1 881a9dd9 2021-01-16 op /*
  2 881a9dd9 2021-01-16 op  * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
  3 881a9dd9 2021-01-16 op  *
  4 881a9dd9 2021-01-16 op  * Permission to use, copy, modify, and distribute this software for any
  5 881a9dd9 2021-01-16 op  * purpose with or without fee is hereby granted, provided that the above
  6 881a9dd9 2021-01-16 op  * copyright notice and this permission notice appear in all copies.
  7 881a9dd9 2021-01-16 op  *
  8 881a9dd9 2021-01-16 op  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  9 881a9dd9 2021-01-16 op  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 10 881a9dd9 2021-01-16 op  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 11 881a9dd9 2021-01-16 op  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 12 881a9dd9 2021-01-16 op  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 13 881a9dd9 2021-01-16 op  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 14 881a9dd9 2021-01-16 op  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 15 881a9dd9 2021-01-16 op  */
 16 881a9dd9 2021-01-16 op 
 17 881a9dd9 2021-01-16 op #include <err.h>
 18 881a9dd9 2021-01-16 op #include <errno.h>
 19 881a9dd9 2021-01-16 op 
 20 881a9dd9 2021-01-16 op #include <fcntl.h>
 21 2fafa2d2 2021-02-01 op #include <libgen.h>
 22 2fafa2d2 2021-02-01 op #include <limits.h>
 23 881a9dd9 2021-01-16 op #include <signal.h>
 24 2fafa2d2 2021-02-01 op #include <stdarg.h>
 25 881a9dd9 2021-01-16 op #include <string.h>
 26 881a9dd9 2021-01-16 op 
 27 881a9dd9 2021-01-16 op #include "gmid.h"
 28 881a9dd9 2021-01-16 op 
 29 881a9dd9 2021-01-16 op int
 30 881a9dd9 2021-01-16 op send_string(int fd, const char *str)
 31 881a9dd9 2021-01-16 op {
 32 881a9dd9 2021-01-16 op 	ssize_t len;
 33 881a9dd9 2021-01-16 op 
 34 881a9dd9 2021-01-16 op 	if (str == NULL)
 35 881a9dd9 2021-01-16 op 		len = 0;
 36 881a9dd9 2021-01-16 op 	else
 37 881a9dd9 2021-01-16 op 		len = strlen(str);
 38 881a9dd9 2021-01-16 op 
 39 881a9dd9 2021-01-16 op 	if (write(fd, &len, sizeof(len)) != sizeof(len))
 40 881a9dd9 2021-01-16 op 		return 0;
 41 881a9dd9 2021-01-16 op 
 42 881a9dd9 2021-01-16 op 	if (len != 0)
 43 881a9dd9 2021-01-16 op 		if (write(fd, str, len) != len)
 44 881a9dd9 2021-01-16 op 			return 0;
 45 881a9dd9 2021-01-16 op 
 46 881a9dd9 2021-01-16 op 	return 1;
 47 881a9dd9 2021-01-16 op }
 48 881a9dd9 2021-01-16 op 
 49 881a9dd9 2021-01-16 op int
 50 881a9dd9 2021-01-16 op recv_string(int fd, char **ret)
 51 881a9dd9 2021-01-16 op {
 52 881a9dd9 2021-01-16 op 	ssize_t len;
 53 881a9dd9 2021-01-16 op 
 54 881a9dd9 2021-01-16 op 	if (read(fd, &len, sizeof(len)) != sizeof(len))
 55 881a9dd9 2021-01-16 op 		return 0;
 56 881a9dd9 2021-01-16 op 
 57 881a9dd9 2021-01-16 op 	if (len == 0) {
 58 881a9dd9 2021-01-16 op 		*ret = NULL;
 59 881a9dd9 2021-01-16 op 		return 1;
 60 881a9dd9 2021-01-16 op 	}
 61 881a9dd9 2021-01-16 op 
 62 881a9dd9 2021-01-16 op 	if ((*ret = calloc(1, len+1)) == NULL)
 63 881a9dd9 2021-01-16 op 		return 0;
 64 881a9dd9 2021-01-16 op 
 65 881a9dd9 2021-01-16 op 	if (read(fd, *ret, len) != len)
 66 881a9dd9 2021-01-16 op 		return 0;
 67 881a9dd9 2021-01-16 op 	return 1;
 68 881a9dd9 2021-01-16 op }
 69 881a9dd9 2021-01-16 op 
 70 881a9dd9 2021-01-16 op int
 71 2fafa2d2 2021-02-01 op send_iri(int fd, struct iri *i)
 72 2fafa2d2 2021-02-01 op {
 73 2fafa2d2 2021-02-01 op 	return send_string(fd, i->schema)
 74 2fafa2d2 2021-02-01 op 		&& send_string(fd, i->host)
 75 2fafa2d2 2021-02-01 op 		&& send_string(fd, i->port)
 76 2fafa2d2 2021-02-01 op 		&& send_string(fd, i->path)
 77 2fafa2d2 2021-02-01 op 		&& send_string(fd, i->query);
 78 2fafa2d2 2021-02-01 op }
 79 2fafa2d2 2021-02-01 op 
 80 2fafa2d2 2021-02-01 op int
 81 2fafa2d2 2021-02-01 op recv_iri(int fd, struct iri *i)
 82 2fafa2d2 2021-02-01 op {
 83 2fafa2d2 2021-02-01 op 	memset(i, 0, sizeof(*i));
 84 2fafa2d2 2021-02-01 op 
 85 2fafa2d2 2021-02-01 op 	if (!recv_string(fd, &i->schema)
 86 2fafa2d2 2021-02-01 op 	    || !recv_string(fd, &i->host)
 87 2fafa2d2 2021-02-01 op 	    || !recv_string(fd, &i->port)
 88 2fafa2d2 2021-02-01 op 	    || !recv_string(fd, &i->path)
 89 2fafa2d2 2021-02-01 op 	    || !recv_string(fd, &i->query))
 90 2fafa2d2 2021-02-01 op 		return 0;
 91 2fafa2d2 2021-02-01 op 
 92 2fafa2d2 2021-02-01 op 	return 1;
 93 2fafa2d2 2021-02-01 op }
 94 2fafa2d2 2021-02-01 op 
 95 2fafa2d2 2021-02-01 op void
 96 2fafa2d2 2021-02-01 op free_recvd_iri(struct iri *i)
 97 2fafa2d2 2021-02-01 op {
 98 2fafa2d2 2021-02-01 op 	free(i->schema);
 99 2fafa2d2 2021-02-01 op 	free(i->host);
100 2fafa2d2 2021-02-01 op 	free(i->port);
101 2fafa2d2 2021-02-01 op 	free(i->path);
102 2fafa2d2 2021-02-01 op 	free(i->query);
103 2fafa2d2 2021-02-01 op }
104 2fafa2d2 2021-02-01 op 
105 2fafa2d2 2021-02-01 op int
106 881a9dd9 2021-01-16 op send_vhost(int fd, struct vhost *vhost)
107 881a9dd9 2021-01-16 op {
108 881a9dd9 2021-01-16 op 	ssize_t n;
109 881a9dd9 2021-01-16 op 
110 881a9dd9 2021-01-16 op 	if (vhost < hosts || vhost > hosts + HOSTSLEN)
111 881a9dd9 2021-01-16 op 		return 0;
112 881a9dd9 2021-01-16 op 
113 78089786 2021-02-01 op 	n = vhost - hosts;
114 881a9dd9 2021-01-16 op 	return write(fd, &n, sizeof(n)) == sizeof(n);
115 881a9dd9 2021-01-16 op }
116 881a9dd9 2021-01-16 op 
117 881a9dd9 2021-01-16 op int
118 881a9dd9 2021-01-16 op recv_vhost(int fd, struct vhost **vhost)
119 881a9dd9 2021-01-16 op {
120 881a9dd9 2021-01-16 op 	ssize_t n;
121 881a9dd9 2021-01-16 op 
122 881a9dd9 2021-01-16 op 	if (read(fd, &n, sizeof(n)) != sizeof(n))
123 881a9dd9 2021-01-16 op 		return 0;
124 881a9dd9 2021-01-16 op 
125 881a9dd9 2021-01-16 op 	if (n < 0 || n > HOSTSLEN)
126 881a9dd9 2021-01-16 op 		return 0;
127 881a9dd9 2021-01-16 op 
128 881a9dd9 2021-01-16 op 	*vhost = &hosts[n];
129 881a9dd9 2021-01-16 op 	if ((*vhost)->domain == NULL)
130 881a9dd9 2021-01-16 op 		return 0;
131 881a9dd9 2021-01-16 op 	return 1;
132 881a9dd9 2021-01-16 op }
133 881a9dd9 2021-01-16 op 
134 881a9dd9 2021-01-16 op /* send d though fd. see /usr/src/usr.sbin/syslogd/privsep_fdpass.c
135 881a9dd9 2021-01-16 op  * for an example */
136 881a9dd9 2021-01-16 op int
137 881a9dd9 2021-01-16 op send_fd(int fd, int d)
138 881a9dd9 2021-01-16 op {
139 881a9dd9 2021-01-16 op 	struct msghdr msg;
140 881a9dd9 2021-01-16 op 	union {
141 881a9dd9 2021-01-16 op 		struct cmsghdr hdr;
142 881a9dd9 2021-01-16 op 		unsigned char buf[CMSG_SPACE(sizeof(int))];
143 881a9dd9 2021-01-16 op 	} cmsgbuf;
144 881a9dd9 2021-01-16 op 	struct cmsghdr *cmsg;
145 881a9dd9 2021-01-16 op 	struct iovec vec;
146 881a9dd9 2021-01-16 op 	int result = 1;
147 881a9dd9 2021-01-16 op 	ssize_t n;
148 881a9dd9 2021-01-16 op 
149 881a9dd9 2021-01-16 op 	memset(&msg, 0, sizeof(msg));
150 881a9dd9 2021-01-16 op 
151 881a9dd9 2021-01-16 op 	if (d >= 0) {
152 881a9dd9 2021-01-16 op 		msg.msg_control = &cmsgbuf.buf;
153 881a9dd9 2021-01-16 op 		msg.msg_controllen = sizeof(cmsgbuf.buf);
154 881a9dd9 2021-01-16 op 		cmsg = CMSG_FIRSTHDR(&msg);
155 881a9dd9 2021-01-16 op 		cmsg->cmsg_len = CMSG_LEN(sizeof(int));
156 881a9dd9 2021-01-16 op 		cmsg->cmsg_level = SOL_SOCKET;
157 881a9dd9 2021-01-16 op 		cmsg->cmsg_type = SCM_RIGHTS;
158 881a9dd9 2021-01-16 op 		*(int*)CMSG_DATA(cmsg) = d;
159 881a9dd9 2021-01-16 op 	} else
160 881a9dd9 2021-01-16 op 		result = 0;
161 881a9dd9 2021-01-16 op 
162 881a9dd9 2021-01-16 op 	vec.iov_base = &result;
163 881a9dd9 2021-01-16 op 	vec.iov_len = sizeof(int);
164 881a9dd9 2021-01-16 op 	msg.msg_iov = &vec;
165 881a9dd9 2021-01-16 op 	msg.msg_iovlen = 1;
166 881a9dd9 2021-01-16 op 
167 881a9dd9 2021-01-16 op 	if ((n = sendmsg(fd, &msg, 0)) == -1 || n != sizeof(int)) {
168 881a9dd9 2021-01-16 op                 fprintf(stderr, "sendmsg: got %zu but wanted %zu: (errno) %s",
169 881a9dd9 2021-01-16 op 		    n, sizeof(int), strerror(errno));
170 881a9dd9 2021-01-16 op 		return 0;
171 881a9dd9 2021-01-16 op 	}
172 881a9dd9 2021-01-16 op 	return 1;
173 881a9dd9 2021-01-16 op }
174 881a9dd9 2021-01-16 op 
175 881a9dd9 2021-01-16 op /* receive a descriptor via fd */
176 881a9dd9 2021-01-16 op int
177 881a9dd9 2021-01-16 op recv_fd(int fd)
178 881a9dd9 2021-01-16 op {
179 881a9dd9 2021-01-16 op 	struct msghdr msg;
180 881a9dd9 2021-01-16 op 	union {
181 881a9dd9 2021-01-16 op 		struct cmsghdr hdr;
182 881a9dd9 2021-01-16 op 		char buf[CMSG_SPACE(sizeof(int))];
183 881a9dd9 2021-01-16 op 	} cmsgbuf;
184 881a9dd9 2021-01-16 op 	struct cmsghdr *cmsg;
185 881a9dd9 2021-01-16 op 	struct iovec vec;
186 881a9dd9 2021-01-16 op 	ssize_t n;
187 881a9dd9 2021-01-16 op 	int result;
188 881a9dd9 2021-01-16 op 
189 881a9dd9 2021-01-16 op 	memset(&msg, 0, sizeof(msg));
190 881a9dd9 2021-01-16 op 	vec.iov_base = &result;
191 881a9dd9 2021-01-16 op 	vec.iov_len = sizeof(int);
192 881a9dd9 2021-01-16 op 	msg.msg_iov = &vec;
193 881a9dd9 2021-01-16 op 	msg.msg_iovlen = 1;
194 881a9dd9 2021-01-16 op 	msg.msg_control = &cmsgbuf.buf;
195 881a9dd9 2021-01-16 op 	msg.msg_controllen = sizeof(cmsgbuf.buf);
196 881a9dd9 2021-01-16 op 
197 881a9dd9 2021-01-16 op 	if ((n = recvmsg(fd, &msg, 0)) != sizeof(int)) {
198 881a9dd9 2021-01-16 op 		fprintf(stderr, "read %zu bytes bu wanted %zu\n", n, sizeof(int));
199 881a9dd9 2021-01-16 op 		return -1;
200 881a9dd9 2021-01-16 op 	}
201 881a9dd9 2021-01-16 op 
202 881a9dd9 2021-01-16 op 	if (result) {
203 881a9dd9 2021-01-16 op 		cmsg = CMSG_FIRSTHDR(&msg);
204 881a9dd9 2021-01-16 op 		if (cmsg == NULL || cmsg->cmsg_type != SCM_RIGHTS)
205 881a9dd9 2021-01-16 op 			return -1;
206 881a9dd9 2021-01-16 op 		return (*(int *)CMSG_DATA(cmsg));
207 881a9dd9 2021-01-16 op 	} else
208 881a9dd9 2021-01-16 op 		return -1;
209 881a9dd9 2021-01-16 op }
210 881a9dd9 2021-01-16 op 
211 881a9dd9 2021-01-16 op static inline void
212 881a9dd9 2021-01-16 op safe_setenv(const char *name, const char *val)
213 881a9dd9 2021-01-16 op {
214 881a9dd9 2021-01-16 op 	if (val == NULL)
215 881a9dd9 2021-01-16 op 		val = "";
216 881a9dd9 2021-01-16 op 	setenv(name, val, 1);
217 881a9dd9 2021-01-16 op }
218 881a9dd9 2021-01-16 op 
219 2fafa2d2 2021-02-01 op static char *
220 2fafa2d2 2021-02-01 op xasprintf(const char *fmt, ...)
221 2fafa2d2 2021-02-01 op {
222 2fafa2d2 2021-02-01 op 	va_list ap;
223 2fafa2d2 2021-02-01 op 	char *s;
224 2fafa2d2 2021-02-01 op 
225 2fafa2d2 2021-02-01 op 	va_start(ap, fmt);
226 2fafa2d2 2021-02-01 op 	if (vasprintf(&s, fmt, ap) == -1)
227 2fafa2d2 2021-02-01 op 		s = NULL;
228 2fafa2d2 2021-02-01 op 	va_end(ap);
229 2fafa2d2 2021-02-01 op 
230 2fafa2d2 2021-02-01 op 	return s;
231 2fafa2d2 2021-02-01 op }
232 2fafa2d2 2021-02-01 op 
233 881a9dd9 2021-01-16 op /* fd or -1 on error */
234 881a9dd9 2021-01-16 op static int
235 2fafa2d2 2021-02-01 op launch_cgi(struct iri *iri, const char *spath, char *relpath,
236 2fafa2d2 2021-02-01 op     const char *addr, const char *ruser, const char *cissuer,
237 2fafa2d2 2021-02-01 op     const char *chash, struct vhost *vhost)
238 881a9dd9 2021-01-16 op {
239 881a9dd9 2021-01-16 op 	int p[2];		/* read end, write end */
240 881a9dd9 2021-01-16 op 
241 52053e1a 2021-02-06 op 	if (pipe(p) == -1)
242 881a9dd9 2021-01-16 op 		return -1;
243 881a9dd9 2021-01-16 op 
244 881a9dd9 2021-01-16 op 	switch (fork()) {
245 881a9dd9 2021-01-16 op 	case -1:
246 881a9dd9 2021-01-16 op 		return -1;
247 881a9dd9 2021-01-16 op 
248 881a9dd9 2021-01-16 op 	case 0: {		/* child */
249 67528c1f 2021-02-01 op 		char *argv[] = {NULL, NULL};
250 2fafa2d2 2021-02-01 op 		char *ex, *pwd;
251 2fafa2d2 2021-02-01 op 		char iribuf[GEMINI_URL_LEN];
252 2fafa2d2 2021-02-01 op 		char path[PATH_MAX];
253 881a9dd9 2021-01-16 op 
254 881a9dd9 2021-01-16 op 		close(p[0]);
255 881a9dd9 2021-01-16 op 		if (dup2(p[1], 1) == -1)
256 881a9dd9 2021-01-16 op 			goto childerr;
257 881a9dd9 2021-01-16 op 
258 2fafa2d2 2021-02-01 op 		ex = xasprintf("%s/%s", vhost->dir, spath);
259 2fafa2d2 2021-02-01 op 		argv[0] = ex;
260 881a9dd9 2021-01-16 op 
261 2fafa2d2 2021-02-01 op 		serialize_iri(iri, iribuf, sizeof(iribuf));
262 881a9dd9 2021-01-16 op 
263 881a9dd9 2021-01-16 op 		safe_setenv("GATEWAY_INTERFACE", "CGI/1.1");
264 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_DOCUMENT_ROOT", vhost->dir);
265 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_SCRIPT_FILENAME",
266 2fafa2d2 2021-02-01 op 		    xasprintf("%s/%s", vhost->dir, spath));
267 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_URL", iribuf);
268 881a9dd9 2021-01-16 op 
269 2fafa2d2 2021-02-01 op 		strlcpy(path, "/", sizeof(path));
270 2fafa2d2 2021-02-01 op 		strlcat(path, spath, sizeof(path));
271 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_URL_PATH", path);
272 881a9dd9 2021-01-16 op 
273 2fafa2d2 2021-02-01 op 		if (relpath != NULL) {
274 2fafa2d2 2021-02-01 op 			strlcpy(path, "/", sizeof(path));
275 2fafa2d2 2021-02-01 op 			strlcat(path, relpath, sizeof(path));
276 2fafa2d2 2021-02-01 op 			safe_setenv("PATH_INFO", path);
277 2fafa2d2 2021-02-01 op 
278 2fafa2d2 2021-02-01 op 			strlcpy(path, vhost->dir, sizeof(path));
279 2fafa2d2 2021-02-01 op 			strlcat(path, "/", sizeof(path));
280 2fafa2d2 2021-02-01 op 			strlcat(path, relpath, sizeof(path));
281 2fafa2d2 2021-02-01 op 			safe_setenv("PATH_TRANSLATED", path);
282 2fafa2d2 2021-02-01 op 		}
283 2fafa2d2 2021-02-01 op 
284 2fafa2d2 2021-02-01 op 		safe_setenv("QUERY_STRING", iri->query);
285 881a9dd9 2021-01-16 op 		safe_setenv("REMOTE_ADDR", addr);
286 2fafa2d2 2021-02-01 op 		safe_setenv("REMOTE_HOST", addr);
287 2fafa2d2 2021-02-01 op 		safe_setenv("REQUEST_METHOD", "");
288 881a9dd9 2021-01-16 op 
289 2fafa2d2 2021-02-01 op 		strlcpy(path, "/", sizeof(path));
290 2fafa2d2 2021-02-01 op 		strlcat(path, spath, sizeof(path));
291 2fafa2d2 2021-02-01 op 		safe_setenv("SCRIPT_NAME", path);
292 2fafa2d2 2021-02-01 op 
293 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_NAME", iri->host);
294 2fafa2d2 2021-02-01 op 
295 2fafa2d2 2021-02-01 op 		snprintf(path, sizeof(path), "%d", conf.port);
296 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_PORT", path);
297 2fafa2d2 2021-02-01 op 
298 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_PROTOCOL", "GEMINI");
299 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_SOFTWARE", "gmid/1.5");
300 2fafa2d2 2021-02-01 op 
301 3e541809 2021-02-01 op 		if (ruser != NULL)
302 881a9dd9 2021-01-16 op 			safe_setenv("AUTH_TYPE", "Certificate");
303 3e541809 2021-02-01 op 		else
304 3e541809 2021-02-01 op 			safe_setenv("AUTH_TYPE", "");
305 05748e49 2021-01-24 op 
306 3e541809 2021-02-01 op 		safe_setenv("REMOTE_USER", ruser);
307 3e541809 2021-02-01 op 		safe_setenv("TLS_CLIENT_ISSUER", cissuer);
308 3e541809 2021-02-01 op 		safe_setenv("TLS_CLIENT_HASH", chash);
309 3e541809 2021-02-01 op 
310 2fafa2d2 2021-02-01 op 		strlcpy(path, argv[0], sizeof(path));
311 2fafa2d2 2021-02-01 op 		pwd = dirname(path);
312 2fafa2d2 2021-02-01 op 		if (chdir(pwd)) {
313 2fafa2d2 2021-02-01 op 			warn("chdir");
314 2fafa2d2 2021-02-01 op 			goto childerr;
315 2fafa2d2 2021-02-01 op 		}
316 881a9dd9 2021-01-16 op 
317 2fafa2d2 2021-02-01 op 		execvp(argv[0], argv);
318 2fafa2d2 2021-02-01 op 		warn("execvp: %s", argv[0]);
319 881a9dd9 2021-01-16 op 		goto childerr;
320 881a9dd9 2021-01-16 op 	}
321 881a9dd9 2021-01-16 op 
322 881a9dd9 2021-01-16 op 	default:
323 881a9dd9 2021-01-16 op 		close(p[1]);
324 52053e1a 2021-02-06 op 		mark_nonblock(p[0]);
325 881a9dd9 2021-01-16 op 		return p[0];
326 881a9dd9 2021-01-16 op 	}
327 881a9dd9 2021-01-16 op 
328 881a9dd9 2021-01-16 op childerr:
329 881a9dd9 2021-01-16 op 	dprintf(p[1], "%d internal server error\r\n", TEMP_FAILURE);
330 881a9dd9 2021-01-16 op 	_exit(1);
331 881a9dd9 2021-01-16 op }
332 881a9dd9 2021-01-16 op 
333 881a9dd9 2021-01-16 op int
334 4e2e2ab1 2021-02-03 op executor_main()
335 881a9dd9 2021-01-16 op {
336 2fafa2d2 2021-02-01 op 	char *spath, *relpath, *addr, *ruser, *cissuer, *chash;
337 881a9dd9 2021-01-16 op         struct vhost *vhost;
338 2fafa2d2 2021-02-01 op 	struct iri iri;
339 881a9dd9 2021-01-16 op 	int d;
340 881a9dd9 2021-01-16 op 
341 881a9dd9 2021-01-16 op #ifdef __OpenBSD__
342 10782292 2021-01-25 op 	for (vhost = hosts; vhost->domain != NULL; ++vhost) {
343 2fafa2d2 2021-02-01 op 		/* r so we can chdir into the correct directory */
344 2fafa2d2 2021-02-01 op 		if (unveil(vhost->dir, "rx") == -1)
345 10782292 2021-01-25 op 			err(1, "unveil %s for domain %s",
346 10782292 2021-01-25 op 			    vhost->dir, vhost->domain);
347 10782292 2021-01-25 op 	}
348 10782292 2021-01-25 op 
349 2fafa2d2 2021-02-01 op 	/* rpath to chdir into the correct directory */
350 2fafa2d2 2021-02-01 op 	if (pledge("stdio rpath sendfd proc exec", NULL))
351 10782292 2021-01-25 op 		err(1, "pledge");
352 881a9dd9 2021-01-16 op #endif
353 881a9dd9 2021-01-16 op 
354 ca21e100 2021-02-04 op 	while (!hupped) {
355 4e2e2ab1 2021-02-03 op 		if (!recv_iri(exfd, &iri)
356 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &spath)
357 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &relpath)
358 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &addr)
359 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &ruser)
360 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &cissuer)
361 4e2e2ab1 2021-02-03 op 		    || !recv_string(exfd, &chash)
362 4e2e2ab1 2021-02-03 op 		    || !recv_vhost(exfd, &vhost))
363 881a9dd9 2021-01-16 op 			break;
364 881a9dd9 2021-01-16 op 
365 2fafa2d2 2021-02-01 op 		d = launch_cgi(&iri, spath, relpath, addr, ruser, cissuer, chash,
366 2fafa2d2 2021-02-01 op 		    vhost);
367 4e2e2ab1 2021-02-03 op 		if (!send_fd(exfd, d))
368 881a9dd9 2021-01-16 op 			break;
369 710a71b2 2021-01-19 op 		close(d);
370 881a9dd9 2021-01-16 op 
371 2fafa2d2 2021-02-01 op 		free_recvd_iri(&iri);
372 881a9dd9 2021-01-16 op 		free(spath);
373 881a9dd9 2021-01-16 op 		free(relpath);
374 881a9dd9 2021-01-16 op 		free(addr);
375 881a9dd9 2021-01-16 op 		free(ruser);
376 881a9dd9 2021-01-16 op 		free(cissuer);
377 881a9dd9 2021-01-16 op 		free(chash);
378 881a9dd9 2021-01-16 op 	}
379 881a9dd9 2021-01-16 op 
380 ca21e100 2021-02-04 op 	if (hupped)
381 ca21e100 2021-02-04 op 		_exit(0);
382 ca21e100 2021-02-04 op 
383 881a9dd9 2021-01-16 op 	/* kill all process in my group.  This means the listener and
384 881a9dd9 2021-01-16 op 	 * every pending CGI script. */
385 881a9dd9 2021-01-16 op 	kill(0, SIGINT);
386 881a9dd9 2021-01-16 op 	return 1;
387 881a9dd9 2021-01-16 op }