611 lines
20 KiB
Plaintext
611 lines
20 KiB
Plaintext
/* $KAME: cftoken.l,v 1.73 2003/10/21 07:18:03 itojun Exp $ */
|
|
|
|
%{
|
|
/*
|
|
* Copyright (C) 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002 and 2003 WIDE Project.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. Neither the name of the project nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include <sys/cdefs.h>
|
|
__RCSID("$NetBSD: cftoken.l,v 1.14 2004/04/12 03:34:06 itojun Exp $");
|
|
|
|
#include <sys/types.h>
|
|
#include <sys/param.h>
|
|
#include <sys/socket.h>
|
|
|
|
#include <netinet/in.h>
|
|
#include <netinet6/ipsec.h>
|
|
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
#include <limits.h>
|
|
#include <ctype.h>
|
|
#include <glob.h>
|
|
#ifdef HAVE_STDARG_H
|
|
#include <stdarg.h>
|
|
#else
|
|
#include <varargs.h>
|
|
#endif
|
|
|
|
#include "var.h"
|
|
#include "misc.h"
|
|
#include "vmbuf.h"
|
|
#include "plog.h"
|
|
#include "debug.h"
|
|
|
|
#include "algorithm.h"
|
|
#include "cfparse_proto.h"
|
|
#include "cftoken_proto.h"
|
|
#include "localconf.h"
|
|
#include "oakley.h"
|
|
#include "isakmp_var.h"
|
|
#include "isakmp.h"
|
|
#include "ipsec_doi.h"
|
|
#include "proposal.h"
|
|
#ifdef GC
|
|
#include "gcmalloc.h"
|
|
#endif
|
|
|
|
#ifdef HAVE_CFPARSE_H
|
|
#include "cfparse.h"
|
|
#else
|
|
#include "y.tab.h"
|
|
#endif
|
|
|
|
int yyerrorcount = 0;
|
|
|
|
#if defined(YIPS_DEBUG)
|
|
# define YYDB plog(LLV_DEBUG2, LOCATION, NULL, \
|
|
"begin <%d>%s\n", yy_start, yytext);
|
|
# define YYD { \
|
|
plog(LLV_DEBUG2, LOCATION, NULL, "<%d>%s", \
|
|
yy_start, loglevel >= LLV_DEBUG2 ? "\n" : ""); \
|
|
}
|
|
#else
|
|
# define YYDB
|
|
# define YYD
|
|
#endif /* defined(YIPS_DEBUG) */
|
|
|
|
#define MAX_INCLUDE_DEPTH 10
|
|
|
|
static struct include_stack {
|
|
char *path;
|
|
FILE *fp;
|
|
YY_BUFFER_STATE prevstate;
|
|
int lineno;
|
|
glob_t matches;
|
|
int matchon;
|
|
} incstack[MAX_INCLUDE_DEPTH];
|
|
static int incstackp = 0;
|
|
|
|
static int yy_first_time = 1;
|
|
%}
|
|
|
|
/* common seciton */
|
|
nl \n
|
|
ws [ \t]+
|
|
digit [0-9]
|
|
letter [A-Za-z]
|
|
hexdigit [0-9A-Fa-f]
|
|
/*octet (([01]?{digit}?{digit})|((2([0-4]{digit}))|(25[0-5]))) */
|
|
special [()+\|\?\*]
|
|
comma \,
|
|
dot \.
|
|
slash \/
|
|
bcl \{
|
|
ecl \}
|
|
blcl \[
|
|
elcl \]
|
|
percent \%
|
|
semi \;
|
|
comment \#.*
|
|
ccomment "/*"
|
|
bracketstring \<[^>]*\>
|
|
quotedstring \"[^"]*\"
|
|
addrstring [a-fA-F0-9:]([a-fA-F0-9:\.]*|[a-fA-F0-9:\.]*%[a-zA-Z0-9]*)
|
|
decstring {digit}+
|
|
hexstring 0x{hexdigit}+
|
|
|
|
%s S_INI S_PTH S_INF S_LOG S_PAD S_LST S_RTRY
|
|
%s S_ALGST S_ALGCL
|
|
%s S_SAINF S_SAINFS
|
|
%s S_RMT S_RMTS S_RMTP
|
|
%s S_SA
|
|
|
|
%%
|
|
%{
|
|
if (yy_first_time) {
|
|
BEGIN S_INI;
|
|
yy_first_time = 0;
|
|
}
|
|
%}
|
|
|
|
/* path */
|
|
<S_INI>path { BEGIN S_PTH; YYDB; return(PATH); }
|
|
<S_PTH>include { YYD; yylval.num = LC_PATHTYPE_INCLUDE;
|
|
return(PATHTYPE); }
|
|
<S_PTH>pre_shared_key { YYD; yylval.num = LC_PATHTYPE_PSK;
|
|
return(PATHTYPE); }
|
|
<S_PTH>certificate { YYD; yylval.num = LC_PATHTYPE_CERT;
|
|
return(PATHTYPE); }
|
|
<S_PTH>backupsa { YYD; yylval.num = LC_PATHTYPE_BACKUPSA;
|
|
return(PATHTYPE); }
|
|
<S_PTH>{semi} { BEGIN S_INI; YYDB; return(EOS); }
|
|
|
|
/* include */
|
|
<S_INI>include { YYDB; return(INCLUDE); }
|
|
|
|
/* self information */
|
|
<S_INI>identifier { BEGIN S_INF; YYDB; yywarn("it is obsoleted. use \"my_identifier\" in each remote directives."); return(IDENTIFIER); }
|
|
<S_INF>{semi} { BEGIN S_INI; return(EOS); }
|
|
|
|
/* special */
|
|
<S_INI>complex_bundle { YYDB; return(COMPLEX_BUNDLE); }
|
|
|
|
/* logging */
|
|
<S_INI>log { BEGIN S_LOG; YYDB; return(LOGGING); }
|
|
<S_LOG>info { YYD; yywarn("it is obsoleted. use \"notify\""); yylval.num = 0; return(LOGLEV); }
|
|
<S_LOG>notify { YYD; yylval.num = 0; return(LOGLEV); }
|
|
<S_LOG>debug { YYD; yylval.num = 1; return(LOGLEV); }
|
|
<S_LOG>debug2 { YYD; yylval.num = 2; return(LOGLEV); }
|
|
<S_LOG>debug3 { YYD; yywarn("it is osboleted. use \"debug2\""); yylval.num = 2; return(LOGLEV); }
|
|
<S_LOG>debug4 { YYD; yywarn("it is obsoleted. use \"debug2\""); yylval.num = 2; return(LOGLEV); }
|
|
<S_LOG>{semi} { BEGIN S_INI; return(EOS); }
|
|
|
|
/* padding */
|
|
<S_INI>padding { BEGIN S_PAD; YYDB; return(PADDING); }
|
|
<S_PAD>{bcl} { return(BOC); }
|
|
<S_PAD>randomize { YYD; return(PAD_RANDOMIZE); }
|
|
<S_PAD>randomize_length { YYD; return(PAD_RANDOMIZELEN); }
|
|
<S_PAD>maximum_length { YYD; return(PAD_MAXLEN); }
|
|
<S_PAD>strict_check { YYD; return(PAD_STRICT); }
|
|
<S_PAD>exclusive_tail { YYD; return(PAD_EXCLTAIL); }
|
|
<S_PAD>{ecl} { BEGIN S_INI; return(EOC); }
|
|
|
|
/* listen */
|
|
<S_INI>listen { BEGIN S_LST; YYDB; return(LISTEN); }
|
|
<S_LST>{bcl} { return(BOC); }
|
|
<S_LST>isakmp { YYD; return(X_ISAKMP); }
|
|
<S_LST>admin { YYD; return(X_ADMIN); }
|
|
<S_LST>strict_address { YYD; return(STRICT_ADDRESS); }
|
|
<S_LST>{ecl} { BEGIN S_INI; return(EOC); }
|
|
|
|
/* timer */
|
|
<S_INI>timer { BEGIN S_RTRY; YYDB; return(RETRY); }
|
|
<S_RTRY>{bcl} { return(BOC); }
|
|
<S_RTRY>counter { YYD; return(RETRY_COUNTER); }
|
|
<S_RTRY>interval { YYD; return(RETRY_INTERVAL); }
|
|
<S_RTRY>persend { YYD; return(RETRY_PERSEND); }
|
|
<S_RTRY>phase1 { YYD; return(RETRY_PHASE1); }
|
|
<S_RTRY>phase2 { YYD; return(RETRY_PHASE2); }
|
|
<S_RTRY>{ecl} { BEGIN S_INI; return(EOC); }
|
|
|
|
/* sainfo */
|
|
<S_INI>sainfo { BEGIN S_SAINF; YYDB; return(SAINFO); }
|
|
<S_SAINF>anonymous { YYD; return(ANONYMOUS); }
|
|
<S_SAINF>{blcl}any{elcl} { YYD; return(PORTANY); }
|
|
<S_SAINF>any { YYD; return(ANY); }
|
|
<S_SAINF>from { YYD; return(FROM); }
|
|
/* sainfo spec */
|
|
<S_SAINF>{bcl} { BEGIN S_SAINFS; return(BOC); }
|
|
<S_SAINF>{semi} { BEGIN S_INI; return(EOS); }
|
|
<S_SAINFS>{ecl} { BEGIN S_INI; return(EOC); }
|
|
<S_SAINFS>pfs_group { YYD; return(PFS_GROUP); }
|
|
<S_SAINFS>identifier { YYD; yywarn("it is obsoleted. use \"my_identifier\"."); return(IDENTIFIER); }
|
|
<S_SAINFS>my_identifier { YYD; return(MY_IDENTIFIER); }
|
|
<S_SAINFS>lifetime { YYD; return(LIFETIME); }
|
|
<S_SAINFS>time { YYD; return(LIFETYPE_TIME); }
|
|
<S_SAINFS>byte { YYD; return(LIFETYPE_BYTE); }
|
|
<S_SAINFS>encryption_algorithm { YYD; yylval.num = algclass_ipsec_enc; return(ALGORITHM_CLASS); }
|
|
<S_SAINFS>authentication_algorithm { YYD; yylval.num = algclass_ipsec_auth; return(ALGORITHM_CLASS); }
|
|
<S_SAINFS>compression_algorithm { YYD; yylval.num = algclass_ipsec_comp; return(ALGORITHM_CLASS); }
|
|
<S_SAINFS>{comma} { YYD; return(COMMA); }
|
|
|
|
/* remote */
|
|
<S_INI>remote { BEGIN S_RMT; YYDB; return(REMOTE); }
|
|
<S_RMT>anonymous { YYD; return(ANONYMOUS); }
|
|
/* remote spec */
|
|
<S_RMT>{bcl} { BEGIN S_RMTS; return(BOC); }
|
|
<S_RMTS>{ecl} { BEGIN S_INI; return(EOC); }
|
|
<S_RMTS>exchange_mode { YYD; return(EXCHANGE_MODE); }
|
|
<S_RMTS>{comma} { YYD; /* XXX ignored, but to be handled. */ ; }
|
|
<S_RMTS>base { YYD; yylval.num = ISAKMP_ETYPE_BASE; return(EXCHANGETYPE); }
|
|
<S_RMTS>main { YYD; yylval.num = ISAKMP_ETYPE_IDENT; return(EXCHANGETYPE); }
|
|
<S_RMTS>aggressive { YYD; yylval.num = ISAKMP_ETYPE_AGG; return(EXCHANGETYPE); }
|
|
<S_RMTS>doi { YYD; return(DOI); }
|
|
<S_RMTS>ipsec_doi { YYD; yylval.num = IPSEC_DOI; return(DOITYPE); }
|
|
<S_RMTS>situation { YYD; return(SITUATION); }
|
|
<S_RMTS>identity_only { YYD; yylval.num = IPSECDOI_SIT_IDENTITY_ONLY; return(SITUATIONTYPE); }
|
|
<S_RMTS>secrecy { YYD; yylval.num = IPSECDOI_SIT_SECRECY; return(SITUATIONTYPE); }
|
|
<S_RMTS>integrity { YYD; yylval.num = IPSECDOI_SIT_INTEGRITY; return(SITUATIONTYPE); }
|
|
<S_RMTS>identifier { YYD; yywarn("it is obsoleted. use \"my_identifier\"."); return(IDENTIFIER); }
|
|
<S_RMTS>my_identifier { YYD; return(MY_IDENTIFIER); }
|
|
<S_RMTS>peers_identifier { YYD; return(PEERS_IDENTIFIER); }
|
|
<S_RMTS>verify_identifier { YYD; return(VERIFY_IDENTIFIER); }
|
|
<S_RMTS>certificate_type { YYD; return(CERTIFICATE_TYPE); }
|
|
<S_RMTS>x509 { YYD; yylval.num = ISAKMP_CERT_X509SIGN; return(CERT_X509); }
|
|
<S_RMTS>peers_certfile { YYD; return(PEERS_CERTFILE); }
|
|
<S_RMTS>dnssec { YYD; return(DNSSEC); }
|
|
<S_RMTS>verify_cert { YYD; return(VERIFY_CERT); }
|
|
<S_RMTS>send_cert { YYD; return(SEND_CERT); }
|
|
<S_RMTS>send_cr { YYD; return(SEND_CR); }
|
|
<S_RMTS>dh_group { YYD; return(DH_GROUP); }
|
|
<S_RMTS>nonce_size { YYD; return(NONCE_SIZE); }
|
|
<S_RMTS>generate_policy { YYD; return(GENERATE_POLICY); }
|
|
<S_RMTS>support_mip6 { YYD; yywarn("it is obsoleted. use \"support_proxy\"."); return(SUPPORT_PROXY); }
|
|
<S_RMTS>support_proxy { YYD; return(SUPPORT_PROXY); }
|
|
<S_RMTS>initial_contact { YYD; return(INITIAL_CONTACT); }
|
|
<S_RMTS>proposal_check { YYD; return(PROPOSAL_CHECK); }
|
|
<S_RMTS>obey { YYD; yylval.num = PROP_CHECK_OBEY; return(PROPOSAL_CHECK_LEVEL); }
|
|
<S_RMTS>strict { YYD; yylval.num = PROP_CHECK_STRICT; return(PROPOSAL_CHECK_LEVEL); }
|
|
<S_RMTS>exact { YYD; yylval.num = PROP_CHECK_EXACT; return(PROPOSAL_CHECK_LEVEL); }
|
|
<S_RMTS>claim { YYD; yylval.num = PROP_CHECK_CLAIM; return(PROPOSAL_CHECK_LEVEL); }
|
|
<S_RMTS>keepalive { YYD; return(KEEPALIVE); }
|
|
<S_RMTS>passive { YYD; return(PASSIVE); }
|
|
<S_RMTS>lifetime { YYD; return(LIFETIME); }
|
|
<S_RMTS>time { YYD; return(LIFETYPE_TIME); }
|
|
<S_RMTS>byte { YYD; return(LIFETYPE_BYTE); }
|
|
/* remote proposal */
|
|
<S_RMTS>proposal { BEGIN S_RMTP; YYDB; return(PROPOSAL); }
|
|
<S_RMTP>{bcl} { return(BOC); }
|
|
<S_RMTP>{ecl} { BEGIN S_RMTS; return(EOC); }
|
|
<S_RMTP>lifetime { YYD; return(LIFETIME); }
|
|
<S_RMTP>time { YYD; return(LIFETYPE_TIME); }
|
|
<S_RMTP>byte { YYD; return(LIFETYPE_BYTE); }
|
|
<S_RMTP>encryption_algorithm { YYD; yylval.num = algclass_isakmp_enc; return(ALGORITHM_CLASS); }
|
|
<S_RMTP>authentication_method { YYD; yylval.num = algclass_isakmp_ameth; return(ALGORITHM_CLASS); }
|
|
<S_RMTP>hash_algorithm { YYD; yylval.num = algclass_isakmp_hash; return(ALGORITHM_CLASS); }
|
|
<S_RMTP>dh_group { YYD; return(DH_GROUP); }
|
|
<S_RMTP>gssapi_id { YYD; return(GSSAPI_ID); }
|
|
|
|
/* parameter */
|
|
on { YYD; yylval.num = TRUE; return(SWITCH); }
|
|
off { YYD; yylval.num = FALSE; return(SWITCH); }
|
|
|
|
/* prefix */
|
|
{slash}{digit}{1,3} {
|
|
YYD;
|
|
yytext++;
|
|
yylval.num = atoi(yytext);
|
|
return(PREFIX);
|
|
}
|
|
|
|
/* port number */
|
|
{blcl}{decstring}{elcl} {
|
|
char *p = yytext;
|
|
YYD;
|
|
while (*++p != ']') ;
|
|
*p = 0;
|
|
yytext++;
|
|
yylval.num = atoi(yytext);
|
|
return(PORT);
|
|
}
|
|
|
|
/* upper protocol */
|
|
esp { YYD; yylval.num = IPPROTO_ESP; return(UL_PROTO); }
|
|
ah { YYD; yylval.num = IPPROTO_AH; return(UL_PROTO); }
|
|
ipcomp { YYD; yylval.num = IPPROTO_IPCOMP; return(UL_PROTO); }
|
|
icmp { YYD; yylval.num = IPPROTO_ICMP; return(UL_PROTO); }
|
|
icmp6 { YYD; yylval.num = IPPROTO_ICMPV6; return(UL_PROTO); }
|
|
tcp { YYD; yylval.num = IPPROTO_TCP; return(UL_PROTO); }
|
|
udp { YYD; yylval.num = IPPROTO_UDP; return(UL_PROTO); }
|
|
|
|
/* algorithm type */
|
|
des_iv64 { YYD; yylval.num = algtype_des_iv64; return(ALGORITHMTYPE); }
|
|
des { YYD; yylval.num = algtype_des; return(ALGORITHMTYPE); }
|
|
3des { YYD; yylval.num = algtype_3des; return(ALGORITHMTYPE); }
|
|
rc5 { YYD; yylval.num = algtype_rc5; return(ALGORITHMTYPE); }
|
|
idea { YYD; yylval.num = algtype_idea; return(ALGORITHMTYPE); }
|
|
cast128 { YYD; yylval.num = algtype_cast128; return(ALGORITHMTYPE); }
|
|
blowfish { YYD; yylval.num = algtype_blowfish; return(ALGORITHMTYPE); }
|
|
3idea { YYD; yylval.num = algtype_3idea; return(ALGORITHMTYPE); }
|
|
des_iv32 { YYD; yylval.num = algtype_des_iv32; return(ALGORITHMTYPE); }
|
|
rc4 { YYD; yylval.num = algtype_rc4; return(ALGORITHMTYPE); }
|
|
null_enc { YYD; yylval.num = algtype_null_enc; return(ALGORITHMTYPE); }
|
|
rijndael { YYD; yylval.num = algtype_rijndael; return(ALGORITHMTYPE); }
|
|
aes { YYD; yylval.num = algtype_rijndael; return(ALGORITHMTYPE); }
|
|
twofish { YYD; yylval.num = algtype_twofish; return(ALGORITHMTYPE); }
|
|
non_auth { YYD; yylval.num = algtype_non_auth; return(ALGORITHMTYPE); }
|
|
hmac_md5 { YYD; yylval.num = algtype_hmac_md5; return(ALGORITHMTYPE); }
|
|
hmac_sha1 { YYD; yylval.num = algtype_hmac_sha1; return(ALGORITHMTYPE); }
|
|
hmac_sha2_256 { YYD; yylval.num = algtype_hmac_sha2_256; return(ALGORITHMTYPE); }
|
|
hmac_sha2_384 { YYD; yylval.num = algtype_hmac_sha2_384; return(ALGORITHMTYPE); }
|
|
hmac_sha2_512 { YYD; yylval.num = algtype_hmac_sha2_512; return(ALGORITHMTYPE); }
|
|
des_mac { YYD; yylval.num = algtype_des_mac; return(ALGORITHMTYPE); }
|
|
kpdk { YYD; yylval.num = algtype_kpdk; return(ALGORITHMTYPE); }
|
|
md5 { YYD; yylval.num = algtype_md5; return(ALGORITHMTYPE); }
|
|
sha1 { YYD; yylval.num = algtype_sha1; return(ALGORITHMTYPE); }
|
|
tiger { YYD; yylval.num = algtype_tiger; return(ALGORITHMTYPE); }
|
|
sha2_256 { YYD; yylval.num = algtype_sha2_256; return(ALGORITHMTYPE); }
|
|
sha2_384 { YYD; yylval.num = algtype_sha2_384; return(ALGORITHMTYPE); }
|
|
sha2_512 { YYD; yylval.num = algtype_sha2_512; return(ALGORITHMTYPE); }
|
|
oui { YYD; yylval.num = algtype_oui; return(ALGORITHMTYPE); }
|
|
deflate { YYD; yylval.num = algtype_deflate; return(ALGORITHMTYPE); }
|
|
lzs { YYD; yylval.num = algtype_lzs; return(ALGORITHMTYPE); }
|
|
modp768 { YYD; yylval.num = algtype_modp768; return(ALGORITHMTYPE); }
|
|
modp1024 { YYD; yylval.num = algtype_modp1024; return(ALGORITHMTYPE); }
|
|
modp1536 { YYD; yylval.num = algtype_modp1536; return(ALGORITHMTYPE); }
|
|
ec2n155 { YYD; yylval.num = algtype_ec2n155; return(ALGORITHMTYPE); }
|
|
ec2n185 { YYD; yylval.num = algtype_ec2n185; return(ALGORITHMTYPE); }
|
|
modp2048 { YYD; yylval.num = algtype_modp2048; return(ALGORITHMTYPE); }
|
|
modp3072 { YYD; yylval.num = algtype_modp3072; return(ALGORITHMTYPE); }
|
|
modp4096 { YYD; yylval.num = algtype_modp4096; return(ALGORITHMTYPE); }
|
|
modp6144 { YYD; yylval.num = algtype_modp6144; return(ALGORITHMTYPE); }
|
|
modp8192 { YYD; yylval.num = algtype_modp8192; return(ALGORITHMTYPE); }
|
|
pre_shared_key { YYD; yylval.num = algtype_psk; return(ALGORITHMTYPE); }
|
|
rsasig { YYD; yylval.num = algtype_rsasig; return(ALGORITHMTYPE); }
|
|
dsssig { YYD; yylval.num = algtype_dsssig; return(ALGORITHMTYPE); }
|
|
rsaenc { YYD; yylval.num = algtype_rsaenc; return(ALGORITHMTYPE); }
|
|
rsarev { YYD; yylval.num = algtype_rsarev; return(ALGORITHMTYPE); }
|
|
gssapi_krb { YYD; yylval.num = algtype_gssapikrb; return(ALGORITHMTYPE); }
|
|
|
|
/* identifier type */
|
|
vendor_id { YYD; yywarn("it is obsoleted."); return(VENDORID); }
|
|
user_fqdn { YYD; yylval.num = IDTYPE_USERFQDN; return(IDENTIFIERTYPE); }
|
|
fqdn { YYD; yylval.num = IDTYPE_FQDN; return(IDENTIFIERTYPE); }
|
|
keyid { YYD; yylval.num = IDTYPE_KEYID; return(IDENTIFIERTYPE); }
|
|
address { YYD; yylval.num = IDTYPE_ADDRESS; return(IDENTIFIERTYPE); }
|
|
asn1dn { YYD; yylval.num = IDTYPE_ASN1DN; return(IDENTIFIERTYPE); }
|
|
certname { YYD; yywarn("certname will be obsoleted in near future."); yylval.num = IDTYPE_ASN1DN; return(IDENTIFIERTYPE); }
|
|
|
|
/* units */
|
|
B|byte|bytes { YYD; return(UNITTYPE_BYTE); }
|
|
KB { YYD; return(UNITTYPE_KBYTES); }
|
|
MB { YYD; return(UNITTYPE_MBYTES); }
|
|
TB { YYD; return(UNITTYPE_TBYTES); }
|
|
sec|secs|second|seconds { YYD; return(UNITTYPE_SEC); }
|
|
min|mins|minute|minutes { YYD; return(UNITTYPE_MIN); }
|
|
hour|hours { YYD; return(UNITTYPE_HOUR); }
|
|
|
|
/* boolean */
|
|
yes { YYD; yylval.num = TRUE; return(BOOLEAN); }
|
|
no { YYD; yylval.num = FALSE; return(BOOLEAN); }
|
|
|
|
{decstring} {
|
|
char *bp;
|
|
|
|
YYD;
|
|
yylval.num = strtol(yytext, &bp, 10);
|
|
return(NUMBER);
|
|
}
|
|
|
|
{hexstring} {
|
|
char *p;
|
|
|
|
YYD;
|
|
yylval.val = vmalloc(yyleng + (yyleng & 1) + 1);
|
|
if (yylval.val == NULL) {
|
|
yyerror("vmalloc failed");
|
|
return -1;
|
|
}
|
|
|
|
p = yylval.val->v;
|
|
*p++ = '0';
|
|
*p++ = 'x';
|
|
|
|
/* fixed string if length is odd. */
|
|
if (yyleng & 1)
|
|
*p++ = '0';
|
|
memcpy(p, &yytext[2], yyleng - 1);
|
|
|
|
return(HEXSTRING);
|
|
}
|
|
|
|
{quotedstring} {
|
|
u_char *p = yytext;
|
|
|
|
YYD;
|
|
while (*++p != '"') ;
|
|
*p = '\0';
|
|
|
|
yylval.val = vmalloc(yyleng - 1);
|
|
if (yylval.val == NULL) {
|
|
yyerror("vmalloc failed");
|
|
return -1;
|
|
}
|
|
memcpy(yylval.val->v, &yytext[1], yylval.val->l);
|
|
|
|
return(QUOTEDSTRING);
|
|
}
|
|
|
|
{addrstring} {
|
|
YYD;
|
|
|
|
yylval.val = vmalloc(yyleng + 1);
|
|
if (yylval.val == NULL) {
|
|
yyerror("vmalloc failed");
|
|
return -1;
|
|
}
|
|
memcpy(yylval.val->v, yytext, yylval.val->l);
|
|
|
|
return(ADDRSTRING);
|
|
}
|
|
|
|
<<EOF>> {
|
|
yy_delete_buffer(YY_CURRENT_BUFFER);
|
|
incstackp--;
|
|
nextfile:
|
|
if (incstack[incstackp].matchon <
|
|
incstack[incstackp].matches.gl_pathc) {
|
|
char* filepath = incstack[incstackp].matches.gl_pathv[incstack[incstackp].matchon];
|
|
incstack[incstackp].matchon++;
|
|
incstackp++;
|
|
if (yycf_set_buffer(filepath) != 0) {
|
|
incstackp--;
|
|
goto nextfile;
|
|
}
|
|
yy_switch_to_buffer(yy_create_buffer(yyin, YY_BUF_SIZE));
|
|
BEGIN(S_INI);
|
|
} else {
|
|
globfree(&incstack[incstackp].matches);
|
|
if (incstackp == 0)
|
|
yyterminate();
|
|
else
|
|
yy_switch_to_buffer(incstack[incstackp].prevstate);
|
|
}
|
|
}
|
|
|
|
/* ... */
|
|
{ws} { ; }
|
|
{nl} { incstack[incstackp].lineno++; }
|
|
{comment} { YYD; }
|
|
{semi} { return(EOS); }
|
|
. { yymore(); }
|
|
|
|
%%
|
|
|
|
void
|
|
yyerror(char *s, ...)
|
|
{
|
|
char fmt[512];
|
|
|
|
va_list ap;
|
|
#ifdef HAVE_STDARG_H
|
|
va_start(ap, s);
|
|
#else
|
|
va_start(ap);
|
|
#endif
|
|
snprintf(fmt, sizeof(fmt), "%s:%d: \"%s\" %s\n",
|
|
incstack[incstackp].path, incstack[incstackp].lineno,
|
|
yytext, s);
|
|
plogv(LLV_ERROR, LOCATION, NULL, fmt, ap);
|
|
va_end(ap);
|
|
|
|
yyerrorcount++;
|
|
}
|
|
|
|
void
|
|
yywarn(char *s, ...)
|
|
{
|
|
char fmt[512];
|
|
|
|
va_list ap;
|
|
#ifdef HAVE_STDARG_H
|
|
va_start(ap, s);
|
|
#else
|
|
va_start(ap);
|
|
#endif
|
|
snprintf(fmt, sizeof(fmt), "%s:%d: \"%s\" %s\n",
|
|
incstack[incstackp].path, incstack[incstackp].lineno,
|
|
yytext, s);
|
|
plogv(LLV_WARNING, LOCATION, NULL, fmt, ap);
|
|
va_end(ap);
|
|
}
|
|
|
|
int
|
|
yycf_switch_buffer(path)
|
|
char *path;
|
|
{
|
|
char *filepath = NULL;
|
|
|
|
/* got the include file name */
|
|
if (incstackp >= MAX_INCLUDE_DEPTH) {
|
|
plog(LLV_ERROR, LOCATION, NULL,
|
|
"Includes nested too deeply");
|
|
return -1;
|
|
}
|
|
|
|
if (glob(path, GLOB_TILDE, NULL, &incstack[incstackp].matches) != 0 ||
|
|
incstack[incstackp].matches.gl_pathc == 0) {
|
|
plog(LLV_ERROR, LOCATION, NULL,
|
|
"glob found no matches for path");
|
|
return -1;
|
|
}
|
|
incstack[incstackp].matchon = 0;
|
|
incstack[incstackp].prevstate = YY_CURRENT_BUFFER;
|
|
|
|
nextmatch:
|
|
if (incstack[incstackp].matchon >= incstack[incstackp].matches.gl_pathc)
|
|
return -1;
|
|
filepath =
|
|
incstack[incstackp].matches.gl_pathv[incstack[incstackp].matchon];
|
|
incstack[incstackp].matchon++;
|
|
incstackp++;
|
|
|
|
if (yycf_set_buffer(filepath) != 0) {
|
|
incstackp--;
|
|
goto nextmatch;
|
|
}
|
|
|
|
yy_switch_to_buffer(yy_create_buffer(yyin, YY_BUF_SIZE));
|
|
|
|
BEGIN(S_INI);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
yycf_set_buffer(path)
|
|
char *path;
|
|
{
|
|
yyin = fopen(path, "r");
|
|
if (yyin == NULL) {
|
|
fprintf(stderr, "failed to open file %s (%s)\n",
|
|
path, strerror(errno));
|
|
plog(LLV_ERROR, LOCATION, NULL,
|
|
"failed to open file %s (%s)\n",
|
|
path, strerror(errno));
|
|
return -1;
|
|
}
|
|
|
|
/* initialize */
|
|
incstack[incstackp].fp = yyin;
|
|
incstack[incstackp].path = strdup(path);
|
|
incstack[incstackp].lineno = 1;
|
|
plog(LLV_DEBUG, LOCATION, NULL,
|
|
"reading config file %s\n", path, 0);
|
|
|
|
return 0;
|
|
}
|
|
|
|
void
|
|
yycf_init_buffer()
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < MAX_INCLUDE_DEPTH; i++)
|
|
memset(&incstack[i], 0, sizeof(incstack[i]));
|
|
incstackp = 0;
|
|
}
|
|
|
|
void
|
|
yycf_clean_buffer()
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < MAX_INCLUDE_DEPTH; i++) {
|
|
if (incstack[i].path != NULL) {
|
|
fclose(incstack[i].fp);
|
|
racoon_free(incstack[i].path);
|
|
incstack[i].path = NULL;
|
|
}
|
|
}
|
|
}
|
|
|