xref: /lighttpd1.4/src/network.c (revision 9570cc2f)
1 #include "first.h"
2 
3 #include "network.h"
4 #include "base.h"
5 #include "fdevent.h"
6 #include "log.h"
7 #include "connections.h"
8 #include "plugin.h"
9 #include "sock_addr.h"
10 
11 #include "network_write.h"
12 #include "sys-socket.h"
13 
14 #include <sys/types.h>
15 #include <sys/stat.h>
16 #include <sys/time.h>
17 
18 #include <errno.h>
19 #include <fcntl.h>
20 #include <unistd.h>
21 #include <string.h>
22 #include <stdlib.h>
23 
24 void
25 network_accept_tcp_nagle_disable (const int fd)
26 {
27     static int noinherit_tcpnodelay = -1;
28     int opt;
29 
30     if (!noinherit_tcpnodelay) /* TCP_NODELAY inherited from listen socket */
31         return;
32 
33     if (noinherit_tcpnodelay < 0) {
34         socklen_t optlen = sizeof(opt);
35         if (0 == getsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, &optlen)) {
36             noinherit_tcpnodelay = !opt;
37             if (opt)           /* TCP_NODELAY inherited from listen socket */
38                 return;
39         }
40     }
41 
42     opt = 1;
43     (void)setsockopt(fd, IPPROTO_TCP, TCP_NODELAY, &opt, sizeof(opt));
44 }
45 
46 static handler_t network_server_handle_fdevent(void *context, int revents) {
47 	server_socket * const srv_socket = (server_socket *)context;
48 	server * const srv = srv_socket->srv;
49 	connection *con;
50 	int loops;
51 
52 	if (0 == (revents & FDEVENT_IN)) {
53 		log_error(srv->errh, __FILE__, __LINE__,
54 		  "strange event for server socket %d %d", srv_socket->fd, revents);
55 		return HANDLER_ERROR;
56 	}
57 
58 	/* accept()s at most 100 connections directly
59 	 *
60 	 * we jump out after 100 to give the waiting connections a chance */
61 	if (srv->conns.used >= srv->max_conns) return HANDLER_GO_ON;
62 	loops = (int)(srv->max_conns - srv->conns.used + 1);
63 	if (loops > 100) loops = 101;
64 
65 	while (--loops && NULL != (con = connection_accept(srv, srv_socket)))
66 		connection_state_machine(con);
67 
68 	return HANDLER_GO_ON;
69 }
70 
71 static void network_host_normalize_addr_str(buffer *host, sock_addr *addr) {
72     buffer_clear(host);
73     sock_addr_stringify_append_buffer(host, addr);
74 }
75 
76 static int network_host_parse_addr(server *srv, sock_addr *addr, socklen_t *addr_len, buffer *host, int use_ipv6) {
77     char *h;
78     char *colon = NULL;
79     const char *chost;
80     sa_family_t family = use_ipv6 ? AF_INET6 : AF_INET;
81     unsigned int port = srv->srvconf.port;
82     if (buffer_string_is_empty(host)) {
83         log_error(srv->errh, __FILE__, __LINE__,
84           "value of $SERVER[\"socket\"] must not be empty");
85         return -1;
86     }
87     h = host->ptr;
88     if (h[0] == '/') {
89       #ifdef HAVE_SYS_UN_H
90         return (1 ==
91                 sock_addr_from_str_hints(addr,addr_len,h,AF_UNIX,0,srv->errh))
92           ? 0
93           : -1;
94       #else
95         log_error(srv, __FILE__, __LINE__,
96           "ERROR: Unix Domain sockets are not supported.");
97         return -1;
98       #endif
99     }
100     buffer * const tb = srv->tmp_buf;
101     buffer_copy_buffer(tb, host);
102     h = tb->ptr;
103     if (h[0] == '[') {
104         family = AF_INET6;
105         if ((h = strchr(h, ']'))) {
106             *h++ = '\0';
107             if (*h == ':') colon = h;
108         } /*(else should not happen; validated in configparser.y)*/
109         h = tb->ptr+1;
110     }
111     else {
112         colon = strrchr(h, ':');
113     }
114     if (colon) {
115         *colon++ = '\0';
116         port = (unsigned int)strtol(colon, NULL, 10);
117         if (port == 0 || port > 65535) {
118             log_error(srv->errh, __FILE__, __LINE__,
119               "port not set or out of range: %u", port);
120             return -1;
121         }
122     }
123     chost = *h ? h : family == AF_INET ? "0.0.0.0" : "::";
124     if (1 !=
125         sock_addr_from_str_hints(addr,addr_len,chost,family,port,srv->errh)) {
126         return -1;
127     }
128     return 0;
129 }
130 
131 static void network_srv_sockets_append(server *srv, server_socket *srv_socket) {
132 	if (srv->srv_sockets.used == srv->srv_sockets.size) {
133 		srv->srv_sockets.size += 4;
134 		srv->srv_sockets.ptr = realloc(srv->srv_sockets.ptr, srv->srv_sockets.size * sizeof(server_socket*));
135 		force_assert(NULL != srv->srv_sockets.ptr);
136 	}
137 
138 	srv->srv_sockets.ptr[srv->srv_sockets.used++] = srv_socket;
139 }
140 
141 typedef struct {
142     /* global or per-socket config; not patched per connection */
143     int listen_backlog;
144     unsigned char ssl_enabled;
145     unsigned char mbedtls_enabled; /* TODO: more integration needed ... */
146     unsigned char use_ipv6;
147     unsigned char set_v6only; /* set_v6only is only a temporary option */
148     unsigned char defer_accept;
149     const buffer *socket_perms;
150     const buffer *bsd_accept_filter;
151 } network_socket_config;
152 
153 typedef struct {
154     PLUGIN_DATA;
155     network_socket_config defaults;
156     network_socket_config conf;
157 } network_plugin_data;
158 
159 static void network_merge_config_cpv(network_socket_config * const pconf, const config_plugin_value_t * const cpv) {
160     switch (cpv->k_id) { /* index into static config_plugin_keys_t cpk[] */
161       case 0: /* ssl.engine */
162         pconf->ssl_enabled = (0 != cpv->v.u);
163         break;
164       case 1: /* server.listen-backlog */
165         pconf->listen_backlog = (int)cpv->v.u;
166         break;
167       case 2: /* server.socket-perms */
168         pconf->socket_perms = cpv->v.b;
169         break;
170       case 3: /* server.bsd-accept-filter */
171         pconf->bsd_accept_filter = cpv->v.b;
172         break;
173       case 4: /* server.defer-accept */
174         pconf->defer_accept = (0 != cpv->v.u);
175         break;
176       case 5: /* server.use-ipv6 */
177         pconf->use_ipv6 = (0 != cpv->v.u);
178         break;
179       case 6: /* server.set-v6only */
180         pconf->set_v6only = (0 != cpv->v.u);
181         break;
182       default:/* should not happen */
183         return;
184     }
185 }
186 
187 static void network_merge_config(network_socket_config * const pconf, const config_plugin_value_t *cpv) {
188     do {
189         network_merge_config_cpv(pconf, cpv);
190     } while ((++cpv)->k_id != -1);
191 }
192 
193 static int network_server_init(server *srv, network_socket_config *s, buffer *host_token, size_t sidx, int stdin_fd) {
194 	server_socket *srv_socket;
195 	const char *host;
196 	socklen_t addr_len = sizeof(sock_addr);
197 	sock_addr addr;
198 	int family = 0;
199 	int set_v6only = 0;
200 
201 	if (buffer_string_is_empty(host_token)) {
202 		log_error(srv->errh, __FILE__, __LINE__,
203 		  "value of $SERVER[\"socket\"] must not be empty");
204 		return -1;
205 	}
206 
207 	/* check if we already know this socket, and if yes, don't init it
208 	 * (optimization: check strings here to filter out exact matches;
209 	 *  binary addresses are matched further below) */
210 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
211 		if (buffer_is_equal(srv->srv_sockets.ptr[i]->srv_token, host_token)) {
212 			return 0;
213 		}
214 	}
215 
216 	host = host_token->ptr;
217 	if ((s->use_ipv6 && (*host == '\0' || *host == ':')) || (host[0] == '[' && host[1] == ']')) {
218 		log_error(srv->errh, __FILE__, __LINE__,
219 		  "warning: please use server.use-ipv6 only for hostnames, "
220 		  "not without server.bind / empty address; your config will "
221 		  "break if the kernel default for IPV6_V6ONLY changes");
222 	}
223 	if (*host == '[') s->use_ipv6 = 1;
224 
225 	memset(&addr, 0, sizeof(addr));
226 	if (-1 != stdin_fd) {
227 		if (-1 == getsockname(stdin_fd, (struct sockaddr *)&addr, &addr_len)) {
228 			log_perror(srv->errh, __FILE__, __LINE__, "getsockname()");
229 			return -1;
230 		}
231 	} else if (0 != network_host_parse_addr(srv, &addr, &addr_len, host_token, s->use_ipv6)) {
232 		return -1;
233 	}
234 
235 	family = sock_addr_get_family(&addr);
236 
237       #ifdef HAVE_IPV6
238 	if (*host != '\0' && AF_INET6 == family) {
239 		if (s->set_v6only) {
240 			set_v6only = 1;
241 		} else {
242 			log_error(srv->errh, __FILE__, __LINE__,
243 			  "warning: server.set-v6only will be removed soon, "
244 			  "update your config to have different sockets for ipv4 and ipv6");
245 		}
246 	}
247       #endif
248 
249 	network_host_normalize_addr_str(host_token, &addr);
250 	host = host_token->ptr;
251 
252 	if (srv->srvconf.preflight_check) {
253 		return 0;
254 	}
255 
256 	/* check if we already know this socket (after potential DNS resolution), and if yes, don't init it */
257 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
258 		if (0 == memcmp(&srv->srv_sockets.ptr[i]->addr, &addr, sizeof(addr))) {
259 			return 0;
260 		}
261 	}
262 
263 	srv_socket = calloc(1, sizeof(*srv_socket));
264 	force_assert(NULL != srv_socket);
265 	memcpy(&srv_socket->addr, &addr, addr_len);
266 	srv_socket->fd = -1;
267 	srv_socket->sidx = sidx;
268 	srv_socket->is_ssl = (s->ssl_enabled || s->mbedtls_enabled);
269 	srv_socket->srv = srv;
270 	srv_socket->srv_token = buffer_init_buffer(host_token);
271 
272 	network_srv_sockets_append(srv, srv_socket);
273 
274 	if (srv->sockets_disabled) { /* lighttpd -1 (one-shot mode) */
275 		return 0;
276 	}
277 
278 	if (srv->srvconf.systemd_socket_activation) {
279 		for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
280 			if (0 != memcmp(&srv->srv_sockets_inherited.ptr[i]->addr, &srv_socket->addr, addr_len)) continue;
281 			if ((unsigned short)~0u == srv->srv_sockets_inherited.ptr[i]->sidx) {
282 				srv->srv_sockets_inherited.ptr[i]->sidx = sidx;
283 			}
284 			stdin_fd = srv->srv_sockets_inherited.ptr[i]->fd;
285 			break;
286 		}
287 	}
288 
289 	if (-1 != stdin_fd) {
290 		srv_socket->fd = stdin_fd;
291 		if (-1 == fdevent_fcntl_set_nb_cloexec(stdin_fd)) {
292 			log_perror(srv->errh, __FILE__, __LINE__, "fcntl");
293 			return -1;
294 		}
295 	} else
296 #ifdef HAVE_SYS_UN_H
297 	if (AF_UNIX == family) {
298 		/* check if the socket exists and try to connect to it. */
299 		force_assert(host); /*(static analysis hint)*/
300 		if (-1 == (srv_socket->fd = fdevent_socket_cloexec(AF_UNIX, SOCK_STREAM, 0))) {
301 			log_perror(srv->errh, __FILE__, __LINE__, "socket");
302 			return -1;
303 		}
304 		if (0 == connect(srv_socket->fd, (struct sockaddr *) &(srv_socket->addr), addr_len)) {
305 			log_error(srv->errh, __FILE__, __LINE__,
306 			  "server socket is still in use: %s", host);
307 			return -1;
308 		}
309 
310 		/* connect failed */
311 		switch(errno) {
312 		case ECONNREFUSED:
313 			unlink(host);
314 			break;
315 		case ENOENT:
316 			break;
317 		default:
318 			log_perror(srv->errh, __FILE__, __LINE__,
319 			  "testing socket failed: %s", host);
320 			return -1;
321 		}
322 
323 		if (-1 == fdevent_fcntl_set_nb(srv_socket->fd)) {
324 			log_perror(srv->errh, __FILE__, __LINE__, "fcntl");
325 			return -1;
326 		}
327 	} else
328 #endif
329 	{
330 		if (-1 == (srv_socket->fd = fdevent_socket_nb_cloexec(family, SOCK_STREAM, IPPROTO_TCP))) {
331 			log_perror(srv->errh, __FILE__, __LINE__, "socket");
332 			return -1;
333 		}
334 	}
335 
336 #ifdef HAVE_IPV6
337 		if (set_v6only && -1 == stdin_fd) {
338 				int val = 1;
339 				if (-1 == setsockopt(srv_socket->fd, IPPROTO_IPV6, IPV6_V6ONLY, &val, sizeof(val))) {
340 					log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(IPV6_V6ONLY)");
341 					return -1;
342 				}
343 		}
344 #endif
345 
346 	/* */
347 	srv->cur_fds = srv_socket->fd;
348 
349 	if (fdevent_set_so_reuseaddr(srv_socket->fd, 1) < 0) {
350 		log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(SO_REUSEADDR)");
351 		return -1;
352 	}
353 
354 	if (family != AF_UNIX) {
355 		if (fdevent_set_tcp_nodelay(srv_socket->fd, 1) < 0) {
356 			log_perror(srv->errh, __FILE__, __LINE__, "setsockopt(TCP_NODELAY)");
357 			return -1;
358 		}
359 	}
360 
361 	if (-1 != stdin_fd) { } else
362 	if (0 != bind(srv_socket->fd, (struct sockaddr *) &(srv_socket->addr), addr_len)) {
363 		log_perror(srv->errh, __FILE__, __LINE__,
364 		  "can't bind to socket: %s", host);
365 		return -1;
366 	}
367 
368 	if (-1 != stdin_fd) { } else
369 	if (AF_UNIX == family && !buffer_string_is_empty(s->socket_perms)) {
370 		mode_t m = 0;
371 		for (char *str = s->socket_perms->ptr; *str; ++str) {
372 			m <<= 3;
373 			m |= (*str - '0');
374 		}
375 		if (0 != m && -1 == chmod(host, m)) {
376 			log_perror(srv->errh, __FILE__, __LINE__,
377 			  "chmod(\"%s\", %s)", host, s->socket_perms->ptr);
378 		}
379 	}
380 
381 	if (-1 != stdin_fd) { } else
382 	if (-1 == listen(srv_socket->fd, s->listen_backlog)) {
383 		log_perror(srv->errh, __FILE__, __LINE__, "listen");
384 		return -1;
385 	}
386 
387 	if (s->ssl_enabled || s->mbedtls_enabled) {
388 #ifdef TCP_DEFER_ACCEPT
389 	} else if (s->defer_accept) {
390 		int v = s->defer_accept;
391 		if (-1 == setsockopt(srv_socket->fd, IPPROTO_TCP, TCP_DEFER_ACCEPT, &v, sizeof(v))) {
392 			log_perror(srv->errh, __FILE__, __LINE__, "can't set TCP_DEFER_ACCEPT");
393 		}
394 #endif
395 #if defined(__FreeBSD__) || defined(__NetBSD__) \
396  || defined(__OpenBSD__) || defined(__DragonFly__)
397 	} else if (!buffer_is_empty(s->bsd_accept_filter)
398 		   && (buffer_is_equal_string(s->bsd_accept_filter, CONST_STR_LEN("httpready"))
399 			|| buffer_is_equal_string(s->bsd_accept_filter, CONST_STR_LEN("dataready")))) {
400 #ifdef SO_ACCEPTFILTER
401 		/* FreeBSD accf_http filter */
402 		struct accept_filter_arg afa;
403 		memset(&afa, 0, sizeof(afa));
404 		strncpy(afa.af_name, s->bsd_accept_filter->ptr, sizeof(afa.af_name));
405 		if (setsockopt(srv_socket->fd, SOL_SOCKET, SO_ACCEPTFILTER, &afa, sizeof(afa)) < 0) {
406 			if (errno != ENOENT) {
407 				log_perror(srv->errh, __FILE__, __LINE__,
408 				  "can't set accept-filter '%s'", s->bsd_accept_filter->ptr);
409 			}
410 		}
411 #endif
412 #endif
413 	}
414 
415 	return 0;
416 }
417 
418 int network_close(server *srv) {
419 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
420 		server_socket *srv_socket = srv->srv_sockets.ptr[i];
421 		if (srv_socket->fd != -1) {
422 			network_unregister_sock(srv, srv_socket);
423 			close(srv_socket->fd);
424 		}
425 
426 		buffer_free(srv_socket->srv_token);
427 
428 		free(srv_socket);
429 	}
430 
431 	free(srv->srv_sockets.ptr);
432 	srv->srv_sockets.ptr = NULL;
433 	srv->srv_sockets.used = 0;
434 	srv->srv_sockets.size = 0;
435 
436 	for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
437 		server_socket *srv_socket = srv->srv_sockets_inherited.ptr[i];
438 		if (srv_socket->fd != -1 && srv_socket->sidx != (unsigned short)~0u) {
439 			close(srv_socket->fd);
440 		}
441 
442 		buffer_free(srv_socket->srv_token);
443 
444 		free(srv_socket);
445 	}
446 
447 	free(srv->srv_sockets_inherited.ptr);
448 	srv->srv_sockets_inherited.ptr = NULL;
449 	srv->srv_sockets_inherited.used = 0;
450 	srv->srv_sockets_inherited.size = 0;
451 
452 	return 0;
453 }
454 
455 static int network_socket_activation_nfds(server *srv, network_socket_config *s, int nfds) {
456     buffer *host = buffer_init();
457     socklen_t addr_len;
458     sock_addr addr;
459     int rc = 0;
460     nfds += 3; /* #define SD_LISTEN_FDS_START 3 */
461     for (int fd = 3; fd < nfds; ++fd) {
462         addr_len = sizeof(sock_addr);
463         if (-1 == (rc = getsockname(fd, (struct sockaddr *)&addr, &addr_len))) {
464             log_perror(srv->errh, __FILE__, __LINE__,
465               "socket activation getsockname()");
466             break;
467         }
468         network_host_normalize_addr_str(host, &addr);
469         rc = network_server_init(srv, s, host, 0, fd);
470         if (0 != rc) break;
471         srv->srv_sockets.ptr[srv->srv_sockets.used-1]->sidx = (unsigned short)~0u;
472     }
473     buffer_free(host);
474     memcpy(&srv->srv_sockets_inherited, &srv->srv_sockets, sizeof(server_socket_array));
475     memset(&srv->srv_sockets, 0, sizeof(server_socket_array));
476     return rc;
477 }
478 
479 static int network_socket_activation_from_env(server *srv, network_socket_config *s) {
480     char *listen_pid = getenv("LISTEN_PID");
481     char *listen_fds = getenv("LISTEN_FDS");
482     pid_t lpid = listen_pid ? (pid_t)strtoul(listen_pid,NULL,10) : 0;
483     int nfds = listen_fds ? atoi(listen_fds) : 0;
484     int rc = (lpid == getpid() && nfds > 0)
485       ? network_socket_activation_nfds(srv, s, nfds)
486       : 0;
487     unsetenv("LISTEN_PID");
488     unsetenv("LISTEN_FDS");
489     unsetenv("LISTEN_FDNAMES");
490     /*(upon graceful restart, unsetenv will result in no-op above)*/
491     return rc;
492 }
493 
494 int network_init(server *srv, int stdin_fd) {
495     /*(network params used during setup (from $SERVER["socket"] condition))*/
496     static const config_plugin_keys_t cpk[] = {
497       { CONST_STR_LEN("ssl.engine"),
498         T_CONFIG_BOOL,
499         T_CONFIG_SCOPE_CONNECTION }
500      ,{ CONST_STR_LEN("server.listen-backlog"),
501         T_CONFIG_INT,
502         T_CONFIG_SCOPE_CONNECTION }
503      ,{ CONST_STR_LEN("server.socket-perms"),
504         T_CONFIG_STRING,
505         T_CONFIG_SCOPE_CONNECTION }
506      ,{ CONST_STR_LEN("server.bsd-accept-filter"),
507         T_CONFIG_STRING,
508         T_CONFIG_SCOPE_CONNECTION }
509      ,{ CONST_STR_LEN("server.defer-accept"),
510         T_CONFIG_BOOL,
511         T_CONFIG_SCOPE_CONNECTION }
512      ,{ CONST_STR_LEN("server.use-ipv6"),
513         T_CONFIG_BOOL,
514         T_CONFIG_SCOPE_CONNECTION }
515      ,{ CONST_STR_LEN("server.set-v6only"),
516         T_CONFIG_BOOL,
517         T_CONFIG_SCOPE_CONNECTION }
518     #if 0 /* TODO: more integration needed ... */
519      ,{ CONST_STR_LEN("mbedtls.engine"),
520         T_CONFIG_BOOL,
521         T_CONFIG_SCOPE_CONNECTION }
522     #endif
523      ,{ NULL, 0,
524         T_CONFIG_UNSET,
525         T_CONFIG_SCOPE_UNSET }
526     };
527 
528   #ifdef __WIN32
529     WSADATA wsaData;
530     WORD wVersionRequested = MAKEWORD(2, 2);
531     if (0 != WSAStartup(wVersionRequested, &wsaData)) {
532         /* Tell the user that we could not find a usable WinSock DLL */
533         return -1;
534     }
535   #endif
536 
537     if (0 != network_write_init(srv)) return -1;
538 
539     network_plugin_data np;
540     memset(&np, 0, sizeof(network_plugin_data));
541     network_plugin_data *p = &np;
542 
543     if (!config_plugin_values_init(srv, p, cpk, "network"))
544         return HANDLER_ERROR;
545 
546     p->defaults.listen_backlog = 1024;
547     p->defaults.defer_accept = 0;
548     p->defaults.use_ipv6 = 0;
549     p->defaults.set_v6only = 1;
550 
551     /* initialize p->defaults from global config context */
552     if (p->nconfig > 0 && p->cvlist->v.u2[1]) {
553         const config_plugin_value_t *cpv = p->cvlist + p->cvlist->v.u2[0];
554         if (-1 != cpv->k_id)
555             network_merge_config(&p->defaults, cpv);
556     }
557 
558     int rc = 0;
559     do {
560 
561         if (srv->srvconf.systemd_socket_activation) {
562             for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
563                 srv->srv_sockets_inherited.ptr[i]->sidx = (unsigned short)~0u;
564             }
565             rc = network_socket_activation_from_env(srv, &p->defaults);
566             if (0 != rc) break;
567             if (0 == srv->srv_sockets_inherited.used) {
568                 srv->srvconf.systemd_socket_activation = 0;
569             }
570         }
571 
572         /* process srv->srvconf.bindhost
573          * (skip if systemd socket activation is enabled and bindhost is empty;
574          *  do not additionally listen on "*") */
575         if (!srv->srvconf.systemd_socket_activation
576             || !buffer_string_is_empty(srv->srvconf.bindhost)) {
577             buffer *b = buffer_init();
578             buffer_copy_buffer(b, srv->srvconf.bindhost);
579             if (b->ptr[0] != '/') { /*(skip adding port if unix socket path)*/
580                 buffer_append_string_len(b, CONST_STR_LEN(":"));
581                 buffer_append_int(b, srv->srvconf.port);
582             }
583 
584             rc = (-1 == stdin_fd || 0 == srv->srv_sockets.used)
585               ? network_server_init(srv, &p->defaults, b, 0, stdin_fd)
586               : close(stdin_fd);/*(graceful restart listening to "/dev/stdin")*/
587             buffer_free(b);
588             if (0 != rc) break;
589         }
590 
591         /* check for $SERVER["socket"] */
592         for (uint32_t i = 1; i < srv->config_context->used; ++i) {
593             config_cond_info cfginfo;
594             config_get_config_cond_info(&cfginfo, i);
595             if (COMP_SERVER_SOCKET != cfginfo.comp) continue;/* not our stage */
596 
597             buffer *host_token;
598             *(const buffer **)&host_token = cfginfo.string;
599             /*(cfginfo.string is modified during config)*/
600 
601             memcpy(&p->conf, &p->defaults, sizeof(network_socket_config));
602             for (int j = !p->cvlist[0].v.u2[1]; j < p->nconfig; ++j) {
603                 if ((int)i != p->cvlist[j].k_id) continue;
604                 const config_plugin_value_t *cpv =
605                   p->cvlist + p->cvlist[j].v.u2[0];
606                 network_merge_config(&p->conf, cpv);
607                 break;
608             }
609 
610             if (cfginfo.cond == CONFIG_COND_EQ) {
611                 rc = network_server_init(srv, &p->conf, host_token, i, -1);
612                 if (0 != rc) break;
613             }
614             else if (cfginfo.cond == CONFIG_COND_NE) {
615                 socklen_t addr_len = sizeof(sock_addr);
616                 sock_addr addr;
617                 rc = network_host_parse_addr(srv, &addr, &addr_len,
618                                              host_token, p->conf.use_ipv6);
619                 if (0 != rc) break;
620                 network_host_normalize_addr_str(host_token, &addr);
621             }
622         }
623         if (0 != rc) break;
624 
625         if (srv->srvconf.systemd_socket_activation) {
626             /* activate any inherited sockets not explicitly listed in config */
627             server_socket *srv_socket;
628             for (uint32_t i = 0; i < srv->srv_sockets_inherited.used; ++i) {
629                     if ((unsigned short)~0u
630                         != srv->srv_sockets_inherited.ptr[i]->sidx)
631                         continue;
632                     srv->srv_sockets_inherited.ptr[i]->sidx = 0;
633                 srv_socket = calloc(1, sizeof(server_socket));
634                 force_assert(NULL != srv_socket);
635                 memcpy(srv_socket, srv->srv_sockets_inherited.ptr[i],
636                        sizeof(server_socket));
637                 network_srv_sockets_append(srv, srv_socket);
638             }
639         }
640 
641     } while (0);
642 
643     free(p->cvlist);
644     return rc;
645 }
646 
647 void network_unregister_sock(server *srv, server_socket *srv_socket) {
648 	fdnode *fdn = srv_socket->fdn;
649 	if (NULL == fdn) return;
650 	fdevent_fdnode_event_del(srv->ev, fdn);
651 	fdevent_unregister(srv->ev, fdn->fd);
652 	srv_socket->fdn = NULL;
653 }
654 
655 int network_register_fdevents(server *srv) {
656 	if (-1 == fdevent_reset(srv->ev)) {
657 		return -1;
658 	}
659 
660 	if (srv->sockets_disabled) return 0; /* lighttpd -1 (one-shot mode) */
661 
662 	/* register fdevents after reset */
663 	for (uint32_t i = 0; i < srv->srv_sockets.used; ++i) {
664 		server_socket *srv_socket = srv->srv_sockets.ptr[i];
665 
666 		srv_socket->fdn = fdevent_register(srv->ev, srv_socket->fd, network_server_handle_fdevent, srv_socket);
667 		fdevent_fdnode_event_set(srv->ev, srv_socket->fdn, FDEVENT_IN);
668 	}
669 	return 0;
670 }
671