Blame


1 881a9dd9 2021-01-16 op /*
2 881a9dd9 2021-01-16 op * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
3 881a9dd9 2021-01-16 op *
4 881a9dd9 2021-01-16 op * Permission to use, copy, modify, and distribute this software for any
5 881a9dd9 2021-01-16 op * purpose with or without fee is hereby granted, provided that the above
6 881a9dd9 2021-01-16 op * copyright notice and this permission notice appear in all copies.
7 881a9dd9 2021-01-16 op *
8 881a9dd9 2021-01-16 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 881a9dd9 2021-01-16 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 881a9dd9 2021-01-16 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 881a9dd9 2021-01-16 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 881a9dd9 2021-01-16 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 881a9dd9 2021-01-16 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 881a9dd9 2021-01-16 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 881a9dd9 2021-01-16 op */
16 52418c8d 2021-02-12 op
17 52418c8d 2021-02-12 op #include "gmid.h"
18 881a9dd9 2021-01-16 op
19 881a9dd9 2021-01-16 op #include <err.h>
20 881a9dd9 2021-01-16 op #include <errno.h>
21 881a9dd9 2021-01-16 op
22 881a9dd9 2021-01-16 op #include <fcntl.h>
23 2fafa2d2 2021-02-01 op #include <libgen.h>
24 2fafa2d2 2021-02-01 op #include <limits.h>
25 881a9dd9 2021-01-16 op #include <signal.h>
26 2fafa2d2 2021-02-01 op #include <stdarg.h>
27 881a9dd9 2021-01-16 op #include <string.h>
28 881a9dd9 2021-01-16 op
29 881a9dd9 2021-01-16 op int
30 881a9dd9 2021-01-16 op send_string(int fd, const char *str)
31 881a9dd9 2021-01-16 op {
32 881a9dd9 2021-01-16 op ssize_t len;
33 881a9dd9 2021-01-16 op
34 881a9dd9 2021-01-16 op if (str == NULL)
35 881a9dd9 2021-01-16 op len = 0;
36 881a9dd9 2021-01-16 op else
37 881a9dd9 2021-01-16 op len = strlen(str);
38 881a9dd9 2021-01-16 op
39 881a9dd9 2021-01-16 op if (write(fd, &len, sizeof(len)) != sizeof(len))
40 881a9dd9 2021-01-16 op return 0;
41 881a9dd9 2021-01-16 op
42 881a9dd9 2021-01-16 op if (len != 0)
43 881a9dd9 2021-01-16 op if (write(fd, str, len) != len)
44 881a9dd9 2021-01-16 op return 0;
45 881a9dd9 2021-01-16 op
46 881a9dd9 2021-01-16 op return 1;
47 881a9dd9 2021-01-16 op }
48 881a9dd9 2021-01-16 op
49 881a9dd9 2021-01-16 op int
50 881a9dd9 2021-01-16 op recv_string(int fd, char **ret)
51 881a9dd9 2021-01-16 op {
52 881a9dd9 2021-01-16 op ssize_t len;
53 881a9dd9 2021-01-16 op
54 881a9dd9 2021-01-16 op if (read(fd, &len, sizeof(len)) != sizeof(len))
55 881a9dd9 2021-01-16 op return 0;
56 881a9dd9 2021-01-16 op
57 881a9dd9 2021-01-16 op if (len == 0) {
58 881a9dd9 2021-01-16 op *ret = NULL;
59 881a9dd9 2021-01-16 op return 1;
60 881a9dd9 2021-01-16 op }
61 881a9dd9 2021-01-16 op
62 881a9dd9 2021-01-16 op if ((*ret = calloc(1, len+1)) == NULL)
63 881a9dd9 2021-01-16 op return 0;
64 881a9dd9 2021-01-16 op
65 881a9dd9 2021-01-16 op if (read(fd, *ret, len) != len)
66 881a9dd9 2021-01-16 op return 0;
67 881a9dd9 2021-01-16 op return 1;
68 881a9dd9 2021-01-16 op }
69 881a9dd9 2021-01-16 op
70 881a9dd9 2021-01-16 op int
71 2fafa2d2 2021-02-01 op send_iri(int fd, struct iri *i)
72 2fafa2d2 2021-02-01 op {
73 2fafa2d2 2021-02-01 op return send_string(fd, i->schema)
74 2fafa2d2 2021-02-01 op && send_string(fd, i->host)
75 2fafa2d2 2021-02-01 op && send_string(fd, i->port)
76 2fafa2d2 2021-02-01 op && send_string(fd, i->path)
77 2fafa2d2 2021-02-01 op && send_string(fd, i->query);
78 2fafa2d2 2021-02-01 op }
79 2fafa2d2 2021-02-01 op
80 2fafa2d2 2021-02-01 op int
81 2fafa2d2 2021-02-01 op recv_iri(int fd, struct iri *i)
82 2fafa2d2 2021-02-01 op {
83 2fafa2d2 2021-02-01 op memset(i, 0, sizeof(*i));
84 2fafa2d2 2021-02-01 op
85 2fafa2d2 2021-02-01 op if (!recv_string(fd, &i->schema)
86 2fafa2d2 2021-02-01 op || !recv_string(fd, &i->host)
87 2fafa2d2 2021-02-01 op || !recv_string(fd, &i->port)
88 2fafa2d2 2021-02-01 op || !recv_string(fd, &i->path)
89 2fafa2d2 2021-02-01 op || !recv_string(fd, &i->query))
90 2fafa2d2 2021-02-01 op return 0;
91 2fafa2d2 2021-02-01 op
92 2fafa2d2 2021-02-01 op return 1;
93 2fafa2d2 2021-02-01 op }
94 2fafa2d2 2021-02-01 op
95 2fafa2d2 2021-02-01 op void
96 2fafa2d2 2021-02-01 op free_recvd_iri(struct iri *i)
97 2fafa2d2 2021-02-01 op {
98 2fafa2d2 2021-02-01 op free(i->schema);
99 2fafa2d2 2021-02-01 op free(i->host);
100 2fafa2d2 2021-02-01 op free(i->port);
101 2fafa2d2 2021-02-01 op free(i->path);
102 2fafa2d2 2021-02-01 op free(i->query);
103 2fafa2d2 2021-02-01 op }
104 2fafa2d2 2021-02-01 op
105 2fafa2d2 2021-02-01 op int
106 881a9dd9 2021-01-16 op send_vhost(int fd, struct vhost *vhost)
107 881a9dd9 2021-01-16 op {
108 881a9dd9 2021-01-16 op ssize_t n;
109 881a9dd9 2021-01-16 op
110 881a9dd9 2021-01-16 op if (vhost < hosts || vhost > hosts + HOSTSLEN)
111 881a9dd9 2021-01-16 op return 0;
112 881a9dd9 2021-01-16 op
113 78089786 2021-02-01 op n = vhost - hosts;
114 881a9dd9 2021-01-16 op return write(fd, &n, sizeof(n)) == sizeof(n);
115 881a9dd9 2021-01-16 op }
116 881a9dd9 2021-01-16 op
117 881a9dd9 2021-01-16 op int
118 881a9dd9 2021-01-16 op recv_vhost(int fd, struct vhost **vhost)
119 881a9dd9 2021-01-16 op {
120 881a9dd9 2021-01-16 op ssize_t n;
121 881a9dd9 2021-01-16 op
122 881a9dd9 2021-01-16 op if (read(fd, &n, sizeof(n)) != sizeof(n))
123 881a9dd9 2021-01-16 op return 0;
124 881a9dd9 2021-01-16 op
125 881a9dd9 2021-01-16 op if (n < 0 || n > HOSTSLEN)
126 881a9dd9 2021-01-16 op return 0;
127 881a9dd9 2021-01-16 op
128 881a9dd9 2021-01-16 op *vhost = &hosts[n];
129 881a9dd9 2021-01-16 op if ((*vhost)->domain == NULL)
130 881a9dd9 2021-01-16 op return 0;
131 881a9dd9 2021-01-16 op return 1;
132 b63e30ff 2021-02-07 op }
133 b63e30ff 2021-02-07 op
134 b63e30ff 2021-02-07 op int
135 b63e30ff 2021-02-07 op send_time(int fd, time_t t)
136 b63e30ff 2021-02-07 op {
137 b63e30ff 2021-02-07 op return write(fd, &t, sizeof(t)) == sizeof(t);
138 b63e30ff 2021-02-07 op }
139 b63e30ff 2021-02-07 op
140 b63e30ff 2021-02-07 op int
141 b63e30ff 2021-02-07 op recv_time(int fd, time_t *t)
142 b63e30ff 2021-02-07 op {
143 b63e30ff 2021-02-07 op return read(fd, t, sizeof(*t)) == sizeof(*t);
144 881a9dd9 2021-01-16 op }
145 881a9dd9 2021-01-16 op
146 881a9dd9 2021-01-16 op /* send d though fd. see /usr/src/usr.sbin/syslogd/privsep_fdpass.c
147 881a9dd9 2021-01-16 op * for an example */
148 881a9dd9 2021-01-16 op int
149 881a9dd9 2021-01-16 op send_fd(int fd, int d)
150 881a9dd9 2021-01-16 op {
151 881a9dd9 2021-01-16 op struct msghdr msg;
152 881a9dd9 2021-01-16 op union {
153 881a9dd9 2021-01-16 op struct cmsghdr hdr;
154 881a9dd9 2021-01-16 op unsigned char buf[CMSG_SPACE(sizeof(int))];
155 881a9dd9 2021-01-16 op } cmsgbuf;
156 881a9dd9 2021-01-16 op struct cmsghdr *cmsg;
157 881a9dd9 2021-01-16 op struct iovec vec;
158 881a9dd9 2021-01-16 op int result = 1;
159 881a9dd9 2021-01-16 op ssize_t n;
160 881a9dd9 2021-01-16 op
161 881a9dd9 2021-01-16 op memset(&msg, 0, sizeof(msg));
162 881a9dd9 2021-01-16 op
163 881a9dd9 2021-01-16 op if (d >= 0) {
164 881a9dd9 2021-01-16 op msg.msg_control = &cmsgbuf.buf;
165 881a9dd9 2021-01-16 op msg.msg_controllen = sizeof(cmsgbuf.buf);
166 881a9dd9 2021-01-16 op cmsg = CMSG_FIRSTHDR(&msg);
167 881a9dd9 2021-01-16 op cmsg->cmsg_len = CMSG_LEN(sizeof(int));
168 881a9dd9 2021-01-16 op cmsg->cmsg_level = SOL_SOCKET;
169 881a9dd9 2021-01-16 op cmsg->cmsg_type = SCM_RIGHTS;
170 881a9dd9 2021-01-16 op *(int*)CMSG_DATA(cmsg) = d;
171 881a9dd9 2021-01-16 op } else
172 881a9dd9 2021-01-16 op result = 0;
173 881a9dd9 2021-01-16 op
174 881a9dd9 2021-01-16 op vec.iov_base = &result;
175 881a9dd9 2021-01-16 op vec.iov_len = sizeof(int);
176 881a9dd9 2021-01-16 op msg.msg_iov = &vec;
177 881a9dd9 2021-01-16 op msg.msg_iovlen = 1;
178 881a9dd9 2021-01-16 op
179 881a9dd9 2021-01-16 op if ((n = sendmsg(fd, &msg, 0)) == -1 || n != sizeof(int)) {
180 a64959c9 2021-02-07 op log_err(NULL, "sendmsg: got %zu but wanted %zu: (errno) %s",
181 881a9dd9 2021-01-16 op n, sizeof(int), strerror(errno));
182 881a9dd9 2021-01-16 op return 0;
183 881a9dd9 2021-01-16 op }
184 881a9dd9 2021-01-16 op return 1;
185 881a9dd9 2021-01-16 op }
186 881a9dd9 2021-01-16 op
187 881a9dd9 2021-01-16 op /* receive a descriptor via fd */
188 881a9dd9 2021-01-16 op int
189 881a9dd9 2021-01-16 op recv_fd(int fd)
190 881a9dd9 2021-01-16 op {
191 881a9dd9 2021-01-16 op struct msghdr msg;
192 881a9dd9 2021-01-16 op union {
193 881a9dd9 2021-01-16 op struct cmsghdr hdr;
194 881a9dd9 2021-01-16 op char buf[CMSG_SPACE(sizeof(int))];
195 881a9dd9 2021-01-16 op } cmsgbuf;
196 881a9dd9 2021-01-16 op struct cmsghdr *cmsg;
197 881a9dd9 2021-01-16 op struct iovec vec;
198 881a9dd9 2021-01-16 op ssize_t n;
199 881a9dd9 2021-01-16 op int result;
200 881a9dd9 2021-01-16 op
201 881a9dd9 2021-01-16 op memset(&msg, 0, sizeof(msg));
202 881a9dd9 2021-01-16 op vec.iov_base = &result;
203 881a9dd9 2021-01-16 op vec.iov_len = sizeof(int);
204 881a9dd9 2021-01-16 op msg.msg_iov = &vec;
205 881a9dd9 2021-01-16 op msg.msg_iovlen = 1;
206 881a9dd9 2021-01-16 op msg.msg_control = &cmsgbuf.buf;
207 881a9dd9 2021-01-16 op msg.msg_controllen = sizeof(cmsgbuf.buf);
208 881a9dd9 2021-01-16 op
209 881a9dd9 2021-01-16 op if ((n = recvmsg(fd, &msg, 0)) != sizeof(int)) {
210 a64959c9 2021-02-07 op log_err(NULL, "read %zu bytes bu wanted %zu\n", n, sizeof(int));
211 881a9dd9 2021-01-16 op return -1;
212 881a9dd9 2021-01-16 op }
213 881a9dd9 2021-01-16 op
214 881a9dd9 2021-01-16 op if (result) {
215 881a9dd9 2021-01-16 op cmsg = CMSG_FIRSTHDR(&msg);
216 881a9dd9 2021-01-16 op if (cmsg == NULL || cmsg->cmsg_type != SCM_RIGHTS)
217 881a9dd9 2021-01-16 op return -1;
218 881a9dd9 2021-01-16 op return (*(int *)CMSG_DATA(cmsg));
219 881a9dd9 2021-01-16 op } else
220 881a9dd9 2021-01-16 op return -1;
221 881a9dd9 2021-01-16 op }
222 881a9dd9 2021-01-16 op
223 881a9dd9 2021-01-16 op static inline void
224 881a9dd9 2021-01-16 op safe_setenv(const char *name, const char *val)
225 881a9dd9 2021-01-16 op {
226 881a9dd9 2021-01-16 op if (val == NULL)
227 881a9dd9 2021-01-16 op val = "";
228 881a9dd9 2021-01-16 op setenv(name, val, 1);
229 881a9dd9 2021-01-16 op }
230 881a9dd9 2021-01-16 op
231 2fafa2d2 2021-02-01 op static char *
232 2fafa2d2 2021-02-01 op xasprintf(const char *fmt, ...)
233 2fafa2d2 2021-02-01 op {
234 2fafa2d2 2021-02-01 op va_list ap;
235 2fafa2d2 2021-02-01 op char *s;
236 2fafa2d2 2021-02-01 op
237 2fafa2d2 2021-02-01 op va_start(ap, fmt);
238 2fafa2d2 2021-02-01 op if (vasprintf(&s, fmt, ap) == -1)
239 2fafa2d2 2021-02-01 op s = NULL;
240 2fafa2d2 2021-02-01 op va_end(ap);
241 2fafa2d2 2021-02-01 op
242 2fafa2d2 2021-02-01 op return s;
243 9f006a21 2021-02-07 op }
244 9f006a21 2021-02-07 op
245 9f006a21 2021-02-07 op static void
246 9f006a21 2021-02-07 op do_exec(const char *ex, const char *spath, char *query)
247 9f006a21 2021-02-07 op {
248 9f006a21 2021-02-07 op char **argv, buf[PATH_MAX], *sname, *t;
249 9f006a21 2021-02-07 op size_t i, n;
250 9f006a21 2021-02-07 op
251 9f006a21 2021-02-07 op strlcpy(buf, spath, sizeof(buf));
252 9f006a21 2021-02-07 op sname = basename(buf);
253 9f006a21 2021-02-07 op
254 9f006a21 2021-02-07 op if (query == NULL || strchr(query, '=') != NULL) {
255 9f006a21 2021-02-07 op if ((argv = calloc(2, sizeof(char*))) == NULL)
256 9f006a21 2021-02-07 op err(1, "calloc");
257 9f006a21 2021-02-07 op argv[0] = sname;
258 9f006a21 2021-02-07 op execvp(ex, argv);
259 9f006a21 2021-02-07 op warn("execvp: %s", argv[0]);
260 9f006a21 2021-02-07 op return;
261 9f006a21 2021-02-07 op }
262 9f006a21 2021-02-07 op
263 9f006a21 2021-02-07 op n = 1;
264 9f006a21 2021-02-07 op for (t = query ;; t++, n++) {
265 9f006a21 2021-02-07 op if ((t = strchr(t, '+')) == NULL)
266 9f006a21 2021-02-07 op break;
267 9f006a21 2021-02-07 op }
268 9f006a21 2021-02-07 op
269 9f006a21 2021-02-07 op if ((argv = calloc(n+2, sizeof(char*))) == NULL)
270 9f006a21 2021-02-07 op err(1, "calloc");
271 9f006a21 2021-02-07 op
272 9f006a21 2021-02-07 op argv[0] = sname;
273 9f006a21 2021-02-07 op for (i = 0; i < n; ++i) {
274 9f006a21 2021-02-07 op t = strchr(query, '+');
275 9f006a21 2021-02-07 op if (t != NULL)
276 9f006a21 2021-02-07 op *t = '\0';
277 9f006a21 2021-02-07 op argv[i+1] = pct_decode_str(query);
278 9f006a21 2021-02-07 op query = t+1;
279 9f006a21 2021-02-07 op }
280 9f006a21 2021-02-07 op
281 9f006a21 2021-02-07 op execvp(ex, argv);
282 9f006a21 2021-02-07 op warn("execvp: %s", argv[0]);
283 b63e30ff 2021-02-07 op }
284 b63e30ff 2021-02-07 op
285 b63e30ff 2021-02-07 op static inline void
286 b63e30ff 2021-02-07 op setenv_time(const char *var, time_t t)
287 b63e30ff 2021-02-07 op {
288 b63e30ff 2021-02-07 op char timebuf[21];
289 b63e30ff 2021-02-07 op struct tm tminfo;
290 b63e30ff 2021-02-07 op
291 b63e30ff 2021-02-07 op if (t == -1)
292 b63e30ff 2021-02-07 op return;
293 b63e30ff 2021-02-07 op
294 b63e30ff 2021-02-07 op strftime(timebuf, sizeof(timebuf), "%FT%TZ",
295 b63e30ff 2021-02-07 op gmtime_r(&t, &tminfo));
296 b63e30ff 2021-02-07 op setenv(var, timebuf, 1);
297 2fafa2d2 2021-02-01 op }
298 2fafa2d2 2021-02-01 op
299 881a9dd9 2021-01-16 op /* fd or -1 on error */
300 881a9dd9 2021-01-16 op static int
301 2fafa2d2 2021-02-01 op launch_cgi(struct iri *iri, const char *spath, char *relpath,
302 2fafa2d2 2021-02-01 op const char *addr, const char *ruser, const char *cissuer,
303 b63e30ff 2021-02-07 op const char *chash, time_t notbefore, time_t notafter,
304 b63e30ff 2021-02-07 op struct vhost *vhost)
305 881a9dd9 2021-01-16 op {
306 881a9dd9 2021-01-16 op int p[2]; /* read end, write end */
307 881a9dd9 2021-01-16 op
308 52053e1a 2021-02-06 op if (pipe(p) == -1)
309 881a9dd9 2021-01-16 op return -1;
310 881a9dd9 2021-01-16 op
311 881a9dd9 2021-01-16 op switch (fork()) {
312 881a9dd9 2021-01-16 op case -1:
313 881a9dd9 2021-01-16 op return -1;
314 881a9dd9 2021-01-16 op
315 881a9dd9 2021-01-16 op case 0: { /* child */
316 2fafa2d2 2021-02-01 op char *ex, *pwd;
317 2fafa2d2 2021-02-01 op char iribuf[GEMINI_URL_LEN];
318 2fafa2d2 2021-02-01 op char path[PATH_MAX];
319 881a9dd9 2021-01-16 op
320 881a9dd9 2021-01-16 op close(p[0]);
321 881a9dd9 2021-01-16 op if (dup2(p[1], 1) == -1)
322 881a9dd9 2021-01-16 op goto childerr;
323 881a9dd9 2021-01-16 op
324 2fafa2d2 2021-02-01 op ex = xasprintf("%s/%s", vhost->dir, spath);
325 881a9dd9 2021-01-16 op
326 2fafa2d2 2021-02-01 op serialize_iri(iri, iribuf, sizeof(iribuf));
327 881a9dd9 2021-01-16 op
328 881a9dd9 2021-01-16 op safe_setenv("GATEWAY_INTERFACE", "CGI/1.1");
329 2fafa2d2 2021-02-01 op safe_setenv("GEMINI_DOCUMENT_ROOT", vhost->dir);
330 2fafa2d2 2021-02-01 op safe_setenv("GEMINI_SCRIPT_FILENAME",
331 2fafa2d2 2021-02-01 op xasprintf("%s/%s", vhost->dir, spath));
332 2fafa2d2 2021-02-01 op safe_setenv("GEMINI_URL", iribuf);
333 881a9dd9 2021-01-16 op
334 2fafa2d2 2021-02-01 op strlcpy(path, "/", sizeof(path));
335 2fafa2d2 2021-02-01 op strlcat(path, spath, sizeof(path));
336 2fafa2d2 2021-02-01 op safe_setenv("GEMINI_URL_PATH", path);
337 881a9dd9 2021-01-16 op
338 2fafa2d2 2021-02-01 op if (relpath != NULL) {
339 2fafa2d2 2021-02-01 op strlcpy(path, "/", sizeof(path));
340 2fafa2d2 2021-02-01 op strlcat(path, relpath, sizeof(path));
341 2fafa2d2 2021-02-01 op safe_setenv("PATH_INFO", path);
342 2fafa2d2 2021-02-01 op
343 2fafa2d2 2021-02-01 op strlcpy(path, vhost->dir, sizeof(path));
344 2fafa2d2 2021-02-01 op strlcat(path, "/", sizeof(path));
345 2fafa2d2 2021-02-01 op strlcat(path, relpath, sizeof(path));
346 2fafa2d2 2021-02-01 op safe_setenv("PATH_TRANSLATED", path);
347 2fafa2d2 2021-02-01 op }
348 2fafa2d2 2021-02-01 op
349 2fafa2d2 2021-02-01 op safe_setenv("QUERY_STRING", iri->query);
350 881a9dd9 2021-01-16 op safe_setenv("REMOTE_ADDR", addr);
351 2fafa2d2 2021-02-01 op safe_setenv("REMOTE_HOST", addr);
352 2fafa2d2 2021-02-01 op safe_setenv("REQUEST_METHOD", "");
353 881a9dd9 2021-01-16 op
354 2fafa2d2 2021-02-01 op strlcpy(path, "/", sizeof(path));
355 2fafa2d2 2021-02-01 op strlcat(path, spath, sizeof(path));
356 2fafa2d2 2021-02-01 op safe_setenv("SCRIPT_NAME", path);
357 2fafa2d2 2021-02-01 op
358 2fafa2d2 2021-02-01 op safe_setenv("SERVER_NAME", iri->host);
359 2fafa2d2 2021-02-01 op
360 2fafa2d2 2021-02-01 op snprintf(path, sizeof(path), "%d", conf.port);
361 2fafa2d2 2021-02-01 op safe_setenv("SERVER_PORT", path);
362 2fafa2d2 2021-02-01 op
363 2fafa2d2 2021-02-01 op safe_setenv("SERVER_PROTOCOL", "GEMINI");
364 2fafa2d2 2021-02-01 op safe_setenv("SERVER_SOFTWARE", "gmid/1.5");
365 2fafa2d2 2021-02-01 op
366 3e541809 2021-02-01 op if (ruser != NULL)
367 881a9dd9 2021-01-16 op safe_setenv("AUTH_TYPE", "Certificate");
368 3e541809 2021-02-01 op else
369 3e541809 2021-02-01 op safe_setenv("AUTH_TYPE", "");
370 05748e49 2021-01-24 op
371 3e541809 2021-02-01 op safe_setenv("REMOTE_USER", ruser);
372 3e541809 2021-02-01 op safe_setenv("TLS_CLIENT_ISSUER", cissuer);
373 3e541809 2021-02-01 op safe_setenv("TLS_CLIENT_HASH", chash);
374 b63e30ff 2021-02-07 op setenv_time("TLS_CLIENT_NOT_AFTER", notafter);
375 b63e30ff 2021-02-07 op setenv_time("TLS_CLIENT_NOT_BEFORE", notbefore);
376 3e541809 2021-02-01 op
377 9f006a21 2021-02-07 op strlcpy(path, ex, sizeof(path));
378 9f006a21 2021-02-07 op
379 2fafa2d2 2021-02-01 op pwd = dirname(path);
380 2fafa2d2 2021-02-01 op if (chdir(pwd)) {
381 2fafa2d2 2021-02-01 op warn("chdir");
382 2fafa2d2 2021-02-01 op goto childerr;
383 2fafa2d2 2021-02-01 op }
384 881a9dd9 2021-01-16 op
385 9f006a21 2021-02-07 op do_exec(ex, spath, iri->query);
386 881a9dd9 2021-01-16 op goto childerr;
387 881a9dd9 2021-01-16 op }
388 881a9dd9 2021-01-16 op
389 881a9dd9 2021-01-16 op default:
390 881a9dd9 2021-01-16 op close(p[1]);
391 52053e1a 2021-02-06 op mark_nonblock(p[0]);
392 881a9dd9 2021-01-16 op return p[0];
393 881a9dd9 2021-01-16 op }
394 881a9dd9 2021-01-16 op
395 881a9dd9 2021-01-16 op childerr:
396 881a9dd9 2021-01-16 op dprintf(p[1], "%d internal server error\r\n", TEMP_FAILURE);
397 881a9dd9 2021-01-16 op _exit(1);
398 881a9dd9 2021-01-16 op }
399 881a9dd9 2021-01-16 op
400 881a9dd9 2021-01-16 op int
401 4e2e2ab1 2021-02-03 op executor_main()
402 881a9dd9 2021-01-16 op {
403 2fafa2d2 2021-02-01 op char *spath, *relpath, *addr, *ruser, *cissuer, *chash;
404 881a9dd9 2021-01-16 op struct vhost *vhost;
405 2fafa2d2 2021-02-01 op struct iri iri;
406 b63e30ff 2021-02-07 op time_t notbefore, notafter;
407 881a9dd9 2021-01-16 op int d;
408 881a9dd9 2021-01-16 op
409 881a9dd9 2021-01-16 op #ifdef __OpenBSD__
410 10782292 2021-01-25 op for (vhost = hosts; vhost->domain != NULL; ++vhost) {
411 2fafa2d2 2021-02-01 op /* r so we can chdir into the correct directory */
412 2fafa2d2 2021-02-01 op if (unveil(vhost->dir, "rx") == -1)
413 10782292 2021-01-25 op err(1, "unveil %s for domain %s",
414 10782292 2021-01-25 op vhost->dir, vhost->domain);
415 10782292 2021-01-25 op }
416 10782292 2021-01-25 op
417 2fafa2d2 2021-02-01 op /* rpath to chdir into the correct directory */
418 2fafa2d2 2021-02-01 op if (pledge("stdio rpath sendfd proc exec", NULL))
419 10782292 2021-01-25 op err(1, "pledge");
420 881a9dd9 2021-01-16 op #endif
421 881a9dd9 2021-01-16 op
422 ca21e100 2021-02-04 op while (!hupped) {
423 4e2e2ab1 2021-02-03 op if (!recv_iri(exfd, &iri)
424 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &spath)
425 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &relpath)
426 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &addr)
427 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &ruser)
428 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &cissuer)
429 4e2e2ab1 2021-02-03 op || !recv_string(exfd, &chash)
430 b63e30ff 2021-02-07 op || !recv_time(exfd, &notbefore)
431 b63e30ff 2021-02-07 op || !recv_time(exfd, &notafter)
432 4e2e2ab1 2021-02-03 op || !recv_vhost(exfd, &vhost))
433 881a9dd9 2021-01-16 op break;
434 881a9dd9 2021-01-16 op
435 2fafa2d2 2021-02-01 op d = launch_cgi(&iri, spath, relpath, addr, ruser, cissuer, chash,
436 b63e30ff 2021-02-07 op notbefore, notafter, vhost);
437 4e2e2ab1 2021-02-03 op if (!send_fd(exfd, d))
438 881a9dd9 2021-01-16 op break;
439 710a71b2 2021-01-19 op close(d);
440 881a9dd9 2021-01-16 op
441 2fafa2d2 2021-02-01 op free_recvd_iri(&iri);
442 881a9dd9 2021-01-16 op free(spath);
443 881a9dd9 2021-01-16 op free(relpath);
444 881a9dd9 2021-01-16 op free(addr);
445 881a9dd9 2021-01-16 op free(ruser);
446 881a9dd9 2021-01-16 op free(cissuer);
447 881a9dd9 2021-01-16 op free(chash);
448 881a9dd9 2021-01-16 op }
449 881a9dd9 2021-01-16 op
450 ca21e100 2021-02-04 op if (hupped)
451 ca21e100 2021-02-04 op _exit(0);
452 ca21e100 2021-02-04 op
453 881a9dd9 2021-01-16 op /* kill all process in my group. This means the listener and
454 881a9dd9 2021-01-16 op * every pending CGI script. */
455 881a9dd9 2021-01-16 op kill(0, SIGINT);
456 881a9dd9 2021-01-16 op return 1;
457 881a9dd9 2021-01-16 op }