LCOV - code coverage report
Current view: top level - src - httpserver.cpp (source / functions) Coverage Total Hit
Test: total_coverage.info Lines: 88.5 % 644 570
Test Date: 2026-09-21 06:12:42 Functions: 98.1 % 54 53
Branches: 57.7 % 1027 593

             Branch data     Line data    Source code
       1                 :             : // Copyright (c) 2015-present The Bitcoin Core developers
       2                 :             : // Distributed under the MIT software license, see the accompanying
       3                 :             : // file COPYING or http://www.opensource.org/licenses/mit-license.php.
       4                 :             : 
       5                 :             : #include <bitcoin-build-config.h> // IWYU pragma: keep
       6                 :             : 
       7                 :             : #include <httpserver.h>
       8                 :             : 
       9                 :             : #include <chainparamsbase.h>
      10                 :             : #include <common/args.h>
      11                 :             : #include <common/messages.h>
      12                 :             : #include <common/url.h>
      13                 :             : #include <compat/compat.h>
      14                 :             : #include <logging.h>
      15                 :             : #include <netbase.h>
      16                 :             : #include <node/interface_ui.h>
      17                 :             : #include <rpc/protocol.h>
      18                 :             : #include <span.h>
      19                 :             : #include <sync.h>
      20                 :             : #include <util/check.h>
      21                 :             : #include <util/signalinterrupt.h>
      22                 :             : #include <util/sock.h>
      23                 :             : #include <util/strencodings.h>
      24                 :             : #include <util/thread.h>
      25                 :             : #include <util/threadnames.h>
      26                 :             : #include <util/threadpool.h>
      27                 :             : #include <util/time.h>
      28                 :             : #include <util/translation.h>
      29                 :             : 
      30                 :             : #include <condition_variable>
      31                 :             : #include <cstdio>
      32                 :             : #include <cstdlib>
      33                 :             : #include <memory>
      34                 :             : #include <optional>
      35                 :             : #include <span>
      36                 :             : #include <string>
      37                 :             : #include <string_view>
      38                 :             : #include <thread>
      39                 :             : #include <unordered_map>
      40                 :             : #include <vector>
      41                 :             : 
      42                 :             : #include <sys/types.h>
      43                 :             : #include <sys/stat.h>
      44                 :             : 
      45                 :             : //! The set of sockets cannot be modified while waiting, so
      46                 :             : //! the sleep time needs to be small to avoid new sockets stalling.
      47                 :             : static constexpr auto SELECT_TIMEOUT{50ms};
      48                 :             : 
      49                 :             : //! Explicit alias for setting socket option methods.
      50                 :             : static constexpr int SOCKET_OPTION_TRUE{1};
      51                 :             : 
      52                 :             : using common::InvalidPortErrMsg;
      53                 :             : using util::LineReader;
      54                 :             : using namespace bitcoin_http;
      55                 :             : 
      56                 :        3691 : struct HTTPPathHandler
      57                 :             : {
      58                 :        2442 :     HTTPPathHandler(std::string _prefix, bool _exactMatch, HTTPRequestHandler _handler):
      59   [ -  +  +  - ]:        4884 :         prefix(_prefix), exactMatch(_exactMatch), handler(_handler)
      60                 :             :     {
      61                 :        2442 :     }
      62                 :             :     std::string prefix;
      63                 :             :     bool exactMatch;
      64                 :             :     HTTPRequestHandler handler;
      65                 :             : };
      66                 :             : 
      67                 :             : /** HTTP module state */
      68                 :             : 
      69                 :             : static std::unique_ptr<HTTPServer> g_http_server{nullptr};
      70                 :             : //! Handlers for (sub)paths
      71                 :             : static GlobalMutex g_httppathhandlers_mutex;
      72                 :             : static std::vector<HTTPPathHandler> pathHandlers GUARDED_BY(g_httppathhandlers_mutex);
      73                 :             : /// \anchor http_pool
      74                 :             : //! Http thread pool - future: encapsulate in HttpContext
      75                 :             : static ThreadPool g_threadpool_http("http");
      76                 :             : static int g_max_queue_depth{100};
      77                 :             : 
      78                 :             : /** Check if a network address is allowed to access the HTTP server */
      79                 :        3285 : bool HTTPServer::ClientAllowed(const CNetAddr& netaddr) const
      80                 :             : {
      81         [ +  - ]:        3285 :     if (!netaddr.IsValid())
      82                 :             :         return false;
      83         [ +  + ]:        3299 :     for(const CSubNet& subnet : m_allow_subnets)
      84         [ +  + ]:        3297 :         if (subnet.Match(netaddr))
      85                 :             :             return true;
      86                 :             :     return false;
      87                 :             : }
      88                 :             : 
      89                 :             : /** Initialize ACL list for HTTP server */
      90                 :        1208 : bool HTTPServer::InitHTTPAllowList()
      91                 :             : {
      92                 :             :     // Must be run before StartSocketThreads() because ThreadSocketHandler()
      93                 :             :     // will check m_allow_subnets from the I/O thread.
      94                 :        1208 :     Assume(!m_thread_socket_handler.joinable());
      95                 :             : 
      96                 :        1208 :     m_allow_subnets.clear();
      97   [ +  -  +  -  :        3624 :     m_allow_subnets.emplace_back(LookupHost("127.0.0.1", false).value(), 8);  // always allow IPv4 local subnet
                   +  - ]
      98   [ +  -  +  -  :        3624 :     m_allow_subnets.emplace_back(LookupHost("::1", false).value());  // always allow IPv6 localhost
                   +  - ]
      99   [ +  -  +  + ]:        1218 :     for (const std::string& strAllow : gArgs.GetArgs("-rpcallowip")) {
     100         [ +  - ]:          10 :         const CSubNet subnet{LookupSubNet(strAllow)};
     101   [ +  -  -  + ]:          10 :         if (!subnet.IsValid()) {
     102         [ #  # ]:           0 :             uiInterface.ThreadSafeMessageBox(
     103         [ #  # ]:           0 :                 Untranslated(strprintf("Invalid -rpcallowip subnet specification: %s. Valid values are a single IP (e.g. 1.2.3.4), a network/netmask (e.g. 1.2.3.4/255.255.255.0), a network/CIDR (e.g. 1.2.3.4/24), all ipv4 (0.0.0.0/0), or all ipv6 (::/0). RFC4193 is allowed only if -cjdnsreachable=0.", strAllow)),
     104         [ #  # ]:           0 :                 CClientUIInterface::MSG_ERROR);
     105                 :           0 :             return false;
     106                 :             :         }
     107         [ +  - ]:          10 :         m_allow_subnets.push_back(subnet);
     108                 :        1218 :     }
     109                 :        1208 :     std::string strAllowed;
     110         [ +  + ]:        3634 :     for (const CSubNet& subnet : m_allow_subnets)
     111   [ +  -  -  + ]:        7278 :         strAllowed += subnet.ToString() + " ";
     112   [ +  -  +  +  :        1208 :     LogDebug(BCLog::HTTP, "Allowing HTTP connections from: %s\n", strAllowed);
                   +  - ]
     113                 :        1208 :     return true;
     114                 :        1208 : }
     115                 :             : 
     116                 :             : /** HTTP request method as string - use for logging only */
     117                 :      217642 : std::string_view RequestMethodString(HTTPRequestMethod m)
     118                 :             : {
     119   [ +  +  -  -  :      217642 :     switch (m) {
                   +  - ]
     120                 :         893 :     using enum HTTPRequestMethod;
     121                 :         893 :     case GET: return "GET";
     122                 :      216744 :     case POST: return "POST";
     123                 :           0 :     case HEAD: return "HEAD";
     124                 :           0 :     case PUT: return "PUT";
     125                 :           5 :     case UNKNOWN: return "unknown";
     126                 :             :     } // no default case, so the compiler can warn about missing cases
     127                 :           0 :     assert(false);
     128                 :             : }
     129                 :             : 
     130                 :         488 : static void WriteNoStoreErrorReply(HTTPRequest& req, HTTPStatusCode status, std::string_view reply = {})
     131                 :             : {
     132   [ +  -  +  - ]:         976 :     req.WriteHeader("Cache-Control", "no-store");
     133                 :         488 :     req.WriteReply(status, reply);
     134                 :         488 : }
     135                 :             : 
     136                 :      217643 : static void MaybeDispatchRequestToWorker(std::shared_ptr<HTTPRequest> hreq)
     137                 :             : {
     138                 :             :     // Early reject unknown HTTP methods
     139         [ +  + ]:      217643 :     if (hreq->GetRequestMethod() == HTTPRequestMethod::UNKNOWN) {
     140   [ +  -  +  -  :           5 :         LogDebug(BCLog::HTTP, "HTTP request from %s rejected: Unknown HTTP request method\n",
                   +  - ]
     141                 :             :                  hreq->GetPeer().ToStringAddrPort());
     142                 :           5 :         WriteNoStoreErrorReply(*hreq, HTTP_BAD_METHOD);
     143                 :           5 :         return;
     144                 :             :     }
     145                 :             : 
     146                 :             :     // Find registered handler for prefix
     147         [ -  + ]:      217638 :     std::string strURI = hreq->GetURI();
     148         [ +  - ]:      217638 :     std::string path;
     149         [ +  - ]:      217638 :     LOCK(g_httppathhandlers_mutex);
     150                 :      217638 :     std::vector<HTTPPathHandler>::const_iterator i = pathHandlers.begin();
     151                 :      217638 :     std::vector<HTTPPathHandler>::const_iterator iend = pathHandlers.end();
     152         [ +  + ]:      245405 :     for (; i != iend; ++i) {
     153                 :      245393 :         bool match = false;
     154         [ +  + ]:      245393 :         if (i->exactMatch)
     155                 :      217638 :             match = (strURI == i->prefix);
     156                 :             :         else
     157   [ -  +  -  + ]:       27755 :             match = strURI.starts_with(i->prefix);
     158         [ +  + ]:      245393 :         if (match) {
     159   [ -  +  +  - ]:      217626 :             path = strURI.substr(i->prefix.size());
     160                 :      217626 :             break;
     161                 :             :         }
     162                 :             :     }
     163                 :             : 
     164                 :             :     // Dispatch to worker thread
     165         [ +  + ]:      217638 :     if (i != iend) {
     166   [ +  -  +  + ]:      217626 :         if (static_cast<int>(g_threadpool_http.WorkQueueSize()) >= g_max_queue_depth) {
     167         [ +  - ]:         454 :             LogWarning("Request rejected because http work queue depth exceeded, it can be increased with the -rpcworkqueue= setting");
     168         [ +  - ]:         454 :             WriteNoStoreErrorReply(*hreq, HTTP_SERVICE_UNAVAILABLE, "Work queue depth exceeded");
     169                 :             :             return;
     170                 :             :         }
     171                 :             : 
     172         [ +  - ]:      217172 :         auto item = [req = hreq, in_path = std::move(path), fn = i->handler]() {
     173         [ +  - ]:      217172 :             std::string err_msg;
     174                 :      217172 :             try {
     175         [ +  - ]:      217172 :                 fn(req.get(), in_path);
     176                 :      217172 :                 return;
     177         [ -  - ]:           0 :             } catch (const std::exception& e) {
     178   [ -  -  -  - ]:           0 :                 LogWarning("Unexpected error while processing request for '%s'. Error msg: '%s'", req->GetURI(), e.what());
     179         [ -  - ]:           0 :                 err_msg = e.what();
     180                 :           0 :             } catch (...) {
     181   [ -  -  -  - ]:           0 :                 LogWarning("Unknown error while processing request for '%s'", req->GetURI());
     182         [ -  - ]:           0 :                 err_msg = "unknown error";
     183         [ -  - ]:           0 :             }
     184                 :             :             // Reply so the client doesn't hang waiting for the response.
     185   [ -  -  -  -  :           0 :             req->WriteHeader("Connection", "close");
                   -  - ]
     186                 :             :             // TODO: Implement specific error formatting for the REST and JSON-RPC servers responses.
     187   [ -  -  -  - ]:           0 :             WriteNoStoreErrorReply(*req, HTTP_INTERNAL_SERVER_ERROR, err_msg);
     188         [ +  - ]:      434344 :         };
     189                 :             : 
     190         [ -  + ]:      217172 :         if (auto res = g_threadpool_http.Submit(std::move(item)); !res.has_value()) {
     191                 :           0 :             Assume(hreq.use_count() == 1); // ensure request will be deleted
     192                 :             :             // Both SubmitError::Inactive and SubmitError::Interrupted mean shutdown
     193         [ #  # ]:           0 :             LogWarning("HTTP request rejected during server shutdown: '%s'", SubmitErrorString(res.error()));
     194         [ #  # ]:           0 :             WriteNoStoreErrorReply(*hreq, HTTP_SERVICE_UNAVAILABLE, "Request rejected during server shutdown");
     195                 :           0 :             return;
     196                 :           0 :         }
     197                 :      217172 :     } else {
     198         [ +  - ]:          12 :         WriteNoStoreErrorReply(*hreq, HTTP_NOT_FOUND);
     199                 :             :     }
     200                 :      217638 : }
     201                 :             : 
     202                 :           0 : static void RejectRequest(std::unique_ptr<HTTPRequest> hreq)
     203                 :             : {
     204         [ #  # ]:           0 :     LogDebug(BCLog::HTTP, "Rejecting request while shutting down");
     205                 :           0 :     WriteNoStoreErrorReply(*hreq, HTTP_SERVICE_UNAVAILABLE);
     206                 :           0 : }
     207                 :             : 
     208                 :        1205 : static std::vector<std::pair<std::string, uint16_t>> GetBindAddresses()
     209                 :             : {
     210                 :        2410 :     uint16_t http_port{static_cast<uint16_t>(gArgs.GetIntArg("-rpcport", BaseParams().RPCPort()))};
     211                 :        1205 :     std::vector<std::pair<std::string, uint16_t>> endpoints;
     212                 :             : 
     213                 :             :     // Determine what addresses to bind to
     214                 :             :     // To prevent misconfiguration and accidental exposure of the RPC
     215                 :             :     // interface, require -rpcallowip and -rpcbind to both be specified
     216                 :             :     // together. If either is missing, ignore both values, bind to localhost
     217                 :             :     // instead, and log warnings.
     218   [ +  -  +  -  :        2424 :     if (gArgs.GetArgs("-rpcallowip").empty() || gArgs.GetArgs("-rpcbind").empty()) { // Default to loopback if not allowing external IPs
          +  +  +  -  +  
          -  +  -  +  +  
          +  +  -  -  -  
                -  -  - ]
     219         [ +  - ]:        1198 :         endpoints.emplace_back("::1", http_port);
     220         [ +  - ]:        1198 :         endpoints.emplace_back("127.0.0.1", http_port);
     221   [ +  -  +  -  :        1198 :         if (!gArgs.GetArgs("-rpcallowip").empty()) {
                   -  + ]
     222         [ #  # ]:           0 :             LogWarning("Option -rpcallowip was specified without -rpcbind; this doesn't usually make sense");
     223                 :             :         }
     224   [ +  -  +  -  :        1198 :         if (!gArgs.GetArgs("-rpcbind").empty()) {
                   -  + ]
     225         [ #  # ]:           0 :             LogWarning("Option -rpcbind was ignored because -rpcallowip was not specified, refusing to allow everyone to connect");
     226                 :             :         }
     227                 :             :     } else { // Specific bind addresses
     228   [ +  -  +  -  :          25 :         for (const std::string& strRPCBind : gArgs.GetArgs("-rpcbind")) {
                   +  + ]
     229                 :          11 :             uint16_t port{http_port};
     230         [ -  + ]:          11 :             std::string host;
     231   [ -  +  +  -  :          11 :             if (!SplitHostPort(strRPCBind, port, host)) {
                   -  + ]
     232   [ #  #  #  #  :           0 :                 LogError("%s\n", InvalidPortErrMsg("-rpcbind", strRPCBind).original);
                   #  # ]
     233                 :           0 :                 return {}; // empty
     234                 :             :             }
     235         [ +  - ]:          11 :             endpoints.emplace_back(host, port);
     236                 :          18 :         }
     237                 :             :     }
     238                 :        1205 :     return endpoints;
     239                 :        1205 : }
     240                 :             : 
     241                 :        2442 : void RegisterHTTPHandler(const std::string &prefix, bool exactMatch, const HTTPRequestHandler &handler)
     242                 :             : {
     243         [ +  + ]:        2442 :     LogDebug(BCLog::HTTP, "Registering HTTP handler for %s (exactmatch %d)\n", prefix, exactMatch);
     244                 :        2442 :     LOCK(g_httppathhandlers_mutex);
     245         [ +  - ]:        2442 :     pathHandlers.emplace_back(prefix, exactMatch, handler);
     246                 :        2442 : }
     247                 :             : 
     248                 :       19984 : void UnregisterHTTPHandler(const std::string &prefix, bool exactMatch)
     249                 :             : {
     250                 :       19984 :     LOCK(g_httppathhandlers_mutex);
     251                 :       19984 :     std::vector<HTTPPathHandler>::iterator i = pathHandlers.begin();
     252                 :       19984 :     std::vector<HTTPPathHandler>::iterator iend = pathHandlers.end();
     253         [ +  + ]:       19984 :     for (; i != iend; ++i)
     254   [ +  -  -  + ]:        2442 :         if (i->prefix == prefix && i->exactMatch == exactMatch)
     255                 :             :             break;
     256         [ +  + ]:       19984 :     if (i != iend)
     257                 :             :     {
     258   [ +  -  +  +  :        2442 :         LogDebug(BCLog::HTTP, "Unregistering HTTP handler for %s (exactmatch %d)\n", prefix, exactMatch);
                   +  - ]
     259                 :        2442 :         pathHandlers.erase(i);
     260                 :             :     }
     261                 :       19984 : }
     262                 :             : 
     263                 :             : using util::Split;
     264                 :             : 
     265                 :     1051198 : std::optional<std::string> HTTPHeaders::FindFirst(const std::string_view key) const
     266                 :             : {
     267         [ +  + ]:     5609137 :     for (const auto& item : m_headers) {
     268   [ -  +  +  + ]:     4993059 :         if (CaseInsensitiveEqual(key, item.first)) {
     269         [ -  + ]:      870240 :             return item.second;
     270                 :             :         }
     271                 :             :     }
     272                 :      616078 :     return std::nullopt;
     273                 :             : }
     274                 :             : 
     275                 :      398884 : std::vector<std::string_view> HTTPHeaders::FindAll(const std::string_view key) const
     276                 :             : {
     277                 :      398884 :     std::vector<std::string_view> ret;
     278         [ +  + ]:     2786260 :     for (const auto& item : m_headers) {
     279   [ -  +  +  -  :     2387376 :         if (CaseInsensitiveEqual(key, item.first)) {
                   +  + ]
     280   [ -  +  +  - ]:     2387376 :             ret.push_back(item.second);
     281                 :             :         }
     282                 :             :     }
     283                 :      398884 :     return ret;
     284                 :           0 : }
     285                 :             : 
     286                 :     1959727 : void HTTPHeaders::Write(std::string&& key, std::string&& value)
     287                 :             : {
     288                 :     1959727 :     m_headers.emplace_back(std::move(key), std::move(value));
     289                 :     1959727 : }
     290                 :             : 
     291                 :        1018 : void HTTPHeaders::RemoveAll(std::string_view key)
     292                 :             : {
     293                 :        1018 :     auto moved = std::ranges::remove_if(m_headers, [key] (auto& pair) {
     294         [ -  + ]:        3062 :         return CaseInsensitiveEqual(key, pair.first);
     295                 :             :     });
     296                 :        1018 :     m_headers.erase(moved.begin(), moved.end());
     297                 :        1018 : }
     298                 :             : 
     299                 :      217709 : bool HTTPHeaders::Read(util::LineReader& reader, bool write)
     300                 :             : {
     301                 :             :     // Headers https://httpwg.org/specs/rfc9110.html#rfc.section.6.3
     302                 :             :     // A sequence of Field Lines https://httpwg.org/specs/rfc9110.html#rfc.section.5.2
     303                 :      217709 :     size_t start{reader.Consumed()};
     304         [ +  + ]:     1522123 :     while (auto maybe_line = reader.ReadLine()) {
     305   [ +  +  +  - ]:     1522109 :         if (reader.Consumed() - start + m_consumed > MAX_HEADERS_SIZE) throw std::runtime_error("HTTP headers exceed size limit");
     306                 :             : 
     307         [ +  + ]:     1522105 :         const std::string_view& line = *maybe_line;
     308                 :             : 
     309                 :             :         // An empty line indicates end of the headers section https://www.rfc-editor.org/rfc/rfc2616#section-4
     310         [ +  + ]:     1522105 :         if (line.empty()) {
     311                 :             :             // Ensure all headers are accounted for in case there is a chunked trailer
     312                 :      217681 :             m_consumed += reader.Consumed() - start;
     313                 :      217681 :             return true;
     314                 :             :         }
     315                 :             : 
     316                 :             :         // "Field values containing CR, LF, or NUL characters are invalid and dangerous"
     317                 :             :         // https://httpwg.org/specs/rfc9110.html#rfc.section.5.5
     318                 :             :         // A sender MUST NOT generate a bare CR (a CR character not immediately followed by LF)
     319                 :             :         // within any protocol elements other than the content.
     320                 :             :         // A recipient of such a bare CR MUST consider that element to be invalid...
     321                 :             :         // https://httpwg.org/specs/rfc9112.html#rfc.section.2.2
     322   [ +  +  +  - ]:     1304424 :         if (line.find_first_of("\r\n\0", 0, 3) != std::string_view::npos) throw std::runtime_error("Header contains invalid character");
     323                 :             : 
     324                 :             :         // Header line must have at least one ":"
     325                 :             :         // keys are not allowed to have delimiters like ":" but values are
     326                 :             :         // https://httpwg.org/specs/rfc9110.html#rfc.section.5.6.2
     327                 :     1304421 :         const size_t pos{line.find(':')};
     328   [ +  +  +  - ]:     1304421 :         if (pos == std::string_view::npos) throw std::runtime_error("HTTP header missing colon (:)");
     329                 :             : 
     330                 :             :         // Whitespace is strictly not allowed in the field-name (key)
     331                 :             :         // https://www.rfc-editor.org/rfc/rfc9110.html#section-5.6.2
     332                 :     1304417 :         std::string_view key = line.substr(0, pos);
     333   [ +  +  +  - ]:     1304417 :         if (key.find_first_of(" \t\n\r\f\v") != std::string_view::npos) throw std::runtime_error("Invalid header field-name contains whitespace");
     334                 :             :         // Whitespace is optional in the value and can be trimmed
     335                 :     1304415 :         std::string value = util::TrimString(std::string_view(line).substr(pos + 1));
     336                 :             : 
     337                 :             :         // Header keys are Field Names: https://httpwg.org/specs/rfc9110.html#fields.names
     338                 :             :         // which consist of "tokens": https://httpwg.org/specs/rfc9110.html#rfc.section.5.6.2
     339                 :             :         // that can not be empty.
     340   [ +  +  +  - ]:     1304415 :         if (key.empty()) throw std::runtime_error("Empty HTTP header name");
     341                 :             : 
     342         [ +  + ]:     1304414 :         if (write) {
     343   [ +  -  +  - ]:     2608822 :             Write(std::string(key), std::move(value));
     344                 :             :         }
     345                 :     1304414 :     }
     346                 :             : 
     347                 :             :     // We have not received all the request headers yet.
     348                 :             :     // Keep track of how much data we have already consumed to enforce
     349                 :             :     // the total limit over multiple read operations.
     350                 :          14 :     m_consumed += reader.Consumed() - start;
     351                 :             : 
     352                 :          14 :     return false;
     353                 :             : }
     354                 :             : 
     355                 :      217665 : std::string HTTPHeaders::Stringify() const
     356                 :             : {
     357                 :      217665 :     std::string out;
     358   [ +  -  +  + ]:      872974 :     for (const auto& [key, value] : m_headers) {
     359   [ +  -  +  -  :     1965927 :         out += key + ": " + value + "\r\n";
                   -  + ]
     360                 :             :     }
     361                 :             : 
     362                 :             :     // Headers are terminated by an empty line
     363         [ +  - ]:      217665 :     out += "\r\n";
     364                 :             : 
     365                 :      217665 :     return out;
     366                 :           0 : }
     367                 :             : 
     368                 :      217664 : std::string HTTPResponse::StringifyHeaders() const
     369                 :             : {
     370                 :      217664 :     return strprintf("HTTP/%d.%d %d %s\r\n%s",
     371                 :      217664 :                      version.major,
     372                 :      217664 :                      version.minor,
     373                 :      217664 :                      status,
     374                 :      217664 :                      HTTPStatusReasonString(status),
     375         [ +  - ]:      435328 :                      headers.Stringify());
     376                 :             : }
     377                 :             : 
     378                 :      217700 : bool HTTPRequest::LoadControlData(LineReader& reader)
     379                 :             : {
     380                 :      217700 :     auto maybe_line = reader.ReadLine();
     381         [ +  - ]:      217698 :     if (!maybe_line) return false;
     382         [ +  + ]:      217698 :     const std::string_view& request_line = *maybe_line;
     383                 :             : 
     384                 :             :     // Request Line aka Control Data https://httpwg.org/specs/rfc9110.html#rfc.section.6.2
     385                 :             :     // Three words separated by spaces, terminated by \n or \r\n
     386   [ +  +  +  - ]:      217698 :     if (request_line.length() < MIN_REQUEST_LINE_LENGTH) throw std::runtime_error("HTTP request line too short");
     387                 :             : 
     388                 :             :     // NUL is not a valid tchar and would silently truncate
     389                 :             :     // C-string-based parsers rather than being rejected as malformed.
     390                 :             :     // tchar: https://www.rfc-editor.org/info/rfc7230/#section-3.2.6
     391   [ +  +  +  - ]:      217694 :     if (request_line.find('\0') != std::string_view::npos) throw std::runtime_error("Invalid request line contains NUL");
     392                 :             : 
     393                 :      217692 :     const std::vector<std::string_view> parts{Split<std::string_view>(request_line, " ")};
     394   [ -  +  +  +  :      217692 :     if (parts.size() != 3) throw std::runtime_error("HTTP request line malformed");
                   +  - ]
     395                 :             : 
     396         [ +  + ]:      217691 :     if (parts[0] == "GET") {
     397                 :         919 :         m_method = HTTPRequestMethod::GET;
     398         [ +  + ]:      216772 :     } else if (parts[0] == "POST") {
     399                 :      216767 :         m_method = HTTPRequestMethod::POST;
     400         [ -  + ]:           5 :     } else if (parts[0] == "HEAD") {
     401                 :           0 :         m_method = HTTPRequestMethod::HEAD;
     402         [ -  + ]:           5 :     } else if (parts[0] == "PUT") {
     403                 :           0 :         m_method = HTTPRequestMethod::PUT;
     404                 :             :     } else {
     405                 :           5 :         m_method = HTTPRequestMethod::UNKNOWN;
     406                 :             :     }
     407                 :             : 
     408         [ +  - ]:      217691 :     m_target = parts[1];
     409                 :             : 
     410   [ +  +  +  - ]:      217691 :     if (parts[2].rfind("HTTP/") != 0) throw std::runtime_error("HTTP request line malformed");
     411                 :             : 
     412                 :             :     // Version is exactly two decimal digits separated by a decimal point
     413                 :             :     // https://httpwg.org/specs/rfc9110.html#rfc.section.2.5
     414   [ +  -  +  - ]:      217690 :     const std::vector<std::string_view> version_parts{Split<std::string_view>(parts[2].substr(5), ".")};
     415   [ -  +  +  +  :      217690 :     if (version_parts.size() != 2) throw std::runtime_error("HTTP request line malformed");
                   +  - ]
     416   [ +  +  +  +  :      217689 :     if (version_parts[0].size() != 1 || version_parts[1].size() != 1) throw std::runtime_error("HTTP bad version");
                   +  - ]
     417                 :      217687 :     auto major = ToIntegral<uint8_t>(version_parts[0]);
     418                 :      217687 :     auto minor = ToIntegral<uint8_t>(version_parts[1]);
     419   [ +  -  +  +  :      217687 :     if (!major || !minor || major != 1 || minor > 9) throw std::runtime_error("HTTP bad version");
          +  +  +  -  +  
                      - ]
     420                 :      217683 :     m_version.major = major.value();
     421                 :      217683 :     m_version.minor = minor.value();
     422                 :             : 
     423                 :      217683 :     return true;
     424                 :      217690 : }
     425                 :             : 
     426                 :      217689 : bool HTTPRequest::LoadHeaders(LineReader& reader)
     427                 :             : {
     428                 :      217689 :     return m_headers.Read(reader);
     429                 :             : }
     430                 :             : 
     431                 :      399557 : bool HTTPRequest::LoadBody(LineReader& reader)
     432                 :             : {
     433                 :             :     // https://httpwg.org/specs/rfc9112.html#message.body
     434                 :      399557 :     auto transfer_encoding_header = m_headers.FindFirst("Transfer-Encoding");
     435   [ +  +  -  +  :      400231 :     if (transfer_encoding_header && ToLower(transfer_encoding_header.value()) == "chunked") {
          +  -  +  -  +  
                      + ]
     436                 :             :         // Transfer-Encoding: https://datatracker.ietf.org/doc/html/rfc7230.html#section-3.3.1
     437                 :             :         // Chunked Transfer Coding: https://datatracker.ietf.org/doc/html/rfc7230.html#section-4.1
     438                 :             :         // see evhttp_handle_chunked_read() in libevent http.c
     439   [ +  -  +  + ]:        1346 :         while (reader.Remaining() > 0) {
     440         [ +  + ]:         689 :             if (!m_chunk_size) {
     441         [ +  - ]:          33 :                 auto maybe_chunk_size = reader.ReadLine();
     442         [ +  - ]:          33 :                 if (!maybe_chunk_size) return false;
     443                 :             : 
     444                 :             :                 // Allow (but ignore) Chunk Extensions
     445                 :             :                 // See https://www.rfc-editor.org/rfc/rfc9112.html#name-chunk-extensions
     446         [ +  + ]:          33 :                 std::string_view chunk_size_noext{maybe_chunk_size.value()};
     447                 :          33 :                 const auto semicolon_pos = chunk_size_noext.find(';');
     448         [ +  + ]:          33 :                 if (semicolon_pos != chunk_size_noext.npos) {
     449                 :           3 :                     chunk_size_noext.remove_suffix(chunk_size_noext.size() - semicolon_pos);
     450                 :             :                 }
     451                 :             : 
     452         [ +  - ]:          33 :                 m_chunk_size = ToIntegral<uint64_t>(util::TrimStringView(chunk_size_noext), /*base=*/16);
     453   [ +  +  +  - ]:          33 :                 if (!m_chunk_size) throw std::runtime_error("Cannot parse chunk length value");
     454                 :             : 
     455   [ -  +  +  -  :          32 :                 if ((m_body.size() > MAX_BODY_SIZE) ||
                   +  + ]
     456         [ +  + ]:          32 :                     (*m_chunk_size > MAX_BODY_SIZE - m_body.size()))
     457         [ +  - ]:           3 :                     throw ContentTooLargeError("Chunk will exceed max body size");
     458                 :             :             }
     459                 :             : 
     460                 :             :             // We either just read the chunk size, or we have it saved
     461                 :             :             // from a prior I/O loop iteration
     462         [ +  + ]:         685 :             Assume(m_chunk_size);
     463                 :             : 
     464                 :             :             // Last chunk has size 0
     465         [ +  + ]:         685 :             if (*m_chunk_size == 0) {
     466                 :             :                 // Validate Chunked Trailer section, which is used for
     467                 :             :                 // additional headers sent at the end of the message.
     468                 :             :                 // Data consumed here is counted towards MAX_HEADERS_SIZE
     469                 :             :                 // along with the headers we read in the beginning of the request.
     470                 :             :                 // At this time we ignore and drop these data after validating.
     471                 :             :                 // See https://httpwg.org/specs/rfc9112.html#rfc.section.7.1.2
     472         [ +  + ]:          11 :                 return m_headers.Read(reader, /*write=*/false);
     473                 :             :             }
     474                 :             : 
     475                 :             :             // We have not read the entire chunk from the buffer yet
     476         [ +  + ]:         674 :             if (m_chunk_read < *m_chunk_size) {
     477                 :             :                 // Get what we can from the buffer
     478         [ +  - ]:         673 :                 const uint64_t chunk_need{*m_chunk_size - m_chunk_read};
     479   [ +  -  +  + ]:         673 :                 const uint64_t buffer_has{std::min(chunk_need, static_cast<uint64_t>(reader.Remaining()))};
     480                 :             : 
     481                 :             :                 // Pack [partial] chunk onto body and update state
     482   [ +  -  +  - ]:         673 :                 m_body += reader.ReadLength(buffer_has);
     483                 :         673 :                 m_chunk_read += buffer_has;
     484                 :             :             }
     485                 :             : 
     486                 :             :             // Even though every chunk size is explicitly declared,
     487                 :             :             // they are still terminated by a CRLF we don't need,
     488                 :             :             // just consume it here.
     489         [ +  + ]:         674 :             if (m_chunk_read == *m_chunk_size) {
     490         [ +  - ]:          23 :                 auto crlf = reader.ReadLine();
     491         [ +  + ]:          23 :                 if (!crlf) {
     492                 :             :                     // CRLF not found before end of buffer: it has not been received by our socket yet.
     493                 :             :                     return false;
     494                 :             :                 }
     495                 :             :                 // CRLF was found but there was unexpected data after the chunk_sized chunk
     496   [ +  +  +  - ]:          22 :                 if (!crlf.value().empty()) throw std::runtime_error("Improperly terminated chunk");
     497                 :             : 
     498                 :             :                 // Clear state for next chunk
     499         [ +  - ]:          21 :                 m_chunk_size.reset();
     500                 :          21 :                 m_chunk_read = 0;
     501                 :             :             }
     502                 :             :         }
     503                 :             : 
     504                 :             :         // We read all the chunks but never got the last chunk, wait for client to send more
     505                 :             :         return false;
     506                 :             :     } else {
     507                 :             :         // No Content-length or Transfer-Encoding header means no body, see libevent evhttp_get_body()
     508         [ +  - ]:      398883 :         auto content_length_values{m_headers.FindAll("Content-Length")};
     509         [ +  + ]:      398883 :         if (content_length_values.empty()) return true;
     510                 :             : 
     511                 :             :         // Duplicate Content-Length headers are allowed only if they all have the same value
     512                 :             :         // https://www.rfc-editor.org/rfc/rfc7230#section-3.3.3
     513                 :      397997 :         const auto& first_content_length_value{content_length_values[0]};
     514   [ -  +  +  + ]:      397998 :         for (size_t i = 1; i < content_length_values.size(); ++i) {
     515   [ +  +  +  - ]:           3 :             if (content_length_values[i] != first_content_length_value) throw std::runtime_error("Differing Content-Length values");
     516                 :             :         }
     517                 :             : 
     518                 :      397995 :         const auto content_length{ToIntegral<uint64_t>(first_content_length_value)};
     519   [ +  +  +  - ]:      397995 :         if (!content_length) throw std::runtime_error("Cannot parse Content-Length value");
     520                 :             : 
     521   [ +  +  +  - ]:      397993 :         if (*content_length > MAX_BODY_SIZE) throw ContentTooLargeError("Max body size exceeded");
     522                 :             : 
     523                 :             :         // A large body may arrive over multiple I/O loop iterations. Copy
     524                 :             :         // whatever the buffer has now; m_body's size tracks our progress.
     525         [ -  + ]:      397991 :         const uint64_t body_need{*content_length - m_body.size()};
     526   [ +  -  +  + ]:      397991 :         const uint64_t buffer_has{std::min(body_need, static_cast<uint64_t>(reader.Remaining()))};
     527                 :             : 
     528                 :             :         // Pack [partial] body on and update state
     529   [ +  -  +  - ]:      397991 :         m_body += reader.ReadLength(buffer_has);
     530                 :             : 
     531         [ -  + ]:      397991 :         return m_body.size() == *content_length;
     532                 :      398883 :     }
     533                 :      399545 : }
     534                 :             : 
     535                 :      217665 : void HTTPRequest::WriteReply(HTTPStatusCode status, std::span<const std::byte> reply_body)
     536                 :             : {
     537                 :      217665 :     HTTPResponse res;
     538                 :             : 
     539                 :             :     // Some response headers are determined in advance and stored in the request
     540                 :      217665 :     res.headers = std::move(m_response_headers);
     541                 :             : 
     542                 :             :     // Response version matches request version
     543                 :      217665 :     res.version = m_version;
     544                 :             : 
     545                 :             :     // Add response code
     546                 :      217665 :     res.status = status;
     547                 :             : 
     548                 :             :     // See libevent evhttp_response_needs_body()
     549                 :             :     // Response headers are different if no body is needed
     550                 :      217665 :     bool needs_body{status != HTTP_NO_CONTENT && (status < 100 || status >= 200)};
     551                 :      217665 :     bool needs_content_length{false};
     552                 :             : 
     553                 :      217665 :     bool keep_alive{false};
     554                 :             : 
     555                 :             :     // See libevent evhttp_make_header_response()
     556                 :             :     // Expected response headers depend on protocol version
     557         [ +  - ]:      217665 :     if (m_version.major == 1) {
     558                 :             :         // HTTP/1.0
     559         [ +  + ]:      217665 :         if (m_version.minor == 0) {
     560         [ +  - ]:           5 :             auto connection_header{m_headers.FindFirst("Connection")};
     561   [ -  +  -  -  :           5 :             if (connection_header && ToLower(connection_header.value()) == "keep-alive") {
          -  -  -  -  -  
                      + ]
     562   [ #  #  #  #  :           0 :                 res.headers.Write("Connection", "keep-alive");
                   #  # ]
     563                 :           0 :                 keep_alive = true;
     564                 :             :                 // HTTP/1.0 connections are closed by default so EOF is sufficient
     565                 :             :                 // to indicate end of the body. Adding Content-Length a special case.
     566         [ #  # ]:           0 :                 if (needs_body) needs_content_length = true;
     567                 :             :             }
     568                 :           5 :         }
     569                 :             : 
     570                 :             :         // HTTP/1.1
     571         [ +  + ]:      217665 :         if (m_version.minor >= 1) {
     572                 :      217660 :             const int64_t now_seconds{TicksSinceEpoch<std::chrono::seconds>(NodeClock::now())};
     573   [ +  -  +  -  :      435320 :             res.headers.Write("Date", FormatRFC1123DateTime(now_seconds));
                   +  - ]
     574                 :             : 
     575                 :             :             // HTTP/1.1 connections are kept alive by default and always require Content-Length.
     576         [ +  + ]:      217660 :             if (needs_body) needs_content_length = true;
     577                 :             : 
     578                 :             :             // Default for HTTP/1.1
     579                 :             :             keep_alive = true;
     580                 :             :         }
     581                 :             :     }
     582                 :             : 
     583         [ -  + ]:           8 :     if (needs_content_length) {
     584   [ +  -  +  -  :      435314 :         res.headers.Write("Content-Length", util::ToString(reply_body.size()));
                   +  - ]
     585                 :             :     }
     586                 :             : 
     587   [ +  +  +  -  :      435327 :     if (needs_body && !res.headers.FindFirst("Content-Type")) {
             +  +  +  + ]
     588                 :             :         // Default type from libevent evhttp_new_object()
     589   [ +  -  +  -  :        1248 :         res.headers.Write("Content-Type", "text/html; charset=ISO-8859-1");
                   +  - ]
     590                 :             :     }
     591                 :             : 
     592         [ +  - ]:      217665 :     auto connection_header{m_headers.FindFirst("Connection")};
     593   [ +  +  -  +  :      218769 :     if (connection_header && ToLower(connection_header.value()) == "close") {
          +  -  +  +  +  
                      + ]
     594                 :             :         // Might not exist already but we need to replace it, not append to it
     595         [ +  - ]:        1017 :         res.headers.RemoveAll("Connection");
     596                 :             : 
     597   [ +  -  +  -  :        2034 :         res.headers.Write("Connection", "close");
                   +  - ]
     598                 :        1017 :         keep_alive = false;
     599                 :             :     }
     600                 :             : 
     601         [ +  + ]:      217665 :     if (std::shared_ptr client{m_client.lock()}) {
     602         [ +  - ]:      217663 :         client->Send(res, reply_body, keep_alive);
     603                 :      217665 :     }
     604                 :      217665 : }
     605                 :             : 
     606                 :      217663 : void HTTPRemoteClient::Send(const HTTPResponse& res, std::span<const std::byte> reply_body, bool keep_alive)
     607                 :             : {
     608                 :      217663 :     m_keep_alive = keep_alive;
     609                 :             : 
     610                 :             :     // Serialize the response headers
     611                 :      217663 :     const std::string headers{res.StringifyHeaders()};
     612   [ -  +  +  - ]:      217663 :     const auto headers_bytes{std::as_bytes(std::span{headers})};
     613                 :             : 
     614                 :      217663 :     bool send_buffer_was_empty{false};
     615                 :             :     // Fill the send buffer with the complete serialized response headers + body
     616                 :      217663 :     {
     617         [ +  - ]:      217663 :         LOCK(m_send_mutex);
     618                 :      217663 :         send_buffer_was_empty = m_send_buffer.empty();
     619         [ +  - ]:      217663 :         m_send_buffer.insert(m_send_buffer.end(), headers_bytes.begin(), headers_bytes.end());
     620                 :             : 
     621                 :             :         // We've been using std::span up until now but it is finally time to copy
     622                 :             :         // data. The original data will go out of scope when WriteReply() returns.
     623                 :             :         // This is analogous to the memcpy() in libevent's evbuffer_add()
     624         [ +  - ]:      217663 :         m_send_buffer.insert(m_send_buffer.end(), reply_body.begin(), reply_body.end());
     625                 :             : 
     626                 :             :         // If the buffer already held data, the I/O thread is (or soon will be)
     627                 :             :         // draining it, so flag that there is more data to send. This must happen
     628                 :             :         // while holding m_send_mutex and while the buffer is known non-empty:
     629                 :             :         // setting m_send_ready after releasing the lock would race with the I/O
     630                 :             :         // thread draining the buffer to empty and clearing m_send_ready in
     631                 :             :         // between, leaving m_send_ready set on an empty buffer. The I/O loop would
     632                 :             :         // then only ever poll the socket for writeability, never read the client's
     633                 :             :         // next request, and wedge the connection.
     634         [ +  + ]:      217663 :         if (!send_buffer_was_empty) m_send_ready = true;
     635                 :           0 :     }
     636                 :             : 
     637   [ +  -  +  +  :      217663 :     LogDebug(
                   +  - ]
     638                 :             :         BCLog::HTTP,
     639                 :             :         "HTTPResponse (status code: %d size: %lld) added to send buffer for client %s (id=%llu)",
     640                 :             :         res.status,
     641                 :             :         headers_bytes.size() + reply_body.size(),
     642                 :             :         m_origin,
     643                 :             :         m_id);
     644                 :             : 
     645                 :             :     // If the send buffer was empty before we wrote this reply, we can try an
     646                 :             :     // optimistic send akin to CConnman::PushMessage() in which we
     647                 :             :     // push the data directly out the socket to client right now, instead
     648                 :             :     // of waiting for the next iteration of the I/O loop.
     649         [ +  + ]:      217663 :     if (send_buffer_was_empty) {
     650         [ +  - ]:      217658 :         MaybeSendBytesFromBuffer();
     651                 :             :     }
     652                 :             : 
     653                 :             :     // Signal to the I/O loop that we are ready to handle the next request.
     654                 :      217663 :     m_req_busy = false;
     655                 :      217663 : }
     656                 :             : 
     657                 :      216293 : CService HTTPRequest::GetPeer() const
     658                 :             : {
     659         [ +  + ]:      216293 :     if (std::shared_ptr c{m_client.lock()}) {
     660                 :      216291 :         return c->GetPeer();
     661                 :             :     } else {
     662         [ +  - ]:           2 :         return {};
     663                 :      216293 :     }
     664                 :             : }
     665                 :             : 
     666                 :          93 : std::optional<std::string> HTTPRequest::GetQueryParameter(const std::string_view key) const
     667                 :             : {
     668         [ -  + ]:          93 :     return GetQueryParameterFromUri(m_target, key);
     669                 :             : }
     670                 :             : 
     671                 :             : // See libevent http.c evhttp_parse_query_impl()
     672                 :             : // and https://www.rfc-editor.org/rfc/rfc3986#section-3.4
     673                 :         107 : std::optional<std::string> GetQueryParameterFromUri(const std::string_view uri, const std::string_view key)
     674                 :             : {
     675                 :             :     // find query in URI
     676                 :         107 :     size_t start = uri.find('?');
     677         [ +  + ]:         107 :     if (start == std::string::npos) return std::nullopt;
     678                 :          97 :     size_t end = uri.find('#', start);
     679         [ +  - ]:          97 :     if (end == std::string::npos) {
     680                 :          97 :         end = uri.length();
     681                 :             :     }
     682                 :          97 :     const std::string_view query{uri.data() + start + 1, end - start - 1};
     683                 :             :     // find requested parameter in query
     684                 :          97 :     const std::vector<std::string_view> params{Split<std::string_view>(query, "&")};
     685         [ +  + ]:         136 :     for (const std::string_view& param : params) {
     686                 :         124 :         size_t delim = param.find('=');
     687   [ +  -  +  -  :         248 :         if (key == UrlDecode(param.substr(0, delim))) {
                   +  + ]
     688         [ -  + ]:          85 :             if (delim == std::string::npos) {
     689         [ #  # ]:           0 :                 return "";
     690                 :             :             } else {
     691   [ +  -  +  - ]:         170 :                 return std::string(UrlDecode(param.substr(delim + 1)));
     692                 :             :             }
     693                 :             :         }
     694                 :             :     }
     695                 :          12 :     return std::nullopt;
     696                 :          97 : }
     697                 :             : 
     698                 :      216296 : std::optional<std::string> HTTPRequest::GetHeader(const std::string_view hdr) const
     699                 :             : {
     700                 :      216296 :     return m_headers.FindFirst(hdr);
     701                 :             : }
     702                 :             : 
     703                 :      218352 : void HTTPRequest::WriteHeader(std::string&& hdr, std::string&& value)
     704                 :             : {
     705                 :      218352 :     m_response_headers.Write(std::move(hdr), std::move(value));
     706                 :      218352 : }
     707                 :             : 
     708                 :        2411 : util::Expected<void, std::string> HTTPServer::BindAndStartListening(const CService& to)
     709                 :             : {
     710                 :             :     // Create socket for listening for incoming connections
     711                 :        2411 :     sockaddr_storage storage;
     712                 :        2411 :     auto sa = reinterpret_cast<sockaddr*>(&storage);
     713                 :        2411 :     socklen_t len{sizeof(storage)};
     714         [ +  + ]:        2411 :     if (!to.GetSockAddr(sa, &len)) {
     715         [ +  - ]:           2 :         return util::Unexpected{strprintf("Bind address family for %s not supported", to.ToStringAddrPort())};
     716                 :             :     }
     717                 :             : 
     718                 :        2410 :     std::unique_ptr<Sock> sock{CreateSock(to.GetSAFamily(), SOCK_STREAM, IPPROTO_TCP)};
     719         [ -  + ]:        2410 :     if (!sock) {
     720         [ #  # ]:           0 :         return util::Unexpected{strprintf("Cannot create %s listen socket: %s",
     721         [ #  # ]:           0 :                                           to.ToStringAddrPort(),
     722         [ #  # ]:           0 :                                           NetworkErrorString(WSAGetLastError()))};
     723                 :             :     }
     724                 :             : 
     725                 :             : #ifdef WIN32
     726                 :             :     // Prevent another application from binding to the same address and port and
     727                 :             :     // intercepting RPC credentials.
     728                 :             :     // SO_REUSEADDR on Windows is non-exclusive so another process could bind to
     729                 :             :     // the same port.
     730                 :             :     if (sock->SetSockOpt(SOL_SOCKET, SO_EXCLUSIVEADDRUSE, &SOCKET_OPTION_TRUE, sizeof(SOCKET_OPTION_TRUE)) == SOCKET_ERROR) {
     731                 :             :         return util::Unexpected{strprintf("Cannot set SO_EXCLUSIVEADDRUSE on %s listen socket: %s",
     732                 :             :                                           to.ToStringAddrPort(),
     733                 :             :                                           NetworkErrorString(WSAGetLastError()))};
     734                 :             :     }
     735                 :             : #else
     736                 :             :     // Allow binding if the port is still in TIME_WAIT state after
     737                 :             :     // the program was closed and restarted.
     738   [ +  -  -  + ]:        2410 :     if (sock->SetSockOpt(SOL_SOCKET, SO_REUSEADDR, &SOCKET_OPTION_TRUE, sizeof(SOCKET_OPTION_TRUE)) == SOCKET_ERROR) {
     739   [ #  #  #  #  :           0 :         LogDebug(BCLog::HTTP,
          #  #  #  #  #  
                      # ]
     740                 :             :                  "Cannot set SO_REUSEADDR on %s listen socket: %s, continuing anyway",
     741                 :             :                  to.ToStringAddrPort(),
     742                 :             :                  NetworkErrorString(WSAGetLastError()));
     743                 :             :     }
     744                 :             : #endif
     745                 :             : 
     746                 :             :     // some systems don't have IPV6_V6ONLY but are always v6only; others do have the option
     747                 :             :     // and enable it by default or not. Try to enable it, if possible.
     748         [ +  + ]:        2410 :     if (to.IsIPv6()) {
     749                 :             : #ifdef IPV6_V6ONLY
     750   [ +  -  -  + ]:        1198 :         if (sock->SetSockOpt(IPPROTO_IPV6, IPV6_V6ONLY, &SOCKET_OPTION_TRUE, sizeof(SOCKET_OPTION_TRUE)) == SOCKET_ERROR) {
     751   [ #  #  #  #  :           0 :             LogDebug(BCLog::HTTP,
          #  #  #  #  #  
                      # ]
     752                 :             :                      "Cannot set IPV6_V6ONLY on %s listen socket: %s, continuing anyway",
     753                 :             :                      to.ToStringAddrPort(),
     754                 :             :                      NetworkErrorString(WSAGetLastError()));
     755                 :             :         }
     756                 :             : #endif
     757                 :             : #ifdef WIN32
     758                 :             :         int prot_level{PROTECTION_LEVEL_UNRESTRICTED};
     759                 :             :         if (sock->SetSockOpt(IPPROTO_IPV6,
     760                 :             :                              IPV6_PROTECTION_LEVEL,
     761                 :             :                              &prot_level,
     762                 :             :                              sizeof(prot_level)) == SOCKET_ERROR) {
     763                 :             :             LogDebug(BCLog::HTTP,
     764                 :             :                      "Cannot set IPV6_PROTECTION_LEVEL on %s listen socket: %s, continuing anyway",
     765                 :             :                      to.ToStringAddrPort(),
     766                 :             :                      NetworkErrorString(WSAGetLastError()));
     767                 :             :         }
     768                 :             : #endif
     769                 :             :     }
     770                 :             : 
     771   [ +  -  -  + ]:        2410 :     if (sock->Bind(sa, len) == SOCKET_ERROR) {
     772                 :           0 :         const int err{WSAGetLastError()};
     773         [ #  # ]:           0 :         if (err == WSAEADDRINUSE) {
     774         [ #  # ]:           0 :             return util::Unexpected{strprintf("Unable to bind to %s on this computer. %s is probably already running.",
     775         [ #  # ]:           0 :                                               to.ToStringAddrPort(),
     776                 :           0 :                                               CLIENT_NAME)};
     777                 :             :         } else {
     778         [ #  # ]:           0 :             return util::Unexpected{strprintf("Unable to bind to %s on this computer (bind returned error %s)",
     779         [ #  # ]:           0 :                                               to.ToStringAddrPort(),
     780         [ #  # ]:           0 :                                               NetworkErrorString(err))};
     781                 :             :         }
     782                 :             :     }
     783                 :             : 
     784                 :             :     // Listen for incoming connections
     785   [ +  -  -  + ]:        2410 :     if (sock->Listen(SOMAXCONN) == SOCKET_ERROR) {
     786         [ #  # ]:           0 :         return util::Unexpected{strprintf("Cannot listen on %s: %s",
     787         [ #  # ]:           0 :                                           to.ToStringAddrPort(),
     788         [ #  # ]:           0 :                                           NetworkErrorString(WSAGetLastError()))};
     789                 :             :     }
     790                 :             : 
     791         [ +  - ]:        2410 :     m_listen.emplace_back(std::move(sock));
     792                 :             : 
     793                 :        2410 :     return {};
     794                 :        2410 : }
     795                 :             : 
     796                 :        1208 : void HTTPServer::StopListening()
     797                 :             : {
     798                 :        1208 :     m_listen.clear();
     799                 :        1208 : }
     800                 :             : 
     801                 :        1196 : void HTTPServer::StartSocketsThreads()
     802                 :             : {
     803                 :             :     // The socket handler reads m_allow_subnets in ClientAllowed(). InitHTTPAllowList()
     804                 :             :     // must have populated it first; localhost entries are always added, so an empty
     805                 :             :     // list means it was never called and every connection is rejected.
     806                 :        1196 :     Assume(!m_allow_subnets.empty());
     807                 :             : 
     808                 :        1196 :     m_thread_socket_handler = std::thread(&util::TraceThread,
     809                 :             :                                           "http",
     810                 :        2392 :                                           [this] { ThreadSocketHandler(); });
     811                 :        1196 : }
     812                 :             : 
     813                 :        1208 : void HTTPServer::JoinSocketsThreads()
     814                 :             : {
     815         [ +  + ]:        1208 :     if (m_thread_socket_handler.joinable()) {
     816                 :        1196 :         m_thread_socket_handler.join();
     817                 :             :     }
     818                 :        1208 : }
     819                 :             : 
     820                 :        6526 : std::unique_ptr<Sock> HTTPServer::AcceptConnection(const Sock& listen_sock, CService& addr)
     821                 :             : {
     822                 :             :     // Make sure we only operate on our own listening sockets
     823         [ +  + ]:       19561 :     Assume(std::ranges::any_of(m_listen, [&](const auto& sock) { return sock.get() == &listen_sock; }));
     824                 :             : 
     825                 :        6526 :     sockaddr_storage storage;
     826                 :        6526 :     socklen_t len{sizeof(storage)};
     827                 :        6526 :     auto sa = reinterpret_cast<sockaddr*>(&storage);
     828                 :             : 
     829                 :        6526 :     auto sock{listen_sock.Accept(sa, &len)};
     830                 :             : 
     831         [ +  + ]:        6526 :     if (!sock) {
     832                 :        3241 :         const int err{WSAGetLastError()};
     833         [ -  + ]:        3241 :         if (err != WSAEWOULDBLOCK) {
     834   [ #  #  #  #  :           0 :             LogDebug(BCLog::HTTP,
             #  #  #  # ]
     835                 :             :                      "Cannot accept new connection: %s",
     836                 :             :                      NetworkErrorString(err));
     837                 :             :         }
     838                 :        3241 :         return {};
     839                 :             :     }
     840                 :             : 
     841                 :             :     // The OS handed us a valid socket but we can't determine its source address.
     842   [ +  -  -  + ]:        3285 :     if (!addr.SetSockAddr(sa, len)) {
     843   [ #  #  #  #  :           0 :         LogDebug(BCLog::HTTP,
                   #  # ]
     844                 :             :                  "Unknown socket family");
     845                 :             :     }
     846                 :             : 
     847                 :             :     // Early address-based allow check
     848   [ +  -  +  + ]:        3285 :     if (!ClientAllowed(addr)) {
     849   [ +  -  +  -  :           2 :         LogDebug(BCLog::HTTP, "Connection from %s rejected: Client network is not allowed HTTP access\n",
             +  -  +  - ]
     850                 :             :                  addr.ToStringAddrPort());
     851                 :             :         // Socket destroyed, connection aborted
     852                 :           2 :         return {};
     853                 :             :     }
     854                 :             : 
     855                 :        3283 :     return sock;
     856                 :        6526 : }
     857                 :             : 
     858                 :        3283 : HTTPServer::Id HTTPServer::GetNewId()
     859                 :             : {
     860                 :        3283 :     return m_next_id.fetch_add(1, std::memory_order_relaxed);
     861                 :             : }
     862                 :             : 
     863                 :        3283 : void HTTPServer::NewSockAccepted(std::unique_ptr<Sock>&& sock, const CService& addr)
     864                 :             : {
     865         [ -  + ]:        3283 :     if (!sock->IsSelectable()) {
     866   [ #  #  #  # ]:           0 :         LogDebug(BCLog::HTTP,
     867                 :             :                  "connection from %s dropped: non-selectable socket",
     868                 :             :                  addr.ToStringAddrPort());
     869                 :           0 :         return;
     870                 :             :     }
     871                 :             : 
     872                 :             :     // According to the internet TCP_NODELAY is not carried into accepted sockets
     873                 :             :     // on all platforms.  Set it again here just to be sure.
     874         [ -  + ]:        3283 :     if (sock->SetSockOpt(IPPROTO_TCP, TCP_NODELAY, &SOCKET_OPTION_TRUE, sizeof(SOCKET_OPTION_TRUE)) == SOCKET_ERROR) {
     875   [ #  #  #  # ]:           0 :         LogDebug(BCLog::HTTP, "connection from %s: unable to set TCP_NODELAY, continuing anyway",
     876                 :             :                  addr.ToStringAddrPort());
     877                 :             :     }
     878                 :             : 
     879                 :        3283 :     const Id id{GetNewId()};
     880                 :             : 
     881   [ +  -  -  + ]:        3283 :     m_connected.push_back(std::make_shared<HTTPRemoteClient>(id, addr, std::move(sock)));
     882                 :             :     // Report back to the main thread
     883                 :        3283 :     m_connected_size.fetch_add(1, std::memory_order_relaxed);
     884                 :             : 
     885   [ +  +  +  - ]:        3283 :     LogDebug(BCLog::HTTP,
     886                 :             :              "HTTP Connection accepted from %s (id=%llu)",
     887                 :             :              addr.ToStringAddrPort(), id);
     888                 :             : }
     889                 :             : 
     890                 :      600675 : void HTTPServer::SocketHandlerConnected(const IOReadiness& io_readiness) const
     891                 :             : {
     892         [ +  + ]:     2631716 :     for (const auto& [sock, events] : io_readiness.events_per_sock) {
     893         [ +  + ]:     2031041 :         if (m_interrupt_net) {
     894                 :             :             return;
     895                 :             :         }
     896                 :             : 
     897                 :     2029852 :         auto it{io_readiness.httpclients_per_sock.find(sock)};
     898         [ +  + ]:     2029852 :         if (it == io_readiness.httpclients_per_sock.end()) {
     899                 :     1196148 :             continue;
     900                 :             :         }
     901         [ +  + ]:      833704 :         const std::shared_ptr<HTTPRemoteClient>& client{it->second};
     902                 :             : 
     903                 :      833704 :         bool send_ready = events.occurred & Sock::SendEvent;
     904                 :      833704 :         bool recv_ready = events.occurred & Sock::RecvEvent;
     905                 :      833704 :         bool err_ready = events.occurred & Sock::ErrorEvent;
     906                 :             : 
     907         [ +  + ]:      833704 :         if (send_ready) {
     908                 :             :             // Try to send as much data as is ready for this client.
     909                 :             :             // If there's an error we can skip the receive phase for this client
     910                 :             :             // because we need to disconnect.
     911         [ +  + ]:        2226 :             if (!client->MaybeSendBytesFromBuffer()) {
     912                 :           1 :                 recv_ready = false;
     913                 :             :             }
     914                 :             :         }
     915                 :             : 
     916         [ +  + ]:      833704 :         if (recv_ready || err_ready) {
     917                 :      401581 :             client->Receive();
     918                 :             :         }
     919                 :             :         // Process as much received data as we can.
     920                 :             :         // This executes for every client whether or not reading or writing
     921                 :             :         // took place because it also (might) parse a request we have already
     922                 :             :         // received and pass it to a worker thread.
     923         [ +  + ]:      833704 :         if (std::unique_ptr<HTTPRequest> request{HTTPRemoteClient::TryReadRequest(client)})
     924                 :             :         {
     925         [ +  - ]:      217647 :             LOCK(m_request_dispatcher_mutex);
     926         [ +  - ]:      217647 :             m_request_dispatcher(std::move(request));
     927                 :      833704 :         }
     928                 :             :     }
     929                 :             : }
     930                 :             : 
     931                 :      401581 : void HTTPRemoteClient::Receive()
     932                 :             : {
     933                 :      401581 :     char buf[0x10000]; // typical socket buffer is 8K-64K
     934                 :             : 
     935   [ +  -  +  - ]:     1204743 :     const ssize_t nrecv{WITH_LOCK(
     936                 :             :         m_sock_mutex,
     937                 :             :         return m_sock->Recv(buf, sizeof(buf), MSG_DONTWAIT);)};
     938                 :             : 
     939         [ -  + ]:      401581 :     if (nrecv < 0) {
     940                 :           0 :         const int err = WSAGetLastError();
     941         [ #  # ]:           0 :         if (IOErrorIsPermanent(err)) {
     942   [ #  #  #  # ]:           0 :             LogDebug(
     943                 :             :                 BCLog::HTTP,
     944                 :             :                 "Permanent read error from %s (id=%llu): %s",
     945                 :             :                 m_origin,
     946                 :             :                 m_id,
     947                 :             :                 NetworkErrorString(err));
     948                 :           0 :             m_disconnect = true;
     949                 :             :         }
     950         [ +  + ]:      401581 :     } else if (nrecv == 0) {
     951         [ +  - ]:        2058 :         LogDebug(
     952                 :             :             BCLog::HTTP,
     953                 :             :             "Received EOF from %s (id=%llu)",
     954                 :             :             m_origin,
     955                 :             :             m_id);
     956                 :        2058 :         m_disconnect = true;
     957                 :             :     } else {
     958                 :             :         // Reset idle timeout
     959                 :      399523 :         m_idle_since = Now<SteadySeconds>();
     960                 :             : 
     961                 :             :         // Prevent disconnect until all requests are completely handled.
     962         [ -  + ]:      399523 :         m_connection_busy = true;
     963                 :             : 
     964                 :             :         // Copy data from socket buffer to client receive buffer
     965                 :      399523 :         m_recv_buffer.insert(
     966                 :      399523 :             m_recv_buffer.end(),
     967                 :             :             buf,
     968         [ -  + ]:      399523 :             buf + nrecv);
     969                 :             :     }
     970                 :      401581 : }
     971                 :             : 
     972                 :      600675 : void HTTPServer::SocketHandlerListening(const Sock::EventsPerSock& events_per_sock)
     973                 :             : {
     974         [ +  + ]:      600675 :     if (m_stop_accepting) return;
     975         [ +  + ]:     1793029 :     for (const auto& sock : m_listen) {
     976         [ +  + ]:     1194606 :         if (m_interrupt_net) {
     977                 :             :             return;
     978                 :             :         }
     979   [ +  -  +  - ]:     2389206 :         const auto it = events_per_sock.find(sock);
     980   [ +  +  +  + ]:     1197852 :         if (it != events_per_sock.end() && it->second.occurred & Sock::RecvEvent) {
     981                 :             :             // Drain all pending connections from this socket up to the limit.
     982                 :             :             // Stop early if the kernel queue is empty (AcceptConnection returns null)
     983                 :             :             // or if accepting the last connection brought us to the limit.
     984         [ +  + ]:        6532 :             while (GetConnectionsCount() < static_cast<size_t>(m_rpcmaxconnections)) {
     985                 :        6526 :                 CService addr_accepted;
     986         [ +  - ]:        6526 :                 auto sock_accepted{AcceptConnection(*sock, addr_accepted)};
     987         [ +  + ]:        6526 :                 if (!sock_accepted) break;
     988         [ +  - ]:        3283 :                 NewSockAccepted(std::move(sock_accepted), addr_accepted);
     989                 :        6526 :             }
     990                 :             :         }
     991                 :             :     }
     992                 :             : }
     993                 :             : 
     994                 :      600675 : HTTPServer::IOReadiness HTTPServer::GenerateWaitSockets() const
     995                 :             : {
     996         [ +  + ]:      600675 :     IOReadiness io_readiness;
     997                 :             : 
     998                 :             :     // If the server is already handling its max connected clients count,
     999                 :             :     // don't bother checking the listening sockets for new inbound connections.
    1000                 :             :     // Leave them in the kernel's queue until space in the application opens
    1001                 :             :     // up (or the client times out on its own).
    1002         [ +  + ]:      600675 :     if (GetConnectionsCount() < static_cast<size_t>(m_rpcmaxconnections)) {
    1003         [ +  + ]:     1798906 :         for (const auto& sock : m_listen) {
    1004         [ +  - ]:     1198520 :             io_readiness.events_per_sock.emplace(sock, Sock::Events{Sock::RecvEvent});
    1005                 :             :         }
    1006                 :             :     }
    1007                 :             : 
    1008         [ +  + ]:     1434380 :     for (const auto& http_client : m_connected) {
    1009                 :             :         // Safely copy the shared pointer to the socket
    1010         [ +  - ]:      833705 :         std::shared_ptr<Sock> sock{http_client->GetSock()};
    1011                 :             : 
    1012                 :             :         // Event choice:
    1013                 :             :         //   1. ReadyToSend() (m_send_ready set) -> Send
    1014                 :             :         //      m_send_ready stays set while the send buffer still has data to
    1015                 :             :         //      drain, so we keep sending and do not Recv. This is also how the
    1016                 :             :         //      send-throttle applies backpressure: while the send buffer is
    1017                 :             :         //      full, TryReadRequest() holds a completed request back from a
    1018                 :             :         //      worker, so nothing new is read until send has drained.
    1019                 :             :         //   2. Else, m_req is incomplete and needs more data, or there is no
    1020                 :             :         //      m_req at all and the recv buffer is empty -> Recv
    1021                 :             :         //   3. Else (no parse in progress, leftover bytes in m_recv_buffer) -> 0
    1022                 :             :         //      Stay in the I/O map so TryReadRequest() drains the buffer first.
    1023                 :             :         //      Extra pipelined data waits in the kernel socket buffer
    1024                 :             :         //      (TCP backpressure), not in m_recv_buffer.
    1025                 :             :         //
    1026                 :             :         // Lock-order safety: the convention established by
    1027                 :             :         // MaybeSendBytesFromBuffer() is to take m_send_mutex before m_sock_mutex.
    1028                 :             :         // In this loop GetSock() (above) takes m_sock_mutex and ReadyToSend()
    1029                 :             :         // (below) takes m_send_mutex; both are scoped, so each lock is released
    1030                 :             :         // before the next is taken and they stay separate critical sections.
    1031                 :             :         // Holding m_sock_mutex while acquiring m_send_mutex would invert that
    1032                 :             :         // order and risk a lock-order-inversion deadlock.
    1033                 :      833705 :         Sock::Event event{0};
    1034   [ +  -  +  + ]:      833705 :         if (http_client->ReadyToSend()) {
    1035                 :             :             event = Sock::SendEvent;
    1036   [ +  +  +  + ]:      831235 :         } else if (http_client->GetRequest() != nullptr || http_client->ReceiveBufferEmpty()) {
    1037                 :             :             // Mid-parse (need more bytes) or buffer empty.
    1038                 :             :             event = Sock::RecvEvent;
    1039                 :             :         }
    1040                 :             : 
    1041         [ +  - ]:      833705 :         io_readiness.events_per_sock.emplace(sock, Sock::Events{event});
    1042   [ +  -  +  - ]:      833705 :         io_readiness.httpclients_per_sock.emplace(sock, http_client);
    1043                 :      833705 :     }
    1044                 :             : 
    1045                 :      600675 :     return io_readiness;
    1046                 :           0 : }
    1047                 :             : 
    1048                 :             : /// \anchor http
    1049                 :        1196 : void HTTPServer::ThreadSocketHandler()
    1050                 :             : {
    1051         [ +  + ]:      601871 :     while (!m_interrupt_net) {
    1052                 :             :         // Check for the readiness of the already connected sockets and the
    1053                 :             :         // listening sockets in one call ("readiness" as in poll(2) or
    1054                 :             :         // select(2)). If none are ready, wait for a short while and return
    1055                 :             :         // empty sets.
    1056                 :      600675 :         auto io_readiness{GenerateWaitSockets()};
    1057   [ +  -  -  + ]:     1201350 :         if (io_readiness.events_per_sock.empty() ||
    1058                 :             :             // WaitMany() may as well be a static method, the context of the first Sock in the vector is not relevant.
    1059         [ +  - ]:      600675 :             !io_readiness.events_per_sock.begin()->first->WaitMany(SELECT_TIMEOUT,
    1060                 :             :                                                                    io_readiness.events_per_sock)) {
    1061         [ #  # ]:           0 :             m_interrupt_net.sleep_for(SELECT_TIMEOUT);
    1062                 :             :         }
    1063                 :             : 
    1064                 :             :         // Service (send/receive) each of the already connected sockets.
    1065         [ +  - ]:      600675 :         SocketHandlerConnected(io_readiness);
    1066                 :             : 
    1067                 :             :         // Accept new connections from listening sockets.
    1068         [ +  - ]:      600675 :         SocketHandlerListening(io_readiness.events_per_sock);
    1069                 :             : 
    1070                 :             :         // Disconnect any clients that have been flagged.
    1071         [ +  - ]:      600675 :         DisconnectClients();
    1072                 :      600675 :     }
    1073                 :        1196 : }
    1074                 :             : 
    1075                 :      833738 : std::unique_ptr<HTTPRequest> HTTPRemoteClient::TryReadRequest(const std::shared_ptr<HTTPRemoteClient>& client)
    1076                 :             : {
    1077                 :             :     // If we are already handling a request from
    1078                 :             :     // this client, do nothing. We'll check again on the next I/O
    1079                 :             :     // loop iteration.
    1080         [ +  + ]:      833738 :     if (client->m_req_busy) return nullptr;
    1081                 :             : 
    1082         [ +  + ]:      706502 :     if (!client->m_req) {
    1083                 :      220809 :         client->m_req = std::make_unique<HTTPRequest>(client);
    1084                 :             :     }
    1085                 :             : 
    1086                 :      706502 :     try {
    1087                 :             :         // Read data from the buffer into the current request
    1088         [ +  + ]:      706502 :         client->ReadRequest(*client->m_req);
    1089      [ -  +  + ]:          17 :     } catch (const ContentTooLargeError& e) {
    1090   [ +  -  +  -  :           3 :         LogDebug(
                   +  - ]
    1091                 :             :             BCLog::HTTP,
    1092                 :             :             "HTTP request body too large from client %s (id=%llu): %s",
    1093                 :             :             client->m_origin,
    1094                 :             :             client->m_id,
    1095                 :             :             e.what());
    1096                 :             : 
    1097         [ +  - ]:           3 :         WriteNoStoreErrorReply(*client->m_req, HTTP_CONTENT_TOO_LARGE);
    1098                 :           3 :         client->m_disconnect = true;
    1099                 :           3 :         return nullptr;
    1100                 :          17 :     } catch (const std::runtime_error& e) {
    1101   [ +  -  +  -  :          14 :         LogDebug(
                   +  - ]
    1102                 :             :             BCLog::HTTP,
    1103                 :             :             "Error reading HTTP request from client %s (id=%llu): %s",
    1104                 :             :             client->m_origin,
    1105                 :             :             client->m_id,
    1106                 :             :             e.what());
    1107                 :             : 
    1108                 :             :         // We failed to read a complete request from the buffer
    1109         [ +  - ]:          14 :         WriteNoStoreErrorReply(*client->m_req, HTTP_BAD_REQUEST);
    1110                 :          14 :         client->m_disconnect = true;
    1111                 :          14 :         return nullptr;
    1112                 :          14 :     }
    1113                 :             : 
    1114                 :             :     // If the request is ready, hand it to a worker.
    1115         [ +  + ]:      706485 :     if (client->m_req->GetState() == HTTPRequest::State::Complete) {
    1116                 :             :         // Unless this client's send buffer is full: in that case hold the
    1117                 :             :         // parsed request here instead of moving it to a worker. This prevents
    1118                 :             :         // the server from reading any more data from this client until they
    1119                 :             :         // drain their end of the socket, and prevents the server from packing
    1120                 :             :         // more responses into the send buffer.
    1121   [ -  +  +  - ]:      435598 :         const size_t buffer_used{WITH_LOCK(
    1122                 :             :             client->m_send_mutex,
    1123                 :             :             return client->m_send_buffer.size();)};
    1124         [ +  + ]:      217799 :         if (buffer_used > MAX_BODY_SIZE) return nullptr;
    1125   [ +  +  -  +  :      435296 :         LogDebug(
             +  -  +  - ]
    1126                 :             :             BCLog::HTTP,
    1127                 :             :             "Received a %s request for %s from %s (id=%llu)",
    1128                 :             :             RequestMethodString(client->m_req->GetRequestMethod()),
    1129                 :             :             client->m_req->GetURI(),
    1130                 :             :             client->m_origin,
    1131                 :             :             client->m_id);
    1132                 :             : 
    1133                 :      217654 :         client->m_req_busy = true;
    1134                 :      217654 :         return std::move(client->m_req);
    1135                 :             :     }
    1136                 :             : 
    1137                 :      488686 :     return nullptr;
    1138                 :             : }
    1139                 :             : 
    1140                 :      600675 : void HTTPServer::DisconnectClients()
    1141                 :             : {
    1142                 :      600675 :     const auto now{Now<SteadySeconds>()};
    1143                 :      600675 :     size_t erased = std::erase_if(m_connected,
    1144                 :      836988 :                                   [&](auto& client) {
    1145                 :      836988 :                                       return client->MaybeDisconnect(now,
    1146                 :             :                                                                      m_rpcservertimeout,
    1147                 :      836988 :                                                                      /*disconnect_all=*/m_disconnect_all_clients);
    1148                 :             :                                   });
    1149         [ +  + ]:      600675 :     if (erased > 0) {
    1150                 :             :         // Report back to the main thread
    1151                 :        3112 :         m_connected_size.fetch_sub(erased, std::memory_order_relaxed);
    1152                 :             :     }
    1153                 :      600675 : }
    1154                 :             : 
    1155                 :      836988 : bool HTTPRemoteClient::MaybeDisconnect(std::chrono::time_point<SteadyClock> now, std::chrono::seconds rpcservertimeout, bool disconnect_all)
    1156                 :             : {
    1157                 :             :     // First check for idle timeout. We reset the timer when we send and receive data,
    1158                 :             :     // but if the server is busy handling a request we should ignore the timeout until
    1159                 :             :     // the reply is sent. If we did erase the shared_ptr<HTTPRemoteClient> reference in m_connected
    1160                 :             :     // while the server is busy with a request, it might be prematurely dropped before
    1161                 :             :     // the response has been sent, or if the HTTPRequest was holding a temporary shared_ptr
    1162                 :             :     // client on a worker thread - it would keep the socket open even after "disconnecting".
    1163   [ +  +  +  + ]:     1656079 :     const bool is_idle{rpcservertimeout.count() > 0 &&
    1164   [ +  +  +  + ]:      837005 :                        now - m_idle_since.load() > rpcservertimeout &&
    1165         [ +  + ]:          17 :                        !m_req_busy};
    1166                 :             : 
    1167                 :             :     // Disconnect this client due to error, end of communication, or idle timeout.
    1168                 :             :     // May drop unsent data if we are closing due to error.
    1169   [ +  +  +  + ]:      836988 :     if (m_disconnect || is_idle) {
    1170         [ +  + ]:        2223 :         if (is_idle) {
    1171         [ +  - ]:           5 :             LogDebug(BCLog::HTTP,
    1172                 :             :                      "HTTP client idle timeout %s (id=%llu)",
    1173                 :             :                      m_origin,
    1174                 :             :                      m_id);
    1175                 :             :         }
    1176                 :             :     } else {
    1177                 :             :         // Disconnect this client because the server is shutting
    1178                 :             :         // down and we need to disconnect all clients...
    1179         [ +  + ]:      834765 :         if (disconnect_all) {
    1180                 :             :             // ...unless we still have data for this client.
    1181         [ +  - ]:        1060 :             if (m_connection_busy) {
    1182                 :             :                 // There is still data for this healthy-connected client.
    1183                 :             :                 // Continue the I/O loop until all data is sent or an error is encountered.
    1184                 :             :                 return false;
    1185                 :             :             } else {
    1186                 :             :                 // This is a healthy persistent connection (e.g. keep-alive)
    1187                 :             :                 // but it's time to say goodbye.
    1188                 :             :                 ;
    1189                 :             :             }
    1190                 :             :         } else {
    1191                 :             :             // No reason to disconnect.
    1192                 :             :             return false;
    1193                 :             :         }
    1194                 :             :     }
    1195                 :             :     // No reason NOT to disconnect, log and remove.
    1196         [ +  + ]:        3283 :     LogDebug(BCLog::HTTP,
    1197                 :             :              "Disconnecting HTTP client %s (id=%llu)",
    1198                 :             :              m_origin,
    1199                 :             :              m_id);
    1200                 :             :     return true;
    1201                 :             : }
    1202                 :             : 
    1203                 :        1205 : void HTTPServer::ClearConnectedClients()
    1204                 :             : {
    1205         [ -  + ]:        1205 :     Assume(!m_thread_socket_handler.joinable()); // must be called after JoinSocketsThreads()
    1206         [ -  + ]:        1205 :     if (m_connected.empty()) return;
    1207         [ #  # ]:           0 :     LogWarning("Force-disconnecting %d HTTP client(s) that did not disconnect gracefully", m_connected.size());
    1208         [ #  # ]:           0 :     m_connected_size.fetch_sub(m_connected.size(), std::memory_order_relaxed);
    1209                 :           0 :     m_connected.clear();
    1210                 :             : }
    1211                 :             : 
    1212                 :      706502 : void HTTPRemoteClient::ReadRequest(HTTPRequest& req)
    1213                 :             : {
    1214         [ +  + ]:      706502 :     if (m_recv_buffer.empty()) return;
    1215                 :             : 
    1216         [ -  + ]:      399707 :     LineReader reader(m_recv_buffer, MAX_HEADERS_SIZE);
    1217                 :             : 
    1218                 :      399707 :     try {
    1219   [ +  +  +  + ]:      399707 :         switch (req.GetState()) {
    1220                 :      217673 :         case HTTPRequest::State::Init:
    1221   [ +  +  +  - ]:      217673 :             if (!req.LoadControlData(reader)) break;
    1222                 :      217666 :             req.SetState(HTTPRequest::State::NeedsHeaders);
    1223                 :      217672 :             [[fallthrough]];
    1224                 :             : 
    1225                 :      217672 :         case HTTPRequest::State::NeedsHeaders:
    1226   [ +  +  +  + ]:      217672 :             if (!req.LoadHeaders(reader)) break;
    1227                 :      217660 :             req.SetState(HTTPRequest::State::NeedsBody);
    1228                 :      399542 :             [[fallthrough]];
    1229                 :             : 
    1230                 :      399542 :         case HTTPRequest::State::NeedsBody:
    1231   [ +  +  +  + ]:      399542 :             if (!req.LoadBody(reader)) break;
    1232                 :      217654 :             req.SetState(HTTPRequest::State::Complete);
    1233                 :             :             [[fallthrough]];
    1234                 :             : 
    1235                 :             :         case HTTPRequest::State::Complete:
    1236                 :             :             break;
    1237                 :             : 
    1238                 :             :         case HTTPRequest::State::Error:
    1239                 :             :             break;
    1240                 :             :         }
    1241                 :          17 :     } catch (...) {
    1242                 :             :         // Don't try to read any more data for this request
    1243                 :          17 :         req.SetState(HTTPRequest::State::Error);
    1244                 :             :         // Clear the memory allocated to this client, caller must disconnect
    1245                 :          17 :         m_recv_buffer.clear();
    1246                 :          17 :         throw;
    1247                 :          17 :     }
    1248                 :             : 
    1249                 :             :     // Remove the bytes read out of the buffer.
    1250                 :      799380 :     m_recv_buffer.erase(
    1251                 :      399690 :         m_recv_buffer.begin(),
    1252                 :      399690 :         m_recv_buffer.begin() + reader.Consumed());
    1253                 :             : }
    1254                 :             : 
    1255                 :      219884 : bool HTTPRemoteClient::MaybeSendBytesFromBuffer()
    1256                 :             : {
    1257                 :             :     // Send as much data from this client's buffer as we can
    1258                 :      219884 :     LOCK(m_send_mutex);
    1259         [ +  - ]:      219884 :     if (!m_send_buffer.empty()) {
    1260                 :             :         // Socket flags (See kernel docs for send(2) and tcp(7) for more details).
    1261                 :             :         // MSG_NOSIGNAL: If the remote end of the connection is closed,
    1262                 :             :         //               fail with EPIPE (an error) as opposed to triggering
    1263                 :             :         //               SIGPIPE which terminates the process.
    1264                 :             :         // MSG_DONTWAIT: Makes the send operation non-blocking regardless of socket blocking mode.
    1265                 :             :         // MSG_MORE:     We do not set this flag here because http responses are usually
    1266                 :             :         //               small and we want the kernel to send them right away. Setting MSG_MORE
    1267                 :             :         //               would "cork" the socket to prevent sending out partial frames.
    1268                 :      219884 :         int flags{MSG_NOSIGNAL | MSG_DONTWAIT};
    1269                 :             : 
    1270                 :             :         // Try to send bytes through socket
    1271                 :      219884 :         ssize_t bytes_sent;
    1272                 :      219884 :         {
    1273         [ +  - ]:      219884 :             LOCK(m_sock_mutex);
    1274   [ -  +  +  -  :      219884 :             bytes_sent = m_sock->Send(m_send_buffer.data(),
                   +  - ]
    1275                 :             :                                       m_send_buffer.size(),
    1276                 :             :                                       flags);
    1277                 :           0 :         }
    1278                 :             : 
    1279         [ +  + ]:      219884 :         if (bytes_sent < 0) {
    1280                 :             :             // Something went wrong
    1281                 :        2192 :             const int err{WSAGetLastError()};
    1282         [ +  + ]:        2192 :             if (!IOErrorIsPermanent(err)) {
    1283                 :             :                 // The error can be safely ignored, try the send again on the next I/O loop.
    1284                 :        2191 :                 m_send_ready = true;
    1285                 :        2191 :                 m_connection_busy = true;
    1286                 :        2191 :                 return true;
    1287                 :             :             } else {
    1288                 :             :                 // Unrecoverable error, log and disconnect client.
    1289   [ +  -  +  -  :           1 :                 LogDebug(
             +  -  +  - ]
    1290                 :             :                     BCLog::HTTP,
    1291                 :             :                     "Error sending HTTP response data to client %s (id=%llu): %s",
    1292                 :             :                     m_origin,
    1293                 :             :                     m_id,
    1294                 :             :                     NetworkErrorString(err));
    1295                 :           1 :                 m_send_ready = false;
    1296                 :           1 :                 m_disconnect = true;
    1297                 :             : 
    1298                 :             :                 // Do not attempt to read from this client.
    1299                 :           1 :                 return false;
    1300                 :             :             }
    1301                 :             :         }
    1302                 :             : 
    1303                 :             :         // Successful send, remove sent bytes from our local buffer.
    1304         [ -  + ]:      217692 :         Assume(static_cast<size_t>(bytes_sent) <= m_send_buffer.size());
    1305                 :      217692 :         m_send_buffer.erase(m_send_buffer.begin(),
    1306                 :      217692 :                             m_send_buffer.begin() + bytes_sent);
    1307                 :             : 
    1308   [ +  -  +  +  :      217692 :         LogDebug(
                   +  - ]
    1309                 :             :             BCLog::HTTP,
    1310                 :             :             "Sent %d bytes to client %s (id=%llu)",
    1311                 :             :             bytes_sent,
    1312                 :             :             m_origin,
    1313                 :             :             m_id);
    1314                 :             : 
    1315                 :             :         // This check is inside the if(!empty) block meaning "there was data but now its gone".
    1316                 :             :         // We wouldn't want to change the flags if MaybeSendBytesFromBuffer() was called
    1317                 :             :         // on an already-empty m_send_buffer because the connection might have just been opened.
    1318         [ +  + ]:      217692 :         if (m_send_buffer.empty()) {
    1319                 :      217657 :             m_send_ready = false;
    1320         [ +  + ]:      217657 :             m_connection_busy = false;
    1321                 :             : 
    1322                 :             :             // Our work is done here
    1323         [ +  + ]:      217657 :             if (!m_keep_alive) {
    1324                 :        1022 :                 m_disconnect = true;
    1325                 :             :                 // Do not attempt to read from this client.
    1326                 :        1022 :                 return false;
    1327                 :             :             }
    1328                 :             :         } else {
    1329                 :             :             // The send buffer isn't flushed yet, try to push more on the next loop.
    1330                 :          35 :             m_send_ready = true;
    1331                 :          35 :             m_connection_busy = true;
    1332                 :             :         }
    1333                 :             : 
    1334                 :             :         // Finally, reset idle timeout
    1335                 :      216670 :         m_idle_since = Now<SteadySeconds>();
    1336                 :             :     }
    1337                 :             : 
    1338                 :             :     return true;
    1339                 :      219884 : }
    1340                 :             : 
    1341                 :        1205 : bool InitHTTPServer()
    1342                 :             : {
    1343                 :             :     // Create HTTPServer
    1344                 :        1205 :     g_http_server = std::make_unique<HTTPServer>(MaybeDispatchRequestToWorker);
    1345                 :             : 
    1346         [ +  - ]:        1205 :     if (!g_http_server->InitHTTPAllowList()) {
    1347                 :             :         return false;
    1348                 :             :     }
    1349                 :             : 
    1350                 :        2410 :     g_http_server->SetServerTimeout(std::chrono::seconds(gArgs.GetIntArg("-rpcservertimeout", DEFAULT_HTTP_SERVER_TIMEOUT)));
    1351   [ +  -  +  - ]:        2410 :     g_http_server->SetMaxConnections(std::max(gArgs.GetArg<int>("-rpcmaxconnections", DEFAULT_MAX_HTTP_CONNECTIONS), 1));
    1352                 :             : 
    1353                 :             :     // Bind HTTP server to specified addresses
    1354                 :        1205 :     std::vector<std::pair<std::string, uint16_t>> endpoints{GetBindAddresses()};
    1355                 :        1205 :     bool bind_success{false};
    1356   [ +  -  +  + ]:        3612 :     for (const auto& [address_string, port] : endpoints) {
    1357         [ +  - ]:        2407 :         LogInfo("Binding RPC on address %s port %i", address_string, port);
    1358   [ +  -  +  - ]:        2407 :         const std::optional<CService> addr{Lookup(address_string, port, false)};
    1359         [ +  - ]:        2407 :         if (addr) {
    1360   [ +  -  -  + ]:        2407 :             if (addr->IsBindAny()) {
    1361         [ #  # ]:           0 :                 LogWarning("The RPC server is not safe to expose to untrusted networks such as the public internet");
    1362                 :             :             }
    1363   [ +  -  +  - ]:        2407 :             auto result{g_http_server->BindAndStartListening(addr.value())};
    1364         [ -  + ]:        2407 :             if (!result) {
    1365   [ #  #  #  # ]:           0 :                 LogWarning("Binding RPC on address %s failed: %s", addr->ToStringAddrPort(), result.error());
    1366                 :             :             } else {
    1367                 :             :                 bind_success = true;
    1368                 :             :             }
    1369                 :        2407 :         } else {
    1370         [ -  - ]:        2407 :             LogWarning("Could not bind RPC on address %s port %i: Address lookup failed.", address_string, port);
    1371                 :             :         }
    1372                 :        2407 :     }
    1373                 :             : 
    1374         [ -  + ]:        1205 :     if (!bind_success) {
    1375         [ #  # ]:           0 :         LogError("Unable to bind any endpoint for RPC server");
    1376                 :             :         return false;
    1377                 :             :     }
    1378                 :             : 
    1379   [ +  -  +  +  :        1205 :     LogDebug(BCLog::HTTP, "Initialized HTTP server");
                   +  - ]
    1380                 :             : 
    1381   [ +  -  +  -  :        2410 :     g_max_queue_depth = std::max(gArgs.GetArg<int>("-rpcworkqueue", DEFAULT_HTTP_WORKQUEUE), 1);
                   +  - ]
    1382   [ +  -  +  +  :        1205 :     LogDebug(BCLog::HTTP, "set work queue of depth %d\n", g_max_queue_depth);
                   +  - ]
    1383                 :             : 
    1384                 :             :     return true;
    1385                 :        1205 : }
    1386                 :             : 
    1387                 :        1193 : void StartHTTPServer()
    1388                 :             : {
    1389   [ +  -  +  - ]:        2386 :     auto rpcThreads{std::max(gArgs.GetArg<int>("-rpcthreads", DEFAULT_HTTP_THREADS), 1)};
    1390                 :        1193 :     LogInfo("Starting HTTP server with %d worker threads", rpcThreads);
    1391                 :        1193 :     g_threadpool_http.Start(rpcThreads);
    1392                 :        1193 :     g_http_server->StartSocketsThreads();
    1393                 :        1193 : }
    1394                 :             : 
    1395                 :        1249 : void InterruptHTTPServer()
    1396                 :             : {
    1397         [ +  + ]:        1249 :     LogDebug(BCLog::HTTP, "Interrupting HTTP server");
    1398         [ +  + ]:        1249 :     if (g_http_server) {
    1399                 :             :         // Reject all new requests
    1400         [ +  - ]:        2410 :         g_http_server->SetRequestHandler(RejectRequest);
    1401                 :             :     }
    1402                 :             : 
    1403                 :             :     // Interrupt pool after disabling requests
    1404                 :        1249 :     g_threadpool_http.Interrupt();
    1405                 :        1249 : }
    1406                 :             : 
    1407                 :        1249 : void StopHTTPServer()
    1408                 :             : {
    1409         [ +  + ]:        1249 :     LogDebug(BCLog::HTTP, "Stopping HTTP server");
    1410                 :             : 
    1411         [ +  + ]:        1249 :     LogDebug(BCLog::HTTP, "Waiting for HTTP worker threads to exit\n");
    1412                 :        1249 :     g_threadpool_http.Stop();
    1413                 :             : 
    1414         [ +  + ]:        1249 :     if (g_http_server) {
    1415                 :             :         // Must precede DisconnectAllClients(): a connection accepted after
    1416                 :             :         // GetConnectionsCount() returns 0 would survive into the destructor.
    1417                 :        1205 :         g_http_server->StopAccepting();
    1418                 :             :         // Disconnect clients as their remaining responses are flushed
    1419                 :        1205 :         g_http_server->DisconnectAllClients();
    1420                 :             :         // Wait 30 seconds for all disconnections
    1421         [ +  + ]:        1205 :         LogDebug(BCLog::HTTP, "Waiting for HTTP clients to disconnect gracefully");
    1422                 :        1205 :         const auto deadline{NodeClock::now() + 30s};
    1423         [ +  + ]:        3514 :         while (g_http_server->GetConnectionsCount() != 0) {
    1424         [ -  + ]:        1104 :             if (NodeClock::now() > deadline) {
    1425                 :           0 :                 LogWarning("Timeout waiting for HTTP clients to disconnect gracefully, continuing shutdown");
    1426                 :           0 :                 break;
    1427                 :             :             }
    1428                 :        1104 :             std::this_thread::sleep_for(50ms);
    1429                 :             :         }
    1430                 :             :         // Break HTTPServer I/O loop: stop accepting connections, sending and receiving data
    1431                 :        1205 :         g_http_server->InterruptNet();
    1432                 :             :         // Wait for HTTPServer I/O thread to exit
    1433                 :        1205 :         g_http_server->JoinSocketsThreads();
    1434                 :             :         // Force-remove any clients that survived the graceful wait
    1435                 :        1205 :         g_http_server->ClearConnectedClients();
    1436                 :             :         // Close all listening sockets
    1437                 :        1205 :         g_http_server->StopListening();
    1438                 :             :     }
    1439         [ +  + ]:        1249 :     LogDebug(BCLog::HTTP, "Stopped HTTP server");
    1440                 :        1249 : }
        

Generated by: LCOV version 2.0-1