lib/handshake.c

   1 /*
   2  * libwebsockets - small server side websockets and web server implementation
   3  *
   4  * Copyright (C) 2010-2015 Andy Green <andy@warmcat.com>
   5  *
   6  *  This library is free software; you can redistribute it and/or
   7  *  modify it under the terms of the GNU Lesser General Public
   8  *  License as published by the Free Software Foundation:
   9  *  version 2.1 of the License.
  10  *
  11  *  This library is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  *  Lesser General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU Lesser General Public
  17  *  License along with this library; if not, write to the Free Software
  18  *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  19  *  MA  02110-1301  USA
  20  */
  21
  22 #include "private-libwebsockets.h"
  23
  24 /*
  25  * -04 of the protocol (actually the 80th version) has a radically different
  26  * handshake.  The 04 spec gives the following idea
  27  *
  28  *    The handshake from the client looks as follows:
  29  *
  30  *      GET /chat HTTP/1.1
  31  *      Host: server.example.com
  32  *      Upgrade: websocket
  33  *      Connection: Upgrade
  34  *      Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==
  35  *      Sec-WebSocket-Origin: http://example.com
  36  *      Sec-WebSocket-Protocol: chat, superchat
  37  *      Sec-WebSocket-Version: 4
  38  *
  39  *  The handshake from the server looks as follows:
  40  *
  41  *       HTTP/1.1 101 Switching Protocols
  42  *       Upgrade: websocket
  43  *       Connection: Upgrade
  44  *       Sec-WebSocket-Accept: me89jWimTRKTWwrS3aRrL53YZSo=
  45  *       Sec-WebSocket-Nonce: AQIDBAUGBwgJCgsMDQ4PEC==
  46  *       Sec-WebSocket-Protocol: chat
  47  */
  48
  49 #ifndef min
  50 #define min(a, b) ((a) < (b) ? (a) : (b))
  51 #endif
  52
  53 /*
  54  * We have to take care about parsing because the headers may be split
  55  * into multiple fragments.  They may contain unknown headers with arbitrary
  56  * argument lengths.  So, we parse using a single-character at a time state
  57  * machine that is completely independent of packet size.
  58  *
  59  * Returns <0 for error or length of chars consumed from buf (up to len)
  60  */
  61
  62 LWS_VISIBLE int
  63 lws_read(struct lws *wsi, unsigned char *buf, size_t len)
  64 {
  65         unsigned char *last_char, *oldbuf = buf;
  66         int body_chunk_len;
  67         size_t n;
  68
  69         lwsl_debug("%s: incoming len %d  state %d\n", __func__, (int)len, wsi->state);
  70
  71         switch (wsi->state) {
  72 #ifdef LWS_USE_HTTP2
  73         case LWSS_HTTP2_AWAIT_CLIENT_PREFACE:
  74         case LWSS_HTTP2_ESTABLISHED_PRE_SETTINGS:
  75         case LWSS_HTTP2_ESTABLISHED:
  76                 n = 0;
  77                 while (n < len) {
  78                         /*
  79                          * we were accepting input but now we stopped doing so
  80                          */
  81                         if (!(wsi->rxflow_change_to & LWS_RXFLOW_ALLOW)) {
  82                                 lws_rxflow_cache(wsi, buf, n, len);
  83
  84                                 return 1;
  85                         }
  86
  87                         /* account for what we're using in rxflow buffer */
  88                         if (wsi->rxflow_buffer)
  89                                 wsi->rxflow_pos++;
  90                         if (lws_http2_parser(wsi, buf[n++])) {
  91                                 lwsl_debug("%s: http2_parser bailed\n", __func__);
  92                                 goto bail;
  93                         }
  94                 }
  95                 break;
  96 #endif
  97
  98         case LWSS_HTTP:
  99                 wsi->hdr_parsing_completed = 0;
 100                 /* fallthru */
 101         case LWSS_HTTP_ISSUING_FILE:
 102                 wsi->state = LWSS_HTTP_HEADERS;
 103                 wsi->u.hdr.parser_state = WSI_TOKEN_NAME_PART;
 104                 wsi->u.hdr.lextable_pos = 0;
 105                 /* fallthru */
 106         case LWSS_HTTP_HEADERS:
 107                 assert(wsi->u.hdr.ah);
 108                 lwsl_parser("issuing %d bytes to parser\n", (int)len);
 109
 110                 if (lws_handshake_client(wsi, &buf, len))
 111                         goto bail;
 112
 113                 last_char = buf;
 114                 if (lws_handshake_server(wsi, &buf, len))
 115                         /* Handshake indicates this session is done. */
 116                         goto bail;
 117
 118                 /*
 119                  * It's possible that we've exhausted our data already, or
 120                  * rx flow control has stopped us dealing with this early,
 121                  * but lws_handshake_server doesn't update len for us.
 122                  * Figure out how much was read, so that we can proceed
 123                  * appropriately:
 124                  */
 125                 len -= (buf - last_char);
 126                 lwsl_debug("%s: thinks we have used %d\n", __func__, len);
 127
 128                 if (!wsi->hdr_parsing_completed)
 129                         /* More header content on the way */
 130                         goto read_ok;
 131
 132                 switch (wsi->state) {
 133                         case LWSS_HTTP:
 134                         case LWSS_HTTP_HEADERS:
 135                                 goto read_ok;
 136                         case LWSS_HTTP_ISSUING_FILE:
 137                                 goto read_ok;
 138                         case LWSS_HTTP_BODY:
 139                                 wsi->u.http.content_remain =
 140                                                 wsi->u.http.content_length;
 141                                 if (wsi->u.http.content_remain)
 142                                         goto http_postbody;
 143
 144                                 /* there is no POST content */
 145                                 goto postbody_completion;
 146                         default:
 147                                 break;
 148                 }
 149                 break;
 150
 151         case LWSS_HTTP_BODY:
 152 http_postbody:
 153                 while (len && wsi->u.http.content_remain) {
 154                         /* Copy as much as possible, up to the limit of:
 155                          * what we have in the read buffer (len)
 156                          * remaining portion of the POST body (content_remain)
 157                          */
 158                         body_chunk_len = min(wsi->u.http.content_remain,len);
 159                         wsi->u.http.content_remain -= body_chunk_len;
 160                         len -= body_chunk_len;
 161 #ifdef LWS_WITH_CGI
 162                         if (wsi->cgi) {
 163                                 struct lws_cgi_args args;
 164
 165                                 args.ch = LWS_STDIN;
 166                                 args.stdwsi = &wsi->cgi->stdwsi[0];
 167                                 args.data = buf;
 168                                 args.len = body_chunk_len;
 169
 170                                 /* returns how much used */
 171                                 n = user_callback_handle_rxflow(
 172                                         wsi->protocol->callback,
 173                                         wsi, LWS_CALLBACK_CGI_STDIN_DATA,
 174                                         wsi->user_space,
 175                                         (void *)&args, 0);
 176                                 if ((int)n < 0)
 177                                         goto bail;
 178                         } else {
 179 #endif
 180                                 n = wsi->protocol->callback(wsi,
 181                                         LWS_CALLBACK_HTTP_BODY, wsi->user_space,
 182                                         buf, body_chunk_len);
 183                                 if (n)
 184                                         goto bail;
 185                                 n = body_chunk_len;
 186 #ifdef LWS_WITH_CGI
 187                         }
 188 #endif
 189                         buf += n;
 190
 191                         if (wsi->u.http.content_remain)  {
 192                                 lws_set_timeout(wsi, PENDING_TIMEOUT_HTTP_CONTENT,
 193                                                 wsi->context->timeout_secs);
 194                                 break;
 195                         }
 196                         /* he sent all the content in time */
 197 postbody_completion:
 198                         lws_set_timeout(wsi, NO_PENDING_TIMEOUT, 0);
 199 #ifdef LWS_WITH_CGI
 200                         if (!wsi->cgi)
 201 #endif
 202                         {
 203                                 n = wsi->protocol->callback(wsi,
 204                                         LWS_CALLBACK_HTTP_BODY_COMPLETION,
 205                                         wsi->user_space, NULL, 0);
 206                                 if (n)
 207                                         goto bail;
 208                         }
 209
 210                         goto http_complete;
 211                 }
 212                 break;
 213
 214         case LWSS_ESTABLISHED:
 215         case LWSS_AWAITING_CLOSE_ACK:
 216         case LWSS_SHUTDOWN:
 217                 if (lws_handshake_client(wsi, &buf, len))
 218                         goto bail;
 219                 switch (wsi->mode) {
 220                 case LWSCM_WS_SERVING:
 221
 222                         if (lws_interpret_incoming_packet(wsi, &buf, len) < 0) {
 223                                 lwsl_info("interpret_incoming_packet has bailed\n");
 224                                 goto bail;
 225                         }
 226                         break;
 227                 }
 228                 break;
 229         default:
 230                 lwsl_err("%s: Unhandled state\n", __func__);
 231                 break;
 232         }
 233
 234 read_ok:
 235         /* Nothing more to do for now */
 236         lwsl_info("%s: read_ok, used %d\n", __func__, buf - oldbuf);
 237
 238         return buf - oldbuf;
 239
 240 http_complete:
 241         lwsl_debug("%s: http_complete\n", __func__);
 242
 243 #ifndef LWS_NO_SERVER
 244         /* Did the client want to keep the HTTP connection going? */
 245         if (lws_http_transaction_completed(wsi))
 246                 goto bail;
 247 #endif
 248         /* we may have next header set already, but return to event loop first
 249          * so a heaily-pipelined http/1.1 connection cannot monopolize the
 250          * service thread with GET hugefile.bin GET hugefile.bin etc
 251          */
 252         goto read_ok;
 253
 254 bail:
 255         lwsl_debug("closing connection at lws_read bail:\n");
 256         lws_close_free_wsi(wsi, LWS_CLOSE_STATUS_NOSTATUS);
 257
 258         return -1;
 259 }