1 files changed, 302 insertions, 10 deletions

diff --git a/httpd/server_file.c b/httpd/server_file.c
index f697504..52e50ff 100644
--- a/httpd/server_file.c
+++ b/httpd/server_file.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: server_file.c,v 1.51 2015/02/12 10:05:29 reyk Exp $	*/
+/*	$OpenBSD: server_file.c,v 1.54 2015/05/05 11:10:13 florian Exp $	*/
 
 /*
  * Copyright (c) 2006 - 2015 Reyk Floeter <reyk@openbsd.org>
@@ -36,12 +36,27 @@
 
 #define MINIMUM(a, b)	(((a) < (b)) ? (a) : (b))
 #define MAXIMUM(a, b)	(((a) > (b)) ? (a) : (b))
-
-int	 server_file_access(struct httpd *, struct client *, char *, size_t);
-int	 server_file_request(struct httpd *, struct client *, char *,
-	    struct stat *);
-int	 server_file_index(struct httpd *, struct client *, struct stat *);
-int	 server_file_method(struct client *);
+#define MAX_RANGES	4
+
+struct range {
+	off_t	start;
+	off_t	end;
+};
+
+int	 	 server_file_access(struct httpd *, struct client *,
+		    char *, size_t);
+int	 	 server_file_request(struct httpd *, struct client *,
+		    char *, struct stat *);
+int	 	 server_partial_file_request(struct httpd *, struct client *,
+		    char *, struct stat *, char *);
+int	 	 server_file_index(struct httpd *, struct client *,
+		    struct stat *);
+int		 server_file_modified_since(struct http_descriptor *,
+		    struct stat *);
+int	 	 server_file_method(struct client *);
+int	 	 parse_range_spec(char *, size_t, struct range *);
+struct range 	*parse_range(char *, size_t, int *);
+int	 	 buffer_add_range(int, struct evbuffer *, struct range *);
 
 int
 server_file_access(struct httpd *env, struct client *clt,
@@ -50,6 +65,7 @@ server_file_access(struct httpd *env, struct client *clt,
 	struct http_descriptor	*desc = clt->clt_descreq;
 	struct server_config	*srv_conf = clt->clt_srv_conf;
 	struct stat		 st;
+	struct kv		*r, key;
 	char			*newpath;
 	int			 ret;
 
@@ -123,7 +139,13 @@ server_file_access(struct httpd *env, struct client *clt,
 		goto fail;
 	}
 
-	return (server_file_request(env, clt, path, &st));
+	key.kv_key = "Range";
+	r = kv_find(&desc->http_headers, &key);
+	if (r != NULL)
+		return (server_partial_file_request(env, clt, path, &st,
+		    r->kv_value));
+	else
+		return (server_file_request(env, clt, path, &st));
 
  fail:
 	switch (errno) {
@@ -209,6 +231,9 @@ server_file_request(struct httpd *env, struct client *clt, char *path,
 		goto abort;
 	}
 
+	if ((ret = server_file_modified_since(clt->clt_descreq, st)) != -1)
+		return ret;
+
 	/* Now open the file, should be readable or we have another problem */
 	if ((fd = open(path, O_RDONLY)) == -1)
 		goto abort;
@@ -262,6 +287,143 @@ server_file_request(struct httpd *env, struct client *clt, char *path,
 }
 
 int
+server_partial_file_request(struct httpd *env, struct client *clt, char *path,
+    struct stat *st, char *range_str)
+{
+	struct http_descriptor	*resp = clt->clt_descresp;
+	struct http_descriptor	*desc = clt->clt_descreq;
+	struct media_type	*media, multipart_media;
+	struct range		*range;
+	struct evbuffer		*evb = NULL;
+	size_t			 content_length;
+	int		 	 code = 500, fd = -1, i, nranges, ret;
+	uint32_t		 boundary;
+	char		 	 content_range[64];
+	const char		*errstr = NULL;
+
+	/* Ignore range request for methods other than GET */
+	if (desc->http_method != HTTP_METHOD_GET)
+		return server_file_request(env, clt, path, st);
+
+	if ((range = parse_range(range_str, st->st_size, &nranges)) == NULL) {
+		code = 416;
+		(void)snprintf(content_range, sizeof(content_range),
+		    "bytes */%lld", st->st_size);
+		errstr = content_range;
+		goto abort;
+	}
+
+	/* Now open the file, should be readable or we have another problem */
+	if ((fd = open(path, O_RDONLY)) == -1)
+		goto abort;
+
+	media = media_find(env->sc_mediatypes, path);
+	if ((evb = evbuffer_new()) == NULL) {
+		errstr = "failed to allocate file buffer";
+		goto abort;
+	}
+
+	if (nranges == 1) {
+		(void)snprintf(content_range, sizeof(content_range),
+	    	    "bytes %lld-%lld/%lld", range->start, range->end,
+		    st->st_size);
+		if (kv_add(&resp->http_headers, "Content-Range",
+		    content_range) == NULL)
+			goto abort;
+
+		content_length = range->end - range->start + 1;
+		if (buffer_add_range(fd, evb, range) == 0)
+			goto abort;
+
+	} else {
+		content_length = 0;
+		boundary = arc4random();
+		/* Generate a multipart payload of byteranges */
+		while (nranges--) {
+			if ((i = evbuffer_add_printf(evb, "\r\n--%ud\r\n",
+			    boundary)) == -1)
+				goto abort;
+
+			content_length += i;
+			if ((i = evbuffer_add_printf(evb,
+			    "Content-Type: %s/%s\r\n",
+	    		    media == NULL ? "application" : media->media_type,
+	    		    media == NULL ?
+			    "octet-stream" : media->media_subtype)) == -1)
+				goto abort;
+
+			content_length += i;
+			if ((i = evbuffer_add_printf(evb,
+			    "Content-Range: bytes %lld-%lld/%lld\r\n\r\n",
+			    range->start, range->end, st->st_size)) == -1)
+				goto abort;
+
+			content_length += i;
+			if (buffer_add_range(fd, evb, range) == 0)
+				goto abort;
+
+			content_length += range->end - range->start + 1;
+			range++;
+		}
+
+		if ((i = evbuffer_add_printf(evb, "\r\n--%ud--\r\n",
+		    boundary)) == -1)
+			goto abort;
+
+		content_length += i;
+
+		/* prepare multipart/byteranges media type */
+		(void)strlcpy(multipart_media.media_type, "multipart",
+	    	    sizeof(multipart_media.media_type));
+		(void)snprintf(multipart_media.media_subtype,
+	    	    sizeof(multipart_media.media_subtype),
+	    	    "byteranges; boundary=%ud", boundary);
+		media = &multipart_media;
+	}
+
+	ret = server_response_http(clt, 206, media, content_length,
+	    MINIMUM(time(NULL), st->st_mtim.tv_sec));
+	switch (ret) {
+	case -1:
+		goto fail;
+	case 0:
+		/* Connection is already finished */
+		close(fd);
+		evbuffer_free(evb);
+		evb = NULL;
+		goto done;
+	default:
+		break;
+	}
+
+	if (server_bufferevent_write_buffer(clt, evb) == -1)
+		goto fail;
+
+	evbuffer_free(evb);
+	evb = NULL;
+
+	bufferevent_enable(clt->clt_bev, EV_READ|EV_WRITE);
+	if (clt->clt_persist)
+		clt->clt_toread = TOREAD_HTTP_HEADER;
+	else
+		clt->clt_toread = TOREAD_HTTP_NONE;
+	clt->clt_done = 0;
+
+ done:
+	server_reset_http(clt);
+	return (0);
+ fail:
+	bufferevent_disable(clt->clt_bev, EV_READ|EV_WRITE);
+	bufferevent_free(clt->clt_bev);
+	clt->clt_bev = NULL;
+ abort:
+	if (errstr == NULL)
+		errstr = strerror(errno);
+	server_abort_http(clt, code, errstr);
+	return (-1);
+}
+
+int
 server_file_index(struct httpd *env, struct client *clt, struct stat *st)
 {
 	char			  path[PATH_MAX];
@@ -352,13 +514,15 @@ server_file_index(struct httpd *env, struct client *clt, struct stat *st)
 		} else if (S_ISDIR(st->st_mode)) {
 			namewidth -= 1; /* trailing slash */
 			if (evbuffer_add_printf(evb,
-			    "<a href=\"%s\">%s/</a>%*s%s%20s\n",
+			    "<a href=\"%s%s/\">%s/</a>%*s%s%20s\n",
+			    strchr(escapeduri, ':') != NULL ? "./" : "",
 			    escapeduri, escapedhtml,
 			    MAXIMUM(namewidth, 0), " ", tmstr, "-") == -1)
 				skip = 1;
 		} else if (S_ISREG(st->st_mode)) {
 			if (evbuffer_add_printf(evb,
-			    "<a href=\"%s\">%s</a>%*s%s%20llu\n",
+			    "<a href=\"%s%s\">%s</a>%*s%s%20llu\n",
+			    strchr(escapeduri, ':') != NULL ? "./" : "",
 			    escapeduri, escapedhtml,
 			    MAXIMUM(namewidth, 0), " ",
 			    tmstr, st->st_size) == -1)
@@ -467,3 +631,131 @@ server_file_error(struct bufferevent *bev, short error, void *arg)
 	server_close(clt, "unknown event error");
 	return;
 }
+
+int
+server_file_modified_since(struct http_descriptor * desc, struct stat * st)
+{
+	struct kv		 key, *since;
+	struct tm		 tm;
+
+	memset(&tm, 0, sizeof(struct tm));
+
+	key.kv_key = "If-Modified-Since";
+	if ((since = kv_find(&desc->http_headers, &key)) != NULL &&
+	    since->kv_value != NULL) {
+		if (strptime(since->kv_value, "%a, %d %h %Y %T %Z", &tm) !=
+		    NULL && timegm(&tm) >= st->st_mtim.tv_sec) {
+			return (304);
+		}
+	}
+
+	return (-1);
+}
+
+struct range *
+parse_range(char *str, size_t file_sz, int *nranges)
+{
+	static struct range	 ranges[MAX_RANGES];
+	int	 	 	 i = 0;
+	char			*p, *q;
+
+	/* Extract range unit */
+	if ((p = strchr(str, '=')) == NULL)
+		return (NULL);
+
+	*p++ = '\0';
+	/* Check if it's a bytes range spec */
+	if (strcmp(str, "bytes") != 0)
+		return (NULL);
+
+	while ((q = strchr(p, ',')) != NULL) {
+		*q++ = '\0';
+
+		/* Extract start and end positions */
+		if (parse_range_spec(p, file_sz, &ranges[i]) == 0)
+			continue;
+
+		i++;
+		if (i == MAX_RANGES)
+			return (NULL);
+
+		p = q;
+	}
+
+	if (parse_range_spec(p, file_sz, &ranges[i]) != 0)
+		i++;
+
+	*nranges = i;
+	return (i ? ranges : NULL);
+}
+
+int
+parse_range_spec(char *str, size_t size, struct range *r)
+{
+	size_t	 	 start_str_len, end_str_len;
+	char		*p, *start_str, *end_str;
+	const char	*errstr;
+
+	if ((p = strchr(str, '-')) == NULL)
+		return (0);
+
+	*p++ = '\0';
+	start_str = str;
+	end_str = p;
+	start_str_len = strlen(start_str);
+	end_str_len = strlen(end_str);
+
+	/* Either 'start' or 'end' is optional but not both */
+	if ((start_str_len == 0) && (end_str_len == 0))
+		return (0);
+
+	if (end_str_len) {
+		r->end = strtonum(end_str, 0, LLONG_MAX, &errstr);
+		if (errstr)
+			return (0);
+
+		if ((size_t)r->end >= size)
+			r->end = size - 1;
+	} else
+		r->end = size - 1;
+
+	if (start_str_len) {
+		r->start = strtonum(start_str, 0, LLONG_MAX, &errstr);
+		if (errstr)
+			return (0);
+
+		if ((size_t)r->start >= size)
+			return (0);
+	} else {
+		r->start = size - r->end;
+		r->end = size - 1;
+	}
+
+	if (r->end < r->start)
+		return (0);
+
+	return (1);
+}
+
+int
+buffer_add_range(int fd, struct evbuffer *evb, struct range *range)
+{
+	char	buf[BUFSIZ];
+	size_t	n, range_sz;
+	ssize_t	nread;
+
+	if (lseek(fd, range->start, SEEK_SET) == -1)
+		return (0);
+
+	range_sz = range->end - range->start + 1;
+	while (range_sz) {
+		n = MINIMUM(range_sz, sizeof(buf));
+		if ((nread = read(fd, buf, n)) == -1)
+			return (0);
+
+		evbuffer_add(evb, buf, nread);
+		range_sz -= nread;
+	}
+
+	return (1);
+}