passenger 2.2.15 → 3.0.0.pre1

data/ext/common/Blowfish.h

@@ -0,0 +1,103 @@
+/* $OpenBSD: blf.h,v 1.6 2002/02/16 21:27:17 millert Exp $ */
+/*
+ * Blowfish - a fast block cipher designed by Bruce Schneier
+ *
+ * Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *      This product includes software developed by Niels Provos.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * Modified by <hongli@phusion.nl> on 2009-10-24:
+ *
+ *   - Made it so that this header cannot be included directly.
+ */
+
+#ifndef IN_PASSENGER_BCRYPT_C
+	#error "Do not include this header directly. Use BCrypt.h instead!"
+#endif
+
+#ifndef _PASSENGER_BLOWFISH_H_
+#define _PASSENGER_BLOWFISH_H_
+
+/* Add this type so we'll compile nicely on Solaris.
+   Thanks to Jeremy LaTrasse and the Twitter crew. */
+#ifdef __sun
+	#define u_int8_t uint8_t
+	#define u_int16_t uint16_t
+	#define u_int32_t uint32_t
+	#define u_int64_t uint64_t
+#endif
+
+// Imported from pwd.h. <coda.hale@gmail.com>
+#define	_PASSWORD_LEN		128	/* max length, not counting NUL */
+
+/* Schneier specifies a maximum key length of 56 bytes.
+ * This ensures that every key bit affects every cipher
+ * bit.  However, the subkeys can hold up to 72 bytes.
+ * Warning: For normal blowfish encryption only 56 bytes
+ * of the key affect all cipherbits.
+ */
+
+#define BLF_N	16			/* Number of Subkeys */
+#define BLF_MAXKEYLEN ((BLF_N-2)*4)	/* 448 bits */
+
+/* Blowfish context */
+typedef struct BlowfishContext {
+	u_int32_t S[4][256];	/* S-Boxes */
+	u_int32_t P[BLF_N + 2];	/* Subkeys */
+} blf_ctx;
+
+/* Raw access to customized Blowfish
+ *	blf_key is just:
+ *	Blowfish_initstate( state )
+ *	Blowfish_expand0state( state, key, keylen )
+ */
+
+void Blowfish_encipher(blf_ctx *, u_int32_t *, u_int32_t *);
+void Blowfish_decipher(blf_ctx *, u_int32_t *, u_int32_t *);
+void Blowfish_initstate(blf_ctx *);
+void Blowfish_expand0state(blf_ctx *, const u_int8_t *, u_int16_t);
+void Blowfish_expandstate
+(blf_ctx *, const u_int8_t *, u_int16_t, const u_int8_t *, u_int16_t);
+
+/* Standard Blowfish */
+
+void blf_key(blf_ctx *, const u_int8_t *, u_int16_t);
+void blf_enc(blf_ctx *, u_int32_t *, u_int16_t);
+void blf_dec(blf_ctx *, u_int32_t *, u_int16_t);
+
+void blf_ecb_encrypt(blf_ctx *, u_int8_t *, u_int32_t);
+void blf_ecb_decrypt(blf_ctx *, u_int8_t *, u_int32_t);
+
+void blf_cbc_encrypt(blf_ctx *, u_int8_t *, u_int8_t *, u_int32_t);
+void blf_cbc_decrypt(blf_ctx *, u_int8_t *, u_int8_t *, u_int32_t);
+
+/* Converts u_int8_t to u_int32_t */
+u_int32_t Blowfish_stream2word(const u_int8_t *, u_int16_t , u_int16_t *);
+
+#endif /* _PASSENGER_BLOWFISH_H_ */

data/ext/common/Constants.h

@@ -0,0 +1,48 @@
+/*
+ *  Phusion Passenger - http://www.modrails.com/
+ *  Copyright (c) 2010 Phusion
+ *
+ *  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
+ *
+ *  Permission is hereby granted, free of charge, to any person obtaining a copy
+ *  of this software and associated documentation files (the "Software"), to deal
+ *  in the Software without restriction, including without limitation the rights
+ *  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ *  copies of the Software, and to permit persons to whom the Software is
+ *  furnished to do so, subject to the following conditions:
+ *
+ *  The above copyright notice and this permission notice shall be included in
+ *  all copies or substantial portions of the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ *  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ *  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ *  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ *  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ *  THE SOFTWARE.
+ */
+#ifndef _PASSENGER_CONSTANTS_H_
+#define _PASSENGER_CONSTANTS_H_
+
+/* Don't forget to update lib/phusion_passenger.rb too. */
+#define PASSENGER_VERSION "3.0.0.pre1"
+
+#define FEEDBACK_FD 3
+
+#define DEFAULT_LOG_LEVEL 0
+#define DEFAULT_MAX_POOL_SIZE 6
+#define DEFAULT_POOL_IDLE_TIME 300
+#define DEFAULT_MAX_INSTANCES_PER_APP 0
+#define DEFAULT_WEB_APP_USER "nobody"
+#define DEFAULT_ANALYTICS_LOG_USER DEFAULT_WEB_APP_USER
+#define DEFAULT_ANALYTICS_LOG_GROUP ""
+#define DEFAULT_ANALYTICS_LOG_PERMISSIONS "u=rwx,g=rx,o=rx"
+#define DEFAULT_UNION_STATION_GATEWAY_ADDRESS "gateway.unionstationapp.com"
+#define DEFAULT_UNION_STATION_GATEWAY_PORT 443
+
+#define MESSAGE_SERVER_MAX_USERNAME_SIZE 100
+#define MESSAGE_SERVER_MAX_PASSWORD_SIZE 100
+#define DEFAULT_BACKEND_ACCOUNT_RIGHTS Account::DETACH
+
+#endif /* _PASSENGER_CONSTANTS_H */

data/ext/common/EventedClient.h

@@ -0,0 +1,598 @@
+/*
+ *  Phusion Passenger - http://www.modrails.com/
+ *  Copyright (c) 2010 Phusion
+ *
+ *  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
+ *
+ *  Permission is hereby granted, free of charge, to any person obtaining a copy
+ *  of this software and associated documentation files (the "Software"), to deal
+ *  in the Software without restriction, including without limitation the rights
+ *  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ *  copies of the Software, and to permit persons to whom the Software is
+ *  furnished to do so, subject to the following conditions:
+ *
+ *  The above copyright notice and this permission notice shall be included in
+ *  all copies or substantial portions of the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ *  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ *  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ *  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ *  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ *  THE SOFTWARE.
+ */
+#ifndef _PASSENGER_EVENTED_CLIENT_H_
+#define _PASSENGER_EVENTED_CLIENT_H_
+
+#include <ev++.h>
+#include <string>
+#include <sys/types.h>
+#include <cstdlib>
+#include <cerrno>
+#include <cassert>
+
+#include <boost/function.hpp>
+#include <oxt/system_calls.hpp>
+#include <oxt/thread.hpp>
+
+#include "FileDescriptor.h"
+#include "Utils/IOUtils.h"
+
+namespace Passenger {
+
+using namespace std;
+using namespace boost;
+using namespace oxt;
+
+
+/**
+ * A utility class for making I/O handling in non-blocking libev evented servers
+ * much easier.
+ * - An EventedClient is associated with a reference counted file descriptor.
+ * - It contains connection state information (i.e. whether the connection is
+ *   established or closed). Callbacks are provided for watching connection
+ *   state changes (e.g. <tt>onDisconnect</tt>).
+ * - It provides reference counting features for simpler memory management
+ *   (<tt>ref()</tt> and <tt>unref()</tt>).
+ * - It installs input and output readiness watchers that are unregistered
+ *   when the EventedClient is destroyed. One can hook into input readiness
+ *   watcher with the <tt>onReadable</tt> callback.
+ * - Makes zero-copy writes easy. The <tt>write()</tt> method accepts an array
+ *   of buffers. Whenever possible, all of these buffers are written out in
+ *   the given order, using a single system call, without copying them into a
+ *   single temporary buffer.
+ * - Makes non-blocking writes easy. Normally a write() system call on a
+ *   non-blocking socket can fail with EAGAIN if the socket send buffer is
+ *   full. EventedClient schedules the data to be sent later when the socket is
+ *   writable again. It automatically integrates into the main loop in order
+ *   to do this. This allows one to have write operations occur concurrently
+ *   with read operations.
+ *   In case too many scheduled writes are being piled up, EventedClient
+ *   is smart enough to temporarily disable read notifications and wait until
+ *   everything is written out before enabling read notifications again.
+ *   The definition of "too many" is customizable (<tt>setOutboxLimit()</tt>).
+ * - EventedClient's <tt>disconnect</tt> method respects pending writes. It
+ *   will disconnect after all pending outgoing data have been written out.
+ *
+ * <h2>Basic usage</h2>
+ * Construct an EventedClient with a libev loop and a file descriptor:
+ *
+ * @code
+ * EventedClient *client = new EventedClient(loop, fd);
+ * @endcode
+ *
+ * You are probably interested in read readiness notifications on <tt>fd</tt>.
+ * However these notifications are disabled by default. You need to set the
+ * <tt>onReadable</tt> callback (which is called every time the fd is
+ * readable) and enable read notifications.
+ *
+ * @code
+ * void onReadable(EventedClient *client) {
+ *     // do whatever you want
+ * }
+ * 
+ * ...
+ * client->onReadable = onReadable;
+ * client->notifyReads(true);
+ * @endcode
+ *
+ * <h2>Error handling</h2>
+ * EventedClient never raises exceptions, except when your callbacks do.
+ * It reports errors with the <tt>onSystemError</tt> callback. That said,
+ * EventedClient is exception-aware and will ensure that its internal
+ * state stays consistent even when your callbacks throw exceptions.
+ */
+class EventedClient {
+public:
+	typedef void (*Callback)(EventedClient *client);
+	typedef void (*SystemErrorCallback)(EventedClient *client, const string &message, int code);
+	
+private:
+	enum {
+		/**
+		 * This is the initial state for a client. It means we're
+		 * connected to the client, ready to receive data and
+		 * there's no pending outgoing data. In this state we will
+		 * only be watching for read events.
+		 */
+		EC_CONNECTED,
+		
+		/**
+		 * This state is entered from EC_CONNECTED when the write()
+		 * method fails to send all data immediately and EventedClient
+		 * schedules some data to be sent later, when the socket becomes
+		 * readable again. In here we will be watching for read
+		 * and write events.
+		 */
+		EC_WRITES_PENDING,
+		
+		/**
+		 * This state is entered from EC_WRITES_PENDING or from EC_CONNECTED
+		 * when the write() method fails to send all data immediately, and
+		 * the amount of data to be scheduled to be sent later is larger
+		 * than the specified outbox limit. In this state, EventedClient
+		 * will not watch for read events and will instead concentrate on
+		 * sending out all pending data before watching read events again.
+		 * When all pending data has been sent out the system will transition
+		 * to EC_CONNECTED.
+		 */
+		EC_TOO_MANY_WRITES_PENDING,
+		
+		/**
+		 * This state is entered from the EC_WRITES_PENDING or the
+		 * EC_TOO_MANY_WRITES_PENDING state when disconnect() is called.
+		 * It means that we want to close the connection as soon as all
+		 * pending outgoing data has been sent. As soon as that happens
+		 * it'll transition to EC_DISCONNECTED. In this state no further
+		 * I/O should be allowed.
+		 */
+		EC_DISCONNECTING_WITH_WRITES_PENDING,
+		
+		/**
+		 * Final state. Client connection has been closed. No
+		 * I/O with the client is possible.
+		 */
+		EC_DISCONNECTED
+	} state;
+	
+	/** A libev watcher on for watching read events on <tt>fd</tt>. */
+	ev::io readWatcher;
+	/** A libev watcher on for watching write events on <tt>fd</tt>. */
+	ev::io writeWatcher;
+	/** Storage for data that could not be sent out immediately. */
+	string outbox;
+	int refcount;
+	bool m_notifyReads;
+	unsigned int outboxLimit;
+	
+	void _onReadable(ev::io &w, int revents) {
+		emitEvent(onReadable);
+	}
+	
+	void onWritable(ev::io &w, int revents) {
+		assert(state != EC_DISCONNECTED);
+		
+		this_thread::disable_interruption di;
+		this_thread::disable_syscall_interruption dsi;
+		size_t sent = 0;
+		bool done = outbox.empty();
+		
+		while (!done) {
+			ssize_t ret = syscalls::write(fd,
+				outbox.data() + sent,
+				outbox.size() - sent);
+			if (ret == -1) {
+				if (errno != EAGAIN) {
+					int e = errno;
+					disconnect(true);
+					emitSystemErrorEvent("Cannot write data to client", e);
+					return;
+				}
+				done = true;
+			} else {
+				sent += ret;
+				done = sent == outbox.size();
+			}
+		}
+		if (sent > 0) {
+			outbox.erase(0, sent);
+		}
+		
+		updateWatcherStates();
+		if (outbox.empty()) {
+			emitEvent(onPendingDataFlushed);
+		}
+	}
+	
+	bool outboxTooLarge() {
+		return outbox.size() > 0 && outbox.size() >= outboxLimit;
+	}
+	
+	void updateWatcherStates() {
+		if (outbox.empty()) {
+			switch (state) {
+			case EC_CONNECTED:
+				watchReadEvents(m_notifyReads);
+				watchWriteEvents(false);
+				break;
+			case EC_WRITES_PENDING:
+			case EC_TOO_MANY_WRITES_PENDING:
+				state = EC_CONNECTED;
+				watchReadEvents(m_notifyReads);
+				watchWriteEvents(false);
+				break;
+			case EC_DISCONNECTING_WITH_WRITES_PENDING:
+				state = EC_DISCONNECTED;
+				watchReadEvents(false);
+				watchWriteEvents(false);
+				try {
+					fd.close();
+				} catch (const SystemException &e) {
+					emitSystemErrorEvent(e.brief(), e.code());
+				}
+				emitEvent(onDisconnect);
+				break;
+			default:
+				// Should never be reached.
+				abort();
+			}
+		} else {
+			switch (state) {
+			case EC_CONNECTED:
+				if (outboxTooLarge()) {
+					// If we have way too much stuff in the outbox then
+					// suspend reading until we've sent out the entire outbox.
+					state = EC_TOO_MANY_WRITES_PENDING;
+					watchReadEvents(false);
+					watchWriteEvents(true);
+				} else {
+					state = EC_WRITES_PENDING;
+					watchReadEvents(m_notifyReads);
+					watchWriteEvents(true);
+				}
+				break;
+			case EC_WRITES_PENDING:
+				watchReadEvents(m_notifyReads);
+				watchWriteEvents(true);
+				break;
+			case EC_TOO_MANY_WRITES_PENDING:
+			case EC_DISCONNECTING_WITH_WRITES_PENDING:
+				watchReadEvents(false);
+				watchWriteEvents(true);
+				break;
+			default:
+				// Should never be reached.
+				abort();
+			}
+		}
+	}
+	
+	void watchReadEvents(bool enable = true) {
+		if (readWatcher.is_active() && !enable) {
+			readWatcher.stop();
+		} else if (!readWatcher.is_active() && enable) {
+			readWatcher.start();
+		}
+	}
+	
+	void watchWriteEvents(bool enable = true) {
+		if (writeWatcher.is_active() && !enable) {
+			writeWatcher.stop();
+		} else if (!writeWatcher.is_active() && enable) {
+			writeWatcher.start();
+		}
+	}
+	
+	void emitEvent(Callback callback) {
+		if (callback != NULL) {
+			callback(this);
+		}
+	}
+	
+	void emitSystemErrorEvent(const string &message, int code) {
+		if (onSystemError != NULL) {
+			onSystemError(this, message, code);
+		}
+	}
+	
+public:
+	/** The client's file descriptor. Could be -1: see <tt>ioAllowed()</tt>. */
+	FileDescriptor fd;
+	
+	/**
+	 * Called when the file descriptor becomes readable and read notifications
+	 * are enabled (see <tt>notifyRead()</tt>). When there's too much pending
+	 * outgoing data, readability notifications are temporarily disabled; see
+	 * <tt>write()</tt> for details.
+	 */
+	Callback onReadable;
+	
+	/**
+	 * Called when the client is disconnected. This happens either immediately
+	 * when <tt>disconnect()</tt> is called, or a short amount of time later.
+	 * See the documentation for that function for details.
+	 *
+	 * Please note that destroying an EventedClient object does *not* cause
+	 * this callback to be called.
+	 */
+	Callback onDisconnect;
+	
+	/**
+	 * Called when <tt>detach()</tt> is called for the first time.
+	 */
+	Callback onDetach;
+	
+	/**
+	 * Called after all pending outgoing data have been written out.
+	 * If <tt>write()</tt> can be completed immediately without scheduling
+	 * data for later, then <tt>write()</tt> will call this callback
+	 * immediately after writing.
+	 */
+	Callback onPendingDataFlushed;
+	
+	/**
+	 * System call errors are reported with this callback.
+	 */
+	SystemErrorCallback onSystemError;
+	
+	/**
+	 * EventedClient doesn't do anything with this. Set it to whatever you want.
+	 */
+	void *userData;
+	
+	/**
+	 * Creates a new EventedClient with the given libev loop and file descriptor.
+	 * The initial reference count is 1.
+	 */
+	EventedClient(struct ev_loop *loop, const FileDescriptor &_fd)
+		: readWatcher(loop),
+		  writeWatcher(loop),
+		  fd(_fd)
+	{
+		state           = EC_CONNECTED;
+		refcount        = 1;
+		m_notifyReads   = false;
+		outboxLimit     = 1024 * 32;
+		onReadable      = NULL;
+		onDisconnect    = NULL;
+		onDetach        = NULL;
+		onPendingDataFlushed = NULL;
+		onSystemError   = NULL;
+		userData        = NULL;
+		readWatcher.set(fd, ev::READ);
+		readWatcher.set<EventedClient, &EventedClient::_onReadable>(this);
+		writeWatcher.set<EventedClient, &EventedClient::onWritable>(this);
+		writeWatcher.set(fd, ev::WRITE);
+	}
+	
+	virtual ~EventedClient() {
+		// Unregister file descriptor from the event loop poller before
+		// closing the file descriptor.
+		watchReadEvents(false);
+		watchWriteEvents(false);
+	}
+	
+	/**
+	 * Increase reference count.
+	 */
+	void ref() {
+		refcount++;
+	}
+	
+	/**
+	 * Decrease reference count. Upon reaching 0, this EventedClient object
+	 * will be destroyed.
+	 */
+	void unref() {
+		refcount--;
+		assert(refcount >= 0);
+		if (refcount == 0) {
+			delete this;
+		}
+	}
+	
+	/**
+	 * Returns whether it is allowed to perform any I/O with this client.
+	 * Usually true, and false when the client is either being disconnected
+	 * or has been disconnected. A return value of false indicates that
+	 * <tt>fd</tt> might be -1, but even when it isn't -1 you shouldn't
+	 * access <tt>fd</tt> anymore.
+	 */
+	bool ioAllowed() const {
+		return state != EC_DISCONNECTING_WITH_WRITES_PENDING
+			&& state != EC_DISCONNECTED;
+	}
+	
+	/** Used by unit tests. */
+	bool readWatcherActive() const {
+		return readWatcher.is_active();
+	}
+	
+	/**
+	 * Returns the number of bytes that are scheduled to be sent to the
+	 * client at a later time.
+	 * 
+	 * @see write()
+	 */
+	size_t pendingWrites() const {
+		return outbox.size();
+	}
+	
+	/**
+	 * Sets whether you're interested in read events. This will start or
+	 * stop the input readiness watcher appropriately according to the
+	 * current state.
+	 *
+	 * If the client connection is already being closed or has already
+	 * been closed then this method does nothing.
+	 */
+	void notifyReads(bool enable) {
+		if (!ioAllowed()) {
+			return;
+		}
+		
+		this_thread::disable_interruption di;
+		this_thread::disable_syscall_interruption dsi;
+		m_notifyReads = enable;
+		updateWatcherStates();
+	}
+	
+	/**
+	 * Sets a limit on the client outbox. The outbox is where data is stored
+	 * that could not be immediately sent to the client, e.g. because of
+	 * network congestion. Whenver the outbox's size grows past this limit,
+	 * EventedClient will enter a state in which it will stop listening for
+	 * read events and instead concentrate on sending out all pending data.
+	 *
+	 * Setting this to 0 means that the outbox has an unlimited size. Please
+	 * note however that this also means that the outbox's memory could grow
+	 * unbounded if the client is too slow at receiving data.
+	 *
+	 * The default value is some non-zero value.
+	 *
+	 * If the client connection is already being closed or has already
+	 * been closed then this method does nothing.
+	 */
+	void setOutboxLimit(unsigned int size) {
+		if (!ioAllowed()) {
+			return;
+		}
+		
+		this_thread::disable_interruption di;
+		this_thread::disable_syscall_interruption dsi;
+		outboxLimit = size;
+		updateWatcherStates();
+	}
+	
+	void write(const StaticString &data) {
+		write(&data, 1);
+	}
+	
+	/**
+	 * Sends data to this client. This method will try to send the data
+	 * immediately (in which no intermediate copies of the data will be made),
+	 * but if the client is not yet ready to receive data (e.g. because of
+	 * network congestion) then the data will be buffered and scheduled for
+	 * sending later.
+	 *
+	 * If an I/O error was encountered then the client connection will be
+	 * closed by calling <tt>disconnect(true)</tt>. This means this method
+	 * could potentially call the <tt>onDisconnect</tt> callback.
+	 *
+	 * If the client connection is already being closed or has already
+	 * been closed then this method does nothing.
+	 *
+	 * The <tt>onPendingDataFlushed</tt> callback will be called after
+	 * this data and whatever existing pending data have been written
+	 * out. That may either be immediately or after a short period of
+	 * of time.
+	 */
+	void write(const StaticString data[], unsigned int count) {
+		if (!ioAllowed()) {
+			return;
+		}
+		
+		ssize_t ret;
+		this_thread::disable_interruption di;
+		this_thread::disable_syscall_interruption dsi;
+		
+		ret = gatheredWrite(fd, data, count, outbox);
+		if (ret == -1) {
+			int e = errno;
+			disconnect(true);
+			emitSystemErrorEvent("Cannot write data to client", e);
+		} else {
+			updateWatcherStates();
+			if (outbox.empty()) {
+				emitEvent(onPendingDataFlushed);
+			}
+		}
+	}
+	
+	/**
+	 * Disconnects the client. This actually closes the underlying file
+	 * descriptor, even if the FileDescriptor object still has references.
+	 *
+	 * If <em>force</em> is true then the client will be disconnected
+	 * immediately, and any pending outgoing data will be discarded.
+	 * Otherwise the client will be disconnected after all pending
+	 * outgoing data have been sent; in the mean time no new data can be
+	 * received from or sent to the client.
+	 *
+	 * After the client has actually been disconnected (which may be either
+	 * immediately or after a short period of time), a disconnect event will
+	 * be emitted.
+	 *
+	 * If the client connection has already been closed then this method
+	 * does nothing. If the client connection is being closed (because
+	 * there's pending outgoing data) then the behavior depends on the
+	 * <tt>force</tt> argument: if true then the connection is closed
+	 * immediately and the pending data is discarded, otherwise this
+	 * method does nothing.
+	 *
+	 * The <tt>onDisconnect</tt> callback will be called after the file
+	 * descriptor is closed, which is either immediately or after all
+	 * pending data has been sent out.
+	 */
+	void disconnect(bool force = false) {
+		if (!ioAllowed() && !(state == EC_DISCONNECTING_WITH_WRITES_PENDING && force)) {
+			return;
+		}
+		
+		this_thread::disable_interruption di;
+		this_thread::disable_syscall_interruption dsi;
+		
+		if (state == EC_CONNECTED || force) {
+			state = EC_DISCONNECTED;
+			watchReadEvents(false);
+			watchWriteEvents(false);
+			try {
+				fd.close();
+			} catch (const SystemException &e) {
+				emitSystemErrorEvent(e.brief(), e.code());
+			}
+			emitEvent(onDisconnect);
+		} else {
+			state = EC_DISCONNECTING_WITH_WRITES_PENDING;
+			watchReadEvents(false);
+			watchWriteEvents(true);
+			if (syscalls::shutdown(fd, SHUT_RD) == -1) {
+				int e = errno;
+				emitSystemErrorEvent(
+					"Cannot shutdown reader half of the client socket",
+					e);
+			}
+		}
+	}
+	
+	/**
+	 * Detaches the client file descriptor so that this EventedClient no longer
+	 * has any control over it. Any EventedClient I/O watchers on the client file
+	 * descriptor will be stopped and further I/O on the file descriptor via
+	 * EventedClient will become impossible. The original client file descriptor
+	 * is returned and <tt>onDetach</tt> is called. Subsequent calls to this
+	 * function will return -1 and will no longer call <tt>onDetach</tt>.
+	 *
+	 * @post !ioAllowed()
+	 * @post fd == -1
+	 */
+	FileDescriptor detach() {
+		if (state == EC_DISCONNECTED) {
+			return fd;
+		} else {
+			FileDescriptor oldFd = fd;
+			state = EC_DISCONNECTED;
+			watchReadEvents(false);
+			watchWriteEvents(false);
+			fd = -1;
+			emitEvent(onDetach);
+			return oldFd;
+		}
+	}
+};
+
+
+} // namespace Passenger
+
+#endif /* _PASSENGER_EVENTED_CLIENT_H_ */