/* GNU mailutils - a suite of utilities for electronic mail
   Copyright (C) 1999, 2000 Free Software Foundation, Inc.

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Library Public License as published by
   the Free Software Foundation; either version 2, or (at your option)
   any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU Library General Public License for more details.

   You should have received a copy of the GNU Library General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.  */

/* First draft by Alain Magloire */

#include <mailbox0.h>
#include <registrar0.h>
#include <message0.h>
#include <url0.h>
#include <io0.h>
#include <attribute.h>
#include <header.h>
#include <auth.h>
#include <locker.h>

#define HAVE_PTHREAD_H

#include <stdlib.h>
#include <stdio.h>
#include <time.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <unistd.h>
#include <signal.h>
#include <errno.h>
#include <time.h>
#ifdef HAVE_PTHREAD_H
# include <pthread.h>
#else
# define flockfile(arg)
# define funlockfile(arg)
#endif
#include <string.h>
#include <ctype.h>
#include <limits.h>

static int mailbox_unix_init (mailbox_t *pmbox, const char *name);
static void mailbox_unix_destroy (mailbox_t *pmbox);

struct mailbox_registrar _mailbox_unix_registrar =
{
  "UNIX MBOX",
  mailbox_unix_init, mailbox_unix_destroy
};

/*
 * Keep the position of where the header and body starts
 * and ends. old_attr is the one that is part of the "Status:" message.
 */
typedef struct _mailbox_unix_message
{
  /* offset of the parts of the messages in the mailbox*/
  off_t header;
  off_t header_end;
  /* little hack to make things easier
   * when updating the attribute
   */
  off_t hdr_status;
  off_t hdr_status_end;
  off_t body;
  off_t body_end;

  /* old_attr contains the definition of Header: */
  /* new_attr what we want when expunging */
  attribute_t old_attr;
  attribute_t new_attr;

  /* some sort of uniq id, maybe we should use the
   * Message-ID of the message, but we'll have to free
   * when done.
   */
  size_t num;
  FILE *file;

  /* if we have a message attach to it */
  message_t message;

} *mailbox_unix_message_t;

/*
 * umessages is an array of pointers that contains umessages_count
 * of mailbox_unix_message_t*; umessages[umessages_count].
 * We do it this because realloc() can move everything to
 * a new memory region and invalidating all the pointers someone
 * has on the message.  Thanks to <Dave Inglis> for pointing this out.
 * messages_count is the count number of messages parsed so far.
 */
typedef struct _mailbox_unix_data
{
  mailbox_unix_message_t *umessages;
  size_t umessages_count;
  size_t messages_count;
  FILE *file;
  char *dirname;
  char *basename;
  int flags;
#ifdef HAVE_PTHREAD_H
  pthread_mutex_t mutex;
#endif
  time_t mtime;
  off_t size;

} *mailbox_unix_data_t;

static int mailbox_unix_open (mailbox_t mbox, int flag);
static int mailbox_unix_close (mailbox_t mbox);

static int mailbox_unix_get_message (mailbox_t, size_t msgno, message_t *msg);
static int mailbox_unix_append_message (mailbox_t, message_t msg);
static int mailbox_unix_messages_count (mailbox_t, size_t *msgno);
static int mailbox_unix_delete (mailbox_t, size_t msgno);
static int mailbox_unix_undelete (mailbox_t, size_t msgno);
static int mailbox_unix_is_deleted (mailbox_t, size_t msgno);
static int mailbox_unix_expunge (mailbox_t);
static int mailbox_unix_num_deleted (mailbox_t, size_t *);

static int mailbox_unix_scan (mailbox_t, size_t count, size_t *pcount);
static int mailbox_unix_is_updated (mailbox_t);

static int mailbox_unix_size (mailbox_t, off_t *size);

static ssize_t mailbox_unix_get_header (mailbox_t, size_t msgno, char *h,
					size_t len, off_t off, int *err);


/* private stuff */
static int mailbox_unix_validity (mailbox_t mbox, size_t msgno);
static int mailbox_unix_readstream (istream_t is, char *buffer, size_t buflen,
				    off_t off, ssize_t *pnread);
static int mailbox_unix_is_from (const char *);
static int mailbox_unix_readhdr (mailbox_t mbox, char *buf, size_t len,
				 off_t *content_length, size_t msgno);
static int mailbox_unix_lock (mailbox_t mbox, int flag);
static int mailbox_unix_touchlock (mailbox_t mbox);
static int mailbox_unix_unlock (mailbox_t mbox);
static int mailbox_unix_ilock (mailbox_t mbox, int flag);
static int mailbox_unix_iunlock (mailbox_t mbox);

/* We allocate the mailbox_t struct, but don't do any
 * parsing on the name or even test for existence.
 * However we do strip any leading "unix:" part of
 * the name, this is suppose to be the protocol/scheme name.
 * Hopefully there will not be a mailbox name "unix:"
 */
static int
mailbox_unix_init (mailbox_t *pmbox, const char *name)
{
  mailbox_t mbox;
  mailbox_unix_data_t mud;
  const char *sep;
  size_t name_len;
  int i;

  /* sanity check */
  if (name == NULL || *name == '\0')
    return EINVAL;

  name_len = strlen (name);

#define UNIX_SCHEME "unix:"
#define UNIX_SCHEME_LEN 5
#define SEPARATOR '/'

  /* skip the url scheme */
  if (name_len > UNIX_SCHEME_LEN &&
      (name[0] == 'u' || name[0] == 'U') &&
      (name[1] == 'n' || name[1] == 'N') &&
      (name[2] == 'i' || name[2] == 'i') &&
      (name[3] == 'x' || name[3] == 'x' ) &&
      name[4] == ':')
    {
      name += UNIX_SCHEME_LEN;
      name_len -= UNIX_SCHEME_LEN;
    }

  /* allocate memory for mbox */
  mbox = calloc (1, sizeof (*mbox));
  if (mbox == NULL)
    return ENOMEM;

  /* allocate specific unix mbox data */
  mud = mbox->data = calloc (1, sizeof (*mud));
  if (mbox->data == NULL)
    {
      mailbox_unix_destroy (&mbox);
      return ENOMEM;
    }

  /* copy the name */
  mbox->name = calloc (name_len + 1, sizeof (char));
  if (mbox->name == NULL)
    {
      mailbox_unix_destroy (&mbox);
      return ENOMEM;
    }
  memcpy (mbox->name, name, name_len);

  /* save the basename and dirname */
  /* FIXME: We may have to support imap "SELECT"
   * So we split the name.  But this should probably be
   * supported via "maildir:" or the mailbox mgr.
   */
  /* equivalent to strrchr (name, '/'); */
  for (i = name_len, sep = NULL; i >= 0; i--)
    {
      /* break on the first separator */
      if (name[i] == SEPARATOR)
	{
	  sep = &(name[i]);
	  break;
	}
    }

  if (sep)
    {
      /* split it into two */
      mud->dirname = calloc ((sep - name) + 1, sizeof (char));
      if (mud->dirname == NULL)
	{
	  mailbox_unix_destroy (&mbox);
	  return ENOMEM;
	}
      memcpy (mud->dirname, name, sep - name);

      ++sep;
      mud->basename = calloc (name_len - (sep - name) + 1, sizeof (char));
      if (mud->basename == NULL)
	{
	  mailbox_unix_destroy (&mbox);
	  return ENOMEM;
	}
      memcpy (mud->basename, sep, name_len - (sep - name));
    }
  else
    {
      /* use the relative directory "." */
      /* FIXME: should we call getcwd() instead ? */
      mud->dirname = calloc (2 , sizeof (char));
      if (mud->dirname == NULL)
	{
	  mailbox_unix_destroy (&mbox);
	  return ENOMEM;
	}
      mud->dirname[0] = '.';

      mud->basename = calloc (name_len + 1, sizeof (char));
      if (mud->basename == NULL)
	{
	  mailbox_unix_destroy (&mbox);
	  return ENOMEM;
	}
      memcpy (mud->basename, name, name_len);
    }

#ifdef HAVE_PHTREAD_H
  /* mutex when accessing the structure fields */
  /* FIXME: should we use rdwr locks instead ?? */
  pthread_mutex_init (&(mud->mutex), NULL);
#endif

  mbox->_init = mailbox_unix_init;
  mbox->_destroy = mailbox_unix_destroy;

  mbox->_open = mailbox_unix_open;
  mbox->_close = mailbox_unix_close;

  /* messages */
  mbox->_get_message = mailbox_unix_get_message;
  mbox->_append_message = mailbox_unix_append_message;
  mbox->_messages_count = mailbox_unix_messages_count;
  mbox->_delete = mailbox_unix_delete;
  mbox->_undelete = mailbox_unix_undelete;
  mbox->_is_deleted = mailbox_unix_is_deleted;
  mbox->_expunge = mailbox_unix_expunge;
  mbox->_num_deleted = mailbox_unix_num_deleted;

  mbox->_scan = mailbox_unix_scan;
  mbox->_is_updated = mailbox_unix_is_updated;

  mbox->_size = mailbox_unix_size;

  (*pmbox) = mbox;

  return 0; /* okdoke */
}

static void
mailbox_unix_destroy (mailbox_t *pmbox)
{
  if (pmbox && *pmbox)
    {
      mailbox_t mbox = *pmbox;
      mailbox_unix_close (mbox);
      if (mbox->data)
	{
	  size_t i;
	  mailbox_unix_data_t mud = mbox->data;
	  free (mud->dirname);
	  free (mud->basename);
	  for (i = 0; i < mud->umessages_count; i++)
	    {
	      mailbox_unix_message_t mum = mud->umessages[i];
	      if (mum == NULL)
		continue;
	      /* Destroy the attach messages */
	      message_destroy (&(mum->message), mum);
	      attribute_destroy (&(mum->old_attr), mbox);
	      attribute_destroy (&(mum->new_attr), mbox);
	      free (mum);
	    }
	  free (mud->umessages);
	  free (mbox->data);
	}
      free (mbox->name);
      /* free the event array */
      free (mbox->event);
      /* destroy the url */
      if (mbox->url)
	url_destroy (&(mbox->url));
      free (*pmbox);
      *pmbox = NULL;
    }
}

/* Open the file. */
static int
mailbox_unix_open (mailbox_t mbox, int flags)
{
  mailbox_unix_data_t mud;
  int fd = -1;
  int flg = 0;
  char *mode;

  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  if (flags & MU_MAILBOX_WRONLY)
    flg = O_WRONLY;
  else if (flags & MU_MAILBOX_RDWR)
    flg = O_RDWR;
  else /* default */
    flg = O_RDONLY;

  /* FIXME: only if the file is open Write */
  if (flags & MU_MAILBOX_APPEND)
    flg |= O_APPEND;

  /* but local folders should not block since it is local disk ??? */
  if (flags & MU_MAILBOX_NONBLOCK)
    flg |= O_NONBLOCK;

  /* Authentication prologues */
  if (mbox->auth)
    auth_prologue (mbox->auth);

  /* handle CREAT with care, not to follow symlinks */
  if (flags & MU_MAILBOX_CREAT)
    {
      /* Grab the lock for any race conditions */
      mailbox_unix_lock (mbox, MU_LOCKER_WRLOCK);
      {
	/* first see if the file already exists */
	fd = open(mbox->name, flg);
	if (fd == -1)
	  {
	    /* oops bail out */
	    if (errno != ENOENT)
	      return errno;
	    /* Race condition here when creating the file ?? */
	    fd = open(mbox->name, flg|O_CREAT|O_EXCL, 0600);
	    if (fd < 0)
	      return errno;
	  }
      }
      mailbox_unix_unlock (mbox);
    }
  else
    {
      fd = open (mbox->name, flg);
      if (fd < 0)
	return errno;
    }

  /* Authentication */
  if (mbox->auth)
    {
      int status = auth_authenticate (mbox->auth);
      if (status != 0)
	return status;
    }
  else
    {
      /*
       * Set the owner ship, but should we return the errno
       */
      gid_t g ; uid_t u; mode_t m;
      g = u = -1; m = 0600;
      /* FIXME: what to do when they failed */
      (void)fchown (fd, u, g);
      (void)fchmod (fd, m);
    }

  /* Authentication epilogues */
  if (mbox->auth)
    auth_epilogue (mbox->auth);

  /* we use FILE * object */
  if (flags & MU_MAILBOX_APPEND)
    mode = "a";
  else if (flags & MU_MAILBOX_RDWR || flags & MU_MAILBOX_WRONLY)
    mode = "r+";
  else /* default readonly*/
    mode = "r";

  /* clean up, make sure there was nothing before  */
  mailbox_unix_close (mbox);

  mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
  {
    mud->file = fdopen (fd, mode);
    if (mud->file == NULL)
      {
	/* what's up ?? */
	mailbox_unix_iunlock (mbox);
	return ENOMEM;
      }
    /* Is this necessary ?? */
    /* Check to make sure this is indeed a Unix Mail format */
    flockfile (mud->file);
    {
      char buf [6];
      if (fgets (buf, sizeof (buf), mud->file) == NULL)
	{
	  int status = errno;
	  if (feof (mud->file))
	    clearerr (mud->file); /* the file maybe empty */
	  else if (ferror (mud->file))
	    {
	      mailbox_unix_iunlock (mbox);
	      return status;
	    }
	}
      else
	{
	  if (strncmp ("From ", buf, 5) != 0)
	    {
	      /* not a Unix mbox */
	      fclose (mud->file);
	      mailbox_unix_iunlock (mbox);
	      return EIO;
	    }
	}
      rewind (mud->file);
    }
    funlockfile (mud->file);
    mud->flags = flags;
  }
  mailbox_unix_iunlock (mbox);
  return 0;
}

static int
mailbox_unix_close (mailbox_t mbox)
{
  mailbox_unix_data_t mud;

  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
  {
    if (mud->file)
      fclose (mud->file);
    mud->file = NULL;
    /* make sure we do not hold any lock for that file */
    mailbox_unix_unlock (mbox);
  }
  mailbox_unix_iunlock (mbox);
  return 0;
}


/* FIXME: a little weak, we should do full reconnaissance of the
 * the "From " header :
 *    From <user> <weekday> <month> <day> <hr:min:sec>
 *      [T1 [T2]] <year> [remote-list]
*/
static int
mailbox_unix_is_from (const char *from)
{
  const char *sep;

  /* From_ */
  if (strncmp (from, "From ", 5) != 0)
    return 0;
  from += 5;

  /* <user> */
  sep = strchr (from, ' ');
  if (sep == NULL)
    return 0;
  from = ++sep;

  /* weekday */
  sep = strchr (from, ' ');
  if (sep == NULL)
    return 0;
  from = ++sep;

  /* month */
  sep = strchr (from, ' ');
  if (sep == NULL)
    return 0;
  from = ++sep;

  /* day */
  sep = strchr (from, ' ');
  if (sep == NULL)
    return 0;
  from = ++sep;

  /* hr:min:sec */
  /* hr */
  sep = strchr (from, ':');
  if (sep == NULL)
    return 0;
  from = ++sep;
  /* min */
  sep = strchr (from, ':');
  if (sep == NULL)
    return 0;
  from = ++sep ;
  /* sec */
  sep = strchr (from, ' ');
  if (sep == NULL)
    return 0;

  /* FIXME PLEASE: the rest is getting more complex, finish it later */
  return 1;
}

/*
 * We skip over the rest of the header.  Scan for
 * Status: to set the attribute.  Hopefully the Content-Length
 * in there too.
 */
static int
mailbox_unix_readhdr (mailbox_t mbox, char *buf, size_t len,
		      off_t *content_length, size_t msgno)
{
  mailbox_unix_data_t mud = (mailbox_unix_data_t)mbox->data;
  mailbox_unix_message_t mum = mud->umessages[msgno];
  char *sep;

  /* skip over the remaining header */
  errno = 0;
  while (fgets (buf, len, mud->file))
    {
      /* FIXME: The heuristic is still weak
	 we will break and consider things not to be a header if:
	 1: an empty line
	 2: can not be a header
      */
      if (strcmp (buf, "\n") == 0 || strcmp (buf, "\r\n") == 0
	  || (isalpha (buf[0]) && (sep = strchr (buf, ':')) == NULL))
	break;
      /* get the the Content lenght of the body if possible */
      else if (strncmp (buf, "Content-Length:", 15) == 0)
	{
	  sep = strchr(buf, ':'); /* pass the ':' */
	  sep[strlen (sep) - 1] = '\0'; /* chop the newline */
	  /* FIXME: use xstrtol() if strtol() is not on the platform */
	  /* FIXME: what an awkward way of handling error
	     Some damage control can be done here.
	     for example just set content_length = -1;
	     and rely above to discover the body part */
	  errno = 0;
	  *content_length = strtol (sep + 1, NULL, 10);
	  if (*content_length == 0 ||
	      *content_length == LONG_MIN ||
	      *content_length == LONG_MAX)
	    {
	      if (errno != 0)
		return errno;
	    }
	}
      /* Set the attribute */
      else if (strncmp (buf, "Status:", 7) == 0)
        {
	  mum->hdr_status_end = ftell (mud->file);
	  mum->hdr_status = mum->hdr_status_end - strlen (buf);
          sep = strchr(buf, ':'); /* pass the ':' */
          if (strchr (sep, 'R') != NULL)
	    attribute_set_read (mum->old_attr);
          if (strchr (sep, 'O') != NULL)
	    attribute_set_seen (mum->old_attr);
          if (strchr (sep, 'A') != NULL)
	    attribute_set_answered (mum->old_attr);
          if (strchr (sep, 'F') != NULL)
	    attribute_set_flagged (mum->old_attr);
	  attribute_copy (mum->new_attr, mum->old_attr);
        }
    }
  /* check for any dubious conditions */
  if (feof (mud->file) || ferror (mud->file))
    return errno;
  return 0;
}

/* Parsing.
 * This a bit fragile, I need to secure this.
 * The approach is to detect the "From " as start of a
 * new message, give the position of the header and scan
 * until "\n" then set header_end, set body position, if we have
 * a Content-Length field jump to the point if not
 * scan until we it another "From " and set body_end.
 */
static int
mailbox_unix_scan (mailbox_t mbox, size_t msgno, size_t *pcount)
{
  char buf[BUFSIZ];
  int header = 0;
  int body = 0;
  off_t content_length = -1;
  mailbox_unix_data_t mud;
  mailbox_unix_message_t mum = NULL;
  struct stat st;
  int status;
  size_t progress_counter = 0;

  /* sanity */
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  /* FIXME:  I should also block signals and check cancelstate(Pthread)
     since We can not afford to be intr */
  mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
  mailbox_unix_lock (mbox, MU_LOCKER_RDLOCK);
  flockfile (mud->file);

  if (fstat (fileno (mud->file), &st) != 0)
    {
      status = errno;
      funlockfile (mud->file);
      mailbox_unix_iunlock (mbox);
      mailbox_unix_unlock (mbox);
      return status;
    }
  mud->mtime = st.st_mtime;
  mud->size = st.st_size;

  rewind (mud->file);

  /* seek to the starting point */
  if (mud->umessages)
    {
      if (mud->messages_count > 0 &&
	  msgno != 0 &&
	  msgno <= mud->messages_count)
	{
	  mum = mud->umessages[msgno - 1];
	  if (mum)
	    fseek (mud->file, mum->body_end, SEEK_SET);
	  mud->messages_count = msgno;
	}
    }

  errno = 0;
  while (fgets (buf, sizeof (buf), mud->file))
    {
      if (mailbox_unix_is_from (buf))
	{
	  if (body && mum )
	    {
	      int over = strlen (buf);
              mum->body_end = ftell (mud->file);
              mum->body_end -= (over);
	      body = 0;
	      mud->messages_count++;
	      /* reset the progress_counter */
	      progress_counter = 0;
	      /* notifications ADD_MESG */
	      {
		off_t where = ftell (mud->file);
		funlockfile (mud->file);
		mailbox_unix_iunlock (mbox);
		mailbox_unix_unlock (mbox);
		/*
		 * My! I do not like this way of bailing out.
		 */
		if (mailbox_notification (mbox, MU_EVT_MBX_MSG_ADD) != 0)
		  {
		    if (pcount)
		      *pcount = mud->messages_count;
		    return EINTR;
		  }
		flockfile (mud->file);
		mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
		mailbox_unix_lock (mbox, MU_LOCKER_RDLOCK);
		fseek (mud->file, where, SEEK_SET);
	      }
	    }
	  header = 1;
	}

      /* header */
      if (header)
	{
	  /* FIXME: What happen if some mailer violates the rfc822 and the
	     "From " field contains a NULL byte */
	  int over = strlen (buf);

	  /* allocate a slot for the new message */
	  if (mud->messages_count >= mud->umessages_count)
	    {
	      mailbox_unix_message_t *m;
	      m = realloc (mud->umessages,
			   (mud->messages_count + 1) * sizeof (*m));
	      if (m == NULL)
		{
		  funlockfile (mud->file);
		  mailbox_unix_iunlock (mbox);
		  mailbox_unix_unlock (mbox);
		  return ENOMEM;
		}
	      mud->umessages = m;
	      mud->umessages[mud->umessages_count] = NULL;
	      mud->umessages_count++;
	    }
	  /* allocate space for the new message */
	  if (mud->umessages[mud->messages_count] == NULL)
	    {
	      mum = calloc (1, sizeof (*mum));
	      if (mum == NULL)
		{
		  funlockfile (mud->file);
		  mailbox_unix_iunlock (mbox);
		  mailbox_unix_unlock (mbox);
		  return ENOMEM;
		}
	      mud->umessages[mud->messages_count] = mum;
	    }
	  else
	    {
	      /* reuse the message */
	      mum = mud->umessages[mud->messages_count];
	    }
	  status = attribute_init (&(mum->old_attr), mbox);
	  if (status != 0)
	    {
	      funlockfile (mud->file);
	      mailbox_unix_iunlock (mbox);
	      mailbox_unix_unlock (mbox);
	      return ENOMEM;
	    }
	  status = attribute_init (&(mum->new_attr), mbox);
	  if (status != 0)
	    {
	      attribute_init (&(mum->old_attr), mbox);
	      funlockfile (mud->file);
	      mailbox_unix_iunlock (mbox);
	      mailbox_unix_unlock (mbox);
	      return ENOMEM;
	    }
	  mum->file = mud->file;
	  mum->num = mud->messages_count + 1;
	  mum->header = ftell (mud->file);
	  /* substract the overrun */
	  mum->header -= over;

	  /* skip the remaining header and set the attributes */
	  if ((status = mailbox_unix_readhdr (mbox, buf,
					      sizeof (buf), &content_length,
					      mud->messages_count)) != 0)
	    {
	      funlockfile (mud->file);
	      mailbox_unix_iunlock (mbox);
	      mailbox_unix_unlock (mbox);
	      return status;
	    }
	  mum->header_end = ftell (mud->file) - strlen(buf);
	  header = 0;
	  body = !header;
	} /* header */

      /* body */
      if (body)
	{
	  /* set the body position */
	  if (mum->body == 0)
	    mum->body = ftell (mud->file);

	  if (content_length >= 0)
	    {
	      /* ouf ! we got the lenght, jump */
	      mum->body_end =  mum->body + content_length;
	      fseek (mud->file, content_length, SEEK_CUR);
	      content_length = -1;
	      body = 0;
	      mud->messages_count++;
	      /* reset the progress_counter */
	      progress_counter = 0;
	      /* notification ADD MESG*/
	      {
		off_t where = ftell (mud->file);
		funlockfile (mud->file);
		mailbox_unix_iunlock (mbox);
		mailbox_unix_unlock (mbox);
		/*
		 * Brian E. are sure this is a good idea ??
		 */
		if (mailbox_notification (mbox, MU_EVT_MBX_MSG_ADD) != 0)
		  {
		    if (pcount)
		      *pcount = mud->messages_count;
		    return EINTR;
		  }
		flockfile (mud->file);
		mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
		mailbox_unix_lock (mbox, MU_LOCKER_RDLOCK);
		fseek (mud->file, where, SEEK_SET);
	      }
	    }
	}
      /* notification MBX_PROGRESS
       * We do not want to fire up the progress notification
       * every line, it will be too expensive, so we do it
       * arbitrarely every 100 Lines.
       * FIXME: maybe this should be configurable.
       */
      if ((++progress_counter % 100) == 0)
      {
	off_t where = ftell (mud->file);
	funlockfile (mud->file);
	mailbox_unix_iunlock (mbox);
	mailbox_unix_unlock (mbox);
	/*
	 * This is more tricky we can not leave the mum
	 * struct incomplete.  If they want to bailout
	 * they probably did not care about the last message
	 * we should free it;
	 */
	if (mailbox_notification (mbox, MU_EVT_MBX_PROGRESS) != 0)
	  {
	    if (mum)
	      {
		attribute_destroy (&(mum->old_attr), mbox);
		attribute_destroy (&(mum->new_attr), mbox);
		message_destroy (&(mum->message), mbox);
		free (mum);
		mud->umessages[mud->messages_count - 1] = NULL;
		mud->messages_count--;
	      }
	    if (pcount)
	      *pcount = mud->messages_count;
	    return EINTR;
	  }
	flockfile (mud->file);
	mailbox_unix_ilock (mbox, MU_LOCKER_WRLOCK);
	mailbox_unix_lock (mbox, MU_LOCKER_RDLOCK);
	fseek (mud->file, where, SEEK_SET);
      }
      mailbox_unix_touchlock (mbox);
    } /* while */
  status = errno;

  if (feof (mud->file))
    status = 0;

  clearerr (mud->file);
  if (mum)
    {
      mum->body_end = ftell (mud->file);
      mud->messages_count++;
    }
  rewind (mud->file);
  funlockfile (mud->file);
  mailbox_unix_iunlock (mbox);
  mailbox_unix_unlock (mbox);
  if (pcount)
    *pcount = mud->messages_count;
  mailbox_notification (mbox, MU_EVT_MBX_MSG_ADD);
  return status;
}

/* FIXME:  How to handle a shrink ? meaning, the &^$^@%#@^& user
 * start two browsers and delete files in one.  My views
 * is that we should scream bloody murder and hunt them with
 * a machette.
 */
static int
mailbox_unix_is_updated (mailbox_t mbox)
{
  mailbox_unix_data_t mud;
  struct stat st;
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL ||
      fstat (fileno (mud->file), &st) < 0)
    return 0;
  return (mud->mtime == st.st_mtime);
}

static int
mailbox_unix_validity (mailbox_t mbox, size_t msgno)
{
  mailbox_unix_data_t mud;
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t) mbox->data) == NULL)
    return EINVAL;
  /* valid ? */
  return !(mud->messages_count > 0 && msgno > 0 &&
	  msgno <= mud->messages_count);
}

static int
mailbox_unix_is_deleted (mailbox_t mbox, size_t msgno)
{
  mailbox_unix_data_t mud;
  int status = mailbox_unix_validity (mbox, msgno);
  if (status != 0)
    return status;
  msgno--;
  mud = (mailbox_unix_data_t) mbox->data;
  return attribute_is_deleted (mud->umessages[msgno]->new_attr);
}

static int
mailbox_unix_delete (mailbox_t mbox, size_t msgno)
{
  mailbox_unix_data_t mud;
  int status = mailbox_unix_validity (mbox, msgno);
  if (status != 0)
    return status;

  /* if already deleted, noop */
  if (mailbox_unix_is_deleted (mbox, msgno))
    return 0;

  /* Mark for deletion */
  msgno--;
  mud = (mailbox_unix_data_t) mbox->data;
  attribute_set_deleted (mud->umessages[msgno]->new_attr);
  return 0;
}

static int
mailbox_unix_num_deleted (mailbox_t mbox, size_t *num)
{
  mailbox_unix_data_t mud;
  mailbox_unix_message_t mum;
  size_t i, total;
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t) mbox->data) == NULL)
    return EINVAL;
  for (i = total = 0; i < mud->messages_count; i++)
    {
      mum = mud->umessages[i];
      if (attribute_is_deleted (mum->new_attr))
	total++;
    }

  if (num)
    *num = total;
  return 0;
}

static int
mailbox_unix_undelete (mailbox_t mbox, size_t msgno)
{
  mailbox_unix_data_t mud;
  int status = mailbox_unix_validity (mbox, msgno);
  if (status != 0)
    return status;

  /* if already undeleted, noop */
  if (! mailbox_unix_is_deleted (mbox, msgno))
    return 0;

  /* Mark undeletion */
  msgno--;
  mud = (mailbox_unix_data_t) mbox->data;
  attribute_unset_deleted (mud->umessages[msgno]->new_attr);
  return 0;
}

/*
  FIXME: the use of tmpfile() on some system can lead to
  race condition, We should use a safer approach.
  We take a very naive approach for this, it involves unfortunately
  two copies.
*/
static FILE *
mailbox_unix_tmpfile ()
{
  /*FIXME: racing conditions, to correct, .i.e don;t use tmpfile*/
  //return tmpfile ();
  return fopen ("/tmp/mumail", "w+");
}

static int
mailbox_unix_expunge (mailbox_t mbox)
{
  mailbox_unix_data_t mud;
  mailbox_unix_message_t mum;
  int status = 0;
  int oflags;
  sigset_t sigset;
  FILE *tmpfile;
  size_t nread;
  size_t i, j, first;
  off_t marker = 0;
  off_t total = 0;
  char buffer [BUFSIZ];

  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  /* noop */
  if (mud->messages_count == 0)
    return 0;

  tmpfile = mailbox_unix_tmpfile ();
  if (tmpfile == NULL)
    return errno;

  /* Get the lock */
  if (mailbox_unix_lock (mbox, MU_LOCKER_WRLOCK) < 0)
    {
      fclose (tmpfile);
      return ENOLCK;
    }

  /* FIXME: send notification to all the listeners */

  /* Critical section, we can not allowed signal here */
  /* FIXME: If NONBLOCKING is set we should unset reset to
   * later, we can not afford to luxury here
   */
  sigemptyset (&sigset);
  sigaddset (&sigset, SIGTERM);
  sigaddset (&sigset, SIGHUP);
  sigaddset (&sigset, SIGTSTP);
  sigaddset (&sigset, SIGINT);
  sigaddset (&sigset, SIGWINCH);
  sigprocmask (SIG_BLOCK, &sigset, 0);

  mailbox_unix_ilock (mbox, MU_LOCKER_RDLOCK);
  flockfile (mud->file);

  /* Do we have a consistent view of the mailbox */
  /* FIXME: this is not enough we can do better
   * - by checking the file size and scream bloody murder
   * if it has shrink.
   * - if its bigger we should be able to handle it
   * before the ftruncate() by copying back the new messages.
   */
  if (! mailbox_unix_is_updated (mbox))
    {
      status = EAGAIN;
      goto bailout;
    }

  /*
   * We can not be NONBLOCKING here.
   * It would irresponsable.
   */
  if ((oflags = fcntl (fileno (mud->file), F_GETFL, 0)) < 0)
    {
      status = errno;
      goto bailout;
    }
  fcntl (fileno (mud->file), F_SETFL, oflags & ~O_NONBLOCK);

  rewind (mud->file);

  /* Go to the first mail with an attribute change */
  for (j = 0; j < mud->messages_count; j++)
    {
      mum = mud->umessages[j];
      if (! attribute_is_equal (mum->old_attr, mum->new_attr))
	break;
    }

  /* did something change ? */
  if ((j + 1) == mud->messages_count)
    {
      /* nothing change, bail out */
      status = 0;
      goto bailout;
    }

  /* set the marker position */
  total = marker = mud->umessages[j]->header;

  /* copy to tempfile emails not mark changed */
  for (first = 1, i = j; i < mud->messages_count; i++)
    {
      size_t len;
      off_t current;
      mum = mud->umessages[i];

      /* skip it, if mark for deletion */
      if (attribute_is_deleted (mum->new_attr))
	continue;

      /* add a NL separator between messages */
      if (first)
	first = 0;
      else
	{
	  fputc ('\n', tmpfile);
	  total++;
	}
      /* copy the header */
      if (fseek (mud->file, mum->header, SEEK_SET) == -1)
	{
	  status = errno;
	  goto bailout;
	}
      /* attribute change ? */
      if (! attribute_is_equal (mum->old_attr, mum->new_attr) &&
	  mum->hdr_status > mum->header)
	{
	  len = mum->hdr_status - mum->header;
	  current = mum->hdr_status_end;
	  while (len > 0)
	    {
	      nread = (len < sizeof (buffer)) ? len : sizeof (buffer);
	      if (fread (buffer, sizeof (*buffer), nread, mud->file) != nread
		  || fwrite(buffer, sizeof(*buffer), nread, tmpfile) != nread)
		{
		  status = errno;
		  goto bailout;
		}
	      len -= nread;
	      total += nread;
	    }
	  /* put the new attributes */
	  {
	    attribute_t attr = mum->new_attr;
	    fputs ("Status: ", tmpfile);
	    total += 8;
	    if (attribute_is_seen (attr))
	      {
		fputc ('R', tmpfile);
		total++;
	      }
	    if (attribute_is_answered (attr))
	      {
		fputc ('A', tmpfile);
		total++;
	      }
	    if (attribute_is_flagged (attr))
	      {
		fputc ('F', tmpfile);
		total++;
	      }
	    if (attribute_is_read (attr))
	      {
		fputc ('O', tmpfile);
		total++;
	      }
	    fputc ('\n', tmpfile);
	    total++;
	  }
	  /* skip the status field */
	  if (fseek (mud->file, current, SEEK_SET) == -1)
	    {
	      status = errno;
	      goto bailout;
	    }
	}
      else /* attribute did not change */
	{
	  current = mum->header;
	}
      len = mum->header_end - current;
      while (len > 0)
	{
	  nread = (len < sizeof (buffer)) ? len : sizeof (buffer);
	  if (fread (buffer, sizeof (*buffer), nread, mud->file) != nread
	      || fwrite(buffer, sizeof(*buffer), nread, tmpfile) != nread)
	    {
	      status = errno;
	      goto bailout;
	    }
	  len -= nread;
	  total += nread;
	}

      /* Separate the header from body */
      fputc ('\n', tmpfile);
      total++;

      /* copy the body */
      if (fseek (mud->file, mum->body, SEEK_SET) < 0)
	{
	  status = errno;
	  goto bailout;
	}
      len = mum->body_end - mum->body;
      while (len > 0)
	{
	  nread = (len < sizeof (buffer)) ? len : sizeof (buffer);
	  if (fread (buffer, sizeof (*buffer), nread, mud->file) != nread
	      || fwrite(buffer, sizeof(*buffer), nread, tmpfile) != nread)
	    {
	      status = errno;
	      goto bailout;
	    }
	  len -= nread;
	  total += nread;
	}
    }

  /*
   * Caution:
   * before truncating the file see if we've receiving new mail
   * Some program may not respect the lock.
   */
  {
    struct stat st;
    if (fstat (fileno (mud->file), &st) != 0)
      {
	status = errno;
	goto bailout;
      }
    if (st.st_size > mud->size)
      {
	size_t len = st.st_size - mud->size;
	if (fseek (mud->file, mud->size, SEEK_SET) < 0)
	  {
	    status = errno;
	    goto bailout;
	  }
	while (len > 0)
	  {
	    nread = (len < sizeof (buffer)) ? len : sizeof (buffer);
	    if (fread (buffer, sizeof (*buffer), nread, mud->file) != nread
		|| fwrite(buffer, sizeof(*buffer), nread, tmpfile) != nread)
	      {
		status = errno;
		goto bailout;
	      }
	    len -= nread;
	    total += nread;
	  }
      }
  }
  /* truncate the mailbox and rewrite it */
  if (total <= 0 || fseek (mud->file, marker, SEEK_SET) < 0 ||
      ftruncate (fileno(mud->file), total) < 0)
    {
      status = errno;
      goto bailout;
    }
  rewind (tmpfile);

  while ((nread = fread (buffer, sizeof (*buffer),
			 sizeof (buffer), tmpfile)) != 0)
    fwrite (buffer, sizeof (*buffer), nread, mud->file);

  /* how can I handle error here ?? */
  clearerr (tmpfile);
  clearerr (mud->file);
  fflush (mud->file);

  /* FIXME: update the num of all the messages */

bailout:
  /* Release the locks */
  if (oflags > 0)
    fcntl (fileno (mud->file), F_SETFL, oflags);
  mailbox_unix_unlock (mbox);
  funlockfile (mud->file);
  mailbox_unix_iunlock (mbox);
  fclose (tmpfile);
  sigprocmask (SIG_UNBLOCK, &sigset, 0);
  return status;
}

static int
mailbox_unix_readstream (istream_t is, char *buffer, size_t buflen,
			off_t off, ssize_t *pnread)
{
  mailbox_unix_message_t mum;
  size_t nread = 0;

  if (is == NULL || (mum = (mailbox_unix_message_t)is->owner) == NULL)
    return EINVAL;

  if (buffer == NULL || buflen == 0)
    {
      if (pnread)
	*pnread = nread;
      return 0;
    }

  flockfile (mum->file);
  {
    off_t ln = mum->body_end - (mum->body + off);
    if (ln > 0)
      {
	nread = ((size_t)ln < buflen) ? ln : buflen;
	/* position the file pointer and the buffer */
	if (fseek (mum->file, mum->body + off, SEEK_SET) < 0)
	  {
	    funlockfile (mum->file);
	    return errno;
	  }
	if (fread (buffer, sizeof (*buffer), nread, mum->file) != nread)
	  {
	    funlockfile (mum->file);
	    return errno;
	  }
      }
    else
      nread = 0;
  }
  funlockfile (mum->file);

  if (pnread)
    *pnread = nread;
  return 0;
}

static int
mailbox_unix_get_header (mailbox_t mbox, size_t msgno, char *buffer,
			 size_t len, off_t off, ssize_t *pnread)
{
  mailbox_unix_data_t mud;
  size_t nread = 0;
  /* check if valid */
  int status = mailbox_unix_validity (mbox, msgno);
  if (status != 0)
    return status;

  mud = (mailbox_unix_data_t) mbox->data;
  msgno--;

  if (buffer == NULL || len == 0)
    {
      if (pnread)
	*pnread = nread;
      return 0;
    }

  mailbox_unix_ilock (mbox, MU_LOCKER_RDLOCK);
  flockfile (mud->file);
  {
    mailbox_unix_message_t mum = mud->umessages[msgno];
    off_t ln = mum->header_end - (mum->header + off);
    if (ln > 0)
      {
	nread = ((size_t)ln < len) ? ln : len;
	/* position the file pointer and the buffer */
	if (fseek (mud->file, mum->header + off, SEEK_SET) < 0)
	  {
	    funlockfile (mud->file);
	    mailbox_unix_iunlock (mbox);
	    return errno;
	  }
	if (fread (buffer, sizeof (*buffer), nread, mud->file) != nread)
	  {
	    funlockfile (mud->file);
	    mailbox_unix_iunlock (mbox);
	    return errno;
	  }
      }
    else
      nread = 0;
  }
  funlockfile (mud->file);
  mailbox_unix_iunlock (mbox);

  if (pnread)
    *pnread = nread;
  return 0;
}

static int
mailbox_unix_get_message (mailbox_t mbox, size_t msgno, message_t *pmsg)
{
  int status;
  ssize_t nread;
  char *pbuf = NULL;
  char *tbuf = NULL;
  char buf[BUFSIZ];
  off_t offset = 0;
  mailbox_unix_data_t mud;
  mailbox_unix_message_t mum;
  message_t msg = NULL;
  istream_t is = NULL;
  header_t header = NULL;

  if (mbox == NULL || pmsg == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL ||
      mailbox_unix_is_deleted (mbox, msgno))
    return EINVAL;

  mum = mud->umessages[msgno - 1];

  /* check if we already have it */
  if (mum->message)
    {
      if (pmsg)
	*pmsg = mum->message;
      return 0;
    }

  /* get the headers */
  do {
    status = mailbox_unix_get_header (mbox, msgno, buf, sizeof(buf),
				      offset, &nread);
    if (status != 0)
      {
	free (pbuf);
	return status;
      }

    if (nread == 0)
      break;

    tbuf = realloc (pbuf, offset + nread);
    if (tbuf == NULL)
      {
	free (pbuf);
	return ENOMEM;
      }
    else
      pbuf = tbuf;
    memcpy (pbuf + offset, buf, nread);
    offset += nread;
  } while (nread > 0);

  /* get an empty message struct */
  status = message_init (&msg, mum);
  if (status != 0)
    {
      free (pbuf);
      return status;
    }

  /* set the header */
  if ((status = header_init (&header, pbuf, offset, mum)) != 0 ||
      (status = message_set_header (msg, header, mum)) != 0)
    {
      free (pbuf);
      message_destroy (&msg, mum);
      return status;
    }
  free (pbuf);
  message_set_header (msg, header, mum);

  /* prepare the istream */
  if ((status = istream_init (&is, mailbox_unix_readstream, mum)) != 0 ||
      (status = message_set_istream (msg, is, mum)) != 0)
    {
      message_destroy (&msg, mum);
      return status;
    }

  /* set the attribute */
  status = message_set_attribute (msg, mum->new_attr, mum);
  if (status != 0)
    {
      message_destroy (&msg, mum);
      return status;
    }

  /* set the size */
  status = message_set_size (msg, mum->body_end - mum->body, mum);
  if (status != 0)
    {
      message_destroy (&msg, mum);
      return status;
    }

  /* attach the message to the mailbox unix data */
  mum->message = msg;

  if (pmsg)
    *pmsg = msg;
  return 0;
}

static int
mailbox_unix_append_message (mailbox_t mbox, message_t msg)
{
  mailbox_unix_data_t mud;
  if (mbox == NULL || msg == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  /* simple check on the flag */
  if (! ((mud->flags & MU_MAILBOX_APPEND) ||
	 (mud->flags & MU_MAILBOX_RDWR) ||
	 (mud->flags & MU_MAILBOX_WRONLY)))
    return EACCES;

  mailbox_unix_lock (mbox, MU_LOCKER_WRLOCK);
  flockfile (mud->file);
  {
    struct stat st;
    int fd;
    char buffer[BUFSIZ];
    size_t nread;
    off_t off = 0;
    istream_t is;
    header_t hdr;
    int status;

    fd = fileno (mud->file);
    if (fstat (fd, &st) != 0)
      {
	funlockfile (mud->file);
	mailbox_unix_unlock (mbox);
	return errno;
      }
    if (fseek(mud->file, st.st_size, SEEK_SET) != 0)
      {
	funlockfile (mud->file);
	mailbox_unix_unlock (mbox);
	return errno;
      }

    /* header */
    message_get_header (msg, &hdr);
    header_get_istream (hdr, &is);
    if (st.st_size != 0)
      fputc ('\n', mud->file);
    do {
      status = istream_read (is, buffer, sizeof (buffer), off, &nread);
      if (status != 0)
	return status;
      fwrite (buffer, sizeof (*buffer), nread, mud->file);
      off += nread;
    } while (nread > 0);

    *buffer = '\0';
    /* separator */
    fputc ('\n', mud->file);

    /* body */
    off = 0;
    message_get_istream (msg, &is);
    do {
      istream_read (is, buffer, sizeof (buffer), off, &nread);
      fwrite (buffer, sizeof (*buffer), nread, mud->file);
      off += nread;
    } while (nread > 0);
  }
  fflush(mud->file);
  funlockfile (mud->file);
  mailbox_unix_unlock (mbox);
  return 0;
}

static int
mailbox_unix_size (mailbox_t mbox, off_t *size)
{
  mailbox_unix_data_t mud;
  struct stat st;
  int fd;

  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;

  /* maybe was not open yet ?? */
  if (mud->file == NULL)
      return EIO;
  fd = fileno (mud->file);
  /* oops !! */
  if (fstat (fd, &st) != 0)
    return errno;
  *size = st.st_size;
  return 0;
}

static int
mailbox_unix_messages_count (mailbox_t mbox, size_t *count)
{
  mailbox_unix_data_t mud;
  if (mbox == NULL || (mud = (mailbox_unix_data_t) mbox->data) == NULL)
    return EINVAL;

  if (! mailbox_unix_is_updated (mbox))
    return mailbox_unix_scan (mbox,  1, count);

  if (count)
    *count = mud->messages_count;

  return 0;
}

/* locking */
static int
mailbox_unix_lock (mailbox_t mbox, int flag)
{
  if (mbox && mbox->locker != NULL)
    {
      locker_t locker = mbox->locker;
      locker_lock (locker, flag);
    }
  return 0;
}

static int
mailbox_unix_touchlock (mailbox_t mbox)
{
  if (mbox && mbox->locker != NULL)
    {
      locker_t locker = mbox->locker;
      locker_touchlock (locker);
    }
  return 0;
}

static int
mailbox_unix_unlock (mailbox_t mbox)
{
  if (mbox && mbox->locker != NULL)
    {
      locker_t locker = mbox->locker;
      locker_unlock (locker);
    }
  return 0;
}

static int
mailbox_unix_ilock (mailbox_t mbox, int flag)
{
#ifdef HAVE_PTHREAD_H
  mailbox_unix_data_t mud;
  (void)flag; /* we should use rwlocks for more concurency */
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;
  return pthread_mutex_lock (&(mud->mutex));
#else
  (void)mbox; (void)flag;
  return 0;
#endif
}

static int
mailbox_unix_iunlock (mailbox_t mbox)
{
#ifdef HAVE_PTHREAD_H
  mailbox_unix_data_t mud;
  if (mbox == NULL ||
      (mud = (mailbox_unix_data_t)mbox->data) == NULL)
    return EINVAL;
  return pthread_mutex_unlock (&(mud->mutex));
#else
  (void)mbox;
  return 0;
#endif
}