[package] uhttpd: fix wrongly applied sizeof() leading to writing beyound end of...
[openwrt/svn-archive/archive.git] / package / uhttpd / src / uhttpd.c
1 /*
2 * uhttpd - Tiny single-threaded httpd - Main component
3 *
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
5 *
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
9 *
10 * http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18
19 #define _XOPEN_SOURCE 500 /* crypt() */
20
21 #include "uhttpd.h"
22 #include "uhttpd-utils.h"
23 #include "uhttpd-file.h"
24
25 #ifdef HAVE_CGI
26 #include "uhttpd-cgi.h"
27 #endif
28
29 #ifdef HAVE_LUA
30 #include "uhttpd-lua.h"
31 #endif
32
33 #ifdef HAVE_TLS
34 #include "uhttpd-tls.h"
35 #endif
36
37
38 static int run = 1;
39
40 static void uh_sigterm(int sig)
41 {
42 run = 0;
43 }
44
45 static void uh_config_parse(struct config *conf)
46 {
47 FILE *c;
48 char line[512];
49 char *col1 = NULL;
50 char *col2 = NULL;
51 char *eol = NULL;
52
53 const char *path = conf->file ? conf->file : "/etc/httpd.conf";
54
55
56 if ((c = fopen(path, "r")) != NULL)
57 {
58 memset(line, 0, sizeof(line));
59
60 while (fgets(line, sizeof(line) - 1, c))
61 {
62 if ((line[0] == '/') && (strchr(line, ':') != NULL))
63 {
64 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
65 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
66 !(eol = strchr(col2, '\n')) || (*eol++ = 0))
67 {
68 continue;
69 }
70
71 if (!uh_auth_add(line, col1, col2))
72 {
73 fprintf(stderr,
74 "Notice: No password set for user %s, ignoring "
75 "authentication on %s\n", col1, line
76 );
77 }
78 }
79 else if (!strncmp(line, "I:", 2))
80 {
81 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
82 !(eol = strchr(col1, '\n')) || (*eol++ = 0))
83 {
84 continue;
85 }
86
87 conf->index_file = strdup(col1);
88 }
89 else if (!strncmp(line, "E404:", 5))
90 {
91 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
92 !(eol = strchr(col1, '\n')) || (*eol++ = 0))
93 {
94 continue;
95 }
96
97 conf->error_handler = strdup(col1);
98 }
99 #ifdef HAVE_CGI
100 else if ((line[0] == '*') && (strchr(line, ':') != NULL))
101 {
102 if (!(col1 = strchr(line, '*')) || (*col1++ = 0) ||
103 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
104 !(eol = strchr(col2, '\n')) || (*eol++ = 0))
105 {
106 continue;
107 }
108
109 if (!uh_interpreter_add(col1, col2))
110 {
111 fprintf(stderr,
112 "Unable to add interpreter %s for extension %s: "
113 "Out of memory\n", col2, col1
114 );
115 }
116 }
117 #endif
118 }
119
120 fclose(c);
121 }
122 }
123
124 static void uh_listener_cb(struct uloop_fd *u, unsigned int events);
125
126 static int uh_socket_bind(fd_set *serv_fds, int *max_fd,
127 const char *host, const char *port,
128 struct addrinfo *hints, int do_tls,
129 struct config *conf)
130 {
131 int sock = -1;
132 int yes = 1;
133 int status;
134 int bound = 0;
135
136 int tcp_ka_idl, tcp_ka_int, tcp_ka_cnt;
137
138 struct listener *l = NULL;
139 struct addrinfo *addrs = NULL, *p = NULL;
140
141 if ((status = getaddrinfo(host, port, hints, &addrs)) != 0)
142 {
143 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
144 }
145
146 /* try to bind a new socket to each found address */
147 for (p = addrs; p; p = p->ai_next)
148 {
149 /* get the socket */
150 if ((sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1)
151 {
152 perror("socket()");
153 goto error;
154 }
155
156 /* "address already in use" */
157 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)))
158 {
159 perror("setsockopt()");
160 goto error;
161 }
162
163 /* TCP keep-alive */
164 if (conf->tcp_keepalive > 0)
165 {
166 tcp_ka_idl = 1;
167 tcp_ka_cnt = 3;
168 tcp_ka_int = conf->tcp_keepalive;
169
170 if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
171 setsockopt(sock, SOL_TCP, TCP_KEEPIDLE, &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
172 setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
173 setsockopt(sock, SOL_TCP, TCP_KEEPCNT, &tcp_ka_cnt, sizeof(tcp_ka_cnt)))
174 {
175 fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
176 strerror(errno));
177 }
178 }
179
180 /* required to get parallel v4 + v6 working */
181 if (p->ai_family == AF_INET6)
182 {
183 if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1)
184 {
185 perror("setsockopt()");
186 goto error;
187 }
188 }
189
190 /* bind */
191 if (bind(sock, p->ai_addr, p->ai_addrlen) == -1)
192 {
193 perror("bind()");
194 goto error;
195 }
196
197 /* listen */
198 if (listen(sock, UH_LIMIT_CLIENTS) == -1)
199 {
200 perror("listen()");
201 goto error;
202 }
203
204 /* add listener to global list */
205 if (!(l = uh_listener_add(sock, conf)))
206 {
207 fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
208 goto error;
209 }
210
211 #ifdef HAVE_TLS
212 /* init TLS */
213 l->tls = do_tls ? conf->tls : NULL;
214 #endif
215
216 /* add socket to server fd set */
217 FD_SET(sock, serv_fds);
218 fd_cloexec(sock);
219 *max_fd = max(*max_fd, sock);
220
221 l->fd.cb = uh_listener_cb;
222 uloop_fd_add(&l->fd, ULOOP_READ | ULOOP_WRITE);
223
224 bound++;
225 continue;
226
227 error:
228 if (sock > 0)
229 close(sock);
230 }
231
232 freeaddrinfo(addrs);
233
234 return bound;
235 }
236
237 static struct http_request * uh_http_header_parse(struct client *cl,
238 char *buffer, int buflen)
239 {
240 char *method = buffer;
241 char *path = NULL;
242 char *version = NULL;
243
244 char *headers = NULL;
245 char *hdrname = NULL;
246 char *hdrdata = NULL;
247
248 int i;
249 int hdrcount = 0;
250
251 struct http_request *req = &cl->request;
252
253
254 /* terminate initial header line */
255 if ((headers = strfind(buffer, buflen, "\r\n", 2)) != NULL)
256 {
257 buffer[buflen-1] = 0;
258
259 *headers++ = 0;
260 *headers++ = 0;
261
262 /* find request path */
263 if ((path = strchr(buffer, ' ')) != NULL)
264 *path++ = 0;
265
266 /* find http version */
267 if ((path != NULL) && ((version = strchr(path, ' ')) != NULL))
268 *version++ = 0;
269
270
271 /* check method */
272 if (strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST"))
273 {
274 /* invalid method */
275 uh_http_response(cl, 405, "Method Not Allowed");
276 return NULL;
277 }
278 else
279 {
280 switch(method[0])
281 {
282 case 'G':
283 req->method = UH_HTTP_MSG_GET;
284 break;
285
286 case 'H':
287 req->method = UH_HTTP_MSG_HEAD;
288 break;
289
290 case 'P':
291 req->method = UH_HTTP_MSG_POST;
292 break;
293 }
294 }
295
296 /* check path */
297 if (!path || !strlen(path))
298 {
299 /* malformed request */
300 uh_http_response(cl, 400, "Bad Request");
301 return NULL;
302 }
303 else
304 {
305 req->url = path;
306 }
307
308 /* check version */
309 if ((version == NULL) || (strcmp(version, "HTTP/0.9") &&
310 strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")))
311 {
312 /* unsupported version */
313 uh_http_response(cl, 400, "Bad Request");
314 return NULL;
315 }
316 else
317 {
318 req->version = strtof(&version[5], NULL);
319 }
320
321 D("SRV: %s %s HTTP/%.1f\n",
322 (req->method == UH_HTTP_MSG_POST) ? "POST" :
323 (req->method == UH_HTTP_MSG_GET) ? "GET" : "HEAD",
324 req->url, req->version);
325
326 /* process header fields */
327 for (i = (int)(headers - buffer); i < buflen; i++)
328 {
329 /* found eol and have name + value, push out header tuple */
330 if (hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n'))
331 {
332 buffer[i] = 0;
333
334 /* store */
335 if ((hdrcount + 1) < array_size(req->headers))
336 {
337 D("SRV: HTTP: %s: %s\n", hdrname, hdrdata);
338
339 req->headers[hdrcount++] = hdrname;
340 req->headers[hdrcount++] = hdrdata;
341
342 hdrname = hdrdata = NULL;
343 }
344
345 /* too large */
346 else
347 {
348 D("SRV: HTTP: header too big (too many headers)\n");
349 uh_http_response(cl, 413, "Request Entity Too Large");
350 return NULL;
351 }
352 }
353
354 /* have name but no value and found a colon, start of value */
355 else if (hdrname && !hdrdata &&
356 ((i+1) < buflen) && (buffer[i] == ':'))
357 {
358 buffer[i] = 0;
359 hdrdata = &buffer[i+1];
360
361 while ((hdrdata + 1) < (buffer + buflen) && *hdrdata == ' ')
362 hdrdata++;
363 }
364
365 /* have no name and found [A-Za-z], start of name */
366 else if (!hdrname && isalpha(buffer[i]))
367 {
368 hdrname = &buffer[i];
369 }
370 }
371
372 /* valid enough */
373 req->redirect_status = 200;
374 return req;
375 }
376
377 /* Malformed request */
378 uh_http_response(cl, 400, "Bad Request");
379 return NULL;
380 }
381
382
383 static struct http_request * uh_http_header_recv(struct client *cl)
384 {
385 char *bufptr = cl->httpbuf.buf;
386 char *idxptr = NULL;
387
388 ssize_t blen = sizeof(cl->httpbuf.buf)-1;
389 ssize_t rlen = 0;
390
391 memset(bufptr, 0, sizeof(cl->httpbuf.buf));
392
393 while (blen > 0)
394 {
395 /* receive data */
396 ensure_out(rlen = uh_tcp_recv(cl, bufptr, blen));
397 D("SRV: Client(%d) peek(%d) = %d\n", cl->fd.fd, blen, rlen);
398
399 if (rlen <= 0)
400 {
401 D("SRV: Client(%d) dead [%s]\n", cl->fd.fd, strerror(errno));
402 return NULL;
403 }
404
405 blen -= rlen;
406 bufptr += rlen;
407
408 if ((idxptr = strfind(cl->httpbuf.buf, sizeof(cl->httpbuf.buf),
409 "\r\n\r\n", 4)))
410 {
411 /* header read complete ... */
412 cl->httpbuf.ptr = idxptr + 4;
413 cl->httpbuf.len = bufptr - cl->httpbuf.ptr;
414
415 return uh_http_header_parse(cl, cl->httpbuf.buf,
416 (cl->httpbuf.ptr - cl->httpbuf.buf));
417 }
418 }
419
420 /* request entity too large */
421 D("SRV: HTTP: header too big (buffer exceeded)\n");
422 uh_http_response(cl, 413, "Request Entity Too Large");
423
424 out:
425 return NULL;
426 }
427
428 #if defined(HAVE_LUA) || defined(HAVE_CGI)
429 static int uh_path_match(const char *prefix, const char *url)
430 {
431 if ((strstr(url, prefix) == url) &&
432 ((prefix[strlen(prefix)-1] == '/') ||
433 (strlen(url) == strlen(prefix)) ||
434 (url[strlen(prefix)] == '/')))
435 {
436 return 1;
437 }
438
439 return 0;
440 }
441 #endif
442
443 static bool uh_dispatch_request(struct client *cl, struct http_request *req)
444 {
445 struct path_info *pin;
446 struct interpreter *ipr = NULL;
447 struct config *conf = cl->server->conf;
448
449 #ifdef HAVE_LUA
450 /* Lua request? */
451 if (conf->lua_state &&
452 uh_path_match(conf->lua_prefix, req->url))
453 {
454 return conf->lua_request(cl, conf->lua_state);
455 }
456 else
457 #endif
458
459 #ifdef HAVE_UBUS
460 /* ubus request? */
461 if (conf->ubus_state &&
462 uh_path_match(conf->ubus_prefix, req->url))
463 {
464 return conf->ubus_request(cl, conf->ubus_state);
465 }
466 else
467 #endif
468
469 /* dispatch request */
470 if ((pin = uh_path_lookup(cl, req->url)) != NULL)
471 {
472 /* auth ok? */
473 if (!pin->redirected && uh_auth_check(cl, req, pin))
474 {
475 #ifdef HAVE_CGI
476 if (uh_path_match(conf->cgi_prefix, pin->name) ||
477 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
478 {
479 return uh_cgi_request(cl, pin, ipr);
480 }
481 #endif
482 return uh_file_request(cl, pin);
483 }
484 }
485
486 /* 404 - pass 1 */
487 else
488 {
489 /* Try to invoke an error handler */
490 if ((pin = uh_path_lookup(cl, conf->error_handler)) != NULL)
491 {
492 /* auth ok? */
493 if (uh_auth_check(cl, req, pin))
494 {
495 req->redirect_status = 404;
496 #ifdef HAVE_CGI
497 if (uh_path_match(conf->cgi_prefix, pin->name) ||
498 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
499 {
500 return uh_cgi_request(cl, pin, ipr);
501 }
502 #endif
503 return uh_file_request(cl, pin);
504 }
505 }
506
507 /* 404 - pass 2 */
508 else
509 {
510 uh_http_sendhf(cl, 404, "Not Found", "No such file or directory");
511 }
512 }
513
514 return false;
515 }
516
517 static void uh_client_cb(struct uloop_fd *u, unsigned int events);
518
519 static void uh_listener_cb(struct uloop_fd *u, unsigned int events)
520 {
521 int new_fd;
522 struct listener *serv;
523 struct client *cl;
524 struct config *conf;
525
526 serv = container_of(u, struct listener, fd);
527 conf = serv->conf;
528
529 /* defer client if maximum number of requests is exceeded */
530 if (serv->n_clients >= conf->max_requests)
531 return;
532
533 /* handle new connections */
534 if ((new_fd = accept(u->fd, NULL, 0)) != -1)
535 {
536 D("SRV: Server(%d) accept => Client(%d)\n", u->fd, new_fd);
537
538 /* add to global client list */
539 if ((cl = uh_client_add(new_fd, serv)) != NULL)
540 {
541 /* add client socket to global fdset */
542 uloop_fd_add(&cl->fd, ULOOP_READ | ULOOP_WRITE);
543
544 #ifdef HAVE_TLS
545 /* setup client tls context */
546 if (conf->tls)
547 {
548 if (conf->tls_accept(cl) < 1)
549 {
550 D("SRV: Client(%d) SSL handshake failed, drop\n", new_fd);
551
552 /* remove from global client list */
553 uh_client_remove(cl);
554 return;
555 }
556 }
557 #endif
558
559 cl->fd.cb = uh_client_cb;
560 fd_cloexec(new_fd);
561 }
562
563 /* insufficient resources */
564 else
565 {
566 fprintf(stderr, "uh_client_add(): Cannot allocate memory\n");
567 close(new_fd);
568 }
569 }
570 }
571
572 static void uh_child_cb(struct uloop_process *p, int rv)
573 {
574 struct client *cl = container_of(p, struct client, proc);
575
576 D("SRV: Client(%d) child(%d) is dead\n", cl->fd.fd, cl->proc.pid);
577
578 cl->dead = true;
579 cl->fd.eof = true;
580 uh_client_cb(&cl->fd, ULOOP_READ | ULOOP_WRITE);
581 }
582
583 static void uh_kill9_cb(struct uloop_timeout *t)
584 {
585 struct client *cl = container_of(t, struct client, timeout);
586
587 if (!kill(cl->proc.pid, 0))
588 {
589 D("SRV: Client(%d) child(%d) kill(SIGKILL)...\n",
590 cl->fd.fd, cl->proc.pid);
591
592 kill(cl->proc.pid, SIGKILL);
593 }
594 }
595
596 static void uh_timeout_cb(struct uloop_timeout *t)
597 {
598 struct client *cl = container_of(t, struct client, timeout);
599
600 D("SRV: Client(%d) child(%d) timed out\n", cl->fd.fd, cl->proc.pid);
601
602 if (!kill(cl->proc.pid, 0))
603 {
604 D("SRV: Client(%d) child(%d) kill(SIGTERM)...\n",
605 cl->fd.fd, cl->proc.pid);
606
607 kill(cl->proc.pid, SIGTERM);
608
609 cl->timeout.cb = uh_kill9_cb;
610 uloop_timeout_set(&cl->timeout, 1000);
611 }
612 }
613
614 static void uh_client_cb(struct uloop_fd *u, unsigned int events)
615 {
616 int i;
617 struct client *cl;
618 struct config *conf;
619 struct http_request *req;
620
621 cl = container_of(u, struct client, fd);
622 conf = cl->server->conf;
623
624 D("SRV: Client(%d) enter callback\n", u->fd);
625
626 /* undispatched yet */
627 if (!cl->dispatched)
628 {
629 /* we have no headers yet and this was a write event, ignore... */
630 if (!(events & ULOOP_READ))
631 {
632 D("SRV: Client(%d) ignoring write event before headers\n", u->fd);
633 return;
634 }
635
636 /* attempt to receive and parse headers */
637 if (!(req = uh_http_header_recv(cl)))
638 {
639 D("SRV: Client(%d) failed to receive header\n", u->fd);
640 uh_client_shutdown(cl);
641 return;
642 }
643
644 /* process expect headers */
645 foreach_header(i, req->headers)
646 {
647 if (strcasecmp(req->headers[i], "Expect"))
648 continue;
649
650 if (strcasecmp(req->headers[i+1], "100-continue"))
651 {
652 D("SRV: Client(%d) unknown expect header (%s)\n",
653 u->fd, req->headers[i+1]);
654
655 uh_http_response(cl, 417, "Precondition Failed");
656 uh_client_shutdown(cl);
657 return;
658 }
659 else
660 {
661 D("SRV: Client(%d) sending HTTP/1.1 100 Continue\n", u->fd);
662
663 uh_http_sendf(cl, NULL, "HTTP/1.1 100 Continue\r\n\r\n");
664 cl->httpbuf.len = 0; /* client will re-send the body */
665 break;
666 }
667 }
668
669 /* RFC1918 filtering */
670 if (conf->rfc1918_filter &&
671 sa_rfc1918(&cl->peeraddr) && !sa_rfc1918(&cl->servaddr))
672 {
673 uh_http_sendhf(cl, 403, "Forbidden",
674 "Rejected request from RFC1918 IP "
675 "to public server address");
676
677 uh_client_shutdown(cl);
678 return;
679 }
680
681 /* dispatch request */
682 if (!uh_dispatch_request(cl, req))
683 {
684 D("SRV: Client(%d) failed to dispach request\n", u->fd);
685 uh_client_shutdown(cl);
686 return;
687 }
688
689 /* request handler spawned a child, register handler */
690 if (cl->proc.pid)
691 {
692 D("SRV: Client(%d) child(%d) spawned\n", u->fd, cl->proc.pid);
693
694 cl->proc.cb = uh_child_cb;
695 uloop_process_add(&cl->proc);
696
697 cl->timeout.cb = uh_timeout_cb;
698 uloop_timeout_set(&cl->timeout, conf->script_timeout * 1000);
699 }
700
701 /* header processing complete */
702 D("SRV: Client(%d) dispatched\n", u->fd);
703 cl->dispatched = true;
704 return;
705 }
706
707 if (!cl->cb(cl))
708 {
709 D("SRV: Client(%d) response callback signalized EOF\n", u->fd);
710 uh_client_shutdown(cl);
711 return;
712 }
713 }
714
715 #ifdef HAVE_TLS
716 static inline int uh_inittls(struct config *conf)
717 {
718 /* library handle */
719 void *lib;
720
721 /* already loaded */
722 if (conf->tls != NULL)
723 return 0;
724
725 /* load TLS plugin */
726 if (!(lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)))
727 {
728 fprintf(stderr,
729 "Notice: Unable to load TLS plugin - disabling SSL support! "
730 "(Reason: %s)\n", dlerror()
731 );
732
733 return 1;
734 }
735 else
736 {
737 /* resolve functions */
738 if (!(conf->tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
739 !(conf->tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
740 !(conf->tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
741 !(conf->tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
742 !(conf->tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
743 !(conf->tls_close = dlsym(lib, "uh_tls_client_close")) ||
744 !(conf->tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
745 !(conf->tls_send = dlsym(lib, "uh_tls_client_send")))
746 {
747 fprintf(stderr,
748 "Error: Failed to lookup required symbols "
749 "in TLS plugin: %s\n", dlerror()
750 );
751 exit(1);
752 }
753
754 /* init SSL context */
755 if (!(conf->tls = conf->tls_init()))
756 {
757 fprintf(stderr, "Error: Failed to initalize SSL context\n");
758 exit(1);
759 }
760 }
761
762 return 0;
763 }
764 #endif
765
766 int main (int argc, char **argv)
767 {
768 /* master file descriptor list */
769 fd_set serv_fds;
770
771 /* working structs */
772 struct addrinfo hints;
773 struct sigaction sa;
774 struct config conf;
775
776 /* maximum file descriptor number */
777 int cur_fd, max_fd = 0;
778
779 #ifdef HAVE_TLS
780 int tls = 0;
781 int keys = 0;
782 #endif
783
784 int bound = 0;
785 int nofork = 0;
786
787 /* args */
788 int opt;
789 char bind[128];
790 char *port = NULL;
791
792 #ifdef HAVE_LUA
793 /* library handle */
794 void *lib;
795 #endif
796
797 FD_ZERO(&serv_fds);
798
799 /* handle SIGPIPE, SIGINT, SIGTERM */
800 sa.sa_flags = 0;
801 sigemptyset(&sa.sa_mask);
802
803 sa.sa_handler = SIG_IGN;
804 sigaction(SIGPIPE, &sa, NULL);
805
806 sa.sa_handler = uh_sigterm;
807 sigaction(SIGINT, &sa, NULL);
808 sigaction(SIGTERM, &sa, NULL);
809
810 /* prepare addrinfo hints */
811 memset(&hints, 0, sizeof(hints));
812 hints.ai_family = AF_UNSPEC;
813 hints.ai_socktype = SOCK_STREAM;
814 hints.ai_flags = AI_PASSIVE;
815
816 /* parse args */
817 memset(&conf, 0, sizeof(conf));
818 memset(bind, 0, sizeof(bind));
819
820 uloop_init();
821
822 while ((opt = getopt(argc, argv,
823 "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:n:x:i:t:T:A:u:U:")) > 0)
824 {
825 switch(opt)
826 {
827 /* [addr:]port */
828 case 'p':
829 case 's':
830 if ((port = strrchr(optarg, ':')) != NULL)
831 {
832 if ((optarg[0] == '[') && (port > optarg) && (port[-1] == ']'))
833 memcpy(bind, optarg + 1,
834 min(sizeof(bind), (int)(port - optarg) - 2));
835 else
836 memcpy(bind, optarg,
837 min(sizeof(bind), (int)(port - optarg)));
838
839 port++;
840 }
841 else
842 {
843 port = optarg;
844 }
845
846 #ifdef HAVE_TLS
847 if (opt == 's')
848 {
849 if (uh_inittls(&conf))
850 {
851 fprintf(stderr,
852 "Notice: TLS support is disabled, "
853 "ignoring '-s %s'\n", optarg
854 );
855 continue;
856 }
857
858 tls = 1;
859 }
860 #endif
861
862 /* bind sockets */
863 bound += uh_socket_bind(&serv_fds, &max_fd,
864 bind[0] ? bind : NULL,
865 port, &hints, (opt == 's'), &conf);
866
867 memset(bind, 0, sizeof(bind));
868 break;
869
870 #ifdef HAVE_TLS
871 /* certificate */
872 case 'C':
873 if (!uh_inittls(&conf))
874 {
875 if (conf.tls_cert(conf.tls, optarg) < 1)
876 {
877 fprintf(stderr,
878 "Error: Invalid certificate file given\n");
879 exit(1);
880 }
881
882 keys++;
883 }
884
885 break;
886
887 /* key */
888 case 'K':
889 if (!uh_inittls(&conf))
890 {
891 if (conf.tls_key(conf.tls, optarg) < 1)
892 {
893 fprintf(stderr,
894 "Error: Invalid private key file given\n");
895 exit(1);
896 }
897
898 keys++;
899 }
900
901 break;
902 #endif
903
904 /* docroot */
905 case 'h':
906 if (! realpath(optarg, conf.docroot))
907 {
908 fprintf(stderr, "Error: Invalid directory %s: %s\n",
909 optarg, strerror(errno));
910 exit(1);
911 }
912 break;
913
914 /* error handler */
915 case 'E':
916 if ((strlen(optarg) == 0) || (optarg[0] != '/'))
917 {
918 fprintf(stderr, "Error: Invalid error handler: %s\n",
919 optarg);
920 exit(1);
921 }
922 conf.error_handler = optarg;
923 break;
924
925 /* index file */
926 case 'I':
927 if ((strlen(optarg) == 0) || (optarg[0] == '/'))
928 {
929 fprintf(stderr, "Error: Invalid index page: %s\n",
930 optarg);
931 exit(1);
932 }
933 conf.index_file = optarg;
934 break;
935
936 /* don't follow symlinks */
937 case 'S':
938 conf.no_symlinks = 1;
939 break;
940
941 /* don't list directories */
942 case 'D':
943 conf.no_dirlists = 1;
944 break;
945
946 case 'R':
947 conf.rfc1918_filter = 1;
948 break;
949
950 case 'n':
951 conf.max_requests = atoi(optarg);
952 break;
953
954 #ifdef HAVE_CGI
955 /* cgi prefix */
956 case 'x':
957 conf.cgi_prefix = optarg;
958 break;
959
960 /* interpreter */
961 case 'i':
962 if ((optarg[0] == '.') && (port = strchr(optarg, '=')))
963 {
964 *port++ = 0;
965 uh_interpreter_add(optarg, port);
966 }
967 else
968 {
969 fprintf(stderr, "Error: Invalid interpreter: %s\n",
970 optarg);
971 exit(1);
972 }
973 break;
974 #endif
975
976 #ifdef HAVE_LUA
977 /* lua prefix */
978 case 'l':
979 conf.lua_prefix = optarg;
980 break;
981
982 /* lua handler */
983 case 'L':
984 conf.lua_handler = optarg;
985 break;
986 #endif
987
988 #ifdef HAVE_UBUS
989 /* ubus prefix */
990 case 'u':
991 conf.ubus_prefix = optarg;
992 break;
993
994 /* ubus socket */
995 case 'U':
996 conf.ubus_socket = optarg;
997 break;
998 #endif
999
1000 #if defined(HAVE_CGI) || defined(HAVE_LUA)
1001 /* script timeout */
1002 case 't':
1003 conf.script_timeout = atoi(optarg);
1004 break;
1005 #endif
1006
1007 /* network timeout */
1008 case 'T':
1009 conf.network_timeout = atoi(optarg);
1010 break;
1011
1012 /* tcp keep-alive */
1013 case 'A':
1014 conf.tcp_keepalive = atoi(optarg);
1015 break;
1016
1017 /* no fork */
1018 case 'f':
1019 nofork = 1;
1020 break;
1021
1022 /* urldecode */
1023 case 'd':
1024 if ((port = malloc(strlen(optarg)+1)) != NULL)
1025 {
1026 /* "decode" plus to space to retain compat */
1027 for (opt = 0; optarg[opt]; opt++)
1028 if (optarg[opt] == '+')
1029 optarg[opt] = ' ';
1030 /* opt now contains strlen(optarg) -- no need to re-scan */
1031 memset(port, 0, opt+1);
1032 if (uh_urldecode(port, opt, optarg, opt) < 0)
1033 fprintf(stderr, "uhttpd: invalid encoding\n");
1034
1035 printf("%s", port);
1036 free(port);
1037 exit(0);
1038 }
1039 break;
1040
1041 /* basic auth realm */
1042 case 'r':
1043 conf.realm = optarg;
1044 break;
1045
1046 /* md5 crypt */
1047 case 'm':
1048 printf("%s\n", crypt(optarg, "$1$"));
1049 exit(0);
1050 break;
1051
1052 /* config file */
1053 case 'c':
1054 conf.file = optarg;
1055 break;
1056
1057 default:
1058 fprintf(stderr,
1059 "Usage: %s -p [addr:]port [-h docroot]\n"
1060 " -f Do not fork to background\n"
1061 " -c file Configuration file, default is '/etc/httpd.conf'\n"
1062 " -p [addr:]port Bind to specified address and port, multiple allowed\n"
1063 #ifdef HAVE_TLS
1064 " -s [addr:]port Like -p but provide HTTPS on this port\n"
1065 " -C file ASN.1 server certificate file\n"
1066 " -K file ASN.1 server private key file\n"
1067 #endif
1068 " -h directory Specify the document root, default is '.'\n"
1069 " -E string Use given virtual URL as 404 error handler\n"
1070 " -I string Use given filename as index page for directories\n"
1071 " -S Do not follow symbolic links outside of the docroot\n"
1072 " -D Do not allow directory listings, send 403 instead\n"
1073 " -R Enable RFC1918 filter\n"
1074 " -n count Maximum allowed number of concurrent requests\n"
1075 #ifdef HAVE_LUA
1076 " -l string URL prefix for Lua handler, default is '/lua'\n"
1077 " -L file Lua handler script, omit to disable Lua\n"
1078 #endif
1079 #ifdef HAVE_UBUS
1080 " -u string URL prefix for HTTP/JSON handler, default is '/ubus'\n"
1081 " -U file Override ubus socket path\n"
1082 #endif
1083 #ifdef HAVE_CGI
1084 " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
1085 " -i .ext=path Use interpreter at path for files with the given extension\n"
1086 #endif
1087 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1088 " -t seconds CGI, Lua and UBUS script timeout in seconds, default is 60\n"
1089 #endif
1090 " -T seconds Network timeout in seconds, default is 30\n"
1091 " -d string URL decode given string\n"
1092 " -r string Specify basic auth realm\n"
1093 " -m string MD5 crypt given string\n"
1094 "\n", argv[0]
1095 );
1096
1097 exit(1);
1098 }
1099 }
1100
1101 #ifdef HAVE_TLS
1102 if ((tls == 1) && (keys < 2))
1103 {
1104 fprintf(stderr, "Error: Missing private key or certificate file\n");
1105 exit(1);
1106 }
1107 #endif
1108
1109 if (bound < 1)
1110 {
1111 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
1112 exit(1);
1113 }
1114
1115 /* default docroot */
1116 if (!conf.docroot[0] && !realpath(".", conf.docroot))
1117 {
1118 fprintf(stderr, "Error: Can not determine default document root: %s\n",
1119 strerror(errno));
1120 exit(1);
1121 }
1122
1123 /* default realm */
1124 if (!conf.realm)
1125 conf.realm = "Protected Area";
1126
1127 /* config file */
1128 uh_config_parse(&conf);
1129
1130 /* default max requests */
1131 if (conf.max_requests <= 0)
1132 conf.max_requests = 3;
1133
1134 /* default network timeout */
1135 if (conf.network_timeout <= 0)
1136 conf.network_timeout = 30;
1137
1138 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1139 /* default script timeout */
1140 if (conf.script_timeout <= 0)
1141 conf.script_timeout = 60;
1142 #endif
1143
1144 #ifdef HAVE_CGI
1145 /* default cgi prefix */
1146 if (!conf.cgi_prefix)
1147 conf.cgi_prefix = "/cgi-bin";
1148 #endif
1149
1150 #ifdef HAVE_LUA
1151 /* load Lua plugin */
1152 if (!(lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)))
1153 {
1154 fprintf(stderr,
1155 "Notice: Unable to load Lua plugin - disabling Lua support! "
1156 "(Reason: %s)\n", dlerror());
1157 }
1158 else
1159 {
1160 /* resolve functions */
1161 if (!(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
1162 !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
1163 !(conf.lua_request = dlsym(lib, "uh_lua_request")))
1164 {
1165 fprintf(stderr,
1166 "Error: Failed to lookup required symbols "
1167 "in Lua plugin: %s\n", dlerror()
1168 );
1169 exit(1);
1170 }
1171
1172 /* init Lua runtime if handler is specified */
1173 if (conf.lua_handler)
1174 {
1175 /* default lua prefix */
1176 if (!conf.lua_prefix)
1177 conf.lua_prefix = "/lua";
1178
1179 conf.lua_state = conf.lua_init(&conf);
1180 }
1181 }
1182 #endif
1183
1184 #ifdef HAVE_UBUS
1185 /* load ubus plugin */
1186 if (!(lib = dlopen("uhttpd_ubus.so", RTLD_LAZY | RTLD_GLOBAL)))
1187 {
1188 fprintf(stderr,
1189 "Notice: Unable to load ubus plugin - disabling ubus support! "
1190 "(Reason: %s)\n", dlerror());
1191 }
1192 else
1193 {
1194 /* resolve functions */
1195 if (!(conf.ubus_init = dlsym(lib, "uh_ubus_init")) ||
1196 !(conf.ubus_close = dlsym(lib, "uh_ubus_close")) ||
1197 !(conf.ubus_request = dlsym(lib, "uh_ubus_request")))
1198 {
1199 fprintf(stderr,
1200 "Error: Failed to lookup required symbols "
1201 "in ubus plugin: %s\n", dlerror()
1202 );
1203 exit(1);
1204 }
1205
1206 /* default ubus prefix */
1207 if (!conf.ubus_prefix)
1208 conf.ubus_prefix = "/ubus";
1209
1210 conf.ubus_state = conf.ubus_init(&conf);
1211 }
1212 #endif
1213
1214 /* fork (if not disabled) */
1215 if (!nofork)
1216 {
1217 switch (fork())
1218 {
1219 case -1:
1220 perror("fork()");
1221 exit(1);
1222
1223 case 0:
1224 /* daemon setup */
1225 if (chdir("/"))
1226 perror("chdir()");
1227
1228 if ((cur_fd = open("/dev/null", O_WRONLY)) > -1)
1229 dup2(cur_fd, 0);
1230
1231 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1232 dup2(cur_fd, 1);
1233
1234 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1235 dup2(cur_fd, 2);
1236
1237 break;
1238
1239 default:
1240 exit(0);
1241 }
1242 }
1243
1244 /* server main loop */
1245 uloop_run();
1246
1247 #ifdef HAVE_LUA
1248 /* destroy the Lua state */
1249 if (conf.lua_state != NULL)
1250 conf.lua_close(conf.lua_state);
1251 #endif
1252
1253 #ifdef HAVE_UBUS
1254 /* destroy the ubus state */
1255 if (conf.ubus_state != NULL)
1256 conf.ubus_close(conf.ubus_state);
1257 #endif
1258
1259 return 0;
1260 }