X-Git-Url: http://www.dolda2000.com/gitweb/?p=ashd.git;a=blobdiff_plain;f=src%2Fhtparser.c;h=de5bbc2a61f32f93fa1ebe1db51c197fcd857840;hp=9f02adea02fe44c7463fc22d9709229fc7f5ea87;hb=ecd4208b888be7f60bc2ae013b799861959b7cb9;hpb=f9255ddd4966787957cb8eb676155d99883d7955 diff --git a/src/htparser.c b/src/htparser.c index 9f02ade..de5bbc2 100644 --- a/src/htparser.c +++ b/src/htparser.c @@ -19,10 +19,11 @@ #include #include #include +#include #include #include -#include -#include +#include +#include #include #ifdef HAVE_CONFIG_H @@ -35,54 +36,28 @@ #include #include -static int plex; +#include "htparser.h" -static int listensock4(int port) -{ - struct sockaddr_in name; - int fd; - int valbuf; - - memset(&name, 0, sizeof(name)); - name.sin_family = AF_INET; - name.sin_port = htons(port); - if((fd = socket(PF_INET, SOCK_STREAM, 0)) < 0) - return(-1); - valbuf = 1; - setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &valbuf, sizeof(valbuf)); - if(bind(fd, (struct sockaddr *)&name, sizeof(name))) { - close(fd); - return(-1); - } - if(listen(fd, 16) < 0) { - close(fd); - return(-1); - } - return(fd); -} +static int plex; +static char *pidfile = NULL; +static int daemonize, usesyslog; +struct mtbuf listeners; -static int listensock6(int port) +static void trimx(struct hthead *req) { - struct sockaddr_in6 name; - int fd; - int valbuf; + int i; - memset(&name, 0, sizeof(name)); - name.sin6_family = AF_INET6; - name.sin6_port = htons(port); - if((fd = socket(PF_INET6, SOCK_STREAM, 0)) < 0) - return(-1); - valbuf = 1; - setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &valbuf, sizeof(valbuf)); - if(bind(fd, (struct sockaddr *)&name, sizeof(name))) { - close(fd); - return(-1); - } - if(listen(fd, 16) < 0) { - close(fd); - return(-1); + i = 0; + while(i < req->noheaders) { + if(!strncasecmp(req->headers[i][0], "x-ash-", 6)) { + free(req->headers[i][0]); + free(req->headers[i][1]); + free(req->headers[i]); + memmove(req->headers + i, req->headers + i + 1, sizeof(*req->headers) * (--req->noheaders - i)); + } else { + i++; + } } - return(fd); } static struct hthead *parsereq(FILE *in) @@ -103,6 +78,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(method, c); + if(method.d >= 128) + goto fail; } } while(1) { @@ -113,6 +90,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(url, c); + if(url.d >= 65536) + goto fail; } } while(1) { @@ -124,6 +103,8 @@ static struct hthead *parsereq(FILE *in) goto fail; } else { bufadd(ver, c); + if(ver.d >= 128) + goto fail; } } bufadd(method, 0); @@ -132,6 +113,7 @@ static struct hthead *parsereq(FILE *in) req = mkreq(method.b, url.b, ver.b); if(parseheaders(req, in)) goto fail; + trimx(req); goto out; fail: @@ -146,66 +128,6 @@ out: return(req); } -static struct hthead *parseresp(FILE *in) -{ - struct hthead *req; - int code; - struct charbuf ver, msg; - int c; - - req = NULL; - bufinit(ver); - bufinit(msg); - code = 0; - while(1) { - c = getc(in); - if(c == ' ') { - break; - } else if((c == EOF) || (c < 32) || (c >= 128)) { - goto fail; - } else { - bufadd(ver, c); - } - } - while(1) { - c = getc(in); - if(c == ' ') { - break; - } else if((c == EOF) || (c < '0') || (c > '9')) { - goto fail; - } else { - code = (code * 10) + (c - '0'); - } - } - while(1) { - c = getc(in); - if(c == 10) { - break; - } else if(c == 13) { - } else if((c == EOF) || (c < 32)) { - goto fail; - } else { - bufadd(msg, c); - } - } - bufadd(msg, 0); - bufadd(ver, 0); - req = mkresp(code, msg.b, ver.b); - if(parseheaders(req, in)) - goto fail; - goto out; - -fail: - if(req != NULL) { - freehthead(req); - req = NULL; - } -out: - buffree(msg); - buffree(ver); - return(req); -} - static off_t passdata(FILE *in, FILE *out, off_t max) { size_t read; @@ -227,6 +149,59 @@ static off_t passdata(FILE *in, FILE *out, off_t max) return(total); } +static int recvchunks(FILE *in, FILE *out) +{ + char buf[8192]; + size_t read, chlen; + int c, r; + + while(1) { + chlen = 0; + r = 0; + while(1) { + c = getc(in); + if(c == 10) { + if(!r) + return(-1); + break; + } else if(c == 13) { + } else if((c >= '0') && (c <= '9')) { + chlen = (chlen << 4) + (c - '0'); + r = 1; + } else if((c >= 'A') && (c <= 'F')) { + chlen = (chlen << 4) + (c + 10 - 'A'); + r = 1; + } else if((c >= 'a') && (c <= 'f')) { + chlen = (chlen << 4) + (c + 10 - 'a'); + r = 1; + } else { + /* XXX: Technically, there may be chunk extensions to + * be read, but since that will likely never actually + * happen in practice, I can just as well add support + * for that if it actually does become relevant. */ + return(-1); + } + } + if(chlen == 0) + break; + while(chlen > 0) { + read = fread(buf, 1, min(sizeof(buf), chlen), in); + if(feof(in) || ferror(in)) + return(-1); + if(fwrite(buf, 1, read, out) != read) + return(-1); + chlen -= read; + } + if((getc(in) != 13) || (getc(in) != 10)) + return(-1); + } + /* XXX: Technically, there may be trailers to be read, but that's + * just about as likely as chunk extensions. */ + if((getc(in) != 13) || (getc(in) != 10)) + return(-1); + return(0); +} + static int passchunks(FILE *in, FILE *out) { char buf[8192]; @@ -253,38 +228,79 @@ static int hasheader(struct hthead *head, char *name, char *val) return(!strcasecmp(hd, val)); } -static void serve(struct muth *muth, va_list args) +static int canonreq(struct hthead *req) +{ + char *p, *p2, *r; + int n; + + if(req->url[0] == '/') { + replrest(req, req->url + 1); + if((p = strchr(req->rest, '?')) != NULL) + *p = 0; + return(1); + } + if((p = strstr(req->url, "://")) != NULL) { + n = p - req->url; + if(((n == 4) && !strncasecmp(req->url, "http", 4)) || + ((n == 5) && !strncasecmp(req->url, "https", 5))) { + if(getheader(req, "host")) + return(0); + p += 3; + if((p2 = strchr(p, '/')) == NULL) { + headappheader(req, "Host", p); + free(req->url); + req->url = sstrdup("/"); + } else { + r = sstrdup(p2); + *(p2++) = 0; + headappheader(req, "Host", p); + free(req->url); + req->url = r; + } + replrest(req, req->url + 1); + if((p = strchr(req->rest, '?')) != NULL) + *p = 0; + return(1); + } + } + return(0); +} + +static int http10keep(struct hthead *req, struct hthead *resp) +{ + int fc; + + fc = hasheader(resp, "connection", "close"); + headrmheader(resp, "connection"); + if(!fc && hasheader(req, "connection", "keep-alive")) { + headappheader(resp, "Connection", "Keep-Alive"); + return(1); + } else { + return(0); + } +} + +void serve(FILE *in, struct conn *conn) { - vavar(int, fd); - vavar(struct sockaddr_storage, name); int pfds[2]; - FILE *in, *out; + FILE *out; struct hthead *req, *resp; - char nmbuf[256]; - char *hd, *p; + char *hd; off_t dlen; + int keep; - in = mtstdopen(fd, 1, 60, "r+"); out = NULL; req = resp = NULL; - while(1) { + while(plex >= 0) { if((req = parsereq(in)) == NULL) break; - replrest(req, req->url); - if(req->rest[0] == '/') - replrest(req, req->rest + 1); - if((p = strchr(req->rest, '?')) != NULL) - *p = 0; + if(!canonreq(req)) + break; - if(name.ss_family == AF_INET) { - headappheader(req, "X-Ash-Address", inet_ntop(AF_INET, &((struct sockaddr_in *)&name)->sin_addr, nmbuf, sizeof(nmbuf))); - headappheader(req, "X-Ash-Port", sprintf3("%i", ntohs(((struct sockaddr_in *)&name)->sin_port))); - } else if(name.ss_family == AF_INET6) { - headappheader(req, "X-Ash-Address", inet_ntop(AF_INET6, &((struct sockaddr_in6 *)&name)->sin6_addr, nmbuf, sizeof(nmbuf))); - headappheader(req, "X-Ash-Port", sprintf3("%i", ntohs(((struct sockaddr_in6 *)&name)->sin6_port))); - } - - if(block(plex, EV_WRITE, 60) <= 0) + if((conn->initreq != NULL) && conn->initreq(conn, req)) + break; + + if((plex < 0) || block(plex, EV_WRITE, 60) <= 0) break; if(socketpair(PF_UNIX, SOCK_STREAM, 0, pfds)) break; @@ -293,11 +309,19 @@ static void serve(struct muth *muth, va_list args) close(pfds[0]); out = mtstdopen(pfds[1], 1, 600, "r+"); - if((hd = getheader(req, "content-length")) != NULL) { - dlen = atoo(hd); - if(dlen > 0) { - if(passdata(in, out, dlen) != dlen) + if(getheader(req, "content-type") != NULL) { + if((hd = getheader(req, "content-length")) != NULL) { + dlen = atoo(hd); + if(dlen > 0) { + if(passdata(in, out, dlen) != dlen) + break; + } + } else if(((hd = getheader(req, "transfer-encoding")) != NULL) && !strcasecmp(hd, "chunked")) { + if(recvchunks(in, out)) break; + } else { + /* Ignore rather than abort, to be kinder to broken clients. */ + headrmheader(req, "content-type"); } } if(fflush(out)) @@ -305,31 +329,43 @@ static void serve(struct muth *muth, va_list args) /* Make sure to send EOF */ shutdown(pfds[1], SHUT_WR); - if((resp = parseresp(out)) == NULL) + if((resp = parseresponse(out)) == NULL) break; replstr(&resp->ver, req->ver); + + if(!getheader(resp, "server")) + headappheader(resp, "Server", sprintf3("ashd/%s", VERSION)); - if(!strcmp(req->ver, "HTTP/1.0")) { - writeresp(in, resp); - fprintf(in, "\r\n"); - if((hd = getheader(resp, "content-length")) != NULL) { - dlen = passdata(out, in, -1); - if(dlen != atoo(hd)) - break; - if(!hasheader(req, "connection", "keep-alive")) + if(!strcasecmp(req->ver, "HTTP/1.0")) { + if(!strcasecmp(req->method, "head")) { + keep = http10keep(req, resp); + writeresp(in, resp); + fprintf(in, "\r\n"); + } else if((hd = getheader(resp, "content-length")) != NULL) { + keep = http10keep(req, resp); + dlen = atoo(hd); + writeresp(in, resp); + fprintf(in, "\r\n"); + if(passdata(out, in, dlen) != dlen) break; } else { + headrmheader(resp, "connection"); + writeresp(in, resp); + fprintf(in, "\r\n"); passdata(out, in, -1); break; } - if(hasheader(req, "connection", "close") || hasheader(resp, "connection", "close")) + if(!keep) break; - } else if(!strcmp(req->ver, "HTTP/1.1")) { - if((hd = getheader(resp, "content-length")) != NULL) { + } else if(!strcasecmp(req->ver, "HTTP/1.1")) { + if(!strcasecmp(req->method, "head")) { + writeresp(in, resp); + fprintf(in, "\r\n"); + } else if((hd = getheader(resp, "content-length")) != NULL) { writeresp(in, resp); fprintf(in, "\r\n"); - dlen = passdata(out, in, -1); - if(dlen != atoo(hd)) + dlen = atoo(hd); + if(passdata(out, in, dlen) != dlen) break; } else if(!getheader(resp, "transfer-encoding")) { headappheader(resp, "Transfer-Encoding", "chunked"); @@ -365,76 +401,222 @@ static void serve(struct muth *muth, va_list args) fclose(in); } -static void listenloop(struct muth *muth, va_list args) -{ - vavar(int, ss); - int ns; - struct sockaddr_storage name; - socklen_t namelen; - - while(1) { - namelen = sizeof(name); - block(ss, EV_READ, 0); - ns = accept(ss, (struct sockaddr *)&name, &namelen); - if(ns < 0) { - flog(LOG_ERR, "accept: %s", strerror(errno)); - goto out; - } - mustart(serve, ns, name); - } - -out: - close(ss); -} - static void plexwatch(struct muth *muth, va_list args) { vavar(int, fd); char *buf; - int ret; + int i, ret; while(1) { - block(fd, EV_READ, 0); + if(block(fd, EV_READ, 0) == 0) + break; buf = smalloc(65536); ret = recv(fd, buf, 65536, 0); if(ret < 0) { flog(LOG_WARNING, "received error on rootplex read channel: %s", strerror(errno)); exit(1); } else if(ret == 0) { - exit(0); + free(buf); + break; } /* Maybe I'd like to implement some protocol in this direction * some day... */ free(buf); } + shutdown(plex, SHUT_RDWR); + for(i = 0; i < listeners.d; i++) { + if(listeners.b[i] == muth) + bufdel(listeners, i); + } + flog(LOG_INFO, "root handler exited, so shutting down listening..."); + while(listeners.d > 0) + resume(listeners.b[0], 0); } -int main(int argc, char **argv) +static void initroot(void *uu) { int fd; - if(argc < 2) { - fprintf(stderr, "usage: htparser ROOT [ARGS...]\n"); + setsid(); + if(daemonize) { + chdir("/"); + if((fd = open("/dev/null", O_RDWR)) >= 0) { + dup2(fd, 0); + dup2(fd, 1); + dup2(fd, 2); + close(fd); + } + } + if(usesyslog) + putenv("ASHD_USESYSLOG=1"); + else + unsetenv("ASHD_USESYSLOG"); +} + +static void usage(FILE *out) +{ + fprintf(out, "usage: htparser [-hSf] [-u USER] [-r ROOT] [-p PIDFILE] PORTSPEC... -- ROOT [ARGS...]\n"); + fprintf(out, "\twhere PORTSPEC is HANDLER[:PAR[=VAL][(,PAR[=VAL])...]] (try HANDLER:help)\n"); + fprintf(out, "\tavailable handlers are `plain' and `ssl'.\n"); +} + +static void addport(char *spec) +{ + char *nm, *p, *p2, *n; + struct charvbuf pars, vals; + + bufinit(pars); + bufinit(vals); + if((p = strchr(spec, ':')) == NULL) { + nm = spec; + } else { + nm = spec; + *(p++) = 0; + do { + if((n = strchr(p, ',')) != NULL) + *(n++) = 0; + if((p2 = strchr(p, '=')) != NULL) + *(p2++) = 0; + if(!*p) { + usage(stderr); + exit(1); + } + bufadd(pars, p); + if(p2) + bufadd(vals, p2); + else + bufadd(vals, ""); + } while((p = n) != NULL); + } + + /* XXX: It would be nice to decentralize this, but, meh... */ + if(!strcmp(nm, "plain")) { + handleplain(pars.d, pars.b, vals.b); +#ifdef HAVE_GNUTLS + } else if(!strcmp(nm, "ssl")) { + handlegnussl(pars.d, pars.b, vals.b); +#endif + } else { + flog(LOG_ERR, "htparser: unknown port handler `%s'", nm); exit(1); } - if((plex = stdmkchild(argv + 1)) < 0) { - flog(LOG_ERR, "could not spawn root multiplexer: %s", strerror(errno)); - return(1); + + buffree(pars); + buffree(vals); +} + +static void sighandler(int sig) +{ + exitioloop(1); +} + +int main(int argc, char **argv) +{ + int c, d; + int i, s1; + char *root; + FILE *pidout; + struct passwd *pwent; + + daemonize = usesyslog = 0; + root = NULL; + pwent = NULL; + while((c = getopt(argc, argv, "+hSfu:r:p:")) >= 0) { + switch(c) { + case 'h': + usage(stdout); + exit(0); + case 'f': + daemonize = 1; + break; + case 'S': + usesyslog = 1; + break; + case 'u': + if((pwent = getpwnam(optarg)) == NULL) { + flog(LOG_ERR, "could not find user %s", optarg); + exit(1); + } + break; + case 'r': + root = optarg; + break; + case 'p': + pidfile = optarg; + break; + default: + usage(stderr); + exit(1); + } + } + s1 = 0; + for(i = optind; i < argc; i++) { + if(!strcmp(argv[i], "--")) + break; + s1 = 1; + addport(argv[i]); + } + if(!s1 || (i == argc)) { + usage(stderr); + exit(1); } - if((fd = listensock6(8080)) < 0) { - flog(LOG_ERR, "could not listen on IPv6: %s", strerror(errno)); + if((plex = stdmkchild(argv + ++i, initroot, NULL)) < 0) { + flog(LOG_ERR, "could not spawn root multiplexer: %s", strerror(errno)); return(1); } - mustart(listenloop, fd); - if((fd = listensock4(8080)) < 0) { - if(errno != EADDRINUSE) { - flog(LOG_ERR, "could not listen on IPv4: %s", strerror(errno)); + bufadd(listeners, mustart(plexwatch, plex)); + pidout = NULL; + if(pidfile != NULL) { + if((pidout = fopen(pidfile, "w")) == NULL) { + flog(LOG_ERR, "could not open %s for writing: %s", pidfile, strerror(errno)); return(1); } - } else { - mustart(listenloop, fd); } - mustart(plexwatch, plex); - ioloop(); + if(usesyslog) + opensyslog(); + if(root) { + if(chdir(root) || chroot(root)) { + flog(LOG_ERR, "could not chroot to %s: %s", root, strerror(errno)); + exit(1); + } + } + if(pwent) { + if(setgid(pwent->pw_gid)) { + flog(LOG_ERR, "could not switch group to %i: %s", (int)pwent->pw_gid, strerror(errno)); + exit(1); + } + if(setuid(pwent->pw_uid)) { + flog(LOG_ERR, "could not switch user to %i: %s", (int)pwent->pw_uid, strerror(errno)); + exit(1); + } + } + signal(SIGPIPE, SIG_IGN); + signal(SIGCHLD, SIG_IGN); + signal(SIGINT, sighandler); + signal(SIGTERM, sighandler); + if(daemonize) { + daemon(0, 0); + } + if(pidout != NULL) { + fprintf(pidout, "%i\n", getpid()); + fclose(pidout); + } + d = 0; + while(!d) { + switch(ioloop()) { + case 0: + d = 1; + break; + case 1: + if(listeners.d > 0) { + while(listeners.d > 0) + resume(listeners.b[0], 0); + flog(LOG_INFO, "no longer listening"); + } else { + d = 1; + } + break; + } + } return(0); }