gotwebd/gotweb.c

   1 /*
   2  * Copyright (c) 2016, 2019, 2020-2022 Tracey Emery <tracey@traceyemery.net>
   3  * Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org>
   4  * Copyright (c) 2014 Reyk Floeter <reyk@openbsd.org>
   5  * Copyright (c) 2013 David Gwynne <dlg@openbsd.org>
   6  * Copyright (c) 2013 Florian Obser <florian@openbsd.org>
   7  *
   8  * Permission to use, copy, modify, and distribute this software for any
   9  * purpose with or without fee is hereby granted, provided that the above
  10  * copyright notice and this permission notice appear in all copies.
  11  *
  12  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  13  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  14  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  15  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  16  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  17  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  18  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  19  */
  20 #include "got_compat.h"
  21
  22 #include <net/if.h>
  23 #include <netinet/in.h>
  24 #include <sys/queue.h>
  25 #include <sys/stat.h>
  26 #include <sys/types.h>
  27
  28 #include <ctype.h>
  29 #include <dirent.h>
  30 #include <errno.h>
  31 #include <event.h>
  32 #include <fcntl.h>
  33 #include <imsg.h>
  34 #include <stdio.h>
  35 #include <stdlib.h>
  36 #include <string.h>
  37 #include <unistd.h>
  38
  39 #include "got_error.h"
  40 #include "got_object.h"
  41 #include "got_reference.h"
  42 #include "got_repository.h"
  43 #include "got_path.h"
  44 #include "got_cancel.h"
  45 #include "got_worktree.h"
  46 #include "got_diff.h"
  47 #include "got_commit_graph.h"
  48 #include "got_blame.h"
  49 #include "got_privsep.h"
  50
  51 #include "gotwebd.h"
  52 #include "tmpl.h"
  53
  54 static const struct querystring_keys querystring_keys[] = {
  55         { "action",             ACTION },
  56         { "commit",             COMMIT },
  57         { "file",               RFILE },
  58         { "folder",             FOLDER },
  59         { "headref",            HEADREF },
  60         { "index_page",         INDEX_PAGE },
  61         { "path",               PATH },
  62         { "page",               PAGE },
  63 };
  64
  65 static const struct action_keys action_keys[] = {
  66         { "blame",      BLAME },
  67         { "blob",       BLOB },
  68         { "blobraw",    BLOBRAW },
  69         { "briefs",     BRIEFS },
  70         { "commits",    COMMITS },
  71         { "diff",       DIFF },
  72         { "error",      ERR },
  73         { "index",      INDEX },
  74         { "patch",      PATCH },
  75         { "summary",    SUMMARY },
  76         { "tag",        TAG },
  77         { "tags",       TAGS },
  78         { "tree",       TREE },
  79         { "rss",        RSS },
  80 };
  81
  82 static const struct got_error *gotweb_init_querystring(struct querystring **);
  83 static const struct got_error *gotweb_parse_querystring(struct querystring **,
  84     char *);
  85 static const struct got_error *gotweb_assign_querystring(struct querystring **,
  86     char *, char *);
  87 static int gotweb_render_index(struct template *);
  88 static const struct got_error *gotweb_init_repo_dir(struct repo_dir **,
  89     const char *);
  90 static const struct got_error *gotweb_load_got_path(struct request *c,
  91     struct repo_dir *);
  92 static const struct got_error *gotweb_get_repo_description(char **,
  93     struct server *, const char *, int);
  94 static const struct got_error *gotweb_get_clone_url(char **, struct server *,
  95     const char *, int);
  96
  97 static void gotweb_free_querystring(struct querystring *);
  98 static void gotweb_free_repo_dir(struct repo_dir *);
  99
 100 struct server *gotweb_get_server(const char *);
 101
 102 static int
 103 gotweb_reply(struct request *c, int status, const char *ctype,
 104     struct gotweb_url *location)
 105 {
 106         const char      *csp;
 107
 108         if (status != 200 && tp_writef(c->tp, "Status: %d\r\n", status) == -1)
 109                 return -1;
 110
 111         if (location) {
 112                 if (tp_writes(c->tp, "Location: ") == -1 ||
 113                     gotweb_render_url(c, location) == -1 ||
 114                     tp_writes(c->tp, "\r\n") == -1)
 115                         return -1;
 116         }
 117
 118         csp = "Content-Security-Policy: default-src 'self'; "
 119             "script-src 'none'; object-src 'none';\r\n";
 120         if (tp_writes(c->tp, csp) == -1)
 121                 return -1;
 122
 123         if (ctype && tp_writef(c->tp, "Content-Type: %s\r\n", ctype) == -1)
 124                 return -1;
 125
 126         return tp_writes(c->tp, "\r\n");
 127 }
 128
 129 static int
 130 gotweb_reply_file(struct request *c, const char *ctype, const char *file,
 131     const char *suffix)
 132 {
 133         int r;
 134
 135         r = tp_writef(c->tp, "Content-Disposition: attachment; "
 136             "filename=%s%s\r\n", file, suffix ? suffix : "");
 137         if (r == -1)
 138                 return -1;
 139         return gotweb_reply(c, 200, ctype, NULL);
 140 }
 141
 142 void
 143 gotweb_process_request(struct request *c)
 144 {
 145         const struct got_error *error = NULL;
 146         struct server *srv = NULL;
 147         struct querystring *qs = NULL;
 148         struct repo_dir *repo_dir = NULL;
 149         const char *rss_ctype = "application/rss+xml;charset=utf-8";
 150         const uint8_t *buf;
 151         size_t len;
 152         int r, binary = 0;
 153
 154         /* init the transport */
 155         error = gotweb_init_transport(&c->t);
 156         if (error) {
 157                 log_warnx("%s: %s", __func__, error->msg);
 158                 return;
 159         }
 160         /* don't process any further if client disconnected */
 161         if (c->sock->client_status == CLIENT_DISCONNECT)
 162                 return;
 163         /* get the gotwebd server */
 164         srv = gotweb_get_server(c->server_name);
 165         if (srv == NULL) {
 166                 log_warnx("%s: error server is NULL", __func__);
 167                 goto err;
 168         }
 169         c->srv = srv;
 170         /* parse our querystring */
 171         error = gotweb_init_querystring(&qs);
 172         if (error) {
 173                 log_warnx("%s: %s", __func__, error->msg);
 174                 goto err;
 175         }
 176         c->t->qs = qs;
 177         error = gotweb_parse_querystring(&qs, c->querystring);
 178         if (error) {
 179                 log_warnx("%s: %s", __func__, error->msg);
 180                 goto err;
 181         }
 182
 183         /*
 184          * certain actions require a commit id in the querystring. this stops
 185          * bad actors from exploiting this by manually manipulating the
 186          * querystring.
 187          */
 188
 189         if (qs->action == BLAME || qs->action == BLOB ||
 190             qs->action == BLOBRAW || qs->action == DIFF ||
 191             qs->action == PATCH) {
 192                 if (qs->commit == NULL) {
 193                         error = got_error(GOT_ERR_BAD_QUERYSTRING);
 194                         goto err;
 195                 }
 196         }
 197
 198         if (qs->action != INDEX) {
 199                 error = gotweb_init_repo_dir(&repo_dir, qs->path);
 200                 if (error)
 201                         goto err;
 202                 error = gotweb_load_got_path(c, repo_dir);
 203                 c->t->repo_dir = repo_dir;
 204                 if (error && error->code != GOT_ERR_LONELY_PACKIDX)
 205                         goto err;
 206         }
 207
 208         if (qs->action == BLOBRAW || qs->action == BLOB) {
 209                 error = got_get_repo_commits(c, 1);
 210                 if (error)
 211                         goto err;
 212
 213                 error = got_open_blob_for_output(&c->t->blob, &c->t->fd,
 214                     &binary, c);
 215                 if (error)
 216                         goto err;
 217         }
 218
 219         switch (qs->action) {
 220         case BLAME:
 221                 error = got_get_repo_commits(c, 1);
 222                 if (error) {
 223                         log_warnx("%s: %s", __func__, error->msg);
 224                         goto err;
 225                 }
 226                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 227                         return;
 228                 gotweb_render_page(c->tp, gotweb_render_blame);
 229                 return;
 230         case BLOB:
 231                 if (binary) {
 232                         struct gotweb_url url = {
 233                                 .index_page = -1,
 234                                 .page = -1,
 235                                 .action = BLOBRAW,
 236                                 .path = qs->path,
 237                                 .commit = qs->commit,
 238                                 .folder = qs->folder,
 239                                 .file = qs->file,
 240                         };
 241
 242                         gotweb_reply(c, 302, NULL, &url);
 243                         return;
 244                 }
 245
 246                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 247                         return;
 248                 gotweb_render_page(c->tp, gotweb_render_blob);
 249                 return;
 250         case BLOBRAW:
 251                 if (binary)
 252                         r = gotweb_reply_file(c, "application/octet-stream",
 253                             qs->file, NULL);
 254                 else
 255                         r = gotweb_reply(c, 200, "text/plain", NULL);
 256                 if (r == -1)
 257                         return;
 258                 if (template_flush(c->tp) == -1)
 259                         return;
 260
 261                 for (;;) {
 262                         error = got_object_blob_read_block(&len, c->t->blob);
 263                         if (error)
 264                                 break;
 265                         if (len == 0)
 266                                 break;
 267                         buf = got_object_blob_get_read_buf(c->t->blob);
 268                         if (fcgi_write(c, buf, len) == -1)
 269                                 break;
 270                 }
 271                 return;
 272         case BRIEFS:
 273                 error = got_get_repo_commits(c, srv->max_commits_display);
 274                 if (error)
 275                         goto err;
 276                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 277                         return;
 278                 gotweb_render_page(c->tp, gotweb_render_briefs);
 279                 return;
 280         case COMMITS:
 281                 error = got_get_repo_commits(c, srv->max_commits_display);
 282                 if (error) {
 283                         log_warnx("%s: %s", __func__, error->msg);
 284                         goto err;
 285                 }
 286                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 287                         return;
 288                 gotweb_render_page(c->tp, gotweb_render_commits);
 289                 return;
 290         case DIFF:
 291                 error = got_get_repo_commits(c, 1);
 292                 if (error) {
 293                         log_warnx("%s: %s", __func__, error->msg);
 294                         goto err;
 295                 }
 296                 error = got_open_diff_for_output(&c->t->fp, c);
 297                 if (error) {
 298                         log_warnx("%s: %s", __func__, error->msg);
 299                         goto err;
 300                 }
 301                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 302                         return;
 303                 gotweb_render_page(c->tp, gotweb_render_diff);
 304                 return;
 305         case INDEX:
 306                 c->t->nrepos = scandir(srv->repos_path, &c->t->repos, NULL,
 307                     alphasort);
 308                 if (c->t->nrepos == -1) {
 309                         c->t->repos = NULL;
 310                         error = got_error_from_errno2("scandir",
 311                             srv->repos_path);
 312                         goto err;
 313                 }
 314                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 315                         return;
 316                 gotweb_render_page(c->tp, gotweb_render_index);
 317                 return;
 318         case PATCH:
 319                 error = got_get_repo_commits(c, 1);
 320                 if (error) {
 321                         log_warnx("%s: %s", __func__, error->msg);
 322                         goto err;
 323                 }
 324                 error = got_open_diff_for_output(&c->t->fp, c);
 325                 if (error) {
 326                         log_warnx("%s: %s", __func__, error->msg);
 327                         goto err;
 328                 }
 329                 if (gotweb_reply(c, 200, "text/plain", NULL) == -1)
 330                         return;
 331                 gotweb_render_patch(c->tp);
 332                 return;
 333         case RSS:
 334                 error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
 335                 if (error)
 336                         goto err;
 337                 if (gotweb_reply_file(c, rss_ctype, repo_dir->name, ".rss")
 338                     == -1)
 339                         return;
 340                 gotweb_render_rss(c->tp);
 341                 return;
 342         case SUMMARY:
 343                 error = got_ref_list(&c->t->refs, c->t->repo, "refs/heads",
 344                     got_ref_cmp_by_name, NULL);
 345                 if (error) {
 346                         log_warnx("%s: got_ref_list: %s", __func__,
 347                             error->msg);
 348                         goto err;
 349                 }
 350                 error = got_get_repo_commits(c, D_MAXSLCOMMDISP);
 351                 if (error)
 352                         goto err;
 353                 qs->action = TAGS;
 354                 error = got_get_repo_tags(c, D_MAXSLCOMMDISP);
 355                 if (error) {
 356                         log_warnx("%s: got_get_repo_tags: %s", __func__,
 357                             error->msg);
 358                         goto err;
 359                 }
 360                 qs->action = SUMMARY;
 361                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 362                         return;
 363                 gotweb_render_page(c->tp, gotweb_render_summary);
 364                 return;
 365         case TAG:
 366                 error = got_get_repo_tags(c, 1);
 367                 if (error) {
 368                         log_warnx("%s: %s", __func__, error->msg);
 369                         goto err;
 370                 }
 371                 if (c->t->tag_count == 0) {
 372                         error = got_error_msg(GOT_ERR_BAD_OBJ_ID,
 373                             "bad commit id");
 374                         goto err;
 375                 }
 376                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 377                         return;
 378                 gotweb_render_page(c->tp, gotweb_render_tag);
 379                 return;
 380         case TAGS:
 381                 error = got_get_repo_tags(c, srv->max_commits_display);
 382                 if (error) {
 383                         log_warnx("%s: %s", __func__, error->msg);
 384                         goto err;
 385                 }
 386                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 387                         return;
 388                 gotweb_render_page(c->tp, gotweb_render_tags);
 389                 return;
 390         case TREE:
 391                 error = got_get_repo_commits(c, 1);
 392                 if (error) {
 393                         log_warnx("%s: %s", __func__, error->msg);
 394                         goto err;
 395                 }
 396                 if (gotweb_reply(c, 200, "text/html", NULL) == -1)
 397                         return;
 398                 gotweb_render_page(c->tp, gotweb_render_tree);
 399                 return;
 400         case ERR:
 401         default:
 402                 error = got_error(GOT_ERR_BAD_QUERYSTRING);
 403         }
 404
 405 err:
 406         c->t->error = error;
 407         if (gotweb_reply(c, 400, "text/html", NULL) == -1)
 408                 return;
 409         gotweb_render_page(c->tp, gotweb_render_error);
 410 }
 411
 412 struct server *
 413 gotweb_get_server(const char *server_name)
 414 {
 415         struct server *srv;
 416
 417         /* check against the server name first */
 418         if (*server_name != '\0')
 419                 TAILQ_FOREACH(srv, &gotwebd_env->servers, entry)
 420                         if (strcmp(srv->name, server_name) == 0)
 421                                 return srv;
 422
 423         /* otherwise, use the first server */
 424         return TAILQ_FIRST(&gotwebd_env->servers);
 425 };
 426
 427 const struct got_error *
 428 gotweb_init_transport(struct transport **t)
 429 {
 430         const struct got_error *error = NULL;
 431
 432         *t = calloc(1, sizeof(**t));
 433         if (*t == NULL)
 434                 return got_error_from_errno2(__func__, "calloc");
 435
 436         TAILQ_INIT(&(*t)->repo_commits);
 437         TAILQ_INIT(&(*t)->repo_tags);
 438         TAILQ_INIT(&(*t)->refs);
 439
 440         (*t)->fd = -1;
 441
 442         return error;
 443 }
 444
 445 static const struct got_error *
 446 gotweb_init_querystring(struct querystring **qs)
 447 {
 448         const struct got_error *error = NULL;
 449
 450         *qs = calloc(1, sizeof(**qs));
 451         if (*qs == NULL)
 452                 return got_error_from_errno2(__func__, "calloc");
 453
 454         (*qs)->headref = strdup("HEAD");
 455         if ((*qs)->headref == NULL) {
 456                 free(*qs);
 457                 *qs = NULL;
 458                 return got_error_from_errno2(__func__, "strdup");
 459         }
 460
 461         (*qs)->action = INDEX;
 462         (*qs)->commit = NULL;
 463         (*qs)->file = NULL;
 464         (*qs)->folder = NULL;
 465         (*qs)->index_page = 0;
 466         (*qs)->path = NULL;
 467
 468         return error;
 469 }
 470
 471 static const struct got_error *
 472 gotweb_parse_querystring(struct querystring **qs, char *qst)
 473 {
 474         const struct got_error *error = NULL;
 475         char *tok1 = NULL, *tok1_pair = NULL, *tok1_end = NULL;
 476         char *tok2 = NULL, *tok2_pair = NULL, *tok2_end = NULL;
 477
 478         if (qst == NULL)
 479                 return error;
 480
 481         tok1 = strdup(qst);
 482         if (tok1 == NULL)
 483                 return got_error_from_errno2(__func__, "strdup");
 484
 485         tok1_pair = tok1;
 486         tok1_end = tok1;
 487
 488         while (tok1_pair != NULL) {
 489                 strsep(&tok1_end, "&");
 490
 491                 tok2 = strdup(tok1_pair);
 492                 if (tok2 == NULL) {
 493                         free(tok1);
 494                         return got_error_from_errno2(__func__, "strdup");
 495                 }
 496
 497                 tok2_pair = tok2;
 498                 tok2_end = tok2;
 499
 500                 while (tok2_pair != NULL) {
 501                         strsep(&tok2_end, "=");
 502                         if (tok2_end) {
 503                                 error = gotweb_assign_querystring(qs, tok2_pair,
 504                                     tok2_end);
 505                                 if (error)
 506                                         goto err;
 507                         }
 508                         tok2_pair = tok2_end;
 509                 }
 510                 free(tok2);
 511                 tok1_pair = tok1_end;
 512         }
 513         free(tok1);
 514         return error;
 515 err:
 516         free(tok2);
 517         free(tok1);
 518         return error;
 519 }
 520
 521 /*
 522  * Adapted from usr.sbin/httpd/httpd.c url_decode.
 523  */
 524 static const struct got_error *
 525 gotweb_urldecode(char *url)
 526 {
 527         char            *p, *q;
 528         char             hex[3];
 529         unsigned long    x;
 530
 531         hex[2] = '\0';
 532         p = q = url;
 533
 534         while (*p != '\0') {
 535                 switch (*p) {
 536                 case '%':
 537                         /* Encoding character is followed by two hex chars */
 538                         if (!isxdigit((unsigned char)p[1]) ||
 539                             !isxdigit((unsigned char)p[2]) ||
 540                             (p[1] == '0' && p[2] == '0'))
 541                                 return got_error(GOT_ERR_BAD_QUERYSTRING);
 542
 543                         hex[0] = p[1];
 544                         hex[1] = p[2];
 545
 546                         /*
 547                          * We don't have to validate "hex" because it is
 548                          * guaranteed to include two hex chars followed by nul.
 549                          */
 550                         x = strtoul(hex, NULL, 16);
 551                         *q = (char)x;
 552                         p += 2;
 553                         break;
 554                 default:
 555                         *q = *p;
 556                         break;
 557                 }
 558                 p++;
 559                 q++;
 560         }
 561         *q = '\0';
 562
 563         return NULL;
 564 }
 565
 566 static const struct got_error *
 567 gotweb_assign_querystring(struct querystring **qs, char *key, char *value)
 568 {
 569         const struct got_error *error = NULL;
 570         const char *errstr;
 571         int a_cnt, el_cnt;
 572
 573         error = gotweb_urldecode(value);
 574         if (error)
 575                 return error;
 576
 577         for (el_cnt = 0; el_cnt < nitems(querystring_keys); el_cnt++) {
 578                 if (strcmp(key, querystring_keys[el_cnt].name) != 0)
 579                         continue;
 580
 581                 switch (querystring_keys[el_cnt].element) {
 582                 case ACTION:
 583                         for (a_cnt = 0; a_cnt < ACTIONS__MAX; a_cnt++) {
 584                                 if (strcmp(value, action_keys[a_cnt].name) != 0)
 585                                         continue;
 586                                 else if (strcmp(value,
 587                                     action_keys[a_cnt].name) == 0){
 588                                         (*qs)->action =
 589                                             action_keys[a_cnt].action;
 590                                         goto qa_found;
 591                                 }
 592                         }
 593                         (*qs)->action = ERR;
 594 qa_found:
 595                         break;
 596                 case COMMIT:
 597                         (*qs)->commit = strdup(value);
 598                         if ((*qs)->commit == NULL) {
 599                                 error = got_error_from_errno2(__func__,
 600                                     "strdup");
 601                                 goto done;
 602                         }
 603                         break;
 604                 case RFILE:
 605                         (*qs)->file = strdup(value);
 606                         if ((*qs)->file == NULL) {
 607                                 error = got_error_from_errno2(__func__,
 608                                     "strdup");
 609                                 goto done;
 610                         }
 611                         break;
 612                 case FOLDER:
 613                         (*qs)->folder = strdup(value);
 614                         if ((*qs)->folder == NULL) {
 615                                 error = got_error_from_errno2(__func__,
 616                                     "strdup");
 617                                 goto done;
 618                         }
 619                         break;
 620                 case HEADREF:
 621                         free((*qs)->headref);
 622                         (*qs)->headref = strdup(value);
 623                         if ((*qs)->headref == NULL) {
 624                                 error = got_error_from_errno2(__func__,
 625                                     "strdup");
 626                                 goto done;
 627                         }
 628                         break;
 629                 case INDEX_PAGE:
 630                         if (*value == '\0')
 631                                 break;
 632                         (*qs)->index_page = strtonum(value, INT64_MIN,
 633                             INT64_MAX, &errstr);
 634                         if (errstr) {
 635                                 error = got_error_from_errno3(__func__,
 636                                     "strtonum", errstr);
 637                                 goto done;
 638                         }
 639                         if ((*qs)->index_page < 0)
 640                                 (*qs)->index_page = 0;
 641                         break;
 642                 case PATH:
 643                         (*qs)->path = strdup(value);
 644                         if ((*qs)->path == NULL) {
 645                                 error = got_error_from_errno2(__func__,
 646                                     "strdup");
 647                                 goto done;
 648                         }
 649                         break;
 650                 case PAGE:
 651                         if (*value == '\0')
 652                                 break;
 653                         (*qs)->page = strtonum(value, INT64_MIN,
 654                             INT64_MAX, &errstr);
 655                         if (errstr) {
 656                                 error = got_error_from_errno3(__func__,
 657                                     "strtonum", errstr);
 658                                 goto done;
 659                         }
 660                         if ((*qs)->page < 0)
 661                                 (*qs)->page = 0;
 662                         break;
 663                 }
 664
 665                 /* entry found */
 666                 break;
 667         }
 668 done:
 669         return error;
 670 }
 671
 672 void
 673 gotweb_free_repo_tag(struct repo_tag *rt)
 674 {
 675         if (rt != NULL) {
 676                 free(rt->commit_id);
 677                 free(rt->tag_name);
 678                 free(rt->tag_commit);
 679                 free(rt->commit_msg);
 680                 free(rt->tagger);
 681         }
 682         free(rt);
 683 }
 684
 685 void
 686 gotweb_free_repo_commit(struct repo_commit *rc)
 687 {
 688         if (rc != NULL) {
 689                 free(rc->path);
 690                 free(rc->refs_str);
 691                 free(rc->commit_id);
 692                 free(rc->parent_id);
 693                 free(rc->tree_id);
 694                 free(rc->author);
 695                 free(rc->committer);
 696                 free(rc->commit_msg);
 697         }
 698         free(rc);
 699 }
 700
 701 static void
 702 gotweb_free_querystring(struct querystring *qs)
 703 {
 704         if (qs != NULL) {
 705                 free(qs->commit);
 706                 free(qs->file);
 707                 free(qs->folder);
 708                 free(qs->headref);
 709                 free(qs->path);
 710         }
 711         free(qs);
 712 }
 713
 714 static void
 715 gotweb_free_repo_dir(struct repo_dir *repo_dir)
 716 {
 717         if (repo_dir != NULL) {
 718                 free(repo_dir->name);
 719                 free(repo_dir->owner);
 720                 free(repo_dir->description);
 721                 free(repo_dir->url);
 722                 free(repo_dir->path);
 723         }
 724         free(repo_dir);
 725 }
 726
 727 void
 728 gotweb_free_transport(struct transport *t)
 729 {
 730         const struct got_error *err;
 731         struct repo_commit *rc = NULL, *trc = NULL;
 732         struct repo_tag *rt = NULL, *trt = NULL;
 733         int i;
 734
 735         got_ref_list_free(&t->refs);
 736         TAILQ_FOREACH_SAFE(rc, &t->repo_commits, entry, trc) {
 737                 TAILQ_REMOVE(&t->repo_commits, rc, entry);
 738                 gotweb_free_repo_commit(rc);
 739         }
 740         TAILQ_FOREACH_SAFE(rt, &t->repo_tags, entry, trt) {
 741                 TAILQ_REMOVE(&t->repo_tags, rt, entry);
 742                 gotweb_free_repo_tag(rt);
 743         }
 744         gotweb_free_repo_dir(t->repo_dir);
 745         gotweb_free_querystring(t->qs);
 746         free(t->more_id);
 747         free(t->next_id);
 748         free(t->prev_id);
 749         if (t->blob)
 750                 got_object_blob_close(t->blob);
 751         if (t->fp) {
 752                 err = got_gotweb_closefile(t->fp);
 753                 if (err)
 754                         log_warnx("%s: got_gotweb_closefile failure: %s",
 755                             __func__, err->msg);
 756         }
 757         if (t->fd != -1 && close(t->fd) == -1)
 758                 log_warn("%s: close", __func__);
 759         if (t->repos) {
 760                 for (i = 0; i < t->nrepos; ++i)
 761                         free(t->repos[i]);
 762                 free(t->repos);
 763         }
 764         if (t->repo)
 765                 got_repo_close(t->repo);
 766         free(t);
 767 }
 768
 769 void
 770 gotweb_get_navs(struct request *c, struct gotweb_url *prev, int *have_prev,
 771     struct gotweb_url *next, int *have_next)
 772 {
 773         struct transport *t = c->t;
 774         struct querystring *qs = t->qs;
 775         struct server *srv = c->srv;
 776
 777         *have_prev = *have_next = 0;
 778
 779         switch(qs->action) {
 780         case INDEX:
 781                 if (qs->index_page > 0) {
 782                         *have_prev = 1;
 783                         *prev = (struct gotweb_url){
 784                                 .action = -1,
 785                                 .index_page = qs->index_page - 1,
 786                                 .page = -1,
 787                         };
 788                 }
 789                 if (t->next_disp == srv->max_repos_display &&
 790                     t->repos_total != (qs->index_page + 1) *
 791                     srv->max_repos_display) {
 792                         *have_next = 1;
 793                         *next = (struct gotweb_url){
 794                                 .action = -1,
 795                                 .index_page = qs->index_page + 1,
 796                                 .page = -1,
 797                         };
 798                 }
 799                 break;
 800         case TAGS:
 801                 if (t->prev_id && qs->commit != NULL &&
 802                     strcmp(qs->commit, t->prev_id) != 0) {
 803                         *have_prev = 1;
 804                         *prev = (struct gotweb_url){
 805                                 .action = TAGS,
 806                                 .index_page = -1,
 807                                 .page = qs->page - 1,
 808                                 .path = qs->path,
 809                                 .commit = t->prev_id,
 810                                 .headref = qs->headref,
 811                         };
 812                 }
 813                 if (t->next_id) {
 814                         *have_next = 1;
 815                         *next = (struct gotweb_url){
 816                                 .action = TAGS,
 817                                 .index_page = -1,
 818                                 .page = qs->page + 1,
 819                                 .path = qs->path,
 820                                 .commit = t->next_id,
 821                                 .headref = qs->headref,
 822                         };
 823                 }
 824                 break;
 825         }
 826 }
 827
 828 static int
 829 gotweb_render_index(struct template *tp)
 830 {
 831         const struct got_error *error = NULL;
 832         struct request *c = tp->tp_arg;
 833         struct server *srv = c->srv;
 834         struct transport *t = c->t;
 835         struct querystring *qs = t->qs;
 836         struct repo_dir *repo_dir = NULL;
 837         struct dirent **sd_dent = t->repos;
 838         unsigned int d_i, d_disp = 0;
 839         unsigned int d_skipped = 0;
 840         int type, r;
 841
 842         if (gotweb_render_repo_table_hdr(c->tp) == -1)
 843                 return -1;
 844
 845         for (d_i = 0; d_i < t->nrepos; d_i++) {
 846                 if (srv->max_repos > 0 && t->prev_disp == srv->max_repos)
 847                         break;
 848
 849                 if (strcmp(sd_dent[d_i]->d_name, ".") == 0 ||
 850                     strcmp(sd_dent[d_i]->d_name, "..") == 0) {
 851                         d_skipped++;
 852                         continue;
 853                 }
 854
 855                 error = got_path_dirent_type(&type, srv->repos_path,
 856                     sd_dent[d_i]);
 857                 if (error)
 858                         continue;
 859                 if (type != DT_DIR) {
 860                         d_skipped++;
 861                         continue;
 862                 }
 863
 864                 if (qs->index_page > 0 && (qs->index_page *
 865                     srv->max_repos_display) > t->prev_disp) {
 866                         t->prev_disp++;
 867                         continue;
 868                 }
 869
 870                 error = gotweb_init_repo_dir(&repo_dir, sd_dent[d_i]->d_name);
 871                 if (error)
 872                         continue;
 873
 874                 error = gotweb_load_got_path(c, repo_dir);
 875                 if (error && error->code != GOT_ERR_LONELY_PACKIDX) {
 876                         if (error->code != GOT_ERR_NOT_GIT_REPO)
 877                                 log_warnx("%s: %s: %s", __func__,
 878                                     sd_dent[d_i]->d_name, error->msg);
 879                         gotweb_free_repo_dir(repo_dir);
 880                         repo_dir = NULL;
 881                         d_skipped++;
 882                         continue;
 883                 }
 884
 885                 d_disp++;
 886                 t->prev_disp++;
 887
 888                 r = gotweb_render_repo_fragment(c->tp, repo_dir);
 889                 gotweb_free_repo_dir(repo_dir);
 890                 repo_dir = NULL;
 891                 got_repo_close(t->repo);
 892                 t->repo = NULL;
 893                 if (r == -1)
 894                         return -1;
 895
 896                 t->next_disp++;
 897                 if (d_disp == srv->max_repos_display)
 898                         break;
 899         }
 900         t->repos_total = t->nrepos - d_skipped;
 901
 902         if (srv->max_repos_display == 0)
 903                 return 0;
 904         if (srv->max_repos > 0 && srv->max_repos < srv->max_repos_display)
 905                 return 0;
 906         if (t->repos_total <= srv->max_repos ||
 907             t->repos_total <= srv->max_repos_display)
 908                 return 0;
 909
 910         if (gotweb_render_navs(c->tp) == -1)
 911                 return -1;
 912
 913         return 0;
 914 }
 915
 916 static inline int
 917 should_urlencode(int c)
 918 {
 919         if (c <= ' ' || c >= 127)
 920                 return 1;
 921
 922         switch (c) {
 923                 /* gen-delim */
 924         case ':':
 925         case '/':
 926         case '?':
 927         case '#':
 928         case '[':
 929         case ']':
 930         case '@':
 931                 /* sub-delims */
 932         case '!':
 933         case '$':
 934         case '&':
 935         case '\'':
 936         case '(':
 937         case ')':
 938         case '*':
 939         case '+':
 940         case ',':
 941         case ';':
 942         case '=':
 943                 /* needed because the URLs are embedded into the HTML */
 944         case '\"':
 945                 return 1;
 946         default:
 947                 return 0;
 948         }
 949 }
 950
 951 static char *
 952 gotweb_urlencode(const char *str)
 953 {
 954         const char *s;
 955         char *escaped;
 956         size_t i, len;
 957         int a, b;
 958
 959         len = 0;
 960         for (s = str; *s; ++s) {
 961                 len++;
 962                 if (should_urlencode(*s))
 963                         len += 2;
 964         }
 965
 966         escaped = calloc(1, len + 1);
 967         if (escaped == NULL)
 968                 return NULL;
 969
 970         i = 0;
 971         for (s = str; *s; ++s) {
 972                 if (should_urlencode(*s)) {
 973                         a = (*s & 0xF0) >> 4;
 974                         b = (*s & 0x0F);
 975
 976                         escaped[i++] = '%';
 977                         escaped[i++] = a <= 9 ? ('0' + a) : ('7' + a);
 978                         escaped[i++] = b <= 9 ? ('0' + b) : ('7' + b);
 979                 } else
 980                         escaped[i++] = *s;
 981         }
 982
 983         return escaped;
 984 }
 985
 986 const char *
 987 gotweb_action_name(int action)
 988 {
 989         switch (action) {
 990         case BLAME:
 991                 return "blame";
 992         case BLOB:
 993                 return "blob";
 994         case BLOBRAW:
 995                 return "blobraw";
 996         case BRIEFS:
 997                 return "briefs";
 998         case COMMITS:
 999                 return "commits";
1000         case DIFF:
1001                 return "diff";
1002         case ERR:
1003                 return "err";
1004         case INDEX:
1005                 return "index";
1006         case PATCH:
1007                 return "patch";
1008         case SUMMARY:
1009                 return "summary";
1010         case TAG:
1011                 return "tag";
1012         case TAGS:
1013                 return "tags";
1014         case TREE:
1015                 return "tree";
1016         case RSS:
1017                 return "rss";
1018         default:
1019                 return NULL;
1020         }
1021 }
1022
1023 int
1024 gotweb_render_url(struct request *c, struct gotweb_url *url)
1025 {
1026         const char *sep = "?", *action;
1027         char *tmp;
1028         int r;
1029
1030         action = gotweb_action_name(url->action);
1031         if (action != NULL) {
1032                 if (tp_writef(c->tp, "?action=%s", action) == -1)
1033                         return -1;
1034                 sep = "&";
1035         }
1036
1037         if (url->commit) {
1038                 if (tp_writef(c->tp, "%scommit=%s", sep, url->commit) == -1)
1039                         return -1;
1040                 sep = "&";
1041         }
1042
1043         if (url->previd) {
1044                 if (tp_writef(c->tp, "%sprevid=%s", sep, url->previd) == -1)
1045                         return -1;
1046                 sep = "&";
1047         }
1048
1049         if (url->prevset) {
1050                 if (tp_writef(c->tp, "%sprevset=%s", sep, url->prevset) == -1)
1051                         return -1;
1052                 sep = "&";
1053         }
1054
1055         if (url->file) {
1056                 tmp = gotweb_urlencode(url->file);
1057                 if (tmp == NULL)
1058                         return -1;
1059                 r = tp_writef(c->tp, "%sfile=%s", sep, tmp);
1060                 free(tmp);
1061                 if (r == -1)
1062                         return -1;
1063                 sep = "&";
1064         }
1065
1066         if (url->folder) {
1067                 tmp = gotweb_urlencode(url->folder);
1068                 if (tmp == NULL)
1069                         return -1;
1070                 r = tp_writef(c->tp, "%sfolder=%s", sep, tmp);
1071                 free(tmp);
1072                 if (r == -1)
1073                         return -1;
1074                 sep = "&";
1075         }
1076
1077         if (url->headref) {
1078                 tmp = gotweb_urlencode(url->headref);
1079                 if (tmp == NULL)
1080                         return -1;
1081                 r = tp_writef(c->tp, "%sheadref=%s", sep, url->headref);
1082                 free(tmp);
1083                 if (r == -1)
1084                         return -1;
1085                 sep = "&";
1086         }
1087
1088         if (url->index_page != -1) {
1089                 if (tp_writef(c->tp, "%sindex_page=%d", sep,
1090                     url->index_page) == -1)
1091                         return -1;
1092                 sep = "&";
1093         }
1094
1095         if (url->path) {
1096                 tmp = gotweb_urlencode(url->path);
1097                 if (tmp == NULL)
1098                         return -1;
1099                 r = tp_writef(c->tp, "%spath=%s", sep, tmp);
1100                 free(tmp);
1101                 if (r == -1)
1102                         return -1;
1103                 sep = "&";
1104         }
1105
1106         if (url->page != -1) {
1107                 if (tp_writef(c->tp, "%spage=%d", sep, url->page) == -1)
1108                         return -1;
1109                 sep = "&";
1110         }
1111
1112         return 0;
1113 }
1114
1115 int
1116 gotweb_render_absolute_url(struct request *c, struct gotweb_url *url)
1117 {
1118         struct template *tp = c->tp;
1119         const char      *proto = c->https ? "https" : "http";
1120
1121         if (tp_writes(tp, proto) == -1 ||
1122             tp_writes(tp, "://") == -1 ||
1123             tp_htmlescape(tp, c->server_name) == -1 ||
1124             tp_htmlescape(tp, c->document_uri) == -1)
1125                 return -1;
1126
1127         return gotweb_render_url(c, url);
1128 }
1129
1130 static const struct got_error *
1131 gotweb_load_got_path(struct request *c, struct repo_dir *repo_dir)
1132 {
1133         const struct got_error *error = NULL;
1134         struct socket *sock = c->sock;
1135         struct server *srv = c->srv;
1136         struct transport *t = c->t;
1137         DIR *dt;
1138         char *dir_test;
1139
1140         if (asprintf(&dir_test, "%s/%s/%s", srv->repos_path, repo_dir->name,
1141             GOTWEB_GIT_DIR) == -1)
1142                 return got_error_from_errno("asprintf");
1143
1144         dt = opendir(dir_test);
1145         if (dt == NULL) {
1146                 free(dir_test);
1147                 if (asprintf(&dir_test, "%s/%s", srv->repos_path,
1148                     repo_dir->name) == -1)
1149                         return got_error_from_errno("asprintf");
1150                 dt = opendir(dir_test);
1151                 if (dt == NULL) {
1152                         free(dir_test);
1153                         return got_error_path(repo_dir->name,
1154                             GOT_ERR_NOT_GIT_REPO);
1155                 }
1156         }
1157
1158         repo_dir->path = dir_test;
1159         dir_test = NULL;
1160
1161         if (srv->respect_exportok &&
1162             faccessat(dirfd(dt), "git-daemon-export-ok", F_OK, 0) == -1) {
1163                 error = got_error_path(repo_dir->name, GOT_ERR_NOT_GIT_REPO);
1164                 goto err;
1165         }
1166
1167         error = got_repo_open(&t->repo, repo_dir->path, NULL, sock->pack_fds);
1168         if (error)
1169                 goto err;
1170         error = gotweb_get_repo_description(&repo_dir->description, srv,
1171             repo_dir->path, dirfd(dt));
1172         if (error)
1173                 goto err;
1174         error = got_get_repo_owner(&repo_dir->owner, c);
1175         if (error)
1176                 goto err;
1177         if (srv->show_repo_age) {
1178                 error = got_get_repo_age(&repo_dir->age, c, NULL);
1179                 if (error)
1180                         goto err;
1181         }
1182         error = gotweb_get_clone_url(&repo_dir->url, srv, repo_dir->path,
1183             dirfd(dt));
1184 err:
1185         free(dir_test);
1186         if (dt != NULL && closedir(dt) == EOF && error == NULL)
1187                 error = got_error_from_errno("closedir");
1188         if (error && t->repo) {
1189                 got_repo_close(t->repo);
1190                 t->repo = NULL;
1191         }
1192         return error;
1193 }
1194
1195 static const struct got_error *
1196 gotweb_init_repo_dir(struct repo_dir **repo_dir, const char *dir)
1197 {
1198         const struct got_error *error;
1199
1200         *repo_dir = calloc(1, sizeof(**repo_dir));
1201         if (*repo_dir == NULL)
1202                 return got_error_from_errno("calloc");
1203
1204         if (asprintf(&(*repo_dir)->name, "%s", dir) == -1) {
1205                 error = got_error_from_errno("asprintf");
1206                 free(*repo_dir);
1207                 *repo_dir = NULL;
1208                 return error;
1209         }
1210         (*repo_dir)->owner = NULL;
1211         (*repo_dir)->description = NULL;
1212         (*repo_dir)->url = NULL;
1213         (*repo_dir)->path = NULL;
1214
1215         return NULL;
1216 }
1217
1218 static const struct got_error *
1219 gotweb_get_repo_description(char **description, struct server *srv,
1220     const char *dirpath, int dir)
1221 {
1222         const struct got_error *error = NULL;
1223         struct stat sb;
1224         int fd = -1;
1225         off_t len;
1226
1227         *description = NULL;
1228         if (srv->show_repo_description == 0)
1229                 return NULL;
1230
1231         fd = openat(dir, "description", O_RDONLY);
1232         if (fd == -1) {
1233                 if (errno != ENOENT && errno != EACCES) {
1234                         error = got_error_from_errno_fmt("openat %s/%s",
1235                             dirpath, "description");
1236                 }
1237                 goto done;
1238         }
1239
1240         if (fstat(fd, &sb) == -1) {
1241                 error = got_error_from_errno_fmt("fstat %s/%s",
1242                     dirpath, "description");
1243                 goto done;
1244         }
1245
1246         len = sb.st_size;
1247         if (len > GOTWEBD_MAXDESCRSZ - 1)
1248                 len = GOTWEBD_MAXDESCRSZ - 1;
1249
1250         *description = calloc(len + 1, sizeof(**description));
1251         if (*description == NULL) {
1252                 error = got_error_from_errno("calloc");
1253                 goto done;
1254         }
1255
1256         if (read(fd, *description, len) == -1)
1257                 error = got_error_from_errno("read");
1258 done:
1259         if (fd != -1 && close(fd) == -1 && error == NULL)
1260                 error = got_error_from_errno("close");
1261         return error;
1262 }
1263
1264 static const struct got_error *
1265 gotweb_get_clone_url(char **url, struct server *srv, const char *dirpath,
1266     int dir)
1267 {
1268         const struct got_error *error = NULL;
1269         struct stat sb;
1270         int fd = -1;
1271         off_t len;
1272
1273         *url = NULL;
1274         if (srv->show_repo_cloneurl == 0)
1275                 return NULL;
1276
1277         fd = openat(dir, "cloneurl", O_RDONLY);
1278         if (fd == -1) {
1279                 if (errno != ENOENT && errno != EACCES) {
1280                         error = got_error_from_errno_fmt("openat %s/%s",
1281                             dirpath, "cloneurl");
1282                 }
1283                 goto done;
1284         }
1285
1286         if (fstat(fd, &sb) == -1) {
1287                 error = got_error_from_errno_fmt("fstat %s/%s",
1288                     dirpath, "cloneurl");
1289                 goto done;
1290         }
1291
1292         len = sb.st_size;
1293         if (len > GOTWEBD_MAXCLONEURLSZ - 1)
1294                 len = GOTWEBD_MAXCLONEURLSZ - 1;
1295
1296         *url = calloc(len + 1, sizeof(**url));
1297         if (*url == NULL) {
1298                 error = got_error_from_errno("calloc");
1299                 goto done;
1300         }
1301
1302         if (read(fd, *url, len) == -1)
1303                 error = got_error_from_errno("read");
1304 done:
1305         if (fd != -1 && close(fd) == -1 && error == NULL)
1306                 error = got_error_from_errno("close");
1307         return error;
1308 }
1309
1310 int
1311 gotweb_render_age(struct template *tp, time_t committer_time)
1312 {
1313         struct request *c = tp->tp_arg;
1314         long long diff_time;
1315         const char *years = "years ago", *months = "months ago";
1316         const char *weeks = "weeks ago", *days = "days ago";
1317         const char *hours = "hours ago",  *minutes = "minutes ago";
1318         const char *seconds = "seconds ago", *now = "right now";
1319
1320         diff_time = time(NULL) - committer_time;
1321         if (diff_time > 60 * 60 * 24 * 365 * 2) {
1322                 if (tp_writef(c->tp, "%lld %s",
1323                     (diff_time / 60 / 60 / 24 / 365), years) == -1)
1324                         return -1;
1325         } else if (diff_time > 60 * 60 * 24 * (365 / 12) * 2) {
1326                 if (tp_writef(c->tp, "%lld %s",
1327                     (diff_time / 60 / 60 / 24 / (365 / 12)),
1328                     months) == -1)
1329                         return -1;
1330         } else if (diff_time > 60 * 60 * 24 * 7 * 2) {
1331                 if (tp_writef(c->tp, "%lld %s",
1332                     (diff_time / 60 / 60 / 24 / 7), weeks) == -1)
1333                         return -1;
1334         } else if (diff_time > 60 * 60 * 24 * 2) {
1335                 if (tp_writef(c->tp, "%lld %s",
1336                     (diff_time / 60 / 60 / 24), days) == -1)
1337                         return -1;
1338         } else if (diff_time > 60 * 60 * 2) {
1339                 if (tp_writef(c->tp, "%lld %s",
1340                     (diff_time / 60 / 60), hours) == -1)
1341                         return -1;
1342         } else if (diff_time > 60 * 2) {
1343                 if (tp_writef(c->tp, "%lld %s", (diff_time / 60),
1344                     minutes) == -1)
1345                         return -1;
1346         } else if (diff_time > 2) {
1347                 if (tp_writef(c->tp, "%lld %s", diff_time,
1348                     seconds) == -1)
1349                         return -1;
1350         } else {
1351                 if (tp_writes(tp, now) == -1)
1352                         return -1;
1353         }
1354         return 0;
1355 }