1 #define USE_THE_REPOSITORY_VARIABLE
3 #include "git-compat-util.h"
5 #include "environment.h"
9 #include "repository.h"
15 #include "run-command.h"
16 #include "string-list.h"
20 #include "object-store-ll.h"
23 #include "write-or-die.h"
25 static const char content_type
[] = "Content-Type";
26 static const char content_length
[] = "Content-Length";
27 static const char last_modified
[] = "Last-Modified";
28 static int getanyfile
= 1;
29 static unsigned long max_request_buffer
= 10 * 1024 * 1024;
31 static struct string_list
*query_params
;
35 const char *config_name
;
36 unsigned buffer_input
: 1;
40 static struct rpc_service rpc_service
[] = {
41 { "upload-pack", "uploadpack", 1, 1 },
42 { "receive-pack", "receivepack", 0, -1 },
43 { "upload-archive", "uploadarchive", 0, -1 },
46 static struct string_list
*get_parameters(void)
49 const char *query
= getenv("QUERY_STRING");
51 CALLOC_ARRAY(query_params
, 1);
52 while (query
&& *query
) {
53 char *name
= url_decode_parameter_name(&query
);
54 char *value
= url_decode_parameter_value(&query
);
55 struct string_list_item
*i
;
57 i
= string_list_lookup(query_params
, name
);
59 i
= string_list_insert(query_params
, name
);
68 static const char *get_parameter(const char *name
)
70 struct string_list_item
*i
;
71 i
= string_list_lookup(get_parameters(), name
);
72 return i
? i
->util
: NULL
;
75 __attribute__((format (printf
, 2, 3)))
76 static void format_write(int fd
, const char *fmt
, ...)
78 static char buffer
[1024];
84 n
= vsnprintf(buffer
, sizeof(buffer
), fmt
, args
);
86 if (n
>= sizeof(buffer
))
87 die("protocol error: impossibly long line");
89 write_or_die(fd
, buffer
, n
);
92 static void http_status(struct strbuf
*hdr
, unsigned code
, const char *msg
)
94 strbuf_addf(hdr
, "Status: %u %s\r\n", code
, msg
);
97 static void hdr_str(struct strbuf
*hdr
, const char *name
, const char *value
)
99 strbuf_addf(hdr
, "%s: %s\r\n", name
, value
);
102 static void hdr_int(struct strbuf
*hdr
, const char *name
, uintmax_t value
)
104 strbuf_addf(hdr
, "%s: %" PRIuMAX
"\r\n", name
, value
);
107 static void hdr_date(struct strbuf
*hdr
, const char *name
, timestamp_t when
)
109 const char *value
= show_date(when
, 0, DATE_MODE(RFC2822
));
110 hdr_str(hdr
, name
, value
);
113 static void hdr_nocache(struct strbuf
*hdr
)
115 hdr_str(hdr
, "Expires", "Fri, 01 Jan 1980 00:00:00 GMT");
116 hdr_str(hdr
, "Pragma", "no-cache");
117 hdr_str(hdr
, "Cache-Control", "no-cache, max-age=0, must-revalidate");
120 static void hdr_cache_forever(struct strbuf
*hdr
)
122 timestamp_t now
= time(NULL
);
123 hdr_date(hdr
, "Date", now
);
124 hdr_date(hdr
, "Expires", now
+ 31536000);
125 hdr_str(hdr
, "Cache-Control", "public, max-age=31536000");
128 static void end_headers(struct strbuf
*hdr
)
130 strbuf_add(hdr
, "\r\n", 2);
131 write_or_die(1, hdr
->buf
, hdr
->len
);
135 __attribute__((format (printf
, 2, 3)))
136 static NORETURN
void not_found(struct strbuf
*hdr
, const char *err
, ...)
140 http_status(hdr
, 404, "Not Found");
144 va_start(params
, err
);
146 vfprintf(stderr
, err
, params
);
151 __attribute__((format (printf
, 2, 3)))
152 static NORETURN
void forbidden(struct strbuf
*hdr
, const char *err
, ...)
156 http_status(hdr
, 403, "Forbidden");
160 va_start(params
, err
);
162 vfprintf(stderr
, err
, params
);
167 static void select_getanyfile(struct strbuf
*hdr
)
170 forbidden(hdr
, "Unsupported service: getanyfile");
173 static void send_strbuf(struct strbuf
*hdr
,
174 const char *type
, struct strbuf
*buf
)
176 hdr_int(hdr
, content_length
, buf
->len
);
177 hdr_str(hdr
, content_type
, type
);
179 write_or_die(1, buf
->buf
, buf
->len
);
182 static void send_local_file(struct strbuf
*hdr
, const char *the_type
,
185 char *p
= git_pathdup("%s", name
);
186 size_t buf_alloc
= 8192;
187 char *buf
= xmalloc(buf_alloc
);
191 fd
= open(p
, O_RDONLY
);
193 not_found(hdr
, "Cannot open '%s': %s", p
, strerror(errno
));
194 if (fstat(fd
, &sb
) < 0)
195 die_errno("Cannot stat '%s'", p
);
197 hdr_int(hdr
, content_length
, sb
.st_size
);
198 hdr_str(hdr
, content_type
, the_type
);
199 hdr_date(hdr
, last_modified
, sb
.st_mtime
);
203 ssize_t n
= xread(fd
, buf
, buf_alloc
);
205 die_errno("Cannot read '%s'", p
);
208 write_or_die(1, buf
, n
);
215 static void get_text_file(struct strbuf
*hdr
, char *name
)
217 select_getanyfile(hdr
);
219 send_local_file(hdr
, "text/plain", name
);
222 static void get_loose_object(struct strbuf
*hdr
, char *name
)
224 select_getanyfile(hdr
);
225 hdr_cache_forever(hdr
);
226 send_local_file(hdr
, "application/x-git-loose-object", name
);
229 static void get_pack_file(struct strbuf
*hdr
, char *name
)
231 select_getanyfile(hdr
);
232 hdr_cache_forever(hdr
);
233 send_local_file(hdr
, "application/x-git-packed-objects", name
);
236 static void get_idx_file(struct strbuf
*hdr
, char *name
)
238 select_getanyfile(hdr
);
239 hdr_cache_forever(hdr
);
240 send_local_file(hdr
, "application/x-git-packed-objects-toc", name
);
243 static void http_config(void)
246 struct strbuf var
= STRBUF_INIT
;
248 git_config_get_bool("http.getanyfile", &getanyfile
);
249 git_config_get_ulong("http.maxrequestbuffer", &max_request_buffer
);
251 for (i
= 0; i
< ARRAY_SIZE(rpc_service
); i
++) {
252 struct rpc_service
*svc
= &rpc_service
[i
];
253 strbuf_addf(&var
, "http.%s", svc
->config_name
);
254 if (!git_config_get_bool(var
.buf
, &value
))
255 svc
->enabled
= value
;
259 strbuf_release(&var
);
262 static struct rpc_service
*select_service(struct strbuf
*hdr
, const char *name
)
264 const char *svc_name
;
265 struct rpc_service
*svc
= NULL
;
268 if (!skip_prefix(name
, "git-", &svc_name
))
269 forbidden(hdr
, "Unsupported service: '%s'", name
);
271 for (i
= 0; i
< ARRAY_SIZE(rpc_service
); i
++) {
272 struct rpc_service
*s
= &rpc_service
[i
];
273 if (!strcmp(s
->name
, svc_name
)) {
280 forbidden(hdr
, "Unsupported service: '%s'", name
);
282 if (svc
->enabled
< 0) {
283 const char *user
= getenv("REMOTE_USER");
284 svc
->enabled
= (user
&& *user
) ? 1 : 0;
287 forbidden(hdr
, "Service not enabled: '%s'", svc
->name
);
291 static void write_to_child(int out
, const unsigned char *buf
, ssize_t len
, const char *prog_name
)
293 if (write_in_full(out
, buf
, len
) < 0)
294 die("unable to write to '%s'", prog_name
);
298 * This is basically strbuf_read(), except that if we
299 * hit max_request_buffer we die (we'd rather reject a
300 * maliciously large request than chew up infinite memory).
302 static ssize_t
read_request_eof(int fd
, unsigned char **out
)
304 size_t len
= 0, alloc
= 8192;
305 unsigned char *buf
= xmalloc(alloc
);
307 if (max_request_buffer
< alloc
)
308 max_request_buffer
= alloc
;
313 cnt
= read_in_full(fd
, buf
+ len
, alloc
- len
);
319 /* partial read from read_in_full means we hit EOF */
326 /* otherwise, grow and try again (if we can) */
327 if (alloc
== max_request_buffer
)
328 die("request was larger than our maximum size (%lu);"
329 " try setting GIT_HTTP_MAX_REQUEST_BUFFER",
332 alloc
= alloc_nr(alloc
);
333 if (alloc
> max_request_buffer
)
334 alloc
= max_request_buffer
;
335 REALLOC_ARRAY(buf
, alloc
);
339 static ssize_t
read_request_fixed_len(int fd
, ssize_t req_len
, unsigned char **out
)
341 unsigned char *buf
= NULL
;
344 if (max_request_buffer
< req_len
) {
345 die("request was larger than our maximum size (%lu): "
346 "%" PRIuMAX
"; try setting GIT_HTTP_MAX_REQUEST_BUFFER",
347 max_request_buffer
, (uintmax_t)req_len
);
350 buf
= xmalloc(req_len
);
351 cnt
= read_in_full(fd
, buf
, req_len
);
360 static ssize_t
get_content_length(void)
363 const char *str
= getenv("CONTENT_LENGTH");
365 if (str
&& *str
&& !git_parse_ssize_t(str
, &val
))
366 die("failed to parse CONTENT_LENGTH: %s", str
);
370 static ssize_t
read_request(int fd
, unsigned char **out
, ssize_t req_len
)
373 return read_request_eof(fd
, out
);
375 return read_request_fixed_len(fd
, req_len
, out
);
378 static void inflate_request(const char *prog_name
, int out
, int buffer_input
, ssize_t req_len
)
381 unsigned char *full_request
= NULL
;
382 unsigned char in_buf
[8192];
383 unsigned char out_buf
[8192];
384 unsigned long cnt
= 0;
385 int req_len_defined
= req_len
>= 0;
386 size_t req_remaining_len
= req_len
;
388 memset(&stream
, 0, sizeof(stream
));
389 git_inflate_init_gzip_only(&stream
);
396 n
= 0; /* nothing left to read */
398 n
= read_request(0, &full_request
, req_len
);
399 stream
.next_in
= full_request
;
402 if (req_len_defined
&& req_remaining_len
<= sizeof(in_buf
))
403 buffer_len
= req_remaining_len
;
405 buffer_len
= sizeof(in_buf
);
406 n
= xread(0, in_buf
, buffer_len
);
407 stream
.next_in
= in_buf
;
408 if (req_len_defined
&& n
> 0)
409 req_remaining_len
-= n
;
413 die("request ended in the middle of the gzip stream");
416 while (0 < stream
.avail_in
) {
419 stream
.next_out
= out_buf
;
420 stream
.avail_out
= sizeof(out_buf
);
422 ret
= git_inflate(&stream
, Z_NO_FLUSH
);
423 if (ret
!= Z_OK
&& ret
!= Z_STREAM_END
)
424 die("zlib error inflating request, result %d", ret
);
426 n
= stream
.total_out
- cnt
;
427 write_to_child(out
, out_buf
, stream
.total_out
- cnt
, prog_name
);
428 cnt
= stream
.total_out
;
430 if (ret
== Z_STREAM_END
)
436 git_inflate_end(&stream
);
441 static void copy_request(const char *prog_name
, int out
, ssize_t req_len
)
444 ssize_t n
= read_request(0, &buf
, req_len
);
446 die_errno("error reading request body");
447 write_to_child(out
, buf
, n
, prog_name
);
452 static void pipe_fixed_length(const char *prog_name
, int out
, size_t req_len
)
454 unsigned char buf
[8192];
455 size_t remaining_len
= req_len
;
457 while (remaining_len
> 0) {
458 size_t chunk_length
= remaining_len
> sizeof(buf
) ? sizeof(buf
) : remaining_len
;
459 ssize_t n
= xread(0, buf
, chunk_length
);
461 die_errno("Reading request failed");
462 write_to_child(out
, buf
, n
, prog_name
);
469 static void run_service(const char **argv
, int buffer_input
)
471 const char *encoding
= getenv("HTTP_CONTENT_ENCODING");
472 const char *user
= getenv("REMOTE_USER");
473 const char *host
= getenv("REMOTE_ADDR");
474 int gzipped_request
= 0;
475 struct child_process cld
= CHILD_PROCESS_INIT
;
476 ssize_t req_len
= get_content_length();
478 if (encoding
&& (!strcmp(encoding
, "gzip") || !strcmp(encoding
, "x-gzip")))
486 if (!getenv("GIT_COMMITTER_NAME"))
487 strvec_pushf(&cld
.env
, "GIT_COMMITTER_NAME=%s", user
);
488 if (!getenv("GIT_COMMITTER_EMAIL"))
489 strvec_pushf(&cld
.env
,
490 "GIT_COMMITTER_EMAIL=%s@http.%s", user
, host
);
492 strvec_pushv(&cld
.args
, argv
);
493 if (buffer_input
|| gzipped_request
|| req_len
>= 0)
496 cld
.clean_on_exit
= 1;
497 cld
.wait_after_clean
= 1;
498 if (start_command(&cld
))
503 inflate_request(argv
[0], cld
.in
, buffer_input
, req_len
);
504 else if (buffer_input
)
505 copy_request(argv
[0], cld
.in
, req_len
);
506 else if (req_len
>= 0)
507 pipe_fixed_length(argv
[0], cld
.in
, req_len
);
511 if (finish_command(&cld
))
515 static int show_text_ref(const char *name
, const char *referent UNUSED
, const struct object_id
*oid
,
516 int flag UNUSED
, void *cb_data
)
518 const char *name_nons
= strip_namespace(name
);
519 struct strbuf
*buf
= cb_data
;
520 struct object
*o
= parse_object(the_repository
, oid
);
524 strbuf_addf(buf
, "%s\t%s\n", oid_to_hex(oid
), name_nons
);
525 if (o
->type
== OBJ_TAG
) {
526 o
= deref_tag(the_repository
, o
, name
, 0);
529 strbuf_addf(buf
, "%s\t%s^{}\n", oid_to_hex(&o
->oid
),
535 static void get_info_refs(struct strbuf
*hdr
, char *arg UNUSED
)
537 const char *service_name
= get_parameter("service");
538 struct strbuf buf
= STRBUF_INIT
;
543 const char *argv
[] = {NULL
/* service name */,
544 "--http-backend-info-refs",
546 struct rpc_service
*svc
= select_service(hdr
, service_name
);
548 strbuf_addf(&buf
, "application/x-git-%s-advertisement",
550 hdr_str(hdr
, content_type
, buf
.buf
);
554 if (determine_protocol_version_server() != protocol_v2
) {
555 packet_write_fmt(1, "# service=git-%s\n", svc
->name
);
560 run_service(argv
, 0);
563 select_getanyfile(hdr
);
564 refs_for_each_namespaced_ref(get_main_ref_store(the_repository
),
565 NULL
, show_text_ref
, &buf
);
566 send_strbuf(hdr
, "text/plain", &buf
);
568 strbuf_release(&buf
);
571 static int show_head_ref(const char *refname
, const char *referent UNUSED
, const struct object_id
*oid
,
572 int flag
, void *cb_data
)
574 struct strbuf
*buf
= cb_data
;
576 if (flag
& REF_ISSYMREF
) {
577 const char *target
= refs_resolve_ref_unsafe(get_main_ref_store(the_repository
),
583 strbuf_addf(buf
, "ref: %s\n", strip_namespace(target
));
585 strbuf_addf(buf
, "%s\n", oid_to_hex(oid
));
591 static void get_head(struct strbuf
*hdr
, char *arg UNUSED
)
593 struct strbuf buf
= STRBUF_INIT
;
595 select_getanyfile(hdr
);
596 refs_head_ref_namespaced(get_main_ref_store(the_repository
),
597 show_head_ref
, &buf
);
598 send_strbuf(hdr
, "text/plain", &buf
);
599 strbuf_release(&buf
);
602 static void get_info_packs(struct strbuf
*hdr
, char *arg UNUSED
)
604 size_t objdirlen
= strlen(repo_get_object_directory(the_repository
));
605 struct strbuf buf
= STRBUF_INIT
;
606 struct packed_git
*p
;
609 select_getanyfile(hdr
);
610 for (p
= get_all_packs(the_repository
); p
; p
= p
->next
) {
615 strbuf_grow(&buf
, cnt
* 53 + 2);
616 for (p
= get_all_packs(the_repository
); p
; p
= p
->next
) {
618 strbuf_addf(&buf
, "P %s\n", p
->pack_name
+ objdirlen
+ 6);
620 strbuf_addch(&buf
, '\n');
623 send_strbuf(hdr
, "text/plain; charset=utf-8", &buf
);
624 strbuf_release(&buf
);
627 static void check_content_type(struct strbuf
*hdr
, const char *accepted_type
)
629 const char *actual_type
= getenv("CONTENT_TYPE");
634 if (strcmp(actual_type
, accepted_type
)) {
635 http_status(hdr
, 415, "Unsupported Media Type");
639 "Expected POST with Content-Type '%s',"
640 " but received '%s' instead.\n",
641 accepted_type
, actual_type
);
646 static void service_rpc(struct strbuf
*hdr
, char *service_name
)
648 struct strvec argv
= STRVEC_INIT
;
649 struct rpc_service
*svc
= select_service(hdr
, service_name
);
650 struct strbuf buf
= STRBUF_INIT
;
652 strvec_push(&argv
, svc
->name
);
653 if (strcmp(service_name
, "git-upload-archive"))
654 strvec_push(&argv
, "--stateless-rpc");
655 strvec_push(&argv
, ".");
658 strbuf_addf(&buf
, "application/x-git-%s-request", svc
->name
);
659 check_content_type(hdr
, buf
.buf
);
664 strbuf_addf(&buf
, "application/x-git-%s-result", svc
->name
);
665 hdr_str(hdr
, content_type
, buf
.buf
);
669 run_service(argv
.v
, svc
->buffer_input
);
670 strbuf_release(&buf
);
675 static NORETURN
void die_webcgi(const char *err
, va_list params
)
678 struct strbuf hdr
= STRBUF_INIT
;
679 report_fn die_message_fn
= get_die_message_routine();
681 die_message_fn(err
, params
);
683 http_status(&hdr
, 500, "Internal Server Error");
687 exit(0); /* we successfully reported a failure ;-) */
690 static int die_webcgi_recursing(void)
695 static char* getdir(void)
697 struct strbuf buf
= STRBUF_INIT
;
698 char *pathinfo
= getenv("PATH_INFO");
699 char *root
= getenv("GIT_PROJECT_ROOT");
700 char *path
= getenv("PATH_TRANSLATED");
703 if (!pathinfo
|| !*pathinfo
)
704 die("GIT_PROJECT_ROOT is set but PATH_INFO is not");
705 if (daemon_avoid_alias(pathinfo
))
706 die("'%s': aliased", pathinfo
);
707 end_url_with_slash(&buf
, root
);
708 if (pathinfo
[0] == '/')
710 strbuf_addstr(&buf
, pathinfo
);
711 return strbuf_detach(&buf
, NULL
);
712 } else if (path
&& *path
) {
713 return xstrdup(path
);
715 die("No GIT_PROJECT_ROOT or PATH_TRANSLATED from server");
719 static struct service_cmd
{
722 void (*imp
)(struct strbuf
*, char *);
724 {"GET", "/HEAD$", get_head
},
725 {"GET", "/info/refs$", get_info_refs
},
726 {"GET", "/objects/info/alternates$", get_text_file
},
727 {"GET", "/objects/info/http-alternates$", get_text_file
},
728 {"GET", "/objects/info/packs$", get_info_packs
},
729 {"GET", "/objects/[0-9a-f]{2}/[0-9a-f]{38}$", get_loose_object
},
730 {"GET", "/objects/[0-9a-f]{2}/[0-9a-f]{62}$", get_loose_object
},
731 {"GET", "/objects/pack/pack-[0-9a-f]{40}\\.pack$", get_pack_file
},
732 {"GET", "/objects/pack/pack-[0-9a-f]{64}\\.pack$", get_pack_file
},
733 {"GET", "/objects/pack/pack-[0-9a-f]{40}\\.idx$", get_idx_file
},
734 {"GET", "/objects/pack/pack-[0-9a-f]{64}\\.idx$", get_idx_file
},
736 {"POST", "/git-upload-pack$", service_rpc
},
737 {"POST", "/git-upload-archive$", service_rpc
},
738 {"POST", "/git-receive-pack$", service_rpc
}
741 static int bad_request(struct strbuf
*hdr
, const struct service_cmd
*c
)
743 const char *proto
= getenv("SERVER_PROTOCOL");
745 if (proto
&& !strcmp(proto
, "HTTP/1.1")) {
746 http_status(hdr
, 405, "Method Not Allowed");
747 hdr_str(hdr
, "Allow",
748 !strcmp(c
->method
, "GET") ? "GET, HEAD" : c
->method
);
750 http_status(hdr
, 400, "Bad Request");
756 int cmd_main(int argc UNUSED
, const char **argv UNUSED
)
758 const char *method
= getenv("REQUEST_METHOD");
759 const char *proto_header
;
761 struct service_cmd
*cmd
= NULL
;
762 char *cmd_arg
= NULL
;
764 struct strbuf hdr
= STRBUF_INIT
;
766 set_die_routine(die_webcgi
);
767 set_die_is_recursing_routine(die_webcgi_recursing
);
770 die("No REQUEST_METHOD from server");
771 if (!strcmp(method
, "HEAD"))
775 for (i
= 0; i
< ARRAY_SIZE(services
); i
++) {
776 struct service_cmd
*c
= &services
[i
];
781 if (regcomp(&re
, c
->pattern
, REG_EXTENDED
))
782 die("Bogus regex in service table: %s", c
->pattern
);
783 ret
= regexec(&re
, dir
, 1, out
, 0);
789 if (strcmp(method
, c
->method
))
790 return bad_request(&hdr
, c
);
793 n
= out
[0].rm_eo
- out
[0].rm_so
;
794 cmd_arg
= xmemdupz(dir
+ out
[0].rm_so
+ 1, n
- 1);
795 dir
[out
[0].rm_so
] = 0;
801 not_found(&hdr
, "Request not supported: '%s'", dir
);
804 if (!enter_repo(dir
, 0))
805 not_found(&hdr
, "Not a git repository: '%s'", dir
);
806 if (!getenv("GIT_HTTP_EXPORT_ALL") &&
807 access("git-daemon-export-ok", F_OK
) )
808 not_found(&hdr
, "Repository not exported: '%s'", dir
);
812 max_request_buffer
= git_env_ulong("GIT_HTTP_MAX_REQUEST_BUFFER",
814 proto_header
= getenv("HTTP_GIT_PROTOCOL");
816 setenv(GIT_PROTOCOL_ENVIRONMENT
, proto_header
, 0);
818 cmd
->imp(&hdr
, cmd_arg
);