xref: /freebsd/sbin/setkey/token.l (revision 41466b50c1d5bfd1cf6adaae547a579a75d7c04e) 
1 /*	$FreeBSD$	*/
2 /*	$KAME: token.l,v 1.21 2001/05/18 05:35:01 sakane Exp $	*/
3 
4 /*
5  * Copyright (C) 1995, 1996, 1997, 1998, and 1999 WIDE Project.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 3. Neither the name of the project nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32 
33 %{
34 #include <sys/types.h>
35 #include <sys/param.h>
36 #include <sys/socket.h>
37 #include <net/route.h>
38 #include <net/pfkeyv2.h>
39 #include <netkey/keydb.h>
40 #include <netkey/key_debug.h>
41 #include <netinet/in.h>
42 #include <netinet6/ipsec.h>
43 
44 #include <stdlib.h>
45 #include <limits.h>
46 #include <string.h>
47 #include <unistd.h>
48 #include <errno.h>
49 #include "vchar.h"
50 #ifdef __NetBSD__
51 #include "parse.h"
52 #else
53 #include "y.tab.h"
54 #endif
55 
56 #define DECHO \
57 	if (f_debug) {printf("<%d>", yy_start); ECHO ; printf("\n"); }
58 
59 #define CMDARG \
60 { \
61 	char *__buf__ = strdup(yytext), *__p__; \
62 	for (__p__ = __buf__; *__p__ != NULL; __p__++) \
63 		if (*__p__ == '\n' || *__p__ == '\t') \
64 			*__p__ = ' '; \
65 	strcat(cmdarg, __buf__); \
66 	free(__buf__); \
67 }
68 
69 #define PREPROC	DECHO CMDARG
70 
71 int lineno = 1;
72 char cmdarg[8192]; /* XXX: BUFSIZ is the better ? */
73 
74 extern u_char m_buf[BUFSIZ];
75 extern u_int m_len;
76 extern int f_debug;
77 
78 int yylex __P((void));
79 void yyfatal __P((const char *s));
80 void yyerror __P((const char *s));
81 extern void parse_init __P((void));
82 int parse __P((FILE **));
83 int yyparse __P((void));
84 
85 %}
86 
87 /* common section */
88 nl		\n
89 ws		[ \t]+
90 digit		[0-9]
91 letter		[0-9A-Za-z]
92 hexdigit	[0-9A-Fa-f]
93 /*octet		(([01]?{digit}?{digit})|((2([0-4]{digit}))|(25[0-5])))*/
94 special		[()+\|\?\*,]
95 dot		\.
96 comma		\,
97 hyphen		\-
98 colon		\:
99 slash		\/
100 bcl		\{
101 ecl		\}
102 blcl		\[
103 elcl		\]
104 percent		\%
105 semi		\;
106 usec		{dot}{digit}{1,6}
107 comment		\#.*
108 ccomment	"/*"
109 bracketstring	\<[^>]*\>
110 quotedstring	\"[^"]*\"
111 decstring	{digit}+
112 hexpair		{hexdigit}{hexdigit}
113 hexstring	0[xX]{hexdigit}+
114 octetstring	{octet}({dot}{octet})+
115 ipaddress	[a-fA-F0-9:]([a-fA-F0-9:\.]*|[a-fA-F0-9:\.]*%[a-zA-Z0-9]*)
116 ipaddrmask	{slash}{digit}{1,3}
117 ipaddrport	{blcl}{decstring}{elcl}
118 keyword		{letter}{letter}+
119 name		{letter}(({letter}|{digit}|{hyphen})*({letter}|{digit}))*
120 hostname	{name}(({dot}{name})+{dot}?)?
121 
122 %s S_PL
123 
124 %%
125 
126 add		{ PREPROC; return(ADD); }
127 delete		{ PREPROC; return(DELETE); }
128 deleteall	{ PREPROC; return(DELETEALL); }
129 get		{ PREPROC; return(GET); }
130 flush		{ PREPROC; return(FLUSH); }
131 dump		{ PREPROC; return(DUMP); }
132 
133 	/* for management SPD */
134 spdadd		{ PREPROC; return(SPDADD); }
135 spddelete	{ PREPROC; return(SPDDELETE); }
136 spddump		{ PREPROC; return(SPDDUMP); }
137 spdflush	{ PREPROC; return(SPDFLUSH); }
138 {hyphen}P	{ BEGIN S_PL; PREPROC; return(F_POLICY); }
139 <S_PL>[a-zA-Z0-9:\.\-_/ \n\t][a-zA-Z0-9:\.\-_/ \n\t]* {
140 		yymore();
141 
142 		/* count up for nl */
143 		    {
144 			char *p;
145 			for (p = yytext; *p != NULL; p++)
146 				if (*p == '\n')
147 					lineno++;
148 		    }
149 
150 		yylval.val.len = strlen(yytext);
151 		yylval.val.buf = strdup(yytext);
152 
153 		return(PL_REQUESTS);
154 }
155 <S_PL>{semi}	{ PREPROC; BEGIN INITIAL; return(EOT); }
156 
157 	/* security protocols */
158 ah		{ PREPROC; yylval.num = 0; return(PR_AH); }
159 esp		{ PREPROC; yylval.num = 0; return(PR_ESP); }
160 ah-old		{ PREPROC; yylval.num = 1; return(PR_AH); }
161 esp-old		{ PREPROC; yylval.num = 1; return(PR_ESP); }
162 ipcomp		{ PREPROC; yylval.num = 0; return(PR_IPCOMP); }
163 
164 	/* authentication alogorithm */
165 {hyphen}A	{ PREPROC; return(F_AUTH); }
166 hmac-md5	{ PREPROC; yylval.num = SADB_AALG_MD5HMAC; return(ALG_AUTH); }
167 hmac-sha1	{ PREPROC; yylval.num = SADB_AALG_SHA1HMAC; return(ALG_AUTH); }
168 keyed-md5	{ PREPROC; yylval.num = SADB_X_AALG_MD5; return(ALG_AUTH); }
169 keyed-sha1	{ PREPROC; yylval.num = SADB_X_AALG_SHA; return(ALG_AUTH); }
170 hmac-sha2-256	{ PREPROC; yylval.num = SADB_X_AALG_SHA2_256; return(ALG_AUTH); }
171 hmac-sha2-384	{ PREPROC; yylval.num = SADB_X_AALG_SHA2_384; return(ALG_AUTH); }
172 hmac-sha2-512	{ PREPROC; yylval.num = SADB_X_AALG_SHA2_512; return(ALG_AUTH); }
173 null		{ PREPROC; yylval.num = SADB_X_AALG_NULL; return(ALG_AUTH); }
174 
175 	/* encryption alogorithm */
176 {hyphen}E	{ PREPROC; return(F_ENC); }
177 des-cbc		{ PREPROC; yylval.num = SADB_EALG_DESCBC; return(ALG_ENC); }
178 3des-cbc	{ PREPROC; yylval.num = SADB_EALG_3DESCBC; return(ALG_ENC); }
179 simple		{ PREPROC; yylval.num = SADB_EALG_NULL; return(ALG_ENC); }
180 blowfish-cbc	{ PREPROC; yylval.num = SADB_X_EALG_BLOWFISHCBC; return(ALG_ENC); }
181 cast128-cbc	{ PREPROC; yylval.num = SADB_X_EALG_CAST128CBC; return(ALG_ENC); }
182 des-deriv	{ PREPROC; yylval.num = SADB_EALG_DESCBC; return(ALG_ENC_DESDERIV); }
183 des-32iv	{ PREPROC; yylval.num = SADB_EALG_DESCBC; return(ALG_ENC_DES32IV); }
184 rijndael-cbc	{ PREPROC; yylval.num = SADB_X_EALG_RIJNDAELCBC; return(ALG_ENC); }
185 
186 	/* compression algorithms */
187 {hyphen}C	{ PREPROC; return(F_COMP); }
188 oui		{ PREPROC; yylval.num = SADB_X_CALG_OUI; return(ALG_COMP); }
189 deflate		{ PREPROC; yylval.num = SADB_X_CALG_DEFLATE; return(ALG_COMP); }
190 lzs		{ PREPROC; yylval.num = SADB_X_CALG_LZS; return(ALG_COMP); }
191 {hyphen}R	{ PREPROC; return(F_RAWCPI); }
192 
193 	/* extension */
194 {hyphen}m	{ PREPROC; return(F_MODE); }
195 transport	{ PREPROC; yylval.num = IPSEC_MODE_TRANSPORT; return(MODE); }
196 tunnel		{ PREPROC; yylval.num = IPSEC_MODE_TUNNEL; return(MODE); }
197 {hyphen}u	{ PREPROC; return(F_REQID); }
198 {hyphen}f	{ PREPROC; return(F_EXT); }
199 random-pad	{ PREPROC; yylval.num = SADB_X_EXT_PRAND; return(EXTENSION); }
200 seq-pad		{ PREPROC; yylval.num = SADB_X_EXT_PSEQ; return(EXTENSION); }
201 zero-pad	{ PREPROC; yylval.num = SADB_X_EXT_PZERO; return(EXTENSION); }
202 nocyclic-seq	{ PREPROC; return(NOCYCLICSEQ); }
203 {hyphen}r	{ PREPROC; return(F_REPLAY); }
204 {hyphen}lh	{ PREPROC; return(F_LIFETIME_HARD); }
205 {hyphen}ls	{ PREPROC; return(F_LIFETIME_SOFT); }
206 
207 	/* ... */
208 any		{ PREPROC; return(ANY); }
209 {ws}		{ PREPROC; }
210 {nl}		{ lineno++; }
211 {comment}
212 {semi}		{ PREPROC; return(EOT); }
213 
214 	/* parameter */
215 {decstring}	{
216 			char *bp;
217 
218 			PREPROC;
219 			yylval.num = strtoul(yytext, &bp, 10);
220 			return(DECSTRING);
221 		}
222 
223 {ipaddress}	{
224 			PREPROC;
225 
226 			yylval.val.len = yyleng;
227 			yylval.val.buf = strdup(yytext);
228 
229 			return(ADDRESS);
230 		}
231 
232 {ipaddrmask}	{
233 			PREPROC;
234 			yytext++;
235 			yylval.num = atoi(yytext);
236 			return(PREFIX);
237 		}
238 
239 {ipaddrport}	{
240 			char *p = yytext;
241 			PREPROC;
242 			while (*++p != ']') ;
243 			*p = NULL;
244 			yytext++;
245 			yylval.num = atoi(yytext);
246 			return(PORT);
247 		}
248 
249 {blcl}any{elcl}	{
250 			PREPROC;
251 			return(PORTANY);
252 		}
253 
254 {hexstring}	{
255 			int len = yyleng - 2; /* (str - "0x") */
256 			PREPROC;
257 			yylval.val.len = (len & 1) + (len / 2);
258 			/* fixed string if length is odd. */
259 			if (len & 1) {
260 				yytext[1] = '0';
261 				yylval.val.buf = strdup(yytext + 1);
262 			} else
263 				yylval.val.buf = strdup(yytext + 2);
264 
265 			return(HEXSTRING);
266 		}
267 
268 {quotedstring}	{
269 			char *p = yytext;
270 			PREPROC;
271 			while (*++p != '"') ;
272 			*p = NULL;
273 			yytext++;
274 			yylval.val.len = yyleng - 2;
275 			yylval.val.buf = strdup(yytext);
276 
277 			return(QUOTEDSTRING);
278 		}
279 
280 [a-z0-9.\-]*	{
281 			yylval.val.len = yyleng;
282 			yylval.val.buf = strdup(yytext);
283 			return(STRING);
284 		}
285 
286 .		{
287 			yyfatal("Syntax error");
288 			/*NOTREACHED*/
289 		}
290 
291 %%
292 
293 void
294 yyfatal(s)
295 	const char *s;
296 {
297 	yyerror(s);
298 	exit(1);
299 }
300 
301 void
302 yyerror(s)
303 	const char *s;
304 {
305 	printf("line %d: %s at [%s]\n", lineno, s, yytext);
306 }
307 
308 int
309 parse(fp)
310 	FILE **fp;
311 {
312 	yyin = *fp;
313 
314 	parse_init();
315 
316 	if (yyparse()) {
317 		printf("parse failed, line %d.\n", lineno);
318 		return(-1);
319 	}
320 
321 	return(0);
322 }
323