1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
5  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
6  *
7  * Permission to use, copy, modify, and distribute this software for any
8  * purpose with or without fee is hereby granted, provided that the above
9  * copyright notice and this permission notice appear in all copies.
10  *
11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18  */
19 
20 #include <netinet/in.h>
21 #include <net/if.h>
22 #include <sys/queue.h>
23 
24 #include <limits.h>
25 #include <stdio.h>
26 
27 #ifdef DEBUG
28 #define dprintf(x...)   do { log_debug(x); } while(0)
29 #else
30 #define dprintf(x...)
31 #endif /* DEBUG */
32 
33 #ifndef nitems
34 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
35 #endif
36 
37 /* GOTWEBD DEFAULTS */
38 #define GOTWEBD_CONF		 "/etc/gotwebd.conf"
39 
40 #define GOTWEBD_USER		 "www"
41 
42 #define GOTWEBD_MAXDESCRSZ	 1024
43 #define GOTWEBD_MAXCLONEURLSZ	 1024
44 #define GOTWEBD_CACHESIZE	 1024
45 #define GOTWEBD_MAXCLIENTS	 1024
46 #define GOTWEBD_MAXTEXT		 511
47 #define GOTWEBD_MAXNAME		 64
48 #define GOTWEBD_MAXPORT		 6
49 #define GOTWEBD_NUMPROC		 3
50 #define GOTWEBD_MAXIFACE	 16
51 #define GOTWEBD_REPO_CACHESIZE	 4
52 
53 /* GOTWEB DEFAULTS */
54 #define MAX_QUERYSTRING		 2048
55 #define MAX_DOCUMENT_URI	 255
56 #define MAX_SERVER_NAME		 255
57 
58 #define GOTWEB_GIT_DIR		 ".git"
59 
60 #define D_HTTPD_CHROOT		 "/var/www"
61 #define D_UNIX_SOCKET		 "/run/gotweb.sock"
62 #define D_FCGI_PORT		 "9000"
63 #define D_GOTPATH		 "/got/public"
64 #define D_SITENAME		 "Gotweb"
65 #define D_SITEOWNER		 "Got Owner"
66 #define D_SITELINK		 "Repos"
67 #define D_GOTLOGO		 "got.png"
68 #define D_GOTURL		 "https://gameoftrees.org"
69 #define D_GOTWEBCSS		 "gotweb.css"
70 
71 #define D_SHOWROWNER		 1
72 #define D_SHOWSOWNER		 1
73 #define D_SHOWAGE		 1
74 #define D_SHOWDESC		 1
75 #define D_SHOWURL		 1
76 #define D_RESPECTEXPORTOK	 0
77 #define D_MAXREPO		 0
78 #define D_MAXREPODISP		 25
79 #define D_MAXSLCOMMDISP		 10
80 #define D_MAXCOMMITDISP		 25
81 
82 #define BUF			 8192
83 
84 #define TIMEOUT_DEFAULT		 120
85 
86 #define FCGI_CONTENT_SIZE	 65535
87 #define FCGI_PADDING_SIZE	 255
88 #define FCGI_RECORD_SIZE	 \
89     (sizeof(struct fcgi_record_header) + FCGI_CONTENT_SIZE + FCGI_PADDING_SIZE)
90 
91 #define FCGI_ALIGNMENT		 8
92 #define FCGI_ALIGN(n)		 \
93     (((n) + (FCGI_ALIGNMENT - 1)) & ~(FCGI_ALIGNMENT - 1))
94 
95 #define FD_RESERVE		 5
96 #define FD_NEEDED		 6
97 
98 #define FCGI_BEGIN_REQUEST	 1
99 #define FCGI_ABORT_REQUEST	 2
100 #define FCGI_END_REQUEST	 3
101 #define FCGI_PARAMS		 4
102 #define FCGI_STDIN		 5
103 #define FCGI_STDOUT		 6
104 #define FCGI_STDERR		 7
105 #define FCGI_DATA		 8
106 #define FCGI_GET_VALUES		 9
107 #define FCGI_GET_VALUES_RESULT	10
108 #define FCGI_UNKNOWN_TYPE	11
109 #define FCGI_MAXTYPE		(FCGI_UNKNOWN_TYPE)
110 
111 #define FCGI_REQUEST_COMPLETE	0
112 #define FCGI_CANT_MPX_CONN	1
113 #define FCGI_OVERLOADED		2
114 #define FCGI_UNKNOWN_ROLE	3
115 
116 #define GOTWEB_PACK_NUM_TEMPFILES     32
117 
118 /* Forward declaration */
119 struct got_blob_object;
120 struct got_tree_entry;
121 struct got_reflist_head;
122 
123 enum imsg_type {
124 	IMSG_CFG_SRV = IMSG_PROC_MAX,
125 	IMSG_CFG_SOCK,
126 	IMSG_CFG_FD,
127 	IMSG_CFG_DONE,
128 	IMSG_CTL_START,
129 };
130 
131 struct env_val {
132 	SLIST_ENTRY(env_val)	 entry;
133 	char			*val;
134 };
135 SLIST_HEAD(env_head, env_val);
136 
137 struct fcgi_record_header {
138 	uint8_t		version;
139 	uint8_t		type;
140 	uint16_t	id;
141 	uint16_t	content_len;
142 	uint8_t		padding_len;
143 	uint8_t		reserved;
144 }__attribute__((__packed__));
145 
146 struct blame_line {
147 	int		 annotated;
148 	char		*id_str;
149 	char		*committer;
150 	char		 datebuf[11]; /* YYYY-MM-DD + NUL */
151 };
152 
153 struct repo_dir {
154 	char			*name;
155 	char			*owner;
156 	char			*description;
157 	char			*url;
158 	time_t			 age;
159 	char			*path;
160 };
161 
162 struct repo_tag {
163 	TAILQ_ENTRY(repo_tag)	 entry;
164 	char			*commit_id;
165 	char			*tag_name;
166 	char			*tag_commit;
167 	char			*commit_msg;
168 	char			*tagger;
169 	time_t			 tagger_time;
170 };
171 
172 struct repo_commit {
173 	TAILQ_ENTRY(repo_commit)	 entry;
174 	char			*path;
175 	char			*refs_str;
176 	char			*commit_id; /* id_str1 */
177 	char			*parent_id; /* id_str2 */
178 	char			*tree_id;
179 	char			*author;
180 	char			*committer;
181 	char			*commit_msg;
182 	time_t			 committer_time;
183 };
184 
185 struct got_repository;
186 struct transport {
187 	TAILQ_HEAD(repo_commits_head, repo_commit)	 repo_commits;
188 	TAILQ_HEAD(repo_tags_head, repo_tag)		 repo_tags;
189 	struct got_repository	*repo;
190 	struct repo_dir		*repo_dir;
191 	struct querystring	*qs;
192 	char			*more_id;
193 	char			*next_id;
194 	char			*prev_id;
195 	unsigned int		 repos_total;
196 	unsigned int		 next_disp;
197 	unsigned int		 prev_disp;
198 	unsigned int		 tag_count;
199 };
200 
201 enum socket_priv_fds {
202 	DIFF_FD_1,
203 	DIFF_FD_2,
204 	DIFF_FD_3,
205 	DIFF_FD_4,
206 	DIFF_FD_5,
207 	BLAME_FD_1,
208 	BLAME_FD_2,
209 	BLAME_FD_3,
210 	BLAME_FD_4,
211 	BLAME_FD_5,
212 	BLAME_FD_6,
213 	BLOB_FD_1,
214 	BLOB_FD_2,
215 	PRIV_FDS__MAX,
216 };
217 
218 struct template;
219 struct request {
220 	struct socket			*sock;
221 	struct server			*srv;
222 	struct transport		*t;
223 	struct template			*tp;
224 	struct event			 ev;
225 	struct event			 tmo;
226 
227 	uint16_t			 id;
228 	int				 fd;
229 	int				 priv_fd[PRIV_FDS__MAX];
230 
231 	uint8_t				 buf[FCGI_RECORD_SIZE];
232 	size_t				 buf_pos;
233 	size_t				 buf_len;
234 
235 	uint8_t				 outbuf[GOTWEBD_CACHESIZE];
236 	size_t				 outbuf_len;
237 
238 	char				 querystring[MAX_QUERYSTRING];
239 	char				 http_host[GOTWEBD_MAXTEXT];
240 	char				 document_uri[MAX_DOCUMENT_URI];
241 	char				 server_name[MAX_SERVER_NAME];
242 	int				 https;
243 
244 	uint8_t				 request_started;
245 };
246 
247 struct fcgi_begin_request_body {
248 	uint16_t	role;
249 	uint8_t		flags;
250 	uint8_t		reserved[5];
251 }__attribute__((__packed__));
252 
253 struct fcgi_end_request_body {
254 	uint32_t	app_status;
255 	uint8_t		protocol_status;
256 	uint8_t		reserved[3];
257 }__attribute__((__packed__));
258 
259 struct address {
260 	TAILQ_ENTRY(address)	 entry;
261 	struct sockaddr_storage	 ss;
262 	int			 ipproto;
263 	int			 prefixlen;
264 	in_port_t		 port;
265 	char			 ifname[IFNAMSIZ];
266 };
267 TAILQ_HEAD(addresslist, address);
268 
269 struct cached_repo {
270 	char path[PATH_MAX];
271 	struct got_repository *repo;
272 };
273 
274 struct server {
275 	TAILQ_ENTRY(server)	 entry;
276 	struct addresslist	al;
277 
278 	struct cached_repo	*cached_repos;
279 	int		 ncached_repos;
280 
281 	char		 name[GOTWEBD_MAXTEXT];
282 
283 	char		 repos_path[PATH_MAX];
284 	char		 site_name[GOTWEBD_MAXNAME];
285 	char		 site_owner[GOTWEBD_MAXNAME];
286 	char		 site_link[GOTWEBD_MAXTEXT];
287 	char		 logo[GOTWEBD_MAXTEXT];
288 	char		 logo_url[GOTWEBD_MAXTEXT];
289 	char		 custom_css[PATH_MAX];
290 
291 	size_t		 max_repos;
292 	size_t		 max_repos_display;
293 	size_t		 max_commits_display;
294 
295 	int		 show_site_owner;
296 	int		 show_repo_owner;
297 	int		 show_repo_age;
298 	int		 show_repo_description;
299 	int		 show_repo_cloneurl;
300 	int		 respect_exportok;
301 
302 	int		 unix_socket;
303 	char		 unix_socket_name[PATH_MAX];
304 
305 	int		 fcgi_socket;
306 };
307 TAILQ_HEAD(serverlist, server);
308 
309 enum client_action {
310 	CLIENT_CONNECT,
311 	CLIENT_DISCONNECT,
312 };
313 
314 struct socket_conf {
315 	struct address	 addr;
316 
317 	char		 name[GOTWEBD_MAXTEXT];
318 	char		 srv_name[GOTWEBD_MAXTEXT];
319 
320 	int		 id;
321 	int		 af_type;
322 	char		 unix_socket_name[PATH_MAX];
323 	in_port_t	 fcgi_socket_port;
324 };
325 
326 struct socket {
327 	TAILQ_ENTRY(socket)	 entry;
328 	struct socket_conf	 conf;
329 
330 	int		 fd;
331 	int		 pack_fds[GOTWEB_PACK_NUM_TEMPFILES];
332 	int		 priv_fd[PRIV_FDS__MAX];
333 
334 	struct event	 evt;
335 	struct event	 ev;
336 	struct event	 pause;
337 
338 	int		 client_status;
339 };
340 TAILQ_HEAD(socketlist, socket);
341 
342 struct gotwebd {
343 	struct serverlist	servers;
344 	struct socketlist	sockets;
345 
346 	struct privsep	*gotwebd_ps;
347 	const char	*gotwebd_conffile;
348 
349 	int		 gotwebd_debug;
350 	int		 gotwebd_verbose;
351 	int		 gotwebd_noaction;
352 
353 	uint16_t	 prefork_gotwebd;
354 	int		 gotwebd_reload;
355 
356 	int		 server_cnt;
357 
358 	char		 httpd_chroot[PATH_MAX];
359 
360 	int		 unix_socket;
361 	char		 unix_socket_name[PATH_MAX];
362 };
363 
364 /*
365  * URL parameter for gotweb_render_url.  NULL values and int set to -1
366  * are implicitly ignored, and string are properly escaped.
367  */
368 struct gotweb_url {
369 	int		 action;
370 	int		 index_page;
371 	int		 page;
372 	const char	*commit;
373 	const char	*previd;
374 	const char	*prevset;
375 	const char	*file;
376 	const char	*folder;
377 	const char	*headref;
378 	const char	*path;
379 };
380 
381 struct querystring {
382 	uint8_t		 action;
383 	char		*commit;
384 	char		*previd;
385 	char		*prevset;
386 	char		*file;
387 	char		*folder;
388 	char		*headref;
389 	int		 index_page;
390 	char		*path;
391 	int		 page;
392 };
393 
394 struct querystring_keys {
395 	const char	*name;
396 	int		 element;
397 };
398 
399 struct action_keys {
400 	const char	*name;
401 	int		 action;
402 };
403 
404 enum querystring_elements {
405 	ACTION,
406 	COMMIT,
407 	RFILE,
408 	FOLDER,
409 	HEADREF,
410 	INDEX_PAGE,
411 	PATH,
412 	PAGE,
413 	PREVID,
414 	QSELEM__MAX,
415 };
416 
417 enum query_actions {
418 	BLAME,
419 	BLOB,
420 	BLOBRAW,
421 	BRIEFS,
422 	COMMITS,
423 	DIFF,
424 	ERR,
425 	INDEX,
426 	SUMMARY,
427 	TAG,
428 	TAGS,
429 	TREE,
430 	RSS,
431 	ACTIONS__MAX,
432 };
433 
434 enum gotweb_ref_tm {
435 	TM_DIFF,
436 	TM_LONG,
437 	TM_RFC822,
438 };
439 
440 extern struct gotwebd	*gotwebd_env;
441 
442 typedef int (*got_render_blame_line_cb)(struct template *, const char *,
443     struct blame_line *, int, int);
444 
445 /* sockets.c */
446 void sockets(struct privsep *, struct privsep_proc *);
447 void sockets_shutdown(void);
448 void sockets_parse_sockets(struct gotwebd *);
449 void sockets_socket_accept(int, short, void *);
450 int sockets_privinit(struct gotwebd *, struct socket *);
451 
452 /* gotweb.c */
453 void gotweb_get_navs(struct request *, struct gotweb_url *, int *,
454     struct gotweb_url *, int *);
455 int gotweb_render_age(struct template *, time_t, int);
456 const struct got_error *gotweb_init_transport(struct transport **);
457 const char *gotweb_action_name(int);
458 int gotweb_render_url(struct request *, struct gotweb_url *);
459 int gotweb_render_absolute_url(struct request *, struct gotweb_url *);
460 void gotweb_free_repo_commit(struct repo_commit *);
461 void gotweb_free_repo_tag(struct repo_tag *);
462 void gotweb_process_request(struct request *);
463 void gotweb_free_transport(struct transport *);
464 
465 /* pages.tmpl */
466 int	gotweb_render_header(struct template *);
467 int	gotweb_render_footer(struct template *);
468 int	gotweb_render_repo_table_hdr(struct template *);
469 int	gotweb_render_repo_fragment(struct template *, struct repo_dir *);
470 int	gotweb_render_briefs(struct template *);
471 int	gotweb_render_navs(struct template *);
472 int	gotweb_render_commits(struct template *);
473 int	gotweb_render_blob(struct template *, struct got_blob_object *);
474 int	gotweb_render_tree(struct template *);
475 int	gotweb_render_tags(struct template *);
476 int	gotweb_render_tag(struct template *);
477 int	gotweb_render_diff(struct template *, FILE *);
478 int	gotweb_render_branches(struct template *, struct got_reflist_head *);
479 int	gotweb_render_summary(struct template *, struct got_reflist_head *);
480 int	gotweb_render_blame(struct template *);
481 int	gotweb_render_rss(struct template *);
482 
483 /* parse.y */
484 int parse_config(const char *, struct gotwebd *);
485 int cmdline_symset(char *);
486 
487 /* fcgi.c */
488 void fcgi_request(int, short, void *);
489 void fcgi_timeout(int, short, void *);
490 void fcgi_cleanup_request(struct request *);
491 void fcgi_create_end_record(struct request *);
492 void dump_fcgi_record(const char *, struct fcgi_record_header *);
493 int fcgi_puts(struct template *, const char *);
494 int fcgi_putc(struct template *, int);
495 int fcgi_vprintf(struct request *, const char *, va_list);
496 int fcgi_printf(struct request *, const char *, ...)
497 	__attribute__((__format__(printf, 2, 3)))
498 	__attribute__((__nonnull__(2)));
499 int fcgi_gen_binary_response(struct request *, const uint8_t *, int);
500 
501 /* got_operations.c */
502 const struct got_error *got_gotweb_flushfile(FILE *, int);
503 const struct got_error *got_get_repo_owner(char **, struct request *);
504 const struct got_error *got_get_repo_age(time_t *, struct request *,
505     const char *);
506 const struct got_error *got_get_repo_commits(struct request *, int);
507 const struct got_error *got_get_repo_tags(struct request *, int);
508 const struct got_error *got_get_repo_heads(struct request *);
509 const struct got_error *got_open_diff_for_output(FILE **, int *,
510     struct request *);
511 int got_output_repo_tree(struct request *,
512     int (*)(struct template *, struct got_tree_entry *));
513 const struct got_error *got_open_blob_for_output(struct got_blob_object **,
514     int *, int *, struct request *);
515 int got_output_blob_by_lines(struct template *, struct got_blob_object *,
516     int (*)(struct template *, const char *, size_t));
517 const struct got_error *got_output_file_blame(struct request *,
518     got_render_blame_line_cb);
519 
520 /* config.c */
521 int config_setserver(struct gotwebd *, struct server *);
522 int config_getserver(struct gotwebd *, struct imsg *);
523 int config_setsock(struct gotwebd *, struct socket *);
524 int config_getsock(struct gotwebd *, struct imsg *);
525 int config_setfd(struct gotwebd *, struct socket *);
526 int config_getfd(struct gotwebd *, struct imsg *);
527 int config_getcfg(struct gotwebd *, struct imsg *);
528 int config_init(struct gotwebd *);