123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167 |
- /*
- +----------------------------------------------------------------------+
- | PHP Version 7 |
- +----------------------------------------------------------------------+
- | Copyright (c) 1997-2018 The PHP Group |
- +----------------------------------------------------------------------+
- | This source file is subject to version 3.01 of the PHP license, |
- | that is bundled with this package in the file LICENSE, and is |
- | available through the world-wide-web at the following url: |
- | http://www.php.net/license/3_01.txt |
- | If you did not receive a copy of the PHP license and are unable to |
- | obtain it through the world-wide-web, please send a note to |
- | license@php.net so we can mail you a copy immediately. |
- +----------------------------------------------------------------------+
- | Original design: Shane Caraveo <shane@caraveo.com> |
- | Authors: Andi Gutmans <andi@php.net> |
- | Zeev Suraski <zeev@php.net> |
- +----------------------------------------------------------------------+
- */
- #include <ctype.h>
- #include <sys/stat.h>
- #include "php.h"
- #include "SAPI.h"
- #include "php_variables.h"
- #include "php_ini.h"
- #include "ext/standard/php_string.h"
- #include "ext/standard/pageinfo.h"
- #if (HAVE_PCRE || HAVE_BUNDLED_PCRE) && !defined(COMPILE_DL_PCRE)
- #include "ext/pcre/php_pcre.h"
- #endif
- #ifdef ZTS
- #include "TSRM.h"
- #endif
- #ifdef HAVE_SYS_TIME_H
- #include <sys/time.h>
- #elif defined(PHP_WIN32)
- #include "win32/time.h"
- #endif
- #include "rfc1867.h"
- #include "php_content_types.h"
- #ifdef ZTS
- SAPI_API int sapi_globals_id;
- #else
- sapi_globals_struct sapi_globals;
- #endif
- static void _type_dtor(zval *zv)
- {
- free(Z_PTR_P(zv));
- }
- static void sapi_globals_ctor(sapi_globals_struct *sapi_globals)
- {
- #ifdef ZTS
- ZEND_TSRMLS_CACHE_UPDATE();
- #endif
- memset(sapi_globals, 0, sizeof(*sapi_globals));
- zend_hash_init_ex(&sapi_globals->known_post_content_types, 8, NULL, _type_dtor, 1, 0);
- php_setup_sapi_content_types();
- }
- static void sapi_globals_dtor(sapi_globals_struct *sapi_globals)
- {
- zend_hash_destroy(&sapi_globals->known_post_content_types);
- }
- /* True globals (no need for thread safety) */
- SAPI_API sapi_module_struct sapi_module;
- SAPI_API void sapi_startup(sapi_module_struct *sf)
- {
- sf->ini_entries = NULL;
- sapi_module = *sf;
- #ifdef ZTS
- ts_allocate_id(&sapi_globals_id, sizeof(sapi_globals_struct), (ts_allocate_ctor) sapi_globals_ctor, (ts_allocate_dtor) sapi_globals_dtor);
- # ifdef PHP_WIN32
- _configthreadlocale(_ENABLE_PER_THREAD_LOCALE);
- # endif
- #else
- sapi_globals_ctor(&sapi_globals);
- #endif
- #ifdef PHP_WIN32
- tsrm_win32_startup();
- #endif
- reentrancy_startup();
- }
- SAPI_API void sapi_shutdown(void)
- {
- #ifdef ZTS
- ts_free_id(sapi_globals_id);
- #else
- sapi_globals_dtor(&sapi_globals);
- #endif
- reentrancy_shutdown();
- #ifdef PHP_WIN32
- tsrm_win32_shutdown();
- #endif
- }
- SAPI_API void sapi_free_header(sapi_header_struct *sapi_header)
- {
- efree(sapi_header->header);
- }
- /* {{{ proto bool header_register_callback(mixed callback)
- call a header function */
- PHP_FUNCTION(header_register_callback)
- {
- zval *callback_func;
- if (zend_parse_parameters(ZEND_NUM_ARGS(), "z", &callback_func) == FAILURE) {
- return;
- }
- if (!zend_is_callable(callback_func, 0, NULL)) {
- RETURN_FALSE;
- }
- if (Z_TYPE(SG(callback_func)) != IS_UNDEF) {
- zval_ptr_dtor(&SG(callback_func));
- SG(fci_cache) = empty_fcall_info_cache;
- }
- ZVAL_COPY(&SG(callback_func), callback_func);
- RETURN_TRUE;
- }
- /* }}} */
- static void sapi_run_header_callback(zval *callback)
- {
- int error;
- zend_fcall_info fci;
- char *callback_error = NULL;
- zval retval;
- if (zend_fcall_info_init(callback, 0, &fci, &SG(fci_cache), NULL, &callback_error) == SUCCESS) {
- fci.retval = &retval;
- error = zend_call_function(&fci, &SG(fci_cache));
- if (error == FAILURE) {
- goto callback_failed;
- } else {
- zval_ptr_dtor(&retval);
- }
- } else {
- callback_failed:
- php_error_docref(NULL, E_WARNING, "Could not call the sapi_header_callback");
- }
- if (callback_error) {
- efree(callback_error);
- }
- }
- SAPI_API void sapi_handle_post(void *arg)
- {
- if (SG(request_info).post_entry && SG(request_info).content_type_dup) {
- SG(request_info).post_entry->post_handler(SG(request_info).content_type_dup, arg);
- efree(SG(request_info).content_type_dup);
- SG(request_info).content_type_dup = NULL;
- }
- }
- static void sapi_read_post_data(void)
- {
- sapi_post_entry *post_entry;
- uint32_t content_type_length = (uint32_t)strlen(SG(request_info).content_type);
- char *content_type = estrndup(SG(request_info).content_type, content_type_length);
- char *p;
- char oldchar=0;
- void (*post_reader_func)(void) = NULL;
- /* dedicated implementation for increased performance:
- * - Make the content type lowercase
- * - Trim descriptive data, stay with the content-type only
- */
- for (p=content_type; p<content_type+content_type_length; p++) {
- switch (*p) {
- case ';':
- case ',':
- case ' ':
- content_type_length = p-content_type;
- oldchar = *p;
- *p = 0;
- break;
- default:
- *p = tolower(*p);
- break;
- }
- }
- /* now try to find an appropriate POST content handler */
- if ((post_entry = zend_hash_str_find_ptr(&SG(known_post_content_types), content_type,
- content_type_length)) != NULL) {
- /* found one, register it for use */
- SG(request_info).post_entry = post_entry;
- post_reader_func = post_entry->post_reader;
- } else {
- /* fallback */
- SG(request_info).post_entry = NULL;
- if (!sapi_module.default_post_reader) {
- /* no default reader ? */
- SG(request_info).content_type_dup = NULL;
- sapi_module.sapi_error(E_WARNING, "Unsupported content type: '%s'", content_type);
- return;
- }
- }
- if (oldchar) {
- *(p-1) = oldchar;
- }
- SG(request_info).content_type_dup = content_type;
- if(post_reader_func) {
- post_reader_func();
- }
- if(sapi_module.default_post_reader) {
- sapi_module.default_post_reader();
- }
- }
- SAPI_API size_t sapi_read_post_block(char *buffer, size_t buflen)
- {
- size_t read_bytes;
- if (!sapi_module.read_post) {
- return 0;
- }
- read_bytes = sapi_module.read_post(buffer, buflen);
- if (read_bytes > 0) {
- /* gogo */
- SG(read_post_bytes) += read_bytes;
- }
- if (read_bytes < buflen) {
- /* done */
- SG(post_read) = 1;
- }
- return read_bytes;
- }
- SAPI_API SAPI_POST_READER_FUNC(sapi_read_standard_form_data)
- {
- if ((SG(post_max_size) > 0) && (SG(request_info).content_length > SG(post_max_size))) {
- php_error_docref(NULL, E_WARNING, "POST Content-Length of " ZEND_LONG_FMT " bytes exceeds the limit of " ZEND_LONG_FMT " bytes",
- SG(request_info).content_length, SG(post_max_size));
- return;
- }
- SG(request_info).request_body = php_stream_temp_create_ex(TEMP_STREAM_DEFAULT, SAPI_POST_BLOCK_SIZE, PG(upload_tmp_dir));
- if (sapi_module.read_post) {
- size_t read_bytes;
- for (;;) {
- char buffer[SAPI_POST_BLOCK_SIZE];
- read_bytes = sapi_read_post_block(buffer, SAPI_POST_BLOCK_SIZE);
- if (read_bytes > 0) {
- if (php_stream_write(SG(request_info).request_body, buffer, read_bytes) != read_bytes) {
- /* if parts of the stream can't be written, purge it completely */
- php_stream_truncate_set_size(SG(request_info).request_body, 0);
- php_error_docref(NULL, E_WARNING, "POST data can't be buffered; all data discarded");
- break;
- }
- }
- if ((SG(post_max_size) > 0) && (SG(read_post_bytes) > SG(post_max_size))) {
- php_error_docref(NULL, E_WARNING, "Actual POST length does not match Content-Length, and exceeds " ZEND_LONG_FMT " bytes", SG(post_max_size));
- break;
- }
- if (read_bytes < SAPI_POST_BLOCK_SIZE) {
- /* done */
- break;
- }
- }
- php_stream_rewind(SG(request_info).request_body);
- }
- }
- static inline char *get_default_content_type(uint32_t prefix_len, uint32_t *len)
- {
- char *mimetype, *charset, *content_type;
- uint32_t mimetype_len, charset_len;
- if (SG(default_mimetype)) {
- mimetype = SG(default_mimetype);
- mimetype_len = (uint32_t)strlen(SG(default_mimetype));
- } else {
- mimetype = SAPI_DEFAULT_MIMETYPE;
- mimetype_len = sizeof(SAPI_DEFAULT_MIMETYPE) - 1;
- }
- if (SG(default_charset)) {
- charset = SG(default_charset);
- charset_len = (uint32_t)strlen(SG(default_charset));
- } else {
- charset = SAPI_DEFAULT_CHARSET;
- charset_len = sizeof(SAPI_DEFAULT_CHARSET) - 1;
- }
- if (*charset && strncasecmp(mimetype, "text/", 5) == 0) {
- char *p;
- *len = prefix_len + mimetype_len + sizeof("; charset=") - 1 + charset_len;
- content_type = (char*)emalloc(*len + 1);
- p = content_type + prefix_len;
- memcpy(p, mimetype, mimetype_len);
- p += mimetype_len;
- memcpy(p, "; charset=", sizeof("; charset=") - 1);
- p += sizeof("; charset=") - 1;
- memcpy(p, charset, charset_len + 1);
- } else {
- *len = prefix_len + mimetype_len;
- content_type = (char*)emalloc(*len + 1);
- memcpy(content_type + prefix_len, mimetype, mimetype_len + 1);
- }
- return content_type;
- }
- SAPI_API char *sapi_get_default_content_type(void)
- {
- uint32_t len;
- return get_default_content_type(0, &len);
- }
- SAPI_API void sapi_get_default_content_type_header(sapi_header_struct *default_header)
- {
- uint32_t len;
- default_header->header = get_default_content_type(sizeof("Content-type: ")-1, &len);
- default_header->header_len = len;
- memcpy(default_header->header, "Content-type: ", sizeof("Content-type: ") - 1);
- }
- /*
- * Add charset on content-type header if the MIME type starts with
- * "text/", the default_charset directive is not empty and
- * there is not already a charset option in there.
- *
- * If "mimetype" is non-NULL, it should point to a pointer allocated
- * with emalloc(). If a charset is added, the string will be
- * re-allocated and the new length is returned. If mimetype is
- * unchanged, 0 is returned.
- *
- */
- SAPI_API size_t sapi_apply_default_charset(char **mimetype, size_t len)
- {
- char *charset, *newtype;
- size_t newlen;
- charset = SG(default_charset) ? SG(default_charset) : SAPI_DEFAULT_CHARSET;
- if (*mimetype != NULL) {
- if (*charset && strncmp(*mimetype, "text/", 5) == 0 && strstr(*mimetype, "charset=") == NULL) {
- newlen = len + (sizeof(";charset=")-1) + strlen(charset);
- newtype = emalloc(newlen + 1);
- PHP_STRLCPY(newtype, *mimetype, newlen + 1, len);
- strlcat(newtype, ";charset=", newlen + 1);
- strlcat(newtype, charset, newlen + 1);
- efree(*mimetype);
- *mimetype = newtype;
- return newlen;
- }
- }
- return 0;
- }
- SAPI_API void sapi_activate_headers_only(void)
- {
- if (SG(request_info).headers_read == 1)
- return;
- SG(request_info).headers_read = 1;
- zend_llist_init(&SG(sapi_headers).headers, sizeof(sapi_header_struct),
- (void (*)(void *)) sapi_free_header, 0);
- SG(sapi_headers).send_default_content_type = 1;
- /* SG(sapi_headers).http_response_code = 200; */
- SG(sapi_headers).http_status_line = NULL;
- SG(sapi_headers).mimetype = NULL;
- SG(read_post_bytes) = 0;
- SG(request_info).request_body = NULL;
- SG(request_info).current_user = NULL;
- SG(request_info).current_user_length = 0;
- SG(request_info).no_headers = 0;
- SG(request_info).post_entry = NULL;
- SG(global_request_time) = 0;
- /*
- * It's possible to override this general case in the activate() callback,
- * if necessary.
- */
- if (SG(request_info).request_method && !strcmp(SG(request_info).request_method, "HEAD")) {
- SG(request_info).headers_only = 1;
- } else {
- SG(request_info).headers_only = 0;
- }
- if (SG(server_context)) {
- SG(request_info).cookie_data = sapi_module.read_cookies();
- if (sapi_module.activate) {
- sapi_module.activate();
- }
- }
- if (sapi_module.input_filter_init ) {
- sapi_module.input_filter_init();
- }
- }
- /*
- * Called from php_request_startup() for every request.
- */
- SAPI_API void sapi_activate(void)
- {
- zend_llist_init(&SG(sapi_headers).headers, sizeof(sapi_header_struct), (void (*)(void *)) sapi_free_header, 0);
- SG(sapi_headers).send_default_content_type = 1;
- /*
- SG(sapi_headers).http_response_code = 200;
- */
- SG(sapi_headers).http_status_line = NULL;
- SG(sapi_headers).mimetype = NULL;
- SG(headers_sent) = 0;
- ZVAL_UNDEF(&SG(callback_func));
- SG(read_post_bytes) = 0;
- SG(request_info).request_body = NULL;
- SG(request_info).current_user = NULL;
- SG(request_info).current_user_length = 0;
- SG(request_info).no_headers = 0;
- SG(request_info).post_entry = NULL;
- SG(request_info).proto_num = 1000; /* Default to HTTP 1.0 */
- SG(global_request_time) = 0;
- SG(post_read) = 0;
- /* It's possible to override this general case in the activate() callback, if necessary. */
- if (SG(request_info).request_method && !strcmp(SG(request_info).request_method, "HEAD")) {
- SG(request_info).headers_only = 1;
- } else {
- SG(request_info).headers_only = 0;
- }
- SG(rfc1867_uploaded_files) = NULL;
- /* Handle request method */
- if (SG(server_context)) {
- if (PG(enable_post_data_reading)
- && SG(request_info).content_type
- && SG(request_info).request_method
- && !strcmp(SG(request_info).request_method, "POST")) {
- /* HTTP POST may contain form data to be processed into variables
- * depending on given content type */
- sapi_read_post_data();
- } else {
- SG(request_info).content_type_dup = NULL;
- }
- /* Cookies */
- SG(request_info).cookie_data = sapi_module.read_cookies();
- }
- if (sapi_module.activate) {
- sapi_module.activate();
- }
- if (sapi_module.input_filter_init) {
- sapi_module.input_filter_init();
- }
- }
- static void sapi_send_headers_free(void)
- {
- if (SG(sapi_headers).http_status_line) {
- efree(SG(sapi_headers).http_status_line);
- SG(sapi_headers).http_status_line = NULL;
- }
- }
- SAPI_API void sapi_deactivate(void)
- {
- zend_llist_destroy(&SG(sapi_headers).headers);
- if (SG(request_info).request_body) {
- SG(request_info).request_body = NULL;
- } else if (SG(server_context)) {
- if (!SG(post_read)) {
- /* make sure we've consumed all request input data */
- char dummy[SAPI_POST_BLOCK_SIZE];
- size_t read_bytes;
- do {
- read_bytes = sapi_read_post_block(dummy, SAPI_POST_BLOCK_SIZE);
- } while (SAPI_POST_BLOCK_SIZE == read_bytes);
- }
- }
- if (SG(request_info).auth_user) {
- efree(SG(request_info).auth_user);
- }
- if (SG(request_info).auth_password) {
- efree(SG(request_info).auth_password);
- }
- if (SG(request_info).auth_digest) {
- efree(SG(request_info).auth_digest);
- }
- if (SG(request_info).content_type_dup) {
- efree(SG(request_info).content_type_dup);
- }
- if (SG(request_info).current_user) {
- efree(SG(request_info).current_user);
- }
- if (sapi_module.deactivate) {
- sapi_module.deactivate();
- }
- if (SG(rfc1867_uploaded_files)) {
- destroy_uploaded_files_hash();
- }
- if (SG(sapi_headers).mimetype) {
- efree(SG(sapi_headers).mimetype);
- SG(sapi_headers).mimetype = NULL;
- }
- sapi_send_headers_free();
- SG(sapi_started) = 0;
- SG(headers_sent) = 0;
- SG(request_info).headers_read = 0;
- SG(global_request_time) = 0;
- }
- SAPI_API void sapi_initialize_empty_request(void)
- {
- SG(server_context) = NULL;
- SG(request_info).request_method = NULL;
- SG(request_info).auth_digest = SG(request_info).auth_user = SG(request_info).auth_password = NULL;
- SG(request_info).content_type_dup = NULL;
- }
- static int sapi_extract_response_code(const char *header_line)
- {
- int code = 200;
- const char *ptr;
- for (ptr = header_line; *ptr; ptr++) {
- if (*ptr == ' ' && *(ptr + 1) != ' ') {
- code = atoi(ptr + 1);
- break;
- }
- }
- return code;
- }
- static void sapi_update_response_code(int ncode)
- {
- /* if the status code did not change, we do not want
- to change the status line, and no need to change the code */
- if (SG(sapi_headers).http_response_code == ncode) {
- return;
- }
- if (SG(sapi_headers).http_status_line) {
- efree(SG(sapi_headers).http_status_line);
- SG(sapi_headers).http_status_line = NULL;
- }
- SG(sapi_headers).http_response_code = ncode;
- }
- /*
- * since zend_llist_del_element only remove one matched item once,
- * we should remove them by ourself
- */
- static void sapi_remove_header(zend_llist *l, char *name, size_t len) {
- sapi_header_struct *header;
- zend_llist_element *next;
- zend_llist_element *current=l->head;
- while (current) {
- header = (sapi_header_struct *)(current->data);
- next = current->next;
- if (header->header_len > len && header->header[len] == ':'
- && !strncasecmp(header->header, name, len)) {
- if (current->prev) {
- current->prev->next = next;
- } else {
- l->head = next;
- }
- if (next) {
- next->prev = current->prev;
- } else {
- l->tail = current->prev;
- }
- sapi_free_header(header);
- efree(current);
- --l->count;
- }
- current = next;
- }
- }
- SAPI_API int sapi_add_header_ex(char *header_line, size_t header_line_len, zend_bool duplicate, zend_bool replace)
- {
- sapi_header_line ctr = {0};
- int r;
- ctr.line = header_line;
- ctr.line_len = header_line_len;
- r = sapi_header_op(replace ? SAPI_HEADER_REPLACE : SAPI_HEADER_ADD,
- &ctr);
- if (!duplicate)
- efree(header_line);
- return r;
- }
- static void sapi_header_add_op(sapi_header_op_enum op, sapi_header_struct *sapi_header)
- {
- if (!sapi_module.header_handler ||
- (SAPI_HEADER_ADD & sapi_module.header_handler(sapi_header, op, &SG(sapi_headers)))) {
- if (op == SAPI_HEADER_REPLACE) {
- char *colon_offset = strchr(sapi_header->header, ':');
- if (colon_offset) {
- char sav = *colon_offset;
- *colon_offset = 0;
- sapi_remove_header(&SG(sapi_headers).headers, sapi_header->header, strlen(sapi_header->header));
- *colon_offset = sav;
- }
- }
- zend_llist_add_element(&SG(sapi_headers).headers, (void *) sapi_header);
- } else {
- sapi_free_header(sapi_header);
- }
- }
- SAPI_API int sapi_header_op(sapi_header_op_enum op, void *arg)
- {
- sapi_header_struct sapi_header;
- char *colon_offset;
- char *header_line;
- size_t header_line_len;
- int http_response_code;
- if (SG(headers_sent) && !SG(request_info).no_headers) {
- const char *output_start_filename = php_output_get_start_filename();
- int output_start_lineno = php_output_get_start_lineno();
- if (output_start_filename) {
- sapi_module.sapi_error(E_WARNING, "Cannot modify header information - headers already sent by (output started at %s:%d)",
- output_start_filename, output_start_lineno);
- } else {
- sapi_module.sapi_error(E_WARNING, "Cannot modify header information - headers already sent");
- }
- return FAILURE;
- }
- switch (op) {
- case SAPI_HEADER_SET_STATUS:
- sapi_update_response_code((int)(zend_intptr_t) arg);
- return SUCCESS;
- case SAPI_HEADER_ADD:
- case SAPI_HEADER_REPLACE:
- case SAPI_HEADER_DELETE: {
- sapi_header_line *p = arg;
- if (!p->line || !p->line_len) {
- return FAILURE;
- }
- header_line = p->line;
- header_line_len = p->line_len;
- http_response_code = p->response_code;
- break;
- }
- case SAPI_HEADER_DELETE_ALL:
- if (sapi_module.header_handler) {
- sapi_module.header_handler(&sapi_header, op, &SG(sapi_headers));
- }
- zend_llist_clean(&SG(sapi_headers).headers);
- return SUCCESS;
- default:
- return FAILURE;
- }
- header_line = estrndup(header_line, header_line_len);
- /* cut off trailing spaces, linefeeds and carriage-returns */
- if (header_line_len && isspace(header_line[header_line_len-1])) {
- do {
- header_line_len--;
- } while(header_line_len && isspace(header_line[header_line_len-1]));
- header_line[header_line_len]='\0';
- }
- if (op == SAPI_HEADER_DELETE) {
- if (strchr(header_line, ':')) {
- efree(header_line);
- sapi_module.sapi_error(E_WARNING, "Header to delete may not contain colon.");
- return FAILURE;
- }
- if (sapi_module.header_handler) {
- sapi_header.header = header_line;
- sapi_header.header_len = header_line_len;
- sapi_module.header_handler(&sapi_header, op, &SG(sapi_headers));
- }
- sapi_remove_header(&SG(sapi_headers).headers, header_line, header_line_len);
- efree(header_line);
- return SUCCESS;
- } else {
- /* new line/NUL character safety check */
- uint32_t i;
- for (i = 0; i < header_line_len; i++) {
- /* RFC 7230 ch. 3.2.4 deprecates folding support */
- if (header_line[i] == '\n' || header_line[i] == '\r') {
- efree(header_line);
- sapi_module.sapi_error(E_WARNING, "Header may not contain "
- "more than a single header, new line detected");
- return FAILURE;
- }
- if (header_line[i] == '\0') {
- efree(header_line);
- sapi_module.sapi_error(E_WARNING, "Header may not contain NUL bytes");
- return FAILURE;
- }
- }
- }
- sapi_header.header = header_line;
- sapi_header.header_len = header_line_len;
- /* Check the header for a few cases that we have special support for in SAPI */
- if (header_line_len>=5
- && !strncasecmp(header_line, "HTTP/", 5)) {
- /* filter out the response code */
- sapi_update_response_code(sapi_extract_response_code(header_line));
- /* sapi_update_response_code doesn't free the status line if the code didn't change */
- if (SG(sapi_headers).http_status_line) {
- efree(SG(sapi_headers).http_status_line);
- }
- SG(sapi_headers).http_status_line = header_line;
- return SUCCESS;
- } else {
- colon_offset = strchr(header_line, ':');
- if (colon_offset) {
- *colon_offset = 0;
- if (!strcasecmp(header_line, "Content-Type")) {
- char *ptr = colon_offset+1, *mimetype = NULL, *newheader;
- size_t len = header_line_len - (ptr - header_line), newlen;
- while (*ptr == ' ') {
- ptr++;
- len--;
- }
- /* Disable possible output compression for images */
- if (!strncmp(ptr, "image/", sizeof("image/")-1)) {
- zend_string *key = zend_string_init("zlib.output_compression", sizeof("zlib.output_compression")-1, 0);
- zend_alter_ini_entry_chars(key, "0", sizeof("0") - 1, PHP_INI_USER, PHP_INI_STAGE_RUNTIME);
- zend_string_release_ex(key, 0);
- }
- mimetype = estrdup(ptr);
- newlen = sapi_apply_default_charset(&mimetype, len);
- if (!SG(sapi_headers).mimetype){
- SG(sapi_headers).mimetype = estrdup(mimetype);
- }
- if (newlen != 0) {
- newlen += sizeof("Content-type: ");
- newheader = emalloc(newlen);
- PHP_STRLCPY(newheader, "Content-type: ", newlen, sizeof("Content-type: ")-1);
- strlcat(newheader, mimetype, newlen);
- sapi_header.header = newheader;
- sapi_header.header_len = (uint32_t)(newlen - 1);
- efree(header_line);
- }
- efree(mimetype);
- SG(sapi_headers).send_default_content_type = 0;
- } else if (!strcasecmp(header_line, "Content-Length")) {
- /* Script is setting Content-length. The script cannot reasonably
- * know the size of the message body after compression, so it's best
- * do disable compression altogether. This contributes to making scripts
- * portable between setups that have and don't have zlib compression
- * enabled globally. See req #44164 */
- zend_string *key = zend_string_init("zlib.output_compression", sizeof("zlib.output_compression")-1, 0);
- zend_alter_ini_entry_chars(key,
- "0", sizeof("0") - 1, PHP_INI_USER, PHP_INI_STAGE_RUNTIME);
- zend_string_release_ex(key, 0);
- } else if (!strcasecmp(header_line, "Location")) {
- if ((SG(sapi_headers).http_response_code < 300 ||
- SG(sapi_headers).http_response_code > 399) &&
- SG(sapi_headers).http_response_code != 201) {
- /* Return a Found Redirect if one is not already specified */
- if (http_response_code) { /* user specified redirect code */
- sapi_update_response_code(http_response_code);
- } else if (SG(request_info).proto_num > 1000 &&
- SG(request_info).request_method &&
- strcmp(SG(request_info).request_method, "HEAD") &&
- strcmp(SG(request_info).request_method, "GET")) {
- sapi_update_response_code(303);
- } else {
- sapi_update_response_code(302);
- }
- }
- } else if (!strcasecmp(header_line, "WWW-Authenticate")) { /* HTTP Authentication */
- sapi_update_response_code(401); /* authentication-required */
- }
- if (sapi_header.header==header_line) {
- *colon_offset = ':';
- }
- }
- }
- if (http_response_code) {
- sapi_update_response_code(http_response_code);
- }
- sapi_header_add_op(op, &sapi_header);
- return SUCCESS;
- }
- SAPI_API int sapi_send_headers(void)
- {
- int retval;
- int ret = FAILURE;
- if (SG(headers_sent) || SG(request_info).no_headers) {
- return SUCCESS;
- }
- /* Success-oriented. We set headers_sent to 1 here to avoid an infinite loop
- * in case of an error situation.
- */
- if (SG(sapi_headers).send_default_content_type && sapi_module.send_headers) {
- uint32_t len = 0;
- char *default_mimetype = get_default_content_type(0, &len);
- if (default_mimetype && len) {
- sapi_header_struct default_header;
- SG(sapi_headers).mimetype = default_mimetype;
- default_header.header_len = sizeof("Content-type: ") - 1 + len;
- default_header.header = emalloc(default_header.header_len + 1);
- memcpy(default_header.header, "Content-type: ", sizeof("Content-type: ") - 1);
- memcpy(default_header.header + sizeof("Content-type: ") - 1, SG(sapi_headers).mimetype, len + 1);
- sapi_header_add_op(SAPI_HEADER_ADD, &default_header);
- } else {
- efree(default_mimetype);
- }
- SG(sapi_headers).send_default_content_type = 0;
- }
- if (Z_TYPE(SG(callback_func)) != IS_UNDEF) {
- zval cb;
- ZVAL_COPY_VALUE(&cb, &SG(callback_func));
- ZVAL_UNDEF(&SG(callback_func));
- sapi_run_header_callback(&cb);
- zval_ptr_dtor(&cb);
- }
- SG(headers_sent) = 1;
- if (sapi_module.send_headers) {
- retval = sapi_module.send_headers(&SG(sapi_headers));
- } else {
- retval = SAPI_HEADER_DO_SEND;
- }
- switch (retval) {
- case SAPI_HEADER_SENT_SUCCESSFULLY:
- ret = SUCCESS;
- break;
- case SAPI_HEADER_DO_SEND: {
- sapi_header_struct http_status_line;
- char buf[255];
- if (SG(sapi_headers).http_status_line) {
- http_status_line.header = SG(sapi_headers).http_status_line;
- http_status_line.header_len = (uint32_t)strlen(SG(sapi_headers).http_status_line);
- } else {
- http_status_line.header = buf;
- http_status_line.header_len = slprintf(buf, sizeof(buf), "HTTP/1.0 %d X", SG(sapi_headers).http_response_code);
- }
- sapi_module.send_header(&http_status_line, SG(server_context));
- }
- zend_llist_apply_with_argument(&SG(sapi_headers).headers, (llist_apply_with_arg_func_t) sapi_module.send_header, SG(server_context));
- if(SG(sapi_headers).send_default_content_type) {
- sapi_header_struct default_header;
- sapi_get_default_content_type_header(&default_header);
- sapi_module.send_header(&default_header, SG(server_context));
- sapi_free_header(&default_header);
- }
- sapi_module.send_header(NULL, SG(server_context));
- ret = SUCCESS;
- break;
- case SAPI_HEADER_SEND_FAILED:
- SG(headers_sent) = 0;
- ret = FAILURE;
- break;
- }
- sapi_send_headers_free();
- return ret;
- }
- SAPI_API int sapi_register_post_entries(const sapi_post_entry *post_entries)
- {
- const sapi_post_entry *p=post_entries;
- while (p->content_type) {
- if (sapi_register_post_entry(p) == FAILURE) {
- return FAILURE;
- }
- p++;
- }
- return SUCCESS;
- }
- SAPI_API int sapi_register_post_entry(const sapi_post_entry *post_entry)
- {
- int ret;
- zend_string *key;
- if (SG(sapi_started) && EG(current_execute_data)) {
- return FAILURE;
- }
- key = zend_string_init(post_entry->content_type, post_entry->content_type_len, 1);
- GC_MAKE_PERSISTENT_LOCAL(key);
- ret = zend_hash_add_mem(&SG(known_post_content_types), key,
- (void *) post_entry, sizeof(sapi_post_entry)) ? SUCCESS : FAILURE;
- zend_string_release_ex(key, 1);
- return ret;
- }
- SAPI_API void sapi_unregister_post_entry(const sapi_post_entry *post_entry)
- {
- if (SG(sapi_started) && EG(current_execute_data)) {
- return;
- }
- zend_hash_str_del(&SG(known_post_content_types), post_entry->content_type,
- post_entry->content_type_len);
- }
- SAPI_API int sapi_register_default_post_reader(void (*default_post_reader)(void))
- {
- if (SG(sapi_started) && EG(current_execute_data)) {
- return FAILURE;
- }
- sapi_module.default_post_reader = default_post_reader;
- return SUCCESS;
- }
- SAPI_API int sapi_register_treat_data(void (*treat_data)(int arg, char *str, zval *destArray))
- {
- if (SG(sapi_started) && EG(current_execute_data)) {
- return FAILURE;
- }
- sapi_module.treat_data = treat_data;
- return SUCCESS;
- }
- SAPI_API int sapi_register_input_filter(unsigned int (*input_filter)(int arg, char *var, char **val, size_t val_len, size_t *new_val_len), unsigned int (*input_filter_init)(void))
- {
- if (SG(sapi_started) && EG(current_execute_data)) {
- return FAILURE;
- }
- sapi_module.input_filter = input_filter;
- sapi_module.input_filter_init = input_filter_init;
- return SUCCESS;
- }
- SAPI_API int sapi_flush(void)
- {
- if (sapi_module.flush) {
- sapi_module.flush(SG(server_context));
- return SUCCESS;
- } else {
- return FAILURE;
- }
- }
- SAPI_API zend_stat_t *sapi_get_stat(void)
- {
- if (sapi_module.get_stat) {
- return sapi_module.get_stat();
- } else {
- if (!SG(request_info).path_translated || (VCWD_STAT(SG(request_info).path_translated, &SG(global_stat)) == -1)) {
- return NULL;
- }
- return &SG(global_stat);
- }
- }
- SAPI_API char *sapi_getenv(char *name, size_t name_len)
- {
- if (!strncasecmp(name, "HTTP_PROXY", name_len)) {
- /* Ugly fix for HTTP_PROXY issue, see bug #72573 */
- return NULL;
- }
- if (sapi_module.getenv) {
- char *value, *tmp = sapi_module.getenv(name, name_len);
- if (tmp) {
- value = estrdup(tmp);
- #ifdef PHP_WIN32
- if (strlen(sapi_module.name) == sizeof("cgi-fcgi") - 1 && !strcmp(sapi_module.name, "cgi-fcgi")) {
- /* XXX more modules to go, if needed. */
- free(tmp);
- }
- #endif
- } else {
- return NULL;
- }
- if (sapi_module.input_filter) {
- sapi_module.input_filter(PARSE_STRING, name, &value, strlen(value), NULL);
- }
- return value;
- }
- return NULL;
- }
- SAPI_API int sapi_get_fd(int *fd)
- {
- if (sapi_module.get_fd) {
- return sapi_module.get_fd(fd);
- } else {
- return FAILURE;
- }
- }
- SAPI_API int sapi_force_http_10(void)
- {
- if (sapi_module.force_http_10) {
- return sapi_module.force_http_10();
- } else {
- return FAILURE;
- }
- }
- SAPI_API int sapi_get_target_uid(uid_t *obj)
- {
- if (sapi_module.get_target_uid) {
- return sapi_module.get_target_uid(obj);
- } else {
- return FAILURE;
- }
- }
- SAPI_API int sapi_get_target_gid(gid_t *obj)
- {
- if (sapi_module.get_target_gid) {
- return sapi_module.get_target_gid(obj);
- } else {
- return FAILURE;
- }
- }
- SAPI_API double sapi_get_request_time(void)
- {
- if(SG(global_request_time)) return SG(global_request_time);
- if (sapi_module.get_request_time && SG(server_context)) {
- SG(global_request_time) = sapi_module.get_request_time();
- } else {
- struct timeval tp = {0};
- if (!gettimeofday(&tp, NULL)) {
- SG(global_request_time) = (double)(tp.tv_sec + tp.tv_usec / 1000000.00);
- } else {
- SG(global_request_time) = (double)time(0);
- }
- }
- return SG(global_request_time);
- }
- SAPI_API void sapi_terminate_process(void) {
- if (sapi_module.terminate_process) {
- sapi_module.terminate_process();
- }
- }
- SAPI_API void sapi_add_request_header(char *var, unsigned int var_len, char *val, unsigned int val_len, void *arg) /* {{{ */
- {
- zval *return_value = (zval*)arg;
- char *str = NULL;
- ALLOCA_FLAG(use_heap)
- if (var_len > 5 &&
- var[0] == 'H' &&
- var[1] == 'T' &&
- var[2] == 'T' &&
- var[3] == 'P' &&
- var[4] == '_') {
- char *p;
- var_len -= 5;
- p = var + 5;
- var = str = do_alloca(var_len + 1, use_heap);
- *str++ = *p++;
- while (*p) {
- if (*p == '_') {
- *str++ = '-';
- p++;
- if (*p) {
- *str++ = *p++;
- }
- } else if (*p >= 'A' && *p <= 'Z') {
- *str++ = (*p++ - 'A' + 'a');
- } else {
- *str++ = *p++;
- }
- }
- *str = 0;
- } else if (var_len == sizeof("CONTENT_TYPE")-1 &&
- memcmp(var, "CONTENT_TYPE", sizeof("CONTENT_TYPE")-1) == 0) {
- var = "Content-Type";
- } else if (var_len == sizeof("CONTENT_LENGTH")-1 &&
- memcmp(var, "CONTENT_LENGTH", sizeof("CONTENT_LENGTH")-1) == 0) {
- var = "Content-Length";
- } else {
- return;
- }
- add_assoc_stringl_ex(return_value, var, var_len, val, val_len);
- if (str) {
- free_alloca(var, use_heap);
- }
- }
- /* }}} */
- /*
- * Local variables:
- * tab-width: 4
- * c-basic-offset: 4
- * End:
- * vim600: sw=4 ts=4 fdm=marker
- * vim<600: sw=4 ts=4
- */
|