]> wimlib.net Git - wimlib/blob - src/extract.c
c9a1dca0275b4b68e6c89f4013235fdaafe1dfdb
[wimlib] / src / extract.c
1 /*
2  * extract.c
3  *
4  * Support for extracting WIM images, or files or directories contained in a WIM
5  * image.
6  */
7
8 /*
9  * Copyright (C) 2012, 2013 Eric Biggers
10  *
11  * This file is part of wimlib, a library for working with WIM files.
12  *
13  * wimlib is free software; you can redistribute it and/or modify it under the
14  * terms of the GNU General Public License as published by the Free
15  * Software Foundation; either version 3 of the License, or (at your option)
16  * any later version.
17  *
18  * wimlib is distributed in the hope that it will be useful, but WITHOUT ANY
19  * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
20  * A PARTICULAR PURPOSE. See the GNU General Public License for more
21  * details.
22  *
23  * You should have received a copy of the GNU General Public License
24  * along with wimlib; if not, see http://www.gnu.org/licenses/.
25  */
26
27 /*
28  * This file provides the API functions wimlib_extract_image(),
29  * wimlib_extract_files(), and wimlib_extract_image_from_pipe().  Internally,
30  * all end up calling extract_tree() zero or more times to extract a tree of
31  * files from the currently selected WIM image to the specified target directory
32  * or NTFS volume.
33  *
34  * Although wimlib supports multiple extraction modes/backends (NTFS-3g, UNIX,
35  * Win32), this file does not itself have code to extract files or directories
36  * to any specific target; instead, it handles generic functionality and relies
37  * on lower-level callback functions declared in `struct apply_operations' to do
38  * the actual extraction.
39  */
40
41 #ifdef HAVE_CONFIG_H
42 #  include "config.h"
43 #endif
44
45 #include "wimlib/apply.h"
46 #include "wimlib/dentry.h"
47 #include "wimlib/encoding.h"
48 #include "wimlib/endianness.h"
49 #include "wimlib/error.h"
50 #include "wimlib/lookup_table.h"
51 #include "wimlib/metadata.h"
52 #include "wimlib/paths.h"
53 #include "wimlib/reparse.h"
54 #include "wimlib/resource.h"
55 #include "wimlib/security.h"
56 #include "wimlib/swm.h"
57 #ifdef __WIN32__
58 #  include "wimlib/win32.h" /* for realpath() equivalent */
59 #endif
60 #include "wimlib/xml.h"
61 #include "wimlib/wim.h"
62
63 #include <errno.h>
64 #include <fcntl.h>
65 #include <stdlib.h>
66 #include <sys/stat.h>
67 #include <unistd.h>
68
69 #define WIMLIB_EXTRACT_FLAG_MULTI_IMAGE 0x80000000
70 #define WIMLIB_EXTRACT_FLAG_FROM_PIPE   0x40000000
71 #define WIMLIB_EXTRACT_MASK_PUBLIC      0x3fffffff
72
73 /* Given a WIM dentry in the tree to be extracted, resolve all streams in the
74  * corresponding inode and set 'out_refcnt' in each to 0.  */
75 static int
76 dentry_resolve_and_zero_lte_refcnt(struct wim_dentry *dentry, void *_ctx)
77 {
78         struct apply_ctx *ctx = _ctx;
79         struct wim_inode *inode = dentry->d_inode;
80         struct wim_lookup_table_entry *lte;
81         int ret;
82         bool force = false;
83
84         if (dentry->extraction_skipped)
85                 return 0;
86
87         /* Special case:  when extracting from a pipe, the WIM lookup table is
88          * initially empty, so "resolving" an inode's streams is initially not
89          * possible.  However, we still need to keep track of which streams,
90          * identified by SHA1 message digests, need to be extracted, so we
91          * "resolve" the inode's streams anyway by allocating new entries.  */
92         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_FROM_PIPE)
93                 force = true;
94         ret = inode_resolve_ltes(inode, ctx->wim->lookup_table, force);
95         if (ret)
96                 return ret;
97         for (unsigned i = 0; i <= inode->i_num_ads; i++) {
98                 lte = inode_stream_lte_resolved(inode, i);
99                 if (lte)
100                         lte->out_refcnt = 0;
101         }
102         return 0;
103 }
104
105 static inline bool
106 is_linked_extraction(const struct apply_ctx *ctx)
107 {
108         return 0 != (ctx->extract_flags & (WIMLIB_EXTRACT_FLAG_HARDLINK |
109                                            WIMLIB_EXTRACT_FLAG_SYMLINK));
110 }
111
112 static inline bool
113 can_extract_named_data_streams(const struct apply_ctx *ctx)
114 {
115         return ctx->supported_features.named_data_streams &&
116                 !is_linked_extraction(ctx);
117 }
118
119 static int
120 ref_stream_to_extract(struct wim_lookup_table_entry *lte,
121                       struct wim_dentry *dentry, struct apply_ctx *ctx)
122 {
123         if (!lte)
124                 return 0;
125
126         if (likely(!is_linked_extraction(ctx)) || (lte->out_refcnt == 0 &&
127                                                    lte->extracted_file == NULL))
128         {
129                 ctx->progress.extract.total_bytes += wim_resource_size(lte);
130                 ctx->progress.extract.num_streams++;
131         }
132
133         if (lte->out_refcnt == 0) {
134                 list_add_tail(&lte->extraction_list, &ctx->stream_list);
135                 ctx->num_streams_remaining++;
136         }
137
138         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_SEQUENTIAL) {
139                 struct wim_dentry **lte_dentries;
140
141                 /* Append dentry to this stream's array of dentries referencing
142                  * it.  Use inline array to avoid memory allocation until the
143                  * number of dentries becomes too large.  */
144                 if (lte->out_refcnt < ARRAY_LEN(lte->inline_lte_dentries)) {
145                         lte_dentries = lte->inline_lte_dentries;
146                 } else {
147                         struct wim_dentry **prev_lte_dentries;
148                         size_t alloc_lte_dentries;
149
150                         if (lte->out_refcnt == ARRAY_LEN(lte->inline_lte_dentries)) {
151                                 prev_lte_dentries = NULL;
152                                 alloc_lte_dentries = ARRAY_LEN(lte->inline_lte_dentries);
153                         } else {
154                                 prev_lte_dentries = lte->lte_dentries;
155                                 alloc_lte_dentries = lte->alloc_lte_dentries;
156                         }
157
158                         if (lte->out_refcnt == alloc_lte_dentries) {
159                                 alloc_lte_dentries *= 2;
160                                 lte_dentries = REALLOC(prev_lte_dentries,
161                                                        alloc_lte_dentries *
162                                                         sizeof(lte_dentries[0]));
163                                 if (!lte_dentries)
164                                         return WIMLIB_ERR_NOMEM;
165                                 if (prev_lte_dentries == NULL) {
166                                         memcpy(lte_dentries,
167                                                lte->inline_lte_dentries,
168                                                sizeof(lte->inline_lte_dentries));
169                                 }
170                                 lte->lte_dentries = lte_dentries;
171                                 lte->alloc_lte_dentries = alloc_lte_dentries;
172                         }
173                         lte_dentries = lte->lte_dentries;
174                 }
175                 lte_dentries[lte->out_refcnt] = dentry;
176         }
177         lte->out_refcnt++;
178         return 0;
179 }
180
181 /* Given a WIM dentry in the tree to be extracted, iterate through streams that
182  * need to be extracted.  For each one, add it to the list of streams to be
183  * extracted (ctx->stream_list) if not already done so, and also update the
184  * progress information (ctx->progress) with the stream.  Furthermore, if doing
185  * a sequential extraction, build a mapping from each the stream to the dentries
186  * referencing it.  */
187 static int
188 dentry_add_streams_to_extract(struct wim_dentry *dentry, void *_ctx)
189 {
190         struct apply_ctx *ctx = _ctx;
191         struct wim_inode *inode = dentry->d_inode;
192         int ret;
193
194         /* Don't process dentries marked as skipped.  */
195         if (dentry->extraction_skipped)
196                 return 0;
197
198         /* Don't process additional hard links.  */
199         if (inode->i_visited && ctx->supported_features.hard_links)
200                 return 0;
201
202         /* The unnamed data stream will always be extracted, except in an
203          * unlikely case.  */
204         if (!inode_is_encrypted_directory(inode)) {
205                 ret = ref_stream_to_extract(inode_unnamed_lte_resolved(inode),
206                                             dentry, ctx);
207                 if (ret)
208                         return ret;
209         }
210
211         /* Named data streams will be extracted only if supported in the current
212          * extraction mode and volume, and to avoid complications, if not doing
213          * a linked extraction.  */
214         if (can_extract_named_data_streams(ctx)) {
215                 for (u16 i = 0; i < inode->i_num_ads; i++) {
216                         if (!ads_entry_is_named_stream(&inode->i_ads_entries[i]))
217                                 continue;
218                         ret = ref_stream_to_extract(inode->i_ads_entries[i].lte,
219                                                     dentry, ctx);
220                         if (ret)
221                                 return ret;
222                 }
223         }
224         inode->i_visited = 1;
225         return 0;
226 }
227
228 /* Inform library user of progress of stream extraction following the successful
229  * extraction of a copy of the stream specified by @lte.  */
230 static void
231 update_extract_progress(struct apply_ctx *ctx,
232                         const struct wim_lookup_table_entry *lte)
233 {
234         wimlib_progress_func_t progress_func = ctx->progress_func;
235         union wimlib_progress_info *progress = &ctx->progress;
236
237         progress->extract.completed_bytes += wim_resource_size(lte);
238         if (progress_func &&
239             progress->extract.completed_bytes >= ctx->next_progress)
240         {
241                 progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_STREAMS, progress);
242                 if (progress->extract.completed_bytes >=
243                     progress->extract.total_bytes)
244                 {
245                         ctx->next_progress = ~0ULL;
246                 } else {
247                         ctx->next_progress += progress->extract.total_bytes / 128;
248                         if (ctx->next_progress > progress->extract.total_bytes)
249                                 ctx->next_progress = progress->extract.total_bytes;
250                 }
251         }
252 }
253
254 #ifndef __WIN32__
255 /* Extract a symbolic link (not directly as reparse data), handling fixing up
256  * the target of absolute symbolic links and updating the extract progress.
257  *
258  * @inode must specify the WIM inode for a symbolic link or junction reparse
259  * point.
260  *
261  * @lte_override overrides the resource used as the reparse data for the
262  * symbolic link.  */
263 static int
264 extract_symlink(const tchar *path, struct apply_ctx *ctx,
265                 struct wim_inode *inode,
266                 struct wim_lookup_table_entry *lte_override)
267 {
268         ssize_t bufsize = ctx->ops->path_max;
269         tchar target[bufsize];
270         tchar *buf = target;
271         tchar *fixed_target;
272         ssize_t sret;
273         int ret;
274
275         /* If absolute symbolic link fixups requested, reserve space in the link
276          * target buffer for the absolute path of the target directory.  */
277         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_RPFIX)
278         {
279                 buf += ctx->realtarget_nchars;
280                 bufsize -= ctx->realtarget_nchars;
281         }
282
283         /* Translate the WIM inode's reparse data into the link target.  */
284         sret = wim_inode_readlink(inode, buf, bufsize - 1, lte_override);
285         if (sret < 0) {
286                 errno = -sret;
287                 return WIMLIB_ERR_READLINK;
288         }
289         buf[sret] = '\0';
290
291         if ((ctx->extract_flags & WIMLIB_EXTRACT_FLAG_RPFIX) &&
292             buf[0] == '/')
293         {
294                 /* Fix absolute symbolic link target to point into the
295                  * actual extraction destination.  */
296                 tmemcpy(target, ctx->realtarget, ctx->realtarget_nchars);
297                 fixed_target = target;
298         } else {
299                 /* Keep same link target.  */
300                 fixed_target = buf;
301         }
302
303         /* Call into the apply_operations to create the symbolic link.  */
304         DEBUG("Creating symlink \"%"TS"\" => \"%"TS"\"",
305               path, fixed_target);
306         ret = ctx->ops->create_symlink(fixed_target, path, ctx);
307         if (ret) {
308                 ERROR_WITH_ERRNO("Failed to create symlink "
309                                  "\"%"TS"\" => \"%"TS"\"", path, fixed_target);
310                 return ret;
311         }
312
313         /* Account for reparse data consumed.  */
314         update_extract_progress(ctx,
315                                 (lte_override ? lte_override :
316                                       inode_unnamed_lte_resolved(inode)));
317         return 0;
318 }
319 #endif /* !__WIN32__ */
320
321 /* Create a file, directory, or symbolic link.  */
322 static int
323 extract_inode(const tchar *path, struct apply_ctx *ctx, struct wim_inode *inode)
324 {
325         int ret;
326
327 #ifndef __WIN32__
328         if (ctx->supported_features.symlink_reparse_points &&
329             !ctx->supported_features.reparse_points &&
330             inode_is_symlink(inode))
331         {
332                 ret = extract_symlink(path, ctx, inode, NULL);
333         } else
334 #endif /* !__WIN32__ */
335         if (inode->i_attributes & FILE_ATTRIBUTE_DIRECTORY) {
336                 ret = ctx->ops->create_directory(path, ctx, &inode->extract_cookie);
337                 if (ret) {
338                         ERROR_WITH_ERRNO("Failed to create the directory "
339                                          "\"%"TS"\"", path);
340                 }
341         } else {
342                 ret = ctx->ops->create_file(path, ctx, &inode->extract_cookie);
343                 if (ret) {
344                         ERROR_WITH_ERRNO("Failed to create the file "
345                                          "\"%"TS"\"", path);
346                 }
347         }
348         return ret;
349 }
350
351 static int
352 extract_hardlink(const tchar *oldpath, const tchar *newpath,
353                  struct apply_ctx *ctx)
354 {
355         int ret;
356
357         DEBUG("Creating hardlink \"%"TS"\" => \"%"TS"\"", newpath, oldpath);
358         ret = ctx->ops->create_hardlink(oldpath, newpath, ctx);
359         if (ret) {
360                 ERROR_WITH_ERRNO("Failed to create hardlink "
361                                  "\"%"TS"\" => \"%"TS"\"",
362                                  newpath, oldpath);
363         }
364         return ret;
365 }
366
367 #ifdef __WIN32__
368 static int
369 try_extract_rpfix(u8 *rpbuf,
370                   u16 *rpbuflen_p,
371                   const wchar_t *extract_root_realpath,
372                   unsigned extract_root_realpath_nchars)
373 {
374         struct reparse_data rpdata;
375         wchar_t *target;
376         size_t target_nchars;
377         size_t stripped_nchars;
378         wchar_t *stripped_target;
379         wchar_t stripped_target_nchars;
380         int ret;
381
382         utf16lechar *new_target;
383         utf16lechar *new_print_name;
384         size_t new_target_nchars;
385         size_t new_print_name_nchars;
386         utf16lechar *p;
387
388         ret = parse_reparse_data(rpbuf, *rpbuflen_p, &rpdata);
389         if (ret)
390                 return ret;
391
392         if (extract_root_realpath[0] == L'\0' ||
393             extract_root_realpath[1] != L':' ||
394             extract_root_realpath[2] != L'\\')
395                 return WIMLIB_ERR_REPARSE_POINT_FIXUP_FAILED;
396
397         ret = parse_substitute_name(rpdata.substitute_name,
398                                     rpdata.substitute_name_nbytes,
399                                     rpdata.rptag);
400         if (ret < 0)
401                 return 0;
402         stripped_nchars = ret;
403         target = rpdata.substitute_name;
404         target_nchars = rpdata.substitute_name_nbytes / sizeof(utf16lechar);
405         stripped_target = target + stripped_nchars;
406         stripped_target_nchars = target_nchars - stripped_nchars;
407
408         new_target = alloca((6 + extract_root_realpath_nchars +
409                              stripped_target_nchars) * sizeof(utf16lechar));
410
411         p = new_target;
412         if (stripped_nchars == 6) {
413                 /* Include \??\ prefix if it was present before */
414                 p = wmempcpy(p, L"\\??\\", 4);
415         }
416
417         /* Print name excludes the \??\ if present. */
418         new_print_name = p;
419         if (stripped_nchars != 0) {
420                 /* Get drive letter from real path to extract root, if a drive
421                  * letter was present before. */
422                 *p++ = extract_root_realpath[0];
423                 *p++ = extract_root_realpath[1];
424         }
425         /* Copy the rest of the extract root */
426         p = wmempcpy(p, extract_root_realpath + 2, extract_root_realpath_nchars - 2);
427
428         /* Append the stripped target */
429         p = wmempcpy(p, stripped_target, stripped_target_nchars);
430         new_target_nchars = p - new_target;
431         new_print_name_nchars = p - new_print_name;
432
433         if (new_target_nchars * sizeof(utf16lechar) >= REPARSE_POINT_MAX_SIZE ||
434             new_print_name_nchars * sizeof(utf16lechar) >= REPARSE_POINT_MAX_SIZE)
435                 return WIMLIB_ERR_REPARSE_POINT_FIXUP_FAILED;
436
437         rpdata.substitute_name = new_target;
438         rpdata.substitute_name_nbytes = new_target_nchars * sizeof(utf16lechar);
439         rpdata.print_name = new_print_name;
440         rpdata.print_name_nbytes = new_print_name_nchars * sizeof(utf16lechar);
441         return make_reparse_buffer(&rpdata, rpbuf, rpbuflen_p);
442 }
443 #endif /* __WIN32__ */
444
445 /* Set reparse data on extracted file or directory that has
446  * FILE_ATTRIBUTE_REPARSE_POINT set.  */
447 static int
448 extract_reparse_data(const tchar *path, struct apply_ctx *ctx,
449                      struct wim_inode *inode,
450                      struct wim_lookup_table_entry *lte_override)
451 {
452         int ret;
453         u8 rpbuf[REPARSE_POINT_MAX_SIZE];
454         u16 rpbuflen;
455
456         ret = wim_inode_get_reparse_data(inode, rpbuf, &rpbuflen, lte_override);
457         if (ret)
458                 goto error;
459
460 #ifdef __WIN32__
461         /* Fix up target of absolute symbolic link or junction points so
462          * that they point into the actual extraction target.  */
463         if ((ctx->extract_flags & WIMLIB_EXTRACT_FLAG_RPFIX) &&
464             (inode->i_reparse_tag == WIM_IO_REPARSE_TAG_SYMLINK ||
465              inode->i_reparse_tag == WIM_IO_REPARSE_TAG_MOUNT_POINT) &&
466             !inode->i_not_rpfixed)
467         {
468                 ret = try_extract_rpfix(rpbuf, &rpbuflen, ctx->realtarget,
469                                         ctx->realtarget_nchars);
470                 if (ret && !(ctx->extract_flags &
471                              WIMLIB_EXTRACT_FLAG_STRICT_SYMLINKS))
472                 {
473                         WARNING("Reparse point fixup of \"%"TS"\" "
474                                 "failed", path);
475                         ret = 0;
476                 }
477                 if (ret)
478                         goto error;
479         }
480 #endif
481
482         ret = ctx->ops->set_reparse_data(path, rpbuf, rpbuflen, ctx);
483
484         /* On Windows, the SeCreateSymbolicLink privilege is required to create
485          * symbolic links.  To be more friendly towards non-Administrator users,
486          * we merely warn the user if symbolic links cannot be created due to
487          * insufficient permissions or privileges, unless
488          * WIMLIB_EXTRACT_FLAG_STRICT_SYMLINKS was provided.  */
489 #ifdef __WIN32__
490         if (ret && inode_is_symlink(inode) &&
491             (errno == EACCES || errno == EPERM) &&
492             !(ctx->extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_SYMLINKS))
493         {
494                 WARNING("Can't set reparse data on \"%"TS"\": "
495                         "Access denied!\n"
496                         "          You may be trying to "
497                         "extract a symbolic link without the\n"
498                         "          SeCreateSymbolicLink privilege, "
499                         "which by default non-Administrator\n"
500                         "          accounts do not have.",
501                         path);
502                 ret = 0;
503         }
504 #endif
505         if (ret)
506                 goto error;
507
508         /* Account for reparse data consumed.  */
509         update_extract_progress(ctx,
510                                 (lte_override ? lte_override :
511                                       inode_unnamed_lte_resolved(inode)));
512         return 0;
513
514 error:
515         ERROR_WITH_ERRNO("Failed to set reparse data on \"%"TS"\"", path);
516         return ret;
517 }
518
519 /*
520  * Extract zero or more streams to a file.
521  *
522  * This function operates slightly differently depending on whether @lte_spec is
523  * NULL or not.  When @lte_spec is NULL, the behavior is to extract the default
524  * file contents (unnamed stream), and, if named data streams are supported in
525  * the extract mode and volume, any named data streams.  When @lte_spec is NULL,
526  * the behavior is to extract only all copies of the stream @lte_spec, and in
527  * addition use @lte_spec to set the reparse data or create the symbolic link if
528  * appropriate.
529  *
530  * @path
531  *      Path to file to extract (as can be passed to apply_operations
532  *      functions).
533  * @ctx
534  *      Apply context.
535  * @dentry
536  *      WIM dentry that corresponds to the file being extracted.
537  * @lte_spec
538  *      If non-NULL, specifies the lookup table entry for a stream to extract,
539  *      and only that stream will be extracted (although there may be more than
540  *      one instance of it).
541  * @lte_override
542  *      Used only if @lte_spec != NULL; it is passed to the extraction functions
543  *      rather than @lte_spec, allowing the location of the stream to be
544  *      overridden.  (This is used when the WIM is being read from a nonseekable
545  *      file, such as a pipe, when streams need to be used more than once; each
546  *      such stream is extracted to a temporary file.)
547  */
548 static int
549 extract_streams(const tchar *path, struct apply_ctx *ctx,
550                 struct wim_dentry *dentry,
551                 struct wim_lookup_table_entry *lte_spec,
552                 struct wim_lookup_table_entry *lte_override)
553 {
554         struct wim_inode *inode = dentry->d_inode;
555         struct wim_lookup_table_entry *lte;
556         file_spec_t file_spec;
557         int ret;
558
559         if (dentry->was_hardlinked)
560                 return 0;
561
562 #ifdef ENABLE_DEBUG
563         if (lte_spec) {
564                 char sha1_str[100];
565                 char *p = sha1_str;
566                 for (unsigned i = 0; i < SHA1_HASH_SIZE; i++)
567                         p += sprintf(p, "%02x", lte_override->hash[i]);
568                 DEBUG("Extracting stream SHA1=%s to \"%"TS"\"",
569                       sha1_str, path, inode->i_ino);
570         } else {
571                 DEBUG("Extracting streams to \"%"TS"\"", path, inode->i_ino);
572         }
573 #endif
574
575         if (ctx->ops->uses_cookies)
576                 file_spec.cookie = inode->extract_cookie;
577         else
578                 file_spec.path = path;
579
580         /* Unnamed data stream.  */
581         lte = inode_unnamed_lte_resolved(inode);
582         if (lte && (!lte_spec || lte == lte_spec)) {
583                 if (lte_spec)
584                         lte = lte_override;
585                 if (!(inode->i_attributes & (FILE_ATTRIBUTE_DIRECTORY |
586                                              FILE_ATTRIBUTE_REPARSE_POINT)))
587                 {
588                         if ((inode->i_attributes & FILE_ATTRIBUTE_ENCRYPTED) &&
589                             ctx->supported_features.encrypted_files)
590                                 ret = ctx->ops->extract_encrypted_stream(file_spec, lte, ctx);
591                         else
592                                 ret = ctx->ops->extract_unnamed_stream(file_spec, lte, ctx);
593                         if (ret)
594                                 goto error;
595                         update_extract_progress(ctx, lte);
596                 }
597                 else if (inode->i_attributes & FILE_ATTRIBUTE_REPARSE_POINT)
598                 {
599                         ret = 0;
600                         if (ctx->supported_features.reparse_points)
601                                 ret = extract_reparse_data(path, ctx, inode, lte);
602                 #ifndef __WIN32__
603                         else if ((inode_is_symlink(inode) &&
604                                   ctx->supported_features.symlink_reparse_points))
605                                 ret = extract_symlink(path, ctx, inode, lte);
606                 #endif
607                         if (ret)
608                                 return ret;
609                 }
610         }
611
612         /* Named data streams.  */
613         if (can_extract_named_data_streams(ctx)) {
614                 for (u16 i = 0; i < inode->i_num_ads; i++) {
615                         struct wim_ads_entry *entry = &inode->i_ads_entries[i];
616
617                         if (!ads_entry_is_named_stream(entry))
618                                 continue;
619                         lte = entry->lte;
620                         if (!lte)
621                                 continue;
622                         if (lte_spec && lte_spec != lte)
623                                 continue;
624                         if (lte_spec)
625                                 lte = lte_override;
626                         ret = ctx->ops->extract_named_stream(file_spec, entry->stream_name,
627                                                              entry->stream_name_nbytes / 2,
628                                                              lte, ctx);
629                         if (ret)
630                                 goto error;
631                         update_extract_progress(ctx, lte);
632                 }
633         }
634         return 0;
635
636 error:
637         ERROR_WITH_ERRNO("Failed to extract data of \"%"TS"\"", path);
638         return ret;
639 }
640
641 /* Set attributes on an extracted file or directory if supported by the
642  * extraction mode.  */
643 static int
644 extract_file_attributes(const tchar *path, struct apply_ctx *ctx,
645                         struct wim_dentry *dentry, unsigned pass)
646 {
647         int ret;
648
649         if (ctx->ops->set_file_attributes &&
650             !(dentry == ctx->extract_root && ctx->root_dentry_is_special)) {
651                 u32 attributes = dentry->d_inode->i_attributes;
652
653                 /* Clear unsupported attributes.  */
654                 attributes &= ctx->supported_attributes_mask;
655
656                 if ((attributes & FILE_ATTRIBUTE_DIRECTORY &&
657                      !ctx->supported_features.encrypted_directories) ||
658                     (!(attributes & FILE_ATTRIBUTE_DIRECTORY) &&
659                      !ctx->supported_features.encrypted_files))
660                 {
661                         attributes &= ~FILE_ATTRIBUTE_ENCRYPTED;
662                 }
663
664                 if (attributes == 0)
665                         attributes = FILE_ATTRIBUTE_NORMAL;
666
667                 ret = ctx->ops->set_file_attributes(path, attributes, ctx, pass);
668                 if (ret) {
669                         ERROR_WITH_ERRNO("Failed to set attributes on "
670                                          "\"%"TS"\"", path);
671                         return ret;
672                 }
673         }
674         return 0;
675 }
676
677
678 /* Set or remove the short (DOS) name on an extracted file or directory if
679  * supported by the extraction mode.  Since DOS names are unimportant and it's
680  * easy to run into problems setting them on Windows (SetFileShortName()
681  * requires SE_RESTORE privilege, which only the Administrator can request, and
682  * also requires DELETE access to the file), failure is ignored unless
683  * WIMLIB_EXTRACT_FLAG_STRICT_SHORT_NAMES is set.  */
684 static int
685 extract_short_name(const tchar *path, struct apply_ctx *ctx,
686                    struct wim_dentry *dentry)
687 {
688         int ret;
689
690         /* The root of the dentry tree being extracted may not be extracted to
691          * its original name, so its short name should be ignored.  */
692         if (dentry == ctx->extract_root)
693                 return 0;
694
695         if (ctx->supported_features.short_names) {
696                 ret = ctx->ops->set_short_name(path,
697                                                dentry->short_name,
698                                                dentry->short_name_nbytes / 2,
699                                                ctx);
700                 if (ret && (ctx->extract_flags &
701                             WIMLIB_EXTRACT_FLAG_STRICT_SHORT_NAMES))
702                 {
703                         ERROR_WITH_ERRNO("Failed to set short name of "
704                                          "\"%"TS"\"", path);
705                         return ret;
706                 }
707         }
708         return 0;
709 }
710
711 /* Set security descriptor, UNIX data, or neither on an extracted file, taking
712  * into account the current extraction mode and flags.  */
713 static int
714 extract_security(const tchar *path, struct apply_ctx *ctx,
715                  struct wim_dentry *dentry)
716 {
717         int ret;
718         struct wim_inode *inode = dentry->d_inode;
719
720         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_NO_ACLS)
721                 return 0;
722
723         if ((ctx->extract_root == dentry) && ctx->root_dentry_is_special)
724                 return 0;
725
726 #ifndef __WIN32__
727         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_UNIX_DATA) {
728                 struct wimlib_unix_data data;
729
730                 ret = inode_get_unix_data(inode, &data, NULL);
731                 if (ret < 0)
732                         ret = 0;
733                 else if (ret == 0)
734                         ret = ctx->ops->set_unix_data(path, &data, ctx);
735                 if (ret) {
736                         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_ACLS) {
737                                 ERROR_WITH_ERRNO("Failed to set UNIX owner, "
738                                                  "group, and/or mode on "
739                                                  "\"%"TS"\"", path);
740                                 return ret;
741                         } else {
742                                 WARNING_WITH_ERRNO("Failed to set UNIX owner, "
743                                                    "group, and/or/mode on "
744                                                    "\"%"TS"\"", path);
745                         }
746                 }
747         }
748         else
749 #endif /* __WIN32__ */
750         if (ctx->supported_features.security_descriptors &&
751             inode->i_security_id != -1)
752         {
753                 const struct wim_security_data *sd;
754                 const u8 *desc;
755                 size_t desc_size;
756
757                 sd = wim_const_security_data(ctx->wim);
758                 desc = sd->descriptors[inode->i_security_id];
759                 desc_size = sd->sizes[inode->i_security_id];
760
761                 ret = ctx->ops->set_security_descriptor(path, desc,
762                                                         desc_size, ctx);
763                 if (ret) {
764                         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_ACLS) {
765                                 ERROR_WITH_ERRNO("Failed to set security "
766                                                  "descriptor on \"%"TS"\"", path);
767                                 return ret;
768                         } else {
769                                 if (errno != EACCES) {
770                                         WARNING_WITH_ERRNO("Failed to set "
771                                                            "security descriptor "
772                                                            "on \"%"TS"\"", path);
773                                 }
774                         }
775                 }
776         }
777         return 0;
778 }
779
780 /* Set timestamps on an extracted file.  Failure is warning-only unless
781  * WIMLIB_EXTRACT_FLAG_STRICT_TIMESTAMPS is set.  */
782 static int
783 extract_timestamps(const tchar *path, struct apply_ctx *ctx,
784                    struct wim_dentry *dentry)
785 {
786         struct wim_inode *inode = dentry->d_inode;
787         int ret;
788
789         if ((ctx->extract_root == dentry) && ctx->root_dentry_is_special)
790                 return 0;
791
792         if (ctx->ops->set_timestamps) {
793                 ret = ctx->ops->set_timestamps(path,
794                                                inode->i_creation_time,
795                                                inode->i_last_write_time,
796                                                inode->i_last_access_time,
797                                                ctx);
798                 if (ret) {
799                         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_TIMESTAMPS) {
800                                 ERROR_WITH_ERRNO("Failed to set timestamps "
801                                                  "on \"%"TS"\"", path);
802                                 return ret;
803                         } else {
804                                 WARNING_WITH_ERRNO("Failed to set timestamps "
805                                                    "on \"%"TS"\"", path);
806                         }
807                 }
808         }
809         return 0;
810 }
811
812 /* Check whether the extraction of a dentry should be skipped completely.  */
813 static bool
814 dentry_is_supported(struct wim_dentry *dentry,
815                     const struct wim_features *supported_features)
816 {
817         struct wim_inode *inode = dentry->d_inode;
818
819         if (inode->i_attributes & FILE_ATTRIBUTE_REPARSE_POINT) {
820                 return supported_features->reparse_points ||
821                         (inode_is_symlink(inode) &&
822                          supported_features->symlink_reparse_points);
823         }
824         if (inode->i_attributes & FILE_ATTRIBUTE_ENCRYPTED) {
825                 if (inode->i_attributes & FILE_ATTRIBUTE_DIRECTORY)
826                         return supported_features->encrypted_directories != 0;
827                 else
828                         return supported_features->encrypted_files != 0;
829         }
830         return true;
831 }
832
833 /* Given a WIM dentry to extract, build the path to which to extract it, in the
834  * format understood by the callbacks in the apply_operations being used.
835  *
836  * Write the resulting path into @path, which must have room for at least
837  * ctx->ops->max_path characters including the null-terminator.
838  *
839  * Return %true if successful; %false if this WIM dentry doesn't actually need
840  * to be extracted or if the calculated path exceeds ctx->ops->max_path
841  * characters.
842  *
843  * This function clobbers the tmp_list member of @dentry and its ancestors up
844  * until the extraction root.  */
845 static bool
846 build_extraction_path(tchar path[], struct wim_dentry *dentry,
847                       struct apply_ctx *ctx)
848 {
849         size_t path_nchars;
850         LIST_HEAD(ancestor_list);
851         tchar *p = path;
852         const tchar *target_prefix;
853         size_t target_prefix_nchars;
854         struct wim_dentry *d;
855
856         if (dentry->extraction_skipped)
857                 return false;
858
859         path_nchars = ctx->ops->path_prefix_nchars;
860
861         if (ctx->ops->requires_realtarget_in_paths) {
862                 target_prefix        = ctx->realtarget;
863                 target_prefix_nchars = ctx->realtarget_nchars;
864         } else if (ctx->ops->requires_target_in_paths) {
865                 target_prefix        = ctx->target;
866                 target_prefix_nchars = ctx->target_nchars;
867         } else {
868                 target_prefix        = NULL;
869                 target_prefix_nchars = 0;
870         }
871         path_nchars += target_prefix_nchars;
872
873         for (d = dentry; d != ctx->extract_root; d = d->parent) {
874                 path_nchars += d->extraction_name_nchars + 1;
875                 list_add(&d->tmp_list, &ancestor_list);
876         }
877
878         path_nchars++; /* null terminator */
879
880         if (path_nchars > ctx->ops->path_max) {
881                 WARNING("\"%"TS"\": Path too long to extract",
882                         dentry_full_path(dentry));
883                 return false;
884         }
885
886         p = tmempcpy(p, ctx->ops->path_prefix, ctx->ops->path_prefix_nchars);
887         p = tmempcpy(p, target_prefix, target_prefix_nchars);
888         list_for_each_entry(d, &ancestor_list, tmp_list) {
889                 *p++ = ctx->ops->path_separator;
890                 p = tmempcpy(p, d->extraction_name, d->extraction_name_nchars);
891         }
892         *p++ = T('\0');
893         wimlib_assert(p - path == path_nchars);
894         return true;
895 }
896
897 static unsigned
898 get_num_path_components(const tchar *path, tchar path_separator)
899 {
900         unsigned num_components = 0;
901 #ifdef __WIN32__
902         /* Ignore drive letter.  */
903         if (path[0] != L'\0' && path[1] == L':')
904                 path += 2;
905 #endif
906
907         while (*path) {
908                 while (*path == path_separator)
909                         path++;
910                 if (*path)
911                         num_components++;
912                 while (*path && *path != path_separator)
913                         path++;
914         }
915         return num_components;
916 }
917
918 static int
919 extract_multiimage_symlink(const tchar *oldpath, const tchar *newpath,
920                            struct apply_ctx *ctx, struct wim_dentry *dentry)
921 {
922         size_t num_raw_path_components;
923         const struct wim_dentry *d;
924         size_t num_target_path_components;
925         tchar *p;
926         const tchar *p_old;
927         int ret;
928
929         num_raw_path_components = 0;
930         for (d = dentry; d != ctx->extract_root; d = d->parent)
931                 num_raw_path_components++;
932
933         if (ctx->ops->requires_realtarget_in_paths)
934                 num_target_path_components = get_num_path_components(ctx->realtarget,
935                                                                      ctx->ops->path_separator);
936         else if (ctx->ops->requires_target_in_paths)
937                 num_target_path_components = get_num_path_components(ctx->target,
938                                                                      ctx->ops->path_separator);
939         else
940                 num_target_path_components = 0;
941
942         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_MULTI_IMAGE) {
943                 wimlib_assert(num_target_path_components > 0);
944                 num_raw_path_components++;
945                 num_target_path_components--;
946         }
947
948         p_old = oldpath + ctx->ops->path_prefix_nchars;
949 #ifdef __WIN32__
950         if (p_old[0] != L'\0' && p_old[1] == ':')
951                 p_old += 2;
952 #endif
953         while (*p_old == ctx->ops->path_separator)
954                 p_old++;
955         while (--num_target_path_components) {
956                 while (*p_old != ctx->ops->path_separator)
957                         p_old++;
958                 while (*p_old == ctx->ops->path_separator)
959                         p_old++;
960         }
961
962         tchar symlink_target[tstrlen(p_old) + 3 * num_raw_path_components + 1];
963
964         p = &symlink_target[0];
965         while (num_raw_path_components--) {
966                 *p++ = '.';
967                 *p++ = '.';
968                 *p++ = ctx->ops->path_separator;
969         }
970         tstrcpy(p, p_old);
971         DEBUG("Creating symlink \"%"TS"\" => \"%"TS"\"",
972               newpath, symlink_target);
973         ret = ctx->ops->create_symlink(symlink_target, newpath, ctx);
974         if (ret) {
975                 ERROR_WITH_ERRNO("Failed to create symlink "
976                                  "\"%"TS"\" => \"%"TS"\"",
977                                  newpath, symlink_target);
978         }
979         return ret;
980 }
981
982 /* Create the "skeleton" of an extracted file or directory.  Don't yet extract
983  * data streams, reparse data (including symbolic links), timestamps, and
984  * security descriptors.  Basically, everything that doesn't require reading
985  * non-metadata resources from the WIM file and isn't delayed until the final
986  * pass.  */
987 static int
988 do_dentry_extract_skeleton(tchar path[], struct wim_dentry *dentry,
989                            struct apply_ctx *ctx)
990 {
991         struct wim_inode *inode = dentry->d_inode;
992         int ret;
993         const tchar *oldpath;
994
995         if (unlikely(is_linked_extraction(ctx))) {
996                 struct wim_lookup_table_entry *unnamed_lte;
997
998                 unnamed_lte = inode_unnamed_lte_resolved(dentry->d_inode);
999                 if (unnamed_lte && unnamed_lte->extracted_file) {
1000                         oldpath = unnamed_lte->extracted_file;
1001                         if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_HARDLINK)
1002                                 goto hardlink;
1003                         else
1004                                 goto symlink;
1005                 }
1006         }
1007
1008         /* Create hard link if this dentry corresponds to an already-extracted
1009          * inode.  */
1010         if (inode->i_extracted_file) {
1011                 oldpath = inode->i_extracted_file;
1012                 goto hardlink;
1013         }
1014
1015         /* Skip symlinks unless they can be extracted as reparse points rather
1016          * than created directly.  */
1017         if (inode_is_symlink(inode) && !ctx->supported_features.reparse_points)
1018                 return 0;
1019
1020         /* Create this file or directory unless it's the extraction root, which
1021          * was already created if necessary.  */
1022         if (dentry != ctx->extract_root) {
1023                 ret = extract_inode(path, ctx, inode);
1024                 if (ret)
1025                         return ret;
1026         }
1027
1028         /* Create empty named data streams.  */
1029         if (can_extract_named_data_streams(ctx)) {
1030                 for (u16 i = 0; i < inode->i_num_ads; i++) {
1031                         file_spec_t file_spec;
1032                         struct wim_ads_entry *entry = &inode->i_ads_entries[i];
1033
1034                         if (!ads_entry_is_named_stream(entry))
1035                                 continue;
1036                         if (entry->lte)
1037                                 continue;
1038                         if (ctx->ops->uses_cookies)
1039                                 file_spec.cookie = inode->extract_cookie;
1040                         else
1041                                 file_spec.path = path;
1042                         ret = ctx->ops->extract_named_stream(file_spec,
1043                                                              entry->stream_name,
1044                                                              entry->stream_name_nbytes / 2,
1045                                                              entry->lte, ctx);
1046                         if (ret) {
1047                                 ERROR_WITH_ERRNO("\"%"TS"\": failed to create "
1048                                                  "empty named data stream",
1049                                                  path);
1050                                 return ret;
1051                         }
1052                 }
1053         }
1054
1055         /* Set file attributes (if supported).  */
1056         ret = extract_file_attributes(path, ctx, dentry, 0);
1057         if (ret)
1058                 return ret;
1059
1060         /* Set or remove file short name (if supported).  */
1061         ret = extract_short_name(path, ctx, dentry);
1062         if (ret)
1063                 return ret;
1064
1065         /* If inode has multiple links and hard links are supported in this
1066          * extraction mode and volume, save the path to the extracted file in
1067          * case it's needed to create a hard link.  */
1068         if (unlikely(is_linked_extraction(ctx))) {
1069                 struct wim_lookup_table_entry *unnamed_lte;
1070
1071                 unnamed_lte = inode_unnamed_lte_resolved(dentry->d_inode);
1072                 if (unnamed_lte) {
1073                         unnamed_lte->extracted_file = TSTRDUP(path);
1074                         if (!unnamed_lte->extracted_file)
1075                                 return WIMLIB_ERR_NOMEM;
1076                 }
1077         } else if (inode->i_nlink > 1 && ctx->supported_features.hard_links) {
1078                 inode->i_extracted_file = TSTRDUP(path);
1079                 if (!inode->i_extracted_file)
1080                         return WIMLIB_ERR_NOMEM;
1081         }
1082         return 0;
1083
1084 symlink:
1085         ret = extract_multiimage_symlink(oldpath, path, ctx, dentry);
1086         if (ret)
1087                 return ret;
1088         dentry->was_hardlinked = 1;
1089         return 0;
1090
1091 hardlink:
1092         ret = extract_hardlink(oldpath, path, ctx);
1093         if (ret)
1094                 return ret;
1095         dentry->was_hardlinked = 1;
1096         return 0;
1097 }
1098
1099 static int
1100 dentry_extract_skeleton(struct wim_dentry *dentry, void *_ctx)
1101 {
1102         struct apply_ctx *ctx = _ctx;
1103         tchar path[ctx->ops->path_max];
1104         struct wim_dentry *orig_dentry;
1105         struct wim_dentry *other_dentry;
1106         int ret;
1107
1108         /* Here we may re-order the extraction of multiple names (hard links)
1109          * for the same file in the same directory in order to ensure the short
1110          * (DOS) name is set correctly.  A short name is always associated with
1111          * exactly one long name, and at least on NTFS, only one long name for a
1112          * file can have a short name associated with it.  (More specifically,
1113          * there can be unlimited names in the POSIX namespace, but only one
1114          * name can be in the Win32+DOS namespace, or one name in the Win32
1115          * namespace with a corresponding name in the DOS namespace.) To ensure
1116          * the short name of a file is associated with the correct long name in
1117          * a directory, we extract the long name with a corresponding short name
1118          * before any additional names.  This can affect NTFS-3g extraction
1119          * (which uses ntfs_set_ntfs_dos_name(), which doesn't allow specifying
1120          * the long name to associate with a short name) and may affect Win32
1121          * extraction as well (which uses SetFileShortName()).  */
1122
1123         if (dentry->skeleton_extracted)
1124                 return 0;
1125         orig_dentry = NULL;
1126         if (ctx->supported_features.short_names
1127             && !dentry_has_short_name(dentry)
1128             && !dentry->d_inode->i_dos_name_extracted)
1129         {
1130                 inode_for_each_dentry(other_dentry, dentry->d_inode) {
1131                         if (dentry_has_short_name(other_dentry)
1132                             && !other_dentry->skeleton_extracted
1133                             && other_dentry->parent == dentry->parent)
1134                         {
1135                                 DEBUG("Creating %"TS" before %"TS" "
1136                                       "to guarantee correct DOS name extraction",
1137                                       dentry_full_path(other_dentry),
1138                                       dentry_full_path(dentry));
1139                                 orig_dentry = dentry;
1140                                 dentry = other_dentry;
1141                                 break;
1142                         }
1143                 }
1144         }
1145 again:
1146         if (!build_extraction_path(path, dentry, ctx))
1147                 return 0;
1148         ret = do_dentry_extract_skeleton(path, dentry, ctx);
1149         if (ret)
1150                 return ret;
1151
1152         dentry->skeleton_extracted = 1;
1153
1154         if (orig_dentry) {
1155                 dentry = orig_dentry;
1156                 orig_dentry = NULL;
1157                 goto again;
1158         }
1159         dentry->d_inode->i_dos_name_extracted = 1;
1160         return 0;
1161 }
1162
1163 /* Create a file or directory, then immediately extract all streams.  This
1164  * assumes that WIMLIB_EXTRACT_FLAG_SEQUENTIAL is not specified, since the WIM
1165  * may not be read sequentially by this function.  */
1166 static int
1167 dentry_extract(struct wim_dentry *dentry, void *_ctx)
1168 {
1169         struct apply_ctx *ctx = _ctx;
1170         tchar path[ctx->ops->path_max];
1171         int ret;
1172
1173         ret = dentry_extract_skeleton(dentry, ctx);
1174         if (ret)
1175                 return ret;
1176
1177         if (!build_extraction_path(path, dentry, ctx))
1178                 return 0;
1179
1180         return extract_streams(path, ctx, dentry, NULL, NULL);
1181 }
1182
1183 /* Extract all instances of the stream @lte that are being extracted in this
1184  * call of extract_tree().  @can_seek specifies whether the WIM file descriptor
1185  * is seekable or not (e.g. is a pipe).  If not and the stream needs to be
1186  * extracted multiple times, it is extracted to a temporary file first.
1187  *
1188  * This is intended for use with sequential extraction of a WIM image
1189  * (WIMLIB_EXTRACT_FLAG_SEQUENTIAL specified).  */
1190 static int
1191 extract_stream_instances(struct wim_lookup_table_entry *lte,
1192                          struct apply_ctx *ctx, bool can_seek)
1193 {
1194         struct wim_dentry **lte_dentries;
1195         struct wim_lookup_table_entry *lte_tmp = NULL;
1196         struct wim_lookup_table_entry *lte_override;
1197         tchar *stream_tmp_filename = NULL;
1198         tchar path[ctx->ops->path_max];
1199         unsigned i;
1200         int ret;
1201
1202         if (lte->out_refcnt <= ARRAY_LEN(lte->inline_lte_dentries))
1203                 lte_dentries = lte->inline_lte_dentries;
1204         else
1205                 lte_dentries = lte->lte_dentries;
1206
1207         if (likely(can_seek || lte->out_refcnt < 2)) {
1208                 lte_override = lte;
1209         } else {
1210                 /* Need to extract stream to temporary file.  */
1211                 struct filedes fd;
1212                 int raw_fd;
1213
1214                 stream_tmp_filename = ttempnam(NULL, T("wimlib"));
1215                 if (!stream_tmp_filename) {
1216                         ERROR_WITH_ERRNO("Failed to create temporary filename");
1217                         ret = WIMLIB_ERR_OPEN;
1218                         goto out;
1219                 }
1220
1221                 lte_tmp = memdup(lte, sizeof(struct wim_lookup_table_entry));
1222                 if (!lte_tmp) {
1223                         ret = WIMLIB_ERR_NOMEM;
1224                         goto out_free_stream_tmp_filename;
1225                 }
1226                 lte_tmp->resource_location = RESOURCE_IN_FILE_ON_DISK;
1227                 lte_tmp->file_on_disk = stream_tmp_filename;
1228                 lte_override = lte_tmp;
1229
1230                 raw_fd = topen(stream_tmp_filename,
1231                                O_WRONLY | O_CREAT | O_TRUNC | O_BINARY, 0600);
1232                 if (raw_fd < 0) {
1233                         ERROR_WITH_ERRNO("Failed to open temporary file");
1234                         ret = WIMLIB_ERR_OPEN;
1235                         goto out_free_lte_tmp;
1236                 }
1237                 filedes_init(&fd, raw_fd);
1238                 ret = extract_wim_resource_to_fd(lte, &fd,
1239                                                  wim_resource_size(lte));
1240                 if (filedes_close(&fd) && !ret)
1241                         ret = WIMLIB_ERR_WRITE;
1242                 if (ret)
1243                         goto out_unlink_stream_tmp_file;
1244         }
1245
1246         /* Extract all instances of the stream, reading either from the stream
1247          * in the WIM file or from the temporary file containing the stream.
1248          * dentry->tmp_flag is used to ensure that each dentry is processed only
1249          * once regardless of how many times this stream appears in the streams
1250          * of the corresponding inode.  */
1251         for (i = 0; i < lte->out_refcnt; i++) {
1252                 struct wim_dentry *dentry = lte_dentries[i];
1253
1254                 if (dentry->tmp_flag)
1255                         continue;
1256                 if (!build_extraction_path(path, dentry, ctx))
1257                         continue;
1258                 ret = extract_streams(path, ctx, dentry,
1259                                       lte, lte_override);
1260                 if (ret)
1261                         goto out_clear_tmp_flags;
1262                 dentry->tmp_flag = 1;
1263         }
1264         ret = 0;
1265 out_clear_tmp_flags:
1266         for (i = 0; i < lte->out_refcnt; i++)
1267                 lte_dentries[i]->tmp_flag = 0;
1268 out_unlink_stream_tmp_file:
1269         if (stream_tmp_filename)
1270                 tunlink(stream_tmp_filename);
1271 out_free_lte_tmp:
1272         FREE(lte_tmp);
1273 out_free_stream_tmp_filename:
1274         FREE(stream_tmp_filename);
1275 out:
1276         return ret;
1277 }
1278
1279 /* Extracts a list of streams (ctx.stream_list), assuming that the directory
1280  * structure and empty files were already created.  This relies on the
1281  * per-`struct wim_lookup_table_entry' list of dentries that reference each
1282  * stream that was constructed earlier.  Streams are extracted exactly in the
1283  * order of the stream list; however, unless the WIM's file descriptor is
1284  * detected to be non-seekable, streams may be read from the WIM file more than
1285  * one time if multiple copies need to be extracted.  */
1286 static int
1287 extract_stream_list(struct apply_ctx *ctx)
1288 {
1289         struct wim_lookup_table_entry *lte;
1290         bool can_seek;
1291         int ret;
1292
1293         can_seek = (lseek(ctx->wim->in_fd.fd, 0, SEEK_CUR) != -1);
1294         list_for_each_entry(lte, &ctx->stream_list, extraction_list) {
1295                 ret = extract_stream_instances(lte, ctx, can_seek);
1296                 if (ret)
1297                         return ret;
1298         }
1299         return 0;
1300 }
1301
1302 #define PWM_ALLOW_WIM_HDR 0x00001
1303 #define PWM_SILENT_EOF    0x00002
1304
1305 /* Read the header from a stream in a pipable WIM.  */
1306 static int
1307 read_pwm_stream_header(WIMStruct *pwm, struct wim_lookup_table_entry *lte,
1308                        int flags, struct wim_header_disk *hdr_ret)
1309 {
1310         union {
1311                 struct pwm_stream_hdr stream_hdr;
1312                 struct wim_header_disk pwm_hdr;
1313         } buf;
1314         int ret;
1315
1316         ret = full_read(&pwm->in_fd, &buf.stream_hdr, sizeof(buf.stream_hdr));
1317         if (ret)
1318                 goto read_error;
1319
1320         if ((flags & PWM_ALLOW_WIM_HDR) && buf.stream_hdr.magic == PWM_MAGIC) {
1321                 BUILD_BUG_ON(sizeof(buf.pwm_hdr) < sizeof(buf.stream_hdr));
1322                 ret = full_read(&pwm->in_fd, &buf.stream_hdr + 1,
1323                                 sizeof(buf.pwm_hdr) - sizeof(buf.stream_hdr));
1324
1325                 if (ret)
1326                         goto read_error;
1327                 lte->resource_location = RESOURCE_NONEXISTENT;
1328                 memcpy(hdr_ret, &buf.pwm_hdr, sizeof(buf.pwm_hdr));
1329                 return 0;
1330         }
1331
1332         if (buf.stream_hdr.magic != PWM_STREAM_MAGIC) {
1333                 ERROR("Data read on pipe is invalid (expected stream header).");
1334                 return WIMLIB_ERR_INVALID_PIPABLE_WIM;
1335         }
1336
1337         lte->resource_entry.original_size = le64_to_cpu(buf.stream_hdr.uncompressed_size);
1338         copy_hash(lte->hash, buf.stream_hdr.hash);
1339         lte->resource_entry.flags = le32_to_cpu(buf.stream_hdr.flags);
1340         lte->resource_entry.offset = pwm->in_fd.offset;
1341         lte->resource_location = RESOURCE_IN_WIM;
1342         lte->wim = pwm;
1343         if (lte->resource_entry.flags & WIM_RESHDR_FLAG_COMPRESSED) {
1344                 lte->compression_type = pwm->compression_type;
1345                 lte->resource_entry.size = 0;
1346         } else {
1347                 lte->compression_type = WIMLIB_COMPRESSION_TYPE_NONE;
1348                 lte->resource_entry.size = lte->resource_entry.original_size;
1349         }
1350         lte->is_pipable = 1;
1351         return 0;
1352
1353 read_error:
1354         if (ret != WIMLIB_ERR_UNEXPECTED_END_OF_FILE || !(flags & PWM_SILENT_EOF))
1355                 ERROR_WITH_ERRNO("Error reading pipable WIM from pipe");
1356         return ret;
1357 }
1358
1359 /* Skip over an unneeded stream in a pipable WIM being read from a pipe.  */
1360 static int
1361 skip_pwm_stream(struct wim_lookup_table_entry *lte)
1362 {
1363         return read_partial_wim_resource(lte, wim_resource_size(lte),
1364                                          NULL, NULL,
1365                                          WIMLIB_READ_RESOURCE_FLAG_SEEK_ONLY,
1366                                          0);
1367 }
1368
1369 static int
1370 extract_streams_from_pipe(struct apply_ctx *ctx)
1371 {
1372         struct wim_lookup_table_entry *found_lte;
1373         struct wim_lookup_table_entry *needed_lte;
1374         struct wim_lookup_table *lookup_table;
1375         struct wim_header_disk pwm_hdr;
1376         int ret;
1377         int pwm_flags;
1378
1379         ret = WIMLIB_ERR_NOMEM;
1380         found_lte = new_lookup_table_entry();
1381         if (!found_lte)
1382                 goto out;
1383
1384         lookup_table = ctx->wim->lookup_table;
1385         pwm_flags = PWM_ALLOW_WIM_HDR;
1386         if ((ctx->extract_flags & WIMLIB_EXTRACT_FLAG_RESUME))
1387                 pwm_flags |= PWM_SILENT_EOF;
1388         memcpy(ctx->progress.extract.guid, ctx->wim->hdr.guid, WIM_GID_LEN);
1389         ctx->progress.extract.part_number = ctx->wim->hdr.part_number;
1390         ctx->progress.extract.total_parts = ctx->wim->hdr.total_parts;
1391         if (ctx->progress_func)
1392                 ctx->progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_SPWM_PART_BEGIN,
1393                                    &ctx->progress);
1394         while (ctx->num_streams_remaining) {
1395                 ret = read_pwm_stream_header(ctx->wim, found_lte, pwm_flags,
1396                                              &pwm_hdr);
1397                 if (ret) {
1398                         if (ret == WIMLIB_ERR_UNEXPECTED_END_OF_FILE &&
1399                             (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_RESUME))
1400                         {
1401                                 goto resume_done;
1402                         }
1403                         goto out_free_found_lte;
1404                 }
1405
1406                 if ((found_lte->resource_location != RESOURCE_NONEXISTENT)
1407                     && !(found_lte->resource_entry.flags & WIM_RESHDR_FLAG_METADATA)
1408                     && (needed_lte = __lookup_resource(lookup_table, found_lte->hash))
1409                     && (needed_lte->out_refcnt))
1410                 {
1411                         copy_resource_entry(&needed_lte->resource_entry,
1412                                             &found_lte->resource_entry);
1413                         needed_lte->resource_location = found_lte->resource_location;
1414                         needed_lte->wim               = found_lte->wim;
1415                         needed_lte->compression_type  = found_lte->compression_type;
1416                         needed_lte->is_pipable        = found_lte->is_pipable;
1417
1418                         ret = extract_stream_instances(needed_lte, ctx, false);
1419                         if (ret)
1420                                 goto out_free_found_lte;
1421                         ctx->num_streams_remaining--;
1422                 } else if (found_lte->resource_location != RESOURCE_NONEXISTENT) {
1423                         ret = skip_pwm_stream(found_lte);
1424                         if (ret)
1425                                 goto out_free_found_lte;
1426                 } else {
1427                         u16 part_number = le16_to_cpu(pwm_hdr.part_number);
1428                         u16 total_parts = le16_to_cpu(pwm_hdr.total_parts);
1429
1430                         if (part_number != ctx->progress.extract.part_number ||
1431                             total_parts != ctx->progress.extract.total_parts ||
1432                             memcmp(pwm_hdr.guid, ctx->progress.extract.guid,
1433                                    WIM_GID_LEN))
1434                         {
1435                                 ctx->progress.extract.part_number = part_number;
1436                                 ctx->progress.extract.total_parts = total_parts;
1437                                 memcpy(ctx->progress.extract.guid,
1438                                        pwm_hdr.guid, WIM_GID_LEN);
1439                                 if (ctx->progress_func) {
1440                                         ctx->progress_func(
1441                                                 WIMLIB_PROGRESS_MSG_EXTRACT_SPWM_PART_BEGIN,
1442                                                            &ctx->progress);
1443                                 }
1444
1445                         }
1446                 }
1447         }
1448         ret = 0;
1449 out_free_found_lte:
1450         free_lookup_table_entry(found_lte);
1451 out:
1452         return ret;
1453
1454 resume_done:
1455         /* TODO */
1456         return 0;
1457 }
1458
1459 /* Finish extracting a file, directory, or symbolic link by setting file
1460  * security and timestamps.  */
1461 static int
1462 dentry_extract_final(struct wim_dentry *dentry, void *_ctx)
1463 {
1464         struct apply_ctx *ctx = _ctx;
1465         int ret;
1466         tchar path[ctx->ops->path_max];
1467
1468         if (!build_extraction_path(path, dentry, ctx))
1469                 return 0;
1470
1471         ret = extract_security(path, ctx, dentry);
1472         if (ret)
1473                 return ret;
1474
1475         if (ctx->ops->requires_final_set_attributes_pass) {
1476                 /* Set file attributes (if supported).  */
1477                 ret = extract_file_attributes(path, ctx, dentry, 1);
1478                 if (ret)
1479                         return ret;
1480         }
1481
1482         return extract_timestamps(path, ctx, dentry);
1483 }
1484
1485 /*
1486  * Extract a WIM dentry to standard output.
1487  *
1488  * This obviously doesn't make sense in all cases.  We return an error if the
1489  * dentry does not correspond to a regular file.  Otherwise we extract the
1490  * unnamed data stream only.
1491  */
1492 static int
1493 extract_dentry_to_stdout(struct wim_dentry *dentry)
1494 {
1495         int ret = 0;
1496         if (dentry->d_inode->i_attributes & (FILE_ATTRIBUTE_REPARSE_POINT |
1497                                              FILE_ATTRIBUTE_DIRECTORY))
1498         {
1499                 ERROR("\"%"TS"\" is not a regular file and therefore cannot be "
1500                       "extracted to standard output", dentry_full_path(dentry));
1501                 ret = WIMLIB_ERR_NOT_A_REGULAR_FILE;
1502         } else {
1503                 struct wim_lookup_table_entry *lte;
1504
1505                 lte = inode_unnamed_lte_resolved(dentry->d_inode);
1506                 if (lte) {
1507                         struct filedes _stdout;
1508                         filedes_init(&_stdout, STDOUT_FILENO);
1509                         ret = extract_wim_resource_to_fd(lte, &_stdout,
1510                                                          wim_resource_size(lte));
1511                 }
1512         }
1513         return ret;
1514 }
1515
1516 #ifdef __WIN32__
1517 static const utf16lechar replacement_char = cpu_to_le16(0xfffd);
1518 #else
1519 static const utf16lechar replacement_char = cpu_to_le16('?');
1520 #endif
1521
1522 static bool
1523 file_name_valid(utf16lechar *name, size_t num_chars, bool fix)
1524 {
1525         size_t i;
1526
1527         if (num_chars == 0)
1528                 return true;
1529         for (i = 0; i < num_chars; i++) {
1530                 switch (name[i]) {
1531         #ifdef __WIN32__
1532                 case cpu_to_le16('\\'):
1533                 case cpu_to_le16(':'):
1534                 case cpu_to_le16('*'):
1535                 case cpu_to_le16('?'):
1536                 case cpu_to_le16('"'):
1537                 case cpu_to_le16('<'):
1538                 case cpu_to_le16('>'):
1539                 case cpu_to_le16('|'):
1540         #endif
1541                 case cpu_to_le16('/'):
1542                 case cpu_to_le16('\0'):
1543                         if (fix)
1544                                 name[i] = replacement_char;
1545                         else
1546                                 return false;
1547                 }
1548         }
1549
1550 #ifdef __WIN32__
1551         if (name[num_chars - 1] == cpu_to_le16(' ') ||
1552             name[num_chars - 1] == cpu_to_le16('.'))
1553         {
1554                 if (fix)
1555                         name[num_chars - 1] = replacement_char;
1556                 else
1557                         return false;
1558         }
1559 #endif
1560         return true;
1561 }
1562
1563 static bool
1564 dentry_is_dot_or_dotdot(const struct wim_dentry *dentry)
1565 {
1566         const utf16lechar *file_name = dentry->file_name;
1567         return file_name != NULL &&
1568                 file_name[0] == cpu_to_le16('.') &&
1569                 (file_name[1] == cpu_to_le16('\0') ||
1570                  (file_name[1] == cpu_to_le16('.') &&
1571                   file_name[2] == cpu_to_le16('\0')));
1572 }
1573
1574 static int
1575 dentry_mark_skipped(struct wim_dentry *dentry, void *_ignore)
1576 {
1577         dentry->extraction_skipped = 1;
1578         return 0;
1579 }
1580
1581 /*
1582  * dentry_calculate_extraction_path-
1583  *
1584  * Calculate the actual filename component at which a WIM dentry will be
1585  * extracted, handling invalid filenames "properly".
1586  *
1587  * dentry->extraction_name usually will be set the same as dentry->file_name (on
1588  * UNIX, converted into the platform's multibyte encoding).  However, if the
1589  * file name contains characters that are not valid on the current platform or
1590  * has some other format that is not valid, leave dentry->extraction_name as
1591  * NULL and set dentry->extraction_skipped to indicate that this dentry should
1592  * not be extracted, unless the appropriate flag
1593  * WIMLIB_EXTRACT_FLAG_REPLACE_INVALID_FILENAMES is set in the extract flags, in
1594  * which case a substitute filename will be created and set instead.
1595  *
1596  * Conflicts with case-insensitive names on Windows are handled similarly; see
1597  * below.
1598  */
1599 static int
1600 dentry_calculate_extraction_path(struct wim_dentry *dentry, void *_args)
1601 {
1602         struct apply_ctx *ctx = _args;
1603         int ret;
1604
1605         if (dentry == ctx->extract_root || dentry->extraction_skipped)
1606                 return 0;
1607
1608         if (!dentry_is_supported(dentry, &ctx->supported_features))
1609                 goto skip_dentry;
1610
1611         if (dentry_is_dot_or_dotdot(dentry)) {
1612                 /* WIM files shouldn't contain . or .. entries.  But if they are
1613                  * there, don't attempt to extract them. */
1614                 WARNING("Skipping extraction of unexpected . or .. file "
1615                         "\"%"TS"\"", dentry_full_path(dentry));
1616                 goto skip_dentry;
1617         }
1618
1619 #ifdef __WIN32__
1620         if (!ctx->ops->supports_case_sensitive_filenames)
1621         {
1622                 struct wim_dentry *other;
1623                 list_for_each_entry(other, &dentry->case_insensitive_conflict_list,
1624                                     case_insensitive_conflict_list)
1625                 {
1626                         if (ctx->extract_flags &
1627                             WIMLIB_EXTRACT_FLAG_ALL_CASE_CONFLICTS) {
1628                                 WARNING("\"%"TS"\" has the same "
1629                                         "case-insensitive name as "
1630                                         "\"%"TS"\"; extracting "
1631                                         "dummy name instead",
1632                                         dentry_full_path(dentry),
1633                                         dentry_full_path(other));
1634                                 goto out_replace;
1635                         } else {
1636                                 WARNING("Not extracting \"%"TS"\": "
1637                                         "has same case-insensitive "
1638                                         "name as \"%"TS"\"",
1639                                         dentry_full_path(dentry),
1640                                         dentry_full_path(other));
1641                                 goto skip_dentry;
1642                         }
1643                 }
1644         }
1645 #else   /* __WIN32__ */
1646         wimlib_assert(ctx->ops->supports_case_sensitive_filenames);
1647 #endif  /* !__WIN32__ */
1648
1649         if (file_name_valid(dentry->file_name, dentry->file_name_nbytes / 2, false)) {
1650 #ifdef __WIN32__
1651                 dentry->extraction_name = dentry->file_name;
1652                 dentry->extraction_name_nchars = dentry->file_name_nbytes / 2;
1653                 return 0;
1654 #else
1655                 return utf16le_to_tstr(dentry->file_name,
1656                                        dentry->file_name_nbytes,
1657                                        &dentry->extraction_name,
1658                                        &dentry->extraction_name_nchars);
1659 #endif
1660         } else {
1661                 if (ctx->extract_flags & WIMLIB_EXTRACT_FLAG_REPLACE_INVALID_FILENAMES)
1662                 {
1663                         WARNING("\"%"TS"\" has an invalid filename "
1664                                 "that is not supported on this platform; "
1665                                 "extracting dummy name instead",
1666                                 dentry_full_path(dentry));
1667                         goto out_replace;
1668                 } else {
1669                         WARNING("Not extracting \"%"TS"\": has an invalid filename "
1670                                 "that is not supported on this platform",
1671                                 dentry_full_path(dentry));
1672                         goto skip_dentry;
1673                 }
1674         }
1675
1676 out_replace:
1677         {
1678                 utf16lechar utf16_name_copy[dentry->file_name_nbytes / 2];
1679
1680                 memcpy(utf16_name_copy, dentry->file_name, dentry->file_name_nbytes);
1681                 file_name_valid(utf16_name_copy, dentry->file_name_nbytes / 2, true);
1682
1683                 tchar *tchar_name;
1684                 size_t tchar_nchars;
1685         #ifdef __WIN32__
1686                 tchar_name = utf16_name_copy;
1687                 tchar_nchars = dentry->file_name_nbytes / 2;
1688         #else
1689                 ret = utf16le_to_tstr(utf16_name_copy,
1690                                       dentry->file_name_nbytes,
1691                                       &tchar_name, &tchar_nchars);
1692                 if (ret)
1693                         return ret;
1694         #endif
1695                 size_t fixed_name_num_chars = tchar_nchars;
1696                 tchar fixed_name[tchar_nchars + 50];
1697
1698                 tmemcpy(fixed_name, tchar_name, tchar_nchars);
1699                 fixed_name_num_chars += tsprintf(fixed_name + tchar_nchars,
1700                                                  T(" (invalid filename #%lu)"),
1701                                                  ++ctx->invalid_sequence);
1702         #ifndef __WIN32__
1703                 FREE(tchar_name);
1704         #endif
1705                 dentry->extraction_name = memdup(fixed_name,
1706                                                  2 * fixed_name_num_chars + 2);
1707                 if (!dentry->extraction_name)
1708                         return WIMLIB_ERR_NOMEM;
1709                 dentry->extraction_name_nchars = fixed_name_num_chars;
1710         }
1711         return 0;
1712
1713 skip_dentry:
1714         for_dentry_in_tree(dentry, dentry_mark_skipped, NULL);
1715         return 0;
1716 }
1717
1718 /* Clean up dentry and inode structure after extraction.  */
1719 static int
1720 dentry_reset_needs_extraction(struct wim_dentry *dentry, void *_ignore)
1721 {
1722         struct wim_inode *inode = dentry->d_inode;
1723
1724         dentry->extraction_skipped = 0;
1725         dentry->was_hardlinked = 0;
1726         dentry->skeleton_extracted = 0;
1727         inode->i_visited = 0;
1728         FREE(inode->i_extracted_file);
1729         inode->i_extracted_file = NULL;
1730         inode->i_dos_name_extracted = 0;
1731         if ((void*)dentry->extraction_name != (void*)dentry->file_name)
1732                 FREE(dentry->extraction_name);
1733         dentry->extraction_name = NULL;
1734         return 0;
1735 }
1736
1737 /* Tally features necessary to extract a dentry and the corresponding inode.  */
1738 static int
1739 dentry_tally_features(struct wim_dentry *dentry, void *_features)
1740 {
1741         struct wim_features *features = _features;
1742         struct wim_inode *inode = dentry->d_inode;
1743
1744         if (inode->i_attributes & FILE_ATTRIBUTE_ARCHIVE)
1745                 features->archive_files++;
1746         if (inode->i_attributes & FILE_ATTRIBUTE_HIDDEN)
1747                 features->hidden_files++;
1748         if (inode->i_attributes & FILE_ATTRIBUTE_SYSTEM)
1749                 features->system_files++;
1750         if (inode->i_attributes & FILE_ATTRIBUTE_COMPRESSED)
1751                 features->compressed_files++;
1752         if (inode->i_attributes & FILE_ATTRIBUTE_ENCRYPTED) {
1753                 if (inode->i_attributes & FILE_ATTRIBUTE_DIRECTORY)
1754                         features->encrypted_directories++;
1755                 else
1756                         features->encrypted_files++;
1757         }
1758         if (inode->i_attributes & FILE_ATTRIBUTE_NOT_CONTENT_INDEXED)
1759                 features->not_context_indexed_files++;
1760         if (inode->i_attributes & FILE_ATTRIBUTE_SPARSE_FILE)
1761                 features->sparse_files++;
1762         if (inode_has_named_stream(inode))
1763                 features->named_data_streams++;
1764         if (inode->i_visited)
1765                 features->hard_links++;
1766         if (inode->i_attributes & FILE_ATTRIBUTE_REPARSE_POINT) {
1767                 features->reparse_points++;
1768                 if (inode_is_symlink(inode))
1769                         features->symlink_reparse_points++;
1770                 else
1771                         features->other_reparse_points++;
1772         }
1773         if (inode->i_security_id != -1)
1774                 features->security_descriptors++;
1775         if (dentry->short_name_nbytes)
1776                 features->short_names++;
1777         if (inode_has_unix_data(inode))
1778                 features->unix_data++;
1779         inode->i_visited = 1;
1780         return 0;
1781 }
1782
1783 static int
1784 dentry_clear_inode_visited(struct wim_dentry *dentry, void *_ignore)
1785 {
1786         dentry->d_inode->i_visited = 0;
1787         return 0;
1788 }
1789
1790 /* Tally the features necessary to extract a dentry tree.  */
1791 static void
1792 dentry_tree_get_features(struct wim_dentry *root, struct wim_features *features)
1793 {
1794         memset(features, 0, sizeof(struct wim_features));
1795         for_dentry_in_tree(root, dentry_tally_features, features);
1796         for_dentry_in_tree(root, dentry_clear_inode_visited, NULL);
1797 }
1798
1799 static u32
1800 compute_supported_attributes_mask(const struct wim_features *supported_features)
1801 {
1802         u32 mask = ~(u32)0;
1803
1804         if (!supported_features->archive_files)
1805                 mask &= ~FILE_ATTRIBUTE_ARCHIVE;
1806
1807         if (!supported_features->hidden_files)
1808                 mask &= ~FILE_ATTRIBUTE_HIDDEN;
1809
1810         if (!supported_features->system_files)
1811                 mask &= ~FILE_ATTRIBUTE_SYSTEM;
1812
1813         if (!supported_features->not_context_indexed_files)
1814                 mask &= ~FILE_ATTRIBUTE_NOT_CONTENT_INDEXED;
1815
1816         if (!supported_features->compressed_files)
1817                 mask &= ~FILE_ATTRIBUTE_COMPRESSED;
1818
1819         if (!supported_features->sparse_files)
1820                 mask &= ~FILE_ATTRIBUTE_SPARSE_FILE;
1821
1822         if (!supported_features->reparse_points)
1823                 mask &= ~FILE_ATTRIBUTE_REPARSE_POINT;
1824
1825         return mask;
1826 }
1827
1828 static int
1829 do_feature_check(const struct wim_features *required_features,
1830                  const struct wim_features *supported_features,
1831                  int extract_flags,
1832                  const struct apply_operations *ops,
1833                  const tchar *wim_source_path)
1834 {
1835         const tchar *loc;
1836         const tchar *mode = T("this extraction mode");
1837
1838         if (wim_source_path[0] == '\0')
1839                 loc = T("the WIM image");
1840         else
1841                 loc = wim_source_path;
1842
1843         /* We're an archive program, so theoretically we can do what we want
1844          * with FILE_ATTRIBUTE_ARCHIVE (which is a dumb flag anyway).  Don't
1845          * bother the user about it.  */
1846 #if 0
1847         if (required_features->archive_files && !supported_features->archive_files)
1848         {
1849                 WARNING(
1850           "%lu files in %"TS" are marked as archived, but this attribute\n"
1851 "          is not supported in %"TS".",
1852                         required_features->archive_files, loc, mode);
1853         }
1854 #endif
1855
1856         if (required_features->hidden_files && !supported_features->hidden_files)
1857         {
1858                 WARNING(
1859           "%lu files in %"TS" are marked as hidden, but this\n"
1860 "          attribute is not supported in %"TS".",
1861                         required_features->hidden_files, loc, mode);
1862         }
1863
1864         if (required_features->system_files && !supported_features->system_files)
1865         {
1866                 WARNING(
1867           "%lu files in %"TS" are marked as system files,\n"
1868 "          but this attribute is not supported in %"TS".",
1869                         required_features->system_files, loc, mode);
1870         }
1871
1872         if (required_features->compressed_files && !supported_features->compressed_files)
1873         {
1874                 WARNING(
1875           "%lu files in %"TS" are marked as being transparently\n"
1876 "          compressed, but transparent compression is not supported in\n"
1877 "          %"TS".  These files will be extracted as uncompressed.",
1878                         required_features->compressed_files, loc, mode);
1879         }
1880
1881         if (required_features->encrypted_files && !supported_features->encrypted_files)
1882         {
1883                 WARNING(
1884           "%lu files in %"TS" are marked as being encrypted,\n"
1885 "           but encryption is not supported in %"TS".  These files\n"
1886 "           will not be extracted.",
1887                         required_features->encrypted_files, loc, mode);
1888         }
1889
1890         if (required_features->encrypted_directories &&
1891             !supported_features->encrypted_directories)
1892         {
1893                 WARNING(
1894           "%lu directories in %"TS" are marked as being encrypted,\n"
1895 "           but encryption is not supported in %"TS".\n"
1896 "           These directories will be extracted as unencrypted.",
1897                         required_features->encrypted_directories, loc, mode);
1898         }
1899
1900         if (required_features->not_context_indexed_files &&
1901             !supported_features->not_context_indexed_files)
1902         {
1903                 WARNING(
1904           "%lu files in %"TS" are marked as not content indexed,\n"
1905 "          but this attribute is not supported in %"TS".",
1906                         required_features->not_context_indexed_files, loc, mode);
1907         }
1908
1909         if (required_features->sparse_files && !supported_features->sparse_files)
1910         {
1911                 WARNING(
1912           "%lu files in %"TS" are marked as sparse, but creating\n"
1913 "           sparse files is not supported in %"TS".  These files\n"
1914 "           will be extracted as non-sparse.",
1915                         required_features->sparse_files, loc, mode);
1916         }
1917
1918         if (required_features->named_data_streams &&
1919             !supported_features->named_data_streams)
1920         {
1921                 WARNING(
1922           "%lu files in %"TS" contain one or more alternate (named)\n"
1923 "          data streams, which are not supported in %"TS".\n"
1924 "          Alternate data streams will NOT be extracted.",
1925                         required_features->named_data_streams, loc, mode);
1926         }
1927
1928         if (unlikely(extract_flags & (WIMLIB_EXTRACT_FLAG_HARDLINK |
1929                                       WIMLIB_EXTRACT_FLAG_SYMLINK)) &&
1930             required_features->named_data_streams &&
1931             supported_features->named_data_streams)
1932         {
1933                 WARNING(
1934           "%lu files in %"TS" contain one or more alternate (named)\n"
1935 "          data streams, which are not supported in linked extraction mode.\n"
1936 "          Alternate data streams will NOT be extracted.",
1937                         required_features->named_data_streams, loc);
1938         }
1939
1940         if (required_features->hard_links && !supported_features->hard_links)
1941         {
1942                 WARNING(
1943           "%lu files in %"TS" are hard links, but hard links are\n"
1944 "          not supported in %"TS".  Hard links will be extracted as\n"
1945 "          duplicate copies of the linked files.",
1946                         required_features->hard_links, loc, mode);
1947         }
1948
1949         if (required_features->reparse_points && !supported_features->reparse_points)
1950         {
1951                 if (supported_features->symlink_reparse_points) {
1952                         if (required_features->other_reparse_points) {
1953                                 WARNING(
1954           "%lu files in %"TS" are reparse points that are neither\n"
1955 "          symbolic links nor junction points and are not supported in\n"
1956 "          %"TS".  These reparse points will not be extracted.",
1957                                         required_features->other_reparse_points, loc,
1958                                         mode);
1959                         }
1960                 } else {
1961                         WARNING(
1962           "%lu files in %"TS" are reparse points, which are\n"
1963 "          not supported in %"TS" and will not be extracted.",
1964                                 required_features->reparse_points, loc, mode);
1965                 }
1966         }
1967
1968         if (required_features->security_descriptors &&
1969             !supported_features->security_descriptors)
1970         {
1971                 WARNING(
1972           "%lu files in %"TS" have Windows NT security descriptors,\n"
1973 "          but extracting security descriptors is not supported in\n"
1974 "          %"TS".  No security descriptors will be extracted.",
1975                         required_features->security_descriptors, loc, mode);
1976         }
1977
1978         if (required_features->short_names && !supported_features->short_names)
1979         {
1980                 WARNING(
1981           "%lu files in %"TS" have short (DOS) names, but\n"
1982 "          extracting short names is not supported in %"TS".\n"
1983 "          Short names will not be extracted.\n",
1984                         required_features->short_names, loc, mode);
1985         }
1986
1987         if ((extract_flags & WIMLIB_EXTRACT_FLAG_UNIX_DATA) &&
1988             required_features->unix_data && !supported_features->unix_data)
1989         {
1990                 ERROR("Extracting UNIX data is not supported in %"TS, mode);
1991                 return WIMLIB_ERR_UNSUPPORTED;
1992         }
1993         if ((extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_SHORT_NAMES) &&
1994             required_features->short_names && !supported_features->short_names)
1995         {
1996                 ERROR("Extracting short names is not supported in %"TS"", mode);
1997                 return WIMLIB_ERR_UNSUPPORTED;
1998         }
1999         if ((extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_TIMESTAMPS) &&
2000             !ops->set_timestamps)
2001         {
2002                 ERROR("Extracting timestamps is not supported in %"TS"", mode);
2003                 return WIMLIB_ERR_UNSUPPORTED;
2004         }
2005         if (((extract_flags & (WIMLIB_EXTRACT_FLAG_STRICT_ACLS |
2006                                WIMLIB_EXTRACT_FLAG_UNIX_DATA))
2007              == WIMLIB_EXTRACT_FLAG_STRICT_ACLS) &&
2008             required_features->security_descriptors &&
2009             !supported_features->security_descriptors)
2010         {
2011                 ERROR("Extracting security descriptors is not supported in %"TS, mode);
2012                 return WIMLIB_ERR_UNSUPPORTED;
2013         }
2014
2015         if ((extract_flags & WIMLIB_EXTRACT_FLAG_HARDLINK) &&
2016             !supported_features->hard_links)
2017         {
2018                 ERROR("Hard link extraction mode requested, but "
2019                       "%"TS" does not support hard links!", mode);
2020                 return WIMLIB_ERR_UNSUPPORTED;
2021         }
2022
2023         if ((extract_flags & WIMLIB_EXTRACT_FLAG_STRICT_SYMLINKS) &&
2024             required_features->symlink_reparse_points &&
2025             !(supported_features->symlink_reparse_points ||
2026               supported_features->reparse_points))
2027         {
2028                 ERROR("Extracting symbolic links is not supported in %"TS, mode);
2029                 return WIMLIB_ERR_UNSUPPORTED;
2030         }
2031
2032         if ((extract_flags & WIMLIB_EXTRACT_FLAG_SYMLINK) &&
2033             !supported_features->symlink_reparse_points)
2034         {
2035                 ERROR("Symbolic link extraction mode requested, but "
2036                       "%"TS" does not support symbolic "
2037                       "links!", mode);
2038                 return WIMLIB_ERR_UNSUPPORTED;
2039         }
2040         return 0;
2041 }
2042
2043 /*
2044  * extract_tree - Extract a file or directory tree from the currently selected
2045  *                WIM image.
2046  *
2047  * @wim:        WIMStruct for the WIM file, with the desired image selected
2048  *              (as wim->current_image).
2049  *
2050  * @wim_source_path:
2051  *              "Canonical" (i.e. no leading or trailing slashes, path
2052  *              separators WIM_PATH_SEPARATOR) path inside the WIM image to
2053  *              extract.  An empty string means the full image.
2054  *
2055  * @target:
2056  *              Filesystem path to extract the file or directory tree to.
2057  *              (Or, with WIMLIB_EXTRACT_FLAG_NTFS: the name of a NTFS volume.)
2058  *
2059  * @extract_flags:
2060  *              WIMLIB_EXTRACT_FLAG_*.  Also, the private flag
2061  *              WIMLIB_EXTRACT_FLAG_MULTI_IMAGE will be set if this is being
2062  *              called through wimlib_extract_image() with WIMLIB_ALL_IMAGES as
2063  *              the image.
2064  *
2065  * @progress_func:
2066  *              If non-NULL, progress function for the extraction.  The messages
2067  *              that may be sent in this function are:
2068  *
2069  *              WIMLIB_PROGRESS_MSG_EXTRACT_TREE_BEGIN or
2070  *                      WIMLIB_PROGRESS_MSG_EXTRACT_IMAGE_BEGIN;
2071  *              WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_BEGIN;
2072  *              WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_END;
2073  *              WIMLIB_PROGRESS_MSG_EXTRACT_DENTRY;
2074  *              WIMLIB_PROGRESS_MSG_EXTRACT_STREAMS;
2075  *              WIMLIB_PROGRESS_MSG_APPLY_TIMESTAMPS;
2076  *              WIMLIB_PROGRESS_MSG_EXTRACT_TREE_END or
2077  *                      WIMLIB_PROGRESS_MSG_EXTRACT_IMAGE_END.
2078  *
2079  * Returns 0 on success; a positive WIMLIB_ERR_* code on failure.
2080  */
2081 static int
2082 extract_tree(WIMStruct *wim, const tchar *wim_source_path, const tchar *target,
2083              int extract_flags, wimlib_progress_func_t progress_func)
2084 {
2085         struct wim_dentry *root;
2086         struct wim_features required_features;
2087         struct apply_ctx ctx;
2088         int ret;
2089         struct wim_lookup_table_entry *lte;
2090
2091         /* Start initializing the apply_ctx.  */
2092         memset(&ctx, 0, sizeof(struct apply_ctx));
2093         ctx.wim = wim;
2094         ctx.extract_flags = extract_flags;
2095         ctx.target = target;
2096         ctx.target_nchars = tstrlen(target);
2097         ctx.progress_func = progress_func;
2098         if (progress_func) {
2099                 ctx.progress.extract.wimfile_name = wim->filename;
2100                 ctx.progress.extract.image = wim->current_image;
2101                 ctx.progress.extract.extract_flags = (extract_flags &
2102                                                       WIMLIB_EXTRACT_MASK_PUBLIC);
2103                 ctx.progress.extract.image_name = wimlib_get_image_name(wim,
2104                                                                         wim->current_image);
2105                 ctx.progress.extract.extract_root_wim_source_path = wim_source_path;
2106                 ctx.progress.extract.target = target;
2107         }
2108         INIT_LIST_HEAD(&ctx.stream_list);
2109
2110         /* Translate the path to extract into the corresponding
2111          * `struct wim_dentry', which will be the root of the
2112          * "dentry tree" to extract.  */
2113         root = get_dentry(wim, wim_source_path);
2114         if (!root) {
2115                 ERROR("Path \"%"TS"\" does not exist in WIM image %d",
2116                       wim_source_path, wim->current_image);
2117                 ret = WIMLIB_ERR_PATH_DOES_NOT_EXIST;
2118                 goto out;
2119         }
2120
2121         ctx.extract_root = root;
2122
2123         /* Select the appropriate apply_operations based on the
2124          * platform and extract_flags.  */
2125 #ifdef __WIN32__
2126         ctx.ops = &win32_apply_ops;
2127 #else
2128         ctx.ops = &unix_apply_ops;
2129 #endif
2130
2131 #ifdef WITH_NTFS_3G
2132         if (extract_flags & WIMLIB_EXTRACT_FLAG_NTFS)
2133                 ctx.ops = &ntfs_3g_apply_ops;
2134 #endif
2135
2136         /* Call the start_extract() callback.  This gives the apply_operations
2137          * implementation a chance to do any setup needed to access the volume.
2138          * Furthermore, it's expected to set the supported features of this
2139          * extraction mode (ctx.supported_features), which are determined at
2140          * runtime as they may vary depending on the actual volume.  These
2141          * features are then compared with the actual features extracting this
2142          * dentry tree requires.  Some mismatches will merely produce warnings
2143          * and the unsupported data will be ignored; others will produce errors.
2144          */
2145         ret = ctx.ops->start_extract(target, &ctx);
2146         if (ret)
2147                 goto out;
2148
2149         dentry_tree_get_features(root, &required_features);
2150         ret = do_feature_check(&required_features, &ctx.supported_features,
2151                                extract_flags, ctx.ops, wim_source_path);
2152         if (ret)
2153                 goto out_finish_or_abort_extract;
2154
2155         ctx.supported_attributes_mask =
2156                 compute_supported_attributes_mask(&ctx.supported_features);
2157
2158         /* Figure out whether the root dentry is being extracted to the root of
2159          * a volume and therefore needs to be treated "specially", for example
2160          * not being explicitly created and not having attributes set.  */
2161         if (ctx.ops->target_is_root && ctx.ops->root_directory_is_special)
2162                 ctx.root_dentry_is_special = ctx.ops->target_is_root(target);
2163
2164         /* Calculate the actual filename component of each extracted dentry.  In
2165          * the process, set the dentry->extraction_skipped flag on dentries that
2166          * are being skipped for some reason (e.g. invalid filename).  */
2167         ret = for_dentry_in_tree(root, dentry_calculate_extraction_path, &ctx);
2168         if (ret)
2169                 goto out_dentry_reset_needs_extraction;
2170
2171         /* Build the list of the streams that need to be extracted and
2172          * initialize ctx.progress.extract with stream information.  */
2173         ret = for_dentry_in_tree(ctx.extract_root,
2174                                  dentry_resolve_and_zero_lte_refcnt, &ctx);
2175         if (ret)
2176                 goto out_dentry_reset_needs_extraction;
2177
2178         ret = for_dentry_in_tree(ctx.extract_root,
2179                                  dentry_add_streams_to_extract, &ctx);
2180         if (ret)
2181                 goto out_teardown_stream_list;
2182
2183         if (extract_flags & WIMLIB_EXTRACT_FLAG_FROM_PIPE) {
2184                 /* When extracting from a pipe, the number of bytes of data to
2185                  * extract can't be determined in the normal way (examining the
2186                  * lookup table), since at this point all we have is a set of
2187                  * SHA1 message digests of streams that need to be extracted.
2188                  * However, we can get a reasonably accurate estimate by taking
2189                  * <TOTALBYTES> from the corresponding <IMAGE> in the WIM XML
2190                  * data.  This does assume that a full image is being extracted,
2191                  * but currently there is no API for doing otherwise.  (Also,
2192                  * subtract <HARDLINKBYTES> from this if hard links are
2193                  * supported by the extraction mode.)  */
2194                 ctx.progress.extract.total_bytes =
2195                         wim_info_get_image_total_bytes(wim->wim_info,
2196                                                        wim->current_image);
2197                 if (ctx.supported_features.hard_links) {
2198                         ctx.progress.extract.total_bytes -=
2199                                 wim_info_get_image_hard_link_bytes(wim->wim_info,
2200                                                                    wim->current_image);
2201                 }
2202         }
2203
2204         /* Handle the special case of extracting a file to standard
2205          * output.  In that case, "root" should be a single file, not a
2206          * directory tree.  (If not, extract_dentry_to_stdout() will
2207          * return an error.)  */
2208         if (extract_flags & WIMLIB_EXTRACT_FLAG_TO_STDOUT) {
2209                 ret = extract_dentry_to_stdout(root);
2210                 goto out_teardown_stream_list;
2211         }
2212
2213         /* If a sequential extraction was specified, sort the streams to be
2214          * extracted by their position in the WIM file so that the WIM file can
2215          * be read sequentially.  */
2216         if ((extract_flags & (WIMLIB_EXTRACT_FLAG_SEQUENTIAL |
2217                               WIMLIB_EXTRACT_FLAG_FROM_PIPE))
2218                                         == WIMLIB_EXTRACT_FLAG_SEQUENTIAL)
2219         {
2220                 ret = sort_stream_list_by_sequential_order(
2221                                 &ctx.stream_list,
2222                                 offsetof(struct wim_lookup_table_entry,
2223                                          extraction_list));
2224                 if (ret)
2225                         goto out_teardown_stream_list;
2226         }
2227
2228         if (ctx.ops->realpath_works_on_nonexisting_files &&
2229             ((extract_flags & WIMLIB_EXTRACT_FLAG_RPFIX) ||
2230              ctx.ops->requires_realtarget_in_paths))
2231         {
2232                 ctx.realtarget = realpath(target, NULL);
2233                 if (!ctx.realtarget) {
2234                         ret = WIMLIB_ERR_NOMEM;
2235                         goto out_teardown_stream_list;
2236                 }
2237                 ctx.realtarget_nchars = tstrlen(ctx.realtarget);
2238         }
2239
2240         if (progress_func) {
2241                 progress_func(*wim_source_path ? WIMLIB_PROGRESS_MSG_EXTRACT_TREE_BEGIN :
2242                                                  WIMLIB_PROGRESS_MSG_EXTRACT_IMAGE_BEGIN,
2243                               &ctx.progress);
2244         }
2245
2246         if (!ctx.root_dentry_is_special)
2247         {
2248                 tchar path[ctx.ops->path_max];
2249                 if (build_extraction_path(path, root, &ctx))
2250                 {
2251                         ret = extract_inode(path, &ctx, root->d_inode);
2252                         if (ret)
2253                                 goto out_free_realtarget;
2254                 }
2255         }
2256
2257         /* If we need to fix up the targets of absolute symbolic links
2258          * (WIMLIB_EXTRACT_FLAG_RPFIX) or the extraction mode requires paths to
2259          * be absolute, use realpath() (or its replacement on Windows) to get
2260          * the absolute path to the extraction target.  Note that this requires
2261          * the target directory to exist, unless
2262          * realpath_works_on_nonexisting_files is set in the apply_operations.
2263          * */
2264         if (!ctx.realtarget &&
2265             (((extract_flags & WIMLIB_EXTRACT_FLAG_RPFIX) &&
2266               required_features.symlink_reparse_points) ||
2267              ctx.ops->requires_realtarget_in_paths))
2268         {
2269                 ctx.realtarget = realpath(target, NULL);
2270                 if (!ctx.realtarget) {
2271                         ret = WIMLIB_ERR_NOMEM;
2272                         goto out_free_realtarget;
2273                 }
2274                 ctx.realtarget_nchars = tstrlen(ctx.realtarget);
2275         }
2276
2277         /* Finally, the important part: extract the tree of files.  */
2278         if (extract_flags & (WIMLIB_EXTRACT_FLAG_SEQUENTIAL |
2279                              WIMLIB_EXTRACT_FLAG_FROM_PIPE)) {
2280                 /* Sequential extraction requested, so two passes are needed
2281                  * (one for directory structure, one for streams.)  */
2282                 if (progress_func)
2283                         progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_BEGIN,
2284                                       &ctx.progress);
2285
2286                 if (!(extract_flags & WIMLIB_EXTRACT_FLAG_RESUME)) {
2287                         ret = for_dentry_in_tree(root, dentry_extract_skeleton, &ctx);
2288                         if (ret)
2289                                 goto out_free_realtarget;
2290                 }
2291                 if (progress_func)
2292                         progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_END,
2293                                       &ctx.progress);
2294                 if (extract_flags & WIMLIB_EXTRACT_FLAG_FROM_PIPE)
2295                         ret = extract_streams_from_pipe(&ctx);
2296                 else
2297                         ret = extract_stream_list(&ctx);
2298                 if (ret)
2299                         goto out_free_realtarget;
2300         } else {
2301                 /* Sequential extraction was not requested, so we can make do
2302                  * with one pass where we both create the files and extract
2303                  * streams.   */
2304                 if (progress_func)
2305                         progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_BEGIN,
2306                                       &ctx.progress);
2307                 ret = for_dentry_in_tree(root, dentry_extract, &ctx);
2308                 if (ret)
2309                         goto out_free_realtarget;
2310                 if (progress_func)
2311                         progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_DIR_STRUCTURE_END,
2312                                       &ctx.progress);
2313         }
2314
2315         /* If the total number of bytes to extract was miscalculated, just jump
2316          * to the calculated number in order to avoid confusing the progress
2317          * function.  This should only occur when extracting from a pipe.  */
2318         if (ctx.progress.extract.completed_bytes != ctx.progress.extract.total_bytes)
2319         {
2320                 DEBUG("Calculated %"PRIu64" bytes to extract, but actually "
2321                       "extracted %"PRIu64,
2322                       ctx.progress.extract.total_bytes,
2323                       ctx.progress.extract.completed_bytes);
2324         }
2325         if (progress_func &&
2326             ctx.progress.extract.completed_bytes < ctx.progress.extract.total_bytes)
2327         {
2328                 ctx.progress.extract.completed_bytes = ctx.progress.extract.total_bytes;
2329                 progress_func(WIMLIB_PROGRESS_MSG_EXTRACT_STREAMS, &ctx.progress);
2330         }
2331
2332         /* Apply security descriptors and timestamps.  This is done at the end,
2333          * and in a depth-first manner, to prevent timestamps from getting
2334          * changed by subsequent extract operations and to minimize the chance
2335          * of the restored security descriptors getting in our way.  */
2336         if (progress_func)
2337                 progress_func(WIMLIB_PROGRESS_MSG_APPLY_TIMESTAMPS,
2338                               &ctx.progress);
2339         ret = for_dentry_in_tree_depth(root, dentry_extract_final, &ctx);
2340         if (ret)
2341                 goto out_free_realtarget;
2342
2343         if (progress_func) {
2344                 progress_func(*wim_source_path ? WIMLIB_PROGRESS_MSG_EXTRACT_TREE_END :
2345                               WIMLIB_PROGRESS_MSG_EXTRACT_IMAGE_END,
2346                               &ctx.progress);
2347         }
2348
2349         ret = 0;
2350 out_free_realtarget:
2351         FREE(ctx.realtarget);
2352 out_teardown_stream_list:
2353         /* Free memory allocated as part of the mapping from each
2354          * wim_lookup_table_entry to the dentries that reference it.  */
2355         if (ctx.extract_flags & WIMLIB_EXTRACT_FLAG_SEQUENTIAL)
2356                 list_for_each_entry(lte, &ctx.stream_list, extraction_list)
2357                         if (lte->out_refcnt > ARRAY_LEN(lte->inline_lte_dentries))
2358                                 FREE(lte->lte_dentries);
2359 out_dentry_reset_needs_extraction:
2360         for_dentry_in_tree(root, dentry_reset_needs_extraction, NULL);
2361 out_finish_or_abort_extract:
2362         if (ret) {
2363                 if (ctx.ops->abort_extract)
2364                         ctx.ops->abort_extract(&ctx);
2365         } else {
2366                 if (ctx.ops->finish_extract)
2367                         ret = ctx.ops->finish_extract(&ctx);
2368         }
2369 out:
2370         return ret;
2371 }
2372
2373 /* Validates a single wimlib_extract_command, mostly checking to make sure the
2374  * extract flags make sense. */
2375 static int
2376 check_extract_command(struct wimlib_extract_command *cmd, int wim_header_flags)
2377 {
2378         int extract_flags;
2379
2380         /* Empty destination path? */
2381         if (cmd->fs_dest_path[0] == T('\0'))
2382                 return WIMLIB_ERR_INVALID_PARAM;
2383
2384         extract_flags = cmd->extract_flags;
2385
2386         /* Check for invalid flag combinations  */
2387         if ((extract_flags &
2388              (WIMLIB_EXTRACT_FLAG_SYMLINK |
2389               WIMLIB_EXTRACT_FLAG_HARDLINK)) == (WIMLIB_EXTRACT_FLAG_SYMLINK |
2390                                                  WIMLIB_EXTRACT_FLAG_HARDLINK))
2391                 return WIMLIB_ERR_INVALID_PARAM;
2392
2393         if ((extract_flags &
2394              (WIMLIB_EXTRACT_FLAG_NO_ACLS |
2395               WIMLIB_EXTRACT_FLAG_STRICT_ACLS)) == (WIMLIB_EXTRACT_FLAG_NO_ACLS |
2396                                                     WIMLIB_EXTRACT_FLAG_STRICT_ACLS))
2397                 return WIMLIB_ERR_INVALID_PARAM;
2398
2399         if ((extract_flags &
2400              (WIMLIB_EXTRACT_FLAG_RPFIX |
2401               WIMLIB_EXTRACT_FLAG_NORPFIX)) == (WIMLIB_EXTRACT_FLAG_RPFIX |
2402                                                 WIMLIB_EXTRACT_FLAG_NORPFIX))
2403                 return WIMLIB_ERR_INVALID_PARAM;
2404
2405         if ((extract_flags &
2406              (WIMLIB_EXTRACT_FLAG_RESUME |
2407               WIMLIB_EXTRACT_FLAG_FROM_PIPE)) == WIMLIB_EXTRACT_FLAG_RESUME)
2408                 return WIMLIB_ERR_INVALID_PARAM;
2409
2410         if (extract_flags & WIMLIB_EXTRACT_FLAG_NTFS) {
2411 #ifndef WITH_NTFS_3G
2412                 ERROR("wimlib was compiled without support for NTFS-3g, so\n"
2413                       "        we cannot apply a WIM image directly to a NTFS volume.");
2414                 return WIMLIB_ERR_UNSUPPORTED;
2415 #endif
2416         }
2417
2418         if ((extract_flags & (WIMLIB_EXTRACT_FLAG_RPFIX |
2419                               WIMLIB_EXTRACT_FLAG_NORPFIX)) == 0)
2420         {
2421                 /* Do reparse point fixups by default if the WIM header says
2422                  * they are enabled and we are extracting a full image. */
2423                 if (wim_header_flags & WIM_HDR_FLAG_RP_FIX)
2424                         extract_flags |= WIMLIB_EXTRACT_FLAG_RPFIX;
2425         }
2426
2427         /* TODO: Since UNIX data entries are stored in the file resources, in a
2428          * completely sequential extraction they may come up before the
2429          * corresponding file or symbolic link data.  This needs to be handled
2430          * better.  */
2431         if ((extract_flags & (WIMLIB_EXTRACT_FLAG_UNIX_DATA |
2432                               WIMLIB_EXTRACT_FLAG_SEQUENTIAL))
2433                                     == (WIMLIB_EXTRACT_FLAG_UNIX_DATA |
2434                                         WIMLIB_EXTRACT_FLAG_SEQUENTIAL))
2435         {
2436                 if (extract_flags & WIMLIB_EXTRACT_FLAG_FROM_PIPE) {
2437                         WARNING("Setting UNIX file/owner group may "
2438                                 "be impossible on some\n"
2439                                 "          symbolic links "
2440                                 "when applying from a pipe.");
2441                 } else {
2442                         extract_flags &= ~WIMLIB_EXTRACT_FLAG_SEQUENTIAL;
2443                         WARNING("Disabling sequential extraction for "
2444                                 "UNIX data mode");
2445                 }
2446         }
2447
2448         cmd->extract_flags = extract_flags;
2449         return 0;
2450 }
2451
2452
2453 /* Internal function to execute extraction commands for a WIM image.  The paths
2454  * in the extract commands are expected to be already "canonicalized".  */
2455 static int
2456 do_wimlib_extract_files(WIMStruct *wim,
2457                         int image,
2458                         struct wimlib_extract_command *cmds,
2459                         size_t num_cmds,
2460                         wimlib_progress_func_t progress_func)
2461 {
2462         int ret;
2463         bool found_link_cmd = false;
2464         bool found_nolink_cmd = false;
2465
2466         /* Select the image from which we are extracting files */
2467         ret = select_wim_image(wim, image);
2468         if (ret)
2469                 return ret;
2470
2471         /* Make sure there are no streams in the WIM that have not been
2472          * checksummed yet.  */
2473         ret = wim_checksum_unhashed_streams(wim);
2474         if (ret)
2475                 return ret;
2476
2477         /* Check for problems with the extraction commands */
2478         for (size_t i = 0; i < num_cmds; i++) {
2479                 ret = check_extract_command(&cmds[i], wim->hdr.flags);
2480                 if (ret)
2481                         return ret;
2482                 if (cmds[i].extract_flags & (WIMLIB_EXTRACT_FLAG_SYMLINK |
2483                                              WIMLIB_EXTRACT_FLAG_HARDLINK)) {
2484                         found_link_cmd = true;
2485                 } else {
2486                         found_nolink_cmd = true;
2487                 }
2488                 if (found_link_cmd && found_nolink_cmd) {
2489                         ERROR("Symlink or hardlink extraction mode must "
2490                               "be set on all extraction commands");
2491                         return WIMLIB_ERR_INVALID_PARAM;
2492                 }
2493         }
2494
2495         /* Execute the extraction commands */
2496         for (size_t i = 0; i < num_cmds; i++) {
2497                 ret = extract_tree(wim,
2498                                    cmds[i].wim_source_path,
2499                                    cmds[i].fs_dest_path,
2500                                    cmds[i].extract_flags,
2501                                    progress_func);
2502                 if (ret)
2503                         return ret;
2504         }
2505         return 0;
2506 }
2507
2508 /* API function documented in wimlib.h  */
2509 WIMLIBAPI int
2510 wimlib_extract_files(WIMStruct *wim,
2511                      int image,
2512                      const struct wimlib_extract_command *cmds,
2513                      size_t num_cmds,
2514                      int default_extract_flags,
2515                      WIMStruct **additional_swms,
2516                      unsigned num_additional_swms,
2517                      wimlib_progress_func_t progress_func)
2518 {
2519         int ret;
2520         struct wimlib_extract_command *cmds_copy;
2521         int all_flags = 0;
2522
2523         default_extract_flags &= WIMLIB_EXTRACT_MASK_PUBLIC;
2524
2525         ret = verify_swm_set(wim, additional_swms, num_additional_swms);
2526         if (ret)
2527                 goto out;
2528
2529         if (num_cmds == 0)
2530                 goto out;
2531
2532         if (num_additional_swms)
2533                 merge_lookup_tables(wim, additional_swms, num_additional_swms);
2534
2535         cmds_copy = CALLOC(num_cmds, sizeof(cmds[0]));
2536         if (!cmds_copy) {
2537                 ret = WIMLIB_ERR_NOMEM;
2538                 goto out_restore_lookup_table;
2539         }
2540
2541         for (size_t i = 0; i < num_cmds; i++) {
2542                 cmds_copy[i].extract_flags = (default_extract_flags |
2543                                                  cmds[i].extract_flags)
2544                                                 & WIMLIB_EXTRACT_MASK_PUBLIC;
2545                 all_flags |= cmds_copy[i].extract_flags;
2546
2547                 cmds_copy[i].wim_source_path = canonicalize_wim_path(cmds[i].wim_source_path);
2548                 if (!cmds_copy[i].wim_source_path) {
2549                         ret = WIMLIB_ERR_NOMEM;
2550                         goto out_free_cmds_copy;
2551                 }
2552
2553                 cmds_copy[i].fs_dest_path = canonicalize_fs_path(cmds[i].fs_dest_path);
2554                 if (!cmds_copy[i].fs_dest_path) {
2555                         ret = WIMLIB_ERR_NOMEM;
2556                         goto out_free_cmds_copy;
2557                 }
2558
2559         }
2560         ret = do_wimlib_extract_files(wim, image,
2561                                       cmds_copy, num_cmds,
2562                                       progress_func);
2563
2564         if (all_flags & (WIMLIB_EXTRACT_FLAG_SYMLINK |
2565                          WIMLIB_EXTRACT_FLAG_HARDLINK))
2566         {
2567                 for_lookup_table_entry(wim->lookup_table,
2568                                        lte_free_extracted_file, NULL);
2569         }
2570 out_free_cmds_copy:
2571         for (size_t i = 0; i < num_cmds; i++) {
2572                 FREE(cmds_copy[i].wim_source_path);
2573                 FREE(cmds_copy[i].fs_dest_path);
2574         }
2575         FREE(cmds_copy);
2576 out_restore_lookup_table:
2577         if (num_additional_swms)
2578                 unmerge_lookup_table(wim);
2579 out:
2580         return ret;
2581 }
2582
2583 /*
2584  * Extracts an image from a WIM file.
2585  *
2586  * @wim:                WIMStruct for the WIM file.
2587  *
2588  * @image:              Number of the single image to extract.
2589  *
2590  * @target:             Directory or NTFS volume to extract the image to.
2591  *
2592  * @extract_flags:      Bitwise or of WIMLIB_EXTRACT_FLAG_*.
2593  *
2594  * @progress_func:      If non-NULL, a progress function to be called
2595  *                      periodically.
2596  *
2597  * Returns 0 on success; nonzero on failure.
2598  */
2599 static int
2600 extract_single_image(WIMStruct *wim, int image,
2601                      const tchar *target, int extract_flags,
2602                      wimlib_progress_func_t progress_func)
2603 {
2604         int ret;
2605         tchar *target_copy = canonicalize_fs_path(target);
2606         if (!target_copy)
2607                 return WIMLIB_ERR_NOMEM;
2608         struct wimlib_extract_command cmd = {
2609                 .wim_source_path = T(""),
2610                 .fs_dest_path = target_copy,
2611                 .extract_flags = extract_flags,
2612         };
2613         ret = do_wimlib_extract_files(wim, image, &cmd, 1, progress_func);
2614         FREE(target_copy);
2615         return ret;
2616 }
2617
2618 static const tchar * const filename_forbidden_chars =
2619 T(
2620 #ifdef __WIN32__
2621 "<>:\"/\\|?*"
2622 #else
2623 "/"
2624 #endif
2625 );
2626
2627 /* This function checks if it is okay to use a WIM image's name as a directory
2628  * name.  */
2629 static bool
2630 image_name_ok_as_dir(const tchar *image_name)
2631 {
2632         return image_name && *image_name &&
2633                 !tstrpbrk(image_name, filename_forbidden_chars) &&
2634                 tstrcmp(image_name, T(".")) &&
2635                 tstrcmp(image_name, T(".."));
2636 }
2637
2638 /* Extracts all images from the WIM to the directory @target, with the images
2639  * placed in subdirectories named by their image names. */
2640 static int
2641 extract_all_images(WIMStruct *wim,
2642                    const tchar *target,
2643                    int extract_flags,
2644                    wimlib_progress_func_t progress_func)
2645 {
2646         size_t image_name_max_len = max(xml_get_max_image_name_len(wim), 20);
2647         size_t output_path_len = tstrlen(target);
2648         tchar buf[output_path_len + 1 + image_name_max_len + 1];
2649         int ret;
2650         int image;
2651         const tchar *image_name;
2652         struct stat stbuf;
2653
2654         extract_flags |= WIMLIB_EXTRACT_FLAG_MULTI_IMAGE;
2655
2656         if (extract_flags & WIMLIB_EXTRACT_FLAG_NTFS) {
2657                 ERROR("Cannot extract multiple images in NTFS extraction mode.");
2658                 return WIMLIB_ERR_INVALID_PARAM;
2659         }
2660
2661         if (tstat(target, &stbuf)) {
2662                 if (errno == ENOENT) {
2663                         if (tmkdir(target, 0755)) {
2664                                 ERROR_WITH_ERRNO("Failed to create directory \"%"TS"\"", target);
2665                                 return WIMLIB_ERR_MKDIR;
2666                         }
2667                 } else {
2668                         ERROR_WITH_ERRNO("Failed to stat \"%"TS"\"", target);
2669                         return WIMLIB_ERR_STAT;
2670                 }
2671         } else if (!S_ISDIR(stbuf.st_mode)) {
2672                 ERROR("\"%"TS"\" is not a directory", target);
2673                 return WIMLIB_ERR_NOTDIR;
2674         }
2675
2676         tmemcpy(buf, target, output_path_len);
2677         buf[output_path_len] = OS_PREFERRED_PATH_SEPARATOR;
2678         for (image = 1; image <= wim->hdr.image_count; image++) {
2679                 image_name = wimlib_get_image_name(wim, image);
2680                 if (image_name_ok_as_dir(image_name)) {
2681                         tstrcpy(buf + output_path_len + 1, image_name);
2682                 } else {
2683                         /* Image name is empty or contains forbidden characters.
2684                          * Use image number instead. */
2685                         tsprintf(buf + output_path_len + 1, T("%d"), image);
2686                 }
2687                 ret = extract_single_image(wim, image, buf, extract_flags,
2688                                            progress_func);
2689                 if (ret)
2690                         return ret;
2691         }
2692         return 0;
2693 }
2694
2695 static int
2696 do_wimlib_extract_image(WIMStruct *wim,
2697                         int image,
2698                         const tchar *target,
2699                         int extract_flags,
2700                         WIMStruct **additional_swms,
2701                         unsigned num_additional_swms,
2702                         wimlib_progress_func_t progress_func)
2703 {
2704         int ret;
2705
2706         if (extract_flags & WIMLIB_EXTRACT_FLAG_FROM_PIPE) {
2707                 wimlib_assert(wim->hdr.part_number == 1);
2708                 wimlib_assert(num_additional_swms == 0);
2709         } else {
2710                 ret = verify_swm_set(wim, additional_swms, num_additional_swms);
2711                 if (ret)
2712                         return ret;
2713
2714                 if (num_additional_swms)
2715                         merge_lookup_tables(wim, additional_swms, num_additional_swms);
2716         }
2717
2718         if (image == WIMLIB_ALL_IMAGES) {
2719                 ret = extract_all_images(wim, target, extract_flags,
2720                                          progress_func);
2721         } else {
2722                 ret = extract_single_image(wim, image, target, extract_flags,
2723                                            progress_func);
2724         }
2725
2726         if (extract_flags & (WIMLIB_EXTRACT_FLAG_SYMLINK |
2727                              WIMLIB_EXTRACT_FLAG_HARDLINK))
2728         {
2729                 for_lookup_table_entry(wim->lookup_table,
2730                                        lte_free_extracted_file,
2731                                        NULL);
2732         }
2733         if (num_additional_swms)
2734                 unmerge_lookup_table(wim);
2735         return ret;
2736 }
2737
2738 /* API function documented in wimlib.h  */
2739 WIMLIBAPI int
2740 wimlib_extract_image_from_pipe(int pipe_fd, const tchar *image_num_or_name,
2741                                const tchar *target, int extract_flags,
2742                                wimlib_progress_func_t progress_func)
2743 {
2744         int ret;
2745         WIMStruct *pwm;
2746         struct filedes *in_fd;
2747         int image;
2748         unsigned i;
2749
2750         extract_flags &= WIMLIB_EXTRACT_MASK_PUBLIC;
2751
2752         if (extract_flags & WIMLIB_EXTRACT_FLAG_TO_STDOUT)
2753                 return WIMLIB_ERR_INVALID_PARAM;
2754
2755         extract_flags |= WIMLIB_EXTRACT_FLAG_SEQUENTIAL;
2756
2757         /* Read the WIM header from the pipe and get a WIMStruct to represent
2758          * the pipable WIM.  Caveats:  Unlike getting a WIMStruct with
2759          * wimlib_open_wim(), getting a WIMStruct in this way will result in
2760          * an empty lookup table, no XML data read, and no filename set.  */
2761         ret = open_wim_as_WIMStruct(&pipe_fd,
2762                                     WIMLIB_OPEN_FLAG_FROM_PIPE |
2763                                                 WIMLIB_OPEN_FLAG_SPLIT_OK,
2764                                     &pwm, progress_func);
2765         if (ret)
2766                 return ret;
2767
2768         /* Sanity check to make sure this is a pipable WIM.  */
2769         if (pwm->hdr.magic != PWM_MAGIC) {
2770                 ERROR("The WIM being read from file descriptor %d "
2771                       "is not pipable!", pipe_fd);
2772                 ret = WIMLIB_ERR_NOT_PIPABLE;
2773                 goto out_wimlib_free;
2774         }
2775
2776         /* Sanity check to make sure the first part of a pipable split WIM is
2777          * sent over the pipe first.  */
2778         if (pwm->hdr.part_number != 1) {
2779                 ERROR("The first part of the split WIM must be "
2780                       "sent over the pipe first.");
2781                 ret = WIMLIB_ERR_INVALID_PIPABLE_WIM;
2782                 goto out_wimlib_free;
2783         }
2784
2785         in_fd = &pwm->in_fd;
2786         wimlib_assert(in_fd->offset == WIM_HEADER_DISK_SIZE);
2787
2788         /* As mentioned, the WIMStruct we created from the pipe does not have
2789          * XML data yet.  Fix this by reading the extra copy of the XML data
2790          * that directly follows the header in pipable WIMs.  (Note: see
2791          * write_pipable_wim() for more details about the format of pipable
2792          * WIMs.)  */
2793         {
2794                 struct wim_lookup_table_entry xml_lte;
2795                 ret = read_pwm_stream_header(pwm, &xml_lte, 0, NULL);
2796                 if (ret)
2797                         goto out_wimlib_free;
2798
2799                 if (!(xml_lte.resource_entry.flags & WIM_RESHDR_FLAG_METADATA))
2800                 {
2801                         ERROR("Expected XML data, but found non-metadata "
2802                               "stream.");
2803                         ret = WIMLIB_ERR_INVALID_PIPABLE_WIM;
2804                         goto out_wimlib_free;
2805                 }
2806
2807                 copy_resource_entry(&pwm->hdr.xml_res_entry,
2808                                     &xml_lte.resource_entry);
2809
2810                 ret = read_wim_xml_data(pwm);
2811                 if (ret)
2812                         goto out_wimlib_free;
2813                 if (wim_info_get_num_images(pwm->wim_info) != pwm->hdr.image_count) {
2814                         ERROR("Image count in XML data is not the same as in WIM header.");
2815                         ret = WIMLIB_ERR_XML;
2816                         goto out_wimlib_free;
2817                 }
2818         }
2819
2820         /* Get image index (this may use the XML data that was just read to
2821          * resolve an image name).  */
2822         if (image_num_or_name) {
2823                 image = wimlib_resolve_image(pwm, image_num_or_name);
2824                 if (image == WIMLIB_NO_IMAGE) {
2825                         ERROR("\"%"TS"\" is not a valid image in the pipable WIM!",
2826                               image_num_or_name);
2827                         ret = WIMLIB_ERR_INVALID_IMAGE;
2828                         goto out_wimlib_free;
2829                 } else if (image == WIMLIB_ALL_IMAGES) {
2830                         ERROR("Applying all images from a pipe is not supported.");
2831                         ret = WIMLIB_ERR_INVALID_IMAGE;
2832                         goto out_wimlib_free;
2833                 }
2834         } else {
2835                 if (pwm->hdr.image_count != 1) {
2836                         ERROR("No image was specified, but the pipable WIM "
2837                               "did not contain exactly 1 image");
2838                         ret = WIMLIB_ERR_INVALID_IMAGE;
2839                         goto out_wimlib_free;
2840                 }
2841                 image = 1;
2842         }
2843
2844         /* Load the needed metadata resource.  */
2845         for (i = 1; i <= pwm->hdr.image_count; i++) {
2846                 struct wim_lookup_table_entry *metadata_lte;
2847                 struct wim_image_metadata *imd;
2848
2849                 metadata_lte = new_lookup_table_entry();
2850                 if (!metadata_lte) {
2851                         ret = WIMLIB_ERR_NOMEM;
2852                         goto out_wimlib_free;
2853                 }
2854
2855                 ret = read_pwm_stream_header(pwm, metadata_lte, 0, NULL);
2856                 imd = pwm->image_metadata[i - 1];
2857                 imd->metadata_lte = metadata_lte;
2858                 if (ret)
2859                         goto out_wimlib_free;
2860
2861                 if (!(metadata_lte->resource_entry.flags &
2862                       WIM_RESHDR_FLAG_METADATA))
2863                 {
2864                         ERROR("Expected metadata resource, but found "
2865                               "non-metadata stream.");
2866                         ret = WIMLIB_ERR_INVALID_PIPABLE_WIM;
2867                         goto out_wimlib_free;
2868                 }
2869
2870                 if (i == image) {
2871                         /* Metadata resource is for the images being extracted.
2872                          * Parse it and save the metadata in memory.  */
2873                         ret = read_metadata_resource(pwm, imd);
2874                         if (ret)
2875                                 goto out_wimlib_free;
2876                         imd->modified = 1;
2877                 } else {
2878                         /* Metadata resource is not for the image being
2879                          * extracted.  Skip over it.  */
2880                         ret = skip_pwm_stream(metadata_lte);
2881                         if (ret)
2882                                 goto out_wimlib_free;
2883                 }
2884         }
2885         /* Extract the image.  */
2886         extract_flags |= WIMLIB_EXTRACT_FLAG_FROM_PIPE;
2887         ret = do_wimlib_extract_image(pwm, image, target,
2888                                       extract_flags, NULL, 0, progress_func);
2889         /* Clean up and return.  */
2890 out_wimlib_free:
2891         wimlib_free(pwm);
2892         return ret;
2893 }
2894
2895 /* API function documented in wimlib.h  */
2896 WIMLIBAPI int
2897 wimlib_extract_image(WIMStruct *wim,
2898                      int image,
2899                      const tchar *target,
2900                      int extract_flags,
2901                      WIMStruct **additional_swms,
2902                      unsigned num_additional_swms,
2903                      wimlib_progress_func_t progress_func)
2904 {
2905         extract_flags &= WIMLIB_EXTRACT_MASK_PUBLIC;
2906         return do_wimlib_extract_image(wim, image, target, extract_flags,
2907                                        additional_swms, num_additional_swms,
2908                                        progress_func);
2909 }