X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?a=blobdiff_plain;ds=sidebyside;f=www-cgi%2Fucgi.c;h=fc9888b0637529e37696e80fa01f8ffe52b534b4;hb=2cbcd670c5dfcda374720737fa5a5cd0be93e338;hp=5e6a1b863f7d004332483f6b31a22607fa2dacd4;hpb=564fbf9bcb4ff56ff2fcbc018fd5a85cdfeb4ea2;p=userv-utils.git diff --git a/www-cgi/ucgi.c b/www-cgi/ucgi.c index 5e6a1b8..fc9888b 100644 --- a/www-cgi/ucgi.c +++ b/www-cgi/ucgi.c @@ -2,11 +2,16 @@ * Usage: as CGI script */ /* - * Copyright (C) 1998-1999,2003 Ian Jackson + * Copyright 1996-2013,2016 Ian Jackson + * Copyright 1998 David Damerell + * Copyright 1999,2003 + * Chancellor Masters and Scholars of the University of Cambridge + * Copyright 2010 Tony Finch + * Copyright 2013,2016 Mark Wooding * * This is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License as published by - * the Free Software Foundation; either version 2 of the License, or + * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, but @@ -15,10 +20,7 @@ * General Public License for more details. * * You should have received a copy of the GNU General Public License - * along with userv-utils; if not, write to the Free Software - * Foundation, 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. - * - * $Id$ + * along with userv-utils; if not, see http://www.gnu.org/licenses/. */ #include @@ -57,7 +59,7 @@ struct buildargs { }; static void addarg(struct buildargs *args, const char *a) { - if (args->n > args->max) error("too many arguments"); + if (args->n > args->max) error("too many arguments", 500); args->v[args->n++]= a; } @@ -67,7 +69,8 @@ static void add_userv_var(const char *fulln, size_t l; char *a; - l= strlen(ev); if (l > MAX_ENVVAR_VALUE) error("environment variable too long"); + l= strlen(ev); + if (l > MAX_ENVVAR_VALUE) error("environment variable too long", 500); a= xmalloc(strlen(en)+l+6); sprintf(a,"-DE_%s=%s",en,ev); addarg(args, a); @@ -76,7 +79,7 @@ static void add_userv_var(const char *fulln, int main(int argc, const char **argv) { char *username; const char *slash2, *pathi, *ev, *av; - const char *const *envok; + const char *const *envok = 0; size_t usernamelen, l; struct buildargs args; pid_t child, rchild; @@ -92,32 +95,33 @@ int main(int argc, const char **argv) { D( printf(";;; UCGI\n"); ) } - if (argc > MAX_ARGS) error("too many arguments"); + if (argc > MAX_ARGS) error("too many arguments", 500); ev= getenv("UCGI_ENV_FILTER"); if (ev) envok= load_filters(LOADF_MUST, ev, LF_END); - else { + else envok= load_filters(0, "/etc/userv/ucgi.env-filter", LF_END); - if (!envok) envok= default_envok; - } pathi= getenv("PATH_INFO"); - if (!pathi) error("PATH_INFO not found"); + if (!pathi) error("PATH_INFO not found", 500); D( if (debugmode) { printf(";; find user name...\n" ";; initial PATH_INFO = `%s'\n", pathi); } ) - if (pathi[0] != '/' || pathi[1] != '~') error("PATH_INFO must start with /~"); - slash2= strchr(pathi+2,'/'); if (!slash2) error("PATH_INFO must have more than one /"); + if (pathi[0] != '/' || pathi[1] != '~') + error("PATH_INFO must start with /~", 400); + slash2= strchr(pathi+2,'/'); + if (!slash2) error("PATH_INFO must have more than one /", 400); usernamelen= slash2-(pathi+2); - if (usernamelen > MAX_USERNAME_LEN) error("PATH_INFO username too long"); + if (usernamelen > MAX_USERNAME_LEN) error("PATH_INFO username too long", 400); username= xmalloc(usernamelen+1); memcpy(username,pathi+2,usernamelen); username[usernamelen]= 0; D( if (debugmode) printf(";; user = `%s'; tail = `%s'\n", username, slash2); ) - if (!isalpha(username[0])) error("username 1st character is not alphabetic"); + if (!isalpha(username[0])) + error("username 1st character is not alphabetic", 400); xsetenv("PATH_INFO",slash2,1); args.n= 0; args.max= argc + MAX_ENVVARS + 10; @@ -126,7 +130,8 @@ int main(int argc, const char **argv) { addarg(&args, "userv"); if (debugmode) addarg(&args, "-DDEBUG=1"); - filter_environment(FILTF_WILDCARD, "", envok, add_userv_var, &args); + filter_environment(FILTF_WILDCARD, "", envok, default_envok, + add_userv_var, &args); addarg(&args, username); addarg(&args, "www-cgi");