1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
5  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
6  *
7  * Permission to use, copy, modify, and distribute this software for any
8  * purpose with or without fee is hereby granted, provided that the above
9  * copyright notice and this permission notice appear in all copies.
10  *
11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18  */
19 
20 #include <netinet/in.h>
21 #include <net/if.h>
22 #include <sys/queue.h>
23 
24 #include <limits.h>
25 #include <stdio.h>
26 
27 #ifdef DEBUG
28 #define dprintf(x...)   do { log_debug(x); } while(0)
29 #else
30 #define dprintf(x...)
31 #endif /* DEBUG */
32 
33 #ifndef nitems
34 #define nitems(_a)	(sizeof((_a)) / sizeof((_a)[0]))
35 #endif
36 
37 /* GOTWEBD DEFAULTS */
38 #define GOTWEBD_CONF		 "/etc/gotwebd.conf"
39 
40 #define GOTWEBD_USER		 "www"
41 
42 #define GOTWEBD_MAXCLIENTS	 1024
43 #define GOTWEBD_MAXTEXT		 511
44 #define GOTWEBD_MAXNAME		 64
45 #define GOTWEBD_MAXPORT		 6
46 #define GOTWEBD_NUMPROC		 3
47 #define GOTWEBD_MAXIFACE	 16
48 
49 /* GOTWEB DEFAULTS */
50 #define MAX_QUERYSTRING		 2048
51 #define MAX_DOCUMENT_ROOT	 255
52 #define MAX_SERVER_NAME		 255
53 
54 #define GOTWEB_GOT_DIR		 ".got"
55 #define GOTWEB_GIT_DIR		 ".git"
56 
57 #define D_HTTPD_CHROOT		 "/var/www"
58 #define D_UNIX_SOCKET		 "/run/gotweb.sock"
59 #define D_FCGI_PORT		 "9000"
60 #define D_GOTPATH		 "/got/public"
61 #define D_SITENAME		 "Gotweb"
62 #define D_SITEOWNER		 "Got Owner"
63 #define D_SITELINK		 "Repos"
64 #define D_GOTLOGO		 "got.png"
65 #define D_GOTURL		 "https://gameoftrees.org"
66 #define D_GOTWEBCSS		 "gotweb.css"
67 
68 #define D_SHOWROWNER		 1
69 #define D_SHOWSOWNER		 1
70 #define D_SHOWAGE		 1
71 #define D_SHOWDESC		 1
72 #define D_SHOWURL		 1
73 #define D_MAXREPO		 0
74 #define D_MAXREPODISP		 25
75 #define D_MAXSLCOMMDISP		 10
76 #define D_MAXCOMMITDISP		 25
77 
78 #define BUF			 8192
79 
80 #define TIMEOUT_DEFAULT		 120
81 
82 #define FCGI_CONTENT_SIZE	 65535
83 #define FCGI_PADDING_SIZE	 255
84 #define FCGI_RECORD_SIZE	 \
85     (sizeof(struct fcgi_record_header) + FCGI_CONTENT_SIZE + FCGI_PADDING_SIZE)
86 
87 #define FCGI_ALIGNMENT		 8
88 #define FCGI_ALIGN(n)		 \
89     (((n) + (FCGI_ALIGNMENT - 1)) & ~(FCGI_ALIGNMENT - 1))
90 
91 #define FD_RESERVE		 5
92 #define FD_NEEDED		 6
93 
94 #define FCGI_BEGIN_REQUEST	 1
95 #define FCGI_ABORT_REQUEST	 2
96 #define FCGI_END_REQUEST	 3
97 #define FCGI_PARAMS		 4
98 #define FCGI_STDIN		 5
99 #define FCGI_STDOUT		 6
100 #define FCGI_STDERR		 7
101 #define FCGI_DATA		 8
102 #define FCGI_GET_VALUES		 9
103 #define FCGI_GET_VALUES_RESULT	10
104 #define FCGI_UNKNOWN_TYPE	11
105 #define FCGI_MAXTYPE		(FCGI_UNKNOWN_TYPE)
106 
107 #define FCGI_REQUEST_COMPLETE	0
108 #define FCGI_CANT_MPX_CONN	1
109 #define FCGI_OVERLOADED		2
110 #define FCGI_UNKNOWN_ROLE	3
111 
112 /* XXX: move this later after ig */
113 #define GOT_PACK_NUM_TEMPFILES     32
114 
115 enum imsg_type {
116 	IMSG_CFG_SRV = IMSG_PROC_MAX,
117 	IMSG_CFG_SOCK,
118 	IMSG_CFG_FD,
119 	IMSG_CFG_DONE,
120 	IMSG_CTL_START,
121 };
122 
123 struct env_val {
124 	SLIST_ENTRY(env_val)	 entry;
125 	char			*val;
126 };
127 SLIST_HEAD(env_head, env_val);
128 
129 struct fcgi_record_header {
130 	uint8_t		version;
131 	uint8_t		type;
132 	uint16_t	id;
133 	uint16_t	content_len;
134 	uint8_t		padding_len;
135 	uint8_t		reserved;
136 }__packed;
137 
138 struct fcgi_response {
139 	TAILQ_ENTRY(fcgi_response)	entry;
140 	uint8_t				data[FCGI_RECORD_SIZE];
141 	size_t				data_pos;
142 	size_t				data_len;
143 };
144 
145 struct repo_dir {
146 	char			*name;
147 	char			*owner;
148 	char			*description;
149 	char			*url;
150 	char			*age;
151 	char			*path;
152 };
153 
154 struct repo_tag {
155 	TAILQ_ENTRY(repo_tag)	 entry;
156 	char			*commit_id;
157 	char			*tag_name;
158 	char			*tag_commit;
159 	char			*commit_msg;
160 	char			*tagger;
161 	time_t			 tagger_time;
162 };
163 
164 struct repo_commit {
165 	TAILQ_ENTRY(repo_commit)	 entry;
166 	char			*path;
167 	char			*refs_str;
168 	char			*commit_id; /* id_str1 */
169 	char			*parent_id; /* id_str2 */
170 	char			*tree_id;
171 	char			*author;
172 	char			*committer;
173 	char			*commit_msg;
174 	time_t			 committer_time;
175 };
176 
177 struct got_repository;
178 struct transport {
179 	TAILQ_HEAD(repo_commits_head, repo_commit)	 repo_commits;
180 	TAILQ_HEAD(repo_tags_head, repo_tag)		 repo_tags;
181 	struct got_repository	*repo;
182 	struct repo_dir		*repo_dir;
183 	struct querystring	*qs;
184 	char			*next_id;
185 	char			*prev_id;
186 	unsigned int		 repos_total;
187 	unsigned int		 next_disp;
188 	unsigned int		 prev_disp;
189 	unsigned int		 tag_count;
190 };
191 
192 enum socket_priv_fds {
193 	DIFF_FD_1,
194 	DIFF_FD_2,
195 	DIFF_FD_3,
196 	DIFF_FD_4,
197 	DIFF_FD_5,
198 	BLAME_FD_1,
199 	BLAME_FD_2,
200 	BLAME_FD_3,
201 	BLAME_FD_4,
202 	BLAME_FD_5,
203 	BLAME_FD_6,
204 	BLOB_FD_1,
205 	BLOB_FD_2,
206 	PRIV_FDS__MAX,
207 };
208 
209 struct request {
210 	struct socket			*sock;
211 	struct server			*srv;
212 	struct transport		*t;
213 	struct event			 ev;
214 	struct event			 tmo;
215 
216 	uint16_t			 id;
217 	int				 fd;
218 	int				 priv_fd[PRIV_FDS__MAX];
219 
220 	uint8_t				 buf[FCGI_RECORD_SIZE];
221 	size_t				 buf_pos;
222 	size_t				 buf_len;
223 
224 	char				 querystring[MAX_QUERYSTRING];
225 	char				 http_host[GOTWEBD_MAXTEXT];
226 	char				 document_root[MAX_DOCUMENT_ROOT];
227 	char				 server_name[MAX_SERVER_NAME];
228 
229 	struct env_head			 env;
230 	int				 env_count;
231 
232 	uint8_t				 request_started;
233 };
234 
235 struct fcgi_begin_request_body {
236 	uint16_t	role;
237 	uint8_t		flags;
238 	uint8_t		reserved[5];
239 }__attribute__((__packed__));
240 
241 struct fcgi_end_request_body {
242 	uint32_t	app_status;
243 	uint8_t		protocol_status;
244 	uint8_t		reserved[3];
245 }__attribute__((__packed__));
246 
247 struct address {
248 	TAILQ_ENTRY(address)	 entry;
249 	struct sockaddr_storage	 ss;
250 	int			 ipproto;
251 	int			 prefixlen;
252 	in_port_t		 port;
253 	char			 ifname[IFNAMSIZ];
254 };
255 TAILQ_HEAD(addresslist, address);
256 
257 struct server {
258 	TAILQ_ENTRY(server)	 entry;
259 	struct addresslist	*al;
260 
261 	char		 name[GOTWEBD_MAXTEXT];
262 
263 	char		 repos_path[PATH_MAX];
264 	char		 site_name[GOTWEBD_MAXNAME];
265 	char		 site_owner[GOTWEBD_MAXNAME];
266 	char		 site_link[GOTWEBD_MAXTEXT];
267 	char		 logo[GOTWEBD_MAXTEXT];
268 	char		 logo_url[GOTWEBD_MAXTEXT];
269 	char		 custom_css[PATH_MAX];
270 
271 	size_t		 max_repos;
272 	size_t		 max_repos_display;
273 	size_t		 max_commits_display;
274 
275 	int		 show_site_owner;
276 	int		 show_repo_owner;
277 	int		 show_repo_age;
278 	int		 show_repo_description;
279 	int		 show_repo_cloneurl;
280 
281 	int		 unix_socket;
282 	char		 unix_socket_name[PATH_MAX];
283 
284 	int		 fcgi_socket;
285 	char		 fcgi_socket_bind[GOTWEBD_MAXTEXT];
286 	in_port_t	 fcgi_socket_port;
287 };
288 TAILQ_HEAD(serverlist, server);
289 
290 enum client_action {
291 	CLIENT_CONNECT,
292 	CLIENT_DISCONNECT,
293 };
294 
295 enum sock_type {
296 	UNIX,
297 	FCGI,
298 };
299 
300 struct socket_conf {
301 	struct addresslist	*al;
302 
303 	char		 name[GOTWEBD_MAXTEXT];
304 	char		 srv_name[GOTWEBD_MAXTEXT];
305 
306 	int		 id;
307 	int		 child_id;
308 	int		 parent_id;
309 
310 	int		 ipv4;
311 	int		 ipv6;
312 
313 	int		 type;
314 	char		 unix_socket_name[PATH_MAX];
315 	in_port_t	 fcgi_socket_port;
316 };
317 
318 struct socket {
319 	TAILQ_ENTRY(socket)	 entry;
320 	struct socket_conf	 conf;
321 
322 	int		 fd;
323 	int		 pack_fds[GOT_PACK_NUM_TEMPFILES];
324 	int		 priv_fd[PRIV_FDS__MAX];
325 
326 	struct event	 evt;
327 	struct event	 ev;
328 	struct event	 pause;
329 
330 	int		 client_status;
331 };
332 TAILQ_HEAD(socketlist, socket);
333 
334 struct gotwebd {
335 	struct serverlist	*servers;
336 	struct socketlist	*sockets;
337 
338 	struct privsep	*gotwebd_ps;
339 	const char	*gotwebd_conffile;
340 
341 	int		 gotwebd_debug;
342 	int		 gotwebd_verbose;
343 	int		 gotwebd_noaction;
344 
345 	uint16_t	 prefork_gotwebd;
346 	int		 gotwebd_reload;
347 
348 	int		 server_cnt;
349 
350 	char		 httpd_chroot[PATH_MAX];
351 
352 	int		 unix_socket;
353 	char		 unix_socket_name[PATH_MAX];
354 
355 	int		 fcgi_socket;
356 	char		 fcgi_socket_bind[GOTWEBD_MAXTEXT];
357 	in_port_t	 fcgi_socket_port;
358 };
359 
360 struct querystring {
361 	uint8_t		 action;
362 	char		*commit;
363 	char		*previd;
364 	char		*prevset;
365 	char		*file;
366 	char		*folder;
367 	char		*headref;
368 	int		 index_page;
369 	char		*index_page_str;
370 	char		*path;
371 	int		 page;
372 	char		*page_str;
373 };
374 
375 struct querystring_keys {
376 	const char	*name;
377 	int		 element;
378 };
379 
380 struct action_keys {
381 	const char	*name;
382 	int		 action;
383 };
384 
385 enum querystring_elements {
386 	ACTION,
387 	COMMIT,
388 	RFILE,
389 	FOLDER,
390 	HEADREF,
391 	INDEX_PAGE,
392 	PATH,
393 	PAGE,
394 	PREVID,
395 	QSELEM__MAX,
396 };
397 
398 enum query_actions {
399 	BLAME,
400 	BLOB,
401 	BRIEFS,
402 	COMMITS,
403 	DIFF,
404 	ERR,
405 	INDEX,
406 	SUMMARY,
407 	TAG,
408 	TAGS,
409 	TREE,
410 	ACTIONS__MAX,
411 };
412 
413 extern struct gotwebd	*gotwebd_env;
414 
415 /* sockets.c */
416 void sockets(struct privsep *, struct privsep_proc *);
417 void sockets_shutdown(void);
418 void sockets_parse_sockets(struct gotwebd *);
419 void sockets_socket_accept(int, short, void *);
420 int sockets_privinit(struct gotwebd *, struct socket *);
421 
422 /* gotweb.c */
423 const struct got_error *gotweb_render_content_type(struct request *,
424     const uint8_t *);
425 const struct got_error
426     *gotweb_render_content_type_file(struct request *, const uint8_t *, char *);
427 const struct got_error *gotweb_get_time_str(char **, time_t, int);
428 const struct got_error *gotweb_init_transport(struct transport **);
429 const struct got_error *gotweb_escape_html(char **, const char *);
430 void gotweb_free_repo_commit(struct repo_commit *);
431 void gotweb_free_repo_tag(struct repo_tag *);
432 void gotweb_process_request(struct request *);
433 void gotweb_free_transport(struct transport *);
434 
435 /* parse.y */
436 int parse_config(const char *, struct gotwebd *);
437 int cmdline_symset(char *);
438 
439 /* fcgi.c */
440 void fcgi_request(int, short, void *);
441 void fcgi_timeout(int, short, void *);
442 void fcgi_cleanup_request(struct request *);
443 void fcgi_create_end_record(struct request *);
444 void dump_fcgi_record(const char *, struct fcgi_record_header *);
445 int fcgi_gen_response(struct request *, const char *);
446 int fcgi_gen_binary_response(struct request *, const uint8_t *, int);
447 
448 /* got_operations.c */
449 const struct got_error *got_get_repo_owner(char **, struct request *, char *);
450 const struct got_error *got_get_repo_age(char **, struct request *, char *,
451     const char *, int);
452 const struct got_error *got_get_repo_commits(struct request *, int);
453 const struct got_error *got_get_repo_tags(struct request *, int);
454 const struct got_error *got_get_repo_heads(struct request *);
455 const struct got_error *got_output_repo_diff(struct request *);
456 const struct got_error *got_output_repo_tree(struct request *);
457 const struct got_error *got_output_file_blob(struct request *);
458 const struct got_error *got_output_file_blame(struct request *);
459 
460 /* config.c */
461 int config_setserver(struct gotwebd *, struct server *);
462 int config_getserver(struct gotwebd *, struct imsg *);
463 int config_setsock(struct gotwebd *, struct socket *);
464 int config_getsock(struct gotwebd *, struct imsg *);
465 int config_setfd(struct gotwebd *, struct socket *);
466 int config_getfd(struct gotwebd *, struct imsg *);
467 int config_getcfg(struct gotwebd *, struct imsg *);
468 int config_init(struct gotwebd *);