server_fcgi.c revision 1.44
1/*	$OpenBSD: server_fcgi.c,v 1.44 2015/01/04 22:23:58 chrisz Exp $	*/
2
3/*
4 * Copyright (c) 2014 Florian Obser <florian@openbsd.org>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19#include <sys/types.h>
20#include <sys/queue.h>
21#include <sys/time.h>
22#include <sys/stat.h>
23#include <sys/socket.h>
24#include <sys/un.h>
25#include <sys/tree.h>
26
27#include <net/if.h>
28#include <netinet/in.h>
29#include <netinet/ip.h>
30#include <netinet/tcp.h>
31
32#include <errno.h>
33#include <fcntl.h>
34#include <stdlib.h>
35#include <string.h>
36#include <unistd.h>
37#include <stdio.h>
38#include <ctype.h>
39#include <err.h>
40#include <event.h>
41
42#include "httpd.h"
43#include "http.h"
44
45#define FCGI_PADDING_SIZE	 255
46#define FCGI_RECORD_SIZE	 \
47    (sizeof(struct fcgi_record_header) + FCGI_CONTENT_SIZE + FCGI_PADDING_SIZE)
48
49#define FCGI_BEGIN_REQUEST	 1
50#define FCGI_ABORT_REQUEST	 2
51#define FCGI_END_REQUEST	 3
52#define FCGI_PARAMS		 4
53#define FCGI_STDIN		 5
54#define FCGI_STDOUT		 6
55#define FCGI_STDERR		 7
56#define FCGI_DATA		 8
57#define FCGI_GET_VALUES		 9
58#define FCGI_GET_VALUES_RESULT	10
59#define FCGI_UNKNOWN_TYPE	11
60#define FCGI_MAXTYPE		(FCGI_UNKNOWN_TYPE)
61
62#define FCGI_RESPONDER		 1
63
64struct fcgi_record_header {
65	uint8_t		version;
66	uint8_t		type;
67	uint16_t	id;
68	uint16_t	content_len;
69	uint8_t		padding_len;
70	uint8_t		reserved;
71} __packed;
72
73struct fcgi_begin_request_body {
74	uint16_t	role;
75	uint8_t		flags;
76	uint8_t		reserved[5];
77} __packed;
78
79struct server_fcgi_param {
80	int		total_len;
81	uint8_t		buf[FCGI_RECORD_SIZE];
82};
83
84int	server_fcgi_header(struct client *, u_int);
85void	server_fcgi_read(struct bufferevent *, void *);
86int	server_fcgi_writeheader(struct client *, struct kv *, void *);
87int	server_fcgi_writechunk(struct client *);
88int	server_fcgi_getheaders(struct client *);
89int	fcgi_add_param(struct server_fcgi_param *, const char *, const char *,
90	    struct client *);
91
92int
93server_fcgi(struct httpd *env, struct client *clt)
94{
95	struct server_fcgi_param	 param;
96	struct server_config		*srv_conf = clt->clt_srv_conf;
97	struct http_descriptor		*desc = clt->clt_descreq;
98	struct fcgi_record_header	*h;
99	struct fcgi_begin_request_body	*begin;
100	char				 hbuf[MAXHOSTNAMELEN];
101	size_t				 scriptlen;
102	int				 pathlen;
103	int				 fd = -1, ret;
104	const char			*stripped, *p, *alias, *errstr = NULL;
105	char				*str, *script = NULL;
106
107	if (srv_conf->socket[0] == ':') {
108		struct sockaddr_storage	 ss;
109		in_port_t		 port;
110
111		p = srv_conf->socket + 1;
112
113		port = strtonum(p, 0, 0xffff, &errstr);
114		if (errstr != NULL) {
115			log_warn("%s: strtonum %s, %s", __func__, p, errstr);
116			goto fail;
117		}
118		memset(&ss, 0, sizeof(ss));
119		ss.ss_family = AF_INET;
120		((struct sockaddr_in *)
121		    &ss)->sin_addr.s_addr = htonl(INADDR_LOOPBACK);
122		port = htons(port);
123
124		if ((fd = server_socket_connect(&ss, port, srv_conf)) == -1)
125			goto fail;
126	} else {
127		struct sockaddr_un	 sun;
128		size_t			 len;
129
130		if ((fd = socket(AF_UNIX, SOCK_STREAM, 0)) == -1)
131			goto fail;
132
133		memset(&sun, 0, sizeof(sun));
134		sun.sun_family = AF_UNIX;
135		len = strlcpy(sun.sun_path,
136		    srv_conf->socket, sizeof(sun.sun_path));
137		if (len >= sizeof(sun.sun_path)) {
138			errstr = "socket path to long";
139			goto fail;
140		}
141		sun.sun_len = len;
142
143		if (connect(fd, (struct sockaddr *)&sun, sizeof(sun)) == -1)
144			goto fail;
145	}
146
147	socket_set_blockmode(fd, BM_NONBLOCK);
148
149	memset(hbuf, 0, sizeof(hbuf));
150	clt->clt_fcgi_state = FCGI_READ_HEADER;
151	clt->clt_fcgi_toread = sizeof(struct fcgi_record_header);
152
153	if (clt->clt_srvevb != NULL)
154		evbuffer_free(clt->clt_srvevb);
155
156	clt->clt_srvevb = evbuffer_new();
157	if (clt->clt_srvevb == NULL) {
158		errstr = "failed to allocate evbuffer";
159		goto fail;
160	}
161
162	clt->clt_fd = fd;
163	if (clt->clt_srvbev != NULL)
164		bufferevent_free(clt->clt_srvbev);
165
166	clt->clt_srvbev = bufferevent_new(fd, server_fcgi_read,
167	    NULL, server_file_error, clt);
168	if (clt->clt_srvbev == NULL) {
169		errstr = "failed to allocate fcgi buffer event";
170		goto fail;
171	}
172
173	memset(&param, 0, sizeof(param));
174
175	h = (struct fcgi_record_header *)&param.buf;
176	h->version = 1;
177	h->type = FCGI_BEGIN_REQUEST;
178	h->id = htons(1);
179	h->content_len = htons(sizeof(struct fcgi_begin_request_body));
180	h->padding_len = 0;
181
182	begin = (struct fcgi_begin_request_body *)&param.buf[sizeof(struct
183	    fcgi_record_header)];
184	begin->role = htons(FCGI_RESPONDER);
185
186	bufferevent_write(clt->clt_srvbev, &param.buf,
187	    sizeof(struct fcgi_record_header) +
188	    sizeof(struct fcgi_begin_request_body));
189
190	h->type = FCGI_PARAMS;
191	h->content_len = param.total_len = 0;
192
193	alias = desc->http_path_alias != NULL
194	    ? desc->http_path_alias
195	    : desc->http_path;
196
197	stripped = server_root_strip(alias, srv_conf->strip);
198	if ((pathlen = asprintf(&script, "%s%s", srv_conf->root, stripped))
199	    == -1) {
200		errstr = "failed to get script name";
201		goto fail;
202	}
203
204	scriptlen = path_info(script);
205	/*
206	 * no part of root should show up in PATH_INFO.
207	 * therefore scriptlen should be >= strlen(root)
208	 */
209	if (scriptlen < strlen(srv_conf->root))
210		scriptlen = strlen(srv_conf->root);
211	if ((int)scriptlen < pathlen) {
212		if (fcgi_add_param(&param, "PATH_INFO",
213		    script + scriptlen, clt) == -1) {
214			errstr = "failed to encode param";
215			goto fail;
216		}
217		script[scriptlen] = '\0';
218	}
219
220	/*
221	 * calculate length of http SCRIPT_NAME:
222	 * add length of stripped prefix,
223	 * subtract length of prepended local root
224	 */
225	scriptlen += (stripped - alias) - strlen(srv_conf->root);
226	if ((str = strndup(alias, scriptlen)) == NULL)
227		goto fail;
228	ret = fcgi_add_param(&param, "SCRIPT_NAME", str, clt);
229	free(str);
230	if (ret == -1) {
231		errstr = "failed to encode param";
232		goto fail;
233	}
234	if (fcgi_add_param(&param, "SCRIPT_FILENAME", script, clt) == -1) {
235		errstr = "failed to encode param";
236		goto fail;
237	}
238
239	if (desc->http_query)
240		if (fcgi_add_param(&param, "QUERY_STRING", desc->http_query,
241		    clt) == -1) {
242			errstr = "failed to encode param";
243			goto fail;
244		}
245
246	if (fcgi_add_param(&param, "DOCUMENT_ROOT", srv_conf->root,
247	    clt) == -1) {
248		errstr = "failed to encode param";
249		goto fail;
250	}
251	if (fcgi_add_param(&param, "DOCUMENT_URI", desc->http_path,
252	    clt) == -1) {
253		errstr = "failed to encode param";
254		goto fail;
255	}
256	if (fcgi_add_param(&param, "GATEWAY_INTERFACE", "CGI/1.1",
257	    clt) == -1) {
258		errstr = "failed to encode param";
259		goto fail;
260	}
261
262	/* Add HTTP_* headers */
263	if (server_headers(clt, desc, server_fcgi_writeheader, &param) == -1) {
264		errstr = "failed to encode param";
265		goto fail;
266	}
267
268	if (srv_conf->flags & SRVFLAG_TLS)
269		if (fcgi_add_param(&param, "HTTPS", "on", clt) == -1) {
270			errstr = "failed to encode param";
271			goto fail;
272		}
273
274	(void)print_host(&clt->clt_ss, hbuf, sizeof(hbuf));
275	if (fcgi_add_param(&param, "REMOTE_ADDR", hbuf, clt) == -1) {
276		errstr = "failed to encode param";
277		goto fail;
278	}
279
280	(void)snprintf(hbuf, sizeof(hbuf), "%d", ntohs(clt->clt_port));
281	if (fcgi_add_param(&param, "REMOTE_PORT", hbuf, clt) == -1) {
282		errstr = "failed to encode param";
283		goto fail;
284	}
285
286	if (fcgi_add_param(&param, "REQUEST_METHOD",
287	    server_httpmethod_byid(desc->http_method), clt) == -1) {
288		errstr = "failed to encode param";
289		goto fail;
290	}
291
292	if (!desc->http_query) {
293		if (fcgi_add_param(&param, "REQUEST_URI", desc->http_path,
294		    clt) == -1) {
295			errstr = "failed to encode param";
296			goto fail;
297		}
298	} else if (asprintf(&str, "%s?%s", desc->http_path,
299	    desc->http_query) != -1) {
300		ret = fcgi_add_param(&param, "REQUEST_URI", str, clt);
301		free(str);
302		if (ret == -1) {
303			errstr = "failed to encode param";
304			goto fail;
305		}
306	}
307
308	(void)print_host(&clt->clt_srv_ss, hbuf, sizeof(hbuf));
309	if (fcgi_add_param(&param, "SERVER_ADDR", hbuf, clt) == -1) {
310		errstr = "failed to encode param";
311		goto fail;
312	}
313
314	(void)snprintf(hbuf, sizeof(hbuf), "%d",
315	    ntohs(server_socket_getport(&clt->clt_srv_ss)));
316	if (fcgi_add_param(&param, "SERVER_PORT", hbuf, clt) == -1) {
317		errstr = "failed to encode param";
318		goto fail;
319	}
320
321	if (fcgi_add_param(&param, "SERVER_NAME", srv_conf->name,
322	    clt) == -1) {
323		errstr = "failed to encode param";
324		goto fail;
325	}
326
327	if (fcgi_add_param(&param, "SERVER_PROTOCOL", desc->http_version,
328	    clt) == -1) {
329		errstr = "failed to encode param";
330		goto fail;
331	}
332
333	if (fcgi_add_param(&param, "SERVER_SOFTWARE", HTTPD_SERVERNAME,
334	    clt) == -1) {
335		errstr = "failed to encode param";
336		goto fail;
337	}
338
339	if (param.total_len != 0) {	/* send last params record */
340		bufferevent_write(clt->clt_srvbev, &param.buf,
341		    sizeof(struct fcgi_record_header) +
342		    ntohs(h->content_len));
343	}
344
345	/* send "no more params" message */
346	h->content_len = 0;
347	bufferevent_write(clt->clt_srvbev, &param.buf,
348	    sizeof(struct fcgi_record_header));
349
350	bufferevent_settimeout(clt->clt_srvbev,
351	    srv_conf->timeout.tv_sec, srv_conf->timeout.tv_sec);
352	bufferevent_enable(clt->clt_srvbev, EV_READ|EV_WRITE);
353	if (clt->clt_toread != 0) {
354		server_read_httpcontent(clt->clt_bev, clt);
355		bufferevent_enable(clt->clt_bev, EV_READ);
356	} else {
357		bufferevent_disable(clt->clt_bev, EV_READ);
358		fcgi_add_stdin(clt, NULL);
359	}
360
361	if (strcmp(desc->http_version, "HTTP/1.1") == 0) {
362		clt->clt_fcgi_chunked = 1;
363	} else {
364		/* HTTP/1.0 does not support chunked encoding */
365		clt->clt_fcgi_chunked = 0;
366		clt->clt_persist = 0;
367	}
368	clt->clt_fcgi_end = 0;
369	clt->clt_done = 0;
370
371	free(script);
372	return (0);
373 fail:
374	free(script);
375	if (errstr == NULL)
376		errstr = strerror(errno);
377	server_abort_http(clt, 500, errstr);
378	return (-1);
379}
380
381int
382fcgi_add_stdin(struct client *clt, struct evbuffer *evbuf)
383{
384	struct fcgi_record_header	h;
385
386	memset(&h, 0, sizeof(h));
387	h.version = 1;
388	h.type = FCGI_STDIN;
389	h.id = htons(1);
390	h.padding_len = 0;
391
392	if (evbuf == NULL) {
393		h.content_len = 0;
394		return bufferevent_write(clt->clt_srvbev, &h,
395		    sizeof(struct fcgi_record_header));
396	} else {
397		h.content_len = htons(EVBUFFER_LENGTH(evbuf));
398		if (bufferevent_write(clt->clt_srvbev, &h,
399		    sizeof(struct fcgi_record_header)) == -1)
400			return -1;
401		return bufferevent_write_buffer(clt->clt_srvbev, evbuf);
402	}
403	return (0);
404}
405
406int
407fcgi_add_param(struct server_fcgi_param *p, const char *key,
408    const char *val, struct client *clt)
409{
410	struct fcgi_record_header	*h;
411	int				 len = 0;
412	int				 key_len = strlen(key);
413	int				 val_len = strlen(val);
414	uint8_t				*param;
415
416	len += key_len + val_len;
417	len += key_len > 127 ? 4 : 1;
418	len += val_len > 127 ? 4 : 1;
419
420	DPRINTF("%s: %s[%d] => %s[%d], total_len: %d", __func__, key, key_len,
421	    val, val_len, p->total_len);
422
423	if (len > FCGI_CONTENT_SIZE)
424		return (-1);
425
426	if (p->total_len + len > FCGI_CONTENT_SIZE) {
427		bufferevent_write(clt->clt_srvbev, p->buf,
428		    sizeof(struct fcgi_record_header) + p->total_len);
429		p->total_len = 0;
430	}
431
432	h = (struct fcgi_record_header *)p->buf;
433	param = p->buf + sizeof(*h) + p->total_len;
434
435	if (key_len > 127) {
436		*param++ = ((key_len >> 24) & 0xff) | 0x80;
437		*param++ = ((key_len >> 16) & 0xff);
438		*param++ = ((key_len >> 8) & 0xff);
439		*param++ = (key_len & 0xff);
440	} else
441		*param++ = key_len;
442
443	if (val_len > 127) {
444		*param++ = ((val_len >> 24) & 0xff) | 0x80;
445		*param++ = ((val_len >> 16) & 0xff);
446		*param++ = ((val_len >> 8) & 0xff);
447		*param++ = (val_len & 0xff);
448	} else
449		*param++ = val_len;
450
451	memcpy(param, key, key_len);
452	param += key_len;
453	memcpy(param, val, val_len);
454
455	p->total_len += len;
456
457	h->content_len = htons(p->total_len);
458	return (0);
459}
460
461void
462server_fcgi_read(struct bufferevent *bev, void *arg)
463{
464	uint8_t				 buf[FCGI_RECORD_SIZE];
465	struct client			*clt = (struct client *) arg;
466	struct fcgi_record_header	*h;
467	size_t				 len;
468	char				*ptr;
469
470	do {
471		len = bufferevent_read(bev, buf, clt->clt_fcgi_toread);
472		/* XXX error handling */
473		evbuffer_add(clt->clt_srvevb, buf, len);
474		clt->clt_fcgi_toread -= len;
475		DPRINTF("%s: len: %lu toread: %d state: %d type: %d",
476		    __func__, len, clt->clt_fcgi_toread,
477		    clt->clt_fcgi_state, clt->clt_fcgi_type);
478
479		if (clt->clt_fcgi_toread != 0)
480			return;
481
482		switch (clt->clt_fcgi_state) {
483		case FCGI_READ_HEADER:
484			clt->clt_fcgi_state = FCGI_READ_CONTENT;
485			h = (struct fcgi_record_header *)
486			    EVBUFFER_DATA(clt->clt_srvevb);
487			DPRINTF("%s: record header: version %d type %d id %d "
488			    "content len %d padding %d", __func__,
489			    h->version, h->type, ntohs(h->id),
490			    ntohs(h->content_len), h->padding_len);
491			clt->clt_fcgi_type = h->type;
492			clt->clt_fcgi_toread = ntohs(h->content_len);
493			clt->clt_fcgi_padding_len = h->padding_len;
494			evbuffer_drain(clt->clt_srvevb,
495			    EVBUFFER_LENGTH(clt->clt_srvevb));
496			if (clt->clt_fcgi_toread != 0)
497				break;
498			else if (clt->clt_fcgi_type == FCGI_STDOUT &&
499			    !clt->clt_chunk) {
500				server_abort_http(clt, 500, "empty stdout");
501				return;
502			}
503
504			/* fallthrough if content_len == 0 */
505		case FCGI_READ_CONTENT:
506			switch (clt->clt_fcgi_type) {
507			case FCGI_STDERR:
508				if (EVBUFFER_LENGTH(clt->clt_srvevb) > 0 &&
509				    (ptr = get_string(
510				    EVBUFFER_DATA(clt->clt_srvevb),
511				    EVBUFFER_LENGTH(clt->clt_srvevb)))
512				    != NULL) {
513					server_sendlog(clt->clt_srv_conf,
514					    IMSG_LOG_ERROR, "%s", ptr);
515					free(ptr);
516				}
517				break;
518			case FCGI_STDOUT:
519				if (++clt->clt_chunk == 1) {
520					if (server_fcgi_header(clt,
521					    server_fcgi_getheaders(clt))
522					    == -1) {
523						server_abort_http(clt, 500,
524						    "malformed fcgi headers");
525						return;
526					}
527					if (!EVBUFFER_LENGTH(clt->clt_srvevb))
528						break;
529				}
530				/* FALLTHROUGH */
531			case FCGI_END_REQUEST:
532				if (server_fcgi_writechunk(clt) == -1) {
533					server_abort_http(clt, 500,
534					    "encoding error");
535					return;
536				}
537				break;
538			}
539			evbuffer_drain(clt->clt_srvevb,
540			    EVBUFFER_LENGTH(clt->clt_srvevb));
541			if (!clt->clt_fcgi_padding_len) {
542				clt->clt_fcgi_state = FCGI_READ_HEADER;
543				clt->clt_fcgi_toread =
544				    sizeof(struct fcgi_record_header);
545			} else {
546				clt->clt_fcgi_state = FCGI_READ_PADDING;
547				clt->clt_fcgi_toread =
548				    clt->clt_fcgi_padding_len;
549			}
550			break;
551		case FCGI_READ_PADDING:
552			evbuffer_drain(clt->clt_srvevb,
553			    EVBUFFER_LENGTH(clt->clt_srvevb));
554			clt->clt_fcgi_state = FCGI_READ_HEADER;
555			clt->clt_fcgi_toread =
556			    sizeof(struct fcgi_record_header);
557			break;
558		}
559	} while (len > 0);
560}
561
562int
563server_fcgi_header(struct client *clt, u_int code)
564{
565	struct http_descriptor	*desc = clt->clt_descreq;
566	struct http_descriptor	*resp = clt->clt_descresp;
567	const char		*error;
568	char			 tmbuf[32];
569	struct kv		*kv, key;
570
571	if (desc == NULL || (error = server_httperror_byid(code)) == NULL)
572		return (-1);
573
574	if (server_log_http(clt, code, 0) == -1)
575		return (-1);
576
577	/* Add error codes */
578	if (kv_setkey(&resp->http_pathquery, "%lu", code) == -1 ||
579	    kv_set(&resp->http_pathquery, "%s", error) == -1)
580		return (-1);
581
582	/* Add headers */
583	if (kv_add(&resp->http_headers, "Server", HTTPD_SERVERNAME) == NULL)
584		return (-1);
585
586	/* Set chunked encoding */
587	if (clt->clt_fcgi_chunked) {
588		/* XXX Should we keep and handle Content-Length instead? */
589		key.kv_key = "Content-Length";
590		if ((kv = kv_find(&resp->http_headers, &key)) != NULL)
591			kv_delete(&resp->http_headers, kv);
592
593		/*
594		 * XXX What if the FastCGI added some kind of Transfer-Encoding?
595		 * XXX like gzip, deflate or even "chunked"?
596		 */
597		if (kv_add(&resp->http_headers,
598		    "Transfer-Encoding", "chunked") == NULL)
599			return (-1);
600	}
601
602	/* Is it a persistent connection? */
603	if (clt->clt_persist) {
604		if (kv_add(&resp->http_headers,
605		    "Connection", "keep-alive") == NULL)
606			return (-1);
607	} else if (kv_add(&resp->http_headers, "Connection", "close") == NULL)
608		return (-1);
609
610	/* Date header is mandatory and should be added as late as possible */
611	if (server_http_time(time(NULL), tmbuf, sizeof(tmbuf)) <= 0 ||
612	    kv_add(&resp->http_headers, "Date", tmbuf) == NULL)
613		return (-1);
614
615	/* Write initial header (fcgi might append more) */
616	if (server_writeresponse_http(clt) == -1 ||
617	    server_bufferevent_print(clt, "\r\n") == -1 ||
618	    server_headers(clt, resp, server_writeheader_http, NULL) == -1 ||
619	    server_bufferevent_print(clt, "\r\n") == -1)
620		return (-1);
621
622	return (0);
623}
624
625int
626server_fcgi_writeheader(struct client *clt, struct kv *hdr, void *arg)
627{
628	struct server_fcgi_param	*param = arg;
629	char				*val, *name, *p;
630	const char			*key;
631	int				 ret;
632
633	if (hdr->kv_flags & KV_FLAG_INVALID)
634		return (0);
635
636	/* The key might have been updated in the parent */
637	if (hdr->kv_parent != NULL && hdr->kv_parent->kv_key != NULL)
638		key = hdr->kv_parent->kv_key;
639	else
640		key = hdr->kv_key;
641
642	val = hdr->kv_value;
643
644	if (strcasecmp(key, "Content-Length") == 0 ||
645	    strcasecmp(key, "Content-Type") == 0) {
646		if ((name = strdup(key)) == NULL)
647			return (-1);
648	} else {
649		if (asprintf(&name, "HTTP_%s", key) == -1)
650			return (-1);
651	}
652
653	for (p = name; *p != '\0'; p++) {
654		if (isalpha((unsigned char)*p))
655			*p = toupper((unsigned char)*p);
656		else
657			*p = '_';
658	}
659
660	ret = fcgi_add_param(param, name, val, clt);
661	free(name);
662
663	return (ret);
664}
665
666int
667server_fcgi_writechunk(struct client *clt)
668{
669	struct evbuffer *evb = clt->clt_srvevb;
670	size_t		 len;
671
672	if (clt->clt_fcgi_type == FCGI_END_REQUEST) {
673		len = 0;
674	} else
675		len = EVBUFFER_LENGTH(evb);
676
677	/* If len is 0, make sure to write the end marker only once */
678	if (len == 0 && clt->clt_fcgi_end++)
679		return (0);
680
681	if (clt->clt_fcgi_chunked) {
682		if (server_bufferevent_printf(clt, "%zx\r\n", len) == -1 ||
683		    server_bufferevent_write_chunk(clt, evb, len) == -1 ||
684		    server_bufferevent_print(clt, "\r\n") == -1)
685			return (-1);
686	} else
687		return (server_bufferevent_write_buffer(clt, evb));
688
689	return (0);
690}
691
692int
693server_fcgi_getheaders(struct client *clt)
694{
695	struct http_descriptor	*resp = clt->clt_descresp;
696	struct evbuffer		*evb = clt->clt_srvevb;
697	int			 code = 200;
698	char			*line, *key, *value;
699	const char		*errstr;
700
701	while ((line = evbuffer_getline(evb)) != NULL && *line != '\0') {
702		key = line;
703
704		if ((value = strchr(key, ':')) == NULL)
705			break;
706		if (*value == ':') {
707			*value++ = '\0';
708			value += strspn(value, " \t");
709		} else {
710			*value++ = '\0';
711		}
712
713		DPRINTF("%s: %s: %s", __func__, key, value);
714
715		if (strcasecmp("Status", key) == 0) {
716			value[strcspn(value, " \t")] = '\0';
717			code = (int)strtonum(value, 100, 600, &errstr);
718			if (errstr != NULL || server_httperror_byid(
719			    code) == NULL)
720				code = 200;
721		} else {
722			(void)kv_add(&resp->http_headers, key, value);
723		}
724		free(line);
725	}
726
727	return (code);
728}
729