1 8a35f56c 2022-07-16 thomas /*
  2 8a35f56c 2022-07-16 thomas  * Copyright (c) 2016, 2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  3 8a35f56c 2022-07-16 thomas  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
  4 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
  5 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
  6 8a35f56c 2022-07-16 thomas  *
  7 8a35f56c 2022-07-16 thomas  * Permission to use, copy, modify, and distribute this software for any
  8 8a35f56c 2022-07-16 thomas  * purpose with or without fee is hereby granted, provided that the above
  9 8a35f56c 2022-07-16 thomas  * copyright notice and this permission notice appear in all copies.
 10 8a35f56c 2022-07-16 thomas  *
 11 8a35f56c 2022-07-16 thomas  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 12 8a35f56c 2022-07-16 thomas  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 13 8a35f56c 2022-07-16 thomas  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 14 8a35f56c 2022-07-16 thomas  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 15 8a35f56c 2022-07-16 thomas  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 16 8a35f56c 2022-07-16 thomas  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 17 8a35f56c 2022-07-16 thomas  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 18 8a35f56c 2022-07-16 thomas  */
 19 8a35f56c 2022-07-16 thomas 
 20 8a35f56c 2022-07-16 thomas #include <sys/param.h>
 21 8a35f56c 2022-07-16 thomas #include <sys/ioctl.h>
 22 8b925c6c 2022-07-16 thomas #include <sys/queue.h>
 23 8a35f56c 2022-07-16 thomas #include <sys/wait.h>
 24 8a35f56c 2022-07-16 thomas #include <sys/uio.h>
 25 8a35f56c 2022-07-16 thomas #include <sys/resource.h>
 26 8a35f56c 2022-07-16 thomas #include <sys/socket.h>
 27 8a35f56c 2022-07-16 thomas #include <sys/stat.h>
 28 8a35f56c 2022-07-16 thomas #include <sys/time.h>
 29 8a35f56c 2022-07-16 thomas #include <sys/types.h>
 30 8a35f56c 2022-07-16 thomas #include <sys/mman.h>
 31 8a35f56c 2022-07-16 thomas #include <sys/un.h>
 32 8a35f56c 2022-07-16 thomas 
 33 8a35f56c 2022-07-16 thomas #include <net/if.h>
 34 8a35f56c 2022-07-16 thomas #include <netinet/in.h>
 35 8a35f56c 2022-07-16 thomas 
 36 8a35f56c 2022-07-16 thomas #include <errno.h>
 37 8a35f56c 2022-07-16 thomas #include <event.h>
 38 8a35f56c 2022-07-16 thomas #include <fcntl.h>
 39 8a35f56c 2022-07-16 thomas #include <ifaddrs.h>
 40 8a35f56c 2022-07-16 thomas #include <limits.h>
 41 8a35f56c 2022-07-16 thomas #include <netdb.h>
 42 8a35f56c 2022-07-16 thomas #include <poll.h>
 43 8a35f56c 2022-07-16 thomas #include <pwd.h>
 44 8a35f56c 2022-07-16 thomas #include <stddef.h>
 45 8a35f56c 2022-07-16 thomas #include <stdio.h>
 46 8a35f56c 2022-07-16 thomas #include <stdlib.h>
 47 8a35f56c 2022-07-16 thomas #include <string.h>
 48 8a35f56c 2022-07-16 thomas #include <unistd.h>
 49 8a35f56c 2022-07-16 thomas 
 50 8a35f56c 2022-07-16 thomas #include "got_error.h"
 51 8a35f56c 2022-07-16 thomas #include "got_opentemp.h"
 52 8a35f56c 2022-07-16 thomas 
 53 8a35f56c 2022-07-16 thomas #include "proc.h"
 54 8a35f56c 2022-07-16 thomas #include "gotwebd.h"
 55 ff36aeea 2022-07-16 thomas 
 56 ff36aeea 2022-07-16 thomas #include "got_compat.h"
 57 8a35f56c 2022-07-16 thomas 
 58 8a35f56c 2022-07-16 thomas #define SOCKS_BACKLOG 5
 59 8a35f56c 2022-07-16 thomas #define MAXIMUM(a, b)	(((a) > (b)) ? (a) : (b))
 60 8a35f56c 2022-07-16 thomas 
 61 8a35f56c 2022-07-16 thomas 
 62 8a35f56c 2022-07-16 thomas volatile int client_cnt;
 63 8a35f56c 2022-07-16 thomas 
 64 8a35f56c 2022-07-16 thomas struct timeval	timeout = { TIMEOUT_DEFAULT, 0 };
 65 8a35f56c 2022-07-16 thomas 
 66 8a35f56c 2022-07-16 thomas void	 sockets_sighdlr(int, short, void *);
 67 8a35f56c 2022-07-16 thomas void	 sockets_run(struct privsep *, struct privsep_proc *, void *);
 68 8a35f56c 2022-07-16 thomas void	 sockets_launch(void);
 69 8a35f56c 2022-07-16 thomas void	 sockets_purge(struct gotwebd *);
 70 8a35f56c 2022-07-16 thomas void	 sockets_accept_paused(int, short, void *);
 71 8a35f56c 2022-07-16 thomas void	 sockets_dup_new_socket(struct socket *, struct socket *);
 72 8a35f56c 2022-07-16 thomas void	 sockets_rlimit(int);
 73 8a35f56c 2022-07-16 thomas 
 74 8a35f56c 2022-07-16 thomas 
 75 8a35f56c 2022-07-16 thomas int	 sockets_dispatch_gotwebd(int, struct privsep_proc *, struct imsg *);
 76 8a35f56c 2022-07-16 thomas int	 sockets_unix_socket_listen(struct privsep *, struct socket *);
 77 8a35f56c 2022-07-16 thomas int	 sockets_create_socket(struct addresslist *, in_port_t);
 78 8a35f56c 2022-07-16 thomas int	 sockets_accept_reserve(int, struct sockaddr *, socklen_t *, int,
 79 8a35f56c 2022-07-16 thomas 	    volatile int *);
 80 8a35f56c 2022-07-16 thomas 
 81 8a35f56c 2022-07-16 thomas struct socket
 82 8a35f56c 2022-07-16 thomas 	*sockets_conf_new_socket(struct gotwebd *, struct server *, int, int,
 83 8a35f56c 2022-07-16 thomas 	    int);
 84 8a35f56c 2022-07-16 thomas 
 85 8a35f56c 2022-07-16 thomas int cgi_inflight = 0;
 86 8a35f56c 2022-07-16 thomas 
 87 8a35f56c 2022-07-16 thomas static struct privsep_proc procs[] = {
 88 8a35f56c 2022-07-16 thomas 	{ "gotwebd",	PROC_GOTWEBD,	sockets_dispatch_gotwebd  },
 89 8a35f56c 2022-07-16 thomas };
 90 8a35f56c 2022-07-16 thomas 
 91 8a35f56c 2022-07-16 thomas void
 92 8a35f56c 2022-07-16 thomas sockets(struct privsep *ps, struct privsep_proc *p)
 93 8a35f56c 2022-07-16 thomas {
 94 8a35f56c 2022-07-16 thomas 	proc_run(ps, p, procs, nitems(procs), sockets_run, NULL);
 95 8a35f56c 2022-07-16 thomas }
 96 8a35f56c 2022-07-16 thomas 
 97 8a35f56c 2022-07-16 thomas void
 98 8a35f56c 2022-07-16 thomas sockets_run(struct privsep *ps, struct privsep_proc *p, void *arg)
 99 8a35f56c 2022-07-16 thomas {
100 8a35f56c 2022-07-16 thomas 	if (config_init(ps->ps_env) == -1)
101 8a35f56c 2022-07-16 thomas 		fatal("failed to initialize configuration");
102 8a35f56c 2022-07-16 thomas 
103 8a35f56c 2022-07-16 thomas 	p->p_shutdown = sockets_shutdown;
104 8a35f56c 2022-07-16 thomas 
105 8a35f56c 2022-07-16 thomas 	sockets_rlimit(-1);
106 8a35f56c 2022-07-16 thomas 
107 8a35f56c 2022-07-16 thomas 	signal_del(&ps->ps_evsigchld);
108 8a35f56c 2022-07-16 thomas 	signal_set(&ps->ps_evsigchld, SIGCHLD, sockets_sighdlr, ps);
109 8a35f56c 2022-07-16 thomas 	signal_add(&ps->ps_evsigchld, NULL);
110 8a35f56c 2022-07-16 thomas 
111 8a35f56c 2022-07-16 thomas #ifndef PROFILE
112 8a35f56c 2022-07-16 thomas 	if (pledge("stdio rpath wpath cpath inet recvfd proc exec sendfd",
113 8a35f56c 2022-07-16 thomas 	    NULL) == -1)
114 8a35f56c 2022-07-16 thomas 		fatal("pledge");
115 8a35f56c 2022-07-16 thomas #endif
116 8a35f56c 2022-07-16 thomas }
117 8a35f56c 2022-07-16 thomas 
118 8a35f56c 2022-07-16 thomas void
119 8a35f56c 2022-07-16 thomas sockets_parse_sockets(struct gotwebd *env)
120 8a35f56c 2022-07-16 thomas {
121 8a35f56c 2022-07-16 thomas 	struct server *srv;
122 8a35f56c 2022-07-16 thomas 	struct socket *sock, *new_sock = NULL;
123 8a35f56c 2022-07-16 thomas 	struct address *a;
124 8a35f56c 2022-07-16 thomas 	int sock_id = 0, ipv4 = 0, ipv6 = 0;
125 8a35f56c 2022-07-16 thomas 
126 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(srv, env->servers, entry) {
127 8a35f56c 2022-07-16 thomas 		if (srv->unix_socket) {
128 8a35f56c 2022-07-16 thomas 			sock_id++;
129 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
130 8a35f56c 2022-07-16 thomas 			    sock_id, UNIX, 0);
131 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
132 8a35f56c 2022-07-16 thomas 		}
133 8a35f56c 2022-07-16 thomas 
134 8a35f56c 2022-07-16 thomas 		if (srv->fcgi_socket) {
135 8a35f56c 2022-07-16 thomas 			sock_id++;
136 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
137 8a35f56c 2022-07-16 thomas 			    sock_id, FCGI, 0);
138 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
139 8a35f56c 2022-07-16 thomas 
140 8a35f56c 2022-07-16 thomas 			/* add ipv6 children */
141 8a35f56c 2022-07-16 thomas 			TAILQ_FOREACH(sock, env->sockets, entry) {
142 8a35f56c 2022-07-16 thomas 				ipv4 = ipv6 = 0;
143 8a35f56c 2022-07-16 thomas 
144 8a35f56c 2022-07-16 thomas 				TAILQ_FOREACH(a, sock->conf.al, entry) {
145 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET)
146 8a35f56c 2022-07-16 thomas 						ipv4 = 1;
147 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET6)
148 8a35f56c 2022-07-16 thomas 						ipv6 = 1;
149 8a35f56c 2022-07-16 thomas 				}
150 8a35f56c 2022-07-16 thomas 
151 8a35f56c 2022-07-16 thomas 				/* create ipv6 sock */
152 8a35f56c 2022-07-16 thomas 				if (ipv4 == 1 && ipv6 == 1) {
153 8a35f56c 2022-07-16 thomas 					sock_id++;
154 8a35f56c 2022-07-16 thomas 					sock->conf.child_id = sock_id;
155 8a35f56c 2022-07-16 thomas 					new_sock = sockets_conf_new_socket(env,
156 8a35f56c 2022-07-16 thomas 					    srv, sock_id, FCGI, 1);
157 8a35f56c 2022-07-16 thomas 					sockets_dup_new_socket(sock, new_sock);
158 8a35f56c 2022-07-16 thomas 					TAILQ_INSERT_TAIL(env->sockets,
159 8a35f56c 2022-07-16 thomas 					    new_sock, entry);
160 8a35f56c 2022-07-16 thomas 					continue;
161 8a35f56c 2022-07-16 thomas 				}
162 8a35f56c 2022-07-16 thomas 			}
163 8a35f56c 2022-07-16 thomas 		}
164 8a35f56c 2022-07-16 thomas 	}
165 8a35f56c 2022-07-16 thomas }
166 8a35f56c 2022-07-16 thomas 
167 8a35f56c 2022-07-16 thomas void
168 8a35f56c 2022-07-16 thomas sockets_dup_new_socket(struct socket *p_sock, struct socket *sock)
169 8a35f56c 2022-07-16 thomas {
170 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
171 8a35f56c 2022-07-16 thomas 	int n;
172 8a35f56c 2022-07-16 thomas 
173 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = p_sock->conf.id;
174 8a35f56c 2022-07-16 thomas 	sock->conf.ipv4 = 0;
175 8a35f56c 2022-07-16 thomas 	sock->conf.ipv6 = 1;
176 8a35f56c 2022-07-16 thomas 
177 8a35f56c 2022-07-16 thomas 	memcpy(&sock->conf.srv_name, p_sock->conf.srv_name,
178 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name));
179 8a35f56c 2022-07-16 thomas 
180 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_child",
181 8a35f56c 2022-07-16 thomas 	    p_sock->conf.srv_name);
182 8a35f56c 2022-07-16 thomas 	if (n < 0) {
183 8a35f56c 2022-07-16 thomas 		free(p_sock->conf.al);
184 8a35f56c 2022-07-16 thomas 		free(p_sock);
185 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
186 8a35f56c 2022-07-16 thomas 		free(sock);
187 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
188 8a35f56c 2022-07-16 thomas 	}
189 8a35f56c 2022-07-16 thomas 
190 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, p_sock->conf.al, entry) {
191 8a35f56c 2022-07-16 thomas 		if (a->ss.ss_family == AF_INET)
192 8a35f56c 2022-07-16 thomas 			continue;
193 8a35f56c 2022-07-16 thomas 
194 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL)
195 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
196 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
197 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
198 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
199 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
200 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
201 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
202 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
203 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
204 8a35f56c 2022-07-16 thomas 				    __func__);
205 8a35f56c 2022-07-16 thomas 			}
206 8a35f56c 2022-07-16 thomas 		}
207 8a35f56c 2022-07-16 thomas 
208 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
209 8a35f56c 2022-07-16 thomas 	}
210 8a35f56c 2022-07-16 thomas }
211 8a35f56c 2022-07-16 thomas 
212 8a35f56c 2022-07-16 thomas struct socket *
213 8a35f56c 2022-07-16 thomas sockets_conf_new_socket(struct gotwebd *env, struct server *srv, int id,
214 8a35f56c 2022-07-16 thomas     int type, int is_dup)
215 8a35f56c 2022-07-16 thomas {
216 8a35f56c 2022-07-16 thomas 	struct socket *sock;
217 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
218 8a35f56c 2022-07-16 thomas 	int n;
219 8a35f56c 2022-07-16 thomas 
220 8a35f56c 2022-07-16 thomas 	if ((sock = calloc(1, sizeof(*sock))) == NULL)
221 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
222 8a35f56c 2022-07-16 thomas 
223 8a35f56c 2022-07-16 thomas 	if ((sock->conf.al = calloc(1, sizeof(*sock->conf.al))) == NULL) {
224 8a35f56c 2022-07-16 thomas 		free(sock);
225 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
226 8a35f56c 2022-07-16 thomas 	}
227 8a35f56c 2022-07-16 thomas 	TAILQ_INIT(sock->conf.al);
228 8a35f56c 2022-07-16 thomas 
229 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = 0;
230 8a35f56c 2022-07-16 thomas 	sock->conf.id = id;
231 8a35f56c 2022-07-16 thomas 
232 8a35f56c 2022-07-16 thomas 	sock->fd = -1;
233 8a35f56c 2022-07-16 thomas 
234 8a35f56c 2022-07-16 thomas 	sock->conf.type = type;
235 8a35f56c 2022-07-16 thomas 
236 8a35f56c 2022-07-16 thomas 	if (type == UNIX) {
237 8a35f56c 2022-07-16 thomas 		if (strlcpy(sock->conf.unix_socket_name,
238 8a35f56c 2022-07-16 thomas 		    srv->unix_socket_name,
239 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) >=
240 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) {
241 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
242 8a35f56c 2022-07-16 thomas 			free(sock);
243 8a35f56c 2022-07-16 thomas 			fatalx("%s: strlcpy", __func__);
244 8a35f56c 2022-07-16 thomas 		}
245 8a35f56c 2022-07-16 thomas 	} else
246 8a35f56c 2022-07-16 thomas 		sock->conf.ipv4 = 1;
247 8a35f56c 2022-07-16 thomas 
248 8a35f56c 2022-07-16 thomas 	sock->conf.fcgi_socket_port = srv->fcgi_socket_port;
249 8a35f56c 2022-07-16 thomas 
250 8a35f56c 2022-07-16 thomas 	if (is_dup)
251 8a35f56c 2022-07-16 thomas 		goto done;
252 8a35f56c 2022-07-16 thomas 
253 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_parent",
254 8a35f56c 2022-07-16 thomas 	    srv->name);
255 8a35f56c 2022-07-16 thomas 	if (n < 0) {
256 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
257 8a35f56c 2022-07-16 thomas 		free(sock);
258 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
259 8a35f56c 2022-07-16 thomas 	}
260 8a35f56c 2022-07-16 thomas 
261 8a35f56c 2022-07-16 thomas 	if (strlcpy(sock->conf.srv_name, srv->name,
262 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name)) >= sizeof(sock->conf.srv_name)) {
263 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
264 8a35f56c 2022-07-16 thomas 		free(sock);
265 8a35f56c 2022-07-16 thomas 		fatalx("%s: strlcpy", __func__);
266 8a35f56c 2022-07-16 thomas 	}
267 8a35f56c 2022-07-16 thomas 
268 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, srv->al, entry) {
269 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL) {
270 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
271 8a35f56c 2022-07-16 thomas 			free(sock);
272 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
273 8a35f56c 2022-07-16 thomas 		}
274 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
275 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
276 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
277 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
278 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
279 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
280 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
281 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
282 8a35f56c 2022-07-16 thomas 				    __func__);
283 8a35f56c 2022-07-16 thomas 			}
284 8a35f56c 2022-07-16 thomas 		}
285 8a35f56c 2022-07-16 thomas 
286 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
287 8a35f56c 2022-07-16 thomas 	}
288 8a35f56c 2022-07-16 thomas done:
289 8a35f56c 2022-07-16 thomas 	return (sock);
290 8a35f56c 2022-07-16 thomas }
291 8a35f56c 2022-07-16 thomas 
292 8a35f56c 2022-07-16 thomas void
293 8a35f56c 2022-07-16 thomas sockets_launch(void)
294 8a35f56c 2022-07-16 thomas {
295 8a35f56c 2022-07-16 thomas 	struct socket *sock;
296 8a35f56c 2022-07-16 thomas 
297 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(sock, gotwebd_env->sockets, entry) {
298 8a35f56c 2022-07-16 thomas 		log_debug("%s: configuring socket %d (%d)", __func__,
299 8a35f56c 2022-07-16 thomas 		    sock->conf.id, sock->fd);
300 8a35f56c 2022-07-16 thomas 
301 8a35f56c 2022-07-16 thomas 		event_set(&sock->ev, sock->fd, EV_READ | EV_PERSIST,
302 8a35f56c 2022-07-16 thomas 		    sockets_socket_accept, sock);
303 8a35f56c 2022-07-16 thomas 
304 8a35f56c 2022-07-16 thomas 		if (event_add(&sock->ev, NULL))
305 8a35f56c 2022-07-16 thomas 			fatalx("event add sock");
306 8a35f56c 2022-07-16 thomas 
307 8a35f56c 2022-07-16 thomas 		evtimer_set(&sock->pause, sockets_accept_paused, sock);
308 8a35f56c 2022-07-16 thomas 
309 8a35f56c 2022-07-16 thomas 		log_debug("%s: running socket listener %d", __func__,
310 8a35f56c 2022-07-16 thomas 		    sock->conf.id);
311 8a35f56c 2022-07-16 thomas 	}
312 8a35f56c 2022-07-16 thomas }
313 8a35f56c 2022-07-16 thomas 
314 8a35f56c 2022-07-16 thomas void
315 8a35f56c 2022-07-16 thomas sockets_purge(struct gotwebd *env)
316 8a35f56c 2022-07-16 thomas {
317 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
318 8a35f56c 2022-07-16 thomas 
319 8a35f56c 2022-07-16 thomas 	/* shutdown and remove sockets */
320 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, env->sockets, entry, tsock) {
321 8a35f56c 2022-07-16 thomas 		if (event_initialized(&sock->ev))
322 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
323 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->evt))
324 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->evt);
325 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->pause))
326 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->pause);
327 8a35f56c 2022-07-16 thomas 		if (sock->fd != -1)
328 8a35f56c 2022-07-16 thomas 			close(sock->fd);
329 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(env->sockets, sock, entry);
330 8a35f56c 2022-07-16 thomas 	}
331 8a35f56c 2022-07-16 thomas }
332 8a35f56c 2022-07-16 thomas 
333 8a35f56c 2022-07-16 thomas int
334 8a35f56c 2022-07-16 thomas sockets_dispatch_gotwebd(int fd, struct privsep_proc *p, struct imsg *imsg)
335 8a35f56c 2022-07-16 thomas {
336 8a35f56c 2022-07-16 thomas 	struct privsep *ps = p->p_ps;
337 8a35f56c 2022-07-16 thomas 	int res = 0, cmd = 0, verbose;
338 8a35f56c 2022-07-16 thomas 
339 8a35f56c 2022-07-16 thomas 	switch (imsg->hdr.type) {
340 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SRV:
341 8a35f56c 2022-07-16 thomas 		config_getserver(gotwebd_env, imsg);
342 8a35f56c 2022-07-16 thomas 		break;
343 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SOCK:
344 8a35f56c 2022-07-16 thomas 		config_getsock(gotwebd_env, imsg);
345 8a35f56c 2022-07-16 thomas 		break;
346 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_FD:
347 8a35f56c 2022-07-16 thomas 		config_getfd(gotwebd_env, imsg);
348 8a35f56c 2022-07-16 thomas 		break;
349 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_DONE:
350 8a35f56c 2022-07-16 thomas 		config_getcfg(gotwebd_env, imsg);
351 8a35f56c 2022-07-16 thomas 		break;
352 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_START:
353 8a35f56c 2022-07-16 thomas 		sockets_launch();
354 8a35f56c 2022-07-16 thomas 		break;
355 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_VERBOSE:
356 8a35f56c 2022-07-16 thomas 		IMSG_SIZE_CHECK(imsg, &verbose);
357 8a35f56c 2022-07-16 thomas 		memcpy(&verbose, imsg->data, sizeof(verbose));
358 8a35f56c 2022-07-16 thomas 		log_setverbose(verbose);
359 8a35f56c 2022-07-16 thomas 		break;
360 8a35f56c 2022-07-16 thomas 	default:
361 8a35f56c 2022-07-16 thomas 		return -1;
362 8a35f56c 2022-07-16 thomas 	}
363 8a35f56c 2022-07-16 thomas 
364 8a35f56c 2022-07-16 thomas 	switch (cmd) {
365 8a35f56c 2022-07-16 thomas 	case 0:
366 8a35f56c 2022-07-16 thomas 		break;
367 8a35f56c 2022-07-16 thomas 	default:
368 8a35f56c 2022-07-16 thomas 		if (proc_compose_imsg(ps, PROC_GOTWEBD, -1, cmd,
369 8a35f56c 2022-07-16 thomas 		    imsg->hdr.peerid, -1, &res, sizeof(res)) == -1)
370 8a35f56c 2022-07-16 thomas 			return -1;
371 8a35f56c 2022-07-16 thomas 		break;
372 8a35f56c 2022-07-16 thomas 	}
373 8a35f56c 2022-07-16 thomas 
374 8a35f56c 2022-07-16 thomas 	return 0;
375 8a35f56c 2022-07-16 thomas }
376 8a35f56c 2022-07-16 thomas 
377 8a35f56c 2022-07-16 thomas void
378 8a35f56c 2022-07-16 thomas sockets_sighdlr(int sig, short event, void *arg)
379 8a35f56c 2022-07-16 thomas {
380 8a35f56c 2022-07-16 thomas 	switch (sig) {
381 8a35f56c 2022-07-16 thomas 	case SIGHUP:
382 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGHUP", __func__);
383 8a35f56c 2022-07-16 thomas 		break;
384 8a35f56c 2022-07-16 thomas 	case SIGPIPE:
385 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGPIPE", __func__);
386 8a35f56c 2022-07-16 thomas 		break;
387 8a35f56c 2022-07-16 thomas 	case SIGUSR1:
388 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGUSR1", __func__);
389 8a35f56c 2022-07-16 thomas 		break;
390 8a35f56c 2022-07-16 thomas 	case SIGCHLD:
391 8a35f56c 2022-07-16 thomas 		break;
392 8a35f56c 2022-07-16 thomas 	default:
393 8a35f56c 2022-07-16 thomas 		log_info("SIGNAL: %d", sig);
394 8a35f56c 2022-07-16 thomas 		fatalx("unexpected signal");
395 8a35f56c 2022-07-16 thomas 	}
396 8a35f56c 2022-07-16 thomas }
397 8a35f56c 2022-07-16 thomas 
398 8a35f56c 2022-07-16 thomas void
399 8a35f56c 2022-07-16 thomas sockets_shutdown(void)
400 8a35f56c 2022-07-16 thomas {
401 8a35f56c 2022-07-16 thomas 	struct server *srv, *tsrv;
402 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
403 8a35f56c 2022-07-16 thomas 
404 8a35f56c 2022-07-16 thomas 	sockets_purge(gotwebd_env);
405 8a35f56c 2022-07-16 thomas 
406 8a35f56c 2022-07-16 thomas 	/* clean sockets */
407 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, gotwebd_env->sockets, entry, tsock) {
408 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(gotwebd_env->sockets, sock, entry);
409 8a35f56c 2022-07-16 thomas 		close(sock->fd);
410 8a35f56c 2022-07-16 thomas 		free(sock);
411 8a35f56c 2022-07-16 thomas 	}
412 8a35f56c 2022-07-16 thomas 
413 8a35f56c 2022-07-16 thomas 	/* clean servers */
414 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(srv, gotwebd_env->servers, entry, tsrv)
415 8a35f56c 2022-07-16 thomas 		free(srv);
416 8a35f56c 2022-07-16 thomas 
417 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->sockets);
418 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->servers);
419 8a35f56c 2022-07-16 thomas 	free(gotwebd_env);
420 8a35f56c 2022-07-16 thomas }
421 8a35f56c 2022-07-16 thomas 
422 8a35f56c 2022-07-16 thomas int
423 8a35f56c 2022-07-16 thomas sockets_privinit(struct gotwebd *env, struct socket *sock)
424 8a35f56c 2022-07-16 thomas {
425 8a35f56c 2022-07-16 thomas 	struct privsep *ps = env->gotwebd_ps;
426 8a35f56c 2022-07-16 thomas 
427 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == UNIX) {
428 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing unix socket %s", __func__,
429 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
430 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_unix_socket_listen(ps, sock);
431 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
432 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
433 8a35f56c 2022-07-16 thomas 			return -1;
434 8a35f56c 2022-07-16 thomas 		}
435 8a35f56c 2022-07-16 thomas 	}
436 8a35f56c 2022-07-16 thomas 
437 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == FCGI) {
438 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing fcgi socket for %s", __func__,
439 8a35f56c 2022-07-16 thomas 		    sock->conf.name);
440 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_create_socket(sock->conf.al,
441 8a35f56c 2022-07-16 thomas 		    sock->conf.fcgi_socket_port);
442 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
443 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
444 8a35f56c 2022-07-16 thomas 			return -1;
445 8a35f56c 2022-07-16 thomas 		}
446 8a35f56c 2022-07-16 thomas 	}
447 8a35f56c 2022-07-16 thomas 
448 8a35f56c 2022-07-16 thomas 	return 0;
449 8a35f56c 2022-07-16 thomas }
450 8a35f56c 2022-07-16 thomas 
451 8a35f56c 2022-07-16 thomas int
452 8a35f56c 2022-07-16 thomas sockets_unix_socket_listen(struct privsep *ps, struct socket *sock)
453 8a35f56c 2022-07-16 thomas {
454 8a35f56c 2022-07-16 thomas 	struct gotwebd *env = ps->ps_env;
455 8a35f56c 2022-07-16 thomas 	struct sockaddr_un sun;
456 8a35f56c 2022-07-16 thomas 	struct socket *tsock;
457 8a35f56c 2022-07-16 thomas 	int u_fd = -1;
458 8a35f56c 2022-07-16 thomas 	mode_t old_umask, mode;
459 8a35f56c 2022-07-16 thomas 
460 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(tsock, env->sockets, entry) {
461 8a35f56c 2022-07-16 thomas 		if (strcmp(tsock->conf.unix_socket_name,
462 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name) == 0 &&
463 8a35f56c 2022-07-16 thomas 		    tsock->fd != -1)
464 8a35f56c 2022-07-16 thomas 			return (tsock->fd);
465 8a35f56c 2022-07-16 thomas 	}
466 8a35f56c 2022-07-16 thomas 
467 dd7a7d5b 2022-07-16 thomas 	/* TA: FIXME:  this needs upstreaming. */
468 dd7a7d5b 2022-07-16 thomas 	int socket_flags = SOCK_STREAM | SOCK_NONBLOCK;
469 dd7a7d5b 2022-07-16 thomas #ifdef SOCK_CLOEXEC
470 dd7a7d5b 2022-07-16 thomas 	socket_flags |= SOCK_CLOEXEC;
471 dd7a7d5b 2022-07-16 thomas #endif
472 dd7a7d5b 2022-07-16 thomas 	u_fd = socket(AF_UNIX, socket_flags, 0);
473 8a35f56c 2022-07-16 thomas 	if (u_fd == -1) {
474 8a35f56c 2022-07-16 thomas 		log_warn("%s: socket", __func__);
475 8a35f56c 2022-07-16 thomas 		return -1;
476 8a35f56c 2022-07-16 thomas 	}
477 8a35f56c 2022-07-16 thomas 
478 8a35f56c 2022-07-16 thomas 	sun.sun_family = AF_UNIX;
479 8a35f56c 2022-07-16 thomas 	if (strlcpy(sun.sun_path, sock->conf.unix_socket_name,
480 8a35f56c 2022-07-16 thomas 	    sizeof(sun.sun_path)) >= sizeof(sun.sun_path)) {
481 8a35f56c 2022-07-16 thomas 		log_warn("%s: %s name too long", __func__,
482 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
483 8a35f56c 2022-07-16 thomas 		close(u_fd);
484 8a35f56c 2022-07-16 thomas 		return -1;
485 8a35f56c 2022-07-16 thomas 	}
486 8a35f56c 2022-07-16 thomas 
487 8a35f56c 2022-07-16 thomas 	if (unlink(sock->conf.unix_socket_name) == -1) {
488 8a35f56c 2022-07-16 thomas 		if (errno != ENOENT) {
489 8a35f56c 2022-07-16 thomas 			log_warn("%s: unlink %s", __func__,
490 8a35f56c 2022-07-16 thomas 			    sock->conf.unix_socket_name);
491 8a35f56c 2022-07-16 thomas 			close(u_fd);
492 8a35f56c 2022-07-16 thomas 			return -1;
493 8a35f56c 2022-07-16 thomas 		}
494 8a35f56c 2022-07-16 thomas 	}
495 8a35f56c 2022-07-16 thomas 
496 8a35f56c 2022-07-16 thomas 	old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
497 8a35f56c 2022-07-16 thomas 	mode = S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP;
498 8a35f56c 2022-07-16 thomas 
499 8a35f56c 2022-07-16 thomas 	if (bind(u_fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
500 8a35f56c 2022-07-16 thomas 		log_warn("%s: bind: %s", __func__, sock->conf.unix_socket_name);
501 8a35f56c 2022-07-16 thomas 		close(u_fd);
502 8a35f56c 2022-07-16 thomas 		(void)umask(old_umask);
503 8a35f56c 2022-07-16 thomas 		return -1;
504 8a35f56c 2022-07-16 thomas 	}
505 8a35f56c 2022-07-16 thomas 
506 8a35f56c 2022-07-16 thomas 	(void)umask(old_umask);
507 8a35f56c 2022-07-16 thomas 
508 8a35f56c 2022-07-16 thomas 	if (chmod(sock->conf.unix_socket_name, mode) == -1) {
509 8a35f56c 2022-07-16 thomas 		log_warn("%s: chmod", __func__);
510 8a35f56c 2022-07-16 thomas 		close(u_fd);
511 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
512 8a35f56c 2022-07-16 thomas 		return -1;
513 8a35f56c 2022-07-16 thomas 	}
514 8a35f56c 2022-07-16 thomas 
515 8a35f56c 2022-07-16 thomas 	if (chown(sock->conf.unix_socket_name, ps->ps_pw->pw_uid,
516 8a35f56c 2022-07-16 thomas 	    ps->ps_pw->pw_gid) == -1) {
517 8a35f56c 2022-07-16 thomas 		log_warn("%s: chown", __func__);
518 8a35f56c 2022-07-16 thomas 		close(u_fd);
519 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
520 8a35f56c 2022-07-16 thomas 		return -1;
521 8a35f56c 2022-07-16 thomas 	}
522 8a35f56c 2022-07-16 thomas 
523 8a35f56c 2022-07-16 thomas 	if (listen(u_fd, SOCKS_BACKLOG) == -1) {
524 8a35f56c 2022-07-16 thomas 		log_warn("%s: listen", __func__);
525 8a35f56c 2022-07-16 thomas 		return -1;
526 8a35f56c 2022-07-16 thomas 	}
527 8a35f56c 2022-07-16 thomas 
528 8a35f56c 2022-07-16 thomas 	return u_fd;
529 8a35f56c 2022-07-16 thomas }
530 8a35f56c 2022-07-16 thomas 
531 8a35f56c 2022-07-16 thomas int
532 8a35f56c 2022-07-16 thomas sockets_create_socket(struct addresslist *al, in_port_t port)
533 8a35f56c 2022-07-16 thomas {
534 8a35f56c 2022-07-16 thomas 	struct addrinfo hints;
535 8a35f56c 2022-07-16 thomas 	struct address *a;
536 8a35f56c 2022-07-16 thomas 	int fd = -1, o_val = 1, flags;
537 8a35f56c 2022-07-16 thomas 
538 8a35f56c 2022-07-16 thomas 	memset(&hints, 0, sizeof(hints));
539 8a35f56c 2022-07-16 thomas 	hints.ai_family = AF_UNSPEC;
540 8a35f56c 2022-07-16 thomas 	hints.ai_socktype = SOCK_STREAM;
541 8a35f56c 2022-07-16 thomas 	hints.ai_flags |= AI_PASSIVE;
542 8a35f56c 2022-07-16 thomas 
543 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, al, entry) {
544 275b5ade 2022-08-06 thomas 		switch (a->ss.ss_family) {
545 275b5ade 2022-08-06 thomas 		case AF_INET:
546 275b5ade 2022-08-06 thomas 			((struct sockaddr_in *)(&a->ss))->sin_port = port;
547 275b5ade 2022-08-06 thomas 			break;
548 275b5ade 2022-08-06 thomas 		case AF_INET6:
549 275b5ade 2022-08-06 thomas 			((struct sockaddr_in6 *)(&a->ss))->sin6_port = port;
550 275b5ade 2022-08-06 thomas 			break;
551 275b5ade 2022-08-06 thomas 		default:
552 275b5ade 2022-08-06 thomas 			log_warnx("%s: unknown address family", __func__);
553 8a35f56c 2022-07-16 thomas 			goto fail;
554 8a35f56c 2022-07-16 thomas 		}
555 8a35f56c 2022-07-16 thomas 
556 8a35f56c 2022-07-16 thomas 		fd = socket(a->ss.ss_family, hints.ai_socktype,
557 8a35f56c 2022-07-16 thomas 		    a->ipproto);
558 8a35f56c 2022-07-16 thomas 			log_debug("%s: opening socket (%d) for %s", __func__,
559 8a35f56c 2022-07-16 thomas 			    fd, a->ifname);
560 8a35f56c 2022-07-16 thomas 
561 8a35f56c 2022-07-16 thomas 		if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &o_val,
562 8a35f56c 2022-07-16 thomas 		    sizeof(int)) == -1) {
563 8a35f56c 2022-07-16 thomas 			log_warn("%s: setsockopt error", __func__);
564 8a35f56c 2022-07-16 thomas 			return -1;
565 8a35f56c 2022-07-16 thomas 		}
566 8a35f56c 2022-07-16 thomas 
567 8a35f56c 2022-07-16 thomas 		/* non-blocking */
568 8a35f56c 2022-07-16 thomas 		flags = fcntl(fd, F_GETFL);
569 8a35f56c 2022-07-16 thomas 		flags |= O_NONBLOCK;
570 8a35f56c 2022-07-16 thomas 		fcntl(fd, F_SETFL, flags);
571 8a35f56c 2022-07-16 thomas 
572 ff36aeea 2022-07-16 thomas 		/* TA: 'sizeof a' vs a->ss.len */ 
573 ff36aeea 2022-07-16 thomas 		if (bind(fd, (struct sockaddr *)&a->ss, sizeof a) == -1) {
574 8a35f56c 2022-07-16 thomas 			close(fd);
575 8a35f56c 2022-07-16 thomas 			log_info("%s: can't bind to port %d", __func__,
576 8a35f56c 2022-07-16 thomas 			    ntohs(port));
577 8a35f56c 2022-07-16 thomas 			goto fail;
578 8a35f56c 2022-07-16 thomas 		}
579 8a35f56c 2022-07-16 thomas 
580 8a35f56c 2022-07-16 thomas 		if (listen(fd, SOMAXCONN) == -1) {
581 8a35f56c 2022-07-16 thomas 			log_warn("%s, unable to listen on socket", __func__);
582 8a35f56c 2022-07-16 thomas 			goto fail;
583 8a35f56c 2022-07-16 thomas 		}
584 8a35f56c 2022-07-16 thomas 	}
585 8a35f56c 2022-07-16 thomas 
586 8a35f56c 2022-07-16 thomas 	free(a);
587 8a35f56c 2022-07-16 thomas 	return (fd);
588 8a35f56c 2022-07-16 thomas fail:
589 8a35f56c 2022-07-16 thomas 	free(a);
590 8a35f56c 2022-07-16 thomas 	return -1;
591 8a35f56c 2022-07-16 thomas }
592 8a35f56c 2022-07-16 thomas 
593 8a35f56c 2022-07-16 thomas int
594 8a35f56c 2022-07-16 thomas sockets_accept_reserve(int sockfd, struct sockaddr *addr, socklen_t *addrlen,
595 8a35f56c 2022-07-16 thomas     int reserve, volatile int *counter)
596 8a35f56c 2022-07-16 thomas {
597 8a35f56c 2022-07-16 thomas 	int ret;
598 8a35f56c 2022-07-16 thomas 
599 8a35f56c 2022-07-16 thomas 	if (getdtablecount() + reserve +
600 8a35f56c 2022-07-16 thomas 	    ((*counter + 1) * FD_NEEDED) >= getdtablesize()) {
601 8a35f56c 2022-07-16 thomas 		log_debug("inflight fds exceeded");
602 8a35f56c 2022-07-16 thomas 		errno = EMFILE;
603 8a35f56c 2022-07-16 thomas 		return -1;
604 8a35f56c 2022-07-16 thomas 	}
605 5ae43732 2022-07-16 thomas /* TA:  This needs fixing upstream. */
606 5ae43732 2022-07-16 thomas #ifdef __APPLE__
607 5ae43732 2022-07-16 thomas 	ret = accept(sockfd, addr, addrlen);
608 5ae43732 2022-07-16 thomas #else
609 5ae43732 2022-07-16 thomas 	ret = accept4(sockfd, addr, addrlen, SOCK_NONBLOCK | SOCK_CLOEXEC);
610 5ae43732 2022-07-16 thomas #endif
611 8a35f56c 2022-07-16 thomas 
612 5ae43732 2022-07-16 thomas 	if (ret > -1) {
613 8a35f56c 2022-07-16 thomas 		(*counter)++;
614 8a35f56c 2022-07-16 thomas 		log_debug("inflight incremented, now %d", *counter);
615 8a35f56c 2022-07-16 thomas 	}
616 8a35f56c 2022-07-16 thomas 
617 8a35f56c 2022-07-16 thomas 	return ret;
618 8a35f56c 2022-07-16 thomas }
619 8a35f56c 2022-07-16 thomas 
620 8a35f56c 2022-07-16 thomas void
621 8a35f56c 2022-07-16 thomas sockets_accept_paused(int fd, short events, void *arg)
622 8a35f56c 2022-07-16 thomas {
623 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
624 8a35f56c 2022-07-16 thomas 
625 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
626 8a35f56c 2022-07-16 thomas }
627 8a35f56c 2022-07-16 thomas 
628 8a35f56c 2022-07-16 thomas void
629 8a35f56c 2022-07-16 thomas sockets_socket_accept(int fd, short event, void *arg)
630 8a35f56c 2022-07-16 thomas {
631 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
632 8a35f56c 2022-07-16 thomas 	struct sockaddr_storage ss;
633 8a35f56c 2022-07-16 thomas 	struct timeval backoff;
634 8a35f56c 2022-07-16 thomas 	struct request *c = NULL;
635 8a35f56c 2022-07-16 thomas 	socklen_t len;
636 8a35f56c 2022-07-16 thomas 	int s;
637 8a35f56c 2022-07-16 thomas 
638 8a35f56c 2022-07-16 thomas 	backoff.tv_sec = 1;
639 8a35f56c 2022-07-16 thomas 	backoff.tv_usec = 0;
640 8a35f56c 2022-07-16 thomas 
641 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
642 8a35f56c 2022-07-16 thomas 	if (event & EV_TIMEOUT)
643 8a35f56c 2022-07-16 thomas 		return;
644 8a35f56c 2022-07-16 thomas 
645 8a35f56c 2022-07-16 thomas 	len = sizeof(ss);
646 8a35f56c 2022-07-16 thomas 
647 8a35f56c 2022-07-16 thomas 	s = sockets_accept_reserve(fd, (struct sockaddr *)&ss, &len,
648 8a35f56c 2022-07-16 thomas 	    FD_RESERVE, &cgi_inflight);
649 8a35f56c 2022-07-16 thomas 
650 8a35f56c 2022-07-16 thomas 	if (s == -1) {
651 8a35f56c 2022-07-16 thomas 		switch (errno) {
652 8a35f56c 2022-07-16 thomas 		case EINTR:
653 8a35f56c 2022-07-16 thomas 		case EWOULDBLOCK:
654 8a35f56c 2022-07-16 thomas 		case ECONNABORTED:
655 8a35f56c 2022-07-16 thomas 			return;
656 8a35f56c 2022-07-16 thomas 		case EMFILE:
657 8a35f56c 2022-07-16 thomas 		case ENFILE:
658 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
659 8a35f56c 2022-07-16 thomas 			evtimer_add(&sock->pause, &backoff);
660 8a35f56c 2022-07-16 thomas 			return;
661 8a35f56c 2022-07-16 thomas 		default:
662 8a35f56c 2022-07-16 thomas 			log_warn("%s: accept", __func__);
663 8a35f56c 2022-07-16 thomas 		}
664 8a35f56c 2022-07-16 thomas 	}
665 8a35f56c 2022-07-16 thomas 
666 8a35f56c 2022-07-16 thomas 	if (client_cnt > GOTWEBD_MAXCLIENTS)
667 8a35f56c 2022-07-16 thomas 		goto err;
668 8a35f56c 2022-07-16 thomas 
669 8a35f56c 2022-07-16 thomas 	c = calloc(1, sizeof(struct request));
670 8a35f56c 2022-07-16 thomas 	if (c == NULL) {
671 8a35f56c 2022-07-16 thomas 		log_warn("%s", __func__);
672 8a35f56c 2022-07-16 thomas 		close(s);
673 8a35f56c 2022-07-16 thomas 		cgi_inflight--;
674 8a35f56c 2022-07-16 thomas 		return;
675 8a35f56c 2022-07-16 thomas 	}
676 8a35f56c 2022-07-16 thomas 
677 8a35f56c 2022-07-16 thomas 	c->fd = s;
678 8a35f56c 2022-07-16 thomas 	c->sock = sock;
679 8a35f56c 2022-07-16 thomas 	memcpy(c->priv_fd, sock->priv_fd, sizeof(c->priv_fd));
680 8a35f56c 2022-07-16 thomas 	c->buf_pos = 0;
681 8a35f56c 2022-07-16 thomas 	c->buf_len = 0;
682 8a35f56c 2022-07-16 thomas 	c->request_started = 0;
683 8a35f56c 2022-07-16 thomas 	c->sock->client_status = CLIENT_CONNECT;
684 8a35f56c 2022-07-16 thomas 
685 8a35f56c 2022-07-16 thomas 	event_set(&c->ev, s, EV_READ, fcgi_request, c);
686 8a35f56c 2022-07-16 thomas 	event_add(&c->ev, NULL);
687 8a35f56c 2022-07-16 thomas 
688 8a35f56c 2022-07-16 thomas 	evtimer_set(&c->tmo, fcgi_timeout, c);
689 8a35f56c 2022-07-16 thomas 	evtimer_add(&c->tmo, &timeout);
690 8a35f56c 2022-07-16 thomas 
691 8a35f56c 2022-07-16 thomas 	client_cnt++;
692 8a35f56c 2022-07-16 thomas 
693 8a35f56c 2022-07-16 thomas 	return;
694 8a35f56c 2022-07-16 thomas err:
695 8a35f56c 2022-07-16 thomas 	cgi_inflight--;
696 8a35f56c 2022-07-16 thomas 	close(s);
697 8a35f56c 2022-07-16 thomas 	if (c != NULL)
698 8a35f56c 2022-07-16 thomas 		free(c);
699 8a35f56c 2022-07-16 thomas }
700 8a35f56c 2022-07-16 thomas 
701 8a35f56c 2022-07-16 thomas void
702 8a35f56c 2022-07-16 thomas sockets_rlimit(int maxfd)
703 8a35f56c 2022-07-16 thomas {
704 8a35f56c 2022-07-16 thomas 	struct rlimit rl;
705 8a35f56c 2022-07-16 thomas 
706 8a35f56c 2022-07-16 thomas 	if (getrlimit(RLIMIT_NOFILE, &rl) == -1)
707 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to get resource limit", __func__);
708 ceac46c9 2022-07-17 thomas 	log_debug("%s: max open files %llu", __func__,
709 ceac46c9 2022-07-17 thomas 	    (unsigned long long)rl.rlim_max);
710 8a35f56c 2022-07-16 thomas 
711 8a35f56c 2022-07-16 thomas 	/*
712 8a35f56c 2022-07-16 thomas 	 * Allow the maximum number of open file descriptors for this
713 8a35f56c 2022-07-16 thomas 	 * login class (which should be the class "daemon" by default).
714 8a35f56c 2022-07-16 thomas 	 */
715 8a35f56c 2022-07-16 thomas 	if (maxfd == -1)
716 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = rl.rlim_max;
717 8a35f56c 2022-07-16 thomas 	else
718 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = MAXIMUM(rl.rlim_max, (rlim_t)maxfd);
719 8a35f56c 2022-07-16 thomas 	if (setrlimit(RLIMIT_NOFILE, &rl) == -1)
720 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to set resource limit", __func__);
721 ff36aeea 2022-07-16 thomas }