xref: /openbsd-src/usr.sbin/dhcpd/parse.c (revision 11b1f78ac67154562cb30cbdd164ae54e7e66fd6)
1 /*	$OpenBSD: parse.c,v 1.18 2015/05/18 17:51:21 krw Exp $	*/
2 
3 /* Common parser code for dhcpd and dhclient. */
4 
5 /*
6  * Copyright (c) 1995, 1996, 1997, 1998 The Internet Software Consortium.
7  * All rights reserved.
8  *
9  * Redistribution and use in source and binary forms, with or without
10  * modification, are permitted provided that the following conditions
11  * are met:
12  *
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  * 3. Neither the name of The Internet Software Consortium nor the names
19  *    of its contributors may be used to endorse or promote products derived
20  *    from this software without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE INTERNET SOFTWARE CONSORTIUM AND
23  * CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
24  * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26  * DISCLAIMED.  IN NO EVENT SHALL THE INTERNET SOFTWARE CONSORTIUM OR
27  * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
28  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
29  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
30  * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
31  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
32  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
33  * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34  * SUCH DAMAGE.
35  *
36  * This software has been written for the Internet Software Consortium
37  * by Ted Lemon <mellon@fugue.com> in cooperation with Vixie
38  * Enterprises.  To learn more about the Internet Software Consortium,
39  * see ``http://www.vix.com/isc''.  To learn more about Vixie
40  * Enterprises, see ``http://www.vix.com''.
41  */
42 
43 #include  <stdint.h>
44 
45 #include "dhcpd.h"
46 #include "dhctoken.h"
47 
48 /*
49  * Skip to the semicolon ending the current statement.   If we encounter
50  * braces, the matching closing brace terminates the statement.   If we
51  * encounter a right brace but haven't encountered a left brace, return
52  * leaving the brace in the token buffer for the caller.   If we see a
53  * semicolon and haven't seen a left brace, return.   This lets us skip
54  * over:
55  *
56  *	statement;
57  *	statement foo bar { }
58  *	statement foo bar { statement { } }
59  *	statement}
60  *
61  *	...et cetera.
62  */
63 void
64 skip_to_semi(FILE *cfile)
65 {
66 	int		 token;
67 	char		*val;
68 	int		 brace_count = 0;
69 
70 	do {
71 		token = peek_token(&val, cfile);
72 		if (token == '}') {
73 			if (brace_count) {
74 				token = next_token(&val, cfile);
75 				if (!--brace_count)
76 					return;
77 			} else
78 				return;
79 		} else if (token == '{') {
80 			brace_count++;
81 		} else if (token == ';' && !brace_count) {
82 			token = next_token(&val, cfile);
83 			return;
84 		} else if (token == '\n') {
85 			/*
86 			 * EOL only happens when parsing
87 			 * /etc/resolv.conf, and we treat it like a
88 			 * semicolon because the resolv.conf file is
89 			 * line-oriented.
90 			 */
91 			token = next_token(&val, cfile);
92 			return;
93 		}
94 		token = next_token(&val, cfile);
95 	} while (token != EOF);
96 }
97 
98 int
99 parse_semi(FILE *cfile)
100 {
101 	int token;
102 	char *val;
103 
104 	token = next_token(&val, cfile);
105 	if (token != ';') {
106 		parse_warn("semicolon expected.");
107 		skip_to_semi(cfile);
108 		return (0);
109 	}
110 	return (1);
111 }
112 
113 /*
114  * string-parameter :== STRING SEMI
115  */
116 char *
117 parse_string(FILE *cfile)
118 {
119 	char *val, *s;
120 	int token;
121 
122 	token = next_token(&val, cfile);
123 	if (token != TOK_STRING) {
124 		parse_warn("filename must be a string");
125 		skip_to_semi(cfile);
126 		return (NULL);
127 	}
128 	s = strdup(val);
129 	if (s == NULL)
130 		error("no memory for string %s.", val);
131 
132 	if (!parse_semi(cfile)) {
133 		free(s);
134 		return (NULL);
135 	}
136 	return (s);
137 }
138 
139 /*
140  * hostname :== identifier | hostname DOT identifier
141  */
142 char *
143 parse_host_name(FILE *cfile)
144 {
145 	char *val, *s, *t;
146 	int token, len = 0;
147 	pair c = NULL;
148 
149 	/* Read a dotted hostname... */
150 	do {
151 		/* Read a token, which should be an identifier. */
152 		token = next_token(&val, cfile);
153 		if (!is_identifier(token)) {
154 			parse_warn("expecting an identifier in hostname");
155 			skip_to_semi(cfile);
156 			return (NULL);
157 		}
158 		/* Store this identifier... */
159 		s = strdup(val);
160 		if (s == NULL)
161 			error("can't allocate temp space for hostname.");
162 		c = cons((caddr_t) s, c);
163 		len += strlen(s) + 1;
164 		/*
165 		 * Look for a dot; if it's there, keep going, otherwise
166 		 * we're done.
167 		 */
168 		token = peek_token(&val, cfile);
169 		if (token == '.')
170 			token = next_token(&val, cfile);
171 	} while (token == '.');
172 
173 	/* Assemble the hostname together into a string. */
174 	if (!(s = malloc(len)))
175 		error("can't allocate space for hostname.");
176 	t = s + len;
177 	*--t = '\0';
178 	while (c) {
179 		pair cdr = c->cdr;
180 		int l = strlen((char *)c->car);
181 
182 		t -= l;
183 		memcpy(t, (char *)c->car, l);
184 		/* Free up temp space. */
185 		free(c->car);
186 		free(c);
187 		c = cdr;
188 		if (t != s)
189 			*--t = '.';
190 	}
191 	return (s);
192 }
193 
194 /*
195  * hardware-parameter :== HARDWARE ETHERNET csns SEMI
196  * csns :== NUMBER | csns COLON NUMBER
197  */
198 void
199 parse_hardware_param(FILE *cfile, struct hardware *hardware)
200 {
201 	char *val;
202 	int token, hlen;
203 	unsigned char *t;
204 
205 	token = next_token(&val, cfile);
206 	switch (token) {
207 	case TOK_ETHERNET:
208 		hardware->htype = HTYPE_ETHER;
209 		break;
210 	case TOK_IPSEC_TUNNEL:
211 		hardware->htype = HTYPE_IPSEC_TUNNEL;
212 		break;
213 	default:
214 		parse_warn("expecting a network hardware type");
215 		skip_to_semi(cfile);
216 		return;
217 	}
218 
219 	/*
220 	 * Parse the hardware address information.   Technically, it
221 	 * would make a lot of sense to restrict the length of the data
222 	 * we'll accept here to the length of a particular hardware
223 	 * address type.   Unfortunately, there are some broken clients
224 	 * out there that put bogus data in the chaddr buffer, and we
225 	 * accept that data in the lease file rather than simply failing
226 	 * on such clients.   Yuck.
227 	 */
228 	hlen = 0;
229 	t = parse_numeric_aggregate(cfile, NULL, &hlen, ':', 16, 8);
230 	if (!t)
231 		return;
232 	if (hlen > sizeof(hardware->haddr)) {
233 		free(t);
234 		parse_warn("hardware address too long");
235 	} else {
236 		hardware->hlen = hlen;
237 		memcpy((unsigned char *)&hardware->haddr[0], t, hardware->hlen);
238 		if (hlen < sizeof(hardware->haddr))
239 			memset(&hardware->haddr[hlen], 0,
240 			    sizeof(hardware->haddr) - hlen);
241 		free(t);
242 	}
243 
244 	token = next_token(&val, cfile);
245 	if (token != ';') {
246 		parse_warn("expecting semicolon.");
247 		skip_to_semi(cfile);
248 	}
249 }
250 
251 /*
252  * lease-time :== NUMBER SEMI
253  */
254 void
255 parse_lease_time(FILE *cfile, time_t *timep)
256 {
257 	const char *errstr;
258 	char *val;
259 	uint32_t value;
260 	int token;
261 
262 	token = next_token(&val, cfile);
263 
264 	value = strtonum(val, 0, UINT32_MAX, &errstr);
265 	if (errstr) {
266 		parse_warn("lease time is %s: %s", errstr, val);
267 		skip_to_semi(cfile);
268 		return;
269 	}
270 
271 	parse_semi(cfile);
272 }
273 
274 /*
275  * No BNF for numeric aggregates - that's defined by the caller.  What
276  * this function does is to parse a sequence of numbers separated by the
277  * token specified in separator.  If max is zero, any number of numbers
278  * will be parsed; otherwise, exactly max numbers are expected.  Base
279  * and size tell us how to internalize the numbers once they've been
280  * tokenized.
281  */
282 unsigned char *
283 parse_numeric_aggregate(FILE *cfile, unsigned char *buf, int *max,
284     int separator, int base, int size)
285 {
286 	char *val, *t;
287 	int token, count = 0;
288 	unsigned char *bufp = buf, *s = NULL;
289 	pair c = NULL;
290 
291 	if (!bufp && *max) {
292 		bufp = malloc(*max * size / 8);
293 		if (!bufp)
294 			error("can't allocate space for numeric aggregate");
295 	} else
296 		s = bufp;
297 
298 	do {
299 		if (count) {
300 			token = peek_token(&val, cfile);
301 			if (token != separator) {
302 				if (!*max)
303 					break;
304 				if (token != '{' && token != '}')
305 					token = next_token(&val, cfile);
306 				parse_warn("too few numbers.");
307 				if (token != ';')
308 					skip_to_semi(cfile);
309 				return (NULL);
310 			}
311 			token = next_token(&val, cfile);
312 		}
313 		token = next_token(&val, cfile);
314 
315 		if (token == EOF) {
316 			parse_warn("unexpected end of file");
317 			break;
318 		}
319 		if (token != TOK_NUMBER && token != TOK_NUMBER_OR_NAME) {
320 			parse_warn("expecting numeric value.");
321 			skip_to_semi(cfile);
322 			return (NULL);
323 		}
324 		/*
325 		 * If we can, convert the number now; otherwise, build a
326 		 * linked list of all the numbers.
327 		 */
328 		if (s) {
329 			convert_num(s, val, base, size);
330 			s += size / 8;
331 		} else {
332 			t = strdup(val);
333 			if (t == NULL)
334 				error("no temp space for number.");
335 			c = cons(t, c);
336 		}
337 	} while (++count != *max);
338 
339 	/* If we had to cons up a list, convert it now. */
340 	if (c) {
341 		bufp = malloc(count * size / 8);
342 		if (!bufp)
343 			error("can't allocate space for numeric aggregate.");
344 		s = bufp + count - size / 8;
345 		*max = count;
346 	}
347 	while (c) {
348 		pair		cdr = c->cdr;
349 		convert_num(s, (char *)c->car, base, size);
350 		s -= size / 8;
351 		/* Free up temp space. */
352 		free(c->car);
353 		free(c);
354 		c = cdr;
355 	}
356 	return (bufp);
357 }
358 
359 void
360 convert_num(unsigned char *buf, char *str, int base, int size)
361 {
362 	int negative = 0, tval, max;
363 	u_int32_t val = 0;
364 	char *ptr = str;
365 
366 	if (*ptr == '-') {
367 		negative = 1;
368 		ptr++;
369 	}
370 
371 	/* If base wasn't specified, figure it out from the data. */
372 	if (!base) {
373 		if (ptr[0] == '0') {
374 			if (ptr[1] == 'x') {
375 				base = 16;
376 				ptr += 2;
377 			} else if (isascii((unsigned char)ptr[1]) &&
378 			    isdigit((unsigned char)ptr[1])) {
379 				base = 8;
380 				ptr += 1;
381 			} else
382 				base = 10;
383 		} else
384 			base = 10;
385 	}
386 
387 	do {
388 		tval = *ptr++;
389 		/* XXX assumes ASCII... */
390 		if (tval >= 'a')
391 			tval = tval - 'a' + 10;
392 		else if (tval >= 'A')
393 			tval = tval - 'A' + 10;
394 		else if (tval >= '0')
395 			tval -= '0';
396 		else {
397 			warning("Bogus number: %s.", str);
398 			break;
399 		}
400 		if (tval >= base) {
401 			warning("Bogus number: %s: digit %d not in base %d",
402 			    str, tval, base);
403 			break;
404 		}
405 		val = val * base + tval;
406 	} while (*ptr);
407 
408 	if (negative)
409 		max = (1 << (size - 1));
410 	else
411 		max = (1 << (size - 1)) + ((1 << (size - 1)) - 1);
412 	if (val > max) {
413 		switch (base) {
414 		case 8:
415 			warning("value %s%o exceeds max (%d) for precision.",
416 			    negative ? "-" : "", val, max);
417 			break;
418 		case 16:
419 			warning("value %s%x exceeds max (%d) for precision.",
420 			    negative ? "-" : "", val, max);
421 			break;
422 		default:
423 			warning("value %s%u exceeds max (%d) for precision.",
424 			    negative ? "-" : "", val, max);
425 			break;
426 		}
427 	}
428 
429 	if (negative) {
430 		switch (size) {
431 		case 8:
432 			*buf = -(unsigned long)val;
433 			break;
434 		case 16:
435 			putShort(buf, -(unsigned long)val);
436 			break;
437 		case 32:
438 			putLong(buf, -(unsigned long)val);
439 			break;
440 		default:
441 			warning("Unexpected integer size: %d", size);
442 			break;
443 		}
444 	} else {
445 		switch (size) {
446 		case 8:
447 			*buf = (u_int8_t)val;
448 			break;
449 		case 16:
450 			putUShort(buf, (u_int16_t)val);
451 			break;
452 		case 32:
453 			putULong(buf, val);
454 			break;
455 		default:
456 			warning("Unexpected integer size: %d", size);
457 			break;
458 		}
459 	}
460 }
461 
462 /*
463  * date :== NUMBER NUMBER SLASH NUMBER SLASH NUMBER
464  *		NUMBER COLON NUMBER COLON NUMBER UTC SEMI
465  *
466  * Dates are always in UTC; first number is day of week; next is
467  * year/month/day; next is hours:minutes:seconds on a 24-hour
468  * clock.
469  */
470 time_t
471 parse_date(FILE *cfile)
472 {
473 	struct tm tm;
474 	char timestr[26]; /* "w yyyy/mm/dd hh:mm:ss UTC" */
475 	char *val, *p;
476 	size_t n;
477 	time_t guess;
478 	int token;
479 
480 	memset(timestr, 0, sizeof(timestr));
481 
482 	do {
483 		token = peek_token(NULL, cfile);
484 		switch (token) {
485 		case TOK_NAME:
486 		case TOK_NUMBER:
487 		case TOK_NUMBER_OR_NAME:
488 		case '/':
489 		case ':':
490 			token = next_token(&val, cfile);
491 			n = strlcat(timestr, val, sizeof(timestr));
492 			if (n >= sizeof(timestr)) {
493 				/* XXX Will break after year 9999! */
494 				parse_warn("time string too long");
495 				skip_to_semi(cfile);
496 				return (0);
497 			}
498 			break;
499 		case';':
500 			break;
501 		default:
502 			parse_warn("invalid time string");
503 			skip_to_semi(cfile);
504 			return (0);
505 		}
506 	} while (token != ';');
507 
508 	parse_semi(cfile);
509 
510 	memset(&tm, 0, sizeof(tm));	/* 'cuz strptime ignores tm_isdt. */
511 	p = strptime(timestr, DB_TIMEFMT, &tm);
512 	if (p == NULL || *p != '\0') {
513 		p = strptime(timestr, OLD_DB_TIMEFMT, &tm);
514 		if (p == NULL || *p != '\0') {
515 			parse_warn("unparseable time string");
516 			return (0);
517 		}
518 	}
519 
520 	guess = timegm(&tm);
521 	if (guess == -1) {
522 		parse_warn("time could not be represented");
523 		return (0);
524 	}
525 
526 	return (guess);
527 }
528