bail out on unsupported Expect: headers
[project/uhttpd.git] / client.c
1 /*
2 * uhttpd - Tiny single-threaded httpd
3 *
4 * Copyright (C) 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
5 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 */
19
20 #include <libubox/blobmsg.h>
21 #include <ctype.h>
22
23 #include "uhttpd.h"
24
25 static LIST_HEAD(clients);
26
27 int n_clients = 0;
28 struct config conf = {};
29
30 const char * const http_versions[] = {
31 [UH_HTTP_VER_0_9] = "HTTP/0.9",
32 [UH_HTTP_VER_1_0] = "HTTP/1.0",
33 [UH_HTTP_VER_1_1] = "HTTP/1.1",
34 };
35
36 const char * const http_methods[] = {
37 [UH_HTTP_MSG_GET] = "GET",
38 [UH_HTTP_MSG_POST] = "POST",
39 [UH_HTTP_MSG_HEAD] = "HEAD",
40 };
41
42 void uh_http_header(struct client *cl, int code, const char *summary)
43 {
44 const char *enc = "Transfer-Encoding: chunked\r\n";
45 const char *conn;
46
47 if (!uh_use_chunked(cl))
48 enc = "";
49
50 if (cl->request.version != UH_HTTP_VER_1_1)
51 conn = "Connection: close";
52 else
53 conn = "Connection: keep-alive";
54
55 ustream_printf(cl->us, "%s %03i %s\r\n%s\r\n%s",
56 http_versions[cl->request.version],
57 code, summary, conn, enc);
58 }
59
60 static void uh_connection_close(struct client *cl)
61 {
62 cl->state = CLIENT_STATE_CLOSE;
63 cl->us->eof = true;
64 ustream_state_change(cl->us);
65 }
66
67 static void uh_dispatch_done(struct client *cl)
68 {
69 if (cl->dispatch.free)
70 cl->dispatch.free(cl);
71 }
72
73 void uh_request_done(struct client *cl)
74 {
75 uh_chunk_eof(cl);
76 uh_dispatch_done(cl);
77 cl->us->notify_write = NULL;
78 memset(&cl->dispatch, 0, sizeof(cl->dispatch));
79
80 if (cl->request.version != UH_HTTP_VER_1_1 || !conf.http_keepalive) {
81 uh_connection_close(cl);
82 return;
83 }
84
85 cl->state = CLIENT_STATE_INIT;
86 uloop_timeout_set(&cl->timeout, conf.http_keepalive * 1000);
87 }
88
89 void __printf(4, 5)
90 uh_client_error(struct client *cl, int code, const char *summary, const char *fmt, ...)
91 {
92 va_list arg;
93
94 uh_http_header(cl, code, summary);
95 ustream_printf(cl->us, "Content-Type: text/html\r\n\r\n");
96
97 uh_chunk_printf(cl, "<h1>%s</h1>", summary);
98
99 if (fmt) {
100 va_start(arg, fmt);
101 uh_chunk_vprintf(cl, fmt, arg);
102 va_end(arg);
103 }
104
105 uh_request_done(cl);
106 }
107
108 static void uh_header_error(struct client *cl, int code, const char *summary)
109 {
110 uh_client_error(cl, code, summary, NULL);
111 uh_connection_close(cl);
112 }
113
114 static void client_timeout(struct uloop_timeout *timeout)
115 {
116 struct client *cl = container_of(timeout, struct client, timeout);
117
118 cl->state = CLIENT_STATE_CLOSE;
119 uh_connection_close(cl);
120 }
121
122 static int find_idx(const char * const *list, int max, const char *str)
123 {
124 int i;
125
126 for (i = 0; i < max; i++)
127 if (!strcmp(list[i], str))
128 return i;
129
130 return -1;
131 }
132
133 static int client_parse_request(struct client *cl, char *data)
134 {
135 struct http_request *req = &cl->request;
136 char *type, *path, *version;
137 int h_method, h_version;
138
139 type = strtok(data, " ");
140 path = strtok(NULL, " ");
141 version = strtok(NULL, " ");
142 if (!type || !path || !version)
143 return CLIENT_STATE_DONE;
144
145 memset(&cl->request, 0, sizeof(cl->request));
146 req->url = path;
147
148 h_method = find_idx(http_methods, ARRAY_SIZE(http_methods), type);
149 h_version = find_idx(http_versions, ARRAY_SIZE(http_versions), version);
150 if (h_method < 0 || h_version < 0) {
151 req->version = UH_HTTP_VER_1_0;
152 return CLIENT_STATE_DONE;
153 }
154
155 req->method = h_method;
156 req->version = h_version;
157
158 return CLIENT_STATE_HEADER;
159 }
160
161 static bool client_init_cb(struct client *cl, char *buf, int len)
162 {
163 char *newline;
164
165 newline = strstr(buf, "\r\n");
166 if (!newline)
167 return false;
168
169 *newline = 0;
170 blob_buf_init(&cl->hdr, 0);
171 blobmsg_add_string(&cl->hdr, "REQUEST", buf);
172 ustream_consume(cl->us, newline + 2 - buf);
173 cl->state = client_parse_request(cl, (char *) blobmsg_data(blob_data(cl->hdr.head)));
174 if (cl->state == CLIENT_STATE_DONE)
175 uh_header_error(cl, 400, "Bad Request");
176
177 return true;
178 }
179
180 static bool rfc1918_filter_check(struct client *cl)
181 {
182 if (!conf.rfc1918_filter)
183 return true;
184
185 if (!uh_addr_rfc1918(&cl->peer_addr) || uh_addr_rfc1918(&cl->srv_addr))
186 return true;
187
188 uh_client_error(cl, 403, "Forbidden",
189 "Rejected request from RFC1918 IP "
190 "to public server address");
191 return false;
192 }
193
194 static void client_header_complete(struct client *cl)
195 {
196 if (!rfc1918_filter_check(cl))
197 return;
198
199 if (cl->request.expect_cont)
200 ustream_printf(cl->us, "HTTP/1.1 100 Continue\r\n\r\n");
201
202 uh_handle_request(cl);
203 }
204
205 static void client_parse_header(struct client *cl, char *data)
206 {
207 char *name;
208 char *val;
209
210 if (!*data) {
211 uloop_timeout_cancel(&cl->timeout);
212 cl->state = CLIENT_STATE_DATA;
213 client_header_complete(cl);
214 return;
215 }
216
217 val = uh_split_header(data);
218 if (!val) {
219 cl->state = CLIENT_STATE_DONE;
220 return;
221 }
222
223 for (name = data; *name; name++)
224 if (isupper(*name))
225 *name = tolower(*name);
226
227 if (!strcasecmp(data, "Expect")) {
228 if (!strcasecmp(val, "100-continue"))
229 cl->request.expect_cont = true;
230 else {
231 uh_header_error(cl, 400, "Bad Request");
232 return;
233 }
234 }
235
236
237 blobmsg_add_string(&cl->hdr, data, val);
238
239 cl->state = CLIENT_STATE_HEADER;
240 }
241
242 static bool client_data_cb(struct client *cl, char *buf, int len)
243 {
244 return false;
245 }
246
247 static bool client_header_cb(struct client *cl, char *buf, int len)
248 {
249 char *newline;
250 int line_len;
251
252 newline = strstr(buf, "\r\n");
253 if (!newline)
254 return false;
255
256 *newline = 0;
257 client_parse_header(cl, buf);
258 line_len = newline + 2 - buf;
259 ustream_consume(cl->us, line_len);
260 if (cl->state == CLIENT_STATE_DATA)
261 client_data_cb(cl, newline + 2, len - line_len);
262
263 return true;
264 }
265
266 typedef bool (*read_cb_t)(struct client *cl, char *buf, int len);
267 static read_cb_t read_cbs[] = {
268 [CLIENT_STATE_INIT] = client_init_cb,
269 [CLIENT_STATE_HEADER] = client_header_cb,
270 [CLIENT_STATE_DATA] = client_data_cb,
271 };
272
273 static void client_read_cb(struct client *cl)
274 {
275 struct ustream *us = cl->us;
276 char *str;
277 int len;
278
279 do {
280 str = ustream_get_read_buf(us, &len);
281 if (!str)
282 break;
283
284 if (cl->state >= array_size(read_cbs) || !read_cbs[cl->state])
285 break;
286
287 if (!read_cbs[cl->state](cl, str, len)) {
288 if (len == us->r.buffer_len)
289 uh_header_error(cl, 413, "Request Entity Too Large");
290 break;
291 }
292 } while(1);
293 }
294
295 static void client_close(struct client *cl)
296 {
297 uh_dispatch_done(cl);
298 uloop_timeout_cancel(&cl->timeout);
299 ustream_free(&cl->sfd.stream);
300 close(cl->sfd.fd.fd);
301 list_del(&cl->list);
302 blob_buf_free(&cl->hdr);
303 free(cl);
304
305 uh_unblock_listeners();
306 }
307
308 static void client_ustream_read_cb(struct ustream *s, int bytes)
309 {
310 struct client *cl = container_of(s, struct client, sfd);
311
312 client_read_cb(cl);
313 }
314
315 static void client_ustream_write_cb(struct ustream *s, int bytes)
316 {
317 struct client *cl = container_of(s, struct client, sfd);
318
319 if (cl->dispatch.write_cb)
320 cl->dispatch.write_cb(cl);
321 }
322
323 static void client_notify_state(struct ustream *s)
324 {
325 struct client *cl = container_of(s, struct client, sfd);
326
327 if (!s->write_error) {
328 if (cl->state == CLIENT_STATE_DATA)
329 return;
330
331 if (!s->eof || s->w.data_bytes)
332 return;
333 }
334
335 return client_close(cl);
336 }
337
338 static void set_addr(struct uh_addr *addr, void *src)
339 {
340 struct sockaddr_in *sin = src;
341 struct sockaddr_in6 *sin6 = src;
342
343 addr->family = sin->sin_family;
344 if (addr->family == AF_INET) {
345 addr->port = ntohs(sin->sin_port);
346 memcpy(&addr->in, &sin->sin_addr, sizeof(addr->in));
347 } else {
348 addr->port = ntohs(sin6->sin6_port);
349 memcpy(&addr->in6, &sin6->sin6_addr, sizeof(addr->in6));
350 }
351 }
352
353 void uh_accept_client(int fd)
354 {
355 static struct client *next_client;
356 struct client *cl;
357 unsigned int sl;
358 int sfd;
359 static int client_id = 0;
360 struct sockaddr_in6 addr;
361
362 if (!next_client)
363 next_client = calloc(1, sizeof(*next_client));
364
365 cl = next_client;
366
367 sl = sizeof(addr);
368 sfd = accept(fd, (struct sockaddr *) &addr, &sl);
369 if (sfd < 0)
370 return;
371
372 set_addr(&cl->peer_addr, &addr);
373 sl = sizeof(addr);
374 getsockname(fd, (struct sockaddr *) &addr, &sl);
375 set_addr(&cl->srv_addr, &addr);
376 cl->us = &cl->sfd.stream;
377 cl->us->string_data = true;
378 cl->us->notify_read = client_ustream_read_cb;
379 cl->us->notify_write = client_ustream_write_cb;
380 cl->us->notify_state = client_notify_state;
381 ustream_fd_init(&cl->sfd, sfd);
382
383 cl->timeout.cb = client_timeout;
384 uloop_timeout_set(&cl->timeout, conf.network_timeout * 1000);
385
386 list_add_tail(&cl->list, &clients);
387
388 next_client = NULL;
389 n_clients++;
390 cl->id = client_id++;
391 }
392
393 void uh_close_fds(void)
394 {
395 struct client *cl;
396
397 uloop_done();
398 uh_close_listen_fds();
399 list_for_each_entry(cl, &clients, list) {
400 close(cl->sfd.fd.fd);
401 if (cl->dispatch.close_fds)
402 cl->dispatch.close_fds(cl);
403 }
404 }