http_parser.c 68 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395
  1. /* Based on src/http/ngx_http_parse.c from NGINX copyright Igor Sysoev
  2. *
  3. * Additional changes are licensed under the same terms as NGINX and
  4. * copyright Joyent, Inc. and other Node contributors. All rights reserved.
  5. *
  6. * Permission is hereby granted, free of charge, to any person obtaining a copy
  7. * of this software and associated documentation files (the "Software"), to
  8. * deal in the Software without restriction, including without limitation the
  9. * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
  10. * sell copies of the Software, and to permit persons to whom the Software is
  11. * furnished to do so, subject to the following conditions:
  12. *
  13. * The above copyright notice and this permission notice shall be included in
  14. * all copies or substantial portions of the Software.
  15. *
  16. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  19. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20. * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
  21. * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
  22. * IN THE SOFTWARE.
  23. */
  24. #include "http_parser.h"
  25. #include <assert.h>
  26. #include <stddef.h>
  27. #include <ctype.h>
  28. #include <stdlib.h>
  29. #include <string.h>
  30. #include <limits.h>
  31. #pragma warning(push)
  32. #pragma warning(disable: 4244)
  33. #ifndef ULLONG_MAX
  34. # define ULLONG_MAX ((uint64_t) -1) /* 2^64-1 */
  35. #endif
  36. #ifndef MIN
  37. # define MIN(a,b) ((a) < (b) ? (a) : (b))
  38. #endif
  39. #ifndef ARRAY_SIZE
  40. # define ARRAY_SIZE(a) (sizeof(a) / sizeof((a)[0]))
  41. #endif
  42. #ifndef BIT_AT
  43. # define BIT_AT(a, i) \
  44. (!!((unsigned int) (a)[(unsigned int) (i) >> 3] & \
  45. (1 << ((unsigned int) (i) & 7))))
  46. #endif
  47. #ifndef ELEM_AT
  48. # define ELEM_AT(a, i, v) ((unsigned int) (i) < ARRAY_SIZE(a) ? (a)[(i)] : (v))
  49. #endif
  50. #define SET_ERRNO(e) \
  51. do { \
  52. parser->http_errno = (e); \
  53. } while(0)
  54. #define CURRENT_STATE() p_state
  55. #define UPDATE_STATE(V) p_state = (enum state) (V);
  56. #define RETURN(V) \
  57. do { \
  58. parser->state = CURRENT_STATE(); \
  59. return (V); \
  60. } while (0);
  61. #define REEXECUTE() \
  62. goto reexecute; \
  63. #ifdef __GNUC__
  64. # define LIKELY(X) __builtin_expect(!!(X), 1)
  65. # define UNLIKELY(X) __builtin_expect(!!(X), 0)
  66. #else
  67. # define LIKELY(X) (X)
  68. # define UNLIKELY(X) (X)
  69. #endif
  70. /* Run the notify callback FOR, returning ER if it fails */
  71. #define CALLBACK_NOTIFY_(FOR, ER) \
  72. do { \
  73. assert(HTTP_PARSER_ERRNO(parser) == HPE_OK); \
  74. \
  75. if (LIKELY(settings->on_##FOR)) { \
  76. parser->state = CURRENT_STATE(); \
  77. if (UNLIKELY(0 != settings->on_##FOR(parser))) { \
  78. SET_ERRNO(HPE_CB_##FOR); \
  79. } \
  80. UPDATE_STATE(parser->state); \
  81. \
  82. /* We either errored above or got paused; get out */ \
  83. if (UNLIKELY(HTTP_PARSER_ERRNO(parser) != HPE_OK)) { \
  84. return (ER); \
  85. } \
  86. } \
  87. } while (0)
  88. /* Run the notify callback FOR and consume the current byte */
  89. #define CALLBACK_NOTIFY(FOR) CALLBACK_NOTIFY_(FOR, p - data + 1)
  90. /* Run the notify callback FOR and don't consume the current byte */
  91. #define CALLBACK_NOTIFY_NOADVANCE(FOR) CALLBACK_NOTIFY_(FOR, p - data)
  92. /* Run data callback FOR with LEN bytes, returning ER if it fails */
  93. #define CALLBACK_DATA_(FOR, LEN, ER) \
  94. do { \
  95. assert(HTTP_PARSER_ERRNO(parser) == HPE_OK); \
  96. \
  97. if (FOR##_mark) { \
  98. if (LIKELY(settings->on_##FOR)) { \
  99. parser->state = CURRENT_STATE(); \
  100. if (UNLIKELY(0 != \
  101. settings->on_##FOR(parser, FOR##_mark, (LEN)))) { \
  102. SET_ERRNO(HPE_CB_##FOR); \
  103. } \
  104. UPDATE_STATE(parser->state); \
  105. \
  106. /* We either errored above or got paused; get out */ \
  107. if (UNLIKELY(HTTP_PARSER_ERRNO(parser) != HPE_OK)) { \
  108. return (ER); \
  109. } \
  110. } \
  111. FOR##_mark = NULL; \
  112. } \
  113. } while (0)
  114. /* Run the data callback FOR and consume the current byte */
  115. #define CALLBACK_DATA(FOR) \
  116. CALLBACK_DATA_(FOR, p - FOR##_mark, p - data + 1)
  117. /* Run the data callback FOR and don't consume the current byte */
  118. #define CALLBACK_DATA_NOADVANCE(FOR) \
  119. CALLBACK_DATA_(FOR, p - FOR##_mark, p - data)
  120. /* Set the mark FOR; non-destructive if mark is already set */
  121. #define MARK(FOR) \
  122. do { \
  123. if (!FOR##_mark) { \
  124. FOR##_mark = p; \
  125. } \
  126. } while (0)
  127. /* Don't allow the total size of the HTTP headers (including the status
  128. * line) to exceed HTTP_MAX_HEADER_SIZE. This check is here to protect
  129. * embedders against denial-of-service attacks where the attacker feeds
  130. * us a never-ending header that the embedder keeps buffering.
  131. *
  132. * This check is arguably the responsibility of embedders but we're doing
  133. * it on the embedder's behalf because most won't bother and this way we
  134. * make the web a little safer. HTTP_MAX_HEADER_SIZE is still far bigger
  135. * than any reasonable request or response so this should never affect
  136. * day-to-day operation.
  137. */
  138. #define COUNT_HEADER_SIZE(V) \
  139. do { \
  140. parser->nread += (V); \
  141. if (UNLIKELY(parser->nread > (HTTP_MAX_HEADER_SIZE))) { \
  142. SET_ERRNO(HPE_HEADER_OVERFLOW); \
  143. goto error; \
  144. } \
  145. } while (0)
  146. #define PROXY_CONNECTION "proxy-connection"
  147. #define CONNECTION "connection"
  148. #define CONTENT_LENGTH "content-length"
  149. #define TRANSFER_ENCODING "transfer-encoding"
  150. #define UPGRADE "upgrade"
  151. #define CHUNKED "chunked"
  152. #define KEEP_ALIVE "keep-alive"
  153. #define CLOSE "close"
  154. static const char *method_strings[] =
  155. {
  156. #define XX(num, name, string) #string,
  157. HTTP_METHOD_MAP(XX)
  158. #undef XX
  159. };
  160. /* Tokens as defined by rfc 2616. Also lowercases them.
  161. * token = 1*<any CHAR except CTLs or separators>
  162. * separators = "(" | ")" | "<" | ">" | "@"
  163. * | "," | ";" | ":" | "\" | <">
  164. * | "/" | "[" | "]" | "?" | "="
  165. * | "{" | "}" | SP | HT
  166. */
  167. static const char tokens[256] = {
  168. /* 0 nul 1 soh 2 stx 3 etx 4 eot 5 enq 6 ack 7 bel */
  169. 0, 0, 0, 0, 0, 0, 0, 0,
  170. /* 8 bs 9 ht 10 nl 11 vt 12 np 13 cr 14 so 15 si */
  171. 0, 0, 0, 0, 0, 0, 0, 0,
  172. /* 16 dle 17 dc1 18 dc2 19 dc3 20 dc4 21 nak 22 syn 23 etb */
  173. 0, 0, 0, 0, 0, 0, 0, 0,
  174. /* 24 can 25 em 26 sub 27 esc 28 fs 29 gs 30 rs 31 us */
  175. 0, 0, 0, 0, 0, 0, 0, 0,
  176. /* 32 sp 33 ! 34 " 35 # 36 $ 37 % 38 & 39 ' */
  177. 0, '!', 0, '#', '$', '%', '&', '\'',
  178. /* 40 ( 41 ) 42 * 43 + 44 , 45 - 46 . 47 / */
  179. 0, 0, '*', '+', 0, '-', '.', 0,
  180. /* 48 0 49 1 50 2 51 3 52 4 53 5 54 6 55 7 */
  181. '0', '1', '2', '3', '4', '5', '6', '7',
  182. /* 56 8 57 9 58 : 59 ; 60 < 61 = 62 > 63 ? */
  183. '8', '9', 0, 0, 0, 0, 0, 0,
  184. /* 64 @ 65 A 66 B 67 C 68 D 69 E 70 F 71 G */
  185. 0, 'a', 'b', 'c', 'd', 'e', 'f', 'g',
  186. /* 72 H 73 I 74 J 75 K 76 L 77 M 78 N 79 O */
  187. 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o',
  188. /* 80 P 81 Q 82 R 83 S 84 T 85 U 86 V 87 W */
  189. 'p', 'q', 'r', 's', 't', 'u', 'v', 'w',
  190. /* 88 X 89 Y 90 Z 91 [ 92 \ 93 ] 94 ^ 95 _ */
  191. 'x', 'y', 'z', 0, 0, 0, '^', '_',
  192. /* 96 ` 97 a 98 b 99 c 100 d 101 e 102 f 103 g */
  193. '`', 'a', 'b', 'c', 'd', 'e', 'f', 'g',
  194. /* 104 h 105 i 106 j 107 k 108 l 109 m 110 n 111 o */
  195. 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o',
  196. /* 112 p 113 q 114 r 115 s 116 t 117 u 118 v 119 w */
  197. 'p', 'q', 'r', 's', 't', 'u', 'v', 'w',
  198. /* 120 x 121 y 122 z 123 { 124 | 125 } 126 ~ 127 del */
  199. 'x', 'y', 'z', 0, '|', 0, '~', 0 };
  200. static const int8_t unhex[256] =
  201. {-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  202. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  203. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  204. , 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,-1,-1,-1,-1,-1,-1
  205. ,-1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1
  206. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  207. ,-1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1
  208. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  209. };
  210. #if HTTP_PARSER_STRICT
  211. # define T(v) 0
  212. #else
  213. # define T(v) v
  214. #endif
  215. static const uint8_t normal_url_char[32] = {
  216. /* 0 nul 1 soh 2 stx 3 etx 4 eot 5 enq 6 ack 7 bel */
  217. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  218. /* 8 bs 9 ht 10 nl 11 vt 12 np 13 cr 14 so 15 si */
  219. 0 | T(2) | 0 | 0 | T(16) | 0 | 0 | 0,
  220. /* 16 dle 17 dc1 18 dc2 19 dc3 20 dc4 21 nak 22 syn 23 etb */
  221. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  222. /* 24 can 25 em 26 sub 27 esc 28 fs 29 gs 30 rs 31 us */
  223. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  224. /* 32 sp 33 ! 34 " 35 # 36 $ 37 % 38 & 39 ' */
  225. 0 | 2 | 4 | 0 | 16 | 32 | 64 | 128,
  226. /* 40 ( 41 ) 42 * 43 + 44 , 45 - 46 . 47 / */
  227. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  228. /* 48 0 49 1 50 2 51 3 52 4 53 5 54 6 55 7 */
  229. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  230. /* 56 8 57 9 58 : 59 ; 60 < 61 = 62 > 63 ? */
  231. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 0,
  232. /* 64 @ 65 A 66 B 67 C 68 D 69 E 70 F 71 G */
  233. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  234. /* 72 H 73 I 74 J 75 K 76 L 77 M 78 N 79 O */
  235. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  236. /* 80 P 81 Q 82 R 83 S 84 T 85 U 86 V 87 W */
  237. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  238. /* 88 X 89 Y 90 Z 91 [ 92 \ 93 ] 94 ^ 95 _ */
  239. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  240. /* 96 ` 97 a 98 b 99 c 100 d 101 e 102 f 103 g */
  241. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  242. /* 104 h 105 i 106 j 107 k 108 l 109 m 110 n 111 o */
  243. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  244. /* 112 p 113 q 114 r 115 s 116 t 117 u 118 v 119 w */
  245. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  246. /* 120 x 121 y 122 z 123 { 124 | 125 } 126 ~ 127 del */
  247. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 0, };
  248. #undef T
  249. #define PARSING_HEADER(state) (state <= s_headers_done)
  250. enum header_states
  251. { h_general = 0
  252. , h_C
  253. , h_CO
  254. , h_CON
  255. , h_matching_connection
  256. , h_matching_proxy_connection
  257. , h_matching_content_length
  258. , h_matching_transfer_encoding
  259. , h_matching_upgrade
  260. , h_connection
  261. , h_content_length
  262. , h_transfer_encoding
  263. , h_upgrade
  264. , h_matching_transfer_encoding_chunked
  265. , h_matching_connection_token_start
  266. , h_matching_connection_keep_alive
  267. , h_matching_connection_close
  268. , h_matching_connection_upgrade
  269. , h_matching_connection_token
  270. , h_transfer_encoding_chunked
  271. , h_connection_keep_alive
  272. , h_connection_close
  273. , h_connection_upgrade
  274. };
  275. enum http_host_state
  276. {
  277. s_http_host_dead = 1
  278. , s_http_userinfo_start
  279. , s_http_userinfo
  280. , s_http_host_start
  281. , s_http_host_v6_start
  282. , s_http_host
  283. , s_http_host_v6
  284. , s_http_host_v6_end
  285. , s_http_host_v6_zone_start
  286. , s_http_host_v6_zone
  287. , s_http_host_port_start
  288. , s_http_host_port
  289. };
  290. /* Macros for character classes; depends on strict-mode */
  291. #define CR '\r'
  292. #define LF '\n'
  293. #define LOWER(c) (unsigned char)(c | 0x20)
  294. #define IS_ALPHA(c) (LOWER(c) >= 'a' && LOWER(c) <= 'z')
  295. #define IS_NUM(c) ((c) >= '0' && (c) <= '9')
  296. #define IS_ALPHANUM(c) (IS_ALPHA(c) || IS_NUM(c))
  297. #define IS_HEX(c) (IS_NUM(c) || (LOWER(c) >= 'a' && LOWER(c) <= 'f'))
  298. #define IS_MARK(c) ((c) == '-' || (c) == '_' || (c) == '.' || \
  299. (c) == '!' || (c) == '~' || (c) == '*' || (c) == '\'' || (c) == '(' || \
  300. (c) == ')')
  301. #define IS_USERINFO_CHAR(c) (IS_ALPHANUM(c) || IS_MARK(c) || (c) == '%' || \
  302. (c) == ';' || (c) == ':' || (c) == '&' || (c) == '=' || (c) == '+' || \
  303. (c) == '$' || (c) == ',')
  304. #define STRICT_TOKEN(c) (tokens[(unsigned char)c])
  305. #if HTTP_PARSER_STRICT
  306. #define TOKEN(c) (tokens[(unsigned char)c])
  307. #define IS_URL_CHAR(c) (BIT_AT(normal_url_char, (unsigned char)c))
  308. #define IS_HOST_CHAR(c) (IS_ALPHANUM(c) || (c) == '.' || (c) == '-')
  309. #else
  310. #define TOKEN(c) ((c == ' ') ? ' ' : tokens[(unsigned char)c])
  311. #define IS_URL_CHAR(c) \
  312. (BIT_AT(normal_url_char, (unsigned char)c) || ((c) & 0x80))
  313. #define IS_HOST_CHAR(c) \
  314. (IS_ALPHANUM(c) || (c) == '.' || (c) == '-' || (c) == '_')
  315. #endif
  316. /**
  317. * Verify that a char is a valid visible (printable) US-ASCII
  318. * character or %x80-FF
  319. **/
  320. #define IS_HEADER_CHAR(ch) \
  321. (ch == CR || ch == LF || ch == 9 || ((unsigned char)ch > 31 && ch != 127))
  322. #define start_state (parser->type == HTTP_REQUEST ? s_start_req : s_start_res)
  323. #if HTTP_PARSER_STRICT
  324. # define STRICT_CHECK(cond) \
  325. do { \
  326. if (cond) { \
  327. SET_ERRNO(HPE_STRICT); \
  328. goto error; \
  329. } \
  330. } while (0)
  331. # define NEW_MESSAGE() (http_should_keep_alive(parser) ? start_state : s_dead)
  332. #else
  333. # define STRICT_CHECK(cond)
  334. # define NEW_MESSAGE() start_state
  335. #endif
  336. /* Map errno values to strings for human-readable output */
  337. #define HTTP_STRERROR_GEN(n, s) { "HPE_" #n, s },
  338. static struct {
  339. const char *name;
  340. const char *description;
  341. } http_strerror_tab[] = {
  342. HTTP_ERRNO_MAP(HTTP_STRERROR_GEN)
  343. };
  344. #undef HTTP_STRERROR_GEN
  345. int http_message_needs_eof(const http_parser *parser);
  346. /* Our URL parser.
  347. *
  348. * This is designed to be shared by http_parser_execute() for URL validation,
  349. * hence it has a state transition + byte-for-byte interface. In addition, it
  350. * is meant to be embedded in http_parser_parse_url(), which does the dirty
  351. * work of turning state transitions URL components for its API.
  352. *
  353. * This function should only be invoked with non-space characters. It is
  354. * assumed that the caller cares about (and can detect) the transition between
  355. * URL and non-URL states by looking for these.
  356. */
  357. static enum state
  358. parse_url_char(enum state s, const char ch)
  359. {
  360. if (ch == ' ' || ch == '\r' || ch == '\n') {
  361. return s_dead;
  362. }
  363. #if HTTP_PARSER_STRICT
  364. if (ch == '\t' || ch == '\f') {
  365. return s_dead;
  366. }
  367. #endif
  368. switch (s) {
  369. case s_req_spaces_before_url:
  370. /* Proxied requests are followed by scheme of an absolute URI (alpha).
  371. * All methods except CONNECT are followed by '/' or '*'.
  372. */
  373. if (ch == '/' || ch == '*') {
  374. return s_req_path;
  375. }
  376. if (IS_ALPHA(ch)) {
  377. return s_req_schema;
  378. }
  379. break;
  380. case s_req_schema:
  381. if (IS_ALPHA(ch)) {
  382. return s;
  383. }
  384. if (ch == ':') {
  385. return s_req_schema_slash;
  386. }
  387. break;
  388. case s_req_schema_slash:
  389. if (ch == '/') {
  390. return s_req_schema_slash_slash;
  391. }
  392. break;
  393. case s_req_schema_slash_slash:
  394. if (ch == '/') {
  395. return s_req_server_start;
  396. }
  397. break;
  398. case s_req_server_with_at:
  399. if (ch == '@') {
  400. return s_dead;
  401. }
  402. /* FALLTHROUGH */
  403. case s_req_server_start:
  404. case s_req_server:
  405. if (ch == '/') {
  406. return s_req_path;
  407. }
  408. if (ch == '?') {
  409. return s_req_query_string_start;
  410. }
  411. if (ch == '@') {
  412. return s_req_server_with_at;
  413. }
  414. if (IS_USERINFO_CHAR(ch) || ch == '[' || ch == ']') {
  415. return s_req_server;
  416. }
  417. break;
  418. case s_req_path:
  419. if (IS_URL_CHAR(ch)) {
  420. return s;
  421. }
  422. switch (ch) {
  423. case '?':
  424. return s_req_query_string_start;
  425. case '#':
  426. return s_req_fragment_start;
  427. }
  428. break;
  429. case s_req_query_string_start:
  430. case s_req_query_string:
  431. if (IS_URL_CHAR(ch)) {
  432. return s_req_query_string;
  433. }
  434. switch (ch) {
  435. case '?':
  436. /* allow extra '?' in query string */
  437. return s_req_query_string;
  438. case '#':
  439. return s_req_fragment_start;
  440. }
  441. break;
  442. case s_req_fragment_start:
  443. if (IS_URL_CHAR(ch)) {
  444. return s_req_fragment;
  445. }
  446. switch (ch) {
  447. case '?':
  448. return s_req_fragment;
  449. case '#':
  450. return s;
  451. }
  452. break;
  453. case s_req_fragment:
  454. if (IS_URL_CHAR(ch)) {
  455. return s;
  456. }
  457. switch (ch) {
  458. case '?':
  459. case '#':
  460. return s;
  461. }
  462. break;
  463. default:
  464. break;
  465. }
  466. /* We should never fall out of the switch above unless there's an error */
  467. return s_dead;
  468. }
  469. size_t http_parser_execute (http_parser *parser,
  470. const http_parser_settings *settings,
  471. const char *data,
  472. size_t len)
  473. {
  474. char c, ch;
  475. int8_t unhex_val;
  476. const char *p = data;
  477. const char *header_field_mark = 0;
  478. const char *header_value_mark = 0;
  479. const char *url_mark = 0;
  480. const char *body_mark = 0;
  481. const char *status_mark = 0;
  482. enum state p_state = (enum state) parser->state;
  483. const unsigned int lenient = parser->lenient_http_headers;
  484. /* We're in an error state. Don't bother doing anything. */
  485. if (HTTP_PARSER_ERRNO(parser) != HPE_OK) {
  486. return 0;
  487. }
  488. if (len == 0) {
  489. switch (CURRENT_STATE()) {
  490. case s_body_identity_eof:
  491. /* Use of CALLBACK_NOTIFY() here would erroneously return 1 byte read if
  492. * we got paused.
  493. */
  494. CALLBACK_NOTIFY_NOADVANCE(message_complete);
  495. return 0;
  496. case s_dead:
  497. case s_start_req_or_res:
  498. case s_start_res:
  499. case s_start_req:
  500. return 0;
  501. default:
  502. SET_ERRNO(HPE_INVALID_EOF_STATE);
  503. return 1;
  504. }
  505. }
  506. if (CURRENT_STATE() == s_header_field)
  507. header_field_mark = data;
  508. if (CURRENT_STATE() == s_header_value)
  509. header_value_mark = data;
  510. switch (CURRENT_STATE()) {
  511. case s_req_path:
  512. case s_req_schema:
  513. case s_req_schema_slash:
  514. case s_req_schema_slash_slash:
  515. case s_req_server_start:
  516. case s_req_server:
  517. case s_req_server_with_at:
  518. case s_req_query_string_start:
  519. case s_req_query_string:
  520. case s_req_fragment_start:
  521. case s_req_fragment:
  522. url_mark = data;
  523. break;
  524. case s_res_status:
  525. status_mark = data;
  526. break;
  527. default:
  528. break;
  529. }
  530. for (p=data; p != data + len; p++) {
  531. ch = *p;
  532. if (PARSING_HEADER(CURRENT_STATE()))
  533. COUNT_HEADER_SIZE(1);
  534. reexecute:
  535. switch (CURRENT_STATE()) {
  536. case s_dead:
  537. /* this state is used after a 'Connection: close' message
  538. * the parser will error out if it reads another message
  539. */
  540. if (LIKELY(ch == CR || ch == LF))
  541. break;
  542. SET_ERRNO(HPE_CLOSED_CONNECTION);
  543. goto error;
  544. case s_start_req_or_res:
  545. {
  546. if (ch == CR || ch == LF)
  547. break;
  548. parser->flags = 0;
  549. parser->content_length = ULLONG_MAX;
  550. if (ch == 'H') {
  551. UPDATE_STATE(s_res_or_resp_H);
  552. CALLBACK_NOTIFY(message_begin);
  553. } else {
  554. parser->type = HTTP_REQUEST;
  555. UPDATE_STATE(s_start_req);
  556. REEXECUTE();
  557. }
  558. break;
  559. }
  560. case s_res_or_resp_H:
  561. if (ch == 'T') {
  562. parser->type = HTTP_RESPONSE;
  563. UPDATE_STATE(s_res_HT);
  564. } else {
  565. if (UNLIKELY(ch != 'E')) {
  566. SET_ERRNO(HPE_INVALID_CONSTANT);
  567. goto error;
  568. }
  569. parser->type = HTTP_REQUEST;
  570. parser->method = HTTP_HEAD;
  571. parser->index = 2;
  572. UPDATE_STATE(s_req_method);
  573. }
  574. break;
  575. case s_start_res:
  576. {
  577. parser->flags = 0;
  578. parser->content_length = ULLONG_MAX;
  579. switch (ch) {
  580. case 'H':
  581. UPDATE_STATE(s_res_H);
  582. break;
  583. case CR:
  584. case LF:
  585. break;
  586. default:
  587. SET_ERRNO(HPE_INVALID_CONSTANT);
  588. goto error;
  589. }
  590. CALLBACK_NOTIFY(message_begin);
  591. break;
  592. }
  593. case s_res_H:
  594. STRICT_CHECK(ch != 'T');
  595. UPDATE_STATE(s_res_HT);
  596. break;
  597. case s_res_HT:
  598. STRICT_CHECK(ch != 'T');
  599. UPDATE_STATE(s_res_HTT);
  600. break;
  601. case s_res_HTT:
  602. STRICT_CHECK(ch != 'P');
  603. UPDATE_STATE(s_res_HTTP);
  604. break;
  605. case s_res_HTTP:
  606. STRICT_CHECK(ch != '/');
  607. UPDATE_STATE(s_res_first_http_major);
  608. break;
  609. case s_res_first_http_major:
  610. if (UNLIKELY(ch < '0' || ch > '9')) {
  611. SET_ERRNO(HPE_INVALID_VERSION);
  612. goto error;
  613. }
  614. parser->http_major = ch - '0';
  615. UPDATE_STATE(s_res_http_major);
  616. break;
  617. /* major HTTP version or dot */
  618. case s_res_http_major:
  619. {
  620. if (ch == '.') {
  621. UPDATE_STATE(s_res_first_http_minor);
  622. break;
  623. }
  624. if (!IS_NUM(ch)) {
  625. SET_ERRNO(HPE_INVALID_VERSION);
  626. goto error;
  627. }
  628. parser->http_major *= 10;
  629. parser->http_major += ch - '0';
  630. if (UNLIKELY(parser->http_major > 999)) {
  631. SET_ERRNO(HPE_INVALID_VERSION);
  632. goto error;
  633. }
  634. break;
  635. }
  636. /* first digit of minor HTTP version */
  637. case s_res_first_http_minor:
  638. if (UNLIKELY(!IS_NUM(ch))) {
  639. SET_ERRNO(HPE_INVALID_VERSION);
  640. goto error;
  641. }
  642. parser->http_minor = ch - '0';
  643. UPDATE_STATE(s_res_http_minor);
  644. break;
  645. /* minor HTTP version or end of request line */
  646. case s_res_http_minor:
  647. {
  648. if (ch == ' ') {
  649. UPDATE_STATE(s_res_first_status_code);
  650. break;
  651. }
  652. if (UNLIKELY(!IS_NUM(ch))) {
  653. SET_ERRNO(HPE_INVALID_VERSION);
  654. goto error;
  655. }
  656. parser->http_minor *= 10;
  657. parser->http_minor += ch - '0';
  658. if (UNLIKELY(parser->http_minor > 999)) {
  659. SET_ERRNO(HPE_INVALID_VERSION);
  660. goto error;
  661. }
  662. break;
  663. }
  664. case s_res_first_status_code:
  665. {
  666. if (!IS_NUM(ch)) {
  667. if (ch == ' ') {
  668. break;
  669. }
  670. SET_ERRNO(HPE_INVALID_STATUS);
  671. goto error;
  672. }
  673. parser->status_code = ch - '0';
  674. UPDATE_STATE(s_res_status_code);
  675. break;
  676. }
  677. case s_res_status_code:
  678. {
  679. if (!IS_NUM(ch)) {
  680. switch (ch) {
  681. case ' ':
  682. UPDATE_STATE(s_res_status_start);
  683. break;
  684. case CR:
  685. UPDATE_STATE(s_res_line_almost_done);
  686. break;
  687. case LF:
  688. UPDATE_STATE(s_header_field_start);
  689. break;
  690. default:
  691. SET_ERRNO(HPE_INVALID_STATUS);
  692. goto error;
  693. }
  694. break;
  695. }
  696. parser->status_code *= 10;
  697. parser->status_code += ch - '0';
  698. if (UNLIKELY(parser->status_code > 999)) {
  699. SET_ERRNO(HPE_INVALID_STATUS);
  700. goto error;
  701. }
  702. break;
  703. }
  704. case s_res_status_start:
  705. {
  706. if (ch == CR) {
  707. UPDATE_STATE(s_res_line_almost_done);
  708. break;
  709. }
  710. if (ch == LF) {
  711. UPDATE_STATE(s_header_field_start);
  712. break;
  713. }
  714. MARK(status);
  715. UPDATE_STATE(s_res_status);
  716. parser->index = 0;
  717. break;
  718. }
  719. case s_res_status:
  720. if (ch == CR) {
  721. UPDATE_STATE(s_res_line_almost_done);
  722. CALLBACK_DATA(status);
  723. break;
  724. }
  725. if (ch == LF) {
  726. UPDATE_STATE(s_header_field_start);
  727. CALLBACK_DATA(status);
  728. break;
  729. }
  730. break;
  731. case s_res_line_almost_done:
  732. STRICT_CHECK(ch != LF);
  733. UPDATE_STATE(s_header_field_start);
  734. break;
  735. case s_start_req:
  736. {
  737. if (ch == CR || ch == LF)
  738. break;
  739. parser->flags = 0;
  740. parser->content_length = ULLONG_MAX;
  741. if (UNLIKELY(!IS_ALPHA(ch))) {
  742. SET_ERRNO(HPE_INVALID_METHOD);
  743. goto error;
  744. }
  745. parser->method = (enum http_method) 0;
  746. parser->index = 1;
  747. switch (ch) {
  748. case 'A': parser->method = HTTP_ACL; break;
  749. case 'B': parser->method = HTTP_BIND; break;
  750. case 'C': parser->method = HTTP_CONNECT; /* or COPY, CHECKOUT */ break;
  751. case 'D': parser->method = HTTP_DELETE; break;
  752. case 'G': parser->method = HTTP_GET; break;
  753. case 'H': parser->method = HTTP_HEAD; break;
  754. case 'L': parser->method = HTTP_LOCK; /* or LINK */ break;
  755. case 'M': parser->method = HTTP_MKCOL; /* or MOVE, MKACTIVITY, MERGE, M-SEARCH, MKCALENDAR */ break;
  756. case 'N': parser->method = HTTP_NOTIFY; break;
  757. case 'O': parser->method = HTTP_OPTIONS; break;
  758. case 'P': parser->method = HTTP_POST;
  759. /* or PROPFIND|PROPPATCH|PUT|PATCH|PURGE */
  760. break;
  761. case 'R': parser->method = HTTP_REPORT; /* or REBIND */ break;
  762. case 'S': parser->method = HTTP_SUBSCRIBE; /* or SEARCH */ break;
  763. case 'T': parser->method = HTTP_TRACE; break;
  764. case 'U': parser->method = HTTP_UNLOCK; /* or UNSUBSCRIBE, UNBIND, UNLINK */ break;
  765. default:
  766. SET_ERRNO(HPE_INVALID_METHOD);
  767. goto error;
  768. }
  769. UPDATE_STATE(s_req_method);
  770. CALLBACK_NOTIFY(message_begin);
  771. break;
  772. }
  773. case s_req_method:
  774. {
  775. const char *matcher;
  776. if (UNLIKELY(ch == '\0')) {
  777. SET_ERRNO(HPE_INVALID_METHOD);
  778. goto error;
  779. }
  780. matcher = method_strings[parser->method];
  781. if (ch == ' ' && matcher[parser->index] == '\0') {
  782. UPDATE_STATE(s_req_spaces_before_url);
  783. } else if (ch == matcher[parser->index]) {
  784. ; /* nada */
  785. } else if (IS_ALPHA(ch)) {
  786. switch (parser->method << 16 | parser->index << 8 | ch) {
  787. #define XX(meth, pos, ch, new_meth) \
  788. case (HTTP_##meth << 16 | pos << 8 | ch): \
  789. parser->method = HTTP_##new_meth; break;
  790. XX(POST, 1, 'U', PUT)
  791. XX(POST, 1, 'A', PATCH)
  792. XX(CONNECT, 1, 'H', CHECKOUT)
  793. XX(CONNECT, 2, 'P', COPY)
  794. XX(MKCOL, 1, 'O', MOVE)
  795. XX(MKCOL, 1, 'E', MERGE)
  796. XX(MKCOL, 2, 'A', MKACTIVITY)
  797. XX(MKCOL, 3, 'A', MKCALENDAR)
  798. XX(SUBSCRIBE, 1, 'E', SEARCH)
  799. XX(REPORT, 2, 'B', REBIND)
  800. XX(POST, 1, 'R', PROPFIND)
  801. XX(PROPFIND, 4, 'P', PROPPATCH)
  802. XX(PUT, 2, 'R', PURGE)
  803. XX(LOCK, 1, 'I', LINK)
  804. XX(UNLOCK, 2, 'S', UNSUBSCRIBE)
  805. XX(UNLOCK, 2, 'B', UNBIND)
  806. XX(UNLOCK, 3, 'I', UNLINK)
  807. #undef XX
  808. default:
  809. SET_ERRNO(HPE_INVALID_METHOD);
  810. goto error;
  811. }
  812. } else if (ch == '-' &&
  813. parser->index == 1 &&
  814. parser->method == HTTP_MKCOL) {
  815. parser->method = HTTP_MSEARCH;
  816. } else {
  817. SET_ERRNO(HPE_INVALID_METHOD);
  818. goto error;
  819. }
  820. ++parser->index;
  821. break;
  822. }
  823. case s_req_spaces_before_url:
  824. {
  825. if (ch == ' ') break;
  826. MARK(url);
  827. if (parser->method == HTTP_CONNECT) {
  828. UPDATE_STATE(s_req_server_start);
  829. }
  830. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  831. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  832. SET_ERRNO(HPE_INVALID_URL);
  833. goto error;
  834. }
  835. break;
  836. }
  837. case s_req_schema:
  838. case s_req_schema_slash:
  839. case s_req_schema_slash_slash:
  840. case s_req_server_start:
  841. {
  842. switch (ch) {
  843. /* No whitespace allowed here */
  844. case ' ':
  845. case CR:
  846. case LF:
  847. SET_ERRNO(HPE_INVALID_URL);
  848. goto error;
  849. default:
  850. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  851. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  852. SET_ERRNO(HPE_INVALID_URL);
  853. goto error;
  854. }
  855. }
  856. break;
  857. }
  858. case s_req_server:
  859. case s_req_server_with_at:
  860. case s_req_path:
  861. case s_req_query_string_start:
  862. case s_req_query_string:
  863. case s_req_fragment_start:
  864. case s_req_fragment:
  865. {
  866. switch (ch) {
  867. case ' ':
  868. UPDATE_STATE(s_req_http_start);
  869. CALLBACK_DATA(url);
  870. break;
  871. case CR:
  872. case LF:
  873. parser->http_major = 0;
  874. parser->http_minor = 9;
  875. UPDATE_STATE((ch == CR) ?
  876. s_req_line_almost_done :
  877. s_header_field_start);
  878. CALLBACK_DATA(url);
  879. break;
  880. default:
  881. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  882. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  883. SET_ERRNO(HPE_INVALID_URL);
  884. goto error;
  885. }
  886. }
  887. break;
  888. }
  889. case s_req_http_start:
  890. switch (ch) {
  891. case 'H':
  892. UPDATE_STATE(s_req_http_H);
  893. break;
  894. case ' ':
  895. break;
  896. default:
  897. SET_ERRNO(HPE_INVALID_CONSTANT);
  898. goto error;
  899. }
  900. break;
  901. case s_req_http_H:
  902. STRICT_CHECK(ch != 'T');
  903. UPDATE_STATE(s_req_http_HT);
  904. break;
  905. case s_req_http_HT:
  906. STRICT_CHECK(ch != 'T');
  907. UPDATE_STATE(s_req_http_HTT);
  908. break;
  909. case s_req_http_HTT:
  910. STRICT_CHECK(ch != 'P');
  911. UPDATE_STATE(s_req_http_HTTP);
  912. break;
  913. case s_req_http_HTTP:
  914. STRICT_CHECK(ch != '/');
  915. UPDATE_STATE(s_req_first_http_major);
  916. break;
  917. /* first digit of major HTTP version */
  918. case s_req_first_http_major:
  919. if (UNLIKELY(ch < '1' || ch > '9')) {
  920. SET_ERRNO(HPE_INVALID_VERSION);
  921. goto error;
  922. }
  923. parser->http_major = ch - '0';
  924. UPDATE_STATE(s_req_http_major);
  925. break;
  926. /* major HTTP version or dot */
  927. case s_req_http_major:
  928. {
  929. if (ch == '.') {
  930. UPDATE_STATE(s_req_first_http_minor);
  931. break;
  932. }
  933. if (UNLIKELY(!IS_NUM(ch))) {
  934. SET_ERRNO(HPE_INVALID_VERSION);
  935. goto error;
  936. }
  937. parser->http_major *= 10;
  938. parser->http_major += ch - '0';
  939. if (UNLIKELY(parser->http_major > 999)) {
  940. SET_ERRNO(HPE_INVALID_VERSION);
  941. goto error;
  942. }
  943. break;
  944. }
  945. /* first digit of minor HTTP version */
  946. case s_req_first_http_minor:
  947. if (UNLIKELY(!IS_NUM(ch))) {
  948. SET_ERRNO(HPE_INVALID_VERSION);
  949. goto error;
  950. }
  951. parser->http_minor = ch - '0';
  952. UPDATE_STATE(s_req_http_minor);
  953. break;
  954. /* minor HTTP version or end of request line */
  955. case s_req_http_minor:
  956. {
  957. if (ch == CR) {
  958. UPDATE_STATE(s_req_line_almost_done);
  959. break;
  960. }
  961. if (ch == LF) {
  962. UPDATE_STATE(s_header_field_start);
  963. break;
  964. }
  965. /* XXX allow spaces after digit? */
  966. if (UNLIKELY(!IS_NUM(ch))) {
  967. SET_ERRNO(HPE_INVALID_VERSION);
  968. goto error;
  969. }
  970. parser->http_minor *= 10;
  971. parser->http_minor += ch - '0';
  972. if (UNLIKELY(parser->http_minor > 999)) {
  973. SET_ERRNO(HPE_INVALID_VERSION);
  974. goto error;
  975. }
  976. break;
  977. }
  978. /* end of request line */
  979. case s_req_line_almost_done:
  980. {
  981. if (UNLIKELY(ch != LF)) {
  982. SET_ERRNO(HPE_LF_EXPECTED);
  983. goto error;
  984. }
  985. UPDATE_STATE(s_header_field_start);
  986. break;
  987. }
  988. case s_header_field_start:
  989. {
  990. if (ch == CR) {
  991. UPDATE_STATE(s_headers_almost_done);
  992. break;
  993. }
  994. if (ch == LF) {
  995. /* they might be just sending \n instead of \r\n so this would be
  996. * the second \n to denote the end of headers*/
  997. UPDATE_STATE(s_headers_almost_done);
  998. REEXECUTE();
  999. }
  1000. c = TOKEN(ch);
  1001. if (UNLIKELY(!c)) {
  1002. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1003. goto error;
  1004. }
  1005. MARK(header_field);
  1006. parser->index = 0;
  1007. UPDATE_STATE(s_header_field);
  1008. switch (c) {
  1009. case 'c':
  1010. parser->header_state = h_C;
  1011. break;
  1012. case 'p':
  1013. parser->header_state = h_matching_proxy_connection;
  1014. break;
  1015. case 't':
  1016. parser->header_state = h_matching_transfer_encoding;
  1017. break;
  1018. case 'u':
  1019. parser->header_state = h_matching_upgrade;
  1020. break;
  1021. default:
  1022. parser->header_state = h_general;
  1023. break;
  1024. }
  1025. break;
  1026. }
  1027. case s_header_field:
  1028. {
  1029. const char* start = p;
  1030. for (; p != data + len; p++) {
  1031. ch = *p;
  1032. c = TOKEN(ch);
  1033. if (!c)
  1034. break;
  1035. switch (parser->header_state) {
  1036. case h_general:
  1037. break;
  1038. case h_C:
  1039. parser->index++;
  1040. parser->header_state = (c == 'o' ? h_CO : h_general);
  1041. break;
  1042. case h_CO:
  1043. parser->index++;
  1044. parser->header_state = (c == 'n' ? h_CON : h_general);
  1045. break;
  1046. case h_CON:
  1047. parser->index++;
  1048. switch (c) {
  1049. case 'n':
  1050. parser->header_state = h_matching_connection;
  1051. break;
  1052. case 't':
  1053. parser->header_state = h_matching_content_length;
  1054. break;
  1055. default:
  1056. parser->header_state = h_general;
  1057. break;
  1058. }
  1059. break;
  1060. /* connection */
  1061. case h_matching_connection:
  1062. parser->index++;
  1063. if (parser->index > sizeof(CONNECTION)-1
  1064. || c != CONNECTION[parser->index]) {
  1065. parser->header_state = h_general;
  1066. } else if (parser->index == sizeof(CONNECTION)-2) {
  1067. parser->header_state = h_connection;
  1068. }
  1069. break;
  1070. /* proxy-connection */
  1071. case h_matching_proxy_connection:
  1072. parser->index++;
  1073. if (parser->index > sizeof(PROXY_CONNECTION)-1
  1074. || c != PROXY_CONNECTION[parser->index]) {
  1075. parser->header_state = h_general;
  1076. } else if (parser->index == sizeof(PROXY_CONNECTION)-2) {
  1077. parser->header_state = h_connection;
  1078. }
  1079. break;
  1080. /* content-length */
  1081. case h_matching_content_length:
  1082. parser->index++;
  1083. if (parser->index > sizeof(CONTENT_LENGTH)-1
  1084. || c != CONTENT_LENGTH[parser->index]) {
  1085. parser->header_state = h_general;
  1086. } else if (parser->index == sizeof(CONTENT_LENGTH)-2) {
  1087. parser->header_state = h_content_length;
  1088. }
  1089. break;
  1090. /* transfer-encoding */
  1091. case h_matching_transfer_encoding:
  1092. parser->index++;
  1093. if (parser->index > sizeof(TRANSFER_ENCODING)-1
  1094. || c != TRANSFER_ENCODING[parser->index]) {
  1095. parser->header_state = h_general;
  1096. } else if (parser->index == sizeof(TRANSFER_ENCODING)-2) {
  1097. parser->header_state = h_transfer_encoding;
  1098. }
  1099. break;
  1100. /* upgrade */
  1101. case h_matching_upgrade:
  1102. parser->index++;
  1103. if (parser->index > sizeof(UPGRADE)-1
  1104. || c != UPGRADE[parser->index]) {
  1105. parser->header_state = h_general;
  1106. } else if (parser->index == sizeof(UPGRADE)-2) {
  1107. parser->header_state = h_upgrade;
  1108. }
  1109. break;
  1110. case h_connection:
  1111. case h_content_length:
  1112. case h_transfer_encoding:
  1113. case h_upgrade:
  1114. if (ch != ' ') parser->header_state = h_general;
  1115. break;
  1116. default:
  1117. assert(0 && "Unknown header_state");
  1118. break;
  1119. }
  1120. }
  1121. COUNT_HEADER_SIZE(p - start);
  1122. if (p == data + len) {
  1123. --p;
  1124. break;
  1125. }
  1126. if (ch == ':') {
  1127. UPDATE_STATE(s_header_value_discard_ws);
  1128. CALLBACK_DATA(header_field);
  1129. break;
  1130. }
  1131. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1132. goto error;
  1133. }
  1134. case s_header_value_discard_ws:
  1135. if (ch == ' ' || ch == '\t') break;
  1136. if (ch == CR) {
  1137. UPDATE_STATE(s_header_value_discard_ws_almost_done);
  1138. break;
  1139. }
  1140. if (ch == LF) {
  1141. UPDATE_STATE(s_header_value_discard_lws);
  1142. break;
  1143. }
  1144. /* FALLTHROUGH */
  1145. case s_header_value_start:
  1146. {
  1147. MARK(header_value);
  1148. UPDATE_STATE(s_header_value);
  1149. parser->index = 0;
  1150. c = LOWER(ch);
  1151. switch (parser->header_state) {
  1152. case h_upgrade:
  1153. parser->flags |= F_UPGRADE;
  1154. parser->header_state = h_general;
  1155. break;
  1156. case h_transfer_encoding:
  1157. /* looking for 'Transfer-Encoding: chunked' */
  1158. if ('c' == c) {
  1159. parser->header_state = h_matching_transfer_encoding_chunked;
  1160. } else {
  1161. parser->header_state = h_general;
  1162. }
  1163. break;
  1164. case h_content_length:
  1165. if (UNLIKELY(!IS_NUM(ch))) {
  1166. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1167. goto error;
  1168. }
  1169. if (parser->flags & F_CONTENTLENGTH) {
  1170. SET_ERRNO(HPE_UNEXPECTED_CONTENT_LENGTH);
  1171. goto error;
  1172. }
  1173. parser->flags |= F_CONTENTLENGTH;
  1174. parser->content_length = ch - '0';
  1175. break;
  1176. case h_connection:
  1177. /* looking for 'Connection: keep-alive' */
  1178. if (c == 'k') {
  1179. parser->header_state = h_matching_connection_keep_alive;
  1180. /* looking for 'Connection: close' */
  1181. } else if (c == 'c') {
  1182. parser->header_state = h_matching_connection_close;
  1183. } else if (c == 'u') {
  1184. parser->header_state = h_matching_connection_upgrade;
  1185. } else {
  1186. parser->header_state = h_matching_connection_token;
  1187. }
  1188. break;
  1189. /* Multi-value `Connection` header */
  1190. case h_matching_connection_token_start:
  1191. break;
  1192. default:
  1193. parser->header_state = h_general;
  1194. break;
  1195. }
  1196. break;
  1197. }
  1198. case s_header_value:
  1199. {
  1200. const char* start = p;
  1201. enum header_states h_state = (enum header_states) parser->header_state;
  1202. for (; p != data + len; p++) {
  1203. ch = *p;
  1204. if (ch == CR) {
  1205. UPDATE_STATE(s_header_almost_done);
  1206. parser->header_state = h_state;
  1207. CALLBACK_DATA(header_value);
  1208. break;
  1209. }
  1210. if (ch == LF) {
  1211. UPDATE_STATE(s_header_almost_done);
  1212. COUNT_HEADER_SIZE(p - start);
  1213. parser->header_state = h_state;
  1214. CALLBACK_DATA_NOADVANCE(header_value);
  1215. REEXECUTE();
  1216. }
  1217. if (!lenient && !IS_HEADER_CHAR(ch)) {
  1218. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1219. goto error;
  1220. }
  1221. c = LOWER(ch);
  1222. switch (h_state) {
  1223. case h_general:
  1224. {
  1225. const char* p_cr;
  1226. const char* p_lf;
  1227. size_t limit = data + len - p;
  1228. limit = MIN(limit, HTTP_MAX_HEADER_SIZE);
  1229. p_cr = (const char*) memchr(p, CR, limit);
  1230. p_lf = (const char*) memchr(p, LF, limit);
  1231. if (p_cr != NULL) {
  1232. if (p_lf != NULL && p_cr >= p_lf)
  1233. p = p_lf;
  1234. else
  1235. p = p_cr;
  1236. } else if (UNLIKELY(p_lf != NULL)) {
  1237. p = p_lf;
  1238. } else {
  1239. p = data + len;
  1240. }
  1241. --p;
  1242. break;
  1243. }
  1244. case h_connection:
  1245. case h_transfer_encoding:
  1246. assert(0 && "Shouldn't get here.");
  1247. break;
  1248. case h_content_length:
  1249. {
  1250. uint64_t t;
  1251. if (ch == ' ') break;
  1252. if (UNLIKELY(!IS_NUM(ch))) {
  1253. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1254. parser->header_state = h_state;
  1255. goto error;
  1256. }
  1257. t = parser->content_length;
  1258. t *= 10;
  1259. t += ch - '0';
  1260. /* Overflow? Test against a conservative limit for simplicity. */
  1261. if (UNLIKELY((ULLONG_MAX - 10) / 10 < parser->content_length)) {
  1262. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1263. parser->header_state = h_state;
  1264. goto error;
  1265. }
  1266. parser->content_length = t;
  1267. break;
  1268. }
  1269. /* Transfer-Encoding: chunked */
  1270. case h_matching_transfer_encoding_chunked:
  1271. parser->index++;
  1272. if (parser->index > sizeof(CHUNKED)-1
  1273. || c != CHUNKED[parser->index]) {
  1274. h_state = h_general;
  1275. } else if (parser->index == sizeof(CHUNKED)-2) {
  1276. h_state = h_transfer_encoding_chunked;
  1277. }
  1278. break;
  1279. case h_matching_connection_token_start:
  1280. /* looking for 'Connection: keep-alive' */
  1281. if (c == 'k') {
  1282. h_state = h_matching_connection_keep_alive;
  1283. /* looking for 'Connection: close' */
  1284. } else if (c == 'c') {
  1285. h_state = h_matching_connection_close;
  1286. } else if (c == 'u') {
  1287. h_state = h_matching_connection_upgrade;
  1288. } else if (STRICT_TOKEN(c)) {
  1289. h_state = h_matching_connection_token;
  1290. } else if (c == ' ' || c == '\t') {
  1291. /* Skip lws */
  1292. } else {
  1293. h_state = h_general;
  1294. }
  1295. break;
  1296. /* looking for 'Connection: keep-alive' */
  1297. case h_matching_connection_keep_alive:
  1298. parser->index++;
  1299. if (parser->index > sizeof(KEEP_ALIVE)-1
  1300. || c != KEEP_ALIVE[parser->index]) {
  1301. h_state = h_matching_connection_token;
  1302. } else if (parser->index == sizeof(KEEP_ALIVE)-2) {
  1303. h_state = h_connection_keep_alive;
  1304. }
  1305. break;
  1306. /* looking for 'Connection: close' */
  1307. case h_matching_connection_close:
  1308. parser->index++;
  1309. if (parser->index > sizeof(CLOSE)-1 || c != CLOSE[parser->index]) {
  1310. h_state = h_matching_connection_token;
  1311. } else if (parser->index == sizeof(CLOSE)-2) {
  1312. h_state = h_connection_close;
  1313. }
  1314. break;
  1315. /* looking for 'Connection: upgrade' */
  1316. case h_matching_connection_upgrade:
  1317. parser->index++;
  1318. if (parser->index > sizeof(UPGRADE) - 1 ||
  1319. c != UPGRADE[parser->index]) {
  1320. h_state = h_matching_connection_token;
  1321. } else if (parser->index == sizeof(UPGRADE)-2) {
  1322. h_state = h_connection_upgrade;
  1323. }
  1324. break;
  1325. case h_matching_connection_token:
  1326. if (ch == ',') {
  1327. h_state = h_matching_connection_token_start;
  1328. parser->index = 0;
  1329. }
  1330. break;
  1331. case h_transfer_encoding_chunked:
  1332. if (ch != ' ') h_state = h_general;
  1333. break;
  1334. case h_connection_keep_alive:
  1335. case h_connection_close:
  1336. case h_connection_upgrade:
  1337. if (ch == ',') {
  1338. if (h_state == h_connection_keep_alive) {
  1339. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1340. } else if (h_state == h_connection_close) {
  1341. parser->flags |= F_CONNECTION_CLOSE;
  1342. } else if (h_state == h_connection_upgrade) {
  1343. parser->flags |= F_CONNECTION_UPGRADE;
  1344. }
  1345. h_state = h_matching_connection_token_start;
  1346. parser->index = 0;
  1347. } else if (ch != ' ') {
  1348. h_state = h_matching_connection_token;
  1349. }
  1350. break;
  1351. default:
  1352. UPDATE_STATE(s_header_value);
  1353. h_state = h_general;
  1354. break;
  1355. }
  1356. }
  1357. parser->header_state = h_state;
  1358. COUNT_HEADER_SIZE(p - start);
  1359. if (p == data + len)
  1360. --p;
  1361. break;
  1362. }
  1363. case s_header_almost_done:
  1364. {
  1365. if (UNLIKELY(ch != LF)) {
  1366. SET_ERRNO(HPE_LF_EXPECTED);
  1367. goto error;
  1368. }
  1369. UPDATE_STATE(s_header_value_lws);
  1370. break;
  1371. }
  1372. case s_header_value_lws:
  1373. {
  1374. if (ch == ' ' || ch == '\t') {
  1375. UPDATE_STATE(s_header_value_start);
  1376. REEXECUTE();
  1377. }
  1378. /* finished the header */
  1379. switch (parser->header_state) {
  1380. case h_connection_keep_alive:
  1381. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1382. break;
  1383. case h_connection_close:
  1384. parser->flags |= F_CONNECTION_CLOSE;
  1385. break;
  1386. case h_transfer_encoding_chunked:
  1387. parser->flags |= F_CHUNKED;
  1388. break;
  1389. case h_connection_upgrade:
  1390. parser->flags |= F_CONNECTION_UPGRADE;
  1391. break;
  1392. default:
  1393. break;
  1394. }
  1395. UPDATE_STATE(s_header_field_start);
  1396. REEXECUTE();
  1397. }
  1398. case s_header_value_discard_ws_almost_done:
  1399. {
  1400. STRICT_CHECK(ch != LF);
  1401. UPDATE_STATE(s_header_value_discard_lws);
  1402. break;
  1403. }
  1404. case s_header_value_discard_lws:
  1405. {
  1406. if (ch == ' ' || ch == '\t') {
  1407. UPDATE_STATE(s_header_value_discard_ws);
  1408. break;
  1409. } else {
  1410. switch (parser->header_state) {
  1411. case h_connection_keep_alive:
  1412. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1413. break;
  1414. case h_connection_close:
  1415. parser->flags |= F_CONNECTION_CLOSE;
  1416. break;
  1417. case h_connection_upgrade:
  1418. parser->flags |= F_CONNECTION_UPGRADE;
  1419. break;
  1420. case h_transfer_encoding_chunked:
  1421. parser->flags |= F_CHUNKED;
  1422. break;
  1423. default:
  1424. break;
  1425. }
  1426. /* header value was empty */
  1427. MARK(header_value);
  1428. UPDATE_STATE(s_header_field_start);
  1429. CALLBACK_DATA_NOADVANCE(header_value);
  1430. REEXECUTE();
  1431. }
  1432. }
  1433. case s_headers_almost_done:
  1434. {
  1435. STRICT_CHECK(ch != LF);
  1436. if (parser->flags & F_TRAILING) {
  1437. /* End of a chunked request */
  1438. UPDATE_STATE(s_message_done);
  1439. CALLBACK_NOTIFY_NOADVANCE(chunk_complete);
  1440. REEXECUTE();
  1441. }
  1442. /* Cannot use chunked encoding and a content-length header together
  1443. per the HTTP specification. */
  1444. if ((parser->flags & F_CHUNKED) &&
  1445. (parser->flags & F_CONTENTLENGTH)) {
  1446. SET_ERRNO(HPE_UNEXPECTED_CONTENT_LENGTH);
  1447. goto error;
  1448. }
  1449. UPDATE_STATE(s_headers_done);
  1450. /* Set this here so that on_headers_complete() callbacks can see it */
  1451. parser->upgrade =
  1452. ((parser->flags & (F_UPGRADE | F_CONNECTION_UPGRADE)) ==
  1453. (F_UPGRADE | F_CONNECTION_UPGRADE) ||
  1454. parser->method == HTTP_CONNECT);
  1455. /* Here we call the headers_complete callback. This is somewhat
  1456. * different than other callbacks because if the user returns 1, we
  1457. * will interpret that as saying that this message has no body. This
  1458. * is needed for the annoying case of recieving a response to a HEAD
  1459. * request.
  1460. *
  1461. * We'd like to use CALLBACK_NOTIFY_NOADVANCE() here but we cannot, so
  1462. * we have to simulate it by handling a change in errno below.
  1463. */
  1464. if (settings->on_headers_complete) {
  1465. switch (settings->on_headers_complete(parser)) {
  1466. case 0:
  1467. break;
  1468. case 2:
  1469. parser->upgrade = 1;
  1470. case 1:
  1471. parser->flags |= F_SKIPBODY;
  1472. break;
  1473. default:
  1474. SET_ERRNO(HPE_CB_headers_complete);
  1475. RETURN(p - data); /* Error */
  1476. }
  1477. }
  1478. if (HTTP_PARSER_ERRNO(parser) != HPE_OK) {
  1479. RETURN(p - data);
  1480. }
  1481. REEXECUTE();
  1482. }
  1483. case s_headers_done:
  1484. {
  1485. int hasBody;
  1486. STRICT_CHECK(ch != LF);
  1487. parser->nread = 0;
  1488. hasBody = parser->flags & F_CHUNKED ||
  1489. (parser->content_length > 0 && parser->content_length != ULLONG_MAX);
  1490. if (parser->upgrade && (parser->method == HTTP_CONNECT ||
  1491. (parser->flags & F_SKIPBODY) || !hasBody)) {
  1492. /* Exit, the rest of the message is in a different protocol. */
  1493. UPDATE_STATE(NEW_MESSAGE());
  1494. CALLBACK_NOTIFY(message_complete);
  1495. RETURN((p - data) + 1);
  1496. }
  1497. if (parser->flags & F_SKIPBODY) {
  1498. UPDATE_STATE(NEW_MESSAGE());
  1499. CALLBACK_NOTIFY(message_complete);
  1500. } else if (parser->flags & F_CHUNKED) {
  1501. /* chunked encoding - ignore Content-Length header */
  1502. UPDATE_STATE(s_chunk_size_start);
  1503. } else {
  1504. if (parser->content_length == 0) {
  1505. /* Content-Length header given but zero: Content-Length: 0\r\n */
  1506. UPDATE_STATE(NEW_MESSAGE());
  1507. CALLBACK_NOTIFY(message_complete);
  1508. } else if (parser->content_length != ULLONG_MAX) {
  1509. /* Content-Length header given and non-zero */
  1510. UPDATE_STATE(s_body_identity);
  1511. } else {
  1512. if (!http_message_needs_eof(parser)) {
  1513. /* Assume content-length 0 - read the next */
  1514. UPDATE_STATE(NEW_MESSAGE());
  1515. CALLBACK_NOTIFY(message_complete);
  1516. } else {
  1517. /* Read body until EOF */
  1518. UPDATE_STATE(s_body_identity_eof);
  1519. }
  1520. }
  1521. }
  1522. break;
  1523. }
  1524. case s_body_identity:
  1525. {
  1526. uint64_t to_read = MIN(parser->content_length,
  1527. (uint64_t) ((data + len) - p));
  1528. assert(parser->content_length != 0
  1529. && parser->content_length != ULLONG_MAX);
  1530. /* The difference between advancing content_length and p is because
  1531. * the latter will automaticaly advance on the next loop iteration.
  1532. * Further, if content_length ends up at 0, we want to see the last
  1533. * byte again for our message complete callback.
  1534. */
  1535. MARK(body);
  1536. parser->content_length -= to_read;
  1537. p += to_read - 1;
  1538. if (parser->content_length == 0) {
  1539. UPDATE_STATE(s_message_done);
  1540. /* Mimic CALLBACK_DATA_NOADVANCE() but with one extra byte.
  1541. *
  1542. * The alternative to doing this is to wait for the next byte to
  1543. * trigger the data callback, just as in every other case. The
  1544. * problem with this is that this makes it difficult for the test
  1545. * harness to distinguish between complete-on-EOF and
  1546. * complete-on-length. It's not clear that this distinction is
  1547. * important for applications, but let's keep it for now.
  1548. */
  1549. CALLBACK_DATA_(body, p - body_mark + 1, p - data);
  1550. REEXECUTE();
  1551. }
  1552. break;
  1553. }
  1554. /* read until EOF */
  1555. case s_body_identity_eof:
  1556. MARK(body);
  1557. p = data + len - 1;
  1558. break;
  1559. case s_message_done:
  1560. UPDATE_STATE(NEW_MESSAGE());
  1561. CALLBACK_NOTIFY(message_complete);
  1562. if (parser->upgrade) {
  1563. /* Exit, the rest of the message is in a different protocol. */
  1564. RETURN((p - data) + 1);
  1565. }
  1566. break;
  1567. case s_chunk_size_start:
  1568. {
  1569. assert(parser->nread == 1);
  1570. assert(parser->flags & F_CHUNKED);
  1571. unhex_val = unhex[(unsigned char)ch];
  1572. if (UNLIKELY(unhex_val == -1)) {
  1573. SET_ERRNO(HPE_INVALID_CHUNK_SIZE);
  1574. goto error;
  1575. }
  1576. parser->content_length = unhex_val;
  1577. UPDATE_STATE(s_chunk_size);
  1578. break;
  1579. }
  1580. case s_chunk_size:
  1581. {
  1582. uint64_t t;
  1583. assert(parser->flags & F_CHUNKED);
  1584. if (ch == CR) {
  1585. UPDATE_STATE(s_chunk_size_almost_done);
  1586. break;
  1587. }
  1588. unhex_val = unhex[(unsigned char)ch];
  1589. if (unhex_val == -1) {
  1590. if (ch == ';' || ch == ' ') {
  1591. UPDATE_STATE(s_chunk_parameters);
  1592. break;
  1593. }
  1594. SET_ERRNO(HPE_INVALID_CHUNK_SIZE);
  1595. goto error;
  1596. }
  1597. t = parser->content_length;
  1598. t *= 16;
  1599. t += unhex_val;
  1600. /* Overflow? Test against a conservative limit for simplicity. */
  1601. if (UNLIKELY((ULLONG_MAX - 16) / 16 < parser->content_length)) {
  1602. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1603. goto error;
  1604. }
  1605. parser->content_length = t;
  1606. break;
  1607. }
  1608. case s_chunk_parameters:
  1609. {
  1610. assert(parser->flags & F_CHUNKED);
  1611. /* just ignore this shit. TODO check for overflow */
  1612. if (ch == CR) {
  1613. UPDATE_STATE(s_chunk_size_almost_done);
  1614. break;
  1615. }
  1616. break;
  1617. }
  1618. case s_chunk_size_almost_done:
  1619. {
  1620. assert(parser->flags & F_CHUNKED);
  1621. STRICT_CHECK(ch != LF);
  1622. parser->nread = 0;
  1623. if (parser->content_length == 0) {
  1624. parser->flags |= F_TRAILING;
  1625. UPDATE_STATE(s_header_field_start);
  1626. } else {
  1627. UPDATE_STATE(s_chunk_data);
  1628. }
  1629. CALLBACK_NOTIFY(chunk_header);
  1630. break;
  1631. }
  1632. case s_chunk_data:
  1633. {
  1634. uint64_t to_read = MIN(parser->content_length,
  1635. (uint64_t) ((data + len) - p));
  1636. assert(parser->flags & F_CHUNKED);
  1637. assert(parser->content_length != 0
  1638. && parser->content_length != ULLONG_MAX);
  1639. /* See the explanation in s_body_identity for why the content
  1640. * length and data pointers are managed this way.
  1641. */
  1642. MARK(body);
  1643. parser->content_length -= to_read;
  1644. p += to_read - 1;
  1645. if (parser->content_length == 0) {
  1646. UPDATE_STATE(s_chunk_data_almost_done);
  1647. }
  1648. break;
  1649. }
  1650. case s_chunk_data_almost_done:
  1651. assert(parser->flags & F_CHUNKED);
  1652. assert(parser->content_length == 0);
  1653. STRICT_CHECK(ch != CR);
  1654. UPDATE_STATE(s_chunk_data_done);
  1655. CALLBACK_DATA(body);
  1656. break;
  1657. case s_chunk_data_done:
  1658. assert(parser->flags & F_CHUNKED);
  1659. STRICT_CHECK(ch != LF);
  1660. parser->nread = 0;
  1661. UPDATE_STATE(s_chunk_size_start);
  1662. CALLBACK_NOTIFY(chunk_complete);
  1663. break;
  1664. default:
  1665. assert(0 && "unhandled state");
  1666. SET_ERRNO(HPE_INVALID_INTERNAL_STATE);
  1667. goto error;
  1668. }
  1669. }
  1670. /* Run callbacks for any marks that we have leftover after we ran our of
  1671. * bytes. There should be at most one of these set, so it's OK to invoke
  1672. * them in series (unset marks will not result in callbacks).
  1673. *
  1674. * We use the NOADVANCE() variety of callbacks here because 'p' has already
  1675. * overflowed 'data' and this allows us to correct for the off-by-one that
  1676. * we'd otherwise have (since CALLBACK_DATA() is meant to be run with a 'p'
  1677. * value that's in-bounds).
  1678. */
  1679. assert(((header_field_mark ? 1 : 0) +
  1680. (header_value_mark ? 1 : 0) +
  1681. (url_mark ? 1 : 0) +
  1682. (body_mark ? 1 : 0) +
  1683. (status_mark ? 1 : 0)) <= 1);
  1684. CALLBACK_DATA_NOADVANCE(header_field);
  1685. CALLBACK_DATA_NOADVANCE(header_value);
  1686. CALLBACK_DATA_NOADVANCE(url);
  1687. CALLBACK_DATA_NOADVANCE(body);
  1688. CALLBACK_DATA_NOADVANCE(status);
  1689. RETURN(len);
  1690. error:
  1691. if (HTTP_PARSER_ERRNO(parser) == HPE_OK) {
  1692. SET_ERRNO(HPE_UNKNOWN);
  1693. }
  1694. RETURN(p - data);
  1695. }
  1696. /* Does the parser need to see an EOF to find the end of the message? */
  1697. int
  1698. http_message_needs_eof (const http_parser *parser)
  1699. {
  1700. if (parser->type == HTTP_REQUEST) {
  1701. return 0;
  1702. }
  1703. /* See RFC 2616 section 4.4 */
  1704. if (parser->status_code / 100 == 1 || /* 1xx e.g. Continue */
  1705. parser->status_code == 204 || /* No Content */
  1706. parser->status_code == 304 || /* Not Modified */
  1707. parser->flags & F_SKIPBODY) { /* response to a HEAD request */
  1708. return 0;
  1709. }
  1710. if ((parser->flags & F_CHUNKED) || parser->content_length != ULLONG_MAX) {
  1711. return 0;
  1712. }
  1713. return 1;
  1714. }
  1715. int
  1716. http_should_keep_alive (const http_parser *parser)
  1717. {
  1718. if (parser->http_major > 0 && parser->http_minor > 0) {
  1719. /* HTTP/1.1 */
  1720. if (parser->flags & F_CONNECTION_CLOSE) {
  1721. return 0;
  1722. }
  1723. } else {
  1724. /* HTTP/1.0 or earlier */
  1725. if (!(parser->flags & F_CONNECTION_KEEP_ALIVE)) {
  1726. return 0;
  1727. }
  1728. }
  1729. return !http_message_needs_eof(parser);
  1730. }
  1731. const char *
  1732. http_method_str (enum http_method m)
  1733. {
  1734. return ELEM_AT(method_strings, m, "<unknown>");
  1735. }
  1736. void
  1737. http_parser_init (http_parser *parser, enum http_parser_type t)
  1738. {
  1739. void *data = parser->data; /* preserve application data */
  1740. memset(parser, 0, sizeof(*parser));
  1741. parser->data = data;
  1742. parser->type = t;
  1743. parser->state = (t == HTTP_REQUEST ? s_start_req : (t == HTTP_RESPONSE ? s_start_res : s_start_req_or_res));
  1744. parser->http_errno = HPE_OK;
  1745. }
  1746. void
  1747. http_parser_settings_init(http_parser_settings *settings)
  1748. {
  1749. memset(settings, 0, sizeof(*settings));
  1750. }
  1751. const char *
  1752. http_errno_name(enum http_errno err) {
  1753. assert(((size_t) err) < ARRAY_SIZE(http_strerror_tab));
  1754. return http_strerror_tab[err].name;
  1755. }
  1756. const char *
  1757. http_errno_description(enum http_errno err) {
  1758. assert(((size_t) err) < ARRAY_SIZE(http_strerror_tab));
  1759. return http_strerror_tab[err].description;
  1760. }
  1761. static enum http_host_state
  1762. http_parse_host_char(enum http_host_state s, const char ch) {
  1763. switch(s) {
  1764. case s_http_userinfo:
  1765. case s_http_userinfo_start:
  1766. if (ch == '@') {
  1767. return s_http_host_start;
  1768. }
  1769. if (IS_USERINFO_CHAR(ch)) {
  1770. return s_http_userinfo;
  1771. }
  1772. break;
  1773. case s_http_host_start:
  1774. if (ch == '[') {
  1775. return s_http_host_v6_start;
  1776. }
  1777. if (IS_HOST_CHAR(ch)) {
  1778. return s_http_host;
  1779. }
  1780. break;
  1781. case s_http_host:
  1782. if (IS_HOST_CHAR(ch)) {
  1783. return s_http_host;
  1784. }
  1785. /* FALLTHROUGH */
  1786. case s_http_host_v6_end:
  1787. if (ch == ':') {
  1788. return s_http_host_port_start;
  1789. }
  1790. break;
  1791. case s_http_host_v6:
  1792. if (ch == ']') {
  1793. return s_http_host_v6_end;
  1794. }
  1795. /* FALLTHROUGH */
  1796. case s_http_host_v6_start:
  1797. if (IS_HEX(ch) || ch == ':' || ch == '.') {
  1798. return s_http_host_v6;
  1799. }
  1800. if (s == s_http_host_v6 && ch == '%') {
  1801. return s_http_host_v6_zone_start;
  1802. }
  1803. break;
  1804. case s_http_host_v6_zone:
  1805. if (ch == ']') {
  1806. return s_http_host_v6_end;
  1807. }
  1808. /* FALLTHROUGH */
  1809. case s_http_host_v6_zone_start:
  1810. /* RFC 6874 Zone ID consists of 1*( unreserved / pct-encoded) */
  1811. if (IS_ALPHANUM(ch) || ch == '%' || ch == '.' || ch == '-' || ch == '_' ||
  1812. ch == '~') {
  1813. return s_http_host_v6_zone;
  1814. }
  1815. break;
  1816. case s_http_host_port:
  1817. case s_http_host_port_start:
  1818. if (IS_NUM(ch)) {
  1819. return s_http_host_port;
  1820. }
  1821. break;
  1822. default:
  1823. break;
  1824. }
  1825. return s_http_host_dead;
  1826. }
  1827. static int
  1828. http_parse_host(const char * buf, struct http_parser_url *u, int found_at) {
  1829. enum http_host_state s;
  1830. const char *p;
  1831. size_t buflen = u->field_data[UF_HOST].off + u->field_data[UF_HOST].len;
  1832. assert(u->field_set & (1 << UF_HOST));
  1833. u->field_data[UF_HOST].len = 0;
  1834. s = found_at ? s_http_userinfo_start : s_http_host_start;
  1835. for (p = buf + u->field_data[UF_HOST].off; p < buf + buflen; p++) {
  1836. enum http_host_state new_s = http_parse_host_char(s, *p);
  1837. if (new_s == s_http_host_dead) {
  1838. return 1;
  1839. }
  1840. switch(new_s) {
  1841. case s_http_host:
  1842. if (s != s_http_host) {
  1843. u->field_data[UF_HOST].off = p - buf;
  1844. }
  1845. u->field_data[UF_HOST].len++;
  1846. break;
  1847. case s_http_host_v6:
  1848. if (s != s_http_host_v6) {
  1849. u->field_data[UF_HOST].off = p - buf;
  1850. }
  1851. u->field_data[UF_HOST].len++;
  1852. break;
  1853. case s_http_host_v6_zone_start:
  1854. case s_http_host_v6_zone:
  1855. u->field_data[UF_HOST].len++;
  1856. break;
  1857. case s_http_host_port:
  1858. if (s != s_http_host_port) {
  1859. u->field_data[UF_PORT].off = p - buf;
  1860. u->field_data[UF_PORT].len = 0;
  1861. u->field_set |= (1 << UF_PORT);
  1862. }
  1863. u->field_data[UF_PORT].len++;
  1864. break;
  1865. case s_http_userinfo:
  1866. if (s != s_http_userinfo) {
  1867. u->field_data[UF_USERINFO].off = p - buf ;
  1868. u->field_data[UF_USERINFO].len = 0;
  1869. u->field_set |= (1 << UF_USERINFO);
  1870. }
  1871. u->field_data[UF_USERINFO].len++;
  1872. break;
  1873. default:
  1874. break;
  1875. }
  1876. s = new_s;
  1877. }
  1878. /* Make sure we don't end somewhere unexpected */
  1879. switch (s) {
  1880. case s_http_host_start:
  1881. case s_http_host_v6_start:
  1882. case s_http_host_v6:
  1883. case s_http_host_v6_zone_start:
  1884. case s_http_host_v6_zone:
  1885. case s_http_host_port_start:
  1886. case s_http_userinfo:
  1887. case s_http_userinfo_start:
  1888. return 1;
  1889. default:
  1890. break;
  1891. }
  1892. return 0;
  1893. }
  1894. void
  1895. http_parser_url_init(struct http_parser_url *u) {
  1896. memset(u, 0, sizeof(*u));
  1897. }
  1898. int
  1899. http_parser_parse_url(const char *buf, size_t buflen, int is_connect,
  1900. struct http_parser_url *u)
  1901. {
  1902. enum state s;
  1903. const char *p;
  1904. enum http_parser_url_fields uf, old_uf;
  1905. int found_at = 0;
  1906. u->port = u->field_set = 0;
  1907. s = is_connect ? s_req_server_start : s_req_spaces_before_url;
  1908. old_uf = UF_MAX;
  1909. for (p = buf; p < buf + buflen; p++) {
  1910. s = parse_url_char(s, *p);
  1911. /* Figure out the next field that we're operating on */
  1912. switch (s) {
  1913. case s_dead:
  1914. return 1;
  1915. /* Skip delimeters */
  1916. case s_req_schema_slash:
  1917. case s_req_schema_slash_slash:
  1918. case s_req_server_start:
  1919. case s_req_query_string_start:
  1920. case s_req_fragment_start:
  1921. continue;
  1922. case s_req_schema:
  1923. uf = UF_SCHEMA;
  1924. break;
  1925. case s_req_server_with_at:
  1926. found_at = 1;
  1927. /* FALLTROUGH */
  1928. case s_req_server:
  1929. uf = UF_HOST;
  1930. break;
  1931. case s_req_path:
  1932. uf = UF_PATH;
  1933. break;
  1934. case s_req_query_string:
  1935. uf = UF_QUERY;
  1936. break;
  1937. case s_req_fragment:
  1938. uf = UF_FRAGMENT;
  1939. break;
  1940. default:
  1941. assert(!"Unexpected state");
  1942. return 1;
  1943. }
  1944. /* Nothing's changed; soldier on */
  1945. if (uf == old_uf) {
  1946. u->field_data[uf].len++;
  1947. continue;
  1948. }
  1949. u->field_data[uf].off = p - buf;
  1950. u->field_data[uf].len = 1;
  1951. u->field_set |= (1 << uf);
  1952. old_uf = uf;
  1953. }
  1954. /* host must be present if there is a schema */
  1955. /* parsing http:///toto will fail */
  1956. if ((u->field_set & (1 << UF_SCHEMA)) &&
  1957. (u->field_set & (1 << UF_HOST)) == 0) {
  1958. return 1;
  1959. }
  1960. if (u->field_set & (1 << UF_HOST)) {
  1961. if (http_parse_host(buf, u, found_at) != 0) {
  1962. return 1;
  1963. }
  1964. }
  1965. /* CONNECT requests can only contain "hostname:port" */
  1966. if (is_connect && u->field_set != ((1 << UF_HOST)|(1 << UF_PORT))) {
  1967. return 1;
  1968. }
  1969. if (u->field_set & (1 << UF_PORT)) {
  1970. /* Don't bother with endp; we've already validated the string */
  1971. unsigned long v = strtoul(buf + u->field_data[UF_PORT].off, NULL, 10);
  1972. /* Ports have a max value of 2^16 */
  1973. if (v > 0xffff) {
  1974. return 1;
  1975. }
  1976. u->port = (uint16_t) v;
  1977. }
  1978. return 0;
  1979. }
  1980. void
  1981. http_parser_pause(http_parser *parser, int paused) {
  1982. /* Users should only be pausing/unpausing a parser that is not in an error
  1983. * state. In non-debug builds, there's not much that we can do about this
  1984. * other than ignore it.
  1985. */
  1986. if (HTTP_PARSER_ERRNO(parser) == HPE_OK ||
  1987. HTTP_PARSER_ERRNO(parser) == HPE_PAUSED) {
  1988. SET_ERRNO((paused) ? HPE_PAUSED : HPE_OK);
  1989. } else {
  1990. assert(0 && "Attempting to pause parser in error state");
  1991. }
  1992. }
  1993. int
  1994. http_body_is_final(const struct http_parser *parser) {
  1995. return parser->state == s_message_done;
  1996. }
  1997. unsigned long
  1998. http_parser_version(void) {
  1999. return HTTP_PARSER_VERSION_MAJOR * 0x10000 |
  2000. HTTP_PARSER_VERSION_MINOR * 0x00100 |
  2001. HTTP_PARSER_VERSION_PATCH * 0x00001;
  2002. }
  2003. #pragma warning(pop)