package/uhttpd/src/uhttpd.c

   1 /*
   2  * uhttpd - Tiny single-threaded httpd - Main component
   3  *
   4  *   Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
   5  *
   6  *  Licensed under the Apache License, Version 2.0 (the "License");
   7  *  you may not use this file except in compliance with the License.
   8  *  You may obtain a copy of the License at
   9  *
  10  *      http://www.apache.org/licenses/LICENSE-2.0
  11  *
  12  *  Unless required by applicable law or agreed to in writing, software
  13  *  distributed under the License is distributed on an "AS IS" BASIS,
  14  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15  *  See the License for the specific language governing permissions and
  16  *  limitations under the License.
  17  */
  18
  19 #define _XOPEN_SOURCE 500       /* crypt() */
  20
  21 #include "uhttpd.h"
  22 #include "uhttpd-utils.h"
  23 #include "uhttpd-file.h"
  24
  25 #ifdef HAVE_CGI
  26 #include "uhttpd-cgi.h"
  27 #endif
  28
  29 #ifdef HAVE_LUA
  30 #include "uhttpd-lua.h"
  31 #endif
  32
  33 #ifdef HAVE_TLS
  34 #include "uhttpd-tls.h"
  35 #endif
  36
  37
  38 static int run = 1;
  39
  40 static void uh_sigterm(int sig)
  41 {
  42         run = 0;
  43 }
  44
  45 static void uh_config_parse(struct config *conf)
  46 {
  47         FILE *c;
  48         char line[512];
  49         char *col1 = NULL;
  50         char *col2 = NULL;
  51         char *eol  = NULL;
  52
  53         const char *path = conf->file ? conf->file : "/etc/httpd.conf";
  54
  55
  56         if ((c = fopen(path, "r")) != NULL)
  57         {
  58                 memset(line, 0, sizeof(line));
  59
  60                 while (fgets(line, sizeof(line) - 1, c))
  61                 {
  62                         if ((line[0] == '/') && (strchr(line, ':') != NULL))
  63                         {
  64                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  65                                     !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
  66                                         !(eol = strchr(col2, '\n')) || (*eol++  = 0))
  67                                 {
  68                                         continue;
  69                                 }
  70
  71                                 if (!uh_auth_add(line, col1, col2))
  72                                 {
  73                                         fprintf(stderr,
  74                                                         "Notice: No password set for user %s, ignoring "
  75                                                         "authentication on %s\n", col1, line
  76                                         );
  77                                 }
  78                         }
  79                         else if (!strncmp(line, "I:", 2))
  80                         {
  81                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  82                                     !(eol = strchr(col1, '\n')) || (*eol++  = 0))
  83                                 {
  84                                         continue;
  85                                 }
  86
  87                                 conf->index_file = strdup(col1);
  88                         }
  89                         else if (!strncmp(line, "E404:", 5))
  90                         {
  91                                 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
  92                                     !(eol = strchr(col1, '\n')) || (*eol++  = 0))
  93                                 {
  94                                         continue;
  95                                 }
  96
  97                                 conf->error_handler = strdup(col1);
  98                         }
  99 #ifdef HAVE_CGI
 100                         else if ((line[0] == '*') && (strchr(line, ':') != NULL))
 101                         {
 102                                 if (!(col1 = strchr(line, '*')) || (*col1++ = 0) ||
 103                                     !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
 104                                     !(eol = strchr(col2, '\n')) || (*eol++  = 0))
 105                                 {
 106                                         continue;
 107                                 }
 108
 109                                 if (!uh_interpreter_add(col1, col2))
 110                                 {
 111                                         fprintf(stderr,
 112                                                         "Unable to add interpreter %s for extension %s: "
 113                                                         "Out of memory\n", col2, col1
 114                                         );
 115                                 }
 116                         }
 117 #endif
 118                 }
 119
 120                 fclose(c);
 121         }
 122 }
 123
 124 static void uh_listener_cb(struct uloop_fd *u, unsigned int events);
 125
 126 static int uh_socket_bind(fd_set *serv_fds, int *max_fd,
 127                                                   const char *host, const char *port,
 128                                                   struct addrinfo *hints, int do_tls,
 129                                                   struct config *conf)
 130 {
 131         int sock = -1;
 132         int yes = 1;
 133         int status;
 134         int bound = 0;
 135
 136         int tcp_ka_idl, tcp_ka_int, tcp_ka_cnt;
 137
 138         struct listener *l = NULL;
 139         struct addrinfo *addrs = NULL, *p = NULL;
 140
 141         if ((status = getaddrinfo(host, port, hints, &addrs)) != 0)
 142         {
 143                 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
 144         }
 145
 146         /* try to bind a new socket to each found address */
 147         for (p = addrs; p; p = p->ai_next)
 148         {
 149                 /* get the socket */
 150                 if ((sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1)
 151                 {
 152                         perror("socket()");
 153                         goto error;
 154                 }
 155
 156                 /* "address already in use" */
 157                 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)))
 158                 {
 159                         perror("setsockopt()");
 160                         goto error;
 161                 }
 162
 163                 /* TCP keep-alive */
 164                 if (conf->tcp_keepalive > 0)
 165                 {
 166                         tcp_ka_idl = 1;
 167                         tcp_ka_cnt = 3;
 168                         tcp_ka_int = conf->tcp_keepalive;
 169
 170                         if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
 171                             setsockopt(sock, SOL_TCP, TCP_KEEPIDLE,  &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
 172                             setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
 173                             setsockopt(sock, SOL_TCP, TCP_KEEPCNT,   &tcp_ka_cnt, sizeof(tcp_ka_cnt)))
 174                         {
 175                             fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
 176                                 strerror(errno));
 177                         }
 178                 }
 179
 180                 /* required to get parallel v4 + v6 working */
 181                 if (p->ai_family == AF_INET6)
 182                 {
 183                         if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1)
 184                         {
 185                                 perror("setsockopt()");
 186                                 goto error;
 187                         }
 188                 }
 189
 190                 /* bind */
 191                 if (bind(sock, p->ai_addr, p->ai_addrlen) == -1)
 192                 {
 193                         perror("bind()");
 194                         goto error;
 195                 }
 196
 197                 /* listen */
 198                 if (listen(sock, UH_LIMIT_CLIENTS) == -1)
 199                 {
 200                         perror("listen()");
 201                         goto error;
 202                 }
 203
 204                 /* add listener to global list */
 205                 if (!(l = uh_listener_add(sock, conf)))
 206                 {
 207                         fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
 208                         goto error;
 209                 }
 210
 211 #ifdef HAVE_TLS
 212                 /* init TLS */
 213                 l->tls = do_tls ? conf->tls : NULL;
 214 #endif
 215
 216                 /* add socket to server fd set */
 217                 FD_SET(sock, serv_fds);
 218                 fd_cloexec(sock);
 219                 *max_fd = max(*max_fd, sock);
 220
 221                 l->fd.cb = uh_listener_cb;
 222                 uloop_fd_add(&l->fd, ULOOP_READ | ULOOP_WRITE);
 223
 224                 bound++;
 225                 continue;
 226
 227                 error:
 228                 if (sock > 0)
 229                         close(sock);
 230         }
 231
 232         freeaddrinfo(addrs);
 233
 234         return bound;
 235 }
 236
 237 static struct http_request * uh_http_header_parse(struct client *cl,
 238                                                                                                   char *buffer, int buflen)
 239 {
 240         char *method  = buffer;
 241         char *path    = NULL;
 242         char *version = NULL;
 243
 244         char *headers = NULL;
 245         char *hdrname = NULL;
 246         char *hdrdata = NULL;
 247
 248         int i;
 249         int hdrcount = 0;
 250
 251         struct http_request *req = &cl->request;
 252
 253
 254         /* terminate initial header line */
 255         if ((headers = strfind(buffer, buflen, "\r\n", 2)) != NULL)
 256         {
 257                 buffer[buflen-1] = 0;
 258
 259                 *headers++ = 0;
 260                 *headers++ = 0;
 261
 262                 /* find request path */
 263                 if ((path = strchr(buffer, ' ')) != NULL)
 264                         *path++ = 0;
 265
 266                 /* find http version */
 267                 if ((path != NULL) && ((version = strchr(path, ' ')) != NULL))
 268                         *version++ = 0;
 269
 270
 271                 /* check method */
 272                 if (strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST"))
 273                 {
 274                         /* invalid method */
 275                         uh_http_response(cl, 405, "Method Not Allowed");
 276                         return NULL;
 277                 }
 278                 else
 279                 {
 280                         switch(method[0])
 281                         {
 282                                 case 'G':
 283                                         req->method = UH_HTTP_MSG_GET;
 284                                         break;
 285
 286                                 case 'H':
 287                                         req->method = UH_HTTP_MSG_HEAD;
 288                                         break;
 289
 290                                 case 'P':
 291                                         req->method = UH_HTTP_MSG_POST;
 292                                         break;
 293                         }
 294                 }
 295
 296                 /* check path */
 297                 if (!path || !strlen(path))
 298                 {
 299                         /* malformed request */
 300                         uh_http_response(cl, 400, "Bad Request");
 301                         return NULL;
 302                 }
 303                 else
 304                 {
 305                         req->url = path;
 306                 }
 307
 308                 /* check version */
 309                 if ((version == NULL) || (strcmp(version, "HTTP/0.9") &&
 310                     strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")))
 311                 {
 312                         /* unsupported version */
 313                         uh_http_response(cl, 400, "Bad Request");
 314                         return NULL;
 315                 }
 316                 else
 317                 {
 318                         req->version = strtof(&version[5], NULL);
 319                 }
 320
 321                 D("SRV: %s %s HTTP/%.1f\n",
 322                   (req->method == UH_HTTP_MSG_POST) ? "POST" :
 323                         (req->method == UH_HTTP_MSG_GET) ? "GET" : "HEAD",
 324                   req->url, req->version);
 325
 326                 /* process header fields */
 327                 for (i = (int)(headers - buffer); i < buflen; i++)
 328                 {
 329                         /* found eol and have name + value, push out header tuple */
 330                         if (hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n'))
 331                         {
 332                                 buffer[i] = 0;
 333
 334                                 /* store */
 335                                 if ((hdrcount + 1) < array_size(req->headers))
 336                                 {
 337                                         D("SRV: HTTP: %s: %s\n", hdrname, hdrdata);
 338
 339                                         req->headers[hdrcount++] = hdrname;
 340                                         req->headers[hdrcount++] = hdrdata;
 341
 342                                         hdrname = hdrdata = NULL;
 343                                 }
 344
 345                                 /* too large */
 346                                 else
 347                                 {
 348                                         D("SRV: HTTP: header too big (too many headers)\n");
 349                                         uh_http_response(cl, 413, "Request Entity Too Large");
 350                                         return NULL;
 351                                 }
 352                         }
 353
 354                         /* have name but no value and found a colon, start of value */
 355                         else if (hdrname && !hdrdata &&
 356                                          ((i+1) < buflen) && (buffer[i] == ':'))
 357                         {
 358                                 buffer[i] = 0;
 359                                 hdrdata = &buffer[i+1];
 360
 361                                 while ((hdrdata + 1) < (buffer + buflen) && *hdrdata == ' ')
 362                                         hdrdata++;
 363                         }
 364
 365                         /* have no name and found [A-Za-z], start of name */
 366                         else if (!hdrname && isalpha(buffer[i]))
 367                         {
 368                                 hdrname = &buffer[i];
 369                         }
 370                 }
 371
 372                 /* valid enough */
 373                 req->redirect_status = 200;
 374                 return req;
 375         }
 376
 377         /* Malformed request */
 378         uh_http_response(cl, 400, "Bad Request");
 379         return NULL;
 380 }
 381
 382
 383 static struct http_request * uh_http_header_recv(struct client *cl)
 384 {
 385         char *bufptr = cl->httpbuf.buf;
 386         char *idxptr = NULL;
 387
 388         ssize_t blen = sizeof(cl->httpbuf.buf)-1;
 389         ssize_t rlen = 0;
 390
 391         memset(bufptr, 0, sizeof(cl->httpbuf.buf));
 392
 393         while (blen > 0)
 394         {
 395                 /* receive data */
 396                 ensure_out(rlen = uh_tcp_recv(cl, bufptr, blen));
 397                 D("SRV: Client(%d) peek(%d) = %d\n", cl->fd.fd, blen, rlen);
 398
 399                 if (rlen <= 0)
 400                 {
 401                         D("SRV: Client(%d) dead [%s]\n", cl->fd.fd, strerror(errno));
 402                         return NULL;
 403                 }
 404
 405                 blen -= rlen;
 406                 bufptr += rlen;
 407
 408                 if ((idxptr = strfind(cl->httpbuf.buf, sizeof(cl->httpbuf.buf),
 409                                                           "\r\n\r\n", 4)))
 410                 {
 411                         /* header read complete ... */
 412                         cl->httpbuf.ptr = idxptr + 4;
 413                         cl->httpbuf.len = bufptr - cl->httpbuf.ptr;
 414
 415                         return uh_http_header_parse(cl, cl->httpbuf.buf,
 416                                                                                 (cl->httpbuf.ptr - cl->httpbuf.buf));
 417                 }
 418         }
 419
 420         /* request entity too large */
 421         D("SRV: HTTP: header too big (buffer exceeded)\n");
 422         uh_http_response(cl, 413, "Request Entity Too Large");
 423
 424 out:
 425         return NULL;
 426 }
 427
 428 #if defined(HAVE_LUA) || defined(HAVE_CGI)
 429 static int uh_path_match(const char *prefix, const char *url)
 430 {
 431         if ((strstr(url, prefix) == url) &&
 432                 ((prefix[strlen(prefix)-1] == '/') ||
 433                  (strlen(url) == strlen(prefix))   ||
 434                  (url[strlen(prefix)] == '/')))
 435         {
 436                 return 1;
 437         }
 438
 439         return 0;
 440 }
 441 #endif
 442
 443 static bool uh_dispatch_request(struct client *cl, struct http_request *req)
 444 {
 445         struct path_info *pin;
 446         struct interpreter *ipr = NULL;
 447         struct config *conf = cl->server->conf;
 448
 449 #ifdef HAVE_LUA
 450         /* Lua request? */
 451         if (conf->lua_state &&
 452                 uh_path_match(conf->lua_prefix, req->url))
 453         {
 454                 return conf->lua_request(cl, conf->lua_state);
 455         }
 456         else
 457 #endif
 458
 459 #ifdef HAVE_UBUS
 460         /* ubus request? */
 461         if (conf->ubus_state &&
 462                 uh_path_match(conf->ubus_prefix, req->url))
 463         {
 464                 return conf->ubus_request(cl, conf->ubus_state);
 465         }
 466         else
 467 #endif
 468
 469         /* dispatch request */
 470         if ((pin = uh_path_lookup(cl, req->url)) != NULL)
 471         {
 472                 /* auth ok? */
 473                 if (!pin->redirected && uh_auth_check(cl, req, pin))
 474                 {
 475 #ifdef HAVE_CGI
 476                         if (uh_path_match(conf->cgi_prefix, pin->name) ||
 477                                 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
 478                         {
 479                                 return uh_cgi_request(cl, pin, ipr);
 480                         }
 481 #endif
 482                         return uh_file_request(cl, pin);
 483                 }
 484         }
 485
 486         /* 404 - pass 1 */
 487         else
 488         {
 489                 /* Try to invoke an error handler */
 490                 if ((pin = uh_path_lookup(cl, conf->error_handler)) != NULL)
 491                 {
 492                         /* auth ok? */
 493                         if (uh_auth_check(cl, req, pin))
 494                         {
 495                                 req->redirect_status = 404;
 496 #ifdef HAVE_CGI
 497                                 if (uh_path_match(conf->cgi_prefix, pin->name) ||
 498                                         (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
 499                                 {
 500                                         return uh_cgi_request(cl, pin, ipr);
 501                                 }
 502 #endif
 503                                 return uh_file_request(cl, pin);
 504                         }
 505                 }
 506
 507                 /* 404 - pass 2 */
 508                 else
 509                 {
 510                         uh_http_sendhf(cl, 404, "Not Found", "No such file or directory");
 511                 }
 512         }
 513
 514         return false;
 515 }
 516
 517 static void uh_client_cb(struct uloop_fd *u, unsigned int events);
 518
 519 static void uh_listener_cb(struct uloop_fd *u, unsigned int events)
 520 {
 521         int new_fd;
 522         struct listener *serv;
 523         struct client *cl;
 524         struct config *conf;
 525
 526         serv = container_of(u, struct listener, fd);
 527         conf = serv->conf;
 528
 529         /* defer client if maximum number of requests is exceeded */
 530         if (serv->n_clients >= conf->max_requests)
 531                 return;
 532
 533         /* handle new connections */
 534         if ((new_fd = accept(u->fd, NULL, 0)) != -1)
 535         {
 536                 D("SRV: Server(%d) accept => Client(%d)\n", u->fd, new_fd);
 537
 538                 /* add to global client list */
 539                 if ((cl = uh_client_add(new_fd, serv)) != NULL)
 540                 {
 541                         /* add client socket to global fdset */
 542                         uloop_fd_add(&cl->fd, ULOOP_READ | ULOOP_WRITE);
 543
 544 #ifdef HAVE_TLS
 545                         /* setup client tls context */
 546                         if (conf->tls)
 547                         {
 548                                 if (conf->tls_accept(cl) < 1)
 549                                 {
 550                                         D("SRV: Client(%d) SSL handshake failed, drop\n", new_fd);
 551
 552                                         /* remove from global client list */
 553                                         uh_client_remove(cl);
 554                                         return;
 555                                 }
 556                         }
 557 #endif
 558
 559                         cl->fd.cb = uh_client_cb;
 560                         fd_cloexec(new_fd);
 561                 }
 562
 563                 /* insufficient resources */
 564                 else
 565                 {
 566                         fprintf(stderr, "uh_client_add(): Cannot allocate memory\n");
 567                         close(new_fd);
 568                 }
 569         }
 570 }
 571
 572 static void uh_child_cb(struct uloop_process *p, int rv)
 573 {
 574         struct client *cl = container_of(p, struct client, proc);
 575
 576         D("SRV: Client(%d) child(%d) is dead\n", cl->fd.fd, cl->proc.pid);
 577
 578         cl->dead = true;
 579         cl->fd.eof = true;
 580         uh_client_cb(&cl->fd, ULOOP_READ | ULOOP_WRITE);
 581 }
 582
 583 static void uh_kill9_cb(struct uloop_timeout *t)
 584 {
 585         struct client *cl = container_of(t, struct client, timeout);
 586
 587         if (!kill(cl->proc.pid, 0))
 588         {
 589                 D("SRV: Client(%d) child(%d) kill(SIGKILL)...\n",
 590                   cl->fd.fd, cl->proc.pid);
 591
 592                 kill(cl->proc.pid, SIGKILL);
 593         }
 594 }
 595
 596 static void uh_timeout_cb(struct uloop_timeout *t)
 597 {
 598         struct client *cl = container_of(t, struct client, timeout);
 599
 600         D("SRV: Client(%d) child(%d) timed out\n", cl->fd.fd, cl->proc.pid);
 601
 602         if (!kill(cl->proc.pid, 0))
 603         {
 604                 D("SRV: Client(%d) child(%d) kill(SIGTERM)...\n",
 605                   cl->fd.fd, cl->proc.pid);
 606
 607                 kill(cl->proc.pid, SIGTERM);
 608
 609                 cl->timeout.cb = uh_kill9_cb;
 610                 uloop_timeout_set(&cl->timeout, 1000);
 611         }
 612 }
 613
 614 static void uh_client_cb(struct uloop_fd *u, unsigned int events)
 615 {
 616         int i;
 617         struct client *cl;
 618         struct config *conf;
 619         struct http_request *req;
 620
 621         cl = container_of(u, struct client, fd);
 622         conf = cl->server->conf;
 623
 624         D("SRV: Client(%d) enter callback\n", u->fd);
 625
 626         /* undispatched yet */
 627         if (!cl->dispatched)
 628         {
 629                 /* we have no headers yet and this was a write event, ignore... */
 630                 if (!(events & ULOOP_READ))
 631                 {
 632                         D("SRV: Client(%d) ignoring write event before headers\n", u->fd);
 633                         return;
 634                 }
 635
 636                 /* attempt to receive and parse headers */
 637                 if (!(req = uh_http_header_recv(cl)))
 638                 {
 639                         D("SRV: Client(%d) failed to receive header\n", u->fd);
 640                         uh_client_shutdown(cl);
 641                         return;
 642                 }
 643
 644                 /* process expect headers */
 645                 foreach_header(i, req->headers)
 646                 {
 647                         if (strcasecmp(req->headers[i], "Expect"))
 648                                 continue;
 649
 650                         if (strcasecmp(req->headers[i+1], "100-continue"))
 651                         {
 652                                 D("SRV: Client(%d) unknown expect header (%s)\n",
 653                                   u->fd, req->headers[i+1]);
 654
 655                                 uh_http_response(cl, 417, "Precondition Failed");
 656                                 uh_client_shutdown(cl);
 657                                 return;
 658                         }
 659                         else
 660                         {
 661                                 D("SRV: Client(%d) sending HTTP/1.1 100 Continue\n", u->fd);
 662
 663                                 uh_http_sendf(cl, NULL, "HTTP/1.1 100 Continue\r\n\r\n");
 664                                 cl->httpbuf.len = 0; /* client will re-send the body */
 665                                 break;
 666                         }
 667                 }
 668
 669                 /* RFC1918 filtering */
 670                 if (conf->rfc1918_filter &&
 671                         sa_rfc1918(&cl->peeraddr) && !sa_rfc1918(&cl->servaddr))
 672                 {
 673                         uh_http_sendhf(cl, 403, "Forbidden",
 674                                                    "Rejected request from RFC1918 IP "
 675                                                    "to public server address");
 676
 677                         uh_client_shutdown(cl);
 678                         return;
 679                 }
 680
 681                 /* dispatch request */
 682                 if (!uh_dispatch_request(cl, req))
 683                 {
 684                         D("SRV: Client(%d) failed to dispach request\n", u->fd);
 685                         uh_client_shutdown(cl);
 686                         return;
 687                 }
 688
 689                 /* request handler spawned a child, register handler */
 690                 if (cl->proc.pid)
 691                 {
 692                         D("SRV: Client(%d) child(%d) spawned\n", u->fd, cl->proc.pid);
 693
 694                         cl->proc.cb = uh_child_cb;
 695                         uloop_process_add(&cl->proc);
 696
 697                         cl->timeout.cb = uh_timeout_cb;
 698                         uloop_timeout_set(&cl->timeout, conf->script_timeout * 1000);
 699                 }
 700
 701                 /* header processing complete */
 702                 D("SRV: Client(%d) dispatched\n", u->fd);
 703                 cl->dispatched = true;
 704                 return;
 705         }
 706
 707         if (!cl->cb(cl))
 708         {
 709                 D("SRV: Client(%d) response callback signalized EOF\n", u->fd);
 710                 uh_client_shutdown(cl);
 711                 return;
 712         }
 713 }
 714
 715 #ifdef HAVE_TLS
 716 static inline int uh_inittls(struct config *conf)
 717 {
 718         /* library handle */
 719         void *lib;
 720
 721         /* already loaded */
 722         if (conf->tls != NULL)
 723                 return 0;
 724
 725         /* load TLS plugin */
 726         if (!(lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)))
 727         {
 728                 fprintf(stderr,
 729                                 "Notice: Unable to load TLS plugin - disabling SSL support! "
 730                                 "(Reason: %s)\n", dlerror()
 731                 );
 732
 733                 return 1;
 734         }
 735         else
 736         {
 737                 /* resolve functions */
 738                 if (!(conf->tls_init   = dlsym(lib, "uh_tls_ctx_init"))      ||
 739                     !(conf->tls_cert   = dlsym(lib, "uh_tls_ctx_cert"))      ||
 740                     !(conf->tls_key    = dlsym(lib, "uh_tls_ctx_key"))       ||
 741                     !(conf->tls_free   = dlsym(lib, "uh_tls_ctx_free"))      ||
 742                     !(conf->tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
 743                     !(conf->tls_close  = dlsym(lib, "uh_tls_client_close"))  ||
 744                     !(conf->tls_recv   = dlsym(lib, "uh_tls_client_recv"))   ||
 745                     !(conf->tls_send   = dlsym(lib, "uh_tls_client_send")))
 746                 {
 747                         fprintf(stderr,
 748                                         "Error: Failed to lookup required symbols "
 749                                         "in TLS plugin: %s\n", dlerror()
 750                         );
 751                         exit(1);
 752                 }
 753
 754                 /* init SSL context */
 755                 if (!(conf->tls = conf->tls_init()))
 756                 {
 757                         fprintf(stderr, "Error: Failed to initalize SSL context\n");
 758                         exit(1);
 759                 }
 760         }
 761
 762         return 0;
 763 }
 764 #endif
 765
 766 int main (int argc, char **argv)
 767 {
 768         /* master file descriptor list */
 769         fd_set serv_fds;
 770
 771         /* working structs */
 772         struct addrinfo hints;
 773         struct sigaction sa;
 774         struct config conf;
 775
 776         /* maximum file descriptor number */
 777         int cur_fd, max_fd = 0;
 778
 779 #ifdef HAVE_TLS
 780         int tls = 0;
 781         int keys = 0;
 782 #endif
 783
 784         int bound = 0;
 785         int nofork = 0;
 786
 787         /* args */
 788         int opt;
 789         char bind[128];
 790         char *port = NULL;
 791
 792 #ifdef HAVE_LUA
 793         /* library handle */
 794         void *lib;
 795 #endif
 796
 797         FD_ZERO(&serv_fds);
 798
 799         /* handle SIGPIPE, SIGINT, SIGTERM */
 800         sa.sa_flags = 0;
 801         sigemptyset(&sa.sa_mask);
 802
 803         sa.sa_handler = SIG_IGN;
 804         sigaction(SIGPIPE, &sa, NULL);
 805
 806         sa.sa_handler = uh_sigterm;
 807         sigaction(SIGINT,  &sa, NULL);
 808         sigaction(SIGTERM, &sa, NULL);
 809
 810         /* prepare addrinfo hints */
 811         memset(&hints, 0, sizeof(hints));
 812         hints.ai_family   = AF_UNSPEC;
 813         hints.ai_socktype = SOCK_STREAM;
 814         hints.ai_flags    = AI_PASSIVE;
 815
 816         /* parse args */
 817         memset(&conf, 0, sizeof(conf));
 818         memset(bind, 0, sizeof(bind));
 819
 820         uloop_init();
 821
 822         while ((opt = getopt(argc, argv,
 823                                                  "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:n:x:i:t:T:A:u:U:")) > 0)
 824         {
 825                 switch(opt)
 826                 {
 827                         /* [addr:]port */
 828                         case 'p':
 829                         case 's':
 830                                 if ((port = strrchr(optarg, ':')) != NULL)
 831                                 {
 832                                         if ((optarg[0] == '[') && (port > optarg) && (port[-1] == ']'))
 833                                                 memcpy(bind, optarg + 1,
 834                                                         min(sizeof(bind), (int)(port - optarg) - 2));
 835                                         else
 836                                                 memcpy(bind, optarg,
 837                                                         min(sizeof(bind), (int)(port - optarg)));
 838
 839                                         port++;
 840                                 }
 841                                 else
 842                                 {
 843                                         port = optarg;
 844                                 }
 845
 846 #ifdef HAVE_TLS
 847                                 if (opt == 's')
 848                                 {
 849                                         if (uh_inittls(&conf))
 850                                         {
 851                                                 fprintf(stderr,
 852                                                         "Notice: TLS support is disabled, "
 853                                                         "ignoring '-s %s'\n", optarg
 854                                                 );
 855                                                 continue;
 856                                         }
 857
 858                                         tls = 1;
 859                                 }
 860 #endif
 861
 862                                 /* bind sockets */
 863                                 bound += uh_socket_bind(&serv_fds, &max_fd,
 864                                                                                 bind[0] ? bind : NULL,
 865                                                                                 port, &hints, (opt == 's'), &conf);
 866
 867                                 memset(bind, 0, sizeof(bind));
 868                                 break;
 869
 870 #ifdef HAVE_TLS
 871                         /* certificate */
 872                         case 'C':
 873                                 if (!uh_inittls(&conf))
 874                                 {
 875                                         if (conf.tls_cert(conf.tls, optarg) < 1)
 876                                         {
 877                                                 fprintf(stderr,
 878                                                                 "Error: Invalid certificate file given\n");
 879                                                 exit(1);
 880                                         }
 881
 882                                         keys++;
 883                                 }
 884
 885                                 break;
 886
 887                         /* key */
 888                         case 'K':
 889                                 if (!uh_inittls(&conf))
 890                                 {
 891                                         if (conf.tls_key(conf.tls, optarg) < 1)
 892                                         {
 893                                                 fprintf(stderr,
 894                                                                 "Error: Invalid private key file given\n");
 895                                                 exit(1);
 896                                         }
 897
 898                                         keys++;
 899                                 }
 900
 901                                 break;
 902 #endif
 903
 904                         /* docroot */
 905                         case 'h':
 906                                 if (! realpath(optarg, conf.docroot))
 907                                 {
 908                                         fprintf(stderr, "Error: Invalid directory %s: %s\n",
 909                                                         optarg, strerror(errno));
 910                                         exit(1);
 911                                 }
 912                                 break;
 913
 914                         /* error handler */
 915                         case 'E':
 916                                 if ((strlen(optarg) == 0) || (optarg[0] != '/'))
 917                                 {
 918                                         fprintf(stderr, "Error: Invalid error handler: %s\n",
 919                                                         optarg);
 920                                         exit(1);
 921                                 }
 922                                 conf.error_handler = optarg;
 923                                 break;
 924
 925                         /* index file */
 926                         case 'I':
 927                                 if ((strlen(optarg) == 0) || (optarg[0] == '/'))
 928                                 {
 929                                         fprintf(stderr, "Error: Invalid index page: %s\n",
 930                                                         optarg);
 931                                         exit(1);
 932                                 }
 933                                 conf.index_file = optarg;
 934                                 break;
 935
 936                         /* don't follow symlinks */
 937                         case 'S':
 938                                 conf.no_symlinks = 1;
 939                                 break;
 940
 941                         /* don't list directories */
 942                         case 'D':
 943                                 conf.no_dirlists = 1;
 944                                 break;
 945
 946                         case 'R':
 947                                 conf.rfc1918_filter = 1;
 948                                 break;
 949
 950                         case 'n':
 951                                 conf.max_requests = atoi(optarg);
 952                                 break;
 953
 954 #ifdef HAVE_CGI
 955                         /* cgi prefix */
 956                         case 'x':
 957                                 conf.cgi_prefix = optarg;
 958                                 break;
 959
 960                         /* interpreter */
 961                         case 'i':
 962                                 if ((optarg[0] == '.') && (port = strchr(optarg, '=')))
 963                                 {
 964                                         *port++ = 0;
 965                                         uh_interpreter_add(optarg, port);
 966                                 }
 967                                 else
 968                                 {
 969                                         fprintf(stderr, "Error: Invalid interpreter: %s\n",
 970                                                         optarg);
 971                                         exit(1);
 972                                 }
 973                                 break;
 974 #endif
 975
 976 #ifdef HAVE_LUA
 977                         /* lua prefix */
 978                         case 'l':
 979                                 conf.lua_prefix = optarg;
 980                                 break;
 981
 982                         /* lua handler */
 983                         case 'L':
 984                                 conf.lua_handler = optarg;
 985                                 break;
 986 #endif
 987
 988 #ifdef HAVE_UBUS
 989                         /* ubus prefix */
 990                         case 'u':
 991                                 conf.ubus_prefix = optarg;
 992                                 break;
 993
 994                         /* ubus socket */
 995                         case 'U':
 996                                 conf.ubus_socket = optarg;
 997                                 break;
 998 #endif
 999
1000 #if defined(HAVE_CGI) || defined(HAVE_LUA)
1001                         /* script timeout */
1002                         case 't':
1003                                 conf.script_timeout = atoi(optarg);
1004                                 break;
1005 #endif
1006
1007                         /* network timeout */
1008                         case 'T':
1009                                 conf.network_timeout = atoi(optarg);
1010                                 break;
1011
1012                         /* tcp keep-alive */
1013                         case 'A':
1014                                 conf.tcp_keepalive = atoi(optarg);
1015                                 break;
1016
1017                         /* no fork */
1018                         case 'f':
1019                                 nofork = 1;
1020                                 break;
1021
1022                         /* urldecode */
1023                         case 'd':
1024                                 if ((port = malloc(strlen(optarg)+1)) != NULL)
1025                                 {
1026                                         /* "decode" plus to space to retain compat */
1027                                         for (opt = 0; optarg[opt]; opt++)
1028                                                 if (optarg[opt] == '+')
1029                                                         optarg[opt] = ' ';
1030                                         /* opt now contains strlen(optarg) -- no need to re-scan */
1031                                         memset(port, 0, opt+1);
1032                                         if (uh_urldecode(port, opt, optarg, opt) < 0)
1033                                             fprintf(stderr, "uhttpd: invalid encoding\n");
1034
1035                                         printf("%s", port);
1036                                         free(port);
1037                                         exit(0);
1038                                 }
1039                                 break;
1040
1041                         /* basic auth realm */
1042                         case 'r':
1043                                 conf.realm = optarg;
1044                                 break;
1045
1046                         /* md5 crypt */
1047                         case 'm':
1048                                 printf("%s\n", crypt(optarg, "$1$"));
1049                                 exit(0);
1050                                 break;
1051
1052                         /* config file */
1053                         case 'c':
1054                                 conf.file = optarg;
1055                                 break;
1056
1057                         default:
1058                                 fprintf(stderr,
1059                                         "Usage: %s -p [addr:]port [-h docroot]\n"
1060                                         "       -f              Do not fork to background\n"
1061                                         "       -c file         Configuration file, default is '/etc/httpd.conf'\n"
1062                                         "       -p [addr:]port  Bind to specified address and port, multiple allowed\n"
1063 #ifdef HAVE_TLS
1064                                         "       -s [addr:]port  Like -p but provide HTTPS on this port\n"
1065                                         "       -C file         ASN.1 server certificate file\n"
1066                                         "       -K file         ASN.1 server private key file\n"
1067 #endif
1068                                         "       -h directory    Specify the document root, default is '.'\n"
1069                                         "       -E string       Use given virtual URL as 404 error handler\n"
1070                                         "       -I string       Use given filename as index page for directories\n"
1071                                         "       -S              Do not follow symbolic links outside of the docroot\n"
1072                                         "       -D              Do not allow directory listings, send 403 instead\n"
1073                                         "       -R              Enable RFC1918 filter\n"
1074                                         "       -n count        Maximum allowed number of concurrent requests\n"
1075 #ifdef HAVE_LUA
1076                                         "       -l string       URL prefix for Lua handler, default is '/lua'\n"
1077                                         "       -L file         Lua handler script, omit to disable Lua\n"
1078 #endif
1079 #ifdef HAVE_UBUS
1080                                         "       -u string       URL prefix for HTTP/JSON handler, default is '/ubus'\n"
1081                                         "       -U file         Override ubus socket path\n"
1082 #endif
1083 #ifdef HAVE_CGI
1084                                         "       -x string       URL prefix for CGI handler, default is '/cgi-bin'\n"
1085                                         "       -i .ext=path    Use interpreter at path for files with the given extension\n"
1086 #endif
1087 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1088                                         "       -t seconds      CGI, Lua and UBUS script timeout in seconds, default is 60\n"
1089 #endif
1090                                         "       -T seconds      Network timeout in seconds, default is 30\n"
1091                                         "       -d string       URL decode given string\n"
1092                                         "       -r string       Specify basic auth realm\n"
1093                                         "       -m string       MD5 crypt given string\n"
1094                                         "\n", argv[0]
1095                                 );
1096
1097                                 exit(1);
1098                 }
1099         }
1100
1101 #ifdef HAVE_TLS
1102         if ((tls == 1) && (keys < 2))
1103         {
1104                 fprintf(stderr, "Error: Missing private key or certificate file\n");
1105                 exit(1);
1106         }
1107 #endif
1108
1109         if (bound < 1)
1110         {
1111                 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
1112                 exit(1);
1113         }
1114
1115         /* default docroot */
1116         if (!conf.docroot[0] && !realpath(".", conf.docroot))
1117         {
1118                 fprintf(stderr, "Error: Can not determine default document root: %s\n",
1119                         strerror(errno));
1120                 exit(1);
1121         }
1122
1123         /* default realm */
1124         if (!conf.realm)
1125                 conf.realm = "Protected Area";
1126
1127         /* config file */
1128         uh_config_parse(&conf);
1129
1130         /* default max requests */
1131         if (conf.max_requests <= 0)
1132                 conf.max_requests = 3;
1133
1134         /* default network timeout */
1135         if (conf.network_timeout <= 0)
1136                 conf.network_timeout = 30;
1137
1138 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1139         /* default script timeout */
1140         if (conf.script_timeout <= 0)
1141                 conf.script_timeout = 60;
1142 #endif
1143
1144 #ifdef HAVE_CGI
1145         /* default cgi prefix */
1146         if (!conf.cgi_prefix)
1147                 conf.cgi_prefix = "/cgi-bin";
1148 #endif
1149
1150 #ifdef HAVE_LUA
1151         /* load Lua plugin */
1152         if (!(lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)))
1153         {
1154                 fprintf(stderr,
1155                                 "Notice: Unable to load Lua plugin - disabling Lua support! "
1156                                 "(Reason: %s)\n", dlerror());
1157         }
1158         else
1159         {
1160                 /* resolve functions */
1161                 if (!(conf.lua_init    = dlsym(lib, "uh_lua_init"))    ||
1162                     !(conf.lua_close   = dlsym(lib, "uh_lua_close"))   ||
1163                     !(conf.lua_request = dlsym(lib, "uh_lua_request")))
1164                 {
1165                         fprintf(stderr,
1166                                         "Error: Failed to lookup required symbols "
1167                                         "in Lua plugin: %s\n", dlerror()
1168                         );
1169                         exit(1);
1170                 }
1171
1172                 /* init Lua runtime if handler is specified */
1173                 if (conf.lua_handler)
1174                 {
1175                         /* default lua prefix */
1176                         if (!conf.lua_prefix)
1177                                 conf.lua_prefix = "/lua";
1178
1179                         conf.lua_state = conf.lua_init(&conf);
1180                 }
1181         }
1182 #endif
1183
1184 #ifdef HAVE_UBUS
1185         /* load ubus plugin */
1186         if (!(lib = dlopen("uhttpd_ubus.so", RTLD_LAZY | RTLD_GLOBAL)))
1187         {
1188                 fprintf(stderr,
1189                                 "Notice: Unable to load ubus plugin - disabling ubus support! "
1190                                 "(Reason: %s)\n", dlerror());
1191         }
1192         else
1193         {
1194                 /* resolve functions */
1195                 if (!(conf.ubus_init    = dlsym(lib, "uh_ubus_init"))    ||
1196                     !(conf.ubus_close   = dlsym(lib, "uh_ubus_close"))   ||
1197                     !(conf.ubus_request = dlsym(lib, "uh_ubus_request")))
1198                 {
1199                         fprintf(stderr,
1200                                         "Error: Failed to lookup required symbols "
1201                                         "in ubus plugin: %s\n", dlerror()
1202                         );
1203                         exit(1);
1204                 }
1205
1206                 /* default ubus prefix */
1207                 if (!conf.ubus_prefix)
1208                         conf.ubus_prefix = "/ubus";
1209
1210                 conf.ubus_state = conf.ubus_init(&conf);
1211         }
1212 #endif
1213
1214         /* fork (if not disabled) */
1215         if (!nofork)
1216         {
1217                 switch (fork())
1218                 {
1219                         case -1:
1220                                 perror("fork()");
1221                                 exit(1);
1222
1223                         case 0:
1224                                 /* daemon setup */
1225                                 if (chdir("/"))
1226                                         perror("chdir()");
1227
1228                                 if ((cur_fd = open("/dev/null", O_WRONLY)) > -1)
1229                                         dup2(cur_fd, 0);
1230
1231                                 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1232                                         dup2(cur_fd, 1);
1233
1234                                 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1235                                         dup2(cur_fd, 2);
1236
1237                                 break;
1238
1239                         default:
1240                                 exit(0);
1241                 }
1242         }
1243
1244         /* server main loop */
1245         uloop_run();
1246
1247 #ifdef HAVE_LUA
1248         /* destroy the Lua state */
1249         if (conf.lua_state != NULL)
1250                 conf.lua_close(conf.lua_state);
1251 #endif
1252
1253 #ifdef HAVE_UBUS
1254         /* destroy the ubus state */
1255         if (conf.ubus_state != NULL)
1256                 conf.ubus_close(conf.ubus_state);
1257 #endif
1258
1259         return 0;
1260 }