No OneTemporary
Actions

Authored By

Unknown

Size

34 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/imap/http_h2.c b/imap/http_h2.c
	index d0616cf5c..12467eae2 100644
	--- a/imap/http_h2.c
	+++ b/imap/http_h2.c
	@@ -1,1039 +1,1039 @@
	/* http_h2.c - HTTP/2 support functions
	*
	* Copyright (c) 1994-2021 Carnegie Mellon University. All rights reserved.
	*
	* Redistribution and use in source and binary forms, with or without
	* modification, are permitted provided that the following conditions
	* are met:
	*
	* 1. Redistributions of source code must retain the above copyright
	* notice, this list of conditions and the following disclaimer.
	*
	* 2. Redistributions in binary form must reproduce the above copyright
	* notice, this list of conditions and the following disclaimer in
	* the documentation and/or other materials provided with the
	* distribution.
	*
	* 3. The name "Carnegie Mellon University" must not be used to
	* endorse or promote products derived from this software without
	* prior written permission. For permission or any legal
	* details, please contact
	* Carnegie Mellon University
	* Center for Technology Transfer and Enterprise Creation
	* 4615 Forbes Avenue
	* Suite 302
	* Pittsburgh, PA 15213
	* (412) 268-7393, fax: (412) 268-7395
	* innovation@andrew.cmu.edu
	*
	* 4. Redistributions of any form whatsoever must retain the following
	* acknowledgment:
	* "This product includes software developed by Computing Services
	* at Carnegie Mellon University (http://www.cmu.edu/computing/)."
	*
	* CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO
	* THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
	* AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE
	* FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
	* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN
	* AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
	* OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
	*
	*/

	#include <config.h>
	#include <sysexits.h>

	#include "httpd.h"
	#include "http_h2.h"

	#ifdef HAVE_NGHTTP2

	#include <errno.h>
	#include <syslog.h>

	#include <sasl/saslutil.h>

	#include "http_ws.h"
	#include "prometheus.h"
	#include "retry.h"

	/* generated headers are not necessarily in current directory */
	#include "imap/http_err.h"

	#define HTTP2_MAX_HEADERS 100

	/* HTTP/2 session context */
	struct http2_context {
	nghttp2_session session; / HTTP/2 session */
	nghttp2_option options; / Config options for HTTP/2 session */
	arrayu64_t ws_ids; /* Array of WebSocket stream ids */
	};

	/* HTTP/2 stream context */
	struct http2_stream {
	int32_t id; /* Stream ID */
	size_t num_resp_hdrs; /* Number of response headers */
	nghttp2_nv resp_hdrs[HTTP2_MAX_HEADERS]; /* Array of response headers */
	};

	static nghttp2_session_callbacks *http2_callbacks = NULL;

	-static void stream_fini(struct transaction_t *txn)
	+static void stream_free(struct transaction_t *txn)
	{
	if (txn) {
	struct http2_stream strm = (struct http2_stream ) txn->strm_ctx;

	if (strm) {
	int i;

	for (i = 0; i < HTTP2_MAX_HEADERS; i++) {
	free(strm->resp_hdrs[i].value);
	}
	free(strm);
	}

	txn->strm_ctx = NULL;
	}
	}

	static int begin_headers_cb(nghttp2_session *session,
	const nghttp2_frame frame, void user_data)
	{
	if (frame->hd.type != NGHTTP2_HEADERS \|\|
	frame->headers.cat != NGHTTP2_HCAT_REQUEST) {
	return 0;
	}

	syslog(LOG_DEBUG, "http2_begin_headers_cb(id=%d, type=%d)",
	frame->hd.stream_id, frame->hd.type);

	struct transaction_t *txn = xzmalloc(sizeof(struct transaction_t));

	txn->conn = (struct http_connection *) user_data;
	txn->meth = METH_UNKNOWN;
	txn->flags.ver = VER_2;
	txn->flags.vary = VARY_AE;
	txn->req_line.ver = HTTP2_VERSION;

	if (config_getswitch(IMAPOPT_HTTPALLOWCOMPRESS)) {
	zlib_init(txn);
	brotli_init(txn);
	zstd_init(txn);
	}

	/* Create header cache */
	if (!(txn->req_hdrs = spool_new_hdrcache())) {
	syslog(LOG_ERR, "Unable to create header cache");
	return NGHTTP2_ERR_CALLBACK_FAILURE;
	}


	struct http2_stream *strm = xzmalloc(sizeof(struct http2_stream));

	strm->id = frame->hd.stream_id;
	txn->strm_ctx = strm;
	- ptrarray_add(&txn->done_callbacks, &stream_fini);
	+ ptrarray_add(&txn->done_callbacks, &stream_free);

	/* Tell syslog our stream-id */
	buf_printf(&txn->buf, "%d", strm->id);
	spool_replace_header(xstrdup(":stream-id"),
	buf_release(&txn->buf), txn->req_hdrs);

	nghttp2_session_set_stream_user_data(session, frame->hd.stream_id, txn);

	return 0;
	}

	static int header_cb(nghttp2_session *session,
	const nghttp2_frame *frame,
	const uint8_t *name, size_t namelen,
	const uint8_t *value, size_t valuelen,
	uint8_t flags __attribute__((unused)),
	void *user_data __attribute__((unused)))
	{
	if (frame->hd.type != NGHTTP2_HEADERS \|\|
	frame->headers.cat != NGHTTP2_HCAT_REQUEST) {
	return 0;
	}

	char my_name, my_value;
	struct transaction_t *txn =
	nghttp2_session_get_stream_user_data(session, frame->hd.stream_id);

	if (!txn) return 0;

	my_name = xstrndup((const char *) name, namelen);
	my_value = xstrndup((const char *) value, valuelen);

	syslog(LOG_DEBUG, "http2_header_cb(%s: %s)", my_name, my_value);

	if (my_name[0] == ':') {
	switch (my_name[1]) {
	case 'm': /* :method */
	if (!strcmp("ethod", my_name+2)) txn->req_line.meth = my_value;
	break;

	case 's': /* :scheme */
	break;

	case 'a': /* :authority */
	break;

	case 'p': /* :path, :protocol */
	if (!strcmp("ath", my_name+2)) txn->req_line.uri = my_value;
	else if (!strcmp("rotocol", my_name+2) &&
	!strcmp(my_value, WS_TOKEN)) {
	txn->flags.upgrade \|= UPGRADE_WS;
	}
	break;
	}
	}

	spool_cache_header(my_name, my_value, txn->req_hdrs);

	return 0;
	}

	static int data_chunk_recv_cb(nghttp2_session *session,
	uint8_t flags __attribute__((unused)),
	int32_t stream_id,
	const uint8_t *data, size_t len,
	void *user_data __attribute__((unused)))
	{
	struct transaction_t *txn =
	nghttp2_session_get_stream_user_data(session, stream_id);

	if (!txn) return 0;

	syslog(LOG_DEBUG, "http2_data_chunk_recv_cb(id=%d, len=%zu, txnflags=%#x)",
	stream_id, len, txn->req_body.flags);

	if (txn->req_body.flags & BODY_DISCARD) return 0;

	if (len) {
	txn->req_body.framing = FRAMING_HTTP2;
	txn->req_body.len += len;
	buf_appendmap(&txn->req_body.payload, (const char *) data, len);
	}

	return 0;
	}

	static int frame_recv_cb(nghttp2_session *session,
	const nghttp2_frame *frame,
	void *user_data __attribute__((unused)))
	{
	int ret = 0;
	struct transaction_t *txn =
	nghttp2_session_get_stream_user_data(session, frame->hd.stream_id);
	struct http2_context *ctx;
	struct buf *logbuf = NULL;

	if (!txn) return 0;

	ctx = (struct http2_context *) txn->conn->sess_ctx;

	syslog(LOG_DEBUG, "http2_frame_recv_cb(id=%d, type=%d, flags=%#x)",
	frame->hd.stream_id, frame->hd.type, frame->hd.flags);

	if ((txn->conn->logfd != -1) && (frame->hd.type <= NGHTTP2_HEADERS)) {
	/* telemetry log */
	logbuf = &txn->conn->logbuf;

	buf_reset(logbuf);
	buf_printf(logbuf, "<" TIME_T_FMT "<", time(NULL)); /* timestamp */
	write(txn->conn->logfd, buf_base(logbuf), buf_len(logbuf));
	}

	switch (frame->hd.type) {
	case NGHTTP2_HEADERS:
	if (frame->headers.cat == NGHTTP2_HCAT_REQUEST) {
	if (txn->conn->logfd != -1) {
	/* telemetry log */
	buf_reset(logbuf);
	buf_printf(logbuf, "%s %s %s\r\n", /* request-line */
	txn->req_line.meth, txn->req_line.uri, HTTP2_VERSION);
	spool_enum_hdrcache(txn->req_hdrs, /* header fields */
	&log_cachehdr, logbuf);
	buf_appendcstr(logbuf, "\r\n"); /* CRLF */
	write(txn->conn->logfd, buf_base(logbuf), buf_len(logbuf));
	}

	/* Examine request */
	ret = examine_request(txn, NULL);

	if (ret) {
	txn->req_body.flags \|= BODY_DISCARD;
	error_response(ret, txn);
	break;
	}

	if (txn->req_body.flags & BODY_CONTINUE) {
	txn->req_body.flags &= ~BODY_CONTINUE;
	response_header(HTTP_CONTINUE, txn);
	break;
	}
	}

	GCC_FALLTHROUGH

	case NGHTTP2_DATA:
	if (txn->ws_ctx) {
	/* WebSocket over HTTP/2 input */
	ws_input(txn);

	if (txn->flags.conn & CONN_CLOSE) {
	/* Issue RST_STREAM so that stream does not hang around. */
	syslog(LOG_DEBUG, "nghttp2_submit_rst stream()");
	nghttp2_submit_rst_stream(session, NGHTTP2_FLAG_NONE,
	frame->hd.stream_id,
	NGHTTP2_NO_ERROR);
	}
	break;
	}

	if (txn->conn->logfd != -1) {
	/* telemetry log */
	write(txn->conn->logfd, buf_base(&txn->req_body.payload),
	buf_len(&txn->req_body.payload));
	}

	if (txn->meth != METH_CONNECT) {
	/* Check that the client request has finished */
	if (!(frame->hd.flags & NGHTTP2_FLAG_END_STREAM)) break;

	/* Check that we still want to process the request */
	if (txn->req_body.flags & BODY_DISCARD) break;
	}

	/* Process the requested method */
	ret = process_request(txn);

	/* Handle errors (success responses handled by method functions) */
	if (ret) error_response(ret, txn);

	if (txn->ws_ctx) {
	/* Add to WebSocket stream id array */
	arrayu64_append(&ctx->ws_ids,
	nghttp2_session_get_last_proc_stream_id(ctx->session));
	}

	break;
	}

	return 0;
	}

	static int stream_close_cb(nghttp2_session *session, int32_t stream_id,
	uint32_t error_code,
	void *user_data __attribute__((unused)))
	{
	struct transaction_t *txn =
	nghttp2_session_get_stream_user_data(session, stream_id);

	syslog(LOG_DEBUG, "http2_stream_close_cb(id=%d): '%s'",
	stream_id, nghttp2_http2_strerror(error_code));

	if (txn) {
	if (txn->ws_ctx) {
	/* Remove from WebSocket stream id array */
	struct http2_context *http2_ctx =
	(struct http2_context *) txn->conn->sess_ctx;

	arrayu64_remove_all(&http2_ctx->ws_ids, stream_id);

	if (arrayu64_size(&http2_ctx->ws_ids) == 0) {
	/* No WebSockets - Reset inactivity timer */
	prot_settimeout(txn->conn->pin, httpd_timeout);
	}
	}

	/* Memory cleanup */
	nghttp2_session_set_stream_user_data(session, stream_id, NULL);
	transaction_free(txn);
	free(txn);
	}

	return 0;
	}

	static int frame_not_send_cb(nghttp2_session *session,
	const nghttp2_frame *frame,
	int lib_error_code,
	void *user_data __attribute__((unused)))
	{
	syslog(LOG_DEBUG, "http2_frame_not_send_cb(id=%d, type=%d, flags=%#x)",
	frame->hd.stream_id, frame->hd.type, frame->hd.flags);

	/* Issue RST_STREAM so that stream does not hang around. */
	nghttp2_submit_rst_stream(session, NGHTTP2_FLAG_NONE,
	frame->hd.stream_id, lib_error_code);

	return 0;
	}

	static int frame_send_cb(nghttp2_session *session __attribute__((unused)),
	const nghttp2_frame *frame,
	void *user_data __attribute__((unused)))
	{
	syslog(LOG_DEBUG, "http2_frame_send_cb(id=%d, type=%d, flags=%#x)",
	frame->hd.stream_id, frame->hd.type, frame->hd.flags);

	return 0;
	}

	static int begin_frame_cb(nghttp2_session *session __attribute__((unused)),
	const nghttp2_frame_hd *hd,
	void *user_data __attribute__((unused)))
	{
	syslog(LOG_DEBUG, "http2_begin_frame_cb(id=%d, type=%d, flags=%#x)",
	hd->stream_id, hd->type, hd->flags);

	return 0;
	}

	static void end_session(struct http_connection *conn,
	nghttp2_error_code err)
	{
	struct http2_context ctx = (struct http2_context ) conn->sess_ctx;
	const char *msg = conn->close_str;

	if (!ctx) return;

	if (!msg) msg = "Server unavailable";
	else if (!err) err = NGHTTP2_CANCEL;

	/* Close all streams with open WebSocket channels */
	int32_t stream_id;
	while ((stream_id = arrayu64_pop(&ctx->ws_ids))) {
	stream_close_cb(ctx->session, stream_id, err, conn);

	syslog(LOG_DEBUG, "nghttp2_submit_rst stream()");
	nghttp2_submit_rst_stream(ctx->session, NGHTTP2_FLAG_NONE, stream_id, err);
	}

	syslog(LOG_DEBUG, "nghttp2_submit_goaway(%s)", msg);

	stream_id = nghttp2_session_get_last_proc_stream_id(ctx->session);
	int r = nghttp2_submit_goaway(ctx->session, NGHTTP2_FLAG_NONE, stream_id, err,
	(const uint8_t *) msg, strlen(msg));
	if (r) {
	syslog(LOG_ERR, "nghttp2_submit_goaway: %s", nghttp2_strerror(r));
	}
	}

	-static void session_fini(struct http_connection *conn)
	+static void session_free(struct http_connection *conn)
	{
	struct http2_context ctx = (struct http2_context ) conn->sess_ctx;

	if (!ctx) return;

	nghttp2_option_del(ctx->options);
	nghttp2_session_del(ctx->session);
	arrayu64_fini(&ctx->ws_ids);
	free(ctx);

	conn->sess_ctx = NULL;
	}

	static void http2_output(struct http_connection *conn)
	{
	struct http2_context ctx = (struct http2_context ) conn->sess_ctx;

	if (nghttp2_session_want_write(ctx->session)) {
	/* Send queued frame(s) */
	const uint8_t *data;
	ssize_t nwrite;

	while ((nwrite = nghttp2_session_mem_send(ctx->session, &data)) > 0) {
	int r = prot_write(conn->pout, (const char *) data, nwrite);

	if (r) {
	syslog(LOG_ERR, "prot_write(): %s", prot_error(conn->pout));
	conn->close = 1;
	break;
	}
	else {
	syslog(LOG_DEBUG, "http2_output(): sent %zd bytes", nwrite);
	}
	}

	if (nwrite < 0) {
	syslog(LOG_ERR,
	"nghttp2_session_mem_send: %s", nghttp2_strerror(nwrite));
	conn->close = 1;
	}
	}
	else if (!nghttp2_session_want_read(ctx->session)) {
	/* We're done */
	syslog(LOG_DEBUG, "closing connection");
	conn->close = 1;
	}
	}

	-static void http2_fini(struct http_connection *conn)
	+static void http2_done(struct http_connection *conn)
	{
	struct http2_context ctx = (struct http2_context ) conn->sess_ctx;
	if (ctx) {
	/* End the session if we haven't already */
	if (nghttp2_session_want_read(ctx->session) && !prot_IS_EOF(conn->pin)) {
	end_session(conn, 0);
	http2_output(conn);
	}
	- session_fini(conn);
	+ session_free(conn);
	}

	nghttp2_session_callbacks_del(http2_callbacks);
	}

	HIDDEN int http2_init(struct http_connection conn, struct buf serverinfo)
	{
	int r;

	buf_printf(serverinfo, " Nghttp2/%s", NGHTTP2_VERSION);

	/* Setup HTTP/2 callbacks */
	if ((r = nghttp2_session_callbacks_new(&http2_callbacks))) {
	syslog(LOG_WARNING,
	"nghttp2_session_callbacks_new: %s", nghttp2_strerror(r));
	return 0;
	}

	nghttp2_session_callbacks_set_on_begin_headers_callback(http2_callbacks,
	&begin_headers_cb);
	nghttp2_session_callbacks_set_on_header_callback(http2_callbacks,
	&header_cb);
	nghttp2_session_callbacks_set_on_data_chunk_recv_callback(http2_callbacks,
	&data_chunk_recv_cb);
	nghttp2_session_callbacks_set_on_frame_recv_callback(http2_callbacks,
	&frame_recv_cb);
	nghttp2_session_callbacks_set_on_stream_close_callback(http2_callbacks,
	&stream_close_cb);
	nghttp2_session_callbacks_set_on_frame_not_send_callback(http2_callbacks,
	&frame_not_send_cb);

	if (config_getswitch(IMAPOPT_DEBUG)) {
	nghttp2_session_callbacks_set_on_begin_frame_callback(http2_callbacks,
	&begin_frame_cb);
	nghttp2_session_callbacks_set_on_frame_send_callback(http2_callbacks,
	&frame_send_cb);
	}

	- ptrarray_add(&conn->shutdown_callbacks, &http2_fini);
	+ ptrarray_add(&conn->shutdown_callbacks, &http2_done);

	return 1;
	}


	HIDDEN void http2_altsvc(struct buf *altsvc)
	{
	if (!https && http2_callbacks) {
	const char *sep = buf_len(altsvc) ? ", " : "";
	const char *config_altsvc = config_getstring(IMAPOPT_HTTP_H2_ALTSVC);

	if (config_altsvc) {
	buf_printf(altsvc, "%sh2=\"%s\"", sep, config_altsvc);
	sep = ", ";
	}
	if (httpd_localip) {
	const char *port = strchr(httpd_localip, ';');
	buf_printf(altsvc, "%sh2c=\":%s\"", sep, port ? port+1 : "80");
	}
	}
	}


	HIDDEN int http2_preface(struct http_connection *conn)
	{
	if (http2_callbacks) {
	/* Check initial client input for HTTP/2 preface */
	int c;

	if (prot_lookahead(conn->pin,
	NGHTTP2_CLIENT_MAGIC, NGHTTP2_CLIENT_MAGIC_LEN, &c)) {
	syslog(LOG_DEBUG, "HTTP/2 client connection preface");
	return 1;
	}
	}

	return 0;
	}


	static void begin_resp_headers(struct transaction_t *txn, long code)
	{
	struct http2_stream strm = (struct http2_stream ) txn->strm_ctx;

	syslog(LOG_DEBUG,
	"http2_begin_resp_headers(code = %ld, len = %ld, flags.te = %#x)",
	code, txn->resp_body.len, txn->flags.te);

	strm->num_resp_hdrs = 0;

	if (txn->conn->logfd != -1) {
	/* telemetry log */
	struct buf *logbuf = &txn->conn->logbuf;

	buf_reset(logbuf);
	buf_printf(logbuf, ">" TIME_T_FMT ">", time(NULL)); /* timestamp */
	write(txn->conn->logfd, buf_base(logbuf), buf_len(logbuf));
	}

	if (code) simple_hdr(txn, ":status", "%.3s", error_message(code));
	}

	static void add_resp_header(struct transaction_t *txn,
	const char name, struct buf value)
	{
	struct http2_stream strm = (struct http2_stream ) txn->strm_ctx;

	if (strm->num_resp_hdrs >= HTTP2_MAX_HEADERS) {
	buf_free(value);
	return;
	}
	else {
	nghttp2_nv *nv = &strm->resp_hdrs[strm->num_resp_hdrs];

	free(nv->value);

	nv->namelen = strlen(name);
	nv->name = (uint8_t *) name;
	nv->valuelen = buf_len(value);
	nv->value = (uint8_t *) buf_release(value);
	nv->flags = NGHTTP2_NV_FLAG_NO_COPY_VALUE;

	strm->num_resp_hdrs++;

	if (txn->conn->logfd != -1) {
	/* telemetry log */
	struct iovec iov[4];
	int niov = 0;

	if (name[0] == ':') {
	/* :status */
	WRITEV_ADD_TO_IOVEC(iov, niov, "HTTP/2 ", 7);
	}
	else {
	WRITEV_ADD_TO_IOVEC(iov, niov, nv->name, nv->namelen);
	WRITEV_ADD_TO_IOVEC(iov, niov, ": ", 2);
	}
	WRITEV_ADD_TO_IOVEC(iov, niov, nv->value, nv->valuelen);
	WRITEV_ADD_TO_IOVEC(iov, niov, "\r\n", 2);
	writev(txn->conn->logfd, iov, niov);
	}
	}
	}

	static int end_resp_headers(struct transaction_t *txn, long code)
	{
	struct http2_context ctx = (struct http2_context ) txn->conn->sess_ctx;
	struct http2_stream strm = (struct http2_stream ) txn->strm_ctx;

	uint8_t flags = NGHTTP2_FLAG_NONE;
	int r;

	syslog(LOG_DEBUG,
	"http2_end_resp_headers(code = %ld, len = %ld, flags.te = %#x)",
	code, txn->resp_body.len, txn->flags.te);

	if (txn->conn->logfd != -1) {
	/* telemetry log */
	write(txn->conn->logfd, "\r\n", 2);
	}

	switch (code) {
	case 0:
	/* Trailer */
	syslog(LOG_DEBUG, "%s(id=%d)", "nghttp2_submit_trailer", strm->id);

	r = nghttp2_submit_trailer(ctx->session, strm->id,
	strm->resp_hdrs, strm->num_resp_hdrs);
	if (r) {
	syslog(LOG_ERR, "%s: %s",
	"nghttp2_submit_trailer", nghttp2_strerror(r));
	}

	return r;


	case HTTP_CONTINUE:
	case HTTP_PROCESSING:
	/* Provisional response */
	break;

	case HTTP_NO_CONTENT:
	case HTTP_NOT_MODIFIED:
	/* MUST NOT include a body */
	flags = NGHTTP2_FLAG_END_STREAM;
	break;

	default:
	if (txn->meth == METH_HEAD) {
	/* MUST NOT include a body */
	flags = NGHTTP2_FLAG_END_STREAM;
	}
	else if (!(txn->resp_body.len \|\| (txn->flags.te & TE_CHUNKED))) {
	/* Empty body */
	flags = NGHTTP2_FLAG_END_STREAM;
	}
	break;
	}

	syslog(LOG_DEBUG, "%s(id=%d, flags=%#x)",
	"nghttp2_submit headers", strm->id, flags);

	r = nghttp2_submit_headers(ctx->session, flags, strm->id, NULL,
	strm->resp_hdrs, strm->num_resp_hdrs, NULL);
	if (r) {
	syslog(LOG_ERR, "%s: %s",
	"nghttp2_submit headers", nghttp2_strerror(r));
	}

	return r;
	}

	static ssize_t data_source_read_cb(nghttp2_session *sess __attribute__((unused)),
	int32_t stream_id,
	uint8_t *buf, size_t length,
	uint32_t *data_flags,
	nghttp2_data_source *source,
	void *user_data __attribute__((unused)))
	{
	struct protstream *s = source->ptr;
	size_t n = prot_read(s, (char *) buf, length);

	syslog(LOG_DEBUG,
	"http2_data_source_read_cb(id=%d, len=%zu): n=%zu, eof=%d",
	stream_id, length, n, !s->cnt);

	if (!s->cnt) {
	*data_flags \|= NGHTTP2_DATA_FLAG_EOF;
	prot_free(s); /* Done with the protstream */
	}

	return n;
	}

	static int resp_body_chunk(struct transaction_t *txn,
	const char *data, unsigned datalen,
	int last_chunk, MD5_CTX *md5ctx)
	{
	static unsigned char md5[MD5_DIGEST_LENGTH];
	struct http2_context ctx = (struct http2_context ) txn->conn->sess_ctx;
	struct http2_stream strm = (struct http2_stream ) txn->strm_ctx;
	uint8_t flags = NGHTTP2_FLAG_END_STREAM;
	nghttp2_data_provider prd;
	int r;

	syslog(LOG_DEBUG, "http2_resp_data_chunk(datalen=%u, last=%d)",
	datalen, last_chunk);

	if (!datalen && !last_chunk) return 0;

	if (txn->conn->logfd != -1) {
	/* telemetry log */
	struct buf *logbuf = &txn->conn->logbuf;
	struct iovec iov[2];
	int niov = 0;

	buf_reset(logbuf);
	buf_printf(logbuf, ">" TIME_T_FMT ">", time(NULL)); /* timestamp */
	WRITEV_ADD_TO_IOVEC(iov, niov,
	buf_base(logbuf), buf_len(logbuf));
	WRITEV_ADD_TO_IOVEC(iov, niov, data, datalen);
	writev(txn->conn->logfd, iov, niov);
	}

	/* NOTE: The protstream that we use as the data source MUST remain
	available until the data source read callback has retrieved all data.
	Also note that we need to make a copy of the data because data frames
	may not be sent prior to the original pointer becoming invalid.
	*/
	struct protstream *s = prot_readmap(xmemdup(data, datalen), datalen);
	s->buf = s->ptr; /* So prot_free() will free the copy of the data */

	prd.source.ptr = s;
	prd.read_callback = data_source_read_cb;

	if (txn->flags.te) {
	if (!last_chunk) {
	flags = NGHTTP2_FLAG_NONE;
	if (datalen && (txn->flags.trailer & TRAILER_CMD5)) {
	MD5Update(md5ctx, data, datalen);
	}
	}
	else if (txn->flags.trailer) {
	flags = NGHTTP2_FLAG_NONE;
	if (txn->flags.trailer & TRAILER_CMD5) MD5Final(md5, md5ctx);
	}
	}

	syslog(LOG_DEBUG, "nghttp2_submit_data(id=%d, datalen=%d, flags=%#x)",
	strm->id, datalen, flags);

	r = nghttp2_submit_data(ctx->session, flags, strm->id, &prd);
	if (r) {
	syslog(LOG_ERR, "nghttp2_submit_data: %s", nghttp2_strerror(r));
	return HTTP_SERVER_ERROR;
	}
	else {
	/* Write frame(s) */
	http2_output(txn->conn);

	if (last_chunk && (txn->flags.trailer & ~TRAILER_PROXY)) {
	begin_resp_headers(txn, 0);
	if (txn->flags.trailer & TRAILER_CMD5) content_md5_hdr(txn, md5);
	if ((txn->flags.trailer & TRAILER_CTAG) && txn->resp_body.ctag) {
	simple_hdr(txn, "CTag", "%s", txn->resp_body.ctag);
	}
	end_resp_headers(txn, 0);
	}
	}

	return 0;
	}


	HIDDEN int http2_start_session(struct transaction_t *txn,
	struct http_connection *conn)
	{
	nghttp2_settings_entry iv[] = {
	{ NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS, 100 },
	{ NGHTTP2_SETTINGS_ENABLE_CONNECT_PROTOCOL, 1 } /* MUST be last */
	};
	size_t niv = (sizeof(iv) / sizeof(iv[0])) - !ws_enabled;
	struct http2_context *ctx;
	int r;

	if (!conn) conn = txn->conn;

	if (conn->sess_ctx) return 0;

	ctx = xzmalloc(sizeof(struct http2_context));

	r = nghttp2_option_new(&ctx->options);
	if (r) {
	syslog(LOG_WARNING,
	"nghttp2_option_new: %s", nghttp2_strerror(r));
	free(ctx);
	return HTTP_SERVER_ERROR;
	}

	r = nghttp2_session_server_new2(&ctx->session,
	http2_callbacks, conn, ctx->options);
	if (r) {
	syslog(LOG_WARNING,
	"nghttp2_session_server_new2: %s", nghttp2_strerror(r));
	free(ctx);
	return HTTP_SERVER_ERROR;
	}

	conn->sess_ctx = ctx;
	- ptrarray_add(&conn->reset_callbacks, &session_fini);
	+ ptrarray_add(&conn->reset_callbacks, &session_free);

	if (txn && (txn->flags.conn & CONN_UPGRADE)) {
	struct http2_stream *strm;
	struct buf *buf = &txn->buf;
	unsigned outlen;

	const char **hdr = spool_getheader(txn->req_hdrs, "HTTP2-Settings");
	if (!hdr \|\| hdr[1]) return 0;

	/* base64url decode the settings.
	Use the SASL base64 decoder after replacing the encoded values
	for chars 62 and 63 and adding appropriate padding. */
	buf_setcstr(buf, hdr[0]);
	buf_replace_char(buf, '-', '+');
	buf_replace_char(buf, '_', '/');
	buf_appendmap(buf, "==", (4 - (buf_len(buf) % 4)) % 4);
	r = sasl_decode64(buf_base(buf), buf_len(buf),
	(char *) buf_base(buf), buf_len(buf), &outlen);
	if (r != SASL_OK) {
	syslog(LOG_WARNING, "sasl_decode64 failed: %s",
	sasl_errstring(r, NULL, NULL));
	}
	else {
	r = nghttp2_session_upgrade2(ctx->session,
	(const uint8_t *) buf_base(buf),
	outlen, txn->meth == METH_HEAD, NULL);
	if (r) {
	syslog(LOG_WARNING, "nghttp2_session_upgrade: %s",
	nghttp2_strerror(r));
	}
	}

	buf_reset(buf);
	if (r) return HTTP_BAD_REQUEST;

	/* tell client to start h2c upgrade (RFC 7540) */
	response_header(HTTP_SWITCH_PROT, txn);

	strm = xzmalloc(sizeof(struct http2_stream));
	strm->id = nghttp2_session_get_last_proc_stream_id(ctx->session);
	txn->strm_ctx = strm;
	txn->flags.ver = VER_2;
	- ptrarray_add(&txn->done_callbacks, &stream_fini);
	+ ptrarray_add(&txn->done_callbacks, &stream_free);
	}

	conn->begin_resp_headers = &begin_resp_headers;
	conn->add_resp_header = &add_resp_header;
	conn->end_resp_headers = &end_resp_headers;
	conn->resp_body_chunk = &resp_body_chunk;

	/* Don't do telemetry logging in prot layer */
	prot_setlog(conn->pin, PROT_NO_FD);
	prot_setlog(conn->pout, PROT_NO_FD);

	tcp_disable_nagle(conn->pout->fd);

	r = nghttp2_submit_settings(ctx->session, NGHTTP2_FLAG_NONE, iv, niv);
	if (r) {
	syslog(LOG_ERR, "nghttp2_submit_settings: %s", nghttp2_strerror(r));
	return HTTP_SERVER_ERROR;
	}

	if (httpd_altsvc) {
	/* Remove h2c from Alt-Svc value */
	char *p = strstr(httpd_altsvc, "h2c=");
	if (p == httpd_altsvc) {
	free(httpd_altsvc);
	httpd_altsvc = NULL;
	}
	else if (p) {
	while (*--p == ' ');
	*p = '\0';
	}

	if (httpd_altsvc) {
	char *origin = strconcat("https://", config_servername, NULL);

	r = nghttp2_submit_altsvc(ctx->session, NGHTTP2_FLAG_NONE, 0,
	(uint8_t *) origin, strlen(origin),
	(uint8_t *) httpd_altsvc, strlen(httpd_altsvc));
	free(origin);

	if (r) {
	syslog(LOG_ERR, "nghttp2_submit_altsvc: %s", nghttp2_strerror(r));
	return HTTP_SERVER_ERROR;
	}
	}
	}

	/* Write frame(s) */
	http2_output(conn);

	return 0;
	}


	HIDDEN void http2_input(struct http_connection *conn)
	{
	struct http2_context ctx = (struct http2_context ) conn->sess_ctx;
	int want_read = nghttp2_session_want_read(ctx->session);
	int goaway = conn->close;
	nghttp2_error_code err = goaway ? NGHTTP2_REFUSED_STREAM : NGHTTP2_NO_ERROR;
	struct protstream *pin = conn->pin;

	syslog(LOG_DEBUG, "http2_input() goaway: %d, eof: %d, want read: %d",
	goaway, prot_IS_EOF(pin), want_read);

	if (want_read && !goaway) {
	/* Read frame(s) */
	char data[PROT_BUFSIZE];
	ssize_t nread;

	while ((nread = prot_read(pin, data, PROT_BUFSIZE)) > 0) {
	syslog(LOG_DEBUG, "http2_input(): read %zd bytes", nread);

	ssize_t r = nghttp2_session_mem_recv(ctx->session,
	(const uint8_t *) data, nread);

	if (r < 0) {
	/* Failure */
	syslog(LOG_ERR,
	"nghttp2_session_mem_recv: %s", nghttp2_strerror(r));
	goaway = 1;
	conn->close_str = nghttp2_strerror(r);

	switch (r) {
	case NGHTTP2_ERR_BAD_CLIENT_MAGIC:
	err = NGHTTP2_PROTOCOL_ERROR;
	break;
	case NGHTTP2_ERR_FLOODED:
	err = NGHTTP2_ENHANCE_YOUR_CALM;
	break;
	default:
	err = NGHTTP2_INTERNAL_ERROR;
	break;
	}

	break;
	}
	else {
	/* Successfully received frames */
	syslog(LOG_DEBUG, "nghttp2_session_mem_recv: %zd", r);

	/* Don't block next time (so we can submit output) */
	prot_NONBLOCK(pin);
	}
	}

	if (prot_IS_EOF(pin)) {
	/* Client closed connection */
	syslog(LOG_DEBUG, "client closed connection");
	nghttp2_session_terminate_session(ctx->session, NGHTTP2_NO_ERROR);
	conn->close = 1;
	return;
	}
	else if (prot_error(pin)) {
	/* Client timeout or I/O error */
	goaway = 1;
	conn->close_str = prot_error(pin);
	err = NGHTTP2_REFUSED_STREAM;
	}
	else {
	/* No more data - block next time (for client timeout) */
	prot_BLOCK(pin);
	}
	}

	if (goaway) {
	/* Tell client we are closing session */
	end_session(conn, err);
	conn->close = 1;
	}

	/* Write frame(s) */
	http2_output(conn);
	}

	#else /* !HAVE_NGHTTP2 */

	HIDDEN int http2_init(struct http_connection *conn __attribute__((unused)),
	struct buf *serverinfo __attribute__((unused)))
	{
	return 0;
	}

	HIDDEN void http2_altsvc(struct buf *altsvc __attribute__((unused)))
	{
	}

	HIDDEN int http2_preface(struct http_connection *conn __attribute__((unused)))
	{
	return 0;
	}

	HIDDEN int http2_start_session(struct transaction_t *txn __attribute__((unused)),
	struct http_connection *c __attribute__((unused)))
	{
	fatal("http2_start() called, but no Nghttp2", EX_SOFTWARE);
	}

	HIDDEN void http2_input(struct http_connection *conn __attribute__((unused)))
	{
	fatal("http2_input() called, but no Nghttp2", EX_SOFTWARE);
	}

	#endif /* HAVE_NGHTTP2 */

File Metadata

Mime Type: text/x-diff
Expires: Fri, Apr 24, 10:50 AM (6 d, 5 h ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 18896543
Default Alt Text: (34 KB)

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions