Root/package/network/services/uhttpd/src/uhttpd.c

1/*
2 * uhttpd - Tiny single-threaded httpd - Main component
3 *
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
5 *
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
9 *
10 * http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18
19#define _XOPEN_SOURCE 500 /* crypt() */
20
21#include "uhttpd.h"
22#include "uhttpd-utils.h"
23#include "uhttpd-file.h"
24
25#ifdef HAVE_CGI
26#include "uhttpd-cgi.h"
27#endif
28
29#ifdef HAVE_LUA
30#include "uhttpd-lua.h"
31#endif
32
33#ifdef HAVE_TLS
34#include "uhttpd-tls.h"
35#endif
36
37
38const char * http_methods[] = { "GET", "POST", "HEAD", };
39const char * http_versions[] = { "HTTP/0.9", "HTTP/1.0", "HTTP/1.1", };
40
41static int run = 1;
42
43static void uh_sigterm(int sig)
44{
45    run = 0;
46}
47
48static void uh_config_parse(struct config *conf)
49{
50    FILE *c;
51    char line[512];
52    char *col1 = NULL;
53    char *col2 = NULL;
54    char *eol = NULL;
55
56    const char *path = conf->file ? conf->file : "/etc/httpd.conf";
57
58
59    if ((c = fopen(path, "r")) != NULL)
60    {
61        memset(line, 0, sizeof(line));
62
63        while (fgets(line, sizeof(line) - 1, c))
64        {
65            if ((line[0] == '/') && (strchr(line, ':') != NULL))
66            {
67                if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
68                    !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
69                    !(eol = strchr(col2, '\n')) || (*eol++ = 0))
70                {
71                    continue;
72                }
73
74                if (!uh_auth_add(line, col1, col2))
75                {
76                    fprintf(stderr,
77                            "Notice: No password set for user %s, ignoring "
78                            "authentication on %s\n", col1, line
79                    );
80                }
81            }
82            else if (!strncmp(line, "I:", 2))
83            {
84                if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
85                    !(eol = strchr(col1, '\n')) || (*eol++ = 0))
86                {
87                       continue;
88                }
89
90                conf->index_file = strdup(col1);
91            }
92            else if (!strncmp(line, "E404:", 5))
93            {
94                if (!(col1 = strchr(line, ':')) || (*col1++ = 0) ||
95                    !(eol = strchr(col1, '\n')) || (*eol++ = 0))
96                {
97                    continue;
98                }
99
100                conf->error_handler = strdup(col1);
101            }
102#ifdef HAVE_CGI
103            else if ((line[0] == '*') && (strchr(line, ':') != NULL))
104            {
105                if (!(col1 = strchr(line, '*')) || (*col1++ = 0) ||
106                    !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
107                    !(eol = strchr(col2, '\n')) || (*eol++ = 0))
108                {
109                    continue;
110                }
111
112                if (!uh_interpreter_add(col1, col2))
113                {
114                    fprintf(stderr,
115                            "Unable to add interpreter %s for extension %s: "
116                            "Out of memory\n", col2, col1
117                    );
118                }
119            }
120#endif
121        }
122
123        fclose(c);
124    }
125}
126
127static void uh_listener_cb(struct uloop_fd *u, unsigned int events);
128
129static int uh_socket_bind(const char *host, const char *port,
130                          struct addrinfo *hints, int do_tls,
131                          struct config *conf)
132{
133    int sock = -1;
134    int yes = 1;
135    int status;
136    int bound = 0;
137
138    int tcp_ka_idl, tcp_ka_int, tcp_ka_cnt;
139
140    struct listener *l = NULL;
141    struct addrinfo *addrs = NULL, *p = NULL;
142
143    if ((status = getaddrinfo(host, port, hints, &addrs)) != 0)
144    {
145        fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
146    }
147
148    /* try to bind a new socket to each found address */
149    for (p = addrs; p; p = p->ai_next)
150    {
151        /* get the socket */
152        if ((sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1)
153        {
154            perror("socket()");
155            goto error;
156        }
157
158        /* "address already in use" */
159        if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)))
160        {
161            perror("setsockopt()");
162            goto error;
163        }
164
165        /* TCP keep-alive */
166        if (conf->tcp_keepalive > 0)
167        {
168            tcp_ka_idl = 1;
169            tcp_ka_cnt = 3;
170            tcp_ka_int = conf->tcp_keepalive;
171
172            if (setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
173                setsockopt(sock, SOL_TCP, TCP_KEEPIDLE, &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
174                setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
175                setsockopt(sock, SOL_TCP, TCP_KEEPCNT, &tcp_ka_cnt, sizeof(tcp_ka_cnt)))
176            {
177                fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
178                    strerror(errno));
179            }
180        }
181
182        /* required to get parallel v4 + v6 working */
183        if (p->ai_family == AF_INET6)
184        {
185            if (setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1)
186            {
187                perror("setsockopt()");
188                goto error;
189            }
190        }
191
192        /* bind */
193        if (bind(sock, p->ai_addr, p->ai_addrlen) == -1)
194        {
195            perror("bind()");
196            goto error;
197        }
198
199        /* listen */
200        if (listen(sock, UH_LIMIT_CLIENTS) == -1)
201        {
202            perror("listen()");
203            goto error;
204        }
205
206        /* add listener to global list */
207        if (!(l = uh_listener_add(sock, conf)))
208        {
209            fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
210            goto error;
211        }
212
213#ifdef HAVE_TLS
214        /* init TLS */
215        l->tls = do_tls ? conf->tls : NULL;
216#endif
217
218        /* add socket to uloop */
219        fd_cloexec(sock);
220        uh_ufd_add(&l->fd, uh_listener_cb, ULOOP_READ);
221
222        bound++;
223        continue;
224
225        error:
226        if (sock > 0)
227            close(sock);
228    }
229
230    freeaddrinfo(addrs);
231
232    return bound;
233}
234
235static struct http_request * uh_http_header_parse(struct client *cl,
236                                                  char *buffer, int buflen)
237{
238    char *method = buffer;
239    char *path = NULL;
240    char *version = NULL;
241
242    char *headers = NULL;
243    char *hdrname = NULL;
244    char *hdrdata = NULL;
245
246    int i;
247    int hdrcount = 0;
248
249    struct http_request *req = &cl->request;
250
251
252    /* terminate initial header line */
253    if ((headers = strfind(buffer, buflen, "\r\n", 2)) != NULL)
254    {
255        buffer[buflen-1] = 0;
256
257        *headers++ = 0;
258        *headers++ = 0;
259
260        /* find request path */
261        if ((path = strchr(buffer, ' ')) != NULL)
262            *path++ = 0;
263
264        /* find http version */
265        if ((path != NULL) && ((version = strchr(path, ' ')) != NULL))
266            *version++ = 0;
267
268
269        /* check method */
270        if (method && !strcmp(method, "GET"))
271            req->method = UH_HTTP_MSG_GET;
272        else if (method && !strcmp(method, "POST"))
273            req->method = UH_HTTP_MSG_POST;
274        else if (method && !strcmp(method, "HEAD"))
275            req->method = UH_HTTP_MSG_HEAD;
276        else
277        {
278            /* invalid method */
279            uh_http_response(cl, 405, "Method Not Allowed");
280            return NULL;
281        }
282
283        /* check path */
284        if (!path || !strlen(path))
285        {
286            /* malformed request */
287            uh_http_response(cl, 400, "Bad Request");
288            return NULL;
289        }
290        else
291        {
292            req->url = path;
293        }
294
295        /* check version */
296        if (version && !strcmp(version, "HTTP/0.9"))
297            req->version = UH_HTTP_VER_0_9;
298        else if (version && !strcmp(version, "HTTP/1.0"))
299            req->version = UH_HTTP_VER_1_0;
300        else if (version && !strcmp(version, "HTTP/1.1"))
301            req->version = UH_HTTP_VER_1_1;
302        else
303        {
304            /* unsupported version */
305            uh_http_response(cl, 400, "Bad Request");
306            return NULL;
307        }
308
309        D("SRV: %s %s %s\n",
310          http_methods[req->method], req->url, http_versions[req->version]);
311
312        /* process header fields */
313        for (i = (int)(headers - buffer); i < buflen; i++)
314        {
315            /* found eol and have name + value, push out header tuple */
316            if (hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n'))
317            {
318                buffer[i] = 0;
319
320                /* store */
321                if ((hdrcount + 1) < array_size(req->headers))
322                {
323                    D("SRV: HTTP: %s: %s\n", hdrname, hdrdata);
324
325                    req->headers[hdrcount++] = hdrname;
326                    req->headers[hdrcount++] = hdrdata;
327
328                    hdrname = hdrdata = NULL;
329                }
330
331                /* too large */
332                else
333                {
334                    D("SRV: HTTP: header too big (too many headers)\n");
335                    uh_http_response(cl, 413, "Request Entity Too Large");
336                    return NULL;
337                }
338            }
339
340            /* have name but no value and found a colon, start of value */
341            else if (hdrname && !hdrdata &&
342                     ((i+1) < buflen) && (buffer[i] == ':'))
343            {
344                buffer[i] = 0;
345                hdrdata = &buffer[i+1];
346
347                while ((hdrdata + 1) < (buffer + buflen) && *hdrdata == ' ')
348                    hdrdata++;
349            }
350
351            /* have no name and found [A-Za-z], start of name */
352            else if (!hdrname && isalpha(buffer[i]))
353            {
354                hdrname = &buffer[i];
355            }
356        }
357
358        /* valid enough */
359        req->redirect_status = 200;
360        return req;
361    }
362
363    /* Malformed request */
364    uh_http_response(cl, 400, "Bad Request");
365    return NULL;
366}
367
368
369static struct http_request * uh_http_header_recv(struct client *cl)
370{
371    char *bufptr = cl->httpbuf.buf;
372    char *idxptr = NULL;
373
374    ssize_t blen = sizeof(cl->httpbuf.buf)-1;
375    ssize_t rlen = 0;
376
377    memset(bufptr, 0, sizeof(cl->httpbuf.buf));
378
379    while (blen > 0)
380    {
381        /* receive data */
382        ensure_out(rlen = uh_tcp_recv(cl, bufptr, blen));
383        D("SRV: Client(%d) peek(%d) = %d\n", cl->fd.fd, blen, rlen);
384
385        if (rlen <= 0)
386        {
387            D("SRV: Client(%d) dead [%s]\n", cl->fd.fd, strerror(errno));
388            return NULL;
389        }
390
391        blen -= rlen;
392        bufptr += rlen;
393
394        if ((idxptr = strfind(cl->httpbuf.buf, sizeof(cl->httpbuf.buf),
395                              "\r\n\r\n", 4)))
396        {
397            /* header read complete ... */
398            cl->httpbuf.ptr = idxptr + 4;
399            cl->httpbuf.len = bufptr - cl->httpbuf.ptr;
400
401            return uh_http_header_parse(cl, cl->httpbuf.buf,
402                                        (cl->httpbuf.ptr - cl->httpbuf.buf));
403        }
404    }
405
406    /* request entity too large */
407    D("SRV: HTTP: header too big (buffer exceeded)\n");
408    uh_http_response(cl, 413, "Request Entity Too Large");
409
410out:
411    return NULL;
412}
413
414#if defined(HAVE_LUA) || defined(HAVE_CGI)
415static int uh_path_match(const char *prefix, const char *url)
416{
417    if ((strstr(url, prefix) == url) &&
418        ((prefix[strlen(prefix)-1] == '/') ||
419         (strlen(url) == strlen(prefix)) ||
420         (url[strlen(prefix)] == '/')))
421    {
422        return 1;
423    }
424
425    return 0;
426}
427#endif
428
429static bool uh_dispatch_request(struct client *cl, struct http_request *req)
430{
431    struct path_info *pin;
432    struct interpreter *ipr = NULL;
433    struct config *conf = cl->server->conf;
434
435#ifdef HAVE_LUA
436    /* Lua request? */
437    if (conf->lua_state &&
438        uh_path_match(conf->lua_prefix, req->url))
439    {
440        return conf->lua_request(cl, conf->lua_state);
441    }
442    else
443#endif
444
445#ifdef HAVE_UBUS
446    /* ubus request? */
447    if (conf->ubus_state &&
448        uh_path_match(conf->ubus_prefix, req->url))
449    {
450        return conf->ubus_request(cl, conf->ubus_state);
451    }
452    else
453#endif
454
455    /* dispatch request */
456    if ((pin = uh_path_lookup(cl, req->url)) != NULL)
457    {
458        /* auth ok? */
459        if (!pin->redirected && uh_auth_check(cl, req, pin))
460        {
461#ifdef HAVE_CGI
462            if (uh_path_match(conf->cgi_prefix, pin->name) ||
463                (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
464            {
465                return uh_cgi_request(cl, pin, ipr);
466            }
467#endif
468            return uh_file_request(cl, pin);
469        }
470    }
471
472    /* 404 - pass 1 */
473    else
474    {
475        /* Try to invoke an error handler */
476        if ((pin = uh_path_lookup(cl, conf->error_handler)) != NULL)
477        {
478            /* auth ok? */
479            if (uh_auth_check(cl, req, pin))
480            {
481                req->redirect_status = 404;
482#ifdef HAVE_CGI
483                if (uh_path_match(conf->cgi_prefix, pin->name) ||
484                    (ipr = uh_interpreter_lookup(pin->phys)) != NULL)
485                {
486                    return uh_cgi_request(cl, pin, ipr);
487                }
488#endif
489                return uh_file_request(cl, pin);
490            }
491        }
492
493        /* 404 - pass 2 */
494        else
495        {
496            uh_http_sendhf(cl, 404, "Not Found", "No such file or directory");
497        }
498    }
499
500    return false;
501}
502
503static void uh_socket_cb(struct uloop_fd *u, unsigned int events);
504
505static void uh_listener_cb(struct uloop_fd *u, unsigned int events)
506{
507    int new_fd;
508    struct listener *serv;
509    struct client *cl;
510    struct config *conf;
511
512    struct sockaddr_in6 sa;
513    socklen_t sl = sizeof(sa);
514
515    serv = container_of(u, struct listener, fd);
516    conf = serv->conf;
517
518    /* defer client if maximum number of requests is exceeded */
519    if (serv->n_clients >= conf->max_requests)
520        return;
521
522    /* handle new connections */
523    if ((new_fd = accept(u->fd, (struct sockaddr *)&sa, &sl)) != -1)
524    {
525        D("SRV: Server(%d) accept => Client(%d)\n", u->fd, new_fd);
526
527        /* add to global client list */
528        if ((cl = uh_client_add(new_fd, serv, &sa)) != NULL)
529        {
530            /* add client socket to global fdset */
531            uh_ufd_add(&cl->fd, uh_socket_cb, ULOOP_READ);
532            fd_cloexec(cl->fd.fd);
533
534#ifdef HAVE_TLS
535            /* setup client tls context */
536            if (conf->tls)
537            {
538                if (conf->tls_accept(cl) < 1)
539                {
540                    D("SRV: Client(%d) SSL handshake failed, drop\n", new_fd);
541
542                    /* remove from global client list */
543                    uh_client_remove(cl);
544                    return;
545                }
546            }
547#endif
548        }
549
550        /* insufficient resources */
551        else
552        {
553            fprintf(stderr, "uh_client_add(): Cannot allocate memory\n");
554            close(new_fd);
555        }
556    }
557}
558
559static void uh_client_cb(struct client *cl, unsigned int events);
560
561static void uh_rpipe_cb(struct uloop_fd *u, unsigned int events)
562{
563    struct client *cl = container_of(u, struct client, rpipe);
564
565    D("SRV: Client(%d) rpipe readable\n", cl->fd.fd);
566
567    uh_client_cb(cl, ULOOP_WRITE);
568}
569
570static void uh_socket_cb(struct uloop_fd *u, unsigned int events)
571{
572    struct client *cl = container_of(u, struct client, fd);
573
574    D("SRV: Client(%d) socket readable\n", cl->fd.fd);
575
576    uh_client_cb(cl, ULOOP_READ);
577}
578
579static void uh_child_cb(struct uloop_process *p, int rv)
580{
581    struct client *cl = container_of(p, struct client, proc);
582
583    D("SRV: Client(%d) child(%d) dead\n", cl->fd.fd, cl->proc.pid);
584
585    uh_client_cb(cl, ULOOP_READ | ULOOP_WRITE);
586}
587
588static void uh_kill9_cb(struct uloop_timeout *t)
589{
590    struct client *cl = container_of(t, struct client, timeout);
591
592    if (!kill(cl->proc.pid, 0))
593    {
594        D("SRV: Client(%d) child(%d) kill(SIGKILL)...\n",
595          cl->fd.fd, cl->proc.pid);
596
597        kill(cl->proc.pid, SIGKILL);
598    }
599}
600
601static void uh_timeout_cb(struct uloop_timeout *t)
602{
603    struct client *cl = container_of(t, struct client, timeout);
604
605    D("SRV: Client(%d) child(%d) timed out\n", cl->fd.fd, cl->proc.pid);
606
607    if (!kill(cl->proc.pid, 0))
608    {
609        D("SRV: Client(%d) child(%d) kill(SIGTERM)...\n",
610          cl->fd.fd, cl->proc.pid);
611
612        kill(cl->proc.pid, SIGTERM);
613
614        cl->timeout.cb = uh_kill9_cb;
615        uloop_timeout_set(&cl->timeout, 1000);
616    }
617}
618
619static void uh_client_cb(struct client *cl, unsigned int events)
620{
621    int i;
622    struct config *conf;
623    struct http_request *req;
624
625    conf = cl->server->conf;
626
627    D("SRV: Client(%d) enter callback\n", cl->fd.fd);
628
629    /* undispatched yet */
630    if (!cl->dispatched)
631    {
632        /* we have no headers yet and this was a write event, ignore... */
633        if (!(events & ULOOP_READ))
634        {
635            D("SRV: Client(%d) ignoring write event before headers\n", cl->fd.fd);
636            return;
637        }
638
639        /* attempt to receive and parse headers */
640        if (!(req = uh_http_header_recv(cl)))
641        {
642            D("SRV: Client(%d) failed to receive header\n", cl->fd.fd);
643            uh_client_shutdown(cl);
644            return;
645        }
646
647        /* process expect headers */
648        foreach_header(i, req->headers)
649        {
650            if (strcasecmp(req->headers[i], "Expect"))
651                continue;
652
653            if (strcasecmp(req->headers[i+1], "100-continue"))
654            {
655                D("SRV: Client(%d) unknown expect header (%s)\n",
656                  cl->fd.fd, req->headers[i+1]);
657
658                uh_http_response(cl, 417, "Precondition Failed");
659                uh_client_shutdown(cl);
660                return;
661            }
662            else
663            {
664                D("SRV: Client(%d) sending HTTP/1.1 100 Continue\n", cl->fd.fd);
665
666                uh_http_sendf(cl, NULL, "HTTP/1.1 100 Continue\r\n\r\n");
667                cl->httpbuf.len = 0; /* client will re-send the body */
668                break;
669            }
670        }
671
672        /* RFC1918 filtering */
673        if (conf->rfc1918_filter &&
674            sa_rfc1918(&cl->peeraddr) && !sa_rfc1918(&cl->servaddr))
675        {
676            uh_http_sendhf(cl, 403, "Forbidden",
677                           "Rejected request from RFC1918 IP "
678                           "to public server address");
679
680            uh_client_shutdown(cl);
681            return;
682        }
683
684        /* dispatch request */
685        if (!uh_dispatch_request(cl, req))
686        {
687            D("SRV: Client(%d) failed to dispach request\n", cl->fd.fd);
688            uh_client_shutdown(cl);
689            return;
690        }
691
692        /* request handler spawned a pipe, register handler */
693        if (cl->rpipe.fd > -1)
694        {
695            D("SRV: Client(%d) pipe(%d) spawned\n", cl->fd.fd, cl->rpipe.fd);
696
697            uh_ufd_add(&cl->rpipe, uh_rpipe_cb, ULOOP_READ);
698        }
699
700        /* request handler spawned a child, register handler */
701        if (cl->proc.pid)
702        {
703            D("SRV: Client(%d) child(%d) spawned\n", cl->fd.fd, cl->proc.pid);
704
705            cl->proc.cb = uh_child_cb;
706            uloop_process_add(&cl->proc);
707
708            cl->timeout.cb = uh_timeout_cb;
709            uloop_timeout_set(&cl->timeout, conf->script_timeout * 1000);
710        }
711
712        /* header processing complete */
713        D("SRV: Client(%d) dispatched\n", cl->fd.fd);
714        cl->dispatched = true;
715    }
716
717    if (!cl->cb(cl))
718    {
719        D("SRV: Client(%d) response callback signalized EOF\n", cl->fd.fd);
720        uh_client_shutdown(cl);
721        return;
722    }
723}
724
725#ifdef HAVE_TLS
726static inline int uh_inittls(struct config *conf)
727{
728    /* library handle */
729    void *lib;
730
731    /* already loaded */
732    if (conf->tls != NULL)
733        return 0;
734
735    /* load TLS plugin */
736    if (!(lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)))
737    {
738        fprintf(stderr,
739                "Notice: Unable to load TLS plugin - disabling SSL support! "
740                "(Reason: %s)\n", dlerror()
741        );
742
743        return 1;
744    }
745    else
746    {
747        /* resolve functions */
748        if (!(conf->tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
749            !(conf->tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
750            !(conf->tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
751            !(conf->tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
752            !(conf->tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
753            !(conf->tls_close = dlsym(lib, "uh_tls_client_close")) ||
754            !(conf->tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
755            !(conf->tls_send = dlsym(lib, "uh_tls_client_send")))
756        {
757            fprintf(stderr,
758                    "Error: Failed to lookup required symbols "
759                    "in TLS plugin: %s\n", dlerror()
760            );
761            exit(1);
762        }
763
764        /* init SSL context */
765        if (!(conf->tls = conf->tls_init()))
766        {
767            fprintf(stderr, "Error: Failed to initalize SSL context\n");
768            exit(1);
769        }
770    }
771
772    return 0;
773}
774#endif
775
776int main (int argc, char **argv)
777{
778    /* working structs */
779    struct addrinfo hints;
780    struct sigaction sa;
781    struct config conf;
782
783    /* maximum file descriptor number */
784    int cur_fd = 0;
785
786#ifdef HAVE_TLS
787    int tls = 0;
788    int keys = 0;
789#endif
790
791    int bound = 0;
792    int nofork = 0;
793
794    /* args */
795    int opt;
796    char addr[128];
797    char *port = NULL;
798
799#if defined(HAVE_LUA) || defined(HAVE_TLS) || defined(HAVE_UBUS)
800    /* library handle */
801    void *lib;
802#endif
803
804    /* handle SIGPIPE, SIGINT, SIGTERM */
805    sa.sa_flags = 0;
806    sigemptyset(&sa.sa_mask);
807
808    sa.sa_handler = SIG_IGN;
809    sigaction(SIGPIPE, &sa, NULL);
810
811    sa.sa_handler = uh_sigterm;
812    sigaction(SIGINT, &sa, NULL);
813    sigaction(SIGTERM, &sa, NULL);
814
815    /* prepare addrinfo hints */
816    memset(&hints, 0, sizeof(hints));
817    hints.ai_family = AF_UNSPEC;
818    hints.ai_socktype = SOCK_STREAM;
819    hints.ai_flags = AI_PASSIVE;
820
821    /* parse args */
822    memset(&conf, 0, sizeof(conf));
823
824    uloop_init();
825
826    while ((opt = getopt(argc, argv,
827                         "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:n:x:i:t:T:A:u:U:")) > 0)
828    {
829        switch(opt)
830        {
831            /* [addr:]port */
832            case 'p':
833            case 's':
834                memset(addr, 0, sizeof(addr));
835
836                if ((port = strrchr(optarg, ':')) != NULL)
837                {
838                    if ((optarg[0] == '[') && (port > optarg) && (port[-1] == ']'))
839                        memcpy(addr, optarg + 1,
840                            min(sizeof(addr), (int)(port - optarg) - 2));
841                    else
842                        memcpy(addr, optarg,
843                            min(sizeof(addr), (int)(port - optarg)));
844
845                    port++;
846                }
847                else
848                {
849                    port = optarg;
850                }
851
852#ifdef HAVE_TLS
853                if (opt == 's')
854                {
855                    if (uh_inittls(&conf))
856                    {
857                        fprintf(stderr,
858                            "Notice: TLS support is disabled, "
859                            "ignoring '-s %s'\n", optarg
860                        );
861                        continue;
862                    }
863
864                    tls = 1;
865                }
866#endif
867
868                /* bind sockets */
869                bound += uh_socket_bind(addr[0] ? addr : NULL, port, &hints,
870                                        (opt == 's'), &conf);
871                break;
872
873#ifdef HAVE_TLS
874            /* certificate */
875            case 'C':
876                if (!uh_inittls(&conf))
877                {
878                    if (conf.tls_cert(conf.tls, optarg) < 1)
879                    {
880                        fprintf(stderr,
881                                "Error: Invalid certificate file given\n");
882                        exit(1);
883                    }
884
885                    keys++;
886                }
887
888                break;
889
890            /* key */
891            case 'K':
892                if (!uh_inittls(&conf))
893                {
894                    if (conf.tls_key(conf.tls, optarg) < 1)
895                    {
896                        fprintf(stderr,
897                                "Error: Invalid private key file given\n");
898                        exit(1);
899                    }
900
901                    keys++;
902                }
903
904                break;
905#else
906            case 'C':
907            case 'K':
908                fprintf(stderr,
909                        "Notice: TLS support not compiled, ignoring -%c\n",
910                        opt);
911                break;
912#endif
913
914            /* docroot */
915            case 'h':
916                if (! realpath(optarg, conf.docroot))
917                {
918                    fprintf(stderr, "Error: Invalid directory %s: %s\n",
919                            optarg, strerror(errno));
920                    exit(1);
921                }
922                break;
923
924            /* error handler */
925            case 'E':
926                if ((strlen(optarg) == 0) || (optarg[0] != '/'))
927                {
928                    fprintf(stderr, "Error: Invalid error handler: %s\n",
929                            optarg);
930                    exit(1);
931                }
932                conf.error_handler = optarg;
933                break;
934
935            /* index file */
936            case 'I':
937                if ((strlen(optarg) == 0) || (optarg[0] == '/'))
938                {
939                    fprintf(stderr, "Error: Invalid index page: %s\n",
940                            optarg);
941                    exit(1);
942                }
943                conf.index_file = optarg;
944                break;
945
946            /* don't follow symlinks */
947            case 'S':
948                conf.no_symlinks = 1;
949                break;
950
951            /* don't list directories */
952            case 'D':
953                conf.no_dirlists = 1;
954                break;
955
956            case 'R':
957                conf.rfc1918_filter = 1;
958                break;
959
960            case 'n':
961                conf.max_requests = atoi(optarg);
962                break;
963
964#ifdef HAVE_CGI
965            /* cgi prefix */
966            case 'x':
967                conf.cgi_prefix = optarg;
968                break;
969
970            /* interpreter */
971            case 'i':
972                if ((optarg[0] == '.') && (port = strchr(optarg, '=')))
973                {
974                    *port++ = 0;
975                    uh_interpreter_add(optarg, port);
976                }
977                else
978                {
979                    fprintf(stderr, "Error: Invalid interpreter: %s\n",
980                            optarg);
981                    exit(1);
982                }
983                break;
984#else
985            case 'x':
986            case 'i':
987                fprintf(stderr,
988                        "Notice: CGI support not compiled, ignoring -%c\n",
989                        opt);
990                break;
991#endif
992
993#ifdef HAVE_LUA
994            /* lua prefix */
995            case 'l':
996                conf.lua_prefix = optarg;
997                break;
998
999            /* lua handler */
1000            case 'L':
1001                conf.lua_handler = optarg;
1002                break;
1003#else
1004            case 'l':
1005            case 'L':
1006                fprintf(stderr,
1007                        "Notice: Lua support not compiled, ignoring -%c\n",
1008                        opt);
1009                break;
1010#endif
1011
1012#ifdef HAVE_UBUS
1013            /* ubus prefix */
1014            case 'u':
1015                conf.ubus_prefix = optarg;
1016                break;
1017
1018            /* ubus socket */
1019            case 'U':
1020                conf.ubus_socket = optarg;
1021                break;
1022#else
1023            case 'u':
1024            case 'U':
1025                fprintf(stderr,
1026                        "Notice: UBUS support not compiled, ignoring -%c\n",
1027                        opt);
1028                break;
1029#endif
1030
1031#if defined(HAVE_CGI) || defined(HAVE_LUA)
1032            /* script timeout */
1033            case 't':
1034                conf.script_timeout = atoi(optarg);
1035                break;
1036#endif
1037
1038            /* network timeout */
1039            case 'T':
1040                conf.network_timeout = atoi(optarg);
1041                break;
1042
1043            /* tcp keep-alive */
1044            case 'A':
1045                conf.tcp_keepalive = atoi(optarg);
1046                break;
1047
1048            /* no fork */
1049            case 'f':
1050                nofork = 1;
1051                break;
1052
1053            /* urldecode */
1054            case 'd':
1055                if ((port = malloc(strlen(optarg)+1)) != NULL)
1056                {
1057                    /* "decode" plus to space to retain compat */
1058                    for (opt = 0; optarg[opt]; opt++)
1059                        if (optarg[opt] == '+')
1060                            optarg[opt] = ' ';
1061                    /* opt now contains strlen(optarg) -- no need to re-scan */
1062                    memset(port, 0, opt+1);
1063                    if (uh_urldecode(port, opt, optarg, opt) < 0)
1064                        fprintf(stderr, "uhttpd: invalid encoding\n");
1065
1066                    printf("%s", port);
1067                    free(port);
1068                    exit(0);
1069                }
1070                break;
1071
1072            /* basic auth realm */
1073            case 'r':
1074                conf.realm = optarg;
1075                break;
1076
1077            /* md5 crypt */
1078            case 'm':
1079                printf("%s\n", crypt(optarg, "$1$"));
1080                exit(0);
1081                break;
1082
1083            /* config file */
1084            case 'c':
1085                conf.file = optarg;
1086                break;
1087
1088            default:
1089                fprintf(stderr,
1090                    "Usage: %s -p [addr:]port [-h docroot]\n"
1091                    " -f Do not fork to background\n"
1092                    " -c file Configuration file, default is '/etc/httpd.conf'\n"
1093                    " -p [addr:]port Bind to specified address and port, multiple allowed\n"
1094#ifdef HAVE_TLS
1095                    " -s [addr:]port Like -p but provide HTTPS on this port\n"
1096                    " -C file ASN.1 server certificate file\n"
1097                    " -K file ASN.1 server private key file\n"
1098#endif
1099                    " -h directory Specify the document root, default is '.'\n"
1100                    " -E string Use given virtual URL as 404 error handler\n"
1101                    " -I string Use given filename as index page for directories\n"
1102                    " -S Do not follow symbolic links outside of the docroot\n"
1103                    " -D Do not allow directory listings, send 403 instead\n"
1104                    " -R Enable RFC1918 filter\n"
1105                    " -n count Maximum allowed number of concurrent requests\n"
1106#ifdef HAVE_LUA
1107                    " -l string URL prefix for Lua handler, default is '/lua'\n"
1108                    " -L file Lua handler script, omit to disable Lua\n"
1109#endif
1110#ifdef HAVE_UBUS
1111                    " -u string URL prefix for HTTP/JSON handler\n"
1112                    " -U file Override ubus socket path\n"
1113#endif
1114#ifdef HAVE_CGI
1115                    " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
1116                    " -i .ext=path Use interpreter at path for files with the given extension\n"
1117#endif
1118#if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1119                    " -t seconds CGI, Lua and UBUS script timeout in seconds, default is 60\n"
1120#endif
1121                    " -T seconds Network timeout in seconds, default is 30\n"
1122                    " -d string URL decode given string\n"
1123                    " -r string Specify basic auth realm\n"
1124                    " -m string MD5 crypt given string\n"
1125                    "\n", argv[0]
1126                );
1127
1128                exit(1);
1129        }
1130    }
1131
1132#ifdef HAVE_TLS
1133    if ((tls == 1) && (keys < 2))
1134    {
1135        fprintf(stderr, "Error: Missing private key or certificate file\n");
1136        exit(1);
1137    }
1138#endif
1139
1140    if (bound < 1)
1141    {
1142        fprintf(stderr, "Error: No sockets bound, unable to continue\n");
1143        exit(1);
1144    }
1145
1146    /* default docroot */
1147    if (!conf.docroot[0] && !realpath(".", conf.docroot))
1148    {
1149        fprintf(stderr, "Error: Can not determine default document root: %s\n",
1150            strerror(errno));
1151        exit(1);
1152    }
1153
1154    /* default realm */
1155    if (!conf.realm)
1156        conf.realm = "Protected Area";
1157
1158    /* config file */
1159    uh_config_parse(&conf);
1160
1161    /* default max requests */
1162    if (conf.max_requests <= 0)
1163        conf.max_requests = 3;
1164
1165    /* default network timeout */
1166    if (conf.network_timeout <= 0)
1167        conf.network_timeout = 30;
1168
1169#if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS)
1170    /* default script timeout */
1171    if (conf.script_timeout <= 0)
1172        conf.script_timeout = 60;
1173#endif
1174
1175#ifdef HAVE_CGI
1176    /* default cgi prefix */
1177    if (!conf.cgi_prefix)
1178        conf.cgi_prefix = "/cgi-bin";
1179#endif
1180
1181#ifdef HAVE_LUA
1182    /* load Lua plugin */
1183    if (!(lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)))
1184    {
1185        fprintf(stderr,
1186                "Notice: Unable to load Lua plugin - disabling Lua support! "
1187                "(Reason: %s)\n", dlerror());
1188    }
1189    else
1190    {
1191        /* resolve functions */
1192        if (!(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
1193            !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
1194            !(conf.lua_request = dlsym(lib, "uh_lua_request")))
1195        {
1196            fprintf(stderr,
1197                    "Error: Failed to lookup required symbols "
1198                    "in Lua plugin: %s\n", dlerror()
1199            );
1200            exit(1);
1201        }
1202
1203        /* init Lua runtime if handler is specified */
1204        if (conf.lua_handler)
1205        {
1206            /* default lua prefix */
1207            if (!conf.lua_prefix)
1208                conf.lua_prefix = "/lua";
1209
1210            conf.lua_state = conf.lua_init(&conf);
1211        }
1212    }
1213#endif
1214
1215#ifdef HAVE_UBUS
1216    /* load ubus plugin */
1217    if (!(lib = dlopen("uhttpd_ubus.so", RTLD_LAZY | RTLD_GLOBAL)))
1218    {
1219        fprintf(stderr,
1220                "Notice: Unable to load ubus plugin - disabling ubus support! "
1221                "(Reason: %s)\n", dlerror());
1222    }
1223    else if (conf.ubus_prefix)
1224    {
1225        /* resolve functions */
1226        if (!(conf.ubus_init = dlsym(lib, "uh_ubus_init")) ||
1227            !(conf.ubus_close = dlsym(lib, "uh_ubus_close")) ||
1228            !(conf.ubus_request = dlsym(lib, "uh_ubus_request")))
1229        {
1230            fprintf(stderr,
1231                    "Error: Failed to lookup required symbols "
1232                    "in ubus plugin: %s\n", dlerror()
1233            );
1234            exit(1);
1235        }
1236
1237        /* initialize ubus */
1238        conf.ubus_state = conf.ubus_init(&conf);
1239    }
1240#endif
1241
1242    /* fork (if not disabled) */
1243    if (!nofork)
1244    {
1245        switch (fork())
1246        {
1247            case -1:
1248                perror("fork()");
1249                exit(1);
1250
1251            case 0:
1252                /* daemon setup */
1253                if (chdir("/"))
1254                    perror("chdir()");
1255
1256                if ((cur_fd = open("/dev/null", O_WRONLY)) > -1)
1257                    dup2(cur_fd, 0);
1258
1259                if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1260                    dup2(cur_fd, 1);
1261
1262                if ((cur_fd = open("/dev/null", O_RDONLY)) > -1)
1263                    dup2(cur_fd, 2);
1264
1265                break;
1266
1267            default:
1268                exit(0);
1269        }
1270    }
1271
1272    /* server main loop */
1273    uloop_run();
1274
1275#ifdef HAVE_LUA
1276    /* destroy the Lua state */
1277    if (conf.lua_state != NULL)
1278        conf.lua_close(conf.lua_state);
1279#endif
1280
1281#ifdef HAVE_UBUS
1282    /* destroy the ubus state */
1283    if (conf.ubus_state != NULL)
1284        conf.ubus_close(conf.ubus_state);
1285#endif
1286
1287    return 0;
1288}
1289

Archive Download this file



interactive