#include #include #include void li_request_init(liRequest *req) { req->http_method = LI_HTTP_METHOD_UNSET; req->http_method_str = g_string_sized_new(0); req->http_version = LI_HTTP_VERSION_UNSET; req->uri.raw = g_string_sized_new(0); req->uri.raw_path = g_string_sized_new(0); req->uri.raw_orig_path = g_string_sized_new(0); req->uri.scheme = g_string_sized_new(0); req->uri.authority = g_string_sized_new(0); req->uri.path = g_string_sized_new(0); req->uri.query = g_string_sized_new(0); req->uri.host = g_string_sized_new(0); req->headers = li_http_headers_new(); req->content_length = -1; } void li_request_reset(liRequest *req) { req->http_method = LI_HTTP_METHOD_UNSET; g_string_truncate(req->http_method_str, 0); req->http_version = LI_HTTP_VERSION_UNSET; g_string_truncate(req->uri.raw, 0); g_string_truncate(req->uri.raw_path, 0); g_string_truncate(req->uri.raw_orig_path, 0); g_string_truncate(req->uri.scheme, 0); g_string_truncate(req->uri.authority, 0); g_string_truncate(req->uri.path, 0); g_string_truncate(req->uri.query, 0); g_string_truncate(req->uri.host, 0); li_http_headers_reset(req->headers); req->content_length = -1; } void li_request_clear(liRequest *req) { req->http_method = LI_HTTP_METHOD_UNSET; g_string_free(req->http_method_str, TRUE); req->http_version = LI_HTTP_VERSION_UNSET; g_string_free(req->uri.raw, TRUE); g_string_free(req->uri.raw_path, TRUE); g_string_free(req->uri.raw_orig_path, TRUE); g_string_free(req->uri.scheme, TRUE); g_string_free(req->uri.authority, TRUE); g_string_free(req->uri.path, TRUE); g_string_free(req->uri.query, TRUE); g_string_free(req->uri.host, TRUE); li_http_headers_free(req->headers); req->content_length = -1; } void li_request_copy(liRequest *dest, const liRequest *src) { GList *iter; dest->http_method = src->http_method; li_string_assign_len(dest->http_method_str, GSTR_LEN(src->http_method_str)); dest->http_version = src->http_version; li_string_assign_len(dest->uri.raw, GSTR_LEN(src->uri.raw)); li_string_assign_len(dest->uri.raw_path, GSTR_LEN(src->uri.raw_path)); li_string_assign_len(dest->uri.raw_orig_path, GSTR_LEN(src->uri.raw_orig_path)); li_string_assign_len(dest->uri.scheme, GSTR_LEN(src->uri.scheme)); li_string_assign_len(dest->uri.authority, GSTR_LEN(src->uri.authority)); li_string_assign_len(dest->uri.path, GSTR_LEN(src->uri.path)); li_string_assign_len(dest->uri.query, GSTR_LEN(src->uri.query)); li_string_assign_len(dest->uri.host, GSTR_LEN(src->uri.host)); li_http_headers_reset(dest->headers); for (iter = g_queue_peek_head_link(&src->headers->entries); iter; iter = g_list_next(iter)) { liHttpHeader* header = (liHttpHeader*) iter->data; li_http_header_insert(dest->headers, LI_HEADER_KEY_LEN(header), LI_HEADER_VALUE_LEN(header)); } dest->content_length = src->content_length; } /* closes connection after response */ static void bad_request(liConnection *con, int status) { con->info.keep_alive = FALSE; con->mainvr->response.http_status = status; } static gboolean request_parse_url(liVRequest *vr) { liRequest *req = &vr->request; g_string_truncate(req->uri.query, 0); g_string_truncate(req->uri.path, 0); if (!li_parse_raw_url(&req->uri)) return FALSE; /* "*" only allowed for method OPTIONS */ if (0 == strcmp(req->uri.path->str, "*") && req->http_method != LI_HTTP_METHOD_OPTIONS) return FALSE; li_url_decode(req->uri.path); li_path_simplify(req->uri.path); if (0 == req->uri.raw_orig_path->len) { g_string_append_len(req->uri.raw_orig_path, GSTR_LEN(req->uri.raw_path)); /* save orig raw uri */ } return TRUE; } gboolean li_request_validate_header(liConnection *con) { liRequest *req = &con->mainvr->request; liHttpHeader *hh; GList *l; gboolean transfer_encoding_chunked = FALSE; if (con->info.is_ssl) { g_string_append_len(req->uri.scheme, CONST_STR_LEN("https")); } else { g_string_append_len(req->uri.scheme, CONST_STR_LEN("http")); } switch (req->http_version) { case LI_HTTP_VERSION_1_0: if (!li_http_header_is(req->headers, CONST_STR_LEN("connection"), CONST_STR_LEN("keep-alive"))) con->info.keep_alive = FALSE; break; case LI_HTTP_VERSION_1_1: if (li_http_header_is(req->headers, CONST_STR_LEN("connection"), CONST_STR_LEN("close"))) con->info.keep_alive = FALSE; break; case LI_HTTP_VERSION_UNSET: bad_request(con, 505); /* Version not Supported */ return FALSE; } if (req->uri.raw->len == 0) { bad_request(con, 400); /* bad request */ return FALSE; } /* get hostname */ l = li_http_header_find_first(req->headers, CONST_STR_LEN("host")); if (NULL != l) { if (NULL != li_http_header_find_next(l, CONST_STR_LEN("host"))) { /* more than one "host" header */ bad_request(con, 400); /* bad request */ return FALSE; } hh = (liHttpHeader*) l->data; g_string_append_len(req->uri.authority, LI_HEADER_VALUE_LEN(hh)); /* check header after we parsed the url, as it may override uri.authority */ } /* Need hostname in HTTP/1.1 */ if (req->uri.authority->len == 0 && req->http_version == LI_HTTP_VERSION_1_1) { bad_request(con, 400); /* bad request */ return FALSE; } /* may override hostname */ if (!request_parse_url(con->mainvr)) { bad_request(con, 400); /* bad request */ return FALSE; } if (req->uri.host->len == 0 && req->uri.authority->len != 0) { if (!li_parse_hostname(&req->uri)) { bad_request(con, 400); /* bad request */ return FALSE; } } /* remove trailing dots from hostname */ { guint i = req->uri.host->len; while (i > 0 && req->uri.host->str[i-1] == '.') i--; g_string_truncate(req->uri.host, i); } /* content-length */ hh = li_http_header_lookup(req->headers, CONST_STR_LEN("content-length")); if (hh) { const gchar *val = LI_HEADER_VALUE(hh); gint64 r; char *err; r = g_ascii_strtoll(val, &err, 10); if (*err != '\0') { _VR_DEBUG(con->srv, con->mainvr, "content-length is not a number: %s (Status: 400)", err); bad_request(con, 400); /* bad request */ return FALSE; } /** * negative content-length is not supported * and is a bad request */ if (r < 0) { bad_request(con, 400); /* bad request */ return FALSE; } /** * check if we had a over- or underrun in the string conversion */ if (r == G_MININT64 || r == G_MAXINT64) { if (errno == ERANGE) { bad_request(con, 413); /* Request Entity Too Large */ return FALSE; } } con->mainvr->request.content_length = r; } /* Transfer-Encoding: chunked */ l = li_http_header_find_first(req->headers, CONST_STR_LEN("transfer-encoding")); if (l) { for ( ; l ; l = li_http_header_find_next(l, CONST_STR_LEN("transfer-encoding")) ) { hh = (liHttpHeader*) l->data; if (0 == g_ascii_strcasecmp( LI_HEADER_VALUE(hh), "identity" )) { /* ignore */ continue; } if (0 == g_ascii_strcasecmp( LI_HEADER_VALUE(hh), "chunked" )) { if (transfer_encoding_chunked) { /* The "chunked" transfer-coding MUST NOT be applied more than once to a message-body */ bad_request(con, 400); /* bad request */ return FALSE; } transfer_encoding_chunked = TRUE; con->mainvr->request.content_length = -1; } else { /* we only support chunked transfer-encoding */ bad_request(con, 501); /* Unimplemented */ return FALSE; } } } /* Expect: 100-continue */ l = li_http_header_find_first(req->headers, CONST_STR_LEN("expect")); if (l) { gboolean expect_100_cont = FALSE; for ( ; l ; l = li_http_header_find_next(l, CONST_STR_LEN("expect")) ) { hh = (liHttpHeader*) l->data; if (0 == g_ascii_strcasecmp( LI_HEADER_VALUE(hh), "100-continue" )) { expect_100_cont = TRUE; } else { /* we only support 100-continue */ bad_request(con, 417); /* Expectation Failed */ return FALSE; } } if (expect_100_cont && req->http_version == LI_HTTP_VERSION_1_0) { /* only HTTP/1.1 clients can send us this header */ bad_request(con, 417); /* Expectation Failed */ return FALSE; } con->expect_100_cont = expect_100_cont; } /* TODO: headers: * - If-Modified-Since (different duplicate check) * - If-None-Match (different duplicate check) * - Range (duplicate check) */ switch(con->mainvr->request.http_method) { case LI_HTTP_METHOD_GET: case LI_HTTP_METHOD_HEAD: /* content-length is forbidden for those */ if (con->mainvr->request.content_length > 0) { VR_ERROR(con->mainvr, "%s", "GET/HEAD with content-length -> 400"); bad_request(con, 400); /* bad request */ return FALSE; } con->mainvr->request.content_length = 0; break; case LI_HTTP_METHOD_POST: /* content-length or chunked encoding is required for them */ if (con->mainvr->request.content_length == -1 && !transfer_encoding_chunked) { /* content-length is missing */ if (_CORE_OPTION(con->mainvr, LI_CORE_OPTION_STRICT_POST_CONTENT_LENGTH).boolean) { VR_ERROR(con->mainvr, "%s", "POST-request, but content-length missing -> 411"); bad_request(con, 411); /* Length Required */ return FALSE; } else { con->mainvr->request.content_length = 0; } } break; default: /* they may have a content-length or use chunked encoding */ if (con->mainvr->request.content_length == -1 && !transfer_encoding_chunked) con->mainvr->request.content_length = 0; break; } return TRUE; } void li_physical_init(liPhysical *phys) { phys->path = g_string_sized_new(127); phys->doc_root = g_string_sized_new(63); phys->pathinfo = g_string_sized_new(63); } void li_physical_reset(liPhysical *phys) { g_string_truncate(phys->path, 0); g_string_truncate(phys->doc_root, 0); g_string_truncate(phys->pathinfo, 0); } void li_physical_clear(liPhysical *phys) { g_string_free(phys->path, TRUE); g_string_free(phys->doc_root, TRUE); g_string_free(phys->pathinfo, TRUE); }