mirror of
https://github.com/apache/httpd.git
synced 2026-10-23 22:49:01 +03:00
r1772419 | covener | 2016-12-02 19:10:53 -0500 (Fri, 02 Dec 2016) | 7 lines Merge r1772418 from trunk: loop in checking response headers w/ HTTPProtocolOptions Unsafe ------------------------------------------------------------------------ r1772236 | wrowe | 2016-12-01 11:29:27 -0500 (Thu, 01 Dec 2016) | 8 lines Appears we cannot disallow this whitespace, since the chunk BNF coexisted with the implied *LWS rule, before RFC7230 eliminated the later. Whether this is actually OWS or BWS is an editorial decision beyond our pay grade. Backports: r1765475 Submitted by: wrowe ------------------------------------------------------------------------ r1771697 | rpluem | 2016-11-28 04:59:00 -0500 (Mon, 28 Nov 2016) | 4 lines Merge r1771690 from trunk: * Fix numbers count in comment. ------------------------------------------------------------------------ r1771696 | rpluem | 2016-11-28 04:56:42 -0500 (Mon, 28 Nov 2016) | 1 line * Revert 1771372: As Bill points out correctly. Only backport trunk revisions to this branch. ------------------------------------------------------------------------ r1771372 | rpluem | 2016-11-25 14:55:18 -0500 (Fri, 25 Nov 2016) | 1 line * Fix numbers count in comment. ------------------------------------------------------------------------ r1770870 | wrowe | 2016-11-22 13:44:21 -0500 (Tue, 22 Nov 2016) | 3 lines Optimize away one more strchr. Backports: 1770869 ------------------------------------------------------------------------ r1770868 | wrowe | 2016-11-22 13:34:25 -0500 (Tue, 22 Nov 2016) | 8 lines List discussion resulted in rejecting all but SP characters in the request line, but in the strict mode prioritize excessive space testing over bad space testing (which is captured later) and make both more efficient (at this test ll[0] is already whitespace or \0 char). Also correct a comment. Backports: r1770867 Submitted by: wrowe ------------------------------------------------------------------------ r1770846 | covener | 2016-11-22 09:32:45 -0500 (Tue, 22 Nov 2016) | 5 lines Merge r1770817 from trunk: Removing unused warning after r1764961 changes. ------------------------------------------------------------------------ r1770789 | covener | 2016-11-21 20:58:06 -0500 (Mon, 21 Nov 2016) | 25 lines Merge r1770786 from trunk: remove Location: header checks for absolute URL https://tools.ietf.org/html/rfc7231#section-7.1.2 The "Location" header field is used in some responses to refer to a specific resource in relation to the response. The type of relationship is defined by the combination of request method and status code semantics. Location = URI-reference The field value consists of a single URI-reference. When it has the form of a relative reference ([RFC3986], Section 4.2), the final value is computed by resolving it against the effective request URI ([RFC3986], Section 5). There is even an example with no scheme: Location: /People.html#tim ------------------------------------------------------------------------ r1770386 | wrowe | 2016-11-18 09:45:32 -0500 (Fri, 18 Nov 2016) | 6 lines Backport: r1769965 Submitted by: wrowe, rpluem Actually cause the Host header to be overridden, as noted by rpluem, and simplify now that there isn't a log-only mode. ------------------------------------------------------------------------ r1770173 | wrowe | 2016-11-17 07:09:32 -0500 (Thu, 17 Nov 2016) | 1 line Merge of r1765451 did not apply cleanly, drop unneeded prototype. ------------------------------------------------------------------------ r1769675 | wrowe | 2016-11-14 13:57:12 -0500 (Mon, 14 Nov 2016) | 1 line Add an entry about RFC strictness ------------------------------------------------------------------------ r1769674 | wrowe | 2016-11-14 13:54:42 -0500 (Mon, 14 Nov 2016) | 1 line Clean up CHANGES for clarity ------------------------------------------------------------------------ r1769672 | wrowe | 2016-11-14 13:15:07 -0500 (Mon, 14 Nov 2016) | 31 lines Dropped the never-released ap_has_cntrls() as it had very limited and inefficient application at that, added ap_scan_vchar_obstext() to accomplish a similar purpose. Dropped HttpProtocolOptions StrictURL option, this will be better handled in the future with a specific directive and perhaps multiple levels of scrutiny, use ap_scan_vchar_obstext() to simply ensure there are no control characters or whitespace within the URI. Changed the scanning of the response header table by check_headers() to follow the same rulesets as reading request headers. Disallow any CTL character within a response header value, and any CTL or whitespace in response header field name, even in strict mode. Apply HttpProtocolOptions Strict to chunk header parsing, invalid whitespace is invalid, line termination must follow CRLF convention. Submitted by: wrowe Backport: r1764961,1765112-1765115 When redrawing the parser, ap_get_http_token looked to be useful, but there's no application for this yet in httpd, so hold off adding this function when we backport the enhancements. ap_scan_http_token was entirely sufficient. If the community wants this new function, we can add it when backporting work is complete. This patch, and the earlier patches Friday actually demanded an mmn major bump due to struct member changes. In any final backport, new members must be added to the end of the struct to retain an mmn minor designation. Submitted by: wrowe Backport: r1765451 ------------------------------------------------------------------------ r1769669 | wrowe | 2016-11-14 12:59:10 -0500 (Mon, 14 Nov 2016) | 124 lines Fix syntax Submitted by: jailletc36 Backport: r1756862 Introduce StrictURI|UnsafeURI for RFC3986 enforcement Submitted by: wrowe Backport: r1756959 Surpress noise about syntax Submitted by: wrowe Backport: r1756978 Yann is correct, % is distinct from reserved and unreserved Submitted by: wrowe Backport: r1757062 As commented, ensure we don't flag a request as a rejected 0.9 request if we identified any other parsing errors and handle all 0.9 request errors as 400 BAD REQUEST, presuming HTTP/1.0 to deliver the error details. Do not report 0.9 issues as 505 INVALID PROTOCOL because the client apparently specified no protocol, and 505 post-dates the simple HTTP request mechanism. Submitted by: wrowe Backport: r1757065 Rename LenientWhitespace to UnsafeWhitespace and change StrictWhitespace to the default behavior, after discussion with fielding et al about the purpose of section 3.5. Update the documentation to clarify this. This patch removes whitespace considerations from the Strict|Unsafe toggle and consolidates them all in the StrictWhitespace|UnsafeWhitespace toggle. Added a bunch of logic comments to read_request_line parsing. Dropped the badwhitespace list for an all-or-nothing toggle in rrl. Leading space before the method is optimized to be evaluated only once. Toggled the request from HTTP/0.9 to HTTP/1.0 for more BAD_REQUEST cases. Moved s/[\n\v\f\r]/ / cleanup logic earlier in the cycle, to operate on each individual line read, and catch bad whitespace errors earlier. This changes the obs-fold to more efficiently condense whitespace and forces concatinatination with a single SP, always. Overrides are not necessary since obs-fold is clearly deprecated. Submitted by: wrowe Backport: r1757589 Also catch invalid spaces between the URI <> Protocol in StrictWhitespace mode. (matching the test for the Method <> URI) Submitted by: wrowe Backport: r1757593 Correct RFC reference text (link was right) Submitted by: wrowe Backport: r1757711 First survey results, all intrinsicly bad input will be logged at the debug level, no louder. This patch intentionally dodges the Limit* constrained tests since administrators may shoot themselves in the foot, or be confronted with impossibly long cookie values, etc. Adjust the documentation to match. Submitted by: wrowe Backport: r1757920 Correct URL failure reporting. Drop the second reporting of HEAD over HTTP/0.9 requests, we short-circuit this early now in read_request_line() when presented anything other than the sole "GET" method permitted by spec. Revert to the correct APLOGNO ID for this case Submitted by: wrowe Backport: r1757921, r1757924 Folding StrictWhitespace into the Strict ruleset of RFC7230, per dev@ poll. This choice is unanimous, although StrictURI (a different RFC) still hasn't found absolute concensus. Submitted by: wrowe Backport: r1758226 Correct the parser construction for several optimizations, based on the fact that bad whitespace shall not be permitted or corrected in any operating mode, while preserving the ability to extract bad method/uri/proto for later reporting and diagnostics. This change causes badwhitespace in the request line or any request field line to always fail, and not honor the setting of the HttpProtocolOptions Unsafe option. Mult SP characters or trailing SP characters in the request line are still permitted in Unsafe mode. Adjusted several error message emits to match these changes. Submitted by: wrowe Backport: r1758263 Clarify documentation based on concensus decisions discussed on dev@ and reflecting the current implementation, clean up stray <p> Submitted by: wrowe Backport: r1758265, r1758266 New optional flag to enforce <CR><LF> line delimiters in ap_[r]getline, created by overloading 'int fold' (1 or 0) as 'int flags', with the same value 1 for AP_GETLINE_FOLD (which httpd doesn't use), and a new value 2 for AP_GETLINE_CRLF Enforce CRLF when HttpProtocolOptions Strict is in force. Correctly introduces a new t/TEST fail. Submitted by: wrowe Backport: r1758304 Calm some overly agressive crlf handling, and clarify Submitted by: wrowe Backport: r1758305, r1758313 Review of IE 11, Firefox 48 and Chrome 53 all indicate that ';' URI characters are transmitted unencoded, per RFC3986 section 3.3 grammer. Correct httpd's behavior to not encode ';' in proxied URI's or Location: response headers. Submitted by: wrowe Backport: r1760444 ------------------------------------------------------------------------ r1769664 | wrowe | 2016-11-14 12:07:40 -0500 (Mon, 14 Nov 2016) | 48 lines Drop unused, previously sscanf() target variables Submitted by: wrowe Backport: r1756821 Drop redundant == --rrl_none evaluation Submitted by: rpluem Backport: r1756823 server/protocol.c (read_request_line): Fix compiler warnings with GCC. Submitted by: jorton Backport: r1756824 Correct request header handling of whitespace with the new possible config of HttpProtocolOptions Unsafe StrictWhitespace I have elected not to preserve any significance to excess whitespace in the now-deprecated obs-fold code path, that's certainly open for discussion. This can be reviewed by tweaking t/conf/extra.conf to switch Strict to Unsafe. Submitted by: wrowe Backport: r1756847 A band-aid to resolve an immediate IBM MVS'ism Submitted by: wrowe Backport: r1756849 Resolve Netware (and other arch) build error for non-portable isascii() Submitted by: wrowe Backport: r1756934 Generally, the cart comes before the horse, this mirrors apr_lib.h Submitted by: wrowe Backport: r1756937 After lengthy investigation with covener's assistance, it seems we cannot use a static table. We cannot change this to dynamic use of the local iconv without build changes to avoid such use on cross-platform builds. I'm satisfied if we trust iscntrl to at least catch all the most lethal C0 Ctrls (we are promised it catches bad carriage control/line endings) and leave this in the short term with an XXX to revisit at a future time. The token stop never needed this table, because we can use the affirmative list of token characters to define it. Submitted by: wrowe, covener Backport: r1756946 ------------------------------------------------------------------------ r1769662 | wrowe | 2016-11-14 12:01:20 -0500 (Mon, 14 Nov 2016) | 46 lines Rename the previously undocumented HTTPProtocol directive to EnforceHTTPProtocol, and invert the default behavior to strictly observe RFC 7230 unless otherwise configured. And Document This. The relaxation option is renamed 'Unsafe'. 'Strict' is no longer case sensitive. 'min=0.9|1.0' is now the verbose 'Allow0.9' or 'Require1.0' case-insenstive grammer. The exclusivity tests have been modified to detect conflicts. The 'strict,log' option failed to enforce strict conformance, and has been removed. Unsafe, informational logging is possible in any loadable module, after the request data is unsafely accepted. This triggers a group of failures in t/apache/headers.t as expected since those patterns violated RFC 7230 section 3.2.4. Submitted by: wrowe Backport: r1756540 Correct AP_HTTP_CONFORMANCE_ flags Submitted by: wrowe Backport: r1756555 Renaming this directive to HttpProtocolOptions after discussion on dev@ Submitted by: wrowe Backport: r1756649 Perform correct, strict parsing of the request line, handling the http protocol tag, url and method appropriately, and attempting to extract values even in the presence of unusual whitespace in keeping with section 3.5, prior to responding with whatever error reply is needed. Conforms to RFC7230 in all respects, the section 3.5 optional behavior can be disabled by the user with a new HttpProtocolOptions StrictWhitespace flag. In all cases, the_request is regenerated from the parsed components with exactly two space characters. Shift sf's 'strict' method check from the Strict behavior because it violates forward proxy logic, adding a new RegisteredMethods flag, as it will certainly be useful to some. Submitted by: wrowe Backport: r1756729 ------------------------------------------------------------------------ r1769649 | wrowe | 2016-11-14 10:29:20 -0500 (Mon, 14 Nov 2016) | 124 lines Improve legibility of reviewing the generated table, using hex rather than dec Submitted by: wrowe Backport: r1754536 Correct T_HTTP_TOKEN_STOP per RFC2068 (2.2) - RFC7230 (3.2.6), which has always defined 'token' as CHAR or VCHAR - visible USASCII only. NUL char is also a stop, end of parsing. Submitted by: wrowe Backport: r1754538 Be more explicit about NUL in case iscntrl is inconsistent Submitted by: wrowe Backport: r1754539 Introduce T_HTTP_CTRLS for efficiently finding non-text chars Submitted by: wrowe Backport: r1754540 Introduce ap_scan_http_field_content, ap_scan_http_token and ap_get_http_token [later reverted] for more efficient string handling. Submitted by: wrowe Backport: r1754541 With NUL as a TOKEN_STOP, this code is more efficient Submitted by: wrowe Backport: r1754544 We arrive here for more than one cause; offer a more general statement Submitted by: wrowe Backport: r1754547 Strictly observe spec on obs-fold Submitted by: wrowe Backport: r1754548 Leave an emphatic TODO per Jeff's observations Submitted by: trawick Backport: r1754555 Introduce ap_scan_http_token / ap_scan_http_field_content for a much more efficient pass through the header text; rather than reparsing the strings over and over under the HTTP_CONFORMANCE_STRICT fules. Improve logic and legibility by eliminating multiple repetitive tests of the STRICT flag, and simply reorder 'classic' behavior first and this new parser second to simplify the diff. Because of the whitespace change (which I had wished to dodge), reading this --ignore-all-space is a whole lot easier. Particularly against 2.4.x branch, which is now identical in the 'classic' logic flow. Both of which I'll share with dev@ Submitted by: wrowe Backport: r1754556 Friendly catch by Rüdiger, restore line mis-removed by the previous commit Submitted by: rpluem Backport: r1754568 Clean up doubled-'{' Correct usage for ap_scan_http_token (had used _get_ syntax) Correct logic, detect no 'token' chars, or missing ':' Submitted by: wrowe, rpluem Backport: r1754569,r1754570,r1754577 Replacement solution to identify VCHAR/ASCII symbols, even in EBCDIC. Looking for someone with an EBCDIC environment to post the output of the test_char.h generated file for verification. Submitted by: wrowe Backport: r1754579 Clean up an edge case where obs-fold continuation preceeds the first header, as with r1755098, but this time ensure the previous header processing logic ensures there was a previous header as identified by jchampion. This patch restructures the loop for legibility with a loop continuation, allowing us to flatten all of this hard-to-follow code. The subsequent patch will be a whitespace-only change for formatting. Testing len > 0 is redundant when *field is a "\0" and mismatches here, folded flag was a no-op, unused once we added continue; logic. Fix these as initially attempted in r1755114. Improve comments and reflow whitespace. Submitted by: wrowe Backport: r1755123,r1755124,r1755125,r1755126 As promised, reduce this logic by net 9 code lines, shifting the burden of killing trailing whitespace to the purpose-agnostic read logic. Whitespace before or after an obs-fold, and before or after a field value have no semantic purpose at all. Because we are building a buffer for all folded values, reducing the size of the newly allocated buffer is always to our advantage. Submitted by: wrowe Backport: r1755233 Treat empty obs-fold line as a noop, eliminate all intra-obs-fold excess whitespace, and observe the 1 SP per obs-folding per spec. Submitted by: wrowe Backport: r1755234,r1755235,r1755236 Treat empty obs-fold line as abusive traffic. Submitted by: wrowe Backport: r1755263 Stop reflecting irrelevant data to the request error notes, particularly for abusive and malformed traffic the non-technical consumer of a user-agent has no control over. Simply take note where the administrator-configured limits have been exceeded, that administrator can find details in the error log if desired. Submitted by: wrowe Backport: r1755264 Follow up to r1755264. Don't crash when ap_rgetline() returns a NULL field on ENOSPC. Submitted by: ylavic Backport: r1755343 Follow on to r1755264, for the case of merged header length exceptions, and ensure the field header name is truncated to a sane log width. Submitted by: wrowe Backport: r1755744 ------------------------------------------------------------------------ r1769454 | wrowe | 2016-11-12 18:47:29 -0500 (Sat, 12 Nov 2016) | 2 lines Partial Backport of r1746884, no-op changes that introduce patch conflicts. ------------------------------------------------------------------------ r1768978 | wrowe | 2016-11-09 09:39:05 -0500 (Wed, 09 Nov 2016) | 5 lines Backports: r1687643 Submitted by: covener be less weird in comment ------------------------------------------------------------------------ r1768977 | wrowe | 2016-11-09 09:37:34 -0500 (Wed, 09 Nov 2016) | 5 lines Backports: r1687642 Submitted by: covener elaborate on a misleading comment ------------------------------------------------------------------------ r1768971 | wrowe | 2016-11-09 09:32:09 -0500 (Wed, 09 Nov 2016) | 8 lines core: Follow up to r1664205 (previously backported) Don't let invalid r->proto_num/protocol out of read_request_line() reach the output filters (when responding with 400 Bad Request). Suggested by: rpluem Backports: r1664576 ------------------------------------------------------------------------ r1768969 | wrowe | 2016-11-09 09:23:00 -0500 (Wed, 09 Nov 2016) | 10 lines Backport: r1610383 Submitted by: jailletc36 Simplify code. Cases where 'loc' doesn't have any ':' or is starting with ':' are already handled by 'ap_is_url()' Calling 'apr_isascii()' seems useless. ------------------------------------------------------------------------ r1768968 | wrowe | 2016-11-09 09:20:45 -0500 (Wed, 09 Nov 2016) | 4 lines Backport: r1546860 Submitted by: jailletc36 Fix missing space in message of protocol.c (other r1546860 changes ignored) ------------------------------------------------------------------------ r1768093 | wrowe | 2016-11-04 16:50:45 -0400 (Fri, 04 Nov 2016) | 7 lines ap_rgetline_core() now pulls from r->proto_input_filters for better input filtering behavior during chunked trailer processing by ap_http_filter(). Backports: r1446421 Submitted by: joes ------------------------------------------------------------------------ r1768090 | wrowe | 2016-11-04 16:47:00 -0400 (Fri, 04 Nov 2016) | 7 lines Stupid CodeWarrior compiler cant take vars with struct inits. Ensure that is_v6literal is always initialized Backports: r1428145, r1436457 Submitted by: fuankg, rpluem ------------------------------------------------------------------------ r1768036 | wrowe | 2016-11-04 10:20:16 -0400 (Fri, 04 Nov 2016) | 40 lines Add an option to enforce stricter HTTP conformance This is a first stab, the checks will likely have to be revised. For now, we check * if the request line contains control characters * if the request uri has fragment or username/password * that the request method is standard or registered with RegisterHttpMethod * that the request protocol is of the form HTTP/[1-9]+.[0-9]+, or missing for 0.9 * if there is garbage in the request line after the protocol * if any request header contains control characters * if any request header has an empty name * for the host name in the URL or Host header: - if an IPv4 dotted decimal address: Reject octal or hex values, require exactly four parts - if a DNS host name: Reject non-alphanumeric characters besides '.' and '-'. As a side effect, this rejects multiple Host headers. * if any response header contains control characters * if any response header has an empty name * that the Location response header (if present) has a valid scheme and is absolute If we have a host name both from the URL and the Host header, we replace the Host header with the value from the URL to enforce RFC conformance. There is a log-only mode, but the loglevels of the logged messages need some thought/work. Currently, the checks for incoming data log for 'core' and the checks for outgoing data log for 'http'. Maybe we need a way to configure the loglevels separately from the core/http loglevels. change protocol number parsing in strict mode according to HTTPbis draft - only accept single digit version components - don't accept white-space after protocol specification Clean up comment, fix log tags. Submitted by: sf Backports: r1426877, r1426879, r1426988, r1426992 ------------------------------------------------------------------------ r1768035 | wrowe | 2016-11-04 10:14:59 -0400 (Fri, 04 Nov 2016) | 14 lines Correctly parse an IPv6 literal host specification in an absolute URL in the request line. - Fix handling of brackets [ ] surrounding the IPv6 address. - Skip parsing r->hostname again if not necessary. - Do some checks that the IPv6 address is sane. This is not done by apr_parse_addr_port(). log client error at level debug, log broken Host header value Backports: r1407006, r1426827 Submitted by: sf ------------------------------------------------------------------------ r1767942 | wrowe | 2016-11-03 14:01:23 -0400 (Thu, 03 Nov 2016) | 5 lines Expose ap_method_register() to the admin with a new RegisterHttpMethod directive. Backports: r1407599 Submitted by: sf ------------------------------------------------------------------------ r1767941 | wrowe | 2016-11-03 13:57:50 -0400 (Thu, 03 Nov 2016) | 9 lines New directive HttpProtocol which allows to disable HTTP/0.9 support with min=0.9|1.0 syntax. A tighter restriction off the version in the request line is still possible with <If "%{SERVER_PROTOCOL_NUM} ..."> . Submitted by: sf Backports: r1406719, r1407643, r1425366 ------------------------------------------------------------------------ r1767912 | wrowe | 2016-11-03 11:55:18 -0400 (Thu, 03 Nov 2016) | 1 line Branch to bring http protocol parsing in 2.4.x in sync with trunk ------------------------------------------------------------------------ git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1772678 13f79535-47bb-0310-9956-ffa450edef68
1050 lines
35 KiB
C
1050 lines
35 KiB
C
/* Licensed to the Apache Software Foundation (ASF) under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The ASF licenses this file to You under the Apache License, Version 2.0
|
|
* (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
/**
|
|
* @file http_core.h
|
|
* @brief CORE HTTP Daemon
|
|
*
|
|
* @defgroup APACHE_CORE_HTTPD Core HTTP Daemon
|
|
* @ingroup APACHE_CORE
|
|
* @{
|
|
*/
|
|
|
|
#ifndef APACHE_HTTP_CORE_H
|
|
#define APACHE_HTTP_CORE_H
|
|
|
|
#include "apr.h"
|
|
#include "apr_hash.h"
|
|
#include "apr_optional.h"
|
|
#include "util_filter.h"
|
|
#include "ap_expr.h"
|
|
#include "apr_tables.h"
|
|
|
|
#include "http_config.h"
|
|
|
|
#if APR_HAVE_STRUCT_RLIMIT
|
|
#include <sys/time.h>
|
|
#include <sys/resource.h>
|
|
#endif
|
|
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/* ****************************************************************
|
|
*
|
|
* The most basic server code is encapsulated in a single module
|
|
* known as the core, which is just *barely* functional enough to
|
|
* serve documents, though not terribly well.
|
|
*
|
|
* Largely for NCSA back-compatibility reasons, the core needs to
|
|
* make pieces of its config structures available to other modules.
|
|
* The accessors are declared here, along with the interpretation
|
|
* of one of them (allow_options).
|
|
*/
|
|
|
|
/**
|
|
* @defgroup APACHE_CORE_HTTPD_ACESSORS Acessors
|
|
*
|
|
* @brief File/Directory Accessor directives
|
|
*
|
|
* @{
|
|
*/
|
|
|
|
/** No directives */
|
|
#define OPT_NONE 0
|
|
/** Indexes directive */
|
|
#define OPT_INDEXES 1
|
|
/** SSI is enabled without exec= permission */
|
|
#define OPT_INCLUDES 2
|
|
/** FollowSymLinks directive */
|
|
#define OPT_SYM_LINKS 4
|
|
/** ExecCGI directive */
|
|
#define OPT_EXECCGI 8
|
|
/** directive unset */
|
|
#define OPT_UNSET 16
|
|
/** SSI exec= permission is permitted, iff OPT_INCLUDES is also set */
|
|
#define OPT_INC_WITH_EXEC 32
|
|
/** SymLinksIfOwnerMatch directive */
|
|
#define OPT_SYM_OWNER 64
|
|
/** MultiViews directive */
|
|
#define OPT_MULTI 128
|
|
/** All directives */
|
|
#define OPT_ALL (OPT_INDEXES|OPT_INCLUDES|OPT_INC_WITH_EXEC|OPT_SYM_LINKS|OPT_EXECCGI)
|
|
/** @} */
|
|
|
|
/**
|
|
* @defgroup get_remote_host Remote Host Resolution
|
|
* @ingroup APACHE_CORE_HTTPD
|
|
* @{
|
|
*/
|
|
/** REMOTE_HOST returns the hostname, or NULL if the hostname
|
|
* lookup fails. It will force a DNS lookup according to the
|
|
* HostnameLookups setting.
|
|
*/
|
|
#define REMOTE_HOST (0)
|
|
|
|
/** REMOTE_NAME returns the hostname, or the dotted quad if the
|
|
* hostname lookup fails. It will force a DNS lookup according
|
|
* to the HostnameLookups setting.
|
|
*/
|
|
#define REMOTE_NAME (1)
|
|
|
|
/** REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is
|
|
* never forced.
|
|
*/
|
|
#define REMOTE_NOLOOKUP (2)
|
|
|
|
/** REMOTE_DOUBLE_REV will always force a DNS lookup, and also force
|
|
* a double reverse lookup, regardless of the HostnameLookups
|
|
* setting. The result is the (double reverse checked) hostname,
|
|
* or NULL if any of the lookups fail.
|
|
*/
|
|
#define REMOTE_DOUBLE_REV (3)
|
|
|
|
/** @} // get_remote_host */
|
|
|
|
/** all of the requirements must be met */
|
|
#define SATISFY_ALL 0
|
|
/** any of the requirements must be met */
|
|
#define SATISFY_ANY 1
|
|
/** There are no applicable satisfy lines */
|
|
#define SATISFY_NOSPEC 2
|
|
|
|
/** Make sure we don't write less than 8000 bytes at any one time.
|
|
*/
|
|
#define AP_MIN_BYTES_TO_WRITE 8000
|
|
|
|
/** default maximum of internal redirects */
|
|
# define AP_DEFAULT_MAX_INTERNAL_REDIRECTS 10
|
|
|
|
/** default maximum subrequest nesting level */
|
|
# define AP_DEFAULT_MAX_SUBREQ_DEPTH 10
|
|
|
|
/**
|
|
* Retrieve the value of Options for this request
|
|
* @param r The current request
|
|
* @return the Options bitmask
|
|
*/
|
|
AP_DECLARE(int) ap_allow_options(request_rec *r);
|
|
|
|
/**
|
|
* Retrieve the value of the AllowOverride for this request
|
|
* @param r The current request
|
|
* @return the overrides bitmask
|
|
*/
|
|
AP_DECLARE(int) ap_allow_overrides(request_rec *r);
|
|
|
|
/**
|
|
* Retrieve the document root for this server
|
|
* @param r The current request
|
|
* @warning Don't use this! If your request went through a Userdir, or
|
|
* something like that, it'll screw you. But it's back-compatible...
|
|
* @return The document root
|
|
*/
|
|
AP_DECLARE(const char *) ap_document_root(request_rec *r);
|
|
|
|
/**
|
|
* Lookup the remote user agent's DNS name or IP address
|
|
* @ingroup get_remote_hostname
|
|
* @param req The current request
|
|
* @param type The type of lookup to perform. One of:
|
|
* <pre>
|
|
* REMOTE_HOST returns the hostname, or NULL if the hostname
|
|
* lookup fails. It will force a DNS lookup according to the
|
|
* HostnameLookups setting.
|
|
* REMOTE_NAME returns the hostname, or the dotted quad if the
|
|
* hostname lookup fails. It will force a DNS lookup according
|
|
* to the HostnameLookups setting.
|
|
* REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is
|
|
* never forced.
|
|
* REMOTE_DOUBLE_REV will always force a DNS lookup, and also force
|
|
* a double reverse lookup, regardless of the HostnameLookups
|
|
* setting. The result is the (double reverse checked)
|
|
* hostname, or NULL if any of the lookups fail.
|
|
* </pre>
|
|
* @param str_is_ip unless NULL is passed, this will be set to non-zero on
|
|
* output when an IP address string is returned
|
|
* @return The remote hostname (based on the request useragent_ip)
|
|
*/
|
|
AP_DECLARE(const char *) ap_get_useragent_host(request_rec *req, int type,
|
|
int *str_is_ip);
|
|
|
|
/**
|
|
* Lookup the remote client's DNS name or IP address
|
|
* @ingroup get_remote_host
|
|
* @param conn The current connection
|
|
* @param dir_config The directory config vector from the request
|
|
* @param type The type of lookup to perform. One of:
|
|
* <pre>
|
|
* REMOTE_HOST returns the hostname, or NULL if the hostname
|
|
* lookup fails. It will force a DNS lookup according to the
|
|
* HostnameLookups setting.
|
|
* REMOTE_NAME returns the hostname, or the dotted quad if the
|
|
* hostname lookup fails. It will force a DNS lookup according
|
|
* to the HostnameLookups setting.
|
|
* REMOTE_NOLOOKUP is like REMOTE_NAME except that a DNS lookup is
|
|
* never forced.
|
|
* REMOTE_DOUBLE_REV will always force a DNS lookup, and also force
|
|
* a double reverse lookup, regardless of the HostnameLookups
|
|
* setting. The result is the (double reverse checked)
|
|
* hostname, or NULL if any of the lookups fail.
|
|
* </pre>
|
|
* @param str_is_ip unless NULL is passed, this will be set to non-zero on output when an IP address
|
|
* string is returned
|
|
* @return The remote hostname (based on the connection client_ip)
|
|
*/
|
|
AP_DECLARE(const char *) ap_get_remote_host(conn_rec *conn, void *dir_config, int type, int *str_is_ip);
|
|
|
|
/**
|
|
* Retrieve the login name of the remote user. Undef if it could not be
|
|
* determined
|
|
* @param r The current request
|
|
* @return The user logged in to the client machine
|
|
*/
|
|
AP_DECLARE(const char *) ap_get_remote_logname(request_rec *r);
|
|
|
|
/* Used for constructing self-referencing URLs, and things like SERVER_PORT,
|
|
* and SERVER_NAME.
|
|
*/
|
|
/**
|
|
* build a fully qualified URL from the uri and information in the request rec
|
|
* @param p The pool to allocate the URL from
|
|
* @param uri The path to the requested file
|
|
* @param r The current request
|
|
* @return A fully qualified URL
|
|
*/
|
|
AP_DECLARE(char *) ap_construct_url(apr_pool_t *p, const char *uri, request_rec *r);
|
|
|
|
/**
|
|
* Get the current server name from the request
|
|
* @param r The current request
|
|
* @return the server name
|
|
*/
|
|
AP_DECLARE(const char *) ap_get_server_name(request_rec *r);
|
|
|
|
/**
|
|
* Get the current server name from the request for the purposes
|
|
* of using in a URL. If the server name is an IPv6 literal
|
|
* address, it will be returned in URL format (e.g., "[fe80::1]").
|
|
* @param r The current request
|
|
* @return the server name
|
|
*/
|
|
AP_DECLARE(const char *) ap_get_server_name_for_url(request_rec *r);
|
|
|
|
/**
|
|
* Get the current server port
|
|
* @param r The current request
|
|
* @return The server's port
|
|
*/
|
|
AP_DECLARE(apr_port_t) ap_get_server_port(const request_rec *r);
|
|
|
|
/**
|
|
* Return the limit on bytes in request msg body
|
|
* @param r The current request
|
|
* @return the maximum number of bytes in the request msg body
|
|
*/
|
|
AP_DECLARE(apr_off_t) ap_get_limit_req_body(const request_rec *r);
|
|
|
|
/**
|
|
* Return the limit on bytes in XML request msg body
|
|
* @param r The current request
|
|
* @return the maximum number of bytes in XML request msg body
|
|
*/
|
|
AP_DECLARE(apr_size_t) ap_get_limit_xml_body(const request_rec *r);
|
|
|
|
/**
|
|
* Install a custom response handler for a given status
|
|
* @param r The current request
|
|
* @param status The status for which the custom response should be used
|
|
* @param string The custom response. This can be a static string, a file
|
|
* or a URL
|
|
*/
|
|
AP_DECLARE(void) ap_custom_response(request_rec *r, int status, const char *string);
|
|
|
|
/**
|
|
* Check if the current request is beyond the configured max. number of redirects or subrequests
|
|
* @param r The current request
|
|
* @return true (is exceeded) or false
|
|
*/
|
|
AP_DECLARE(int) ap_is_recursion_limit_exceeded(const request_rec *r);
|
|
|
|
/**
|
|
* Check for a definition from the server command line
|
|
* @param name The define to check for
|
|
* @return 1 if defined, 0 otherwise
|
|
*/
|
|
AP_DECLARE(int) ap_exists_config_define(const char *name);
|
|
/* FIXME! See STATUS about how */
|
|
AP_DECLARE_NONSTD(int) ap_core_translate(request_rec *r);
|
|
|
|
/* Authentication stuff. This is one of the places where compatibility
|
|
* with the old config files *really* hurts; they don't discriminate at
|
|
* all between different authentication schemes, meaning that we need
|
|
* to maintain common state for all of them in the core, and make it
|
|
* available to the other modules through interfaces.
|
|
*/
|
|
|
|
/** @see require_line */
|
|
typedef struct require_line require_line;
|
|
|
|
/**
|
|
* @brief A structure to keep track of authorization requirements
|
|
*/
|
|
struct require_line {
|
|
/** Where the require line is in the config file. */
|
|
apr_int64_t method_mask;
|
|
/** The complete string from the command line */
|
|
char *requirement;
|
|
};
|
|
|
|
/**
|
|
* Return the type of authorization required for this request
|
|
* @param r The current request
|
|
* @return The authorization required
|
|
*/
|
|
AP_DECLARE(const char *) ap_auth_type(request_rec *r);
|
|
|
|
/**
|
|
* Return the current Authorization realm
|
|
* @param r The current request
|
|
* @return The current authorization realm
|
|
*/
|
|
AP_DECLARE(const char *) ap_auth_name(request_rec *r);
|
|
|
|
/**
|
|
* How the requires lines must be met.
|
|
* @param r The current request
|
|
* @return How the requirements must be met. One of:
|
|
* <pre>
|
|
* SATISFY_ANY -- any of the requirements must be met.
|
|
* SATISFY_ALL -- all of the requirements must be met.
|
|
* SATISFY_NOSPEC -- There are no applicable satisfy lines
|
|
* </pre>
|
|
*/
|
|
AP_DECLARE(int) ap_satisfies(request_rec *r);
|
|
|
|
/**
|
|
* Core is also unlike other modules in being implemented in more than
|
|
* one file... so, data structures are declared here, even though most of
|
|
* the code that cares really is in http_core.c. Also, another accessor.
|
|
*/
|
|
AP_DECLARE_DATA extern module core_module;
|
|
|
|
/**
|
|
* Accessor for core_module's specific data. Equivalent to
|
|
* ap_get_module_config(cv, &core_module) but more efficient.
|
|
* @param cv The vector in which the modules configuration is stored.
|
|
* usually r->per_dir_config or s->module_config
|
|
* @return The module-specific data
|
|
*/
|
|
AP_DECLARE(void *) ap_get_core_module_config(const ap_conf_vector_t *cv);
|
|
|
|
/**
|
|
* Accessor to set core_module's specific data. Equivalent to
|
|
* ap_set_module_config(cv, &core_module, val) but more efficient.
|
|
* @param cv The vector in which the modules configuration is stored.
|
|
* usually r->per_dir_config or s->module_config
|
|
* @param val The module-specific data to set
|
|
*/
|
|
AP_DECLARE(void) ap_set_core_module_config(ap_conf_vector_t *cv, void *val);
|
|
|
|
/** Get the socket from the core network filter. This should be used instead of
|
|
* accessing the core connection config directly.
|
|
* @param c The connection record
|
|
* @return The socket
|
|
*/
|
|
AP_DECLARE(apr_socket_t *) ap_get_conn_socket(conn_rec *c);
|
|
|
|
#ifndef AP_DEBUG
|
|
#define AP_CORE_MODULE_INDEX 0
|
|
#define ap_get_core_module_config(v) \
|
|
(((void **)(v))[AP_CORE_MODULE_INDEX])
|
|
#define ap_set_core_module_config(v, val) \
|
|
((((void **)(v))[AP_CORE_MODULE_INDEX]) = (val))
|
|
#else
|
|
#define AP_CORE_MODULE_INDEX (AP_DEBUG_ASSERT(core_module.module_index == 0), 0)
|
|
#endif
|
|
|
|
/**
|
|
* @brief Per-request configuration
|
|
*/
|
|
typedef struct {
|
|
/** bucket brigade used by getline for look-ahead and
|
|
* ap_get_client_block for holding left-over request body */
|
|
struct apr_bucket_brigade *bb;
|
|
|
|
/** an array of per-request working data elements, accessed
|
|
* by ID using ap_get_request_note()
|
|
* (Use ap_register_request_note() during initialization
|
|
* to add elements)
|
|
*/
|
|
void **notes;
|
|
|
|
/** Custom response strings registered via ap_custom_response(),
|
|
* or NULL; check per-dir config if nothing found here
|
|
*/
|
|
char **response_code_strings; /* from ap_custom_response(), not from
|
|
* ErrorDocument
|
|
*/
|
|
|
|
/** per-request document root of the server. This allows mass vhosting
|
|
* modules better compatibility with some scripts. Normally the
|
|
* context_* info should be used instead */
|
|
const char *document_root;
|
|
|
|
/*
|
|
* more fine-grained context information which is set by modules like
|
|
* mod_alias and mod_userdir
|
|
*/
|
|
/** the context root directory on disk for the current resource,
|
|
* without trailing slash
|
|
*/
|
|
const char *context_document_root;
|
|
/** the URI prefix that corresponds to the context_document_root directory,
|
|
* without trailing slash
|
|
*/
|
|
const char *context_prefix;
|
|
|
|
/** There is a script processor installed on the output filter chain,
|
|
* so it needs the default_handler to deliver a (script) file into
|
|
* the chain so it can process it. Normally, default_handler only
|
|
* serves files on a GET request (assuming the file is actual content),
|
|
* since other methods are not content-retrieval. This flag overrides
|
|
* that behavior, stating that the "content" is actually a script and
|
|
* won't actually be delivered as the response for the non-GET method.
|
|
*/
|
|
int deliver_script;
|
|
|
|
/** Should addition of charset= be suppressed for this request?
|
|
*/
|
|
int suppress_charset;
|
|
} core_request_config;
|
|
|
|
/* Standard entries that are guaranteed to be accessible via
|
|
* ap_get_request_note() for each request (additional entries
|
|
* can be added with ap_register_request_note())
|
|
*/
|
|
#define AP_NOTE_DIRECTORY_WALK 0
|
|
#define AP_NOTE_LOCATION_WALK 1
|
|
#define AP_NOTE_FILE_WALK 2
|
|
#define AP_NOTE_IF_WALK 3
|
|
#define AP_NUM_STD_NOTES 4
|
|
|
|
/**
|
|
* Reserve an element in the core_request_config->notes array
|
|
* for some application-specific data
|
|
* @return An integer key that can be passed to ap_get_request_note()
|
|
* during request processing to access this element for the
|
|
* current request.
|
|
*/
|
|
AP_DECLARE(apr_size_t) ap_register_request_note(void);
|
|
|
|
/**
|
|
* Retrieve a pointer to an element in the core_request_config->notes array
|
|
* @param r The request
|
|
* @param note_num A key for the element: either a value obtained from
|
|
* ap_register_request_note() or one of the predefined AP_NOTE_*
|
|
* values.
|
|
* @return NULL if the note_num is invalid, otherwise a pointer to the
|
|
* requested note element.
|
|
* @remark At the start of a request, each note element is NULL. The
|
|
* handle provided by ap_get_request_note() is a pointer-to-pointer
|
|
* so that the caller can point the element to some app-specific
|
|
* data structure. The caller should guarantee that any such
|
|
* structure will last as long as the request itself.
|
|
*/
|
|
AP_DECLARE(void **) ap_get_request_note(request_rec *r, apr_size_t note_num);
|
|
|
|
|
|
typedef unsigned char allow_options_t;
|
|
typedef unsigned int overrides_t;
|
|
|
|
/*
|
|
* Bits of info that go into making an ETag for a file
|
|
* document. Why a long? Because char historically
|
|
* proved too short for Options, and int can be different
|
|
* sizes on different platforms.
|
|
*/
|
|
typedef unsigned long etag_components_t;
|
|
|
|
#define ETAG_UNSET 0
|
|
#define ETAG_NONE (1 << 0)
|
|
#define ETAG_MTIME (1 << 1)
|
|
#define ETAG_INODE (1 << 2)
|
|
#define ETAG_SIZE (1 << 3)
|
|
#define ETAG_ALL (ETAG_MTIME | ETAG_INODE | ETAG_SIZE)
|
|
/* This is the default value used */
|
|
#define ETAG_BACKWARD (ETAG_MTIME | ETAG_SIZE)
|
|
|
|
/* Generic ON/OFF/UNSET for unsigned int foo :2 */
|
|
#define AP_CORE_CONFIG_OFF (0)
|
|
#define AP_CORE_CONFIG_ON (1)
|
|
#define AP_CORE_CONFIG_UNSET (2)
|
|
|
|
/* Generic merge of flag */
|
|
#define AP_CORE_MERGE_FLAG(field, to, base, over) to->field = \
|
|
over->field != AP_CORE_CONFIG_UNSET \
|
|
? over->field \
|
|
: base->field
|
|
|
|
/**
|
|
* @brief Server Signature Enumeration
|
|
*/
|
|
typedef enum {
|
|
srv_sig_unset,
|
|
srv_sig_off,
|
|
srv_sig_on,
|
|
srv_sig_withmail
|
|
} server_signature_e;
|
|
|
|
/**
|
|
* @brief Per-directory configuration
|
|
*/
|
|
typedef struct {
|
|
/** path of the directory/regex/etc. see also d_is_fnmatch/absolute below */
|
|
char *d;
|
|
/** the number of slashes in d */
|
|
unsigned d_components;
|
|
|
|
/** If (opts & OPT_UNSET) then no absolute assignment to options has
|
|
* been made.
|
|
* invariant: (opts_add & opts_remove) == 0
|
|
* Which said another way means that the last relative (options + or -)
|
|
* assignment made to each bit is recorded in exactly one of opts_add
|
|
* or opts_remove.
|
|
*/
|
|
allow_options_t opts;
|
|
allow_options_t opts_add;
|
|
allow_options_t opts_remove;
|
|
overrides_t override;
|
|
allow_options_t override_opts;
|
|
|
|
/* Used to be the custom response config. No longer used. */
|
|
char **response_code_strings; /* from ErrorDocument, not from
|
|
* ap_custom_response() */
|
|
|
|
/* Hostname resolution etc */
|
|
#define HOSTNAME_LOOKUP_OFF 0
|
|
#define HOSTNAME_LOOKUP_ON 1
|
|
#define HOSTNAME_LOOKUP_DOUBLE 2
|
|
#define HOSTNAME_LOOKUP_UNSET 3
|
|
unsigned int hostname_lookups : 4;
|
|
|
|
unsigned int content_md5 : 2; /* calculate Content-MD5? */
|
|
|
|
#define USE_CANONICAL_NAME_OFF (0)
|
|
#define USE_CANONICAL_NAME_ON (1)
|
|
#define USE_CANONICAL_NAME_DNS (2)
|
|
#define USE_CANONICAL_NAME_UNSET (3)
|
|
unsigned use_canonical_name : 2;
|
|
|
|
/* since is_fnmatch(conf->d) was being called so frequently in
|
|
* directory_walk() and its relatives, this field was created and
|
|
* is set to the result of that call.
|
|
*/
|
|
unsigned d_is_fnmatch : 1;
|
|
|
|
/* should we force a charset on any outgoing parameterless content-type?
|
|
* if so, which charset?
|
|
*/
|
|
#define ADD_DEFAULT_CHARSET_OFF (0)
|
|
#define ADD_DEFAULT_CHARSET_ON (1)
|
|
#define ADD_DEFAULT_CHARSET_UNSET (2)
|
|
unsigned add_default_charset : 2;
|
|
const char *add_default_charset_name;
|
|
|
|
/* System Resource Control */
|
|
#ifdef RLIMIT_CPU
|
|
struct rlimit *limit_cpu;
|
|
#endif
|
|
#if defined (RLIMIT_DATA) || defined (RLIMIT_VMEM) || defined(RLIMIT_AS)
|
|
struct rlimit *limit_mem;
|
|
#endif
|
|
#ifdef RLIMIT_NPROC
|
|
struct rlimit *limit_nproc;
|
|
#endif
|
|
apr_off_t limit_req_body; /* limit on bytes in request msg body */
|
|
long limit_xml_body; /* limit on bytes in XML request msg body */
|
|
|
|
/* logging options */
|
|
|
|
server_signature_e server_signature;
|
|
|
|
/* Access control */
|
|
apr_array_header_t *sec_file;
|
|
apr_array_header_t *sec_if;
|
|
ap_regex_t *r;
|
|
|
|
const char *mime_type; /* forced with ForceType */
|
|
const char *handler; /* forced by something other than SetHandler */
|
|
const char *output_filters; /* forced with SetOutputFilters */
|
|
const char *input_filters; /* forced with SetInputFilters */
|
|
int accept_path_info; /* forced with AcceptPathInfo */
|
|
|
|
/*
|
|
* What attributes/data should be included in ETag generation?
|
|
*/
|
|
etag_components_t etag_bits;
|
|
etag_components_t etag_add;
|
|
etag_components_t etag_remove;
|
|
|
|
/*
|
|
* Run-time performance tuning
|
|
*/
|
|
#define ENABLE_MMAP_OFF (0)
|
|
#define ENABLE_MMAP_ON (1)
|
|
#define ENABLE_MMAP_UNSET (2)
|
|
unsigned int enable_mmap : 2; /* whether files in this dir can be mmap'ed */
|
|
|
|
#define ENABLE_SENDFILE_OFF (0)
|
|
#define ENABLE_SENDFILE_ON (1)
|
|
#define ENABLE_SENDFILE_UNSET (2)
|
|
unsigned int enable_sendfile : 2; /* files in this dir can be sendfile'ed */
|
|
|
|
#define USE_CANONICAL_PHYS_PORT_OFF (0)
|
|
#define USE_CANONICAL_PHYS_PORT_ON (1)
|
|
#define USE_CANONICAL_PHYS_PORT_UNSET (2)
|
|
unsigned int use_canonical_phys_port : 2;
|
|
|
|
unsigned int allow_encoded_slashes : 1; /* URLs may contain %2f w/o being
|
|
* pitched indiscriminately */
|
|
unsigned int decode_encoded_slashes : 1; /* whether to decode encoded slashes in URLs */
|
|
|
|
#define AP_CONDITION_IF 1
|
|
#define AP_CONDITION_ELSE 2
|
|
#define AP_CONDITION_ELSEIF (AP_CONDITION_ELSE|AP_CONDITION_IF)
|
|
unsigned int condition_ifelse : 2; /* is this an <If>, <ElseIf>, or <Else> */
|
|
|
|
ap_expr_info_t *condition; /* Conditionally merge <If> sections */
|
|
|
|
/** per-dir log config */
|
|
struct ap_logconf *log;
|
|
|
|
/** Table of directives allowed per AllowOverrideList */
|
|
apr_table_t *override_list;
|
|
|
|
#define AP_MAXRANGES_UNSET -1
|
|
#define AP_MAXRANGES_DEFAULT -2
|
|
#define AP_MAXRANGES_UNLIMITED -3
|
|
#define AP_MAXRANGES_NORANGES 0
|
|
/** Number of Ranges before returning HTTP_OK. **/
|
|
int max_ranges;
|
|
/** Max number of Range overlaps (merges) allowed **/
|
|
int max_overlaps;
|
|
/** Max number of Range reversals (eg: 200-300, 100-125) allowed **/
|
|
int max_reversals;
|
|
|
|
/** Named back references */
|
|
apr_array_header_t *refs;
|
|
|
|
/** Custom response config with expression support. The hash table
|
|
* contains compiled expressions keyed against the custom response
|
|
* code.
|
|
*/
|
|
apr_hash_t *response_code_exprs;
|
|
|
|
#define AP_CGI_PASS_AUTH_OFF (0)
|
|
#define AP_CGI_PASS_AUTH_ON (1)
|
|
#define AP_CGI_PASS_AUTH_UNSET (2)
|
|
/** CGIPassAuth: Whether HTTP authorization headers will be passed to
|
|
* scripts as CGI variables; affects all modules calling
|
|
* ap_add_common_vars(), as well as any others using this field as
|
|
* advice
|
|
*/
|
|
unsigned int cgi_pass_auth : 2;
|
|
unsigned int qualify_redirect_url :2;
|
|
ap_expr_info_t *expr_handler; /* forced with SetHandler */
|
|
|
|
/** Table of rules for building CGI variables, NULL if none configured */
|
|
apr_hash_t *cgi_var_rules;
|
|
} core_dir_config;
|
|
|
|
/* macro to implement off by default behaviour */
|
|
#define AP_SENDFILE_ENABLED(x) \
|
|
((x) == ENABLE_SENDFILE_ON ? APR_SENDFILE_ENABLED : 0)
|
|
|
|
/* Per-server core configuration */
|
|
|
|
typedef struct {
|
|
|
|
char *gprof_dir;
|
|
|
|
/* Name translations --- we want the core to be able to do *something*
|
|
* so it's at least a minimally functional web server on its own (and
|
|
* can be tested that way). But let's keep it to the bare minimum:
|
|
*/
|
|
const char *ap_document_root;
|
|
|
|
/* Access control */
|
|
|
|
char *access_name;
|
|
apr_array_header_t *sec_dir;
|
|
apr_array_header_t *sec_url;
|
|
|
|
/* recursion backstopper */
|
|
int redirect_limit; /* maximum number of internal redirects */
|
|
int subreq_limit; /* maximum nesting level of subrequests */
|
|
|
|
const char *protocol;
|
|
apr_table_t *accf_map;
|
|
|
|
/* array of ap_errorlog_format_item for error log format string */
|
|
apr_array_header_t *error_log_format;
|
|
/*
|
|
* two arrays of arrays of ap_errorlog_format_item for additional information
|
|
* logged to the error log once per connection/request
|
|
*/
|
|
apr_array_header_t *error_log_conn;
|
|
apr_array_header_t *error_log_req;
|
|
|
|
/* TRACE control */
|
|
#define AP_TRACE_UNSET -1
|
|
#define AP_TRACE_DISABLE 0
|
|
#define AP_TRACE_ENABLE 1
|
|
#define AP_TRACE_EXTENDED 2
|
|
int trace_enable;
|
|
#define AP_MERGE_TRAILERS_UNSET 0
|
|
#define AP_MERGE_TRAILERS_ENABLE 1
|
|
#define AP_MERGE_TRAILERS_DISABLE 2
|
|
int merge_trailers;
|
|
|
|
apr_array_header_t *protocols;
|
|
int protocols_honor_order;
|
|
|
|
#define AP_HTTP09_UNSET 0
|
|
#define AP_HTTP09_ENABLE 1
|
|
#define AP_HTTP09_DISABLE 2
|
|
char http09_enable;
|
|
|
|
#define AP_HTTP_CONFORMANCE_UNSET 0
|
|
#define AP_HTTP_CONFORMANCE_UNSAFE 1
|
|
#define AP_HTTP_CONFORMANCE_STRICT 2
|
|
char http_conformance;
|
|
|
|
#define AP_HTTP_METHODS_UNSET 0
|
|
#define AP_HTTP_METHODS_LENIENT 1
|
|
#define AP_HTTP_METHODS_REGISTERED 2
|
|
char http_methods;
|
|
|
|
} core_server_config;
|
|
|
|
/* for AddOutputFiltersByType in core.c */
|
|
void ap_add_output_filters_by_type(request_rec *r);
|
|
|
|
/* for http_config.c */
|
|
void ap_core_reorder_directories(apr_pool_t *, server_rec *);
|
|
|
|
/* for mod_perl */
|
|
AP_CORE_DECLARE(void) ap_add_per_dir_conf(server_rec *s, void *dir_config);
|
|
AP_CORE_DECLARE(void) ap_add_per_url_conf(server_rec *s, void *url_config);
|
|
AP_CORE_DECLARE(void) ap_add_file_conf(apr_pool_t *p, core_dir_config *conf, void *url_config);
|
|
AP_CORE_DECLARE(const char *) ap_add_if_conf(apr_pool_t *p, core_dir_config *conf, void *url_config);
|
|
AP_CORE_DECLARE_NONSTD(const char *) ap_limit_section(cmd_parms *cmd, void *dummy, const char *arg);
|
|
|
|
/* Core filters; not exported. */
|
|
apr_status_t ap_core_input_filter(ap_filter_t *f, apr_bucket_brigade *b,
|
|
ap_input_mode_t mode, apr_read_type_e block,
|
|
apr_off_t readbytes);
|
|
apr_status_t ap_core_output_filter(ap_filter_t *f, apr_bucket_brigade *b);
|
|
|
|
|
|
AP_DECLARE(const char*) ap_get_server_protocol(server_rec* s);
|
|
AP_DECLARE(void) ap_set_server_protocol(server_rec* s, const char* proto);
|
|
|
|
typedef struct core_output_filter_ctx core_output_filter_ctx_t;
|
|
typedef struct core_filter_ctx core_ctx_t;
|
|
|
|
typedef struct core_net_rec {
|
|
/** Connection to the client */
|
|
apr_socket_t *client_socket;
|
|
|
|
/** connection record */
|
|
conn_rec *c;
|
|
|
|
core_output_filter_ctx_t *out_ctx;
|
|
core_ctx_t *in_ctx;
|
|
} core_net_rec;
|
|
|
|
/**
|
|
* Insert the network bucket into the core input filter's input brigade.
|
|
* This hook is intended for MPMs or protocol modules that need to do special
|
|
* socket setup.
|
|
* @param c The connection
|
|
* @param bb The brigade to insert the bucket into
|
|
* @param socket The socket to put into a bucket
|
|
* @return AP_DECLINED if the current function does not handle this connection,
|
|
* APR_SUCCESS or an error otherwise.
|
|
*/
|
|
AP_DECLARE_HOOK(apr_status_t, insert_network_bucket,
|
|
(conn_rec *c, apr_bucket_brigade *bb, apr_socket_t *socket))
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* Runtime status/management
|
|
*/
|
|
|
|
typedef enum {
|
|
ap_mgmt_type_string,
|
|
ap_mgmt_type_long,
|
|
ap_mgmt_type_hash
|
|
} ap_mgmt_type_e;
|
|
|
|
typedef union {
|
|
const char *s_value;
|
|
long i_value;
|
|
apr_hash_t *h_value;
|
|
} ap_mgmt_value;
|
|
|
|
typedef struct {
|
|
const char *description;
|
|
const char *name;
|
|
ap_mgmt_type_e vtype;
|
|
ap_mgmt_value v;
|
|
} ap_mgmt_item_t;
|
|
|
|
/* Handles for core filters */
|
|
AP_DECLARE_DATA extern ap_filter_rec_t *ap_subreq_core_filter_handle;
|
|
AP_DECLARE_DATA extern ap_filter_rec_t *ap_core_output_filter_handle;
|
|
AP_DECLARE_DATA extern ap_filter_rec_t *ap_content_length_filter_handle;
|
|
AP_DECLARE_DATA extern ap_filter_rec_t *ap_core_input_filter_handle;
|
|
|
|
/**
|
|
* This hook provdes a way for modules to provide metrics/statistics about
|
|
* their operational status.
|
|
*
|
|
* @param p A pool to use to create entries in the hash table
|
|
* @param val The name of the parameter(s) that is wanted. This is
|
|
* tree-structured would be in the form ('*' is all the tree,
|
|
* 'module.*' all of the module , 'module.foo.*', or
|
|
* 'module.foo.bar' )
|
|
* @param ht The hash table to store the results. Keys are item names, and
|
|
* the values point to ap_mgmt_item_t structures.
|
|
* @ingroup hooks
|
|
*/
|
|
AP_DECLARE_HOOK(int, get_mgmt_items,
|
|
(apr_pool_t *p, const char * val, apr_hash_t *ht))
|
|
|
|
/* ---------------------------------------------------------------------- */
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* I/O logging with mod_logio
|
|
*/
|
|
|
|
APR_DECLARE_OPTIONAL_FN(void, ap_logio_add_bytes_out,
|
|
(conn_rec *c, apr_off_t bytes));
|
|
|
|
APR_DECLARE_OPTIONAL_FN(void, ap_logio_add_bytes_in,
|
|
(conn_rec *c, apr_off_t bytes));
|
|
|
|
APR_DECLARE_OPTIONAL_FN(apr_off_t, ap_logio_get_last_bytes, (conn_rec *c));
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* Error log formats
|
|
*/
|
|
|
|
/**
|
|
* The info structure passed to callback functions of errorlog handlers.
|
|
* Not all information is available in all contexts. In particular, all
|
|
* pointers may be NULL.
|
|
*/
|
|
typedef struct ap_errorlog_info {
|
|
/** current server_rec.
|
|
* Should be preferred over c->base_server and r->server
|
|
*/
|
|
const server_rec *s;
|
|
|
|
/** current conn_rec.
|
|
* Should be preferred over r->connection
|
|
*/
|
|
const conn_rec *c;
|
|
|
|
/** current request_rec. */
|
|
const request_rec *r;
|
|
/** r->main if r is a subrequest, otherwise equal to r */
|
|
const request_rec *rmain;
|
|
|
|
/** pool passed to ap_log_perror, NULL otherwise */
|
|
apr_pool_t *pool;
|
|
|
|
/** name of source file where the log message was produced, NULL if N/A. */
|
|
const char *file;
|
|
/** line number in the source file, 0 if N/A */
|
|
int line;
|
|
|
|
/** module index of module that produced the log message, APLOG_NO_MODULE if N/A. */
|
|
int module_index;
|
|
/** log level of error message (flags like APLOG_STARTUP have been removed), -1 if N/A */
|
|
int level;
|
|
|
|
/** apr error status related to the log message, 0 if no error */
|
|
apr_status_t status;
|
|
|
|
/** 1 if logging to syslog, 0 otherwise */
|
|
int using_syslog;
|
|
/** 1 if APLOG_STARTUP was set for the log message, 0 otherwise */
|
|
int startup;
|
|
|
|
/** message format */
|
|
const char *format;
|
|
} ap_errorlog_info;
|
|
|
|
/**
|
|
* callback function prototype for a external errorlog handler
|
|
* @note To avoid unbounded memory usage, these functions must not allocate
|
|
* memory from the server, connection, or request pools. If an errorlog
|
|
* handler absolutely needs a pool to pass to other functions, it must create
|
|
* and destroy a sub-pool.
|
|
*/
|
|
typedef int ap_errorlog_handler_fn_t(const ap_errorlog_info *info,
|
|
const char *arg, char *buf, int buflen);
|
|
|
|
/**
|
|
* Register external errorlog handler
|
|
* @param p config pool to use
|
|
* @param tag the new format specifier (i.e. the letter after the %)
|
|
* @param handler the handler function
|
|
* @param flags flags (reserved, set to 0)
|
|
*/
|
|
AP_DECLARE(void) ap_register_errorlog_handler(apr_pool_t *p, char *tag,
|
|
ap_errorlog_handler_fn_t *handler,
|
|
int flags);
|
|
|
|
typedef struct ap_errorlog_handler {
|
|
ap_errorlog_handler_fn_t *func;
|
|
int flags; /* for future extensions */
|
|
} ap_errorlog_handler;
|
|
|
|
/** item starts a new field */
|
|
#define AP_ERRORLOG_FLAG_FIELD_SEP 1
|
|
/** item is the actual error message */
|
|
#define AP_ERRORLOG_FLAG_MESSAGE 2
|
|
/** skip whole line if item is zero-length */
|
|
#define AP_ERRORLOG_FLAG_REQUIRED 4
|
|
/** log zero-length item as '-' */
|
|
#define AP_ERRORLOG_FLAG_NULL_AS_HYPHEN 8
|
|
|
|
typedef struct {
|
|
/** ap_errorlog_handler function */
|
|
ap_errorlog_handler_fn_t *func;
|
|
/** argument passed to item in {} */
|
|
const char *arg;
|
|
/** a combination of the AP_ERRORLOG_* flags */
|
|
unsigned int flags;
|
|
/** only log item if the message's log level is higher than this */
|
|
unsigned int min_loglevel;
|
|
} ap_errorlog_format_item;
|
|
|
|
/**
|
|
* hook method to log error messages
|
|
* @ingroup hooks
|
|
* @param info pointer to ap_errorlog_info struct which contains all
|
|
* the details
|
|
* @param errstr the (unformatted) message to log
|
|
* @warning Allocating from the usual pools (pool, info->c->pool, info->p->pool)
|
|
* must be avoided because it can cause memory leaks.
|
|
* Use a subpool if necessary.
|
|
*/
|
|
AP_DECLARE_HOOK(void, error_log, (const ap_errorlog_info *info,
|
|
const char *errstr))
|
|
|
|
AP_CORE_DECLARE(void) ap_register_log_hooks(apr_pool_t *p);
|
|
AP_CORE_DECLARE(void) ap_register_config_hooks(apr_pool_t *p);
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* ident lookups with mod_ident
|
|
*/
|
|
|
|
APR_DECLARE_OPTIONAL_FN(const char *, ap_ident_lookup,
|
|
(request_rec *r));
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* authorization values with mod_authz_core
|
|
*/
|
|
|
|
APR_DECLARE_OPTIONAL_FN(int, authz_some_auth_required, (request_rec *r));
|
|
APR_DECLARE_OPTIONAL_FN(const char *, authn_ap_auth_type, (request_rec *r));
|
|
APR_DECLARE_OPTIONAL_FN(const char *, authn_ap_auth_name, (request_rec *r));
|
|
|
|
/* ----------------------------------------------------------------------
|
|
*
|
|
* authorization values with mod_access_compat
|
|
*/
|
|
|
|
APR_DECLARE_OPTIONAL_FN(int, access_compat_ap_satisfies, (request_rec *r));
|
|
|
|
/* ---------------------------------------------------------------------- */
|
|
|
|
/** Query the server for some state information
|
|
* @param query_code Which information is requested
|
|
* @return the requested state information
|
|
*/
|
|
AP_DECLARE(int) ap_state_query(int query_code);
|
|
|
|
/*
|
|
* possible values for query_code in ap_state_query()
|
|
*/
|
|
|
|
/** current status of the server */
|
|
#define AP_SQ_MAIN_STATE 0
|
|
/** are we going to serve requests or are we just testing/dumping config */
|
|
#define AP_SQ_RUN_MODE 1
|
|
/** generation of the top-level apache parent */
|
|
#define AP_SQ_CONFIG_GEN 2
|
|
|
|
/*
|
|
* return values for ap_state_query()
|
|
*/
|
|
|
|
/** return value for unknown query_code */
|
|
#define AP_SQ_NOT_SUPPORTED -1
|
|
|
|
/* values returned for AP_SQ_MAIN_STATE */
|
|
/** before the config preflight */
|
|
#define AP_SQ_MS_INITIAL_STARTUP 1
|
|
/** initial configuration run for setting up log config, etc. */
|
|
#define AP_SQ_MS_CREATE_PRE_CONFIG 2
|
|
/** tearing down configuration */
|
|
#define AP_SQ_MS_DESTROY_CONFIG 3
|
|
/** normal configuration run */
|
|
#define AP_SQ_MS_CREATE_CONFIG 4
|
|
/** running the MPM */
|
|
#define AP_SQ_MS_RUN_MPM 5
|
|
/** cleaning up for exit */
|
|
#define AP_SQ_MS_EXITING 6
|
|
|
|
/* values returned for AP_SQ_RUN_MODE */
|
|
/** command line not yet parsed */
|
|
#define AP_SQ_RM_UNKNOWN 1
|
|
/** normal operation (server requests or signal server) */
|
|
#define AP_SQ_RM_NORMAL 2
|
|
/** config test only */
|
|
#define AP_SQ_RM_CONFIG_TEST 3
|
|
/** only dump some parts of the config */
|
|
#define AP_SQ_RM_CONFIG_DUMP 4
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* !APACHE_HTTP_CORE_H */
|
|
/** @} */
|