1 /*************************************************
2 *     Exim - an Internet mail transport agent    *
3 *************************************************/
4 
5 /* Copyright (c) University of Cambridge 1995 - 2018 */
6 /* Copyright (c) The Exim Maintainers 2020 */
7 /* See the file NOTICE for conditions of use and distribution. */
8 
9 
10 /* These two macros make it possible to obtain the result of macro-expanding
11 a string as a text string. This is sometimes useful for debugging output. */
12 
13 #define mac_string(s) # s
14 #define mac_expanded_string(s) mac_string(s)
15 
16 /* Number of elements of an array */
17 #define nelem(arr) (sizeof(arr) / sizeof(*arr))
18 
19 /* Maximum of two items */
20 #ifndef MAX
21 # define MAX(a,b) ((a) > (b) ? (a) : (b))
22 #endif
23 
24 
25 /* When running in the test harness, the load average is fudged. */
26 
27 #define OS_GETLOADAVG() \
28   (f.running_in_test_harness? (test_harness_load_avg += 10) : os_getloadavg())
29 
30 
31 /* The address_item structure has a struct full of 1-bit flags. These macros
32 manipulate them. */
33 
34 #define setflag(addr, flagname)    addr->flags.flagname = TRUE
35 #define clearflag(addr, flagname)  addr->flags.flagname = FALSE
36 
37 #define testflag(addr, flagname)   (addr->flags.flagname)
38 
39 #define copyflag(addrnew, addrold, flagname) \
40   addrnew->flags.flagname = addrold->flags.flagname
41 
42 
43 /* For almost all calls to convert things to printing characters, we want to
44 allow tabs & spaces. A macro just makes life a bit easier. */
45 
46 #define string_printing(s) string_printing2((s), 0)
47 #define SP_TAB		BIT(0)
48 #define SP_SPACE	BIT(1)
49 
50 
51 /* We need a special return code for "no recipients and failed to send an error
52 message". ANSI C defines only EXIT_FAILURE and EXIT_SUCCESS. On the assumption
53 that these are always 1 and 0 on Unix systems ... */
54 
55 #define EXIT_NORECIPIENTS 2
56 
57 
58 /* Character-handling macros. It seems that the set of standard functions in
59 ctype.h aren't actually all that useful. One reason for this is that email is
60 international, so the concept of using a locale to vary what they do is not
61 helpful. Another problem is that in different operating systems, the libraries
62 yield different results, even in the default locale. For example, Linux yields
63 TRUE for iscntrl() for all characters > 127, whereas many other systems yield
64 FALSE. For these reasons we define our own set of macros for a number of
65 character testing functions. Ensure that all these tests treat their arguments
66 as unsigned. */
67 
68 #define mac_iscntrl(c) \
69   ((uschar)(c) < 32 || (uschar)(c) == 127)
70 
71 #define mac_iscntrl_or_special(c) \
72   ((uschar)(c) < 32 || strchr(" ()<>@,;:\\\".[]\177", (uschar)(c)) != NULL)
73 
74 #define mac_isgraph(c) \
75   ((uschar)(c) > 32 && (uschar)(c) != 127)
76 
77 #define mac_isprint(c) \
78   (((uschar)(c) >= 32 && (uschar)(c) <= 126) || c == '\t' || \
79   ((uschar)(c) > 127 && print_topbitchars))
80 
81 
82 /* Convenience for testing strings */
83 
84 #define streqic(Foo, Bar) (strcmpic(Foo, Bar) == 0)
85 
86 
87 /* When built with TLS support, the act of flushing SMTP output becomes
88 a no-op once an SSL session is in progress. */
89 
90 #ifndef DISABLE_TLS
91 #define mac_smtp_fflush() if (tls_in.active.sock < 0) fflush(smtp_out);
92 #else
93 #define mac_smtp_fflush() fflush(smtp_out);
94 #endif
95 
96 
97 /* Define which ends of pipes are for reading and writing, as some systems
98 don't make the file descriptors two-way. */
99 
100 #define pipe_read  0
101 #define pipe_write 1
102 
103 /* The RFC 1413 ident port */
104 
105 #define IDENT_PORT 113
106 
107 /* A macro to simplify testing bits in lookup types */
108 
109 #define mac_islookup(a,b) ((lookup_list[a]->type & (b)) != 0)
110 
111 /* Debugging control */
112 
113 #define DEBUG(x)      if (debug_selector & (x))
114 #define HDEBUG(x)     if (host_checking || (debug_selector & (x)))
115 
116 /* The default From: text for DSNs */
117 
118 #define DEFAULT_DSN_FROM "Mail Delivery System <Mailer-Daemon@$qualify_domain>"
119 
120 /* The size of the vector for saving/restoring address expansion pointers while
121 verifying. This has to be explicit because it is referenced in more than one
122 source module. */
123 
124 #define ADDRESS_EXPANSIONS_COUNT 19
125 
126 /* The maximum permitted number of command-line (-D) macro definitions. We
127 need a limit only to make it easier to generate argument vectors for re-exec
128 of Exim. */
129 
130 #define MAX_CLMACROS 10
131 
132 /* The number of integer variables available in filter files. If this is
133 changed, then the tables in expand.c for accessing them must be changed too. */
134 
135 #define FILTER_VARIABLE_COUNT 10
136 
137 /* The size of the vector holding delay warning times */
138 
139 #define DELAY_WARNING_SIZE 12
140 
141 /* The size of the buffer holding the processing information string. */
142 
143 #define PROCESS_INFO_SIZE 384
144 
145 /* The size of buffer to get for constructing log entries. Make it big
146 enough to hold all the headers from a normal kind of message. */
147 
148 #define LOG_BUFFER_SIZE 8192
149 
150 /* The size of the circular buffer that remembers recent SMTP commands */
151 
152 #define SMTP_HBUFF_SIZE 20
153 #define SMTP_HBUFF_PREV(n)	((n) ? (n)-1 : SMTP_HBUFF_SIZE-1)
154 
155 /* The initial size of a big buffer for use in various places. It gets put
156 into big_buffer_size and in some circumstances increased. It should be at least
157 as long as the maximum path length PLUS room for string additions.
158 Let's go with "at least twice as large as maximum path length".
159 */
160 
161 #ifdef AUTH_HEIMDAL_GSSAPI
162 		/* RFC 4121 section 5.2, SHOULD support 64K input buffers */
163 # define __BIG_BUFFER_SIZE 65536
164 #else
165 # define __BIG_BUFFER_SIZE 16384
166 #endif
167 
168 #ifndef PATH_MAX
169 /* exim.h will have ensured this exists before including us. */
170 # error headers confusion, PATH_MAX missing in macros.h
171 #endif
172 #if (PATH_MAX*2) > __BIG_BUFFER_SIZE
173 # define BIG_BUFFER_SIZE (PATH_MAX*2)
174 #else
175 # define BIG_BUFFER_SIZE __BIG_BUFFER_SIZE
176 #endif
177 
178 /* header size of pipe content
179    currently: char id, char subid, char[5] length */
180 #define PIPE_HEADER_SIZE 7
181 
182 /* This limits the length of data returned by local_scan(). Because it is
183 written on the spool, it gets read into big_buffer. */
184 
185 #define LOCAL_SCAN_MAX_RETURN (BIG_BUFFER_SIZE - 24)
186 
187 /* The length of the base names of spool files, which consist of an internal
188 message id with a trailing "-H" or "-D" added. */
189 
190 #define SPOOL_NAME_LENGTH (MESSAGE_ID_LENGTH+2)
191 
192 /* The maximum number of message ids to store in a waiting database
193 record, and the max number of continuation records allowed. */
194 
195 #define WAIT_NAME_MAX 50
196 #define WAIT_CONT_MAX 1000
197 
198 /* Fixed option values for all PCRE functions */
199 
200 #define PCRE_COPT 0   /* compile */
201 #define PCRE_EOPT 0   /* exec */
202 
203 /* Macros for trivial functions */
204 
205 #define mac_ismsgid(s) \
206   (pcre_exec(regex_ismsgid,NULL,CS s,Ustrlen(s),0,PCRE_EOPT,NULL,0) >= 0)
207 
208 
209 /* Options for dns_next_rr */
210 
211 enum { RESET_NEXT, RESET_ANSWERS, RESET_AUTHORITY, RESET_ADDITIONAL };
212 
213 /* Argument values for the time-of-day function */
214 
215 enum { tod_log, tod_log_bare, tod_log_zone, tod_log_datestamp_daily,
216        tod_log_datestamp_monthly, tod_zone, tod_full, tod_bsdin,
217        tod_mbx, tod_epoch, tod_epoch_l, tod_zulu };
218 
219 /* For identifying types of driver */
220 
221 enum {
222   EXIM_DTYPE_NONE,
223   EXIM_DTYPE_ROUTER,
224   EXIM_DTYPE_TRANSPORT
225 };
226 
227 /* Error numbers for generating error messages when reading a message on the
228 standard input. */
229 
230 enum {
231   ERRMESS_BADARGADDRESS,    /* Bad address via argument list */
232   ERRMESS_BADADDRESS,       /* Bad address read via -t */
233   ERRMESS_NOADDRESS,        /* Message has no addresses */
234   ERRMESS_IGADDRESS,        /* All -t addresses ignored */
235   ERRMESS_BADNOADDRESS,     /* Bad address via -t, leaving none */
236   ERRMESS_IOERR,            /* I/O error while reading a message */
237   ERRMESS_VLONGHEADER,      /* Excessively long message header */
238   ERRMESS_VLONGHDRLINE,     /* Excessively long single line in header */
239   ERRMESS_TOOBIG,           /* Message too big */
240   ERRMESS_TOOMANYRECIP,     /* Too many recipients */
241   ERRMESS_LOCAL_SCAN,       /* Rejected by local scan */
242   ERRMESS_LOCAL_ACL         /* Rejected by non-SMTP ACL */
243 #ifdef SUPPORT_DMARC
244  ,ERRMESS_DMARC_FORENSIC    /* DMARC Forensic Report */
245 #endif
246 };
247 
248 /* Error handling styles - set by option, and apply only when receiving
249 a local message not via SMTP. */
250 
251 enum {
252   ERRORS_SENDER,            /* Return to sender (default) */
253   ERRORS_STDERR             /* Write on stderr */
254 };
255 
256 /* Exec control values when Exim execs itself via child_exec_exim. */
257 
258 enum {
259   CEE_RETURN_ARGV,          /* Don't exec, just build and return argv */
260   CEE_EXEC_EXIT,            /* Just exit if exec fails */
261   CEE_EXEC_PANIC            /* Panic-die if exec fails */
262 };
263 
264 /* Bit values for filter_test */
265 
266 #define FTEST_NONE     0    /* Not filter testing */
267 #define FTEST_USER     1    /* Testing user filter */
268 #define FTEST_SYSTEM   2    /* Testing system filter */
269 
270 /* Returns from the routing, transport and authentication functions (not all
271 apply to all of them). Some other functions also use these convenient values,
272 and some additional values are used only by non-driver functions.
273 
274 OK, FAIL, DEFER, ERROR, and FAIL_FORCED are also declared in local_scan.h for
275 use in the local_scan() function and in ${dlfunc loaded functions. Do not
276 change them unilaterally.
277 
278 Use rc_names[] for debug strings. */
279 
280 #define  OK            0    /* Successful match */
281 #define  DEFER         1    /* Defer - some problem */
282 #define  FAIL          2    /* Matching failed */
283 #define  ERROR         3    /* Internal or config error */
284 #define  FAIL_FORCED   4    /* "Forced" failure */
285 /***********/
286 #define DECLINE        5    /* Declined to handle the address, pass to next
287                                  router unless no_more is set */
288 #define PASS           6    /* Pass to next driver, or to pass_router,
289                                  even if no_more is set */
290 #define DISCARD        7    /* Address routed to :blackhole: or "seen finish" */
291 #define SKIP           8    /* Skip this router (used in route_address only) */
292 #define REROUTED       9    /* Address was changed and child created*/
293 #define PANIC         10    /* Hard failed with internal error */
294 #define BAD64         11    /* Bad base64 data (auth) */
295 #define UNEXPECTED    12    /* Unexpected initial auth data */
296 #define CANCELLED     13    /* Authentication cancelled */
297 #define FAIL_SEND     14    /* send() failed in authenticator */
298 #define FAIL_DROP     15    /* Fail and drop connection (used in ACL) */
299 #define DANE	      16    /* Deferred for domain mismatch (used in transport) */
300 
301 /* Returns from the deliver_message() function */
302 
303 #define DELIVER_ATTEMPTED_NORMAL   0  /* Tried a normal delivery */
304 #define DELIVER_MUA_SUCCEEDED      1  /* Success when mua_wrapper is set */
305 #define DELIVER_MUA_FAILED         2  /* Failure when mua_wrapper is set */
306 #define DELIVER_NOT_ATTEMPTED      3  /* Not tried (no msg or is locked */
307 
308 /* Returns from DNS lookup functions. Use dns_rc_names[] for debug strings */
309 
310 enum { DNS_SUCCEED, DNS_NOMATCH, DNS_NODATA, DNS_AGAIN, DNS_FAIL };
311 
312 /* Ending states when reading a message. The order is important. The test
313 for having to swallow the rest of an SMTP message is whether the value is
314 >= END_NOTENDED. */
315 
316 #define END_NOTSTARTED 0    /* Message not started */
317 #define END_DOT        1    /* Message ended with '.' */
318 #define END_EOF        2    /* Message ended with EOF (error for SMTP) */
319 #define END_NOTENDED   3    /* Message reading not yet ended */
320 #define END_SIZE       4    /* Reading ended because message too big */
321 #define END_WERROR     5    /* Write error while reading the message */
322 #define END_PROTOCOL   6    /* Protocol error in CHUNKING sequence */
323 
324 /* result codes for bdat_getc() (which can also return EOF) */
325 
326 #define EOD (-2)
327 #define ERR (-3)
328 
329 
330 /* Bit masks for debug and log selectors */
331 
332 /* Assume words are 32 bits wide. Tiny waste of space on 64 bit
333 platforms, but this ensures bit vectors always work the same way. */
334 #define BITWORDSIZE 32
335 
336 /* This macro is for single-word bit vectors: the debug selector,
337 and the first word of the log selector. */
338 #define BIT(n) (1UL << (n))
339 
340 /* And these are for multi-word vectors. */
341 #define BITWORD(n) (      (n) / BITWORDSIZE)
342 #define BITMASK(n) (1U << (n) % BITWORDSIZE)
343 
344 #define BIT_CLEAR(s,z,n) ((s)[BITWORD(n)] &= ~BITMASK(n))
345 #define BIT_SET(s,z,n)   ((s)[BITWORD(n)] |=  BITMASK(n))
346 #define BIT_TEST(s,z,n) (((s)[BITWORD(n)] &   BITMASK(n)) != 0)
347 
348 /* Used in globals.c for initializing bit_table structures. T will be either
349 D or L corresponding to the debug and log selector bits declared below. */
350 
351 #define BIT_TABLE(T,name) { US #name, T##i_##name }
352 
353 /* IOTA allows us to keep an implicit sequential count, like a simple enum,
354 but we can have sequentially numbered identifiers which are not declared
355 sequentially. We use this for more compact declarations of bit indexes and
356 masks, alternating between sequential bit index and corresponding mask. */
357 
358 #define IOTA(iota)      (__LINE__ - iota)
359 #define IOTA_INIT(zero) (__LINE__ - zero + 1)
360 
361 /* Options bits for debugging. DEBUG_BIT() declares both a bit index and the
362 corresponding mask. Di_all is a special value recognized by decode_bits().
363 These must match the debug_options table in globals.c .
364 
365 Exim's code assumes in a number of places that the debug_selector is one
366 word, and this is exposed in the local_scan ABI. The D_v and D_local_scan bit
367 masks are part of the local_scan API so are #defined in local_scan.h */
368 
369 #define DEBUG_BIT(name) Di_##name = IOTA(Di_iota), D_##name = (int)BIT(Di_##name)
370 
371 enum {
372   Di_all        = -1,
373   Di_v          = 0,
374   Di_local_scan = 1,
375 
376   Di_iota = IOTA_INIT(2),
377   DEBUG_BIT(acl),		/* 2 */
378   DEBUG_BIT(auth),
379   DEBUG_BIT(deliver),
380   DEBUG_BIT(dns),
381   DEBUG_BIT(dnsbl),
382   DEBUG_BIT(exec),		/* 7 */
383   DEBUG_BIT(expand),
384   DEBUG_BIT(filter),
385   DEBUG_BIT(hints_lookup),
386   DEBUG_BIT(host_lookup),
387   DEBUG_BIT(ident),
388   DEBUG_BIT(interface),
389   DEBUG_BIT(lists),
390   DEBUG_BIT(load),		/* 15 */
391   DEBUG_BIT(lookup),
392   DEBUG_BIT(memory),
393   DEBUG_BIT(noutf8),
394   DEBUG_BIT(pid),
395   DEBUG_BIT(process_info),
396   DEBUG_BIT(queue_run),
397   DEBUG_BIT(receive),
398   DEBUG_BIT(resolver),		/* 23 */
399   DEBUG_BIT(retry),
400   DEBUG_BIT(rewrite),
401   DEBUG_BIT(route),
402   DEBUG_BIT(timestamp),
403   DEBUG_BIT(tls),
404   DEBUG_BIT(transport),
405   DEBUG_BIT(uid),
406   DEBUG_BIT(verify),		/* 31 */
407 };
408 
409 /* Multi-bit debug masks */
410 
411 #define D_all                        0xffffffff
412 
413 #define D_any                        (D_all & \
414                                        ~(D_v           | \
415 					 D_noutf8      | \
416                                          D_pid         | \
417                                          D_timestamp)  )
418 
419 #define D_default                    (0xffffffff & \
420                                        ~(D_expand      | \
421                                          D_filter      | \
422                                          D_interface   | \
423                                          D_load        | \
424                                          D_local_scan  | \
425                                          D_memory      | \
426 					 D_noutf8      | \
427                                          D_pid         | \
428                                          D_timestamp   | \
429                                          D_resolver))
430 
431 /* Options bits for logging. Those that have values < BITWORDSIZE can be used
432 in calls to log_write(). The others are put into later words in log_selector
433 and are only ever tested independently, so they do not need bit mask
434 declarations. The Li_all value is recognized specially by decode_bits().
435 Add also to log_options[] when creating new ones. */
436 
437 #define LOG_BIT(name) Li_##name = IOTA(Li_iota), L_##name = BIT(Li_##name)
438 
439 enum logbit {
440   Li_all = -1,
441 
442   Li_iota = IOTA_INIT(0),
443   LOG_BIT(address_rewrite),
444   LOG_BIT(all_parents),
445   LOG_BIT(connection_reject),
446   LOG_BIT(delay_delivery),
447   LOG_BIT(dnslist_defer),
448   LOG_BIT(etrn),
449   LOG_BIT(host_lookup_failed),
450   LOG_BIT(lost_incoming_connection),
451   LOG_BIT(queue_run),
452   LOG_BIT(retry_defer),
453   LOG_BIT(size_reject),
454   LOG_BIT(skip_delivery),
455   LOG_BIT(smtp_connection),
456   LOG_BIT(smtp_incomplete_transaction),
457   LOG_BIT(smtp_protocol_error),
458   LOG_BIT(smtp_syntax_error),
459 
460   Li_8bitmime = BITWORDSIZE,
461   Li_acl_warn_skipped,
462   Li_arguments,
463   Li_deliver_time,
464   Li_delivery_size,
465   Li_dkim,
466   Li_dkim_verbose,
467   Li_dnssec,
468   Li_ident_timeout,
469   Li_incoming_interface,
470   Li_incoming_port,
471   Li_millisec,
472   Li_msg_id,
473   Li_msg_id_created,
474   Li_outgoing_interface,
475   Li_outgoing_port,
476   Li_pid,
477   Li_pipelining,
478   Li_protocol_detail,
479   Li_proxy,
480   Li_queue_time,
481   Li_queue_time_exclusive,
482   Li_queue_time_overall,
483   Li_receive_time,
484   Li_received_sender,
485   Li_received_recipients,
486   Li_rejected_header,
487   Li_return_path_on_delivery,
488   Li_sender_on_delivery,
489   Li_sender_verify_fail,
490   Li_smtp_confirmation,
491   Li_smtp_mailauth,
492   Li_smtp_no_mail,
493   Li_subject,
494 #ifdef ALLOW_INSECURE_TAINTED_DATA
495   Li_tainted,
496 #endif
497   Li_tls_certificate_verified,
498   Li_tls_cipher,
499   Li_tls_peerdn,
500   Li_tls_resumption,
501   Li_tls_sni,
502   Li_unknown_in_list,
503 
504   log_selector_size = BITWORD(Li_unknown_in_list) + 1
505 };
506 
507 #define LOGGING(opt) BIT_TEST(log_selector, log_selector_size, Li_##opt)
508 
509 /* Private error numbers for delivery failures, set negative so as not
510 to conflict with system errno values.  Take care to maintain the string
511 table exim_errstrings[] in log.c */
512 
513 #define ERRNO_UNKNOWNERROR    (-1)
514 #define ERRNO_USERSLASH       (-2)
515 #define ERRNO_EXISTRACE       (-3)
516 #define ERRNO_NOTREGULAR      (-4)
517 #define ERRNO_NOTDIRECTORY    (-5)
518 #define ERRNO_BADUGID         (-6)
519 #define ERRNO_BADMODE         (-7)
520 #define ERRNO_INODECHANGED    (-8)
521 #define ERRNO_LOCKFAILED      (-9)
522 #define ERRNO_BADADDRESS2    (-10)
523 #define ERRNO_FORBIDPIPE     (-11)
524 #define ERRNO_FORBIDFILE     (-12)
525 #define ERRNO_FORBIDREPLY    (-13)
526 #define ERRNO_MISSINGPIPE    (-14)
527 #define ERRNO_MISSINGFILE    (-15)
528 #define ERRNO_MISSINGREPLY   (-16)
529 #define ERRNO_BADREDIRECT    (-17)
530 #define ERRNO_SMTPCLOSED     (-18)
531 #define ERRNO_SMTPFORMAT     (-19)
532 #define ERRNO_SPOOLFORMAT    (-20)
533 #define ERRNO_NOTABSOLUTE    (-21)
534 #define ERRNO_EXIMQUOTA      (-22)   /* Exim-imposed quota */
535 #define ERRNO_HELD           (-23)
536 #define ERRNO_FILTER_FAIL    (-24)   /* Delivery filter process failure */
537 #define ERRNO_CHHEADER_FAIL  (-25)   /* Delivery add/remove header failure */
538 #define ERRNO_WRITEINCOMPLETE (-26)  /* Delivery write incomplete error */
539 #define ERRNO_EXPANDFAIL     (-27)   /* Some expansion failed */
540 #define ERRNO_GIDFAIL        (-28)   /* Failed to get gid */
541 #define ERRNO_UIDFAIL        (-29)   /* Failed to get uid */
542 #define ERRNO_BADTRANSPORT   (-30)   /* Unset or non-existent transport */
543 #define ERRNO_MBXLENGTH      (-31)   /* MBX length mismatch */
544 #define ERRNO_UNKNOWNHOST    (-32)   /* Lookup failed routing or in smtp tpt */
545 #define ERRNO_FORMATUNKNOWN  (-33)   /* Can't match format in appendfile */
546 #define ERRNO_BADCREATE      (-34)   /* Creation outside home in appendfile */
547 #define ERRNO_LISTDEFER      (-35)   /* Can't check a list; lookup defer */
548 #define ERRNO_DNSDEFER       (-36)   /* DNS lookup defer */
549 #define ERRNO_TLSFAILURE     (-37)   /* Failed to start TLS session */
550 #define ERRNO_TLSREQUIRED    (-38)   /* Mandatory TLS session not started */
551 #define ERRNO_CHOWNFAIL      (-39)   /* Failed to chown a file */
552 #define ERRNO_PIPEFAIL       (-40)   /* Failed to create a pipe */
553 #define ERRNO_CALLOUTDEFER   (-41)   /* When verifying */
554 #define ERRNO_AUTHFAIL       (-42)   /* When required by client */
555 #define ERRNO_CONNECTTIMEOUT (-43)   /* Used internally in smtp transport */
556 #define ERRNO_RCPT4XX        (-44)   /* RCPT gave 4xx error */
557 #define ERRNO_MAIL4XX        (-45)   /* MAIL gave 4xx error */
558 #define ERRNO_DATA4XX        (-46)   /* DATA gave 4xx error */
559 #define ERRNO_PROXYFAIL      (-47)   /* Negotiation failed for proxy configured host */
560 #define ERRNO_AUTHPROB       (-48)   /* Authenticator "other" failure */
561 #define ERRNO_UTF8_FWD       (-49)   /* target not supporting SMTPUTF8 */
562 #define ERRNO_HOST_IS_LOCAL  (-50)   /* Transport refuses to talk to localhost */
563 #define ERRNO_TAINT          (-51)   /* Transport refuses to talk use tainted filename */
564 
565 /* These must be last, so all retry deferments can easily be identified */
566 
567 #define ERRNO_RETRY_BASE     (-52)   /* Base to test against */
568 #define ERRNO_RRETRY         (-52)   /* Not time for routing */
569 
570 #define ERRNO_WARN_BASE      (-53)   /* Base to test against */
571 #define ERRNO_LRETRY         (-53)   /* Not time for local delivery */
572 #define ERRNO_HRETRY         (-54)   /* Not time for any remote host */
573 #define ERRNO_LOCAL_ONLY     (-55)   /* Local-only delivery */
574 #define ERRNO_QUEUE_DOMAIN   (-56)   /* Domain in queue_domains */
575 #define ERRNO_TRETRY         (-57)   /* Transport concurrency limit */
576 #define ERRNO_EVENT	     (-58)   /* Event processing request alternate response */
577 
578 
579 
580 /* Special actions to take after failure or deferment. */
581 
582 enum {
583   SPECIAL_NONE,             /* No special action */
584   SPECIAL_FREEZE,           /* Freeze message */
585   SPECIAL_FAIL,             /* Fail the delivery */
586   SPECIAL_WARN              /* Send a warning message */
587 };
588 
589 /* Flags that get ORed into the more_errno field of an address to give more
590 information about errors for retry purposes. They are greater than 256, because
591 the bottom byte contains 'A' or 'M' for remote addresses, to indicate whether
592 the name was looked up only via an address record or whether MX records were
593 used, respectively. */
594 
595 #define RTEF_CTOUT     0x0100      /* Connection timed out */
596 
597 /* Permission and other options for parse_extract_addresses(),
598 filter_interpret(), and rda_interpret(), i.e. what special things are allowed
599 in redirection operations. Not all apply to all cases. Some of the bits allow
600 and some forbid, reflecting the "allow" and "forbid" options in the redirect
601 router, which were chosen to represent the standard situation for users'
602 .forward files. */
603 
604 #define RDO_BLACKHOLE    0x00000001  /* Forbid :blackhole: */
605 #define RDO_DEFER        0x00000002  /* Allow :defer: or "defer" */
606 #define RDO_EACCES       0x00000004  /* Ignore EACCES */
607 #define RDO_ENOTDIR      0x00000008  /* Ignore ENOTDIR */
608 #define RDO_EXISTS       0x00000010  /* Forbid "exists" in expansion in filter */
609 #define RDO_FAIL         0x00000020  /* Allow :fail: or "fail" */
610 #define RDO_FILTER       0x00000040  /* Allow a filter script */
611 #define RDO_FREEZE       0x00000080  /* Allow "freeze" */
612 #define RDO_INCLUDE      0x00000100  /* Forbid :include: */
613 #define RDO_LOG          0x00000200  /* Forbid "log" */
614 #define RDO_LOOKUP       0x00000400  /* Forbid "lookup" in expansion in filter */
615 #define RDO_PERL         0x00000800  /* Forbid "perl" in expansion in filter */
616 #define RDO_READFILE     0x00001000  /* Forbid "readfile" in exp in filter */
617 #define RDO_READSOCK     0x00002000  /* Forbid "readsocket" in exp in filter */
618 #define RDO_RUN          0x00004000  /* Forbid "run" in expansion in filter */
619 #define RDO_DLFUNC       0x00008000  /* Forbid "dlfunc" in expansion in filter */
620 #define RDO_REALLOG      0x00010000  /* Really do log (not testing/verifying) */
621 #define RDO_REWRITE      0x00020000  /* Rewrite generated addresses */
622 #define RDO_EXIM_FILTER  0x00040000  /* Forbid Exim filters */
623 #define RDO_SIEVE_FILTER 0x00080000  /* Forbid Sieve filters */
624 #define RDO_PREPEND_HOME 0x00100000  /* Prepend $home to relative paths in Exim filter save commands */
625 
626 /* This is the set that apply to expansions in filters */
627 
628 #define RDO_FILTER_EXPANSIONS \
629   (RDO_EXISTS|RDO_LOOKUP|RDO_PERL|RDO_READFILE|RDO_READSOCK|RDO_RUN|RDO_DLFUNC)
630 
631 /* As well as the RDO bits themselves, we need the bit numbers in order to
632 access (most of) the individual bits as separate options. This could be
633 automated, but I haven't bothered. Keep this list in step with the above! */
634 
635 enum { RDON_BLACKHOLE, RDON_DEFER, RDON_EACCES, RDON_ENOTDIR, RDON_EXISTS,
636   RDON_FAIL, RDON_FILTER, RDON_FREEZE, RDON_INCLUDE, RDON_LOG, RDON_LOOKUP,
637   RDON_PERL, RDON_READFILE, RDON_READSOCK, RDON_RUN, RDON_DLFUNC, RDON_REALLOG,
638   RDON_REWRITE, RDON_EXIM_FILTER, RDON_SIEVE_FILTER, RDON_PREPEND_HOME };
639 
640 /* Results of filter or forward file processing. Some are only from a filter;
641 some are only from a forward file. */
642 
643 enum {
644   FF_DELIVERED,         /* Success, took significant action */
645   FF_NOTDELIVERED,      /* Success, didn't take significant action */
646   FF_BLACKHOLE,         /* Blackholing requested */
647   FF_DEFER,             /* Defer requested */
648   FF_FAIL,              /* Fail requested */
649   FF_INCLUDEFAIL,       /* :include: failed */
650   FF_NONEXIST,          /* Forward file does not exist */
651   FF_FREEZE,            /* Freeze requested */
652   FF_ERROR              /* We have a problem */
653 };
654 
655 /* Values for identifying particular headers; printing characters are used, so
656 they can be read in the spool file for those headers that are permanently
657 marked. The lower case values don't get onto the spool; they are used only as
658 return values from header_checkname(). */
659 
660 #define htype_other         ' '   /* Unspecified header */
661 #define htype_from          'F'
662 #define htype_to            'T'
663 #define htype_cc            'C'
664 #define htype_bcc           'B'
665 #define htype_id            'I'   /* for message-id */
666 #define htype_reply_to      'R'
667 #define htype_received      'P'   /* P for Postmark */
668 #define htype_sender        'S'
669 #define htype_old           '*'   /* Replaced header */
670 
671 #define htype_date          'd'
672 #define htype_return_path   'p'
673 #define htype_delivery_date 'x'
674 #define htype_envelope_to   'e'
675 #define htype_subject       's'
676 
677 /* These values are used only when adding new headers from an ACL; they too
678 never get onto the spool. The type of the added header is set by reference
679 to the header name, by calling header_checkname(). */
680 
681 #define htype_add_top       'a'
682 #define htype_add_rec       'r'
683 #define htype_add_bot       'z'
684 #define htype_add_rfc       'f'
685 
686 /* Types of item in options lists. These are the bottom 8 bits of the "type"
687 field, which is an int. The opt_void value is used for entries in tables that
688 point to special types of value that are accessed only indirectly (e.g. the
689 rewrite data that is built out of a string option.) We need to have some values
690 visible in local_scan, so the following are declared there:
691 
692   opt_stringptr, opt_int, opt_octint, opt_mkint, opt_Kint, opt_fixed, opt_time,
693   opt_bool
694 
695 To make sure we don't conflict, the local_scan.h values start from zero, and
696 those defined here start from 32. The boolean ones must all be together so they
697 can be easily tested as a group. That is the only use of opt_bool_last. */
698 
699 enum { opt_bit = 32, opt_bool_verify, opt_bool_set, opt_expand_bool,
700   opt_bool_last,
701   opt_rewrite, opt_timelist, opt_uid, opt_gid, opt_uidlist, opt_gidlist,
702   opt_expand_uid, opt_expand_gid, opt_func, opt_void };
703 
704 /* There's a high-ish bit which is used to flag duplicate options, kept
705 for compatibility, which shouldn't be output. Also used for hidden options
706 that are automatically maintained from others. Another high bit is used to
707 flag driver options that although private (so as to be settable only on some
708 drivers), are stored in the instance block so as to be accessible from outside.
709 A third high bit is set when an option is read, so as to be able to give an
710 error if any option is set twice. Finally, there's a bit which is set when an
711 option is set with the "hide" prefix, to prevent -bP from showing it to
712 non-admin callers. The next byte up in the int is used to keep the bit number
713 for booleans that are kept in one bit. */
714 
715 #define opt_hidden  0x100      /* Private to Exim */
716 #define opt_public  0x200      /* Stored in the main instance block */
717 #define opt_set     0x400      /* Option is set */
718 #define opt_secure  0x800      /* "hide" prefix used */
719 #define opt_rep_con 0x1000     /* Can be appended to by a repeated line (condition) */
720 #define opt_rep_str 0x2000     /* Can be appended to by a repeated line (string) */
721 #define opt_mask    0x00ff
722 
723 /* Verify types when directing and routing */
724 
725 enum { v_none, v_sender, v_recipient, v_expn };
726 
727 /* Option flags for verify_address() */
728 
729 #define vopt_fake_sender          0x0001   /* for verify=sender=<address> */
730 #define vopt_is_recipient         0x0002
731 #define vopt_qualify              0x0004
732 #define vopt_expn                 0x0008
733 #define vopt_callout_fullpm       0x0010   /* full postmaster during callout */
734 #define vopt_callout_random       0x0020   /* during callout */
735 #define vopt_callout_no_cache     0x0040   /* disable callout cache */
736 #define vopt_callout_recipsender  0x0080   /* use real sender to verify recip */
737 #define vopt_callout_recippmaster 0x0100   /* use postmaster to verify recip */
738 #define vopt_callout_hold	  0x0200   /* lazy close connection */
739 #define vopt_success_on_redirect  0x0400
740 #define vopt_quota                0x0800   /* quota check, to local/appendfile */
741 
742 /* Values for fields in callout cache records */
743 
744 #define ccache_unknown         0       /* test hasn't been done */
745 #define ccache_accept          1
746 #define ccache_reject          2       /* All rejections except */
747 #define ccache_reject_mfnull   3       /* MAIL FROM:<> was rejected */
748 
749 /* Options for lookup functions */
750 
751 #define lookup_querystyle      1    /* query-style lookup */
752 #define lookup_absfile         2    /* requires absolute file name */
753 #define lookup_absfilequery    4    /* query-style starts with file name */
754 
755 /* Status values for host_item blocks. Require hstatus_unusable and
756 hstatus_unusable_expired to be last. */
757 
758 enum { hstatus_unknown, hstatus_usable, hstatus_unusable,
759        hstatus_unusable_expired };
760 
761 /* Reasons why a host is unusable (for clearer log messages) */
762 
763 enum { hwhy_unknown, hwhy_retry, hwhy_insecure, hwhy_failed, hwhy_deferred,
764        hwhy_ignored };
765 
766 /* Domain lookup types for routers */
767 
768 #define LK_DEFAULT	BIT(0)
769 #define LK_BYNAME	BIT(1)
770 #define LK_BYDNS	BIT(2)	/* those 3 should be mutually exclusive */
771 
772 #define LK_IPV4_ONLY	BIT(3)
773 #define LK_IPV4_PREFER	BIT(4)
774 
775 /* Values for the self_code fields */
776 
777 enum { self_freeze, self_defer, self_send, self_reroute, self_pass, self_fail };
778 
779 /* Flags for rewrite rules */
780 
781 #define rewrite_sender       0x0001
782 #define rewrite_from         0x0002
783 #define rewrite_to           0x0004
784 #define rewrite_cc           0x0008
785 #define rewrite_bcc          0x0010
786 #define rewrite_replyto      0x0020
787 #define rewrite_all_headers  0x003F  /* all header flags */
788 
789 #define rewrite_envfrom      0x0040
790 #define rewrite_envto        0x0080
791 #define rewrite_all_envelope 0x00C0  /* all envelope flags */
792 
793 #define rewrite_all      (rewrite_all_headers | rewrite_all_envelope)
794 
795 #define rewrite_smtp         0x0100  /* rewrite at SMTP time */
796 #define rewrite_smtp_sender  0x0200  /* SMTP sender rewrite (allows <>) */
797 #define rewrite_qualify      0x0400  /* qualify if necessary */
798 #define rewrite_repeat       0x0800  /* repeat rewrite rule */
799 
800 #define rewrite_whole        0x1000  /* option bit for headers */
801 #define rewrite_quit         0x2000  /* "no more" option */
802 
803 /* Flags for log_write(); LOG_MAIN, LOG_PANIC, and LOG_REJECT are also in
804 local_scan.h */
805 
806 #define LOG_MAIN           1      /* Write to the main log */
807 #define LOG_PANIC          2      /* Write to the panic log */
808 #define LOG_PANIC_DIE      6      /* Write to the panic log and then die */
809 #define LOG_REJECT        16      /* Write to the reject log, with headers */
810 #define LOG_SENDER        32      /* Add raw sender to the message */
811 #define LOG_RECIPIENTS    64      /* Add raw recipients to the message */
812 #define LOG_CONFIG       128      /* Add "Exim configuration error" */
813 #define LOG_CONFIG_FOR  (256+128) /* Add " for" instead of ":\n" */
814 #define LOG_CONFIG_IN   (512+128) /* Add " in line x[ of file y]" */
815 
816 /* and for debug_bits() logging action control: */
817 #define DEBUG_FROM_CONFIG       0x0001
818 
819 /* SMTP command identifiers for the smtp_connection_had field that records the
820 most recent SMTP commands. Must be kept in step with the list of names in
821 smtp_in.c that is used for creating the smtp_no_mail logging action. SCH_NONE
822 is "empty". */
823 
824 enum { SCH_NONE, SCH_AUTH, SCH_DATA, SCH_BDAT,
825        SCH_EHLO, SCH_ETRN, SCH_EXPN, SCH_HELO,
826        SCH_HELP, SCH_MAIL, SCH_NOOP, SCH_QUIT, SCH_RCPT, SCH_RSET, SCH_STARTTLS,
827        SCH_VRFY };
828 
829 /* Returns from host_find_by{name,dns}() */
830 
831 enum {
832   HOST_FIND_FAILED,     /* failed to find the host */
833   HOST_FIND_AGAIN,      /* could not resolve at this time */
834   HOST_FIND_SECURITY,   /* dnssec required but not acheived */
835   HOST_FOUND,           /* found host */
836   HOST_FOUND_LOCAL,     /* found, but MX points to local host */
837   HOST_IGNORED          /* found but ignored - used internally only */
838 };
839 
840 /* Flags for host_find_bydns() */
841 
842 #define HOST_FIND_BY_SRV          BIT(0)
843 #define HOST_FIND_BY_MX           BIT(1)
844 #define HOST_FIND_BY_A            BIT(2)
845 #define HOST_FIND_BY_AAAA         BIT(3)
846 #define HOST_FIND_QUALIFY_SINGLE  BIT(4)
847 #define HOST_FIND_SEARCH_PARENTS  BIT(5)
848 #define HOST_FIND_IPV4_FIRST	  BIT(6)
849 #define HOST_FIND_IPV4_ONLY	  BIT(7)
850 
851 /* Actions applied to specific messages. */
852 
853 enum { MSG_DELIVER, MSG_FREEZE, MSG_REMOVE, MSG_THAW, MSG_ADD_RECIPIENT,
854        MSG_MARK_ALL_DELIVERED, MSG_MARK_DELIVERED, MSG_EDIT_SENDER,
855        MSG_SHOW_COPY, MSG_LOAD, MSG_SETQUEUE,
856        /* These ones must be last: a test for >= MSG_SHOW_BODY is used
857        to test for actions that list individual spool files. */
858        MSG_SHOW_BODY, MSG_SHOW_HEADER, MSG_SHOW_LOG };
859 
860 /* Returns from the spool_read_header() function */
861 
862 enum {
863   spool_read_OK,        /* success */
864   spool_read_notopen,   /* open failed */
865   spool_read_enverror,  /* error in the envelope */
866   spool_read_hdrerror   /* error in the headers */
867 };
868 
869 /* Options for transport_write_message */
870 
871 #define topt_add_return_path    0x0001
872 #define topt_add_delivery_date  0x0002
873 #define topt_add_envelope_to    0x0004
874 #define topt_escape_headers     0x0008	/* Apply escape check to headers */
875 #define topt_use_crlf           0x0010	/* Terminate lines with CRLF */
876 #define topt_no_headers         0x0020	/* Omit headers */
877 #define topt_no_body            0x0040	/* Omit body */
878 #define topt_end_dot            0x0080	/* Send terminating dot line */
879 #define topt_no_flush		0x0100	/* more data expected after message (eg QUIT) */
880 #define topt_use_bdat		0x0200	/* prepend chunks with RFC3030 BDAT header */
881 #define topt_output_string	0x0400	/* create string rather than write to fd */
882 #define topt_continuation	0x0800	/* do not reset buffer */
883 #define topt_not_socket		0x1000	/* cannot do socket-only syscalls */
884 
885 /* Options for smtp_write_command */
886 
887 enum {
888   SCMD_FLUSH = 0,	/* write to kernel */
889   SCMD_MORE,		/* write to kernel, but likely more soon */
890   SCMD_BUFFER		/* stash in application cmd output buffer */
891 };
892 
893 /* Flags for recipient_block, used in DSN support */
894 
895 #define rf_dsnlasthop           0x01  /* Do not propagate DSN any further */
896 #define rf_notify_never         0x02  /* NOTIFY= settings */
897 #define rf_notify_success       0x04
898 #define rf_notify_failure       0x08
899 #define rf_notify_delay         0x10
900 
901 #define rf_dsnflags  (rf_notify_never | rf_notify_success | \
902                       rf_notify_failure | rf_notify_delay)
903 
904 /* DSN RET types */
905 
906 #define dsn_ret_full            1
907 #define dsn_ret_hdrs            2
908 
909 #define dsn_support_unknown     0
910 #define dsn_support_yes         1
911 #define dsn_support_no          2
912 
913 
914 /* Codes for the host_find_failed and host_all_ignored options. */
915 
916 #define hff_freeze   0
917 #define hff_defer    1
918 #define hff_pass     2
919 #define hff_decline  3
920 #define hff_fail     4
921 #define hff_ignore   5
922 
923 /* Router information flags */
924 
925 #define ri_yestransport    0x0001    /* Must have a transport */
926 #define ri_notransport     0x0002    /* Must not have a transport */
927 
928 /* Codes for match types in match_check_list; to any of them, MCL_NOEXPAND may
929 be added */
930 
931 #define MCL_NOEXPAND  16
932 
933 enum { MCL_STRING, MCL_DOMAIN, MCL_HOST, MCL_ADDRESS, MCL_LOCALPART };
934 
935 /* Codes for the places from which ACLs can be called. These are cunningly
936 ordered to make it easy to implement tests for certain ACLs when processing
937 "control" modifiers, by means of a maximum "where" value. Do not modify this
938 order without checking carefully!
939 
940 **** IMPORTANT***
941 ****   Furthermore, remember to keep these in step with the tables
942 ****   of names and response codes in globals.c.
943 **** IMPORTANT ****
944 */
945 
946 enum { ACL_WHERE_RCPT,       /* Some controls are for RCPT only */
947        ACL_WHERE_MAIL,       /* )                                           */
948        ACL_WHERE_PREDATA,    /* ) There are several tests for "in message", */
949        ACL_WHERE_MIME,       /* ) implemented by <= WHERE_NOTSMTP           */
950        ACL_WHERE_DKIM,       /* )                                           */
951        ACL_WHERE_DATA,       /* )                                           */
952 #ifndef DISABLE_PRDR
953        ACL_WHERE_PRDR,       /* )                                           */
954 #endif
955        ACL_WHERE_NOTSMTP,    /* )                                           */
956 
957        ACL_WHERE_AUTH,       /* These remaining ones are not currently    */
958        ACL_WHERE_CONNECT,    /* required to be in a special order so they */
959        ACL_WHERE_ETRN,       /* are just alphabetical.                    */
960        ACL_WHERE_EXPN,
961        ACL_WHERE_HELO,
962        ACL_WHERE_MAILAUTH,
963        ACL_WHERE_NOTSMTP_START,
964        ACL_WHERE_NOTQUIT,
965        ACL_WHERE_QUIT,
966        ACL_WHERE_STARTTLS,
967        ACL_WHERE_VRFY,
968 
969        ACL_WHERE_DELIVERY,
970        ACL_WHERE_UNKNOWN     /* Currently used by a ${acl:name} expansion */
971      };
972 
973 #define ACL_BIT_RCPT		BIT(ACL_WHERE_RCPT)
974 #define ACL_BIT_MAIL		BIT(ACL_WHERE_MAIL)
975 #define ACL_BIT_PREDATA		BIT(ACL_WHERE_PREDATA)
976 #define ACL_BIT_MIME		BIT(ACL_WHERE_MIME)
977 #define ACL_BIT_DKIM		BIT(ACL_WHERE_DKIM)
978 #define ACL_BIT_DATA		BIT(ACL_WHERE_DATA)
979 #ifdef DISABLE_PRDR
980 # define ACL_BIT_PRDR		0
981 #else
982 # define ACL_BIT_PRDR		BIT(ACL_WHERE_PRDR)
983 #endif
984 #define ACL_BIT_NOTSMTP		BIT(ACL_WHERE_NOTSMTP)
985 #define ACL_BIT_AUTH		BIT(ACL_WHERE_AUTH)
986 #define ACL_BIT_CONNECT		BIT(ACL_WHERE_CONNECT)
987 #define ACL_BIT_ETRN		BIT(ACL_WHERE_ETRN)
988 #define ACL_BIT_EXPN		BIT(ACL_WHERE_EXPN)
989 #define ACL_BIT_HELO		BIT(ACL_WHERE_HELO)
990 #define ACL_BIT_MAILAUTH	BIT(ACL_WHERE_MAILAUTH)
991 #define ACL_BIT_NOTSMTP_START	BIT(ACL_WHERE_NOTSMTP_START)
992 #define ACL_BIT_NOTQUIT		BIT(ACL_WHERE_NOTQUIT)
993 #define ACL_BIT_QUIT		BIT(ACL_WHERE_QUIT)
994 #define ACL_BIT_STARTTLS	BIT(ACL_WHERE_STARTTLS)
995 #define ACL_BIT_VRFY		BIT(ACL_WHERE_VRFY)
996 #define ACL_BIT_DELIVERY	BIT(ACL_WHERE_DELIVERY)
997 #define ACL_BIT_UNKNOWN		BIT(ACL_WHERE_UNKNOWN)
998 
999 #define ACL_BITS_HAVEDATA	(ACL_BIT_MIME | ACL_BIT_DKIM | ACL_BIT_DATA \
1000 				| ACL_BIT_PRDR \
1001 				| ACL_BIT_NOTSMTP | ACL_BIT_QUIT | ACL_BIT_NOTQUIT)
1002 
1003 
1004 /* Situations for spool_write_header() */
1005 
1006 enum { SW_RECEIVING, SW_DELIVERING, SW_MODIFYING };
1007 
1008 /* MX fields for hosts not obtained from MX records are always negative.
1009 MX_NONE is the default case; lesser values are used when the hosts are
1010 randomized in batches. */
1011 
1012 #define MX_NONE           (-1)
1013 
1014 /* host_item.port defaults to PORT_NONE; the only current case where this
1015 is changed before running the transport is when an dnslookup router sets an
1016 explicit port number. */
1017 
1018 #define PORT_NONE     (-1)
1019 
1020 /* Flags for single-key search defaults */
1021 
1022 #define SEARCH_STAR       0x01
1023 #define SEARCH_STARAT     0x02
1024 
1025 /* Filter types */
1026 
1027 enum { FILTER_UNSET, FILTER_FORWARD, FILTER_EXIM, FILTER_SIEVE };
1028 
1029 /* Codes for ESMTP facilities offered by peer */
1030 
1031 #define OPTION_TLS		BIT(0)
1032 #define OPTION_IGNQ		BIT(1)
1033 #define OPTION_PRDR		BIT(2)
1034 #define OPTION_UTF8		BIT(3)
1035 #define OPTION_DSN		BIT(4)
1036 #define OPTION_PIPE		BIT(5)
1037 #define OPTION_SIZE		BIT(6)
1038 #define OPTION_CHUNKING		BIT(7)
1039 #define OPTION_EARLY_PIPE	BIT(8)
1040 
1041 /* Argument for *_getc */
1042 
1043 #define GETC_BUFFER_UNLIMITED	UINT_MAX
1044 
1045 /* UTF-8 chars for line-drawing */
1046 
1047 #define UTF8_DOWN_RIGHT		"\xE2\x95\xAD"
1048 #define UTF8_VERT		"\xE2\x94\x82"
1049 #define UTF8_HORIZ		"\xE2\x94\x80"
1050 #define UTF8_VERT_RIGHT		"\xE2\x94\x9C"
1051 #define UTF8_UP_RIGHT		"\xE2\x95\xB0"
1052 #define UTF8_VERT_2DASH		"\xE2\x95\x8E"
1053 
1054 
1055 /* Options on tls_close */
1056 #define TLS_NO_SHUTDOWN		0
1057 #define TLS_SHUTDOWN_NOWAIT	1
1058 #define TLS_SHUTDOWN_WAIT	2
1059 
1060 
1061 #ifdef COMPILE_UTILITY
1062 # define ALARM(seconds) alarm(seconds);
1063 # define ALARM_CLR(seconds) alarm(seconds);
1064 #else
1065 /* For debugging of odd alarm-signal problems, stash caller info while the
1066 alarm is active.  Clear it down on cancelling the alarm so we can tell there
1067 should not be one active. */
1068 
1069 # define ALARM(seconds) \
1070     debug_selector & D_any \
1071     ? (sigalarm_setter = CUS __FUNCTION__, alarm(seconds)) : alarm(seconds);
1072 # define ALARM_CLR(seconds) \
1073     debug_selector & D_any \
1074     ? (sigalarm_setter = NULL, alarm(seconds)) : alarm(seconds);
1075 #endif
1076 
1077 #define AUTHS_REGEX US"\\n250[\\s\\-]AUTH\\s+([\\-\\w \\t]+)(?:\\n|$)"
1078 
1079 #define EARLY_PIPE_FEATURE_NAME "PIPE_CONNECT"
1080 #define EARLY_PIPE_FEATURE_LEN  12
1081 
1082 
1083 /* Flags for auth_client_item() */
1084 
1085 #define AUTH_ITEM_FIRST	BIT(0)
1086 #define AUTH_ITEM_LAST	BIT(1)
1087 #define AUTH_ITEM_IGN64	BIT(2)
1088 
1089 
1090 /* Flags for tls_{in,out}_resumption */
1091 #define RESUME_SUPPORTED	BIT(0)
1092 #define RESUME_CLIENT_REQUESTED	BIT(1)
1093 #define RESUME_CLIENT_SUGGESTED	BIT(2)
1094 #define RESUME_SERVER_TICKET	BIT(3)
1095 #define RESUME_USED		BIT(4)
1096 
1097 #define RESUME_DECODE_STRING \
1098 	  US"not requested or offered : 0x02 :client requested, no server ticket" \
1099     ": 0x04 : 0x05 : 0x06 :client offered session, no server action" \
1100     ": 0x08 :no client request: 0x0A :client requested new ticket, server provided" \
1101     ": 0x0C :client offered session, not used: 0x0E :client offered session, server only provided new ticket" \
1102     ": 0x10 :session resumed unasked: 0x12 :session resumed unasked" \
1103     ": 0x14 : 0x15 : 0x16 :session resumed" \
1104     ": 0x18 :session resumed unasked: 0x1A :session resumed unasked" \
1105     ": 0x1C :session resumed: 0x1E :session resumed, also new ticket"
1106 
1107 /* Flags for string_vformat */
1108 #define SVFMT_EXTEND		BIT(0)
1109 #define SVFMT_REBUFFER		BIT(1)
1110 #define SVFMT_TAINT_NOCHK	BIT(2)
1111 
1112 
1113 #define NOTIFIER_SOCKET_NAME	"exim_daemon_notify"
1114 #define NOTIFY_MSG_QRUN		1	/* Notify message types */
1115 #define NOTIFY_QUEUE_SIZE_REQ	2
1116 
1117 /* End of macros.h */
1118