1 /*
2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
4  * Copyright (c) 2014 Reyk Floeter <reyk@openbsd.org>
5  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
6  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
7  *
8  * Permission to use, copy, modify, and distribute this software for any
9  * purpose with or without fee is hereby granted, provided that the above
10  * copyright notice and this permission notice appear in all copies.
11  *
12  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
13  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
14  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
15  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
16  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
19  */
20 #include "got_compat.h"
21 
22 #include <net/if.h>
23 #include <netinet/in.h>
24 #include <sys/queue.h>
25 #include <sys/stat.h>
26 #include <sys/types.h>
27 
28 #include <ctype.h>
29 #include <dirent.h>
30 #include <errno.h>
31 #include <event.h>
32 #include <fcntl.h>
33 #include <imsg.h>
34 #include <stdio.h>
35 #include <stdlib.h>
36 #include <string.h>
37 #include <unistd.h>
38 
39 #include "got_error.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_repository.h"
43 #include "got_path.h"
44 #include "got_cancel.h"
45 #include "got_worktree.h"
46 #include "got_diff.h"
47 #include "got_commit_graph.h"
48 #include "got_blame.h"
49 #include "got_privsep.h"
50 
51 #include "gotwebd.h"
52 #include "tmpl.h"
53 
54 static const struct querystring_keys querystring_keys[] = {
55 	{ "action",		ACTION },
56 	{ "commit",		COMMIT },
57 	{ "file",		RFILE },
58 	{ "folder",		FOLDER },
59 	{ "headref",		HEADREF },
60 	{ "index_page",		INDEX_PAGE },
61 	{ "path",		PATH },
62 };
63 
64 static const struct action_keys action_keys[] = {
65 	{ "blame",	BLAME },
66 	{ "blob",	BLOB },
67 	{ "blobraw",	BLOBRAW },
68 	{ "briefs",	BRIEFS },
69 	{ "commits",	COMMITS },
70 	{ "diff",	DIFF },
71 	{ "error",	ERR },
72 	{ "index",	INDEX },
73 	{ "patch",	PATCH },
74 	{ "summary",	SUMMARY },
75 	{ "tag",	TAG },
76 	{ "tags",	TAGS },
77 	{ "tree",	TREE },
78 	{ "rss",	RSS },
79 };
80 
81 static const struct got_error *gotweb_init_querystring(struct querystring **);
82 static const struct got_error *gotweb_parse_querystring(struct querystring **,
83     char *);
84 static const struct got_error *gotweb_assign_querystring(struct querystring **,
85     char *, char *);
86 static int gotweb_render_index(struct template *);
87 static const struct got_error *gotweb_init_repo_dir(struct repo_dir **,
88     const char *);
89 static const struct got_error *gotweb_load_got_path(struct request *c,
90     struct repo_dir *);
91 static const struct got_error *gotweb_get_repo_description(char **,
92     struct server *, const char *, int);
93 static const struct got_error *gotweb_get_clone_url(char **, struct server *,
94     const char *, int);
95 
96 static void gotweb_free_querystring(struct querystring *);
97 static void gotweb_free_repo_dir(struct repo_dir *);
98 
99 struct server *gotweb_get_server(const char *);
100 
101 static int
102 gotweb_reply(struct request *c, int status, const char *ctype,
103     struct gotweb_url *location)
104 {
105 	const char	*csp;
106 
107 	if (status != 200 && tp_writef(c->tp, "Status: %d\r\n", status) == -1)
108 		return -1;
109 
110 	if (location) {
111 		if (tp_writes(c->tp, "Location: ") == -1 ||
112 		    gotweb_render_url(c, location) == -1 ||
113 		    tp_writes(c->tp, "\r\n") == -1)
114 			return -1;
115 	}
116 
117 	csp = "Content-Security-Policy: default-src 'self'; "
118 	    "script-src 'none'; object-src 'none';\r\n";
119 	if (tp_writes(c->tp, csp) == -1)
120 		return -1;
121 
122 	if (ctype && tp_writef(c->tp, "Content-Type: %s\r\n", ctype) == -1)
123 		return -1;
124 
125 	return tp_writes(c->tp, "\r\n");
126 }
127 
128 static int
129 gotweb_reply_file(struct request *c, const char *ctype, const char *file,
130     const char *suffix)
131 {
132 	int r;
133 
134 	r = tp_writef(c->tp, "Content-Disposition: attachment; "
135 	    "filename=%s%s\r\n", file, suffix ? suffix : "");
136 	if (r == -1)
137 		return -1;
138 	return gotweb_reply(c, 200, ctype, NULL);
139 }
140 
141 void
142 gotweb_process_request(struct request *c)
143 {
144 	const struct got_error *error = NULL;
145 	struct server *srv = NULL;
146 	struct querystring *qs = NULL;
147 	struct repo_dir *repo_dir = NULL;
148 	const char *rss_ctype = "application/rss+xml;charset=utf-8";
149 	const uint8_t *buf;
150 	size_t len;
151 	int r, binary = 0;
152 
153 	/* init the transport */
154 	error = gotweb_init_transport(&c->t);
155 	if (error) {
156 		log_warnx("%s: %s", __func__, error->msg);
157 		return;
158 	}
159 	/* don't process any further if client disconnected */
160 	if (c->sock->client_status == CLIENT_DISCONNECT)
161 		return;
162 	/* get the gotwebd server */
163 	srv = gotweb_get_server(c->server_name);
164 	if (srv == NULL) {
165 		log_warnx("%s: error server is NULL", __func__);
166 		goto err;
167 	}
168 	c->srv = srv;
169 	/* parse our querystring */
170 	error = gotweb_init_querystring(&qs);
171 	if (error) {
172 		log_warnx("%s: %s", __func__, error->msg);
173 		goto err;
174 	}
175 	c->t->qs = qs;
176 	error = gotweb_parse_querystring(&qs, c->querystring);
177 	if (error) {
178 		log_warnx("%s: %s", __func__, error->msg);
179 		goto err;
180 	}
181 
182 	/*
183 	 * certain actions require a commit id in the querystring. this stops
184 	 * bad actors from exploiting this by manually manipulating the
185 	 * querystring.
186 	 */
187 
188 	if (qs->action == BLAME || qs->action == BLOB ||
189 	    qs->action == BLOBRAW || qs->action == DIFF ||
190 	    qs->action == PATCH) {
191 		if (qs->commit == NULL) {
192 			error = got_error(GOT_ERR_BAD_QUERYSTRING);
193 			goto err;
194 		}
195 	}
196 
197 	if (qs->action != INDEX) {
198 		error = gotweb_init_repo_dir(&repo_dir, qs->path);
199 		if (error)
200 			goto err;
201 		error = gotweb_load_got_path(c, repo_dir);
202 		c->t->repo_dir = repo_dir;
203 		if (error && error->code != GOT_ERR_LONELY_PACKIDX)
204 			goto err;
205 	}
206 
207 	if (qs->action == BLOBRAW || qs->action == BLOB) {
208 		if (qs->folder == NULL || qs->file == NULL) {
209 			error = got_error(GOT_ERR_BAD_QUERYSTRING);
210 			goto err;
211 		}
212 
213 		error = got_get_repo_commits(c, 1);
214 		if (error)
215 			goto err;
216 
217 		error = got_open_blob_for_output(&c->t->blob, &c->t->fd,
218 		    &binary, c, qs->folder, qs->file, qs->commit);
219 		if (error)
220 			goto err;
221 	}
222 
223 	switch (qs->action) {
224 	case BLAME:
225 		if (qs->folder == NULL || qs->file == NULL) {
226 			error = got_error(GOT_ERR_BAD_QUERYSTRING);
227 			goto err;
228 		}
229 		error = got_get_repo_commits(c, 1);
230 		if (error) {
231 			log_warnx("%s: %s", __func__, error->msg);
232 			goto err;
233 		}
234 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
235 			return;
236 		gotweb_render_page(c->tp, gotweb_render_blame);
237 		return;
238 	case BLOB:
239 		if (binary) {
240 			struct gotweb_url url = {
241 				.index_page = -1,
242 				.action = BLOBRAW,
243 				.path = qs->path,
244 				.commit = qs->commit,
245 				.folder = qs->folder,
246 				.file = qs->file,
247 			};
248 
249 			gotweb_reply(c, 302, NULL, &url);
250 			return;
251 		}
252 
253 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
254 			return;
255 		gotweb_render_page(c->tp, gotweb_render_blob);
256 		return;
257 	case BLOBRAW:
258 		if (binary)
259 			r = gotweb_reply_file(c, "application/octet-stream",
260 			    qs->file, NULL);
261 		else
262 			r = gotweb_reply(c, 200, "text/plain", NULL);
263 		if (r == -1)
264 			return;
265 		if (template_flush(c->tp) == -1)
266 			return;
267 
268 		for (;;) {
269 			error = got_object_blob_read_block(&len, c->t->blob);
270 			if (error)
271 				break;
272 			if (len == 0)
273 				break;
274 			buf = got_object_blob_get_read_buf(c->t->blob);
275 			if (fcgi_write(c, buf, len) == -1)
276 				break;
277 		}
278 		return;
279 	case BRIEFS:
280 		error = got_get_repo_commits(c, srv->max_commits_display);
281 		if (error)
282 			goto err;
283 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
284 			return;
285 		gotweb_render_page(c->tp, gotweb_render_briefs);
286 		return;
287 	case COMMITS:
288 		error = got_get_repo_commits(c, srv->max_commits_display);
289 		if (error) {
290 			log_warnx("%s: %s", __func__, error->msg);
291 			goto err;
292 		}
293 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
294 			return;
295 		gotweb_render_page(c->tp, gotweb_render_commits);
296 		return;
297 	case DIFF:
298 		error = got_get_repo_commits(c, 1);
299 		if (error) {
300 			log_warnx("%s: %s", __func__, error->msg);
301 			goto err;
302 		}
303 		error = got_open_diff_for_output(&c->t->fp, c);
304 		if (error) {
305 			log_warnx("%s: %s", __func__, error->msg);
306 			goto err;
307 		}
308 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
309 			return;
310 		gotweb_render_page(c->tp, gotweb_render_diff);
311 		return;
312 	case INDEX:
313 		c->t->nrepos = scandir(srv->repos_path, &c->t->repos, NULL,
314 		    alphasort);
315 		if (c->t->nrepos == -1) {
316 			c->t->repos = NULL;
317 			error = got_error_from_errno2("scandir",
318 			    srv->repos_path);
319 			goto err;
320 		}
321 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
322 			return;
323 		gotweb_render_page(c->tp, gotweb_render_index);
324 		return;
325 	case PATCH:
326 		error = got_get_repo_commits(c, 1);
327 		if (error) {
328 			log_warnx("%s: %s", __func__, error->msg);
329 			goto err;
330 		}
331 		error = got_open_diff_for_output(&c->t->fp, c);
332 		if (error) {
333 			log_warnx("%s: %s", __func__, error->msg);
334 			goto err;
335 		}
336 		if (gotweb_reply(c, 200, "text/plain", NULL) == -1)
337 			return;
338 		gotweb_render_patch(c->tp);
339 		return;
340 	case RSS:
341 		error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
342 		if (error)
343 			goto err;
344 		if (gotweb_reply_file(c, rss_ctype, repo_dir->name, ".rss")
345 		    == -1)
346 			return;
347 		gotweb_render_rss(c->tp);
348 		return;
349 	case SUMMARY:
350 		error = got_ref_list(&c->t->refs, c->t->repo, "refs/heads",
351 		    got_ref_cmp_by_name, NULL);
352 		if (error) {
353 			log_warnx("%s: got_ref_list: %s", __func__,
354 			    error->msg);
355 			goto err;
356 		}
357 		error = got_get_repo_commits(c, srv->summary_commits_display);
358 		if (error)
359 			goto err;
360 		qs->action = TAGS;
361 		error = got_get_repo_tags(c, srv->summary_tags_display);
362 		if (error) {
363 			log_warnx("%s: got_get_repo_tags: %s", __func__,
364 			    error->msg);
365 			goto err;
366 		}
367 		qs->action = SUMMARY;
368 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
369 			return;
370 		gotweb_render_page(c->tp, gotweb_render_summary);
371 		return;
372 	case TAG:
373 		error = got_get_repo_tags(c, 1);
374 		if (error) {
375 			log_warnx("%s: %s", __func__, error->msg);
376 			goto err;
377 		}
378 		if (c->t->tag_count == 0) {
379 			error = got_error_msg(GOT_ERR_BAD_OBJ_ID,
380 			    "bad commit id");
381 			goto err;
382 		}
383 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
384 			return;
385 		gotweb_render_page(c->tp, gotweb_render_tag);
386 		return;
387 	case TAGS:
388 		error = got_get_repo_tags(c, srv->max_commits_display);
389 		if (error) {
390 			log_warnx("%s: %s", __func__, error->msg);
391 			goto err;
392 		}
393 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
394 			return;
395 		gotweb_render_page(c->tp, gotweb_render_tags);
396 		return;
397 	case TREE:
398 		error = got_get_repo_commits(c, 1);
399 		if (error) {
400 			log_warnx("%s: %s", __func__, error->msg);
401 			goto err;
402 		}
403 		if (gotweb_reply(c, 200, "text/html", NULL) == -1)
404 			return;
405 		gotweb_render_page(c->tp, gotweb_render_tree);
406 		return;
407 	case ERR:
408 	default:
409 		error = got_error(GOT_ERR_BAD_QUERYSTRING);
410 	}
411 
412 err:
413 	c->t->error = error;
414 	if (gotweb_reply(c, 400, "text/html", NULL) == -1)
415 		return;
416 	gotweb_render_page(c->tp, gotweb_render_error);
417 }
418 
419 struct server *
420 gotweb_get_server(const char *server_name)
421 {
422 	struct server *srv;
423 
424 	/* check against the server name first */
425 	if (*server_name != '\0')
426 		TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
427 			if (strcmp(srv->name, server_name) == 0)
428 				return srv;
429 
430 	/* otherwise, use the first server */
431 	return TAILQ_FIRST(&gotwebd_env->servers);
432 };
433 
434 const struct got_error *
435 gotweb_init_transport(struct transport **t)
436 {
437 	const struct got_error *error = NULL;
438 
439 	*t = calloc(1, sizeof(**t));
440 	if (*t == NULL)
441 		return got_error_from_errno2(__func__, "calloc");
442 
443 	TAILQ_INIT(&(*t)->repo_commits);
444 	TAILQ_INIT(&(*t)->repo_tags);
445 	TAILQ_INIT(&(*t)->refs);
446 
447 	(*t)->fd = -1;
448 
449 	return error;
450 }
451 
452 static const struct got_error *
453 gotweb_init_querystring(struct querystring **qs)
454 {
455 	const struct got_error *error = NULL;
456 
457 	*qs = calloc(1, sizeof(**qs));
458 	if (*qs == NULL)
459 		return got_error_from_errno2(__func__, "calloc");
460 
461 	(*qs)->headref = strdup("HEAD");
462 	if ((*qs)->headref == NULL) {
463 		free(*qs);
464 		*qs = NULL;
465 		return got_error_from_errno2(__func__, "strdup");
466 	}
467 
468 	(*qs)->action = INDEX;
469 
470 	return error;
471 }
472 
473 static const struct got_error *
474 gotweb_parse_querystring(struct querystring **qs, char *qst)
475 {
476 	const struct got_error *error = NULL;
477 	char *tok1 = NULL, *tok1_pair = NULL, *tok1_end = NULL;
478 	char *tok2 = NULL, *tok2_pair = NULL, *tok2_end = NULL;
479 
480 	if (qst == NULL)
481 		return error;
482 
483 	tok1 = strdup(qst);
484 	if (tok1 == NULL)
485 		return got_error_from_errno2(__func__, "strdup");
486 
487 	tok1_pair = tok1;
488 	tok1_end = tok1;
489 
490 	while (tok1_pair != NULL) {
491 		strsep(&tok1_end, "&");
492 
493 		tok2 = strdup(tok1_pair);
494 		if (tok2 == NULL) {
495 			free(tok1);
496 			return got_error_from_errno2(__func__, "strdup");
497 		}
498 
499 		tok2_pair = tok2;
500 		tok2_end = tok2;
501 
502 		while (tok2_pair != NULL) {
503 			strsep(&tok2_end, "=");
504 			if (tok2_end) {
505 				error = gotweb_assign_querystring(qs, tok2_pair,
506 				    tok2_end);
507 				if (error)
508 					goto err;
509 			}
510 			tok2_pair = tok2_end;
511 		}
512 		free(tok2);
513 		tok1_pair = tok1_end;
514 	}
515 	free(tok1);
516 	return error;
517 err:
518 	free(tok2);
519 	free(tok1);
520 	return error;
521 }
522 
523 /*
524  * Adapted from usr.sbin/httpd/httpd.c url_decode.
525  */
526 static const struct got_error *
527 gotweb_urldecode(char *url)
528 {
529 	char		*p, *q;
530 	char		 hex[3];
531 	unsigned long	 x;
532 
533 	hex[2] = '\0';
534 	p = q = url;
535 
536 	while (*p != '\0') {
537 		switch (*p) {
538 		case '%':
539 			/* Encoding character is followed by two hex chars */
540 			if (!isxdigit((unsigned char)p[1]) ||
541 			    !isxdigit((unsigned char)p[2]) ||
542 			    (p[1] == '0' && p[2] == '0'))
543 				return got_error(GOT_ERR_BAD_QUERYSTRING);
544 
545 			hex[0] = p[1];
546 			hex[1] = p[2];
547 
548 			/*
549 			 * We don't have to validate "hex" because it is
550 			 * guaranteed to include two hex chars followed by nul.
551 			 */
552 			x = strtoul(hex, NULL, 16);
553 			*q = (char)x;
554 			p += 2;
555 			break;
556 		default:
557 			*q = *p;
558 			break;
559 		}
560 		p++;
561 		q++;
562 	}
563 	*q = '\0';
564 
565 	return NULL;
566 }
567 
568 static const struct got_error *
569 gotweb_assign_querystring(struct querystring **qs, char *key, char *value)
570 {
571 	const struct got_error *error = NULL;
572 	const char *errstr;
573 	int a_cnt, el_cnt;
574 
575 	error = gotweb_urldecode(value);
576 	if (error)
577 		return error;
578 
579 	for (el_cnt = 0; el_cnt < nitems(querystring_keys); el_cnt++) {
580 		if (strcmp(key, querystring_keys[el_cnt].name) != 0)
581 			continue;
582 
583 		switch (querystring_keys[el_cnt].element) {
584 		case ACTION:
585 			for (a_cnt = 0; a_cnt < nitems(action_keys); a_cnt++) {
586 				if (strcmp(value, action_keys[a_cnt].name) != 0)
587 					continue;
588 				else if (strcmp(value,
589 				    action_keys[a_cnt].name) == 0){
590 					(*qs)->action =
591 					    action_keys[a_cnt].action;
592 					goto qa_found;
593 				}
594 			}
595 			(*qs)->action = ERR;
596 qa_found:
597 			break;
598 		case COMMIT:
599 			(*qs)->commit = strdup(value);
600 			if ((*qs)->commit == NULL) {
601 				error = got_error_from_errno2(__func__,
602 				    "strdup");
603 				goto done;
604 			}
605 			break;
606 		case RFILE:
607 			(*qs)->file = strdup(value);
608 			if ((*qs)->file == NULL) {
609 				error = got_error_from_errno2(__func__,
610 				    "strdup");
611 				goto done;
612 			}
613 			break;
614 		case FOLDER:
615 			(*qs)->folder = strdup(value);
616 			if ((*qs)->folder == NULL) {
617 				error = got_error_from_errno2(__func__,
618 				    "strdup");
619 				goto done;
620 			}
621 			break;
622 		case HEADREF:
623 			free((*qs)->headref);
624 			(*qs)->headref = strdup(value);
625 			if ((*qs)->headref == NULL) {
626 				error = got_error_from_errno2(__func__,
627 				    "strdup");
628 				goto done;
629 			}
630 			break;
631 		case INDEX_PAGE:
632 			if (*value == '\0')
633 				break;
634 			(*qs)->index_page = strtonum(value, INT64_MIN,
635 			    INT64_MAX, &errstr);
636 			if (errstr) {
637 				error = got_error_from_errno3(__func__,
638 				    "strtonum", errstr);
639 				goto done;
640 			}
641 			if ((*qs)->index_page < 0)
642 				(*qs)->index_page = 0;
643 			break;
644 		case PATH:
645 			(*qs)->path = strdup(value);
646 			if ((*qs)->path == NULL) {
647 				error = got_error_from_errno2(__func__,
648 				    "strdup");
649 				goto done;
650 			}
651 			break;
652 		}
653 
654 		/* entry found */
655 		break;
656 	}
657 done:
658 	return error;
659 }
660 
661 void
662 gotweb_free_repo_tag(struct repo_tag *rt)
663 {
664 	if (rt != NULL) {
665 		free(rt->commit_id);
666 		free(rt->tag_name);
667 		free(rt->tag_commit);
668 		free(rt->commit_msg);
669 		free(rt->tagger);
670 	}
671 	free(rt);
672 }
673 
674 void
675 gotweb_free_repo_commit(struct repo_commit *rc)
676 {
677 	if (rc != NULL) {
678 		free(rc->path);
679 		free(rc->refs_str);
680 		free(rc->commit_id);
681 		free(rc->parent_id);
682 		free(rc->tree_id);
683 		free(rc->author);
684 		free(rc->committer);
685 		free(rc->commit_msg);
686 	}
687 	free(rc);
688 }
689 
690 static void
691 gotweb_free_querystring(struct querystring *qs)
692 {
693 	if (qs != NULL) {
694 		free(qs->commit);
695 		free(qs->file);
696 		free(qs->folder);
697 		free(qs->headref);
698 		free(qs->path);
699 	}
700 	free(qs);
701 }
702 
703 static void
704 gotweb_free_repo_dir(struct repo_dir *repo_dir)
705 {
706 	if (repo_dir != NULL) {
707 		free(repo_dir->name);
708 		free(repo_dir->owner);
709 		free(repo_dir->description);
710 		free(repo_dir->url);
711 		free(repo_dir->path);
712 	}
713 	free(repo_dir);
714 }
715 
716 void
717 gotweb_free_transport(struct transport *t)
718 {
719 	const struct got_error *err;
720 	struct repo_commit *rc = NULL, *trc = NULL;
721 	struct repo_tag *rt = NULL, *trt = NULL;
722 	int i;
723 
724 	got_ref_list_free(&t->refs);
725 	TAILQ_FOREACH_SAFE(rc, &t->repo_commits, entry, trc) {
726 		TAILQ_REMOVE(&t->repo_commits, rc, entry);
727 		gotweb_free_repo_commit(rc);
728 	}
729 	TAILQ_FOREACH_SAFE(rt, &t->repo_tags, entry, trt) {
730 		TAILQ_REMOVE(&t->repo_tags, rt, entry);
731 		gotweb_free_repo_tag(rt);
732 	}
733 	gotweb_free_repo_dir(t->repo_dir);
734 	gotweb_free_querystring(t->qs);
735 	free(t->more_id);
736 	free(t->tags_more_id);
737 	if (t->blob)
738 		got_object_blob_close(t->blob);
739 	if (t->fp) {
740 		err = got_gotweb_closefile(t->fp);
741 		if (err)
742 			log_warnx("%s: got_gotweb_closefile failure: %s",
743 			    __func__, err->msg);
744 	}
745 	if (t->fd != -1 && close(t->fd) == -1)
746 		log_warn("%s: close", __func__);
747 	if (t->repos) {
748 		for (i = 0; i < t->nrepos; ++i)
749 			free(t->repos[i]);
750 		free(t->repos);
751 	}
752 	if (t->repo)
753 		got_repo_close(t->repo);
754 	free(t);
755 }
756 
757 void
758 gotweb_index_navs(struct request *c, struct gotweb_url *prev, int *have_prev,
759     struct gotweb_url *next, int *have_next)
760 {
761 	struct transport *t = c->t;
762 	struct querystring *qs = t->qs;
763 	struct server *srv = c->srv;
764 
765 	*have_prev = *have_next = 0;
766 
767 	if (qs->index_page > 0) {
768 		*have_prev = 1;
769 		*prev = (struct gotweb_url){
770 			.action = -1,
771 			.index_page = qs->index_page - 1,
772 		};
773 	}
774 	if (t->next_disp == srv->max_repos_display &&
775 	    t->repos_total != (qs->index_page + 1) *
776 	    srv->max_repos_display) {
777 		*have_next = 1;
778 		*next = (struct gotweb_url){
779 			.action = -1,
780 			.index_page = qs->index_page + 1,
781 		};
782 	}
783 }
784 
785 static int
786 gotweb_render_index(struct template *tp)
787 {
788 	const struct got_error *error = NULL;
789 	struct request *c = tp->tp_arg;
790 	struct server *srv = c->srv;
791 	struct transport *t = c->t;
792 	struct querystring *qs = t->qs;
793 	struct repo_dir *repo_dir = NULL;
794 	struct dirent **sd_dent = t->repos;
795 	unsigned int d_i, d_disp = 0;
796 	unsigned int d_skipped = 0;
797 	int type, r;
798 
799 	if (gotweb_render_repo_table_hdr(c->tp) == -1)
800 		return -1;
801 
802 	for (d_i = 0; d_i < t->nrepos; d_i++) {
803 		if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
804 		    strcmp(sd_dent[d_i]->d_name, "..") == 0) {
805 			d_skipped++;
806 			continue;
807 		}
808 
809 		error = got_path_dirent_type(&type, srv->repos_path,
810 		    sd_dent[d_i]);
811 		if (error)
812 			continue;
813 		if (type != DT_DIR) {
814 			d_skipped++;
815 			continue;
816 		}
817 
818 		if (qs->index_page > 0 && (qs->index_page *
819 		    srv->max_repos_display) > t->prev_disp) {
820 			t->prev_disp++;
821 			continue;
822 		}
823 
824 		error = gotweb_init_repo_dir(&repo_dir, sd_dent[d_i]->d_name);
825 		if (error)
826 			continue;
827 
828 		error = gotweb_load_got_path(c, repo_dir);
829 		if (error && error->code != GOT_ERR_LONELY_PACKIDX) {
830 			if (error->code != GOT_ERR_NOT_GIT_REPO)
831 				log_warnx("%s: %s: %s", __func__,
832 				    sd_dent[d_i]->d_name, error->msg);
833 			gotweb_free_repo_dir(repo_dir);
834 			repo_dir = NULL;
835 			d_skipped++;
836 			continue;
837 		}
838 
839 		d_disp++;
840 		t->prev_disp++;
841 
842 		r = gotweb_render_repo_fragment(c->tp, repo_dir);
843 		gotweb_free_repo_dir(repo_dir);
844 		repo_dir = NULL;
845 		got_repo_close(t->repo);
846 		t->repo = NULL;
847 		if (r == -1)
848 			return -1;
849 
850 		t->next_disp++;
851 		if (d_disp == srv->max_repos_display)
852 			break;
853 	}
854 	t->repos_total = t->nrepos - d_skipped;
855 
856 	if (srv->max_repos_display == 0 ||
857 	    t->repos_total <= srv->max_repos_display)
858 		return 0;
859 
860 	if (gotweb_render_navs(c->tp) == -1)
861 		return -1;
862 
863 	return 0;
864 }
865 
866 static inline int
867 should_urlencode(int c)
868 {
869 	if (c <= ' ' || c >= 127)
870 		return 1;
871 
872 	switch (c) {
873 		/* gen-delim */
874 	case ':':
875 	case '/':
876 	case '?':
877 	case '#':
878 	case '[':
879 	case ']':
880 	case '@':
881 		/* sub-delims */
882 	case '!':
883 	case '$':
884 	case '&':
885 	case '\'':
886 	case '(':
887 	case ')':
888 	case '*':
889 	case '+':
890 	case ',':
891 	case ';':
892 	case '=':
893 		/* needed because the URLs are embedded into the HTML */
894 	case '\"':
895 		return 1;
896 	default:
897 		return 0;
898 	}
899 }
900 
901 static char *
902 gotweb_urlencode(const char *str)
903 {
904 	const char *s;
905 	char *escaped;
906 	size_t i, len;
907 	int a, b;
908 
909 	len = 0;
910 	for (s = str; *s; ++s) {
911 		len++;
912 		if (should_urlencode(*s))
913 			len += 2;
914 	}
915 
916 	escaped = calloc(1, len + 1);
917 	if (escaped == NULL)
918 		return NULL;
919 
920 	i = 0;
921 	for (s = str; *s; ++s) {
922 		if (should_urlencode(*s)) {
923 			a = (*s & 0xF0) >> 4;
924 			b = (*s & 0x0F);
925 
926 			escaped[i++] = '%';
927 			escaped[i++] = a <= 9 ? ('0' + a) : ('7' + a);
928 			escaped[i++] = b <= 9 ? ('0' + b) : ('7' + b);
929 		} else
930 			escaped[i++] = *s;
931 	}
932 
933 	return escaped;
934 }
935 
936 const char *
937 gotweb_action_name(int action)
938 {
939 	switch (action) {
940 	case BLAME:
941 		return "blame";
942 	case BLOB:
943 		return "blob";
944 	case BLOBRAW:
945 		return "blobraw";
946 	case BRIEFS:
947 		return "briefs";
948 	case COMMITS:
949 		return "commits";
950 	case DIFF:
951 		return "diff";
952 	case ERR:
953 		return "err";
954 	case INDEX:
955 		return "index";
956 	case PATCH:
957 		return "patch";
958 	case SUMMARY:
959 		return "summary";
960 	case TAG:
961 		return "tag";
962 	case TAGS:
963 		return "tags";
964 	case TREE:
965 		return "tree";
966 	case RSS:
967 		return "rss";
968 	default:
969 		return NULL;
970 	}
971 }
972 
973 int
974 gotweb_render_url(struct request *c, struct gotweb_url *url)
975 {
976 	const char *sep = "?", *action;
977 	char *tmp;
978 	int r;
979 
980 	action = gotweb_action_name(url->action);
981 	if (action != NULL) {
982 		if (tp_writef(c->tp, "?action=%s", action) == -1)
983 			return -1;
984 		sep = "&";
985 	}
986 
987 	if (url->commit) {
988 		if (tp_writef(c->tp, "%scommit=%s", sep, url->commit) == -1)
989 			return -1;
990 		sep = "&";
991 	}
992 
993 	if (url->previd) {
994 		if (tp_writef(c->tp, "%sprevid=%s", sep, url->previd) == -1)
995 			return -1;
996 		sep = "&";
997 	}
998 
999 	if (url->prevset) {
1000 		if (tp_writef(c->tp, "%sprevset=%s", sep, url->prevset) == -1)
1001 			return -1;
1002 		sep = "&";
1003 	}
1004 
1005 	if (url->file) {
1006 		tmp = gotweb_urlencode(url->file);
1007 		if (tmp == NULL)
1008 			return -1;
1009 		r = tp_writef(c->tp, "%sfile=%s", sep, tmp);
1010 		free(tmp);
1011 		if (r == -1)
1012 			return -1;
1013 		sep = "&";
1014 	}
1015 
1016 	if (url->folder) {
1017 		tmp = gotweb_urlencode(url->folder);
1018 		if (tmp == NULL)
1019 			return -1;
1020 		r = tp_writef(c->tp, "%sfolder=%s", sep, tmp);
1021 		free(tmp);
1022 		if (r == -1)
1023 			return -1;
1024 		sep = "&";
1025 	}
1026 
1027 	if (url->headref) {
1028 		tmp = gotweb_urlencode(url->headref);
1029 		if (tmp == NULL)
1030 			return -1;
1031 		r = tp_writef(c->tp, "%sheadref=%s", sep, url->headref);
1032 		free(tmp);
1033 		if (r == -1)
1034 			return -1;
1035 		sep = "&";
1036 	}
1037 
1038 	if (url->index_page != -1) {
1039 		if (tp_writef(c->tp, "%sindex_page=%d", sep,
1040 		    url->index_page) == -1)
1041 			return -1;
1042 		sep = "&";
1043 	}
1044 
1045 	if (url->path) {
1046 		tmp = gotweb_urlencode(url->path);
1047 		if (tmp == NULL)
1048 			return -1;
1049 		r = tp_writef(c->tp, "%spath=%s", sep, tmp);
1050 		free(tmp);
1051 		if (r == -1)
1052 			return -1;
1053 		sep = "&";
1054 	}
1055 
1056 	return 0;
1057 }
1058 
1059 int
1060 gotweb_render_absolute_url(struct request *c, struct gotweb_url *url)
1061 {
1062 	struct template	*tp = c->tp;
1063 	const char	*proto = c->https ? "https" : "http";
1064 
1065 	if (tp_writes(tp, proto) == -1 ||
1066 	    tp_writes(tp, "://") == -1 ||
1067 	    tp_htmlescape(tp, c->server_name) == -1 ||
1068 	    tp_htmlescape(tp, c->document_uri) == -1)
1069 		return -1;
1070 
1071 	return gotweb_render_url(c, url);
1072 }
1073 
1074 static const struct got_error *
1075 gotweb_load_got_path(struct request *c, struct repo_dir *repo_dir)
1076 {
1077 	const struct got_error *error = NULL;
1078 	struct socket *sock = c->sock;
1079 	struct server *srv = c->srv;
1080 	struct transport *t = c->t;
1081 	DIR *dt;
1082 	char *dir_test;
1083 
1084 	if (asprintf(&dir_test, "%s/%s/%s", srv->repos_path, repo_dir->name,
1085 	    GOTWEB_GIT_DIR) == -1)
1086 		return got_error_from_errno("asprintf");
1087 
1088 	dt = opendir(dir_test);
1089 	if (dt == NULL) {
1090 		free(dir_test);
1091 		if (asprintf(&dir_test, "%s/%s", srv->repos_path,
1092 		    repo_dir->name) == -1)
1093 			return got_error_from_errno("asprintf");
1094 		dt = opendir(dir_test);
1095 		if (dt == NULL) {
1096 			free(dir_test);
1097 			return got_error_path(repo_dir->name,
1098 			    GOT_ERR_NOT_GIT_REPO);
1099 		}
1100 	}
1101 
1102 	repo_dir->path = dir_test;
1103 	dir_test = NULL;
1104 
1105 	if (srv->respect_exportok &&
1106 	    faccessat(dirfd(dt), "git-daemon-export-ok", F_OK, 0) == -1) {
1107 		error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
1108 		goto err;
1109 	}
1110 
1111 	error = got_repo_open(&t->repo, repo_dir->path, NULL, sock->pack_fds);
1112 	if (error)
1113 		goto err;
1114 	error = gotweb_get_repo_description(&repo_dir->description, srv,
1115 	    repo_dir->path, dirfd(dt));
1116 	if (error)
1117 		goto err;
1118 	error = got_get_repo_owner(&repo_dir->owner, c);
1119 	if (error)
1120 		goto err;
1121 	if (srv->show_repo_age) {
1122 		error = got_get_repo_age(&repo_dir->age, c, NULL);
1123 		if (error)
1124 			goto err;
1125 	}
1126 	error = gotweb_get_clone_url(&repo_dir->url, srv, repo_dir->path,
1127 	    dirfd(dt));
1128 err:
1129 	free(dir_test);
1130 	if (dt != NULL && closedir(dt) == EOF && error == NULL)
1131 		error = got_error_from_errno("closedir");
1132 	if (error && t->repo) {
1133 		got_repo_close(t->repo);
1134 		t->repo = NULL;
1135 	}
1136 	return error;
1137 }
1138 
1139 static const struct got_error *
1140 gotweb_init_repo_dir(struct repo_dir **repo_dir, const char *dir)
1141 {
1142 	const struct got_error *error;
1143 
1144 	*repo_dir = calloc(1, sizeof(**repo_dir));
1145 	if (*repo_dir == NULL)
1146 		return got_error_from_errno("calloc");
1147 
1148 	if (asprintf(&(*repo_dir)->name, "%s", dir) == -1) {
1149 		error = got_error_from_errno("asprintf");
1150 		free(*repo_dir);
1151 		*repo_dir = NULL;
1152 		return error;
1153 	}
1154 	(*repo_dir)->owner = NULL;
1155 	(*repo_dir)->description = NULL;
1156 	(*repo_dir)->url = NULL;
1157 	(*repo_dir)->path = NULL;
1158 
1159 	return NULL;
1160 }
1161 
1162 static const struct got_error *
1163 gotweb_get_repo_description(char **description, struct server *srv,
1164     const char *dirpath, int dir)
1165 {
1166 	const struct got_error *error = NULL;
1167 	struct stat sb;
1168 	int fd = -1;
1169 	off_t len;
1170 
1171 	*description = NULL;
1172 	if (srv->show_repo_description == 0)
1173 		return NULL;
1174 
1175 	fd = openat(dir, "description", O_RDONLY);
1176 	if (fd == -1) {
1177 		if (errno != ENOENT && errno != EACCES) {
1178 			error = got_error_from_errno_fmt("openat %s/%s",
1179 			    dirpath, "description");
1180 		}
1181 		goto done;
1182 	}
1183 
1184 	if (fstat(fd, &sb) == -1) {
1185 		error = got_error_from_errno_fmt("fstat %s/%s",
1186 		    dirpath, "description");
1187 		goto done;
1188 	}
1189 
1190 	len = sb.st_size;
1191 	if (len > GOTWEBD_MAXDESCRSZ - 1)
1192 		len = GOTWEBD_MAXDESCRSZ - 1;
1193 
1194 	*description = calloc(len + 1, sizeof(**description));
1195 	if (*description == NULL) {
1196 		error = got_error_from_errno("calloc");
1197 		goto done;
1198 	}
1199 
1200 	if (read(fd, *description, len) == -1)
1201 		error = got_error_from_errno("read");
1202 done:
1203 	if (fd != -1 && close(fd) == -1 && error == NULL)
1204 		error = got_error_from_errno("close");
1205 	return error;
1206 }
1207 
1208 static const struct got_error *
1209 gotweb_get_clone_url(char **url, struct server *srv, const char *dirpath,
1210     int dir)
1211 {
1212 	const struct got_error *error = NULL;
1213 	struct stat sb;
1214 	int fd = -1;
1215 	off_t len;
1216 
1217 	*url = NULL;
1218 	if (srv->show_repo_cloneurl == 0)
1219 		return NULL;
1220 
1221 	fd = openat(dir, "cloneurl", O_RDONLY);
1222 	if (fd == -1) {
1223 		if (errno != ENOENT && errno != EACCES) {
1224 			error = got_error_from_errno_fmt("openat %s/%s",
1225 			    dirpath, "cloneurl");
1226 		}
1227 		goto done;
1228 	}
1229 
1230 	if (fstat(fd, &sb) == -1) {
1231 		error = got_error_from_errno_fmt("fstat %s/%s",
1232 		    dirpath, "cloneurl");
1233 		goto done;
1234 	}
1235 
1236 	len = sb.st_size;
1237 	if (len > GOTWEBD_MAXCLONEURLSZ - 1)
1238 		len = GOTWEBD_MAXCLONEURLSZ - 1;
1239 
1240 	*url = calloc(len + 1, sizeof(**url));
1241 	if (*url == NULL) {
1242 		error = got_error_from_errno("calloc");
1243 		goto done;
1244 	}
1245 
1246 	if (read(fd, *url, len) == -1)
1247 		error = got_error_from_errno("read");
1248 done:
1249 	if (fd != -1 && close(fd) == -1 && error == NULL)
1250 		error = got_error_from_errno("close");
1251 	return error;
1252 }
1253 
1254 int
1255 gotweb_render_age(struct template *tp, time_t committer_time)
1256 {
1257 	struct request *c = tp->tp_arg;
1258 	long long diff_time;
1259 	const char *years = "years ago", *months = "months ago";
1260 	const char *weeks = "weeks ago", *days = "days ago";
1261 	const char *hours = "hours ago",  *minutes = "minutes ago";
1262 	const char *seconds = "seconds ago", *now = "right now";
1263 
1264 	diff_time = time(NULL) - committer_time;
1265 	if (diff_time > 60 * 60 * 24 * 365 * 2) {
1266 		if (tp_writef(c->tp, "%lld %s",
1267 		    (diff_time / 60 / 60 / 24 / 365), years) == -1)
1268 			return -1;
1269 	} else if (diff_time > 60 * 60 * 24 * (365 / 12) * 2) {
1270 		if (tp_writef(c->tp, "%lld %s",
1271 		    (diff_time / 60 / 60 / 24 / (365 / 12)),
1272 		    months) == -1)
1273 			return -1;
1274 	} else if (diff_time > 60 * 60 * 24 * 7 * 2) {
1275 		if (tp_writef(c->tp, "%lld %s",
1276 		    (diff_time / 60 / 60 / 24 / 7), weeks) == -1)
1277 			return -1;
1278 	} else if (diff_time > 60 * 60 * 24 * 2) {
1279 		if (tp_writef(c->tp, "%lld %s",
1280 		    (diff_time / 60 / 60 / 24), days) == -1)
1281 			return -1;
1282 	} else if (diff_time > 60 * 60 * 2) {
1283 		if (tp_writef(c->tp, "%lld %s",
1284 		    (diff_time / 60 / 60), hours) == -1)
1285 			return -1;
1286 	} else if (diff_time > 60 * 2) {
1287 		if (tp_writef(c->tp, "%lld %s", (diff_time / 60),
1288 		    minutes) == -1)
1289 			return -1;
1290 	} else if (diff_time > 2) {
1291 		if (tp_writef(c->tp, "%lld %s", diff_time,
1292 		    seconds) == -1)
1293 			return -1;
1294 	} else {
1295 		if (tp_writes(tp, now) == -1)
1296 			return -1;
1297 	}
1298 	return 0;
1299 }