Commit Graph

167 Commits

Author SHA1 Message Date
Xavier Del Campo Romero c198199a81
CMakeLists.txt: Bump version to 0.2.0 2024-02-12 23:15:15 +01:00
Xavier Del Campo Romero 69c9f975ba
Bump libweb to 0.2.0 2024-02-12 23:15:14 +01:00
Xavier Del Campo Romero 6d6c350479
usergen: Fix password generation
For longer passwords, od(1) might introduce a newline character, causing
printf(1) to interpret its input string incorrectly.
2024-01-26 20:32:28 +01:00
Xavier Del Campo Romero 8ebefdb9ab
Bump libweb
The following commits introduced performance improvements and bugfixes:

Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Sat Jan 20 01:09:18 2024 +0100

    server.c: Fix wrong priority for do_exit

    Under some specific circumstances, poll(2) would return a positive
    integer, but do_exit might had been previously set. This caused libweb
    to ignore SIGTERM, with the potential risk for an endless loop.

Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Sat Jan 20 01:05:05 2024 +0100

    http.c: Solve performance issues on POST uploads

    Profiling showed that reading multipart/form POST uploads byte-by-byte
    was too slow and typically led to maximum CPU usage. Therefore, the
    older approach (as done up to commit 7efc2b3a) was more efficient, even
    if the resulting code was a bit uglier.
2024-01-26 20:31:34 +01:00
Xavier Del Campo Romero 974d263b7e
configure: Avoid file extension conversion 2024-01-26 20:31:18 +01:00
Xavier Del Campo Romero d9d1811f89
configure: Fix typo
slweb was renamed to libweb some time ago:

commit 28ae865e5e
Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Tue Oct 10 23:43:47 2023 +0200

    Apply slweb renaming to libweb
2023-11-24 01:52:52 +01:00
Xavier Del Campo Romero 3062a63e14
.gitignore: Ignore only ./Makefile
Future commits might introduce Makefiles on other directories that
should not be ignored.
2023-11-24 01:52:00 +01:00
Xavier Del Campo Romero f0368253d1
Bump libweb
The following commit should increase performance for slcl:

commit b0accd099fa8c5110d4c3c68830ad6fd810ca3ec
Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Fri Nov 24 00:52:50 2023 +0100

    http.c: Unify read operations

    So far, libweb would perform different read operations depending on its
    state:

    - For HTTP headers or request bodies, one byte at a time was read.
    - For multipart/form-data, up to BUFSIZ bytes at a time were read.

    However, this caused a significant extra number of syscalls for no
    reason and would increase code complexity, specially when parsing
    multiform/form-data boundaries.

    Now, http_read always reads up to BUFSIZ bytes at a time and process
    them on a loop. Apart from reducing code complexity, this should
    increase performance due to the (much) lower number of syscalls
    required.
2023-11-24 01:38:51 +01:00
Xavier Del Campo Romero c322356670
CMakeLists.txt: Fix wrong parameters for project
When VERSION is given, LANGUAGES becomes mandatory.
2023-11-23 00:07:45 +01:00
Xavier Del Campo Romero 1768210ea4
Upgrade to new libweb interface
Recent commits from libweb brought a few breaking changes. The one below
affected slcl, so it had to be updated according to the new interface:

commit 98f5f52461b0c1ab1ee3331722bd32e2db9e1d41
Author: Xavier Del Campo <xavier.delcampo@midokura.com>
Date:   Thu Nov 16 12:23:08 2023 +0100

    Split handler_loop from handler_listen

    Some applications might set up a struct handler object to listen on any
    port i.e., 0, but still need a way to determine which port number was
    eventually selected by the implementation.

    Therefore, handler_listen has been reduced to the server initialization
    bit, whereas the main loop has been split into its own function, namely
    handler_loop.

    Because of these changes, it no longer made sense for libweb to write
    the selected port to standard output, as this is something now
    applications can do on their own.
2023-11-23 00:06:09 +01:00
Xavier Del Campo Romero daffea4660
main.c: Treat non-existing upload dir as non-fatal
When a user attempts to upload a file into a non-existing directory,
slcl would not check whether the directory exists. Then, rename(3) would
fail and slcl would treat this as a fatal error, effectively closing
itself.

Since this is an example of ill-formed user input, it must be treated as
a non-fatal error, and instead slcl should return a bad request page.
2023-11-23 00:01:41 +01:00
Xavier Del Campo Romero 0854bc0030
Bump libweb
More bugfixes related to partial boundary parsing were provided by this
commit:

commit b71a6174e12b4709acaf8bc151938ba12d2a54f6
Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Sun Nov 12 23:31:57 2023 +0100

    http.c: Fix more issues with partial boundaries

    - http_memmem must not check strlen(a) > n because, in case of a partial
    boundary, it would wrongfully return NULL.
    - If one or more characters from a partial boundary are found at the end
    of a buffer, but the next buffer does not start with the rest of the
    boundary, the accumulated boundary must be reset, and then look for a
    new boundary.
2023-11-12 23:36:17 +01:00
Xavier Del Campo Romero 34d00e10af
Bump libweb
Several bugfixes related to partial boundary parsing were provided by
this commit:

commit 7d02b225fe11fb0c7233cd2ea576485ee920f203
Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Sun Nov 12 06:16:26 2023 +0100

    http.c: Fix several issues with partial boundaries

    - Writing to m->boundary[len] did not make any sense, as len is not
    meant to change between calls to read_mf_boundary_byte.
    - For the same reason, memset(3)ing "len + 1" did not make any sense.
    - When a partial boundary is found, http_memmem must still return st.
    - Calling reset_boundary with prev == 0 did not make sense, since that
    case typically means a partial boundary was found on a previous
    iteration, so m->blen must not be reset.
2023-11-12 06:54:56 +01:00
Xavier Del Campo Romero 8dff21942e
libweb: Bump new signature for http_decode_url
The new signature allows callers to distinguish decoding errors from
fatal errors. This is important for slcl to avoid crashing when
ill-formed data is received from a client.
2023-11-12 01:30:43 +01:00
Xavier Del Campo Romero fada861c5f
README.md: Remove wrong comment about /tmp
/tmp is at least defined by POSIX.1-2017 at section 10 (Directory
Structure and Devices).
2023-10-25 22:29:48 +02:00
Xavier Del Campo Romero 4956df1891
Bump libweb to v0.1.0-rc6 2023-10-25 22:13:23 +02:00
Xavier Del Campo Romero fb6105b1b2
CMakeLists.txt: set project VERSION 2023-10-25 22:13:23 +02:00
Xavier Del Campo Romero fe59dacc14
Bump libweb to v0.1.0-rc5 2023-10-25 22:13:23 +02:00
Xavier Del Campo Romero 6fa38f4d83
Replace handwritten Makefile with configure script 2023-10-25 22:13:23 +02:00
Xavier Del Campo Romero b2be8b4658
CMake: Find system libweb or dynstr if available
So far, slcl's build system would always build libweb and dynstr.
However, this is discouraged by distribution packagers.
2023-10-25 13:45:12 +02:00
Xavier Del Campo Romero fc3db39277
usergen: Call mkdir(1) before database swap
No changes must be committed to the database if mkdir(1) fails.
2023-10-19 17:35:39 +02:00
Xavier Del Campo Romero 8b24f8dcbb
usergen: Replace use of non-standard mktemp(1)
Despite common use in several POSIX operating systems, mktemp(1) is not
defined by POSIX.1-2008, nor even POSIX.1-2017. As long as it is not
introduced, m4(1)'s mkstemp can be used with similar effect.
2023-10-19 17:35:38 +02:00
Xavier Del Campo Romero 9376361bcb
main.c: Use BUFSIZ instead of arbitrary value
According to C99 7.19.1p3:

BUFSIZ is a macro that expands to an integer constant expression that is
the size of the buffer used by the setbuf function.

In other words, this means BUFSIZ is the most optimal length for a
buffer that reads a file into memory in chunks using fread(3).
2023-10-19 15:32:22 +02:00
Xavier Del Campo Romero 1da12097cb
CMakeLists.txt: Fix wrong library name 2023-10-14 13:10:37 +02:00
Xavier Del Campo Romero d96e5685ee
auth.c: Fix potential signed integer overflow
For platforms where int is a 16-bit data type, this operation might
overflow and possibly cause either unexpected behaviour and/or a
compiler warning.

Therefore, it is safer to promote each integer constant accordingly.
2023-10-14 13:08:25 +02:00
Xavier Del Campo Romero 472b4ddbf1
Implement HEAD support 2023-10-14 01:08:02 +02:00
Xavier Del Campo Romero 1d2ce3f9c2
List number of files and directories
Sometimes, users want to know how many files and/or directories reside
on a directory. Now, slcl prints such information below the logout form.
2023-10-11 00:08:44 +02:00
Xavier Del Campo Romero 91f1a38d5c
page.c: Force whitespace rendering 2023-10-11 00:08:44 +02:00
Xavier Del Campo Romero 28ae865e5e
Apply slweb renaming to libweb 2023-10-11 00:08:40 +02:00
Xavier Del Campo Romero e3177b549d
Bump slweb 2023-10-02 15:15:19 +02:00
Xavier Del Campo Romero 0cea9b44a6
Bump slweb to v0.1.0-rc1 2023-09-27 22:13:52 +02:00
Xavier Del Campo Romero 2d2f9e4492
man1: Replace LICENSE/AUTHORS with COPYRIGHT
LICENSE is not copied to the installation prefix, so adding a short
copyright notice instead might be a better reference.
2023-09-27 22:13:52 +02:00
Xavier Del Campo Romero a9d6cdf2e9
CMakeLists.txt: Install targets 2023-09-27 22:13:52 +02:00
Xavier Del Campo Romero f7293744ce
Makefile: add install target 2023-09-27 22:08:23 +02:00
Xavier Del Campo Romero 653924ba87
slcl.1: Remove obsolete TODO
This feature was already implemented by:

commit 0822a982ef
Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Sat Jul 8 00:54:59 2023 +0200

    Implement file/directory removal
2023-09-27 01:48:18 +02:00
Xavier Del Campo Romero b2037fea90
main.c: Refactor calls to handler_add 2023-09-16 01:46:07 +02:00
Xavier Del Campo Romero bec528a979
usergen: Remove dependency against sha256sum(1)
sha256sum(1) is a GNU utility that might not be available under some
POSIX systems. Since OpenSSL is already a dependency, it makes sense to
reuse it to generate SHA256 digests.
2023-09-16 01:00:14 +02:00
Xavier Del Campo Romero 18bd0d83be
usergen: Remove dependency against xxd(1)
xxd(1) is closely related to vim(1), might not be available under
some POSIX systems.
2023-09-16 01:00:05 +02:00
Xavier Del Campo Romero d8f683d9ca
usergen: Reject non-numeric, invalid quota 2023-09-16 00:59:46 +02:00
Xavier Del Campo Romero b5327b2f7a
Reduce minimum required major version for OpenSSL
slcl has been successfully tested with OpenSSL 2.0 on an OpenBSD 7.3
host.
2023-09-16 00:29:07 +02:00
Xavier Del Campo Romero 5af036c37c
auth.c: Add missing include
As opposed to other integer constants such as ULLONG_MAX, SIZE_MAX is
defined by stdint.h, not limits.h.
2023-09-15 22:34:07 +02:00
Xavier Del Campo Romero e81d1f6312
main.c: Remove string duplication in get_forms
slweb now assumes application/x-www-form-urlencoded-data as text, so it
now returns a null-terminated string on struct http_post member "data".
This removes the need for slcl to call strdup(3) in order to obtain a
null-terminated string.
2023-09-09 02:34:26 +02:00
Xavier Del Campo Romero fcef3b99b8
Check directory on uploads
For historical reasons, slweb used to check for a name called "dir" on
multipart/form-data POST requests. However, stricly speaking this is
application logic, so it has been now moved from slweb to slcl.

This has resulted in a couple of breaking changes in slweb that had to
be updated on slcl.
2023-09-09 00:50:22 +02:00
Xavier Del Campo Romero 7471da3886
page.c: Update project URL 2023-09-09 00:19:07 +02:00
Xavier Del Campo Romero df873a988c
main.c: Return 1 on null buffer
Malformed POST requests might include no payload data. However, this is
not considered a fatal error, but wrong user input.
2023-09-09 00:15:39 +02:00
Xavier Del Campo Romero 93b146a8a8
Bump slweb
Last commits introduced several minor bugfixes and improvements.
2023-09-07 16:12:55 +02:00
Xavier Del Campo Romero 474de49bad
Add screenshots 2023-08-08 13:05:33 +02:00
Xavier Del Campo Romero a53781a297
Bump slweb
d55b84f68b90fe5c2521724d0c22ebf22e62b0b4 introduces a bugfix:

Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com>
Date:   Tue Aug 8 00:32:21 2023 +0200

    html.c: Fix wrong encoding for '>' and '<'
2023-08-08 00:38:52 +02:00
Xavier Del Campo Romero 77ceb994cf
Bump slweb 2023-08-02 13:07:20 +02:00
Xavier Del Campo Romero 0e324e6d77
CMakeLists.txt: Set project language to C
Otherwise, CMake by default tests the system C++ compiler, but this is
not a requirement for slcl.
2023-08-02 13:05:23 +02:00