blob: bf3da36d99d760caf341aafbd6f6a08b472c0c01 [file] [log] [blame]
Bernhard Reutner-Fischer2c998512006-04-12 18:09:26 +00001/* vi: set sw=4 ts=4: */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002/*
3 * httpd implementation for busybox
4 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00005 * Copyright (C) 2002,2003 Glenn Engel <glenne@engel.org>
"Vladimir N. Oleynik"79af7d52006-01-26 10:58:12 +00006 * Copyright (C) 2003-2006 Vladimir Oleynik <dzo@simtreas.ru>
Glenn L McGrath58c708a2003-01-05 04:01:56 +00007 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00008 * simplify patch stolen from libbb without using strdup
Glenn L McGrath58c708a2003-01-05 04:01:56 +00009 *
Bernhard Reutner-Fischerdac7ff12006-04-12 17:55:51 +000010 * Licensed under GPLv2 or later, see file LICENSE in this tarball for details.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000011 *
12 *****************************************************************************
13 *
Glenn L McGrath06e95652003-02-09 06:51:14 +000014 * Typical usage:
15 * for non root user
16 * httpd -p 8080 -h $HOME/public_html
17 * or for daemon start from rc script with uid=0:
18 * httpd -u www
19 * This is equivalent if www user have uid=80 to
20 * httpd -p 80 -u 80 -h /www -c /etc/httpd.conf -r "Web Server Authentication"
21 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +000022 *
23 * When a url contains "cgi-bin" it is assumed to be a cgi script. The
24 * server changes directory to the location of the script and executes it
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +000025 * after setting QUERY_STRING and other environment variables.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000026 *
Denis Vlasenko8b458372006-11-21 21:23:21 +000027 * Doc:
28 * "CGI Environment Variables": http://hoohoo.ncsa.uiuc.edu/cgi/env.html
29 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +000030 * The server can also be invoked as a url arg decoder and html text encoder
31 * as follows:
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000032 * foo=`httpd -d $foo` # decode "Hello%20World" as "Hello World"
Glenn L McGrathc9163fe2003-05-13 16:20:11 +000033 * bar=`httpd -e "<Hello World>"` # encode as "&#60Hello&#32World&#62"
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000034 * Note that url encoding for arguments is not the same as html encoding for
Eric Andersenaff114c2004-04-14 17:51:38 +000035 * presentation. -d decodes a url-encoded argument while -e encodes in html
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000036 * for page display.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000037 *
38 * httpd.conf has the following format:
Eric Andersenc7bda1c2004-03-15 08:29:22 +000039 *
Glenn L McGrathb65422c2003-09-08 10:59:27 +000040 * A:172.20. # Allow address from 172.20.0.0/16
41 * A:10.0.0.0/25 # Allow any address from 10.0.0.0-10.0.0.127
42 * A:10.0.0.0/255.255.255.128 # Allow any address that previous set
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000043 * A:127.0.0.1 # Allow local loopback connections
44 * D:* # Deny from other IP connections
45 * /cgi-bin:foo:bar # Require user foo, pwd bar on urls starting with /cgi-bin/
46 * /adm:admin:setup # Require user admin, pwd setup on urls starting with /adm/
47 * /adm:toor:PaSsWd # or user toor, pwd PaSsWd on urls starting with /adm/
48 * .au:audio/basic # additional mime type for audio.au files
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +000049 * *.php:/path/php # running cgi.php scripts through an interpreter
Eric Andersenc7bda1c2004-03-15 08:29:22 +000050 *
Eric Andersenaff114c2004-04-14 17:51:38 +000051 * A/D may be as a/d or allow/deny - first char case insensitive
Glenn L McGrath393183d2003-05-26 14:07:50 +000052 * Deny IP rules take precedence over allow rules.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000053 *
54 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000055 * The Deny/Allow IP logic:
Eric Andersenc7bda1c2004-03-15 08:29:22 +000056 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000057 * - Default is to allow all. No addresses are denied unless
Eric Andersen97a1de12004-08-26 22:22:50 +000058 * denied with a D: rule.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000059 * - Order of Deny/Allow rules is significant
60 * - Deny rules take precedence over allow rules.
61 * - If a deny all rule (D:*) is used it acts as a catch-all for unmatched
Eric Andersen97a1de12004-08-26 22:22:50 +000062 * addresses.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000063 * - Specification of Allow all (A:*) is a no-op
Eric Andersenc7bda1c2004-03-15 08:29:22 +000064 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000065 * Example:
66 * 1. Allow only specified addresses
Glenn L McGrathb65422c2003-09-08 10:59:27 +000067 * A:172.20 # Allow any address that begins with 172.20.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000068 * A:10.10. # Allow any address that begins with 10.10.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000069 * A:127.0.0.1 # Allow local loopback connections
70 * D:* # Deny from other IP connections
Eric Andersenc7bda1c2004-03-15 08:29:22 +000071 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000072 * 2. Only deny specified addresses
73 * D:1.2.3. # deny from 1.2.3.0 - 1.2.3.255
74 * D:2.3.4. # deny from 2.3.4.0 - 2.3.4.255
75 * A:* # (optional line added for clarity)
Eric Andersenc7bda1c2004-03-15 08:29:22 +000076 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000077 * If a sub directory contains a config file it is parsed and merged with
Glenn L McGrathb65422c2003-09-08 10:59:27 +000078 * any existing settings as if it was appended to the original configuration.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000079 *
80 * subdir paths are relative to the containing subdir and thus cannot
81 * affect the parent rules.
82 *
83 * Note that since the sub dir is parsed in the forked thread servicing the
84 * subdir http request, any merge is discarded when the process exits. As a
85 * result, the subdir settings only have a lifetime of a single request.
86 *
Eric Andersenc7bda1c2004-03-15 08:29:22 +000087 *
88 * If -c is not set, an attempt will be made to open the default
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000089 * root configuration file. If -c is set and the file is not found, the
90 * server exits with an error.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000091 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000092*/
Glenn L McGrath58c708a2003-01-05 04:01:56 +000093
Glenn L McGrath06e95652003-02-09 06:51:14 +000094#include "busybox.h"
Glenn L McGrath58c708a2003-01-05 04:01:56 +000095
Eric Andersen07f2fea2004-10-08 08:03:29 +000096static const char httpdVersion[] = "busybox httpd/1.35 6-Oct-2004";
Glenn L McGrathc9163fe2003-05-13 16:20:11 +000097static const char default_path_httpd_conf[] = "/etc";
Glenn L McGrath06e95652003-02-09 06:51:14 +000098static const char httpd_conf[] = "httpd.conf";
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000099static const char home[] = "./";
Glenn L McGrath06e95652003-02-09 06:51:14 +0000100
Eric Andersen07f2fea2004-10-08 08:03:29 +0000101#define TIMEOUT 60
102
Eric Andersenaff114c2004-04-14 17:51:38 +0000103// Note: busybox xfuncs are not used because we want the server to keep running
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000104// if something bad happens due to a malformed user request.
Glenn L McGrath06e95652003-02-09 06:51:14 +0000105// As a result, all memory allocation after daemonize
106// is checked rigorously
107
108//#define DEBUG 1
109
"Vladimir N. Oleynik"6b903a22005-12-20 11:02:54 +0000110#ifndef DEBUG
111# define DEBUG 0
112#endif
113
Glenn L McGrath06e95652003-02-09 06:51:14 +0000114#define MAX_MEMORY_BUFF 8192 /* IO buffer */
115
116typedef struct HT_ACCESS {
117 char *after_colon;
118 struct HT_ACCESS *next;
119 char before_colon[1]; /* really bigger, must last */
120} Htaccess;
121
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000122typedef struct HT_ACCESS_IP {
123 unsigned int ip;
124 unsigned int mask;
125 int allow_deny;
126 struct HT_ACCESS_IP *next;
127} Htaccess_IP;
128
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000129typedef struct {
130 char buf[MAX_MEMORY_BUFF];
Glenn L McGrath06e95652003-02-09 06:51:14 +0000131
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000132 USE_FEATURE_HTTPD_BASIC_AUTH(const char *realm;)
133 USE_FEATURE_HTTPD_BASIC_AUTH(char *remoteuser;)
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000134
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000135 const char *query;
Eric Andersen07f2fea2004-10-08 08:03:29 +0000136
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000137 USE_FEATURE_HTTPD_CGI(char *referer;)
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000138
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000139 const char *configFile;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000140
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000141 unsigned int rmt_ip;
Denis Vlasenko55a99402006-09-30 20:41:44 +0000142#if ENABLE_FEATURE_HTTPD_CGI || DEBUG
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000143 char rmt_ip_str[16]; /* for set env REMOTE_ADDR */
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000144#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000145 unsigned port; /* server initial port and for
146 set env REMOTE_PORT */
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +0000147 const char *found_mime_type;
148 const char *found_moved_temporarily;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000149
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000150 off_t ContentLength; /* -1 - unknown */
151 time_t last_mod;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000152
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000153 Htaccess_IP *ip_a_d; /* config allow/deny lines */
154 int flg_deny_all;
Denis Vlasenko55a99402006-09-30 20:41:44 +0000155#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000156 Htaccess *auth; /* config user:password lines */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000157#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000158#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000159 Htaccess *mime_a; /* config mime types */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000160#endif
161
Denis Vlasenko9f609292006-11-05 19:47:33 +0000162 int server_socket;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000163 int accepted_socket;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000164 volatile int alarm_signaled;
Eric Andersen07f2fea2004-10-08 08:03:29 +0000165
Denis Vlasenko55a99402006-09-30 20:41:44 +0000166#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000167 Htaccess *script_i; /* config script interpreters */
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000168#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000169} HttpdConfig;
170
171static HttpdConfig *config;
172
Mike Frysingerfa6c4842006-05-26 01:48:17 +0000173static const char request_GET[] = "GET"; /* size algorithmic optimize */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000174
175static const char* const suffixTable [] = {
Eric Andersenaff114c2004-04-14 17:51:38 +0000176/* Warning: shorted equivalent suffix in one line must be first */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000177 ".htm.html", "text/html",
178 ".jpg.jpeg", "image/jpeg",
179 ".gif", "image/gif",
180 ".png", "image/png",
181 ".txt.h.c.cc.cpp", "text/plain",
182 ".css", "text/css",
183 ".wav", "audio/wav",
184 ".avi", "video/x-msvideo",
185 ".qt.mov", "video/quicktime",
186 ".mpe.mpeg", "video/mpeg",
187 ".mid.midi", "audio/midi",
188 ".mp3", "audio/mpeg",
Glenn L McGrath06e95652003-02-09 06:51:14 +0000189#if 0 /* unpopular */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000190 ".au", "audio/basic",
191 ".pac", "application/x-ns-proxy-autoconfig",
192 ".vrml.wrl", "model/vrml",
Glenn L McGrath06e95652003-02-09 06:51:14 +0000193#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000194 0, "application/octet-stream" /* default */
195};
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000196
Denis Vlasenko55a99402006-09-30 20:41:44 +0000197typedef enum {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000198 HTTP_OK = 200,
199 HTTP_MOVED_TEMPORARILY = 302,
200 HTTP_BAD_REQUEST = 400, /* malformed syntax */
201 HTTP_UNAUTHORIZED = 401, /* authentication needed, respond with auth hdr */
202 HTTP_NOT_FOUND = 404,
203 HTTP_FORBIDDEN = 403,
204 HTTP_REQUEST_TIMEOUT = 408,
205 HTTP_NOT_IMPLEMENTED = 501, /* used for unrecognized requests */
206 HTTP_INTERNAL_SERVER_ERROR = 500,
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000207#if 0 /* future use */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000208 HTTP_CONTINUE = 100,
209 HTTP_SWITCHING_PROTOCOLS = 101,
210 HTTP_CREATED = 201,
211 HTTP_ACCEPTED = 202,
212 HTTP_NON_AUTHORITATIVE_INFO = 203,
213 HTTP_NO_CONTENT = 204,
214 HTTP_MULTIPLE_CHOICES = 300,
215 HTTP_MOVED_PERMANENTLY = 301,
216 HTTP_NOT_MODIFIED = 304,
217 HTTP_PAYMENT_REQUIRED = 402,
218 HTTP_BAD_GATEWAY = 502,
219 HTTP_SERVICE_UNAVAILABLE = 503, /* overload, maintenance */
220 HTTP_RESPONSE_SETSIZE = 0xffffffff
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000221#endif
222} HttpResponseNum;
223
Denis Vlasenko55a99402006-09-30 20:41:44 +0000224typedef struct {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000225 HttpResponseNum type;
226 const char *name;
227 const char *info;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000228} HttpEnumString;
229
230static const HttpEnumString httpResponseNames[] = {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000231 { HTTP_OK, "OK", NULL },
232 { HTTP_MOVED_TEMPORARILY, "Found", "Directories must end with a slash." },
233 { HTTP_REQUEST_TIMEOUT, "Request Timeout",
234 "No request appeared within a reasonable time period." },
235 { HTTP_NOT_IMPLEMENTED, "Not Implemented",
236 "The requested method is not recognized by this server." },
Denis Vlasenko55a99402006-09-30 20:41:44 +0000237#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000238 { HTTP_UNAUTHORIZED, "Unauthorized", "" },
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000239#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000240 { HTTP_NOT_FOUND, "Not Found",
241 "The requested URL was not found on this server." },
242 { HTTP_BAD_REQUEST, "Bad Request", "Unsupported method." },
243 { HTTP_FORBIDDEN, "Forbidden", "" },
244 { HTTP_INTERNAL_SERVER_ERROR, "Internal Server Error",
245 "Internal Server Error" },
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000246#if 0 /* not implemented */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000247 { HTTP_CREATED, "Created" },
248 { HTTP_ACCEPTED, "Accepted" },
249 { HTTP_NO_CONTENT, "No Content" },
250 { HTTP_MULTIPLE_CHOICES, "Multiple Choices" },
251 { HTTP_MOVED_PERMANENTLY, "Moved Permanently" },
252 { HTTP_NOT_MODIFIED, "Not Modified" },
253 { HTTP_BAD_GATEWAY, "Bad Gateway", "" },
254 { HTTP_SERVICE_UNAVAILABLE, "Service Unavailable", "" },
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000255#endif
256};
257
Glenn L McGrath06e95652003-02-09 06:51:14 +0000258
259static const char RFC1123FMT[] = "%a, %d %b %Y %H:%M:%S GMT";
Denis Vlasenko0bb993f2006-11-21 00:06:28 +0000260
261
262#define STRNCASECMP(a, str) strncasecmp((a), (str), sizeof(str)-1)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000263
264
Denis Vlasenko55a99402006-09-30 20:41:44 +0000265static int scan_ip(const char **ep, unsigned int *ip, unsigned char endc)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000266{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000267 const char *p = *ep;
268 int auto_mask = 8;
269 int j;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000270
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000271 *ip = 0;
272 for (j = 0; j < 4; j++) {
273 unsigned int octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000274
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000275 if ((*p < '0' || *p > '9') && (*p != '/' || j == 0) && *p != 0)
276 return -auto_mask;
277 octet = 0;
278 while (*p >= '0' && *p <= '9') {
279 octet *= 10;
280 octet += *p - '0';
281 if (octet > 255)
282 return -auto_mask;
283 p++;
284 }
285 if (*p == '.')
286 p++;
287 if (*p != '/' && *p != 0)
288 auto_mask += 8;
289 *ip = ((*ip) << 8) | octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000290 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000291 if (*p != 0) {
292 if (*p != endc)
293 return -auto_mask;
294 p++;
295 if (*p == 0)
296 return -auto_mask;
297 }
298 *ep = p;
299 return auto_mask;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000300}
301
Denis Vlasenko55a99402006-09-30 20:41:44 +0000302static int scan_ip_mask(const char *ipm, unsigned int *ip, unsigned int *mask)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000303{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000304 int i;
305 unsigned int msk;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000306
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000307 i = scan_ip(&ipm, ip, '/');
308 if (i < 0)
309 return i;
310 if (*ipm) {
311 const char *p = ipm;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000312
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000313 i = 0;
314 while (*p) {
Denis Vlasenko92758142006-10-03 19:56:34 +0000315 if (*p < '0' || *p > '9') {
316 if (*p == '.') {
317 i = scan_ip(&ipm, mask, 0);
318 return i != 32;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000319 }
Denis Vlasenko92758142006-10-03 19:56:34 +0000320 return -1;
321 }
322 i *= 10;
323 i += *p - '0';
324 p++;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000325 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000326 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000327 if (i > 32 || i < 0)
Denis Vlasenko92758142006-10-03 19:56:34 +0000328 return -1;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000329 msk = 0x80000000;
330 *mask = 0;
331 while (i > 0) {
332 *mask |= msk;
333 msk >>= 1;
334 i--;
335 }
336 return 0;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000337}
338
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000339#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
340 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
341 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000342static void free_config_lines(Htaccess **pprev)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000343{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000344 Htaccess *prev = *pprev;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000345
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000346 while (prev) {
347 Htaccess *cur = prev;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000348
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000349 prev = cur->next;
350 free(cur);
351 }
352 *pprev = NULL;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000353}
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000354#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000355
Glenn L McGrath06e95652003-02-09 06:51:14 +0000356/* flag */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000357#define FIRST_PARSE 0
358#define SUBDIR_PARSE 1
359#define SIGNALED_PARSE 2
360#define FIND_FROM_HTTPD_ROOT 3
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000361/****************************************************************************
362 *
363 > $Function: parse_conf()
364 *
365 * $Description: parse configuration file into in-memory linked list.
Eric Andersenc7bda1c2004-03-15 08:29:22 +0000366 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000367 * The first non-white character is examined to determine if the config line
368 * is one of the following:
369 * .ext:mime/type # new mime type not compiled into httpd
370 * [adAD]:from # ip address allow/deny, * for wildcard
371 * /path:user:pass # username/password
372 *
373 * Any previous IP rules are discarded.
374 * If the flag argument is not SUBDIR_PARSE then all /path and mime rules
375 * are also discarded. That is, previous settings are retained if flag is
376 * SUBDIR_PARSE.
377 *
378 * $Parameters:
379 * (const char *) path . . null for ip address checks, path for password
380 * checks.
381 * (int) flag . . . . . . the source of the parse request.
382 *
Eric Andersenc7bda1c2004-03-15 08:29:22 +0000383 * $Return: (None)
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000384 *
385 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +0000386static void parse_conf(const char *path, int flag)
387{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000388 FILE *f;
Denis Vlasenko55a99402006-09-30 20:41:44 +0000389#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000390 Htaccess *prev;
391#endif
392#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
393 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
394 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000395 Htaccess *cur;
Glenn L McGrathbaaa6e92003-09-15 15:00:43 +0000396#endif
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000397
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000398 const char *cf = config->configFile;
399 char buf[160];
400 char *p0 = NULL;
401 char *c, *p;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000402
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000403 /* free previous ip setup if present */
404 Htaccess_IP *pip = config->ip_a_d;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000405
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000406 while (pip) {
407 Htaccess_IP *cur_ipl = pip;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000408
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000409 pip = cur_ipl->next;
410 free(cur_ipl);
411 }
412 config->ip_a_d = NULL;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000413
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000414 config->flg_deny_all = 0;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000415
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000416#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
417 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
418 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000419 /* retain previous auth and mime config only for subdir parse */
420 if (flag != SUBDIR_PARSE) {
Denis Vlasenko55a99402006-09-30 20:41:44 +0000421#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000422 free_config_lines(&config->auth);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000423#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000424#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000425 free_config_lines(&config->mime_a);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000426#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000427#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000428 free_config_lines(&config->script_i);
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000429#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000430 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000431#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000432
433 if (flag == SUBDIR_PARSE || cf == NULL) {
434 cf = alloca(strlen(path) + sizeof(httpd_conf) + 2);
435 if (cf == NULL) {
436 if (flag == FIRST_PARSE)
437 bb_error_msg_and_die(bb_msg_memory_exhausted);
438 return;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000439 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000440 sprintf((char *)cf, "%s/%s", path, httpd_conf);
Glenn L McGrath393183d2003-05-26 14:07:50 +0000441 }
442
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000443 while ((f = fopen(cf, "r")) == NULL) {
444 if (flag == SUBDIR_PARSE || flag == FIND_FROM_HTTPD_ROOT) {
445 /* config file not found, no changes to config */
446 return;
447 }
448 if (config->configFile && flag == FIRST_PARSE) /* if -c option given */
449 bb_perror_msg_and_die("%s", cf);
450 flag = FIND_FROM_HTTPD_ROOT;
451 cf = httpd_conf;
452 }
453
Denis Vlasenko55a99402006-09-30 20:41:44 +0000454#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000455 prev = config->auth;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000456#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000457 /* This could stand some work */
Denis Vlasenko55a99402006-09-30 20:41:44 +0000458 while ((p0 = fgets(buf, sizeof(buf), f)) != NULL) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000459 c = NULL;
460 for (p = p0; *p0 != 0 && *p0 != '#'; p0++) {
461 if (!isspace(*p0)) {
462 *p++ = *p0;
463 if (*p0 == ':' && c == NULL)
464 c = p;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000465 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000466 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000467 *p = 0;
468
469 /* test for empty or strange line */
470 if (c == NULL || *c == 0)
471 continue;
472 p0 = buf;
473 if (*p0 == 'd')
474 *p0 = 'D';
475 if (*c == '*') {
476 if (*p0 == 'D') {
477 /* memorize deny all */
478 config->flg_deny_all++;
479 }
480 /* skip default other "word:*" config lines */
481 continue;
482 }
483
484 if (*p0 == 'a')
485 *p0 = 'A';
486 else if (*p0 != 'D' && *p0 != 'A'
Denis Vlasenko55a99402006-09-30 20:41:44 +0000487#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000488 && *p0 != '/'
489#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000490#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000491 && *p0 != '.'
492#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000493#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000494 && *p0 != '*'
495#endif
496 )
497 continue;
498 if (*p0 == 'A' || *p0 == 'D') {
499 /* storing current config IP line */
Denis Vlasenko9b1381f2007-01-03 02:56:00 +0000500 pip = xzalloc(sizeof(Htaccess_IP));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000501 if (pip) {
Denis Vlasenko55a99402006-09-30 20:41:44 +0000502 if (scan_ip_mask(c, &(pip->ip), &(pip->mask))) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000503 /* syntax IP{/mask} error detected, protect all */
504 *p0 = 'D';
505 pip->mask = 0;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000506 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000507 pip->allow_deny = *p0;
508 if (*p0 == 'D') {
509 /* Deny:form_IP move top */
510 pip->next = config->ip_a_d;
511 config->ip_a_d = pip;
512 } else {
513 /* add to bottom A:form_IP config line */
514 Htaccess_IP *prev_IP = config->ip_a_d;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000515
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000516 if (prev_IP == NULL) {
517 config->ip_a_d = pip;
518 } else {
519 while (prev_IP->next)
520 prev_IP = prev_IP->next;
521 prev_IP->next = pip;
522 }
523 }
524 }
525 continue;
526 }
Denis Vlasenko55a99402006-09-30 20:41:44 +0000527#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000528 if (*p0 == '/') {
529 /* make full path from httpd root / curent_path / config_line_path */
530 cf = flag == SUBDIR_PARSE ? path : "";
531 p0 = malloc(strlen(cf) + (c - buf) + 2 + strlen(c));
532 if (p0 == NULL)
533 continue;
534 c[-1] = 0;
535 sprintf(p0, "/%s%s", cf, buf);
536
537 /* another call bb_simplify_path */
538 cf = p = p0;
539
540 do {
541 if (*p == '/') {
542 if (*cf == '/') { /* skip duplicate (or initial) slash */
543 continue;
544 } else if (*cf == '.') {
545 if (cf[1] == '/' || cf[1] == 0) { /* remove extra '.' */
546 continue;
547 } else if ((cf[1] == '.') && (cf[2] == '/' || cf[2] == 0)) {
548 ++cf;
549 if (p > p0) {
Denis Vlasenko92758142006-10-03 19:56:34 +0000550 while (*--p != '/') /* omit previous dir */;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000551 }
552 continue;
553 }
554 }
555 }
556 *++p = *cf;
557 } while (*++cf);
558
559 if ((p == p0) || (*p != '/')) { /* not a trailing slash */
560 ++p; /* so keep last character */
561 }
562 *p = 0;
563 sprintf(p0, "%s:%s", p0, c);
564 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000565#endif
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000566
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000567#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
568 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
569 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000570 /* storing current config line */
Denis Vlasenko9b1381f2007-01-03 02:56:00 +0000571 cur = xzalloc(sizeof(Htaccess) + strlen(p0));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000572 if (cur) {
573 cf = strcpy(cur->before_colon, p0);
574 c = strchr(cf, ':');
575 *c++ = 0;
576 cur->after_colon = c;
Denis Vlasenko55a99402006-09-30 20:41:44 +0000577#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000578 if (*cf == '.') {
579 /* config .mime line move top for overwrite previous */
580 cur->next = config->mime_a;
581 config->mime_a = cur;
582 continue;
583 }
Glenn L McGrath06e95652003-02-09 06:51:14 +0000584#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000585#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000586 if (*cf == '*' && cf[1] == '.') {
587 /* config script interpreter line move top for overwrite previous */
588 cur->next = config->script_i;
589 config->script_i = cur;
590 continue;
591 }
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000592#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000593#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000594 free(p0);
595 if (prev == NULL) {
596 /* first line */
597 config->auth = prev = cur;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000598 } else {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000599 /* sort path, if current lenght eq or bigger then move up */
600 Htaccess *prev_hti = config->auth;
601 size_t l = strlen(cf);
602 Htaccess *hti;
603
604 for (hti = prev_hti; hti; hti = hti->next) {
605 if (l >= strlen(hti->before_colon)) {
606 /* insert before hti */
607 cur->next = hti;
608 if (prev_hti != hti) {
609 prev_hti->next = cur;
610 } else {
611 /* insert as top */
612 config->auth = cur;
613 }
614 break;
615 }
616 if (prev_hti != hti)
617 prev_hti = prev_hti->next;
618 }
619 if (!hti) { /* not inserted, add to bottom */
620 prev->next = cur;
621 prev = cur;
622 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000623 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000624#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000625 }
Glenn L McGrathbaaa6e92003-09-15 15:00:43 +0000626#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000627 }
628 fclose(f);
Glenn L McGrath06e95652003-02-09 06:51:14 +0000629}
630
Denis Vlasenko55a99402006-09-30 20:41:44 +0000631#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000632/****************************************************************************
633 *
634 > $Function: encodeString()
635 *
636 * $Description: Given a string, html encode special characters.
637 * This is used for the -e command line option to provide an easy way
638 * for scripts to encode result data without confusing browsers. The
639 * returned string pointer is memory allocated by malloc().
640 *
641 * $Parameters:
642 * (const char *) string . . The first string to encode.
643 *
644 * $Return: (char *) . . . .. . . A pointer to the encoded string.
645 *
646 * $Errors: Returns a null string ("") if memory is not available.
647 *
648 ****************************************************************************/
649static char *encodeString(const char *string)
650{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000651 /* take the simple route and encode everything */
652 /* could possibly scan once to get length. */
653 int len = strlen(string);
654 char *out = malloc(len * 6 + 1);
655 char *p = out;
656 char ch;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000657
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000658 if (!out) return "";
659 while ((ch = *string++)) {
660 // very simple check for what to encode
661 if (isalnum(ch)) *p++ = ch;
662 else p += sprintf(p, "&#%d;", (unsigned char) ch);
663 }
664 *p = 0;
665 return out;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000666}
Denis Vlasenkob3a07152006-11-16 18:04:43 +0000667#endif /* FEATURE_HTTPD_ENCODE_URL_STR */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000668
669/****************************************************************************
670 *
671 > $Function: decodeString()
672 *
673 * $Description: Given a URL encoded string, convert it to plain ascii.
674 * Since decoding always makes strings smaller, the decode is done in-place.
675 * Thus, callers should strdup() the argument if they do not want the
676 * argument modified. The return is the original pointer, allowing this
677 * function to be easily used as arguments to other functions.
678 *
679 * $Parameters:
680 * (char *) string . . . The first string to decode.
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000681 * (int) option_d . . 1 if called for httpd -d
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000682 *
683 * $Return: (char *) . . . . A pointer to the decoded string (same as input).
684 *
685 * $Errors: None
686 *
687 ****************************************************************************/
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000688static char *decodeString(char *orig, int option_d)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000689{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000690 /* note that decoded string is always shorter than original */
691 char *string = orig;
692 char *ptr = string;
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000693 char c;
Eric Andersena3bb3e62003-06-26 09:05:32 +0000694
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000695 while ((c = *ptr++) != '\0') {
696 unsigned value1, value2;
697
698 if (option_d && c == '+') {
Denis Vlasenko601ae132006-11-28 23:37:46 +0000699 *string++ = ' ';
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000700 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000701 }
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000702 if (c != '%') {
703 *string++ = c;
704 continue;
705 }
706 if (sscanf(ptr, "%1X", &value1) != 1
707 || sscanf(ptr+1, "%1X", &value2) != 1
708 ) {
709 if (!option_d)
710 return NULL;
711 *string++ = '%';
712 continue;
713 }
714 value1 = value1 * 16 + value2;
715 if (!option_d && (value1 == '/' || value1 == '\0')) {
716 /* caller takes it as indication of invalid
717 * (dangerous wrt exploits) chars */
718 return orig + 1;
719 }
720 *string++ = value1;
721 ptr += 2;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000722 }
723 *string = '\0';
724 return orig;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000725}
726
727
Denis Vlasenko55a99402006-09-30 20:41:44 +0000728#if ENABLE_FEATURE_HTTPD_CGI
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000729/****************************************************************************
Denis Vlasenkoe867b7c2006-11-16 16:12:09 +0000730 * setenv helpers
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000731 ****************************************************************************/
Denis Vlasenkoe867b7c2006-11-16 16:12:09 +0000732static void setenv1(const char *name, const char *value)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000733{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000734 if (!value)
735 value = "";
Denis Vlasenkoe867b7c2006-11-16 16:12:09 +0000736 setenv(name, value, 1);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000737}
Denis Vlasenkoe867b7c2006-11-16 16:12:09 +0000738static void setenv_long(const char *name, long value)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000739{
Denis Vlasenkoe867b7c2006-11-16 16:12:09 +0000740 char buf[sizeof(value)*3 + 1];
741 sprintf(buf, "%ld", value);
742 setenv(name, buf, 1);
Glenn L McGrath06e95652003-02-09 06:51:14 +0000743}
Eric Andersena3bb3e62003-06-26 09:05:32 +0000744#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000745
Denis Vlasenko55a99402006-09-30 20:41:44 +0000746#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000747/****************************************************************************
748 *
749 > $Function: decodeBase64()
750 *
751 > $Description: Decode a base 64 data stream as per rfc1521.
752 * Note that the rfc states that none base64 chars are to be ignored.
753 * Since the decode always results in a shorter size than the input, it is
754 * OK to pass the input arg as an output arg.
755 *
Glenn L McGrath06e95652003-02-09 06:51:14 +0000756 * $Parameter:
757 * (char *) Data . . . . A pointer to a base64 encoded string.
758 * Where to place the decoded data.
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000759 *
Glenn L McGrath06e95652003-02-09 06:51:14 +0000760 * $Return: void
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000761 *
762 * $Errors: None
763 *
764 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +0000765static void decodeBase64(char *Data)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000766{
Glenn L McGrath06e95652003-02-09 06:51:14 +0000767
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000768 const unsigned char *in = (const unsigned char *)Data;
769 // The decoded size will be at most 3/4 the size of the encoded
770 unsigned long ch = 0;
771 int i = 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000772
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000773 while (*in) {
774 int t = *in++;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000775
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000776 if (t >= '0' && t <= '9')
777 t = t - '0' + 52;
778 else if (t >= 'A' && t <= 'Z')
779 t = t - 'A';
780 else if (t >= 'a' && t <= 'z')
781 t = t - 'a' + 26;
782 else if (t == '+')
783 t = 62;
784 else if (t == '/')
785 t = 63;
786 else if (t == '=')
787 t = 0;
788 else
789 continue;
Glenn L McGrath874e3382003-05-14 12:11:36 +0000790
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000791 ch = (ch << 6) | t;
792 i++;
793 if (i == 4) {
794 *Data++ = (char) (ch >> 16);
795 *Data++ = (char) (ch >> 8);
796 *Data++ = (char) ch;
797 i = 0;
798 }
799 }
800 *Data = 0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000801}
802#endif
803
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000804
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000805/****************************************************************************
806 *
807 > $Function: openServer()
808 *
809 * $Description: create a listen server socket on the designated port.
810 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000811 * $Return: (int) . . . A connection socket. -1 for errors.
812 *
813 * $Errors: None
814 *
815 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +0000816static int openServer(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000817{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000818 struct sockaddr_in lsocket;
819 int fd;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000820
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000821 /* create the socket right now */
822 /* inet_addr() returns a value that is already in network order */
823 memset(&lsocket, 0, sizeof(lsocket));
824 lsocket.sin_family = AF_INET;
825 lsocket.sin_addr.s_addr = INADDR_ANY;
826 lsocket.sin_port = htons(config->port);
827 fd = xsocket(AF_INET, SOCK_STREAM, 0);
828 /* tell the OS it's OK to reuse a previous address even though */
829 /* it may still be in a close down state. Allows bind to succeed. */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000830#ifdef SO_REUSEPORT
Denis Vlasenko48237b02006-11-22 23:22:06 +0000831 {
832 static const int on = 1;
833 setsockopt(fd, SOL_SOCKET, SO_REUSEPORT,
834 (void *)&on, sizeof(on));
835 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000836#else
Denis Vlasenko48237b02006-11-22 23:22:06 +0000837 setsockopt_reuseaddr(fd);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000838#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000839 xbind(fd, (struct sockaddr *)&lsocket, sizeof(lsocket));
840 xlisten(fd, 9);
841 signal(SIGCHLD, SIG_IGN); /* prevent zombie (defunct) processes */
842 return fd;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000843}
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000844
845/****************************************************************************
846 *
847 > $Function: sendHeaders()
848 *
849 * $Description: Create and send HTTP response headers.
850 * The arguments are combined and sent as one write operation. Note that
851 * IE will puke big-time if the headers are not sent in one packet and the
Glenn L McGrath06e95652003-02-09 06:51:14 +0000852 * second packet is delayed for any reason.
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000853 *
Glenn L McGrath06e95652003-02-09 06:51:14 +0000854 * $Parameter:
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000855 * (HttpResponseNum) responseNum . . . The result code to send.
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000856 *
Glenn L McGrath06e95652003-02-09 06:51:14 +0000857 * $Return: (int) . . . . writing errors
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000858 *
859 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +0000860static int sendHeaders(HttpResponseNum responseNum)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000861{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000862 char *buf = config->buf;
863 const char *responseString = "";
864 const char *infoString = 0;
865 const char *mime_type;
866 unsigned int i;
867 time_t timer = time(0);
868 char timeStr[80];
869 int len;
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +0000870 enum {
871 numNames = sizeof(httpResponseNames) / sizeof(httpResponseNames[0])
872 };
Glenn L McGrath06e95652003-02-09 06:51:14 +0000873
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +0000874 for (i = 0; i < numNames; i++) {
Glenn L McGrath06e95652003-02-09 06:51:14 +0000875 if (httpResponseNames[i].type == responseNum) {
876 responseString = httpResponseNames[i].name;
877 infoString = httpResponseNames[i].info;
878 break;
879 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000880 }
881 /* error message is HTML */
882 mime_type = responseNum == HTTP_OK ?
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +0000883 config->found_mime_type : "text/html";
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000884
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000885 /* emit the current date */
886 strftime(timeStr, sizeof(timeStr), RFC1123FMT, gmtime(&timer));
887 len = sprintf(buf,
888 "HTTP/1.0 %d %s\r\nContent-type: %s\r\n"
889 "Date: %s\r\nConnection: close\r\n",
890 responseNum, responseString, mime_type, timeStr);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000891
Denis Vlasenko55a99402006-09-30 20:41:44 +0000892#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000893 if (responseNum == HTTP_UNAUTHORIZED) {
894 len += sprintf(buf+len, "WWW-Authenticate: Basic realm=\"%s\"\r\n",
895 config->realm);
896 }
Glenn L McGrath3d2405c2003-02-10 22:28:21 +0000897#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000898 if (responseNum == HTTP_MOVED_TEMPORARILY) {
899 len += sprintf(buf+len, "Location: %s/%s%s\r\n",
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +0000900 config->found_moved_temporarily,
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000901 (config->query ? "?" : ""),
902 (config->query ? config->query : ""));
903 }
Eric Andersen07f2fea2004-10-08 08:03:29 +0000904
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000905 if (config->ContentLength != -1) { /* file */
906 strftime(timeStr, sizeof(timeStr), RFC1123FMT, gmtime(&config->last_mod));
Denis Vlasenkocf30cc82006-11-24 14:53:18 +0000907 len += sprintf(buf+len, "Last-Modified: %s\r\n%s %"OFF_FMT"d\r\n",
908 timeStr, "Content-length:", config->ContentLength);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000909 }
910 strcat(buf, "\r\n");
911 len += 2;
912 if (infoString) {
913 len += sprintf(buf+len,
914 "<HEAD><TITLE>%d %s</TITLE></HEAD>\n"
915 "<BODY><H1>%d %s</H1>\n%s\n</BODY>\n",
916 responseNum, responseString,
917 responseNum, responseString, infoString);
918 }
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +0000919 if (DEBUG)
920 fprintf(stderr, "headers: '%s'\n", buf);
Denis Vlasenko0871bc82006-11-16 16:17:02 +0000921 return full_write(config->accepted_socket, buf, len);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000922}
923
924/****************************************************************************
925 *
926 > $Function: getLine()
927 *
928 * $Description: Read from the socket until an end of line char found.
929 *
930 * Characters are read one at a time until an eol sequence is found.
931 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000932 * $Return: (int) . . . . number of characters read. -1 if error.
933 *
934 ****************************************************************************/
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000935static int getLine(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000936{
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +0000937 int count = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000938 char *buf = config->buf;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000939
Denis Vlasenko0871bc82006-11-16 16:17:02 +0000940 while (read(config->accepted_socket, buf + count, 1) == 1) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000941 if (buf[count] == '\r') continue;
942 if (buf[count] == '\n') {
943 buf[count] = 0;
944 return count;
945 }
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +0000946 if (count < (MAX_MEMORY_BUFF-1)) /* check overflow */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000947 count++;
948 }
949 if (count) return count;
950 else return -1;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000951}
952
Denis Vlasenko55a99402006-09-30 20:41:44 +0000953#if ENABLE_FEATURE_HTTPD_CGI
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000954/****************************************************************************
955 *
956 > $Function: sendCgi()
957 *
958 * $Description: Execute a CGI script and send it's stdout back
959 *
960 * Environment variables are set up and the script is invoked with pipes
961 * for stdin/stdout. If a post is being done the script is fed the POST
962 * data in addition to setting the QUERY_STRING variable (for GETs or POSTs).
963 *
964 * $Parameters:
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000965 * (const char *) url . . . . . . The requested URL (with leading /).
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000966 * (int bodyLen) . . . . . . . . Length of the post body.
967 * (const char *cookie) . . . . . For set HTTP_COOKIE.
968 * (const char *content_type) . . For set CONTENT_TYPE.
Glenn L McGrath06e95652003-02-09 06:51:14 +0000969
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000970 *
971 * $Return: (char *) . . . . A pointer to the decoded string (same as input).
972 *
973 * $Errors: None
974 *
975 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +0000976static int sendCgi(const char *url,
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +0000977 const char *request, int bodyLen, const char *cookie,
978 const char *content_type)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000979{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000980 int fromCgi[2]; /* pipe for reading data from CGI */
981 int toCgi[2]; /* pipe for sending data to CGI */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000982
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000983 static char * argp[] = { 0, 0 };
984 int pid = 0;
985 int inFd;
986 int outFd;
987 int firstLine = 1;
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +0000988 int status;
989 size_t post_readed_size, post_readed_idx;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000990
Denis Vlasenko0bb993f2006-11-21 00:06:28 +0000991 if (pipe(fromCgi) != 0)
992 return 0;
993 if (pipe(toCgi) != 0)
994 return 0;
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +0000995
Denis Vlasenko0bb993f2006-11-21 00:06:28 +0000996 pid = fork();
997 if (pid < 0)
998 return 0;
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +0000999
1000 if (!pid) {
1001 /* child process */
1002 char *script;
1003 char *purl = strdup(url);
1004 char realpath_buff[MAXPATHLEN];
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001005
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001006 if (purl == NULL)
1007 _exit(242);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001008
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001009 inFd = toCgi[0];
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001010 outFd = fromCgi[1];
Glenn L McGrath06e95652003-02-09 06:51:14 +00001011
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001012 dup2(inFd, 0); // replace stdin with the pipe
1013 dup2(outFd, 1); // replace stdout with the pipe
1014 if (!DEBUG)
1015 dup2(outFd, 2); // replace stderr with the pipe
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001016
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001017 close(toCgi[0]);
1018 close(toCgi[1]);
1019 close(fromCgi[0]);
1020 close(fromCgi[1]);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001021
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001022 close(config->accepted_socket);
1023 close(config->server_socket);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001024
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001025 /*
1026 * Find PATH_INFO.
1027 */
1028 script = purl;
1029 while ((script = strchr(script + 1, '/')) != NULL) {
1030 /* have script.cgi/PATH_INFO or dirs/script.cgi[/PATH_INFO] */
1031 struct stat sb;
Denis Vlasenko9f609292006-11-05 19:47:33 +00001032
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001033 *script = '\0';
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001034 if (is_directory(purl + 1, 1, &sb) == 0) {
1035 /* not directory, found script.cgi/PATH_INFO */
1036 *script = '/';
1037 break;
1038 }
1039 *script = '/'; /* is directory, find next '/' */
1040 }
1041 setenv1("PATH_INFO", script); /* set /PATH_INFO or "" */
1042 /* setenv1("PATH", getenv("PATH")); redundant */
1043 setenv1("REQUEST_METHOD", request);
1044 if (config->query) {
1045 char *uri = alloca(strlen(purl) + 2 + strlen(config->query));
1046 if (uri)
1047 sprintf(uri, "%s?%s", purl, config->query);
1048 setenv1("REQUEST_URI", uri);
1049 } else {
1050 setenv1("REQUEST_URI", purl);
1051 }
1052 if (script != NULL)
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001053 *script = '\0'; /* cut off /PATH_INFO */
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001054 /* SCRIPT_FILENAME required by PHP in CGI mode */
1055 if (!realpath(purl + 1, realpath_buff))
1056 goto error_execing_cgi;
1057 setenv1("SCRIPT_FILENAME", realpath_buff);
1058 /* set SCRIPT_NAME as full path: /cgi-bin/dirs/script.cgi */
1059 setenv1("SCRIPT_NAME", purl);
Denis Vlasenko428f7ae2006-11-21 21:35:14 +00001060 /* http://hoohoo.ncsa.uiuc.edu/cgi/env.html:
1061 * QUERY_STRING: The information which follows the ? in the URL
1062 * which referenced this script. This is the query information.
1063 * It should not be decoded in any fashion. This variable
1064 * should always be set when there is query information,
1065 * regardless of command line decoding. */
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001066 /* (Older versions of bbox seem to do some decoding) */
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001067 setenv1("QUERY_STRING", config->query);
1068 setenv1("SERVER_SOFTWARE", httpdVersion);
1069 putenv("SERVER_PROTOCOL=HTTP/1.0");
1070 putenv("GATEWAY_INTERFACE=CGI/1.1");
1071 setenv1("REMOTE_ADDR", config->rmt_ip_str);
1072#if ENABLE_FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV
1073 setenv_long("REMOTE_PORT", config->port);
1074#endif
1075 if (bodyLen)
1076 setenv_long("CONTENT_LENGTH", bodyLen);
1077 if (cookie)
1078 setenv1("HTTP_COOKIE", cookie);
1079 if (content_type)
1080 setenv1("CONTENT_TYPE", content_type);
1081#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
1082 if (config->remoteuser) {
1083 setenv1("REMOTE_USER", config->remoteuser);
1084 putenv("AUTH_TYPE=Basic");
1085 }
1086#endif
1087 if (config->referer)
1088 setenv1("HTTP_REFERER", config->referer);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001089
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001090 /* set execve argp[0] without path */
1091 argp[0] = strrchr(purl, '/') + 1;
1092 /* but script argp[0] must have absolute path and chdiring to this */
1093 script = strrchr(realpath_buff, '/');
1094 if (!script)
1095 goto error_execing_cgi;
1096 *script = '\0';
1097 if (chdir(realpath_buff) == 0) {
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001098 // Now run the program. If it fails,
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001099 // use _exit() so no destructors
1100 // get called and make a mess.
1101#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
1102 char *interpr = NULL;
1103 char *suffix = strrchr(purl, '.');
1104
1105 if (suffix) {
1106 Htaccess *cur;
1107 for (cur = config->script_i; cur; cur = cur->next) {
1108 if (strcmp(cur->before_colon + 1, suffix) == 0) {
1109 interpr = cur->after_colon;
1110 break;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001111 }
1112 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001113 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001114#endif
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001115 *script = '/';
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001116#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001117 if (interpr)
1118 execv(interpr, argp);
1119 else
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001120#endif
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001121 execv(realpath_buff, argp);
1122 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001123 error_execing_cgi:
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001124 /* send to stdout (even if we are not from inetd) */
1125 config->accepted_socket = 1;
1126 sendHeaders(HTTP_NOT_FOUND);
1127 _exit(242);
1128 } /* end child */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001129
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001130 /* parent process */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001131
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001132 post_readed_size = 0;
1133 post_readed_idx = 0;
Denis Vlasenko5d148e22006-11-21 00:12:09 +00001134 inFd = fromCgi[0];
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001135 outFd = toCgi[1];
1136 close(fromCgi[1]);
1137 close(toCgi[0]);
1138 signal(SIGPIPE, SIG_IGN);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001139
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001140 while (1) {
1141 fd_set readSet;
1142 fd_set writeSet;
1143 char wbuf[128];
1144 int nfound;
1145 int count;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001146
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001147 FD_ZERO(&readSet);
1148 FD_ZERO(&writeSet);
1149 FD_SET(inFd, &readSet);
1150 if (bodyLen > 0 || post_readed_size > 0) {
1151 FD_SET(outFd, &writeSet);
1152 nfound = outFd > inFd ? outFd : inFd;
1153 if (post_readed_size == 0) {
1154 FD_SET(config->accepted_socket, &readSet);
1155 if (nfound < config->accepted_socket)
1156 nfound = config->accepted_socket;
1157 }
1158 /* Now wait on the set of sockets! */
1159 nfound = select(nfound + 1, &readSet, &writeSet, 0, NULL);
1160 } else {
1161 if (!bodyLen) {
1162 close(outFd);
1163 bodyLen = -1;
1164 }
1165 nfound = select(inFd + 1, &readSet, 0, 0, NULL);
1166 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001167
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001168 if (nfound <= 0) {
1169 if (waitpid(pid, &status, WNOHANG) > 0) {
1170 close(inFd);
1171 if (DEBUG && WIFEXITED(status))
1172 bb_error_msg("piped has exited with status=%d", WEXITSTATUS(status));
1173 if (DEBUG && WIFSIGNALED(status))
1174 bb_error_msg("piped has exited with signal=%d", WTERMSIG(status));
1175 break;
1176 }
1177 } else if (post_readed_size > 0 && FD_ISSET(outFd, &writeSet)) {
1178 count = full_write(outFd, wbuf + post_readed_idx, post_readed_size);
1179 if (count > 0) {
1180 post_readed_size -= count;
1181 post_readed_idx += count;
1182 if (post_readed_size == 0)
1183 post_readed_idx = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001184 } else {
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001185 post_readed_size = post_readed_idx = bodyLen = 0; /* broken pipe to CGI */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001186 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001187 } else if (bodyLen > 0 && post_readed_size == 0 && FD_ISSET(config->accepted_socket, &readSet)) {
1188 count = bodyLen > (int)sizeof(wbuf) ? (int)sizeof(wbuf) : bodyLen;
1189 count = safe_read(config->accepted_socket, wbuf, count);
1190 if (count > 0) {
1191 post_readed_size += count;
1192 bodyLen -= count;
1193 } else {
1194 bodyLen = 0; /* closed */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001195 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001196 }
1197 if (FD_ISSET(inFd, &readSet)) {
1198 int s = config->accepted_socket;
1199 char *rbuf = config->buf;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001200
Eric Andersen97a1de12004-08-26 22:22:50 +00001201#ifndef PIPE_BUF
1202# define PIPESIZE 4096 /* amount of buffering in a pipe */
1203#else
1204# define PIPESIZE PIPE_BUF
1205#endif
1206#if PIPESIZE >= MAX_MEMORY_BUFF
1207# error "PIPESIZE >= MAX_MEMORY_BUFF"
1208#endif
1209
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +00001210 /* There is something to read */
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001211 /* NB: was safe_read. If it *has to be* safe_read, */
1212 /* please explain why in this comment... */
1213 count = full_read(inFd, rbuf, PIPESIZE);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001214 if (count == 0)
1215 break; /* closed */
1216 if (count > 0) {
1217 if (firstLine) {
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001218 /* full_read (above) avoids
1219 * "chopped up into small chunks" syndrome here */
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001220 rbuf[count] = 0;
1221 /* check to see if the user script added headers */
1222 if (strncmp(rbuf, "HTTP/1.0 200 OK\r\n", 4) != 0) {
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001223 /* there is no "HTTP", do it ourself */
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001224 full_write(s, "HTTP/1.0 200 OK\r\n", 17);
Denis Vlasenkoa773af32007-01-03 23:02:18 +00001225 } /* hmm, maybe 'else if'? */
1226 if (!strstr(rbuf, "ontent-")) {
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001227 full_write(s, "Content-type: text/plain\r\n\r\n", 28);
1228 }
1229 firstLine = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001230 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001231 if (full_write(s, rbuf, count) != count)
1232 break;
1233
1234 if (DEBUG)
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +00001235 fprintf(stderr, "cgi read %d bytes: '%.*s'\n", count, count, rbuf);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001236 }
1237 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001238 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001239 return 0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001240}
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001241#endif /* FEATURE_HTTPD_CGI */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001242
1243/****************************************************************************
1244 *
1245 > $Function: sendFile()
1246 *
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001247 * $Description: Send a file response to a HTTP request
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001248 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00001249 * $Parameter:
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001250 * (const char *) url . . The URL requested.
1251 *
1252 * $Return: (int) . . . . . . Always 0.
1253 *
1254 ****************************************************************************/
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001255static int sendFile(const char *url)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001256{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001257 char * suffix;
1258 int f;
1259 const char * const * table;
1260 const char * try_suffix;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001261
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001262 suffix = strrchr(url, '.');
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001263
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001264 for (table = suffixTable; *table; table += 2)
1265 if (suffix != NULL && (try_suffix = strstr(*table, suffix)) != 0) {
1266 try_suffix += strlen(suffix);
1267 if (*try_suffix == 0 || *try_suffix == '.')
1268 break;
1269 }
1270 /* also, if not found, set default as "application/octet-stream"; */
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001271 config->found_mime_type = table[1];
Denis Vlasenko55a99402006-09-30 20:41:44 +00001272#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001273 if (suffix) {
1274 Htaccess * cur;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001275
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001276 for (cur = config->mime_a; cur; cur = cur->next) {
1277 if (strcmp(cur->before_colon, suffix) == 0) {
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001278 config->found_mime_type = cur->after_colon;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001279 break;
1280 }
1281 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001282 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001283#endif /* FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001284
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001285 if (DEBUG)
1286 fprintf(stderr, "sending file '%s' content-type: %s\n",
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001287 url, config->found_mime_type);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001288
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001289 f = open(url, O_RDONLY);
1290 if (f >= 0) {
1291 int count;
1292 char *buf = config->buf;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001293
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001294 sendHeaders(HTTP_OK);
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001295 /* TODO: sendfile() */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001296 while ((count = full_read(f, buf, MAX_MEMORY_BUFF)) > 0) {
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001297 if (full_write(config->accepted_socket, buf, count) != count)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001298 break;
1299 }
1300 close(f);
1301 } else {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001302 if (DEBUG)
1303 bb_perror_msg("cannot open '%s'", url);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001304 sendHeaders(HTTP_NOT_FOUND);
1305 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001306
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001307 return 0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001308}
1309
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001310static int checkPermIP(void)
1311{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001312 Htaccess_IP * cur;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001313
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001314 /* This could stand some work */
1315 for (cur = config->ip_a_d; cur; cur = cur->next) {
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001316#if DEBUG
1317 fprintf(stderr, "checkPermIP: '%s' ? ", config->rmt_ip_str);
1318#endif
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001319 if (DEBUG)
1320 fprintf(stderr, "'%u.%u.%u.%u/%u.%u.%u.%u'\n",
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001321 (unsigned char)(cur->ip >> 24),
1322 (unsigned char)(cur->ip >> 16),
1323 (unsigned char)(cur->ip >> 8),
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001324 cur->ip & 0xff,
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001325 (unsigned char)(cur->mask >> 24),
1326 (unsigned char)(cur->mask >> 16),
1327 (unsigned char)(cur->mask >> 8),
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001328 cur->mask & 0xff);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001329 if ((config->rmt_ip & cur->mask) == cur->ip)
1330 return cur->allow_deny == 'A'; /* Allow/Deny */
1331 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001332
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001333 /* if unconfigured, return 1 - access from all */
1334 return !config->flg_deny_all;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001335}
1336
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001337/****************************************************************************
1338 *
1339 > $Function: checkPerm()
1340 *
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001341 * $Description: Check the permission file for access password protected.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001342 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001343 * If config file isn't present, everything is allowed.
Glenn L McGrath06e95652003-02-09 06:51:14 +00001344 * Entries are of the form you can see example from header source
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001345 *
1346 * $Parameters:
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001347 * (const char *) path . . . . The file path.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001348 * (const char *) request . . . User information to validate.
1349 *
1350 * $Return: (int) . . . . . . . . . 1 if request OK, 0 otherwise.
1351 *
1352 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +00001353
Denis Vlasenko55a99402006-09-30 20:41:44 +00001354#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001355static int checkPerm(const char *path, const char *request)
1356{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001357 Htaccess * cur;
1358 const char *p;
1359 const char *p0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001360
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001361 const char *prev = NULL;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001362
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001363 /* This could stand some work */
1364 for (cur = config->auth; cur; cur = cur->next) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001365 size_t l;
1366
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001367 p0 = cur->before_colon;
1368 if (prev != NULL && strcmp(prev, p0) != 0)
1369 continue; /* find next identical */
1370 p = cur->after_colon;
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001371 if (DEBUG)
1372 fprintf(stderr, "checkPerm: '%s' ? '%s'\n", p0, request);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001373
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001374 l = strlen(p0);
1375 if (strncmp(p0, path, l) == 0
1376 && (l == 1 || path[l] == '/' || path[l] == '\0')
1377 ) {
1378 char *u;
1379 /* path match found. Check request */
1380 /* for check next /path:user:password */
1381 prev = p0;
1382 u = strchr(request, ':');
1383 if (u == NULL) {
1384 /* bad request, ':' required */
1385 break;
1386 }
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001387
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001388 if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
1389 char *cipher;
1390 char *pp;
Eric Andersen35e643b2003-07-28 07:40:39 +00001391
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001392 if (strncmp(p, request, u-request) != 0) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001393 /* user uncompared */
1394 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001395 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001396 pp = strchr(p, ':');
1397 if (pp && pp[1] == '$' && pp[2] == '1' &&
1398 pp[3] == '$' && pp[4]) {
1399 pp++;
1400 cipher = pw_encrypt(u+1, pp);
1401 if (strcmp(cipher, pp) == 0)
1402 goto set_remoteuser_var; /* Ok */
1403 /* unauthorized */
1404 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001405 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001406 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001407
1408 if (strcmp(p, request) == 0) {
1409set_remoteuser_var:
1410 config->remoteuser = strdup(request);
1411 if (config->remoteuser)
1412 config->remoteuser[(u - request)] = 0;
1413 return 1; /* Ok */
1414 }
1415 /* unauthorized */
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001416 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001417 } /* for */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001418
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001419 return prev == NULL;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001420}
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001421
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001422#endif /* FEATURE_HTTPD_BASIC_AUTH */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +00001423
Eric Andersen07f2fea2004-10-08 08:03:29 +00001424/****************************************************************************
1425 *
Mike Frysingerbb12d6f2006-01-03 23:59:01 +00001426 > $Function: handle_sigalrm()
Eric Andersen07f2fea2004-10-08 08:03:29 +00001427 *
Mike Frysingerbb12d6f2006-01-03 23:59:01 +00001428 * $Description: Handle timeouts
Eric Andersen07f2fea2004-10-08 08:03:29 +00001429 *
1430 ****************************************************************************/
1431
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001432static void handle_sigalrm(int sig)
Eric Andersen07f2fea2004-10-08 08:03:29 +00001433{
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001434 sendHeaders(HTTP_REQUEST_TIMEOUT);
1435 config->alarm_signaled = sig;
Eric Andersen07f2fea2004-10-08 08:03:29 +00001436}
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001437
1438/****************************************************************************
1439 *
1440 > $Function: handleIncoming()
1441 *
1442 * $Description: Handle an incoming http request.
1443 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001444 ****************************************************************************/
Glenn L McGrath06e95652003-02-09 06:51:14 +00001445static void handleIncoming(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001446{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001447 char *buf = config->buf;
1448 char *url;
1449 char *purl;
1450 int blank = -1;
1451 char *test;
1452 struct stat sb;
1453 int ip_allowed;
Denis Vlasenko55a99402006-09-30 20:41:44 +00001454#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001455 const char *prequest = request_GET;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001456 unsigned long length = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001457 char *cookie = 0;
1458 char *content_type = 0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001459#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001460 fd_set s_fd;
1461 struct timeval tv;
1462 int retval;
1463 struct sigaction sa;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001464
Denis Vlasenko55a99402006-09-30 20:41:44 +00001465#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001466 int credentials = -1; /* if not required this is Ok */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001467#endif
1468
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001469 sa.sa_handler = handle_sigalrm;
1470 sigemptyset(&sa.sa_mask);
1471 sa.sa_flags = 0; /* no SA_RESTART */
1472 sigaction(SIGALRM, &sa, NULL);
Eric Andersen07f2fea2004-10-08 08:03:29 +00001473
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001474 do {
1475 int count;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001476
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001477 (void) alarm(TIMEOUT);
1478 if (getLine() <= 0)
1479 break; /* closed */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001480
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001481 purl = strpbrk(buf, " \t");
1482 if (purl == NULL) {
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001483 BAD_REQUEST:
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001484 sendHeaders(HTTP_BAD_REQUEST);
1485 break;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001486 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001487 *purl = '\0';
Denis Vlasenko55a99402006-09-30 20:41:44 +00001488#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001489 if (strcasecmp(buf, prequest) != 0) {
1490 prequest = "POST";
1491 if (strcasecmp(buf, prequest) != 0) {
1492 sendHeaders(HTTP_NOT_IMPLEMENTED);
1493 break;
1494 }
1495 }
1496#else
1497 if (strcasecmp(buf, request_GET) != 0) {
1498 sendHeaders(HTTP_NOT_IMPLEMENTED);
1499 break;
1500 }
1501#endif
1502 *purl = ' ';
1503 count = sscanf(purl, " %[^ ] HTTP/%d.%*d", buf, &blank);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001504
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001505 if (count < 1 || buf[0] != '/') {
1506 /* Garbled request/URL */
1507 goto BAD_REQUEST;
1508 }
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001509 url = alloca(strlen(buf) + sizeof("/index.html"));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001510 if (url == NULL) {
1511 sendHeaders(HTTP_INTERNAL_SERVER_ERROR);
1512 break;
1513 }
1514 strcpy(url, buf);
1515 /* extract url args if present */
1516 test = strchr(url, '?');
Denis Vlasenko5d148e22006-11-21 00:12:09 +00001517 config->query = NULL;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001518 if (test) {
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001519 *test++ = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001520 config->query = test;
1521 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001522
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001523 test = decodeString(url, 0);
1524 if (test == NULL)
1525 goto BAD_REQUEST;
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +00001526 if (test == url+1) {
1527 /* '/' or NUL is encoded */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001528 sendHeaders(HTTP_NOT_FOUND);
1529 break;
1530 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001531
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001532 /* algorithm stolen from libbb bb_simplify_path(),
Denis Vlasenko55a99402006-09-30 20:41:44 +00001533 but don't strdup and reducing trailing slash and protect out root */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001534 purl = test = url;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001535 do {
1536 if (*purl == '/') {
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001537 /* skip duplicate (or initial) slash */
1538 if (*test == '/') {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001539 continue;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001540 }
1541 if (*test == '.') {
1542 /* skip extra '.' */
1543 if (test[1] == '/' || test[1] == 0) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001544 continue;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001545 } else
1546 /* '..': be careful */
1547 if (test[1] == '.' && (test[2] == '/' || test[2] == 0)) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001548 ++test;
1549 if (purl == url) {
1550 /* protect out root */
1551 goto BAD_REQUEST;
1552 }
Denis Vlasenko92758142006-10-03 19:56:34 +00001553 while (*--purl != '/') /* omit previous dir */;
1554 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001555 }
1556 }
1557 }
1558 *++purl = *test;
1559 } while (*++test);
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001560 *++purl = '\0'; /* so keep last character */
1561 test = purl; /* end ptr */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001562
1563 /* If URL is directory, adding '/' */
1564 if (test[-1] != '/') {
1565 if (is_directory(url + 1, 1, &sb)) {
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001566 config->found_moved_temporarily = url;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001567 }
1568 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001569 if (DEBUG)
1570 fprintf(stderr, "url='%s', args=%s\n", url, config->query);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001571
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001572 test = url;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001573 ip_allowed = checkPermIP();
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001574 while (ip_allowed && (test = strchr(test + 1, '/')) != NULL) {
1575 /* have path1/path2 */
1576 *test = '\0';
1577 if (is_directory(url + 1, 1, &sb)) {
1578 /* may be having subdir config */
1579 parse_conf(url + 1, SUBDIR_PARSE);
1580 ip_allowed = checkPermIP();
1581 }
1582 *test = '/';
1583 }
1584 if (blank >= 0) {
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001585 /* read until blank line for HTTP version specified, else parse immediate */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001586 while (1) {
1587 alarm(TIMEOUT);
1588 count = getLine();
1589 if (count <= 0)
1590 break;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001591
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001592 if (DEBUG)
1593 fprintf(stderr, "header: '%s'\n", buf);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001594
Denis Vlasenko55a99402006-09-30 20:41:44 +00001595#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001596 /* try and do our best to parse more lines */
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001597 if ((STRNCASECMP(buf, "Content-length:") == 0)) {
1598 /* extra read only for POST */
1599 if (prequest != request_GET) {
1600 test = buf + sizeof("Content-length:")-1;
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001601 if (!test[0])
1602 goto bail_out;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001603 errno = 0;
1604 /* not using strtoul: it ignores leading munis! */
1605 length = strtol(test, &test, 10);
1606 /* length is "ulong", but we need to pass it to int later */
1607 /* so we check for negative or too large values in one go: */
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001608 /* (long -> ulong conv caused negatives to be seen as > INT_MAX) */
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001609 if (test[0] || errno || length > INT_MAX)
1610 goto bail_out;
1611 }
1612 } else if ((STRNCASECMP(buf, "Cookie:") == 0)) {
1613 cookie = strdup(skip_whitespace(buf + sizeof("Cookie:")-1));
1614 } else if ((STRNCASECMP(buf, "Content-Type:") == 0)) {
1615 content_type = strdup(skip_whitespace(buf + sizeof("Content-Type:")-1));
1616 } else if ((STRNCASECMP(buf, "Referer:") == 0)) {
1617 config->referer = strdup(skip_whitespace(buf + sizeof("Referer:")-1));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001618 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001619#endif
1620
Denis Vlasenko55a99402006-09-30 20:41:44 +00001621#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001622 if (STRNCASECMP(buf, "Authorization:") == 0) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001623 /* We only allow Basic credentials.
1624 * It shows up as "Authorization: Basic <userid:password>" where
1625 * the userid:password is base64 encoded.
1626 */
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001627 test = skip_whitespace(buf + sizeof("Authorization:")-1);
1628 if (STRNCASECMP(test, "Basic") != 0)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001629 continue;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001630 test += sizeof("Basic")-1;
1631 /* decodeBase64() skips whitespace itself */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001632 decodeBase64(test);
1633 credentials = checkPerm(url, test);
1634 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001635#endif /* FEATURE_HTTPD_BASIC_AUTH */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001636
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001637 } /* while extra header reading */
1638 }
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001639 alarm(0);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001640 if (config->alarm_signaled)
1641 break;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001642
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001643 if (strcmp(strrchr(url, '/') + 1, httpd_conf) == 0 || ip_allowed == 0) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001644 /* protect listing [/path]/httpd_conf or IP deny */
Denis Vlasenko55a99402006-09-30 20:41:44 +00001645#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001646 FORBIDDEN: /* protect listing /cgi-bin */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001647#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001648 sendHeaders(HTTP_FORBIDDEN);
1649 break;
1650 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001651
Denis Vlasenko55a99402006-09-30 20:41:44 +00001652#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001653 if (credentials <= 0 && checkPerm(url, ":") == 0) {
1654 sendHeaders(HTTP_UNAUTHORIZED);
1655 break;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001656 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001657#endif
1658
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001659 if (config->found_moved_temporarily) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001660 sendHeaders(HTTP_MOVED_TEMPORARILY);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001661 /* clear unforked memory flag */
Denis Vlasenkod4f3d1a2006-11-16 16:20:12 +00001662 config->found_moved_temporarily = NULL;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001663 break;
1664 }
1665
1666 test = url + 1; /* skip first '/' */
1667
Denis Vlasenko55a99402006-09-30 20:41:44 +00001668#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001669 if (strncmp(test, "cgi-bin", 7) == 0) {
1670 if (test[7] == '/' && test[8] == 0)
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001671 goto FORBIDDEN; /* protect listing cgi-bin/ */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001672 sendCgi(url, prequest, length, cookie, content_type);
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001673 break;
1674 }
1675 if (prequest != request_GET) {
1676 sendHeaders(HTTP_NOT_IMPLEMENTED);
1677 break;
1678 }
Denis Vlasenko5d148e22006-11-21 00:12:09 +00001679#endif /* FEATURE_HTTPD_CGI */
1680 if (purl[-1] == '/')
1681 strcpy(purl, "index.html");
1682 if (stat(test, &sb) == 0) {
1683 /* It's a dir URL and there is index.html */
1684 config->ContentLength = sb.st_size;
1685 config->last_mod = sb.st_mtime;
1686 }
1687#if ENABLE_FEATURE_HTTPD_CGI
1688 else if (purl[-1] == '/') {
1689 /* It's a dir URL and there is no index.html
1690 * Try cgi-bin/index.cgi */
1691 if (access("/cgi-bin/index.cgi"+1, X_OK) == 0) {
1692 purl[0] = '\0';
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001693 config->query = url;
1694 sendCgi("/cgi-bin/index.cgi", prequest, length, cookie, content_type);
1695 break;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001696 }
1697 }
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001698#endif /* FEATURE_HTTPD_CGI */
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001699 sendFile(test);
1700 config->ContentLength = -1;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001701 } while (0);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001702
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001703#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001704 bail_out:
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001705#endif
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001706
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001707 if (DEBUG)
1708 fprintf(stderr, "closing socket\n\n");
1709#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001710 free(cookie);
1711 free(content_type);
Denis Vlasenkoa5342b42006-11-17 18:26:57 +00001712 free(config->referer);
1713 config->referer = NULL;
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001714# if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkoa5342b42006-11-17 18:26:57 +00001715 free(config->remoteuser);
1716 config->remoteuser = NULL;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001717# endif
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001718#endif
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001719 shutdown(config->accepted_socket, SHUT_WR);
Eric Andersend8746cd2004-02-24 07:28:38 +00001720
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001721 /* Properly wait for remote to closed */
Denis Vlasenko55a99402006-09-30 20:41:44 +00001722 FD_ZERO(&s_fd);
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001723 FD_SET(config->accepted_socket, &s_fd);
Eric Andersenc7bda1c2004-03-15 08:29:22 +00001724
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001725 do {
Denis Vlasenko55a99402006-09-30 20:41:44 +00001726 tv.tv_sec = 2;
1727 tv.tv_usec = 0;
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001728 retval = select(config->accepted_socket + 1, &s_fd, NULL, NULL, &tv);
1729 } while (retval > 0 && read(config->accepted_socket, buf, sizeof(config->buf) > 0));
Eric Andersend8746cd2004-02-24 07:28:38 +00001730
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001731 shutdown(config->accepted_socket, SHUT_RD);
1732 /* In inetd case, we close fd 1 (stdout) here. We will exit soon anyway */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001733 close(config->accepted_socket);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001734}
1735
1736/****************************************************************************
1737 *
1738 > $Function: miniHttpd()
1739 *
1740 * $Description: The main http server function.
1741 *
1742 * Given an open socket fildes, listen for new connections and farm out
1743 * the processing as a forked process.
1744 *
1745 * $Parameters:
1746 * (int) server. . . The server socket fildes.
1747 *
1748 * $Return: (int) . . . . Always 0.
1749 *
1750 ****************************************************************************/
1751static int miniHttpd(int server)
1752{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001753 fd_set readfd, portfd;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001754
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001755 FD_ZERO(&portfd);
1756 FD_SET(server, &portfd);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001757
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001758 /* copy the ports we are watching to the readfd set */
1759 while (1) {
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001760 int on, s;
1761 socklen_t fromAddrLen;
1762 struct sockaddr_in fromAddr;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001763
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001764 /* Now wait INDEFINITELY on the set of sockets! */
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001765 readfd = portfd;
1766 if (select(server + 1, &readfd, 0, 0, 0) <= 0)
1767 continue;
1768 if (!FD_ISSET(server, &readfd))
1769 continue;
1770 fromAddrLen = sizeof(fromAddr);
1771 s = accept(server, (struct sockaddr *)&fromAddr, &fromAddrLen);
1772 if (s < 0)
1773 continue;
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001774 config->accepted_socket = s;
1775 config->rmt_ip = ntohl(fromAddr.sin_addr.s_addr);
Denis Vlasenko55a99402006-09-30 20:41:44 +00001776#if ENABLE_FEATURE_HTTPD_CGI || DEBUG
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001777 sprintf(config->rmt_ip_str, "%u.%u.%u.%u",
1778 (unsigned char)(config->rmt_ip >> 24),
1779 (unsigned char)(config->rmt_ip >> 16),
1780 (unsigned char)(config->rmt_ip >> 8),
1781 config->rmt_ip & 0xff);
1782 config->port = ntohs(fromAddr.sin_port);
"Vladimir N. Oleynik"6b903a22005-12-20 11:02:54 +00001783#if DEBUG
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001784 bb_error_msg("connection from IP=%s, port %u",
1785 config->rmt_ip_str, config->port);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001786#endif
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001787#endif /* FEATURE_HTTPD_CGI */
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001788
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001789 /* set the KEEPALIVE option to cull dead connections */
1790 on = 1;
1791 setsockopt(s, SOL_SOCKET, SO_KEEPALIVE, (void *)&on, sizeof(on));
Denis Vlasenko04291bc2006-11-21 10:15:25 +00001792
1793 if (DEBUG || fork() == 0) {
1794 /* child */
Denis Vlasenko55a99402006-09-30 20:41:44 +00001795#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001796 /* protect reload config, may be confuse checking */
1797 signal(SIGHUP, SIG_IGN);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +00001798#endif
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001799 handleIncoming();
Denis Vlasenko04291bc2006-11-21 10:15:25 +00001800 if (!DEBUG)
1801 exit(0);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001802 }
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001803 close(s);
Denis Vlasenko04291bc2006-11-21 10:15:25 +00001804 } /* while (1) */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001805 return 0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001806}
1807
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001808/* from inetd */
1809static int miniHttpd_inetd(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001810{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001811 struct sockaddr_in fromAddrLen;
Denis Vlasenko55a99402006-09-30 20:41:44 +00001812 socklen_t sinlen = sizeof(struct sockaddr_in);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001813
Denis Vlasenko55a99402006-09-30 20:41:44 +00001814 getpeername(0, (struct sockaddr *)&fromAddrLen, &sinlen);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001815 config->rmt_ip = ntohl(fromAddrLen.sin_addr.s_addr);
Denis Vlasenko55a99402006-09-30 20:41:44 +00001816#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001817 sprintf(config->rmt_ip_str, "%u.%u.%u.%u",
1818 (unsigned char)(config->rmt_ip >> 24),
1819 (unsigned char)(config->rmt_ip >> 16),
1820 (unsigned char)(config->rmt_ip >> 8),
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001821 config->rmt_ip & 0xff);
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001822#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001823 config->port = ntohs(fromAddrLen.sin_port);
1824 handleIncoming();
1825 return 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001826}
Glenn L McGrath06e95652003-02-09 06:51:14 +00001827
Denis Vlasenko55a99402006-09-30 20:41:44 +00001828#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Glenn L McGrath06e95652003-02-09 06:51:14 +00001829static void sighup_handler(int sig)
1830{
1831 /* set and reset */
1832 struct sigaction sa;
1833
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001834 parse_conf(default_path_httpd_conf, sig == SIGHUP ? SIGNALED_PARSE : FIRST_PARSE);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001835 sa.sa_handler = sighup_handler;
1836 sigemptyset(&sa.sa_mask);
1837 sa.sa_flags = SA_RESTART;
1838 sigaction(SIGHUP, &sa, NULL);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001839}
1840#endif
1841
Denis Vlasenko9f609292006-11-05 19:47:33 +00001842enum {
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00001843 c_opt_config_file = 0,
1844 d_opt_decode_url,
1845 h_opt_home_httpd,
1846 USE_FEATURE_HTTPD_ENCODE_URL_STR(e_opt_encode_url,)
Denis Vlasenko9f609292006-11-05 19:47:33 +00001847 USE_FEATURE_HTTPD_BASIC_AUTH( r_opt_realm ,)
1848 USE_FEATURE_HTTPD_AUTH_MD5( m_opt_md5 ,)
1849 USE_FEATURE_HTTPD_SETUID( u_opt_setuid ,)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001850 p_opt_port ,
1851 p_opt_inetd ,
1852 p_opt_foreground,
Denis Vlasenko9f609292006-11-05 19:47:33 +00001853 OPT_CONFIG_FILE = 1 << c_opt_config_file,
1854 OPT_DECODE_URL = 1 << d_opt_decode_url,
1855 OPT_HOME_HTTPD = 1 << h_opt_home_httpd,
1856 OPT_ENCODE_URL = USE_FEATURE_HTTPD_ENCODE_URL_STR((1 << e_opt_encode_url)) + 0,
1857 OPT_REALM = USE_FEATURE_HTTPD_BASIC_AUTH( (1 << r_opt_realm )) + 0,
1858 OPT_MD5 = USE_FEATURE_HTTPD_AUTH_MD5( (1 << m_opt_md5 )) + 0,
1859 OPT_SETUID = USE_FEATURE_HTTPD_SETUID( (1 << u_opt_setuid )) + 0,
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001860 OPT_PORT = 1 << p_opt_port,
1861 OPT_INETD = 1 << p_opt_inetd,
1862 OPT_FOREGROUND = 1 << p_opt_foreground,
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00001863};
Eric Andersena3bb3e62003-06-26 09:05:32 +00001864
Denis Vlasenko55a99402006-09-30 20:41:44 +00001865static const char httpd_opts[] = "c:d:h:"
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00001866 USE_FEATURE_HTTPD_ENCODE_URL_STR("e:")
1867 USE_FEATURE_HTTPD_BASIC_AUTH("r:")
1868 USE_FEATURE_HTTPD_AUTH_MD5("m:")
1869 USE_FEATURE_HTTPD_SETUID("u:")
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001870 "p:if";
"Vladimir N. Oleynik"27d42a02005-12-02 09:46:04 +00001871
Eric Andersena3bb3e62003-06-26 09:05:32 +00001872
Glenn L McGrath06e95652003-02-09 06:51:14 +00001873int httpd_main(int argc, char *argv[])
Glenn L McGrath06e95652003-02-09 06:51:14 +00001874{
Denis Vlasenko67b23e62006-10-03 21:00:06 +00001875 unsigned opt;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001876 const char *home_httpd = home;
1877 char *url_for_decode;
1878 USE_FEATURE_HTTPD_ENCODE_URL_STR(const char *url_for_encode;)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001879 const char *s_port;
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00001880 USE_FEATURE_HTTPD_SETUID(const char *s_ugid = NULL;)
1881 USE_FEATURE_HTTPD_SETUID(struct bb_uidgid_t ugid;)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001882 USE_FEATURE_HTTPD_AUTH_MD5(const char *pass;)
Eric Andersen35e643b2003-07-28 07:40:39 +00001883
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +00001884#if ENABLE_LOCALE_SUPPORT
1885 /* Undo busybox.c: we want to speak English in http (dates etc) */
1886 setlocale(LC_TIME, "C");
1887#endif
1888
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001889 config = xzalloc(sizeof(*config));
Denis Vlasenko55a99402006-09-30 20:41:44 +00001890#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001891 config->realm = "Web Server Authentication";
Glenn L McGrath06e95652003-02-09 06:51:14 +00001892#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001893 config->port = 80;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001894 config->ContentLength = -1;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001895
Denis Vlasenko67b23e62006-10-03 21:00:06 +00001896 opt = getopt32(argc, argv, httpd_opts,
Eric Andersena3bb3e62003-06-26 09:05:32 +00001897 &(config->configFile), &url_for_decode, &home_httpd
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00001898 USE_FEATURE_HTTPD_ENCODE_URL_STR(, &url_for_encode)
1899 USE_FEATURE_HTTPD_BASIC_AUTH(, &(config->realm))
1900 USE_FEATURE_HTTPD_AUTH_MD5(, &pass)
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00001901 USE_FEATURE_HTTPD_SETUID(, &s_ugid)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001902 , &s_port
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001903 );
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001904 if (opt & OPT_DECODE_URL) {
1905 printf("%s", decodeString(url_for_decode, 1));
1906 return 0;
1907 }
Denis Vlasenko55a99402006-09-30 20:41:44 +00001908#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001909 if (opt & OPT_ENCODE_URL) {
1910 printf("%s", encodeString(url_for_encode));
1911 return 0;
1912 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001913#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00001914#if ENABLE_FEATURE_HTTPD_AUTH_MD5
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001915 if (opt & OPT_MD5) {
Denis Vlasenko55a99402006-09-30 20:41:44 +00001916 puts(pw_encrypt(pass, "$1$"));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001917 return 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001918 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001919#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001920 if (opt & OPT_PORT)
Denis Vlasenko13858992006-10-08 12:49:22 +00001921 config->port = xatou16(s_port);
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001922
Denis Vlasenko55a99402006-09-30 20:41:44 +00001923#if ENABLE_FEATURE_HTTPD_SETUID
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001924 if (opt & OPT_SETUID) {
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001925 if (!get_uidgid(&ugid, s_ugid, 1))
1926 bb_error_msg_and_die("unrecognized user[:group] "
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00001927 "name '%s'", s_ugid);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001928 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001929#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001930
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001931 xchdir(home_httpd);
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001932 if (!(opt & OPT_INETD)) {
1933 config->server_socket = openServer();
1934#if ENABLE_FEATURE_HTTPD_SETUID
1935 /* drop privileges */
1936 if (opt & OPT_SETUID) {
1937 if (ugid.gid != (gid_t)-1) {
1938 if (setgroups(1, &ugid.gid) == -1)
1939 bb_perror_msg_and_die("setgroups");
1940 xsetgid(ugid.gid);
1941 }
1942 xsetuid(ugid.uid);
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00001943 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001944#endif
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001945 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001946
Denis Vlasenko55a99402006-09-30 20:41:44 +00001947#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001948 {
1949 char *p = getenv("PATH");
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +00001950 p = xstrdup(p); /* if gets NULL, returns NULL */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001951 clearenv();
1952 if (p)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001953 setenv1("PATH", p);
1954 if (!(opt & OPT_INETD))
1955 setenv_long("SERVER_PORT", config->port);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001956 }
Glenn L McGrathfe538ba2003-09-10 23:35:45 +00001957#endif
1958
Denis Vlasenko55a99402006-09-30 20:41:44 +00001959#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001960 sighup_handler(0);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001961#else
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001962 parse_conf(default_path_httpd_conf, FIRST_PARSE);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001963#endif
1964
Denis Vlasenko0871bc82006-11-16 16:17:02 +00001965 if (opt & OPT_INETD)
1966 return miniHttpd_inetd();
1967
1968 if (!(opt & OPT_FOREGROUND))
1969 xdaemon(1, 0); /* don't change current directory */
Denis Vlasenko9f609292006-11-05 19:47:33 +00001970 return miniHttpd(config->server_socket);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001971}