void *
ngx_http_map_find(ngx_http_request_t *r, ngx_http_map_t *map, ngx_str_t *match)
{
void *value;
u_char *low;
size_t len;
ngx_uint_t key;
len = match->len;
if (len) {
low = ngx_pnalloc(r->pool, len);
if (low == NULL) {
return NULL;
}
} else {
low = NULL;
}
key = ngx_hash_strlow(low, match->data, len);
value = ngx_hash_find_combined(&map->hash, key, low, len);
if (value) {
return value;
}
#if (NGX_PCRE)
if (len && map->nregex) {
ngx_int_t n;
ngx_uint_t i;
ngx_http_map_regex_t *reg;
reg = map->regex;
for (i = 0; i < map->nregex; i++) {
n = ngx_http_regex_exec(r, reg[i].regex, match);
if (n == NGX_OK) {
return reg[i].value;
}
if (n == NGX_DECLINED) {
continue;
}
/* NGX_ERROR */
return NULL;
}
}
#endif
return NULL;
}
static ngx_flag_t rule_is_match(ngx_http_request_t * r, ngx_http_rdns_rule_t * rule, ngx_str_t * domain) {
ngx_flag_t res;
if (rule == NULL || domain == NULL) {
return 0;
}
res = (ngx_http_regex_exec(r, rule->domain_regex, domain) == NGX_OK);
ngx_log_debug3(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
"rdns check rule regex '%V' with '%V': %s", &rule->domain, domain,
(res == 1 ? "matched" : "not matched"));
return res;
}
void *
ngx_http_map_find(ngx_http_request_t *r, ngx_http_map_t *map, ngx_uint_t key,
u_char *text, size_t len, ngx_str_t *match)
{
void *p;
p = ngx_hash_find_combined(&map->hash, key, text, len);
if (p) {
return p;
}
#if (NGX_PCRE)
if (len && map->nregex) {
ngx_int_t n;
ngx_uint_t i;
ngx_http_map_regex_t *reg;
reg = map->regex;
for (i = 0; i < map->nregex; i++) {
n = ngx_http_regex_exec(r, reg[i].regex, match);
if (n == NGX_OK) {
return reg[i].value;
}
if (n == NGX_DECLINED) {
continue;
}
/* NGX_ERROR */
return NULL;
}
}
#endif
return NULL;
}
static ngx_int_t
yy_sec_waf_execute_regex(ngx_http_request_t *r,
ngx_str_t *str, ngx_http_yy_sec_waf_rule_t *rule)
{
int rc;
if (str == NULL || str->data == NULL) {
return NGX_ERROR;
}
if (rule->regex != NULL) {
/* REGEX */
rc = ngx_http_regex_exec(r, rule->regex, str);
if (rc == NGX_OK) {
return RULE_MATCH;
} else if (rc == NGX_DECLINED) {
return RULE_NO_MATCH;
}
}
return NGX_ERROR;
}
static ngx_int_t
ngx_http_find_virtual_server(ngx_connection_t *c,
ngx_http_virtual_names_t *virtual_names, ngx_str_t *host,
ngx_http_request_t *r, ngx_http_core_srv_conf_t **cscfp)
{
ngx_http_core_srv_conf_t *cscf;
if (virtual_names == NULL) {
return NGX_DECLINED;
}
cscf = ngx_hash_find_combined(&virtual_names->names,
ngx_hash_key(host->data, host->len),
host->data, host->len);
if (cscf) {
*cscfp = cscf;
return NGX_OK;
}
#if (NGX_PCRE)
if (host->len && virtual_names->nregex) {
ngx_int_t n;
ngx_uint_t i;
ngx_http_server_name_t *sn;
sn = virtual_names->regex;
#if (NGX_HTTP_SSL && defined SSL_CTRL_SET_TLSEXT_HOSTNAME)
if (r == NULL) {
ngx_http_connection_t *hc;
for (i = 0; i < virtual_names->nregex; i++) {
n = ngx_regex_exec(sn[i].regex->regex, host, NULL, 0);
if (n == NGX_REGEX_NO_MATCHED) {
continue;
}
if (n >= 0) {
hc = c->data;
hc->ssl_servername_regex = sn[i].regex;
*cscfp = sn[i].server;
return NGX_OK;
}
ngx_log_error(NGX_LOG_ALERT, c->log, 0,
ngx_regex_exec_n " failed: %i "
"on \"%V\" using \"%V\"",
n, host, &sn[i].regex->name);
return NGX_ERROR;
}
return NGX_DECLINED;
}
#endif /* NGX_HTTP_SSL && defined SSL_CTRL_SET_TLSEXT_HOSTNAME */
for (i = 0; i < virtual_names->nregex; i++) {
n = ngx_http_regex_exec(r, sn[i].regex, host);
if (n == NGX_DECLINED) {
continue;
}
if (n == NGX_OK) {
*cscfp = sn[i].server;
return NGX_OK;
}
return NGX_ERROR;
}
}
#endif /* NGX_PCRE */
return NGX_DECLINED;
}
static ngx_int_t
ngx_http_set_virtual_server(ngx_http_request_t *r, ngx_str_t *host)
{
ngx_int_t rc;
ngx_http_connection_t *hc;
ngx_http_core_loc_conf_t *clcf;
ngx_http_core_srv_conf_t *cscf = NULL;
hc = r->http_connection;
#if (NGX_HTTP_SSL && defined SSL_CTRL_SET_TLSEXT_HOSTNAME)
if (hc->ssl_servername) {
if (hc->ssl_servername->len == host->len
&& ngx_strncmp(hc->ssl_servername->data,
host->data, host->len) == 0)
{
#if (NGX_PCRE)
if (hc->ssl_servername_regex
&& ngx_http_regex_exec(r, hc->ssl_servername_regex,
hc->ssl_servername) != NGX_OK)
{
ngx_tcp2http_close_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
return NGX_ERROR;
}
#endif
return NGX_OK;
}
}
#endif
rc = ngx_http_find_virtual_server(r->connection,
hc->addr_conf->virtual_names,
host, r, &cscf);
if (rc == NGX_ERROR) {
ngx_tcp2http_close_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
return NGX_ERROR;
}
#if (NGX_HTTP_SSL && defined SSL_CTRL_SET_TLSEXT_HOSTNAME)
if (hc->ssl_servername) {
ngx_http_ssl_srv_conf_t *sscf;
if (rc == NGX_DECLINED) {
cscf = hc->addr_conf->default_server;
rc = NGX_OK;
}
sscf = ngx_http_get_module_srv_conf(cscf->ctx, ngx_http_ssl_module);
if (sscf->verify) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client attempted to request the server name "
"different from that one was negotiated");
ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);
return NGX_ERROR;
}
}
#endif
if (rc == NGX_DECLINED) {
return NGX_OK;
}
r->srv_conf = cscf->ctx->srv_conf;
r->loc_conf = cscf->ctx->loc_conf;
clcf = ngx_http_get_module_loc_conf(r, ngx_http_core_module);
ngx_http_set_connection_log(r->connection, clcf->error_log);
return NGX_OK;
}
