X-Git-Url: https://git.netwichtig.de/gitweb/?a=blobdiff_plain;f=src%2Fmodules%2Fm_httpd.cpp;h=eefb3ed93c09f10f74950efa9e6d97ecaddecbc3;hb=b618b194f3166a55ca7e7889c7346b65c174d397;hp=ef3d8952053e11529bbda4761adf0fee21f85b81;hpb=eecdd0da4b144d070d253fcad035077b38e438ca;p=user%2Fhenk%2Fcode%2Finspircd.git

diff --git a/src/modules/m_httpd.cpp b/src/modules/m_httpd.cpp
index ef3d89520..eefb3ed93 100644
--- a/src/modules/m_httpd.cpp
+++ b/src/modules/m_httpd.cpp
@@ -1,188 +1,489 @@
-/*       +------------------------------------+
- *       | Inspire Internet Relay Chat Daemon |
- *       +------------------------------------+
+/*
+ * InspIRCd -- Internet Relay Chat Daemon
  *
- *  InspIRCd is copyright (C) 2002-2006 ChatSpike-Dev.
- *		       E-mail:
- *		<brain@chatspike.net>
- *	   	  <Craig@chatspike.net>
- *     
- * Written by Craig Edwards, Craig McLure, and others.
- * This program is free but copyrighted software; see
- *	    the file COPYING for details.
+ *   Copyright (C) 2019 linuxdaemon <linuxdaemon.irc@gmail.com>
+ *   Copyright (C) 2018 edef <edef@edef.eu>
+ *   Copyright (C) 2013-2014, 2017-2020 Sadie Powell <sadie@witchery.services>
+ *   Copyright (C) 2012-2016 Attila Molnar <attilamolnar@hush.com>
+ *   Copyright (C) 2012 Robby <robby@chatbelgie.be>
+ *   Copyright (C) 2009 Uli Schlachter <psychon@inspircd.org>
+ *   Copyright (C) 2009 Daniel De Graaf <danieldg@inspircd.org>
+ *   Copyright (C) 2008 Robin Burchell <robin+git@viroteck.net>
+ *   Copyright (C) 2007 John Brooks <special@inspircd.org>
+ *   Copyright (C) 2007 Dennis Friis <peavey@inspircd.org>
+ *   Copyright (C) 2006, 2008, 2010 Craig Edwards <brain@inspircd.org>
  *
- * ---------------------------------------------------
+ * This file is part of InspIRCd.  InspIRCd is free software: you can
+ * redistribute it and/or modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+ * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  */
 
-using namespace std;
+/// $CompilerFlags: -Ivendor_directory("http_parser")
 
-#include <stdio.h>
-#include "users.h"
-#include "channels.h"
-#include "modules.h"
-#include "inspsocket.h"
-#include "helperfuncs.h"
 
-/* $ModDesc: Provides HTTP serving facilities to modules */
+#include "inspircd.h"
+#include "iohook.h"
+#include "modules/httpd.h"
 
-static Server *Srv;
-extern time_t TIME;
+#ifdef __GNUC__
+# pragma GCC diagnostic push
+#endif
 
-enum HttpState
-{
-	HTTP_LISTEN = 0,
-	HTTP_SERVE_WAIT_REQUEST = 1,
-	HTTP_SERVE_SEND_DATA = 2
-};
+// Fix warnings about the use of commas at end of enumerator lists and long long
+// on C++03.
+#if defined __clang__
+# pragma clang diagnostic ignored "-Wc++11-extensions"
+# pragma clang diagnostic ignored "-Wc++11-long-long"
+#elif defined __GNUC__
+# pragma GCC diagnostic ignored "-Wlong-long"
+# if (__GNUC__ > 4) || ((__GNUC__ == 4) && (__GNUC_MINOR__ >= 8))
+#  pragma GCC diagnostic ignored "-Wpedantic"
+# else
+#  pragma GCC diagnostic ignored "-pedantic"
+# endif
+#endif
+
+// Fix warnings about shadowing in http_parser.
+#ifdef __GNUC__
+# pragma GCC diagnostic ignored "-Wshadow"
+#endif
+
+#include <http_parser.c>
+
+#ifdef __GNUC__
+# pragma GCC diagnostic pop
+#endif
+
+class ModuleHttpServer;
 
-class HttpSocket : public InspSocket
+static ModuleHttpServer* HttpModule;
+static insp::intrusive_list<HttpServerSocket> sockets;
+static Events::ModuleEventProvider* aclevprov;
+static Events::ModuleEventProvider* reqevprov;
+static http_parser_settings parser_settings;
+
+/** A socket used for HTTP transport
+ */
+class HttpServerSocket : public BufferedSocket, public Timer, public insp::intrusive_list_node<HttpServerSocket>
 {
-	FileReader* index;
-	HttpState InternalState;
-	std::stringstream headers;
+ private:
+	friend class ModuleHttpServer;
 
- public:
+	http_parser parser;
+	http_parser_url url;
+	std::string ip;
+	std::string uri;
+	HTTPHeaders headers;
+	std::string body;
+	size_t total_buffers;
+	int status_code;
+
+	/** True if this object is in the cull list
+	 */
+	bool waitingcull;
+	bool messagecomplete;
+
+	bool Tick(time_t currtime) CXX11_OVERRIDE
+	{
+		if (!messagecomplete)
+		{
+			ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "HTTP socket %d timed out", GetFd());
+			Close();
+			return false;
+		}
+
+		return true;
+	}
 
-	HttpSocket(std::string host, int port, bool listening, unsigned long maxtime, FileReader* index_page) : InspSocket(host, port, listening, maxtime), index(index_page)
+	template<int (HttpServerSocket::*f)()>
+	static int Callback(http_parser* p)
 	{
-		log(DEBUG,"HttpSocket constructor");
-		InternalState = HTTP_LISTEN;
+		HttpServerSocket* sock = static_cast<HttpServerSocket*>(p->data);
+		return (sock->*f)();
 	}
 
-	HttpSocket(int newfd, char* ip, FileReader* ind) : InspSocket(newfd, ip), index(ind)
+	template<int (HttpServerSocket::*f)(const char*, size_t)>
+	static int DataCallback(http_parser* p, const char* buf, size_t len)
 	{
-		InternalState = HTTP_SERVE_WAIT_REQUEST;
+		HttpServerSocket* sock = static_cast<HttpServerSocket*>(p->data);
+		return (sock->*f)(buf, len);
 	}
 
-	virtual int OnIncomingConnection(int newsock, char* ip)
+	static void ConfigureParser()
 	{
-		if (InternalState == HTTP_LISTEN)
-		{
-			HttpSocket* s = new HttpSocket(newsock, ip, index);
-			Srv->AddSocket(s);
-		}
-		return true;
+		http_parser_settings_init(&parser_settings);
+		parser_settings.on_message_begin = Callback<&HttpServerSocket::OnMessageBegin>;
+		parser_settings.on_url = DataCallback<&HttpServerSocket::OnUrl>;
+		parser_settings.on_header_field = DataCallback<&HttpServerSocket::OnHeaderField>;
+		parser_settings.on_body = DataCallback<&HttpServerSocket::OnBody>;
+		parser_settings.on_message_complete = Callback<&HttpServerSocket::OnMessageComplete>;
 	}
 
-	virtual void OnClose()
+	int OnMessageBegin()
 	{
+		uri.clear();
+		header_state = HEADER_NONE;
+		body.clear();
+		total_buffers = 0;
+		return 0;
 	}
 
-	void SendHeaders()
+	bool AcceptData(size_t len)
 	{
-		struct tm *timeinfo = localtime(&TIME);
-		this->Write("HTTP/1.1 200 OK\r\nDate: ");
-		this->Write(asctime(timeinfo));	
-		this->Write("Server: InspIRCd/m_http.so/1.1\r\nContent-Length: "+ConvToStr(index->ContentSize())+
-				"\r\nConnection: close\r\nContent-Type: text/html\r\n\r\n");
+		total_buffers += len;
+		return total_buffers < 8192;
 	}
 
-	virtual bool OnDataReady()
+	int OnUrl(const char* buf, size_t len)
 	{
-		char* data = this->Read();
-		/* Check that the data read is a valid pointer and it has some content */
-		if (data && *data)
+		if (!AcceptData(len))
 		{
-			headers << data;
+			status_code = HTTP_STATUS_URI_TOO_LONG;
+			return -1;
+		}
+		uri.append(buf, len);
+		return 0;
+	}
 
-			if (headers.str().find("\r\n\r\n") != std::string::npos)
-			{
-				/* Headers are complete */
-				InternalState = HTTP_SERVE_SEND_DATA;
-				SendHeaders();
+	enum { HEADER_NONE, HEADER_FIELD, HEADER_VALUE } header_state;
+	std::string header_field;
+	std::string header_value;
 
-				this->Write(index->Contents());
+	void OnHeaderComplete()
+	{
+		headers.SetHeader(header_field, header_value);
+		header_field.clear();
+		header_value.clear();
+	}
 
-				return false;
-			}
-			return true;
+	int OnHeaderField(const char* buf, size_t len)
+	{
+		if (header_state == HEADER_VALUE)
+			OnHeaderComplete();
+		header_state = HEADER_FIELD;
+		if (!AcceptData(len))
+		{
+			status_code = HTTP_STATUS_REQUEST_HEADER_FIELDS_TOO_LARGE;
+			return -1;
 		}
-		else
+		header_field.append(buf, len);
+		return 0;
+	}
+
+	int OnHeaderValue(const char* buf, size_t len)
+	{
+		header_state = HEADER_VALUE;
+		if (!AcceptData(len))
 		{
-			/* Bastard client closed the socket on us!
-			 * Oh wait, theyre SUPPOSED to do that!
-			 */
-			return false;
+			status_code = HTTP_STATUS_REQUEST_HEADER_FIELDS_TOO_LARGE;
+			return -1;
 		}
+		header_value.append(buf, len);
+		return 0;
 	}
-};
 
-class ModuleHttp : public Module
-{
-	int port;
-	std::string host;
-	std::string bindip;
-	std::string indexfile;
+	int OnHeadersComplete()
+	{
+		if (header_state != HEADER_NONE)
+			OnHeaderComplete();
+		return 0;
+	}
 
-	FileReader index;
+	int OnBody(const char* buf, size_t len)
+	{
+		if (!AcceptData(len))
+		{
+			status_code = HTTP_STATUS_PAYLOAD_TOO_LARGE;
+			return -1;
+		}
+		body.append(buf, len);
+		return 0;
+	}
 
-	HttpSocket* http;
+	int OnMessageComplete()
+	{
+		messagecomplete = true;
+		ServeData();
+		return 0;
+	}
 
  public:
+	HttpServerSocket(int newfd, const std::string& IP, ListenSocket* via, irc::sockets::sockaddrs* client, irc::sockets::sockaddrs* server, unsigned int timeoutsec)
+		: BufferedSocket(newfd)
+		, Timer(timeoutsec)
+		, ip(IP)
+		, status_code(0)
+		, waitingcull(false)
+		, messagecomplete(false)
+	{
+		if ((!via->iohookprovs.empty()) && (via->iohookprovs.back()))
+		{
+			via->iohookprovs.back()->OnAccept(this, client, server);
+			// IOHook may have errored
+			if (!getError().empty())
+			{
+				ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "HTTP socket %d encountered a hook error: %s",
+					GetFd(), getError().c_str());
+				Close();
+				return;
+			}
+		}
+
+		parser.data = this;
+		http_parser_init(&parser, HTTP_REQUEST);
+		ServerInstance->Timers.AddTimer(this);
+	}
+
+	~HttpServerSocket()
+	{
+		sockets.erase(this);
+	}
 
-	void ReadConfig()
+	void Close() CXX11_OVERRIDE
 	{
-		ConfigReader c;
-		this->host = c.ReadValue("http", "host", 0);
-		this->bindip = c.ReadValue("http", "ip", 0);
-		this->port = c.ReadInteger("http", "port", 0, true);
-		this->indexfile = c.ReadValue("http", "index", 0);
+		if (waitingcull || !HasFd())
+			return;
+
+		waitingcull = true;
+		BufferedSocket::Close();
+		ServerInstance->GlobalCulls.AddItem(this);
+	}
+
+	void OnError(BufferedSocketError err) CXX11_OVERRIDE
+	{
+		ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "HTTP socket %d encountered an error: %d - %s",
+			GetFd(), err, getError().c_str());
+		Close();
+	}
+
+	void SendHTTPError(unsigned int response, const char* errstr = NULL)
+	{
+		if (!errstr)
+			errstr = http_status_str((http_status)response);
+
+		ServerInstance->Logs->Log(MODNAME, LOG_DEBUG, "Sending HTTP error %u: %s", response, errstr);
+		static HTTPHeaders empty;
+		std::string data = InspIRCd::Format(
+			"<html><head></head><body style='font-family: sans-serif; text-align: center'>"
+			"<h1 style='font-size: 48pt'>Error %u</h1><h2 style='font-size: 24pt'>%s</h2><hr>"
+			"<small>Powered by <a href='https://www.inspircd.org'>InspIRCd</a></small></body></html>",
+			response, errstr);
 
-		index.LoadFile(this->indexfile);
+		Page(data, response, &empty);
 	}
 
-	void CreateListener()
+	void SendHeaders(unsigned long size, unsigned int response, HTTPHeaders &rheaders)
 	{
-		http = new HttpSocket(this->bindip, this->port, true, 0, &index);
-		if ((http) && (http->GetState() == I_LISTENING))
+		WriteData(InspIRCd::Format("HTTP/%u.%u %u %s\r\n", parser.http_major ? parser.http_major : 1, parser.http_major ? parser.http_minor : 1, response, http_status_str((http_status)response)));
+
+		rheaders.CreateHeader("Date", InspIRCd::TimeString(ServerInstance->Time(), "%a, %d %b %Y %H:%M:%S GMT", true));
+		rheaders.CreateHeader("Server", INSPIRCD_BRANCH);
+		rheaders.SetHeader("Content-Length", ConvToStr(size));
+
+		if (size)
+			rheaders.CreateHeader("Content-Type", "text/html");
+		else
+			rheaders.RemoveHeader("Content-Type");
+
+		/* Supporting Connection: keep-alive causes a whole world of hurt synchronizing timeouts,
+		 * so remove it, its not essential for what we need.
+		 */
+		rheaders.SetHeader("Connection", "Close");
+
+		WriteData(rheaders.GetFormattedHeaders());
+		WriteData("\r\n");
+	}
+
+	void OnDataReady() CXX11_OVERRIDE
+	{
+		if (parser.upgrade || HTTP_PARSER_ERRNO(&parser))
+			return;
+		http_parser_execute(&parser, &parser_settings, recvq.data(), recvq.size());
+		if (parser.upgrade)
+			SendHTTPError(status_code ? status_code : 400);
+		else if (HTTP_PARSER_ERRNO(&parser))
+			SendHTTPError(status_code ? status_code : 400, http_errno_description((http_errno)parser.http_errno));
+	}
+
+	void ServeData()
+	{
+		ModResult MOD_RESULT;
+		std::string method = http_method_str(static_cast<http_method>(parser.method));
+		HTTPRequestURI parsed;
+		ParseURI(uri, parsed);
+		HTTPRequest acl(method, parsed, &headers, this, ip, body);
+		FIRST_MOD_RESULT_CUSTOM(*aclevprov, HTTPACLEventListener, OnHTTPACLCheck, MOD_RESULT, (acl));
+		if (MOD_RESULT != MOD_RES_DENY)
 		{
-			Srv->AddSocket(http);
+			HTTPRequest request(method, parsed, &headers, this, ip, body);
+			FIRST_MOD_RESULT_CUSTOM(*reqevprov, HTTPRequestEventListener, OnHTTPRequest, MOD_RESULT, (request));
+			if (MOD_RESULT == MOD_RES_PASSTHRU)
+			{
+				SendHTTPError(404);
+			}
 		}
 	}
 
-	ModuleHttp(Server* Me) : Module::Module(Me)
+	void Page(const std::string& s, unsigned int response, HTTPHeaders* hheaders)
 	{
-		Srv = Me;
-		ReadConfig();
-		CreateListener();
+		SendHeaders(s.length(), response, *hheaders);
+		WriteData(s);
+		BufferedSocket::Close(true);
 	}
 
-	void Implements(char* List)
+	void Page(std::stringstream* n, unsigned int response, HTTPHeaders* hheaders)
 	{
-		List[I_OnEvent] = List[I_OnRequest] = 1;
+		Page(n->str(), response, hheaders);
 	}
 
-	virtual ~ModuleHttp()
+	bool ParseURI(const std::string& uristr, HTTPRequestURI& out)
 	{
-		Srv->DelSocket(http);
+		http_parser_url_init(&url);
+		if (http_parser_parse_url(uristr.c_str(), uristr.size(), 0, &url) != 0)
+			return false;
+
+		if (url.field_set & (1 << UF_PATH))
+		{
+			// Normalise the path.
+			std::vector<std::string> pathsegments;
+			irc::sepstream pathstream(uri.substr(url.field_data[UF_PATH].off, url.field_data[UF_PATH].len), '/');
+			for (std::string pathsegment; pathstream.GetToken(pathsegment); )
+			{
+				if (pathsegment == ".")
+				{
+					 // Stay at the current level.
+					continue;
+				}
+
+				if (pathsegment == "..")
+				{
+					// Traverse up to the previous level.
+					if (!pathsegments.empty())
+						pathsegments.pop_back();
+					continue;
+				}
+
+				pathsegments.push_back(pathsegment);
+			}
+
+			out.path.reserve(url.field_data[UF_PATH].len);
+			out.path.append("/").append(stdalgo::string::join(pathsegments, '/'));
+		}
+
+		if (url.field_set & (1 << UF_FRAGMENT))
+			out.fragment = uri.substr(url.field_data[UF_FRAGMENT].off, url.field_data[UF_FRAGMENT].len);
+
+		std::string param_str;
+		if (url.field_set & (1 << UF_QUERY))
+			param_str = uri.substr(url.field_data[UF_QUERY].off, url.field_data[UF_QUERY].len);
+
+		irc::sepstream param_stream(param_str, '&');
+		std::string token;
+		std::string::size_type eq_pos;
+		while (param_stream.GetToken(token))
+		{
+			eq_pos = token.find('=');
+			if (eq_pos == std::string::npos)
+			{
+				out.query_params.insert(std::make_pair(token, ""));
+			}
+			else
+			{
+				out.query_params.insert(std::make_pair(token.substr(0, eq_pos), token.substr(eq_pos + 1)));
+			}
+		}
+		return true;
 	}
+};
 
-	virtual Version GetVersion()
+class HTTPdAPIImpl : public HTTPdAPIBase
+{
+ public:
+	HTTPdAPIImpl(Module* parent)
+		: HTTPdAPIBase(parent)
 	{
-		return Version(1,0,0,0,VF_STATIC|VF_VENDOR);
 	}
-};
 
+	void SendResponse(HTTPDocumentResponse& resp) CXX11_OVERRIDE
+	{
+		resp.src.sock->Page(resp.document, resp.responsecode, &resp.headers);
+	}
+};
 
-class ModuleHttpFactory : public ModuleFactory
+class ModuleHttpServer : public Module
 {
+	HTTPdAPIImpl APIImpl;
+	unsigned int timeoutsec;
+	Events::ModuleEventProvider acleventprov;
+	Events::ModuleEventProvider reqeventprov;
+
  public:
-	ModuleHttpFactory()
+	ModuleHttpServer()
+		: APIImpl(this)
+		, acleventprov(this, "event/http-acl")
+		, reqeventprov(this, "event/http-request")
 	{
+		aclevprov = &acleventprov;
+		reqevprov = &reqeventprov;
+		HttpServerSocket::ConfigureParser();
 	}
-	
-	~ModuleHttpFactory()
+
+	void init() CXX11_OVERRIDE
 	{
+		HttpModule = this;
 	}
-	
-	virtual Module * CreateModule(Server* Me)
+
+	void ReadConfig(ConfigStatus& status) CXX11_OVERRIDE
 	{
-		return new ModuleHttp(Me);
+		ConfigTag* tag = ServerInstance->Config->ConfValue("httpd");
+		timeoutsec = tag->getDuration("timeout", 10, 1);
 	}
-};
 
+	ModResult OnAcceptConnection(int nfd, ListenSocket* from, irc::sockets::sockaddrs* client, irc::sockets::sockaddrs* server) CXX11_OVERRIDE
+	{
+		if (!stdalgo::string::equalsci(from->bind_tag->getString("type"), "httpd"))
+			return MOD_RES_PASSTHRU;
+
+		sockets.push_front(new HttpServerSocket(nfd, client->addr(), from, client, server, timeoutsec));
+		return MOD_RES_ALLOW;
+	}
 
-extern "C" void * init_module( void )
-{
-	return new ModuleHttpFactory;
-}
+	void OnUnloadModule(Module* mod) CXX11_OVERRIDE
+	{
+		for (insp::intrusive_list<HttpServerSocket>::const_iterator i = sockets.begin(); i != sockets.end(); )
+		{
+			HttpServerSocket* sock = *i;
+			++i;
+			if (sock->GetModHook(mod))
+			{
+				sock->cull();
+				delete sock;
+			}
+		}
+	}
+
+	CullResult cull() CXX11_OVERRIDE
+	{
+		for (insp::intrusive_list<HttpServerSocket>::const_iterator i = sockets.begin(); i != sockets.end(); ++i)
+		{
+			HttpServerSocket* sock = *i;
+			sock->Close();
+		}
+		return Module::cull();
+	}
+
+	Version GetVersion() CXX11_OVERRIDE
+	{
+		return Version("Allows the server administrator to serve various useful resources over HTTP.", VF_VENDOR);
+	}
+};
+
+MODULE_INIT(ModuleHttpServer)