op public repos

Blame

Date:: Thu Jun 8 13:59:31 2023 UTC
Message:: rework the daemon to do fork+exec It uses the 'common' proc.c from various OpenBSD-daemons. gmid grew organically bit by bit and it was also the first place where I tried to implement privsep. It wasn't done very well, in fact the parent process (that retains root privileges) just fork()s a generation of servers, all sharing *exactly* the same address space. No good! Now, we fork() and re-exec() ourselves, so that each process has a fresh address space. Some features (require client ca for example) are temporarly disabled, will be fixed in subsequent commits. The "ge" program is also temporarly disabled as it needs tweaks to do privsep too.
Actions:: History | Blob | Raw File
   1 15902770 2021-01-15 op %{
   2 15902770 2021-01-15 op 
   3 15902770 2021-01-15 op /*
   4 e2f167af 2021-01-02 op  * Copyright (c) 2021, 2022 Omar Polo <op@omarpolo.com>
   5 c39be742 2021-07-09 op  * Copyright (c) 2018 Florian Obser <florian@openbsd.org>
   6 c39be742 2021-07-09 op  * Copyright (c) 2004, 2005 Esben Norby <norby@openbsd.org>
   7 c39be742 2021-07-09 op  * Copyright (c) 2004 Ryan McBride <mcbride@openbsd.org>
   8 c39be742 2021-07-09 op  * Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
   9 c39be742 2021-07-09 op  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
  10 c39be742 2021-07-09 op  * Copyright (c) 2001 Daniel Hartmeier.  All rights reserved.
  11 c39be742 2021-07-09 op  * Copyright (c) 2001 Theo de Raadt.  All rights reserved.
  12 15902770 2021-01-15 op  *
  13 15902770 2021-01-15 op  * Permission to use, copy, modify, and distribute this software for any
  14 15902770 2021-01-15 op  * purpose with or without fee is hereby granted, provided that the above
  15 15902770 2021-01-15 op  * copyright notice and this permission notice appear in all copies.
  16 15902770 2021-01-15 op  *
  17 15902770 2021-01-15 op  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  18 15902770 2021-01-15 op  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  19 15902770 2021-01-15 op  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  20 15902770 2021-01-15 op  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  21 15902770 2021-01-15 op  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  22 15902770 2021-01-15 op  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  23 15902770 2021-01-15 op  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  24 15902770 2021-01-15 op  */
  25 1f1f3810 2022-02-03 op 
  26 1f1f3810 2022-02-03 op #include "gmid.h"
  27 15902770 2021-01-15 op 
  28 74f0778b 2021-06-16 op #include <ctype.h>
  29 002a84a1 2021-02-10 op #include <errno.h>
  30 534afd0d 2022-10-05 op #include <netdb.h>
  31 6abda252 2021-02-06 op #include <stdarg.h>
  32 15902770 2021-01-15 op #include <stdio.h>
  33 74f0778b 2021-06-16 op #include <stdlib.h>
  34 32693ee6 2021-01-28 op #include <string.h>
  35 df5058c9 2023-06-05 op 
  36 df5058c9 2023-06-05 op #include "log.h"
  37 15902770 2021-01-15 op 
  38 c39be742 2021-07-09 op TAILQ_HEAD(files, file)		 files = TAILQ_HEAD_INITIALIZER(files);
  39 c39be742 2021-07-09 op static struct file {
  40 c39be742 2021-07-09 op 	TAILQ_ENTRY(file)	 entry;
  41 c39be742 2021-07-09 op 	FILE			*stream;
  42 c39be742 2021-07-09 op 	char			*name;
  43 c39be742 2021-07-09 op 	size_t	 		 ungetpos;
  44 c39be742 2021-07-09 op 	size_t			 ungetsize;
  45 c39be742 2021-07-09 op 	u_char			*ungetbuf;
  46 c39be742 2021-07-09 op 	int			 eof_reached;
  47 c39be742 2021-07-09 op 	int			 lineno;
  48 c39be742 2021-07-09 op 	int			 errors;
  49 c39be742 2021-07-09 op } *file, *topfile;
  50 74f0778b 2021-06-16 op 
  51 c39be742 2021-07-09 op struct file	*pushfile(const char *, int);
  52 c39be742 2021-07-09 op int		 popfile(void);
  53 c39be742 2021-07-09 op int		 yyparse(void);
  54 c39be742 2021-07-09 op int		 yylex(void);
  55 c39be742 2021-07-09 op void		 yyerror(const char *, ...)
  56 c39be742 2021-07-09 op     __attribute__((__format__ (printf, 1, 2)))
  57 c39be742 2021-07-09 op     __attribute__((__nonnull__ (1)));
  58 f3966209 2021-07-13 op void		 yywarn(const char *, ...)
  59 f3966209 2021-07-13 op     __attribute__((__format__ (printf, 1, 2)))
  60 f3966209 2021-07-13 op     __attribute__((__nonnull__ (1)));
  61 c39be742 2021-07-09 op int		 kw_cmp(const void *, const void *);
  62 c39be742 2021-07-09 op int		 lookup(char *);
  63 c39be742 2021-07-09 op int		 igetc(void);
  64 c39be742 2021-07-09 op int		 lgetc(int);
  65 c39be742 2021-07-09 op void		 lungetc(int);
  66 c39be742 2021-07-09 op int		 findeol(void);
  67 ef129b08 2021-06-16 op 
  68 15902770 2021-01-15 op /*
  69 15902770 2021-01-15 op  * #define YYDEBUG 1
  70 15902770 2021-01-15 op  * int yydebug = 1;
  71 15902770 2021-01-15 op  */
  72 15902770 2021-01-15 op 
  73 3b21cca3 2021-06-29 op TAILQ_HEAD(symhead, sym) symhead = TAILQ_HEAD_INITIALIZER(symhead);
  74 3b21cca3 2021-06-29 op struct sym {
  75 3b21cca3 2021-06-29 op 	TAILQ_ENTRY(sym)	 entry;
  76 3b21cca3 2021-06-29 op 	int			 used;
  77 3b21cca3 2021-06-29 op 	int			 persist;
  78 3b21cca3 2021-06-29 op 	char			*name;
  79 3b21cca3 2021-06-29 op 	char			*val;
  80 3b21cca3 2021-06-29 op };
  81 3b21cca3 2021-06-29 op 
  82 c39be742 2021-07-09 op int	 symset(const char *, const char *, int);
  83 c39be742 2021-07-09 op char	*symget(const char *);
  84 15902770 2021-01-15 op 
  85 c39be742 2021-07-09 op struct vhost	*new_vhost(void);
  86 c39be742 2021-07-09 op struct location	*new_location(void);
  87 b7967bc1 2021-01-02 op struct proxy	*new_proxy(void);
  88 e17642a7 2021-02-01 op char		*ensure_absolute_path(char*);
  89 6abda252 2021-02-06 op int		 check_block_code(int);
  90 6abda252 2021-02-06 op char		*check_block_fmt(char*);
  91 6abda252 2021-02-06 op int		 check_strip_no(int);
  92 391825e3 2021-07-09 op int		 check_port_num(int);
  93 a709ddf5 2021-02-07 op int		 check_prefork_num(int);
  94 49b73ba1 2021-02-10 op void		 advance_loc(void);
  95 b7967bc1 2021-01-02 op void		 advance_proxy(void);
  96 b7967bc1 2021-01-02 op void		 parsehp(char *, char **, const char **, const char *);
  97 7b00c890 2022-10-05 op int		 fastcgi_conf(const char *, const char *);
  98 2025e96d 2022-09-10 op void		 add_param(char *, char *);
  99 534afd0d 2022-10-05 op int		 getservice(const char *);
 100 13ed2fb6 2021-01-27 op 
 101 c39be742 2021-07-09 op static struct vhost		*host;
 102 c39be742 2021-07-09 op static struct location		*loc;
 103 b7967bc1 2021-01-02 op static struct proxy		*proxy;
 104 ee219d70 2022-02-26 op static char			*current_media;
 105 c39be742 2021-07-09 op static int			 errors;
 106 c39be742 2021-07-09 op 
 107 c39be742 2021-07-09 op typedef struct {
 108 c39be742 2021-07-09 op 	union {
 109 c39be742 2021-07-09 op 		char	*string;
 110 c39be742 2021-07-09 op 		int	 number;
 111 c39be742 2021-07-09 op 	} v;
 112 c39be742 2021-07-09 op 	int lineno;
 113 c39be742 2021-07-09 op } YYSTYPE;
 114 c39be742 2021-07-09 op 
 115 15902770 2021-01-15 op %}
 116 15902770 2021-01-15 op 
 117 15902770 2021-01-15 op /* for bison: */
 118 15902770 2021-01-15 op /* %define parse.error verbose */
 119 15902770 2021-01-15 op 
 120 c74c7030 2021-07-19 op %token	ALIAS AUTO
 121 c74c7030 2021-07-19 op %token	BLOCK
 122 d29a2ee2 2022-09-06 op %token	CA CERT CHROOT CLIENT
 123 c74c7030 2021-07-19 op %token	DEFAULT
 124 b7967bc1 2021-01-02 op %token	FASTCGI FOR_HOST
 125 c74c7030 2021-07-19 op %token	INCLUDE INDEX IPV6
 126 c74c7030 2021-07-19 op %token	KEY
 127 c74c7030 2021-07-19 op %token	LANG LOCATION LOG
 128 ff05125e 2021-10-15 op %token	OCSP OFF ON
 129 b7967bc1 2021-01-02 op %token	PARAM PORT PREFORK PROTO PROTOCOLS PROXY
 130 72b033ef 2021-12-29 op %token	RELAY_TO REQUIRE RETURN ROOT
 131 7b00c890 2022-10-05 op %token	SERVER SNI STRIP
 132 ee219d70 2022-02-26 op %token	TCP TOEXT TYPE TYPES
 133 593e412b 2021-01-01 op %token	USE_TLS USER
 134 5128c0b0 2021-01-01 op %token	VERIFYNAME
 135 d06d6f4b 2021-04-29 op 
 136 c39be742 2021-07-09 op %token	ERROR
 137 7252049d 2021-06-29 op 
 138 c39be742 2021-07-09 op %token	<v.string>	STRING
 139 c39be742 2021-07-09 op %token	<v.number>	NUM
 140 15902770 2021-01-15 op 
 141 534afd0d 2022-10-05 op %type	<v.number>	bool proxy_port
 142 ee219d70 2022-02-26 op %type	<v.string>	string numberstring
 143 98f52178 2021-06-29 op 
 144 15902770 2021-01-15 op %%
 145 15902770 2021-01-15 op 
 146 6b86655a 2021-06-29 op conf		: /* empty */
 147 c39be742 2021-07-09 op 		| conf include '\n'
 148 c39be742 2021-07-09 op 		| conf '\n'
 149 c39be742 2021-07-09 op 		| conf varset '\n'
 150 c39be742 2021-07-09 op 		| conf option '\n'
 151 c39be742 2021-07-09 op 		| conf vhost '\n'
 152 ee219d70 2022-02-26 op 		| conf types '\n'
 153 c39be742 2021-07-09 op 		| conf error '\n'		{ file->errors++; }
 154 3b21cca3 2021-06-29 op 		;
 155 3b21cca3 2021-06-29 op 
 156 c39be742 2021-07-09 op include		: INCLUDE STRING		{
 157 c39be742 2021-07-09 op 			struct file	*nfile;
 158 c39be742 2021-07-09 op 
 159 c39be742 2021-07-09 op 			if ((nfile = pushfile($2, 0)) == NULL) {
 160 c39be742 2021-07-09 op 				yyerror("failed to include file %s", $2);
 161 c39be742 2021-07-09 op 				free($2);
 162 c39be742 2021-07-09 op 				YYERROR;
 163 c39be742 2021-07-09 op 			}
 164 c39be742 2021-07-09 op 			free($2);
 165 c39be742 2021-07-09 op 
 166 c39be742 2021-07-09 op 			file = nfile;
 167 c39be742 2021-07-09 op 			lungetc('\n');
 168 c39be742 2021-07-09 op 		}
 169 c39be742 2021-07-09 op 		;
 170 c39be742 2021-07-09 op 
 171 c74c7030 2021-07-19 op bool		: ON	{ $$ = 1; }
 172 c74c7030 2021-07-19 op 		| OFF	{ $$ = 0; }
 173 c39be742 2021-07-09 op 		;
 174 c39be742 2021-07-09 op 
 175 c39be742 2021-07-09 op string		: string STRING	{
 176 98f52178 2021-06-29 op 			if (asprintf(&$$, "%s%s", $1, $2) == -1) {
 177 98f52178 2021-06-29 op 				free($1);
 178 98f52178 2021-06-29 op 				free($2);
 179 98f52178 2021-06-29 op 				yyerror("string: asprintf: %s", strerror(errno));
 180 98f52178 2021-06-29 op 				YYERROR;
 181 98f52178 2021-06-29 op 			}
 182 98f52178 2021-06-29 op 			free($1);
 183 98f52178 2021-06-29 op 			free($2);
 184 98f52178 2021-06-29 op 		}
 185 c39be742 2021-07-09 op 		| STRING
 186 98f52178 2021-06-29 op 		;
 187 98f52178 2021-06-29 op 
 188 ee219d70 2022-02-26 op numberstring	: NUM {
 189 ee219d70 2022-02-26 op 			char *s;
 190 ee219d70 2022-02-26 op 			if (asprintf(&s, "%d", $1) == -1) {
 191 ee219d70 2022-02-26 op 				yyerror("asprintf: number");
 192 ee219d70 2022-02-26 op 				YYERROR;
 193 ee219d70 2022-02-26 op 			}
 194 ee219d70 2022-02-26 op 			$$ = s;
 195 ee219d70 2022-02-26 op 		}
 196 ee219d70 2022-02-26 op 		| STRING
 197 ee219d70 2022-02-26 op 		;
 198 ee219d70 2022-02-26 op 
 199 c39be742 2021-07-09 op varset		: STRING '=' string		{
 200 3b21cca3 2021-06-29 op 			char *s = $1;
 201 3b21cca3 2021-06-29 op 			while (*s++) {
 202 c39be742 2021-07-09 op 				if (isspace((unsigned char)*s)) {
 203 3b21cca3 2021-06-29 op 					yyerror("macro name cannot contain "
 204 3b21cca3 2021-06-29 op 					    "whitespaces");
 205 3b21cca3 2021-06-29 op 					free($1);
 206 3b21cca3 2021-06-29 op 					free($3);
 207 3b21cca3 2021-06-29 op 					YYERROR;
 208 3b21cca3 2021-06-29 op 				}
 209 3b21cca3 2021-06-29 op 			}
 210 3b21cca3 2021-06-29 op 			symset($1, $3, 0);
 211 3b21cca3 2021-06-29 op 			free($1);
 212 3b21cca3 2021-06-29 op 			free($3);
 213 3b21cca3 2021-06-29 op 		}
 214 15902770 2021-01-15 op 		;
 215 15902770 2021-01-15 op 
 216 7277bb7d 2022-09-10 op option		: CHROOT string	{
 217 7277bb7d 2022-09-10 op 			if (strlcpy(conf.chroot, $2, sizeof(conf.chroot)) >=
 218 7277bb7d 2022-09-10 op 			    sizeof(conf.chroot))
 219 7277bb7d 2022-09-10 op 				yyerror("chroot path too long");
 220 7277bb7d 2022-09-10 op 			free($2);
 221 7277bb7d 2022-09-10 op 		}
 222 c74c7030 2021-07-19 op 		| IPV6 bool		{ conf.ipv6 = $2; }
 223 c74c7030 2021-07-19 op 		| PORT NUM		{ conf.port = check_port_num($2); }
 224 c74c7030 2021-07-19 op 		| PREFORK NUM		{ conf.prefork = check_prefork_num($2); }
 225 c74c7030 2021-07-19 op 		| PROTOCOLS string {
 226 5bc3c98e 2021-01-15 op 			if (tls_config_parse_protocols(&conf.protos, $2) == -1)
 227 002a84a1 2021-02-10 op 				yyerror("invalid protocols string \"%s\"", $2);
 228 3c4b712b 2021-01-01 op 			free($2);
 229 5bc3c98e 2021-01-15 op 		}
 230 7277bb7d 2022-09-10 op 		| USER string {
 231 7277bb7d 2022-09-10 op 			if (strlcpy(conf.user, $2, sizeof(conf.user)) >=
 232 7277bb7d 2022-09-10 op 			    sizeof(conf.user))
 233 7277bb7d 2022-09-10 op 				yyerror("user name too long");
 234 7277bb7d 2022-09-10 op 			free($2);
 235 7277bb7d 2022-09-10 op 		}
 236 15902770 2021-01-15 op 		;
 237 15902770 2021-01-15 op 
 238 c74c7030 2021-07-19 op vhost		: SERVER string {
 239 b8e64ccd 2021-03-31 op 			host = new_vhost();
 240 b8e64ccd 2021-03-31 op 			TAILQ_INSERT_HEAD(&hosts, host, vhosts);
 241 b8e64ccd 2021-03-31 op 
 242 b8e64ccd 2021-03-31 op 			loc = new_location();
 243 b8e64ccd 2021-03-31 op 			TAILQ_INSERT_HEAD(&host->locations, loc, locations);
 244 b8e64ccd 2021-03-31 op 
 245 b7967bc1 2021-01-02 op 			TAILQ_INIT(&host->proxies);
 246 b7967bc1 2021-01-02 op 
 247 534afd0d 2022-10-05 op 			(void) strlcpy(loc->match, "*", sizeof(loc->match));
 248 534afd0d 2022-10-05 op 			(void) strlcpy(host->domain, $2, sizeof(host->domain));
 249 15902770 2021-01-15 op 
 250 cbeee4ca 2021-01-28 op 			if (strstr($2, "xn--") != NULL) {
 251 f3966209 2021-07-13 op 				yywarn("\"%s\" looks like punycode: you "
 252 f3966209 2021-07-13 op 				    "should use the decoded hostname", $2);
 253 cbeee4ca 2021-01-28 op 			}
 254 534afd0d 2022-10-05 op 
 255 534afd0d 2022-10-05 op 			free($2);
 256 b7967bc1 2021-01-02 op 		} '{' optnl servbody '}' {
 257 c26f2460 2023-06-08 op 			if (*host->cert_path == '\0' ||
 258 c26f2460 2023-06-08 op 			    *host->key_path == '\0')
 259 002a84a1 2021-02-10 op 				yyerror("invalid vhost definition: %s", $2);
 260 15902770 2021-01-15 op 		}
 261 f3966209 2021-07-13 op 		| error '}'		{ yyerror("bad server directive"); }
 262 15902770 2021-01-15 op 		;
 263 15902770 2021-01-15 op 
 264 b7967bc1 2021-01-02 op servbody	: /* empty */
 265 b7967bc1 2021-01-02 op 		| servbody servopt optnl
 266 b7967bc1 2021-01-02 op 		| servbody location optnl
 267 b7967bc1 2021-01-02 op 		| servbody proxy optnl
 268 15902770 2021-01-15 op 		;
 269 15902770 2021-01-15 op 
 270 c74c7030 2021-07-19 op servopt		: ALIAS string {
 271 cc8c2901 2021-04-29 op 			struct alist *a;
 272 cc8c2901 2021-04-29 op 
 273 cc8c2901 2021-04-29 op 			a = xcalloc(1, sizeof(*a));
 274 534afd0d 2022-10-05 op 			(void) strlcpy(a->alias, $2, sizeof(a->alias));
 275 534afd0d 2022-10-05 op 			free($2);
 276 edc5ca66 2022-09-10 op 			TAILQ_INSERT_TAIL(&host->aliases, a, aliases);
 277 cc8c2901 2021-04-29 op 		}
 278 c74c7030 2021-07-19 op 		| CERT string		{
 279 534afd0d 2022-10-05 op 			ensure_absolute_path($2);
 280 c26f2460 2023-06-08 op 			(void) strlcpy(host->cert_path, $2,
 281 c26f2460 2023-06-08 op 			    sizeof(host->cert_path));
 282 534afd0d 2022-10-05 op 			free($2);
 283 9cc630aa 2021-04-28 op 		}
 284 c74c7030 2021-07-19 op 		| KEY string		{
 285 534afd0d 2022-10-05 op 			ensure_absolute_path($2);
 286 c26f2460 2023-06-08 op 			(void) strlcpy(host->key_path, $2,
 287 c26f2460 2023-06-08 op 			    sizeof(host->key_path));
 288 534afd0d 2022-10-05 op 			free($2);
 289 c92b802b 2021-06-11 op 		}
 290 ff05125e 2021-10-15 op 		| OCSP string		{
 291 534afd0d 2022-10-05 op 			ensure_absolute_path($2);
 292 c26f2460 2023-06-08 op 			(void) strlcpy(host->ocsp_path, $2,
 293 c26f2460 2023-06-08 op 			    sizeof(host->ocsp_path));
 294 534afd0d 2022-10-05 op 			free($2);
 295 ff05125e 2021-10-15 op 		}
 296 c74c7030 2021-07-19 op 		| PARAM string '=' string {
 297 2025e96d 2022-09-10 op 			add_param($2, $4);
 298 c705ecb1 2021-05-03 op 		}
 299 c8b74339 2021-01-24 op 		| locopt
 300 c8b74339 2021-01-24 op 		;
 301 7bdcc91e 2021-01-01 op 
 302 b7967bc1 2021-01-02 op proxy		: PROXY { advance_proxy(); }
 303 b7967bc1 2021-01-02 op 		  proxy_matches '{' optnl proxy_opts '}' {
 304 534afd0d 2022-10-05 op 			if (*proxy->host == '\0')
 305 b7967bc1 2021-01-02 op 				yyerror("invalid proxy block: missing `relay-to' option");
 306 b7967bc1 2021-01-02 op 
 307 b7967bc1 2021-01-02 op 			if ((proxy->cert == NULL && proxy->key != NULL) ||
 308 b7967bc1 2021-01-02 op 			    (proxy->cert != NULL && proxy->key == NULL))
 309 b7967bc1 2021-01-02 op 				yyerror("invalid proxy block: missing cert or key");
 310 b7967bc1 2021-01-02 op 		}
 311 b7967bc1 2021-01-02 op 		;
 312 b7967bc1 2021-01-02 op 
 313 b7967bc1 2021-01-02 op proxy_matches	: /* empty */
 314 b7967bc1 2021-01-02 op 		| proxy_matches proxy_match
 315 b7967bc1 2021-01-02 op 		;
 316 b7967bc1 2021-01-02 op 
 317 534afd0d 2022-10-05 op proxy_port	: /* empty */	{ $$ = 1965; }
 318 534afd0d 2022-10-05 op 		| PORT STRING {
 319 534afd0d 2022-10-05 op 			if (($$ = getservice($2)) == -1)
 320 534afd0d 2022-10-05 op 				yyerror("invalid port number %s", $2);
 321 534afd0d 2022-10-05 op 			free($2);
 322 534afd0d 2022-10-05 op 		}
 323 534afd0d 2022-10-05 op 		| PORT NUM	{ $$ = $2; }
 324 534afd0d 2022-10-05 op 		;
 325 534afd0d 2022-10-05 op 
 326 b7967bc1 2021-01-02 op proxy_match	: PROTO string {
 327 534afd0d 2022-10-05 op 			(void) strlcpy(proxy->match_proto, $2, sizeof(proxy->match_proto));
 328 534afd0d 2022-10-05 op 			free($2);
 329 b7967bc1 2021-01-02 op 		}
 330 534afd0d 2022-10-05 op 		| FOR_HOST string proxy_port {
 331 534afd0d 2022-10-05 op 			(void) strlcpy(proxy->match_host, $2, sizeof(proxy->match_host));
 332 534afd0d 2022-10-05 op 			(void) snprintf(proxy->match_port, sizeof(proxy->match_port),
 333 534afd0d 2022-10-05 op 			    "%d", $3);
 334 534afd0d 2022-10-05 op 			free($2);
 335 b7967bc1 2021-01-02 op 		}
 336 7bdcc91e 2021-01-01 op 		;
 337 7bdcc91e 2021-01-01 op 
 338 7bdcc91e 2021-01-01 op proxy_opts	: /* empty */
 339 7bdcc91e 2021-01-01 op 		| proxy_opts proxy_opt optnl
 340 7bdcc91e 2021-01-01 op 		;
 341 7bdcc91e 2021-01-01 op 
 342 7bdcc91e 2021-01-01 op proxy_opt	: CERT string {
 343 b7967bc1 2021-01-02 op 			tls_unload_file(proxy->cert, proxy->certlen);
 344 7bdcc91e 2021-01-01 op 			ensure_absolute_path($2);
 345 b7967bc1 2021-01-02 op 			proxy->cert = tls_load_file($2, &proxy->certlen, NULL);
 346 b7967bc1 2021-01-02 op 			if (proxy->cert == NULL)
 347 7bdcc91e 2021-01-01 op 				yyerror("can't load cert %s", $2);
 348 3c4b712b 2021-01-01 op 			free($2);
 349 7bdcc91e 2021-01-01 op 		}
 350 7bdcc91e 2021-01-01 op 		| KEY string {
 351 b7967bc1 2021-01-02 op 			tls_unload_file(proxy->key, proxy->keylen);
 352 7bdcc91e 2021-01-01 op 			ensure_absolute_path($2);
 353 b7967bc1 2021-01-02 op 			proxy->key = tls_load_file($2, &proxy->keylen, NULL);
 354 b7967bc1 2021-01-02 op 			if (proxy->key == NULL)
 355 7bdcc91e 2021-01-01 op 				yyerror("can't load key %s", $2);
 356 3c4b712b 2021-01-01 op 			free($2);
 357 c7c8ef44 2021-01-01 op 		}
 358 c7c8ef44 2021-01-01 op 		| PROTOCOLS string {
 359 b7967bc1 2021-01-02 op 			if (tls_config_parse_protocols(&proxy->protocols, $2) == -1)
 360 c7c8ef44 2021-01-01 op 				yyerror("invalid protocols string \"%s\"", $2);
 361 3c4b712b 2021-01-01 op 			free($2);
 362 7bdcc91e 2021-01-01 op 		}
 363 534afd0d 2022-10-05 op 		| RELAY_TO string proxy_port {
 364 534afd0d 2022-10-05 op 			(void) strlcpy(proxy->host, $2, sizeof(proxy->host));
 365 534afd0d 2022-10-05 op 			(void) snprintf(proxy->port, sizeof(proxy->port),
 366 534afd0d 2022-10-05 op 			    "%d", $3);
 367 534afd0d 2022-10-05 op 			free($2);
 368 593e412b 2021-01-01 op 		}
 369 ba94a608 2022-01-04 op 		| REQUIRE CLIENT CA string {
 370 ba94a608 2022-01-04 op 			ensure_absolute_path($4);
 371 ba94a608 2022-01-04 op 			if ((proxy->reqca = load_ca($4)) == NULL)
 372 ba94a608 2022-01-04 op 				yyerror("couldn't load ca cert: %s", $4);
 373 ba94a608 2022-01-04 op 			free($4);
 374 1cdea97b 2022-01-30 op 		}
 375 1cdea97b 2022-01-30 op 		| SNI string {
 376 534afd0d 2022-10-05 op 			(void) strlcpy(proxy->sni, $2, sizeof(proxy->sni));
 377 534afd0d 2022-10-05 op 			free($2);
 378 ba94a608 2022-01-04 op 		}
 379 593e412b 2021-01-01 op 		| USE_TLS bool {
 380 b7967bc1 2021-01-02 op 			proxy->notls = !$2;
 381 7bdcc91e 2021-01-01 op 		}
 382 5128c0b0 2021-01-01 op 		| VERIFYNAME bool {
 383 b7967bc1 2021-01-02 op 			proxy->noverifyname = !$2;
 384 5128c0b0 2021-01-01 op 		}
 385 7bdcc91e 2021-01-01 op 		;
 386 7bdcc91e 2021-01-01 op 
 387 c74c7030 2021-07-19 op location	: LOCATION { advance_loc(); } string '{' optnl locopts '}' {
 388 49b73ba1 2021-02-10 op 			/* drop the starting '/' if any */
 389 49b73ba1 2021-02-10 op 			if (*$3 == '/')
 390 49b73ba1 2021-02-10 op 				memmove($3, $3+1, strlen($3));
 391 534afd0d 2022-10-05 op 			(void) strlcpy(loc->match, $3, sizeof(loc->match));
 392 534afd0d 2022-10-05 op 			free($3);
 393 6119e13e 2021-01-19 op 		}
 394 c8b74339 2021-01-24 op 		| error '}'
 395 c8b74339 2021-01-24 op 		;
 396 c8b74339 2021-01-24 op 
 397 c8b74339 2021-01-24 op locopts		: /* empty */
 398 c39be742 2021-07-09 op 		| locopts locopt optnl
 399 c8b74339 2021-01-24 op 		;
 400 c8b74339 2021-01-24 op 
 401 c74c7030 2021-07-19 op locopt		: AUTO INDEX bool	{ loc->auto_index = $3 ? 1 : -1; }
 402 c74c7030 2021-07-19 op 		| BLOCK RETURN NUM string {
 403 534afd0d 2022-10-05 op 			check_block_fmt($4);
 404 534afd0d 2022-10-05 op 			(void) strlcpy(loc->block_fmt, $4, sizeof(loc->block_fmt));
 405 6abda252 2021-02-06 op 			loc->block_code = check_block_code($3);
 406 534afd0d 2022-10-05 op 			free($4);
 407 6abda252 2021-02-06 op 		}
 408 c74c7030 2021-07-19 op 		| BLOCK RETURN NUM {
 409 534afd0d 2022-10-05 op 			(void) strlcpy(loc->block_fmt, "temporary failure",
 410 534afd0d 2022-10-05 op 			    sizeof(loc->block_fmt));
 411 6abda252 2021-02-06 op 			loc->block_code = check_block_code($3);
 412 6abda252 2021-02-06 op 			if ($3 >= 30 && $3 < 40)
 413 6abda252 2021-02-06 op 				yyerror("missing `meta' for block return %d", $3);
 414 6abda252 2021-02-06 op 		}
 415 c74c7030 2021-07-19 op 		| BLOCK {
 416 534afd0d 2022-10-05 op 			(void) strlcpy(loc->block_fmt, "temporary failure",
 417 534afd0d 2022-10-05 op 			    sizeof(loc->block_fmt));
 418 6abda252 2021-02-06 op 			loc->block_code = 40;
 419 6abda252 2021-02-06 op 		}
 420 c74c7030 2021-07-19 op 		| DEFAULT TYPE string {
 421 534afd0d 2022-10-05 op 			(void) strlcpy(loc->default_mime, $3,
 422 534afd0d 2022-10-05 op 			    sizeof(loc->default_mime));
 423 534afd0d 2022-10-05 op 			free($3);
 424 eb59f87e 2021-02-09 op 		}
 425 abc8801d 2021-07-19 op 		| FASTCGI fastcgi
 426 c74c7030 2021-07-19 op 		| INDEX string {
 427 534afd0d 2022-10-05 op 			(void) strlcpy(loc->index, $2, sizeof(loc->index));
 428 534afd0d 2022-10-05 op 			free($2);
 429 eb59f87e 2021-02-09 op 		}
 430 c74c7030 2021-07-19 op 		| LANG string {
 431 534afd0d 2022-10-05 op 			(void) strlcpy(loc->lang, $2,
 432 534afd0d 2022-10-05 op 			    sizeof(loc->lang));
 433 534afd0d 2022-10-05 op 			free($2);
 434 eb59f87e 2021-02-09 op 		}
 435 c74c7030 2021-07-19 op 		| LOG bool	{ loc->disable_log = !$2; }
 436 da2185f3 2021-01-01 op 		| REQUIRE CLIENT CA string {
 437 da2185f3 2021-01-01 op 			ensure_absolute_path($4);
 438 da2185f3 2021-01-01 op 			if ((loc->reqca = load_ca($4)) == NULL)
 439 da2185f3 2021-01-01 op 				yyerror("couldn't load ca cert: %s", $4);
 440 da2185f3 2021-01-01 op 			free($4);
 441 da2185f3 2021-01-01 op 		}
 442 da2185f3 2021-01-01 op 		| ROOT string		{
 443 534afd0d 2022-10-05 op 			(void) strlcpy(loc->dir, $2, sizeof(loc->dir));
 444 534afd0d 2022-10-05 op 			free($2);
 445 da2185f3 2021-01-01 op 		}
 446 da2185f3 2021-01-01 op 		| STRIP NUM		{ loc->strip = check_strip_no($2); }
 447 da2185f3 2021-01-01 op 		;
 448 da2185f3 2021-01-01 op 
 449 7b00c890 2022-10-05 op fastcgi		: string {
 450 7b00c890 2022-10-05 op 			loc->fcgi = fastcgi_conf($1, NULL);
 451 534afd0d 2022-10-05 op 			free($1);
 452 0d047efc 2021-05-24 op 		}
 453 c74c7030 2021-07-19 op 		| TCP string PORT NUM {
 454 0d047efc 2021-05-24 op 			char *c;
 455 762b9b99 2021-07-09 op 			if (asprintf(&c, "%d", $4) == -1)
 456 0d047efc 2021-05-24 op 				err(1, "asprintf");
 457 7b00c890 2022-10-05 op 			loc->fcgi = fastcgi_conf($2, c);
 458 534afd0d 2022-10-05 op 			free($2);
 459 0d047efc 2021-05-24 op 		}
 460 c74c7030 2021-07-19 op 		| TCP string {
 461 7b00c890 2022-10-05 op 			loc->fcgi = fastcgi_conf($2, "9000");
 462 534afd0d 2022-10-05 op 			free($2);
 463 0d047efc 2021-05-24 op 		}
 464 c74c7030 2021-07-19 op 		| TCP string PORT string {
 465 7b00c890 2022-10-05 op 			loc->fcgi = fastcgi_conf($2, $4);
 466 534afd0d 2022-10-05 op 			free($2);
 467 534afd0d 2022-10-05 op 			free($4);
 468 0d047efc 2021-05-24 op 		}
 469 ee219d70 2022-02-26 op 		;
 470 ee219d70 2022-02-26 op 
 471 cd5826b8 2022-09-10 op types		: TYPES '{' optnl mediaopts_l '}' ;
 472 0d047efc 2021-05-24 op 
 473 ee219d70 2022-02-26 op mediaopts_l	: mediaopts_l mediaoptsl nl
 474 ee219d70 2022-02-26 op 		| mediaoptsl nl
 475 ee219d70 2022-02-26 op 		;
 476 ee219d70 2022-02-26 op 
 477 aa9543b9 2022-09-10 op mediaoptsl	: STRING {
 478 aa9543b9 2022-09-10 op 			free(current_media);
 479 aa9543b9 2022-09-10 op 			current_media = $1;
 480 aa9543b9 2022-09-10 op 		} medianames_l optsemicolon
 481 ee219d70 2022-02-26 op 		| include
 482 ee219d70 2022-02-26 op 		;
 483 ee219d70 2022-02-26 op 
 484 ee219d70 2022-02-26 op medianames_l	: medianames_l medianamesl
 485 ee219d70 2022-02-26 op 		| medianamesl
 486 ee219d70 2022-02-26 op 		;
 487 ee219d70 2022-02-26 op 
 488 d8d170aa 2022-04-08 op medianamesl	: numberstring {
 489 d8d170aa 2022-04-08 op 			if (add_mime(&conf.mime, current_media, $1) == -1)
 490 d8d170aa 2022-04-08 op 				err(1, "add_mime");
 491 aa9543b9 2022-09-10 op 			free($1);
 492 d8d170aa 2022-04-08 op 		}
 493 ee219d70 2022-02-26 op 		;
 494 ee219d70 2022-02-26 op 
 495 ee219d70 2022-02-26 op nl		: '\n' optnl
 496 ee219d70 2022-02-26 op 		;
 497 ee219d70 2022-02-26 op 
 498 c39be742 2021-07-09 op optnl		: '\n' optnl		/* zero or more newlines */
 499 67f49405 2021-07-09 op 		| ';' optnl		/* semicolons too */
 500 c39be742 2021-07-09 op 		| /*empty*/
 501 c39be742 2021-07-09 op 		;
 502 fdea6aa0 2021-04-30 op 
 503 ee219d70 2022-02-26 op optsemicolon	: ';'
 504 ee219d70 2022-02-26 op 		|
 505 ee219d70 2022-02-26 op 		;
 506 ee219d70 2022-02-26 op 
 507 c39be742 2021-07-09 op %%
 508 b8e64ccd 2021-03-31 op 
 509 e5d82d94 2022-03-19 op static const struct keyword {
 510 74f0778b 2021-06-16 op 	const char *word;
 511 74f0778b 2021-06-16 op 	int token;
 512 74f0778b 2021-06-16 op } keywords[] = {
 513 d93c8191 2021-07-09 op 	/* these MUST be sorted */
 514 c74c7030 2021-07-19 op 	{"alias", ALIAS},
 515 c74c7030 2021-07-19 op 	{"auto", AUTO},
 516 c74c7030 2021-07-19 op 	{"block", BLOCK},
 517 c74c7030 2021-07-19 op 	{"ca", CA},
 518 c74c7030 2021-07-19 op 	{"cert", CERT},
 519 c74c7030 2021-07-19 op 	{"chroot", CHROOT},
 520 c74c7030 2021-07-19 op 	{"client", CLIENT},
 521 c74c7030 2021-07-19 op 	{"default", DEFAULT},
 522 abc8801d 2021-07-19 op 	{"fastcgi", FASTCGI},
 523 b7967bc1 2021-01-02 op 	{"for-host", FOR_HOST},
 524 88971f9a 2022-02-26 op 	{"include", INCLUDE},
 525 c74c7030 2021-07-19 op 	{"index", INDEX},
 526 c74c7030 2021-07-19 op 	{"ipv6", IPV6},
 527 c74c7030 2021-07-19 op 	{"key", KEY},
 528 c74c7030 2021-07-19 op 	{"lang", LANG},
 529 c74c7030 2021-07-19 op 	{"location", LOCATION},
 530 c74c7030 2021-07-19 op 	{"log", LOG},
 531 ff05125e 2021-10-15 op 	{"ocsp", OCSP},
 532 c74c7030 2021-07-19 op 	{"off", OFF},
 533 c74c7030 2021-07-19 op 	{"on", ON},
 534 c74c7030 2021-07-19 op 	{"param", PARAM},
 535 c74c7030 2021-07-19 op 	{"port", PORT},
 536 c74c7030 2021-07-19 op 	{"prefork", PREFORK},
 537 b7967bc1 2021-01-02 op 	{"proto", PROTO},
 538 c74c7030 2021-07-19 op 	{"protocols", PROTOCOLS},
 539 72b033ef 2021-12-29 op 	{"proxy", PROXY},
 540 72b033ef 2021-12-29 op 	{"relay-to", RELAY_TO},
 541 c74c7030 2021-07-19 op 	{"require", REQUIRE},
 542 c74c7030 2021-07-19 op 	{"return", RETURN},
 543 c74c7030 2021-07-19 op 	{"root", ROOT},
 544 c74c7030 2021-07-19 op 	{"server", SERVER},
 545 1cdea97b 2022-01-30 op 	{"sni", SNI},
 546 c74c7030 2021-07-19 op 	{"strip", STRIP},
 547 c74c7030 2021-07-19 op 	{"tcp", TCP},
 548 c74c7030 2021-07-19 op 	{"to-ext", TOEXT},
 549 c74c7030 2021-07-19 op 	{"type", TYPE},
 550 ee219d70 2022-02-26 op 	{"types", TYPES},
 551 593e412b 2021-01-01 op 	{"use-tls", USE_TLS},
 552 c74c7030 2021-07-19 op 	{"user", USER},
 553 5128c0b0 2021-01-01 op 	{"verifyname", VERIFYNAME},
 554 74f0778b 2021-06-16 op };
 555 74f0778b 2021-06-16 op 
 556 c39be742 2021-07-09 op void
 557 c39be742 2021-07-09 op yyerror(const char *msg, ...)
 558 c39be742 2021-07-09 op {
 559 c39be742 2021-07-09 op 	va_list ap;
 560 c39be742 2021-07-09 op 
 561 c39be742 2021-07-09 op 	file->errors++;
 562 c39be742 2021-07-09 op 
 563 c39be742 2021-07-09 op 	va_start(ap, msg);
 564 f3966209 2021-07-13 op 	fprintf(stderr, "%s:%d error: ", config_path, yylval.lineno);
 565 f3966209 2021-07-13 op 	vfprintf(stderr, msg, ap);
 566 f3966209 2021-07-13 op 	fprintf(stderr, "\n");
 567 f3966209 2021-07-13 op 	va_end(ap);
 568 f3966209 2021-07-13 op }
 569 f3966209 2021-07-13 op 
 570 f3966209 2021-07-13 op void
 571 f3966209 2021-07-13 op yywarn(const char *msg, ...)
 572 f3966209 2021-07-13 op {
 573 f3966209 2021-07-13 op 	va_list ap;
 574 f3966209 2021-07-13 op 
 575 f3966209 2021-07-13 op 	va_start(ap, msg);
 576 f3966209 2021-07-13 op 	fprintf(stderr, "%s:%d warning: ", config_path, yylval.lineno);
 577 c39be742 2021-07-09 op 	vfprintf(stderr, msg, ap);
 578 c39be742 2021-07-09 op 	fprintf(stderr, "\n");
 579 c39be742 2021-07-09 op 	va_end(ap);
 580 c39be742 2021-07-09 op }
 581 c39be742 2021-07-09 op 
 582 d93c8191 2021-07-09 op int
 583 d93c8191 2021-07-09 op kw_cmp(const void *k, const void *e)
 584 d93c8191 2021-07-09 op {
 585 d93c8191 2021-07-09 op 	return strcmp(k, ((struct keyword *)e)->word);
 586 d93c8191 2021-07-09 op }
 587 d93c8191 2021-07-09 op 
 588 c39be742 2021-07-09 op int
 589 c39be742 2021-07-09 op lookup(char *s)
 590 74f0778b 2021-06-16 op {
 591 c39be742 2021-07-09 op 	const struct keyword	*p;
 592 74f0778b 2021-06-16 op 
 593 c39be742 2021-07-09 op 	p = bsearch(s, keywords, sizeof(keywords)/sizeof(keywords[0]),
 594 c39be742 2021-07-09 op 	    sizeof(keywords[0]), kw_cmp);
 595 74f0778b 2021-06-16 op 
 596 c39be742 2021-07-09 op 	if (p)
 597 c39be742 2021-07-09 op 		return p->token;
 598 c39be742 2021-07-09 op 	else
 599 c39be742 2021-07-09 op 		return STRING;
 600 c39be742 2021-07-09 op }
 601 c39be742 2021-07-09 op 
 602 c39be742 2021-07-09 op #define START_EXPAND	1
 603 c39be742 2021-07-09 op #define DONE_EXPAND	2
 604 c39be742 2021-07-09 op 
 605 c39be742 2021-07-09 op static int	expanding;
 606 c39be742 2021-07-09 op 
 607 c39be742 2021-07-09 op int
 608 c39be742 2021-07-09 op igetc(void)
 609 c39be742 2021-07-09 op {
 610 c39be742 2021-07-09 op 	int	c;
 611 c39be742 2021-07-09 op 
 612 c39be742 2021-07-09 op 	while (1) {
 613 c39be742 2021-07-09 op 		if (file->ungetpos > 0)
 614 c39be742 2021-07-09 op 			c = file->ungetbuf[--file->ungetpos];
 615 c39be742 2021-07-09 op 		else
 616 c39be742 2021-07-09 op 			c = getc(file->stream);
 617 c39be742 2021-07-09 op 
 618 c39be742 2021-07-09 op 		if (c == START_EXPAND)
 619 c39be742 2021-07-09 op 			expanding = 1;
 620 c39be742 2021-07-09 op 		else if (c == DONE_EXPAND)
 621 c39be742 2021-07-09 op 			expanding = 0;
 622 c39be742 2021-07-09 op 		else
 623 c39be742 2021-07-09 op 			break;
 624 74f0778b 2021-06-16 op 	}
 625 c39be742 2021-07-09 op 	return c;
 626 c39be742 2021-07-09 op }
 627 74f0778b 2021-06-16 op 
 628 c39be742 2021-07-09 op int
 629 c39be742 2021-07-09 op lgetc(int quotec)
 630 c39be742 2021-07-09 op {
 631 c39be742 2021-07-09 op 	int		c, next;
 632 c39be742 2021-07-09 op 
 633 c39be742 2021-07-09 op 	if (quotec) {
 634 c39be742 2021-07-09 op 		if ((c = igetc()) == EOF) {
 635 c39be742 2021-07-09 op 			yyerror("reached end of file while parsing "
 636 c39be742 2021-07-09 op 			    "quoted string");
 637 c39be742 2021-07-09 op 			if (file == topfile || popfile() == EOF)
 638 c39be742 2021-07-09 op 				return EOF;
 639 c39be742 2021-07-09 op 			return quotec;
 640 c39be742 2021-07-09 op 		}
 641 74f0778b 2021-06-16 op 		return c;
 642 74f0778b 2021-06-16 op 	}
 643 74f0778b 2021-06-16 op 
 644 c39be742 2021-07-09 op 	while ((c = igetc()) == '\\') {
 645 c39be742 2021-07-09 op 		next = igetc();
 646 c39be742 2021-07-09 op 		if (next != '\n') {
 647 c39be742 2021-07-09 op 			c = next;
 648 74f0778b 2021-06-16 op 			break;
 649 c39be742 2021-07-09 op 		}
 650 c39be742 2021-07-09 op 		yylval.lineno = file->lineno;
 651 c39be742 2021-07-09 op 		file->lineno++;
 652 c39be742 2021-07-09 op 	}
 653 3b21cca3 2021-06-29 op 
 654 c39be742 2021-07-09 op 	if (c == EOF) {
 655 c39be742 2021-07-09 op 		/*
 656 c39be742 2021-07-09 op 		 * Fake EOL when hit EOF for the first time. This gets line
 657 c39be742 2021-07-09 op 		 * count right if last line in included file is syntactically
 658 c39be742 2021-07-09 op 		 * invalid and has no newline.
 659 c39be742 2021-07-09 op 		 */
 660 c39be742 2021-07-09 op 		if (file->eof_reached == 0) {
 661 c39be742 2021-07-09 op 			file->eof_reached = 1;
 662 c39be742 2021-07-09 op 			return '\n';
 663 c39be742 2021-07-09 op 		}
 664 c39be742 2021-07-09 op 		while (c == EOF) {
 665 c39be742 2021-07-09 op 			if (file == topfile || popfile() == EOF)
 666 c39be742 2021-07-09 op 				return EOF;
 667 c39be742 2021-07-09 op 			c = igetc();
 668 c39be742 2021-07-09 op 		}
 669 c39be742 2021-07-09 op 	}
 670 c39be742 2021-07-09 op 	return c;
 671 c39be742 2021-07-09 op }
 672 c39be742 2021-07-09 op 
 673 c39be742 2021-07-09 op void
 674 c39be742 2021-07-09 op lungetc(int c)
 675 c39be742 2021-07-09 op {
 676 c39be742 2021-07-09 op 	if (c == EOF)
 677 c39be742 2021-07-09 op 		return;
 678 c39be742 2021-07-09 op 
 679 c39be742 2021-07-09 op 	if (file->ungetpos >= file->ungetsize) {
 680 c39be742 2021-07-09 op 		void *p = reallocarray(file->ungetbuf, file->ungetsize, 2);
 681 c39be742 2021-07-09 op 		if (p == NULL)
 682 2dd5994a 2023-06-06 op 			fatal("lungetc");
 683 c39be742 2021-07-09 op 		file->ungetbuf = p;
 684 c39be742 2021-07-09 op 		file->ungetsize *= 2;
 685 c39be742 2021-07-09 op 	}
 686 c39be742 2021-07-09 op 	file->ungetbuf[file->ungetpos++] = c;
 687 c39be742 2021-07-09 op }
 688 c39be742 2021-07-09 op 
 689 c39be742 2021-07-09 op int
 690 c39be742 2021-07-09 op findeol(void)
 691 c39be742 2021-07-09 op {
 692 c39be742 2021-07-09 op 	int	c;
 693 c39be742 2021-07-09 op 
 694 c39be742 2021-07-09 op 	/* Skip to either EOF or the first real EOL. */
 695 c39be742 2021-07-09 op 	while (1) {
 696 c39be742 2021-07-09 op 		c = lgetc(0);
 697 c39be742 2021-07-09 op 		if (c == '\n') {
 698 c39be742 2021-07-09 op 			file->lineno++;
 699 3b21cca3 2021-06-29 op 			break;
 700 c39be742 2021-07-09 op 		}
 701 c39be742 2021-07-09 op 		if (c == EOF)
 702 74f0778b 2021-06-16 op 			break;
 703 c39be742 2021-07-09 op 	}
 704 c39be742 2021-07-09 op 	return ERROR;
 705 c39be742 2021-07-09 op }
 706 c39be742 2021-07-09 op 
 707 c39be742 2021-07-09 op int
 708 c39be742 2021-07-09 op yylex(void)
 709 c39be742 2021-07-09 op {
 710 1bd706dc 2021-07-09 op 	char	 buf[8096];
 711 1bd706dc 2021-07-09 op 	char	*p, *val;
 712 1bd706dc 2021-07-09 op 	int	 quotec, next, c;
 713 1bd706dc 2021-07-09 op 	int	 token;
 714 c39be742 2021-07-09 op 
 715 c39be742 2021-07-09 op top:
 716 c39be742 2021-07-09 op 	p = buf;
 717 c39be742 2021-07-09 op 	while ((c = lgetc(0)) == ' ' || c == '\t')
 718 c39be742 2021-07-09 op 		; /* nothing */
 719 c39be742 2021-07-09 op 
 720 c39be742 2021-07-09 op 	yylval.lineno = file->lineno;
 721 c39be742 2021-07-09 op 	if (c == '#')
 722 c39be742 2021-07-09 op 		while ((c = lgetc(0)) != '\n' && c != EOF)
 723 c39be742 2021-07-09 op 			; /* nothing */
 724 c39be742 2021-07-09 op 	if (c == '$' && !expanding) {
 725 c39be742 2021-07-09 op 		while (1) {
 726 c39be742 2021-07-09 op 			if ((c = lgetc(0)) == EOF)
 727 c39be742 2021-07-09 op 				return 0;
 728 67f49405 2021-07-09 op 			if (p + 1 >= buf + sizeof(buf) -1) {
 729 67f49405 2021-07-09 op 				yyerror("string too long");
 730 67f49405 2021-07-09 op 				return findeol();
 731 67f49405 2021-07-09 op 			}
 732 67f49405 2021-07-09 op 			if (isalnum(c) || c == '_') {
 733 67f49405 2021-07-09 op 				*p++ = c;
 734 67f49405 2021-07-09 op 				continue;
 735 67f49405 2021-07-09 op 			}
 736 67f49405 2021-07-09 op 			*p = '\0';
 737 67f49405 2021-07-09 op 			lungetc(c);
 738 67f49405 2021-07-09 op 			break;
 739 67f49405 2021-07-09 op 		}
 740 67f49405 2021-07-09 op 		val = symget(buf);
 741 67f49405 2021-07-09 op 		if (val == NULL) {
 742 67f49405 2021-07-09 op 			yyerror("macro `%s' not defined", buf);
 743 67f49405 2021-07-09 op 			return findeol();
 744 67f49405 2021-07-09 op 		}
 745 67f49405 2021-07-09 op 		yylval.v.string = xstrdup(val);
 746 67f49405 2021-07-09 op 		return STRING;
 747 67f49405 2021-07-09 op 	}
 748 67f49405 2021-07-09 op 	if (c == '@' && !expanding) {
 749 67f49405 2021-07-09 op 		while (1) {
 750 67f49405 2021-07-09 op 			if ((c = lgetc(0)) == EOF)
 751 67f49405 2021-07-09 op 				return 0;
 752 c39be742 2021-07-09 op 
 753 c39be742 2021-07-09 op 			if (p + 1 >= buf + sizeof(buf) - 1) {
 754 c39be742 2021-07-09 op 				yyerror("string too long");
 755 c39be742 2021-07-09 op 				return findeol();
 756 c39be742 2021-07-09 op 			}
 757 c39be742 2021-07-09 op 			if (isalnum(c) || c == '_') {
 758 c39be742 2021-07-09 op 				*p++ = c;
 759 74f0778b 2021-06-16 op 				continue;
 760 74f0778b 2021-06-16 op 			}
 761 c39be742 2021-07-09 op 			*p = '\0';
 762 c39be742 2021-07-09 op 			lungetc(c);
 763 c39be742 2021-07-09 op 			break;
 764 74f0778b 2021-06-16 op 		}
 765 c39be742 2021-07-09 op 		val = symget(buf);
 766 c39be742 2021-07-09 op 		if (val == NULL) {
 767 c39be742 2021-07-09 op 			yyerror("macro '%s' not defined", buf);
 768 c39be742 2021-07-09 op 			return findeol();
 769 74f0778b 2021-06-16 op 		}
 770 c39be742 2021-07-09 op 		p = val + strlen(val) - 1;
 771 c39be742 2021-07-09 op 		lungetc(DONE_EXPAND);
 772 c39be742 2021-07-09 op 		while (p >= val) {
 773 c39be742 2021-07-09 op 			lungetc(*p);
 774 c39be742 2021-07-09 op 			p--;
 775 c39be742 2021-07-09 op 		}
 776 c39be742 2021-07-09 op 		lungetc(START_EXPAND);
 777 c39be742 2021-07-09 op 		goto top;
 778 74f0778b 2021-06-16 op 	}
 779 74f0778b 2021-06-16 op 
 780 c39be742 2021-07-09 op 	switch (c) {
 781 c39be742 2021-07-09 op 	case '\'':
 782 c39be742 2021-07-09 op 	case '"':
 783 c39be742 2021-07-09 op 		quotec = c;
 784 c39be742 2021-07-09 op 		while (1) {
 785 c39be742 2021-07-09 op 			if ((c = lgetc(quotec)) == EOF)
 786 c39be742 2021-07-09 op 				return 0;
 787 c39be742 2021-07-09 op 			if (c == '\n') {
 788 c39be742 2021-07-09 op 				file->lineno++;
 789 c39be742 2021-07-09 op 				continue;
 790 c39be742 2021-07-09 op 			} else if (c == '\\') {
 791 c39be742 2021-07-09 op 				if ((next = lgetc(quotec)) == EOF)
 792 c39be742 2021-07-09 op 					return (0);
 793 c39be742 2021-07-09 op 				if (next == quotec || next == ' ' ||
 794 c39be742 2021-07-09 op 				    next == '\t')
 795 c39be742 2021-07-09 op 					c = next;
 796 c39be742 2021-07-09 op 				else if (next == '\n') {
 797 c39be742 2021-07-09 op 					file->lineno++;
 798 c39be742 2021-07-09 op 					continue;
 799 c39be742 2021-07-09 op 				} else
 800 c39be742 2021-07-09 op 					lungetc(next);
 801 c39be742 2021-07-09 op 			} else if (c == quotec) {
 802 c39be742 2021-07-09 op 				*p = '\0';
 803 c39be742 2021-07-09 op 				break;
 804 c39be742 2021-07-09 op 			} else if (c == '\0') {
 805 f3966209 2021-07-13 op 				yyerror("invalid syntax");
 806 c39be742 2021-07-09 op 				return findeol();
 807 c39be742 2021-07-09 op 			}
 808 c39be742 2021-07-09 op 			if (p + 1 >= buf + sizeof(buf) - 1) {
 809 c39be742 2021-07-09 op 				yyerror("string too long");
 810 c39be742 2021-07-09 op 				return findeol();
 811 c39be742 2021-07-09 op 			}
 812 c39be742 2021-07-09 op 			*p++ = c;
 813 c39be742 2021-07-09 op 		}
 814 c39be742 2021-07-09 op 		yylval.v.string = strdup(buf);
 815 c39be742 2021-07-09 op 		if (yylval.v.string == NULL)
 816 2dd5994a 2023-06-06 op 			fatal("yylex: strdup");
 817 c39be742 2021-07-09 op 		return STRING;
 818 74f0778b 2021-06-16 op 	}
 819 c39be742 2021-07-09 op 
 820 c39be742 2021-07-09 op #define allowed_to_end_number(x) \
 821 c39be742 2021-07-09 op 	(isspace(x) || x == ')' || x ==',' || x == '/' || x == '}' || x == '=')
 822 c39be742 2021-07-09 op 
 823 c39be742 2021-07-09 op 	if (c == '-' || isdigit(c)) {
 824 c39be742 2021-07-09 op 		do {
 825 c39be742 2021-07-09 op 			*p++ = c;
 826 c39be742 2021-07-09 op 			if ((size_t)(p-buf) >= sizeof(buf)) {
 827 c39be742 2021-07-09 op 				yyerror("string too long");
 828 c39be742 2021-07-09 op 				return findeol();
 829 c39be742 2021-07-09 op 			}
 830 c39be742 2021-07-09 op 		} while ((c = lgetc(0)) != EOF && isdigit(c));
 831 c39be742 2021-07-09 op 		lungetc(c);
 832 c39be742 2021-07-09 op 		if (p == buf + 1 && buf[0] == '-')
 833 c39be742 2021-07-09 op 			goto nodigits;
 834 c39be742 2021-07-09 op 		if (c == EOF || allowed_to_end_number(c)) {
 835 c39be742 2021-07-09 op 			const char *errstr = NULL;
 836 c39be742 2021-07-09 op 
 837 c39be742 2021-07-09 op 			*p = '\0';
 838 c39be742 2021-07-09 op 			yylval.v.number = strtonum(buf, LLONG_MIN,
 839 c39be742 2021-07-09 op 			    LLONG_MAX, &errstr);
 840 c39be742 2021-07-09 op 			if (errstr) {
 841 c39be742 2021-07-09 op 				yyerror("\"%s\" invalid number: %s",
 842 c39be742 2021-07-09 op 				    buf, errstr);
 843 c39be742 2021-07-09 op 				return findeol();
 844 c39be742 2021-07-09 op 			}
 845 c39be742 2021-07-09 op 			return NUM;
 846 c39be742 2021-07-09 op 		} else {
 847 c39be742 2021-07-09 op nodigits:
 848 c39be742 2021-07-09 op 			while (p > buf + 1)
 849 c39be742 2021-07-09 op 				lungetc(*--p);
 850 c39be742 2021-07-09 op 			c = *--p;
 851 c39be742 2021-07-09 op 			if (c == '-')
 852 c39be742 2021-07-09 op 				return c;
 853 c39be742 2021-07-09 op 		}
 854 74f0778b 2021-06-16 op 	}
 855 c39be742 2021-07-09 op 
 856 c39be742 2021-07-09 op #define allowed_in_string(x) \
 857 c39be742 2021-07-09 op 	(isalnum(x) || (ispunct(x) && x != '(' && x != ')' && \
 858 c39be742 2021-07-09 op 	x != '{' && x != '}' && \
 859 c39be742 2021-07-09 op 	x != '!' && x != '=' && x != '#' && \
 860 67f49405 2021-07-09 op 	x != ',' && x != ';'))
 861 c39be742 2021-07-09 op 
 862 67f49405 2021-07-09 op 	if (isalnum(c) || c == ':' || c == '_') {
 863 c39be742 2021-07-09 op 		do {
 864 c39be742 2021-07-09 op 			*p++ = c;
 865 c39be742 2021-07-09 op 			if ((size_t)(p-buf) >= sizeof(buf)) {
 866 c39be742 2021-07-09 op 				yyerror("string too long");
 867 c39be742 2021-07-09 op 				return findeol();
 868 c39be742 2021-07-09 op 			}
 869 c39be742 2021-07-09 op 		} while ((c = lgetc(0)) != EOF && (allowed_in_string(c)));
 870 c39be742 2021-07-09 op 		lungetc(c);
 871 c39be742 2021-07-09 op 		*p = '\0';
 872 c39be742 2021-07-09 op 		if ((token = lookup(buf)) == STRING)
 873 c39be742 2021-07-09 op 			yylval.v.string = xstrdup(buf);
 874 c39be742 2021-07-09 op 		return token;
 875 74f0778b 2021-06-16 op 	}
 876 c39be742 2021-07-09 op 	if (c == '\n') {
 877 c39be742 2021-07-09 op 		yylval.lineno = file->lineno;
 878 c39be742 2021-07-09 op 		file->lineno++;
 879 74f0778b 2021-06-16 op 	}
 880 c39be742 2021-07-09 op 	if (c == EOF)
 881 c39be742 2021-07-09 op 		return 0;
 882 c39be742 2021-07-09 op 	return c;
 883 c39be742 2021-07-09 op }
 884 c39be742 2021-07-09 op 
 885 c39be742 2021-07-09 op struct file *
 886 c39be742 2021-07-09 op pushfile(const char *name, int secret)
 887 c39be742 2021-07-09 op {
 888 c39be742 2021-07-09 op 	struct file	*nfile;
 889 c39be742 2021-07-09 op 
 890 c39be742 2021-07-09 op 	nfile = xcalloc(1, sizeof(*nfile));
 891 c39be742 2021-07-09 op 	nfile->name = xstrdup(name);
 892 c39be742 2021-07-09 op 	if ((nfile->stream = fopen(nfile->name, "r")) == NULL) {
 893 eae52ad4 2023-06-06 op 		log_warn("can't open %s", nfile->name);
 894 c39be742 2021-07-09 op 		free(nfile->name);
 895 c39be742 2021-07-09 op 		free(nfile);
 896 c39be742 2021-07-09 op 		return NULL;
 897 74f0778b 2021-06-16 op 	}
 898 c39be742 2021-07-09 op 	nfile->lineno = TAILQ_EMPTY(&files) ? 1 : 0;
 899 c39be742 2021-07-09 op 	nfile->ungetsize = 16;
 900 c39be742 2021-07-09 op 	nfile->ungetbuf = xcalloc(1, nfile->ungetsize);
 901 c39be742 2021-07-09 op 	TAILQ_INSERT_TAIL(&files, nfile, entry);
 902 c39be742 2021-07-09 op 	return nfile;
 903 c39be742 2021-07-09 op }
 904 74f0778b 2021-06-16 op 
 905 c39be742 2021-07-09 op int
 906 c39be742 2021-07-09 op popfile(void)
 907 c39be742 2021-07-09 op {
 908 c39be742 2021-07-09 op 	struct file	*prev;
 909 13ed2fb6 2021-01-27 op 
 910 c39be742 2021-07-09 op 	if ((prev = TAILQ_PREV(file, files, entry)) != NULL)
 911 c39be742 2021-07-09 op 		prev->errors += file->errors;
 912 13ed2fb6 2021-01-27 op 
 913 c39be742 2021-07-09 op 	TAILQ_REMOVE(&files, file, entry);
 914 c39be742 2021-07-09 op 	fclose(file->stream);
 915 c39be742 2021-07-09 op 	free(file->name);
 916 c39be742 2021-07-09 op 	free(file->ungetbuf);
 917 c39be742 2021-07-09 op 	free(file);
 918 c39be742 2021-07-09 op 	file = prev;
 919 c39be742 2021-07-09 op 	return file ? 0 : EOF;
 920 13ed2fb6 2021-01-27 op }
 921 13ed2fb6 2021-01-27 op 
 922 13ed2fb6 2021-01-27 op void
 923 c39be742 2021-07-09 op parse_conf(const char *filename)
 924 13ed2fb6 2021-01-27 op {
 925 c39be742 2021-07-09 op 	struct sym		*sym, *next;
 926 3b21cca3 2021-06-29 op 
 927 c39be742 2021-07-09 op 	file = pushfile(filename, 0);
 928 c39be742 2021-07-09 op 	if (file == NULL)
 929 83272dfe 2021-08-23 op 		exit(1);
 930 c39be742 2021-07-09 op 	topfile = file;
 931 c39be742 2021-07-09 op 
 932 13ed2fb6 2021-01-27 op 	yyparse();
 933 c39be742 2021-07-09 op 	errors = file->errors;
 934 c39be742 2021-07-09 op 	popfile();
 935 13ed2fb6 2021-01-27 op 
 936 c39be742 2021-07-09 op 	/* Free macros and check which have not been used. */
 937 3b21cca3 2021-06-29 op 	TAILQ_FOREACH_SAFE(sym, &symhead, entry, next) {
 938 3b21cca3 2021-06-29 op 		/* TODO: warn if !sym->used */
 939 3b21cca3 2021-06-29 op 		if (!sym->persist) {
 940 3b21cca3 2021-06-29 op 			free(sym->name);
 941 3b21cca3 2021-06-29 op 			free(sym->val);
 942 3b21cca3 2021-06-29 op 			TAILQ_REMOVE(&symhead, sym, entry);
 943 3b21cca3 2021-06-29 op 			free(sym);
 944 3b21cca3 2021-06-29 op 		}
 945 3b21cca3 2021-06-29 op 	}
 946 c39be742 2021-07-09 op 
 947 c39be742 2021-07-09 op 	if (errors)
 948 c39be742 2021-07-09 op 		exit(1);
 949 13ed2fb6 2021-01-27 op }
 950 e17642a7 2021-02-01 op 
 951 f0a01fc7 2021-10-09 op void
 952 f0a01fc7 2021-10-09 op print_conf(void)
 953 f0a01fc7 2021-10-09 op {
 954 f0a01fc7 2021-10-09 op 	struct vhost	*h;
 955 f0a01fc7 2021-10-09 op 	/* struct location	*l; */
 956 f0a01fc7 2021-10-09 op 	/* struct envlist	*e; */
 957 f0a01fc7 2021-10-09 op 	/* struct alist	*a; */
 958 f0a01fc7 2021-10-09 op 
 959 7277bb7d 2022-09-10 op 	if (*conf.chroot != '\0')
 960 f0a01fc7 2021-10-09 op 		printf("chroot \"%s\"\n", conf.chroot);
 961 f0a01fc7 2021-10-09 op 	printf("ipv6 %s\n", conf.ipv6 ? "on" : "off");
 962 f0a01fc7 2021-10-09 op 	/* XXX: defined mimes? */
 963 f0a01fc7 2021-10-09 op 	printf("port %d\n", conf.port);
 964 f0a01fc7 2021-10-09 op 	printf("prefork %d\n", conf.prefork);
 965 f0a01fc7 2021-10-09 op 	/* XXX: protocols? */
 966 7277bb7d 2022-09-10 op 	if (*conf.user != '\0')
 967 f0a01fc7 2021-10-09 op 		printf("user \"%s\"\n", conf.user);
 968 f0a01fc7 2021-10-09 op 
 969 f0a01fc7 2021-10-09 op 	TAILQ_FOREACH(h, &hosts, vhosts) {
 970 f0a01fc7 2021-10-09 op 		printf("\nserver \"%s\" {\n", h->domain);
 971 f0a01fc7 2021-10-09 op 		printf("	cert \"%s\"\n", h->cert);
 972 f0a01fc7 2021-10-09 op 		printf("	key \"%s\"\n", h->key);
 973 f0a01fc7 2021-10-09 op 		/* TODO: print locations... */
 974 f0a01fc7 2021-10-09 op 		printf("}\n");
 975 f0a01fc7 2021-10-09 op 	}
 976 f0a01fc7 2021-10-09 op }
 977 f0a01fc7 2021-10-09 op 
 978 c39be742 2021-07-09 op int
 979 c39be742 2021-07-09 op symset(const char *name, const char *val, int persist)
 980 c39be742 2021-07-09 op {
 981 c39be742 2021-07-09 op 	struct sym *sym;
 982 c39be742 2021-07-09 op 
 983 c39be742 2021-07-09 op 	TAILQ_FOREACH(sym, &symhead, entry) {
 984 c39be742 2021-07-09 op 		if (!strcmp(name, sym->name))
 985 c39be742 2021-07-09 op 			break;
 986 c39be742 2021-07-09 op 	}
 987 c39be742 2021-07-09 op 
 988 c39be742 2021-07-09 op 	if (sym != NULL) {
 989 c39be742 2021-07-09 op 		if (sym->persist)
 990 c39be742 2021-07-09 op 			return 0;
 991 c39be742 2021-07-09 op 		else {
 992 c39be742 2021-07-09 op 			free(sym->name);
 993 c39be742 2021-07-09 op 			free(sym->val);
 994 c39be742 2021-07-09 op 			TAILQ_REMOVE(&symhead, sym, entry);
 995 c39be742 2021-07-09 op 			free(sym);
 996 c39be742 2021-07-09 op 		}
 997 c39be742 2021-07-09 op 	}
 998 c39be742 2021-07-09 op 
 999 c39be742 2021-07-09 op 	sym = xcalloc(1, sizeof(*sym));
1000 c39be742 2021-07-09 op 	sym->name = xstrdup(name);
1001 c39be742 2021-07-09 op 	sym->val = xstrdup(val);
1002 c39be742 2021-07-09 op 	sym->used = 0;
1003 c39be742 2021-07-09 op 	sym->persist = persist;
1004 c39be742 2021-07-09 op 
1005 c39be742 2021-07-09 op 	TAILQ_INSERT_TAIL(&symhead, sym, entry);
1006 c39be742 2021-07-09 op 	return 0;
1007 c39be742 2021-07-09 op }
1008 c39be742 2021-07-09 op 
1009 c39be742 2021-07-09 op int
1010 c39be742 2021-07-09 op cmdline_symset(char *s)
1011 c39be742 2021-07-09 op {
1012 c39be742 2021-07-09 op 	char	*sym, *val;
1013 c39be742 2021-07-09 op 	int	 ret;
1014 c39be742 2021-07-09 op 
1015 c39be742 2021-07-09 op 	if ((val = strrchr(s, '=')) == NULL)
1016 c39be742 2021-07-09 op 		return -1;
1017 c39be742 2021-07-09 op 	sym = xcalloc(1, val - s + 1);
1018 c39be742 2021-07-09 op 	memcpy(sym, s, val - s);
1019 c39be742 2021-07-09 op 	ret = symset(sym, val + 1, 1);
1020 c39be742 2021-07-09 op 	free(sym);
1021 c39be742 2021-07-09 op 	return ret;
1022 c39be742 2021-07-09 op }
1023 c39be742 2021-07-09 op 
1024 e17642a7 2021-02-01 op char *
1025 c39be742 2021-07-09 op symget(const char *nam)
1026 c39be742 2021-07-09 op {
1027 c39be742 2021-07-09 op 	struct sym	*sym;
1028 c39be742 2021-07-09 op 
1029 c39be742 2021-07-09 op 	TAILQ_FOREACH(sym, &symhead, entry) {
1030 c39be742 2021-07-09 op 		if (strcmp(nam, sym->name) == 0) {
1031 c39be742 2021-07-09 op 			sym->used = 1;
1032 c39be742 2021-07-09 op 			return sym->val;
1033 c39be742 2021-07-09 op 		}
1034 c39be742 2021-07-09 op 	}
1035 c39be742 2021-07-09 op 	return NULL;
1036 c39be742 2021-07-09 op }
1037 c39be742 2021-07-09 op 
1038 c39be742 2021-07-09 op struct vhost *
1039 c39be742 2021-07-09 op new_vhost(void)
1040 c39be742 2021-07-09 op {
1041 edc5ca66 2022-09-10 op 	struct vhost *h;
1042 edc5ca66 2022-09-10 op 
1043 edc5ca66 2022-09-10 op 	h = xcalloc(1, sizeof(*h));
1044 edc5ca66 2022-09-10 op 	TAILQ_INIT(&h->locations);
1045 edc5ca66 2022-09-10 op 	TAILQ_INIT(&h->params);
1046 edc5ca66 2022-09-10 op 	TAILQ_INIT(&h->aliases);
1047 edc5ca66 2022-09-10 op 	TAILQ_INIT(&h->proxies);
1048 edc5ca66 2022-09-10 op 	return h;
1049 c39be742 2021-07-09 op }
1050 c39be742 2021-07-09 op 
1051 c39be742 2021-07-09 op struct location *
1052 c39be742 2021-07-09 op new_location(void)
1053 c39be742 2021-07-09 op {
1054 c39be742 2021-07-09 op 	struct location *l;
1055 c39be742 2021-07-09 op 
1056 c39be742 2021-07-09 op 	l = xcalloc(1, sizeof(*l));
1057 c39be742 2021-07-09 op 	l->dirfd = -1;
1058 c39be742 2021-07-09 op 	l->fcgi = -1;
1059 c39be742 2021-07-09 op 	return l;
1060 c39be742 2021-07-09 op }
1061 c39be742 2021-07-09 op 
1062 b7967bc1 2021-01-02 op struct proxy *
1063 b7967bc1 2021-01-02 op new_proxy(void)
1064 b7967bc1 2021-01-02 op {
1065 b7967bc1 2021-01-02 op 	struct proxy *p;
1066 b7967bc1 2021-01-02 op 
1067 b7967bc1 2021-01-02 op 	p = xcalloc(1, sizeof(*p));
1068 b7967bc1 2021-01-02 op 	p->protocols = TLS_PROTOCOLS_DEFAULT;
1069 b7967bc1 2021-01-02 op 	return p;
1070 b7967bc1 2021-01-02 op }
1071 b7967bc1 2021-01-02 op 
1072 c39be742 2021-07-09 op char *
1073 e17642a7 2021-02-01 op ensure_absolute_path(char *path)
1074 e17642a7 2021-02-01 op {
1075 e17642a7 2021-02-01 op 	if (path == NULL || *path != '/')
1076 adbe6a64 2021-04-30 op 		yyerror("not an absolute path: %s", path);
1077 e17642a7 2021-02-01 op 	return path;
1078 e17642a7 2021-02-01 op }
1079 6abda252 2021-02-06 op 
1080 6abda252 2021-02-06 op int
1081 6abda252 2021-02-06 op check_block_code(int n)
1082 6abda252 2021-02-06 op {
1083 6abda252 2021-02-06 op 	if (n < 10 || n >= 70 || (n >= 20 && n <= 29))
1084 6abda252 2021-02-06 op 		yyerror("invalid block code %d", n);
1085 6abda252 2021-02-06 op 	return n;
1086 6abda252 2021-02-06 op }
1087 6abda252 2021-02-06 op 
1088 6abda252 2021-02-06 op char *
1089 6abda252 2021-02-06 op check_block_fmt(char *fmt)
1090 6abda252 2021-02-06 op {
1091 6abda252 2021-02-06 op 	char *s;
1092 6abda252 2021-02-06 op 
1093 6abda252 2021-02-06 op 	for (s = fmt; *s; ++s) {
1094 6abda252 2021-02-06 op 		if (*s != '%')
1095 6abda252 2021-02-06 op 			continue;
1096 6abda252 2021-02-06 op 		switch (*++s) {
1097 6abda252 2021-02-06 op 		case '%':
1098 6abda252 2021-02-06 op 		case 'p':
1099 6abda252 2021-02-06 op 		case 'q':
1100 6abda252 2021-02-06 op 		case 'P':
1101 6abda252 2021-02-06 op 		case 'N':
1102 6abda252 2021-02-06 op 			break;
1103 6abda252 2021-02-06 op 		default:
1104 6abda252 2021-02-06 op 			yyerror("invalid format specifier %%%c", *s);
1105 6abda252 2021-02-06 op 		}
1106 6abda252 2021-02-06 op 	}
1107 6abda252 2021-02-06 op 
1108 6abda252 2021-02-06 op 	return fmt;
1109 6abda252 2021-02-06 op }
1110 6abda252 2021-02-06 op 
1111 6abda252 2021-02-06 op int
1112 6abda252 2021-02-06 op check_strip_no(int n)
1113 6abda252 2021-02-06 op {
1114 6abda252 2021-02-06 op 	if (n <= 0)
1115 6abda252 2021-02-06 op 		yyerror("invalid strip number %d", n);
1116 a709ddf5 2021-02-07 op 	return n;
1117 a709ddf5 2021-02-07 op }
1118 a709ddf5 2021-02-07 op 
1119 a709ddf5 2021-02-07 op int
1120 391825e3 2021-07-09 op check_port_num(int n)
1121 391825e3 2021-07-09 op {
1122 391825e3 2021-07-09 op 	if (n <= 0 || n >= UINT16_MAX)
1123 391825e3 2021-07-09 op 		yyerror("port number is %s: %d",
1124 391825e3 2021-07-09 op 		    n <= 0 ? "too small" : "too large",
1125 391825e3 2021-07-09 op 		    n);
1126 391825e3 2021-07-09 op 	return n;
1127 391825e3 2021-07-09 op }
1128 391825e3 2021-07-09 op 
1129 391825e3 2021-07-09 op int
1130 a709ddf5 2021-02-07 op check_prefork_num(int n)
1131 a709ddf5 2021-02-07 op {
1132 c26f2460 2023-06-08 op 	if (n <= 0 || n >= PROC_MAX_INSTANCES)
1133 a709ddf5 2021-02-07 op 		yyerror("invalid prefork number %d", n);
1134 6abda252 2021-02-06 op 	return n;
1135 6abda252 2021-02-06 op }
1136 49b73ba1 2021-02-10 op 
1137 49b73ba1 2021-02-10 op void
1138 49b73ba1 2021-02-10 op advance_loc(void)
1139 49b73ba1 2021-02-10 op {
1140 b8e64ccd 2021-03-31 op 	loc = new_location();
1141 b8e64ccd 2021-03-31 op 	TAILQ_INSERT_TAIL(&host->locations, loc, locations);
1142 49b73ba1 2021-02-10 op }
1143 c705ecb1 2021-05-03 op 
1144 c705ecb1 2021-05-03 op void
1145 b7967bc1 2021-01-02 op advance_proxy(void)
1146 b7967bc1 2021-01-02 op {
1147 b7967bc1 2021-01-02 op 	proxy = new_proxy();
1148 b7967bc1 2021-01-02 op 	TAILQ_INSERT_TAIL(&host->proxies, proxy, proxies);
1149 b7967bc1 2021-01-02 op }
1150 b7967bc1 2021-01-02 op 
1151 b7967bc1 2021-01-02 op void
1152 b7967bc1 2021-01-02 op parsehp(char *str, char **host, const char **port, const char *def)
1153 b7967bc1 2021-01-02 op {
1154 b7967bc1 2021-01-02 op 	char		*at;
1155 b7967bc1 2021-01-02 op 	const char	*errstr;
1156 b7967bc1 2021-01-02 op 
1157 b7967bc1 2021-01-02 op 	*host = str;
1158 b7967bc1 2021-01-02 op 
1159 b7967bc1 2021-01-02 op 	if ((at = strchr(str, ':')) != NULL) {
1160 b7967bc1 2021-01-02 op 		*at++ = '\0';
1161 b7967bc1 2021-01-02 op 		*port = at;
1162 b7967bc1 2021-01-02 op 	} else
1163 b7967bc1 2021-01-02 op 		*port = def;
1164 b7967bc1 2021-01-02 op 
1165 b7967bc1 2021-01-02 op 	strtonum(*port, 1, UINT16_MAX, &errstr);
1166 b7967bc1 2021-01-02 op 	if (errstr != NULL)
1167 b7967bc1 2021-01-02 op 		yyerror("port is %s: %s", errstr, *port);
1168 8ad1c570 2021-05-09 op }
1169 8ad1c570 2021-05-09 op 
1170 8ad1c570 2021-05-09 op int
1171 7b00c890 2022-10-05 op fastcgi_conf(const char *path, const char *port)
1172 8ad1c570 2021-05-09 op {
1173 8ad1c570 2021-05-09 op 	struct fcgi	*f;
1174 8ad1c570 2021-05-09 op 	int		i;
1175 8ad1c570 2021-05-09 op 
1176 8ad1c570 2021-05-09 op 	for (i = 0; i < FCGI_MAX; ++i) {
1177 8ad1c570 2021-05-09 op 		f = &fcgi[i];
1178 fafc6849 2021-06-29 op 
1179 534afd0d 2022-10-05 op 		if (*f->path == '\0') {
1180 8ad1c570 2021-05-09 op 			f->id = i;
1181 534afd0d 2022-10-05 op 			(void) strlcpy(f->path, path, sizeof(f->path));
1182 e92efb0d 2022-11-27 op 			if (port != NULL)
1183 e92efb0d 2022-11-27 op 				(void) strlcpy(f->port, port, sizeof(f->port));
1184 8ad1c570 2021-05-09 op 			return i;
1185 8ad1c570 2021-05-09 op 		}
1186 8ad1c570 2021-05-09 op 
1187 8ad1c570 2021-05-09 op 		if (!strcmp(f->path, path) &&
1188 534afd0d 2022-10-05 op 		    ((port == NULL && *f->port == '\0') ||
1189 534afd0d 2022-10-05 op 		     !strcmp(f->port, port)))
1190 8ad1c570 2021-05-09 op 			return i;
1191 8ad1c570 2021-05-09 op 	}
1192 8ad1c570 2021-05-09 op 
1193 8ad1c570 2021-05-09 op 	yyerror("too much `fastcgi' rules defined.");
1194 8ad1c570 2021-05-09 op 	return -1;
1195 c92b802b 2021-06-11 op }
1196 c92b802b 2021-06-11 op 
1197 c92b802b 2021-06-11 op void
1198 2025e96d 2022-09-10 op add_param(char *name, char *val)
1199 c92b802b 2021-06-11 op {
1200 c92b802b 2021-06-11 op 	struct envlist *e;
1201 2025e96d 2022-09-10 op 	struct envhead *h = &host->params;
1202 c92b802b 2021-06-11 op 
1203 c92b802b 2021-06-11 op 	e = xcalloc(1, sizeof(*e));
1204 534afd0d 2022-10-05 op 	(void) strlcpy(e->name, name, sizeof(e->name));
1205 534afd0d 2022-10-05 op 	(void) strlcpy(e->value, val, sizeof(e->value));
1206 edc5ca66 2022-09-10 op 	TAILQ_INSERT_TAIL(h, e, envs);
1207 3b21cca3 2021-06-29 op }
1208 534afd0d 2022-10-05 op 
1209 534afd0d 2022-10-05 op int
1210 534afd0d 2022-10-05 op getservice(const char *n)
1211 534afd0d 2022-10-05 op {
1212 534afd0d 2022-10-05 op 	struct servent	*s;
1213 534afd0d 2022-10-05 op 	const char	*errstr;
1214 534afd0d 2022-10-05 op 	long long	 llval;
1215 534afd0d 2022-10-05 op 
1216 534afd0d 2022-10-05 op 	llval = strtonum(n, 0, UINT16_MAX, &errstr);
1217 534afd0d 2022-10-05 op 	if (errstr) {
1218 534afd0d 2022-10-05 op 		s = getservbyname(n, "tcp");
1219 534afd0d 2022-10-05 op 		if (s == NULL)
1220 534afd0d 2022-10-05 op 			s = getservbyname(n, "udp");
1221 534afd0d 2022-10-05 op 		if (s == NULL)
1222 534afd0d 2022-10-05 op 			return (-1);
1223 534afd0d 2022-10-05 op 		return (ntohs(s->s_port));
1224 534afd0d 2022-10-05 op 	}
1225 534afd0d 2022-10-05 op 
1226 534afd0d 2022-10-05 op 	return ((unsigned short)llval);
1227 534afd0d 2022-10-05 op }