1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2014 Reyk Floeter <reyk@openbsd.org>
5  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
6  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
7  *
8  * Permission to use, copy, modify, and distribute this software for any
9  * purpose with or without fee is hereby granted, provided that the above
10  * copyright notice and this permission notice appear in all copies.
11  *
12  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
13  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
14  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
15  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
16  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19  */
20 
21 #include <net/if.h>
22 #include <netinet/in.h>
23 #include <sys/queue.h>
24 #include <sys/stat.h>
25 #include <sys/types.h>
26 
27 #include <ctype.h>
28 #include <dirent.h>
29 #include <errno.h>
30 #include <event.h>
31 #include <fcntl.h>
32 #include <imsg.h>
33 #include <sha1.h>
34 #include <stdio.h>
35 #include <stdlib.h>
36 #include <string.h>
37 #include <unistd.h>
38 
39 #include "got_error.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_repository.h"
43 #include "got_path.h"
44 #include "got_cancel.h"
45 #include "got_worktree.h"
46 #include "got_diff.h"
47 #include "got_commit_graph.h"
48 #include "got_blame.h"
49 #include "got_privsep.h"
50 
51 #include "proc.h"
52 #include "gotwebd.h"
53 #include "tmpl.h"
54 
55 static const struct querystring_keys querystring_keys[] = {
56 	{ "action",		ACTION },
57 	{ "commit",		COMMIT },
58 	{ "file",		RFILE },
59 	{ "folder",		FOLDER },
60 	{ "headref",		HEADREF },
61 	{ "index_page",		INDEX_PAGE },
62 	{ "path",		PATH },
63 	{ "page",		PAGE },
64 };
65 
66 static const struct action_keys action_keys[] = {
67 	{ "blame",	BLAME },
68 	{ "blob",	BLOB },
69 	{ "blobraw",	BLOBRAW },
70 	{ "briefs",	BRIEFS },
71 	{ "commits",	COMMITS },
72 	{ "diff",	DIFF },
73 	{ "error",	ERR },
74 	{ "index",	INDEX },
75 	{ "summary",	SUMMARY },
76 	{ "tag",	TAG },
77 	{ "tags",	TAGS },
78 	{ "tree",	TREE },
79 	{ "rss",	RSS },
80 };
81 
82 static const struct got_error *gotweb_init_querystring(struct querystring **);
83 static const struct got_error *gotweb_parse_querystring(struct querystring **,
84     char *);
85 static const struct got_error *gotweb_assign_querystring(struct querystring **,
86     char *, char *);
87 static const struct got_error *gotweb_render_index(struct request *);
88 static const struct got_error *gotweb_init_repo_dir(struct repo_dir **,
89     const char *);
90 static const struct got_error *gotweb_load_got_path(struct request *c,
91     struct repo_dir *);
92 static const struct got_error *gotweb_get_repo_description(char **,
93     struct server *, const char *, int);
94 static const struct got_error *gotweb_get_clone_url(char **, struct server *,
95     const char *, int);
96 
97 static void gotweb_free_querystring(struct querystring *);
98 static void gotweb_free_repo_dir(struct repo_dir *);
99 
100 struct server *gotweb_get_server(uint8_t *, uint8_t *);
101 
102 static int
103 gotweb_reply(struct request *c, int status, const char *ctype,
104     struct gotweb_url *location)
105 {
106 	const char	*csp;
107 
108 	if (status != 200 && fcgi_printf(c, "Status: %d\r\n", status) == -1)
109 		return -1;
110 
111 	if (location) {
112 		if (fcgi_puts(c->tp, "Location: ") == -1 ||
113 		    gotweb_render_url(c, location) == -1 ||
114 		    fcgi_puts(c->tp, "\r\n") == -1)
115 			return -1;
116 	}
117 
118 	csp = "Content-Security-Policy: default-src 'self'; "
119 	    "script-src 'none'; object-src 'none';\r\n";
120 	if (fcgi_puts(c->tp, csp) == -1)
121 		return -1;
122 
123 	if (ctype && fcgi_printf(c, "Content-Type: %s\r\n", ctype) == -1)
124 		return -1;
125 
126 	return fcgi_puts(c->tp, "\r\n");
127 }
128 
129 static int
130 gotweb_reply_file(struct request *c, const char *ctype, const char *file,
131     const char *suffix)
132 {
133 	int r;
134 
135 	r = fcgi_printf(c, "Content-Disposition: attachment; "
136 	    "filename=%s%s\r\n", file, suffix ? suffix : "");
137 	if (r == -1)
138 		return -1;
139 	return gotweb_reply(c, 200, ctype, NULL);
140 }
141 
142 void
143 gotweb_process_request(struct request *c)
144 {
145 	const struct got_error *error = NULL, *error2 = NULL;
146 	struct got_blob_object *blob = NULL;
147 	struct server *srv = NULL;
148 	struct querystring *qs = NULL;
149 	struct repo_dir *repo_dir = NULL;
150 	struct got_reflist_head refs;
151 	FILE *fp = NULL;
152 	uint8_t err[] = "gotwebd experienced an error: ";
153 	int r, html = 0, fd = -1;
154 
155 	TAILQ_INIT(&refs);
156 
157 	/* init the transport */
158 	error = gotweb_init_transport(&c->t);
159 	if (error) {
160 		log_warnx("%s: %s", __func__, error->msg);
161 		return;
162 	}
163 	/* don't process any further if client disconnected */
164 	if (c->sock->client_status == CLIENT_DISCONNECT)
165 		return;
166 	/* get the gotwebd server */
167 	srv = gotweb_get_server(c->server_name, c->http_host);
168 	if (srv == NULL) {
169 		log_warnx("%s: error server is NULL", __func__);
170 		goto err;
171 	}
172 	c->srv = srv;
173 	/* parse our querystring */
174 	error = gotweb_init_querystring(&qs);
175 	if (error) {
176 		log_warnx("%s: %s", __func__, error->msg);
177 		goto err;
178 	}
179 	c->t->qs = qs;
180 	error = gotweb_parse_querystring(&qs, c->querystring);
181 	if (error) {
182 		log_warnx("%s: %s", __func__, error->msg);
183 		goto err;
184 	}
185 
186 	/*
187 	 * certain actions require a commit id in the querystring. this stops
188 	 * bad actors from exploiting this by manually manipulating the
189 	 * querystring.
190 	 */
191 
192 	if (qs->action == BLAME || qs->action == BLOB ||
193 	    qs->action == BLOBRAW || qs->action == DIFF) {
194 		if (qs->commit == NULL) {
195 			error2 = got_error(GOT_ERR_QUERYSTRING);
196 			goto render;
197 		}
198 	}
199 
200 	if (qs->action != INDEX) {
201 		error = gotweb_init_repo_dir(&repo_dir, qs->path);
202 		if (error)
203 			goto done;
204 		error = gotweb_load_got_path(c, repo_dir);
205 		c->t->repo_dir = repo_dir;
206 		if (error && error->code != GOT_ERR_LONELY_PACKIDX)
207 			goto err;
208 	}
209 
210 	if (qs->action == BLOBRAW) {
211 		const uint8_t *buf;
212 		size_t len;
213 		int binary, r;
214 
215 		error = got_get_repo_commits(c, 1);
216 		if (error)
217 			goto done;
218 
219 		error2 = got_open_blob_for_output(&blob, &fd, &binary, c);
220 		if (error2)
221 			goto render;
222 
223 		if (binary)
224 			r = gotweb_reply_file(c, "application/octet-stream",
225 			    qs->file, NULL);
226 		else
227 			r = gotweb_reply(c, 200, "text/plain", NULL);
228 		if (r == -1)
229 			goto done;
230 
231 		for (;;) {
232 			error = got_object_blob_read_block(&len, blob);
233 			if (error)
234 				goto done;
235 			if (len == 0)
236 				break;
237 			buf = got_object_blob_get_read_buf(blob);
238 			if (fcgi_gen_binary_response(c, buf, len) == -1)
239 				goto done;
240 		}
241 
242 		goto done;
243 	}
244 
245 	if (qs->action == BLOB) {
246 		int binary;
247 		struct gotweb_url url = {
248 			.index_page = -1,
249 			.page = -1,
250 			.action = BLOBRAW,
251 			.path = qs->path,
252 			.commit = qs->commit,
253 			.folder = qs->folder,
254 			.file = qs->file,
255 		};
256 
257 		error = got_get_repo_commits(c, 1);
258 		if (error)
259 			goto done;
260 
261 		error2 = got_open_blob_for_output(&blob, &fd, &binary, c);
262 		if (error2)
263 			goto render;
264 		if (binary) {
265 			gotweb_reply(c, 302, NULL, &url);
266 			goto done;
267 		}
268 	}
269 
270 	if (qs->action == RSS) {
271 		const char *ctype = "application/rss+xml;charset=utf-8";
272 
273 		if (gotweb_reply_file(c, ctype, repo_dir->name, ".rss") == -1)
274 			goto done;
275 
276 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
277 		if (error) {
278 			log_warnx("%s: %s", __func__, error->msg);
279 			goto err;
280 		}
281 		if (gotweb_render_rss(c->tp) == -1)
282 			goto err;
283 		goto done;
284 	}
285 
286 render:
287 	if (gotweb_reply(c, 200, "text/html", NULL) == -1)
288 		goto done;
289 	html = 1;
290 
291 	if (gotweb_render_header(c->tp) == -1)
292 		goto err;
293 
294 	if (error2) {
295 		error = error2;
296 		goto err;
297 	}
298 
299 	switch(qs->action) {
300 	case BLAME:
301 		error = got_get_repo_commits(c, 1);
302 		if (error) {
303 			log_warnx("%s: %s", __func__, error->msg);
304 			goto err;
305 		}
306 		if (gotweb_render_blame(c->tp) == -1)
307 			goto done;
308 		break;
309 	case BLOB:
310 		if (gotweb_render_blob(c->tp, blob) == -1)
311 			goto err;
312 		break;
313 	case BRIEFS:
314 		if (gotweb_render_briefs(c->tp) == -1)
315 			goto err;
316 		break;
317 	case COMMITS:
318 		error = got_get_repo_commits(c, srv->max_commits_display);
319 		if (error) {
320 			log_warnx("%s: %s", __func__, error->msg);
321 			goto err;
322 		}
323 		if (gotweb_render_commits(c->tp) == -1)
324 			goto err;
325 		break;
326 	case DIFF:
327 		error = got_get_repo_commits(c, 1);
328 		if (error) {
329 			log_warnx("%s: %s", __func__, error->msg);
330 			goto err;
331 		}
332 		error = got_open_diff_for_output(&fp, &fd, c);
333 		if (error) {
334 			log_warnx("%s: %s", __func__, error->msg);
335 			goto err;
336 		}
337 		if (gotweb_render_diff(c->tp, fp) == -1)
338 			goto err;
339 		break;
340 	case INDEX:
341 		error = gotweb_render_index(c);
342 		if (error) {
343 			log_warnx("%s: %s", __func__, error->msg);
344 			goto err;
345 		}
346 		break;
347 	case SUMMARY:
348 		error = got_ref_list(&refs, c->t->repo, "refs/heads",
349 		    got_ref_cmp_by_name, NULL);
350 		if (error) {
351 			log_warnx("%s: got_ref_list: %s", __func__,
352 			    error->msg);
353 			goto err;
354 		}
355 		qs->action = TAGS;
356 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
357 		if (error) {
358 			log_warnx("%s: got_get_repo_tags: %s", __func__,
359 			    error->msg);
360 			goto err;
361 		}
362 		qs->action = SUMMARY;
363 		if (gotweb_render_summary(c->tp, &refs) == -1)
364 			goto done;
365 		break;
366 	case TAG:
367 		error = got_get_repo_tags(c, 1);
368 		if (error) {
369 			log_warnx("%s: %s", __func__, error->msg);
370 			goto err;
371 		}
372 		if (c->t->tag_count == 0) {
373 			error = got_error_msg(GOT_ERR_BAD_OBJ_ID,
374 			    "bad commit id");
375 			goto err;
376 		}
377 		if (gotweb_render_tag(c->tp) == -1)
378 			goto done;
379 		break;
380 	case TAGS:
381 		error = got_get_repo_tags(c, srv->max_commits_display);
382 		if (error) {
383 			log_warnx("%s: %s", __func__, error->msg);
384 			goto err;
385 		}
386 		if (gotweb_render_tags(c->tp) == -1)
387 			goto done;
388 		break;
389 	case TREE:
390 		error = got_get_repo_commits(c, 1);
391 		if (error) {
392 			log_warnx("%s: %s", __func__, error->msg);
393 			goto err;
394 		}
395 		if (gotweb_render_tree(c->tp) == -1)
396 			goto err;
397 		break;
398 	case ERR:
399 	default:
400 		r = fcgi_printf(c, "<div id='err_content'>%s</div>\n",
401 		    "Erorr: Bad Querystring");
402 		if (r == -1)
403 			goto err;
404 		break;
405 	}
406 
407 	goto done;
408 err:
409 	if (html && fcgi_printf(c, "<div id='err_content'>") == -1)
410 		return;
411 	if (fcgi_printf(c, "\n%s", err) == -1)
412 		return;
413 	if (error) {
414 		if (fcgi_printf(c, "%s", error->msg) == -1)
415 			return;
416 	} else {
417 		if (fcgi_printf(c, "see daemon logs for details") == -1)
418 			return;
419 	}
420 	if (html && fcgi_printf(c, "</div>\n") == -1)
421 		return;
422 done:
423 	if (blob)
424 		got_object_blob_close(blob);
425 	if (fp) {
426 		error = got_gotweb_flushfile(fp, fd);
427 		if (error)
428 			log_warnx("%s: got_gotweb_flushfile failure: %s",
429 			    __func__, error->msg);
430 		fd = -1;
431 	}
432 	if (fd != -1)
433 		close(fd);
434 	if (html && srv != NULL)
435 		gotweb_render_footer(c->tp);
436 
437 	got_ref_list_free(&refs);
438 }
439 
440 struct server *
441 gotweb_get_server(uint8_t *server_name, uint8_t *subdomain)
442 {
443 	struct server *srv = NULL;
444 
445 	/* check against the server name first */
446 	if (strlen(server_name) > 0)
447 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
448 			if (strcmp(srv->name, server_name) == 0)
449 				goto done;
450 
451 	/* check against subdomain second */
452 	if (strlen(subdomain) > 0)
453 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
454 			if (strcmp(srv->name, subdomain) == 0)
455 				goto done;
456 
457 	/* if those fail, send first server */
458 	TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
459 		if (srv != NULL)
460 			break;
461 done:
462 	return srv;
463 };
464 
465 const struct got_error *
466 gotweb_init_transport(struct transport **t)
467 {
468 	const struct got_error *error = NULL;
469 
470 	*t = calloc(1, sizeof(**t));
471 	if (*t == NULL)
472 		return got_error_from_errno2("%s: calloc", __func__);
473 
474 	TAILQ_INIT(&(*t)->repo_commits);
475 	TAILQ_INIT(&(*t)->repo_tags);
476 
477 	(*t)->repo = NULL;
478 	(*t)->repo_dir = NULL;
479 	(*t)->qs = NULL;
480 	(*t)->next_id = NULL;
481 	(*t)->prev_id = NULL;
482 	(*t)->next_disp = 0;
483 	(*t)->prev_disp = 0;
484 
485 	return error;
486 }
487 
488 static const struct got_error *
489 gotweb_init_querystring(struct querystring **qs)
490 {
491 	const struct got_error *error = NULL;
492 
493 	*qs = calloc(1, sizeof(**qs));
494 	if (*qs == NULL)
495 		return got_error_from_errno2("%s: calloc", __func__);
496 
497 	(*qs)->headref = strdup("HEAD");
498 	if ((*qs)->headref == NULL) {
499 		free(*qs);
500 		*qs = NULL;
501 		return got_error_from_errno2("%s: strdup", __func__);
502 	}
503 
504 	(*qs)->action = INDEX;
505 	(*qs)->commit = NULL;
506 	(*qs)->file = NULL;
507 	(*qs)->folder = NULL;
508 	(*qs)->index_page = 0;
509 	(*qs)->path = NULL;
510 
511 	return error;
512 }
513 
514 static const struct got_error *
515 gotweb_parse_querystring(struct querystring **qs, char *qst)
516 {
517 	const struct got_error *error = NULL;
518 	char *tok1 = NULL, *tok1_pair = NULL, *tok1_end = NULL;
519 	char *tok2 = NULL, *tok2_pair = NULL, *tok2_end = NULL;
520 
521 	if (qst == NULL)
522 		return error;
523 
524 	tok1 = strdup(qst);
525 	if (tok1 == NULL)
526 		return got_error_from_errno2("%s: strdup", __func__);
527 
528 	tok1_pair = tok1;
529 	tok1_end = tok1;
530 
531 	while (tok1_pair != NULL) {
532 		strsep(&tok1_end, "&");
533 
534 		tok2 = strdup(tok1_pair);
535 		if (tok2 == NULL) {
536 			free(tok1);
537 			return got_error_from_errno2("%s: strdup", __func__);
538 		}
539 
540 		tok2_pair = tok2;
541 		tok2_end = tok2;
542 
543 		while (tok2_pair != NULL) {
544 			strsep(&tok2_end, "=");
545 			if (tok2_end) {
546 				error = gotweb_assign_querystring(qs, tok2_pair,
547 				    tok2_end);
548 				if (error)
549 					goto err;
550 			}
551 			tok2_pair = tok2_end;
552 		}
553 		free(tok2);
554 		tok1_pair = tok1_end;
555 	}
556 	free(tok1);
557 	return error;
558 err:
559 	free(tok2);
560 	free(tok1);
561 	return error;
562 }
563 
564 /*
565  * Adapted from usr.sbin/httpd/httpd.c url_decode.
566  */
567 static const struct got_error *
568 gotweb_urldecode(char *url)
569 {
570 	char		*p, *q;
571 	char		 hex[3];
572 	unsigned long	 x;
573 
574 	hex[2] = '\0';
575 	p = q = url;
576 
577 	while (*p != '\0') {
578 		switch (*p) {
579 		case '%':
580 			/* Encoding character is followed by two hex chars */
581 			if (!isxdigit((unsigned char)p[1]) ||
582 			    !isxdigit((unsigned char)p[2]) ||
583 			    (p[1] == '0' && p[2] == '0'))
584 				return got_error(GOT_ERR_BAD_QUERYSTRING);
585 
586 			hex[0] = p[1];
587 			hex[1] = p[2];
588 
589 			/*
590 			 * We don't have to validate "hex" because it is
591 			 * guaranteed to include two hex chars followed by nul.
592 			 */
593 			x = strtoul(hex, NULL, 16);
594 			*q = (char)x;
595 			p += 2;
596 			break;
597 		default:
598 			*q = *p;
599 			break;
600 		}
601 		p++;
602 		q++;
603 	}
604 	*q = '\0';
605 
606 	return NULL;
607 }
608 
609 static const struct got_error *
610 gotweb_assign_querystring(struct querystring **qs, char *key, char *value)
611 {
612 	const struct got_error *error = NULL;
613 	const char *errstr;
614 	int a_cnt, el_cnt;
615 
616 	error = gotweb_urldecode(value);
617 	if (error)
618 		return error;
619 
620 	for (el_cnt = 0; el_cnt < QSELEM__MAX; el_cnt++) {
621 		if (strcmp(key, querystring_keys[el_cnt].name) != 0)
622 			continue;
623 
624 		switch (querystring_keys[el_cnt].element) {
625 		case ACTION:
626 			for (a_cnt = 0; a_cnt < ACTIONS__MAX; a_cnt++) {
627 				if (strcmp(value, action_keys[a_cnt].name) != 0)
628 					continue;
629 				else if (strcmp(value,
630 				    action_keys[a_cnt].name) == 0){
631 					(*qs)->action =
632 					    action_keys[a_cnt].action;
633 					goto qa_found;
634 				}
635 			}
636 			(*qs)->action = ERR;
637 qa_found:
638 			break;
639 		case COMMIT:
640 			(*qs)->commit = strdup(value);
641 			if ((*qs)->commit == NULL) {
642 				error = got_error_from_errno2("%s: strdup",
643 				    __func__);
644 				goto done;
645 			}
646 			break;
647 		case RFILE:
648 			(*qs)->file = strdup(value);
649 			if ((*qs)->file == NULL) {
650 				error = got_error_from_errno2("%s: strdup",
651 				    __func__);
652 				goto done;
653 			}
654 			break;
655 		case FOLDER:
656 			(*qs)->folder = strdup(value);
657 			if ((*qs)->folder == NULL) {
658 				error = got_error_from_errno2("%s: strdup",
659 				    __func__);
660 				goto done;
661 			}
662 			break;
663 		case HEADREF:
664 			free((*qs)->headref);
665 			(*qs)->headref = strdup(value);
666 			if ((*qs)->headref == NULL) {
667 				error = got_error_from_errno2("%s: strdup",
668 				    __func__);
669 				goto done;
670 			}
671 			break;
672 		case INDEX_PAGE:
673 			if (strlen(value) == 0)
674 				break;
675 			(*qs)->index_page = strtonum(value, INT64_MIN,
676 			    INT64_MAX, &errstr);
677 			if (errstr) {
678 				error = got_error_from_errno3("%s: strtonum %s",
679 				    __func__, errstr);
680 				goto done;
681 			}
682 			if ((*qs)->index_page < 0)
683 				(*qs)->index_page = 0;
684 			break;
685 		case PATH:
686 			(*qs)->path = strdup(value);
687 			if ((*qs)->path == NULL) {
688 				error = got_error_from_errno2("%s: strdup",
689 				    __func__);
690 				goto done;
691 			}
692 			break;
693 		case PAGE:
694 			if (strlen(value) == 0)
695 				break;
696 			(*qs)->page = strtonum(value, INT64_MIN,
697 			    INT64_MAX, &errstr);
698 			if (errstr) {
699 				error = got_error_from_errno3("%s: strtonum %s",
700 				    __func__, errstr);
701 				goto done;
702 			}
703 			if ((*qs)->page < 0)
704 				(*qs)->page = 0;
705 			break;
706 		default:
707 			break;
708 		}
709 	}
710 done:
711 	return error;
712 }
713 
714 void
715 gotweb_free_repo_tag(struct repo_tag *rt)
716 {
717 	if (rt != NULL) {
718 		free(rt->commit_id);
719 		free(rt->tag_name);
720 		free(rt->tag_commit);
721 		free(rt->commit_msg);
722 		free(rt->tagger);
723 	}
724 	free(rt);
725 }
726 
727 void
728 gotweb_free_repo_commit(struct repo_commit *rc)
729 {
730 	if (rc != NULL) {
731 		free(rc->path);
732 		free(rc->refs_str);
733 		free(rc->commit_id);
734 		free(rc->parent_id);
735 		free(rc->tree_id);
736 		free(rc->author);
737 		free(rc->committer);
738 		free(rc->commit_msg);
739 	}
740 	free(rc);
741 }
742 
743 static void
744 gotweb_free_querystring(struct querystring *qs)
745 {
746 	if (qs != NULL) {
747 		free(qs->commit);
748 		free(qs->file);
749 		free(qs->folder);
750 		free(qs->headref);
751 		free(qs->path);
752 	}
753 	free(qs);
754 }
755 
756 static void
757 gotweb_free_repo_dir(struct repo_dir *repo_dir)
758 {
759 	if (repo_dir != NULL) {
760 		free(repo_dir->name);
761 		free(repo_dir->owner);
762 		free(repo_dir->description);
763 		free(repo_dir->url);
764 		free(repo_dir->path);
765 	}
766 	free(repo_dir);
767 }
768 
769 void
770 gotweb_free_transport(struct transport *t)
771 {
772 	struct repo_commit *rc = NULL, *trc = NULL;
773 	struct repo_tag *rt = NULL, *trt = NULL;
774 
775 	TAILQ_FOREACH_SAFE(rc, &t->repo_commits, entry, trc) {
776 		TAILQ_REMOVE(&t->repo_commits, rc, entry);
777 		gotweb_free_repo_commit(rc);
778 	}
779 	TAILQ_FOREACH_SAFE(rt, &t->repo_tags, entry, trt) {
780 		TAILQ_REMOVE(&t->repo_tags, rt, entry);
781 		gotweb_free_repo_tag(rt);
782 	}
783 	gotweb_free_repo_dir(t->repo_dir);
784 	gotweb_free_querystring(t->qs);
785 	free(t->more_id);
786 	free(t->next_id);
787 	free(t->prev_id);
788 	free(t);
789 }
790 
791 void
792 gotweb_get_navs(struct request *c, struct gotweb_url *prev, int *have_prev,
793     struct gotweb_url *next, int *have_next)
794 {
795 	struct transport *t = c->t;
796 	struct querystring *qs = t->qs;
797 	struct server *srv = c->srv;
798 
799 	*have_prev = *have_next = 0;
800 
801 	switch(qs->action) {
802 	case INDEX:
803 		if (qs->index_page > 0) {
804 			*have_prev = 1;
805 			*prev = (struct gotweb_url){
806 				.action = -1,
807 				.index_page = qs->index_page - 1,
808 				.page = -1,
809 			};
810 		}
811 		if (t->next_disp == srv->max_repos_display &&
812 		    t->repos_total != (qs->index_page + 1) *
813 		    srv->max_repos_display) {
814 			*have_next = 1;
815 			*next = (struct gotweb_url){
816 				.action = -1,
817 				.index_page = qs->index_page + 1,
818 				.page = -1,
819 			};
820 		}
821 		break;
822 	case TAGS:
823 		if (t->prev_id && qs->commit != NULL &&
824 		    strcmp(qs->commit, t->prev_id) != 0) {
825 			*have_prev = 1;
826 			*prev = (struct gotweb_url){
827 				.action = TAGS,
828 				.index_page = -1,
829 				.page = qs->page - 1,
830 				.path = qs->path,
831 				.commit = t->prev_id,
832 				.headref = qs->headref,
833 			};
834 		}
835 		if (t->next_id) {
836 			*have_next = 1;
837 			*next = (struct gotweb_url){
838 				.action = TAGS,
839 				.index_page = -1,
840 				.page = qs->page + 1,
841 				.path = qs->path,
842 				.commit = t->next_id,
843 				.headref = qs->headref,
844 			};
845 		}
846 		break;
847 	}
848 }
849 
850 static const struct got_error *
851 gotweb_render_index(struct request *c)
852 {
853 	const struct got_error *error = NULL;
854 	struct server *srv = c->srv;
855 	struct transport *t = c->t;
856 	struct querystring *qs = t->qs;
857 	struct repo_dir *repo_dir = NULL;
858 	DIR *d;
859 	struct dirent **sd_dent = NULL;
860 	unsigned int d_cnt, d_i, d_disp = 0;
861 	unsigned int d_skipped = 0;
862 	int type;
863 
864 	d = opendir(srv->repos_path);
865 	if (d == NULL) {
866 		error = got_error_from_errno2("opendir", srv->repos_path);
867 		return error;
868 	}
869 
870 	d_cnt = scandir(srv->repos_path, &sd_dent, NULL, alphasort);
871 	if (d_cnt == -1) {
872 		sd_dent = NULL;
873 		error = got_error_from_errno2("scandir", srv->repos_path);
874 		goto done;
875 	}
876 
877 	if (gotweb_render_repo_table_hdr(c->tp) == -1)
878 		goto done;
879 
880 	for (d_i = 0; d_i < d_cnt; d_i++) {
881 		if (srv->max_repos > 0 && t->prev_disp == srv->max_repos)
882 			break;
883 
884 		if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
885 		    strcmp(sd_dent[d_i]->d_name, "..") == 0) {
886 			d_skipped++;
887 			continue;
888 		}
889 
890 		error = got_path_dirent_type(&type, srv->repos_path,
891 		    sd_dent[d_i]);
892 		if (error)
893 			goto done;
894 		if (type != DT_DIR) {
895 			d_skipped++;
896 			continue;
897 		}
898 
899 		if (qs->index_page > 0 && (qs->index_page *
900 		    srv->max_repos_display) > t->prev_disp) {
901 			t->prev_disp++;
902 			continue;
903 		}
904 
905 		error = gotweb_init_repo_dir(&repo_dir, sd_dent[d_i]->d_name);
906 		if (error)
907 			goto done;
908 
909 		error = gotweb_load_got_path(c, repo_dir);
910 		if (error && error->code == GOT_ERR_NOT_GIT_REPO) {
911 			error = NULL;
912 			gotweb_free_repo_dir(repo_dir);
913 			repo_dir = NULL;
914 			d_skipped++;
915 			continue;
916 		}
917 		if (error && error->code != GOT_ERR_LONELY_PACKIDX)
918 			goto done;
919 
920 		d_disp++;
921 		t->prev_disp++;
922 
923 		if (gotweb_render_repo_fragment(c->tp, repo_dir) == -1)
924 			goto done;
925 
926 		gotweb_free_repo_dir(repo_dir);
927 		repo_dir = NULL;
928 		t->next_disp++;
929 		if (d_disp == srv->max_repos_display)
930 			break;
931 	}
932 	t->repos_total = d_cnt - d_skipped;
933 
934 	if (srv->max_repos_display == 0)
935 		goto done;
936 	if (srv->max_repos > 0 && srv->max_repos < srv->max_repos_display)
937 		goto done;
938 	if (t->repos_total <= srv->max_repos ||
939 	    t->repos_total <= srv->max_repos_display)
940 		goto done;
941 
942 	if (gotweb_render_navs(c->tp) == -1)
943 		goto done;
944 done:
945 	if (sd_dent) {
946 		for (d_i = 0; d_i < d_cnt; d_i++)
947 			free(sd_dent[d_i]);
948 		free(sd_dent);
949 	}
950 	if (d != NULL && closedir(d) == EOF && error == NULL)
951 		error = got_error_from_errno("closedir");
952 	return error;
953 }
954 
955 static inline int
956 should_urlencode(int c)
957 {
958 	if (c <= ' ' || c >= 127)
959 		return 1;
960 
961 	switch (c) {
962 		/* gen-delim */
963 	case ':':
964 	case '/':
965 	case '?':
966 	case '#':
967 	case '[':
968 	case ']':
969 	case '@':
970 		/* sub-delims */
971 	case '!':
972 	case '$':
973 	case '&':
974 	case '\'':
975 	case '(':
976 	case ')':
977 	case '*':
978 	case '+':
979 	case ',':
980 	case ';':
981 	case '=':
982 		/* needed because the URLs are embedded into the HTML */
983 	case '\"':
984 		return 1;
985 	default:
986 		return 0;
987 	}
988 }
989 
990 static char *
991 gotweb_urlencode(const char *str)
992 {
993 	const char *s;
994 	char *escaped;
995 	size_t i, len;
996 	int a, b;
997 
998 	len = 0;
999 	for (s = str; *s; ++s) {
1000 		len++;
1001 		if (should_urlencode(*s))
1002 			len += 2;
1003 	}
1004 
1005 	escaped = calloc(1, len + 1);
1006 	if (escaped == NULL)
1007 		return NULL;
1008 
1009 	i = 0;
1010 	for (s = str; *s; ++s) {
1011 		if (should_urlencode(*s)) {
1012 			a = (*s & 0xF0) >> 4;
1013 			b = (*s & 0x0F);
1014 
1015 			escaped[i++] = '%';
1016 			escaped[i++] = a <= 9 ? ('0' + a) : ('7' + a);
1017 			escaped[i++] = b <= 9 ? ('0' + b) : ('7' + b);
1018 		} else
1019 			escaped[i++] = *s;
1020 	}
1021 
1022 	return escaped;
1023 }
1024 
1025 const char *
1026 gotweb_action_name(int action)
1027 {
1028 	switch (action) {
1029 	case BLAME:
1030 		return "blame";
1031 	case BLOB:
1032 		return "blob";
1033 	case BLOBRAW:
1034 		return "blobraw";
1035 	case BRIEFS:
1036 		return "briefs";
1037 	case COMMITS:
1038 		return "commits";
1039 	case DIFF:
1040 		return "diff";
1041 	case ERR:
1042 		return "err";
1043 	case INDEX:
1044 		return "index";
1045 	case SUMMARY:
1046 		return "summary";
1047 	case TAG:
1048 		return "tag";
1049 	case TAGS:
1050 		return "tags";
1051 	case TREE:
1052 		return "tree";
1053 	case RSS:
1054 		return "rss";
1055 	default:
1056 		return NULL;
1057 	}
1058 }
1059 
1060 int
1061 gotweb_render_url(struct request *c, struct gotweb_url *url)
1062 {
1063 	const char *sep = "?", *action;
1064 	char *tmp;
1065 	int r;
1066 
1067 	action = gotweb_action_name(url->action);
1068 	if (action != NULL) {
1069 		if (fcgi_printf(c, "?action=%s", action) == -1)
1070 			return -1;
1071 		sep = "&";
1072 	}
1073 
1074 	if (url->commit) {
1075 		if (fcgi_printf(c, "%scommit=%s", sep, url->commit) == -1)
1076 			return -1;
1077 		sep = "&";
1078 	}
1079 
1080 	if (url->previd) {
1081 		if (fcgi_printf(c, "%sprevid=%s", sep, url->previd) == -1)
1082 			return -1;
1083 		sep = "&";
1084 	}
1085 
1086 	if (url->prevset) {
1087 		if (fcgi_printf(c, "%sprevset=%s", sep, url->prevset) == -1)
1088 			return -1;
1089 		sep = "&";
1090 	}
1091 
1092 	if (url->file) {
1093 		tmp = gotweb_urlencode(url->file);
1094 		if (tmp == NULL)
1095 			return -1;
1096 		r = fcgi_printf(c, "%sfile=%s", sep, tmp);
1097 		free(tmp);
1098 		if (r == -1)
1099 			return -1;
1100 		sep = "&";
1101 	}
1102 
1103 	if (url->folder) {
1104 		tmp = gotweb_urlencode(url->folder);
1105 		if (tmp == NULL)
1106 			return -1;
1107 		r = fcgi_printf(c, "%sfolder=%s", sep, tmp);
1108 		free(tmp);
1109 		if (r == -1)
1110 			return -1;
1111 		sep = "&";
1112 	}
1113 
1114 	if (url->headref) {
1115 		tmp = gotweb_urlencode(url->headref);
1116 		if (tmp == NULL)
1117 			return -1;
1118 		r = fcgi_printf(c, "%sheadref=%s", sep, url->headref);
1119 		free(tmp);
1120 		if (r == -1)
1121 			return -1;
1122 		sep = "&";
1123 	}
1124 
1125 	if (url->index_page != -1) {
1126 		if (fcgi_printf(c, "%sindex_page=%d", sep,
1127 		    url->index_page) == -1)
1128 			return -1;
1129 		sep = "&";
1130 	}
1131 
1132 	if (url->path) {
1133 		tmp = gotweb_urlencode(url->path);
1134 		if (tmp == NULL)
1135 			return -1;
1136 		r = fcgi_printf(c, "%spath=%s", sep, tmp);
1137 		free(tmp);
1138 		if (r == -1)
1139 			return -1;
1140 		sep = "&";
1141 	}
1142 
1143 	if (url->page != -1) {
1144 		if (fcgi_printf(c, "%spage=%d", sep, url->page) == -1)
1145 			return -1;
1146 		sep = "&";
1147 	}
1148 
1149 	return 0;
1150 }
1151 
1152 int
1153 gotweb_render_absolute_url(struct request *c, struct gotweb_url *url)
1154 {
1155 	struct template	*tp = c->tp;
1156 	const char	*proto = c->https ? "https" : "http";
1157 
1158 	if (fcgi_puts(tp, proto) == -1 ||
1159 	    fcgi_puts(tp, "://") == -1 ||
1160 	    tp_htmlescape(tp, c->server_name) == -1 ||
1161 	    tp_htmlescape(tp, c->document_uri) == -1)
1162 		return -1;
1163 
1164 	return gotweb_render_url(c, url);
1165 }
1166 
1167 static struct got_repository *
1168 find_cached_repo(struct server *srv, const char *path)
1169 {
1170 	int i;
1171 
1172 	for (i = 0; i < srv->ncached_repos; i++) {
1173 		if (strcmp(srv->cached_repos[i].path, path) == 0)
1174 			return srv->cached_repos[i].repo;
1175 	}
1176 
1177 	return NULL;
1178 }
1179 
1180 static const struct got_error *
1181 cache_repo(struct got_repository **new, struct server *srv,
1182     struct repo_dir *repo_dir, struct socket *sock)
1183 {
1184 	const struct got_error *error = NULL;
1185 	struct got_repository *repo;
1186 	struct cached_repo *cr;
1187 	int evicted = 0;
1188 
1189 	if (srv->ncached_repos >= GOTWEBD_REPO_CACHESIZE) {
1190 		cr = &srv->cached_repos[srv->ncached_repos - 1];
1191 		error = got_repo_close(cr->repo);
1192 		memset(cr, 0, sizeof(*cr));
1193 		srv->ncached_repos--;
1194 		if (error)
1195 			return error;
1196 		memmove(&srv->cached_repos[1], &srv->cached_repos[0],
1197 		    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1198 		cr = &srv->cached_repos[0];
1199 		evicted = 1;
1200 	} else {
1201 		cr = &srv->cached_repos[srv->ncached_repos];
1202 	}
1203 
1204 	error = got_repo_open(&repo, repo_dir->path, NULL, sock->pack_fds);
1205 	if (error) {
1206 		if (evicted) {
1207 			memmove(&srv->cached_repos[0], &srv->cached_repos[1],
1208 			    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1209 		}
1210 		return error;
1211 	}
1212 
1213 	if (strlcpy(cr->path, repo_dir->path, sizeof(cr->path))
1214 	    >= sizeof(cr->path)) {
1215 		if (evicted) {
1216 			memmove(&srv->cached_repos[0], &srv->cached_repos[1],
1217 			    srv->ncached_repos * sizeof(srv->cached_repos[0]));
1218 		}
1219 		return got_error(GOT_ERR_NO_SPACE);
1220 	}
1221 
1222 	cr->repo = repo;
1223 	srv->ncached_repos++;
1224 	*new = repo;
1225 	return NULL;
1226 }
1227 
1228 static const struct got_error *
1229 gotweb_load_got_path(struct request *c, struct repo_dir *repo_dir)
1230 {
1231 	const struct got_error *error = NULL;
1232 	struct socket *sock = c->sock;
1233 	struct server *srv = c->srv;
1234 	struct transport *t = c->t;
1235 	struct got_repository *repo = NULL;
1236 	DIR *dt;
1237 	char *dir_test;
1238 
1239 	if (asprintf(&dir_test, "%s/%s/%s", srv->repos_path, repo_dir->name,
1240 	    GOTWEB_GIT_DIR) == -1)
1241 		return got_error_from_errno("asprintf");
1242 
1243 	dt = opendir(dir_test);
1244 	if (dt == NULL) {
1245 		free(dir_test);
1246 	} else {
1247 		repo_dir->path = dir_test;
1248 		dir_test = NULL;
1249 		goto done;
1250 	}
1251 
1252 	if (asprintf(&dir_test, "%s/%s", srv->repos_path,
1253 	    repo_dir->name) == -1)
1254 		return got_error_from_errno("asprintf");
1255 
1256 	dt = opendir(dir_test);
1257 	if (dt == NULL) {
1258 		error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
1259 		goto err;
1260 	} else {
1261 		repo_dir->path = dir_test;
1262 		dir_test = NULL;
1263 	}
1264 
1265 done:
1266 	if (srv->respect_exportok &&
1267 	    faccessat(dirfd(dt), "git-daemon-export-ok", F_OK, 0) == -1) {
1268 		error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
1269 		goto err;
1270 	}
1271 
1272 	repo = find_cached_repo(srv, repo_dir->path);
1273 	if (repo == NULL) {
1274 		error = cache_repo(&repo, srv, repo_dir, sock);
1275 		if (error)
1276 			goto err;
1277 	}
1278 	t->repo = repo;
1279 	error = gotweb_get_repo_description(&repo_dir->description, srv,
1280 	    repo_dir->path, dirfd(dt));
1281 	if (error)
1282 		goto err;
1283 	error = got_get_repo_owner(&repo_dir->owner, c);
1284 	if (error)
1285 		goto err;
1286 	error = got_get_repo_age(&repo_dir->age, c, NULL);
1287 	if (error)
1288 		goto err;
1289 	error = gotweb_get_clone_url(&repo_dir->url, srv, repo_dir->path,
1290 	    dirfd(dt));
1291 err:
1292 	free(dir_test);
1293 	if (dt != NULL && closedir(dt) == EOF && error == NULL)
1294 		error = got_error_from_errno("closedir");
1295 	return error;
1296 }
1297 
1298 static const struct got_error *
1299 gotweb_init_repo_dir(struct repo_dir **repo_dir, const char *dir)
1300 {
1301 	const struct got_error *error;
1302 
1303 	*repo_dir = calloc(1, sizeof(**repo_dir));
1304 	if (*repo_dir == NULL)
1305 		return got_error_from_errno("calloc");
1306 
1307 	if (asprintf(&(*repo_dir)->name, "%s", dir) == -1) {
1308 		error = got_error_from_errno("asprintf");
1309 		free(*repo_dir);
1310 		*repo_dir = NULL;
1311 		return error;
1312 	}
1313 	(*repo_dir)->owner = NULL;
1314 	(*repo_dir)->description = NULL;
1315 	(*repo_dir)->url = NULL;
1316 	(*repo_dir)->path = NULL;
1317 
1318 	return NULL;
1319 }
1320 
1321 static const struct got_error *
1322 gotweb_get_repo_description(char **description, struct server *srv,
1323     const char *dirpath, int dir)
1324 {
1325 	const struct got_error *error = NULL;
1326 	struct stat sb;
1327 	int fd = -1;
1328 	off_t len;
1329 
1330 	*description = NULL;
1331 	if (srv->show_repo_description == 0)
1332 		return NULL;
1333 
1334 	fd = openat(dir, "description", O_RDONLY);
1335 	if (fd == -1) {
1336 		if (errno != ENOENT && errno != EACCES) {
1337 			error = got_error_from_errno_fmt("openat %s/%s",
1338 			    dirpath, "description");
1339 		}
1340 		goto done;
1341 	}
1342 
1343 	if (fstat(fd, &sb) == -1) {
1344 		error = got_error_from_errno_fmt("fstat %s/%s",
1345 		    dirpath, "description");
1346 		goto done;
1347 	}
1348 
1349 	len = sb.st_size;
1350 	if (len > GOTWEBD_MAXDESCRSZ - 1)
1351 		len = GOTWEBD_MAXDESCRSZ - 1;
1352 
1353 	*description = calloc(len + 1, sizeof(**description));
1354 	if (*description == NULL) {
1355 		error = got_error_from_errno("calloc");
1356 		goto done;
1357 	}
1358 
1359 	if (read(fd, *description, len) == -1)
1360 		error = got_error_from_errno("read");
1361 done:
1362 	if (fd != -1 && close(fd) == -1 && error == NULL)
1363 		error = got_error_from_errno("close");
1364 	return error;
1365 }
1366 
1367 static const struct got_error *
1368 gotweb_get_clone_url(char **url, struct server *srv, const char *dirpath,
1369     int dir)
1370 {
1371 	const struct got_error *error = NULL;
1372 	struct stat sb;
1373 	int fd = -1;
1374 	off_t len;
1375 
1376 	*url = NULL;
1377 	if (srv->show_repo_cloneurl == 0)
1378 		return NULL;
1379 
1380 	fd = openat(dir, "cloneurl", O_RDONLY);
1381 	if (fd == -1) {
1382 		if (errno != ENOENT && errno != EACCES) {
1383 			error = got_error_from_errno_fmt("openat %s/%s",
1384 			    dirpath, "cloneurl");
1385 		}
1386 		goto done;
1387 	}
1388 
1389 	if (fstat(fd, &sb) == -1) {
1390 		error = got_error_from_errno_fmt("fstat %s/%s",
1391 		    dirpath, "cloneurl");
1392 		goto done;
1393 	}
1394 
1395 	len = sb.st_size;
1396 	if (len > GOTWEBD_MAXCLONEURLSZ - 1)
1397 		len = GOTWEBD_MAXCLONEURLSZ - 1;
1398 
1399 	*url = calloc(len + 1, sizeof(**url));
1400 	if (*url == NULL) {
1401 		error = got_error_from_errno("calloc");
1402 		goto done;
1403 	}
1404 
1405 	if (read(fd, *url, len) == -1)
1406 		error = got_error_from_errno("read");
1407 done:
1408 	if (fd != -1 && close(fd) == -1 && error == NULL)
1409 		error = got_error_from_errno("close");
1410 	return error;
1411 }
1412 
1413 int
1414 gotweb_render_age(struct template *tp, time_t committer_time, int ref_tm)
1415 {
1416 	struct request *c = tp->tp_arg;
1417 	struct tm tm;
1418 	long long diff_time;
1419 	const char *years = "years ago", *months = "months ago";
1420 	const char *weeks = "weeks ago", *days = "days ago";
1421 	const char *hours = "hours ago",  *minutes = "minutes ago";
1422 	const char *seconds = "seconds ago", *now = "right now";
1423 	char *s;
1424 	char datebuf[64];
1425 	size_t r;
1426 
1427 	switch (ref_tm) {
1428 	case TM_DIFF:
1429 		diff_time = time(NULL) - committer_time;
1430 		if (diff_time > 60 * 60 * 24 * 365 * 2) {
1431 			if (fcgi_printf(c, "%lld %s",
1432 			    (diff_time / 60 / 60 / 24 / 365), years) == -1)
1433 				return -1;
1434 		} else if (diff_time > 60 * 60 * 24 * (365 / 12) * 2) {
1435 			if (fcgi_printf(c, "%lld %s",
1436 			    (diff_time / 60 / 60 / 24 / (365 / 12)),
1437 			    months) == -1)
1438 				return -1;
1439 		} else if (diff_time > 60 * 60 * 24 * 7 * 2) {
1440 			if (fcgi_printf(c, "%lld %s",
1441 			    (diff_time / 60 / 60 / 24 / 7), weeks) == -1)
1442 				return -1;
1443 		} else if (diff_time > 60 * 60 * 24 * 2) {
1444 			if (fcgi_printf(c, "%lld %s",
1445 			    (diff_time / 60 / 60 / 24), days) == -1)
1446 				return -1;
1447 		} else if (diff_time > 60 * 60 * 2) {
1448 			if (fcgi_printf(c, "%lld %s",
1449 			    (diff_time / 60 / 60), hours) == -1)
1450 				return -1;
1451 		} else if (diff_time > 60 * 2) {
1452 			if (fcgi_printf(c, "%lld %s", (diff_time / 60),
1453 			    minutes) == -1)
1454 				return -1;
1455 		} else if (diff_time > 2) {
1456 			if (fcgi_printf(c, "%lld %s", diff_time,
1457 			    seconds) == -1)
1458 				return -1;
1459 		} else {
1460 			if (fcgi_puts(tp, now) == -1)
1461 				return -1;
1462 		}
1463 		break;
1464 	case TM_LONG:
1465 		if (gmtime_r(&committer_time, &tm) == NULL)
1466 			return -1;
1467 
1468 		s = asctime_r(&tm, datebuf);
1469 		if (s == NULL)
1470 			return -1;
1471 
1472 		if (fcgi_puts(tp, datebuf) == -1 ||
1473 		    fcgi_puts(tp, " UTC") == -1)
1474 			return -1;
1475 		break;
1476 	case TM_RFC822:
1477 		if (gmtime_r(&committer_time, &tm) == NULL)
1478 			return -1;
1479 
1480 		r = strftime(datebuf, sizeof(datebuf),
1481 		    "%a, %d %b %Y %H:%M:%S GMT", &tm);
1482 		if (r == 0)
1483 			return -1;
1484 
1485 		if (fcgi_puts(tp, datebuf) == -1)
1486 			return -1;
1487 		break;
1488 	}
1489 	return 0;
1490 }