 344         # Apply any global override of the Maintainer field
 345         if cnf.get("Dinstall::OverrideMaintainer"):
 346             self.Subst["__MAINTAINER_TO__"] = cnf["Dinstall::OverrideMaintainer"]
 347             self.Subst["__MAINTAINER_FROM__"] = cnf["Dinstall::OverrideMaintainer"]
 348
 349         self.Subst["__REJECT_MESSAGE__"] = self.package_info()
 350         self.Subst["__SOURCE__"] = self.pkg.changes.get("source", "Unknown")
 351         self.Subst["__VERSION__"] = self.pkg.changes.get("version", "Unknown")
 352
 353     ###########################################################################
 354     def load_changes(self, filename):
 355         """
 356         @rtype: boolean
 357         @rvalue: whether the changes file was valid or not.  We may want to
 358                  reject even if this is True (see what gets put in self.rejects).
 359                  This is simply to prevent us even trying things later which will
 360                  fail because we couldn't properly parse the file.
 361         """
 362         Cnf = Config()
 363         self.pkg.changes_file = filename
 364
 365         # Parse the .changes field into a dictionary
 366         try:
 367             self.pkg.changes.update(parse_changes(filename))
 368         except CantOpenError:
 369             self.rejects.append("%s: can't read file." % (filename))
 370             return False
 371         except ParseChangesError, line:
 372             self.rejects.append("%s: parse error, can't grok: %s." % (filename, line))
 373             return False
 374         except ChangesUnicodeError:
 375             self.rejects.append("%s: changes file not proper utf-8" % (filename))
 376             return False
 377
 378         # Parse the Files field from the .changes into another dictionary
 379         try:
 380             self.pkg.files.update(utils.build_file_list(self.pkg.changes))
 381         except ParseChangesError, line:
 382             self.rejects.append("%s: parse error, can't grok: %s." % (filename, line))
 383             return False
 384         except UnknownFormatError, format:
 385             self.rejects.append("%s: unknown format '%s'." % (filename, format))
 386             return False
 387
 388         # Check for mandatory fields
 389         for i in ("distribution", "source", "binary", "architecture",
 390                   "version", "maintainer", "files", "changes", "description"):
 391             if not self.pkg.changes.has_key(i):
 392                 # Avoid undefined errors later
 393                 self.rejects.append("%s: Missing mandatory field `%s'." % (filename, i))
 394                 return False
 395
 396         # Strip a source version in brackets from the source field
 397         if re_strip_srcver.search(self.pkg.changes["source"]):
 398             self.pkg.changes["source"] = re_strip_srcver.sub('', self.pkg.changes["source"])
 399
 400         # Ensure the source field is a valid package name.
 401         if not re_valid_pkg_name.match(self.pkg.changes["source"]):
 402             self.rejects.append("%s: invalid source name '%s'." % (filename, self.pkg.changes["source"]))
 403
 404         # Split multi-value fields into a lower-level dictionary
 405         for i in ("architecture", "distribution", "binary", "closes"):
 406             o = self.pkg.changes.get(i, "")
 407             if o != "":
 408                 del self.pkg.changes[i]
 409
 410             self.pkg.changes[i] = {}
 411
 412             for j in o.split():
 413                 self.pkg.changes[i][j] = 1
 414
 415         # Fix the Maintainer: field to be RFC822/2047 compatible
 416         try:
 417             (self.pkg.changes["maintainer822"],
 418              self.pkg.changes["maintainer2047"],
 419              self.pkg.changes["maintainername"],
 420              self.pkg.changes["maintaineremail"]) = \
 421                    fix_maintainer (self.pkg.changes["maintainer"])
 422         except ParseMaintError, msg:
 423             self.rejects.append("%s: Maintainer field ('%s') failed to parse: %s" \
 424                    % (filename, changes["maintainer"], msg))
 425
 426         # ...likewise for the Changed-By: field if it exists.
 427         try:
 428             (self.pkg.changes["changedby822"],
 429              self.pkg.changes["changedby2047"],
 430              self.pkg.changes["changedbyname"],
 431              self.pkg.changes["changedbyemail"]) = \
 432                    fix_maintainer (self.pkg.changes.get("changed-by", ""))
 433         except ParseMaintError, msg:
 434             self.pkg.changes["changedby822"] = ""
 435             self.pkg.changes["changedby2047"] = ""
 436             self.pkg.changes["changedbyname"] = ""
 437             self.pkg.changes["changedbyemail"] = ""
 438
 439             self.rejects.append("%s: Changed-By field ('%s') failed to parse: %s" \
 440                    % (filename, changes["changed-by"], msg))
 441
 442         # Ensure all the values in Closes: are numbers
 443         if self.pkg.changes.has_key("closes"):
 444             for i in self.pkg.changes["closes"].keys():
 445                 if re_isanum.match (i) == None:
 446                     self.rejects.append(("%s: `%s' from Closes field isn't a number." % (filename, i)))
 447
 448         # chopversion = no epoch; chopversion2 = no epoch and no revision (e.g. for .orig.tar.gz comparison)
 449         self.pkg.changes["chopversion"] = re_no_epoch.sub('', self.pkg.changes["version"])
 450         self.pkg.changes["chopversion2"] = re_no_revision.sub('', self.pkg.changes["chopversion"])
 451
 452         # Check there isn't already a changes file of the same name in one
 453         # of the queue directories.
 454         base_filename = os.path.basename(filename)
 455         for d in [ "Accepted", "Byhand", "Done", "New", "ProposedUpdates", "OldProposedUpdates" ]:
 456             if os.path.exists(os.path.join(Cnf["Dir::Queue::%s" % (d) ], base_filename)):
 457                 self.rejects.append("%s: a file with this name already exists in the %s directory." % (base_filename, d))
 458
 459         # Check the .changes is non-empty
 460         if not self.pkg.files:
 461             self.rejects.append("%s: nothing to do (Files field is empty)." % (base_filename))
 462             return False
 463
 464         # Changes was syntactically valid even if we'll reject
 465         return True
 466
 467     ###########################################################################
 468
 469     def check_distributions(self):
 470         "Check and map the Distribution field"
 471
 472         Cnf = Config()
 473
 474         # Handle suite mappings
 475         for m in Cnf.ValueList("SuiteMappings"):
 476             args = m.split()
 477             mtype = args[0]
 478             if mtype == "map" or mtype == "silent-map":
 479                 (source, dest) = args[1:3]
 480                 if self.pkg.changes["distribution"].has_key(source):
 481                     del self.pkg.changes["distribution"][source]
 482                     self.pkg.changes["distribution"][dest] = 1
 483                     if mtype != "silent-map":
 484                         self.notes.append("Mapping %s to %s." % (source, dest))
 485                 if self.pkg.changes.has_key("distribution-version"):
 486                     if self.pkg.changes["distribution-version"].has_key(source):
 487                         self.pkg.changes["distribution-version"][source]=dest
 488             elif mtype == "map-unreleased":
 489                 (source, dest) = args[1:3]
 490                 if self.pkg.changes["distribution"].has_key(source):
 491                     for arch in self.pkg.changes["architecture"].keys():
 492                         if arch not in [ a.arch_string for a in get_suite_architectures(source) ]:
 493                             self.notes.append("Mapping %s to %s for unreleased architecture %s." % (source, dest, arch))
 494                             del self.pkg.changes["distribution"][source]
 495                             self.pkg.changes["distribution"][dest] = 1
 496                             break
 497             elif mtype == "ignore":
 498                 suite = args[1]
 499                 if self.pkg.changes["distribution"].has_key(suite):
 500                     del self.pkg.changes["distribution"][suite]
 501                     self.warnings.append("Ignoring %s as a target suite." % (suite))
 502             elif mtype == "reject":
 503                 suite = args[1]
 504                 if self.pkg.changes["distribution"].has_key(suite):
 505                     self.rejects.append("Uploads to %s are not accepted." % (suite))
 506             elif mtype == "propup-version":
 507                 # give these as "uploaded-to(non-mapped) suites-to-add-when-upload-obsoletes"
 508                 #
 509                 # changes["distribution-version"] looks like: {'testing': 'testing-proposed-updates'}
 510                 if self.pkg.changes["distribution"].has_key(args[1]):
 511                     self.pkg.changes.setdefault("distribution-version", {})
 512                     for suite in args[2:]:
 513                         self.pkg.changes["distribution-version"][suite] = suite
 514
 515         # Ensure there is (still) a target distribution
 516         if len(self.pkg.changes["distribution"].keys()) < 1:
 517             self.rejects.append("No valid distribution remaining.")
 518
 519         # Ensure target distributions exist
 520         for suite in self.pkg.changes["distribution"].keys():
 521             if not Cnf.has_key("Suite::%s" % (suite)):
 522                 self.rejects.append("Unknown distribution `%s'." % (suite))
 523
 524     ###########################################################################
 525
 526     def binary_file_checks(self, f, session):
 527         cnf = Config()
 528         entry = self.pkg.files[f]
 529
 530         # Extract package control information
 531         deb_file = utils.open_file(f)
 532         try:
 533             control = apt_pkg.ParseSection(apt_inst.debExtractControl(deb_file))
 534         except:
 535             self.rejects.append("%s: debExtractControl() raised %s." % (f, sys.exc_type))
 536             deb_file.close()
 537             # Can't continue, none of the checks on control would work.
 538             return
 539
 540         # Check for mandantory "Description:"
 541         deb_file.seek(0)
 542         try:
 543             apt_pkg.ParseSection(apt_inst.debExtractControl(deb_file))["Description"] + '\n'
 544         except:
 545             self.rejects.append("%s: Missing Description in binary package" % (f))
 546             return
 547
 548         deb_file.close()
 549
 550         # Check for mandatory fields
 551         for field in [ "Package", "Architecture", "Version" ]:
 552             if control.Find(field) == None:
 553                 # Can't continue
 554                 self.rejects.append("%s: No %s field in control." % (f, field))
 555                 return
 556
 557         # Ensure the package name matches the one give in the .changes
 558         if not self.pkg.changes["binary"].has_key(control.Find("Package", "")):
 559             self.rejects.append("%s: control file lists name as `%s', which isn't in changes file." % (f, control.Find("Package", "")))
 560
 561         # Validate the package field
 562         package = control.Find("Package")
 563         if not re_valid_pkg_name.match(package):
 564             self.rejects.append("%s: invalid package name '%s'." % (f, package))
 565
 566         # Validate the version field
 567         version = control.Find("Version")
 568         if not re_valid_version.match(version):
 569             self.rejects.append("%s: invalid version number '%s'." % (f, version))
 570
 571         # Ensure the architecture of the .deb is one we know about.
 572         default_suite = cnf.get("Dinstall::DefaultSuite", "Unstable")
 573         architecture = control.Find("Architecture")
 574         upload_suite = self.pkg.changes["distribution"].keys()[0]
 575
 576         if      architecture not in [a.arch_string for a in get_suite_architectures(default_suite, session)] \
 577             and architecture not in [a.arch_string for a in get_suite_architectures(upload_suite, session)]:
 578             self.rejects.append("Unknown architecture '%s'." % (architecture))
 579
 580         # Ensure the architecture of the .deb is one of the ones
 581         # listed in the .changes.
 582         if not self.pkg.changes["architecture"].has_key(architecture):
 583             self.rejects.append("%s: control file lists arch as `%s', which isn't in changes file." % (f, architecture))
 584
 585         # Sanity-check the Depends field
 586         depends = control.Find("Depends")
 587         if depends == '':
 588             self.rejects.append("%s: Depends field is empty." % (f))
 589
 590         # Sanity-check the Provides field
 591         provides = control.Find("Provides")
 592         if provides:
 593             provide = re_spacestrip.sub('', provides)
 594             if provide == '':
 595                 self.rejects.append("%s: Provides field is empty." % (f))
 596             prov_list = provide.split(",")
 597             for prov in prov_list:
 598                 if not re_valid_pkg_name.match(prov):
 599                     self.rejects.append("%s: Invalid Provides field content %s." % (f, prov))
 600
 601         # Check the section & priority match those given in the .changes (non-fatal)
 602         if     control.Find("Section") and entry["section"] != "" \
 603            and entry["section"] != control.Find("Section"):
 604             self.warnings.append("%s control file lists section as `%s', but changes file has `%s'." % \
 605                                 (f, control.Find("Section", ""), entry["section"]))
 606         if control.Find("Priority") and entry["priority"] != "" \
 607            and entry["priority"] != control.Find("Priority"):
 608             self.warnings.append("%s control file lists priority as `%s', but changes file has `%s'." % \
 609                                 (f, control.Find("Priority", ""), entry["priority"]))
 610
 611         entry["package"] = package
 612         entry["architecture"] = architecture
 613         entry["version"] = version
 614         entry["maintainer"] = control.Find("Maintainer", "")
 615
 616         if f.endswith(".udeb"):
 617             self.pkg.files[f]["dbtype"] = "udeb"
 618         elif f.endswith(".deb"):
 619             self.pkg.files[f]["dbtype"] = "deb"
 620         else:
 621             self.rejects.append("%s is neither a .deb or a .udeb." % (f))
 622
 623         entry["source"] = control.Find("Source", entry["package"])
 624
 625         # Get the source version
 626         source = entry["source"]
 627         source_version = ""
 628
 629         if source.find("(") != -1:
 630             m = re_extract_src_version.match(source)
 631             source = m.group(1)
 632             source_version = m.group(2)
 633
 634         if not source_version:
 635             source_version = self.pkg.files[f]["version"]
 636
 637         entry["source package"] = source
 638         entry["source version"] = source_version
 639
 640         # Ensure the filename matches the contents of the .deb
 641         m = re_isadeb.match(f)
 642
 643         #  package name
 644         file_package = m.group(1)
 645         if entry["package"] != file_package:
 646             self.rejects.append("%s: package part of filename (%s) does not match package name in the %s (%s)." % \
 647                                 (f, file_package, entry["dbtype"], entry["package"]))
 648         epochless_version = re_no_epoch.sub('', control.Find("Version"))
 649
 650         #  version
 651         file_version = m.group(2)
 652         if epochless_version != file_version:
 653             self.rejects.append("%s: version part of filename (%s) does not match package version in the %s (%s)." % \
 654                                 (f, file_version, entry["dbtype"], epochless_version))
 655
 656         #  architecture
 657         file_architecture = m.group(3)
 658         if entry["architecture"] != file_architecture:
 659             self.rejects.append("%s: architecture part of filename (%s) does not match package architecture in the %s (%s)." % \
 660                                 (f, file_architecture, entry["dbtype"], entry["architecture"]))
 661
 662         # Check for existent source
 663         source_version = entry["source version"]
 664         source_package = entry["source package"]
 665         if self.pkg.changes["architecture"].has_key("source"):
 666             if source_version != self.pkg.changes["version"]:
 667                 self.rejects.append("source version (%s) for %s doesn't match changes version %s." % \
 668                                     (source_version, f, self.pkg.changes["version"]))
 669         else:
 670             # Check in the SQL database
 671             if not source_exists(source_package, source_version, self.pkg.changes["distribution"].keys(), session):
 672                 # Check in one of the other directories
 673                 source_epochless_version = re_no_epoch.sub('', source_version)
 674                 dsc_filename = "%s_%s.dsc" % (source_package, source_epochless_version)
 675                 if os.path.exists(os.path.join(cnf["Dir::Queue::Byhand"], dsc_filename)):
 676                     entry["byhand"] = 1
 677                 elif os.path.exists(os.path.join(cnf["Dir::Queue::New"], dsc_filename)):
 678                     entry["new"] = 1
 679                 else:
 680                     dsc_file_exists = False
 681                     for myq in ["Accepted", "Embargoed", "Unembargoed", "ProposedUpdates", "OldProposedUpdates"]:
 682                         if cnf.has_key("Dir::Queue::%s" % (myq)):
 683                             if os.path.exists(os.path.join(cnf["Dir::Queue::" + myq], dsc_filename)):
 684                                 dsc_file_exists = True
 685                                 break
 686
 687                     if not dsc_file_exists:
 688                         self.rejects.append("no source found for %s %s (%s)." % (source_package, source_version, f))
 689
 690         # Check the version and for file overwrites
 691         self.check_binary_against_db(f, session)
 692
 693         # Temporarily disable contents generation until we change the table storage layout
 694         #b = Binary(f)
 695         #b.scan_package()
 696         #if len(b.rejects) > 0:
 697         #    for j in b.rejects:
 698         #        self.rejects.append(j)
 699
 700     def source_file_checks(self, f, session):
 701         entry = self.pkg.files[f]
 702
 703         m = re_issource.match(f)
 704         if not m:
 705             return
 706
 707         entry["package"] = m.group(1)
 708         entry["version"] = m.group(2)
 709         entry["type"] = m.group(3)
 710
 711         # Ensure the source package name matches the Source filed in the .changes
 712         if self.pkg.changes["source"] != entry["package"]:
 713             self.rejects.append("%s: changes file doesn't say %s for Source" % (f, entry["package"]))
 714
 715         # Ensure the source version matches the version in the .changes file
 716         if re_is_orig_source.match(f):
 717             changes_version = self.pkg.changes["chopversion2"]
 718         else:
 719             changes_version = self.pkg.changes["chopversion"]
 720
 721         if changes_version != entry["version"]:
 722             self.rejects.append("%s: should be %s according to changes file." % (f, changes_version))
 723
 724         # Ensure the .changes lists source in the Architecture field
 725         if not self.pkg.changes["architecture"].has_key("source"):
 726             self.rejects.append("%s: changes file doesn't list `source' in Architecture field." % (f))
 727
 728         # Check the signature of a .dsc file
 729         if entry["type"] == "dsc":
 730             # check_signature returns either:
 731             #  (None, [list, of, rejects]) or (signature, [])
 732             (self.pkg.dsc["fingerprint"], rejects) = utils.check_signature(f)
 733             for j in rejects:
 734                 self.rejects.append(j)
 735
 736         entry["architecture"] = "source"
 737
 738     def per_suite_file_checks(self, f, suite, session):
 739         cnf = Config()
 740         entry = self.pkg.files[f]
 741         archive = utils.where_am_i()
 742
 743         # Skip byhand
 744         if entry.has_key("byhand"):
 745             return
 746
 747         # Check we have fields we need to do these checks
 748         oktogo = True
 749         for m in ['component', 'package', 'priority', 'size', 'md5sum']:
 750             if not entry.has_key(m):
 751                 self.rejects.append("file '%s' does not have field %s set" % (f, m))
 752                 oktogo = False
 753
 754         if not oktogo:
 755             return
 756
 757         # Handle component mappings
 758         for m in cnf.ValueList("ComponentMappings"):
 759             (source, dest) = m.split()
 760             if entry["component"] == source:
 761                 entry["original component"] = source
 762                 entry["component"] = dest
 763
 764         # Ensure the component is valid for the target suite
 765         if cnf.has_key("Suite:%s::Components" % (suite)) and \
 766            entry["component"] not in cnf.ValueList("Suite::%s::Components" % (suite)):
 767             self.rejects.append("unknown component `%s' for suite `%s'." % (entry["component"], suite))
 768             return
 769
 770         # Validate the component
 771         if not get_component(entry["component"], session):
 772             self.rejects.append("file '%s' has unknown component '%s'." % (f, component))
 773             return
 774
 775         # See if the package is NEW
 776         if not self.in_override_p(entry["package"], entry["component"], suite, entry.get("dbtype",""), f, session):
 777             entry["new"] = 1
 778
 779         # Validate the priority
 780         if entry["priority"].find('/') != -1:
 781             self.rejects.append("file '%s' has invalid priority '%s' [contains '/']." % (f, entry["priority"]))
 782
 783         # Determine the location
 784         location = cnf["Dir::Pool"]
 785         l = get_location(location, entry["component"], archive, session)
 786         if l is None:
 787             self.rejects.append("[INTERNAL ERROR] couldn't determine location (Component: %s, Archive: %s)" % (component, archive))
 788             entry["location id"] = -1
 789         else:
 790             entry["location id"] = l.location_id
 791
 792         # Check the md5sum & size against existing files (if any)
 793         entry["pool name"] = utils.poolify(self.pkg.changes["source"], entry["component"])
 794
 795         found, poolfile = check_poolfile(os.path.join(entry["pool name"], f),
 796                                          entry["size"], entry["md5sum"], entry["location id"])
 797
 798         if found is None:
 799             self.rejects.append("INTERNAL ERROR, get_files_id() returned multiple matches for %s." % (f))
 800         elif found is False and poolfile is not None:
 801             self.rejects.append("md5sum and/or size mismatch on existing copy of %s." % (f))
 802         else:
 803             if poolfile is None:
 804                 entry["files id"] = None
 805             else:
 806                 entry["files id"] = poolfile.file_id
 807
 808         # Check for packages that have moved from one component to another
 809         entry['suite'] = suite
 810         res = get_binary_components(self.pkg.files[f]['package'], suite, entry["architecture"], session)
 811         if res.rowcount > 0:
 812             entry["othercomponents"] = res.fetchone()[0]
 813
 814     def check_files(self, action=True):
 815         archive = utils.where_am_i()
 816         file_keys = self.pkg.files.keys()
 817         holding = Holding()
 818         cnf = Config()
 819
 820         # XXX: As far as I can tell, this can no longer happen - see
 821         #      comments by AJ in old revisions - mhy
 822         # if reprocess is 2 we've already done this and we're checking
 823         # things again for the new .orig.tar.gz.
 824         # [Yes, I'm fully aware of how disgusting this is]
 825         if action and self.reprocess < 2:
 826             cwd = os.getcwd()
 827             os.chdir(self.pkg.directory)
 828             for f in file_keys:
 829                 ret = holding.copy_to_holding(f)
 830                 if ret is not None:
 831                     # XXX: Should we bail out here or try and continue?
 832                     self.rejects.append(ret)
 833
 834             os.chdir(cwd)
 835
 836         # Check there isn't already a .changes or .dak file of the same name in
 837         # the proposed-updates "CopyChanges" or "CopyDotDak" storage directories.
 838         # [NB: this check must be done post-suite mapping]
 839         base_filename = os.path.basename(self.pkg.changes_file)
 840         dot_dak_filename = base_filename[:-8] + ".dak"
 841
 842         for suite in self.pkg.changes["distribution"].keys():
 843             copychanges = "Suite::%s::CopyChanges" % (suite)
 844             if cnf.has_key(copychanges) and \
 845                    os.path.exists(os.path.join(cnf[copychanges], base_filename)):
 846                 self.rejects.append("%s: a file with this name already exists in %s" \
 847                            % (base_filename, cnf[copychanges]))
 848
 849             copy_dot_dak = "Suite::%s::CopyDotDak" % (suite)
 850             if cnf.has_key(copy_dot_dak) and \
 851                    os.path.exists(os.path.join(cnf[copy_dot_dak], dot_dak_filename)):
 852                 self.rejects.append("%s: a file with this name already exists in %s" \
 853                            % (dot_dak_filename, Cnf[copy_dot_dak]))
 854
 855         self.reprocess = 0
 856         has_binaries = False
 857         has_source = False
 858
 859         session = DBConn().session()
 860
 861         for f, entry in self.pkg.files.items():
 862             # Ensure the file does not already exist in one of the accepted directories
 863             for d in [ "Accepted", "Byhand", "New", "ProposedUpdates", "OldProposedUpdates", "Embargoed", "Unembargoed" ]:
 864                 if not cnf.has_key("Dir::Queue::%s" % (d)): continue
 865                 if os.path.exists(cnf["Dir::Queue::%s" % (d) ] + '/' + f):
 866                     self.rejects.append("%s file already exists in the %s directory." % (f, d))
 867
 868             if not re_taint_free.match(f):
 869                 self.rejects.append("!!WARNING!! tainted filename: '%s'." % (f))
 870
 871             # Check the file is readable
 872             if os.access(f, os.R_OK) == 0:
 873                 # When running in -n, copy_to_holding() won't have
 874                 # generated the reject_message, so we need to.
 875                 if action:
 876                     if os.path.exists(f):
 877                         self.rejects.append("Can't read `%s'. [permission denied]" % (f))
 878                     else:
 879                         self.rejects.append("Can't read `%s'. [file not found]" % (f))
 880                 entry["type"] = "unreadable"
 881                 continue
 882
 883             # If it's byhand skip remaining checks
 884             if entry["section"] == "byhand" or entry["section"][:4] == "raw-":
 885                 entry["byhand"] = 1
 886                 entry["type"] = "byhand"
 887
 888             # Checks for a binary package...
 889             elif re_isadeb.match(f):
 890                 has_binaries = True
 891                 entry["type"] = "deb"
 892
 893                 # This routine appends to self.rejects/warnings as appropriate
 894                 self.binary_file_checks(f, session)
 895
 896             # Checks for a source package...
 897             elif re_issource.match(f):
 898                 has_source = True
 899
 900                 # This routine appends to self.rejects/warnings as appropriate
 901                 self.source_file_checks(f, session)
 902
 903             # Not a binary or source package?  Assume byhand...
 904             else:
 905                 entry["byhand"] = 1
 906                 entry["type"] = "byhand"
 907
 908             # Per-suite file checks
 909             entry["oldfiles"] = {}
 910             for suite in self.pkg.changes["distribution"].keys():
 911                 self.per_suite_file_checks(f, suite, session)
 912
 913         session.close()
 914
 915         # If the .changes file says it has source, it must have source.
 916         if self.pkg.changes["architecture"].has_key("source"):
 917             if not has_source:
 918                 self.rejects.append("no source found and Architecture line in changes mention source.")
 919
 920             if not has_binaries and cnf.FindB("Dinstall::Reject::NoSourceOnly"):
 921                 self.rejects.append("source only uploads are not supported.")
 922
 923     ###########################################################################
 924     def check_dsc(self, action=True, session=None):
 925         """Returns bool indicating whether or not the source changes are valid"""
 926         # Ensure there is source to check
 927         if not self.pkg.changes["architecture"].has_key("source"):
 928             return True
 929
 930         # Find the .dsc
 931         dsc_filename = None
 932         for f, entry in self.pkg.files.items():
 933             if entry["type"] == "dsc":
 934                 if dsc_filename:
 935                     self.rejects.append("can not process a .changes file with multiple .dsc's.")
 936                     return False
 937                 else:
 938                     dsc_filename = f
 939
 940         # If there isn't one, we have nothing to do. (We have reject()ed the upload already)
 941         if not dsc_filename:
 942             self.rejects.append("source uploads must contain a dsc file")
 943             return False
 944
 945         # Parse the .dsc file
 946         try:
 947             self.pkg.dsc.update(utils.parse_changes(dsc_filename, signing_rules=1))
 948         except CantOpenError:
 949             # if not -n copy_to_holding() will have done this for us...
 950             if not action:
 951                 self.rejects.append("%s: can't read file." % (dsc_filename))
 952         except ParseChangesError, line:
 953             self.rejects.append("%s: parse error, can't grok: %s." % (dsc_filename, line))
 954         except InvalidDscError, line:
 955             self.rejects.append("%s: syntax error on line %s." % (dsc_filename, line))
 956         except ChangesUnicodeError:
 957             self.rejects.append("%s: dsc file not proper utf-8." % (dsc_filename))
 958
 959         # Build up the file list of files mentioned by the .dsc
 960         try:
 961             self.pkg.dsc_files.update(utils.build_file_list(self.pkg.dsc, is_a_dsc=1))
 962         except NoFilesFieldError:
 963             self.rejects.append("%s: no Files: field." % (dsc_filename))
 964             return False
 965         except UnknownFormatError, format:
 966             self.rejects.append("%s: unknown format '%s'." % (dsc_filename, format))
 967             return False
 968         except ParseChangesError, line:
 969             self.rejects.append("%s: parse error, can't grok: %s." % (dsc_filename, line))
 970             return False
 971
 972         # Enforce mandatory fields
 973         for i in ("format", "source", "version", "binary", "maintainer", "architecture", "files"):
 974             if not self.pkg.dsc.has_key(i):
 975                 self.rejects.append("%s: missing mandatory field `%s'." % (dsc_filename, i))
 976                 return False
 977
 978         # Validate the source and version fields
 979         if not re_valid_pkg_name.match(self.pkg.dsc["source"]):
 980             self.rejects.append("%s: invalid source name '%s'." % (dsc_filename, self.pkg.dsc["source"]))
 981         if not re_valid_version.match(self.pkg.dsc["version"]):
 982             self.rejects.append("%s: invalid version number '%s'." % (dsc_filename, self.pkg.dsc["version"]))
 983
 984         # Only a limited list of source formats are allowed in each suite
 985         for dist in self.pkg.changes["distribution"].keys():
 986             allowed = [ x.format_name for x in get_suite_src_formats(dist, session) ]
 987             if self.pkg.dsc["format"] not in allowed:
 988                 self.rejects.append("%s: source format '%s' not allowed in %s (accepted: %s) " % (dsc_filename, self.pkg.dsc["format"], dist, ", ".join(allowed)))
 989
 990         # Validate the Maintainer field
 991         try:
 992             # We ignore the return value
 993             fix_maintainer(self.pkg.dsc["maintainer"])
 994         except ParseMaintError, msg:
 995             self.rejects.append("%s: Maintainer field ('%s') failed to parse: %s" \
 996                                  % (dsc_filename, self.pkg.dsc["maintainer"], msg))
 997
 998         # Validate the build-depends field(s)
 999         for field_name in [ "build-depends", "build-depends-indep" ]:
1000             field = self.pkg.dsc.get(field_name)
1001             if field:
1002                 # Check for broken dpkg-dev lossage...
1003                 if field.startswith("ARRAY"):
1004                     self.rejects.append("%s: invalid %s field produced by a broken version of dpkg-dev (1.10.11)" % \
1005                                         (dsc_filename, field_name.title()))
1006
1007                 # Have apt try to parse them...
1008                 try:
1009                     apt_pkg.ParseSrcDepends(field)
1010                 except:
1011                     self.rejects.append("%s: invalid %s field (can not be parsed by apt)." % (dsc_filename, field_name.title()))
1012
1013         # Ensure the version number in the .dsc matches the version number in the .changes
1014         epochless_dsc_version = re_no_epoch.sub('', self.pkg.dsc["version"])
1015         changes_version = self.pkg.files[dsc_filename]["version"]
1016
1017         if epochless_dsc_version != self.pkg.files[dsc_filename]["version"]:
1018             self.rejects.append("version ('%s') in .dsc does not match version ('%s') in .changes." % (epochless_dsc_version, changes_version))
1019
1020         # Ensure the Files field contain only what's expected
1021         self.rejects.extend(check_dsc_files(dsc_filename, self.pkg.dsc, self.pkg.dsc_files))
1022
1023         # Ensure source is newer than existing source in target suites
1024         session = DBConn().session()
1025         self.check_source_against_db(dsc_filename, session)
1026         self.check_dsc_against_db(dsc_filename, session)
1027         session.close()
1028
1029         return True
1030
1031     ###########################################################################
1032
1033     def get_changelog_versions(self, source_dir):
1034         """Extracts a the source package and (optionally) grabs the
1035         version history out of debian/changelog for the BTS."""
1036
1037         cnf = Config()
1038
1039         # Find the .dsc (again)
1040         dsc_filename = None
1041         for f in self.pkg.files.keys():
1042             if self.pkg.files[f]["type"] == "dsc":
1043                 dsc_filename = f
1044
1045         # If there isn't one, we have nothing to do. (We have reject()ed the upload already)
1046         if not dsc_filename:
1047             return
1048
1049         # Create a symlink mirror of the source files in our temporary directory
1050         for f in self.pkg.files.keys():
1051             m = re_issource.match(f)
1052             if m:
1053                 src = os.path.join(source_dir, f)
1054                 # If a file is missing for whatever reason, give up.
1055                 if not os.path.exists(src):
1056                     return
1057                 ftype = m.group(3)
1058                 if re_is_orig_source.match(f) and pkg.orig_files.has_key(f) and \
1059                    pkg.orig_files[f].has_key("path"):
1060                     continue
1061                 dest = os.path.join(os.getcwd(), f)
1062                 os.symlink(src, dest)
1063
1064         # If the orig files are not a part of the upload, create symlinks to the
1065         # existing copies.
1066         for orig_file in self.pkg.orig_files.keys():
1067             if not self.pkg.orig_files[orig_file].has_key("path"):
1068                 continue
1069             dest = os.path.join(os.getcwd(), os.path.basename(orig_file))
1070             os.symlink(self.pkg.orig_files[orig_file]["path"], dest)
1071
1072         # Extract the source
1073         cmd = "dpkg-source -sn -x %s" % (dsc_filename)
1074         (result, output) = commands.getstatusoutput(cmd)
1075         if (result != 0):
1076             self.rejects.append("'dpkg-source -x' failed for %s [return code: %s]." % (dsc_filename, result))
1077             self.rejects.append(utils.prefix_multi_line_string(output, " [dpkg-source output:] "), "")
1078             return
1079
1080         if not cnf.Find("Dir::Queue::BTSVersionTrack"):
1081             return
1082
1083         # Get the upstream version
1084         upstr_version = re_no_epoch.sub('', self.pkg.dsc["version"])
1085         if re_strip_revision.search(upstr_version):
1086             upstr_version = re_strip_revision.sub('', upstr_version)
1087
1088         # Ensure the changelog file exists
1089         changelog_filename = "%s-%s/debian/changelog" % (self.pkg.dsc["source"], upstr_version)
1090         if not os.path.exists(changelog_filename):
1091             self.rejects.append("%s: debian/changelog not found in extracted source." % (dsc_filename))
1092             return
1093
1094         # Parse the changelog
1095         self.pkg.dsc["bts changelog"] = ""
1096         changelog_file = utils.open_file(changelog_filename)
1097         for line in changelog_file.readlines():
1098             m = re_changelog_versions.match(line)
1099             if m:
1100                 self.pkg.dsc["bts changelog"] += line
1101         changelog_file.close()
1102
1103         # Check we found at least one revision in the changelog
1104         if not self.pkg.dsc["bts changelog"]:
1105             self.rejects.append("%s: changelog format not recognised (empty version tree)." % (dsc_filename))
1106
1107     def check_source(self):
1108         # XXX: I'm fairly sure reprocess == 2 can never happen
1109         #      AJT disabled the is_incoming check years ago - mhy
1110         #      We should probably scrap or rethink the whole reprocess thing
1111         # Bail out if:
1112         #    a) there's no source
1113         # or b) reprocess is 2 - we will do this check next time when orig
1114         #       tarball is in 'files'
1115         # or c) the orig files are MIA
1116         if not self.pkg.changes["architecture"].has_key("source") or self.reprocess == 2 \
1117            or len(self.pkg.orig_files) == 0:
1118             return
1119
1120         tmpdir = utils.temp_dirname()
1121
1122         # Move into the temporary directory
1123         cwd = os.getcwd()
1124         os.chdir(tmpdir)
1125
1126         # Get the changelog version history
1127         self.get_changelog_versions(cwd)
1128
1129         # Move back and cleanup the temporary tree
1130         os.chdir(cwd)
1131
1132         try:
1133             shutil.rmtree(tmpdir)
1134         except OSError, e:
1135             if e.errno != errno.EACCES:
1136                 print "foobar"
1137                 utils.fubar("%s: couldn't remove tmp dir for source tree." % (self.pkg.dsc["source"]))
1138
1139             self.rejects.append("%s: source tree could not be cleanly removed." % (self.pkg.dsc["source"]))
1140             # We probably have u-r or u-w directories so chmod everything
1141             # and try again.
1142             cmd = "chmod -R u+rwx %s" % (tmpdir)
1143             result = os.system(cmd)
1144             if result != 0:
1145                 utils.fubar("'%s' failed with result %s." % (cmd, result))
1146             shutil.rmtree(tmpdir)
1147         except Exception, e:
1148             print "foobar2 (%s)" % e
1149             utils.fubar("%s: couldn't remove tmp dir for source tree." % (self.pkg.dsc["source"]))
1150
1151     ###########################################################################
1152     def ensure_hashes(self):
1153         # Make sure we recognise the format of the Files: field in the .changes
1154         format = self.pkg.changes.get("format", "0.0").split(".", 1)
1155         if len(format) == 2:
1156             format = int(format[0]), int(format[1])
1157         else:
1158             format = int(float(format[0])), 0
1159
1160         # We need to deal with the original changes blob, as the fields we need
1161         # might not be in the changes dict serialised into the .dak anymore.
1162         orig_changes = utils.parse_deb822(self.pkg.changes['filecontents'])
1163
1164         # Copy the checksums over to the current changes dict.  This will keep
1165         # the existing modifications to it intact.
1166         for field in orig_changes:
1167             if field.startswith('checksums-'):
1168                 self.pkg.changes[field] = orig_changes[field]
1169
1170         # Check for unsupported hashes
1171         for j in utils.check_hash_fields(".changes", self.pkg.changes):
1172             self.rejects.append(j)
1173
1174         for j in utils.check_hash_fields(".dsc", self.pkg.dsc):
1175             self.rejects.append(j)
1176
1177         # We have to calculate the hash if we have an earlier changes version than
1178         # the hash appears in rather than require it exist in the changes file
1179         for hashname, hashfunc, version in utils.known_hashes:
1180             # TODO: Move _ensure_changes_hash into this class
1181             for j in utils._ensure_changes_hash(self.pkg.changes, format, version, self.pkg.files, hashname, hashfunc):
1182                 self.rejects.append(j)
1183             if "source" in self.pkg.changes["architecture"]:
1184                 # TODO: Move _ensure_dsc_hash into this class
1185                 for j in utils._ensure_dsc_hash(self.pkg.dsc, self.pkg.dsc_files, hashname, hashfunc):
1186                     self.rejects.append(j)
1187
1188     def check_hashes(self):
1189         for m in utils.check_hash(".changes", self.pkg.files, "md5", apt_pkg.md5sum):
1190             self.rejects.append(m)
1191
1192         for m in utils.check_size(".changes", self.pkg.files):
1193             self.rejects.append(m)
1194
1195         for m in utils.check_hash(".dsc", self.pkg.dsc_files, "md5", apt_pkg.md5sum):
1196             self.rejects.append(m)
1197
1198         for m in utils.check_size(".dsc", self.pkg.dsc_files):
1199             self.rejects.append(m)
1200
1201         self.ensure_hashes()
1202
1203     ###########################################################################
1204     def check_urgency(self):
1205         cnf = Config()
1206         if self.pkg.changes["architecture"].has_key("source"):
1207             if not self.pkg.changes.has_key("urgency"):
1208                 self.pkg.changes["urgency"] = cnf["Urgency::Default"]
1209             self.pkg.changes["urgency"] = self.pkg.changes["urgency"].lower()
1210             if self.pkg.changes["urgency"] not in cnf.ValueList("Urgency::Valid"):
1211                 self.warnings.append("%s is not a valid urgency; it will be treated as %s by testing." % \
1212                                      (self.pkg.changes["urgency"], cnf["Urgency::Default"]))
1213                 self.pkg.changes["urgency"] = cnf["Urgency::Default"]
1214
1215     ###########################################################################
1216
1217     # Sanity check the time stamps of files inside debs.
1218     # [Files in the near future cause ugly warnings and extreme time
1219     #  travel can cause errors on extraction]
1220
1221     def check_timestamps(self):
1222         Cnf = Config()
1223
1224         future_cutoff = time.time() + int(Cnf["Dinstall::FutureTimeTravelGrace"])
1225         past_cutoff = time.mktime(time.strptime(Cnf["Dinstall::PastCutoffYear"],"%Y"))
1226         tar = TarTime(future_cutoff, past_cutoff)
1227
1228         for filename, entry in self.pkg.files.items():
1229             if entry["type"] == "deb":
1230                 tar.reset()
1231                 try:
1232                     deb_file = utils.open_file(filename)
1233                     apt_inst.debExtract(deb_file, tar.callback, "control.tar.gz")
1234                     deb_file.seek(0)
1235                     try:
1236                         apt_inst.debExtract(deb_file, tar.callback, "data.tar.gz")
1237                     except SystemError, e:
1238                         # If we can't find a data.tar.gz, look for data.tar.bz2 instead.
1239                         if not re.search(r"Cannot f[ui]nd chunk data.tar.gz$", str(e)):
1240                             raise
1241                         deb_file.seek(0)
1242                         apt_inst.debExtract(deb_file,tar.callback,"data.tar.bz2")
1243
1244                     deb_file.close()
1245
1246                     future_files = tar.future_files.keys()
1247                     if future_files:
1248                         num_future_files = len(future_files)
1249                         future_file = future_files[0]
1250                         future_date = tar.future_files[future_file]
1251                         self.rejects.append("%s: has %s file(s) with a time stamp too far into the future (e.g. %s [%s])."
1252                                % (filename, num_future_files, future_file, time.ctime(future_date)))
1253
1254                     ancient_files = tar.ancient_files.keys()
1255                     if ancient_files:
1256                         num_ancient_files = len(ancient_files)
1257                         ancient_file = ancient_files[0]
1258                         ancient_date = tar.ancient_files[ancient_file]
1259                         self.rejects.append("%s: has %s file(s) with a time stamp too ancient (e.g. %s [%s])."
1260                                % (filename, num_ancient_files, ancient_file, time.ctime(ancient_date)))
1261                 except:
1262                     self.rejects.append("%s: deb contents timestamp check failed [%s: %s]" % (filename, sys.exc_type, sys.exc_value))
1263
1264     ###########################################################################
1265     def check_transition(self, session):
1266         cnf = Config()
1267
1268         sourcepkg = self.pkg.changes["source"]
1269
1270         # No sourceful upload -> no need to do anything else, direct return
1271         # We also work with unstable uploads, not experimental or those going to some
1272         # proposed-updates queue
1273         if "source" not in self.pkg.changes["architecture"] or \
1274            "unstable" not in self.pkg.changes["distribution"]:
1275             return
1276
1277         # Also only check if there is a file defined (and existant) with
1278         # checks.
1279         transpath = cnf.get("Dinstall::Reject::ReleaseTransitions", "")
1280         if transpath == "" or not os.path.exists(transpath):
1281             return
1282
1283         # Parse the yaml file
1284         sourcefile = file(transpath, 'r')
1285         sourcecontent = sourcefile.read()
1286         try:
1287             transitions = yaml.load(sourcecontent)
1288         except yaml.YAMLError, msg:
1289             # This shouldn't happen, there is a wrapper to edit the file which
1290             # checks it, but we prefer to be safe than ending up rejecting
1291             # everything.
1292             utils.warn("Not checking transitions, the transitions file is broken: %s." % (msg))
1293             return
1294
1295         # Now look through all defined transitions
1296         for trans in transitions:
1297             t = transitions[trans]
1298             source = t["source"]
1299             expected = t["new"]
1300
1301             # Will be None if nothing is in testing.
1302             current = get_source_in_suite(source, "testing", session)
1303             if current is not None:
1304                 compare = apt_pkg.VersionCompare(current.version, expected)
1305
1306             if current is None or compare < 0:
1307                 # This is still valid, the current version in testing is older than
1308                 # the new version we wait for, or there is none in testing yet
1309
1310                 # Check if the source we look at is affected by this.
1311                 if sourcepkg in t['packages']:
1312                     # The source is affected, lets reject it.
1313
1314                     rejectmsg = "%s: part of the %s transition.\n\n" % (
1315                         sourcepkg, trans)
1316
1317                     if current is not None:
1318                         currentlymsg = "at version %s" % (current.version)
1319                     else:
1320                         currentlymsg = "not present in testing"
1321
1322                     rejectmsg += "Transition description: %s\n\n" % (t["reason"])
1323
1324                     rejectmsg += "\n".join(textwrap.wrap("""Your package
1325 is part of a testing transition designed to get %s migrated (it is
1326 currently %s, we need version %s).  This transition is managed by the
1327 Release Team, and %s is the Release-Team member responsible for it.
1328 Please mail debian-release@lists.debian.org or contact %s directly if you
1329 need further assistance.  You might want to upload to experimental until this
1330 transition is done."""
1331                             % (source, currentlymsg, expected,t["rm"], t["rm"])))
1332
1333                     self.rejects.append(rejectmsg)
1334                     return
1335
1336     ###########################################################################
1337     def check_signed_by_key(self):
1338         """Ensure the .changes is signed by an authorized uploader."""
1339         session = DBConn().session()
1340
1341         self.check_transition(session)
1342
1343         (uid, uid_name, is_dm) = lookup_uid_from_fingerprint(self.pkg.changes["fingerprint"], session=session)
1344
1345         # match claimed name with actual name:
1346         if uid is None:
1347             # This is fundamentally broken but need us to refactor how we get
1348             # the UIDs/Fingerprints in order for us to fix it properly
1349             uid, uid_email = self.pkg.changes["fingerprint"], uid
1350             may_nmu, may_sponsor = 1, 1
1351             # XXX by default new dds don't have a fingerprint/uid in the db atm,
1352             #     and can't get one in there if we don't allow nmu/sponsorship
1353         elif is_dm is False:
1354             # If is_dm is False, we allow full upload rights
1355             uid_email = "%s@debian.org" % (uid)
1356             may_nmu, may_sponsor = 1, 1
1357         else:
1358             # Assume limited upload rights unless we've discovered otherwise
1359             uid_email = uid
1360             may_nmu, may_sponsor = 0, 0
1361
1362         if uid_email in [self.pkg.changes["maintaineremail"], self.pkg.changes["changedbyemail"]]:
1363             sponsored = 0
1364         elif uid_name in [self.pkg.changes["maintainername"], self.pkg.changes["changedbyname"]]:
1365             sponsored = 0
1366             if uid_name == "": sponsored = 1
1367         else:
1368             sponsored = 1
1369             if ("source" in self.pkg.changes["architecture"] and
1370                 uid_email and utils.is_email_alias(uid_email)):
1371                 sponsor_addresses = utils.gpg_get_key_addresses(self.pkg.changes["fingerprint"])
1372                 if (self.pkg.changes["maintaineremail"] not in sponsor_addresses and
1373                     self.pkg.changes["changedbyemail"] not in sponsor_addresses):
1374                     self.pkg.changes["sponsoremail"] = uid_email
1375
1376         if sponsored and not may_sponsor:
1377             self.rejects.append("%s is not authorised to sponsor uploads" % (uid))
1378
1379         if not sponsored and not may_nmu:
1380             should_reject = True
1381             highest_sid, highest_version = None, None
1382
1383             # XXX: This reimplements in SQLA what existed before but it's fundamentally fucked
1384             #      It ignores higher versions with the dm_upload_allowed flag set to false
1385             #      I'm keeping the existing behaviour for now until I've gone back and
1386             #      checked exactly what the GR says - mhy
1387             for si in get_sources_from_name(source=self.pkg.changes['source'], dm_upload_allowed=True, session=session):
1388                 if highest_version is None or apt_pkg.VersionCompare(si.version, highest_version) == 1:
1389                      highest_sid = si.source_id
1390                      highest_version = si.version
1391
1392             if highest_sid is None:
1393                 self.rejects.append("Source package %s does not have 'DM-Upload-Allowed: yes' in its most recent version" % self.pkg.changes["source"])
1394             else:
1395                 for sup in session.query(SrcUploader).join(DBSource).filter_by(source_id=highest_sid):
1396                     (rfc822, rfc2047, name, email) = sup.maintainer.get_split_maintainer()
1397                     if email == uid_email or name == uid_name:
1398                         should_reject = False
1399                         break
1400
1401             if should_reject is True:
1402                 self.rejects.append("%s is not in Maintainer or Uploaders of source package %s" % (uid, self.pkg.changes["source"]))
1403
1404             for b in self.pkg.changes["binary"].keys():
1405                 for suite in self.pkg.changes["distribution"].keys():
1406                     q = session.query(DBSource)
1407                     q = q.join(DBBinary).filter_by(package=b)
1408                     q = q.join(BinAssociation).join(Suite).filter_by(suite_name=suite)
1409
1410                     for s in q.all():
1411                         if s.source != self.pkg.changes["source"]:
1412                             self.rejects.append("%s may not hijack %s from source package %s in suite %s" % (uid, b, s, suite))
1413
1414             for f in self.pkg.files.keys():
1415                 if self.pkg.files[f].has_key("byhand"):
1416                     self.rejects.append("%s may not upload BYHAND file %s" % (uid, f))
1417                 if self.pkg.files[f].has_key("new"):
1418                     self.rejects.append("%s may not upload NEW file %s" % (uid, f))
1419
1420         session.close()
1421
1422     ###########################################################################
1423     def build_summaries(self):
1424         """ Build a summary of changes the upload introduces. """
1425
1426         (byhand, new, summary, override_summary) = self.pkg.file_summary()
1427
1428         short_summary = summary
1429
1430         # This is for direport's benefit...
1431         f = re_fdnic.sub("\n .\n", self.pkg.changes.get("changes", ""))
1432
1433         if byhand or new:
1434             summary += "Changes: " + f
1435
1436         summary += "\n\nOverride entries for your package:\n" + override_summary + "\n"
1437
1438         summary += self.announce(short_summary, 0)
1439
1440         return (summary, short_summary)
1441
1442     ###########################################################################
1443
1444     def close_bugs(self, summary, action):
1445         """
1446         Send mail to close bugs as instructed by the closes field in the changes file.
1447         Also add a line to summary if any work was done.
1448
1449         @type summary: string
1450         @param summary: summary text, as given by L{build_summaries}
1451
1452         @type action: bool
1453         @param action: Set to false no real action will be done.
1454
1455         @rtype: string
1456         @return: summary. If action was taken, extended by the list of closed bugs.
1457
1458         """
1459
1460         template = os.path.join(Config()["Dir::Templates"], 'process-unchecked.bug-close')
1461
1462         bugs = self.pkg.changes["closes"].keys()
1463
1464         if not bugs:
1465             return summary
1466
1467         bugs.sort()
1468         summary += "Closing bugs: "
1469         for bug in bugs:
1470             summary += "%s " % (bug)
1471             if action:
1472                 self.update_subst()
1473                 self.Subst["__BUG_NUMBER__"] = bug
1474                 if self.pkg.changes["distribution"].has_key("stable"):
1475                     self.Subst["__STABLE_WARNING__"] = """
1476 Note that this package is not part of the released stable Debian
1477 distribution.  It may have dependencies on other unreleased software,
1478 or other instabilities.  Please take care if you wish to install it.
1479 The update will eventually make its way into the next released Debian
1480 distribution."""
1481                 else:
1482                     self.Subst["__STABLE_WARNING__"] = ""
1483                 mail_message = utils.TemplateSubst(self.Subst, template)
1484                 utils.send_mail(mail_message)
1485
1486                 # Clear up after ourselves
1487                 del self.Subst["__BUG_NUMBER__"]
1488                 del self.Subst["__STABLE_WARNING__"]
1489
1490         if action and self.logger:
1491             self.logger.log(["closing bugs"] + bugs)
1492
1493         summary += "\n"
1494
1495         return summary
1496
1497     ###########################################################################
1498
1499     def announce(self, short_summary, action):
1500         """
1501         Send an announce mail about a new upload.
1502
1503         @type short_summary: string
1504         @param short_summary: Short summary text to include in the mail
1505
1506         @type action: bool
1507         @param action: Set to false no real action will be done.
1508
1509         @rtype: string
1510         @return: Textstring about action taken.
1511
1512         """
1513
1514         cnf = Config()
1515         announcetemplate = os.path.join(cnf["Dir::Templates"], 'process-unchecked.announce')
1516
1517         # Only do announcements for source uploads with a recent dpkg-dev installed
1518         if float(self.pkg.changes.get("format", 0)) < 1.6 or not \
1519            self.pkg.changes["architecture"].has_key("source"):
1520             return ""
1521
1522         lists_done = {}
1523         summary = ""
1524
1525         self.Subst["__SHORT_SUMMARY__"] = short_summary
1526
1527         for dist in self.pkg.changes["distribution"].keys():
1528             announce_list = cnf.Find("Suite::%s::Announce" % (dist))
1529             if announce_list == "" or lists_done.has_key(announce_list):
1530                 continue
1531
1532             lists_done[announce_list] = 1
1533             summary += "Announcing to %s\n" % (announce_list)
1534
1535             if action:
1536                 self.update_subst()
1537                 self.Subst["__ANNOUNCE_LIST_ADDRESS__"] = announce_list
1538                 if cnf.get("Dinstall::TrackingServer") and \
1539                    self.pkg.changes["architecture"].has_key("source"):
1540                     trackingsendto = "Bcc: %s@%s" % (self.pkg.changes["source"], cnf["Dinstall::TrackingServer"])
1541                     self.Subst["__ANNOUNCE_LIST_ADDRESS__"] += "\n" + trackingsendto
1542
1543                 mail_message = utils.TemplateSubst(self.Subst, announcetemplate)
1544                 utils.send_mail(mail_message)
1545
1546                 del self.Subst["__ANNOUNCE_LIST_ADDRESS__"]
1547
1548         if cnf.FindB("Dinstall::CloseBugs"):
1549             summary = self.close_bugs(summary, action)
1550
1551         del self.Subst["__SHORT_SUMMARY__"]
1552
1553         return summary
1554
1555     ###########################################################################
1556
1557     def accept (self, summary, short_summary, targetdir=None):
1558         """
1559         Accept an upload.
1560
1561         This moves all files referenced from the .changes into the I{accepted}
1562         queue, sends the accepted mail, announces to lists, closes bugs and
1563         also checks for override disparities. If enabled it will write out
1564         the version history for the BTS Version Tracking and will finally call
1565         L{queue_build}.
1566
1567         @type summary: string
1568         @param summary: Summary text
1569
1570         @type short_summary: string
1571         @param short_summary: Short summary
1572
1573         """
1574
1575         cnf = Config()
1576         stats = SummaryStats()
1577
1578         accepttemplate = os.path.join(cnf["Dir::Templates"], 'process-unchecked.accepted')
1579
1580         if targetdir is None:
1581             targetdir = cnf["Dir::Queue::Accepted"]
1582
1583         print "Accepting."
1584         if self.logger:
1585             self.logger.log(["Accepting changes", self.pkg.changes_file])
1586
1587         self.pkg.write_dot_dak(targetdir)
1588
1589         # Move all the files into the accepted directory
1590         utils.move(self.pkg.changes_file, targetdir)
1591
1592         for name, entry in sorted(self.pkg.files.items()):
1593             utils.move(name, targetdir)
1594             stats.accept_bytes += float(entry["size"])
1595
1596         stats.accept_count += 1
1597
1598         # Send accept mail, announce to lists, close bugs and check for
1599         # override disparities
1600         if not cnf["Dinstall::Options::No-Mail"]:
1601             self.update_subst()
1602             self.Subst["__SUITE__"] = ""
1603             self.Subst["__SUMMARY__"] = summary
1604             mail_message = utils.TemplateSubst(self.Subst, accepttemplate)
1605             utils.send_mail(mail_message)
1606             self.announce(short_summary, 1)
1607
1608         ## Helper stuff for DebBugs Version Tracking
1609         if cnf.Find("Dir::Queue::BTSVersionTrack"):
1610             # ??? once queue/* is cleared on *.d.o and/or reprocessed
1611             # the conditionalization on dsc["bts changelog"] should be
1612             # dropped.
1613
1614             # Write out the version history from the changelog
1615             if self.pkg.changes["architecture"].has_key("source") and \
1616                self.pkg.dsc.has_key("bts changelog"):
1617
1618                 (fd, temp_filename) = utils.temp_filename(cnf["Dir::Queue::BTSVersionTrack"], prefix=".")
1619                 version_history = os.fdopen(fd, 'w')
1620                 version_history.write(self.pkg.dsc["bts changelog"])
1621                 version_history.close()
1622                 filename = "%s/%s" % (cnf["Dir::Queue::BTSVersionTrack"],
1623                                       self.pkg.changes_file[:-8]+".versions")
1624                 os.rename(temp_filename, filename)
1625                 os.chmod(filename, 0644)
1626
1627             # Write out the binary -> source mapping.
1628             (fd, temp_filename) = utils.temp_filename(cnf["Dir::Queue::BTSVersionTrack"], prefix=".")
1629             debinfo = os.fdopen(fd, 'w')
1630             for name, entry in sorted(self.pkg.files.items()):
1631                 if entry["type"] == "deb":
1632                     line = " ".join([entry["package"], entry["version"],
1633                                      entry["architecture"], entry["source package"],
1634                                      entry["source version"]])
1635                     debinfo.write(line+"\n")
1636             debinfo.close()
1637             filename = "%s/%s" % (cnf["Dir::Queue::BTSVersionTrack"],
1638                                   self.pkg.changes_file[:-8]+".debinfo")
1639             os.rename(temp_filename, filename)
1640             os.chmod(filename, 0644)
1641
1642         # Its is Cnf["Dir::Queue::Accepted"] here, not targetdir!
1643         # <Ganneff> we do call queue_build too
1644         # <mhy> well yes, we'd have had to if we were inserting into accepted
1645         # <Ganneff> now. thats database only.
1646         # <mhy> urgh, that's going to get messy
1647         # <Ganneff> so i make the p-n call to it *also* using accepted/
1648         # <mhy> but then the packages will be in the queue_build table without the files being there
1649         # <Ganneff> as the buildd queue is only regenerated whenever unchecked runs
1650         # <mhy> ah, good point
1651         # <Ganneff> so it will work out, as unchecked move it over
1652         # <mhy> that's all completely sick
1653         # <Ganneff> yes
1654
1655         # This routine returns None on success or an error on failure
1656         res = get_queue('accepted').autobuild_upload(self.pkg, cnf["Dir::Queue::Accepted"])
1657         if res:
1658             utils.fubar(res)
1659
1660
1661     def check_override(self):
1662         """
1663         Checks override entries for validity. Mails "Override disparity" warnings,
1664         if that feature is enabled.
1665
1666         Abandons the check if
1667           - override disparity checks are disabled
1668           - mail sending is disabled
1669         """
1670
1671         cnf = Config()
1672
1673         # Abandon the check if:
1674         #  a) override disparity checks have been disabled
1675         #  b) we're not sending mail
1676         if not cnf.FindB("Dinstall::OverrideDisparityCheck") or \
1677            cnf["Dinstall::Options::No-Mail"]:
1678             return
1679
1680         summary = self.pkg.check_override()
1681
1682         if summary == "":
1683             return
1684
1685         overridetemplate = os.path.join(cnf["Dir::Templates"], 'process-unchecked.override-disparity')
1686
1687         self.update_subst()
1688         self.Subst["__SUMMARY__"] = summary
1689         mail_message = utils.TemplateSubst(self.Subst, overridetemplate)
1690         utils.send_mail(mail_message)
1691         del self.Subst["__SUMMARY__"]
1692
1693     ###########################################################################
1694
1695     def remove(self, dir=None):
1696         """
1697         Used (for instance) in p-u to remove the package from unchecked
1698         """
1699         if dir is None:
1700             os.chdir(self.pkg.directory)
1701         else:
1702             os.chdir(dir)
1703
1704         for f in self.pkg.files.keys():
1705             os.unlink(f)
1706         os.unlink(self.pkg.changes_file)
1707
1708     ###########################################################################
1709
1710     def move_to_dir (self, dest, perms=0660, changesperms=0664):
1711         """
1712         Move files to dest with certain perms/changesperms
1713         """
1714         utils.move(self.pkg.changes_file, dest, perms=changesperms)
1715         for f in self.pkg.files.keys():
1716             utils.move(f, dest, perms=perms)
1717
1718     ###########################################################################
1719
1720     def force_reject(self, reject_files):
1721         """
1722         Forcefully move files from the current directory to the
1723         reject directory.  If any file already exists in the reject
1724         directory it will be moved to the morgue to make way for
1725         the new file.
1726
1727         @type files: dict
1728         @param files: file dictionary
1729
1730         """
1731
1732         cnf = Config()
1733
1734         for file_entry in reject_files:
1735             # Skip any files which don't exist or which we don't have permission to copy.
1736             if os.access(file_entry, os.R_OK) == 0:
1737                 continue
1738
1739             dest_file = os.path.join(cnf["Dir::Queue::Reject"], file_entry)
1740
1741             try:
1742                 dest_fd = os.open(dest_file, os.O_RDWR | os.O_CREAT | os.O_EXCL, 0644)
1743             except OSError, e:
1744                 # File exists?  Let's try and move it to the morgue
1745                 if e.errno == errno.EEXIST:
1746                     morgue_file = os.path.join(cnf["Dir::Morgue"], cnf["Dir::MorgueReject"], file_entry)
1747                     try:
1748                         morgue_file = utils.find_next_free(morgue_file)
1749                     except NoFreeFilenameError:
1750                         # Something's either gone badly Pete Tong, or
1751                         # someone is trying to exploit us.
1752                         utils.warn("**WARNING** failed to move %s from the reject directory to the morgue." % (file_entry))
1753                         return
1754                     utils.move(dest_file, morgue_file, perms=0660)
1755                     try:
1756                         dest_fd = os.open(dest_file, os.O_RDWR|os.O_CREAT|os.O_EXCL, 0644)
1757                     except OSError, e:
1758                         # Likewise
1759                         utils.warn("**WARNING** failed to claim %s in the reject directory." % (file_entry))
1760                         return
1761                 else:
1762                     raise
1763             # If we got here, we own the destination file, so we can
1764             # safely overwrite it.
1765             utils.move(file_entry, dest_file, 1, perms=0660)
1766             os.close(dest_fd)
1767
1768     ###########################################################################
1769     def do_reject (self, manual=0, reject_message="", note=""):
1770         """
1771         Reject an upload. If called without a reject message or C{manual} is
1772         true, spawn an editor so the user can write one.
1773
1774         @type manual: bool
1775         @param manual: manual or automated rejection
1776
1777         @type reject_message: string
1778         @param reject_message: A reject message
1779
1780         @return: 0
1781
1782         """
1783         # If we weren't given a manual rejection message, spawn an
1784         # editor so the user can add one in...
1785         if manual and not reject_message:
1786             (fd, temp_filename) = utils.temp_filename()
1787             temp_file = os.fdopen(fd, 'w')
1788             if len(note) > 0:
1789                 for line in note:
1790                     temp_file.write(line)
1791             temp_file.close()
1792             editor = os.environ.get("EDITOR","vi")
1793             answer = 'E'
1794             while answer == 'E':
1795                 os.system("%s %s" % (editor, temp_filename))
1796                 temp_fh = utils.open_file(temp_filename)
1797                 reject_message = "".join(temp_fh.readlines())
1798                 temp_fh.close()
1799                 print "Reject message:"
1800                 print utils.prefix_multi_line_string(reject_message,"  ",include_blank_lines=1)
1801                 prompt = "[R]eject, Edit, Abandon, Quit ?"
1802                 answer = "XXX"
1803                 while prompt.find(answer) == -1:
1804                     answer = utils.our_raw_input(prompt)
1805                     m = re_default_answer.search(prompt)
1806                     if answer == "":
1807                         answer = m.group(1)
1808                     answer = answer[:1].upper()
1809             os.unlink(temp_filename)
1810             if answer == 'A':
1811                 return 1
1812             elif answer == 'Q':
1813                 sys.exit(0)
1814
1815         print "Rejecting.\n"
1816
1817         cnf = Config()
1818
1819         reason_filename = self.pkg.changes_file[:-8] + ".reason"
1820         reason_filename = os.path.join(cnf["Dir::Queue::Reject"], reason_filename)
1821
1822         # Move all the files into the reject directory
1823         reject_files = self.pkg.files.keys() + [self.pkg.changes_file]
1824         self.force_reject(reject_files)
1825
1826         # If we fail here someone is probably trying to exploit the race
1827         # so let's just raise an exception ...
1828         if os.path.exists(reason_filename):
1829             os.unlink(reason_filename)
1830         reason_fd = os.open(reason_filename, os.O_RDWR|os.O_CREAT|os.O_EXCL, 0644)
1831
1832         rej_template = os.path.join(cnf["Dir::Templates"], "queue.rejected")
1833
1834         self.update_subst()
1835         if not manual:
1836             self.Subst["__REJECTOR_ADDRESS__"] = cnf["Dinstall::MyEmailAddress"]
1837             self.Subst["__MANUAL_REJECT_MESSAGE__"] = ""
1838             self.Subst["__CC__"] = "X-DAK-Rejection: automatic (moo)\nX-Katie-Rejection: automatic (moo)"
1839             os.write(reason_fd, reject_message)
1840             reject_mail_message = utils.TemplateSubst(self.Subst, rej_template)
1841         else:
1842             # Build up the rejection email
1843             user_email_address = utils.whoami() + " <%s>" % (cnf["Dinstall::MyAdminAddress"])
1844             self.Subst["__REJECTOR_ADDRESS__"] = user_email_address
1845             self.Subst["__MANUAL_REJECT_MESSAGE__"] = reject_message
1846             self.Subst["__CC__"] = "Cc: " + cnf["Dinstall::MyEmailAddress"]
1847             reject_mail_message = utils.TemplateSubst(self.Subst, rej_template)
1848             # Write the rejection email out as the <foo>.reason file
1849             os.write(reason_fd, reject_mail_message)
1850
1851         del self.Subst["__REJECTOR_ADDRESS__"]
1852         del self.Subst["__MANUAL_REJECT_MESSAGE__"]
1853         del self.Subst["__CC__"]
1854
1855         os.close(reason_fd)
1856
1857         # Send the rejection mail if appropriate
1858         if not cnf["Dinstall::Options::No-Mail"]:
1859             utils.send_mail(reject_mail_message)
1860
1861         if self.logger:
1862             self.logger.log(["rejected", self.pkg.changes_file])
1863
1864         return 0
1865
1866     ################################################################################
1867     def in_override_p(self, package, component, suite, binary_type, file, session):
1868         """
1869         Check if a package already has override entries in the DB
1870
1871         @type package: string
1872         @param package: package name
1873
1874         @type component: string
1875         @param component: database id of the component
1876
1877         @type suite: int
1878         @param suite: database id of the suite
1879
1880         @type binary_type: string
1881         @param binary_type: type of the package
1882
1883         @type file: string
1884         @param file: filename we check
1885
1886         @return: the database result. But noone cares anyway.
1887
1888         """
1889
1890         cnf = Config()
1891
1892         if binary_type == "": # must be source
1893             file_type = "dsc"
1894         else:
1895             file_type = binary_type
1896
1897         # Override suite name; used for example with proposed-updates
1898         if cnf.Find("Suite::%s::OverrideSuite" % (suite)) != "":
1899             suite = cnf["Suite::%s::OverrideSuite" % (suite)]
1900
1901         result = get_override(package, suite, component, file_type, session)
1902
1903         # If checking for a source package fall back on the binary override type
1904         if file_type == "dsc" and len(result) < 1:
1905             result = get_override(package, suite, component, ['deb', 'udeb'], session)
1906
1907         # Remember the section and priority so we can check them later if appropriate
1908         if len(result) > 0:
1909             result = result[0]
1910             self.pkg.files[file]["override section"] = result.section.section
1911             self.pkg.files[file]["override priority"] = result.priority.priority
1912             return result
1913
1914         return None
1915
1916     ################################################################################
1917     def get_anyversion(self, sv_list, suite):
1918         """
1919         @type sv_list: list
1920         @param sv_list: list of (suite, version) tuples to check
1921
1922         @type suite: string
1923         @param suite: suite name
1924
1925         Description: TODO
1926         """
1927         Cnf = Config()
1928         anyversion = None
1929         anysuite = [suite] + Cnf.ValueList("Suite::%s::VersionChecks::Enhances" % (suite))
1930         for (s, v) in sv_list:
1931             if s in [ x.lower() for x in anysuite ]:
1932                 if not anyversion or apt_pkg.VersionCompare(anyversion, v) <= 0:
1933                     anyversion = v
1934
1935         return anyversion
1936
1937     ################################################################################
1938
1939     def cross_suite_version_check(self, sv_list, file, new_version, sourceful=False):
1940         """
1941         @type sv_list: list
1942         @param sv_list: list of (suite, version) tuples to check
1943
1944         @type file: string
1945         @param file: XXX
1946
1947         @type new_version: string
1948         @param new_version: XXX
1949
1950         Ensure versions are newer than existing packages in target
1951         suites and that cross-suite version checking rules as
1952         set out in the conf file are satisfied.
1953         """
1954
1955         cnf = Config()
1956
1957         # Check versions for each target suite
1958         for target_suite in self.pkg.changes["distribution"].keys():
1959             must_be_newer_than = [ i.lower() for i in cnf.ValueList("Suite::%s::VersionChecks::MustBeNewerThan" % (target_suite)) ]
1960             must_be_older_than = [ i.lower() for i in cnf.ValueList("Suite::%s::VersionChecks::MustBeOlderThan" % (target_suite)) ]
1961
1962             # Enforce "must be newer than target suite" even if conffile omits it
1963             if target_suite not in must_be_newer_than:
1964                 must_be_newer_than.append(target_suite)
1965
1966             for (suite, existent_version) in sv_list:
1967                 vercmp = apt_pkg.VersionCompare(new_version, existent_version)
1968
1969                 if suite in must_be_newer_than and sourceful and vercmp < 1:
1970                     self.rejects.append("%s: old version (%s) in %s >= new version (%s) targeted at %s." % (file, existent_version, suite, new_version, target_suite))
1971
1972                 if suite in must_be_older_than and vercmp > -1:
1973                     cansave = 0
1974
1975                     if self.pkg.changes.get('distribution-version', {}).has_key(suite):
1976                         # we really use the other suite, ignoring the conflicting one ...
1977                         addsuite = self.pkg.changes["distribution-version"][suite]
1978
1979                         add_version = self.get_anyversion(sv_list, addsuite)
1980                         target_version = self.get_anyversion(sv_list, target_suite)
1981
1982                         if not add_version:
1983                             # not add_version can only happen if we map to a suite
1984                             # that doesn't enhance the suite we're propup'ing from.
1985                             # so "propup-ver x a b c; map a d" is a problem only if
1986                             # d doesn't enhance a.
1987                             #
1988                             # i think we could always propagate in this case, rather
1989                             # than complaining. either way, this isn't a REJECT issue
1990                             #
1991                             # And - we really should complain to the dorks who configured dak
1992                             self.warnings.append("%s is mapped to, but not enhanced by %s - adding anyways" % (suite, addsuite))
1993                             self.pkg.changes.setdefault("propdistribution", {})
1994                             self.pkg.changes["propdistribution"][addsuite] = 1
1995                             cansave = 1
1996                         elif not target_version:
1997                             # not targets_version is true when the package is NEW
1998                             # we could just stick with the "...old version..." REJECT
1999                             # for this, I think.
2000                             self.rejects.append("Won't propogate NEW packages.")
2001                         elif apt_pkg.VersionCompare(new_version, add_version) < 0:
2002                             # propogation would be redundant. no need to reject though.
2003                             self.warnings.append("ignoring versionconflict: %s: old version (%s) in %s <= new version (%s) targeted at %s." % (file, existent_version, suite, new_version, target_suite))
2004                             cansave = 1
2005                         elif apt_pkg.VersionCompare(new_version, add_version) > 0 and \
2006                              apt_pkg.VersionCompare(add_version, target_version) >= 0:
2007                             # propogate!!
2008                             self.warnings.append("Propogating upload to %s" % (addsuite))
2009                             self.pkg.changes.setdefault("propdistribution", {})
2010                             self.pkg.changes["propdistribution"][addsuite] = 1
2011                             cansave = 1
2012
2013                     if not cansave:
2014                         self.reject.append("%s: old version (%s) in %s <= new version (%s) targeted at %s." % (file, existent_version, suite, new_version, target_suite))
2015
2016     ################################################################################
2017     def check_binary_against_db(self, file, session):
2018         # Ensure version is sane
2019         q = session.query(BinAssociation)
2020         q = q.join(DBBinary).filter(DBBinary.package==self.pkg.files[file]["package"])
2021         q = q.join(Architecture).filter(Architecture.arch_string.in_([self.pkg.files[file]["architecture"], 'all']))
2022
2023         self.cross_suite_version_check([ (x.suite.suite_name, x.binary.version) for x in q.all() ],
2024                                        file, self.pkg.files[file]["version"], sourceful=False)
2025
2026         # Check for any existing copies of the file
2027         q = session.query(DBBinary).filter_by(package=self.pkg.files[file]["package"])
2028         q = q.filter_by(version=self.pkg.files[file]["version"])
2029         q = q.join(Architecture).filter_by(arch_string=self.pkg.files[file]["architecture"])
2030
2031         if q.count() > 0:
2032             self.rejects.append("%s: can not overwrite existing copy already in the archive." % (file))
2033
2034     ################################################################################
2035
2036     def check_source_against_db(self, file, session):
2037         """
2038         """
2039         source = self.pkg.dsc.get("source")
2040         version = self.pkg.dsc.get("version")
2041
2042         # Ensure version is sane
2043         q = session.query(SrcAssociation)
2044         q = q.join(DBSource).filter(DBSource.source==source)
2045
2046         self.cross_suite_version_check([ (x.suite.suite_name, x.source.version) for x in q.all() ],
2047                                        file, version, sourceful=True)
2048
2049     ################################################################################
2050     def check_dsc_against_db(self, file, session):
2051         """
2052
2053         @warning: NB: this function can remove entries from the 'files' index [if
2054          the orig tarball is a duplicate of the one in the archive]; if
2055          you're iterating over 'files' and call this function as part of
2056          the loop, be sure to add a check to the top of the loop to
2057          ensure you haven't just tried to dereference the deleted entry.
2058
2059         """
2060
2061         Cnf = Config()
2062         self.pkg.orig_files = {} # XXX: do we need to clear it?
2063         orig_files = self.pkg.orig_files
2064
2065         # Try and find all files mentioned in the .dsc.  This has
2066         # to work harder to cope with the multiple possible
2067         # locations of an .orig.tar.gz.
2068         # The ordering on the select is needed to pick the newest orig
2069         # when it exists in multiple places.
2070         for dsc_name, dsc_entry in self.pkg.dsc_files.items():
2071             found = None
2072             if self.pkg.files.has_key(dsc_name):
2073                 actual_md5 = self.pkg.files[dsc_name]["md5sum"]
2074                 actual_size = int(self.pkg.files[dsc_name]["size"])
2075                 found = "%s in incoming" % (dsc_name)
2076
2077                 # Check the file does not already exist in the archive
2078                 ql = get_poolfile_like_name(dsc_name, session)
2079
2080                 # Strip out anything that isn't '%s' or '/%s$'
2081                 for i in ql:
2082                     if not i.filename.endswith(dsc_name):
2083                         ql.remove(i)
2084
2085                 # "[dak] has not broken them.  [dak] has fixed a
2086                 # brokenness.  Your crappy hack exploited a bug in
2087                 # the old dinstall.
2088                 #
2089                 # "(Come on!  I thought it was always obvious that
2090                 # one just doesn't release different files with
2091                 # the same name and version.)"
2092                 #                        -- ajk@ on d-devel@l.d.o
2093
2094                 if len(ql) > 0:
2095                     # Ignore exact matches for .orig.tar.gz
2096                     match = 0
2097                     if re_is_orig_source.match(dsc_name):
2098                         for i in ql:
2099                             if self.pkg.files.has_key(dsc_name) and \
2100                                int(self.pkg.files[dsc_name]["size"]) == int(i.filesize) and \
2101                                self.pkg.files[dsc_name]["md5sum"] == i.md5sum:
2102                                 self.warnings.append("ignoring %s, since it's already in the archive." % (dsc_name))
2103                                 # TODO: Don't delete the entry, just mark it as not needed
2104                                 # This would fix the stupidity of changing something we often iterate over
2105                                 # whilst we're doing it
2106                                 del self.pkg.files[dsc_name]
2107                                 if not orig_files.has_key(dsc_name):
2108                                     orig_files[dsc_name] = {}
2109                                 orig_files[dsc_name]["path"] = os.path.join(i.location.path, i.filename)
2110                                 match = 1
2111
2112                     if not match:
2113                         self.rejects.append("can not overwrite existing copy of '%s' already in the archive." % (dsc_name))
2114
2115             elif re_is_orig_source.match(dsc_name):
2116                 # Check in the pool
2117                 ql = get_poolfile_like_name(dsc_name, session)
2118
2119                 # Strip out anything that isn't '%s' or '/%s$'
2120                 # TODO: Shouldn't we just search for things which end with our string explicitly in the SQL?
2121                 for i in ql:
2122                     if not i.filename.endswith(dsc_name):
2123                         ql.remove(i)
2124
2125                 if len(ql) > 0:
2126                     # Unfortunately, we may get more than one match here if,
2127                     # for example, the package was in potato but had an -sa
2128                     # upload in woody.  So we need to choose the right one.
2129
2130                     # default to something sane in case we don't match any or have only one
2131                     x = ql[0]
2132
2133                     if len(ql) > 1:
2134                         for i in ql:
2135                             old_file = os.path.join(i.location.path, i.filename)
2136                             old_file_fh = utils.open_file(old_file)
2137                             actual_md5 = apt_pkg.md5sum(old_file_fh)
2138                             old_file_fh.close()
2139                             actual_size = os.stat(old_file)[stat.ST_SIZE]
2140                             if actual_md5 == dsc_entry["md5sum"] and actual_size == int(dsc_entry["size"]):
2141                                 x = i
2142
2143                     old_file = os.path.join(i.location.path, i.filename)
2144                     old_file_fh = utils.open_file(old_file)
2145                     actual_md5 = apt_pkg.md5sum(old_file_fh)
2146                     old_file_fh.close()
2147                     actual_size = os.stat(old_file)[stat.ST_SIZE]
2148                     found = old_file
2149                     suite_type = x.location.archive_type
2150                     # need this for updating dsc_files in install()
2151                     dsc_entry["files id"] = x.file_id
2152                     # See install() in process-accepted...
2153                     if not orig_files.has_key(dsc_name):
2154                         orig_files[dsc_name] = {}
2155                     orig_files[dsc_name]["id"] = x.file_id
2156                     orig_files[dsc_name]["path"] = old_file
2157                     orig_files[dsc_name]["location"] = x.location.location_id
2158                 else:
2159                     # TODO: Record the queues and info in the DB so we don't hardcode all this crap
2160                     # Not there? Check the queue directories...
2161                     for directory in [ "Accepted", "New", "Byhand", "ProposedUpdates", "OldProposedUpdates", "Embargoed", "Unembargoed" ]:
2162                         if not Cnf.has_key("Dir::Queue::%s" % (directory)):
2163                             continue
2164                         in_otherdir = os.path.join(Cnf["Dir::Queue::%s" % (directory)], dsc_name)
2165                         if os.path.exists(in_otherdir):
2166                             in_otherdir_fh = utils.open_file(in_otherdir)
2167                             actual_md5 = apt_pkg.md5sum(in_otherdir_fh)
2168                             in_otherdir_fh.close()
2169                             actual_size = os.stat(in_otherdir)[stat.ST_SIZE]
2170                             found = in_otherdir
2171                             if not orig_files.has_key(dsc_name):
2172                                 orig_files[dsc_name] = {}
2173                             orig_files[dsc_name]["path"] = in_otherdir
2174
2175                     if not found:
2176                         self.rejects.append("%s refers to %s, but I can't find it in the queue or in the pool." % (file, dsc_name))
2177                         continue
2178             else:
2179                 self.rejects.append("%s refers to %s, but I can't find it in the queue." % (file, dsc_name))
2180                 continue
2181             if actual_md5 != dsc_entry["md5sum"]:
2182                 self.rejects.append("md5sum for %s doesn't match %s." % (found, file))
2183             if actual_size != int(dsc_entry["size"]):
2184                 self.rejects.append("size for %s doesn't match %s." % (found, file))
2185
2186     ################################################################################
2187     def accepted_checks(self, overwrite_checks, session):
2188         # Recheck anything that relies on the database; since that's not
2189         # frozen between accept and our run time when called from p-a.
2190
2191         # overwrite_checks is set to False when installing to stable/oldstable
2192
2193         propogate={}
2194         nopropogate={}
2195
2196         # Find the .dsc (again)
2197         dsc_filename = None
2198         for f in self.pkg.files.keys():
2199             if self.pkg.files[f]["type"] == "dsc":
2200                 dsc_filename = f
2201
2202         for checkfile in self.pkg.files.keys():
2203             # The .orig.tar.gz can disappear out from under us is it's a
2204             # duplicate of one in the archive.
2205             if not self.pkg.files.has_key(checkfile):
2206                 continue
2207
2208             entry = self.pkg.files[checkfile]
2209
2210             # Check that the source still exists
2211             if entry["type"] == "deb":
2212                 source_version = entry["source version"]
2213                 source_package = entry["source package"]
2214                 if not self.pkg.changes["architecture"].has_key("source") \
2215                    and not source_exists(source_package, source_version,  self.pkg.changes["distribution"].keys()):
2216                     self.rejects.append("no source found for %s %s (%s)." % (source_package, source_version, checkfile))
2217
2218             # Version and file overwrite checks
2219             if overwrite_checks:
2220                 if entry["type"] == "deb":
2221                     self.check_binary_against_db(checkfile, session)
2222                 elif entry["type"] == "dsc":
2223                     self.check_source_against_db(checkfile, session)
2224                     self.check_dsc_against_db(dsc_filename, session)
2225
2226             # propogate in the case it is in the override tables:
2227             for suite in self.pkg.changes.get("propdistribution", {}).keys():
2228                 if self.in_override_p(entry["package"], entry["component"], suite, entry.get("dbtype",""), checkfile, session):
2229                     propogate[suite] = 1
2230                 else:
2231                     nopropogate[suite] = 1
2232
2233         for suite in propogate.keys():
2234             if suite in nopropogate:
2235                 continue
2236             self.pkg.changes["distribution"][suite] = 1
2237
2238         for checkfile in self.pkg.files.keys():
2239             # Check the package is still in the override tables
2240             for suite in self.pkg.changes["distribution"].keys():
2241                 if not self.in_override_p(entry["package"], entry["component"], suite, entry.get("dbtype",""), checkfile, session):
2242                     self.rejects.append("%s is NEW for %s." % (checkfile, suite))
2243
2244     ################################################################################
2245     # This is not really a reject, but an unaccept, but since a) the code for
2246     # that is non-trivial (reopen bugs, unannounce etc.), b) this should be
2247     # extremely rare, for now we'll go with whining at our admin folks...
2248
2249     def do_unaccept(self):
2250         cnf = Config()
2251
2252         self.update_subst()
2253         self.Subst["__REJECTOR_ADDRESS__"] = cnf["Dinstall::MyEmailAddress"]
2254         self.Subst["__REJECT_MESSAGE__"] = self.package_info()
2255         self.Subst["__CC__"] = "Cc: " + cnf["Dinstall::MyEmailAddress"]
2256         self.Subst["__BCC__"] = "X-DAK: dak process-accepted\nX-Katie: $Revision: 1.18 $"
2257         if cnf.has_key("Dinstall::Bcc"):
2258             self.Subst["__BCC__"] += "\nBcc: %s" % (cnf["Dinstall::Bcc"])
2259
2260         template = os.path.join(cnf["Dir::Templates"], "process-accepted.unaccept")
2261
2262         reject_mail_message = utils.TemplateSubst(self.Subst, template)
2263
2264         # Write the rejection email out as the <foo>.reason file
2265         reason_filename = os.path.basename(self.pkg.changes_file[:-8]) + ".reason"
2266         reject_filename = os.path.join(cnf["Dir::Queue::Reject"], reason_filename)
2267
2268         # If we fail here someone is probably trying to exploit the race
2269         # so let's just raise an exception ...
2270         if os.path.exists(reject_filename):
2271             os.unlink(reject_filename)
2272
2273         fd = os.open(reject_filename, os.O_RDWR|os.O_CREAT|os.O_EXCL, 0644)
2274         os.write(fd, reject_mail_message)
2275         os.close(fd)
2276
2277         utils.send_mail(reject_mail_message)
2278
2279         del self.Subst["__REJECTOR_ADDRESS__"]
2280         del self.Subst["__REJECT_MESSAGE__"]
2281         del self.Subst["__CC__"]
2282
2283     ################################################################################
2284     # If any file of an upload has a recent mtime then chances are good
2285     # the file is still being uploaded.
2286
2287     def upload_too_new(self):
2288         cnf = Config()
2289         too_new = False
2290         # Move back to the original directory to get accurate time stamps
2291         cwd = os.getcwd()
2292         os.chdir(self.pkg.directory)
2293         file_list = self.pkg.files.keys()
2294         file_list.extend(self.pkg.dsc_files.keys())
2295         file_list.append(self.pkg.changes_file)
2296         for f in file_list:
2297             try:
2298                 last_modified = time.time()-os.path.getmtime(f)
2299                 if last_modified < int(cnf["Dinstall::SkipTime"]):
2300                     too_new = True
2301                     break
2302             except:
2303                 pass
2304
2305         os.chdir(cwd)
2306         return too_new