CGI environment for online ASN.1 compilation

5 files changed, 984 insertions, 0 deletions

diff --git a/asn1c/webcgi/Makefile.am b/asn1c/webcgi/Makefile.am
new file mode 100644
index 00000000..332d2c5c
--- /dev/null
+++ b/asn1c/webcgi/Makefile.am
@@ -0,0 +1,4 @@
+
+noinst_SCRIPTS = asn1c.cgi
+noinst_PROGRAMS = asn1c-suid-helper
+
diff --git a/asn1c/webcgi/Makefile.in b/asn1c/webcgi/Makefile.in
new file mode 100644
index 00000000..8b83b04c
--- /dev/null
+++ b/asn1c/webcgi/Makefile.in
@@ -0,0 +1,437 @@
+# Makefile.in generated by automake 1.8.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002,
+# 2003, 2004  Free Software Foundation, Inc.
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+
+SOURCES = asn1c-suid-helper.c
+
+srcdir = @srcdir@
+top_srcdir = @top_srcdir@
+VPATH = @srcdir@
+pkgdatadir = $(datadir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+top_builddir = ../..
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+INSTALL = @INSTALL@
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+host_triplet = @host@
+noinst_PROGRAMS = asn1c-suid-helper$(EXEEXT)
+subdir = asn1c/webcgi
+DIST_COMMON = README $(srcdir)/Makefile.am $(srcdir)/Makefile.in
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.in
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(SHELL) $(top_srcdir)/mkinstalldirs
+CONFIG_HEADER = $(top_builddir)/config.h
+CONFIG_CLEAN_FILES =
+PROGRAMS = $(noinst_PROGRAMS)
+asn1c_suid_helper_SOURCES = asn1c-suid-helper.c
+asn1c_suid_helper_OBJECTS = asn1c-suid-helper.$(OBJEXT)
+asn1c_suid_helper_LDADD = $(LDADD)
+SCRIPTS = $(noinst_SCRIPTS)
+DEFAULT_INCLUDES = -I. -I$(srcdir) -I$(top_builddir)
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+@AMDEP_TRUE@DEP_FILES = ./$(DEPDIR)/asn1c-suid-helper.Po
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+LTCOMPILE = $(LIBTOOL) --mode=compile $(CC) $(DEFS) \
+	$(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
+	$(AM_CFLAGS) $(CFLAGS)
+CCLD = $(CC)
+LINK = $(LIBTOOL) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
+	$(AM_LDFLAGS) $(LDFLAGS) -o $@
+SOURCES = asn1c-suid-helper.c
+DIST_SOURCES = asn1c-suid-helper.c
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+ADD_CFLAGS = @ADD_CFLAGS@
+AMDEP_FALSE = @AMDEP_FALSE@
+AMDEP_TRUE = @AMDEP_TRUE@
+AMTAR = @AMTAR@
+AR = @AR@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CONFIGURE_DEPENDS = @CONFIGURE_DEPENDS@
+CPLUSPLUS_FOUND_FALSE = @CPLUSPLUS_FOUND_FALSE@
+CPLUSPLUS_FOUND_TRUE = @CPLUSPLUS_FOUND_TRUE@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CXX = @CXX@
+CXXCPP = @CXXCPP@
+CXXDEPMODE = @CXXDEPMODE@
+CXXFLAGS = @CXXFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO = @ECHO@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+F77 = @F77@
+FFLAGS = @FFLAGS@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+LDFLAGS = @LDFLAGS@
+LEX = @LEX@
+LEXLIB = @LEXLIB@
+LEX_OUTPUT_ROOT = @LEX_OUTPUT_ROOT@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LIBTOOL = @LIBTOOL@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINT = @MAINT@
+MAINTAINER_MODE_FALSE = @MAINTAINER_MODE_FALSE@
+MAINTAINER_MODE_TRUE = @MAINTAINER_MODE_TRUE@
+MAKEINFO = @MAKEINFO@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+RANLIB = @RANLIB@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+STRIP = @STRIP@
+VERSION = @VERSION@
+YACC = @YACC@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+ac_ct_CXX = @ac_ct_CXX@
+ac_ct_F77 = @ac_ct_F77@
+ac_ct_RANLIB = @ac_ct_RANLIB@
+ac_ct_STRIP = @ac_ct_STRIP@
+am__fastdepCC_FALSE = @am__fastdepCC_FALSE@
+am__fastdepCC_TRUE = @am__fastdepCC_TRUE@
+am__fastdepCXX_FALSE = @am__fastdepCXX_FALSE@
+am__fastdepCXX_TRUE = @am__fastdepCXX_TRUE@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+bindir = @bindir@
+build = @build@
+build_alias = @build_alias@
+build_cpu = @build_cpu@
+build_os = @build_os@
+build_vendor = @build_vendor@
+datadir = @datadir@
+exec_prefix = @exec_prefix@
+host = @host@
+host_alias = @host_alias@
+host_cpu = @host_cpu@
+host_os = @host_os@
+host_vendor = @host_vendor@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+sysconfdir = @sysconfdir@
+target = @target@
+target_alias = @target_alias@
+target_cpu = @target_cpu@
+target_os = @target_os@
+target_vendor = @target_vendor@
+noinst_SCRIPTS = asn1c.cgi
+all: all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .lo .o .obj
+$(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh \
+		&& exit 0; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu  asn1c/webcgi/Makefile'; \
+	cd $(top_srcdir) && \
+	  $(AUTOMAKE) --gnu  asn1c/webcgi/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+clean-noinstPROGRAMS:
+	@list='$(noinst_PROGRAMS)'; for p in $$list; do \
+	  f=`echo $$p|sed 's/$(EXEEXT)$$//'`; \
+	  echo " rm -f $$p $$f"; \
+	  rm -f $$p $$f ; \
+	done
+asn1c-suid-helper$(EXEEXT): $(asn1c_suid_helper_OBJECTS) $(asn1c_suid_helper_DEPENDENCIES) 
+	@rm -f asn1c-suid-helper$(EXEEXT)
+	$(LINK) $(asn1c_suid_helper_LDFLAGS) $(asn1c_suid_helper_OBJECTS) $(asn1c_suid_helper_LDADD) $(LIBS)
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/asn1c-suid-helper.Po@am__quote@
+
+.c.o:
+@am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
+@am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	depfile='$(DEPDIR)/$*.Po' tmpdepfile='$(DEPDIR)/$*.TPo' @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	if $(COMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ `$(CYGPATH_W) '$<'`; \
+@am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Po"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	depfile='$(DEPDIR)/$*.Po' tmpdepfile='$(DEPDIR)/$*.TPo' @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+.c.lo:
+@am__fastdepCC_TRUE@	if $(LTCOMPILE) -MT $@ -MD -MP -MF "$(DEPDIR)/$*.Tpo" -c -o $@ $<; \
+@am__fastdepCC_TRUE@	then mv -f "$(DEPDIR)/$*.Tpo" "$(DEPDIR)/$*.Plo"; else rm -f "$(DEPDIR)/$*.Tpo"; exit 1; fi
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	depfile='$(DEPDIR)/$*.Plo' tmpdepfile='$(DEPDIR)/$*.TPlo' @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(LTCOMPILE) -c -o $@ $<
+
+mostlyclean-libtool:
+	-rm -f *.lo
+
+clean-libtool:
+	-rm -rf .libs _libs
+
+distclean-libtool:
+	-rm -f libtool
+uninstall-info-am:
+
+ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES)
+	list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \
+	unique=`for i in $$list; do \
+	    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+	  done | \
+	  $(AWK) '    { files[$$0] = 1; } \
+	       END { for (i in files) print i; }'`; \
+	mkid -fID $$unique
+tags: TAGS
+
+TAGS:  $(HEADERS) $(SOURCES)  $(TAGS_DEPENDENCIES) \
+		$(TAGS_FILES) $(LISP)
+	tags=; \
+	here=`pwd`; \
+	list='$(SOURCES) $(HEADERS)  $(LISP) $(TAGS_FILES)'; \
+	unique=`for i in $$list; do \
+	    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+	  done | \
+	  $(AWK) '    { files[$$0] = 1; } \
+	       END { for (i in files) print i; }'`; \
+	if test -z "$(ETAGS_ARGS)$$tags$$unique"; then :; else \
+	  test -z "$$unique" && unique=$$empty_fix; \
+	  $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	    $$tags $$unique; \
+	fi
+ctags: CTAGS
+CTAGS:  $(HEADERS) $(SOURCES)  $(TAGS_DEPENDENCIES) \
+		$(TAGS_FILES) $(LISP)
+	tags=; \
+	here=`pwd`; \
+	list='$(SOURCES) $(HEADERS)  $(LISP) $(TAGS_FILES)'; \
+	unique=`for i in $$list; do \
+	    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+	  done | \
+	  $(AWK) '    { files[$$0] = 1; } \
+	       END { for (i in files) print i; }'`; \
+	test -z "$(CTAGS_ARGS)$$tags$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$tags $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && cd $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) $$here
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's|.|.|g'`; \
+	list='$(DISTFILES)'; for file in $$list; do \
+	  case $$file in \
+	    $(srcdir)/*) file=`echo "$$file" | sed "s|^$$srcdirstrip/||"`;; \
+	    $(top_srcdir)/*) file=`echo "$$file" | sed "s|^$$topsrcdirstrip/|$(top_builddir)/|"`;; \
+	  esac; \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  dir=`echo "$$file" | sed -e 's,/[^/]*$$,,'`; \
+	  if test "$$dir" != "$$file" && test "$$dir" != "."; then \
+	    dir="/$$dir"; \
+	    $(mkdir_p) "$(distdir)$$dir"; \
+	  else \
+	    dir=''; \
+	  fi; \
+	  if test -d $$d/$$file; then \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -pR $(srcdir)/$$file $(distdir)$$dir || exit 1; \
+	    fi; \
+	    cp -pR $$d/$$file $(distdir)$$dir || exit 1; \
+	  else \
+	    test -f $(distdir)/$$file \
+	    || cp -p $$d/$$file $(distdir)/$$file \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-am
+all-am: Makefile $(PROGRAMS) $(SCRIPTS)
+installdirs:
+install: install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	$(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	  install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	  `test -z '$(STRIP)' || \
+	    echo "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'"` install
+mostlyclean-generic:
+
+clean-generic:
+
+distclean-generic:
+	-rm -f $(CONFIG_CLEAN_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+clean: clean-am
+
+clean-am: clean-generic clean-libtool clean-noinstPROGRAMS \
+	mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-libtool distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-exec-am:
+
+install-info: install-info-am
+
+install-man:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic \
+	mostlyclean-libtool
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am: uninstall-info-am
+
+.PHONY: CTAGS GTAGS all all-am check check-am clean clean-generic \
+	clean-libtool clean-noinstPROGRAMS ctags distclean \
+	distclean-compile distclean-generic distclean-libtool \
+	distclean-tags distdir dvi dvi-am html html-am info info-am \
+	install install-am install-data install-data-am install-exec \
+	install-exec-am install-info install-info-am install-man \
+	install-strip installcheck installcheck-am installdirs \
+	maintainer-clean maintainer-clean-generic mostlyclean \
+	mostlyclean-compile mostlyclean-generic mostlyclean-libtool \
+	pdf pdf-am ps ps-am tags uninstall uninstall-am \
+	uninstall-info-am
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/asn1c/webcgi/README b/asn1c/webcgi/README
new file mode 100644
index 00000000..063b0fc3
--- /dev/null
+++ b/asn1c/webcgi/README
@@ -0,0 +1,21 @@
+
+This is the source of the CGI-based Web wrapper around asn1c compiler.
+
+To install, execute the following steps in this directory
+
+	CGIDIR=/path/where/webserver/CGIs/are/stored
+	make				# Ensure the binary files are built
+	cp asn1c.cgi asn1c-suid-helper $CGIDIR
+	chmod 4555 $CGIDIR/asn1c-suid-helper
+	chown root $CGIDIR/asn1c-suid-helper
+	# edit the $CGIDIR/asn1c.cgi to set up a few preferences
+	# in the beginning of that Perl script.
+
+The chmod command makes the asn1c-suid-helper program setuid.
+The asn1c-suid-helper is a tiny wrapper (look in the asn1c-suid-helper.c),
+which has the single purpose of running the asn1c compiler under extremely
+strict environment.
+The root uid and 4555 mode actually _raise_ security of the whole ASN.1 CGI
+system, so don't worry.
+If you're still uncertain, just go read the source code, it's only a page long.
+
diff --git a/asn1c/webcgi/asn1c-suid-helper.c b/asn1c/webcgi/asn1c-suid-helper.c
new file mode 100644
index 00000000..64390981
--- /dev/null
+++ b/asn1c/webcgi/asn1c-suid-helper.c
@@ -0,0 +1,87 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <sys/types.h>
+#include <unistd.h>
+#include <string.h>
+#include <errno.h>
+#include <sysexits.h>
+
+/*
+ * This program chroots into a given directory,
+ * then executes the asn1c command with strict arguments checking.
+ */
+int
+main(int ac, char **av) {
+	char **argv;
+	char *envp[] = { NULL };	/* Empty environment */
+	int ret;
+	int i;
+
+	if(ac < 3) {
+		setgid(getgid());
+		setuid(getuid());
+		fprintf(stderr,
+			"Usage: %s <chroot-to> <chdir-to> [options]\n", av[0]);
+		exit(EX_USAGE);
+	}
+
+	ret = chroot(av[1]);
+
+	/* Drop the privileges */
+	setgid(getgid());
+	setuid(getuid());
+
+	if(ret != 0) {
+		fprintf(stderr, "chroot(\"%s\") failed: %s\n",
+			av[1], strerror(errno));
+		exit(EX_OSERR);
+	}
+
+	if(chdir(av[2]) != 0) {
+		fprintf(stderr, "chdir(\"%s\") failed: %s\n",
+			av[2], strerror(errno));
+		exit(EX_OSERR);
+	}
+
+	if(ac > 64) {
+		fprintf(stderr, "Insecure number of arguments: %d\n", ac);
+		exit(EX_DATAERR);
+	}
+
+	argv = calloc(ac + 1, sizeof(*argv));
+	if(argv) {
+		argv[0] = "asn1c";
+		argv[1] = "-S/skeletons";
+		memcpy(argv + 2, av + 3, (ac - 3) * sizeof(*argv));
+	} else {
+		perror("malloc()");
+		exit(EX_OSERR);
+	}
+
+	/*
+	 * Check arguments for the permitted alphabet constraints.
+	 */
+	for(i = 3; i < ac; i++) {
+		char *p;
+		for(p = av[i];; p++) {
+			switch(*p) {
+			case '0' ... '9': case 'A' ... 'Z': case 'a' ... 'z':
+			case '.': case '_': case '-': case '=':
+				continue;
+			case '\0':
+			default:
+				break;
+			}
+			break;
+		}
+		if(*p || (p - av[i]) > 250) {
+			fprintf(stderr, "Insecure argument %d\n", i);
+			exit(EX_DATAERR);
+		}
+	}
+
+	execve("/bin/asn1c", argv, envp);
+
+	exit(EX_UNAVAILABLE);
+}
+
diff --git a/asn1c/webcgi/asn1c.cgi b/asn1c/webcgi/asn1c.cgi
new file mode 100755
index 00000000..68ab225c
--- /dev/null
+++ b/asn1c/webcgi/asn1c.cgi
@@ -0,0 +1,435 @@
+#!/usr/bin/perl -w
+#
+# $Id$
+#
+
+############################################################################
+# The following preferences may be modified to match the local environment #
+############################################################################
+
+# Directory with the users data.
+$TMPDIR = '/tmp/asn1c-cgi-jail/';
+$SUIDHelper = './asn1c-suid-helper';
+$SkeletonsDir = '/usr/local/share/asn1c';	# Will be needed only once
+$MD5ProgramPath = 'md5';
+
+$warn = '<CENTER><FONT SIZE=+1><B>';
+$unwarn = '</B></FONT></CENTER>';
+
+$OpEnvFailed = 'Failed to create the operations\' environment:';
+$RandFailed = 'No source of randomness';
+$SandBoxInitFailed = 'User playground initialization failed';
+
+$myName = $ENV{SCRIPT_NAME};	# URL of this particular script (without args)
+
+$homePath = "<FONT FACE=Courier SIZE=-1>"
+	. "<A HREF=http://lionet.info/>Home</A>"
+	. " &gt;&gt; <A HREF=http://lionet.info/asn1c/>asn1c</A>"
+	. " &gt;&gt; <A HREF=http://lionet.info/asn1c/asn1c.cgi>Online ASN.1 Compiler</A>"
+	. "</FONT><P>";
+
+###################################################
+# The code below rarely requires any modification #
+###################################################
+
+my $content = '';	# Default content is empty
+
+use CGI qw/param cookie header upload escapeHTML/;
+
+$|=1;	# Enable AutoFlush (for older versions of Perl)
+
+# If something goes wrong, this function is invoked to display the error message
+sub bark($@) {
+	local $_ = join("<BR>\n", @_);
+	$content = $warn . $_ . $unwarn;
+	goto PRINTOUT;
+}
+
+# Make the directory name containing session files for the given Session ID
+sub makeSessionDirName($$) {
+	local $pfx = shift;	# Prefix is the name of the top-level directory
+	local $sid = shift;	# Session identifier (md5)
+	$pfx . '/sessions/' . $sid . '/';
+}
+
+# Create ISO 8601 time string: "YYYY-MM-DDThh:mm:ss"
+my $cachedTime;
+sub isoTime() {
+	return $cachedTime if $cachedTime;
+	local @tm = localtime(time);
+
+	$tm[5] += 1900;
+	$tm[4] += 1;
+
+	# Insert leading zeros
+	for(my $i = 0; $i < 5; $i++) {
+		$tm[$i] =~ s/^(.)$/0$1/;
+	}
+
+	$cachedTime = "$tm[5]-$tm[4]-$tm[3]T$tm[2]:$tm[1]:$tm[0]";
+}
+
+# Create the necessary environment for chrooting into.
+sub prepareChrootEnvironment() {
+	return 1 if(-d $TMPDIR);	# Envuronment already exists
+	mkdir $TMPDIR or bark($OpEnvFailed, $!);	# Global directory
+	mkdir $TMPDIR . 'sessions' or bark($OpEnvFailed, $!); # User sessions
+	mkdir $TMPDIR . 'bin' or bark($OpEnvFailed, $!);	# asn1c location
+	mkdir $TMPDIR . 'skeletons' or bark($OpEnvFailed, $!);	# asn1c data
+	my $compiler_location = `cd / && which asn1c 2>/dev/null`
+		or bark($OpEnvFailed, $!);			# copy asn1c in
+	$compiler_location =~ s/[^\/a-z1-9.-]//ig;
+	bark($OpEnvFailed, $!) unless($compiler_location =~ /^\//);
+	if(-d '/lib') {
+		# Merge in dynamic libc
+		mkdir $TMPDIR . 'lib' or bark($OpEnvFailed, $!);
+		system("cd $TMPDIR/lib && "
+			. "for i in"
+				. " /lib/libc.*"
+				. " /lib/libm.*"
+			. 'do ln $i; done');
+	} elsif(-d '/usr/lib') {
+		# There's no /lib on MacOS
+		mkdir $TMPDIR . 'usr' or bark($OpEnvFailed, $!);
+		mkdir $TMPDIR . 'usr/lib' or bark($OpEnvFailed, $!);
+		mkdir $TMPDIR . 'usr/lib/system' or bark($OpEnvFailed, $!);
+		system("cd $TMPDIR/usr/lib && "
+			. "for i in"
+				. " /usr/lib/libc.*"
+				. " /usr/lib/libSystem.*"
+				. " /usr/lib/system/libmath*"
+				. " /usr/lib/dy*"
+			. '; do ln $i; done');
+	}
+	system("cp $compiler_location $TMPDIR/bin 2>/dev/null") == 0
+		or bark($OpEnvFailed, $!);
+	system("cp -r $SkeletonsDir/* $TMPDIR/skeletons >/dev/null 2>&1") == 0
+			or bark($OpEnvFailed, $!);
+	return 1;
+}
+
+my $EnvironmentSetOK = prepareChrootEnvironment();
+
+#
+# Prepare the session and create the session directory.
+# If session exists, perfom arguments checking and execute historic views.
+#
+$session = cookie('SessionID');
+unless($session) {
+	$session = '';
+	open(R, '/dev/urandom')
+		or open(R, '/dev/random')
+			or bark($RandFailed);
+	read(R, $session, 16) == 16 or bark("Not enough randomness");
+	if($ENV{HTTP_USER_AGENT}) {
+		$session .= $ENV{HTTP_USER_AGENT};	# Add randomness
+	}
+	my $pid = open(R, "-|");
+	if($pid == 0) {	# Child
+		open(W, "| $MD5ProgramPath") or die;
+		print W $session;
+		exit(0);
+	}
+	$session = <R>;
+	$session =~ s/[^a-f0-9]//ig;
+	bark("md5 program is rotten here") if(length($session) != 32);
+	$sessionDir = makeSessionDirName($TMPDIR, $session);
+	mkdir($sessionDir) or bark($SandBoxInitFailed);
+	my $ck = cookie(-name=>'SessionID', -value=>$session, -expires=>'+1y');
+	print header(-cookie=>$ck);
+} else {
+	$session =~ s/[^a-f0-9]//ig;
+	bark("Nope, try again") if(length($session) != 32);	# cool hacker?
+
+	# Make sure the session directory exists
+	$sessionDir = makeSessionDirName($TMPDIR, $session);
+	mkdir($sessionDir) or bark($SandBoxInitFailed) unless(-d $sessionDir);
+
+	local $t = param('time');
+	local $trans = param('trans');
+	local $fetch = param('fetch');
+	local $show = param('show');
+
+	unless($t =~ /^[0-9TZ:+-]{14,}$/ && $trans =~ /^[.a-z0-9_-]+$/i) {
+		$fetch = '';
+		$show = '';
+	}
+	if($fetch =~ /^[.a-z0-9_-]+$/i || $show =~ /^(log|tgz)$/) {
+		local $fname = $sessionDir . '/' . $t . '--' . $trans;
+
+		if($show eq 'tgz') {
+			printf("Content-Type: application/x-tar\n");
+			printf("Content-Encoding: gzip\n\n");
+			exec("cd $fname && "
+				. "for i in *.[ch]; do if [ -L \$i ]; then"
+				. " cp $TMPDIR/skeletons/\$i \$i.-;"
+				. " mv \$i.- \$i;"
+				. " fi done && tar --dereference --owner nobody --group nobody -zcvf - ./*.[ch] ./Makefile*");
+			exit(0);
+		}
+
+		if($show eq 'log') {
+			$fname .= '/+Log';
+		} else {
+			$fname .= '/' . $fetch;
+		}
+		open(I, "< " . $fname)
+			or bark("Invalid or outdated request: [$fname] [$show] $!");
+		printf "Content-Type: text/plain\n\n";
+		while(<I>) {
+			print;
+		}
+		exit(0);
+	}
+
+	print header();
+}
+$HTTPHeaderGenerated = 1;
+
+open(LOG, ">> $sessionDir/+logfile") or bark("Sandbox error: $!");
+print LOG isoTime() . "\tIP=$ENV{REMOTE_ADDR}";
+
+@gotSafeNames = ();
+@gotNames = param('file');
+if($#gotNames != -1 && $gotNames[0] ne "") {
+	@gotFiles = upload('file');
+} else {
+	@gotNames = ();
+	@gotFiles = ();
+}
+
+if($#gotNames == -1) {
+	my $text = param('text');
+	if($text) {
+		push(@gotNames, 'module.asn1');
+	}
+}
+
+# Make safe filenames
+foreach my $fname (@gotNames) {
+	local $_ = $fname;
+	s/.*\///g;	# Strip directory components
+	s/.*\\//g;	# Strip directory components (DOS version)
+	s/^[.-]/_/g;	# Don't allow filenames starting with a dot or a dash
+	s/[^._a-z0-9-]/_/gi;
+	if(!length($_)) {
+		print LOG "\n";
+		bark("Too strange filename: \"$fname\"");
+	}
+	$_ .= '.asn1' unless(/asn[1]{0,1}$/i);
+	@gotSafeNames = (@gotSafeNames, $_);
+	print LOG "\t" . $_;
+}
+
+#
+# Save the files and start compilation process.
+#
+if($#gotSafeNames >= 0) {
+	$transactionDir = isoTime() . '--' . join("-", @gotSafeNames);
+	print LOG "\tDST=$transactionDir";
+
+	my $sandbox = $sessionDir . '/' . $transactionDir;
+	mkdir($sandbox) or bark($SandBoxInitFailed);
+
+	open(I, '> ' . $sandbox . '/+Names');
+	print I join("\n", @gotNames);
+	open(I, '> ' . $sandbox . '/+safeNames');
+	print I join("\n", @gotSafeNames);
+	for(my $i = 0; $i <= $#gotSafeNames; $i++) {
+		local $name = $gotSafeNames[$i];
+		open(I, '> ' . $sandbox . '/'. $name);
+		if($#gotFiles == -1) {
+			print I scalar(param('text'));
+		} else {
+			while(<$gotFiles[$I]>) {
+				print I;
+			}
+		}
+	}
+
+	my $inChDir = makeSessionDirName("/", $session) . $transactionDir;
+	my $options = '';
+	$options .= " -Wdebug-lexer" if(param("optDebugL") eq "on");
+	$options .= " -E" if(param("optE") eq "on");
+	$options .= " -EF" if(param("optEF") eq "on");
+	$options .= " -fnative-types" if(param("optNT") eq "on");
+	system("$TMPDIR/bin/asn1c -v 2>&1 | sed -e 's/^/-- /' > $sandbox/\+Log && $SUIDHelper $TMPDIR $inChDir $options @gotSafeNames >> $sandbox/+Log 2>&1; "
+		. "echo \$? > $sandbox/+ExitCode");
+	bark("Failed to initiate compilation process: $!")
+		if(!-r $sandbox . '/+ExitCode');
+}
+
+#print join("<BR>\n", `env`);
+
+$form =
+  "<FORM METHOD=POST ACTION=$myName ENCTYPE=\"multipart/form-data\">"
+. "Pick the ASN.1 module file:<BR>\n"
+. "<INPUT TYPE=file NAME=file SIZE=40><BR>\n"
+. "Alternatively, enter the ASN.1 specification into the area below:<BR>\n"
+. "<TEXTAREA NAME=text ROWS=15 COLS=60>\n"
+. "/*\n"
+. " * This ASN.1 specification is given for illustrative purposes\n"
+. " */\n"
+. "TestModule  { iso org(3) dod(6) internet(1) private(4)\n"
+. "        1 spelio(9363) software(1) asn1c(5) webcgi(2) 1 }\n"
+. "DEFINITIONS ::= BEGIN\n"
+. "\n"
+. "  TestType ::= SEQUENCE {\n"
+. "      num INTEGER,\n"
+. "      str UTF8String (SIZE(1..20)) OPTIONAL\n"
+. "  }\n"
+. "\n"
+. "END\n"
+. "</TEXTAREA><BR>\n"
+. "<P>"
+. "<FONT SIZE=-1>"
+. "These options may be enabled to control the compiler's behavior:<BR>\n"
+. "<INPUT TYPE=checkbox NAME=optDebugL> Debug lexer (<I>-Wdebug-lexer</I>)<BR>\n"
+. "<INPUT TYPE=checkbox NAME=optE> Just parse and dump (do not compile) (<I>-E</I>)<BR>\n"
+. "<INPUT TYPE=checkbox NAME=optEF> Parse, perform semantic checks, and dump (<I>-E -F</I>)<BR>\n"
+. "<INPUT TYPE=checkbox NAME=optNT CHECKED=on> Employ native machine types (e.g. <b>double</b> instead of <b>REAL_t</b>) (<I>-fnative-types</I>)<BR>\n"
+. "</FONT>"
+. "<P>\n"
+. "<INPUT TYPE=submit VALUE=\"Proceed with ASN.1 compilation\">\n"
+. "</FORM>\n";
+;
+
+#
+# Gather previous transactions to generate the history page.
+# The history page contains a list of several last ASN.1 files
+# which were uploaded for compilation into the system
+# by this particular browser (cookie-tracked).
+#
+opendir(SD, $sessionDir) or bark("Cannot open sandbox: $!");
+my @transactions = readdir(SD);
+my $CountHistoryItems = 0;
+foreach my $trans (sort { $b <=> $a } @transactions) {
+	next unless($trans =~ /^([0-9TZ:+-]{14,})--([_.a-zA-Z0-9-]+)$/);
+
+	local ($t, $f) = ($1, $2);
+	local $origTime = $t;
+	$t =~ s/T/ /;	# 1999-01-02T13:53:12 => 1999-01-02 13:53:12
+
+	# Open the list of file names under which these files are known
+	# at the remote system.
+	open(I, '< ' . $sessionDir . '/' . $trans . '/+Names');
+	local @Names = <I>;
+
+	# Open the list of "safe" file names under which these files
+	# are known to our file system.
+	open(I, '< ' . $sessionDir . '/' . $trans . '/+safeNames');
+	local @safeNames = <I>;
+
+	# Create a list of real file names whith appropriate links to the
+	# "safe" file names for subsequent file fetching.
+	local @markedNames = ();
+	for(my $i = 0; $i <= $#Names; $i++) {
+		local $_ = "<A HREF=\"$myName?time="
+			. escapeHTML($origTime)
+			. "&trans=$f"
+			. "&fetch=$safeNames[$i]\">$Names[$i]</A>";
+		@markedNames = (@markedNames, $_);
+	}
+
+	open(I, '< ' . $sessionDir . '/' . $trans . '/+ExitCode');
+	local $ec = int(<I>);
+
+	if($ec == 0) {
+		$results = "<FONT COLOR=darkgreen><B>"
+			. "Compiled OK</B></FONT><BR>\n";
+	} else {
+		$results = "<FONT COLOR=darkred>"
+			. "Error during compilation: $ec</FONT><BR>\n";
+	}
+
+	$results .= "<NOBR>"
+		. (($ec == 0) ? '1. ' : '')
+		. "<A HREF=\"$myName?time="
+		. escapeHTML($origTime)
+		. "&trans=$f"
+		. "&show=log\">"
+		. "Show compiler log</A></NOBR>";
+	if($ec == 0) {
+		$results .= "<BR>\n<NOBR>"
+		. "2. <A HREF=\"$myName?time="
+		. escapeHTML($origTime)
+		. "&trans=$f"
+		. "&show=tgz\">"
+		. "Fetch results (.tgz)</A></NOBR>";
+	}
+
+	$history .=
+		"<TR><TD BGCOLOR=white ALIGN=center><FONT FACE=Helvetica SIZE=-2>$t</FONT></TD>"
+		. "<TD BGCOLOR=white ALIGN=center><FONT SIZE=-1 FACE=Helvetica>"
+		. join(", ", @markedNames)
+		. "</FONT></TD>"
+		. "<TD BGCOLOR=white><FONT SIZE=-2 FACE=Helvetica>"
+			. $results
+			. "</TD>"
+		. "</TR>";
+	
+	last unless(++$CountHistoryItems < 5);
+}
+if($history) {
+	$history = "<H3>History</H3>"
+	. "<TABLE CELLPADDING=0 CELLSPACING=0 BGCOLOR=#404040 WIDTH=100%><TR><TD>"
+	. "<TABLE BORDER=0 CELLPADDING=5 CELLSPACING=1 WIDTH=100%>\n"
+	. "<TR BGCOLOR=#e0f0d0>"
+	. "<TH><FONT COLOR=#404040 FACE=Courier>Time</FONT></TH>"
+	. "<TH><FONT COLOR=#404040 FACE=Courier>Files processed</FONT></TH>"
+	. "<TH><FONT COLOR=#404040 FACE=Courier>Result</FONT></TH>"
+	. "</TR>\n"
+	. $history . "</TABLE></TD></TR></TABLE><BR>\n";
+}
+
+$content =
+  "<TABLE WIDTH=100% BORDER=0 CELLPADDING=5><TR><TD VALIGN=top>\n"
+. "<H3 ALIGN=center>ASN.1 Input</H3>\n"
+. "$form\n"
+. "</TD><TD WIDTH=50% ALIGN=center VALIGN=top>\n$history"
+	. "<FONT SIZE=-2><B>Privacy Note 1:</B> this page is tailored "
+	. "to your browser using a cryprographically strong cookie. "
+	. "Other users will see different data. "
+	. "However, the page is not secure against malicious users "
+	. "if they are able to intercept your non-SSL Web traffic."
+	. "<BR><B>Privacy Note 2:</B> The author reserves the right to collect any information directly or indirectly supplied by the user of this system. This information may only be used by the author or contributors to enhance the software product. No data is ever given, sold, or otherwise distributed to the third-parties."
+	. "<BR><B>Privacy Note 3:</B> In no event shall the author or contributors be liable for any damages, however caused, even if advised of the possibility of such damage."
+	. "</FONT>"
+. "</TD></TR></TABLE>";
+
+$ua = $ENV{HTTP_USER_AGENT};
+$ua =~ s/\\/\\\\/;
+$ua =~ s/"/\\"/;
+print LOG "\tUA=\"$ua\"";
+print LOG "\n";	# Finalize logging record
+
+PRINTOUT:
+
+print header() unless($HTTPHeaderGenerated);
+
+# If environment has never been set up completely, remove it.
+if($EnvironmentSetOK != 1 && $TMPDIR ne "/") {
+	system("rm -rf $TMPDIR/ >/dev/null 2>&1");
+}
+
+print<<EOM;
+<HTML>
+<HEAD>
+<META KEYWORDS="ASN.1, asn1c, compiler">
+<TITLE>Online ASN.1 Compiler</TITLE>
+</HEAD>
+<BODY BGCOLOR=white>
+
+$homePath
+
+$content
+
+<HR WIDTH=70%>
+<CENTER><ADDRESS><FONT SIZE=-1 FACE=Courier COLOR=#404040>
+<A HREF=http://lionet.info/asn1c>The ASN.1 Compiler</A>
+	Copyright &copy; 2003, 2004
+Lev Walkin &lt;<A HREF=mailto:vlm&#64;lionet.info>vlm&#64;lionet.info</A>&gt;
+</FONT></ADDRESS></CENTER>
+</BODY>
+</HTML>
+EOM