mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-15 21:39:00 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
ba890408bd
nginx/src/http/ngx_http_spdy.c

3503 lines
100 KiB
C
Raw Normal View History

Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
/*
* Copyright (C) Nginx, Inc.
* Copyright (C) Valentin V. Bartenev
*/
#include <ngx_config.h>
#include <ngx_core.h>
#include <ngx_http.h>
#include <ngx_http_spdy_module.h>
#include <zlib.h>
#if (NGX_HAVE_LITTLE_ENDIAN && NGX_HAVE_NONALIGNED)
#define ngx_str5cmp(m, c0, c1, c2, c3, c4) \
*(uint32_t *) m == (c3 << 24 | c2 << 16 | c1 << 8 | c0) \
&& m[4] == c4
#else
#define ngx_str5cmp(m, c0, c1, c2, c3, c4) \
m[0] == c0 && m[1] == c1 && m[2] == c2 && m[3] == c3 && m[4] == c4
#endif
#if (NGX_HAVE_NONALIGNED)
#define ngx_spdy_frame_parse_uint16(p) ntohs(*(uint16_t *) (p))
#define ngx_spdy_frame_parse_uint32(p) ntohl(*(uint32_t *) (p))
#else
#define ngx_spdy_frame_parse_uint16(p) ((p)[0] << 8 | (p)[1])
#define ngx_spdy_frame_parse_uint32(p) \
((p)[0] << 24 | (p)[1] << 16 | (p)[2] << 8 | (p)[3])
#endif
#define ngx_spdy_frame_parse_sid(p) \
(ngx_spdy_frame_parse_uint32(p) & 0x7fffffff)
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
#define ngx_spdy_frame_parse_delta(p) \
(ngx_spdy_frame_parse_uint32(p) & 0x7fffffff)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define ngx_spdy_ctl_frame_check(h) \
SPDY: consistently handle control frames with unknown type. The SPDY draft 2 specification requires that if an endpoint receives a control frame for a type it does not recognize, it must ignore the frame. But the 3 and 3.1 drafts don't seem to declare any behavior for such case. Then sticking with the previous draft in this matter looks to be right. But previously, only 8 least significant bits of the type field were parsed while the rest of 16 bits of the field were checked against zero. Though there are no known frame types bigger than 255, this resulted in inconsistency in handling of such frames: they were not recognized as valid frames at all, and the connection was closed.
2014-04-07 23:27:56 +08:00
(((h) & 0xffff0000) == ngx_spdy_ctl_frame_head(0))
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define ngx_spdy_data_frame_check(h) \
(!((h) & (uint32_t) NGX_SPDY_CTL_BIT << 31))
SPDY: consistently handle control frames with unknown type. The SPDY draft 2 specification requires that if an endpoint receives a control frame for a type it does not recognize, it must ignore the frame. But the 3 and 3.1 drafts don't seem to declare any behavior for such case. Then sticking with the previous draft in this matter looks to be right. But previously, only 8 least significant bits of the type field were parsed while the rest of 16 bits of the field were checked against zero. Though there are no known frame types bigger than 255, this resulted in inconsistency in handling of such frames: they were not recognized as valid frames at all, and the connection was closed.
2014-04-07 23:27:56 +08:00
#define ngx_spdy_ctl_frame_type(h) ((h) & 0x0000ffff)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define ngx_spdy_frame_flags(p) ((p) >> 24)
#define ngx_spdy_frame_length(p) ((p) & 0x00ffffff)
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
#define ngx_spdy_frame_id(p) ((p) & 0x00ffffff)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define NGX_SPDY_SKIP_HEADERS_BUFFER_SIZE 4096
#define NGX_SPDY_CTL_FRAME_BUFFER_SIZE 16
#define NGX_SPDY_PROTOCOL_ERROR 1
#define NGX_SPDY_INVALID_STREAM 2
#define NGX_SPDY_REFUSED_STREAM 3
#define NGX_SPDY_UNSUPPORTED_VERSION 4
#define NGX_SPDY_CANCEL 5
#define NGX_SPDY_INTERNAL_ERROR 6
#define NGX_SPDY_FLOW_CONTROL_ERROR 7
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
#define NGX_SPDY_STREAM_IN_USE 8
#define NGX_SPDY_STREAM_ALREADY_CLOSED 9
/* deprecated 10 */
#define NGX_SPDY_FRAME_TOO_LARGE 11
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define NGX_SPDY_SETTINGS_MAX_STREAMS 4
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
#define NGX_SPDY_SETTINGS_INIT_WINDOW 7
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#define NGX_SPDY_SETTINGS_FLAG_PERSIST 0x01
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
#define NGX_SPDY_SETTINGS_FLAG_PERSISTED 0x02
#define NGX_SPDY_MAX_WINDOW NGX_MAX_INT32_VALUE
#define NGX_SPDY_CONNECTION_WINDOW 65536
#define NGX_SPDY_INIT_STREAM_WINDOW 65536
#define NGX_SPDY_STREAM_WINDOW NGX_SPDY_MAX_WINDOW
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
typedef struct {
ngx_uint_t hash;
u_char len;
u_char header[7];
ngx_int_t (*handler)(ngx_http_request_t *r);
} ngx_http_spdy_request_header_t;
static void ngx_http_spdy_read_handler(ngx_event_t *rev);
static void ngx_http_spdy_write_handler(ngx_event_t *wev);
static void ngx_http_spdy_handle_connection(ngx_http_spdy_connection_t *sc);
Added server-side support for PROXY protocol v1 (ticket #355). Client address specified in the PROXY protocol header is now saved in the $proxy_protocol_addr variable and can be used in the realip module. This is currently not implemented for mail.
2014-03-17 21:41:24 +08:00
static u_char *ngx_http_spdy_proxy_protocol(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static u_char *ngx_http_spdy_state_head(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_syn_stream(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_headers(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_headers_skip(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static u_char *ngx_http_spdy_state_window_update(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static u_char *ngx_http_spdy_state_data(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static u_char *ngx_http_spdy_state_read_data(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static u_char *ngx_http_spdy_state_rst_stream(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_ping(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_skip(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_settings(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_complete(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end);
static u_char *ngx_http_spdy_state_save(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end, ngx_http_spdy_handler_pt handler);
static u_char *ngx_http_spdy_state_protocol_error(
ngx_http_spdy_connection_t *sc);
static u_char *ngx_http_spdy_state_internal_error(
ngx_http_spdy_connection_t *sc);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t ngx_http_spdy_send_window_update(
ngx_http_spdy_connection_t *sc, ngx_uint_t sid, ngx_uint_t delta);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static ngx_int_t ngx_http_spdy_send_rst_stream(ngx_http_spdy_connection_t *sc,
ngx_uint_t sid, ngx_uint_t status, ngx_uint_t priority);
static ngx_int_t ngx_http_spdy_send_settings(ngx_http_spdy_connection_t *sc);
static ngx_int_t ngx_http_spdy_settings_frame_handler(
ngx_http_spdy_connection_t *sc, ngx_http_spdy_out_frame_t *frame);
static ngx_http_spdy_out_frame_t *ngx_http_spdy_get_ctl_frame(
ngx_http_spdy_connection_t *sc, size_t size, ngx_uint_t priority);
static ngx_int_t ngx_http_spdy_ctl_frame_handler(
ngx_http_spdy_connection_t *sc, ngx_http_spdy_out_frame_t *frame);
static ngx_http_spdy_stream_t *ngx_http_spdy_create_stream(
ngx_http_spdy_connection_t *sc, ngx_uint_t id, ngx_uint_t priority);
static ngx_http_spdy_stream_t *ngx_http_spdy_get_stream_by_id(
ngx_http_spdy_connection_t *sc, ngx_uint_t sid);
#define ngx_http_spdy_streams_index_size(sscf) (sscf->streams_index_mask + 1)
#define ngx_http_spdy_stream_index(sscf, sid) \
((sid >> 1) & sscf->streams_index_mask)
static ngx_int_t ngx_http_spdy_parse_header(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_alloc_large_header_buffer(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_handle_request_header(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_parse_method(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_parse_scheme(ngx_http_request_t *r);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t ngx_http_spdy_parse_host(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_parse_path(ngx_http_request_t *r);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static ngx_int_t ngx_http_spdy_parse_version(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_construct_request_line(ngx_http_request_t *r);
static void ngx_http_spdy_run_request(ngx_http_request_t *r);
static ngx_int_t ngx_http_spdy_init_request_body(ngx_http_request_t *r);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t ngx_http_spdy_terminate_stream(ngx_http_spdy_connection_t *sc,
ngx_http_spdy_stream_t *stream, ngx_uint_t status);
SPDY: fixed connection leak while waiting for request headers. If an error occurs in a SPDY connection, the c->error flag is set on every fake request connection, and its read or write event handler is called, in order to finalize it. But while waiting for request headers, it was a no-op since the read event handler had been set to ngx_http_empty_handler().
2013-10-01 04:04:00 +08:00
static void ngx_http_spdy_close_stream_handler(ngx_event_t *ev);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static void ngx_http_spdy_handle_connection_handler(ngx_event_t *rev);
static void ngx_http_spdy_keepalive_handler(ngx_event_t *rev);
static void ngx_http_spdy_finalize_connection(ngx_http_spdy_connection_t *sc,
ngx_int_t rc);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t ngx_http_spdy_adjust_windows(ngx_http_spdy_connection_t *sc,
ssize_t delta);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static void ngx_http_spdy_pool_cleanup(void *data);
static void *ngx_http_spdy_zalloc(void *opaque, u_int items, u_int size);
static void ngx_http_spdy_zfree(void *opaque, void *address);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static const u_char ngx_http_spdy_dict[] = {
0x00, 0x00, 0x00, 0x07, 0x6f, 0x70, 0x74, 0x69, /* - - - - o p t i */
0x6f, 0x6e, 0x73, 0x00, 0x00, 0x00, 0x04, 0x68, /* o n s - - - - h */
0x65, 0x61, 0x64, 0x00, 0x00, 0x00, 0x04, 0x70, /* e a d - - - - p */
0x6f, 0x73, 0x74, 0x00, 0x00, 0x00, 0x03, 0x70, /* o s t - - - - p */
0x75, 0x74, 0x00, 0x00, 0x00, 0x06, 0x64, 0x65, /* u t - - - - d e */
0x6c, 0x65, 0x74, 0x65, 0x00, 0x00, 0x00, 0x05, /* l e t e - - - - */
0x74, 0x72, 0x61, 0x63, 0x65, 0x00, 0x00, 0x00, /* t r a c e - - - */
0x06, 0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x00, /* - a c c e p t - */
0x00, 0x00, 0x0e, 0x61, 0x63, 0x63, 0x65, 0x70, /* - - - a c c e p */
0x74, 0x2d, 0x63, 0x68, 0x61, 0x72, 0x73, 0x65, /* t - c h a r s e */
0x74, 0x00, 0x00, 0x00, 0x0f, 0x61, 0x63, 0x63, /* t - - - - a c c */
0x65, 0x70, 0x74, 0x2d, 0x65, 0x6e, 0x63, 0x6f, /* e p t - e n c o */
0x64, 0x69, 0x6e, 0x67, 0x00, 0x00, 0x00, 0x0f, /* d i n g - - - - */
0x61, 0x63, 0x63, 0x65, 0x70, 0x74, 0x2d, 0x6c, /* a c c e p t - l */
0x61, 0x6e, 0x67, 0x75, 0x61, 0x67, 0x65, 0x00, /* a n g u a g e - */
0x00, 0x00, 0x0d, 0x61, 0x63, 0x63, 0x65, 0x70, /* - - - a c c e p */
0x74, 0x2d, 0x72, 0x61, 0x6e, 0x67, 0x65, 0x73, /* t - r a n g e s */
0x00, 0x00, 0x00, 0x03, 0x61, 0x67, 0x65, 0x00, /* - - - - a g e - */
0x00, 0x00, 0x05, 0x61, 0x6c, 0x6c, 0x6f, 0x77, /* - - - a l l o w */
0x00, 0x00, 0x00, 0x0d, 0x61, 0x75, 0x74, 0x68, /* - - - - a u t h */
0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, /* o r i z a t i o */
0x6e, 0x00, 0x00, 0x00, 0x0d, 0x63, 0x61, 0x63, /* n - - - - c a c */
0x68, 0x65, 0x2d, 0x63, 0x6f, 0x6e, 0x74, 0x72, /* h e - c o n t r */
0x6f, 0x6c, 0x00, 0x00, 0x00, 0x0a, 0x63, 0x6f, /* o l - - - - c o */
0x6e, 0x6e, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, /* n n e c t i o n */
0x00, 0x00, 0x00, 0x0c, 0x63, 0x6f, 0x6e, 0x74, /* - - - - c o n t */
0x65, 0x6e, 0x74, 0x2d, 0x62, 0x61, 0x73, 0x65, /* e n t - b a s e */
0x00, 0x00, 0x00, 0x10, 0x63, 0x6f, 0x6e, 0x74, /* - - - - c o n t */
0x65, 0x6e, 0x74, 0x2d, 0x65, 0x6e, 0x63, 0x6f, /* e n t - e n c o */
0x64, 0x69, 0x6e, 0x67, 0x00, 0x00, 0x00, 0x10, /* d i n g - - - - */
0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, /* c o n t e n t - */
0x6c, 0x61, 0x6e, 0x67, 0x75, 0x61, 0x67, 0x65, /* l a n g u a g e */
0x00, 0x00, 0x00, 0x0e, 0x63, 0x6f, 0x6e, 0x74, /* - - - - c o n t */
0x65, 0x6e, 0x74, 0x2d, 0x6c, 0x65, 0x6e, 0x67, /* e n t - l e n g */
0x74, 0x68, 0x00, 0x00, 0x00, 0x10, 0x63, 0x6f, /* t h - - - - c o */
0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x6c, 0x6f, /* n t e n t - l o */
0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x00, 0x00, /* c a t i o n - - */
0x00, 0x0b, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, /* - - c o n t e n */
0x74, 0x2d, 0x6d, 0x64, 0x35, 0x00, 0x00, 0x00, /* t - m d 5 - - - */
0x0d, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, /* - c o n t e n t */
0x2d, 0x72, 0x61, 0x6e, 0x67, 0x65, 0x00, 0x00, /* - r a n g e - - */
0x00, 0x0c, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, /* - - c o n t e n */
0x74, 0x2d, 0x74, 0x79, 0x70, 0x65, 0x00, 0x00, /* t - t y p e - - */
0x00, 0x04, 0x64, 0x61, 0x74, 0x65, 0x00, 0x00, /* - - d a t e - - */
0x00, 0x04, 0x65, 0x74, 0x61, 0x67, 0x00, 0x00, /* - - e t a g - - */
0x00, 0x06, 0x65, 0x78, 0x70, 0x65, 0x63, 0x74, /* - - e x p e c t */
0x00, 0x00, 0x00, 0x07, 0x65, 0x78, 0x70, 0x69, /* - - - - e x p i */
0x72, 0x65, 0x73, 0x00, 0x00, 0x00, 0x04, 0x66, /* r e s - - - - f */
0x72, 0x6f, 0x6d, 0x00, 0x00, 0x00, 0x04, 0x68, /* r o m - - - - h */
0x6f, 0x73, 0x74, 0x00, 0x00, 0x00, 0x08, 0x69, /* o s t - - - - i */
0x66, 0x2d, 0x6d, 0x61, 0x74, 0x63, 0x68, 0x00, /* f - m a t c h - */
0x00, 0x00, 0x11, 0x69, 0x66, 0x2d, 0x6d, 0x6f, /* - - - i f - m o */
0x64, 0x69, 0x66, 0x69, 0x65, 0x64, 0x2d, 0x73, /* d i f i e d - s */
0x69, 0x6e, 0x63, 0x65, 0x00, 0x00, 0x00, 0x0d, /* i n c e - - - - */
0x69, 0x66, 0x2d, 0x6e, 0x6f, 0x6e, 0x65, 0x2d, /* i f - n o n e - */
0x6d, 0x61, 0x74, 0x63, 0x68, 0x00, 0x00, 0x00, /* m a t c h - - - */
0x08, 0x69, 0x66, 0x2d, 0x72, 0x61, 0x6e, 0x67, /* - i f - r a n g */
0x65, 0x00, 0x00, 0x00, 0x13, 0x69, 0x66, 0x2d, /* e - - - - i f - */
0x75, 0x6e, 0x6d, 0x6f, 0x64, 0x69, 0x66, 0x69, /* u n m o d i f i */
0x65, 0x64, 0x2d, 0x73, 0x69, 0x6e, 0x63, 0x65, /* e d - s i n c e */
0x00, 0x00, 0x00, 0x0d, 0x6c, 0x61, 0x73, 0x74, /* - - - - l a s t */
0x2d, 0x6d, 0x6f, 0x64, 0x69, 0x66, 0x69, 0x65, /* - m o d i f i e */
0x64, 0x00, 0x00, 0x00, 0x08, 0x6c, 0x6f, 0x63, /* d - - - - l o c */
0x61, 0x74, 0x69, 0x6f, 0x6e, 0x00, 0x00, 0x00, /* a t i o n - - - */
0x0c, 0x6d, 0x61, 0x78, 0x2d, 0x66, 0x6f, 0x72, /* - m a x - f o r */
0x77, 0x61, 0x72, 0x64, 0x73, 0x00, 0x00, 0x00, /* w a r d s - - - */
0x06, 0x70, 0x72, 0x61, 0x67, 0x6d, 0x61, 0x00, /* - p r a g m a - */
0x00, 0x00, 0x12, 0x70, 0x72, 0x6f, 0x78, 0x79, /* - - - p r o x y */
0x2d, 0x61, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74, /* - a u t h e n t */
0x69, 0x63, 0x61, 0x74, 0x65, 0x00, 0x00, 0x00, /* i c a t e - - - */
0x13, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2d, 0x61, /* - p r o x y - a */
0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, /* u t h o r i z a */
0x74, 0x69, 0x6f, 0x6e, 0x00, 0x00, 0x00, 0x05, /* t i o n - - - - */
0x72, 0x61, 0x6e, 0x67, 0x65, 0x00, 0x00, 0x00, /* r a n g e - - - */
0x07, 0x72, 0x65, 0x66, 0x65, 0x72, 0x65, 0x72, /* - r e f e r e r */
0x00, 0x00, 0x00, 0x0b, 0x72, 0x65, 0x74, 0x72, /* - - - - r e t r */
0x79, 0x2d, 0x61, 0x66, 0x74, 0x65, 0x72, 0x00, /* y - a f t e r - */
0x00, 0x00, 0x06, 0x73, 0x65, 0x72, 0x76, 0x65, /* - - - s e r v e */
0x72, 0x00, 0x00, 0x00, 0x02, 0x74, 0x65, 0x00, /* r - - - - t e - */
0x00, 0x00, 0x07, 0x74, 0x72, 0x61, 0x69, 0x6c, /* - - - t r a i l */
0x65, 0x72, 0x00, 0x00, 0x00, 0x11, 0x74, 0x72, /* e r - - - - t r */
0x61, 0x6e, 0x73, 0x66, 0x65, 0x72, 0x2d, 0x65, /* a n s f e r - e */
0x6e, 0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x00, /* n c o d i n g - */
0x00, 0x00, 0x07, 0x75, 0x70, 0x67, 0x72, 0x61, /* - - - u p g r a */
0x64, 0x65, 0x00, 0x00, 0x00, 0x0a, 0x75, 0x73, /* d e - - - - u s */
0x65, 0x72, 0x2d, 0x61, 0x67, 0x65, 0x6e, 0x74, /* e r - a g e n t */
0x00, 0x00, 0x00, 0x04, 0x76, 0x61, 0x72, 0x79, /* - - - - v a r y */
0x00, 0x00, 0x00, 0x03, 0x76, 0x69, 0x61, 0x00, /* - - - - v i a - */
0x00, 0x00, 0x07, 0x77, 0x61, 0x72, 0x6e, 0x69, /* - - - w a r n i */
0x6e, 0x67, 0x00, 0x00, 0x00, 0x10, 0x77, 0x77, /* n g - - - - w w */
0x77, 0x2d, 0x61, 0x75, 0x74, 0x68, 0x65, 0x6e, /* w - a u t h e n */
0x74, 0x69, 0x63, 0x61, 0x74, 0x65, 0x00, 0x00, /* t i c a t e - - */
0x00, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, /* - - m e t h o d */
0x00, 0x00, 0x00, 0x03, 0x67, 0x65, 0x74, 0x00, /* - - - - g e t - */
0x00, 0x00, 0x06, 0x73, 0x74, 0x61, 0x74, 0x75, /* - - - s t a t u */
0x73, 0x00, 0x00, 0x00, 0x06, 0x32, 0x30, 0x30, /* s - - - - 2 0 0 */
0x20, 0x4f, 0x4b, 0x00, 0x00, 0x00, 0x07, 0x76, /* - O K - - - - v */
0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x00, 0x00, /* e r s i o n - - */
0x00, 0x08, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31, /* - - H T T P - 1 */
0x2e, 0x31, 0x00, 0x00, 0x00, 0x03, 0x75, 0x72, /* - 1 - - - - u r */
0x6c, 0x00, 0x00, 0x00, 0x06, 0x70, 0x75, 0x62, /* l - - - - p u b */
0x6c, 0x69, 0x63, 0x00, 0x00, 0x00, 0x0a, 0x73, /* l i c - - - - s */
0x65, 0x74, 0x2d, 0x63, 0x6f, 0x6f, 0x6b, 0x69, /* e t - c o o k i */
0x65, 0x00, 0x00, 0x00, 0x0a, 0x6b, 0x65, 0x65, /* e - - - - k e e */
0x70, 0x2d, 0x61, 0x6c, 0x69, 0x76, 0x65, 0x00, /* p - a l i v e - */
0x00, 0x00, 0x06, 0x6f, 0x72, 0x69, 0x67, 0x69, /* - - - o r i g i */
0x6e, 0x31, 0x30, 0x30, 0x31, 0x30, 0x31, 0x32, /* n 1 0 0 1 0 1 2 */
0x30, 0x31, 0x32, 0x30, 0x32, 0x32, 0x30, 0x35, /* 0 1 2 0 2 2 0 5 */
0x32, 0x30, 0x36, 0x33, 0x30, 0x30, 0x33, 0x30, /* 2 0 6 3 0 0 3 0 */
0x32, 0x33, 0x30, 0x33, 0x33, 0x30, 0x34, 0x33, /* 2 3 0 3 3 0 4 3 */
0x30, 0x35, 0x33, 0x30, 0x36, 0x33, 0x30, 0x37, /* 0 5 3 0 6 3 0 7 */
0x34, 0x30, 0x32, 0x34, 0x30, 0x35, 0x34, 0x30, /* 4 0 2 4 0 5 4 0 */
0x36, 0x34, 0x30, 0x37, 0x34, 0x30, 0x38, 0x34, /* 6 4 0 7 4 0 8 4 */
0x30, 0x39, 0x34, 0x31, 0x30, 0x34, 0x31, 0x31, /* 0 9 4 1 0 4 1 1 */
0x34, 0x31, 0x32, 0x34, 0x31, 0x33, 0x34, 0x31, /* 4 1 2 4 1 3 4 1 */
0x34, 0x34, 0x31, 0x35, 0x34, 0x31, 0x36, 0x34, /* 4 4 1 5 4 1 6 4 */
0x31, 0x37, 0x35, 0x30, 0x32, 0x35, 0x30, 0x34, /* 1 7 5 0 2 5 0 4 */
0x35, 0x30, 0x35, 0x32, 0x30, 0x33, 0x20, 0x4e, /* 5 0 5 2 0 3 - N */
0x6f, 0x6e, 0x2d, 0x41, 0x75, 0x74, 0x68, 0x6f, /* o n - A u t h o */
0x72, 0x69, 0x74, 0x61, 0x74, 0x69, 0x76, 0x65, /* r i t a t i v e */
0x20, 0x49, 0x6e, 0x66, 0x6f, 0x72, 0x6d, 0x61, /* - I n f o r m a */
0x74, 0x69, 0x6f, 0x6e, 0x32, 0x30, 0x34, 0x20, /* t i o n 2 0 4 - */
0x4e, 0x6f, 0x20, 0x43, 0x6f, 0x6e, 0x74, 0x65, /* N o - C o n t e */
0x6e, 0x74, 0x33, 0x30, 0x31, 0x20, 0x4d, 0x6f, /* n t 3 0 1 - M o */
0x76, 0x65, 0x64, 0x20, 0x50, 0x65, 0x72, 0x6d, /* v e d - P e r m */
0x61, 0x6e, 0x65, 0x6e, 0x74, 0x6c, 0x79, 0x34, /* a n e n t l y 4 */
0x30, 0x30, 0x20, 0x42, 0x61, 0x64, 0x20, 0x52, /* 0 0 - B a d - R */
0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x34, 0x30, /* e q u e s t 4 0 */
0x31, 0x20, 0x55, 0x6e, 0x61, 0x75, 0x74, 0x68, /* 1 - U n a u t h */
0x6f, 0x72, 0x69, 0x7a, 0x65, 0x64, 0x34, 0x30, /* o r i z e d 4 0 */
0x33, 0x20, 0x46, 0x6f, 0x72, 0x62, 0x69, 0x64, /* 3 - F o r b i d */
0x64, 0x65, 0x6e, 0x34, 0x30, 0x34, 0x20, 0x4e, /* d e n 4 0 4 - N */
0x6f, 0x74, 0x20, 0x46, 0x6f, 0x75, 0x6e, 0x64, /* o t - F o u n d */
0x35, 0x30, 0x30, 0x20, 0x49, 0x6e, 0x74, 0x65, /* 5 0 0 - I n t e */
0x72, 0x6e, 0x61, 0x6c, 0x20, 0x53, 0x65, 0x72, /* r n a l - S e r */
0x76, 0x65, 0x72, 0x20, 0x45, 0x72, 0x72, 0x6f, /* v e r - E r r o */
0x72, 0x35, 0x30, 0x31, 0x20, 0x4e, 0x6f, 0x74, /* r 5 0 1 - N o t */
0x20, 0x49, 0x6d, 0x70, 0x6c, 0x65, 0x6d, 0x65, /* - I m p l e m e */
0x6e, 0x74, 0x65, 0x64, 0x35, 0x30, 0x33, 0x20, /* n t e d 5 0 3 - */
0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x20, /* S e r v i c e - */
0x55, 0x6e, 0x61, 0x76, 0x61, 0x69, 0x6c, 0x61, /* U n a v a i l a */
0x62, 0x6c, 0x65, 0x4a, 0x61, 0x6e, 0x20, 0x46, /* b l e J a n - F */
0x65, 0x62, 0x20, 0x4d, 0x61, 0x72, 0x20, 0x41, /* e b - M a r - A */
0x70, 0x72, 0x20, 0x4d, 0x61, 0x79, 0x20, 0x4a, /* p r - M a y - J */
0x75, 0x6e, 0x20, 0x4a, 0x75, 0x6c, 0x20, 0x41, /* u n - J u l - A */
0x75, 0x67, 0x20, 0x53, 0x65, 0x70, 0x74, 0x20, /* u g - S e p t - */
0x4f, 0x63, 0x74, 0x20, 0x4e, 0x6f, 0x76, 0x20, /* O c t - N o v - */
0x44, 0x65, 0x63, 0x20, 0x30, 0x30, 0x3a, 0x30, /* D e c - 0 0 - 0 */
0x30, 0x3a, 0x30, 0x30, 0x20, 0x4d, 0x6f, 0x6e, /* 0 - 0 0 - M o n */
0x2c, 0x20, 0x54, 0x75, 0x65, 0x2c, 0x20, 0x57, /* - - T u e - - W */
0x65, 0x64, 0x2c, 0x20, 0x54, 0x68, 0x75, 0x2c, /* e d - - T h u - */
0x20, 0x46, 0x72, 0x69, 0x2c, 0x20, 0x53, 0x61, /* - F r i - - S a */
0x74, 0x2c, 0x20, 0x53, 0x75, 0x6e, 0x2c, 0x20, /* t - - S u n - - */
0x47, 0x4d, 0x54, 0x63, 0x68, 0x75, 0x6e, 0x6b, /* G M T c h u n k */
0x65, 0x64, 0x2c, 0x74, 0x65, 0x78, 0x74, 0x2f, /* e d - t e x t - */
0x68, 0x74, 0x6d, 0x6c, 0x2c, 0x69, 0x6d, 0x61, /* h t m l - i m a */
0x67, 0x65, 0x2f, 0x70, 0x6e, 0x67, 0x2c, 0x69, /* g e - p n g - i */
0x6d, 0x61, 0x67, 0x65, 0x2f, 0x6a, 0x70, 0x67, /* m a g e - j p g */
0x2c, 0x69, 0x6d, 0x61, 0x67, 0x65, 0x2f, 0x67, /* - i m a g e - g */
0x69, 0x66, 0x2c, 0x61, 0x70, 0x70, 0x6c, 0x69, /* i f - a p p l i */
0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x78, /* c a t i o n - x */
0x6d, 0x6c, 0x2c, 0x61, 0x70, 0x70, 0x6c, 0x69, /* m l - a p p l i */
0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x78, /* c a t i o n - x */
0x68, 0x74, 0x6d, 0x6c, 0x2b, 0x78, 0x6d, 0x6c, /* h t m l - x m l */
0x2c, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x70, 0x6c, /* - t e x t - p l */
0x61, 0x69, 0x6e, 0x2c, 0x74, 0x65, 0x78, 0x74, /* a i n - t e x t */
0x2f, 0x6a, 0x61, 0x76, 0x61, 0x73, 0x63, 0x72, /* - j a v a s c r */
0x69, 0x70, 0x74, 0x2c, 0x70, 0x75, 0x62, 0x6c, /* i p t - p u b l */
0x69, 0x63, 0x70, 0x72, 0x69, 0x76, 0x61, 0x74, /* i c p r i v a t */
0x65, 0x6d, 0x61, 0x78, 0x2d, 0x61, 0x67, 0x65, /* e m a x - a g e */
0x3d, 0x67, 0x7a, 0x69, 0x70, 0x2c, 0x64, 0x65, /* - g z i p - d e */
0x66, 0x6c, 0x61, 0x74, 0x65, 0x2c, 0x73, 0x64, /* f l a t e - s d */
0x63, 0x68, 0x63, 0x68, 0x61, 0x72, 0x73, 0x65, /* c h c h a r s e */
0x74, 0x3d, 0x75, 0x74, 0x66, 0x2d, 0x38, 0x63, /* t - u t f - 8 c */
0x68, 0x61, 0x72, 0x73, 0x65, 0x74, 0x3d, 0x69, /* h a r s e t - i */
0x73, 0x6f, 0x2d, 0x38, 0x38, 0x35, 0x39, 0x2d, /* s o - 8 8 5 9 - */
0x31, 0x2c, 0x75, 0x74, 0x66, 0x2d, 0x2c, 0x2a, /* 1 - u t f - - - */
0x2c, 0x65, 0x6e, 0x71, 0x3d, 0x30, 0x2e /* - e n q - 0 - */
};
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static ngx_http_spdy_request_header_t ngx_http_spdy_request_headers[] = {
{ 0, 6, "method", ngx_http_spdy_parse_method },
{ 0, 6, "scheme", ngx_http_spdy_parse_scheme },
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
{ 0, 4, "host", ngx_http_spdy_parse_host },
{ 0, 4, "path", ngx_http_spdy_parse_path },
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
{ 0, 7, "version", ngx_http_spdy_parse_version },
};
#define NGX_SPDY_REQUEST_HEADERS \
(sizeof(ngx_http_spdy_request_headers) \
/ sizeof(ngx_http_spdy_request_header_t))
void
ngx_http_spdy_init(ngx_event_t *rev)
{
int rc;
ngx_connection_t *c;
ngx_pool_cleanup_t *cln;
ngx_http_connection_t *hc;
ngx_http_spdy_srv_conf_t *sscf;
ngx_http_spdy_main_conf_t *smcf;
ngx_http_spdy_connection_t *sc;
c = rev->data;
hc = c->data;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0,
"init spdy request");
c->log->action = "processing SPDY";
smcf = ngx_http_get_module_main_conf(hc->conf_ctx, ngx_http_spdy_module);
if (smcf->recv_buffer == NULL) {
smcf->recv_buffer = ngx_palloc(ngx_cycle->pool, smcf->recv_buffer_size);
if (smcf->recv_buffer == NULL) {
ngx_http_close_connection(c);
return;
}
}
sc = ngx_pcalloc(c->pool, sizeof(ngx_http_spdy_connection_t));
if (sc == NULL) {
ngx_http_close_connection(c);
return;
}
sc->connection = c;
sc->http_connection = hc;
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
sc->send_window = NGX_SPDY_CONNECTION_WINDOW;
sc->recv_window = NGX_SPDY_CONNECTION_WINDOW;
sc->init_window = NGX_SPDY_INIT_STREAM_WINDOW;
SPDY: removed state to check first SETTINGS frame. That code was based on misunderstanding of spdy specification about configuration applicability in the SETTINGS frames. The original interpretation was that configuration is assigned for the whole SPDY connection, while it is only for the endpoint. Moreover, the strange thing is that specification forbids multiple entries in the SETTINGS frame with the same ID even if flags are different. As a result, Chrome sends two SETTINGS frames: one with its own configuration, and another one with configuration stored for a server (when the FLAG_SETTINGS_PERSIST_VALUE flags were used by the server). To simplify implementation we refuse to use the persistent settings feature and thereby avoid all the complexity related with its proper support.
2014-01-22 08:58:19 +08:00
sc->handler = ngx_http_spdy_state_head;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
Added server-side support for PROXY protocol v1 (ticket #355). Client address specified in the PROXY protocol header is now saved in the $proxy_protocol_addr variable and can be used in the realip module. This is currently not implemented for mail.
2014-03-17 21:41:24 +08:00
if (hc->proxy_protocol) {
c->log->action = "reading PROXY protocol";
sc->handler = ngx_http_spdy_proxy_protocol;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->zstream_in.zalloc = ngx_http_spdy_zalloc;
sc->zstream_in.zfree = ngx_http_spdy_zfree;
sc->zstream_in.opaque = sc;
rc = inflateInit(&sc->zstream_in);
if (rc != Z_OK) {
ngx_log_error(NGX_LOG_ALERT, c->log, 0,
"inflateInit() failed: %d", rc);
ngx_http_close_connection(c);
return;
}
sc->zstream_out.zalloc = ngx_http_spdy_zalloc;
sc->zstream_out.zfree = ngx_http_spdy_zfree;
sc->zstream_out.opaque = sc;
sscf = ngx_http_get_module_srv_conf(hc->conf_ctx, ngx_http_spdy_module);
rc = deflateInit2(&sc->zstream_out, (int) sscf->headers_comp,
Z_DEFLATED, 11, 4, Z_DEFAULT_STRATEGY);
if (rc != Z_OK) {
ngx_log_error(NGX_LOG_ALERT, c->log, 0,
"deflateInit2() failed: %d", rc);
ngx_http_close_connection(c);
return;
}
rc = deflateSetDictionary(&sc->zstream_out, ngx_http_spdy_dict,
sizeof(ngx_http_spdy_dict));
if (rc != Z_OK) {
ngx_log_error(NGX_LOG_ALERT, c->log, 0,
"deflateSetDictionary() failed: %d", rc);
ngx_http_close_connection(c);
return;
}
sc->pool = ngx_create_pool(sscf->pool_size, sc->connection->log);
if (sc->pool == NULL) {
ngx_http_close_connection(c);
return;
}
cln = ngx_pool_cleanup_add(c->pool, sizeof(ngx_pool_cleanup_file_t));
if (cln == NULL) {
ngx_http_close_connection(c);
return;
}
cln->handler = ngx_http_spdy_pool_cleanup;
cln->data = sc;
sc->streams_index = ngx_pcalloc(sc->pool,
ngx_http_spdy_streams_index_size(sscf)
* sizeof(ngx_http_spdy_stream_t *));
if (sc->streams_index == NULL) {
ngx_http_close_connection(c);
return;
}
SPDY: removed state to check first SETTINGS frame. That code was based on misunderstanding of spdy specification about configuration applicability in the SETTINGS frames. The original interpretation was that configuration is assigned for the whole SPDY connection, while it is only for the endpoint. Moreover, the strange thing is that specification forbids multiple entries in the SETTINGS frame with the same ID even if flags are different. As a result, Chrome sends two SETTINGS frames: one with its own configuration, and another one with configuration stored for a server (when the FLAG_SETTINGS_PERSIST_VALUE flags were used by the server). To simplify implementation we refuse to use the persistent settings feature and thereby avoid all the complexity related with its proper support.
2014-01-22 08:58:19 +08:00
if (ngx_http_spdy_send_settings(sc) == NGX_ERROR) {
ngx_http_close_connection(c);
return;
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
if (ngx_http_spdy_send_window_update(sc, 0, NGX_SPDY_MAX_WINDOW
- sc->recv_window)
== NGX_ERROR)
{
ngx_http_close_connection(c);
return;
}
sc->recv_window = NGX_SPDY_MAX_WINDOW;
ngx_queue_init(&sc->waiting);
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
ngx_queue_init(&sc->posted);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
c->data = sc;
rev->handler = ngx_http_spdy_read_handler;
c->write->handler = ngx_http_spdy_write_handler;
ngx_http_spdy_read_handler(rev);
}
static void
ngx_http_spdy_read_handler(ngx_event_t *rev)
{
u_char *p, *end;
size_t available;
ssize_t n;
ngx_connection_t *c;
ngx_http_spdy_main_conf_t *smcf;
ngx_http_spdy_connection_t *sc;
c = rev->data;
sc = c->data;
if (rev->timedout) {
ngx_log_error(NGX_LOG_INFO, c->log, NGX_ETIMEDOUT, "client timed out");
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_REQUEST_TIME_OUT);
return;
}
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "spdy read handler");
sc->blocked = 1;
smcf = ngx_http_get_module_main_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
available = smcf->recv_buffer_size - 2 * NGX_SPDY_STATE_BUFFER_SIZE;
do {
p = smcf->recv_buffer;
ngx_memcpy(p, sc->buffer, NGX_SPDY_STATE_BUFFER_SIZE);
end = p + sc->buffer_used;
n = c->recv(c, end, available);
if (n == NGX_AGAIN) {
break;
}
SPDY: better name for flag that indicates incomplete frame state. No functional changes.
2014-01-14 20:24:45 +08:00
if (n == 0 && (sc->incomplete || sc->processing)) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_log_error(NGX_LOG_INFO, c->log, 0,
"client closed prematurely connection");
}
if (n == 0 || n == NGX_ERROR) {
ngx_http_spdy_finalize_connection(sc,
NGX_HTTP_CLIENT_CLOSED_REQUEST);
return;
}
end += n;
sc->buffer_used = 0;
SPDY: better name for flag that indicates incomplete frame state. No functional changes.
2014-01-14 20:24:45 +08:00
sc->incomplete = 0;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
do {
p = sc->handler(sc, p, end);
if (p == NULL) {
return;
}
} while (p != end);
} while (rev->ready);
if (ngx_handle_read_event(rev, 0) != NGX_OK) {
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_INTERNAL_SERVER_ERROR);
return;
}
SPDY: send output queue after processing of read event. During the processing of input some control frames can be added to the queue. And if there were no writing streams at the moment, these control frames might be left unsent for a long time (or even forever). This long delay is especially critical for PING replies since a client can consider connection as broken and then resend exactly the same request over a new connection, which is not safe in case of non-idempotent HTTP methods.
2014-01-15 21:16:38 +08:00
if (sc->last_out && ngx_http_spdy_send_output_queue(sc) == NGX_ERROR) {
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_CLIENT_CLOSED_REQUEST);
return;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->blocked = 0;
if (sc->processing) {
if (rev->timer_set) {
ngx_del_timer(rev);
}
return;
}
ngx_http_spdy_handle_connection(sc);
}
static void
ngx_http_spdy_write_handler(ngx_event_t *wev)
{
ngx_int_t rc;
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
ngx_queue_t *q;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_connection_t *c;
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
ngx_http_spdy_stream_t *stream;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_http_spdy_connection_t *sc;
c = wev->data;
sc = c->data;
if (wev->timedout) {
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0,
"spdy write event timed out");
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_CLIENT_CLOSED_REQUEST);
return;
}
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "spdy write handler");
SPDY: fixed possible request hang. Processing events from upstream connection can result in sending queued frames from other streams. In this case such streams were not added to handling queue and properly handled. A global per connection flag was replaced by a per stream flag that indicates currently sending stream while all other streams can be added to handling queue.
2013-12-26 21:03:16 +08:00
sc->blocked = 1;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
rc = ngx_http_spdy_send_output_queue(sc);
if (rc == NGX_ERROR) {
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_CLIENT_CLOSED_REQUEST);
return;
}
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
while (!ngx_queue_empty(&sc->posted)) {
q = ngx_queue_head(&sc->posted);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
ngx_queue_remove(q);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: use ngx_queue_t to queue streams for post processing. It simplifies the code and allows easy reuse the same queue pointer to store streams in various queues with different requirements. Future implementation of SPDY/3.1 will take advantage of this quality.
2014-01-21 00:56:49 +08:00
stream = ngx_queue_data(q, ngx_http_spdy_stream_t, queue);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
stream->handled = 0;
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, c->log, 0,
"spdy run stream %ui", stream->id);
wev = stream->request->connection->write;
wev->handler(wev);
}
sc->blocked = 0;
if (rc == NGX_AGAIN) {
return;
}
ngx_http_spdy_handle_connection(sc);
}
ngx_int_t
ngx_http_spdy_send_output_queue(ngx_http_spdy_connection_t *sc)
{
ngx_chain_t *cl;
ngx_event_t *wev;
ngx_connection_t *c;
ngx_http_core_loc_conf_t *clcf;
ngx_http_spdy_out_frame_t *out, *frame, *fn;
c = sc->connection;
if (c->error) {
return NGX_ERROR;
}
wev = c->write;
if (!wev->ready) {
return NGX_OK;
}
cl = NULL;
out = NULL;
for (frame = sc->last_out; frame; frame = fn) {
frame->last->next = cl;
cl = frame->first;
fn = frame->next;
frame->next = out;
out = frame;
ngx_log_debug5(NGX_LOG_DEBUG_HTTP, c->log, 0,
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
"spdy frame out: %p sid:%ui prio:%ui bl:%d len:%uz",
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
out, out->stream ? out->stream->id : 0, out->priority,
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
out->blocked, out->length);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
cl = c->send_chain(c, cl, 0);
if (cl == NGX_CHAIN_ERROR) {
c->error = 1;
if (!sc->blocked) {
ngx_post_event(wev, &ngx_posted_events);
}
return NGX_ERROR;
}
clcf = ngx_http_get_module_loc_conf(sc->http_connection->conf_ctx,
ngx_http_core_module);
if (ngx_handle_write_event(wev, clcf->send_lowat) != NGX_OK) {
return NGX_ERROR; /* FIXME */
}
if (cl) {
ngx_add_timer(wev, clcf->send_timeout);
} else {
if (wev->timer_set) {
ngx_del_timer(wev);
}
}
SPDY: use frame->next pointer to chain free frames. There is no need in separate "free" pointer and like it is for ngx_chain_t the "next" pointer can be used. But after this change successfully handled frame should not be accessed, so the frame handling cycle was improved to store pointer to the next frame before processing. Also worth noting that initializing "free" pointer to NULL in the original code was surplus.
2014-01-22 08:58:19 +08:00
for ( /* void */ ; out; out = fn) {
fn = out->next;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (out->handler(sc, out) != NGX_OK) {
out->blocked = 1;
out->priority = NGX_SPDY_HIGHEST_PRIORITY;
break;
}
ngx_log_debug4(NGX_LOG_DEBUG_HTTP, c->log, 0,
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
"spdy frame sent: %p sid:%ui bl:%d len:%uz",
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
out, out->stream ? out->stream->id : 0,
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
out->blocked, out->length);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
frame = NULL;
for ( /* void */ ; out; out = fn) {
fn = out->next;
out->next = frame;
frame = out;
}
sc->last_out = frame;
return NGX_OK;
}
static void
ngx_http_spdy_handle_connection(ngx_http_spdy_connection_t *sc)
{
ngx_connection_t *c;
ngx_http_spdy_srv_conf_t *sscf;
if (sc->last_out || sc->processing) {
return;
}
c = sc->connection;
if (c->error) {
ngx_http_close_connection(c);
return;
}
if (c->buffered) {
return;
}
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
SPDY: better name for flag that indicates incomplete frame state. No functional changes.
2014-01-14 20:24:45 +08:00
if (sc->incomplete) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_add_timer(c->read, sscf->recv_timeout);
return;
}
if (ngx_terminate || ngx_exiting) {
ngx_http_close_connection(c);
return;
}
ngx_destroy_pool(sc->pool);
sc->pool = NULL;
sc->free_ctl_frames = NULL;
sc->free_fake_connections = NULL;
#if (NGX_HTTP_SSL)
if (c->ssl) {
ngx_ssl_free_buffer(c);
}
#endif
c->destroyed = 1;
c->idle = 1;
ngx_reusable_connection(c, 1);
c->write->handler = ngx_http_empty_handler;
c->read->handler = ngx_http_spdy_keepalive_handler;
if (c->write->timer_set) {
ngx_del_timer(c->write);
}
ngx_add_timer(c->read, sscf->keepalive_timeout);
}
Added server-side support for PROXY protocol v1 (ticket #355). Client address specified in the PROXY protocol header is now saved in the $proxy_protocol_addr variable and can be used in the realip module. This is currently not implemented for mail.
2014-03-17 21:41:24 +08:00
static u_char *
ngx_http_spdy_proxy_protocol(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
pos = ngx_proxy_protocol_parse(sc->connection, pos, end);
if (pos == NULL) {
return ngx_http_spdy_state_protocol_error(sc);
}
sc->connection->log->action = "processing SPDY";
return ngx_http_spdy_state_complete(sc, pos, end);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static u_char *
ngx_http_spdy_state_head(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
SPDY: consistently handle control frames with unknown type. The SPDY draft 2 specification requires that if an endpoint receives a control frame for a type it does not recognize, it must ignore the frame. But the 3 and 3.1 drafts don't seem to declare any behavior for such case. Then sticking with the previous draft in this matter looks to be right. But previously, only 8 least significant bits of the type field were parsed while the rest of 16 bits of the field were checked against zero. Though there are no known frame types bigger than 255, this resulted in inconsistency in handling of such frames: they were not recognized as valid frames at all, and the connection was closed.
2014-04-07 23:27:56 +08:00
uint32_t head, flen;
ngx_uint_t type;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (end - pos < NGX_SPDY_FRAME_HEADER_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_head);
}
head = ngx_spdy_frame_parse_uint32(pos);
pos += sizeof(uint32_t);
flen = ngx_spdy_frame_parse_uint32(pos);
sc->flags = ngx_spdy_frame_flags(flen);
sc->length = ngx_spdy_frame_length(flen);
pos += sizeof(uint32_t);
ngx_log_debug3(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
SPDY: fixed format specifiers in logging.
2014-01-14 20:24:45 +08:00
"spdy process frame head:%08XD f:%Xd l:%uz",
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
head, sc->flags, sc->length);
if (ngx_spdy_ctl_frame_check(head)) {
SPDY: consistently handle control frames with unknown type. The SPDY draft 2 specification requires that if an endpoint receives a control frame for a type it does not recognize, it must ignore the frame. But the 3 and 3.1 drafts don't seem to declare any behavior for such case. Then sticking with the previous draft in this matter looks to be right. But previously, only 8 least significant bits of the type field were parsed while the rest of 16 bits of the field were checked against zero. Though there are no known frame types bigger than 255, this resulted in inconsistency in handling of such frames: they were not recognized as valid frames at all, and the connection was closed.
2014-04-07 23:27:56 +08:00
type = ngx_spdy_ctl_frame_type(head);
switch (type) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
case NGX_SPDY_SYN_STREAM:
return ngx_http_spdy_state_syn_stream(sc, pos, end);
case NGX_SPDY_SYN_REPLY:
return ngx_http_spdy_state_protocol_error(sc);
case NGX_SPDY_RST_STREAM:
return ngx_http_spdy_state_rst_stream(sc, pos, end);
case NGX_SPDY_SETTINGS:
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
return ngx_http_spdy_state_settings(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
case NGX_SPDY_PING:
return ngx_http_spdy_state_ping(sc, pos, end);
case NGX_SPDY_GOAWAY:
return ngx_http_spdy_state_skip(sc, pos, end); /* TODO */
case NGX_SPDY_HEADERS:
return ngx_http_spdy_state_protocol_error(sc);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
case NGX_SPDY_WINDOW_UPDATE:
return ngx_http_spdy_state_window_update(sc, pos, end);
SPDY: consistently handle control frames with unknown type. The SPDY draft 2 specification requires that if an endpoint receives a control frame for a type it does not recognize, it must ignore the frame. But the 3 and 3.1 drafts don't seem to declare any behavior for such case. Then sticking with the previous draft in this matter looks to be right. But previously, only 8 least significant bits of the type field were parsed while the rest of 16 bits of the field were checked against zero. Though there are no known frame types bigger than 255, this resulted in inconsistency in handling of such frames: they were not recognized as valid frames at all, and the connection was closed.
2014-04-07 23:27:56 +08:00
default:
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy control frame with unknown type %ui", type);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_skip(sc, pos, end);
}
}
if (ngx_spdy_data_frame_check(head)) {
sc->stream = ngx_http_spdy_get_stream_by_id(sc, head);
return ngx_http_spdy_state_data(sc, pos, end);
}
/* TODO version & type check */
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy unknown frame");
return ngx_http_spdy_state_protocol_error(sc);
}
static u_char *
ngx_http_spdy_state_syn_stream(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
ngx_uint_t sid, prio;
ngx_http_spdy_stream_t *stream;
ngx_http_spdy_srv_conf_t *sscf;
if (end - pos < NGX_SPDY_SYN_STREAM_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_syn_stream);
}
if (sc->length <= NGX_SPDY_SYN_STREAM_SIZE) {
/* TODO logging */
return ngx_http_spdy_state_protocol_error(sc);
}
sc->length -= NGX_SPDY_SYN_STREAM_SIZE;
sid = ngx_spdy_frame_parse_sid(pos);
SPDY: fixed parsing of the priority field. The size of the priority field is increased by one bit in spdy/3, and now it's a 3-bit field followed by 5 bits of unused space. But a shift of these bits hasn't been adjusted in 39d7eef2e332 accordingly.
2014-02-04 13:06:23 +08:00
prio = pos[8] >> 5;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
pos += NGX_SPDY_SYN_STREAM_SIZE;
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy SYN_STREAM frame sid:%ui prio:%ui", sid, prio);
SPDY: Stream-ID restrictions according to specification.
2014-04-21 22:59:53 +08:00
if (sid % 2 == 0 || sid <= sc->last_sid) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client sent SYN_STREAM frame "
"with invalid Stream-ID %ui", sid);
stream = ngx_http_spdy_get_stream_by_id(sc, sid);
if (stream) {
if (ngx_http_spdy_terminate_stream(sc, stream,
NGX_SPDY_PROTOCOL_ERROR)
!= NGX_OK)
{
return ngx_http_spdy_state_internal_error(sc);
}
}
return ngx_http_spdy_state_protocol_error(sc);
}
sc->last_sid = sid;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
if (sc->processing >= sscf->concurrent_streams) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
SPDY: fixed typo in log message.
2014-04-16 15:40:42 +08:00
"spdy concurrent streams exceeded %ui", sc->processing);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (ngx_http_spdy_send_rst_stream(sc, sid, NGX_SPDY_REFUSED_STREAM,
prio)
!= NGX_OK)
{
return ngx_http_spdy_state_internal_error(sc);
}
return ngx_http_spdy_state_headers_skip(sc, pos, end);
}
stream = ngx_http_spdy_create_stream(sc, sid, prio);
if (stream == NULL) {
return ngx_http_spdy_state_internal_error(sc);
}
stream->in_closed = (sc->flags & NGX_SPDY_FLAG_FIN) ? 1 : 0;
stream->request->request_length = NGX_SPDY_FRAME_HEADER_SIZE
+ NGX_SPDY_SYN_STREAM_SIZE
+ sc->length;
sc->stream = stream;
return ngx_http_spdy_state_headers(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_headers(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
int z;
size_t size;
ngx_buf_t *buf;
ngx_int_t rc;
ngx_uint_t complete;
ngx_http_request_t *r;
size = end - pos;
if (size == 0) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers);
}
if (size >= sc->length) {
size = sc->length;
complete = 1;
} else {
complete = 0;
}
r = sc->stream->request;
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy process HEADERS %uz of %uz", size, sc->length);
buf = r->header_in;
sc->zstream_in.next_in = pos;
sc->zstream_in.avail_in = size;
sc->zstream_in.next_out = buf->last;
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* one byte is reserved for null-termination of the last header value */
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->zstream_in.avail_out = buf->end - buf->last - 1;
z = inflate(&sc->zstream_in, Z_NO_FLUSH);
if (z == Z_NEED_DICT) {
z = inflateSetDictionary(&sc->zstream_in, ngx_http_spdy_dict,
sizeof(ngx_http_spdy_dict));
if (z != Z_OK) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"spdy inflateSetDictionary() failed: %d", z);
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy inflateSetDictionary(): %d", z);
z = sc->zstream_in.avail_in ? inflate(&sc->zstream_in, Z_NO_FLUSH)
: Z_OK;
}
if (z != Z_OK) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"spdy inflate() failed: %d", z);
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
ngx_log_debug5(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy inflate out: ni:%p no:%p ai:%ud ao:%ud rc:%d",
sc->zstream_in.next_in, sc->zstream_in.next_out,
sc->zstream_in.avail_in, sc->zstream_in.avail_out,
z);
sc->length -= sc->zstream_in.next_in - pos;
pos = sc->zstream_in.next_in;
buf->last = sc->zstream_in.next_out;
if (r->headers_in.headers.part.elts == NULL) {
if (buf->last - buf->pos < NGX_SPDY_NV_NUM_SIZE) {
SPDY: detect premature end of frame while start parsing headers.
2014-03-26 21:43:39 +08:00
if (complete) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent SYN_STREAM frame "
"with invalid HEADERS block");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
SPDY: detect premature end of frame while start parsing headers.
2014-03-26 21:43:39 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers);
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
sc->entries = ngx_spdy_frame_parse_uint32(buf->pos);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
buf->pos += NGX_SPDY_NV_NUM_SIZE;
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
"spdy HEADERS block consists of %ui entries",
sc->entries);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: constant number of preallocated structures for headers.
2014-03-03 23:24:54 +08:00
if (ngx_list_init(&r->headers_in.headers, r->pool, 20,
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sizeof(ngx_table_elt_t))
!= NGX_OK)
{
ngx_http_spdy_close_stream(sc->stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
if (ngx_array_init(&r->headers_in.cookies, r->pool, 2,
sizeof(ngx_table_elt_t *))
!= NGX_OK)
{
ngx_http_spdy_close_stream(sc->stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
}
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
while (sc->entries) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
rc = ngx_http_spdy_parse_header(r);
switch (rc) {
case NGX_DONE:
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
sc->entries--;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
case NGX_OK:
break;
case NGX_AGAIN:
if (sc->zstream_in.avail_in) {
rc = ngx_http_spdy_alloc_large_header_buffer(r);
if (rc == NGX_DECLINED) {
/* TODO logging */
ngx_http_finalize_request(r,
NGX_HTTP_REQUEST_HEADER_TOO_LARGE);
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
if (rc != NGX_OK) {
ngx_http_spdy_close_stream(sc->stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* null-terminate the last processed header name or value */
*buf->pos = '\0';
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
buf = r->header_in;
sc->zstream_in.next_out = buf->last;
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* one byte is reserved for null-termination */
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->zstream_in.avail_out = buf->end - buf->last - 1;
z = inflate(&sc->zstream_in, Z_NO_FLUSH);
if (z != Z_OK) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"spdy inflate() failed: %d", z);
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
sc->length -= sc->zstream_in.next_in - pos;
pos = sc->zstream_in.next_in;
buf->last = sc->zstream_in.next_out;
continue;
}
if (complete) {
/* TODO: improve error message */
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy again while last chunk");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers);
case NGX_HTTP_PARSE_INVALID_REQUEST:
/* TODO: improve error message */
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent invalid header line");
ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
default: /* NGX_HTTP_PARSE_INVALID_HEADER */
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent invalid HEADERS spdy frame");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
/* a header line has been parsed successfully */
rc = ngx_http_spdy_handle_request_header(r);
if (rc != NGX_OK) {
if (rc == NGX_HTTP_PARSE_INVALID_HEADER) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent invalid HEADERS spdy frame");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
if (rc == NGX_HTTP_PARSE_INVALID_REQUEST) {
ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);
}
SPDY: removed ngx_http_spdy_state_headers_error(). The function just calls ngx_http_spdy_state_headers_skip() most of the time. There was also an attempt of optimization to stop parsing if the client already closed connection, but it looks strange and unfinished anyway.
2014-05-01 00:34:20 +08:00
return ngx_http_spdy_state_headers_skip(sc, pos, end);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
}
SPDY: better detect if headers block has wrong entries count. Previously, only one case was checked: if there's more data to parse in a r->header_in buffer, but the buffer can be filled to the end by the last parsed entry, so we also need to check that there's no more data to inflate.
2014-03-26 22:01:11 +08:00
if (buf->pos != buf->last || sc->zstream_in.avail_in) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent SYN_STREAM frame "
"with invalid HEADERS block");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
if (!complete) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers);
}
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* null-terminate the last header value */
*buf->pos = '\0';
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_http_spdy_run_request(r);
return ngx_http_spdy_state_complete(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_headers_skip(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
int n;
size_t size;
u_char buffer[NGX_SPDY_SKIP_HEADERS_BUFFER_SIZE];
if (sc->length == 0) {
return ngx_http_spdy_state_complete(sc, pos, end);
}
size = end - pos;
if (size == 0) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers_skip);
}
sc->zstream_in.next_in = pos;
sc->zstream_in.avail_in = (size < sc->length) ? size : sc->length;
while (sc->zstream_in.avail_in) {
sc->zstream_in.next_out = buffer;
sc->zstream_in.avail_out = NGX_SPDY_SKIP_HEADERS_BUFFER_SIZE;
n = inflate(&sc->zstream_in, Z_NO_FLUSH);
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy inflate(): %d", n);
if (n != Z_OK) {
/* TODO: logging */
return ngx_http_spdy_state_protocol_error(sc);
}
}
pos = sc->zstream_in.next_in;
if (size < sc->length) {
sc->length -= size;
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_headers_skip);
}
return ngx_http_spdy_state_complete(sc, pos, end);
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static u_char *
ngx_http_spdy_state_window_update(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
size_t delta;
ngx_uint_t sid;
ngx_event_t *wev;
ngx_queue_t *q;
ngx_http_spdy_stream_t *stream;
if (end - pos < NGX_SPDY_WINDOW_UPDATE_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_window_update);
}
if (sc->length != NGX_SPDY_WINDOW_UPDATE_SIZE) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client sent WINDOW_UPDATE frame "
"with incorrect length %uz", sc->length);
return ngx_http_spdy_state_protocol_error(sc);
}
sid = ngx_spdy_frame_parse_sid(pos);
pos += NGX_SPDY_SID_SIZE;
delta = ngx_spdy_frame_parse_delta(pos);
pos += NGX_SPDY_DELTA_SIZE;
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy WINDOW_UPDATE sid:%ui delta:%ui", sid, delta);
if (sid) {
stream = ngx_http_spdy_get_stream_by_id(sc, sid);
if (stream == NULL) {
SPDY: avoid sending RST_STREAM on WINDOW_UPDATE with unknown SID. There's a race condition between closing a stream by one endpoint and sending a WINDOW_UPDATE frame by another. So it would be better to just skip such frames for unknown streams, like is already done for the DATA frames.
2014-04-21 23:21:17 +08:00
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"unknown spdy stream");
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
return ngx_http_spdy_state_complete(sc, pos, end);
}
if (stream->send_window > (ssize_t) (NGX_SPDY_MAX_WINDOW - delta)) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client violated flow control for stream %ui: "
"received WINDOW_UPDATE frame with delta %uz "
"that is not allowed for window %z",
sid, delta, stream->send_window);
if (ngx_http_spdy_terminate_stream(sc, stream,
NGX_SPDY_FLOW_CONTROL_ERROR)
== NGX_ERROR)
{
return ngx_http_spdy_state_internal_error(sc);
}
return ngx_http_spdy_state_complete(sc, pos, end);
}
stream->send_window += delta;
if (stream->exhausted) {
stream->exhausted = 0;
wev = stream->request->connection->write;
if (!wev->timer_set) {
wev->delayed = 0;
wev->handler(wev);
}
}
} else {
sc->send_window += delta;
if (sc->send_window > NGX_SPDY_MAX_WINDOW) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client violated connection flow control: "
"received WINDOW_UPDATE frame with delta %uz "
"that is not allowed for window %uz",
delta, sc->send_window);
return ngx_http_spdy_state_protocol_error(sc);
}
while (!ngx_queue_empty(&sc->waiting)) {
q = ngx_queue_head(&sc->waiting);
ngx_queue_remove(q);
stream = ngx_queue_data(q, ngx_http_spdy_stream_t, queue);
stream->handled = 0;
wev = stream->request->connection->write;
if (!wev->timer_set) {
wev->delayed = 0;
wev->handler(wev);
if (sc->send_window == 0) {
break;
}
}
}
}
return ngx_http_spdy_state_complete(sc, pos, end);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static u_char *
ngx_http_spdy_state_data(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
{
ngx_http_spdy_stream_t *stream;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy DATA frame");
if (sc->length > sc->recv_window) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client violated connection flow control: length of "
"received DATA frame %uz, while available window %uz",
SPDY: fixed arguments supplied for an error message.
2014-04-09 00:12:30 +08:00
sc->length, sc->recv_window);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
sc->recv_window -= sc->length;
if (sc->recv_window < NGX_SPDY_MAX_WINDOW / 4) {
if (ngx_http_spdy_send_window_update(sc, 0,
NGX_SPDY_MAX_WINDOW
- sc->recv_window)
== NGX_ERROR)
{
return ngx_http_spdy_state_internal_error(sc);
}
sc->recv_window = NGX_SPDY_MAX_WINDOW;
}
SPDY: moved a variable initialization near to its check. This should prevent attempts of using pointer before it was checked, since all modern compilers are able to spot access to uninitialized variable. No functional changes.
2014-04-09 22:15:32 +08:00
stream = sc->stream;
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
if (stream == NULL) {
return ngx_http_spdy_state_skip(sc, pos, end);
}
if (sc->length > stream->recv_window) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client violated flow control for stream %ui: length of "
"received DATA frame %uz, while available window %uz",
stream->id, sc->length, stream->recv_window);
if (ngx_http_spdy_terminate_stream(sc, stream,
NGX_SPDY_FLOW_CONTROL_ERROR)
== NGX_ERROR)
{
return ngx_http_spdy_state_internal_error(sc);
}
return ngx_http_spdy_state_skip(sc, pos, end);
}
stream->recv_window -= sc->length;
if (stream->recv_window < NGX_SPDY_STREAM_WINDOW / 4) {
if (ngx_http_spdy_send_window_update(sc, stream->id,
NGX_SPDY_STREAM_WINDOW
- stream->recv_window)
== NGX_ERROR)
{
return ngx_http_spdy_state_internal_error(sc);
}
stream->recv_window = NGX_SPDY_STREAM_WINDOW;
}
if (stream->in_closed) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client sent DATA frame for half closed stream %ui",
stream->id);
if (ngx_http_spdy_terminate_stream(sc, stream,
NGX_SPDY_STREAM_ALREADY_CLOSED)
== NGX_ERROR)
{
return ngx_http_spdy_state_internal_error(sc);
}
return ngx_http_spdy_state_skip(sc, pos, end);
}
return ngx_http_spdy_state_read_data(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_read_data(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
{
size_t size;
ssize_t n;
ngx_buf_t *buf;
ngx_int_t rc;
ngx_temp_file_t *tf;
ngx_http_request_t *r;
ngx_http_spdy_stream_t *stream;
ngx_http_request_body_t *rb;
ngx_http_core_loc_conf_t *clcf;
stream = sc->stream;
if (stream == NULL) {
return ngx_http_spdy_state_skip(sc, pos, end);
}
if (stream->skip_data) {
if (sc->flags & NGX_SPDY_FLAG_FIN) {
stream->in_closed = 1;
}
/* TODO log and accounting */
return ngx_http_spdy_state_skip(sc, pos, end);
}
size = end - pos;
SPDY: refactored ngx_http_spdy_state_read_data(). There's no more need in a separate indicator of frame completeness after d74889fbf06d.
2014-04-07 23:27:56 +08:00
if (size > sc->length) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
size = sc->length;
}
r = stream->request;
if (r->request_body == NULL
&& ngx_http_spdy_init_request_body(r) != NGX_OK)
{
stream->skip_data = NGX_SPDY_DATA_INTERNAL_ERROR;
return ngx_http_spdy_state_skip(sc, pos, end);
}
rb = r->request_body;
tf = rb->temp_file;
buf = rb->buf;
if (size) {
rb->rest += size;
if (r->headers_in.content_length_n != -1
&& r->headers_in.content_length_n < rb->rest)
{
/* TODO logging */
stream->skip_data = NGX_SPDY_DATA_ERROR;
goto error;
} else {
clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module);
if (clcf->client_max_body_size
&& clcf->client_max_body_size < rb->rest)
{
ngx_log_error(NGX_LOG_ERR, r->connection->log, 0,
"client intended to send too large chunked "
"body: %O bytes",
rb->rest);
stream->skip_data = NGX_SPDY_DATA_ERROR;
goto error;
}
}
SPDY: fixed the DATA frame length handling in case of some errors. There are a few cases in ngx_http_spdy_state_read_data() related to error handling when ngx_http_spdy_state_skip() might be called with an inconsistent state between *pos and sc->length, that leads to violation of frame layout parsing and resuted in corruption of spdy connection. Based on a patch by Xiaochen Wang.
2014-03-29 00:05:07 +08:00
sc->length -= size;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (tf) {
buf->start = pos;
buf->pos = pos;
pos += size;
buf->end = pos;
buf->last = pos;
n = ngx_write_chain_to_temp_file(tf, rb->bufs);
/* TODO: n == 0 or not complete and level event */
if (n == NGX_ERROR) {
stream->skip_data = NGX_SPDY_DATA_INTERNAL_ERROR;
goto error;
}
tf->offset += n;
} else {
buf->last = ngx_cpymem(buf->last, pos, size);
pos += size;
}
r->request_length += size;
}
SPDY: refactored ngx_http_spdy_state_read_data(). There's no more need in a separate indicator of frame completeness after d74889fbf06d.
2014-04-07 23:27:56 +08:00
if (sc->length) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_save(sc, pos, end,
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
ngx_http_spdy_state_read_data);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
if (sc->flags & NGX_SPDY_FLAG_FIN) {
stream->in_closed = 1;
SPDY: detect premature closing of stream. The SPDY/3.1 specification requires that the server must respond with a 400 "Bad request" error if the sum of the data frame payload lengths does not equal the size of the Content-Length header. This also fixes "zero size buf in output" alert, that might be triggered if client sends a greater than zero Content-Length header and closes stream using the FIN flag with an empty request body.
2014-03-29 00:22:57 +08:00
if (r->headers_in.content_length_n < 0) {
r->headers_in.content_length_n = rb->rest;
} else if (r->headers_in.content_length_n != rb->rest) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client prematurely closed stream: "
"%O of %O bytes of request body received",
rb->rest, r->headers_in.content_length_n);
stream->skip_data = NGX_SPDY_DATA_ERROR;
goto error;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (tf) {
ngx_memzero(buf, sizeof(ngx_buf_t));
buf->in_file = 1;
buf->file_last = tf->file.offset;
buf->file = &tf->file;
rb->buf = NULL;
}
if (rb->post_handler) {
SPDY: fixed connection leak while waiting for request body. If an error occurs in a SPDY connection, the c->error flag is set on every fake request connection, and its read or write event handler is called, in order to finalize it. But while waiting for a request body, it was a no-op since the read event handler ngx_http_request_handler() calls r->read_event_handler that had been set to ngx_http_block_reading().
2013-10-01 04:00:57 +08:00
r->read_event_handler = ngx_http_block_reading;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
rb->post_handler(r);
}
}
return ngx_http_spdy_state_complete(sc, pos, end);
error:
if (rb->post_handler) {
if (stream->skip_data == NGX_SPDY_DATA_ERROR) {
rc = (r->headers_in.content_length_n == -1)
? NGX_HTTP_REQUEST_ENTITY_TOO_LARGE
: NGX_HTTP_BAD_REQUEST;
} else {
rc = NGX_HTTP_INTERNAL_SERVER_ERROR;
}
ngx_http_finalize_request(r, rc);
}
return ngx_http_spdy_state_skip(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_rst_stream(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
ngx_uint_t sid, status;
ngx_event_t *ev;
ngx_connection_t *fc;
ngx_http_spdy_stream_t *stream;
if (end - pos < NGX_SPDY_RST_STREAM_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_rst_stream);
}
if (sc->length != NGX_SPDY_RST_STREAM_SIZE) {
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client sent RST_STREAM frame with incorrect length %uz",
sc->length);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_protocol_error(sc);
}
sid = ngx_spdy_frame_parse_sid(pos);
pos += NGX_SPDY_SID_SIZE;
status = ngx_spdy_frame_parse_uint32(pos);
pos += sizeof(uint32_t);
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy RST_STREAM sid:%ui st:%ui", sid, status);
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
stream = ngx_http_spdy_get_stream_by_id(sc, sid);
if (stream == NULL) {
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"unknown stream, probably it has been closed already");
return ngx_http_spdy_state_complete(sc, pos, end);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
stream->in_closed = 1;
stream->out_closed = 1;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
fc = stream->request->connection;
fc->error = 1;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
switch (status) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
case NGX_SPDY_CANCEL:
ngx_log_error(NGX_LOG_INFO, fc->log, 0,
"client canceled stream %ui", sid);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
break;
case NGX_SPDY_INTERNAL_ERROR:
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
ngx_log_error(NGX_LOG_INFO, fc->log, 0,
"client terminated stream %ui because of internal error",
sid);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
break;
default:
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
ngx_log_error(NGX_LOG_INFO, fc->log, 0,
"client terminated stream %ui with status %ui",
sid, status);
break;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
SPDY: proper handling of all RST_STREAM statuses. Previously, only stream CANCEL and INTERNAL_ERROR were handled right.
2014-01-22 08:58:19 +08:00
ev = fc->read;
ev->handler(ev);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_complete(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_ping(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
u_char *p;
ngx_buf_t *buf;
ngx_http_spdy_out_frame_t *frame;
if (end - pos < NGX_SPDY_PING_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_ping);
}
if (sc->length != NGX_SPDY_PING_SIZE) {
/* TODO logging */
return ngx_http_spdy_state_protocol_error(sc);
}
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy PING frame");
frame = ngx_http_spdy_get_ctl_frame(sc, NGX_SPDY_PING_SIZE,
NGX_SPDY_HIGHEST_PRIORITY);
if (frame == NULL) {
return ngx_http_spdy_state_internal_error(sc);
}
buf = frame->first->buf;
p = buf->pos;
p = ngx_spdy_frame_write_head(p, NGX_SPDY_PING);
p = ngx_spdy_frame_write_flags_and_len(p, 0, NGX_SPDY_PING_SIZE);
p = ngx_cpymem(p, pos, NGX_SPDY_PING_SIZE);
buf->last = p;
ngx_http_spdy_queue_frame(sc, frame);
pos += NGX_SPDY_PING_SIZE;
return ngx_http_spdy_state_complete(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_skip(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
size_t size;
size = end - pos;
if (size < sc->length) {
sc->length -= size;
return ngx_http_spdy_state_save(sc, end, end,
ngx_http_spdy_state_skip);
}
return ngx_http_spdy_state_complete(sc, pos + sc->length, end);
}
static u_char *
ngx_http_spdy_state_settings(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
ngx_uint_t fid, val;
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
if (sc->entries == 0) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (end - pos < NGX_SPDY_SETTINGS_NUM_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_settings);
}
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
sc->entries = ngx_spdy_frame_parse_uint32(pos);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
pos += NGX_SPDY_SETTINGS_NUM_SIZE;
sc->length -= NGX_SPDY_SETTINGS_NUM_SIZE;
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
if (sc->length < sc->entries * NGX_SPDY_SETTINGS_PAIR_SIZE) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
/* TODO logging */
return ngx_http_spdy_state_protocol_error(sc);
}
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy SETTINGS frame consists of %ui entries",
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
sc->entries);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
while (sc->entries) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (end - pos < NGX_SPDY_SETTINGS_PAIR_SIZE) {
return ngx_http_spdy_state_save(sc, pos, end,
ngx_http_spdy_state_settings);
}
SPDY: better name for frame entries counter. The "headers" is not a good term, since it is used not only to count name/value pairs in the HEADERS block but to count SETTINGS entries too. Moreover, one name/value pair in HEADERS can contain multiple http headers with the same name. No functional changes.
2014-01-22 08:58:19 +08:00
sc->entries--;
SPDY: removed state to check first SETTINGS frame. That code was based on misunderstanding of spdy specification about configuration applicability in the SETTINGS frames. The original interpretation was that configuration is assigned for the whole SPDY connection, while it is only for the endpoint. Moreover, the strange thing is that specification forbids multiple entries in the SETTINGS frame with the same ID even if flags are different. As a result, Chrome sends two SETTINGS frames: one with its own configuration, and another one with configuration stored for a server (when the FLAG_SETTINGS_PERSIST_VALUE flags were used by the server). To simplify implementation we refuse to use the persistent settings feature and thereby avoid all the complexity related with its proper support.
2014-01-22 08:58:19 +08:00
sc->length -= NGX_SPDY_SETTINGS_PAIR_SIZE;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
fid = ngx_spdy_frame_parse_uint32(pos);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
pos += NGX_SPDY_SETTINGS_FID_SIZE;
SPDY: removed state to check first SETTINGS frame. That code was based on misunderstanding of spdy specification about configuration applicability in the SETTINGS frames. The original interpretation was that configuration is assigned for the whole SPDY connection, while it is only for the endpoint. Moreover, the strange thing is that specification forbids multiple entries in the SETTINGS frame with the same ID even if flags are different. As a result, Chrome sends two SETTINGS frames: one with its own configuration, and another one with configuration stored for a server (when the FLAG_SETTINGS_PERSIST_VALUE flags were used by the server). To simplify implementation we refuse to use the persistent settings feature and thereby avoid all the complexity related with its proper support.
2014-01-22 08:58:19 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
val = ngx_spdy_frame_parse_uint32(pos);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
pos += NGX_SPDY_SETTINGS_VAL_SIZE;
ngx_log_debug3(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy SETTINGS entry fl:%ui id:%ui val:%ui",
ngx_spdy_frame_flags(fid), ngx_spdy_frame_id(fid), val);
if (ngx_spdy_frame_flags(fid) == NGX_SPDY_SETTINGS_FLAG_PERSISTED) {
continue;
}
switch (ngx_spdy_frame_id(fid)) {
case NGX_SPDY_SETTINGS_INIT_WINDOW:
if (val > NGX_SPDY_MAX_WINDOW) {
ngx_log_error(NGX_LOG_INFO, sc->connection->log, 0,
"client sent SETTINGS frame with "
"incorrect INIT_WINDOW value: %ui", val);
return ngx_http_spdy_state_protocol_error(sc);
}
if (ngx_http_spdy_adjust_windows(sc, val - sc->init_window)
!= NGX_OK)
{
return ngx_http_spdy_state_internal_error(sc);
}
sc->init_window = val;
continue;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
return ngx_http_spdy_state_complete(sc, pos, end);
}
static u_char *
ngx_http_spdy_state_complete(ngx_http_spdy_connection_t *sc, u_char *pos,
u_char *end)
{
sc->handler = ngx_http_spdy_state_head;
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
sc->stream = NULL;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return pos;
}
static u_char *
ngx_http_spdy_state_save(ngx_http_spdy_connection_t *sc,
u_char *pos, u_char *end, ngx_http_spdy_handler_pt handler)
{
SPDY: improved ngx_http_spdy_state_save() check.
2014-03-19 16:57:39 +08:00
size_t size;
size = end - pos;
if (size > NGX_SPDY_STATE_BUFFER_SIZE) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_log_error(NGX_LOG_ALERT, sc->connection->log, 0,
"spdy state buffer overflow: "
SPDY: improved ngx_http_spdy_state_save() again.
2014-03-19 23:30:09 +08:00
"%uz bytes required", size);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return ngx_http_spdy_state_internal_error(sc);
}
ngx_memcpy(sc->buffer, pos, NGX_SPDY_STATE_BUFFER_SIZE);
SPDY: improved ngx_http_spdy_state_save() again.
2014-03-19 23:30:09 +08:00
sc->buffer_used = size;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->handler = handler;
SPDY: better name for flag that indicates incomplete frame state. No functional changes.
2014-01-14 20:24:45 +08:00
sc->incomplete = 1;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return end;
}
static u_char *
ngx_http_spdy_state_protocol_error(ngx_http_spdy_connection_t *sc)
{
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy state protocol error");
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
if (sc->stream) {
SPDY: prevented creation of RST_STREAM in protocol error state. Previously, the frame wasn't sent anyway (and had a wrong status code).
2014-05-15 23:18:26 +08:00
sc->stream->out_closed = 1;
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
ngx_http_spdy_close_stream(sc->stream, NGX_HTTP_BAD_REQUEST);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_CLIENT_CLOSED_REQUEST);
SPDY: improved ngx_http_spdy_state_protocol_error(). Now ngx_http_spdy_state_protocol_error() is able to close stream, so there is no need in a separate call for this. Also fixed zero status code in logs for some cases.
2014-05-01 00:33:58 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NULL;
}
static u_char *
ngx_http_spdy_state_internal_error(ngx_http_spdy_connection_t *sc)
{
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy state internal error");
/* TODO */
ngx_http_spdy_finalize_connection(sc, NGX_HTTP_INTERNAL_SERVER_ERROR);
return NULL;
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t
ngx_http_spdy_send_window_update(ngx_http_spdy_connection_t *sc, ngx_uint_t sid,
ngx_uint_t delta)
{
u_char *p;
ngx_buf_t *buf;
ngx_http_spdy_out_frame_t *frame;
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy write WINDOW_UPDATE sid:%ui delta:%ui", sid, delta);
frame = ngx_http_spdy_get_ctl_frame(sc, NGX_SPDY_WINDOW_UPDATE_SIZE,
NGX_SPDY_HIGHEST_PRIORITY);
if (frame == NULL) {
return NGX_ERROR;
}
buf = frame->first->buf;
p = buf->pos;
p = ngx_spdy_frame_write_head(p, NGX_SPDY_WINDOW_UPDATE);
p = ngx_spdy_frame_write_flags_and_len(p, 0, NGX_SPDY_WINDOW_UPDATE_SIZE);
p = ngx_spdy_frame_write_sid(p, sid);
p = ngx_spdy_frame_aligned_write_uint32(p, delta);
buf->last = p;
ngx_http_spdy_queue_frame(sc, frame);
return NGX_OK;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static ngx_int_t
ngx_http_spdy_send_rst_stream(ngx_http_spdy_connection_t *sc, ngx_uint_t sid,
ngx_uint_t status, ngx_uint_t priority)
{
u_char *p;
ngx_buf_t *buf;
ngx_http_spdy_out_frame_t *frame;
if (sc->connection->error) {
return NGX_OK;
}
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy write RST_STREAM sid:%ui st:%ui", sid, status);
frame = ngx_http_spdy_get_ctl_frame(sc, NGX_SPDY_RST_STREAM_SIZE,
priority);
if (frame == NULL) {
return NGX_ERROR;
}
buf = frame->first->buf;
p = buf->pos;
p = ngx_spdy_frame_write_head(p, NGX_SPDY_RST_STREAM);
p = ngx_spdy_frame_write_flags_and_len(p, 0, NGX_SPDY_RST_STREAM_SIZE);
p = ngx_spdy_frame_write_sid(p, sid);
p = ngx_spdy_frame_aligned_write_uint32(p, status);
buf->last = p;
ngx_http_spdy_queue_frame(sc, frame);
return NGX_OK;
}
#if 0
static ngx_int_t
ngx_http_spdy_send_goaway(ngx_http_spdy_connection_t *sc)
{
u_char *p;
ngx_buf_t *buf;
ngx_http_spdy_out_frame_t *frame;
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy create GOAWAY sid:%ui", sc->last_sid);
frame = ngx_http_spdy_get_ctl_frame(sc, NGX_SPDY_GOAWAY_SIZE,
NGX_SPDY_HIGHEST_PRIORITY);
if (frame == NULL) {
return NGX_ERROR;
}
buf = frame->first->buf;
p = buf->pos;
p = ngx_spdy_frame_write_head(p, NGX_SPDY_GOAWAY);
p = ngx_spdy_frame_write_flags_and_len(p, 0, NGX_SPDY_GOAWAY_SIZE);
p = ngx_spdy_frame_write_sid(p, sc->last_sid);
buf->last = p;
ngx_http_spdy_queue_frame(sc, frame);
return NGX_OK;
}
#endif
static ngx_int_t
ngx_http_spdy_send_settings(ngx_http_spdy_connection_t *sc)
{
u_char *p;
ngx_buf_t *buf;
ngx_chain_t *cl;
ngx_http_spdy_srv_conf_t *sscf;
ngx_http_spdy_out_frame_t *frame;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy create SETTINGS frame");
SPDY: the SETTINGS frame should be allocated from sc->pool. There is no reason to allocate it from connection pool that more like just a bug especially since ngx_http_spdy_settings_frame_handler() already uses sc->pool to free a chain.
2014-01-15 21:16:38 +08:00
frame = ngx_palloc(sc->pool, sizeof(ngx_http_spdy_out_frame_t));
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (frame == NULL) {
return NGX_ERROR;
}
SPDY: the SETTINGS frame should be allocated from sc->pool. There is no reason to allocate it from connection pool that more like just a bug especially since ngx_http_spdy_settings_frame_handler() already uses sc->pool to free a chain.
2014-01-15 21:16:38 +08:00
cl = ngx_alloc_chain_link(sc->pool);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (cl == NULL) {
return NGX_ERROR;
}
SPDY: the SETTINGS frame should be allocated from sc->pool. There is no reason to allocate it from connection pool that more like just a bug especially since ngx_http_spdy_settings_frame_handler() already uses sc->pool to free a chain.
2014-01-15 21:16:38 +08:00
buf = ngx_create_temp_buf(sc->pool, NGX_SPDY_FRAME_HEADER_SIZE
+ NGX_SPDY_SETTINGS_NUM_SIZE
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
+ 2 * NGX_SPDY_SETTINGS_PAIR_SIZE);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (buf == NULL) {
return NGX_ERROR;
}
buf->last_buf = 1;
cl->buf = buf;
cl->next = NULL;
frame->first = cl;
frame->last = cl;
frame->handler = ngx_http_spdy_settings_frame_handler;
frame->stream = NULL;
SPDY: fixed possible uninitialized memory access. The frame->stream pointer should always be initialized for control frames since the check against it can be performed in ngx_http_spdy_filter_cleanup().
2014-01-15 21:16:38 +08:00
#if (NGX_DEBUG)
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
frame->length = NGX_SPDY_SETTINGS_NUM_SIZE
+ 2 * NGX_SPDY_SETTINGS_PAIR_SIZE;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#endif
frame->priority = NGX_SPDY_HIGHEST_PRIORITY;
frame->blocked = 0;
p = buf->pos;
p = ngx_spdy_frame_write_head(p, NGX_SPDY_SETTINGS);
p = ngx_spdy_frame_write_flags_and_len(p, NGX_SPDY_FLAG_CLEAR_SETTINGS,
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
NGX_SPDY_SETTINGS_NUM_SIZE
+ 2 * NGX_SPDY_SETTINGS_PAIR_SIZE);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
p = ngx_spdy_frame_aligned_write_uint32(p, 2);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
p = ngx_spdy_frame_write_flags_and_id(p, 0, NGX_SPDY_SETTINGS_MAX_STREAMS);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
p = ngx_spdy_frame_aligned_write_uint32(p, sscf->concurrent_streams);
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
p = ngx_spdy_frame_write_flags_and_id(p, 0, NGX_SPDY_SETTINGS_INIT_WINDOW);
p = ngx_spdy_frame_aligned_write_uint32(p, NGX_SPDY_STREAM_WINDOW);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
buf->last = p;
ngx_http_spdy_queue_frame(sc, frame);
return NGX_OK;
}
ngx_int_t
ngx_http_spdy_settings_frame_handler(ngx_http_spdy_connection_t *sc,
ngx_http_spdy_out_frame_t *frame)
{
ngx_buf_t *buf;
buf = frame->first->buf;
if (buf->pos != buf->last) {
return NGX_AGAIN;
}
ngx_free_chain(sc->pool, frame->first);
return NGX_OK;
}
static ngx_http_spdy_out_frame_t *
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
ngx_http_spdy_get_ctl_frame(ngx_http_spdy_connection_t *sc, size_t length,
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_uint_t priority)
{
ngx_chain_t *cl;
ngx_http_spdy_out_frame_t *frame;
frame = sc->free_ctl_frames;
if (frame) {
SPDY: use frame->next pointer to chain free frames. There is no need in separate "free" pointer and like it is for ngx_chain_t the "next" pointer can be used. But after this change successfully handled frame should not be accessed, so the frame handling cycle was improved to store pointer to the next frame before processing. Also worth noting that initializing "free" pointer to NULL in the original code was surplus.
2014-01-22 08:58:19 +08:00
sc->free_ctl_frames = frame->next;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
cl = frame->first;
cl->buf->pos = cl->buf->start;
} else {
frame = ngx_palloc(sc->pool, sizeof(ngx_http_spdy_out_frame_t));
if (frame == NULL) {
return NULL;
}
cl = ngx_alloc_chain_link(sc->pool);
if (cl == NULL) {
return NULL;
}
cl->buf = ngx_create_temp_buf(sc->pool,
NGX_SPDY_CTL_FRAME_BUFFER_SIZE);
if (cl->buf == NULL) {
return NULL;
}
cl->buf->last_buf = 1;
frame->first = cl;
frame->last = cl;
frame->handler = ngx_http_spdy_ctl_frame_handler;
SPDY: fixed possible uninitialized memory access. The frame->stream pointer should always be initialized for control frames since the check against it can be performed in ngx_http_spdy_filter_cleanup().
2014-01-15 21:16:38 +08:00
frame->stream = NULL;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
#if (NGX_DEBUG)
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
if (length > NGX_SPDY_CTL_FRAME_BUFFER_SIZE - NGX_SPDY_FRAME_HEADER_SIZE) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_log_error(NGX_LOG_ALERT, sc->pool->log, 0,
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
"requested control frame is too big: %uz", length);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NULL;
}
SPDY: store the length of frame instead of its whole size. The "length" value better corresponds with the specification and reduces confusion about whether frame's header is included in "size" or not. Also this change simplifies some parts of code, since in more cases the length of frame is more useful than its actual size, especially considering that the size of frame header is constant.
2014-01-22 08:58:19 +08:00
frame->length = length;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
#endif
frame->priority = priority;
frame->blocked = 0;
return frame;
}
static ngx_int_t
ngx_http_spdy_ctl_frame_handler(ngx_http_spdy_connection_t *sc,
ngx_http_spdy_out_frame_t *frame)
{
ngx_buf_t *buf;
buf = frame->first->buf;
if (buf->pos != buf->last) {
return NGX_AGAIN;
}
SPDY: use frame->next pointer to chain free frames. There is no need in separate "free" pointer and like it is for ngx_chain_t the "next" pointer can be used. But after this change successfully handled frame should not be accessed, so the frame handling cycle was improved to store pointer to the next frame before processing. Also worth noting that initializing "free" pointer to NULL in the original code was surplus.
2014-01-22 08:58:19 +08:00
frame->next = sc->free_ctl_frames;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->free_ctl_frames = frame;
return NGX_OK;
}
static ngx_http_spdy_stream_t *
ngx_http_spdy_create_stream(ngx_http_spdy_connection_t *sc, ngx_uint_t id,
ngx_uint_t priority)
{
ngx_log_t *log;
ngx_uint_t index;
ngx_event_t *rev, *wev;
ngx_connection_t *fc;
ngx_http_log_ctx_t *ctx;
ngx_http_request_t *r;
ngx_http_spdy_stream_t *stream;
ngx_http_core_srv_conf_t *cscf;
ngx_http_spdy_srv_conf_t *sscf;
fc = sc->free_fake_connections;
if (fc) {
sc->free_fake_connections = fc->data;
rev = fc->read;
wev = fc->write;
log = fc->log;
ctx = log->data;
} else {
fc = ngx_palloc(sc->pool, sizeof(ngx_connection_t));
if (fc == NULL) {
return NULL;
}
rev = ngx_palloc(sc->pool, sizeof(ngx_event_t));
if (rev == NULL) {
return NULL;
}
wev = ngx_palloc(sc->pool, sizeof(ngx_event_t));
if (wev == NULL) {
return NULL;
}
log = ngx_palloc(sc->pool, sizeof(ngx_log_t));
if (log == NULL) {
return NULL;
}
ctx = ngx_palloc(sc->pool, sizeof(ngx_http_log_ctx_t));
if (ctx == NULL) {
return NULL;
}
ctx->connection = fc;
ctx->request = NULL;
}
ngx_memcpy(log, sc->connection->log, sizeof(ngx_log_t));
log->data = ctx;
ngx_memzero(rev, sizeof(ngx_event_t));
rev->data = fc;
rev->ready = 1;
SPDY: fixed connection leak while waiting for request headers. If an error occurs in a SPDY connection, the c->error flag is set on every fake request connection, and its read or write event handler is called, in order to finalize it. But while waiting for request headers, it was a no-op since the read event handler had been set to ngx_http_empty_handler().
2013-10-01 04:04:00 +08:00
rev->handler = ngx_http_spdy_close_stream_handler;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
rev->log = log;
ngx_memcpy(wev, rev, sizeof(ngx_event_t));
wev->write = 1;
ngx_memcpy(fc, sc->connection, sizeof(ngx_connection_t));
fc->data = sc->http_connection;
fc->read = rev;
fc->write = wev;
fc->sent = 0;
fc->log = log;
fc->buffered = 0;
fc->sndlowat = 1;
SPDY: set NGX_TCP_NODELAY_DISABLED for fake connections. This is to avoid setting the TCP_NODELAY flag on SPDY socket in ngx_http_upstream_send_response(). The latter works per request, but in SPDY case it might affect other streams in connection.
2013-04-23 18:15:49 +08:00
fc->tcp_nodelay = NGX_TCP_NODELAY_DISABLED;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
r = ngx_http_create_request(fc);
if (r == NULL) {
return NULL;
}
r->valid_location = 1;
fc->data = r;
sc->connection->requests++;
cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module);
r->header_in = ngx_create_temp_buf(r->pool,
cscf->client_header_buffer_size);
if (r->header_in == NULL) {
ngx_http_free_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
return NULL;
}
r->headers_in.connection_type = NGX_HTTP_CONNECTION_CLOSE;
stream = ngx_pcalloc(r->pool, sizeof(ngx_http_spdy_stream_t));
if (stream == NULL) {
ngx_http_free_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
return NULL;
}
r->spdy_stream = stream;
stream->id = id;
stream->request = r;
stream->connection = sc;
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
stream->send_window = sc->init_window;
stream->recv_window = NGX_SPDY_STREAM_WINDOW;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
stream->priority = priority;
sscf = ngx_http_get_module_srv_conf(r, ngx_http_spdy_module);
index = ngx_http_spdy_stream_index(sscf, id);
stream->index = sc->streams_index[index];
sc->streams_index[index] = stream;
sc->processing++;
return stream;
}
static ngx_http_spdy_stream_t *
ngx_http_spdy_get_stream_by_id(ngx_http_spdy_connection_t *sc,
ngx_uint_t sid)
{
ngx_http_spdy_stream_t *stream;
ngx_http_spdy_srv_conf_t *sscf;
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
stream = sc->streams_index[ngx_http_spdy_stream_index(sscf, sid)];
while (stream) {
if (stream->id == sid) {
return stream;
}
stream = stream->index;
}
return NULL;
}
static ngx_int_t
ngx_http_spdy_parse_header(ngx_http_request_t *r)
{
u_char *p, *end, ch;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
ngx_uint_t hash;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_http_core_srv_conf_t *cscf;
enum {
sw_name_len = 0,
sw_name,
sw_value_len,
sw_value
} state;
state = r->state;
p = r->header_in->pos;
end = r->header_in->last;
switch (state) {
case sw_name_len:
if (end - p < NGX_SPDY_NV_NLEN_SIZE) {
return NGX_AGAIN;
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->lowcase_index = ngx_spdy_frame_parse_uint32(p);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
if (r->lowcase_index == 0) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NGX_HTTP_PARSE_INVALID_HEADER;
}
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* null-terminate the previous header value */
*p = '\0';
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
p += NGX_SPDY_NV_NLEN_SIZE;
r->invalid_header = 0;
state = sw_name;
/* fall through */
case sw_name:
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
if ((ngx_uint_t) (end - p) < r->lowcase_index) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
break;
}
cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module);
r->header_name_start = p;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->header_name_end = p + r->lowcase_index;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
if (p[0] == ':') {
p++;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
hash = 0;
for ( /* void */ ; p != r->header_name_end; p++) {
ch = *p;
hash = ngx_hash(hash, ch);
if ((ch >= 'a' && ch <= 'z')
|| (ch == '-')
|| (ch >= '0' && ch <= '9')
|| (ch == '_' && cscf->underscores_in_headers))
{
continue;
}
switch (ch) {
case '\0':
case LF:
case CR:
case ':':
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
if (ch >= 'A' && ch <= 'Z') {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
r->invalid_header = 1;
}
r->header_hash = hash;
state = sw_value_len;
/* fall through */
case sw_value_len:
if (end - p < NGX_SPDY_NV_VLEN_SIZE) {
break;
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->lowcase_index = ngx_spdy_frame_parse_uint32(p);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: fixed corruption of headers with names longer than 255. It is a bad idea to put zero byte in position where the length of the next header name can be stored before it was parsed.
2013-08-15 23:14:58 +08:00
/* null-terminate header name */
*p = '\0';
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
p += NGX_SPDY_NV_VLEN_SIZE;
state = sw_value;
/* fall through */
case sw_value:
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
if ((ngx_uint_t) (end - p) < r->lowcase_index) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
break;
}
r->header_start = p;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
while (r->lowcase_index--) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ch = *p;
if (ch == '\0') {
if (p == r->header_start) {
return NGX_ERROR;
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->header_end = p;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
r->header_in->pos = p + 1;
return NGX_OK;
}
if (ch == CR || ch == LF) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
p++;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->header_end = p;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
r->header_in->pos = p;
r->state = 0;
return NGX_DONE;
}
r->header_in->pos = p;
r->state = state;
return NGX_AGAIN;
}
static ngx_int_t
ngx_http_spdy_alloc_large_header_buffer(ngx_http_request_t *r)
{
u_char *old, *new;
size_t rest;
ngx_buf_t *buf;
ngx_http_spdy_stream_t *stream;
ngx_http_core_srv_conf_t *cscf;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy alloc large header buffer");
stream = r->spdy_stream;
cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module);
if (stream->header_buffers
== (ngx_uint_t) cscf->large_client_header_buffers.num)
{
return NGX_DECLINED;
}
rest = r->header_in->last - r->header_in->pos;
if (rest >= cscf->large_client_header_buffers.size) {
return NGX_DECLINED;
}
buf = ngx_create_temp_buf(r->pool, cscf->large_client_header_buffers.size);
if (buf == NULL) {
return NGX_ERROR;
}
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
SPDY: fixed format specifiers in logging.
2014-01-14 20:24:45 +08:00
"spdy large header alloc: %p %z",
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
buf->pos, buf->end - buf->last);
old = r->header_in->pos;
new = buf->pos;
if (rest) {
buf->last = ngx_cpymem(new, old, rest);
}
r->header_in = buf;
stream->header_buffers++;
return NGX_OK;
}
static ngx_int_t
ngx_http_spdy_handle_request_header(ngx_http_request_t *r)
{
ngx_uint_t i;
ngx_table_elt_t *h;
ngx_http_core_srv_conf_t *cscf;
ngx_http_spdy_request_header_t *sh;
if (r->invalid_header) {
cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module);
if (cscf->ignore_invalid_headers) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent invalid header: \"%*s\"",
r->header_end - r->header_name_start,
r->header_name_start);
return NGX_OK;
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
}
if (r->header_name_start[0] == ':') {
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->header_name_start++;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
for (i = 0; i < NGX_SPDY_REQUEST_HEADERS; i++) {
sh = &ngx_http_spdy_request_headers[i];
if (sh->hash != r->header_hash
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
|| sh->len != r->header_name_end - r->header_name_start
|| ngx_strncmp(sh->header, r->header_name_start, sh->len) != 0)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
{
continue;
}
return sh->handler(r);
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
return NGX_HTTP_PARSE_INVALID_REQUEST;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
h = ngx_list_push(&r->headers_in.headers);
if (h == NULL) {
ngx_http_spdy_close_stream(r->spdy_stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
return NGX_ERROR;
}
h->hash = r->header_hash;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
h->key.len = r->header_name_end - r->header_name_start;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
h->key.data = r->header_name_start;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
h->value.len = r->header_end - r->header_start;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
h->value.data = r->header_start;
h->lowcase_key = h->key.data;
return NGX_OK;
}
void
Use "void" for functions with empty parameter list.
2013-05-23 19:47:58 +08:00
ngx_http_spdy_request_headers_init(void)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
{
ngx_uint_t i;
ngx_http_spdy_request_header_t *h;
for (i = 0; i < NGX_SPDY_REQUEST_HEADERS; i++) {
h = &ngx_http_spdy_request_headers[i];
h->hash = ngx_hash_key(h->header, h->len);
}
}
static ngx_int_t
ngx_http_spdy_parse_method(ngx_http_request_t *r)
{
size_t k, len;
ngx_uint_t n;
const u_char *p, *m;
/*
* This array takes less than 256 sequential bytes,
* and if typical CPU cache line size is 64 bytes,
* it is prefetched for 4 load operations.
*/
static const struct {
u_char len;
const u_char method[11];
uint32_t value;
} tests[] = {
{ 3, "GET", NGX_HTTP_GET },
{ 4, "POST", NGX_HTTP_POST },
{ 4, "HEAD", NGX_HTTP_HEAD },
{ 7, "OPTIONS", NGX_HTTP_OPTIONS },
{ 8, "PROPFIND", NGX_HTTP_PROPFIND },
{ 3, "PUT", NGX_HTTP_PUT },
{ 5, "MKCOL", NGX_HTTP_MKCOL },
{ 6, "DELETE", NGX_HTTP_DELETE },
{ 4, "COPY", NGX_HTTP_COPY },
{ 4, "MOVE", NGX_HTTP_MOVE },
{ 9, "PROPPATCH", NGX_HTTP_PROPPATCH },
{ 4, "LOCK", NGX_HTTP_LOCK },
{ 6, "UNLOCK", NGX_HTTP_UNLOCK },
{ 5, "PATCH", NGX_HTTP_PATCH },
{ 5, "TRACE", NGX_HTTP_TRACE }
}, *test;
if (r->method_name.len) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
len = r->header_end - r->header_start;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
r->method_name.len = len;
r->method_name.data = r->header_start;
test = tests;
n = sizeof(tests) / sizeof(tests[0]);
do {
if (len == test->len) {
p = r->method_name.data;
m = test->method;
k = len;
do {
if (*p++ != *m++) {
goto next;
}
} while (--k);
r->method = test->value;
return NGX_OK;
}
next:
test++;
} while (--n);
p = r->method_name.data;
do {
if ((*p < 'A' || *p > 'Z') && *p != '_') {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent invalid method");
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
p++;
} while (--len);
return NGX_OK;
}
static ngx_int_t
ngx_http_spdy_parse_scheme(ngx_http_request_t *r)
{
if (r->schema_start) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
r->schema_start = r->header_start;
r->schema_end = r->header_end;
return NGX_OK;
}
static ngx_int_t
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
ngx_http_spdy_parse_host(ngx_http_request_t *r)
{
ngx_table_elt_t *h;
if (r->headers_in.host) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
h = ngx_list_push(&r->headers_in.headers);
if (h == NULL) {
ngx_http_spdy_close_stream(r->spdy_stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
return NGX_ERROR;
}
r->headers_in.host = h;
h->hash = r->header_hash;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
h->key.len = r->header_name_end - r->header_name_start;
h->key.data = r->header_name_start;
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
h->value.len = r->header_end - r->header_start;
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
h->value.data = r->header_start;
h->lowcase_key = h->key.data;
return NGX_OK;
}
static ngx_int_t
ngx_http_spdy_parse_path(ngx_http_request_t *r)
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
{
if (r->unparsed_uri.len) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
r->uri_start = r->header_start;
r->uri_end = r->header_end;
if (ngx_http_parse_uri(r) != NGX_OK) {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
if (ngx_http_process_request_uri(r) != NGX_OK) {
return NGX_ERROR;
}
return NGX_OK;
}
static ngx_int_t
ngx_http_spdy_parse_version(ngx_http_request_t *r)
{
u_char *p, ch;
if (r->http_protocol.len) {
return NGX_HTTP_PARSE_INVALID_HEADER;
}
p = r->header_start;
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
if (r->header_end - p < 8 || !(ngx_str5cmp(p, 'H', 'T', 'T', 'P', '/'))) {
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
ch = *(p + 5);
if (ch < '1' || ch > '9') {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
r->http_major = ch - '0';
for (p += 6; p != r->header_end - 2; p++) {
ch = *p;
SPDY: fixed parsing of http version. There is an error while parsing multi-digit minor version numbers (e.g. "HTTP/1.10").
2014-02-11 20:54:16 +08:00
if (ch == '.') {
break;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (ch < '0' || ch > '9') {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
r->http_major = r->http_major * 10 + ch - '0';
}
if (*p != '.') {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
ch = *(p + 1);
if (ch < '0' || ch > '9') {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
r->http_minor = ch - '0';
for (p += 2; p != r->header_end; p++) {
ch = *p;
if (ch < '0' || ch > '9') {
return NGX_HTTP_PARSE_INVALID_REQUEST;
}
r->http_minor = r->http_minor * 10 + ch - '0';
}
SPDY: fixed potential integer overflow while parsing headers. Previously r->header_size was used to store length for a part of value that represents an individual already parsed HTTP header, while r->header_end pointed to the end of the whole value. Instead of storing length of a following name or value as pointer to a potential end address (r->header_name_end and r->header_end) that might be overflowed, now r->lowercase_index counter is used to store remaining length of a following unparsed field. It also fixes incorrect $body_bytes_sent value if a request is closed while parsing of the request header. Since r->header_size is intended for counting header size, thus abusing it for header parsing purpose was certainly a bad idea.
2014-03-03 23:24:55 +08:00
r->http_protocol.len = r->header_end - r->header_start;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
r->http_protocol.data = r->header_start;
r->http_version = r->http_major * 1000 + r->http_minor;
return NGX_OK;
}
static ngx_int_t
ngx_http_spdy_construct_request_line(ngx_http_request_t *r)
{
u_char *p;
if (r->method_name.len == 0
|| r->unparsed_uri.len == 0
|| r->http_protocol.len == 0)
{
ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);
return NGX_ERROR;
}
r->request_line.len = r->method_name.len + 1
+ r->unparsed_uri.len + 1
+ r->http_protocol.len;
p = ngx_pnalloc(r->pool, r->request_line.len + 1);
if (p == NULL) {
SPDY: fixed one case of improper memory allocation error handling. Now ngx_http_spdy_construct_request_line() doesn't try to finalize request in case of failed memory allocation.
2014-04-30 06:16:21 +08:00
ngx_http_spdy_close_stream(r->spdy_stream,
NGX_HTTP_INTERNAL_SERVER_ERROR);
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NGX_ERROR;
}
r->request_line.data = p;
p = ngx_cpymem(p, r->method_name.data, r->method_name.len);
*p++ = ' ';
p = ngx_cpymem(p, r->unparsed_uri.data, r->unparsed_uri.len);
*p++ = ' ';
ngx_memcpy(p, r->http_protocol.data, r->http_protocol.len + 1);
/* some modules expect the space character after method name */
r->method_name.data = r->request_line.data;
return NGX_OK;
}
static void
ngx_http_spdy_run_request(ngx_http_request_t *r)
{
ngx_uint_t i;
ngx_list_part_t *part;
ngx_table_elt_t *h;
ngx_http_header_t *hh;
ngx_http_core_main_conf_t *cmcf;
if (ngx_http_spdy_construct_request_line(r) != NGX_OK) {
return;
}
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy http request line: \"%V\"", &r->request_line);
cmcf = ngx_http_get_module_main_conf(r, ngx_http_core_module);
part = &r->headers_in.headers.part;
h = part->elts;
for (i = 0 ;; i++) {
if (i >= part->nelts) {
if (part->next == NULL) {
break;
}
part = part->next;
h = part->elts;
i = 0;
}
hh = ngx_hash_find(&cmcf->headers_in_hash, h[i].hash,
h[i].lowcase_key, h[i].key.len);
if (hh && hh->handler(r, &h[i], hh->offset) != NGX_OK) {
return;
}
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"http header: \"%V: %V\"", &h[i].key, &h[i].value);
}
r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE;
if (ngx_http_process_request_header(r) != NGX_OK) {
return;
}
SPDY: better detect premature closing of stream. Following a24f88eff684, now the case when the FIN flag is set in SYN_STREAM is also covered.
2014-04-07 23:27:56 +08:00
if (r->headers_in.content_length_n > 0 && r->spdy_stream->in_closed) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client prematurely closed stream");
r->spdy_stream->skip_data = NGX_SPDY_DATA_ERROR;
ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);
return;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ngx_http_process_request(r);
}
static ngx_int_t
ngx_http_spdy_init_request_body(ngx_http_request_t *r)
{
ngx_buf_t *buf;
ngx_temp_file_t *tf;
ngx_http_request_body_t *rb;
ngx_http_core_loc_conf_t *clcf;
rb = ngx_pcalloc(r->pool, sizeof(ngx_http_request_body_t));
if (rb == NULL) {
return NGX_ERROR;
}
r->request_body = rb;
if (r->spdy_stream->in_closed) {
return NGX_OK;
}
rb->rest = r->headers_in.content_length_n;
clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module);
if (r->request_body_in_file_only
|| rb->rest > (off_t) clcf->client_body_buffer_size
|| rb->rest < 0)
{
tf = ngx_pcalloc(r->pool, sizeof(ngx_temp_file_t));
if (tf == NULL) {
return NGX_ERROR;
}
tf->file.fd = NGX_INVALID_FILE;
tf->file.log = r->connection->log;
tf->path = clcf->client_body_temp_path;
tf->pool = r->pool;
tf->warn = "a client request body is buffered to a temporary file";
tf->log_level = r->request_body_file_log_level;
tf->persistent = r->request_body_in_persistent_file;
tf->clean = r->request_body_in_clean_file;
if (r->request_body_file_group_access) {
tf->access = 0660;
}
rb->temp_file = tf;
if (r->spdy_stream->in_closed
&& ngx_create_temp_file(&tf->file, tf->path, tf->pool,
tf->persistent, tf->clean, tf->access)
!= NGX_OK)
{
return NGX_ERROR;
}
buf = ngx_calloc_buf(r->pool);
if (buf == NULL) {
return NGX_ERROR;
}
} else {
if (rb->rest == 0) {
return NGX_OK;
}
buf = ngx_create_temp_buf(r->pool, (size_t) rb->rest);
if (buf == NULL) {
return NGX_ERROR;
}
}
SPDY: fixed segfault with "client_body_in_file_only" enabled. It is possible to send FLAG_FIN in additional empty data frame, even if it is known from the content-length header that request body is empty. And Firefox actually behaves like this (see ticket #357). To simplify code we sacrificed our microoptimization that did not work right due to missing check in the ngx_http_spdy_state_data() function for rb->buf set to NULL.
2013-07-25 02:24:25 +08:00
rb->buf = buf;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
rb->bufs = ngx_alloc_chain_link(r->pool);
if (rb->bufs == NULL) {
return NGX_ERROR;
}
rb->bufs->buf = buf;
rb->bufs->next = NULL;
rb->rest = 0;
return NGX_OK;
}
ngx_int_t
ngx_http_spdy_read_request_body(ngx_http_request_t *r,
ngx_http_client_body_handler_pt post_handler)
{
ngx_http_spdy_stream_t *stream;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy read request body");
stream = r->spdy_stream;
switch (stream->skip_data) {
case NGX_SPDY_DATA_DISCARD:
post_handler(r);
return NGX_OK;
case NGX_SPDY_DATA_ERROR:
if (r->headers_in.content_length_n == -1) {
return NGX_HTTP_REQUEST_ENTITY_TOO_LARGE;
} else {
return NGX_HTTP_BAD_REQUEST;
}
case NGX_SPDY_DATA_INTERNAL_ERROR:
return NGX_HTTP_INTERNAL_SERVER_ERROR;
}
if (!r->request_body && ngx_http_spdy_init_request_body(r) != NGX_OK) {
stream->skip_data = NGX_SPDY_DATA_INTERNAL_ERROR;
return NGX_HTTP_INTERNAL_SERVER_ERROR;
}
if (stream->in_closed) {
post_handler(r);
return NGX_OK;
}
r->request_body->post_handler = post_handler;
SPDY: fixed connection leak while waiting for request body. If an error occurs in a SPDY connection, the c->error flag is set on every fake request connection, and its read or write event handler is called, in order to finalize it. But while waiting for a request body, it was a no-op since the read event handler ngx_http_request_handler() calls r->read_event_handler that had been set to ngx_http_block_reading().
2013-10-01 04:00:57 +08:00
r->read_event_handler = ngx_http_test_reading;
r->write_event_handler = ngx_http_request_empty_handler;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
return NGX_AGAIN;
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t
ngx_http_spdy_terminate_stream(ngx_http_spdy_connection_t *sc,
ngx_http_spdy_stream_t *stream, ngx_uint_t status)
{
ngx_event_t *rev;
ngx_connection_t *fc;
if (ngx_http_spdy_send_rst_stream(sc, stream->id, status,
NGX_SPDY_HIGHEST_PRIORITY)
== NGX_ERROR)
{
return NGX_ERROR;
}
stream->out_closed = 1;
fc = stream->request->connection;
fc->error = 1;
rev = fc->read;
rev->handler(rev);
return NGX_OK;
}
SPDY: fixed connection leak while waiting for request headers. If an error occurs in a SPDY connection, the c->error flag is set on every fake request connection, and its read or write event handler is called, in order to finalize it. But while waiting for request headers, it was a no-op since the read event handler had been set to ngx_http_empty_handler().
2013-10-01 04:04:00 +08:00
static void
ngx_http_spdy_close_stream_handler(ngx_event_t *ev)
{
ngx_connection_t *fc;
ngx_http_request_t *r;
fc = ev->data;
r = fc->data;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"spdy close stream handler");
ngx_http_spdy_close_stream(r->spdy_stream, 0);
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
void
ngx_http_spdy_close_stream(ngx_http_spdy_stream_t *stream, ngx_int_t rc)
{
ngx_event_t *ev;
ngx_connection_t *fc;
ngx_http_spdy_stream_t **index, *s;
ngx_http_spdy_srv_conf_t *sscf;
ngx_http_spdy_connection_t *sc;
sc = stream->connection;
SPDY: elimination of r->blocked counter usage for queuing frames. It was used to prevent destroying of request object when there are unsent frames in queue for the stream. Since it was incremented for each frame and is only 8 bits long, so it was not very hard to overflow the counter. Now the stream->queued counter is checked instead.
2014-01-14 20:24:45 +08:00
ngx_log_debug3(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy close stream %ui, queued %ui, processing %ui",
stream->id, stream->queued, sc->processing);
fc = stream->request->connection;
if (stream->queued) {
fc->write->handler = ngx_http_spdy_close_stream_handler;
return;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
if (!stream->out_closed) {
if (ngx_http_spdy_send_rst_stream(sc, stream->id,
NGX_SPDY_INTERNAL_ERROR,
stream->priority)
!= NGX_OK)
{
sc->connection->error = 1;
}
}
SPDY: fixed possible segfault. While processing a DATA frame, the link to related stream is stored in spdy connection object as part of connection state. But this stream can be closed between receiving parts of the frame.
2014-01-22 08:58:19 +08:00
if (sc->stream == stream) {
sc->stream = NULL;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
index = sc->streams_index + ngx_http_spdy_stream_index(sscf, stream->id);
for ( ;; ) {
s = *index;
if (s == NULL) {
break;
}
if (s == stream) {
*index = s->index;
break;
}
index = &s->index;
}
ngx_http_free_request(stream->request, rc);
ev = fc->read;
if (ev->active || ev->disabled) {
SPDY: alert about activated fake events instead of deleting them. They refer to the same socket descriptor as our real connection, and deleting them will stop processing of the connection. Events of fake connections must not be activated, and if it happened there is nothing we can do. The whole processing should be terminated as soon as possible, but it is not obvious how to do this safely.
2013-08-15 23:16:12 +08:00
ngx_log_error(NGX_LOG_ALERT, sc->connection->log, 0,
"spdy fake read event was activated");
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
if (ev->timer_set) {
ngx_del_timer(ev);
}
if (ev->prev) {
ngx_delete_posted_event(ev);
}
ev = fc->write;
if (ev->active || ev->disabled) {
SPDY: alert about activated fake events instead of deleting them. They refer to the same socket descriptor as our real connection, and deleting them will stop processing of the connection. Events of fake connections must not be activated, and if it happened there is nothing we can do. The whole processing should be terminated as soon as possible, but it is not obvious how to do this safely.
2013-08-15 23:16:12 +08:00
ngx_log_error(NGX_LOG_ALERT, sc->connection->log, 0,
"spdy fake write event was activated");
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
}
if (ev->timer_set) {
ngx_del_timer(ev);
}
if (ev->prev) {
ngx_delete_posted_event(ev);
}
fc->data = sc->free_fake_connections;
sc->free_fake_connections = fc;
sc->processing--;
if (sc->processing || sc->blocked) {
return;
}
ev = sc->connection->read;
ev->handler = ngx_http_spdy_handle_connection_handler;
ngx_post_event(ev, &ngx_posted_events);
}
static void
ngx_http_spdy_handle_connection_handler(ngx_event_t *rev)
{
ngx_connection_t *c;
rev->handler = ngx_http_spdy_read_handler;
if (rev->ready) {
ngx_http_spdy_read_handler(rev);
return;
}
c = rev->data;
ngx_http_spdy_handle_connection(c->data);
}
static void
ngx_http_spdy_keepalive_handler(ngx_event_t *rev)
{
ngx_connection_t *c;
ngx_http_spdy_srv_conf_t *sscf;
ngx_http_spdy_connection_t *sc;
c = rev->data;
ngx_log_debug0(NGX_LOG_DEBUG_HTTP, c->log, 0, "spdy keepalive handler");
if (rev->timedout || c->close) {
ngx_http_close_connection(c);
return;
}
#if (NGX_HAVE_KQUEUE)
if (ngx_event_flags & NGX_USE_KQUEUE_EVENT) {
if (rev->pending_eof) {
c->log->handler = NULL;
ngx_log_error(NGX_LOG_INFO, c->log, rev->kq_errno,
"kevent() reported that client %V closed "
"keepalive connection", &c->addr_text);
#if (NGX_HTTP_SSL)
if (c->ssl) {
c->ssl->no_send_shutdown = 1;
}
#endif
ngx_http_close_connection(c);
return;
}
}
#endif
c->destroyed = 0;
c->idle = 0;
ngx_reusable_connection(c, 0);
sc = c->data;
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
sc->pool = ngx_create_pool(sscf->pool_size, sc->connection->log);
if (sc->pool == NULL) {
ngx_http_close_connection(c);
return;
}
sc->streams_index = ngx_pcalloc(sc->pool,
ngx_http_spdy_streams_index_size(sscf)
* sizeof(ngx_http_spdy_stream_t *));
if (sc->streams_index == NULL) {
ngx_http_close_connection(c);
return;
}
c->write->handler = ngx_http_spdy_write_handler;
rev->handler = ngx_http_spdy_read_handler;
ngx_http_spdy_read_handler(rev);
}
static void
ngx_http_spdy_finalize_connection(ngx_http_spdy_connection_t *sc,
ngx_int_t rc)
{
ngx_uint_t i, size;
ngx_event_t *ev;
ngx_connection_t *c, *fc;
ngx_http_request_t *r;
ngx_http_spdy_stream_t *stream;
ngx_http_spdy_srv_conf_t *sscf;
c = sc->connection;
if (!sc->processing) {
ngx_http_close_connection(c);
return;
}
c->error = 1;
c->read->handler = ngx_http_empty_handler;
SPDY: set empty write handler during connection finalization. While ngx_http_spdy_write_handler() should not make any harm with current code, calling it during finalization of SPDY connection was not intended.
2013-10-01 04:12:30 +08:00
c->write->handler = ngx_http_empty_handler;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
sc->last_out = NULL;
sc->blocked = 1;
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
size = ngx_http_spdy_streams_index_size(sscf);
for (i = 0; i < size; i++) {
stream = sc->streams_index[i];
while (stream) {
SPDY: fixed possible request hang. Processing events from upstream connection can result in sending queued frames from other streams. In this case such streams were not added to handling queue and properly handled. A global per connection flag was replaced by a per stream flag that indicates currently sending stream while all other streams can be added to handling queue.
2013-12-26 21:03:16 +08:00
stream->handled = 0;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
SPDY: fixed possible request hang. Processing events from upstream connection can result in sending queued frames from other streams. In this case such streams were not added to handling queue and properly handled. A global per connection flag was replaced by a per stream flag that indicates currently sending stream while all other streams can be added to handling queue.
2013-12-26 21:03:16 +08:00
r = stream->request;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
fc = r->connection;
SPDY: fixed possible request hang. Processing events from upstream connection can result in sending queued frames from other streams. In this case such streams were not added to handling queue and properly handled. A global per connection flag was replaced by a per stream flag that indicates currently sending stream while all other streams can be added to handling queue.
2013-12-26 21:03:16 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
fc->error = 1;
SPDY: better name for queued frames counter. No functional changes.
2014-01-14 20:24:45 +08:00
if (stream->queued) {
stream->queued = 0;
SPDY: drop the "delayed" flag when finalizing connection. This flag in SPDY fake write events serves the same purposes as the "ready" flag in real events, and it must be dropped if request needs to be handled. Otherwise, it can prevent the request from finalization if ngx_http_writer() was set, which results in a connection leak. Found by Xiaochen Wang.
2013-12-11 00:27:33 +08:00
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
ev = fc->write;
SPDY: drop the "delayed" flag when finalizing connection. This flag in SPDY fake write events serves the same purposes as the "ready" flag in real events, and it must be dropped if request needs to be handled. Otherwise, it can prevent the request from finalization if ngx_http_writer() was set, which results in a connection leak. Found by Xiaochen Wang.
2013-12-11 00:27:33 +08:00
ev->delayed = 0;
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
} else {
ev = fc->read;
}
stream = stream->index;
ev->eof = 1;
ev->handler(ev);
}
}
sc->blocked = 0;
if (sc->processing) {
return;
}
ngx_http_close_connection(c);
}
SPDY: protocol implementation switched to spdy/3.1.
2014-01-31 23:17:26 +08:00
static ngx_int_t
ngx_http_spdy_adjust_windows(ngx_http_spdy_connection_t *sc, ssize_t delta)
{
ngx_uint_t i, size;
ngx_event_t *wev;
ngx_http_spdy_stream_t *stream, *sn;
ngx_http_spdy_srv_conf_t *sscf;
sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
ngx_http_spdy_module);
size = ngx_http_spdy_streams_index_size(sscf);
for (i = 0; i < size; i++) {
for (stream = sc->streams_index[i]; stream; stream = sn) {
sn = stream->index;
if (delta > 0
&& stream->send_window
> (ssize_t) (NGX_SPDY_MAX_WINDOW - delta))
{
if (ngx_http_spdy_terminate_stream(sc, stream,
NGX_SPDY_FLOW_CONTROL_ERROR)
== NGX_ERROR)
{
return NGX_ERROR;
}
continue;
}
stream->send_window += delta;
ngx_log_debug2(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy:%ui adjust window:%z",
stream->id, stream->send_window);
if (stream->send_window > 0 && stream->exhausted) {
stream->exhausted = 0;
wev = stream->request->connection->write;
if (!wev->timer_set) {
wev->delayed = 0;
wev->handler(wev);
}
}
}
}
return NGX_OK;
}
Preliminary experimental support for SPDY draft 2.
2013-03-20 18:36:57 +08:00
static void
ngx_http_spdy_pool_cleanup(void *data)
{
ngx_http_spdy_connection_t *sc = data;
if (sc->pool) {
ngx_destroy_pool(sc->pool);
}
}
static void *
ngx_http_spdy_zalloc(void *opaque, u_int items, u_int size)
{
ngx_http_spdy_connection_t *sc = opaque;
return ngx_palloc(sc->connection->pool, items * size);
}
static void
ngx_http_spdy_zfree(void *opaque, void *address)
{
#if 0
ngx_http_spdy_connection_t *sc = opaque;
ngx_log_debug1(NGX_LOG_DEBUG_HTTP, sc->connection->log, 0,
"spdy zfree: %p", address);
#endif
}
Reference in New Issue Copy Permalink