Mike Barnes
5a9b2518be
Allow dropping privs on platforms without setresuid()
1 year ago
Mike Barnes
47e075383f
Set facility with openlog, fix message priorites.
1 year ago
15d09d2c01
fix user chroot issue + style
1 year ago
f8aff7fe05
fix cgi error (file not found) and useless 'unveil' pledge promise
2 years ago
4972df5999
Fix virtualhost support changing the way request is parsed
2 years ago
de52acecfc
Merge branch 'master' of tildegit.org:solene/vger
2 years ago
ee8569c6e6
simplify cgi function
...
Don't fork+execlp the script. There's no need to do so since on exec
the new process will inherit our file descriptor table (and hence our
stdout), so copying from its stdout to ours is just a waste of time.
This allows to drop the ``proc'' pledge(2) promise and to (slightly)
improve performance.
2 years ago
16a5ed7b30
drop unnecessary unveil(NULL, NULL)
...
the next line is a call to pledge, that alone is will block further
calls to unveil(2) since ``unveil'' isn't in the set of pledges.
2 years ago
cbcf4ec9b6
fix redirect when vhost support is enabled
2 years ago
7431d3eeec
Use the correct error codes and meaningful explanations
...
Introduce status_error: it's like status or status_redirect but for
errors, thus it doesn't add ``;lang=$lang'' at the end.
2 years ago
e9be1b73a7
percent-decode uri
2 years ago
e87b36c991
check request length for empty and too long
2 years ago
e3b5fb2ab3
Revert "deal with too small/long requests"
...
This reverts commit efa1f639fc
2 years ago
9525d66afb
Revert "follow spec, fread() get nmemb-1"
...
This reverts commit fbacb35170
2 years ago
d086262d1a
Revert "empty request should works all the time, not only when in virtualhost"
...
This broke vger from inetd but it passed the tests.
This reverts commit 7b0686bdfa
2 years ago
7b0686bdfa
empty request should works all the time, not only when in virtualhost
2 years ago
fbacb35170
follow spec, fread() get nmemb-1
2 years ago
efa1f639fc
deal with too small/long requests
2 years ago
458592594e
Repair chroot, the only feature that isn't covered by tests
2 years ago
55042768e5
restore parent link in autoindex and add comments
2 years ago
de7cd12f9f
ignore after ? and make cgi+virtualhost work (sort of)
2 years ago
3510035711
fix unacceptable ../ in autoidx and code formatting
2 years ago
2cc63136f8
alphasort autoindex + add proper error code fir cgi
2 years ago
470e47a018
Add simple cgi support +:
...
* read file byte after byte
* format code (syslog + err)
* move functions in utils.c
2 years ago
f60ea88c8d
add mimetype and autoindex option + minor changes
...
* follow style(9) for prototypes
* move first most used extension for more effeciciency when looking for mime
* add opts.h to deal with options
* remove lang=en by default
* add option to set default mimetype
* add option to autoindex if no index.gmi found
* redirect if ending "/" is missing
* send appropriate status code if request too long
* edit manpage and README for new options
2 years ago
4a1b0c8ce2
fix issue if missing ending '/' and add appropriate test
2 years ago
b2ccab7448
Error code = 51 (not found) and redirection is now 30 following specifications Appendix https://gemini.circumlunar.space/docs/specification.html
2 years ago
f0f05b83aa
Add support to redirection
2 years ago
ef93e01091
Remove the port part of the hostname + according test suite
...
patch from prx
2 years ago
d5cf84928e
fix tests, initialize all, remove useless var
2 years ago
f9dc956824
errcheck strlcat
2 years ago
8aa3acd2d4
add errors checks on strlcpy, fgets, use faster memmove to don't need buffer
2 years ago
e3448992bc
use macro
2 years ago
e3cb05af6d
init all
2 years ago
7381464bf7
initialize option
2 years ago
44a767f577
initialize pos
2 years ago
395eeeccea
path is supposed to be const. format unveil in a fuction
2 years ago
4e82f1e44c
remove unused extension and fix warnings
2 years ago
fa328268e2
No need to copy path to a local buffer, use it directly.
...
Since path is a pointer to a constant string we can make it
point to a different constant string ("/").
2 years ago
5a238e8666
Use BUFSIZ for the amount of data to copy through stdio.
...
According to the book of armaments(posix):
BUFSIZ
Size of <stdio.h> buffers. This shall expand to a positive value.
There is also no need for the buflen variable since the size never
changes during runtime and the compiler can infer the size via
sizeof().
2 years ago
bfd1f66350
Return a constant string from the mimes database.
...
We are not modifying it so there is no need to copy memory around.
This also prevents file_mime getting out of sync as had already
happend. It had a size of 50 while the mime types database type used
to have a size of 70.
2 years ago
16657e070c
Fix file path after chroot()
2 years ago
f28f906b6a
stat(2) can fail, rearange error handling to handle this
2 years ago
75cf996cec
safely drop privs
2 years ago
8d69d84784
errno is not set here
2 years ago
27bc29da7a
sys/ includes go at the front
2 years ago
3d18122b7e
main does not need a prototype
2 years ago
5b3dc1dd02
Do not include c sources
2 years ago
345215fa9b
Code refactoring: get_file_mime got into mime.c and all security code moved into a procedure
2 years ago
e9c3945ede
Add syslog messages
2 years ago
Mike Barnes
prx
Omar Polo
Solene Rapenne
Florian Obser