Coro/myhttpd/httpd.pl

use Coro;
use Coro::Semaphore;
use Coro::Event;
use Coro::Socket;
use Coro::Signal;

use HTTP::Date;
use POSIX ();

use Compress::Zlib ();

no utf8;
use bytes;

# at least on my machine, this thingy serves files
# quite a bit faster than apache, ;)
# and quite a bit slower than thttpd :(

$SIG{PIPE} = 'IGNORE';

our $accesslog;
our $errorlog;

our $NOW;
our $HTTP_NOW;

Event->timer(interval => 1, hard => 1, cb => sub {
   $NOW = time;
   $HTTP_NOW = time2str $NOW;
})->now;

if ($ERROR_LOG) {
   use IO::Handle;
   open $errorlog, ">>$ERROR_LOG"
     or die "$ERROR_LOG: $!";
   $errorlog->autoflush(1);
}

if ($ACCESS_LOG) {
   use IO::Handle;
   open $accesslog, ">>$ACCESS_LOG"
     or die "$ACCESS_LOG: $!";
   $accesslog->autoflush(1);
}

sub slog {
   my $level = shift;
   my $format = shift;
   my $NOW = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $::NOW);
   printf "$NOW: $format\n", @_;
   printf $errorlog "$NOW: $format\n", @_ if $errorlog;
}

our $connections = new Coro::Semaphore $MAX_CONNECTS || 250;
our $httpevent   = new Coro::Signal;

our $queue_file  = new transferqueue $MAX_TRANSFERS;
our $queue_index = new transferqueue 10;

my @newcons;
my @pool;

# one "execution thread"
sub handler {
   while () {
      if (@newcons) {
         eval {
            conn->new(@{pop @newcons})->handle;
         };
         slog 1, "$@" if $@ && !ref $@;

         $httpevent->broadcast; # only for testing, but doesn't matter much

         $connections->up;
      } else {
         last if @pool >= $MAX_POOL;
         push @pool, $Coro::current;
         schedule;
      }
   }
}

sub listen_on {
   my $listen = $_[0];

   push @listen_sockets, $listen;

   # the "main thread"
   async {
      slog 1, "accepting connections";
      while () {
         $connections->down;
         push @newcons, [$listen->accept];
         #slog 3, "accepted @$connections ".scalar(@pool);
         if (@pool) {
            (pop @pool)->ready;
         } else {
            async \&handler;
         }

      }
   };
}

my $http_port = new Coro::Socket
        LocalAddr => $SERVER_HOST,
        LocalPort => $SERVER_PORT,
        ReuseAddr => 1,
        Listen => 50,
   or die "unable to start server";

listen_on $http_port;

if ($SERVER_PORT2) {
   my $http_port = new Coro::Socket
           LocalAddr => $SERVER_HOST,
           LocalPort => $SERVER_PORT2,
           ReuseAddr => 1,
           Listen => 50,
      or die "unable to start server";

   listen_on $http_port;
}

package conn;

use Socket;
use HTTP::Date;
use Convert::Scalar 'weaken';
use Linux::AIO;

Linux::AIO::min_parallel $::AIO_PARALLEL;

Event->io(fd => Linux::AIO::poll_fileno,
          poll => 'r', async => 1,
          cb => \&Linux::AIO::poll_cb);

our %conn; # $conn{ip}{self} => connobj
our %uri;  # $uri{ip}{uri}{self}
our %blocked;
our %mimetype;

sub read_mimetypes {
   local *M;
   if (open M, "<mime_types") {
      while (<M>) {
         if (/^([^#]\S+)\t+(\S+)$/) {
            $mimetype{lc $1} = $2;
         }
      }
   } else {
      print "cannot open mime_types\n";
   }
}

read_mimetypes;

sub new {
   my $class = shift;
   my $fh = shift;
   my $peername = shift;
   my $self = bless { fh => $fh }, $class;
   my (undef, $iaddr) = unpack_sockaddr_in $peername
      or $self->err(500, "unable to decode peername");

   $self->{remote_addr} =
      $self->{remote_id} = inet_ntoa $iaddr;

   $self->{time} = $::NOW;

   weaken ($Coro::current->{conn} = $self);

   $::conns++;
   $::maxconns = $::conns if $::conns > $::maxconns;

   $self;
}

sub DESTROY {
   #my $self = shift;
   $::conns--;
}

sub slog {
   my $self = shift;
   main::slog($_[0], "$self->{remote_id}> $_[1]");
}

sub response {
   my ($self, $code, $msg, $hdr, $content) = @_;
   my $res = "HTTP/1.1 $code $msg\015\012";
   my $GZ = "";

   if (exists $hdr->{Connection}) {
      if ($hdr->{Connection} =~ /close/) {
         $self->{h}{connection} = "close"
      }
   } else {
      if ($self->{version} < 1.1) {
         if ($self->{h}{connection} =~ /keep-alive/i) {
            $hdr->{Connection} = "Keep-Alive";
         } else {
            $self->{h}{connection} = "close"
         }
      }
   }

   if ($self->{method} ne "HEAD"
       && $self->{h}{"accept-encoding"} =~ /\bgzip\b/
       && $hdr->{"Content-Length"} == length $content
       && !exists $hdr->{"Content-Encoding"}
   ) {
      my $orig = length $content;
      $hdr->{"Content-Encoding"} = "gzip";
      $content = Compress::Zlib::memGzip(\$content);
      $hdr->{"Content-Length"} = length $content;
      $GZ = sprintf "GZ%02d", 100 - 100*((length $content) / $orig);
   }

   $res .= "Date: $HTTP_NOW\015\012";

   while (my ($h, $v) = each %$hdr) {
      $res .= "$h: $v\015\012"
   }
   $res .= "\015\012";

   $res .= $content if defined $content and $self->{method} ne "HEAD";

   my $log = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $NOW).
             " $self->{remote_id} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}.$GZ.
             " \"$self->{h}{referer}\"\n";

   print $accesslog $log if $accesslog;
   print STDERR $log;

   $self->{written} +=
      print {$self->{fh}} $res;
}

sub err {
   my $self = shift;
   my ($code, $msg, $hdr, $content) = @_;

   unless (defined $content) {
      $content = "$code $msg\n";
      $hdr->{"Content-Type"} = "text/plain";
      $hdr->{"Content-Length"} = length $content;
   }
   $hdr->{"Connection"} = "close";

   $self->response($code, $msg, $hdr, $content);

   die bless {}, err::;
}

sub handle {
   my $self = shift;
   my $fh = $self->{fh};

   my $host;

   $fh->timeout($::REQ_TIMEOUT);
   while() {
      $self->{reqs}++;

      # read request and parse first line
      my $req = $fh->readline("\015\012\015\012");

      unless (defined $req) {
         if (exists $self->{version}) {
            last;
         } else {
            $self->err(408, "request timeout");
         }
      }

      $self->{h} = {};

      $fh->timeout($::RES_TIMEOUT);

      $req =~ /^(?:\015\012)?
                (GET|HEAD) \040+
                ([^\040]+) \040+
                HTTP\/([0-9]+\.[0-9]+)
                \015\012/gx
         or $self->err(405, "method not allowed", { Allow => "GET,HEAD" });

      $self->{method} = $1;
      $self->{uri} = $2;
      $self->{version} = $3;

      $3 =~ /^1\./
         or $self->err(506, "http protocol version $3 not supported");

      # parse headers
      {
         my (%hdr, $h, $v);

         $hdr{lc $1} .= ",$2"
            while $req =~ /\G
                  ([^:\000-\040]+):
                  [\010\040]*
                  ((?: [^\015\012]+ | \015\012[\010\040] )*)
                  \015\012
               /gxc;

         $req =~ /\G\015\012$/
            or $self->err(400, "bad request");

         $self->{h}{$h} = substr $v, 1
            while ($h, $v) = each %hdr;
      }

      # remote id should be unique per user
      my $id = $self->{remote_addr};

      if (exists $self->{h}{"client-ip"}) {
         $id .= "[".$self->{h}{"client-ip"}."]";
      } elsif (exists $self->{h}{"x-forwarded-for"}) {
         $id .= "[".$self->{h}{"x-forwarded-for"}."]";
      }

      $self->{remote_id} = $id;

      weaken (local $conn{$id}{$self*1} = $self);

      if ($blocked{$id}) {
         $self->err_blocked
            if $blocked{$id}[0] > $::NOW;

         delete $blocked{$id};
      }

      # find out server name and port
      if ($self->{uri} =~ s/^http:\/\/([^\/?#]*)//i) {
         $host = $1;
      } else {
         $host = $self->{h}{host};
      }

      if (defined $host) {
         $self->{server_port} = $host =~ s/:([0-9]+)$// ? $1 : 80;
      } else {
         ($self->{server_port}, $host)
            = unpack_sockaddr_in $self->{fh}->sockname
               or $self->err(500, "unable to get socket name");
         $host = inet_ntoa $host;
      }

      $self->{server_name} = $host;

      weaken (local $uri{$id}{$self->{uri}}{$self*1} = $self);

      eval {
         $self->map_uri;
         $self->respond;
      };

      die if $@ && !ref $@;

      last if $self->{h}{connection} =~ /close/i;

      $httpevent->broadcast;

      $fh->timeout($::PER_TIMEOUT);
   }
}

sub block {
   my $self = shift;

   $blocked{$self->{remote_id}} = [$::NOW + $_[0], $_[1]];
   $self->slog(2, "blocked ip $self->{remote_id}");
   $self->err_blocked;
}

# uri => path mapping
sub map_uri {
   my $self = shift;
   my $host = $self->{server_name};
   my $uri = $self->{uri};

   # some massaging, also makes it more secure
   $uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
   $uri =~ s%//+%/%g;
   $uri =~ s%/\.(?=/|$)%%g;
   1 while $uri =~ s%/[^/]+/\.\.(?=/|$)%%;

   $uri =~ m%^/?\.\.(?=/|$)%
      and $self->err(400, "bad request");

   $self->{name} = $uri;

   # now do the path mapping
   $self->{path} = "$::DOCROOT/$host$uri";

   $self->access_check;
}

sub _cgi {
   my $self = shift;
   my $path = shift;
   my $fh;

   # no two-way xxx supported
   if (0 == fork) {
      open STDOUT, ">&".fileno($self->{fh});
      if (chdir $::DOCROOT) {
         $ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
         $ENV{HTTP_HOST}       = $self->{server_name};
         $ENV{HTTP_PORT}       = $self->{server_port};
         $ENV{SCRIPT_NAME}     = $self->{name};
         exec $path;
      }
      Coro::State::_exit(0);
   } else {
      die;
   }
}

sub server_hostport {
   $_[0]{server_port} == 80
      ? $_[0]{server_name}
      : "$_[0]{server_name}:$_[0]{server_port}";
}

sub respond {
   my $self = shift;
   my $path = $self->{path};

   if ($self->{name} =~ s%^/internal/([^/]+)%%) {
      if ($::internal{$1}) {
         $::internal{$1}->($self);
      } else {
         $self->err(404, "not found");
      }
   } else {

      stat $path
         or $self->err(404, "not found");

      $self->{stat} = [stat _];

      # idiotic netscape sends idiotic headers AGAIN
      my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
                ? str2time $1 : 0;

      if (-d _ && -r _) {
         # directory
         if ($path !~ /\/$/) {
            # create a redirect to get the trailing "/"
            # we don't try to avoid the :80
            $self->err(301, "moved permanently", { Location =>  "http://".$self->server_hostport."$self->{uri}/" });
         } else {
            $ims < $self->{stat}[9]
               or $self->err(304, "not modified");

            if (-r "$path/index.html") {
               # replace directory "size" by index.html filesize
               $self->{stat} = [stat ($self->{path} .= "/index.html")];
               $self->handle_file($queue_index);
            } else {
               $self->handle_dir;
            }
         }
      } elsif (-f _ && -r _) {
         -x _ and $self->err(403, "forbidden");

         if (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
            my $timeout = $::NOW + 10;
            while (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
               if ($timeout < $::NOW) {
                  $self->block($::BLOCKTIME, "too many connections");
               } else {
                  $httpevent->wait;
               }
            }
         }

         $self->handle_file($queue_file);
      } else {
         $self->err(404, "not found");
      }
   }
}

sub handle_dir {
   my $self = shift;
   my $idx = $self->diridx;

   $self->response(200, "ok",
         {
            "Content-Type"   => "text/html",
            "Content-Length" => length $idx,
            "Last-Modified"  => time2str ($self->{stat}[9]),
         },
         $idx);
}

sub handle_file {
   my ($self, $queue) = @_;
   my $length = $self->{stat}[7];
   my $hdr = {
      "Last-Modified"  => time2str ((stat _)[9]),
   };

   my @code = (200, "ok");
   my ($l, $h);

   if ($self->{h}{range} =~ /^bytes=(.*)$/) {
      for (split /,/, $1) {
         if (/^-(\d+)$/) {
            ($l, $h) = ($length - $1, $length - 1);
         } elsif (/^(\d+)-(\d*)$/) {
            ($l, $h) = ($1, ($2 ne "" || $2 >= $length) ? $2 : $length - 1);
         } else {
            ($l, $h) = (0, $length - 1);
            goto ignore;
         }
         goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h >= $l;
      }
      $hdr->{"Content-Range"} = "bytes */$length";
      $hdr->{"Content-Length"} = $length;
      $self->err(416, "not satisfiable", $hdr, "");

satisfiable:
      # check for segmented downloads
      if ($l && $::NO_SEGMENTED) {
         my $timeout = $::NOW + 15;
         while (keys %{$uri{$self->{remote_id}}{$self->{uri}}} > 1) {
            if ($timeout <= $::NOW) {
               $self->block($::BLOCKTIME, "segmented downloads are forbidden");
               #$self->err_segmented_download;
            } else {
               $httpevent->wait;
            }
         }
      }

      $hdr->{"Content-Range"} = "bytes $l-$h/$length";
      @code = (206, "partial content");
      $length = $h - $l + 1;

ignore:
   } else {
      ($l, $h) = (0, $length - 1);
   }

   $self->{path} =~ /\.([^.]+)$/;
   $hdr->{"Content-Type"} = $mimetype{lc $1} || "application/octet-stream";
   $hdr->{"Content-Length"} = $length;

   $self->response(@code, $hdr, "");

   if ($self->{method} eq "GET") {
      $self->{time} = $::NOW;

      my $current = $Coro::current;

      my ($fh, $buf, $r);

      open $fh, "<", $self->{path}
         or die "$self->{path}: late open failure ($!)";

      $h -= $l - 1;

      if (0) { # !AIO
         if ($l) {
            sysseek $fh, $l, 0;
         }
      }
      
      my $transfer = $queue->start_transfer($h);
      my $locked;
      my $bufsize = $::WAIT_BUFSIZE; # initial buffer size

      while ($h > 0) {
         unless ($locked) {
            if ($locked ||= $transfer->try($::WAIT_INTERVAL)) {
               $bufsize = $::BUFSIZE;
               $self->{time} = $::NOW;
            }
         }

         if ($blocked{$self->{remote_id}}) {
            $self->{h}{connection} = "close";
            die bless {}, err::;
         }

         if (0) { # !AIO
            sysread $fh, $buf, $h > $bufsize ? $bufsize : $h
               or last;
         } else {
            aio_read($fh, $l, ($h > $bufsize ? $bufsize : $h),
                     $buf, 0, sub {
                        $r = $_[0];
                        Coro::ready($current);
                     });
            &Coro::schedule;
            last unless $r;
         }
         my $w = syswrite $self->{fh}, $buf
            or last;
         $::written += $w;
         $self->{written} += $w;
         $l += $r;
      }

      close $fh;
   }
}

1;
Revision:	1.63
Committed:	Wed Jan 23 03:07:05 2002 UTC (22 years, 5 months ago) by root
Content type:	text/plain
Branch:	MAIN
Changes since 1.62:	+20 -9 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.1	use Coro;
2			use Coro::Semaphore;
3			use Coro::Event;
4			use Coro::Socket;
5	root	1.44	use Coro::Signal;
6	root	1.1
7	root	1.32	use HTTP::Date;
8	root	1.47	use POSIX ();
9	root	1.32
10	root	1.63	use Compress::Zlib ();
11
12	root	1.1	no utf8;
13			use bytes;
14
15			# at least on my machine, this thingy serves files
16			# quite a bit faster than apache, ;)
17			# and quite a bit slower than thttpd :(
18
19			$SIG{PIPE} = 'IGNORE';
20	root	1.27
21			our $accesslog;
22	root	1.56	our $errorlog;
23
24			our $NOW;
25			our $HTTP_NOW;
26
27			Event->timer(interval => 1, hard => 1, cb => sub {
28			$NOW = time;
29			$HTTP_NOW = time2str $NOW;
30			})->now;
31
32			if ($ERROR_LOG) {
33			use IO::Handle;
34			open $errorlog, ">>$ERROR_LOG"
35			or die "$ERROR_LOG: $!";
36			$errorlog->autoflush(1);
37			}
38	root	1.27
39			if ($ACCESS_LOG) {
40			use IO::Handle;
41			open $accesslog, ">>$ACCESS_LOG"
42			or die "$ACCESS_LOG: $!";
43			$accesslog->autoflush(1);
44			}
45
46	root	1.1	sub slog {
47			my $level = shift;
48			my $format = shift;
49	root	1.56	my $NOW = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $::NOW);
50			printf "$NOW: $format\n", @_;
51			printf $errorlog "$NOW: $format\n", @_ if $errorlog;
52	root	1.1	}
53
54	root	1.32	our $connections = new Coro::Semaphore $MAX_CONNECTS \|\| 250;
55	root	1.44	our $httpevent = new Coro::Signal;
56	root	1.34
57	root	1.63	our $queue_file = new transferqueue $MAX_TRANSFERS;
58			our $queue_index = new transferqueue 10;
59	root	1.62
60	root	1.6	my @newcons;
61	root	1.1	my @pool;
62
63	root	1.2	# one "execution thread"
64	root	1.1	sub handler {
65			while () {
66	root	1.38	if (@newcons) {
67	root	1.1	eval {
68	root	1.38	conn->new(@{pop @newcons})->handle;
69	root	1.1	};
70			slog 1, "$@" if $@ && !ref $@;
71	root	1.56
72			$httpevent->broadcast; # only for testing, but doesn't matter much
73
74	root	1.1	$connections->up;
75			} else {
76			last if @pool >= $MAX_POOL;
77			push @pool, $Coro::current;
78			schedule;
79			}
80			}
81			}
82
83	root	1.40	sub listen_on {
84			my $listen = $_[0];
85
86			push @listen_sockets, $listen;
87
88			# the "main thread"
89			async {
90			slog 1, "accepting connections";
91			while () {
92			$connections->down;
93			push @newcons, [$listen->accept];
94			#slog 3, "accepted @$connections ".scalar(@pool);
95			if (@pool) {
96			(pop @pool)->ready;
97			} else {
98			async \&handler;
99			}
100
101			}
102			};
103			}
104
105	root	1.4	my $http_port = new Coro::Socket
106			LocalAddr => $SERVER_HOST,
107			LocalPort => $SERVER_PORT,
108			ReuseAddr => 1,
109	root	1.13	Listen => 50,
110	root	1.4	or die "unable to start server";
111
112	root	1.40	listen_on $http_port;
113
114	root	1.41	if ($SERVER_PORT2) {
115			my $http_port = new Coro::Socket
116			LocalAddr => $SERVER_HOST,
117			LocalPort => $SERVER_PORT2,
118			ReuseAddr => 1,
119			Listen => 50,
120			or die "unable to start server";
121	root	1.40
122	root	1.41	listen_on $http_port;
123			}
124	root	1.4
125	root	1.1	package conn;
126
127			use Socket;
128			use HTTP::Date;
129	root	1.2	use Convert::Scalar 'weaken';
130	root	1.16	use Linux::AIO;
131
132			Linux::AIO::min_parallel $::AIO_PARALLEL;
133
134			Event->io(fd => Linux::AIO::poll_fileno,
135	root	1.17	poll => 'r', async => 1,
136	root	1.21	cb => \&Linux::AIO::poll_cb);
137	root	1.16
138	root	1.26	our %conn; # $conn{ip}{self} => connobj
139			our %uri; # $uri{ip}{uri}{self}
140	root	1.3	our %blocked;
141	root	1.9	our %mimetype;
142
143			sub read_mimetypes {
144			local *M;
145	root	1.10	if (open M, "<mime_types") {
146	root	1.9	while (<M>) {
147			if (/^([^#]\S+)\t+(\S+)$/) {
148			$mimetype{lc $1} = $2;
149			}
150			}
151			} else {
152	root	1.10	print "cannot open mime_types\n";
153	root	1.9	}
154			}
155	root	1.1
156	root	1.10	read_mimetypes;
157
158	root	1.1	sub new {
159			my $class = shift;
160	root	1.42	my $fh = shift;
161	root	1.6	my $peername = shift;
162	root	1.2	my $self = bless { fh => $fh }, $class;
163	root	1.6	my (undef, $iaddr) = unpack_sockaddr_in $peername
164			or $self->err(500, "unable to decode peername");
165	root	1.7
166	root	1.50	$self->{remote_addr} =
167			$self->{remote_id} = inet_ntoa $iaddr;
168	root	1.60
169	root	1.11	$self->{time} = $::NOW;
170	root	1.2
171	root	1.49	weaken ($Coro::current->{conn} = $self);
172
173	root	1.13	$::conns++;
174	root	1.53	$::maxconns = $::conns if $::conns > $::maxconns;
175	root	1.13
176	root	1.2	$self;
177			}
178
179			sub DESTROY {
180	root	1.56	#my $self = shift;
181	root	1.13	$::conns--;
182	root	1.1	}
183
184			sub slog {
185	root	1.4	my $self = shift;
186	root	1.50	main::slog($_[0], "$self->{remote_id}> $_[1]");
187	root	1.1	}
188
189	root	1.4	sub response {
190	root	1.1	my ($self, $code, $msg, $hdr, $content) = @_;
191	root	1.17	my $res = "HTTP/1.1 $code $msg\015\012";
192	root	1.63	my $GZ = "";
193	root	1.1
194	root	1.46	if (exists $hdr->{Connection}) {
195			if ($hdr->{Connection} =~ /close/) {
196			$self->{h}{connection} = "close"
197			}
198			} else {
199			if ($self->{version} < 1.1) {
200			if ($self->{h}{connection} =~ /keep-alive/i) {
201			$hdr->{Connection} = "Keep-Alive";
202			} else {
203			$self->{h}{connection} = "close"
204			}
205			}
206			}
207	root	1.28
208	root	1.63	if ($self->{method} ne "HEAD"
209			&& $self->{h}{"accept-encoding"} =~ /\bgzip\b/
210			&& $hdr->{"Content-Length"} == length $content
211			&& !exists $hdr->{"Content-Encoding"}
212			) {
213			my $orig = length $content;
214			$hdr->{"Content-Encoding"} = "gzip";
215			$content = Compress::Zlib::memGzip(\$content);
216			$hdr->{"Content-Length"} = length $content;
217			$GZ = sprintf "GZ%02d", 100 - 100*((length $content) / $orig);
218			}
219
220	root	1.32	$res .= "Date: $HTTP_NOW\015\012";
221	root	1.1
222			while (my ($h, $v) = each %$hdr) {
223			$res .= "$h: $v\015\012"
224			}
225	root	1.10	$res .= "\015\012";
226	root	1.4
227	root	1.13	$res .= $content if defined $content and $self->{method} ne "HEAD";
228	root	1.1
229	root	1.47	my $log = (POSIX::strftime "%Y-%m-%d %H:%M:%S", gmtime $NOW).
230	root	1.63	" $self->{remote_id} \"$self->{uri}\" $code ".$hdr->{"Content-Length"}.$GZ.
231	root	1.50	" \"$self->{h}{referer}\"\n";
232	root	1.27
233			print $accesslog $log if $accesslog;
234			print STDERR $log;
235	root	1.2
236	root	1.11	$self->{written} +=
237			print {$self->{fh}} $res;
238	root	1.1	}
239
240			sub err {
241			my $self = shift;
242			my ($code, $msg, $hdr, $content) = @_;
243
244			unless (defined $content) {
245	root	1.35	$content = "$code $msg\n";
246	root	1.1	$hdr->{"Content-Type"} = "text/plain";
247			$hdr->{"Content-Length"} = length $content;
248			}
249	root	1.17	$hdr->{"Connection"} = "close";
250	root	1.1
251	root	1.4	$self->response($code, $msg, $hdr, $content);
252	root	1.1
253			die bless {}, err::;
254			}
255
256			sub handle {
257			my $self = shift;
258			my $fh = $self->{fh};
259
260	root	1.29	my $host;
261
262	root	1.17	$fh->timeout($::REQ_TIMEOUT);
263			while() {
264			$self->{reqs}++;
265	root	1.1
266			# read request and parse first line
267			my $req = $fh->readline("\015\012\015\012");
268
269	root	1.17	unless (defined $req) {
270			if (exists $self->{version}) {
271			last;
272			} else {
273			$self->err(408, "request timeout");
274			}
275			}
276
277			$self->{h} = {};
278	root	1.1
279	root	1.17	$fh->timeout($::RES_TIMEOUT);
280	root	1.3
281	root	1.1	$req =~ /^(?:\015\012)?
282			(GET\|HEAD) \040+
283			([^\040]+) \040+
284			HTTP\/([0-9]+\.[0-9]+)
285			\015\012/gx
286	root	1.14	or $self->err(405, "method not allowed", { Allow => "GET,HEAD" });
287	root	1.1
288			$self->{method} = $1;
289			$self->{uri} = $2;
290	root	1.17	$self->{version} = $3;
291
292	root	1.20	$3 =~ /^1\./
293	root	1.17	or $self->err(506, "http protocol version $3 not supported");
294	root	1.1
295			# parse headers
296			{
297			my (%hdr, $h, $v);
298
299			$hdr{lc $1} .= ",$2"
300			while $req =~ /\G
301			([^:\000-\040]+):
302	root	1.63	[\010\040]*
303			((?: [^\015\012]+ \| \015\012[\010\040] )*)
304	root	1.1	\015\012
305			/gxc;
306
307			$req =~ /\G\015\012$/
308			or $self->err(400, "bad request");
309
310			$self->{h}{$h} = substr $v, 1
311			while ($h, $v) = each %hdr;
312			}
313
314	root	1.36	# remote id should be unique per user
315			my $id = $self->{remote_addr};
316
317			if (exists $self->{h}{"client-ip"}) {
318			$id .= "[".$self->{h}{"client-ip"}."]";
319			} elsif (exists $self->{h}{"x-forwarded-for"}) {
320			$id .= "[".$self->{h}{"x-forwarded-for"}."]";
321			}
322
323			$self->{remote_id} = $id;
324
325	root	1.56	weaken (local $conn{$id}{$self*1} = $self);
326
327	root	1.36	if ($blocked{$id}) {
328	root	1.56	$self->err_blocked
329			if $blocked{$id}[0] > $::NOW;
330	root	1.36
331			delete $blocked{$id};
332			}
333
334	root	1.29	# find out server name and port
335			if ($self->{uri} =~ s/^http:\/\/([^\/?#]*)//i) {
336			$host = $1;
337			} else {
338			$host = $self->{h}{host};
339			}
340
341			if (defined $host) {
342			$self->{server_port} = $host =~ s/:([0-9]+)$// ? $1 : 80;
343			} else {
344			($self->{server_port}, $host)
345	root	1.43	= unpack_sockaddr_in $self->{fh}->sockname
346	root	1.29	or $self->err(500, "unable to get socket name");
347			$host = inet_ntoa $host;
348			}
349
350			$self->{server_name} = $host;
351
352	root	1.56	weaken (local $uri{$id}{$self->{uri}}{$self*1} = $self);
353	root	1.1
354	root	1.24	eval {
355			$self->map_uri;
356			$self->respond;
357			};
358
359			die if $@ && !ref $@;
360	root	1.17
361	root	1.56	last if $self->{h}{connection} =~ /close/i;
362	root	1.17
363	root	1.44	$httpevent->broadcast;
364
365	root	1.17	$fh->timeout($::PER_TIMEOUT);
366			}
367	root	1.1	}
368
369	root	1.56	sub block {
370			my $self = shift;
371
372			$blocked{$self->{remote_id}} = [$::NOW + $_[0], $_[1]];
373			$self->slog(2, "blocked ip $self->{remote_id}");
374			$self->err_blocked;
375			}
376
377	root	1.1	# uri => path mapping
378			sub map_uri {
379			my $self = shift;
380	root	1.29	my $host = $self->{server_name};
381	root	1.1	my $uri = $self->{uri};
382
383			# some massaging, also makes it more secure
384			$uri =~ s/%([0-9a-fA-F][0-9a-fA-F])/chr hex $1/ge;
385			$uri =~ s%//+%/%g;
386			$uri =~ s%/\.(?=/\|$)%%g;
387			1 while $uri =~ s%/[^/]+/\.\.(?=/\|$)%%;
388
389			$uri =~ m%^/?\.\.(?=/\|$)%
390			and $self->err(400, "bad request");
391
392			$self->{name} = $uri;
393
394			# now do the path mapping
395			$self->{path} = "$::DOCROOT/$host$uri";
396	root	1.7
397			$self->access_check;
398	root	1.1	}
399
400			sub _cgi {
401			my $self = shift;
402			my $path = shift;
403			my $fh;
404
405			# no two-way xxx supported
406			if (0 == fork) {
407			open STDOUT, ">&".fileno($self->{fh});
408			if (chdir $::DOCROOT) {
409			$ENV{SERVER_SOFTWARE} = "thttpd-myhttpd"; # we are thttpd-alike
410	root	1.29	$ENV{HTTP_HOST} = $self->{server_name};
411			$ENV{HTTP_PORT} = $self->{server_port};
412	root	1.1	$ENV{SCRIPT_NAME} = $self->{name};
413	root	1.10	exec $path;
414	root	1.1	}
415			Coro::State::_exit(0);
416			} else {
417	root	1.29	die;
418	root	1.1	}
419			}
420
421	root	1.29	sub server_hostport {
422			$_[0]{server_port} == 80
423			? $_[0]{server_name}
424			: "$_[0]{server_name}:$_[0]{server_port}";
425			}
426
427	root	1.1	sub respond {
428			my $self = shift;
429			my $path = $self->{path};
430
431	root	1.49	if ($self->{name} =~ s%^/internal/([^/]+)%%) {
432			if ($::internal{$1}) {
433			$::internal{$1}->($self);
434			} else {
435			$self->err(404, "not found");
436			}
437			} else {
438	root	1.1
439	root	1.49	stat $path
440			or $self->err(404, "not found");
441	root	1.10
442	root	1.49	$self->{stat} = [stat _];
443	root	1.1
444	root	1.49	# idiotic netscape sends idiotic headers AGAIN
445			my $ims = $self->{h}{"if-modified-since"} =~ /^([^;]+)/
446			? str2time $1 : 0;
447
448			if (-d _ && -r _) {
449			# directory
450			if ($path !~ /\/$/) {
451			# create a redirect to get the trailing "/"
452			# we don't try to avoid the :80
453			$self->err(301, "moved permanently", { Location => "http://".$self->server_hostport."$self->{uri}/" });
454	root	1.25	} else {
455	root	1.49	$ims < $self->{stat}[9]
456			or $self->err(304, "not modified");
457
458			if (-r "$path/index.html") {
459			# replace directory "size" by index.html filesize
460	root	1.55	$self->{stat} = [stat ($self->{path} .= "/index.html")];
461	root	1.52	$self->handle_file($queue_index);
462	root	1.49	} else {
463			$self->handle_dir;
464			}
465	root	1.1	}
466	root	1.49	} elsif (-f _ && -r _) {
467			-x _ and $self->err(403, "forbidden");
468	root	1.56
469	root	1.58	if (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
470	root	1.56	my $timeout = $::NOW + 10;
471	root	1.58	while (keys %{$conn{$self->{remote_id}}} > $::MAX_TRANSFERS_IP) {
472	root	1.56	if ($timeout < $::NOW) {
473			$self->block($::BLOCKTIME, "too many connections");
474			} else {
475			$httpevent->wait;
476			}
477			}
478			}
479
480			$self->handle_file($queue_file);
481	root	1.49	} else {
482			$self->err(404, "not found");
483	root	1.1	}
484			}
485			}
486
487			sub handle_dir {
488			my $self = shift;
489	root	1.10	my $idx = $self->diridx;
490
491			$self->response(200, "ok",
492			{
493			"Content-Type" => "text/html",
494			"Content-Length" => length $idx,
495	root	1.55	"Last-Modified" => time2str ($self->{stat}[9]),
496	root	1.10	},
497			$idx);
498	root	1.1	}
499
500			sub handle_file {
501	root	1.52	my ($self, $queue) = @_;
502	root	1.34	my $length = $self->{stat}[7];
503	root	1.1	my $hdr = {
504			"Last-Modified" => time2str ((stat _)[9]),
505			};
506
507			my @code = (200, "ok");
508			my ($l, $h);
509
510			if ($self->{h}{range} =~ /^bytes=(.*)$/) {
511			for (split /,/, $1) {
512			if (/^-(\d+)$/) {
513			($l, $h) = ($length - $1, $length - 1);
514			} elsif (/^(\d+)-(\d*)$/) {
515			($l, $h) = ($1, ($2 ne "" \|\| $2 >= $length) ? $2 : $length - 1);
516			} else {
517			($l, $h) = (0, $length - 1);
518			goto ignore;
519			}
520	root	1.26	goto satisfiable if $l >= 0 && $l < $length && $h >= 0 && $h >= $l;
521	root	1.1	}
522			$hdr->{"Content-Range"} = "bytes */$length";
523	root	1.24	$hdr->{"Content-Length"} = $length;
524			$self->err(416, "not satisfiable", $hdr, "");
525	root	1.1
526			satisfiable:
527	root	1.4	# check for segmented downloads
528	root	1.10	if ($l && $::NO_SEGMENTED) {
529	root	1.56	my $timeout = $::NOW + 15;
530	root	1.58	while (keys %{$uri{$self->{remote_id}}{$self->{uri}}} > 1) {
531	root	1.56	if ($timeout <= $::NOW) {
532			$self->block($::BLOCKTIME, "segmented downloads are forbidden");
533			#$self->err_segmented_download;
534	root	1.29	} else {
535	root	1.46	$httpevent->wait;
536	root	1.29	}
537	root	1.4	}
538			}
539
540	root	1.1	$hdr->{"Content-Range"} = "bytes $l-$h/$length";
541			@code = (206, "partial content");
542			$length = $h - $l + 1;
543
544			ignore:
545			} else {
546			($l, $h) = (0, $length - 1);
547			}
548
549	root	1.9	$self->{path} =~ /\.([^.]+)$/;
550			$hdr->{"Content-Type"} = $mimetype{lc $1} \|\| "application/octet-stream";
551	root	1.1	$hdr->{"Content-Length"} = $length;
552
553	root	1.4	$self->response(@code, $hdr, "");
554	root	1.1
555			if ($self->{method} eq "GET") {
556	root	1.32	$self->{time} = $::NOW;
557
558	root	1.49	my $current = $Coro::current;
559	root	1.35
560	root	1.49	my ($fh, $buf, $r);
561	root	1.32
562	root	1.1	open $fh, "<", $self->{path}
563			or die "$self->{path}: late open failure ($!)";
564
565			$h -= $l - 1;
566
567	root	1.49	if (0) { # !AIO
568	root	1.19	if ($l) {
569			sysseek $fh, $l, 0;
570			}
571			}
572	root	1.48
573	root	1.56	my $transfer = $queue->start_transfer($h);
574	root	1.51	my $locked;
575	root	1.48	my $bufsize = $::WAIT_BUFSIZE; # initial buffer size
576	root	1.19
577	root	1.1	while ($h > 0) {
578	root	1.51	unless ($locked) {
579			if ($locked \|\|= $transfer->try($::WAIT_INTERVAL)) {
580	root	1.48	$bufsize = $::BUFSIZE;
581			$self->{time} = $::NOW;
582			}
583	root	1.56	}
584
585			if ($blocked{$self->{remote_id}}) {
586			$self->{h}{connection} = "close";
587	root	1.59	die bless {}, err::;
588	root	1.48	}
589
590	root	1.49	if (0) { # !AIO
591	root	1.48	sysread $fh, $buf, $h > $bufsize ? $bufsize : $h
592	root	1.19	or last;
593			} else {
594	root	1.48	aio_read($fh, $l, ($h > $bufsize ? $bufsize : $h),
595	root	1.19	$buf, 0, sub {
596			$r = $_[0];
597	root	1.37	Coro::ready($current);
598	root	1.19	});
599			&Coro::schedule;
600			last unless $r;
601			}
602	root	1.37	my $w = syswrite $self->{fh}, $buf
603	root	1.1	or last;
604	root	1.11	$::written += $w;
605			$self->{written} += $w;
606	root	1.16	$l += $r;
607	root	1.1	}
608	root	1.32
609			close $fh;
610	root	1.1	}
611	root	1.7	}
612
613	root	1.2	1;