1 %{ 2 /* 3 * configlexer.lex - lexical analyzer for unbound config file 4 * 5 * Copyright (c) 2001-2006, NLnet Labs. All rights reserved 6 * 7 * See LICENSE for the license. 8 * 9 */ 10 11 /* because flex keeps having sign-unsigned compare problems that are unfixed*/ 12 #if defined(__clang__)||(defined(__GNUC__)&&((__GNUC__ >4)||(defined(__GNUC_MINOR__)&&(__GNUC__ ==4)&&(__GNUC_MINOR__ >=2)))) 13 #pragma GCC diagnostic ignored "-Wsign-compare" 14 #endif 15 16 #include <ctype.h> 17 #include <strings.h> 18 #ifdef HAVE_GLOB_H 19 # include <glob.h> 20 #endif 21 22 #include "util/config_file.h" 23 #include "util/configparser.h" 24 void ub_c_error(const char *message); 25 26 #if 0 27 #define LEXOUT(s) printf s /* used ONLY when debugging */ 28 #else 29 #define LEXOUT(s) 30 #endif 31 32 /** avoid warning in about fwrite return value */ 33 #define ECHO ub_c_error_msg("syntax error at text: %s", yytext) 34 35 /** A parser variable, this is a statement in the config file which is 36 * of the form variable: value1 value2 ... nargs is the number of values. */ 37 #define YDVAR(nargs, var) \ 38 num_args=(nargs); \ 39 LEXOUT(("v(%s%d) ", yytext, num_args)); \ 40 if(num_args > 0) { BEGIN(val); } \ 41 return (var); 42 43 struct inc_state { 44 char* filename; 45 int line; 46 YY_BUFFER_STATE buffer; 47 struct inc_state* next; 48 int inc_toplevel; 49 }; 50 static struct inc_state* config_include_stack = NULL; 51 static int inc_depth = 0; 52 static int inc_prev = 0; 53 static int num_args = 0; 54 static int inc_toplevel = 0; 55 56 void init_cfg_parse(void) 57 { 58 config_include_stack = NULL; 59 inc_depth = 0; 60 inc_prev = 0; 61 num_args = 0; 62 inc_toplevel = 0; 63 } 64 65 static void config_start_include(const char* filename, int toplevel) 66 { 67 FILE *input; 68 struct inc_state* s; 69 char* nm; 70 if(inc_depth+1 > 100000) { 71 ub_c_error_msg("too many include files"); 72 return; 73 } 74 if(*filename == '\0') { 75 ub_c_error_msg("empty include file name"); 76 return; 77 } 78 s = (struct inc_state*)malloc(sizeof(*s)); 79 if(!s) { 80 ub_c_error_msg("include %s: malloc failure", filename); 81 return; 82 } 83 if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot, 84 strlen(cfg_parser->chroot)) == 0) { 85 filename += strlen(cfg_parser->chroot); 86 } 87 nm = strdup(filename); 88 if(!nm) { 89 ub_c_error_msg("include %s: strdup failure", filename); 90 free(s); 91 return; 92 } 93 input = fopen(filename, "r"); 94 if(!input) { 95 ub_c_error_msg("cannot open include file '%s': %s", 96 filename, strerror(errno)); 97 free(s); 98 free(nm); 99 return; 100 } 101 LEXOUT(("switch_to_include_file(%s)\n", filename)); 102 inc_depth++; 103 s->filename = cfg_parser->filename; 104 s->line = cfg_parser->line; 105 s->buffer = YY_CURRENT_BUFFER; 106 s->inc_toplevel = inc_toplevel; 107 s->next = config_include_stack; 108 config_include_stack = s; 109 cfg_parser->filename = nm; 110 cfg_parser->line = 1; 111 inc_toplevel = toplevel; 112 yy_switch_to_buffer(yy_create_buffer(input, YY_BUF_SIZE)); 113 } 114 115 static void config_start_include_glob(const char* filename, int toplevel) 116 { 117 118 /* check for wildcards */ 119 #ifdef HAVE_GLOB 120 glob_t g; 121 int i, r, flags; 122 if(!(!strchr(filename, '*') && !strchr(filename, '?') && !strchr(filename, '[') && 123 !strchr(filename, '{') && !strchr(filename, '~'))) { 124 flags = 0 125 #ifdef GLOB_ERR 126 | GLOB_ERR 127 #endif 128 /* do not set GLOB_NOSORT so the results are sorted 129 and in a predictable order. */ 130 #ifdef GLOB_BRACE 131 | GLOB_BRACE 132 #endif 133 #ifdef GLOB_TILDE 134 | GLOB_TILDE 135 #endif 136 ; 137 memset(&g, 0, sizeof(g)); 138 if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot, 139 strlen(cfg_parser->chroot)) == 0) { 140 filename += strlen(cfg_parser->chroot); 141 } 142 r = glob(filename, flags, NULL, &g); 143 if(r) { 144 /* some error */ 145 globfree(&g); 146 if(r == GLOB_NOMATCH) 147 return; /* no matches for pattern */ 148 config_start_include(filename, toplevel); /* let original deal with it */ 149 return; 150 } 151 /* process files found, if any */ 152 for(i=(int)g.gl_pathc-1; i>=0; i--) { 153 config_start_include(g.gl_pathv[i], toplevel); 154 } 155 globfree(&g); 156 return; 157 } 158 #endif /* HAVE_GLOB */ 159 160 config_start_include(filename, toplevel); 161 } 162 163 static void config_end_include(void) 164 { 165 struct inc_state* s = config_include_stack; 166 --inc_depth; 167 if(!s) return; 168 free(cfg_parser->filename); 169 cfg_parser->filename = s->filename; 170 cfg_parser->line = s->line; 171 yy_delete_buffer(YY_CURRENT_BUFFER); 172 yy_switch_to_buffer(s->buffer); 173 config_include_stack = s->next; 174 inc_toplevel = s->inc_toplevel; 175 free(s); 176 } 177 178 #ifndef yy_set_bol /* compat definition, for flex 2.4.6 */ 179 #define yy_set_bol(at_bol) \ 180 { \ 181 if ( ! yy_current_buffer ) \ 182 yy_current_buffer = yy_create_buffer( yyin, YY_BUF_SIZE ); \ 183 yy_current_buffer->yy_ch_buf[0] = ((at_bol)?'\n':' '); \ 184 } 185 #endif 186 187 %} 188 %option noinput 189 %option nounput 190 %{ 191 #ifndef YY_NO_UNPUT 192 #define YY_NO_UNPUT 1 193 #endif 194 #ifndef YY_NO_INPUT 195 #define YY_NO_INPUT 1 196 #endif 197 %} 198 199 SPACE [ \t] 200 LETTER [a-zA-Z] 201 UNQUOTEDLETTER [^\'\"\n\r \t\\]|\\. 202 UNQUOTEDLETTER_NOCOLON [^\:\'\"\n\r \t\\]|\\. 203 NEWLINE [\r\n] 204 COMMENT \# 205 COLON \: 206 DQANY [^\"\n\r\\]|\\. 207 SQANY [^\'\n\r\\]|\\. 208 209 %x quotedstring singlequotedstr include include_quoted val include_toplevel include_toplevel_quoted 210 211 %% 212 <INITIAL,val>{SPACE}* { 213 LEXOUT(("SP ")); /* ignore */ } 214 <INITIAL,val>{SPACE}*{COMMENT}.* { 215 /* note that flex makes the longest match and '.' is any but not nl */ 216 LEXOUT(("comment(%s) ", yytext)); /* ignore */ } 217 server{COLON} { YDVAR(0, VAR_SERVER) } 218 qname-minimisation{COLON} { YDVAR(1, VAR_QNAME_MINIMISATION) } 219 qname-minimisation-strict{COLON} { YDVAR(1, VAR_QNAME_MINIMISATION_STRICT) } 220 num-threads{COLON} { YDVAR(1, VAR_NUM_THREADS) } 221 verbosity{COLON} { YDVAR(1, VAR_VERBOSITY) } 222 port{COLON} { YDVAR(1, VAR_PORT) } 223 outgoing-range{COLON} { YDVAR(1, VAR_OUTGOING_RANGE) } 224 outgoing-port-permit{COLON} { YDVAR(1, VAR_OUTGOING_PORT_PERMIT) } 225 outgoing-port-avoid{COLON} { YDVAR(1, VAR_OUTGOING_PORT_AVOID) } 226 outgoing-num-tcp{COLON} { YDVAR(1, VAR_OUTGOING_NUM_TCP) } 227 incoming-num-tcp{COLON} { YDVAR(1, VAR_INCOMING_NUM_TCP) } 228 do-ip4{COLON} { YDVAR(1, VAR_DO_IP4) } 229 do-ip6{COLON} { YDVAR(1, VAR_DO_IP6) } 230 prefer-ip4{COLON} { YDVAR(1, VAR_PREFER_IP4) } 231 prefer-ip6{COLON} { YDVAR(1, VAR_PREFER_IP6) } 232 do-udp{COLON} { YDVAR(1, VAR_DO_UDP) } 233 do-tcp{COLON} { YDVAR(1, VAR_DO_TCP) } 234 tcp-upstream{COLON} { YDVAR(1, VAR_TCP_UPSTREAM) } 235 tcp-mss{COLON} { YDVAR(1, VAR_TCP_MSS) } 236 outgoing-tcp-mss{COLON} { YDVAR(1, VAR_OUTGOING_TCP_MSS) } 237 tcp-idle-timeout{COLON} { YDVAR(1, VAR_TCP_IDLE_TIMEOUT) } 238 max-reuse-tcp-queries{COLON} { YDVAR(1, VAR_MAX_REUSE_TCP_QUERIES) } 239 tcp-reuse-timeout{COLON} { YDVAR(1, VAR_TCP_REUSE_TIMEOUT) } 240 tcp-auth-query-timeout{COLON} { YDVAR(1, VAR_TCP_AUTH_QUERY_TIMEOUT) } 241 edns-tcp-keepalive{COLON} { YDVAR(1, VAR_EDNS_TCP_KEEPALIVE) } 242 edns-tcp-keepalive-timeout{COLON} { YDVAR(1, VAR_EDNS_TCP_KEEPALIVE_TIMEOUT) } 243 ssl-upstream{COLON} { YDVAR(1, VAR_SSL_UPSTREAM) } 244 tls-upstream{COLON} { YDVAR(1, VAR_SSL_UPSTREAM) } 245 ssl-service-key{COLON} { YDVAR(1, VAR_SSL_SERVICE_KEY) } 246 tls-service-key{COLON} { YDVAR(1, VAR_SSL_SERVICE_KEY) } 247 ssl-service-pem{COLON} { YDVAR(1, VAR_SSL_SERVICE_PEM) } 248 tls-service-pem{COLON} { YDVAR(1, VAR_SSL_SERVICE_PEM) } 249 ssl-port{COLON} { YDVAR(1, VAR_SSL_PORT) } 250 tls-port{COLON} { YDVAR(1, VAR_SSL_PORT) } 251 ssl-cert-bundle{COLON} { YDVAR(1, VAR_TLS_CERT_BUNDLE) } 252 tls-cert-bundle{COLON} { YDVAR(1, VAR_TLS_CERT_BUNDLE) } 253 tls-win-cert{COLON} { YDVAR(1, VAR_TLS_WIN_CERT) } 254 tls-system-cert{COLON} { YDVAR(1, VAR_TLS_WIN_CERT) } 255 additional-ssl-port{COLON} { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) } 256 additional-tls-port{COLON} { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) } 257 tls-additional-ports{COLON} { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) } 258 tls-additional-port{COLON} { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) } 259 tls-session-ticket-keys{COLON} { YDVAR(1, VAR_TLS_SESSION_TICKET_KEYS) } 260 tls-ciphers{COLON} { YDVAR(1, VAR_TLS_CIPHERS) } 261 tls-ciphersuites{COLON} { YDVAR(1, VAR_TLS_CIPHERSUITES) } 262 tls-use-sni{COLON} { YDVAR(1, VAR_TLS_USE_SNI) } 263 https-port{COLON} { YDVAR(1, VAR_HTTPS_PORT) } 264 http-endpoint{COLON} { YDVAR(1, VAR_HTTP_ENDPOINT) } 265 http-max-streams{COLON} { YDVAR(1, VAR_HTTP_MAX_STREAMS) } 266 http-query-buffer-size{COLON} { YDVAR(1, VAR_HTTP_QUERY_BUFFER_SIZE) } 267 http-response-buffer-size{COLON} { YDVAR(1, VAR_HTTP_RESPONSE_BUFFER_SIZE) } 268 http-nodelay{COLON} { YDVAR(1, VAR_HTTP_NODELAY) } 269 http-notls-downstream{COLON} { YDVAR(1, VAR_HTTP_NOTLS_DOWNSTREAM) } 270 use-systemd{COLON} { YDVAR(1, VAR_USE_SYSTEMD) } 271 do-daemonize{COLON} { YDVAR(1, VAR_DO_DAEMONIZE) } 272 interface{COLON} { YDVAR(1, VAR_INTERFACE) } 273 ip-address{COLON} { YDVAR(1, VAR_INTERFACE) } 274 outgoing-interface{COLON} { YDVAR(1, VAR_OUTGOING_INTERFACE) } 275 interface-automatic{COLON} { YDVAR(1, VAR_INTERFACE_AUTOMATIC) } 276 interface-automatic-ports{COLON} { YDVAR(1, VAR_INTERFACE_AUTOMATIC_PORTS) } 277 so-rcvbuf{COLON} { YDVAR(1, VAR_SO_RCVBUF) } 278 so-sndbuf{COLON} { YDVAR(1, VAR_SO_SNDBUF) } 279 so-reuseport{COLON} { YDVAR(1, VAR_SO_REUSEPORT) } 280 ip-transparent{COLON} { YDVAR(1, VAR_IP_TRANSPARENT) } 281 ip-freebind{COLON} { YDVAR(1, VAR_IP_FREEBIND) } 282 ip-dscp{COLON} { YDVAR(1, VAR_IP_DSCP) } 283 chroot{COLON} { YDVAR(1, VAR_CHROOT) } 284 username{COLON} { YDVAR(1, VAR_USERNAME) } 285 directory{COLON} { YDVAR(1, VAR_DIRECTORY) } 286 logfile{COLON} { YDVAR(1, VAR_LOGFILE) } 287 pidfile{COLON} { YDVAR(1, VAR_PIDFILE) } 288 root-hints{COLON} { YDVAR(1, VAR_ROOT_HINTS) } 289 stream-wait-size{COLON} { YDVAR(1, VAR_STREAM_WAIT_SIZE) } 290 edns-buffer-size{COLON} { YDVAR(1, VAR_EDNS_BUFFER_SIZE) } 291 msg-buffer-size{COLON} { YDVAR(1, VAR_MSG_BUFFER_SIZE) } 292 msg-cache-size{COLON} { YDVAR(1, VAR_MSG_CACHE_SIZE) } 293 msg-cache-slabs{COLON} { YDVAR(1, VAR_MSG_CACHE_SLABS) } 294 rrset-cache-size{COLON} { YDVAR(1, VAR_RRSET_CACHE_SIZE) } 295 rrset-cache-slabs{COLON} { YDVAR(1, VAR_RRSET_CACHE_SLABS) } 296 cache-max-ttl{COLON} { YDVAR(1, VAR_CACHE_MAX_TTL) } 297 cache-max-negative-ttl{COLON} { YDVAR(1, VAR_CACHE_MAX_NEGATIVE_TTL) } 298 cache-min-ttl{COLON} { YDVAR(1, VAR_CACHE_MIN_TTL) } 299 infra-host-ttl{COLON} { YDVAR(1, VAR_INFRA_HOST_TTL) } 300 infra-lame-ttl{COLON} { YDVAR(1, VAR_INFRA_LAME_TTL) } 301 infra-cache-slabs{COLON} { YDVAR(1, VAR_INFRA_CACHE_SLABS) } 302 infra-cache-numhosts{COLON} { YDVAR(1, VAR_INFRA_CACHE_NUMHOSTS) } 303 infra-cache-lame-size{COLON} { YDVAR(1, VAR_INFRA_CACHE_LAME_SIZE) } 304 infra-cache-min-rtt{COLON} { YDVAR(1, VAR_INFRA_CACHE_MIN_RTT) } 305 infra-cache-max-rtt{COLON} { YDVAR(1, VAR_INFRA_CACHE_MAX_RTT) } 306 infra-keep-probing{COLON} { YDVAR(1, VAR_INFRA_KEEP_PROBING) } 307 num-queries-per-thread{COLON} { YDVAR(1, VAR_NUM_QUERIES_PER_THREAD) } 308 jostle-timeout{COLON} { YDVAR(1, VAR_JOSTLE_TIMEOUT) } 309 delay-close{COLON} { YDVAR(1, VAR_DELAY_CLOSE) } 310 udp-connect{COLON} { YDVAR(1, VAR_UDP_CONNECT) } 311 target-fetch-policy{COLON} { YDVAR(1, VAR_TARGET_FETCH_POLICY) } 312 harden-short-bufsize{COLON} { YDVAR(1, VAR_HARDEN_SHORT_BUFSIZE) } 313 harden-large-queries{COLON} { YDVAR(1, VAR_HARDEN_LARGE_QUERIES) } 314 harden-glue{COLON} { YDVAR(1, VAR_HARDEN_GLUE) } 315 harden-dnssec-stripped{COLON} { YDVAR(1, VAR_HARDEN_DNSSEC_STRIPPED) } 316 harden-below-nxdomain{COLON} { YDVAR(1, VAR_HARDEN_BELOW_NXDOMAIN) } 317 harden-referral-path{COLON} { YDVAR(1, VAR_HARDEN_REFERRAL_PATH) } 318 harden-algo-downgrade{COLON} { YDVAR(1, VAR_HARDEN_ALGO_DOWNGRADE) } 319 use-caps-for-id{COLON} { YDVAR(1, VAR_USE_CAPS_FOR_ID) } 320 caps-whitelist{COLON} { YDVAR(1, VAR_CAPS_WHITELIST) } 321 caps-exempt{COLON} { YDVAR(1, VAR_CAPS_WHITELIST) } 322 unwanted-reply-threshold{COLON} { YDVAR(1, VAR_UNWANTED_REPLY_THRESHOLD) } 323 private-address{COLON} { YDVAR(1, VAR_PRIVATE_ADDRESS) } 324 private-domain{COLON} { YDVAR(1, VAR_PRIVATE_DOMAIN) } 325 prefetch-key{COLON} { YDVAR(1, VAR_PREFETCH_KEY) } 326 prefetch{COLON} { YDVAR(1, VAR_PREFETCH) } 327 deny-any{COLON} { YDVAR(1, VAR_DENY_ANY) } 328 stub-zone{COLON} { YDVAR(0, VAR_STUB_ZONE) } 329 name{COLON} { YDVAR(1, VAR_NAME) } 330 stub-addr{COLON} { YDVAR(1, VAR_STUB_ADDR) } 331 stub-host{COLON} { YDVAR(1, VAR_STUB_HOST) } 332 stub-prime{COLON} { YDVAR(1, VAR_STUB_PRIME) } 333 stub-first{COLON} { YDVAR(1, VAR_STUB_FIRST) } 334 stub-no-cache{COLON} { YDVAR(1, VAR_STUB_NO_CACHE) } 335 stub-ssl-upstream{COLON} { YDVAR(1, VAR_STUB_SSL_UPSTREAM) } 336 stub-tls-upstream{COLON} { YDVAR(1, VAR_STUB_SSL_UPSTREAM) } 337 stub-tcp-upstream{COLON} { YDVAR(1, VAR_STUB_TCP_UPSTREAM) } 338 forward-zone{COLON} { YDVAR(0, VAR_FORWARD_ZONE) } 339 forward-addr{COLON} { YDVAR(1, VAR_FORWARD_ADDR) } 340 forward-host{COLON} { YDVAR(1, VAR_FORWARD_HOST) } 341 forward-first{COLON} { YDVAR(1, VAR_FORWARD_FIRST) } 342 forward-no-cache{COLON} { YDVAR(1, VAR_FORWARD_NO_CACHE) } 343 forward-ssl-upstream{COLON} { YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) } 344 forward-tls-upstream{COLON} { YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) } 345 forward-tcp-upstream{COLON} { YDVAR(1, VAR_FORWARD_TCP_UPSTREAM) } 346 auth-zone{COLON} { YDVAR(0, VAR_AUTH_ZONE) } 347 rpz{COLON} { YDVAR(0, VAR_RPZ) } 348 tags{COLON} { YDVAR(1, VAR_TAGS) } 349 rpz-action-override{COLON} { YDVAR(1, VAR_RPZ_ACTION_OVERRIDE) } 350 rpz-cname-override{COLON} { YDVAR(1, VAR_RPZ_CNAME_OVERRIDE) } 351 rpz-log{COLON} { YDVAR(1, VAR_RPZ_LOG) } 352 rpz-log-name{COLON} { YDVAR(1, VAR_RPZ_LOG_NAME) } 353 rpz-signal-nxdomain-ra{COLON} { YDVAR(1, VAR_RPZ_SIGNAL_NXDOMAIN_RA) } 354 zonefile{COLON} { YDVAR(1, VAR_ZONEFILE) } 355 master{COLON} { YDVAR(1, VAR_MASTER) } 356 primary{COLON} { YDVAR(1, VAR_MASTER) } 357 url{COLON} { YDVAR(1, VAR_URL) } 358 allow-notify{COLON} { YDVAR(1, VAR_ALLOW_NOTIFY) } 359 for-downstream{COLON} { YDVAR(1, VAR_FOR_DOWNSTREAM) } 360 for-upstream{COLON} { YDVAR(1, VAR_FOR_UPSTREAM) } 361 fallback-enabled{COLON} { YDVAR(1, VAR_FALLBACK_ENABLED) } 362 view{COLON} { YDVAR(0, VAR_VIEW) } 363 view-first{COLON} { YDVAR(1, VAR_VIEW_FIRST) } 364 do-not-query-address{COLON} { YDVAR(1, VAR_DO_NOT_QUERY_ADDRESS) } 365 do-not-query-localhost{COLON} { YDVAR(1, VAR_DO_NOT_QUERY_LOCALHOST) } 366 access-control{COLON} { YDVAR(2, VAR_ACCESS_CONTROL) } 367 send-client-subnet{COLON} { YDVAR(1, VAR_SEND_CLIENT_SUBNET) } 368 client-subnet-zone{COLON} { YDVAR(1, VAR_CLIENT_SUBNET_ZONE) } 369 client-subnet-always-forward{COLON} { YDVAR(1, VAR_CLIENT_SUBNET_ALWAYS_FORWARD) } 370 client-subnet-opcode{COLON} { YDVAR(1, VAR_CLIENT_SUBNET_OPCODE) } 371 max-client-subnet-ipv4{COLON} { YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV4) } 372 max-client-subnet-ipv6{COLON} { YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV6) } 373 min-client-subnet-ipv4{COLON} { YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV4) } 374 min-client-subnet-ipv6{COLON} { YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV6) } 375 max-ecs-tree-size-ipv4{COLON} { YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV4) } 376 max-ecs-tree-size-ipv6{COLON} { YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV6) } 377 hide-identity{COLON} { YDVAR(1, VAR_HIDE_IDENTITY) } 378 hide-version{COLON} { YDVAR(1, VAR_HIDE_VERSION) } 379 hide-trustanchor{COLON} { YDVAR(1, VAR_HIDE_TRUSTANCHOR) } 380 hide-http-user-agent{COLON} { YDVAR(1, VAR_HIDE_HTTP_USER_AGENT) } 381 identity{COLON} { YDVAR(1, VAR_IDENTITY) } 382 version{COLON} { YDVAR(1, VAR_VERSION) } 383 http-user-agent{COLON} { YDVAR(1, VAR_HTTP_USER_AGENT) } 384 module-config{COLON} { YDVAR(1, VAR_MODULE_CONF) } 385 dlv-anchor{COLON} { YDVAR(1, VAR_DLV_ANCHOR) } 386 dlv-anchor-file{COLON} { YDVAR(1, VAR_DLV_ANCHOR_FILE) } 387 trust-anchor-file{COLON} { YDVAR(1, VAR_TRUST_ANCHOR_FILE) } 388 auto-trust-anchor-file{COLON} { YDVAR(1, VAR_AUTO_TRUST_ANCHOR_FILE) } 389 trusted-keys-file{COLON} { YDVAR(1, VAR_TRUSTED_KEYS_FILE) } 390 trust-anchor{COLON} { YDVAR(1, VAR_TRUST_ANCHOR) } 391 trust-anchor-signaling{COLON} { YDVAR(1, VAR_TRUST_ANCHOR_SIGNALING) } 392 root-key-sentinel{COLON} { YDVAR(1, VAR_ROOT_KEY_SENTINEL) } 393 val-override-date{COLON} { YDVAR(1, VAR_VAL_OVERRIDE_DATE) } 394 val-sig-skew-min{COLON} { YDVAR(1, VAR_VAL_SIG_SKEW_MIN) } 395 val-sig-skew-max{COLON} { YDVAR(1, VAR_VAL_SIG_SKEW_MAX) } 396 val-max-restart{COLON} { YDVAR(1, VAR_VAL_MAX_RESTART) } 397 val-bogus-ttl{COLON} { YDVAR(1, VAR_BOGUS_TTL) } 398 val-clean-additional{COLON} { YDVAR(1, VAR_VAL_CLEAN_ADDITIONAL) } 399 val-permissive-mode{COLON} { YDVAR(1, VAR_VAL_PERMISSIVE_MODE) } 400 aggressive-nsec{COLON} { YDVAR(1, VAR_AGGRESSIVE_NSEC) } 401 ignore-cd-flag{COLON} { YDVAR(1, VAR_IGNORE_CD_FLAG) } 402 serve-expired{COLON} { YDVAR(1, VAR_SERVE_EXPIRED) } 403 serve-expired-ttl{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_TTL) } 404 serve-expired-ttl-reset{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_TTL_RESET) } 405 serve-expired-reply-ttl{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_REPLY_TTL) } 406 serve-expired-client-timeout{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_CLIENT_TIMEOUT) } 407 ede-serve-expired{COLON} { YDVAR(1, VAR_EDE_SERVE_EXPIRED) } 408 serve-original-ttl{COLON} { YDVAR(1, VAR_SERVE_ORIGINAL_TTL) } 409 fake-dsa{COLON} { YDVAR(1, VAR_FAKE_DSA) } 410 fake-sha1{COLON} { YDVAR(1, VAR_FAKE_SHA1) } 411 val-log-level{COLON} { YDVAR(1, VAR_VAL_LOG_LEVEL) } 412 key-cache-size{COLON} { YDVAR(1, VAR_KEY_CACHE_SIZE) } 413 key-cache-slabs{COLON} { YDVAR(1, VAR_KEY_CACHE_SLABS) } 414 neg-cache-size{COLON} { YDVAR(1, VAR_NEG_CACHE_SIZE) } 415 val-nsec3-keysize-iterations{COLON} { 416 YDVAR(1, VAR_VAL_NSEC3_KEYSIZE_ITERATIONS) } 417 zonemd-permissive-mode{COLON} { YDVAR(1, VAR_ZONEMD_PERMISSIVE_MODE) } 418 zonemd-check{COLON} { YDVAR(1, VAR_ZONEMD_CHECK) } 419 zonemd-reject-absence{COLON} { YDVAR(1, VAR_ZONEMD_REJECT_ABSENCE) } 420 add-holddown{COLON} { YDVAR(1, VAR_ADD_HOLDDOWN) } 421 del-holddown{COLON} { YDVAR(1, VAR_DEL_HOLDDOWN) } 422 keep-missing{COLON} { YDVAR(1, VAR_KEEP_MISSING) } 423 permit-small-holddown{COLON} { YDVAR(1, VAR_PERMIT_SMALL_HOLDDOWN) } 424 use-syslog{COLON} { YDVAR(1, VAR_USE_SYSLOG) } 425 log-identity{COLON} { YDVAR(1, VAR_LOG_IDENTITY) } 426 log-time-ascii{COLON} { YDVAR(1, VAR_LOG_TIME_ASCII) } 427 log-queries{COLON} { YDVAR(1, VAR_LOG_QUERIES) } 428 log-replies{COLON} { YDVAR(1, VAR_LOG_REPLIES) } 429 log-tag-queryreply{COLON} { YDVAR(1, VAR_LOG_TAG_QUERYREPLY) } 430 log-local-actions{COLON} { YDVAR(1, VAR_LOG_LOCAL_ACTIONS) } 431 log-servfail{COLON} { YDVAR(1, VAR_LOG_SERVFAIL) } 432 local-zone{COLON} { YDVAR(2, VAR_LOCAL_ZONE) } 433 local-data{COLON} { YDVAR(1, VAR_LOCAL_DATA) } 434 local-data-ptr{COLON} { YDVAR(1, VAR_LOCAL_DATA_PTR) } 435 unblock-lan-zones{COLON} { YDVAR(1, VAR_UNBLOCK_LAN_ZONES) } 436 insecure-lan-zones{COLON} { YDVAR(1, VAR_INSECURE_LAN_ZONES) } 437 statistics-interval{COLON} { YDVAR(1, VAR_STATISTICS_INTERVAL) } 438 statistics-cumulative{COLON} { YDVAR(1, VAR_STATISTICS_CUMULATIVE) } 439 extended-statistics{COLON} { YDVAR(1, VAR_EXTENDED_STATISTICS) } 440 shm-enable{COLON} { YDVAR(1, VAR_SHM_ENABLE) } 441 shm-key{COLON} { YDVAR(1, VAR_SHM_KEY) } 442 remote-control{COLON} { YDVAR(0, VAR_REMOTE_CONTROL) } 443 control-enable{COLON} { YDVAR(1, VAR_CONTROL_ENABLE) } 444 control-interface{COLON} { YDVAR(1, VAR_CONTROL_INTERFACE) } 445 control-port{COLON} { YDVAR(1, VAR_CONTROL_PORT) } 446 control-use-cert{COLON} { YDVAR(1, VAR_CONTROL_USE_CERT) } 447 server-key-file{COLON} { YDVAR(1, VAR_SERVER_KEY_FILE) } 448 server-cert-file{COLON} { YDVAR(1, VAR_SERVER_CERT_FILE) } 449 control-key-file{COLON} { YDVAR(1, VAR_CONTROL_KEY_FILE) } 450 control-cert-file{COLON} { YDVAR(1, VAR_CONTROL_CERT_FILE) } 451 python-script{COLON} { YDVAR(1, VAR_PYTHON_SCRIPT) } 452 python{COLON} { YDVAR(0, VAR_PYTHON) } 453 dynlib-file{COLON} { YDVAR(1, VAR_DYNLIB_FILE) } 454 dynlib{COLON} { YDVAR(0, VAR_DYNLIB) } 455 domain-insecure{COLON} { YDVAR(1, VAR_DOMAIN_INSECURE) } 456 minimal-responses{COLON} { YDVAR(1, VAR_MINIMAL_RESPONSES) } 457 rrset-roundrobin{COLON} { YDVAR(1, VAR_RRSET_ROUNDROBIN) } 458 unknown-server-time-limit{COLON} { YDVAR(1, VAR_UNKNOWN_SERVER_TIME_LIMIT) } 459 max-udp-size{COLON} { YDVAR(1, VAR_MAX_UDP_SIZE) } 460 dns64-prefix{COLON} { YDVAR(1, VAR_DNS64_PREFIX) } 461 dns64-synthall{COLON} { YDVAR(1, VAR_DNS64_SYNTHALL) } 462 dns64-ignore-aaaa{COLON} { YDVAR(1, VAR_DNS64_IGNORE_AAAA) } 463 define-tag{COLON} { YDVAR(1, VAR_DEFINE_TAG) } 464 local-zone-tag{COLON} { YDVAR(2, VAR_LOCAL_ZONE_TAG) } 465 access-control-tag{COLON} { YDVAR(2, VAR_ACCESS_CONTROL_TAG) } 466 access-control-tag-action{COLON} { YDVAR(3, VAR_ACCESS_CONTROL_TAG_ACTION) } 467 access-control-tag-data{COLON} { YDVAR(3, VAR_ACCESS_CONTROL_TAG_DATA) } 468 access-control-view{COLON} { YDVAR(2, VAR_ACCESS_CONTROL_VIEW) } 469 local-zone-override{COLON} { YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) } 470 dnstap{COLON} { YDVAR(0, VAR_DNSTAP) } 471 dnstap-enable{COLON} { YDVAR(1, VAR_DNSTAP_ENABLE) } 472 dnstap-bidirectional{COLON} { YDVAR(1, VAR_DNSTAP_BIDIRECTIONAL) } 473 dnstap-socket-path{COLON} { YDVAR(1, VAR_DNSTAP_SOCKET_PATH) } 474 dnstap-ip{COLON} { YDVAR(1, VAR_DNSTAP_IP) } 475 dnstap-tls{COLON} { YDVAR(1, VAR_DNSTAP_TLS) } 476 dnstap-tls-server-name{COLON} { YDVAR(1, VAR_DNSTAP_TLS_SERVER_NAME) } 477 dnstap-tls-cert-bundle{COLON} { YDVAR(1, VAR_DNSTAP_TLS_CERT_BUNDLE) } 478 dnstap-tls-client-key-file{COLON} { 479 YDVAR(1, VAR_DNSTAP_TLS_CLIENT_KEY_FILE) } 480 dnstap-tls-client-cert-file{COLON} { 481 YDVAR(1, VAR_DNSTAP_TLS_CLIENT_CERT_FILE) } 482 dnstap-send-identity{COLON} { YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) } 483 dnstap-send-version{COLON} { YDVAR(1, VAR_DNSTAP_SEND_VERSION) } 484 dnstap-identity{COLON} { YDVAR(1, VAR_DNSTAP_IDENTITY) } 485 dnstap-version{COLON} { YDVAR(1, VAR_DNSTAP_VERSION) } 486 dnstap-log-resolver-query-messages{COLON} { 487 YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES) } 488 dnstap-log-resolver-response-messages{COLON} { 489 YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES) } 490 dnstap-log-client-query-messages{COLON} { 491 YDVAR(1, VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES) } 492 dnstap-log-client-response-messages{COLON} { 493 YDVAR(1, VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES) } 494 dnstap-log-forwarder-query-messages{COLON} { 495 YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES) } 496 dnstap-log-forwarder-response-messages{COLON} { 497 YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES) } 498 disable-dnssec-lame-check{COLON} { YDVAR(1, VAR_DISABLE_DNSSEC_LAME_CHECK) } 499 ip-ratelimit{COLON} { YDVAR(1, VAR_IP_RATELIMIT) } 500 ratelimit{COLON} { YDVAR(1, VAR_RATELIMIT) } 501 ip-ratelimit-slabs{COLON} { YDVAR(1, VAR_IP_RATELIMIT_SLABS) } 502 ratelimit-slabs{COLON} { YDVAR(1, VAR_RATELIMIT_SLABS) } 503 ip-ratelimit-size{COLON} { YDVAR(1, VAR_IP_RATELIMIT_SIZE) } 504 ratelimit-size{COLON} { YDVAR(1, VAR_RATELIMIT_SIZE) } 505 ratelimit-for-domain{COLON} { YDVAR(2, VAR_RATELIMIT_FOR_DOMAIN) } 506 ratelimit-below-domain{COLON} { YDVAR(2, VAR_RATELIMIT_BELOW_DOMAIN) } 507 ip-ratelimit-factor{COLON} { YDVAR(1, VAR_IP_RATELIMIT_FACTOR) } 508 ratelimit-factor{COLON} { YDVAR(1, VAR_RATELIMIT_FACTOR) } 509 ip-ratelimit-backoff{COLON} { YDVAR(1, VAR_IP_RATELIMIT_BACKOFF) } 510 ratelimit-backoff{COLON} { YDVAR(1, VAR_RATELIMIT_BACKOFF) } 511 outbound-msg-retry{COLON} { YDVAR(1, VAR_OUTBOUND_MSG_RETRY) } 512 low-rtt{COLON} { YDVAR(1, VAR_LOW_RTT) } 513 fast-server-num{COLON} { YDVAR(1, VAR_FAST_SERVER_NUM) } 514 low-rtt-pct{COLON} { YDVAR(1, VAR_FAST_SERVER_PERMIL) } 515 low-rtt-permil{COLON} { YDVAR(1, VAR_FAST_SERVER_PERMIL) } 516 fast-server-permil{COLON} { YDVAR(1, VAR_FAST_SERVER_PERMIL) } 517 response-ip-tag{COLON} { YDVAR(2, VAR_RESPONSE_IP_TAG) } 518 response-ip{COLON} { YDVAR(2, VAR_RESPONSE_IP) } 519 response-ip-data{COLON} { YDVAR(2, VAR_RESPONSE_IP_DATA) } 520 dnscrypt{COLON} { YDVAR(0, VAR_DNSCRYPT) } 521 dnscrypt-enable{COLON} { YDVAR(1, VAR_DNSCRYPT_ENABLE) } 522 dnscrypt-port{COLON} { YDVAR(1, VAR_DNSCRYPT_PORT) } 523 dnscrypt-provider{COLON} { YDVAR(1, VAR_DNSCRYPT_PROVIDER) } 524 dnscrypt-secret-key{COLON} { YDVAR(1, VAR_DNSCRYPT_SECRET_KEY) } 525 dnscrypt-provider-cert{COLON} { YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT) } 526 dnscrypt-provider-cert-rotated{COLON} { YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT_ROTATED) } 527 dnscrypt-shared-secret-cache-size{COLON} { 528 YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE) } 529 dnscrypt-shared-secret-cache-slabs{COLON} { 530 YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS) } 531 dnscrypt-nonce-cache-size{COLON} { YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SIZE) } 532 dnscrypt-nonce-cache-slabs{COLON} { YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SLABS) } 533 pad-responses{COLON} { YDVAR(1, VAR_PAD_RESPONSES) } 534 pad-responses-block-size{COLON} { YDVAR(1, VAR_PAD_RESPONSES_BLOCK_SIZE) } 535 pad-queries{COLON} { YDVAR(1, VAR_PAD_QUERIES) } 536 pad-queries-block-size{COLON} { YDVAR(1, VAR_PAD_QUERIES_BLOCK_SIZE) } 537 ipsecmod-enabled{COLON} { YDVAR(1, VAR_IPSECMOD_ENABLED) } 538 ipsecmod-ignore-bogus{COLON} { YDVAR(1, VAR_IPSECMOD_IGNORE_BOGUS) } 539 ipsecmod-hook{COLON} { YDVAR(1, VAR_IPSECMOD_HOOK) } 540 ipsecmod-max-ttl{COLON} { YDVAR(1, VAR_IPSECMOD_MAX_TTL) } 541 ipsecmod-whitelist{COLON} { YDVAR(1, VAR_IPSECMOD_WHITELIST) } 542 ipsecmod-allow{COLON} { YDVAR(1, VAR_IPSECMOD_WHITELIST) } 543 ipsecmod-strict{COLON} { YDVAR(1, VAR_IPSECMOD_STRICT) } 544 cachedb{COLON} { YDVAR(0, VAR_CACHEDB) } 545 backend{COLON} { YDVAR(1, VAR_CACHEDB_BACKEND) } 546 secret-seed{COLON} { YDVAR(1, VAR_CACHEDB_SECRETSEED) } 547 redis-server-host{COLON} { YDVAR(1, VAR_CACHEDB_REDISHOST) } 548 redis-server-port{COLON} { YDVAR(1, VAR_CACHEDB_REDISPORT) } 549 redis-timeout{COLON} { YDVAR(1, VAR_CACHEDB_REDISTIMEOUT) } 550 redis-expire-records{COLON} { YDVAR(1, VAR_CACHEDB_REDISEXPIRERECORDS) } 551 ipset{COLON} { YDVAR(0, VAR_IPSET) } 552 name-v4{COLON} { YDVAR(1, VAR_IPSET_NAME_V4) } 553 name-v6{COLON} { YDVAR(1, VAR_IPSET_NAME_V6) } 554 udp-upstream-without-downstream{COLON} { YDVAR(1, VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM) } 555 tcp-connection-limit{COLON} { YDVAR(2, VAR_TCP_CONNECTION_LIMIT) } 556 edns-client-string{COLON} { YDVAR(2, VAR_EDNS_CLIENT_STRING) } 557 edns-client-string-opcode{COLON} { YDVAR(1, VAR_EDNS_CLIENT_STRING_OPCODE) } 558 nsid{COLON} { YDVAR(1, VAR_NSID ) } 559 ede{COLON} { YDVAR(1, VAR_EDE ) } 560 <INITIAL,val>{NEWLINE} { LEXOUT(("NL\n")); cfg_parser->line++; } 561 562 /* Quoted strings. Strip leading and ending quotes */ 563 <val>\" { BEGIN(quotedstring); LEXOUT(("QS ")); } 564 <quotedstring><<EOF>> { 565 yyerror("EOF inside quoted string"); 566 if(--num_args == 0) { BEGIN(INITIAL); } 567 else { BEGIN(val); } 568 } 569 <quotedstring>{DQANY}* { LEXOUT(("STR(%s) ", yytext)); yymore(); } 570 <quotedstring>{NEWLINE} { yyerror("newline inside quoted string, no end \""); 571 cfg_parser->line++; BEGIN(INITIAL); } 572 <quotedstring>\" { 573 LEXOUT(("QE ")); 574 if(--num_args == 0) { BEGIN(INITIAL); } 575 else { BEGIN(val); } 576 yytext[yyleng - 1] = '\0'; 577 yylval.str = strdup(yytext); 578 if(!yylval.str) 579 yyerror("out of memory"); 580 return STRING_ARG; 581 } 582 583 /* Single Quoted strings. Strip leading and ending quotes */ 584 <val>\' { BEGIN(singlequotedstr); LEXOUT(("SQS ")); } 585 <singlequotedstr><<EOF>> { 586 yyerror("EOF inside quoted string"); 587 if(--num_args == 0) { BEGIN(INITIAL); } 588 else { BEGIN(val); } 589 } 590 <singlequotedstr>{SQANY}* { LEXOUT(("STR(%s) ", yytext)); yymore(); } 591 <singlequotedstr>{NEWLINE} { yyerror("newline inside quoted string, no end '"); 592 cfg_parser->line++; BEGIN(INITIAL); } 593 <singlequotedstr>\' { 594 LEXOUT(("SQE ")); 595 if(--num_args == 0) { BEGIN(INITIAL); } 596 else { BEGIN(val); } 597 yytext[yyleng - 1] = '\0'; 598 yylval.str = strdup(yytext); 599 if(!yylval.str) 600 yyerror("out of memory"); 601 return STRING_ARG; 602 } 603 604 /* include: directive */ 605 <INITIAL,val>include{COLON} { 606 LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include); } 607 <include><<EOF>> { 608 yyerror("EOF inside include directive"); 609 BEGIN(inc_prev); 610 } 611 <include>{SPACE}* { LEXOUT(("ISP ")); /* ignore */ } 612 <include>{NEWLINE} { LEXOUT(("NL\n")); cfg_parser->line++;} 613 <include>\" { LEXOUT(("IQS ")); BEGIN(include_quoted); } 614 <include>{UNQUOTEDLETTER}* { 615 LEXOUT(("Iunquotedstr(%s) ", yytext)); 616 config_start_include_glob(yytext, 0); 617 BEGIN(inc_prev); 618 } 619 <include_quoted><<EOF>> { 620 yyerror("EOF inside quoted string"); 621 BEGIN(inc_prev); 622 } 623 <include_quoted>{DQANY}* { LEXOUT(("ISTR(%s) ", yytext)); yymore(); } 624 <include_quoted>{NEWLINE} { yyerror("newline before \" in include name"); 625 cfg_parser->line++; BEGIN(inc_prev); } 626 <include_quoted>\" { 627 LEXOUT(("IQE ")); 628 yytext[yyleng - 1] = '\0'; 629 config_start_include_glob(yytext, 0); 630 BEGIN(inc_prev); 631 } 632 <INITIAL,val><<EOF>> { 633 LEXOUT(("LEXEOF ")); 634 yy_set_bol(1); /* Set beginning of line, so "^" rules match. */ 635 if (!config_include_stack) { 636 yyterminate(); 637 } else { 638 int prev_toplevel = inc_toplevel; 639 fclose(yyin); 640 config_end_include(); 641 if(prev_toplevel) return (VAR_FORCE_TOPLEVEL); 642 } 643 } 644 645 /* include-toplevel: directive */ 646 <INITIAL,val>include-toplevel{COLON} { 647 LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include_toplevel); 648 } 649 <include_toplevel><<EOF>> { 650 yyerror("EOF inside include_toplevel directive"); 651 BEGIN(inc_prev); 652 } 653 <include_toplevel>{SPACE}* { LEXOUT(("ITSP ")); /* ignore */ } 654 <include_toplevel>{NEWLINE} { LEXOUT(("NL\n")); cfg_parser->line++; } 655 <include_toplevel>\" { LEXOUT(("ITQS ")); BEGIN(include_toplevel_quoted); } 656 <include_toplevel>{UNQUOTEDLETTER}* { 657 LEXOUT(("ITunquotedstr(%s) ", yytext)); 658 config_start_include_glob(yytext, 1); 659 BEGIN(inc_prev); 660 return (VAR_FORCE_TOPLEVEL); 661 } 662 <include_toplevel_quoted><<EOF>> { 663 yyerror("EOF inside quoted string"); 664 BEGIN(inc_prev); 665 } 666 <include_toplevel_quoted>{DQANY}* { LEXOUT(("ITSTR(%s) ", yytext)); yymore(); } 667 <include_toplevel_quoted>{NEWLINE} { 668 yyerror("newline before \" in include name"); 669 cfg_parser->line++; BEGIN(inc_prev); 670 } 671 <include_toplevel_quoted>\" { 672 LEXOUT(("ITQE ")); 673 yytext[yyleng - 1] = '\0'; 674 config_start_include_glob(yytext, 1); 675 BEGIN(inc_prev); 676 return (VAR_FORCE_TOPLEVEL); 677 } 678 679 <val>{UNQUOTEDLETTER}* { LEXOUT(("unquotedstr(%s) ", yytext)); 680 if(--num_args == 0) { BEGIN(INITIAL); } 681 yylval.str = strdup(yytext); return STRING_ARG; } 682 683 {UNQUOTEDLETTER_NOCOLON}* { 684 ub_c_error_msg("unknown keyword '%s'", yytext); 685 } 686 687 <*>. { 688 ub_c_error_msg("stray '%s'", yytext); 689 } 690 691 %% 692