2 * uhttpd - Tiny single-threaded httpd
4 * Copyright (C) 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
5 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
21 #define _XOPEN_SOURCE 700
23 #include <sys/types.h>
28 #include <libubox/blobmsg.h>
31 #include "mimetypes.h"
33 static LIST_HEAD(index_files);
34 static LIST_HEAD(dispatch_handlers);
37 struct list_head list;
43 HDR_IF_MODIFIED_SINCE,
44 HDR_IF_UNMODIFIED_SINCE,
51 void uh_index_add(const char *filename)
53 struct index_file *idx;
55 idx = calloc(1, sizeof(*idx));
57 list_add_tail(&idx->list, &index_files);
60 static char * canonpath(const char *path, char *path_resolved)
62 const char *path_cpy = path;
63 char *path_res = path_resolved;
66 return realpath(path, path_resolved);
69 while ((*path_cpy != '\0') && (path_cpy < (path + PATH_MAX - 2))) {
73 /* skip repeating / */
74 if (path_cpy[1] == '/') {
80 if (path_cpy[1] == '.') {
82 if ((path_cpy[2] == '/') || (path_cpy[2] == '\0')) {
88 if ((path_cpy[2] == '.') &&
89 ((path_cpy[3] == '/') || (path_cpy[3] == '\0'))) {
90 while ((path_res > path_resolved) && (*--path_res != '/'));
98 *path_res++ = *path_cpy++;
101 /* remove trailing slash if not root / */
102 if ((path_res > (path_resolved+1)) && (path_res[-1] == '/'))
104 else if (path_res == path_resolved)
109 return path_resolved;
112 /* Returns NULL on error.
113 ** NB: improperly encoded URL should give client 400 [Bad Syntax]; returning
114 ** NULL here causes 404 [Not Found], but that's not too unreasonable. */
115 static struct path_info *
116 uh_path_lookup(struct client *cl, const char *url)
118 static char path_phys[PATH_MAX];
119 static char path_info[PATH_MAX];
120 static struct path_info p;
122 const char *docroot = conf.docroot;
123 int docroot_len = strlen(docroot);
124 char *pathptr = NULL;
130 struct index_file *idx;
132 /* back out early if url is undefined */
136 memset(&p, 0, sizeof(p));
140 strcpy(uh_buf, docroot);
142 /* separate query string from url */
143 if ((pathptr = strchr(url, '?')) != NULL) {
144 p.query = pathptr[1] ? pathptr + 1 : NULL;
146 /* urldecode component w/o query */
148 if (uh_urldecode(&uh_buf[docroot_len],
149 sizeof(uh_buf) - docroot_len - 1,
150 url, pathptr - url ) < 0)
155 /* no query string, decode all of url */
156 else if (uh_urldecode(&uh_buf[docroot_len],
157 sizeof(uh_buf) - docroot_len - 1,
158 url, strlen(url) ) < 0)
161 /* create canon path */
162 len = strlen(uh_buf);
163 slash = len && uh_buf[len - 1] == '/';
164 len = min(len, sizeof(path_phys) - 1);
166 for (i = len; i >= 0; i--) {
170 if (ch != 0 && ch != '/')
174 exists = !!canonpath(uh_buf, path_phys);
177 snprintf(path_info, sizeof(path_info), "%s", uh_buf + i);
181 /* check whether found path is within docroot */
182 if (strncmp(path_phys, docroot, docroot_len) != 0 ||
183 (path_phys[docroot_len] != 0 &&
184 path_phys[docroot_len] != '/'))
187 /* test current path */
188 if (stat(path_phys, &p.stat))
191 /* is a regular file */
192 if (p.stat.st_mode & S_IFREG) {
195 p.name = &path_phys[docroot_len];
196 p.info = path_info[0] ? path_info : NULL;
200 if (!(p.stat.st_mode & S_IFDIR))
206 pathptr = path_phys + strlen(path_phys);
208 /* ensure trailing slash */
209 if (pathptr[-1] != '/') {
215 /* if requested url resolves to a directory and a trailing slash
216 is missing in the request url, redirect the client to the same
217 url with trailing slash appended */
219 uh_http_header(cl, 302, "Found");
220 ustream_printf(cl->us, "Location: %s%s%s\r\n\r\n",
221 &path_phys[docroot_len],
223 p.query ? p.query : "");
229 /* try to locate index file */
230 len = path_phys + sizeof(path_phys) - pathptr - 1;
231 list_for_each_entry(idx, &index_files, list) {
232 if (strlen(idx->name) > len)
235 strcpy(pathptr, idx->name);
236 if (!stat(path_phys, &s) && (s.st_mode & S_IFREG)) {
237 memcpy(&p.stat, &s, sizeof(p.stat));
246 p.name = &path_phys[docroot_len];
248 return p.phys ? &p : NULL;
251 static const char * uh_file_mime_lookup(const char *path)
253 struct mimetype *m = &uh_mime_types[0];
257 e = &path[strlen(path)-1];
260 if ((*e == '.' || *e == '/') && !strcasecmp(&e[1], m->extn))
269 return "application/octet-stream";
272 static const char * uh_file_mktag(struct stat *s, char *buf)
274 snprintf(buf, sizeof(buf), "\"%x-%x-%x\"",
275 (unsigned int) s->st_ino,
276 (unsigned int) s->st_size,
277 (unsigned int) s->st_mtime);
282 static time_t uh_file_date2unix(const char *date)
286 memset(&t, 0, sizeof(t));
288 if (strptime(date, "%a, %d %b %Y %H:%M:%S %Z", &t) != NULL)
294 static char * uh_file_unix2date(time_t ts, char *buf, int len)
296 struct tm *t = gmtime(&ts);
298 strftime(buf, len, "%a, %d %b %Y %H:%M:%S GMT", t);
303 static char *uh_file_header(struct client *cl, int idx)
305 if (!cl->dispatch.file.hdr[idx])
308 return (char *) blobmsg_data(cl->dispatch.file.hdr[idx]);
311 static void uh_file_response_ok_hdrs(struct client *cl, struct stat *s)
316 ustream_printf(cl->us, "ETag: %s\r\n", uh_file_mktag(s, buf));
317 ustream_printf(cl->us, "Last-Modified: %s\r\n",
318 uh_file_unix2date(s->st_mtime, buf, sizeof(buf)));
320 ustream_printf(cl->us, "Date: %s\r\n",
321 uh_file_unix2date(time(NULL), buf, sizeof(buf)));
324 static void uh_file_response_200(struct client *cl, struct stat *s)
326 uh_http_header(cl, 200, "OK");
327 return uh_file_response_ok_hdrs(cl, s);
330 static void uh_file_response_304(struct client *cl, struct stat *s)
332 uh_http_header(cl, 304, "Not Modified");
334 return uh_file_response_ok_hdrs(cl, s);
337 static void uh_file_response_412(struct client *cl)
339 uh_http_header(cl, 412, "Precondition Failed");
342 static bool uh_file_if_match(struct client *cl, struct stat *s)
345 const char *tag = uh_file_mktag(s, buf);
346 char *hdr = uh_file_header(cl, HDR_IF_MATCH);
354 for (i = 0; i < strlen(hdr); i++)
356 if ((hdr[i] == ' ') || (hdr[i] == ',')) {
359 } else if (!strcmp(p, "*") || !strcmp(p, tag)) {
364 uh_file_response_412(cl);
368 static int uh_file_if_modified_since(struct client *cl, struct stat *s)
370 char *hdr = uh_file_header(cl, HDR_IF_MODIFIED_SINCE);
375 if (uh_file_date2unix(hdr) >= s->st_mtime) {
376 uh_file_response_304(cl, s);
383 static int uh_file_if_none_match(struct client *cl, struct stat *s)
386 const char *tag = uh_file_mktag(s, buf);
387 char *hdr = uh_file_header(cl, HDR_IF_NONE_MATCH);
395 for (i = 0; i < strlen(hdr); i++) {
396 if ((hdr[i] == ' ') || (hdr[i] == ',')) {
399 } else if (!strcmp(p, "*") || !strcmp(p, tag)) {
400 if ((cl->request.method == UH_HTTP_MSG_GET) ||
401 (cl->request.method == UH_HTTP_MSG_HEAD))
402 uh_file_response_304(cl, s);
404 uh_file_response_412(cl);
413 static int uh_file_if_range(struct client *cl, struct stat *s)
415 char *hdr = uh_file_header(cl, HDR_IF_RANGE);
418 uh_file_response_412(cl);
425 static int uh_file_if_unmodified_since(struct client *cl, struct stat *s)
427 char *hdr = uh_file_header(cl, HDR_IF_UNMODIFIED_SINCE);
429 if (hdr && uh_file_date2unix(hdr) <= s->st_mtime) {
430 uh_file_response_412(cl);
438 static int uh_file_scandir_filter_dir(const struct dirent *e)
440 return strcmp(e->d_name, ".") ? 1 : 0;
443 static void uh_file_dirlist(struct client *cl, struct path_info *pi)
447 char *filename = uh_buf;
449 struct dirent **files = NULL;
453 uh_file_response_200(cl, NULL);
454 ustream_printf(cl->us, "Content-Type: text/html\r\n\r\n");
457 "<html><head><title>Index of %s</title></head>"
458 "<body><h1>Index of %s</h1><hr /><ol>",
461 if ((count = scandir(pi->phys, &files, uh_file_scandir_filter_dir,
466 strcpy(filename, pi->phys);
467 len = strlen(filename);
468 pathptr = filename + len;
469 len = PATH_MAX - len;
472 for (i = 0; i < count; i++) {
473 snprintf(pathptr, len, "%s", files[i]->d_name);
475 if (!stat(filename, &s) &&
476 (s.st_mode & S_IFDIR) && (s.st_mode & S_IXOTH))
478 "<li><strong><a href='%s%s/'>%s</a>/"
479 "</strong><br /><small>modified: %s"
480 "<br />directory - %.02f kbyte<br />"
481 "<br /></small></li>",
482 pi->name, files[i]->d_name,
484 uh_file_unix2date(s.st_mtime, buf, sizeof(buf)),
491 for (i = 0; i < count; i++) {
492 snprintf(pathptr, len, "%s", files[i]->d_name);
494 if (!stat(filename, &s) &&
495 !(s.st_mode & S_IFDIR) && (s.st_mode & S_IROTH))
497 "<li><strong><a href='%s%s'>%s</a>"
498 "</strong><br /><small>modified: %s"
499 "<br />%s - %.02f kbyte<br />"
500 "<br /></small></li>",
501 pi->name, files[i]->d_name,
503 uh_file_unix2date(s.st_mtime, buf, sizeof(buf)),
504 uh_file_mime_lookup(filename),
511 uh_chunk_printf(cl, "</ol><hr /></body></html>");
516 for (i = 0; i < count; i++)
523 static void file_write_cb(struct client *cl)
525 int fd = cl->dispatch.file.fd;
528 while (cl->us->w.data_bytes < 256) {
529 r = read(fd, uh_buf, sizeof(uh_buf));
540 uh_chunk_write(cl, uh_buf, r);
544 static void uh_file_free(struct client *cl)
546 close(cl->dispatch.file.fd);
549 static void uh_file_data(struct client *cl, struct path_info *pi, int fd)
551 /* test preconditions */
552 if (!uh_file_if_modified_since(cl, &pi->stat) ||
553 !uh_file_if_match(cl, &pi->stat) ||
554 !uh_file_if_range(cl, &pi->stat) ||
555 !uh_file_if_unmodified_since(cl, &pi->stat) ||
556 !uh_file_if_none_match(cl, &pi->stat)) {
563 uh_file_response_200(cl, &pi->stat);
565 ustream_printf(cl->us, "Content-Type: %s\r\n",
566 uh_file_mime_lookup(pi->name));
568 ustream_printf(cl->us, "Content-Length: %i\r\n\r\n",
573 if (cl->request.method == UH_HTTP_MSG_HEAD) {
579 cl->dispatch.file.fd = fd;
580 cl->dispatch.write_cb = file_write_cb;
581 cl->dispatch.free = uh_file_free;
582 cl->dispatch.close_fds = uh_file_free;
586 static void uh_file_request(struct client *cl, const char *url,
587 struct path_info *pi, struct blob_attr **tb)
591 if (!(pi->stat.st_mode & S_IROTH))
594 if (pi->stat.st_mode & S_IFREG) {
595 fd = open(pi->phys, O_RDONLY);
599 cl->dispatch.file.hdr = tb;
600 uh_file_data(cl, pi, fd);
601 cl->dispatch.file.hdr = NULL;
605 if ((pi->stat.st_mode & S_IFDIR)) {
606 if (conf.no_dirlists)
609 uh_file_dirlist(cl, pi);
614 uh_client_error(cl, 403, "Forbidden",
615 "You don't have permission to access %s on this server.",
619 void uh_dispatch_add(struct dispatch_handler *d)
621 list_add_tail(&d->list, &dispatch_handlers);
624 static struct dispatch_handler *
625 dispatch_find(const char *url, struct path_info *pi)
627 struct dispatch_handler *d;
629 list_for_each_entry(d, &dispatch_handlers, list) {
634 if (d->check_path(pi, url))
640 if (d->check_url(url))
648 static bool __handle_file_request(struct client *cl, const char *url)
650 static const struct blobmsg_policy hdr_policy[__HDR_MAX] = {
651 [HDR_AUTHORIZATION] = { "authorization", BLOBMSG_TYPE_STRING },
652 [HDR_IF_MODIFIED_SINCE] = { "if-modified-since", BLOBMSG_TYPE_STRING },
653 [HDR_IF_UNMODIFIED_SINCE] = { "if-unmodified-since", BLOBMSG_TYPE_STRING },
654 [HDR_IF_MATCH] = { "if-match", BLOBMSG_TYPE_STRING },
655 [HDR_IF_NONE_MATCH] = { "if-none-match", BLOBMSG_TYPE_STRING },
656 [HDR_IF_RANGE] = { "if-range", BLOBMSG_TYPE_STRING },
658 struct dispatch_handler *d;
659 struct blob_attr *tb[__HDR_MAX];
660 struct path_info *pi;
662 pi = uh_path_lookup(cl, url);
669 blobmsg_parse(hdr_policy, __HDR_MAX, tb, blob_data(cl->hdr.head), blob_len(cl->hdr.head));
670 if (tb[HDR_AUTHORIZATION])
671 pi->auth = blobmsg_data(tb[HDR_AUTHORIZATION]);
673 if (!uh_auth_check(cl, pi))
676 d = dispatch_find(url, pi);
678 d->handle_request(cl, url, pi);
680 uh_file_request(cl, url, pi, tb);
685 void uh_handle_request(struct client *cl)
687 struct dispatch_handler *d;
688 const char *url = blobmsg_data(blob_data(cl->hdr.head));;
690 d = dispatch_find(url, NULL);
692 d->handle_request(cl, url, NULL);
696 if (__handle_file_request(cl, url) ||
697 __handle_file_request(cl, conf.error_handler))
700 uh_client_error(cl, 404, "Not Found", "The requested URL %s was not found on this server.", url);