file.c

   1 /*
   2  * uhttpd - Tiny single-threaded httpd
   3  *
   4  *   Copyright (C) 2010-2013 Jo-Philipp Wich <xm@subsignal.org>
   5  *   Copyright (C) 2013 Felix Fietkau <nbd@openwrt.org>
   6  *
   7  * Permission to use, copy, modify, and/or distribute this software for any
   8  * purpose with or without fee is hereby granted, provided that the above
   9  * copyright notice and this permission notice appear in all copies.
  10  *
  11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  15  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  16  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  17  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  18  */
  19
  20 #define _BSD_SOURCE
  21 #define _DARWIN_C_SOURCE
  22 #define _XOPEN_SOURCE 700
  23
  24 #include <sys/types.h>
  25 #include <sys/dir.h>
  26 #include <time.h>
  27 #include <strings.h>
  28 #include <dirent.h>
  29 #include <inttypes.h>
  30
  31 #include <libubox/blobmsg.h>
  32
  33 #include "uhttpd.h"
  34 #include "mimetypes.h"
  35
  36 #define MAX(a, b)       (((a) > (b)) ? (a) : (b))
  37
  38 static LIST_HEAD(index_files);
  39 static LIST_HEAD(dispatch_handlers);
  40 static LIST_HEAD(pending_requests);
  41 static int n_requests;
  42
  43 struct deferred_request {
  44         struct list_head list;
  45         struct dispatch_handler *d;
  46         struct client *cl;
  47         struct path_info pi;
  48         bool called, path;
  49 };
  50
  51 struct index_file {
  52         struct list_head list;
  53         const char *name;
  54 };
  55
  56 enum file_hdr {
  57         HDR_AUTHORIZATION,
  58         HDR_IF_MODIFIED_SINCE,
  59         HDR_IF_UNMODIFIED_SINCE,
  60         HDR_IF_MATCH,
  61         HDR_IF_NONE_MATCH,
  62         HDR_IF_RANGE,
  63         __HDR_MAX
  64 };
  65
  66 void uh_index_add(const char *filename)
  67 {
  68         struct index_file *idx;
  69
  70         idx = calloc(1, sizeof(*idx));
  71         idx->name = filename;
  72         list_add_tail(&idx->list, &index_files);
  73 }
  74
  75 static char * canonpath(const char *path, char *path_resolved)
  76 {
  77         const char *path_cpy = path;
  78         char *path_res = path_resolved;
  79
  80         if (conf.no_symlinks)
  81                 return realpath(path, path_resolved);
  82
  83         /* normalize */
  84         while ((*path_cpy != '\0') && (path_cpy < (path + PATH_MAX - 2))) {
  85                 if (*path_cpy != '/')
  86                         goto next;
  87
  88                 /* skip repeating / */
  89                 if (path_cpy[1] == '/') {
  90                         path_cpy++;
  91                         continue;
  92                 }
  93
  94                 /* /./ or /../ */
  95                 if (path_cpy[1] == '.') {
  96                         /* skip /./ */
  97                         if ((path_cpy[2] == '/') || (path_cpy[2] == '\0')) {
  98                                 path_cpy += 2;
  99                                 continue;
 100                         }
 101
 102                         /* collapse /x/../ */
 103                         if ((path_cpy[2] == '.') &&
 104                             ((path_cpy[3] == '/') || (path_cpy[3] == '\0'))) {
 105                                 while ((path_res > path_resolved) && (*--path_res != '/'));
 106
 107                                 path_cpy += 3;
 108                                 continue;
 109                         }
 110                 }
 111
 112 next:
 113                 *path_res++ = *path_cpy++;
 114         }
 115
 116         /* remove trailing slash if not root / */
 117         if ((path_res > (path_resolved+1)) && (path_res[-1] == '/'))
 118                 path_res--;
 119         else if (path_res == path_resolved)
 120                 *path_res++ = '/';
 121
 122         *path_res = '\0';
 123
 124         return path_resolved;
 125 }
 126
 127 /* Returns NULL on error.
 128 ** NB: improperly encoded URL should give client 400 [Bad Syntax]; returning
 129 ** NULL here causes 404 [Not Found], but that's not too unreasonable. */
 130 struct path_info *
 131 uh_path_lookup(struct client *cl, const char *url)
 132 {
 133         static char path_phys[PATH_MAX];
 134         static char path_info[PATH_MAX];
 135         static char path_query[PATH_MAX];
 136         static struct path_info p;
 137
 138         const char *docroot = conf.docroot;
 139         int docroot_len = strlen(docroot);
 140         char *pathptr = NULL;
 141         bool slash;
 142
 143         int i = 0;
 144         int len;
 145         struct stat s;
 146         struct index_file *idx;
 147
 148         /* back out early if url is undefined */
 149         if (url == NULL)
 150                 return NULL;
 151
 152         memset(&p, 0, sizeof(p));
 153         path_phys[0] = 0;
 154         path_info[0] = 0;
 155
 156         strcpy(uh_buf, docroot);
 157
 158         /* separate query string from url */
 159         if ((pathptr = strchr(url, '?')) != NULL) {
 160                 if (pathptr[1]) {
 161                         p.query = path_query;
 162                         snprintf(path_query, sizeof(path_query), "%s",
 163                                  pathptr + 1);
 164                 }
 165
 166                 /* urldecode component w/o query */
 167                 if (pathptr > url) {
 168                         if (uh_urldecode(&uh_buf[docroot_len],
 169                                          sizeof(uh_buf) - docroot_len - 1,
 170                                          url, pathptr - url ) < 0)
 171                                 return NULL;
 172                 }
 173         }
 174
 175         /* no query string, decode all of url */
 176         else if (uh_urldecode(&uh_buf[docroot_len],
 177                               sizeof(uh_buf) - docroot_len - 1,
 178                               url, strlen(url) ) < 0)
 179                 return NULL;
 180
 181         /* create canon path */
 182         len = strlen(uh_buf);
 183         slash = len && uh_buf[len - 1] == '/';
 184         len = min(len, sizeof(path_phys) - 1);
 185
 186         for (i = len; i >= 0; i--) {
 187                 char ch = uh_buf[i];
 188                 bool exists;
 189
 190                 if (ch != 0 && ch != '/')
 191                         continue;
 192
 193                 uh_buf[i] = 0;
 194                 exists = !!canonpath(uh_buf, path_phys);
 195                 uh_buf[i] = ch;
 196
 197                 if (!exists)
 198                         continue;
 199
 200                 /* test current path */
 201                 if (stat(path_phys, &p.stat))
 202                         continue;
 203
 204                 snprintf(path_info, sizeof(path_info), "%s", uh_buf + i);
 205                 break;
 206         }
 207
 208         /* check whether found path is within docroot */
 209         if (strncmp(path_phys, docroot, docroot_len) != 0 ||
 210             (path_phys[docroot_len] != 0 &&
 211              path_phys[docroot_len] != '/'))
 212                 return NULL;
 213
 214         /* is a regular file */
 215         if (p.stat.st_mode & S_IFREG) {
 216                 p.root = docroot;
 217                 p.phys = path_phys;
 218                 p.name = &path_phys[docroot_len];
 219                 p.info = path_info[0] ? path_info : NULL;
 220                 return &p;
 221         }
 222
 223         if (!(p.stat.st_mode & S_IFDIR))
 224                 return NULL;
 225
 226         if (path_info[0])
 227             return NULL;
 228
 229         pathptr = path_phys + strlen(path_phys);
 230
 231         /* ensure trailing slash */
 232         if (pathptr[-1] != '/') {
 233                 pathptr[0] = '/';
 234                 pathptr[1] = 0;
 235                 pathptr++;
 236         }
 237
 238         /* if requested url resolves to a directory and a trailing slash
 239            is missing in the request url, redirect the client to the same
 240            url with trailing slash appended */
 241         if (!slash) {
 242                 uh_http_header(cl, 302, "Found");
 243                 if (!uh_use_chunked(cl))
 244                         ustream_printf(cl->us, "Content-Length: 0\r\n");
 245                 ustream_printf(cl->us, "Location: %s%s%s\r\n\r\n",
 246                                 &path_phys[docroot_len],
 247                                 p.query ? "?" : "",
 248                                 p.query ? p.query : "");
 249                 uh_request_done(cl);
 250                 p.redirected = 1;
 251                 return &p;
 252         }
 253
 254         /* try to locate index file */
 255         len = path_phys + sizeof(path_phys) - pathptr - 1;
 256         list_for_each_entry(idx, &index_files, list) {
 257                 if (strlen(idx->name) > len)
 258                         continue;
 259
 260                 strcpy(pathptr, idx->name);
 261                 if (!stat(path_phys, &s) && (s.st_mode & S_IFREG)) {
 262                         memcpy(&p.stat, &s, sizeof(p.stat));
 263                         break;
 264                 }
 265
 266                 *pathptr = 0;
 267         }
 268
 269         p.root = docroot;
 270         p.phys = path_phys;
 271         p.name = &path_phys[docroot_len];
 272
 273         return p.phys ? &p : NULL;
 274 }
 275
 276 static const char * uh_file_mime_lookup(const char *path)
 277 {
 278         const struct mimetype *m = &uh_mime_types[0];
 279         const char *e;
 280
 281         while (m->extn) {
 282                 e = &path[strlen(path)-1];
 283
 284                 while (e >= path) {
 285                         if ((*e == '.' || *e == '/') && !strcasecmp(&e[1], m->extn))
 286                                 return m->mime;
 287
 288                         e--;
 289                 }
 290
 291                 m++;
 292         }
 293
 294         return "application/octet-stream";
 295 }
 296
 297 static const char * uh_file_mktag(struct stat *s, char *buf, int len)
 298 {
 299         snprintf(buf, len, "\"%" PRIx64 "-%" PRIx64 "-%" PRIx64 "\"",
 300                  s->st_ino, s->st_size, (uint64_t)s->st_mtime);
 301
 302         return buf;
 303 }
 304
 305 static time_t uh_file_date2unix(const char *date)
 306 {
 307         struct tm t;
 308
 309         memset(&t, 0, sizeof(t));
 310
 311         if (strptime(date, "%a, %d %b %Y %H:%M:%S %Z", &t) != NULL)
 312                 return timegm(&t);
 313
 314         return 0;
 315 }
 316
 317 static char * uh_file_unix2date(time_t ts, char *buf, int len)
 318 {
 319         struct tm *t = gmtime(&ts);
 320
 321         strftime(buf, len, "%a, %d %b %Y %H:%M:%S GMT", t);
 322
 323         return buf;
 324 }
 325
 326 static char *uh_file_header(struct client *cl, int idx)
 327 {
 328         if (!cl->dispatch.file.hdr[idx])
 329                 return NULL;
 330
 331         return (char *) blobmsg_data(cl->dispatch.file.hdr[idx]);
 332 }
 333
 334 static void uh_file_response_ok_hdrs(struct client *cl, struct stat *s)
 335 {
 336         char buf[128];
 337
 338         if (s) {
 339                 ustream_printf(cl->us, "ETag: %s\r\n", uh_file_mktag(s, buf, sizeof(buf)));
 340                 ustream_printf(cl->us, "Last-Modified: %s\r\n",
 341                                uh_file_unix2date(s->st_mtime, buf, sizeof(buf)));
 342         }
 343         ustream_printf(cl->us, "Date: %s\r\n",
 344                        uh_file_unix2date(time(NULL), buf, sizeof(buf)));
 345 }
 346
 347 static void uh_file_response_200(struct client *cl, struct stat *s)
 348 {
 349         uh_http_header(cl, 200, "OK");
 350         return uh_file_response_ok_hdrs(cl, s);
 351 }
 352
 353 static void uh_file_response_304(struct client *cl, struct stat *s)
 354 {
 355         uh_http_header(cl, 304, "Not Modified");
 356
 357         return uh_file_response_ok_hdrs(cl, s);
 358 }
 359
 360 static void uh_file_response_405(struct client *cl)
 361 {
 362         uh_http_header(cl, 405, "Method Not Allowed");
 363 }
 364
 365 static void uh_file_response_412(struct client *cl)
 366 {
 367         uh_http_header(cl, 412, "Precondition Failed");
 368 }
 369
 370 static bool uh_file_if_match(struct client *cl, struct stat *s)
 371 {
 372         char buf[128];
 373         const char *tag = uh_file_mktag(s, buf, sizeof(buf));
 374         char *hdr = uh_file_header(cl, HDR_IF_MATCH);
 375         char *p;
 376         int i;
 377
 378         if (!hdr)
 379                 return true;
 380
 381         p = &hdr[0];
 382         for (i = 0; i < strlen(hdr); i++)
 383         {
 384                 if ((hdr[i] == ' ') || (hdr[i] == ',')) {
 385                         hdr[i++] = 0;
 386                         p = &hdr[i];
 387                 } else if (!strcmp(p, "*") || !strcmp(p, tag)) {
 388                         return true;
 389                 }
 390         }
 391
 392         uh_file_response_412(cl);
 393         return false;
 394 }
 395
 396 static int uh_file_if_modified_since(struct client *cl, struct stat *s)
 397 {
 398         char *hdr = uh_file_header(cl, HDR_IF_MODIFIED_SINCE);
 399
 400         if (!hdr)
 401                 return true;
 402
 403         if (uh_file_date2unix(hdr) >= s->st_mtime) {
 404                 uh_file_response_304(cl, s);
 405                 return false;
 406         }
 407
 408         return true;
 409 }
 410
 411 static int uh_file_if_none_match(struct client *cl, struct stat *s)
 412 {
 413         char buf[128];
 414         const char *tag = uh_file_mktag(s, buf, sizeof(buf));
 415         char *hdr = uh_file_header(cl, HDR_IF_NONE_MATCH);
 416         char *p;
 417         int i;
 418
 419         if (!hdr)
 420                 return true;
 421
 422         p = &hdr[0];
 423         for (i = 0; i < strlen(hdr); i++) {
 424                 if ((hdr[i] == ' ') || (hdr[i] == ',')) {
 425                         hdr[i++] = 0;
 426                         p = &hdr[i];
 427                 } else if (!strcmp(p, "*") || !strcmp(p, tag)) {
 428                         if ((cl->request.method == UH_HTTP_MSG_GET) ||
 429                                 (cl->request.method == UH_HTTP_MSG_HEAD))
 430                                 uh_file_response_304(cl, s);
 431                         else
 432                                 uh_file_response_412(cl);
 433
 434                         return false;
 435                 }
 436         }
 437
 438         return true;
 439 }
 440
 441 static int uh_file_if_range(struct client *cl, struct stat *s)
 442 {
 443         char *hdr = uh_file_header(cl, HDR_IF_RANGE);
 444
 445         if (hdr) {
 446                 uh_file_response_412(cl);
 447                 return false;
 448         }
 449
 450         return true;
 451 }
 452
 453 static int uh_file_if_unmodified_since(struct client *cl, struct stat *s)
 454 {
 455         char *hdr = uh_file_header(cl, HDR_IF_UNMODIFIED_SINCE);
 456
 457         if (hdr && uh_file_date2unix(hdr) <= s->st_mtime) {
 458                 uh_file_response_412(cl);
 459                 return false;
 460         }
 461
 462         return true;
 463 }
 464
 465 static int dirent_cmp(const struct dirent **a, const struct dirent **b)
 466 {
 467         bool dir_a = !!((*a)->d_type & DT_DIR);
 468         bool dir_b = !!((*b)->d_type & DT_DIR);
 469
 470         /* directories first */
 471         if (dir_a != dir_b)
 472                 return dir_b - dir_a;
 473
 474         return alphasort(a, b);
 475 }
 476
 477 static void list_entries(struct client *cl, struct dirent **files, int count,
 478                          const char *path, char *local_path)
 479 {
 480         const char *suffix = "/";
 481         const char *type = "directory";
 482         unsigned int mode = S_IXOTH;
 483         struct stat s;
 484         char *escaped;
 485         char *file;
 486         char buf[128];
 487         int i;
 488
 489         file = local_path + strlen(local_path);
 490         for (i = 0; i < count; i++) {
 491                 const char *name = files[i]->d_name;
 492                 bool dir = !!(files[i]->d_type & DT_DIR);
 493
 494                 if (name[0] == '.' && name[1] == 0)
 495                         goto next;
 496
 497                 sprintf(file, "%s", name);
 498                 if (stat(local_path, &s))
 499                         goto next;
 500
 501                 if (!dir) {
 502                         suffix = "";
 503                         mode = S_IROTH;
 504                         type = uh_file_mime_lookup(local_path);
 505                 }
 506
 507                 if (!(s.st_mode & mode))
 508                         goto next;
 509
 510                 escaped = uh_htmlescape(name);
 511
 512                 if (!escaped)
 513                         goto next;
 514
 515                 uh_chunk_printf(cl,
 516                                 "<li><strong><a href='%s%s%s'>%s</a>%s"
 517                                 "</strong><br /><small>modified: %s"
 518                                 "<br />%s - %.02f kbyte<br />"
 519                                 "<br /></small></li>",
 520                                 path, escaped, suffix,
 521                                 escaped, suffix,
 522                                 uh_file_unix2date(s.st_mtime, buf, sizeof(buf)),
 523                                 type, s.st_size / 1024.0);
 524
 525                 free(escaped);
 526                 *file = 0;
 527 next:
 528                 free(files[i]);
 529         }
 530 }
 531
 532 static void uh_file_dirlist(struct client *cl, struct path_info *pi)
 533 {
 534         struct dirent **files = NULL;
 535         char *escaped_path = uh_htmlescape(pi->name);
 536         int count = 0;
 537
 538         if (!escaped_path)
 539         {
 540                 uh_client_error(cl, 500, "Internal Server Error", "Out of memory");
 541                 return;
 542         }
 543
 544         uh_file_response_200(cl, NULL);
 545         ustream_printf(cl->us, "Content-Type: text/html\r\n\r\n");
 546
 547         uh_chunk_printf(cl,
 548                 "<html><head><title>Index of %s</title></head>"
 549                 "<body><h1>Index of %s</h1><hr /><ol>",
 550                 escaped_path, escaped_path);
 551
 552         count = scandir(pi->phys, &files, NULL, dirent_cmp);
 553         if (count > 0) {
 554                 strcpy(uh_buf, pi->phys);
 555                 list_entries(cl, files, count, escaped_path, uh_buf);
 556         }
 557         free(escaped_path);
 558         free(files);
 559
 560         uh_chunk_printf(cl, "</ol><hr /></body></html>");
 561         uh_request_done(cl);
 562 }
 563
 564 static void file_write_cb(struct client *cl)
 565 {
 566         int fd = cl->dispatch.file.fd;
 567         int r;
 568
 569         while (cl->us->w.data_bytes < 256) {
 570                 r = read(fd, uh_buf, sizeof(uh_buf));
 571                 if (r < 0) {
 572                         if (errno == EINTR)
 573                                 continue;
 574                 }
 575
 576                 if (!r) {
 577                         uh_request_done(cl);
 578                         return;
 579                 }
 580
 581                 uh_chunk_write(cl, uh_buf, r);
 582         }
 583 }
 584
 585 static void uh_file_free(struct client *cl)
 586 {
 587         close(cl->dispatch.file.fd);
 588 }
 589
 590 static void uh_file_data(struct client *cl, struct path_info *pi, int fd)
 591 {
 592         /* test preconditions */
 593         if (!cl->dispatch.no_cache &&
 594             (!uh_file_if_modified_since(cl, &pi->stat) ||
 595              !uh_file_if_match(cl, &pi->stat) ||
 596              !uh_file_if_range(cl, &pi->stat) ||
 597              !uh_file_if_unmodified_since(cl, &pi->stat) ||
 598              !uh_file_if_none_match(cl, &pi->stat))) {
 599                 ustream_printf(cl->us, "\r\n");
 600                 uh_request_done(cl);
 601                 close(fd);
 602                 return;
 603         }
 604
 605         /* write status */
 606         uh_file_response_200(cl, &pi->stat);
 607
 608         ustream_printf(cl->us, "Content-Type: %s\r\n",
 609                            uh_file_mime_lookup(pi->name));
 610
 611         ustream_printf(cl->us, "Content-Length: %" PRIu64 "\r\n\r\n",
 612                            pi->stat.st_size);
 613
 614
 615         /* send body */
 616         if (cl->request.method == UH_HTTP_MSG_HEAD) {
 617                 uh_request_done(cl);
 618                 close(fd);
 619                 return;
 620         }
 621
 622         cl->dispatch.file.fd = fd;
 623         cl->dispatch.write_cb = file_write_cb;
 624         cl->dispatch.free = uh_file_free;
 625         cl->dispatch.close_fds = uh_file_free;
 626         file_write_cb(cl);
 627 }
 628
 629 static bool __handle_file_request(struct client *cl, char *url);
 630
 631 static void uh_file_request(struct client *cl, const char *url,
 632                             struct path_info *pi, struct blob_attr **tb)
 633 {
 634         int fd;
 635         struct http_request *req = &cl->request;
 636         char *error_handler, *escaped_url;
 637
 638         switch (cl->request.method) {
 639         case UH_HTTP_MSG_GET:
 640         case UH_HTTP_MSG_POST:
 641         case UH_HTTP_MSG_HEAD:
 642         case UH_HTTP_MSG_OPTIONS:
 643                 break;
 644
 645         default:
 646                 uh_file_response_405(cl);
 647                 ustream_printf(cl->us, "\r\n");
 648                 uh_request_done(cl);
 649                 return;
 650         }
 651
 652         if (!(pi->stat.st_mode & S_IROTH))
 653                 goto error;
 654
 655         if (pi->stat.st_mode & S_IFREG) {
 656                 fd = open(pi->phys, O_RDONLY);
 657                 if (fd < 0)
 658                         goto error;
 659
 660                 req->disable_chunked = true;
 661                 cl->dispatch.file.hdr = tb;
 662                 uh_file_data(cl, pi, fd);
 663                 cl->dispatch.file.hdr = NULL;
 664                 return;
 665         }
 666
 667         if ((pi->stat.st_mode & S_IFDIR)) {
 668                 if (conf.no_dirlists)
 669                         goto error;
 670
 671                 uh_file_dirlist(cl, pi);
 672                 return;
 673         }
 674
 675 error:
 676         /* check for a previously set 403 redirect status to prevent infinite
 677            recursion when the error page itself lacks sufficient permissions */
 678         if (conf.error_handler && req->redirect_status != 403) {
 679                 req->redirect_status = 403;
 680                 error_handler = alloca(strlen(conf.error_handler) + 1);
 681                 strcpy(error_handler, conf.error_handler);
 682                 if (__handle_file_request(cl, error_handler))
 683                         return;
 684         }
 685
 686         escaped_url = uh_htmlescape(url);
 687
 688         uh_client_error(cl, 403, "Forbidden",
 689                         "You don't have permission to access %s on this server.",
 690                         escaped_url ? escaped_url : "the url");
 691
 692         if (escaped_url)
 693                 free(escaped_url);
 694 }
 695
 696 void uh_dispatch_add(struct dispatch_handler *d)
 697 {
 698         list_add_tail(&d->list, &dispatch_handlers);
 699 }
 700
 701 static struct dispatch_handler *
 702 dispatch_find(const char *url, struct path_info *pi)
 703 {
 704         struct dispatch_handler *d;
 705
 706         list_for_each_entry(d, &dispatch_handlers, list) {
 707                 if (pi) {
 708                         if (d->check_url)
 709                                 continue;
 710
 711                         if (d->check_path(pi, url))
 712                                 return d;
 713                 } else {
 714                         if (d->check_path)
 715                                 continue;
 716
 717                         if (d->check_url(url))
 718                                 return d;
 719                 }
 720         }
 721
 722         return NULL;
 723 }
 724
 725 static void
 726 uh_invoke_script(struct client *cl, struct dispatch_handler *d, struct path_info *pi)
 727 {
 728         char *url = blobmsg_data(blob_data(cl->hdr.head));
 729
 730         n_requests++;
 731         d->handle_request(cl, url, pi);
 732 }
 733
 734 static void uh_complete_request(struct client *cl)
 735 {
 736         struct deferred_request *dr;
 737
 738         n_requests--;
 739
 740         while (!list_empty(&pending_requests)) {
 741                 if (n_requests >= conf.max_script_requests)
 742                         return;
 743
 744                 dr = list_first_entry(&pending_requests, struct deferred_request, list);
 745                 list_del(&dr->list);
 746
 747                 cl = dr->cl;
 748                 dr->called = true;
 749                 cl->dispatch.data_blocked = false;
 750                 uh_invoke_script(cl, dr->d, dr->path ? &dr->pi : NULL);
 751                 client_poll_post_data(cl);
 752         }
 753 }
 754
 755
 756 static void
 757 uh_free_pending_request(struct client *cl)
 758 {
 759         struct deferred_request *dr = cl->dispatch.req_data;
 760
 761         if (dr->called)
 762                 uh_complete_request(cl);
 763         else
 764                 list_del(&dr->list);
 765         free(dr);
 766 }
 767
 768 static int field_len(const char *ptr)
 769 {
 770         if (!ptr)
 771                 return 0;
 772
 773         return strlen(ptr) + 1;
 774 }
 775
 776 #define path_info_fields \
 777         _field(root) \
 778         _field(phys) \
 779         _field(name) \
 780         _field(info) \
 781         _field(query)
 782
 783 static void
 784 uh_defer_script(struct client *cl, struct dispatch_handler *d, struct path_info *pi)
 785 {
 786         struct deferred_request *dr;
 787         char *_root, *_phys, *_name, *_info, *_query;
 788
 789         cl->dispatch.req_free = uh_free_pending_request;
 790
 791         if (pi) {
 792                 /* allocate enough memory to duplicate all path_info strings in one block */
 793 #undef _field
 794 #define _field(_name) &_##_name, field_len(pi->_name),
 795                 dr = calloc_a(sizeof(*dr), path_info_fields NULL);
 796
 797                 memcpy(&dr->pi, pi, sizeof(*pi));
 798                 dr->path = true;
 799
 800                 /* copy all path_info strings */
 801 #undef _field
 802 #define _field(_name) if (pi->_name) dr->pi._name = strcpy(_##_name, pi->_name);
 803                 path_info_fields
 804         } else {
 805                 dr = calloc(1, sizeof(*dr));
 806         }
 807
 808         cl->dispatch.req_data = dr;
 809         cl->dispatch.data_blocked = true;
 810         dr->cl = cl;
 811         dr->d = d;
 812         list_add(&dr->list, &pending_requests);
 813 }
 814
 815 static void
 816 uh_invoke_handler(struct client *cl, struct dispatch_handler *d, char *url, struct path_info *pi)
 817 {
 818         if (!d->script)
 819                 return d->handle_request(cl, url, pi);
 820
 821         if (n_requests >= conf.max_script_requests)
 822                 return uh_defer_script(cl, d, pi);
 823
 824         cl->dispatch.req_free = uh_complete_request;
 825         uh_invoke_script(cl, d, pi);
 826 }
 827
 828 static bool __handle_file_request(struct client *cl, char *url)
 829 {
 830         static const struct blobmsg_policy hdr_policy[__HDR_MAX] = {
 831                 [HDR_AUTHORIZATION] = { "authorization", BLOBMSG_TYPE_STRING },
 832                 [HDR_IF_MODIFIED_SINCE] = { "if-modified-since", BLOBMSG_TYPE_STRING },
 833                 [HDR_IF_UNMODIFIED_SINCE] = { "if-unmodified-since", BLOBMSG_TYPE_STRING },
 834                 [HDR_IF_MATCH] = { "if-match", BLOBMSG_TYPE_STRING },
 835                 [HDR_IF_NONE_MATCH] = { "if-none-match", BLOBMSG_TYPE_STRING },
 836                 [HDR_IF_RANGE] = { "if-range", BLOBMSG_TYPE_STRING },
 837         };
 838         struct dispatch_handler *d;
 839         struct blob_attr *tb[__HDR_MAX];
 840         struct path_info *pi;
 841         char *user, *pass, *auth;
 842
 843         pi = uh_path_lookup(cl, url);
 844         if (!pi)
 845                 return false;
 846
 847         if (pi->redirected)
 848                 return true;
 849
 850         blobmsg_parse(hdr_policy, __HDR_MAX, tb, blob_data(cl->hdr.head), blob_len(cl->hdr.head));
 851
 852         auth = tb[HDR_AUTHORIZATION] ? blobmsg_data(tb[HDR_AUTHORIZATION]) : NULL;
 853
 854         if (!uh_auth_check(cl, pi->name, auth, &user, &pass))
 855                 return true;
 856
 857         if (user && pass) {
 858                 blobmsg_add_string(&cl->hdr, "http-auth-user", user);
 859                 blobmsg_add_string(&cl->hdr, "http-auth-pass", pass);
 860         }
 861
 862         d = dispatch_find(url, pi);
 863         if (d)
 864                 uh_invoke_handler(cl, d, url, pi);
 865         else
 866                 uh_file_request(cl, url, pi, tb);
 867
 868         return true;
 869 }
 870
 871 static char *uh_handle_alias(char *old_url)
 872 {
 873         struct alias *alias;
 874         static char *new_url;
 875         static int url_len;
 876
 877         if (!list_empty(&conf.cgi_alias)) list_for_each_entry(alias, &conf.cgi_alias, list) {
 878                 int old_len;
 879                 int new_len;
 880                 int path_len = 0;
 881
 882                 if (!uh_path_match(alias->alias, old_url))
 883                         continue;
 884
 885                 if (alias->path)
 886                         path_len = strlen(alias->path);
 887
 888                 old_len = strlen(old_url) + 1;
 889                 new_len = old_len + MAX(conf.cgi_prefix_len, path_len);
 890
 891                 if (new_len > url_len) {
 892                         new_url = realloc(new_url, new_len);
 893                         url_len = new_len;
 894                 }
 895
 896                 *new_url = '\0';
 897
 898                 if (alias->path)
 899                         strcpy(new_url, alias->path);
 900                 else if (conf.cgi_prefix)
 901                         strcpy(new_url, conf.cgi_prefix);
 902                 strcat(new_url, old_url);
 903
 904                 return new_url;
 905         }
 906         return old_url;
 907 }
 908
 909 void uh_handle_request(struct client *cl)
 910 {
 911         struct http_request *req = &cl->request;
 912         struct dispatch_handler *d;
 913         char *url = blobmsg_data(blob_data(cl->hdr.head));
 914         char *error_handler, *escaped_url;
 915
 916         blob_buf_init(&cl->hdr_response, 0);
 917         url = uh_handle_alias(url);
 918
 919         uh_handler_run(cl, &url, false);
 920         if (!url)
 921                 return;
 922
 923         req->redirect_status = 200;
 924         d = dispatch_find(url, NULL);
 925         if (d)
 926                 return uh_invoke_handler(cl, d, url, NULL);
 927
 928         if (__handle_file_request(cl, url))
 929                 return;
 930
 931         if (uh_handler_run(cl, &url, true)) {
 932                 if (!url)
 933                         return;
 934
 935                 uh_handler_run(cl, &url, false);
 936                 if (__handle_file_request(cl, url))
 937                         return;
 938         }
 939
 940         req->redirect_status = 404;
 941         if (conf.error_handler) {
 942                 error_handler = alloca(strlen(conf.error_handler) + 1);
 943                 strcpy(error_handler, conf.error_handler);
 944                 if (__handle_file_request(cl, error_handler))
 945                         return;
 946         }
 947
 948         escaped_url = uh_htmlescape(url);
 949
 950         uh_client_error(cl, 404, "Not Found", "The requested URL %s was not found on this server.",
 951                         escaped_url ? escaped_url : "");
 952
 953         if (escaped_url)
 954                 free(escaped_url);
 955 }