1 9df487d7 2003-11-23 devnull #include <u.h>
  2 9df487d7 2003-11-23 devnull #include <libc.h>
  3 9df487d7 2003-11-23 devnull #include <bin.h>
  4 9df487d7 2003-11-23 devnull #include <httpd.h>
  5 9df487d7 2003-11-23 devnull 
  6 9df487d7 2003-11-23 devnull typedef struct Strings		Strings;
  7 9df487d7 2003-11-23 devnull 
  8 9df487d7 2003-11-23 devnull struct Strings
  9 9df487d7 2003-11-23 devnull {
 10 9df487d7 2003-11-23 devnull 	char	*s1;
 11 9df487d7 2003-11-23 devnull 	char	*s2;
 12 9df487d7 2003-11-23 devnull };
 13 9df487d7 2003-11-23 devnull 
 14 9df487d7 2003-11-23 devnull static	char*		abspath(HConnect *cc, char *origpath, char *curdir);
 15 9df487d7 2003-11-23 devnull static	int		getc(HConnect*);
 16 9df487d7 2003-11-23 devnull static	char*		getword(HConnect*);
 17 9df487d7 2003-11-23 devnull static	Strings		parseuri(HConnect *c, char*);
 18 9df487d7 2003-11-23 devnull static	Strings		stripsearch(char*);
 19 9df487d7 2003-11-23 devnull 
 20 9df487d7 2003-11-23 devnull /*
 21 9df487d7 2003-11-23 devnull  * parse the next request line
 22 9df487d7 2003-11-23 devnull  * returns:
 23 9df487d7 2003-11-23 devnull  *	1 ok
 24 9df487d7 2003-11-23 devnull  *	0 eof
 25 9df487d7 2003-11-23 devnull  *	-1 error
 26 9df487d7 2003-11-23 devnull  */
 27 9df487d7 2003-11-23 devnull int
 28 9df487d7 2003-11-23 devnull hparsereq(HConnect *c, int timeout)
 29 9df487d7 2003-11-23 devnull {
 30 9df487d7 2003-11-23 devnull 	Strings ss;
 31 9df487d7 2003-11-23 devnull 	char *vs, *v, *search, *uri, *origuri, *extra;
 32 9df487d7 2003-11-23 devnull 
 33 9df487d7 2003-11-23 devnull 	if(c->bin != nil){
 34 9df487d7 2003-11-23 devnull 		hfail(c, HInternal);
 35 9df487d7 2003-11-23 devnull 		return -1;
 36 9df487d7 2003-11-23 devnull 	}
 37 9df487d7 2003-11-23 devnull 
 38 9df487d7 2003-11-23 devnull 	/*
 39 9df487d7 2003-11-23 devnull 	 * serve requests until a magic request.
 40 9df487d7 2003-11-23 devnull 	 * later requests have to come quickly.
 41 9df487d7 2003-11-23 devnull 	 * only works for http/1.1 or later.
 42 9df487d7 2003-11-23 devnull 	 */
 43 4cc2763a 2004-05-20 devnull 	if(timeout)
 44 4cc2763a 2004-05-20 devnull 		alarm(timeout);
 45 2e965b33 2004-05-05 devnull 	if(hgethead(c, 0) < 0)
 46 2e965b33 2004-05-05 devnull 		return -1;
 47 4cc2763a 2004-05-20 devnull 	if(timeout)
 48 4cc2763a 2004-05-20 devnull 		alarm(0);
 49 9df487d7 2003-11-23 devnull 	c->reqtime = time(nil);
 50 9df487d7 2003-11-23 devnull 	c->req.meth = getword(c);
 51 9df487d7 2003-11-23 devnull 	if(c->req.meth == nil){
 52 9df487d7 2003-11-23 devnull 		hfail(c, HSyntax);
 53 9df487d7 2003-11-23 devnull 		return -1;
 54 9df487d7 2003-11-23 devnull 	}
 55 9df487d7 2003-11-23 devnull 	uri = getword(c);
 56 9df487d7 2003-11-23 devnull 	if(uri == nil || strlen(uri) == 0){
 57 9df487d7 2003-11-23 devnull 		hfail(c, HSyntax);
 58 9df487d7 2003-11-23 devnull 		return -1;
 59 9df487d7 2003-11-23 devnull 	}
 60 9df487d7 2003-11-23 devnull 	v = getword(c);
 61 9df487d7 2003-11-23 devnull 	if(v == nil){
 62 9df487d7 2003-11-23 devnull 		if(strcmp(c->req.meth, "GET") != 0){
 63 9df487d7 2003-11-23 devnull 			hfail(c, HUnimp, c->req.meth);
 64 9df487d7 2003-11-23 devnull 			return -1;
 65 9df487d7 2003-11-23 devnull 		}
 66 9df487d7 2003-11-23 devnull 		c->req.vermaj = 0;
 67 9df487d7 2003-11-23 devnull 		c->req.vermin = 9;
 68 9df487d7 2003-11-23 devnull 	}else{
 69 9df487d7 2003-11-23 devnull 		vs = v;
 70 9df487d7 2003-11-23 devnull 		if(strncmp(vs, "HTTP/", 5) != 0){
 71 9df487d7 2003-11-23 devnull 			hfail(c, HUnkVers, vs);
 72 9df487d7 2003-11-23 devnull 			return -1;
 73 9df487d7 2003-11-23 devnull 		}
 74 9df487d7 2003-11-23 devnull 		vs += 5;
 75 9df487d7 2003-11-23 devnull 		c->req.vermaj = strtoul(vs, &vs, 10);
 76 9df487d7 2003-11-23 devnull 		if(*vs != '.' || c->req.vermaj != 1){
 77 9df487d7 2003-11-23 devnull 			hfail(c, HUnkVers, vs);
 78 9df487d7 2003-11-23 devnull 			return -1;
 79 9df487d7 2003-11-23 devnull 		}
 80 9df487d7 2003-11-23 devnull 		vs++;
 81 9df487d7 2003-11-23 devnull 		c->req.vermin = strtoul(vs, &vs, 10);
 82 9df487d7 2003-11-23 devnull 		if(*vs != '\0'){
 83 9df487d7 2003-11-23 devnull 			hfail(c, HUnkVers, vs);
 84 9df487d7 2003-11-23 devnull 			return -1;
 85 9df487d7 2003-11-23 devnull 		}
 86 9df487d7 2003-11-23 devnull 
 87 9df487d7 2003-11-23 devnull 		extra = getword(c);
 88 9df487d7 2003-11-23 devnull 		if(extra != nil){
 89 9df487d7 2003-11-23 devnull 			hfail(c, HSyntax);
 90 9df487d7 2003-11-23 devnull 			return -1;
 91 9df487d7 2003-11-23 devnull 		}
 92 9df487d7 2003-11-23 devnull 	}
 93 9df487d7 2003-11-23 devnull 
 94 9df487d7 2003-11-23 devnull 	/*
 95 9df487d7 2003-11-23 devnull 	 * the fragment is not supposed to be sent
 96 9df487d7 2003-11-23 devnull 	 * strip it 'cause some clients send it
 97 9df487d7 2003-11-23 devnull 	 */
 98 9df487d7 2003-11-23 devnull 	origuri = uri;
 99 9df487d7 2003-11-23 devnull 	uri = strchr(origuri, '#');
100 9df487d7 2003-11-23 devnull 	if(uri != nil)
101 9df487d7 2003-11-23 devnull 		*uri = 0;
102 9df487d7 2003-11-23 devnull 
103 9df487d7 2003-11-23 devnull 	/*
104 9df487d7 2003-11-23 devnull 	 * http/1.1 requires the server to accept absolute
105 9df487d7 2003-11-23 devnull 	 * or relative uri's.  convert to relative with an absolute path
106 9df487d7 2003-11-23 devnull 	 */
107 9df487d7 2003-11-23 devnull 	if(http11(c)){
108 9df487d7 2003-11-23 devnull 		ss = parseuri(c, origuri);
109 9df487d7 2003-11-23 devnull 		uri = ss.s1;
110 9df487d7 2003-11-23 devnull 		c->req.urihost = ss.s2;
111 9df487d7 2003-11-23 devnull 		if(uri == nil){
112 9df487d7 2003-11-23 devnull 			hfail(c, HBadReq, uri);
113 9df487d7 2003-11-23 devnull 			return -1;
114 9df487d7 2003-11-23 devnull 		}
115 9df487d7 2003-11-23 devnull 		origuri = uri;
116 9df487d7 2003-11-23 devnull 	}
117 9df487d7 2003-11-23 devnull 
118 9df487d7 2003-11-23 devnull 	/*
119 9df487d7 2003-11-23 devnull 	 * munge uri for search, protection, and magic
120 9df487d7 2003-11-23 devnull 	 */
121 9df487d7 2003-11-23 devnull 	ss = stripsearch(origuri);
122 9df487d7 2003-11-23 devnull 	origuri = ss.s1;
123 9df487d7 2003-11-23 devnull 	search = ss.s2;
124 9df487d7 2003-11-23 devnull 	uri = hurlunesc(c, origuri);
125 9df487d7 2003-11-23 devnull 	uri = abspath(c, uri, "/");
126 9df487d7 2003-11-23 devnull 	if(uri == nil || uri[0] == '\0'){
127 9df487d7 2003-11-23 devnull 		hfail(c, HNotFound, "no object specified");
128 9df487d7 2003-11-23 devnull 		return -1;
129 9df487d7 2003-11-23 devnull 	}
130 9df487d7 2003-11-23 devnull 
131 9df487d7 2003-11-23 devnull 	c->req.uri = uri;
132 9df487d7 2003-11-23 devnull 	c->req.search = search;
133 946b8d70 2007-04-21 devnull 	if(search)
134 946b8d70 2007-04-21 devnull 		c->req.searchpairs = hparsequery(c, hstrdup(c, search));
135 9df487d7 2003-11-23 devnull 
136 9df487d7 2003-11-23 devnull 	return 1;
137 9df487d7 2003-11-23 devnull }
138 9df487d7 2003-11-23 devnull 
139 9df487d7 2003-11-23 devnull static Strings
140 9df487d7 2003-11-23 devnull parseuri(HConnect *c, char *uri)
141 9df487d7 2003-11-23 devnull {
142 9df487d7 2003-11-23 devnull 	Strings ss;
143 9df487d7 2003-11-23 devnull 	char *urihost, *p;
144 9df487d7 2003-11-23 devnull 
145 9df487d7 2003-11-23 devnull 	urihost = nil;
146 9df487d7 2003-11-23 devnull 	if(uri[0] != '/'){
147 9df487d7 2003-11-23 devnull 		if(cistrncmp(uri, "http://", 7) != 0){
148 9df487d7 2003-11-23 devnull 			ss.s1 = nil;
149 9df487d7 2003-11-23 devnull 			ss.s2 = nil;
150 9df487d7 2003-11-23 devnull 			return ss;
151 9df487d7 2003-11-23 devnull 		}
152 9df487d7 2003-11-23 devnull 		uri += 5;	/* skip http: */
153 9df487d7 2003-11-23 devnull 	}
154 9df487d7 2003-11-23 devnull 
155 9df487d7 2003-11-23 devnull 	/*
156 9df487d7 2003-11-23 devnull 	 * anything starting with // is a host name or number
157 cbeb0b26 2006-04-01 devnull 	 * hostnames consists of letters, digits, - and .
158 9df487d7 2003-11-23 devnull 	 * for now, just ignore any port given
159 9df487d7 2003-11-23 devnull 	 */
160 9df487d7 2003-11-23 devnull 	if(uri[0] == '/' && uri[1] == '/'){
161 9df487d7 2003-11-23 devnull 		urihost = uri + 2;
162 9df487d7 2003-11-23 devnull 		p = strchr(urihost, '/');
163 9df487d7 2003-11-23 devnull 		if(p == nil)
164 9df487d7 2003-11-23 devnull 			uri = hstrdup(c, "/");
165 9df487d7 2003-11-23 devnull 		else{
166 9df487d7 2003-11-23 devnull 			uri = hstrdup(c, p);
167 9df487d7 2003-11-23 devnull 			*p = '\0';
168 9df487d7 2003-11-23 devnull 		}
169 9df487d7 2003-11-23 devnull 		p = strchr(urihost, ':');
170 9df487d7 2003-11-23 devnull 		if(p != nil)
171 9df487d7 2003-11-23 devnull 			*p = '\0';
172 9df487d7 2003-11-23 devnull 	}
173 9df487d7 2003-11-23 devnull 
174 9df487d7 2003-11-23 devnull 	if(uri[0] != '/' || uri[1] == '/'){
175 9df487d7 2003-11-23 devnull 		ss.s1 = nil;
176 9df487d7 2003-11-23 devnull 		ss.s2 = nil;
177 9df487d7 2003-11-23 devnull 		return ss;
178 9df487d7 2003-11-23 devnull 	}
179 9df487d7 2003-11-23 devnull 
180 9df487d7 2003-11-23 devnull 	ss.s1 = uri;
181 9df487d7 2003-11-23 devnull 	ss.s2 = hlower(urihost);
182 9df487d7 2003-11-23 devnull 	return ss;
183 9df487d7 2003-11-23 devnull }
184 9df487d7 2003-11-23 devnull static Strings
185 9df487d7 2003-11-23 devnull stripsearch(char *uri)
186 9df487d7 2003-11-23 devnull {
187 9df487d7 2003-11-23 devnull 	Strings ss;
188 9df487d7 2003-11-23 devnull 	char *search;
189 9df487d7 2003-11-23 devnull 
190 9df487d7 2003-11-23 devnull 	search = strchr(uri, '?');
191 9df487d7 2003-11-23 devnull 	if(search != nil)
192 9df487d7 2003-11-23 devnull 		*search++ = 0;
193 9df487d7 2003-11-23 devnull 	ss.s1 = uri;
194 9df487d7 2003-11-23 devnull 	ss.s2 = search;
195 9df487d7 2003-11-23 devnull 	return ss;
196 9df487d7 2003-11-23 devnull }
197 9df487d7 2003-11-23 devnull 
198 9df487d7 2003-11-23 devnull /*
199 9df487d7 2003-11-23 devnull  *  to circumscribe the accessible files we have to eliminate ..'s
200 9df487d7 2003-11-23 devnull  *  and resolve all names from the root.
201 9df487d7 2003-11-23 devnull  */
202 9df487d7 2003-11-23 devnull static char*
203 9df487d7 2003-11-23 devnull abspath(HConnect *cc, char *origpath, char *curdir)
204 9df487d7 2003-11-23 devnull {
205 9df487d7 2003-11-23 devnull 	char *p, *sp, *path, *work, *rpath;
206 9df487d7 2003-11-23 devnull 	int len, n, c;
207 9df487d7 2003-11-23 devnull 
208 9df487d7 2003-11-23 devnull 	if(curdir == nil)
209 9df487d7 2003-11-23 devnull 		curdir = "/";
210 9df487d7 2003-11-23 devnull 	if(origpath == nil)
211 9df487d7 2003-11-23 devnull 		origpath = "";
212 9df487d7 2003-11-23 devnull 	work = hstrdup(cc, origpath);
213 9df487d7 2003-11-23 devnull 	path = work;
214 9df487d7 2003-11-23 devnull 
215 9df487d7 2003-11-23 devnull 	/*
216 9df487d7 2003-11-23 devnull 	 * remove any really special characters
217 9df487d7 2003-11-23 devnull 	 */
218 9df487d7 2003-11-23 devnull 	for(sp = "`;| "; *sp; sp++){
219 9df487d7 2003-11-23 devnull 		p = strchr(path, *sp);
220 9df487d7 2003-11-23 devnull 		if(p)
221 9df487d7 2003-11-23 devnull 			*p = 0;
222 9df487d7 2003-11-23 devnull 	}
223 9df487d7 2003-11-23 devnull 
224 9df487d7 2003-11-23 devnull 	len = strlen(curdir) + strlen(path) + 2 + UTFmax;
225 9df487d7 2003-11-23 devnull 	if(len < 10)
226 9df487d7 2003-11-23 devnull 		len = 10;
227 9df487d7 2003-11-23 devnull 	rpath = halloc(cc, len);
228 9df487d7 2003-11-23 devnull 	if(*path == '/')
229 9df487d7 2003-11-23 devnull 		rpath[0] = 0;
230 9df487d7 2003-11-23 devnull 	else
231 9df487d7 2003-11-23 devnull 		strcpy(rpath, curdir);
232 9df487d7 2003-11-23 devnull 	n = strlen(rpath);
233 9df487d7 2003-11-23 devnull 
234 9df487d7 2003-11-23 devnull 	while(path){
235 9df487d7 2003-11-23 devnull 		p = strchr(path, '/');
236 9df487d7 2003-11-23 devnull 		if(p)
237 9df487d7 2003-11-23 devnull 			*p++ = 0;
238 9df487d7 2003-11-23 devnull 		if(strcmp(path, "..") == 0){
239 9df487d7 2003-11-23 devnull 			while(n > 1){
240 9df487d7 2003-11-23 devnull 				n--;
241 9df487d7 2003-11-23 devnull 				c = rpath[n];
242 9df487d7 2003-11-23 devnull 				rpath[n] = 0;
243 9df487d7 2003-11-23 devnull 				if(c == '/')
244 9df487d7 2003-11-23 devnull 					break;
245 9df487d7 2003-11-23 devnull 			}
246 9df487d7 2003-11-23 devnull 		}else if(strcmp(path, ".") == 0){
247 9df487d7 2003-11-23 devnull 			;
248 9df487d7 2003-11-23 devnull 		}else if(n == 1)
249 9df487d7 2003-11-23 devnull 			n += snprint(rpath+n, len-n, "%s", path);
250 9df487d7 2003-11-23 devnull 		else
251 9df487d7 2003-11-23 devnull 			n += snprint(rpath+n, len-n, "/%s", path);
252 9df487d7 2003-11-23 devnull 		path = p;
253 9df487d7 2003-11-23 devnull 	}
254 9df487d7 2003-11-23 devnull 
255 9df487d7 2003-11-23 devnull 	if(strncmp(rpath, "/bin/", 5) == 0)
256 9df487d7 2003-11-23 devnull 		strcpy(rpath, "/");
257 9df487d7 2003-11-23 devnull 	return rpath;
258 9df487d7 2003-11-23 devnull }
259 9df487d7 2003-11-23 devnull 
260 9df487d7 2003-11-23 devnull static char*
261 9df487d7 2003-11-23 devnull getword(HConnect *c)
262 9df487d7 2003-11-23 devnull {
263 9df487d7 2003-11-23 devnull 	char *buf;
264 9df487d7 2003-11-23 devnull 	int ch, n;
265 9df487d7 2003-11-23 devnull 
266 9df487d7 2003-11-23 devnull 	while((ch = getc(c)) == ' ' || ch == '\t' || ch == '\r')
267 9df487d7 2003-11-23 devnull 		;
268 9df487d7 2003-11-23 devnull 	if(ch == '\n')
269 9df487d7 2003-11-23 devnull 		return nil;
270 9df487d7 2003-11-23 devnull 	n = 0;
271 9df487d7 2003-11-23 devnull 	buf = halloc(c, 1);
272 9df487d7 2003-11-23 devnull 	for(;;){
273 9df487d7 2003-11-23 devnull 		switch(ch){
274 9df487d7 2003-11-23 devnull 		case ' ':
275 9df487d7 2003-11-23 devnull 		case '\t':
276 9df487d7 2003-11-23 devnull 		case '\r':
277 9df487d7 2003-11-23 devnull 		case '\n':
278 9df487d7 2003-11-23 devnull 			buf[n] = '\0';
279 9df487d7 2003-11-23 devnull 			return hstrdup(c, buf);
280 9df487d7 2003-11-23 devnull 		}
281 9df487d7 2003-11-23 devnull 
282 9df487d7 2003-11-23 devnull 		if(n < HMaxWord-1){
283 9df487d7 2003-11-23 devnull 			buf = bingrow(&c->bin, buf, n, n + 1, 0);
284 9df487d7 2003-11-23 devnull 			if(buf == nil)
285 9df487d7 2003-11-23 devnull 				return nil;
286 9df487d7 2003-11-23 devnull 			buf[n++] = ch;
287 9df487d7 2003-11-23 devnull 		}
288 9df487d7 2003-11-23 devnull 		ch = getc(c);
289 9df487d7 2003-11-23 devnull 	}
290 9df487d7 2003-11-23 devnull }
291 9df487d7 2003-11-23 devnull 
292 9df487d7 2003-11-23 devnull static int
293 9df487d7 2003-11-23 devnull getc(HConnect *c)
294 9df487d7 2003-11-23 devnull {
295 9df487d7 2003-11-23 devnull 	if(c->hpos < c->hstop)
296 9df487d7 2003-11-23 devnull 		return *c->hpos++;
297 9df487d7 2003-11-23 devnull 	return '\n';
298 9df487d7 2003-11-23 devnull }