xref: /netbsd-src/external/bsd/file/dist/src/apprentice.c (revision 796c32c94f6e154afc9de0f63da35c91bb739b45)
1 /*	$NetBSD: apprentice.c,v 1.19 2017/09/08 13:40:25 christos Exp $	*/
2 
3 /*
4  * Copyright (c) Ian F. Darwin 1986-1995.
5  * Software written by Ian F. Darwin and others;
6  * maintained 1995-present by Christos Zoulas and others.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice immediately at the beginning of the file, without modification,
13  *    this list of conditions, and the following disclaimer.
14  * 2. Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in the
16  *    documentation and/or other materials provided with the distribution.
17  *
18  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
22  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28  * SUCH DAMAGE.
29  */
30 /*
31  * apprentice - make one pass through /etc/magic, learning its secrets.
32  */
33 
34 #include "file.h"
35 
36 #ifndef	lint
37 #if 0
38 FILE_RCSID("@(#)$File: apprentice.c,v 1.262 2017/08/28 13:39:18 christos Exp $")
39 #else
40 __RCSID("$NetBSD: apprentice.c,v 1.19 2017/09/08 13:40:25 christos Exp $");
41 #endif
42 #endif	/* lint */
43 
44 #include "magic.h"
45 #include <stdlib.h>
46 #ifdef HAVE_UNISTD_H
47 #include <unistd.h>
48 #endif
49 #ifdef HAVE_STDDEF_H
50 #include <stddef.h>
51 #endif
52 #include <string.h>
53 #include <assert.h>
54 #include <ctype.h>
55 #include <fcntl.h>
56 #ifdef QUICK
57 #include <sys/mman.h>
58 #endif
59 #include <dirent.h>
60 #if defined(HAVE_LIMITS_H)
61 #include <limits.h>
62 #endif
63 
64 #ifndef SSIZE_MAX
65 #define MAXMAGIC_SIZE        ((ssize_t)0x7fffffff)
66 #else
67 #define MAXMAGIC_SIZE        SSIZE_MAX
68 #endif
69 
70 #define	EATAB {while (isascii((unsigned char) *l) && \
71 		      isspace((unsigned char) *l))  ++l;}
72 #define LOWCASE(l) (isupper((unsigned char) (l)) ? \
73 			tolower((unsigned char) (l)) : (l))
74 /*
75  * Work around a bug in headers on Digital Unix.
76  * At least confirmed for: OSF1 V4.0 878
77  */
78 #if defined(__osf__) && defined(__DECC)
79 #ifdef MAP_FAILED
80 #undef MAP_FAILED
81 #endif
82 #endif
83 
84 #ifndef MAP_FAILED
85 #define MAP_FAILED (void *) -1
86 #endif
87 
88 #ifndef MAP_FILE
89 #define MAP_FILE 0
90 #endif
91 
92 #define ALLOC_CHUNK	(size_t)10
93 #define ALLOC_INCR	(size_t)200
94 
95 #define MAP_TYPE_USER	0
96 #define MAP_TYPE_MALLOC	1
97 #define MAP_TYPE_MMAP	2
98 
99 struct magic_entry {
100 	struct magic *mp;
101 	uint32_t cont_count;
102 	uint32_t max_count;
103 };
104 
105 struct magic_entry_set {
106 	struct magic_entry *me;
107 	uint32_t count;
108 	uint32_t max;
109 };
110 
111 struct magic_map {
112 	void *p;
113 	size_t len;
114 	int type;
115 	struct magic *magic[MAGIC_SETS];
116 	uint32_t nmagic[MAGIC_SETS];
117 };
118 
119 int file_formats[FILE_NAMES_SIZE];
120 const size_t file_nformats = FILE_NAMES_SIZE;
121 const char *file_names[FILE_NAMES_SIZE];
122 const size_t file_nnames = FILE_NAMES_SIZE;
123 
124 private int getvalue(struct magic_set *ms, struct magic *, const char **, int);
125 private int hextoint(int);
126 private const char *getstr(struct magic_set *, struct magic *, const char *,
127     int);
128 private int parse(struct magic_set *, struct magic_entry *, const char *,
129     size_t, int);
130 private void eatsize(const char **);
131 private int apprentice_1(struct magic_set *, const char *, int);
132 private size_t apprentice_magic_strength(const struct magic *);
133 private int apprentice_sort(const void *, const void *);
134 private void apprentice_list(struct mlist *, int );
135 private struct magic_map *apprentice_load(struct magic_set *,
136     const char *, int);
137 private struct mlist *mlist_alloc(void);
138 private void mlist_free(struct mlist *);
139 private void byteswap(struct magic *, uint32_t);
140 private void bs1(struct magic *);
141 private uint16_t swap2(uint16_t);
142 private uint32_t swap4(uint32_t);
143 private uint64_t swap8(uint64_t);
144 private char *mkdbname(struct magic_set *, const char *, int);
145 private struct magic_map *apprentice_buf(struct magic_set *, struct magic *,
146     size_t);
147 private struct magic_map *apprentice_map(struct magic_set *, const char *);
148 private int check_buffer(struct magic_set *, struct magic_map *, const char *);
149 private void apprentice_unmap(struct magic_map *);
150 private int apprentice_compile(struct magic_set *, struct magic_map *,
151     const char *);
152 private int check_format_type(const char *, int, const char **);
153 private int check_format(struct magic_set *, struct magic *);
154 private int get_op(char);
155 private int parse_mime(struct magic_set *, struct magic_entry *, const char *);
156 private int parse_strength(struct magic_set *, struct magic_entry *, const char *);
157 private int parse_apple(struct magic_set *, struct magic_entry *, const char *);
158 private int parse_ext(struct magic_set *, struct magic_entry *, const char *);
159 
160 
161 private size_t magicsize = sizeof(struct magic);
162 
163 private const char usg_hdr[] = "cont\toffset\ttype\topcode\tmask\tvalue\tdesc";
164 
165 private struct {
166 	const char *name;
167 	size_t len;
168 	int (*fun)(struct magic_set *, struct magic_entry *, const char *);
169 } bang[] = {
170 #define	DECLARE_FIELD(name) { # name, sizeof(# name) - 1, parse_ ## name }
171 	DECLARE_FIELD(mime),
172 	DECLARE_FIELD(apple),
173 	DECLARE_FIELD(ext),
174 	DECLARE_FIELD(strength),
175 #undef	DECLARE_FIELD
176 	{ NULL, 0, NULL }
177 };
178 
179 #ifdef COMPILE_ONLY
180 
181 int main(int, char *[]);
182 
183 int
184 main(int argc, char *argv[])
185 {
186 	int ret;
187 	struct magic_set *ms;
188 	char *progname;
189 
190 	if ((progname = strrchr(argv[0], '/')) != NULL)
191 		progname++;
192 	else
193 		progname = argv[0];
194 
195 	if (argc != 2) {
196 		(void)fprintf(stderr, "Usage: %s file\n", progname);
197 		return 1;
198 	}
199 
200 	if ((ms = magic_open(MAGIC_CHECK)) == NULL) {
201 		(void)fprintf(stderr, "%s: %s\n", progname, strerror(errno));
202 		return 1;
203 	}
204 	ret = magic_compile(ms, argv[1]) == -1 ? 1 : 0;
205 	if (ret == 1)
206 		(void)fprintf(stderr, "%s: %s\n", progname, magic_error(ms));
207 	magic_close(ms);
208 	return ret;
209 }
210 #endif /* COMPILE_ONLY */
211 
212 struct type_tbl_s {
213 	const char name[16];
214 	const size_t len;
215 	const int type;
216 	const int format;
217 };
218 
219 /*
220  * XXX - the actual Single UNIX Specification says that "long" means "long",
221  * as in the C data type, but we treat it as meaning "4-byte integer".
222  * Given that the OS X version of file 5.04 did the same, I guess that passes
223  * the actual test; having "long" be dependent on how big a "long" is on
224  * the machine running "file" is silly.
225  */
226 static const struct type_tbl_s type_tbl[] = {
227 # define XX(s)		s, (sizeof(s) - 1)
228 # define XX_NULL	"", 0
229 	{ XX("invalid"),	FILE_INVALID,		FILE_FMT_NONE },
230 	{ XX("byte"),		FILE_BYTE,		FILE_FMT_NUM },
231 	{ XX("short"),		FILE_SHORT,		FILE_FMT_NUM },
232 	{ XX("default"),	FILE_DEFAULT,		FILE_FMT_NONE },
233 	{ XX("long"),		FILE_LONG,		FILE_FMT_NUM },
234 	{ XX("string"),		FILE_STRING,		FILE_FMT_STR },
235 	{ XX("date"),		FILE_DATE,		FILE_FMT_STR },
236 	{ XX("beshort"),	FILE_BESHORT,		FILE_FMT_NUM },
237 	{ XX("belong"),		FILE_BELONG,		FILE_FMT_NUM },
238 	{ XX("bedate"),		FILE_BEDATE,		FILE_FMT_STR },
239 	{ XX("leshort"),	FILE_LESHORT,		FILE_FMT_NUM },
240 	{ XX("lelong"),		FILE_LELONG,		FILE_FMT_NUM },
241 	{ XX("ledate"),		FILE_LEDATE,		FILE_FMT_STR },
242 	{ XX("pstring"),	FILE_PSTRING,		FILE_FMT_STR },
243 	{ XX("ldate"),		FILE_LDATE,		FILE_FMT_STR },
244 	{ XX("beldate"),	FILE_BELDATE,		FILE_FMT_STR },
245 	{ XX("leldate"),	FILE_LELDATE,		FILE_FMT_STR },
246 	{ XX("regex"),		FILE_REGEX,		FILE_FMT_STR },
247 	{ XX("bestring16"),	FILE_BESTRING16,	FILE_FMT_STR },
248 	{ XX("lestring16"),	FILE_LESTRING16,	FILE_FMT_STR },
249 	{ XX("search"),		FILE_SEARCH,		FILE_FMT_STR },
250 	{ XX("medate"),		FILE_MEDATE,		FILE_FMT_STR },
251 	{ XX("meldate"),	FILE_MELDATE,		FILE_FMT_STR },
252 	{ XX("melong"),		FILE_MELONG,		FILE_FMT_NUM },
253 	{ XX("quad"),		FILE_QUAD,		FILE_FMT_QUAD },
254 	{ XX("lequad"),		FILE_LEQUAD,		FILE_FMT_QUAD },
255 	{ XX("bequad"),		FILE_BEQUAD,		FILE_FMT_QUAD },
256 	{ XX("qdate"),		FILE_QDATE,		FILE_FMT_STR },
257 	{ XX("leqdate"),	FILE_LEQDATE,		FILE_FMT_STR },
258 	{ XX("beqdate"),	FILE_BEQDATE,		FILE_FMT_STR },
259 	{ XX("qldate"),		FILE_QLDATE,		FILE_FMT_STR },
260 	{ XX("leqldate"),	FILE_LEQLDATE,		FILE_FMT_STR },
261 	{ XX("beqldate"),	FILE_BEQLDATE,		FILE_FMT_STR },
262 	{ XX("float"),		FILE_FLOAT,		FILE_FMT_FLOAT },
263 	{ XX("befloat"),	FILE_BEFLOAT,		FILE_FMT_FLOAT },
264 	{ XX("lefloat"),	FILE_LEFLOAT,		FILE_FMT_FLOAT },
265 	{ XX("double"),		FILE_DOUBLE,		FILE_FMT_DOUBLE },
266 	{ XX("bedouble"),	FILE_BEDOUBLE,		FILE_FMT_DOUBLE },
267 	{ XX("ledouble"),	FILE_LEDOUBLE,		FILE_FMT_DOUBLE },
268 	{ XX("leid3"),		FILE_LEID3,		FILE_FMT_NUM },
269 	{ XX("beid3"),		FILE_BEID3,		FILE_FMT_NUM },
270 	{ XX("indirect"),	FILE_INDIRECT,		FILE_FMT_NUM },
271 	{ XX("qwdate"),		FILE_QWDATE,		FILE_FMT_STR },
272 	{ XX("leqwdate"),	FILE_LEQWDATE,		FILE_FMT_STR },
273 	{ XX("beqwdate"),	FILE_BEQWDATE,		FILE_FMT_STR },
274 	{ XX("name"),		FILE_NAME,		FILE_FMT_NONE },
275 	{ XX("use"),		FILE_USE,		FILE_FMT_NONE },
276 	{ XX("clear"),		FILE_CLEAR,		FILE_FMT_NONE },
277 	{ XX("der"),		FILE_DER,		FILE_FMT_STR },
278 	{ XX_NULL,		FILE_INVALID,		FILE_FMT_NONE },
279 };
280 
281 /*
282  * These are not types, and cannot be preceded by "u" to make them
283  * unsigned.
284  */
285 static const struct type_tbl_s special_tbl[] = {
286 	{ XX("der"),		FILE_DER,		FILE_FMT_STR },
287 	{ XX("name"),		FILE_NAME,		FILE_FMT_STR },
288 	{ XX("use"),		FILE_USE,		FILE_FMT_STR },
289 	{ XX_NULL,		FILE_INVALID,		FILE_FMT_NONE },
290 };
291 # undef XX
292 # undef XX_NULL
293 
294 private int
295 get_type(const struct type_tbl_s *tbl, const char *l, const char **t)
296 {
297 	const struct type_tbl_s *p;
298 
299 	for (p = tbl; p->len; p++) {
300 		if (strncmp(l, p->name, p->len) == 0) {
301 			if (t)
302 				*t = l + p->len;
303 			break;
304 		}
305 	}
306 	return p->type;
307 }
308 
309 private int
310 get_standard_integer_type(const char *l, const char **t)
311 {
312 	int type;
313 
314 	if (isalpha((unsigned char)l[1])) {
315 		switch (l[1]) {
316 		case 'C':
317 			/* "dC" and "uC" */
318 			type = FILE_BYTE;
319 			break;
320 		case 'S':
321 			/* "dS" and "uS" */
322 			type = FILE_SHORT;
323 			break;
324 		case 'I':
325 		case 'L':
326 			/*
327 			 * "dI", "dL", "uI", and "uL".
328 			 *
329 			 * XXX - the actual Single UNIX Specification says
330 			 * that "L" means "long", as in the C data type,
331 			 * but we treat it as meaning "4-byte integer".
332 			 * Given that the OS X version of file 5.04 did
333 			 * the same, I guess that passes the actual SUS
334 			 * validation suite; having "dL" be dependent on
335 			 * how big a "long" is on the machine running
336 			 * "file" is silly.
337 			 */
338 			type = FILE_LONG;
339 			break;
340 		case 'Q':
341 			/* "dQ" and "uQ" */
342 			type = FILE_QUAD;
343 			break;
344 		default:
345 			/* "d{anything else}", "u{anything else}" */
346 			return FILE_INVALID;
347 		}
348 		l += 2;
349 	} else if (isdigit((unsigned char)l[1])) {
350 		/*
351 		 * "d{num}" and "u{num}"; we only support {num} values
352 		 * of 1, 2, 4, and 8 - the Single UNIX Specification
353 		 * doesn't say anything about whether arbitrary
354 		 * values should be supported, but both the Solaris 10
355 		 * and OS X Mountain Lion versions of file passed the
356 		 * Single UNIX Specification validation suite, and
357 		 * neither of them support values bigger than 8 or
358 		 * non-power-of-2 values.
359 		 */
360 		if (isdigit((unsigned char)l[2])) {
361 			/* Multi-digit, so > 9 */
362 			return FILE_INVALID;
363 		}
364 		switch (l[1]) {
365 		case '1':
366 			type = FILE_BYTE;
367 			break;
368 		case '2':
369 			type = FILE_SHORT;
370 			break;
371 		case '4':
372 			type = FILE_LONG;
373 			break;
374 		case '8':
375 			type = FILE_QUAD;
376 			break;
377 		default:
378 			/* XXX - what about 3, 5, 6, or 7? */
379 			return FILE_INVALID;
380 		}
381 		l += 2;
382 	} else {
383 		/*
384 		 * "d" or "u" by itself.
385 		 */
386 		type = FILE_LONG;
387 		++l;
388 	}
389 	if (t)
390 		*t = l;
391 	return type;
392 }
393 
394 private void
395 init_file_tables(void)
396 {
397 	static int done = 0;
398 	const struct type_tbl_s *p;
399 
400 	if (done)
401 		return;
402 	done++;
403 
404 	for (p = type_tbl; p->len; p++) {
405 		assert(p->type < FILE_NAMES_SIZE);
406 		file_names[p->type] = p->name;
407 		file_formats[p->type] = p->format;
408 	}
409 	assert(p - type_tbl == FILE_NAMES_SIZE);
410 }
411 
412 private int
413 add_mlist(struct mlist *mlp, struct magic_map *map, size_t idx)
414 {
415 	struct mlist *ml;
416 
417 	mlp->map = NULL;
418 	if ((ml = CAST(struct mlist *, malloc(sizeof(*ml)))) == NULL)
419 		return -1;
420 
421 	ml->map = idx == 0 ? map : NULL;
422 	ml->magic = map->magic[idx];
423 	ml->nmagic = map->nmagic[idx];
424 
425 	mlp->prev->next = ml;
426 	ml->prev = mlp->prev;
427 	ml->next = mlp;
428 	mlp->prev = ml;
429 	return 0;
430 }
431 
432 /*
433  * Handle one file or directory.
434  */
435 private int
436 apprentice_1(struct magic_set *ms, const char *fn, int action)
437 {
438 	struct magic_map *map;
439 #ifndef COMPILE_ONLY
440 	struct mlist *ml;
441 	size_t i;
442 #endif
443 
444 	if (magicsize != FILE_MAGICSIZE) {
445 		file_error(ms, 0, "magic element size %lu != %lu",
446 		    (unsigned long)sizeof(*map->magic[0]),
447 		    (unsigned long)FILE_MAGICSIZE);
448 		return -1;
449 	}
450 
451 	if (action == FILE_COMPILE) {
452 		map = apprentice_load(ms, fn, action);
453 		if (map == NULL)
454 			return -1;
455 		return apprentice_compile(ms, map, fn);
456 	}
457 
458 #ifndef COMPILE_ONLY
459 	map = apprentice_map(ms, fn);
460 	if (map == (struct magic_map *)-1)
461 		return -1;
462 	if (map == NULL) {
463 		if (ms->flags & MAGIC_CHECK)
464 			file_magwarn(ms, "using regular magic file `%s'", fn);
465 		map = apprentice_load(ms, fn, action);
466 		if (map == NULL)
467 			return -1;
468 	}
469 
470 	for (i = 0; i < MAGIC_SETS; i++) {
471 		if (add_mlist(ms->mlist[i], map, i) == -1) {
472 			file_oomem(ms, sizeof(*ml));
473 			return -1;
474 		}
475 	}
476 
477 	if (action == FILE_LIST) {
478 		for (i = 0; i < MAGIC_SETS; i++) {
479 			printf("Set %" SIZE_T_FORMAT "u:\nBinary patterns:\n",
480 			    i);
481 			apprentice_list(ms->mlist[i], BINTEST);
482 			printf("Text patterns:\n");
483 			apprentice_list(ms->mlist[i], TEXTTEST);
484 		}
485 	}
486 	return 0;
487 #else
488 	return 0;
489 #endif /* COMPILE_ONLY */
490 }
491 
492 protected void
493 file_ms_free(struct magic_set *ms)
494 {
495 	size_t i;
496 	if (ms == NULL)
497 		return;
498 	for (i = 0; i < MAGIC_SETS; i++)
499 		mlist_free(ms->mlist[i]);
500 	free(ms->o.pbuf);
501 	free(ms->o.buf);
502 	free(ms->c.li);
503 	free(ms);
504 }
505 
506 protected struct magic_set *
507 file_ms_alloc(int flags)
508 {
509 	struct magic_set *ms;
510 	size_t i, len;
511 
512 	if ((ms = CAST(struct magic_set *, calloc((size_t)1,
513 	    sizeof(struct magic_set)))) == NULL)
514 		return NULL;
515 
516 	if (magic_setflags(ms, flags) == -1) {
517 		errno = EINVAL;
518 		goto free;
519 	}
520 
521 	ms->o.buf = ms->o.pbuf = NULL;
522 	len = (ms->c.len = 10) * sizeof(*ms->c.li);
523 
524 	if ((ms->c.li = CAST(struct level_info *, malloc(len))) == NULL)
525 		goto free;
526 
527 	ms->event_flags = 0;
528 	ms->error = -1;
529 	for (i = 0; i < MAGIC_SETS; i++)
530 		ms->mlist[i] = NULL;
531 	ms->file = "unknown";
532 	ms->line = 0;
533 	ms->indir_max = FILE_INDIR_MAX;
534 	ms->name_max = FILE_NAME_MAX;
535 	ms->elf_shnum_max = FILE_ELF_SHNUM_MAX;
536 	ms->elf_phnum_max = FILE_ELF_PHNUM_MAX;
537 	ms->elf_notes_max = FILE_ELF_NOTES_MAX;
538 	ms->regex_max = FILE_REGEX_MAX;
539 	ms->bytes_max = FILE_BYTES_MAX;
540 	return ms;
541 free:
542 	free(ms);
543 	return NULL;
544 }
545 
546 private void
547 apprentice_unmap(struct magic_map *map)
548 {
549 	size_t i;
550 	if (map == NULL)
551 		return;
552 
553 	switch (map->type) {
554 	case MAP_TYPE_USER:
555 		break;
556 	case MAP_TYPE_MALLOC:
557 		for (i = 0; i < MAGIC_SETS; i++) {
558 			void *b = map->magic[i];
559 			void *p = map->p;
560 			if (CAST(char *, b) >= CAST(char *, p) &&
561 			    CAST(char *, b) <= CAST(char *, p) + map->len)
562 				continue;
563 			free(map->magic[i]);
564 		}
565 		free(map->p);
566 		break;
567 #ifdef QUICK
568 	case MAP_TYPE_MMAP:
569 		if (map->p && map->p != MAP_FAILED)
570 			(void)munmap(map->p, map->len);
571 		break;
572 #endif
573 	default:
574 		abort();
575 	}
576 	free(map);
577 }
578 
579 private struct mlist *
580 mlist_alloc(void)
581 {
582 	struct mlist *mlist;
583 	if ((mlist = CAST(struct mlist *, calloc(1, sizeof(*mlist)))) == NULL) {
584 		return NULL;
585 	}
586 	mlist->next = mlist->prev = mlist;
587 	return mlist;
588 }
589 
590 private void
591 mlist_free(struct mlist *mlist)
592 {
593 	struct mlist *ml, *next;
594 
595 	if (mlist == NULL)
596 		return;
597 
598 	ml = mlist->next;
599 	for (ml = mlist->next; (next = ml->next) != NULL; ml = next) {
600 		if (ml->map)
601 			apprentice_unmap(CAST(struct magic_map *, ml->map));
602 		free(ml);
603 		if (ml == mlist)
604 			break;
605 	}
606 }
607 
608 #ifndef COMPILE_ONLY
609 /* void **bufs: an array of compiled magic files */
610 protected int
611 buffer_apprentice(struct magic_set *ms, struct magic **bufs,
612     size_t *sizes, size_t nbufs)
613 {
614 	size_t i, j;
615 	struct mlist *ml;
616 	struct magic_map *map;
617 
618 	if (nbufs == 0)
619 		return -1;
620 
621 	(void)file_reset(ms, 0);
622 
623 	init_file_tables();
624 
625 	for (i = 0; i < MAGIC_SETS; i++) {
626 		mlist_free(ms->mlist[i]);
627 		if ((ms->mlist[i] = mlist_alloc()) == NULL) {
628 			file_oomem(ms, sizeof(*ms->mlist[i]));
629 			goto fail;
630 		}
631 	}
632 
633 	for (i = 0; i < nbufs; i++) {
634 		map = apprentice_buf(ms, bufs[i], sizes[i]);
635 		if (map == NULL)
636 			goto fail;
637 
638 		for (j = 0; j < MAGIC_SETS; j++) {
639 			if (add_mlist(ms->mlist[j], map, j) == -1) {
640 				file_oomem(ms, sizeof(*ml));
641 				goto fail;
642 			}
643 		}
644 	}
645 
646 	return 0;
647 fail:
648 	for (i = 0; i < MAGIC_SETS; i++) {
649 		mlist_free(ms->mlist[i]);
650 		ms->mlist[i] = NULL;
651 	}
652 	return -1;
653 }
654 #endif
655 
656 /* const char *fn: list of magic files and directories */
657 protected int
658 file_apprentice(struct magic_set *ms, const char *fn, int action)
659 {
660 	char *p, *mfn;
661 	int file_err, errs = -1;
662 	size_t i;
663 
664 	(void)file_reset(ms, 0);
665 
666 	if ((fn = magic_getpath(fn, action)) == NULL)
667 		return -1;
668 
669 	init_file_tables();
670 
671 	if ((mfn = strdup(fn)) == NULL) {
672 		file_oomem(ms, strlen(fn));
673 		return -1;
674 	}
675 
676 	for (i = 0; i < MAGIC_SETS; i++) {
677 		mlist_free(ms->mlist[i]);
678 		if ((ms->mlist[i] = mlist_alloc()) == NULL) {
679 			file_oomem(ms, sizeof(*ms->mlist[i]));
680 			while (i-- > 0) {
681 				mlist_free(ms->mlist[i]);
682 				ms->mlist[i] = NULL;
683 			}
684 			free(mfn);
685 			return -1;
686 		}
687 	}
688 	fn = mfn;
689 
690 	while (fn) {
691 		p = strchr(fn, PATHSEP);
692 		if (p)
693 			*p++ = '\0';
694 		if (*fn == '\0')
695 			break;
696 		file_err = apprentice_1(ms, fn, action);
697 		errs = MAX(errs, file_err);
698 		fn = p;
699 	}
700 
701 	free(mfn);
702 
703 	if (errs == -1) {
704 		for (i = 0; i < MAGIC_SETS; i++) {
705 			mlist_free(ms->mlist[i]);
706 			ms->mlist[i] = NULL;
707 		}
708 		file_error(ms, 0, "could not find any valid magic files!");
709 		return -1;
710 	}
711 
712 #if 0
713 	/*
714 	 * Always leave the database loaded
715 	 */
716 	if (action == FILE_LOAD)
717 		return 0;
718 
719 	for (i = 0; i < MAGIC_SETS; i++) {
720 		mlist_free(ms->mlist[i]);
721 		ms->mlist[i] = NULL;
722 	}
723 #endif
724 
725 	switch (action) {
726 	case FILE_LOAD:
727 	case FILE_COMPILE:
728 	case FILE_CHECK:
729 	case FILE_LIST:
730 		return 0;
731 	default:
732 		file_error(ms, 0, "Invalid action %d", action);
733 		return -1;
734 	}
735 }
736 
737 /*
738  * Compute the real length of a magic expression, for the purposes
739  * of determining how "strong" a magic expression is (approximating
740  * how specific its matches are):
741  *	- magic characters count 0 unless escaped.
742  *	- [] expressions count 1
743  *	- {} expressions count 0
744  *	- regular characters or escaped magic characters count 1
745  *	- 0 length expressions count as one
746  */
747 private size_t
748 nonmagic(const char *str)
749 {
750 	const char *p;
751 	size_t rv = 0;
752 
753 	for (p = str; *p; p++)
754 		switch (*p) {
755 		case '\\':	/* Escaped anything counts 1 */
756 			if (!*++p)
757 				p--;
758 			rv++;
759 			continue;
760 		case '?':	/* Magic characters count 0 */
761 		case '*':
762 		case '.':
763 		case '+':
764 		case '^':
765 		case '$':
766 			continue;
767 		case '[':	/* Bracketed expressions count 1 the ']' */
768 			while (*p && *p != ']')
769 				p++;
770 			p--;
771 			continue;
772 		case '{':	/* Braced expressions count 0 */
773 			while (*p && *p != '}')
774 				p++;
775 			if (!*p)
776 				p--;
777 			continue;
778 		default:	/* Anything else counts 1 */
779 			rv++;
780 			continue;
781 		}
782 
783 	return rv == 0 ? 1 : rv;	/* Return at least 1 */
784 }
785 
786 
787 private size_t
788 typesize(int type)
789 {
790 	switch (type) {
791 	case FILE_BYTE:
792 		return 1;
793 
794 	case FILE_SHORT:
795 	case FILE_LESHORT:
796 	case FILE_BESHORT:
797 		return 2;
798 
799 	case FILE_LONG:
800 	case FILE_LELONG:
801 	case FILE_BELONG:
802 	case FILE_MELONG:
803 		return 4;
804 
805 	case FILE_DATE:
806 	case FILE_LEDATE:
807 	case FILE_BEDATE:
808 	case FILE_MEDATE:
809 	case FILE_LDATE:
810 	case FILE_LELDATE:
811 	case FILE_BELDATE:
812 	case FILE_MELDATE:
813 	case FILE_FLOAT:
814 	case FILE_BEFLOAT:
815 	case FILE_LEFLOAT:
816 		return 4;
817 
818 	case FILE_QUAD:
819 	case FILE_BEQUAD:
820 	case FILE_LEQUAD:
821 	case FILE_QDATE:
822 	case FILE_LEQDATE:
823 	case FILE_BEQDATE:
824 	case FILE_QLDATE:
825 	case FILE_LEQLDATE:
826 	case FILE_BEQLDATE:
827 	case FILE_QWDATE:
828 	case FILE_LEQWDATE:
829 	case FILE_BEQWDATE:
830 	case FILE_DOUBLE:
831 	case FILE_BEDOUBLE:
832 	case FILE_LEDOUBLE:
833 		return 8;
834 	default:
835 		return (size_t)~0;
836 	}
837 }
838 
839 /*
840  * Get weight of this magic entry, for sorting purposes.
841  */
842 private size_t
843 apprentice_magic_strength(const struct magic *m)
844 {
845 #define MULT 10
846 	size_t ts, v, val = 2 * MULT;	/* baseline strength */
847 
848 	switch (m->type) {
849 	case FILE_DEFAULT:	/* make sure this sorts last */
850 		if (m->factor_op != FILE_FACTOR_OP_NONE)
851 			abort();
852 		return 0;
853 
854 	case FILE_BYTE:
855 	case FILE_SHORT:
856 	case FILE_LESHORT:
857 	case FILE_BESHORT:
858 	case FILE_LONG:
859 	case FILE_LELONG:
860 	case FILE_BELONG:
861 	case FILE_MELONG:
862 	case FILE_DATE:
863 	case FILE_LEDATE:
864 	case FILE_BEDATE:
865 	case FILE_MEDATE:
866 	case FILE_LDATE:
867 	case FILE_LELDATE:
868 	case FILE_BELDATE:
869 	case FILE_MELDATE:
870 	case FILE_FLOAT:
871 	case FILE_BEFLOAT:
872 	case FILE_LEFLOAT:
873 	case FILE_QUAD:
874 	case FILE_BEQUAD:
875 	case FILE_LEQUAD:
876 	case FILE_QDATE:
877 	case FILE_LEQDATE:
878 	case FILE_BEQDATE:
879 	case FILE_QLDATE:
880 	case FILE_LEQLDATE:
881 	case FILE_BEQLDATE:
882 	case FILE_QWDATE:
883 	case FILE_LEQWDATE:
884 	case FILE_BEQWDATE:
885 	case FILE_DOUBLE:
886 	case FILE_BEDOUBLE:
887 	case FILE_LEDOUBLE:
888 		ts = typesize(m->type);
889 		if (ts == (size_t)~0)
890 			abort();
891 		val += ts * MULT;
892 		break;
893 
894 	case FILE_PSTRING:
895 	case FILE_STRING:
896 		val += m->vallen * MULT;
897 		break;
898 
899 	case FILE_BESTRING16:
900 	case FILE_LESTRING16:
901 		val += m->vallen * MULT / 2;
902 		break;
903 
904 	case FILE_SEARCH:
905 		val += m->vallen * MAX(MULT / m->vallen, 1);
906 		break;
907 
908 	case FILE_REGEX:
909 		v = nonmagic(m->value.s);
910 		val += v * MAX(MULT / v, 1);
911 		break;
912 
913 	case FILE_INDIRECT:
914 	case FILE_NAME:
915 	case FILE_USE:
916 		break;
917 
918 	case FILE_DER:
919 		val += MULT;
920 		break;
921 
922 	default:
923 		(void)fprintf(stderr, "Bad type %d\n", m->type);
924 		abort();
925 	}
926 
927 	switch (m->reln) {
928 	case 'x':	/* matches anything penalize */
929 	case '!':       /* matches almost anything penalize */
930 		val = 0;
931 		break;
932 
933 	case '=':	/* Exact match, prefer */
934 		val += MULT;
935 		break;
936 
937 	case '>':
938 	case '<':	/* comparison match reduce strength */
939 		val -= 2 * MULT;
940 		break;
941 
942 	case '^':
943 	case '&':	/* masking bits, we could count them too */
944 		val -= MULT;
945 		break;
946 
947 	default:
948 		(void)fprintf(stderr, "Bad relation %c\n", m->reln);
949 		abort();
950 	}
951 
952 	if (val == 0)	/* ensure we only return 0 for FILE_DEFAULT */
953 		val = 1;
954 
955 	switch (m->factor_op) {
956 	case FILE_FACTOR_OP_NONE:
957 		break;
958 	case FILE_FACTOR_OP_PLUS:
959 		val += m->factor;
960 		break;
961 	case FILE_FACTOR_OP_MINUS:
962 		val -= m->factor;
963 		break;
964 	case FILE_FACTOR_OP_TIMES:
965 		val *= m->factor;
966 		break;
967 	case FILE_FACTOR_OP_DIV:
968 		val /= m->factor;
969 		break;
970 	default:
971 		abort();
972 	}
973 
974 	/*
975 	 * Magic entries with no description get a bonus because they depend
976 	 * on subsequent magic entries to print something.
977 	 */
978 	if (m->desc[0] == '\0')
979 		val++;
980 	return val;
981 }
982 
983 /*
984  * Sort callback for sorting entries by "strength" (basically length)
985  */
986 private int
987 apprentice_sort(const void *a, const void *b)
988 {
989 	const struct magic_entry *ma = CAST(const struct magic_entry *, a);
990 	const struct magic_entry *mb = CAST(const struct magic_entry *, b);
991 	size_t sa = apprentice_magic_strength(ma->mp);
992 	size_t sb = apprentice_magic_strength(mb->mp);
993 	if (sa == sb)
994 		return 0;
995 	else if (sa > sb)
996 		return -1;
997 	else
998 		return 1;
999 }
1000 
1001 /*
1002  * Shows sorted patterns list in the order which is used for the matching
1003  */
1004 private void
1005 apprentice_list(struct mlist *mlist, int mode)
1006 {
1007 	uint32_t magindex = 0;
1008 	struct mlist *ml;
1009 	for (ml = mlist->next; ml != mlist; ml = ml->next) {
1010 		for (magindex = 0; magindex < ml->nmagic; magindex++) {
1011 			struct magic *m = &ml->magic[magindex];
1012 			if ((m->flag & mode) != mode) {
1013 				/* Skip sub-tests */
1014 				while (magindex + 1 < ml->nmagic &&
1015 				       ml->magic[magindex + 1].cont_level != 0)
1016 					++magindex;
1017 				continue; /* Skip to next top-level test*/
1018 			}
1019 
1020 			/*
1021 			 * Try to iterate over the tree until we find item with
1022 			 * description/mimetype.
1023 			 */
1024 			while (magindex + 1 < ml->nmagic &&
1025 			       ml->magic[magindex + 1].cont_level != 0 &&
1026 			       *ml->magic[magindex].desc == '\0' &&
1027 			       *ml->magic[magindex].mimetype == '\0')
1028 				magindex++;
1029 
1030 			printf("Strength = %3" SIZE_T_FORMAT "u@%u: %s [%s]\n",
1031 			    apprentice_magic_strength(m),
1032 			    ml->magic[magindex].lineno,
1033 			    ml->magic[magindex].desc,
1034 			    ml->magic[magindex].mimetype);
1035 		}
1036 	}
1037 }
1038 
1039 private void
1040 set_test_type(struct magic *mstart, struct magic *m)
1041 {
1042 	switch (m->type) {
1043 	case FILE_BYTE:
1044 	case FILE_SHORT:
1045 	case FILE_LONG:
1046 	case FILE_DATE:
1047 	case FILE_BESHORT:
1048 	case FILE_BELONG:
1049 	case FILE_BEDATE:
1050 	case FILE_LESHORT:
1051 	case FILE_LELONG:
1052 	case FILE_LEDATE:
1053 	case FILE_LDATE:
1054 	case FILE_BELDATE:
1055 	case FILE_LELDATE:
1056 	case FILE_MEDATE:
1057 	case FILE_MELDATE:
1058 	case FILE_MELONG:
1059 	case FILE_QUAD:
1060 	case FILE_LEQUAD:
1061 	case FILE_BEQUAD:
1062 	case FILE_QDATE:
1063 	case FILE_LEQDATE:
1064 	case FILE_BEQDATE:
1065 	case FILE_QLDATE:
1066 	case FILE_LEQLDATE:
1067 	case FILE_BEQLDATE:
1068 	case FILE_QWDATE:
1069 	case FILE_LEQWDATE:
1070 	case FILE_BEQWDATE:
1071 	case FILE_FLOAT:
1072 	case FILE_BEFLOAT:
1073 	case FILE_LEFLOAT:
1074 	case FILE_DOUBLE:
1075 	case FILE_BEDOUBLE:
1076 	case FILE_LEDOUBLE:
1077 	case FILE_DER:
1078 		mstart->flag |= BINTEST;
1079 		break;
1080 	case FILE_STRING:
1081 	case FILE_PSTRING:
1082 	case FILE_BESTRING16:
1083 	case FILE_LESTRING16:
1084 		/* Allow text overrides */
1085 		if (mstart->str_flags & STRING_TEXTTEST)
1086 			mstart->flag |= TEXTTEST;
1087 		else
1088 			mstart->flag |= BINTEST;
1089 		break;
1090 	case FILE_REGEX:
1091 	case FILE_SEARCH:
1092 		/* Check for override */
1093 		if (mstart->str_flags & STRING_BINTEST)
1094 			mstart->flag |= BINTEST;
1095 		if (mstart->str_flags & STRING_TEXTTEST)
1096 			mstart->flag |= TEXTTEST;
1097 
1098 		if (mstart->flag & (TEXTTEST|BINTEST))
1099 			break;
1100 
1101 		/* binary test if pattern is not text */
1102 		if (file_looks_utf8(m->value.us, (size_t)m->vallen, NULL,
1103 		    NULL) <= 0)
1104 			mstart->flag |= BINTEST;
1105 		else
1106 			mstart->flag |= TEXTTEST;
1107 		break;
1108 	case FILE_DEFAULT:
1109 		/* can't deduce anything; we shouldn't see this at the
1110 		   top level anyway */
1111 		break;
1112 	case FILE_INVALID:
1113 	default:
1114 		/* invalid search type, but no need to complain here */
1115 		break;
1116 	}
1117 }
1118 
1119 private int
1120 addentry(struct magic_set *ms, struct magic_entry *me,
1121    struct magic_entry_set *mset)
1122 {
1123 	size_t i = me->mp->type == FILE_NAME ? 1 : 0;
1124 	if (mset[i].count == mset[i].max) {
1125 		struct magic_entry *mp;
1126 
1127 		mset[i].max += ALLOC_INCR;
1128 		if ((mp = CAST(struct magic_entry *,
1129 		    realloc(mset[i].me, sizeof(*mp) * mset[i].max))) ==
1130 		    NULL) {
1131 			file_oomem(ms, sizeof(*mp) * mset[i].max);
1132 			return -1;
1133 		}
1134 		(void)memset(&mp[mset[i].count], 0, sizeof(*mp) *
1135 		    ALLOC_INCR);
1136 		mset[i].me = mp;
1137 	}
1138 	mset[i].me[mset[i].count++] = *me;
1139 	memset(me, 0, sizeof(*me));
1140 	return 0;
1141 }
1142 
1143 /*
1144  * Load and parse one file.
1145  */
1146 private void
1147 load_1(struct magic_set *ms, int action, const char *fn, int *errs,
1148    struct magic_entry_set *mset)
1149 {
1150 	size_t lineno = 0, llen = 0;
1151 	char *line = NULL;
1152 	ssize_t len;
1153 	struct magic_entry me;
1154 
1155 	FILE *f = fopen(ms->file = fn, "r");
1156 	if (f == NULL) {
1157 		if (errno != ENOENT)
1158 			file_error(ms, errno, "cannot read magic file `%s'",
1159 				   fn);
1160 		(*errs)++;
1161 		return;
1162 	}
1163 
1164 	memset(&me, 0, sizeof(me));
1165 	/* read and parse this file */
1166 	for (ms->line = 1; (len = getline(&line, &llen, f)) != -1;
1167 	    ms->line++) {
1168 		if (len == 0) /* null line, garbage, etc */
1169 			continue;
1170 		if (line[len - 1] == '\n') {
1171 			lineno++;
1172 			line[len - 1] = '\0'; /* delete newline */
1173 		}
1174 		switch (line[0]) {
1175 		case '\0':	/* empty, do not parse */
1176 		case '#':	/* comment, do not parse */
1177 			continue;
1178 		case '!':
1179 			if (line[1] == ':') {
1180 				size_t i;
1181 
1182 				for (i = 0; bang[i].name != NULL; i++) {
1183 					if ((size_t)(len - 2) > bang[i].len &&
1184 					    memcmp(bang[i].name, line + 2,
1185 					    bang[i].len) == 0)
1186 						break;
1187 				}
1188 				if (bang[i].name == NULL) {
1189 					file_error(ms, 0,
1190 					    "Unknown !: entry `%s'", line);
1191 					(*errs)++;
1192 					continue;
1193 				}
1194 				if (me.mp == NULL) {
1195 					file_error(ms, 0,
1196 					    "No current entry for :!%s type",
1197 						bang[i].name);
1198 					(*errs)++;
1199 					continue;
1200 				}
1201 				if ((*bang[i].fun)(ms, &me,
1202 				    line + bang[i].len + 2) != 0) {
1203 					(*errs)++;
1204 					continue;
1205 				}
1206 				continue;
1207 			}
1208 			/*FALLTHROUGH*/
1209 		default:
1210 		again:
1211 			switch (parse(ms, &me, line, lineno, action)) {
1212 			case 0:
1213 				continue;
1214 			case 1:
1215 				(void)addentry(ms, &me, mset);
1216 				goto again;
1217 			default:
1218 				(*errs)++;
1219 				break;
1220 			}
1221 		}
1222 	}
1223 	if (me.mp)
1224 		(void)addentry(ms, &me, mset);
1225 	free(line);
1226 	(void)fclose(f);
1227 }
1228 
1229 /*
1230  * parse a file or directory of files
1231  * const char *fn: name of magic file or directory
1232  */
1233 private int
1234 cmpstrp(const void *p1, const void *p2)
1235 {
1236         return strcmp(*(char *const *)p1, *(char *const *)p2);
1237 }
1238 
1239 
1240 private uint32_t
1241 set_text_binary(struct magic_set *ms, struct magic_entry *me, uint32_t nme,
1242     uint32_t starttest)
1243 {
1244 	static const char text[] = "text";
1245 	static const char binary[] = "binary";
1246 	static const size_t len = sizeof(text);
1247 
1248 	uint32_t i = starttest;
1249 
1250 	do {
1251 		set_test_type(me[starttest].mp, me[i].mp);
1252 		if ((ms->flags & MAGIC_DEBUG) == 0)
1253 			continue;
1254 		(void)fprintf(stderr, "%s%s%s: %s\n",
1255 		    me[i].mp->mimetype,
1256 		    me[i].mp->mimetype[0] == '\0' ? "" : "; ",
1257 		    me[i].mp->desc[0] ? me[i].mp->desc : "(no description)",
1258 		    me[i].mp->flag & BINTEST ? binary : text);
1259 		if (me[i].mp->flag & BINTEST) {
1260 			char *p = strstr(me[i].mp->desc, text);
1261 			if (p && (p == me[i].mp->desc ||
1262 			    isspace((unsigned char)p[-1])) &&
1263 			    (p + len - me[i].mp->desc == MAXstring
1264 			    || (p[len] == '\0' ||
1265 			    isspace((unsigned char)p[len]))))
1266 				(void)fprintf(stderr, "*** Possible "
1267 				    "binary test for text type\n");
1268 		}
1269 	} while (++i < nme && me[i].mp->cont_level != 0);
1270 	return i;
1271 }
1272 
1273 private void
1274 set_last_default(struct magic_set *ms, struct magic_entry *me, uint32_t nme)
1275 {
1276 	uint32_t i;
1277 	for (i = 0; i < nme; i++) {
1278 		if (me[i].mp->cont_level == 0 &&
1279 		    me[i].mp->type == FILE_DEFAULT) {
1280 			while (++i < nme)
1281 				if (me[i].mp->cont_level == 0)
1282 					break;
1283 			if (i != nme) {
1284 				/* XXX - Ugh! */
1285 				ms->line = me[i].mp->lineno;
1286 				file_magwarn(ms,
1287 				    "level 0 \"default\" did not sort last");
1288 			}
1289 			return;
1290 		}
1291 	}
1292 }
1293 
1294 private int
1295 coalesce_entries(struct magic_set *ms, struct magic_entry *me, uint32_t nme,
1296     struct magic **ma, uint32_t *nma)
1297 {
1298 	uint32_t i, mentrycount = 0;
1299 	size_t slen;
1300 
1301 	for (i = 0; i < nme; i++)
1302 		mentrycount += me[i].cont_count;
1303 
1304 	slen = sizeof(**ma) * mentrycount;
1305 	if ((*ma = CAST(struct magic *, malloc(slen))) == NULL) {
1306 		file_oomem(ms, slen);
1307 		return -1;
1308 	}
1309 
1310 	mentrycount = 0;
1311 	for (i = 0; i < nme; i++) {
1312 		(void)memcpy(*ma + mentrycount, me[i].mp,
1313 		    me[i].cont_count * sizeof(**ma));
1314 		mentrycount += me[i].cont_count;
1315 	}
1316 	*nma = mentrycount;
1317 	return 0;
1318 }
1319 
1320 private void
1321 magic_entry_free(struct magic_entry *me, uint32_t nme)
1322 {
1323 	uint32_t i;
1324 	if (me == NULL)
1325 		return;
1326 	for (i = 0; i < nme; i++)
1327 		free(me[i].mp);
1328 	free(me);
1329 }
1330 
1331 private struct magic_map *
1332 apprentice_load(struct magic_set *ms, const char *fn, int action)
1333 {
1334 	int errs = 0;
1335 	uint32_t i, j;
1336 	size_t files = 0, maxfiles = 0;
1337 	char **filearr = NULL, *mfn;
1338 	struct stat st;
1339 	struct magic_map *map;
1340 	struct magic_entry_set mset[MAGIC_SETS];
1341 	DIR *dir;
1342 	struct dirent *d;
1343 
1344 	memset(mset, 0, sizeof(mset));
1345 	ms->flags |= MAGIC_CHECK;	/* Enable checks for parsed files */
1346 
1347 
1348 	if ((map = CAST(struct magic_map *, calloc(1, sizeof(*map)))) == NULL)
1349 	{
1350 		file_oomem(ms, sizeof(*map));
1351 		return NULL;
1352 	}
1353 	map->type = MAP_TYPE_MALLOC;
1354 
1355 	/* print silly verbose header for USG compat. */
1356 	if (action == FILE_CHECK)
1357 		(void)fprintf(stderr, "%s\n", usg_hdr);
1358 
1359 	/* load directory or file */
1360 	if (stat(fn, &st) == 0 && S_ISDIR(st.st_mode)) {
1361 		dir = opendir(fn);
1362 		if (!dir) {
1363 			errs++;
1364 			goto out;
1365 		}
1366 		while ((d = readdir(dir)) != NULL) {
1367 			if (d->d_name[0] == '.')
1368 				continue;
1369 			if (asprintf(&mfn, "%s/%s", fn, d->d_name) < 0) {
1370 				file_oomem(ms,
1371 				    strlen(fn) + strlen(d->d_name) + 2);
1372 				errs++;
1373 				closedir(dir);
1374 				goto out;
1375 			}
1376 			if (stat(mfn, &st) == -1 || !S_ISREG(st.st_mode)) {
1377 				free(mfn);
1378 				continue;
1379 			}
1380 			if (files >= maxfiles) {
1381 				size_t mlen;
1382 				maxfiles = (maxfiles + 1) * 2;
1383 				mlen = maxfiles * sizeof(*filearr);
1384 				if ((filearr = CAST(char **,
1385 				    realloc(filearr, mlen))) == NULL) {
1386 					file_oomem(ms, mlen);
1387 					free(mfn);
1388 					closedir(dir);
1389 					errs++;
1390 					goto out;
1391 				}
1392 			}
1393 			filearr[files++] = mfn;
1394 		}
1395 		closedir(dir);
1396 		qsort(filearr, files, sizeof(*filearr), cmpstrp);
1397 		for (i = 0; i < files; i++) {
1398 			load_1(ms, action, filearr[i], &errs, mset);
1399 			free(filearr[i]);
1400 		}
1401 		free(filearr);
1402 	} else
1403 		load_1(ms, action, fn, &errs, mset);
1404 	if (errs)
1405 		goto out;
1406 
1407 	for (j = 0; j < MAGIC_SETS; j++) {
1408 		/* Set types of tests */
1409 		for (i = 0; i < mset[j].count; ) {
1410 			if (mset[j].me[i].mp->cont_level != 0) {
1411 				i++;
1412 				continue;
1413 			}
1414 			i = set_text_binary(ms, mset[j].me, mset[j].count, i);
1415 		}
1416 		if (mset[j].me)
1417 			qsort(mset[j].me, mset[j].count, sizeof(*mset[j].me),
1418 			    apprentice_sort);
1419 
1420 		/*
1421 		 * Make sure that any level 0 "default" line is last
1422 		 * (if one exists).
1423 		 */
1424 		set_last_default(ms, mset[j].me, mset[j].count);
1425 
1426 		/* coalesce per file arrays into a single one */
1427 		if (coalesce_entries(ms, mset[j].me, mset[j].count,
1428 		    &map->magic[j], &map->nmagic[j]) == -1) {
1429 			errs++;
1430 			goto out;
1431 		}
1432 	}
1433 
1434 out:
1435 	for (j = 0; j < MAGIC_SETS; j++)
1436 		magic_entry_free(mset[j].me, mset[j].count);
1437 
1438 	if (errs) {
1439 		apprentice_unmap(map);
1440 		return NULL;
1441 	}
1442 	return map;
1443 }
1444 
1445 /*
1446  * extend the sign bit if the comparison is to be signed
1447  */
1448 protected uint64_t
1449 file_signextend(struct magic_set *ms, struct magic *m, uint64_t v)
1450 {
1451 	if (!(m->flag & UNSIGNED)) {
1452 		switch(m->type) {
1453 		/*
1454 		 * Do not remove the casts below.  They are
1455 		 * vital.  When later compared with the data,
1456 		 * the sign extension must have happened.
1457 		 */
1458 		case FILE_BYTE:
1459 			v = (signed char) v;
1460 			break;
1461 		case FILE_SHORT:
1462 		case FILE_BESHORT:
1463 		case FILE_LESHORT:
1464 			v = (short) v;
1465 			break;
1466 		case FILE_DATE:
1467 		case FILE_BEDATE:
1468 		case FILE_LEDATE:
1469 		case FILE_MEDATE:
1470 		case FILE_LDATE:
1471 		case FILE_BELDATE:
1472 		case FILE_LELDATE:
1473 		case FILE_MELDATE:
1474 		case FILE_LONG:
1475 		case FILE_BELONG:
1476 		case FILE_LELONG:
1477 		case FILE_MELONG:
1478 		case FILE_FLOAT:
1479 		case FILE_BEFLOAT:
1480 		case FILE_LEFLOAT:
1481 			v = (int32_t) v;
1482 			break;
1483 		case FILE_QUAD:
1484 		case FILE_BEQUAD:
1485 		case FILE_LEQUAD:
1486 		case FILE_QDATE:
1487 		case FILE_QLDATE:
1488 		case FILE_QWDATE:
1489 		case FILE_BEQDATE:
1490 		case FILE_BEQLDATE:
1491 		case FILE_BEQWDATE:
1492 		case FILE_LEQDATE:
1493 		case FILE_LEQLDATE:
1494 		case FILE_LEQWDATE:
1495 		case FILE_DOUBLE:
1496 		case FILE_BEDOUBLE:
1497 		case FILE_LEDOUBLE:
1498 			v = (int64_t) v;
1499 			break;
1500 		case FILE_STRING:
1501 		case FILE_PSTRING:
1502 		case FILE_BESTRING16:
1503 		case FILE_LESTRING16:
1504 		case FILE_REGEX:
1505 		case FILE_SEARCH:
1506 		case FILE_DEFAULT:
1507 		case FILE_INDIRECT:
1508 		case FILE_NAME:
1509 		case FILE_USE:
1510 		case FILE_CLEAR:
1511 		case FILE_DER:
1512 			break;
1513 		default:
1514 			if (ms->flags & MAGIC_CHECK)
1515 			    file_magwarn(ms, "cannot happen: m->type=%d\n",
1516 				    m->type);
1517 			return ~0U;
1518 		}
1519 	}
1520 	return v;
1521 }
1522 
1523 private int
1524 string_modifier_check(struct magic_set *ms, struct magic *m)
1525 {
1526 	if ((ms->flags & MAGIC_CHECK) == 0)
1527 		return 0;
1528 
1529 	if ((m->type != FILE_REGEX || (m->str_flags & REGEX_LINE_COUNT) == 0) &&
1530 	    (m->type != FILE_PSTRING && (m->str_flags & PSTRING_LEN) != 0)) {
1531 		file_magwarn(ms,
1532 		    "'/BHhLl' modifiers are only allowed for pascal strings\n");
1533 		return -1;
1534 	}
1535 	switch (m->type) {
1536 	case FILE_BESTRING16:
1537 	case FILE_LESTRING16:
1538 		if (m->str_flags != 0) {
1539 			file_magwarn(ms,
1540 			    "no modifiers allowed for 16-bit strings\n");
1541 			return -1;
1542 		}
1543 		break;
1544 	case FILE_STRING:
1545 	case FILE_PSTRING:
1546 		if ((m->str_flags & REGEX_OFFSET_START) != 0) {
1547 			file_magwarn(ms,
1548 			    "'/%c' only allowed on regex and search\n",
1549 			    CHAR_REGEX_OFFSET_START);
1550 			return -1;
1551 		}
1552 		break;
1553 	case FILE_SEARCH:
1554 		if (m->str_range == 0) {
1555 			file_magwarn(ms,
1556 			    "missing range; defaulting to %d\n",
1557                             STRING_DEFAULT_RANGE);
1558 			m->str_range = STRING_DEFAULT_RANGE;
1559 			return -1;
1560 		}
1561 		break;
1562 	case FILE_REGEX:
1563 		if ((m->str_flags & STRING_COMPACT_WHITESPACE) != 0) {
1564 			file_magwarn(ms, "'/%c' not allowed on regex\n",
1565 			    CHAR_COMPACT_WHITESPACE);
1566 			return -1;
1567 		}
1568 		if ((m->str_flags & STRING_COMPACT_OPTIONAL_WHITESPACE) != 0) {
1569 			file_magwarn(ms, "'/%c' not allowed on regex\n",
1570 			    CHAR_COMPACT_OPTIONAL_WHITESPACE);
1571 			return -1;
1572 		}
1573 		break;
1574 	default:
1575 		file_magwarn(ms, "coding error: m->type=%d\n",
1576 		    m->type);
1577 		return -1;
1578 	}
1579 	return 0;
1580 }
1581 
1582 private int
1583 get_op(char c)
1584 {
1585 	switch (c) {
1586 	case '&':
1587 		return FILE_OPAND;
1588 	case '|':
1589 		return FILE_OPOR;
1590 	case '^':
1591 		return FILE_OPXOR;
1592 	case '+':
1593 		return FILE_OPADD;
1594 	case '-':
1595 		return FILE_OPMINUS;
1596 	case '*':
1597 		return FILE_OPMULTIPLY;
1598 	case '/':
1599 		return FILE_OPDIVIDE;
1600 	case '%':
1601 		return FILE_OPMODULO;
1602 	default:
1603 		return -1;
1604 	}
1605 }
1606 
1607 #ifdef ENABLE_CONDITIONALS
1608 private int
1609 get_cond(const char *l, const char **t)
1610 {
1611 	static const struct cond_tbl_s {
1612 		char name[8];
1613 		size_t len;
1614 		int cond;
1615 	} cond_tbl[] = {
1616 		{ "if",		2,	COND_IF },
1617 		{ "elif",	4,	COND_ELIF },
1618 		{ "else",	4,	COND_ELSE },
1619 		{ "",		0,	COND_NONE },
1620 	};
1621 	const struct cond_tbl_s *p;
1622 
1623 	for (p = cond_tbl; p->len; p++) {
1624 		if (strncmp(l, p->name, p->len) == 0 &&
1625 		    isspace((unsigned char)l[p->len])) {
1626 			if (t)
1627 				*t = l + p->len;
1628 			break;
1629 		}
1630 	}
1631 	return p->cond;
1632 }
1633 
1634 private int
1635 check_cond(struct magic_set *ms, int cond, uint32_t cont_level)
1636 {
1637 	int last_cond;
1638 	last_cond = ms->c.li[cont_level].last_cond;
1639 
1640 	switch (cond) {
1641 	case COND_IF:
1642 		if (last_cond != COND_NONE && last_cond != COND_ELIF) {
1643 			if (ms->flags & MAGIC_CHECK)
1644 				file_magwarn(ms, "syntax error: `if'");
1645 			return -1;
1646 		}
1647 		last_cond = COND_IF;
1648 		break;
1649 
1650 	case COND_ELIF:
1651 		if (last_cond != COND_IF && last_cond != COND_ELIF) {
1652 			if (ms->flags & MAGIC_CHECK)
1653 				file_magwarn(ms, "syntax error: `elif'");
1654 			return -1;
1655 		}
1656 		last_cond = COND_ELIF;
1657 		break;
1658 
1659 	case COND_ELSE:
1660 		if (last_cond != COND_IF && last_cond != COND_ELIF) {
1661 			if (ms->flags & MAGIC_CHECK)
1662 				file_magwarn(ms, "syntax error: `else'");
1663 			return -1;
1664 		}
1665 		last_cond = COND_NONE;
1666 		break;
1667 
1668 	case COND_NONE:
1669 		last_cond = COND_NONE;
1670 		break;
1671 	}
1672 
1673 	ms->c.li[cont_level].last_cond = last_cond;
1674 	return 0;
1675 }
1676 #endif /* ENABLE_CONDITIONALS */
1677 
1678 private int
1679 parse_indirect_modifier(struct magic_set *ms, struct magic *m, const char **lp)
1680 {
1681 	const char *l = *lp;
1682 
1683 	while (!isspace((unsigned char)*++l))
1684 		switch (*l) {
1685 		case CHAR_INDIRECT_RELATIVE:
1686 			m->str_flags |= INDIRECT_RELATIVE;
1687 			break;
1688 		default:
1689 			if (ms->flags & MAGIC_CHECK)
1690 				file_magwarn(ms, "indirect modifier `%c' "
1691 					"invalid", *l);
1692 			*lp = l;
1693 			return -1;
1694 		}
1695 	*lp = l;
1696 	return 0;
1697 }
1698 
1699 private void
1700 parse_op_modifier(struct magic_set *ms, struct magic *m, const char **lp,
1701     int op)
1702 {
1703 	const char *l = *lp;
1704 	char *t;
1705 	uint64_t val;
1706 
1707 	++l;
1708 	m->mask_op |= op;
1709 	val = (uint64_t)strtoull(l, &t, 0);
1710 	l = t;
1711 	m->num_mask = file_signextend(ms, m, val);
1712 	eatsize(&l);
1713 	*lp = l;
1714 }
1715 
1716 private int
1717 parse_string_modifier(struct magic_set *ms, struct magic *m, const char **lp)
1718 {
1719 	const char *l = *lp;
1720 	char *t;
1721 	int have_range = 0;
1722 
1723 	while (!isspace((unsigned char)*++l)) {
1724 		switch (*l) {
1725 		case '0':  case '1':  case '2':
1726 		case '3':  case '4':  case '5':
1727 		case '6':  case '7':  case '8':
1728 		case '9':
1729 			if (have_range && (ms->flags & MAGIC_CHECK))
1730 				file_magwarn(ms, "multiple ranges");
1731 			have_range = 1;
1732 			m->str_range = CAST(uint32_t, strtoul(l, &t, 0));
1733 			if (m->str_range == 0)
1734 				file_magwarn(ms, "zero range");
1735 			l = t - 1;
1736 			break;
1737 		case CHAR_COMPACT_WHITESPACE:
1738 			m->str_flags |= STRING_COMPACT_WHITESPACE;
1739 			break;
1740 		case CHAR_COMPACT_OPTIONAL_WHITESPACE:
1741 			m->str_flags |= STRING_COMPACT_OPTIONAL_WHITESPACE;
1742 			break;
1743 		case CHAR_IGNORE_LOWERCASE:
1744 			m->str_flags |= STRING_IGNORE_LOWERCASE;
1745 			break;
1746 		case CHAR_IGNORE_UPPERCASE:
1747 			m->str_flags |= STRING_IGNORE_UPPERCASE;
1748 			break;
1749 		case CHAR_REGEX_OFFSET_START:
1750 			m->str_flags |= REGEX_OFFSET_START;
1751 			break;
1752 		case CHAR_BINTEST:
1753 			m->str_flags |= STRING_BINTEST;
1754 			break;
1755 		case CHAR_TEXTTEST:
1756 			m->str_flags |= STRING_TEXTTEST;
1757 			break;
1758 		case CHAR_TRIM:
1759 			m->str_flags |= STRING_TRIM;
1760 			break;
1761 		case CHAR_PSTRING_1_LE:
1762 #define SET_LENGTH(a) m->str_flags = (m->str_flags & ~PSTRING_LEN) | (a)
1763 			if (m->type != FILE_PSTRING)
1764 				goto bad;
1765 			SET_LENGTH(PSTRING_1_LE);
1766 			break;
1767 		case CHAR_PSTRING_2_BE:
1768 			if (m->type != FILE_PSTRING)
1769 				goto bad;
1770 			SET_LENGTH(PSTRING_2_BE);
1771 			break;
1772 		case CHAR_PSTRING_2_LE:
1773 			if (m->type != FILE_PSTRING)
1774 				goto bad;
1775 			SET_LENGTH(PSTRING_2_LE);
1776 			break;
1777 		case CHAR_PSTRING_4_BE:
1778 			if (m->type != FILE_PSTRING)
1779 				goto bad;
1780 			SET_LENGTH(PSTRING_4_BE);
1781 			break;
1782 		case CHAR_PSTRING_4_LE:
1783 			switch (m->type) {
1784 			case FILE_PSTRING:
1785 			case FILE_REGEX:
1786 				break;
1787 			default:
1788 				goto bad;
1789 			}
1790 			SET_LENGTH(PSTRING_4_LE);
1791 			break;
1792 		case CHAR_PSTRING_LENGTH_INCLUDES_ITSELF:
1793 			if (m->type != FILE_PSTRING)
1794 				goto bad;
1795 			m->str_flags |= PSTRING_LENGTH_INCLUDES_ITSELF;
1796 			break;
1797 		default:
1798 		bad:
1799 			if (ms->flags & MAGIC_CHECK)
1800 				file_magwarn(ms, "string modifier `%c' "
1801 					"invalid", *l);
1802 			goto out;
1803 		}
1804 		/* allow multiple '/' for readability */
1805 		if (l[1] == '/' && !isspace((unsigned char)l[2]))
1806 			l++;
1807 	}
1808 	if (string_modifier_check(ms, m) == -1)
1809 		goto out;
1810 	*lp = l;
1811 	return 0;
1812 out:
1813 	*lp = l;
1814 	return -1;
1815 }
1816 
1817 /*
1818  * parse one line from magic file, put into magic[index++] if valid
1819  */
1820 private int
1821 parse(struct magic_set *ms, struct magic_entry *me, const char *line,
1822     size_t lineno, int action)
1823 {
1824 #ifdef ENABLE_CONDITIONALS
1825 	static uint32_t last_cont_level = 0;
1826 #endif
1827 	size_t i;
1828 	struct magic *m;
1829 	const char *l = line;
1830 	char *t;
1831 	int op;
1832 	uint32_t cont_level;
1833 	int32_t diff;
1834 
1835 	cont_level = 0;
1836 
1837 	/*
1838 	 * Parse the offset.
1839 	 */
1840 	while (*l == '>') {
1841 		++l;		/* step over */
1842 		cont_level++;
1843 	}
1844 #ifdef ENABLE_CONDITIONALS
1845 	if (cont_level == 0 || cont_level > last_cont_level)
1846 		if (file_check_mem(ms, cont_level) == -1)
1847 			return -1;
1848 	last_cont_level = cont_level;
1849 #endif
1850 	if (cont_level != 0) {
1851 		if (me->mp == NULL) {
1852 			file_magerror(ms, "No current entry for continuation");
1853 			return -1;
1854 		}
1855 		if (me->cont_count == 0) {
1856 			file_magerror(ms, "Continuations present with 0 count");
1857 			return -1;
1858 		}
1859 		m = &me->mp[me->cont_count - 1];
1860 		diff = (int32_t)cont_level - (int32_t)m->cont_level;
1861 		if (diff > 1)
1862 			file_magwarn(ms, "New continuation level %u is more "
1863 			    "than one larger than current level %u", cont_level,
1864 			    m->cont_level);
1865 		if (me->cont_count == me->max_count) {
1866 			struct magic *nm;
1867 			size_t cnt = me->max_count + ALLOC_CHUNK;
1868 			if ((nm = CAST(struct magic *, realloc(me->mp,
1869 			    sizeof(*nm) * cnt))) == NULL) {
1870 				file_oomem(ms, sizeof(*nm) * cnt);
1871 				return -1;
1872 			}
1873 			me->mp = m = nm;
1874 			me->max_count = CAST(uint32_t, cnt);
1875 		}
1876 		m = &me->mp[me->cont_count++];
1877 		(void)memset(m, 0, sizeof(*m));
1878 		m->cont_level = cont_level;
1879 	} else {
1880 		static const size_t len = sizeof(*m) * ALLOC_CHUNK;
1881 		if (me->mp != NULL)
1882 			return 1;
1883 		if ((m = CAST(struct magic *, malloc(len))) == NULL) {
1884 			file_oomem(ms, len);
1885 			return -1;
1886 		}
1887 		me->mp = m;
1888 		me->max_count = ALLOC_CHUNK;
1889 		(void)memset(m, 0, sizeof(*m));
1890 		m->factor_op = FILE_FACTOR_OP_NONE;
1891 		m->cont_level = 0;
1892 		me->cont_count = 1;
1893 	}
1894 	m->lineno = CAST(uint32_t, lineno);
1895 
1896 	if (*l == '&') {  /* m->cont_level == 0 checked below. */
1897                 ++l;            /* step over */
1898                 m->flag |= OFFADD;
1899         }
1900 	if (*l == '(') {
1901 		++l;		/* step over */
1902 		m->flag |= INDIR;
1903 		if (m->flag & OFFADD)
1904 			m->flag = (m->flag & ~OFFADD) | INDIROFFADD;
1905 
1906 		if (*l == '&') {  /* m->cont_level == 0 checked below */
1907 			++l;            /* step over */
1908 			m->flag |= OFFADD;
1909 		}
1910 	}
1911 	/* Indirect offsets are not valid at level 0. */
1912 	if (m->cont_level == 0 && (m->flag & (OFFADD | INDIROFFADD))) {
1913 		if (ms->flags & MAGIC_CHECK)
1914 			file_magwarn(ms, "relative offset at level 0");
1915 		return -1;
1916 	}
1917 
1918 	/* get offset, then skip over it */
1919 	m->offset = (uint32_t)strtoul(l, &t, 0);
1920         if (l == t) {
1921 		if (ms->flags & MAGIC_CHECK)
1922 			file_magwarn(ms, "offset `%s' invalid", l);
1923 		return -1;
1924 	}
1925         l = t;
1926 
1927 	if (m->flag & INDIR) {
1928 		m->in_type = FILE_LONG;
1929 		m->in_offset = 0;
1930 		m->in_op = 0;
1931 		/*
1932 		 * read [.,lbs][+-]nnnnn)
1933 		 */
1934 		if (*l == '.' || *l == ',') {
1935 			if (*l == ',')
1936 				m->in_op |= FILE_OPSIGNED;
1937 			l++;
1938 			switch (*l) {
1939 			case 'l':
1940 				m->in_type = FILE_LELONG;
1941 				break;
1942 			case 'L':
1943 				m->in_type = FILE_BELONG;
1944 				break;
1945 			case 'm':
1946 				m->in_type = FILE_MELONG;
1947 				break;
1948 			case 'h':
1949 			case 's':
1950 				m->in_type = FILE_LESHORT;
1951 				break;
1952 			case 'H':
1953 			case 'S':
1954 				m->in_type = FILE_BESHORT;
1955 				break;
1956 			case 'c':
1957 			case 'b':
1958 			case 'C':
1959 			case 'B':
1960 				m->in_type = FILE_BYTE;
1961 				break;
1962 			case 'e':
1963 			case 'f':
1964 			case 'g':
1965 				m->in_type = FILE_LEDOUBLE;
1966 				break;
1967 			case 'E':
1968 			case 'F':
1969 			case 'G':
1970 				m->in_type = FILE_BEDOUBLE;
1971 				break;
1972 			case 'i':
1973 				m->in_type = FILE_LEID3;
1974 				break;
1975 			case 'I':
1976 				m->in_type = FILE_BEID3;
1977 				break;
1978 			default:
1979 				if (ms->flags & MAGIC_CHECK)
1980 					file_magwarn(ms,
1981 					    "indirect offset type `%c' invalid",
1982 					    *l);
1983 				return -1;
1984 			}
1985 			l++;
1986 		}
1987 
1988 		if (*l == '~') {
1989 			m->in_op |= FILE_OPINVERSE;
1990 			l++;
1991 		}
1992 		if ((op = get_op(*l)) != -1) {
1993 			m->in_op |= op;
1994 			l++;
1995 		}
1996 		if (*l == '(') {
1997 			m->in_op |= FILE_OPINDIRECT;
1998 			l++;
1999 		}
2000 		if (isdigit((unsigned char)*l) || *l == '-') {
2001 			m->in_offset = (int32_t)strtol(l, &t, 0);
2002 			if (l == t) {
2003 				if (ms->flags & MAGIC_CHECK)
2004 					file_magwarn(ms,
2005 					    "in_offset `%s' invalid", l);
2006 				return -1;
2007 			}
2008 			l = t;
2009 		}
2010 		if (*l++ != ')' ||
2011 		    ((m->in_op & FILE_OPINDIRECT) && *l++ != ')')) {
2012 			if (ms->flags & MAGIC_CHECK)
2013 				file_magwarn(ms,
2014 				    "missing ')' in indirect offset");
2015 			return -1;
2016 		}
2017 	}
2018 	EATAB;
2019 
2020 #ifdef ENABLE_CONDITIONALS
2021 	m->cond = get_cond(l, &l);
2022 	if (check_cond(ms, m->cond, cont_level) == -1)
2023 		return -1;
2024 
2025 	EATAB;
2026 #endif
2027 
2028 	/*
2029 	 * Parse the type.
2030 	 */
2031 	if (*l == 'u') {
2032 		/*
2033 		 * Try it as a keyword type prefixed by "u"; match what
2034 		 * follows the "u".  If that fails, try it as an SUS
2035 		 * integer type.
2036 		 */
2037 		m->type = get_type(type_tbl, l + 1, &l);
2038 		if (m->type == FILE_INVALID) {
2039 			/*
2040 			 * Not a keyword type; parse it as an SUS type,
2041 			 * 'u' possibly followed by a number or C/S/L.
2042 			 */
2043 			m->type = get_standard_integer_type(l, &l);
2044 		}
2045 		/* It's unsigned. */
2046 		if (m->type != FILE_INVALID)
2047 			m->flag |= UNSIGNED;
2048 	} else {
2049 		/*
2050 		 * Try it as a keyword type.  If that fails, try it as
2051 		 * an SUS integer type if it begins with "d" or as an
2052 		 * SUS string type if it begins with "s".  In any case,
2053 		 * it's not unsigned.
2054 		 */
2055 		m->type = get_type(type_tbl, l, &l);
2056 		if (m->type == FILE_INVALID) {
2057 			/*
2058 			 * Not a keyword type; parse it as an SUS type,
2059 			 * either 'd' possibly followed by a number or
2060 			 * C/S/L, or just 's'.
2061 			 */
2062 			if (*l == 'd')
2063 				m->type = get_standard_integer_type(l, &l);
2064 			else if (*l == 's' && !isalpha((unsigned char)l[1])) {
2065 				m->type = FILE_STRING;
2066 				++l;
2067 			}
2068 		}
2069 	}
2070 
2071 	if (m->type == FILE_INVALID) {
2072 		/* Not found - try it as a special keyword. */
2073 		m->type = get_type(special_tbl, l, &l);
2074 	}
2075 
2076 	if (m->type == FILE_INVALID) {
2077 		if (ms->flags & MAGIC_CHECK)
2078 			file_magwarn(ms, "type `%s' invalid", l);
2079 		return -1;
2080 	}
2081 
2082 	/* New-style anding: "0 byte&0x80 =0x80 dynamically linked" */
2083 	/* New and improved: ~ & | ^ + - * / % -- exciting, isn't it? */
2084 
2085 	m->mask_op = 0;
2086 	if (*l == '~') {
2087 		if (!IS_STRING(m->type))
2088 			m->mask_op |= FILE_OPINVERSE;
2089 		else if (ms->flags & MAGIC_CHECK)
2090 			file_magwarn(ms, "'~' invalid for string types");
2091 		++l;
2092 	}
2093 	m->str_range = 0;
2094 	m->str_flags = m->type == FILE_PSTRING ? PSTRING_1_LE : 0;
2095 	if ((op = get_op(*l)) != -1) {
2096 		if (IS_STRING(m->type)) {
2097 			int r;
2098 
2099 			if (op != FILE_OPDIVIDE) {
2100 				if (ms->flags & MAGIC_CHECK)
2101 					file_magwarn(ms,
2102 					    "invalid string/indirect op: "
2103 					    "`%c'", *t);
2104 				return -1;
2105 			}
2106 
2107 			if (m->type == FILE_INDIRECT)
2108 				r = parse_indirect_modifier(ms, m, &l);
2109 			else
2110 				r = parse_string_modifier(ms, m, &l);
2111 			if (r == -1)
2112 				return -1;
2113 		} else
2114 			parse_op_modifier(ms, m, &l, op);
2115 	}
2116 
2117 	/*
2118 	 * We used to set mask to all 1's here, instead let's just not do
2119 	 * anything if mask = 0 (unless you have a better idea)
2120 	 */
2121 	EATAB;
2122 
2123 	switch (*l) {
2124 	case '>':
2125 	case '<':
2126   		m->reln = *l;
2127   		++l;
2128 		if (*l == '=') {
2129 			if (ms->flags & MAGIC_CHECK) {
2130 				file_magwarn(ms, "%c= not supported",
2131 				    m->reln);
2132 				return -1;
2133 			}
2134 		   ++l;
2135 		}
2136 		break;
2137 	/* Old-style anding: "0 byte &0x80 dynamically linked" */
2138 	case '&':
2139 	case '^':
2140 	case '=':
2141   		m->reln = *l;
2142   		++l;
2143 		if (*l == '=') {
2144 		   /* HP compat: ignore &= etc. */
2145 		   ++l;
2146 		}
2147 		break;
2148 	case '!':
2149 		m->reln = *l;
2150 		++l;
2151 		break;
2152 	default:
2153   		m->reln = '=';	/* the default relation */
2154 		if (*l == 'x' && ((isascii((unsigned char)l[1]) &&
2155 		    isspace((unsigned char)l[1])) || !l[1])) {
2156 			m->reln = *l;
2157 			++l;
2158 		}
2159 		break;
2160 	}
2161 	/*
2162 	 * Grab the value part, except for an 'x' reln.
2163 	 */
2164 	if (m->reln != 'x' && getvalue(ms, m, &l, action))
2165 		return -1;
2166 
2167 	/*
2168 	 * TODO finish this macro and start using it!
2169 	 * #define offsetcheck {if (offset > ms->bytes_max -1)
2170 	 *	magwarn("offset too big"); }
2171 	 */
2172 
2173 	/*
2174 	 * Now get last part - the description
2175 	 */
2176 	EATAB;
2177 	if (l[0] == '\b') {
2178 		++l;
2179 		m->flag |= NOSPACE;
2180 	} else if ((l[0] == '\\') && (l[1] == 'b')) {
2181 		++l;
2182 		++l;
2183 		m->flag |= NOSPACE;
2184 	}
2185 	for (i = 0; (m->desc[i++] = *l++) != '\0' && i < sizeof(m->desc); )
2186 		continue;
2187 	if (i == sizeof(m->desc)) {
2188 		m->desc[sizeof(m->desc) - 1] = '\0';
2189 		if (ms->flags & MAGIC_CHECK)
2190 			file_magwarn(ms, "description `%s' truncated", m->desc);
2191 	}
2192 
2193         /*
2194 	 * We only do this check while compiling, or if any of the magic
2195 	 * files were not compiled.
2196          */
2197         if (ms->flags & MAGIC_CHECK) {
2198 		if (check_format(ms, m) == -1)
2199 			return -1;
2200 	}
2201 #ifndef COMPILE_ONLY
2202 	if (action == FILE_CHECK) {
2203 		file_mdump(m);
2204 	}
2205 #endif
2206 	m->mimetype[0] = '\0';		/* initialise MIME type to none */
2207 	return 0;
2208 }
2209 
2210 /*
2211  * parse a STRENGTH annotation line from magic file, put into magic[index - 1]
2212  * if valid
2213  */
2214 private int
2215 parse_strength(struct magic_set *ms, struct magic_entry *me, const char *line)
2216 {
2217 	const char *l = line;
2218 	char *el;
2219 	unsigned long factor;
2220 	struct magic *m = &me->mp[0];
2221 
2222 	if (m->factor_op != FILE_FACTOR_OP_NONE) {
2223 		file_magwarn(ms,
2224 		    "Current entry already has a strength type: %c %d",
2225 		    m->factor_op, m->factor);
2226 		return -1;
2227 	}
2228 	if (m->type == FILE_NAME) {
2229 		file_magwarn(ms, "%s: Strength setting is not supported in "
2230 		    "\"name\" magic entries", m->value.s);
2231 		return -1;
2232 	}
2233 	EATAB;
2234 	switch (*l) {
2235 	case FILE_FACTOR_OP_NONE:
2236 	case FILE_FACTOR_OP_PLUS:
2237 	case FILE_FACTOR_OP_MINUS:
2238 	case FILE_FACTOR_OP_TIMES:
2239 	case FILE_FACTOR_OP_DIV:
2240 		m->factor_op = *l++;
2241 		break;
2242 	default:
2243 		file_magwarn(ms, "Unknown factor op `%c'", *l);
2244 		return -1;
2245 	}
2246 	EATAB;
2247 	factor = strtoul(l, &el, 0);
2248 	if (factor > 255) {
2249 		file_magwarn(ms, "Too large factor `%lu'", factor);
2250 		goto out;
2251 	}
2252 	if (*el && !isspace((unsigned char)*el)) {
2253 		file_magwarn(ms, "Bad factor `%s'", l);
2254 		goto out;
2255 	}
2256 	m->factor = (uint8_t)factor;
2257 	if (m->factor == 0 && m->factor_op == FILE_FACTOR_OP_DIV) {
2258 		file_magwarn(ms, "Cannot have factor op `%c' and factor %u",
2259 		    m->factor_op, m->factor);
2260 		goto out;
2261 	}
2262 	return 0;
2263 out:
2264 	m->factor_op = FILE_FACTOR_OP_NONE;
2265 	m->factor = 0;
2266 	return -1;
2267 }
2268 
2269 private int
2270 goodchar(unsigned char x, const char *extra)
2271 {
2272 	return (isascii(x) && isalnum(x)) || strchr(extra, x);
2273 }
2274 
2275 private int
2276 parse_extra(struct magic_set *ms, struct magic_entry *me, const char *line,
2277     off_t off, size_t len, const char *name, const char *extra, int nt)
2278 {
2279 	size_t i;
2280 	const char *l = line;
2281 	struct magic *m = &me->mp[me->cont_count == 0 ? 0 : me->cont_count - 1];
2282 	char *buf = CAST(char *, CAST(void *, m)) + off;
2283 
2284 	if (buf[0] != '\0') {
2285 		len = nt ? strlen(buf) : len;
2286 		file_magwarn(ms, "Current entry already has a %s type "
2287 		    "`%.*s', new type `%s'", name, (int)len, buf, l);
2288 		return -1;
2289 	}
2290 
2291 	if (*m->desc == '\0') {
2292 		file_magwarn(ms, "Current entry does not yet have a "
2293 		    "description for adding a %s type", name);
2294 		return -1;
2295 	}
2296 
2297 	EATAB;
2298 	for (i = 0; *l && i < len && goodchar(*l, extra); buf[i++] = *l++)
2299 		continue;
2300 
2301 	if (i == len && *l) {
2302 		if (nt)
2303 			buf[len - 1] = '\0';
2304 		if (ms->flags & MAGIC_CHECK)
2305 			file_magwarn(ms, "%s type `%s' truncated %"
2306 			    SIZE_T_FORMAT "u", name, line, i);
2307 	} else {
2308 		if (!isspace((unsigned char)*l) && !goodchar(*l, extra))
2309 			file_magwarn(ms, "%s type `%s' has bad char '%c'",
2310 			    name, line, *l);
2311 		if (nt)
2312 			buf[i] = '\0';
2313 	}
2314 
2315 	if (i > 0)
2316 		return 0;
2317 
2318 	file_magerror(ms, "Bad magic entry '%s'", line);
2319 	return -1;
2320 }
2321 
2322 /*
2323  * Parse an Apple CREATOR/TYPE annotation from magic file and put it into
2324  * magic[index - 1]
2325  */
2326 private int
2327 parse_apple(struct magic_set *ms, struct magic_entry *me, const char *line)
2328 {
2329 	struct magic *m = &me->mp[0];
2330 
2331 	return parse_extra(ms, me, line,
2332 	    CAST(off_t, offsetof(struct magic, apple)),
2333 	    sizeof(m->apple), "APPLE", "!+-./?", 0);
2334 }
2335 
2336 /*
2337  * Parse a comma-separated list of extensions
2338  */
2339 private int
2340 parse_ext(struct magic_set *ms, struct magic_entry *me, const char *line)
2341 {
2342 	struct magic *m = &me->mp[0];
2343 
2344 	return parse_extra(ms, me, line,
2345 	    CAST(off_t, offsetof(struct magic, ext)),
2346 	    sizeof(m->ext), "EXTENSION", ",!+-/@", 0);
2347 }
2348 
2349 /*
2350  * parse a MIME annotation line from magic file, put into magic[index - 1]
2351  * if valid
2352  */
2353 private int
2354 parse_mime(struct magic_set *ms, struct magic_entry *me, const char *line)
2355 {
2356 	struct magic *m = &me->mp[0];
2357 
2358 	return parse_extra(ms, me, line,
2359 	    CAST(off_t, offsetof(struct magic, mimetype)),
2360 	    sizeof(m->mimetype), "MIME", "+-/.", 1);
2361 }
2362 
2363 private int
2364 check_format_type(const char *ptr, int type, const char **estr)
2365 {
2366 	int quad = 0, h;
2367 	size_t len, cnt;
2368 	if (*ptr == '\0') {
2369 		/* Missing format string; bad */
2370 		*estr = "missing format spec";
2371 		return -1;
2372 	}
2373 
2374 	switch (file_formats[type]) {
2375 	case FILE_FMT_QUAD:
2376 		quad = 1;
2377 		/*FALLTHROUGH*/
2378 	case FILE_FMT_NUM:
2379 		if (quad == 0) {
2380 			switch (type) {
2381 			case FILE_BYTE:
2382 				h = 2;
2383 				break;
2384 			case FILE_SHORT:
2385 			case FILE_BESHORT:
2386 			case FILE_LESHORT:
2387 				h = 1;
2388 				break;
2389 			case FILE_LONG:
2390 			case FILE_BELONG:
2391 			case FILE_LELONG:
2392 			case FILE_MELONG:
2393 			case FILE_LEID3:
2394 			case FILE_BEID3:
2395 			case FILE_INDIRECT:
2396 				h = 0;
2397 				break;
2398 			default:
2399 				abort();
2400 			}
2401 		} else
2402 			h = 0;
2403 		if (*ptr == '-')
2404 			ptr++;
2405 		if (*ptr == '.')
2406 			ptr++;
2407 		if (*ptr == '#')
2408 			ptr++;
2409 #define CHECKLEN() do { \
2410 	for (len = cnt = 0; isdigit((unsigned char)*ptr); ptr++, cnt++) \
2411 		len = len * 10 + (*ptr - '0'); \
2412 	if (cnt > 5 || len > 1024) \
2413 		goto toolong; \
2414 } while (/*CONSTCOND*/0)
2415 
2416 		CHECKLEN();
2417 		if (*ptr == '.')
2418 			ptr++;
2419 		CHECKLEN();
2420 		if (quad) {
2421 			if (*ptr++ != 'l')
2422 				goto invalid;
2423 			if (*ptr++ != 'l')
2424 				goto invalid;
2425 		}
2426 
2427 		switch (*ptr++) {
2428 #ifdef STRICT_FORMAT 	/* "long" formats are int formats for us */
2429 		/* so don't accept the 'l' modifier */
2430 		case 'l':
2431 			switch (*ptr++) {
2432 			case 'i':
2433 			case 'd':
2434 			case 'u':
2435 			case 'o':
2436 			case 'x':
2437 			case 'X':
2438 				if (h == 0)
2439 					return 0;
2440 				/*FALLTHROUGH*/
2441 			default:
2442 				goto invalid;
2443 			}
2444 
2445 		/*
2446 		 * Don't accept h and hh modifiers. They make writing
2447 		 * magic entries more complicated, for very little benefit
2448 		 */
2449 		case 'h':
2450 			if (h-- <= 0)
2451 				goto invalid;
2452 			switch (*ptr++) {
2453 			case 'h':
2454 				if (h-- <= 0)
2455 					goto invalid;
2456 				switch (*ptr++) {
2457 				case 'i':
2458 				case 'd':
2459 				case 'u':
2460 				case 'o':
2461 				case 'x':
2462 				case 'X':
2463 					return 0;
2464 				default:
2465 					goto invalid;
2466 				}
2467 			case 'i':
2468 			case 'd':
2469 			case 'u':
2470 			case 'o':
2471 			case 'x':
2472 			case 'X':
2473 				if (h == 0)
2474 					return 0;
2475 				/*FALLTHROUGH*/
2476 			default:
2477 				goto invalid;
2478 			}
2479 #endif
2480 		case 'c':
2481 			if (h == 2)
2482 				return 0;
2483 			goto invalid;
2484 		case 'i':
2485 		case 'd':
2486 		case 'u':
2487 		case 'o':
2488 		case 'x':
2489 		case 'X':
2490 #ifdef STRICT_FORMAT
2491 			if (h == 0)
2492 				return 0;
2493 			/*FALLTHROUGH*/
2494 #else
2495 			return 0;
2496 #endif
2497 		default:
2498 			goto invalid;
2499 		}
2500 
2501 	case FILE_FMT_FLOAT:
2502 	case FILE_FMT_DOUBLE:
2503 		if (*ptr == '-')
2504 			ptr++;
2505 		if (*ptr == '.')
2506 			ptr++;
2507 		CHECKLEN();
2508 		if (*ptr == '.')
2509 			ptr++;
2510 		CHECKLEN();
2511 		switch (*ptr++) {
2512 		case 'e':
2513 		case 'E':
2514 		case 'f':
2515 		case 'F':
2516 		case 'g':
2517 		case 'G':
2518 			return 0;
2519 
2520 		default:
2521 			goto invalid;
2522 		}
2523 
2524 
2525 	case FILE_FMT_STR:
2526 		if (*ptr == '-')
2527 			ptr++;
2528 		while (isdigit((unsigned char )*ptr))
2529 			ptr++;
2530 		if (*ptr == '.') {
2531 			ptr++;
2532 			while (isdigit((unsigned char )*ptr))
2533 				ptr++;
2534 		}
2535 
2536 		switch (*ptr++) {
2537 		case 's':
2538 			return 0;
2539 		default:
2540 			goto invalid;
2541 		}
2542 
2543 	default:
2544 		/* internal error */
2545 		abort();
2546 	}
2547 invalid:
2548 	*estr = "not valid";
2549 toolong:
2550 	*estr = "too long";
2551 	return -1;
2552 }
2553 
2554 /*
2555  * Check that the optional printf format in description matches
2556  * the type of the magic.
2557  */
2558 private int
2559 check_format(struct magic_set *ms, struct magic *m)
2560 {
2561 	char *ptr;
2562 	const char *estr;
2563 
2564 	for (ptr = m->desc; *ptr; ptr++)
2565 		if (*ptr == '%')
2566 			break;
2567 	if (*ptr == '\0') {
2568 		/* No format string; ok */
2569 		return 1;
2570 	}
2571 
2572 	assert(file_nformats == file_nnames);
2573 
2574 	if (m->type >= file_nformats) {
2575 		file_magwarn(ms, "Internal error inconsistency between "
2576 		    "m->type and format strings");
2577 		return -1;
2578 	}
2579 	if (file_formats[m->type] == FILE_FMT_NONE) {
2580 		file_magwarn(ms, "No format string for `%s' with description "
2581 		    "`%s'", m->desc, file_names[m->type]);
2582 		return -1;
2583 	}
2584 
2585 	ptr++;
2586 	if (check_format_type(ptr, m->type, &estr) == -1) {
2587 		/*
2588 		 * TODO: this error message is unhelpful if the format
2589 		 * string is not one character long
2590 		 */
2591 		file_magwarn(ms, "Printf format is %s for type "
2592 		    "`%s' in description `%s'", estr,
2593 		    file_names[m->type], m->desc);
2594 		return -1;
2595 	}
2596 
2597 	for (; *ptr; ptr++) {
2598 		if (*ptr == '%') {
2599 			file_magwarn(ms,
2600 			    "Too many format strings (should have at most one) "
2601 			    "for `%s' with description `%s'",
2602 			    file_names[m->type], m->desc);
2603 			return -1;
2604 		}
2605 	}
2606 	return 0;
2607 }
2608 
2609 /*
2610  * Read a numeric value from a pointer, into the value union of a magic
2611  * pointer, according to the magic type.  Update the string pointer to point
2612  * just after the number read.  Return 0 for success, non-zero for failure.
2613  */
2614 private int
2615 getvalue(struct magic_set *ms, struct magic *m, const char **p, int action)
2616 {
2617 	char *ep;
2618 	uint64_t ull;
2619 
2620 	switch (m->type) {
2621 	case FILE_BESTRING16:
2622 	case FILE_LESTRING16:
2623 	case FILE_STRING:
2624 	case FILE_PSTRING:
2625 	case FILE_REGEX:
2626 	case FILE_SEARCH:
2627 	case FILE_NAME:
2628 	case FILE_USE:
2629 	case FILE_DER:
2630 		*p = getstr(ms, m, *p, action == FILE_COMPILE);
2631 		if (*p == NULL) {
2632 			if (ms->flags & MAGIC_CHECK)
2633 				file_magwarn(ms, "cannot get string from `%s'",
2634 				    m->value.s);
2635 			return -1;
2636 		}
2637 		if (m->type == FILE_REGEX) {
2638 			file_regex_t rx;
2639 			int rc = file_regcomp(&rx, m->value.s, REG_EXTENDED);
2640 			if (rc) {
2641 				if (ms->flags & MAGIC_CHECK)
2642 					file_regerror(&rx, rc, ms);
2643 			}
2644 			file_regfree(&rx);
2645 			return rc ? -1 : 0;
2646 		}
2647 		return 0;
2648 	default:
2649 		if (m->reln == 'x')
2650 			return 0;
2651 		break;
2652 	}
2653 
2654 	switch (m->type) {
2655 	case FILE_FLOAT:
2656 	case FILE_BEFLOAT:
2657 	case FILE_LEFLOAT:
2658 		errno = 0;
2659 #ifdef HAVE_STRTOF
2660 		m->value.f = strtof(*p, &ep);
2661 #else
2662 		m->value.f = (float)strtod(*p, &ep);
2663 #endif
2664 		if (errno == 0)
2665 			*p = ep;
2666 		return 0;
2667 	case FILE_DOUBLE:
2668 	case FILE_BEDOUBLE:
2669 	case FILE_LEDOUBLE:
2670 		errno = 0;
2671 		m->value.d = strtod(*p, &ep);
2672 		if (errno == 0)
2673 			*p = ep;
2674 		return 0;
2675 	default:
2676 		errno = 0;
2677 		ull = (uint64_t)strtoull(*p, &ep, 0);
2678 		m->value.q = file_signextend(ms, m, ull);
2679 		if (*p == ep) {
2680 			file_magwarn(ms, "Unparseable number `%s'", *p);
2681 		} else {
2682 			size_t ts = typesize(m->type);
2683 			uint64_t x;
2684 			const char *q;
2685 
2686 			if (ts == (size_t)~0) {
2687 				file_magwarn(ms,
2688 				    "Expected numeric type got `%s'",
2689 				    type_tbl[m->type].name);
2690 			}
2691 			for (q = *p; isspace((unsigned char)*q); q++)
2692 				continue;
2693 			if (*q == '-')
2694 				ull = -(int64_t)ull;
2695 			switch (ts) {
2696 			case 1:
2697 				x = (uint64_t)(ull & ~0xffULL);
2698 				break;
2699 			case 2:
2700 				x = (uint64_t)(ull & ~0xffffULL);
2701 				break;
2702 			case 4:
2703 				x = (uint64_t)(ull & ~0xffffffffULL);
2704 				break;
2705 			case 8:
2706 				x = 0;
2707 				break;
2708 			default:
2709 				abort();
2710 			}
2711 			if (x) {
2712 				file_magwarn(ms, "Overflow for numeric"
2713 				    " type `%s' value %#" PRIx64,
2714 				    type_tbl[m->type].name, ull);
2715 			}
2716 		}
2717 		if (errno == 0) {
2718 			*p = ep;
2719 			eatsize(p);
2720 		}
2721 		return 0;
2722 	}
2723 }
2724 
2725 /*
2726  * Convert a string containing C character escapes.  Stop at an unescaped
2727  * space or tab.
2728  * Copy the converted version to "m->value.s", and the length in m->vallen.
2729  * Return updated scan pointer as function result. Warn if set.
2730  */
2731 private const char *
2732 getstr(struct magic_set *ms, struct magic *m, const char *s, int warn)
2733 {
2734 	const char *origs = s;
2735 	char	*p = m->value.s;
2736 	size_t  plen = sizeof(m->value.s);
2737 	char 	*origp = p;
2738 	char	*pmax = p + plen - 1;
2739 	int	c;
2740 	int	val;
2741 
2742 	while ((c = *s++) != '\0') {
2743 		if (isspace((unsigned char) c))
2744 			break;
2745 		if (p >= pmax) {
2746 			file_error(ms, 0, "string too long: `%s'", origs);
2747 			return NULL;
2748 		}
2749 		if (c == '\\') {
2750 			switch(c = *s++) {
2751 
2752 			case '\0':
2753 				if (warn)
2754 					file_magwarn(ms, "incomplete escape");
2755 				s--;
2756 				goto out;
2757 
2758 			case '\t':
2759 				if (warn) {
2760 					file_magwarn(ms,
2761 					    "escaped tab found, use \\t instead");
2762 					warn = 0;	/* already did */
2763 				}
2764 				/*FALLTHROUGH*/
2765 			default:
2766 				if (warn) {
2767 					if (isprint((unsigned char)c)) {
2768 						/* Allow escaping of
2769 						 * ``relations'' */
2770 						if (strchr("<>&^=!", c) == NULL
2771 						    && (m->type != FILE_REGEX ||
2772 						    strchr("[]().*?^$|{}", c)
2773 						    == NULL)) {
2774 							file_magwarn(ms, "no "
2775 							    "need to escape "
2776 							    "`%c'", c);
2777 						}
2778 					} else {
2779 						file_magwarn(ms,
2780 						    "unknown escape sequence: "
2781 						    "\\%03o", c);
2782 					}
2783 				}
2784 				/*FALLTHROUGH*/
2785 			/* space, perhaps force people to use \040? */
2786 			case ' ':
2787 #if 0
2788 			/*
2789 			 * Other things people escape, but shouldn't need to,
2790 			 * so we disallow them
2791 			 */
2792 			case '\'':
2793 			case '"':
2794 			case '?':
2795 #endif
2796 			/* Relations */
2797 			case '>':
2798 			case '<':
2799 			case '&':
2800 			case '^':
2801 			case '=':
2802 			case '!':
2803 			/* and baskslash itself */
2804 			case '\\':
2805 				*p++ = (char) c;
2806 				break;
2807 
2808 			case 'a':
2809 				*p++ = '\a';
2810 				break;
2811 
2812 			case 'b':
2813 				*p++ = '\b';
2814 				break;
2815 
2816 			case 'f':
2817 				*p++ = '\f';
2818 				break;
2819 
2820 			case 'n':
2821 				*p++ = '\n';
2822 				break;
2823 
2824 			case 'r':
2825 				*p++ = '\r';
2826 				break;
2827 
2828 			case 't':
2829 				*p++ = '\t';
2830 				break;
2831 
2832 			case 'v':
2833 				*p++ = '\v';
2834 				break;
2835 
2836 			/* \ and up to 3 octal digits */
2837 			case '0':
2838 			case '1':
2839 			case '2':
2840 			case '3':
2841 			case '4':
2842 			case '5':
2843 			case '6':
2844 			case '7':
2845 				val = c - '0';
2846 				c = *s++;  /* try for 2 */
2847 				if (c >= '0' && c <= '7') {
2848 					val = (val << 3) | (c - '0');
2849 					c = *s++;  /* try for 3 */
2850 					if (c >= '0' && c <= '7')
2851 						val = (val << 3) | (c-'0');
2852 					else
2853 						--s;
2854 				}
2855 				else
2856 					--s;
2857 				*p++ = (char)val;
2858 				break;
2859 
2860 			/* \x and up to 2 hex digits */
2861 			case 'x':
2862 				val = 'x';	/* Default if no digits */
2863 				c = hextoint(*s++);	/* Get next char */
2864 				if (c >= 0) {
2865 					val = c;
2866 					c = hextoint(*s++);
2867 					if (c >= 0)
2868 						val = (val << 4) + c;
2869 					else
2870 						--s;
2871 				} else
2872 					--s;
2873 				*p++ = (char)val;
2874 				break;
2875 			}
2876 		} else
2877 			*p++ = (char)c;
2878 	}
2879 	--s;
2880 out:
2881 	*p = '\0';
2882 	m->vallen = CAST(unsigned char, (p - origp));
2883 	if (m->type == FILE_PSTRING)
2884 		m->vallen += (unsigned char)file_pstring_length_size(m);
2885 	return s;
2886 }
2887 
2888 
2889 /* Single hex char to int; -1 if not a hex char. */
2890 private int
2891 hextoint(int c)
2892 {
2893 	if (!isascii((unsigned char) c))
2894 		return -1;
2895 	if (isdigit((unsigned char) c))
2896 		return c - '0';
2897 	if ((c >= 'a') && (c <= 'f'))
2898 		return c + 10 - 'a';
2899 	if (( c>= 'A') && (c <= 'F'))
2900 		return c + 10 - 'A';
2901 	return -1;
2902 }
2903 
2904 
2905 /*
2906  * Print a string containing C character escapes.
2907  */
2908 protected void
2909 file_showstr(FILE *fp, const char *s, size_t len)
2910 {
2911 	char	c;
2912 
2913 	for (;;) {
2914 		if (len == ~0U) {
2915 			c = *s++;
2916 			if (c == '\0')
2917 				break;
2918 		}
2919 		else  {
2920 			if (len-- == 0)
2921 				break;
2922 			c = *s++;
2923 		}
2924 		if (c >= 040 && c <= 0176)	/* TODO isprint && !iscntrl */
2925 			(void) fputc(c, fp);
2926 		else {
2927 			(void) fputc('\\', fp);
2928 			switch (c) {
2929 			case '\a':
2930 				(void) fputc('a', fp);
2931 				break;
2932 
2933 			case '\b':
2934 				(void) fputc('b', fp);
2935 				break;
2936 
2937 			case '\f':
2938 				(void) fputc('f', fp);
2939 				break;
2940 
2941 			case '\n':
2942 				(void) fputc('n', fp);
2943 				break;
2944 
2945 			case '\r':
2946 				(void) fputc('r', fp);
2947 				break;
2948 
2949 			case '\t':
2950 				(void) fputc('t', fp);
2951 				break;
2952 
2953 			case '\v':
2954 				(void) fputc('v', fp);
2955 				break;
2956 
2957 			default:
2958 				(void) fprintf(fp, "%.3o", c & 0377);
2959 				break;
2960 			}
2961 		}
2962 	}
2963 }
2964 
2965 /*
2966  * eatsize(): Eat the size spec from a number [eg. 10UL]
2967  */
2968 private void
2969 eatsize(const char **p)
2970 {
2971 	const char *l = *p;
2972 
2973 	if (LOWCASE(*l) == 'u')
2974 		l++;
2975 
2976 	switch (LOWCASE(*l)) {
2977 	case 'l':    /* long */
2978 	case 's':    /* short */
2979 	case 'h':    /* short */
2980 	case 'b':    /* char/byte */
2981 	case 'c':    /* char/byte */
2982 		l++;
2983 		/*FALLTHROUGH*/
2984 	default:
2985 		break;
2986 	}
2987 
2988 	*p = l;
2989 }
2990 
2991 /*
2992  * handle a buffer containing a compiled file.
2993  */
2994 private struct magic_map *
2995 apprentice_buf(struct magic_set *ms, struct magic *buf, size_t len)
2996 {
2997 	struct magic_map *map;
2998 
2999 	if ((map = CAST(struct magic_map *, calloc(1, sizeof(*map)))) == NULL) {
3000 		file_oomem(ms, sizeof(*map));
3001 		return NULL;
3002 	}
3003 	map->len = len;
3004 	map->p = buf;
3005 	map->type = MAP_TYPE_USER;
3006 	if (check_buffer(ms, map, "buffer") != 0) {
3007 		apprentice_unmap(map);
3008 		return NULL;
3009 	}
3010 	return map;
3011 }
3012 
3013 /*
3014  * handle a compiled file.
3015  */
3016 
3017 private struct magic_map *
3018 apprentice_map(struct magic_set *ms, const char *fn)
3019 {
3020 	int fd;
3021 	struct stat st;
3022 	char *dbname = NULL;
3023 	struct magic_map *map;
3024 	struct magic_map *rv = NULL;
3025 
3026 	fd = -1;
3027 	if ((map = CAST(struct magic_map *, calloc(1, sizeof(*map)))) == NULL) {
3028 		file_oomem(ms, sizeof(*map));
3029 		goto error;
3030 	}
3031 	map->type = MAP_TYPE_USER;	/* unspecified */
3032 
3033 	dbname = mkdbname(ms, fn, 0);
3034 	if (dbname == NULL)
3035 		goto error;
3036 
3037 	if ((fd = open(dbname, O_RDONLY|O_BINARY)) == -1)
3038 		goto error;
3039 
3040 	if (fstat(fd, &st) == -1) {
3041 		file_error(ms, errno, "cannot stat `%s'", dbname);
3042 		goto error;
3043 	}
3044 	if (st.st_size < 8 || st.st_size > MAXMAGIC_SIZE) {
3045 		file_error(ms, 0, "file `%s' is too %s", dbname,
3046 		    st.st_size < 8 ? "small" : "large");
3047 		goto error;
3048 	}
3049 
3050 	map->len = (size_t)st.st_size;
3051 #ifdef QUICK
3052 	map->type = MAP_TYPE_MMAP;
3053 	if ((map->p = mmap(0, (size_t)st.st_size, PROT_READ|PROT_WRITE,
3054 	    MAP_PRIVATE|MAP_FILE, fd, (off_t)0)) == MAP_FAILED) {
3055 		file_error(ms, errno, "cannot map `%s'", dbname);
3056 		goto error;
3057 	}
3058 #else
3059 	map->type = MAP_TYPE_MALLOC;
3060 	if ((map->p = CAST(void *, malloc(map->len))) == NULL) {
3061 		file_oomem(ms, map->len);
3062 		goto error;
3063 	}
3064 	if (read(fd, map->p, map->len) != (ssize_t)map->len) {
3065 		file_badread(ms);
3066 		goto error;
3067 	}
3068 #define RET	1
3069 #endif
3070 	(void)close(fd);
3071 	fd = -1;
3072 
3073 	if (check_buffer(ms, map, dbname) != 0) {
3074 		rv = (struct magic_map *)-1;
3075 		goto error;
3076 	}
3077 #ifdef QUICK
3078 	if (mprotect(map->p, (size_t)st.st_size, PROT_READ) == -1) {
3079 		file_error(ms, errno, "cannot mprotect `%s'", dbname);
3080 		goto error;
3081 	}
3082 #endif
3083 
3084 	free(dbname);
3085 	return map;
3086 
3087 error:
3088 	if (fd != -1)
3089 		(void)close(fd);
3090 	apprentice_unmap(map);
3091 	free(dbname);
3092 	return rv;
3093 }
3094 
3095 private int
3096 check_buffer(struct magic_set *ms, struct magic_map *map, const char *dbname)
3097 {
3098 	uint32_t *ptr;
3099 	uint32_t entries, nentries;
3100 	uint32_t version;
3101 	int i, needsbyteswap;
3102 
3103 	ptr = CAST(uint32_t *, map->p);
3104 	if (*ptr != MAGICNO) {
3105 		if (swap4(*ptr) != MAGICNO) {
3106 			file_error(ms, 0, "bad magic in `%s'", dbname);
3107 			return -1;
3108 		}
3109 		needsbyteswap = 1;
3110 	} else
3111 		needsbyteswap = 0;
3112 	if (needsbyteswap)
3113 		version = swap4(ptr[1]);
3114 	else
3115 		version = ptr[1];
3116 	if (version != VERSIONNO) {
3117 		file_error(ms, 0, "File %s supports only version %d magic "
3118 		    "files. `%s' is version %d", VERSION,
3119 		    VERSIONNO, dbname, version);
3120 		return -1;
3121 	}
3122 	entries = (uint32_t)(map->len / sizeof(struct magic));
3123 	if ((entries * sizeof(struct magic)) != map->len) {
3124 		file_error(ms, 0, "Size of `%s' %" SIZE_T_FORMAT "u is not "
3125 		    "a multiple of %" SIZE_T_FORMAT "u",
3126 		    dbname, map->len, sizeof(struct magic));
3127 		return -1;
3128 	}
3129 	map->magic[0] = CAST(struct magic *, map->p) + 1;
3130 	nentries = 0;
3131 	for (i = 0; i < MAGIC_SETS; i++) {
3132 		if (needsbyteswap)
3133 			map->nmagic[i] = swap4(ptr[i + 2]);
3134 		else
3135 			map->nmagic[i] = ptr[i + 2];
3136 		if (i != MAGIC_SETS - 1)
3137 			map->magic[i + 1] = map->magic[i] + map->nmagic[i];
3138 		nentries += map->nmagic[i];
3139 	}
3140 	if (entries != nentries + 1) {
3141 		file_error(ms, 0, "Inconsistent entries in `%s' %u != %u",
3142 		    dbname, entries, nentries + 1);
3143 		return -1;
3144 	}
3145 	if (needsbyteswap)
3146 		for (i = 0; i < MAGIC_SETS; i++)
3147 			byteswap(map->magic[i], map->nmagic[i]);
3148 	return 0;
3149 }
3150 
3151 /*
3152  * handle an mmaped file.
3153  */
3154 private int
3155 apprentice_compile(struct magic_set *ms, struct magic_map *map, const char *fn)
3156 {
3157 	static const size_t nm = sizeof(*map->nmagic) * MAGIC_SETS;
3158 	static const size_t m = sizeof(**map->magic);
3159 	int fd = -1;
3160 	size_t len;
3161 	char *dbname;
3162 	int rv = -1;
3163 	uint32_t i;
3164 	union {
3165 		struct magic m;
3166 		uint32_t h[2 + MAGIC_SETS];
3167 	} hdr;
3168 
3169 	dbname = mkdbname(ms, fn, 1);
3170 
3171 	if (dbname == NULL)
3172 		goto out;
3173 
3174 	if ((fd = open(dbname, O_WRONLY|O_CREAT|O_TRUNC|O_BINARY, 0644)) == -1)
3175 	{
3176 		file_error(ms, errno, "cannot open `%s'", dbname);
3177 		goto out;
3178 	}
3179 	memset(&hdr, 0, sizeof(hdr));
3180 	hdr.h[0] = MAGICNO;
3181 	hdr.h[1] = VERSIONNO;
3182 	memcpy(hdr.h + 2, map->nmagic, nm);
3183 
3184 	if (write(fd, &hdr, sizeof(hdr)) != (ssize_t)sizeof(hdr)) {
3185 		file_error(ms, errno, "error writing `%s'", dbname);
3186 		goto out;
3187 	}
3188 
3189 	for (i = 0; i < MAGIC_SETS; i++) {
3190 		len = m * map->nmagic[i];
3191 		if (write(fd, map->magic[i], len) != (ssize_t)len) {
3192 			file_error(ms, errno, "error writing `%s'", dbname);
3193 			goto out;
3194 		}
3195 	}
3196 
3197 	if (fd != -1)
3198 		(void)close(fd);
3199 	rv = 0;
3200 out:
3201 	apprentice_unmap(map);
3202 	free(dbname);
3203 	return rv;
3204 }
3205 
3206 private const char ext[] = ".mgc";
3207 /*
3208  * make a dbname
3209  */
3210 private char *
3211 mkdbname(struct magic_set *ms, const char *fn, int strip)
3212 {
3213 	const char *p, *q;
3214 	char *buf;
3215 
3216 	if (strip) {
3217 		if ((p = strrchr(fn, '/')) != NULL)
3218 			fn = ++p;
3219 	}
3220 
3221 	for (q = fn; *q; q++)
3222 		continue;
3223 	/* Look for .mgc */
3224 	for (p = ext + sizeof(ext) - 1; p >= ext && q >= fn; p--, q--)
3225 		if (*p != *q)
3226 			break;
3227 
3228 	/* Did not find .mgc, restore q */
3229 	if (p >= ext)
3230 		while (*q)
3231 			q++;
3232 
3233 	q++;
3234 	/* Compatibility with old code that looked in .mime */
3235 	if (ms->flags & MAGIC_MIME) {
3236 		if (asprintf(&buf, "%.*s.mime%s", (int)(q - fn), fn, ext) < 0)
3237 			return NULL;
3238 		if (access(buf, R_OK) != -1) {
3239 			ms->flags &= MAGIC_MIME_TYPE;
3240 			return buf;
3241 		}
3242 		free(buf);
3243 	}
3244 	if (asprintf(&buf, "%.*s%s", (int)(q - fn), fn, ext) < 0)
3245 		return NULL;
3246 
3247 	/* Compatibility with old code that looked in .mime */
3248 	if (strstr(fn, ".mime") != NULL)
3249 		ms->flags &= MAGIC_MIME_TYPE;
3250 	return buf;
3251 }
3252 
3253 /*
3254  * Byteswap an mmap'ed file if needed
3255  */
3256 private void
3257 byteswap(struct magic *magic, uint32_t nmagic)
3258 {
3259 	uint32_t i;
3260 	for (i = 0; i < nmagic; i++)
3261 		bs1(&magic[i]);
3262 }
3263 
3264 /*
3265  * swap a short
3266  */
3267 private uint16_t
3268 swap2(uint16_t sv)
3269 {
3270 	uint16_t rv;
3271 	uint8_t *s = (uint8_t *)(void *)&sv;
3272 	uint8_t *d = (uint8_t *)(void *)&rv;
3273 	d[0] = s[1];
3274 	d[1] = s[0];
3275 	return rv;
3276 }
3277 
3278 /*
3279  * swap an int
3280  */
3281 private uint32_t
3282 swap4(uint32_t sv)
3283 {
3284 	uint32_t rv;
3285 	uint8_t *s = (uint8_t *)(void *)&sv;
3286 	uint8_t *d = (uint8_t *)(void *)&rv;
3287 	d[0] = s[3];
3288 	d[1] = s[2];
3289 	d[2] = s[1];
3290 	d[3] = s[0];
3291 	return rv;
3292 }
3293 
3294 /*
3295  * swap a quad
3296  */
3297 private uint64_t
3298 swap8(uint64_t sv)
3299 {
3300 	uint64_t rv;
3301 	uint8_t *s = (uint8_t *)(void *)&sv;
3302 	uint8_t *d = (uint8_t *)(void *)&rv;
3303 #if 0
3304 	d[0] = s[3];
3305 	d[1] = s[2];
3306 	d[2] = s[1];
3307 	d[3] = s[0];
3308 	d[4] = s[7];
3309 	d[5] = s[6];
3310 	d[6] = s[5];
3311 	d[7] = s[4];
3312 #else
3313 	d[0] = s[7];
3314 	d[1] = s[6];
3315 	d[2] = s[5];
3316 	d[3] = s[4];
3317 	d[4] = s[3];
3318 	d[5] = s[2];
3319 	d[6] = s[1];
3320 	d[7] = s[0];
3321 #endif
3322 	return rv;
3323 }
3324 
3325 /*
3326  * byteswap a single magic entry
3327  */
3328 private void
3329 bs1(struct magic *m)
3330 {
3331 	m->cont_level = swap2(m->cont_level);
3332 	m->offset = swap4((uint32_t)m->offset);
3333 	m->in_offset = swap4((uint32_t)m->in_offset);
3334 	m->lineno = swap4((uint32_t)m->lineno);
3335 	if (IS_STRING(m->type)) {
3336 		m->str_range = swap4(m->str_range);
3337 		m->str_flags = swap4(m->str_flags);
3338 	}
3339 	else {
3340 		m->value.q = swap8(m->value.q);
3341 		m->num_mask = swap8(m->num_mask);
3342 	}
3343 }
3344 
3345 protected size_t
3346 file_pstring_length_size(const struct magic *m)
3347 {
3348 	switch (m->str_flags & PSTRING_LEN) {
3349 	case PSTRING_1_LE:
3350 		return 1;
3351 	case PSTRING_2_LE:
3352 	case PSTRING_2_BE:
3353 		return 2;
3354 	case PSTRING_4_LE:
3355 	case PSTRING_4_BE:
3356 		return 4;
3357 	default:
3358 		abort();	/* Impossible */
3359 		return 1;
3360 	}
3361 }
3362 protected size_t
3363 file_pstring_get_length(const struct magic *m, const char *ss)
3364 {
3365 	size_t len = 0;
3366 	const unsigned char *s = (const unsigned char *)ss;
3367 	unsigned int s3, s2, s1, s0;
3368 
3369 	switch (m->str_flags & PSTRING_LEN) {
3370 	case PSTRING_1_LE:
3371 		len = *s;
3372 		break;
3373 	case PSTRING_2_LE:
3374 		s0 = s[0];
3375 		s1 = s[1];
3376 		len = (s1 << 8) | s0;
3377 		break;
3378 	case PSTRING_2_BE:
3379 		s0 = s[0];
3380 		s1 = s[1];
3381 		len = (s0 << 8) | s1;
3382 		break;
3383 	case PSTRING_4_LE:
3384 		s0 = s[0];
3385 		s1 = s[1];
3386 		s2 = s[2];
3387 		s3 = s[3];
3388 		len = (s3 << 24) | (s2 << 16) | (s1 << 8) | s0;
3389 		break;
3390 	case PSTRING_4_BE:
3391 		s0 = s[0];
3392 		s1 = s[1];
3393 		s2 = s[2];
3394 		s3 = s[3];
3395 		len = (s0 << 24) | (s1 << 16) | (s2 << 8) | s3;
3396 		break;
3397 	default:
3398 		abort();	/* Impossible */
3399 	}
3400 
3401 	if (m->str_flags & PSTRING_LENGTH_INCLUDES_ITSELF)
3402 		len -= file_pstring_length_size(m);
3403 
3404 	return len;
3405 }
3406 
3407 protected int
3408 file_magicfind(struct magic_set *ms, const char *name, struct mlist *v)
3409 {
3410 	uint32_t i, j;
3411 	struct mlist *mlist, *ml;
3412 
3413 	mlist = ms->mlist[1];
3414 
3415 	for (ml = mlist->next; ml != mlist; ml = ml->next) {
3416 		struct magic *ma = ml->magic;
3417 		uint32_t nma = ml->nmagic;
3418 		for (i = 0; i < nma; i++) {
3419 			if (ma[i].type != FILE_NAME)
3420 				continue;
3421 			if (strcmp(ma[i].value.s, name) == 0) {
3422 				v->magic = &ma[i];
3423 				for (j = i + 1; j < nma; j++)
3424 				    if (ma[j].cont_level == 0)
3425 					    break;
3426 				v->nmagic = j - i;
3427 				return 0;
3428 			}
3429 		}
3430 	}
3431 	return -1;
3432 }
3433