op public repos

Blame

Date:: Wed Apr 28 12:43:17 2021 UTC
Message:: added ``env'' option to define environment vars for CGI scripts
Actions:: History | Blob | Raw File
  1 881a9dd9 2021-01-16 op /*
  2 881a9dd9 2021-01-16 op  * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
  3 881a9dd9 2021-01-16 op  *
  4 881a9dd9 2021-01-16 op  * Permission to use, copy, modify, and distribute this software for any
  5 881a9dd9 2021-01-16 op  * purpose with or without fee is hereby granted, provided that the above
  6 881a9dd9 2021-01-16 op  * copyright notice and this permission notice appear in all copies.
  7 881a9dd9 2021-01-16 op  *
  8 881a9dd9 2021-01-16 op  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  9 881a9dd9 2021-01-16 op  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 10 881a9dd9 2021-01-16 op  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 11 881a9dd9 2021-01-16 op  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 12 881a9dd9 2021-01-16 op  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 13 881a9dd9 2021-01-16 op  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 14 881a9dd9 2021-01-16 op  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 15 881a9dd9 2021-01-16 op  */
 16 52418c8d 2021-02-12 op 
 17 52418c8d 2021-02-12 op #include "gmid.h"
 18 881a9dd9 2021-01-16 op 
 19 881a9dd9 2021-01-16 op #include <err.h>
 20 881a9dd9 2021-01-16 op #include <errno.h>
 21 881a9dd9 2021-01-16 op 
 22 2c3e53da 2021-03-03 op #include <event.h>
 23 881a9dd9 2021-01-16 op #include <fcntl.h>
 24 2fafa2d2 2021-02-01 op #include <libgen.h>
 25 2fafa2d2 2021-02-01 op #include <limits.h>
 26 881a9dd9 2021-01-16 op #include <signal.h>
 27 2fafa2d2 2021-02-01 op #include <stdarg.h>
 28 881a9dd9 2021-01-16 op #include <string.h>
 29 881a9dd9 2021-01-16 op 
 30 bc99d868 2021-03-19 op static void	handle_imsg_cgi_req(struct imsgbuf*, struct imsg*, size_t);
 31 bc99d868 2021-03-19 op static void	handle_imsg_quit(struct imsgbuf*, struct imsg*, size_t);
 32 bc99d868 2021-03-19 op static void	handle_dispatch_imsg(int, short, void*);
 33 881a9dd9 2021-01-16 op 
 34 bc99d868 2021-03-19 op static imsg_handlerfn *handlers[] = {
 35 bc99d868 2021-03-19 op 	[IMSG_CGI_REQ] = handle_imsg_cgi_req,
 36 bc99d868 2021-03-19 op 	[IMSG_QUIT] = handle_imsg_quit,
 37 bc99d868 2021-03-19 op };
 38 881a9dd9 2021-01-16 op 
 39 881a9dd9 2021-01-16 op static inline void
 40 881a9dd9 2021-01-16 op safe_setenv(const char *name, const char *val)
 41 881a9dd9 2021-01-16 op {
 42 881a9dd9 2021-01-16 op 	if (val == NULL)
 43 881a9dd9 2021-01-16 op 		val = "";
 44 881a9dd9 2021-01-16 op 	setenv(name, val, 1);
 45 881a9dd9 2021-01-16 op }
 46 881a9dd9 2021-01-16 op 
 47 2fafa2d2 2021-02-01 op static char *
 48 2fafa2d2 2021-02-01 op xasprintf(const char *fmt, ...)
 49 2fafa2d2 2021-02-01 op {
 50 2fafa2d2 2021-02-01 op 	va_list ap;
 51 2fafa2d2 2021-02-01 op 	char *s;
 52 2fafa2d2 2021-02-01 op 
 53 2fafa2d2 2021-02-01 op 	va_start(ap, fmt);
 54 2fafa2d2 2021-02-01 op 	if (vasprintf(&s, fmt, ap) == -1)
 55 2fafa2d2 2021-02-01 op 		s = NULL;
 56 2fafa2d2 2021-02-01 op 	va_end(ap);
 57 2fafa2d2 2021-02-01 op 
 58 2fafa2d2 2021-02-01 op 	return s;
 59 9f006a21 2021-02-07 op }
 60 9f006a21 2021-02-07 op 
 61 9f006a21 2021-02-07 op static void
 62 9f006a21 2021-02-07 op do_exec(const char *ex, const char *spath, char *query)
 63 9f006a21 2021-02-07 op {
 64 9f006a21 2021-02-07 op 	char **argv, buf[PATH_MAX], *sname, *t;
 65 9f006a21 2021-02-07 op 	size_t i, n;
 66 9f006a21 2021-02-07 op 
 67 3841a369 2021-04-20 op 	/* restore the default handlers */
 68 3841a369 2021-04-20 op 	signal(SIGPIPE, SIG_DFL);
 69 3841a369 2021-04-20 op 	signal(SIGCHLD, SIG_DFL);
 70 3841a369 2021-04-20 op 	signal(SIGHUP,  SIG_DFL);
 71 3841a369 2021-04-20 op 	signal(SIGINT,  SIG_DFL);
 72 3841a369 2021-04-20 op 	signal(SIGTERM, SIG_DFL);
 73 3841a369 2021-04-20 op 
 74 9f006a21 2021-02-07 op 	strlcpy(buf, spath, sizeof(buf));
 75 9f006a21 2021-02-07 op 	sname = basename(buf);
 76 9f006a21 2021-02-07 op 
 77 9f006a21 2021-02-07 op 	if (query == NULL || strchr(query, '=') != NULL) {
 78 9f006a21 2021-02-07 op 		if ((argv = calloc(2, sizeof(char*))) == NULL)
 79 9f006a21 2021-02-07 op 			err(1, "calloc");
 80 9f006a21 2021-02-07 op 		argv[0] = sname;
 81 9f006a21 2021-02-07 op 		execvp(ex, argv);
 82 9f006a21 2021-02-07 op 		warn("execvp: %s", argv[0]);
 83 9f006a21 2021-02-07 op 		return;
 84 9f006a21 2021-02-07 op 	}
 85 9f006a21 2021-02-07 op 
 86 9f006a21 2021-02-07 op 	n = 1;
 87 9f006a21 2021-02-07 op 	for (t = query ;; t++, n++) {
 88 9f006a21 2021-02-07 op 		if ((t = strchr(t, '+')) == NULL)
 89 9f006a21 2021-02-07 op 			break;
 90 9f006a21 2021-02-07 op 	}
 91 9f006a21 2021-02-07 op 
 92 9f006a21 2021-02-07 op 	if ((argv = calloc(n+2, sizeof(char*))) == NULL)
 93 9f006a21 2021-02-07 op 		err(1, "calloc");
 94 9f006a21 2021-02-07 op 
 95 9f006a21 2021-02-07 op 	argv[0] = sname;
 96 9f006a21 2021-02-07 op 	for (i = 0; i < n; ++i) {
 97 9f006a21 2021-02-07 op 		t = strchr(query, '+');
 98 9f006a21 2021-02-07 op 		if (t != NULL)
 99 9f006a21 2021-02-07 op 			*t = '\0';
100 9f006a21 2021-02-07 op 		argv[i+1] = pct_decode_str(query);
101 9f006a21 2021-02-07 op 		query = t+1;
102 9f006a21 2021-02-07 op 	}
103 9f006a21 2021-02-07 op 
104 9f006a21 2021-02-07 op 	execvp(ex, argv);
105 9f006a21 2021-02-07 op 	warn("execvp: %s", argv[0]);
106 b63e30ff 2021-02-07 op }
107 b63e30ff 2021-02-07 op 
108 b63e30ff 2021-02-07 op static inline void
109 b63e30ff 2021-02-07 op setenv_time(const char *var, time_t t)
110 b63e30ff 2021-02-07 op {
111 b63e30ff 2021-02-07 op 	char timebuf[21];
112 b63e30ff 2021-02-07 op 	struct tm tminfo;
113 b63e30ff 2021-02-07 op 
114 b63e30ff 2021-02-07 op 	if (t == -1)
115 b63e30ff 2021-02-07 op 		return;
116 b63e30ff 2021-02-07 op 
117 b63e30ff 2021-02-07 op 	strftime(timebuf, sizeof(timebuf), "%FT%TZ",
118 b63e30ff 2021-02-07 op 	    gmtime_r(&t, &tminfo));
119 b63e30ff 2021-02-07 op 	setenv(var, timebuf, 1);
120 2fafa2d2 2021-02-01 op }
121 2fafa2d2 2021-02-01 op 
122 881a9dd9 2021-01-16 op /* fd or -1 on error */
123 881a9dd9 2021-01-16 op static int
124 bc99d868 2021-03-19 op launch_cgi(struct iri *iri, struct cgireq *req, struct vhost *vhost)
125 881a9dd9 2021-01-16 op {
126 881a9dd9 2021-01-16 op 	int p[2];		/* read end, write end */
127 881a9dd9 2021-01-16 op 
128 52053e1a 2021-02-06 op 	if (pipe(p) == -1)
129 881a9dd9 2021-01-16 op 		return -1;
130 881a9dd9 2021-01-16 op 
131 881a9dd9 2021-01-16 op 	switch (fork()) {
132 881a9dd9 2021-01-16 op 	case -1:
133 881a9dd9 2021-01-16 op 		return -1;
134 881a9dd9 2021-01-16 op 
135 881a9dd9 2021-01-16 op 	case 0: {		/* child */
136 2fafa2d2 2021-02-01 op 		char *ex, *pwd;
137 2fafa2d2 2021-02-01 op 		char iribuf[GEMINI_URL_LEN];
138 2fafa2d2 2021-02-01 op 		char path[PATH_MAX];
139 9cc630aa 2021-04-28 op 		struct envlist *e;
140 881a9dd9 2021-01-16 op 
141 881a9dd9 2021-01-16 op 		close(p[0]);
142 881a9dd9 2021-01-16 op 		if (dup2(p[1], 1) == -1)
143 881a9dd9 2021-01-16 op 			goto childerr;
144 881a9dd9 2021-01-16 op 
145 bc99d868 2021-03-19 op 		ex = xasprintf("%s/%s", vhost->dir, req->spath);
146 881a9dd9 2021-01-16 op 
147 2fafa2d2 2021-02-01 op 		serialize_iri(iri, iribuf, sizeof(iribuf));
148 881a9dd9 2021-01-16 op 
149 881a9dd9 2021-01-16 op 		safe_setenv("GATEWAY_INTERFACE", "CGI/1.1");
150 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_DOCUMENT_ROOT", vhost->dir);
151 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_SCRIPT_FILENAME",
152 bc99d868 2021-03-19 op 		    xasprintf("%s/%s", vhost->dir, req->spath));
153 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_URL", iribuf);
154 881a9dd9 2021-01-16 op 
155 2fafa2d2 2021-02-01 op 		strlcpy(path, "/", sizeof(path));
156 bc99d868 2021-03-19 op 		strlcat(path, req->spath, sizeof(path));
157 2fafa2d2 2021-02-01 op 		safe_setenv("GEMINI_URL_PATH", path);
158 881a9dd9 2021-01-16 op 
159 bc99d868 2021-03-19 op 		if (*req->relpath != '\0') {
160 2fafa2d2 2021-02-01 op 			strlcpy(path, "/", sizeof(path));
161 bc99d868 2021-03-19 op 			strlcat(path, req->relpath, sizeof(path));
162 2fafa2d2 2021-02-01 op 			safe_setenv("PATH_INFO", path);
163 2fafa2d2 2021-02-01 op 
164 2fafa2d2 2021-02-01 op 			strlcpy(path, vhost->dir, sizeof(path));
165 2fafa2d2 2021-02-01 op 			strlcat(path, "/", sizeof(path));
166 bc99d868 2021-03-19 op 			strlcat(path, req->relpath, sizeof(path));
167 2fafa2d2 2021-02-01 op 			safe_setenv("PATH_TRANSLATED", path);
168 2fafa2d2 2021-02-01 op 		}
169 2fafa2d2 2021-02-01 op 
170 2fafa2d2 2021-02-01 op 		safe_setenv("QUERY_STRING", iri->query);
171 bc99d868 2021-03-19 op 		safe_setenv("REMOTE_ADDR", req->addr);
172 bc99d868 2021-03-19 op 		safe_setenv("REMOTE_HOST", req->addr);
173 2fafa2d2 2021-02-01 op 		safe_setenv("REQUEST_METHOD", "");
174 881a9dd9 2021-01-16 op 
175 2fafa2d2 2021-02-01 op 		strlcpy(path, "/", sizeof(path));
176 bc99d868 2021-03-19 op 		strlcat(path, req->spath, sizeof(path));
177 2fafa2d2 2021-02-01 op 		safe_setenv("SCRIPT_NAME", path);
178 2fafa2d2 2021-02-01 op 
179 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_NAME", iri->host);
180 2fafa2d2 2021-02-01 op 
181 2fafa2d2 2021-02-01 op 		snprintf(path, sizeof(path), "%d", conf.port);
182 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_PORT", path);
183 2fafa2d2 2021-02-01 op 
184 2fafa2d2 2021-02-01 op 		safe_setenv("SERVER_PROTOCOL", "GEMINI");
185 c8249bad 2021-03-20 op 		safe_setenv("SERVER_SOFTWARE", "gmid/1.6");
186 2fafa2d2 2021-02-01 op 
187 bc99d868 2021-03-19 op 		if (*req->subject != '\0')
188 881a9dd9 2021-01-16 op 			safe_setenv("AUTH_TYPE", "Certificate");
189 3e541809 2021-02-01 op 		else
190 3e541809 2021-02-01 op 			safe_setenv("AUTH_TYPE", "");
191 05748e49 2021-01-24 op 
192 bc99d868 2021-03-19 op 		safe_setenv("REMOTE_USER", req->subject);
193 bc99d868 2021-03-19 op 		safe_setenv("TLS_CLIENT_ISSUER", req->issuer);
194 bc99d868 2021-03-19 op 		safe_setenv("TLS_CLIENT_HASH", req->hash);
195 89541eee 2021-04-13 op 		safe_setenv("TLS_VERSION", req->version);
196 89541eee 2021-04-13 op 		safe_setenv("TLS_CIPHER", req->cipher);
197 89541eee 2021-04-13 op 
198 89541eee 2021-04-13 op 		snprintf(path, sizeof(path), "%d", req->cipher_strength);
199 89541eee 2021-04-13 op 		safe_setenv("TLS_CIPHER_STRENGTH", path);
200 89541eee 2021-04-13 op 
201 bc99d868 2021-03-19 op 		setenv_time("TLS_CLIENT_NOT_AFTER", req->notafter);
202 bc99d868 2021-03-19 op 		setenv_time("TLS_CLIENT_NOT_BEFORE", req->notbefore);
203 3e541809 2021-02-01 op 
204 9cc630aa 2021-04-28 op 		TAILQ_FOREACH(e, &vhost->env, envs) {
205 9cc630aa 2021-04-28 op 			safe_setenv(e->name, e->value);
206 9cc630aa 2021-04-28 op 		}
207 9cc630aa 2021-04-28 op 
208 9f006a21 2021-02-07 op 		strlcpy(path, ex, sizeof(path));
209 9f006a21 2021-02-07 op 
210 2fafa2d2 2021-02-01 op 		pwd = dirname(path);
211 2fafa2d2 2021-02-01 op 		if (chdir(pwd)) {
212 2fafa2d2 2021-02-01 op 			warn("chdir");
213 2fafa2d2 2021-02-01 op 			goto childerr;
214 2fafa2d2 2021-02-01 op 		}
215 881a9dd9 2021-01-16 op 
216 bc99d868 2021-03-19 op 		do_exec(ex, req->spath, iri->query);
217 881a9dd9 2021-01-16 op 		goto childerr;
218 881a9dd9 2021-01-16 op 	}
219 881a9dd9 2021-01-16 op 
220 881a9dd9 2021-01-16 op 	default:
221 881a9dd9 2021-01-16 op 		close(p[1]);
222 52053e1a 2021-02-06 op 		mark_nonblock(p[0]);
223 881a9dd9 2021-01-16 op 		return p[0];
224 881a9dd9 2021-01-16 op 	}
225 881a9dd9 2021-01-16 op 
226 881a9dd9 2021-01-16 op childerr:
227 881a9dd9 2021-01-16 op 	dprintf(p[1], "%d internal server error\r\n", TEMP_FAILURE);
228 881a9dd9 2021-01-16 op 	_exit(1);
229 881a9dd9 2021-01-16 op }
230 881a9dd9 2021-01-16 op 
231 b8e64ccd 2021-03-31 op static struct vhost *
232 b8e64ccd 2021-03-31 op host_nth(size_t n)
233 b8e64ccd 2021-03-31 op {
234 b8e64ccd 2021-03-31 op 	struct vhost *h;
235 b8e64ccd 2021-03-31 op 
236 b8e64ccd 2021-03-31 op 	TAILQ_FOREACH(h, &hosts, vhosts) {
237 b8e64ccd 2021-03-31 op 		if (n == 0)
238 b8e64ccd 2021-03-31 op 			return h;
239 b8e64ccd 2021-03-31 op 		n--;
240 b8e64ccd 2021-03-31 op 	}
241 b8e64ccd 2021-03-31 op 
242 b8e64ccd 2021-03-31 op 	return NULL;
243 b8e64ccd 2021-03-31 op }
244 b8e64ccd 2021-03-31 op 
245 2c3e53da 2021-03-03 op static void
246 bc99d868 2021-03-19 op handle_imsg_cgi_req(struct imsgbuf *ibuf, struct imsg *imsg, size_t datalen)
247 881a9dd9 2021-01-16 op {
248 b8e64ccd 2021-03-31 op 	struct vhost	*h;
249 b8e64ccd 2021-03-31 op 	struct cgireq	 req;
250 b8e64ccd 2021-03-31 op 	struct iri	 iri;
251 b8e64ccd 2021-03-31 op 	int		 fd;
252 2c3e53da 2021-03-03 op 
253 bc99d868 2021-03-19 op 	if (datalen != sizeof(req))
254 bc99d868 2021-03-19 op 		abort();
255 bc99d868 2021-03-19 op 
256 bc99d868 2021-03-19 op 	memcpy(&req, imsg->data, datalen);
257 bc99d868 2021-03-19 op 
258 bc99d868 2021-03-19 op 	iri.schema = req.iri_schema_off + req.buf;
259 bc99d868 2021-03-19 op 	iri.host = req.iri_host_off + req.buf;
260 bc99d868 2021-03-19 op 	iri.port = req.iri_port_off + req.buf;
261 bc99d868 2021-03-19 op 	iri.path = req.iri_path_off + req.buf;
262 bc99d868 2021-03-19 op 	iri.query = req.iri_query_off + req.buf;
263 bc99d868 2021-03-19 op 	iri.fragment = req.iri_fragment_off + req.buf;
264 bc99d868 2021-03-19 op 
265 bc99d868 2021-03-19 op 	/* patch the query, otherwise do_exec will always pass "" as
266 bc99d868 2021-03-19 op 	 * first argument to the script. */
267 bc99d868 2021-03-19 op 	if (*iri.query == '\0')
268 bc99d868 2021-03-19 op 		iri.query = NULL;
269 bc99d868 2021-03-19 op 
270 b8e64ccd 2021-03-31 op 	if ((h = host_nth(req.host_off)) == NULL)
271 bc99d868 2021-03-19 op 		abort();
272 bc99d868 2021-03-19 op 
273 b8e64ccd 2021-03-31 op 	fd = launch_cgi(&iri, &req, h);
274 bc99d868 2021-03-19 op 	imsg_compose(ibuf, IMSG_CGI_RES, imsg->hdr.peerid, 0, fd, NULL, 0);
275 bc99d868 2021-03-19 op 	imsg_flush(ibuf);
276 bc99d868 2021-03-19 op }
277 bc99d868 2021-03-19 op 
278 bc99d868 2021-03-19 op static void
279 bc99d868 2021-03-19 op handle_imsg_quit(struct imsgbuf *ibuf, struct imsg *imsg, size_t datalen)
280 bc99d868 2021-03-19 op {
281 bc99d868 2021-03-19 op 	int i;
282 bc99d868 2021-03-19 op 
283 bc99d868 2021-03-19 op 	(void)ibuf;
284 bc99d868 2021-03-19 op 	(void)imsg;
285 bc99d868 2021-03-19 op 	(void)datalen;
286 bc99d868 2021-03-19 op 
287 bc99d868 2021-03-19 op 	for (i = 0; i < conf.prefork; ++i) {
288 bc99d868 2021-03-19 op 		imsg_compose(&servibuf[i], IMSG_QUIT, 0, 0, -1, NULL, 0);
289 bc99d868 2021-03-19 op 		imsg_flush(&exibuf);
290 bc99d868 2021-03-19 op 		close(servibuf[i].fd);
291 1fbac5ba 2021-03-03 op 	}
292 2c3e53da 2021-03-03 op 
293 bc99d868 2021-03-19 op 	event_loopbreak();
294 bc99d868 2021-03-19 op }
295 2c3e53da 2021-03-03 op 
296 bc99d868 2021-03-19 op static void
297 bc99d868 2021-03-19 op handle_dispatch_imsg(int fd, short ev, void *d)
298 bc99d868 2021-03-19 op {
299 bc99d868 2021-03-19 op 	struct imsgbuf *ibuf = d;
300 bc99d868 2021-03-19 op 	dispatch_imsg(ibuf, handlers, sizeof(handlers));
301 2c3e53da 2021-03-03 op }
302 2c3e53da 2021-03-03 op 
303 2c3e53da 2021-03-03 op int
304 bc99d868 2021-03-19 op executor_main(struct imsgbuf *ibuf)
305 2c3e53da 2021-03-03 op {
306 bc99d868 2021-03-19 op 	struct event	 evs[PROC_MAX], imsgev;
307 2c3e53da 2021-03-03 op 	int		 i;
308 10782292 2021-01-25 op 
309 2c3e53da 2021-03-03 op 	event_init();
310 881a9dd9 2021-01-16 op 
311 bc99d868 2021-03-19 op 	if (ibuf != NULL) {
312 bc99d868 2021-03-19 op 		event_set(&imsgev, ibuf->fd, EV_READ | EV_PERSIST,
313 bc99d868 2021-03-19 op 		    handle_dispatch_imsg, ibuf);
314 bc99d868 2021-03-19 op 		event_add(&imsgev, NULL);
315 bc99d868 2021-03-19 op 	}
316 bc99d868 2021-03-19 op 
317 2c3e53da 2021-03-03 op 	for (i = 0; i < conf.prefork; ++i) {
318 bc99d868 2021-03-19 op 		event_set(&evs[i], servibuf[i].fd, EV_READ | EV_PERSIST,
319 bc99d868 2021-03-19 op 		    handle_dispatch_imsg, &servibuf[i]);
320 2c3e53da 2021-03-03 op 		event_add(&evs[i], NULL);
321 881a9dd9 2021-01-16 op 	}
322 881a9dd9 2021-01-16 op 
323 62e001b0 2021-03-20 op 	sandbox_executor_process();
324 62e001b0 2021-03-20 op 
325 2c3e53da 2021-03-03 op 	event_dispatch();
326 ca21e100 2021-02-04 op 
327 881a9dd9 2021-01-16 op 	return 1;
328 881a9dd9 2021-01-16 op }