blob: 24482fe5238acf7002fa7066c572d9ca59bb21e5 [file] [log] [blame]
Bernhard Reutner-Fischer2c998512006-04-12 18:09:26 +00001/* vi: set sw=4 ts=4: */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002/*
3 * httpd implementation for busybox
4 *
Glenn L McGrath06e95652003-02-09 06:51:14 +00005 * Copyright (C) 2002,2003 Glenn Engel <glenne@engel.org>
"Vladimir N. Oleynik"79af7d52006-01-26 10:58:12 +00006 * Copyright (C) 2003-2006 Vladimir Oleynik <dzo@simtreas.ru>
Glenn L McGrath58c708a2003-01-05 04:01:56 +00007 *
Denys Vlasenko0ef64bd2010-08-16 20:14:46 +02008 * Licensed under GPLv2 or later, see file LICENSE in this source tree.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00009 *
10 *****************************************************************************
11 *
Glenn L McGrath06e95652003-02-09 06:51:14 +000012 * Typical usage:
Denys Vlasenko535ce1d2010-07-25 03:20:25 +020013 * For non root user:
14 * httpd -p 8080 -h $HOME/public_html
15 * For daemon start from rc script with uid=0:
16 * httpd -u www
17 * which is equivalent to (assuming user www has uid 80):
18 * httpd -p 80 -u 80 -h $PWD -c /etc/httpd.conf -r "Web Server Authentication"
Glenn L McGrath06e95652003-02-09 06:51:14 +000019 *
Denys Vlasenko535ce1d2010-07-25 03:20:25 +020020 * When an url starts with "/cgi-bin/" it is assumed to be a cgi script.
21 * The server changes directory to the location of the script and executes it
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +000022 * after setting QUERY_STRING and other environment variables.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000023 *
Denys Vlasenkod277f552011-04-10 03:08:22 +020024 * If directory URL is given, no index.html is found and CGI support is enabled,
25 * cgi-bin/index.cgi will be run. Directory to list is ../$QUERY_STRING.
26 * See httpd_indexcgi.c for an example GCI code.
27 *
Denis Vlasenko8b458372006-11-21 21:23:21 +000028 * Doc:
29 * "CGI Environment Variables": http://hoohoo.ncsa.uiuc.edu/cgi/env.html
30 *
Denys Vlasenko33d8d082009-09-10 01:46:02 +020031 * The applet can also be invoked as an url arg decoder and html text encoder
Glenn L McGrath58c708a2003-01-05 04:01:56 +000032 * as follows:
Denys Vlasenko535ce1d2010-07-25 03:20:25 +020033 * foo=`httpd -d $foo` # decode "Hello%20World" as "Hello World"
34 * bar=`httpd -e "<Hello World>"` # encode as "&#60Hello&#32World&#62"
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000035 * Note that url encoding for arguments is not the same as html encoding for
Bernhard Reutner-Fischer62851172009-05-03 18:53:22 +020036 * presentation. -d decodes an url-encoded argument while -e encodes in html
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000037 * for page display.
Glenn L McGrath58c708a2003-01-05 04:01:56 +000038 *
39 * httpd.conf has the following format:
Eric Andersenc7bda1c2004-03-15 08:29:22 +000040 *
Denis Vlasenko395410b2008-07-20 23:25:32 +000041 * H:/serverroot # define the server root. It will override -h
Glenn L McGrathb65422c2003-09-08 10:59:27 +000042 * A:172.20. # Allow address from 172.20.0.0/16
43 * A:10.0.0.0/25 # Allow any address from 10.0.0.0-10.0.0.127
44 * A:10.0.0.0/255.255.255.128 # Allow any address that previous set
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000045 * A:127.0.0.1 # Allow local loopback connections
46 * D:* # Deny from other IP connections
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +000047 * E404:/path/e404.html # /path/e404.html is the 404 (not found) error page
Denis Vlasenkofcd878e2007-12-29 02:16:23 +000048 * I:index.html # Show index.html when a directory is requested
Denis Vlasenkof74194e2007-10-18 12:54:39 +000049 *
50 * P:/url:[http://]hostname[:port]/new/path
51 * # When /urlXXXXXX is requested, reverse proxy
52 * # it to http://hostname[:port]/new/pathXXXXXX
53 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000054 * /cgi-bin:foo:bar # Require user foo, pwd bar on urls starting with /cgi-bin/
55 * /adm:admin:setup # Require user admin, pwd setup on urls starting with /adm/
56 * /adm:toor:PaSsWd # or user toor, pwd PaSsWd on urls starting with /adm/
57 * .au:audio/basic # additional mime type for audio.au files
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +000058 * *.php:/path/php # run xxx.php through an interpreter
Eric Andersenc7bda1c2004-03-15 08:29:22 +000059 *
Denis Vlasenko0eb406c2008-06-13 09:53:06 +000060 * A/D may be as a/d or allow/deny - only first char matters.
61 * Deny/Allow IP logic:
62 * - Default is to allow all (Allow all (A:*) is a no-op).
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000063 * - Deny rules take precedence over allow rules.
Denis Vlasenko0eb406c2008-06-13 09:53:06 +000064 * - "Deny all" rule (D:*) is applied last.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000065 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000066 * Example:
67 * 1. Allow only specified addresses
Glenn L McGrathb65422c2003-09-08 10:59:27 +000068 * A:172.20 # Allow any address that begins with 172.20.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000069 * A:10.10. # Allow any address that begins with 10.10.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000070 * A:127.0.0.1 # Allow local loopback connections
71 * D:* # Deny from other IP connections
Eric Andersenc7bda1c2004-03-15 08:29:22 +000072 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000073 * 2. Only deny specified addresses
74 * D:1.2.3. # deny from 1.2.3.0 - 1.2.3.255
75 * D:2.3.4. # deny from 2.3.4.0 - 2.3.4.255
76 * A:* # (optional line added for clarity)
Eric Andersenc7bda1c2004-03-15 08:29:22 +000077 *
Denys Vlasenkod277f552011-04-10 03:08:22 +020078 * If a sub directory contains config file, it is parsed and merged with
Glenn L McGrathb65422c2003-09-08 10:59:27 +000079 * any existing settings as if it was appended to the original configuration.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000080 *
81 * subdir paths are relative to the containing subdir and thus cannot
82 * affect the parent rules.
83 *
84 * Note that since the sub dir is parsed in the forked thread servicing the
85 * subdir http request, any merge is discarded when the process exits. As a
86 * result, the subdir settings only have a lifetime of a single request.
87 *
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +000088 * Custom error pages can contain an absolute path or be relative to
89 * 'home_httpd'. Error pages are to be static files (no CGI or script). Error
90 * page can only be defined in the root configuration file and are not taken
91 * into account in local (directories) config files.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000092 *
93 * If -c is not set, an attempt will be made to open the default
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +000094 * root configuration file. If -c is set and the file is not found, the
95 * server exits with an error.
Eric Andersenc7bda1c2004-03-15 08:29:22 +000096 *
Denis Vlasenko073214f2007-08-17 19:20:07 +000097 */
Bernhard Reutner-Fischer62851172009-05-03 18:53:22 +020098 /* TODO: use TCP_CORK, parse_config() */
Glenn L McGrath58c708a2003-01-05 04:01:56 +000099
Pere Orga5bc8c002011-04-11 03:29:49 +0200100//usage:#define httpd_trivial_usage
101//usage: "[-ifv[v]]"
102//usage: " [-c CONFFILE]"
103//usage: " [-p [IP:]PORT]"
104//usage: IF_FEATURE_HTTPD_SETUID(" [-u USER[:GRP]]")
105//usage: IF_FEATURE_HTTPD_BASIC_AUTH(" [-r REALM]")
106//usage: " [-h HOME]\n"
107//usage: "or httpd -d/-e" IF_FEATURE_HTTPD_AUTH_MD5("/-m") " STRING"
108//usage:#define httpd_full_usage "\n\n"
109//usage: "Listen for incoming HTTP requests\n"
Pere Orga5bc8c002011-04-11 03:29:49 +0200110//usage: "\n -i Inetd mode"
111//usage: "\n -f Don't daemonize"
112//usage: "\n -v[v] Verbose"
113//usage: "\n -p [IP:]PORT Bind to IP:PORT (default *:80)"
114//usage: IF_FEATURE_HTTPD_SETUID(
115//usage: "\n -u USER[:GRP] Set uid/gid after binding to port")
116//usage: IF_FEATURE_HTTPD_BASIC_AUTH(
117//usage: "\n -r REALM Authentication Realm for Basic Authentication")
118//usage: "\n -h HOME Home directory (default .)"
119//usage: "\n -c FILE Configuration file (default {/etc,HOME}/httpd.conf)"
120//usage: IF_FEATURE_HTTPD_AUTH_MD5(
121//usage: "\n -m STRING MD5 crypt STRING")
122//usage: "\n -e STRING HTML encode STRING"
123//usage: "\n -d STRING URL decode STRING"
124
Denis Vlasenkob6adbf12007-05-26 19:00:18 +0000125#include "libbb.h"
Denis Vlasenko1b9064d2007-08-12 21:05:49 +0000126#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
Denis Vlasenko1cbfd982009-02-04 23:43:44 +0000127# include <sys/sendfile.h>
Denis Vlasenko1b9064d2007-08-12 21:05:49 +0000128#endif
Denis Vlasenko69981422007-01-07 21:25:12 +0000129/* amount of buffering in a pipe */
130#ifndef PIPE_BUF
131# define PIPE_BUF 4096
132#endif
Denys Vlasenko535ce1d2010-07-25 03:20:25 +0200133
134#define DEBUG 0
135
136#define IOBUF_SIZE 8192
Denis Vlasenko32a471e2007-09-23 13:56:57 +0000137#if PIPE_BUF >= IOBUF_SIZE
138# error "PIPE_BUF >= IOBUF_SIZE"
139#endif
Denis Vlasenko073214f2007-08-17 19:20:07 +0000140
141#define HEADER_READ_TIMEOUT 60
142
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000143static const char DEFAULT_PATH_HTTPD_CONF[] ALIGN1 = "/etc";
144static const char HTTPD_CONF[] ALIGN1 = "httpd.conf";
Denis Vlasenko52e15dc2007-08-19 18:53:43 +0000145static const char HTTP_200[] ALIGN1 = "HTTP/1.0 200 OK\r\n";
Denys Vlasenko535ce1d2010-07-25 03:20:25 +0200146static const char index_html[] ALIGN1 = "index.html";
Glenn L McGrath06e95652003-02-09 06:51:14 +0000147
Denis Vlasenko073214f2007-08-17 19:20:07 +0000148typedef struct has_next_ptr {
149 struct has_next_ptr *next;
150} has_next_ptr;
Eric Andersen07f2fea2004-10-08 08:03:29 +0000151
Denis Vlasenko073214f2007-08-17 19:20:07 +0000152/* Must have "next" as a first member */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000153typedef struct Htaccess {
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000154 struct Htaccess *next;
Denis Vlasenko073214f2007-08-17 19:20:07 +0000155 char *after_colon;
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000156 char before_colon[1]; /* really bigger, must be last */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000157} Htaccess;
158
Denis Vlasenko073214f2007-08-17 19:20:07 +0000159/* Must have "next" as a first member */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000160typedef struct Htaccess_IP {
Denis Vlasenko073214f2007-08-17 19:20:07 +0000161 struct Htaccess_IP *next;
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000162 unsigned ip;
163 unsigned mask;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000164 int allow_deny;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000165} Htaccess_IP;
166
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000167/* Must have "next" as a first member */
168typedef struct Htaccess_Proxy {
169 struct Htaccess_Proxy *next;
170 char *url_from;
171 char *host_port;
172 char *url_to;
173} Htaccess_Proxy;
174
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000175enum {
176 HTTP_OK = 200,
Denis Vlasenkof4310172007-09-21 22:35:18 +0000177 HTTP_PARTIAL_CONTENT = 206,
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000178 HTTP_MOVED_TEMPORARILY = 302,
179 HTTP_BAD_REQUEST = 400, /* malformed syntax */
180 HTTP_UNAUTHORIZED = 401, /* authentication needed, respond with auth hdr */
181 HTTP_NOT_FOUND = 404,
182 HTTP_FORBIDDEN = 403,
183 HTTP_REQUEST_TIMEOUT = 408,
184 HTTP_NOT_IMPLEMENTED = 501, /* used for unrecognized requests */
185 HTTP_INTERNAL_SERVER_ERROR = 500,
186 HTTP_CONTINUE = 100,
187#if 0 /* future use */
188 HTTP_SWITCHING_PROTOCOLS = 101,
189 HTTP_CREATED = 201,
190 HTTP_ACCEPTED = 202,
191 HTTP_NON_AUTHORITATIVE_INFO = 203,
192 HTTP_NO_CONTENT = 204,
193 HTTP_MULTIPLE_CHOICES = 300,
194 HTTP_MOVED_PERMANENTLY = 301,
195 HTTP_NOT_MODIFIED = 304,
196 HTTP_PAYMENT_REQUIRED = 402,
197 HTTP_BAD_GATEWAY = 502,
198 HTTP_SERVICE_UNAVAILABLE = 503, /* overload, maintenance */
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000199#endif
200};
201
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000202static const uint16_t http_response_type[] ALIGN2 = {
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000203 HTTP_OK,
Denis Vlasenkof4310172007-09-21 22:35:18 +0000204#if ENABLE_FEATURE_HTTPD_RANGES
205 HTTP_PARTIAL_CONTENT,
206#endif
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000207 HTTP_MOVED_TEMPORARILY,
208 HTTP_REQUEST_TIMEOUT,
209 HTTP_NOT_IMPLEMENTED,
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +0000210#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000211 HTTP_UNAUTHORIZED,
212#endif
213 HTTP_NOT_FOUND,
214 HTTP_BAD_REQUEST,
215 HTTP_FORBIDDEN,
216 HTTP_INTERNAL_SERVER_ERROR,
217#if 0 /* not implemented */
218 HTTP_CREATED,
219 HTTP_ACCEPTED,
220 HTTP_NO_CONTENT,
221 HTTP_MULTIPLE_CHOICES,
222 HTTP_MOVED_PERMANENTLY,
223 HTTP_NOT_MODIFIED,
224 HTTP_BAD_GATEWAY,
225 HTTP_SERVICE_UNAVAILABLE,
226#endif
227};
228
229static const struct {
230 const char *name;
231 const char *info;
232} http_response[ARRAY_SIZE(http_response_type)] = {
233 { "OK", NULL },
Denis Vlasenkof4310172007-09-21 22:35:18 +0000234#if ENABLE_FEATURE_HTTPD_RANGES
235 { "Partial Content", NULL },
236#endif
237 { "Found", NULL },
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000238 { "Request Timeout", "No request appeared within 60 seconds" },
239 { "Not Implemented", "The requested method is not recognized" },
240#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
241 { "Unauthorized", "" },
242#endif
243 { "Not Found", "The requested URL was not found" },
244 { "Bad Request", "Unsupported method" },
245 { "Forbidden", "" },
246 { "Internal Server Error", "Internal Server Error" },
247#if 0 /* not implemented */
248 { "Created" },
249 { "Accepted" },
250 { "No Content" },
251 { "Multiple Choices" },
252 { "Moved Permanently" },
253 { "Not Modified" },
254 { "Bad Gateway", "" },
255 { "Service Unavailable", "" },
256#endif
257};
258
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000259struct globals {
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000260 int verbose; /* must be int (used by getopt32) */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000261 smallint flg_deny_all;
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000262
Denys Vlasenkofb132e42010-10-29 11:46:52 +0200263 unsigned rmt_ip; /* used for IP-based allow/deny rules */
Denis Vlasenko37c33162007-08-19 18:54:22 +0000264 time_t last_mod;
Denis Vlasenko37c33162007-08-19 18:54:22 +0000265 char *rmt_ip_str; /* for $REMOTE_ADDR and $REMOTE_PORT */
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000266 const char *bind_addr_or_port;
267
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000268 const char *g_query;
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000269 const char *opt_c_configFile;
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000270 const char *home_httpd;
Denis Vlasenkofcd878e2007-12-29 02:16:23 +0000271 const char *index_page;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000272
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000273 const char *found_mime_type;
274 const char *found_moved_temporarily;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000275 Htaccess_IP *ip_a_d; /* config allow/deny lines */
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000276
Denis Vlasenko5e34ff22009-04-21 11:09:40 +0000277 IF_FEATURE_HTTPD_BASIC_AUTH(const char *g_realm;)
278 IF_FEATURE_HTTPD_BASIC_AUTH(char *remoteuser;)
279 IF_FEATURE_HTTPD_CGI(char *referer;)
280 IF_FEATURE_HTTPD_CGI(char *user_agent;)
281 IF_FEATURE_HTTPD_CGI(char *host;)
282 IF_FEATURE_HTTPD_CGI(char *http_accept;)
283 IF_FEATURE_HTTPD_CGI(char *http_accept_language;)
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +0000284
Denis Vlasenkof4310172007-09-21 22:35:18 +0000285 off_t file_size; /* -1 - unknown */
286#if ENABLE_FEATURE_HTTPD_RANGES
287 off_t range_start;
288 off_t range_end;
289 off_t range_len;
290#endif
291
Denis Vlasenko55a99402006-09-30 20:41:44 +0000292#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000293 Htaccess *g_auth; /* config user:password lines */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000294#endif
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000295 Htaccess *mime_a; /* config mime types */
Denis Vlasenko55a99402006-09-30 20:41:44 +0000296#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000297 Htaccess *script_i; /* config script interpreters */
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000298#endif
Denys Vlasenkofb132e42010-10-29 11:46:52 +0200299 char *iobuf; /* [IOBUF_SIZE] */
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000300#define hdr_buf bb_common_bufsiz1
301 char *hdr_ptr;
302 int hdr_cnt;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000303#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
304 const char *http_error_page[ARRAY_SIZE(http_response_type)];
305#endif
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000306#if ENABLE_FEATURE_HTTPD_PROXY
307 Htaccess_Proxy *proxy;
308#endif
Peter Korsgaard7a2ba322010-07-25 03:20:53 +0200309#if ENABLE_FEATURE_HTTPD_GZIP
310 /* client can handle gzip / we are going to send gzip */
311 smallint content_gzip;
312#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000313};
314#define G (*ptr_to_globals)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000315#define verbose (G.verbose )
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000316#define flg_deny_all (G.flg_deny_all )
317#define rmt_ip (G.rmt_ip )
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000318#define bind_addr_or_port (G.bind_addr_or_port)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000319#define g_query (G.g_query )
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000320#define opt_c_configFile (G.opt_c_configFile )
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000321#define home_httpd (G.home_httpd )
Denis Vlasenkofcd878e2007-12-29 02:16:23 +0000322#define index_page (G.index_page )
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000323#define found_mime_type (G.found_mime_type )
324#define found_moved_temporarily (G.found_moved_temporarily)
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000325#define last_mod (G.last_mod )
326#define ip_a_d (G.ip_a_d )
327#define g_realm (G.g_realm )
328#define remoteuser (G.remoteuser )
329#define referer (G.referer )
330#define user_agent (G.user_agent )
Denis Vlasenko9d1d4c02008-11-22 20:29:35 +0000331#define host (G.host )
Bernhard Reutner-Fischerb4249302008-09-01 15:30:49 +0000332#define http_accept (G.http_accept )
333#define http_accept_language (G.http_accept_language)
Denis Vlasenkof4310172007-09-21 22:35:18 +0000334#define file_size (G.file_size )
335#if ENABLE_FEATURE_HTTPD_RANGES
336#define range_start (G.range_start )
337#define range_end (G.range_end )
338#define range_len (G.range_len )
Denis Vlasenko1cbfd982009-02-04 23:43:44 +0000339#else
340enum {
341 range_start = 0,
342 range_end = MAXINT(off_t) - 1,
343 range_len = MAXINT(off_t),
344};
Denis Vlasenkof4310172007-09-21 22:35:18 +0000345#endif
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000346#define rmt_ip_str (G.rmt_ip_str )
347#define g_auth (G.g_auth )
348#define mime_a (G.mime_a )
349#define script_i (G.script_i )
350#define iobuf (G.iobuf )
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000351#define hdr_ptr (G.hdr_ptr )
352#define hdr_cnt (G.hdr_cnt )
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000353#define http_error_page (G.http_error_page )
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000354#define proxy (G.proxy )
Peter Korsgaard7a2ba322010-07-25 03:20:53 +0200355#if ENABLE_FEATURE_HTTPD_GZIP
356# define content_gzip (G.content_gzip )
357#else
358# define content_gzip 0
359#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000360#define INIT_G() do { \
Denis Vlasenko574f2f42008-02-27 18:41:59 +0000361 SET_PTR_TO_GLOBALS(xzalloc(sizeof(G))); \
Denis Vlasenko5e34ff22009-04-21 11:09:40 +0000362 IF_FEATURE_HTTPD_BASIC_AUTH(g_realm = "Web Server Authentication";) \
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000363 bind_addr_or_port = "80"; \
Denys Vlasenko108b8c52009-09-08 21:17:49 +0200364 index_page = index_html; \
Denis Vlasenkof4310172007-09-21 22:35:18 +0000365 file_size = -1; \
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000366} while (0)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000367
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +0000368
Denis Vlasenko0bb993f2006-11-21 00:06:28 +0000369#define STRNCASECMP(a, str) strncasecmp((a), (str), sizeof(str)-1)
Glenn L McGrath06e95652003-02-09 06:51:14 +0000370
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000371/* Prototypes */
Denis Vlasenko2f518b02008-02-21 00:12:07 +0000372enum {
373 SEND_HEADERS = (1 << 0),
374 SEND_BODY = (1 << 1),
375 SEND_HEADERS_AND_BODY = SEND_HEADERS + SEND_BODY,
376};
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +0000377static void send_file_and_exit(const char *url, int what) NORETURN;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000378
Denis Vlasenko073214f2007-08-17 19:20:07 +0000379static void free_llist(has_next_ptr **pptr)
380{
381 has_next_ptr *cur = *pptr;
382 while (cur) {
383 has_next_ptr *t = cur;
384 cur = cur->next;
385 free(t);
386 }
387 *pptr = NULL;
388}
389
Denis Vlasenko073214f2007-08-17 19:20:07 +0000390static ALWAYS_INLINE void free_Htaccess_list(Htaccess **pptr)
391{
392 free_llist((has_next_ptr**)pptr);
393}
Denis Vlasenko073214f2007-08-17 19:20:07 +0000394
395static ALWAYS_INLINE void free_Htaccess_IP_list(Htaccess_IP **pptr)
396{
397 free_llist((has_next_ptr**)pptr);
398}
Glenn L McGrath06e95652003-02-09 06:51:14 +0000399
Denis Vlasenkod867f322007-08-19 21:15:42 +0000400/* Returns presumed mask width in bits or < 0 on error.
401 * Updates strp, stores IP at provided pointer */
402static int scan_ip(const char **strp, unsigned *ipp, unsigned char endc)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000403{
Denis Vlasenkod867f322007-08-19 21:15:42 +0000404 const char *p = *strp;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000405 int auto_mask = 8;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000406 unsigned ip = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000407 int j;
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000408
Denis Vlasenkod867f322007-08-19 21:15:42 +0000409 if (*p == '/')
410 return -auto_mask;
411
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000412 for (j = 0; j < 4; j++) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000413 unsigned octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000414
Denis Vlasenkod867f322007-08-19 21:15:42 +0000415 if ((*p < '0' || *p > '9') && *p != '/' && *p)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000416 return -auto_mask;
417 octet = 0;
418 while (*p >= '0' && *p <= '9') {
419 octet *= 10;
420 octet += *p - '0';
421 if (octet > 255)
422 return -auto_mask;
423 p++;
424 }
425 if (*p == '.')
426 p++;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000427 if (*p != '/' && *p)
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000428 auto_mask += 8;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000429 ip = (ip << 8) | octet;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000430 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000431 if (*p) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000432 if (*p != endc)
433 return -auto_mask;
434 p++;
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000435 if (*p == '\0')
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000436 return -auto_mask;
437 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000438 *ipp = ip;
439 *strp = p;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000440 return auto_mask;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000441}
442
Denis Vlasenkod867f322007-08-19 21:15:42 +0000443/* Returns 0 on success. Stores IP and mask at provided pointers */
444static int scan_ip_mask(const char *str, unsigned *ipp, unsigned *maskp)
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000445{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000446 int i;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000447 unsigned mask;
448 char *p;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000449
Denis Vlasenkod867f322007-08-19 21:15:42 +0000450 i = scan_ip(&str, ipp, '/');
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000451 if (i < 0)
452 return i;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000453
Denis Vlasenkod867f322007-08-19 21:15:42 +0000454 if (*str) {
455 /* there is /xxx after dotted-IP address */
456 i = bb_strtou(str, &p, 10);
457 if (*p == '.') {
458 /* 'xxx' itself is dotted-IP mask, parse it */
459 /* (return 0 (success) only if it has N.N.N.N form) */
460 return scan_ip(&str, maskp, '\0') - 32;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000461 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000462 if (*p)
463 return -1;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000464 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000465
466 if (i > 32)
Denis Vlasenko92758142006-10-03 19:56:34 +0000467 return -1;
Denis Vlasenkod867f322007-08-19 21:15:42 +0000468
469 if (sizeof(unsigned) == 4 && i == 32) {
470 /* mask >>= 32 below may not work */
471 mask = 0;
472 } else {
473 mask = 0xffffffff;
474 mask >>= i;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000475 }
Denis Vlasenkod867f322007-08-19 21:15:42 +0000476 /* i == 0 -> *maskp = 0x00000000
477 * i == 1 -> *maskp = 0x80000000
478 * i == 4 -> *maskp = 0xf0000000
479 * i == 31 -> *maskp = 0xfffffffe
480 * i == 32 -> *maskp = 0xffffffff */
481 *maskp = (uint32_t)(~mask);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000482 return 0;
Glenn L McGrathb65422c2003-09-08 10:59:27 +0000483}
484
Denis Vlasenko073214f2007-08-17 19:20:07 +0000485/*
486 * Parse configuration file into in-memory linked list.
Eric Andersenc7bda1c2004-03-15 08:29:22 +0000487 *
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000488 * Any previous IP rules are discarded.
489 * If the flag argument is not SUBDIR_PARSE then all /path and mime rules
490 * are also discarded. That is, previous settings are retained if flag is
491 * SUBDIR_PARSE.
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000492 * Error pages are only parsed on the main config file.
Glenn L McGrath4fe3ff82003-05-19 05:56:16 +0000493 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000494 * path Path where to look for httpd.conf (without filename).
495 * flag Type of the parse request.
496 */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000497/* flag param: */
498enum {
499 FIRST_PARSE = 0, /* path will be "/etc" */
500 SIGNALED_PARSE = 1, /* path will be "/etc" */
501 SUBDIR_PARSE = 2, /* path will be derived from URL */
502};
Glenn L McGrath06e95652003-02-09 06:51:14 +0000503static void parse_conf(const char *path, int flag)
504{
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000505 /* internally used extra flag state */
506 enum { TRY_CURDIR_PARSE = 3 };
507
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000508 FILE *f;
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000509 const char *filename;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000510 char buf[160];
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000511
Denis Vlasenko073214f2007-08-17 19:20:07 +0000512 /* discard old rules */
513 free_Htaccess_IP_list(&ip_a_d);
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000514 flg_deny_all = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000515 /* retain previous auth and mime config only for subdir parse */
516 if (flag != SUBDIR_PARSE) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000517 free_Htaccess_list(&mime_a);
Denis Vlasenko55a99402006-09-30 20:41:44 +0000518#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko073214f2007-08-17 19:20:07 +0000519 free_Htaccess_list(&g_auth);
Glenn L McGrathc9163fe2003-05-13 16:20:11 +0000520#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +0000521#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko073214f2007-08-17 19:20:07 +0000522 free_Htaccess_list(&script_i);
"Vladimir N. Oleynik"4333a092006-01-31 13:53:30 +0000523#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000524 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000525
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000526 filename = opt_c_configFile;
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000527 if (flag == SUBDIR_PARSE || filename == NULL) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000528 filename = alloca(strlen(path) + sizeof(HTTPD_CONF) + 2);
529 sprintf((char *)filename, "%s/%s", path, HTTPD_CONF);
Glenn L McGrath393183d2003-05-26 14:07:50 +0000530 }
531
Denis Vlasenko5415c852008-07-21 23:05:26 +0000532 while ((f = fopen_for_read(filename)) == NULL) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000533 if (flag >= SUBDIR_PARSE) { /* SUBDIR or TRY_CURDIR */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000534 /* config file not found, no changes to config */
535 return;
536 }
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000537 if (flag == FIRST_PARSE) {
538 /* -c CONFFILE given, but CONFFILE doesn't exist? */
539 if (opt_c_configFile)
540 bb_simple_perror_msg_and_die(opt_c_configFile);
541 /* else: no -c, thus we looked at /etc/httpd.conf,
542 * and it's not there. try ./httpd.conf: */
543 }
544 flag = TRY_CURDIR_PARSE;
545 filename = HTTPD_CONF;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000546 }
547
Denis Vlasenko55a99402006-09-30 20:41:44 +0000548#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000549 /* in "/file:user:pass" lines, we prepend path in subdirs */
550 if (flag != SUBDIR_PARSE)
551 path = "";
Glenn L McGrath06e95652003-02-09 06:51:14 +0000552#endif
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000553 /* The lines can be:
554 *
555 * I:default_index_file
556 * H:http_home
557 * [AD]:IP[/mask] # allow/deny, * for wildcard
558 * Ennn:error.html # error page for status nnn
559 * P:/url:[http://]hostname[:port]/new/path # reverse proxy
560 * .ext:mime/type # mime type
561 * *.php:/path/php # run xxx.php through an interpreter
562 * /file:user:pass # username and password
563 */
564 while (fgets(buf, sizeof(buf), f) != NULL) {
565 unsigned strlen_buf;
566 unsigned char ch;
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200567 char *after_colon;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000568
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000569 { /* remove all whitespace, and # comments */
570 char *p, *p0;
571
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200572 p0 = buf;
573 /* skip non-whitespace beginning. Often the whole line
574 * is non-whitespace. We want this case to work fast,
575 * without needless copying, therefore we don't merge
576 * this operation into next while loop. */
577 while ((ch = *p0) != '\0' && ch != '\n' && ch != '#'
578 && ch != ' ' && ch != '\t'
579 ) {
580 p0++;
581 }
582 p = p0;
583 /* if we enter this loop, we have some whitespace.
584 * discard it */
585 while (ch != '\0' && ch != '\n' && ch != '#') {
586 if (ch != ' ' && ch != '\t') {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000587 *p++ = ch;
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000588 }
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200589 ch = *++p0;
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000590 }
591 *p = '\0';
592 strlen_buf = p - buf;
Denis Vlasenko00643ca2009-04-22 13:52:22 +0000593 if (strlen_buf == 0)
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200594 continue; /* empty line */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000595 }
596
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200597 after_colon = strchr(buf, ':');
Denis Vlasenko00643ca2009-04-22 13:52:22 +0000598 /* strange line? */
Denys Vlasenko48a29de2009-05-02 00:50:38 +0200599 if (after_colon == NULL || *++after_colon == '\0')
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000600 goto config_error;
601
602 ch = (buf[0] & ~0x20); /* toupper if it's a letter */
603
604 if (ch == 'I') {
Denys Vlasenko108b8c52009-09-08 21:17:49 +0200605 if (index_page != index_html)
606 free((char*)index_page);
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000607 index_page = xstrdup(after_colon);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000608 continue;
609 }
610
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000611 /* do not allow jumping around using H in subdir's configs */
612 if (flag == FIRST_PARSE && ch == 'H') {
613 home_httpd = xstrdup(after_colon);
614 xchdir(home_httpd);
615 continue;
616 }
617
618 if (ch == 'A' || ch == 'D') {
619 Htaccess_IP *pip;
620
621 if (*after_colon == '*') {
622 if (ch == 'D') {
623 /* memorize "deny all" */
624 flg_deny_all = 1;
625 }
626 /* skip assumed "A:*", it is a default anyway */
627 continue;
628 }
629 /* store "allow/deny IP/mask" line */
630 pip = xzalloc(sizeof(*pip));
631 if (scan_ip_mask(after_colon, &pip->ip, &pip->mask)) {
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000632 /* IP{/mask} syntax error detected, protect all */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000633 ch = 'D';
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000634 pip->mask = 0;
635 }
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000636 pip->allow_deny = ch;
637 if (ch == 'D') {
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000638 /* Deny:from_IP - prepend */
639 pip->next = ip_a_d;
640 ip_a_d = pip;
641 } else {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000642 /* A:from_IP - append (thus all D's precedes A's) */
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000643 Htaccess_IP *prev_IP = ip_a_d;
644 if (prev_IP == NULL) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000645 ip_a_d = pip;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000646 } else {
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000647 while (prev_IP->next)
648 prev_IP = prev_IP->next;
649 prev_IP->next = pip;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000650 }
651 }
652 continue;
653 }
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000654
655#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000656 if (flag == FIRST_PARSE && ch == 'E') {
Denis Vlasenko6b06cb82008-05-15 21:30:45 +0000657 unsigned i;
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000658 int status = atoi(buf + 1); /* error status code */
659
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000660 if (status < HTTP_CONTINUE) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000661 goto config_error;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000662 }
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000663 /* then error page; find matching status */
664 for (i = 0; i < ARRAY_SIZE(http_response_type); i++) {
665 if (http_response_type[i] == status) {
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000666 /* We chdir to home_httpd, thus no need to
667 * concat_path_file(home_httpd, after_colon)
668 * here */
669 http_error_page[i] = xstrdup(after_colon);
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000670 break;
671 }
672 }
673 continue;
674 }
675#endif
676
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000677#if ENABLE_FEATURE_HTTPD_PROXY
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000678 if (flag == FIRST_PARSE && ch == 'P') {
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000679 /* P:/url:[http://]hostname[:port]/new/path */
680 char *url_from, *host_port, *url_to;
681 Htaccess_Proxy *proxy_entry;
682
Denis Vlasenko0eb406c2008-06-13 09:53:06 +0000683 url_from = after_colon;
684 host_port = strchr(after_colon, ':');
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000685 if (host_port == NULL) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000686 goto config_error;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000687 }
688 *host_port++ = '\0';
689 if (strncmp(host_port, "http://", 7) == 0)
Denis Vlasenko78ee7c82007-10-21 23:24:42 +0000690 host_port += 7;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000691 if (*host_port == '\0') {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000692 goto config_error;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000693 }
694 url_to = strchr(host_port, '/');
695 if (url_to == NULL) {
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000696 goto config_error;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000697 }
698 *url_to = '\0';
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000699 proxy_entry = xzalloc(sizeof(*proxy_entry));
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000700 proxy_entry->url_from = xstrdup(url_from);
701 proxy_entry->host_port = xstrdup(host_port);
702 *url_to = '/';
703 proxy_entry->url_to = xstrdup(url_to);
704 proxy_entry->next = proxy;
705 proxy = proxy_entry;
706 continue;
707 }
708#endif
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000709 /* the rest of directives are non-alphabetic,
710 * must avoid using "toupper'ed" ch */
711 ch = buf[0];
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000712
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000713 if (ch == '.' /* ".ext:mime/type" */
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000714#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000715 || (ch == '*' && buf[1] == '.') /* "*.php:/path/php" */
716#endif
717 ) {
718 char *p;
719 Htaccess *cur;
720
721 cur = xzalloc(sizeof(*cur) /* includes space for NUL */ + strlen_buf);
722 strcpy(cur->before_colon, buf);
723 p = cur->before_colon + (after_colon - buf);
724 p[-1] = '\0';
725 cur->after_colon = p;
726 if (ch == '.') {
727 /* .mime line: prepend to mime_a list */
728 cur->next = mime_a;
729 mime_a = cur;
730 }
731#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
732 else {
733 /* script interpreter line: prepend to script_i list */
734 cur->next = script_i;
735 script_i = cur;
736 }
737#endif
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000738 continue;
739 }
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000740
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000741#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
742 if (ch == '/') { /* "/file:user:pass" */
743 char *p;
744 Htaccess *cur;
745 unsigned file_len;
746
747 /* note: path is "" unless we are in SUBDIR parse,
Denis Vlasenkoc8d71092009-04-22 14:16:59 +0000748 * otherwise it does NOT start with "/" */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000749 cur = xzalloc(sizeof(*cur) /* includes space for NUL */
Denis Vlasenkoc8d71092009-04-22 14:16:59 +0000750 + 1 + strlen(path)
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000751 + strlen_buf
752 );
753 /* form "/path/file" */
Denis Vlasenkoc8d71092009-04-22 14:16:59 +0000754 sprintf(cur->before_colon, "/%s%.*s",
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000755 path,
Denys Vlasenkoa4bcbd02009-06-09 23:01:24 +0200756 (int) (after_colon - buf - 1), /* includes "/", but not ":" */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000757 buf);
758 /* canonicalize it */
759 p = bb_simplify_abs_path_inplace(cur->before_colon);
760 file_len = p - cur->before_colon;
761 /* add "user:pass" after NUL */
762 strcpy(++p, after_colon);
763 cur->after_colon = p;
764
765 /* insert cur into g_auth */
766 /* g_auth is sorted by decreased filename length */
767 {
768 Htaccess *auth, **authp;
769
770 authp = &g_auth;
771 while ((auth = *authp) != NULL) {
772 if (file_len >= strlen(auth->before_colon)) {
773 /* insert cur before auth */
774 cur->next = auth;
775 break;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000776 }
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000777 authp = &auth->next;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000778 }
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000779 *authp = cur;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000780 }
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000781 continue;
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000782 }
783#endif /* BASIC_AUTH */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000784
785 /* the line is not recognized */
786 config_error:
787 bb_error_msg("config error '%s' in '%s'", buf, filename);
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000788 } /* while (fgets) */
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +0000789
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000790 fclose(f);
Glenn L McGrath06e95652003-02-09 06:51:14 +0000791}
792
Denis Vlasenko55a99402006-09-30 20:41:44 +0000793#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Denis Vlasenko073214f2007-08-17 19:20:07 +0000794/*
795 * Given a string, html-encode special characters.
796 * This is used for the -e command line option to provide an easy way
797 * for scripts to encode result data without confusing browsers. The
798 * returned string pointer is memory allocated by malloc().
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000799 *
Denis Vlasenko073214f2007-08-17 19:20:07 +0000800 * Returns a pointer to the encoded string (malloced).
801 */
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000802static char *encodeString(const char *string)
803{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000804 /* take the simple route and encode everything */
805 /* could possibly scan once to get length. */
806 int len = strlen(string);
Denis Vlasenkoab2aea42007-01-29 22:51:58 +0000807 char *out = xmalloc(len * 6 + 1);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000808 char *p = out;
809 char ch;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000810
Denys Vlasenko535ce1d2010-07-25 03:20:25 +0200811 while ((ch = *string++) != '\0') {
Denis Vlasenko72b6a652007-08-21 11:18:25 +0000812 /* very simple check for what to encode */
813 if (isalnum(ch))
814 *p++ = ch;
815 else
816 p += sprintf(p, "&#%d;", (unsigned char) ch);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000817 }
Denis Vlasenkoab2aea42007-01-29 22:51:58 +0000818 *p = '\0';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000819 return out;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000820}
Denys Vlasenko535ce1d2010-07-25 03:20:25 +0200821#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000822
Denis Vlasenko55a99402006-09-30 20:41:44 +0000823#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000824/*
Denis Vlasenko073214f2007-08-17 19:20:07 +0000825 * Decode a base64 data stream as per rfc1521.
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000826 * Note that the rfc states that non base64 chars are to be ignored.
Denis Vlasenko073214f2007-08-17 19:20:07 +0000827 * Since the decode always results in a shorter size than the input,
828 * it is OK to pass the input arg as an output arg.
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000829 * Parameter: a pointer to a base64 encoded string.
830 * Decoded data is stored in-place.
831 */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000832static void decodeBase64(char *Data)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000833{
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000834 const unsigned char *in = (const unsigned char *)Data;
Denis Vlasenko37c33162007-08-19 18:54:22 +0000835 /* The decoded size will be at most 3/4 the size of the encoded */
Denis Vlasenko088b9592007-04-18 21:14:46 +0000836 unsigned ch = 0;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000837 int i = 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000838
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000839 while (*in) {
840 int t = *in++;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000841
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000842 if (t >= '0' && t <= '9')
843 t = t - '0' + 52;
844 else if (t >= 'A' && t <= 'Z')
845 t = t - 'A';
846 else if (t >= 'a' && t <= 'z')
847 t = t - 'a' + 26;
848 else if (t == '+')
849 t = 62;
850 else if (t == '/')
851 t = 63;
852 else if (t == '=')
853 t = 0;
854 else
855 continue;
Glenn L McGrath874e3382003-05-14 12:11:36 +0000856
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000857 ch = (ch << 6) | t;
858 i++;
859 if (i == 4) {
860 *Data++ = (char) (ch >> 16);
861 *Data++ = (char) (ch >> 8);
862 *Data++ = (char) ch;
863 i = 0;
864 }
865 }
Denis Vlasenko088b9592007-04-18 21:14:46 +0000866 *Data = '\0';
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000867}
868#endif
869
Denis Vlasenko073214f2007-08-17 19:20:07 +0000870/*
871 * Create a listen server socket on the designated port.
872 */
Glenn L McGrath06e95652003-02-09 06:51:14 +0000873static int openServer(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000874{
Denis Vlasenkof74194e2007-10-18 12:54:39 +0000875 unsigned n = bb_strtou(bind_addr_or_port, NULL, 10);
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000876 if (!errno && n && n <= 0xffff)
877 n = create_and_bind_stream_or_die(NULL, n);
878 else
879 n = create_and_bind_stream_or_die(bind_addr_or_port, 80);
880 xlisten(n, 9);
881 return n;
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000882}
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000883
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000884/*
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000885 * Log the connection closure and exit.
886 */
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +0000887static void log_and_exit(void) NORETURN;
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000888static void log_and_exit(void)
889{
Denis Vlasenko921799d2007-08-19 19:28:09 +0000890 /* Paranoia. IE said to be buggy. It may send some extra data
891 * or be confused by us just exiting without SHUT_WR. Oh well. */
892 shutdown(1, SHUT_WR);
Denis Vlasenkofaf334a2008-05-18 15:14:36 +0000893 /* Why??
894 (this also messes up stdin when user runs httpd -i from terminal)
Denis Vlasenko921799d2007-08-19 19:28:09 +0000895 ndelay_on(0);
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +0000896 while (read(STDIN_FILENO, iobuf, IOBUF_SIZE) > 0)
Denis Vlasenko921799d2007-08-19 19:28:09 +0000897 continue;
Denis Vlasenkofaf334a2008-05-18 15:14:36 +0000898 */
Denis Vlasenko921799d2007-08-19 19:28:09 +0000899
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +0000900 if (verbose > 2)
901 bb_error_msg("closed");
902 _exit(xfunc_error_retval);
903}
904
905/*
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000906 * Create and send HTTP response headers.
907 * The arguments are combined and sent as one write operation. Note that
908 * IE will puke big-time if the headers are not sent in one packet and the
909 * second packet is delayed for any reason.
910 * responseNum - the result code to send.
Denis Vlasenko0372f0f2007-08-14 16:50:01 +0000911 */
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000912static void send_headers(int responseNum)
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000913{
Denis Vlasenko073214f2007-08-17 19:20:07 +0000914 static const char RFC1123FMT[] ALIGN1 = "%a, %d %b %Y %H:%M:%S GMT";
915
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000916 const char *responseString = "";
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000917 const char *infoString = NULL;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000918 const char *mime_type;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000919#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
Denis Vlasenko2f518b02008-02-21 00:12:07 +0000920 const char *error_page = NULL;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000921#endif
Denis Vlasenkob64eed62007-01-14 17:06:11 +0000922 unsigned i;
Denis Vlasenko04158e02009-02-02 10:48:06 +0000923 time_t timer = time(NULL);
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000924 char tmp_str[80];
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000925 int len;
Glenn L McGrath06e95652003-02-09 06:51:14 +0000926
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000927 for (i = 0; i < ARRAY_SIZE(http_response_type); i++) {
928 if (http_response_type[i] == responseNum) {
929 responseString = http_response[i].name;
930 infoString = http_response[i].info;
931#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
932 error_page = http_error_page[i];
933#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +0000934 break;
935 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000936 }
937 /* error message is HTML */
938 mime_type = responseNum == HTTP_OK ?
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000939 found_mime_type : "text/html";
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000940
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000941 if (verbose)
Denis Vlasenko241b1562007-08-17 19:18:47 +0000942 bb_error_msg("response:%u", responseNum);
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000943
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000944 /* emit the current date */
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000945 strftime(tmp_str, sizeof(tmp_str), RFC1123FMT, gmtime(&timer));
946 len = sprintf(iobuf,
Denis Vlasenko69981422007-01-07 21:25:12 +0000947 "HTTP/1.0 %d %s\r\nContent-type: %s\r\n"
948 "Date: %s\r\nConnection: close\r\n",
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000949 responseNum, responseString, mime_type, tmp_str);
Glenn L McGrath58c708a2003-01-05 04:01:56 +0000950
Denis Vlasenko55a99402006-09-30 20:41:44 +0000951#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000952 if (responseNum == HTTP_UNAUTHORIZED) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000953 len += sprintf(iobuf + len,
Denis Vlasenko8e858e22007-03-07 09:35:43 +0000954 "WWW-Authenticate: Basic realm=\"%s\"\r\n",
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000955 g_realm);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000956 }
Glenn L McGrath3d2405c2003-02-10 22:28:21 +0000957#endif
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000958 if (responseNum == HTTP_MOVED_TEMPORARILY) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000959 len += sprintf(iobuf + len, "Location: %s/%s%s\r\n",
Denis Vlasenko77e44d62007-06-09 23:49:05 +0000960 found_moved_temporarily,
961 (g_query ? "?" : ""),
962 (g_query ? g_query : ""));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000963 }
Eric Andersen07f2fea2004-10-08 08:03:29 +0000964
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000965#if ENABLE_FEATURE_HTTPD_ERROR_PAGES
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +0000966 if (error_page && access(error_page, R_OK) == 0) {
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000967 strcat(iobuf, "\r\n");
968 len += 2;
969
970 if (DEBUG)
971 fprintf(stderr, "headers: '%s'\n", iobuf);
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +0000972 full_write(STDOUT_FILENO, iobuf, len);
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000973 if (DEBUG)
974 fprintf(stderr, "writing error page: '%s'\n", error_page);
Denis Vlasenko2f518b02008-02-21 00:12:07 +0000975 return send_file_and_exit(error_page, SEND_BODY);
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +0000976 }
977#endif
978
Denis Vlasenkof4310172007-09-21 22:35:18 +0000979 if (file_size != -1) { /* file */
Denis Vlasenko384b1d12007-08-14 16:55:01 +0000980 strftime(tmp_str, sizeof(tmp_str), RFC1123FMT, gmtime(&last_mod));
Denis Vlasenkof4310172007-09-21 22:35:18 +0000981#if ENABLE_FEATURE_HTTPD_RANGES
982 if (responseNum == HTTP_PARTIAL_CONTENT) {
Denys Vlasenkoa3aa3e32009-12-11 12:36:10 +0100983 len += sprintf(iobuf + len, "Content-Range: bytes %"OFF_FMT"u-%"OFF_FMT"u/%"OFF_FMT"u\r\n",
Denis Vlasenkof4310172007-09-21 22:35:18 +0000984 range_start,
985 range_end,
986 file_size);
987 file_size = range_end - range_start + 1;
988 }
989#endif
990 len += sprintf(iobuf + len,
991#if ENABLE_FEATURE_HTTPD_RANGES
992 "Accept-Ranges: bytes\r\n"
993#endif
Denys Vlasenkoa3aa3e32009-12-11 12:36:10 +0100994 "Last-Modified: %s\r\n%s %"OFF_FMT"u\r\n",
Denis Vlasenkof4310172007-09-21 22:35:18 +0000995 tmp_str,
Peter Korsgaard7a2ba322010-07-25 03:20:53 +0200996 content_gzip ? "Transfer-length:" : "Content-length:",
Denis Vlasenkof4310172007-09-21 22:35:18 +0000997 file_size
998 );
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +0000999 }
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02001000
1001 if (content_gzip)
1002 len += sprintf(iobuf + len, "Content-Encoding: gzip\r\n");
1003
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001004 iobuf[len++] = '\r';
1005 iobuf[len++] = '\n';
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001006 if (infoString) {
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001007 len += sprintf(iobuf + len,
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001008 "<HTML><HEAD><TITLE>%d %s</TITLE></HEAD>\n"
1009 "<BODY><H1>%d %s</H1>\n%s\n</BODY></HTML>\n",
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001010 responseNum, responseString,
1011 responseNum, responseString, infoString);
1012 }
Denis Vlasenko6c85ddc2006-11-21 00:08:39 +00001013 if (DEBUG)
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001014 fprintf(stderr, "headers: '%s'\n", iobuf);
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001015 if (full_write(STDOUT_FILENO, iobuf, len) != len) {
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001016 if (verbose > 1)
1017 bb_perror_msg("error");
1018 log_and_exit();
1019 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001020}
1021
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00001022static void send_headers_and_exit(int responseNum) NORETURN;
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001023static void send_headers_and_exit(int responseNum)
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001024{
Peter Korsgaard95755182011-03-25 13:38:52 +01001025 IF_FEATURE_HTTPD_GZIP(content_gzip = 0;)
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001026 send_headers(responseNum);
1027 log_and_exit();
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001028}
1029
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001030/*
1031 * Read from the socket until '\n' or EOF. '\r' chars are removed.
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001032 * '\n' is replaced with NUL.
1033 * Return number of characters read or 0 if nothing is read
1034 * ('\r' and '\n' are not counted).
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001035 * Data is returned in iobuf.
1036 */
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001037static int get_line(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001038{
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001039 int count = 0;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001040 char c;
Glenn L McGrath06e95652003-02-09 06:51:14 +00001041
Denis Vlasenko2ca84f62009-02-05 12:38:21 +00001042 alarm(HEADER_READ_TIMEOUT);
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001043 while (1) {
1044 if (hdr_cnt <= 0) {
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001045 hdr_cnt = safe_read(STDIN_FILENO, hdr_buf, sizeof(hdr_buf));
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001046 if (hdr_cnt <= 0)
1047 break;
1048 hdr_ptr = hdr_buf;
1049 }
1050 iobuf[count] = c = *hdr_ptr++;
1051 hdr_cnt--;
1052
1053 if (c == '\r')
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001054 continue;
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001055 if (c == '\n') {
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001056 iobuf[count] = '\0';
Denis Vlasenko2ca84f62009-02-05 12:38:21 +00001057 break;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001058 }
Denis Vlasenko921799d2007-08-19 19:28:09 +00001059 if (count < (IOBUF_SIZE - 1)) /* check overflow */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001060 count++;
1061 }
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001062 return count;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001063}
1064
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001065#if ENABLE_FEATURE_HTTPD_CGI || ENABLE_FEATURE_HTTPD_PROXY
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001066
1067/* gcc 4.2.1 fares better with NOINLINE */
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00001068static NOINLINE void cgi_io_loop_and_exit(int fromCgi_rd, int toCgi_wr, int post_len) NORETURN;
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001069static NOINLINE void cgi_io_loop_and_exit(int fromCgi_rd, int toCgi_wr, int post_len)
1070{
1071 enum { FROM_CGI = 1, TO_CGI = 2 }; /* indexes in pfd[] */
1072 struct pollfd pfd[3];
1073 int out_cnt; /* we buffer a bit of initial CGI output */
1074 int count;
1075
1076 /* iobuf is used for CGI -> network data,
1077 * hdr_buf is for network -> CGI data (POSTDATA) */
1078
1079 /* If CGI dies, we still want to correctly finish reading its output
1080 * and send it to the peer. So please no SIGPIPEs! */
1081 signal(SIGPIPE, SIG_IGN);
1082
Denis Vlasenko4a457562007-10-14 02:34:20 +00001083 // We inconsistently handle a case when more POSTDATA from network
1084 // is coming than we expected. We may give *some part* of that
1085 // extra data to CGI.
1086
1087 //if (hdr_cnt > post_len) {
1088 // /* We got more POSTDATA from network than we expected */
1089 // hdr_cnt = post_len;
1090 //}
1091 post_len -= hdr_cnt;
1092 /* post_len - number of POST bytes not yet read from network */
1093
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001094 /* NB: breaking out of this loop jumps to log_and_exit() */
1095 out_cnt = 0;
1096 while (1) {
1097 memset(pfd, 0, sizeof(pfd));
1098
1099 pfd[FROM_CGI].fd = fromCgi_rd;
1100 pfd[FROM_CGI].events = POLLIN;
1101
1102 if (toCgi_wr) {
1103 pfd[TO_CGI].fd = toCgi_wr;
1104 if (hdr_cnt > 0) {
1105 pfd[TO_CGI].events = POLLOUT;
1106 } else if (post_len > 0) {
1107 pfd[0].events = POLLIN;
1108 } else {
1109 /* post_len <= 0 && hdr_cnt <= 0:
1110 * no more POST data to CGI,
1111 * let CGI see EOF on CGI's stdin */
Denys Vlasenko8fc9e6a2010-04-02 10:40:58 +02001112 if (toCgi_wr != fromCgi_rd)
1113 close(toCgi_wr);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001114 toCgi_wr = 0;
1115 }
1116 }
1117
1118 /* Now wait on the set of sockets */
Denys Vlasenko8fc9e6a2010-04-02 10:40:58 +02001119 count = safe_poll(pfd, toCgi_wr ? TO_CGI+1 : FROM_CGI+1, -1);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001120 if (count <= 0) {
1121#if 0
Denis Vlasenkofb0eba72008-01-02 19:55:04 +00001122 if (safe_waitpid(pid, &status, WNOHANG) <= 0) {
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001123 /* Weird. CGI didn't exit and no fd's
1124 * are ready, yet poll returned?! */
1125 continue;
1126 }
1127 if (DEBUG && WIFEXITED(status))
1128 bb_error_msg("CGI exited, status=%d", WEXITSTATUS(status));
1129 if (DEBUG && WIFSIGNALED(status))
1130 bb_error_msg("CGI killed, signal=%d", WTERMSIG(status));
1131#endif
1132 break;
1133 }
1134
Denys Vlasenko88aa5582010-03-02 15:02:45 +01001135 if (pfd[TO_CGI].revents) {
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001136 /* hdr_cnt > 0 here due to the way pfd[TO_CGI].events set */
1137 /* Have data from peer and can write to CGI */
1138 count = safe_write(toCgi_wr, hdr_ptr, hdr_cnt);
1139 /* Doesn't happen, we dont use nonblocking IO here
1140 *if (count < 0 && errno == EAGAIN) {
1141 * ...
1142 *} else */
1143 if (count > 0) {
1144 hdr_ptr += count;
1145 hdr_cnt -= count;
1146 } else {
1147 /* EOF/broken pipe to CGI, stop piping POST data */
1148 hdr_cnt = post_len = 0;
1149 }
1150 }
1151
Denys Vlasenko88aa5582010-03-02 15:02:45 +01001152 if (pfd[0].revents) {
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001153 /* post_len > 0 && hdr_cnt == 0 here */
1154 /* We expect data, prev data portion is eaten by CGI
1155 * and there *is* data to read from the peer
1156 * (POSTDATA) */
1157 //count = post_len > (int)sizeof(hdr_buf) ? (int)sizeof(hdr_buf) : post_len;
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001158 //count = safe_read(STDIN_FILENO, hdr_buf, count);
1159 count = safe_read(STDIN_FILENO, hdr_buf, sizeof(hdr_buf));
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001160 if (count > 0) {
1161 hdr_cnt = count;
1162 hdr_ptr = hdr_buf;
1163 post_len -= count;
1164 } else {
1165 /* no more POST data can be read */
1166 post_len = 0;
1167 }
1168 }
1169
Denys Vlasenko88aa5582010-03-02 15:02:45 +01001170 if (pfd[FROM_CGI].revents) {
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001171 /* There is something to read from CGI */
1172 char *rbuf = iobuf;
1173
1174 /* Are we still buffering CGI output? */
1175 if (out_cnt >= 0) {
1176 /* HTTP_200[] has single "\r\n" at the end.
1177 * According to http://hoohoo.ncsa.uiuc.edu/cgi/out.html,
1178 * CGI scripts MUST send their own header terminated by
1179 * empty line, then data. That's why we have only one
1180 * <cr><lf> pair here. We will output "200 OK" line
1181 * if needed, but CGI still has to provide blank line
1182 * between header and body */
1183
1184 /* Must use safe_read, not full_read, because
1185 * CGI may output a few first bytes and then wait
1186 * for POSTDATA without closing stdout.
1187 * With full_read we may wait here forever. */
1188 count = safe_read(fromCgi_rd, rbuf + out_cnt, PIPE_BUF - 8);
1189 if (count <= 0) {
1190 /* eof (or error) and there was no "HTTP",
1191 * so write it, then write received data */
1192 if (out_cnt) {
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001193 full_write(STDOUT_FILENO, HTTP_200, sizeof(HTTP_200)-1);
1194 full_write(STDOUT_FILENO, rbuf, out_cnt);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001195 }
1196 break; /* CGI stdout is closed, exiting */
1197 }
1198 out_cnt += count;
1199 count = 0;
1200 /* "Status" header format is: "Status: 302 Redirected\r\n" */
1201 if (out_cnt >= 8 && memcmp(rbuf, "Status: ", 8) == 0) {
1202 /* send "HTTP/1.0 " */
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001203 if (full_write(STDOUT_FILENO, HTTP_200, 9) != 9)
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001204 break;
1205 rbuf += 8; /* skip "Status: " */
1206 count = out_cnt - 8;
1207 out_cnt = -1; /* buffering off */
1208 } else if (out_cnt >= 4) {
1209 /* Did CGI add "HTTP"? */
1210 if (memcmp(rbuf, HTTP_200, 4) != 0) {
1211 /* there is no "HTTP", do it ourself */
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001212 if (full_write(STDOUT_FILENO, HTTP_200, sizeof(HTTP_200)-1) != sizeof(HTTP_200)-1)
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001213 break;
1214 }
1215 /* Commented out:
1216 if (!strstr(rbuf, "ontent-")) {
1217 full_write(s, "Content-type: text/plain\r\n\r\n", 28);
1218 }
1219 * Counter-example of valid CGI without Content-type:
1220 * echo -en "HTTP/1.0 302 Found\r\n"
1221 * echo -en "Location: http://www.busybox.net\r\n"
1222 * echo -en "\r\n"
1223 */
1224 count = out_cnt;
1225 out_cnt = -1; /* buffering off */
1226 }
1227 } else {
1228 count = safe_read(fromCgi_rd, rbuf, PIPE_BUF);
1229 if (count <= 0)
1230 break; /* eof (or error) */
1231 }
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001232 if (full_write(STDOUT_FILENO, rbuf, count) != count)
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001233 break;
1234 if (DEBUG)
1235 fprintf(stderr, "cgi read %d bytes: '%.*s'\n", count, count, rbuf);
1236 } /* if (pfd[FROM_CGI].revents) */
1237 } /* while (1) */
1238 log_and_exit();
1239}
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001240#endif
1241
1242#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001243
Denis Vlasenko921799d2007-08-19 19:28:09 +00001244static void setenv1(const char *name, const char *value)
1245{
1246 setenv(name, value ? value : "", 1);
1247}
1248
Denis Vlasenko241b1562007-08-17 19:18:47 +00001249/*
1250 * Spawn CGI script, forward CGI's stdin/out <=> network
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001251 *
Denis Vlasenko241b1562007-08-17 19:18:47 +00001252 * Environment variables are set up and the script is invoked with pipes
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001253 * for stdin/stdout. If a POST is being done the script is fed the POST
Denis Vlasenko241b1562007-08-17 19:18:47 +00001254 * data in addition to setting the QUERY_STRING variable (for GETs or POSTs).
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001255 *
Denis Vlasenko241b1562007-08-17 19:18:47 +00001256 * Parameters:
1257 * const char *url The requested URL (with leading /).
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001258 * int post_len Length of the POST body.
Denis Vlasenko241b1562007-08-17 19:18:47 +00001259 * const char *cookie For set HTTP_COOKIE.
1260 * const char *content_type For set CONTENT_TYPE.
1261 */
1262static void send_cgi_and_exit(
1263 const char *url,
1264 const char *request,
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001265 int post_len,
Denis Vlasenko241b1562007-08-17 19:18:47 +00001266 const char *cookie,
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00001267 const char *content_type) NORETURN;
Denis Vlasenko241b1562007-08-17 19:18:47 +00001268static void send_cgi_and_exit(
1269 const char *url,
1270 const char *request,
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001271 int post_len,
Denis Vlasenko241b1562007-08-17 19:18:47 +00001272 const char *cookie,
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00001273 const char *content_type)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001274{
Denis Vlasenko37188322008-02-16 13:20:56 +00001275 struct fd_pair fromCgi; /* CGI -> httpd pipe */
1276 struct fd_pair toCgi; /* httpd -> CGI pipe */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001277 char *script;
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001278 int pid;
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001279
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001280 /* Make a copy. NB: caller guarantees:
1281 * url[0] == '/', url[1] != '/' */
1282 url = xstrdup(url);
1283
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001284 /*
1285 * We are mucking with environment _first_ and then vfork/exec,
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001286 * this allows us to use vfork safely. Parent doesn't care about
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001287 * these environment changes anyway.
1288 */
1289
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001290 /* Check for [dirs/]script.cgi/PATH_INFO */
1291 script = (char*)url;
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001292 while ((script = strchr(script + 1, '/')) != NULL) {
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001293 *script = '\0';
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001294 if (!is_directory(url + 1, 1, NULL)) {
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001295 /* not directory, found script.cgi/PATH_INFO */
1296 *script = '/';
1297 break;
1298 }
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001299 *script = '/'; /* is directory, find next '/' */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001300 }
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001301 setenv1("PATH_INFO", script); /* set to /PATH_INFO or "" */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001302 setenv1("REQUEST_METHOD", request);
1303 if (g_query) {
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001304 putenv(xasprintf("%s=%s?%s", "REQUEST_URI", url, g_query));
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001305 } else {
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001306 setenv1("REQUEST_URI", url);
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001307 }
1308 if (script != NULL)
1309 *script = '\0'; /* cut off /PATH_INFO */
1310
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001311 /* SCRIPT_FILENAME is required by PHP in CGI mode */
1312 if (home_httpd[0] == '/') {
1313 char *fullpath = concat_path_file(home_httpd, url);
1314 setenv1("SCRIPT_FILENAME", fullpath);
1315 }
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001316 /* set SCRIPT_NAME as full path: /cgi-bin/dirs/script.cgi */
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001317 setenv1("SCRIPT_NAME", url);
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001318 /* http://hoohoo.ncsa.uiuc.edu/cgi/env.html:
1319 * QUERY_STRING: The information which follows the ? in the URL
1320 * which referenced this script. This is the query information.
1321 * It should not be decoded in any fashion. This variable
1322 * should always be set when there is query information,
1323 * regardless of command line decoding. */
1324 /* (Older versions of bbox seem to do some decoding) */
1325 setenv1("QUERY_STRING", g_query);
1326 putenv((char*)"SERVER_SOFTWARE=busybox httpd/"BB_VER);
1327 putenv((char*)"SERVER_PROTOCOL=HTTP/1.0");
1328 putenv((char*)"GATEWAY_INTERFACE=CGI/1.1");
1329 /* Having _separate_ variables for IP and port defeats
1330 * the purpose of having socket abstraction. Which "port"
1331 * are you using on Unix domain socket?
1332 * IOW - REMOTE_PEER="1.2.3.4:56" makes much more sense.
1333 * Oh well... */
1334 {
1335 char *p = rmt_ip_str ? rmt_ip_str : (char*)"";
1336 char *cp = strrchr(p, ':');
1337 if (ENABLE_FEATURE_IPV6 && cp && strchr(cp, ']'))
1338 cp = NULL;
1339 if (cp) *cp = '\0'; /* delete :PORT */
1340 setenv1("REMOTE_ADDR", p);
Denis Vlasenko37c33162007-08-19 18:54:22 +00001341 if (cp) {
1342 *cp = ':';
1343#if ENABLE_FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV
1344 setenv1("REMOTE_PORT", cp + 1);
1345#endif
1346 }
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001347 }
1348 setenv1("HTTP_USER_AGENT", user_agent);
Bernhard Reutner-Fischerb4249302008-09-01 15:30:49 +00001349 if (http_accept)
1350 setenv1("HTTP_ACCEPT", http_accept);
1351 if (http_accept_language)
1352 setenv1("HTTP_ACCEPT_LANGUAGE", http_accept_language);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001353 if (post_len)
1354 putenv(xasprintf("CONTENT_LENGTH=%d", post_len));
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001355 if (cookie)
1356 setenv1("HTTP_COOKIE", cookie);
1357 if (content_type)
1358 setenv1("CONTENT_TYPE", content_type);
1359#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
1360 if (remoteuser) {
1361 setenv1("REMOTE_USER", remoteuser);
1362 putenv((char*)"AUTH_TYPE=Basic");
1363 }
1364#endif
1365 if (referer)
1366 setenv1("HTTP_REFERER", referer);
Denis Vlasenko9d1d4c02008-11-22 20:29:35 +00001367 setenv1("HTTP_HOST", host); /* set to "" if NULL */
Denis Vlasenkocbb4e612009-03-18 20:00:46 +00001368 /* setenv1("SERVER_NAME", safe_gethostname()); - don't do this,
1369 * just run "env SERVER_NAME=xyz httpd ..." instead */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001370
Denis Vlasenko37188322008-02-16 13:20:56 +00001371 xpiped_pair(fromCgi);
1372 xpiped_pair(toCgi);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001373
Denis Vlasenko80281fe2007-03-07 22:16:38 +00001374 pid = vfork();
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001375 if (pid < 0) {
1376 /* TODO: log perror? */
1377 log_and_exit();
1378 }
Denis Vlasenkof7996f32007-01-11 17:20:00 +00001379
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001380 if (!pid) {
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001381 /* Child process */
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001382 char *argv[3];
1383
Denis Vlasenko241b1562007-08-17 19:18:47 +00001384 xfunc_error_retval = 242;
1385
Denis Vlasenko284d0fa2008-02-16 13:18:17 +00001386 /* NB: close _first_, then move fds! */
1387 close(toCgi.wr);
1388 close(fromCgi.rd);
Denis Vlasenkoe5d37cc2007-08-11 20:20:02 +00001389 xmove_fd(toCgi.rd, 0); /* replace stdin with the pipe */
1390 xmove_fd(fromCgi.wr, 1); /* replace stdout with the pipe */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001391 /* User seeing stderr output can be a security problem.
Denis Vlasenko241b1562007-08-17 19:18:47 +00001392 * If CGI really wants that, it can always do dup itself. */
Denis Vlasenko1ec15cd2007-08-11 20:20:43 +00001393 /* dup2(1, 2); */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001394
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001395 /* Chdiring to script's dir */
1396 script = strrchr(url, '/');
1397 if (script != url) { /* paranoia */
1398 *script = '\0';
1399 if (chdir(url + 1) != 0) {
Bernhard Reutner-Fischerca228fb2010-02-26 10:09:31 +01001400 bb_perror_msg("chdir(%s)", url + 1);
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001401 goto error_execing_cgi;
1402 }
1403 // not needed: *script = '/';
1404 }
1405 script++;
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001406
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001407 /* set argv[0] to name without path */
1408 argv[0] = script;
1409 argv[1] = NULL;
Denis Vlasenkofc213052008-02-11 16:26:22 +00001410
1411#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001412 {
1413 char *suffix = strrchr(script, '.');
Denis Vlasenkofc213052008-02-11 16:26:22 +00001414
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001415 if (suffix) {
1416 Htaccess *cur;
1417 for (cur = script_i; cur; cur = cur->next) {
1418 if (strcmp(cur->before_colon + 1, suffix) == 0) {
1419 /* found interpreter name */
1420 argv[0] = cur->after_colon;
1421 argv[1] = script;
1422 argv[2] = NULL;
1423 break;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001424 }
1425 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001426 }
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001427 }
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001428#endif
1429 /* restore default signal dispositions for CGI process */
1430 bb_signals(0
1431 | (1 << SIGCHLD)
1432 | (1 << SIGPIPE)
1433 | (1 << SIGHUP)
1434 , SIG_DFL);
1435
1436 /* _NOT_ execvp. We do not search PATH. argv[0] is a filename
1437 * without any dir components and will only match a file
1438 * in the current directory */
1439 execv(argv[0], argv);
1440 if (verbose)
Denys Vlasenko31c3dad2010-06-27 16:57:55 +02001441 bb_perror_msg("can't execute '%s'", argv[0]);
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001442 error_execing_cgi:
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001443 /* send to stdout
1444 * (we are CGI here, our stdout is pumped to the net) */
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001445 send_headers_and_exit(HTTP_NOT_FOUND);
Denis Vlasenkoa3ee69f2006-11-21 00:07:31 +00001446 } /* end child */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001447
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001448 /* Parent process */
1449
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001450 /* Restore variables possibly changed by child */
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001451 xfunc_error_retval = 0;
Denis Vlasenkob98c26a2007-08-17 19:21:12 +00001452
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001453 /* Pump data */
Denis Vlasenkoe5d37cc2007-08-11 20:20:02 +00001454 close(fromCgi.wr);
1455 close(toCgi.rd);
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001456 cgi_io_loop_and_exit(fromCgi.rd, toCgi.wr, post_len);
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001457}
Denis Vlasenko32a471e2007-09-23 13:56:57 +00001458
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001459#endif /* FEATURE_HTTPD_CGI */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001460
Denis Vlasenko241b1562007-08-17 19:18:47 +00001461/*
1462 * Send a file response to a HTTP request, and exit
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00001463 *
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001464 * Parameters:
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001465 * const char *url The requested URL (with leading /).
1466 * what What to send (headers/body/both).
Denis Vlasenko241b1562007-08-17 19:18:47 +00001467 */
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001468static NOINLINE void send_file_and_exit(const char *url, int what)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001469{
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001470 char *suffix;
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001471 int fd;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001472 ssize_t count;
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001473
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02001474 if (content_gzip) {
1475 /* does <url>.gz exist? Then use it instead */
1476 char *gzurl = xasprintf("%s.gz", url);
1477 fd = open(gzurl, O_RDONLY);
1478 free(gzurl);
1479 if (fd != -1) {
1480 struct stat sb;
1481 fstat(fd, &sb);
1482 file_size = sb.st_size;
Denys Vlasenko8030a142011-01-11 17:59:45 +01001483 last_mod = sb.st_mtime;
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02001484 } else {
1485 IF_FEATURE_HTTPD_GZIP(content_gzip = 0;)
1486 fd = open(url, O_RDONLY);
1487 }
1488 } else {
1489 fd = open(url, O_RDONLY);
1490 }
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001491 if (fd < 0) {
1492 if (DEBUG)
1493 bb_perror_msg("can't open '%s'", url);
1494 /* Error pages are sent by using send_file_and_exit(SEND_BODY).
1495 * IOW: it is unsafe to call send_headers_and_exit
1496 * if what is SEND_BODY! Can recurse! */
1497 if (what != SEND_BODY)
1498 send_headers_and_exit(HTTP_NOT_FOUND);
1499 log_and_exit();
1500 }
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001501 /* If you want to know about EPIPE below
1502 * (happens if you abort downloads from local httpd): */
1503 signal(SIGPIPE, SIG_IGN);
1504
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001505 /* If not found, default is "application/octet-stream" */
Denis Vlasenko073214f2007-08-17 19:20:07 +00001506 found_mime_type = "application/octet-stream";
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001507 suffix = strrchr(url, '.');
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001508 if (suffix) {
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001509 static const char suffixTable[] ALIGN1 =
1510 /* Shorter suffix must be first:
1511 * ".html.htm" will fail for ".htm"
1512 */
1513 ".txt.h.c.cc.cpp\0" "text/plain\0"
1514 /* .htm line must be after .h line */
1515 ".htm.html\0" "text/html\0"
1516 ".jpg.jpeg\0" "image/jpeg\0"
1517 ".gif\0" "image/gif\0"
1518 ".png\0" "image/png\0"
1519 /* .css line must be after .c line */
1520 ".css\0" "text/css\0"
1521 ".wav\0" "audio/wav\0"
1522 ".avi\0" "video/x-msvideo\0"
1523 ".qt.mov\0" "video/quicktime\0"
1524 ".mpe.mpeg\0" "video/mpeg\0"
1525 ".mid.midi\0" "audio/midi\0"
1526 ".mp3\0" "audio/mpeg\0"
1527#if 0 /* unpopular */
1528 ".au\0" "audio/basic\0"
1529 ".pac\0" "application/x-ns-proxy-autoconfig\0"
1530 ".vrml.wrl\0" "model/vrml\0"
1531#endif
1532 /* compiler adds another "\0" here */
1533 ;
Denis Vlasenko073214f2007-08-17 19:20:07 +00001534 Htaccess *cur;
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001535
1536 /* Examine built-in table */
1537 const char *table = suffixTable;
1538 const char *table_next;
1539 for (; *table; table = table_next) {
1540 const char *try_suffix;
1541 const char *mime_type;
1542 mime_type = table + strlen(table) + 1;
1543 table_next = mime_type + strlen(mime_type) + 1;
1544 try_suffix = strstr(table, suffix);
1545 if (!try_suffix)
1546 continue;
1547 try_suffix += strlen(suffix);
1548 if (*try_suffix == '\0' || *try_suffix == '.') {
1549 found_mime_type = mime_type;
1550 break;
Denis Vlasenko073214f2007-08-17 19:20:07 +00001551 }
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001552 /* Example: strstr(table, ".av") != NULL, but it
1553 * does not match ".avi" after all and we end up here.
1554 * The table is arranged so that in this case we know
1555 * that it can't match anything in the following lines,
1556 * and we stop the search: */
1557 break;
Denis Vlasenko073214f2007-08-17 19:20:07 +00001558 }
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001559 /* ...then user's table */
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001560 for (cur = mime_a; cur; cur = cur->next) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001561 if (strcmp(cur->before_colon, suffix) == 0) {
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001562 found_mime_type = cur->after_colon;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001563 break;
1564 }
1565 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001566 }
Bernhard Reutner-Fischer62851172009-05-03 18:53:22 +02001567
1568 if (DEBUG)
1569 bb_error_msg("sending file '%s' content-type: %s",
1570 url, found_mime_type);
1571
Denis Vlasenkof4310172007-09-21 22:35:18 +00001572#if ENABLE_FEATURE_HTTPD_RANGES
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02001573 if (what == SEND_BODY /* err pages and ranges don't mix */
1574 || content_gzip /* we are sending compressed page: can't do ranges */ ///why?
1575 ) {
1576 range_start = 0;
1577 }
Denis Vlasenkof4310172007-09-21 22:35:18 +00001578 range_len = MAXINT(off_t);
1579 if (range_start) {
1580 if (!range_end) {
1581 range_end = file_size - 1;
1582 }
1583 if (range_end < range_start
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001584 || lseek(fd, range_start, SEEK_SET) != range_start
Denis Vlasenkof4310172007-09-21 22:35:18 +00001585 ) {
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001586 lseek(fd, 0, SEEK_SET);
Denis Vlasenkof4310172007-09-21 22:35:18 +00001587 range_start = 0;
1588 } else {
1589 range_len = range_end - range_start + 1;
1590 send_headers(HTTP_PARTIAL_CONTENT);
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001591 what = SEND_BODY;
Denis Vlasenkof4310172007-09-21 22:35:18 +00001592 }
1593 }
1594#endif
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001595 if (what & SEND_HEADERS)
Denis Vlasenkoe58e8d92007-08-21 10:26:55 +00001596 send_headers(HTTP_OK);
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001597#if ENABLE_FEATURE_HTTPD_USE_SENDFILE
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001598 {
1599 off_t offset = range_start;
1600 while (1) {
1601 /* sz is rounded down to 64k */
1602 ssize_t sz = MAXINT(ssize_t) - 0xffff;
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001603 IF_FEATURE_HTTPD_RANGES(if (sz > range_len) sz = range_len;)
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001604 count = sendfile(STDOUT_FILENO, fd, &offset, sz);
1605 if (count < 0) {
1606 if (offset == range_start)
1607 break; /* fall back to read/write loop */
1608 goto fin;
1609 }
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001610 IF_FEATURE_HTTPD_RANGES(range_len -= sz;)
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001611 if (count == 0 || range_len == 0)
1612 log_and_exit();
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001613 }
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001614 }
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001615#endif
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001616 while ((count = safe_read(fd, iobuf, IOBUF_SIZE)) > 0) {
Denis Vlasenkof4310172007-09-21 22:35:18 +00001617 ssize_t n;
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001618 IF_FEATURE_HTTPD_RANGES(if (count > range_len) count = range_len;)
Bernhard Reutner-Fischer5e25ddb2008-05-19 09:48:17 +00001619 n = full_write(STDOUT_FILENO, iobuf, count);
Denis Vlasenko241b1562007-08-17 19:18:47 +00001620 if (count != n)
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001621 break;
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001622 IF_FEATURE_HTTPD_RANGES(range_len -= count;)
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001623 if (range_len == 0)
Denis Vlasenkof4310172007-09-21 22:35:18 +00001624 break;
Denis Vlasenko1b9064d2007-08-12 21:05:49 +00001625 }
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001626 if (count < 0) {
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001627 IF_FEATURE_HTTPD_USE_SENDFILE(fin:)
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00001628 if (verbose > 1)
1629 bb_perror_msg("error");
1630 }
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001631 log_and_exit();
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001632}
1633
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001634static int checkPermIP(void)
1635{
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001636 Htaccess_IP *cur;
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001637
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001638 for (cur = ip_a_d; cur; cur = cur->next) {
Denis Vlasenkob64eed62007-01-14 17:06:11 +00001639#if DEBUG
Denis Vlasenko384b1d12007-08-14 16:55:01 +00001640 fprintf(stderr,
1641 "checkPermIP: '%s' ? '%u.%u.%u.%u/%u.%u.%u.%u'\n",
1642 rmt_ip_str,
Denis Vlasenko6536a9b2007-01-12 10:35:23 +00001643 (unsigned char)(cur->ip >> 24),
1644 (unsigned char)(cur->ip >> 16),
1645 (unsigned char)(cur->ip >> 8),
1646 (unsigned char)(cur->ip),
1647 (unsigned char)(cur->mask >> 24),
1648 (unsigned char)(cur->mask >> 16),
1649 (unsigned char)(cur->mask >> 8),
1650 (unsigned char)(cur->mask)
1651 );
Denis Vlasenko3bba5452006-12-30 17:57:03 +00001652#endif
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001653 if ((rmt_ip & cur->mask) == cur->ip)
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001654 return (cur->allow_deny == 'A'); /* A -> 1 */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001655 }
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001656
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001657 return !flg_deny_all; /* depends on whether we saw "D:*" */
Glenn L McGrathb65422c2003-09-08 10:59:27 +00001658}
1659
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001660#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko073214f2007-08-17 19:20:07 +00001661/*
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001662 * Config file entries are of the form "/<path>:<user>:<passwd>".
1663 * If config file has no prefix match for path, access is allowed.
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001664 *
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001665 * path The file path
1666 * user_and_passwd "user:passwd" to validate
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001667 *
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001668 * Returns 1 if user_and_passwd is OK.
Denis Vlasenko073214f2007-08-17 19:20:07 +00001669 */
Denis Vlasenko25b46302008-06-13 09:55:13 +00001670static int check_user_passwd(const char *path, const char *user_and_passwd)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001671{
Denis Vlasenko073214f2007-08-17 19:20:07 +00001672 Htaccess *cur;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001673 const char *prev = NULL;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001674
Denis Vlasenko77e44d62007-06-09 23:49:05 +00001675 for (cur = g_auth; cur; cur = cur->next) {
Denis Vlasenko25b46302008-06-13 09:55:13 +00001676 const char *dir_prefix;
1677 size_t len;
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001678
Denis Vlasenko25b46302008-06-13 09:55:13 +00001679 dir_prefix = cur->before_colon;
1680
1681 /* WHY? */
1682 /* If already saw a match, don't accept other different matches */
1683 if (prev && strcmp(prev, dir_prefix) != 0)
1684 continue;
1685
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001686 if (DEBUG)
Denis Vlasenko25b46302008-06-13 09:55:13 +00001687 fprintf(stderr, "checkPerm: '%s' ? '%s'\n", dir_prefix, user_and_passwd);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001688
Denis Vlasenko25b46302008-06-13 09:55:13 +00001689 /* If it's not a prefix match, continue searching */
1690 len = strlen(dir_prefix);
1691 if (len != 1 /* dir_prefix "/" matches all, don't need to check */
1692 && (strncmp(dir_prefix, path, len) != 0
1693 || (path[len] != '/' && path[len] != '\0'))
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001694 ) {
Denis Vlasenko25b46302008-06-13 09:55:13 +00001695 continue;
1696 }
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001697
Denis Vlasenko25b46302008-06-13 09:55:13 +00001698 /* Path match found */
1699 prev = dir_prefix;
Eric Andersen35e643b2003-07-28 07:40:39 +00001700
Denis Vlasenko25b46302008-06-13 09:55:13 +00001701 if (ENABLE_FEATURE_HTTPD_AUTH_MD5) {
1702 char *md5_passwd;
1703
1704 md5_passwd = strchr(cur->after_colon, ':');
1705 if (md5_passwd && md5_passwd[1] == '$' && md5_passwd[2] == '1'
1706 && md5_passwd[3] == '$' && md5_passwd[4]
1707 ) {
1708 char *encrypted;
1709 int r, user_len_p1;
1710
1711 md5_passwd++;
1712 user_len_p1 = md5_passwd - cur->after_colon;
1713 /* comparing "user:" */
1714 if (strncmp(cur->after_colon, user_and_passwd, user_len_p1) != 0) {
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001715 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001716 }
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001717
Denis Vlasenko25b46302008-06-13 09:55:13 +00001718 encrypted = pw_encrypt(
1719 user_and_passwd + user_len_p1 /* cleartext pwd from user */,
1720 md5_passwd /*salt */, 1 /* cleanup */);
1721 r = strcmp(encrypted, md5_passwd);
1722 free(encrypted);
1723 if (r == 0)
1724 goto set_remoteuser_var; /* Ok */
1725 continue;
1726 }
1727 }
1728
1729 /* Comparing plaintext "user:pass" in one go */
1730 if (strcmp(cur->after_colon, user_and_passwd) == 0) {
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001731 set_remoteuser_var:
Denis Vlasenko25b46302008-06-13 09:55:13 +00001732 remoteuser = xstrndup(user_and_passwd,
1733 strchrnul(user_and_passwd, ':') - user_and_passwd);
1734 return 1; /* Ok */
Glenn L McGrath1dc0cca2003-10-03 10:50:56 +00001735 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001736 } /* for */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001737
Denis Vlasenko25b46302008-06-13 09:55:13 +00001738 /* 0(bad) if prev is set: matches were found but passwd was wrong */
1739 return (prev == NULL);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001740}
Denis Vlasenkob3a07152006-11-16 18:04:43 +00001741#endif /* FEATURE_HTTPD_BASIC_AUTH */
Glenn L McGrathc9163fe2003-05-13 16:20:11 +00001742
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001743#if ENABLE_FEATURE_HTTPD_PROXY
1744static Htaccess_Proxy *find_proxy_entry(const char *url)
1745{
1746 Htaccess_Proxy *p;
1747 for (p = proxy; p; p = p->next) {
1748 if (strncmp(url, p->url_from, strlen(p->url_from)) == 0)
1749 return p;
1750 }
1751 return NULL;
1752}
1753#endif
1754
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001755/*
1756 * Handle timeouts
1757 */
Denis Vlasenko2ca84f62009-02-05 12:38:21 +00001758static void send_REQUEST_TIMEOUT_and_exit(int sig) NORETURN;
1759static void send_REQUEST_TIMEOUT_and_exit(int sig UNUSED_PARAM)
Eric Andersen07f2fea2004-10-08 08:03:29 +00001760{
Denis Vlasenkoe45af732007-08-17 19:19:15 +00001761 send_headers_and_exit(HTTP_REQUEST_TIMEOUT);
Eric Andersen07f2fea2004-10-08 08:03:29 +00001762}
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001763
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00001764/*
1765 * Handle an incoming http request and exit.
1766 */
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00001767static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr) NORETURN;
Denis Vlasenko367960b2007-08-18 14:20:21 +00001768static void handle_incoming_and_exit(const len_and_sockaddr *fromAddr)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001769{
Denis Vlasenko073214f2007-08-17 19:20:07 +00001770 static const char request_GET[] ALIGN1 = "GET";
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001771 struct stat sb;
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001772 char *urlcopy;
1773 char *urlp;
1774 char *tptr;
Denis Vlasenko55a99402006-09-30 20:41:44 +00001775#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001776 static const char request_HEAD[] ALIGN1 = "HEAD";
Denis Vlasenko073214f2007-08-17 19:20:07 +00001777 const char *prequest;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001778 char *cookie = NULL;
1779 char *content_type = NULL;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001780 unsigned long length = 0;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001781#elif ENABLE_FEATURE_HTTPD_PROXY
1782#define prequest request_GET
1783 unsigned long length = 0;
1784#endif
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001785#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
1786 smallint authorized = -1;
1787#endif
1788 smallint ip_allowed;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001789 char http_major_version;
1790#if ENABLE_FEATURE_HTTPD_PROXY
1791 char http_minor_version;
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001792 char *header_buf = header_buf; /* for gcc */
1793 char *header_ptr = header_ptr;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001794 Htaccess_Proxy *proxy_entry;
Glenn L McGrath58c708a2003-01-05 04:01:56 +00001795#endif
Glenn L McGrath06e95652003-02-09 06:51:14 +00001796
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001797 /* Allocation of iobuf is postponed until now
1798 * (IOW, server process doesn't need to waste 8k) */
Denis Vlasenko921799d2007-08-19 19:28:09 +00001799 iobuf = xmalloc(IOBUF_SIZE);
Denis Vlasenkod6cd9d72007-08-18 14:22:09 +00001800
Denis Vlasenko367960b2007-08-18 14:20:21 +00001801 rmt_ip = 0;
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00001802 if (fromAddr->u.sa.sa_family == AF_INET) {
1803 rmt_ip = ntohl(fromAddr->u.sin.sin_addr.s_addr);
Denis Vlasenko367960b2007-08-18 14:20:21 +00001804 }
Denis Vlasenko35465a32007-09-25 11:58:33 +00001805#if ENABLE_FEATURE_IPV6
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00001806 if (fromAddr->u.sa.sa_family == AF_INET6
1807 && fromAddr->u.sin6.sin6_addr.s6_addr32[0] == 0
1808 && fromAddr->u.sin6.sin6_addr.s6_addr32[1] == 0
1809 && ntohl(fromAddr->u.sin6.sin6_addr.s6_addr32[2]) == 0xffff)
1810 rmt_ip = ntohl(fromAddr->u.sin6.sin6_addr.s6_addr32[3]);
Denis Vlasenko35465a32007-09-25 11:58:33 +00001811#endif
Denis Vlasenko367960b2007-08-18 14:20:21 +00001812 if (ENABLE_FEATURE_HTTPD_CGI || DEBUG || verbose) {
Denis Vlasenkofaf334a2008-05-18 15:14:36 +00001813 /* NB: can be NULL (user runs httpd -i by hand?) */
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00001814 rmt_ip_str = xmalloc_sockaddr2dotted(&fromAddr->u.sa);
Denis Vlasenko367960b2007-08-18 14:20:21 +00001815 }
1816 if (verbose) {
1817 /* this trick makes -v logging much simpler */
Denis Vlasenkofaf334a2008-05-18 15:14:36 +00001818 if (rmt_ip_str)
1819 applet_name = rmt_ip_str;
Denis Vlasenko367960b2007-08-18 14:20:21 +00001820 if (verbose > 2)
1821 bb_error_msg("connected");
1822 }
1823
Denis Vlasenko2ca84f62009-02-05 12:38:21 +00001824 /* Install timeout handler. get_line() needs it. */
1825 signal(SIGALRM, send_REQUEST_TIMEOUT_and_exit);
Eric Andersen07f2fea2004-10-08 08:03:29 +00001826
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001827 if (!get_line()) /* EOF or error or empty line */
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001828 send_headers_and_exit(HTTP_BAD_REQUEST);
Glenn L McGrath06e95652003-02-09 06:51:14 +00001829
Denis Vlasenko073214f2007-08-17 19:20:07 +00001830 /* Determine type of request (GET/POST) */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001831 urlp = strpbrk(iobuf, " \t");
1832 if (urlp == NULL)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001833 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001834 *urlp++ = '\0';
Denis Vlasenko55a99402006-09-30 20:41:44 +00001835#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko073214f2007-08-17 19:20:07 +00001836 prequest = request_GET;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001837 if (strcasecmp(iobuf, prequest) != 0) {
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001838 prequest = request_HEAD;
1839 if (strcasecmp(iobuf, prequest) != 0) {
1840 prequest = "POST";
1841 if (strcasecmp(iobuf, prequest) != 0)
1842 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
1843 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001844 }
1845#else
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001846 if (strcasecmp(iobuf, request_GET) != 0)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001847 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001848#endif
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001849 urlp = skip_whitespace(urlp);
1850 if (urlp[0] != '/')
1851 send_headers_and_exit(HTTP_BAD_REQUEST);
1852
1853 /* Find end of URL and parse HTTP version, if any */
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001854 http_major_version = '0';
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001855 IF_FEATURE_HTTPD_PROXY(http_minor_version = '0';)
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001856 tptr = strchrnul(urlp, ' ');
1857 /* Is it " HTTP/"? */
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001858 if (tptr[0] && strncmp(tptr + 1, HTTP_200, 5) == 0) {
1859 http_major_version = tptr[6];
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00001860 IF_FEATURE_HTTPD_PROXY(http_minor_version = tptr[8];)
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001861 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001862 *tptr = '\0';
Glenn L McGrath06e95652003-02-09 06:51:14 +00001863
Denis Vlasenko073214f2007-08-17 19:20:07 +00001864 /* Copy URL from after "GET "/"POST " to stack-allocated char[] */
Denis Vlasenkofcd878e2007-12-29 02:16:23 +00001865 urlcopy = alloca((tptr - urlp) + 2 + strlen(index_page));
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001866 /*if (urlcopy == NULL)
1867 * send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);*/
1868 strcpy(urlcopy, urlp);
1869 /* NB: urlcopy ptr is never changed after this */
Denis Vlasenko073214f2007-08-17 19:20:07 +00001870
1871 /* Extract url args if present */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001872 g_query = NULL;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001873 tptr = strchr(urlcopy, '?');
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001874 if (tptr) {
1875 *tptr++ = '\0';
1876 g_query = tptr;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001877 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001878
Denis Vlasenko073214f2007-08-17 19:20:07 +00001879 /* Decode URL escape sequences */
Denys Vlasenkodd1061b2011-09-11 21:04:02 +02001880 tptr = percent_decode_in_place(urlcopy, /*strict:*/ 1);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001881 if (tptr == NULL)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001882 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001883 if (tptr == urlcopy + 1) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001884 /* '/' or NUL is encoded */
1885 send_headers_and_exit(HTTP_NOT_FOUND);
1886 }
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001887
Denis Vlasenko073214f2007-08-17 19:20:07 +00001888 /* Canonicalize path */
1889 /* Algorithm stolen from libbb bb_simplify_path(),
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001890 * but don't strdup, retain trailing slash, protect root */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001891 urlp = tptr = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001892 do {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001893 if (*urlp == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001894 /* skip duplicate (or initial) slash */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001895 if (*tptr == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001896 continue;
1897 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001898 if (*tptr == '.') {
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001899 /* skip extra "/./" */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001900 if (tptr[1] == '/' || !tptr[1]) {
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001901 continue;
Denis Vlasenko0bb993f2006-11-21 00:06:28 +00001902 }
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001903 /* "..": be careful */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001904 if (tptr[1] == '.' && (tptr[2] == '/' || !tptr[2])) {
1905 ++tptr;
1906 if (urlp == urlcopy) /* protect root */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001907 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001908 while (*--urlp != '/') /* omit previous dir */;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001909 continue;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001910 }
1911 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001912 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001913 *++urlp = *tptr;
1914 } while (*++tptr);
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001915 *++urlp = '\0'; /* terminate after last character */
Glenn L McGrath06e95652003-02-09 06:51:14 +00001916
Denis Vlasenko073214f2007-08-17 19:20:07 +00001917 /* If URL is a directory, add '/' */
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00001918 if (urlp[-1] != '/') {
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001919 if (is_directory(urlcopy + 1, 1, NULL)) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001920 found_moved_temporarily = urlcopy;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001921 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001922 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00001923
Denis Vlasenko073214f2007-08-17 19:20:07 +00001924 /* Log it */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001925 if (verbose > 1)
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001926 bb_error_msg("url:%s", urlcopy);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001927
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001928 tptr = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001929 ip_allowed = checkPermIP();
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001930 while (ip_allowed && (tptr = strchr(tptr + 1, '/')) != NULL) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001931 /* have path1/path2 */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001932 *tptr = '\0';
Denys Vlasenko33d8d082009-09-10 01:46:02 +02001933 if (is_directory(urlcopy + 1, 1, NULL)) {
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00001934 /* may have subdir config */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001935 parse_conf(urlcopy + 1, SUBDIR_PARSE);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001936 ip_allowed = checkPermIP();
1937 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001938 *tptr = '/';
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001939 }
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001940
1941#if ENABLE_FEATURE_HTTPD_PROXY
1942 proxy_entry = find_proxy_entry(urlcopy);
1943 if (proxy_entry)
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001944 header_buf = header_ptr = xmalloc(IOBUF_SIZE);
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001945#endif
1946
1947 if (http_major_version >= '0') {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001948 /* Request was with "... HTTP/nXXX", and n >= 0 */
Denis Vlasenko073214f2007-08-17 19:20:07 +00001949
Denys Vlasenko535ce1d2010-07-25 03:20:25 +02001950 /* Read until blank line */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001951 while (1) {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001952 if (!get_line())
1953 break; /* EOF or error or empty line */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001954 if (DEBUG)
1955 bb_error_msg("header: '%s'", iobuf);
Denis Vlasenko073214f2007-08-17 19:20:07 +00001956
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001957#if ENABLE_FEATURE_HTTPD_PROXY
1958 /* We need 2 more bytes for yet another "\r\n" -
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001959 * see near fdprintf(proxy_fd...) further below */
1960 if (proxy_entry && (header_ptr - header_buf) < IOBUF_SIZE - 2) {
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001961 int len = strlen(iobuf);
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00001962 if (len > IOBUF_SIZE - (header_ptr - header_buf) - 4)
1963 len = IOBUF_SIZE - (header_ptr - header_buf) - 4;
1964 memcpy(header_ptr, iobuf, len);
1965 header_ptr += len;
1966 header_ptr[0] = '\r';
1967 header_ptr[1] = '\n';
1968 header_ptr += 2;
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001969 }
1970#endif
1971
1972#if ENABLE_FEATURE_HTTPD_CGI || ENABLE_FEATURE_HTTPD_PROXY
1973 /* Try and do our best to parse more lines */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001974 if ((STRNCASECMP(iobuf, "Content-length:") == 0)) {
1975 /* extra read only for POST */
Denis Vlasenko85c24712008-03-17 09:04:04 +00001976 if (prequest != request_GET
Denys Vlasenko535ce1d2010-07-25 03:20:25 +02001977# if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko85c24712008-03-17 09:04:04 +00001978 && prequest != request_HEAD
Denys Vlasenko535ce1d2010-07-25 03:20:25 +02001979# endif
Denis Vlasenko85c24712008-03-17 09:04:04 +00001980 ) {
Denis Vlasenko9c8c0382008-03-17 12:58:19 +00001981 tptr = skip_whitespace(iobuf + sizeof("Content-length:") - 1);
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00001982 if (!tptr[0])
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001983 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001984 /* not using strtoul: it ignores leading minus! */
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001985 length = bb_strtou(tptr, NULL, 10);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001986 /* length is "ulong", but we need to pass it to int later */
Denis Vlasenko2f518b02008-02-21 00:12:07 +00001987 if (errno || length > INT_MAX)
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00001988 send_headers_and_exit(HTTP_BAD_REQUEST);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00001989 }
Denis Vlasenkof74194e2007-10-18 12:54:39 +00001990 }
1991#endif
1992#if ENABLE_FEATURE_HTTPD_CGI
1993 else if (STRNCASECMP(iobuf, "Cookie:") == 0) {
Denis Vlasenkoc4523c22008-03-28 02:24:59 +00001994 cookie = xstrdup(skip_whitespace(iobuf + sizeof("Cookie:")-1));
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001995 } else if (STRNCASECMP(iobuf, "Content-Type:") == 0) {
Denis Vlasenkoc4523c22008-03-28 02:24:59 +00001996 content_type = xstrdup(skip_whitespace(iobuf + sizeof("Content-Type:")-1));
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001997 } else if (STRNCASECMP(iobuf, "Referer:") == 0) {
Denis Vlasenkoc4523c22008-03-28 02:24:59 +00001998 referer = xstrdup(skip_whitespace(iobuf + sizeof("Referer:")-1));
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00001999 } else if (STRNCASECMP(iobuf, "User-Agent:") == 0) {
Denis Vlasenkoc4523c22008-03-28 02:24:59 +00002000 user_agent = xstrdup(skip_whitespace(iobuf + sizeof("User-Agent:")-1));
Denis Vlasenko9d1d4c02008-11-22 20:29:35 +00002001 } else if (STRNCASECMP(iobuf, "Host:") == 0) {
2002 host = xstrdup(skip_whitespace(iobuf + sizeof("Host:")-1));
Bernhard Reutner-Fischerb4249302008-09-01 15:30:49 +00002003 } else if (STRNCASECMP(iobuf, "Accept:") == 0) {
2004 http_accept = xstrdup(skip_whitespace(iobuf + sizeof("Accept:")-1));
2005 } else if (STRNCASECMP(iobuf, "Accept-Language:") == 0) {
2006 http_accept_language = xstrdup(skip_whitespace(iobuf + sizeof("Accept-Language:")-1));
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002007 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002008#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00002009#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002010 if (STRNCASECMP(iobuf, "Authorization:") == 0) {
2011 /* We only allow Basic credentials.
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00002012 * It shows up as "Authorization: Basic <user>:<passwd>" where
2013 * "<user>:<passwd>" is base64 encoded.
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002014 */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002015 tptr = skip_whitespace(iobuf + sizeof("Authorization:")-1);
2016 if (STRNCASECMP(tptr, "Basic") != 0)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002017 continue;
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002018 tptr += sizeof("Basic")-1;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002019 /* decodeBase64() skips whitespace itself */
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002020 decodeBase64(tptr);
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00002021 authorized = check_user_passwd(urlcopy, tptr);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002022 }
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00002023#endif
Denis Vlasenkof4310172007-09-21 22:35:18 +00002024#if ENABLE_FEATURE_HTTPD_RANGES
2025 if (STRNCASECMP(iobuf, "Range:") == 0) {
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002026 /* We know only bytes=NNN-[MMM] */
Denis Vlasenkof4310172007-09-21 22:35:18 +00002027 char *s = skip_whitespace(iobuf + sizeof("Range:")-1);
2028 if (strncmp(s, "bytes=", 6) == 0) {
2029 s += sizeof("bytes=")-1;
2030 range_start = BB_STRTOOFF(s, &s, 10);
2031 if (s[0] != '-' || range_start < 0) {
2032 range_start = 0;
2033 } else if (s[1]) {
2034 range_end = BB_STRTOOFF(s+1, NULL, 10);
2035 if (errno || range_end < range_start)
2036 range_start = 0;
2037 }
2038 }
2039 }
2040#endif
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02002041#if ENABLE_FEATURE_HTTPD_GZIP
2042 if (STRNCASECMP(iobuf, "Accept-Encoding:") == 0) {
Peter Korsgaarde5dbd562010-07-26 02:08:35 +02002043 /* Note: we do not support "gzip;q=0"
2044 * method of _disabling_ gzip
2045 * delivery. No one uses that, though */
2046 const char *s = strstr(iobuf, "gzip");
2047 if (s) {
2048 // want more thorough checks?
2049 //if (s[-1] == ' '
2050 // || s[-1] == ','
2051 // || s[-1] == ':'
2052 //) {
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02002053 content_gzip = 1;
Peter Korsgaarde5dbd562010-07-26 02:08:35 +02002054 //}
Peter Korsgaard7a2ba322010-07-25 03:20:53 +02002055 }
2056 }
2057#endif
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002058 } /* while extra header reading */
2059 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002060
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002061 /* We are done reading headers, disable peer timeout */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002062 alarm(0);
2063
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +00002064 if (strcmp(bb_basename(urlcopy), HTTPD_CONF) == 0 || !ip_allowed) {
2065 /* protect listing [/path]/httpd.conf or IP deny */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002066 send_headers_and_exit(HTTP_FORBIDDEN);
2067 }
2068
2069#if ENABLE_FEATURE_HTTPD_BASIC_AUTH
Denis Vlasenko0eb406c2008-06-13 09:53:06 +00002070 /* Case: no "Authorization:" was seen, but page does require passwd.
2071 * Check that with dummy user:pass */
Denis Vlasenko7504f2f2008-06-13 13:20:38 +00002072 if (authorized < 0)
2073 authorized = check_user_passwd(urlcopy, ":");
2074 if (!authorized)
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002075 send_headers_and_exit(HTTP_UNAUTHORIZED);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002076#endif
2077
2078 if (found_moved_temporarily) {
2079 send_headers_and_exit(HTTP_MOVED_TEMPORARILY);
2080 }
2081
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002082#if ENABLE_FEATURE_HTTPD_PROXY
2083 if (proxy_entry != NULL) {
2084 int proxy_fd;
2085 len_and_sockaddr *lsa;
2086
2087 proxy_fd = socket(AF_INET, SOCK_STREAM, 0);
2088 if (proxy_fd < 0)
2089 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
2090 lsa = host2sockaddr(proxy_entry->host_port, 80);
2091 if (lsa == NULL)
2092 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00002093 if (connect(proxy_fd, &lsa->u.sa, lsa->len) < 0)
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002094 send_headers_and_exit(HTTP_INTERNAL_SERVER_ERROR);
2095 fdprintf(proxy_fd, "%s %s%s%s%s HTTP/%c.%c\r\n",
2096 prequest, /* GET or POST */
2097 proxy_entry->url_to, /* url part 1 */
2098 urlcopy + strlen(proxy_entry->url_from), /* url part 2 */
2099 (g_query ? "?" : ""), /* "?" (maybe) */
2100 (g_query ? g_query : ""), /* query string (maybe) */
2101 http_major_version, http_minor_version);
Denis Vlasenko34cd7af2007-10-18 13:01:22 +00002102 header_ptr[0] = '\r';
2103 header_ptr[1] = '\n';
2104 header_ptr += 2;
2105 write(proxy_fd, header_buf, header_ptr - header_buf);
2106 free(header_buf); /* on the order of 8k, free it */
Denys Vlasenko8fc9e6a2010-04-02 10:40:58 +02002107 cgi_io_loop_and_exit(proxy_fd, proxy_fd, length);
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002108 }
2109#endif
2110
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002111 tptr = urlcopy + 1; /* skip first '/' */
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002112
2113#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002114 if (strncmp(tptr, "cgi-bin/", 8) == 0) {
2115 if (tptr[8] == '\0') {
Denis Vlasenko073214f2007-08-17 19:20:07 +00002116 /* protect listing "cgi-bin/" */
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002117 send_headers_and_exit(HTTP_FORBIDDEN);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002118 }
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002119 send_cgi_and_exit(urlcopy, prequest, length, cookie, content_type);
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002120 }
Denys Vlasenko108b8c52009-09-08 21:17:49 +02002121#endif
2122
2123 if (urlp[-1] == '/')
2124 strcpy(urlp, index_page);
2125 if (stat(tptr, &sb) == 0) {
Denis Vlasenko1ccd96f2007-03-05 19:24:33 +00002126#if ENABLE_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002127 char *suffix = strrchr(tptr, '.');
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002128 if (suffix) {
2129 Htaccess *cur;
2130 for (cur = script_i; cur; cur = cur->next) {
2131 if (strcmp(cur->before_colon + 1, suffix) == 0) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002132 send_cgi_and_exit(urlcopy, prequest, length, cookie, content_type);
Denis Vlasenko1ccd96f2007-03-05 19:24:33 +00002133 }
2134 }
2135 }
2136#endif
Denis Vlasenkof4310172007-09-21 22:35:18 +00002137 file_size = sb.st_size;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002138 last_mod = sb.st_mtime;
2139 }
Denis Vlasenko5d148e22006-11-21 00:12:09 +00002140#if ENABLE_FEATURE_HTTPD_CGI
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002141 else if (urlp[-1] == '/') {
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002142 /* It's a dir URL and there is no index.html
2143 * Try cgi-bin/index.cgi */
2144 if (access("/cgi-bin/index.cgi"+1, X_OK) == 0) {
Denis Vlasenko52e15dc2007-08-19 18:53:43 +00002145 urlp[0] = '\0';
2146 g_query = urlcopy;
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002147 send_cgi_and_exit("/cgi-bin/index.cgi", prequest, length, cookie, content_type);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002148 }
Denis Vlasenko91adf7d2007-08-17 19:19:42 +00002149 }
Denys Vlasenko108b8c52009-09-08 21:17:49 +02002150 /* else fall through to send_file, it errors out if open fails: */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002151
Denys Vlasenko108b8c52009-09-08 21:17:49 +02002152 if (prequest != request_GET && prequest != request_HEAD) {
2153 /* POST for files does not make sense */
2154 send_headers_and_exit(HTTP_NOT_IMPLEMENTED);
2155 }
Denis Vlasenko2f518b02008-02-21 00:12:07 +00002156 send_file_and_exit(tptr,
Denis Vlasenko85c24712008-03-17 09:04:04 +00002157 (prequest != request_HEAD ? SEND_HEADERS_AND_BODY : SEND_HEADERS)
Denis Vlasenko85c24712008-03-17 09:04:04 +00002158 );
Denys Vlasenko108b8c52009-09-08 21:17:49 +02002159#else
2160 send_file_and_exit(tptr, SEND_HEADERS_AND_BODY);
2161#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002162}
2163
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002164/*
2165 * The main http server function.
Denis Vlasenko367960b2007-08-18 14:20:21 +00002166 * Given a socket, listen for new connections and farm out
2167 * the processing as a [v]forked process.
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002168 * Never returns.
2169 */
Denis Vlasenko367960b2007-08-18 14:20:21 +00002170#if BB_MMU
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00002171static void mini_httpd(int server_socket) NORETURN;
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002172static void mini_httpd(int server_socket)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002173{
Denis Vlasenko073214f2007-08-17 19:20:07 +00002174 /* NB: it's best to not use xfuncs in this loop before fork().
2175 * Otherwise server may die on transient errors (temporary
2176 * out-of-memory condition, etc), which is Bad(tm).
2177 * Try to do any dangerous calls after fork.
2178 */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002179 while (1) {
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002180 int n;
2181 len_and_sockaddr fromAddr;
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00002182
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002183 /* Wait for connections... */
2184 fromAddr.len = LSA_SIZEOF_SA;
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00002185 n = accept(server_socket, &fromAddr.u.sa, &fromAddr.len);
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002186 if (n < 0)
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00002187 continue;
Denys Vlasenko535ce1d2010-07-25 03:20:25 +02002188
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002189 /* set the KEEPALIVE option to cull dead connections */
2190 setsockopt(n, SOL_SOCKET, SO_KEEPALIVE, &const_int_1, sizeof(const_int_1));
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002191
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002192 if (fork() == 0) {
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002193 /* child */
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002194 /* Do not reload config on HUP */
Denis Vlasenko6c5e5a02006-11-10 23:28:57 +00002195 signal(SIGHUP, SIG_IGN);
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002196 close(server_socket);
2197 xmove_fd(n, 0);
2198 xdup2(0, 1);
2199
Denis Vlasenko367960b2007-08-18 14:20:21 +00002200 handle_incoming_and_exit(&fromAddr);
2201 }
2202 /* parent, or fork failed */
2203 close(n);
2204 } /* while (1) */
2205 /* never reached */
2206}
2207#else
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00002208static void mini_httpd_nommu(int server_socket, int argc, char **argv) NORETURN;
Denis Vlasenko367960b2007-08-18 14:20:21 +00002209static void mini_httpd_nommu(int server_socket, int argc, char **argv)
2210{
2211 char *argv_copy[argc + 2];
2212
2213 argv_copy[0] = argv[0];
2214 argv_copy[1] = (char*)"-i";
2215 memcpy(&argv_copy[2], &argv[1], argc * sizeof(argv[0]));
2216
2217 /* NB: it's best to not use xfuncs in this loop before vfork().
2218 * Otherwise server may die on transient errors (temporary
2219 * out-of-memory condition, etc), which is Bad(tm).
2220 * Try to do any dangerous calls after fork.
2221 */
2222 while (1) {
2223 int n;
2224 len_and_sockaddr fromAddr;
Denis Vlasenko3f5fdc72007-10-14 04:55:59 +00002225
Denis Vlasenko367960b2007-08-18 14:20:21 +00002226 /* Wait for connections... */
2227 fromAddr.len = LSA_SIZEOF_SA;
Denis Vlasenko671ca332008-02-19 14:13:20 +00002228 n = accept(server_socket, &fromAddr.u.sa, &fromAddr.len);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002229 if (n < 0)
2230 continue;
Denys Vlasenko535ce1d2010-07-25 03:20:25 +02002231
Denis Vlasenko367960b2007-08-18 14:20:21 +00002232 /* set the KEEPALIVE option to cull dead connections */
2233 setsockopt(n, SOL_SOCKET, SO_KEEPALIVE, &const_int_1, sizeof(const_int_1));
2234
2235 if (vfork() == 0) {
2236 /* child */
Denis Vlasenko367960b2007-08-18 14:20:21 +00002237 /* Do not reload config on HUP */
2238 signal(SIGHUP, SIG_IGN);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002239 close(server_socket);
2240 xmove_fd(n, 0);
2241 xdup2(0, 1);
2242
2243 /* Run a copy of ourself in inetd mode */
2244 re_exec(argv_copy);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002245 }
Denis Vlasenko921799d2007-08-19 19:28:09 +00002246 /* parent, or vfork failed */
Denis Vlasenko073214f2007-08-17 19:20:07 +00002247 close(n);
Denis Vlasenko04291bc2006-11-21 10:15:25 +00002248 } /* while (1) */
Denis Vlasenko241b1562007-08-17 19:18:47 +00002249 /* never reached */
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002250}
Denis Vlasenko56258b62007-06-23 23:14:02 +00002251#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002252
Denis Vlasenko367960b2007-08-18 14:20:21 +00002253/*
2254 * Process a HTTP connection on stdin/out.
2255 * Never returns.
2256 */
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00002257static void mini_httpd_inetd(void) NORETURN;
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002258static void mini_httpd_inetd(void)
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002259{
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002260 len_and_sockaddr fromAddr;
Glenn L McGrath06e95652003-02-09 06:51:14 +00002261
Denis Vlasenkofaf334a2008-05-18 15:14:36 +00002262 memset(&fromAddr, 0, sizeof(fromAddr));
Denis Vlasenkoe45af732007-08-17 19:19:15 +00002263 fromAddr.len = LSA_SIZEOF_SA;
Denis Vlasenkofaf334a2008-05-18 15:14:36 +00002264 /* NB: can fail if user runs it by hand and types in http cmds */
Bernhard Reutner-Fischer8c69afd2008-01-29 10:33:34 +00002265 getpeername(0, &fromAddr.u.sa, &fromAddr.len);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002266 handle_incoming_and_exit(&fromAddr);
Glenn L McGrath06e95652003-02-09 06:51:14 +00002267}
Glenn L McGrath06e95652003-02-09 06:51:14 +00002268
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00002269static void sighup_handler(int sig UNUSED_PARAM)
Glenn L McGrath06e95652003-02-09 06:51:14 +00002270{
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +00002271 parse_conf(DEFAULT_PATH_HTTPD_CONF, SIGNALED_PARSE);
Glenn L McGrath06e95652003-02-09 06:51:14 +00002272}
Glenn L McGrath06e95652003-02-09 06:51:14 +00002273
Denis Vlasenko9f609292006-11-05 19:47:33 +00002274enum {
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002275 c_opt_config_file = 0,
2276 d_opt_decode_url,
2277 h_opt_home_httpd,
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00002278 IF_FEATURE_HTTPD_ENCODE_URL_STR(e_opt_encode_url,)
2279 IF_FEATURE_HTTPD_BASIC_AUTH( r_opt_realm ,)
2280 IF_FEATURE_HTTPD_AUTH_MD5( m_opt_md5 ,)
2281 IF_FEATURE_HTTPD_SETUID( u_opt_setuid ,)
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002282 p_opt_port ,
2283 p_opt_inetd ,
2284 p_opt_foreground,
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002285 p_opt_verbose ,
Denis Vlasenko9f609292006-11-05 19:47:33 +00002286 OPT_CONFIG_FILE = 1 << c_opt_config_file,
2287 OPT_DECODE_URL = 1 << d_opt_decode_url,
2288 OPT_HOME_HTTPD = 1 << h_opt_home_httpd,
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00002289 OPT_ENCODE_URL = IF_FEATURE_HTTPD_ENCODE_URL_STR((1 << e_opt_encode_url)) + 0,
2290 OPT_REALM = IF_FEATURE_HTTPD_BASIC_AUTH( (1 << r_opt_realm )) + 0,
2291 OPT_MD5 = IF_FEATURE_HTTPD_AUTH_MD5( (1 << m_opt_md5 )) + 0,
2292 OPT_SETUID = IF_FEATURE_HTTPD_SETUID( (1 << u_opt_setuid )) + 0,
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002293 OPT_PORT = 1 << p_opt_port,
2294 OPT_INETD = 1 << p_opt_inetd,
2295 OPT_FOREGROUND = 1 << p_opt_foreground,
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002296 OPT_VERBOSE = 1 << p_opt_verbose,
"Vladimir N. Oleynik"9a515402006-02-15 13:27:18 +00002297};
Eric Andersena3bb3e62003-06-26 09:05:32 +00002298
Eric Andersena3bb3e62003-06-26 09:05:32 +00002299
Denis Vlasenko9b49a5e2007-10-11 10:05:36 +00002300int httpd_main(int argc, char **argv) MAIN_EXTERNALLY_VISIBLE;
Denis Vlasenkoa60f84e2008-07-05 09:18:54 +00002301int httpd_main(int argc UNUSED_PARAM, char **argv)
Glenn L McGrath06e95652003-02-09 06:51:14 +00002302{
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002303 int server_socket = server_socket; /* for gcc */
Denis Vlasenko67b23e62006-10-03 21:00:06 +00002304 unsigned opt;
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002305 char *url_for_decode;
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00002306 IF_FEATURE_HTTPD_ENCODE_URL_STR(const char *url_for_encode;)
2307 IF_FEATURE_HTTPD_SETUID(const char *s_ugid = NULL;)
2308 IF_FEATURE_HTTPD_SETUID(struct bb_uidgid_t ugid;)
2309 IF_FEATURE_HTTPD_AUTH_MD5(const char *pass;)
Eric Andersen35e643b2003-07-28 07:40:39 +00002310
Denis Vlasenko073214f2007-08-17 19:20:07 +00002311 INIT_G();
2312
Denis Vlasenkofcdb00f2006-11-21 00:09:37 +00002313#if ENABLE_LOCALE_SUPPORT
2314 /* Undo busybox.c: we want to speak English in http (dates etc) */
2315 setlocale(LC_TIME, "C");
2316#endif
2317
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002318 home_httpd = xrealloc_getcwd_or_warn(NULL);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002319 /* -v counts, -i implies -f */
2320 opt_complementary = "vv:if";
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002321 /* We do not "absolutize" path given by -h (home) opt.
Denis Vlasenko6bf05cf2008-05-07 12:18:48 +00002322 * If user gives relative path in -h,
2323 * $SCRIPT_FILENAME will not be set. */
Denis Vlasenkofe7cd642007-08-18 15:32:12 +00002324 opt = getopt32(argv, "c:d:h:"
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00002325 IF_FEATURE_HTTPD_ENCODE_URL_STR("e:")
2326 IF_FEATURE_HTTPD_BASIC_AUTH("r:")
2327 IF_FEATURE_HTTPD_AUTH_MD5("m:")
2328 IF_FEATURE_HTTPD_SETUID("u:")
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002329 "p:ifv",
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +00002330 &opt_c_configFile, &url_for_decode, &home_httpd
Denis Vlasenko5e34ff22009-04-21 11:09:40 +00002331 IF_FEATURE_HTTPD_ENCODE_URL_STR(, &url_for_encode)
2332 IF_FEATURE_HTTPD_BASIC_AUTH(, &g_realm)
2333 IF_FEATURE_HTTPD_AUTH_MD5(, &pass)
2334 IF_FEATURE_HTTPD_SETUID(, &s_ugid)
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002335 , &bind_addr_or_port
Denis Vlasenko384b1d12007-08-14 16:55:01 +00002336 , &verbose
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002337 );
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002338 if (opt & OPT_DECODE_URL) {
Denys Vlasenkodd1061b2011-09-11 21:04:02 +02002339 fputs(percent_decode_in_place(url_for_decode, /*strict:*/ 0), stdout);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002340 return 0;
2341 }
Denis Vlasenko55a99402006-09-30 20:41:44 +00002342#if ENABLE_FEATURE_HTTPD_ENCODE_URL_STR
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002343 if (opt & OPT_ENCODE_URL) {
Denis Vlasenko367960b2007-08-18 14:20:21 +00002344 fputs(encodeString(url_for_encode), stdout);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002345 return 0;
2346 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002347#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00002348#if ENABLE_FEATURE_HTTPD_AUTH_MD5
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002349 if (opt & OPT_MD5) {
Denys Vlasenkodbc6a7a2009-12-16 02:28:50 +01002350 char salt[sizeof("$1$XXXXXXXX")];
2351 salt[0] = '$';
2352 salt[1] = '1';
2353 salt[2] = '$';
Denys Vlasenko12a43272011-05-13 03:19:01 +02002354 crypt_make_salt(salt + 3, 4);
Denys Vlasenkodbc6a7a2009-12-16 02:28:50 +01002355 puts(pw_encrypt(pass, salt, 1));
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002356 return 0;
Glenn L McGrath06e95652003-02-09 06:51:14 +00002357 }
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002358#endif
Denis Vlasenko55a99402006-09-30 20:41:44 +00002359#if ENABLE_FEATURE_HTTPD_SETUID
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002360 if (opt & OPT_SETUID) {
Bernhard Reutner-Fischerd73cbd32008-07-21 14:41:33 +00002361 xget_uidgid(&ugid, s_ugid);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002362 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002363#endif
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002364
Denis Vlasenko367960b2007-08-18 14:20:21 +00002365#if !BB_MMU
2366 if (!(opt & OPT_FOREGROUND)) {
2367 bb_daemonize_or_rexec(0, argv); /* don't change current directory */
2368 }
2369#endif
2370
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002371 xchdir(home_httpd);
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002372 if (!(opt & OPT_INETD)) {
Denis Vlasenko6536a9b2007-01-12 10:35:23 +00002373 signal(SIGCHLD, SIG_IGN);
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002374 server_socket = openServer();
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002375#if ENABLE_FEATURE_HTTPD_SETUID
2376 /* drop privileges */
2377 if (opt & OPT_SETUID) {
2378 if (ugid.gid != (gid_t)-1) {
2379 if (setgroups(1, &ugid.gid) == -1)
Denis Vlasenko8e858e22007-03-07 09:35:43 +00002380 bb_perror_msg_and_die("setgroups");
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002381 xsetgid(ugid.gid);
2382 }
2383 xsetuid(ugid.uid);
Denis Vlasenkode59c0f2006-10-05 22:50:22 +00002384 }
Glenn L McGrath58c708a2003-01-05 04:01:56 +00002385#endif
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002386 }
Glenn L McGrath06e95652003-02-09 06:51:14 +00002387
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00002388#if 0
Denis Vlasenko2535f122007-09-15 13:28:30 +00002389 /* User can do it himself: 'env - PATH="$PATH" httpd'
2390 * We don't do it because we don't want to screw users
2391 * which want to do
Denis Vlasenkof74194e2007-10-18 12:54:39 +00002392 * 'env - VAR1=val1 VAR2=val2 httpd'
Denis Vlasenko2535f122007-09-15 13:28:30 +00002393 * and have VAR1 and VAR2 values visible in their CGIs.
2394 * Besides, it is also smaller. */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002395 {
2396 char *p = getenv("PATH");
Denis Vlasenkoc4523c22008-03-28 02:24:59 +00002397 /* env strings themself are not freed, no need to xstrdup(p): */
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002398 clearenv();
2399 if (p)
Denis Vlasenko77e44d62007-06-09 23:49:05 +00002400 putenv(p - 5);
Denis Vlasenko9611cb12007-08-18 14:18:43 +00002401// if (!(opt & OPT_INETD))
2402// setenv_long("SERVER_PORT", ???);
Denis Vlasenko8b8c75e2006-09-26 10:07:41 +00002403 }
Glenn L McGrathfe538ba2003-09-10 23:35:45 +00002404#endif
2405
Denis Vlasenko1cf4a0e2009-04-22 13:49:16 +00002406 parse_conf(DEFAULT_PATH_HTTPD_CONF, FIRST_PARSE);
Denis Vlasenko1cbfd982009-02-04 23:43:44 +00002407 if (!(opt & OPT_INETD))
2408 signal(SIGHUP, sighup_handler);
Denis Vlasenko367960b2007-08-18 14:20:21 +00002409
Denis Vlasenkofeac3ce2007-08-17 19:20:39 +00002410 xfunc_error_retval = 0;
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002411 if (opt & OPT_INETD)
2412 mini_httpd_inetd();
Denis Vlasenko367960b2007-08-18 14:20:21 +00002413#if BB_MMU
Denis Vlasenko0871bc82006-11-16 16:17:02 +00002414 if (!(opt & OPT_FOREGROUND))
Denis Vlasenko0372f0f2007-08-14 16:50:01 +00002415 bb_daemonize(0); /* don't change current directory */
2416 mini_httpd(server_socket); /* never returns */
Denis Vlasenko56258b62007-06-23 23:14:02 +00002417#else
Denis Vlasenko367960b2007-08-18 14:20:21 +00002418 mini_httpd_nommu(server_socket, argc, argv); /* never returns */
Denis Vlasenko56258b62007-06-23 23:14:02 +00002419#endif
Denis Vlasenko367960b2007-08-18 14:20:21 +00002420 /* return 0; */
Glenn L McGrath06e95652003-02-09 06:51:14 +00002421}