1 8a35f56c 2022-07-16 thomas /*
  2 8a35f56c 2022-07-16 thomas  * Copyright (c) 2016, 2019, 2020-2021 Tracey Emery <tracey@traceyemery.net>
  3 8a35f56c 2022-07-16 thomas  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
  4 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
  5 8a35f56c 2022-07-16 thomas  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
  6 8a35f56c 2022-07-16 thomas  *
  7 8a35f56c 2022-07-16 thomas  * Permission to use, copy, modify, and distribute this software for any
  8 8a35f56c 2022-07-16 thomas  * purpose with or without fee is hereby granted, provided that the above
  9 8a35f56c 2022-07-16 thomas  * copyright notice and this permission notice appear in all copies.
 10 8a35f56c 2022-07-16 thomas  *
 11 8a35f56c 2022-07-16 thomas  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 12 8a35f56c 2022-07-16 thomas  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 13 8a35f56c 2022-07-16 thomas  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 14 8a35f56c 2022-07-16 thomas  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 15 8a35f56c 2022-07-16 thomas  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 16 8a35f56c 2022-07-16 thomas  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 17 8a35f56c 2022-07-16 thomas  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 18 8a35f56c 2022-07-16 thomas  */
 19 8a35f56c 2022-07-16 thomas 
 20 8a35f56c 2022-07-16 thomas #include <sys/param.h>
 21 8a35f56c 2022-07-16 thomas #include <sys/ioctl.h>
 22 8b925c6c 2022-07-16 thomas #include <sys/queue.h>
 23 8a35f56c 2022-07-16 thomas #include <sys/wait.h>
 24 8a35f56c 2022-07-16 thomas #include <sys/uio.h>
 25 8a35f56c 2022-07-16 thomas #include <sys/resource.h>
 26 8a35f56c 2022-07-16 thomas #include <sys/socket.h>
 27 8a35f56c 2022-07-16 thomas #include <sys/stat.h>
 28 8a35f56c 2022-07-16 thomas #include <sys/time.h>
 29 8a35f56c 2022-07-16 thomas #include <sys/types.h>
 30 8a35f56c 2022-07-16 thomas #include <sys/mman.h>
 31 8a35f56c 2022-07-16 thomas #include <sys/un.h>
 32 8a35f56c 2022-07-16 thomas 
 33 8a35f56c 2022-07-16 thomas #include <net/if.h>
 34 8a35f56c 2022-07-16 thomas #include <netinet/in.h>
 35 8a35f56c 2022-07-16 thomas 
 36 8a35f56c 2022-07-16 thomas #include <errno.h>
 37 8a35f56c 2022-07-16 thomas #include <event.h>
 38 8a35f56c 2022-07-16 thomas #include <fcntl.h>
 39 8a35f56c 2022-07-16 thomas #include <ifaddrs.h>
 40 8a35f56c 2022-07-16 thomas #include <limits.h>
 41 8a35f56c 2022-07-16 thomas #include <netdb.h>
 42 8a35f56c 2022-07-16 thomas #include <poll.h>
 43 8a35f56c 2022-07-16 thomas #include <pwd.h>
 44 8a35f56c 2022-07-16 thomas #include <stddef.h>
 45 8a35f56c 2022-07-16 thomas #include <stdio.h>
 46 8a35f56c 2022-07-16 thomas #include <stdlib.h>
 47 8a35f56c 2022-07-16 thomas #include <string.h>
 48 8a35f56c 2022-07-16 thomas #include <unistd.h>
 49 8a35f56c 2022-07-16 thomas 
 50 8a35f56c 2022-07-16 thomas #include "got_error.h"
 51 8a35f56c 2022-07-16 thomas #include "got_opentemp.h"
 52 8a35f56c 2022-07-16 thomas 
 53 8a35f56c 2022-07-16 thomas #include "proc.h"
 54 8a35f56c 2022-07-16 thomas #include "gotwebd.h"
 55 ff36aeea 2022-07-16 thomas 
 56 ff36aeea 2022-07-16 thomas #include "got_compat.h"
 57 8a35f56c 2022-07-16 thomas 
 58 8a35f56c 2022-07-16 thomas #define SOCKS_BACKLOG 5
 59 8a35f56c 2022-07-16 thomas #define MAXIMUM(a, b)	(((a) > (b)) ? (a) : (b))
 60 8a35f56c 2022-07-16 thomas 
 61 8a35f56c 2022-07-16 thomas 
 62 8a35f56c 2022-07-16 thomas volatile int client_cnt;
 63 8a35f56c 2022-07-16 thomas 
 64 8a35f56c 2022-07-16 thomas struct timeval	timeout = { TIMEOUT_DEFAULT, 0 };
 65 8a35f56c 2022-07-16 thomas 
 66 8a35f56c 2022-07-16 thomas void	 sockets_sighdlr(int, short, void *);
 67 8a35f56c 2022-07-16 thomas void	 sockets_run(struct privsep *, struct privsep_proc *, void *);
 68 8a35f56c 2022-07-16 thomas void	 sockets_launch(void);
 69 8a35f56c 2022-07-16 thomas void	 sockets_purge(struct gotwebd *);
 70 8a35f56c 2022-07-16 thomas void	 sockets_accept_paused(int, short, void *);
 71 8a35f56c 2022-07-16 thomas void	 sockets_dup_new_socket(struct socket *, struct socket *);
 72 8a35f56c 2022-07-16 thomas void	 sockets_rlimit(int);
 73 8a35f56c 2022-07-16 thomas 
 74 8a35f56c 2022-07-16 thomas 
 75 8a35f56c 2022-07-16 thomas int	 sockets_dispatch_gotwebd(int, struct privsep_proc *, struct imsg *);
 76 8a35f56c 2022-07-16 thomas int	 sockets_unix_socket_listen(struct privsep *, struct socket *);
 77 8a35f56c 2022-07-16 thomas int	 sockets_create_socket(struct addresslist *, in_port_t);
 78 8a35f56c 2022-07-16 thomas int	 sockets_socket_af(struct sockaddr_storage *, in_port_t);
 79 8a35f56c 2022-07-16 thomas int	 sockets_accept_reserve(int, struct sockaddr *, socklen_t *, int,
 80 8a35f56c 2022-07-16 thomas 	    volatile int *);
 81 8a35f56c 2022-07-16 thomas 
 82 8a35f56c 2022-07-16 thomas struct socket
 83 8a35f56c 2022-07-16 thomas 	*sockets_conf_new_socket(struct gotwebd *, struct server *, int, int,
 84 8a35f56c 2022-07-16 thomas 	    int);
 85 8a35f56c 2022-07-16 thomas 
 86 8a35f56c 2022-07-16 thomas int cgi_inflight = 0;
 87 8a35f56c 2022-07-16 thomas 
 88 8a35f56c 2022-07-16 thomas static struct privsep_proc procs[] = {
 89 8a35f56c 2022-07-16 thomas 	{ "gotwebd",	PROC_GOTWEBD,	sockets_dispatch_gotwebd  },
 90 8a35f56c 2022-07-16 thomas };
 91 8a35f56c 2022-07-16 thomas 
 92 8a35f56c 2022-07-16 thomas void
 93 8a35f56c 2022-07-16 thomas sockets(struct privsep *ps, struct privsep_proc *p)
 94 8a35f56c 2022-07-16 thomas {
 95 8a35f56c 2022-07-16 thomas 	proc_run(ps, p, procs, nitems(procs), sockets_run, NULL);
 96 8a35f56c 2022-07-16 thomas }
 97 8a35f56c 2022-07-16 thomas 
 98 8a35f56c 2022-07-16 thomas void
 99 8a35f56c 2022-07-16 thomas sockets_run(struct privsep *ps, struct privsep_proc *p, void *arg)
100 8a35f56c 2022-07-16 thomas {
101 8a35f56c 2022-07-16 thomas 	if (config_init(ps->ps_env) == -1)
102 8a35f56c 2022-07-16 thomas 		fatal("failed to initialize configuration");
103 8a35f56c 2022-07-16 thomas 
104 8a35f56c 2022-07-16 thomas 	p->p_shutdown = sockets_shutdown;
105 8a35f56c 2022-07-16 thomas 
106 8a35f56c 2022-07-16 thomas 	sockets_rlimit(-1);
107 8a35f56c 2022-07-16 thomas 
108 8a35f56c 2022-07-16 thomas 	signal_del(&ps->ps_evsigchld);
109 8a35f56c 2022-07-16 thomas 	signal_set(&ps->ps_evsigchld, SIGCHLD, sockets_sighdlr, ps);
110 8a35f56c 2022-07-16 thomas 	signal_add(&ps->ps_evsigchld, NULL);
111 8a35f56c 2022-07-16 thomas 
112 8a35f56c 2022-07-16 thomas #ifndef PROFILE
113 8a35f56c 2022-07-16 thomas 	if (pledge("stdio rpath wpath cpath inet recvfd proc exec sendfd",
114 8a35f56c 2022-07-16 thomas 	    NULL) == -1)
115 8a35f56c 2022-07-16 thomas 		fatal("pledge");
116 8a35f56c 2022-07-16 thomas #endif
117 8a35f56c 2022-07-16 thomas }
118 8a35f56c 2022-07-16 thomas 
119 8a35f56c 2022-07-16 thomas void
120 8a35f56c 2022-07-16 thomas sockets_parse_sockets(struct gotwebd *env)
121 8a35f56c 2022-07-16 thomas {
122 8a35f56c 2022-07-16 thomas 	struct server *srv;
123 8a35f56c 2022-07-16 thomas 	struct socket *sock, *new_sock = NULL;
124 8a35f56c 2022-07-16 thomas 	struct address *a;
125 8a35f56c 2022-07-16 thomas 	int sock_id = 0, ipv4 = 0, ipv6 = 0;
126 8a35f56c 2022-07-16 thomas 
127 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(srv, env->servers, entry) {
128 8a35f56c 2022-07-16 thomas 		if (srv->unix_socket) {
129 8a35f56c 2022-07-16 thomas 			sock_id++;
130 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
131 8a35f56c 2022-07-16 thomas 			    sock_id, UNIX, 0);
132 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
133 8a35f56c 2022-07-16 thomas 		}
134 8a35f56c 2022-07-16 thomas 
135 8a35f56c 2022-07-16 thomas 		if (srv->fcgi_socket) {
136 8a35f56c 2022-07-16 thomas 			sock_id++;
137 8a35f56c 2022-07-16 thomas 			new_sock = sockets_conf_new_socket(env, srv,
138 8a35f56c 2022-07-16 thomas 			    sock_id, FCGI, 0);
139 8a35f56c 2022-07-16 thomas 			TAILQ_INSERT_TAIL(env->sockets, new_sock, entry);
140 8a35f56c 2022-07-16 thomas 
141 8a35f56c 2022-07-16 thomas 			/* add ipv6 children */
142 8a35f56c 2022-07-16 thomas 			TAILQ_FOREACH(sock, env->sockets, entry) {
143 8a35f56c 2022-07-16 thomas 				ipv4 = ipv6 = 0;
144 8a35f56c 2022-07-16 thomas 
145 8a35f56c 2022-07-16 thomas 				TAILQ_FOREACH(a, sock->conf.al, entry) {
146 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET)
147 8a35f56c 2022-07-16 thomas 						ipv4 = 1;
148 8a35f56c 2022-07-16 thomas 					if (a->ss.ss_family == AF_INET6)
149 8a35f56c 2022-07-16 thomas 						ipv6 = 1;
150 8a35f56c 2022-07-16 thomas 				}
151 8a35f56c 2022-07-16 thomas 
152 8a35f56c 2022-07-16 thomas 				/* create ipv6 sock */
153 8a35f56c 2022-07-16 thomas 				if (ipv4 == 1 && ipv6 == 1) {
154 8a35f56c 2022-07-16 thomas 					sock_id++;
155 8a35f56c 2022-07-16 thomas 					sock->conf.child_id = sock_id;
156 8a35f56c 2022-07-16 thomas 					new_sock = sockets_conf_new_socket(env,
157 8a35f56c 2022-07-16 thomas 					    srv, sock_id, FCGI, 1);
158 8a35f56c 2022-07-16 thomas 					sockets_dup_new_socket(sock, new_sock);
159 8a35f56c 2022-07-16 thomas 					TAILQ_INSERT_TAIL(env->sockets,
160 8a35f56c 2022-07-16 thomas 					    new_sock, entry);
161 8a35f56c 2022-07-16 thomas 					continue;
162 8a35f56c 2022-07-16 thomas 				}
163 8a35f56c 2022-07-16 thomas 			}
164 8a35f56c 2022-07-16 thomas 		}
165 8a35f56c 2022-07-16 thomas 	}
166 8a35f56c 2022-07-16 thomas }
167 8a35f56c 2022-07-16 thomas 
168 8a35f56c 2022-07-16 thomas void
169 8a35f56c 2022-07-16 thomas sockets_dup_new_socket(struct socket *p_sock, struct socket *sock)
170 8a35f56c 2022-07-16 thomas {
171 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
172 8a35f56c 2022-07-16 thomas 	int n;
173 8a35f56c 2022-07-16 thomas 
174 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = p_sock->conf.id;
175 8a35f56c 2022-07-16 thomas 	sock->conf.ipv4 = 0;
176 8a35f56c 2022-07-16 thomas 	sock->conf.ipv6 = 1;
177 8a35f56c 2022-07-16 thomas 
178 8a35f56c 2022-07-16 thomas 	memcpy(&sock->conf.srv_name, p_sock->conf.srv_name,
179 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name));
180 8a35f56c 2022-07-16 thomas 
181 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_child",
182 8a35f56c 2022-07-16 thomas 	    p_sock->conf.srv_name);
183 8a35f56c 2022-07-16 thomas 	if (n < 0) {
184 8a35f56c 2022-07-16 thomas 		free(p_sock->conf.al);
185 8a35f56c 2022-07-16 thomas 		free(p_sock);
186 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
187 8a35f56c 2022-07-16 thomas 		free(sock);
188 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
189 8a35f56c 2022-07-16 thomas 	}
190 8a35f56c 2022-07-16 thomas 
191 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, p_sock->conf.al, entry) {
192 8a35f56c 2022-07-16 thomas 		if (a->ss.ss_family == AF_INET)
193 8a35f56c 2022-07-16 thomas 			continue;
194 8a35f56c 2022-07-16 thomas 
195 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL)
196 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
197 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
198 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
199 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
200 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
201 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
202 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
203 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
204 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
205 8a35f56c 2022-07-16 thomas 				    __func__);
206 8a35f56c 2022-07-16 thomas 			}
207 8a35f56c 2022-07-16 thomas 		}
208 8a35f56c 2022-07-16 thomas 
209 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
210 8a35f56c 2022-07-16 thomas 	}
211 8a35f56c 2022-07-16 thomas }
212 8a35f56c 2022-07-16 thomas 
213 8a35f56c 2022-07-16 thomas struct socket *
214 8a35f56c 2022-07-16 thomas sockets_conf_new_socket(struct gotwebd *env, struct server *srv, int id,
215 8a35f56c 2022-07-16 thomas     int type, int is_dup)
216 8a35f56c 2022-07-16 thomas {
217 8a35f56c 2022-07-16 thomas 	struct socket *sock;
218 8a35f56c 2022-07-16 thomas 	struct address *a, *acp;
219 8a35f56c 2022-07-16 thomas 	int n;
220 8a35f56c 2022-07-16 thomas 
221 8a35f56c 2022-07-16 thomas 	if ((sock = calloc(1, sizeof(*sock))) == NULL)
222 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
223 8a35f56c 2022-07-16 thomas 
224 8a35f56c 2022-07-16 thomas 	if ((sock->conf.al = calloc(1, sizeof(*sock->conf.al))) == NULL) {
225 8a35f56c 2022-07-16 thomas 		free(sock);
226 8a35f56c 2022-07-16 thomas 		fatalx("%s: calloc", __func__);
227 8a35f56c 2022-07-16 thomas 	}
228 8a35f56c 2022-07-16 thomas 	TAILQ_INIT(sock->conf.al);
229 8a35f56c 2022-07-16 thomas 
230 8a35f56c 2022-07-16 thomas 	sock->conf.parent_id = 0;
231 8a35f56c 2022-07-16 thomas 	sock->conf.id = id;
232 8a35f56c 2022-07-16 thomas 
233 8a35f56c 2022-07-16 thomas 	sock->fd = -1;
234 8a35f56c 2022-07-16 thomas 
235 8a35f56c 2022-07-16 thomas 	sock->conf.type = type;
236 8a35f56c 2022-07-16 thomas 
237 8a35f56c 2022-07-16 thomas 	if (type == UNIX) {
238 8a35f56c 2022-07-16 thomas 		if (strlcpy(sock->conf.unix_socket_name,
239 8a35f56c 2022-07-16 thomas 		    srv->unix_socket_name,
240 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) >=
241 8a35f56c 2022-07-16 thomas 		    sizeof(sock->conf.unix_socket_name)) {
242 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
243 8a35f56c 2022-07-16 thomas 			free(sock);
244 8a35f56c 2022-07-16 thomas 			fatalx("%s: strlcpy", __func__);
245 8a35f56c 2022-07-16 thomas 		}
246 8a35f56c 2022-07-16 thomas 	} else
247 8a35f56c 2022-07-16 thomas 		sock->conf.ipv4 = 1;
248 8a35f56c 2022-07-16 thomas 
249 8a35f56c 2022-07-16 thomas 	sock->conf.fcgi_socket_port = srv->fcgi_socket_port;
250 8a35f56c 2022-07-16 thomas 
251 8a35f56c 2022-07-16 thomas 	if (is_dup)
252 8a35f56c 2022-07-16 thomas 		goto done;
253 8a35f56c 2022-07-16 thomas 
254 8a35f56c 2022-07-16 thomas 	n = snprintf(sock->conf.name, GOTWEBD_MAXTEXT, "%s_parent",
255 8a35f56c 2022-07-16 thomas 	    srv->name);
256 8a35f56c 2022-07-16 thomas 	if (n < 0) {
257 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
258 8a35f56c 2022-07-16 thomas 		free(sock);
259 8a35f56c 2022-07-16 thomas 		fatalx("%s: snprintf", __func__);
260 8a35f56c 2022-07-16 thomas 	}
261 8a35f56c 2022-07-16 thomas 
262 8a35f56c 2022-07-16 thomas 	if (strlcpy(sock->conf.srv_name, srv->name,
263 8a35f56c 2022-07-16 thomas 	    sizeof(sock->conf.srv_name)) >= sizeof(sock->conf.srv_name)) {
264 8a35f56c 2022-07-16 thomas 		free(sock->conf.al);
265 8a35f56c 2022-07-16 thomas 		free(sock);
266 8a35f56c 2022-07-16 thomas 		fatalx("%s: strlcpy", __func__);
267 8a35f56c 2022-07-16 thomas 	}
268 8a35f56c 2022-07-16 thomas 
269 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, srv->al, entry) {
270 8a35f56c 2022-07-16 thomas 		if ((acp = calloc(1, sizeof(*acp))) == NULL) {
271 8a35f56c 2022-07-16 thomas 			free(sock->conf.al);
272 8a35f56c 2022-07-16 thomas 			free(sock);
273 8a35f56c 2022-07-16 thomas 			fatal("%s: calloc", __func__);
274 8a35f56c 2022-07-16 thomas 		}
275 8a35f56c 2022-07-16 thomas 		memcpy(&acp->ss, &a->ss, sizeof(acp->ss));
276 8a35f56c 2022-07-16 thomas 		acp->ipproto = a->ipproto;
277 8a35f56c 2022-07-16 thomas 		acp->prefixlen = a->prefixlen;
278 8a35f56c 2022-07-16 thomas 		acp->port = a->port;
279 8a35f56c 2022-07-16 thomas 		if (strlen(a->ifname) != 0) {
280 8a35f56c 2022-07-16 thomas 			if (strlcpy(acp->ifname, a->ifname,
281 8a35f56c 2022-07-16 thomas 			    sizeof(acp->ifname)) >= sizeof(acp->ifname)) {
282 8a35f56c 2022-07-16 thomas 				fatalx("%s: interface name truncated",
283 8a35f56c 2022-07-16 thomas 				    __func__);
284 8a35f56c 2022-07-16 thomas 			}
285 8a35f56c 2022-07-16 thomas 		}
286 8a35f56c 2022-07-16 thomas 
287 8a35f56c 2022-07-16 thomas 		TAILQ_INSERT_TAIL(sock->conf.al, acp, entry);
288 8a35f56c 2022-07-16 thomas 	}
289 8a35f56c 2022-07-16 thomas done:
290 8a35f56c 2022-07-16 thomas 	return (sock);
291 8a35f56c 2022-07-16 thomas }
292 8a35f56c 2022-07-16 thomas 
293 8a35f56c 2022-07-16 thomas int
294 8a35f56c 2022-07-16 thomas sockets_socket_af(struct sockaddr_storage *ss, in_port_t port)
295 8a35f56c 2022-07-16 thomas {
296 8a35f56c 2022-07-16 thomas 	switch (ss->ss_family) {
297 8a35f56c 2022-07-16 thomas 	case AF_INET:
298 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in *)ss)->sin_port = port;
299 ff36aeea 2022-07-16 thomas /* TA: Iffy... */
300 ff36aeea 2022-07-16 thomas #ifndef __linux__
301 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in *)ss)->sin_len =
302 8a35f56c 2022-07-16 thomas 		    sizeof(struct sockaddr_in);
303 ff36aeea 2022-07-16 thomas #endif
304 8a35f56c 2022-07-16 thomas 		break;
305 8a35f56c 2022-07-16 thomas 	case AF_INET6:
306 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in6 *)ss)->sin6_port = port;
307 ff36aeea 2022-07-16 thomas /* TA: Iffy... */
308 ff36aeea 2022-07-16 thomas #ifndef __linux__
309 8a35f56c 2022-07-16 thomas 		((struct sockaddr_in6 *)ss)->sin6_len =
310 8a35f56c 2022-07-16 thomas 		    sizeof(struct sockaddr_in6);
311 ff36aeea 2022-07-16 thomas #endif
312 8a35f56c 2022-07-16 thomas 		break;
313 8a35f56c 2022-07-16 thomas 	default:
314 8a35f56c 2022-07-16 thomas 		return -1;
315 8a35f56c 2022-07-16 thomas 	}
316 8a35f56c 2022-07-16 thomas 
317 8a35f56c 2022-07-16 thomas 	return 0;
318 8a35f56c 2022-07-16 thomas }
319 8a35f56c 2022-07-16 thomas 
320 8a35f56c 2022-07-16 thomas void
321 8a35f56c 2022-07-16 thomas sockets_launch(void)
322 8a35f56c 2022-07-16 thomas {
323 8a35f56c 2022-07-16 thomas 	struct socket *sock;
324 8a35f56c 2022-07-16 thomas 
325 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(sock, gotwebd_env->sockets, entry) {
326 8a35f56c 2022-07-16 thomas 		log_debug("%s: configuring socket %d (%d)", __func__,
327 8a35f56c 2022-07-16 thomas 		    sock->conf.id, sock->fd);
328 8a35f56c 2022-07-16 thomas 
329 8a35f56c 2022-07-16 thomas 		event_set(&sock->ev, sock->fd, EV_READ | EV_PERSIST,
330 8a35f56c 2022-07-16 thomas 		    sockets_socket_accept, sock);
331 8a35f56c 2022-07-16 thomas 
332 8a35f56c 2022-07-16 thomas 		if (event_add(&sock->ev, NULL))
333 8a35f56c 2022-07-16 thomas 			fatalx("event add sock");
334 8a35f56c 2022-07-16 thomas 
335 8a35f56c 2022-07-16 thomas 		evtimer_set(&sock->pause, sockets_accept_paused, sock);
336 8a35f56c 2022-07-16 thomas 
337 8a35f56c 2022-07-16 thomas 		log_debug("%s: running socket listener %d", __func__,
338 8a35f56c 2022-07-16 thomas 		    sock->conf.id);
339 8a35f56c 2022-07-16 thomas 	}
340 8a35f56c 2022-07-16 thomas }
341 8a35f56c 2022-07-16 thomas 
342 8a35f56c 2022-07-16 thomas void
343 8a35f56c 2022-07-16 thomas sockets_purge(struct gotwebd *env)
344 8a35f56c 2022-07-16 thomas {
345 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
346 8a35f56c 2022-07-16 thomas 
347 8a35f56c 2022-07-16 thomas 	/* shutdown and remove sockets */
348 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, env->sockets, entry, tsock) {
349 8a35f56c 2022-07-16 thomas 		if (event_initialized(&sock->ev))
350 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
351 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->evt))
352 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->evt);
353 8a35f56c 2022-07-16 thomas 		if (evtimer_initialized(&sock->pause))
354 8a35f56c 2022-07-16 thomas 			evtimer_del(&sock->pause);
355 8a35f56c 2022-07-16 thomas 		if (sock->fd != -1)
356 8a35f56c 2022-07-16 thomas 			close(sock->fd);
357 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(env->sockets, sock, entry);
358 8a35f56c 2022-07-16 thomas 	}
359 8a35f56c 2022-07-16 thomas }
360 8a35f56c 2022-07-16 thomas 
361 8a35f56c 2022-07-16 thomas int
362 8a35f56c 2022-07-16 thomas sockets_dispatch_gotwebd(int fd, struct privsep_proc *p, struct imsg *imsg)
363 8a35f56c 2022-07-16 thomas {
364 8a35f56c 2022-07-16 thomas 	struct privsep *ps = p->p_ps;
365 8a35f56c 2022-07-16 thomas 	int res = 0, cmd = 0, verbose;
366 8a35f56c 2022-07-16 thomas 
367 8a35f56c 2022-07-16 thomas 	switch (imsg->hdr.type) {
368 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SRV:
369 8a35f56c 2022-07-16 thomas 		config_getserver(gotwebd_env, imsg);
370 8a35f56c 2022-07-16 thomas 		break;
371 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_SOCK:
372 8a35f56c 2022-07-16 thomas 		config_getsock(gotwebd_env, imsg);
373 8a35f56c 2022-07-16 thomas 		break;
374 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_FD:
375 8a35f56c 2022-07-16 thomas 		config_getfd(gotwebd_env, imsg);
376 8a35f56c 2022-07-16 thomas 		break;
377 8a35f56c 2022-07-16 thomas 	case IMSG_CFG_DONE:
378 8a35f56c 2022-07-16 thomas 		config_getcfg(gotwebd_env, imsg);
379 8a35f56c 2022-07-16 thomas 		break;
380 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_START:
381 8a35f56c 2022-07-16 thomas 		sockets_launch();
382 8a35f56c 2022-07-16 thomas 		break;
383 8a35f56c 2022-07-16 thomas 	case IMSG_CTL_VERBOSE:
384 8a35f56c 2022-07-16 thomas 		IMSG_SIZE_CHECK(imsg, &verbose);
385 8a35f56c 2022-07-16 thomas 		memcpy(&verbose, imsg->data, sizeof(verbose));
386 8a35f56c 2022-07-16 thomas 		log_setverbose(verbose);
387 8a35f56c 2022-07-16 thomas 		break;
388 8a35f56c 2022-07-16 thomas 	default:
389 8a35f56c 2022-07-16 thomas 		return -1;
390 8a35f56c 2022-07-16 thomas 	}
391 8a35f56c 2022-07-16 thomas 
392 8a35f56c 2022-07-16 thomas 	switch (cmd) {
393 8a35f56c 2022-07-16 thomas 	case 0:
394 8a35f56c 2022-07-16 thomas 		break;
395 8a35f56c 2022-07-16 thomas 	default:
396 8a35f56c 2022-07-16 thomas 		if (proc_compose_imsg(ps, PROC_GOTWEBD, -1, cmd,
397 8a35f56c 2022-07-16 thomas 		    imsg->hdr.peerid, -1, &res, sizeof(res)) == -1)
398 8a35f56c 2022-07-16 thomas 			return -1;
399 8a35f56c 2022-07-16 thomas 		break;
400 8a35f56c 2022-07-16 thomas 	}
401 8a35f56c 2022-07-16 thomas 
402 8a35f56c 2022-07-16 thomas 	return 0;
403 8a35f56c 2022-07-16 thomas }
404 8a35f56c 2022-07-16 thomas 
405 8a35f56c 2022-07-16 thomas void
406 8a35f56c 2022-07-16 thomas sockets_sighdlr(int sig, short event, void *arg)
407 8a35f56c 2022-07-16 thomas {
408 8a35f56c 2022-07-16 thomas 	switch (sig) {
409 8a35f56c 2022-07-16 thomas 	case SIGHUP:
410 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGHUP", __func__);
411 8a35f56c 2022-07-16 thomas 		break;
412 8a35f56c 2022-07-16 thomas 	case SIGPIPE:
413 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGPIPE", __func__);
414 8a35f56c 2022-07-16 thomas 		break;
415 8a35f56c 2022-07-16 thomas 	case SIGUSR1:
416 8a35f56c 2022-07-16 thomas 		log_info("%s: ignoring SIGUSR1", __func__);
417 8a35f56c 2022-07-16 thomas 		break;
418 8a35f56c 2022-07-16 thomas 	case SIGCHLD:
419 8a35f56c 2022-07-16 thomas 		break;
420 8a35f56c 2022-07-16 thomas 	default:
421 8a35f56c 2022-07-16 thomas 		log_info("SIGNAL: %d", sig);
422 8a35f56c 2022-07-16 thomas 		fatalx("unexpected signal");
423 8a35f56c 2022-07-16 thomas 	}
424 8a35f56c 2022-07-16 thomas }
425 8a35f56c 2022-07-16 thomas 
426 8a35f56c 2022-07-16 thomas void
427 8a35f56c 2022-07-16 thomas sockets_shutdown(void)
428 8a35f56c 2022-07-16 thomas {
429 8a35f56c 2022-07-16 thomas 	struct server *srv, *tsrv;
430 8a35f56c 2022-07-16 thomas 	struct socket *sock, *tsock;
431 8a35f56c 2022-07-16 thomas 
432 8a35f56c 2022-07-16 thomas 	sockets_purge(gotwebd_env);
433 8a35f56c 2022-07-16 thomas 
434 8a35f56c 2022-07-16 thomas 	/* clean sockets */
435 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(sock, gotwebd_env->sockets, entry, tsock) {
436 8a35f56c 2022-07-16 thomas 		TAILQ_REMOVE(gotwebd_env->sockets, sock, entry);
437 8a35f56c 2022-07-16 thomas 		close(sock->fd);
438 8a35f56c 2022-07-16 thomas 		free(sock);
439 8a35f56c 2022-07-16 thomas 	}
440 8a35f56c 2022-07-16 thomas 
441 8a35f56c 2022-07-16 thomas 	/* clean servers */
442 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH_SAFE(srv, gotwebd_env->servers, entry, tsrv)
443 8a35f56c 2022-07-16 thomas 		free(srv);
444 8a35f56c 2022-07-16 thomas 
445 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->sockets);
446 8a35f56c 2022-07-16 thomas 	free(gotwebd_env->servers);
447 8a35f56c 2022-07-16 thomas 	free(gotwebd_env);
448 8a35f56c 2022-07-16 thomas }
449 8a35f56c 2022-07-16 thomas 
450 8a35f56c 2022-07-16 thomas int
451 8a35f56c 2022-07-16 thomas sockets_privinit(struct gotwebd *env, struct socket *sock)
452 8a35f56c 2022-07-16 thomas {
453 8a35f56c 2022-07-16 thomas 	struct privsep *ps = env->gotwebd_ps;
454 8a35f56c 2022-07-16 thomas 
455 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == UNIX) {
456 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing unix socket %s", __func__,
457 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
458 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_unix_socket_listen(ps, sock);
459 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
460 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
461 8a35f56c 2022-07-16 thomas 			return -1;
462 8a35f56c 2022-07-16 thomas 		}
463 8a35f56c 2022-07-16 thomas 	}
464 8a35f56c 2022-07-16 thomas 
465 8a35f56c 2022-07-16 thomas 	if (sock->conf.type == FCGI) {
466 8a35f56c 2022-07-16 thomas 		log_debug("%s: initializing fcgi socket for %s", __func__,
467 8a35f56c 2022-07-16 thomas 		    sock->conf.name);
468 8a35f56c 2022-07-16 thomas 		sock->fd = sockets_create_socket(sock->conf.al,
469 8a35f56c 2022-07-16 thomas 		    sock->conf.fcgi_socket_port);
470 8a35f56c 2022-07-16 thomas 		if (sock->fd == -1) {
471 8a35f56c 2022-07-16 thomas 			log_warnx("%s: create unix socket failed", __func__);
472 8a35f56c 2022-07-16 thomas 			return -1;
473 8a35f56c 2022-07-16 thomas 		}
474 8a35f56c 2022-07-16 thomas 	}
475 8a35f56c 2022-07-16 thomas 
476 8a35f56c 2022-07-16 thomas 	return 0;
477 8a35f56c 2022-07-16 thomas }
478 8a35f56c 2022-07-16 thomas 
479 8a35f56c 2022-07-16 thomas int
480 8a35f56c 2022-07-16 thomas sockets_unix_socket_listen(struct privsep *ps, struct socket *sock)
481 8a35f56c 2022-07-16 thomas {
482 8a35f56c 2022-07-16 thomas 	struct gotwebd *env = ps->ps_env;
483 8a35f56c 2022-07-16 thomas 	struct sockaddr_un sun;
484 8a35f56c 2022-07-16 thomas 	struct socket *tsock;
485 8a35f56c 2022-07-16 thomas 	int u_fd = -1;
486 8a35f56c 2022-07-16 thomas 	mode_t old_umask, mode;
487 8a35f56c 2022-07-16 thomas 
488 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(tsock, env->sockets, entry) {
489 8a35f56c 2022-07-16 thomas 		if (strcmp(tsock->conf.unix_socket_name,
490 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name) == 0 &&
491 8a35f56c 2022-07-16 thomas 		    tsock->fd != -1)
492 8a35f56c 2022-07-16 thomas 			return (tsock->fd);
493 8a35f56c 2022-07-16 thomas 	}
494 8a35f56c 2022-07-16 thomas 
495 dd7a7d5b 2022-07-16 thomas 	/* TA: FIXME:  this needs upstreaming. */
496 dd7a7d5b 2022-07-16 thomas 	int socket_flags = SOCK_STREAM | SOCK_NONBLOCK;
497 dd7a7d5b 2022-07-16 thomas #ifdef SOCK_CLOEXEC
498 dd7a7d5b 2022-07-16 thomas 	socket_flags |= SOCK_CLOEXEC;
499 dd7a7d5b 2022-07-16 thomas #endif
500 dd7a7d5b 2022-07-16 thomas 	u_fd = socket(AF_UNIX, socket_flags, 0);
501 8a35f56c 2022-07-16 thomas 	if (u_fd == -1) {
502 8a35f56c 2022-07-16 thomas 		log_warn("%s: socket", __func__);
503 8a35f56c 2022-07-16 thomas 		return -1;
504 8a35f56c 2022-07-16 thomas 	}
505 8a35f56c 2022-07-16 thomas 
506 8a35f56c 2022-07-16 thomas 	sun.sun_family = AF_UNIX;
507 8a35f56c 2022-07-16 thomas 	if (strlcpy(sun.sun_path, sock->conf.unix_socket_name,
508 8a35f56c 2022-07-16 thomas 	    sizeof(sun.sun_path)) >= sizeof(sun.sun_path)) {
509 8a35f56c 2022-07-16 thomas 		log_warn("%s: %s name too long", __func__,
510 8a35f56c 2022-07-16 thomas 		    sock->conf.unix_socket_name);
511 8a35f56c 2022-07-16 thomas 		close(u_fd);
512 8a35f56c 2022-07-16 thomas 		return -1;
513 8a35f56c 2022-07-16 thomas 	}
514 8a35f56c 2022-07-16 thomas 
515 8a35f56c 2022-07-16 thomas 	if (unlink(sock->conf.unix_socket_name) == -1) {
516 8a35f56c 2022-07-16 thomas 		if (errno != ENOENT) {
517 8a35f56c 2022-07-16 thomas 			log_warn("%s: unlink %s", __func__,
518 8a35f56c 2022-07-16 thomas 			    sock->conf.unix_socket_name);
519 8a35f56c 2022-07-16 thomas 			close(u_fd);
520 8a35f56c 2022-07-16 thomas 			return -1;
521 8a35f56c 2022-07-16 thomas 		}
522 8a35f56c 2022-07-16 thomas 	}
523 8a35f56c 2022-07-16 thomas 
524 8a35f56c 2022-07-16 thomas 	old_umask = umask(S_IXUSR|S_IXGRP|S_IWOTH|S_IROTH|S_IXOTH);
525 8a35f56c 2022-07-16 thomas 	mode = S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP;
526 8a35f56c 2022-07-16 thomas 
527 8a35f56c 2022-07-16 thomas 	if (bind(u_fd, (struct sockaddr *)&sun, sizeof(sun)) == -1) {
528 8a35f56c 2022-07-16 thomas 		log_warn("%s: bind: %s", __func__, sock->conf.unix_socket_name);
529 8a35f56c 2022-07-16 thomas 		close(u_fd);
530 8a35f56c 2022-07-16 thomas 		(void)umask(old_umask);
531 8a35f56c 2022-07-16 thomas 		return -1;
532 8a35f56c 2022-07-16 thomas 	}
533 8a35f56c 2022-07-16 thomas 
534 8a35f56c 2022-07-16 thomas 	(void)umask(old_umask);
535 8a35f56c 2022-07-16 thomas 
536 8a35f56c 2022-07-16 thomas 	if (chmod(sock->conf.unix_socket_name, mode) == -1) {
537 8a35f56c 2022-07-16 thomas 		log_warn("%s: chmod", __func__);
538 8a35f56c 2022-07-16 thomas 		close(u_fd);
539 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
540 8a35f56c 2022-07-16 thomas 		return -1;
541 8a35f56c 2022-07-16 thomas 	}
542 8a35f56c 2022-07-16 thomas 
543 8a35f56c 2022-07-16 thomas 	if (chown(sock->conf.unix_socket_name, ps->ps_pw->pw_uid,
544 8a35f56c 2022-07-16 thomas 	    ps->ps_pw->pw_gid) == -1) {
545 8a35f56c 2022-07-16 thomas 		log_warn("%s: chown", __func__);
546 8a35f56c 2022-07-16 thomas 		close(u_fd);
547 8a35f56c 2022-07-16 thomas 		(void)unlink(sock->conf.unix_socket_name);
548 8a35f56c 2022-07-16 thomas 		return -1;
549 8a35f56c 2022-07-16 thomas 	}
550 8a35f56c 2022-07-16 thomas 
551 8a35f56c 2022-07-16 thomas 	if (listen(u_fd, SOCKS_BACKLOG) == -1) {
552 8a35f56c 2022-07-16 thomas 		log_warn("%s: listen", __func__);
553 8a35f56c 2022-07-16 thomas 		return -1;
554 8a35f56c 2022-07-16 thomas 	}
555 8a35f56c 2022-07-16 thomas 
556 8a35f56c 2022-07-16 thomas 	return u_fd;
557 8a35f56c 2022-07-16 thomas }
558 8a35f56c 2022-07-16 thomas 
559 8a35f56c 2022-07-16 thomas int
560 8a35f56c 2022-07-16 thomas sockets_create_socket(struct addresslist *al, in_port_t port)
561 8a35f56c 2022-07-16 thomas {
562 8a35f56c 2022-07-16 thomas 	struct addrinfo hints;
563 8a35f56c 2022-07-16 thomas 	struct address *a;
564 8a35f56c 2022-07-16 thomas 	int fd = -1, o_val = 1, flags;
565 8a35f56c 2022-07-16 thomas 
566 8a35f56c 2022-07-16 thomas 	memset(&hints, 0, sizeof(hints));
567 8a35f56c 2022-07-16 thomas 	hints.ai_family = AF_UNSPEC;
568 8a35f56c 2022-07-16 thomas 	hints.ai_socktype = SOCK_STREAM;
569 8a35f56c 2022-07-16 thomas 	hints.ai_flags |= AI_PASSIVE;
570 8a35f56c 2022-07-16 thomas 
571 8a35f56c 2022-07-16 thomas 	TAILQ_FOREACH(a, al, entry) {
572 8a35f56c 2022-07-16 thomas 		if (sockets_socket_af(&a->ss, port) == -1) {
573 8a35f56c 2022-07-16 thomas 			log_warnx("%s: sockets_socket_af", __func__);
574 8a35f56c 2022-07-16 thomas 			goto fail;
575 8a35f56c 2022-07-16 thomas 		}
576 8a35f56c 2022-07-16 thomas 
577 8a35f56c 2022-07-16 thomas 		fd = socket(a->ss.ss_family, hints.ai_socktype,
578 8a35f56c 2022-07-16 thomas 		    a->ipproto);
579 8a35f56c 2022-07-16 thomas 			log_debug("%s: opening socket (%d) for %s", __func__,
580 8a35f56c 2022-07-16 thomas 			    fd, a->ifname);
581 8a35f56c 2022-07-16 thomas 
582 8a35f56c 2022-07-16 thomas 		if (setsockopt(fd, SOL_SOCKET, SO_REUSEPORT, &o_val,
583 8a35f56c 2022-07-16 thomas 		    sizeof(int)) == -1) {
584 8a35f56c 2022-07-16 thomas 			log_warn("%s: setsockopt error", __func__);
585 8a35f56c 2022-07-16 thomas 			return -1;
586 8a35f56c 2022-07-16 thomas 		}
587 8a35f56c 2022-07-16 thomas 
588 8a35f56c 2022-07-16 thomas 		/* non-blocking */
589 8a35f56c 2022-07-16 thomas 		flags = fcntl(fd, F_GETFL);
590 8a35f56c 2022-07-16 thomas 		flags |= O_NONBLOCK;
591 8a35f56c 2022-07-16 thomas 		fcntl(fd, F_SETFL, flags);
592 8a35f56c 2022-07-16 thomas 
593 ff36aeea 2022-07-16 thomas 		/* TA: 'sizeof a' vs a->ss.len */ 
594 ff36aeea 2022-07-16 thomas 		if (bind(fd, (struct sockaddr *)&a->ss, sizeof a) == -1) {
595 8a35f56c 2022-07-16 thomas 			close(fd);
596 8a35f56c 2022-07-16 thomas 			log_info("%s: can't bind to port %d", __func__,
597 8a35f56c 2022-07-16 thomas 			    ntohs(port));
598 8a35f56c 2022-07-16 thomas 			goto fail;
599 8a35f56c 2022-07-16 thomas 		}
600 8a35f56c 2022-07-16 thomas 
601 8a35f56c 2022-07-16 thomas 		if (listen(fd, SOMAXCONN) == -1) {
602 8a35f56c 2022-07-16 thomas 			log_warn("%s, unable to listen on socket", __func__);
603 8a35f56c 2022-07-16 thomas 			goto fail;
604 8a35f56c 2022-07-16 thomas 		}
605 8a35f56c 2022-07-16 thomas 	}
606 8a35f56c 2022-07-16 thomas 
607 8a35f56c 2022-07-16 thomas 	free(a);
608 8a35f56c 2022-07-16 thomas 	return (fd);
609 8a35f56c 2022-07-16 thomas fail:
610 8a35f56c 2022-07-16 thomas 	free(a);
611 8a35f56c 2022-07-16 thomas 	return -1;
612 8a35f56c 2022-07-16 thomas }
613 8a35f56c 2022-07-16 thomas 
614 8a35f56c 2022-07-16 thomas int
615 8a35f56c 2022-07-16 thomas sockets_accept_reserve(int sockfd, struct sockaddr *addr, socklen_t *addrlen,
616 8a35f56c 2022-07-16 thomas     int reserve, volatile int *counter)
617 8a35f56c 2022-07-16 thomas {
618 8a35f56c 2022-07-16 thomas 	int ret;
619 8a35f56c 2022-07-16 thomas 
620 8a35f56c 2022-07-16 thomas 	if (getdtablecount() + reserve +
621 8a35f56c 2022-07-16 thomas 	    ((*counter + 1) * FD_NEEDED) >= getdtablesize()) {
622 8a35f56c 2022-07-16 thomas 		log_debug("inflight fds exceeded");
623 8a35f56c 2022-07-16 thomas 		errno = EMFILE;
624 8a35f56c 2022-07-16 thomas 		return -1;
625 8a35f56c 2022-07-16 thomas 	}
626 5ae43732 2022-07-16 thomas /* TA:  This needs fixing upstream. */
627 5ae43732 2022-07-16 thomas #ifdef __APPLE__
628 5ae43732 2022-07-16 thomas 	ret = accept(sockfd, addr, addrlen);
629 5ae43732 2022-07-16 thomas #else
630 5ae43732 2022-07-16 thomas 	ret = accept4(sockfd, addr, addrlen, SOCK_NONBLOCK | SOCK_CLOEXEC);
631 5ae43732 2022-07-16 thomas #endif
632 8a35f56c 2022-07-16 thomas 
633 5ae43732 2022-07-16 thomas 	if (ret > -1) {
634 8a35f56c 2022-07-16 thomas 		(*counter)++;
635 8a35f56c 2022-07-16 thomas 		log_debug("inflight incremented, now %d", *counter);
636 8a35f56c 2022-07-16 thomas 	}
637 8a35f56c 2022-07-16 thomas 
638 8a35f56c 2022-07-16 thomas 	return ret;
639 8a35f56c 2022-07-16 thomas }
640 8a35f56c 2022-07-16 thomas 
641 8a35f56c 2022-07-16 thomas void
642 8a35f56c 2022-07-16 thomas sockets_accept_paused(int fd, short events, void *arg)
643 8a35f56c 2022-07-16 thomas {
644 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
645 8a35f56c 2022-07-16 thomas 
646 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
647 8a35f56c 2022-07-16 thomas }
648 8a35f56c 2022-07-16 thomas 
649 8a35f56c 2022-07-16 thomas void
650 8a35f56c 2022-07-16 thomas sockets_socket_accept(int fd, short event, void *arg)
651 8a35f56c 2022-07-16 thomas {
652 8a35f56c 2022-07-16 thomas 	struct socket *sock = (struct socket *)arg;
653 8a35f56c 2022-07-16 thomas 	struct sockaddr_storage ss;
654 8a35f56c 2022-07-16 thomas 	struct timeval backoff;
655 8a35f56c 2022-07-16 thomas 	struct request *c = NULL;
656 8a35f56c 2022-07-16 thomas 	socklen_t len;
657 8a35f56c 2022-07-16 thomas 	int s;
658 8a35f56c 2022-07-16 thomas 
659 8a35f56c 2022-07-16 thomas 	backoff.tv_sec = 1;
660 8a35f56c 2022-07-16 thomas 	backoff.tv_usec = 0;
661 8a35f56c 2022-07-16 thomas 
662 8a35f56c 2022-07-16 thomas 	event_add(&sock->ev, NULL);
663 8a35f56c 2022-07-16 thomas 	if (event & EV_TIMEOUT)
664 8a35f56c 2022-07-16 thomas 		return;
665 8a35f56c 2022-07-16 thomas 
666 8a35f56c 2022-07-16 thomas 	len = sizeof(ss);
667 8a35f56c 2022-07-16 thomas 
668 8a35f56c 2022-07-16 thomas 	s = sockets_accept_reserve(fd, (struct sockaddr *)&ss, &len,
669 8a35f56c 2022-07-16 thomas 	    FD_RESERVE, &cgi_inflight);
670 8a35f56c 2022-07-16 thomas 
671 8a35f56c 2022-07-16 thomas 	if (s == -1) {
672 8a35f56c 2022-07-16 thomas 		switch (errno) {
673 8a35f56c 2022-07-16 thomas 		case EINTR:
674 8a35f56c 2022-07-16 thomas 		case EWOULDBLOCK:
675 8a35f56c 2022-07-16 thomas 		case ECONNABORTED:
676 8a35f56c 2022-07-16 thomas 			return;
677 8a35f56c 2022-07-16 thomas 		case EMFILE:
678 8a35f56c 2022-07-16 thomas 		case ENFILE:
679 8a35f56c 2022-07-16 thomas 			event_del(&sock->ev);
680 8a35f56c 2022-07-16 thomas 			evtimer_add(&sock->pause, &backoff);
681 8a35f56c 2022-07-16 thomas 			return;
682 8a35f56c 2022-07-16 thomas 		default:
683 8a35f56c 2022-07-16 thomas 			log_warn("%s: accept", __func__);
684 8a35f56c 2022-07-16 thomas 		}
685 8a35f56c 2022-07-16 thomas 	}
686 8a35f56c 2022-07-16 thomas 
687 8a35f56c 2022-07-16 thomas 	if (client_cnt > GOTWEBD_MAXCLIENTS)
688 8a35f56c 2022-07-16 thomas 		goto err;
689 8a35f56c 2022-07-16 thomas 
690 8a35f56c 2022-07-16 thomas 	c = calloc(1, sizeof(struct request));
691 8a35f56c 2022-07-16 thomas 	if (c == NULL) {
692 8a35f56c 2022-07-16 thomas 		log_warn("%s", __func__);
693 8a35f56c 2022-07-16 thomas 		close(s);
694 8a35f56c 2022-07-16 thomas 		cgi_inflight--;
695 8a35f56c 2022-07-16 thomas 		return;
696 8a35f56c 2022-07-16 thomas 	}
697 8a35f56c 2022-07-16 thomas 
698 8a35f56c 2022-07-16 thomas 	c->fd = s;
699 8a35f56c 2022-07-16 thomas 	c->sock = sock;
700 8a35f56c 2022-07-16 thomas 	memcpy(c->priv_fd, sock->priv_fd, sizeof(c->priv_fd));
701 8a35f56c 2022-07-16 thomas 	c->buf_pos = 0;
702 8a35f56c 2022-07-16 thomas 	c->buf_len = 0;
703 8a35f56c 2022-07-16 thomas 	c->request_started = 0;
704 8a35f56c 2022-07-16 thomas 	c->sock->client_status = CLIENT_CONNECT;
705 8a35f56c 2022-07-16 thomas 
706 8a35f56c 2022-07-16 thomas 	event_set(&c->ev, s, EV_READ, fcgi_request, c);
707 8a35f56c 2022-07-16 thomas 	event_add(&c->ev, NULL);
708 8a35f56c 2022-07-16 thomas 
709 8a35f56c 2022-07-16 thomas 	evtimer_set(&c->tmo, fcgi_timeout, c);
710 8a35f56c 2022-07-16 thomas 	evtimer_add(&c->tmo, &timeout);
711 8a35f56c 2022-07-16 thomas 
712 8a35f56c 2022-07-16 thomas 	client_cnt++;
713 8a35f56c 2022-07-16 thomas 
714 8a35f56c 2022-07-16 thomas 	return;
715 8a35f56c 2022-07-16 thomas err:
716 8a35f56c 2022-07-16 thomas 	cgi_inflight--;
717 8a35f56c 2022-07-16 thomas 	close(s);
718 8a35f56c 2022-07-16 thomas 	if (c != NULL)
719 8a35f56c 2022-07-16 thomas 		free(c);
720 8a35f56c 2022-07-16 thomas }
721 8a35f56c 2022-07-16 thomas 
722 8a35f56c 2022-07-16 thomas void
723 8a35f56c 2022-07-16 thomas sockets_rlimit(int maxfd)
724 8a35f56c 2022-07-16 thomas {
725 8a35f56c 2022-07-16 thomas 	struct rlimit rl;
726 8a35f56c 2022-07-16 thomas 
727 8a35f56c 2022-07-16 thomas 	if (getrlimit(RLIMIT_NOFILE, &rl) == -1)
728 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to get resource limit", __func__);
729 ceac46c9 2022-07-17 thomas 	log_debug("%s: max open files %llu", __func__,
730 ceac46c9 2022-07-17 thomas 	    (unsigned long long)rl.rlim_max);
731 8a35f56c 2022-07-16 thomas 
732 8a35f56c 2022-07-16 thomas 	/*
733 8a35f56c 2022-07-16 thomas 	 * Allow the maximum number of open file descriptors for this
734 8a35f56c 2022-07-16 thomas 	 * login class (which should be the class "daemon" by default).
735 8a35f56c 2022-07-16 thomas 	 */
736 8a35f56c 2022-07-16 thomas 	if (maxfd == -1)
737 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = rl.rlim_max;
738 8a35f56c 2022-07-16 thomas 	else
739 8a35f56c 2022-07-16 thomas 		rl.rlim_cur = MAXIMUM(rl.rlim_max, (rlim_t)maxfd);
740 8a35f56c 2022-07-16 thomas 	if (setrlimit(RLIMIT_NOFILE, &rl) == -1)
741 8a35f56c 2022-07-16 thomas 		fatal("%s: failed to set resource limit", __func__);
742 ff36aeea 2022-07-16 thomas }