mirror of
https://github.com/apache/httpd.git
synced 2025-08-10 02:56:11 +00:00
3c8e0cb24f
Unix because I can't find any other platforms with rlimit. If there are other platforms that need this code, then some of the code needs to move. This has just barely been tested, so it could probably use some good testing. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@85449 13f79535-47bb-0310-9956-ffa450edef68
685 lines
22 KiB
C
685 lines
22 KiB
C
/* ====================================================================
|
|
* The Apache Software License, Version 1.1
|
|
*
|
|
* Copyright (c) 2000 The Apache Software Foundation. All rights
|
|
* reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. The end-user documentation included with the redistribution,
|
|
* if any, must include the following acknowledgment:
|
|
* "This product includes software developed by the
|
|
* Apache Software Foundation (http://www.apache.org/)."
|
|
* Alternately, this acknowledgment may appear in the software itself,
|
|
* if and wherever such third-party acknowledgments normally appear.
|
|
*
|
|
* 4. The names "Apache" and "Apache Software Foundation" must
|
|
* not be used to endorse or promote products derived from this
|
|
* software without prior written permission. For written
|
|
* permission, please contact apache@apache.org.
|
|
*
|
|
* 5. Products derived from this software may not be called "Apache",
|
|
* nor may "Apache" appear in their name, without prior written
|
|
* permission of the Apache Software Foundation.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
|
|
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
* DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
|
|
* USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
|
* OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
* ====================================================================
|
|
*
|
|
* This software consists of voluntary contributions made by many
|
|
* individuals on behalf of the Apache Software Foundation. For more
|
|
* information on the Apache Software Foundation, please see
|
|
* <http://www.apache.org/>.
|
|
*
|
|
* Portions of this software are based upon public domain software
|
|
* originally written at the National Center for Supercomputing Applications,
|
|
* University of Illinois, Urbana-Champaign.
|
|
*/
|
|
|
|
/*
|
|
* http_script: keeps all script-related ramblings together.
|
|
*
|
|
* Compliant to CGI/1.1 spec
|
|
*
|
|
* Adapted by rst from original NCSA code by Rob McCool
|
|
*
|
|
* Apache adds some new env vars; REDIRECT_URL and REDIRECT_QUERY_STRING for
|
|
* custom error responses, and DOCUMENT_ROOT because we found it useful.
|
|
* It also adds SERVER_ADMIN - useful for scripts to know who to mail when
|
|
* they fail.
|
|
*/
|
|
|
|
#define CORE_PRIVATE
|
|
|
|
#include "ap_config.h"
|
|
#include "httpd.h"
|
|
#include "http_config.h"
|
|
#include "http_request.h"
|
|
#include "http_core.h"
|
|
#include "http_protocol.h"
|
|
#include "http_main.h"
|
|
#include "http_log.h"
|
|
#include "util_script.h"
|
|
#include "http_conf_globals.h"
|
|
#ifdef HAVE_SYS_STAT_H
|
|
#include <sys/stat.h>
|
|
#endif
|
|
#ifdef HAVE_STRING_H
|
|
#include <string.h>
|
|
#endif
|
|
|
|
module MODULE_VAR_EXPORT cgi_module;
|
|
|
|
/* KLUDGE --- for back-combatibility, we don't have to check ExecCGI
|
|
* in ScriptAliased directories, which means we need to know if this
|
|
* request came through ScriptAlias or not... so the Alias module
|
|
* leaves a note for us.
|
|
*/
|
|
|
|
static int is_scriptaliased(request_rec *r)
|
|
{
|
|
const char *t = ap_table_get(r->notes, "alias-forced-type");
|
|
return t && (!strcasecmp(t, "cgi-script"));
|
|
}
|
|
|
|
/* Configuration stuff */
|
|
|
|
#define DEFAULT_LOGBYTES 10385760
|
|
#define DEFAULT_BUFBYTES 1024
|
|
|
|
typedef struct {
|
|
char *logname;
|
|
long logbytes;
|
|
int bufbytes;
|
|
} cgi_server_conf;
|
|
|
|
static void *create_cgi_config(ap_pool_t *p, server_rec *s)
|
|
{
|
|
cgi_server_conf *c =
|
|
(cgi_server_conf *) ap_pcalloc(p, sizeof(cgi_server_conf));
|
|
|
|
c->logname = NULL;
|
|
c->logbytes = DEFAULT_LOGBYTES;
|
|
c->bufbytes = DEFAULT_BUFBYTES;
|
|
|
|
return c;
|
|
}
|
|
|
|
static void *merge_cgi_config(ap_pool_t *p, void *basev, void *overridesv)
|
|
{
|
|
cgi_server_conf *base = (cgi_server_conf *) basev, *overrides = (cgi_server_conf *) overridesv;
|
|
|
|
return overrides->logname ? overrides : base;
|
|
}
|
|
|
|
static const char *set_scriptlog(cmd_parms *cmd, void *dummy, char *arg)
|
|
{
|
|
server_rec *s = cmd->server;
|
|
cgi_server_conf *conf =
|
|
(cgi_server_conf *) ap_get_module_config(s->module_config, &cgi_module);
|
|
|
|
conf->logname = arg;
|
|
return NULL;
|
|
}
|
|
|
|
static const char *set_scriptlog_length(cmd_parms *cmd, void *dummy, char *arg)
|
|
{
|
|
server_rec *s = cmd->server;
|
|
cgi_server_conf *conf =
|
|
(cgi_server_conf *) ap_get_module_config(s->module_config, &cgi_module);
|
|
|
|
conf->logbytes = atol(arg);
|
|
return NULL;
|
|
}
|
|
|
|
static const char *set_scriptlog_buffer(cmd_parms *cmd, void *dummy, char *arg)
|
|
{
|
|
server_rec *s = cmd->server;
|
|
cgi_server_conf *conf =
|
|
(cgi_server_conf *) ap_get_module_config(s->module_config, &cgi_module);
|
|
|
|
conf->bufbytes = atoi(arg);
|
|
return NULL;
|
|
}
|
|
|
|
static const command_rec cgi_cmds[] =
|
|
{
|
|
{"ScriptLog", set_scriptlog, NULL, RSRC_CONF, TAKE1,
|
|
"the name of a log for script debugging info"},
|
|
{"ScriptLogLength", set_scriptlog_length, NULL, RSRC_CONF, TAKE1,
|
|
"the maximum length (in bytes) of the script debug log"},
|
|
{"ScriptLogBuffer", set_scriptlog_buffer, NULL, RSRC_CONF, TAKE1,
|
|
"the maximum size (in bytes) to record of a POST request"},
|
|
{NULL}
|
|
};
|
|
|
|
static int log_scripterror(request_rec *r, cgi_server_conf * conf, int ret,
|
|
int show_errno, char *error)
|
|
{
|
|
ap_file_t *f = NULL;
|
|
ap_finfo_t finfo;
|
|
char time_str[AP_CTIME_LEN];
|
|
|
|
ap_log_rerror(APLOG_MARK, show_errno|APLOG_ERR, errno, r,
|
|
"%s: %s", error, r->filename);
|
|
|
|
if (!conf->logname ||
|
|
((ap_stat(&finfo, ap_server_root_relative(r->pool, conf->logname), r->pool) == APR_SUCCESS)
|
|
&& (finfo.size > conf->logbytes)) ||
|
|
(ap_open(&f, ap_server_root_relative(r->pool, conf->logname),
|
|
APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) {
|
|
return ret;
|
|
}
|
|
|
|
/* "%% [Wed Jun 19 10:53:21 1996] GET /cgi-bin/printenv HTTP/1.0" */
|
|
ap_ctime(time_str, ap_now());
|
|
ap_fprintf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri,
|
|
r->args ? "?" : "", r->args ? r->args : "", r->protocol);
|
|
/* "%% 500 /usr/local/apache/cgi-bin */
|
|
ap_fprintf(f, "%%%% %d %s\n", ret, r->filename);
|
|
|
|
ap_fprintf(f, "%%error\n%s\n", error);
|
|
|
|
ap_close(f);
|
|
return ret;
|
|
}
|
|
|
|
/* Soak up stderr from a script and redirect it to the error log.
|
|
*/
|
|
static void log_script_err(request_rec *r, BUFF *script_err)
|
|
{
|
|
char argsbuffer[HUGE_STRING_LEN];
|
|
char *newline;
|
|
|
|
while (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_err) > 0) {
|
|
newline = strchr(argsbuffer, '\n');
|
|
if (newline) {
|
|
*newline = '\0';
|
|
}
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR | APLOG_NOERRNO, 0, r,
|
|
"%s", argsbuffer);
|
|
}
|
|
}
|
|
|
|
static int log_script(request_rec *r, cgi_server_conf * conf, int ret,
|
|
char *dbuf, const char *sbuf, BUFF *script_in, BUFF *script_err)
|
|
{
|
|
ap_array_header_t *hdrs_arr = ap_table_elts(r->headers_in);
|
|
ap_table_entry_t *hdrs = (ap_table_entry_t *) hdrs_arr->elts;
|
|
char argsbuffer[HUGE_STRING_LEN];
|
|
ap_file_t *f = NULL;
|
|
int i;
|
|
ap_finfo_t finfo;
|
|
char time_str[AP_CTIME_LEN];
|
|
|
|
if (!conf->logname ||
|
|
((ap_stat(&finfo, ap_server_root_relative(r->pool, conf->logname), r->pool) == APR_SUCCESS)
|
|
&& (finfo.size > conf->logbytes)) ||
|
|
(ap_open(&f, ap_server_root_relative(r->pool, conf->logname),
|
|
APR_APPEND|APR_WRITE|APR_CREATE, APR_OS_DEFAULT, r->pool) != APR_SUCCESS)) {
|
|
/* Soak up script output */
|
|
while (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_in) > 0)
|
|
continue;
|
|
|
|
log_script_err(r, script_err);
|
|
return ret;
|
|
}
|
|
|
|
/* "%% [Wed Jun 19 10:53:21 1996] GET /cgi-bin/printenv HTTP/1.0" */
|
|
ap_ctime(time_str, ap_now());
|
|
ap_fprintf(f, "%%%% [%s] %s %s%s%s %s\n", time_str, r->method, r->uri,
|
|
r->args ? "?" : "", r->args ? r->args : "", r->protocol);
|
|
/* "%% 500 /usr/local/apache/cgi-bin" */
|
|
ap_fprintf(f, "%%%% %d %s\n", ret, r->filename);
|
|
|
|
ap_puts("%request\n", f);
|
|
for (i = 0; i < hdrs_arr->nelts; ++i) {
|
|
if (!hdrs[i].key)
|
|
continue;
|
|
ap_fprintf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val);
|
|
}
|
|
if ((r->method_number == M_POST || r->method_number == M_PUT)
|
|
&& *dbuf) {
|
|
ap_fprintf(f, "\n%s\n", dbuf);
|
|
}
|
|
|
|
ap_puts("%response\n", f);
|
|
hdrs_arr = ap_table_elts(r->err_headers_out);
|
|
hdrs = (ap_table_entry_t *) hdrs_arr->elts;
|
|
|
|
for (i = 0; i < hdrs_arr->nelts; ++i) {
|
|
if (!hdrs[i].key)
|
|
continue;
|
|
ap_fprintf(f, "%s: %s\n", hdrs[i].key, hdrs[i].val);
|
|
}
|
|
|
|
if (sbuf && *sbuf)
|
|
ap_fprintf(f, "%s\n", sbuf);
|
|
|
|
if (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_in) > 0) {
|
|
ap_puts("%stdout\n", f);
|
|
ap_puts(argsbuffer, f);
|
|
while (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_in) > 0)
|
|
ap_puts(argsbuffer, f);
|
|
ap_puts("\n", f);
|
|
}
|
|
|
|
if (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_err) > 0) {
|
|
ap_puts("%stderr\n", f);
|
|
ap_puts(argsbuffer, f);
|
|
while (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_err) > 0)
|
|
ap_puts(argsbuffer, f);
|
|
ap_puts("\n", f);
|
|
}
|
|
|
|
ap_bclose(script_in);
|
|
ap_bclose(script_err);
|
|
|
|
ap_close(f);
|
|
return ret;
|
|
}
|
|
static ap_status_t run_cgi_child(BUFF **script_out, BUFF **script_in, BUFF **script_err,
|
|
char *command, char *const argv[], request_rec *r, ap_pool_t *p)
|
|
{
|
|
char **env;
|
|
ap_procattr_t *procattr;
|
|
ap_proc_t *procnew = ap_pcalloc(p, sizeof(*procnew));
|
|
ap_status_t rc = APR_SUCCESS;
|
|
ap_file_t *file = NULL;
|
|
ap_iol *iol;
|
|
#if defined(RLIMIT_CPU) || defined(RLIMIT_NPROC) || \
|
|
defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined (RLIMIT_AS)
|
|
core_dir_config *conf;
|
|
conf = (core_dir_config *) ap_get_module_config(r->per_dir_config, &core_module);
|
|
#endif
|
|
|
|
|
|
#ifdef DEBUG_CGI
|
|
#ifdef OS2
|
|
/* Under OS/2 need to use device con. */
|
|
FILE *dbg = fopen("con", "w");
|
|
#else
|
|
FILE *dbg = fopen("/dev/tty", "w");
|
|
#endif
|
|
int i;
|
|
#endif
|
|
|
|
RAISE_SIGSTOP(CGI_CHILD);
|
|
#ifdef DEBUG_CGI
|
|
fprintf(dbg, "Attempting to exec %s as %sCGI child (argv0 = %s)\n",
|
|
r->filename, cld->nph ? "NPH " : "", argv0);
|
|
#endif
|
|
|
|
ap_add_cgi_vars(r);
|
|
env = ap_create_environment(p, r->subprocess_env);
|
|
|
|
#ifdef DEBUG_CGI
|
|
fprintf(dbg, "Environment: \n");
|
|
for (i = 0; env[i]; ++i)
|
|
fprintf(dbg, "'%s'\n", env[i]);
|
|
#endif
|
|
|
|
/* Transumute ourselves into the script.
|
|
* NB only ISINDEX scripts get decoded arguments.
|
|
*/
|
|
if (((rc = ap_createprocattr_init(&procattr, p)) != APR_SUCCESS) ||
|
|
((rc = ap_setprocattr_io(procattr,
|
|
APR_CHILD_BLOCK,
|
|
APR_CHILD_BLOCK,
|
|
APR_CHILD_BLOCK)) != APR_SUCCESS) ||
|
|
((rc = ap_setprocattr_dir(procattr,
|
|
ap_make_dirstr_parent(r->pool, r->filename))) != APR_SUCCESS) ||
|
|
#ifdef RLIMIT_CPU
|
|
((rc = ap_setprocattr_limit(procattr, APR_LIMIT_CPU, conf->limit_cpu)) != APR_SUCCESS) ||
|
|
#endif
|
|
#if defined(RLIMIT_DATA) || defined(RLIMIT_VMEM) || defined(RLIMIT_AS)
|
|
((rc = ap_setprocattr_limit(procattr, APR_LIMIT_MEM, conf->limit_mem)) != APR_SUCCESS) ||
|
|
#endif
|
|
#ifdef RLIMIT_NPROC
|
|
((rc = ap_setprocattr_limit(procattr, APR_LIMIT_NPROC, conf->limit_nproc)) != APR_SUCCESS) ||
|
|
#endif
|
|
((rc = ap_setprocattr_cmdtype(procattr, APR_PROGRAM)) != APR_SUCCESS)) {
|
|
/* Something bad happened, tell the world. */
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r,
|
|
"couldn't set child process attributes: %s", r->filename);
|
|
}
|
|
else {
|
|
rc = ap_create_process(procnew, command, argv, env, procattr, p);
|
|
|
|
if (rc != APR_SUCCESS) {
|
|
/* Bad things happened. Everyone should have cleaned up. */
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, rc, r,
|
|
"couldn't create child process: %d: %s", rc, r->filename);
|
|
}
|
|
else {
|
|
ap_note_subprocess(p, procnew, kill_after_timeout);
|
|
|
|
/* Fill in BUFF structure for parents pipe to child's stdout */
|
|
file = procnew->out;
|
|
iol = ap_create_file_iol(file);
|
|
if (!iol)
|
|
return APR_EBADF;
|
|
*script_in = ap_bcreate(p, B_RD);
|
|
ap_bpush_iol(*script_in, iol);
|
|
ap_bsetopt(*script_in, BO_TIMEOUT, &r->server->timeout);
|
|
|
|
/* Fill in BUFF structure for parents pipe to child's stdin */
|
|
file = procnew->in;
|
|
iol = ap_create_file_iol(file);
|
|
if (!iol)
|
|
return APR_EBADF;
|
|
*script_out = ap_bcreate(p, B_WR);
|
|
ap_bpush_iol(*script_out, iol);
|
|
ap_bsetopt(*script_out, BO_TIMEOUT, &r->server->timeout);
|
|
|
|
/* Fill in BUFF structure for parents pipe to child's stderr */
|
|
file = procnew->err;
|
|
iol = ap_create_file_iol(file);
|
|
if (!iol)
|
|
return APR_EBADF;
|
|
*script_err = ap_bcreate(p, B_RD);
|
|
ap_bpush_iol(*script_err, iol);
|
|
ap_bsetopt(*script_err, BO_TIMEOUT, &r->server->timeout);
|
|
}
|
|
}
|
|
return (rc);
|
|
}
|
|
static ap_status_t build_argv_list(char ***argv, request_rec *r, ap_pool_t *p)
|
|
{
|
|
int numwords, x, idx;
|
|
char *w;
|
|
const char *args = r->args;
|
|
|
|
if (!args || !args[0] || strchr(args, '=')) {
|
|
numwords = 1;
|
|
}
|
|
else {
|
|
/* count the number of keywords */
|
|
for (x = 0, numwords = 2; args[x]; x++) {
|
|
if (args[x] == '+') {
|
|
++numwords;
|
|
}
|
|
}
|
|
}
|
|
/* Everything is - 1 to account for the first parameter which is the
|
|
* program name. We didn't used to have to do this, but APR wants it.
|
|
*/
|
|
if (numwords > APACHE_ARG_MAX - 1) {
|
|
numwords = APACHE_ARG_MAX - 1; /* Truncate args to prevent overrun */
|
|
}
|
|
*argv = (char **) ap_palloc(p, (numwords + 2) * sizeof(char *));
|
|
|
|
for (x = 1, idx = 1; x < numwords; x++) {
|
|
w = ap_getword_nulls(p, &args, '+');
|
|
ap_unescape_url(w);
|
|
(*argv)[idx++] = ap_escape_shell_cmd(p, w);
|
|
}
|
|
(*argv)[idx] = NULL;
|
|
|
|
return APR_SUCCESS;
|
|
}
|
|
|
|
static ap_status_t build_command_line(char **c, request_rec *r, ap_pool_t *p)
|
|
{
|
|
#ifdef WIN32
|
|
char *quoted_filename = NULL;
|
|
char *interpreter = NULL;
|
|
file_type_e fileType;
|
|
|
|
*c = NULL;
|
|
fileType = ap_get_win32_interpreter(r, &interpreter);
|
|
|
|
if (fileType == eFileTypeUNKNOWN) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, r,
|
|
"%s is not executable; ensure interpreted scripts have "
|
|
"\"#!\" first line",
|
|
r->filename);
|
|
return APR_EBADF;
|
|
}
|
|
|
|
/*
|
|
* Build the command string to pass to ap_create_process()
|
|
*/
|
|
quoted_filename = ap_pstrcat(p, "\"", r->filename, "\"", NULL);
|
|
if (interpreter && *interpreter) {
|
|
*c = ap_pstrcat(p, interpreter, " ", quoted_filename, " ", NULL);
|
|
}
|
|
else {
|
|
*c = ap_pstrcat(p, quoted_filename, " ", NULL);
|
|
}
|
|
#else
|
|
*c = ap_pstrcat(p, r->filename, NULL);
|
|
#endif
|
|
return APR_SUCCESS;
|
|
}
|
|
|
|
static int cgi_handler(request_rec *r)
|
|
{
|
|
int retval, nph, dbpos = 0;
|
|
char *argv0, *dbuf = NULL;
|
|
char *command;
|
|
char **argv = NULL;
|
|
|
|
BUFF *script_out = NULL, *script_in = NULL, *script_err = NULL;
|
|
char argsbuffer[HUGE_STRING_LEN];
|
|
int is_included = !strcmp(r->protocol, "INCLUDED");
|
|
void *sconf = r->server->module_config;
|
|
ap_pool_t *p;
|
|
cgi_server_conf *conf =
|
|
(cgi_server_conf *) ap_get_module_config(sconf, &cgi_module);
|
|
|
|
p = r->main ? r->main->pool : r->pool;
|
|
|
|
if (r->method_number == M_OPTIONS) {
|
|
/* 99 out of 100 CGI scripts, this is all they support */
|
|
r->allowed |= (1 << M_GET);
|
|
r->allowed |= (1 << M_POST);
|
|
return DECLINED;
|
|
}
|
|
|
|
if ((argv0 = strrchr(r->filename, '/')) != NULL)
|
|
argv0++;
|
|
else
|
|
argv0 = r->filename;
|
|
|
|
nph = !(strncmp(argv0, "nph-", 4));
|
|
|
|
if (!(ap_allow_options(r) & OPT_EXECCGI) && !is_scriptaliased(r))
|
|
return log_scripterror(r, conf, FORBIDDEN, APLOG_NOERRNO,
|
|
"Options ExecCGI is off in this directory");
|
|
if (nph && is_included)
|
|
return log_scripterror(r, conf, FORBIDDEN, APLOG_NOERRNO,
|
|
"attempt to include NPH CGI script");
|
|
|
|
#if defined(OS2) || defined(WIN32)
|
|
/* Allow for cgi files without the .EXE extension on them under OS/2 */
|
|
if (r->finfo.protection == 0) {
|
|
ap_finfo_t finfo;
|
|
char *newfile;
|
|
|
|
newfile = ap_pstrcat(r->pool, r->filename, ".EXE", NULL);
|
|
if ((ap_stat(&finfo, newfile, r->pool) != APR_SUCCESS) ||
|
|
(finfo.filetype != APR_REG)) {
|
|
return log_scripterror(r, conf, NOT_FOUND, 0,
|
|
"script not found or unable to stat");
|
|
} else {
|
|
r->filename = newfile;
|
|
}
|
|
}
|
|
#else
|
|
if (r->finfo.protection == 0)
|
|
return log_scripterror(r, conf, NOT_FOUND, APLOG_NOERRNO,
|
|
"script not found or unable to stat");
|
|
#endif
|
|
if (r->finfo.filetype == APR_DIR)
|
|
return log_scripterror(r, conf, FORBIDDEN, APLOG_NOERRNO,
|
|
"attempt to invoke directory as script");
|
|
|
|
/*
|
|
if (!ap_suexec_enabled) {
|
|
if (!ap_can_exec(&r->finfo))
|
|
return log_scripterror(r, conf, FORBIDDEN, APLOG_NOERRNO,
|
|
"file permissions deny server execution");
|
|
}
|
|
|
|
*/
|
|
if ((retval = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR)))
|
|
return retval;
|
|
|
|
ap_add_common_vars(r);
|
|
|
|
/* build the command line */
|
|
if (build_command_line(&command, r, p) != APR_SUCCESS) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r,
|
|
"couldn't spawn child process: %s", r->filename);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
/* build the argument list */
|
|
else if (build_argv_list(&argv, r, p) != APR_SUCCESS) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r,
|
|
"couldn't spawn child process: %s", r->filename);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
argv[0] = ap_pstrdup(p, command);
|
|
/* run the script in its own process */
|
|
if (run_cgi_child(&script_out, &script_in, &script_err, command, argv, r, p) != APR_SUCCESS) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, errno, r,
|
|
"couldn't spawn child process: %s", r->filename);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
/* Transfer any put/post args, CERN style...
|
|
* Note that we already ignore SIGPIPE in the core server.
|
|
*/
|
|
if (ap_should_client_block(r)) {
|
|
int dbsize, len_read;
|
|
ap_ssize_t bytes_written;
|
|
|
|
if (conf->logname) {
|
|
dbuf = ap_pcalloc(r->pool, conf->bufbytes + 1);
|
|
dbpos = 0;
|
|
}
|
|
|
|
while ((len_read =
|
|
ap_get_client_block(r, argsbuffer, HUGE_STRING_LEN)) > 0) {
|
|
if (conf->logname) {
|
|
if ((dbpos + len_read) > conf->bufbytes) {
|
|
dbsize = conf->bufbytes - dbpos;
|
|
}
|
|
else {
|
|
dbsize = len_read;
|
|
}
|
|
memcpy(dbuf + dbpos, argsbuffer, dbsize);
|
|
dbpos += dbsize;
|
|
}
|
|
(void) ap_bwrite(script_out, argsbuffer, len_read, &bytes_written);
|
|
if (bytes_written < len_read) {
|
|
/* silly script stopped reading, soak up remaining message */
|
|
while (ap_get_client_block(r, argsbuffer, HUGE_STRING_LEN) > 0) {
|
|
/* dump it */
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
ap_bflush(script_out);
|
|
}
|
|
|
|
ap_bclose(script_out);
|
|
|
|
/* Handle script return... */
|
|
if (script_in && !nph) {
|
|
const char *location;
|
|
char sbuf[MAX_STRING_LEN];
|
|
int ret;
|
|
|
|
if ((ret = ap_scan_script_header_err_buff(r, script_in, sbuf))) {
|
|
return log_script(r, conf, ret, dbuf, sbuf, script_in, script_err);
|
|
}
|
|
|
|
location = ap_table_get(r->headers_out, "Location");
|
|
|
|
if (location && location[0] == '/' && r->status == 200) {
|
|
|
|
/* Soak up all the script output */
|
|
while (ap_bgets(argsbuffer, HUGE_STRING_LEN, script_in) > 0) {
|
|
continue;
|
|
}
|
|
log_script_err(r, script_err);
|
|
/* This redirect needs to be a GET no matter what the original
|
|
* method was.
|
|
*/
|
|
r->method = ap_pstrdup(r->pool, "GET");
|
|
r->method_number = M_GET;
|
|
|
|
/* We already read the message body (if any), so don't allow
|
|
* the redirected request to think it has one. We can ignore
|
|
* Transfer-Encoding, since we used REQUEST_CHUNKED_ERROR.
|
|
*/
|
|
ap_table_unset(r->headers_in, "Content-Length");
|
|
|
|
ap_internal_redirect_handler(location, r);
|
|
return OK;
|
|
}
|
|
else if (location && r->status == 200) {
|
|
/* XX Note that if a script wants to produce its own Redirect
|
|
* body, it now has to explicitly *say* "Status: 302"
|
|
*/
|
|
return REDIRECT;
|
|
}
|
|
|
|
ap_send_http_header(r);
|
|
if (!r->header_only) {
|
|
ap_send_fb(script_in, r);
|
|
}
|
|
ap_bclose(script_in);
|
|
|
|
log_script_err(r, script_err);
|
|
ap_bclose(script_err);
|
|
}
|
|
|
|
if (script_in && nph) {
|
|
ap_send_fb(script_in, r);
|
|
}
|
|
|
|
return OK; /* NOT r->status, even if it has changed. */
|
|
}
|
|
|
|
static const handler_rec cgi_handlers[] =
|
|
{
|
|
{CGI_MAGIC_TYPE, cgi_handler},
|
|
{"cgi-script", cgi_handler},
|
|
{NULL}
|
|
};
|
|
|
|
module MODULE_VAR_EXPORT cgi_module =
|
|
{
|
|
STANDARD20_MODULE_STUFF,
|
|
NULL, /* dir config creater */
|
|
NULL, /* dir merger --- default is to override */
|
|
create_cgi_config, /* server config */
|
|
merge_cgi_config, /* merge server config */
|
|
cgi_cmds, /* command ap_table_t */
|
|
cgi_handlers, /* handlers */
|
|
NULL /* register hooks */
|
|
};
|