blob: 72949755ab025e9d138f5287948ef90c07859d55 [file] [log] [blame]
Bernhard Reutner-Fischer2c998512006-04-12 18:09:26 +00001/* vi: set sw=4 ts=4: */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002/*
3 * httpd implementation for busybox
4 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00005 * Copyright (C) 2002,2003 Glenn Engel <glenne@engel.org>
"Vladimir N. Oleynik"79af7d52006-01-26 10:58:12 +00006 * Copyright (C) 2003-2006 Vladimir Oleynik <dzo@simtreas.ru>
Glenn L McGrath58c708a2003-01-05 04:01:56 +00007 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00008 * simplify patch stolen from libbb without using strdup
Glenn L McGrath58c708a2003-01-05 04:01:56 +00009 *
Bernhard Reutner-Fischerdac7ff12006-04-12 17:55:51 +000010 * Licensed under GPLv2 or later, see file LICENSE in this tarball for details.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000011 *
12 *****************************************************************************
13 *
Glenn L McGrath06e95652003-02-09 06:51:14 +000014 * Typical usage:
15 * for non root user
16 * httpd -p 8080 -h $HOME/public_html
17 * or for daemon start from rc script with uid=0:
18 * httpd -u www
19 * This is equivalent if www user have uid=80 to
20 * httpd -p 80 -u 80 -h /www -c /etc/httpd.conf -r "Web Server Authentication"
21 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +000022 *
Denis Vlasenko073214f2007-08-17 19:20:07 +000023 * When a url starts by "/cgi-bin/" it is assumed to be a cgi script. The
Glenn L McGrath58c708a2003-01-05 04:01:56 +000024 * server changes directory to the location of the script and executes it
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +000025 * after setting QUERY_STRING and other environment variables.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000026 *
Denis Vlasenko8b458372006-11-21 21:23:21 +000027 * Doc:
28 * "CGI Environment Variables": http://hoohoo.ncsa.uiuc.edu/cgi/env.html
29 *
Glenn L McGrath58c708a2003-01-05 04:01:56 +000030 * The server can also be invoked as a url arg decoder and html text encoder
31 * as follows:
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000032 * foo=`httpd -d $foo` # decode "Hello%20World" as "Hello World"
Glenn L McGrathc9163fe2003-05-13 16:20:11 +000033 * bar=`httpd -e "<Hello World>"` # encode as "&#60Hello&#32World&#62"
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000034 * Note that url encoding for arguments is not the same as html encoding for
Eric Andersenaff114c2004-04-14 17:51:38 +000035 * presentation. -d decodes a url-encoded argument while -e encodes in html
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000036 * for page display.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000037 *
38 * httpd.conf has the following format:
Eric Andersenc7bda1c2004-03-15 08:29:22 +000039 *
Glenn L McGrathb65422c2003-09-08 10:59:27 +000040 * A:172.20. # Allow address from 172.20.0.0/16
41 * A:10.0.0.0/25 # Allow any address from 10.0.0.0-10.0.0.127
42 * A:10.0.0.0/255.255.255.128 # Allow any address that previous set
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000043 * A:127.0.0.1 # Allow local loopback connections
44 * D:* # Deny from other IP connections
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +000045 * E404:/path/e404.html # /path/e404.html is the 404 (not found) error page
Denis Vlasenkofcd878e2007-12-29 02:16:23 +000046 * I:index.html # Show index.html when a directory is requested
Denis Vlasenkof74194e2007-10-18 12:54:39 +000047 *
48 * P:/url:[http://]hostname[:port]/new/path
49 * # When /urlXXXXXX is requested, reverse proxy
50 * # it to http://hostname[:port]/new/pathXXXXXX
51 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000052 * /cgi-bin:foo:bar # Require user foo, pwd bar on urls starting with /cgi-bin/
53 * /adm:admin:setup # Require user admin, pwd setup on urls starting with /adm/
54 * /adm:toor:PaSsWd # or user toor, pwd PaSsWd on urls starting with /adm/
55 * .au:audio/basic # additional mime type for audio.au files
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +000056 * *.php:/path/php # running cgi.php scripts through an interpreter
Eric Andersenc7bda1c2004-03-15 08:29:22 +000057 *
Eric Andersenaff114c2004-04-14 17:51:38 +000058 * A/D may be as a/d or allow/deny - first char case insensitive
Glenn L McGrath393183d2003-05-26 14:07:50 +000059 * Deny IP rules take precedence over allow rules.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000060 *
61 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000062 * The Deny/Allow IP logic:
Eric Andersenc7bda1c2004-03-15 08:29:22 +000063 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000064 * - Default is to allow all. No addresses are denied unless
Eric Andersen97a1de12004-08-26 22:22:50 +000065 * denied with a D: rule.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000066 * - Order of Deny/Allow rules is significant
67 * - Deny rules take precedence over allow rules.
68 * - If a deny all rule (D:*) is used it acts as a catch-all for unmatched
Eric Andersen97a1de12004-08-26 22:22:50 +000069 * addresses.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000070 * - Specification of Allow all (A:*) is a no-op
Eric Andersenc7bda1c2004-03-15 08:29:22 +000071 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000072 * Example:
73 * 1. Allow only specified addresses
Glenn L McGrathb65422c2003-09-08 10:59:27 +000074 * A:172.20 # Allow any address that begins with 172.20.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000075 * A:10.10. # Allow any address that begins with 10.10.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000076 * A:127.0.0.1 # Allow local loopback connections
77 * D:* # Deny from other IP connections
Eric Andersenc7bda1c2004-03-15 08:29:22 +000078 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000079 * 2. Only deny specified addresses
80 * D:1.2.3. # deny from 1.2.3.0 - 1.2.3.255
81 * D:2.3.4. # deny from 2.3.4.0 - 2.3.4.255
82 * A:* # (optional line added for clarity)
Eric Andersenc7bda1c2004-03-15 08:29:22 +000083 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000084 * If a sub directory contains a config file it is parsed and merged with
Glenn L McGrathb65422c2003-09-08 10:59:27 +000085 * any existing settings as if it was appended to the original configuration.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000086 *
87 * subdir paths are relative to the containing subdir and thus cannot
88 * affect the parent rules.
89 *
90 * Note that since the sub dir is parsed in the forked thread servicing the
91 * subdir http request, any merge is discarded when the process exits. As a
92 * result, the subdir settings only have a lifetime of a single request.
93 *
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +000094 * Custom error pages can contain an absolute path or be relative to
95 * 'home_httpd'. Error pages are to be static files (no CGI or script). Error
96 * page can only be defined in the root configuration file and are not taken
97 * into account in local (directories) config files.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000098 *
99 * If -c is not set, an attempt will be made to open the default
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000100 * root configuration file. If -c is set and the file is not found, the
101 * server exits with an error.
Eric Andersenc7bda1c2004-03-15 08:29:22 +0000102 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000103 */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000104
Denis Vlasenkob6adbf12007-05-26 19:00:18 +0000105#include "libbb.h"
Denis Vlasenko1b9064d2007-08-12 21:05:49 +0000106#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
107#include <sys/sendfile.h>
108#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000109
Denis Vlasenko073214f2007-08-17 19:20:07 +0000110//#define DEBUG 1
111#define DEBUG 0
112
Denis Vlasenko32a471e2007-09-23 13:56:57 +0000113#define IOBUF_SIZE 8192 /* IO buffer */
114
Denis Vlasenko69981422007-01-07 21:25:12 +0000115/* amount of buffering in a pipe */
116#ifndef PIPE_BUF
117# define PIPE_BUF 4096
118#endif
Denis Vlasenko32a471e2007-09-23 13:56:57 +0000119#if PIPE_BUF >= IOBUF_SIZE
120# error "PIPE_BUF >= IOBUF_SIZE"
121#endif
Denis Vlasenko073214f2007-08-17 19:20:07 +0000122
123#define HEADER_READ_TIMEOUT 60
124
Denis Vlasenko6ca409e2007-08-12 20:58:27 +0000125static const char default_path_httpd_conf[] ALIGN1 = "/etc";
126static const char httpd_conf[] ALIGN1 = "httpd.conf";
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000127static const char HTTP_200[] ALIGN1 = "HTTP/1.0 200 OK\r\n";
Glenn L McGrath06e95652003-02-09 06:51:14 +0000128
Denis Vlasenko073214f2007-08-17 19:20:07 +0000129typedef struct has_next_ptr {
130 struct has_next_ptr *next;
131} has_next_ptr;
Eric Andersen07f2fea2004-10-08 08:03:29 +0000132
Denis Vlasenko073214f2007-08-17 19:20:07 +0000133/* Must have "next" as a first member */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000134typedef struct Htaccess {
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000135 struct Htaccess *next;
Denis Vlasenko073214f2007-08-17 19:20:07 +0000136 char *after_colon;
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000137 char before_colon[1]; /* really bigger, must be last */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000138} Htaccess;
139
Denis Vlasenko073214f2007-08-17 19:20:07 +0000140/* Must have "next" as a first member */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000141typedef struct Htaccess_IP {
Denis Vlasenko073214f2007-08-17 19:20:07 +0000142 struct Htaccess_IP *next;
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000143 unsigned ip;
144 unsigned mask;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000145 int allow_deny;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000146} Htaccess_IP;
147
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000148/* Must have "next" as a first member */
149typedef struct Htaccess_Proxy {
150 struct Htaccess_Proxy *next;
151 char *url_from;
152 char *host_port;
153 char *url_to;
154} Htaccess_Proxy;
155
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000156enum {
157 HTTP_OK = 200,
Denis Vlasenkof4310172007-09-21 22:35:18 +0000158 HTTP_PARTIAL_CONTENT = 206,
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000159 HTTP_MOVED_TEMPORARILY = 302,
160 HTTP_BAD_REQUEST = 400, /* malformed syntax */
161 HTTP_UNAUTHORIZED = 401, /* authentication needed, respond with auth hdr */
162 HTTP_NOT_FOUND = 404,
163 HTTP_FORBIDDEN = 403,
164 HTTP_REQUEST_TIMEOUT = 408,
165 HTTP_NOT_IMPLEMENTED = 501, /* used for unrecognized requests */
166 HTTP_INTERNAL_SERVER_ERROR = 500,
167 HTTP_CONTINUE = 100,
168#if 0 /* future use */
169 HTTP_SWITCHING_PROTOCOLS = 101,
170 HTTP_CREATED = 201,
171 HTTP_ACCEPTED = 202,
172 HTTP_NON_AUTHORITATIVE_INFO = 203,
173 HTTP_NO_CONTENT = 204,
174 HTTP_MULTIPLE_CHOICES = 300,
175 HTTP_MOVED_PERMANENTLY = 301,
176 HTTP_NOT_MODIFIED = 304,
177 HTTP_PAYMENT_REQUIRED = 402,
178 HTTP_BAD_GATEWAY = 502,
179 HTTP_SERVICE_UNAVAILABLE = 503, /* overload, maintenance */
180 HTTP_RESPONSE_SETSIZE = 0xffffffff
181#endif
182};
183
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000184static const uint16_t http_response_type[] ALIGN2 = {
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000185 HTTP_OK,
Denis Vlasenkof4310172007-09-21 22:35:18 +0000186#if ENABLE_FEATURE_HTTPD_RANGES
187 HTTP_PARTIAL_CONTENT,
188#endif
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000189 HTTP_MOVED_TEMPORARILY,
190 HTTP_REQUEST_TIMEOUT,
191 HTTP_NOT_IMPLEMENTED,
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +0000192#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000193 HTTP_UNAUTHORIZED,
194#endif
195 HTTP_NOT_FOUND,
196 HTTP_BAD_REQUEST,
197 HTTP_FORBIDDEN,
198 HTTP_INTERNAL_SERVER_ERROR,
199#if 0 /* not implemented */
200 HTTP_CREATED,
201 HTTP_ACCEPTED,
202 HTTP_NO_CONTENT,
203 HTTP_MULTIPLE_CHOICES,
204 HTTP_MOVED_PERMANENTLY,
205 HTTP_NOT_MODIFIED,
206 HTTP_BAD_GATEWAY,
207 HTTP_SERVICE_UNAVAILABLE,
208#endif
209};
210
211static const struct {
212 const char *name;
213 const char *info;
214} http_response[ARRAY_SIZE(http_response_type)] = {
215 { "OK", NULL },
Denis Vlasenkof4310172007-09-21 22:35:18 +0000216#if ENABLE_FEATURE_HTTPD_RANGES
217 { "Partial Content", NULL },
218#endif
219 { "Found", NULL },
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000220 { "Request Timeout", "No request appeared within 60 seconds" },
221 { "Not Implemented", "The requested method is not recognized" },
222#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
223 { "Unauthorized", "" },
224#endif
225 { "Not Found", "The requested URL was not found" },
226 { "Bad Request", "Unsupported method" },
227 { "Forbidden", "" },
228 { "Internal Server Error", "Internal Server Error" },
229#if 0 /* not implemented */
230 { "Created" },
231 { "Accepted" },
232 { "No Content" },
233 { "Multiple Choices" },
234 { "Moved Permanently" },
235 { "Not Modified" },
236 { "Bad Gateway", "" },
237 { "Service Unavailable", "" },
238#endif
239};
240
Denis Vlasenkof4310172007-09-21 22:35:18 +0000241
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000242struct globals {
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000243 int verbose; /* must be int (used by getopt32) */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000244 smallint flg_deny_all;
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000245
Denis Vlasenko37c33162007-08-19 18:54:22 +0000246 unsigned rmt_ip; /* used for IP-based allow/deny rules */
247 time_t last_mod;
Denis Vlasenko37c33162007-08-19 18:54:22 +0000248 char *rmt_ip_str; /* for $REMOTE_ADDR and $REMOTE_PORT */
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000249 const char *bind_addr_or_port;
250
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000251 const char *g_query;
252 const char *configFile;
253 const char *home_httpd;
Denis Vlasenkofcd878e2007-12-29 02:16:23 +0000254 const char *index_page;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000255
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000256 const char *found_mime_type;
257 const char *found_moved_temporarily;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000258 Htaccess_IP *ip_a_d; /* config allow/deny lines */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000259
260 USE_FEATURE_HTTPD_BASIC_AUTH(const char *g_realm;)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000261 USE_FEATURE_HTTPD_BASIC_AUTH(char *remoteuser;)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000262 USE_FEATURE_HTTPD_CGI(char *referer;)
Denis Vlasenko6cd84da2007-07-21 14:57:54 +0000263 USE_FEATURE_HTTPD_CGI(char *user_agent;)
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000264
Denis Vlasenkof4310172007-09-21 22:35:18 +0000265 off_t file_size; /* -1 - unknown */
266#if ENABLE_FEATURE_HTTPD_RANGES
267 off_t range_start;
268 off_t range_end;
269 off_t range_len;
270#endif
271
Denis Vlasenko55a99402006-09-30 20:41:44 +0000272#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000273 Htaccess *g_auth; /* config user:password lines */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000274#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000275#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000276 Htaccess *mime_a; /* config mime types */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000277#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000278#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000279 Htaccess *script_i; /* config script interpreters */
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000280#endif
Denis Vlasenko921799d2007-08-19 19:28:09 +0000281 char *iobuf; /* [IOBUF_SIZE] */
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000282#define hdr_buf bb_common_bufsiz1
283 char *hdr_ptr;
284 int hdr_cnt;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000285#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
286 const char *http_error_page[ARRAY_SIZE(http_response_type)];
287#endif
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000288#if ENABLE_FEATURE_HTTPD_PROXY
289 Htaccess_Proxy *proxy;
290#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000291};
292#define G (*ptr_to_globals)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000293#define verbose (G.verbose )
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000294#define flg_deny_all (G.flg_deny_all )
295#define rmt_ip (G.rmt_ip )
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000296#define bind_addr_or_port (G.bind_addr_or_port)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000297#define g_query (G.g_query )
298#define configFile (G.configFile )
299#define home_httpd (G.home_httpd )
Denis Vlasenkofcd878e2007-12-29 02:16:23 +0000300#define index_page (G.index_page )
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000301#define found_mime_type (G.found_mime_type )
302#define found_moved_temporarily (G.found_moved_temporarily)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000303#define last_mod (G.last_mod )
304#define ip_a_d (G.ip_a_d )
305#define g_realm (G.g_realm )
306#define remoteuser (G.remoteuser )
307#define referer (G.referer )
308#define user_agent (G.user_agent )
Denis Vlasenkof4310172007-09-21 22:35:18 +0000309#define file_size (G.file_size )
310#if ENABLE_FEATURE_HTTPD_RANGES
311#define range_start (G.range_start )
312#define range_end (G.range_end )
313#define range_len (G.range_len )
314#endif
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000315#define rmt_ip_str (G.rmt_ip_str )
316#define g_auth (G.g_auth )
317#define mime_a (G.mime_a )
318#define script_i (G.script_i )
319#define iobuf (G.iobuf )
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000320#define hdr_ptr (G.hdr_ptr )
321#define hdr_cnt (G.hdr_cnt )
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000322#define http_error_page (G.http_error_page )
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000323#define proxy (G.proxy )
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000324#define INIT_G() do { \
325 PTR_TO_GLOBALS = xzalloc(sizeof(G)); \
326 USE_FEATURE_HTTPD_BASIC_AUTH(g_realm = "Web Server Authentication";) \
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000327 bind_addr_or_port = "80"; \
Denis Vlasenkof4310172007-09-21 22:35:18 +0000328 file_size = -1; \
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000329} while (0)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000330
Denis Vlasenkof4310172007-09-21 22:35:18 +0000331#if !ENABLE_FEATURE_HTTPD_RANGES
332enum {
333 range_start = 0,
334 range_end = MAXINT(off_t) - 1,
335 range_len = MAXINT(off_t),
336};
337#endif
338
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000339
Denis Vlasenko0bb993f2006-11-21 00:06:28 +0000340#define STRNCASECMP(a, str) strncasecmp((a), (str), sizeof(str)-1)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000341
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000342/* Prototypes */
343static void send_file_and_exit(const char *url, int headers) ATTRIBUTE_NORETURN;
344
Denis Vlasenko073214f2007-08-17 19:20:07 +0000345static void free_llist(has_next_ptr **pptr)
346{
347 has_next_ptr *cur = *pptr;
348 while (cur) {
349 has_next_ptr *t = cur;
350 cur = cur->next;
351 free(t);
352 }
353 *pptr = NULL;
354}
355
356#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
357 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
358 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
359static ALWAYS_INLINE void free_Htaccess_list(Htaccess **pptr)
360{
361 free_llist((has_next_ptr**)pptr);
362}
363#endif
364
365static ALWAYS_INLINE void free_Htaccess_IP_list(Htaccess_IP **pptr)
366{
367 free_llist((has_next_ptr**)pptr);
368}
Glenn L McGrath06e95652003-02-09 06:51:14 +0000369
Denis Vlasenkod867f322007-08-19 21:15:42 +0000370/* Returns presumed mask width in bits or < 0 on error.
371 * Updates strp, stores IP at provided pointer */
372static int scan_ip(const char **strp, unsigned *ipp, unsigned char endc)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000373{
Denis Vlasenkod867f322007-08-19 21:15:42 +0000374 const char *p = *strp;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000375 int auto_mask = 8;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000376 unsigned ip = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000377 int j;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000378
Denis Vlasenkod867f322007-08-19 21:15:42 +0000379 if (*p == '/')
380 return -auto_mask;
381
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000382 for (j = 0; j < 4; j++) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000383 unsigned octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000384
Denis Vlasenkod867f322007-08-19 21:15:42 +0000385 if ((*p < '0' || *p > '9') && *p != '/' && *p)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000386 return -auto_mask;
387 octet = 0;
388 while (*p >= '0' && *p <= '9') {
389 octet *= 10;
390 octet += *p - '0';
391 if (octet > 255)
392 return -auto_mask;
393 p++;
394 }
395 if (*p == '.')
396 p++;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000397 if (*p != '/' && *p)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000398 auto_mask += 8;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000399 ip = (ip << 8) | octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000400 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000401 if (*p) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000402 if (*p != endc)
403 return -auto_mask;
404 p++;
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000405 if (*p == '\0')
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000406 return -auto_mask;
407 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000408 *ipp = ip;
409 *strp = p;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000410 return auto_mask;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000411}
412
Denis Vlasenkod867f322007-08-19 21:15:42 +0000413/* Returns 0 on success. Stores IP and mask at provided pointers */
414static int scan_ip_mask(const char *str, unsigned *ipp, unsigned *maskp)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000415{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000416 int i;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000417 unsigned mask;
418 char *p;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000419
Denis Vlasenkod867f322007-08-19 21:15:42 +0000420 i = scan_ip(&str, ipp, '/');
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000421 if (i < 0)
422 return i;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000423
Denis Vlasenkod867f322007-08-19 21:15:42 +0000424 if (*str) {
425 /* there is /xxx after dotted-IP address */
426 i = bb_strtou(str, &p, 10);
427 if (*p == '.') {
428 /* 'xxx' itself is dotted-IP mask, parse it */
429 /* (return 0 (success) only if it has N.N.N.N form) */
430 return scan_ip(&str, maskp, '\0') - 32;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000431 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000432 if (*p)
433 return -1;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000434 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000435
436 if (i > 32)
Denis Vlasenko92758142006-10-03 19:56:34 +0000437 return -1;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000438
439 if (sizeof(unsigned) == 4 && i == 32) {
440 /* mask >>= 32 below may not work */
441 mask = 0;
442 } else {
443 mask = 0xffffffff;
444 mask >>= i;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000445 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000446 /* i == 0 -> *maskp = 0x00000000
447 * i == 1 -> *maskp = 0x80000000
448 * i == 4 -> *maskp = 0xf0000000
449 * i == 31 -> *maskp = 0xfffffffe
450 * i == 32 -> *maskp = 0xffffffff */
451 *maskp = (uint32_t)(~mask);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000452 return 0;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000453}
454
Denis Vlasenko073214f2007-08-17 19:20:07 +0000455/*
456 * Parse configuration file into in-memory linked list.
Eric Andersenc7bda1c2004-03-15 08:29:22 +0000457 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000458 * The first non-white character is examined to determine if the config line
459 * is one of the following:
460 * .ext:mime/type # new mime type not compiled into httpd
461 * [adAD]:from # ip address allow/deny, * for wildcard
462 * /path:user:pass # username/password
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000463 * Ennn:error.html # error page for status nnn
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000464 * P:/url:[http://]hostname[:port]/new/path # reverse proxy
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000465 *
466 * Any previous IP rules are discarded.
467 * If the flag argument is not SUBDIR_PARSE then all /path and mime rules
468 * are also discarded. That is, previous settings are retained if flag is
469 * SUBDIR_PARSE.
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000470 * Error pages are only parsed on the main config file.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000471 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000472 * path Path where to look for httpd.conf (without filename).
473 * flag Type of the parse request.
474 */
475/* flag */
476#define FIRST_PARSE 0
477#define SUBDIR_PARSE 1
478#define SIGNALED_PARSE 2
479#define FIND_FROM_HTTPD_ROOT 3
Glenn L McGrath06e95652003-02-09 06:51:14 +0000480static void parse_conf(const char *path, int flag)
481{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000482 FILE *f;
Denis Vlasenko55a99402006-09-30 20:41:44 +0000483#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000484 Htaccess *prev;
485#endif
486#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
487 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
488 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000489 Htaccess *cur;
Glenn L McGrathbaaa6e92003-09-15 15:00:43 +0000490#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000491 const char *cf = configFile;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000492 char buf[160];
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000493 char *p0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000494 char *c, *p;
Denis Vlasenko073214f2007-08-17 19:20:07 +0000495 Htaccess_IP *pip;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000496
Denis Vlasenko073214f2007-08-17 19:20:07 +0000497 /* discard old rules */
498 free_Htaccess_IP_list(&ip_a_d);
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000499 flg_deny_all = 0;
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000500#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
501 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
502 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000503 /* retain previous auth and mime config only for subdir parse */
504 if (flag != SUBDIR_PARSE) {
Denis Vlasenko55a99402006-09-30 20:41:44 +0000505#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko073214f2007-08-17 19:20:07 +0000506 free_Htaccess_list(&g_auth);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000507#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000508#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko073214f2007-08-17 19:20:07 +0000509 free_Htaccess_list(&mime_a);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000510#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000511#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko073214f2007-08-17 19:20:07 +0000512 free_Htaccess_list(&script_i);
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000513#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000514 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000515#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000516
517 if (flag == SUBDIR_PARSE || cf == NULL) {
518 cf = alloca(strlen(path) + sizeof(httpd_conf) + 2);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000519 sprintf((char *)cf, "%s/%s", path, httpd_conf);
Glenn L McGrath393183d2003-05-26 14:07:50 +0000520 }
521
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000522 while ((f = fopen(cf, "r")) == NULL) {
523 if (flag == SUBDIR_PARSE || flag == FIND_FROM_HTTPD_ROOT) {
524 /* config file not found, no changes to config */
525 return;
526 }
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000527 if (configFile && flag == FIRST_PARSE) /* if -c option given */
Denis Vlasenko0c97c9d2007-10-01 11:58:38 +0000528 bb_simple_perror_msg_and_die(cf);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000529 flag = FIND_FROM_HTTPD_ROOT;
530 cf = httpd_conf;
531 }
532
Denis Vlasenko55a99402006-09-30 20:41:44 +0000533#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000534 prev = g_auth;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000535#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000536 /* This could stand some work */
Denis Vlasenko55a99402006-09-30 20:41:44 +0000537 while ((p0 = fgets(buf, sizeof(buf), f)) != NULL) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000538 c = NULL;
Denis Vlasenko073214f2007-08-17 19:20:07 +0000539 for (p = p0; *p0 != '\0' && *p0 != '#'; p0++) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000540 if (!isspace(*p0)) {
541 *p++ = *p0;
542 if (*p0 == ':' && c == NULL)
Denis Vlasenko073214f2007-08-17 19:20:07 +0000543 c = p;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000544 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000545 }
Denis Vlasenko073214f2007-08-17 19:20:07 +0000546 *p = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000547
548 /* test for empty or strange line */
Denis Vlasenko073214f2007-08-17 19:20:07 +0000549 if (c == NULL || *c == '\0')
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000550 continue;
551 p0 = buf;
552 if (*p0 == 'd')
Denis Vlasenko073214f2007-08-17 19:20:07 +0000553 *p0 = 'D';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000554 if (*c == '*') {
555 if (*p0 == 'D') {
556 /* memorize deny all */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000557 flg_deny_all = 1;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000558 }
559 /* skip default other "word:*" config lines */
560 continue;
561 }
562
563 if (*p0 == 'a')
564 *p0 = 'A';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000565 if (*p0 == 'A' || *p0 == 'D') {
566 /* storing current config IP line */
Denis Vlasenko9b1381f2007-01-03 02:56:00 +0000567 pip = xzalloc(sizeof(Htaccess_IP));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000568 if (pip) {
Denis Vlasenko55a99402006-09-30 20:41:44 +0000569 if (scan_ip_mask(c, &(pip->ip), &(pip->mask))) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000570 /* syntax IP{/mask} error detected, protect all */
571 *p0 = 'D';
572 pip->mask = 0;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000573 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000574 pip->allow_deny = *p0;
575 if (*p0 == 'D') {
Denis Vlasenko073214f2007-08-17 19:20:07 +0000576 /* Deny:from_IP move top */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000577 pip->next = ip_a_d;
578 ip_a_d = pip;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000579 } else {
580 /* add to bottom A:form_IP config line */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000581 Htaccess_IP *prev_IP = ip_a_d;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000582
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000583 if (prev_IP == NULL) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000584 ip_a_d = pip;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000585 } else {
586 while (prev_IP->next)
587 prev_IP = prev_IP->next;
588 prev_IP->next = pip;
589 }
590 }
591 }
592 continue;
593 }
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000594
595#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
596 if (flag == FIRST_PARSE && *p0 == 'E') {
597 int i;
598 /* error status code */
599 int status = atoi(++p0);
600 /* c already points at the character following ':' in parse loop */
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000601 /* c = strchr(p0, ':'); c++; */
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000602 if (status < HTTP_CONTINUE) {
603 bb_error_msg("config error '%s' in '%s'", buf, cf);
604 continue;
605 }
606
607 /* then error page; find matching status */
608 for (i = 0; i < ARRAY_SIZE(http_response_type); i++) {
609 if (http_response_type[i] == status) {
610 http_error_page[i] = concat_path_file((*c == '/') ? NULL : home_httpd, c);
611 break;
612 }
613 }
614 continue;
615 }
616#endif
617
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000618#if ENABLE_FEATURE_HTTPD_PROXY
619 if (flag == FIRST_PARSE && *p0 == 'P') {
620 /* P:/url:[http://]hostname[:port]/new/path */
621 char *url_from, *host_port, *url_to;
622 Htaccess_Proxy *proxy_entry;
623
624 url_from = c;
625 host_port = strchr(c, ':');
626 if (host_port == NULL) {
627 bb_error_msg("config error '%s' in '%s'", buf, cf);
628 continue;
629 }
630 *host_port++ = '\0';
631 if (strncmp(host_port, "http://", 7) == 0)
Denis Vlasenko78ee7c82007-10-21 23:24:42 +0000632 host_port += 7;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000633 if (*host_port == '\0') {
634 bb_error_msg("config error '%s' in '%s'", buf, cf);
635 continue;
636 }
637 url_to = strchr(host_port, '/');
638 if (url_to == NULL) {
639 bb_error_msg("config error '%s' in '%s'", buf, cf);
640 continue;
641 }
642 *url_to = '\0';
643 proxy_entry = xzalloc(sizeof(Htaccess_Proxy));
644 proxy_entry->url_from = xstrdup(url_from);
645 proxy_entry->host_port = xstrdup(host_port);
646 *url_to = '/';
647 proxy_entry->url_to = xstrdup(url_to);
648 proxy_entry->next = proxy;
649 proxy = proxy_entry;
650 continue;
651 }
652#endif
653
Denis Vlasenko55a99402006-09-30 20:41:44 +0000654#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000655 if (*p0 == '/') {
Denis Vlasenko073214f2007-08-17 19:20:07 +0000656 /* make full path from httpd root / current_path / config_line_path */
657 cf = (flag == SUBDIR_PARSE ? path : "");
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000658 p0 = xmalloc(strlen(cf) + (c - buf) + 2 + strlen(c));
Denis Vlasenko073214f2007-08-17 19:20:07 +0000659 c[-1] = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000660 sprintf(p0, "/%s%s", cf, buf);
661
662 /* another call bb_simplify_path */
663 cf = p = p0;
664
665 do {
666 if (*p == '/') {
667 if (*cf == '/') { /* skip duplicate (or initial) slash */
668 continue;
Denis Vlasenko3d2a9212007-09-28 22:35:29 +0000669 }
670 if (*cf == '.') {
Denis Vlasenko073214f2007-08-17 19:20:07 +0000671 if (cf[1] == '/' || cf[1] == '\0') { /* remove extra '.' */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000672 continue;
Denis Vlasenko3d2a9212007-09-28 22:35:29 +0000673 }
674 if ((cf[1] == '.') && (cf[2] == '/' || cf[2] == '\0')) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000675 ++cf;
676 if (p > p0) {
Denis Vlasenko92758142006-10-03 19:56:34 +0000677 while (*--p != '/') /* omit previous dir */;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000678 }
679 continue;
680 }
681 }
682 }
683 *++p = *cf;
684 } while (*++cf);
685
686 if ((p == p0) || (*p != '/')) { /* not a trailing slash */
687 ++p; /* so keep last character */
688 }
Denis Vlasenko3d2a9212007-09-28 22:35:29 +0000689 *p = ':';
690 strcpy(p + 1, c);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000691 }
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000692#endif
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000693
Denis Vlasenkofcd878e2007-12-29 02:16:23 +0000694 if (*p0 == 'I') {
695 index_page = xstrdup(c);
696 continue;
697 }
698
Denis Vlasenko3bba5452006-12-30 17:57:03 +0000699#if ENABLE_FEATURE_HTTPD_BASIC_AUTH \
700 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES \
701 || ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000702 /* storing current config line */
Denis Vlasenko9b1381f2007-01-03 02:56:00 +0000703 cur = xzalloc(sizeof(Htaccess) + strlen(p0));
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000704 cf = strcpy(cur->before_colon, p0);
Denis Vlasenko55a99402006-09-30 20:41:44 +0000705#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000706 if (*p0 == '/')
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000707 free(p0);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000708#endif
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000709 c = strchr(cf, ':');
710 *c++ = '\0';
711 cur->after_colon = c;
712#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
713 if (*cf == '.') {
714 /* config .mime line move top for overwrite previous */
715 cur->next = mime_a;
716 mime_a = cur;
717 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000718 }
Glenn L McGrathbaaa6e92003-09-15 15:00:43 +0000719#endif
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000720#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
721 if (*cf == '*' && cf[1] == '.') {
722 /* config script interpreter line move top for overwrite previous */
723 cur->next = script_i;
724 script_i = cur;
725 continue;
726 }
727#endif
728#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
729 if (prev == NULL) {
730 /* first line */
731 g_auth = prev = cur;
732 } else {
733 /* sort path, if current length eq or bigger then move up */
734 Htaccess *prev_hti = g_auth;
735 size_t l = strlen(cf);
736 Htaccess *hti;
737
738 for (hti = prev_hti; hti; hti = hti->next) {
739 if (l >= strlen(hti->before_colon)) {
740 /* insert before hti */
741 cur->next = hti;
742 if (prev_hti != hti) {
743 prev_hti->next = cur;
744 } else {
745 /* insert as top */
746 g_auth = cur;
747 }
748 break;
749 }
750 if (prev_hti != hti)
751 prev_hti = prev_hti->next;
752 }
753 if (!hti) { /* not inserted, add to bottom */
754 prev->next = cur;
755 prev = cur;
756 }
757 }
758#endif /* BASIC_AUTH */
759#endif /* BASIC_AUTH || MIME_TYPES || SCRIPT_INTERPR */
760 } /* while (fgets) */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000761 fclose(f);
Glenn L McGrath06e95652003-02-09 06:51:14 +0000762}
763
Denis Vlasenko55a99402006-09-30 20:41:44 +0000764#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Denis Vlasenko073214f2007-08-17 19:20:07 +0000765/*
766 * Given a string, html-encode special characters.
767 * This is used for the -e command line option to provide an easy way
768 * for scripts to encode result data without confusing browsers. The
769 * returned string pointer is memory allocated by malloc().
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000770 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000771 * Returns a pointer to the encoded string (malloced).
772 */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000773static char *encodeString(const char *string)
774{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000775 /* take the simple route and encode everything */
776 /* could possibly scan once to get length. */
777 int len = strlen(string);
Denis Vlasenkoab2aea42007-01-29 22:51:58 +0000778 char *out = xmalloc(len * 6 + 1);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000779 char *p = out;
780 char ch;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000781
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000782 while ((ch = *string++)) {
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000783 /* very simple check for what to encode */
784 if (isalnum(ch))
785 *p++ = ch;
786 else
787 p += sprintf(p, "&#%d;", (unsigned char) ch);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000788 }
Denis Vlasenkoab2aea42007-01-29 22:51:58 +0000789 *p = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000790 return out;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000791}
Denis Vlasenkob3a07152006-11-16 18:04:43 +0000792#endif /* FEATURE_HTTPD_ENCODE_URL_STR */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000793
Denis Vlasenko073214f2007-08-17 19:20:07 +0000794/*
795 * Given a URL encoded string, convert it to plain ascii.
796 * Since decoding always makes strings smaller, the decode is done in-place.
797 * Thus, callers should strdup() the argument if they do not want the
798 * argument modified. The return is the original pointer, allowing this
799 * function to be easily used as arguments to other functions.
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000800 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000801 * string The first string to decode.
802 * option_d 1 if called for httpd -d
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000803 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000804 * Returns a pointer to the decoded string (same as input).
805 */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000806static unsigned hex_to_bin(unsigned char c)
807{
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000808 unsigned v;
809
810 v = c - '0';
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000811 if (v <= 9)
812 return v;
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000813 /* c | 0x20: letters to lower case, non-letters
814 * to (potentially different) non-letters */
815 v = (unsigned)(c | 0x20) - 'a';
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000816 if (v <= 5)
817 return v + 10;
818 return ~0;
819}
820/* For testing:
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000821void t(char c) { printf("'%c'(%u) %u\n", c, c, hex_to_bin(c)); }
822int main() { t(0x10); t(0x20); t('0'); t('9'); t('A'); t('F'); t('a'); t('f');
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000823t('0'-1); t('9'+1); t('A'-1); t('F'+1); t('a'-1); t('f'+1); return 0; }
824*/
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000825static char *decodeString(char *orig, int option_d)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000826{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000827 /* note that decoded string is always shorter than original */
828 char *string = orig;
829 char *ptr = string;
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000830 char c;
Eric Andersena3bb3e62003-06-26 09:05:32 +0000831
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000832 while ((c = *ptr++) != '\0') {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000833 unsigned v;
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000834
835 if (option_d && c == '+') {
Denis Vlasenko601ae132006-11-28 23:37:46 +0000836 *string++ = ' ';
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000837 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000838 }
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000839 if (c != '%') {
840 *string++ = c;
841 continue;
842 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000843 v = hex_to_bin(ptr[0]);
844 if (v > 15) {
845 bad_hex:
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000846 if (!option_d)
847 return NULL;
848 *string++ = '%';
849 continue;
850 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000851 v = (v * 16) | hex_to_bin(ptr[1]);
852 if (v > 255)
853 goto bad_hex;
854 if (!option_d && (v == '/' || v == '\0')) {
Denis Vlasenkof7996f32007-01-11 17:20:00 +0000855 /* caller takes it as indication of invalid
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000856 * (dangerous wrt exploits) chars */
857 return orig + 1;
858 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000859 *string++ = v;
Denis Vlasenkoa35c9e92006-11-29 15:58:50 +0000860 ptr += 2;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000861 }
862 *string = '\0';
863 return orig;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000864}
865
Denis Vlasenko55a99402006-09-30 20:41:44 +0000866#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000867/*
Denis Vlasenko073214f2007-08-17 19:20:07 +0000868 * Decode a base64 data stream as per rfc1521.
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000869 * Note that the rfc states that non base64 chars are to be ignored.
Denis Vlasenko073214f2007-08-17 19:20:07 +0000870 * Since the decode always results in a shorter size than the input,
871 * it is OK to pass the input arg as an output arg.
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000872 * Parameter: a pointer to a base64 encoded string.
873 * Decoded data is stored in-place.
874 */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000875static void decodeBase64(char *Data)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000876{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000877 const unsigned char *in = (const unsigned char *)Data;
Denis Vlasenko37c33162007-08-19 18:54:22 +0000878 /* The decoded size will be at most 3/4 the size of the encoded */
Denis Vlasenko088b9592007-04-18 21:14:46 +0000879 unsigned ch = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000880 int i = 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000881
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000882 while (*in) {
883 int t = *in++;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000884
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000885 if (t >= '0' && t <= '9')
886 t = t - '0' + 52;
887 else if (t >= 'A' && t <= 'Z')
888 t = t - 'A';
889 else if (t >= 'a' && t <= 'z')
890 t = t - 'a' + 26;
891 else if (t == '+')
892 t = 62;
893 else if (t == '/')
894 t = 63;
895 else if (t == '=')
896 t = 0;
897 else
898 continue;
Glenn L McGrath874e3382003-05-14 12:11:36 +0000899
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000900 ch = (ch << 6) | t;
901 i++;
902 if (i == 4) {
903 *Data++ = (char) (ch >> 16);
904 *Data++ = (char) (ch >> 8);
905 *Data++ = (char) ch;
906 i = 0;
907 }
908 }
Denis Vlasenko088b9592007-04-18 21:14:46 +0000909 *Data = '\0';
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000910}
911#endif
912
Denis Vlasenko073214f2007-08-17 19:20:07 +0000913/*
914 * Create a listen server socket on the designated port.
915 */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000916static int openServer(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000917{
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000918 unsigned n = bb_strtou(bind_addr_or_port, NULL, 10);
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000919 if (!errno && n && n <= 0xffff)
920 n = create_and_bind_stream_or_die(NULL, n);
921 else
922 n = create_and_bind_stream_or_die(bind_addr_or_port, 80);
923 xlisten(n, 9);
924 return n;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000925}
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000926
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000927/*
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000928 * Log the connection closure and exit.
929 */
930static void log_and_exit(void) ATTRIBUTE_NORETURN;
931static void log_and_exit(void)
932{
Denis Vlasenko921799d2007-08-19 19:28:09 +0000933 /* Paranoia. IE said to be buggy. It may send some extra data
934 * or be confused by us just exiting without SHUT_WR. Oh well. */
935 shutdown(1, SHUT_WR);
936 ndelay_on(0);
937 while (read(0, iobuf, IOBUF_SIZE) > 0)
938 continue;
939
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000940 if (verbose > 2)
941 bb_error_msg("closed");
942 _exit(xfunc_error_retval);
943}
944
945/*
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000946 * Create and send HTTP response headers.
947 * The arguments are combined and sent as one write operation. Note that
948 * IE will puke big-time if the headers are not sent in one packet and the
949 * second packet is delayed for any reason.
950 * responseNum - the result code to send.
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000951 */
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000952static void send_headers(int responseNum)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000953{
Denis Vlasenko073214f2007-08-17 19:20:07 +0000954 static const char RFC1123FMT[] ALIGN1 = "%a, %d %b %Y %H:%M:%S GMT";
955
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000956 const char *responseString = "";
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000957 const char *infoString = NULL;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000958 const char *mime_type;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000959#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
960 const char *error_page = 0;
961#endif
Denis Vlasenkob64eed62007-01-14 17:06:11 +0000962 unsigned i;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000963 time_t timer = time(0);
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000964 char tmp_str[80];
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000965 int len;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000966
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000967 for (i = 0; i < ARRAY_SIZE(http_response_type); i++) {
968 if (http_response_type[i] == responseNum) {
969 responseString = http_response[i].name;
970 infoString = http_response[i].info;
971#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
972 error_page = http_error_page[i];
973#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000974 break;
975 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000976 }
977 /* error message is HTML */
978 mime_type = responseNum == HTTP_OK ?
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000979 found_mime_type : "text/html";
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000980
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000981 if (verbose)
Denis Vlasenko241b1562007-08-17 19:18:47 +0000982 bb_error_msg("response:%u", responseNum);
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000983
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000984 /* emit the current date */
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000985 strftime(tmp_str, sizeof(tmp_str), RFC1123FMT, gmtime(&timer));
986 len = sprintf(iobuf,
Denis Vlasenko69981422007-01-07 21:25:12 +0000987 "HTTP/1.0 %d %s\r\nContent-type: %s\r\n"
988 "Date: %s\r\nConnection: close\r\n",
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000989 responseNum, responseString, mime_type, tmp_str);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000990
Denis Vlasenko55a99402006-09-30 20:41:44 +0000991#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000992 if (responseNum == HTTP_UNAUTHORIZED) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000993 len += sprintf(iobuf + len,
Denis Vlasenko8e858e22007-03-07 09:35:43 +0000994 "WWW-Authenticate: Basic realm=\"%s\"\r\n",
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000995 g_realm);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000996 }
Glenn L McGrath3d2405c2003-02-10 22:28:21 +0000997#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000998 if (responseNum == HTTP_MOVED_TEMPORARILY) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000999 len += sprintf(iobuf + len, "Location: %s/%s%s\r\n",
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001000 found_moved_temporarily,
1001 (g_query ? "?" : ""),
1002 (g_query ? g_query : ""));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001003 }
Eric Andersen07f2fea2004-10-08 08:03:29 +00001004
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001005#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
1006 if (error_page && !access(error_page, R_OK)) {
1007 strcat(iobuf, "\r\n");
1008 len += 2;
1009
1010 if (DEBUG)
1011 fprintf(stderr, "headers: '%s'\n", iobuf);
1012 full_write(1, iobuf, len);
1013 if (DEBUG)
1014 fprintf(stderr, "writing error page: '%s'\n", error_page);
1015 return send_file_and_exit(error_page, FALSE);
1016 }
1017#endif
1018
Denis Vlasenkof4310172007-09-21 22:35:18 +00001019 if (file_size != -1) { /* file */
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001020 strftime(tmp_str, sizeof(tmp_str), RFC1123FMT, gmtime(&last_mod));
Denis Vlasenkof4310172007-09-21 22:35:18 +00001021#if ENABLE_FEATURE_HTTPD_RANGES
1022 if (responseNum == HTTP_PARTIAL_CONTENT) {
1023 len += sprintf(iobuf + len, "Content-Range: bytes %"OFF_FMT"d-%"OFF_FMT"d/%"OFF_FMT"d\r\n",
1024 range_start,
1025 range_end,
1026 file_size);
1027 file_size = range_end - range_start + 1;
1028 }
1029#endif
1030 len += sprintf(iobuf + len,
1031#if ENABLE_FEATURE_HTTPD_RANGES
1032 "Accept-Ranges: bytes\r\n"
1033#endif
1034 "Last-Modified: %s\r\n%s %"OFF_FMT"d\r\n",
1035 tmp_str,
1036 "Content-length:",
1037 file_size
1038 );
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001039 }
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001040 iobuf[len++] = '\r';
1041 iobuf[len++] = '\n';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001042 if (infoString) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001043 len += sprintf(iobuf + len,
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001044 "<HTML><HEAD><TITLE>%d %s</TITLE></HEAD>\n"
1045 "<BODY><H1>%d %s</H1>\n%s\n</BODY></HTML>\n",
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001046 responseNum, responseString,
1047 responseNum, responseString, infoString);
1048 }
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001049 if (DEBUG)
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001050 fprintf(stderr, "headers: '%s'\n", iobuf);
Denis Vlasenko9611cb12007-08-18 14:18:43 +00001051 if (full_write(1, iobuf, len) != len) {
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001052 if (verbose > 1)
1053 bb_perror_msg("error");
1054 log_and_exit();
1055 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001056}
1057
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001058static void send_headers_and_exit(int responseNum) ATTRIBUTE_NORETURN;
1059static void send_headers_and_exit(int responseNum)
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001060{
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001061 send_headers(responseNum);
1062 log_and_exit();
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001063}
1064
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001065/*
1066 * Read from the socket until '\n' or EOF. '\r' chars are removed.
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001067 * '\n' is replaced with NUL.
1068 * Return number of characters read or 0 if nothing is read
1069 * ('\r' and '\n' are not counted).
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001070 * Data is returned in iobuf.
1071 */
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001072static int get_line(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001073{
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001074 int count = 0;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001075 char c;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001076
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001077 while (1) {
1078 if (hdr_cnt <= 0) {
1079 hdr_cnt = safe_read(0, hdr_buf, sizeof(hdr_buf));
1080 if (hdr_cnt <= 0)
1081 break;
1082 hdr_ptr = hdr_buf;
1083 }
1084 iobuf[count] = c = *hdr_ptr++;
1085 hdr_cnt--;
1086
1087 if (c == '\r')
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001088 continue;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001089 if (c == '\n') {
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001090 iobuf[count] = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001091 return count;
1092 }
Denis Vlasenko921799d2007-08-19 19:28:09 +00001093 if (count < (IOBUF_SIZE - 1)) /* check overflow */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001094 count++;
1095 }
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001096 return count;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001097}
1098
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001099#if ENABLE_FEATURE_HTTPD_CGI || ENABLE_FEATURE_HTTPD_PROXY
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001100
1101/* gcc 4.2.1 fares better with NOINLINE */
1102static NOINLINE void cgi_io_loop_and_exit(int fromCgi_rd, int toCgi_wr, int post_len) ATTRIBUTE_NORETURN;
1103static NOINLINE void cgi_io_loop_and_exit(int fromCgi_rd, int toCgi_wr, int post_len)
1104{
1105 enum { FROM_CGI = 1, TO_CGI = 2 }; /* indexes in pfd[] */
1106 struct pollfd pfd[3];
1107 int out_cnt; /* we buffer a bit of initial CGI output */
1108 int count;
1109
1110 /* iobuf is used for CGI -> network data,
1111 * hdr_buf is for network -> CGI data (POSTDATA) */
1112
1113 /* If CGI dies, we still want to correctly finish reading its output
1114 * and send it to the peer. So please no SIGPIPEs! */
1115 signal(SIGPIPE, SIG_IGN);
1116
Denis Vlasenko4a457562007-10-14 02:34:20 +00001117 // We inconsistently handle a case when more POSTDATA from network
1118 // is coming than we expected. We may give *some part* of that
1119 // extra data to CGI.
1120
1121 //if (hdr_cnt > post_len) {
1122 // /* We got more POSTDATA from network than we expected */
1123 // hdr_cnt = post_len;
1124 //}
1125 post_len -= hdr_cnt;
1126 /* post_len - number of POST bytes not yet read from network */
1127
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001128 /* NB: breaking out of this loop jumps to log_and_exit() */
1129 out_cnt = 0;
1130 while (1) {
1131 memset(pfd, 0, sizeof(pfd));
1132
1133 pfd[FROM_CGI].fd = fromCgi_rd;
1134 pfd[FROM_CGI].events = POLLIN;
1135
1136 if (toCgi_wr) {
1137 pfd[TO_CGI].fd = toCgi_wr;
1138 if (hdr_cnt > 0) {
1139 pfd[TO_CGI].events = POLLOUT;
1140 } else if (post_len > 0) {
1141 pfd[0].events = POLLIN;
1142 } else {
1143 /* post_len <= 0 && hdr_cnt <= 0:
1144 * no more POST data to CGI,
1145 * let CGI see EOF on CGI's stdin */
1146 close(toCgi_wr);
1147 toCgi_wr = 0;
1148 }
1149 }
1150
1151 /* Now wait on the set of sockets */
Denis Vlasenko5d61e712007-09-27 10:09:59 +00001152 count = safe_poll(pfd, 3, -1);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001153 if (count <= 0) {
1154#if 0
Denis Vlasenkofb0eba72008-01-02 19:55:04 +00001155 if (safe_waitpid(pid, &status, WNOHANG) <= 0) {
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001156 /* Weird. CGI didn't exit and no fd's
1157 * are ready, yet poll returned?! */
1158 continue;
1159 }
1160 if (DEBUG && WIFEXITED(status))
1161 bb_error_msg("CGI exited, status=%d", WEXITSTATUS(status));
1162 if (DEBUG && WIFSIGNALED(status))
1163 bb_error_msg("CGI killed, signal=%d", WTERMSIG(status));
1164#endif
1165 break;
1166 }
1167
1168 if (pfd[TO_CGI].revents) {
1169 /* hdr_cnt > 0 here due to the way pfd[TO_CGI].events set */
1170 /* Have data from peer and can write to CGI */
1171 count = safe_write(toCgi_wr, hdr_ptr, hdr_cnt);
1172 /* Doesn't happen, we dont use nonblocking IO here
1173 *if (count < 0 && errno == EAGAIN) {
1174 * ...
1175 *} else */
1176 if (count > 0) {
1177 hdr_ptr += count;
1178 hdr_cnt -= count;
1179 } else {
1180 /* EOF/broken pipe to CGI, stop piping POST data */
1181 hdr_cnt = post_len = 0;
1182 }
1183 }
1184
1185 if (pfd[0].revents) {
1186 /* post_len > 0 && hdr_cnt == 0 here */
1187 /* We expect data, prev data portion is eaten by CGI
1188 * and there *is* data to read from the peer
1189 * (POSTDATA) */
1190 //count = post_len > (int)sizeof(hdr_buf) ? (int)sizeof(hdr_buf) : post_len;
1191 //count = safe_read(0, hdr_buf, count);
1192 count = safe_read(0, hdr_buf, sizeof(hdr_buf));
1193 if (count > 0) {
1194 hdr_cnt = count;
1195 hdr_ptr = hdr_buf;
1196 post_len -= count;
1197 } else {
1198 /* no more POST data can be read */
1199 post_len = 0;
1200 }
1201 }
1202
1203 if (pfd[FROM_CGI].revents) {
1204 /* There is something to read from CGI */
1205 char *rbuf = iobuf;
1206
1207 /* Are we still buffering CGI output? */
1208 if (out_cnt >= 0) {
1209 /* HTTP_200[] has single "\r\n" at the end.
1210 * According to http://hoohoo.ncsa.uiuc.edu/cgi/out.html,
1211 * CGI scripts MUST send their own header terminated by
1212 * empty line, then data. That's why we have only one
1213 * <cr><lf> pair here. We will output "200 OK" line
1214 * if needed, but CGI still has to provide blank line
1215 * between header and body */
1216
1217 /* Must use safe_read, not full_read, because
1218 * CGI may output a few first bytes and then wait
1219 * for POSTDATA without closing stdout.
1220 * With full_read we may wait here forever. */
1221 count = safe_read(fromCgi_rd, rbuf + out_cnt, PIPE_BUF - 8);
1222 if (count <= 0) {
1223 /* eof (or error) and there was no "HTTP",
1224 * so write it, then write received data */
1225 if (out_cnt) {
1226 full_write(1, HTTP_200, sizeof(HTTP_200)-1);
1227 full_write(1, rbuf, out_cnt);
1228 }
1229 break; /* CGI stdout is closed, exiting */
1230 }
1231 out_cnt += count;
1232 count = 0;
1233 /* "Status" header format is: "Status: 302 Redirected\r\n" */
1234 if (out_cnt >= 8 && memcmp(rbuf, "Status: ", 8) == 0) {
1235 /* send "HTTP/1.0 " */
1236 if (full_write(1, HTTP_200, 9) != 9)
1237 break;
1238 rbuf += 8; /* skip "Status: " */
1239 count = out_cnt - 8;
1240 out_cnt = -1; /* buffering off */
1241 } else if (out_cnt >= 4) {
1242 /* Did CGI add "HTTP"? */
1243 if (memcmp(rbuf, HTTP_200, 4) != 0) {
1244 /* there is no "HTTP", do it ourself */
1245 if (full_write(1, HTTP_200, sizeof(HTTP_200)-1) != sizeof(HTTP_200)-1)
1246 break;
1247 }
1248 /* Commented out:
1249 if (!strstr(rbuf, "ontent-")) {
1250 full_write(s, "Content-type: text/plain\r\n\r\n", 28);
1251 }
1252 * Counter-example of valid CGI without Content-type:
1253 * echo -en "HTTP/1.0 302 Found\r\n"
1254 * echo -en "Location: http://www.busybox.net\r\n"
1255 * echo -en "\r\n"
1256 */
1257 count = out_cnt;
1258 out_cnt = -1; /* buffering off */
1259 }
1260 } else {
1261 count = safe_read(fromCgi_rd, rbuf, PIPE_BUF);
1262 if (count <= 0)
1263 break; /* eof (or error) */
1264 }
1265 if (full_write(1, rbuf, count) != count)
1266 break;
1267 if (DEBUG)
1268 fprintf(stderr, "cgi read %d bytes: '%.*s'\n", count, count, rbuf);
1269 } /* if (pfd[FROM_CGI].revents) */
1270 } /* while (1) */
1271 log_and_exit();
1272}
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001273#endif
1274
1275#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001276
Denis Vlasenko921799d2007-08-19 19:28:09 +00001277static void setenv1(const char *name, const char *value)
1278{
1279 setenv(name, value ? value : "", 1);
1280}
1281
Denis Vlasenko241b1562007-08-17 19:18:47 +00001282/*
1283 * Spawn CGI script, forward CGI's stdin/out <=> network
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001284 *
Denis Vlasenko241b1562007-08-17 19:18:47 +00001285 * Environment variables are set up and the script is invoked with pipes
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001286 * for stdin/stdout. If a POST is being done the script is fed the POST
Denis Vlasenko241b1562007-08-17 19:18:47 +00001287 * data in addition to setting the QUERY_STRING variable (for GETs or POSTs).
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001288 *
Denis Vlasenko241b1562007-08-17 19:18:47 +00001289 * Parameters:
1290 * const char *url The requested URL (with leading /).
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001291 * int post_len Length of the POST body.
Denis Vlasenko241b1562007-08-17 19:18:47 +00001292 * const char *cookie For set HTTP_COOKIE.
1293 * const char *content_type For set CONTENT_TYPE.
1294 */
1295static void send_cgi_and_exit(
1296 const char *url,
1297 const char *request,
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001298 int post_len,
Denis Vlasenko241b1562007-08-17 19:18:47 +00001299 const char *cookie,
1300 const char *content_type) ATTRIBUTE_NORETURN;
1301static void send_cgi_and_exit(
1302 const char *url,
1303 const char *request,
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001304 int post_len,
Denis Vlasenko241b1562007-08-17 19:18:47 +00001305 const char *cookie,
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001306 const char *content_type)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001307{
Denis Vlasenkoe5d37cc2007-08-11 20:20:02 +00001308 struct { int rd; int wr; } fromCgi; /* CGI -> httpd pipe */
1309 struct { int rd; int wr; } toCgi; /* httpd -> CGI pipe */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001310 char *fullpath;
1311 char *script;
1312 char *purl;
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001313 int pid;
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001314
1315 /*
1316 * We are mucking with environment _first_ and then vfork/exec,
1317 * this allows us to use vfork safely. Parent don't care about
1318 * these environment changes anyway.
1319 */
1320
1321 /*
1322 * Find PATH_INFO.
1323 */
1324 purl = xstrdup(url);
1325 script = purl;
1326 while ((script = strchr(script + 1, '/')) != NULL) {
1327 /* have script.cgi/PATH_INFO or dirs/script.cgi[/PATH_INFO] */
1328 struct stat sb;
1329
1330 *script = '\0';
1331 if (!is_directory(purl + 1, 1, &sb)) {
1332 /* not directory, found script.cgi/PATH_INFO */
1333 *script = '/';
1334 break;
1335 }
1336 *script = '/'; /* is directory, find next '/' */
1337 }
1338 setenv1("PATH_INFO", script); /* set /PATH_INFO or "" */
1339 setenv1("REQUEST_METHOD", request);
1340 if (g_query) {
1341 putenv(xasprintf("%s=%s?%s", "REQUEST_URI", purl, g_query));
1342 } else {
1343 setenv1("REQUEST_URI", purl);
1344 }
1345 if (script != NULL)
1346 *script = '\0'; /* cut off /PATH_INFO */
1347
1348 /* SCRIPT_FILENAME required by PHP in CGI mode */
1349 fullpath = concat_path_file(home_httpd, purl);
1350 setenv1("SCRIPT_FILENAME", fullpath);
1351 /* set SCRIPT_NAME as full path: /cgi-bin/dirs/script.cgi */
1352 setenv1("SCRIPT_NAME", purl);
1353 /* http://hoohoo.ncsa.uiuc.edu/cgi/env.html:
1354 * QUERY_STRING: The information which follows the ? in the URL
1355 * which referenced this script. This is the query information.
1356 * It should not be decoded in any fashion. This variable
1357 * should always be set when there is query information,
1358 * regardless of command line decoding. */
1359 /* (Older versions of bbox seem to do some decoding) */
1360 setenv1("QUERY_STRING", g_query);
1361 putenv((char*)"SERVER_SOFTWARE=busybox httpd/"BB_VER);
1362 putenv((char*)"SERVER_PROTOCOL=HTTP/1.0");
1363 putenv((char*)"GATEWAY_INTERFACE=CGI/1.1");
1364 /* Having _separate_ variables for IP and port defeats
1365 * the purpose of having socket abstraction. Which "port"
1366 * are you using on Unix domain socket?
1367 * IOW - REMOTE_PEER="1.2.3.4:56" makes much more sense.
1368 * Oh well... */
1369 {
1370 char *p = rmt_ip_str ? rmt_ip_str : (char*)"";
1371 char *cp = strrchr(p, ':');
1372 if (ENABLE_FEATURE_IPV6 && cp && strchr(cp, ']'))
1373 cp = NULL;
1374 if (cp) *cp = '\0'; /* delete :PORT */
1375 setenv1("REMOTE_ADDR", p);
Denis Vlasenko37c33162007-08-19 18:54:22 +00001376 if (cp) {
1377 *cp = ':';
1378#if ENABLE_FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV
1379 setenv1("REMOTE_PORT", cp + 1);
1380#endif
1381 }
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001382 }
1383 setenv1("HTTP_USER_AGENT", user_agent);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001384 if (post_len)
1385 putenv(xasprintf("CONTENT_LENGTH=%d", post_len));
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001386 if (cookie)
1387 setenv1("HTTP_COOKIE", cookie);
1388 if (content_type)
1389 setenv1("CONTENT_TYPE", content_type);
1390#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
1391 if (remoteuser) {
1392 setenv1("REMOTE_USER", remoteuser);
1393 putenv((char*)"AUTH_TYPE=Basic");
1394 }
1395#endif
1396 if (referer)
1397 setenv1("HTTP_REFERER", referer);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001398
Denis Vlasenko241b1562007-08-17 19:18:47 +00001399 xpipe(&fromCgi.rd);
1400 xpipe(&toCgi.rd);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001401
Denis Vlasenko80281fe2007-03-07 22:16:38 +00001402 pid = vfork();
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001403 if (pid < 0) {
1404 /* TODO: log perror? */
1405 log_and_exit();
1406 }
Denis Vlasenkof7996f32007-01-11 17:20:00 +00001407
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001408 if (!pid) {
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001409 /* Child process */
Denis Vlasenko241b1562007-08-17 19:18:47 +00001410 xfunc_error_retval = 242;
1411
Denis Vlasenkoe5d37cc2007-08-11 20:20:02 +00001412 xmove_fd(toCgi.rd, 0); /* replace stdin with the pipe */
1413 xmove_fd(fromCgi.wr, 1); /* replace stdout with the pipe */
1414 close(fromCgi.rd);
1415 close(toCgi.wr);
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001416 /* User seeing stderr output can be a security problem.
Denis Vlasenko241b1562007-08-17 19:18:47 +00001417 * If CGI really wants that, it can always do dup itself. */
Denis Vlasenko1ec15cd2007-08-11 20:20:43 +00001418 /* dup2(1, 2); */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001419
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001420 /* script must have absolute path */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001421 script = strrchr(fullpath, '/');
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001422 if (!script)
1423 goto error_execing_cgi;
1424 *script = '\0';
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001425 /* chdiring to script's dir */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001426 if (chdir(fullpath) == 0) {
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001427 char *argv[2];
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001428#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
1429 char *interpr = NULL;
1430 char *suffix = strrchr(purl, '.');
1431
1432 if (suffix) {
1433 Htaccess *cur;
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001434 for (cur = script_i; cur; cur = cur->next) {
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001435 if (strcmp(cur->before_colon + 1, suffix) == 0) {
1436 interpr = cur->after_colon;
1437 break;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001438 }
1439 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001440 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001441#endif
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001442 *script = '/';
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001443 /* set argv[0] to name without path */
1444 argv[0] = (char*)bb_basename(purl);
1445 argv[1] = NULL;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001446#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001447 if (interpr)
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001448 execv(interpr, argv);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001449 else
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001450#endif
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001451 execv(fullpath, argv);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001452 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001453 error_execing_cgi:
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001454 /* send to stdout
1455 * (we are CGI here, our stdout is pumped to the net) */
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001456 send_headers_and_exit(HTTP_NOT_FOUND);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001457 } /* end child */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001458
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001459 /* Parent process */
1460
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001461 /* Restore variables possibly changed by child */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001462 xfunc_error_retval = 0;
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001463
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001464 /* Pump data */
Denis Vlasenkoe5d37cc2007-08-11 20:20:02 +00001465 close(fromCgi.wr);
1466 close(toCgi.rd);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001467 cgi_io_loop_and_exit(fromCgi.rd, toCgi.wr, post_len);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001468}
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001469
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001470#endif /* FEATURE_HTTPD_CGI */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001471
Denis Vlasenko241b1562007-08-17 19:18:47 +00001472/*
1473 * Send a file response to a HTTP request, and exit
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00001474 *
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001475 * Parameters:
1476 * const char *url The requested URL (with leading /).
1477 * headers Don't send headers before if FALSE.
Denis Vlasenko241b1562007-08-17 19:18:47 +00001478 */
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001479static void send_file_and_exit(const char *url, int headers)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001480{
Denis Vlasenko073214f2007-08-17 19:20:07 +00001481 static const char *const suffixTable[] = {
1482 /* Warning: shorter equivalent suffix in one line must be first */
1483 ".htm.html", "text/html",
1484 ".jpg.jpeg", "image/jpeg",
1485 ".gif", "image/gif",
1486 ".png", "image/png",
1487 ".txt.h.c.cc.cpp", "text/plain",
1488 ".css", "text/css",
1489 ".wav", "audio/wav",
1490 ".avi", "video/x-msvideo",
1491 ".qt.mov", "video/quicktime",
1492 ".mpe.mpeg", "video/mpeg",
1493 ".mid.midi", "audio/midi",
1494 ".mp3", "audio/mpeg",
1495#if 0 /* unpopular */
1496 ".au", "audio/basic",
1497 ".pac", "application/x-ns-proxy-autoconfig",
1498 ".vrml.wrl", "model/vrml",
1499#endif
1500 NULL
1501 };
1502
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001503 char *suffix;
Denis Vlasenko6ca409e2007-08-12 20:58:27 +00001504 int f;
1505 const char *const *table;
1506 const char *try_suffix;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001507 ssize_t count;
1508#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
Denis Vlasenkof4310172007-09-21 22:35:18 +00001509 off_t offset;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001510#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001511
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001512 suffix = strrchr(url, '.');
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001513
Denis Vlasenko073214f2007-08-17 19:20:07 +00001514 /* If not found, set default as "application/octet-stream"; */
1515 found_mime_type = "application/octet-stream";
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001516 if (suffix) {
Denis Vlasenko073214f2007-08-17 19:20:07 +00001517#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
1518 Htaccess *cur;
1519#endif
1520 for (table = suffixTable; *table; table += 2) {
1521 try_suffix = strstr(table[0], suffix);
1522 if (try_suffix) {
1523 try_suffix += strlen(suffix);
1524 if (*try_suffix == '\0' || *try_suffix == '.') {
1525 found_mime_type = table[1];
1526 break;
1527 }
1528 }
1529 }
1530#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_MIME_TYPES
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001531 for (cur = mime_a; cur; cur = cur->next) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001532 if (strcmp(cur->before_colon, suffix) == 0) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001533 found_mime_type = cur->after_colon;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001534 break;
1535 }
1536 }
Denis Vlasenko073214f2007-08-17 19:20:07 +00001537#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +00001538 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001539
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001540 if (DEBUG)
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001541 bb_error_msg("sending file '%s' content-type: %s",
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001542 url, found_mime_type);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001543
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001544 f = open(url, O_RDONLY);
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001545 if (f < 0) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001546 if (DEBUG)
1547 bb_perror_msg("cannot open '%s'", url);
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001548 if (headers)
1549 send_headers_and_exit(HTTP_NOT_FOUND);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001550 }
Denis Vlasenkof4310172007-09-21 22:35:18 +00001551#if ENABLE_FEATURE_HTTPD_RANGES
1552 if (!headers)
1553 range_start = 0; /* err pages and ranges don't mix */
1554 range_len = MAXINT(off_t);
1555 if (range_start) {
1556 if (!range_end) {
1557 range_end = file_size - 1;
1558 }
1559 if (range_end < range_start
1560 || lseek(f, range_start, SEEK_SET) != range_start
1561 ) {
1562 lseek(f, 0, SEEK_SET);
1563 range_start = 0;
1564 } else {
1565 range_len = range_end - range_start + 1;
1566 send_headers(HTTP_PARTIAL_CONTENT);
1567 headers = 0;
1568 }
1569 }
1570#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +00001571
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001572 if (headers)
1573 send_headers(HTTP_OK);
Denis Vlasenko241b1562007-08-17 19:18:47 +00001574
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001575 /* If you want to know about EPIPE below
1576 * (happens if you abort downloads from local httpd): */
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001577 signal(SIGPIPE, SIG_IGN);
Denis Vlasenko241b1562007-08-17 19:18:47 +00001578
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001579#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
Denis Vlasenkof4310172007-09-21 22:35:18 +00001580 offset = range_start;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001581 do {
Denis Vlasenkof4310172007-09-21 22:35:18 +00001582 /* sz is rounded down to 64k */
1583 ssize_t sz = MAXINT(ssize_t) - 0xffff;
1584 USE_FEATURE_HTTPD_RANGES(if (sz > range_len) sz = range_len;)
1585 count = sendfile(1, f, &offset, sz);
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001586 if (count < 0) {
Denis Vlasenkof4310172007-09-21 22:35:18 +00001587 if (offset == range_start)
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001588 goto fallback;
Denis Vlasenko241b1562007-08-17 19:18:47 +00001589 goto fin;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001590 }
Denis Vlasenkof4310172007-09-21 22:35:18 +00001591 USE_FEATURE_HTTPD_RANGES(range_len -= sz;)
1592 } while (count > 0 && range_len);
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001593 log_and_exit();
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001594
1595 fallback:
1596#endif
Denis Vlasenko921799d2007-08-19 19:28:09 +00001597 while ((count = safe_read(f, iobuf, IOBUF_SIZE)) > 0) {
Denis Vlasenkof4310172007-09-21 22:35:18 +00001598 ssize_t n;
1599 USE_FEATURE_HTTPD_RANGES(if (count > range_len) count = range_len;)
1600 n = full_write(1, iobuf, count);
Denis Vlasenko241b1562007-08-17 19:18:47 +00001601 if (count != n)
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001602 break;
Denis Vlasenkof4310172007-09-21 22:35:18 +00001603 USE_FEATURE_HTTPD_RANGES(range_len -= count;)
1604 if (!range_len)
1605 break;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001606 }
Denis Vlasenko241b1562007-08-17 19:18:47 +00001607#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
1608 fin:
1609#endif
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001610 if (count < 0 && verbose > 1)
1611 bb_perror_msg("error");
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001612 log_and_exit();
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001613}
1614
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001615static int checkPermIP(void)
1616{
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001617 Htaccess_IP *cur;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001618
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001619 /* This could stand some work */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001620 for (cur = ip_a_d; cur; cur = cur->next) {
Denis Vlasenkob64eed62007-01-14 17:06:11 +00001621#if DEBUG
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001622 fprintf(stderr,
1623 "checkPermIP: '%s' ? '%u.%u.%u.%u/%u.%u.%u.%u'\n",
1624 rmt_ip_str,
Denis Vlasenko6536a9b2007-01-12 10:35:23 +00001625 (unsigned char)(cur->ip >> 24),
1626 (unsigned char)(cur->ip >> 16),
1627 (unsigned char)(cur->ip >> 8),
1628 (unsigned char)(cur->ip),
1629 (unsigned char)(cur->mask >> 24),
1630 (unsigned char)(cur->mask >> 16),
1631 (unsigned char)(cur->mask >> 8),
1632 (unsigned char)(cur->mask)
1633 );
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001634#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001635 if ((rmt_ip & cur->mask) == cur->ip)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001636 return cur->allow_deny == 'A'; /* Allow/Deny */
1637 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001638
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001639 /* if unconfigured, return 1 - access from all */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001640 return !flg_deny_all;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001641}
1642
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001643#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko073214f2007-08-17 19:20:07 +00001644/*
1645 * Check the permission file for access password protected.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001646 *
Denis Vlasenko073214f2007-08-17 19:20:07 +00001647 * If config file isn't present, everything is allowed.
1648 * Entries are of the form you can see example from header source
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001649 *
Denis Vlasenko073214f2007-08-17 19:20:07 +00001650 * path The file path.
1651 * request User information to validate.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001652 *
Denis Vlasenko073214f2007-08-17 19:20:07 +00001653 * Returns 1 if request is OK.
1654 */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001655static int checkPerm(const char *path, const char *request)
1656{
Denis Vlasenko073214f2007-08-17 19:20:07 +00001657 Htaccess *cur;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001658 const char *p;
1659 const char *p0;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001660
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001661 const char *prev = NULL;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001662
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001663 /* This could stand some work */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001664 for (cur = g_auth; cur; cur = cur->next) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001665 size_t l;
1666
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001667 p0 = cur->before_colon;
1668 if (prev != NULL && strcmp(prev, p0) != 0)
1669 continue; /* find next identical */
1670 p = cur->after_colon;
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001671 if (DEBUG)
1672 fprintf(stderr, "checkPerm: '%s' ? '%s'\n", p0, request);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001673
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001674 l = strlen(p0);
1675 if (strncmp(p0, path, l) == 0
1676 && (l == 1 || path[l] == '/' || path[l] == '\0')
1677 ) {
1678 char *u;
1679 /* path match found. Check request */
1680 /* for check next /path:user:password */
1681 prev = p0;
1682 u = strchr(request, ':');
1683 if (u == NULL) {
1684 /* bad request, ':' required */
1685 break;
1686 }
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001687
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001688 if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
1689 char *cipher;
1690 char *pp;
Eric Andersen35e643b2003-07-28 07:40:39 +00001691
Denis Vlasenko073214f2007-08-17 19:20:07 +00001692 if (strncmp(p, request, u - request) != 0) {
Denis Vlasenko921799d2007-08-19 19:28:09 +00001693 /* user doesn't match */
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001694 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001695 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001696 pp = strchr(p, ':');
Denis Vlasenko921799d2007-08-19 19:28:09 +00001697 if (pp && pp[1] == '$' && pp[2] == '1'
1698 && pp[3] == '$' && pp[4]
1699 ) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001700 pp++;
1701 cipher = pw_encrypt(u+1, pp);
1702 if (strcmp(cipher, pp) == 0)
1703 goto set_remoteuser_var; /* Ok */
1704 /* unauthorized */
1705 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001706 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001707 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001708
1709 if (strcmp(p, request) == 0) {
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001710 set_remoteuser_var:
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001711 remoteuser = strdup(request);
1712 if (remoteuser)
Denis Vlasenko921799d2007-08-19 19:28:09 +00001713 remoteuser[u - request] = '\0';
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001714 return 1; /* Ok */
1715 }
1716 /* unauthorized */
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001717 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001718 } /* for */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001719
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001720 return prev == NULL;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001721}
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001722#endif /* FEATURE_HTTPD_BASIC_AUTH */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +00001723
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001724#if ENABLE_FEATURE_HTTPD_PROXY
1725static Htaccess_Proxy *find_proxy_entry(const char *url)
1726{
1727 Htaccess_Proxy *p;
1728 for (p = proxy; p; p = p->next) {
1729 if (strncmp(url, p->url_from, strlen(p->url_from)) == 0)
1730 return p;
1731 }
1732 return NULL;
1733}
1734#endif
1735
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001736/*
1737 * Handle timeouts
1738 */
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001739static void exit_on_signal(int sig) ATTRIBUTE_NORETURN;
1740static void exit_on_signal(int sig)
Eric Andersen07f2fea2004-10-08 08:03:29 +00001741{
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001742 send_headers_and_exit(HTTP_REQUEST_TIMEOUT);
Eric Andersen07f2fea2004-10-08 08:03:29 +00001743}
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001744
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001745/*
1746 * Handle an incoming http request and exit.
1747 */
Denis Vlasenko367960b2007-08-18 14:20:21 +00001748static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr) ATTRIBUTE_NORETURN;
1749static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001750{
Denis Vlasenko073214f2007-08-17 19:20:07 +00001751 static const char request_GET[] ALIGN1 = "GET";
1752
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001753 struct stat sb;
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001754 char *urlcopy;
1755 char *urlp;
1756 char *tptr;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001757 int ip_allowed;
Denis Vlasenko55a99402006-09-30 20:41:44 +00001758#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko073214f2007-08-17 19:20:07 +00001759 const char *prequest;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001760 char *cookie = NULL;
1761 char *content_type = NULL;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001762 unsigned long length = 0;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001763#elif ENABLE_FEATURE_HTTPD_PROXY
1764#define prequest request_GET
1765 unsigned long length = 0;
1766#endif
1767 char http_major_version;
1768#if ENABLE_FEATURE_HTTPD_PROXY
1769 char http_minor_version;
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001770 char *header_buf = header_buf; /* for gcc */
1771 char *header_ptr = header_ptr;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001772 Htaccess_Proxy *proxy_entry;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001773#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001774 struct sigaction sa;
Denis Vlasenko55a99402006-09-30 20:41:44 +00001775#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001776 int credentials = -1; /* if not required this is Ok */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001777#endif
1778
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001779 /* Allocation of iobuf is postponed until now
1780 * (IOW, server process doesn't need to waste 8k) */
Denis Vlasenko921799d2007-08-19 19:28:09 +00001781 iobuf = xmalloc(IOBUF_SIZE);
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001782
Denis Vlasenko367960b2007-08-18 14:20:21 +00001783 rmt_ip = 0;
1784 if (fromAddr->sa.sa_family == AF_INET) {
1785 rmt_ip = ntohl(fromAddr->sin.sin_addr.s_addr);
1786 }
Denis Vlasenko35465a32007-09-25 11:58:33 +00001787#if ENABLE_FEATURE_IPV6
1788 if (fromAddr->sa.sa_family == AF_INET6
1789 && fromAddr->sin6.sin6_addr.s6_addr32[0] == 0
1790 && fromAddr->sin6.sin6_addr.s6_addr32[1] == 0
1791 && ntohl(fromAddr->sin6.sin6_addr.s6_addr32[2]) == 0xffff)
1792 rmt_ip = ntohl(fromAddr->sin6.sin6_addr.s6_addr32[3]);
1793#endif
Denis Vlasenko367960b2007-08-18 14:20:21 +00001794 if (ENABLE_FEATURE_HTTPD_CGI || DEBUG || verbose) {
1795 rmt_ip_str = xmalloc_sockaddr2dotted(&fromAddr->sa);
1796 }
1797 if (verbose) {
1798 /* this trick makes -v logging much simpler */
1799 applet_name = rmt_ip_str;
1800 if (verbose > 2)
1801 bb_error_msg("connected");
1802 }
1803
Denis Vlasenko073214f2007-08-17 19:20:07 +00001804 /* Install timeout handler */
Denis Vlasenko9611cb12007-08-18 14:18:43 +00001805 memset(&sa, 0, sizeof(sa));
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001806 sa.sa_handler = exit_on_signal;
Denis Vlasenko9611cb12007-08-18 14:18:43 +00001807 /* sigemptyset(&sa.sa_mask); - memset should be enough */
1808 /*sa.sa_flags = 0; - no SA_RESTART */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001809 sigaction(SIGALRM, &sa, NULL);
Denis Vlasenko073214f2007-08-17 19:20:07 +00001810 alarm(HEADER_READ_TIMEOUT);
Eric Andersen07f2fea2004-10-08 08:03:29 +00001811
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001812 if (!get_line()) /* EOF or error or empty line */
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001813 send_headers_and_exit(HTTP_BAD_REQUEST);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001814
Denis Vlasenko073214f2007-08-17 19:20:07 +00001815 /* Determine type of request (GET/POST) */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001816 urlp = strpbrk(iobuf, " \t");
1817 if (urlp == NULL)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001818 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001819 *urlp++ = '\0';
Denis Vlasenko55a99402006-09-30 20:41:44 +00001820#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko073214f2007-08-17 19:20:07 +00001821 prequest = request_GET;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001822 if (strcasecmp(iobuf, prequest) != 0) {
1823 prequest = "POST";
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001824 if (strcasecmp(iobuf, prequest) != 0)
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001825 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001826 }
1827#else
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001828 if (strcasecmp(iobuf, request_GET) != 0)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001829 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001830#endif
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001831 urlp = skip_whitespace(urlp);
1832 if (urlp[0] != '/')
1833 send_headers_and_exit(HTTP_BAD_REQUEST);
1834
1835 /* Find end of URL and parse HTTP version, if any */
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001836 http_major_version = '0';
1837 USE_FEATURE_HTTPD_PROXY(http_minor_version = '0';)
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001838 tptr = strchrnul(urlp, ' ');
1839 /* Is it " HTTP/"? */
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001840 if (tptr[0] && strncmp(tptr + 1, HTTP_200, 5) == 0) {
1841 http_major_version = tptr[6];
1842 USE_FEATURE_HTTPD_PROXY(http_minor_version = tptr[8];)
1843 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001844 *tptr = '\0';
Glenn L McGrath06e95652003-02-09 06:51:14 +00001845
Denis Vlasenko073214f2007-08-17 19:20:07 +00001846 /* Copy URL from after "GET "/"POST " to stack-allocated char[] */
Denis Vlasenkofcd878e2007-12-29 02:16:23 +00001847 urlcopy = alloca((tptr - urlp) + 2 + strlen(index_page));
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001848 /*if (urlcopy == NULL)
1849 * send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);*/
1850 strcpy(urlcopy, urlp);
1851 /* NB: urlcopy ptr is never changed after this */
Denis Vlasenko073214f2007-08-17 19:20:07 +00001852
1853 /* Extract url args if present */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001854 g_query = NULL;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001855 tptr = strchr(urlcopy, '?');
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001856 if (tptr) {
1857 *tptr++ = '\0';
1858 g_query = tptr;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001859 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001860
Denis Vlasenko073214f2007-08-17 19:20:07 +00001861 /* Decode URL escape sequences */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001862 tptr = decodeString(urlcopy, 0);
1863 if (tptr == NULL)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001864 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001865 if (tptr == urlcopy + 1) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001866 /* '/' or NUL is encoded */
1867 send_headers_and_exit(HTTP_NOT_FOUND);
1868 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001869
Denis Vlasenko073214f2007-08-17 19:20:07 +00001870 /* Canonicalize path */
1871 /* Algorithm stolen from libbb bb_simplify_path(),
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001872 * but don't strdup and reducing trailing slash and protect out root */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001873 urlp = tptr = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001874 do {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001875 if (*urlp == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001876 /* skip duplicate (or initial) slash */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001877 if (*tptr == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001878 continue;
1879 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001880 if (*tptr == '.') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001881 /* skip extra '.' */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001882 if (tptr[1] == '/' || !tptr[1]) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001883 continue;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001884 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001885 /* '..': be careful */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001886 if (tptr[1] == '.' && (tptr[2] == '/' || !tptr[2])) {
1887 ++tptr;
1888 if (urlp == urlcopy) /* protect root */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001889 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001890 while (*--urlp != '/') /* omit previous dir */;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001891 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001892 }
1893 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001894 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001895 *++urlp = *tptr;
1896 } while (*++tptr);
1897 *++urlp = '\0'; /* so keep last character */
1898 tptr = urlp; /* end ptr */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001899
Denis Vlasenko073214f2007-08-17 19:20:07 +00001900 /* If URL is a directory, add '/' */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001901 if (tptr[-1] != '/') {
1902 if (is_directory(urlcopy + 1, 1, &sb)) {
1903 found_moved_temporarily = urlcopy;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001904 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001905 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001906
Denis Vlasenko073214f2007-08-17 19:20:07 +00001907 /* Log it */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001908 if (verbose > 1)
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001909 bb_error_msg("url:%s", urlcopy);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001910
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001911 tptr = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001912 ip_allowed = checkPermIP();
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001913 while (ip_allowed && (tptr = strchr(tptr + 1, '/')) != NULL) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001914 /* have path1/path2 */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001915 *tptr = '\0';
1916 if (is_directory(urlcopy + 1, 1, &sb)) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001917 /* may be having subdir config */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001918 parse_conf(urlcopy + 1, SUBDIR_PARSE);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001919 ip_allowed = checkPermIP();
1920 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001921 *tptr = '/';
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001922 }
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001923
1924#if ENABLE_FEATURE_HTTPD_PROXY
1925 proxy_entry = find_proxy_entry(urlcopy);
1926 if (proxy_entry)
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001927 header_buf = header_ptr = xmalloc(IOBUF_SIZE);
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001928#endif
1929
1930 if (http_major_version >= '0') {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001931 /* Request was with "... HTTP/nXXX", and n >= 0 */
Denis Vlasenko073214f2007-08-17 19:20:07 +00001932
1933 /* Read until blank line for HTTP version specified, else parse immediate */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001934 while (1) {
Denis Vlasenko073214f2007-08-17 19:20:07 +00001935 alarm(HEADER_READ_TIMEOUT);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001936 if (!get_line())
1937 break; /* EOF or error or empty line */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001938 if (DEBUG)
1939 bb_error_msg("header: '%s'", iobuf);
Denis Vlasenko073214f2007-08-17 19:20:07 +00001940
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001941#if ENABLE_FEATURE_HTTPD_PROXY
1942 /* We need 2 more bytes for yet another "\r\n" -
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001943 * see near fdprintf(proxy_fd...) further below */
1944 if (proxy_entry && (header_ptr - header_buf) < IOBUF_SIZE - 2) {
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001945 int len = strlen(iobuf);
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001946 if (len > IOBUF_SIZE - (header_ptr - header_buf) - 4)
1947 len = IOBUF_SIZE - (header_ptr - header_buf) - 4;
1948 memcpy(header_ptr, iobuf, len);
1949 header_ptr += len;
1950 header_ptr[0] = '\r';
1951 header_ptr[1] = '\n';
1952 header_ptr += 2;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001953 }
1954#endif
1955
1956#if ENABLE_FEATURE_HTTPD_CGI || ENABLE_FEATURE_HTTPD_PROXY
1957 /* Try and do our best to parse more lines */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001958 if ((STRNCASECMP(iobuf, "Content-length:") == 0)) {
1959 /* extra read only for POST */
1960 if (prequest != request_GET) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001961 tptr = iobuf + sizeof("Content-length:") - 1;
1962 if (!tptr[0])
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001963 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001964 errno = 0;
1965 /* not using strtoul: it ignores leading minus! */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001966 length = strtol(tptr, &tptr, 10);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001967 /* length is "ulong", but we need to pass it to int later */
1968 /* so we check for negative or too large values in one go: */
1969 /* (long -> ulong conv caused negatives to be seen as > INT_MAX) */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001970 if (tptr[0] || errno || length > INT_MAX)
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001971 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001972 }
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001973 }
1974#endif
1975#if ENABLE_FEATURE_HTTPD_CGI
1976 else if (STRNCASECMP(iobuf, "Cookie:") == 0) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001977 cookie = strdup(skip_whitespace(iobuf + sizeof("Cookie:")-1));
1978 } else if (STRNCASECMP(iobuf, "Content-Type:") == 0) {
1979 content_type = strdup(skip_whitespace(iobuf + sizeof("Content-Type:")-1));
1980 } else if (STRNCASECMP(iobuf, "Referer:") == 0) {
1981 referer = strdup(skip_whitespace(iobuf + sizeof("Referer:")-1));
1982 } else if (STRNCASECMP(iobuf, "User-Agent:") == 0) {
1983 user_agent = strdup(skip_whitespace(iobuf + sizeof("User-Agent:")-1));
1984 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001985#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00001986#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001987 if (STRNCASECMP(iobuf, "Authorization:") == 0) {
1988 /* We only allow Basic credentials.
1989 * It shows up as "Authorization: Basic <userid:password>" where
1990 * the userid:password is base64 encoded.
1991 */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001992 tptr = skip_whitespace(iobuf + sizeof("Authorization:")-1);
1993 if (STRNCASECMP(tptr, "Basic") != 0)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001994 continue;
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001995 tptr += sizeof("Basic")-1;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001996 /* decodeBase64() skips whitespace itself */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001997 decodeBase64(tptr);
1998 credentials = checkPerm(urlcopy, tptr);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001999 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00002000#endif /* FEATURE_HTTPD_BASIC_AUTH */
Denis Vlasenkof4310172007-09-21 22:35:18 +00002001#if ENABLE_FEATURE_HTTPD_RANGES
2002 if (STRNCASECMP(iobuf, "Range:") == 0) {
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002003 /* We know only bytes=NNN-[MMM] */
Denis Vlasenkof4310172007-09-21 22:35:18 +00002004 char *s = skip_whitespace(iobuf + sizeof("Range:")-1);
2005 if (strncmp(s, "bytes=", 6) == 0) {
2006 s += sizeof("bytes=")-1;
2007 range_start = BB_STRTOOFF(s, &s, 10);
2008 if (s[0] != '-' || range_start < 0) {
2009 range_start = 0;
2010 } else if (s[1]) {
2011 range_end = BB_STRTOOFF(s+1, NULL, 10);
2012 if (errno || range_end < range_start)
2013 range_start = 0;
2014 }
2015 }
2016 }
2017#endif
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002018 } /* while extra header reading */
2019 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002020
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002021 /* We are done reading headers, disable peer timeout */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002022 alarm(0);
2023
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002024 if (strcmp(bb_basename(urlcopy), httpd_conf) == 0 || ip_allowed == 0) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002025 /* protect listing [/path]/httpd_conf or IP deny */
2026 send_headers_and_exit(HTTP_FORBIDDEN);
2027 }
2028
2029#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002030 if (credentials <= 0 && checkPerm(urlcopy, ":") == 0) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002031 send_headers_and_exit(HTTP_UNAUTHORIZED);
2032 }
2033#endif
2034
2035 if (found_moved_temporarily) {
2036 send_headers_and_exit(HTTP_MOVED_TEMPORARILY);
2037 }
2038
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002039#if ENABLE_FEATURE_HTTPD_PROXY
2040 if (proxy_entry != NULL) {
2041 int proxy_fd;
2042 len_and_sockaddr *lsa;
2043
2044 proxy_fd = socket(AF_INET, SOCK_STREAM, 0);
2045 if (proxy_fd < 0)
2046 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
2047 lsa = host2sockaddr(proxy_entry->host_port, 80);
2048 if (lsa == NULL)
2049 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
2050 if (connect(proxy_fd, &lsa->sa, lsa->len) < 0)
2051 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
2052 fdprintf(proxy_fd, "%s %s%s%s%s HTTP/%c.%c\r\n",
2053 prequest, /* GET or POST */
2054 proxy_entry->url_to, /* url part 1 */
2055 urlcopy + strlen(proxy_entry->url_from), /* url part 2 */
2056 (g_query ? "?" : ""), /* "?" (maybe) */
2057 (g_query ? g_query : ""), /* query string (maybe) */
2058 http_major_version, http_minor_version);
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00002059 header_ptr[0] = '\r';
2060 header_ptr[1] = '\n';
2061 header_ptr += 2;
2062 write(proxy_fd, header_buf, header_ptr - header_buf);
2063 free(header_buf); /* on the order of 8k, free it */
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002064 /* cgi_io_loop_and_exit needs to have two disctinct fds */
2065 cgi_io_loop_and_exit(proxy_fd, dup(proxy_fd), length);
2066 }
2067#endif
2068
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002069 tptr = urlcopy + 1; /* skip first '/' */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002070
2071#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002072 if (strncmp(tptr, "cgi-bin/", 8) == 0) {
2073 if (tptr[8] == '\0') {
Denis Vlasenko073214f2007-08-17 19:20:07 +00002074 /* protect listing "cgi-bin/" */
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002075 send_headers_and_exit(HTTP_FORBIDDEN);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002076 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002077 send_cgi_and_exit(urlcopy, prequest, length, cookie, content_type);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002078 }
Denis Vlasenko1ccd96f2007-03-05 19:24:33 +00002079#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002080 {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002081 char *suffix = strrchr(tptr, '.');
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002082 if (suffix) {
2083 Htaccess *cur;
2084 for (cur = script_i; cur; cur = cur->next) {
2085 if (strcmp(cur->before_colon + 1, suffix) == 0) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002086 send_cgi_and_exit(urlcopy, prequest, length, cookie, content_type);
Denis Vlasenko1ccd96f2007-03-05 19:24:33 +00002087 }
2088 }
2089 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002090 }
Denis Vlasenko1ccd96f2007-03-05 19:24:33 +00002091#endif
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002092 if (prequest != request_GET) {
2093 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
2094 }
Denis Vlasenko5d148e22006-11-21 00:12:09 +00002095#endif /* FEATURE_HTTPD_CGI */
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00002096
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002097 if (urlp[-1] == '/')
Denis Vlasenkofcd878e2007-12-29 02:16:23 +00002098 strcpy(urlp, index_page);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002099 if (stat(tptr, &sb) == 0) {
Denis Vlasenkof4310172007-09-21 22:35:18 +00002100 file_size = sb.st_size;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002101 last_mod = sb.st_mtime;
2102 }
Denis Vlasenko5d148e22006-11-21 00:12:09 +00002103#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002104 else if (urlp[-1] == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002105 /* It's a dir URL and there is no index.html
2106 * Try cgi-bin/index.cgi */
2107 if (access("/cgi-bin/index.cgi"+1, X_OK) == 0) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002108 urlp[0] = '\0';
2109 g_query = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002110 send_cgi_and_exit("/cgi-bin/index.cgi", prequest, length, cookie, content_type);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002111 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002112 }
Denis Vlasenko073214f2007-08-17 19:20:07 +00002113#endif
2114 /* else {
2115 * fall through to send_file, it errors out if open fails
2116 * }
2117 */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002118
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00002119 send_file_and_exit(tptr, TRUE);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002120}
2121
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002122/*
2123 * The main http server function.
Denis Vlasenko367960b2007-08-18 14:20:21 +00002124 * Given a socket, listen for new connections and farm out
2125 * the processing as a [v]forked process.
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002126 * Never returns.
2127 */
Denis Vlasenko367960b2007-08-18 14:20:21 +00002128#if BB_MMU
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002129static void mini_httpd(int server_socket) ATTRIBUTE_NORETURN;
2130static void mini_httpd(int server_socket)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002131{
Denis Vlasenko073214f2007-08-17 19:20:07 +00002132 /* NB: it's best to not use xfuncs in this loop before fork().
2133 * Otherwise server may die on transient errors (temporary
2134 * out-of-memory condition, etc), which is Bad(tm).
2135 * Try to do any dangerous calls after fork.
2136 */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002137 while (1) {
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002138 int n;
2139 len_and_sockaddr fromAddr;
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00002140
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002141 /* Wait for connections... */
2142 fromAddr.len = LSA_SIZEOF_SA;
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002143 n = accept(server_socket, &fromAddr.sa, &fromAddr.len);
Glenn L McGrath06e95652003-02-09 06:51:14 +00002144
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002145 if (n < 0)
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00002146 continue;
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002147 /* set the KEEPALIVE option to cull dead connections */
2148 setsockopt(n, SOL_SOCKET, SO_KEEPALIVE, &const_int_1, sizeof(const_int_1));
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002149
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002150 if (fork() == 0) {
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002151 /* child */
Denis Vlasenko55a99402006-09-30 20:41:44 +00002152#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002153 /* Do not reload config on HUP */
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00002154 signal(SIGHUP, SIG_IGN);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +00002155#endif
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002156 close(server_socket);
2157 xmove_fd(n, 0);
2158 xdup2(0, 1);
2159
Denis Vlasenko367960b2007-08-18 14:20:21 +00002160 handle_incoming_and_exit(&fromAddr);
2161 }
2162 /* parent, or fork failed */
2163 close(n);
2164 } /* while (1) */
2165 /* never reached */
2166}
2167#else
2168static void mini_httpd_nommu(int server_socket, int argc, char **argv) ATTRIBUTE_NORETURN;
2169static void mini_httpd_nommu(int server_socket, int argc, char **argv)
2170{
2171 char *argv_copy[argc + 2];
2172
2173 argv_copy[0] = argv[0];
2174 argv_copy[1] = (char*)"-i";
2175 memcpy(&argv_copy[2], &argv[1], argc * sizeof(argv[0]));
2176
2177 /* NB: it's best to not use xfuncs in this loop before vfork().
2178 * Otherwise server may die on transient errors (temporary
2179 * out-of-memory condition, etc), which is Bad(tm).
2180 * Try to do any dangerous calls after fork.
2181 */
2182 while (1) {
2183 int n;
2184 len_and_sockaddr fromAddr;
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00002185
Denis Vlasenko367960b2007-08-18 14:20:21 +00002186 /* Wait for connections... */
2187 fromAddr.len = LSA_SIZEOF_SA;
2188 n = accept(server_socket, &fromAddr.sa, &fromAddr.len);
2189
2190 if (n < 0)
2191 continue;
2192 /* set the KEEPALIVE option to cull dead connections */
2193 setsockopt(n, SOL_SOCKET, SO_KEEPALIVE, &const_int_1, sizeof(const_int_1));
2194
2195 if (vfork() == 0) {
2196 /* child */
2197#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
2198 /* Do not reload config on HUP */
2199 signal(SIGHUP, SIG_IGN);
2200#endif
2201 close(server_socket);
2202 xmove_fd(n, 0);
2203 xdup2(0, 1);
2204
2205 /* Run a copy of ourself in inetd mode */
2206 re_exec(argv_copy);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002207 }
Denis Vlasenko921799d2007-08-19 19:28:09 +00002208 /* parent, or vfork failed */
Denis Vlasenko073214f2007-08-17 19:20:07 +00002209 close(n);
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002210 } /* while (1) */
Denis Vlasenko241b1562007-08-17 19:18:47 +00002211 /* never reached */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002212}
Denis Vlasenko56258b62007-06-23 23:14:02 +00002213#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002214
Denis Vlasenko367960b2007-08-18 14:20:21 +00002215/*
2216 * Process a HTTP connection on stdin/out.
2217 * Never returns.
2218 */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002219static void mini_httpd_inetd(void) ATTRIBUTE_NORETURN;
2220static void mini_httpd_inetd(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002221{
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002222 len_and_sockaddr fromAddr;
Glenn L McGrath06e95652003-02-09 06:51:14 +00002223
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002224 fromAddr.len = LSA_SIZEOF_SA;
2225 getpeername(0, &fromAddr.sa, &fromAddr.len);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002226 handle_incoming_and_exit(&fromAddr);
Glenn L McGrath06e95652003-02-09 06:51:14 +00002227}
Glenn L McGrath06e95652003-02-09 06:51:14 +00002228
Denis Vlasenko55a99402006-09-30 20:41:44 +00002229#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Glenn L McGrath06e95652003-02-09 06:51:14 +00002230static void sighup_handler(int sig)
2231{
Glenn L McGrath06e95652003-02-09 06:51:14 +00002232 struct sigaction sa;
2233
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002234 parse_conf(default_path_httpd_conf, sig == SIGHUP ? SIGNALED_PARSE : FIRST_PARSE);
Denis Vlasenko073214f2007-08-17 19:20:07 +00002235
2236 memset(&sa, 0, sizeof(sa));
Glenn L McGrath06e95652003-02-09 06:51:14 +00002237 sa.sa_handler = sighup_handler;
Denis Vlasenko073214f2007-08-17 19:20:07 +00002238 /*sigemptyset(&sa.sa_mask); - memset should be enough */
Glenn L McGrath06e95652003-02-09 06:51:14 +00002239 sa.sa_flags = SA_RESTART;
2240 sigaction(SIGHUP, &sa, NULL);
Glenn L McGrath06e95652003-02-09 06:51:14 +00002241}
2242#endif
2243
Denis Vlasenko9f609292006-11-05 19:47:33 +00002244enum {
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002245 c_opt_config_file = 0,
2246 d_opt_decode_url,
2247 h_opt_home_httpd,
2248 USE_FEATURE_HTTPD_ENCODE_URL_STR(e_opt_encode_url,)
Denis Vlasenko9f609292006-11-05 19:47:33 +00002249 USE_FEATURE_HTTPD_BASIC_AUTH( r_opt_realm ,)
2250 USE_FEATURE_HTTPD_AUTH_MD5( m_opt_md5 ,)
2251 USE_FEATURE_HTTPD_SETUID( u_opt_setuid ,)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002252 p_opt_port ,
2253 p_opt_inetd ,
2254 p_opt_foreground,
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002255 p_opt_verbose ,
Denis Vlasenko9f609292006-11-05 19:47:33 +00002256 OPT_CONFIG_FILE = 1 << c_opt_config_file,
2257 OPT_DECODE_URL = 1 << d_opt_decode_url,
2258 OPT_HOME_HTTPD = 1 << h_opt_home_httpd,
2259 OPT_ENCODE_URL = USE_FEATURE_HTTPD_ENCODE_URL_STR((1 << e_opt_encode_url)) + 0,
2260 OPT_REALM = USE_FEATURE_HTTPD_BASIC_AUTH( (1 << r_opt_realm )) + 0,
2261 OPT_MD5 = USE_FEATURE_HTTPD_AUTH_MD5( (1 << m_opt_md5 )) + 0,
2262 OPT_SETUID = USE_FEATURE_HTTPD_SETUID( (1 << u_opt_setuid )) + 0,
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002263 OPT_PORT = 1 << p_opt_port,
2264 OPT_INETD = 1 << p_opt_inetd,
2265 OPT_FOREGROUND = 1 << p_opt_foreground,
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002266 OPT_VERBOSE = 1 << p_opt_verbose,
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002267};
Eric Andersena3bb3e62003-06-26 09:05:32 +00002268
Eric Andersena3bb3e62003-06-26 09:05:32 +00002269
Denis Vlasenko9b49a5e2007-10-11 10:05:36 +00002270int httpd_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
Bernhard Reutner-Fischerfebe3c42007-04-04 20:52:03 +00002271int httpd_main(int argc, char **argv)
Glenn L McGrath06e95652003-02-09 06:51:14 +00002272{
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002273 int server_socket = server_socket; /* for gcc */
Denis Vlasenko67b23e62006-10-03 21:00:06 +00002274 unsigned opt;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002275 char *url_for_decode;
2276 USE_FEATURE_HTTPD_ENCODE_URL_STR(const char *url_for_encode;)
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00002277 USE_FEATURE_HTTPD_SETUID(const char *s_ugid = NULL;)
2278 USE_FEATURE_HTTPD_SETUID(struct bb_uidgid_t ugid;)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002279 USE_FEATURE_HTTPD_AUTH_MD5(const char *pass;)
Eric Andersen35e643b2003-07-28 07:40:39 +00002280
Denis Vlasenko073214f2007-08-17 19:20:07 +00002281 INIT_G();
2282
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +00002283#if ENABLE_LOCALE_SUPPORT
2284 /* Undo busybox.c: we want to speak English in http (dates etc) */
2285 setlocale(LC_TIME, "C");
2286#endif
2287
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002288 home_httpd = xrealloc_getcwd_or_warn(NULL);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002289 /* -v counts, -i implies -f */
2290 opt_complementary = "vv:if";
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002291 /* We do not "absolutize" path given by -h (home) opt.
2292 * If user gives relative path in -h, $SCRIPT_FILENAME can end up
2293 * relative too. */
Denis Vlasenkofe7cd642007-08-18 15:32:12 +00002294 opt = getopt32(argv, "c:d:h:"
Denis Vlasenko53091ec2007-03-26 13:35:09 +00002295 USE_FEATURE_HTTPD_ENCODE_URL_STR("e:")
2296 USE_FEATURE_HTTPD_BASIC_AUTH("r:")
2297 USE_FEATURE_HTTPD_AUTH_MD5("m:")
2298 USE_FEATURE_HTTPD_SETUID("u:")
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002299 "p:ifv",
2300 &configFile, &url_for_decode, &home_httpd
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002301 USE_FEATURE_HTTPD_ENCODE_URL_STR(, &url_for_encode)
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002302 USE_FEATURE_HTTPD_BASIC_AUTH(, &g_realm)
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002303 USE_FEATURE_HTTPD_AUTH_MD5(, &pass)
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00002304 USE_FEATURE_HTTPD_SETUID(, &s_ugid)
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002305 , &bind_addr_or_port
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002306 , &verbose
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002307 );
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002308 if (opt & OPT_DECODE_URL) {
Denis Vlasenko367960b2007-08-18 14:20:21 +00002309 fputs(decodeString(url_for_decode, 1), stdout);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002310 return 0;
2311 }
Denis Vlasenko55a99402006-09-30 20:41:44 +00002312#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002313 if (opt & OPT_ENCODE_URL) {
Denis Vlasenko367960b2007-08-18 14:20:21 +00002314 fputs(encodeString(url_for_encode), stdout);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002315 return 0;
2316 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002317#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00002318#if ENABLE_FEATURE_HTTPD_AUTH_MD5
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002319 if (opt & OPT_MD5) {
Denis Vlasenko55a99402006-09-30 20:41:44 +00002320 puts(pw_encrypt(pass, "$1$"));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002321 return 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +00002322 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002323#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00002324#if ENABLE_FEATURE_HTTPD_SETUID
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002325 if (opt & OPT_SETUID) {
Denis Vlasenko3bba5452006-12-30 17:57:03 +00002326 if (!get_uidgid(&ugid, s_ugid, 1))
2327 bb_error_msg_and_die("unrecognized user[:group] "
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00002328 "name '%s'", s_ugid);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002329 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002330#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002331
Denis Vlasenko367960b2007-08-18 14:20:21 +00002332#if !BB_MMU
2333 if (!(opt & OPT_FOREGROUND)) {
2334 bb_daemonize_or_rexec(0, argv); /* don't change current directory */
2335 }
2336#endif
2337
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002338 xchdir(home_httpd);
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002339 if (!(opt & OPT_INETD)) {
Denis Vlasenko6536a9b2007-01-12 10:35:23 +00002340 signal(SIGCHLD, SIG_IGN);
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002341 server_socket = openServer();
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002342#if ENABLE_FEATURE_HTTPD_SETUID
2343 /* drop privileges */
2344 if (opt & OPT_SETUID) {
2345 if (ugid.gid != (gid_t)-1) {
2346 if (setgroups(1, &ugid.gid) == -1)
Denis Vlasenko8e858e22007-03-07 09:35:43 +00002347 bb_perror_msg_and_die("setgroups");
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002348 xsetgid(ugid.gid);
2349 }
2350 xsetuid(ugid.uid);
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00002351 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002352#endif
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002353 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002354
Denis Vlasenko2535f122007-09-15 13:28:30 +00002355#if 0 /*was #if ENABLE_FEATURE_HTTPD_CGI*/
2356 /* User can do it himself: 'env - PATH="$PATH" httpd'
2357 * We don't do it because we don't want to screw users
2358 * which want to do
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002359 * 'env - VAR1=val1 VAR2=val2 httpd'
Denis Vlasenko2535f122007-09-15 13:28:30 +00002360 * and have VAR1 and VAR2 values visible in their CGIs.
2361 * Besides, it is also smaller. */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002362 {
2363 char *p = getenv("PATH");
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002364 /* env strings themself are not freed, no need to strdup(p): */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002365 clearenv();
2366 if (p)
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002367 putenv(p - 5);
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002368// if (!(opt & OPT_INETD))
2369// setenv_long("SERVER_PORT", ???);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002370 }
Glenn L McGrathfe538ba2003-09-10 23:35:45 +00002371#endif
2372
Denis Vlasenko55a99402006-09-30 20:41:44 +00002373#if ENABLE_FEATURE_HTTPD_RELOAD_CONFIG_SIGHUP
Denis Vlasenko367960b2007-08-18 14:20:21 +00002374 if (!(opt & OPT_INETD))
2375 sighup_handler(0);
2376 else /* do not install HUP handler in inetd mode */
Glenn L McGrath06e95652003-02-09 06:51:14 +00002377#endif
Denis Vlasenkofcd878e2007-12-29 02:16:23 +00002378 index_page = "index.html";
Denis Vlasenko367960b2007-08-18 14:20:21 +00002379 parse_conf(default_path_httpd_conf, FIRST_PARSE);
2380
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00002381 xfunc_error_retval = 0;
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002382 if (opt & OPT_INETD)
2383 mini_httpd_inetd();
Denis Vlasenko367960b2007-08-18 14:20:21 +00002384#if BB_MMU
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002385 if (!(opt & OPT_FOREGROUND))
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002386 bb_daemonize(0); /* don't change current directory */
2387 mini_httpd(server_socket); /* never returns */
Denis Vlasenko56258b62007-06-23 23:14:02 +00002388#else
Denis Vlasenko367960b2007-08-18 14:20:21 +00002389 mini_httpd_nommu(server_socket, argc, argv); /* never returns */
Denis Vlasenko56258b62007-06-23 23:14:02 +00002390#endif
Denis Vlasenko367960b2007-08-18 14:20:21 +00002391 /* return 0; */
Glenn L McGrath06e95652003-02-09 06:51:14 +00002392}