mirror of
https://github.com/apache/httpd.git
synced 2025-08-27 16:41:57 +03:00
ship with VC++ 5.0. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@86200 13f79535-47bb-0310-9956-ffa450edef68
889 lines
31 KiB
C
889 lines
31 KiB
C
/* ====================================================================
|
|
* The Apache Software License, Version 1.1
|
|
*
|
|
* Copyright (c) 2000 The Apache Software Foundation. All rights
|
|
* reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. The end-user documentation included with the redistribution,
|
|
* if any, must include the following acknowledgment:
|
|
* "This product includes software developed by the
|
|
* Apache Software Foundation (http://www.apache.org/)."
|
|
* Alternately, this acknowledgment may appear in the software itself,
|
|
* if and wherever such third-party acknowledgments normally appear.
|
|
*
|
|
* 4. The names "Apache" and "Apache Software Foundation" must
|
|
* not be used to endorse or promote products derived from this
|
|
* software without prior written permission. For written
|
|
* permission, please contact apache@apache.org.
|
|
*
|
|
* 5. Products derived from this software may not be called "Apache",
|
|
* nor may "Apache" appear in their name, without prior written
|
|
* permission of the Apache Software Foundation.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
|
|
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
* DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
|
|
* USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
|
* OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
* ====================================================================
|
|
*
|
|
* This software consists of voluntary contributions made by many
|
|
* individuals on behalf of the Apache Software Foundation. For more
|
|
* information on the Apache Software Foundation, please see
|
|
* <http://www.apache.org/>.
|
|
*
|
|
* Portions of this software are based upon public domain software
|
|
* originally written at the National Center for Supercomputing Applications,
|
|
* University of Illinois, Urbana-Champaign.
|
|
*/
|
|
|
|
/*
|
|
* mod_isapi.c - Internet Server Application (ISA) module for Apache
|
|
* by Alexei Kosut <akosut@apache.org>
|
|
*
|
|
* This module implements Microsoft's ISAPI, allowing Apache (when running
|
|
* under Windows) to load Internet Server Applications (ISAPI extensions).
|
|
* It implements all of the ISAPI 2.0 specification, except for the
|
|
* "Microsoft-only" extensions dealing with asynchronous I/O. All ISAPI
|
|
* extensions that use only synchronous I/O and are compatible with the
|
|
* ISAPI 2.0 specification should work (most ISAPI 1.0 extensions should
|
|
* function as well).
|
|
*
|
|
* To load, simply place the ISA in a location in the document tree.
|
|
* Then add an "AddHandler isapi-isa dll" into your config file.
|
|
* You should now be able to load ISAPI DLLs just be reffering to their
|
|
* URLs. Make sure the ExecCGI option is active in the directory
|
|
* the ISA is in.
|
|
*/
|
|
|
|
#include "ap_config.h"
|
|
#include "httpd.h"
|
|
#include "http_config.h"
|
|
#include "http_core.h"
|
|
#include "http_protocol.h"
|
|
#include "http_request.h"
|
|
#include "http_log.h"
|
|
#include "util_script.h"
|
|
#include "apr_portable.h"
|
|
#include "apr_strings.h"
|
|
|
|
|
|
/* We use the exact same header file as the original */
|
|
#include <HttpExt.h>
|
|
|
|
/* TODO: Unknown errors that must be researched for correct codes */
|
|
|
|
#define TODO_ERROR 1
|
|
|
|
/* Seems IIS does not enforce the requirement for \r\n termination on HSE_REQ_SEND_RESPONSE_HEADER,
|
|
define this to conform */
|
|
#define RELAX_HEADER_RULE
|
|
|
|
module isapi_module;
|
|
|
|
/* Declare the ISAPI functions */
|
|
|
|
BOOL WINAPI GetServerVariable (HCONN hConn, LPSTR lpszVariableName,
|
|
LPVOID lpvBuffer, LPDWORD lpdwSizeofBuffer);
|
|
BOOL WINAPI WriteClient (HCONN ConnID, LPVOID Buffer, LPDWORD lpwdwBytes,
|
|
DWORD dwReserved);
|
|
BOOL WINAPI ReadClient (HCONN ConnID, LPVOID lpvBuffer, LPDWORD lpdwSize);
|
|
BOOL WINAPI ServerSupportFunction (HCONN hConn, DWORD dwHSERequest,
|
|
LPVOID lpvBuffer, LPDWORD lpdwSize,
|
|
LPDWORD lpdwDataType);
|
|
|
|
/*
|
|
The optimiser blows it totally here. What happens is that autos are addressed relative to the
|
|
stack pointer, which, of course, moves around. The optimiser seems to lose track of it somewhere
|
|
between setting HttpExtensionProc's address and calling through it. We work around the problem by
|
|
forcing it to use frame pointers.
|
|
|
|
The revisions below may eliminate this artifact.
|
|
*/
|
|
#pragma optimize("y",off)
|
|
|
|
/* Our loaded isapi module description structure */
|
|
|
|
typedef struct {
|
|
HINSTANCE handle;
|
|
HSE_VERSION_INFO *pVer;
|
|
PFN_GETEXTENSIONVERSION GetExtensionVersion;
|
|
PFN_HTTPEXTENSIONPROC HttpExtensionProc;
|
|
PFN_TERMINATEEXTENSION TerminateExtension;
|
|
int refcount;
|
|
DWORD timeout;
|
|
BOOL fakeasync;
|
|
DWORD reportversion;
|
|
} isapi_loaded;
|
|
|
|
/* Our "Connection ID" structure */
|
|
|
|
typedef struct {
|
|
LPEXTENSION_CONTROL_BLOCK ecb;
|
|
isapi_loaded *isa;
|
|
request_rec *r;
|
|
PFN_HSE_IO_COMPLETION completion;
|
|
PVOID completion_arg;
|
|
HANDLE complete;
|
|
apr_status_t retval;
|
|
} isapi_cid;
|
|
|
|
apr_status_t isapi_handler (request_rec *r)
|
|
{
|
|
apr_table_t *e = r->subprocess_env;
|
|
isapi_loaded *isa;
|
|
isapi_cid *cid;
|
|
|
|
/* Use similar restrictions as CGIs
|
|
*
|
|
* If this fails, it's pointless to load the isapi dll.
|
|
*/
|
|
if (!(ap_allow_options(r) & OPT_EXECCGI))
|
|
return HTTP_FORBIDDEN;
|
|
|
|
if (r->finfo.protection == 0)
|
|
return HTTP_NOT_FOUND;
|
|
|
|
if (r->finfo.filetype == APR_DIR)
|
|
return HTTP_FORBIDDEN;
|
|
|
|
/* Load the module
|
|
*
|
|
* TODO: Critical section
|
|
*
|
|
* Warning: cid should not be allocated from pool if we
|
|
* cache the isapi process in-memory.
|
|
*
|
|
* This code could use cacheing... everything that follows
|
|
* should only be performed on the first isapi dll invocation,
|
|
* not with every HttpExtensionProc()
|
|
*/
|
|
isa = apr_pcalloc(r->pool, sizeof(isapi_module));
|
|
isa->pVer = apr_pcalloc(r->pool, sizeof(HSE_VERSION_INFO));
|
|
isa->refcount = 0;
|
|
|
|
/* TODO: These may need to become overrideable, so that we
|
|
* assure a given isapi can be fooled into behaving well.
|
|
*/
|
|
isa->timeout = INFINITE; /* microsecs */
|
|
isa->fakeasync = TRUE;
|
|
isa->reportversion = MAKELONG(0, 5); /* Revision 5.0 */
|
|
|
|
if (!(isa->handle = LoadLibraryEx(r->filename, NULL,
|
|
LOAD_WITH_ALTERED_SEARCH_PATH))) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ALERT, GetLastError(), r,
|
|
"ISAPI %s failed to load", r->filename);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
if (!(isa->GetExtensionVersion =
|
|
(void *)(GetProcAddress(isa->handle, "GetExtensionVersion")))) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ALERT, GetLastError(), r,
|
|
"ISAPI %s is missing GetExtensionVersion()",
|
|
r->filename);
|
|
FreeLibrary(isa->handle);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
if (!(isa->HttpExtensionProc =
|
|
(void *)(GetProcAddress(isa->handle, "HttpExtensionProc")))) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_ALERT, GetLastError(), r,
|
|
"ISAPI %s is missing HttpExtensionProc()",
|
|
r->filename);
|
|
FreeLibrary(isa->handle);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
/* TerminateExtension() is an optional interface */
|
|
|
|
isa->TerminateExtension = (void *)(GetProcAddress(isa->handle, "TerminateExtension"));
|
|
|
|
/* Run GetExtensionVersion() */
|
|
|
|
if (!(*isa->GetExtensionVersion)(isa->pVer)) {
|
|
/* ### euh... we're passing the wrong type of error code here */
|
|
ap_log_rerror(APLOG_MARK, APLOG_ALERT, HTTP_INTERNAL_SERVER_ERROR, r,
|
|
"ISAPI %s call GetExtensionVersion() failed",
|
|
r->filename);
|
|
FreeLibrary(isa->handle);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
/* Load of this module completed, this is the point at which *isa
|
|
* could be cached for later invocation.
|
|
*
|
|
* on to invoking this request...
|
|
*/
|
|
|
|
/* Set up variables */
|
|
ap_add_common_vars(r);
|
|
ap_add_cgi_vars(r);
|
|
|
|
/* Set up connection structure and ecb */
|
|
cid = apr_pcalloc(r->pool, sizeof(isapi_cid));
|
|
cid->ecb = apr_pcalloc(r->pool, sizeof(struct _EXTENSION_CONTROL_BLOCK));
|
|
cid->ecb->ConnID = (HCONN)cid;
|
|
/* TODO: Critical section */
|
|
++isa->refcount;
|
|
cid->isa = isa;
|
|
cid->r = r;
|
|
cid->r->status = 0;
|
|
cid->complete = NULL;
|
|
cid->completion = NULL;
|
|
cid->retval = APR_SUCCESS;
|
|
|
|
cid->ecb->cbSize = sizeof(EXTENSION_CONTROL_BLOCK);
|
|
cid->ecb->dwVersion = isa->reportversion;
|
|
cid->ecb->dwHttpStatusCode = 0;
|
|
strcpy(cid->ecb->lpszLogData, "");
|
|
// TODO: are copies really needed here?
|
|
cid->ecb->lpszMethod = apr_pstrdup(r->pool, (char*) r->method);
|
|
cid->ecb->lpszQueryString = apr_pstrdup(r->pool,
|
|
(char*) apr_table_get(e, "QUERY_STRING"));
|
|
cid->ecb->lpszPathInfo = apr_pstrdup(r->pool,
|
|
(char*) apr_table_get(e, "PATH_INFO"));
|
|
cid->ecb->lpszPathTranslated = apr_pstrdup(r->pool,
|
|
(char*) apr_table_get(e, "PATH_TRANSLATED"));
|
|
cid->ecb->lpszContentType = apr_pstrdup(r->pool,
|
|
(char*) apr_table_get(e, "CONTENT_TYPE"));
|
|
/* Set up the callbacks */
|
|
cid->ecb->GetServerVariable = &GetServerVariable;
|
|
cid->ecb->WriteClient = &WriteClient;
|
|
cid->ecb->ReadClient = &ReadClient;
|
|
cid->ecb->ServerSupportFunction = &ServerSupportFunction;
|
|
|
|
|
|
/* Set up client input */
|
|
cid->retval = ap_setup_client_block(r, REQUEST_CHUNKED_ERROR);
|
|
if (cid->retval) {
|
|
if (isa->TerminateExtension) {
|
|
(*isa->TerminateExtension)(HSE_TERM_MUST_UNLOAD);
|
|
}
|
|
FreeLibrary(isa->handle);
|
|
return cid->retval;
|
|
}
|
|
|
|
if (ap_should_client_block(r)) {
|
|
/* Unlike IIS, which limits this to 48k, we read the whole
|
|
* sucker in. I suppose this could be bad for memory if someone
|
|
* uploaded the complete works of Shakespeare. Well, WebSite
|
|
* does the same thing.
|
|
*
|
|
* But we can be smarter and read up to our 48k and then allow
|
|
* the ISAPI app to read further blocks as desired.
|
|
*/
|
|
long to_read = atol(apr_table_get(e, "CONTENT_LENGTH"));
|
|
long read;
|
|
|
|
/* Actually, let's cap it at 48k, until we figure out what
|
|
* to do with this... we don't want a Content-Length: 1000000000
|
|
* taking out the machine.
|
|
*/
|
|
|
|
if (to_read > 49152) {
|
|
if (isa->TerminateExtension)
|
|
(*isa->TerminateExtension)(HSE_TERM_MUST_UNLOAD);
|
|
FreeLibrary(isa->handle);
|
|
return HTTP_REQUEST_ENTITY_TOO_LARGE;
|
|
}
|
|
|
|
cid->ecb->lpbData = apr_pcalloc(r->pool, 1 + to_read);
|
|
|
|
if ((read = ap_get_client_block(r, cid->ecb->lpbData, to_read)) < 0) {
|
|
if (isa->TerminateExtension)
|
|
(*isa->TerminateExtension)(HSE_TERM_MUST_UNLOAD);
|
|
FreeLibrary(isa->handle);
|
|
return HTTP_INTERNAL_SERVER_ERROR;
|
|
}
|
|
|
|
/* Although its not to spec, IIS seems to null-terminate
|
|
* its lpdData string. So we will too. To make sure
|
|
* cbAvailable matches cbTotalBytes, we'll up the latter
|
|
* and equalize them.
|
|
*/
|
|
cid->ecb->cbAvailable = cid->ecb->cbTotalBytes = read + 1;
|
|
cid->ecb->lpbData[read] = '\0';
|
|
}
|
|
else {
|
|
cid->ecb->cbTotalBytes = 0;
|
|
cid->ecb->cbAvailable = 0;
|
|
cid->ecb->lpbData = NULL;
|
|
}
|
|
|
|
/* All right... try and run the sucker */
|
|
cid->retval = (*isa->HttpExtensionProc)(cid->ecb);
|
|
|
|
/* Set the status (for logging) */
|
|
if (cid->ecb->dwHttpStatusCode) {
|
|
cid->r->status = cid->ecb->dwHttpStatusCode;
|
|
}
|
|
|
|
/* Check for a log message - and log it */
|
|
if (cid->ecb->lpszLogData && *cid->ecb->lpszLogData)
|
|
ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,
|
|
"ISAPI %s: %s", r->filename, cid->ecb->lpszLogData);
|
|
|
|
switch(cid->retval) {
|
|
case HSE_STATUS_SUCCESS:
|
|
case HSE_STATUS_SUCCESS_AND_KEEP_CONN:
|
|
/* Ignore the keepalive stuff; Apache handles it just fine without
|
|
* the ISA's "advice".
|
|
* Per Microsoft: "In IIS versions 4.0 and later, the return
|
|
* values HSE_STATUS_SUCCESS and HSE_STATUS_SUCCESS_AND_KEEP_CONN
|
|
* are functionally identical: Keep-Alive connections are
|
|
* maintained, if supported by the client."
|
|
* ... so we were pat all this time
|
|
*/
|
|
break;
|
|
|
|
case HSE_STATUS_PENDING:
|
|
/* emulating async behavior...
|
|
*
|
|
* Create a cid->completed event and wait on it for some timeout
|
|
* so that the app thinks is it running async.
|
|
*
|
|
* All async ServerSupportFunction calls will be handled through
|
|
* the registered IO_COMPLETION hook.
|
|
*/
|
|
|
|
if (!isa->fakeasync) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_WARNING, APR_ENOTIMPL, r,
|
|
"ISAPI %s asynch I/O request refused",
|
|
r->filename);
|
|
cid->retval = APR_ENOTIMPL;
|
|
}
|
|
else {
|
|
cid->complete = CreateEvent(NULL, FALSE, FALSE, NULL);
|
|
if (WaitForSingleObject(cid->complete, isa->timeout)
|
|
== WAIT_TIMEOUT) {
|
|
/* TODO: Now what... if this hung, then do we kill our own
|
|
* thread to force it's death? For now leave timeout = -1
|
|
*/
|
|
}
|
|
}
|
|
break;
|
|
|
|
case HSE_STATUS_ERROR:
|
|
/* end response if we have yet to do so.
|
|
*/
|
|
cid->retval = HTTP_INTERNAL_SERVER_ERROR;
|
|
break;
|
|
|
|
default:
|
|
/* TODO: log unrecognized retval for debugging
|
|
*/
|
|
cid->retval = HTTP_INTERNAL_SERVER_ERROR;
|
|
break;
|
|
}
|
|
|
|
/* All done with the DLL... get rid of it...
|
|
*
|
|
* If optionally cached, pass HSE_TERM_ADVISORY_UNLOAD,
|
|
* and if it returns TRUE, unload, otherwise, cache it.
|
|
*/
|
|
if (isa->TerminateExtension) {
|
|
(*isa->TerminateExtension)(HSE_TERM_MUST_UNLOAD);
|
|
}
|
|
FreeLibrary(isa->handle);
|
|
/* TODO: Crit section */
|
|
cid->isa = NULL;
|
|
--isa->refcount;
|
|
isa->handle = NULL;
|
|
|
|
return cid->retval;
|
|
}
|
|
#pragma optimize("",on)
|
|
|
|
BOOL WINAPI GetServerVariable (HCONN hConn, LPSTR lpszVariableName,
|
|
LPVOID lpvBuffer, LPDWORD lpdwSizeofBuffer)
|
|
{
|
|
request_rec *r = ((isapi_cid *)hConn)->r;
|
|
apr_table_t *e = r->subprocess_env;
|
|
const char *result;
|
|
|
|
/* Mostly, we just grab it from the environment, but there are
|
|
* a couple of special cases
|
|
*/
|
|
|
|
if (!strcasecmp(lpszVariableName, "UNMAPPED_REMOTE_USER")) {
|
|
/* We don't support NT users, so this is always the same as
|
|
* REMOTE_USER
|
|
*/
|
|
result = apr_table_get(e, "REMOTE_USER");
|
|
}
|
|
else if (!strcasecmp(lpszVariableName, "SERVER_PORT_SECURE")) {
|
|
/* Apache doesn't support secure requests inherently, so
|
|
* we have no way of knowing. We'll be conservative, and say
|
|
* all requests are insecure.
|
|
*/
|
|
result = "0";
|
|
}
|
|
else if (!strcasecmp(lpszVariableName, "URL")) {
|
|
result = r->uri;
|
|
}
|
|
else {
|
|
result = apr_table_get(e, lpszVariableName);
|
|
}
|
|
|
|
if (result) {
|
|
if (strlen(result) > *lpdwSizeofBuffer) {
|
|
*lpdwSizeofBuffer = strlen(result);
|
|
SetLastError(ERROR_INSUFFICIENT_BUFFER);
|
|
return FALSE;
|
|
}
|
|
strncpy(lpvBuffer, result, *lpdwSizeofBuffer);
|
|
return TRUE;
|
|
}
|
|
|
|
/* Didn't find it */
|
|
SetLastError(ERROR_INVALID_INDEX);
|
|
return FALSE;
|
|
}
|
|
|
|
BOOL WINAPI WriteClient (HCONN ConnID, LPVOID Buffer, LPDWORD lpwdwBytes,
|
|
DWORD dwReserved)
|
|
{
|
|
request_rec *r = ((isapi_cid *)ConnID)->r;
|
|
int writ; /* written, actually, but why shouldn't I make up words? */
|
|
|
|
/* We only support synchronous writing */
|
|
if (dwReserved && dwReserved != HSE_IO_SYNC) {
|
|
ap_log_rerror(APLOG_MARK, APLOG_WARNING, ERROR_INVALID_PARAMETER, r,
|
|
"ISAPI %s asynch write", r->filename);
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
}
|
|
|
|
if ((writ = ap_rwrite(Buffer, *lpwdwBytes, r)) == EOF) {
|
|
SetLastError(WSAEDISCON); /* TODO: Find the right error code */
|
|
return FALSE;
|
|
}
|
|
|
|
*lpwdwBytes = writ;
|
|
return TRUE;
|
|
}
|
|
|
|
BOOL WINAPI ReadClient (HCONN ConnID, LPVOID lpvBuffer, LPDWORD lpdwSize)
|
|
{
|
|
/* TODO: If the request was a huge transmit or chunked, continue piping the
|
|
* request here, but if it's of a sane size, continue to ...
|
|
*/
|
|
return TRUE;
|
|
}
|
|
|
|
static char* ComposeHeaders(request_rec *r, char* data)
|
|
{
|
|
/* We *should* break before this while loop ends */
|
|
while (*data)
|
|
{
|
|
char *value, *lf = strchr(data, '\n');
|
|
int p;
|
|
|
|
#ifdef RELAX_HEADER_RULE
|
|
if (lf)
|
|
*lf = '\0';
|
|
#else
|
|
if (!lf) { /* Huh? Invalid data, I think */
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, r,
|
|
"ISAPI %s sent invalid headers", r->filename);
|
|
SetLastError(TODO_ERROR);
|
|
return FALSE;
|
|
}
|
|
|
|
/* Get rid of \n and \r */
|
|
*lf = '\0';
|
|
#endif
|
|
p = strlen(data);
|
|
if (p > 0 && data[p-1] == '\r') data[p-1] = '\0';
|
|
|
|
/* End of headers */
|
|
if (*data == '\0') {
|
|
#ifdef RELAX_HEADER_RULE
|
|
if (lf)
|
|
#endif
|
|
data = lf + 1; /* Reset data */
|
|
break;
|
|
}
|
|
|
|
if (!(value = strchr(data, ':'))) {
|
|
SetLastError(TODO_ERROR);
|
|
/* ### euh... we're passing the wrong type of error
|
|
### code here */
|
|
ap_log_rerror(APLOG_MARK, APLOG_ERR, HTTP_INTERNAL_SERVER_ERROR, r,
|
|
"ISAPI %s sent invalid headers", r->filename);
|
|
return FALSE;
|
|
}
|
|
|
|
*value++ = '\0';
|
|
while (*value && apr_isspace(*value)) ++value;
|
|
|
|
/* Check all the special-case headers. Similar to what
|
|
* ap_scan_script_header_err() does (see that function for
|
|
* more detail)
|
|
*/
|
|
|
|
if (!strcasecmp(data, "Content-Type"))
|
|
{
|
|
/* Nuke trailing whitespace */
|
|
char *tmp;
|
|
char *endp = value + strlen(value) - 1;
|
|
while (endp > value && apr_isspace(*endp))
|
|
*endp-- = '\0';
|
|
|
|
tmp = apr_pstrdup (r->pool, value);
|
|
ap_str_tolower(tmp);
|
|
r->content_type = tmp;
|
|
}
|
|
else if (!strcasecmp(data, "Content-Length")) {
|
|
apr_table_set(r->headers_out, data, value);
|
|
}
|
|
else if (!strcasecmp(data, "Transfer-Encoding")) {
|
|
apr_table_set(r->headers_out, data, value);
|
|
}
|
|
else if (!strcasecmp(data, "Set-Cookie")) {
|
|
apr_table_add(r->err_headers_out, data, value);
|
|
}
|
|
else {
|
|
apr_table_merge(r->err_headers_out, data, value);
|
|
}
|
|
|
|
/* Reset data */
|
|
#ifdef RELAX_HEADER_RULE
|
|
if (!lf) {
|
|
data += p;
|
|
break;
|
|
}
|
|
#endif
|
|
data = lf + 1;
|
|
}
|
|
return data;
|
|
}
|
|
|
|
|
|
/* XXX: There is an O(n^2) attack possible here. */
|
|
BOOL WINAPI ServerSupportFunction (HCONN hConn, DWORD dwHSERequest,
|
|
LPVOID lpvBuffer, LPDWORD lpdwSize,
|
|
LPDWORD lpdwDataType)
|
|
{
|
|
isapi_cid *cid = (isapi_cid *)hConn;
|
|
request_rec *r = cid->r;
|
|
request_rec *subreq;
|
|
char *data;
|
|
|
|
switch (dwHSERequest) {
|
|
case HSE_REQ_SEND_URL_REDIRECT_RESP:
|
|
/* Set the status to be returned when the HttpExtensionProc()
|
|
* is done.
|
|
*/
|
|
apr_table_set (r->headers_out, "Location", lpvBuffer);
|
|
cid->r->status = cid->ecb->dwHttpStatusCode
|
|
= HTTP_MOVED_TEMPORARILY;
|
|
return TRUE;
|
|
|
|
case HSE_REQ_SEND_URL:
|
|
/* Read any additional input */
|
|
|
|
if (r->remaining > 0) {
|
|
char argsbuffer[HUGE_STRING_LEN];
|
|
|
|
while (ap_get_client_block(r, argsbuffer, HUGE_STRING_LEN));
|
|
}
|
|
|
|
/* Reset the method to GET */
|
|
r->method = apr_pstrdup(r->pool, "GET");
|
|
r->method_number = M_GET;
|
|
|
|
/* Don't let anyone think there's still data */
|
|
apr_table_unset(r->headers_in, "Content-Length");
|
|
|
|
ap_internal_redirect((char *)lpvBuffer, r);
|
|
return TRUE;
|
|
|
|
case HSE_REQ_SEND_RESPONSE_HEADER:
|
|
r->status_line = lpvBuffer ? lpvBuffer : apr_pstrdup(r->pool, "200 OK");
|
|
sscanf(r->status_line, "%d", &r->status);
|
|
cid->ecb->dwHttpStatusCode = r->status;
|
|
|
|
/* Now fill in the HTTP headers, and the rest of it. Ick.
|
|
* lpdwDataType contains a string that has headers (in MIME
|
|
* format), a blank like, then (possibly) data. We need
|
|
* to parse it.
|
|
*
|
|
* Easy case first:
|
|
*/
|
|
if (!lpdwDataType) {
|
|
ap_send_http_header(r);
|
|
return TRUE;
|
|
}
|
|
|
|
/* Make a copy - don't disturb the original */
|
|
data = apr_pstrdup(r->pool, (char *)lpdwDataType);
|
|
|
|
/* Parse them out, or die trying */
|
|
data = ComposeHeaders(r, data);
|
|
if (!data)
|
|
return FALSE;
|
|
|
|
/* All the headers should be set now */
|
|
ap_send_http_header(r);
|
|
|
|
/* Any data left should now be sent directly */
|
|
if (*data)
|
|
ap_rputs(data, r);
|
|
|
|
return TRUE;
|
|
|
|
case HSE_REQ_DONE_WITH_SESSION:
|
|
/* Signal to resume the thread completing this request
|
|
*/
|
|
if (cid->complete)
|
|
SetEvent(cid->complete);
|
|
return TRUE;
|
|
|
|
case HSE_REQ_MAP_URL_TO_PATH:
|
|
/* Map a URL to a filename */
|
|
subreq = ap_sub_req_lookup_uri(apr_pstrndup(r->pool, (char *)lpvBuffer,
|
|
*lpdwSize), r);
|
|
|
|
GetFullPathName(subreq->filename, *lpdwSize - 1, (char *)lpvBuffer, NULL);
|
|
|
|
/* IIS puts a trailing slash on directories, Apache doesn't */
|
|
|
|
if (subreq->finfo.filetype == APR_DIR) {
|
|
int l = strlen((char *)lpvBuffer);
|
|
|
|
((char *)lpvBuffer)[l] = '\\';
|
|
((char *)lpvBuffer)[l + 1] = '\0';
|
|
}
|
|
|
|
return TRUE;
|
|
|
|
case HSE_REQ_GET_SSPI_INFO:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
|
|
case HSE_APPEND_LOG_PARAMETER:
|
|
/* Log lpvBuffer, of lpdwSize bytes, in the URI Query (cs-uri-query) field
|
|
* This code will do for now...
|
|
*/
|
|
ap_log_rerror(APLOG_MARK, APLOG_INFO, 0, r,
|
|
"ISAPI %s: %s", cid->r->filename,
|
|
(char*) lpvBuffer);
|
|
return TRUE;
|
|
|
|
case HSE_REQ_IO_COMPLETION:
|
|
/* TODO: Emulate a completion port, if we can...
|
|
* Record the callback address and user defined argument...
|
|
* we will call this after any async request (e.g. transmitfile)
|
|
* as if the request had completed async execution.
|
|
* Per MS docs... HSE_REQ_IO_COMPLETION replaces any prior call
|
|
* to HSE_REQ_IO_COMPLETION, and lpvBuffer may be set to NULL.
|
|
*/
|
|
if (!cid->isa->fakeasync)
|
|
return FALSE;
|
|
cid->completion = (PFN_HSE_IO_COMPLETION) lpvBuffer;
|
|
cid->completion_arg = (PVOID) lpdwDataType;
|
|
return TRUE;
|
|
|
|
case HSE_REQ_TRANSMIT_FILE:
|
|
/* Use TransmitFile... nothing wrong with that :)
|
|
*/
|
|
|
|
/* ### euh... we're passing the wrong type of error code here */
|
|
ap_log_rerror(APLOG_MARK, APLOG_WARNING,
|
|
HTTP_INTERNAL_SERVER_ERROR, r,
|
|
"ISAPI asynchronous I/O not supported: %s",
|
|
r->filename);
|
|
return FALSE;
|
|
|
|
case HSE_REQ_REFRESH_ISAPI_ACL:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
|
|
#if defined(HSE_REQ_IS_KEEP_CONN) /* this and a lot more aren't in VC++ 5.0 */
|
|
case HSE_REQ_IS_KEEP_CONN:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_ASYNC_READ_CLIENT)
|
|
case HSE_REQ_ASYNC_READ_CLIENT:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_GET_IMPERSONATION_TOKEN)
|
|
case HSE_REQ_GET_IMPERSONATION_TOKEN: /* Added in ISAPI 4.0 */
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_MAP_URL_TO_PATH_EX)
|
|
case HSE_REQ_MAP_URL_TO_PATH_EX:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
|
|
/* TODO: Not quite ready for prime time yet */
|
|
|
|
/* Map a URL to a filename */
|
|
subreq = ap_sub_req_lookup_uri(apr_pstrndup(r->pool, (char *)lpvBuffer,
|
|
*lpdwSize), r);
|
|
|
|
GetFullPathName(subreq->filename, *lpdwSize - 1, (char *)lpvBuffer, NULL);
|
|
|
|
/* IIS puts a trailing slash on directories, Apache doesn't */
|
|
|
|
if (subreq->finfo.filetype == APR_DIR) {
|
|
int l = strlen((char *)lpvBuffer);
|
|
|
|
((char *)lpvBuffer)[l] = '\\';
|
|
((char *)lpvBuffer)[l + 1] = '\0';
|
|
}
|
|
|
|
lpdwDataType = (LPDWORD) apr_palloc(r->pool, sizeof(HSE_URL_MAPEX_INFO));
|
|
strncpy(((LPHSE_URL_MAPEX_INFO)lpdwDataType)->lpszPath,
|
|
(char *) lpvBuffer, MAX_PATH);
|
|
((LPHSE_URL_MAPEX_INFO)lpdwDataType)->dwFlags = 0;
|
|
/* is a combination of:
|
|
* HSE_URL_FLAGS_READ Allow for read.
|
|
* HSE_URL_FLAGS_WRITE Allow for write.
|
|
* HSE_URL_FLAGS_EXECUTE Allow for execute.
|
|
* HSE_URL_FLAGS_SSL Require SSL.
|
|
* HSE_URL_FLAGS_DONT_CACHE Don't cache (virtual root only).
|
|
* HSE_URL_FLAGS_NEGO_CERT Allow client SSL certifications.
|
|
* HSE_URL_FLAGS_REQUIRE_CERT Require client SSL certifications.
|
|
* HSE_URL_FLAGS_MAP_CERT Map SSL certification to a Windows account.
|
|
* HSE_URL_FLAGS_SSL128 Requires a 128-bit SSL.
|
|
* HSE_URL_FLAGS_SCRIPT Allows for script execution.
|
|
*/
|
|
/* (LPHSE_URL_MAPEX_INFO)lpdwDataType)->cchMatchingPath
|
|
* (LPHSE_URL_MAPEX_INFO)lpdwDataType)->cchMatchingURL
|
|
*/
|
|
|
|
return TRUE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_ABORTIVE_CLOSE)
|
|
case HSE_REQ_ABORTIVE_CLOSE:
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_GET_CERT_INFO_EX)
|
|
case HSE_REQ_GET_CERT_INFO_EX: /* Added in ISAPI 4.0 */
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_SEND_RESPONSE_HEADER_EX)
|
|
case HSE_REQ_SEND_RESPONSE_HEADER_EX: /* Added in ISAPI 4.0 */
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
|
|
/* TODO: Not quite ready for prime time */
|
|
|
|
if (((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->pszStatus
|
|
&& ((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->cchStatus) {
|
|
r->status_line = apr_pstrndup(r->pool,
|
|
((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->pszStatus,
|
|
((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->cchStatus);
|
|
}
|
|
else {
|
|
r->status_line = apr_pstrdup(r->pool, "200 OK");
|
|
}
|
|
sscanf(r->status_line, "%d", &r->status);
|
|
cid->ecb->dwHttpStatusCode = r->status;
|
|
|
|
if (((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->pszHeader
|
|
&& ((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->cchHeader)
|
|
{
|
|
/* Make a copy - don't disturb the original */
|
|
data = apr_pstrndup(r->pool,
|
|
((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->pszHeader,
|
|
((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->cchHeader);
|
|
|
|
/* Parse them out, or die trying */
|
|
data = ComposeHeaders(r, data);
|
|
if (!data)
|
|
return FALSE;
|
|
|
|
}
|
|
else {
|
|
data = "\0";
|
|
}
|
|
|
|
/* ((LPHSE_SEND_HEADER_EX_INFO)lpvBuffer)->fKeepConn;
|
|
*
|
|
* Now how are we about to start listening to an ISAPI's
|
|
* idea of keeping or closing a connection? Seriously :)
|
|
*/
|
|
|
|
/* All the headers should be set now */
|
|
ap_send_http_header(r);
|
|
|
|
/* Any data left should now be sent directly */
|
|
if (*data)
|
|
ap_rputs(data, r);
|
|
|
|
return TRUE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_CLOSE_CONNECTION) /* not in VC++ 5.0 or 6.0 */
|
|
case HSE_REQ_CLOSE_CONNECTION: /* Added after ISAPI 4.0 */
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
#endif
|
|
|
|
#if defined(HSE_REQ_IS_CONNECTED) /* not in VC++ 5.0 or 6.0 */
|
|
case HSE_REQ_IS_CONNECTED: /* Added after ISAPI 4.0 */
|
|
/* Returns True if client is connected c.f. Q188346*/
|
|
return TRUE;
|
|
#endif
|
|
|
|
/* case HSE_REQ_EXTENSION_TRIGGER:
|
|
* Added after ISAPI 4.0?
|
|
* Undocumented - from the Microsoft Jan '00 Platform SDK
|
|
*/
|
|
default:
|
|
/* TODO: log unrecognized ServerSupportCommand for debugging
|
|
*/
|
|
SetLastError(ERROR_INVALID_PARAMETER);
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
handler_rec isapi_handlers[] = {
|
|
{ "isapi-isa", isapi_handler },
|
|
{ NULL}
|
|
};
|
|
|
|
module isapi_module = {
|
|
STANDARD20_MODULE_STUFF,
|
|
NULL, /* create per-dir config */
|
|
NULL, /* merge per-dir config */
|
|
NULL, /* server config */
|
|
NULL, /* merge server config */
|
|
NULL, /* command apr_table_t */
|
|
isapi_handlers, /* handlers */
|
|
NULL /* register hooks */
|
|
};
|