GCOV - Varnish Cache


/*-
 * Copyright (c) 2008-2019 Varnish Software AS
 * All rights reserved.
 *
 * Author: Poul-Henning Kamp <phk@phk.freebsd.dk>
 *
 * SPDX-License-Identifier: BSD-2-Clause
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include "config.h"

#include <sys/socket.h>

#include <math.h>
#include <poll.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <string.h>

#include "vtc.h"
#include "vtc_http.h"

#include "vct.h"
#include "vfil.h"
#include "vnum.h"
#include "vrnd.h"
#include "vtcp.h"
#include "hpack.h"

extern const struct cmds http_cmds[];

/* SECTION: client-server client/server
 *
 * Client and server threads are fake HTTP entities used to test your Varnish
 * and VCL. They take any number of arguments, and the one that are not
 * recognized, assuming they don't start with '-', are treated as
 * specifications, laying out the actions to undertake::
 *
 *         client cNAME [...]
 *         server sNAME [...]
 *
 * Clients and server are identified by a string that's the first argument,
 * clients' names start with 'c' and servers' names start with 's'.
 *
 * As the client and server commands share a good deal of arguments and
 * specification actions, they are grouped in this single section, specific
 * items will be explicitly marked as such.
 *
 * SECTION: client-server.macros Macros and automatic behaviour
 *
 * To make things easier in the general case, clients will connect by default
 * to a Varnish server called v1. To connect to a different Varnish server, use
 * '-connect ${vNAME_sock}'.
 *
 * The -vcl+backend switch of the ``varnish`` command will add all the declared
 * servers as backends. Be careful though, servers will by default listen to
 * the 127.0.0.1 IP and will pick a random port, and publish 3 macros:
 * sNAME_addr, sNAME_port and sNAME_sock, but only once they are started. For
 * 'varnish -vcl+backend' to create the vcl with the correct values, the server
 * must be started first.
 *
 * SECTION: client-server.args Arguments
 *
 * \-start
 *        Start the thread in background, processing the last given
 *        specification.
 *
 * \-wait
 *        Block until the thread finishes.
 *
 * \-run (client only)
 *        Equivalent to "-start -wait".
 *
 * \-repeat NUMBER
 *        Instead of processing the specification only once, do it NUMBER times.
 *
 * \-keepalive
 *        For repeat, do not open new connections but rather run all
 *        iterations in the same connection
 *
 * \-break (server only)
 *        Stop the server.
 *
 * \-listen STRING (server only)
 *        Dictate the listening socket for the server. STRING is of the form
 *        "IP PORT", or "/PATH/TO/SOCKET" for a Unix domain socket. In the
 *        latter case, the path must begin with '/', and the server must be
 *        able to create it.
 *
 * \-connect STRING (client only)
 *        Indicate the server to connect to. STRING is also of the form
 *        "IP PORT", or "/PATH/TO/SOCKET". As with "server -listen", a
 *        Unix domain socket is recognized when STRING begins with a '/'.
 *
 * \-dispatch (server only, s0 only)
 *        Normally, to keep things simple, server threads only handle one
 *        connection at a time, but the -dispatch switch allows to accept
 *        any number of connection and handle them following the given spec.
 *
 *        However, -dispatch is only allowed for the server name "s0".
 *
 * \-proxy1 STRING (client only)
 *        Use the PROXY protocol version 1 for this connection. STRING
 *        is of the form "CLIENTIP:PORT SERVERIP:PORT".
 *
 * \-proxy2 STRING (client only)
 *        Use the PROXY protocol version 2 for this connection. STRING
 *        is of the form "CLIENTIP:PORT SERVERIP:PORT".
 *
 * SECTION: client-server.spec Specification
 *
 * It's a string, either double-quoted "like this", but most of the time
 * enclosed in curly brackets, allowing multilining. Write a command per line in
 * it, empty line are ignored, and long line can be wrapped by using a
 * backslash. For example::
 *
 *     client c1 {
 *         txreq -url /foo \
 *               -hdr "bar: baz"
 *
 *         rxresp
 *     } -run
 */

#define ONLY_CLIENT(hp, av)                                             \
        do {                                                            \
                if (hp->h2)                                             \
                        vtc_fatal(hp->vl,                               \
                            "\"%s\" only possible before H/2 upgrade",  \
                                        av[0]);                         \
                if (hp->sfd != NULL)                                    \
                        vtc_fatal(hp->vl,                               \
                            "\"%s\" only possible in client", av[0]);   \
        } while (0)

#define ONLY_SERVER(hp, av)                                             \
        do {                                                            \
                if (hp->h2)                                             \
                        vtc_fatal(hp->vl,                               \
                            "\"%s\" only possible before H/2 upgrade",  \
                                        av[0]);                         \
                if (hp->sfd == NULL)                                    \
                        vtc_fatal(hp->vl,                               \
                            "\"%s\" only possible in server", av[0]);   \
        } while (0)


/* XXX: we may want to vary this */
static const char * const nl = "\r\n";

/**********************************************************************
 * Generate a synthetic body
 */

char *
synth_body(const char *len, int rnd)
{
        int i, j, k, l;
        char *b;


        AN(len);
        i = strtoul(len, NULL, 0);
        assert(i > 0);
        b = malloc(i + 1L);
        AN(b);
        l = k = '!';
        for (j = 0; j < i; j++) {
                if ((j % 64) == 63) {
                        b[j] = '\n';
                        k++;
                        if (k == '~')
                                k = '!';
                        l = k;
                } else if (rnd) {
                        b[j] = (VRND_RandomTestable() % 95) + ' ';
                } else {
                        b[j] = (char)l;
                        if (++l == '~')
                                l = '!';
                }
        }
        b[i - 1] = '\n';
        b[i] = '\0';
        return (b);
}

/**********************************************************************
 * Finish and write the vsb to the fd
 */

static void
http_write(const struct http *hp, int lvl, const char *pfx)
{

        AZ(VSB_finish(hp->vsb));
        vtc_dump(hp->vl, lvl, pfx, VSB_data(hp->vsb), VSB_len(hp->vsb));
        if (VSB_tofile(hp->vsb, hp->sess->fd))
                vtc_log(hp->vl, hp->fatal, "Write failed: %s",
                    strerror(errno));
}

/**********************************************************************
 * find header
 */

static char *
http_find_header(char * const *hh, const char *hdr)
{
        int n, l;
        char *r;

        l = strlen(hdr);

        for (n = 3; hh[n] != NULL; n++) {
                if (strncasecmp(hdr, hh[n], l) || hh[n][l] != ':')
                        continue;
                for (r = hh[n] + l + 1; vct_issp(*r); r++)
                        continue;
                return (r);
        }
        return (NULL);
}

/**********************************************************************
 * count header
 */

static int
http_count_header(char * const *hh, const char *hdr)
{
        int n, l, r = 0;

        l = strlen(hdr);

        for (n = 3; hh[n] != NULL; n++) {
                if (strncasecmp(hdr, hh[n], l) || hh[n][l] != ':')
                        continue;
                r++;
        }
        return (r);
}

/* SECTION: client-server.spec.expect
 *
 * expect STRING1 OP STRING2
 *         Test if "STRING1 OP STRING2" is true, and if not, fails the test.
 *         OP can be ==, <, <=, >, >= when STRING1 and STRING2 represent numbers
 *         in which case it's an order operator. If STRING1 and STRING2 are
 *         meant as strings OP is a matching operator, either == (exact match)
 *         or ~ (regex match).
 *
 *         varnishtest will first try to resolve STRING1 and STRING2 by looking
 *         if they have special meanings, in which case, the resolved value is
 *         use for the test. Note that this value can be a string representing a
 *         number, allowing for tests such as::
 *
 *                 expect req.http.x-num > 2
 *
 *         Here's the list of recognized strings, most should be obvious as they
 *         either match VCL logic, or the txreq/txresp options:
 *
 *         - remote.ip
 *         - remote.port
 *         - remote.path
 *         - req.method
 *         - req.url
 *         - req.proto
 *         - resp.proto
 *         - resp.status
 *         - resp.reason
 *         - resp.chunklen
 *         - req.bodylen
 *         - req.body
 *         - resp.bodylen
 *         - resp.body
 *         - req.http.NAME
 *         - resp.http.NAME
 */

static const char *
cmd_var_resolve(struct http *hp, char *spec)
{
        char **hh, *hdr;
        if (!strcmp(spec, "remote.ip"))
                return (hp->rem_ip);
        if (!strcmp(spec, "remote.port"))
                return (hp->rem_port);
        if (!strcmp(spec, "remote.path"))
                return (hp->rem_path);
        if (!strcmp(spec, "req.method"))
                return (hp->req[0]);
        if (!strcmp(spec, "req.url"))
                return (hp->req[1]);
        if (!strcmp(spec, "req.proto"))
                return (hp->req[2]);
        if (!strcmp(spec, "resp.proto"))
                return (hp->resp[0]);
        if (!strcmp(spec, "resp.status"))
                return (hp->resp[1]);
        if (!strcmp(spec, "resp.reason"))
                return (hp->resp[2]);
        if (!strcmp(spec, "resp.chunklen"))
                return (hp->chunklen);
        if (!strcmp(spec, "req.bodylen"))
                return (hp->bodylen);
        if (!strcmp(spec, "req.body"))
                return (hp->body != NULL ? hp->body : spec);
        if (!strcmp(spec, "resp.bodylen"))
                return (hp->bodylen);
        if (!strcmp(spec, "resp.body"))
                return (hp->body != NULL ? hp->body : spec);
        if (!strncmp(spec, "req.http.", 9)) {
                hh = hp->req;
                hdr = spec + 9;
        } else if (!strncmp(spec, "resp.http.", 10)) {
                hh = hp->resp;
                hdr = spec + 10;
        } else if (!strcmp(spec, "h2.state")) {
                if (hp->h2)
                        return ("true");
                else
                        return ("false");
        } else
                return (spec);
        hdr = http_find_header(hh, hdr);
        return (hdr);
}

static void
cmd_http_expect(CMD_ARGS)
{
        struct http *hp;
        const char *lhs;
        char *cmp;
        const char *rhs;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AZ(strcmp(av[0], "expect"));
        av++;

        AN(av[0]);
        AN(av[1]);
        AN(av[2]);
        AZ(av[3]);
        lhs = cmd_var_resolve(hp, av[0]);
        cmp = av[1];
        rhs = cmd_var_resolve(hp, av[2]);

        vtc_expect(vl, av[0], lhs, cmp, av[2], rhs);
}

/* SECTION: client-server.spec.expect_pattern
 *
 * expect_pattern
 *
 * Expect as the http body the test pattern generated by chunkedlen ('0'..'7'
 * repeating).
 */
static void
cmd_http_expect_pattern(CMD_ARGS)
{
        char *p;
        struct http *hp;
        char t = '0';

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AZ(strcmp(av[0], "expect_pattern"));
        av++;
        AZ(av[0]);
        for (p = hp->body; *p != '\0'; p++) {
                if (*p != t)
                        vtc_fatal(hp->vl,
                            "EXPECT PATTERN FAIL @%zd should 0x%02x is 0x%02x",
                            (ssize_t) (p - hp->body), t, *p);
                t += 1;
                t &= ~0x08;
        }
        vtc_log(hp->vl, 4, "EXPECT PATTERN SUCCESS");
}

/**********************************************************************
 * Split a HTTP protocol header
 */

static void
http_splitheader(struct http *hp, int req)
{
        char *p, *q, **hh;
        int n;
        char buf[20];

        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        if (req) {
                memset(hp->req, 0, sizeof hp->req);
                hh = hp->req;
        } else {
                memset(hp->resp, 0, sizeof hp->resp);
                hh = hp->resp;
        }

        n = 0;
        p = hp->rx_b;
        if (*p == '\0') {
                vtc_log(hp->vl, 4, "No headers");
                return;
        }

        /* REQ/PROTO */
        while (vct_islws(*p))
                p++;
        hh[n++] = p;
        while (!vct_islws(*p))
                p++;
        AZ(vct_iscrlf(p, hp->rx_e));
        *p++ = '\0';

        /* URL/STATUS */
        while (vct_issp(*p))            /* XXX: H space only */
                p++;
        AZ(vct_iscrlf(p, hp->rx_e));
        hh[n++] = p;
        while (!vct_islws(*p))
                p++;
        if (vct_iscrlf(p, hp->rx_e)) {
                hh[n++] = NULL;
                q = p;
                p = vct_skipcrlf(p, hp->rx_e);
                *q = '\0';
        } else {
                *p++ = '\0';
                /* PROTO/MSG */
                while (vct_issp(*p))            /* XXX: H space only */
                        p++;
                hh[n++] = p;
                while (!vct_iscrlf(p, hp->rx_e))
                        p++;
                q = p;
                p = vct_skipcrlf(p, hp->rx_e);
                *q = '\0';
        }
        assert(n == 3);

        while (*p != '\0') {
                assert(n < MAX_HDR);
                if (vct_iscrlf(p, hp->rx_e))
                        break;
                hh[n++] = p++;
                while (*p != '\0' && !vct_iscrlf(p, hp->rx_e))
                        p++;
                if (*p == '\0') {
                        break;
                }
                q = p;
                p = vct_skipcrlf(p, hp->rx_e);
                *q = '\0';
        }
        p = vct_skipcrlf(p, hp->rx_e);
        assert(*p == '\0');

        for (n = 0; n < 3 || hh[n] != NULL; n++) {
                bprintf(buf, "http[%2d] ", n);
                vtc_dump(hp->vl, 4, buf, hh[n], -1);
        }
}


/**********************************************************************
 * Receive another character
 */

static int
http_rxchar(struct http *hp, int n, int eof)
{
        int i;
        struct pollfd pfd[1];

        while (n > 0) {
                pfd[0].fd = hp->sess->fd;
                pfd[0].events = POLLIN;
                pfd[0].revents = 0;
                i = poll(pfd, 1, (int)(hp->timeout * 1000));
                if (i < 0 && errno == EINTR)
                        continue;
                if (i == 0) {
                        vtc_log(hp->vl, hp->fatal,
                            "HTTP rx timeout (fd:%d %.3fs)",
                            hp->sess->fd, hp->timeout);
                        continue;
                }
                if (i < 0) {
                        vtc_log(hp->vl, hp->fatal,
                            "HTTP rx failed (fd:%d poll: %s)",
                            hp->sess->fd, strerror(errno));
                        continue;
                }
                assert(i > 0);
                assert(hp->rx_p + n < hp->rx_e);
                i = read(hp->sess->fd, hp->rx_p, n);
                if (!(pfd[0].revents & POLLIN))
                        vtc_log(hp->vl, 4,
                            "HTTP rx poll (fd:%d revents: %x n=%d, i=%d)",
                            hp->sess->fd, pfd[0].revents, n, i);
                if (i == 0 && eof)
                        return (i);
                if (i == 0) {
                        vtc_log(hp->vl, hp->fatal,
                            "HTTP rx EOF (fd:%d read: %s) %d",
                            hp->sess->fd, strerror(errno), n);
                        return (-1);
                }
                if (i < 0) {
                        vtc_log(hp->vl, hp->fatal,
                            "HTTP rx failed (fd:%d read: %s)",
                            hp->sess->fd, strerror(errno));
                        return (-1);
                }
                hp->rx_p += i;
                *hp->rx_p = '\0';
                n -= i;
        }
        return (1);
}

static int
http_rxchunk(struct http *hp)
{
        char *q, *old;
        int i;

        old = hp->rx_p;
        do {
                if (http_rxchar(hp, 1, 0) < 0)
                        return (-1);
        } while (hp->rx_p[-1] != '\n');
        vtc_dump(hp->vl, 4, "len", old, -1);
        i = strtoul(old, &q, 16);
        bprintf(hp->chunklen, "%d", i);
        if ((q == old) || (q == hp->rx_p) || (*q != '\0' && !vct_islws(*q))) {
                vtc_log(hp->vl, hp->fatal, "Chunklen fail (%02x @ %td)",
                    (*q & 0xff), q - old);
                return (-1);
        }
        assert(*q == '\0' || vct_islws(*q));
        hp->rx_p = old;
        if (i > 0) {
                if (http_rxchar(hp, i, 0) < 0)
                        return (-1);
                vtc_dump(hp->vl, 4, "chunk", old, i);
        }
        old = hp->rx_p;
        if (http_rxchar(hp, 2, 0) < 0)
                return (-1);
        if (!vct_iscrlf(old, hp->rx_e)) {
                vtc_log(hp->vl, hp->fatal, "Chunklen without CRLF");
                return (-1);
        }
        hp->rx_p = old;
        *hp->rx_p = '\0';
        return (i);
}

/**********************************************************************
 * Swallow a HTTP message body
 *
 * max: 0 is all
 */

static void
http_swallow_body(struct http *hp, char * const *hh, int body, int max)
{
        const char *p, *q;
        int i, l, ll;

        l = hp->rx_p - hp->body;

        p = http_find_header(hh, "transfer-encoding");
        q = http_find_header(hh, "content-length");
        if (p != NULL && !strcasecmp(p, "chunked")) {
                if (q != NULL) {
                        vtc_log(hp->vl, hp->fatal, "Both C-E: Chunked and C-L");
                        return;
                }
                ll = 0;
                while (http_rxchunk(hp) > 0) {
                        ll = (hp->rx_p - hp->body) - l;
                        if (max && ll >= max)
                                break;
                }
                p = "chunked";
        } else if (q != NULL) {
                ll = strtoul(q, NULL, 10);
                if (max && ll > l + max)
                        ll = max;
                else
                        ll -= l;
                i = http_rxchar(hp, ll, 0);
                if (i < 0)
                        return;
                p = "c-l";
        } else if (body) {
                ll = 0;
                do  {
                        i = http_rxchar(hp, 1, 1);
                        if (i < 0)
                                return;
                        ll += i;
                        if (max && ll >= max)
                                break;
                } while (i > 0);
                p = "eof";
        } else {
                p = "none";
                ll = l = 0;
        }
        vtc_dump(hp->vl, 4, p, hp->body + l, ll);
        l += ll;
        hp->bodyl = l;
        bprintf(hp->bodylen, "%d", l);
}

/**********************************************************************
 * Receive a HTTP protocol header
 */

static void
http_rxhdr(struct http *hp)
{
        int i, s = 0;
        char *p;
        ssize_t l;

        CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
        hp->rx_p = hp->rx_b;
        *hp->rx_p = '\0';
        hp->body = NULL;
        bprintf(hp->bodylen, "%s", "<undef>");
        while (1) {
                p = hp->rx_p;
                i = http_rxchar(hp, 1, 1);
                if (i < 1)
                        break;
                if (s == 0 && *p == '\r')
                        s = 1;
                else if ((s == 0 || s == 1) && *p == '\n')
                        s = 2;
                else if (s == 2 && *p == '\r')
                        s = 3;
                else if ((s == 2 || s == 3) && *p == '\n')
                        break;
                else
                        s = 0;
        }
        l = hp->rx_p - hp->rx_b;
        vtc_dump(hp->vl, 4, "rxhdr", hp->rx_b, l);
        vtc_log(hp->vl, 4, "rxhdrlen = %zd", l);
        if (i < 1)
                vtc_log(hp->vl, hp->fatal, "HTTP header is incomplete");
        *hp->rx_p = '\0';
        hp->body = hp->rx_p;
}

/* SECTION: client-server.spec.rxresp
 *
 * rxresp [-no_obj] (client only)
 *         Receive and parse a response's headers and body. If -no_obj is
 *         present, only get the headers.
 */

static void
cmd_http_rxresp(CMD_ARGS)
{
        struct http *hp;
        int has_obj = 1;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);
        AZ(strcmp(av[0], "rxresp"));
        av++;

        for (; *av != NULL; av++)
                if (!strcmp(*av, "-no_obj"))
                        has_obj = 0;
                else
                        vtc_fatal(hp->vl,
                            "Unknown http rxresp spec: %s\n", *av);
        http_rxhdr(hp);
        http_splitheader(hp, 0);
        if (http_count_header(hp->resp, "Content-Length") > 1)
                vtc_fatal(hp->vl,
                    "Multiple Content-Length headers.\n");
        if (!has_obj)
                return;
        if (!hp->resp[0] || !hp->resp[1])
                return;
        if (hp->head_method)
                return;
        if (!strcmp(hp->resp[1], "200"))
                http_swallow_body(hp, hp->resp, 1, 0);
        else
                http_swallow_body(hp, hp->resp, 0, 0);
        vtc_log(hp->vl, 4, "bodylen = %s", hp->bodylen);
}

/* SECTION: client-server.spec.rxresphdrs
 *
 * rxresphdrs (client only)
 *         Receive and parse a response's headers.
 */

static void
cmd_http_rxresphdrs(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);
        AZ(strcmp(av[0], "rxresphdrs"));
        av++;

        for (; *av != NULL; av++)
                vtc_fatal(hp->vl, "Unknown http rxresp spec: %s\n", *av);
        http_rxhdr(hp);
        http_splitheader(hp, 0);
        if (http_count_header(hp->resp, "Content-Length") > 1)
                vtc_fatal(hp->vl,
                    "Multiple Content-Length headers.\n");
}

/* SECTION: client-server.spec.gunzip
 *
 * gunzip
 *         Gunzip the body in place.
 */
static void
cmd_http_gunzip(CMD_ARGS)
{
        struct http *hp;

        (void)av;
        (void)vl;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        vtc_gunzip(hp, hp->body, &hp->bodyl);
}

/**********************************************************************
 * Handle common arguments of a transmitted request or response
 */

static char* const *
http_tx_parse_args(char * const *av, struct vtclog *vl, struct http *hp,
    char *body, unsigned nohost, unsigned nodate, unsigned noserver, unsigned nouseragent)
{
        long bodylen = 0;
        char *b, *c;
        char *nullbody;
        ssize_t len;
        int nolen = 0;
        int l;

        nullbody = body;

        for (; *av != NULL; av++) {
                if (!strcmp(*av, "-nolen")) {
                        nolen = 1;
                } else if (!strcmp(*av, "-nohost")) {
                        nohost = 1;
                } else if (!strcmp(*av, "-nodate")) {
                        nodate = 1;
                } else if (!strcmp(*av, "-hdr")) {
                        if (!strncasecmp(av[1], "Content-Length:", 15) ||
                            !strncasecmp(av[1], "Transfer-Encoding:", 18))
                                nolen = 1;
                        if (!strncasecmp(av[1], "Host:", 5))
                                nohost = 1;
                        if (!strncasecmp(av[1], "Date:", 5))
                                nodate = 1;
                        if (!strncasecmp(av[1], "Server:", 7))
                                noserver = 1;
                        if (!strncasecmp(av[1], "User-Agent:", 11))
                                nouseragent = 1;
                        VSB_printf(hp->vsb, "%s%s", av[1], nl);
                        av++;
                } else if (!strcmp(*av, "-hdrlen")) {
                        VSB_printf(hp->vsb, "%s: ", av[1]);
                        l = atoi(av[2]);
                        while (l-- > 0)
                                VSB_putc(hp->vsb, '0' + (l % 10));
                        VSB_printf(hp->vsb, "%s", nl);
                        av+=2;
                } else
                        break;
        }
        for (; *av != NULL; av++) {
                if (!strcmp(*av, "-body")) {
                        assert(body == nullbody);
                        REPLACE(body, av[1]);

                        AN(body);
                        av++;
                        bodylen = strlen(body);
                        for (b = body; *b != '\0'; b++) {
                                if (*b == '\\' && b[1] == '0') {
                                        *b = '\0';
                                        for (c = b+1; *c != '\0'; c++) {
                                                *c = c[1];
                                        }
                                        b++;
                                        bodylen--;
                                }
                        }
                } else if (!strcmp(*av, "-bodyfrom")) {
                        assert(body == nullbody);
                        free(body);
                        body = VFIL_readfile(NULL, av[1], &len);
                        AN(body);
                        assert(len < INT_MAX);
                        bodylen = len;
                        av++;
                } else if (!strcmp(*av, "-bodylen")) {
                        assert(body == nullbody);
                        free(body);
                        body = synth_body(av[1], 0);
                        bodylen = strlen(body);
                        av++;
                } else if (!strncmp(*av, "-gzip", 5)) {
                        l = vtc_gzip_cmd(hp, av, &body, &bodylen);
                        if (l == 0)
                                break;
                        av += l;
                        if (l > 1)
                                VSB_printf(hp->vsb, "Content-Encoding: gzip%s", nl);
                } else
                        break;
        }
        if (!nohost) {
                VSB_cat(hp->vsb, "Host: ");
                macro_cat(vl, hp->vsb, "localhost", NULL);
                VSB_cat(hp->vsb, nl);
        }
        if (!nodate) {
                VSB_cat(hp->vsb, "Date: ");
                macro_cat(vl, hp->vsb, "date", NULL);
                VSB_cat(hp->vsb, nl);
        }
        if (!noserver)
                VSB_printf(hp->vsb, "Server: %s%s", hp->sess->name, nl);
        if (!nouseragent)
                VSB_printf(hp->vsb, "User-Agent: %s%s", hp->sess->name, nl);
        if (body != NULL && !nolen)
                VSB_printf(hp->vsb, "Content-Length: %ld%s", bodylen, nl);
        VSB_cat(hp->vsb, nl);
        if (body != NULL) {
                VSB_bcat(hp->vsb, body, bodylen);
                free(body);
        }
        return (av);
}

/* SECTION: client-server.spec.txreq
 *
 * txreq|txresp [...]
 *         Send a minimal request or response, but overload it if necessary.
 *
 *         txreq is client-specific and txresp is server-specific.
 *
 *         The only thing different between a request and a response, apart
 *         from who can send them is that the first line (request line vs
 *         status line), so all the options are pretty much the same.
 *
 *         \-method STRING (txreq only)
 *                 What method to use (default: "GET").
 *
 *         \-req STRING (txreq only)
 *                 Alias for -method.
 *
 *         \-url STRING (txreq only)
 *                 What location to use (default "/").
 *
 *         \-proto STRING
 *                 What protocol use in the status line.
 *                 (default: "HTTP/1.1").
 *
 *         \-status NUMBER (txresp only)
 *                 What status code to return (default 200).
 *
 *         \-reason STRING (txresp only)
 *                 What message to put in the status line (default: "OK").
 *
 *         \-noserver (txresp only)
 *                 Don't include a Server header with the id of the server.
 *
 *         \-nouseragent (txreq only)
 *                 Don't include a User-Agent header with the id of the client.
 *
 *         These three switches can appear in any order but must come before the
 *         following ones.
 *
 *         \-nohost
 *                 Don't include a Host header in the request. Also Implied
 *                 by the addition of a Host header with ``-hdr``.
 *
 *         \-nolen
 *                 Don't include a Content-Length header. Also implied by the
 *                 addition of a Content-Length or Transfer-Encoding header
 *                 with ``-hdr``.
 *
 *         \-nodate
 *                 Don't include a Date header in the response. Also implied
 *                 by the addition of a Date header with ``-hdr``.
 *
 *         \-hdr STRING
 *                 Add STRING as a header, it must follow this format:
 *                 "name: value". It can be called multiple times.
 *
 *         \-hdrlen STRING NUMBER
 *                 Add STRING as a header with NUMBER bytes of content.
 *
 *         You can then use the arguments related to the body:
 *
 *         \-body STRING
 *                 Input STRING as body.
 *
 *         \-bodyfrom FILE
 *                 Same as -body but content is read from FILE.
 *
 *         \-bodylen NUMBER
 *                 Generate and input a body that is NUMBER bytes-long.
 *
 *         \-gziplevel NUMBER
 *                 Set the gzip level (call it before any of the other gzip
 *                 switches).
 *
 *         \-gzipresidual NUMBER
 *                 Add extra gzip bits. You should never need it.
 *
 *         \-gzipbody STRING
 *                 Gzip STRING and send it as body.
 *
 *         \-gziplen NUMBER
 *                 Combine -bodylen and -gzipbody: generate a string of length
 *                 NUMBER, gzip it and send as body.
 */

/**********************************************************************
 * Transmit a response
 */

static void
cmd_http_txresp(CMD_ARGS)
{
        struct http *hp;
        const char *proto = "HTTP/1.1";
        const char *status = "200";
        const char *reason = "OK";
        char* body = NULL;
        unsigned noserver = 0;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AZ(strcmp(av[0], "txresp"));
        av++;

        VSB_clear(hp->vsb);

        for (; *av != NULL; av++) {
                if (!strcmp(*av, "-proto")) {
                        proto = av[1];
                        av++;
                } else if (!strcmp(*av, "-status")) {
                        status = av[1];
                        av++;
                } else if (!strcmp(*av, "-reason")) {
                        reason = av[1];
                        av++;
                        continue;
                } else if (!strcmp(*av, "-noserver")) {
                        noserver = 1;
                        continue;
                } else
                        break;
        }

        VSB_printf(hp->vsb, "%s %s %s%s", proto, status, reason, nl);

        /* send a "Content-Length: 0" header unless something else happens */
        REPLACE(body, "");

        av = http_tx_parse_args(av, vl, hp, body, 1, 0, noserver, 1);
        if (*av != NULL)
                vtc_fatal(hp->vl, "Unknown http txresp spec: %s\n", *av);

        http_write(hp, 4, "txresp");
}

static void
cmd_http_upgrade(CMD_ARGS)
{
        char *h;
        struct http *hp;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AN(hp->sfd);

        h = http_find_header(hp->req, "Upgrade");
        if (!h || strcmp(h, "h2c"))
                vtc_fatal(vl, "Req misses \"Upgrade: h2c\" header");

        h = http_find_header(hp->req, "Connection");
        if (!h || strcmp(h, "Upgrade, HTTP2-Settings"))
                vtc_fatal(vl, "Req misses \"Connection: "
                        "Upgrade, HTTP2-Settings\" header");

        h = http_find_header(hp->req, "HTTP2-Settings");
        if (!h)
                vtc_fatal(vl, "Req misses \"HTTP2-Settings\" header");

        parse_string(vl, hp,
            "txresp -status 101"
            " -hdr \"Connection: Upgrade\""
            " -hdr \"Upgrade: h2c\"\n"
        );

        b64_settings(hp, h);

        parse_string(vl, hp,
            "rxpri\n"
            "stream 0 {\n"
            "    txsettings\n"
            "    rxsettings\n"
            "    txsettings -ack\n"
            "    rxsettings\n"
            "    expect settings.ack == true\n"
            "} -start\n"
        );
}

/**********************************************************************
 * Receive a request
 */

/* SECTION: client-server.spec.rxreq
 *
 * rxreq (server only)
 *         Receive and parse a request's headers and body.
 */
static void
cmd_http_rxreq(CMD_ARGS)
{
        struct http *hp;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AZ(strcmp(av[0], "rxreq"));
        av++;

        for (; *av != NULL; av++)
                vtc_fatal(vl, "Unknown http rxreq spec: %s\n", *av);
        http_rxhdr(hp);
        http_splitheader(hp, 1);
        if (http_count_header(hp->req, "Content-Length") > 1)
                vtc_fatal(vl, "Multiple Content-Length headers.\n");
        http_swallow_body(hp, hp->req, 0, 0);
        vtc_log(vl, 4, "bodylen = %s", hp->bodylen);
}

/* SECTION: client-server.spec.rxreqhdrs
 *
 * rxreqhdrs (server only)
 *         Receive and parse a request's headers (but not the body).
 */

static void
cmd_http_rxreqhdrs(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AZ(strcmp(av[0], "rxreqhdrs"));
        av++;

        for (; *av != NULL; av++)
                vtc_fatal(hp->vl, "Unknown http rxreq spec: %s\n", *av);
        http_rxhdr(hp);
        http_splitheader(hp, 1);
        if (http_count_header(hp->req, "Content-Length") > 1)
                vtc_fatal(hp->vl, "Multiple Content-Length headers.\n");
}

/* SECTION: client-server.spec.rxreqbody
 *
 * rxreqbody (server only)
 *         Receive a request's body.
 */

static void
cmd_http_rxreqbody(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AZ(strcmp(av[0], "rxreqbody"));
        av++;

        for (; *av != NULL; av++)
                vtc_fatal(hp->vl, "Unknown http rxreq spec: %s\n", *av);
        http_swallow_body(hp, hp->req, 0, 0);
        vtc_log(hp->vl, 4, "bodylen = %s", hp->bodylen);
}

/* SECTION: client-server.spec.rxrespbody
 *
 * rxrespbody (client only)
 *         Receive (part of) a response's body.
 *
 * -max : max length of this receive, 0 for all
 */

static void
cmd_http_rxrespbody(CMD_ARGS)
{
        struct http *hp;
        int max = 0;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);
        AZ(strcmp(av[0], "rxrespbody"));
        av++;

        for (; *av != NULL; av++)
                if (!strcmp(*av, "-max")) {
                        max = atoi(av[1]);
                        av++;
                } else
                        vtc_fatal(hp->vl,
                            "Unknown http rxrespbody spec: %s\n", *av);

        http_swallow_body(hp, hp->resp, 1, max);
        vtc_log(hp->vl, 4, "bodylen = %s", hp->bodylen);
}

/* SECTION: client-server.spec.rxchunk
 *
 * rxchunk
 *         Receive an HTTP chunk.
 */

static void
cmd_http_rxchunk(CMD_ARGS)
{
        struct http *hp;
        int ll, i;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);

        i = http_rxchunk(hp);
        if (i == 0) {
                ll = hp->rx_p - hp->body;
                hp->bodyl = ll;
                bprintf(hp->bodylen, "%d", ll);
                vtc_log(hp->vl, 4, "bodylen = %s", hp->bodylen);
        }
}

/**********************************************************************
 * Transmit a request
 */

static void
cmd_http_txreq(CMD_ARGS)
{
        struct http *hp;
        const char *req = "GET";
        const char *url = "/";
        const char *proto = "HTTP/1.1";
        const char *up = NULL;
        unsigned nohost;
        unsigned nouseragent = 0;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);
        AZ(strcmp(av[0], "txreq"));
        av++;

        VSB_clear(hp->vsb);

        hp->head_method = 0;
        for (; *av != NULL; av++) {
                if (!strcmp(*av, "-url")) {
                        url = av[1];
                        av++;
                } else if (!strcmp(*av, "-proto")) {
                        proto = av[1];
                        av++;
                } else if (!strcmp(*av, "-method") ||
                    !strcmp(*av, "-req")) {
                        req = av[1];
                        hp->head_method = !strcmp(av[1], "HEAD") ;
                        av++;
                } else if (!hp->sfd && !strcmp(*av, "-up")) {
                        up = av[1];
                        av++;
                } else if (!strcmp(*av, "-nouseragent")) {
                        nouseragent = 1;
                } else
                        break;
        }
        VSB_printf(hp->vsb, "%s %s %s%s", req, url, proto, nl);

        if (up)
                VSB_printf(hp->vsb, "Connection: Upgrade, HTTP2-Settings%s"
                                "Upgrade: h2c%s"
                                "HTTP2-Settings: %s%s", nl, nl, up, nl);

        nohost = strcmp(proto, "HTTP/1.1") != 0;
        av = http_tx_parse_args(av, vl, hp, NULL, nohost, 1, 1, nouseragent);
        if (*av != NULL)
                vtc_fatal(hp->vl, "Unknown http txreq spec: %s\n", *av);
        http_write(hp, 4, "txreq");

        if (up) {
                parse_string(vl, hp,
                    "rxresp\n"
                    "expect resp.status == 101\n"
                    "expect resp.http.connection == Upgrade\n"
                    "expect resp.http.upgrade == h2c\n"
                    "txpri\n"
                );
                b64_settings(hp, up);
                parse_string(vl, hp,
                    "stream 0 {\n"
                    "    txsettings\n"
                    "    rxsettings\n"
                    "    txsettings -ack\n"
                    "    rxsettings\n"
                    "    expect settings.ack == true"
                    "} -start\n"
                );
        }
}

/* SECTION: client-server.spec.recv
 *
 * recv NUMBER
 *         Read NUMBER bytes from the connection.
 */

static void
cmd_http_recv(CMD_ARGS)
{
        struct http *hp;
        int i, n;
        char u[32];

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        n = strtoul(av[1], NULL, 0);
        while (n > 0) {
                i = read(hp->sess->fd, u, n > 32 ? 32 : n);
                if (i > 0)
                        vtc_dump(hp->vl, 4, "recv", u, i);
                else
                        vtc_log(hp->vl, hp->fatal, "recv() got %d (%s)", i,
                            strerror(errno));
                n -= i;
        }
}

/* SECTION: client-server.spec.send
 *
 * send STRING
 *         Push STRING on the connection.
 */

static void
cmd_http_send(CMD_ARGS)
{
        struct http *hp;
        int i;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        vtc_dump(hp->vl, 4, "send", av[1], -1);
        i = write(hp->sess->fd, av[1], strlen(av[1]));
        if (i != strlen(av[1]))
                vtc_log(hp->vl, hp->fatal, "Write error in http_send(): %s",
                    strerror(errno));
}

/* SECTION: client-server.spec.send_n
 *
 * send_n NUMBER STRING
 *         Write STRING on the socket NUMBER times.
 */

static void
cmd_http_send_n(CMD_ARGS)
{
        struct http *hp;
        int i, n, l;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AN(av[2]);
        AZ(av[3]);
        n = strtoul(av[1], NULL, 0);
                vtc_dump(hp->vl, 4, "send_n", av[2], -1);
        l = strlen(av[2]);
        while (n--) {
                i = write(hp->sess->fd, av[2], l);
                if (i != l)
                        vtc_log(hp->vl, hp->fatal,
                            "Write error in http_send(): %s",
                            strerror(errno));
        }
}

/* SECTION: client-server.spec.send_urgent
 *
 * send_urgent STRING
 *         Send string as TCP OOB urgent data. You will never need this.
 */

static void
cmd_http_send_urgent(CMD_ARGS)
{
        struct http *hp;
        int i;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        vtc_dump(hp->vl, 4, "send_urgent", av[1], -1);
        i = send(hp->sess->fd, av[1], strlen(av[1]), MSG_OOB);
        if (i != strlen(av[1]))
                vtc_log(hp->vl, hp->fatal,
                    "Write error in http_send_urgent(): %s", strerror(errno));
}

/* SECTION: client-server.spec.sendhex
 *
 * sendhex STRING
 *         Send bytes as described by STRING. STRING should consist of hex pairs
 *         possibly separated by whitespace or newlines. For example:
 *         "0F EE a5    3df2".
 */

static void
cmd_http_sendhex(CMD_ARGS)
{
        struct vsb *vsb;
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        vsb = vtc_hex_to_bin(hp->vl, av[1]);
        assert(VSB_len(vsb) >= 0);
        vtc_hexdump(hp->vl, 4, "sendhex", VSB_data(vsb), VSB_len(vsb));
        if (VSB_tofile(vsb, hp->sess->fd))
                vtc_log(hp->vl, hp->fatal, "Write failed: %s",
                    strerror(errno));
        VSB_destroy(&vsb);
}

/* SECTION: client-server.spec.chunked
 *
 * chunked STRING
 *         Send STRING as chunked encoding.
 */

static void
cmd_http_chunked(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        VSB_clear(hp->vsb);
        VSB_printf(hp->vsb, "%jx%s%s%s",
            (uintmax_t)strlen(av[1]), nl, av[1], nl);
        http_write(hp, 4, "chunked");
}

/* SECTION: client-server.spec.chunkedlen
 *
 * chunkedlen NUMBER
 *         Do as ``chunked`` except that the string will be generated
 *         for you, with a length of NUMBER characters.
 */

static void
cmd_http_chunkedlen(CMD_ARGS)
{
        unsigned len;
        unsigned u, v;
        char buf[16384];
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        VSB_clear(hp->vsb);

        len = atoi(av[1]);

        if (len == 0) {
                VSB_printf(hp->vsb, "0%s%s", nl, nl);
        } else {
                for (u = 0; u < sizeof buf; u++)
                        buf[u] = (u & 7) + '0';

                VSB_printf(hp->vsb, "%x%s", len, nl);
                for (u = 0; u < len; u += v) {
                        v = vmin_t(unsigned, len - u, sizeof buf);
                        VSB_bcat(hp->vsb, buf, v);
                }
                VSB_printf(hp->vsb, "%s", nl);
        }
        http_write(hp, 4, "chunked");
}


/* SECTION: client-server.spec.timeout
 *
 * timeout NUMBER
 *         Set the TCP timeout for this entity.
 */

static void
cmd_http_timeout(CMD_ARGS)
{
        struct http *hp;
        double d;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[1]);
        AZ(av[2]);
        d = VNUM(av[1]);
        if (isnan(d))
                vtc_fatal(vl, "timeout is not a number (%s)", av[1]);
        hp->timeout = d;
}

/* SECTION: client-server.spec.expect_close
 *
 * expect_close
 *      Reads from the connection, expecting nothing to read but an EOF.
 */
static void
cmd_http_expect_close(CMD_ARGS)
{
        struct http *hp;
        struct pollfd fds[1];
        char c;
        int i;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AZ(av[1]);

        vtc_log(vl, 4, "Expecting close (fd = %d)", hp->sess->fd);
        if (hp->h2)
                stop_h2(hp);
        while (1) {
                fds[0].fd = hp->sess->fd;
                fds[0].events = POLLIN;
                fds[0].revents = 0;
                i = poll(fds, 1, (int)(hp->timeout * 1000));
                if (i < 0 && errno == EINTR)
                        continue;
                if (i == 0)
                        vtc_log(vl, hp->fatal, "Expected close: timeout");
                if (i != 1 || !(fds[0].revents & (POLLIN|POLLERR|POLLHUP)))
                        vtc_log(vl, hp->fatal,
                            "Expected close: poll = %d, revents = 0x%x",
                            i, fds[0].revents);
                i = read(hp->sess->fd, &c, 1);
                if (i <= 0 && VTCP_Check(i))
                        break;
                if (i == 1 && vct_islws(c))
                        continue;
                vtc_log(vl, hp->fatal,
                    "Expecting close: read = %d, c = 0x%02x", i, c);
        }
        vtc_log(vl, 4, "fd=%d EOF, as expected", hp->sess->fd);
}

/* SECTION: client-server.spec.close
 *
 * close (server only)
 *      Close the connection. Note that if operating in HTTP/2 mode no
 *      extra (GOAWAY) frame is sent, it's simply a TCP close.
 */
static void
cmd_http_close(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AZ(av[1]);
        assert(hp->sfd != NULL);
        assert(*hp->sfd >= 0);
        if (hp->h2)
                stop_h2(hp);
        VTCP_close(&hp->sess->fd);
        vtc_log(vl, 4, "Closed");
}

/* SECTION: client-server.spec.accept
 *
 * accept (server only)
 *      Close the current connection, if any, and accept a new one. Note
 *      that this new connection is HTTP/1.x.
 */
static void
cmd_http_accept(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);
        AZ(av[1]);
        assert(hp->sfd != NULL);
        assert(*hp->sfd >= 0);
        if (hp->h2)
                stop_h2(hp);
        if (hp->sess->fd >= 0)
                VTCP_close(&hp->sess->fd);
        vtc_log(vl, 4, "Accepting");
        hp->sess->fd = accept(*hp->sfd, NULL, NULL);
        if (hp->sess->fd < 0)
                vtc_log(vl, hp->fatal, "Accepted failed: %s", strerror(errno));
        vtc_log(vl, 3, "Accepted socket fd is %d", hp->sess->fd);
}

/* SECTION: client-server.spec.shutdown
 *
 * shutdown
 *      Initiate shutdown.
 *
 *      \-read
 *              Shutdown the read direction.
 *      \-write
 *              Shutdown the write direction.
 *
 *      The default is both direction.
 */
static void
cmd_http_shutdown(CMD_ARGS)
{
        struct http *hp;
        int how = SHUT_RDWR;
        const char *str[] = {
                [SHUT_RD]       = "RD",
                [SHUT_WR]       = "WR",
                [SHUT_RDWR]     = "RDWR",
        };

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AZ(strcmp(av[0], "shutdown"));
        av++;

        if (*av != NULL) {
                if (!strcmp(*av, "-read")) {
                        how = SHUT_RD;
                        av++;
                } else if (!strcmp(*av, "-write")) {
                        how = SHUT_WR;
                        av++;
                }
        }

        if (*av != NULL)
                vtc_fatal(hp->vl, "Unknown http shutdown spec: %s\n", *av);

        vtc_log(vl, 4, "Shutting down fd (%s): %d", str[how], hp->sess->fd);
        if (shutdown(hp->sess->fd, how) < 0)
                vtc_log(vl, hp->fatal, "Shutdown failed: %s", strerror(errno));
        vtc_log(vl, 3, "Shutdown socket fd (%d): %d", how, hp->sess->fd);
}

/* SECTION: client-server.spec.fatal
 *
 * fatal|non_fatal
 *         Control whether a failure of this entity should stop the test.
 */

static void
cmd_http_fatal(CMD_ARGS)
{
        struct http *hp;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);

        (void)vl;
        AZ(av[1]);
        if (!strcmp(av[0], "fatal")) {
                hp->fatal = 0;
        } else {
                assert(!strcmp(av[0], "non_fatal"));
                hp->fatal = -1;
        }
}

#define cmd_http_non_fatal cmd_http_fatal

static const char PREFACE[24] = {
        0x50, 0x52, 0x49, 0x20, 0x2a, 0x20, 0x48, 0x54,
        0x54, 0x50, 0x2f, 0x32, 0x2e, 0x30, 0x0d, 0x0a,
        0x0d, 0x0a, 0x53, 0x4d, 0x0d, 0x0a, 0x0d, 0x0a
};

/* SECTION: client-server.spec.txpri
 *
 * txpri (client only)
 *      Send an HTTP/2 preface ("PRI * HTTP/2.0\\r\\n\\r\\nSM\\r\\n\\r\\n")
 *      and set client to HTTP/2.
 */
static void
cmd_http_txpri(CMD_ARGS)
{
        size_t l;
        struct http *hp;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_CLIENT(hp, av);

        vtc_dump(hp->vl, 4, "txpri", PREFACE, sizeof(PREFACE));
        /* Dribble out the preface */
        l = write(hp->sess->fd, PREFACE, 18);
        if (l != 18)
                vtc_log(vl, hp->fatal, "Write failed: (%zd vs %zd) %s",
                    l, sizeof(PREFACE), strerror(errno));
        usleep(10000);
        l = write(hp->sess->fd, PREFACE + 18, sizeof(PREFACE) - 18);
        if (l != sizeof(PREFACE) - 18)
                vtc_log(vl, hp->fatal, "Write failed: (%zd vs %zd) %s",
                    l, sizeof(PREFACE), strerror(errno));

        start_h2(hp);
        AN(hp->h2);
}

/* SECTION: client-server.spec.rxpri
 *
 * rxpri (server only)
 *      Receive a preface. If valid set the server to HTTP/2, abort
 *      otherwise.
 */
static void
cmd_http_rxpri(CMD_ARGS)
{
        struct http *hp;

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        ONLY_SERVER(hp, av);

        hp->rx_p = hp->rx_b;
        if (!http_rxchar(hp, sizeof(PREFACE), 0))
                vtc_fatal(vl, "Couldn't retrieve connection preface");
        if (memcmp(hp->rx_b, PREFACE, sizeof(PREFACE)))
                vtc_fatal(vl, "Received invalid preface\n");
        start_h2(hp);
        AN(hp->h2);
}

/* SECTION: client-server.spec.settings
 *
 * settings -dectbl INT
 *      Force internal HTTP/2 settings to certain values. Currently only
 *      support setting the decoding table size.
 */
static void
cmd_http_settings(CMD_ARGS)
{
        uint32_t n;
        char *p;
        struct http *hp;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);

        if (!hp->h2)
                vtc_fatal(hp->vl, "Only possible in H/2 mode");

        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);

        for (; *av != NULL; av++) {
                if (!strcmp(*av, "-dectbl")) {
                        n = strtoul(av[1], &p, 0);
                        if (*p != '\0')
                                vtc_fatal(hp->vl, "-dectbl takes an integer as "
                                    "argument (found %s)", av[1]);
                        assert(HPK_ResizeTbl(hp->decctx, n) != hpk_err);
                        av++;
                } else
                        vtc_fatal(vl, "Unknown settings spec: %s\n", *av);
        }
}

static void
cmd_http_stream(CMD_ARGS)
{
        struct http *hp;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        if (!hp->h2) {
                vtc_log(hp->vl, 4, "Not in H/2 mode, do what's needed");
                if (hp->sfd)
                        parse_string(vl, hp, "rxpri");
                else
                        parse_string(vl, hp, "txpri");
                parse_string(vl, hp,
                    "stream 0 {\n"
                    "    txsettings\n"
                    "    rxsettings\n"
                    "    txsettings -ack\n"
                    "    rxsettings\n"
                    "    expect settings.ack == true"
                    "} -run\n"
                );
        }
        cmd_stream(av, hp, vl);
}

/* SECTION: client-server.spec.write_body
 *
 * write_body STRING
 *      Write the body of a request or a response to a file. By using the
 *      shell command, higher-level checks on the body can be performed
 *      (eg. XML, JSON, ...) provided that such checks can be delegated
 *      to an external program.
 */
static void
cmd_http_write_body(CMD_ARGS)
{
        struct http *hp;

        (void)vl;
        CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
        AN(av[0]);
        AN(av[1]);
        AZ(av[2]);
        AZ(strcmp(av[0], "write_body"));
        if (VFIL_writefile(NULL, av[1], hp->body, hp->bodyl) != 0)
                vtc_fatal(hp->vl, "failed to write body: %s (%d)",
                    strerror(errno), errno);
}

/**********************************************************************
 * Execute HTTP specifications
 */

const struct cmds http_cmds[] = {
#define CMD_HTTP(n) { #n, cmd_http_##n },
        /* session */
        CMD_HTTP(accept)
        CMD_HTTP(close)
        CMD_HTTP(recv)
        CMD_HTTP(send)
        CMD_HTTP(send_n)
        CMD_HTTP(send_urgent)
        CMD_HTTP(sendhex)
        CMD_HTTP(shutdown)
        CMD_HTTP(timeout)

        /* spec */
        CMD_HTTP(fatal)
        CMD_HTTP(non_fatal)

        /* body */
        CMD_HTTP(gunzip)
        CMD_HTTP(write_body)

        /* HTTP/1.x */
        CMD_HTTP(chunked)
        CMD_HTTP(chunkedlen)
        CMD_HTTP(rxchunk)

        /* HTTP/2 */
        CMD_HTTP(stream)
        CMD_HTTP(settings)

        /* client */
        CMD_HTTP(rxresp)
        CMD_HTTP(rxrespbody)
        CMD_HTTP(rxresphdrs)
        CMD_HTTP(txpri)
        CMD_HTTP(txreq)

        /* server */
        CMD_HTTP(rxpri)
        CMD_HTTP(rxreq)
        CMD_HTTP(rxreqbody)
        CMD_HTTP(rxreqhdrs)
        CMD_HTTP(txresp)
        CMD_HTTP(upgrade)

        /* expect */
        CMD_HTTP(expect)
        CMD_HTTP(expect_close)
        CMD_HTTP(expect_pattern)
#undef CMD_HTTP
        { NULL, NULL }
};

static void
http_process_cleanup(void *arg)
{
        struct http *hp;

        CAST_OBJ_NOTNULL(hp, arg, HTTP_MAGIC);

        if (hp->h2)
                stop_h2(hp);
        VSB_destroy(&hp->vsb);
        free(hp->rx_b);
        free(hp->rem_ip);
        free(hp->rem_port);
        free(hp->rem_path);
        FREE_OBJ(hp);
}

int
http_process(struct vtclog *vl, struct vtc_sess *vsp, const char *spec,
    int sock, int *sfd, const char *addr, int rcvbuf)
{
        struct http *hp;
        int retval, oldbuf;
        socklen_t intlen = sizeof(int);

        (void)sfd;
        ALLOC_OBJ(hp, HTTP_MAGIC);
        AN(hp);
        hp->sess = vsp;
        hp->sess->fd = sock;
        hp->timeout = vtc_maxdur * .5;

        if (rcvbuf) {
                // XXX setsockopt() too late on SunOS
                // https://github.com/varnishcache/varnish-cache/pull/2980#issuecomment-486214661
                hp->rcvbuf = rcvbuf;

                oldbuf = 0;
                AZ(getsockopt(hp->sess->fd, SOL_SOCKET, SO_RCVBUF, &oldbuf, &intlen));
                AZ(setsockopt(hp->sess->fd, SOL_SOCKET, SO_RCVBUF, &rcvbuf, intlen));
                AZ(getsockopt(hp->sess->fd, SOL_SOCKET, SO_RCVBUF, &rcvbuf, &intlen));

                vtc_log(vl, 3, "-rcvbuf fd=%d old=%d new=%d actual=%d",
                    hp->sess->fd, oldbuf, hp->rcvbuf, rcvbuf);
        }

        hp->nrxbuf = 2048*1024;
        hp->rx_b = malloc(hp->nrxbuf);
        AN(hp->rx_b);
        hp->rx_e = hp->rx_b + hp->nrxbuf;
        hp->rx_p = hp->rx_b;
        *hp->rx_p = '\0';

        hp->vsb = VSB_new_auto();
        AN(hp->vsb);

        hp->sfd = sfd;

        hp->rem_ip = malloc(VTCP_ADDRBUFSIZE);
        AN(hp->rem_ip);

        hp->rem_port = malloc(VTCP_PORTBUFSIZE);
        AN(hp->rem_port);

        hp->vl = vl;
        vtc_log_set_cmd(hp->vl, http_cmds);
        hp->gziplevel = 0;
        hp->gzipresidual = -1;

        if (*addr != '/') {
                VTCP_hisname(sock, hp->rem_ip, VTCP_ADDRBUFSIZE, hp->rem_port,
                             VTCP_PORTBUFSIZE);
                hp->rem_path = NULL;
        } else {
                strcpy(hp->rem_ip, "0.0.0.0");
                strcpy(hp->rem_port, "0");
                hp->rem_path = strdup(addr);
        }
        /* XXX: After an upgrade to HTTP/2 the cleanup of a server that is
         * not -wait'ed before the test resets is subject to a race where the
         * cleanup does not happen, so ASAN reports leaks despite the push
         * of a cleanup handler. To easily reproduce, remove the server wait
         * from a02022.vtc and run with ASAN enabled.
         */
        pthread_cleanup_push(http_process_cleanup, hp);
        parse_string(vl, hp, spec);
        retval = hp->sess->fd;
        pthread_cleanup_pop(0);
        http_process_cleanup(hp);
        return (retval);
}

/**********************************************************************
 * Magic test routine
 *
 * This function brute-forces some short strings through gzip(9) to
 * find candidates for all possible 8 bit positions of the stopbit.
 *
 * Here is some good short output strings:
 *
 *      0 184 <e04c8d0fd604c>
 *      1 257 <1ea86e6cf31bf4ec3d7a86>
 *      2 106 <10>
 *      3 163 <a5e2e2e1c2e2>
 *      4 180 <71c5d18ec5d5d1>
 *      5 189 <39886d28a6d2988>
 *      6 118 <80000>
 *      7 151 <386811868>
 *
 */

#if 0
void xxx(void);

void
xxx(void)
{
        z_stream vz;
        int n;
        char ibuf[200];
        char obuf[200];
        int fl[8];
        int i, j;

        for (n = 0; n < 8; n++)
                fl[n] = 9999;

        memset(&vz, 0, sizeof vz);

        for (n = 0;  n < 999999999; n++) {
                *ibuf = 0;
                for (j = 0; j < 7; j++) {
                        snprintf(strchr(ibuf, 0), 5, "%x",
                            (unsigned)VRND_RandomTestable() & 0xffff);
                        vz.next_in = TRUST_ME(ibuf);
                        vz.avail_in = strlen(ibuf);
                        vz.next_out = TRUST_ME(obuf);
                        vz.avail_out = sizeof obuf;
                        assert(Z_OK == deflateInit2(&vz,
                            9, Z_DEFLATED, 31, 9, Z_DEFAULT_STRATEGY));
                        assert(Z_STREAM_END == deflate(&vz, Z_FINISH));
                        i = vz.stop_bit & 7;
                        if (fl[i] > strlen(ibuf)) {
                                printf("%d %jd <%s>\n", i, vz.stop_bit, ibuf);
                                fl[i] = strlen(ibuf);
                        }
                        assert(Z_OK == deflateEnd(&vz));
                }
        }

        printf("FOO\n");
}
#endif

		varnish-cache/bin/varnishtest/vtc_http.c
0		/*-
1		* Copyright (c) 2008-2019 Varnish Software AS
2		* All rights reserved.
3		*
4		* Author: Poul-Henning Kamp <phk@phk.freebsd.dk>
5		*
6		* SPDX-License-Identifier: BSD-2-Clause
7		*
8		* Redistribution and use in source and binary forms, with or without
9		* modification, are permitted provided that the following conditions
10		* are met:
11		* 1. Redistributions of source code must retain the above copyright
12		* notice, this list of conditions and the following disclaimer.
13		* 2. Redistributions in binary form must reproduce the above copyright
14		* notice, this list of conditions and the following disclaimer in the
15		* documentation and/or other materials provided with the distribution.
16		*
17		* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18		* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19		* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20		* ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
21		* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22		* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23		* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24		* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25		* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26		* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27		* SUCH DAMAGE.
28		*/
29
30		#include "config.h"
31
32		#include <sys/socket.h>
33
34		#include <math.h>
35		#include <poll.h>
36		#include <stdio.h>
37		#include <stdlib.h>
38		#include <unistd.h>
39		#include <string.h>
40
41		#include "vtc.h"
42		#include "vtc_http.h"
43
44		#include "vct.h"
45		#include "vfil.h"
46		#include "vnum.h"
47		#include "vrnd.h"
48		#include "vtcp.h"
49		#include "hpack.h"
50
51		extern const struct cmds http_cmds[];
52
53		/* SECTION: client-server client/server
54		*
55		* Client and server threads are fake HTTP entities used to test your Varnish
56		* and VCL. They take any number of arguments, and the one that are not
57		* recognized, assuming they don't start with '-', are treated as
58		* specifications, laying out the actions to undertake::
59		*
60		* client cNAME [...]
61		* server sNAME [...]
62		*
63		* Clients and server are identified by a string that's the first argument,
64		* clients' names start with 'c' and servers' names start with 's'.
65		*
66		* As the client and server commands share a good deal of arguments and
67		* specification actions, they are grouped in this single section, specific
68		* items will be explicitly marked as such.
69		*
70		* SECTION: client-server.macros Macros and automatic behaviour
71		*
72		* To make things easier in the general case, clients will connect by default
73		* to a Varnish server called v1. To connect to a different Varnish server, use
74		* '-connect ${vNAME_sock}'.
75		*
76		* The -vcl+backend switch of the ``varnish`` command will add all the declared
77		* servers as backends. Be careful though, servers will by default listen to
78		* the 127.0.0.1 IP and will pick a random port, and publish 3 macros:
79		* sNAME_addr, sNAME_port and sNAME_sock, but only once they are started. For
80		* 'varnish -vcl+backend' to create the vcl with the correct values, the server
81		* must be started first.
82		*
83		* SECTION: client-server.args Arguments
84		*
85		* \-start
86		* Start the thread in background, processing the last given
87		* specification.
88		*
89		* \-wait
90		* Block until the thread finishes.
91		*
92		* \-run (client only)
93		* Equivalent to "-start -wait".
94		*
95		* \-repeat NUMBER
96		* Instead of processing the specification only once, do it NUMBER times.
97		*
98		* \-keepalive
99		* For repeat, do not open new connections but rather run all
100		* iterations in the same connection
101		*
102		* \-break (server only)
103		* Stop the server.
104		*
105		* \-listen STRING (server only)
106		* Dictate the listening socket for the server. STRING is of the form
107		* "IP PORT", or "/PATH/TO/SOCKET" for a Unix domain socket. In the
108		* latter case, the path must begin with '/', and the server must be
109		* able to create it.
110		*
111		* \-connect STRING (client only)
112		* Indicate the server to connect to. STRING is also of the form
113		* "IP PORT", or "/PATH/TO/SOCKET". As with "server -listen", a
114		* Unix domain socket is recognized when STRING begins with a '/'.
115		*
116		* \-dispatch (server only, s0 only)
117		* Normally, to keep things simple, server threads only handle one
118		* connection at a time, but the -dispatch switch allows to accept
119		* any number of connection and handle them following the given spec.
120		*
121		* However, -dispatch is only allowed for the server name "s0".
122		*
123		* \-proxy1 STRING (client only)
124		* Use the PROXY protocol version 1 for this connection. STRING
125		* is of the form "CLIENTIP:PORT SERVERIP:PORT".
126		*
127		* \-proxy2 STRING (client only)
128		* Use the PROXY protocol version 2 for this connection. STRING
129		* is of the form "CLIENTIP:PORT SERVERIP:PORT".
130		*
131		* SECTION: client-server.spec Specification
132		*
133		* It's a string, either double-quoted "like this", but most of the time
134		* enclosed in curly brackets, allowing multilining. Write a command per line in
135		* it, empty line are ignored, and long line can be wrapped by using a
136		* backslash. For example::
137		*
138		* client c1 {
139		* txreq -url /foo \
140		* -hdr "bar: baz"
141		*
142		* rxresp
143		* } -run
144		*/
145
146		#define ONLY_CLIENT(hp, av) \
147		do { \
148		if (hp->h2) \
149		vtc_fatal(hp->vl, \
150		"\"%s\" only possible before H/2 upgrade", \
151		av[0]); \
152		if (hp->sfd != NULL) \
153		vtc_fatal(hp->vl, \
154		"\"%s\" only possible in client", av[0]); \
155		} while (0)
156
157		#define ONLY_SERVER(hp, av) \
158		do { \
159		if (hp->h2) \
160		vtc_fatal(hp->vl, \
161		"\"%s\" only possible before H/2 upgrade", \
162		av[0]); \
163		if (hp->sfd == NULL) \
164		vtc_fatal(hp->vl, \
165		"\"%s\" only possible in server", av[0]); \
166		} while (0)
167
168
169		/* XXX: we may want to vary this */
170		static const char * const nl = "\r\n";
171
172		/**********************************************************************
173		* Generate a synthetic body
174		*/
175
176		char *
177	21240	synth_body(const char *len, int rnd)
178		{
179		int i, j, k, l;
180		char *b;
181
182
183	21240	AN(len);
184	21240	i = strtoul(len, NULL, 0);
185	21240	assert(i > 0);
186	21240	b = malloc(i + 1L);
187	21240	AN(b);
188	21240	l = k = '!';
189	1437567600	for (j = 0; j < i; j++) {
190	1437546360	if ((j % 64) == 63) {
191	22448680	b[j] = '\n';
192	22448680	k++;
193	22448680	if (k == '~')
194	239320	k = '!';
195	22448680	l = k;
196	1437546360	} else if (rnd) {
197	165120	b[j] = (VRND_RandomTestable() % 95) + ' ';
198	165120	} else {
199	1414932560	b[j] = (char)l;
200	1414932560	if (++l == '~')
201	15155080	l = '!';
202		}
203	1437546360	}
204	21240	b[i - 1] = '\n';
205	21240	b[i] = '\0';
206	21240	return (b);
207		}
208
209		/**********************************************************************
210		* Finish and write the vsb to the fd
211		*/
212
213		static void
214	220664	http_write(const struct http hp, int lvl, const char pfx)
215		{
216
217	220664	AZ(VSB_finish(hp->vsb));
218	220664	vtc_dump(hp->vl, lvl, pfx, VSB_data(hp->vsb), VSB_len(hp->vsb));
219	220664	if (VSB_tofile(hp->vsb, hp->sess->fd))
220	526	vtc_log(hp->vl, hp->fatal, "Write failed: %s",
221	263	strerror(errno));
222	220664	}
223
224		/**********************************************************************
225		* find header
226		*/
227
228		static char *
229	557861	http_find_header(char * const hh, const char hdr)
230		{
231		int n, l;
232		char *r;
233
234	557861	l = strlen(hdr);
235
236	4072933	for (n = 3; hh[n] != NULL; n++) {
237	3758024	if (strncasecmp(hdr, hh[n], l) \|\| hh[n][l] != ':')
238	3515072	continue;
239	486304	for (r = hh[n] + l + 1; vct_issp(*r); r++)
240	243352	continue;
241	242952	return (r);
242		}
243	314909	return (NULL);
244	557861	}
245
246		/**********************************************************************
247		* count header
248		*/
249
250		static int
251	218697	http_count_header(char * const hh, const char hdr)
252		{
253	218697	int n, l, r = 0;
254
255	218697	l = strlen(hdr);
256
257	1745292	for (n = 3; hh[n] != NULL; n++) {
258	1526591	if (strncasecmp(hdr, hh[n], l) \|\| hh[n][l] != ':')
259	1418072	continue;
260	108523	r++;
261	108523	}
262	218701	return (r);
263		}
264
265		/* SECTION: client-server.spec.expect
266		*
267		* expect STRING1 OP STRING2
268		* Test if "STRING1 OP STRING2" is true, and if not, fails the test.
269		* OP can be ==, <, <=, >, >= when STRING1 and STRING2 represent numbers
270		* in which case it's an order operator. If STRING1 and STRING2 are
271		* meant as strings OP is a matching operator, either == (exact match)
272		* or ~ (regex match).
273		*
274		* varnishtest will first try to resolve STRING1 and STRING2 by looking
275		* if they have special meanings, in which case, the resolved value is
276		* use for the test. Note that this value can be a string representing a
277		* number, allowing for tests such as::
278		*
279		* expect req.http.x-num > 2
280		*
281		* Here's the list of recognized strings, most should be obvious as they
282		* either match VCL logic, or the txreq/txresp options:
283		*
284		* - remote.ip
285		* - remote.port
286		* - remote.path
287		* - req.method
288		* - req.url
289		* - req.proto
290		* - resp.proto
291		* - resp.status
292		* - resp.reason
293		* - resp.chunklen
294		* - req.bodylen
295		* - req.body
296		* - resp.bodylen
297		* - resp.body
298		* - req.http.NAME
299		* - resp.http.NAME
300		*/
301
302		static const char *
303	533108	cmd_var_resolve(struct http hp, char spec)
304		{
305		char *hh, hdr;
306	533108	if (!strcmp(spec, "remote.ip"))
307	160	return (hp->rem_ip);
308	532948	if (!strcmp(spec, "remote.port"))
309	160	return (hp->rem_port);
310	532788	if (!strcmp(spec, "remote.path"))
311	160	return (hp->rem_path);
312	532628	if (!strcmp(spec, "req.method"))
313	1960	return (hp->req[0]);
314	530668	if (!strcmp(spec, "req.url"))
315	24760	return (hp->req[1]);
316	505908	if (!strcmp(spec, "req.proto"))
317	1800	return (hp->req[2]);
318	504108	if (!strcmp(spec, "resp.proto"))
319	1360	return (hp->resp[0]);
320	502748	if (!strcmp(spec, "resp.status"))
321	64236	return (hp->resp[1]);
322	438512	if (!strcmp(spec, "resp.reason"))
323	9080	return (hp->resp[2]);
324	429432	if (!strcmp(spec, "resp.chunklen"))
325	0	return (hp->chunklen);
326	429432	if (!strcmp(spec, "req.bodylen"))
327	1160	return (hp->bodylen);
328	428272	if (!strcmp(spec, "req.body"))
329	800	return (hp->body != NULL ? hp->body : spec);
330	427472	if (!strcmp(spec, "resp.bodylen"))
331	25999	return (hp->bodylen);
332	401473	if (!strcmp(spec, "resp.body"))
333	8120	return (hp->body != NULL ? hp->body : spec);
334	393353	if (!strncmp(spec, "req.http.", 9)) {
335	14240	hh = hp->req;
336	14240	hdr = spec + 9;
337	393353	} else if (!strncmp(spec, "resp.http.", 10)) {
338	119955	hh = hp->resp;
339	119955	hdr = spec + 10;
340	379113	} else if (!strcmp(spec, "h2.state")) {
341	291	if (hp->h2)
342	131	return ("true");
343		else
344	160	return ("false");
345		} else
346	258867	return (spec);
347	134195	hdr = http_find_header(hh, hdr);
348	134195	return (hdr);
349	533108	}
350
351		static void
352	266562	cmd_http_expect(CMD_ARGS)
353		{
354		struct http *hp;
355		const char *lhs;
356		char *cmp;
357		const char *rhs;
358
359	266562	(void)vl;
360	266562	CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
361	266562	AZ(strcmp(av[0], "expect"));
362	266562	av++;
363
364	266562	AN(av[0]);
365	266562	AN(av[1]);
366	266562	AN(av[2]);
367	266562	AZ(av[3]);
368	266562	lhs = cmd_var_resolve(hp, av[0]);
369	266562	cmp = av[1];
370	266562	rhs = cmd_var_resolve(hp, av[2]);
371
372	266562	vtc_expect(vl, av[0], lhs, cmp, av[2], rhs);
373	266562	}
374
375		/* SECTION: client-server.spec.expect_pattern
376		*
377		* expect_pattern
378		*
379		* Expect as the http body the test pattern generated by chunkedlen ('0'..'7'
380		* repeating).
381		*/
382		static void
383	160	cmd_http_expect_pattern(CMD_ARGS)
384		{
385		char *p;
386		struct http *hp;
387	160	char t = '0';
388
389	160	(void)vl;
390	160	CAST_OBJ_NOTNULL(hp, priv, HTTP_MAGIC);
391	160	AZ(strcmp(av[0], "expect_pattern"));
392	160	av++;
393	160	AZ(av[0]);
394	10485920	for (p = hp->body; *p != '\0'; p++) {
395	10485760	if (*p != t)
396	0	vtc_fatal(hp->vl,
397		"EXPECT PATTERN FAIL @%zd should 0x%02x is 0x%02x",
398	0	(ssize_t) (p - hp->body), t, *p);
399	10485760	t += 1;
400	10485760	t &= ~0x08;
401	10485760	}
402	160	vtc_log(hp->vl, 4, "EXPECT PATTERN SUCCESS");
403	160	}
404
405		/**********************************************************************
406		* Split a HTTP protocol header
407		*/
408
409		static void
410	218691	http_splitheader(struct http *hp, int req)
411		{
412		char p, q, **hh;
413		int n;
414		char buf[20];
415
416	218691	CHECK_OBJ_NOTNULL(hp, HTTP_MAGIC);
417	218691	if (req) {
418	92051	memset(hp->req, 0, sizeof hp->req);
419	92051	hh = hp->req;
420	92051	} else {
421	126640	memset(hp->resp, 0, sizeof hp->resp);
422	126640	hh = hp->resp;
423		}
424
425	218691	n = 0;
426	218691	p = hp->rx_b;
427	218691	if (*p == '\0') {
428	3200	vtc_log(hp->vl, 4, "No headers");
429	3200	return;
430		}
431
432		/* REQ/PROTO */
433	215531	while (vct_islws(*p))
434	40	p++;
435	215491	hh[n++] = p;
436	1486612	while (!vct_islws(*p))
437	1271121	p++;
438	215491	AZ(vct_iscrlf(p, hp->rx_e));
439	215491	*p++ = '\0';
440
441		/* URL/STATUS */
442	215491	while (vct_issp(p)) / XXX: H space only */
443	0	p++;
444	215491	AZ(vct_iscrlf(p, hp->rx_e));
445	215491	hh[n++] = p;
446	1058346	while (!vct_islws(*p))
447	842855	p++;
448	215491	if (vct_iscrlf(p, hp->rx_e)) {
449	40	hh[n++] = NULL;
450	40	q = p;
451	40	p = vct_skipcrlf(p, hp->rx_e);
452	40	*q = '\0';
453	40	} else {
454	215451	*p++ = '\0';
455		/* PROTO/MSG */
456	215451	while (vct_issp(p)) / XXX: H space only */
457	0	p++;
458	215451	hh[n++] = p;
459	1687092	while (!vct_iscrlf(p, hp->rx_e))
460	1471641	p++;
461	215451	q = p;
462	215451	p = vct_skipcrlf(p, hp->rx_e);
463	215451	*q = '\0';
464		}
465	215491	assert(n == 3);
466
467	1741977	while (*p != '\0') {
468	1742092	assert(n < MAX_HDR);
469	1742092	if (vct_iscrlf(p, hp->rx_e))
470	215490	break;
471	1526602	hh[n++] = p++;
472	33464464	while (*p != '\0' && !vct_iscrlf(p, hp->rx_e))
473	31937862	p++;
474	1526486	if (*p == '\0') {
475	0	break;
476		}
477	1526486	q = p;
478	1526486	p = vct_skipcrlf(p, hp->rx_e);
479	1526486	*q = '\0';
480		}
481	215619	p = vct_skipcrlf(p, hp->rx_e);
482	215619	assert(*p == '\0');
483
484	2388741	for (n = 0; n < 3 \|\| hh[n] != NULL; n++) {
485	2173122	bprintf(buf, "http[%2d] ", n);
486	2173122	vtc_dump(hp->vl, 4, buf, hh[n], -1);
487	2173122	}
488	218819	}
489
490
491		/**********************************************************************
492		* Receive another character
493		*/
494
495		static int
496	49737568	http_rxchar(struct http *hp, int n, int eof)
497		{
498		int i;
499		struct pollfd pfd[1];