Home | History | Annotate | Line # | Download | only in httpd
cgi-bozo.c revision 1.1.1.10
      1  1.1.1.10  mrg /*	$eterna: cgi-bozo.c,v 1.40 2011/11/18 09:21:15 mrg Exp $	*/
      2       1.1  tls 
      3       1.1  tls /*
      4  1.1.1.10  mrg  * Copyright (c) 1997-2011 Matthew R. Green
      5       1.1  tls  * All rights reserved.
      6       1.1  tls  *
      7       1.1  tls  * Redistribution and use in source and binary forms, with or without
      8       1.1  tls  * modification, are permitted provided that the following conditions
      9       1.1  tls  * are met:
     10       1.1  tls  * 1. Redistributions of source code must retain the above copyright
     11       1.1  tls  *    notice, this list of conditions and the following disclaimer.
     12       1.1  tls  * 2. Redistributions in binary form must reproduce the above copyright
     13       1.1  tls  *    notice, this list of conditions and the following disclaimer and
     14       1.1  tls  *    dedication in the documentation and/or other materials provided
     15       1.1  tls  *    with the distribution.
     16       1.1  tls  *
     17       1.1  tls  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     18       1.1  tls  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     19       1.1  tls  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     20       1.1  tls  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     21       1.1  tls  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
     22       1.1  tls  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     23       1.1  tls  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
     24       1.1  tls  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
     25       1.1  tls  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     26       1.1  tls  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     27       1.1  tls  * SUCH DAMAGE.
     28       1.1  tls  *
     29       1.1  tls  */
     30       1.1  tls 
     31       1.1  tls /* this code implements CGI/1.2 for bozohttpd */
     32       1.1  tls 
     33       1.1  tls #ifndef NO_CGIBIN_SUPPORT
     34       1.1  tls 
     35       1.1  tls #include <sys/param.h>
     36       1.1  tls #include <sys/socket.h>
     37       1.1  tls 
     38       1.1  tls #include <ctype.h>
     39       1.1  tls #include <errno.h>
     40       1.1  tls #include <paths.h>
     41       1.1  tls #include <signal.h>
     42       1.1  tls #include <stdlib.h>
     43       1.1  tls #include <string.h>
     44   1.1.1.4  mrg #include <syslog.h>
     45       1.1  tls #include <unistd.h>
     46       1.1  tls 
     47       1.1  tls #include <netinet/in.h>
     48       1.1  tls 
     49       1.1  tls #include "bozohttpd.h"
     50       1.1  tls 
     51       1.1  tls #define CGIBIN_PREFIX		"cgi-bin/"
     52       1.1  tls #define CGIBIN_PREFIX_LEN	(sizeof(CGIBIN_PREFIX)-1)
     53       1.1  tls 
     54   1.1.1.6  mrg #ifndef USE_ARG
     55   1.1.1.6  mrg #define USE_ARG(x)	/*LINTED*/(void)&(x)
     56   1.1.1.6  mrg #endif
     57   1.1.1.6  mrg 
     58   1.1.1.6  mrg /*
     59   1.1.1.6  mrg  * given the file name, return a CGI interpreter
     60   1.1.1.6  mrg  */
     61   1.1.1.6  mrg static const char *
     62   1.1.1.6  mrg content_cgihandler(bozohttpd_t *httpd, bozo_httpreq_t *request,
     63   1.1.1.6  mrg 		const char *file)
     64   1.1.1.6  mrg {
     65   1.1.1.6  mrg 	bozo_content_map_t	*map;
     66   1.1.1.6  mrg 
     67   1.1.1.6  mrg 	USE_ARG(request);
     68   1.1.1.6  mrg 	debug((httpd, DEBUG_FAT, "content_cgihandler: trying file %s", file));
     69   1.1.1.6  mrg 	map = bozo_match_content_map(httpd, file, 0);
     70   1.1.1.6  mrg 	if (map)
     71   1.1.1.6  mrg 		return map->cgihandler;
     72   1.1.1.6  mrg 	return NULL;
     73   1.1.1.6  mrg }
     74   1.1.1.6  mrg 
     75   1.1.1.6  mrg static int
     76   1.1.1.6  mrg parse_header(bozohttpd_t *httpd, const char *str, ssize_t len, char **hdr_str,
     77   1.1.1.6  mrg 		char **hdr_val)
     78   1.1.1.6  mrg {
     79   1.1.1.6  mrg 	char	*name, *value;
     80   1.1.1.6  mrg 
     81   1.1.1.6  mrg 	/* if the string passed is zero-length bail out */
     82   1.1.1.6  mrg 	if (*str == '\0')
     83   1.1.1.6  mrg 		return -1;
     84   1.1.1.6  mrg 
     85   1.1.1.6  mrg 	value = bozostrdup(httpd, str);
     86   1.1.1.6  mrg 
     87   1.1.1.6  mrg 	/* locate the ':' separator in the header/value */
     88   1.1.1.6  mrg 	name = bozostrnsep(&value, ":", &len);
     89   1.1.1.6  mrg 
     90   1.1.1.6  mrg 	if (NULL == name || -1 == len) {
     91   1.1.1.6  mrg 		free(name);
     92   1.1.1.6  mrg 		return -1;
     93   1.1.1.6  mrg 	}
     94       1.1  tls 
     95   1.1.1.6  mrg 	/* skip leading space/tab */
     96   1.1.1.6  mrg 	while (*value == ' ' || *value == '\t')
     97   1.1.1.6  mrg 		len--, value++;
     98   1.1.1.6  mrg 
     99   1.1.1.6  mrg 	*hdr_str = name;
    100   1.1.1.6  mrg 	*hdr_val = value;
    101   1.1.1.6  mrg 
    102   1.1.1.6  mrg 	return 0;
    103   1.1.1.6  mrg }
    104   1.1.1.6  mrg 
    105   1.1.1.6  mrg /*
    106   1.1.1.6  mrg  * handle parsing a CGI header output, transposing a Status: header
    107   1.1.1.6  mrg  * into the HTTP reply (ie, instead of "200 OK").
    108   1.1.1.6  mrg  */
    109   1.1.1.6  mrg static void
    110   1.1.1.6  mrg finish_cgi_output(bozohttpd_t *httpd, bozo_httpreq_t *request, int in, int nph)
    111   1.1.1.6  mrg {
    112   1.1.1.6  mrg 	char	buf[BOZO_WRSZ];
    113   1.1.1.6  mrg 	char	*str;
    114   1.1.1.6  mrg 	ssize_t	len;
    115   1.1.1.6  mrg 	ssize_t rbytes;
    116   1.1.1.6  mrg 	SIMPLEQ_HEAD(, bozoheaders)	headers;
    117   1.1.1.6  mrg 	bozoheaders_t *hdr, *nhdr;
    118   1.1.1.6  mrg 	int	write_header, nheaders = 0;
    119   1.1.1.6  mrg 
    120   1.1.1.6  mrg 	/* much of this code is like bozo_read_request()'s header loop. */
    121   1.1.1.6  mrg 	SIMPLEQ_INIT(&headers);
    122   1.1.1.6  mrg 	write_header = nph == 0;
    123   1.1.1.6  mrg 	/* was read(2) here - XXX - agc */
    124   1.1.1.6  mrg 	while (nph == 0 &&
    125   1.1.1.6  mrg 		(str = bozodgetln(httpd, in, &len, bozo_read)) != NULL) {
    126   1.1.1.6  mrg 		char	*hdr_name, *hdr_value;
    127   1.1.1.6  mrg 
    128   1.1.1.6  mrg 		if (parse_header(httpd, str, len, &hdr_name, &hdr_value))
    129   1.1.1.6  mrg 			break;
    130   1.1.1.6  mrg 
    131   1.1.1.6  mrg 		/*
    132   1.1.1.6  mrg 		 * The CGI 1.{1,2} spec both say that if the cgi program
    133   1.1.1.6  mrg 		 * returns a `Status:' header field then the server MUST
    134   1.1.1.6  mrg 		 * return it in the response.  If the cgi program does
    135   1.1.1.6  mrg 		 * not return any `Status:' header then the server should
    136   1.1.1.6  mrg 		 * respond with 200 OK.
    137   1.1.1.6  mrg 		 * XXX The CGI 1.1 and 1.2 specification differ slightly on
    138   1.1.1.6  mrg 		 * this in that v1.2 says that the script MUST NOT return a
    139   1.1.1.6  mrg 		 * `Status:' header if it is returning a `Location:' header.
    140   1.1.1.6  mrg 		 * For compatibility we are going with the CGI 1.1 behavior.
    141   1.1.1.6  mrg 		 */
    142   1.1.1.6  mrg 		if (strcasecmp(hdr_name, "status") == 0) {
    143   1.1.1.6  mrg 			debug((httpd, DEBUG_OBESE,
    144   1.1.1.6  mrg 				"bozo_process_cgi:  writing HTTP header "
    145   1.1.1.6  mrg 				"from status %s ..", hdr_value));
    146   1.1.1.6  mrg 			bozo_printf(httpd, "%s %s\r\n", request->hr_proto,
    147   1.1.1.6  mrg 					hdr_value);
    148   1.1.1.6  mrg 			bozo_flush(httpd, stdout);
    149   1.1.1.6  mrg 			write_header = 0;
    150   1.1.1.6  mrg 			free(hdr_name);
    151   1.1.1.6  mrg 			break;
    152   1.1.1.6  mrg 		}
    153   1.1.1.6  mrg 
    154   1.1.1.6  mrg 		hdr = bozomalloc(httpd, sizeof *hdr);
    155   1.1.1.6  mrg 		hdr->h_header = hdr_name;
    156   1.1.1.6  mrg 		hdr->h_value = hdr_value;
    157   1.1.1.6  mrg 		SIMPLEQ_INSERT_TAIL(&headers, hdr, h_next);
    158   1.1.1.6  mrg 		nheaders++;
    159   1.1.1.6  mrg 	}
    160   1.1.1.6  mrg 
    161   1.1.1.6  mrg 	if (write_header) {
    162   1.1.1.6  mrg 		debug((httpd, DEBUG_OBESE,
    163   1.1.1.6  mrg 			"bozo_process_cgi:  writing HTTP header .."));
    164   1.1.1.6  mrg 		bozo_printf(httpd,
    165   1.1.1.6  mrg 			"%s 200 OK\r\n", request->hr_proto);
    166   1.1.1.6  mrg 		bozo_flush(httpd, stdout);
    167   1.1.1.6  mrg 	}
    168   1.1.1.6  mrg 
    169   1.1.1.6  mrg 	if (nheaders) {
    170   1.1.1.6  mrg 		debug((httpd, DEBUG_OBESE,
    171   1.1.1.6  mrg 			"bozo_process_cgi:  writing delayed HTTP headers .."));
    172   1.1.1.6  mrg 		SIMPLEQ_FOREACH_SAFE(hdr, &headers, h_next, nhdr) {
    173   1.1.1.6  mrg 			bozo_printf(httpd, "%s: %s\r\n", hdr->h_header,
    174   1.1.1.6  mrg 					hdr->h_value);
    175   1.1.1.6  mrg 			free(hdr->h_header);
    176   1.1.1.6  mrg 			free(hdr);
    177   1.1.1.6  mrg 		}
    178   1.1.1.6  mrg 		bozo_printf(httpd, "\r\n");
    179   1.1.1.6  mrg 		bozo_flush(httpd, stdout);
    180   1.1.1.6  mrg 	}
    181   1.1.1.6  mrg 
    182   1.1.1.6  mrg 	/* XXX we should have some goo that times us out
    183   1.1.1.6  mrg 	 */
    184   1.1.1.6  mrg 	while ((rbytes = read(in, buf, sizeof buf)) > 0) {
    185   1.1.1.6  mrg 		ssize_t wbytes;
    186   1.1.1.6  mrg 		char *bp = buf;
    187   1.1.1.6  mrg 
    188   1.1.1.6  mrg 		while (rbytes) {
    189   1.1.1.6  mrg 			wbytes = bozo_write(httpd, STDOUT_FILENO, buf,
    190   1.1.1.6  mrg 						(size_t)rbytes);
    191   1.1.1.6  mrg 			if (wbytes > 0) {
    192   1.1.1.6  mrg 				rbytes -= wbytes;
    193   1.1.1.6  mrg 				bp += wbytes;
    194   1.1.1.6  mrg 			} else
    195   1.1.1.6  mrg 				bozo_err(httpd, 1,
    196   1.1.1.6  mrg 					"cgi output write failed: %s",
    197   1.1.1.6  mrg 					strerror(errno));
    198   1.1.1.6  mrg 		}
    199   1.1.1.6  mrg 	}
    200   1.1.1.6  mrg }
    201   1.1.1.6  mrg 
    202   1.1.1.6  mrg static void
    203   1.1.1.6  mrg append_index_html(bozohttpd_t *httpd, char **url)
    204   1.1.1.6  mrg {
    205   1.1.1.6  mrg 	*url = bozorealloc(httpd, *url,
    206   1.1.1.6  mrg 			strlen(*url) + strlen(httpd->index_html) + 1);
    207   1.1.1.6  mrg 	strcat(*url, httpd->index_html);
    208   1.1.1.6  mrg 	debug((httpd, DEBUG_NORMAL,
    209   1.1.1.6  mrg 		"append_index_html: url adjusted to `%s'", *url));
    210   1.1.1.6  mrg }
    211       1.1  tls 
    212       1.1  tls void
    213   1.1.1.6  mrg bozo_cgi_setbin(bozohttpd_t *httpd, const char *path)
    214       1.1  tls {
    215   1.1.1.6  mrg 	httpd->cgibin = strdup(path);
    216   1.1.1.6  mrg 	debug((httpd, DEBUG_OBESE, "cgibin (cgi-bin directory) is %s",
    217   1.1.1.6  mrg 		httpd->cgibin));
    218       1.1  tls }
    219       1.1  tls 
    220       1.1  tls /* help build up the environ pointer */
    221       1.1  tls void
    222   1.1.1.6  mrg bozo_setenv(bozohttpd_t *httpd, const char *env, const char *val,
    223   1.1.1.6  mrg 		char **envp)
    224       1.1  tls {
    225   1.1.1.6  mrg 	char *s1 = bozomalloc(httpd, strlen(env) + strlen(val) + 2);
    226       1.1  tls 
    227       1.1  tls 	strcpy(s1, env);
    228       1.1  tls 	strcat(s1, "=");
    229       1.1  tls 	strcat(s1, val);
    230   1.1.1.6  mrg 	debug((httpd, DEBUG_OBESE, "bozo_setenv: %s", s1));
    231       1.1  tls 	*envp = s1;
    232       1.1  tls }
    233       1.1  tls 
    234       1.1  tls /*
    235       1.1  tls  * Checks if the request has asked for a cgi-bin.  Should only be called if
    236       1.1  tls  * cgibin is set.  If it starts CGIBIN_PREFIX or has a ncontent handler,
    237   1.1.1.3  mrg  * process the cgi, otherwise just return.  Returns 0 if it did not handle
    238   1.1.1.3  mrg  * the request.
    239       1.1  tls  */
    240   1.1.1.3  mrg int
    241   1.1.1.6  mrg bozo_process_cgi(bozo_httpreq_t *request)
    242       1.1  tls {
    243   1.1.1.6  mrg 	bozohttpd_t *httpd = request->hr_httpd;
    244   1.1.1.6  mrg 	char	buf[BOZO_WRSZ];
    245   1.1.1.6  mrg 	char	date[40];
    246   1.1.1.6  mrg 	bozoheaders_t *headp;
    247       1.1  tls 	const char *type, *clen, *info, *cgihandler;
    248   1.1.1.3  mrg 	char	*query, *s, *t, *path, *env, *command, *file, *url;
    249       1.1  tls 	char	**envp, **curenvp, *argv[4];
    250   1.1.1.8  mrg 	char	*uri;
    251       1.1  tls 	size_t	len;
    252       1.1  tls 	ssize_t rbytes;
    253       1.1  tls 	pid_t	pid;
    254       1.1  tls 	int	envpsize, ix, nph;
    255       1.1  tls 	int	sv[2];
    256       1.1  tls 
    257   1.1.1.6  mrg 	if (!httpd->cgibin && !httpd->process_cgi)
    258   1.1.1.3  mrg 		return 0;
    259       1.1  tls 
    260   1.1.1.8  mrg 	uri = request->hr_oldfile ? request->hr_oldfile : request->hr_file;
    261   1.1.1.8  mrg 	if (uri[0] == '/')
    262   1.1.1.8  mrg 		file = bozostrdup(httpd, uri);
    263   1.1.1.8  mrg 	else
    264   1.1.1.8  mrg 		asprintf(&file, "/%s", uri);
    265   1.1.1.3  mrg 	if (file == NULL)
    266   1.1.1.3  mrg 		return 0;
    267   1.1.1.8  mrg 
    268   1.1.1.3  mrg 	if (request->hr_query && strlen(request->hr_query))
    269   1.1.1.6  mrg 		query = bozostrdup(httpd, request->hr_query);
    270   1.1.1.3  mrg 	else
    271       1.1  tls 		query = NULL;
    272   1.1.1.3  mrg 
    273   1.1.1.3  mrg 	asprintf(&url, "%s%s%s", file, query ? "?" : "", query ? query : "");
    274   1.1.1.3  mrg 	if (url == NULL)
    275   1.1.1.3  mrg 		goto out;
    276   1.1.1.6  mrg 	debug((httpd, DEBUG_NORMAL, "bozo_process_cgi: url `%s'", url));
    277   1.1.1.3  mrg 
    278       1.1  tls 	path = NULL;
    279       1.1  tls 	envp = NULL;
    280       1.1  tls 	cgihandler = NULL;
    281       1.1  tls 	command = NULL;
    282       1.1  tls 	info = NULL;
    283       1.1  tls 
    284       1.1  tls 	len = strlen(url);
    285       1.1  tls 
    286   1.1.1.7  mrg 	if (bozo_auth_check(request, url + 1))
    287   1.1.1.3  mrg 		goto out;
    288       1.1  tls 
    289   1.1.1.6  mrg 	if (!httpd->cgibin ||
    290   1.1.1.6  mrg 	    strncmp(url + 1, CGIBIN_PREFIX, CGIBIN_PREFIX_LEN) != 0) {
    291   1.1.1.6  mrg 		cgihandler = content_cgihandler(httpd, request, file + 1);
    292       1.1  tls 		if (cgihandler == NULL) {
    293   1.1.1.6  mrg 			debug((httpd, DEBUG_FAT,
    294   1.1.1.6  mrg 				"bozo_process_cgi: no handler, returning"));
    295   1.1.1.3  mrg 			goto out;
    296       1.1  tls 		}
    297   1.1.1.3  mrg 		if (len == 0 || file[len - 1] == '/')
    298   1.1.1.6  mrg 			append_index_html(httpd, &file);
    299   1.1.1.6  mrg 		debug((httpd, DEBUG_NORMAL, "bozo_process_cgi: cgihandler `%s'",
    300       1.1  tls 		    cgihandler));
    301   1.1.1.3  mrg 	} else if (len - 1 == CGIBIN_PREFIX_LEN)	/* url is "/cgi-bin/" */
    302   1.1.1.6  mrg 		append_index_html(httpd, &file);
    303       1.1  tls 
    304       1.1  tls 	ix = 0;
    305       1.1  tls 	if (cgihandler) {
    306   1.1.1.3  mrg 		command = file + 1;
    307   1.1.1.6  mrg 		path = bozostrdup(httpd, cgihandler);
    308       1.1  tls 		argv[ix++] = path;
    309       1.1  tls 			/* argv[] = [ path, command, query, NULL ] */
    310       1.1  tls 	} else {
    311   1.1.1.3  mrg 		command = file + CGIBIN_PREFIX_LEN + 1;
    312       1.1  tls 		if ((s = strchr(command, '/')) != NULL) {
    313   1.1.1.6  mrg 			info = bozostrdup(httpd, s);
    314       1.1  tls 			*s = '\0';
    315       1.1  tls 		}
    316   1.1.1.6  mrg 		path = bozomalloc(httpd,
    317   1.1.1.6  mrg 				strlen(httpd->cgibin) + 1 + strlen(command) + 1);
    318   1.1.1.6  mrg 		strcpy(path, httpd->cgibin);
    319       1.1  tls 		strcat(path, "/");
    320       1.1  tls 		strcat(path, command);
    321       1.1  tls 			/* argv[] = [ command, query, NULL ] */
    322       1.1  tls 	}
    323       1.1  tls 	argv[ix++] = command;
    324       1.1  tls 	argv[ix++] = query;
    325       1.1  tls 	argv[ix++] = NULL;
    326       1.1  tls 
    327       1.1  tls 	nph = strncmp(command, "nph-", 4) == 0;
    328       1.1  tls 
    329       1.1  tls 	type = request->hr_content_type;
    330       1.1  tls 	clen = request->hr_content_length;
    331       1.1  tls 
    332       1.1  tls 	envpsize = 13 + request->hr_nheaders +
    333       1.1  tls 	    (info && *info ? 1 : 0) +
    334       1.1  tls 	    (query && *query ? 1 : 0) +
    335       1.1  tls 	    (type && *type ? 1 : 0) +
    336       1.1  tls 	    (clen && *clen ? 1 : 0) +
    337       1.1  tls 	    (request->hr_remotehost && *request->hr_remotehost ? 1 : 0) +
    338       1.1  tls 	    (request->hr_remoteaddr && *request->hr_remoteaddr ? 1 : 0) +
    339   1.1.1.6  mrg 	    bozo_auth_cgi_count(request) +
    340       1.1  tls 	    (request->hr_serverport && *request->hr_serverport ? 1 : 0);
    341       1.1  tls 
    342   1.1.1.6  mrg 	debug((httpd, DEBUG_FAT,
    343   1.1.1.6  mrg 		"bozo_process_cgi: path `%s', cmd `%s', info `%s', "
    344   1.1.1.6  mrg 		"query `%s', nph `%d', envpsize `%d'",
    345   1.1.1.6  mrg 		path, command, strornull(info),
    346   1.1.1.6  mrg 		strornull(query), nph, envpsize));
    347   1.1.1.5  mrg 
    348   1.1.1.6  mrg 	envp = bozomalloc(httpd, sizeof(*envp) * envpsize);
    349       1.1  tls 	for (ix = 0; ix < envpsize; ix++)
    350       1.1  tls 		envp[ix] = NULL;
    351       1.1  tls 	curenvp = envp;
    352   1.1.1.2  mrg 
    353   1.1.1.2  mrg 	SIMPLEQ_FOREACH(headp, &request->hr_headers, h_next) {
    354       1.1  tls 		const char *s2;
    355   1.1.1.6  mrg 		env = bozomalloc(httpd, 6 + strlen(headp->h_header) + 1 +
    356       1.1  tls 		    strlen(headp->h_value));
    357       1.1  tls 
    358       1.1  tls 		t = env;
    359       1.1  tls 		strcpy(t, "HTTP_");
    360       1.1  tls 		t += strlen(t);
    361       1.1  tls 		for (s2 = headp->h_header; *s2; t++, s2++)
    362       1.1  tls 			if (islower((u_int)*s2))
    363       1.1  tls 				*t = toupper((u_int)*s2);
    364       1.1  tls 			else if (*s2 == '-')
    365       1.1  tls 				*t = '_';
    366       1.1  tls 			else
    367       1.1  tls 				*t = *s2;
    368       1.1  tls 		*t = '\0';
    369   1.1.1.6  mrg 		debug((httpd, DEBUG_OBESE, "setting header %s as %s = %s",
    370       1.1  tls 		    headp->h_header, env, headp->h_value));
    371   1.1.1.6  mrg 		bozo_setenv(httpd, env, headp->h_value, curenvp++);
    372       1.1  tls 		free(env);
    373       1.1  tls 	}
    374   1.1.1.5  mrg 
    375       1.1  tls #ifndef _PATH_DEFPATH
    376       1.1  tls #define _PATH_DEFPATH "/usr/bin:/bin"
    377       1.1  tls #endif
    378       1.1  tls 
    379   1.1.1.6  mrg 	bozo_setenv(httpd, "PATH", _PATH_DEFPATH, curenvp++);
    380   1.1.1.6  mrg 	bozo_setenv(httpd, "IFS", " \t\n", curenvp++);
    381   1.1.1.6  mrg 	bozo_setenv(httpd, "SERVER_NAME", httpd->virthostname, curenvp++);
    382   1.1.1.6  mrg 	bozo_setenv(httpd, "GATEWAY_INTERFACE", "CGI/1.1", curenvp++);
    383   1.1.1.6  mrg 	bozo_setenv(httpd, "SERVER_PROTOCOL", request->hr_proto, curenvp++);
    384   1.1.1.6  mrg 	bozo_setenv(httpd, "REQUEST_METHOD", request->hr_methodstr, curenvp++);
    385   1.1.1.6  mrg 	bozo_setenv(httpd, "SCRIPT_NAME", file, curenvp++);
    386   1.1.1.6  mrg 	bozo_setenv(httpd, "SCRIPT_FILENAME", file + 1, curenvp++);
    387   1.1.1.6  mrg 	bozo_setenv(httpd, "SERVER_SOFTWARE", httpd->server_software,
    388   1.1.1.6  mrg 			curenvp++);
    389   1.1.1.8  mrg 	bozo_setenv(httpd, "REQUEST_URI", uri, curenvp++);
    390   1.1.1.6  mrg 	bozo_setenv(httpd, "DATE_GMT", bozo_http_date(date, sizeof(date)),
    391   1.1.1.6  mrg 			curenvp++);
    392       1.1  tls 	if (query && *query)
    393   1.1.1.6  mrg 		bozo_setenv(httpd, "QUERY_STRING", query, curenvp++);
    394       1.1  tls 	if (info && *info)
    395   1.1.1.6  mrg 		bozo_setenv(httpd, "PATH_INFO", info, curenvp++);
    396       1.1  tls 	if (type && *type)
    397   1.1.1.6  mrg 		bozo_setenv(httpd, "CONTENT_TYPE", type, curenvp++);
    398       1.1  tls 	if (clen && *clen)
    399   1.1.1.6  mrg 		bozo_setenv(httpd, "CONTENT_LENGTH", clen, curenvp++);
    400       1.1  tls 	if (request->hr_serverport && *request->hr_serverport)
    401   1.1.1.6  mrg 		bozo_setenv(httpd, "SERVER_PORT", request->hr_serverport,
    402   1.1.1.6  mrg 				curenvp++);
    403       1.1  tls 	if (request->hr_remotehost && *request->hr_remotehost)
    404   1.1.1.6  mrg 		bozo_setenv(httpd, "REMOTE_HOST", request->hr_remotehost,
    405   1.1.1.6  mrg 				curenvp++);
    406       1.1  tls 	if (request->hr_remoteaddr && *request->hr_remoteaddr)
    407   1.1.1.6  mrg 		bozo_setenv(httpd, "REMOTE_ADDR", request->hr_remoteaddr,
    408   1.1.1.6  mrg 				curenvp++);
    409  1.1.1.10  mrg 	/*
    410  1.1.1.10  mrg 	 * XXX Apache does this when invoking content handlers, and PHP
    411  1.1.1.10  mrg 	 * XXX 5.3 requires it as a "security" measure.
    412  1.1.1.10  mrg 	 */
    413  1.1.1.10  mrg 	if (cgihandler)
    414  1.1.1.10  mrg 		bozo_setenv(httpd, "REDIRECT_STATUS", "200", curenvp++);
    415   1.1.1.7  mrg 	bozo_auth_cgi_setenv(request, &curenvp);
    416       1.1  tls 
    417   1.1.1.3  mrg 	free(file);
    418   1.1.1.3  mrg 	free(url);
    419   1.1.1.3  mrg 
    420   1.1.1.6  mrg 	debug((httpd, DEBUG_FAT, "bozo_process_cgi: going exec %s, %s %s %s",
    421       1.1  tls 	    path, argv[0], strornull(argv[1]), strornull(argv[2])));
    422       1.1  tls 
    423   1.1.1.6  mrg 	if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNSPEC, sv) == -1)
    424   1.1.1.6  mrg 		bozo_err(httpd, 1, "child socketpair failed: %s",
    425   1.1.1.6  mrg 				strerror(errno));
    426       1.1  tls 
    427       1.1  tls 	/*
    428       1.1  tls 	 * We create 2 procs: one to become the CGI, one read from
    429       1.1  tls 	 * the CGI and output to the network, and this parent will
    430       1.1  tls 	 * continue reading from the network and writing to the
    431       1.1  tls 	 * CGI procsss.
    432       1.1  tls 	 */
    433       1.1  tls 	switch (fork()) {
    434       1.1  tls 	case -1: /* eep, failure */
    435   1.1.1.6  mrg 		bozo_err(httpd, 1, "child fork failed: %s", strerror(errno));
    436   1.1.1.6  mrg 		/*NOTREACHED*/
    437       1.1  tls 	case 0:
    438       1.1  tls 		close(sv[0]);
    439       1.1  tls 		dup2(sv[1], STDIN_FILENO);
    440       1.1  tls 		dup2(sv[1], STDOUT_FILENO);
    441   1.1.1.4  mrg 		close(2);
    442   1.1.1.4  mrg 		close(sv[1]);
    443   1.1.1.4  mrg 		closelog();
    444   1.1.1.6  mrg 		bozo_daemon_closefds(httpd);
    445       1.1  tls 
    446       1.1  tls 		if (-1 == execve(path, argv, envp))
    447   1.1.1.6  mrg 			bozo_err(httpd, 1, "child exec failed: %s: %s",
    448   1.1.1.4  mrg 			      path, strerror(errno));
    449       1.1  tls 		/* NOT REACHED */
    450   1.1.1.6  mrg 		bozo_err(httpd, 1, "child execve returned?!");
    451       1.1  tls 	}
    452       1.1  tls 
    453       1.1  tls 	close(sv[1]);
    454       1.1  tls 
    455   1.1.1.6  mrg 	/* parent: read from stdin (bozo_read()) write to sv[0] */
    456   1.1.1.6  mrg 	/* child: read from sv[0] (bozo_write()) write to stdout */
    457       1.1  tls 	pid = fork();
    458       1.1  tls 	if (pid == -1)
    459   1.1.1.6  mrg 		bozo_err(httpd, 1, "io child fork failed: %s", strerror(errno));
    460       1.1  tls 	else if (pid == 0) {
    461       1.1  tls 		/* child reader/writer */
    462       1.1  tls 		close(STDIN_FILENO);
    463   1.1.1.6  mrg 		finish_cgi_output(httpd, request, sv[0], nph);
    464       1.1  tls 		/* if we're done output, our parent is useless... */
    465       1.1  tls 		kill(getppid(), SIGKILL);
    466   1.1.1.6  mrg 		debug((httpd, DEBUG_FAT, "done processing cgi output"));
    467       1.1  tls 		_exit(0);
    468       1.1  tls 	}
    469       1.1  tls 	close(STDOUT_FILENO);
    470       1.1  tls 
    471       1.1  tls 	/* XXX we should have some goo that times us out
    472       1.1  tls 	 */
    473   1.1.1.6  mrg 	while ((rbytes = bozo_read(httpd, STDIN_FILENO, buf, sizeof buf)) > 0) {
    474       1.1  tls 		ssize_t wbytes;
    475       1.1  tls 		char *bp = buf;
    476       1.1  tls 
    477       1.1  tls 		while (rbytes) {
    478   1.1.1.6  mrg 			wbytes = write(sv[0], buf, (size_t)rbytes);
    479       1.1  tls 			if (wbytes > 0) {
    480       1.1  tls 				rbytes -= wbytes;
    481       1.1  tls 				bp += wbytes;
    482       1.1  tls 			} else
    483   1.1.1.6  mrg 				bozo_err(httpd, 1, "write failed: %s",
    484   1.1.1.6  mrg 					strerror(errno));
    485       1.1  tls 		}
    486       1.1  tls 	}
    487   1.1.1.6  mrg 	debug((httpd, DEBUG_FAT, "done processing cgi input"));
    488       1.1  tls 	exit(0);
    489   1.1.1.3  mrg 
    490   1.1.1.3  mrg  out:
    491   1.1.1.3  mrg 	if (query)
    492   1.1.1.3  mrg 		free(query);
    493   1.1.1.3  mrg 	if (file)
    494   1.1.1.3  mrg 		free(file);
    495   1.1.1.3  mrg 	if (url)
    496   1.1.1.3  mrg 		free(url);
    497   1.1.1.3  mrg 	return 0;
    498       1.1  tls }
    499       1.1  tls 
    500       1.1  tls #ifndef NO_DYNAMIC_CONTENT
    501       1.1  tls /* cgi maps are simple ".postfix /path/to/prog" */
    502       1.1  tls void
    503   1.1.1.6  mrg bozo_add_content_map_cgi(bozohttpd_t *httpd, const char *arg, const char *cgihandler)
    504       1.1  tls {
    505   1.1.1.6  mrg 	bozo_content_map_t *map;
    506       1.1  tls 
    507   1.1.1.6  mrg 	debug((httpd, DEBUG_NORMAL, "bozo_add_content_map_cgi: name %s cgi %s",
    508   1.1.1.6  mrg 		arg, cgihandler));
    509       1.1  tls 
    510   1.1.1.6  mrg 	httpd->process_cgi = 1;
    511       1.1  tls 
    512   1.1.1.6  mrg 	map = bozo_get_content_map(httpd, arg);
    513       1.1  tls 	map->name = arg;
    514   1.1.1.9  mrg 	map->namelen = strlen(map->name);
    515       1.1  tls 	map->type = map->encoding = map->encoding11 = NULL;
    516       1.1  tls 	map->cgihandler = cgihandler;
    517       1.1  tls }
    518       1.1  tls #endif /* NO_DYNAMIC_CONTENT */
    519       1.1  tls 
    520       1.1  tls #endif /* NO_CGIBIN_SUPPORT */
    521