X-Git-Url: http://www.dolda2000.com/gitweb/?p=ashd.git;a=blobdiff_plain;f=src%2Fhtparser.c;h=1ed91754f78f36d62c6de672fb7c1a06a9a3fff8;hp=17ad93abc7234142a3e11e54a5bab85fd3dc93ad;hb=90b0ba0f9d93e454cc08a566b718abdcbfd0d9f6;hpb=43c58ba25e47635c8f44e6b1cbda9247219a16b5 diff --git a/src/htparser.c b/src/htparser.c index 17ad93a..1ed9175 100644 --- a/src/htparser.c +++ b/src/htparser.c @@ -19,9 +19,11 @@ #include #include #include +#include #include #include #include +#include #include #ifdef HAVE_CONFIG_H @@ -38,6 +40,7 @@ static int plex; static char *pidfile = NULL; +static int daemonize, usesyslog; static void trimx(struct hthead *req) { @@ -74,6 +77,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(method, c); + if(method.d >= 128) + goto fail; } } while(1) { @@ -84,6 +89,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(url, c); + if(url.d >= 65536) + goto fail; } } while(1) { @@ -95,6 +102,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(ver, c); + if(ver.d >= 128) + goto fail; } } bufadd(method, 0); @@ -271,13 +280,19 @@ void serve(FILE *in, struct conn *conn) if((resp = parseresp(out)) == NULL) break; replstr(&resp->ver, req->ver); + + if(!getheader(resp, "server")) + headappheader(resp, "Server", sprintf3("ashd/%s", VERSION)); if(!strcmp(req->ver, "HTTP/1.0")) { writeresp(in, resp); fprintf(in, "\r\n"); - if((hd = getheader(resp, "content-length")) != NULL) { - dlen = passdata(out, in, -1); - if(dlen != atoo(hd)) + if(!strcasecmp(req->method, "head")) { + if(!hasheader(req, "connection", "keep-alive")) + break; + } else if((hd = getheader(resp, "content-length")) != NULL) { + dlen = atoo(hd); + if(passdata(out, in, dlen) != dlen) break; if(!hasheader(req, "connection", "keep-alive")) break; @@ -288,11 +303,14 @@ void serve(FILE *in, struct conn *conn) if(hasheader(req, "connection", "close") || hasheader(resp, "connection", "close")) break; } else if(!strcmp(req->ver, "HTTP/1.1")) { - if((hd = getheader(resp, "content-length")) != NULL) { + if(!strcasecmp(req->method, "head")) { writeresp(in, resp); fprintf(in, "\r\n"); - dlen = passdata(out, in, -1); - if(dlen != atoo(hd)) + } else if((hd = getheader(resp, "content-length")) != NULL) { + writeresp(in, resp); + fprintf(in, "\r\n"); + dlen = atoo(hd); + if(passdata(out, in, dlen) != dlen) break; } else if(!getheader(resp, "transfer-encoding")) { headappheader(resp, "Transfer-Encoding", "chunked"); @@ -350,6 +368,26 @@ static void plexwatch(struct muth *muth, va_list args) } } +static void initroot(void *uu) +{ + int fd; + + if(daemonize) { + setsid(); + chdir("/"); + if((fd = open("/dev/null", O_RDWR)) >= 0) { + dup2(fd, 0); + dup2(fd, 1); + dup2(fd, 2); + close(fd); + } + } + if(usesyslog) + putenv("ASHD_USESYSLOG=1"); + else + unsetenv("ASHD_USESYSLOG"); +} + static void usage(FILE *out) { fprintf(out, "usage: htparser [-hSf] [-u USER] [-r ROOT] [-p PIDFILE] PORTSPEC... -- ROOT [ARGS...]\n"); @@ -406,12 +444,11 @@ int main(int argc, char **argv) { int c; int i, s1; - int daemonize, logsys; char *root; FILE *pidout; struct passwd *pwent; - daemonize = logsys = 0; + daemonize = usesyslog = 0; root = NULL; pwent = NULL; while((c = getopt(argc, argv, "+hSfu:r:p:")) >= 0) { @@ -423,7 +460,7 @@ int main(int argc, char **argv) daemonize = 1; break; case 'S': - logsys = 1; + usesyslog = 1; break; case 'u': if((pwent = getpwnam(optarg)) == NULL) { @@ -453,7 +490,7 @@ int main(int argc, char **argv) usage(stderr); exit(1); } - if((plex = stdmkchild(argv + ++i)) < 0) { + if((plex = stdmkchild(argv + ++i, initroot, NULL)) < 0) { flog(LOG_ERR, "could not spawn root multiplexer: %s", strerror(errno)); return(1); } @@ -465,10 +502,10 @@ int main(int argc, char **argv) return(1); } } - if(logsys) + if(usesyslog) opensyslog(); if(root) { - if(chroot(root)) { + if(chdir(root) || chroot(root)) { flog(LOG_ERR, "could not chroot to %s: %s", root, strerror(errno)); exit(1); } @@ -483,12 +520,14 @@ int main(int argc, char **argv) exit(1); } } + signal(SIGPIPE, SIG_IGN); if(daemonize) { daemon(0, 0); } - if(pidout != NULL) + if(pidout != NULL) { fprintf(pidout, "%i\n", getpid()); - fclose(pidout); + fclose(pidout); + } ioloop(); return(0); }