/src/php-src/main/SAPI.c

Source
/*
   +----------------------------------------------------------------------+
   | Copyright © The PHP Group and Contributors.                          |
   +----------------------------------------------------------------------+
   | This source file is subject to the Modified BSD License that is      |
   | bundled with this package in the file LICENSE, and is available      |
   | through the World Wide Web at <https://www.php.net/license/>.        |
   |                                                                      |
   | SPDX-License-Identifier: BSD-3-Clause                                |
   +----------------------------------------------------------------------+
   | Original design:  Shane Caraveo <shane@caraveo.com>                  |
   | Authors: Andi Gutmans <andi@php.net>                                 |
   |          Zeev Suraski <zeev@php.net>                                 |
   +----------------------------------------------------------------------+
*/

#include <ctype.h>
#include <sys/stat.h>
#include <locale.h>

#include "php.h"
#include "SAPI.h"
#include "php_variables.h"
#include "php_ini.h"
#ifdef ZTS
#include "TSRM.h"
#endif
#ifdef HAVE_SYS_TIME_H
#include <sys/time.h>
#elif defined(PHP_WIN32)
#include "win32/time.h"
#endif

#include "rfc1867.h"

#include "php_content_types.h"

#ifdef ZTS
SAPI_API int sapi_globals_id;
SAPI_API size_t sapi_globals_offset;
#else
sapi_globals_struct sapi_globals;
#endif

static void _type_dtor(zval *zv)
{
  free(Z_PTR_P(zv));
}

static void sapi_globals_ctor(sapi_globals_struct *sapi_globals)
{
  memset(sapi_globals, 0, sizeof(*sapi_globals));
  zend_hash_init(&sapi_globals->known_post_content_types, 8, NULL, _type_dtor, 1);
  php_setup_sapi_content_types();
}

static void sapi_globals_dtor(sapi_globals_struct *sapi_globals)
{
  zend_hash_destroy(&sapi_globals->known_post_content_types);
}

/* True globals (no need for thread safety) */
SAPI_API sapi_module_struct sapi_module;


SAPI_API void sapi_startup(sapi_module_struct *sf)
{
  sf->ini_entries = NULL;
  sapi_module = *sf;

#ifdef ZTS
  ts_allocate_fast_id(&sapi_globals_id, &sapi_globals_offset, sizeof(sapi_globals_struct), (ts_allocate_ctor) sapi_globals_ctor, (ts_allocate_dtor) sapi_globals_dtor);
# ifdef PHP_WIN32
  _configthreadlocale(_ENABLE_PER_THREAD_LOCALE);
# endif
#else
  sapi_globals_ctor(&sapi_globals);
#endif

#ifdef PHP_WIN32
  tsrm_win32_startup();
#endif

  reentrancy_startup();
}

SAPI_API void sapi_shutdown(void)
{
#ifdef ZTS
  ts_free_id(sapi_globals_id);
#else
  sapi_globals_dtor(&sapi_globals);
#endif

  reentrancy_shutdown();

#ifdef PHP_WIN32
  tsrm_win32_shutdown();
#endif
}


SAPI_API void sapi_free_header(sapi_header_struct *sapi_header)
{
  efree(sapi_header->header);
}

/* {{{ call a header function */
PHP_FUNCTION(header_register_callback)
{
  zend_fcall_info fci;
  zend_fcall_info_cache fcc;

  if (zend_parse_parameters(ZEND_NUM_ARGS(), "f", &fci, &fcc) == FAILURE) {
    RETURN_THROWS();
  }

  if (Z_TYPE(SG(callback_func)) != IS_UNDEF) {
    zval_ptr_dtor(&SG(callback_func));
    SG(fci_cache) = empty_fcall_info_cache;
  }

  /* Don't store callback if headers have already been sent:
   * It won't get used and we won't have a chance to release it. */
  if (!SG(headers_sent)) {
    ZVAL_COPY(&SG(callback_func), &fci.function_name);
  }

  RETURN_TRUE;
}
/* }}} */

static void sapi_run_header_callback(zval *callback)
{
  int   error;
  zend_fcall_info fci;
  char *callback_error = NULL;
  zval retval;

  if (zend_fcall_info_init(callback, 0, &fci, &SG(fci_cache), NULL, &callback_error) == SUCCESS) {
    fci.retval = &retval;

    error = zend_call_function(&fci, &SG(fci_cache));
    if (error == FAILURE) {
      goto callback_failed;
    } else {
      zval_ptr_dtor(&retval);
    }
  } else {
callback_failed:
    php_error_docref(NULL, E_WARNING, "Could not call the sapi_header_callback");
  }

  if (callback_error) {
    efree(callback_error);
  }
}

SAPI_API void sapi_handle_post(void *arg)
{
  if (SG(request_info).post_entry && SG(request_info).content_type_dup) {
    SG(request_info).post_entry->post_handler(SG(request_info).content_type_dup, arg);
    efree(SG(request_info).content_type_dup);
    SG(request_info).content_type_dup = NULL;
  }
}

SAPI_API void sapi_read_post_data(void)
{
  sapi_post_entry *post_entry;
  uint32_t content_type_length = (uint32_t)strlen(SG(request_info).content_type);
  char *content_type = estrndup(SG(request_info).content_type, content_type_length);
  char *p;
  char oldchar=0;
  void (*post_reader_func)(void) = NULL;


  /* dedicated implementation for increased performance:
   * - Make the content type lowercase
   * - Trim descriptive data, stay with the content-type only
   */
  for (p = content_type; p < content_type + content_type_length; p++) {
    switch (*p) {
      case ';':
      case ',':
      case ' ':
        content_type_length = p-content_type;
        oldchar = *p;
        *p = 0;
        break;
      default:
        *p = tolower((unsigned char)*p);
        break;
    }
  }

  /* now try to find an appropriate POST content handler */
  if ((post_entry = zend_hash_str_find_ptr(&SG(known_post_content_types), content_type,
      content_type_length)) != NULL) {
    /* found one, register it for use */
    SG(request_info).post_entry = post_entry;
    post_reader_func = post_entry->post_reader;
  } else {
    /* fallback */
    SG(request_info).post_entry = NULL;
    if (UNEXPECTED(!sapi_module.default_post_reader)) {
      /* this should not happen as there should always be a default_post_reader */
      SG(request_info).content_type_dup = NULL;
      sapi_module.sapi_error(E_WARNING, "Unsupported content type:  '%s'", content_type);
      efree(content_type);
      return;
    }
  }
  if (oldchar) {
    *(p-1) = oldchar;
  }

  /* the content_type_dup is not set at this stage so no need to try to free it first */
  SG(request_info).content_type_dup = content_type;

  if(post_reader_func) {
    post_reader_func();
  }

  if(sapi_module.default_post_reader) {
    sapi_module.default_post_reader();
  }
}

SAPI_API size_t sapi_read_post_block(char *buffer, size_t buflen)
{
  size_t read_bytes;

  if (!sapi_module.read_post) {
    return 0;
  }

  read_bytes = sapi_module.read_post(buffer, buflen);

  if (read_bytes > 0) {
    /* gogo */
    SG(read_post_bytes) += read_bytes;
  }
  if (read_bytes < buflen) {
    /* done */
    SG(post_read) = 1;
  }

  return read_bytes;
}

SAPI_API SAPI_POST_READER_FUNC(sapi_read_standard_form_data)
{
  zend_long post_max_size = REQUEST_PARSE_BODY_OPTION_GET(post_max_size, SG(post_max_size));

  if (post_max_size > 0 && SG(request_info).content_length > post_max_size) {
    php_error_docref(NULL, E_WARNING, "POST Content-Length of " ZEND_LONG_FMT " bytes exceeds the limit of " ZEND_LONG_FMT " bytes",
          SG(request_info).content_length, post_max_size);
    return;
  }


  SG(request_info).request_body = php_stream_temp_create_ex(TEMP_STREAM_DEFAULT, SAPI_POST_BLOCK_SIZE, PG(upload_tmp_dir));

  if (sapi_module.read_post) {
    size_t read_bytes;

    for (;;) {
      char buffer[SAPI_POST_BLOCK_SIZE];

      read_bytes = sapi_read_post_block(buffer, SAPI_POST_BLOCK_SIZE);

      if (read_bytes > 0) {
        if (php_stream_write(SG(request_info).request_body, buffer, read_bytes) != read_bytes) {
          /* if parts of the stream can't be written, purge it completely */
          php_stream_truncate_set_size(SG(request_info).request_body, 0);
          php_error_docref(NULL, E_WARNING, "POST data can't be buffered; all data discarded");
          break;
        }
      }

      if (post_max_size > 0 && SG(read_post_bytes) > post_max_size) {
        php_error_docref(NULL, E_WARNING, "Actual POST length does not match Content-Length, and exceeds " ZEND_LONG_FMT " bytes", post_max_size);
        break;
      }

      if (read_bytes < SAPI_POST_BLOCK_SIZE) {
        /* done */
        break;
      }
    }
    php_stream_rewind(SG(request_info).request_body);
  }
}


static inline char *get_default_content_type(uint32_t prefix_len, uint32_t *len)
{
  char *mimetype, *charset, *content_type;
  uint32_t mimetype_len, charset_len;

  if (SG(default_mimetype)) {
    mimetype = SG(default_mimetype);
    mimetype_len = (uint32_t)strlen(SG(default_mimetype));
  } else {
    mimetype = SAPI_DEFAULT_MIMETYPE;
    mimetype_len = sizeof(SAPI_DEFAULT_MIMETYPE) - 1;
  }
  if (SG(default_charset)) {
    charset = SG(default_charset);
    charset_len = (uint32_t)strlen(SG(default_charset));
  } else {
    charset = SAPI_DEFAULT_CHARSET;
    charset_len = sizeof(SAPI_DEFAULT_CHARSET) - 1;
  }

  if (*charset && strncasecmp(mimetype, "text/", 5) == 0) {
    char *p;

    *len = prefix_len + mimetype_len + sizeof("; charset=") - 1 + charset_len;
    content_type = (char*)emalloc(*len + 1);
    p = content_type + prefix_len;
    p = zend_mempcpy(p, mimetype, mimetype_len);
    p = zend_mempcpy(p, "; charset=", sizeof("; charset=") - 1);
    memcpy(p, charset, charset_len + 1);
  } else {
    *len = prefix_len + mimetype_len;
    content_type = (char*)emalloc(*len + 1);
    memcpy(content_type + prefix_len, mimetype, mimetype_len + 1);
  }
  return content_type;
}


SAPI_API char *sapi_get_default_content_type(void)
{
  uint32_t len;

  return get_default_content_type(0, &len);
}


SAPI_API void sapi_get_default_content_type_header(sapi_header_struct *default_header)
{
  uint32_t len;

  default_header->header = get_default_content_type(sizeof("Content-type: ")-1, &len);
  default_header->header_len = len;
  memcpy(default_header->header, "Content-type: ", sizeof("Content-type: ") - 1);
}

/*
 * Add charset on content-type header if the MIME type starts with
 * "text/", the default_charset directive is not empty and
 * there is not already a charset option in there.
 *
 * If "mimetype" is non-NULL, it should point to a pointer allocated
 * with emalloc(). If a charset is added, the string will be
 * re-allocated and the new length is returned.  If mimetype is
 * unchanged, 0 is returned.
 *
 */
SAPI_API size_t sapi_apply_default_charset(char **mimetype, size_t len)
{
  char *charset, *newtype;
  size_t newlen;
  charset = SG(default_charset) ? SG(default_charset) : SAPI_DEFAULT_CHARSET;

  if (*mimetype != NULL) {
    if (*charset && strncmp(*mimetype, "text/", 5) == 0 && strstr(*mimetype, "charset=") == NULL) {
      newlen = len + (sizeof(";charset=")-1) + strlen(charset);
      newtype = emalloc(newlen + 1);
      PHP_STRLCPY(newtype, *mimetype, newlen + 1, len);
      strlcat(newtype, ";charset=", newlen + 1);
      strlcat(newtype, charset, newlen + 1);
      efree(*mimetype);
      *mimetype = newtype;
      return newlen;
    }
  }
  return 0;
}

SAPI_API void sapi_activate_headers_only(void)
{
  if (SG(request_info).headers_read == 1)
    return;
  SG(request_info).headers_read = 1;
  zend_llist_init(&SG(sapi_headers).headers, sizeof(sapi_header_struct),
      (void (*)(void *)) sapi_free_header, 0);
  SG(sapi_headers).send_default_content_type = 1;

  /* SG(sapi_headers).http_response_code = 200; */
  SG(sapi_headers).http_status_line = NULL;
  SG(sapi_headers).mimetype = NULL;
  SG(read_post_bytes) = 0;
  SG(request_info).request_body = NULL;
  SG(request_info).current_user = NULL;
  SG(request_info).current_user_length = 0;
  SG(request_info).no_headers = 0;
  SG(request_info).post_entry = NULL;
  SG(global_request_time) = 0;

  /*
   * It's possible to override this general case in the activate() callback,
   * if necessary.
   */
  if (SG(request_info).request_method && !strcmp(SG(request_info).request_method, "HEAD")) {
    SG(request_info).headers_only = 1;
  } else {
    SG(request_info).headers_only = 0;
  }
  if (SG(server_context)) {
    SG(request_info).cookie_data = sapi_module.read_cookies();
    if (sapi_module.activate) {
      sapi_module.activate();
    }
  }
  if (sapi_module.input_filter_init ) {
    sapi_module.input_filter_init();
  }
}

/*
 * Called from php_request_startup() for every request.
 */

SAPI_API void sapi_activate(void)
{
  zend_llist_init(&SG(sapi_headers).headers, sizeof(sapi_header_struct), (void (*)(void *)) sapi_free_header, 0);
  SG(sapi_headers).send_default_content_type = 1;

  /*
  SG(sapi_headers).http_response_code = 200;
  */
  SG(sapi_headers).http_status_line = NULL;
  SG(sapi_headers).mimetype = NULL;
  SG(headers_sent) = 0;
  ZVAL_UNDEF(&SG(callback_func));
  SG(read_post_bytes) = 0;
  SG(request_info).request_body = NULL;
  SG(request_info).current_user = NULL;
  SG(request_info).current_user_length = 0;
  SG(request_info).no_headers = 0;
  SG(request_info).post_entry = NULL;
  SG(request_info).proto_num = 1000; /* Default to HTTP 1.0 */
  SG(global_request_time) = 0;
  SG(post_read) = 0;
  /* It's possible to override this general case in the activate() callback, if necessary. */
  if (SG(request_info).request_method && !strcmp(SG(request_info).request_method, "HEAD")) {
    SG(request_info).headers_only = 1;
  } else {
    SG(request_info).headers_only = 0;
  }
  SG(rfc1867_uploaded_files) = NULL;
  SG(request_parse_body_context).throw_exceptions = false;
  memset(&SG(request_parse_body_context).options_cache, 0, sizeof(SG(request_parse_body_context).options_cache));

  if (sapi_module.pre_request_init) {
    sapi_module.pre_request_init();
  }

  /* Handle request method */
  if (SG(server_context)) {
    if (PG(enable_post_data_reading)
    &&  SG(request_info).content_type
    &&  SG(request_info).request_method
    && !strcmp(SG(request_info).request_method, "POST")) {
      /* HTTP POST may contain form data to be processed into variables
       * depending on given content type */
      sapi_read_post_data();
    } else {
      SG(request_info).content_type_dup = NULL;
    }

    /* Cookies */
    SG(request_info).cookie_data = sapi_module.read_cookies();
  }
  if (sapi_module.activate) {
    sapi_module.activate();
  }
  if (sapi_module.input_filter_init) {
    sapi_module.input_filter_init();
  }
}


static void sapi_send_headers_free(void)
{
  if (SG(sapi_headers).http_status_line) {
    efree(SG(sapi_headers).http_status_line);
    SG(sapi_headers).http_status_line = NULL;
  }
}

SAPI_API void sapi_deactivate_module(void)
{
  zend_llist_destroy(&SG(sapi_headers).headers);
  if (SG(request_info).request_body) {
    SG(request_info).request_body = NULL;
  } else if (SG(server_context)) {
    if (!SG(post_read)) {
      /* make sure we've consumed all request input data */
      char dummy[SAPI_POST_BLOCK_SIZE];
      size_t read_bytes;

      do {
        read_bytes = sapi_read_post_block(dummy, SAPI_POST_BLOCK_SIZE);
      } while (SAPI_POST_BLOCK_SIZE == read_bytes);
    }
  }
  if (SG(request_info).auth_user) {
    efree(SG(request_info).auth_user);
    SG(request_info).auth_user = NULL;
  }
  if (SG(request_info).auth_password) {
    efree(SG(request_info).auth_password);
    SG(request_info).auth_password = NULL;
  }
  if (SG(request_info).auth_digest) {
    efree(SG(request_info).auth_digest);
    SG(request_info).auth_digest = NULL;
  }
  if (SG(request_info).content_type_dup) {
    efree(SG(request_info).content_type_dup);
  }
  if (SG(request_info).current_user) {
    efree(SG(request_info).current_user);
  }
  if (sapi_module.deactivate) {
    sapi_module.deactivate();
  }
}

SAPI_API void sapi_deactivate_destroy(void)
{
  if (SG(rfc1867_uploaded_files)) {
    destroy_uploaded_files_hash();
  }
  if (SG(sapi_headers).mimetype) {
    efree(SG(sapi_headers).mimetype);
    SG(sapi_headers).mimetype = NULL;
  }
  sapi_send_headers_free();
  SG(sapi_started) = 0;
  SG(headers_sent) = 0;
  SG(request_info).headers_read = 0;
  SG(global_request_time) = 0;
}

SAPI_API void sapi_deactivate(void)
{
  sapi_deactivate_module();
  sapi_deactivate_destroy();
}


SAPI_API void sapi_initialize_empty_request(void)
{
  SG(server_context) = NULL;
  SG(request_info).request_method = NULL;
  SG(request_info).auth_digest = SG(request_info).auth_user = SG(request_info).auth_password = NULL;
  SG(request_info).content_type_dup = NULL;
}


static int sapi_extract_response_code(const char *header_line)
{
  int code = 200;
  const char *ptr;

  for (ptr = header_line; *ptr; ptr++) {
    if (*ptr == ' ' && *(ptr + 1) != ' ') {
      code = atoi(ptr + 1);
      break;
    }
  }

  return code;
}


static void sapi_update_response_code(int ncode)
{
  /* if the status code did not change, we do not want
     to change the status line, and no need to change the code */
  if (SG(sapi_headers).http_response_code == ncode) {
    return;
  }

  if (SG(sapi_headers).http_status_line) {
    efree(SG(sapi_headers).http_status_line);
    SG(sapi_headers).http_status_line = NULL;
  }
  SG(sapi_headers).http_response_code = ncode;
}

/*
 * since zend_llist_del_element only removes one matched item once,
 * we should remove them manually
 */
static void sapi_remove_header(zend_llist *l, char *name, size_t len, size_t prefix_len)
{
  sapi_header_struct *header;
  zend_llist_element *next;
  zend_llist_element *current=l->head;

  while (current) {
    header = (sapi_header_struct *)(current->data);
    next = current->next;
    /*
     * prefix_len is set for DELETE_PREFIX (used for deleting i.e.
     * "Set-Cookie: PHPSESSID=", where we need more than just key)
     * look for the : otherwise
     */
    if (header->header_len > len
        && (header->header[len] == ':' || (prefix_len && len > prefix_len))
        && !strncasecmp(header->header, name, len)) {
      if (current->prev) {
        current->prev->next = next;
      } else {
        l->head = next;
      }
      if (next) {
        next->prev = current->prev;
      } else {
        l->tail = current->prev;
      }
      sapi_free_header(header);
      efree(current);
      --l->count;
    }
    current = next;
  }
}

SAPI_API int sapi_add_header_ex(const char *header_line, size_t header_line_len, bool duplicate, bool replace)
{
  sapi_header_line ctr = {0};
  int r;

  ctr.line = header_line;
  ctr.line_len = header_line_len;

  r = sapi_header_op(replace ? SAPI_HEADER_REPLACE : SAPI_HEADER_ADD,
      &ctr);

  if (!duplicate)
    efree((void *) header_line);

  return r;
}

static void sapi_header_add_op(sapi_header_op_enum op, sapi_header_struct *sapi_header)
{
  if (!sapi_module.header_handler ||
    (SAPI_HEADER_ADD & sapi_module.header_handler(sapi_header, op, &SG(sapi_headers)))) {
    if (op == SAPI_HEADER_REPLACE) {
      char *colon_offset = strchr(sapi_header->header, ':');

      if (colon_offset) {
        char sav = *colon_offset;

        *colon_offset = 0;
        sapi_remove_header(&SG(sapi_headers).headers, sapi_header->header, strlen(sapi_header->header), 0);
        *colon_offset = sav;
      }
    }
    zend_llist_add_element(&SG(sapi_headers).headers, (void *) sapi_header);
  } else {
    sapi_free_header(sapi_header);
  }
}

SAPI_API int sapi_header_op(sapi_header_op_enum op, void *arg)
{
  sapi_header_struct sapi_header;
  char *colon_offset;
  char *header_line;
  size_t header_line_len, header_len;
  int http_response_code;

  if (SG(headers_sent) && !SG(request_info).no_headers) {
    const char *output_start_filename = php_output_get_start_filename();
    int output_start_lineno = php_output_get_start_lineno();

    if (output_start_filename) {
      sapi_module.sapi_error(E_WARNING, "Cannot modify header information - headers already sent by (output started at %s:%d)",
        output_start_filename, output_start_lineno);
    } else {
      sapi_module.sapi_error(E_WARNING, "Cannot modify header information - headers already sent");
    }
    return FAILURE;
  }

  switch (op) {
    case SAPI_HEADER_SET_STATUS:
      sapi_update_response_code((int)(intptr_t) arg);
      return SUCCESS;

    case SAPI_HEADER_ADD:
    case SAPI_HEADER_REPLACE:
    case SAPI_HEADER_DELETE_PREFIX:
    case SAPI_HEADER_DELETE: {
        sapi_header_line *p = arg;

        if (!p->line || !p->line_len) {
          return FAILURE;
        }
        header_line = estrndup(p->line, p->line_len);
        header_line_len = p->line_len;
        if (op == SAPI_HEADER_DELETE_PREFIX) {
          header_len = p->header_len;
          http_response_code = 0;
        } else {
          header_len = 0;
          http_response_code = p->response_code;
        }
        break;
      }

    case SAPI_HEADER_DELETE_ALL:
      if (sapi_module.header_handler) {
        sapi_module.header_handler(&sapi_header, op, &SG(sapi_headers));
      }
      zend_llist_clean(&SG(sapi_headers).headers);
      return SUCCESS;

    default:
      return FAILURE;
  }

  /* cut off trailing spaces, linefeeds and carriage-returns */
  if (header_line_len && isspace((unsigned char)header_line[header_line_len - 1])) {
    do {
      header_line_len--;
    } while(header_line_len && isspace((unsigned char)header_line[header_line_len - 1]));
    header_line[header_line_len]='\0';
  }

  if (op == SAPI_HEADER_DELETE || op == SAPI_HEADER_DELETE_PREFIX) {
    if (op == SAPI_HEADER_DELETE && strchr(header_line, ':')) {
      efree(header_line);
      sapi_module.sapi_error(E_WARNING, "Header to delete may not contain colon.");
      return FAILURE;
    }
    if (sapi_module.header_handler) {
      sapi_header.header = header_line;
      sapi_header.header_len = header_line_len;
      sapi_module.header_handler(&sapi_header, op, &SG(sapi_headers));
    }
    sapi_remove_header(&SG(sapi_headers).headers, header_line, header_line_len, header_len);
    efree(header_line);
    return SUCCESS;
  } else {
    /* new line/NUL character safety check */
    uint32_t i;
    for (i = 0; i < header_line_len; i++) {
      /* RFC 7230 ch. 3.2.4 deprecates folding support */
      if (header_line[i] == '\n' || header_line[i] == '\r') {
        efree(header_line);
        sapi_module.sapi_error(E_WARNING, "Header may not contain "
            "more than a single header, new line detected");
        return FAILURE;
      }
      if (header_line[i] == '\0') {
        efree(header_line);
        sapi_module.sapi_error(E_WARNING, "Header may not contain NUL bytes");
        return FAILURE;
      }
    }
  }

  sapi_header.header = header_line;
  sapi_header.header_len = header_line_len;

  /* Check the header for a few cases that we have special support for in SAPI */
  if (header_line_len>=5
    && !strncasecmp(header_line, "HTTP/", 5)) {
    /* filter out the response code */
    sapi_update_response_code(sapi_extract_response_code(header_line));
    /* sapi_update_response_code doesn't free the status line if the code didn't change */
    if (SG(sapi_headers).http_status_line) {
      efree(SG(sapi_headers).http_status_line);
    }
    SG(sapi_headers).http_status_line = header_line;
    return SUCCESS;
  } else {
    colon_offset = strchr(header_line, ':');
    if (colon_offset) {
      *colon_offset = 0;
      if (!strcasecmp(header_line, "Content-Type")) {
        char *ptr = colon_offset+1, *mimetype = NULL, *newheader;
        size_t len = header_line_len - (ptr - header_line), newlen;
        while (*ptr == ' ') {
          ptr++;
          len--;
        }

        mimetype = estrdup(ptr);
        newlen = sapi_apply_default_charset(&mimetype, len);
        if (!SG(sapi_headers).mimetype){
          SG(sapi_headers).mimetype = estrdup(mimetype);
        }

        if (newlen != 0) {
          newlen += sizeof("Content-type: ");
          newheader = emalloc(newlen);
          PHP_STRLCPY(newheader, "Content-type: ", newlen, sizeof("Content-type: ")-1);
          strlcat(newheader, mimetype, newlen);
          sapi_header.header = newheader;
          sapi_header.header_len = (uint32_t)(newlen - 1);
          efree(header_line);
        }
        efree(mimetype);
        SG(sapi_headers).send_default_content_type = 0;
      } else if (!strcasecmp(header_line, "Content-Length")) {
        /* Script is setting Content-length. The script cannot reasonably
         * know the size of the message body after compression, so it's best
         * to disable compression altogether. This contributes to making scripts
         * portable between setups that have and don't have zlib compression
         * enabled globally. See req #44164 */
        zend_string *key = ZSTR_INIT_LITERAL("zlib.output_compression", 0);
        zend_alter_ini_entry_chars(key,
          "0", sizeof("0") - 1, PHP_INI_USER, PHP_INI_STAGE_RUNTIME);
        zend_string_release_ex(key, 0);
      } else if (!strcasecmp(header_line, "Location")) {
        if ((SG(sapi_headers).http_response_code < 300 ||
          SG(sapi_headers).http_response_code > 399) &&
          SG(sapi_headers).http_response_code != 201) {
          /* Return a Found Redirect if one is not already specified */
          if (http_response_code) { /* user specified redirect code */
            sapi_update_response_code(http_response_code);
          } else if (SG(request_info).proto_num > 1000 &&
             SG(request_info).request_method &&
             strcmp(SG(request_info).request_method, "HEAD") &&
             strcmp(SG(request_info).request_method, "GET")) {
            sapi_update_response_code(303);
          } else {
            sapi_update_response_code(302);
          }
        }
      } else if (!strcasecmp(header_line, "WWW-Authenticate")) { /* HTTP Authentication */
        sapi_update_response_code(401); /* authentication-required */
      }
      if (sapi_header.header==header_line) {
        *colon_offset = ':';
      }
    }
  }
  if (http_response_code) {
    sapi_update_response_code(http_response_code);
  }
  sapi_header_add_op(op, &sapi_header);
  return SUCCESS;
}


SAPI_API int sapi_send_headers(void)
{
  int retval;
  int ret = FAILURE;

  if (SG(headers_sent) || SG(request_info).no_headers) {
    return SUCCESS;
  }

  /* Success-oriented. We set headers_sent to 1 here to avoid an infinite loop
   * in case of an error situation.
   */
  if (SG(sapi_headers).send_default_content_type && sapi_module.send_headers) {
      uint32_t len = 0;
    char *default_mimetype = get_default_content_type(0, &len);

    if (default_mimetype && len) {
      sapi_header_struct default_header;

      SG(sapi_headers).mimetype = default_mimetype;

      default_header.header_len = sizeof("Content-type: ") - 1 + len;
      default_header.header = emalloc(default_header.header_len + 1);

      memcpy(default_header.header, "Content-type: ", sizeof("Content-type: ") - 1);
      memcpy(default_header.header + sizeof("Content-type: ") - 1, SG(sapi_headers).mimetype, len + 1);

      sapi_header_add_op(SAPI_HEADER_ADD, &default_header);
    } else {
      efree(default_mimetype);
    }
    SG(sapi_headers).send_default_content_type = 0;
  }

  if (Z_TYPE(SG(callback_func)) != IS_UNDEF) {
    zval cb;
    ZVAL_COPY_VALUE(&cb, &SG(callback_func));
    ZVAL_UNDEF(&SG(callback_func));
    sapi_run_header_callback(&cb);
    zval_ptr_dtor(&cb);
  }

  SG(headers_sent) = 1;

  if (sapi_module.send_headers) {
    retval = sapi_module.send_headers(&SG(sapi_headers));
  } else {
    retval = SAPI_HEADER_DO_SEND;
  }

  switch (retval) {
    case SAPI_HEADER_SENT_SUCCESSFULLY:
      ret = SUCCESS;
      break;
    case SAPI_HEADER_DO_SEND: {
        sapi_header_struct http_status_line;
        char buf[255];

        if (SG(sapi_headers).http_status_line) {
          http_status_line.header = SG(sapi_headers).http_status_line;
          http_status_line.header_len = (uint32_t)strlen(SG(sapi_headers).http_status_line);
        } else {
          http_status_line.header = buf;
          http_status_line.header_len = slprintf(buf, sizeof(buf), "HTTP/1.0 %d X", SG(sapi_headers).http_response_code);
        }
        sapi_module.send_header(&http_status_line, SG(server_context));
      }
      zend_llist_apply_with_argument(&SG(sapi_headers).headers, (llist_apply_with_arg_func_t) sapi_module.send_header, SG(server_context));
      if(SG(sapi_headers).send_default_content_type) {
        sapi_header_struct default_header;

        sapi_get_default_content_type_header(&default_header);
        sapi_module.send_header(&default_header, SG(server_context));
        sapi_free_header(&default_header);
      }
      sapi_module.send_header(NULL, SG(server_context));
      ret = SUCCESS;
      break;
    case SAPI_HEADER_SEND_FAILED:
      SG(headers_sent) = 0;
      ret = FAILURE;
      break;
  }

  sapi_send_headers_free();

  return ret;
}


SAPI_API int sapi_register_post_entries(const sapi_post_entry *post_entries)
{
  const sapi_post_entry *p=post_entries;

  while (p->content_type) {
    if (sapi_register_post_entry(p) == FAILURE) {
      return FAILURE;
    }
    p++;
  }
  return SUCCESS;
}


SAPI_API int sapi_register_post_entry(const sapi_post_entry *post_entry)
{
  int ret;
  zend_string *key;
  if (SG(sapi_started) && EG(current_execute_data)) {
    return FAILURE;
  }
  key = zend_string_init(post_entry->content_type, post_entry->content_type_len, 1);
  GC_MAKE_PERSISTENT_LOCAL(key);
  ret = zend_hash_add_mem(&SG(known_post_content_types), key,
      (void *) post_entry, sizeof(sapi_post_entry)) ? SUCCESS : FAILURE;
  zend_string_release_ex(key, 1);
  return ret;
}

SAPI_API void sapi_unregister_post_entry(const sapi_post_entry *post_entry)
{
  if (SG(sapi_started) && EG(current_execute_data)) {
    return;
  }
  zend_hash_str_del(&SG(known_post_content_types), post_entry->content_type,
      post_entry->content_type_len);
}


SAPI_API int sapi_register_default_post_reader(void (*default_post_reader)(void))
{
  if (SG(sapi_started) && EG(current_execute_data)) {
    return FAILURE;
  }
  sapi_module.default_post_reader = default_post_reader;
  return SUCCESS;
}


SAPI_API int sapi_register_treat_data(void (*treat_data)(int arg, char *str, zval *destArray))
{
  if (SG(sapi_started) && EG(current_execute_data)) {
    return FAILURE;
  }
  sapi_module.treat_data = treat_data;
  return SUCCESS;
}

SAPI_API int sapi_register_input_filter(unsigned int (*input_filter)(int arg, const char *var, char **val, size_t val_len, size_t *new_val_len), unsigned int (*input_filter_init)(void))
{
  if (SG(sapi_started) && EG(current_execute_data)) {
    return FAILURE;
  }
  sapi_module.input_filter = input_filter;
  sapi_module.input_filter_init = input_filter_init;
  return SUCCESS;
}

SAPI_API int sapi_flush(void)
{
  if (sapi_module.flush) {
    sapi_module.flush(SG(server_context));
    return SUCCESS;
  } else {
    return FAILURE;
  }
}

SAPI_API zend_stat_t *sapi_get_stat(void)
{
  if (sapi_module.get_stat) {
    return sapi_module.get_stat();
  } else {
    if (!SG(request_info).path_translated || (VCWD_STAT(SG(request_info).path_translated, &SG(global_stat)) == -1)) {
      return NULL;
    }
    return &SG(global_stat);
  }
}

SAPI_API char *sapi_getenv(const char *name, size_t name_len)
{
  char *value, *tmp;

  if (!sapi_module.getenv) {
    return NULL;
  }
  if (!strncasecmp(name, "HTTP_PROXY", name_len)) {
    /* Ugly fix for HTTP_PROXY issue, see bug #72573 */
    return NULL;
  }
  tmp = sapi_module.getenv(name, name_len);
  if (!tmp) {
    return NULL;
  }
  value = estrdup(tmp);
#ifdef PHP_WIN32
  if (strlen(sapi_module.name) == sizeof("cgi-fcgi") - 1 && !strcmp(sapi_module.name, "cgi-fcgi")) {
    /* XXX more modules to go, if needed. */
    free(tmp);
  }
#endif
  if (sapi_module.input_filter) {
    sapi_module.input_filter(PARSE_STRING, name, &value, strlen(value), NULL);
  }
  return value;
}

SAPI_API int sapi_get_fd(int *fd)
{
  if (sapi_module.get_fd) {
    return sapi_module.get_fd(fd);
  } else {
    return FAILURE;
  }
}

SAPI_API int sapi_force_http_10(void)
{
  if (sapi_module.force_http_10) {
    return sapi_module.force_http_10();
  } else {
    return FAILURE;
  }
}


SAPI_API int sapi_get_target_uid(uid_t *obj)
{
  if (sapi_module.get_target_uid) {
    return sapi_module.get_target_uid(obj);
  } else {
    return FAILURE;
  }
}

SAPI_API int sapi_get_target_gid(gid_t *obj)
{
  if (sapi_module.get_target_gid) {
    return sapi_module.get_target_gid(obj);
  } else {
    return FAILURE;
  }
}

SAPI_API double sapi_get_request_time(void)
{
  if(SG(global_request_time)) return SG(global_request_time);

  if (!sapi_module.get_request_time
      || sapi_module.get_request_time(&SG(global_request_time)) == FAILURE) {
    struct timeval tp = {0};
    if (!gettimeofday(&tp, NULL)) {
      SG(global_request_time) = (double)(tp.tv_sec + tp.tv_usec / 1000000.00);
    } else {
      SG(global_request_time) = (double)time(0);
    }
  }
  return SG(global_request_time);
}

SAPI_API void sapi_terminate_process(void) {
  if (sapi_module.terminate_process) {
    sapi_module.terminate_process();
  }
}

SAPI_API void sapi_add_request_header(const char *var, unsigned int var_len, char *val, unsigned int val_len, void *arg) /* {{{ */
{
  zval *return_value = (zval*)arg;
  char *buf = NULL;

  ALLOCA_FLAG(use_heap)

  if (var_len > 5 &&
      var[0] == 'H' &&
      var[1] == 'T' &&
      var[2] == 'T' &&
      var[3] == 'P' &&
      var[4] == '_') {

    const char *p;
    char *str;

    var_len -= 5;
    p = var + 5;
    var = str = buf = do_alloca(var_len + 1, use_heap);
    *str++ = *p++;
    while (*p) {
      if (*p == '_') {
        *str++ = '-';
        p++;
        if (*p) {
          *str++ = *p++;
        }
      } else if (*p >= 'A' && *p <= 'Z') {
        *str++ = (*p++ - 'A' + 'a');
      } else {
        *str++ = *p++;
      }
    }
    *str = 0;
  } else if (var_len == sizeof("CONTENT_TYPE")-1 &&
             memcmp(var, "CONTENT_TYPE", sizeof("CONTENT_TYPE")-1) == 0) {
    var = "Content-Type";
  } else if (var_len == sizeof("CONTENT_LENGTH")-1 &&
             memcmp(var, "CONTENT_LENGTH", sizeof("CONTENT_LENGTH")-1) == 0) {
    var = "Content-Length";
  } else {
    return;
  }
  add_assoc_stringl_ex(return_value, var, var_len, val, val_len);
  if (buf) {
    free_alloca(buf, use_heap);
  }
}
/* }}} */

Coverage Report

Created: 2026-06-02 06:37