1 %{
2 /*
3  * configlexer.lex - lexical analyzer for unbound config file
4  *
5  * Copyright (c) 2001-2006, NLnet Labs. All rights reserved
6  *
7  * See LICENSE for the license.
8  *
9  */
10 
11 /* because flex keeps having sign-unsigned compare problems that are unfixed*/
12 #if defined(__clang__)||(defined(__GNUC__)&&((__GNUC__ >4)||(defined(__GNUC_MINOR__)&&(__GNUC__ ==4)&&(__GNUC_MINOR__ >=2))))
13 #pragma GCC diagnostic ignored "-Wsign-compare"
14 #endif
15 
16 #include <ctype.h>
17 #include <string.h>
18 #include <strings.h>
19 #ifdef HAVE_GLOB_H
20 # include <glob.h>
21 #endif
22 
23 #include "util/config_file.h"
24 #include "util/configparser.h"
25 void ub_c_error(const char *message);
26 
27 #if 0
28 #define LEXOUT(s)  printf s /* used ONLY when debugging */
29 #else
30 #define LEXOUT(s)
31 #endif
32 
33 /** avoid warning in about fwrite return value */
34 #define ECHO ub_c_error_msg("syntax error at text: %s", yytext)
35 
36 /** A parser variable, this is a statement in the config file which is
37  * of the form variable: value1 value2 ...  nargs is the number of values. */
38 #define YDVAR(nargs, var) \
39 	num_args=(nargs); \
40 	LEXOUT(("v(%s%d) ", yytext, num_args)); \
41 	if(num_args > 0) { BEGIN(val); } \
42 	return (var);
43 
44 struct inc_state {
45 	char* filename;
46 	int line;
47 	YY_BUFFER_STATE buffer;
48 	struct inc_state* next;
49 };
50 static struct inc_state* config_include_stack = NULL;
51 static int inc_depth = 0;
52 static int inc_prev = 0;
53 static int num_args = 0;
54 
55 void init_cfg_parse(void)
56 {
57 	config_include_stack = NULL;
58 	inc_depth = 0;
59 	inc_prev = 0;
60 	num_args = 0;
61 }
62 
63 static void config_start_include(const char* filename)
64 {
65 	FILE *input;
66 	struct inc_state* s;
67 	char* nm;
68 	if(inc_depth++ > 100000) {
69 		ub_c_error_msg("too many include files");
70 		return;
71 	}
72 	if(*filename == '\0') {
73 		ub_c_error_msg("empty include file name");
74 		return;
75 	}
76 	s = (struct inc_state*)malloc(sizeof(*s));
77 	if(!s) {
78 		ub_c_error_msg("include %s: malloc failure", filename);
79 		return;
80 	}
81 	if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot,
82 		strlen(cfg_parser->chroot)) == 0) {
83 		filename += strlen(cfg_parser->chroot);
84 	}
85 	nm = strdup(filename);
86 	if(!nm) {
87 		ub_c_error_msg("include %s: strdup failure", filename);
88 		free(s);
89 		return;
90 	}
91 	input = fopen(filename, "r");
92 	if(!input) {
93 		ub_c_error_msg("cannot open include file '%s': %s",
94 			filename, strerror(errno));
95 		free(s);
96 		free(nm);
97 		return;
98 	}
99 	LEXOUT(("switch_to_include_file(%s)\n", filename));
100 	s->filename = cfg_parser->filename;
101 	s->line = cfg_parser->line;
102 	s->buffer = YY_CURRENT_BUFFER;
103 	s->next = config_include_stack;
104 	config_include_stack = s;
105 	cfg_parser->filename = nm;
106 	cfg_parser->line = 1;
107 	yy_switch_to_buffer(yy_create_buffer(input, YY_BUF_SIZE));
108 }
109 
110 static void config_start_include_glob(const char* filename)
111 {
112 
113 	/* check for wildcards */
114 #ifdef HAVE_GLOB
115 	glob_t g;
116 	size_t i;
117 	int r, flags;
118 	if(!(!strchr(filename, '*') && !strchr(filename, '?') && !strchr(filename, '[') &&
119 		!strchr(filename, '{') && !strchr(filename, '~'))) {
120 		flags = 0
121 #ifdef GLOB_ERR
122 			| GLOB_ERR
123 #endif
124 #ifdef GLOB_NOSORT
125 			| GLOB_NOSORT
126 #endif
127 #ifdef GLOB_BRACE
128 			| GLOB_BRACE
129 #endif
130 #ifdef GLOB_TILDE
131 			| GLOB_TILDE
132 #endif
133 		;
134 		memset(&g, 0, sizeof(g));
135 		if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot,
136 			strlen(cfg_parser->chroot)) == 0) {
137 			filename += strlen(cfg_parser->chroot);
138 		}
139 		r = glob(filename, flags, NULL, &g);
140 		if(r) {
141 			/* some error */
142 			globfree(&g);
143 			if(r == GLOB_NOMATCH)
144 				return; /* no matches for pattern */
145 			config_start_include(filename); /* let original deal with it */
146 			return;
147 		}
148 		/* process files found, if any */
149 		for(i=0; i<(size_t)g.gl_pathc; i++) {
150 			config_start_include(g.gl_pathv[i]);
151 		}
152 		globfree(&g);
153 		return;
154 	}
155 #endif /* HAVE_GLOB */
156 
157 	config_start_include(filename);
158 }
159 
160 static void config_end_include(void)
161 {
162 	struct inc_state* s = config_include_stack;
163 	--inc_depth;
164 	if(!s) return;
165 	free(cfg_parser->filename);
166 	cfg_parser->filename = s->filename;
167 	cfg_parser->line = s->line;
168 	yy_delete_buffer(YY_CURRENT_BUFFER);
169 	yy_switch_to_buffer(s->buffer);
170 	config_include_stack = s->next;
171 	free(s);
172 }
173 
174 #ifndef yy_set_bol /* compat definition, for flex 2.4.6 */
175 #define yy_set_bol(at_bol) \
176         { \
177 	        if ( ! yy_current_buffer ) \
178 	                yy_current_buffer = yy_create_buffer( yyin, YY_BUF_SIZE ); \
179 	        yy_current_buffer->yy_ch_buf[0] = ((at_bol)?'\n':' '); \
180         }
181 #endif
182 
183 %}
184 %option noinput
185 %option nounput
186 %{
187 #ifndef YY_NO_UNPUT
188 #define YY_NO_UNPUT 1
189 #endif
190 #ifndef YY_NO_INPUT
191 #define YY_NO_INPUT 1
192 #endif
193 %}
194 
195 SPACE   [ \t]
196 LETTER  [a-zA-Z]
197 UNQUOTEDLETTER [^\'\"\n\r \t\\]|\\.
198 UNQUOTEDLETTER_NOCOLON [^\:\'\"\n\r \t\\]|\\.
199 NEWLINE [\r\n]
200 COMMENT \#
201 COLON 	\:
202 DQANY     [^\"\n\r\\]|\\.
203 SQANY     [^\'\n\r\\]|\\.
204 
205 %x	quotedstring singlequotedstr include include_quoted val
206 
207 %%
208 <INITIAL,val>{SPACE}*	{
209 	LEXOUT(("SP ")); /* ignore */ }
210 <INITIAL,val>{SPACE}*{COMMENT}.*	{
211 	/* note that flex makes the longest match and '.' is any but not nl */
212 	LEXOUT(("comment(%s) ", yytext)); /* ignore */ }
213 server{COLON}			{ YDVAR(0, VAR_SERVER) }
214 qname-minimisation{COLON}	{ YDVAR(1, VAR_QNAME_MINIMISATION) }
215 qname-minimisation-strict{COLON} { YDVAR(1, VAR_QNAME_MINIMISATION_STRICT) }
216 num-threads{COLON}		{ YDVAR(1, VAR_NUM_THREADS) }
217 verbosity{COLON}		{ YDVAR(1, VAR_VERBOSITY) }
218 port{COLON}			{ YDVAR(1, VAR_PORT) }
219 outgoing-range{COLON}		{ YDVAR(1, VAR_OUTGOING_RANGE) }
220 outgoing-port-permit{COLON}	{ YDVAR(1, VAR_OUTGOING_PORT_PERMIT) }
221 outgoing-port-avoid{COLON}	{ YDVAR(1, VAR_OUTGOING_PORT_AVOID) }
222 outgoing-num-tcp{COLON}		{ YDVAR(1, VAR_OUTGOING_NUM_TCP) }
223 incoming-num-tcp{COLON}		{ YDVAR(1, VAR_INCOMING_NUM_TCP) }
224 do-ip4{COLON}			{ YDVAR(1, VAR_DO_IP4) }
225 do-ip6{COLON}			{ YDVAR(1, VAR_DO_IP6) }
226 prefer-ip6{COLON}		{ YDVAR(1, VAR_PREFER_IP6) }
227 do-udp{COLON}			{ YDVAR(1, VAR_DO_UDP) }
228 do-tcp{COLON}			{ YDVAR(1, VAR_DO_TCP) }
229 tcp-upstream{COLON}		{ YDVAR(1, VAR_TCP_UPSTREAM) }
230 tcp-mss{COLON}			{ YDVAR(1, VAR_TCP_MSS) }
231 outgoing-tcp-mss{COLON}		{ YDVAR(1, VAR_OUTGOING_TCP_MSS) }
232 ssl-upstream{COLON}		{ YDVAR(1, VAR_SSL_UPSTREAM) }
233 ssl-service-key{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_KEY) }
234 ssl-service-pem{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_PEM) }
235 ssl-port{COLON}			{ YDVAR(1, VAR_SSL_PORT) }
236 use-systemd{COLON}		{ YDVAR(1, VAR_USE_SYSTEMD) }
237 do-daemonize{COLON}		{ YDVAR(1, VAR_DO_DAEMONIZE) }
238 interface{COLON}		{ YDVAR(1, VAR_INTERFACE) }
239 ip-address{COLON}		{ YDVAR(1, VAR_INTERFACE) }
240 outgoing-interface{COLON}	{ YDVAR(1, VAR_OUTGOING_INTERFACE) }
241 interface-automatic{COLON}	{ YDVAR(1, VAR_INTERFACE_AUTOMATIC) }
242 so-rcvbuf{COLON}		{ YDVAR(1, VAR_SO_RCVBUF) }
243 so-sndbuf{COLON}		{ YDVAR(1, VAR_SO_SNDBUF) }
244 so-reuseport{COLON}		{ YDVAR(1, VAR_SO_REUSEPORT) }
245 ip-transparent{COLON}		{ YDVAR(1, VAR_IP_TRANSPARENT) }
246 ip-freebind{COLON}		{ YDVAR(1, VAR_IP_FREEBIND) }
247 chroot{COLON}			{ YDVAR(1, VAR_CHROOT) }
248 username{COLON}			{ YDVAR(1, VAR_USERNAME) }
249 directory{COLON}		{ YDVAR(1, VAR_DIRECTORY) }
250 logfile{COLON}			{ YDVAR(1, VAR_LOGFILE) }
251 pidfile{COLON}			{ YDVAR(1, VAR_PIDFILE) }
252 root-hints{COLON}		{ YDVAR(1, VAR_ROOT_HINTS) }
253 edns-buffer-size{COLON}		{ YDVAR(1, VAR_EDNS_BUFFER_SIZE) }
254 msg-buffer-size{COLON}		{ YDVAR(1, VAR_MSG_BUFFER_SIZE) }
255 msg-cache-size{COLON}		{ YDVAR(1, VAR_MSG_CACHE_SIZE) }
256 msg-cache-slabs{COLON}		{ YDVAR(1, VAR_MSG_CACHE_SLABS) }
257 rrset-cache-size{COLON}		{ YDVAR(1, VAR_RRSET_CACHE_SIZE) }
258 rrset-cache-slabs{COLON}	{ YDVAR(1, VAR_RRSET_CACHE_SLABS) }
259 cache-max-ttl{COLON}     	{ YDVAR(1, VAR_CACHE_MAX_TTL) }
260 cache-max-negative-ttl{COLON}   { YDVAR(1, VAR_CACHE_MAX_NEGATIVE_TTL) }
261 cache-min-ttl{COLON}     	{ YDVAR(1, VAR_CACHE_MIN_TTL) }
262 infra-host-ttl{COLON}		{ YDVAR(1, VAR_INFRA_HOST_TTL) }
263 infra-lame-ttl{COLON}		{ YDVAR(1, VAR_INFRA_LAME_TTL) }
264 infra-cache-slabs{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_SLABS) }
265 infra-cache-numhosts{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_NUMHOSTS) }
266 infra-cache-lame-size{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_LAME_SIZE) }
267 infra-cache-min-rtt{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_MIN_RTT) }
268 num-queries-per-thread{COLON}	{ YDVAR(1, VAR_NUM_QUERIES_PER_THREAD) }
269 jostle-timeout{COLON}		{ YDVAR(1, VAR_JOSTLE_TIMEOUT) }
270 delay-close{COLON}		{ YDVAR(1, VAR_DELAY_CLOSE) }
271 target-fetch-policy{COLON}	{ YDVAR(1, VAR_TARGET_FETCH_POLICY) }
272 harden-short-bufsize{COLON}	{ YDVAR(1, VAR_HARDEN_SHORT_BUFSIZE) }
273 harden-large-queries{COLON}	{ YDVAR(1, VAR_HARDEN_LARGE_QUERIES) }
274 harden-glue{COLON}		{ YDVAR(1, VAR_HARDEN_GLUE) }
275 harden-dnssec-stripped{COLON}	{ YDVAR(1, VAR_HARDEN_DNSSEC_STRIPPED) }
276 harden-below-nxdomain{COLON}	{ YDVAR(1, VAR_HARDEN_BELOW_NXDOMAIN) }
277 harden-referral-path{COLON}	{ YDVAR(1, VAR_HARDEN_REFERRAL_PATH) }
278 harden-algo-downgrade{COLON}	{ YDVAR(1, VAR_HARDEN_ALGO_DOWNGRADE) }
279 use-caps-for-id{COLON}		{ YDVAR(1, VAR_USE_CAPS_FOR_ID) }
280 caps-whitelist{COLON}		{ YDVAR(1, VAR_CAPS_WHITELIST) }
281 unwanted-reply-threshold{COLON}	{ YDVAR(1, VAR_UNWANTED_REPLY_THRESHOLD) }
282 private-address{COLON}		{ YDVAR(1, VAR_PRIVATE_ADDRESS) }
283 private-domain{COLON}		{ YDVAR(1, VAR_PRIVATE_DOMAIN) }
284 prefetch-key{COLON}		{ YDVAR(1, VAR_PREFETCH_KEY) }
285 prefetch{COLON}			{ YDVAR(1, VAR_PREFETCH) }
286 stub-zone{COLON}		{ YDVAR(0, VAR_STUB_ZONE) }
287 name{COLON}			{ YDVAR(1, VAR_NAME) }
288 stub-addr{COLON}		{ YDVAR(1, VAR_STUB_ADDR) }
289 stub-host{COLON}		{ YDVAR(1, VAR_STUB_HOST) }
290 stub-prime{COLON}		{ YDVAR(1, VAR_STUB_PRIME) }
291 stub-first{COLON}		{ YDVAR(1, VAR_STUB_FIRST) }
292 stub-ssl-upstream{COLON}	{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
293 forward-zone{COLON}		{ YDVAR(0, VAR_FORWARD_ZONE) }
294 forward-addr{COLON}		{ YDVAR(1, VAR_FORWARD_ADDR) }
295 forward-host{COLON}		{ YDVAR(1, VAR_FORWARD_HOST) }
296 forward-first{COLON}		{ YDVAR(1, VAR_FORWARD_FIRST) }
297 forward-ssl-upstream{COLON}	{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
298 view{COLON}			{ YDVAR(0, VAR_VIEW) }
299 view-first{COLON}		{ YDVAR(1, VAR_VIEW_FIRST) }
300 do-not-query-address{COLON}	{ YDVAR(1, VAR_DO_NOT_QUERY_ADDRESS) }
301 do-not-query-localhost{COLON}	{ YDVAR(1, VAR_DO_NOT_QUERY_LOCALHOST) }
302 access-control{COLON}		{ YDVAR(2, VAR_ACCESS_CONTROL) }
303 hide-identity{COLON}		{ YDVAR(1, VAR_HIDE_IDENTITY) }
304 hide-version{COLON}		{ YDVAR(1, VAR_HIDE_VERSION) }
305 identity{COLON}			{ YDVAR(1, VAR_IDENTITY) }
306 version{COLON}			{ YDVAR(1, VAR_VERSION) }
307 module-config{COLON}     	{ YDVAR(1, VAR_MODULE_CONF) }
308 dlv-anchor{COLON}		{ YDVAR(1, VAR_DLV_ANCHOR) }
309 dlv-anchor-file{COLON}		{ YDVAR(1, VAR_DLV_ANCHOR_FILE) }
310 trust-anchor-file{COLON}	{ YDVAR(1, VAR_TRUST_ANCHOR_FILE) }
311 auto-trust-anchor-file{COLON}	{ YDVAR(1, VAR_AUTO_TRUST_ANCHOR_FILE) }
312 trusted-keys-file{COLON}	{ YDVAR(1, VAR_TRUSTED_KEYS_FILE) }
313 trust-anchor{COLON}		{ YDVAR(1, VAR_TRUST_ANCHOR) }
314 val-override-date{COLON}	{ YDVAR(1, VAR_VAL_OVERRIDE_DATE) }
315 val-sig-skew-min{COLON}		{ YDVAR(1, VAR_VAL_SIG_SKEW_MIN) }
316 val-sig-skew-max{COLON}		{ YDVAR(1, VAR_VAL_SIG_SKEW_MAX) }
317 val-bogus-ttl{COLON}		{ YDVAR(1, VAR_BOGUS_TTL) }
318 val-clean-additional{COLON}	{ YDVAR(1, VAR_VAL_CLEAN_ADDITIONAL) }
319 val-permissive-mode{COLON}	{ YDVAR(1, VAR_VAL_PERMISSIVE_MODE) }
320 ignore-cd-flag{COLON}		{ YDVAR(1, VAR_IGNORE_CD_FLAG) }
321 serve-expired{COLON}		{ YDVAR(1, VAR_SERVE_EXPIRED) }
322 fake-dsa{COLON}			{ YDVAR(1, VAR_FAKE_DSA) }
323 val-log-level{COLON}		{ YDVAR(1, VAR_VAL_LOG_LEVEL) }
324 key-cache-size{COLON}		{ YDVAR(1, VAR_KEY_CACHE_SIZE) }
325 key-cache-slabs{COLON}		{ YDVAR(1, VAR_KEY_CACHE_SLABS) }
326 neg-cache-size{COLON}		{ YDVAR(1, VAR_NEG_CACHE_SIZE) }
327 val-nsec3-keysize-iterations{COLON}	{
328 				  YDVAR(1, VAR_VAL_NSEC3_KEYSIZE_ITERATIONS) }
329 add-holddown{COLON}		{ YDVAR(1, VAR_ADD_HOLDDOWN) }
330 del-holddown{COLON}		{ YDVAR(1, VAR_DEL_HOLDDOWN) }
331 keep-missing{COLON}		{ YDVAR(1, VAR_KEEP_MISSING) }
332 permit-small-holddown{COLON}	{ YDVAR(1, VAR_PERMIT_SMALL_HOLDDOWN) }
333 use-syslog{COLON}		{ YDVAR(1, VAR_USE_SYSLOG) }
334 log-identity{COLON}		{ YDVAR(1, VAR_LOG_IDENTITY) }
335 log-time-ascii{COLON}		{ YDVAR(1, VAR_LOG_TIME_ASCII) }
336 log-queries{COLON}		{ YDVAR(1, VAR_LOG_QUERIES) }
337 log-replies{COLON}		{ YDVAR(1, VAR_LOG_REPLIES) }
338 local-zone{COLON}		{ YDVAR(2, VAR_LOCAL_ZONE) }
339 local-data{COLON}		{ YDVAR(1, VAR_LOCAL_DATA) }
340 local-data-ptr{COLON}		{ YDVAR(1, VAR_LOCAL_DATA_PTR) }
341 unblock-lan-zones{COLON}	{ YDVAR(1, VAR_UNBLOCK_LAN_ZONES) }
342 insecure-lan-zones{COLON}	{ YDVAR(1, VAR_INSECURE_LAN_ZONES) }
343 statistics-interval{COLON}	{ YDVAR(1, VAR_STATISTICS_INTERVAL) }
344 statistics-cumulative{COLON}	{ YDVAR(1, VAR_STATISTICS_CUMULATIVE) }
345 extended-statistics{COLON}	{ YDVAR(1, VAR_EXTENDED_STATISTICS) }
346 remote-control{COLON}		{ YDVAR(0, VAR_REMOTE_CONTROL) }
347 control-enable{COLON}		{ YDVAR(1, VAR_CONTROL_ENABLE) }
348 control-interface{COLON}	{ YDVAR(1, VAR_CONTROL_INTERFACE) }
349 control-port{COLON}		{ YDVAR(1, VAR_CONTROL_PORT) }
350 control-use-cert{COLON}		{ YDVAR(1, VAR_CONTROL_USE_CERT) }
351 server-key-file{COLON}		{ YDVAR(1, VAR_SERVER_KEY_FILE) }
352 server-cert-file{COLON}		{ YDVAR(1, VAR_SERVER_CERT_FILE) }
353 control-key-file{COLON}		{ YDVAR(1, VAR_CONTROL_KEY_FILE) }
354 control-cert-file{COLON}	{ YDVAR(1, VAR_CONTROL_CERT_FILE) }
355 python-script{COLON}		{ YDVAR(1, VAR_PYTHON_SCRIPT) }
356 python{COLON}			{ YDVAR(0, VAR_PYTHON) }
357 domain-insecure{COLON}		{ YDVAR(1, VAR_DOMAIN_INSECURE) }
358 minimal-responses{COLON}	{ YDVAR(1, VAR_MINIMAL_RESPONSES) }
359 rrset-roundrobin{COLON}		{ YDVAR(1, VAR_RRSET_ROUNDROBIN) }
360 max-udp-size{COLON}		{ YDVAR(1, VAR_MAX_UDP_SIZE) }
361 dns64-prefix{COLON}		{ YDVAR(1, VAR_DNS64_PREFIX) }
362 dns64-synthall{COLON}		{ YDVAR(1, VAR_DNS64_SYNTHALL) }
363 define-tag{COLON}		{ YDVAR(1, VAR_DEFINE_TAG) }
364 local-zone-tag{COLON}		{ YDVAR(2, VAR_LOCAL_ZONE_TAG) }
365 access-control-tag{COLON}	{ YDVAR(2, VAR_ACCESS_CONTROL_TAG) }
366 access-control-tag-action{COLON} { YDVAR(3, VAR_ACCESS_CONTROL_TAG_ACTION) }
367 access-control-tag-data{COLON}	{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_DATA) }
368 access-control-view{COLON}	{ YDVAR(2, VAR_ACCESS_CONTROL_VIEW) }
369 local-zone-override{COLON}	{ YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) }
370 dnstap{COLON}			{ YDVAR(0, VAR_DNSTAP) }
371 dnstap-enable{COLON}		{ YDVAR(1, VAR_DNSTAP_ENABLE) }
372 dnstap-socket-path{COLON}	{ YDVAR(1, VAR_DNSTAP_SOCKET_PATH) }
373 dnstap-send-identity{COLON}	{ YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) }
374 dnstap-send-version{COLON}	{ YDVAR(1, VAR_DNSTAP_SEND_VERSION) }
375 dnstap-identity{COLON}		{ YDVAR(1, VAR_DNSTAP_IDENTITY) }
376 dnstap-version{COLON}		{ YDVAR(1, VAR_DNSTAP_VERSION) }
377 dnstap-log-resolver-query-messages{COLON}	{
378 		YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES) }
379 dnstap-log-resolver-response-messages{COLON}	{
380 		YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES) }
381 dnstap-log-client-query-messages{COLON}		{
382 		YDVAR(1, VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES) }
383 dnstap-log-client-response-messages{COLON}	{
384 		YDVAR(1, VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES) }
385 dnstap-log-forwarder-query-messages{COLON}	{
386 		YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES) }
387 dnstap-log-forwarder-response-messages{COLON}	{
388 		YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES) }
389 disable-dnssec-lame-check{COLON} { YDVAR(1, VAR_DISABLE_DNSSEC_LAME_CHECK) }
390 ip-ratelimit{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT) }
391 ratelimit{COLON}		{ YDVAR(1, VAR_RATELIMIT) }
392 ip-ratelimit-slabs{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_SLABS) }
393 ratelimit-slabs{COLON}		{ YDVAR(1, VAR_RATELIMIT_SLABS) }
394 ip-ratelimit-size{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_SIZE) }
395 ratelimit-size{COLON}		{ YDVAR(1, VAR_RATELIMIT_SIZE) }
396 ratelimit-for-domain{COLON}	{ YDVAR(2, VAR_RATELIMIT_FOR_DOMAIN) }
397 ratelimit-below-domain{COLON}	{ YDVAR(2, VAR_RATELIMIT_BELOW_DOMAIN) }
398 ip-ratelimit-factor{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_FACTOR) }
399 ratelimit-factor{COLON}		{ YDVAR(1, VAR_RATELIMIT_FACTOR) }
400 <INITIAL,val>{NEWLINE}		{ LEXOUT(("NL\n")); cfg_parser->line++; }
401 
402 	/* Quoted strings. Strip leading and ending quotes */
403 <val>\"			{ BEGIN(quotedstring); LEXOUT(("QS ")); }
404 <quotedstring><<EOF>>   {
405         yyerror("EOF inside quoted string");
406 	if(--num_args == 0) { BEGIN(INITIAL); }
407 	else		    { BEGIN(val); }
408 }
409 <quotedstring>{DQANY}*  { LEXOUT(("STR(%s) ", yytext)); yymore(); }
410 <quotedstring>{NEWLINE} { yyerror("newline inside quoted string, no end \"");
411 			  cfg_parser->line++; BEGIN(INITIAL); }
412 <quotedstring>\" {
413         LEXOUT(("QE "));
414 	if(--num_args == 0) { BEGIN(INITIAL); }
415 	else		    { BEGIN(val); }
416         yytext[yyleng - 1] = '\0';
417 	yylval.str = strdup(yytext);
418 	if(!yylval.str)
419 		yyerror("out of memory");
420         return STRING_ARG;
421 }
422 
423 	/* Single Quoted strings. Strip leading and ending quotes */
424 <val>\'			{ BEGIN(singlequotedstr); LEXOUT(("SQS ")); }
425 <singlequotedstr><<EOF>>   {
426         yyerror("EOF inside quoted string");
427 	if(--num_args == 0) { BEGIN(INITIAL); }
428 	else		    { BEGIN(val); }
429 }
430 <singlequotedstr>{SQANY}*  { LEXOUT(("STR(%s) ", yytext)); yymore(); }
431 <singlequotedstr>{NEWLINE} { yyerror("newline inside quoted string, no end '");
432 			     cfg_parser->line++; BEGIN(INITIAL); }
433 <singlequotedstr>\' {
434         LEXOUT(("SQE "));
435 	if(--num_args == 0) { BEGIN(INITIAL); }
436 	else		    { BEGIN(val); }
437         yytext[yyleng - 1] = '\0';
438 	yylval.str = strdup(yytext);
439 	if(!yylval.str)
440 		yyerror("out of memory");
441         return STRING_ARG;
442 }
443 
444 	/* include: directive */
445 <INITIAL,val>include{COLON}	{
446 	LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include); }
447 <include><<EOF>>	{
448         yyerror("EOF inside include directive");
449         BEGIN(inc_prev);
450 }
451 <include>{SPACE}*	{ LEXOUT(("ISP ")); /* ignore */ }
452 <include>{NEWLINE}	{ LEXOUT(("NL\n")); cfg_parser->line++;}
453 <include>\"		{ LEXOUT(("IQS ")); BEGIN(include_quoted); }
454 <include>{UNQUOTEDLETTER}*	{
455 	LEXOUT(("Iunquotedstr(%s) ", yytext));
456 	config_start_include_glob(yytext);
457 	BEGIN(inc_prev);
458 }
459 <include_quoted><<EOF>>	{
460         yyerror("EOF inside quoted string");
461         BEGIN(inc_prev);
462 }
463 <include_quoted>{DQANY}*	{ LEXOUT(("ISTR(%s) ", yytext)); yymore(); }
464 <include_quoted>{NEWLINE}	{ yyerror("newline before \" in include name");
465 				  cfg_parser->line++; BEGIN(inc_prev); }
466 <include_quoted>\"	{
467 	LEXOUT(("IQE "));
468 	yytext[yyleng - 1] = '\0';
469 	config_start_include_glob(yytext);
470 	BEGIN(inc_prev);
471 }
472 <INITIAL,val><<EOF>>	{
473 	LEXOUT(("LEXEOF "));
474 	yy_set_bol(1); /* Set beginning of line, so "^" rules match.  */
475 	if (!config_include_stack) {
476 		yyterminate();
477 	} else {
478 		fclose(yyin);
479 		config_end_include();
480 	}
481 }
482 
483 <val>{UNQUOTEDLETTER}*	{ LEXOUT(("unquotedstr(%s) ", yytext));
484 			if(--num_args == 0) { BEGIN(INITIAL); }
485 			yylval.str = strdup(yytext); return STRING_ARG; }
486 
487 {UNQUOTEDLETTER_NOCOLON}*	{
488 	ub_c_error_msg("unknown keyword '%s'", yytext);
489 	}
490 
491 <*>.	{
492 	ub_c_error_msg("stray '%s'", yytext);
493 	}
494 
495 %%
496