package/uhttpd/src/uhttpd.c

   1 /*
   2  * uhttpd - Tiny single-threaded httpd - Main component
   3  *
   4  *   Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
   5  *
   6  *  Licensed under the Apache License, Version 2.0 (the "License");
   7  *  you may not use this file except in compliance with the License.
   8  *  You may obtain a copy of the License at
   9  *
  10  *      http://www.apache.org/licenses/LICENSE-2.0
  11  *
  12  *  Unless required by applicable law or agreed to in writing, software
  13  *  distributed under the License is distributed on an "AS IS" BASIS,
  14  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15  *  See the License for the specific language governing permissions and
  16  *  limitations under the License.
  17  */
  18
  19 #define _XOPEN_SOURCE 500       /* crypt() */
  20
  21 #include "uhttpd.h"
  22 #include "uhttpd-utils.h"
  23 #include "uhttpd-file.h"
  24
  25 #ifdef HAVE_CGI
  26 #include "uhttpd-cgi.h"
  27 #endif
  28
  29 #ifdef HAVE_LUA
  30 #include "uhttpd-lua.h"
  31 #endif
  32
  33 #ifdef HAVE_TLS
  34 #include "uhttpd-tls.h"
  35 #endif
  36
  37
  38 static int run = 1;
  39
  40 static void uh_sigterm(int sig)
  41 {
  42         run = 0;
  43 }
  44
  45 static void uh_config_parse(struct config *conf)
  46 {
  47         FILE *c;
  48         char line[512];
  49         char *col1 = NULL;
  50         char *col2 = NULL;
  51         char *eol  = NULL;
  52
  53         const char *path = conf->file ? conf->file : "/etc/httpd.conf";
  54
  55
  56         if ((c = fopen(path, "r")) != NULL)
  57         {
  58                 memset(line, 0, sizeof(line));
  59
  60                 while (fgets(line, sizeof(line) - 1, c))
  61                 {
  62                         if ((line[0] == '/') && (strchr(line, ':') != NULL))
  63                         {
  64                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  65                                     !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
  66                                         !(eol = strchr(col2, '\n')) || (*eol++  = 0))
  67                                 {
  68                                         continue;
  69                                 }
  70
  71                                 if (!uh_auth_add(line, col1, col2))
  72                                 {
  73                                         fprintf(stderr,
  74                                                         "Notice: No password set for user %s, ignoring "
  75                                                         "authentication on %s\n", col1, line
  76                                         );
  77                                 }
  78                         }
  79                         else if (!strncmp(line, "I:", 2))
  80                         {
  81                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  82                                     !(eol = strchr(col1, '\n')) || (*eol++  = 0))
  83                                 {
  84                                         continue;
  85                                 }
  86
  87                                 conf->index_file = strdup(col1);
  88                         }
  89                         else if (!strncmp(line, "E404:", 5))
  90                         {
  91                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  92                                     !(eol = strchr(col1, '\n')) || (*eol++  = 0))
  93                                 {
  94                                         continue;
  95                                 }
  96
  97                                 conf->error_handler = strdup(col1);
  98                         }
  99 #ifdef HAVE_CGI
 100                         else if ((line[0] == '*') && (strchr(line, ':') != NULL))
 101                         {
 102                                 if (!(col1 = strchr(line, '*')) || (*col1++ = 0) ||
 103                                     !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
 104                                     !(eol = strchr(col2, '\n')) || (*eol++  = 0))
 105                                 {
 106                                         continue;
 107                                 }
 108
 109                                 if (!uh_interpreter_add(col1, col2))
 110                                 {
 111                                         fprintf(stderr,
 112                                                         "Unable to add interpreter %s for extension %s: "
 113                                                         "Out of memory\n", col2, col1
 114                                         );
 115                                 }
 116                         }
 117 #endif
 118                 }
 119
 120                 fclose(c);
 121         }
 122 }
 123
 124 static void uh_listener_cb(struct uloop_fd *u, unsigned int events);
 125
 126 static int uh_socket_bind(fd_set *serv_fds, int *max_fd,
 127                                                   const char *host, const char *port,
 128                                                   struct addrinfo *hints, int do_tls,
 129                                                   struct config *conf)
 130 {
 131         int sock = -1;
 132         int yes = 1;
 133         int status;
 134         int bound = 0;
 135
 136         int tcp_ka_idl, tcp_ka_int, tcp_ka_cnt;
 137
 138         struct listener *l = NULL;
 139         struct addrinfo *addrs = NULL, *p = NULL;
 140
 141         if ((status = getaddrinfo(host, port, hints, &addrs)) != 0)
 142         {
 143                 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
 144         }
 145
 146         /* try to bind a new socket to each found address */
 147         for (p = addrs; p; p = p->ai_next)
 148         {
 149                 /* get the socket */
 150                 if ((sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1)
 151                 {
 152                         perror("socket()");
 153                         goto error;
 154                 }
 155
 156                 /* "address already in use" */
 157                 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)))
 158                 {
 159                         perror("setsockopt()");
 160                         goto error;
 161                 }
 162
 163                 /* TCP keep-alive */
 164                 if (conf->tcp_keepalive > 0)
 165                 {
 166                         tcp_ka_idl = 1;
 167                         tcp_ka_cnt = 3;
 168                         tcp_ka_int = conf->tcp_keepalive;
 169
 170                         if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
 171                             setsockopt(sock, SOL_TCP, TCP_KEEPIDLE,  &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
 172                             setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
 173                             setsockopt(sock, SOL_TCP, TCP_KEEPCNT,   &tcp_ka_cnt, sizeof(tcp_ka_cnt)))
 174                         {
 175                             fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
 176                                 strerror(errno));
 177                         }
 178                 }
 179
 180                 /* required to get parallel v4 + v6 working */
 181                 if (p->ai_family == AF_INET6)
 182                 {
 183                         if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1)
 184                         {
 185                                 perror("setsockopt()");
 186                                 goto error;
 187                         }
 188                 }
 189
 190                 /* bind */
 191                 if (bind(sock, p->ai_addr, p->ai_addrlen) == -1)
 192                 {
 193                         perror("bind()");
 194                         goto error;
 195                 }
 196
 197                 /* listen */
 198                 if (listen(sock, UH_LIMIT_CLIENTS) == -1)
 199                 {
 200                         perror("listen()");
 201                         goto error;
 202                 }
 203
 204                 /* add listener to global list */
 205                 if (!(l = uh_listener_add(sock, conf)))
 206                 {
 207                         fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
 208                         goto error;
 209                 }
 210
 211 #ifdef HAVE_TLS
 212                 /* init TLS */
 213                 l->tls = do_tls ? conf->tls : NULL;
 214 #endif
 215
 216                 /* add socket to server fd set */
 217                 FD_SET(sock, serv_fds);
 218                 fd_cloexec(sock);
 219                 *max_fd = max(*max_fd, sock);
 220
 221                 l->fd.cb = uh_listener_cb;
 222                 uloop_fd_add(&l->fd, ULOOP_READ);
 223
 224                 bound++;
 225                 continue;
 226
 227                 error:
 228                 if (sock > 0)
 229                         close(sock);
 230         }
 231
 232         freeaddrinfo(addrs);
 233
 234         return bound;
 235 }
 236
 237 static struct http_request * uh_http_header_parse(struct client *cl,
 238                                                                                                   char *buffer, int buflen)
 239 {
 240         char *method  = buffer;
 241         char *path    = NULL;
 242         char *version = NULL;
 243
 244         char *headers = NULL;
 245         char *hdrname = NULL;
 246         char *hdrdata = NULL;
 247
 248         int i;
 249         int hdrcount = 0;
 250
 251         struct http_request *req = &cl->request;
 252
 253
 254         /* terminate initial header line */
 255         if ((headers = strfind(buffer, buflen, "\r\n", 2)) != NULL)
 256         {
 257                 buffer[buflen-1] = 0;
 258
 259                 *headers++ = 0;
 260                 *headers++ = 0;
 261
 262                 /* find request path */
 263                 if ((path = strchr(buffer, ' ')) != NULL)
 264                         *path++ = 0;
 265
 266                 /* find http version */
 267                 if ((path != NULL) && ((version = strchr(path, ' ')) != NULL))
 268                         *version++ = 0;
 269
 270
 271                 /* check method */
 272                 if (strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST"))
 273                 {
 274                         /* invalid method */
 275                         uh_http_response(cl, 405, "Method Not Allowed");
 276                         return NULL;
 277                 }
 278                 else
 279                 {
 280                         switch(method[0])
 281                         {
 282                                 case 'G':
 283                                         req->method = UH_HTTP_MSG_GET;
 284                                         break;
 285
 286                                 case 'H':
 287                                         req->method = UH_HTTP_MSG_HEAD;
 288                                         break;
 289
 290                                 case 'P':
 291                                         req->method = UH_HTTP_MSG_POST;
 292                                         break;
 293                         }
 294                 }
 295
 296                 /* check path */
 297                 if (!path || !strlen(path))
 298                 {
 299                         /* malformed request */
 300                         uh_http_response(cl, 400, "Bad Request");
 301                         return NULL;
 302                 }
 303                 else
 304                 {
 305                         req->url = path;
 306                 }
 307
 308                 /* check version */
 309                 if ((version == NULL) || (strcmp(version, "HTTP/0.9") &&
 310                     strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")))
 311                 {
 312                         /* unsupported version */
 313                         uh_http_response(cl, 400, "Bad Request");
 314                         return NULL;
 315                 }
 316                 else
 317                 {
 318                         req->version = strtof(&version[5], NULL);
 319                 }
 320
 321                 D("SRV: %s %s HTTP/%.1f\n",
 322                   (req->method == UH_HTTP_MSG_POST) ? "POST" :
 323                         (req->method == UH_HTTP_MSG_GET) ? "GET" : "HEAD",
 324                   req->url, req->version);
 325
 326                 /* process header fields */
 327                 for (i = (int)(headers - buffer); i < buflen; i++)
 328                 {
 329                         /* found eol and have name + value, push out header tuple */
 330                         if (hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n'))
 331                         {
 332                                 buffer[i] = 0;
 333
 334                                 /* store */
 335                                 if ((hdrcount + 1) < array_size(req->headers))
 336                                 {
 337                                         D("SRV: HTTP: %s: %s\n", hdrname, hdrdata);
 338
 339                                         req->headers[hdrcount++] = hdrname;
 340                                         req->headers[hdrcount++] = hdrdata;
 341
 342                                         hdrname = hdrdata = NULL;
 343                                 }
 344
 345                                 /* too large */
 346                                 else
 347                                 {
 348                                         D("SRV: HTTP: header too big (too many headers)\n");
 349                                         uh_http_response(cl, 413, "Request Entity Too Large");
 350                                         return NULL;
 351                                 }
 352                         }
 353
 354                         /* have name but no value and found a colon, start of value */
 355                         else if (hdrname && !hdrdata &&
 356                                          ((i+1) < buflen) && (buffer[i] == ':'))
 357                         {
 358                                 buffer[i] = 0;
 359                                 hdrdata = &buffer[i+1];
 360
 361                                 while ((hdrdata + 1) < (buffer + buflen) && *hdrdata == ' ')
 362                                         hdrdata++;
 363                         }
 364
 365                         /* have no name and found [A-Za-z], start of name */
 366                         else if (!hdrname && isalpha(buffer[i]))
 367                         {
 368                                 hdrname = &buffer[i];
 369                         }
 370                 }
 371
 372                 /* valid enough */
 373                 req->redirect_status = 200;
 374                 return req;
 375         }
 376
 377         /* Malformed request */
 378         uh_http_response(cl, 400, "Bad Request");
 379         return NULL;
 380 }
 381
 382
 383 static struct http_request * uh_http_header_recv(struct client *cl)
 384 {
 385         char *bufptr = cl->httpbuf.buf;
 386         char *idxptr = NULL;
 387
 388         ssize_t blen = sizeof(cl->httpbuf.buf)-1;
 389         ssize_t rlen = 0;
 390
 391         memset(bufptr, 0, sizeof(cl->httpbuf.buf));
 392
 393         while (blen > 0)
 394         {
 395                 /* receive data */
 396                 ensure_out(rlen = uh_tcp_recv(cl, bufptr, blen));
 397                 D("SRV: Client(%d) peek(%d) = %d\n", cl->fd.fd, blen, rlen);
 398
 399                 if (rlen <= 0)
 400                 {
 401                         D("SRV: Client(%d) dead [%s]\n", cl->fd.fd, strerror(errno));
 402                         return NULL;
 403                 }
 404
 405                 blen -= rlen;
 406                 bufptr += rlen;
 407
 408                 if ((idxptr = strfind(cl->httpbuf.buf, sizeof(cl->httpbuf.buf),
 409                                                           "\r\n\r\n", 4)))
 410                 {
 411                         /* header read complete ... */
 412                         cl->httpbuf.ptr = idxptr + 4;
 413                         cl->httpbuf.len = bufptr - cl->httpbuf.ptr;
 414
 415                         return uh_http_header_parse(cl, cl->httpbuf.buf,
 416                                                                                 (cl->httpbuf.ptr - cl->httpbuf.buf));
 417                 }
 418         }
 419
 420         /* request entity too large */
 421         D("SRV: HTTP: header too big (buffer exceeded)\n");
 422         uh_http_response(cl, 413, "Request Entity Too Large");
 423
 424 out:
 425         return NULL;
 426 }
 427
 428 #if defined(HAVE_LUA) || defined(HAVE_CGI)
 429 static int uh_path_match(const char *prefix, const char *url)
 430 {
 431         if ((strstr(url, prefix) == url) &&
 432                 ((prefix[strlen(prefix)-1] == '/') ||
 433                  (strlen(url) == strlen(prefix))   ||
 434                  (url[strlen(prefix)] == '/')))
 435         {
 436                 return 1;
 437         }
 438
 439         return 0;
 440 }
 441 #endif
 442
 443 static bool uh_dispatch_request(struct client *cl, struct http_request *req)
 444 {
 445         struct path_info *pin;
 446         struct interpreter *ipr = NULL;
 447         struct config *conf = cl->server->conf;
 448
 449 #ifdef HAVE_LUA
 450         /* Lua request? */
 451         if (conf->lua_state &&
 452                 uh_path_match(conf->lua_prefix, req->url))
 453         {
 454                 return conf->lua_request(cl, conf->lua_state);
 455         }
 456         else
 457 #endif
 458
 459 #ifdef HAVE_UBUS
 460         /* ubus request? */
 461         if (conf->ubus_state &&
 462                 uh_path_match(conf->ubus_prefix, req->url))
 463         {
 464                 return conf->ubus_request(cl, conf->ubus_state);
 465         }
 466         else
 467 #endif
 468
 469         /* dispatch request */
 470         if ((pin = uh_path_lookup(cl, req->url)) != NULL)
 471         {
 472                 /* auth ok? */
 473                 if (!pin->redirected && uh_auth_check(cl, req, pin))
 474                 {
 475 #ifdef HAVE_CGI
 476                         if (uh_path_match(conf->cgi_prefix, pin->name) ||
 477                                 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
 478                         {
 479                                 return uh_cgi_request(cl, pin, ipr);
 480                         }
 481 #endif
 482                         return uh_file_request(cl, pin);
 483                 }
 484         }
 485
 486         /* 404 - pass 1 */
 487         else
 488         {
 489                 /* Try to invoke an error handler */
 490                 if ((pin = uh_path_lookup(cl, conf->error_handler)) != NULL)
 491                 {
 492                         /* auth ok? */
 493                         if (uh_auth_check(cl, req, pin))
 494                         {
 495                                 req->redirect_status = 404;
 496 #ifdef HAVE_CGI
 497                                 if (uh_path_match(conf->cgi_prefix, pin->name) ||
 498                                         (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
 499                                 {
 500                                         return uh_cgi_request(cl, pin, ipr);
 501                                 }
 502 #endif
 503                                 return uh_file_request(cl, pin);
 504                         }
 505                 }
 506
 507                 /* 404 - pass 2 */
 508                 else
 509                 {
 510                         uh_http_sendhf(cl, 404, "Not Found", "No such file or directory");
 511                 }
 512         }
 513
 514         return false;
 515 }
 516
 517 static void uh_client_cb(struct uloop_fd *u, unsigned int events);
 518
 519 static void uh_listener_cb(struct uloop_fd *u, unsigned int events)
 520 {
 521         int new_fd;
 522         struct listener *serv;
 523         struct client *cl;
 524         struct config *conf;
 525
 526         serv = container_of(u, struct listener, fd);
 527         conf = serv->conf;
 528
 529         /* defer client if maximum number of requests is exceeded */
 530         if (serv->n_clients >= conf->max_requests)
 531                 return;
 532
 533         /* handle new connections */
 534         if ((new_fd = accept(u->fd, NULL, 0)) != -1)
 535         {
 536                 D("SRV: Server(%d) accept => Client(%d)\n", u->fd, new_fd);
 537
 538                 /* add to global client list */
 539                 if ((cl = uh_client_add(new_fd, serv)) != NULL)
 540                 {
 541                         /* add client socket to global fdset */
 542                         uloop_fd_add(&cl->fd, ULOOP_READ);
 543
 544 #ifdef HAVE_TLS
 545                         /* setup client tls context */
 546                         if (conf->tls)
 547                         {
 548                                 if (conf->tls_accept(cl) < 1)
 549                                 {
 550                                         D("SRV: Client(%d) SSL handshake failed, drop\n", new_fd);
 551
 552                                         /* remove from global client list */
 553                                         uh_client_remove(cl);
 554                                         return;
 555                                 }
 556                         }
 557 #endif
 558
 559                         cl->fd.cb = uh_client_cb;
 560                         fd_cloexec(new_fd);
 561                 }
 562
 563                 /* insufficient resources */
 564                 else
 565                 {
 566                         fprintf(stderr, "uh_client_add(): Cannot allocate memory\n");
 567                         close(new_fd);
 568                 }
 569         }
 570 }
 571
 572 static void uh_pipe_cb(struct uloop_fd *u, unsigned int events)
 573 {
 574         struct client *cl = container_of(u, struct client, pipe);
 575
 576         D("SRV: Client(%d) pipe(%d) readable\n", cl->fd.fd, cl->pipe.fd);
 577
 578         uh_client_cb(&cl->fd, ULOOP_WRITE);
 579 }
 580
 581 static void uh_child_cb(struct uloop_process *p, int rv)
 582 {
 583         struct client *cl = container_of(p, struct client, proc);
 584
 585         D("SRV: Client(%d) child(%d) is dead\n", cl->fd.fd, cl->proc.pid);
 586
 587         cl->dead = true;
 588         cl->fd.eof = true;
 589         uh_client_cb(&cl->fd, ULOOP_READ | ULOOP_WRITE);
 590 }
 591
 592 static void uh_kill9_cb(struct uloop_timeout *t)
 593 {
 594         struct client *cl = container_of(t, struct client, timeout);
 595
 596         if (!kill(cl->proc.pid, 0))
 597         {
 598                 D("SRV: Client(%d) child(%d) kill(SIGKILL)...\n",
 599                   cl->fd.fd, cl->proc.pid);
 600
 601                 kill(cl->proc.pid, SIGKILL);
 602         }
 603 }
 604
 605 static void uh_timeout_cb(struct uloop_timeout *t)
 606 {
 607         struct client *cl = container_of(t, struct client, timeout);
 608
 609         D("SRV: Client(%d) child(%d) timed out\n", cl->fd.fd, cl->proc.pid);
 610
 611         if (!kill(cl->proc.pid, 0))
 612         {
 613                 D("SRV: Client(%d) child(%d) kill(SIGTERM)...\n",
 614                   cl->fd.fd, cl->proc.pid);
 615
 616                 kill(cl->proc.pid, SIGTERM);
 617
 618                 cl->timeout.cb = uh_kill9_cb;
 619                 uloop_timeout_set(&cl->timeout, 1000);
 620         }
 621 }
 622
 623 static void uh_client_cb(struct uloop_fd *u, unsigned int events)
 624 {
 625         int i;
 626         struct client *cl;
 627         struct config *conf;
 628         struct http_request *req;
 629
 630         cl = container_of(u, struct client, fd);
 631         conf = cl->server->conf;
 632
 633         D("SRV: Client(%d) enter callback\n", u->fd);
 634
 635         /* undispatched yet */
 636         if (!cl->dispatched)
 637         {
 638                 /* we have no headers yet and this was a write event, ignore... */
 639                 if (!(events & ULOOP_READ))
 640                 {
 641                         D("SRV: Client(%d) ignoring write event before headers\n", u->fd);
 642                         return;
 643                 }
 644
 645                 /* attempt to receive and parse headers */
 646                 if (!(req = uh_http_header_recv(cl)))
 647                 {
 648                         D("SRV: Client(%d) failed to receive header\n", u->fd);
 649                         uh_client_shutdown(cl);
 650                         return;
 651                 }
 652
 653                 /* process expect headers */
 654                 foreach_header(i, req->headers)
 655                 {
 656                         if (strcasecmp(req->headers[i], "Expect"))
 657                                 continue;
 658
 659                         if (strcasecmp(req->headers[i+1], "100-continue"))
 660                         {
 661                                 D("SRV: Client(%d) unknown expect header (%s)\n",
 662                                   u->fd, req->headers[i+1]);
 663
 664                                 uh_http_response(cl, 417, "Precondition Failed");
 665                                 uh_client_shutdown(cl);
 666                                 return;
 667                         }
 668                         else
 669                         {
 670                                 D("SRV: Client(%d) sending HTTP/1.1 100 Continue\n", u->fd);
 671
 672                                 uh_http_sendf(cl, NULL, "HTTP/1.1 100 Continue\r\n\r\n");
 673                                 cl->httpbuf.len = 0; /* client will re-send the body */
 674                                 break;
 675                         }
 676                 }
 677
 678                 /* RFC1918 filtering */
 679                 if (conf->rfc1918_filter &&
 680                         sa_rfc1918(&cl->peeraddr) && !sa_rfc1918(&cl->servaddr))
 681                 {
 682                         uh_http_sendhf(cl, 403, "Forbidden",
 683                                                    "Rejected request from RFC1918 IP "
 684                                                    "to public server address");
 685
 686                         uh_client_shutdown(cl);
 687                         return;
 688                 }
 689
 690                 /* dispatch request */
 691                 if (!uh_dispatch_request(cl, req))
 692                 {
 693                         D("SRV: Client(%d) failed to dispach request\n", u->fd);
 694                         uh_client_shutdown(cl);
 695                         return;
 696                 }
 697
 698                 /* request handler spawned a pipe, register handler */
 699                 if (cl->pipe.fd)
 700                 {
 701                         D("SRV: Client(%d) pipe(%d) spawned\n", u->fd, cl->pipe.fd);
 702
 703                         cl->pipe.cb = uh_pipe_cb;
 704                         uloop_fd_add(&cl->pipe, ULOOP_READ);
 705                 }
 706
 707                 /* request handler spawned a child, register handler */
 708                 if (cl->proc.pid)
 709                 {
 710                         D("SRV: Client(%d) child(%d) spawned\n", u->fd, cl->proc.pid);
 711
 712                         cl->proc.cb = uh_child_cb;
 713                         uloop_process_add(&cl->proc);
 714
 715                         cl->timeout.cb = uh_timeout_cb;
 716                         uloop_timeout_set(&cl->timeout, conf->script_timeout * 1000);
 717                 }
 718
 719                 /* header processing complete */
 720                 D("SRV: Client(%d) dispatched\n", u->fd);
 721                 cl->dispatched = true;
 722         }
 723
 724         if (!cl->cb(cl))
 725         {
 726                 D("SRV: Client(%d) response callback signalized EOF\n", u->fd);
 727                 uh_client_shutdown(cl);
 728                 return;
 729         }
 730 }
 731
 732 #ifdef HAVE_TLS
 733 static inline int uh_inittls(struct config *conf)
 734 {
 735         /* library handle */
 736         void *lib;
 737
 738         /* already loaded */
 739         if (conf->tls != NULL)
 740                 return 0;
 741
 742         /* load TLS plugin */
 743         if (!(lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)))
 744         {
 745                 fprintf(stderr,
 746                                 "Notice: Unable to load TLS plugin - disabling SSL support! "
 747                                 "(Reason: %s)\n", dlerror()
 748                 );
 749
 750                 return 1;
 751         }
 752         else
 753         {
 754                 /* resolve functions */
 755                 if (!(conf->tls_init   = dlsym(lib, "uh_tls_ctx_init"))      ||
 756                     !(conf->tls_cert   = dlsym(lib, "uh_tls_ctx_cert"))      ||
 757                     !(conf->tls_key    = dlsym(lib, "uh_tls_ctx_key"))       ||
 758                     !(conf->tls_free   = dlsym(lib, "uh_tls_ctx_free"))      ||
 759                     !(conf->tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
 760                     !(conf->tls_close  = dlsym(lib, "uh_tls_client_close"))  ||
 761                     !(conf->tls_recv   = dlsym(lib, "uh_tls_client_recv"))   ||
 762                     !(conf->tls_send   = dlsym(lib, "uh_tls_client_send")))
 763                 {
 764                         fprintf(stderr,
 765                                         "Error: Failed to lookup required symbols "
 766                                         "in TLS plugin: %s\n", dlerror()
 767                         );
 768                         exit(1);
 769                 }
 770
 771                 /* init SSL context */
 772                 if (!(conf->tls = conf->tls_init()))
 773                 {
 774                         fprintf(stderr, "Error: Failed to initalize SSL context\n");
 775                         exit(1);
 776                 }
 777         }
 778
 779         return 0;
 780 }
 781 #endif
 782
 783 int main (int argc, char **argv)
 784 {
 785         /* master file descriptor list */
 786         fd_set serv_fds;
 787
 788         /* working structs */
 789         struct addrinfo hints;
 790         struct sigaction sa;
 791         struct config conf;
 792
 793         /* maximum file descriptor number */
 794         int cur_fd, max_fd = 0;
 795
 796 #ifdef HAVE_TLS
 797         int tls = 0;
 798         int keys = 0;
 799 #endif
 800
 801         int bound = 0;
 802         int nofork = 0;
 803
 804         /* args */
 805         int opt;
 806         char bind[128];
 807         char *port = NULL;
 808
 809 #ifdef HAVE_LUA
 810         /* library handle */
 811         void *lib;
 812 #endif
 813
 814         FD_ZERO(&serv_fds);
 815
 816         /* handle SIGPIPE, SIGINT, SIGTERM */
 817         sa.sa_flags = 0;
 818         sigemptyset(&sa.sa_mask);
 819
 820         sa.sa_handler = SIG_IGN;
 821         sigaction(SIGPIPE, &sa, NULL);
 822
 823         sa.sa_handler = uh_sigterm;
 824         sigaction(SIGINT,  &sa, NULL);
 825         sigaction(SIGTERM, &sa, NULL);
 826
 827         /* prepare addrinfo hints */
 828         memset(&hints, 0, sizeof(hints));
 829         hints.ai_family   = AF_UNSPEC;
 830         hints.ai_socktype = SOCK_STREAM;
 831         hints.ai_flags    = AI_PASSIVE;
 832
 833         /* parse args */
 834         memset(&conf, 0, sizeof(conf));
 835         memset(bind, 0, sizeof(bind));
 836
 837         uloop_init();
 838
 839         while ((opt = getopt(argc, argv,
 840                                                  "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:n:x:i:t:T:A:u:U:")) > 0)
 841         {
 842                 switch(opt)
 843                 {
 844                         /* [addr:]port */
 845                         case 'p':
 846                         case 's':
 847                                 if ((port = strrchr(optarg, ':')) != NULL)
 848                                 {
 849                                         if ((optarg[0] == '[') && (port > optarg) && (port[-1] == ']'))
 850                                                 memcpy(bind, optarg + 1,
 851                                                         min(sizeof(bind), (int)(port - optarg) - 2));
 852                                         else
 853                                                 memcpy(bind, optarg,
 854                                                         min(sizeof(bind), (int)(port - optarg)));
 855
 856                                         port++;
 857                                 }
 858                                 else
 859                                 {
 860                                         port = optarg;
 861                                 }
 862
 863 #ifdef HAVE_TLS
 864                                 if (opt == 's')
 865                                 {
 866                                         if (uh_inittls(&conf))
 867                                         {
 868                                                 fprintf(stderr,
 869                                                         "Notice: TLS support is disabled, "
 870                                                         "ignoring '-s %s'\n", optarg
 871                                                 );
 872                                                 continue;
 873                                         }
 874
 875                                         tls = 1;
 876                                 }
 877 #endif
 878
 879                                 /* bind sockets */
 880                                 bound += uh_socket_bind(&serv_fds, &max_fd,
 881                                                                                 bind[0] ? bind : NULL,
 882                                                                                 port, &hints, (opt == 's'), &conf);
 883
 884                                 memset(bind, 0, sizeof(bind));
 885                                 break;
 886
 887 #ifdef HAVE_TLS
 888                         /* certificate */
 889                         case 'C':
 890                                 if (!uh_inittls(&conf))
 891                                 {
 892                                         if (conf.tls_cert(conf.tls, optarg) < 1)
 893                                         {
 894                                                 fprintf(stderr,
 895                                                                 "Error: Invalid certificate file given\n");
 896                                                 exit(1);
 897                                         }
 898
 899                                         keys++;
 900                                 }
 901
 902                                 break;
 903
 904                         /* key */
 905                         case 'K':
 906                                 if (!uh_inittls(&conf))
 907                                 {
 908                                         if (conf.tls_key(conf.tls, optarg) < 1)
 909                                         {
 910                                                 fprintf(stderr,
 911                                                                 "Error: Invalid private key file given\n");
 912                                                 exit(1);
 913                                         }
 914
 915                                         keys++;
 916                                 }
 917
 918                                 break;
 919 #endif
 920
 921                         /* docroot */
 922                         case 'h':
 923                                 if (! realpath(optarg, conf.docroot))
 924                                 {
 925                                         fprintf(stderr, "Error: Invalid directory %s: %s\n",
 926                                                         optarg, strerror(errno));
 927                                         exit(1);
 928                                 }
 929                                 break;
 930
 931                         /* error handler */
 932                         case 'E':
 933                                 if ((strlen(optarg) == 0) || (optarg[0] != '/'))
 934                                 {
 935                                         fprintf(stderr, "Error: Invalid error handler: %s\n",
 936                                                         optarg);
 937                                         exit(1);
 938                                 }
 939                                 conf.error_handler = optarg;
 940                                 break;
 941
 942                         /* index file */
 943                         case 'I':
 944                                 if ((strlen(optarg) == 0) || (optarg[0] == '/'))
 945                                 {
 946                                         fprintf(stderr, "Error: Invalid index page: %s\n",
 947                                                         optarg);
 948                                         exit(1);
 949                                 }
 950                                 conf.index_file = optarg;
 951                                 break;
 952
 953                         /* don't follow symlinks */
 954                         case 'S':
 955                                 conf.no_symlinks = 1;
 956                                 break;
 957
 958                         /* don't list directories */
 959                         case 'D':
 960                                 conf.no_dirlists = 1;
 961                                 break;
 962
 963                         case 'R':
 964                                 conf.rfc1918_filter = 1;
 965                                 break;
 966
 967                         case 'n':
 968                                 conf.max_requests = atoi(optarg);
 969                                 break;
 970
 971 #ifdef HAVE_CGI
 972                         /* cgi prefix */
 973                         case 'x':
 974                                 conf.cgi_prefix = optarg;
 975                                 break;
 976
 977                         /* interpreter */
 978                         case 'i':
 979                                 if ((optarg[0] == '.') && (port = strchr(optarg, '=')))
 980                                 {
 981                                         *port++ = 0;
 982                                         uh_interpreter_add(optarg, port);
 983                                 }
 984                                 else
 985                                 {
 986                                         fprintf(stderr, "Error: Invalid interpreter: %s\n",
 987                                                         optarg);
 988                                         exit(1);
 989                                 }
 990                                 break;
 991 #endif
 992
 993 #ifdef HAVE_LUA
 994                         /* lua prefix */
 995                         case 'l':
 996                                 conf.lua_prefix = optarg;
 997                                 break;
 998
 999                         /* lua handler */
1000                         case 'L':
1001                                 conf.lua_handler = optarg;
1002                                 break;
1003 #endif
1004
1005 #ifdef HAVE_UBUS
1006                         /* ubus prefix */
1007                         case 'u':
1008                                 conf.ubus_prefix = optarg;
1009                                 break;
1010
1011                         /* ubus socket */
1012                         case 'U':
1013                                 conf.ubus_socket = optarg;
1014                                 break;
1015 #endif
1016
1017 #if defined(HAVE_CGI) || defined(HAVE_LUA)
1018                         /* script timeout */
1019                         case 't':
1020                                 conf.script_timeout = atoi(optarg);
1021                                 break;
1022 #endif
1023
1024                         /* network timeout */
1025                         case 'T':
1026                                 conf.network_timeout = atoi(optarg);
1027                                 break;
1028
1029                         /* tcp keep-alive */
1030                         case 'A':
1031                                 conf.tcp_keepalive = atoi(optarg);
1032                                 break;
1033
1034                         /* no fork */
1035                         case 'f':
1036                                 nofork = 1;
1037                                 break;
1038
1039                         /* urldecode */
1040                         case 'd':
1041                                 if ((port = malloc(strlen(optarg)+1)) != NULL)
1042                                 {
1043                                         /* "decode" plus to space to retain compat */
1044                                         for (opt = 0; optarg[opt]; opt++)
1045                                                 if (optarg[opt] == '+')
1046                                                         optarg[opt] = ' ';
1047                                         /* opt now contains strlen(optarg) -- no need to re-scan */
1048                                         memset(port, 0, opt+1);
1049                                         if (uh_urldecode(port, opt, optarg, opt) < 0)
1050                                             fprintf(stderr, "uhttpd: invalid encoding\n");
1051
1052                                         printf("%s", port);
1053                                         free(port);
1054                                         exit(0);
1055                                 }
1056                                 break;
1057
1058                         /* basic auth realm */
1059                         case 'r':
1060                                 conf.realm = optarg;
1061                                 break;
1062
1063                         /* md5 crypt */
1064                         case 'm':
1065                                 printf("%s\n", crypt(optarg, "$1$"));
1066                                 exit(0);
1067                                 break;
1068
1069                         /* config file */
1070                         case 'c':
1071                                 conf.file = optarg;
1072                                 break;
1073
1074                         default:
1075                                 fprintf(stderr,
1076                                         "Usage: %s -p [addr:]port [-h docroot]\n"
1077                                         "       -f              Do not fork to background\n"
1078                                         "       -c file         Configuration file, default is '/etc/httpd.conf'\n"
1079                                         "       -p [addr:]port  Bind to specified address and port, multiple allowed\n"
1080 #ifdef HAVE_TLS
1081                                         "       -s [addr:]port  Like -p but provide HTTPS on this port\n"
1082                                         "       -C file         ASN.1 server certificate file\n"
1083                                         "       -K file         ASN.1 server private key file\n"
1084 #endif
1085                                         "       -h directory    Specify the document root, default is '.'\n"
1086                                         "       -E string       Use given virtual URL as 404 error handler\n"
1087                                         "       -I string       Use given filename as index page for directories\n"
1088                                         "       -S              Do not follow symbolic links outside of the docroot\n"
1089                                         "       -D              Do not allow directory listings, send 403 instead\n"
1090                                         "       -R              Enable RFC1918 filter\n"
1091                                         "       -n count        Maximum allowed number of concurrent requests\n"
1092 #ifdef HAVE_LUA
1093                                         "       -l string       URL prefix for Lua handler, default is '/lua'\n"
1094                                         "       -L file         Lua handler script, omit to disable Lua\n"
1095 #endif
1096 #ifdef HAVE_UBUS
1097                                         "       -u string       URL prefix for HTTP/JSON handler, default is '/ubus'\n"
1098                                         "       -U file         Override ubus socket path\n"
1099 #endif
1100 #ifdef HAVE_CGI
1101                                         "       -x string       URL prefix for CGI handler, default is '/cgi-bin'\n"
1102                                         "       -i .ext=path    Use interpreter at path for files with the given extension\n"
1103 #endif
1104 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1105                                         "       -t seconds      CGI, Lua and UBUS script timeout in seconds, default is 60\n"
1106 #endif
1107                                         "       -T seconds      Network timeout in seconds, default is 30\n"
1108                                         "       -d string       URL decode given string\n"
1109                                         "       -r string       Specify basic auth realm\n"
1110                                         "       -m string       MD5 crypt given string\n"
1111                                         "\n", argv[0]
1112                                 );
1113
1114                                 exit(1);
1115                 }
1116         }
1117
1118 #ifdef HAVE_TLS
1119         if ((tls == 1) && (keys < 2))
1120         {
1121                 fprintf(stderr, "Error: Missing private key or certificate file\n");
1122                 exit(1);
1123         }
1124 #endif
1125
1126         if (bound < 1)
1127         {
1128                 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
1129                 exit(1);
1130         }
1131
1132         /* default docroot */
1133         if (!conf.docroot[0] && !realpath(".", conf.docroot))
1134         {
1135                 fprintf(stderr, "Error: Can not determine default document root: %s\n",
1136                         strerror(errno));
1137                 exit(1);
1138         }
1139
1140         /* default realm */
1141         if (!conf.realm)
1142                 conf.realm = "Protected Area";
1143
1144         /* config file */
1145         uh_config_parse(&conf);
1146
1147         /* default max requests */
1148         if (conf.max_requests <= 0)
1149                 conf.max_requests = 3;
1150
1151         /* default network timeout */
1152         if (conf.network_timeout <= 0)
1153                 conf.network_timeout = 30;
1154
1155 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1156         /* default script timeout */
1157         if (conf.script_timeout <= 0)
1158                 conf.script_timeout = 60;
1159 #endif
1160
1161 #ifdef HAVE_CGI
1162         /* default cgi prefix */
1163         if (!conf.cgi_prefix)
1164                 conf.cgi_prefix = "/cgi-bin";
1165 #endif
1166
1167 #ifdef HAVE_LUA
1168         /* load Lua plugin */
1169         if (!(lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)))
1170         {
1171                 fprintf(stderr,
1172                                 "Notice: Unable to load Lua plugin - disabling Lua support! "
1173                                 "(Reason: %s)\n", dlerror());
1174         }
1175         else
1176         {
1177                 /* resolve functions */
1178                 if (!(conf.lua_init    = dlsym(lib, "uh_lua_init"))    ||
1179                     !(conf.lua_close   = dlsym(lib, "uh_lua_close"))   ||
1180                     !(conf.lua_request = dlsym(lib, "uh_lua_request")))
1181                 {
1182                         fprintf(stderr,
1183                                         "Error: Failed to lookup required symbols "
1184                                         "in Lua plugin: %s\n", dlerror()
1185                         );
1186                         exit(1);
1187                 }
1188
1189                 /* init Lua runtime if handler is specified */
1190                 if (conf.lua_handler)
1191                 {
1192                         /* default lua prefix */
1193                         if (!conf.lua_prefix)
1194                                 conf.lua_prefix = "/lua";
1195
1196                         conf.lua_state = conf.lua_init(&conf);
1197                 }
1198         }
1199 #endif
1200
1201 #ifdef HAVE_UBUS
1202         /* load ubus plugin */
1203         if (!(lib = dlopen("uhttpd_ubus.so", RTLD_LAZY | RTLD_GLOBAL)))
1204         {
1205                 fprintf(stderr,
1206                                 "Notice: Unable to load ubus plugin - disabling ubus support! "
1207                                 "(Reason: %s)\n", dlerror());
1208         }
1209         else
1210         {
1211                 /* resolve functions */
1212                 if (!(conf.ubus_init    = dlsym(lib, "uh_ubus_init"))    ||
1213                     !(conf.ubus_close   = dlsym(lib, "uh_ubus_close"))   ||
1214                     !(conf.ubus_request = dlsym(lib, "uh_ubus_request")))
1215                 {
1216                         fprintf(stderr,
1217                                         "Error: Failed to lookup required symbols "
1218                                         "in ubus plugin: %s\n", dlerror()
1219                         );
1220                         exit(1);
1221                 }
1222
1223                 /* default ubus prefix */
1224                 if (!conf.ubus_prefix)
1225                         conf.ubus_prefix = "/ubus";
1226
1227                 conf.ubus_state = conf.ubus_init(&conf);
1228         }
1229 #endif
1230
1231         /* fork (if not disabled) */
1232         if (!nofork)
1233         {
1234                 switch (fork())
1235                 {
1236                         case -1:
1237                                 perror("fork()");
1238                                 exit(1);
1239
1240                         case 0:
1241                                 /* daemon setup */
1242                                 if (chdir("/"))
1243                                         perror("chdir()");
1244
1245                                 if ((cur_fd = open("/dev/null", O_WRONLY)) > -1)
1246                                         dup2(cur_fd, 0);
1247
1248                                 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1249                                         dup2(cur_fd, 1);
1250
1251                                 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1252                                         dup2(cur_fd, 2);
1253
1254                                 break;
1255
1256                         default:
1257                                 exit(0);
1258                 }
1259         }
1260
1261         /* server main loop */
1262         uloop_run();
1263
1264 #ifdef HAVE_LUA
1265         /* destroy the Lua state */
1266         if (conf.lua_state != NULL)
1267                 conf.lua_close(conf.lua_state);
1268 #endif
1269
1270 #ifdef HAVE_UBUS
1271         /* destroy the ubus state */
1272         if (conf.ubus_state != NULL)
1273                 conf.ubus_close(conf.ubus_state);
1274 #endif
1275
1276         return 0;
1277 }