[package] uhttpd: do not subscribe to epoll write events
[openwrt/svn-archive/archive.git] / package / uhttpd / src / uhttpd.c
1 /*
2 * uhttpd - Tiny single-threaded httpd - Main component
3 *
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
5 *
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
9 *
10 * http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18
19 #define _XOPEN_SOURCE 500 /* crypt() */
20
21 #include "uhttpd.h"
22 #include "uhttpd-utils.h"
23 #include "uhttpd-file.h"
24
25 #ifdef HAVE_CGI
26 #include "uhttpd-cgi.h"
27 #endif
28
29 #ifdef HAVE_LUA
30 #include "uhttpd-lua.h"
31 #endif
32
33 #ifdef HAVE_TLS
34 #include "uhttpd-tls.h"
35 #endif
36
37
38 static int run = 1;
39
40 static void uh_sigterm(int sig)
41 {
42 run = 0;
43 }
44
45 static void uh_config_parse(struct config *conf)
46 {
47 FILE *c;
48 char line[512];
49 char *col1 = NULL;
50 char *col2 = NULL;
51 char *eol = NULL;
52
53 const char *path = conf->file ? conf->file : "/etc/httpd.conf";
54
55
56 if ((c = fopen(path, "r")) != NULL)
57 {
58 memset(line, 0, sizeof(line));
59
60 while (fgets(line, sizeof(line) - 1, c))
61 {
62 if ((line[0] == '/') && (strchr(line, ':') != NULL))
63 {
64 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
65 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
66 !(eol = strchr(col2, '\n')) || (*eol++ = 0))
67 {
68 continue;
69 }
70
71 if (!uh_auth_add(line, col1, col2))
72 {
73 fprintf(stderr,
74 "Notice: No password set for user %s, ignoring "
75 "authentication on %s\n", col1, line
76 );
77 }
78 }
79 else if (!strncmp(line, "I:", 2))
80 {
81 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
82 !(eol = strchr(col1, '\n')) || (*eol++ = 0))
83 {
84 continue;
85 }
86
87 conf->index_file = strdup(col1);
88 }
89 else if (!strncmp(line, "E404:", 5))
90 {
91 if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
92 !(eol = strchr(col1, '\n')) || (*eol++ = 0))
93 {
94 continue;
95 }
96
97 conf->error_handler = strdup(col1);
98 }
99 #ifdef HAVE_CGI
100 else if ((line[0] == '*') && (strchr(line, ':') != NULL))
101 {
102 if (!(col1 = strchr(line, '*')) || (*col1++ = 0) ||
103 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
104 !(eol = strchr(col2, '\n')) || (*eol++ = 0))
105 {
106 continue;
107 }
108
109 if (!uh_interpreter_add(col1, col2))
110 {
111 fprintf(stderr,
112 "Unable to add interpreter %s for extension %s: "
113 "Out of memory\n", col2, col1
114 );
115 }
116 }
117 #endif
118 }
119
120 fclose(c);
121 }
122 }
123
124 static void uh_listener_cb(struct uloop_fd *u, unsigned int events);
125
126 static int uh_socket_bind(fd_set *serv_fds, int *max_fd,
127 const char *host, const char *port,
128 struct addrinfo *hints, int do_tls,
129 struct config *conf)
130 {
131 int sock = -1;
132 int yes = 1;
133 int status;
134 int bound = 0;
135
136 int tcp_ka_idl, tcp_ka_int, tcp_ka_cnt;
137
138 struct listener *l = NULL;
139 struct addrinfo *addrs = NULL, *p = NULL;
140
141 if ((status = getaddrinfo(host, port, hints, &addrs)) != 0)
142 {
143 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
144 }
145
146 /* try to bind a new socket to each found address */
147 for (p = addrs; p; p = p->ai_next)
148 {
149 /* get the socket */
150 if ((sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1)
151 {
152 perror("socket()");
153 goto error;
154 }
155
156 /* "address already in use" */
157 if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)))
158 {
159 perror("setsockopt()");
160 goto error;
161 }
162
163 /* TCP keep-alive */
164 if (conf->tcp_keepalive > 0)
165 {
166 tcp_ka_idl = 1;
167 tcp_ka_cnt = 3;
168 tcp_ka_int = conf->tcp_keepalive;
169
170 if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
171 setsockopt(sock, SOL_TCP, TCP_KEEPIDLE, &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
172 setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
173 setsockopt(sock, SOL_TCP, TCP_KEEPCNT, &tcp_ka_cnt, sizeof(tcp_ka_cnt)))
174 {
175 fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
176 strerror(errno));
177 }
178 }
179
180 /* required to get parallel v4 + v6 working */
181 if (p->ai_family == AF_INET6)
182 {
183 if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1)
184 {
185 perror("setsockopt()");
186 goto error;
187 }
188 }
189
190 /* bind */
191 if (bind(sock, p->ai_addr, p->ai_addrlen) == -1)
192 {
193 perror("bind()");
194 goto error;
195 }
196
197 /* listen */
198 if (listen(sock, UH_LIMIT_CLIENTS) == -1)
199 {
200 perror("listen()");
201 goto error;
202 }
203
204 /* add listener to global list */
205 if (!(l = uh_listener_add(sock, conf)))
206 {
207 fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
208 goto error;
209 }
210
211 #ifdef HAVE_TLS
212 /* init TLS */
213 l->tls = do_tls ? conf->tls : NULL;
214 #endif
215
216 /* add socket to server fd set */
217 FD_SET(sock, serv_fds);
218 fd_cloexec(sock);
219 *max_fd = max(*max_fd, sock);
220
221 l->fd.cb = uh_listener_cb;
222 uloop_fd_add(&l->fd, ULOOP_READ);
223
224 bound++;
225 continue;
226
227 error:
228 if (sock > 0)
229 close(sock);
230 }
231
232 freeaddrinfo(addrs);
233
234 return bound;
235 }
236
237 static struct http_request * uh_http_header_parse(struct client *cl,
238 char *buffer, int buflen)
239 {
240 char *method = buffer;
241 char *path = NULL;
242 char *version = NULL;
243
244 char *headers = NULL;
245 char *hdrname = NULL;
246 char *hdrdata = NULL;
247
248 int i;
249 int hdrcount = 0;
250
251 struct http_request *req = &cl->request;
252
253
254 /* terminate initial header line */
255 if ((headers = strfind(buffer, buflen, "\r\n", 2)) != NULL)
256 {
257 buffer[buflen-1] = 0;
258
259 *headers++ = 0;
260 *headers++ = 0;
261
262 /* find request path */
263 if ((path = strchr(buffer, ' ')) != NULL)
264 *path++ = 0;
265
266 /* find http version */
267 if ((path != NULL) && ((version = strchr(path, ' ')) != NULL))
268 *version++ = 0;
269
270
271 /* check method */
272 if (strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST"))
273 {
274 /* invalid method */
275 uh_http_response(cl, 405, "Method Not Allowed");
276 return NULL;
277 }
278 else
279 {
280 switch(method[0])
281 {
282 case 'G':
283 req->method = UH_HTTP_MSG_GET;
284 break;
285
286 case 'H':
287 req->method = UH_HTTP_MSG_HEAD;
288 break;
289
290 case 'P':
291 req->method = UH_HTTP_MSG_POST;
292 break;
293 }
294 }
295
296 /* check path */
297 if (!path || !strlen(path))
298 {
299 /* malformed request */
300 uh_http_response(cl, 400, "Bad Request");
301 return NULL;
302 }
303 else
304 {
305 req->url = path;
306 }
307
308 /* check version */
309 if ((version == NULL) || (strcmp(version, "HTTP/0.9") &&
310 strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")))
311 {
312 /* unsupported version */
313 uh_http_response(cl, 400, "Bad Request");
314 return NULL;
315 }
316 else
317 {
318 req->version = strtof(&version[5], NULL);
319 }
320
321 D("SRV: %s %s HTTP/%.1f\n",
322 (req->method == UH_HTTP_MSG_POST) ? "POST" :
323 (req->method == UH_HTTP_MSG_GET) ? "GET" : "HEAD",
324 req->url, req->version);
325
326 /* process header fields */
327 for (i = (int)(headers - buffer); i < buflen; i++)
328 {
329 /* found eol and have name + value, push out header tuple */
330 if (hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n'))
331 {
332 buffer[i] = 0;
333
334 /* store */
335 if ((hdrcount + 1) < array_size(req->headers))
336 {
337 D("SRV: HTTP: %s: %s\n", hdrname, hdrdata);
338
339 req->headers[hdrcount++] = hdrname;
340 req->headers[hdrcount++] = hdrdata;
341
342 hdrname = hdrdata = NULL;
343 }
344
345 /* too large */
346 else
347 {
348 D("SRV: HTTP: header too big (too many headers)\n");
349 uh_http_response(cl, 413, "Request Entity Too Large");
350 return NULL;
351 }
352 }
353
354 /* have name but no value and found a colon, start of value */
355 else if (hdrname && !hdrdata &&
356 ((i+1) < buflen) && (buffer[i] == ':'))
357 {
358 buffer[i] = 0;
359 hdrdata = &buffer[i+1];
360
361 while ((hdrdata + 1) < (buffer + buflen) && *hdrdata == ' ')
362 hdrdata++;
363 }
364
365 /* have no name and found [A-Za-z], start of name */
366 else if (!hdrname && isalpha(buffer[i]))
367 {
368 hdrname = &buffer[i];
369 }
370 }
371
372 /* valid enough */
373 req->redirect_status = 200;
374 return req;
375 }
376
377 /* Malformed request */
378 uh_http_response(cl, 400, "Bad Request");
379 return NULL;
380 }
381
382
383 static struct http_request * uh_http_header_recv(struct client *cl)
384 {
385 char *bufptr = cl->httpbuf.buf;
386 char *idxptr = NULL;
387
388 ssize_t blen = sizeof(cl->httpbuf.buf)-1;
389 ssize_t rlen = 0;
390
391 memset(bufptr, 0, sizeof(cl->httpbuf.buf));
392
393 while (blen > 0)
394 {
395 /* receive data */
396 ensure_out(rlen = uh_tcp_recv(cl, bufptr, blen));
397 D("SRV: Client(%d) peek(%d) = %d\n", cl->fd.fd, blen, rlen);
398
399 if (rlen <= 0)
400 {
401 D("SRV: Client(%d) dead [%s]\n", cl->fd.fd, strerror(errno));
402 return NULL;
403 }
404
405 blen -= rlen;
406 bufptr += rlen;
407
408 if ((idxptr = strfind(cl->httpbuf.buf, sizeof(cl->httpbuf.buf),
409 "\r\n\r\n", 4)))
410 {
411 /* header read complete ... */
412 cl->httpbuf.ptr = idxptr + 4;
413 cl->httpbuf.len = bufptr - cl->httpbuf.ptr;
414
415 return uh_http_header_parse(cl, cl->httpbuf.buf,
416 (cl->httpbuf.ptr - cl->httpbuf.buf));
417 }
418 }
419
420 /* request entity too large */
421 D("SRV: HTTP: header too big (buffer exceeded)\n");
422 uh_http_response(cl, 413, "Request Entity Too Large");
423
424 out:
425 return NULL;
426 }
427
428 #if defined(HAVE_LUA) || defined(HAVE_CGI)
429 static int uh_path_match(const char *prefix, const char *url)
430 {
431 if ((strstr(url, prefix) == url) &&
432 ((prefix[strlen(prefix)-1] == '/') ||
433 (strlen(url) == strlen(prefix)) ||
434 (url[strlen(prefix)] == '/')))
435 {
436 return 1;
437 }
438
439 return 0;
440 }
441 #endif
442
443 static bool uh_dispatch_request(struct client *cl, struct http_request *req)
444 {
445 struct path_info *pin;
446 struct interpreter *ipr = NULL;
447 struct config *conf = cl->server->conf;
448
449 #ifdef HAVE_LUA
450 /* Lua request? */
451 if (conf->lua_state &&
452 uh_path_match(conf->lua_prefix, req->url))
453 {
454 return conf->lua_request(cl, conf->lua_state);
455 }
456 else
457 #endif
458
459 #ifdef HAVE_UBUS
460 /* ubus request? */
461 if (conf->ubus_state &&
462 uh_path_match(conf->ubus_prefix, req->url))
463 {
464 return conf->ubus_request(cl, conf->ubus_state);
465 }
466 else
467 #endif
468
469 /* dispatch request */
470 if ((pin = uh_path_lookup(cl, req->url)) != NULL)
471 {
472 /* auth ok? */
473 if (!pin->redirected && uh_auth_check(cl, req, pin))
474 {
475 #ifdef HAVE_CGI
476 if (uh_path_match(conf->cgi_prefix, pin->name) ||
477 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
478 {
479 return uh_cgi_request(cl, pin, ipr);
480 }
481 #endif
482 return uh_file_request(cl, pin);
483 }
484 }
485
486 /* 404 - pass 1 */
487 else
488 {
489 /* Try to invoke an error handler */
490 if ((pin = uh_path_lookup(cl, conf->error_handler)) != NULL)
491 {
492 /* auth ok? */
493 if (uh_auth_check(cl, req, pin))
494 {
495 req->redirect_status = 404;
496 #ifdef HAVE_CGI
497 if (uh_path_match(conf->cgi_prefix, pin->name) ||
498 (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
499 {
500 return uh_cgi_request(cl, pin, ipr);
501 }
502 #endif
503 return uh_file_request(cl, pin);
504 }
505 }
506
507 /* 404 - pass 2 */
508 else
509 {
510 uh_http_sendhf(cl, 404, "Not Found", "No such file or directory");
511 }
512 }
513
514 return false;
515 }
516
517 static void uh_client_cb(struct uloop_fd *u, unsigned int events);
518
519 static void uh_listener_cb(struct uloop_fd *u, unsigned int events)
520 {
521 int new_fd;
522 struct listener *serv;
523 struct client *cl;
524 struct config *conf;
525
526 serv = container_of(u, struct listener, fd);
527 conf = serv->conf;
528
529 /* defer client if maximum number of requests is exceeded */
530 if (serv->n_clients >= conf->max_requests)
531 return;
532
533 /* handle new connections */
534 if ((new_fd = accept(u->fd, NULL, 0)) != -1)
535 {
536 D("SRV: Server(%d) accept => Client(%d)\n", u->fd, new_fd);
537
538 /* add to global client list */
539 if ((cl = uh_client_add(new_fd, serv)) != NULL)
540 {
541 /* add client socket to global fdset */
542 uloop_fd_add(&cl->fd, ULOOP_READ);
543
544 #ifdef HAVE_TLS
545 /* setup client tls context */
546 if (conf->tls)
547 {
548 if (conf->tls_accept(cl) < 1)
549 {
550 D("SRV: Client(%d) SSL handshake failed, drop\n", new_fd);
551
552 /* remove from global client list */
553 uh_client_remove(cl);
554 return;
555 }
556 }
557 #endif
558
559 cl->fd.cb = uh_client_cb;
560 fd_cloexec(new_fd);
561 }
562
563 /* insufficient resources */
564 else
565 {
566 fprintf(stderr, "uh_client_add(): Cannot allocate memory\n");
567 close(new_fd);
568 }
569 }
570 }
571
572 static void uh_pipe_cb(struct uloop_fd *u, unsigned int events)
573 {
574 struct client *cl = container_of(u, struct client, pipe);
575
576 D("SRV: Client(%d) pipe(%d) readable\n", cl->fd.fd, cl->pipe.fd);
577
578 uh_client_cb(&cl->fd, ULOOP_WRITE);
579 }
580
581 static void uh_child_cb(struct uloop_process *p, int rv)
582 {
583 struct client *cl = container_of(p, struct client, proc);
584
585 D("SRV: Client(%d) child(%d) is dead\n", cl->fd.fd, cl->proc.pid);
586
587 cl->dead = true;
588 cl->fd.eof = true;
589 uh_client_cb(&cl->fd, ULOOP_READ | ULOOP_WRITE);
590 }
591
592 static void uh_kill9_cb(struct uloop_timeout *t)
593 {
594 struct client *cl = container_of(t, struct client, timeout);
595
596 if (!kill(cl->proc.pid, 0))
597 {
598 D("SRV: Client(%d) child(%d) kill(SIGKILL)...\n",
599 cl->fd.fd, cl->proc.pid);
600
601 kill(cl->proc.pid, SIGKILL);
602 }
603 }
604
605 static void uh_timeout_cb(struct uloop_timeout *t)
606 {
607 struct client *cl = container_of(t, struct client, timeout);
608
609 D("SRV: Client(%d) child(%d) timed out\n", cl->fd.fd, cl->proc.pid);
610
611 if (!kill(cl->proc.pid, 0))
612 {
613 D("SRV: Client(%d) child(%d) kill(SIGTERM)...\n",
614 cl->fd.fd, cl->proc.pid);
615
616 kill(cl->proc.pid, SIGTERM);
617
618 cl->timeout.cb = uh_kill9_cb;
619 uloop_timeout_set(&cl->timeout, 1000);
620 }
621 }
622
623 static void uh_client_cb(struct uloop_fd *u, unsigned int events)
624 {
625 int i;
626 struct client *cl;
627 struct config *conf;
628 struct http_request *req;
629
630 cl = container_of(u, struct client, fd);
631 conf = cl->server->conf;
632
633 D("SRV: Client(%d) enter callback\n", u->fd);
634
635 /* undispatched yet */
636 if (!cl->dispatched)
637 {
638 /* we have no headers yet and this was a write event, ignore... */
639 if (!(events & ULOOP_READ))
640 {
641 D("SRV: Client(%d) ignoring write event before headers\n", u->fd);
642 return;
643 }
644
645 /* attempt to receive and parse headers */
646 if (!(req = uh_http_header_recv(cl)))
647 {
648 D("SRV: Client(%d) failed to receive header\n", u->fd);
649 uh_client_shutdown(cl);
650 return;
651 }
652
653 /* process expect headers */
654 foreach_header(i, req->headers)
655 {
656 if (strcasecmp(req->headers[i], "Expect"))
657 continue;
658
659 if (strcasecmp(req->headers[i+1], "100-continue"))
660 {
661 D("SRV: Client(%d) unknown expect header (%s)\n",
662 u->fd, req->headers[i+1]);
663
664 uh_http_response(cl, 417, "Precondition Failed");
665 uh_client_shutdown(cl);
666 return;
667 }
668 else
669 {
670 D("SRV: Client(%d) sending HTTP/1.1 100 Continue\n", u->fd);
671
672 uh_http_sendf(cl, NULL, "HTTP/1.1 100 Continue\r\n\r\n");
673 cl->httpbuf.len = 0; /* client will re-send the body */
674 break;
675 }
676 }
677
678 /* RFC1918 filtering */
679 if (conf->rfc1918_filter &&
680 sa_rfc1918(&cl->peeraddr) && !sa_rfc1918(&cl->servaddr))
681 {
682 uh_http_sendhf(cl, 403, "Forbidden",
683 "Rejected request from RFC1918 IP "
684 "to public server address");
685
686 uh_client_shutdown(cl);
687 return;
688 }
689
690 /* dispatch request */
691 if (!uh_dispatch_request(cl, req))
692 {
693 D("SRV: Client(%d) failed to dispach request\n", u->fd);
694 uh_client_shutdown(cl);
695 return;
696 }
697
698 /* request handler spawned a pipe, register handler */
699 if (cl->pipe.fd)
700 {
701 D("SRV: Client(%d) pipe(%d) spawned\n", u->fd, cl->pipe.fd);
702
703 cl->pipe.cb = uh_pipe_cb;
704 uloop_fd_add(&cl->pipe, ULOOP_READ);
705 }
706
707 /* request handler spawned a child, register handler */
708 if (cl->proc.pid)
709 {
710 D("SRV: Client(%d) child(%d) spawned\n", u->fd, cl->proc.pid);
711
712 cl->proc.cb = uh_child_cb;
713 uloop_process_add(&cl->proc);
714
715 cl->timeout.cb = uh_timeout_cb;
716 uloop_timeout_set(&cl->timeout, conf->script_timeout * 1000);
717 }
718
719 /* header processing complete */
720 D("SRV: Client(%d) dispatched\n", u->fd);
721 cl->dispatched = true;
722 }
723
724 if (!cl->cb(cl))
725 {
726 D("SRV: Client(%d) response callback signalized EOF\n", u->fd);
727 uh_client_shutdown(cl);
728 return;
729 }
730 }
731
732 #ifdef HAVE_TLS
733 static inline int uh_inittls(struct config *conf)
734 {
735 /* library handle */
736 void *lib;
737
738 /* already loaded */
739 if (conf->tls != NULL)
740 return 0;
741
742 /* load TLS plugin */
743 if (!(lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)))
744 {
745 fprintf(stderr,
746 "Notice: Unable to load TLS plugin - disabling SSL support! "
747 "(Reason: %s)\n", dlerror()
748 );
749
750 return 1;
751 }
752 else
753 {
754 /* resolve functions */
755 if (!(conf->tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
756 !(conf->tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
757 !(conf->tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
758 !(conf->tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
759 !(conf->tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
760 !(conf->tls_close = dlsym(lib, "uh_tls_client_close")) ||
761 !(conf->tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
762 !(conf->tls_send = dlsym(lib, "uh_tls_client_send")))
763 {
764 fprintf(stderr,
765 "Error: Failed to lookup required symbols "
766 "in TLS plugin: %s\n", dlerror()
767 );
768 exit(1);
769 }
770
771 /* init SSL context */
772 if (!(conf->tls = conf->tls_init()))
773 {
774 fprintf(stderr, "Error: Failed to initalize SSL context\n");
775 exit(1);
776 }
777 }
778
779 return 0;
780 }
781 #endif
782
783 int main (int argc, char **argv)
784 {
785 /* master file descriptor list */
786 fd_set serv_fds;
787
788 /* working structs */
789 struct addrinfo hints;
790 struct sigaction sa;
791 struct config conf;
792
793 /* maximum file descriptor number */
794 int cur_fd, max_fd = 0;
795
796 #ifdef HAVE_TLS
797 int tls = 0;
798 int keys = 0;
799 #endif
800
801 int bound = 0;
802 int nofork = 0;
803
804 /* args */
805 int opt;
806 char bind[128];
807 char *port = NULL;
808
809 #ifdef HAVE_LUA
810 /* library handle */
811 void *lib;
812 #endif
813
814 FD_ZERO(&serv_fds);
815
816 /* handle SIGPIPE, SIGINT, SIGTERM */
817 sa.sa_flags = 0;
818 sigemptyset(&sa.sa_mask);
819
820 sa.sa_handler = SIG_IGN;
821 sigaction(SIGPIPE, &sa, NULL);
822
823 sa.sa_handler = uh_sigterm;
824 sigaction(SIGINT, &sa, NULL);
825 sigaction(SIGTERM, &sa, NULL);
826
827 /* prepare addrinfo hints */
828 memset(&hints, 0, sizeof(hints));
829 hints.ai_family = AF_UNSPEC;
830 hints.ai_socktype = SOCK_STREAM;
831 hints.ai_flags = AI_PASSIVE;
832
833 /* parse args */
834 memset(&conf, 0, sizeof(conf));
835 memset(bind, 0, sizeof(bind));
836
837 uloop_init();
838
839 while ((opt = getopt(argc, argv,
840 "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:n:x:i:t:T:A:u:U:")) > 0)
841 {
842 switch(opt)
843 {
844 /* [addr:]port */
845 case 'p':
846 case 's':
847 if ((port = strrchr(optarg, ':')) != NULL)
848 {
849 if ((optarg[0] == '[') && (port > optarg) && (port[-1] == ']'))
850 memcpy(bind, optarg + 1,
851 min(sizeof(bind), (int)(port - optarg) - 2));
852 else
853 memcpy(bind, optarg,
854 min(sizeof(bind), (int)(port - optarg)));
855
856 port++;
857 }
858 else
859 {
860 port = optarg;
861 }
862
863 #ifdef HAVE_TLS
864 if (opt == 's')
865 {
866 if (uh_inittls(&conf))
867 {
868 fprintf(stderr,
869 "Notice: TLS support is disabled, "
870 "ignoring '-s %s'\n", optarg
871 );
872 continue;
873 }
874
875 tls = 1;
876 }
877 #endif
878
879 /* bind sockets */
880 bound += uh_socket_bind(&serv_fds, &max_fd,
881 bind[0] ? bind : NULL,
882 port, &hints, (opt == 's'), &conf);
883
884 memset(bind, 0, sizeof(bind));
885 break;
886
887 #ifdef HAVE_TLS
888 /* certificate */
889 case 'C':
890 if (!uh_inittls(&conf))
891 {
892 if (conf.tls_cert(conf.tls, optarg) < 1)
893 {
894 fprintf(stderr,
895 "Error: Invalid certificate file given\n");
896 exit(1);
897 }
898
899 keys++;
900 }
901
902 break;
903
904 /* key */
905 case 'K':
906 if (!uh_inittls(&conf))
907 {
908 if (conf.tls_key(conf.tls, optarg) < 1)
909 {
910 fprintf(stderr,
911 "Error: Invalid private key file given\n");
912 exit(1);
913 }
914
915 keys++;
916 }
917
918 break;
919 #endif
920
921 /* docroot */
922 case 'h':
923 if (! realpath(optarg, conf.docroot))
924 {
925 fprintf(stderr, "Error: Invalid directory %s: %s\n",
926 optarg, strerror(errno));
927 exit(1);
928 }
929 break;
930
931 /* error handler */
932 case 'E':
933 if ((strlen(optarg) == 0) || (optarg[0] != '/'))
934 {
935 fprintf(stderr, "Error: Invalid error handler: %s\n",
936 optarg);
937 exit(1);
938 }
939 conf.error_handler = optarg;
940 break;
941
942 /* index file */
943 case 'I':
944 if ((strlen(optarg) == 0) || (optarg[0] == '/'))
945 {
946 fprintf(stderr, "Error: Invalid index page: %s\n",
947 optarg);
948 exit(1);
949 }
950 conf.index_file = optarg;
951 break;
952
953 /* don't follow symlinks */
954 case 'S':
955 conf.no_symlinks = 1;
956 break;
957
958 /* don't list directories */
959 case 'D':
960 conf.no_dirlists = 1;
961 break;
962
963 case 'R':
964 conf.rfc1918_filter = 1;
965 break;
966
967 case 'n':
968 conf.max_requests = atoi(optarg);
969 break;
970
971 #ifdef HAVE_CGI
972 /* cgi prefix */
973 case 'x':
974 conf.cgi_prefix = optarg;
975 break;
976
977 /* interpreter */
978 case 'i':
979 if ((optarg[0] == '.') && (port = strchr(optarg, '=')))
980 {
981 *port++ = 0;
982 uh_interpreter_add(optarg, port);
983 }
984 else
985 {
986 fprintf(stderr, "Error: Invalid interpreter: %s\n",
987 optarg);
988 exit(1);
989 }
990 break;
991 #endif
992
993 #ifdef HAVE_LUA
994 /* lua prefix */
995 case 'l':
996 conf.lua_prefix = optarg;
997 break;
998
999 /* lua handler */
1000 case 'L':
1001 conf.lua_handler = optarg;
1002 break;
1003 #endif
1004
1005 #ifdef HAVE_UBUS
1006 /* ubus prefix */
1007 case 'u':
1008 conf.ubus_prefix = optarg;
1009 break;
1010
1011 /* ubus socket */
1012 case 'U':
1013 conf.ubus_socket = optarg;
1014 break;
1015 #endif
1016
1017 #if defined(HAVE_CGI) || defined(HAVE_LUA)
1018 /* script timeout */
1019 case 't':
1020 conf.script_timeout = atoi(optarg);
1021 break;
1022 #endif
1023
1024 /* network timeout */
1025 case 'T':
1026 conf.network_timeout = atoi(optarg);
1027 break;
1028
1029 /* tcp keep-alive */
1030 case 'A':
1031 conf.tcp_keepalive = atoi(optarg);
1032 break;
1033
1034 /* no fork */
1035 case 'f':
1036 nofork = 1;
1037 break;
1038
1039 /* urldecode */
1040 case 'd':
1041 if ((port = malloc(strlen(optarg)+1)) != NULL)
1042 {
1043 /* "decode" plus to space to retain compat */
1044 for (opt = 0; optarg[opt]; opt++)
1045 if (optarg[opt] == '+')
1046 optarg[opt] = ' ';
1047 /* opt now contains strlen(optarg) -- no need to re-scan */
1048 memset(port, 0, opt+1);
1049 if (uh_urldecode(port, opt, optarg, opt) < 0)
1050 fprintf(stderr, "uhttpd: invalid encoding\n");
1051
1052 printf("%s", port);
1053 free(port);
1054 exit(0);
1055 }
1056 break;
1057
1058 /* basic auth realm */
1059 case 'r':
1060 conf.realm = optarg;
1061 break;
1062
1063 /* md5 crypt */
1064 case 'm':
1065 printf("%s\n", crypt(optarg, "$1$"));
1066 exit(0);
1067 break;
1068
1069 /* config file */
1070 case 'c':
1071 conf.file = optarg;
1072 break;
1073
1074 default:
1075 fprintf(stderr,
1076 "Usage: %s -p [addr:]port [-h docroot]\n"
1077 " -f Do not fork to background\n"
1078 " -c file Configuration file, default is '/etc/httpd.conf'\n"
1079 " -p [addr:]port Bind to specified address and port, multiple allowed\n"
1080 #ifdef HAVE_TLS
1081 " -s [addr:]port Like -p but provide HTTPS on this port\n"
1082 " -C file ASN.1 server certificate file\n"
1083 " -K file ASN.1 server private key file\n"
1084 #endif
1085 " -h directory Specify the document root, default is '.'\n"
1086 " -E string Use given virtual URL as 404 error handler\n"
1087 " -I string Use given filename as index page for directories\n"
1088 " -S Do not follow symbolic links outside of the docroot\n"
1089 " -D Do not allow directory listings, send 403 instead\n"
1090 " -R Enable RFC1918 filter\n"
1091 " -n count Maximum allowed number of concurrent requests\n"
1092 #ifdef HAVE_LUA
1093 " -l string URL prefix for Lua handler, default is '/lua'\n"
1094 " -L file Lua handler script, omit to disable Lua\n"
1095 #endif
1096 #ifdef HAVE_UBUS
1097 " -u string URL prefix for HTTP/JSON handler, default is '/ubus'\n"
1098 " -U file Override ubus socket path\n"
1099 #endif
1100 #ifdef HAVE_CGI
1101 " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
1102 " -i .ext=path Use interpreter at path for files with the given extension\n"
1103 #endif
1104 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1105 " -t seconds CGI, Lua and UBUS script timeout in seconds, default is 60\n"
1106 #endif
1107 " -T seconds Network timeout in seconds, default is 30\n"
1108 " -d string URL decode given string\n"
1109 " -r string Specify basic auth realm\n"
1110 " -m string MD5 crypt given string\n"
1111 "\n", argv[0]
1112 );
1113
1114 exit(1);
1115 }
1116 }
1117
1118 #ifdef HAVE_TLS
1119 if ((tls == 1) && (keys < 2))
1120 {
1121 fprintf(stderr, "Error: Missing private key or certificate file\n");
1122 exit(1);
1123 }
1124 #endif
1125
1126 if (bound < 1)
1127 {
1128 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
1129 exit(1);
1130 }
1131
1132 /* default docroot */
1133 if (!conf.docroot[0] && !realpath(".", conf.docroot))
1134 {
1135 fprintf(stderr, "Error: Can not determine default document root: %s\n",
1136 strerror(errno));
1137 exit(1);
1138 }
1139
1140 /* default realm */
1141 if (!conf.realm)
1142 conf.realm = "Protected Area";
1143
1144 /* config file */
1145 uh_config_parse(&conf);
1146
1147 /* default max requests */
1148 if (conf.max_requests <= 0)
1149 conf.max_requests = 3;
1150
1151 /* default network timeout */
1152 if (conf.network_timeout <= 0)
1153 conf.network_timeout = 30;
1154
1155 #if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1156 /* default script timeout */
1157 if (conf.script_timeout <= 0)
1158 conf.script_timeout = 60;
1159 #endif
1160
1161 #ifdef HAVE_CGI
1162 /* default cgi prefix */
1163 if (!conf.cgi_prefix)
1164 conf.cgi_prefix = "/cgi-bin";
1165 #endif
1166
1167 #ifdef HAVE_LUA
1168 /* load Lua plugin */
1169 if (!(lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)))
1170 {
1171 fprintf(stderr,
1172 "Notice: Unable to load Lua plugin - disabling Lua support! "
1173 "(Reason: %s)\n", dlerror());
1174 }
1175 else
1176 {
1177 /* resolve functions */
1178 if (!(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
1179 !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
1180 !(conf.lua_request = dlsym(lib, "uh_lua_request")))
1181 {
1182 fprintf(stderr,
1183 "Error: Failed to lookup required symbols "
1184 "in Lua plugin: %s\n", dlerror()
1185 );
1186 exit(1);
1187 }
1188
1189 /* init Lua runtime if handler is specified */
1190 if (conf.lua_handler)
1191 {
1192 /* default lua prefix */
1193 if (!conf.lua_prefix)
1194 conf.lua_prefix = "/lua";
1195
1196 conf.lua_state = conf.lua_init(&conf);
1197 }
1198 }
1199 #endif
1200
1201 #ifdef HAVE_UBUS
1202 /* load ubus plugin */
1203 if (!(lib = dlopen("uhttpd_ubus.so", RTLD_LAZY | RTLD_GLOBAL)))
1204 {
1205 fprintf(stderr,
1206 "Notice: Unable to load ubus plugin - disabling ubus support! "
1207 "(Reason: %s)\n", dlerror());
1208 }
1209 else
1210 {
1211 /* resolve functions */
1212 if (!(conf.ubus_init = dlsym(lib, "uh_ubus_init")) ||
1213 !(conf.ubus_close = dlsym(lib, "uh_ubus_close")) ||
1214 !(conf.ubus_request = dlsym(lib, "uh_ubus_request")))
1215 {
1216 fprintf(stderr,
1217 "Error: Failed to lookup required symbols "
1218 "in ubus plugin: %s\n", dlerror()
1219 );
1220 exit(1);
1221 }
1222
1223 /* default ubus prefix */
1224 if (!conf.ubus_prefix)
1225 conf.ubus_prefix = "/ubus";
1226
1227 conf.ubus_state = conf.ubus_init(&conf);
1228 }
1229 #endif
1230
1231 /* fork (if not disabled) */
1232 if (!nofork)
1233 {
1234 switch (fork())
1235 {
1236 case -1:
1237 perror("fork()");
1238 exit(1);
1239
1240 case 0:
1241 /* daemon setup */
1242 if (chdir("/"))
1243 perror("chdir()");
1244
1245 if ((cur_fd = open("/dev/null", O_WRONLY)) > -1)
1246 dup2(cur_fd, 0);
1247
1248 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1249 dup2(cur_fd, 1);
1250
1251 if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1252 dup2(cur_fd, 2);
1253
1254 break;
1255
1256 default:
1257 exit(0);
1258 }
1259 }
1260
1261 /* server main loop */
1262 uloop_run();
1263
1264 #ifdef HAVE_LUA
1265 /* destroy the Lua state */
1266 if (conf.lua_state != NULL)
1267 conf.lua_close(conf.lua_state);
1268 #endif
1269
1270 #ifdef HAVE_UBUS
1271 /* destroy the ubus state */
1272 if (conf.ubus_state != NULL)
1273 conf.ubus_close(conf.ubus_state);
1274 #endif
1275
1276 return 0;
1277 }