More tweaks for Actions.
[rsync.git] / flist.c
diff --git a/flist.c b/flist.c
index 7d01c9c50482ffea9ea552a6fa5b57e77ed596f7..464d556ec906a572d2c378ac79e6d0fa169dd003 100644 (file)
--- a/flist.c
+++ b/flist.c
@@ -4,7 +4,7 @@
  * Copyright (C) 1996 Andrew Tridgell
  * Copyright (C) 1996 Paul Mackerras
  * Copyright (C) 2001, 2002 Martin Pool <mbp@samba.org>
- * Copyright (C) 2002-2009 Wayne Davison
+ * Copyright (C) 2002-2023 Wayne Davison
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
@@ -36,13 +36,14 @@ extern int always_checksum;
 extern int module_id;
 extern int ignore_errors;
 extern int numeric_ids;
+extern int quiet;
 extern int recurse;
 extern int use_qsort;
 extern int xfer_dirs;
 extern int filesfrom_fd;
 extern int one_file_system;
+extern int copy_devices;
 extern int copy_dirlinks;
-extern int keep_dirlinks;
 extern int preserve_uid;
 extern int preserve_gid;
 extern int preserve_acls;
@@ -51,13 +52,13 @@ extern int preserve_links;
 extern int preserve_hard_links;
 extern int preserve_devices;
 extern int preserve_specials;
-extern int delete_missing_args;
-extern int uid_ndx;
-extern int gid_ndx;
+extern int delete_during;
+extern int missing_args;
 extern int eol_nulls;
+extern int atimes_ndx;
+extern int crtimes_ndx;
 extern int relative_paths;
 extern int implied_dirs;
-extern int file_extra_cnt;
 extern int ignore_perishable;
 extern int non_perishable_cnt;
 extern int prune_empty_dirs;
@@ -66,21 +67,25 @@ extern int copy_unsafe_links;
 extern int protocol_version;
 extern int sanitize_paths;
 extern int munge_symlinks;
+extern int use_safe_inc_flist;
 extern int need_unsorted_flist;
 extern int sender_symlink_iconv;
 extern int output_needs_newline;
 extern int sender_keeps_checksum;
+extern int trust_sender_filter;
 extern int unsort_ndx;
+extern uid_t our_uid;
 extern struct stats stats;
 extern char *filesfrom_host;
 extern char *usermap, *groupmap;
 
+extern struct name_num_item *file_sum_nni;
+
 extern char curr_dir[MAXPATHLEN];
 
 extern struct chmod_mode_struct *chmod_modes;
 
-extern struct filter_list_struct filter_list;
-extern struct filter_list_struct daemon_filter_list;
+extern filter_rule_list filter_list, implied_filter_list, daemon_filter_list;
 
 #ifdef ICONV_OPTION
 extern int filesfrom_convert;
@@ -90,18 +95,21 @@ extern iconv_t ic_send, ic_recv;
 #define PTR_SIZE (sizeof (struct file_struct *))
 
 int io_error;
-int checksum_len;
+int flist_csum_len;
 dev_t filesystem_dev; /* used to implement -x */
 
 struct file_list *cur_flist, *first_flist, *dir_flist;
 int send_dir_ndx = -1, send_dir_depth = -1;
 int flist_cnt = 0; /* how many (non-tmp) file list objects exist */
 int file_total = 0; /* total of all active items over all file-lists */
+int file_old_total = 0; /* total of active items that will soon be gone */
 int flist_eof = 0; /* all the file-lists are now known */
+int xfer_flags_as_varint = 0;
 
 #define NORMAL_NAME 0
 #define SLASH_ENDING_NAME 1
 #define DOTDIR_NAME 2
+#define MISSING_NAME 3
 
 /* Starting from protocol version 26, we always use 64-bit ino_t and dev_t
  * internally, even if this platform does not allow files to have 64-bit inums.
@@ -120,13 +128,15 @@ int flist_eof = 0; /* all the file-lists are now known */
  * will survive just long enough to be used by send_file_entry(). */
 static dev_t tmp_rdev;
 #ifdef SUPPORT_HARD_LINKS
-static int64 tmp_dev, tmp_ino;
+static int64 tmp_dev = -1, tmp_ino;
 #endif
 static char tmp_sum[MAX_DIGEST_LEN];
 
 static char empty_sum[MAX_DIGEST_LEN];
 static int flist_count_offset; /* for --delete --progress */
+static int show_filelist_progress;
 
+static struct file_list *flist_new(int flags, const char *msg);
 static void flist_sort_and_clean(struct file_list *flist, int strip_root);
 static void output_flist(struct file_list *flist);
 
@@ -136,18 +146,16 @@ void init_flist(void)
                rprintf(FINFO, "FILE_STRUCT_LEN=%d, EXTRA_LEN=%d\n",
                        (int)FILE_STRUCT_LEN, (int)EXTRA_LEN);
        }
-       checksum_len = protocol_version < 21 ? 2
-                    : protocol_version < 30 ? MD4_DIGEST_LEN
-                    : MD5_DIGEST_LEN;
-}
+       /* Note that this isn't identical to file_sum_len in the case of CSUM_MD4_ARCHAIC: */
+       flist_csum_len = csum_len_for_type(file_sum_nni->num, 1);
 
-static int show_filelist_p(void)
-{
-       return INFO_GTE(FLIST, 1) && xfer_dirs && !am_server && !inc_recurse;
+       show_filelist_progress = INFO_GTE(FLIST, 1) && xfer_dirs && !am_server && !inc_recurse;
 }
 
 static void start_filelist_progress(char *kind)
 {
+       if (quiet)
+               return;
        rprintf(FCLIENT, "%s ... ", kind);
        output_needs_newline = 1;
        rflush(FINFO);
@@ -155,23 +163,28 @@ static void start_filelist_progress(char *kind)
 
 static void emit_filelist_progress(int count)
 {
+       if (quiet)
+               return;
+       if (output_needs_newline == 2) /* avoid a newline in the middle of this filelist-progress output */
+               output_needs_newline = 0;
        rprintf(FCLIENT, " %d files...\r", count);
+       output_needs_newline = 2;
 }
 
 static void maybe_emit_filelist_progress(int count)
 {
-       if (INFO_GTE(FLIST, 2) && show_filelist_p() && (count % 100) == 0)
+       if (INFO_GTE(FLIST, 2) && show_filelist_progress && (count % 100) == 0)
                emit_filelist_progress(count);
 }
 
 static void finish_filelist_progress(const struct file_list *flist)
 {
+       output_needs_newline = 0;
        if (INFO_GTE(FLIST, 2)) {
                /* This overwrites the progress line */
                rprintf(FINFO, "%d file%sto consider\n",
                        flist->used, flist->used == 1 ? " " : "s ");
        } else {
-               output_needs_newline = 0;
                rprintf(FINFO, "done\n");
        }
 }
@@ -195,7 +208,7 @@ static int readlink_stat(const char *path, STRUCT_STAT *stp, char *linkbuf)
        if (link_stat(path, stp, copy_dirlinks) < 0)
                return -1;
        if (S_ISLNK(stp->st_mode)) {
-               int llen = readlink(path, linkbuf, MAXPATHLEN - 1);
+               int llen = do_readlink(path, linkbuf, MAXPATHLEN - 1);
                if (llen < 0)
                        return -1;
                linkbuf[llen] = '\0';
@@ -236,16 +249,6 @@ int link_stat(const char *path, STRUCT_STAT *stp, int follow_dirlinks)
 #endif
 }
 
-static inline int is_daemon_excluded(const char *fname, int is_dir)
-{
-       if (daemon_filter_list.head
-        && check_filter(&daemon_filter_list, FLOG, fname, is_dir) < 0) {
-               errno = ENOENT;
-               return 1;
-       }
-       return 0;
-}
-
 static inline int path_is_daemon_excluded(char *path, int ignore_filename)
 {
        if (daemon_filter_list.head) {
@@ -272,23 +275,9 @@ static inline int path_is_daemon_excluded(char *path, int ignore_filename)
        return 0;
 }
 
-/* This function is used to check if a file should be included/excluded
- * from the list of files based on its name and type etc.  The value of
- * filter_level is set to either SERVER_FILTERS or ALL_FILTERS. */
-static int is_excluded(const char *fname, int is_dir, int filter_level)
+static inline int is_excluded(const char *fname, int is_dir, int filter_level)
 {
-#if 0 /* This currently never happens, so avoid a useless compare. */
-       if (filter_level == NO_FILTERS)
-               return 0;
-#endif
-       if (is_daemon_excluded(fname, is_dir))
-               return 1;
-       if (filter_level != ALL_FILTERS)
-               return 0;
-       if (filter_list.head
-           && check_filter(&filter_list, FINFO, fname, is_dir) < 0)
-               return 1;
-       return 0;
+       return name_is_excluded(fname, is_dir ? NAME_IS_DIR : NAME_IS_FILE, filter_level);
 }
 
 static void send_directory(int f, struct file_list *flist,
@@ -309,6 +298,8 @@ static void flist_expand(struct file_list *flist, int extra)
                flist->malloced = FLIST_START;
        else if (flist->malloced >= FLIST_LINEAR)
                flist->malloced += FLIST_LINEAR;
+       else if (flist->malloced < FLIST_START_LARGE/16)
+               flist->malloced *= 4;
        else
                flist->malloced *= 2;
 
@@ -317,10 +308,9 @@ static void flist_expand(struct file_list *flist, int extra)
        if (flist->malloced < flist->used + extra)
                flist->malloced = flist->used + extra;
 
-       new_ptr = realloc_array(flist->files, struct file_struct *,
-                               flist->malloced);
+       new_ptr = realloc_array(flist->files, struct file_struct *, flist->malloced);
 
-       if (DEBUG_GTE(FLIST, 1) && flist->malloced != FLIST_START) {
+       if (DEBUG_GTE(FLIST, 1) && flist->files) {
                rprintf(FCLIENT, "[%s] expand file_list pointer array to %s bytes, did%s move\n",
                    who_am_i(),
                    big_num(sizeof flist->files[0] * flist->malloced),
@@ -328,9 +318,6 @@ static void flist_expand(struct file_list *flist, int extra)
        }
 
        flist->files = new_ptr;
-
-       if (!flist->files)
-               out_of_memory("flist_expand");
 }
 
 static void flist_done_allocating(struct file_list *flist)
@@ -396,7 +383,10 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
 #endif
                            int ndx, int first_ndx)
 {
-       static time_t modtime;
+       static time_t modtime, atime;
+#ifdef SUPPORT_CRTIMES
+       static time_t crtime;
+#endif
        static mode_t mode;
 #ifdef SUPPORT_HARD_LINKS
        static int64 dev;
@@ -442,8 +432,7 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
        else
                mode = file->mode;
 
-       if ((preserve_devices && IS_DEVICE(mode))
-        || (preserve_specials && IS_SPECIAL(mode))) {
+       if (preserve_devices && IS_DEVICE(mode)) {
                if (protocol_version < 28) {
                        if (tmp_rdev == rdev)
                                xflags |= XMIT_SAME_RDEV_pre28;
@@ -458,6 +447,17 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                        if (protocol_version < 30 && (uint32)minor(rdev) <= 0xFFu)
                                xflags |= XMIT_RDEV_MINOR_8_pre30;
                }
+       } else if (preserve_specials && IS_SPECIAL(mode) && protocol_version < 31) {
+               /* Special files don't need an rdev number, so just make
+                * the historical transmission of the value efficient. */
+               if (protocol_version < 28)
+                       xflags |= XMIT_SAME_RDEV_pre28;
+               else {
+                       rdev = MAKEDEV(rdev_major, 0);
+                       xflags |= XMIT_SAME_RDEV_MAJOR;
+                       if (protocol_version < 30)
+                               xflags |= XMIT_RDEV_MINOR_8_pre30;
+               }
        } else if (protocol_version < 28)
                rdev = MAKEDEV(0, 0);
        if (!preserve_uid || ((uid_t)F_OWNER(file) == uid && *lastname))
@@ -484,14 +484,29 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                xflags |= XMIT_SAME_TIME;
        else
                modtime = file->modtime;
+       if (NSEC_BUMP(file) && protocol_version >= 31)
+               xflags |= XMIT_MOD_NSEC;
+       if (atimes_ndx && !S_ISDIR(mode)) {
+               if (F_ATIME(file) == atime)
+                       xflags |= XMIT_SAME_ATIME;
+               else
+                       atime = F_ATIME(file);
+       }
+#ifdef SUPPORT_CRTIMES
+       if (crtimes_ndx) {
+               crtime = F_CRTIME(file);
+               if (crtime == modtime)
+                       xflags |= XMIT_CRTIME_EQ_MTIME;
+       }
+#endif
 
 #ifdef SUPPORT_HARD_LINKS
-       if (tmp_dev != 0) {
+       if (tmp_dev != -1) {
                if (protocol_version >= 30) {
                        struct ht_int64_node *np = idev_find(tmp_dev, tmp_ino);
-                       first_hlink_ndx = (int32)(long)np->data - 1;
+                       first_hlink_ndx = (int32)(long)np->data; /* is -1 when new */
                        if (first_hlink_ndx < 0) {
-                               np->data = (void*)(long)(first_ndx + ndx + 1);
+                               np->data = (void*)(long)(first_ndx + ndx);
                                xflags |= XMIT_HLINK_FIRST;
                        }
                        if (DEBUG_GTE(HLINK, 1)) {
@@ -526,11 +541,14 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
        if (l2 > 255)
                xflags |= XMIT_LONG_NAME;
 
-       /* We must make sure we don't send a zero flag byte or the
-        * other end will terminate the flist transfer.  Note that
-        * the use of XMIT_TOP_DIR on a non-dir has no meaning, so
-        * it's harmless way to add a bit to the first flag byte. */
-       if (protocol_version >= 28) {
+       /* We must avoid sending a flag value of 0 (or an initial byte of
+        * 0 for the older xflags protocol) or it will signal the end of
+        * the list.  Note that the use of XMIT_TOP_DIR on a non-dir has
+        * no meaning, so it's a harmless way to add a bit to the first
+        * flag byte. */
+       if (xfer_flags_as_varint)
+               write_varint(f, xflags ? xflags : XMIT_EXTENDED_FLAGS);
+       else if (protocol_version >= 28) {
                if (!xflags && !S_ISDIR(mode))
                        xflags |= XMIT_TOP_DIR;
                if ((xflags & 0xFF00) || !xflags) {
@@ -566,8 +584,16 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                else
                        write_int(f, modtime);
        }
+       if (xflags & XMIT_MOD_NSEC)
+               write_varint(f, F_MOD_NSEC(file));
+#ifdef SUPPORT_CRTIMES
+       if (crtimes_ndx && !(xflags & XMIT_CRTIME_EQ_MTIME))
+               write_varlong(f, crtime, 4);
+#endif
        if (!(xflags & XMIT_SAME_MODE))
                write_int(f, to_wire_mode(mode));
+       if (atimes_ndx && !S_ISDIR(mode) && !(xflags & XMIT_SAME_ATIME))
+               write_varlong(f, atime, 4);
        if (preserve_uid && !(xflags & XMIT_SAME_UID)) {
                if (protocol_version < 30)
                        write_int(f, uid);
@@ -593,7 +619,7 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                }
        }
        if ((preserve_devices && IS_DEVICE(mode))
-        || (preserve_specials && IS_SPECIAL(mode))) {
+        || (preserve_specials && IS_SPECIAL(mode) && protocol_version < 31)) {
                if (protocol_version < 28) {
                        if (!(xflags & XMIT_SAME_RDEV_pre28))
                                write_int(f, (int)rdev);
@@ -617,15 +643,17 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
 #endif
 
 #ifdef SUPPORT_HARD_LINKS
-       if (tmp_dev != 0 && protocol_version < 30) {
+       if (tmp_dev != -1 && protocol_version < 30) {
+               /* Older protocols expect the dev number to be transmitted
+                * 1-incremented so that it is never zero. */
                if (protocol_version < 26) {
                        /* 32-bit dev_t and ino_t */
-                       write_int(f, (int32)dev);
+                       write_int(f, (int32)(dev+1));
                        write_int(f, (int32)tmp_ino);
                } else {
                        /* 64-bit dev_t and ino_t */
                        if (!(xflags & XMIT_SAME_DEV_pre30))
-                               write_longint(f, dev);
+                               write_longint(f, dev+1);
                        write_longint(f, tmp_ino);
                }
        }
@@ -639,7 +667,7 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                        /* Prior to 28, we sent a useless set of nulls. */
                        sum = empty_sum;
                }
-               write_buf(f, sum, checksum_len);
+               write_buf(f, sum, flist_csum_len);
        }
 
 #ifdef SUPPORT_HARD_LINKS
@@ -651,10 +679,12 @@ static void send_file_entry(int f, const char *fname, struct file_struct *file,
                stats.total_size += F_LENGTH(file);
 }
 
-static struct file_struct *recv_file_entry(struct file_list *flist,
-                                          int xflags, int f)
+static struct file_struct *recv_file_entry(int f, struct file_list *flist, int xflags)
 {
-       static int64 modtime;
+       static int64 modtime, atime;
+#ifdef SUPPORT_CRTIMES
+       static time_t crtime;
+#endif
        static mode_t mode;
 #ifdef SUPPORT_HARD_LINKS
        static int64 dev;
@@ -673,7 +703,11 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
        int alloc_len, basename_len, linkname_len;
        int extra_len = file_extra_cnt * EXTRA_LEN;
        int first_hlink_ndx = -1;
+       char real_ISREG_entry;
        int64 file_length;
+#ifdef CAN_SET_NSEC
+       uint32 modtime_nsec;
+#endif
        const char *basename;
        struct file_struct *file;
        alloc_pool_t *pool;
@@ -708,7 +742,7 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                INIT_CONST_XBUF(outbuf, thisname);
                INIT_XBUF(inbuf, lastname, basename_len, (size_t)-1);
 
-               if (iconvbufs(ic_recv, &inbuf, &outbuf, 0) < 0) {
+               if (iconvbufs(ic_recv, &inbuf, &outbuf, ICB_INIT) < 0) {
                        io_error |= IOERR_GENERAL;
                        rprintf(FERROR_UTF8,
                            "[%s] cannot convert filename: %s (%s)\n",
@@ -719,8 +753,11 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
        }
 #endif
 
-       if (*thisname)
-               clean_fname(thisname, 0);
+       if (*thisname
+        && (clean_fname(thisname, CFN_REFUSE_DOT_DOT_DIRS) < 0 || (!relative_paths && *thisname == '/'))) {
+               rprintf(FERROR, "ABORTING due to unsafe pathname from sender: %s\n", thisname);
+               exit_cleanup(RERR_UNSUPPORTED);
+       }
 
        if (sanitize_paths)
                sanitize_path(thisname, thisname, "", 0, SP_DEFAULT);
@@ -757,21 +794,31 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                        struct file_struct *first = flist->files[first_hlink_ndx - flist->ndx_start];
                        file_length = F_LENGTH(first);
                        modtime = first->modtime;
+#ifdef CAN_SET_NSEC
+                       modtime_nsec = F_MOD_NSEC_or_0(first);
+#endif
                        mode = first->mode;
+                       if (atimes_ndx && !S_ISDIR(mode))
+                               atime = F_ATIME(first);
+#ifdef SUPPORT_CRTIMES
+                       if (crtimes_ndx)
+                               crtime = F_CRTIME(first);
+#endif
                        if (preserve_uid)
                                uid = F_OWNER(first);
                        if (preserve_gid)
                                gid = F_GROUP(first);
-                       if ((preserve_devices && IS_DEVICE(mode))
-                        || (preserve_specials && IS_SPECIAL(mode))) {
+                       if (preserve_devices && IS_DEVICE(mode)) {
                                uint32 *devp = F_RDEV_P(first);
-                               rdev = MAKEDEV(DEV_MAJOR(devp), DEV_MINOR(devp));
+                               rdev_major = DEV_MAJOR(devp);
+                               rdev = MAKEDEV(rdev_major, DEV_MINOR(devp));
                                extra_len += DEV_EXTRA_CNT * EXTRA_LEN;
                        }
                        if (preserve_links && S_ISLNK(mode))
                                linkname_len = strlen(F_SYMLINK(first)) + 1;
                        else
                                linkname_len = 0;
+                       real_ISREG_entry = S_ISREG(mode) ? 1 : 0;
                        goto create_object;
                }
        }
@@ -789,12 +836,45 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                        }
 #endif
                } else
-                       modtime = read_int(f);
+                       modtime = read_uint(f);
        }
+       if (xflags & XMIT_MOD_NSEC)
+#ifndef CAN_SET_NSEC
+               (void)read_varint(f);
+#else
+               modtime_nsec = read_varint(f);
+       else
+               modtime_nsec = 0;
+#endif
+#ifdef SUPPORT_CRTIMES
+       if (crtimes_ndx) {
+               if (xflags & XMIT_CRTIME_EQ_MTIME)
+                       crtime = modtime;
+               else
+                       crtime = read_varlong(f, 4);
+#if SIZEOF_TIME_T < SIZEOF_INT64
+               if (!am_generator && (int64)(time_t)crtime != crtime) {
+                       rprintf(FERROR_XFER,
+                               "Create time value of %s truncated on receiver.\n",
+                               lastname);
+               }
+#endif
+       }
+#endif
        if (!(xflags & XMIT_SAME_MODE))
                mode = from_wire_mode(read_int(f));
+       if (atimes_ndx && !S_ISDIR(mode) && !(xflags & XMIT_SAME_ATIME)) {
+               atime = read_varlong(f, 4);
+#if SIZEOF_TIME_T < SIZEOF_INT64
+               if (!am_generator && (int64)(time_t)atime != atime) {
+                       rprintf(FERROR_XFER,
+                               "Access time value of %s truncated on receiver.\n",
+                               lastname);
+               }
+#endif
+       }
 
-       if (chmod_modes && !S_ISLNK(mode))
+       if (chmod_modes && !S_ISLNK(mode) && mode)
                mode = tweak_mode(mode, chmod_modes);
 
        if (preserve_uid && !(xflags & XMIT_SAME_UID)) {
@@ -822,7 +902,7 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
        }
 
        if ((preserve_devices && IS_DEVICE(mode))
-        || (preserve_specials && IS_SPECIAL(mode))) {
+        || (preserve_specials && IS_SPECIAL(mode) && protocol_version < 31)) {
                if (protocol_version < 28) {
                        if (!(xflags & XMIT_SAME_RDEV_pre28))
                                rdev = (dev_t)read_int(f);
@@ -838,7 +918,8 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                                rdev_minor = read_int(f);
                        rdev = MAKEDEV(rdev_major, rdev_minor);
                }
-               extra_len += DEV_EXTRA_CNT * EXTRA_LEN;
+               if (IS_DEVICE(mode))
+                       extra_len += DEV_EXTRA_CNT * EXTRA_LEN;
                file_length = 0;
        } else if (protocol_version < 28)
                rdev = MAKEDEV(0, 0);
@@ -865,10 +946,20 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
 #endif
                linkname_len = 0;
 
+       if (copy_devices && IS_DEVICE(mode)) {
+               /* This is impossible in the official release, but some pre-release patches
+                * didn't convert the device into a file before sending, so we'll do it here
+                * (even though the length is typically 0 and any checksum data is zeros). */
+               mode = S_IFREG | (mode & ACCESSPERMS);
+               modtime = time(NULL); /* The mtime on the device is not up-to-date, so set it to "now". */
+               real_ISREG_entry = 0;
+       } else
+               real_ISREG_entry = S_ISREG(mode) ? 1 : 0;
+
 #ifdef SUPPORT_HARD_LINKS
   create_object:
        if (preserve_hard_links) {
-               if (protocol_version < 28 && S_ISREG(mode))
+               if (protocol_version < 28 && real_ISREG_entry)
                        xflags |= XMIT_HLINKED;
                if (xflags & XMIT_HLINKED)
                        extra_len += (inc_recurse+1) * EXTRA_LEN;
@@ -887,12 +978,29 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
 #if SIZEOF_INT64 >= 8
        if (file_length > 0xFFFFFFFFu && S_ISREG(mode))
                extra_len += EXTRA_LEN;
+#endif
+#ifdef CAN_SET_NSEC
+       if (modtime_nsec)
+               extra_len += EXTRA_LEN;
 #endif
        if (file_length < 0) {
                rprintf(FERROR, "Offset underflow: file-length is negative\n");
                exit_cleanup(RERR_UNSUPPORTED);
        }
 
+       if (*thisname == '/' ? thisname[1] != '.' || thisname[2] != '\0' : *thisname != '.' || thisname[1] != '\0') {
+               int filt_flags = S_ISDIR(mode) ? NAME_IS_DIR : NAME_IS_FILE;
+               if (!trust_sender_filter /* a per-dir filter rule means we must trust the sender's filtering */
+                && filter_list.head && check_server_filter(&filter_list, FINFO, thisname, filt_flags) < 0) {
+                       rprintf(FERROR, "ERROR: rejecting excluded file-list name: %s\n", thisname);
+                       exit_cleanup(RERR_UNSUPPORTED);
+               }
+               if (implied_filter_list.head && check_filter(&implied_filter_list, FINFO, thisname, filt_flags) <= 0) {
+                       rprintf(FERROR, "ERROR: rejecting unrequested file-list name: %s\n", thisname);
+                       exit_cleanup(RERR_UNSUPPORTED);
+               }
+       }
+
        if (inc_recurse && S_ISDIR(mode)) {
                if (one_file_system) {
                        /* Room to save the dir's device for -x */
@@ -919,10 +1027,23 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
        memcpy(bp, basename, basename_len);
 
 #ifdef SUPPORT_HARD_LINKS
-       if (xflags & XMIT_HLINKED)
+       if (xflags & XMIT_HLINKED
+#ifndef CAN_HARDLINK_SYMLINK
+        && !S_ISLNK(mode)
+#endif
+#ifndef CAN_HARDLINK_SPECIAL
+        && !IS_SPECIAL(mode) && !IS_DEVICE(mode)
+#endif
+       )
                file->flags |= FLAG_HLINKED;
 #endif
        file->modtime = (time_t)modtime;
+#ifdef CAN_SET_NSEC
+       if (modtime_nsec) {
+               file->flags |= FLAG_MOD_NSEC;
+               F_MOD_NSEC(file) = modtime_nsec;
+       }
+#endif
        file->len32 = (uint32)file_length;
 #if SIZEOF_INT64 >= 8
        if (file_length > 0xFFFFFFFFu && S_ISREG(mode)) {
@@ -931,7 +1052,7 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                exit_cleanup(RERR_UNSUPPORTED);
 #else
                file->flags |= FLAG_LENGTH64;
-               OPT_EXTRA(file, 0)->unum = (uint32)(file_length >> 32);
+               F_HIGH_LEN(file) = (uint32)(file_length >> 32);
 #endif
        }
 #endif
@@ -942,6 +1063,12 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                F_GROUP(file) = gid;
                file->flags |= gid_flags;
        }
+       if (atimes_ndx && !S_ISDIR(mode))
+               F_ATIME(file) = atime;
+#ifdef SUPPORT_CRTIMES
+       if (crtimes_ndx)
+               F_CRTIME(file) = crtime;
+#endif
        if (unsort_ndx)
                F_NDX(file) = flist->used + flist->ndx_start;
 
@@ -979,8 +1106,7 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                }
        }
 
-       if ((preserve_devices && IS_DEVICE(mode))
-        || (preserve_specials && IS_SPECIAL(mode))) {
+       if (preserve_devices && IS_DEVICE(mode)) {
                uint32 *devp = F_RDEV_P(file);
                DEV_MAJOR(devp) = major(rdev);
                DEV_MINOR(devp) = minor(rdev);
@@ -1012,7 +1138,7 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                                read_sbuf(f, inbuf.buf, inbuf.len);
                                INIT_XBUF(outbuf, bp, 0, alloc_len);
 
-                               if (iconvbufs(ic_recv, &inbuf, &outbuf, 0) < 0) {
+                               if (iconvbufs(ic_recv, &inbuf, &outbuf, ICB_INIT) < 0) {
                                        io_error |= IOERR_GENERAL;
                                        rprintf(FERROR_XFER,
                                            "[%s] cannot convert symlink data for: %s (%s)\n",
@@ -1052,18 +1178,18 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                                ino = read_longint(f);
                        }
                        np = idev_find(dev, ino);
-                       ndx = (int32)(long)np->data - 1;
+                       ndx = (int32)(long)np->data; /* is -1 when new */
                        if (ndx < 0) {
-                               ndx = cnt++;
                                np->data = (void*)(long)cnt;
+                               ndx = cnt++;
                        }
                        F_HL_GNUM(file) = ndx;
                }
        }
 #endif
 
-       if (always_checksum && (S_ISREG(mode) || protocol_version < 28)) {
-               if (S_ISREG(mode))
+       if (always_checksum && (real_ISREG_entry || protocol_version < 28)) {
+               if (real_ISREG_entry)
                        bp = F_SUM(file);
                else {
                        /* Prior to 28, we get a useless set of nulls. */
@@ -1071,18 +1197,18 @@ static struct file_struct *recv_file_entry(struct file_list *flist,
                }
                if (first_hlink_ndx >= flist->ndx_start) {
                        struct file_struct *first = flist->files[first_hlink_ndx - flist->ndx_start];
-                       memcpy(bp, F_SUM(first), checksum_len);
+                       memcpy(bp, F_SUM(first), flist_csum_len);
                } else
-                       read_buf(f, bp, checksum_len);
+                       read_buf(f, bp, flist_csum_len);
        }
 
 #ifdef SUPPORT_ACLS
        if (preserve_acls && !S_ISLNK(mode))
-               receive_acl(file, f);
+               receive_acl(f, file);
 #endif
 #ifdef SUPPORT_XATTRS
        if (preserve_xattrs)
-               receive_xattr(file, f );
+               receive_xattr(f, file);
 #endif
 
        if (S_ISREG(mode) || S_ISLNK(mode))
@@ -1125,7 +1251,7 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
        if (sanitize_paths)
                sanitize_path(thisname, thisname, "", 0, SP_DEFAULT);
 
-       if (stp && (S_ISDIR(stp->st_mode) || stp->st_mode == 0)) {
+       if (stp && (S_ISDIR(stp->st_mode) || IS_MISSING_FILE(*stp))) {
                /* This is needed to handle a "symlink/." with a --relative
                 * dir, or a request to delete a specific file. */
                st = *stp;
@@ -1169,7 +1295,7 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
                                full_fname(thisname));
                }
                return NULL;
-       } else if (st.st_mode == 0) {
+       } else if (IS_MISSING_FILE(st)) {
                io_error |= IOERR_GENERAL;
                rprintf(FINFO, "skipping file with bogus (zero) st_mode: %s\n",
                        full_fname(thisname));
@@ -1262,13 +1388,29 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
        linkname_len = 0;
 #endif
 
+       if (copy_devices && am_sender && IS_DEVICE(st.st_mode)) {
+               if (st.st_size == 0) {
+                       int fd = do_open(fname, O_RDONLY, 0);
+                       if (fd >= 0) {
+                               st.st_size = get_device_size(fd, fname);
+                               close(fd);
+                       }
+               }
+               st.st_mode = S_IFREG | (st.st_mode & ACCESSPERMS);
+               st.st_mtime = time(NULL); /* The mtime on the device is not up-to-date, so set it to "now". */
+       }
+
+#ifdef ST_MTIME_NSEC
+       if (st.ST_MTIME_NSEC && protocol_version >= 31)
+               extra_len += EXTRA_LEN;
+#endif
 #if SIZEOF_CAPITAL_OFF_T >= 8
        if (st.st_size > 0xFFFFFFFFu && S_ISREG(st.st_mode))
                extra_len += EXTRA_LEN;
 #endif
 
        if (always_checksum && am_sender && S_ISREG(st.st_mode)) {
-               file_checksum(thisname, tmp_sum, st.st_size);
+               file_checksum(thisname, &st, tmp_sum);
                if (sender_keeps_checksum)
                        extra_len += SUM_EXTRA_CNT * EXTRA_LEN;
        }
@@ -1282,10 +1424,8 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
                  + linkname_len;
        if (pool)
                bp = pool_alloc(pool, alloc_len, "make_file");
-       else {
-               if (!(bp = new_array(char, alloc_len)))
-                       out_of_memory("make_file");
-       }
+       else
+               bp = new_array(char, alloc_len);
 
        memset(bp, 0, extra_len + FILE_STRUCT_LEN);
        bp += extra_len;
@@ -1299,34 +1439,49 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
                if (protocol_version >= 28
                 ? (!S_ISDIR(st.st_mode) && st.st_nlink > 1)
                 : S_ISREG(st.st_mode)) {
-                       tmp_dev = (int64)st.st_dev + 1;
+                       tmp_dev = (int64)st.st_dev;
                        tmp_ino = (int64)st.st_ino;
                } else
-                       tmp_dev = 0;
+                       tmp_dev = -1;
        }
 #endif
 
 #ifdef HAVE_STRUCT_STAT_ST_RDEV
-       if (IS_DEVICE(st.st_mode) || IS_SPECIAL(st.st_mode)) {
+       if (IS_DEVICE(st.st_mode)) {
                tmp_rdev = st.st_rdev;
                st.st_size = 0;
-       }
+       } else if (IS_SPECIAL(st.st_mode))
+               st.st_size = 0;
 #endif
 
        file->flags = flags;
        file->modtime = st.st_mtime;
+#ifdef ST_MTIME_NSEC
+       if (st.ST_MTIME_NSEC && protocol_version >= 31) {
+               file->flags |= FLAG_MOD_NSEC;
+               F_MOD_NSEC(file) = st.ST_MTIME_NSEC;
+       }
+#endif
        file->len32 = (uint32)st.st_size;
 #if SIZEOF_CAPITAL_OFF_T >= 8
        if (st.st_size > 0xFFFFFFFFu && S_ISREG(st.st_mode)) {
                file->flags |= FLAG_LENGTH64;
-               OPT_EXTRA(file, 0)->unum = (uint32)(st.st_size >> 32);
+               F_HIGH_LEN(file) = (uint32)(st.st_size >> 32);
        }
 #endif
        file->mode = st.st_mode;
-       if (uid_ndx) /* Check uid_ndx instead of preserve_uid for del support */
+       if (preserve_uid)
                F_OWNER(file) = st.st_uid;
-       if (gid_ndx) /* Check gid_ndx instead of preserve_gid for del support */
+       if (preserve_gid)
                F_GROUP(file) = st.st_gid;
+       if (am_generator && st.st_uid == our_uid)
+               file->flags |= FLAG_OWNED_BY_US;
+       if (atimes_ndx && !S_ISDIR(file->mode))
+               F_ATIME(file) = st.st_atime;
+#ifdef SUPPORT_CRTIMES
+       if (crtimes_ndx)
+               F_CRTIME(file) = get_create_time(fname, &st);
+#endif
 
        if (basename != thisname)
                file->dirname = lastdir;
@@ -1348,7 +1503,7 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
        }
 
        if (sender_keeps_checksum && S_ISREG(st.st_mode))
-               memcpy(F_SUM(file), tmp_sum, checksum_len);
+               memcpy(F_SUM(file), tmp_sum, flist_csum_len);
 
        if (unsort_ndx)
                F_NDX(file) = stats.num_dirs;
@@ -1356,6 +1511,20 @@ struct file_struct *make_file(const char *fname, struct file_list *flist,
        return file;
 }
 
+OFF_T get_device_size(int fd, const char *fname)
+{
+       OFF_T off = lseek(fd, 0, SEEK_END);
+
+       if (off == (OFF_T) -1) {
+               rsyserr(FERROR, errno, "failed to get device size via seek: %s", fname);
+               return 0;
+       }
+       if (lseek(fd, 0, SEEK_SET) != 0)
+               rsyserr(FERROR, errno, "failed to seek device back to start: %s", fname);
+
+       return off;
+}
+
 /* Only called for temporary file_struct entries created by make_file(). */
 void unmake_file(struct file_struct *file)
 {
@@ -1372,7 +1541,7 @@ static struct file_struct *send_file_name(int f, struct file_list *flist,
        if (!file)
                return NULL;
 
-       if (chmod_modes && !S_ISLNK(file->mode))
+       if (chmod_modes && !S_ISLNK(file->mode) && file->mode)
                file->mode = tweak_mode(file->mode, chmod_modes);
 
        if (f >= 0) {
@@ -1416,14 +1585,14 @@ static struct file_struct *send_file_name(int f, struct file_list *flist,
                        if (file->dirname) {
                                INIT_XBUF_STRLEN(inbuf, (char*)file->dirname);
                                outbuf.size -= 2; /* Reserve room for '/' & 1 more char. */
-                               if (iconvbufs(ic_send, &inbuf, &outbuf, 0) < 0)
+                               if (iconvbufs(ic_send, &inbuf, &outbuf, ICB_INIT) < 0)
                                        goto convert_error;
                                outbuf.size += 2;
                                fbuf[outbuf.len++] = '/';
                        }
 
                        INIT_XBUF_STRLEN(inbuf, (char*)file->basename);
-                       if (iconvbufs(ic_send, &inbuf, &outbuf, 0) < 0) {
+                       if (iconvbufs(ic_send, &inbuf, &outbuf, ICB_INIT) < 0) {
                          convert_error:
                                io_error |= IOERR_GENERAL;
                                rprintf(FERROR_XFER,
@@ -1437,7 +1606,7 @@ static struct file_struct *send_file_name(int f, struct file_list *flist,
                        if (symlink_len && sender_symlink_iconv) {
                                INIT_XBUF(inbuf, (char*)symlink_name, symlink_len, (size_t)-1);
                                INIT_CONST_XBUF(outbuf, symlink_buf);
-                               if (iconvbufs(ic_send, &inbuf, &outbuf, 0) < 0) {
+                               if (iconvbufs(ic_send, &inbuf, &outbuf, ICB_INIT) < 0) {
                                        io_error |= IOERR_GENERAL;
                                        f_name(file, fbuf);
                                        rprintf(FERROR_XFER,
@@ -1466,6 +1635,7 @@ static struct file_struct *send_file_name(int f, struct file_list *flist,
 #endif
 #ifdef SUPPORT_XATTRS
                if (preserve_xattrs) {
+                       sx.st.st_mode = file->mode;
                        if (get_xattr(fname, &sx) < 0) {
                                io_error |= IOERR_GENERAL;
                                return NULL;
@@ -1481,13 +1651,13 @@ static struct file_struct *send_file_name(int f, struct file_list *flist,
 
 #ifdef SUPPORT_ACLS
                if (preserve_acls && !S_ISLNK(file->mode)) {
-                       send_acl(&sx, f);
+                       send_acl(f, &sx);
                        free_acl(&sx);
                }
 #endif
 #ifdef SUPPORT_XATTRS
                if (preserve_xattrs) {
-                       F_XATTR(file) = send_xattr(&sx, f);
+                       F_XATTR(file) = send_xattr(f, &sx);
                        free_xattr(&sx);
                }
 #endif
@@ -1514,12 +1684,6 @@ static void send_if_directory(int f, struct file_list *flist,
                unsigned int len = strlen(fbuf);
                if (len > 1 && fbuf[len-1] == '/')
                        fbuf[--len] = '\0';
-               if (len >= MAXPATHLEN - 1) {
-                       io_error |= IOERR_GENERAL;
-                       rprintf(FERROR_XFER, "skipping long-named directory: %s\n",
-                               full_fname(fbuf));
-                       return;
-               }
                save_filters = push_local_filters(fbuf, len);
                send_directory(f, flist, fbuf, len, flags);
                pop_local_filters(save_filters);
@@ -1588,8 +1752,7 @@ static void fsort(struct file_struct **fp, size_t num)
        if (use_qsort)
                qsort(fp, num, PTR_SIZE, file_compare);
        else {
-               struct file_struct **tmp = new_array(struct file_struct *,
-                                                    (num+1) / 2);
+               struct file_struct **tmp = new_array(struct file_struct *, (num+1) / 2);
                fsort_tmp(fp, num, tmp);
                free(tmp);
        }
@@ -1605,6 +1768,7 @@ static void add_dirs_to_tree(int parent_ndx, struct file_list *from_flist,
        int32 *parent_dp = parent_ndx < 0 ? NULL
                         : F_DIR_NODE_P(dir_flist->sorted[parent_ndx]);
 
+       /* The sending side is adding entries to dir_flist in sorted order, so sorted & files are the same. */
        flist_expand(dir_flist, dir_cnt);
        dir_flist->sorted = dir_flist->files;
 
@@ -1672,27 +1836,38 @@ static void send_directory(int f, struct file_list *flist, char *fbuf, int len,
                                interpret_stat_error(fbuf, True);
                        return;
                }
+               if (errno == ENOTDIR && (flags & FLAG_PERHAPS_DIR))
+                       return;
                io_error |= IOERR_GENERAL;
                rsyserr(FERROR_XFER, errno, "opendir %s failed", full_fname(fbuf));
                return;
        }
 
        p = fbuf + len;
-       if (len != 1 || *fbuf != '/')
+       if (len == 1 && *fbuf == '/')
+               remainder = MAXPATHLEN - 1;
+       else if (len < MAXPATHLEN-1) {
                *p++ = '/';
-       *p = '\0';
-       remainder = MAXPATHLEN - (p - fbuf);
+               *p = '\0';
+               remainder = MAXPATHLEN - (len + 1);
+       } else
+               remainder = 0;
 
        for (errno = 0, di = readdir(d); di; errno = 0, di = readdir(d)) {
+               unsigned name_len;
                char *dname = d_name(di);
                if (dname[0] == '.' && (dname[1] == '\0'
                    || (dname[1] == '.' && dname[2] == '\0')))
                        continue;
-               if (strlcpy(p, dname, remainder) >= remainder) {
+               name_len = strlcpy(p, dname, remainder);
+               if (name_len >= remainder) {
+                       char save = fbuf[len];
+                       fbuf[len] = '\0';
                        io_error |= IOERR_GENERAL;
                        rprintf(FERROR_XFER,
-                               "cannot send long-named file %s\n",
-                               full_fname(fbuf));
+                               "filename overflows max-path len by %u: %s/%s\n",
+                               name_len - remainder + 1, fbuf, dname);
+                       fbuf[len] = save;
                        continue;
                }
                if (dname[0] == '\0') {
@@ -1733,7 +1908,7 @@ static void send_implied_dirs(int f, struct file_list *flist, char *fname,
        item_list *relname_list;
        relnamecache **rnpp;
        int len, need_new_dir, depth = 0;
-       struct filter_list_struct save_filter_list = filter_list;
+       filter_rule_list save_filter_list = filter_list;
 
        flags = (flags | FLAG_IMPLIED_DIR) & ~(FLAG_TOP_DIR | FLAG_CONTENT_DIR);
        filter_list.head = filter_list.tail = NULL; /* Don't filter implied dirs. */
@@ -1810,13 +1985,11 @@ static void send_implied_dirs(int f, struct file_list *flist, char *fname,
        len = strlen(limit+1);
        memcpy(&relname_list, F_DIR_RELNAMES_P(lastpath_struct), sizeof relname_list);
        if (!relname_list) {
-               if (!(relname_list = new0(item_list)))
-                       out_of_memory("send_implied_dirs");
+               relname_list = new0(item_list);
                memcpy(F_DIR_RELNAMES_P(lastpath_struct), &relname_list, sizeof relname_list);
        }
        rnpp = EXPAND_ITEM_LIST(relname_list, relnamecache *, 32);
-       if (!(*rnpp = (relnamecache*)new_array(char, sizeof (relnamecache) + len)))
-               out_of_memory("send_implied_dirs");
+       *rnpp = (relnamecache*)new_array(char, RELNAMECACHE_LEN + len + 1);
        (*rnpp)->name_type = name_type;
        strlcpy((*rnpp)->fname, limit+1, len + 1);
 
@@ -1824,6 +1997,16 @@ done:
        filter_list = save_filter_list;
 }
 
+static NORETURN void fatal_unsafe_io_error(void)
+{
+       /* This (sadly) can only happen when pushing data because
+        * the sender does not know about what kind of delete
+        * is in effect on the receiving side when pulling. */
+       rprintf(FERROR_XFER, "FATAL I/O ERROR: dying to avoid a --delete-%s issue with a pre-3.0.7 receiver.\n",
+               delete_during == 2 ? "delay" : "during");
+       exit_cleanup(RERR_UNSUPPORTED);
+}
+
 static void send1extra(int f, struct file_struct *file, struct file_list *flist)
 {
        char fbuf[MAXPATHLEN];
@@ -1877,7 +2060,9 @@ static void send1extra(int f, struct file_struct *file, struct file_list *flist)
 
                if (name_type != NORMAL_NAME) {
                        STRUCT_STAT st;
-                       if (link_stat(fbuf, &st, 1) != 0) {
+                       if (name_type == MISSING_NAME)
+                               memset(&st, 0, sizeof st);
+                       else if (link_stat(fbuf, &st, 1) != 0) {
                                interpret_stat_error(fbuf, True);
                                continue;
                        }
@@ -1889,22 +2074,34 @@ static void send1extra(int f, struct file_struct *file, struct file_list *flist)
        free(relname_list);
 }
 
+static void write_end_of_flist(int f, int send_io_error)
+{
+       if (xfer_flags_as_varint) {
+               write_varint(f, 0);
+               write_varint(f, send_io_error ? io_error : 0);
+       } else if (send_io_error) {
+               write_shortint(f, XMIT_EXTENDED_FLAGS|XMIT_IO_ERROR_ENDLIST);
+               write_varint(f, io_error);
+       } else
+               write_byte(f, 0);
+}
+
 void send_extra_file_list(int f, int at_least)
 {
        struct file_list *flist;
        int64 start_write;
        uint16 prev_flags;
-       int old_cnt, save_io_error = io_error;
+       int save_io_error = io_error;
 
        if (flist_eof)
                return;
 
+       if (at_least < 0)
+               at_least = file_total - file_old_total + 1;
+
        /* Keep sending data until we have the requested number of
         * files in the upcoming file-lists. */
-       old_cnt = cur_flist->used;
-       for (flist = first_flist; flist != cur_flist; flist = flist->next)
-               old_cnt += flist->used;
-       while (file_total - old_cnt < at_least) {
+       while (file_total - file_old_total < at_least) {
                struct file_struct *file = dir_flist->sorted[send_dir_ndx];
                int dir_ndx, dstart = stats.num_dirs;
                const char *pathname = F_PATHNAME(file);
@@ -1918,7 +2115,7 @@ void send_extra_file_list(int f, int at_least)
                else
                        dir_ndx = send_dir_ndx;
                write_ndx(f, NDX_FLIST_OFFSET - dir_ndx);
-               flist->parent_ndx = dir_ndx;
+               flist->parent_ndx = send_dir_ndx; /* the sending side must remember the sorted ndx value */
 
                send1extra(f, file, flist);
                prev_flags = file->flags;
@@ -1939,18 +2136,19 @@ void send_extra_file_list(int f, int at_least)
                        dp = F_DIR_NODE_P(file);
                }
 
-               if (protocol_version < 31 || io_error == save_io_error || ignore_errors)
-                       write_byte(f, 0);
+               if (io_error == save_io_error || ignore_errors)
+                       write_end_of_flist(f, 0);
+               else if (use_safe_inc_flist)
+                       write_end_of_flist(f, 1);
                else {
-                       write_shortint(f, XMIT_EXTENDED_FLAGS|XMIT_IO_ERROR_ENDLIST);
-                       write_varint(f, io_error);
+                       if (delete_during)
+                               fatal_unsafe_io_error();
+                       write_end_of_flist(f, 0);
                }
 
                if (need_unsorted_flist) {
-                       if (!(flist->sorted = new_array(struct file_struct *, flist->used)))
-                               out_of_memory("send_extra_file_list");
-                       memcpy(flist->sorted, flist->files,
-                              flist->used * sizeof (struct file_struct*));
+                       flist->sorted = new_array(struct file_struct *, flist->used);
+                       memcpy(flist->sorted, flist->files, flist->used * PTR_SIZE);
                } else
                        flist->sorted = flist->files;
 
@@ -1973,6 +2171,8 @@ void send_extra_file_list(int f, int at_least)
                                if ((send_dir_ndx = DIR_PARENT(dp)) < 0) {
                                        write_ndx(f, NDX_FLIST_EOF);
                                        flist_eof = 1;
+                                       if (DEBUG_GTE(FLIST, 3))
+                                               rprintf(FINFO, "[%s] flist_eof=1\n", who_am_i());
                                        change_local_filter_dir(NULL, 0, 0);
                                        goto finish;
                                }
@@ -2000,7 +2200,7 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
        struct timeval start_tv, end_tv;
        int64 start_write;
        int use_ff_fd = 0;
-       int disable_buffering;
+       int disable_buffering, reenable_multiplex = -1;
        int flags = recurse ? FLAG_CONTENT_DIR : 0;
        int reading_remotely = filesfrom_host != NULL;
        int rl_flags = (reading_remotely ? 0 : RL_DUMP_COMMENTS)
@@ -2011,7 +2211,7 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
        int implied_dot_dir = 0;
 
        rprintf(FLOG, "building file list\n");
-       if (show_filelist_p())
+       if (show_filelist_progress)
                start_filelist_progress("building file list");
        else if (inc_recurse && INFO_GTE(FLIST, 1) && !am_server)
                rprintf(FCLIENT, "sending incremental file list\n");
@@ -2028,8 +2228,10 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
 #endif
 
        flist = cur_flist = flist_new(0, "send_file_list");
+       flist_expand(flist, FLIST_START_LARGE);
        if (inc_recurse) {
                dir_flist = flist_new(FLIST_TEMP, "send_file_list");
+               flist_expand(dir_flist, FLIST_START_LARGE);
                flags |= FLAG_DIVERT_DIRS;
        } else
                dir_flist = cur_flist;
@@ -2041,6 +2243,12 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                                full_fname(argv[0]));
                        exit_cleanup(RERR_FILESELECT);
                }
+               if (protocol_version < 31) {
+                       /* Older protocols send the files-from data w/o packaging
+                        * it in multiplexed I/O packets, so temporarily switch
+                        * to buffered I/O to match this behavior. */
+                       reenable_multiplex = io_end_multiplex_in(MPLX_TO_BUFFERED);
+               }
                use_ff_fd = 1;
        }
 
@@ -2122,12 +2330,8 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                                fn = fbuf;
                        /* A leading ./ can be used in relative mode to affect
                         * the dest dir without its name being in the path. */
-                       if (*fn == '.' && fn[1] == '/' && !implied_dot_dir) {
-                               send_file_name(f, flist, ".", NULL,
-                                   (flags | FLAG_IMPLIED_DIR) & ~FLAG_CONTENT_DIR,
-                                   ALL_FILTERS);
-                               implied_dot_dir = 1;
-                       }
+                       if (*fn == '.' && fn[1] == '/' && fn[2] && !implied_dot_dir)
+                               implied_dot_dir = -1;
                        len = clean_fname(fn, CFN_KEEP_TRAILING_SLASH
                                            | CFN_DROP_TRAILING_DOT_DIR);
                        if (len == 1) {
@@ -2163,33 +2367,49 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                }
 
                dirlen = dir ? strlen(dir) : 0;
-               if (dirlen != lastdir_len || memcmp(lastdir, dir, dirlen) != 0) {
+               if (dirlen != lastdir_len || (dirlen && memcmp(lastdir, dir, dirlen) != 0)) {
                        if (!change_pathname(NULL, dir, -dirlen))
-                               continue;
+                               goto bad_path;
                        lastdir = pathname;
                        lastdir_len = pathname_len;
-               } else if (!change_pathname(NULL, lastdir, lastdir_len))
+               } else if (!change_pathname(NULL, lastdir, lastdir_len)) {
+                   bad_path:
+                       if (implied_dot_dir < 0)
+                               implied_dot_dir = 0;
                        continue;
+               }
+
+               if (implied_dot_dir < 0) {
+                       implied_dot_dir = 1;
+                       send_file_name(f, flist, ".", NULL, (flags | FLAG_IMPLIED_DIR) & ~FLAG_CONTENT_DIR, ALL_FILTERS);
+               }
 
                if (fn != fbuf)
                        memmove(fbuf, fn, len + 1);
 
                if (link_stat(fbuf, &st, copy_dirlinks || name_type != NORMAL_NAME) != 0
-                || (name_type != DOTDIR_NAME && is_daemon_excluded(fbuf, S_ISDIR(st.st_mode)))
+                || (name_type != DOTDIR_NAME && is_excluded(fbuf, S_ISDIR(st.st_mode) != 0, SERVER_FILTERS))
                 || (relative_paths && path_is_daemon_excluded(fbuf, 1))) {
-                       if (errno == ENOENT && delete_missing_args) {
-                               /* Rsync will treat a mode of 0 as deleted. */
-                               memset(&st, 0, sizeof st);
-                       } else {
-                               io_error |= IOERR_GENERAL;
+                       if (errno != ENOENT || missing_args == 0) {
+                               /* This is a transfer error, but inhibit deletion
+                                * only if we might be omitting an existing file. */
+                               if (errno != ENOENT)
+                                       io_error |= IOERR_GENERAL;
                                rsyserr(FERROR_XFER, errno, "link_stat %s failed",
                                        full_fname(fbuf));
                                continue;
+                       } else if (missing_args == 1) {
+                               /* Just ignore the arg. */
+                               continue;
+                       } else /* (missing_args == 2) */ {
+                               /* Send the arg as a "missing" entry with
+                                * mode 0, which tells the generator to delete it. */
+                               memset(&st, 0, sizeof st);
                        }
                }
 
                /* A dot-dir should not be excluded! */
-               if (name_type != DOTDIR_NAME
+               if (name_type != DOTDIR_NAME && st.st_mode != 0
                 && is_excluded(fbuf, S_ISDIR(st.st_mode) != 0, ALL_FILTERS))
                        continue;
 
@@ -2205,7 +2425,8 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                                                p = fn;
                                } else
                                        fn = p;
-                               send_implied_dirs(f, flist, fbuf, fbuf, p, flags, name_type);
+                               send_implied_dirs(f, flist, fbuf, fbuf, p, flags,
+                                                 IS_MISSING_FILE(st) ? MISSING_NAME : name_type);
                                if (fn == p)
                                        continue;
                        }
@@ -2239,6 +2460,9 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                        send_file_name(f, flist, fbuf, &st, flags, NO_FILTERS);
        }
 
+       if (reenable_multiplex >= 0)
+               io_start_multiplex_in(reenable_multiplex);
+
        gettimeofday(&end_tv, NULL);
        stats.flist_buildtime = (int64)(end_tv.tv_sec - start_tv.tv_sec) * 1000
                              + (end_tv.tv_usec - start_tv.tv_usec) / 1000;
@@ -2247,11 +2471,14 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
        start_tv = end_tv;
 
        /* Indicate end of file list */
-       if (protocol_version < 31 || io_error == 0 || ignore_errors)
-               write_byte(f, 0);
+       if (io_error == 0 || ignore_errors)
+               write_end_of_flist(f, 0);
+       else if (use_safe_inc_flist)
+               write_end_of_flist(f, 1);
        else {
-               write_shortint(f, XMIT_EXTENDED_FLAGS|XMIT_IO_ERROR_ENDLIST);
-               write_varint(f, io_error);
+               if (delete_during && inc_recurse)
+                       fatal_unsafe_io_error();
+               write_end_of_flist(f, 0);
        }
 
 #ifdef SUPPORT_HARD_LINKS
@@ -2259,7 +2486,7 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                idev_destroy();
 #endif
 
-       if (show_filelist_p())
+       if (show_filelist_progress)
                finish_filelist_progress(flist);
 
        gettimeofday(&end_tv, NULL);
@@ -2275,28 +2502,25 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
         * recursion mode, the sender marks duplicate dirs so that it can
         * send them together in a single file-list. */
        if (need_unsorted_flist) {
-               if (!(flist->sorted = new_array(struct file_struct *, flist->used)))
-                       out_of_memory("send_file_list");
-               memcpy(flist->sorted, flist->files,
-                      flist->used * sizeof (struct file_struct*));
+               flist->sorted = new_array(struct file_struct *, flist->used);
+               memcpy(flist->sorted, flist->files, flist->used * PTR_SIZE);
        } else
                flist->sorted = flist->files;
        flist_sort_and_clean(flist, 0);
        file_total += flist->used;
+       file_old_total += flist->used;
 
        if (numeric_ids <= 0 && !inc_recurse)
-               send_id_list(f);
-
-       set_msg_fd_in(-1);
+               send_id_lists(f);
 
        /* send the io_error flag */
        if (protocol_version < 30)
                write_int(f, ignore_errors ? 0 : io_error);
-       else if (io_error && protocol_version == 30 && !ignore_errors)
+       else if (!use_safe_inc_flist && io_error && !ignore_errors)
                send_msg_int(MSG_IO_ERROR, io_error);
 
        if (disable_buffering)
-               io_end_buffering_out();
+               io_end_buffering_out(IOBUF_FREE_BUFS);
 
        stats.flist_size = stats.total_written - start_write;
        stats.num_files = flist->used;
@@ -2316,6 +2540,8 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                if (send_dir_ndx < 0) {
                        write_ndx(f, NDX_FLIST_EOF);
                        flist_eof = 1;
+                       if (DEBUG_GTE(FLIST, 3))
+                               rprintf(FINFO, "[%s] flist_eof=1\n", who_am_i());
                }
                else if (file_total == 1) {
                        /* If we're creating incremental file-lists and there
@@ -2323,20 +2549,24 @@ struct file_list *send_file_list(int f, int argc, char *argv[])
                         * file-list to check if this is a 1-file xfer. */
                        send_extra_file_list(f, 1);
                }
-       } else
+       } else {
                flist_eof = 1;
+               if (DEBUG_GTE(FLIST, 3))
+                       rprintf(FINFO, "[%s] flist_eof=1\n", who_am_i());
+       }
 
        return flist;
 }
 
-struct file_list *recv_file_list(int f)
+struct file_list *recv_file_list(int f, int dir_ndx)
 {
+       const char *good_dirname = NULL;
        struct file_list *flist;
        int dstart, flags;
        int64 start_read;
 
        if (!first_flist) {
-               if (show_filelist_p())
+               if (show_filelist_progress)
                        start_filelist_progress("receiving file list");
                else if (inc_recurse && INFO_GTE(FLIST, 1) && !am_server)
                        rprintf(FCLIENT, "receiving incremental file list\n");
@@ -2355,36 +2585,68 @@ struct file_list *recv_file_list(int f)
 #endif
 
        flist = flist_new(0, "recv_file_list");
+       flist_expand(flist, FLIST_START_LARGE);
 
        if (inc_recurse) {
-               if (flist->ndx_start == 1)
+               if (flist->ndx_start == 1) {
                        dir_flist = flist_new(FLIST_TEMP, "recv_file_list");
+                       flist_expand(dir_flist, FLIST_START_LARGE);
+               }
                dstart = dir_flist->used;
        } else {
                dir_flist = flist;
                dstart = 0;
        }
 
-       while ((flags = read_byte(f)) != 0) {
+       while (1) {
                struct file_struct *file;
 
-               if (protocol_version >= 28 && (flags & XMIT_EXTENDED_FLAGS))
-                       flags |= read_byte(f) << 8;
+               if (xfer_flags_as_varint) {
+                       if ((flags = read_varint(f)) == 0) {
+                               int err = read_varint(f);
+                               if (!ignore_errors)
+                                       io_error |= err;
+                               break;
+                       }
+               } else {
+                       if ((flags = read_byte(f)) == 0)
+                               break;
+
+                       if (protocol_version >= 28 && (flags & XMIT_EXTENDED_FLAGS))
+                               flags |= read_byte(f) << 8;
 
-               if (flags == (XMIT_EXTENDED_FLAGS|XMIT_IO_ERROR_ENDLIST)) {
-                       int err;
-                       if (protocol_version < 31) {
-                               rprintf(FERROR, "Invalid flist flag: %x\n", flags);
-                               exit_cleanup(RERR_PROTOCOL);
+                       if (flags == (XMIT_EXTENDED_FLAGS|XMIT_IO_ERROR_ENDLIST)) {
+                               int err;
+                               if (!use_safe_inc_flist) {
+                                       rprintf(FERROR, "Invalid flist flag: %x\n", flags);
+                                       exit_cleanup(RERR_PROTOCOL);
+                               }
+                               err = read_varint(f);
+                               if (!ignore_errors)
+                                       io_error |= err;
+                               break;
                        }
-                       err = read_varint(f);
-                       if (!ignore_errors)
-                               io_error |= err;
-                       break;
                }
 
                flist_expand(flist, 1);
-               file = recv_file_entry(flist, flags, f);
+               file = recv_file_entry(f, flist, flags);
+
+               if (inc_recurse) {
+                       static const char empty_dir[] = "\0";
+                       const char *cur_dir = file->dirname ? file->dirname : empty_dir;
+                       if (relative_paths && *cur_dir == '/')
+                               cur_dir++;
+                       if (cur_dir != good_dirname) {
+                               const char *d = dir_ndx >= 0 ? f_name(dir_flist->files[dir_ndx], NULL) : empty_dir;
+                               if (strcmp(cur_dir, d) != 0) {
+                                       rprintf(FERROR,
+                                               "ABORTING due to invalid path from sender: %s/%s\n",
+                                               cur_dir, file->basename);
+                                       exit_cleanup(RERR_UNSUPPORTED);
+                               }
+                               good_dirname = cur_dir;
+                       }
+               }
 
                if (S_ISREG(file->mode)) {
                        /* Already counted */
@@ -2397,7 +2659,7 @@ struct file_list *recv_file_list(int f)
                } else if (S_ISLNK(file->mode))
                        stats.num_symlinks++;
                else if (IS_DEVICE(file->mode))
-                       stats.num_symlinks++;
+                       stats.num_devices++;
                else
                        stats.num_specials++;
 
@@ -2415,7 +2677,7 @@ struct file_list *recv_file_list(int f)
        if (DEBUG_GTE(FLIST, 2))
                rprintf(FINFO, "received %d names\n", flist->used);
 
-       if (show_filelist_p())
+       if (show_filelist_progress)
                finish_filelist_progress(flist);
 
        if (need_unsorted_flist) {
@@ -2424,10 +2686,8 @@ struct file_list *recv_file_list(int f)
                 * order and for calling flist_find()).  We keep the "files"
                 * list unsorted for our exchange of index numbers with the
                 * other side (since their names may not sort the same). */
-               if (!(flist->sorted = new_array(struct file_struct *, flist->used)))
-                       out_of_memory("recv_file_list");
-               memcpy(flist->sorted, flist->files,
-                      flist->used * sizeof (struct file_struct*));
+               flist->sorted = new_array(struct file_struct *, flist->used);
+               memcpy(flist->sorted, flist->files, flist->used * PTR_SIZE);
                if (inc_recurse && dir_flist->used > dstart) {
                        static int dir_flist_malloced = 0;
                        if (dir_flist_malloced < dir_flist->malloced) {
@@ -2437,7 +2697,7 @@ struct file_list *recv_file_list(int f)
                                dir_flist_malloced = dir_flist->malloced;
                        }
                        memcpy(dir_flist->sorted + dstart, dir_flist->files + dstart,
-                              (dir_flist->used - dstart) * sizeof (struct file_struct*));
+                              (dir_flist->used - dstart) * PTR_SIZE);
                        fsort(dir_flist->sorted + dstart, dir_flist->used - dstart);
                }
        } else {
@@ -2453,8 +2713,13 @@ struct file_list *recv_file_list(int f)
        else if (f >= 0) {
                recv_id_list(f, flist);
                flist_eof = 1;
+               if (DEBUG_GTE(FLIST, 3))
+                       rprintf(FINFO, "[%s] flist_eof=1\n", who_am_i());
        }
 
+       /* The --relative option sends paths with a leading slash, so we need
+        * to specify the strip_root option here.  We rejected leading slashes
+        * for a non-relative transfer in recv_file_entry(). */
        flist_sort_and_clean(flist, relative_paths);
 
        if (protocol_version < 30) {
@@ -2487,6 +2752,8 @@ void recv_additional_file_list(int f)
        int ndx = read_ndx(f);
        if (ndx == NDX_FLIST_EOF) {
                flist_eof = 1;
+               if (DEBUG_GTE(FLIST, 3))
+                       rprintf(FINFO, "[%s] flist_eof=1\n", who_am_i());
                change_local_filter_dir(NULL, 0, 0);
        } else {
                ndx = NDX_FLIST_OFFSET - ndx;
@@ -2502,7 +2769,7 @@ void recv_additional_file_list(int f)
                        rprintf(FINFO, "[%s] receiving flist for dir %d\n",
                                who_am_i(), ndx);
                }
-               flist = recv_file_list(f);
+               flist = recv_file_list(f, ndx);
                flist->parent_ndx = ndx;
        }
 }
@@ -2558,6 +2825,34 @@ int flist_find(struct file_list *flist, struct file_struct *f)
        return -1;
 }
 
+/* Search for a name in the file list.  You must specify want_dir_match as:
+ * 1=match directories, 0=match non-directories, or -1=match either. */
+int flist_find_name(struct file_list *flist, const char *fname, int want_dir_match)
+{
+       static struct file_struct *f;
+       char fbuf[MAXPATHLEN];
+       const char *slash = strrchr(fname, '/');
+       const char *basename = slash ? slash+1 : fname;
+
+       if (!f)
+               f = (struct file_struct*)new_array(char, FILE_STRUCT_LEN + MAXPATHLEN + 1);
+
+       memset(f, 0, FILE_STRUCT_LEN);
+       memcpy((void*)f->basename, basename, strlen(basename)+1);
+
+       if (slash) {
+               strlcpy(fbuf, fname, slash - fname + 1);
+               f->dirname = fbuf;
+       } else
+               f->dirname = NULL;
+
+       f->mode = want_dir_match > 0 ? S_IFDIR : S_IFREG;
+
+       if (want_dir_match < 0)
+               return flist_find_ignore_dirness(flist, f);
+       return flist_find(flist, f);
+}
+
 /* Search for an identically-named item in the file list.  Differs from
  * flist_find in that an item that agrees with "f" in directory-ness is
  * preferred but one that does not is still found. */
@@ -2596,26 +2891,20 @@ void clear_file(struct file_struct *file)
 }
 
 /* Allocate a new file list. */
-struct file_list *flist_new(int flags, char *msg)
+static struct file_list *flist_new(int flags, const char *msg)
 {
        struct file_list *flist;
 
-       if (!(flist = new0(struct file_list)))
-               out_of_memory(msg);
+       flist = new0(struct file_list);
 
        if (flags & FLIST_TEMP) {
-               if (!(flist->file_pool = pool_create(SMALL_EXTENT, 0,
-                                                    out_of_memory,
-                                                    POOL_INTERN)))
+               if (!(flist->file_pool = pool_create(SMALL_EXTENT, 0, _out_of_memory, POOL_INTERN)))
                        out_of_memory(msg);
        } else {
                /* This is a doubly linked list with prev looping back to
                 * the end of the list, but the last next pointer is NULL. */
                if (!first_flist) {
-                       flist->file_pool = pool_create(NORMAL_EXTENT, 0,
-                                                      out_of_memory,
-                                                      POOL_INTERN);
-                       if (!flist->file_pool)
+                       if (!(flist->file_pool = pool_create(NORMAL_EXTENT, 0, _out_of_memory, POOL_INTERN)))
                                out_of_memory(msg);
 
                        flist->ndx_start = flist->flist_num = inc_recurse ? 1 : 0;
@@ -2802,8 +3091,7 @@ static void flist_sort_and_clean(struct file_list *flist, int strip_root)
                                        clear_file(fp);
                                }
                                prev_depth = F_DEPTH(file);
-                               if (is_excluded(f_name(file, fbuf), 1,
-                                                      ALL_FILTERS)) {
+                               if (is_excluded(f_name(file, fbuf), 1, ALL_FILTERS)) {
                                        /* Keep dirs through this dir. */
                                        for (j = prev_depth-1; ; j--) {
                                                fp = flist->sorted[prev_i];
@@ -3080,13 +3368,15 @@ char *f_name(const struct file_struct *f, char *fbuf)
  * of the dirname string, and also indicates that "dirname" is a MAXPATHLEN
  * buffer (the functions we call will append names onto the end, but the old
  * dir value will be restored on exit). */
-struct file_list *get_dirlist(char *dirname, int dlen, int ignore_filter_rules)
+struct file_list *get_dirlist(char *dirname, int dlen, int flags)
 {
        struct file_list *dirlist;
        char dirbuf[MAXPATHLEN];
        int save_recurse = recurse;
        int save_xfer_dirs = xfer_dirs;
        int save_prune_empty_dirs = prune_empty_dirs;
+       int senddir_fd = flags & GDL_IGNORE_FILTER_RULES ? -2 : -1;
+       int senddir_flags = FLAG_CONTENT_DIR;
 
        if (dlen < 0) {
                dlen = strlcpy(dirbuf, dirname, MAXPATHLEN);
@@ -3097,9 +3387,12 @@ struct file_list *get_dirlist(char *dirname, int dlen, int ignore_filter_rules)
 
        dirlist = flist_new(FLIST_TEMP, "get_dirlist");
 
+       if (flags & GDL_PERHAPS_DIR)
+               senddir_flags |= FLAG_PERHAPS_DIR;
+
        recurse = 0;
        xfer_dirs = 1;
-       send_directory(ignore_filter_rules ? -2 : -1, dirlist, dirname, dlen, 0);
+       send_directory(senddir_fd, dirlist, dirname, dlen, senddir_flags);
        xfer_dirs = save_xfer_dirs;
        recurse = save_recurse;
        if (INFO_GTE(PROGRESS, 1))