1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2014 Reyk Floeter <reyk@openbsd.org>
5  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
6  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
7  *
8  * Permission to use, copy, modify, and distribute this software for any
9  * purpose with or without fee is hereby granted, provided that the above
10  * copyright notice and this permission notice appear in all copies.
11  *
12  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
13  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
14  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
15  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
16  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19  */
20 #include "got_compat.h"
21 
22 #include <net/if.h>
23 #include <netinet/in.h>
24 #include <sys/queue.h>
25 #include <sys/stat.h>
26 #include <sys/types.h>
27 
28 #include <ctype.h>
29 #include <dirent.h>
30 #include <errno.h>
31 #include <event.h>
32 #include <fcntl.h>
33 #include <imsg.h>
34 #include <stdio.h>
35 #include <stdlib.h>
36 #include <string.h>
37 #include <unistd.h>
38 
39 #include "got_error.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_repository.h"
43 #include "got_path.h"
44 #include "got_cancel.h"
45 #include "got_worktree.h"
46 #include "got_diff.h"
47 #include "got_commit_graph.h"
48 #include "got_blame.h"
49 #include "got_privsep.h"
50 
51 #include "gotwebd.h"
52 #include "tmpl.h"
53 
54 static const struct querystring_keys querystring_keys[] = {
55 	{ "action",		ACTION },
56 	{ "commit",		COMMIT },
57 	{ "file",		RFILE },
58 	{ "folder",		FOLDER },
59 	{ "headref",		HEADREF },
60 	{ "index_page",		INDEX_PAGE },
61 	{ "path",		PATH },
62 	{ "page",		PAGE },
63 };
64 
65 static const struct action_keys action_keys[] = {
66 	{ "blame",	BLAME },
67 	{ "blob",	BLOB },
68 	{ "blobraw",	BLOBRAW },
69 	{ "briefs",	BRIEFS },
70 	{ "commits",	COMMITS },
71 	{ "diff",	DIFF },
72 	{ "error",	ERR },
73 	{ "index",	INDEX },
74 	{ "patch",	PATCH },
75 	{ "summary",	SUMMARY },
76 	{ "tag",	TAG },
77 	{ "tags",	TAGS },
78 	{ "tree",	TREE },
79 	{ "rss",	RSS },
80 };
81 
82 static const struct got_error *gotweb_init_querystring(struct querystring **);
83 static const struct got_error *gotweb_parse_querystring(struct querystring **,
84     char *);
85 static const struct got_error *gotweb_assign_querystring(struct querystring **,
86     char *, char *);
87 static int gotweb_render_index(struct template *);
88 static const struct got_error *gotweb_init_repo_dir(struct repo_dir **,
89     const char *);
90 static const struct got_error *gotweb_load_got_path(struct request *c,
91     struct repo_dir *);
92 static const struct got_error *gotweb_get_repo_description(char **,
93     struct server *, const char *, int);
94 static const struct got_error *gotweb_get_clone_url(char **, struct server *,
95     const char *, int);
96 
97 static void gotweb_free_querystring(struct querystring *);
98 static void gotweb_free_repo_dir(struct repo_dir *);
99 
100 struct server *gotweb_get_server(const char *);
101 
102 static int
103 gotweb_reply(struct request *c, int status, const char *ctype,
104     struct gotweb_url *location)
105 {
106 	const char	*csp;
107 
108 	if (status != 200 && tp_writef(c->tp, "Status: %d\r\n", status) == -1)
109 		return -1;
110 
111 	if (location) {
112 		if (tp_writes(c->tp, "Location: ") == -1 ||
113 		    gotweb_render_url(c, location) == -1 ||
114 		    tp_writes(c->tp, "\r\n") == -1)
115 			return -1;
116 	}
117 
118 	csp = "Content-Security-Policy: default-src 'self'; "
119 	    "script-src 'none'; object-src 'none';\r\n";
120 	if (tp_writes(c->tp, csp) == -1)
121 		return -1;
122 
123 	if (ctype && tp_writef(c->tp, "Content-Type: %s\r\n", ctype) == -1)
124 		return -1;
125 
126 	return tp_writes(c->tp, "\r\n");
127 }
128 
129 static int
130 gotweb_reply_file(struct request *c, const char *ctype, const char *file,
131     const char *suffix)
132 {
133 	int r;
134 
135 	r = tp_writef(c->tp, "Content-Disposition: attachment; "
136 	    "filename=%s%s\r\n", file, suffix ? suffix : "");
137 	if (r == -1)
138 		return -1;
139 	return gotweb_reply(c, 200, ctype, NULL);
140 }
141 
142 void
143 gotweb_process_request(struct request *c)
144 {
145 	const struct got_error *error = NULL;
146 	struct server *srv = NULL;
147 	struct querystring *qs = NULL;
148 	struct repo_dir *repo_dir = NULL;
149 	const char *rss_ctype = "application/rss+xml;charset=utf-8";
150 	const uint8_t *buf;
151 	size_t len;
152 	int r, binary = 0;
153 
154 	/* init the transport */
155 	error = gotweb_init_transport(&c->t);
156 	if (error) {
157 		log_warnx("%s: %s", __func__, error->msg);
158 		return;
159 	}
160 	/* don't process any further if client disconnected */
161 	if (c->sock->client_status == CLIENT_DISCONNECT)
162 		return;
163 	/* get the gotwebd server */
164 	srv = gotweb_get_server(c->server_name);
165 	if (srv == NULL) {
166 		log_warnx("%s: error server is NULL", __func__);
167 		goto err;
168 	}
169 	c->srv = srv;
170 	/* parse our querystring */
171 	error = gotweb_init_querystring(&qs);
172 	if (error) {
173 		log_warnx("%s: %s", __func__, error->msg);
174 		goto err;
175 	}
176 	c->t->qs = qs;
177 	error = gotweb_parse_querystring(&qs, c->querystring);
178 	if (error) {
179 		log_warnx("%s: %s", __func__, error->msg);
180 		goto err;
181 	}
182 
183 	/*
184 	 * certain actions require a commit id in the querystring. this stops
185 	 * bad actors from exploiting this by manually manipulating the
186 	 * querystring.
187 	 */
188 
189 	if (qs->action == BLAME || qs->action == BLOB ||
190 	    qs->action == BLOBRAW || qs->action == DIFF ||
191 	    qs->action == PATCH) {
192 		if (qs->commit == NULL) {
193 			error = got_error(GOT_ERR_BAD_QUERYSTRING);
194 			goto err;
195 		}
196 	}
197 
198 	if (qs->action != INDEX) {
199 		error = gotweb_init_repo_dir(&repo_dir, qs->path);
200 		if (error)
201 			goto err;
202 		error = gotweb_load_got_path(c, repo_dir);
203 		c->t->repo_dir = repo_dir;
204 		if (error && error->code != GOT_ERR_LONELY_PACKIDX)
205 			goto err;
206 	}
207 
208 	if (qs->action == BLOBRAW || qs->action == BLOB) {
209 		error = got_get_repo_commits(c, 1);
210 		if (error)
211 			goto err;
212 
213 		error = got_open_blob_for_output(&c->t->blob, &c->t->fd,
214 		    &binary, c, qs->folder, qs->file, qs->commit);
215 		if (error)
216 			goto err;
217 	}
218 
219 	switch (qs->action) {
220 	case BLAME:
221 		error = got_get_repo_commits(c, 1);
222 		if (error) {
223 			log_warnx("%s: %s", __func__, error->msg);
224 			goto err;
225 		}
226 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
227 			return;
228 		gotweb_render_page(c->tp, gotweb_render_blame);
229 		return;
230 	case BLOB:
231 		if (binary) {
232 			struct gotweb_url url = {
233 				.index_page = -1,
234 				.page = -1,
235 				.action = BLOBRAW,
236 				.path = qs->path,
237 				.commit = qs->commit,
238 				.folder = qs->folder,
239 				.file = qs->file,
240 			};
241 
242 			gotweb_reply(c, 302, NULL, &url);
243 			return;
244 		}
245 
246 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
247 			return;
248 		gotweb_render_page(c->tp, gotweb_render_blob);
249 		return;
250 	case BLOBRAW:
251 		if (binary)
252 			r = gotweb_reply_file(c, "application/octet-stream",
253 			    qs->file, NULL);
254 		else
255 			r = gotweb_reply(c, 200, "text/plain", NULL);
256 		if (r == -1)
257 			return;
258 		if (template_flush(c->tp) == -1)
259 			return;
260 
261 		for (;;) {
262 			error = got_object_blob_read_block(&len, c->t->blob);
263 			if (error)
264 				break;
265 			if (len == 0)
266 				break;
267 			buf = got_object_blob_get_read_buf(c->t->blob);
268 			if (fcgi_write(c, buf, len) == -1)
269 				break;
270 		}
271 		return;
272 	case BRIEFS:
273 		error = got_get_repo_commits(c, srv->max_commits_display);
274 		if (error)
275 			goto err;
276 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
277 			return;
278 		gotweb_render_page(c->tp, gotweb_render_briefs);
279 		return;
280 	case COMMITS:
281 		error = got_get_repo_commits(c, srv->max_commits_display);
282 		if (error) {
283 			log_warnx("%s: %s", __func__, error->msg);
284 			goto err;
285 		}
286 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
287 			return;
288 		gotweb_render_page(c->tp, gotweb_render_commits);
289 		return;
290 	case DIFF:
291 		error = got_get_repo_commits(c, 1);
292 		if (error) {
293 			log_warnx("%s: %s", __func__, error->msg);
294 			goto err;
295 		}
296 		error = got_open_diff_for_output(&c->t->fp, c);
297 		if (error) {
298 			log_warnx("%s: %s", __func__, error->msg);
299 			goto err;
300 		}
301 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
302 			return;
303 		gotweb_render_page(c->tp, gotweb_render_diff);
304 		return;
305 	case INDEX:
306 		c->t->nrepos = scandir(srv->repos_path, &c->t->repos, NULL,
307 		    alphasort);
308 		if (c->t->nrepos == -1) {
309 			c->t->repos = NULL;
310 			error = got_error_from_errno2("scandir",
311 			    srv->repos_path);
312 			goto err;
313 		}
314 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
315 			return;
316 		gotweb_render_page(c->tp, gotweb_render_index);
317 		return;
318 	case PATCH:
319 		error = got_get_repo_commits(c, 1);
320 		if (error) {
321 			log_warnx("%s: %s", __func__, error->msg);
322 			goto err;
323 		}
324 		error = got_open_diff_for_output(&c->t->fp, c);
325 		if (error) {
326 			log_warnx("%s: %s", __func__, error->msg);
327 			goto err;
328 		}
329 		if (gotweb_reply(c, 200, "text/plain", NULL) == -1)
330 			return;
331 		gotweb_render_patch(c->tp);
332 		return;
333 	case RSS:
334 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
335 		if (error)
336 			goto err;
337 		if (gotweb_reply_file(c, rss_ctype, repo_dir->name, ".rss")
338 		    == -1)
339 			return;
340 		gotweb_render_rss(c->tp);
341 		return;
342 	case SUMMARY:
343 		error = got_ref_list(&c->t->refs, c->t->repo, "refs/heads",
344 		    got_ref_cmp_by_name, NULL);
345 		if (error) {
346 			log_warnx("%s: got_ref_list: %s", __func__,
347 			    error->msg);
348 			goto err;
349 		}
350 		error = got_get_repo_commits(c, D_MAXSLCOMMDISP);
351 		if (error)
352 			goto err;
353 		qs->action = TAGS;
354 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
355 		if (error) {
356 			log_warnx("%s: got_get_repo_tags: %s", __func__,
357 			    error->msg);
358 			goto err;
359 		}
360 		qs->action = SUMMARY;
361 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
362 			return;
363 		gotweb_render_page(c->tp, gotweb_render_summary);
364 		return;
365 	case TAG:
366 		error = got_get_repo_tags(c, 1);
367 		if (error) {
368 			log_warnx("%s: %s", __func__, error->msg);
369 			goto err;
370 		}
371 		if (c->t->tag_count == 0) {
372 			error = got_error_msg(GOT_ERR_BAD_OBJ_ID,
373 			    "bad commit id");
374 			goto err;
375 		}
376 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
377 			return;
378 		gotweb_render_page(c->tp, gotweb_render_tag);
379 		return;
380 	case TAGS:
381 		error = got_get_repo_tags(c, srv->max_commits_display);
382 		if (error) {
383 			log_warnx("%s: %s", __func__, error->msg);
384 			goto err;
385 		}
386 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
387 			return;
388 		gotweb_render_page(c->tp, gotweb_render_tags);
389 		return;
390 	case TREE:
391 		error = got_get_repo_commits(c, 1);
392 		if (error) {
393 			log_warnx("%s: %s", __func__, error->msg);
394 			goto err;
395 		}
396 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
397 			return;
398 		gotweb_render_page(c->tp, gotweb_render_tree);
399 		return;
400 	case ERR:
401 	default:
402 		error = got_error(GOT_ERR_BAD_QUERYSTRING);
403 	}
404 
405 err:
406 	c->t->error = error;
407 	if (gotweb_reply(c, 400, "text/html", NULL) == -1)
408 		return;
409 	gotweb_render_page(c->tp, gotweb_render_error);
410 }
411 
412 struct server *
413 gotweb_get_server(const char *server_name)
414 {
415 	struct server *srv;
416 
417 	/* check against the server name first */
418 	if (*server_name != '\0')
419 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
420 			if (strcmp(srv->name, server_name) == 0)
421 				return srv;
422 
423 	/* otherwise, use the first server */
424 	return TAILQ_FIRST(&gotwebd_env->servers);
425 };
426 
427 const struct got_error *
428 gotweb_init_transport(struct transport **t)
429 {
430 	const struct got_error *error = NULL;
431 
432 	*t = calloc(1, sizeof(**t));
433 	if (*t == NULL)
434 		return got_error_from_errno2(__func__, "calloc");
435 
436 	TAILQ_INIT(&(*t)->repo_commits);
437 	TAILQ_INIT(&(*t)->repo_tags);
438 	TAILQ_INIT(&(*t)->refs);
439 
440 	(*t)->fd = -1;
441 
442 	return error;
443 }
444 
445 static const struct got_error *
446 gotweb_init_querystring(struct querystring **qs)
447 {
448 	const struct got_error *error = NULL;
449 
450 	*qs = calloc(1, sizeof(**qs));
451 	if (*qs == NULL)
452 		return got_error_from_errno2(__func__, "calloc");
453 
454 	(*qs)->headref = strdup("HEAD");
455 	if ((*qs)->headref == NULL) {
456 		free(*qs);
457 		*qs = NULL;
458 		return got_error_from_errno2(__func__, "strdup");
459 	}
460 
461 	(*qs)->action = INDEX;
462 	(*qs)->commit = NULL;
463 	(*qs)->file = NULL;
464 	(*qs)->folder = NULL;
465 	(*qs)->index_page = 0;
466 	(*qs)->path = NULL;
467 
468 	return error;
469 }
470 
471 static const struct got_error *
472 gotweb_parse_querystring(struct querystring **qs, char *qst)
473 {
474 	const struct got_error *error = NULL;
475 	char *tok1 = NULL, *tok1_pair = NULL, *tok1_end = NULL;
476 	char *tok2 = NULL, *tok2_pair = NULL, *tok2_end = NULL;
477 
478 	if (qst == NULL)
479 		return error;
480 
481 	tok1 = strdup(qst);
482 	if (tok1 == NULL)
483 		return got_error_from_errno2(__func__, "strdup");
484 
485 	tok1_pair = tok1;
486 	tok1_end = tok1;
487 
488 	while (tok1_pair != NULL) {
489 		strsep(&tok1_end, "&");
490 
491 		tok2 = strdup(tok1_pair);
492 		if (tok2 == NULL) {
493 			free(tok1);
494 			return got_error_from_errno2(__func__, "strdup");
495 		}
496 
497 		tok2_pair = tok2;
498 		tok2_end = tok2;
499 
500 		while (tok2_pair != NULL) {
501 			strsep(&tok2_end, "=");
502 			if (tok2_end) {
503 				error = gotweb_assign_querystring(qs, tok2_pair,
504 				    tok2_end);
505 				if (error)
506 					goto err;
507 			}
508 			tok2_pair = tok2_end;
509 		}
510 		free(tok2);
511 		tok1_pair = tok1_end;
512 	}
513 	free(tok1);
514 	return error;
515 err:
516 	free(tok2);
517 	free(tok1);
518 	return error;
519 }
520 
521 /*
522  * Adapted from usr.sbin/httpd/httpd.c url_decode.
523  */
524 static const struct got_error *
525 gotweb_urldecode(char *url)
526 {
527 	char		*p, *q;
528 	char		 hex[3];
529 	unsigned long	 x;
530 
531 	hex[2] = '\0';
532 	p = q = url;
533 
534 	while (*p != '\0') {
535 		switch (*p) {
536 		case '%':
537 			/* Encoding character is followed by two hex chars */
538 			if (!isxdigit((unsigned char)p[1]) ||
539 			    !isxdigit((unsigned char)p[2]) ||
540 			    (p[1] == '0' && p[2] == '0'))
541 				return got_error(GOT_ERR_BAD_QUERYSTRING);
542 
543 			hex[0] = p[1];
544 			hex[1] = p[2];
545 
546 			/*
547 			 * We don't have to validate "hex" because it is
548 			 * guaranteed to include two hex chars followed by nul.
549 			 */
550 			x = strtoul(hex, NULL, 16);
551 			*q = (char)x;
552 			p += 2;
553 			break;
554 		default:
555 			*q = *p;
556 			break;
557 		}
558 		p++;
559 		q++;
560 	}
561 	*q = '\0';
562 
563 	return NULL;
564 }
565 
566 static const struct got_error *
567 gotweb_assign_querystring(struct querystring **qs, char *key, char *value)
568 {
569 	const struct got_error *error = NULL;
570 	const char *errstr;
571 	int a_cnt, el_cnt;
572 
573 	error = gotweb_urldecode(value);
574 	if (error)
575 		return error;
576 
577 	for (el_cnt = 0; el_cnt < nitems(querystring_keys); el_cnt++) {
578 		if (strcmp(key, querystring_keys[el_cnt].name) != 0)
579 			continue;
580 
581 		switch (querystring_keys[el_cnt].element) {
582 		case ACTION:
583 			for (a_cnt = 0; a_cnt < ACTIONS__MAX; a_cnt++) {
584 				if (strcmp(value, action_keys[a_cnt].name) != 0)
585 					continue;
586 				else if (strcmp(value,
587 				    action_keys[a_cnt].name) == 0){
588 					(*qs)->action =
589 					    action_keys[a_cnt].action;
590 					goto qa_found;
591 				}
592 			}
593 			(*qs)->action = ERR;
594 qa_found:
595 			break;
596 		case COMMIT:
597 			(*qs)->commit = strdup(value);
598 			if ((*qs)->commit == NULL) {
599 				error = got_error_from_errno2(__func__,
600 				    "strdup");
601 				goto done;
602 			}
603 			break;
604 		case RFILE:
605 			(*qs)->file = strdup(value);
606 			if ((*qs)->file == NULL) {
607 				error = got_error_from_errno2(__func__,
608 				    "strdup");
609 				goto done;
610 			}
611 			break;
612 		case FOLDER:
613 			(*qs)->folder = strdup(value);
614 			if ((*qs)->folder == NULL) {
615 				error = got_error_from_errno2(__func__,
616 				    "strdup");
617 				goto done;
618 			}
619 			break;
620 		case HEADREF:
621 			free((*qs)->headref);
622 			(*qs)->headref = strdup(value);
623 			if ((*qs)->headref == NULL) {
624 				error = got_error_from_errno2(__func__,
625 				    "strdup");
626 				goto done;
627 			}
628 			break;
629 		case INDEX_PAGE:
630 			if (*value == '\0')
631 				break;
632 			(*qs)->index_page = strtonum(value, INT64_MIN,
633 			    INT64_MAX, &errstr);
634 			if (errstr) {
635 				error = got_error_from_errno3(__func__,
636 				    "strtonum", errstr);
637 				goto done;
638 			}
639 			if ((*qs)->index_page < 0)
640 				(*qs)->index_page = 0;
641 			break;
642 		case PATH:
643 			(*qs)->path = strdup(value);
644 			if ((*qs)->path == NULL) {
645 				error = got_error_from_errno2(__func__,
646 				    "strdup");
647 				goto done;
648 			}
649 			break;
650 		case PAGE:
651 			if (*value == '\0')
652 				break;
653 			(*qs)->page = strtonum(value, INT64_MIN,
654 			    INT64_MAX, &errstr);
655 			if (errstr) {
656 				error = got_error_from_errno3(__func__,
657 				    "strtonum", errstr);
658 				goto done;
659 			}
660 			if ((*qs)->page < 0)
661 				(*qs)->page = 0;
662 			break;
663 		}
664 
665 		/* entry found */
666 		break;
667 	}
668 done:
669 	return error;
670 }
671 
672 void
673 gotweb_free_repo_tag(struct repo_tag *rt)
674 {
675 	if (rt != NULL) {
676 		free(rt->commit_id);
677 		free(rt->tag_name);
678 		free(rt->tag_commit);
679 		free(rt->commit_msg);
680 		free(rt->tagger);
681 	}
682 	free(rt);
683 }
684 
685 void
686 gotweb_free_repo_commit(struct repo_commit *rc)
687 {
688 	if (rc != NULL) {
689 		free(rc->path);
690 		free(rc->refs_str);
691 		free(rc->commit_id);
692 		free(rc->parent_id);
693 		free(rc->tree_id);
694 		free(rc->author);
695 		free(rc->committer);
696 		free(rc->commit_msg);
697 	}
698 	free(rc);
699 }
700 
701 static void
702 gotweb_free_querystring(struct querystring *qs)
703 {
704 	if (qs != NULL) {
705 		free(qs->commit);
706 		free(qs->file);
707 		free(qs->folder);
708 		free(qs->headref);
709 		free(qs->path);
710 	}
711 	free(qs);
712 }
713 
714 static void
715 gotweb_free_repo_dir(struct repo_dir *repo_dir)
716 {
717 	if (repo_dir != NULL) {
718 		free(repo_dir->name);
719 		free(repo_dir->owner);
720 		free(repo_dir->description);
721 		free(repo_dir->url);
722 		free(repo_dir->path);
723 	}
724 	free(repo_dir);
725 }
726 
727 void
728 gotweb_free_transport(struct transport *t)
729 {
730 	const struct got_error *err;
731 	struct repo_commit *rc = NULL, *trc = NULL;
732 	struct repo_tag *rt = NULL, *trt = NULL;
733 	int i;
734 
735 	got_ref_list_free(&t->refs);
736 	TAILQ_FOREACH_SAFE(rc, &t->repo_commits, entry, trc) {
737 		TAILQ_REMOVE(&t->repo_commits, rc, entry);
738 		gotweb_free_repo_commit(rc);
739 	}
740 	TAILQ_FOREACH_SAFE(rt, &t->repo_tags, entry, trt) {
741 		TAILQ_REMOVE(&t->repo_tags, rt, entry);
742 		gotweb_free_repo_tag(rt);
743 	}
744 	gotweb_free_repo_dir(t->repo_dir);
745 	gotweb_free_querystring(t->qs);
746 	free(t->more_id);
747 	free(t->next_id);
748 	free(t->prev_id);
749 	if (t->blob)
750 		got_object_blob_close(t->blob);
751 	if (t->fp) {
752 		err = got_gotweb_closefile(t->fp);
753 		if (err)
754 			log_warnx("%s: got_gotweb_closefile failure: %s",
755 			    __func__, err->msg);
756 	}
757 	if (t->fd != -1 && close(t->fd) == -1)
758 		log_warn("%s: close", __func__);
759 	if (t->repos) {
760 		for (i = 0; i < t->nrepos; ++i)
761 			free(t->repos[i]);
762 		free(t->repos);
763 	}
764 	if (t->repo)
765 		got_repo_close(t->repo);
766 	free(t);
767 }
768 
769 void
770 gotweb_get_navs(struct request *c, struct gotweb_url *prev, int *have_prev,
771     struct gotweb_url *next, int *have_next)
772 {
773 	struct transport *t = c->t;
774 	struct querystring *qs = t->qs;
775 	struct server *srv = c->srv;
776 
777 	*have_prev = *have_next = 0;
778 
779 	switch(qs->action) {
780 	case INDEX:
781 		if (qs->index_page > 0) {
782 			*have_prev = 1;
783 			*prev = (struct gotweb_url){
784 				.action = -1,
785 				.index_page = qs->index_page - 1,
786 				.page = -1,
787 			};
788 		}
789 		if (t->next_disp == srv->max_repos_display &&
790 		    t->repos_total != (qs->index_page + 1) *
791 		    srv->max_repos_display) {
792 			*have_next = 1;
793 			*next = (struct gotweb_url){
794 				.action = -1,
795 				.index_page = qs->index_page + 1,
796 				.page = -1,
797 			};
798 		}
799 		break;
800 	case TAGS:
801 		if (t->prev_id && qs->commit != NULL &&
802 		    strcmp(qs->commit, t->prev_id) != 0) {
803 			*have_prev = 1;
804 			*prev = (struct gotweb_url){
805 				.action = TAGS,
806 				.index_page = -1,
807 				.page = qs->page - 1,
808 				.path = qs->path,
809 				.commit = t->prev_id,
810 				.headref = qs->headref,
811 			};
812 		}
813 		if (t->next_id) {
814 			*have_next = 1;
815 			*next = (struct gotweb_url){
816 				.action = TAGS,
817 				.index_page = -1,
818 				.page = qs->page + 1,
819 				.path = qs->path,
820 				.commit = t->next_id,
821 				.headref = qs->headref,
822 			};
823 		}
824 		break;
825 	}
826 }
827 
828 static int
829 gotweb_render_index(struct template *tp)
830 {
831 	const struct got_error *error = NULL;
832 	struct request *c = tp->tp_arg;
833 	struct server *srv = c->srv;
834 	struct transport *t = c->t;
835 	struct querystring *qs = t->qs;
836 	struct repo_dir *repo_dir = NULL;
837 	struct dirent **sd_dent = t->repos;
838 	unsigned int d_i, d_disp = 0;
839 	unsigned int d_skipped = 0;
840 	int type, r;
841 
842 	if (gotweb_render_repo_table_hdr(c->tp) == -1)
843 		return -1;
844 
845 	for (d_i = 0; d_i < t->nrepos; d_i++) {
846 		if (srv->max_repos > 0 && t->prev_disp == srv->max_repos)
847 			break;
848 
849 		if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
850 		    strcmp(sd_dent[d_i]->d_name, "..") == 0) {
851 			d_skipped++;
852 			continue;
853 		}
854 
855 		error = got_path_dirent_type(&type, srv->repos_path,
856 		    sd_dent[d_i]);
857 		if (error)
858 			continue;
859 		if (type != DT_DIR) {
860 			d_skipped++;
861 			continue;
862 		}
863 
864 		if (qs->index_page > 0 && (qs->index_page *
865 		    srv->max_repos_display) > t->prev_disp) {
866 			t->prev_disp++;
867 			continue;
868 		}
869 
870 		error = gotweb_init_repo_dir(&repo_dir, sd_dent[d_i]->d_name);
871 		if (error)
872 			continue;
873 
874 		error = gotweb_load_got_path(c, repo_dir);
875 		if (error && error->code != GOT_ERR_LONELY_PACKIDX) {
876 			if (error->code != GOT_ERR_NOT_GIT_REPO)
877 				log_warnx("%s: %s: %s", __func__,
878 				    sd_dent[d_i]->d_name, error->msg);
879 			gotweb_free_repo_dir(repo_dir);
880 			repo_dir = NULL;
881 			d_skipped++;
882 			continue;
883 		}
884 
885 		d_disp++;
886 		t->prev_disp++;
887 
888 		r = gotweb_render_repo_fragment(c->tp, repo_dir);
889 		gotweb_free_repo_dir(repo_dir);
890 		repo_dir = NULL;
891 		got_repo_close(t->repo);
892 		t->repo = NULL;
893 		if (r == -1)
894 			return -1;
895 
896 		t->next_disp++;
897 		if (d_disp == srv->max_repos_display)
898 			break;
899 	}
900 	t->repos_total = t->nrepos - d_skipped;
901 
902 	if (srv->max_repos_display == 0)
903 		return 0;
904 	if (srv->max_repos > 0 && srv->max_repos < srv->max_repos_display)
905 		return 0;
906 	if (t->repos_total <= srv->max_repos ||
907 	    t->repos_total <= srv->max_repos_display)
908 		return 0;
909 
910 	if (gotweb_render_navs(c->tp) == -1)
911 		return -1;
912 
913 	return 0;
914 }
915 
916 static inline int
917 should_urlencode(int c)
918 {
919 	if (c <= ' ' || c >= 127)
920 		return 1;
921 
922 	switch (c) {
923 		/* gen-delim */
924 	case ':':
925 	case '/':
926 	case '?':
927 	case '#':
928 	case '[':
929 	case ']':
930 	case '@':
931 		/* sub-delims */
932 	case '!':
933 	case '$':
934 	case '&':
935 	case '\'':
936 	case '(':
937 	case ')':
938 	case '*':
939 	case '+':
940 	case ',':
941 	case ';':
942 	case '=':
943 		/* needed because the URLs are embedded into the HTML */
944 	case '\"':
945 		return 1;
946 	default:
947 		return 0;
948 	}
949 }
950 
951 static char *
952 gotweb_urlencode(const char *str)
953 {
954 	const char *s;
955 	char *escaped;
956 	size_t i, len;
957 	int a, b;
958 
959 	len = 0;
960 	for (s = str; *s; ++s) {
961 		len++;
962 		if (should_urlencode(*s))
963 			len += 2;
964 	}
965 
966 	escaped = calloc(1, len + 1);
967 	if (escaped == NULL)
968 		return NULL;
969 
970 	i = 0;
971 	for (s = str; *s; ++s) {
972 		if (should_urlencode(*s)) {
973 			a = (*s & 0xF0) >> 4;
974 			b = (*s & 0x0F);
975 
976 			escaped[i++] = '%';
977 			escaped[i++] = a <= 9 ? ('0' + a) : ('7' + a);
978 			escaped[i++] = b <= 9 ? ('0' + b) : ('7' + b);
979 		} else
980 			escaped[i++] = *s;
981 	}
982 
983 	return escaped;
984 }
985 
986 const char *
987 gotweb_action_name(int action)
988 {
989 	switch (action) {
990 	case BLAME:
991 		return "blame";
992 	case BLOB:
993 		return "blob";
994 	case BLOBRAW:
995 		return "blobraw";
996 	case BRIEFS:
997 		return "briefs";
998 	case COMMITS:
999 		return "commits";
1000 	case DIFF:
1001 		return "diff";
1002 	case ERR:
1003 		return "err";
1004 	case INDEX:
1005 		return "index";
1006 	case PATCH:
1007 		return "patch";
1008 	case SUMMARY:
1009 		return "summary";
1010 	case TAG:
1011 		return "tag";
1012 	case TAGS:
1013 		return "tags";
1014 	case TREE:
1015 		return "tree";
1016 	case RSS:
1017 		return "rss";
1018 	default:
1019 		return NULL;
1020 	}
1021 }
1022 
1023 int
1024 gotweb_render_url(struct request *c, struct gotweb_url *url)
1025 {
1026 	const char *sep = "?", *action;
1027 	char *tmp;
1028 	int r;
1029 
1030 	action = gotweb_action_name(url->action);
1031 	if (action != NULL) {
1032 		if (tp_writef(c->tp, "?action=%s", action) == -1)
1033 			return -1;
1034 		sep = "&";
1035 	}
1036 
1037 	if (url->commit) {
1038 		if (tp_writef(c->tp, "%scommit=%s", sep, url->commit) == -1)
1039 			return -1;
1040 		sep = "&";
1041 	}
1042 
1043 	if (url->previd) {
1044 		if (tp_writef(c->tp, "%sprevid=%s", sep, url->previd) == -1)
1045 			return -1;
1046 		sep = "&";
1047 	}
1048 
1049 	if (url->prevset) {
1050 		if (tp_writef(c->tp, "%sprevset=%s", sep, url->prevset) == -1)
1051 			return -1;
1052 		sep = "&";
1053 	}
1054 
1055 	if (url->file) {
1056 		tmp = gotweb_urlencode(url->file);
1057 		if (tmp == NULL)
1058 			return -1;
1059 		r = tp_writef(c->tp, "%sfile=%s", sep, tmp);
1060 		free(tmp);
1061 		if (r == -1)
1062 			return -1;
1063 		sep = "&";
1064 	}
1065 
1066 	if (url->folder) {
1067 		tmp = gotweb_urlencode(url->folder);
1068 		if (tmp == NULL)
1069 			return -1;
1070 		r = tp_writef(c->tp, "%sfolder=%s", sep, tmp);
1071 		free(tmp);
1072 		if (r == -1)
1073 			return -1;
1074 		sep = "&";
1075 	}
1076 
1077 	if (url->headref) {
1078 		tmp = gotweb_urlencode(url->headref);
1079 		if (tmp == NULL)
1080 			return -1;
1081 		r = tp_writef(c->tp, "%sheadref=%s", sep, url->headref);
1082 		free(tmp);
1083 		if (r == -1)
1084 			return -1;
1085 		sep = "&";
1086 	}
1087 
1088 	if (url->index_page != -1) {
1089 		if (tp_writef(c->tp, "%sindex_page=%d", sep,
1090 		    url->index_page) == -1)
1091 			return -1;
1092 		sep = "&";
1093 	}
1094 
1095 	if (url->path) {
1096 		tmp = gotweb_urlencode(url->path);
1097 		if (tmp == NULL)
1098 			return -1;
1099 		r = tp_writef(c->tp, "%spath=%s", sep, tmp);
1100 		free(tmp);
1101 		if (r == -1)
1102 			return -1;
1103 		sep = "&";
1104 	}
1105 
1106 	if (url->page != -1) {
1107 		if (tp_writef(c->tp, "%spage=%d", sep, url->page) == -1)
1108 			return -1;
1109 		sep = "&";
1110 	}
1111 
1112 	return 0;
1113 }
1114 
1115 int
1116 gotweb_render_absolute_url(struct request *c, struct gotweb_url *url)
1117 {
1118 	struct template	*tp = c->tp;
1119 	const char	*proto = c->https ? "https" : "http";
1120 
1121 	if (tp_writes(tp, proto) == -1 ||
1122 	    tp_writes(tp, "://") == -1 ||
1123 	    tp_htmlescape(tp, c->server_name) == -1 ||
1124 	    tp_htmlescape(tp, c->document_uri) == -1)
1125 		return -1;
1126 
1127 	return gotweb_render_url(c, url);
1128 }
1129 
1130 static const struct got_error *
1131 gotweb_load_got_path(struct request *c, struct repo_dir *repo_dir)
1132 {
1133 	const struct got_error *error = NULL;
1134 	struct socket *sock = c->sock;
1135 	struct server *srv = c->srv;
1136 	struct transport *t = c->t;
1137 	DIR *dt;
1138 	char *dir_test;
1139 
1140 	if (asprintf(&dir_test, "%s/%s/%s", srv->repos_path, repo_dir->name,
1141 	    GOTWEB_GIT_DIR) == -1)
1142 		return got_error_from_errno("asprintf");
1143 
1144 	dt = opendir(dir_test);
1145 	if (dt == NULL) {
1146 		free(dir_test);
1147 		if (asprintf(&dir_test, "%s/%s", srv->repos_path,
1148 		    repo_dir->name) == -1)
1149 			return got_error_from_errno("asprintf");
1150 		dt = opendir(dir_test);
1151 		if (dt == NULL) {
1152 			free(dir_test);
1153 			return got_error_path(repo_dir->name,
1154 			    GOT_ERR_NOT_GIT_REPO);
1155 		}
1156 	}
1157 
1158 	repo_dir->path = dir_test;
1159 	dir_test = NULL;
1160 
1161 	if (srv->respect_exportok &&
1162 	    faccessat(dirfd(dt), "git-daemon-export-ok", F_OK, 0) == -1) {
1163 		error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
1164 		goto err;
1165 	}
1166 
1167 	error = got_repo_open(&t->repo, repo_dir->path, NULL, sock->pack_fds);
1168 	if (error)
1169 		goto err;
1170 	error = gotweb_get_repo_description(&repo_dir->description, srv,
1171 	    repo_dir->path, dirfd(dt));
1172 	if (error)
1173 		goto err;
1174 	error = got_get_repo_owner(&repo_dir->owner, c);
1175 	if (error)
1176 		goto err;
1177 	if (srv->show_repo_age) {
1178 		error = got_get_repo_age(&repo_dir->age, c, NULL);
1179 		if (error)
1180 			goto err;
1181 	}
1182 	error = gotweb_get_clone_url(&repo_dir->url, srv, repo_dir->path,
1183 	    dirfd(dt));
1184 err:
1185 	free(dir_test);
1186 	if (dt != NULL && closedir(dt) == EOF && error == NULL)
1187 		error = got_error_from_errno("closedir");
1188 	if (error && t->repo) {
1189 		got_repo_close(t->repo);
1190 		t->repo = NULL;
1191 	}
1192 	return error;
1193 }
1194 
1195 static const struct got_error *
1196 gotweb_init_repo_dir(struct repo_dir **repo_dir, const char *dir)
1197 {
1198 	const struct got_error *error;
1199 
1200 	*repo_dir = calloc(1, sizeof(**repo_dir));
1201 	if (*repo_dir == NULL)
1202 		return got_error_from_errno("calloc");
1203 
1204 	if (asprintf(&(*repo_dir)->name, "%s", dir) == -1) {
1205 		error = got_error_from_errno("asprintf");
1206 		free(*repo_dir);
1207 		*repo_dir = NULL;
1208 		return error;
1209 	}
1210 	(*repo_dir)->owner = NULL;
1211 	(*repo_dir)->description = NULL;
1212 	(*repo_dir)->url = NULL;
1213 	(*repo_dir)->path = NULL;
1214 
1215 	return NULL;
1216 }
1217 
1218 static const struct got_error *
1219 gotweb_get_repo_description(char **description, struct server *srv,
1220     const char *dirpath, int dir)
1221 {
1222 	const struct got_error *error = NULL;
1223 	struct stat sb;
1224 	int fd = -1;
1225 	off_t len;
1226 
1227 	*description = NULL;
1228 	if (srv->show_repo_description == 0)
1229 		return NULL;
1230 
1231 	fd = openat(dir, "description", O_RDONLY);
1232 	if (fd == -1) {
1233 		if (errno != ENOENT && errno != EACCES) {
1234 			error = got_error_from_errno_fmt("openat %s/%s",
1235 			    dirpath, "description");
1236 		}
1237 		goto done;
1238 	}
1239 
1240 	if (fstat(fd, &sb) == -1) {
1241 		error = got_error_from_errno_fmt("fstat %s/%s",
1242 		    dirpath, "description");
1243 		goto done;
1244 	}
1245 
1246 	len = sb.st_size;
1247 	if (len > GOTWEBD_MAXDESCRSZ - 1)
1248 		len = GOTWEBD_MAXDESCRSZ - 1;
1249 
1250 	*description = calloc(len + 1, sizeof(**description));
1251 	if (*description == NULL) {
1252 		error = got_error_from_errno("calloc");
1253 		goto done;
1254 	}
1255 
1256 	if (read(fd, *description, len) == -1)
1257 		error = got_error_from_errno("read");
1258 done:
1259 	if (fd != -1 && close(fd) == -1 && error == NULL)
1260 		error = got_error_from_errno("close");
1261 	return error;
1262 }
1263 
1264 static const struct got_error *
1265 gotweb_get_clone_url(char **url, struct server *srv, const char *dirpath,
1266     int dir)
1267 {
1268 	const struct got_error *error = NULL;
1269 	struct stat sb;
1270 	int fd = -1;
1271 	off_t len;
1272 
1273 	*url = NULL;
1274 	if (srv->show_repo_cloneurl == 0)
1275 		return NULL;
1276 
1277 	fd = openat(dir, "cloneurl", O_RDONLY);
1278 	if (fd == -1) {
1279 		if (errno != ENOENT && errno != EACCES) {
1280 			error = got_error_from_errno_fmt("openat %s/%s",
1281 			    dirpath, "cloneurl");
1282 		}
1283 		goto done;
1284 	}
1285 
1286 	if (fstat(fd, &sb) == -1) {
1287 		error = got_error_from_errno_fmt("fstat %s/%s",
1288 		    dirpath, "cloneurl");
1289 		goto done;
1290 	}
1291 
1292 	len = sb.st_size;
1293 	if (len > GOTWEBD_MAXCLONEURLSZ - 1)
1294 		len = GOTWEBD_MAXCLONEURLSZ - 1;
1295 
1296 	*url = calloc(len + 1, sizeof(**url));
1297 	if (*url == NULL) {
1298 		error = got_error_from_errno("calloc");
1299 		goto done;
1300 	}
1301 
1302 	if (read(fd, *url, len) == -1)
1303 		error = got_error_from_errno("read");
1304 done:
1305 	if (fd != -1 && close(fd) == -1 && error == NULL)
1306 		error = got_error_from_errno("close");
1307 	return error;
1308 }
1309 
1310 int
1311 gotweb_render_age(struct template *tp, time_t committer_time)
1312 {
1313 	struct request *c = tp->tp_arg;
1314 	long long diff_time;
1315 	const char *years = "years ago", *months = "months ago";
1316 	const char *weeks = "weeks ago", *days = "days ago";
1317 	const char *hours = "hours ago",  *minutes = "minutes ago";
1318 	const char *seconds = "seconds ago", *now = "right now";
1319 
1320 	diff_time = time(NULL) - committer_time;
1321 	if (diff_time > 60 * 60 * 24 * 365 * 2) {
1322 		if (tp_writef(c->tp, "%lld %s",
1323 		    (diff_time / 60 / 60 / 24 / 365), years) == -1)
1324 			return -1;
1325 	} else if (diff_time > 60 * 60 * 24 * (365 / 12) * 2) {
1326 		if (tp_writef(c->tp, "%lld %s",
1327 		    (diff_time / 60 / 60 / 24 / (365 / 12)),
1328 		    months) == -1)
1329 			return -1;
1330 	} else if (diff_time > 60 * 60 * 24 * 7 * 2) {
1331 		if (tp_writef(c->tp, "%lld %s",
1332 		    (diff_time / 60 / 60 / 24 / 7), weeks) == -1)
1333 			return -1;
1334 	} else if (diff_time > 60 * 60 * 24 * 2) {
1335 		if (tp_writef(c->tp, "%lld %s",
1336 		    (diff_time / 60 / 60 / 24), days) == -1)
1337 			return -1;
1338 	} else if (diff_time > 60 * 60 * 2) {
1339 		if (tp_writef(c->tp, "%lld %s",
1340 		    (diff_time / 60 / 60), hours) == -1)
1341 			return -1;
1342 	} else if (diff_time > 60 * 2) {
1343 		if (tp_writef(c->tp, "%lld %s", (diff_time / 60),
1344 		    minutes) == -1)
1345 			return -1;
1346 	} else if (diff_time > 2) {
1347 		if (tp_writef(c->tp, "%lld %s", diff_time,
1348 		    seconds) == -1)
1349 			return -1;
1350 	} else {
1351 		if (tp_writes(tp, now) == -1)
1352 			return -1;
1353 	}
1354 	return 0;
1355 }