uhttpd: mark a TLS connections internally to clean up their state
[project/uhttpd.git] / client.c
1 /*
2 * uhttpd - Tiny single-threaded httpd
3 *
4 * Copyright (C) 2010-2013 Jo-Philipp Wich <xm@subsignal.org>
5 * Copyright (C) 2013 Felix Fietkau <nbd@openwrt.org>
6 *
7 * Permission to use, copy, modify, and/or distribute this software for any
8 * purpose with or without fee is hereby granted, provided that the above
9 * copyright notice and this permission notice appear in all copies.
10 *
11 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18 */
19
20 #include <libubox/blobmsg.h>
21 #include <ctype.h>
22
23 #include "uhttpd.h"
24 #include "tls.h"
25
26 static LIST_HEAD(clients);
27
28 int n_clients = 0;
29 struct config conf = {};
30
31 const char * const http_versions[] = {
32 [UH_HTTP_VER_0_9] = "HTTP/0.9",
33 [UH_HTTP_VER_1_0] = "HTTP/1.0",
34 [UH_HTTP_VER_1_1] = "HTTP/1.1",
35 };
36
37 const char * const http_methods[] = {
38 [UH_HTTP_MSG_GET] = "GET",
39 [UH_HTTP_MSG_POST] = "POST",
40 [UH_HTTP_MSG_HEAD] = "HEAD",
41 };
42
43 void uh_http_header(struct client *cl, int code, const char *summary)
44 {
45 struct http_request *r = &cl->request;
46 const char *enc = "Transfer-Encoding: chunked\r\n";
47 const char *conn;
48
49 if (!uh_use_chunked(cl))
50 enc = "";
51
52 if (r->connection_close)
53 conn = "Connection: close";
54 else
55 conn = "Connection: Keep-Alive";
56
57 ustream_printf(cl->us, "%s %03i %s\r\n%s\r\n%s",
58 http_versions[cl->request.version],
59 code, summary, conn, enc);
60
61 if (!r->connection_close)
62 ustream_printf(cl->us, "Keep-Alive: timeout=%d\r\n", conf.http_keepalive);
63 }
64
65 static void uh_connection_close(struct client *cl)
66 {
67 cl->state = CLIENT_STATE_CLOSE;
68 cl->us->eof = true;
69 ustream_state_change(cl->us);
70 }
71
72 static void uh_dispatch_done(struct client *cl)
73 {
74 if (cl->dispatch.free)
75 cl->dispatch.free(cl);
76 if (cl->dispatch.req_free)
77 cl->dispatch.req_free(cl);
78 }
79
80 static void client_timeout(struct uloop_timeout *timeout)
81 {
82 struct client *cl = container_of(timeout, struct client, timeout);
83
84 cl->state = CLIENT_STATE_CLOSE;
85 uh_connection_close(cl);
86 }
87
88 static void uh_set_client_timeout(struct client *cl, int timeout)
89 {
90 cl->timeout.cb = client_timeout;
91 uloop_timeout_set(&cl->timeout, timeout * 1000);
92 }
93
94 static void uh_keepalive_poll_cb(struct uloop_timeout *timeout)
95 {
96 struct client *cl = container_of(timeout, struct client, timeout);
97 int sec = cl->requests > 0 ? conf.http_keepalive : conf.network_timeout;
98
99 uh_set_client_timeout(cl, sec);
100 cl->us->notify_read(cl->us, 0);
101 }
102
103 static void uh_poll_connection(struct client *cl)
104 {
105 cl->timeout.cb = uh_keepalive_poll_cb;
106 uloop_timeout_set(&cl->timeout, 1);
107 }
108
109 void uh_request_done(struct client *cl)
110 {
111 uh_chunk_eof(cl);
112 uh_dispatch_done(cl);
113 memset(&cl->dispatch, 0, sizeof(cl->dispatch));
114
115 if (!conf.http_keepalive || cl->request.connection_close)
116 return uh_connection_close(cl);
117
118 cl->state = CLIENT_STATE_INIT;
119 cl->requests++;
120 uh_poll_connection(cl);
121 }
122
123 void __printf(4, 5)
124 uh_client_error(struct client *cl, int code, const char *summary, const char *fmt, ...)
125 {
126 va_list arg;
127
128 uh_http_header(cl, code, summary);
129 ustream_printf(cl->us, "Content-Type: text/html\r\n\r\n");
130
131 uh_chunk_printf(cl, "<h1>%s</h1>", summary);
132
133 if (fmt) {
134 va_start(arg, fmt);
135 uh_chunk_vprintf(cl, fmt, arg);
136 va_end(arg);
137 }
138
139 uh_request_done(cl);
140 }
141
142 static void uh_header_error(struct client *cl, int code, const char *summary)
143 {
144 uh_client_error(cl, code, summary, NULL);
145 uh_connection_close(cl);
146 }
147
148 static int find_idx(const char * const *list, int max, const char *str)
149 {
150 int i;
151
152 for (i = 0; i < max; i++)
153 if (!strcmp(list[i], str))
154 return i;
155
156 return -1;
157 }
158
159 static int client_parse_request(struct client *cl, char *data)
160 {
161 struct http_request *req = &cl->request;
162 char *type, *path, *version;
163 int h_method, h_version;
164
165 type = strtok(data, " ");
166 path = strtok(NULL, " ");
167 version = strtok(NULL, " ");
168 if (!type || !path || !version)
169 return CLIENT_STATE_DONE;
170
171 blobmsg_add_string(&cl->hdr, "URL", path);
172
173 memset(&cl->request, 0, sizeof(cl->request));
174 h_method = find_idx(http_methods, ARRAY_SIZE(http_methods), type);
175 h_version = find_idx(http_versions, ARRAY_SIZE(http_versions), version);
176 if (h_method < 0 || h_version < 0) {
177 req->version = UH_HTTP_VER_1_0;
178 return CLIENT_STATE_DONE;
179 }
180
181 req->method = h_method;
182 req->version = h_version;
183 if (req->version < UH_HTTP_VER_1_1 || !conf.http_keepalive)
184 req->connection_close = true;
185
186 return CLIENT_STATE_HEADER;
187 }
188
189 static bool client_init_cb(struct client *cl, char *buf, int len)
190 {
191 char *newline;
192
193 newline = strstr(buf, "\r\n");
194 if (!newline)
195 return false;
196
197 if (newline == buf)
198 return true;
199
200 *newline = 0;
201 blob_buf_init(&cl->hdr, 0);
202 cl->state = client_parse_request(cl, buf);
203 ustream_consume(cl->us, newline + 2 - buf);
204 if (cl->state == CLIENT_STATE_DONE)
205 uh_header_error(cl, 400, "Bad Request");
206
207 return true;
208 }
209
210 static bool rfc1918_filter_check(struct client *cl)
211 {
212 if (!conf.rfc1918_filter)
213 return true;
214
215 if (!uh_addr_rfc1918(&cl->peer_addr) || uh_addr_rfc1918(&cl->srv_addr))
216 return true;
217
218 uh_client_error(cl, 403, "Forbidden",
219 "Rejected request from RFC1918 IP "
220 "to public server address");
221 return false;
222 }
223
224 static void client_header_complete(struct client *cl)
225 {
226 struct http_request *r = &cl->request;
227
228 if (!rfc1918_filter_check(cl))
229 return;
230
231 if (r->expect_cont)
232 ustream_printf(cl->us, "HTTP/1.1 100 Continue\r\n\r\n");
233
234 switch(r->ua) {
235 case UH_UA_MSIE_OLD:
236 if (r->method != UH_HTTP_MSG_POST)
237 break;
238
239 /* fall through */
240 case UH_UA_SAFARI:
241 r->connection_close = true;
242 break;
243 default:
244 break;
245 }
246
247 uh_handle_request(cl);
248 }
249
250 static void client_parse_header(struct client *cl, char *data)
251 {
252 struct http_request *r = &cl->request;
253 char *err;
254 char *name;
255 char *val;
256
257 if (!*data) {
258 uloop_timeout_cancel(&cl->timeout);
259 cl->state = CLIENT_STATE_DATA;
260 client_header_complete(cl);
261 return;
262 }
263
264 val = uh_split_header(data);
265 if (!val) {
266 cl->state = CLIENT_STATE_DONE;
267 return;
268 }
269
270 for (name = data; *name; name++)
271 if (isupper(*name))
272 *name = tolower(*name);
273
274 if (!strcmp(data, "expect")) {
275 if (!strcasecmp(val, "100-continue"))
276 r->expect_cont = true;
277 else {
278 uh_header_error(cl, 412, "Precondition Failed");
279 return;
280 }
281 } else if (!strcmp(data, "content-length")) {
282 r->content_length = strtoul(val, &err, 0);
283 if (err && *err) {
284 uh_header_error(cl, 400, "Bad Request");
285 return;
286 }
287 } else if (!strcmp(data, "transfer-encoding")) {
288 if (!strcmp(val, "chunked"))
289 r->transfer_chunked = true;
290 } else if (!strcmp(data, "connection")) {
291 if (!strcasecmp(val, "close"))
292 r->connection_close = true;
293 else if (!strcasecmp(val, "keep-alive"))
294 r->connection_close = false;
295 } else if (!strcmp(data, "user-agent")) {
296 char *str;
297
298 if (strstr(val, "Opera"))
299 r->ua = UH_UA_OPERA;
300 else if ((str = strstr(val, "MSIE ")) != NULL) {
301 r->ua = UH_UA_MSIE_NEW;
302 if (str[5] && str[6] == '.') {
303 switch (str[5]) {
304 case '6':
305 if (strstr(str, "SV1"))
306 break;
307 /* fall through */
308 case '5':
309 case '4':
310 r->ua = UH_UA_MSIE_OLD;
311 break;
312 }
313 }
314 } else if (strstr(val, "Safari/") && strstr(val, "Mac OS X"))
315 r->ua = UH_UA_SAFARI;
316 else if (strstr(val, "Chrome/"))
317 r->ua = UH_UA_CHROME;
318 else if (strstr(val, "Gecko/"))
319 r->ua = UH_UA_GECKO;
320 else if (strstr(val, "Konqueror"))
321 r->ua = UH_UA_KONQUEROR;
322 }
323
324
325 blobmsg_add_string(&cl->hdr, data, val);
326
327 cl->state = CLIENT_STATE_HEADER;
328 }
329
330 void client_poll_post_data(struct client *cl)
331 {
332 struct dispatch *d = &cl->dispatch;
333 struct http_request *r = &cl->request;
334 char *buf;
335 int len;
336
337 if (cl->state == CLIENT_STATE_DONE)
338 return;
339
340 while (1) {
341 char *sep;
342 int offset = 0;
343 int cur_len;
344
345 buf = ustream_get_read_buf(cl->us, &len);
346 if (!buf || !len)
347 break;
348
349 if (!d->data_send)
350 return;
351
352 cur_len = min(r->content_length, len);
353 if (cur_len) {
354 if (d->data_blocked)
355 break;
356
357 if (d->data_send)
358 cur_len = d->data_send(cl, buf, cur_len);
359
360 r->content_length -= cur_len;
361 ustream_consume(cl->us, cur_len);
362 continue;
363 }
364
365 if (!r->transfer_chunked)
366 break;
367
368 if (r->transfer_chunked > 1)
369 offset = 2;
370
371 sep = strstr(buf + offset, "\r\n");
372 if (!sep)
373 break;
374
375 *sep = 0;
376
377 r->content_length = strtoul(buf + offset, &sep, 16);
378 r->transfer_chunked++;
379 ustream_consume(cl->us, sep + 2 - buf);
380
381 /* invalid chunk length */
382 if (sep && *sep) {
383 r->content_length = 0;
384 r->transfer_chunked = 0;
385 break;
386 }
387
388 /* empty chunk == eof */
389 if (!r->content_length) {
390 r->transfer_chunked = false;
391 break;
392 }
393 }
394
395 buf = ustream_get_read_buf(cl->us, &len);
396 if (!r->content_length && !r->transfer_chunked &&
397 cl->state != CLIENT_STATE_DONE) {
398 if (cl->dispatch.data_done)
399 cl->dispatch.data_done(cl);
400
401 cl->state = CLIENT_STATE_DONE;
402 }
403 }
404
405 static bool client_data_cb(struct client *cl, char *buf, int len)
406 {
407 client_poll_post_data(cl);
408 return false;
409 }
410
411 static bool client_header_cb(struct client *cl, char *buf, int len)
412 {
413 char *newline;
414 int line_len;
415
416 newline = strstr(buf, "\r\n");
417 if (!newline)
418 return false;
419
420 *newline = 0;
421 client_parse_header(cl, buf);
422 line_len = newline + 2 - buf;
423 ustream_consume(cl->us, line_len);
424 if (cl->state == CLIENT_STATE_DATA)
425 return client_data_cb(cl, newline + 2, len - line_len);
426
427 return true;
428 }
429
430 typedef bool (*read_cb_t)(struct client *cl, char *buf, int len);
431 static read_cb_t read_cbs[] = {
432 [CLIENT_STATE_INIT] = client_init_cb,
433 [CLIENT_STATE_HEADER] = client_header_cb,
434 [CLIENT_STATE_DATA] = client_data_cb,
435 };
436
437 void uh_client_read_cb(struct client *cl)
438 {
439 struct ustream *us = cl->us;
440 char *str;
441 int len;
442
443 do {
444 str = ustream_get_read_buf(us, &len);
445 if (!str || !len)
446 break;
447
448 if (cl->state >= array_size(read_cbs) || !read_cbs[cl->state])
449 break;
450
451 if (!read_cbs[cl->state](cl, str, len)) {
452 if (len == us->r.buffer_len &&
453 cl->state != CLIENT_STATE_DATA)
454 uh_header_error(cl, 413, "Request Entity Too Large");
455 break;
456 }
457 } while(1);
458 }
459
460 static void client_close(struct client *cl)
461 {
462 n_clients--;
463 uh_dispatch_done(cl);
464 uloop_timeout_cancel(&cl->timeout);
465 if (cl->tls)
466 uh_tls_client_detach(cl);
467 ustream_free(&cl->sfd.stream);
468 close(cl->sfd.fd.fd);
469 list_del(&cl->list);
470 blob_buf_free(&cl->hdr);
471 free(cl);
472
473 uh_unblock_listeners();
474 }
475
476 void uh_client_notify_state(struct client *cl)
477 {
478 struct ustream *s = cl->us;
479
480 if (!s->write_error) {
481 if (cl->state == CLIENT_STATE_DATA)
482 return;
483
484 if (!s->eof || s->w.data_bytes)
485 return;
486 }
487
488 return client_close(cl);
489 }
490
491 static void client_ustream_read_cb(struct ustream *s, int bytes)
492 {
493 struct client *cl = container_of(s, struct client, sfd.stream);
494
495 uh_client_read_cb(cl);
496 }
497
498 static void client_ustream_write_cb(struct ustream *s, int bytes)
499 {
500 struct client *cl = container_of(s, struct client, sfd.stream);
501
502 if (cl->dispatch.write_cb)
503 cl->dispatch.write_cb(cl);
504 }
505
506 static void client_notify_state(struct ustream *s)
507 {
508 struct client *cl = container_of(s, struct client, sfd.stream);
509
510 uh_client_notify_state(cl);
511 }
512
513 static void set_addr(struct uh_addr *addr, void *src)
514 {
515 struct sockaddr_in *sin = src;
516 struct sockaddr_in6 *sin6 = src;
517
518 addr->family = sin->sin_family;
519 if (addr->family == AF_INET) {
520 addr->port = ntohs(sin->sin_port);
521 memcpy(&addr->in, &sin->sin_addr, sizeof(addr->in));
522 } else {
523 addr->port = ntohs(sin6->sin6_port);
524 memcpy(&addr->in6, &sin6->sin6_addr, sizeof(addr->in6));
525 }
526 }
527
528 bool uh_accept_client(int fd, bool tls)
529 {
530 static struct client *next_client;
531 struct client *cl;
532 unsigned int sl;
533 int sfd;
534 static int client_id = 0;
535 struct sockaddr_in6 addr;
536
537 if (!next_client)
538 next_client = calloc(1, sizeof(*next_client));
539
540 cl = next_client;
541
542 sl = sizeof(addr);
543 sfd = accept(fd, (struct sockaddr *) &addr, &sl);
544 if (sfd < 0)
545 return false;
546
547 set_addr(&cl->peer_addr, &addr);
548 sl = sizeof(addr);
549 getsockname(sfd, (struct sockaddr *) &addr, &sl);
550 set_addr(&cl->srv_addr, &addr);
551
552 cl->us = &cl->sfd.stream;
553 if (tls) {
554 uh_tls_client_attach(cl);
555 } else {
556 cl->us->notify_read = client_ustream_read_cb;
557 cl->us->notify_write = client_ustream_write_cb;
558 cl->us->notify_state = client_notify_state;
559 }
560
561 cl->us->string_data = true;
562 ustream_fd_init(&cl->sfd, sfd);
563
564 uh_poll_connection(cl);
565 list_add_tail(&cl->list, &clients);
566
567 next_client = NULL;
568 n_clients++;
569 cl->id = client_id++;
570 cl->tls = tls;
571
572 return true;
573 }
574
575 void uh_close_fds(void)
576 {
577 struct client *cl;
578
579 uloop_done();
580 uh_close_listen_fds();
581 list_for_each_entry(cl, &clients, list) {
582 close(cl->sfd.fd.fd);
583 if (cl->dispatch.close_fds)
584 cl->dispatch.close_fds(cl);
585 }
586 }