Gotweb

Blame

Date:: Sat Jul 16 12:23:09 2022 UTC
Message:: import gotwebd thread fcgi response to client for rendering in browser as data is returned fix potential problem with a stuck loop if the client is hammering the server with random clicks and stop/restarts render our index! WOOHOO! small var refactoring. fcgi.c to handle all clean-up, various error clean-up remove output used to trace down got bug temporarily stop overloading a socket, but a better solution needs to be found return on fcgi_gen_response, so we can track if a client is writable or not this stops page creation when the client is unavailable remove old comments enable profile building, although, i don't think this works thoroughly in a priv/proc daemon catch more errors correctly count repos remove temp logger we don't need to start our responder thread so early. move it to fcgi.c and start when we start processing html kill the unneeded thread, stop queueing responses, and just write to clients immediately clean up some memory leaks and dead stores rework querystring so an error can be displayed instead of showing the index on querystring error get framework in place for the rest of the content add server struct to response struct bo last commit get back a usable gotweb. not sure what i was thinking yesterday properly move our structs around this time remember index page for sitelink, fix leak unused var is annoying, so stop it for now. don't forget to change this! style briefs nearly completed. finish briefs output add briefs to summary cleanup some html properly retrieve next and previous commit ids for list navigation follow naddy's stailq macro change we will never have a previous link on the summary page goto correct label, so we get a previous link on the last page of briefs don't wrap short line simplify got_get_repo_commits code start rendering a diff start rendering a diff this was by accident finish diff output functions cleanup prepare for fd request that was a stupid idea, just flush the priv_fd bo that too. that won't work eith with append in mkstemp that isn't going to work actually zero out the priv_fd missed seek to beginning of file was overwriting first line of diff fsync our fd as well add link to repo path by sitelink and add back verbose fcgi debugging that was removed add modest write heuristics to fcgi_send_response fix dead assignments and XXX comment where a leak is happening that I can't find right now there was no leak. stsp is brilliant and knew it was the cache growing prevent double-free, render prettier err output if we can remove unused variables correctly fix double-free fix gotwebd to build with main's changes after rebase fix double-free don't error on index if pack files missing and fixup some error handling render commits finish up tag briefs and start the tag page finish up tag page unbreak TAGS and SUMMARY actions grab the correct tag from the queue unbreak TAGS and SUMMARY actions again update some error handling clean up unneeded code and start tree output render tree render branches remove tags from summary if there aren't any fix tree div structure and start blob render render blob render blame fix tree href in briefs clean up some css add headref to querystrings load correct commit for tree and diff fixup some error output update some copyright dates add full SNI support rm debug line found by Lucas6023, notified via IRC. thanks!! fix tree fix crash when querystring is manipulated to not have a commit id in certain instances. also break a stuck while loop on client error. fix for new got_object_id_by_path arguments rebase and fix prep for multiple fds per socket, instead of just one fix overlooked shift/reduce conflicts backout priv_fds as a list. after discussion with stsp, an array and length are the better direction prepare array of fds to pass into got functions make a new set of pack fds, which will be passed to got_repo_open work with new pack_fds in got_repo_open give output when no tags exist escape html in blame output change files listed in tree view to show blob, file commits, and blame, instead of blob, blob, blame. idea from mp4 on irc. this is way more handy. stop populating the queue from the headref and figure out previous commit id while iterating. this should reduce some overhead. actually purge our sockets instead of not using the function start work with new blob rm volatile use new diff change func names no more temp files increase blame number line width set content-type to text/plain so firefox won't download files rm test infra for now account for -Wwrite-strings fix for sigs and algorithm choice clean up some leaks and other mistakes
Actions:: History | Blob | Raw File

  1 8a35f56c 2022-07-16 thomas /*
  2 8a35f56c 2022-07-16 thomas  * Copyright (c) 2016, 2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  3 8a35f56c 2022-07-16 thomas  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
  4 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
  5 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
  6 8a35f56c 2022-07-16 thomas  *
  7 8a35f56c 2022-07-16 thomas  * Permission to use, copy, modify, and distribute this software for any
  8 8a35f56c 2022-07-16 thomas  * purpose with or without fee is hereby granted, provided that the above
  9 8a35f56c 2022-07-16 thomas  * copyright notice and this permission notice appear in all copies.
 10 8a35f56c 2022-07-16 thomas  *
 11 8a35f56c 2022-07-16 thomas  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 12 8a35f56c 2022-07-16 thomas  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 13 8a35f56c 2022-07-16 thomas  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 14 8a35f56c 2022-07-16 thomas  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 15 8a35f56c 2022-07-16 thomas  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 16 8a35f56c 2022-07-16 thomas  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 17 8a35f56c 2022-07-16 thomas  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 18 8a35f56c 2022-07-16 thomas  */
 19 8a35f56c 2022-07-16 thomas 
 20 8a35f56c 2022-07-16 thomas #include <sys/param.h>
 21 8a35f56c 2022-07-16 thomas #include <sys/ioctl.h>
 22 8a35f56c 2022-07-16 thomas #include <sys/queue.h>
 23 8a35f56c 2022-07-16 thomas #include <sys/wait.h>
 24 8a35f56c 2022-07-16 thomas #include <sys/uio.h>
 25 8a35f56c 2022-07-16 thomas #include <sys/resource.h>
 26 8a35f56c 2022-07-16 thomas #include <sys/socket.h>
 27 8a35f56c 2022-07-16 thomas #include <sys/stat.h>
 28 8a35f56c 2022-07-16 thomas #include <sys/time.h>
 29 8a35f56c 2022-07-16 thomas #include <sys/types.h>
 30 8a35f56c 2022-07-16 thomas #include <sys/mman.h>
 31 8a35f56c 2022-07-16 thomas #include <sys/un.h>
 32 8a35f56c 2022-07-16 thomas 
 33 8a35f56c 2022-07-16 thomas #include <net/if.h>
 34 8a35f56c 2022-07-16 thomas #include <netinet/in.h>
 35 8a35f56c 2022-07-16 thomas 
 36 8a35f56c 2022-07-16 thomas #include <errno.h>
 37 8a35f56c 2022-07-16 thomas #include <event.h>
 38 8a35f56c 2022-07-16 thomas #include <fcntl.h>
 39 8a35f56c 2022-07-16 thomas #include <ifaddrs.h>
 40 8a35f56c 2022-07-16 thomas #include <imsg.h>
 41 8a35f56c 2022-07-16 thomas #include <limits.h>
 42 8a35f56c 2022-07-16 thomas #include <netdb.h>
 43 8a35f56c 2022-07-16 thomas #include <poll.h>
 44 8a35f56c 2022-07-16 thomas #include <pwd.h>
 45 8a35f56c 2022-07-16 thomas #include <stddef.h>
 46 8a35f56c 2022-07-16 thomas #include <stdio.h>
 47 8a35f56c 2022-07-16 thomas #include <stdlib.h>
 48 8a35f56c 2022-07-16 thomas #include <string.h>
 49 8a35f56c 2022-07-16 thomas #include <unistd.h>
 50 8a35f56c 2022-07-16 thomas #include <util.h>
 51 8a35f56c 2022-07-16 thomas 
 52 8a35f56c 2022-07-16 thomas #include "got_error.h"
 53 8a35f56c 2022-07-16 thomas #include "got_opentemp.h"
 54 8a35f56c 2022-07-16 thomas 
 55 8a35f56c 2022-07-16 thomas #include "proc.h"
 56 8a35f56c 2022-07-16 thomas #include "gotwebd.h"
 57 8a35f56c 2022-07-16 thomas 
 58 8a35f56c 2022-07-16 thomas #define SOCKS_BACKLOG 5
 59 8a35f56c 2022-07-16 thomas #define MAXIMUM(a, b)	(((a) > (b)) ? (a) : (b))
 60 8a35f56c 2022-07-16 thomas 
 61 8a35f56c 2022-07-16 thomas 
 62 8a35f56c 2022-07-16 thomas volatile int client_cnt;
 63 8a35f56c 2022-07-16 thomas 
 64 8a35f56c 2022-07-16 thomas struct timeval	timeout = { TIMEOUT_DEFAULT, 0 };
 65 8a35f56c 2022-07-16 thomas 
 66 8a35f56c 2022-07-16 thomas void	 sockets_sighdlr(int, short, void *);
 67 8a35f56c 2022-07-16 thomas void	 sockets_run(struct privsep *, struct privsep_proc *, void *);
 68 8a35f56c 2022-07-16 thomas void	 sockets_launch(void);
 69 8a35f56c 2022-07-16 thomas void	 sockets_purge(struct gotwebd *);
 70 8a35f56c 2022-07-16 thomas void	 sockets_accept_paused(int, short, void *);
 71 8a35f56c 2022-07-16 thomas void	 sockets_dup_new_socket(struct socket *, struct socket *);
 72 8a35f56c 2022-07-16 thomas void	 sockets_rlimit(int);
 73 8a35f56c 2022-07-16 thomas 
 74 8a35f56c 2022-07-16 thomas 
 75 8a35f56c 2022-07-16 thomas int	 sockets_dispatch_gotwebd(int, struct privsep_proc *, struct imsg *);
 76 8a35f56c 2022-07-16 thomas int	 sockets_unix_socket_listen(struct privsep *, struct socket *);
 77 8a35f56c 2022-07-16 thomas int	 sockets_create_socket(struct addresslist *, in_port_t);
 78 8a35f56c 2022-07-16 thomas int	 sockets_socket_af(struct sockaddr_storage *, in_port_t);
 79 8a35f56c 2022-07-16 thomas int	 sockets_accept_reserve(int, struct sockaddr *, socklen_t *, int,
 80 8a35f56c 2022-07-16 thomas 	    volatile int *);
 81 8a35f56c 2022-07-16 thomas 
 82 8a35f56c 2022-07-16 thomas struct socket
 83 8a35f56c 2022-07-16 thomas 	*sockets_conf_new_socket(struct gotwebd *, struct server *, int, int,
 84 8a35f56c 2022-07-16 thomas 	    int);
 85 8a35f56c 2022-07-16 thomas 
 86 8a35f56c 2022-07-16 thomas int cgi_inflight = 0;
 87 8a35f56c 2022-07-16 thomas 
 88 8a35f56c 2022-07-16 thomas static struct privsep_proc procs[] = {
 89 8a35f56c 2022-07-16 thomas 	{ "gotwebd",	PROC_GOTWEBD,	sockets_dispatch_gotwebd  },
 90 8a35f56c 2022-07-16 thomas };
 91 8a35f56c 2022-07-16 thomas 
 92 8a35f56c 2022-07-16 thomas void
 93 8a35f56c 2022-07-16 thomas sockets(struct privsep *ps, struct privsep_proc *p)
 94 8a35f56c 2022-07-16 thomas {
 95 8a35f56c 2022-07-16 thomas 	proc_run(ps, p, procs, nitems(procs), sockets_run, NULL);
 96 8a35f56c 2022-07-16 thomas }
 97 8a35f56c 2022-07-16 thomas 
 98 8a35f56c 2022-07-16 thomas void
 99 8a35f56c 2022-07-16 thomas sockets_run(struct privsep *ps, struct privsep_proc *p, void *arg)
100 8a35f56c 2022-07-16 thomas {
101 8a35f56c 2022-07-16 thomas 	if (config_init(ps->ps_env) == -1)
102 8a35f56c 2022-07-16 thomas 		fatal("failed to initialize configuration");
103 8a35f56c 2022-07-16 thomas 
104 8a35f56c 2022-07-16 thomas 	p->p_shutdown = sockets_shutdown;
105 8a35f56c 2022-07-16 thomas 
106 8a35f56c 2022-07-16 thomas 	sockets_rlimit(-1);
107 8a35f56c 2022-07-16 thomas 
108 8a35f56c 2022-07-16 thomas 	signal_del(&ps->ps_evsigchld);
109 8a35f56c 2022-07-16 thomas 	signal_set(&ps->ps_evsigchld, SIGCHLD, sockets_sighdlr, ps);
110 8a35f56c 2022-07-16 thomas 	signal_add(&ps->ps_evsigchld, NULL);
111 8a35f56c 2022-07-16 thomas 
112 8a35f56c 2022-07-16 thomas #ifndef PROFILE
113 8a35f56c 2022-07-16 thomas 	if (pledge("stdio rpath wpath cpath inet recvfd proc exec sendfd",
114 8a35f56c 2022-07-16 thomas 	    NULL) == -1)
115 8a35f56c 2022-07-16 thomas 		fatal("pledge");
116 8a35f56c 2022-07-16 thomas #endif
117 8a35f56c 2022-07-16 thomas }
118 8a35f56c 2022-07-16 thomas 
119 8a35f56c 2022-07-16 thomas void
120 8a35f56c 2022-07-16 thomas sockets_parse_sockets(struct gotwebd *env)
121 8a35f56c 2022-07-16 thomas {
122 8a35f56c 2022-07-16 thomas 	struct server *srv;
123 8a35f56c 2022-07-16 thomas 	struct socket *sock, *new_sock = NULL;
124 8a35f56c 2022-07-16 thomas 	struct address *a;
125 8a35f56c 2022-07-16 thomas 	int sock_id = 0, ipv4 = 0, ipv6 = 0;
126 8a35f56c 2022-07-16 thomas 
127 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(srv, env->servers, entry) {
128 8a35f56c 2022-07-16 thomas 		if (srv->unix_socket) {
129 8a35f56c 2022-07-16 thomas 			sock_id++;
130 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
131 8a35f56c 2022-07-16 thomas 			    sock_id, UNIX, 0);
132 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
133 8a35f56c 2022-07-16 thomas 		}
134 8a35f56c 2022-07-16 thomas 
135 8a35f56c 2022-07-16 thomas 		if (srv->fcgi_socket) {
136 8a35f56c 2022-07-16 thomas 			sock_id++;
137 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
138 8a35f56c 2022-07-16 thomas 			    sock_id, FCGI, 0);
139 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
140 8a35f56c 2022-07-16 thomas 
141 8a35f56c 2022-07-16 thomas 			/* add ipv6 children */
142 8a35f56c 2022-07-16 thomas 			TAILQ_FOREACH(sock, env->sockets, entry) {
143 8a35f56c 2022-07-16 thomas 				ipv4 = ipv6 = 0;
144 8a35f56c 2022-07-16 thomas 
145 8a35f56c 2022-07-16 thomas 				TAILQ_FOREACH(a, sock->conf.al, entry) {
146 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET)
147 8a35f56c 2022-07-16 thomas 						ipv4 = 1;
148 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET6)
149 8a35f56c 2022-07-16 thomas 						ipv6 = 1;
150 8a35f56c 2022-07-16 thomas 				}
151 8a35f56c 2022-07-16 thomas 
152 8a35f56c 2022-07-16 thomas 				/* create ipv6 sock */
153 8a35f56c 2022-07-16 thomas 				if (ipv4 == 1 && ipv6 == 1) {
154 8a35f56c 2022-07-16 thomas 					sock_id++;
155 8a35f56c 2022-07-16 thomas 					sock->conf.child_id = sock_id;
156 8a35f56c 2022-07-16 thomas 					new_sock = sockets_conf_new_socket(env,
157 8a35f56c 2022-07-16 thomas 					    srv, sock_id, FCGI, 1);
158 8a35f56c 2022-07-16 thomas 					sockets_dup_new_socket(sock, new_sock);
159 8a35f56c 2022-07-16 thomas 					TAILQ_INSERT_TAIL(env->sockets,
160 8a35f56c 2022-07-16 thomas 					    new_sock, entry);
161 8a35f56c 2022-07-16 thomas 					continue;
162 8a35f56c 2022-07-16 thomas 				}
163 8a35f56c 2022-07-16 thomas 			}
164 8a35f56c 2022-07-16 thomas 		}
165 8a35f56c 2022-07-16 thomas 	}
166 8a35f56c 2022-07-16 thomas }
167 8a35f56c 2022-07-16 thomas 
168 8a35f56c 2022-07-16 thomas void
169 8a35f56c 2022-07-16 thomas sockets_dup_new_socket(struct socket *p_sock, struct socket *sock)
170 8a35f56c 2022-07-16 thomas {
171 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
172 8a35f56c 2022-07-16 thomas 	int n;
173 8a35f56c 2022-07-16 thomas 
174 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = p_sock->conf.id;
175 8a35f56c 2022-07-16 thomas 	sock->conf.ipv4 = 0;
176 8a35f56c 2022-07-16 thomas 	sock->conf.ipv6 = 1;
177 8a35f56c 2022-07-16 thomas 
178 8a35f56c 2022-07-16 thomas 	memcpy(&sock->conf.srv_name, p_sock->conf.srv_name,
179 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name));
180 8a35f56c 2022-07-16 thomas 
181 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_child",
182 8a35f56c 2022-07-16 thomas 	    p_sock->conf.srv_name);
183 8a35f56c 2022-07-16 thomas 	if (n < 0) {
184 8a35f56c 2022-07-16 thomas 		free(p_sock->conf.al);
185 8a35f56c 2022-07-16 thomas 		free(p_sock);
186 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
187 8a35f56c 2022-07-16 thomas 		free(sock);
188 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
189 8a35f56c 2022-07-16 thomas 	}
190 8a35f56c 2022-07-16 thomas 
191 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, p_sock->conf.al, entry) {
192 8a35f56c 2022-07-16 thomas 		if (a->ss.ss_family == AF_INET)
193 8a35f56c 2022-07-16 thomas 			continue;
194 8a35f56c 2022-07-16 thomas 
195 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL)
196 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
197 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
198 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
199 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
200 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
201 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
202 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
203 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
204 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
205 8a35f56c 2022-07-16 thomas 				    __func__);
206 8a35f56c 2022-07-16 thomas 			}
207 8a35f56c 2022-07-16 thomas 		}
208 8a35f56c 2022-07-16 thomas 
209 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
210 8a35f56c 2022-07-16 thomas 	}
211 8a35f56c 2022-07-16 thomas }
212 8a35f56c 2022-07-16 thomas 
213 8a35f56c 2022-07-16 thomas struct socket *
214 8a35f56c 2022-07-16 thomas sockets_conf_new_socket(struct gotwebd *env, struct server *srv, int id,
215 8a35f56c 2022-07-16 thomas     int type, int is_dup)
216 8a35f56c 2022-07-16 thomas {
217 8a35f56c 2022-07-16 thomas 	struct socket *sock;
218 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
219 8a35f56c 2022-07-16 thomas 	int n;
220 8a35f56c 2022-07-16 thomas 
221 8a35f56c 2022-07-16 thomas 	if ((sock = calloc(1, sizeof(*sock))) == NULL)
222 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
223 8a35f56c 2022-07-16 thomas 
224 8a35f56c 2022-07-16 thomas 	if ((sock->conf.al = calloc(1, sizeof(*sock->conf.al))) == NULL) {
225 8a35f56c 2022-07-16 thomas 		free(sock);
226 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
227 8a35f56c 2022-07-16 thomas 	}
228 8a35f56c 2022-07-16 thomas 	TAILQ_INIT(sock->conf.al);
229 8a35f56c 2022-07-16 thomas 
230 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = 0;
231 8a35f56c 2022-07-16 thomas 	sock->conf.id = id;
232 8a35f56c 2022-07-16 thomas 
233 8a35f56c 2022-07-16 thomas 	sock->fd = -1;
234 8a35f56c 2022-07-16 thomas 
235 8a35f56c 2022-07-16 thomas 	sock->conf.type = type;
236 8a35f56c 2022-07-16 thomas 
237 8a35f56c 2022-07-16 thomas 	if (type == UNIX) {
238 8a35f56c 2022-07-16 thomas 		if (strlcpy(sock->conf.unix_socket_name,
239 8a35f56c 2022-07-16 thomas 		    srv->unix_socket_name,
240 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) >=
241 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) {
242 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
243 8a35f56c 2022-07-16 thomas 			free(sock);
244 8a35f56c 2022-07-16 thomas 			fatalx("%s: strlcpy", __func__);
245 8a35f56c 2022-07-16 thomas 		}
246 8a35f56c 2022-07-16 thomas 	} else
247 8a35f56c 2022-07-16 thomas 		sock->conf.ipv4 = 1;
248 8a35f56c 2022-07-16 thomas 
249 8a35f56c 2022-07-16 thomas 	sock->conf.fcgi_socket_port = srv->fcgi_socket_port;
250 8a35f56c 2022-07-16 thomas 
251 8a35f56c 2022-07-16 thomas 	if (is_dup)
252 8a35f56c 2022-07-16 thomas 		goto done;
253 8a35f56c 2022-07-16 thomas 
254 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_parent",
255 8a35f56c 2022-07-16 thomas 	    srv->name);
256 8a35f56c 2022-07-16 thomas 	if (n < 0) {
257 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
258 8a35f56c 2022-07-16 thomas 		free(sock);
259 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
260 8a35f56c 2022-07-16 thomas 	}
261 8a35f56c 2022-07-16 thomas 
262 8a35f56c 2022-07-16 thomas 	if (strlcpy(sock->conf.srv_name, srv->name,
263 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name)) >= sizeof(sock->conf.srv_name)) {
264 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
265 8a35f56c 2022-07-16 thomas 		free(sock);
266 8a35f56c 2022-07-16 thomas 		fatalx("%s: strlcpy", __func__);
267 8a35f56c 2022-07-16 thomas 	}
268 8a35f56c 2022-07-16 thomas 
269 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, srv->al, entry) {
270 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL) {
271 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
272 8a35f56c 2022-07-16 thomas 			free(sock);
273 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
274 8a35f56c 2022-07-16 thomas 		}
275 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
276 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
277 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
278 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
279 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
280 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
281 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
282 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
283 8a35f56c 2022-07-16 thomas 				    __func__);
284 8a35f56c 2022-07-16 thomas 			}
285 8a35f56c 2022-07-16 thomas 		}
286 8a35f56c 2022-07-16 thomas 
287 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
288 8a35f56c 2022-07-16 thomas 	}
289 8a35f56c 2022-07-16 thomas done:
290 8a35f56c 2022-07-16 thomas 	return (sock);
291 8a35f56c 2022-07-16 thomas }
292 8a35f56c 2022-07-16 thomas 
293 8a35f56c 2022-07-16 thomas int
294 8a35f56c 2022-07-16 thomas sockets_socket_af(struct sockaddr_storage *ss, in_port_t port)
295 8a35f56c 2022-07-16 thomas {
296 8a35f56c 2022-07-16 thomas 	switch (ss->ss_family) {
297 8a35f56c 2022-07-16 thomas 	case AF_INET:
298 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in *)ss)->sin_port = port;
299 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in *)ss)->sin_len =
300 8a35f56c 2022-07-16 thomas 		    sizeof(struct sockaddr_in);
301 8a35f56c 2022-07-16 thomas 		break;
302 8a35f56c 2022-07-16 thomas 	case AF_INET6:
303 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in6 *)ss)->sin6_port = port;
304 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in6 *)ss)->sin6_len =
305 8a35f56c 2022-07-16 thomas 		    sizeof(struct sockaddr_in6);
306 8a35f56c 2022-07-16 thomas 		break;
307 8a35f56c 2022-07-16 thomas 	default:
308 8a35f56c 2022-07-16 thomas 		return -1;
309 8a35f56c 2022-07-16 thomas 	}
310 8a35f56c 2022-07-16 thomas 
311 8a35f56c 2022-07-16 thomas 	return 0;
312 8a35f56c 2022-07-16 thomas }
313 8a35f56c 2022-07-16 thomas 
314 8a35f56c 2022-07-16 thomas void
315 8a35f56c 2022-07-16 thomas sockets_launch(void)
316 8a35f56c 2022-07-16 thomas {
317 8a35f56c 2022-07-16 thomas 	struct socket *sock;
318 8a35f56c 2022-07-16 thomas 
319 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(sock, gotwebd_env->sockets, entry) {
320 8a35f56c 2022-07-16 thomas 		log_debug("%s: configuring socket %d (%d)", __func__,
321 8a35f56c 2022-07-16 thomas 		    sock->conf.id, sock->fd);
322 8a35f56c 2022-07-16 thomas 
323 8a35f56c 2022-07-16 thomas 		event_set(&sock->ev, sock->fd, EV_READ | EV_PERSIST,
324 8a35f56c 2022-07-16 thomas 		    sockets_socket_accept, sock);
325 8a35f56c 2022-07-16 thomas 
326 8a35f56c 2022-07-16 thomas 		if (event_add(&sock->ev, NULL))
327 8a35f56c 2022-07-16 thomas 			fatalx("event add sock");
328 8a35f56c 2022-07-16 thomas 
329 8a35f56c 2022-07-16 thomas 		evtimer_set(&sock->pause, sockets_accept_paused, sock);
330 8a35f56c 2022-07-16 thomas 
331 8a35f56c 2022-07-16 thomas 		log_debug("%s: running socket listener %d", __func__,
332 8a35f56c 2022-07-16 thomas 		    sock->conf.id);
333 8a35f56c 2022-07-16 thomas 	}
334 8a35f56c 2022-07-16 thomas }
335 8a35f56c 2022-07-16 thomas 
336 8a35f56c 2022-07-16 thomas void
337 8a35f56c 2022-07-16 thomas sockets_purge(struct gotwebd *env)
338 8a35f56c 2022-07-16 thomas {
339 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
340 8a35f56c 2022-07-16 thomas 
341 8a35f56c 2022-07-16 thomas 	/* shutdown and remove sockets */
342 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, env->sockets, entry, tsock) {
343 8a35f56c 2022-07-16 thomas 		if (event_initialized(&sock->ev))
344 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
345 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->evt))
346 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->evt);
347 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->pause))
348 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->pause);
349 8a35f56c 2022-07-16 thomas 		if (sock->fd != -1)
350 8a35f56c 2022-07-16 thomas 			close(sock->fd);
351 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(env->sockets, sock, entry);
352 8a35f56c 2022-07-16 thomas 	}
353 8a35f56c 2022-07-16 thomas }
354 8a35f56c 2022-07-16 thomas 
355 8a35f56c 2022-07-16 thomas int
356 8a35f56c 2022-07-16 thomas sockets_dispatch_gotwebd(int fd, struct privsep_proc *p, struct imsg *imsg)
357 8a35f56c 2022-07-16 thomas {
358 8a35f56c 2022-07-16 thomas 	struct privsep *ps = p->p_ps;
359 8a35f56c 2022-07-16 thomas 	int res = 0, cmd = 0, verbose;
360 8a35f56c 2022-07-16 thomas 
361 8a35f56c 2022-07-16 thomas 	switch (imsg->hdr.type) {
362 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SRV:
363 8a35f56c 2022-07-16 thomas 		config_getserver(gotwebd_env, imsg);
364 8a35f56c 2022-07-16 thomas 		break;
365 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SOCK:
366 8a35f56c 2022-07-16 thomas 		config_getsock(gotwebd_env, imsg);
367 8a35f56c 2022-07-16 thomas 		break;
368 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_FD:
369 8a35f56c 2022-07-16 thomas 		config_getfd(gotwebd_env, imsg);
370 8a35f56c 2022-07-16 thomas 		break;
371 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_DONE:
372 8a35f56c 2022-07-16 thomas 		config_getcfg(gotwebd_env, imsg);
373 8a35f56c 2022-07-16 thomas 		break;
374 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_START:
375 8a35f56c 2022-07-16 thomas 		sockets_launch();
376 8a35f56c 2022-07-16 thomas 		break;
377 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_VERBOSE:
378 8a35f56c 2022-07-16 thomas 		IMSG_SIZE_CHECK(imsg, &verbose);
379 8a35f56c 2022-07-16 thomas 		memcpy(&verbose, imsg->data, sizeof(verbose));
380 8a35f56c 2022-07-16 thomas 		log_setverbose(verbose);
381 8a35f56c 2022-07-16 thomas 		break;
382 8a35f56c 2022-07-16 thomas 	default:
383 8a35f56c 2022-07-16 thomas 		return -1;
384 8a35f56c 2022-07-16 thomas 	}
385 8a35f56c 2022-07-16 thomas 
386 8a35f56c 2022-07-16 thomas 	switch (cmd) {
387 8a35f56c 2022-07-16 thomas 	case 0:
388 8a35f56c 2022-07-16 thomas 		break;
389 8a35f56c 2022-07-16 thomas 	default:
390 8a35f56c 2022-07-16 thomas 		if (proc_compose_imsg(ps, PROC_GOTWEBD, -1, cmd,
391 8a35f56c 2022-07-16 thomas 		    imsg->hdr.peerid, -1, &res, sizeof(res)) == -1)
392 8a35f56c 2022-07-16 thomas 			return -1;
393 8a35f56c 2022-07-16 thomas 		break;
394 8a35f56c 2022-07-16 thomas 	}
395 8a35f56c 2022-07-16 thomas 
396 8a35f56c 2022-07-16 thomas 	return 0;
397 8a35f56c 2022-07-16 thomas }
398 8a35f56c 2022-07-16 thomas 
399 8a35f56c 2022-07-16 thomas void
400 8a35f56c 2022-07-16 thomas sockets_sighdlr(int sig, short event, void *arg)
401 8a35f56c 2022-07-16 thomas {
402 8a35f56c 2022-07-16 thomas 	switch (sig) {
403 8a35f56c 2022-07-16 thomas 	case SIGHUP:
404 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGHUP", __func__);
405 8a35f56c 2022-07-16 thomas 		break;
406 8a35f56c 2022-07-16 thomas 	case SIGPIPE:
407 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGPIPE", __func__);
408 8a35f56c 2022-07-16 thomas 		break;
409 8a35f56c 2022-07-16 thomas 	case SIGUSR1:
410 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGUSR1", __func__);
411 8a35f56c 2022-07-16 thomas 		break;
412 8a35f56c 2022-07-16 thomas 	case SIGCHLD:
413 8a35f56c 2022-07-16 thomas 		break;
414 8a35f56c 2022-07-16 thomas 	default:
415 8a35f56c 2022-07-16 thomas 		log_info("SIGNAL: %d", sig);
416 8a35f56c 2022-07-16 thomas 		fatalx("unexpected signal");
417 8a35f56c 2022-07-16 thomas 	}
418 8a35f56c 2022-07-16 thomas }
419 8a35f56c 2022-07-16 thomas 
420 8a35f56c 2022-07-16 thomas void
421 8a35f56c 2022-07-16 thomas sockets_shutdown(void)
422 8a35f56c 2022-07-16 thomas {
423 8a35f56c 2022-07-16 thomas 	struct server *srv, *tsrv;
424 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
425 8a35f56c 2022-07-16 thomas 
426 8a35f56c 2022-07-16 thomas 	sockets_purge(gotwebd_env);
427 8a35f56c 2022-07-16 thomas 
428 8a35f56c 2022-07-16 thomas 	/* clean sockets */
429 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, gotwebd_env->sockets, entry, tsock) {
430 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(gotwebd_env->sockets, sock, entry);
431 8a35f56c 2022-07-16 thomas 		close(sock->fd);
432 8a35f56c 2022-07-16 thomas 		free(sock);
433 8a35f56c 2022-07-16 thomas 	}
434 8a35f56c 2022-07-16 thomas 
435 8a35f56c 2022-07-16 thomas 	/* clean servers */
436 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(srv, gotwebd_env->servers, entry, tsrv)
437 8a35f56c 2022-07-16 thomas 		free(srv);
438 8a35f56c 2022-07-16 thomas 
439 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->sockets);
440 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->servers);
441 8a35f56c 2022-07-16 thomas 	free(gotwebd_env);
442 8a35f56c 2022-07-16 thomas }
443 8a35f56c 2022-07-16 thomas 
444 8a35f56c 2022-07-16 thomas int
445 8a35f56c 2022-07-16 thomas sockets_privinit(struct gotwebd *env, struct socket *sock)
446 8a35f56c 2022-07-16 thomas {
447 8a35f56c 2022-07-16 thomas 	struct privsep *ps = env->gotwebd_ps;
448 8a35f56c 2022-07-16 thomas 
449 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == UNIX) {
450 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing unix socket %s", __func__,
451 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
452 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_unix_socket_listen(ps, sock);
453 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
454 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
455 8a35f56c 2022-07-16 thomas 			return -1;
456 8a35f56c 2022-07-16 thomas 		}
457 8a35f56c 2022-07-16 thomas 	}
458 8a35f56c 2022-07-16 thomas 
459 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == FCGI) {
460 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing fcgi socket for %s", __func__,
461 8a35f56c 2022-07-16 thomas 		    sock->conf.name);
462 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_create_socket(sock->conf.al,
463 8a35f56c 2022-07-16 thomas 		    sock->conf.fcgi_socket_port);
464 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
465 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
466 8a35f56c 2022-07-16 thomas 			return -1;
467 8a35f56c 2022-07-16 thomas 		}
468 8a35f56c 2022-07-16 thomas 	}
469 8a35f56c 2022-07-16 thomas 
470 8a35f56c 2022-07-16 thomas 	return 0;
471 8a35f56c 2022-07-16 thomas }
472 8a35f56c 2022-07-16 thomas 
473 8a35f56c 2022-07-16 thomas int
474 8a35f56c 2022-07-16 thomas sockets_unix_socket_listen(struct privsep *ps, struct socket *sock)
475 8a35f56c 2022-07-16 thomas {
476 8a35f56c 2022-07-16 thomas 	struct gotwebd *env = ps->ps_env;
477 8a35f56c 2022-07-16 thomas 	struct sockaddr_un sun;
478 8a35f56c 2022-07-16 thomas 	struct socket *tsock;
479 8a35f56c 2022-07-16 thomas 	int u_fd = -1;
480 8a35f56c 2022-07-16 thomas 	mode_t old_umask, mode;
481 8a35f56c 2022-07-16 thomas 
482 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(tsock, env->sockets, entry) {
483 8a35f56c 2022-07-16 thomas 		if (strcmp(tsock->conf.unix_socket_name,
484 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name) == 0 &&
485 8a35f56c 2022-07-16 thomas 		    tsock->fd != -1)
486 8a35f56c 2022-07-16 thomas 			return (tsock->fd);
487 8a35f56c 2022-07-16 thomas 	}
488 8a35f56c 2022-07-16 thomas 
489 8a35f56c 2022-07-16 thomas 	u_fd = socket(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK| SOCK_CLOEXEC, 0);
490 8a35f56c 2022-07-16 thomas 	if (u_fd == -1) {
491 8a35f56c 2022-07-16 thomas 		log_warn("%s: socket", __func__);
492 8a35f56c 2022-07-16 thomas 		return -1;
493 8a35f56c 2022-07-16 thomas 	}
494 8a35f56c 2022-07-16 thomas 
495 8a35f56c 2022-07-16 thomas 	sun.sun_family = AF_UNIX;
496 8a35f56c 2022-07-16 thomas 	if (strlcpy(sun.sun_path, sock->conf.unix_socket_name,
497 8a35f56c 2022-07-16 thomas 	    sizeof(sun.sun_path)) >= sizeof(sun.sun_path)) {
498 8a35f56c 2022-07-16 thomas 		log_warn("%s: %s name too long", __func__,
499 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
500 8a35f56c 2022-07-16 thomas 		close(u_fd);
501 8a35f56c 2022-07-16 thomas 		return -1;
502 8a35f56c 2022-07-16 thomas 	}
503 8a35f56c 2022-07-16 thomas 
504 8a35f56c 2022-07-16 thomas 	if (unlink(sock->conf.unix_socket_name) == -1) {
505 8a35f56c 2022-07-16 thomas 		if (errno != ENOENT) {
506 8a35f56c 2022-07-16 thomas 			log_warn("%s: unlink %s", __func__,
507 8a35f56c 2022-07-16 thomas 			    sock->conf.unix_socket_name);
508 8a35f56c 2022-07-16 thomas 			close(u_fd);
509 8a35f56c 2022-07-16 thomas 			return -1;
510 8a35f56c 2022-07-16 thomas 		}
511 8a35f56c 2022-07-16 thomas 	}
512 8a35f56c 2022-07-16 thomas 
513 8a35f56c 2022-07-16 thomas 	old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
514 8a35f56c 2022-07-16 thomas 	mode = S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP;
515 8a35f56c 2022-07-16 thomas 
516 8a35f56c 2022-07-16 thomas 	if (bind(u_fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
517 8a35f56c 2022-07-16 thomas 		log_warn("%s: bind: %s", __func__, sock->conf.unix_socket_name);
518 8a35f56c 2022-07-16 thomas 		close(u_fd);
519 8a35f56c 2022-07-16 thomas 		(void)umask(old_umask);
520 8a35f56c 2022-07-16 thomas 		return -1;
521 8a35f56c 2022-07-16 thomas 	}
522 8a35f56c 2022-07-16 thomas 
523 8a35f56c 2022-07-16 thomas 	(void)umask(old_umask);
524 8a35f56c 2022-07-16 thomas 
525 8a35f56c 2022-07-16 thomas 	if (chmod(sock->conf.unix_socket_name, mode) == -1) {
526 8a35f56c 2022-07-16 thomas 		log_warn("%s: chmod", __func__);
527 8a35f56c 2022-07-16 thomas 		close(u_fd);
528 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
529 8a35f56c 2022-07-16 thomas 		return -1;
530 8a35f56c 2022-07-16 thomas 	}
531 8a35f56c 2022-07-16 thomas 
532 8a35f56c 2022-07-16 thomas 	if (chown(sock->conf.unix_socket_name, ps->ps_pw->pw_uid,
533 8a35f56c 2022-07-16 thomas 	    ps->ps_pw->pw_gid) == -1) {
534 8a35f56c 2022-07-16 thomas 		log_warn("%s: chown", __func__);
535 8a35f56c 2022-07-16 thomas 		close(u_fd);
536 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
537 8a35f56c 2022-07-16 thomas 		return -1;
538 8a35f56c 2022-07-16 thomas 	}
539 8a35f56c 2022-07-16 thomas 
540 8a35f56c 2022-07-16 thomas 	if (listen(u_fd, SOCKS_BACKLOG) == -1) {
541 8a35f56c 2022-07-16 thomas 		log_warn("%s: listen", __func__);
542 8a35f56c 2022-07-16 thomas 		return -1;
543 8a35f56c 2022-07-16 thomas 	}
544 8a35f56c 2022-07-16 thomas 
545 8a35f56c 2022-07-16 thomas 	return u_fd;
546 8a35f56c 2022-07-16 thomas }
547 8a35f56c 2022-07-16 thomas 
548 8a35f56c 2022-07-16 thomas int
549 8a35f56c 2022-07-16 thomas sockets_create_socket(struct addresslist *al, in_port_t port)
550 8a35f56c 2022-07-16 thomas {
551 8a35f56c 2022-07-16 thomas 	struct addrinfo hints;
552 8a35f56c 2022-07-16 thomas 	struct address *a;
553 8a35f56c 2022-07-16 thomas 	int fd = -1, o_val = 1, flags;
554 8a35f56c 2022-07-16 thomas 
555 8a35f56c 2022-07-16 thomas 	memset(&hints, 0, sizeof(hints));
556 8a35f56c 2022-07-16 thomas 	hints.ai_family = AF_UNSPEC;
557 8a35f56c 2022-07-16 thomas 	hints.ai_socktype = SOCK_STREAM;
558 8a35f56c 2022-07-16 thomas 	hints.ai_flags |= AI_PASSIVE;
559 8a35f56c 2022-07-16 thomas 
560 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, al, entry) {
561 8a35f56c 2022-07-16 thomas 		if (sockets_socket_af(&a->ss, port) == -1) {
562 8a35f56c 2022-07-16 thomas 			log_warnx("%s: sockets_socket_af", __func__);
563 8a35f56c 2022-07-16 thomas 			goto fail;
564 8a35f56c 2022-07-16 thomas 		}
565 8a35f56c 2022-07-16 thomas 
566 8a35f56c 2022-07-16 thomas 		fd = socket(a->ss.ss_family, hints.ai_socktype,
567 8a35f56c 2022-07-16 thomas 		    a->ipproto);
568 8a35f56c 2022-07-16 thomas 			log_debug("%s: opening socket (%d) for %s", __func__,
569 8a35f56c 2022-07-16 thomas 			    fd, a->ifname);
570 8a35f56c 2022-07-16 thomas 
571 8a35f56c 2022-07-16 thomas 		if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &o_val,
572 8a35f56c 2022-07-16 thomas 		    sizeof(int)) == -1) {
573 8a35f56c 2022-07-16 thomas 			log_warn("%s: setsockopt error", __func__);
574 8a35f56c 2022-07-16 thomas 			return -1;
575 8a35f56c 2022-07-16 thomas 		}
576 8a35f56c 2022-07-16 thomas 
577 8a35f56c 2022-07-16 thomas 		/* non-blocking */
578 8a35f56c 2022-07-16 thomas 		flags = fcntl(fd, F_GETFL);
579 8a35f56c 2022-07-16 thomas 		flags |= O_NONBLOCK;
580 8a35f56c 2022-07-16 thomas 		fcntl(fd, F_SETFL, flags);
581 8a35f56c 2022-07-16 thomas 
582 8a35f56c 2022-07-16 thomas 		if (bind(fd, (struct sockaddr *)&a->ss, a->ss.ss_len) == -1) {
583 8a35f56c 2022-07-16 thomas 			close(fd);
584 8a35f56c 2022-07-16 thomas 			log_info("%s: can't bind to port %d", __func__,
585 8a35f56c 2022-07-16 thomas 			    ntohs(port));
586 8a35f56c 2022-07-16 thomas 			goto fail;
587 8a35f56c 2022-07-16 thomas 		}
588 8a35f56c 2022-07-16 thomas 
589 8a35f56c 2022-07-16 thomas 		if (listen(fd, SOMAXCONN) == -1) {
590 8a35f56c 2022-07-16 thomas 			log_warn("%s, unable to listen on socket", __func__);
591 8a35f56c 2022-07-16 thomas 			goto fail;
592 8a35f56c 2022-07-16 thomas 		}
593 8a35f56c 2022-07-16 thomas 	}
594 8a35f56c 2022-07-16 thomas 
595 8a35f56c 2022-07-16 thomas 	free(a);
596 8a35f56c 2022-07-16 thomas 	return (fd);
597 8a35f56c 2022-07-16 thomas fail:
598 8a35f56c 2022-07-16 thomas 	free(a);
599 8a35f56c 2022-07-16 thomas 	return -1;
600 8a35f56c 2022-07-16 thomas }
601 8a35f56c 2022-07-16 thomas 
602 8a35f56c 2022-07-16 thomas int
603 8a35f56c 2022-07-16 thomas sockets_accept_reserve(int sockfd, struct sockaddr *addr, socklen_t *addrlen,
604 8a35f56c 2022-07-16 thomas     int reserve, volatile int *counter)
605 8a35f56c 2022-07-16 thomas {
606 8a35f56c 2022-07-16 thomas 	int ret;
607 8a35f56c 2022-07-16 thomas 
608 8a35f56c 2022-07-16 thomas 	if (getdtablecount() + reserve +
609 8a35f56c 2022-07-16 thomas 	    ((*counter + 1) * FD_NEEDED) >= getdtablesize()) {
610 8a35f56c 2022-07-16 thomas 		log_debug("inflight fds exceeded");
611 8a35f56c 2022-07-16 thomas 		errno = EMFILE;
612 8a35f56c 2022-07-16 thomas 		return -1;
613 8a35f56c 2022-07-16 thomas 	}
614 8a35f56c 2022-07-16 thomas 
615 8a35f56c 2022-07-16 thomas 	if ((ret = accept4(sockfd, addr, addrlen,
616 8a35f56c 2022-07-16 thomas 	    SOCK_NONBLOCK | SOCK_CLOEXEC)) > -1) {
617 8a35f56c 2022-07-16 thomas 		(*counter)++;
618 8a35f56c 2022-07-16 thomas 		log_debug("inflight incremented, now %d", *counter);
619 8a35f56c 2022-07-16 thomas 	}
620 8a35f56c 2022-07-16 thomas 
621 8a35f56c 2022-07-16 thomas 	return ret;
622 8a35f56c 2022-07-16 thomas }
623 8a35f56c 2022-07-16 thomas 
624 8a35f56c 2022-07-16 thomas void
625 8a35f56c 2022-07-16 thomas sockets_accept_paused(int fd, short events, void *arg)
626 8a35f56c 2022-07-16 thomas {
627 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
628 8a35f56c 2022-07-16 thomas 
629 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
630 8a35f56c 2022-07-16 thomas }
631 8a35f56c 2022-07-16 thomas 
632 8a35f56c 2022-07-16 thomas void
633 8a35f56c 2022-07-16 thomas sockets_socket_accept(int fd, short event, void *arg)
634 8a35f56c 2022-07-16 thomas {
635 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
636 8a35f56c 2022-07-16 thomas 	struct sockaddr_storage ss;
637 8a35f56c 2022-07-16 thomas 	struct timeval backoff;
638 8a35f56c 2022-07-16 thomas 	struct request *c = NULL;
639 8a35f56c 2022-07-16 thomas 	socklen_t len;
640 8a35f56c 2022-07-16 thomas 	int s;
641 8a35f56c 2022-07-16 thomas 
642 8a35f56c 2022-07-16 thomas 	backoff.tv_sec = 1;
643 8a35f56c 2022-07-16 thomas 	backoff.tv_usec = 0;
644 8a35f56c 2022-07-16 thomas 
645 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
646 8a35f56c 2022-07-16 thomas 	if (event & EV_TIMEOUT)
647 8a35f56c 2022-07-16 thomas 		return;
648 8a35f56c 2022-07-16 thomas 
649 8a35f56c 2022-07-16 thomas 	len = sizeof(ss);
650 8a35f56c 2022-07-16 thomas 
651 8a35f56c 2022-07-16 thomas 	s = sockets_accept_reserve(fd, (struct sockaddr *)&ss, &len,
652 8a35f56c 2022-07-16 thomas 	    FD_RESERVE, &cgi_inflight);
653 8a35f56c 2022-07-16 thomas 
654 8a35f56c 2022-07-16 thomas 	if (s == -1) {
655 8a35f56c 2022-07-16 thomas 		switch (errno) {
656 8a35f56c 2022-07-16 thomas 		case EINTR:
657 8a35f56c 2022-07-16 thomas 		case EWOULDBLOCK:
658 8a35f56c 2022-07-16 thomas 		case ECONNABORTED:
659 8a35f56c 2022-07-16 thomas 			return;
660 8a35f56c 2022-07-16 thomas 		case EMFILE:
661 8a35f56c 2022-07-16 thomas 		case ENFILE:
662 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
663 8a35f56c 2022-07-16 thomas 			evtimer_add(&sock->pause, &backoff);
664 8a35f56c 2022-07-16 thomas 			return;
665 8a35f56c 2022-07-16 thomas 		default:
666 8a35f56c 2022-07-16 thomas 			log_warn("%s: accept", __func__);
667 8a35f56c 2022-07-16 thomas 		}
668 8a35f56c 2022-07-16 thomas 	}
669 8a35f56c 2022-07-16 thomas 
670 8a35f56c 2022-07-16 thomas 	if (client_cnt > GOTWEBD_MAXCLIENTS)
671 8a35f56c 2022-07-16 thomas 		goto err;
672 8a35f56c 2022-07-16 thomas 
673 8a35f56c 2022-07-16 thomas 	c = calloc(1, sizeof(struct request));
674 8a35f56c 2022-07-16 thomas 	if (c == NULL) {
675 8a35f56c 2022-07-16 thomas 		log_warn("%s", __func__);
676 8a35f56c 2022-07-16 thomas 		close(s);
677 8a35f56c 2022-07-16 thomas 		cgi_inflight--;
678 8a35f56c 2022-07-16 thomas 		return;
679 8a35f56c 2022-07-16 thomas 	}
680 8a35f56c 2022-07-16 thomas 
681 8a35f56c 2022-07-16 thomas 	c->fd = s;
682 8a35f56c 2022-07-16 thomas 	c->sock = sock;
683 8a35f56c 2022-07-16 thomas 	memcpy(c->priv_fd, sock->priv_fd, sizeof(c->priv_fd));
684 8a35f56c 2022-07-16 thomas 	c->buf_pos = 0;
685 8a35f56c 2022-07-16 thomas 	c->buf_len = 0;
686 8a35f56c 2022-07-16 thomas 	c->request_started = 0;
687 8a35f56c 2022-07-16 thomas 	c->sock->client_status = CLIENT_CONNECT;
688 8a35f56c 2022-07-16 thomas 
689 8a35f56c 2022-07-16 thomas 	event_set(&c->ev, s, EV_READ, fcgi_request, c);
690 8a35f56c 2022-07-16 thomas 	event_add(&c->ev, NULL);
691 8a35f56c 2022-07-16 thomas 
692 8a35f56c 2022-07-16 thomas 	evtimer_set(&c->tmo, fcgi_timeout, c);
693 8a35f56c 2022-07-16 thomas 	evtimer_add(&c->tmo, &timeout);
694 8a35f56c 2022-07-16 thomas 
695 8a35f56c 2022-07-16 thomas 	client_cnt++;
696 8a35f56c 2022-07-16 thomas 
697 8a35f56c 2022-07-16 thomas 	return;
698 8a35f56c 2022-07-16 thomas err:
699 8a35f56c 2022-07-16 thomas 	cgi_inflight--;
700 8a35f56c 2022-07-16 thomas 	close(s);
701 8a35f56c 2022-07-16 thomas 	if (c != NULL)
702 8a35f56c 2022-07-16 thomas 		free(c);
703 8a35f56c 2022-07-16 thomas }
704 8a35f56c 2022-07-16 thomas 
705 8a35f56c 2022-07-16 thomas void
706 8a35f56c 2022-07-16 thomas sockets_rlimit(int maxfd)
707 8a35f56c 2022-07-16 thomas {
708 8a35f56c 2022-07-16 thomas 	struct rlimit rl;
709 8a35f56c 2022-07-16 thomas 
710 8a35f56c 2022-07-16 thomas 	if (getrlimit(RLIMIT_NOFILE, &rl) == -1)
711 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to get resource limit", __func__);
712 8a35f56c 2022-07-16 thomas 	log_debug("%s: max open files %llu", __func__, rl.rlim_max);
713 8a35f56c 2022-07-16 thomas 
714 8a35f56c 2022-07-16 thomas 	/*
715 8a35f56c 2022-07-16 thomas 	 * Allow the maximum number of open file descriptors for this
716 8a35f56c 2022-07-16 thomas 	 * login class (which should be the class "daemon" by default).
717 8a35f56c 2022-07-16 thomas 	 */
718 8a35f56c 2022-07-16 thomas 	if (maxfd == -1)
719 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = rl.rlim_max;
720 8a35f56c 2022-07-16 thomas 	else
721 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = MAXIMUM(rl.rlim_max, (rlim_t)maxfd);
722 8a35f56c 2022-07-16 thomas 	if (setrlimit(RLIMIT_NOFILE, &rl) == -1)
723 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to set resource limit", __func__);
724 8a35f56c 2022-07-16 thomas }