src/response.c

   1 #include "first.h"
   2
   3 #include "response.h"
   4 #include "keyvalue.h"
   5 #include "log.h"
   6 #include "stat_cache.h"
   7 #include "chunk.h"
   8
   9 #include "configfile.h"
  10
  11 #include "plugin.h"
  12
  13 #include <sys/types.h>
  14 #include <sys/stat.h>
  15
  16 #include <limits.h>
  17 #include <errno.h>
  18 #include <fcntl.h>
  19 #include <stdlib.h>
  20 #include <string.h>
  21 #include <time.h>
  22 #include <unistd.h>
  23 #include <ctype.h>
  24 #include <assert.h>
  25
  26 #include <stdio.h>
  27
  28 #include "sys-socket.h"
  29
  30 int http_response_write_header(server *srv, connection *con) {
  31         buffer *b;
  32         size_t i;
  33         int have_date = 0;
  34         int have_server = 0;
  35
  36         b = buffer_init();
  37
  38         if (con->request.http_version == HTTP_VERSION_1_1) {
  39                 buffer_copy_string_len(b, CONST_STR_LEN("HTTP/1.1 "));
  40         } else {
  41                 buffer_copy_string_len(b, CONST_STR_LEN("HTTP/1.0 "));
  42         }
  43         buffer_append_int(b, con->http_status);
  44         buffer_append_string_len(b, CONST_STR_LEN(" "));
  45         buffer_append_string(b, get_http_status_name(con->http_status));
  46
  47         /* disable keep-alive if requested */
  48         if (con->request_count > con->conf.max_keep_alive_requests || 0 == con->conf.max_keep_alive_idle) {
  49                 con->keep_alive = 0;
  50         } else {
  51                 con->keep_alive_idle = con->conf.max_keep_alive_idle;
  52         }
  53
  54         if (con->request.http_version != HTTP_VERSION_1_1 || con->keep_alive == 0) {
  55                 if (con->keep_alive) {
  56                         response_header_overwrite(srv, con, CONST_STR_LEN("Connection"), CONST_STR_LEN("keep-alive"));
  57                 } else {
  58                         response_header_overwrite(srv, con, CONST_STR_LEN("Connection"), CONST_STR_LEN("close"));
  59                 }
  60         }
  61
  62         if (con->response.transfer_encoding & HTTP_TRANSFER_ENCODING_CHUNKED) {
  63                 response_header_overwrite(srv, con, CONST_STR_LEN("Transfer-Encoding"), CONST_STR_LEN("chunked"));
  64         }
  65
  66
  67         /* add all headers */
  68         for (i = 0; i < con->response.headers->used; i++) {
  69                 data_string *ds;
  70
  71                 ds = (data_string *)con->response.headers->data[i];
  72
  73                 if (!buffer_is_empty(ds->value) && !buffer_is_empty(ds->key) &&
  74                     0 != strncasecmp(ds->key->ptr, CONST_STR_LEN("X-LIGHTTPD-")) &&
  75                         0 != strncasecmp(ds->key->ptr, CONST_STR_LEN("X-Sendfile"))) {
  76                         if (0 == strcasecmp(ds->key->ptr, "Date")) have_date = 1;
  77                         if (0 == strcasecmp(ds->key->ptr, "Server")) have_server = 1;
  78                         if (0 == strcasecmp(ds->key->ptr, "Content-Encoding") && 304 == con->http_status) continue;
  79
  80                         buffer_append_string_len(b, CONST_STR_LEN("\r\n"));
  81                         buffer_append_string_buffer(b, ds->key);
  82                         buffer_append_string_len(b, CONST_STR_LEN(": "));
  83 #if 0
  84                         /**
  85                          * the value might contain newlines, encode them with at least one white-space
  86                          */
  87                         buffer_append_string_encoded(b, CONST_BUF_LEN(ds->value), ENCODING_HTTP_HEADER);
  88 #else
  89                         buffer_append_string_buffer(b, ds->value);
  90 #endif
  91                 }
  92         }
  93
  94         if (!have_date) {
  95                 /* HTTP/1.1 requires a Date: header */
  96                 buffer_append_string_len(b, CONST_STR_LEN("\r\nDate: "));
  97
  98                 /* cache the generated timestamp */
  99                 if (srv->cur_ts != srv->last_generated_date_ts) {
 100                         buffer_string_prepare_copy(srv->ts_date_str, 255);
 101
 102                         buffer_append_strftime(srv->ts_date_str, "%a, %d %b %Y %H:%M:%S GMT", gmtime(&(srv->cur_ts)));
 103
 104                         srv->last_generated_date_ts = srv->cur_ts;
 105                 }
 106
 107                 buffer_append_string_buffer(b, srv->ts_date_str);
 108         }
 109
 110         if (!have_server) {
 111                 if (!buffer_string_is_empty(con->conf.server_tag)) {
 112                         buffer_append_string_len(b, CONST_STR_LEN("\r\nServer: "));
 113                         buffer_append_string_encoded(b, CONST_BUF_LEN(con->conf.server_tag), ENCODING_HTTP_HEADER);
 114                 }
 115         }
 116
 117         buffer_append_string_len(b, CONST_STR_LEN("\r\n\r\n"));
 118
 119         con->bytes_header = buffer_string_length(b);
 120
 121         if (con->conf.log_response_header) {
 122                 log_error_write(srv, __FILE__, __LINE__, "sSb", "Response-Header:", "\n", b);
 123         }
 124
 125         chunkqueue_prepend_buffer(con->write_queue, b);
 126         buffer_free(b);
 127
 128         return 0;
 129 }
 130
 131 #ifdef USE_OPENSSL
 132 #include <openssl/bn.h>
 133 #include <openssl/err.h>
 134 static void https_add_ssl_client_entries(server *srv, connection *con) {
 135         X509 *xs;
 136         X509_NAME *xn;
 137         int i, nentries;
 138
 139         long vr = SSL_get_verify_result(con->ssl);
 140         if (vr != X509_V_OK) {
 141                 char errstr[256];
 142                 ERR_error_string_n(vr, errstr, sizeof(errstr));
 143                 buffer_copy_string_len(srv->tmp_buf, CONST_STR_LEN("FAILED:"));
 144                 buffer_append_string(srv->tmp_buf, errstr);
 145                 array_set_key_value(con->environment,
 146                                     CONST_STR_LEN("SSL_CLIENT_VERIFY"),
 147                                     CONST_BUF_LEN(srv->tmp_buf));
 148                 return;
 149         } else if (!(xs = SSL_get_peer_certificate(con->ssl))) {
 150                 array_set_key_value(con->environment,
 151                                     CONST_STR_LEN("SSL_CLIENT_VERIFY"),
 152                                     CONST_STR_LEN("NONE"));
 153                 return;
 154         } else {
 155                 array_set_key_value(con->environment,
 156                                     CONST_STR_LEN("SSL_CLIENT_VERIFY"),
 157                                     CONST_STR_LEN("SUCCESS"));
 158         }
 159
 160         buffer_copy_string_len(srv->tmp_buf, CONST_STR_LEN("SSL_CLIENT_S_DN_"));
 161         xn = X509_get_subject_name(xs);
 162         for (i = 0, nentries = X509_NAME_entry_count(xn); i < nentries; ++i) {
 163                 int xobjnid;
 164                 const char * xobjsn;
 165                 X509_NAME_ENTRY *xe;
 166
 167                 if (!(xe = X509_NAME_get_entry(xn, i))) {
 168                         continue;
 169                 }
 170                 xobjnid = OBJ_obj2nid((ASN1_OBJECT*)X509_NAME_ENTRY_get_object(xe));
 171                 xobjsn = OBJ_nid2sn(xobjnid);
 172                 if (xobjsn) {
 173                         buffer_string_set_length(srv->tmp_buf, sizeof("SSL_CLIENT_S_DN_")-1);
 174                         buffer_append_string(srv->tmp_buf, xobjsn);
 175                         array_set_key_value(con->environment,
 176                                             CONST_BUF_LEN(srv->tmp_buf),
 177                                             (const char *)X509_NAME_ENTRY_get_data(xe)->data,
 178                                             X509_NAME_ENTRY_get_data(xe)->length);
 179                 }
 180         }
 181
 182         {
 183                 ASN1_INTEGER *xsn = X509_get_serialNumber(xs);
 184                 BIGNUM *serialBN = ASN1_INTEGER_to_BN(xsn, NULL);
 185                 char *serialHex = BN_bn2hex(serialBN);
 186                 array_set_key_value(con->environment,
 187                                     CONST_STR_LEN("SSL_CLIENT_M_SERIAL"),
 188                                     serialHex, strlen(serialHex));
 189                 OPENSSL_free(serialHex);
 190                 BN_free(serialBN);
 191         }
 192
 193         if (!buffer_string_is_empty(con->conf.ssl_verifyclient_username)) {
 194                 /* pick one of the exported values as "REMOTE_USER", for example
 195                  * ssl.verifyclient.username   = "SSL_CLIENT_S_DN_UID" or "SSL_CLIENT_S_DN_emailAddress"
 196                  */
 197                 data_string *ds = (data_string *)array_get_element(con->environment, con->conf.ssl_verifyclient_username->ptr);
 198                 if (ds) array_set_key_value(con->environment, CONST_STR_LEN("REMOTE_USER"), CONST_BUF_LEN(ds->value));
 199         }
 200
 201         if (con->conf.ssl_verifyclient_export_cert) {
 202                 BIO *bio;
 203                 if (NULL != (bio = BIO_new(BIO_s_mem()))) {
 204                         data_string *envds;
 205                         int n;
 206
 207                         PEM_write_bio_X509(bio, xs);
 208                         n = BIO_pending(bio);
 209
 210                         if (NULL == (envds = (data_string *)array_get_unused_element(con->environment, TYPE_STRING))) {
 211                                 envds = data_string_init();
 212                         }
 213
 214                         buffer_copy_string_len(envds->key, CONST_STR_LEN("SSL_CLIENT_CERT"));
 215                         buffer_string_prepare_copy(envds->value, n);
 216                         BIO_read(bio, envds->value->ptr, n);
 217                         BIO_free(bio);
 218                         buffer_commit(envds->value, n);
 219                         array_replace(con->environment, (data_unset *)envds);
 220                 }
 221         }
 222         X509_free(xs);
 223 }
 224 #endif
 225
 226
 227 handler_t http_response_prepare(server *srv, connection *con) {
 228         handler_t r;
 229
 230         /* looks like someone has already done a decision */
 231         if (con->mode == DIRECT &&
 232             (con->http_status != 0 && con->http_status != 200)) {
 233                 /* remove a packets in the queue */
 234                 if (con->file_finished == 0) {
 235                         chunkqueue_reset(con->write_queue);
 236                 }
 237
 238                 return HANDLER_FINISHED;
 239         }
 240
 241         /* no decision yet, build conf->filename */
 242         if (con->mode == DIRECT && buffer_is_empty(con->physical.path)) {
 243                 char *qstr;
 244
 245                 /* we only come here when we have the parse the full request again
 246                  *
 247                  * a HANDLER_COMEBACK from mod_rewrite and mod_fastcgi might be a
 248                  * problem here as mod_setenv might get called multiple times
 249                  *
 250                  * fastcgi-auth might lead to a COMEBACK too
 251                  * fastcgi again dead server too
 252                  *
 253                  * mod_compress might add headers twice too
 254                  *
 255                  *  */
 256
 257                 config_cond_cache_reset(srv, con);
 258                 config_setup_connection(srv, con); /* Perhaps this could be removed at other places. */
 259
 260                 if (con->conf.log_condition_handling) {
 261                         log_error_write(srv, __FILE__, __LINE__,  "s",  "run condition");
 262                 }
 263
 264                 /**
 265                  * prepare strings
 266                  *
 267                  * - uri.path_raw
 268                  * - uri.path (secure)
 269                  * - uri.query
 270                  *
 271                  */
 272
 273                 /**
 274                  * Name according to RFC 2396
 275                  *
 276                  * - scheme
 277                  * - authority
 278                  * - path
 279                  * - query
 280                  *
 281                  * (scheme)://(authority)(path)?(query)#fragment
 282                  *
 283                  *
 284                  */
 285
 286                 /* initial scheme value. can be overwritten for example by mod_extforward later */
 287                 if (con->srv_socket->is_ssl) {
 288                         buffer_copy_string_len(con->uri.scheme, CONST_STR_LEN("https"));
 289                 } else {
 290                         buffer_copy_string_len(con->uri.scheme, CONST_STR_LEN("http"));
 291                 }
 292                 buffer_copy_buffer(con->uri.authority, con->request.http_host);
 293                 buffer_to_lower(con->uri.authority);
 294
 295                 /** their might be a fragment which has to be cut away */
 296                 if (NULL != (qstr = strchr(con->request.uri->ptr, '#'))) {
 297                         buffer_string_set_length(con->request.uri, qstr - con->request.uri->ptr);
 298                 }
 299
 300                 /** extract query string from request.uri */
 301                 if (NULL != (qstr = strchr(con->request.uri->ptr, '?'))) {
 302                         buffer_copy_string    (con->uri.query, qstr + 1);
 303                         buffer_copy_string_len(con->uri.path_raw, con->request.uri->ptr, qstr - con->request.uri->ptr);
 304                 } else {
 305                         buffer_reset     (con->uri.query);
 306                         buffer_copy_buffer(con->uri.path_raw, con->request.uri);
 307                 }
 308
 309                 /* decode url to path
 310                  *
 311                  * - decode url-encodings  (e.g. %20 -> ' ')
 312                  * - remove path-modifiers (e.g. /../)
 313                  */
 314
 315                 if (con->request.http_method == HTTP_METHOD_OPTIONS &&
 316                     con->uri.path_raw->ptr[0] == '*' && con->uri.path_raw->ptr[1] == '\0') {
 317                         /* OPTIONS * ... */
 318                         buffer_copy_buffer(con->uri.path, con->uri.path_raw);
 319                 } else {
 320                         buffer_copy_buffer(srv->tmp_buf, con->uri.path_raw);
 321                         buffer_urldecode_path(srv->tmp_buf);
 322                         buffer_path_simplify(con->uri.path, srv->tmp_buf);
 323                 }
 324
 325                 con->conditional_is_valid[COMP_SERVER_SOCKET] = 1;       /* SERVERsocket */
 326                 con->conditional_is_valid[COMP_HTTP_SCHEME] = 1;         /* Scheme:      */
 327                 con->conditional_is_valid[COMP_HTTP_HOST] = 1;           /* Host:        */
 328                 con->conditional_is_valid[COMP_HTTP_REMOTE_IP] = 1;      /* Client-IP */
 329                 con->conditional_is_valid[COMP_HTTP_REFERER] = 1;        /* Referer:     */
 330                 con->conditional_is_valid[COMP_HTTP_USER_AGENT] =        /* User-Agent:  */
 331                 con->conditional_is_valid[COMP_HTTP_LANGUAGE] = 1;       /* Accept-Language:  */
 332                 con->conditional_is_valid[COMP_HTTP_COOKIE] = 1;         /* Cookie:  */
 333                 con->conditional_is_valid[COMP_HTTP_REQUEST_METHOD] = 1; /* REQUEST_METHOD */
 334                 con->conditional_is_valid[COMP_HTTP_URL] = 1;            /* HTTPurl */
 335                 con->conditional_is_valid[COMP_HTTP_QUERY_STRING] = 1;   /* HTTPqs */
 336                 config_patch_connection(srv, con);
 337
 338 #ifdef USE_OPENSSL
 339                 if (con->srv_socket->is_ssl && con->conf.ssl_verifyclient) {
 340                         https_add_ssl_client_entries(srv, con);
 341                 }
 342 #endif
 343
 344                 /* do we have to downgrade to 1.0 ? */
 345                 if (!con->conf.allow_http11) {
 346                         con->request.http_version = HTTP_VERSION_1_0;
 347                 }
 348
 349                 if (con->conf.log_request_handling) {
 350                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- splitting Request-URI");
 351                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Request-URI     : ", con->request.uri);
 352                         log_error_write(srv, __FILE__, __LINE__,  "sb", "URI-scheme      : ", con->uri.scheme);
 353                         log_error_write(srv, __FILE__, __LINE__,  "sb", "URI-authority   : ", con->uri.authority);
 354                         log_error_write(srv, __FILE__, __LINE__,  "sb", "URI-path (raw)  : ", con->uri.path_raw);
 355                         log_error_write(srv, __FILE__, __LINE__,  "sb", "URI-path (clean): ", con->uri.path);
 356                         log_error_write(srv, __FILE__, __LINE__,  "sb", "URI-query       : ", con->uri.query);
 357                 }
 358
 359                 /* con->conf.max_request_size is in kBytes */
 360                 if (0 != con->conf.max_request_size &&
 361                     (off_t)con->request.content_length > ((off_t)con->conf.max_request_size << 10)) {
 362                         log_error_write(srv, __FILE__, __LINE__, "sos",
 363                                         "request-size too long:", (off_t) con->request.content_length, "-> 413");
 364                         con->keep_alive = 0;
 365                         con->http_status = 413;
 366                         con->file_finished = 1;
 367
 368                         return HANDLER_FINISHED;
 369                 }
 370
 371
 372                 /**
 373                  *
 374                  * call plugins
 375                  *
 376                  * - based on the raw URL
 377                  *
 378                  */
 379
 380                 switch(r = plugins_call_handle_uri_raw(srv, con)) {
 381                 case HANDLER_GO_ON:
 382                         break;
 383                 case HANDLER_FINISHED:
 384                 case HANDLER_COMEBACK:
 385                 case HANDLER_WAIT_FOR_EVENT:
 386                 case HANDLER_ERROR:
 387                         return r;
 388                 default:
 389                         log_error_write(srv, __FILE__, __LINE__, "sd", "handle_uri_raw: unknown return value", r);
 390                         break;
 391                 }
 392
 393                 /**
 394                  *
 395                  * call plugins
 396                  *
 397                  * - based on the clean URL
 398                  *
 399                  */
 400
 401                 switch(r = plugins_call_handle_uri_clean(srv, con)) {
 402                 case HANDLER_GO_ON:
 403                         break;
 404                 case HANDLER_FINISHED:
 405                 case HANDLER_COMEBACK:
 406                 case HANDLER_WAIT_FOR_EVENT:
 407                 case HANDLER_ERROR:
 408                         return r;
 409                 default:
 410                         log_error_write(srv, __FILE__, __LINE__, "");
 411                         break;
 412                 }
 413
 414                 if (con->request.http_method == HTTP_METHOD_OPTIONS &&
 415                     con->uri.path->ptr[0] == '*' && con->uri.path_raw->ptr[1] == '\0') {
 416                         /* option requests are handled directly without checking of the path */
 417
 418                         response_header_insert(srv, con, CONST_STR_LEN("Allow"), CONST_STR_LEN("OPTIONS, GET, HEAD, POST"));
 419
 420                         con->http_status = 200;
 421                         con->file_finished = 1;
 422
 423                         return HANDLER_FINISHED;
 424                 }
 425
 426                 /***
 427                  *
 428                  * border
 429                  *
 430                  * logical filename (URI) becomes a physical filename here
 431                  *
 432                  *
 433                  *
 434                  */
 435
 436
 437
 438
 439                 /* 1. stat()
 440                  * ... ISREG() -> ok, go on
 441                  * ... ISDIR() -> index-file -> redirect
 442                  *
 443                  * 2. pathinfo()
 444                  * ... ISREG()
 445                  *
 446                  * 3. -> 404
 447                  *
 448                  */
 449
 450                 /*
 451                  * SEARCH DOCUMENT ROOT
 452                  */
 453
 454                 /* set a default */
 455
 456                 buffer_copy_buffer(con->physical.doc_root, con->conf.document_root);
 457                 buffer_copy_buffer(con->physical.rel_path, con->uri.path);
 458
 459 #if defined(__WIN32) || defined(__CYGWIN__)
 460                 /* strip dots from the end and spaces
 461                  *
 462                  * windows/dos handle those filenames as the same file
 463                  *
 464                  * foo == foo. == foo..... == "foo...   " == "foo..  ./"
 465                  *
 466                  * This will affect in some cases PATHINFO
 467                  *
 468                  * on native windows we could prepend the filename with \\?\ to circumvent
 469                  * this behaviour. I have no idea how to push this through cygwin
 470                  *
 471                  * */
 472
 473                 if (con->physical.rel_path->used > 1) {
 474                         buffer *b = con->physical.rel_path;
 475                         size_t len = buffer_string_length(b);
 476
 477                         /* strip trailing " /" or "./" once */
 478                         if (len > 1 &&
 479                             b->ptr[len - 1] == '/' &&
 480                             (b->ptr[len - 2] == ' ' || b->ptr[len - 2] == '.')) {
 481                                 len -= 2;
 482                         }
 483                         /* strip all trailing " " and "." */
 484                         while (len > 0 &&  ( ' ' == b->ptr[len-1] || '.' == b->ptr[len-1] ) ) --len;
 485                         buffer_string_set_length(b, len);
 486                 }
 487 #endif
 488
 489                 if (con->conf.log_request_handling) {
 490                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- before doc_root");
 491                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Doc-Root     :", con->physical.doc_root);
 492                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Rel-Path     :", con->physical.rel_path);
 493                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 494                 }
 495                 /* the docroot plugin should set the doc_root and might also set the physical.path
 496                  * for us (all vhost-plugins are supposed to set the doc_root)
 497                  * */
 498                 switch(r = plugins_call_handle_docroot(srv, con)) {
 499                 case HANDLER_GO_ON:
 500                         break;
 501                 case HANDLER_FINISHED:
 502                 case HANDLER_COMEBACK:
 503                 case HANDLER_WAIT_FOR_EVENT:
 504                 case HANDLER_ERROR:
 505                         return r;
 506                 default:
 507                         log_error_write(srv, __FILE__, __LINE__, "");
 508                         break;
 509                 }
 510
 511                 /* MacOS X and Windows can't distiguish between upper and lower-case
 512                  *
 513                  * convert to lower-case
 514                  */
 515                 if (con->conf.force_lowercase_filenames) {
 516                         buffer_to_lower(con->physical.rel_path);
 517                 }
 518
 519                 /* the docroot plugins might set the servername, if they don't we take http-host */
 520                 if (buffer_string_is_empty(con->server_name)) {
 521                         buffer_copy_buffer(con->server_name, con->uri.authority);
 522                 }
 523
 524                 /**
 525                  * create physical filename
 526                  * -> physical.path = docroot + rel_path
 527                  *
 528                  */
 529
 530                 buffer_copy_buffer(con->physical.basedir, con->physical.doc_root);
 531                 buffer_copy_buffer(con->physical.path, con->physical.doc_root);
 532                 buffer_append_slash(con->physical.path);
 533                 if (!buffer_string_is_empty(con->physical.rel_path) &&
 534                     con->physical.rel_path->ptr[0] == '/') {
 535                         /* coverity[overflow_sink : FALSE] */
 536                         buffer_append_string_len(con->physical.path, con->physical.rel_path->ptr + 1, buffer_string_length(con->physical.rel_path) - 1);
 537                 } else {
 538                         buffer_append_string_buffer(con->physical.path, con->physical.rel_path);
 539                 }
 540
 541                 if (con->conf.log_request_handling) {
 542                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- after doc_root");
 543                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Doc-Root     :", con->physical.doc_root);
 544                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Rel-Path     :", con->physical.rel_path);
 545                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 546                 }
 547
 548                 switch(r = plugins_call_handle_physical(srv, con)) {
 549                 case HANDLER_GO_ON:
 550                         break;
 551                 case HANDLER_FINISHED:
 552                 case HANDLER_COMEBACK:
 553                 case HANDLER_WAIT_FOR_EVENT:
 554                 case HANDLER_ERROR:
 555                         return r;
 556                 default:
 557                         log_error_write(srv, __FILE__, __LINE__, "");
 558                         break;
 559                 }
 560
 561                 if (con->conf.log_request_handling) {
 562                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- logical -> physical");
 563                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Doc-Root     :", con->physical.doc_root);
 564                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Basedir      :", con->physical.basedir);
 565                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Rel-Path     :", con->physical.rel_path);
 566                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 567                 }
 568         }
 569
 570         /*
 571          * Noone catched away the file from normal path of execution yet (like mod_access)
 572          *
 573          * Go on and check of the file exists at all
 574          */
 575
 576         if (con->mode == DIRECT) {
 577                 char *slash = NULL;
 578                 char *pathinfo = NULL;
 579                 int found = 0;
 580                 stat_cache_entry *sce = NULL;
 581
 582                 if (con->conf.log_request_handling) {
 583                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- handling physical path");
 584                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 585                 }
 586
 587                 if (HANDLER_ERROR != stat_cache_get_entry(srv, con, con->physical.path, &sce)) {
 588                         /* file exists */
 589
 590                         if (con->conf.log_request_handling) {
 591                                 log_error_write(srv, __FILE__, __LINE__,  "s",  "-- file found");
 592                                 log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 593                         }
 594 #ifdef HAVE_LSTAT
 595                         if ((sce->is_symlink != 0) && !con->conf.follow_symlink) {
 596                                 con->http_status = 403;
 597
 598                                 if (con->conf.log_request_handling) {
 599                                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- access denied due symlink restriction");
 600                                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 601                                 }
 602
 603                                 buffer_reset(con->physical.path);
 604                                 return HANDLER_FINISHED;
 605                         };
 606 #endif
 607                         if (S_ISDIR(sce->st.st_mode)) {
 608                                 if (con->uri.path->ptr[buffer_string_length(con->uri.path) - 1] != '/') {
 609                                         /* redirect to .../ */
 610
 611                                         http_response_redirect_to_directory(srv, con);
 612
 613                                         return HANDLER_FINISHED;
 614                                 }
 615 #ifdef HAVE_LSTAT
 616                         } else if (!S_ISREG(sce->st.st_mode) && !sce->is_symlink) {
 617 #else
 618                         } else if (!S_ISREG(sce->st.st_mode)) {
 619 #endif
 620                                 /* any special handling of non-reg files ?*/
 621
 622
 623                         }
 624                 } else {
 625                         switch (errno) {
 626                         case EACCES:
 627                                 con->http_status = 403;
 628
 629                                 if (con->conf.log_request_handling) {
 630                                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- access denied");
 631                                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 632                                 }
 633
 634                                 buffer_reset(con->physical.path);
 635                                 return HANDLER_FINISHED;
 636                         case ENAMETOOLONG:
 637                                 /* file name to be read was too long. return 404 */
 638                         case ENOENT:
 639                                 con->http_status = 404;
 640
 641                                 if (con->conf.log_request_handling) {
 642                                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- file not found");
 643                                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 644                                 }
 645
 646                                 buffer_reset(con->physical.path);
 647                                 return HANDLER_FINISHED;
 648                         case ENOTDIR:
 649                                 /* PATH_INFO ! :) */
 650                                 break;
 651                         default:
 652                                 /* we have no idea what happend. let's tell the user so. */
 653                                 con->http_status = 500;
 654                                 buffer_reset(con->physical.path);
 655
 656                                 log_error_write(srv, __FILE__, __LINE__, "ssbsb",
 657                                                 "file not found ... or so: ", strerror(errno),
 658                                                 con->uri.path,
 659                                                 "->", con->physical.path);
 660
 661                                 return HANDLER_FINISHED;
 662                         }
 663
 664                         /* not found, perhaps PATHINFO */
 665
 666                         buffer_copy_buffer(srv->tmp_buf, con->physical.path);
 667
 668                         do {
 669                                 if (slash) {
 670                                         buffer_copy_string_len(con->physical.path, srv->tmp_buf->ptr, slash - srv->tmp_buf->ptr);
 671                                 } else {
 672                                         buffer_copy_buffer(con->physical.path, srv->tmp_buf);
 673                                 }
 674
 675                                 if (HANDLER_ERROR != stat_cache_get_entry(srv, con, con->physical.path, &sce)) {
 676                                         found = S_ISREG(sce->st.st_mode);
 677                                         break;
 678                                 }
 679
 680                                 if (pathinfo != NULL) {
 681                                         *pathinfo = '\0';
 682                                 }
 683                                 slash = strrchr(srv->tmp_buf->ptr, '/');
 684
 685                                 if (pathinfo != NULL) {
 686                                         /* restore '/' */
 687                                         *pathinfo = '/';
 688                                 }
 689
 690                                 if (slash) pathinfo = slash;
 691                         } while ((found == 0) && (slash != NULL) && ((size_t)(slash - srv->tmp_buf->ptr) > (buffer_string_length(con->physical.basedir) - 1)));
 692
 693                         if (found == 0) {
 694                                 /* no it really doesn't exists */
 695                                 con->http_status = 404;
 696
 697                                 if (con->conf.log_file_not_found) {
 698                                         log_error_write(srv, __FILE__, __LINE__, "sbsb",
 699                                                         "file not found:", con->uri.path,
 700                                                         "->", con->physical.path);
 701                                 }
 702
 703                                 buffer_reset(con->physical.path);
 704
 705                                 return HANDLER_FINISHED;
 706                         }
 707
 708 #ifdef HAVE_LSTAT
 709                         if ((sce->is_symlink != 0) && !con->conf.follow_symlink) {
 710                                 con->http_status = 403;
 711
 712                                 if (con->conf.log_request_handling) {
 713                                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- access denied due symlink restriction");
 714                                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 715                                 }
 716
 717                                 buffer_reset(con->physical.path);
 718                                 return HANDLER_FINISHED;
 719                         };
 720 #endif
 721
 722                         /* we have a PATHINFO */
 723                         if (pathinfo) {
 724                                 size_t len = strlen(pathinfo), reqlen;
 725                                 if (con->conf.force_lowercase_filenames
 726                                     && len <= (reqlen = buffer_string_length(con->request.uri))
 727                                     && 0 == strncasecmp(con->request.uri->ptr + reqlen - len, pathinfo, len)) {
 728                                         /* attempt to preserve case-insensitive PATH_INFO
 729                                          * (works in common case where mod_alias, mod_magnet, and other modules
 730                                          *  have not modified the PATH_INFO portion of request URI, or did so
 731                                          *  with exactly the PATH_INFO desired) */
 732                                         buffer_copy_string_len(con->request.pathinfo, con->request.uri->ptr + reqlen - len, len);
 733                                 } else {
 734                                         buffer_copy_string_len(con->request.pathinfo, pathinfo, len);
 735                                 }
 736
 737                                 /*
 738                                  * shorten uri.path
 739                                  */
 740
 741                                 buffer_string_set_length(con->uri.path, buffer_string_length(con->uri.path) - len);
 742                         }
 743
 744                         if (con->conf.log_request_handling) {
 745                                 log_error_write(srv, __FILE__, __LINE__,  "s",  "-- after pathinfo check");
 746                                 log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 747                                 log_error_write(srv, __FILE__, __LINE__,  "sb", "URI          :", con->uri.path);
 748                                 log_error_write(srv, __FILE__, __LINE__,  "sb", "Pathinfo     :", con->request.pathinfo);
 749                         }
 750                 }
 751
 752                 if (con->conf.log_request_handling) {
 753                         log_error_write(srv, __FILE__, __LINE__,  "s",  "-- handling subrequest");
 754                         log_error_write(srv, __FILE__, __LINE__,  "sb", "Path         :", con->physical.path);
 755                 }
 756
 757                 /* call the handlers */
 758                 switch(r = plugins_call_handle_subrequest_start(srv, con)) {
 759                 case HANDLER_GO_ON:
 760                         /* request was not handled */
 761                         break;
 762                 case HANDLER_FINISHED:
 763                 default:
 764                         if (con->conf.log_request_handling) {
 765                                 log_error_write(srv, __FILE__, __LINE__,  "s",  "-- subrequest finished");
 766                         }
 767
 768                         /* something strange happend */
 769                         return r;
 770                 }
 771
 772                 /* if we are still here, no one wanted the file, status 403 is ok I think */
 773
 774                 if (con->mode == DIRECT && con->http_status == 0) {
 775                         switch (con->request.http_method) {
 776                         case HTTP_METHOD_OPTIONS:
 777                                 con->http_status = 200;
 778                                 break;
 779                         default:
 780                                 con->http_status = 403;
 781                         }
 782
 783                         return HANDLER_FINISHED;
 784                 }
 785
 786         }
 787
 788         switch(r = plugins_call_handle_subrequest(srv, con)) {
 789         case HANDLER_GO_ON:
 790                 /* request was not handled, looks like we are done */
 791                 return HANDLER_FINISHED;
 792         case HANDLER_FINISHED:
 793                 /* request is finished */
 794         default:
 795                 /* something strange happend */
 796                 return r;
 797         }
 798
 799         /* can't happen */
 800         return HANDLER_COMEBACK;
 801 }
 802
 803
 804