xref: /lighttpd1.4/src/network.c (revision 70b1af06)
1 #include "first.h"
2 
3 #include "network.h"
4 #include "base.h"
5 #include "fdevent.h"
6 #include "log.h"
7 #include "connections.h"
8 #include "plugin.h"
9 #include "sock_addr.h"
10 
11 #include "network_write.h"
12 #include "sys-socket.h"
13 
14 #include <sys/types.h>
15 #include <sys/stat.h>
16 #include <sys/time.h>
17 
18 #include <errno.h>
19 #include <fcntl.h>
20 #include <unistd.h>
21 #include <string.h>
22 #include <stdlib.h>
23 
24 void
25 network_accept_tcp_nagle_disable (const int fd)
26 {
27     static int noinherit_tcpnodelay = -1;
28     int opt;
29 
30     if (!noinherit_tcpnodelay) /* TCP_NODELAY inherited from listen socket */
31         return;
32 
33     if (noinherit_tcpnodelay < 0) {
34         socklen_t optlen = sizeof(opt);
35         if (0 == getsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, &optlen)) {
36             noinherit_tcpnodelay = !opt;
37             if (opt)           /* TCP_NODELAY inherited from listen socket */
38                 return;
39         }
40     }
41 
42     opt = 1;
43     (void)setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof(opt));
44 }
45 
46 static handler_t network_server_handle_fdevent(void *context, int revents) {
47 	server_socket * const srv_socket = (server_socket *)context;
48 	server * const srv = srv_socket->srv;
49 	connection *con;
50 	int loops;
51 
52 	if (0 == (revents & FDEVENT_IN)) {
53 		log_error(srv->errh, __FILE__, __LINE__,
54 		  "strange event for server socket %d %d", srv_socket->fd, revents);
55 		return HANDLER_ERROR;
56 	}
57 
58 	/* accept()s at most 100 connections directly
59 	 *
60 	 * we jump out after 100 to give the waiting connections a chance */
61 	if (srv->conns.used >= srv->max_conns) return HANDLER_GO_ON;
62 	loops = (int)(srv->max_conns - srv->conns.used + 1);
63 	if (loops > 100) loops = 101;
64 
65 	while (--loops && NULL != (con = connection_accept(srv, srv_socket)))
66 		connection_state_machine(con);
67 
68 	return HANDLER_GO_ON;
69 }
70 
71 static void network_host_normalize_addr_str(buffer *host, sock_addr *addr) {
72     buffer_clear(host);
73     sock_addr_stringify_append_buffer(host, addr);
74 }
75 
76 static int network_host_parse_addr(server *srv, sock_addr *addr, socklen_t *addr_len, buffer *host, int use_ipv6) {
77     char *h;
78     char *colon = NULL;
79     const char *chost;
80     sa_family_t family = use_ipv6 ? AF_INET6 : AF_INET;
81     unsigned int port = srv->srvconf.port;
82     if (buffer_string_is_empty(host)) {
83         log_error(srv->errh, __FILE__, __LINE__,
84           "value of $SERVER[\"socket\"] must not be empty");
85         return -1;
86     }
87     h = host->ptr;
88     if (h[0] == '/') {
89       #ifdef HAVE_SYS_UN_H
90         return (1 ==
91                 sock_addr_from_str_hints(addr,addr_len,h,AF_UNIX,0,srv->errh))
92           ? 0
93           : -1;
94       #else
95         log_error(srv, __FILE__, __LINE__,
96           "ERROR: Unix Domain sockets are not supported.");
97         return -1;
98       #endif
99     }
100     buffer * const tb = srv->tmp_buf;
101     buffer_copy_buffer(tb, host);
102     h = tb->ptr;
103     if (h[0] == '[') {
104         family = AF_INET6;
105         if ((h = strchr(h, ']'))) {
106             *h++ = '\0';
107             if (*h == ':') colon = h;
108         } /*(else should not happen; validated in configparser.y)*/
109         h = tb->ptr+1;
110     }
111     else {
112         colon = strrchr(h, ':');
113     }
114     if (colon) {
115         *colon++ = '\0';
116         port = (unsigned int)strtol(colon, NULL, 10);
117         if (port == 0 || port > 65535) {
118             log_error(srv->errh, __FILE__, __LINE__,
119               "port not set or out of range: %u", port);
120             return -1;
121         }
122     }
123     chost = *h ? h : family == AF_INET ? "0.0.0.0" : "::";
124     if (1 !=
125         sock_addr_from_str_hints(addr,addr_len,chost,family,port,srv->errh)) {
126         return -1;
127     }
128     return 0;
129 }
130 
131 static void network_srv_sockets_append(server *srv, server_socket *srv_socket) {
132 	if (srv->srv_sockets.used == srv->srv_sockets.size) {
133 		srv->srv_sockets.size += 4;
134 		srv->srv_sockets.ptr = realloc(srv->srv_sockets.ptr, srv->srv_sockets.size * sizeof(server_socket*));
135 		force_assert(NULL != srv->srv_sockets.ptr);
136 	}
137 
138 	srv->srv_sockets.ptr[srv->srv_sockets.used++] = srv_socket;
139 }
140 
141 typedef struct {
142     /* global or per-socket config; not patched per connection */
143     int listen_backlog;
144     unsigned char ssl_enabled;
145     unsigned char use_ipv6;
146     unsigned char set_v6only; /* set_v6only is only a temporary option */
147     unsigned char defer_accept;
148     const buffer *socket_perms;
149     const buffer *bsd_accept_filter;
150 } network_socket_config;
151 
152 typedef struct {
153     PLUGIN_DATA;
154     network_socket_config defaults;
155     network_socket_config conf;
156 } network_plugin_data;
157 
158 static void network_merge_config_cpv(network_socket_config * const pconf, const config_plugin_value_t * const cpv) {
159     switch (cpv->k_id) { /* index into static config_plugin_keys_t cpk[] */
160       case 0: /* ssl.engine */
161         pconf->ssl_enabled = (0 != cpv->v.u);
162         break;
163       case 1: /* server.listen-backlog */
164         pconf->listen_backlog = (int)cpv->v.u;
165         break;
166       case 2: /* server.socket-perms */
167         pconf->socket_perms = cpv->v.b;
168         break;
169       case 3: /* server.bsd-accept-filter */
170         pconf->bsd_accept_filter = cpv->v.b;
171         break;
172       case 4: /* server.defer-accept */
173         pconf->defer_accept = (0 != cpv->v.u);
174         break;
175       case 5: /* server.use-ipv6 */
176         pconf->use_ipv6 = (0 != cpv->v.u);
177         break;
178       case 6: /* server.set-v6only */
179         pconf->set_v6only = (0 != cpv->v.u);
180         break;
181       default:/* should not happen */
182         return;
183     }
184 }
185 
186 static void network_merge_config(network_socket_config * const pconf, const config_plugin_value_t *cpv) {
187     do {
188         network_merge_config_cpv(pconf, cpv);
189     } while ((++cpv)->k_id != -1);
190 }
191 
192 static int network_server_init(server *srv, network_socket_config *s, buffer *host_token, size_t sidx, int stdin_fd) {
193 	server_socket *srv_socket;
194 	const char *host;
195 	socklen_t addr_len = sizeof(sock_addr);
196 	sock_addr addr;
197 	int family = 0;
198 	int set_v6only = 0;
199 
200 	if (buffer_string_is_empty(host_token)) {
201 		log_error(srv->errh, __FILE__, __LINE__,
202 		  "value of $SERVER[\"socket\"] must not be empty");
203 		return -1;
204 	}
205 
206 	/* check if we already know this socket, and if yes, don't init it
207 	 * (optimization: check strings here to filter out exact matches;
208 	 *  binary addresses are matched further below) */
209 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
210 		if (buffer_is_equal(srv->srv_sockets.ptr[i]->srv_token, host_token)) {
211 			return 0;
212 		}
213 	}
214 
215 	host = host_token->ptr;
216 	if ((s->use_ipv6 && (*host == '\0' || *host == ':')) || (host[0] == '[' && host[1] == ']')) {
217 		log_error(srv->errh, __FILE__, __LINE__,
218 		  "warning: please use server.use-ipv6 only for hostnames, "
219 		  "not without server.bind / empty address; your config will "
220 		  "break if the kernel default for IPV6_V6ONLY changes");
221 	}
222 	if (*host == '[') s->use_ipv6 = 1;
223 
224 	memset(&addr, 0, sizeof(addr));
225 	if (-1 != stdin_fd) {
226 		if (-1 == getsockname(stdin_fd, (struct sockaddr *)&addr, &addr_len)) {
227 			log_perror(srv->errh, __FILE__, __LINE__, "getsockname()");
228 			return -1;
229 		}
230 	} else if (0 != network_host_parse_addr(srv, &addr, &addr_len, host_token, s->use_ipv6)) {
231 		return -1;
232 	}
233 
234 	family = sock_addr_get_family(&addr);
235 
236       #ifdef HAVE_IPV6
237 	if (*host != '\0' && AF_INET6 == family) {
238 		if (s->set_v6only) {
239 			set_v6only = 1;
240 		} else {
241 			log_error(srv->errh, __FILE__, __LINE__,
242 			  "warning: server.set-v6only will be removed soon, "
243 			  "update your config to have different sockets for ipv4 and ipv6");
244 		}
245 	}
246       #endif
247 
248 	network_host_normalize_addr_str(host_token, &addr);
249 	host = host_token->ptr;
250 
251 	if (srv->srvconf.preflight_check) {
252 		return 0;
253 	}
254 
255 	/* check if we already know this socket (after potential DNS resolution), and if yes, don't init it */
256 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
257 		if (0 == memcmp(&srv->srv_sockets.ptr[i]->addr, &addr, sizeof(addr))) {
258 			return 0;
259 		}
260 	}
261 
262 	srv_socket = calloc(1, sizeof(*srv_socket));
263 	force_assert(NULL != srv_socket);
264 	memcpy(&srv_socket->addr, &addr, addr_len);
265 	srv_socket->fd = -1;
266 	srv_socket->sidx = sidx;
267 	srv_socket->is_ssl = s->ssl_enabled;
268 	srv_socket->srv = srv;
269 	srv_socket->srv_token = buffer_init_buffer(host_token);
270 
271 	network_srv_sockets_append(srv, srv_socket);
272 
273 	if (srv->sockets_disabled) { /* lighttpd -1 (one-shot mode) */
274 		return 0;
275 	}
276 
277 	if (srv->srvconf.systemd_socket_activation) {
278 		for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
279 			if (0 != memcmp(&srv->srv_sockets_inherited.ptr[i]->addr, &srv_socket->addr, addr_len)) continue;
280 			if ((unsigned short)~0u == srv->srv_sockets_inherited.ptr[i]->sidx) {
281 				srv->srv_sockets_inherited.ptr[i]->sidx = sidx;
282 			}
283 			stdin_fd = srv->srv_sockets_inherited.ptr[i]->fd;
284 			break;
285 		}
286 	}
287 
288 	if (-1 != stdin_fd) {
289 		srv_socket->fd = stdin_fd;
290 		if (-1 == fdevent_fcntl_set_nb_cloexec(stdin_fd)) {
291 			log_perror(srv->errh, __FILE__, __LINE__, "fcntl");
292 			return -1;
293 		}
294 	} else
295 #ifdef HAVE_SYS_UN_H
296 	if (AF_UNIX == family) {
297 		/* check if the socket exists and try to connect to it. */
298 		force_assert(host); /*(static analysis hint)*/
299 		if (-1 == (srv_socket->fd = fdevent_socket_cloexec(AF_UNIX, SOCK_STREAM, 0))) {
300 			log_perror(srv->errh, __FILE__, __LINE__, "socket");
301 			return -1;
302 		}
303 		if (0 == connect(srv_socket->fd, (struct sockaddr *) &(srv_socket->addr), addr_len)) {
304 			log_error(srv->errh, __FILE__, __LINE__,
305 			  "server socket is still in use: %s", host);
306 			return -1;
307 		}
308 
309 		/* connect failed */
310 		switch(errno) {
311 		case ECONNREFUSED:
312 			unlink(host);
313 			break;
314 		case ENOENT:
315 			break;
316 		default:
317 			log_perror(srv->errh, __FILE__, __LINE__,
318 			  "testing socket failed: %s", host);
319 			return -1;
320 		}
321 
322 		if (-1 == fdevent_fcntl_set_nb(srv_socket->fd)) {
323 			log_perror(srv->errh, __FILE__, __LINE__, "fcntl");
324 			return -1;
325 		}
326 	} else
327 #endif
328 	{
329 		if (-1 == (srv_socket->fd = fdevent_socket_nb_cloexec(family, SOCK_STREAM, IPPROTO_TCP))) {
330 			log_perror(srv->errh, __FILE__, __LINE__, "socket");
331 			return -1;
332 		}
333 	}
334 
335 #ifdef HAVE_IPV6
336 		if (set_v6only && -1 == stdin_fd) {
337 				int val = 1;
338 				if (-1 == setsockopt(srv_socket->fd, IPPROTO_IPV6, IPV6_V6ONLY, &val, sizeof(val))) {
339 					log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(IPV6_V6ONLY)");
340 					return -1;
341 				}
342 		}
343 #endif
344 
345 	/* */
346 	srv->cur_fds = srv_socket->fd;
347 
348 	if (fdevent_set_so_reuseaddr(srv_socket->fd, 1) < 0) {
349 		log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(SO_REUSEADDR)");
350 		return -1;
351 	}
352 
353 	if (family != AF_UNIX) {
354 		if (fdevent_set_tcp_nodelay(srv_socket->fd, 1) < 0) {
355 			log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(TCP_NODELAY)");
356 			return -1;
357 		}
358 	}
359 
360 	if (-1 != stdin_fd) { } else
361 	if (0 != bind(srv_socket->fd, (struct sockaddr *) &(srv_socket->addr), addr_len)) {
362 		log_perror(srv->errh, __FILE__, __LINE__,
363 		  "can't bind to socket: %s", host);
364 		return -1;
365 	}
366 
367 	if (-1 != stdin_fd) { } else
368 	if (AF_UNIX == family && !buffer_string_is_empty(s->socket_perms)) {
369 		mode_t m = 0;
370 		for (char *str = s->socket_perms->ptr; *str; ++str) {
371 			m <<= 3;
372 			m |= (*str - '0');
373 		}
374 		if (0 != m && -1 == chmod(host, m)) {
375 			log_perror(srv->errh, __FILE__, __LINE__,
376 			  "chmod(\"%s\", %s)", host, s->socket_perms->ptr);
377 			return -1;
378 		}
379 	}
380 
381 	if (-1 != stdin_fd) { } else
382 	if (-1 == listen(srv_socket->fd, s->listen_backlog)) {
383 		log_perror(srv->errh, __FILE__, __LINE__, "listen");
384 		return -1;
385 	}
386 
387 	if (s->ssl_enabled) {
388 #ifdef TCP_DEFER_ACCEPT
389 	} else if (s->defer_accept) {
390 		int v = s->defer_accept;
391 		if (-1 == setsockopt(srv_socket->fd, IPPROTO_TCP, TCP_DEFER_ACCEPT, &v, sizeof(v))) {
392 			log_perror(srv->errh, __FILE__, __LINE__, "can't set TCP_DEFER_ACCEPT");
393 		}
394 #endif
395 #if defined(__FreeBSD__) || defined(__NetBSD__) \
396  || defined(__OpenBSD__) || defined(__DragonFly__)
397 	} else if (!buffer_is_empty(s->bsd_accept_filter)
398 		   && (buffer_is_equal_string(s->bsd_accept_filter, CONST_STR_LEN("httpready"))
399 			|| buffer_is_equal_string(s->bsd_accept_filter, CONST_STR_LEN("dataready")))) {
400 #ifdef SO_ACCEPTFILTER
401 		/* FreeBSD accf_http filter */
402 		struct accept_filter_arg afa;
403 		memset(&afa, 0, sizeof(afa));
404 		strncpy(afa.af_name, s->bsd_accept_filter->ptr, sizeof(afa.af_name)-1);
405 		if (setsockopt(srv_socket->fd, SOL_SOCKET, SO_ACCEPTFILTER, &afa, sizeof(afa)) < 0) {
406 			if (errno != ENOENT) {
407 				log_perror(srv->errh, __FILE__, __LINE__,
408 				  "can't set accept-filter '%s'", s->bsd_accept_filter->ptr);
409 			}
410 		}
411 #endif
412 #endif
413 	}
414 
415 	return 0;
416 }
417 
418 int network_close(server *srv) {
419 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
420 		server_socket *srv_socket = srv->srv_sockets.ptr[i];
421 		if (srv_socket->fd != -1) {
422 			network_unregister_sock(srv, srv_socket);
423 			close(srv_socket->fd);
424 		}
425 
426 		buffer_free(srv_socket->srv_token);
427 
428 		free(srv_socket);
429 	}
430 
431 	free(srv->srv_sockets.ptr);
432 	srv->srv_sockets.ptr = NULL;
433 	srv->srv_sockets.used = 0;
434 	srv->srv_sockets.size = 0;
435 
436 	for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
437 		server_socket *srv_socket = srv->srv_sockets_inherited.ptr[i];
438 		if (srv_socket->fd != -1 && srv_socket->sidx != (unsigned short)~0u) {
439 			close(srv_socket->fd);
440 		}
441 
442 		buffer_free(srv_socket->srv_token);
443 
444 		free(srv_socket);
445 	}
446 
447 	free(srv->srv_sockets_inherited.ptr);
448 	srv->srv_sockets_inherited.ptr = NULL;
449 	srv->srv_sockets_inherited.used = 0;
450 	srv->srv_sockets_inherited.size = 0;
451 
452 	return 0;
453 }
454 
455 static int network_socket_activation_nfds(server *srv, network_socket_config *s, int nfds) {
456     buffer *host = buffer_init();
457     socklen_t addr_len;
458     sock_addr addr;
459     int rc = 0;
460     nfds += 3; /* #define SD_LISTEN_FDS_START 3 */
461     for (int fd = 3; fd < nfds; ++fd) {
462         addr_len = sizeof(sock_addr);
463         if (-1 == (rc = getsockname(fd, (struct sockaddr *)&addr, &addr_len))) {
464             log_perror(srv->errh, __FILE__, __LINE__,
465               "socket activation getsockname()");
466             break;
467         }
468         network_host_normalize_addr_str(host, &addr);
469         rc = network_server_init(srv, s, host, 0, fd);
470         if (0 != rc) break;
471         srv->srv_sockets.ptr[srv->srv_sockets.used-1]->sidx = (unsigned short)~0u;
472     }
473     buffer_free(host);
474     memcpy(&srv->srv_sockets_inherited, &srv->srv_sockets, sizeof(server_socket_array));
475     memset(&srv->srv_sockets, 0, sizeof(server_socket_array));
476     return rc;
477 }
478 
479 static int network_socket_activation_from_env(server *srv, network_socket_config *s) {
480     char *listen_pid = getenv("LISTEN_PID");
481     char *listen_fds = getenv("LISTEN_FDS");
482     pid_t lpid = listen_pid ? (pid_t)strtoul(listen_pid,NULL,10) : 0;
483     int nfds = listen_fds ? atoi(listen_fds) : 0;
484     int rc = (lpid == getpid() && nfds > 0)
485       ? network_socket_activation_nfds(srv, s, nfds)
486       : 0;
487     unsetenv("LISTEN_PID");
488     unsetenv("LISTEN_FDS");
489     unsetenv("LISTEN_FDNAMES");
490     /*(upon graceful restart, unsetenv will result in no-op above)*/
491     return rc;
492 }
493 
494 int network_init(server *srv, int stdin_fd) {
495     /*(network params used during setup (from $SERVER["socket"] condition))*/
496     static const config_plugin_keys_t cpk[] = {
497       { CONST_STR_LEN("ssl.engine"),
498         T_CONFIG_BOOL,
499         T_CONFIG_SCOPE_CONNECTION }
500      ,{ CONST_STR_LEN("server.listen-backlog"),
501         T_CONFIG_INT,
502         T_CONFIG_SCOPE_CONNECTION }
503      ,{ CONST_STR_LEN("server.socket-perms"),
504         T_CONFIG_STRING,
505         T_CONFIG_SCOPE_CONNECTION }
506      ,{ CONST_STR_LEN("server.bsd-accept-filter"),
507         T_CONFIG_STRING,
508         T_CONFIG_SCOPE_CONNECTION }
509      ,{ CONST_STR_LEN("server.defer-accept"),
510         T_CONFIG_BOOL,
511         T_CONFIG_SCOPE_CONNECTION }
512      ,{ CONST_STR_LEN("server.use-ipv6"),
513         T_CONFIG_BOOL,
514         T_CONFIG_SCOPE_CONNECTION }
515      ,{ CONST_STR_LEN("server.set-v6only"),
516         T_CONFIG_BOOL,
517         T_CONFIG_SCOPE_CONNECTION }
518     #if 0 /* TODO: more integration needed ... */
519      ,{ CONST_STR_LEN("mbedtls.engine"),
520         T_CONFIG_BOOL,
521         T_CONFIG_SCOPE_CONNECTION }
522     #endif
523      ,{ NULL, 0,
524         T_CONFIG_UNSET,
525         T_CONFIG_SCOPE_UNSET }
526     };
527 
528   #ifdef __WIN32
529     WSADATA wsaData;
530     WORD wVersionRequested = MAKEWORD(2, 2);
531     if (0 != WSAStartup(wVersionRequested, &wsaData)) {
532         /* Tell the user that we could not find a usable WinSock DLL */
533         return -1;
534     }
535   #endif
536 
537     if (0 != network_write_init(srv)) return -1;
538 
539     network_plugin_data np;
540     memset(&np, 0, sizeof(network_plugin_data));
541     network_plugin_data *p = &np;
542 
543     if (!config_plugin_values_init(srv, p, cpk, "network"))
544         return HANDLER_ERROR;
545 
546     p->defaults.listen_backlog = 1024;
547     p->defaults.defer_accept = 0;
548     p->defaults.use_ipv6 = 0;
549     p->defaults.set_v6only = 1;
550 
551     /* initialize p->defaults from global config context */
552     if (p->nconfig > 0 && p->cvlist->v.u2[1]) {
553         const config_plugin_value_t *cpv = p->cvlist + p->cvlist->v.u2[0];
554         if (-1 != cpv->k_id)
555             network_merge_config(&p->defaults, cpv);
556     }
557 
558     int rc = 0;
559     do {
560 
561         if (srv->srvconf.systemd_socket_activation) {
562             for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
563                 srv->srv_sockets_inherited.ptr[i]->sidx = (unsigned short)~0u;
564             }
565             rc = network_socket_activation_from_env(srv, &p->defaults);
566             if (0 != rc) break;
567             if (0 == srv->srv_sockets_inherited.used) {
568                 srv->srvconf.systemd_socket_activation = 0;
569             }
570         }
571 
572         /* process srv->srvconf.bindhost
573          * (skip if systemd socket activation is enabled and bindhost is empty;
574          *  do not additionally listen on "*") */
575         if (!srv->srvconf.systemd_socket_activation
576             || !buffer_string_is_empty(srv->srvconf.bindhost)) {
577             buffer *b = buffer_init();
578             buffer_copy_buffer(b, srv->srvconf.bindhost);
579             if (b->ptr[0] != '/') { /*(skip adding port if unix socket path)*/
580                 buffer_append_string_len(b, CONST_STR_LEN(":"));
581                 buffer_append_int(b, srv->srvconf.port);
582             }
583 
584             rc = (-1 == stdin_fd || 0 == srv->srv_sockets.used)
585               ? network_server_init(srv, &p->defaults, b, 0, stdin_fd)
586               : close(stdin_fd);/*(graceful restart listening to "/dev/stdin")*/
587             buffer_free(b);
588             if (0 != rc) break;
589         }
590 
591         /* check for $SERVER["socket"] */
592         for (uint32_t i = 1; i < srv->config_context->used; ++i) {
593             config_cond_info cfginfo;
594             config_get_config_cond_info(&cfginfo, i);
595             if (COMP_SERVER_SOCKET != cfginfo.comp) continue;/* not our stage */
596 
597             buffer *host_token;
598             *(const buffer **)&host_token = cfginfo.string;
599             /*(cfginfo.string is modified during config)*/
600 
601             memcpy(&p->conf, &p->defaults, sizeof(network_socket_config));
602             for (int j = !p->cvlist[0].v.u2[1]; j < p->nconfig; ++j) {
603                 if ((int)i != p->cvlist[j].k_id) continue;
604                 const config_plugin_value_t *cpv =
605                   p->cvlist + p->cvlist[j].v.u2[0];
606                 network_merge_config(&p->conf, cpv);
607                 break;
608             }
609 
610             if (cfginfo.cond == CONFIG_COND_EQ) {
611                 rc = network_server_init(srv, &p->conf, host_token, i, -1);
612                 if (0 != rc) break;
613             }
614             else if (cfginfo.cond == CONFIG_COND_NE) {
615                 socklen_t addr_len = sizeof(sock_addr);
616                 sock_addr addr;
617                 rc = network_host_parse_addr(srv, &addr, &addr_len,
618                                              host_token, p->conf.use_ipv6);
619                 if (0 != rc) break;
620                 network_host_normalize_addr_str(host_token, &addr);
621             }
622         }
623         if (0 != rc) break;
624 
625         if (srv->srvconf.systemd_socket_activation) {
626             /* activate any inherited sockets not explicitly listed in config */
627             server_socket *srv_socket;
628             for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
629                     if ((unsigned short)~0u
630                         != srv->srv_sockets_inherited.ptr[i]->sidx)
631                         continue;
632                     srv->srv_sockets_inherited.ptr[i]->sidx = 0;
633                 srv_socket = calloc(1, sizeof(server_socket));
634                 force_assert(NULL != srv_socket);
635                 memcpy(srv_socket, srv->srv_sockets_inherited.ptr[i],
636                        sizeof(server_socket));
637                 network_srv_sockets_append(srv, srv_socket);
638             }
639         }
640 
641     } while (0);
642 
643     free(p->cvlist);
644     return rc;
645 }
646 
647 void network_unregister_sock(server *srv, server_socket *srv_socket) {
648 	fdnode *fdn = srv_socket->fdn;
649 	if (NULL == fdn) return;
650 	fdevent_fdnode_event_del(srv->ev, fdn);
651 	fdevent_unregister(srv->ev, fdn->fd);
652 	srv_socket->fdn = NULL;
653 }
654 
655 int network_register_fdevents(server *srv) {
656 	if (-1 == fdevent_reset(srv->ev)) {
657 		return -1;
658 	}
659 
660 	if (srv->sockets_disabled) return 0; /* lighttpd -1 (one-shot mode) */
661 
662 	/* register fdevents after reset */
663 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
664 		server_socket *srv_socket = srv->srv_sockets.ptr[i];
665 
666 		srv_socket->fdn = fdevent_register(srv->ev, srv_socket->fd, network_server_handle_fdevent, srv_socket);
667 		fdevent_fdnode_event_set(srv->ev, srv_socket->fdn, FDEVENT_IN);
668 	}
669 	return 0;
670 }
671