http_parser.c 69 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440
  1. /* Copyright Joyent, Inc. and other Node contributors.
  2. *
  3. * Permission is hereby granted, free of charge, to any person obtaining a copy
  4. * of this software and associated documentation files (the "Software"), to
  5. * deal in the Software without restriction, including without limitation the
  6. * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
  7. * sell copies of the Software, and to permit persons to whom the Software is
  8. * furnished to do so, subject to the following conditions:
  9. *
  10. * The above copyright notice and this permission notice shall be included in
  11. * all copies or substantial portions of the Software.
  12. *
  13. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  14. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  15. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  16. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  17. * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
  18. * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
  19. * IN THE SOFTWARE.
  20. */
  21. #include "http_parser.h"
  22. #include <assert.h>
  23. #include <stddef.h>
  24. #include <ctype.h>
  25. #include <string.h>
  26. #include <limits.h>
  27. #ifndef ULLONG_MAX
  28. # define ULLONG_MAX ((uint64_t) -1) /* 2^64-1 */
  29. #endif
  30. #ifndef MIN
  31. # define MIN(a,b) ((a) < (b) ? (a) : (b))
  32. #endif
  33. #ifndef ARRAY_SIZE
  34. # define ARRAY_SIZE(a) (sizeof(a) / sizeof((a)[0]))
  35. #endif
  36. #ifndef BIT_AT
  37. # define BIT_AT(a, i) \
  38. (!!((unsigned int) (a)[(unsigned int) (i) >> 3] & \
  39. (1 << ((unsigned int) (i) & 7))))
  40. #endif
  41. #ifndef ELEM_AT
  42. # define ELEM_AT(a, i, v) ((unsigned int) (i) < ARRAY_SIZE(a) ? (a)[(i)] : (v))
  43. #endif
  44. #define SET_ERRNO(e) \
  45. do { \
  46. parser->http_errno = (e); \
  47. } while(0)
  48. #define CURRENT_STATE() p_state
  49. #define UPDATE_STATE(V) p_state = (enum state) (V);
  50. #define RETURN(V) \
  51. do { \
  52. parser->state = CURRENT_STATE(); \
  53. return (V); \
  54. } while (0);
  55. #define REEXECUTE() \
  56. goto reexecute; \
  57. #ifdef __GNUC__
  58. # define LIKELY(X) __builtin_expect(!!(X), 1)
  59. # define UNLIKELY(X) __builtin_expect(!!(X), 0)
  60. #else
  61. # define LIKELY(X) (X)
  62. # define UNLIKELY(X) (X)
  63. #endif
  64. /* Run the notify callback FOR, returning ER if it fails */
  65. #define CALLBACK_NOTIFY_(FOR, ER) \
  66. do { \
  67. assert(HTTP_PARSER_ERRNO(parser) == HPE_OK); \
  68. \
  69. if (LIKELY(settings->on_##FOR)) { \
  70. parser->state = CURRENT_STATE(); \
  71. if (UNLIKELY(0 != settings->on_##FOR(parser))) { \
  72. SET_ERRNO(HPE_CB_##FOR); \
  73. } \
  74. UPDATE_STATE(parser->state); \
  75. \
  76. /* We either errored above or got paused; get out */ \
  77. if (UNLIKELY(HTTP_PARSER_ERRNO(parser) != HPE_OK)) { \
  78. return (ER); \
  79. } \
  80. } \
  81. } while (0)
  82. /* Run the notify callback FOR and consume the current byte */
  83. #define CALLBACK_NOTIFY(FOR) CALLBACK_NOTIFY_(FOR, p - data + 1)
  84. /* Run the notify callback FOR and don't consume the current byte */
  85. #define CALLBACK_NOTIFY_NOADVANCE(FOR) CALLBACK_NOTIFY_(FOR, p - data)
  86. /* Run data callback FOR with LEN bytes, returning ER if it fails */
  87. #define CALLBACK_DATA_(FOR, LEN, ER) \
  88. do { \
  89. assert(HTTP_PARSER_ERRNO(parser) == HPE_OK); \
  90. \
  91. if (FOR##_mark) { \
  92. if (LIKELY(settings->on_##FOR)) { \
  93. parser->state = CURRENT_STATE(); \
  94. if (UNLIKELY(0 != \
  95. settings->on_##FOR(parser, FOR##_mark, (LEN)))) { \
  96. SET_ERRNO(HPE_CB_##FOR); \
  97. } \
  98. UPDATE_STATE(parser->state); \
  99. \
  100. /* We either errored above or got paused; get out */ \
  101. if (UNLIKELY(HTTP_PARSER_ERRNO(parser) != HPE_OK)) { \
  102. return (ER); \
  103. } \
  104. } \
  105. FOR##_mark = NULL; \
  106. } \
  107. } while (0)
  108. /* Run the data callback FOR and consume the current byte */
  109. #define CALLBACK_DATA(FOR) \
  110. CALLBACK_DATA_(FOR, p - FOR##_mark, p - data + 1)
  111. /* Run the data callback FOR and don't consume the current byte */
  112. #define CALLBACK_DATA_NOADVANCE(FOR) \
  113. CALLBACK_DATA_(FOR, p - FOR##_mark, p - data)
  114. /* Set the mark FOR; non-destructive if mark is already set */
  115. #define MARK(FOR) \
  116. do { \
  117. if (!FOR##_mark) { \
  118. FOR##_mark = p; \
  119. } \
  120. } while (0)
  121. /* Don't allow the total size of the HTTP headers (including the status
  122. * line) to exceed HTTP_MAX_HEADER_SIZE. This check is here to protect
  123. * embedders against denial-of-service attacks where the attacker feeds
  124. * us a never-ending header that the embedder keeps buffering.
  125. *
  126. * This check is arguably the responsibility of embedders but we're doing
  127. * it on the embedder's behalf because most won't bother and this way we
  128. * make the web a little safer. HTTP_MAX_HEADER_SIZE is still far bigger
  129. * than any reasonable request or response so this should never affect
  130. * day-to-day operation.
  131. */
  132. #define COUNT_HEADER_SIZE(V) \
  133. do { \
  134. parser->nread += (V); \
  135. if (UNLIKELY(parser->nread > (HTTP_MAX_HEADER_SIZE))) { \
  136. SET_ERRNO(HPE_HEADER_OVERFLOW); \
  137. goto error; \
  138. } \
  139. } while (0)
  140. #define PROXY_CONNECTION "proxy-connection"
  141. #define CONNECTION "connection"
  142. #define CONTENT_LENGTH "content-length"
  143. #define TRANSFER_ENCODING "transfer-encoding"
  144. #define UPGRADE "upgrade"
  145. #define CHUNKED "chunked"
  146. #define KEEP_ALIVE "keep-alive"
  147. #define CLOSE "close"
  148. static const char *method_strings[] =
  149. {
  150. #define XX(num, name, string) #string,
  151. HTTP_METHOD_MAP(XX)
  152. #undef XX
  153. };
  154. /* Tokens as defined by rfc 2616. Also lowercases them.
  155. * token = 1*<any CHAR except CTLs or separators>
  156. * separators = "(" | ")" | "<" | ">" | "@"
  157. * | "," | ";" | ":" | "\" | <">
  158. * | "/" | "[" | "]" | "?" | "="
  159. * | "{" | "}" | SP | HT
  160. */
  161. static const char tokens[256] = {
  162. /* 0 nul 1 soh 2 stx 3 etx 4 eot 5 enq 6 ack 7 bel */
  163. 0, 0, 0, 0, 0, 0, 0, 0,
  164. /* 8 bs 9 ht 10 nl 11 vt 12 np 13 cr 14 so 15 si */
  165. 0, 0, 0, 0, 0, 0, 0, 0,
  166. /* 16 dle 17 dc1 18 dc2 19 dc3 20 dc4 21 nak 22 syn 23 etb */
  167. 0, 0, 0, 0, 0, 0, 0, 0,
  168. /* 24 can 25 em 26 sub 27 esc 28 fs 29 gs 30 rs 31 us */
  169. 0, 0, 0, 0, 0, 0, 0, 0,
  170. /* 32 sp 33 ! 34 " 35 # 36 $ 37 % 38 & 39 ' */
  171. 0, '!', 0, '#', '$', '%', '&', '\'',
  172. /* 40 ( 41 ) 42 * 43 + 44 , 45 - 46 . 47 / */
  173. 0, 0, '*', '+', 0, '-', '.', 0,
  174. /* 48 0 49 1 50 2 51 3 52 4 53 5 54 6 55 7 */
  175. '0', '1', '2', '3', '4', '5', '6', '7',
  176. /* 56 8 57 9 58 : 59 ; 60 < 61 = 62 > 63 ? */
  177. '8', '9', 0, 0, 0, 0, 0, 0,
  178. /* 64 @ 65 A 66 B 67 C 68 D 69 E 70 F 71 G */
  179. 0, 'a', 'b', 'c', 'd', 'e', 'f', 'g',
  180. /* 72 H 73 I 74 J 75 K 76 L 77 M 78 N 79 O */
  181. 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o',
  182. /* 80 P 81 Q 82 R 83 S 84 T 85 U 86 V 87 W */
  183. 'p', 'q', 'r', 's', 't', 'u', 'v', 'w',
  184. /* 88 X 89 Y 90 Z 91 [ 92 \ 93 ] 94 ^ 95 _ */
  185. 'x', 'y', 'z', 0, 0, 0, '^', '_',
  186. /* 96 ` 97 a 98 b 99 c 100 d 101 e 102 f 103 g */
  187. '`', 'a', 'b', 'c', 'd', 'e', 'f', 'g',
  188. /* 104 h 105 i 106 j 107 k 108 l 109 m 110 n 111 o */
  189. 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o',
  190. /* 112 p 113 q 114 r 115 s 116 t 117 u 118 v 119 w */
  191. 'p', 'q', 'r', 's', 't', 'u', 'v', 'w',
  192. /* 120 x 121 y 122 z 123 { 124 | 125 } 126 ~ 127 del */
  193. 'x', 'y', 'z', 0, '|', 0, '~', 0 };
  194. static const int8_t unhex[256] =
  195. {-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  196. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  197. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  198. , 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,-1,-1,-1,-1,-1,-1
  199. ,-1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1
  200. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  201. ,-1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1
  202. ,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
  203. };
  204. #if HTTP_PARSER_STRICT
  205. # define T(v) 0
  206. #else
  207. # define T(v) v
  208. #endif
  209. static const uint8_t normal_url_char[32] = {
  210. /* 0 nul 1 soh 2 stx 3 etx 4 eot 5 enq 6 ack 7 bel */
  211. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  212. /* 8 bs 9 ht 10 nl 11 vt 12 np 13 cr 14 so 15 si */
  213. 0 | T(2) | 0 | 0 | T(16) | 0 | 0 | 0,
  214. /* 16 dle 17 dc1 18 dc2 19 dc3 20 dc4 21 nak 22 syn 23 etb */
  215. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  216. /* 24 can 25 em 26 sub 27 esc 28 fs 29 gs 30 rs 31 us */
  217. 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0,
  218. /* 32 sp 33 ! 34 " 35 # 36 $ 37 % 38 & 39 ' */
  219. 0 | 2 | 4 | 0 | 16 | 32 | 64 | 128,
  220. /* 40 ( 41 ) 42 * 43 + 44 , 45 - 46 . 47 / */
  221. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  222. /* 48 0 49 1 50 2 51 3 52 4 53 5 54 6 55 7 */
  223. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  224. /* 56 8 57 9 58 : 59 ; 60 < 61 = 62 > 63 ? */
  225. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 0,
  226. /* 64 @ 65 A 66 B 67 C 68 D 69 E 70 F 71 G */
  227. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  228. /* 72 H 73 I 74 J 75 K 76 L 77 M 78 N 79 O */
  229. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  230. /* 80 P 81 Q 82 R 83 S 84 T 85 U 86 V 87 W */
  231. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  232. /* 88 X 89 Y 90 Z 91 [ 92 \ 93 ] 94 ^ 95 _ */
  233. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  234. /* 96 ` 97 a 98 b 99 c 100 d 101 e 102 f 103 g */
  235. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  236. /* 104 h 105 i 106 j 107 k 108 l 109 m 110 n 111 o */
  237. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  238. /* 112 p 113 q 114 r 115 s 116 t 117 u 118 v 119 w */
  239. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 128,
  240. /* 120 x 121 y 122 z 123 { 124 | 125 } 126 ~ 127 del */
  241. 1 | 2 | 4 | 8 | 16 | 32 | 64 | 0, };
  242. #undef T
  243. enum state
  244. { s_dead = 1 /* important that this is > 0 */
  245. , s_start_req_or_res
  246. , s_res_or_resp_H
  247. , s_start_res
  248. , s_res_H
  249. , s_res_HT
  250. , s_res_HTT
  251. , s_res_HTTP
  252. , s_res_http_major
  253. , s_res_http_dot
  254. , s_res_http_minor
  255. , s_res_http_end
  256. , s_res_first_status_code
  257. , s_res_status_code
  258. , s_res_status_start
  259. , s_res_status
  260. , s_res_line_almost_done
  261. , s_start_req
  262. , s_req_method
  263. , s_req_spaces_before_url
  264. , s_req_schema
  265. , s_req_schema_slash
  266. , s_req_schema_slash_slash
  267. , s_req_server_start
  268. , s_req_server
  269. , s_req_server_with_at
  270. , s_req_path
  271. , s_req_query_string_start
  272. , s_req_query_string
  273. , s_req_fragment_start
  274. , s_req_fragment
  275. , s_req_http_start
  276. , s_req_http_H
  277. , s_req_http_HT
  278. , s_req_http_HTT
  279. , s_req_http_HTTP
  280. , s_req_http_major
  281. , s_req_http_dot
  282. , s_req_http_minor
  283. , s_req_http_end
  284. , s_req_line_almost_done
  285. , s_header_field_start
  286. , s_header_field
  287. , s_header_value_discard_ws
  288. , s_header_value_discard_ws_almost_done
  289. , s_header_value_discard_lws
  290. , s_header_value_start
  291. , s_header_value
  292. , s_header_value_lws
  293. , s_header_almost_done
  294. , s_chunk_size_start
  295. , s_chunk_size
  296. , s_chunk_parameters
  297. , s_chunk_size_almost_done
  298. , s_headers_almost_done
  299. , s_headers_done
  300. /* Important: 's_headers_done' must be the last 'header' state. All
  301. * states beyond this must be 'body' states. It is used for overflow
  302. * checking. See the PARSING_HEADER() macro.
  303. */
  304. , s_chunk_data
  305. , s_chunk_data_almost_done
  306. , s_chunk_data_done
  307. , s_body_identity
  308. , s_body_identity_eof
  309. , s_message_done
  310. };
  311. #define PARSING_HEADER(state) (state <= s_headers_done)
  312. enum header_states
  313. { h_general = 0
  314. , h_C
  315. , h_CO
  316. , h_CON
  317. , h_matching_connection
  318. , h_matching_proxy_connection
  319. , h_matching_content_length
  320. , h_matching_transfer_encoding
  321. , h_matching_upgrade
  322. , h_connection
  323. , h_content_length
  324. , h_content_length_num
  325. , h_content_length_ws
  326. , h_transfer_encoding
  327. , h_upgrade
  328. , h_matching_transfer_encoding_chunked
  329. , h_matching_connection_token_start
  330. , h_matching_connection_keep_alive
  331. , h_matching_connection_close
  332. , h_matching_connection_upgrade
  333. , h_matching_connection_token
  334. , h_transfer_encoding_chunked
  335. , h_connection_keep_alive
  336. , h_connection_close
  337. , h_connection_upgrade
  338. };
  339. enum http_host_state
  340. {
  341. s_http_host_dead = 1
  342. , s_http_userinfo_start
  343. , s_http_userinfo
  344. , s_http_host_start
  345. , s_http_host_v6_start
  346. , s_http_host
  347. , s_http_host_v6
  348. , s_http_host_v6_end
  349. , s_http_host_v6_zone_start
  350. , s_http_host_v6_zone
  351. , s_http_host_port_start
  352. , s_http_host_port
  353. };
  354. /* Macros for character classes; depends on strict-mode */
  355. #define CR '\r'
  356. #define LF '\n'
  357. #define LOWER(c) (unsigned char)(c | 0x20)
  358. #define IS_ALPHA(c) (LOWER(c) >= 'a' && LOWER(c) <= 'z')
  359. #define IS_NUM(c) ((c) >= '0' && (c) <= '9')
  360. #define IS_ALPHANUM(c) (IS_ALPHA(c) || IS_NUM(c))
  361. #define IS_HEX(c) (IS_NUM(c) || (LOWER(c) >= 'a' && LOWER(c) <= 'f'))
  362. #define IS_MARK(c) ((c) == '-' || (c) == '_' || (c) == '.' || \
  363. (c) == '!' || (c) == '~' || (c) == '*' || (c) == '\'' || (c) == '(' || \
  364. (c) == ')')
  365. #define IS_USERINFO_CHAR(c) (IS_ALPHANUM(c) || IS_MARK(c) || (c) == '%' || \
  366. (c) == ';' || (c) == ':' || (c) == '&' || (c) == '=' || (c) == '+' || \
  367. (c) == '$' || (c) == ',')
  368. #define STRICT_TOKEN(c) (tokens[(unsigned char)c])
  369. #if HTTP_PARSER_STRICT
  370. #define TOKEN(c) (tokens[(unsigned char)c])
  371. #define IS_URL_CHAR(c) (BIT_AT(normal_url_char, (unsigned char)c))
  372. #define IS_HOST_CHAR(c) (IS_ALPHANUM(c) || (c) == '.' || (c) == '-')
  373. #else
  374. #define TOKEN(c) ((c == ' ') ? ' ' : tokens[(unsigned char)c])
  375. #define IS_URL_CHAR(c) \
  376. (BIT_AT(normal_url_char, (unsigned char)c) || ((c) & 0x80))
  377. #define IS_HOST_CHAR(c) \
  378. (IS_ALPHANUM(c) || (c) == '.' || (c) == '-' || (c) == '_')
  379. #endif
  380. /**
  381. * Verify that a char is a valid visible (printable) US-ASCII
  382. * character or %x80-FF
  383. **/
  384. #define IS_HEADER_CHAR(ch) \
  385. (ch == CR || ch == LF || ch == 9 || ((unsigned char)ch > 31 && ch != 127))
  386. #define start_state (parser->type == HTTP_REQUEST ? s_start_req : s_start_res)
  387. #if HTTP_PARSER_STRICT
  388. # define STRICT_CHECK(cond) \
  389. do { \
  390. if (cond) { \
  391. SET_ERRNO(HPE_STRICT); \
  392. goto error; \
  393. } \
  394. } while (0)
  395. # define NEW_MESSAGE() (http_should_keep_alive(parser) ? start_state : s_dead)
  396. #else
  397. # define STRICT_CHECK(cond)
  398. # define NEW_MESSAGE() start_state
  399. #endif
  400. /* Map errno values to strings for human-readable output */
  401. #define HTTP_STRERROR_GEN(n, s) { "HPE_" #n, s },
  402. static struct {
  403. const char *name;
  404. const char *description;
  405. } http_strerror_tab[] = {
  406. HTTP_ERRNO_MAP(HTTP_STRERROR_GEN)
  407. };
  408. #undef HTTP_STRERROR_GEN
  409. int http_message_needs_eof(const http_parser *parser);
  410. /* Our URL parser.
  411. *
  412. * This is designed to be shared by http_parser_execute() for URL validation,
  413. * hence it has a state transition + byte-for-byte interface. In addition, it
  414. * is meant to be embedded in http_parser_parse_url(), which does the dirty
  415. * work of turning state transitions URL components for its API.
  416. *
  417. * This function should only be invoked with non-space characters. It is
  418. * assumed that the caller cares about (and can detect) the transition between
  419. * URL and non-URL states by looking for these.
  420. */
  421. static enum state
  422. parse_url_char(enum state s, const char ch)
  423. {
  424. if (ch == ' ' || ch == '\r' || ch == '\n') {
  425. return s_dead;
  426. }
  427. #if HTTP_PARSER_STRICT
  428. if (ch == '\t' || ch == '\f') {
  429. return s_dead;
  430. }
  431. #endif
  432. switch (s) {
  433. case s_req_spaces_before_url:
  434. /* Proxied requests are followed by scheme of an absolute URI (alpha).
  435. * All methods except CONNECT are followed by '/' or '*'.
  436. */
  437. if (ch == '/' || ch == '*') {
  438. return s_req_path;
  439. }
  440. if (IS_ALPHA(ch)) {
  441. return s_req_schema;
  442. }
  443. break;
  444. case s_req_schema:
  445. if (IS_ALPHA(ch)) {
  446. return s;
  447. }
  448. if (ch == ':') {
  449. return s_req_schema_slash;
  450. }
  451. break;
  452. case s_req_schema_slash:
  453. if (ch == '/') {
  454. return s_req_schema_slash_slash;
  455. }
  456. break;
  457. case s_req_schema_slash_slash:
  458. if (ch == '/') {
  459. return s_req_server_start;
  460. }
  461. break;
  462. case s_req_server_with_at:
  463. if (ch == '@') {
  464. return s_dead;
  465. }
  466. /* FALLTHROUGH */
  467. case s_req_server_start:
  468. case s_req_server:
  469. if (ch == '/') {
  470. return s_req_path;
  471. }
  472. if (ch == '?') {
  473. return s_req_query_string_start;
  474. }
  475. if (ch == '@') {
  476. return s_req_server_with_at;
  477. }
  478. if (IS_USERINFO_CHAR(ch) || ch == '[' || ch == ']') {
  479. return s_req_server;
  480. }
  481. break;
  482. case s_req_path:
  483. if (IS_URL_CHAR(ch)) {
  484. return s;
  485. }
  486. switch (ch) {
  487. case '?':
  488. return s_req_query_string_start;
  489. case '#':
  490. return s_req_fragment_start;
  491. }
  492. break;
  493. case s_req_query_string_start:
  494. case s_req_query_string:
  495. if (IS_URL_CHAR(ch)) {
  496. return s_req_query_string;
  497. }
  498. switch (ch) {
  499. case '?':
  500. /* allow extra '?' in query string */
  501. return s_req_query_string;
  502. case '#':
  503. return s_req_fragment_start;
  504. }
  505. break;
  506. case s_req_fragment_start:
  507. if (IS_URL_CHAR(ch)) {
  508. return s_req_fragment;
  509. }
  510. switch (ch) {
  511. case '?':
  512. return s_req_fragment;
  513. case '#':
  514. return s;
  515. }
  516. break;
  517. case s_req_fragment:
  518. if (IS_URL_CHAR(ch)) {
  519. return s;
  520. }
  521. switch (ch) {
  522. case '?':
  523. case '#':
  524. return s;
  525. }
  526. break;
  527. default:
  528. break;
  529. }
  530. /* We should never fall out of the switch above unless there's an error */
  531. return s_dead;
  532. }
  533. size_t http_parser_execute (http_parser *parser,
  534. const http_parser_settings *settings,
  535. const char *data,
  536. size_t len)
  537. {
  538. char c, ch;
  539. int8_t unhex_val;
  540. const char *p = data;
  541. const char *header_field_mark = 0;
  542. const char *header_value_mark = 0;
  543. const char *url_mark = 0;
  544. const char *body_mark = 0;
  545. const char *status_mark = 0;
  546. enum state p_state = (enum state) parser->state;
  547. const unsigned int lenient = parser->lenient_http_headers;
  548. /* We're in an error state. Don't bother doing anything. */
  549. if (HTTP_PARSER_ERRNO(parser) != HPE_OK) {
  550. return 0;
  551. }
  552. if (len == 0) {
  553. switch (CURRENT_STATE()) {
  554. case s_body_identity_eof:
  555. /* Use of CALLBACK_NOTIFY() here would erroneously return 1 byte read if
  556. * we got paused.
  557. */
  558. CALLBACK_NOTIFY_NOADVANCE(message_complete);
  559. return 0;
  560. case s_dead:
  561. case s_start_req_or_res:
  562. case s_start_res:
  563. case s_start_req:
  564. return 0;
  565. default:
  566. SET_ERRNO(HPE_INVALID_EOF_STATE);
  567. return 1;
  568. }
  569. }
  570. if (CURRENT_STATE() == s_header_field)
  571. header_field_mark = data;
  572. if (CURRENT_STATE() == s_header_value)
  573. header_value_mark = data;
  574. switch (CURRENT_STATE()) {
  575. case s_req_path:
  576. case s_req_schema:
  577. case s_req_schema_slash:
  578. case s_req_schema_slash_slash:
  579. case s_req_server_start:
  580. case s_req_server:
  581. case s_req_server_with_at:
  582. case s_req_query_string_start:
  583. case s_req_query_string:
  584. case s_req_fragment_start:
  585. case s_req_fragment:
  586. url_mark = data;
  587. break;
  588. case s_res_status:
  589. status_mark = data;
  590. break;
  591. default:
  592. break;
  593. }
  594. for (p=data; p != data + len; p++) {
  595. ch = *p;
  596. if (PARSING_HEADER(CURRENT_STATE()))
  597. COUNT_HEADER_SIZE(1);
  598. reexecute:
  599. switch (CURRENT_STATE()) {
  600. case s_dead:
  601. /* this state is used after a 'Connection: close' message
  602. * the parser will error out if it reads another message
  603. */
  604. if (LIKELY(ch == CR || ch == LF))
  605. break;
  606. SET_ERRNO(HPE_CLOSED_CONNECTION);
  607. goto error;
  608. case s_start_req_or_res:
  609. {
  610. if (ch == CR || ch == LF)
  611. break;
  612. parser->flags = 0;
  613. parser->content_length = ULLONG_MAX;
  614. if (ch == 'H') {
  615. UPDATE_STATE(s_res_or_resp_H);
  616. CALLBACK_NOTIFY(message_begin);
  617. } else {
  618. parser->type = HTTP_REQUEST;
  619. UPDATE_STATE(s_start_req);
  620. REEXECUTE();
  621. }
  622. break;
  623. }
  624. case s_res_or_resp_H:
  625. if (ch == 'T') {
  626. parser->type = HTTP_RESPONSE;
  627. UPDATE_STATE(s_res_HT);
  628. } else {
  629. if (UNLIKELY(ch != 'E')) {
  630. SET_ERRNO(HPE_INVALID_CONSTANT);
  631. goto error;
  632. }
  633. parser->type = HTTP_REQUEST;
  634. parser->method = HTTP_HEAD;
  635. parser->index = 2;
  636. UPDATE_STATE(s_req_method);
  637. }
  638. break;
  639. case s_start_res:
  640. {
  641. parser->flags = 0;
  642. parser->content_length = ULLONG_MAX;
  643. switch (ch) {
  644. case 'H':
  645. UPDATE_STATE(s_res_H);
  646. break;
  647. case CR:
  648. case LF:
  649. break;
  650. default:
  651. SET_ERRNO(HPE_INVALID_CONSTANT);
  652. goto error;
  653. }
  654. CALLBACK_NOTIFY(message_begin);
  655. break;
  656. }
  657. case s_res_H:
  658. STRICT_CHECK(ch != 'T');
  659. UPDATE_STATE(s_res_HT);
  660. break;
  661. case s_res_HT:
  662. STRICT_CHECK(ch != 'T');
  663. UPDATE_STATE(s_res_HTT);
  664. break;
  665. case s_res_HTT:
  666. STRICT_CHECK(ch != 'P');
  667. UPDATE_STATE(s_res_HTTP);
  668. break;
  669. case s_res_HTTP:
  670. STRICT_CHECK(ch != '/');
  671. UPDATE_STATE(s_res_http_major);
  672. break;
  673. case s_res_http_major:
  674. if (UNLIKELY(!IS_NUM(ch))) {
  675. SET_ERRNO(HPE_INVALID_VERSION);
  676. goto error;
  677. }
  678. parser->http_major = ch - '0';
  679. UPDATE_STATE(s_res_http_dot);
  680. break;
  681. case s_res_http_dot:
  682. {
  683. if (UNLIKELY(ch != '.')) {
  684. SET_ERRNO(HPE_INVALID_VERSION);
  685. goto error;
  686. }
  687. UPDATE_STATE(s_res_http_minor);
  688. break;
  689. }
  690. case s_res_http_minor:
  691. if (UNLIKELY(!IS_NUM(ch))) {
  692. SET_ERRNO(HPE_INVALID_VERSION);
  693. goto error;
  694. }
  695. parser->http_minor = ch - '0';
  696. UPDATE_STATE(s_res_http_end);
  697. break;
  698. case s_res_http_end:
  699. {
  700. if (UNLIKELY(ch != ' ')) {
  701. SET_ERRNO(HPE_INVALID_VERSION);
  702. goto error;
  703. }
  704. UPDATE_STATE(s_res_first_status_code);
  705. break;
  706. }
  707. case s_res_first_status_code:
  708. {
  709. if (!IS_NUM(ch)) {
  710. if (ch == ' ') {
  711. break;
  712. }
  713. SET_ERRNO(HPE_INVALID_STATUS);
  714. goto error;
  715. }
  716. parser->status_code = ch - '0';
  717. UPDATE_STATE(s_res_status_code);
  718. break;
  719. }
  720. case s_res_status_code:
  721. {
  722. if (!IS_NUM(ch)) {
  723. switch (ch) {
  724. case ' ':
  725. UPDATE_STATE(s_res_status_start);
  726. break;
  727. case CR:
  728. case LF:
  729. UPDATE_STATE(s_res_status_start);
  730. REEXECUTE();
  731. break;
  732. default:
  733. SET_ERRNO(HPE_INVALID_STATUS);
  734. goto error;
  735. }
  736. break;
  737. }
  738. parser->status_code *= 10;
  739. parser->status_code += ch - '0';
  740. if (UNLIKELY(parser->status_code > 999)) {
  741. SET_ERRNO(HPE_INVALID_STATUS);
  742. goto error;
  743. }
  744. break;
  745. }
  746. case s_res_status_start:
  747. {
  748. MARK(status);
  749. UPDATE_STATE(s_res_status);
  750. parser->index = 0;
  751. if (ch == CR || ch == LF)
  752. REEXECUTE();
  753. break;
  754. }
  755. case s_res_status:
  756. if (ch == CR) {
  757. UPDATE_STATE(s_res_line_almost_done);
  758. CALLBACK_DATA(status);
  759. break;
  760. }
  761. if (ch == LF) {
  762. UPDATE_STATE(s_header_field_start);
  763. CALLBACK_DATA(status);
  764. break;
  765. }
  766. break;
  767. case s_res_line_almost_done:
  768. STRICT_CHECK(ch != LF);
  769. UPDATE_STATE(s_header_field_start);
  770. break;
  771. case s_start_req:
  772. {
  773. if (ch == CR || ch == LF)
  774. break;
  775. parser->flags = 0;
  776. parser->content_length = ULLONG_MAX;
  777. if (UNLIKELY(!IS_ALPHA(ch))) {
  778. SET_ERRNO(HPE_INVALID_METHOD);
  779. goto error;
  780. }
  781. parser->method = (enum http_method) 0;
  782. parser->index = 1;
  783. switch (ch) {
  784. case 'A': parser->method = HTTP_ACL; break;
  785. case 'B': parser->method = HTTP_BIND; break;
  786. case 'C': parser->method = HTTP_CONNECT; /* or COPY, CHECKOUT */ break;
  787. case 'D': parser->method = HTTP_DELETE; break;
  788. case 'G': parser->method = HTTP_GET; break;
  789. case 'H': parser->method = HTTP_HEAD; break;
  790. case 'L': parser->method = HTTP_LOCK; /* or LINK */ break;
  791. case 'M': parser->method = HTTP_MKCOL; /* or MOVE, MKACTIVITY, MERGE, M-SEARCH, MKCALENDAR */ break;
  792. case 'N': parser->method = HTTP_NOTIFY; break;
  793. case 'O': parser->method = HTTP_OPTIONS; break;
  794. case 'P': parser->method = HTTP_POST;
  795. /* or PROPFIND|PROPPATCH|PUT|PATCH|PURGE */
  796. break;
  797. case 'R': parser->method = HTTP_REPORT; /* or REBIND */ break;
  798. case 'S': parser->method = HTTP_SUBSCRIBE; /* or SEARCH, SOURCE */ break;
  799. case 'T': parser->method = HTTP_TRACE; break;
  800. case 'U': parser->method = HTTP_UNLOCK; /* or UNSUBSCRIBE, UNBIND, UNLINK */ break;
  801. default:
  802. SET_ERRNO(HPE_INVALID_METHOD);
  803. goto error;
  804. }
  805. UPDATE_STATE(s_req_method);
  806. CALLBACK_NOTIFY(message_begin);
  807. break;
  808. }
  809. case s_req_method:
  810. {
  811. const char *matcher;
  812. if (UNLIKELY(ch == '\0')) {
  813. SET_ERRNO(HPE_INVALID_METHOD);
  814. goto error;
  815. }
  816. matcher = method_strings[parser->method];
  817. if (ch == ' ' && matcher[parser->index] == '\0') {
  818. UPDATE_STATE(s_req_spaces_before_url);
  819. } else if (ch == matcher[parser->index]) {
  820. ; /* nada */
  821. } else if ((ch >= 'A' && ch <= 'Z') || ch == '-') {
  822. switch (parser->method << 16 | parser->index << 8 | ch) {
  823. #define XX(meth, pos, ch, new_meth) \
  824. case (HTTP_##meth << 16 | pos << 8 | ch): \
  825. parser->method = HTTP_##new_meth; break;
  826. XX(POST, 1, 'U', PUT)
  827. XX(POST, 1, 'A', PATCH)
  828. XX(POST, 1, 'R', PROPFIND)
  829. XX(PUT, 2, 'R', PURGE)
  830. XX(CONNECT, 1, 'H', CHECKOUT)
  831. XX(CONNECT, 2, 'P', COPY)
  832. XX(MKCOL, 1, 'O', MOVE)
  833. XX(MKCOL, 1, 'E', MERGE)
  834. XX(MKCOL, 1, '-', MSEARCH)
  835. XX(MKCOL, 2, 'A', MKACTIVITY)
  836. XX(MKCOL, 3, 'A', MKCALENDAR)
  837. XX(SUBSCRIBE, 1, 'E', SEARCH)
  838. XX(SUBSCRIBE, 1, 'O', SOURCE)
  839. XX(REPORT, 2, 'B', REBIND)
  840. XX(PROPFIND, 4, 'P', PROPPATCH)
  841. XX(LOCK, 1, 'I', LINK)
  842. XX(UNLOCK, 2, 'S', UNSUBSCRIBE)
  843. XX(UNLOCK, 2, 'B', UNBIND)
  844. XX(UNLOCK, 3, 'I', UNLINK)
  845. #undef XX
  846. default:
  847. SET_ERRNO(HPE_INVALID_METHOD);
  848. goto error;
  849. }
  850. } else {
  851. SET_ERRNO(HPE_INVALID_METHOD);
  852. goto error;
  853. }
  854. ++parser->index;
  855. break;
  856. }
  857. case s_req_spaces_before_url:
  858. {
  859. if (ch == ' ') break;
  860. MARK(url);
  861. if (parser->method == HTTP_CONNECT) {
  862. UPDATE_STATE(s_req_server_start);
  863. }
  864. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  865. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  866. SET_ERRNO(HPE_INVALID_URL);
  867. goto error;
  868. }
  869. break;
  870. }
  871. case s_req_schema:
  872. case s_req_schema_slash:
  873. case s_req_schema_slash_slash:
  874. case s_req_server_start:
  875. {
  876. switch (ch) {
  877. /* No whitespace allowed here */
  878. case ' ':
  879. case CR:
  880. case LF:
  881. SET_ERRNO(HPE_INVALID_URL);
  882. goto error;
  883. default:
  884. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  885. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  886. SET_ERRNO(HPE_INVALID_URL);
  887. goto error;
  888. }
  889. }
  890. break;
  891. }
  892. case s_req_server:
  893. case s_req_server_with_at:
  894. case s_req_path:
  895. case s_req_query_string_start:
  896. case s_req_query_string:
  897. case s_req_fragment_start:
  898. case s_req_fragment:
  899. {
  900. switch (ch) {
  901. case ' ':
  902. UPDATE_STATE(s_req_http_start);
  903. CALLBACK_DATA(url);
  904. break;
  905. case CR:
  906. case LF:
  907. parser->http_major = 0;
  908. parser->http_minor = 9;
  909. UPDATE_STATE((ch == CR) ?
  910. s_req_line_almost_done :
  911. s_header_field_start);
  912. CALLBACK_DATA(url);
  913. break;
  914. default:
  915. UPDATE_STATE(parse_url_char(CURRENT_STATE(), ch));
  916. if (UNLIKELY(CURRENT_STATE() == s_dead)) {
  917. SET_ERRNO(HPE_INVALID_URL);
  918. goto error;
  919. }
  920. }
  921. break;
  922. }
  923. case s_req_http_start:
  924. switch (ch) {
  925. case 'H':
  926. UPDATE_STATE(s_req_http_H);
  927. break;
  928. case ' ':
  929. break;
  930. default:
  931. SET_ERRNO(HPE_INVALID_CONSTANT);
  932. goto error;
  933. }
  934. break;
  935. case s_req_http_H:
  936. STRICT_CHECK(ch != 'T');
  937. UPDATE_STATE(s_req_http_HT);
  938. break;
  939. case s_req_http_HT:
  940. STRICT_CHECK(ch != 'T');
  941. UPDATE_STATE(s_req_http_HTT);
  942. break;
  943. case s_req_http_HTT:
  944. STRICT_CHECK(ch != 'P');
  945. UPDATE_STATE(s_req_http_HTTP);
  946. break;
  947. case s_req_http_HTTP:
  948. STRICT_CHECK(ch != '/');
  949. UPDATE_STATE(s_req_http_major);
  950. break;
  951. case s_req_http_major:
  952. if (UNLIKELY(!IS_NUM(ch))) {
  953. SET_ERRNO(HPE_INVALID_VERSION);
  954. goto error;
  955. }
  956. parser->http_major = ch - '0';
  957. UPDATE_STATE(s_req_http_dot);
  958. break;
  959. case s_req_http_dot:
  960. {
  961. if (UNLIKELY(ch != '.')) {
  962. SET_ERRNO(HPE_INVALID_VERSION);
  963. goto error;
  964. }
  965. UPDATE_STATE(s_req_http_minor);
  966. break;
  967. }
  968. case s_req_http_minor:
  969. if (UNLIKELY(!IS_NUM(ch))) {
  970. SET_ERRNO(HPE_INVALID_VERSION);
  971. goto error;
  972. }
  973. parser->http_minor = ch - '0';
  974. UPDATE_STATE(s_req_http_end);
  975. break;
  976. case s_req_http_end:
  977. {
  978. if (ch == CR) {
  979. UPDATE_STATE(s_req_line_almost_done);
  980. break;
  981. }
  982. if (ch == LF) {
  983. UPDATE_STATE(s_header_field_start);
  984. break;
  985. }
  986. SET_ERRNO(HPE_INVALID_VERSION);
  987. goto error;
  988. break;
  989. }
  990. /* end of request line */
  991. case s_req_line_almost_done:
  992. {
  993. if (UNLIKELY(ch != LF)) {
  994. SET_ERRNO(HPE_LF_EXPECTED);
  995. goto error;
  996. }
  997. UPDATE_STATE(s_header_field_start);
  998. break;
  999. }
  1000. case s_header_field_start:
  1001. {
  1002. if (ch == CR) {
  1003. UPDATE_STATE(s_headers_almost_done);
  1004. break;
  1005. }
  1006. if (ch == LF) {
  1007. /* they might be just sending \n instead of \r\n so this would be
  1008. * the second \n to denote the end of headers*/
  1009. UPDATE_STATE(s_headers_almost_done);
  1010. REEXECUTE();
  1011. }
  1012. c = TOKEN(ch);
  1013. if (UNLIKELY(!c)) {
  1014. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1015. goto error;
  1016. }
  1017. MARK(header_field);
  1018. parser->index = 0;
  1019. UPDATE_STATE(s_header_field);
  1020. switch (c) {
  1021. case 'c':
  1022. parser->header_state = h_C;
  1023. break;
  1024. case 'p':
  1025. parser->header_state = h_matching_proxy_connection;
  1026. break;
  1027. case 't':
  1028. parser->header_state = h_matching_transfer_encoding;
  1029. break;
  1030. case 'u':
  1031. parser->header_state = h_matching_upgrade;
  1032. break;
  1033. default:
  1034. parser->header_state = h_general;
  1035. break;
  1036. }
  1037. break;
  1038. }
  1039. case s_header_field:
  1040. {
  1041. const char* start = p;
  1042. for (; p != data + len; p++) {
  1043. ch = *p;
  1044. c = TOKEN(ch);
  1045. if (!c)
  1046. break;
  1047. switch (parser->header_state) {
  1048. case h_general:
  1049. break;
  1050. case h_C:
  1051. parser->index++;
  1052. parser->header_state = (c == 'o' ? h_CO : h_general);
  1053. break;
  1054. case h_CO:
  1055. parser->index++;
  1056. parser->header_state = (c == 'n' ? h_CON : h_general);
  1057. break;
  1058. case h_CON:
  1059. parser->index++;
  1060. switch (c) {
  1061. case 'n':
  1062. parser->header_state = h_matching_connection;
  1063. break;
  1064. case 't':
  1065. parser->header_state = h_matching_content_length;
  1066. break;
  1067. default:
  1068. parser->header_state = h_general;
  1069. break;
  1070. }
  1071. break;
  1072. /* connection */
  1073. case h_matching_connection:
  1074. parser->index++;
  1075. if (parser->index > sizeof(CONNECTION)-1
  1076. || c != CONNECTION[parser->index]) {
  1077. parser->header_state = h_general;
  1078. } else if (parser->index == sizeof(CONNECTION)-2) {
  1079. parser->header_state = h_connection;
  1080. }
  1081. break;
  1082. /* proxy-connection */
  1083. case h_matching_proxy_connection:
  1084. parser->index++;
  1085. if (parser->index > sizeof(PROXY_CONNECTION)-1
  1086. || c != PROXY_CONNECTION[parser->index]) {
  1087. parser->header_state = h_general;
  1088. } else if (parser->index == sizeof(PROXY_CONNECTION)-2) {
  1089. parser->header_state = h_connection;
  1090. }
  1091. break;
  1092. /* content-length */
  1093. case h_matching_content_length:
  1094. parser->index++;
  1095. if (parser->index > sizeof(CONTENT_LENGTH)-1
  1096. || c != CONTENT_LENGTH[parser->index]) {
  1097. parser->header_state = h_general;
  1098. } else if (parser->index == sizeof(CONTENT_LENGTH)-2) {
  1099. parser->header_state = h_content_length;
  1100. }
  1101. break;
  1102. /* transfer-encoding */
  1103. case h_matching_transfer_encoding:
  1104. parser->index++;
  1105. if (parser->index > sizeof(TRANSFER_ENCODING)-1
  1106. || c != TRANSFER_ENCODING[parser->index]) {
  1107. parser->header_state = h_general;
  1108. } else if (parser->index == sizeof(TRANSFER_ENCODING)-2) {
  1109. parser->header_state = h_transfer_encoding;
  1110. }
  1111. break;
  1112. /* upgrade */
  1113. case h_matching_upgrade:
  1114. parser->index++;
  1115. if (parser->index > sizeof(UPGRADE)-1
  1116. || c != UPGRADE[parser->index]) {
  1117. parser->header_state = h_general;
  1118. } else if (parser->index == sizeof(UPGRADE)-2) {
  1119. parser->header_state = h_upgrade;
  1120. }
  1121. break;
  1122. case h_connection:
  1123. case h_content_length:
  1124. case h_transfer_encoding:
  1125. case h_upgrade:
  1126. if (ch != ' ') parser->header_state = h_general;
  1127. break;
  1128. default:
  1129. assert(0 && "Unknown header_state");
  1130. break;
  1131. }
  1132. }
  1133. COUNT_HEADER_SIZE(p - start);
  1134. if (p == data + len) {
  1135. --p;
  1136. break;
  1137. }
  1138. if (ch == ':') {
  1139. UPDATE_STATE(s_header_value_discard_ws);
  1140. CALLBACK_DATA(header_field);
  1141. break;
  1142. }
  1143. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1144. goto error;
  1145. }
  1146. case s_header_value_discard_ws:
  1147. if (ch == ' ' || ch == '\t') break;
  1148. if (ch == CR) {
  1149. UPDATE_STATE(s_header_value_discard_ws_almost_done);
  1150. break;
  1151. }
  1152. if (ch == LF) {
  1153. UPDATE_STATE(s_header_value_discard_lws);
  1154. break;
  1155. }
  1156. /* FALLTHROUGH */
  1157. case s_header_value_start:
  1158. {
  1159. MARK(header_value);
  1160. UPDATE_STATE(s_header_value);
  1161. parser->index = 0;
  1162. c = LOWER(ch);
  1163. switch (parser->header_state) {
  1164. case h_upgrade:
  1165. parser->flags |= F_UPGRADE;
  1166. parser->header_state = h_general;
  1167. break;
  1168. case h_transfer_encoding:
  1169. /* looking for 'Transfer-Encoding: chunked' */
  1170. if ('c' == c) {
  1171. parser->header_state = h_matching_transfer_encoding_chunked;
  1172. } else {
  1173. parser->header_state = h_general;
  1174. }
  1175. break;
  1176. case h_content_length:
  1177. if (UNLIKELY(!IS_NUM(ch))) {
  1178. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1179. goto error;
  1180. }
  1181. if (parser->flags & F_CONTENTLENGTH) {
  1182. SET_ERRNO(HPE_UNEXPECTED_CONTENT_LENGTH);
  1183. goto error;
  1184. }
  1185. parser->flags |= F_CONTENTLENGTH;
  1186. parser->content_length = ch - '0';
  1187. parser->header_state = h_content_length_num;
  1188. break;
  1189. case h_connection:
  1190. /* looking for 'Connection: keep-alive' */
  1191. if (c == 'k') {
  1192. parser->header_state = h_matching_connection_keep_alive;
  1193. /* looking for 'Connection: close' */
  1194. } else if (c == 'c') {
  1195. parser->header_state = h_matching_connection_close;
  1196. } else if (c == 'u') {
  1197. parser->header_state = h_matching_connection_upgrade;
  1198. } else {
  1199. parser->header_state = h_matching_connection_token;
  1200. }
  1201. break;
  1202. /* Multi-value `Connection` header */
  1203. case h_matching_connection_token_start:
  1204. break;
  1205. default:
  1206. parser->header_state = h_general;
  1207. break;
  1208. }
  1209. break;
  1210. }
  1211. case s_header_value:
  1212. {
  1213. const char* start = p;
  1214. enum header_states h_state = (enum header_states) parser->header_state;
  1215. for (; p != data + len; p++) {
  1216. ch = *p;
  1217. if (ch == CR) {
  1218. UPDATE_STATE(s_header_almost_done);
  1219. parser->header_state = h_state;
  1220. CALLBACK_DATA(header_value);
  1221. break;
  1222. }
  1223. if (ch == LF) {
  1224. UPDATE_STATE(s_header_almost_done);
  1225. COUNT_HEADER_SIZE(p - start);
  1226. parser->header_state = h_state;
  1227. CALLBACK_DATA_NOADVANCE(header_value);
  1228. REEXECUTE();
  1229. }
  1230. if (!lenient && !IS_HEADER_CHAR(ch)) {
  1231. SET_ERRNO(HPE_INVALID_HEADER_TOKEN);
  1232. goto error;
  1233. }
  1234. c = LOWER(ch);
  1235. switch (h_state) {
  1236. case h_general:
  1237. {
  1238. const char* p_cr;
  1239. const char* p_lf;
  1240. size_t limit = data + len - p;
  1241. limit = MIN(limit, HTTP_MAX_HEADER_SIZE);
  1242. p_cr = (const char*) memchr(p, CR, limit);
  1243. p_lf = (const char*) memchr(p, LF, limit);
  1244. if (p_cr != NULL) {
  1245. if (p_lf != NULL && p_cr >= p_lf)
  1246. p = p_lf;
  1247. else
  1248. p = p_cr;
  1249. } else if (UNLIKELY(p_lf != NULL)) {
  1250. p = p_lf;
  1251. } else {
  1252. p = data + len;
  1253. }
  1254. --p;
  1255. break;
  1256. }
  1257. case h_connection:
  1258. case h_transfer_encoding:
  1259. assert(0 && "Shouldn't get here.");
  1260. break;
  1261. case h_content_length:
  1262. if (ch == ' ') break;
  1263. h_state = h_content_length_num;
  1264. /* FALLTHROUGH */
  1265. case h_content_length_num:
  1266. {
  1267. uint64_t t;
  1268. if (ch == ' ') {
  1269. h_state = h_content_length_ws;
  1270. break;
  1271. }
  1272. if (UNLIKELY(!IS_NUM(ch))) {
  1273. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1274. parser->header_state = h_state;
  1275. goto error;
  1276. }
  1277. t = parser->content_length;
  1278. t *= 10;
  1279. t += ch - '0';
  1280. /* Overflow? Test against a conservative limit for simplicity. */
  1281. if (UNLIKELY((ULLONG_MAX - 10) / 10 < parser->content_length)) {
  1282. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1283. parser->header_state = h_state;
  1284. goto error;
  1285. }
  1286. parser->content_length = t;
  1287. break;
  1288. }
  1289. case h_content_length_ws:
  1290. if (ch == ' ') break;
  1291. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1292. parser->header_state = h_state;
  1293. goto error;
  1294. /* Transfer-Encoding: chunked */
  1295. case h_matching_transfer_encoding_chunked:
  1296. parser->index++;
  1297. if (parser->index > sizeof(CHUNKED)-1
  1298. || c != CHUNKED[parser->index]) {
  1299. h_state = h_general;
  1300. } else if (parser->index == sizeof(CHUNKED)-2) {
  1301. h_state = h_transfer_encoding_chunked;
  1302. }
  1303. break;
  1304. case h_matching_connection_token_start:
  1305. /* looking for 'Connection: keep-alive' */
  1306. if (c == 'k') {
  1307. h_state = h_matching_connection_keep_alive;
  1308. /* looking for 'Connection: close' */
  1309. } else if (c == 'c') {
  1310. h_state = h_matching_connection_close;
  1311. } else if (c == 'u') {
  1312. h_state = h_matching_connection_upgrade;
  1313. } else if (STRICT_TOKEN(c)) {
  1314. h_state = h_matching_connection_token;
  1315. } else if (c == ' ' || c == '\t') {
  1316. /* Skip lws */
  1317. } else {
  1318. h_state = h_general;
  1319. }
  1320. break;
  1321. /* looking for 'Connection: keep-alive' */
  1322. case h_matching_connection_keep_alive:
  1323. parser->index++;
  1324. if (parser->index > sizeof(KEEP_ALIVE)-1
  1325. || c != KEEP_ALIVE[parser->index]) {
  1326. h_state = h_matching_connection_token;
  1327. } else if (parser->index == sizeof(KEEP_ALIVE)-2) {
  1328. h_state = h_connection_keep_alive;
  1329. }
  1330. break;
  1331. /* looking for 'Connection: close' */
  1332. case h_matching_connection_close:
  1333. parser->index++;
  1334. if (parser->index > sizeof(CLOSE)-1 || c != CLOSE[parser->index]) {
  1335. h_state = h_matching_connection_token;
  1336. } else if (parser->index == sizeof(CLOSE)-2) {
  1337. h_state = h_connection_close;
  1338. }
  1339. break;
  1340. /* looking for 'Connection: upgrade' */
  1341. case h_matching_connection_upgrade:
  1342. parser->index++;
  1343. if (parser->index > sizeof(UPGRADE) - 1 ||
  1344. c != UPGRADE[parser->index]) {
  1345. h_state = h_matching_connection_token;
  1346. } else if (parser->index == sizeof(UPGRADE)-2) {
  1347. h_state = h_connection_upgrade;
  1348. }
  1349. break;
  1350. case h_matching_connection_token:
  1351. if (ch == ',') {
  1352. h_state = h_matching_connection_token_start;
  1353. parser->index = 0;
  1354. }
  1355. break;
  1356. case h_transfer_encoding_chunked:
  1357. if (ch != ' ') h_state = h_general;
  1358. break;
  1359. case h_connection_keep_alive:
  1360. case h_connection_close:
  1361. case h_connection_upgrade:
  1362. if (ch == ',') {
  1363. if (h_state == h_connection_keep_alive) {
  1364. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1365. } else if (h_state == h_connection_close) {
  1366. parser->flags |= F_CONNECTION_CLOSE;
  1367. } else if (h_state == h_connection_upgrade) {
  1368. parser->flags |= F_CONNECTION_UPGRADE;
  1369. }
  1370. h_state = h_matching_connection_token_start;
  1371. parser->index = 0;
  1372. } else if (ch != ' ') {
  1373. h_state = h_matching_connection_token;
  1374. }
  1375. break;
  1376. default:
  1377. UPDATE_STATE(s_header_value);
  1378. h_state = h_general;
  1379. break;
  1380. }
  1381. }
  1382. parser->header_state = h_state;
  1383. COUNT_HEADER_SIZE(p - start);
  1384. if (p == data + len)
  1385. --p;
  1386. break;
  1387. }
  1388. case s_header_almost_done:
  1389. {
  1390. if (UNLIKELY(ch != LF)) {
  1391. SET_ERRNO(HPE_LF_EXPECTED);
  1392. goto error;
  1393. }
  1394. UPDATE_STATE(s_header_value_lws);
  1395. break;
  1396. }
  1397. case s_header_value_lws:
  1398. {
  1399. if (ch == ' ' || ch == '\t') {
  1400. UPDATE_STATE(s_header_value_start);
  1401. REEXECUTE();
  1402. }
  1403. /* finished the header */
  1404. switch (parser->header_state) {
  1405. case h_connection_keep_alive:
  1406. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1407. break;
  1408. case h_connection_close:
  1409. parser->flags |= F_CONNECTION_CLOSE;
  1410. break;
  1411. case h_transfer_encoding_chunked:
  1412. parser->flags |= F_CHUNKED;
  1413. break;
  1414. case h_connection_upgrade:
  1415. parser->flags |= F_CONNECTION_UPGRADE;
  1416. break;
  1417. default:
  1418. break;
  1419. }
  1420. UPDATE_STATE(s_header_field_start);
  1421. REEXECUTE();
  1422. }
  1423. case s_header_value_discard_ws_almost_done:
  1424. {
  1425. STRICT_CHECK(ch != LF);
  1426. UPDATE_STATE(s_header_value_discard_lws);
  1427. break;
  1428. }
  1429. case s_header_value_discard_lws:
  1430. {
  1431. if (ch == ' ' || ch == '\t') {
  1432. UPDATE_STATE(s_header_value_discard_ws);
  1433. break;
  1434. } else {
  1435. switch (parser->header_state) {
  1436. case h_connection_keep_alive:
  1437. parser->flags |= F_CONNECTION_KEEP_ALIVE;
  1438. break;
  1439. case h_connection_close:
  1440. parser->flags |= F_CONNECTION_CLOSE;
  1441. break;
  1442. case h_connection_upgrade:
  1443. parser->flags |= F_CONNECTION_UPGRADE;
  1444. break;
  1445. case h_transfer_encoding_chunked:
  1446. parser->flags |= F_CHUNKED;
  1447. break;
  1448. default:
  1449. break;
  1450. }
  1451. /* header value was empty */
  1452. MARK(header_value);
  1453. UPDATE_STATE(s_header_field_start);
  1454. CALLBACK_DATA_NOADVANCE(header_value);
  1455. REEXECUTE();
  1456. }
  1457. }
  1458. case s_headers_almost_done:
  1459. {
  1460. STRICT_CHECK(ch != LF);
  1461. if (parser->flags & F_TRAILING) {
  1462. /* End of a chunked request */
  1463. UPDATE_STATE(s_message_done);
  1464. CALLBACK_NOTIFY_NOADVANCE(chunk_complete);
  1465. REEXECUTE();
  1466. }
  1467. /* Cannot use chunked encoding and a content-length header together
  1468. per the HTTP specification. */
  1469. if ((parser->flags & F_CHUNKED) &&
  1470. (parser->flags & F_CONTENTLENGTH)) {
  1471. SET_ERRNO(HPE_UNEXPECTED_CONTENT_LENGTH);
  1472. goto error;
  1473. }
  1474. UPDATE_STATE(s_headers_done);
  1475. /* Set this here so that on_headers_complete() callbacks can see it */
  1476. if ((parser->flags & F_UPGRADE) &&
  1477. (parser->flags & F_CONNECTION_UPGRADE)) {
  1478. /* For responses, "Upgrade: foo" and "Connection: upgrade" are
  1479. * mandatory only when it is a 101 Switching Protocols response,
  1480. * otherwise it is purely informational, to announce support.
  1481. */
  1482. parser->upgrade =
  1483. (parser->type == HTTP_REQUEST || parser->status_code == 101);
  1484. } else {
  1485. parser->upgrade = (parser->method == HTTP_CONNECT);
  1486. }
  1487. /* Here we call the headers_complete callback. This is somewhat
  1488. * different than other callbacks because if the user returns 1, we
  1489. * will interpret that as saying that this message has no body. This
  1490. * is needed for the annoying case of recieving a response to a HEAD
  1491. * request.
  1492. *
  1493. * We'd like to use CALLBACK_NOTIFY_NOADVANCE() here but we cannot, so
  1494. * we have to simulate it by handling a change in errno below.
  1495. */
  1496. if (settings->on_headers_complete) {
  1497. switch (settings->on_headers_complete(parser)) {
  1498. case 0:
  1499. break;
  1500. case 2:
  1501. parser->upgrade = 1;
  1502. /* FALLTHROUGH */
  1503. case 1:
  1504. parser->flags |= F_SKIPBODY;
  1505. break;
  1506. default:
  1507. SET_ERRNO(HPE_CB_headers_complete);
  1508. RETURN(p - data); /* Error */
  1509. }
  1510. }
  1511. if (HTTP_PARSER_ERRNO(parser) != HPE_OK) {
  1512. RETURN(p - data);
  1513. }
  1514. REEXECUTE();
  1515. }
  1516. case s_headers_done:
  1517. {
  1518. int hasBody;
  1519. STRICT_CHECK(ch != LF);
  1520. parser->nread = 0;
  1521. hasBody = parser->flags & F_CHUNKED ||
  1522. (parser->content_length > 0 && parser->content_length != ULLONG_MAX);
  1523. if (parser->upgrade && (parser->method == HTTP_CONNECT ||
  1524. (parser->flags & F_SKIPBODY) || !hasBody)) {
  1525. /* Exit, the rest of the message is in a different protocol. */
  1526. UPDATE_STATE(NEW_MESSAGE());
  1527. CALLBACK_NOTIFY(message_complete);
  1528. RETURN((p - data) + 1);
  1529. }
  1530. if (parser->flags & F_SKIPBODY) {
  1531. UPDATE_STATE(NEW_MESSAGE());
  1532. CALLBACK_NOTIFY(message_complete);
  1533. } else if (parser->flags & F_CHUNKED) {
  1534. /* chunked encoding - ignore Content-Length header */
  1535. UPDATE_STATE(s_chunk_size_start);
  1536. } else {
  1537. if (parser->content_length == 0) {
  1538. /* Content-Length header given but zero: Content-Length: 0\r\n */
  1539. UPDATE_STATE(NEW_MESSAGE());
  1540. CALLBACK_NOTIFY(message_complete);
  1541. } else if (parser->content_length != ULLONG_MAX) {
  1542. /* Content-Length header given and non-zero */
  1543. UPDATE_STATE(s_body_identity);
  1544. } else {
  1545. if (!http_message_needs_eof(parser)) {
  1546. /* Assume content-length 0 - read the next */
  1547. UPDATE_STATE(NEW_MESSAGE());
  1548. CALLBACK_NOTIFY(message_complete);
  1549. } else {
  1550. /* Read body until EOF */
  1551. UPDATE_STATE(s_body_identity_eof);
  1552. }
  1553. }
  1554. }
  1555. break;
  1556. }
  1557. case s_body_identity:
  1558. {
  1559. uint64_t to_read = MIN(parser->content_length,
  1560. (uint64_t) ((data + len) - p));
  1561. assert(parser->content_length != 0
  1562. && parser->content_length != ULLONG_MAX);
  1563. /* The difference between advancing content_length and p is because
  1564. * the latter will automaticaly advance on the next loop iteration.
  1565. * Further, if content_length ends up at 0, we want to see the last
  1566. * byte again for our message complete callback.
  1567. */
  1568. MARK(body);
  1569. parser->content_length -= to_read;
  1570. p += to_read - 1;
  1571. if (parser->content_length == 0) {
  1572. UPDATE_STATE(s_message_done);
  1573. /* Mimic CALLBACK_DATA_NOADVANCE() but with one extra byte.
  1574. *
  1575. * The alternative to doing this is to wait for the next byte to
  1576. * trigger the data callback, just as in every other case. The
  1577. * problem with this is that this makes it difficult for the test
  1578. * harness to distinguish between complete-on-EOF and
  1579. * complete-on-length. It's not clear that this distinction is
  1580. * important for applications, but let's keep it for now.
  1581. */
  1582. CALLBACK_DATA_(body, p - body_mark + 1, p - data);
  1583. REEXECUTE();
  1584. }
  1585. break;
  1586. }
  1587. /* read until EOF */
  1588. case s_body_identity_eof:
  1589. MARK(body);
  1590. p = data + len - 1;
  1591. break;
  1592. case s_message_done:
  1593. UPDATE_STATE(NEW_MESSAGE());
  1594. CALLBACK_NOTIFY(message_complete);
  1595. if (parser->upgrade) {
  1596. /* Exit, the rest of the message is in a different protocol. */
  1597. RETURN((p - data) + 1);
  1598. }
  1599. break;
  1600. case s_chunk_size_start:
  1601. {
  1602. assert(parser->nread == 1);
  1603. assert(parser->flags & F_CHUNKED);
  1604. unhex_val = unhex[(unsigned char)ch];
  1605. if (UNLIKELY(unhex_val == -1)) {
  1606. SET_ERRNO(HPE_INVALID_CHUNK_SIZE);
  1607. goto error;
  1608. }
  1609. parser->content_length = unhex_val;
  1610. UPDATE_STATE(s_chunk_size);
  1611. break;
  1612. }
  1613. case s_chunk_size:
  1614. {
  1615. uint64_t t;
  1616. assert(parser->flags & F_CHUNKED);
  1617. if (ch == CR) {
  1618. UPDATE_STATE(s_chunk_size_almost_done);
  1619. break;
  1620. }
  1621. unhex_val = unhex[(unsigned char)ch];
  1622. if (unhex_val == -1) {
  1623. if (ch == ';' || ch == ' ') {
  1624. UPDATE_STATE(s_chunk_parameters);
  1625. break;
  1626. }
  1627. SET_ERRNO(HPE_INVALID_CHUNK_SIZE);
  1628. goto error;
  1629. }
  1630. t = parser->content_length;
  1631. t *= 16;
  1632. t += unhex_val;
  1633. /* Overflow? Test against a conservative limit for simplicity. */
  1634. if (UNLIKELY((ULLONG_MAX - 16) / 16 < parser->content_length)) {
  1635. SET_ERRNO(HPE_INVALID_CONTENT_LENGTH);
  1636. goto error;
  1637. }
  1638. parser->content_length = t;
  1639. break;
  1640. }
  1641. case s_chunk_parameters:
  1642. {
  1643. assert(parser->flags & F_CHUNKED);
  1644. /* just ignore this shit. TODO check for overflow */
  1645. if (ch == CR) {
  1646. UPDATE_STATE(s_chunk_size_almost_done);
  1647. break;
  1648. }
  1649. break;
  1650. }
  1651. case s_chunk_size_almost_done:
  1652. {
  1653. assert(parser->flags & F_CHUNKED);
  1654. STRICT_CHECK(ch != LF);
  1655. parser->nread = 0;
  1656. if (parser->content_length == 0) {
  1657. parser->flags |= F_TRAILING;
  1658. UPDATE_STATE(s_header_field_start);
  1659. } else {
  1660. UPDATE_STATE(s_chunk_data);
  1661. }
  1662. CALLBACK_NOTIFY(chunk_header);
  1663. break;
  1664. }
  1665. case s_chunk_data:
  1666. {
  1667. uint64_t to_read = MIN(parser->content_length,
  1668. (uint64_t) ((data + len) - p));
  1669. assert(parser->flags & F_CHUNKED);
  1670. assert(parser->content_length != 0
  1671. && parser->content_length != ULLONG_MAX);
  1672. /* See the explanation in s_body_identity for why the content
  1673. * length and data pointers are managed this way.
  1674. */
  1675. MARK(body);
  1676. parser->content_length -= to_read;
  1677. p += to_read - 1;
  1678. if (parser->content_length == 0) {
  1679. UPDATE_STATE(s_chunk_data_almost_done);
  1680. }
  1681. break;
  1682. }
  1683. case s_chunk_data_almost_done:
  1684. assert(parser->flags & F_CHUNKED);
  1685. assert(parser->content_length == 0);
  1686. STRICT_CHECK(ch != CR);
  1687. UPDATE_STATE(s_chunk_data_done);
  1688. CALLBACK_DATA(body);
  1689. break;
  1690. case s_chunk_data_done:
  1691. assert(parser->flags & F_CHUNKED);
  1692. STRICT_CHECK(ch != LF);
  1693. parser->nread = 0;
  1694. UPDATE_STATE(s_chunk_size_start);
  1695. CALLBACK_NOTIFY(chunk_complete);
  1696. break;
  1697. default:
  1698. assert(0 && "unhandled state");
  1699. SET_ERRNO(HPE_INVALID_INTERNAL_STATE);
  1700. goto error;
  1701. }
  1702. }
  1703. /* Run callbacks for any marks that we have leftover after we ran our of
  1704. * bytes. There should be at most one of these set, so it's OK to invoke
  1705. * them in series (unset marks will not result in callbacks).
  1706. *
  1707. * We use the NOADVANCE() variety of callbacks here because 'p' has already
  1708. * overflowed 'data' and this allows us to correct for the off-by-one that
  1709. * we'd otherwise have (since CALLBACK_DATA() is meant to be run with a 'p'
  1710. * value that's in-bounds).
  1711. */
  1712. assert(((header_field_mark ? 1 : 0) +
  1713. (header_value_mark ? 1 : 0) +
  1714. (url_mark ? 1 : 0) +
  1715. (body_mark ? 1 : 0) +
  1716. (status_mark ? 1 : 0)) <= 1);
  1717. CALLBACK_DATA_NOADVANCE(header_field);
  1718. CALLBACK_DATA_NOADVANCE(header_value);
  1719. CALLBACK_DATA_NOADVANCE(url);
  1720. CALLBACK_DATA_NOADVANCE(body);
  1721. CALLBACK_DATA_NOADVANCE(status);
  1722. RETURN(len);
  1723. error:
  1724. if (HTTP_PARSER_ERRNO(parser) == HPE_OK) {
  1725. SET_ERRNO(HPE_UNKNOWN);
  1726. }
  1727. RETURN(p - data);
  1728. }
  1729. /* Does the parser need to see an EOF to find the end of the message? */
  1730. int
  1731. http_message_needs_eof (const http_parser *parser)
  1732. {
  1733. if (parser->type == HTTP_REQUEST) {
  1734. return 0;
  1735. }
  1736. /* See RFC 2616 section 4.4 */
  1737. if (parser->status_code / 100 == 1 || /* 1xx e.g. Continue */
  1738. parser->status_code == 204 || /* No Content */
  1739. parser->status_code == 304 || /* Not Modified */
  1740. parser->flags & F_SKIPBODY) { /* response to a HEAD request */
  1741. return 0;
  1742. }
  1743. if ((parser->flags & F_CHUNKED) || parser->content_length != ULLONG_MAX) {
  1744. return 0;
  1745. }
  1746. return 1;
  1747. }
  1748. int
  1749. http_should_keep_alive (const http_parser *parser)
  1750. {
  1751. if (parser->http_major > 0 && parser->http_minor > 0) {
  1752. /* HTTP/1.1 */
  1753. if (parser->flags & F_CONNECTION_CLOSE) {
  1754. return 0;
  1755. }
  1756. } else {
  1757. /* HTTP/1.0 or earlier */
  1758. if (!(parser->flags & F_CONNECTION_KEEP_ALIVE)) {
  1759. return 0;
  1760. }
  1761. }
  1762. return !http_message_needs_eof(parser);
  1763. }
  1764. const char *
  1765. http_method_str (enum http_method m)
  1766. {
  1767. return ELEM_AT(method_strings, m, "<unknown>");
  1768. }
  1769. void
  1770. http_parser_init (http_parser *parser, enum http_parser_type t)
  1771. {
  1772. void *data = parser->data; /* preserve application data */
  1773. memset(parser, 0, sizeof(*parser));
  1774. parser->data = data;
  1775. parser->type = t;
  1776. parser->state = (t == HTTP_REQUEST ? s_start_req : (t == HTTP_RESPONSE ? s_start_res : s_start_req_or_res));
  1777. parser->http_errno = HPE_OK;
  1778. }
  1779. void
  1780. http_parser_settings_init(http_parser_settings *settings)
  1781. {
  1782. memset(settings, 0, sizeof(*settings));
  1783. }
  1784. const char *
  1785. http_errno_name(enum http_errno err) {
  1786. assert(((size_t) err) < ARRAY_SIZE(http_strerror_tab));
  1787. return http_strerror_tab[err].name;
  1788. }
  1789. const char *
  1790. http_errno_description(enum http_errno err) {
  1791. assert(((size_t) err) < ARRAY_SIZE(http_strerror_tab));
  1792. return http_strerror_tab[err].description;
  1793. }
  1794. static enum http_host_state
  1795. http_parse_host_char(enum http_host_state s, const char ch) {
  1796. switch(s) {
  1797. case s_http_userinfo:
  1798. case s_http_userinfo_start:
  1799. if (ch == '@') {
  1800. return s_http_host_start;
  1801. }
  1802. if (IS_USERINFO_CHAR(ch)) {
  1803. return s_http_userinfo;
  1804. }
  1805. break;
  1806. case s_http_host_start:
  1807. if (ch == '[') {
  1808. return s_http_host_v6_start;
  1809. }
  1810. if (IS_HOST_CHAR(ch)) {
  1811. return s_http_host;
  1812. }
  1813. break;
  1814. case s_http_host:
  1815. if (IS_HOST_CHAR(ch)) {
  1816. return s_http_host;
  1817. }
  1818. /* FALLTHROUGH */
  1819. case s_http_host_v6_end:
  1820. if (ch == ':') {
  1821. return s_http_host_port_start;
  1822. }
  1823. break;
  1824. case s_http_host_v6:
  1825. if (ch == ']') {
  1826. return s_http_host_v6_end;
  1827. }
  1828. /* FALLTHROUGH */
  1829. case s_http_host_v6_start:
  1830. if (IS_HEX(ch) || ch == ':' || ch == '.') {
  1831. return s_http_host_v6;
  1832. }
  1833. if (s == s_http_host_v6 && ch == '%') {
  1834. return s_http_host_v6_zone_start;
  1835. }
  1836. break;
  1837. case s_http_host_v6_zone:
  1838. if (ch == ']') {
  1839. return s_http_host_v6_end;
  1840. }
  1841. /* FALLTHROUGH */
  1842. case s_http_host_v6_zone_start:
  1843. /* RFC 6874 Zone ID consists of 1*( unreserved / pct-encoded) */
  1844. if (IS_ALPHANUM(ch) || ch == '%' || ch == '.' || ch == '-' || ch == '_' ||
  1845. ch == '~') {
  1846. return s_http_host_v6_zone;
  1847. }
  1848. break;
  1849. case s_http_host_port:
  1850. case s_http_host_port_start:
  1851. if (IS_NUM(ch)) {
  1852. return s_http_host_port;
  1853. }
  1854. break;
  1855. default:
  1856. break;
  1857. }
  1858. return s_http_host_dead;
  1859. }
  1860. static int
  1861. http_parse_host(const char * buf, struct http_parser_url *u, int found_at) {
  1862. enum http_host_state s;
  1863. const char *p;
  1864. size_t buflen = u->field_data[UF_HOST].off + u->field_data[UF_HOST].len;
  1865. assert(u->field_set & (1 << UF_HOST));
  1866. u->field_data[UF_HOST].len = 0;
  1867. s = found_at ? s_http_userinfo_start : s_http_host_start;
  1868. for (p = buf + u->field_data[UF_HOST].off; p < buf + buflen; p++) {
  1869. enum http_host_state new_s = http_parse_host_char(s, *p);
  1870. if (new_s == s_http_host_dead) {
  1871. return 1;
  1872. }
  1873. switch(new_s) {
  1874. case s_http_host:
  1875. if (s != s_http_host) {
  1876. u->field_data[UF_HOST].off = p - buf;
  1877. }
  1878. u->field_data[UF_HOST].len++;
  1879. break;
  1880. case s_http_host_v6:
  1881. if (s != s_http_host_v6) {
  1882. u->field_data[UF_HOST].off = p - buf;
  1883. }
  1884. u->field_data[UF_HOST].len++;
  1885. break;
  1886. case s_http_host_v6_zone_start:
  1887. case s_http_host_v6_zone:
  1888. u->field_data[UF_HOST].len++;
  1889. break;
  1890. case s_http_host_port:
  1891. if (s != s_http_host_port) {
  1892. u->field_data[UF_PORT].off = p - buf;
  1893. u->field_data[UF_PORT].len = 0;
  1894. u->field_set |= (1 << UF_PORT);
  1895. }
  1896. u->field_data[UF_PORT].len++;
  1897. break;
  1898. case s_http_userinfo:
  1899. if (s != s_http_userinfo) {
  1900. u->field_data[UF_USERINFO].off = p - buf ;
  1901. u->field_data[UF_USERINFO].len = 0;
  1902. u->field_set |= (1 << UF_USERINFO);
  1903. }
  1904. u->field_data[UF_USERINFO].len++;
  1905. break;
  1906. default:
  1907. break;
  1908. }
  1909. s = new_s;
  1910. }
  1911. /* Make sure we don't end somewhere unexpected */
  1912. switch (s) {
  1913. case s_http_host_start:
  1914. case s_http_host_v6_start:
  1915. case s_http_host_v6:
  1916. case s_http_host_v6_zone_start:
  1917. case s_http_host_v6_zone:
  1918. case s_http_host_port_start:
  1919. case s_http_userinfo:
  1920. case s_http_userinfo_start:
  1921. return 1;
  1922. default:
  1923. break;
  1924. }
  1925. return 0;
  1926. }
  1927. void
  1928. http_parser_url_init(struct http_parser_url *u) {
  1929. memset(u, 0, sizeof(*u));
  1930. }
  1931. int
  1932. http_parser_parse_url(const char *buf, size_t buflen, int is_connect,
  1933. struct http_parser_url *u)
  1934. {
  1935. enum state s;
  1936. const char *p;
  1937. enum http_parser_url_fields uf, old_uf;
  1938. int found_at = 0;
  1939. u->port = u->field_set = 0;
  1940. s = is_connect ? s_req_server_start : s_req_spaces_before_url;
  1941. old_uf = UF_MAX;
  1942. for (p = buf; p < buf + buflen; p++) {
  1943. s = parse_url_char(s, *p);
  1944. /* Figure out the next field that we're operating on */
  1945. switch (s) {
  1946. case s_dead:
  1947. return 1;
  1948. /* Skip delimeters */
  1949. case s_req_schema_slash:
  1950. case s_req_schema_slash_slash:
  1951. case s_req_server_start:
  1952. case s_req_query_string_start:
  1953. case s_req_fragment_start:
  1954. continue;
  1955. case s_req_schema:
  1956. uf = UF_SCHEMA;
  1957. break;
  1958. case s_req_server_with_at:
  1959. found_at = 1;
  1960. /* FALLTHROUGH */
  1961. case s_req_server:
  1962. uf = UF_HOST;
  1963. break;
  1964. case s_req_path:
  1965. uf = UF_PATH;
  1966. break;
  1967. case s_req_query_string:
  1968. uf = UF_QUERY;
  1969. break;
  1970. case s_req_fragment:
  1971. uf = UF_FRAGMENT;
  1972. break;
  1973. default:
  1974. assert(!"Unexpected state");
  1975. return 1;
  1976. }
  1977. /* Nothing's changed; soldier on */
  1978. if (uf == old_uf) {
  1979. u->field_data[uf].len++;
  1980. continue;
  1981. }
  1982. u->field_data[uf].off = p - buf;
  1983. u->field_data[uf].len = 1;
  1984. u->field_set |= (1 << uf);
  1985. old_uf = uf;
  1986. }
  1987. /* host must be present if there is a schema */
  1988. /* parsing http:///toto will fail */
  1989. if ((u->field_set & (1 << UF_SCHEMA)) &&
  1990. (u->field_set & (1 << UF_HOST)) == 0) {
  1991. return 1;
  1992. }
  1993. if (u->field_set & (1 << UF_HOST)) {
  1994. if (http_parse_host(buf, u, found_at) != 0) {
  1995. return 1;
  1996. }
  1997. }
  1998. /* CONNECT requests can only contain "hostname:port" */
  1999. if (is_connect && u->field_set != ((1 << UF_HOST)|(1 << UF_PORT))) {
  2000. return 1;
  2001. }
  2002. if (u->field_set & (1 << UF_PORT)) {
  2003. uint16_t off;
  2004. uint16_t len;
  2005. const char* p;
  2006. const char* end;
  2007. unsigned long v;
  2008. off = u->field_data[UF_PORT].off;
  2009. len = u->field_data[UF_PORT].len;
  2010. end = buf + off + len;
  2011. /* NOTE: The characters are already validated and are in the [0-9] range */
  2012. assert(off + len <= buflen && "Port number overflow");
  2013. v = 0;
  2014. for (p = buf + off; p < end; p++) {
  2015. v *= 10;
  2016. v += *p - '0';
  2017. /* Ports have a max value of 2^16 */
  2018. if (v > 0xffff) {
  2019. return 1;
  2020. }
  2021. }
  2022. u->port = (uint16_t) v;
  2023. }
  2024. return 0;
  2025. }
  2026. void
  2027. http_parser_pause(http_parser *parser, int paused) {
  2028. /* Users should only be pausing/unpausing a parser that is not in an error
  2029. * state. In non-debug builds, there's not much that we can do about this
  2030. * other than ignore it.
  2031. */
  2032. if (HTTP_PARSER_ERRNO(parser) == HPE_OK ||
  2033. HTTP_PARSER_ERRNO(parser) == HPE_PAUSED) {
  2034. SET_ERRNO((paused) ? HPE_PAUSED : HPE_OK);
  2035. } else {
  2036. assert(0 && "Attempting to pause parser in error state");
  2037. }
  2038. }
  2039. int
  2040. http_body_is_final(const struct http_parser *parser) {
  2041. return parser->state == s_message_done;
  2042. }
  2043. unsigned long
  2044. http_parser_version(void) {
  2045. return HTTP_PARSER_VERSION_MAJOR * 0x10000 |
  2046. HTTP_PARSER_VERSION_MINOR * 0x00100 |
  2047. HTTP_PARSER_VERSION_PATCH * 0x00001;
  2048. }