| |
| /* |
| * Copyright (C) Nginx, Inc. |
| * Copyright (C) Valentin V. Bartenev |
| */ |
| |
| |
| #include <ngx_config.h> |
| #include <ngx_core.h> |
| #include <ngx_http.h> |
| #include <ngx_http_v2_module.h> |
| |
| |
| typedef struct { |
| ngx_str_t name; |
| ngx_uint_t offset; |
| ngx_uint_t hash; |
| ngx_http_header_t *hh; |
| } ngx_http_v2_parse_header_t; |
| |
| |
| /* errors */ |
| #define NGX_HTTP_V2_NO_ERROR 0x0 |
| #define NGX_HTTP_V2_PROTOCOL_ERROR 0x1 |
| #define NGX_HTTP_V2_INTERNAL_ERROR 0x2 |
| #define NGX_HTTP_V2_FLOW_CTRL_ERROR 0x3 |
| #define NGX_HTTP_V2_SETTINGS_TIMEOUT 0x4 |
| #define NGX_HTTP_V2_STREAM_CLOSED 0x5 |
| #define NGX_HTTP_V2_SIZE_ERROR 0x6 |
| #define NGX_HTTP_V2_REFUSED_STREAM 0x7 |
| #define NGX_HTTP_V2_CANCEL 0x8 |
| #define NGX_HTTP_V2_COMP_ERROR 0x9 |
| #define NGX_HTTP_V2_CONNECT_ERROR 0xa |
| #define NGX_HTTP_V2_ENHANCE_YOUR_CALM 0xb |
| #define NGX_HTTP_V2_INADEQUATE_SECURITY 0xc |
| #define NGX_HTTP_V2_HTTP_1_1_REQUIRED 0xd |
| |
| /* frame sizes */ |
| #define NGX_HTTP_V2_SETTINGS_ACK_SIZE 0 |
| #define NGX_HTTP_V2_RST_STREAM_SIZE 4 |
| #define NGX_HTTP_V2_PRIORITY_SIZE 5 |
| #define NGX_HTTP_V2_PING_SIZE 8 |
| #define NGX_HTTP_V2_GOAWAY_SIZE 8 |
| #define NGX_HTTP_V2_WINDOW_UPDATE_SIZE 4 |
| |
| #define NGX_HTTP_V2_SETTINGS_PARAM_SIZE 6 |
| |
| /* settings fields */ |
| #define NGX_HTTP_V2_HEADER_TABLE_SIZE_SETTING 0x1 |
| #define NGX_HTTP_V2_ENABLE_PUSH_SETTING 0x2 |
| #define NGX_HTTP_V2_MAX_STREAMS_SETTING 0x3 |
| #define NGX_HTTP_V2_INIT_WINDOW_SIZE_SETTING 0x4 |
| #define NGX_HTTP_V2_MAX_FRAME_SIZE_SETTING 0x5 |
| |
| #define NGX_HTTP_V2_FRAME_BUFFER_SIZE 24 |
| |
| #define NGX_HTTP_V2_ROOT (void *) -1 |
| |
| |
| static void ngx_http_v2_read_handler(ngx_event_t *rev); |
| static void ngx_http_v2_write_handler(ngx_event_t *wev); |
| static void ngx_http_v2_handle_connection(ngx_http_v2_connection_t *h2c); |
| |
| static u_char *ngx_http_v2_state_proxy_protocol(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_preface(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_preface_end(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_head(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_data(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_read_data(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_headers(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_header_block(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_field_len(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_field_huff(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_field_raw(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_field_skip(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_process_header(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_header_complete(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_handle_continuation(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end, ngx_http_v2_handler_pt handler); |
| static u_char *ngx_http_v2_state_priority(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_rst_stream(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_settings(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_settings_params(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_push_promise(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_ping(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_goaway(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_window_update(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_continuation(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_complete(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_skip_padded(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_skip(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end); |
| static u_char *ngx_http_v2_state_save(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end, ngx_http_v2_handler_pt handler); |
| static u_char *ngx_http_v2_state_headers_save(ngx_http_v2_connection_t *h2c, |
| u_char *pos, u_char *end, ngx_http_v2_handler_pt handler); |
| static u_char *ngx_http_v2_connection_error(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t err); |
| |
| static ngx_int_t ngx_http_v2_parse_int(ngx_http_v2_connection_t *h2c, |
| u_char **pos, u_char *end, ngx_uint_t prefix); |
| |
| static ngx_http_v2_stream_t *ngx_http_v2_create_stream( |
| ngx_http_v2_connection_t *h2c, ngx_uint_t push); |
| static ngx_http_v2_node_t *ngx_http_v2_get_node_by_id( |
| ngx_http_v2_connection_t *h2c, ngx_uint_t sid, ngx_uint_t alloc); |
| static ngx_http_v2_node_t *ngx_http_v2_get_closed_node( |
| ngx_http_v2_connection_t *h2c); |
| #define ngx_http_v2_index_size(h2scf) (h2scf->streams_index_mask + 1) |
| #define ngx_http_v2_index(h2scf, sid) ((sid >> 1) & h2scf->streams_index_mask) |
| |
| static ngx_int_t ngx_http_v2_send_settings(ngx_http_v2_connection_t *h2c); |
| static ngx_int_t ngx_http_v2_settings_frame_handler( |
| ngx_http_v2_connection_t *h2c, ngx_http_v2_out_frame_t *frame); |
| static ngx_int_t ngx_http_v2_send_window_update(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t sid, size_t window); |
| static ngx_int_t ngx_http_v2_send_rst_stream(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t sid, ngx_uint_t status); |
| static ngx_int_t ngx_http_v2_send_goaway(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t status); |
| |
| static ngx_http_v2_out_frame_t *ngx_http_v2_get_frame( |
| ngx_http_v2_connection_t *h2c, size_t length, ngx_uint_t type, |
| u_char flags, ngx_uint_t sid); |
| static ngx_int_t ngx_http_v2_frame_handler(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_out_frame_t *frame); |
| |
| static ngx_int_t ngx_http_v2_validate_header(ngx_http_request_t *r, |
| ngx_http_v2_header_t *header); |
| static ngx_int_t ngx_http_v2_pseudo_header(ngx_http_request_t *r, |
| ngx_http_v2_header_t *header); |
| static ngx_int_t ngx_http_v2_parse_path(ngx_http_request_t *r, |
| ngx_str_t *value); |
| static ngx_int_t ngx_http_v2_parse_method(ngx_http_request_t *r, |
| ngx_str_t *value); |
| static ngx_int_t ngx_http_v2_parse_scheme(ngx_http_request_t *r, |
| ngx_str_t *value); |
| static ngx_int_t ngx_http_v2_parse_authority(ngx_http_request_t *r, |
| ngx_str_t *value); |
| static ngx_int_t ngx_http_v2_parse_header(ngx_http_request_t *r, |
| ngx_http_v2_parse_header_t *header, ngx_str_t *value); |
| static ngx_int_t ngx_http_v2_construct_request_line(ngx_http_request_t *r); |
| static ngx_int_t ngx_http_v2_cookie(ngx_http_request_t *r, |
| ngx_http_v2_header_t *header); |
| static ngx_int_t ngx_http_v2_construct_cookie_header(ngx_http_request_t *r); |
| static void ngx_http_v2_run_request(ngx_http_request_t *r); |
| static void ngx_http_v2_run_request_handler(ngx_event_t *ev); |
| static ngx_int_t ngx_http_v2_process_request_body(ngx_http_request_t *r, |
| u_char *pos, size_t size, ngx_uint_t last); |
| static ngx_int_t ngx_http_v2_filter_request_body(ngx_http_request_t *r); |
| static void ngx_http_v2_read_client_request_body_handler(ngx_http_request_t *r); |
| |
| static ngx_int_t ngx_http_v2_terminate_stream(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_stream_t *stream, ngx_uint_t status); |
| static void ngx_http_v2_close_stream_handler(ngx_event_t *ev); |
| static void ngx_http_v2_handle_connection_handler(ngx_event_t *rev); |
| static void ngx_http_v2_idle_handler(ngx_event_t *rev); |
| static void ngx_http_v2_finalize_connection(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t status); |
| |
| static ngx_int_t ngx_http_v2_adjust_windows(ngx_http_v2_connection_t *h2c, |
| ssize_t delta); |
| static void ngx_http_v2_set_dependency(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_node_t *node, ngx_uint_t depend, ngx_uint_t exclusive); |
| static void ngx_http_v2_node_children_update(ngx_http_v2_node_t *node); |
| |
| static void ngx_http_v2_pool_cleanup(void *data); |
| |
| |
| static ngx_http_v2_handler_pt ngx_http_v2_frame_states[] = { |
| ngx_http_v2_state_data, /* NGX_HTTP_V2_DATA_FRAME */ |
| ngx_http_v2_state_headers, /* NGX_HTTP_V2_HEADERS_FRAME */ |
| ngx_http_v2_state_priority, /* NGX_HTTP_V2_PRIORITY_FRAME */ |
| ngx_http_v2_state_rst_stream, /* NGX_HTTP_V2_RST_STREAM_FRAME */ |
| ngx_http_v2_state_settings, /* NGX_HTTP_V2_SETTINGS_FRAME */ |
| ngx_http_v2_state_push_promise, /* NGX_HTTP_V2_PUSH_PROMISE_FRAME */ |
| ngx_http_v2_state_ping, /* NGX_HTTP_V2_PING_FRAME */ |
| ngx_http_v2_state_goaway, /* NGX_HTTP_V2_GOAWAY_FRAME */ |
| ngx_http_v2_state_window_update, /* NGX_HTTP_V2_WINDOW_UPDATE_FRAME */ |
| ngx_http_v2_state_continuation /* NGX_HTTP_V2_CONTINUATION_FRAME */ |
| }; |
| |
| #define NGX_HTTP_V2_FRAME_STATES \ |
| (sizeof(ngx_http_v2_frame_states) / sizeof(ngx_http_v2_handler_pt)) |
| |
| |
| static ngx_http_v2_parse_header_t ngx_http_v2_parse_headers[] = { |
| { ngx_string("host"), |
| offsetof(ngx_http_headers_in_t, host), 0, NULL }, |
| |
| { ngx_string("accept-encoding"), |
| offsetof(ngx_http_headers_in_t, accept_encoding), 0, NULL }, |
| |
| { ngx_string("accept-language"), |
| offsetof(ngx_http_headers_in_t, accept_language), 0, NULL }, |
| |
| { ngx_string("user-agent"), |
| offsetof(ngx_http_headers_in_t, user_agent), 0, NULL }, |
| |
| { ngx_null_string, 0, 0, NULL } |
| }; |
| |
| |
| void |
| ngx_http_v2_init(ngx_event_t *rev) |
| { |
| ngx_connection_t *c; |
| ngx_pool_cleanup_t *cln; |
| ngx_http_connection_t *hc; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_v2_main_conf_t *h2mcf; |
| ngx_http_v2_connection_t *h2c; |
| |
| c = rev->data; |
| hc = c->data; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "init http2 connection"); |
| |
| c->log->action = "processing HTTP/2 connection"; |
| |
| h2mcf = ngx_http_get_module_main_conf(hc->conf_ctx, ngx_http_v2_module); |
| |
| if (h2mcf->recv_buffer == NULL) { |
| h2mcf->recv_buffer = ngx_palloc(ngx_cycle->pool, |
| h2mcf->recv_buffer_size); |
| if (h2mcf->recv_buffer == NULL) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| } |
| |
| h2c = ngx_pcalloc(c->pool, sizeof(ngx_http_v2_connection_t)); |
| if (h2c == NULL) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| h2c->connection = c; |
| h2c->http_connection = hc; |
| |
| h2c->send_window = NGX_HTTP_V2_DEFAULT_WINDOW; |
| h2c->recv_window = NGX_HTTP_V2_MAX_WINDOW; |
| |
| h2c->init_window = NGX_HTTP_V2_DEFAULT_WINDOW; |
| |
| h2c->frame_size = NGX_HTTP_V2_DEFAULT_FRAME_SIZE; |
| |
| h2c->table_update = 1; |
| |
| h2scf = ngx_http_get_module_srv_conf(hc->conf_ctx, ngx_http_v2_module); |
| |
| h2c->concurrent_pushes = h2scf->concurrent_pushes; |
| |
| h2c->pool = ngx_create_pool(h2scf->pool_size, h2c->connection->log); |
| if (h2c->pool == NULL) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| cln = ngx_pool_cleanup_add(c->pool, 0); |
| if (cln == NULL) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| cln->handler = ngx_http_v2_pool_cleanup; |
| cln->data = h2c; |
| |
| h2c->streams_index = ngx_pcalloc(c->pool, ngx_http_v2_index_size(h2scf) |
| * sizeof(ngx_http_v2_node_t *)); |
| if (h2c->streams_index == NULL) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| if (ngx_http_v2_send_settings(h2c) == NGX_ERROR) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| if (ngx_http_v2_send_window_update(h2c, 0, NGX_HTTP_V2_MAX_WINDOW |
| - NGX_HTTP_V2_DEFAULT_WINDOW) |
| == NGX_ERROR) |
| { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| h2c->state.handler = hc->proxy_protocol ? ngx_http_v2_state_proxy_protocol |
| : ngx_http_v2_state_preface; |
| |
| ngx_queue_init(&h2c->waiting); |
| ngx_queue_init(&h2c->dependencies); |
| ngx_queue_init(&h2c->closed); |
| |
| c->data = h2c; |
| |
| rev->handler = ngx_http_v2_read_handler; |
| c->write->handler = ngx_http_v2_write_handler; |
| |
| c->idle = 1; |
| |
| ngx_http_v2_read_handler(rev); |
| } |
| |
| |
| static void |
| ngx_http_v2_read_handler(ngx_event_t *rev) |
| { |
| u_char *p, *end; |
| size_t available; |
| ssize_t n; |
| ngx_connection_t *c; |
| ngx_http_v2_main_conf_t *h2mcf; |
| ngx_http_v2_connection_t *h2c; |
| |
| c = rev->data; |
| h2c = c->data; |
| |
| if (rev->timedout) { |
| ngx_log_error(NGX_LOG_INFO, c->log, NGX_ETIMEDOUT, "client timed out"); |
| ngx_http_v2_finalize_connection(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| return; |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "http2 read handler"); |
| |
| h2c->blocked = 1; |
| |
| if (c->close) { |
| c->close = 0; |
| |
| if (!h2c->goaway) { |
| h2c->goaway = 1; |
| |
| if (ngx_http_v2_send_goaway(h2c, NGX_HTTP_V2_NO_ERROR) |
| == NGX_ERROR) |
| { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| if (ngx_http_v2_send_output_queue(h2c) == NGX_ERROR) { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| } |
| |
| h2c->blocked = 0; |
| |
| return; |
| } |
| |
| h2mcf = ngx_http_get_module_main_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| available = h2mcf->recv_buffer_size - 2 * NGX_HTTP_V2_STATE_BUFFER_SIZE; |
| |
| do { |
| p = h2mcf->recv_buffer; |
| |
| ngx_memcpy(p, h2c->state.buffer, NGX_HTTP_V2_STATE_BUFFER_SIZE); |
| end = p + h2c->state.buffer_used; |
| |
| n = c->recv(c, end, available); |
| |
| if (n == NGX_AGAIN) { |
| break; |
| } |
| |
| if (n == 0 |
| && (h2c->state.incomplete || h2c->processing || h2c->pushing)) |
| { |
| ngx_log_error(NGX_LOG_INFO, c->log, 0, |
| "client prematurely closed connection"); |
| } |
| |
| if (n == 0 || n == NGX_ERROR) { |
| c->error = 1; |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| end += n; |
| |
| h2c->state.buffer_used = 0; |
| h2c->state.incomplete = 0; |
| |
| do { |
| p = h2c->state.handler(h2c, p, end); |
| |
| if (p == NULL) { |
| return; |
| } |
| |
| } while (p != end); |
| |
| } while (rev->ready); |
| |
| if (ngx_handle_read_event(rev, 0) != NGX_OK) { |
| ngx_http_v2_finalize_connection(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| return; |
| } |
| |
| if (h2c->last_out && ngx_http_v2_send_output_queue(h2c) == NGX_ERROR) { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| h2c->blocked = 0; |
| |
| if (h2c->processing || h2c->pushing) { |
| if (rev->timer_set) { |
| ngx_del_timer(rev); |
| } |
| |
| return; |
| } |
| |
| ngx_http_v2_handle_connection(h2c); |
| } |
| |
| |
| static void |
| ngx_http_v2_write_handler(ngx_event_t *wev) |
| { |
| ngx_int_t rc; |
| ngx_connection_t *c; |
| ngx_http_v2_connection_t *h2c; |
| |
| c = wev->data; |
| h2c = c->data; |
| |
| if (wev->timedout) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, |
| "http2 write event timed out"); |
| c->error = 1; |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "http2 write handler"); |
| |
| if (h2c->last_out == NULL && !c->buffered) { |
| |
| if (wev->timer_set) { |
| ngx_del_timer(wev); |
| } |
| |
| ngx_http_v2_handle_connection(h2c); |
| return; |
| } |
| |
| h2c->blocked = 1; |
| |
| rc = ngx_http_v2_send_output_queue(h2c); |
| |
| if (rc == NGX_ERROR) { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| h2c->blocked = 0; |
| |
| if (rc == NGX_AGAIN) { |
| return; |
| } |
| |
| ngx_http_v2_handle_connection(h2c); |
| } |
| |
| |
| ngx_int_t |
| ngx_http_v2_send_output_queue(ngx_http_v2_connection_t *h2c) |
| { |
| int tcp_nodelay; |
| ngx_chain_t *cl; |
| ngx_event_t *wev; |
| ngx_connection_t *c; |
| ngx_http_v2_out_frame_t *out, *frame, *fn; |
| ngx_http_core_loc_conf_t *clcf; |
| |
| c = h2c->connection; |
| |
| if (c->error) { |
| return NGX_ERROR; |
| } |
| |
| wev = c->write; |
| |
| if (!wev->ready) { |
| return NGX_AGAIN; |
| } |
| |
| cl = NULL; |
| out = NULL; |
| |
| for (frame = h2c->last_out; frame; frame = fn) { |
| frame->last->next = cl; |
| cl = frame->first; |
| |
| fn = frame->next; |
| frame->next = out; |
| out = frame; |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, c->log, 0, |
| "http2 frame out: %p sid:%ui bl:%d len:%uz", |
| out, out->stream ? out->stream->node->id : 0, |
| out->blocked, out->length); |
| } |
| |
| cl = c->send_chain(c, cl, 0); |
| |
| if (cl == NGX_CHAIN_ERROR) { |
| goto error; |
| } |
| |
| clcf = ngx_http_get_module_loc_conf(h2c->http_connection->conf_ctx, |
| ngx_http_core_module); |
| |
| if (ngx_handle_write_event(wev, clcf->send_lowat) != NGX_OK) { |
| goto error; |
| } |
| |
| if (c->tcp_nopush == NGX_TCP_NOPUSH_SET) { |
| if (ngx_tcp_push(c->fd) == -1) { |
| ngx_connection_error(c, ngx_socket_errno, ngx_tcp_push_n " failed"); |
| goto error; |
| } |
| |
| c->tcp_nopush = NGX_TCP_NOPUSH_UNSET; |
| tcp_nodelay = ngx_tcp_nodelay_and_tcp_nopush ? 1 : 0; |
| |
| } else { |
| tcp_nodelay = 1; |
| } |
| |
| if (tcp_nodelay && clcf->tcp_nodelay && ngx_tcp_nodelay(c) != NGX_OK) { |
| goto error; |
| } |
| |
| for ( /* void */ ; out; out = fn) { |
| fn = out->next; |
| |
| if (out->handler(h2c, out) != NGX_OK) { |
| out->blocked = 1; |
| break; |
| } |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, c->log, 0, |
| "http2 frame sent: %p sid:%ui bl:%d len:%uz", |
| out, out->stream ? out->stream->node->id : 0, |
| out->blocked, out->length); |
| } |
| |
| frame = NULL; |
| |
| for ( /* void */ ; out; out = fn) { |
| fn = out->next; |
| out->next = frame; |
| frame = out; |
| } |
| |
| h2c->last_out = frame; |
| |
| if (!wev->ready) { |
| ngx_add_timer(wev, clcf->send_timeout); |
| return NGX_AGAIN; |
| } |
| |
| if (wev->timer_set) { |
| ngx_del_timer(wev); |
| } |
| |
| return NGX_OK; |
| |
| error: |
| |
| c->error = 1; |
| |
| if (!h2c->blocked) { |
| ngx_post_event(wev, &ngx_posted_events); |
| } |
| |
| return NGX_ERROR; |
| } |
| |
| |
| static void |
| ngx_http_v2_handle_connection(ngx_http_v2_connection_t *h2c) |
| { |
| ngx_int_t rc; |
| ngx_connection_t *c; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| if (h2c->last_out || h2c->processing || h2c->pushing) { |
| return; |
| } |
| |
| c = h2c->connection; |
| |
| if (c->error) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| if (c->buffered) { |
| h2c->blocked = 1; |
| |
| rc = ngx_http_v2_send_output_queue(h2c); |
| |
| h2c->blocked = 0; |
| |
| if (rc == NGX_ERROR) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| if (rc == NGX_AGAIN) { |
| return; |
| } |
| |
| /* rc == NGX_OK */ |
| } |
| |
| if (h2c->goaway) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| if (h2c->state.incomplete) { |
| ngx_add_timer(c->read, h2scf->recv_timeout); |
| return; |
| } |
| |
| ngx_destroy_pool(h2c->pool); |
| |
| h2c->pool = NULL; |
| h2c->free_frames = NULL; |
| h2c->free_fake_connections = NULL; |
| |
| #if (NGX_HTTP_SSL) |
| if (c->ssl) { |
| ngx_ssl_free_buffer(c); |
| } |
| #endif |
| |
| c->destroyed = 1; |
| ngx_reusable_connection(c, 1); |
| |
| c->write->handler = ngx_http_empty_handler; |
| c->read->handler = ngx_http_v2_idle_handler; |
| |
| if (c->write->timer_set) { |
| ngx_del_timer(c->write); |
| } |
| |
| ngx_add_timer(c->read, h2scf->idle_timeout); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_proxy_protocol(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_log_t *log; |
| |
| log = h2c->connection->log; |
| log->action = "reading PROXY protocol"; |
| |
| pos = ngx_proxy_protocol_read(h2c->connection, pos, end); |
| |
| log->action = "processing HTTP/2 connection"; |
| |
| if (pos == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| return ngx_http_v2_state_preface(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_preface(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| static const u_char preface[] = "PRI * HTTP/2.0\r\n"; |
| |
| if ((size_t) (end - pos) < sizeof(preface) - 1) { |
| return ngx_http_v2_state_save(h2c, pos, end, ngx_http_v2_state_preface); |
| } |
| |
| if (ngx_memcmp(pos, preface, sizeof(preface) - 1) != 0) { |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "invalid http2 connection preface \"%*s\"", |
| sizeof(preface) - 1, pos); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| return ngx_http_v2_state_preface_end(h2c, pos + sizeof(preface) - 1, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_preface_end(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| static const u_char preface[] = "\r\nSM\r\n\r\n"; |
| |
| if ((size_t) (end - pos) < sizeof(preface) - 1) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_preface_end); |
| } |
| |
| if (ngx_memcmp(pos, preface, sizeof(preface) - 1) != 0) { |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "invalid http2 connection preface \"%*s\"", |
| sizeof(preface) - 1, pos); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 preface verified"); |
| |
| return ngx_http_v2_state_head(h2c, pos + sizeof(preface) - 1, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_head(ngx_http_v2_connection_t *h2c, u_char *pos, u_char *end) |
| { |
| uint32_t head; |
| ngx_uint_t type; |
| |
| if (end - pos < NGX_HTTP_V2_FRAME_HEADER_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, ngx_http_v2_state_head); |
| } |
| |
| head = ngx_http_v2_parse_uint32(pos); |
| |
| h2c->state.length = ngx_http_v2_parse_length(head); |
| h2c->state.flags = pos[4]; |
| |
| h2c->state.sid = ngx_http_v2_parse_sid(&pos[5]); |
| |
| pos += NGX_HTTP_V2_FRAME_HEADER_SIZE; |
| |
| type = ngx_http_v2_parse_type(head); |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 frame type:%ui f:%Xd l:%uz sid:%ui", |
| type, h2c->state.flags, h2c->state.length, h2c->state.sid); |
| |
| if (type >= NGX_HTTP_V2_FRAME_STATES) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent frame with unknown type %ui", type); |
| return ngx_http_v2_state_skip(h2c, pos, end); |
| } |
| |
| return ngx_http_v2_frame_states[type](h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_data(ngx_http_v2_connection_t *h2c, u_char *pos, u_char *end) |
| { |
| size_t size; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| |
| size = h2c->state.length; |
| |
| if (h2c->state.flags & NGX_HTTP_V2_PADDED_FLAG) { |
| |
| if (h2c->state.length == 0) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent padded DATA frame " |
| "with incorrect length: 0"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos == 0) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_data); |
| } |
| |
| h2c->state.padding = *pos++; |
| |
| if (h2c->state.padding >= size) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent padded DATA frame " |
| "with incorrect length: %uz, padding: %uz", |
| size, h2c->state.padding); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->state.length -= 1 + h2c->state.padding; |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 DATA frame"); |
| |
| if (size > h2c->recv_window) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client violated connection flow control: " |
| "received DATA frame length %uz, available window %uz", |
| size, h2c->recv_window); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_FLOW_CTRL_ERROR); |
| } |
| |
| h2c->recv_window -= size; |
| |
| if (h2c->recv_window < NGX_HTTP_V2_MAX_WINDOW / 4) { |
| |
| if (ngx_http_v2_send_window_update(h2c, 0, NGX_HTTP_V2_MAX_WINDOW |
| - h2c->recv_window) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h2c->recv_window = NGX_HTTP_V2_MAX_WINDOW; |
| } |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 0); |
| |
| if (node == NULL || node->stream == NULL) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "unknown http2 stream"); |
| |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| stream = node->stream; |
| |
| if (size > stream->recv_window) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client violated flow control for stream %ui: " |
| "received DATA frame length %uz, available window %uz", |
| node->id, size, stream->recv_window); |
| |
| if (ngx_http_v2_terminate_stream(h2c, stream, |
| NGX_HTTP_V2_FLOW_CTRL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| stream->recv_window -= size; |
| |
| if (stream->no_flow_control |
| && stream->recv_window < NGX_HTTP_V2_MAX_WINDOW / 4) |
| { |
| if (ngx_http_v2_send_window_update(h2c, node->id, |
| NGX_HTTP_V2_MAX_WINDOW |
| - stream->recv_window) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| stream->recv_window = NGX_HTTP_V2_MAX_WINDOW; |
| } |
| |
| if (stream->in_closed) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent DATA frame for half-closed stream %ui", |
| node->id); |
| |
| if (ngx_http_v2_terminate_stream(h2c, stream, |
| NGX_HTTP_V2_STREAM_CLOSED) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| h2c->state.stream = stream; |
| |
| return ngx_http_v2_state_read_data(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_read_data(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t size; |
| ngx_buf_t *buf; |
| ngx_int_t rc; |
| ngx_http_request_t *r; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| stream = h2c->state.stream; |
| |
| if (stream == NULL) { |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| if (stream->skip_data) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "skipping http2 DATA frame"); |
| |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| size = end - pos; |
| |
| if (size >= h2c->state.length) { |
| size = h2c->state.length; |
| stream->in_closed = h2c->state.flags & NGX_HTTP_V2_END_STREAM_FLAG; |
| } |
| |
| r = stream->request; |
| |
| if (r->request_body) { |
| rc = ngx_http_v2_process_request_body(r, pos, size, stream->in_closed); |
| |
| if (rc != NGX_OK) { |
| stream->skip_data = 1; |
| ngx_http_finalize_request(r, rc); |
| } |
| |
| } else if (size) { |
| buf = stream->preread; |
| |
| if (buf == NULL) { |
| h2scf = ngx_http_get_module_srv_conf(r, ngx_http_v2_module); |
| |
| buf = ngx_create_temp_buf(r->pool, h2scf->preread_size); |
| if (buf == NULL) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| stream->preread = buf; |
| } |
| |
| if (size > (size_t) (buf->end - buf->last)) { |
| ngx_log_error(NGX_LOG_ALERT, h2c->connection->log, 0, |
| "http2 preread buffer overflow"); |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| buf->last = ngx_cpymem(buf->last, pos, size); |
| } |
| |
| pos += size; |
| h2c->state.length -= size; |
| |
| if (h2c->state.length) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_read_data); |
| } |
| |
| if (h2c->state.padding) { |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_headers(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t size; |
| ngx_uint_t padded, priority, depend, dependency, excl, weight; |
| ngx_uint_t status; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| padded = h2c->state.flags & NGX_HTTP_V2_PADDED_FLAG; |
| priority = h2c->state.flags & NGX_HTTP_V2_PRIORITY_FLAG; |
| |
| size = 0; |
| |
| if (padded) { |
| size++; |
| } |
| |
| if (priority) { |
| size += sizeof(uint32_t) + 1; |
| } |
| |
| if (h2c->state.length < size) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent HEADERS frame with incorrect length %uz", |
| h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (h2c->state.length == size) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent HEADERS frame with empty header block"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (h2c->goaway) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "skipping http2 HEADERS frame"); |
| return ngx_http_v2_state_skip(h2c, pos, end); |
| } |
| |
| if ((size_t) (end - pos) < size) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_headers); |
| } |
| |
| h2c->state.length -= size; |
| |
| if (padded) { |
| h2c->state.padding = *pos++; |
| |
| if (h2c->state.padding > h2c->state.length) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent padded HEADERS frame " |
| "with incorrect length: %uz, padding: %uz", |
| h2c->state.length, h2c->state.padding); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->state.length -= h2c->state.padding; |
| } |
| |
| depend = 0; |
| excl = 0; |
| weight = NGX_HTTP_V2_DEFAULT_WEIGHT; |
| |
| if (priority) { |
| dependency = ngx_http_v2_parse_uint32(pos); |
| |
| depend = dependency & 0x7fffffff; |
| excl = dependency >> 31; |
| weight = pos[4] + 1; |
| |
| pos += sizeof(uint32_t) + 1; |
| } |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 HEADERS frame sid:%ui " |
| "depends on %ui excl:%ui weight:%ui", |
| h2c->state.sid, depend, excl, weight); |
| |
| if (h2c->state.sid % 2 == 0 || h2c->state.sid <= h2c->last_sid) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent HEADERS frame with incorrect identifier " |
| "%ui, the last was %ui", h2c->state.sid, h2c->last_sid); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->last_sid = h2c->state.sid; |
| |
| h2c->state.pool = ngx_create_pool(1024, h2c->connection->log); |
| if (h2c->state.pool == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| if (depend == h2c->state.sid) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent HEADERS frame for stream %ui " |
| "with incorrect dependency", h2c->state.sid); |
| |
| status = NGX_HTTP_V2_PROTOCOL_ERROR; |
| goto rst_stream; |
| } |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| h2c->state.header_limit = h2scf->max_header_size; |
| |
| if (h2c->processing >= h2scf->concurrent_streams) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "concurrent streams exceeded %ui", h2c->processing); |
| |
| status = NGX_HTTP_V2_REFUSED_STREAM; |
| goto rst_stream; |
| } |
| |
| if (!h2c->settings_ack |
| && !(h2c->state.flags & NGX_HTTP_V2_END_STREAM_FLAG) |
| && h2scf->preread_size < NGX_HTTP_V2_DEFAULT_WINDOW) |
| { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent stream with data " |
| "before settings were acknowledged"); |
| |
| status = NGX_HTTP_V2_REFUSED_STREAM; |
| goto rst_stream; |
| } |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 1); |
| |
| if (node == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| if (node->parent) { |
| ngx_queue_remove(&node->reuse); |
| h2c->closed_nodes--; |
| } |
| |
| stream = ngx_http_v2_create_stream(h2c, 0); |
| if (stream == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h2c->state.stream = stream; |
| |
| stream->pool = h2c->state.pool; |
| h2c->state.keep_pool = 1; |
| |
| stream->request->request_length = h2c->state.length; |
| |
| stream->in_closed = h2c->state.flags & NGX_HTTP_V2_END_STREAM_FLAG; |
| stream->node = node; |
| |
| node->stream = stream; |
| |
| if (priority || node->parent == NULL) { |
| node->weight = weight; |
| ngx_http_v2_set_dependency(h2c, node, depend, excl); |
| } |
| |
| if (h2c->connection->requests >= h2scf->max_requests) { |
| h2c->goaway = 1; |
| |
| if (ngx_http_v2_send_goaway(h2c, NGX_HTTP_V2_NO_ERROR) == NGX_ERROR) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| } |
| |
| return ngx_http_v2_state_header_block(h2c, pos, end); |
| |
| rst_stream: |
| |
| if (ngx_http_v2_send_rst_stream(h2c, h2c->state.sid, status) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| return ngx_http_v2_state_header_block(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_header_block(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| u_char ch; |
| ngx_int_t value; |
| ngx_uint_t indexed, size_update, prefix; |
| |
| if (end - pos < 1) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_header_block); |
| } |
| |
| if (!(h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG) |
| && h2c->state.length < NGX_HTTP_V2_INT_OCTETS) |
| { |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_header_block); |
| } |
| |
| size_update = 0; |
| indexed = 0; |
| |
| ch = *pos; |
| |
| if (ch >= (1 << 7)) { |
| /* indexed header field */ |
| indexed = 1; |
| prefix = ngx_http_v2_prefix(7); |
| |
| } else if (ch >= (1 << 6)) { |
| /* literal header field with incremental indexing */ |
| h2c->state.index = 1; |
| prefix = ngx_http_v2_prefix(6); |
| |
| } else if (ch >= (1 << 5)) { |
| /* dynamic table size update */ |
| size_update = 1; |
| prefix = ngx_http_v2_prefix(5); |
| |
| } else if (ch >= (1 << 4)) { |
| /* literal header field never indexed */ |
| prefix = ngx_http_v2_prefix(4); |
| |
| } else { |
| /* literal header field without indexing */ |
| prefix = ngx_http_v2_prefix(4); |
| } |
| |
| value = ngx_http_v2_parse_int(h2c, &pos, end, prefix); |
| |
| if (value < 0) { |
| if (value == NGX_AGAIN) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_header_block); |
| } |
| |
| if (value == NGX_DECLINED) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header block with too long %s value", |
| size_update ? "size update" : "header index"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header block with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (indexed) { |
| if (ngx_http_v2_get_indexed_header(h2c, value, 0) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| return ngx_http_v2_state_process_header(h2c, pos, end); |
| } |
| |
| if (size_update) { |
| if (ngx_http_v2_table_size(h2c, value) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| } |
| |
| if (value == 0) { |
| h2c->state.parse_name = 1; |
| |
| } else if (ngx_http_v2_get_indexed_header(h2c, value, 1) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| h2c->state.parse_value = 1; |
| |
| return ngx_http_v2_state_field_len(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_field_len(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t alloc; |
| ngx_int_t len; |
| ngx_uint_t huff; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| if (!(h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG) |
| && h2c->state.length < NGX_HTTP_V2_INT_OCTETS) |
| { |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_field_len); |
| } |
| |
| if (h2c->state.length < 1) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header block with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < 1) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_field_len); |
| } |
| |
| huff = *pos >> 7; |
| len = ngx_http_v2_parse_int(h2c, &pos, end, ngx_http_v2_prefix(7)); |
| |
| if (len < 0) { |
| if (len == NGX_AGAIN) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_field_len); |
| } |
| |
| if (len == NGX_DECLINED) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header field with too long length value"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header block with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 %s string, len:%i", |
| huff ? "encoded" : "raw", len); |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| if ((size_t) len > h2scf->max_field_size) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client exceeded http2_max_field_size limit"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_ENHANCE_YOUR_CALM); |
| } |
| |
| h2c->state.field_rest = len; |
| |
| if (h2c->state.stream == NULL && !h2c->state.index) { |
| return ngx_http_v2_state_field_skip(h2c, pos, end); |
| } |
| |
| alloc = (huff ? len * 8 / 5 : len) + 1; |
| |
| h2c->state.field_start = ngx_pnalloc(h2c->state.pool, alloc); |
| if (h2c->state.field_start == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h2c->state.field_end = h2c->state.field_start; |
| |
| if (huff) { |
| return ngx_http_v2_state_field_huff(h2c, pos, end); |
| } |
| |
| return ngx_http_v2_state_field_raw(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_field_huff(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t size; |
| |
| size = end - pos; |
| |
| if (size > h2c->state.field_rest) { |
| size = h2c->state.field_rest; |
| } |
| |
| if (size > h2c->state.length) { |
| size = h2c->state.length; |
| } |
| |
| h2c->state.length -= size; |
| h2c->state.field_rest -= size; |
| |
| if (ngx_http_v2_huff_decode(&h2c->state.field_state, pos, size, |
| &h2c->state.field_end, |
| h2c->state.field_rest == 0, |
| h2c->connection->log) |
| != NGX_OK) |
| { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent invalid encoded header field"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_COMP_ERROR); |
| } |
| |
| pos += size; |
| |
| if (h2c->state.field_rest == 0) { |
| *h2c->state.field_end = '\0'; |
| return ngx_http_v2_state_process_header(h2c, pos, end); |
| } |
| |
| if (h2c->state.length) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_field_huff); |
| } |
| |
| if (h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header field with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_field_huff); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_field_raw(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t size; |
| |
| size = end - pos; |
| |
| if (size > h2c->state.field_rest) { |
| size = h2c->state.field_rest; |
| } |
| |
| if (size > h2c->state.length) { |
| size = h2c->state.length; |
| } |
| |
| h2c->state.length -= size; |
| h2c->state.field_rest -= size; |
| |
| h2c->state.field_end = ngx_cpymem(h2c->state.field_end, pos, size); |
| |
| pos += size; |
| |
| if (h2c->state.field_rest == 0) { |
| *h2c->state.field_end = '\0'; |
| return ngx_http_v2_state_process_header(h2c, pos, end); |
| } |
| |
| if (h2c->state.length) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, |
| ngx_http_v2_state_field_raw); |
| } |
| |
| if (h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header field with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_field_raw); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_field_skip(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t size; |
| |
| size = end - pos; |
| |
| if (size > h2c->state.field_rest) { |
| size = h2c->state.field_rest; |
| } |
| |
| if (size > h2c->state.length) { |
| size = h2c->state.length; |
| } |
| |
| h2c->state.length -= size; |
| h2c->state.field_rest -= size; |
| |
| pos += size; |
| |
| if (h2c->state.field_rest == 0) { |
| return ngx_http_v2_state_process_header(h2c, pos, end); |
| } |
| |
| if (h2c->state.length) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_field_skip); |
| } |
| |
| if (h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent header field with incorrect length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_field_skip); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_process_header(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t len; |
| ngx_int_t rc; |
| ngx_table_elt_t *h; |
| ngx_http_header_t *hh; |
| ngx_http_request_t *r; |
| ngx_http_v2_header_t *header; |
| ngx_http_core_srv_conf_t *cscf; |
| ngx_http_core_main_conf_t *cmcf; |
| |
| static ngx_str_t cookie = ngx_string("cookie"); |
| |
| header = &h2c->state.header; |
| |
| if (h2c->state.parse_name) { |
| h2c->state.parse_name = 0; |
| |
| header->name.len = h2c->state.field_end - h2c->state.field_start; |
| header->name.data = h2c->state.field_start; |
| |
| return ngx_http_v2_state_field_len(h2c, pos, end); |
| } |
| |
| if (h2c->state.parse_value) { |
| h2c->state.parse_value = 0; |
| |
| header->value.len = h2c->state.field_end - h2c->state.field_start; |
| header->value.data = h2c->state.field_start; |
| } |
| |
| len = header->name.len + header->value.len; |
| |
| if (len > h2c->state.header_limit) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client exceeded http2_max_header_size limit"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_ENHANCE_YOUR_CALM); |
| } |
| |
| h2c->state.header_limit -= len; |
| |
| if (h2c->state.index) { |
| if (ngx_http_v2_add_header(h2c, header) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h2c->state.index = 0; |
| } |
| |
| if (h2c->state.stream == NULL) { |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| } |
| |
| r = h2c->state.stream->request; |
| |
| /* TODO Optimization: validate headers while parsing. */ |
| if (ngx_http_v2_validate_header(r, header) != NGX_OK) { |
| if (ngx_http_v2_terminate_stream(h2c, h2c->state.stream, |
| NGX_HTTP_V2_PROTOCOL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| goto error; |
| } |
| |
| if (header->name.data[0] == ':') { |
| rc = ngx_http_v2_pseudo_header(r, header); |
| |
| if (rc == NGX_OK) { |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http2 header: \":%V: %V\"", |
| &header->name, &header->value); |
| |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| } |
| |
| if (rc == NGX_ABORT) { |
| goto error; |
| } |
| |
| if (rc == NGX_DECLINED) { |
| ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST); |
| goto error; |
| } |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| if (r->invalid_header) { |
| cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module); |
| |
| if (cscf->ignore_invalid_headers) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent invalid header: \"%V\"", &header->name); |
| |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| } |
| } |
| |
| if (header->name.len == cookie.len |
| && ngx_memcmp(header->name.data, cookie.data, cookie.len) == 0) |
| { |
| if (ngx_http_v2_cookie(r, header) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| } else { |
| h = ngx_list_push(&r->headers_in.headers); |
| if (h == NULL) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h->key.len = header->name.len; |
| h->key.data = header->name.data; |
| |
| /* |
| * TODO Optimization: precalculate hash |
| * and handler for indexed headers. |
| */ |
| h->hash = ngx_hash_key(h->key.data, h->key.len); |
| |
| h->value.len = header->value.len; |
| h->value.data = header->value.data; |
| |
| h->lowcase_key = h->key.data; |
| |
| cmcf = ngx_http_get_module_main_conf(r, ngx_http_core_module); |
| |
| hh = ngx_hash_find(&cmcf->headers_in_hash, h->hash, |
| h->lowcase_key, h->key.len); |
| |
| if (hh && hh->handler(r, h, hh->offset) != NGX_OK) { |
| goto error; |
| } |
| } |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http2 header: \"%V: %V\"", |
| &header->name, &header->value); |
| |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| |
| error: |
| |
| h2c->state.stream = NULL; |
| |
| return ngx_http_v2_state_header_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_header_complete(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_http_v2_stream_t *stream; |
| |
| if (h2c->state.length) { |
| h2c->state.handler = ngx_http_v2_state_header_block; |
| return pos; |
| } |
| |
| if (!(h2c->state.flags & NGX_HTTP_V2_END_HEADERS_FLAG)) { |
| return ngx_http_v2_handle_continuation(h2c, pos, end, |
| ngx_http_v2_state_header_complete); |
| } |
| |
| stream = h2c->state.stream; |
| |
| if (stream) { |
| ngx_http_v2_run_request(stream->request); |
| } |
| |
| if (!h2c->state.keep_pool) { |
| ngx_destroy_pool(h2c->state.pool); |
| } |
| |
| h2c->state.pool = NULL; |
| h2c->state.keep_pool = 0; |
| |
| if (h2c->state.padding) { |
| return ngx_http_v2_state_skip_padded(h2c, pos, end); |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_handle_continuation(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end, ngx_http_v2_handler_pt handler) |
| { |
| u_char *p; |
| size_t len, skip; |
| uint32_t head; |
| |
| len = h2c->state.length; |
| |
| if (h2c->state.padding && (size_t) (end - pos) > len) { |
| skip = ngx_min(h2c->state.padding, (end - pos) - len); |
| |
| h2c->state.padding -= skip; |
| |
| p = pos; |
| pos += skip; |
| ngx_memmove(pos, p, len); |
| } |
| |
| if ((size_t) (end - pos) < len + NGX_HTTP_V2_FRAME_HEADER_SIZE) { |
| return ngx_http_v2_state_headers_save(h2c, pos, end, handler); |
| } |
| |
| p = pos + len; |
| |
| head = ngx_http_v2_parse_uint32(p); |
| |
| if (ngx_http_v2_parse_type(head) != NGX_HTTP_V2_CONTINUATION_FRAME) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent inappropriate frame while CONTINUATION was expected"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->state.flags |= p[4]; |
| |
| if (h2c->state.sid != ngx_http_v2_parse_sid(&p[5])) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent CONTINUATION frame with incorrect identifier"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| p = pos; |
| pos += NGX_HTTP_V2_FRAME_HEADER_SIZE; |
| |
| ngx_memcpy(pos, p, len); |
| |
| len = ngx_http_v2_parse_length(head); |
| |
| h2c->state.length += len; |
| |
| if (h2c->state.stream) { |
| h2c->state.stream->request->request_length += len; |
| } |
| |
| h2c->state.handler = handler; |
| return pos; |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_priority(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_uint_t depend, dependency, excl, weight; |
| ngx_http_v2_node_t *node; |
| |
| if (h2c->state.length != NGX_HTTP_V2_PRIORITY_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent PRIORITY frame with incorrect length %uz", |
| h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < NGX_HTTP_V2_PRIORITY_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_priority); |
| } |
| |
| dependency = ngx_http_v2_parse_uint32(pos); |
| |
| depend = dependency & 0x7fffffff; |
| excl = dependency >> 31; |
| weight = pos[4] + 1; |
| |
| pos += NGX_HTTP_V2_PRIORITY_SIZE; |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 PRIORITY frame sid:%ui " |
| "depends on %ui excl:%ui weight:%ui", |
| h2c->state.sid, depend, excl, weight); |
| |
| if (h2c->state.sid == 0) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent PRIORITY frame with incorrect identifier"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| if (depend == h2c->state.sid) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent PRIORITY frame for stream %ui " |
| "with incorrect dependency", h2c->state.sid); |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 0); |
| |
| if (node && node->stream) { |
| if (ngx_http_v2_terminate_stream(h2c, node->stream, |
| NGX_HTTP_V2_PROTOCOL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| } else { |
| if (ngx_http_v2_send_rst_stream(h2c, h2c->state.sid, |
| NGX_HTTP_V2_PROTOCOL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 1); |
| |
| if (node == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| node->weight = weight; |
| |
| if (node->stream == NULL) { |
| if (node->parent == NULL) { |
| h2c->closed_nodes++; |
| |
| } else { |
| ngx_queue_remove(&node->reuse); |
| } |
| |
| ngx_queue_insert_tail(&h2c->closed, &node->reuse); |
| } |
| |
| ngx_http_v2_set_dependency(h2c, node, depend, excl); |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_rst_stream(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_uint_t status; |
| ngx_event_t *ev; |
| ngx_connection_t *fc; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| |
| if (h2c->state.length != NGX_HTTP_V2_RST_STREAM_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent RST_STREAM frame with incorrect length %uz", |
| h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < NGX_HTTP_V2_RST_STREAM_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_rst_stream); |
| } |
| |
| status = ngx_http_v2_parse_uint32(pos); |
| |
| pos += NGX_HTTP_V2_RST_STREAM_SIZE; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 RST_STREAM frame, sid:%ui status:%ui", |
| h2c->state.sid, status); |
| |
| if (h2c->state.sid == 0) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent RST_STREAM frame with incorrect identifier"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 0); |
| |
| if (node == NULL || node->stream == NULL) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "unknown http2 stream"); |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| stream = node->stream; |
| |
| stream->in_closed = 1; |
| stream->out_closed = 1; |
| |
| fc = stream->request->connection; |
| fc->error = 1; |
| |
| switch (status) { |
| |
| case NGX_HTTP_V2_CANCEL: |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client canceled stream %ui", h2c->state.sid); |
| break; |
| |
| case NGX_HTTP_V2_REFUSED_STREAM: |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client refused stream %ui", h2c->state.sid); |
| break; |
| |
| case NGX_HTTP_V2_INTERNAL_ERROR: |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client terminated stream %ui due to internal error", |
| h2c->state.sid); |
| break; |
| |
| default: |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client terminated stream %ui with status %ui", |
| h2c->state.sid, status); |
| break; |
| } |
| |
| ev = fc->read; |
| ev->handler(ev); |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_settings(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| if (h2c->state.flags == NGX_HTTP_V2_ACK_FLAG) { |
| |
| if (h2c->state.length != 0) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent SETTINGS frame with the ACK flag " |
| "and nonzero length"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| h2c->settings_ack = 1; |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| if (h2c->state.length % NGX_HTTP_V2_SETTINGS_PARAM_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent SETTINGS frame with incorrect length %uz", |
| h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 SETTINGS frame"); |
| |
| return ngx_http_v2_state_settings_params(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_settings_params(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ssize_t window_delta; |
| ngx_uint_t id, value; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| window_delta = 0; |
| |
| while (h2c->state.length) { |
| if (end - pos < NGX_HTTP_V2_SETTINGS_PARAM_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_settings_params); |
| } |
| |
| h2c->state.length -= NGX_HTTP_V2_SETTINGS_PARAM_SIZE; |
| |
| id = ngx_http_v2_parse_uint16(pos); |
| value = ngx_http_v2_parse_uint32(&pos[2]); |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 setting %ui:%ui", id, value); |
| |
| switch (id) { |
| |
| case NGX_HTTP_V2_INIT_WINDOW_SIZE_SETTING: |
| |
| if (value > NGX_HTTP_V2_MAX_WINDOW) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent SETTINGS frame with incorrect " |
| "INITIAL_WINDOW_SIZE value %ui", value); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_FLOW_CTRL_ERROR); |
| } |
| |
| window_delta = value - h2c->init_window; |
| break; |
| |
| case NGX_HTTP_V2_MAX_FRAME_SIZE_SETTING: |
| |
| if (value > NGX_HTTP_V2_MAX_FRAME_SIZE |
| || value < NGX_HTTP_V2_DEFAULT_FRAME_SIZE) |
| { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent SETTINGS frame with incorrect " |
| "MAX_FRAME_SIZE value %ui", value); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->frame_size = value; |
| break; |
| |
| case NGX_HTTP_V2_ENABLE_PUSH_SETTING: |
| |
| if (value > 1) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent SETTINGS frame with incorrect " |
| "ENABLE_PUSH value %ui", value); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| h2c->push_disabled = !value; |
| break; |
| |
| case NGX_HTTP_V2_MAX_STREAMS_SETTING: |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| h2c->concurrent_pushes = ngx_min(value, h2scf->concurrent_pushes); |
| break; |
| |
| default: |
| break; |
| } |
| |
| pos += NGX_HTTP_V2_SETTINGS_PARAM_SIZE; |
| } |
| |
| frame = ngx_http_v2_get_frame(h2c, NGX_HTTP_V2_SETTINGS_ACK_SIZE, |
| NGX_HTTP_V2_SETTINGS_FRAME, |
| NGX_HTTP_V2_ACK_FLAG, 0); |
| if (frame == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| ngx_http_v2_queue_ordered_frame(h2c, frame); |
| |
| if (window_delta) { |
| h2c->init_window += window_delta; |
| |
| if (ngx_http_v2_adjust_windows(h2c, window_delta) != NGX_OK) { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_push_promise(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent PUSH_PROMISE frame"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_ping(ngx_http_v2_connection_t *h2c, u_char *pos, u_char *end) |
| { |
| ngx_buf_t *buf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| if (h2c->state.length != NGX_HTTP_V2_PING_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent PING frame with incorrect length %uz", |
| h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < NGX_HTTP_V2_PING_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, ngx_http_v2_state_ping); |
| } |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 PING frame"); |
| |
| if (h2c->state.flags & NGX_HTTP_V2_ACK_FLAG) { |
| return ngx_http_v2_state_skip(h2c, pos, end); |
| } |
| |
| frame = ngx_http_v2_get_frame(h2c, NGX_HTTP_V2_PING_SIZE, |
| NGX_HTTP_V2_PING_FRAME, |
| NGX_HTTP_V2_ACK_FLAG, 0); |
| if (frame == NULL) { |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| buf = frame->first->buf; |
| |
| buf->last = ngx_cpymem(buf->last, pos, NGX_HTTP_V2_PING_SIZE); |
| |
| ngx_http_v2_queue_blocked_frame(h2c, frame); |
| |
| return ngx_http_v2_state_complete(h2c, pos + NGX_HTTP_V2_PING_SIZE, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_goaway(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| #if (NGX_DEBUG) |
| ngx_uint_t last_sid, error; |
| #endif |
| |
| if (h2c->state.length < NGX_HTTP_V2_GOAWAY_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent GOAWAY frame " |
| "with incorrect length %uz", h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < NGX_HTTP_V2_GOAWAY_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, ngx_http_v2_state_goaway); |
| } |
| |
| #if (NGX_DEBUG) |
| h2c->state.length -= NGX_HTTP_V2_GOAWAY_SIZE; |
| |
| last_sid = ngx_http_v2_parse_sid(pos); |
| error = ngx_http_v2_parse_uint32(&pos[4]); |
| |
| pos += NGX_HTTP_V2_GOAWAY_SIZE; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 GOAWAY frame: last sid %ui, error %ui", |
| last_sid, error); |
| #endif |
| |
| return ngx_http_v2_state_skip(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_window_update(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| size_t window; |
| ngx_event_t *wev; |
| ngx_queue_t *q; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| |
| if (h2c->state.length != NGX_HTTP_V2_WINDOW_UPDATE_SIZE) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent WINDOW_UPDATE frame " |
| "with incorrect length %uz", h2c->state.length); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_SIZE_ERROR); |
| } |
| |
| if (end - pos < NGX_HTTP_V2_WINDOW_UPDATE_SIZE) { |
| return ngx_http_v2_state_save(h2c, pos, end, |
| ngx_http_v2_state_window_update); |
| } |
| |
| window = ngx_http_v2_parse_window(pos); |
| |
| pos += NGX_HTTP_V2_WINDOW_UPDATE_SIZE; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 WINDOW_UPDATE frame sid:%ui window:%uz", |
| h2c->state.sid, window); |
| |
| if (window == 0) { |
| if (h2c->state.sid == 0) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent WINDOW_UPDATE frame " |
| "with incorrect window increment 0"); |
| |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent WINDOW_UPDATE frame for stream %ui " |
| "with incorrect window increment 0", h2c->state.sid); |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 0); |
| |
| if (node && node->stream) { |
| if (ngx_http_v2_terminate_stream(h2c, node->stream, |
| NGX_HTTP_V2_PROTOCOL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| } else { |
| if (ngx_http_v2_send_rst_stream(h2c, h2c->state.sid, |
| NGX_HTTP_V2_PROTOCOL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| if (h2c->state.sid) { |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->state.sid, 0); |
| |
| if (node == NULL || node->stream == NULL) { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "unknown http2 stream"); |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| stream = node->stream; |
| |
| if (window > (size_t) (NGX_HTTP_V2_MAX_WINDOW - stream->send_window)) { |
| |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client violated flow control for stream %ui: " |
| "received WINDOW_UPDATE frame " |
| "with window increment %uz " |
| "not allowed for window %z", |
| h2c->state.sid, window, stream->send_window); |
| |
| if (ngx_http_v2_terminate_stream(h2c, stream, |
| NGX_HTTP_V2_FLOW_CTRL_ERROR) |
| == NGX_ERROR) |
| { |
| return ngx_http_v2_connection_error(h2c, |
| NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| stream->send_window += window; |
| |
| if (stream->exhausted) { |
| stream->exhausted = 0; |
| |
| wev = stream->request->connection->write; |
| |
| wev->active = 0; |
| wev->ready = 1; |
| |
| if (!wev->delayed) { |
| wev->handler(wev); |
| } |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| if (window > NGX_HTTP_V2_MAX_WINDOW - h2c->send_window) { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client violated connection flow control: " |
| "received WINDOW_UPDATE frame " |
| "with window increment %uz " |
| "not allowed for window %uz", |
| window, h2c->send_window); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_FLOW_CTRL_ERROR); |
| } |
| |
| h2c->send_window += window; |
| |
| while (!ngx_queue_empty(&h2c->waiting)) { |
| q = ngx_queue_head(&h2c->waiting); |
| |
| ngx_queue_remove(q); |
| |
| stream = ngx_queue_data(q, ngx_http_v2_stream_t, queue); |
| |
| stream->waiting = 0; |
| |
| wev = stream->request->connection->write; |
| |
| wev->active = 0; |
| wev->ready = 1; |
| |
| if (!wev->delayed) { |
| wev->handler(wev); |
| |
| if (h2c->send_window == 0) { |
| break; |
| } |
| } |
| } |
| |
| return ngx_http_v2_state_complete(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_continuation(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_log_error(NGX_LOG_INFO, h2c->connection->log, 0, |
| "client sent unexpected CONTINUATION frame"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_PROTOCOL_ERROR); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_complete(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 frame complete pos:%p end:%p", pos, end); |
| |
| if (pos > end) { |
| ngx_log_error(NGX_LOG_ALERT, h2c->connection->log, 0, |
| "receive buffer overrun"); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| h2c->state.stream = NULL; |
| h2c->state.handler = ngx_http_v2_state_head; |
| |
| return pos; |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_skip_padded(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end) |
| { |
| h2c->state.length += h2c->state.padding; |
| h2c->state.padding = 0; |
| |
| return ngx_http_v2_state_skip(h2c, pos, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_skip(ngx_http_v2_connection_t *h2c, u_char *pos, u_char *end) |
| { |
| size_t size; |
| |
| size = end - pos; |
| |
| if (size < h2c->state.length) { |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 frame skip %uz of %uz", size, h2c->state.length); |
| |
| h2c->state.length -= size; |
| return ngx_http_v2_state_save(h2c, end, end, ngx_http_v2_state_skip); |
| } |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 frame skip %uz", h2c->state.length); |
| |
| return ngx_http_v2_state_complete(h2c, pos + h2c->state.length, end); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_save(ngx_http_v2_connection_t *h2c, u_char *pos, u_char *end, |
| ngx_http_v2_handler_pt handler) |
| { |
| size_t size; |
| |
| ngx_log_debug3(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 frame state save pos:%p end:%p handler:%p", |
| pos, end, handler); |
| |
| size = end - pos; |
| |
| if (size > NGX_HTTP_V2_STATE_BUFFER_SIZE) { |
| ngx_log_error(NGX_LOG_ALERT, h2c->connection->log, 0, |
| "state buffer overflow: %uz bytes required", size); |
| |
| return ngx_http_v2_connection_error(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| } |
| |
| ngx_memcpy(h2c->state.buffer, pos, NGX_HTTP_V2_STATE_BUFFER_SIZE); |
| |
| h2c->state.buffer_used = size; |
| h2c->state.handler = handler; |
| h2c->state.incomplete = 1; |
| |
| return end; |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_state_headers_save(ngx_http_v2_connection_t *h2c, u_char *pos, |
| u_char *end, ngx_http_v2_handler_pt handler) |
| { |
| ngx_event_t *rev; |
| ngx_http_request_t *r; |
| ngx_http_core_srv_conf_t *cscf; |
| |
| if (h2c->state.stream) { |
| r = h2c->state.stream->request; |
| rev = r->connection->read; |
| |
| if (!rev->timer_set) { |
| cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module); |
| ngx_add_timer(rev, cscf->client_header_timeout); |
| } |
| } |
| |
| return ngx_http_v2_state_save(h2c, pos, end, handler); |
| } |
| |
| |
| static u_char * |
| ngx_http_v2_connection_error(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t err) |
| { |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 state connection error"); |
| |
| if (err == NGX_HTTP_V2_INTERNAL_ERROR) { |
| ngx_debug_point(); |
| } |
| |
| ngx_http_v2_finalize_connection(h2c, err); |
| |
| return NULL; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_int(ngx_http_v2_connection_t *h2c, u_char **pos, u_char *end, |
| ngx_uint_t prefix) |
| { |
| u_char *start, *p; |
| ngx_uint_t value, octet, shift; |
| |
| start = *pos; |
| p = start; |
| |
| value = *p++ & prefix; |
| |
| if (value != prefix) { |
| if (h2c->state.length == 0) { |
| return NGX_ERROR; |
| } |
| |
| h2c->state.length--; |
| |
| *pos = p; |
| return value; |
| } |
| |
| if (end - start > NGX_HTTP_V2_INT_OCTETS) { |
| end = start + NGX_HTTP_V2_INT_OCTETS; |
| } |
| |
| for (shift = 0; p != end; shift += 7) { |
| octet = *p++; |
| |
| value += (octet & 0x7f) << shift; |
| |
| if (octet < 128) { |
| if ((size_t) (p - start) > h2c->state.length) { |
| return NGX_ERROR; |
| } |
| |
| h2c->state.length -= p - start; |
| |
| *pos = p; |
| return value; |
| } |
| } |
| |
| if ((size_t) (end - start) >= h2c->state.length) { |
| return NGX_ERROR; |
| } |
| |
| if (end == start + NGX_HTTP_V2_INT_OCTETS) { |
| return NGX_DECLINED; |
| } |
| |
| return NGX_AGAIN; |
| } |
| |
| |
| ngx_http_v2_stream_t * |
| ngx_http_v2_push_stream(ngx_http_v2_stream_t *parent, ngx_str_t *path) |
| { |
| ngx_int_t rc; |
| ngx_str_t value; |
| ngx_pool_t *pool; |
| ngx_uint_t index; |
| ngx_table_elt_t **h; |
| ngx_connection_t *fc; |
| ngx_http_request_t *r; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_v2_connection_t *h2c; |
| ngx_http_v2_parse_header_t *header; |
| |
| h2c = parent->connection; |
| |
| pool = ngx_create_pool(1024, h2c->connection->log); |
| if (pool == NULL) { |
| goto rst_stream; |
| } |
| |
| node = ngx_http_v2_get_node_by_id(h2c, h2c->last_push, 1); |
| |
| if (node == NULL) { |
| ngx_destroy_pool(pool); |
| goto rst_stream; |
| } |
| |
| stream = ngx_http_v2_create_stream(h2c, 1); |
| if (stream == NULL) { |
| |
| if (node->parent == NULL) { |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| index = ngx_http_v2_index(h2scf, h2c->last_push); |
| h2c->streams_index[index] = node->index; |
| |
| ngx_queue_insert_tail(&h2c->closed, &node->reuse); |
| h2c->closed_nodes++; |
| } |
| |
| ngx_destroy_pool(pool); |
| goto rst_stream; |
| } |
| |
| if (node->parent) { |
| ngx_queue_remove(&node->reuse); |
| h2c->closed_nodes--; |
| } |
| |
| stream->pool = pool; |
| |
| r = stream->request; |
| fc = r->connection; |
| |
| stream->in_closed = 1; |
| stream->node = node; |
| |
| node->stream = stream; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 push stream sid:%ui " |
| "depends on %ui excl:0 weight:16", |
| h2c->last_push, parent->node->id); |
| |
| node->weight = NGX_HTTP_V2_DEFAULT_WEIGHT; |
| ngx_http_v2_set_dependency(h2c, node, parent->node->id, 0); |
| |
| r->method_name = ngx_http_core_get_method; |
| r->method = NGX_HTTP_GET; |
| |
| r->schema_start = (u_char *) "https"; |
| |
| #if (NGX_HTTP_SSL) |
| if (fc->ssl) { |
| r->schema_end = r->schema_start + 5; |
| |
| } else |
| #endif |
| { |
| r->schema_end = r->schema_start + 4; |
| } |
| |
| value.data = ngx_pstrdup(pool, path); |
| if (value.data == NULL) { |
| goto close; |
| } |
| |
| value.len = path->len; |
| |
| rc = ngx_http_v2_parse_path(r, &value); |
| |
| if (rc != NGX_OK) { |
| goto error; |
| } |
| |
| for (header = ngx_http_v2_parse_headers; header->name.len; header++) { |
| h = (ngx_table_elt_t **) |
| ((char *) &parent->request->headers_in + header->offset); |
| |
| if (*h == NULL) { |
| continue; |
| } |
| |
| value.len = (*h)->value.len; |
| |
| value.data = ngx_pnalloc(pool, value.len + 1); |
| if (value.data == NULL) { |
| goto close; |
| } |
| |
| ngx_memcpy(value.data, (*h)->value.data, value.len); |
| value.data[value.len] = '\0'; |
| |
| rc = ngx_http_v2_parse_header(r, header, &value); |
| |
| if (rc != NGX_OK) { |
| goto error; |
| } |
| } |
| |
| fc->write->handler = ngx_http_v2_run_request_handler; |
| ngx_post_event(fc->write, &ngx_posted_events); |
| |
| return stream; |
| |
| error: |
| |
| if (rc == NGX_ABORT) { |
| /* header handler has already finalized request */ |
| return NULL; |
| } |
| |
| if (rc == NGX_DECLINED) { |
| ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST); |
| return NULL; |
| } |
| |
| close: |
| |
| ngx_http_v2_close_stream(stream, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| |
| return NULL; |
| |
| rst_stream: |
| |
| if (ngx_http_v2_send_rst_stream(h2c, h2c->last_push, |
| NGX_HTTP_INTERNAL_SERVER_ERROR) |
| != NGX_OK) |
| { |
| h2c->connection->error = 1; |
| } |
| |
| return NULL; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_send_settings(ngx_http_v2_connection_t *h2c) |
| { |
| size_t len; |
| ngx_buf_t *buf; |
| ngx_chain_t *cl; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 send SETTINGS frame"); |
| |
| frame = ngx_palloc(h2c->pool, sizeof(ngx_http_v2_out_frame_t)); |
| if (frame == NULL) { |
| return NGX_ERROR; |
| } |
| |
| cl = ngx_alloc_chain_link(h2c->pool); |
| if (cl == NULL) { |
| return NGX_ERROR; |
| } |
| |
| len = NGX_HTTP_V2_SETTINGS_PARAM_SIZE * 3; |
| |
| buf = ngx_create_temp_buf(h2c->pool, NGX_HTTP_V2_FRAME_HEADER_SIZE + len); |
| if (buf == NULL) { |
| return NGX_ERROR; |
| } |
| |
| buf->last_buf = 1; |
| |
| cl->buf = buf; |
| cl->next = NULL; |
| |
| frame->first = cl; |
| frame->last = cl; |
| frame->handler = ngx_http_v2_settings_frame_handler; |
| frame->stream = NULL; |
| #if (NGX_DEBUG) |
| frame->length = len; |
| #endif |
| frame->blocked = 0; |
| |
| buf->last = ngx_http_v2_write_len_and_type(buf->last, len, |
| NGX_HTTP_V2_SETTINGS_FRAME); |
| |
| *buf->last++ = NGX_HTTP_V2_NO_FLAG; |
| |
| buf->last = ngx_http_v2_write_sid(buf->last, 0); |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| buf->last = ngx_http_v2_write_uint16(buf->last, |
| NGX_HTTP_V2_MAX_STREAMS_SETTING); |
| buf->last = ngx_http_v2_write_uint32(buf->last, |
| h2scf->concurrent_streams); |
| |
| buf->last = ngx_http_v2_write_uint16(buf->last, |
| NGX_HTTP_V2_INIT_WINDOW_SIZE_SETTING); |
| buf->last = ngx_http_v2_write_uint32(buf->last, h2scf->preread_size); |
| |
| buf->last = ngx_http_v2_write_uint16(buf->last, |
| NGX_HTTP_V2_MAX_FRAME_SIZE_SETTING); |
| buf->last = ngx_http_v2_write_uint32(buf->last, |
| NGX_HTTP_V2_MAX_FRAME_SIZE); |
| |
| ngx_http_v2_queue_blocked_frame(h2c, frame); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_settings_frame_handler(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_out_frame_t *frame) |
| { |
| ngx_buf_t *buf; |
| |
| buf = frame->first->buf; |
| |
| if (buf->pos != buf->last) { |
| return NGX_AGAIN; |
| } |
| |
| ngx_free_chain(h2c->pool, frame->first); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_send_window_update(ngx_http_v2_connection_t *h2c, ngx_uint_t sid, |
| size_t window) |
| { |
| ngx_buf_t *buf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 send WINDOW_UPDATE frame sid:%ui, window:%uz", |
| sid, window); |
| |
| frame = ngx_http_v2_get_frame(h2c, NGX_HTTP_V2_WINDOW_UPDATE_SIZE, |
| NGX_HTTP_V2_WINDOW_UPDATE_FRAME, |
| NGX_HTTP_V2_NO_FLAG, sid); |
| if (frame == NULL) { |
| return NGX_ERROR; |
| } |
| |
| buf = frame->first->buf; |
| |
| buf->last = ngx_http_v2_write_uint32(buf->last, window); |
| |
| ngx_http_v2_queue_blocked_frame(h2c, frame); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_send_rst_stream(ngx_http_v2_connection_t *h2c, ngx_uint_t sid, |
| ngx_uint_t status) |
| { |
| ngx_buf_t *buf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 send RST_STREAM frame sid:%ui, status:%ui", |
| sid, status); |
| |
| frame = ngx_http_v2_get_frame(h2c, NGX_HTTP_V2_RST_STREAM_SIZE, |
| NGX_HTTP_V2_RST_STREAM_FRAME, |
| NGX_HTTP_V2_NO_FLAG, sid); |
| if (frame == NULL) { |
| return NGX_ERROR; |
| } |
| |
| buf = frame->first->buf; |
| |
| buf->last = ngx_http_v2_write_uint32(buf->last, status); |
| |
| ngx_http_v2_queue_blocked_frame(h2c, frame); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_send_goaway(ngx_http_v2_connection_t *h2c, ngx_uint_t status) |
| { |
| ngx_buf_t *buf; |
| ngx_http_v2_out_frame_t *frame; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 send GOAWAY frame: last sid %ui, error %ui", |
| h2c->last_sid, status); |
| |
| frame = ngx_http_v2_get_frame(h2c, NGX_HTTP_V2_GOAWAY_SIZE, |
| NGX_HTTP_V2_GOAWAY_FRAME, |
| NGX_HTTP_V2_NO_FLAG, 0); |
| if (frame == NULL) { |
| return NGX_ERROR; |
| } |
| |
| buf = frame->first->buf; |
| |
| buf->last = ngx_http_v2_write_sid(buf->last, h2c->last_sid); |
| buf->last = ngx_http_v2_write_uint32(buf->last, status); |
| |
| ngx_http_v2_queue_blocked_frame(h2c, frame); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_http_v2_out_frame_t * |
| ngx_http_v2_get_frame(ngx_http_v2_connection_t *h2c, size_t length, |
| ngx_uint_t type, u_char flags, ngx_uint_t sid) |
| { |
| ngx_buf_t *buf; |
| ngx_pool_t *pool; |
| ngx_http_v2_out_frame_t *frame; |
| |
| frame = h2c->free_frames; |
| |
| if (frame) { |
| h2c->free_frames = frame->next; |
| |
| buf = frame->first->buf; |
| buf->pos = buf->start; |
| |
| frame->blocked = 0; |
| |
| } else { |
| pool = h2c->pool ? h2c->pool : h2c->connection->pool; |
| |
| frame = ngx_pcalloc(pool, sizeof(ngx_http_v2_out_frame_t)); |
| if (frame == NULL) { |
| return NULL; |
| } |
| |
| frame->first = ngx_alloc_chain_link(pool); |
| if (frame->first == NULL) { |
| return NULL; |
| } |
| |
| buf = ngx_create_temp_buf(pool, NGX_HTTP_V2_FRAME_BUFFER_SIZE); |
| if (buf == NULL) { |
| return NULL; |
| } |
| |
| buf->last_buf = 1; |
| |
| frame->first->buf = buf; |
| frame->last = frame->first; |
| |
| frame->handler = ngx_http_v2_frame_handler; |
| } |
| |
| #if (NGX_DEBUG) |
| if (length > NGX_HTTP_V2_FRAME_BUFFER_SIZE - NGX_HTTP_V2_FRAME_HEADER_SIZE) |
| { |
| ngx_log_error(NGX_LOG_ALERT, h2c->connection->log, 0, |
| "requested control frame is too large: %uz", length); |
| return NULL; |
| } |
| |
| frame->length = length; |
| #endif |
| |
| buf->last = ngx_http_v2_write_len_and_type(buf->pos, length, type); |
| |
| *buf->last++ = flags; |
| |
| buf->last = ngx_http_v2_write_sid(buf->last, sid); |
| |
| return frame; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_frame_handler(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_out_frame_t *frame) |
| { |
| ngx_buf_t *buf; |
| |
| buf = frame->first->buf; |
| |
| if (buf->pos != buf->last) { |
| return NGX_AGAIN; |
| } |
| |
| frame->next = h2c->free_frames; |
| h2c->free_frames = frame; |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_http_v2_stream_t * |
| ngx_http_v2_create_stream(ngx_http_v2_connection_t *h2c, ngx_uint_t push) |
| { |
| ngx_log_t *log; |
| ngx_event_t *rev, *wev; |
| ngx_connection_t *fc; |
| ngx_http_log_ctx_t *ctx; |
| ngx_http_request_t *r; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_core_srv_conf_t *cscf; |
| |
| fc = h2c->free_fake_connections; |
| |
| if (fc) { |
| h2c->free_fake_connections = fc->data; |
| |
| rev = fc->read; |
| wev = fc->write; |
| log = fc->log; |
| ctx = log->data; |
| |
| } else { |
| fc = ngx_palloc(h2c->pool, sizeof(ngx_connection_t)); |
| if (fc == NULL) { |
| return NULL; |
| } |
| |
| rev = ngx_palloc(h2c->pool, sizeof(ngx_event_t)); |
| if (rev == NULL) { |
| return NULL; |
| } |
| |
| wev = ngx_palloc(h2c->pool, sizeof(ngx_event_t)); |
| if (wev == NULL) { |
| return NULL; |
| } |
| |
| log = ngx_palloc(h2c->pool, sizeof(ngx_log_t)); |
| if (log == NULL) { |
| return NULL; |
| } |
| |
| ctx = ngx_palloc(h2c->pool, sizeof(ngx_http_log_ctx_t)); |
| if (ctx == NULL) { |
| return NULL; |
| } |
| |
| ctx->connection = fc; |
| ctx->request = NULL; |
| ctx->current_request = NULL; |
| } |
| |
| ngx_memcpy(log, h2c->connection->log, sizeof(ngx_log_t)); |
| |
| log->data = ctx; |
| |
| if (push) { |
| log->action = "processing pushed request headers"; |
| |
| } else { |
| log->action = "reading client request headers"; |
| } |
| |
| ngx_memzero(rev, sizeof(ngx_event_t)); |
| |
| rev->data = fc; |
| rev->ready = 1; |
| rev->handler = ngx_http_v2_close_stream_handler; |
| rev->log = log; |
| |
| ngx_memcpy(wev, rev, sizeof(ngx_event_t)); |
| |
| wev->write = 1; |
| |
| ngx_memcpy(fc, h2c->connection, sizeof(ngx_connection_t)); |
| |
| fc->data = h2c->http_connection; |
| fc->read = rev; |
| fc->write = wev; |
| fc->sent = 0; |
| fc->log = log; |
| fc->buffered = 0; |
| fc->sndlowat = 1; |
| fc->tcp_nodelay = NGX_TCP_NODELAY_DISABLED; |
| |
| r = ngx_http_create_request(fc); |
| if (r == NULL) { |
| return NULL; |
| } |
| |
| ngx_str_set(&r->http_protocol, "HTTP/2.0"); |
| |
| r->http_version = NGX_HTTP_VERSION_20; |
| r->valid_location = 1; |
| |
| fc->data = r; |
| h2c->connection->requests++; |
| |
| cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module); |
| |
| r->header_in = ngx_create_temp_buf(r->pool, |
| cscf->client_header_buffer_size); |
| if (r->header_in == NULL) { |
| ngx_http_free_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NULL; |
| } |
| |
| if (ngx_list_init(&r->headers_in.headers, r->pool, 20, |
| sizeof(ngx_table_elt_t)) |
| != NGX_OK) |
| { |
| ngx_http_free_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NULL; |
| } |
| |
| r->headers_in.connection_type = NGX_HTTP_CONNECTION_CLOSE; |
| |
| stream = ngx_pcalloc(r->pool, sizeof(ngx_http_v2_stream_t)); |
| if (stream == NULL) { |
| ngx_http_free_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NULL; |
| } |
| |
| r->stream = stream; |
| |
| stream->request = r; |
| stream->connection = h2c; |
| |
| h2scf = ngx_http_get_module_srv_conf(r, ngx_http_v2_module); |
| |
| stream->send_window = h2c->init_window; |
| stream->recv_window = h2scf->preread_size; |
| |
| if (push) { |
| h2c->pushing++; |
| |
| } else { |
| h2c->processing++; |
| } |
| |
| return stream; |
| } |
| |
| |
| static ngx_http_v2_node_t * |
| ngx_http_v2_get_node_by_id(ngx_http_v2_connection_t *h2c, ngx_uint_t sid, |
| ngx_uint_t alloc) |
| { |
| ngx_uint_t index; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| index = ngx_http_v2_index(h2scf, sid); |
| |
| for (node = h2c->streams_index[index]; node; node = node->index) { |
| |
| if (node->id == sid) { |
| return node; |
| } |
| } |
| |
| if (!alloc) { |
| return NULL; |
| } |
| |
| if (h2c->closed_nodes < 32) { |
| node = ngx_pcalloc(h2c->connection->pool, sizeof(ngx_http_v2_node_t)); |
| if (node == NULL) { |
| return NULL; |
| } |
| |
| } else { |
| node = ngx_http_v2_get_closed_node(h2c); |
| } |
| |
| node->id = sid; |
| |
| ngx_queue_init(&node->children); |
| |
| node->index = h2c->streams_index[index]; |
| h2c->streams_index[index] = node; |
| |
| return node; |
| } |
| |
| |
| static ngx_http_v2_node_t * |
| ngx_http_v2_get_closed_node(ngx_http_v2_connection_t *h2c) |
| { |
| ngx_uint_t weight; |
| ngx_queue_t *q, *children; |
| ngx_http_v2_node_t *node, **next, *n, *parent, *child; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| h2c->closed_nodes--; |
| |
| q = ngx_queue_head(&h2c->closed); |
| |
| ngx_queue_remove(q); |
| |
| node = ngx_queue_data(q, ngx_http_v2_node_t, reuse); |
| |
| next = &h2c->streams_index[ngx_http_v2_index(h2scf, node->id)]; |
| |
| for ( ;; ) { |
| n = *next; |
| |
| if (n == node) { |
| *next = n->index; |
| break; |
| } |
| |
| next = &n->index; |
| } |
| |
| ngx_queue_remove(&node->queue); |
| |
| weight = 0; |
| |
| for (q = ngx_queue_head(&node->children); |
| q != ngx_queue_sentinel(&node->children); |
| q = ngx_queue_next(q)) |
| { |
| child = ngx_queue_data(q, ngx_http_v2_node_t, queue); |
| weight += child->weight; |
| } |
| |
| parent = node->parent; |
| |
| for (q = ngx_queue_head(&node->children); |
| q != ngx_queue_sentinel(&node->children); |
| q = ngx_queue_next(q)) |
| { |
| child = ngx_queue_data(q, ngx_http_v2_node_t, queue); |
| child->parent = parent; |
| child->weight = node->weight * child->weight / weight; |
| |
| if (child->weight == 0) { |
| child->weight = 1; |
| } |
| } |
| |
| if (parent == NGX_HTTP_V2_ROOT) { |
| node->rank = 0; |
| node->rel_weight = 1.0; |
| |
| children = &h2c->dependencies; |
| |
| } else { |
| node->rank = parent->rank; |
| node->rel_weight = parent->rel_weight; |
| |
| children = &parent->children; |
| } |
| |
| ngx_http_v2_node_children_update(node); |
| ngx_queue_add(children, &node->children); |
| |
| ngx_memzero(node, sizeof(ngx_http_v2_node_t)); |
| |
| return node; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_validate_header(ngx_http_request_t *r, ngx_http_v2_header_t *header) |
| { |
| u_char ch; |
| ngx_uint_t i; |
| ngx_http_core_srv_conf_t *cscf; |
| |
| if (header->name.len == 0) { |
| return NGX_ERROR; |
| } |
| |
| r->invalid_header = 0; |
| |
| cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module); |
| |
| for (i = (header->name.data[0] == ':'); i != header->name.len; i++) { |
| ch = header->name.data[i]; |
| |
| if ((ch >= 'a' && ch <= 'z') |
| || (ch == '-') |
| || (ch >= '0' && ch <= '9') |
| || (ch == '_' && cscf->underscores_in_headers)) |
| { |
| continue; |
| } |
| |
| if (ch == '\0' || ch == LF || ch == CR || ch == ':' |
| || (ch >= 'A' && ch <= 'Z')) |
| { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent invalid header name: \"%V\"", |
| &header->name); |
| |
| return NGX_ERROR; |
| } |
| |
| r->invalid_header = 1; |
| } |
| |
| for (i = 0; i != header->value.len; i++) { |
| ch = header->value.data[i]; |
| |
| if (ch == '\0' || ch == LF || ch == CR) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent header \"%V\" with " |
| "invalid value: \"%V\"", |
| &header->name, &header->value); |
| |
| return NGX_ERROR; |
| } |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_pseudo_header(ngx_http_request_t *r, ngx_http_v2_header_t *header) |
| { |
| header->name.len--; |
| header->name.data++; |
| |
| switch (header->name.len) { |
| case 4: |
| if (ngx_memcmp(header->name.data, "path", sizeof("path") - 1) |
| == 0) |
| { |
| return ngx_http_v2_parse_path(r, &header->value); |
| } |
| |
| break; |
| |
| case 6: |
| if (ngx_memcmp(header->name.data, "method", sizeof("method") - 1) |
| == 0) |
| { |
| return ngx_http_v2_parse_method(r, &header->value); |
| } |
| |
| if (ngx_memcmp(header->name.data, "scheme", sizeof("scheme") - 1) |
| == 0) |
| { |
| return ngx_http_v2_parse_scheme(r, &header->value); |
| } |
| |
| break; |
| |
| case 9: |
| if (ngx_memcmp(header->name.data, "authority", sizeof("authority") - 1) |
| == 0) |
| { |
| return ngx_http_v2_parse_authority(r, &header->value); |
| } |
| |
| break; |
| } |
| |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent unknown pseudo-header \":%V\"", |
| &header->name); |
| |
| return NGX_DECLINED; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_path(ngx_http_request_t *r, ngx_str_t *value) |
| { |
| if (r->unparsed_uri.len) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent duplicate :path header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| if (value->len == 0) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent empty :path header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| r->uri_start = value->data; |
| r->uri_end = value->data + value->len; |
| |
| if (ngx_http_parse_uri(r) != NGX_OK) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent invalid :path header: \"%V\"", value); |
| |
| return NGX_DECLINED; |
| } |
| |
| if (ngx_http_process_request_uri(r) != NGX_OK) { |
| /* |
| * request has been finalized already |
| * in ngx_http_process_request_uri() |
| */ |
| return NGX_ABORT; |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_method(ngx_http_request_t *r, ngx_str_t *value) |
| { |
| size_t k, len; |
| ngx_uint_t n; |
| const u_char *p, *m; |
| |
| /* |
| * This array takes less than 256 sequential bytes, |
| * and if typical CPU cache line size is 64 bytes, |
| * it is prefetched for 4 load operations. |
| */ |
| static const struct { |
| u_char len; |
| const u_char method[11]; |
| uint32_t value; |
| } tests[] = { |
| { 3, "GET", NGX_HTTP_GET }, |
| { 4, "POST", NGX_HTTP_POST }, |
| { 4, "HEAD", NGX_HTTP_HEAD }, |
| { 7, "OPTIONS", NGX_HTTP_OPTIONS }, |
| { 8, "PROPFIND", NGX_HTTP_PROPFIND }, |
| { 3, "PUT", NGX_HTTP_PUT }, |
| { 5, "MKCOL", NGX_HTTP_MKCOL }, |
| { 6, "DELETE", NGX_HTTP_DELETE }, |
| { 4, "COPY", NGX_HTTP_COPY }, |
| { 4, "MOVE", NGX_HTTP_MOVE }, |
| { 9, "PROPPATCH", NGX_HTTP_PROPPATCH }, |
| { 4, "LOCK", NGX_HTTP_LOCK }, |
| { 6, "UNLOCK", NGX_HTTP_UNLOCK }, |
| { 5, "PATCH", NGX_HTTP_PATCH }, |
| { 5, "TRACE", NGX_HTTP_TRACE } |
| }, *test; |
| |
| if (r->method_name.len) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent duplicate :method header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| if (value->len == 0) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent empty :method header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| r->method_name.len = value->len; |
| r->method_name.data = value->data; |
| |
| len = r->method_name.len; |
| n = sizeof(tests) / sizeof(tests[0]); |
| test = tests; |
| |
| do { |
| if (len == test->len) { |
| p = r->method_name.data; |
| m = test->method; |
| k = len; |
| |
| do { |
| if (*p++ != *m++) { |
| goto next; |
| } |
| } while (--k); |
| |
| r->method = test->value; |
| return NGX_OK; |
| } |
| |
| next: |
| test++; |
| |
| } while (--n); |
| |
| p = r->method_name.data; |
| |
| do { |
| if ((*p < 'A' || *p > 'Z') && *p != '_' && *p != '-') { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent invalid method: \"%V\"", |
| &r->method_name); |
| |
| return NGX_DECLINED; |
| } |
| |
| p++; |
| |
| } while (--len); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_scheme(ngx_http_request_t *r, ngx_str_t *value) |
| { |
| if (r->schema_start) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent duplicate :scheme header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| if (value->len == 0) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent empty :scheme header"); |
| |
| return NGX_DECLINED; |
| } |
| |
| r->schema_start = value->data; |
| r->schema_end = value->data + value->len; |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_authority(ngx_http_request_t *r, ngx_str_t *value) |
| { |
| return ngx_http_v2_parse_header(r, &ngx_http_v2_parse_headers[0], value); |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_parse_header(ngx_http_request_t *r, |
| ngx_http_v2_parse_header_t *header, ngx_str_t *value) |
| { |
| ngx_table_elt_t *h; |
| ngx_http_core_main_conf_t *cmcf; |
| |
| h = ngx_list_push(&r->headers_in.headers); |
| if (h == NULL) { |
| return NGX_ERROR; |
| } |
| |
| h->key.len = header->name.len; |
| h->key.data = header->name.data; |
| h->lowcase_key = header->name.data; |
| |
| if (header->hh == NULL) { |
| header->hash = ngx_hash_key(header->name.data, header->name.len); |
| |
| cmcf = ngx_http_get_module_main_conf(r, ngx_http_core_module); |
| |
| header->hh = ngx_hash_find(&cmcf->headers_in_hash, header->hash, |
| h->lowcase_key, h->key.len); |
| if (header->hh == NULL) { |
| return NGX_ERROR; |
| } |
| } |
| |
| h->hash = header->hash; |
| |
| h->value.len = value->len; |
| h->value.data = value->data; |
| |
| if (header->hh->handler(r, h, header->hh->offset) != NGX_OK) { |
| /* header handler has already finalized request */ |
| return NGX_ABORT; |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_construct_request_line(ngx_http_request_t *r) |
| { |
| u_char *p; |
| |
| static const u_char ending[] = " HTTP/2.0"; |
| |
| if (r->method_name.len == 0 |
| || r->schema_start == NULL |
| || r->unparsed_uri.len == 0) |
| { |
| if (r->method_name.len == 0) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent no :method header"); |
| |
| } else if (r->schema_start == NULL) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent no :scheme header"); |
| |
| } else { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client sent no :path header"); |
| } |
| |
| ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST); |
| return NGX_ERROR; |
| } |
| |
| r->request_line.len = r->method_name.len + 1 |
| + r->unparsed_uri.len |
| + sizeof(ending) - 1; |
| |
| p = ngx_pnalloc(r->pool, r->request_line.len + 1); |
| if (p == NULL) { |
| ngx_http_v2_close_stream(r->stream, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NGX_ERROR; |
| } |
| |
| r->request_line.data = p; |
| |
| p = ngx_cpymem(p, r->method_name.data, r->method_name.len); |
| |
| *p++ = ' '; |
| |
| p = ngx_cpymem(p, r->unparsed_uri.data, r->unparsed_uri.len); |
| |
| ngx_memcpy(p, ending, sizeof(ending)); |
| |
| ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, |
| "http2 request line: \"%V\"", &r->request_line); |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_cookie(ngx_http_request_t *r, ngx_http_v2_header_t *header) |
| { |
| ngx_str_t *val; |
| ngx_array_t *cookies; |
| |
| cookies = r->stream->cookies; |
| |
| if (cookies == NULL) { |
| cookies = ngx_array_create(r->pool, 2, sizeof(ngx_str_t)); |
| if (cookies == NULL) { |
| return NGX_ERROR; |
| } |
| |
| r->stream->cookies = cookies; |
| } |
| |
| val = ngx_array_push(cookies); |
| if (val == NULL) { |
| return NGX_ERROR; |
| } |
| |
| val->len = header->value.len; |
| val->data = header->value.data; |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_construct_cookie_header(ngx_http_request_t *r) |
| { |
| u_char *buf, *p, *end; |
| size_t len; |
| ngx_str_t *vals; |
| ngx_uint_t i; |
| ngx_array_t *cookies; |
| ngx_table_elt_t *h; |
| ngx_http_header_t *hh; |
| ngx_http_core_main_conf_t *cmcf; |
| |
| static ngx_str_t cookie = ngx_string("cookie"); |
| |
| cookies = r->stream->cookies; |
| |
| if (cookies == NULL) { |
| return NGX_OK; |
| } |
| |
| vals = cookies->elts; |
| |
| i = 0; |
| len = 0; |
| |
| do { |
| len += vals[i].len + 2; |
| } while (++i != cookies->nelts); |
| |
| len -= 2; |
| |
| buf = ngx_pnalloc(r->pool, len + 1); |
| if (buf == NULL) { |
| ngx_http_v2_close_stream(r->stream, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NGX_ERROR; |
| } |
| |
| p = buf; |
| end = buf + len; |
| |
| for (i = 0; /* void */ ; i++) { |
| |
| p = ngx_cpymem(p, vals[i].data, vals[i].len); |
| |
| if (p == end) { |
| *p = '\0'; |
| break; |
| } |
| |
| *p++ = ';'; *p++ = ' '; |
| } |
| |
| h = ngx_list_push(&r->headers_in.headers); |
| if (h == NULL) { |
| ngx_http_v2_close_stream(r->stream, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NGX_ERROR; |
| } |
| |
| h->hash = ngx_hash(ngx_hash(ngx_hash(ngx_hash( |
| ngx_hash('c', 'o'), 'o'), 'k'), 'i'), 'e'); |
| |
| h->key.len = cookie.len; |
| h->key.data = cookie.data; |
| |
| h->value.len = len; |
| h->value.data = buf; |
| |
| h->lowcase_key = cookie.data; |
| |
| cmcf = ngx_http_get_module_main_conf(r, ngx_http_core_module); |
| |
| hh = ngx_hash_find(&cmcf->headers_in_hash, h->hash, |
| h->lowcase_key, h->key.len); |
| |
| if (hh == NULL) { |
| ngx_http_v2_close_stream(r->stream, NGX_HTTP_INTERNAL_SERVER_ERROR); |
| return NGX_ERROR; |
| } |
| |
| if (hh->handler(r, h, hh->offset) != NGX_OK) { |
| /* |
| * request has been finalized already |
| * in ngx_http_process_multi_header_lines() |
| */ |
| return NGX_ERROR; |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static void |
| ngx_http_v2_run_request(ngx_http_request_t *r) |
| { |
| if (ngx_http_v2_construct_request_line(r) != NGX_OK) { |
| return; |
| } |
| |
| if (ngx_http_v2_construct_cookie_header(r) != NGX_OK) { |
| return; |
| } |
| |
| r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE; |
| |
| if (ngx_http_process_request_header(r) != NGX_OK) { |
| return; |
| } |
| |
| if (r->headers_in.content_length_n > 0 && r->stream->in_closed) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client prematurely closed stream"); |
| |
| r->stream->skip_data = 1; |
| |
| ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST); |
| return; |
| } |
| |
| if (r->headers_in.content_length_n == -1 && !r->stream->in_closed) { |
| r->headers_in.chunked = 1; |
| } |
| |
| ngx_http_process_request(r); |
| } |
| |
| |
| static void |
| ngx_http_v2_run_request_handler(ngx_event_t *ev) |
| { |
| ngx_connection_t *fc; |
| ngx_http_request_t *r; |
| |
| fc = ev->data; |
| r = fc->data; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, fc->log, 0, |
| "http2 run request handler"); |
| |
| ngx_http_v2_run_request(r); |
| } |
| |
| |
| ngx_int_t |
| ngx_http_v2_read_request_body(ngx_http_request_t *r) |
| { |
| off_t len; |
| size_t size; |
| ngx_buf_t *buf; |
| ngx_int_t rc; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_request_body_t *rb; |
| ngx_http_core_loc_conf_t *clcf; |
| ngx_http_v2_connection_t *h2c; |
| |
| stream = r->stream; |
| rb = r->request_body; |
| |
| if (stream->skip_data) { |
| r->request_body_no_buffering = 0; |
| rb->post_handler(r); |
| return NGX_OK; |
| } |
| |
| h2scf = ngx_http_get_module_srv_conf(r, ngx_http_v2_module); |
| clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module); |
| |
| len = r->headers_in.content_length_n; |
| |
| if (r->request_body_no_buffering && !stream->in_closed) { |
| |
| if (len < 0 || len > (off_t) clcf->client_body_buffer_size) { |
| len = clcf->client_body_buffer_size; |
| } |
| |
| /* |
| * We need a room to store data up to the stream's initial window size, |
| * at least until this window will be exhausted. |
| */ |
| |
| if (len < (off_t) h2scf->preread_size) { |
| len = h2scf->preread_size; |
| } |
| |
| if (len > NGX_HTTP_V2_MAX_WINDOW) { |
| len = NGX_HTTP_V2_MAX_WINDOW; |
| } |
| |
| rb->buf = ngx_create_temp_buf(r->pool, (size_t) len); |
| |
| } else if (len >= 0 && len <= (off_t) clcf->client_body_buffer_size |
| && !r->request_body_in_file_only) |
| { |
| rb->buf = ngx_create_temp_buf(r->pool, (size_t) len); |
| |
| } else { |
| rb->buf = ngx_calloc_buf(r->pool); |
| |
| if (rb->buf != NULL) { |
| rb->buf->sync = 1; |
| } |
| } |
| |
| if (rb->buf == NULL) { |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| rb->rest = 1; |
| |
| buf = stream->preread; |
| |
| if (stream->in_closed) { |
| r->request_body_no_buffering = 0; |
| |
| if (buf) { |
| rc = ngx_http_v2_process_request_body(r, buf->pos, |
| buf->last - buf->pos, 1); |
| ngx_pfree(r->pool, buf->start); |
| return rc; |
| } |
| |
| return ngx_http_v2_process_request_body(r, NULL, 0, 1); |
| } |
| |
| if (buf) { |
| rc = ngx_http_v2_process_request_body(r, buf->pos, |
| buf->last - buf->pos, 0); |
| |
| ngx_pfree(r->pool, buf->start); |
| |
| if (rc != NGX_OK) { |
| stream->skip_data = 1; |
| return rc; |
| } |
| } |
| |
| if (r->request_body_no_buffering) { |
| size = (size_t) len - h2scf->preread_size; |
| |
| } else { |
| stream->no_flow_control = 1; |
| size = NGX_HTTP_V2_MAX_WINDOW - stream->recv_window; |
| } |
| |
| if (size) { |
| if (ngx_http_v2_send_window_update(stream->connection, |
| stream->node->id, size) |
| == NGX_ERROR) |
| { |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| h2c = stream->connection; |
| |
| if (!h2c->blocked) { |
| if (ngx_http_v2_send_output_queue(h2c) == NGX_ERROR) { |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| } |
| |
| stream->recv_window += size; |
| } |
| |
| if (!buf) { |
| ngx_add_timer(r->connection->read, clcf->client_body_timeout); |
| } |
| |
| r->read_event_handler = ngx_http_v2_read_client_request_body_handler; |
| r->write_event_handler = ngx_http_request_empty_handler; |
| |
| return NGX_AGAIN; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_process_request_body(ngx_http_request_t *r, u_char *pos, |
| size_t size, ngx_uint_t last) |
| { |
| ngx_buf_t *buf; |
| ngx_int_t rc; |
| ngx_connection_t *fc; |
| ngx_http_request_body_t *rb; |
| ngx_http_core_loc_conf_t *clcf; |
| |
| fc = r->connection; |
| rb = r->request_body; |
| buf = rb->buf; |
| |
| if (size) { |
| if (buf->sync) { |
| buf->pos = buf->start = pos; |
| buf->last = buf->end = pos + size; |
| |
| r->request_body_in_file_only = 1; |
| |
| } else { |
| if (size > (size_t) (buf->end - buf->last)) { |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client intended to send body data " |
| "larger than declared"); |
| |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| buf->last = ngx_cpymem(buf->last, pos, size); |
| } |
| } |
| |
| if (last) { |
| rb->rest = 0; |
| |
| if (fc->read->timer_set) { |
| ngx_del_timer(fc->read); |
| } |
| |
| if (r->request_body_no_buffering) { |
| ngx_post_event(fc->read, &ngx_posted_events); |
| return NGX_OK; |
| } |
| |
| rc = ngx_http_v2_filter_request_body(r); |
| |
| if (rc != NGX_OK) { |
| return rc; |
| } |
| |
| if (buf->sync) { |
| /* prevent reusing this buffer in the upstream module */ |
| rb->buf = NULL; |
| } |
| |
| if (r->headers_in.chunked) { |
| r->headers_in.content_length_n = rb->received; |
| } |
| |
| r->read_event_handler = ngx_http_block_reading; |
| rb->post_handler(r); |
| |
| return NGX_OK; |
| } |
| |
| if (size == 0) { |
| return NGX_OK; |
| } |
| |
| clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module); |
| ngx_add_timer(fc->read, clcf->client_body_timeout); |
| |
| if (r->request_body_no_buffering) { |
| ngx_post_event(fc->read, &ngx_posted_events); |
| return NGX_OK; |
| } |
| |
| if (buf->sync) { |
| return ngx_http_v2_filter_request_body(r); |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_filter_request_body(ngx_http_request_t *r) |
| { |
| ngx_buf_t *b, *buf; |
| ngx_int_t rc; |
| ngx_chain_t *cl; |
| ngx_http_request_body_t *rb; |
| ngx_http_core_loc_conf_t *clcf; |
| |
| rb = r->request_body; |
| buf = rb->buf; |
| |
| if (buf->pos == buf->last && rb->rest) { |
| cl = NULL; |
| goto update; |
| } |
| |
| cl = ngx_chain_get_free_buf(r->pool, &rb->free); |
| if (cl == NULL) { |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| b = cl->buf; |
| |
| ngx_memzero(b, sizeof(ngx_buf_t)); |
| |
| if (buf->pos != buf->last) { |
| r->request_length += buf->last - buf->pos; |
| rb->received += buf->last - buf->pos; |
| |
| if (r->headers_in.content_length_n != -1) { |
| if (rb->received > r->headers_in.content_length_n) { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client intended to send body data " |
| "larger than declared"); |
| |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| } else { |
| clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module); |
| |
| if (clcf->client_max_body_size |
| && rb->received > clcf->client_max_body_size) |
| { |
| ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, |
| "client intended to send too large chunked body: " |
| "%O bytes", rb->received); |
| |
| return NGX_HTTP_REQUEST_ENTITY_TOO_LARGE; |
| } |
| } |
| |
| b->temporary = 1; |
| b->pos = buf->pos; |
| b->last = buf->last; |
| b->start = b->pos; |
| b->end = b->last; |
| |
| buf->pos = buf->last; |
| } |
| |
| if (!rb->rest) { |
| if (r->headers_in.content_length_n != -1 |
| && r->headers_in.content_length_n != rb->received) |
| { |
| ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, |
| "client prematurely closed stream: " |
| "only %O out of %O bytes of request body received", |
| rb->received, r->headers_in.content_length_n); |
| |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| b->last_buf = 1; |
| } |
| |
| b->tag = (ngx_buf_tag_t) &ngx_http_v2_filter_request_body; |
| b->flush = r->request_body_no_buffering; |
| |
| update: |
| |
| rc = ngx_http_top_request_body_filter(r, cl); |
| |
| ngx_chain_update_chains(r->pool, &rb->free, &rb->busy, &cl, |
| (ngx_buf_tag_t) &ngx_http_v2_filter_request_body); |
| |
| return rc; |
| } |
| |
| |
| static void |
| ngx_http_v2_read_client_request_body_handler(ngx_http_request_t *r) |
| { |
| ngx_connection_t *fc; |
| |
| fc = r->connection; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, fc->log, 0, |
| "http2 read client request body handler"); |
| |
| if (fc->read->timedout) { |
| ngx_log_error(NGX_LOG_INFO, fc->log, NGX_ETIMEDOUT, "client timed out"); |
| |
| fc->timedout = 1; |
| r->stream->skip_data = 1; |
| |
| ngx_http_finalize_request(r, NGX_HTTP_REQUEST_TIME_OUT); |
| return; |
| } |
| |
| if (fc->error) { |
| ngx_log_error(NGX_LOG_INFO, fc->log, 0, |
| "client prematurely closed stream"); |
| |
| r->stream->skip_data = 1; |
| |
| ngx_http_finalize_request(r, NGX_HTTP_CLIENT_CLOSED_REQUEST); |
| return; |
| } |
| } |
| |
| |
| ngx_int_t |
| ngx_http_v2_read_unbuffered_request_body(ngx_http_request_t *r) |
| { |
| size_t window; |
| ngx_buf_t *buf; |
| ngx_int_t rc; |
| ngx_connection_t *fc; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_connection_t *h2c; |
| ngx_http_core_loc_conf_t *clcf; |
| |
| stream = r->stream; |
| fc = r->connection; |
| |
| if (fc->read->timedout) { |
| if (stream->recv_window) { |
| stream->skip_data = 1; |
| fc->timedout = 1; |
| |
| return NGX_HTTP_REQUEST_TIME_OUT; |
| } |
| |
| fc->read->timedout = 0; |
| } |
| |
| if (fc->error) { |
| stream->skip_data = 1; |
| return NGX_HTTP_BAD_REQUEST; |
| } |
| |
| rc = ngx_http_v2_filter_request_body(r); |
| |
| if (rc != NGX_OK) { |
| stream->skip_data = 1; |
| return rc; |
| } |
| |
| if (!r->request_body->rest) { |
| return NGX_OK; |
| } |
| |
| if (r->request_body->busy != NULL) { |
| return NGX_AGAIN; |
| } |
| |
| buf = r->request_body->buf; |
| |
| buf->pos = buf->start; |
| buf->last = buf->start; |
| |
| window = buf->end - buf->start; |
| h2c = stream->connection; |
| |
| if (h2c->state.stream == stream) { |
| window -= h2c->state.length; |
| } |
| |
| if (window <= stream->recv_window) { |
| if (window < stream->recv_window) { |
| ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0, |
| "http2 negative window update"); |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| return NGX_AGAIN; |
| } |
| |
| if (ngx_http_v2_send_window_update(h2c, stream->node->id, |
| window - stream->recv_window) |
| == NGX_ERROR) |
| { |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| if (ngx_http_v2_send_output_queue(h2c) == NGX_ERROR) { |
| stream->skip_data = 1; |
| return NGX_HTTP_INTERNAL_SERVER_ERROR; |
| } |
| |
| if (stream->recv_window == 0) { |
| clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module); |
| ngx_add_timer(fc->read, clcf->client_body_timeout); |
| } |
| |
| stream->recv_window = window; |
| |
| return NGX_AGAIN; |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_terminate_stream(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_stream_t *stream, ngx_uint_t status) |
| { |
| ngx_event_t *rev; |
| ngx_connection_t *fc; |
| |
| if (stream->rst_sent) { |
| return NGX_OK; |
| } |
| |
| if (ngx_http_v2_send_rst_stream(h2c, stream->node->id, status) |
| == NGX_ERROR) |
| { |
| return NGX_ERROR; |
| } |
| |
| stream->rst_sent = 1; |
| stream->skip_data = 1; |
| |
| fc = stream->request->connection; |
| fc->error = 1; |
| |
| rev = fc->read; |
| rev->handler(rev); |
| |
| return NGX_OK; |
| } |
| |
| |
| void |
| ngx_http_v2_close_stream(ngx_http_v2_stream_t *stream, ngx_int_t rc) |
| { |
| ngx_pool_t *pool; |
| ngx_uint_t push; |
| ngx_event_t *ev; |
| ngx_connection_t *fc; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_connection_t *h2c; |
| |
| h2c = stream->connection; |
| node = stream->node; |
| |
| ngx_log_debug4(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2 close stream %ui, queued %ui, " |
| "processing %ui, pushing %ui", |
| node->id, stream->queued, h2c->processing, h2c->pushing); |
| |
| fc = stream->request->connection; |
| |
| if (stream->queued) { |
| fc->write->handler = ngx_http_v2_close_stream_handler; |
| fc->read->handler = ngx_http_empty_handler; |
| return; |
| } |
| |
| if (!stream->rst_sent && !h2c->connection->error) { |
| |
| if (!stream->out_closed) { |
| if (ngx_http_v2_send_rst_stream(h2c, node->id, |
| fc->timedout ? NGX_HTTP_V2_PROTOCOL_ERROR |
| : NGX_HTTP_V2_INTERNAL_ERROR) |
| != NGX_OK) |
| { |
| h2c->connection->error = 1; |
| } |
| |
| } else if (!stream->in_closed) { |
| #if 0 |
| if (ngx_http_v2_send_rst_stream(h2c, node->id, NGX_HTTP_V2_NO_ERROR) |
| != NGX_OK) |
| { |
| h2c->connection->error = 1; |
| } |
| #else |
| /* |
| * At the time of writing at least the latest versions of Chrome |
| * do not properly handle RST_STREAM with NO_ERROR status. |
| * |
| * See: https://bugs.chromium.org/p/chromium/issues/detail?id=603182 |
| * |
| * As a workaround, the stream window is maximized before closing |
| * the stream. This allows a client to send up to 2 GB of data |
| * before getting blocked on flow control. |
| */ |
| |
| if (stream->recv_window < NGX_HTTP_V2_MAX_WINDOW |
| && ngx_http_v2_send_window_update(h2c, node->id, |
| NGX_HTTP_V2_MAX_WINDOW |
| - stream->recv_window) |
| != NGX_OK) |
| { |
| h2c->connection->error = 1; |
| } |
| #endif |
| } |
| } |
| |
| if (h2c->state.stream == stream) { |
| h2c->state.stream = NULL; |
| } |
| |
| push = stream->node->id % 2 == 0; |
| |
| node->stream = NULL; |
| |
| ngx_queue_insert_tail(&h2c->closed, &node->reuse); |
| h2c->closed_nodes++; |
| |
| /* |
| * This pool keeps decoded request headers which can be used by log phase |
| * handlers in ngx_http_free_request(). |
| * |
| * The pointer is stored into local variable because the stream object |
| * will be destroyed after a call to ngx_http_free_request(). |
| */ |
| pool = stream->pool; |
| |
| ngx_http_free_request(stream->request, rc); |
| |
| if (pool != h2c->state.pool) { |
| ngx_destroy_pool(pool); |
| |
| } else { |
| /* pool will be destroyed when the complete header is parsed */ |
| h2c->state.keep_pool = 0; |
| } |
| |
| ev = fc->read; |
| |
| if (ev->timer_set) { |
| ngx_del_timer(ev); |
| } |
| |
| if (ev->posted) { |
| ngx_delete_posted_event(ev); |
| } |
| |
| ev = fc->write; |
| |
| if (ev->timer_set) { |
| ngx_del_timer(ev); |
| } |
| |
| if (ev->posted) { |
| ngx_delete_posted_event(ev); |
| } |
| |
| fc->data = h2c->free_fake_connections; |
| h2c->free_fake_connections = fc; |
| |
| if (push) { |
| h2c->pushing--; |
| |
| } else { |
| h2c->processing--; |
| } |
| |
| if (h2c->processing || h2c->pushing || h2c->blocked) { |
| return; |
| } |
| |
| ev = h2c->connection->read; |
| |
| ev->handler = ngx_http_v2_handle_connection_handler; |
| ngx_post_event(ev, &ngx_posted_events); |
| } |
| |
| |
| static void |
| ngx_http_v2_close_stream_handler(ngx_event_t *ev) |
| { |
| ngx_connection_t *fc; |
| ngx_http_request_t *r; |
| |
| fc = ev->data; |
| r = fc->data; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, fc->log, 0, |
| "http2 close stream handler"); |
| |
| if (ev->timedout) { |
| ngx_log_error(NGX_LOG_INFO, fc->log, NGX_ETIMEDOUT, "client timed out"); |
| |
| fc->timedout = 1; |
| |
| ngx_http_v2_close_stream(r->stream, NGX_HTTP_REQUEST_TIME_OUT); |
| return; |
| } |
| |
| ngx_http_v2_close_stream(r->stream, 0); |
| } |
| |
| |
| static void |
| ngx_http_v2_handle_connection_handler(ngx_event_t *rev) |
| { |
| ngx_connection_t *c; |
| ngx_http_v2_connection_t *h2c; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, rev->log, 0, |
| "http2 handle connection handler"); |
| |
| c = rev->data; |
| h2c = c->data; |
| |
| if (c->error) { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| rev->handler = ngx_http_v2_read_handler; |
| |
| if (rev->ready) { |
| ngx_http_v2_read_handler(rev); |
| return; |
| } |
| |
| if (h2c->last_out && ngx_http_v2_send_output_queue(h2c) == NGX_ERROR) { |
| ngx_http_v2_finalize_connection(h2c, 0); |
| return; |
| } |
| |
| ngx_http_v2_handle_connection(c->data); |
| } |
| |
| |
| static void |
| ngx_http_v2_idle_handler(ngx_event_t *rev) |
| { |
| ngx_connection_t *c; |
| ngx_http_v2_srv_conf_t *h2scf; |
| ngx_http_v2_connection_t *h2c; |
| |
| c = rev->data; |
| h2c = c->data; |
| |
| ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "http2 idle handler"); |
| |
| if (rev->timedout || c->close) { |
| ngx_http_v2_finalize_connection(h2c, NGX_HTTP_V2_NO_ERROR); |
| return; |
| } |
| |
| #if (NGX_HAVE_KQUEUE) |
| |
| if (ngx_event_flags & NGX_USE_KQUEUE_EVENT) { |
| if (rev->pending_eof) { |
| c->log->handler = NULL; |
| ngx_log_error(NGX_LOG_INFO, c->log, rev->kq_errno, |
| "kevent() reported that client %V closed " |
| "idle connection", &c->addr_text); |
| #if (NGX_HTTP_SSL) |
| if (c->ssl) { |
| c->ssl->no_send_shutdown = 1; |
| } |
| #endif |
| ngx_http_close_connection(c); |
| return; |
| } |
| } |
| |
| #endif |
| |
| c->destroyed = 0; |
| ngx_reusable_connection(c, 0); |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| h2c->pool = ngx_create_pool(h2scf->pool_size, h2c->connection->log); |
| if (h2c->pool == NULL) { |
| ngx_http_v2_finalize_connection(h2c, NGX_HTTP_V2_INTERNAL_ERROR); |
| return; |
| } |
| |
| c->write->handler = ngx_http_v2_write_handler; |
| |
| rev->handler = ngx_http_v2_read_handler; |
| ngx_http_v2_read_handler(rev); |
| } |
| |
| |
| static void |
| ngx_http_v2_finalize_connection(ngx_http_v2_connection_t *h2c, |
| ngx_uint_t status) |
| { |
| ngx_uint_t i, size; |
| ngx_event_t *ev; |
| ngx_connection_t *c, *fc; |
| ngx_http_request_t *r; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| c = h2c->connection; |
| |
| h2c->blocked = 1; |
| |
| if (!c->error && !h2c->goaway) { |
| if (ngx_http_v2_send_goaway(h2c, status) != NGX_ERROR) { |
| (void) ngx_http_v2_send_output_queue(h2c); |
| } |
| } |
| |
| c->error = 1; |
| |
| if (!h2c->processing && !h2c->pushing) { |
| ngx_http_close_connection(c); |
| return; |
| } |
| |
| c->read->handler = ngx_http_empty_handler; |
| c->write->handler = ngx_http_empty_handler; |
| |
| h2c->last_out = NULL; |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| size = ngx_http_v2_index_size(h2scf); |
| |
| for (i = 0; i < size; i++) { |
| |
| for (node = h2c->streams_index[i]; node; node = node->index) { |
| stream = node->stream; |
| |
| if (stream == NULL) { |
| continue; |
| } |
| |
| stream->waiting = 0; |
| |
| r = stream->request; |
| fc = r->connection; |
| |
| fc->error = 1; |
| |
| if (stream->queued) { |
| stream->queued = 0; |
| |
| ev = fc->write; |
| ev->active = 0; |
| ev->ready = 1; |
| |
| } else { |
| ev = fc->read; |
| } |
| |
| ev->eof = 1; |
| ev->handler(ev); |
| } |
| } |
| |
| h2c->blocked = 0; |
| |
| if (h2c->processing || h2c->pushing) { |
| return; |
| } |
| |
| ngx_http_close_connection(c); |
| } |
| |
| |
| static ngx_int_t |
| ngx_http_v2_adjust_windows(ngx_http_v2_connection_t *h2c, ssize_t delta) |
| { |
| ngx_uint_t i, size; |
| ngx_event_t *wev; |
| ngx_http_v2_node_t *node; |
| ngx_http_v2_stream_t *stream; |
| ngx_http_v2_srv_conf_t *h2scf; |
| |
| h2scf = ngx_http_get_module_srv_conf(h2c->http_connection->conf_ctx, |
| ngx_http_v2_module); |
| |
| size = ngx_http_v2_index_size(h2scf); |
| |
| for (i = 0; i < size; i++) { |
| |
| for (node = h2c->streams_index[i]; node; node = node->index) { |
| stream = node->stream; |
| |
| if (stream == NULL) { |
| continue; |
| } |
| |
| if (delta > 0 |
| && stream->send_window |
| > (ssize_t) (NGX_HTTP_V2_MAX_WINDOW - delta)) |
| { |
| if (ngx_http_v2_terminate_stream(h2c, stream, |
| NGX_HTTP_V2_FLOW_CTRL_ERROR) |
| == NGX_ERROR) |
| { |
| return NGX_ERROR; |
| } |
| |
| continue; |
| } |
| |
| stream->send_window += delta; |
| |
| ngx_log_debug2(NGX_LOG_DEBUG_HTTP, h2c->connection->log, 0, |
| "http2:%ui adjusted window: %z", |
| node->id, stream->send_window); |
| |
| if (stream->send_window > 0 && stream->exhausted) { |
| stream->exhausted = 0; |
| |
| wev = stream->request->connection->write; |
| |
| wev->active = 0; |
| wev->ready = 1; |
| |
| if (!wev->delayed) { |
| wev->handler(wev); |
| } |
| } |
| } |
| } |
| |
| return NGX_OK; |
| } |
| |
| |
| static void |
| ngx_http_v2_set_dependency(ngx_http_v2_connection_t *h2c, |
| ngx_http_v2_node_t *node, ngx_uint_t depend, ngx_uint_t exclusive) |
| { |
| ngx_queue_t *children, *q; |
| ngx_http_v2_node_t *parent, *child, *next; |
| |
| parent = depend ? ngx_http_v2_get_node_by_id(h2c, depend, 0) : NULL; |
| |
| if (parent == NULL) { |
| parent = NGX_HTTP_V2_ROOT; |
| |
| if (depend != 0) { |
| exclusive = 0; |
| } |
| |
| node->rank = 1; |
| node->rel_weight = (1.0 / 256) * node->weight; |
| |
| children = &h2c->dependencies; |
| |
| } else { |
| if (node->parent != NULL) { |
| |
| for (next = parent->parent; |
| next != NGX_HTTP_V2_ROOT && next->rank >= node->rank; |
| next = next->parent) |
| { |
| if (next != node) { |
| continue; |
| } |
| |
| ngx_queue_remove(&parent->queue); |
| ngx_queue_insert_after(&node->queue, &parent->queue); |
| |
| parent->parent = node->parent; |
| |
| if (node->parent == NGX_HTTP_V2_ROOT) { |
| parent->rank = 1; |
| parent->rel_weight = (1.0 / 256) * parent->weight; |
| |
| } else { |
| parent->rank = node->parent->rank + 1; |
| parent->rel_weight = (node->parent->rel_weight / 256) |
| * parent->weight; |
| } |
| |
| if (!exclusive) { |
| ngx_http_v2_node_children_update(parent); |
| } |
| |
| break; |
| } |
| } |
| |
| node->rank = parent->rank + 1; |
| node->rel_weight = (parent->rel_weight / 256) * node->weight; |
| |
| if (parent->stream == NULL) { |
| ngx_queue_remove(&parent->reuse); |
| ngx_queue_insert_tail(&h2c->closed, &parent->reuse); |
| } |
| |
| children = &parent->children; |
| } |
| |
| if (exclusive) { |
| for (q = ngx_queue_head(children); |
| q != ngx_queue_sentinel(children); |
| q = ngx_queue_next(q)) |
| { |
| child = ngx_queue_data(q, ngx_http_v2_node_t, queue); |
| child->parent = node; |
| } |
| |
| ngx_queue_add(&node->children, children); |
| ngx_queue_init(children); |
| } |
| |
| if (node->parent != NULL) { |
| ngx_queue_remove(&node->queue); |
| } |
| |
| ngx_queue_insert_tail(children, &node->queue); |
| |
| node->parent = parent; |
| |
| ngx_http_v2_node_children_update(node); |
| } |
| |
| |
| static void |
| ngx_http_v2_node_children_update(ngx_http_v2_node_t *node) |
| { |
| ngx_queue_t *q; |
| ngx_http_v2_node_t *child; |
| |
| for (q = ngx_queue_head(&node->children); |
| q != ngx_queue_sentinel(&node->children); |
| q = ngx_queue_next(q)) |
| { |
| child = ngx_queue_data(q, ngx_http_v2_node_t, queue); |
| |
| child->rank = node->rank + 1; |
| child->rel_weight = (node->rel_weight / 256) * child->weight; |
| |
| ngx_http_v2_node_children_update(child); |
| } |
| } |
| |
| |
| static void |
| ngx_http_v2_pool_cleanup(void *data) |
| { |
| ngx_http_v2_connection_t *h2c = data; |
| |
| if (h2c->state.pool) { |
| ngx_destroy_pool(h2c->state.pool); |
| } |
| |
| if (h2c->pool) { |
| ngx_destroy_pool(h2c->pool); |
| } |
| } |