op public repos

Blame

Date:: Thu Jul 14 13:30:52 2022 UTC
Message:: import gotwebd thread fcgi response to client for rendering in browser as data is returned fix potential problem with a stuck loop if the client is hammering the server with random clicks and stop/restarts render our index! WOOHOO! small var refactoring. fcgi.c to handle all clean-up, various error clean-up remove output used to trace down got bug temporarily stop overloading a socket, but a better solution needs to be found return on fcgi_gen_response, so we can track if a client is writable or not this stops page creation when the client is unavailable remove old comments enable profile building, although, i don't think this works thoroughly in a priv/proc daemon catch more errors correctly count repos remove temp logger we don't need to start our responder thread so early. move it to fcgi.c and start when we start processing html kill the unneeded thread, stop queueing responses, and just write to clients immediately clean up some memory leaks and dead stores rework querystring so an error can be displayed instead of showing the index on querystring error get framework in place for the rest of the content add server struct to response struct bo last commit get back a usable gotweb. not sure what i was thinking yesterday properly move our structs around this time remember index page for sitelink, fix leak unused var is annoying, so stop it for now. don't forget to change this! style briefs nearly completed. finish briefs output add briefs to summary cleanup some html properly retrieve next and previous commit ids for list navigation follow naddy's stailq macro change we will never have a previous link on the summary page goto correct label, so we get a previous link on the last page of briefs don't wrap short line simplify got_get_repo_commits code start rendering a diff start rendering a diff this was by accident finish diff output functions cleanup prepare for fd request that was a stupid idea, just flush the priv_fd bo that too. that won't work eith with append in mkstemp that isn't going to work actually zero out the priv_fd missed seek to beginning of file was overwriting first line of diff fsync our fd as well add link to repo path by sitelink and add back verbose fcgi debugging that was removed add modest write heuristics to fcgi_send_response fix dead assignments and XXX comment where a leak is happening that I can't find right now there was no leak. stsp is brilliant and knew it was the cache growing prevent double-free, render prettier err output if we can remove unused variables correctly fix double-free fix gotwebd to build with main's changes after rebase fix double-free don't error on index if pack files missing and fixup some error handling render commits finish up tag briefs and start the tag page finish up tag page unbreak TAGS and SUMMARY actions grab the correct tag from the queue unbreak TAGS and SUMMARY actions again update some error handling clean up unneeded code and start tree output render tree render branches remove tags from summary if there aren't any fix tree div structure and start blob render render blob render blame fix tree href in briefs clean up some css add headref to querystrings load correct commit for tree and diff fixup some error output update some copyright dates add full SNI support rm debug line found by Lucas6023, notified via IRC. thanks!! fix tree fix crash when querystring is manipulated to not have a commit id in certain instances. also break a stuck while loop on client error. fix for new got_object_id_by_path arguments rebase and fix prep for multiple fds per socket, instead of just one fix overlooked shift/reduce conflicts backout priv_fds as a list. after discussion with stsp, an array and length are the better direction prepare array of fds to pass into got functions make a new set of pack fds, which will be passed to got_repo_open work with new pack_fds in got_repo_open give output when no tags exist escape html in blame output change files listed in tree view to show blob, file commits, and blame, instead of blob, blob, blame. idea from mp4 on irc. this is way more handy. stop populating the queue from the headref and figure out previous commit id while iterating. this should reduce some overhead. actually purge our sockets instead of not using the function start work with new blob rm volatile use new diff change func names no more temp files increase blame number line width set content-type to text/plain so firefox won't download files rm test infra for now account for -Wwrite-strings fix for sigs and algorithm choice clean up some leaks and other mistakes
Actions:: History | Blob | Raw File

  1 a596b957 2022-07-14 tracey /*
  2 a596b957 2022-07-14 tracey  * Copyright (c) 2016, 2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  3 a596b957 2022-07-14 tracey  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
  4 a596b957 2022-07-14 tracey  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
  5 a596b957 2022-07-14 tracey  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
  6 a596b957 2022-07-14 tracey  *
  7 a596b957 2022-07-14 tracey  * Permission to use, copy, modify, and distribute this software for any
  8 a596b957 2022-07-14 tracey  * purpose with or without fee is hereby granted, provided that the above
  9 a596b957 2022-07-14 tracey  * copyright notice and this permission notice appear in all copies.
 10 a596b957 2022-07-14 tracey  *
 11 a596b957 2022-07-14 tracey  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 12 a596b957 2022-07-14 tracey  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 13 a596b957 2022-07-14 tracey  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 14 a596b957 2022-07-14 tracey  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 15 a596b957 2022-07-14 tracey  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 16 a596b957 2022-07-14 tracey  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 17 a596b957 2022-07-14 tracey  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 18 a596b957 2022-07-14 tracey  */
 19 a596b957 2022-07-14 tracey 
 20 a596b957 2022-07-14 tracey #include <sys/param.h>
 21 a596b957 2022-07-14 tracey #include <sys/ioctl.h>
 22 a596b957 2022-07-14 tracey #include <sys/queue.h>
 23 a596b957 2022-07-14 tracey #include <sys/wait.h>
 24 a596b957 2022-07-14 tracey #include <sys/uio.h>
 25 a596b957 2022-07-14 tracey #include <sys/resource.h>
 26 a596b957 2022-07-14 tracey #include <sys/socket.h>
 27 a596b957 2022-07-14 tracey #include <sys/stat.h>
 28 a596b957 2022-07-14 tracey #include <sys/time.h>
 29 a596b957 2022-07-14 tracey #include <sys/types.h>
 30 a596b957 2022-07-14 tracey #include <sys/mman.h>
 31 a596b957 2022-07-14 tracey #include <sys/un.h>
 32 a596b957 2022-07-14 tracey 
 33 a596b957 2022-07-14 tracey #include <net/if.h>
 34 a596b957 2022-07-14 tracey #include <netinet/in.h>
 35 a596b957 2022-07-14 tracey 
 36 a596b957 2022-07-14 tracey #include <errno.h>
 37 a596b957 2022-07-14 tracey #include <event.h>
 38 a596b957 2022-07-14 tracey #include <fcntl.h>
 39 a596b957 2022-07-14 tracey #include <ifaddrs.h>
 40 a596b957 2022-07-14 tracey #include <imsg.h>
 41 a596b957 2022-07-14 tracey #include <limits.h>
 42 a596b957 2022-07-14 tracey #include <netdb.h>
 43 a596b957 2022-07-14 tracey #include <poll.h>
 44 a596b957 2022-07-14 tracey #include <pwd.h>
 45 a596b957 2022-07-14 tracey #include <stddef.h>
 46 a596b957 2022-07-14 tracey #include <stdio.h>
 47 a596b957 2022-07-14 tracey #include <stdlib.h>
 48 a596b957 2022-07-14 tracey #include <string.h>
 49 a596b957 2022-07-14 tracey #include <unistd.h>
 50 a596b957 2022-07-14 tracey #include <util.h>
 51 a596b957 2022-07-14 tracey 
 52 a596b957 2022-07-14 tracey #include "got_error.h"
 53 a596b957 2022-07-14 tracey #include "got_opentemp.h"
 54 a596b957 2022-07-14 tracey 
 55 a596b957 2022-07-14 tracey #include "proc.h"
 56 a596b957 2022-07-14 tracey #include "gotwebd.h"
 57 a596b957 2022-07-14 tracey 
 58 a596b957 2022-07-14 tracey #define SOCKS_BACKLOG 5
 59 a596b957 2022-07-14 tracey #define MAXIMUM(a, b)	(((a) > (b)) ? (a) : (b))
 60 a596b957 2022-07-14 tracey 
 61 a596b957 2022-07-14 tracey 
 62 a596b957 2022-07-14 tracey volatile int client_cnt;
 63 a596b957 2022-07-14 tracey 
 64 a596b957 2022-07-14 tracey struct timeval	timeout = { TIMEOUT_DEFAULT, 0 };
 65 a596b957 2022-07-14 tracey 
 66 a596b957 2022-07-14 tracey void	 sockets_sighdlr(int, short, void *);
 67 a596b957 2022-07-14 tracey void	 sockets_run(struct privsep *, struct privsep_proc *, void *);
 68 a596b957 2022-07-14 tracey void	 sockets_launch(void);
 69 a596b957 2022-07-14 tracey void	 sockets_purge(struct gotwebd *);
 70 a596b957 2022-07-14 tracey void	 sockets_accept_paused(int, short, void *);
 71 a596b957 2022-07-14 tracey void	 sockets_dup_new_socket(struct socket *, struct socket *);
 72 a596b957 2022-07-14 tracey void	 sockets_rlimit(int);
 73 a596b957 2022-07-14 tracey 
 74 a596b957 2022-07-14 tracey 
 75 a596b957 2022-07-14 tracey int	 sockets_dispatch_gotwebd(int, struct privsep_proc *, struct imsg *);
 76 a596b957 2022-07-14 tracey int	 sockets_unix_socket_listen(struct privsep *, struct socket *);
 77 a596b957 2022-07-14 tracey int	 sockets_create_socket(struct addresslist *, in_port_t);
 78 a596b957 2022-07-14 tracey int	 sockets_socket_af(struct sockaddr_storage *, in_port_t);
 79 a596b957 2022-07-14 tracey int	 sockets_accept_reserve(int, struct sockaddr *, socklen_t *, int,
 80 a596b957 2022-07-14 tracey 	    volatile int *);
 81 a596b957 2022-07-14 tracey 
 82 a596b957 2022-07-14 tracey struct socket
 83 a596b957 2022-07-14 tracey 	*sockets_conf_new_socket(struct gotwebd *, struct server *, int, int,
 84 a596b957 2022-07-14 tracey 	    int);
 85 a596b957 2022-07-14 tracey 
 86 a596b957 2022-07-14 tracey int cgi_inflight = 0;
 87 a596b957 2022-07-14 tracey 
 88 a596b957 2022-07-14 tracey static struct privsep_proc procs[] = {
 89 a596b957 2022-07-14 tracey 	{ "gotwebd",	PROC_GOTWEBD,	sockets_dispatch_gotwebd  },
 90 a596b957 2022-07-14 tracey };
 91 a596b957 2022-07-14 tracey 
 92 a596b957 2022-07-14 tracey void
 93 a596b957 2022-07-14 tracey sockets(struct privsep *ps, struct privsep_proc *p)
 94 a596b957 2022-07-14 tracey {
 95 a596b957 2022-07-14 tracey 	proc_run(ps, p, procs, nitems(procs), sockets_run, NULL);
 96 a596b957 2022-07-14 tracey }
 97 a596b957 2022-07-14 tracey 
 98 a596b957 2022-07-14 tracey void
 99 a596b957 2022-07-14 tracey sockets_run(struct privsep *ps, struct privsep_proc *p, void *arg)
100 a596b957 2022-07-14 tracey {
101 a596b957 2022-07-14 tracey 	if (config_init(ps->ps_env) == -1)
102 a596b957 2022-07-14 tracey 		fatal("failed to initialize configuration");
103 a596b957 2022-07-14 tracey 
104 a596b957 2022-07-14 tracey 	p->p_shutdown = sockets_shutdown;
105 a596b957 2022-07-14 tracey 
106 a596b957 2022-07-14 tracey 	sockets_rlimit(-1);
107 a596b957 2022-07-14 tracey 
108 a596b957 2022-07-14 tracey 	signal_del(&ps->ps_evsigchld);
109 a596b957 2022-07-14 tracey 	signal_set(&ps->ps_evsigchld, SIGCHLD, sockets_sighdlr, ps);
110 a596b957 2022-07-14 tracey 	signal_add(&ps->ps_evsigchld, NULL);
111 a596b957 2022-07-14 tracey 
112 a596b957 2022-07-14 tracey #ifndef PROFILE
113 a596b957 2022-07-14 tracey 	if (pledge("stdio rpath wpath cpath inet recvfd proc exec sendfd",
114 a596b957 2022-07-14 tracey 	    NULL) == -1)
115 a596b957 2022-07-14 tracey 		fatal("pledge");
116 a596b957 2022-07-14 tracey #endif
117 a596b957 2022-07-14 tracey }
118 a596b957 2022-07-14 tracey 
119 a596b957 2022-07-14 tracey void
120 a596b957 2022-07-14 tracey sockets_parse_sockets(struct gotwebd *env)
121 a596b957 2022-07-14 tracey {
122 a596b957 2022-07-14 tracey 	struct server *srv;
123 a596b957 2022-07-14 tracey 	struct socket *sock, *new_sock = NULL;
124 a596b957 2022-07-14 tracey 	struct address *a;
125 a596b957 2022-07-14 tracey 	int sock_id = 0, ipv4 = 0, ipv6 = 0;
126 a596b957 2022-07-14 tracey 
127 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(srv, env->servers, entry) {
128 a596b957 2022-07-14 tracey 		if (srv->unix_socket) {
129 a596b957 2022-07-14 tracey 			sock_id++;
130 a596b957 2022-07-14 tracey 			new_sock = sockets_conf_new_socket(env, srv,
131 a596b957 2022-07-14 tracey 			    sock_id, UNIX, 0);
132 a596b957 2022-07-14 tracey 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
133 a596b957 2022-07-14 tracey 		}
134 a596b957 2022-07-14 tracey 
135 a596b957 2022-07-14 tracey 		if (srv->fcgi_socket) {
136 a596b957 2022-07-14 tracey 			sock_id++;
137 a596b957 2022-07-14 tracey 			new_sock = sockets_conf_new_socket(env, srv,
138 a596b957 2022-07-14 tracey 			    sock_id, FCGI, 0);
139 a596b957 2022-07-14 tracey 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
140 a596b957 2022-07-14 tracey 
141 a596b957 2022-07-14 tracey 			/* add ipv6 children */
142 a596b957 2022-07-14 tracey 			TAILQ_FOREACH(sock, env->sockets, entry) {
143 a596b957 2022-07-14 tracey 				ipv4 = ipv6 = 0;
144 a596b957 2022-07-14 tracey 
145 a596b957 2022-07-14 tracey 				TAILQ_FOREACH(a, sock->conf.al, entry) {
146 a596b957 2022-07-14 tracey 					if (a->ss.ss_family == AF_INET)
147 a596b957 2022-07-14 tracey 						ipv4 = 1;
148 a596b957 2022-07-14 tracey 					if (a->ss.ss_family == AF_INET6)
149 a596b957 2022-07-14 tracey 						ipv6 = 1;
150 a596b957 2022-07-14 tracey 				}
151 a596b957 2022-07-14 tracey 
152 a596b957 2022-07-14 tracey 				/* create ipv6 sock */
153 a596b957 2022-07-14 tracey 				if (ipv4 == 1 && ipv6 == 1) {
154 a596b957 2022-07-14 tracey 					sock_id++;
155 a596b957 2022-07-14 tracey 					sock->conf.child_id = sock_id;
156 a596b957 2022-07-14 tracey 					new_sock = sockets_conf_new_socket(env,
157 a596b957 2022-07-14 tracey 					    srv, sock_id, FCGI, 1);
158 a596b957 2022-07-14 tracey 					sockets_dup_new_socket(sock, new_sock);
159 a596b957 2022-07-14 tracey 					TAILQ_INSERT_TAIL(env->sockets,
160 a596b957 2022-07-14 tracey 					    new_sock, entry);
161 a596b957 2022-07-14 tracey 					continue;
162 a596b957 2022-07-14 tracey 				}
163 a596b957 2022-07-14 tracey 			}
164 a596b957 2022-07-14 tracey 		}
165 a596b957 2022-07-14 tracey 	}
166 a596b957 2022-07-14 tracey }
167 a596b957 2022-07-14 tracey 
168 a596b957 2022-07-14 tracey void
169 a596b957 2022-07-14 tracey sockets_dup_new_socket(struct socket *p_sock, struct socket *sock)
170 a596b957 2022-07-14 tracey {
171 a596b957 2022-07-14 tracey 	struct address *a, *acp;
172 a596b957 2022-07-14 tracey 	int n;
173 a596b957 2022-07-14 tracey 
174 a596b957 2022-07-14 tracey 	sock->conf.parent_id = p_sock->conf.id;
175 a596b957 2022-07-14 tracey 	sock->conf.ipv4 = 0;
176 a596b957 2022-07-14 tracey 	sock->conf.ipv6 = 1;
177 a596b957 2022-07-14 tracey 
178 a596b957 2022-07-14 tracey 	memcpy(&sock->conf.srv_name, p_sock->conf.srv_name,
179 a596b957 2022-07-14 tracey 	    sizeof(sock->conf.srv_name));
180 a596b957 2022-07-14 tracey 
181 a596b957 2022-07-14 tracey 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_child",
182 a596b957 2022-07-14 tracey 	    p_sock->conf.srv_name);
183 a596b957 2022-07-14 tracey 	if (n < 0) {
184 a596b957 2022-07-14 tracey 		free(p_sock->conf.al);
185 a596b957 2022-07-14 tracey 		free(p_sock);
186 a596b957 2022-07-14 tracey 		free(sock->conf.al);
187 a596b957 2022-07-14 tracey 		free(sock);
188 a596b957 2022-07-14 tracey 		fatalx("%s: snprintf", __func__);
189 a596b957 2022-07-14 tracey 	}
190 a596b957 2022-07-14 tracey 
191 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(a, p_sock->conf.al, entry) {
192 a596b957 2022-07-14 tracey 		if (a->ss.ss_family == AF_INET)
193 a596b957 2022-07-14 tracey 			continue;
194 a596b957 2022-07-14 tracey 
195 a596b957 2022-07-14 tracey 		if ((acp = calloc(1, sizeof(*acp))) == NULL)
196 a596b957 2022-07-14 tracey 			fatal("%s: calloc", __func__);
197 a596b957 2022-07-14 tracey 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
198 a596b957 2022-07-14 tracey 		acp->ipproto = a->ipproto;
199 a596b957 2022-07-14 tracey 		acp->prefixlen = a->prefixlen;
200 a596b957 2022-07-14 tracey 		acp->port = a->port;
201 a596b957 2022-07-14 tracey 		if (strlen(a->ifname) != 0) {
202 a596b957 2022-07-14 tracey 			if (strlcpy(acp->ifname, a->ifname,
203 a596b957 2022-07-14 tracey 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
204 a596b957 2022-07-14 tracey 				fatalx("%s: interface name truncated",
205 a596b957 2022-07-14 tracey 				    __func__);
206 a596b957 2022-07-14 tracey 			}
207 a596b957 2022-07-14 tracey 		}
208 a596b957 2022-07-14 tracey 
209 a596b957 2022-07-14 tracey 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
210 a596b957 2022-07-14 tracey 	}
211 a596b957 2022-07-14 tracey }
212 a596b957 2022-07-14 tracey 
213 a596b957 2022-07-14 tracey struct socket *
214 a596b957 2022-07-14 tracey sockets_conf_new_socket(struct gotwebd *env, struct server *srv, int id,
215 a596b957 2022-07-14 tracey     int type, int is_dup)
216 a596b957 2022-07-14 tracey {
217 a596b957 2022-07-14 tracey 	struct socket *sock;
218 a596b957 2022-07-14 tracey 	struct address *a, *acp;
219 a596b957 2022-07-14 tracey 	int n;
220 a596b957 2022-07-14 tracey 
221 a596b957 2022-07-14 tracey 	if ((sock = calloc(1, sizeof(*sock))) == NULL)
222 a596b957 2022-07-14 tracey 		fatalx("%s: calloc", __func__);
223 a596b957 2022-07-14 tracey 
224 a596b957 2022-07-14 tracey 	if ((sock->conf.al = calloc(1, sizeof(*sock->conf.al))) == NULL) {
225 a596b957 2022-07-14 tracey 		free(sock);
226 a596b957 2022-07-14 tracey 		fatalx("%s: calloc", __func__);
227 a596b957 2022-07-14 tracey 	}
228 a596b957 2022-07-14 tracey 	TAILQ_INIT(sock->conf.al);
229 a596b957 2022-07-14 tracey 
230 a596b957 2022-07-14 tracey 	sock->conf.parent_id = 0;
231 a596b957 2022-07-14 tracey 	sock->conf.id = id;
232 a596b957 2022-07-14 tracey 
233 a596b957 2022-07-14 tracey 	sock->fd = -1;
234 a596b957 2022-07-14 tracey 
235 a596b957 2022-07-14 tracey 	sock->conf.type = type;
236 a596b957 2022-07-14 tracey 
237 a596b957 2022-07-14 tracey 	if (type == UNIX) {
238 a596b957 2022-07-14 tracey 		if (strlcpy(sock->conf.unix_socket_name,
239 a596b957 2022-07-14 tracey 		    srv->unix_socket_name,
240 a596b957 2022-07-14 tracey 		    sizeof(sock->conf.unix_socket_name)) >=
241 a596b957 2022-07-14 tracey 		    sizeof(sock->conf.unix_socket_name)) {
242 a596b957 2022-07-14 tracey 			free(sock->conf.al);
243 a596b957 2022-07-14 tracey 			free(sock);
244 a596b957 2022-07-14 tracey 			fatalx("%s: strlcpy", __func__);
245 a596b957 2022-07-14 tracey 		}
246 a596b957 2022-07-14 tracey 	} else
247 a596b957 2022-07-14 tracey 		sock->conf.ipv4 = 1;
248 a596b957 2022-07-14 tracey 
249 a596b957 2022-07-14 tracey 	sock->conf.fcgi_socket_port = srv->fcgi_socket_port;
250 a596b957 2022-07-14 tracey 
251 a596b957 2022-07-14 tracey 	if (is_dup)
252 a596b957 2022-07-14 tracey 		goto done;
253 a596b957 2022-07-14 tracey 
254 a596b957 2022-07-14 tracey 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_parent",
255 a596b957 2022-07-14 tracey 	    srv->name);
256 a596b957 2022-07-14 tracey 	if (n < 0) {
257 a596b957 2022-07-14 tracey 		free(sock->conf.al);
258 a596b957 2022-07-14 tracey 		free(sock);
259 a596b957 2022-07-14 tracey 		fatalx("%s: snprintf", __func__);
260 a596b957 2022-07-14 tracey 	}
261 a596b957 2022-07-14 tracey 
262 a596b957 2022-07-14 tracey 	if (strlcpy(sock->conf.srv_name, srv->name,
263 a596b957 2022-07-14 tracey 	    sizeof(sock->conf.srv_name)) >= sizeof(sock->conf.srv_name)) {
264 a596b957 2022-07-14 tracey 		free(sock->conf.al);
265 a596b957 2022-07-14 tracey 		free(sock);
266 a596b957 2022-07-14 tracey 		fatalx("%s: strlcpy", __func__);
267 a596b957 2022-07-14 tracey 	}
268 a596b957 2022-07-14 tracey 
269 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(a, srv->al, entry) {
270 a596b957 2022-07-14 tracey 		if ((acp = calloc(1, sizeof(*acp))) == NULL) {
271 a596b957 2022-07-14 tracey 			free(sock->conf.al);
272 a596b957 2022-07-14 tracey 			free(sock);
273 a596b957 2022-07-14 tracey 			fatal("%s: calloc", __func__);
274 a596b957 2022-07-14 tracey 		}
275 a596b957 2022-07-14 tracey 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
276 a596b957 2022-07-14 tracey 		acp->ipproto = a->ipproto;
277 a596b957 2022-07-14 tracey 		acp->prefixlen = a->prefixlen;
278 a596b957 2022-07-14 tracey 		acp->port = a->port;
279 a596b957 2022-07-14 tracey 		if (strlen(a->ifname) != 0) {
280 a596b957 2022-07-14 tracey 			if (strlcpy(acp->ifname, a->ifname,
281 a596b957 2022-07-14 tracey 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
282 a596b957 2022-07-14 tracey 				fatalx("%s: interface name truncated",
283 a596b957 2022-07-14 tracey 				    __func__);
284 a596b957 2022-07-14 tracey 			}
285 a596b957 2022-07-14 tracey 		}
286 a596b957 2022-07-14 tracey 
287 a596b957 2022-07-14 tracey 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
288 a596b957 2022-07-14 tracey 	}
289 a596b957 2022-07-14 tracey done:
290 a596b957 2022-07-14 tracey 	return (sock);
291 a596b957 2022-07-14 tracey }
292 a596b957 2022-07-14 tracey 
293 a596b957 2022-07-14 tracey int
294 a596b957 2022-07-14 tracey sockets_socket_af(struct sockaddr_storage *ss, in_port_t port)
295 a596b957 2022-07-14 tracey {
296 a596b957 2022-07-14 tracey 	switch (ss->ss_family) {
297 a596b957 2022-07-14 tracey 	case AF_INET:
298 a596b957 2022-07-14 tracey 		((struct sockaddr_in *)ss)->sin_port = port;
299 a596b957 2022-07-14 tracey 		((struct sockaddr_in *)ss)->sin_len =
300 a596b957 2022-07-14 tracey 		    sizeof(struct sockaddr_in);
301 a596b957 2022-07-14 tracey 		break;
302 a596b957 2022-07-14 tracey 	case AF_INET6:
303 a596b957 2022-07-14 tracey 		((struct sockaddr_in6 *)ss)->sin6_port = port;
304 a596b957 2022-07-14 tracey 		((struct sockaddr_in6 *)ss)->sin6_len =
305 a596b957 2022-07-14 tracey 		    sizeof(struct sockaddr_in6);
306 a596b957 2022-07-14 tracey 		break;
307 a596b957 2022-07-14 tracey 	default:
308 a596b957 2022-07-14 tracey 		return -1;
309 a596b957 2022-07-14 tracey 	}
310 a596b957 2022-07-14 tracey 
311 a596b957 2022-07-14 tracey 	return 0;
312 a596b957 2022-07-14 tracey }
313 a596b957 2022-07-14 tracey 
314 a596b957 2022-07-14 tracey void
315 a596b957 2022-07-14 tracey sockets_launch(void)
316 a596b957 2022-07-14 tracey {
317 a596b957 2022-07-14 tracey 	struct socket *sock;
318 a596b957 2022-07-14 tracey 
319 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(sock, gotwebd_env->sockets, entry) {
320 a596b957 2022-07-14 tracey 		log_debug("%s: configuring socket %d (%d)", __func__,
321 a596b957 2022-07-14 tracey 		    sock->conf.id, sock->fd);
322 a596b957 2022-07-14 tracey 
323 a596b957 2022-07-14 tracey 		event_set(&sock->ev, sock->fd, EV_READ | EV_PERSIST,
324 a596b957 2022-07-14 tracey 		    sockets_socket_accept, sock);
325 a596b957 2022-07-14 tracey 
326 a596b957 2022-07-14 tracey 		if (event_add(&sock->ev, NULL))
327 a596b957 2022-07-14 tracey 			fatalx("event add sock");
328 a596b957 2022-07-14 tracey 
329 a596b957 2022-07-14 tracey 		evtimer_set(&sock->pause, sockets_accept_paused, sock);
330 a596b957 2022-07-14 tracey 
331 a596b957 2022-07-14 tracey 		log_debug("%s: running socket listener %d", __func__,
332 a596b957 2022-07-14 tracey 		    sock->conf.id);
333 a596b957 2022-07-14 tracey 	}
334 a596b957 2022-07-14 tracey }
335 a596b957 2022-07-14 tracey 
336 a596b957 2022-07-14 tracey void
337 a596b957 2022-07-14 tracey sockets_purge(struct gotwebd *env)
338 a596b957 2022-07-14 tracey {
339 a596b957 2022-07-14 tracey 	struct socket *sock, *tsock;
340 a596b957 2022-07-14 tracey 
341 a596b957 2022-07-14 tracey 	/* shutdown and remove sockets */
342 a596b957 2022-07-14 tracey 	TAILQ_FOREACH_SAFE(sock, env->sockets, entry, tsock) {
343 a596b957 2022-07-14 tracey 		if (event_initialized(&sock->ev))
344 a596b957 2022-07-14 tracey 			event_del(&sock->ev);
345 a596b957 2022-07-14 tracey 		if (evtimer_initialized(&sock->evt))
346 a596b957 2022-07-14 tracey 			evtimer_del(&sock->evt);
347 a596b957 2022-07-14 tracey 		if (evtimer_initialized(&sock->pause))
348 a596b957 2022-07-14 tracey 			evtimer_del(&sock->pause);
349 a596b957 2022-07-14 tracey 		if (sock->fd != -1)
350 a596b957 2022-07-14 tracey 			close(sock->fd);
351 a596b957 2022-07-14 tracey 		TAILQ_REMOVE(env->sockets, sock, entry);
352 a596b957 2022-07-14 tracey 	}
353 a596b957 2022-07-14 tracey }
354 a596b957 2022-07-14 tracey 
355 a596b957 2022-07-14 tracey int
356 a596b957 2022-07-14 tracey sockets_dispatch_gotwebd(int fd, struct privsep_proc *p, struct imsg *imsg)
357 a596b957 2022-07-14 tracey {
358 a596b957 2022-07-14 tracey 	struct privsep *ps = p->p_ps;
359 a596b957 2022-07-14 tracey 	int res = 0, cmd = 0, verbose;
360 a596b957 2022-07-14 tracey 
361 a596b957 2022-07-14 tracey 	switch (imsg->hdr.type) {
362 a596b957 2022-07-14 tracey 	case IMSG_CFG_SRV:
363 a596b957 2022-07-14 tracey 		config_getserver(gotwebd_env, imsg);
364 a596b957 2022-07-14 tracey 		break;
365 a596b957 2022-07-14 tracey 	case IMSG_CFG_SOCK:
366 a596b957 2022-07-14 tracey 		config_getsock(gotwebd_env, imsg);
367 a596b957 2022-07-14 tracey 		break;
368 a596b957 2022-07-14 tracey 	case IMSG_CFG_FD:
369 a596b957 2022-07-14 tracey 		config_getfd(gotwebd_env, imsg);
370 a596b957 2022-07-14 tracey 		break;
371 a596b957 2022-07-14 tracey 	case IMSG_CFG_DONE:
372 a596b957 2022-07-14 tracey 		config_getcfg(gotwebd_env, imsg);
373 a596b957 2022-07-14 tracey 		break;
374 a596b957 2022-07-14 tracey 	case IMSG_CTL_START:
375 a596b957 2022-07-14 tracey 		sockets_launch();
376 a596b957 2022-07-14 tracey 		break;
377 a596b957 2022-07-14 tracey 	case IMSG_CTL_VERBOSE:
378 a596b957 2022-07-14 tracey 		IMSG_SIZE_CHECK(imsg, &verbose);
379 a596b957 2022-07-14 tracey 		memcpy(&verbose, imsg->data, sizeof(verbose));
380 a596b957 2022-07-14 tracey 		log_setverbose(verbose);
381 a596b957 2022-07-14 tracey 		break;
382 a596b957 2022-07-14 tracey 	default:
383 a596b957 2022-07-14 tracey 		return -1;
384 a596b957 2022-07-14 tracey 	}
385 a596b957 2022-07-14 tracey 
386 a596b957 2022-07-14 tracey 	switch (cmd) {
387 a596b957 2022-07-14 tracey 	case 0:
388 a596b957 2022-07-14 tracey 		break;
389 a596b957 2022-07-14 tracey 	default:
390 a596b957 2022-07-14 tracey 		if (proc_compose_imsg(ps, PROC_GOTWEBD, -1, cmd,
391 a596b957 2022-07-14 tracey 		    imsg->hdr.peerid, -1, &res, sizeof(res)) == -1)
392 a596b957 2022-07-14 tracey 			return -1;
393 a596b957 2022-07-14 tracey 		break;
394 a596b957 2022-07-14 tracey 	}
395 a596b957 2022-07-14 tracey 
396 a596b957 2022-07-14 tracey 	return 0;
397 a596b957 2022-07-14 tracey }
398 a596b957 2022-07-14 tracey 
399 a596b957 2022-07-14 tracey void
400 a596b957 2022-07-14 tracey sockets_sighdlr(int sig, short event, void *arg)
401 a596b957 2022-07-14 tracey {
402 a596b957 2022-07-14 tracey 	switch (sig) {
403 a596b957 2022-07-14 tracey 	case SIGHUP:
404 a596b957 2022-07-14 tracey 		log_info("%s: ignoring SIGHUP", __func__);
405 a596b957 2022-07-14 tracey 		break;
406 a596b957 2022-07-14 tracey 	case SIGPIPE:
407 a596b957 2022-07-14 tracey 		log_info("%s: ignoring SIGPIPE", __func__);
408 a596b957 2022-07-14 tracey 		break;
409 a596b957 2022-07-14 tracey 	case SIGUSR1:
410 a596b957 2022-07-14 tracey 		log_info("%s: ignoring SIGUSR1", __func__);
411 a596b957 2022-07-14 tracey 		break;
412 a596b957 2022-07-14 tracey 	case SIGCHLD:
413 a596b957 2022-07-14 tracey 		break;
414 a596b957 2022-07-14 tracey 	default:
415 a596b957 2022-07-14 tracey 		log_info("SIGNAL: %d", sig);
416 a596b957 2022-07-14 tracey 		fatalx("unexpected signal");
417 a596b957 2022-07-14 tracey 	}
418 a596b957 2022-07-14 tracey }
419 a596b957 2022-07-14 tracey 
420 a596b957 2022-07-14 tracey void
421 a596b957 2022-07-14 tracey sockets_shutdown(void)
422 a596b957 2022-07-14 tracey {
423 a596b957 2022-07-14 tracey 	struct server *srv, *tsrv;
424 a596b957 2022-07-14 tracey 	struct socket *sock, *tsock;
425 a596b957 2022-07-14 tracey 
426 a596b957 2022-07-14 tracey 	sockets_purge(gotwebd_env);
427 a596b957 2022-07-14 tracey 
428 a596b957 2022-07-14 tracey 	/* clean sockets */
429 a596b957 2022-07-14 tracey 	TAILQ_FOREACH_SAFE(sock, gotwebd_env->sockets, entry, tsock) {
430 a596b957 2022-07-14 tracey 		TAILQ_REMOVE(gotwebd_env->sockets, sock, entry);
431 a596b957 2022-07-14 tracey 		close(sock->fd);
432 a596b957 2022-07-14 tracey 		free(sock);
433 a596b957 2022-07-14 tracey 	}
434 a596b957 2022-07-14 tracey 
435 a596b957 2022-07-14 tracey 	/* clean servers */
436 a596b957 2022-07-14 tracey 	TAILQ_FOREACH_SAFE(srv, gotwebd_env->servers, entry, tsrv)
437 a596b957 2022-07-14 tracey 		free(srv);
438 a596b957 2022-07-14 tracey 
439 a596b957 2022-07-14 tracey 	free(gotwebd_env->sockets);
440 a596b957 2022-07-14 tracey 	free(gotwebd_env->servers);
441 a596b957 2022-07-14 tracey 	free(gotwebd_env);
442 a596b957 2022-07-14 tracey }
443 a596b957 2022-07-14 tracey 
444 a596b957 2022-07-14 tracey int
445 a596b957 2022-07-14 tracey sockets_privinit(struct gotwebd *env, struct socket *sock)
446 a596b957 2022-07-14 tracey {
447 a596b957 2022-07-14 tracey 	struct privsep *ps = env->gotwebd_ps;
448 a596b957 2022-07-14 tracey 
449 a596b957 2022-07-14 tracey 	if (sock->conf.type == UNIX) {
450 a596b957 2022-07-14 tracey 		log_debug("%s: initializing unix socket %s", __func__,
451 a596b957 2022-07-14 tracey 		    sock->conf.unix_socket_name);
452 a596b957 2022-07-14 tracey 		sock->fd = sockets_unix_socket_listen(ps, sock);
453 a596b957 2022-07-14 tracey 		if (sock->fd == -1) {
454 a596b957 2022-07-14 tracey 			log_warnx("%s: create unix socket failed", __func__);
455 a596b957 2022-07-14 tracey 			return -1;
456 a596b957 2022-07-14 tracey 		}
457 a596b957 2022-07-14 tracey 	}
458 a596b957 2022-07-14 tracey 
459 a596b957 2022-07-14 tracey 	if (sock->conf.type == FCGI) {
460 a596b957 2022-07-14 tracey 		log_debug("%s: initializing fcgi socket for %s", __func__,
461 a596b957 2022-07-14 tracey 		    sock->conf.name);
462 a596b957 2022-07-14 tracey 		sock->fd = sockets_create_socket(sock->conf.al,
463 a596b957 2022-07-14 tracey 		    sock->conf.fcgi_socket_port);
464 a596b957 2022-07-14 tracey 		if (sock->fd == -1) {
465 a596b957 2022-07-14 tracey 			log_warnx("%s: create unix socket failed", __func__);
466 a596b957 2022-07-14 tracey 			return -1;
467 a596b957 2022-07-14 tracey 		}
468 a596b957 2022-07-14 tracey 	}
469 a596b957 2022-07-14 tracey 
470 a596b957 2022-07-14 tracey 	return 0;
471 a596b957 2022-07-14 tracey }
472 a596b957 2022-07-14 tracey 
473 a596b957 2022-07-14 tracey int
474 a596b957 2022-07-14 tracey sockets_unix_socket_listen(struct privsep *ps, struct socket *sock)
475 a596b957 2022-07-14 tracey {
476 a596b957 2022-07-14 tracey 	struct gotwebd *env = ps->ps_env;
477 a596b957 2022-07-14 tracey 	struct sockaddr_un sun;
478 a596b957 2022-07-14 tracey 	struct socket *tsock;
479 a596b957 2022-07-14 tracey 	int u_fd = -1;
480 a596b957 2022-07-14 tracey 	mode_t old_umask, mode;
481 a596b957 2022-07-14 tracey 
482 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(tsock, env->sockets, entry) {
483 a596b957 2022-07-14 tracey 		if (strcmp(tsock->conf.unix_socket_name,
484 a596b957 2022-07-14 tracey 		    sock->conf.unix_socket_name) == 0 &&
485 a596b957 2022-07-14 tracey 		    tsock->fd != -1)
486 a596b957 2022-07-14 tracey 			return (tsock->fd);
487 a596b957 2022-07-14 tracey 	}
488 a596b957 2022-07-14 tracey 
489 a596b957 2022-07-14 tracey 	u_fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK| SOCK_CLOEXEC, 0);
490 a596b957 2022-07-14 tracey 	if (u_fd == -1) {
491 a596b957 2022-07-14 tracey 		log_warn("%s: socket", __func__);
492 a596b957 2022-07-14 tracey 		return -1;
493 a596b957 2022-07-14 tracey 	}
494 a596b957 2022-07-14 tracey 
495 a596b957 2022-07-14 tracey 	sun.sun_family = AF_UNIX;
496 a596b957 2022-07-14 tracey 	if (strlcpy(sun.sun_path, sock->conf.unix_socket_name,
497 a596b957 2022-07-14 tracey 	    sizeof(sun.sun_path)) >= sizeof(sun.sun_path)) {
498 a596b957 2022-07-14 tracey 		log_warn("%s: %s name too long", __func__,
499 a596b957 2022-07-14 tracey 		    sock->conf.unix_socket_name);
500 a596b957 2022-07-14 tracey 		close(u_fd);
501 a596b957 2022-07-14 tracey 		return -1;
502 a596b957 2022-07-14 tracey 	}
503 a596b957 2022-07-14 tracey 
504 a596b957 2022-07-14 tracey 	if (unlink(sock->conf.unix_socket_name) == -1) {
505 a596b957 2022-07-14 tracey 		if (errno != ENOENT) {
506 a596b957 2022-07-14 tracey 			log_warn("%s: unlink %s", __func__,
507 a596b957 2022-07-14 tracey 			    sock->conf.unix_socket_name);
508 a596b957 2022-07-14 tracey 			close(u_fd);
509 a596b957 2022-07-14 tracey 			return -1;
510 a596b957 2022-07-14 tracey 		}
511 a596b957 2022-07-14 tracey 	}
512 a596b957 2022-07-14 tracey 
513 a596b957 2022-07-14 tracey 	old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
514 a596b957 2022-07-14 tracey 	mode = S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP;
515 a596b957 2022-07-14 tracey 
516 a596b957 2022-07-14 tracey 	if (bind(u_fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
517 a596b957 2022-07-14 tracey 		log_warn("%s: bind: %s", __func__, sock->conf.unix_socket_name);
518 a596b957 2022-07-14 tracey 		close(u_fd);
519 a596b957 2022-07-14 tracey 		(void)umask(old_umask);
520 a596b957 2022-07-14 tracey 		return -1;
521 a596b957 2022-07-14 tracey 	}
522 a596b957 2022-07-14 tracey 
523 a596b957 2022-07-14 tracey 	(void)umask(old_umask);
524 a596b957 2022-07-14 tracey 
525 a596b957 2022-07-14 tracey 	if (chmod(sock->conf.unix_socket_name, mode) == -1) {
526 a596b957 2022-07-14 tracey 		log_warn("%s: chmod", __func__);
527 a596b957 2022-07-14 tracey 		close(u_fd);
528 a596b957 2022-07-14 tracey 		(void)unlink(sock->conf.unix_socket_name);
529 a596b957 2022-07-14 tracey 		return -1;
530 a596b957 2022-07-14 tracey 	}
531 a596b957 2022-07-14 tracey 
532 a596b957 2022-07-14 tracey 	if (chown(sock->conf.unix_socket_name, ps->ps_pw->pw_uid,
533 a596b957 2022-07-14 tracey 	    ps->ps_pw->pw_gid) == -1) {
534 a596b957 2022-07-14 tracey 		log_warn("%s: chown", __func__);
535 a596b957 2022-07-14 tracey 		close(u_fd);
536 a596b957 2022-07-14 tracey 		(void)unlink(sock->conf.unix_socket_name);
537 a596b957 2022-07-14 tracey 		return -1;
538 a596b957 2022-07-14 tracey 	}
539 a596b957 2022-07-14 tracey 
540 a596b957 2022-07-14 tracey 	if (listen(u_fd, SOCKS_BACKLOG) == -1) {
541 a596b957 2022-07-14 tracey 		log_warn("%s: listen", __func__);
542 a596b957 2022-07-14 tracey 		return -1;
543 a596b957 2022-07-14 tracey 	}
544 a596b957 2022-07-14 tracey 
545 a596b957 2022-07-14 tracey 	return u_fd;
546 a596b957 2022-07-14 tracey }
547 a596b957 2022-07-14 tracey 
548 a596b957 2022-07-14 tracey int
549 a596b957 2022-07-14 tracey sockets_create_socket(struct addresslist *al, in_port_t port)
550 a596b957 2022-07-14 tracey {
551 a596b957 2022-07-14 tracey 	struct addrinfo hints;
552 a596b957 2022-07-14 tracey 	struct address *a;
553 a596b957 2022-07-14 tracey 	int fd = -1, o_val = 1, flags;
554 a596b957 2022-07-14 tracey 
555 a596b957 2022-07-14 tracey 	memset(&hints, 0, sizeof(hints));
556 a596b957 2022-07-14 tracey 	hints.ai_family = AF_UNSPEC;
557 a596b957 2022-07-14 tracey 	hints.ai_socktype = SOCK_STREAM;
558 a596b957 2022-07-14 tracey 	hints.ai_flags |= AI_PASSIVE;
559 a596b957 2022-07-14 tracey 
560 a596b957 2022-07-14 tracey 	TAILQ_FOREACH(a, al, entry) {
561 a596b957 2022-07-14 tracey 		if (sockets_socket_af(&a->ss, port) == -1) {
562 a596b957 2022-07-14 tracey 			log_warnx("%s: sockets_socket_af", __func__);
563 a596b957 2022-07-14 tracey 			goto fail;
564 a596b957 2022-07-14 tracey 		}
565 a596b957 2022-07-14 tracey 
566 a596b957 2022-07-14 tracey 		fd = socket(a->ss.ss_family, hints.ai_socktype,
567 a596b957 2022-07-14 tracey 		    a->ipproto);
568 a596b957 2022-07-14 tracey 			log_debug("%s: opening socket (%d) for %s", __func__,
569 a596b957 2022-07-14 tracey 			    fd, a->ifname);
570 a596b957 2022-07-14 tracey 
571 a596b957 2022-07-14 tracey 		if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &o_val,
572 a596b957 2022-07-14 tracey 		    sizeof(int)) == -1) {
573 a596b957 2022-07-14 tracey 			log_warn("%s: setsockopt error", __func__);
574 a596b957 2022-07-14 tracey 			return -1;
575 a596b957 2022-07-14 tracey 		}
576 a596b957 2022-07-14 tracey 
577 a596b957 2022-07-14 tracey 		/* non-blocking */
578 a596b957 2022-07-14 tracey 		flags = fcntl(fd, F_GETFL);
579 a596b957 2022-07-14 tracey 		flags |= O_NONBLOCK;
580 a596b957 2022-07-14 tracey 		fcntl(fd, F_SETFL, flags);
581 a596b957 2022-07-14 tracey 
582 a596b957 2022-07-14 tracey 		if (bind(fd, (struct sockaddr *)&a->ss, a->ss.ss_len) == -1) {
583 a596b957 2022-07-14 tracey 			close(fd);
584 a596b957 2022-07-14 tracey 			log_info("%s: can't bind to port %d", __func__,
585 a596b957 2022-07-14 tracey 			    ntohs(port));
586 a596b957 2022-07-14 tracey 			goto fail;
587 a596b957 2022-07-14 tracey 		}
588 a596b957 2022-07-14 tracey 
589 a596b957 2022-07-14 tracey 		if (listen(fd, SOMAXCONN) == -1) {
590 a596b957 2022-07-14 tracey 			log_warn("%s, unable to listen on socket", __func__);
591 a596b957 2022-07-14 tracey 			goto fail;
592 a596b957 2022-07-14 tracey 		}
593 a596b957 2022-07-14 tracey 	}
594 a596b957 2022-07-14 tracey 
595 a596b957 2022-07-14 tracey 	free(a);
596 a596b957 2022-07-14 tracey 	return (fd);
597 a596b957 2022-07-14 tracey fail:
598 a596b957 2022-07-14 tracey 	free(a);
599 a596b957 2022-07-14 tracey 	return -1;
600 a596b957 2022-07-14 tracey }
601 a596b957 2022-07-14 tracey 
602 a596b957 2022-07-14 tracey int
603 a596b957 2022-07-14 tracey sockets_accept_reserve(int sockfd, struct sockaddr *addr, socklen_t *addrlen,
604 a596b957 2022-07-14 tracey     int reserve, volatile int *counter)
605 a596b957 2022-07-14 tracey {
606 a596b957 2022-07-14 tracey 	int ret;
607 a596b957 2022-07-14 tracey 
608 a596b957 2022-07-14 tracey 	if (getdtablecount() + reserve +
609 a596b957 2022-07-14 tracey 	    ((*counter + 1) * FD_NEEDED) >= getdtablesize()) {
610 a596b957 2022-07-14 tracey 		log_debug("inflight fds exceeded");
611 a596b957 2022-07-14 tracey 		errno = EMFILE;
612 a596b957 2022-07-14 tracey 		return -1;
613 a596b957 2022-07-14 tracey 	}
614 a596b957 2022-07-14 tracey 
615 a596b957 2022-07-14 tracey 	if ((ret = accept4(sockfd, addr, addrlen,
616 a596b957 2022-07-14 tracey 	    SOCK_NONBLOCK | SOCK_CLOEXEC)) > -1) {
617 a596b957 2022-07-14 tracey 		(*counter)++;
618 a596b957 2022-07-14 tracey 		log_debug("inflight incremented, now %d", *counter);
619 a596b957 2022-07-14 tracey 	}
620 a596b957 2022-07-14 tracey 
621 a596b957 2022-07-14 tracey 	return ret;
622 a596b957 2022-07-14 tracey }
623 a596b957 2022-07-14 tracey 
624 a596b957 2022-07-14 tracey void
625 a596b957 2022-07-14 tracey sockets_accept_paused(int fd, short events, void *arg)
626 a596b957 2022-07-14 tracey {
627 a596b957 2022-07-14 tracey 	struct socket *sock = (struct socket *)arg;
628 a596b957 2022-07-14 tracey 
629 a596b957 2022-07-14 tracey 	event_add(&sock->ev, NULL);
630 a596b957 2022-07-14 tracey }
631 a596b957 2022-07-14 tracey 
632 a596b957 2022-07-14 tracey void
633 a596b957 2022-07-14 tracey sockets_socket_accept(int fd, short event, void *arg)
634 a596b957 2022-07-14 tracey {
635 a596b957 2022-07-14 tracey 	struct socket *sock = (struct socket *)arg;
636 a596b957 2022-07-14 tracey 	struct sockaddr_storage ss;
637 a596b957 2022-07-14 tracey 	struct timeval backoff;
638 a596b957 2022-07-14 tracey 	struct request *c = NULL;
639 a596b957 2022-07-14 tracey 	socklen_t len;
640 a596b957 2022-07-14 tracey 	int s;
641 a596b957 2022-07-14 tracey 
642 a596b957 2022-07-14 tracey 	backoff.tv_sec = 1;
643 a596b957 2022-07-14 tracey 	backoff.tv_usec = 0;
644 a596b957 2022-07-14 tracey 
645 a596b957 2022-07-14 tracey 	event_add(&sock->ev, NULL);
646 a596b957 2022-07-14 tracey 	if (event & EV_TIMEOUT)
647 a596b957 2022-07-14 tracey 		return;
648 a596b957 2022-07-14 tracey 
649 a596b957 2022-07-14 tracey 	len = sizeof(ss);
650 a596b957 2022-07-14 tracey 
651 a596b957 2022-07-14 tracey 	s = sockets_accept_reserve(fd, (struct sockaddr *)&ss, &len,
652 a596b957 2022-07-14 tracey 	    FD_RESERVE, &cgi_inflight);
653 a596b957 2022-07-14 tracey 
654 a596b957 2022-07-14 tracey 	if (s == -1) {
655 a596b957 2022-07-14 tracey 		switch (errno) {
656 a596b957 2022-07-14 tracey 		case EINTR:
657 a596b957 2022-07-14 tracey 		case EWOULDBLOCK:
658 a596b957 2022-07-14 tracey 		case ECONNABORTED:
659 a596b957 2022-07-14 tracey 			return;
660 a596b957 2022-07-14 tracey 		case EMFILE:
661 a596b957 2022-07-14 tracey 		case ENFILE:
662 a596b957 2022-07-14 tracey 			event_del(&sock->ev);
663 a596b957 2022-07-14 tracey 			evtimer_add(&sock->pause, &backoff);
664 a596b957 2022-07-14 tracey 			return;
665 a596b957 2022-07-14 tracey 		default:
666 a596b957 2022-07-14 tracey 			log_warn("%s: accept", __func__);
667 a596b957 2022-07-14 tracey 		}
668 a596b957 2022-07-14 tracey 	}
669 a596b957 2022-07-14 tracey 
670 a596b957 2022-07-14 tracey 	if (client_cnt > GOTWEBD_MAXCLIENTS)
671 a596b957 2022-07-14 tracey 		goto err;
672 a596b957 2022-07-14 tracey 
673 a596b957 2022-07-14 tracey 	c = calloc(1, sizeof(struct request));
674 a596b957 2022-07-14 tracey 	if (c == NULL) {
675 a596b957 2022-07-14 tracey 		log_warn("%s", __func__);
676 a596b957 2022-07-14 tracey 		close(s);
677 a596b957 2022-07-14 tracey 		cgi_inflight--;
678 a596b957 2022-07-14 tracey 		return;
679 a596b957 2022-07-14 tracey 	}
680 a596b957 2022-07-14 tracey 
681 a596b957 2022-07-14 tracey 	c->fd = s;
682 a596b957 2022-07-14 tracey 	c->sock = sock;
683 a596b957 2022-07-14 tracey 	memcpy(c->priv_fd, sock->priv_fd, sizeof(c->priv_fd));
684 a596b957 2022-07-14 tracey 	c->buf_pos = 0;
685 a596b957 2022-07-14 tracey 	c->buf_len = 0;
686 a596b957 2022-07-14 tracey 	c->request_started = 0;
687 a596b957 2022-07-14 tracey 	c->sock->client_status = CLIENT_CONNECT;
688 a596b957 2022-07-14 tracey 
689 a596b957 2022-07-14 tracey 	event_set(&c->ev, s, EV_READ, fcgi_request, c);
690 a596b957 2022-07-14 tracey 	event_add(&c->ev, NULL);
691 a596b957 2022-07-14 tracey 
692 a596b957 2022-07-14 tracey 	evtimer_set(&c->tmo, fcgi_timeout, c);
693 a596b957 2022-07-14 tracey 	evtimer_add(&c->tmo, &timeout);
694 a596b957 2022-07-14 tracey 
695 a596b957 2022-07-14 tracey 	client_cnt++;
696 a596b957 2022-07-14 tracey 
697 a596b957 2022-07-14 tracey 	return;
698 a596b957 2022-07-14 tracey err:
699 a596b957 2022-07-14 tracey 	cgi_inflight--;
700 a596b957 2022-07-14 tracey 	close(s);
701 a596b957 2022-07-14 tracey 	if (c != NULL)
702 a596b957 2022-07-14 tracey 		free(c);
703 a596b957 2022-07-14 tracey }
704 a596b957 2022-07-14 tracey 
705 a596b957 2022-07-14 tracey void
706 a596b957 2022-07-14 tracey sockets_rlimit(int maxfd)
707 a596b957 2022-07-14 tracey {
708 a596b957 2022-07-14 tracey 	struct rlimit rl;
709 a596b957 2022-07-14 tracey 
710 a596b957 2022-07-14 tracey 	if (getrlimit(RLIMIT_NOFILE, &rl) == -1)
711 a596b957 2022-07-14 tracey 		fatal("%s: failed to get resource limit", __func__);
712 a596b957 2022-07-14 tracey 	log_debug("%s: max open files %llu", __func__, rl.rlim_max);
713 a596b957 2022-07-14 tracey 
714 a596b957 2022-07-14 tracey 	/*
715 a596b957 2022-07-14 tracey 	 * Allow the maximum number of open file descriptors for this
716 a596b957 2022-07-14 tracey 	 * login class (which should be the class "daemon" by default).
717 a596b957 2022-07-14 tracey 	 */
718 a596b957 2022-07-14 tracey 	if (maxfd == -1)
719 a596b957 2022-07-14 tracey 		rl.rlim_cur = rl.rlim_max;
720 a596b957 2022-07-14 tracey 	else
721 a596b957 2022-07-14 tracey 		rl.rlim_cur = MAXIMUM(rl.rlim_max, (rlim_t)maxfd);
722 a596b957 2022-07-14 tracey 	if (setrlimit(RLIMIT_NOFILE, &rl) == -1)
723 a596b957 2022-07-14 tracey 		fatal("%s: failed to set resource limit", __func__);
724 a596b957 2022-07-14 tracey }