/*
 * Copyright (c) 1999 Adrian Sun (asun@u.washington.edu)
 * Copyright (c) 1990,1991 Regents of The University of Michigan.
 * Copyright (c) 2010 Frank Lahm
 *
 * All Rights Reserved.
 *
 * Permission to use, copy, modify, and distribute this software and
 * its documentation for any purpose and without fee is hereby granted,
 * provided that the above copyright notice appears in all copies and
 * that both that copyright notice and this permission notice appear
 * in supporting documentation, and that the name of The University
 * of Michigan not be used in advertising or publicity pertaining to
 * distribution of the software without specific, written prior
 * permission. This software is supplied as is without expressed or
 * implied warranties of any kind.
 *
 *  Research Systems Unix Group
 *  The University of Michigan
 *  c/o Mike Clark
 *  535 W. William Street
 *  Ann Arbor, Michigan
 *  +1-313-763-0525
 *  netatalk@itd.umich.edu
 *
 */

/*!
 * @file
 * @brief Part of Netatalk's AppleDouble implementatation
 * @sa include/atalk/adouble.h
 */

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif /* HAVE_CONFIG_H */

#include <arpa/inet.h>
#include <errno.h>
#include <stdarg.h>
#include <stdlib.h>
#include <string.h>
#include <sys/param.h>

#include <atalk/adouble.h>
#include <atalk/compat.h>
#include <atalk/ea.h>
#include <atalk/errchk.h>
#include <atalk/logger.h>
#include <atalk/unix.h>
#include <atalk/util.h>
#include <atalk/volume.h>

#include "ad_lock.h"

#define ADEDOFF_MAGIC        (0)
#define ADEDOFF_VERSION      (ADEDOFF_MAGIC + ADEDLEN_MAGIC)
#define ADEDOFF_FILLER       (ADEDOFF_VERSION + ADEDLEN_VERSION)
#define ADEDOFF_NENTRIES     (ADEDOFF_FILLER + ADEDLEN_FILLER)

/*! initial lengths of some of the fields */
#define ADEDLEN_INIT     0

/* i stick things in a slightly different order than their eid order in
 * case i ever want to separate RootInfo behaviour from the rest of the
 * stuff. */

/* ad:v2 */
#define ADEDOFF_NAME_V2      (AD_HEADER_LEN + ADEID_NUM_V2*AD_ENTRY_LEN)
#define ADEDOFF_COMMENT_V2   (ADEDOFF_NAME_V2 + ADEDLEN_NAME)
#define ADEDOFF_FILEDATESI   (ADEDOFF_COMMENT_V2 + ADEDLEN_COMMENT)
#define ADEDOFF_FINDERI_V2   (ADEDOFF_FILEDATESI + ADEDLEN_FILEDATESI)
#define ADEDOFF_DID          (ADEDOFF_FINDERI_V2 + ADEDLEN_FINDERI)
#define ADEDOFF_AFPFILEI     (ADEDOFF_DID + ADEDLEN_DID)
#define ADEDOFF_SHORTNAME    (ADEDOFF_AFPFILEI + ADEDLEN_AFPFILEI)
#define ADEDOFF_PRODOSFILEI  (ADEDOFF_SHORTNAME + ADEDLEN_SHORTNAME)
#define ADEDOFF_PRIVDEV      (ADEDOFF_PRODOSFILEI + ADEDLEN_PRODOSFILEI)
#define ADEDOFF_PRIVINO      (ADEDOFF_PRIVDEV + ADEDLEN_PRIVDEV)
#define ADEDOFF_PRIVSYN      (ADEDOFF_PRIVINO + ADEDLEN_PRIVINO)
#define ADEDOFF_PRIVID       (ADEDOFF_PRIVSYN + ADEDLEN_PRIVSYN)
#define ADEDOFF_RFORK_V2     (ADEDOFF_PRIVID + ADEDLEN_PRIVID)

/* ad:ea */
#define ADEDOFF_FINDERI_EA    (AD_HEADER_LEN + ADEID_NUM_EA * AD_ENTRY_LEN)
#define ADEDOFF_COMMENT_EA    (ADEDOFF_FINDERI_EA    + ADEDLEN_FINDERI)
#define ADEDOFF_FILEDATESI_EA (ADEDOFF_COMMENT_EA    + ADEDLEN_COMMENT)
#define ADEDOFF_AFPFILEI_EA   (ADEDOFF_FILEDATESI_EA + ADEDLEN_FILEDATESI)
#define ADEDOFF_PRIVDEV_EA    (ADEDOFF_AFPFILEI_EA   + ADEDLEN_AFPFILEI)
#define ADEDOFF_PRIVINO_EA    (ADEDOFF_PRIVDEV_EA    + ADEDLEN_PRIVDEV)
#define ADEDOFF_PRIVSYN_EA    (ADEDOFF_PRIVINO_EA    + ADEDLEN_PRIVINO)
#define ADEDOFF_PRIVID_EA     (ADEDOFF_PRIVSYN_EA    + ADEDLEN_PRIVSYN)

/*! this is to prevent changing timezones from causing problems with
   localtime volumes. the screw-up is 30 years. we use a delta of 5 years */
#define TIMEWARP_DELTA 157680000

struct entry {
    uint32_t id, offset, len;
};

/* --------------------------- */
static uid_t default_uid = -1;

/* Forward declarations */
static int ad_mkrf(const char *path);
static int ad_header_read(const char *path, struct adouble *ad,
                          const struct stat *hst);
static int ad_header_upgrade(struct adouble *ad, const char *name);

#if defined (HAVE_EAFD) && defined (SOLARIS)
static int ad_mkrf_ea(const char *path);
#endif
static int ad_header_read_ea(const char *path, struct adouble *ad,
                             const struct stat *hst);
static int ad_header_upgrade_ea(struct adouble *ad, const char *name);
off_t ad_reso_size(const char *path, int adflags, struct adouble *ad);
static int ad_mkrf_osx(const char *path);


static struct adouble_fops ad_adouble = {
    &ad_path,
    &ad_mkrf,
    &ad_rebuild_adouble_header_v2,
    &ad_header_read,
    &ad_header_upgrade,
};

static struct adouble_fops ad_adouble_ea = {
#if defined (HAVE_EAFD) && defined (SOLARIS)
    &ad_path_ea,
    &ad_mkrf_ea,
#else
    &ad_path_osx,
    &ad_mkrf_osx,
#endif
    &ad_rebuild_adouble_header_ea,
    &ad_header_read_ea,
    &ad_header_upgrade_ea,
};

static const struct entry entry_order2[ADEID_NUM_V2 + 1] = {
    {ADEID_NAME,        ADEDOFF_NAME_V2,     ADEDLEN_INIT},
    {ADEID_COMMENT,     ADEDOFF_COMMENT_V2,  ADEDLEN_COMMENT},
    {ADEID_FILEDATESI,  ADEDOFF_FILEDATESI,  ADEDLEN_FILEDATESI},
    {ADEID_FINDERI,     ADEDOFF_FINDERI_V2,  ADEDLEN_FINDERI},
    {ADEID_DID,         ADEDOFF_DID,         ADEDLEN_DID},
    {ADEID_AFPFILEI,    ADEDOFF_AFPFILEI,    ADEDLEN_AFPFILEI},
    {ADEID_SHORTNAME,   ADEDOFF_SHORTNAME,   ADEDLEN_INIT},
    {ADEID_PRODOSFILEI, ADEDOFF_PRODOSFILEI, ADEDLEN_PRODOSFILEI},
    {ADEID_PRIVDEV,     ADEDOFF_PRIVDEV,     ADEDLEN_PRIVDEV},
    {ADEID_PRIVINO,     ADEDOFF_PRIVINO,     ADEDLEN_PRIVINO},
    {ADEID_PRIVSYN,     ADEDOFF_PRIVSYN,     ADEDLEN_PRIVSYN},
    {ADEID_PRIVID,      ADEDOFF_PRIVID,      ADEDLEN_PRIVID},
    {ADEID_RFORK,       ADEDOFF_RFORK_V2,    ADEDLEN_INIT},
    {0, 0, 0}
};

/* Using Extended Attributes */
static const struct entry entry_order_ea[ADEID_NUM_EA + 1] = {
    {ADEID_FINDERI,    ADEDOFF_FINDERI_EA,    ADEDLEN_FINDERI},
    {ADEID_COMMENT,    ADEDOFF_COMMENT_EA,    ADEDLEN_COMMENT},
    {ADEID_FILEDATESI, ADEDOFF_FILEDATESI_EA, ADEDLEN_FILEDATESI},
    {ADEID_AFPFILEI,   ADEDOFF_AFPFILEI_EA,   ADEDLEN_AFPFILEI},
    {ADEID_PRIVDEV,    ADEDOFF_PRIVDEV_EA,    ADEDLEN_PRIVDEV},
    {ADEID_PRIVINO,    ADEDOFF_PRIVINO_EA,    ADEDLEN_PRIVINO},
    {ADEID_PRIVSYN,    ADEDOFF_PRIVSYN_EA,    ADEDLEN_PRIVSYN},
    {ADEID_PRIVID,     ADEDOFF_PRIVID_EA,     ADEDLEN_PRIVID},
    {0, 0, 0}
};

#define ADFLAGS2LOGSTRBUFSIZ 128
const char *adflags2logstr(int adflags)
{
    int first = 1;
    static char buf[ADFLAGS2LOGSTRBUFSIZ];
    buf[0] = 0;

    if (adflags & ADFLAGS_DF) {
        strlcat(buf, "DF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_RF) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "RF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_NORF) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "NORF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_HF) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "HF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_NOHF) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "NOHF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_DIR) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "DIR", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_CHECK_OF) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "OF", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_SETSHRMD) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "SHRMD", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_RDWR) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_RDWR", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_RDONLY) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_RDONLY", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_CREATE) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_CREAT", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_EXCL) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_EXCL", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (adflags & ADFLAGS_TRUNC) {
        if (!first) {
            strlcat(buf, "|", ADFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_TRUNC", ADFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    return buf;
}

#define OPENFLAGS2LOGSTRBUFSIZ 128
const char *openflags2logstr(int oflags)
{
    int first = 1;
    static char buf[OPENFLAGS2LOGSTRBUFSIZ];
    buf[0] = 0;

    if ((oflags & O_RDONLY) || (oflags == O_RDONLY)) {
        strlcat(buf, "O_RDONLY", OPENFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (oflags & O_RDWR) {
        if (!first) {
            strlcat(buf, "|", OPENFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_RDWR", OPENFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (oflags & O_CREAT) {
        if (!first) {
            strlcat(buf, "|", OPENFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_CREAT", OPENFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (oflags & O_TRUNC) {
        if (!first) {
            strlcat(buf, "|", OPENFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_TRUNC", OPENFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    if (oflags & O_EXCL) {
        if (!first) {
            strlcat(buf, "|", OPENFLAGS2LOGSTRBUFSIZ);
        }

        strlcat(buf, "O_EXCL", OPENFLAGS2LOGSTRBUFSIZ);
        first = 0;
    }

    return buf;
}

static uint32_t get_eid(uint32_t eid)
{
    if (eid <= 15) {
        return eid;
    }

    if (eid == AD_DEV) {
        return ADEID_PRIVDEV;
    }

    if (eid == AD_INO) {
        return ADEID_PRIVINO;
    }

    if (eid == AD_SYN) {
        return ADEID_PRIVSYN;
    }

    if (eid == AD_ID) {
        return ADEID_PRIVID;
    }

    return 0;
}


/*!
 * Initialize offset pointers
 */
int ad_init_offsets(struct adouble *ad)
{
    const struct entry  *eid;

    if (ad->ad_magic == AD_MAGIC) {
        return 0;
    }

    ad->ad_magic = AD_MAGIC;
    ad->ad_version = ad->ad_vers & 0x0f0000;

    if (!ad->ad_version) {
        ad->ad_version = AD_VERSION;
    }

    memset(ad->ad_data, 0, sizeof(ad->ad_data));

    if (ad->ad_vers == AD_VERSION2) {
        eid = entry_order2;
        ad->valid_data_len = AD_DATASZ2;
    } else if (ad->ad_vers == AD_VERSION_EA) {
        eid = entry_order_ea;
        ad->valid_data_len = AD_DATASZ_EA;
    } else {
        return -1;
    }

    while (eid->id) {
        ad->ad_eid[eid->id].ade_off = eid->offset;
        ad->ad_eid[eid->id].ade_len = eid->len;
        eid++;
    }

    /*
     * Ensure the resource fork offset is always set
     */
#ifndef HAVE_EAFD

    if (ad->ad_vers == AD_VERSION_EA) {
        ad_setentryoff(ad, ADEID_RFORK, ADEDOFF_RFORK_OSX);
    }

#endif
    return 0;
}

/* ----------------------------------- */
static int new_ad_header(struct adouble *ad, const char *path, struct stat *stp,
                         int adflags)
{
    const struct entry  *eid _U_;
    uint16_t            ashort;
    struct stat         st;
    char                *adp = NULL;
    LOG(log_debug, logtype_ad, "new_ad_header(\"%s\")", path);

    if (ad_init_offsets(ad) != 0) {
        return -1;
    }

    if (ad->valid_data_len == 0) {
        ad->valid_data_len = ad->ad_vers == AD_VERSION_EA ? AD_DATASZ_EA : AD_DATASZ2;
    }

    adp = ad_entry(ad, ADEID_FINDERI);

    if (adp == NULL) {
        LOG(log_debug, logtype_ad, "new_ad_header(\"%s\"): invalid FinderInfo", path);
        return -1;
    }

    /* make things invisible */
    if ((ad->ad_options & ADVOL_INVDOTS)
            && (*path == '.')
            && !((adflags & ADFLAGS_DIR) && (path[1] == 0))
       ) {
        ashort = htons(ATTRBIT_INVISIBLE);
        ad_setattr(ad, ashort);
        ashort = htons(FINDERINFO_INVISIBLE);
        memcpy(adp + FINDERINFO_FRFLAGOFF, &ashort, sizeof(ashort));
    }

    /* put something sane in the date fields */
    if (stp == NULL) {
        stp = &st;

        if (lstat(path, &st) != 0) {
            ad->valid_data_len = 0;
            return -1;
        }
    }

    ad_setdate(ad, AD_DATE_CREATE | AD_DATE_UNIX, stp->st_mtime);
    ad_setdate(ad, AD_DATE_MODIFY | AD_DATE_UNIX, stp->st_mtime);
    ad_setdate(ad, AD_DATE_ACCESS | AD_DATE_UNIX, stp->st_mtime);
    ad_setdate(ad, AD_DATE_BACKUP, AD_DATE_START);
    return 0;
}

/*!
 * @brief Read an AppleDouble buffer
 * @returns 0 on success, -1 if an entry was malformatted
 */
static int parse_entries(struct adouble *ad, uint16_t nentries,
                         size_t valid_data_len)
{
    uint32_t   eid, len, off;
    uint8_t *buf = (uint8_t *) ad->ad_data + AD_HEADER_LEN;

    /* now, read in the entry bits */
    for (; nentries > 0; nentries--) {
        memcpy(&eid, buf, sizeof(eid));
        eid = get_eid(ntohl(eid));
        buf += sizeof(eid);
        memcpy(&off, buf, sizeof(off));
        off = ntohl(off);
        buf += sizeof(off);
        memcpy(&len, buf, sizeof(len));
        len = ntohl(len);
        buf += sizeof(len);

        if (!eid
                || eid > ADEID_MAX
                || ((eid != ADEID_RFORK) && (off > valid_data_len))
                || ((eid != ADEID_RFORK) && (off + len >  valid_data_len))) {
            LOG(log_warning, logtype_ad, "parse_entries: bogus eid: %u, off: %u, len: %u",
                (uint)eid, (uint)off, (uint)len);
            return -1;
        }

        ad->ad_eid[eid].ade_off = off;
        ad->ad_eid[eid].ade_len = len;
    }

    ad->valid_data_len = valid_data_len;
    return 0;
}

/* this reads enough of the header so that we can figure out all of
 * the entry lengths and offsets. once that's done, we just read/mmap
 * the rest of the header in.
 *
 * NOTE: we're assuming that the resource fork is kept at the end of
 *       the file. also, mmapping won't work for the hfs fs until it
 *       understands how to mmap header files. */
static int ad_header_read(const char *path, struct adouble *ad,
                          const struct stat *hst)
{
    char                *buf = ad->ad_data;
    uint16_t            nentries;
    ssize_t             header_len;
    struct stat         st;

    /* read the header */
    if ((header_len = adf_pread(ad->ad_mdp, buf, AD_DATASZ2, 0)) < 0) {
        return -1;
    }

    if (header_len < AD_HEADER_LEN) {
        errno = EIO;
        return -1;
    }

    memcpy(&ad->ad_magic, buf, sizeof(ad->ad_magic));
    memcpy(&ad->ad_version, buf + ADEDOFF_VERSION, sizeof(ad->ad_version));
    ad->ad_magic = ntohl(ad->ad_magic);
    ad->ad_version = ntohl(ad->ad_version);

    if ((ad->ad_magic != AD_MAGIC) || (ad->ad_version != AD_VERSION2)) {
        LOG(log_error, logtype_ad, "ad_open: can't parse AppleDouble header.");
        errno = EIO;
        return -1;
    }

    memcpy(&nentries, buf + ADEDOFF_NENTRIES, sizeof(nentries));
    nentries = ntohs(nentries);

    if (nentries > 16) {
        LOG(log_error, logtype_ad, "ad_open: too many entries: %"PRIu16, nentries);
        errno = EIO;
        return -1;
    }

    if ((nentries * AD_ENTRY_LEN) + AD_HEADER_LEN > header_len) {
        LOG(log_error, logtype_ad, "ad_header_read: too many entries: %zd", header_len);
        errno = EIO;
        return -1;
    }

    if (parse_entries(ad, nentries, header_len) != 0) {
        LOG(log_warning, logtype_ad, "ad_header_read(%s): malformed AppleDouble",
            path ? fullpathname(path) : "");
        errno = EIO;
        return -1;
    }

    if (!ad_getentryoff(ad, ADEID_RFORK)
            || (ad_getentryoff(ad, ADEID_RFORK) > sizeof(ad->ad_data))
       ) {
        LOG(log_error, logtype_ad, "ad_header_read: problem with rfork entry offset.");
        errno = EIO;
        return -1;
    }

    if (ad_getentryoff(ad, ADEID_RFORK) > header_len) {
        LOG(log_error, logtype_ad, "ad_header_read: can't read in entries.");
        errno = EIO;
        return -1;
    }

    if (hst == NULL) {
        hst = &st;

        if (fstat(ad->ad_mdp->adf_fd, &st) < 0) {
            return 1; /* fail silently */
        }
    }

    ad->ad_rlen = hst->st_size - ad_getentryoff(ad, ADEID_RFORK);
    return 0;
}

/* error here means it's not ad ._ adouble:osx file and thus we return 1 */
int ad_valid_header_osx(const char *path)
{
    EC_INIT;
    int fd = -1;
    struct adouble      adosx;
    char                *buf = &adosx.ad_data[0];
    ssize_t             header_len;
    LOG(log_debug, logtype_ad, "ad_valid_header_osx(\"%s\"): BEGIN",
        fullpathname(path));
    EC_NEG1(fd = open(path, O_RDONLY));
    /* read the header */
    EC_NEG1(header_len = read(fd, buf, AD_DATASZ_OSX));

    if (header_len < AD_HEADER_LEN) {
        EC_FAIL;
    }

    memcpy(&adosx.ad_magic, buf, sizeof(adosx.ad_magic));
    memcpy(&adosx.ad_version, buf + ADEDOFF_VERSION, sizeof(adosx.ad_version));
    adosx.ad_magic = ntohl(adosx.ad_magic);
    adosx.ad_version = ntohl(adosx.ad_version);

    if ((adosx.ad_magic != AD_MAGIC) || (adosx.ad_version != AD_VERSION2)) {
        LOG(log_warning, logtype_ad,
            "ad_valid_header_osx(\"%s\"): not an adouble:osx file", fullpathname(path));
        EC_FAIL;
    }

    if (strncmp(buf + ADEDOFF_FILLER,
                AD_FILLER_NETATALK,
                strlen(AD_FILLER_NETATALK)) != 0)
        /*
         * It's a split fork created by OS X, it's not our "own" ._ file
         * and thus not a valid header in this context.
         * We allow enumeration and access.
         */
    {
        EC_FAIL;
    }

EC_CLEANUP:
    LOG(log_debug, logtype_ad, "ad_valid_header_osx(\"%s\"): END: %d",
        fullpathname(path), ret);

    if (fd != -1) {
        close(fd);
    }

    if (ret != 0) {
        return 1;
    }

    return 0;
}

/*!
 * @brief Convert from Apple's ._ file to Netatalk
 *
 * Apple's AppleDouble may contain a FinderInfo entry longer then 32 bytes
 * containing packed xattrs. Netatalk can't deal with that, so we
 * simply discard the packed xattrs.
 *
 * As we call ad_open() which might result in a recursion, just to be sure
 * use static variable in_conversion to check for that.
 *
 * @returns -1 in case an error occured, 0 if no conversion was done,
 * 1 otherwise
 */
static int ad_convert_osx(const char *path, struct adouble *ad)
{
    EC_INIT;
    static bool in_conversion = false;
    char *map;
    int finderlen = ad_getentrylen(ad, ADEID_FINDERI);
    ssize_t origlen;

    if (in_conversion || finderlen == ADEDLEN_FINDERI) {
        return 0;
    }

    in_conversion = true;
    LOG(log_debug, logtype_ad,
        "Converting OS X AppleDouble %s, FinderInfo length: %d",
        fullpathname(path), finderlen);
    origlen = ad_getentryoff(ad, ADEID_RFORK) + ad_getentrylen(ad, ADEID_RFORK);
    map = mmap(NULL, origlen, PROT_READ | PROT_WRITE, MAP_SHARED,
               ad_reso_fileno(ad), 0);

    if (map == MAP_FAILED) {
        LOG(log_error, logtype_ad, "mmap AppleDouble: %s\n", strerror(errno));
        EC_FAIL;
    }

    memmove(map + ad_getentryoff(ad, ADEID_FINDERI) + ADEDLEN_FINDERI,
            map + ad_getentryoff(ad, ADEID_RFORK),
            ad_getentrylen(ad, ADEID_RFORK));
    ad_setentrylen(ad, ADEID_FINDERI, ADEDLEN_FINDERI);
    ad->ad_rlen = ad_getentrylen(ad, ADEID_RFORK);
    ad_setentryoff(ad, ADEID_RFORK, ad_getentryoff(ad,
                   ADEID_FINDERI) + ADEDLEN_FINDERI);
    EC_ZERO_LOG(ftruncate(ad_reso_fileno(ad),
                          ad_getentryoff(ad, ADEID_RFORK)
                          + ad_getentrylen(ad, ADEID_RFORK)));
    (void)ad_rebuild_adouble_header_osx(ad, map);
    munmap(map, origlen);

    /* Create a metadata EA if one doesn't exit */
    if (strlen(path) < 3) {
        EC_EXIT_STATUS(0);
    }

    struct adouble adea;

    ad_init_old(&adea, AD_VERSION_EA, ad->ad_options);

    if (ad_init_offsets(&adea) != 0) {
        LOG(log_error, logtype_ad, "ad_init_offsets failed");
        EC_FAIL;
    }

    if (ad_open(&adea, path + 2, ADFLAGS_HF | ADFLAGS_RDWR | ADFLAGS_CREATE,
                0666) < 0) {
        LOG(log_error, logtype_ad, "create metadata: %s\n", strerror(errno));
        EC_FAIL;
    }

    if (adea.ad_mdp->adf_flags & O_CREAT) {
        if (ad_entry(ad, ADEID_FINDERI)) {
            memcpy(ad_entry(&adea, ADEID_FINDERI),
                   ad_entry(ad, ADEID_FINDERI),
                   ADEDLEN_FINDERI);
        } else {
            LOG(log_debug, logtype_ad, "ad_convert_osx(%s): invalid FinderInfo",
                fullpathname(path));
        }

        ad_flush(&adea);
    }

    ad_close(&adea, ADFLAGS_HF);
EC_CLEANUP:
    in_conversion = false;

    if (ret != 0) {
        return -1;
    }

    return 1;
}

/*! Read an ._ file, only uses the resofork, finderinfo is taken from EA */
static int ad_header_read_osx(const char *path, struct adouble *ad,
                              struct stat *hst)
{
    EC_INIT;
    struct adouble      adosx;
    char                *buf;
    uint16_t            nentries;
    ssize_t             header_len;
    struct stat         st;
    int                 retry_read = 0;
reread:

    if (hst == NULL) {
        hst = &st;
        EC_NEG1(fstat(ad_reso_fileno(ad), hst));
    }

    LOG(log_debug, logtype_ad, "ad_header_read_osx: %s",
        path ? fullpathname(path) : "");
    ad_init_old(&adosx, AD_VERSION_EA, ad->ad_options);
    buf = &adosx.ad_data[0];
    memset(buf, 0, sizeof(adosx.ad_data));
    adosx.ad_rfp->adf_fd = ad_reso_fileno(ad);
    /* read the header */
    EC_NEG1(header_len = adf_pread(ad->ad_rfp, buf, AD_DATASZ_OSX, 0));

    if (header_len < AD_HEADER_LEN) {
        errno = EIO;
        return -1;
    }

    memcpy(&adosx.ad_magic, buf, sizeof(adosx.ad_magic));
    memcpy(&adosx.ad_version, buf + ADEDOFF_VERSION, sizeof(adosx.ad_version));
    adosx.ad_magic = ntohl(adosx.ad_magic);
    adosx.ad_version = ntohl(adosx.ad_version);

    if ((adosx.ad_magic != AD_MAGIC) || (adosx.ad_version != AD_VERSION2)) {
        LOG(log_error, logtype_ad,
            "ad_header_read_osx: can't parse AppleDouble header");
        errno = EIO;
        return -1;
    }

    memcpy(&nentries, buf + ADEDOFF_NENTRIES, sizeof(nentries));
    nentries = ntohs(nentries);

    if (nentries > 16) {
        LOG(log_error, logtype_ad, "ad_header_read_osx: too many entries: %"PRIu16,
            nentries);
        errno = EIO;
        return -1;
    }

    if ((nentries * AD_ENTRY_LEN) + AD_HEADER_LEN > header_len) {
        LOG(log_error, logtype_ad, "ad_header_read_osx: too many entries: %zd",
            header_len);
        errno = EIO;
        return -1;
    }

    if (parse_entries(&adosx, nentries, hst->st_size) != 0) {
        LOG(log_warning, logtype_ad, "ad_header_read(%s): malformed AppleDouble",
            path ? fullpathname(path) : "");
        errno = EIO;
        EC_FAIL;
    }

    if (ad_getentrylen(&adosx, ADEID_FINDERI) != ADEDLEN_FINDERI) {
        LOG(log_warning, logtype_ad, "Convert OS X to Netatalk AppleDouble: %s",
            path ? fullpathname(path) : "");

        if (retry_read > 0) {
            LOG(log_error, logtype_ad, "ad_header_read_osx: %s, giving up",
                path ? fullpathname(path) : "");
            errno = EIO;
            EC_FAIL;
        }

        retry_read++;

        if (ad_convert_osx(path, &adosx) == 1) {
            hst = NULL;
            goto reread;
        }

        errno = EIO;
        EC_FAIL;
    }

    if (ad_getentryoff(&adosx, ADEID_RFORK) == 0
            || ad_getentryoff(&adosx, ADEID_RFORK) > sizeof(ad->ad_data)
            || ad_getentryoff(&adosx, ADEID_RFORK) > header_len
       ) {
        LOG(log_error, logtype_ad,
            "ad_header_read_osx: problem with rfork entry offset.");
        errno = EIO;
        return -1;
    }

    ad_setentryoff(ad, ADEID_RFORK, ad_getentryoff(&adosx, ADEID_RFORK));
    ad->ad_rlen = hst->st_size - ad_getentryoff(ad, ADEID_RFORK);
EC_CLEANUP:
    EC_EXIT;
}

static int ad_header_read_ea(const char *path, struct adouble *ad,
                             const struct stat *hst _U_)
{
    EC_INIT;
    uint16_t nentries = 0;
    ssize_t  header_len;
    char     *buf = ad->ad_data;

    if (ad_meta_fileno(ad) != -1) {
        header_len = sys_fgetxattr(ad_meta_fileno(ad), AD_EA_META, ad->ad_data,
                                   AD_DATASZ_EA);
    } else {
        header_len = sys_getxattr(path, AD_EA_META, ad->ad_data, AD_DATASZ_EA);
    }

    if (header_len < 1) {
        LOG(log_debug, logtype_ad, "ad_header_read_ea: %s", strerror(errno));
        EC_FAIL;
    }

    if (header_len < AD_DATASZ_EA) {
        LOG(log_error, logtype_ad, "ad_header_read_ea(\"%s\"): short metadata EA",
            fullpathname(path));
        errno = EINVAL;
        EC_FAIL;
    }

    memcpy(&ad->ad_magic, buf, sizeof(ad->ad_magic));
    memcpy(&ad->ad_version, buf + ADEDOFF_VERSION, sizeof(ad->ad_version));
    ad->ad_magic = ntohl(ad->ad_magic);
    ad->ad_version = ntohl(ad->ad_version);

    if ((ad->ad_magic != AD_MAGIC) || (ad->ad_version != AD_VERSION2)) {
        LOG(log_error, logtype_ad, "ad_header_read_ea(\"%s\"): wrong magic or version",
            fullpathname(path));
        errno = EINVAL;
        EC_FAIL;
    }

    memcpy(&nentries, buf + ADEDOFF_NENTRIES, sizeof(nentries));
    nentries = ntohs(nentries);

    if (nentries != ADEID_NUM_EA) {
        LOG(log_error, logtype_ad,
            "ad_header_read_ea(\"%s\"): invalid number of entries: %d", fullpathname(path),
            nentries);
        errno = EINVAL;
        EC_FAIL;
    }

    /* Now parse entries */
    if (parse_entries(ad, nentries, header_len)) {
        LOG(log_warning, logtype_ad, "ad_header_read(%s): malformed AppleDouble",
            path ? fullpathname(path) : "");
        errno = EINVAL;
        EC_FAIL;
    }

    if (nentries != ADEID_NUM_EA
            || !ad_entry(ad, ADEID_FINDERI)
            || !ad_entry(ad, ADEID_COMMENT)
            || !ad_entry(ad, ADEID_FILEDATESI)
            || !ad_entry(ad, ADEID_AFPFILEI)
            || !ad_entry(ad, ADEID_PRIVDEV)
            || !ad_entry(ad, ADEID_PRIVINO)
            || !ad_entry(ad, ADEID_PRIVSYN)
            || !ad_entry(ad, ADEID_PRIVID)) {
        errno = EINVAL;
        EC_FAIL;
    }

    /*
     * Ensure the resource fork offset is always set
     */
#ifndef HAVE_EAFD

    if (ad->ad_vers == AD_VERSION_EA) {
        ad_setentryoff(ad, ADEID_RFORK, ADEDOFF_RFORK_OSX);
    }

#endif
EC_CLEANUP:

    if (ret != 0 && errno == EINVAL) {
        become_root();
        (void)sys_removexattr(path, AD_EA_META);
        unbecome_root();
        LOG(log_error, logtype_ad,
            "ad_header_read_ea(%s, %d): deleted invalid metadata EA",
            path ? fullpathname(path) : "UNKNOWN", nentries);
        errno = ENOENT;
    }

    EC_EXIT;
}

/*!
 * @brief Takes a path to an AppleDouble file and creates the parent .AppleDouble directory
 *
 * Example:
 *
 * path: "/path/.AppleDouble/file"
 * => mkdir("/path/.AppleDouble/") (in ad_mkdir())
 */
static int ad_mkrf(const char *path)
{
    char *slash;

    /*
     * Probably .AppleDouble doesn't exist, try to mkdir it.
     */
    if (NULL == (slash = strrchr(path, '/'))) {
        return -1;
    }

    *slash = '\0';
    errno = 0;

    if (ad_mkdir(path, 0777) < 0) {
        return -1;
    }

    *slash = '/';
    return 0;
}

#ifdef HAVE_EAFD
static int ad_mkrf_ea(const char *path _U_)
{
    AFP_PANIC("ad_mkrf_ea: don't use");
    return 0;
}
#endif

static int ad_mkrf_osx(const char *path _U_)
{
    return 0;
}

#define EMULATE_SUIDDIR

/*!
   @brief if we are root change path user/ group
   @note It can be a native function for BSD cf. FAQ.Q10
   @param path   pathname to chown
   @param stbuf  parent directory inode

   use fstat and fchown or lchown with linux?
*/
static int ad_chown(const char *path, struct stat *stbuf)
{
    int ret = 0;
#ifdef EMULATE_SUIDDIR
    uid_t id;

    if (default_uid != (uid_t) -1) {
        /* we are root (admin) */
        id = default_uid ? default_uid : stbuf->st_uid;
        ret = lchown(path, id, stbuf->st_gid);
    }

#endif
    return ret;
}

#define DEFMASK 07700   /*!< be conservative */

/*!
   return access right and inode of path parent directory
*/
static int ad_mode_st(const char *path, mode_t *mode, struct stat *stbuf)
{
    if (*mode == 0) {
        return -1;
    }

    if (ad_stat(path, stbuf) != 0) {
        *mode &= DEFMASK;
        return -1;
    }

    *mode &= stbuf->st_mode;
    return 0;
}

/* --------------------------- */
static int ad_header_upgrade(struct adouble *ad _U_, const char *name _U_)
{
    return 0;
}

static int ad_header_upgrade_ea(struct adouble *ad _U_, const char *name _U_)
{
    AFP_PANIC("ad_header_upgrade_ea: don't use");
    return 0;
}

/*!
 * @brief Error handling for adouble header(=metadata) file open error
 *
 * We're called because opening ADFLAGS_HF caused an error.
 * 1. In case ad_open is called with ADFLAGS_NOHF the error is suppressed.
 * 2. Open non-existent resource fork, this will just result in first read return EOF
 * 3. If ad_open was called with ADFLAGS_DF we may have opened the datafork and thus
 *    ought to close it before returning with an error condition.
 */
static int ad_error(struct adouble *ad, int adflags)
{
    int err _U_ = errno;

    if (adflags & ADFLAGS_NOHF) { /* 1 */
        return 0;
    }

    if ((adflags & ADFLAGS_RDONLY) && (adflags & ADFLAGS_RF)
            && (errno == ENOENT)) { /* 2 */
        return 0;
    }

    if (adflags & (ADFLAGS_DF | ADFLAGS_SETSHRMD | ADFLAGS_CHECK_OF)) { /* 3 */
        ad_close(ad, ADFLAGS_DF);
        err = errno;
    }

    return -1 ;
}

/*!
 * @brief Map ADFLAGS to open() flags
 *
 * @param[in] ad       the adouble structure
 * @param[in] adfile   the file you really want to open: ADFLAGS_DF or ADFLAGS_HF
 * @param[in] adflags  flags from ad_open(..., adflags, ...)
 * @returns            mapped flags suitable for calling open()
 */
static int ad2openflags(const struct adouble *ad, int adfile, int adflags)
{
    int oflags = 0;

    if (adflags & ADFLAGS_RDWR) {
        oflags |= O_RDWR;
    }

    if (adflags & ADFLAGS_RDONLY) {
        if (((adfile == ADFLAGS_DF || adfile == ADFLAGS_RF)
                && (adflags & ADFLAGS_SETSHRMD))
                /* need rw access for locks */
                || ((adfile == ADFLAGS_HF) && (ad->ad_vers == AD_VERSION2)))
            /* need rw access for adouble file for the case:
             1) openfork(data+meta:O_RDONLY), 2) openfork(reso(=meta):O_RDWR) */
        {
            oflags |= O_RDWR;
        } else {
            oflags |= O_RDONLY;
        }
    }

    if (adflags & ADFLAGS_CREATE) {
        oflags |= O_CREAT;
    }

    if (adflags & ADFLAGS_EXCL) {
        oflags |= O_EXCL;
    }

    if (adflags & ADFLAGS_TRUNC) {
        oflags |= O_TRUNC;
    }

    if (!(ad->ad_options & ADVOL_FOLLO_SYML)) {
        oflags |= O_NOFOLLOW;
    }

    return oflags;
}
#ifdef __APPLE__
int ad_open_native_finderinfo(const char *path, char *ret)
{
    ssize_t size;
    LOG(log_debug, logtype_ad,
        "ad_open_native_finderinfo(\"%s\"): BEGIN",
        fullpathname(path));
    size = sys_getxattr(path, EA_FINFO, 0, 0);

    if (size < 0) {
        LOG(log_debug, logtype_ad,
            "ad_open_native_finderinfo(\"%s\"): Native macOS FinderInfo not found",
            fullpathname(path));
        return 0;
    } else {
        sys_getxattr(path, EA_FINFO, ret, ADEDLEN_FINDERI);
        LOG(log_debug, logtype_ad,
            "ad_open_native_finderinfo(\"%s\"): Native macOS FinderInfo found",
            fullpathname(path));
        return 1;
    }
}
#endif

static int ad_open_df(const char *path, int adflags, mode_t mode,
                      struct adouble *ad)
{
    EC_INIT;
    struct stat st_dir;
    int         oflags;
    mode_t      admode;
    int         st_invalid = -1;
    ssize_t     lsz;
    LOG(log_debug, logtype_ad,
        "ad_open_df(\"%s\", %s): BEGIN [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags),
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);

    if (ad_data_fileno(ad) != -1) {
        /* the file is already open, but we want write access: */
        if ((adflags & ADFLAGS_RDWR)
                /* and it was denied the first time: */
                && (ad->ad_data_fork.adf_flags & O_RDONLY)) {
            errno = EACCES;
            return -1;
        }

        /* it's not new anymore */
        ad->ad_data_fork.adf_flags &= ~(O_TRUNC | O_CREAT);
        ad->ad_data_fork.adf_refcount++;
        goto EC_CLEANUP;
    }

    oflags = ad2openflags(ad, ADFLAGS_DF, adflags);
    admode = mode;

    if (adflags & ADFLAGS_CREATE) {
        st_invalid = ad_mode_st(path, &admode, &st_dir);

        if (ad->ad_options & ADVOL_UNIXPRIV) {
            admode = mode;
        }
    }

    ad->ad_data_fork.adf_fd = open(path, oflags, admode);

    if (ad->ad_data_fork.adf_fd == -1) {
        switch (errno) {
        case EACCES:
        case EPERM:
        case EROFS:
            if ((adflags & ADFLAGS_SETSHRMD) && (adflags & ADFLAGS_RDONLY)) {
                oflags &= ~O_RDWR;
                oflags |= O_RDONLY;
                EC_NEG1(ad->ad_data_fork.adf_fd = open(path, oflags, admode));
                break;
            }

            return -1;

        case OPEN_NOFOLLOW_ERRNO:
            ad->ad_data_fork.adf_syml = malloc(MAXPATHLEN + 1);

            if ((lsz = readlink(path, ad->ad_data_fork.adf_syml, MAXPATHLEN)) <= 0
                    || lsz > MAXPATHLEN) {
                free(ad->ad_data_fork.adf_syml);
                EC_FAIL;
            }

            ad->ad_data_fork.adf_syml[lsz] = 0;
            ad->ad_data_fork.adf_fd = AD_SYMLINK;
            break;

        default:
            EC_FAIL;
        }
    }

    if (!st_invalid) {
        /* just created, set owner if admin (root) */
        ad_chown(path, &st_dir);
    }

    ad->ad_data_fork.adf_flags = oflags;
    adf_lock_init(&ad->ad_data_fork);
    ad->ad_data_fork.adf_refcount++;
EC_CLEANUP:
    LOG(log_debug, logtype_ad,
        "ad_open_df(\"%s\", %s): END: %d [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags), ret,
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);
    EC_EXIT;
}

static int ad_open_hf_v2(const char *path, int adflags, mode_t mode,
                         struct adouble *ad)
{
    EC_INIT;
    struct stat st_dir;
    struct stat st_meta;
    struct stat *pst = NULL;
    const char  *ad_p;
    int         oflags, nocreatflags, opened = 0;
    mode_t      admode;
    int         st_invalid = -1;
    LOG(log_debug, logtype_ad,
        "ad_open_hf_v2(\"%s\", %s): BEGIN [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags),
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);

    if (ad_meta_fileno(ad) != -1) {
        /* the file is already open, but we want write access: */
        if ((adflags & ADFLAGS_RDWR) &&
                /* and it was already denied: */
                (ad->ad_mdp->adf_flags & O_RDONLY)) {
            errno = EACCES;
            EC_FAIL;
        }

        ad_refresh(path, ad);
        /* it's not new anymore */
        ad->ad_mdp->adf_flags &= ~(O_TRUNC | O_CREAT);
        ad->ad_mdp->adf_refcount++;
        goto EC_CLEANUP;
    }

    ad_p = ad->ad_ops->ad_path(path, adflags);
    oflags = ad2openflags(ad, ADFLAGS_HF, adflags);
    LOG(log_debug, logtype_ad, "ad_open_hf_v2(\"%s\"): open flags: %s",
        fullpathname(path), openflags2logstr(oflags));
    nocreatflags = oflags & ~(O_CREAT | O_EXCL);
    ad_meta_fileno(ad) = open(ad_p, nocreatflags);

    if (ad_meta_fileno(ad) != -1) {
        ad->ad_mdp->adf_flags = nocreatflags;
    } else {
        switch (errno) {
        case EACCES:
        case EPERM:
        case EROFS:
            if ((adflags & ADFLAGS_RDONLY) && (adflags & ADFLAGS_SETSHRMD)) {
                nocreatflags &= ~O_RDWR;
                nocreatflags |= O_RDONLY;
                EC_NEG1(ad_meta_fileno(ad) = open(ad_p, nocreatflags));
                ad->ad_mdp->adf_flags = nocreatflags;
                break;
            }

            EC_FAIL;

        case ENOENT:
            if (!(oflags & O_CREAT)) {
                EC_FAIL;
            }

            /*
             * We're expecting to create a new adouble header file here
             */
            LOG(log_debug, logtype_ad, "ad_open(\"%s\"): creating adouble file",
                fullpathname(path));
            admode = mode;
            errno = 0;
            st_invalid = ad_mode_st(ad_p, &admode, &st_dir);

            if (ad->ad_options & ADVOL_UNIXPRIV) {
                admode = mode;
            }

            admode = ad_hf_mode(admode);

            if (errno == ENOENT) {
                EC_NEG1_LOG(ad->ad_ops->ad_mkrf(ad_p));
                admode = mode;
                st_invalid = ad_mode_st(ad_p, &admode, &st_dir);

                if (ad->ad_options & ADVOL_UNIXPRIV) {
                    admode = mode;
                }

                admode = ad_hf_mode(admode);
            }

            /* retry with O_CREAT */
            EC_NEG1(ad_meta_fileno(ad) = open(ad_p, oflags, admode));
            ad->ad_mdp->adf_flags = oflags;

            /* just created, set owner if admin owner (root) */
            if (!st_invalid) {
                ad_chown(ad_p, &st_dir);
            }

            break;

        default:
            EC_FAIL;
        }
    }

    /* Now we've got a new opened fd, we need to check that in the error case */
    opened = 1;

    if (!(ad->ad_mdp->adf_flags & O_CREAT)) {
        /* check for 0 length files, treat them as new. */
        if (fstat(ad->ad_mdp->adf_fd, &st_meta) == 0) {
            if (st_meta.st_size == 0) {
                ad->ad_mdp->adf_flags |= O_TRUNC;
            } else
                /* we have valid data in st_meta stat structure, reused it in ad_header_read */
            {
                pst = &st_meta;
            }
        }
    }

    adf_lock_init(ad->ad_mdp);
    ad->ad_mdp->adf_refcount = 1;

    if (ad->ad_mdp->adf_flags & (O_TRUNC | O_CREAT)) {
        /* This is a new adouble header file, create it */
        EC_NEG1_LOG(new_ad_header(ad, path, pst, adflags));
        ad_flush(ad);
    } else {
        /* Read the adouble header in and parse it.*/
        EC_NEG1_LOG(ad->ad_ops->ad_header_read(path, ad, pst));
    }

EC_CLEANUP:

    if (ret != 0 && opened && ad_meta_fileno(ad) != -1) {
        close(ad_meta_fileno(ad));
        ad_meta_fileno(ad) = -1;
        ad->ad_mdp->adf_refcount = 0;
    }

    LOG(log_debug, logtype_ad,
        "ad_open_hf_v2(\"%s\", %s): END: %d [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags), ret,
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);
    EC_EXIT;
}

static int ad_open_hf_ea(const char *path, int adflags, int mode _U_,
                         struct adouble *ad)
{
    EC_INIT;
    int oflags;
    int opened = 0;
    LOG(log_debug, logtype_ad,
        "ad_open_hf_ea(\"%s\", %s): BEGIN [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags),
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);
    oflags = ad2openflags(ad, ADFLAGS_DF, adflags) & ~(O_CREAT | O_TRUNC);

    if (ad_meta_fileno(ad) == AD_SYMLINK) {
        goto EC_CLEANUP;
    }

    if (ad_meta_fileno(ad) != -1) {
        /* the file is already open, but we want write access: */
        if ((oflags & O_RDWR) &&
                /* and it was already denied: */
                (ad->ad_mdp->adf_flags & O_RDONLY)) {
            LOG(log_error, logtype_ad, "ad_open_hf_ea(%s): rw request for ro file: %s",
                fullpathname(path), strerror(errno));
            errno = EACCES;
            EC_FAIL;
        }

        /* it's not new anymore */
        ad->ad_mdp->adf_flags &= ~(O_TRUNC | O_CREAT);
    } else {
        if (oflags & O_RDWR) {
            /* Fo a RDONLY adouble we just use sys_lgetxattr instead if sys_fgetxattr */
            if (adflags & ADFLAGS_DIR)
                /* For directories we open the directory RDONYL so we can later fchdir()  */
            {
                oflags = (oflags & ~O_RDWR) | O_RDONLY;
            }

            LOG(log_debug, logtype_ad,
                "ad_open_hf_ea(\"%s\"): opening base file for meta adouble EA", path);
            EC_NEG1(ad_meta_fileno(ad) = open(path, oflags));
            opened = 1;
            ad->ad_mdp->adf_flags = oflags;
        }
    }

#ifdef __APPLE__
    char *FinderInfo;
    char NativeFinderInfo[ADEDLEN_FINDERI] = {'\0'};
#endif

    /* Read the adouble header in and parse it.*/
    if (ad->ad_ops->ad_header_read(path, ad, NULL) != 0) {
        if (!(adflags & ADFLAGS_CREATE)) {
            LOG(log_debug, logtype_ad, "ad_open_hf_ea(\"%s\"): can't read metadata EA",
                path);
            errno = ENOENT;
            EC_FAIL;
        }

        if ((adflags & ADFLAGS_CREATE) && (ad->ad_options & ADVOL_RO)) {
            errno = EROFS;
            EC_FAIL;
        }

        LOG(log_debug, logtype_ad, "ad_open_hf_ea(\"%s\"): creating metadata EA", path);

        /* It doesnt exist, EPERM or another error */
        if (!(errno == ENOATTR || errno == ENOENT)) {
            LOG(log_error, logtype_ad, "ad_open_hf_ea: unexpected: %s", strerror(errno));
            EC_FAIL;
        }

        /* Create one */
        EC_NEG1_LOG(new_ad_header(ad, path, NULL, adflags));
        ad->ad_mdp->adf_flags |= O_CREAT; /* mark as just created */
#ifdef __APPLE__
        /* Read in FinderInfo from macOS */
        FinderInfo = ad_entry(ad, ADEID_FINDERI);

        if (ad_open_native_finderinfo(path, NativeFinderInfo)) {
            memcpy(FinderInfo, NativeFinderInfo, ADEDLEN_FINDERI);
        }

#endif
        ad_flush(ad);
        LOG(log_debug, logtype_ad, "ad_open_hf_ea(\"%s\"): created metadata EA", path);
    }

#ifdef __APPLE__
    /* Read in FinderInfo from macOS */
    FinderInfo = ad_entry(ad, ADEID_FINDERI);

    if (ad_open_native_finderinfo(path, NativeFinderInfo)) {
        memcpy(FinderInfo, NativeFinderInfo, ADEDLEN_FINDERI);
    }

#endif

    if (ad_meta_fileno(ad) != -1) {
        ad->ad_mdp->adf_refcount++;
    }

    ad->ad_rlen = ad_reso_size(path, adflags, ad);
EC_CLEANUP:

    if (ret != 0 && opened && ad_meta_fileno(ad) != -1) {
        close(ad_meta_fileno(ad));
        ad_meta_fileno(ad) = -1;
        ad->ad_mdp->adf_refcount = 0;
    }

    LOG(log_debug, logtype_ad,
        "ad_open_hf_ea(\"%s\", %s): END: %d [dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags), ret,
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);
    EC_EXIT;
}

static int ad_open_hf(const char *path, int adflags, int mode,
                      struct adouble *ad)
{
    int ret = 0;
    ad->ad_meta_refcount++;

    switch (ad->ad_vers) {
    case AD_VERSION2:
        ret = ad_open_hf_v2(path, adflags, mode, ad);
        break;

    case AD_VERSION_EA:
        ret = ad_open_hf_ea(path, adflags, mode, ad);
        break;

    default:
        ret = -1;
        break;
    }

    if (ret != 0) {
        ad->ad_meta_refcount--;
        ret = ad_error(ad, adflags);
    }

    return ret;
}

/*!
 * Get resofork length for adouble:ea, parameter 'ad' may be NULL
 */
off_t ad_reso_size(const char *path, int adflags, struct adouble *ad _U_)
{
    EC_INIT;
    struct stat st;
    off_t rlen;

    if (adflags & ADFLAGS_DIR) {
        EC_FAIL;
    }

    LOG(log_debug, logtype_ad, "ad_reso_size(\"%s\"): BEGIN", path);
#ifdef HAVE_EAFD
    ssize_t easz;

    if (ad && ad_reso_fileno(ad) != -1) {
        EC_NEG1(fstat(ad_reso_fileno(ad), &st));
        rlen = st.st_size;
    } else if (ad && ad_meta_fileno(ad) != -1) {
        EC_NEG1((rlen = sys_fgetxattr(ad_meta_fileno(ad), AD_EA_RESO, NULL, 0)));
    } else {
        EC_NEG1((rlen = sys_lgetxattr(path, AD_EA_RESO, NULL, 0)));
    }

#else
    const char *rfpath;
    EC_NULL_LOG(rfpath = ad_path_osx(path, adflags));
    EC_ZERO(lstat(rfpath, &st));

    if (st.st_size > ADEDOFF_RFORK_OSX) {
        rlen = st.st_size - ADEDOFF_RFORK_OSX;
    } else {
        rlen = 0;
    }

#endif
    LOG(log_debug, logtype_ad, "ad_reso_size(\"%s\"): size: %zd", path, rlen);
EC_CLEANUP:

    if (ret != 0) {
        rlen = 0;
    }

    return rlen;
}

static int ad_open_rf_v2(const char *path, int adflags, int mode _U_,
                         struct adouble *ad)
{
    EC_INIT;
    /*
     * ad_open_hf_v2() does the work, but if it failed and adflags are ADFLAGS_NOHF | ADFLAGS_RF
     * ad_open_hf_v2() didn't give an error, but we're supposed to return a reso fork fd
     */
    LOG(log_debug, logtype_ad, "ad_open_rf_v2(\"%s\"): BEGIN", fullpathname(path));

    if (!AD_META_OPEN(ad) && !(adflags & (ADFLAGS_NORF | ADFLAGS_RDONLY))) {
        EC_FAIL;
    }

    if (AD_META_OPEN(ad)) {
        ad->ad_reso_refcount++;
    }

EC_CLEANUP:
    LOG(log_debug, logtype_ad, "ad_open_rf_v2(\"%s\"): END: %d", fullpathname(path),
        ret);
    EC_EXIT;
}

static int ad_open_rf_ea(const char *path, int adflags, int mode,
                         struct adouble *ad)
{
    EC_INIT;
    int oflags;
    int opened = 0;
    int closeflags = adflags & (ADFLAGS_DF | ADFLAGS_HF);
#ifndef SOLARIS
    const char *rfpath;
    struct stat st;
#endif
    LOG(log_debug, logtype_ad, "ad_open_rf(\"%s\"): BEGIN", fullpathname(path));
    oflags = ad2openflags(ad, ADFLAGS_RF, adflags) & ~O_CREAT;

    if (ad_reso_fileno(ad) != -1) {
        /* the file is already open, but we want write access: */
        if ((oflags & O_RDWR)
                /* and it was already denied: */
                && (ad->ad_rfp->adf_flags & O_RDONLY)) {
            errno = EACCES;
            EC_FAIL;
        }

        ad->ad_rfp->adf_flags &= ~(O_TRUNC | O_CREAT);
        ad->ad_reso_refcount++;
        ad->ad_rfp->adf_refcount++;
        EC_NEG1_LOG(ad->ad_rlen = ad_reso_size(path, adflags, ad));
        goto EC_CLEANUP;
    }

#if defined (HAVE_EAFD) && defined (SOLARIS)

    if (ad_meta_fileno(ad) < 0) {
        EC_FAIL;
    }

    if ((ad_reso_fileno(ad) = sys_getxattrfd(ad_meta_fileno(ad), AD_EA_RESO,
                              oflags)) == -1) {
        if (!(adflags & ADFLAGS_CREATE)) {
            switch (errno) {
            case EACCES:
            case EPERM:
            case EROFS:
                if (!(adflags & ADFLAGS_RDONLY)) {
                    LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"", fullpathname(path),
                        strerror(errno));
                    EC_FAIL;
                }

                oflags &= ~O_RDWR;
                oflags |= O_RDONLY;

                if ((ad_reso_fileno(ad) = sys_getxattrfd(ad_meta_fileno(ad), AD_EA_RESO,
                                          oflags)) == -1) {
                    LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"", fullpathname(path),
                        strerror(errno));
                    EC_FAIL;
                }

                break;

            case ENOENT:
                EC_EXIT_STATUS(0);

            default:
                LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"", fullpathname(path),
                    strerror(errno));
                EC_FAIL;
            }
        } else {
            oflags |= O_CREAT;
            EC_NEG1_LOG(ad_reso_fileno(ad) = sys_getxattrfd(ad_meta_fileno(ad),
                                             AD_EA_RESO, oflags, 0666));
        }
    }

#else
    EC_NULL_LOG(rfpath = ad->ad_ops->ad_path(path, adflags));

    if ((ad_reso_fileno(ad) = open(rfpath, oflags)) == -1) {
        if (!(adflags & ADFLAGS_CREATE)) {
            switch (errno) {
            case EACCES:
            case EPERM:
            case EROFS:
                if (!(adflags & ADFLAGS_RDONLY)) {
                    LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"",
                        fullpathname(rfpath), strerror(errno));
                    EC_FAIL;
                }

                oflags &= ~O_RDWR;
                oflags |= O_RDONLY;

                if ((ad_reso_fileno(ad) = open(rfpath, oflags)) == -1) {
                    LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"",
                        fullpathname(rfpath), strerror(errno));
                    EC_FAIL;
                }

                break;

            case ENOENT:
                EC_EXIT_STATUS(0);

            default:
                LOG(log_error, logtype_ad, "ad_open_rf_ea(\"%s\"): \"%s\"",
                    fullpathname(rfpath), strerror(errno));
                EC_FAIL;
            }
        } else {
            oflags |= O_CREAT;
            EC_NEG1_LOG(ad_reso_fileno(ad) = open(rfpath, oflags, mode));
            LOG(log_debug, logtype_ad, "ad_open_rf(\"%s\"): created adouble rfork: \"%s\"",
                path, rfpath);
        }
    }

#endif
    opened = 1;
    ad->ad_rfp->adf_refcount = 1;
    ad->ad_rfp->adf_flags = oflags;
    ad->ad_reso_refcount++;
#ifndef HAVE_EAFD
    EC_ZERO_LOG(fstat(ad_reso_fileno(ad), &st));

    if (ad->ad_rfp->adf_flags & O_CREAT) {
        /* This is a new adouble header file, create it */
        LOG(log_debug, logtype_ad,
            "ad_open_rf(\"%s\"): created adouble rfork, initializing: \"%s\"",
            path, rfpath);
        EC_NEG1_LOG(new_ad_header(ad, path, NULL, adflags));
        LOG(log_debug, logtype_ad,
            "ad_open_rf(\"%s\"): created adouble rfork, flushing: \"%s\"",
            path, rfpath);
        ad_flush(ad);
    } else {
        /* Read the adouble header */
        LOG(log_debug, logtype_ad, "ad_open_rf(\"%s\"): reading adouble rfork: \"%s\"",
            path, rfpath);
        EC_NEG1_LOG(ad_header_read_osx(rfpath, ad, &st));
    }

#endif
    ad->ad_rlen = ad_reso_size(path, adflags, ad);
EC_CLEANUP:

    if (ret != 0) {
        if (opened && (ad_reso_fileno(ad) != -1)) {
            close(ad_reso_fileno(ad));
            ad_reso_fileno(ad) = -1;
            ad->ad_reso_refcount--;
            ad->ad_rfp->adf_refcount = 0;
        }

        if (adflags & ADFLAGS_NORF) {
            ret = 0;
        } else {
            int err = errno;
            (void)ad_close(ad, closeflags);
            errno = err;
        }

        ad->ad_rlen = 0;
    }

    LOG(log_debug, logtype_ad, "ad_open_rf(\"%s\"): END: %d", fullpathname(path),
        ret);
    EC_EXIT;
}

/*!
 * @brief Open resource fork
 */
static int ad_open_rf(const char *path, int adflags, int mode,
                      struct adouble *ad)
{
    int ret = 0;

    switch (ad->ad_vers) {
    case AD_VERSION2:
        ret = ad_open_rf_v2(path, adflags, mode, ad);
        break;

    case AD_VERSION_EA:
        ret = ad_open_rf_ea(path, adflags, mode, ad);
        break;

    default:
        ret = -1;
        break;
    }

    return ret;
}

/***********************************************************************************
 * API functions
 ********************************************************************************* */

/*
 * All entries besides FinderInfo and resource fork must fit into the
 * buffer. FinderInfo is special as it may be larger then the default 32 bytes
 * if it contains marshalled xattrs, which we will fixup that in
 * ad_convert(). The first 32 bytes however must also be part of the buffer.
 *
 * The resource fork is never accessed directly by the ad_data buf.
 */
static bool ad_entry_check_size(uint32_t eid,
                                size_t bufsize,
                                uint32_t off,
                                uint32_t got_len)
{
    struct {
        off_t expected_len;
        bool fixed_size;
        bool minimum_size;
    } ad_checks[] = {
        [ADEID_DFORK] = {-1, false, false}, /* not applicable */
        [ADEID_RFORK] = {-1, false, false}, /* no limit */
        [ADEID_NAME] = {ADEDLEN_NAME, false, false},
        [ADEID_COMMENT] = {ADEDLEN_COMMENT, false, false},
        [ADEID_ICONBW] = {ADEDLEN_ICONBW, true, false},
        [ADEID_ICONCOL] = {ADEDLEN_ICONCOL, false, false},
        [ADEID_FILEI] = {ADEDLEN_FILEI, true, false},
        [ADEID_FILEDATESI] = {ADEDLEN_FILEDATESI, true, false},
        [ADEID_FINDERI] = {ADEDLEN_FINDERI, false, true},
        [ADEID_MACFILEI] = {ADEDLEN_MACFILEI, true, false},
        [ADEID_PRODOSFILEI] = {ADEDLEN_PRODOSFILEI, true, false},
        [ADEID_MSDOSFILEI] = {ADEDLEN_MSDOSFILEI, true, false},
        [ADEID_SHORTNAME] = {ADEDLEN_SHORTNAME, false, false},
        [ADEID_AFPFILEI] = {ADEDLEN_AFPFILEI, true, false},
        [ADEID_DID] = {ADEDLEN_DID, true, false},
#ifdef __APPLE__
        [ADEID_PRIVDEV] = {ADEDLEN_PRIVDEV, false, false},
#else
        [ADEID_PRIVDEV] = {ADEDLEN_PRIVDEV, true, false},
#endif
        [ADEID_PRIVINO] = {ADEDLEN_PRIVINO, true, false},
        [ADEID_PRIVSYN] = {ADEDLEN_PRIVSYN, true, false},
        [ADEID_PRIVID] = {ADEDLEN_PRIVID, true, false},
    };
    uint32_t required_len;

    if (eid >= ADEID_MAX) {
        return false;
    }

    if (got_len == 0) {
        /* Entry present, but empty, allow */
        return true;
    }

    if (ad_checks[eid].expected_len == 0) {
        /*
         * Shouldn't happen: implicitly initialized to zero because
         * explicit initializer missing.
         */
        return false;
    }

    if (ad_checks[eid].expected_len == -1) {
        /* Unused or no limit */
        return true;
    }

    if (ad_checks[eid].fixed_size) {
        if (ad_checks[eid].expected_len != got_len) {
            /* Wrong size fo fixed size entry. */
            return false;
        }

        required_len = got_len;
    } else {
        if (ad_checks[eid].minimum_size) {
            if (got_len < ad_checks[eid].expected_len) {
                /*
                 * Too small for variable sized entry with
                 * minimum size.
                 */
                return false;
            }

            required_len = got_len;
        } else {
            if (got_len > ad_checks[eid].expected_len) {
                /* Too big for variable sized entry. */
                return false;
            }

            /*
             * Expect the buffer to provide enough room for the maximum possible
             * size.
             */
            required_len = ad_checks[eid].expected_len;
        }
    }

    if (off + required_len < off) {
        /* wrap around */
        return false;
    }

    if (off + required_len > bufsize) {
        /* overflow */
        return false;
    }

    return true;
}

void *ad_entry(const struct adouble *ad, int eid)
{
    size_t bufsize = ad->valid_data_len;
    off_t off = ad_getentryoff(ad, eid);
    size_t len = ad_getentrylen(ad, eid);
    bool valid;
    valid = ad_entry_check_size(eid, bufsize, off, len);

    if (!valid) {
        LOG(log_debug, logtype_ad,
            "ad_entry(%s, %d): invalid off: %d, len: %llu, buf: %llu",
            ad->ad_name, eid, off, len, bufsize);
        return NULL;
    }

    if (off == 0) {
        LOG(log_debug, logtype_ad, "ad_entry(%s, %d): invalid off: %d, len: %llu",
            ad->ad_name, eid, off, len);
        return NULL;
    }

    return ((struct adouble *)ad)->ad_data + off;
}

off_t ad_getentryoff(const struct adouble *ad, int eid)
{
    if (ad->ad_vers == AD_VERSION2) {
        return ad->ad_eid[eid].ade_off;
    }

    switch (eid) {
    case ADEID_DFORK:
        return 0;

    case ADEID_RFORK:
#ifdef HAVE_EAFD
        return 0;
#else
        return ad->ad_eid[eid].ade_off;
#endif

    default:
        return ad->ad_eid[eid].ade_off;
    }

    /* deadc0de */
    AFP_PANIC("What am I doing here?");
}

const char *ad_path_ea(const char *path, int adflags _U_)
{
    return path;
}

const char *ad_path_osx(const char *path, int adflags _U_)
{
    static char pathbuf[MAXPATHLEN + 1];
    char    c, *slash, buf[MAXPATHLEN + 1];

    if (!strcmp(path, ".")) {
        if (getcwd(buf, MAXPATHLEN) == NULL) {
            LOG(log_error, logtype_default,
                "ad_path_osx(\"%s\"): getcwd() failed in ad_path_osx: %s", path,
                strerror(errno));
            buf[0] = '\0';
        } else if (strnlen(buf, MAXPATHLEN + 1) >= MAXPATHLEN) {
            LOG(log_error, logtype_default,
                "ad_path_osx(\"%s\"): Current working directory path too long, truncating to MAXPATHLEN",
                path);
            buf[MAXPATHLEN - 1] = '\0';
        }
    } else {
        strlcpy(buf, path, MAXPATHLEN + 1);
    }

    if (NULL != (slash = strrchr(buf, '/'))) {
        c = *++slash;
        *slash = '\0';
        strlcpy(pathbuf, buf, MAXPATHLEN + 1);
        *slash = c;
    } else {
        pathbuf[0] = '\0';
        slash = buf;
    }

#ifdef __APPLE__
    /* macos abstracts the resource fork as "filename/..namedfork/rsrc" which we can treat as a file */
    strlcat(pathbuf, buf, MAXPATHLEN + 1);
    strlcat(pathbuf, "/..namedfork/rsrc", MAXPATHLEN  + 1);
#else
    strlcat(pathbuf, "._", MAXPATHLEN  + 1);
    strlcat(pathbuf, slash, MAXPATHLEN + 1);
#endif
    return pathbuf;
}

/*!
 * @brief Put the .AppleDouble where it needs to be:
 * @code
 *      /   a/.AppleDouble/b
 *  a/b
 *      \   b/.AppleDouble/.Parent
 * @endcode
 * @bug should do something for pathname > MAXPATHLEN
 */
const char *ad_path(const char *path, int adflags)
{
    static char pathbuf[MAXPATHLEN + 1];
    const char *slash;
    size_t  l ;

    if (adflags & ADFLAGS_DIR) {
        l = strlcpy(pathbuf, path, sizeof(pathbuf));

        if (l >= sizeof(pathbuf)) {
            return NULL;
        }

        if (l && l < MAXPATHLEN) {
            pathbuf[l++] = '/';
        }

        if (strlcpy(pathbuf + l, ".AppleDouble/.Parent", sizeof(pathbuf) - l)
                >= sizeof(pathbuf) - l) {
            return NULL;
        }
    } else {
        if (NULL != (slash = strrchr(path, '/'))) {
            slash++;
            l = slash - path;

            /* XXX we must return NULL here and test in the caller */
            if (l > MAXPATHLEN) {
                l = MAXPATHLEN;
            }

            memcpy(pathbuf, path, l);
        } else {
            l = 0;
            slash = path;
        }

        size_t remaining = sizeof(pathbuf) - l;
        l += strlcpy(pathbuf + l, ".AppleDouble/", remaining);

        if (l >= sizeof(pathbuf)) {
            return NULL;
        }

        if (strlcpy(pathbuf + l, slash, sizeof(pathbuf) - l) >= sizeof(pathbuf) - l) {
            return NULL;
        }
    }

    return pathbuf;
}

/*!
 * @brief Support inherited protection modes for AppleDouble files.
 * The supplied mode is ANDed with the parent directory's mask value in lieu of "umask",
 * and that value is returned.
 */
char *ad_dir(const char *path)
{
    static char     modebuf[MAXPATHLEN + 1];
    char        *slash;
    /*
     * For a path with directories in it, remove the final component
     * (path or subdirectory name) to get the name we want to stat.
     * For a path which is just a filename, use "." instead.
     */
    slash = strrchr(path, '/');

    if (slash) {
        size_t len;
        len = slash - path;

        if (len >= MAXPATHLEN) {
            errno = ENAMETOOLONG;
            return NULL;  /* can't do it */
        }

        memcpy(modebuf, path, len);
        modebuf[len] = '\0';

        /* is last char a '/' ? */
        if (slash[1] == 0) {
            slash = modebuf + len;

            /* remove them */
            while (modebuf < slash && slash[-1] == '/') {
                --slash;
            }

            if (modebuf == slash) {
                goto use_cur;
            }

            *slash = '\0';

            while (modebuf < slash && *slash != '/') {
                --slash;
            }

            if (modebuf == slash) {
                goto use_cur;
            }

            *slash = '\0';      /* remove pathname component */
        }

        return modebuf;
    }

use_cur:
    modebuf[0] = '.';   /* use current directory */
    modebuf[1] = '\0';
    return modebuf;
}

int ad_setfuid(const uid_t id)
{
    default_uid = id;
    return 0;
}

/* ---------------- */
uid_t ad_getfuid(void)
{
    return default_uid;
}

/*!
   stat path parent directory
*/
int ad_stat(const char *path, struct stat *stbuf)
{
    char *p;
    p = ad_dir(path);

    if (!p) {
        return -1;
    }

    return stat(p, stbuf);
}

/*!
   return access right of path parent directory
*/
int ad_mode(const char *path, mode_t mode)
{
    struct stat     stbuf;
    ad_mode_st(path, &mode, &stbuf);
    return mode;
}

/*!
 * Use mkdir() with mode bits taken from ad_mode().
 */
int ad_mkdir(const char *path, mode_t mode)
{
    int ret;
    int st_invalid;
    struct stat stbuf;
    LOG(log_debug, logtype_ad, "ad_mkdir(\"%s\", %04o) {cwd: \"%s\"}",
        path, mode, getcwdpath());
    st_invalid = ad_mode_st(path, &mode, &stbuf);
    ret = mkdir(path, mode);

    if (ret || st_invalid) {
        return ret;
    }

    ad_chown(path, &stbuf);
    return ret;
}

static void ad_init_func(struct adouble *ad)
{
    switch (ad->ad_vers) {
    case AD_VERSION2:
        ad->ad_ops = &ad_adouble;
        ad->ad_rfp = &ad->ad_resource_fork;
        ad->ad_mdp = &ad->ad_resource_fork;
        break;

    case AD_VERSION_EA:
        ad->ad_ops = &ad_adouble_ea;
        ad->ad_rfp = &ad->ad_resource_fork;
        ad->ad_mdp = &ad->ad_data_fork;
        break;

    default:
        AFP_PANIC("ad_init: unknown AD version");
    }

    ad_data_fileno(ad) = -1;
    ad_reso_fileno(ad) = -1;
    ad_meta_fileno(ad) = -1;
    ad->ad_refcount = 1;
    ad->ad_rlen = 0;
    return;
}

void ad_init_old(struct adouble *ad, int flags, int options)
{
    memset(ad, 0, sizeof(struct adouble));
    ad->ad_vers = flags;
    ad->ad_options = options;
    ad_init_func(ad);
}

void ad_init(struct adouble *ad, const struct vol *vol)
{
    memset(ad, 0, sizeof(struct adouble));
    ad->ad_vers = vol->v_adouble;
    ad->ad_options = vol->v_ad_options;
    ad_init_func(ad);
}

/*!
 * @brief Open data-, metadata(header)- or resource fork
 *
 * @code
 * ad_open(struct adouble *ad, const char *path, int adflags, int flags)
 * ad_open(struct adouble *ad, const char *path, int adflags, int flags, mode_t mode)
 * @endcode
 *
 * You must call ad_init() before ad_open, usually you'll just call it like this:
 * @code
 *      struct adoube ad;
 *      ad_init(&ad, vol->v_adouble, vol->v_ad_options);
 * @endcode
 *
 * Open a files data fork, metadata fork or resource fork.
 *
 * @param[in,out] ad     pointer to struct adouble
 * @param[in] path       Path to file or directory
 * @param[in] adflags    Flags specifying which fork to open, can be or'd (see below)
 * @param[in] ...        mode used with O_CREATE
 *
 * Regular adflags:
 *  - ADFLAGS_DF:        open data fork
 *  - ADFLAGS_RF:        open resource fork
 *  - ADFLAGS_HF:        open header (metadata) file
 *  - ADFLAGS_NOHF:      it's not an error if header file couldn't be opened
 *  - ADFLAGS_NORF:      it's not an error if reso fork couldn't be opened
 *  - ADFLAGS_DIR:       if path is a directory you MUST or ADFLAGS_DIR to adflags
 *
 * Access mode for the forks:
 *  - ADFLAGS_RDONLY:    open read only
 *  - ADFLAGS_RDWR:      open read write
 *
 * Creation flags:
 *  - ADFLAGS_CREATE:    create if not existing
 *  - ADFLAGS_TRUNC:     truncate
 *
 * Special flags:
 *  - ADFLAGS_CHECK_OF:  check for open forks from us and other afpd's
 *  - ADFLAGS_SETSHRMD:  this adouble struct will be used to set sharemode locks.
 *                       This basically results in the files being opened RW instead of RDONLY.
 *
 * The open mode flags (rw vs ro) have to take into account all the following requirements:
 *
 * - we remember open fds for files because me must avoid a single close releasing fcntl locks for other
 *   fds of the same file
 *
 * @bug on Solaris (HAVE_EAFD) ADFLAGS_RF doesn't work without
 *   ADFLAGS_HF, because it checks whether ad_meta_fileno() is already
 *   opened. As a workaround pass ADFLAGS_SETSHRMD.
 *
 * @returns 0 on success, any other value indicates an error
 */
int ad_open(struct adouble *ad, const char *path, int adflags, ...)
{
    EC_INIT;
    va_list args;
    mode_t mode = 0;
    LOG(log_debug, logtype_ad,
        "ad_open(\"%s\", %s): BEGIN {d: %d, m: %d, r: %d}"
        "[dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), adflags2logstr(adflags),
        ad->ad_data_refcount, ad->ad_meta_refcount, ad->ad_reso_refcount,
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);

    if (adflags & ADFLAGS_CHECK_OF)
        /* Checking for open forks requires sharemode lock support (ie RDWR instead of RDONLY) */
    {
        adflags |= ADFLAGS_SETSHRMD;
    }

    if (adflags & ADFLAGS_SETSHRMD)
        /* sharemode locks are stored in the data fork */
    {
        adflags |= ADFLAGS_DF;
    }

    if (ad->ad_vers == AD_VERSION2) {
        if (adflags & ADFLAGS_RF) {
            adflags |= ADFLAGS_HF;
        }

        if (adflags & ADFLAGS_NORF) {
            adflags |= ADFLAGS_NOHF;
        }
    }

    if (ad->ad_inited != AD_INITED) {
        ad->ad_adflags = adflags;
        ad->ad_inited = AD_INITED;
    } else {
        ad->ad_open_forks = ((ad->ad_data_fork.adf_refcount > 0) ? ATTRBIT_DOPEN : 0);

        if (ad->ad_resource_fork.adf_refcount > 0) {
            ad->ad_open_forks |= ATTRBIT_ROPEN;
        }
    }

    va_start(args, adflags);

    if (adflags & ADFLAGS_CREATE) {
        mode = (sizeof(mode_t) < sizeof(int) ? va_arg(args, int) : va_arg(args,
                mode_t));
    }

    va_end(args);

    if (adflags & ADFLAGS_DF) {
        ad->ad_data_refcount++;

        if (ad_open_df(path, adflags, mode, ad) != 0) {
            ad->ad_data_refcount--;
            EC_FAIL;
        }
    }

    if (adflags & ADFLAGS_HF) {
        if (ad_open_hf(path, adflags, mode, ad) != 0) {
            EC_FAIL;
        }
    }

    if (adflags & ADFLAGS_RF) {
        if (ad_open_rf(path, adflags, mode, ad) != 0) {
            EC_FAIL;
        }
    }

    if (adflags & ADFLAGS_CHECK_OF) {
        ad->ad_open_forks |= ad_openforks(ad, ad->ad_open_forks);
    }

EC_CLEANUP:
    LOG(log_debug, logtype_ad,
        "ad_open(\"%s\"): END: %d {d: %d, m: %d, r: %d}"
        "[dfd: %d (ref: %d), mfd: %d (ref: %d), rfd: %d (ref: %d)]",
        fullpathname(path), ret,
        ad->ad_data_refcount, ad->ad_meta_refcount, ad->ad_reso_refcount,
        ad_data_fileno(ad), ad->ad_data_fork.adf_refcount,
        ad_meta_fileno(ad), ad->ad_mdp->adf_refcount,
        ad_reso_fileno(ad), ad->ad_rfp->adf_refcount);
    EC_EXIT;
}

/*!
 * @brief open metadata, possibly as root
 *
 * Return only metadata but try very hard i.e. at first try as user, then try as root.
 *
 * @param name  name of file/dir
 * @param flags ADFLAGS_DIR: name is a directory \n
 *              ADFLAGS_CHECK_OF: test if name is open by us or another afpd process
 *
 * @param adp   pointer to struct adouble
 */
int ad_metadata(const char *name, int flags, struct adouble *adp)
{
    int   ret, err, oflags;
    /* Sanitize flags */
    oflags = (flags & (ADFLAGS_CHECK_OF | ADFLAGS_DIR)) | ADFLAGS_HF |
             ADFLAGS_RDONLY;

    if ((ret = ad_open(adp, name, oflags)) < 0 && errno == EACCES) {
        become_root();
        ret = ad_open(adp, name, oflags);
        unbecome_root();
        err = errno;
        errno = err;
    }

    return ret;
}

/*!
 * openat like wrapper for ad_metadata
 */
int ad_metadataat(int dirfd, const char *name, int flags, struct adouble *adp)
{
    int ret = 0;
    int cwdfd = -1;

    if (dirfd != -1) {
        if (((cwdfd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
            ret = -1;
            goto exit;
        }
    }

    if (ad_metadata(name, flags, adp) < 0) {
        ret = -1;
        goto exit;
    }

    if (dirfd != -1) {
        if (fchdir(cwdfd) != 0) {
            LOG(log_error, logtype_ad, "ad_openat: can't chdir back, exiting");
            exit(EXITERR_SYS);
        }
    }

exit:

    if (cwdfd != -1) {
        close(cwdfd);
    }

    return ret;
}

int ad_refresh(const char *path, struct adouble *ad)
{
    switch (ad->ad_vers) {
    case AD_VERSION2:
        if (ad_meta_fileno(ad) == -1) {
            return -1;
        }

        return ad->ad_ops->ad_header_read(NULL, ad, NULL);
        break;

    case AD_VERSION_EA:
#ifdef HAVE_EAFD
        if (AD_META_OPEN(ad)) {
            if (ad_data_fileno(ad) == -1) {
                return -1;
            }

            /* TODO: read meta EA */
        }

        if (AD_RSRC_OPEN(ad)) {
            if (ad_reso_fileno(ad) == -1) {
                return -1;
            }

            struct stat st;

            if (fstat(ad_reso_fileno(ad), &st) == -1) {
                return -1;
            }

            ad->ad_rlen = st.st_size;
        }

#else

        if (AD_META_OPEN(ad)) {
            if (ad_data_fileno(ad) == -1) {
                return -1;
            }

            /* TODO: read meta EA */
        }

        if (AD_RSRC_OPEN(ad)) {
            if (ad_reso_fileno(ad) == -1) {
                return -1;
            }

            if (ad_header_read_osx(path, ad, NULL) < 0) {
                return -1;
            }
        }

#endif
        return ad->ad_ops->ad_header_read(path, ad, NULL);
        break;

    default:
        return -1;
        break;
    }
}

int ad_openat(struct adouble  *ad,
              int dirfd,  /* dir fd openat like */
              const char *path,
              int adflags, ...)
{
    EC_INIT;
    int cwdfd = -1;
    va_list args;
    mode_t mode = 0;

    if (dirfd != -1) {
        if (((cwdfd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
            EC_FAIL;
        }
    }

    va_start(args, adflags);

    if (adflags & ADFLAGS_CREATE) {
        mode = (sizeof(mode_t) < sizeof(int) ? va_arg(args, int) : va_arg(args,
                mode_t));
    }

    va_end(args);
    EC_NEG1(ad_open(ad, path, adflags, mode));

    if (dirfd != -1) {
        if (fchdir(cwdfd) != 0) {
            AFP_PANIC("ad_openat: can't chdir back");
        }
    }

EC_CLEANUP:

    if (cwdfd != -1) {
        close(cwdfd);
    }

    return ret;
}

/*!
 * build a resource fork mode from the data fork mode:
 * remove X mode and extend header to RW if R or W (W if R for locking),
 */
mode_t ad_hf_mode(mode_t mode)
{
    mode &= ~(S_IXUSR | S_IXGRP | S_IXOTH);

    /* fnctl lock need write access */
    if (mode & S_IRUSR) {
        mode |= S_IWUSR;
    }

    if (mode & S_IRGRP) {
        mode |= S_IWGRP;
    }

    if (mode & S_IROTH) {
        mode |= S_IWOTH;
    }

    /* if write mode set add read mode */
    if (mode & S_IWUSR) {
        mode |= S_IRUSR;
    }

    if (mode & S_IWGRP) {
        mode |= S_IRGRP;
    }

    if (mode & S_IWOTH) {
        mode |= S_IROTH;
    }

    return mode;
}
