xref: /freebsd/contrib/sendmail/src/parseaddr.c (revision a91a246563dffa876a52f53a98de4af9fa364c52)
1 /*
2  * Copyright (c) 1998-2006 Proofpoint, Inc. and its suppliers.
3  *	All rights reserved.
4  * Copyright (c) 1983, 1995-1997 Eric P. Allman.  All rights reserved.
5  * Copyright (c) 1988, 1993
6  *	The Regents of the University of California.  All rights reserved.
7  *
8  * By using this file, you agree to the terms and conditions set
9  * forth in the LICENSE file which can be found at the top level of
10  * the sendmail distribution.
11  *
12  */
13 
14 #include <sendmail.h>
15 
16 SM_RCSID("@(#)$Id: parseaddr.c,v 8.407 2013-11-22 20:51:56 ca Exp $")
17 
18 #include <sm/sendmail.h>
19 #include <sm/ixlen.h>
20 #include "map.h"
21 
22 static void	allocaddr __P((ADDRESS *, int, char *, ENVELOPE *));
23 static int	callsubr __P((char**, int, ENVELOPE *));
24 static char	*map_lookup __P((STAB *, char *, char **, int *, ENVELOPE *));
25 static ADDRESS	*buildaddr __P((char **, ADDRESS *, int, ENVELOPE *));
26 static bool	hasctrlchar __P((register char *, bool, bool));
27 
28 /* replacement for illegal characters in addresses */
29 #define BAD_CHAR_REPLACEMENT	'?'
30 
31 /*
32 **  PARSEADDR -- Parse an address
33 **
34 **	Parses an address and breaks it up into three parts: a
35 **	net to transmit the message on, the host to transmit it
36 **	to, and a user on that host.  These are loaded into an
37 **	ADDRESS header with the values squirreled away if necessary.
38 **	The "user" part may not be a real user; the process may
39 **	just reoccur on that machine.  For example, on a machine
40 **	with an arpanet connection, the address
41 **		csvax.bill@berkeley
42 **	will break up to a "user" of 'csvax.bill' and a host
43 **	of 'berkeley' -- to be transmitted over the arpanet.
44 **
45 **	Parameters:
46 **		addr -- the address to parse. [i]
47 **		a -- a pointer to the address descriptor buffer.
48 **			If NULL, an address will be created.
49 **		flags -- describe detail for parsing.  See RF_ definitions
50 **			in sendmail.h.
51 **		delim -- the character to terminate the address, passed
52 **			to prescan.
53 **		delimptr -- if non-NULL, set to the location of the
54 **			delim character that was found.
55 **		e -- the envelope that will contain this address.
56 **		isrcpt -- true if the address denotes a recipient; false
57 **			indicates a sender.
58 **
59 **	Returns:
60 **		A pointer to the address descriptor header (`a' if
61 **			`a' is non-NULL).
62 **		NULL on error.
63 **
64 **	Side Effects:
65 **		e->e_to = addr
66 */
67 
68 /* following delimiters are inherent to the internal algorithms */
69 #define DELIMCHARS	"()<>,;\r\n"	/* default word delimiters */
70 
71 ADDRESS *
72 parseaddr(addr, a, flags, delim, delimptr, e, isrcpt)
73 	char *addr;
74 	register ADDRESS *a;
75 	int flags;
76 	int delim;
77 	char **delimptr;
78 	register ENVELOPE *e;
79 	bool isrcpt;
80 {
81 	char **pvp;
82 	auto char *delimptrbuf;
83 	bool qup;
84 	char pvpbuf[PSBUFSIZE];
85 
86 	/*
87 	**  Initialize and prescan address.
88 	*/
89 #if _FFR_8BITENVADDR
90 	if (bitset(RF_IS_EXT, flags) && addr != NULL)
91 	{
92 		int len;
93 
94 		addr = quote_internal_chars(addr, NULL, &len, NULL);
95 	}
96 #endif
97 
98 	e->e_to = addr;
99 	if (tTd(20, 1))
100 		sm_dprintf("\n--parseaddr(%s)\n", addr);
101 
102 	if (delimptr == NULL)
103 		delimptr = &delimptrbuf;
104 
105 	pvp = prescan(addr, delim, pvpbuf, sizeof(pvpbuf), delimptr,
106 			ExtTokenTab, false);
107 	if (pvp == NULL)
108 	{
109 		if (tTd(20, 1))
110 			sm_dprintf("parseaddr-->NULL\n");
111 		return NULL;
112 	}
113 
114 	if (invalidaddr(addr, delim == '\0' ? NULL : *delimptr, isrcpt))
115 	{
116 		if (tTd(20, 1))
117 			sm_dprintf("parseaddr-->bad address\n");
118 		return NULL;
119 	}
120 
121 	/*
122 	**  Save addr if we are going to have to.
123 	**
124 	**	We have to do this early because there is a chance that
125 	**	the map lookups in the rewriting rules could clobber
126 	**	static memory somewhere.
127 	*/
128 
129 	if (bitset(RF_COPYPADDR, flags) && addr != NULL)
130 	{
131 		char savec = **delimptr;
132 
133 		if (savec != '\0')
134 			**delimptr = '\0';
135 		e->e_to = addr = sm_rpool_strdup_x(e->e_rpool, addr);
136 		if (savec != '\0')
137 			**delimptr = savec;
138 	}
139 
140 	/*
141 	**  Apply rewriting rules.
142 	**	Ruleset 0 does basic parsing.  It must resolve.
143 	*/
144 
145 	qup = false;
146 	e->e_flags |= EF_SECURE;
147 	if (REWRITE(pvp, 3, e) == EX_TEMPFAIL)
148 		qup = true;
149 	if (REWRITE(pvp, 0, e) == EX_TEMPFAIL)
150 		qup = true;
151 
152 	/*
153 	**  Build canonical address from pvp.
154 	*/
155 
156 	a = buildaddr(pvp, a, flags, e);
157 #if _FFR_8BITENVADDR
158 	if (NULL != a->q_user)
159 	{
160 		int len;
161 
162 		a->q_user = quote_internal_chars(a->q_user, NULL, &len, e->e_rpool); /* EAI: ok */
163 	}
164 #endif
165 
166 	if (hasctrlchar(a->q_user, isrcpt, true))
167 	{
168 		if (tTd(20, 1))
169 			sm_dprintf("parseaddr-->bad q_user\n");
170 
171 		/*
172 		**  Just mark the address as bad so DSNs work.
173 		**  hasctrlchar() has to make sure that the address
174 		**  has been sanitized, e.g., shortened.
175 		*/
176 
177 		a->q_state = QS_BADADDR;
178 	}
179 
180 	/*
181 	**  Make local copies of the host & user and then
182 	**  transport them out.
183 	*/
184 
185 	allocaddr(a, flags, addr, e);
186 	e->e_flags &= ~EF_SECURE;
187 	if (QS_IS_BADADDR(a->q_state))
188 	{
189 		/* weed out bad characters in the printable address too */
190 		(void) hasctrlchar(a->q_paddr, isrcpt, false);
191 		return a;
192 	}
193 
194 	/*
195 	**  Select a queue directory for recipient addresses.
196 	**	This is done here and in split_across_queue_groups(),
197 	**	but the latter applies to addresses after aliasing,
198 	**	and only if splitting is done.
199 	*/
200 
201 	if ((a->q_qgrp == NOAQGRP || a->q_qgrp == ENVQGRP) &&
202 	    !bitset(RF_SENDERADDR|RF_HEADERADDR|RF_RM_ADDR, flags) &&
203 	    OpMode != MD_INITALIAS)
204 	{
205 		int r;
206 
207 		/* call ruleset which should return a queue group name */
208 		r = rscap(RS_QUEUEGROUP, a->q_user, NULL, e, &pvp, pvpbuf,
209 			  sizeof(pvpbuf));
210 		if (r == EX_OK &&
211 		    pvp != NULL && pvp[0] != NULL &&
212 		    (pvp[0][0] & 0377) == CANONNET &&
213 		    pvp[1] != NULL && pvp[1][0] != '\0')
214 		{
215 			r = name2qid(pvp[1]);
216 			if (r == NOQGRP && LogLevel > 10)
217 				sm_syslog(LOG_INFO, NOQID,
218 					"can't find queue group name %s, selection ignored",
219 					pvp[1]);
220 			if (tTd(20, 4) && r != NOQGRP)
221 				sm_syslog(LOG_INFO, NOQID,
222 					"queue group name %s -> %d",
223 					pvp[1], r);
224 			a->q_qgrp = r == NOQGRP ? ENVQGRP : r;
225 		}
226 	}
227 
228 	/*
229 	**  If there was a parsing failure, mark it for queueing.
230 	*/
231 
232 	if (qup && OpMode != MD_INITALIAS)
233 	{
234 		char *msg = "Transient parse error -- message queued for future delivery";
235 
236 		if (e->e_sendmode == SM_DEFER)
237 			msg = "Deferring message until queue run";
238 		if (tTd(20, 1))
239 			sm_dprintf("parseaddr: queueing message\n");
240 		message("%s", msg);
241 		if (e->e_message == NULL && e->e_sendmode != SM_DEFER)
242 			e->e_message = sm_rpool_strdup_x(e->e_rpool, msg);
243 		a->q_state = QS_QUEUEUP;
244 		a->q_status = "4.4.3";
245 	}
246 
247 	/*
248 	**  Compute return value.
249 	*/
250 
251 	if (tTd(20, 1))
252 	{
253 		sm_dprintf("parseaddr-->");
254 		printaddr(sm_debug_file(), a, false);
255 	}
256 
257 	return a;
258 }
259 
260 /*
261 **  INVALIDADDR -- check for address containing characters used for macros
262 **
263 **	Parameters:
264 **		addr -- the address to check.
265 **		  note: this is the complete address (including display part)
266 **		delimptr -- if non-NULL: end of address to check, i.e.,
267 **			a pointer in the address string.
268 **		isrcpt -- true iff the address is for a recipient.
269 **
270 **	Returns:
271 **		true -- if the address has characters that are reserved
272 **			for macros or is too long.
273 **		false -- otherwise.
274 */
275 
276 bool
277 invalidaddr(addr, delimptr, isrcpt)
278 	register char *addr;
279 	char *delimptr;
280 	bool isrcpt;
281 {
282 	bool result = false;
283 	char savedelim = '\0';
284 	char *b = addr;
285 	XLENDECL
286 
287 	if (delimptr != NULL)
288 	{
289 		/* delimptr points to the end of the address to test */
290 		savedelim = *delimptr;
291 		if (savedelim != '\0')	/* if that isn't '\0' already: */
292 			*delimptr = '\0';	/* set it */
293 	}
294 	for (; *addr != '\0'; addr++)
295 	{
296 #if !USE_EAI
297 		if (!EightBitAddrOK && (*addr & 0340) == 0200)
298 		{
299 			setstat(EX_USAGE);
300 			result = true;
301 			*addr = BAD_CHAR_REPLACEMENT;
302 		}
303 #endif
304 		XLEN(*addr);
305 		if (xlen > MAXNAME - 1)	/* EAI:ok */
306 		{
307 			char saved = *addr;
308 
309 			*addr = '\0';
310 			usrerr("553 5.1.0 Address \"%s\" too long (%d bytes max)",
311 			       b, MAXNAME - 1);	/* EAI:ok */
312 			*addr = saved;
313 			result = true;
314 			goto delim;
315 		}
316 	}
317 #if USE_EAI
318 	/* check for valid UTF8 string? */
319 #endif
320 	if (result)
321 	{
322 		if (isrcpt)
323 			usrerr("501 5.1.3 8-bit character in mailbox address \"%s\"",
324 			       b);
325 		else
326 			usrerr("501 5.1.7 8-bit character in mailbox address \"%s\"",
327 			       b);
328 	}
329 delim:
330 	if (delimptr != NULL && savedelim != '\0')
331 		*delimptr = savedelim;	/* restore old character at delimptr */
332 	return result;
333 }
334 
335 /*
336 **  HASCTRLCHAR -- check for address containing meta-characters
337 **
338 **  Checks that the address contains no meta-characters, and contains
339 **  no "non-printable" characters unless they are quoted or escaped.
340 **  Quoted or escaped characters are literals.
341 **
342 **	Parameters:
343 **		addr -- the address to check.
344 **		isrcpt -- true if the address is for a recipient; false
345 **			indicates a from.
346 **		complain -- true if an error should issued if the address
347 **			is invalid and should be "repaired".
348 **
349 **	Returns:
350 **		true -- if the address has any "weird" characters or
351 **			non-printable characters or if a quote is unbalanced.
352 **		false -- otherwise.
353 **
354 **	Side Effects:
355 **		Might invoke shorten_rfc822_string() to change addr in place.
356 */
357 
358 static bool
359 hasctrlchar(addr, isrcpt, complain)
360 	register char *addr;
361 	bool isrcpt, complain;
362 {
363 	bool quoted = false;
364 	char *result = NULL;
365 	char *b = addr;
366 	XLENDECL
367 
368 	if (addr == NULL)
369 		return false;
370 	for (; *addr != '\0'; addr++)
371 	{
372 		XLEN(*addr);
373 		if (xlen > MAXNAME - 1)	/* EAI:ok */
374 		{
375 			if (complain)
376 			{
377 				(void) shorten_rfc822_string(b, MAXNAME - 1);	/* EAI:ok */
378 				usrerr("553 5.1.0 Address \"%s\" too long (%d bytes max)",
379 				       b, MAXNAME - 1);	/* EAI:ok */
380 				return true;
381 			}
382 			result = "too long";
383 		}
384 		if (!quoted && ((unsigned char)*addr < 32 || *addr == 127))
385 		{
386 			result = "non-printable character";
387 			*addr = BAD_CHAR_REPLACEMENT;
388 			continue;
389 		}
390 		if (*addr == '"')
391 			quoted = !quoted;
392 		else if (*addr == '\\')
393 		{
394 			/* XXX Generic problem: no '\0' in strings. */
395 			if (*++addr == '\0')
396 			{
397 				result = "trailing \\ character";
398 				*--addr = BAD_CHAR_REPLACEMENT;
399 				break;
400 			}
401 		}
402 		if (!SMTP_UTF8 && !EightBitAddrOK && (*addr & 0340) == 0200)
403 		{
404 			setstat(EX_USAGE);
405 			result = "8-bit character";
406 			*addr = BAD_CHAR_REPLACEMENT;
407 			continue;
408 		}
409 	}
410 	if (quoted)
411 		result = "unbalanced quote"; /* unbalanced quote */
412 	if (result != NULL && complain)
413 	{
414 		if (isrcpt)
415 			usrerr("501 5.1.3 Syntax error in mailbox address \"%s\" (%s)",
416 			       b, result);
417 		else
418 			usrerr("501 5.1.7 Syntax error in mailbox address \"%s\" (%s)",
419 			       b, result);
420 	}
421 	return result != NULL;
422 }
423 
424 /*
425 **  ALLOCADDR -- do local allocations of address on demand.
426 **
427 **	Also lowercases the host name if requested.
428 **
429 **	Parameters:
430 **		a -- the address to reallocate.
431 **		flags -- the copy flag (see RF_ definitions in sendmail.h
432 **			for a description).
433 **		paddr -- the printname of the address.
434 **		e -- envelope
435 **
436 **	Returns:
437 **		none.
438 **
439 **	Side Effects:
440 **		Copies portions of a into local buffers as requested.
441 */
442 
443 static void
444 allocaddr(a, flags, paddr, e)
445 	register ADDRESS *a;
446 	int flags;
447 	char *paddr;
448 	ENVELOPE *e;
449 {
450 	if (tTd(24, 4))
451 		sm_dprintf("allocaddr: flags=%x, paddr=%s, ad=%d\n", flags, paddr, bitset(EF_SECURE, e->e_flags));
452 
453 	a->q_paddr = paddr;
454 
455 	if (a->q_user == NULL)
456 		a->q_user = "";
457 	if (a->q_host == NULL)
458 		a->q_host = "";
459 
460 	if (bitset(EF_SECURE, e->e_flags))
461 		a->q_flags |= QSECURE;
462 
463 	if (bitset(RF_COPYPARSE, flags))
464 	{
465 		a->q_host = sm_rpool_strdup_x(e->e_rpool, a->q_host);
466 		if (a->q_user != a->q_paddr)
467 			a->q_user = sm_rpool_strdup_x(e->e_rpool, a->q_user);
468 	}
469 
470 	if (a->q_paddr == NULL)
471 		a->q_paddr = sm_rpool_strdup_x(e->e_rpool, a->q_user);
472 	a->q_qgrp = NOAQGRP;
473 }
474 
475 /*
476 **  PRESCAN -- Prescan name and make it canonical
477 **
478 **	Scans a name and turns it into a set of tokens.  This process
479 **	deletes blanks and comments (in parentheses) (if the token type
480 **	for left paren is SPC).
481 **
482 **	This routine knows about quoted strings and angle brackets.
483 **
484 **	There are certain subtleties to this routine.  The one that
485 **	comes to mind now is that backslashes on the ends of names
486 **	are silently stripped off; this is intentional.  The problem
487 **	is that some versions of sndmsg (like at LBL) set the kill
488 **	character to something other than @ when reading addresses;
489 **	so people type "csvax.eric\@berkeley" -- which screws up the
490 **	berknet mailer.
491 **
492 **	Parameters:
493 **		addr -- the name to chomp.
494 **		delim -- the delimiter for the address, normally
495 **			'\0' or ','; \0 is accepted in any case.
496 **			If '\t' then we are reading the .cf file.
497 **		pvpbuf -- place to put the saved text -- note that
498 **			the pointers are static.
499 **		pvpbsize -- size of pvpbuf.
500 **		delimptr -- if non-NULL, set to the location of the
501 **			terminating delimiter.
502 **		toktab -- if set, a token table to use for parsing.
503 **			If NULL, use the default table.
504 **		ignore -- if true, ignore unbalanced addresses
505 **
506 **	Returns:
507 **		A pointer to a vector of tokens.
508 **		NULL on error.
509 */
510 
511 /* states and character types */
512 #define OPR		0	/* operator */
513 #define ATM		1	/* atom */
514 #define QST		2	/* in quoted string */
515 #define SPC		3	/* chewing up spaces */
516 #define ONE		4	/* pick up one character */
517 #define ILL		5	/* illegal character */
518 
519 #define NSTATES	6	/* number of states */
520 #define TYPE		017	/* mask to select state type */
521 
522 /* meta bits for table */
523 #define M		020	/* meta character; don't pass through */
524 #define B		040	/* cause a break */
525 #define MB		M|B	/* meta-break */
526 
527 static short StateTab[NSTATES][NSTATES] =
528 {
529    /*	oldst	chtype>	OPR	ATM	QST	SPC	ONE	ILL	*/
530 	/*OPR*/	{	OPR|B,	ATM|B,	QST|B,	SPC|MB,	ONE|B,	ILL|MB	},
531 	/*ATM*/	{	OPR|B,	ATM,	QST|B,	SPC|MB,	ONE|B,	ILL|MB	},
532 	/*QST*/	{	QST,	QST,	OPR,	QST,	QST,	QST	},
533 	/*SPC*/	{	OPR,	ATM,	QST,	SPC|M,	ONE,	ILL|MB	},
534 	/*ONE*/	{	OPR,	OPR,	OPR,	OPR,	OPR,	ILL|MB	},
535 	/*ILL*/	{	OPR|B,	ATM|B,	QST|B,	SPC|MB,	ONE|B,	ILL|M	}
536 };
537 
538 /* these all get modified with the OperatorChars */
539 
540 /* token type table for external strings */
541 unsigned char	ExtTokenTab[256] =
542 {
543     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
544 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,SPC,SPC,SPC,SPC,SPC,ATM,ATM,
545     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
546 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
547     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
548 	SPC,ATM,QST,ATM,ATM,ATM,ATM,ATM, SPC,SPC,ATM,ATM,ATM,ATM,ATM,ATM,
549     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
550 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
551     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
552 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
553     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
554 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
555     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
556 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
557     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
558 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
559 
560     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
561 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
562     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
563 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
564     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
565 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
566     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
567 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
568     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
569 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
570     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
571 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
572     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
573 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
574     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
575 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM
576 };
577 
578 /* token type table for internal strings */
579 unsigned char	IntTokenTab[256] =
580 {
581     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
582 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,SPC,SPC,SPC,SPC,SPC,ATM,ATM,
583     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
584 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
585     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
586 	SPC,ATM,QST,ATM,ATM,ATM,ATM,ATM, SPC,SPC,ATM,ATM,ATM,ATM,ATM,ATM,
587     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
588 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
589     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
590 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
591     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
592 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
593     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
594 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
595     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
596 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
597 
598     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
599 	OPR,OPR,ONE,OPR,OPR,OPR,OPR,OPR, OPR,OPR,OPR,OPR,OPR,OPR,OPR,OPR,
600     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
601 	OPR,OPR,OPR,ONE,ONE,ONE,OPR,OPR, OPR,OPR,OPR,OPR,OPR,OPR,OPR,OPR,
602     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
603 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
604     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
605 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
606     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
607 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
608     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
609 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
610     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
611 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
612     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
613 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ONE
614 };
615 
616 /* token type table for MIME parsing */
617 unsigned char	MimeTokenTab[256] =
618 {
619     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
620 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,SPC,SPC,SPC,SPC,SPC,ILL,ILL,
621     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
622 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
623     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
624 	SPC,ATM,QST,ATM,ATM,ATM,ATM,ATM, SPC,SPC,ATM,ATM,OPR,ATM,ATM,OPR,
625     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
626 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,OPR,OPR,OPR,OPR,OPR,OPR,
627     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
628 	OPR,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
629     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
630 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,OPR,OPR,OPR,ATM,ATM,
631     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
632 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
633     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
634 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
635 
636     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
637 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
638     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
639 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
640     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
641 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
642     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
643 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
644     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
645 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
646     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
647 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
648     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
649 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL,
650     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
651 	ILL,ILL,ILL,ILL,ILL,ILL,ILL,ILL, ILL,ILL,ILL,ILL,ILL,ILL,ILL,ONE
652 };
653 
654 /* token type table: don't strip comments */
655 unsigned char	TokTypeNoC[256] =
656 {
657     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
658 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,SPC,SPC,SPC,SPC,SPC,ATM,ATM,
659     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
660 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
661     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
662 	SPC,ATM,QST,ATM,ATM,ATM,ATM,ATM, OPR,OPR,ATM,ATM,ATM,ATM,ATM,ATM,
663     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
664 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
665     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
666 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
667     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
668 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
669     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
670 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
671     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
672 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
673 
674     /*	nul soh stx etx eot enq ack bel  bs  ht  nl  vt  np  cr  so  si   */
675 	OPR,OPR,ONE,OPR,OPR,OPR,OPR,OPR, OPR,OPR,OPR,OPR,OPR,OPR,OPR,OPR,
676     /*	dle dc1 dc2 dc3 dc4 nak syn etb  can em  sub esc fs  gs  rs  us   */
677 	OPR,OPR,OPR,ONE,ONE,ONE,OPR,OPR, OPR,OPR,OPR,OPR,OPR,OPR,OPR,OPR,
678     /*  sp  !   "   #   $   %   &   '    (   )   *   +   ,   -   .   /    */
679 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
680     /*	0   1   2   3   4   5   6   7    8   9   :   ;   <   =   >   ?    */
681 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
682     /*	@   A   B   C   D   E   F   G    H   I   J   K   L   M   N   O    */
683 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
684     /*  P   Q   R   S   T   U   V   W    X   Y   Z   [   \   ]   ^   _    */
685 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
686     /*	`   a   b   c   d   e   f   g    h   i   j   k   l   m   n   o    */
687 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM,
688     /*  p   q   r   s   t   u   v   w    x   y   z   {   |   }   ~   del  */
689 	ATM,ATM,ATM,ATM,ATM,ATM,ATM,ATM, ATM,ATM,ATM,ATM,ATM,ATM,ATM,ONE
690 };
691 
692 #define NOCHAR		(-1)	/* signal nothing in lookahead token */
693 
694 char **
695 prescan(addr, delim, pvpbuf, pvpbsize, delimptr, toktab, ignore)
696 	char *addr;
697 	int delim;
698 	char pvpbuf[];
699 	int pvpbsize;
700 	char **delimptr;
701 	unsigned char *toktab;
702 	bool ignore;
703 {
704 	register char *p;
705 	register char *q;
706 	register int c;
707 	char **avp;
708 	bool bslashmode;
709 	bool route_syntax;
710 	int cmntcnt;
711 	int anglecnt;
712 	char *tok;
713 	int state;
714 	int newstate;
715 	char *saveto = CurEnv->e_to;
716 	static char *av[MAXATOM + 1];
717 	static bool firsttime = true;
718 	XLENDECL
719 
720 	if (firsttime)
721 	{
722 		/* initialize the token type table */
723 		char obuf[50];
724 
725 		firsttime = false;
726 		if (OperatorChars == NULL)
727 		{
728 			if (ConfigLevel < 7)
729 				OperatorChars = macvalue('o', CurEnv);
730 			if (OperatorChars == NULL)
731 				OperatorChars = ".:@[]";
732 		}
733 		expand(OperatorChars, obuf, sizeof(obuf) - sizeof(DELIMCHARS),
734 		       CurEnv);
735 		(void) sm_strlcat(obuf, DELIMCHARS, sizeof(obuf));
736 		for (p = obuf; *p != '\0'; p++)
737 		{
738 			if (IntTokenTab[*p & 0xff] == ATM)
739 				IntTokenTab[*p & 0xff] = OPR;
740 			if (ExtTokenTab[*p & 0xff] == ATM)
741 				ExtTokenTab[*p & 0xff] = OPR;
742 			if (TokTypeNoC[*p & 0xff] == ATM)
743 				TokTypeNoC[*p & 0xff] = OPR;
744 		}
745 	}
746 	if (toktab == NULL)
747 		toktab = ExtTokenTab;
748 
749 	/* make sure error messages don't have garbage on them */
750 	errno = 0;
751 
752 	q = pvpbuf;
753 	bslashmode = false;
754 	route_syntax = false;
755 	cmntcnt = 0;
756 	anglecnt = 0;
757 	avp = av;
758 	state = ATM;
759 	c = NOCHAR;
760 	p = addr;
761 	CurEnv->e_to = p;
762 	if (tTd(22, 11))
763 	{
764 		sm_dprintf("prescan: ");
765 		xputs(sm_debug_file(), p);
766 		sm_dprintf("\n");
767 	}
768 
769 	do
770 	{
771 		/* read a token */
772 		tok = q;
773 		XLENRESET;
774 		for (;;)
775 		{
776 			/* store away any old lookahead character */
777 			if (c != NOCHAR && !bslashmode)
778 			{
779 				/* see if there is room */
780 				if (q >= &pvpbuf[pvpbsize - 5])
781 				{
782 	addrtoolong:
783 					usrerr("553 5.1.1 Address too long");
784 
785 					/* ilenx()? */
786 					if (strlen(addr) > MAXNAME)
787 						addr[MAXNAME] = '\0';
788 	returnnull:
789 					if (delimptr != NULL)
790 					{
791 						if (p > addr)
792 							--p;
793 						*delimptr = p;
794 					}
795 					CurEnv->e_to = saveto;
796 					if (tTd(22, 12))
797 						sm_dprintf("prescan: ==> NULL\n");
798 					return NULL;
799 				}
800 
801 				/* squirrel it away */
802 #if !ALLOW_255
803 				if ((char) c == (char) -1 && !tTd(82, 101) &&
804 				    !EightBitAddrOK)
805 					c &= 0x7f;
806 #endif /* !ALLOW_255 */
807 				XLEN(c);
808 				*q++ = c;
809 			}
810 
811 			/* read a new input character */
812 			c = (*p++) & 0x00ff;
813 			if (c == '\0')
814 			{
815 				/* diagnose and patch up bad syntax */
816 				if (ignore)
817 					break;
818 				else if (state == QST)
819 				{
820 					usrerr("553 Unbalanced '\"'");
821 					c = '"';
822 				}
823 				else if (cmntcnt > 0)
824 				{
825 					usrerr("553 Unbalanced '('");
826 					c = ')';
827 				}
828 				else if (anglecnt > 0)
829 				{
830 					c = '>';
831 					usrerr("553 Unbalanced '<'");
832 				}
833 				else
834 					break;
835 
836 				p--;
837 			}
838 			else if (c == delim && cmntcnt <= 0 && state != QST)
839 			{
840 				if (anglecnt <= 0)
841 					break;
842 
843 				/* special case for better error management */
844 				if (delim == ',' && !route_syntax && !ignore)
845 				{
846 					usrerr("553 Unbalanced '<'");
847 					c = '>';
848 					p--;
849 				}
850 			}
851 
852 			if (tTd(22, 101))
853 				sm_dprintf("c=%c, s=%d; ", c, state);
854 
855 			/* chew up special characters */
856 			*q = '\0';
857 			if (bslashmode)
858 			{
859 				bslashmode = false;
860 
861 				/* kludge \! for naive users */
862 				if (cmntcnt > 0)
863 				{
864 					c = NOCHAR;
865 					continue;
866 				}
867 				else if (c != '!' || state == QST)
868 				{
869 					/* see if there is room */
870 					if (q >= &pvpbuf[pvpbsize - 5])
871 						goto addrtoolong;
872 					*q++ = '\\';
873 					XLEN('\\');
874 					continue;
875 				}
876 			}
877 
878 			if (c == '\\')
879 			{
880 				bslashmode = true;
881 			}
882 			else if (state == QST)
883 			{
884 				/* EMPTY */
885 				/* do nothing, just avoid next clauses */
886 			}
887 			else if (c == '(' && toktab['('] == SPC)
888 			{
889 				cmntcnt++;
890 				c = NOCHAR;
891 			}
892 			else if (c == ')' && toktab['('] == SPC)
893 			{
894 				if (cmntcnt <= 0)
895 				{
896 					if (!ignore)
897 					{
898 						usrerr("553 Unbalanced ')'");
899 						c = NOCHAR;
900 					}
901 				}
902 				else
903 					cmntcnt--;
904 			}
905 			else if (cmntcnt > 0)
906 			{
907 				c = NOCHAR;
908 			}
909 			else if (c == '<')
910 			{
911 				char *ptr = p;
912 
913 				anglecnt++;
914 				while (SM_ISSPACE(*ptr))
915 					ptr++;
916 				if (*ptr == '@')
917 					route_syntax = true;
918 			}
919 			else if (c == '>')
920 			{
921 				if (anglecnt <= 0)
922 				{
923 					if (!ignore)
924 					{
925 						usrerr("553 Unbalanced '>'");
926 						c = NOCHAR;
927 					}
928 				}
929 				else
930 					anglecnt--;
931 				route_syntax = false;
932 			}
933 			else if (delim == ' ' && SM_ISSPACE(c))
934 				c = ' ';
935 
936 			if (c == NOCHAR)
937 				continue;
938 
939 			/* see if this is end of input */
940 			if (c == delim && anglecnt <= 0 && state != QST)
941 				break;
942 
943 			newstate = StateTab[state][toktab[c & 0xff]];
944 			if (tTd(22, 101))
945 				sm_dprintf("ns=%02o\n", newstate);
946 			state = newstate & TYPE;
947 			if (state == ILL)
948 			{
949 				if (isascii(c) && isprint(c))
950 					usrerr("553 Illegal character %c", c);
951 				else
952 					usrerr("553 Illegal character 0x%02x",
953 					       c & 0x0ff);
954 			}
955 			if (bitset(M, newstate))
956 				c = NOCHAR;
957 			if (bitset(B, newstate))
958 				break;
959 		}
960 
961 		/* new token */
962 		if (tok != q)
963 		{
964 			/* see if there is room */
965 			if (q >= &pvpbuf[pvpbsize - 5])
966 				goto addrtoolong;
967 			*q++ = '\0';
968 			if (tTd(22, 36))
969 			{
970 				sm_dprintf("tok=");
971 				xputs(sm_debug_file(), tok);
972 				sm_dprintf("\n");
973 			}
974 			if (avp >= &av[MAXATOM])
975 			{
976 				usrerr("553 5.1.0 prescan: too many tokens");
977 				goto returnnull;
978 			}
979 			if (xlen > MAXNAME)	/* EAI:ok */
980 			{
981 				usrerr("553 5.1.0 prescan: token too long");
982 				goto returnnull;
983 			}
984 			*avp++ = tok;
985 		}
986 	} while (c != '\0' && (c != delim || anglecnt > 0));
987 	*avp = NULL;
988 	if (delimptr != NULL)
989 	{
990 		if (p > addr)
991 			p--;
992 		*delimptr = p;
993 	}
994 	if (tTd(22, 12))
995 	{
996 		sm_dprintf("prescan==>");
997 		printav(sm_debug_file(), av);
998 	}
999 	CurEnv->e_to = saveto;
1000 	if (av[0] == NULL)
1001 	{
1002 		if (tTd(22, 1))
1003 			sm_dprintf("prescan: null leading token\n");
1004 		return NULL;
1005 	}
1006 	return av;
1007 }
1008 /*
1009 **  REWRITE -- apply rewrite rules to token vector.
1010 **
1011 **	This routine is an ordered production system.  Each rewrite
1012 **	rule has a LHS (called the pattern) and a RHS (called the
1013 **	rewrite); 'rwr' points the the current rewrite rule.
1014 **
1015 **	For each rewrite rule, 'avp' points the address vector we
1016 **	are trying to match against, and 'pvp' points to the pattern.
1017 **	If pvp points to a special match value (MATCHZANY, MATCHANY,
1018 **	MATCHONE, MATCHCLASS, MATCHNCLASS) then the address in avp
1019 **	matched is saved away in the match vector (pointed to by 'mvp').
1020 **
1021 **	When a match between avp & pvp does not match, we try to
1022 **	back out.  If we back up over MATCHONE, MATCHCLASS, or MATCHNCLASS
1023 **	we must also back out the match in mvp.  If we reach a
1024 **	MATCHANY or MATCHZANY we just extend the match and start
1025 **	over again.
1026 **
1027 **	When we finally match, we rewrite the address vector
1028 **	and try over again.
1029 **
1030 **	Parameters:
1031 **		pvp -- pointer to token vector. [i]
1032 **		ruleset -- the ruleset to use for rewriting.
1033 **		reclevel -- recursion level (to catch loops).
1034 **		e -- the current envelope.
1035 **		maxatom -- maximum length of buffer (usually MAXATOM)
1036 **
1037 **	Returns:
1038 **		A status code.  If EX_TEMPFAIL, higher level code should
1039 **			attempt recovery.
1040 **
1041 **	Side Effects:
1042 **		pvp is modified.
1043 */
1044 
1045 struct match
1046 {
1047 	char	**match_first;		/* first token matched */
1048 	char	**match_last;		/* last token matched */
1049 	char	**match_pattern;	/* pointer to pattern */
1050 };
1051 
1052 int
1053 rewrite(pvp, ruleset, reclevel, e, maxatom)
1054 	char **pvp;
1055 	int ruleset;
1056 	int reclevel;
1057 	register ENVELOPE *e;
1058 	int maxatom;
1059 {
1060 	register char *ap;		/* address pointer */
1061 	register char *rp;		/* rewrite pointer */
1062 	register char *rulename;	/* ruleset name */
1063 	register char *prefix;
1064 	register char **avp;		/* address vector pointer */
1065 	register char **rvp;		/* rewrite vector pointer */
1066 	register struct match *mlp;	/* cur ptr into mlist */
1067 	register struct rewrite *rwr;	/* pointer to current rewrite rule */
1068 	int ruleno;			/* current rule number */
1069 	int rstat = EX_OK;		/* return status */
1070 	int loopcount;
1071 	struct match mlist[MAXMATCH];	/* stores match on LHS */
1072 	char *npvp[MAXATOM + 1];	/* temporary space for rebuild */
1073 	char buf[MAXLINE];
1074 	char name[6];
1075 
1076 	/*
1077 	**  mlp will not exceed mlist[] because readcf enforces
1078 	**	the upper limit of entries when reading rulesets.
1079 	*/
1080 
1081 	if (ruleset < 0 || ruleset >= MAXRWSETS)
1082 	{
1083 		syserr("554 5.3.5 rewrite: illegal ruleset number %d", ruleset);
1084 		return EX_CONFIG;
1085 	}
1086 	rulename = RuleSetNames[ruleset];
1087 	if (rulename == NULL)
1088 	{
1089 		(void) sm_snprintf(name, sizeof(name), "%d", ruleset);
1090 		rulename = name;
1091 	}
1092 	if (OpMode == MD_TEST)
1093 		prefix = "";
1094 	else
1095 		prefix = "rewrite: ruleset ";
1096 	if (OpMode == MD_TEST)
1097 	{
1098 		(void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
1099 				     "%s%-16.16s   input:", prefix, rulename);
1100 		printav(smioout, pvp);
1101 	}
1102 	else if (tTd(21, 1))
1103 	{
1104 		sm_dprintf("%s%-16.16s   input:", prefix, rulename);
1105 		printav(sm_debug_file(), pvp);
1106 	}
1107 	if (reclevel++ > MaxRuleRecursion)
1108 	{
1109 		syserr("rewrite: excessive recursion (max %d), ruleset %s",
1110 			MaxRuleRecursion, rulename);
1111 		return EX_CONFIG;
1112 	}
1113 	if (pvp == NULL)
1114 		return EX_USAGE;
1115 	if (maxatom <= 0)
1116 		return EX_USAGE;
1117 
1118 	/*
1119 	**  Run through the list of rewrite rules, applying
1120 	**	any that match.
1121 	*/
1122 
1123 	ruleno = 1;
1124 	loopcount = 0;
1125 	for (rwr = RewriteRules[ruleset]; rwr != NULL; )
1126 	{
1127 		int status;
1128 
1129 		/* if already canonical, quit now */
1130 		if (pvp[0] != NULL && (pvp[0][0] & 0377) == CANONNET)
1131 			break;
1132 
1133 		if (tTd(21, 12))
1134 		{
1135 			if (tTd(21, 15))
1136 				sm_dprintf("-----trying rule (line %d):",
1137 				       rwr->r_line);
1138 			else
1139 				sm_dprintf("-----trying rule:");
1140 			printav(sm_debug_file(), rwr->r_lhs);
1141 		}
1142 
1143 		/* try to match on this rule */
1144 		mlp = mlist;
1145 		rvp = rwr->r_lhs;
1146 		avp = pvp;
1147 		if (++loopcount > 100)
1148 		{
1149 			syserr("554 5.3.5 Infinite loop in ruleset %s, rule %d",
1150 				rulename, ruleno);
1151 			if (tTd(21, 1))
1152 			{
1153 				sm_dprintf("workspace: ");
1154 				printav(sm_debug_file(), pvp);
1155 			}
1156 			break;
1157 		}
1158 
1159 		while ((ap = *avp) != NULL || *rvp != NULL)
1160 		{
1161 			rp = *rvp;
1162 			if (tTd(21, 35))
1163 			{
1164 				sm_dprintf("ADVANCE rp=");
1165 				xputs(sm_debug_file(), rp);
1166 				sm_dprintf(", ap=");
1167 				xputs(sm_debug_file(), ap);
1168 				sm_dprintf("\n");
1169 			}
1170 			if (rp == NULL)
1171 			{
1172 				/* end-of-pattern before end-of-address */
1173 				goto backup;
1174 			}
1175 			if (ap == NULL &&
1176 			    (rp[0] & 0377) != MATCHZANY &&
1177 			    (rp[0] & 0377) != MATCHZERO)
1178 			{
1179 				/* end-of-input with patterns left */
1180 				goto backup;
1181 			}
1182 
1183 			switch (rp[0] & 0377)
1184 			{
1185 			  case MATCHCLASS:
1186 				/* match any phrase in a class */
1187 				mlp->match_pattern = rvp;
1188 				mlp->match_first = avp;
1189 	extendclass:
1190 				ap = *avp;
1191 				if (ap == NULL)
1192 					goto backup;
1193 				mlp->match_last = avp++;
1194 				cataddr(mlp->match_first, mlp->match_last,
1195 					buf, sizeof(buf), '\0', true);
1196 				if (!wordinclass(buf, rp[1]))
1197 				{
1198 					if (tTd(21, 36))
1199 					{
1200 						sm_dprintf("EXTEND  rp=");
1201 						xputs(sm_debug_file(), rp);
1202 						sm_dprintf(", ap=");
1203 						xputs(sm_debug_file(), ap);
1204 						sm_dprintf("\n");
1205 					}
1206 					goto extendclass;
1207 				}
1208 				if (tTd(21, 36))
1209 					sm_dprintf("CLMATCH\n");
1210 				mlp++;
1211 				break;
1212 
1213 			  case MATCHNCLASS:
1214 				/* match any token not in a class */
1215 				if (wordinclass(ap, rp[1]))
1216 					goto backup;
1217 
1218 				/* FALLTHROUGH */
1219 
1220 			  case MATCHONE:
1221 			  case MATCHANY:
1222 				/* match exactly one token */
1223 				mlp->match_pattern = rvp;
1224 				mlp->match_first = avp;
1225 				mlp->match_last = avp++;
1226 				mlp++;
1227 				break;
1228 
1229 			  case MATCHZANY:
1230 				/* match zero or more tokens */
1231 				mlp->match_pattern = rvp;
1232 				mlp->match_first = avp;
1233 				mlp->match_last = avp - 1;
1234 				mlp++;
1235 				break;
1236 
1237 			  case MATCHZERO:
1238 				/* match zero tokens */
1239 				break;
1240 
1241 			  case MACRODEXPAND:
1242 				/*
1243 				**  Match against run-time macro.
1244 				**  This algorithm is broken for the
1245 				**  general case (no recursive macros,
1246 				**  improper tokenization) but should
1247 				**  work for the usual cases.
1248 				*/
1249 
1250 				ap = macvalue(rp[1], e);
1251 				mlp->match_first = avp;
1252 				if (tTd(21, 2))
1253 					sm_dprintf("rewrite: LHS $&{%s} => \"%s\"\n",
1254 						macname(rp[1]),
1255 						ap == NULL ? "(NULL)" : ap);
1256 
1257 				if (ap == NULL)
1258 					break;
1259 				while (*ap != '\0')
1260 				{
1261 					if (*avp == NULL ||
1262 					    sm_strncasecmp(ap, *avp,
1263 							   strlen(*avp)) != 0)
1264 					{
1265 						/* no match */
1266 						avp = mlp->match_first;
1267 						goto backup;
1268 					}
1269 					ap += strlen(*avp++);
1270 				}
1271 
1272 				/* match */
1273 				break;
1274 
1275 			  default:
1276 				/* must have exact match */
1277 				if (!SM_STRCASEEQ(rp, ap))
1278 					goto backup;
1279 				avp++;
1280 				break;
1281 			}
1282 
1283 			/* successful match on this token */
1284 			rvp++;
1285 			continue;
1286 
1287 	  backup:
1288 			/* match failed -- back up */
1289 			while (--mlp >= mlist)
1290 			{
1291 				rvp = mlp->match_pattern;
1292 				rp = *rvp;
1293 				avp = mlp->match_last + 1;
1294 				ap = *avp;
1295 
1296 				if (tTd(21, 36))
1297 				{
1298 					sm_dprintf("BACKUP  rp=");
1299 					xputs(sm_debug_file(), rp);
1300 					sm_dprintf(", ap=");
1301 					xputs(sm_debug_file(), ap);
1302 					sm_dprintf("\n");
1303 				}
1304 
1305 				if (ap == NULL)
1306 				{
1307 					/* run off the end -- back up again */
1308 					continue;
1309 				}
1310 
1311 				if ((rp[0] & 0377) == MATCHANY ||
1312 				    (rp[0] & 0377) == MATCHZANY)
1313 				{
1314 					/* extend binding and continue */
1315 					mlp->match_last = avp++;
1316 					rvp++;
1317 					mlp++;
1318 					break;
1319 				}
1320 				if ((rp[0] & 0377) == MATCHCLASS)
1321 				{
1322 					/* extend binding and try again */
1323 					mlp->match_last = avp;
1324 					goto extendclass;
1325 				}
1326 			}
1327 
1328 			if (mlp < mlist)
1329 			{
1330 				/* total failure to match */
1331 				break;
1332 			}
1333 		}
1334 
1335 		/*
1336 		**  See if we successfully matched
1337 		*/
1338 
1339 		if (mlp < mlist || *rvp != NULL)
1340 		{
1341 			if (tTd(21, 10))
1342 				sm_dprintf("----- rule fails\n");
1343 			rwr = rwr->r_next;
1344 			ruleno++;
1345 			loopcount = 0;
1346 			continue;
1347 		}
1348 
1349 		rvp = rwr->r_rhs;
1350 		if (tTd(21, 12))
1351 		{
1352 			sm_dprintf("-----rule matches:");
1353 			printav(sm_debug_file(), rvp);
1354 		}
1355 
1356 		rp = *rvp;
1357 		if (rp != NULL)
1358 		{
1359 			if ((rp[0] & 0377) == CANONUSER)
1360 			{
1361 				rvp++;
1362 				rwr = rwr->r_next;
1363 				ruleno++;
1364 				loopcount = 0;
1365 			}
1366 			else if ((rp[0] & 0377) == CANONHOST)
1367 			{
1368 				rvp++;
1369 				rwr = NULL;
1370 			}
1371 		}
1372 
1373 		/* substitute */
1374 		for (avp = npvp; *rvp != NULL; rvp++)
1375 		{
1376 			register struct match *m;
1377 			register char **pp;
1378 
1379 			rp = *rvp;
1380 			if ((rp[0] & 0377) == MATCHREPL)
1381 			{
1382 				/* substitute from LHS */
1383 				m = &mlist[rp[1] - '1'];
1384 				if (m < mlist || m >= mlp)
1385 				{
1386 					syserr("554 5.3.5 rewrite: ruleset %s: replacement $%c out of bounds",
1387 						rulename, rp[1]);
1388 					return EX_CONFIG;
1389 				}
1390 				if (tTd(21, 15))
1391 				{
1392 					sm_dprintf("$%c:", rp[1]);
1393 					pp = m->match_first;
1394 					while (pp <= m->match_last)
1395 					{
1396 						sm_dprintf(" %p=\"", (void *)*pp);
1397 						sm_dflush();
1398 						sm_dprintf("%s\"", *pp++);
1399 					}
1400 					sm_dprintf("\n");
1401 				}
1402 				pp = m->match_first;
1403 				while (pp <= m->match_last)
1404 				{
1405 					if (avp >= &npvp[maxatom])
1406 						goto toolong;
1407 					*avp++ = *pp++;
1408 				}
1409 			}
1410 			else
1411 			{
1412 				/* some sort of replacement */
1413 				if (avp >= &npvp[maxatom])
1414 				{
1415 	toolong:
1416 					syserr("554 5.3.0 rewrite: expansion too long");
1417 					if (LogLevel > 9)
1418 						sm_syslog(LOG_ERR, e->e_id,
1419 							"rewrite: expansion too long, ruleset=%s, ruleno=%d",
1420 							rulename, ruleno);
1421 					return EX_DATAERR;
1422 				}
1423 				if ((rp[0] & 0377) != MACRODEXPAND)
1424 				{
1425 					/* vanilla replacement from RHS */
1426 					*avp++ = rp;
1427 				}
1428 				else
1429 				{
1430 					/* $&{x} replacement */
1431 					char *mval = macvalue(rp[1], e);
1432 					char **xpvp;
1433 					size_t trsize = 0;
1434 					static size_t pvpb1_size = 0;
1435 					static char **pvpb1 = NULL;
1436 					char pvpbuf[PSBUFSIZE];
1437 
1438 					if (tTd(21, 2))
1439 						sm_dprintf("rewrite: RHS $&{%s} => \"%s\"\n",
1440 							macname(rp[1]),
1441 							mval == NULL ? "(NULL)" : mval);
1442 					if (SM_IS_EMPTY(mval))
1443 						continue;
1444 
1445 					/* save the remainder of the input */
1446 					for (xpvp = pvp; *xpvp != NULL; xpvp++)
1447 						trsize += sizeof(*xpvp);
1448 					if (trsize > pvpb1_size)
1449 					{
1450 						if (pvpb1 != NULL)
1451 							sm_free(pvpb1);
1452 						pvpb1 = (char **)
1453 							sm_pmalloc_x(trsize);
1454 						pvpb1_size = trsize;
1455 					}
1456 
1457 					memmove((char *) pvpb1,
1458 						(char *) pvp,
1459 						trsize);
1460 
1461 					/* scan the new replacement */
1462 					xpvp = prescan(mval, '\0', pvpbuf,
1463 						       sizeof(pvpbuf), NULL,
1464 						       NULL, false);
1465 					if (xpvp == NULL)
1466 					{
1467 						/* prescan pre-printed error */
1468 						return EX_DATAERR;
1469 					}
1470 
1471 					/* insert it into the output stream */
1472 					while (*xpvp != NULL)
1473 					{
1474 						if (tTd(21, 19))
1475 							sm_dprintf(" ... %s\n",
1476 								*xpvp);
1477 						*avp++ = sm_rpool_strdup_x(
1478 							e->e_rpool, *xpvp);
1479 						if (avp >= &npvp[maxatom])
1480 							goto toolong;
1481 						xpvp++;
1482 					}
1483 					if (tTd(21, 19))
1484 						sm_dprintf(" ... DONE\n");
1485 
1486 					/* restore the old trailing input */
1487 					memmove((char *) pvp,
1488 						(char *) pvpb1,
1489 						trsize);
1490 				}
1491 			}
1492 		}
1493 		*avp++ = NULL;
1494 
1495 		/*
1496 		**  Check for any hostname/keyword lookups.
1497 		*/
1498 
1499 		for (rvp = npvp; *rvp != NULL; rvp++)
1500 		{
1501 			char **hbrvp;
1502 			char **xpvp;
1503 			size_t trsize;
1504 			char *replac;
1505 			int endtoken;
1506 			bool external;
1507 			STAB *map;
1508 			char *mapname;
1509 			char **key_rvp;
1510 			char **arg_rvp;
1511 			char **default_rvp;
1512 			char cbuf[MAXKEY];
1513 			char *pvpb1[MAXATOM + 1];
1514 			char *argvect[MAX_MAP_ARGS];
1515 			char pvpbuf[PSBUFSIZE];
1516 			char *nullpvp[1];
1517 
1518 			hbrvp = rvp;
1519 			if ((rvp[0][0] & 0377) == HOSTBEGIN)
1520 			{
1521 				endtoken = HOSTEND;
1522 				mapname = "host";
1523 			}
1524 			else if ((rvp[0][0] & 0377) == LOOKUPBEGIN)
1525 			{
1526 				endtoken = LOOKUPEND;
1527 				mapname = *++rvp;
1528 				if (mapname == NULL)
1529 				{
1530 					syserr("554 5.3.0 rewrite: missing mapname");
1531 					/* NOTREACHED */
1532 					SM_ASSERT(0);
1533 				}
1534 			}
1535 			else
1536 				continue;
1537 
1538 			/*
1539 			**  Got a hostname/keyword lookup.
1540 			**
1541 			**	This could be optimized fairly easily.
1542 			*/
1543 
1544 			map = stab(mapname, ST_MAP, ST_FIND);
1545 			if (map == NULL)
1546 				syserr("554 5.3.0 rewrite: map %s not found",
1547 					mapname);
1548 
1549 			/* extract the match part */
1550 			key_rvp = ++rvp;
1551 			if (key_rvp == NULL)
1552 			{
1553 				syserr("554 5.3.0 rewrite: missing key for map %s",
1554 					mapname);
1555 				/* NOTREACHED */
1556 				SM_ASSERT(0);
1557 			}
1558 			default_rvp = NULL;
1559 			arg_rvp = argvect;
1560 			xpvp = NULL;
1561 			replac = pvpbuf;
1562 			while (*rvp != NULL && ((rvp[0][0] & 0377) != endtoken))
1563 			{
1564 				int nodetype = rvp[0][0] & 0377;
1565 
1566 				if (nodetype != CANONHOST &&
1567 				    nodetype != CANONUSER)
1568 				{
1569 					rvp++;
1570 					continue;
1571 				}
1572 
1573 				*rvp++ = NULL;
1574 
1575 				if (xpvp != NULL)
1576 				{
1577 					cataddr(xpvp, NULL, replac,
1578 						&pvpbuf[sizeof(pvpbuf)] - replac,
1579 						'\0', true);
1580 					if (arg_rvp <
1581 					    &argvect[MAX_MAP_ARGS - 1])
1582 						*++arg_rvp = replac;
1583 					replac += strlen(replac) + 1;
1584 					xpvp = NULL;
1585 				}
1586 				switch (nodetype)
1587 				{
1588 				  case CANONHOST:
1589 					xpvp = rvp;
1590 					break;
1591 
1592 				  case CANONUSER:
1593 					default_rvp = rvp;
1594 					break;
1595 				}
1596 			}
1597 			if (*rvp != NULL)
1598 				*rvp++ = NULL;
1599 			if (xpvp != NULL)
1600 			{
1601 				cataddr(xpvp, NULL, replac,
1602 					&pvpbuf[sizeof(pvpbuf)] - replac,
1603 					'\0', true);
1604 				if (arg_rvp < &argvect[MAX_MAP_ARGS - 1])
1605 					*++arg_rvp = replac;
1606 			}
1607 			if (arg_rvp >= &argvect[MAX_MAP_ARGS - 1])
1608 				argvect[MAX_MAP_ARGS - 1] = NULL;
1609 			else
1610 				*++arg_rvp = NULL;
1611 
1612 			/* save the remainder of the input string */
1613 			trsize = (avp - rvp + 1) * sizeof(*rvp);
1614 			memmove((char *) pvpb1, (char *) rvp, trsize);
1615 
1616 			/* look it up */
1617 			cataddr(key_rvp, NULL, cbuf, sizeof(cbuf),
1618 				map == NULL ? '\0' : map->s_map.map_spacesub,
1619 				true);
1620 			argvect[0] = cbuf;
1621 			replac = map_lookup(map, cbuf, argvect, &rstat, e);
1622 			external = replac != NULL;
1623 
1624 			/* if no replacement, use default */
1625 			if (replac == NULL && default_rvp != NULL)
1626 			{
1627 				/* create the default */
1628 				cataddr(default_rvp, NULL, cbuf, sizeof(cbuf),
1629 					'\0', false);
1630 				replac = cbuf;
1631 			}
1632 
1633 			if (replac == NULL)
1634 			{
1635 				xpvp = key_rvp;
1636 			}
1637 			else if (*replac == '\0')
1638 			{
1639 				/* null replacement */
1640 				nullpvp[0] = NULL;
1641 				xpvp = nullpvp;
1642 			}
1643 			else
1644 			{
1645 				/* scan the new replacement */
1646 				xpvp = prescan(replac, '\0', pvpbuf,
1647 					       sizeof(pvpbuf), NULL,
1648 					       external ? NULL : IntTokenTab,
1649 					       false);
1650 				if (xpvp == NULL)
1651 				{
1652 					/* prescan already printed error */
1653 					return EX_DATAERR;
1654 				}
1655 			}
1656 
1657 			/* append it to the token list */
1658 			for (avp = hbrvp; *xpvp != NULL; xpvp++)
1659 			{
1660 				*avp++ = sm_rpool_strdup_x(e->e_rpool, *xpvp);
1661 				if (avp >= &npvp[maxatom])
1662 					goto toolong;
1663 			}
1664 
1665 			/* restore the old trailing information */
1666 			rvp = avp - 1;
1667 			for (xpvp = pvpb1; (*avp++ = *xpvp++) != NULL; )
1668 				if (avp >= &npvp[maxatom])
1669 					goto toolong;
1670 		}
1671 
1672 		/*
1673 		**  Check for subroutine calls.
1674 		*/
1675 
1676 		status = callsubr(npvp, reclevel, e);
1677 		if (rstat == EX_OK || status == EX_TEMPFAIL)
1678 			rstat = status;
1679 
1680 		/* copy vector back into original space. */
1681 		for (avp = npvp; *avp++ != NULL;)
1682 			continue;
1683 		memmove((char *) pvp, (char *) npvp,
1684 		      (int) (avp - npvp) * sizeof(*avp));
1685 
1686 		if (tTd(21, 4))
1687 		{
1688 			sm_dprintf("rewritten as:");
1689 			printav(sm_debug_file(), pvp);
1690 		}
1691 	}
1692 
1693 	if (OpMode == MD_TEST)
1694 	{
1695 		(void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
1696 				     "%s%-16.16s returns:", prefix, rulename);
1697 		printav(smioout, pvp);
1698 	}
1699 	else if (tTd(21, 1))
1700 	{
1701 		sm_dprintf("%s%-16.16s returns:", prefix, rulename);
1702 		printav(sm_debug_file(), pvp);
1703 	}
1704 	return rstat;
1705 }
1706 
1707 /*
1708 **  CALLSUBR -- call subroutines in rewrite vector
1709 **
1710 **	Parameters:
1711 **		pvp -- pointer to token vector.
1712 **		reclevel -- the current recursion level.
1713 **		e -- the current envelope.
1714 **
1715 **	Returns:
1716 **		The status from the subroutine call.
1717 **
1718 **	Side Effects:
1719 **		pvp is modified.
1720 */
1721 
1722 static int
1723 callsubr(pvp, reclevel, e)
1724 	char **pvp;
1725 	int reclevel;
1726 	ENVELOPE *e;
1727 {
1728 	char **avp;
1729 	register int i;
1730 	int subr, j;
1731 	int nsubr;
1732 	int status;
1733 	int rstat = EX_OK;
1734 #define MAX_SUBR	16
1735 	int subrnumber[MAX_SUBR];
1736 	int subrindex[MAX_SUBR];
1737 
1738 	nsubr = 0;
1739 
1740 	/*
1741 	**  Look for subroutine calls in pvp, collect them into subr*[]
1742 	**  We will perform the calls in the next loop, because we will
1743 	**  call the "last" subroutine first to avoid recursive calls
1744 	**  and too much copying.
1745 	*/
1746 
1747 	for (avp = pvp, j = 0; *avp != NULL; avp++, j++)
1748 	{
1749 		if ((avp[0][0] & 0377) == CALLSUBR && avp[1] != NULL)
1750 		{
1751 			stripquotes(avp[1]);
1752 			subr = strtorwset(avp[1], NULL, ST_FIND);
1753 			if (subr < 0)
1754 			{
1755 				syserr("554 5.3.5 Unknown ruleset %s", avp[1]);
1756 				return EX_CONFIG;
1757 			}
1758 
1759 			/*
1760 			**  XXX instead of doing this we could optimize
1761 			**  the rules after reading them: just remove
1762 			**  calls to empty rulesets
1763 			*/
1764 
1765 			/* subroutine is an empty ruleset?  don't call it */
1766 			if (RewriteRules[subr] == NULL)
1767 			{
1768 				if (tTd(21, 3))
1769 					sm_dprintf("-----skip subr %s (%d)\n",
1770 						avp[1], subr);
1771 				for (i = 2; avp[i] != NULL; i++)
1772 					avp[i - 2] = avp[i];
1773 				avp[i - 2] = NULL;
1774 				continue;
1775 			}
1776 			if (++nsubr >= MAX_SUBR)
1777 			{
1778 				syserr("554 5.3.0 Too many subroutine calls (%d max)",
1779 					MAX_SUBR);
1780 				return EX_CONFIG;
1781 			}
1782 			subrnumber[nsubr] = subr;
1783 			subrindex[nsubr] = j;
1784 		}
1785 	}
1786 
1787 	/*
1788 	**  Perform the actual subroutines calls, "last" one first, i.e.,
1789 	**  go from the right to the left through all calls,
1790 	**  do the rewriting in place.
1791 	*/
1792 
1793 	for (; nsubr > 0; nsubr--)
1794 	{
1795 		subr = subrnumber[nsubr];
1796 		avp = pvp + subrindex[nsubr];
1797 
1798 		/* remove the subroutine call and name */
1799 		for (i = 2; avp[i] != NULL; i++)
1800 			avp[i - 2] = avp[i];
1801 		avp[i - 2] = NULL;
1802 
1803 		/*
1804 		**  Now we need to call the ruleset specified for
1805 		**  the subroutine. We can do this in place since
1806 		**  we call the "last" subroutine first.
1807 		*/
1808 
1809 		status = rewrite(avp, subr, reclevel, e,
1810 				MAXATOM - subrindex[nsubr]);
1811 		if (status != EX_OK && status != EX_TEMPFAIL)
1812 			return status;
1813 		if (rstat == EX_OK || status == EX_TEMPFAIL)
1814 			rstat = status;
1815 	}
1816 	return rstat;
1817 }
1818 /*
1819 **  MAP_LOOKUP -- do lookup in map
1820 **
1821 **	Parameters:
1822 **		smap -- the map to use for the lookup.
1823 **		key -- the key to look up. [x]
1824 **		argvect -- arguments to pass to the map lookup. [x]
1825 **		pstat -- a pointer to an integer in which to store the
1826 **			status from the lookup.
1827 **		e -- the current envelope.
1828 **
1829 **	Returns:
1830 **		The result of the lookup.
1831 **		NULL -- if there was no data for the given key.
1832 */
1833 
1834 static char *
1835 map_lookup(smap, key, argvect, pstat, e)
1836 	STAB *smap;
1837 	char key[];
1838 	char **argvect;
1839 	int *pstat;
1840 	ENVELOPE *e;
1841 {
1842 	auto int status = EX_OK;
1843 	MAP *map;
1844 	char *replac;
1845 
1846 	if (smap == NULL)
1847 		return NULL;
1848 
1849 	map = &smap->s_map;
1850 	DYNOPENMAP(map);
1851 	map->map_mflags |= MF_SECURE;	/* default: secure */
1852 
1853 	if (e->e_sendmode == SM_DEFER &&
1854 	    bitset(MF_DEFER, map->map_mflags))
1855 	{
1856 		/* don't do any map lookups */
1857 		if (tTd(60, 1))
1858 			sm_dprintf("map_lookup(%s, %s) => DEFERRED\n",
1859 				smap->s_name, key);
1860 		*pstat = EX_TEMPFAIL;
1861 		return NULL;
1862 	}
1863 
1864 	if (!bitset(MF_KEEPQUOTES, map->map_mflags))
1865 		stripquotes(key);
1866 
1867 	if (tTd(60, 1))
1868 	{
1869 		sm_dprintf("map_lookup(%s, ", smap->s_name);
1870 		xputs(sm_debug_file(), key);
1871 		if (tTd(60, 5))
1872 		{
1873 			int i;
1874 
1875 			for (i = 0; argvect[i] != NULL; i++)
1876 				sm_dprintf(", %%%d=%s", i, argvect[i]);
1877 		}
1878 		sm_dprintf(") => ");
1879 	}
1880 	replac = (*map->map_class->map_lookup)(map, key, argvect, &status);
1881 	if (bitset(MF_SECURE, map->map_mflags))
1882 		map->map_mflags &= ~MF_SECURE;
1883 	else
1884 		e->e_flags &= ~EF_SECURE;
1885 
1886 	if (tTd(60, 1))
1887 		sm_dprintf("%s (%d), ad=%d\n",
1888 			replac != NULL ? replac : "NOT FOUND",
1889 			status, bitset(MF_SECURE, map->map_mflags));
1890 
1891 	/* should recover if status == EX_TEMPFAIL */
1892 	if (status == EX_TEMPFAIL && !bitset(MF_NODEFER, map->map_mflags))
1893 	{
1894 		*pstat = EX_TEMPFAIL;
1895 		if (tTd(60, 1))
1896 			sm_dprintf("map_lookup(%s, %s) tempfail: errno=%d\n",
1897 				smap->s_name, key, errno);
1898 		if (e->e_message == NULL)
1899 		{
1900 			char mbuf[320];
1901 
1902 			(void) sm_snprintf(mbuf, sizeof(mbuf),
1903 				"%.80s map: lookup (%s): deferred",
1904 				smap->s_name,
1905 				shortenstring(key, MAXSHORTSTR));
1906 			e->e_message = sm_rpool_strdup_x(e->e_rpool, mbuf);
1907 		}
1908 	}
1909 	if (status == EX_TEMPFAIL && map->map_tapp != NULL)
1910 	{
1911 		size_t i = strlen(key) + strlen(map->map_tapp) + 1;
1912 		static char *rwbuf = NULL;
1913 		static size_t rwbuflen = 0;
1914 
1915 		if (i > rwbuflen)
1916 		{
1917 			if (rwbuf != NULL)
1918 				sm_free(rwbuf);
1919 			rwbuflen = i;
1920 			rwbuf = (char *) sm_pmalloc_x(rwbuflen);
1921 		}
1922 		(void) sm_strlcpyn(rwbuf, rwbuflen, 2, key, map->map_tapp);
1923 		if (tTd(60, 4))
1924 			sm_dprintf("map_lookup tempfail: returning \"%s\"\n",
1925 				rwbuf);
1926 		return rwbuf;
1927 	}
1928 	return replac;
1929 }
1930 /*
1931 **  INITERRMAILERS -- initialize error and discard mailers
1932 **
1933 **	Parameters:
1934 **		none.
1935 **
1936 **	Returns:
1937 **		none.
1938 **
1939 **	Side Effects:
1940 **		initializes error and discard mailers.
1941 */
1942 
1943 static MAILER discardmailer;
1944 static MAILER errormailer;
1945 static char *discardargv[] = { "DISCARD", NULL };
1946 static char *errorargv[] = { "ERROR", NULL };
1947 
1948 void
1949 initerrmailers()
1950 {
1951 	if (discardmailer.m_name == NULL)
1952 	{
1953 		/* initialize the discard mailer */
1954 		discardmailer.m_name = "*discard*";
1955 		discardmailer.m_mailer = "DISCARD";
1956 		discardmailer.m_argv = discardargv;
1957 	}
1958 	if (errormailer.m_name == NULL)
1959 	{
1960 		/* initialize the bogus mailer */
1961 		errormailer.m_name = "*error*";
1962 		errormailer.m_mailer = "ERROR";
1963 		errormailer.m_argv = errorargv;
1964 	}
1965 }
1966 /*
1967 **  BUILDADDR -- build address from token vector.
1968 **
1969 **	Parameters:
1970 **		tv -- token vector.
1971 **		a -- pointer to address descriptor to fill.
1972 **			If NULL, one will be allocated.
1973 **		flags -- info regarding whether this is a sender or
1974 **			a recipient.
1975 **		e -- the current envelope.
1976 **
1977 **	Returns:
1978 **		NULL if there was an error.
1979 **		'a' otherwise.
1980 **
1981 **	Side Effects:
1982 **		fills in 'a'
1983 */
1984 
1985 static struct errcodes
1986 {
1987 	char	*ec_name;		/* name of error code */
1988 	int	ec_code;		/* numeric code */
1989 } ErrorCodes[] =
1990 {
1991 	{ "usage",		EX_USAGE	},
1992 	{ "nouser",		EX_NOUSER	},
1993 	{ "nohost",		EX_NOHOST	},
1994 	{ "unavailable",	EX_UNAVAILABLE	},
1995 	{ "software",		EX_SOFTWARE	},
1996 	{ "tempfail",		EX_TEMPFAIL	},
1997 	{ "protocol",		EX_PROTOCOL	},
1998 	{ "config",		EX_CONFIG	},
1999 	{ NULL,			EX_UNAVAILABLE	}
2000 };
2001 
2002 static ADDRESS *
2003 buildaddr(tv, a, flags, e)
2004 	register char **tv;
2005 	register ADDRESS *a;
2006 	int flags;
2007 	register ENVELOPE *e;
2008 {
2009 	bool tempfail = false;
2010 	int maxatom;
2011 	struct mailer **mp;
2012 	register struct mailer *m;
2013 	register char *p;
2014 	char *mname;
2015 	char **hostp;
2016 	char hbuf[MAXNAME + 1];	/* EAI:ok */
2017 	static char ubuf[MAXNAME_I + 2];
2018 #if _FFR_8BITENVADDR
2019 	int len;
2020 #endif
2021 
2022 	if (tTd(24, 5))
2023 	{
2024 		sm_dprintf("buildaddr, flags=%x, tv=", flags);
2025 		printav(sm_debug_file(), tv);
2026 	}
2027 
2028 	maxatom = MAXATOM;
2029 	if (a == NULL)
2030 		a = (ADDRESS *) sm_rpool_malloc_x(e->e_rpool, sizeof(*a));
2031 	memset((char *) a, '\0', sizeof(*a));
2032 	hbuf[0] = '\0';
2033 
2034 	/* set up default error return flags */
2035 	a->q_flags |= DefaultNotify;
2036 
2037 	/* figure out what net/mailer to use */
2038 	if (*tv == NULL || (**tv & 0377) != CANONNET)
2039 	{
2040 		syserr("554 5.3.5 buildaddr: no mailer in parsed address");
2041 badaddr:
2042 		/*
2043 		**  ExitStat may have been set by an earlier map open
2044 		**  failure (to a permanent error (EX_OSERR) in syserr())
2045 		**  so we also need to check if this particular $#error
2046 		**  return wanted a 4XX failure.
2047 		**
2048 		**  XXX the real fix is probably to set ExitStat correctly,
2049 		**  i.e., to EX_TEMPFAIL if the map open is just a temporary
2050 		**  error.
2051 		*/
2052 
2053 		if (ExitStat == EX_TEMPFAIL || tempfail)
2054 			a->q_state = QS_QUEUEUP;
2055 		else
2056 		{
2057 			a->q_state = QS_BADADDR;
2058 			a->q_mailer = &errormailer;
2059 		}
2060 		return a;
2061 	}
2062 	mname = *++tv;
2063 	--maxatom;
2064 
2065 	/* extract host and user portions */
2066 	if (*++tv != NULL && (**tv & 0377) == CANONHOST)
2067 	{
2068 		hostp = ++tv;
2069 		--maxatom;
2070 	}
2071 	else
2072 		hostp = NULL;
2073 	--maxatom;
2074 	while (*tv != NULL && (**tv & 0377) != CANONUSER)
2075 	{
2076 		tv++;
2077 		--maxatom;
2078 	}
2079 	if (*tv == NULL)
2080 	{
2081 		syserr("554 5.3.5 buildaddr: no user");
2082 		goto badaddr;
2083 	}
2084 	if (tv == hostp)
2085 		hostp = NULL;
2086 	else if (hostp != NULL)
2087 		cataddr(hostp, tv - 1, hbuf, sizeof(hbuf), '\0', true);
2088 	cataddr(++tv, NULL, ubuf, sizeof(ubuf), ' ', false);
2089 	--maxatom;
2090 
2091 	/* save away the host name */
2092 	if (SM_STRCASEEQ(mname, "error"))
2093 	{
2094 		/* Set up triplet for use by -bv */
2095 		a->q_mailer = &errormailer;
2096 		a->q_user = sm_rpool_strdup_x(e->e_rpool, ubuf);
2097 		/* XXX wrong place? */
2098 
2099 		if (hostp != NULL)
2100 		{
2101 			register struct errcodes *ep;
2102 
2103 			a->q_host = sm_rpool_strdup_x(e->e_rpool, hbuf);
2104 			if (strchr(hbuf, '.') != NULL)
2105 			{
2106 				a->q_status = sm_rpool_strdup_x(e->e_rpool,
2107 								hbuf);
2108 				setstat(dsntoexitstat(hbuf));
2109 			}
2110 			else if (isascii(hbuf[0]) && isdigit(hbuf[0]))
2111 			{
2112 				setstat(atoi(hbuf));
2113 			}
2114 			else
2115 			{
2116 				for (ep = ErrorCodes; ep->ec_name != NULL; ep++)
2117 					if (SM_STRCASEEQ(ep->ec_name, hbuf))
2118 						break;
2119 				setstat(ep->ec_code);
2120 			}
2121 		}
2122 		else
2123 		{
2124 			a->q_host = NULL;
2125 			setstat(EX_UNAVAILABLE);
2126 		}
2127 		stripquotes(ubuf);
2128 		if (ISSMTPCODE(ubuf) && ubuf[3] == ' ')
2129 		{
2130 			char fmt[16];
2131 			int off;
2132 
2133 			if ((off = isenhsc(ubuf + 4, ' ')) > 0)
2134 			{
2135 				ubuf[off + 4] = '\0';
2136 				off += 5;
2137 			}
2138 			else
2139 			{
2140 				off = 4;
2141 				ubuf[3] = '\0';
2142 			}
2143 			(void) sm_strlcpyn(fmt, sizeof(fmt), 2, ubuf, " %s");
2144 			if (off > 4)
2145 				usrerr(fmt, ubuf + off);
2146 			else if (isenhsc(hbuf, '\0') > 0)
2147 				usrerrenh(hbuf, fmt, ubuf + off);
2148 			else
2149 				usrerr(fmt, ubuf + off);
2150 			/* XXX ubuf[off - 1] = ' '; */
2151 			if (ubuf[0] == '4')
2152 				tempfail = true;
2153 		}
2154 		else
2155 		{
2156 			usrerr("553 5.3.0 %s", ubuf);
2157 		}
2158 		goto badaddr;
2159 	}
2160 
2161 	for (mp = Mailer; (m = *mp++) != NULL; )
2162 	{
2163 		if (SM_STRCASEEQ(m->m_name, mname))
2164 			break;
2165 	}
2166 	if (m == NULL)
2167 	{
2168 		syserr("554 5.3.5 buildaddr: unknown mailer %s", mname);
2169 		goto badaddr;
2170 	}
2171 	a->q_mailer = m;
2172 
2173 	/* figure out what host (if any) */
2174 	if (hostp == NULL)
2175 	{
2176 		if (!bitnset(M_LOCALMAILER, m->m_flags))
2177 		{
2178 			syserr("554 5.3.5 buildaddr: no host");
2179 			goto badaddr;
2180 		}
2181 		a->q_host = NULL;
2182 	}
2183 	else
2184 		a->q_host = sm_rpool_strdup_x(e->e_rpool, hbuf);
2185 
2186 	/* figure out the user */
2187 	p = ubuf;
2188 	if (bitnset(M_CHECKUDB, m->m_flags) && *p == '@')
2189 	{
2190 		p++;
2191 		tv++;
2192 		--maxatom;
2193 		a->q_flags |= QNOTREMOTE;
2194 	}
2195 
2196 	/* do special mapping for local mailer */
2197 	if (*p == '"')
2198 		p++;
2199 	if (*p == '|' && bitnset(M_CHECKPROG, m->m_flags))
2200 		a->q_mailer = m = ProgMailer;
2201 	else if (*p == '/' && bitnset(M_CHECKFILE, m->m_flags))
2202 		a->q_mailer = m = FileMailer;
2203 	else if (*p == ':' && bitnset(M_CHECKINCLUDE, m->m_flags))
2204 	{
2205 		/* may be :include: */
2206 		stripquotes(ubuf);
2207 		if (sm_strncasecmp(ubuf, ":include:", 9) == 0)
2208 		{
2209 			/* if :include:, don't need further rewriting */
2210 			a->q_mailer = m = InclMailer;
2211 			a->q_user = sm_rpool_strdup_x(e->e_rpool, &ubuf[9]);
2212 			return a;
2213 		}
2214 	}
2215 
2216 	/* rewrite according recipient mailer rewriting rules */
2217 #if _FFR_8BITENVADDR
2218 	p = quote_internal_chars(a->q_host, NULL, &len, NULL);
2219 #else
2220 	p = a->q_host;
2221 #endif
2222 	macdefine(&e->e_macro, A_PERM, 'h', p);
2223 
2224 	if (ConfigLevel >= 10 ||
2225 	    !bitset(RF_SENDERADDR|RF_HEADERADDR, flags))
2226 	{
2227 		/* sender addresses done later */
2228 		(void) rewrite(tv, 2, 0, e, maxatom);
2229 		if (m->m_re_rwset > 0)
2230 		       (void) rewrite(tv, m->m_re_rwset, 0, e, maxatom);
2231 	}
2232 	(void) rewrite(tv, 4, 0, e, maxatom);
2233 
2234 	/* save the result for the command line/RCPT argument */
2235 	cataddr(tv, NULL, ubuf, sizeof(ubuf), '\0', true);
2236 	a->q_user = sm_rpool_strdup_x(e->e_rpool, ubuf);
2237 
2238 	/*
2239 	**  Do mapping to lower case as requested by mailer
2240 	*/
2241 
2242 	if (a->q_host != NULL && !bitnset(M_HST_UPPER, m->m_flags))
2243 		makelower_a(&a->q_host, e->e_rpool);
2244 	if (!bitnset(M_USR_UPPER, m->m_flags))
2245 		makelower_a(&a->q_user, e->e_rpool);
2246 
2247 	if (tTd(24, 6))
2248 	{
2249 		sm_dprintf("buildaddr => ");
2250 		printaddr(sm_debug_file(), a, false);
2251 	}
2252 	return a;
2253 }
2254 
2255 /*
2256 **  CATADDR -- concatenate pieces of addresses (putting in <LWSP> subs)
2257 **
2258 **	Parameters:
2259 **		pvp -- parameter vector to rebuild. [i]
2260 **		evp -- last parameter to include.  Can be NULL to
2261 **			use entire pvp.
2262 **		buf -- buffer to build the string into.
2263 **		sz -- size of buf.
2264 **		spacesub -- the space separator character;
2265 **			'\0': SpaceSub.
2266 **			NOSPACESEP: no separator
2267 **		external -- convert to external form?
2268 **			(undo "meta quoting")
2269 **
2270 **	Returns:
2271 **		none.
2272 **
2273 **	Side Effects:
2274 **		Destroys buf.
2275 **
2276 **	Notes:
2277 **	There are two formats for strings: internal and external.
2278 **	The external format is just an eight-bit clean string (no
2279 **	null bytes, everything else OK).  The internal format can
2280 **	include sendmail metacharacters.  The special character
2281 **	METAQUOTE essentially quotes the character following, stripping
2282 **	it of all special semantics.
2283 **
2284 **	The cataddr routine needs to be aware of whether it is producing
2285 **	an internal or external form as output (it only takes internal
2286 **	form as input).
2287 */
2288 
2289 void
2290 cataddr(pvp, evp, buf, sz, spacesub, external)
2291 	char **pvp;
2292 	char **evp;
2293 	char *buf;
2294 	register int sz;
2295 	int spacesub;
2296 	bool external;
2297 {
2298 	bool oatomtok, natomtok;
2299 	char *p;
2300 
2301 	oatomtok = natomtok = false;
2302 	if (tTd(59, 14))
2303 	{
2304 		sm_dprintf("cataddr(%d) <==", external);
2305 		printav(sm_debug_file(), pvp);
2306 	}
2307 
2308 	if (sz <= 0)
2309 		return;
2310 
2311 	if (spacesub == '\0')
2312 		spacesub = SpaceSub;
2313 
2314 	if (pvp == NULL)
2315 	{
2316 		*buf = '\0';
2317 		return;
2318 	}
2319 	p = buf;
2320 	sz -= 2;
2321 	while (*pvp != NULL && sz > 0)
2322 	{
2323 		char *q;
2324 
2325 		natomtok = (IntTokenTab[**pvp & 0xff] == ATM);
2326 		if (oatomtok && natomtok && spacesub != NOSPACESEP)
2327 		{
2328 			*p++ = spacesub;
2329 			if (--sz <= 0)
2330 				break;
2331 		}
2332 		for (q = *pvp; *q != '\0'; )
2333 		{
2334 			int c;
2335 
2336 			if (--sz <= 0)
2337 				break;
2338 			*p++ = c = *q++;
2339 
2340 			/*
2341 			**  If the current character (c) is METAQUOTE and we
2342 			**  want the "external" form and the next character
2343 			**  is not NUL, then overwrite METAQUOTE with that
2344 			**  character (i.e., METAQUOTE ch is changed to ch).
2345 			**  p[-1] is used because p is advanced (above).
2346 			*/
2347 
2348 			if ((c & 0377) == METAQUOTE && external && *q != '\0')
2349 				p[-1] = *q++;
2350 		}
2351 		if (sz <= 0)
2352 			break;
2353 		oatomtok = natomtok;
2354 		if (pvp++ == evp)
2355 			break;
2356 	}
2357 
2358 #if 0
2359 	/*
2360 	**  Silently truncate long strings: even though this doesn't
2361 	**  seem like a good idea it is necessary because header checks
2362 	**  send the whole header value to rscheck() and hence rewrite().
2363 	**  The latter however sometimes uses a "short" buffer (e.g.,
2364 	**  cbuf[MAXNAME + 1]) to call cataddr() which then triggers this
2365 	**  error function.  One possible fix to the problem is to pass
2366 	**  flags to rscheck() and rewrite() to distinguish the various
2367 	**  calls and only trigger the error if necessary.  For now just
2368 	**  undo the change from 8.13.0.
2369 	*/
2370 
2371 	if (sz <= 0)
2372 		usrerr("cataddr: string too long");
2373 #endif
2374 	*p = '\0';
2375 
2376 	if (tTd(59, 14))
2377 		sm_dprintf("  cataddr => %s\n", str2prt(buf));
2378 }
2379 
2380 /*
2381 **  SAMEADDR -- Determine if two addresses are the same
2382 **
2383 **	This is not just a straight comparison -- if the mailer doesn't
2384 **	care about the host we just ignore it, etc.
2385 **
2386 **	Parameters:
2387 **		a, b -- pointers to the internal forms to compare.
2388 **
2389 **	Returns:
2390 **		true -- they represent the same mailbox.
2391 **		false -- they don't.
2392 **
2393 **	Side Effects:
2394 **		none.
2395 */
2396 
2397 bool
2398 sameaddr(a, b)
2399 	register ADDRESS *a;
2400 	register ADDRESS *b;
2401 {
2402 	register ADDRESS *ca, *cb;
2403 
2404 	/* if they don't have the same mailer, forget it */
2405 	if (a->q_mailer != b->q_mailer)
2406 		return false;
2407 
2408 	/*
2409 	**  Addresses resolving to error mailer
2410 	**  should not be considered identical
2411 	*/
2412 
2413 	if (a->q_mailer == &errormailer)
2414 		return false;
2415 
2416 	/* if the user isn't the same, we can drop out */
2417 	if (strcmp(a->q_user, b->q_user) != 0)
2418 		return false;
2419 
2420 	/* do the required flags match? */
2421 	if (!ADDR_FLAGS_MATCH(a, b))
2422 		return false;
2423 
2424 	/* if we have good uids for both but they differ, these are different */
2425 	if (a->q_mailer == ProgMailer)
2426 	{
2427 		ca = getctladdr(a);
2428 		cb = getctladdr(b);
2429 		if (ca != NULL && cb != NULL &&
2430 		    bitset(QGOODUID, ca->q_flags & cb->q_flags) &&
2431 		    ca->q_uid != cb->q_uid)
2432 			return false;
2433 	}
2434 
2435 	/* otherwise compare hosts (but be careful for NULL ptrs) */
2436 	if (a->q_host == b->q_host)
2437 	{
2438 		/* probably both null pointers */
2439 		return true;
2440 	}
2441 	if (a->q_host == NULL || b->q_host == NULL)
2442 	{
2443 		/* only one is a null pointer */
2444 		return false;
2445 	}
2446 	if (strcmp(a->q_host, b->q_host) != 0)
2447 		return false;
2448 
2449 	return true;
2450 }
2451 /*
2452 **  PRINTADDR -- print address (for debugging)
2453 **
2454 **	Parameters:
2455 **		a -- the address to print
2456 **		follow -- follow the q_next chain.
2457 **
2458 **	Returns:
2459 **		none.
2460 **
2461 **	Side Effects:
2462 **		none.
2463 */
2464 
2465 struct qflags
2466 {
2467 	char		*qf_name;
2468 	unsigned long	qf_bit;
2469 };
2470 
2471 /* :'a,.s;^#define \(Q[A-Z]*\)	.*;	{ "\1",	\1	},; */
2472 static struct qflags	AddressFlags[] =
2473 {
2474 	{ "QGOODUID",		QGOODUID	},
2475 	{ "QPRIMARY",		QPRIMARY	},
2476 	{ "QNOTREMOTE",		QNOTREMOTE	},
2477 	{ "QSELFREF",		QSELFREF	},
2478 	{ "QBOGUSSHELL",	QBOGUSSHELL	},
2479 	{ "QUNSAFEADDR",	QUNSAFEADDR	},
2480 	{ "QPINGONSUCCESS",	QPINGONSUCCESS	},
2481 	{ "QPINGONFAILURE",	QPINGONFAILURE	},
2482 	{ "QPINGONDELAY",	QPINGONDELAY	},
2483 	{ "QHASNOTIFY",		QHASNOTIFY	},
2484 	{ "QRELAYED",		QRELAYED	},
2485 	{ "QEXPANDED",		QEXPANDED	},
2486 	{ "QDELIVERED",		QDELIVERED	},
2487 	{ "QDELAYED",		QDELAYED	},
2488 	{ "QALIAS",		QALIAS		},
2489 	{ "QBYTRACE",		QBYTRACE	},
2490 	{ "QBYNDELAY",		QBYNDELAY	},
2491 	{ "QBYNRELAY",		QBYNRELAY	},
2492 	{ "QINTBCC",		QINTBCC		},
2493 	{ "QDYNMAILER",		QDYNMAILER	},
2494 	{ "QSECURE",		QSECURE		},
2495 	{ "QQUEUED",		QQUEUED		},
2496 	{ "QINTREPLY",		QINTREPLY	},
2497 	{ "QMXSECURE",		QMXSECURE	},
2498 	{ "QTHISPASS",		QTHISPASS	},
2499 	{ "QRCPTOK",		QRCPTOK		},
2500 	{ NULL,			0		}
2501 };
2502 
2503 void
2504 printaddr(fp, a, follow)
2505 	SM_FILE_T *fp;
2506 	register ADDRESS *a;
2507 	bool follow;
2508 {
2509 	register MAILER *m;
2510 	MAILER pseudomailer;
2511 	register struct qflags *qfp;
2512 	bool firstone;
2513 
2514 	if (a == NULL)
2515 	{
2516 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "[NULL]\n");
2517 		return;
2518 	}
2519 
2520 	while (a != NULL)
2521 	{
2522 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "%p=", (void *)a);
2523 		(void) sm_io_flush(fp, SM_TIME_DEFAULT);
2524 
2525 		/* find the mailer -- carefully */
2526 		m = a->q_mailer;
2527 		if (m == NULL)
2528 		{
2529 			m = &pseudomailer;
2530 			m->m_mno = -1;
2531 			m->m_name = "NULL";
2532 		}
2533 
2534 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2535 				     "%s:\n\tmailer %d (%s), host `%s'\n",
2536 				     a->q_paddr == NULL ? "<null>" : a->q_paddr,
2537 				     m->m_mno, m->m_name,
2538 				     a->q_host == NULL ? "<null>" : a->q_host);
2539 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2540 				     "\tuser `%s', ruser `%s'\n",
2541 				     a->q_user,
2542 				     a->q_ruser == NULL ? "<null>" : a->q_ruser);
2543 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "\tstate=");
2544 		switch (a->q_state)
2545 		{
2546 		  case QS_OK:
2547 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "OK");
2548 			break;
2549 
2550 		  case QS_DONTSEND:
2551 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2552 					     "DONTSEND");
2553 			break;
2554 
2555 		  case QS_BADADDR:
2556 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2557 					     "BADADDR");
2558 			break;
2559 
2560 		  case QS_QUEUEUP:
2561 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2562 					     "QUEUEUP");
2563 			break;
2564 
2565 		  case QS_RETRY:
2566 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "RETRY");
2567 			break;
2568 
2569 		  case QS_SENT:
2570 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "SENT");
2571 			break;
2572 
2573 		  case QS_VERIFIED:
2574 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2575 					     "VERIFIED");
2576 			break;
2577 
2578 		  case QS_EXPANDED:
2579 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2580 					     "EXPANDED");
2581 			break;
2582 
2583 		  case QS_SENDER:
2584 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2585 					     "SENDER");
2586 			break;
2587 
2588 		  case QS_CLONED:
2589 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2590 					     "CLONED");
2591 			break;
2592 
2593 		  case QS_DISCARDED:
2594 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2595 					     "DISCARDED");
2596 			break;
2597 
2598 		  case QS_REPLACED:
2599 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2600 					     "REPLACED");
2601 			break;
2602 
2603 		  case QS_REMOVED:
2604 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2605 					     "REMOVED");
2606 			break;
2607 
2608 		  case QS_DUPLICATE:
2609 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2610 					     "DUPLICATE");
2611 			break;
2612 
2613 		  case QS_INCLUDED:
2614 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2615 					     "INCLUDED");
2616 			break;
2617 
2618 		  default:
2619 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2620 					     "%d", a->q_state);
2621 			break;
2622 		}
2623 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2624 				     ", next=%p, alias %p, uid %d, gid %d\n",
2625 				     (void *)a->q_next, (void *)a->q_alias,
2626 				     (int) a->q_uid, (int) a->q_gid);
2627 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "\tflags=%lx<",
2628 				     a->q_flags);
2629 		firstone = true;
2630 		for (qfp = AddressFlags; qfp->qf_name != NULL; qfp++)
2631 		{
2632 			if (!bitset(qfp->qf_bit, a->q_flags))
2633 				continue;
2634 			if (!firstone)
2635 				(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2636 						     ",");
2637 			firstone = false;
2638 			(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, "%s",
2639 					     qfp->qf_name);
2640 		}
2641 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT, ">\n");
2642 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2643 				     "\towner=%s, home=\"%s\", fullname=\"%s\"\n",
2644 				     a->q_owner == NULL ? "(none)" : a->q_owner,
2645 				     a->q_home == NULL ? "(none)" : a->q_home,
2646 				     a->q_fullname == NULL ? "(none)" : a->q_fullname);
2647 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2648 				     "\torcpt=\"%s\", statmta=%s, status=%s\n",
2649 				     a->q_orcpt == NULL ? "(none)" : a->q_orcpt,
2650 				     a->q_statmta == NULL ? "(none)" : a->q_statmta,
2651 				     a->q_status == NULL ? "(none)" : a->q_status);
2652 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2653 				     "\tfinalrcpt=\"%s\"\n",
2654 				     a->q_finalrcpt == NULL ? "(none)" : a->q_finalrcpt);
2655 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2656 				     "\trstatus=\"%s\"\n",
2657 				     a->q_rstatus == NULL ? "(none)" : a->q_rstatus);
2658 		(void) sm_io_fprintf(fp, SM_TIME_DEFAULT,
2659 				     "\tstatdate=%s\n",
2660 				     a->q_statdate == 0 ? "(none)" : ctime(&a->q_statdate));
2661 
2662 		if (!follow)
2663 			return;
2664 		a = a->q_next;
2665 	}
2666 }
2667 /*
2668 **  EMPTYADDR -- return true if this address is empty (``<>'')
2669 **
2670 **	Parameters:
2671 **		a -- pointer to the address
2672 **
2673 **	Returns:
2674 **		true -- if this address is "empty" (i.e., no one should
2675 **			ever generate replies to it.
2676 **		false -- if it is a "regular" (read: replyable) address.
2677 */
2678 
2679 bool
2680 emptyaddr(a)
2681 	register ADDRESS *a;
2682 {
2683 	return a->q_paddr == NULL || strcmp(a->q_paddr, "<>") == 0 ||
2684 	       a->q_user == NULL || strcmp(a->q_user, "<>") == 0;
2685 }
2686 
2687 /*
2688 **  REMOTENAME -- return the name relative to the current mailer
2689 **
2690 **	Parameters:
2691 **		name -- the name to translate. [i]
2692 **		m -- the mailer that we want to do rewriting relative to.
2693 **		flags -- fine tune operations.
2694 **		pstat -- pointer to status word.
2695 **		e -- the current envelope.
2696 **
2697 **	Returns:
2698 **		the text string representing this address relative to
2699 **			the receiving mailer. [i]
2700 **
2701 **	Warnings:
2702 **		The text string returned is tucked away locally;
2703 **			copy it if you intend to save it.
2704 */
2705 
2706 char *
2707 remotename(name, m, flags, pstat, e)
2708 	char *name;
2709 	struct mailer *m;
2710 	int flags;
2711 	int *pstat;
2712 	register ENVELOPE *e;
2713 {
2714 	register char **pvp;
2715 	char *SM_NONVOLATILE fancy;
2716 	char *oldg;
2717 	int rwset;
2718 	static char buf[MAXNAME_I + 1];
2719 	char lbuf[MAXNAME_I + 1];
2720 	char pvpbuf[PSBUFSIZE];
2721 	char addrtype[4];
2722 
2723 	if (tTd(12, 1))
2724 	{
2725 		sm_dprintf("remotename(");
2726 		xputs(sm_debug_file(), name);
2727 		sm_dprintf(")\n");
2728 	}
2729 
2730 	/* don't do anything if we are tagging it as special */
2731 	if (bitset(RF_SENDERADDR, flags))
2732 	{
2733 		rwset = bitset(RF_HEADERADDR, flags) ? m->m_sh_rwset
2734 						     : m->m_se_rwset;
2735 		addrtype[2] = 's';
2736 	}
2737 	else
2738 	{
2739 		rwset = bitset(RF_HEADERADDR, flags) ? m->m_rh_rwset
2740 						     : m->m_re_rwset;
2741 		addrtype[2] = 'r';
2742 	}
2743 	if (rwset < 0)
2744 		return name;
2745 	addrtype[1] = ' ';
2746 	addrtype[3] = '\0';
2747 	addrtype[0] = bitset(RF_HEADERADDR, flags) ? 'h' : 'e';
2748 	macdefine(&e->e_macro, A_TEMP, macid("{addr_type}"), addrtype);
2749 
2750 	/*
2751 	**  Do a heuristic crack of this name to extract any comment info.
2752 	**	This will leave the name as a comment and a $g macro.
2753 	*/
2754 
2755 	if (bitset(RF_CANONICAL, flags) || bitnset(M_NOCOMMENT, m->m_flags))
2756 		fancy = "\201g";
2757 	else
2758 		fancy = crackaddr(name, e);
2759 
2760 	/*
2761 	**  Turn the name into canonical form.
2762 	**	Normally this will be RFC 822 style, i.e., "user@domain".
2763 	**	If this only resolves to "user", and the "C" flag is
2764 	**	specified in the sending mailer, then the sender's
2765 	**	domain will be appended.
2766 	*/
2767 
2768 	pvp = prescan(name, '\0', pvpbuf, sizeof(pvpbuf), NULL, NULL, false);
2769 	if (pvp == NULL)
2770 		return name;
2771 	if (REWRITE(pvp, 3, e) == EX_TEMPFAIL)
2772 		*pstat = EX_TEMPFAIL;
2773 	if (bitset(RF_ADDDOMAIN, flags) && e->e_fromdomain != NULL)
2774 	{
2775 		/* append from domain to this address */
2776 		register char **pxp = pvp;
2777 		int l = MAXATOM;	/* size of buffer for pvp */
2778 
2779 		/* see if there is an "@domain" in the current name */
2780 		while (*pxp != NULL && strcmp(*pxp, "@") != 0)
2781 		{
2782 			pxp++;
2783 			--l;
2784 		}
2785 		if (*pxp == NULL)
2786 		{
2787 			/* no.... append the "@domain" from the sender */
2788 			register char **qxq = e->e_fromdomain;
2789 
2790 			while ((*pxp++ = *qxq++) != NULL)
2791 			{
2792 				if (--l <= 0)
2793 				{
2794 					*--pxp = NULL;
2795 					usrerr("553 5.1.0 remotename: too many tokens");
2796 					*pstat = EX_UNAVAILABLE;
2797 					break;
2798 				}
2799 			}
2800 			if (REWRITE(pvp, 3, e) == EX_TEMPFAIL)
2801 				*pstat = EX_TEMPFAIL;
2802 		}
2803 	}
2804 
2805 	/*
2806 	**  Do more specific rewriting.
2807 	**	Rewrite using ruleset 1 or 2 depending on whether this is
2808 	**		a sender address or not.
2809 	**	Then run it through any receiving-mailer-specific rulesets.
2810 	*/
2811 
2812 	if (bitset(RF_SENDERADDR, flags))
2813 	{
2814 		if (REWRITE(pvp, 1, e) == EX_TEMPFAIL)
2815 			*pstat = EX_TEMPFAIL;
2816 	}
2817 	else
2818 	{
2819 		if (REWRITE(pvp, 2, e) == EX_TEMPFAIL)
2820 			*pstat = EX_TEMPFAIL;
2821 	}
2822 	if (rwset > 0)
2823 	{
2824 		if (REWRITE(pvp, rwset, e) == EX_TEMPFAIL)
2825 			*pstat = EX_TEMPFAIL;
2826 	}
2827 
2828 	/*
2829 	**  Do any final sanitation the address may require.
2830 	**	This will normally be used to turn internal forms
2831 	**	(e.g., user@host.LOCAL) into external form.  This
2832 	**	may be used as a default to the above rules.
2833 	*/
2834 
2835 	if (REWRITE(pvp, 4, e) == EX_TEMPFAIL)
2836 		*pstat = EX_TEMPFAIL;
2837 
2838 	/*
2839 	**  Now restore the comment information we had at the beginning.
2840 	*/
2841 
2842 	cataddr(pvp, NULL, lbuf, sizeof(lbuf), '\0', false);
2843 	oldg = macget(&e->e_macro, 'g');
2844 	macset(&e->e_macro, 'g', lbuf);
2845 
2846 	SM_TRY
2847 		/* need to make sure route-addrs have <angle brackets> */
2848 		if (bitset(RF_CANONICAL, flags) && lbuf[0] == '@')
2849 			expand("<\201g>", buf, sizeof(buf), e);
2850 		else
2851 			expand(fancy, buf, sizeof(buf), e);
2852 	SM_FINALLY
2853 		macset(&e->e_macro, 'g', oldg);
2854 	SM_END_TRY
2855 
2856 	if (tTd(12, 1))
2857 	{
2858 		sm_dprintf("remotename => `");
2859 		xputs(sm_debug_file(), buf);
2860 		sm_dprintf("', stat=%d\n", *pstat);
2861 	}
2862 	return buf;
2863 }
2864 /*
2865 **  MAPLOCALUSER -- run local username through ruleset 5 for final redirection
2866 **
2867 **	Parameters:
2868 **		a -- the address to map (but just the user name part).
2869 **		sendq -- the sendq in which to install any replacement
2870 **			addresses.
2871 **		aliaslevel -- the alias nesting depth.
2872 **		e -- the envelope.
2873 **
2874 **	Returns:
2875 **		none.
2876 */
2877 
2878 #define Q_COPYFLAGS	(QPRIMARY|QBOGUSSHELL|QUNSAFEADDR|\
2879 			 Q_PINGFLAGS|QHASNOTIFY|\
2880 			 QRELAYED|QEXPANDED|QDELIVERED|QDELAYED|\
2881 			 QBYTRACE|QBYNDELAY|QBYNRELAY)
2882 
2883 void
2884 maplocaluser(a, sendq, aliaslevel, e)
2885 	register ADDRESS *a;
2886 	ADDRESS **sendq;
2887 	int aliaslevel;
2888 	ENVELOPE *e;
2889 {
2890 	register char **pvp;
2891 	register ADDRESS *SM_NONVOLATILE a1 = NULL;
2892 	char *p;
2893 	char pvpbuf[PSBUFSIZE];
2894 #if _FFR_8BITENVADDR
2895 	int len;
2896 #endif
2897 
2898 	if (tTd(29, 1))
2899 	{
2900 		sm_dprintf("maplocaluser: ");
2901 		printaddr(sm_debug_file(), a, false);
2902 	}
2903 	pvp = prescan(a->q_user, '\0', pvpbuf, sizeof(pvpbuf), NULL, NULL,
2904 			false);
2905 	if (pvp == NULL)
2906 	{
2907 		if (tTd(29, 9))
2908 			sm_dprintf("maplocaluser: cannot prescan %s\n",
2909 				a->q_user);
2910 		return;
2911 	}
2912 
2913 #if _FFR_8BITENVADDR
2914 	p = quote_internal_chars(a->q_host, NULL, &len, NULL);
2915 #else
2916 	p = a->q_host;
2917 #endif
2918 	macdefine(&e->e_macro, A_PERM, 'h', p);
2919 	macdefine(&e->e_macro, A_PERM, 'u', a->q_user);
2920 	macdefine(&e->e_macro, A_PERM, 'z', a->q_home);
2921 
2922 	macdefine(&e->e_macro, A_PERM, macid("{addr_type}"), "e r");
2923 	if (REWRITE(pvp, 5, e) == EX_TEMPFAIL)
2924 	{
2925 		if (tTd(29, 9))
2926 			sm_dprintf("maplocaluser: rewrite tempfail\n");
2927 		a->q_state = QS_QUEUEUP;
2928 		a->q_status = "4.4.3";
2929 		return;
2930 	}
2931 	if (pvp[0] == NULL || (pvp[0][0] & 0377) != CANONNET)
2932 	{
2933 		if (tTd(29, 9))
2934 			sm_dprintf("maplocaluser: doesn't resolve\n");
2935 		return;
2936 	}
2937 
2938 	SM_TRY
2939 		a1 = buildaddr(pvp, NULL, 0, e);
2940 	SM_EXCEPT(exc, "E:mta.quickabort")
2941 
2942 		/*
2943 		**  mark address as bad, S5 returned an error
2944 		**	and we gave that back to the SMTP client.
2945 		*/
2946 
2947 		a->q_state = QS_DONTSEND;
2948 		sm_exc_raisenew_x(&EtypeQuickAbort, 2);
2949 	SM_END_TRY
2950 
2951 	/* if non-null, mailer destination specified -- has it changed? */
2952 	if (a1 == NULL || sameaddr(a, a1))
2953 	{
2954 		if (tTd(29, 9))
2955 			sm_dprintf("maplocaluser: address unchanged\n");
2956 		return;
2957 	}
2958 
2959 	/* make new address take on flags and print attributes of old */
2960 	a1->q_flags &= ~Q_COPYFLAGS;
2961 	a1->q_flags |= a->q_flags & Q_COPYFLAGS;
2962 	a1->q_paddr = sm_rpool_strdup_x(e->e_rpool, a->q_paddr);
2963 	a1->q_finalrcpt = a->q_finalrcpt;
2964 	a1->q_orcpt = a->q_orcpt;
2965 
2966 	/* mark old address as dead; insert new address */
2967 	a->q_state = QS_REPLACED;
2968 	if (tTd(29, 5))
2969 	{
2970 		sm_dprintf("maplocaluser: QS_REPLACED ");
2971 		printaddr(sm_debug_file(), a, false);
2972 	}
2973 	a1->q_alias = a;
2974 	allocaddr(a1, RF_COPYALL, sm_rpool_strdup_x(e->e_rpool, a->q_paddr), e);
2975 	(void) recipient(a1, sendq, aliaslevel, e);
2976 }
2977 /*
2978 **  DEQUOTE_INIT -- initialize dequote map
2979 **
2980 **	Parameters:
2981 **		map -- the internal map structure.
2982 **		args -- arguments.
2983 **
2984 **	Returns:
2985 **		true.
2986 */
2987 
2988 bool
2989 dequote_init(map, args)
2990 	MAP *map;
2991 	char *args;
2992 {
2993 	register char *p = args;
2994 
2995 	/* there is no check whether there is really an argument */
2996 	map->map_mflags |= MF_KEEPQUOTES;
2997 	for (;;)
2998 	{
2999 		while (SM_ISSPACE(*p))
3000 			p++;
3001 		if (*p != '-')
3002 			break;
3003 		switch (*++p)
3004 		{
3005 		  case 'a':
3006 			map->map_app = ++p;
3007 			break;
3008 
3009 		  case 'D':
3010 			map->map_mflags |= MF_DEFER;
3011 			break;
3012 
3013 		  case 'S':
3014 		  case 's':
3015 			map->map_spacesub = *++p;
3016 			break;
3017 		}
3018 		while (*p != '\0' && !(SM_ISSPACE(*p)))
3019 			p++;
3020 		if (*p != '\0')
3021 			*p = '\0';
3022 	}
3023 	if (map->map_app != NULL)
3024 		map->map_app = newstr(map->map_app);
3025 
3026 	return true;
3027 }
3028 /*
3029 **  DEQUOTE_MAP -- unquote an address
3030 **
3031 **	Parameters:
3032 **		map -- the internal map structure (ignored).
3033 **		name -- the name to dequote.
3034 **		av -- arguments (ignored).
3035 **		statp -- pointer to status out-parameter.
3036 **
3037 **	Returns:
3038 **		NULL -- if there were no quotes, or if the resulting
3039 **			unquoted buffer would not be acceptable to prescan.
3040 **		else -- The dequoted buffer.
3041 */
3042 
3043 /* ARGSUSED2 */
3044 char *
3045 dequote_map(map, name, av, statp)
3046 	MAP *map;
3047 	char *name;
3048 	char **av;
3049 	int *statp;
3050 {
3051 	register char *p;
3052 	register char *q;
3053 	register char c;
3054 	int anglecnt = 0;
3055 	int cmntcnt = 0;
3056 	int quotecnt = 0;
3057 	int spacecnt = 0;
3058 	bool quotemode = false;
3059 	bool bslashmode = false;
3060 	char spacesub = map->map_spacesub;
3061 
3062 	for (p = q = name; (c = *p++) != '\0'; )
3063 	{
3064 		if (bslashmode)
3065 		{
3066 			bslashmode = false;
3067 			*q++ = c;
3068 			continue;
3069 		}
3070 
3071 		if (c == ' ' && spacesub != '\0')
3072 			c = spacesub;
3073 
3074 		switch (c)
3075 		{
3076 		  case '\\':
3077 			bslashmode = true;
3078 			break;
3079 
3080 		  case '(':
3081 			cmntcnt++;
3082 			break;
3083 
3084 		  case ')':
3085 			if (cmntcnt-- <= 0)
3086 				return NULL;
3087 			break;
3088 
3089 		  case ' ':
3090 		  case '\t':
3091 			spacecnt++;
3092 			break;
3093 		}
3094 
3095 		if (cmntcnt > 0)
3096 		{
3097 			*q++ = c;
3098 			continue;
3099 		}
3100 
3101 		switch (c)
3102 		{
3103 		  case '"':
3104 			quotemode = !quotemode;
3105 			quotecnt++;
3106 			continue;
3107 
3108 		  case '<':
3109 			anglecnt++;
3110 			break;
3111 
3112 		  case '>':
3113 			if (anglecnt-- <= 0)
3114 				return NULL;
3115 			break;
3116 		}
3117 		*q++ = c;
3118 	}
3119 
3120 	if (anglecnt != 0 || cmntcnt != 0 || bslashmode ||
3121 	    quotemode || quotecnt <= 0 || spacecnt != 0)
3122 		return NULL;
3123 	*q++ = '\0';
3124 	return map_rewrite(map, name, strlen(name), NULL);
3125 }
3126 /*
3127 **  RSCHECK -- check string(s) for validity using rewriting sets
3128 **
3129 **	Parameters:
3130 **		rwset -- the rewriting set to use.
3131 **		p1 -- the first string to check.
3132 **		p2 -- the second string to check -- may be NULL.
3133 **		e -- the current envelope.
3134 **		flags -- control some behavior, see RSF_ in sendmail.h
3135 **		logl -- logging level.
3136 **		host -- NULL or relay host.
3137 **		logid -- id for sm_syslog.
3138 **		addr -- if not NULL and ruleset returns $#error:
3139 **				store mailer triple here.
3140 **		addrstr -- if not NULL and ruleset does not return $#:
3141 **				address string
3142 **
3143 **	Returns:
3144 **		EX_OK -- if the rwset doesn't resolve to $#error
3145 **			or is not defined
3146 **		else -- the failure status (message printed)
3147 */
3148 
3149 int
3150 rscheck(rwset, p1, p2, e, flags, logl, host, logid, addr, addrstr)
3151 	char *rwset;
3152 	const char *p1;
3153 	const char *p2;
3154 	ENVELOPE *e;
3155 	int flags;
3156 	int logl;
3157 	const char *host;
3158 	const char *logid;
3159 	ADDRESS *addr;
3160 	char **addrstr;
3161 {
3162 	char *volatile buf;
3163 	size_t bufsize;
3164 	int saveexitstat;
3165 	int volatile rstat = EX_OK;
3166 	char **pvp;
3167 	int rsno;
3168 	bool volatile discard = false;
3169 	bool saveQuickAbort = QuickAbort;
3170 	bool saveSuprErrs = SuprErrs;
3171 	bool quarantine = false;
3172 	char ubuf[BUFSIZ * 2];
3173 	char buf0[MAXLINE];
3174 	char pvpbuf[PSBUFSIZE];
3175 	extern char MsgBuf[];
3176 
3177 	if (tTd(48, 2))
3178 		sm_dprintf("rscheck(%s, %s, %s)\n", rwset, p1,
3179 			p2 == NULL ? "(NULL)" : p2);
3180 
3181 	rsno = strtorwset(rwset, NULL, ST_FIND);
3182 	if (rsno < 0)
3183 		return EX_OK;
3184 
3185 	if (p2 != NULL)
3186 	{
3187 		bufsize = strlen(p1) + strlen(p2) + 2;
3188 		if (bufsize > sizeof(buf0))
3189 			buf = sm_malloc_x(bufsize);
3190 		else
3191 		{
3192 			buf = buf0;
3193 			bufsize = sizeof(buf0);
3194 		}
3195 		(void) sm_snprintf(buf, bufsize, "%s%c%s", p1, CONDELSE, p2);
3196 	}
3197 	else
3198 	{
3199 		bufsize = strlen(p1) + 1;
3200 		if (bufsize > sizeof(buf0))
3201 			buf = sm_malloc_x(bufsize);
3202 		else
3203 		{
3204 			buf = buf0;
3205 			bufsize = sizeof(buf0);
3206 		}
3207 		(void) sm_strlcpy(buf, p1, bufsize);
3208 	}
3209 	SM_TRY
3210 	{
3211 		SuprErrs = true;
3212 		QuickAbort = false;
3213 		pvp = prescan(buf, '\0', pvpbuf, sizeof(pvpbuf), NULL,
3214 			      bitset(RSF_RMCOMM, flags) ?
3215 					IntTokenTab : TokTypeNoC,
3216 			      bitset(RSF_RMCOMM, flags) ? false : true);
3217 		SuprErrs = saveSuprErrs;
3218 		if (pvp == NULL)
3219 		{
3220 			if (tTd(48, 2))
3221 				sm_dprintf("rscheck: cannot prescan input\n");
3222 	/*
3223 			syserr("rscheck: cannot prescan input: \"%s\"",
3224 				shortenstring(buf, MAXSHORTSTR));
3225 			rstat = EX_DATAERR;
3226 	*/
3227 			goto finis;
3228 		}
3229 		if (bitset(RSF_UNSTRUCTURED, flags))
3230 			SuprErrs = true;
3231 		(void) REWRITE(pvp, rsno, e);
3232 		if (bitset(RSF_UNSTRUCTURED, flags))
3233 			SuprErrs = saveSuprErrs;
3234 
3235 		if (pvp[0] != NULL && (pvp[0][0] & 0377) != CANONNET &&
3236 		    bitset(RSF_ADDR, flags) && addrstr != NULL)
3237 		{
3238 			cataddr(&(pvp[0]), NULL, ubuf, sizeof(ubuf),
3239 				bitset(RSF_STRING, flags) ? NOSPACESEP : ' ',
3240 				true);
3241 			*addrstr = sm_rpool_strdup_x(e->e_rpool, ubuf);
3242 			goto finis;
3243 		}
3244 
3245 		if (pvp[0] == NULL || (pvp[0][0] & 0377) != CANONNET ||
3246 		    pvp[1] == NULL || (strcmp(pvp[1], "error") != 0 &&
3247 				       strcmp(pvp[1], "discard") != 0))
3248 		{
3249 			goto finis;
3250 		}
3251 
3252 		if (strcmp(pvp[1], "discard") == 0)
3253 		{
3254 			if (tTd(48, 2))
3255 				sm_dprintf("rscheck: discard mailer selected\n");
3256 			e->e_flags |= EF_DISCARD;
3257 			discard = true;
3258 		}
3259 		else if (strcmp(pvp[1], "error") == 0 &&
3260 			 pvp[2] != NULL && (pvp[2][0] & 0377) == CANONHOST &&
3261 			 pvp[3] != NULL && strcmp(pvp[3], "quarantine") == 0)
3262 		{
3263 			if (pvp[4] == NULL ||
3264 			    (pvp[4][0] & 0377) != CANONUSER ||
3265 			    pvp[5] == NULL)
3266 				e->e_quarmsg = sm_rpool_strdup_x(e->e_rpool,
3267 								 rwset);
3268 			else
3269 			{
3270 				cataddr(&(pvp[5]), NULL, ubuf,
3271 					sizeof(ubuf), ' ', true);
3272 				e->e_quarmsg = sm_rpool_strdup_x(e->e_rpool,
3273 								 ubuf);
3274 			}
3275 			macdefine(&e->e_macro, A_PERM,
3276 				  macid("{quarantine}"), e->e_quarmsg);
3277 			quarantine = true;
3278 		}
3279 		else
3280 		{
3281 			auto ADDRESS a1;
3282 			int savelogusrerrs = LogUsrErrs;
3283 			static bool logged = false;
3284 
3285 			/* got an error -- process it */
3286 			saveexitstat = ExitStat;
3287 			LogUsrErrs = false;
3288 			(void) buildaddr(pvp, &a1, 0, e);
3289 			if (addr != NULL)
3290 			{
3291 				addr->q_mailer = a1.q_mailer;
3292 				addr->q_user = a1.q_user;
3293 				addr->q_host = a1.q_host;
3294 			}
3295 			LogUsrErrs = savelogusrerrs;
3296 			rstat = ExitStat;
3297 			ExitStat = saveexitstat;
3298 			if (!logged)
3299 			{
3300 				if (bitset(RSF_COUNT, flags))
3301 					markstats(e, &a1, STATS_REJECT);
3302 				logged = true;
3303 			}
3304 		}
3305 
3306 		if (LogLevel > logl)
3307 		{
3308 			const char *relay;
3309 			char *p;
3310 			char lbuf[MAXLINE];
3311 
3312 			p = lbuf;
3313 			if (p2 != NULL)
3314 			{
3315 				(void) sm_snprintf(p, SPACELEFT(lbuf, p),
3316 					", arg2=%s",
3317 					p2);
3318 				p += strlen(p);
3319 			}
3320 
3321 			if (host != NULL)
3322 				relay = host;
3323 			else
3324 				relay = macvalue('_', e);
3325 			if (relay != NULL)
3326 			{
3327 				(void) sm_snprintf(p, SPACELEFT(lbuf, p),
3328 					", relay=%s", relay);
3329 				p += strlen(p);
3330 			}
3331 			*p = '\0';
3332 			if (discard)
3333 				sm_syslog(LOG_NOTICE, logid,
3334 					  "ruleset=%s, arg1=%s%s, discard",
3335 					  rwset, p1, lbuf);
3336 			else if (quarantine)
3337 				sm_syslog(LOG_NOTICE, logid,
3338 					  "ruleset=%s, arg1=%s%s, quarantine=%s",
3339 					  rwset, p1, lbuf, ubuf);
3340 			else
3341 				sm_syslog(LOG_NOTICE, logid,
3342 					  "ruleset=%s, arg1=%s%s, %s=%s",
3343 					  rwset, p1, lbuf,
3344 					  bitset(RSF_STATUS, flags) ? "status" : "reject",
3345 					  MsgBuf);
3346 		}
3347 
3348 	 finis: ;
3349 	}
3350 	SM_FINALLY
3351 	{
3352 		/* clean up */
3353 		if (buf != buf0)
3354 			sm_free(buf);
3355 		QuickAbort = saveQuickAbort;
3356 	}
3357 	SM_END_TRY
3358 
3359 	setstat(rstat);
3360 
3361 	/* rulesets don't set errno */
3362 	errno = 0;
3363 	if (rstat != EX_OK && QuickAbort)
3364 		sm_exc_raisenew_x(&EtypeQuickAbort, 2);
3365 	return rstat;
3366 }
3367 
3368 /*
3369 **  RSCAP -- call rewriting set to return capabilities
3370 **
3371 **	Parameters:
3372 **		rwset -- the rewriting set to use.
3373 **		p1 -- the first string to check.
3374 **		p2 -- the second string to check -- may be NULL.
3375 **		e -- the current envelope.
3376 **		pvp -- pointer to token vector.
3377 **		pvpbuf -- buffer space.
3378 **		size -- size of buffer space.
3379 **
3380 **	Returns:
3381 **		EX_UNAVAILABLE -- ruleset doesn't exist.
3382 **		EX_DATAERR -- prescan() failed.
3383 **		EX_OK -- rewrite() was successful.
3384 **		else -- return status from rewrite().
3385 */
3386 
3387 int
3388 rscap(rwset, p1, p2, e, pvp, pvpbuf, size)
3389 	char *rwset;
3390 	char *p1;
3391 	char *p2;
3392 	ENVELOPE *e;
3393 	char ***pvp;
3394 	char *pvpbuf;
3395 	int size;
3396 {
3397 	char *volatile buf;
3398 	size_t bufsize;
3399 	int volatile rstat = EX_OK;
3400 	int rsno;
3401 	bool saveQuickAbort = QuickAbort;
3402 	bool saveSuprErrs = SuprErrs;
3403 	char buf0[MAXLINE];
3404 	extern char MsgBuf[];
3405 
3406 	if (tTd(48, 2))
3407 		sm_dprintf("rscap(%s, %s, %s)\n", rwset, p1,
3408 			p2 == NULL ? "(NULL)" : p2);
3409 
3410 	SM_REQUIRE(pvp != NULL);
3411 	rsno = strtorwset(rwset, NULL, ST_FIND);
3412 	if (rsno < 0)
3413 		return EX_UNAVAILABLE;
3414 
3415 	if (p2 != NULL)
3416 	{
3417 		bufsize = strlen(p1) + strlen(p2) + 2;
3418 		if (bufsize > sizeof(buf0))
3419 			buf = sm_malloc_x(bufsize);
3420 		else
3421 		{
3422 			buf = buf0;
3423 			bufsize = sizeof(buf0);
3424 		}
3425 		(void) sm_snprintf(buf, bufsize, "%s%c%s", p1, CONDELSE, p2);
3426 	}
3427 	else
3428 	{
3429 		bufsize = strlen(p1) + 1;
3430 		if (bufsize > sizeof(buf0))
3431 			buf = sm_malloc_x(bufsize);
3432 		else
3433 		{
3434 			buf = buf0;
3435 			bufsize = sizeof(buf0);
3436 		}
3437 		(void) sm_strlcpy(buf, p1, bufsize);
3438 	}
3439 	SM_TRY
3440 	{
3441 		SuprErrs = true;
3442 		QuickAbort = false;
3443 		*pvp = prescan(buf, '\0', pvpbuf, size, NULL, IntTokenTab,
3444 				false);
3445 		if (*pvp != NULL)
3446 			rstat = rewrite(*pvp, rsno, 0, e, size);
3447 		else
3448 		{
3449 			if (tTd(48, 2))
3450 				sm_dprintf("rscap: cannot prescan input\n");
3451 			rstat = EX_DATAERR;
3452 		}
3453 	}
3454 	SM_FINALLY
3455 	{
3456 		/* clean up */
3457 		if (buf != buf0)
3458 			sm_free(buf);
3459 		SuprErrs = saveSuprErrs;
3460 		QuickAbort = saveQuickAbort;
3461 
3462 		/* prevent information leak, this may contain rewrite error */
3463 		MsgBuf[0] = '\0';
3464 	}
3465 	SM_END_TRY
3466 	return rstat;
3467 }
3468