xref: /titanic_41/usr/src/lib/libscf/common/scf_tmpl.c (revision a58a7fedf7a57cbc5bdaa455cf9134f7a84bbe8f)

/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
 * Copyright 2012 Milan Jurik. All rights reserved.
 */

/*
 * scf_tmpl.c
 *
 * This file implements the bulk of the libscf templates interfaces.
 * Templates describe metadata about a service or instance in general,
 * and individual configuration properties on those services and instances.
 * Human-consumable descriptions can be provided, along with definitions
 * of valid configuration.  See service_bundle.dtd.1 for XML definitions
 * of templates, and the svccfg code for information on how those definitions
 * are translated into the repository.
 *
 * The main data structures are scf_pg_tmpl and scf_prop_tmpl.  These
 * are allocated by the callers through scf_tmpl_[pg|prop]_create(), and
 * destroyed with scf_tmpl_[pg|prop]_destroy().  They are populated by
 * scf_tmpl_get_by_pg_name(), scf_tmpl_get_by_pg(), and
 * scf_tmpl_get_by_prop().  They also store the iterator state for
 * scf_tmpl_iter_pgs() and scf_tmpl_iter_props().
 *
 * These data structures are then consumed by other functions to
 * gather information about the template (e.g. name, description,
 * choices, constraints, etc.).
 *
 * scf_tmpl_validate_fmri() does instance validation against template
 * data, and populates a set of template errors which can be explored using
 * the scf_tmpl_next_error() and the scf_tmpl_error*() suite of functions.
 *
 * The main data structures for template errors are scf_tmpl_errors,
 * defined in this file, and scf_tmpl_error, defined in libscf_priv.h.
 * scf_tmpl_error is shared with svccfg to offer common printing
 * of error messages between libscf and svccfg.
 *
 * General convenience functions are towards the top of this file,
 * followed by pg and prop template discovery functions, followed
 * by functions which gather information about the discovered
 * template.  Validation and error functions are at the end of this file.
 */

#include "lowlevel_impl.h"
#include "libscf_impl.h"
#include <assert.h>
#include <errno.h>
#include <libintl.h>
#include <stdlib.h>
#include <stdio.h>
#include <strings.h>
#include <locale.h>
#include <ctype.h>
#include <inttypes.h>

#define	SCF_TMPL_PG_COMMON_NAME_C	"common_name_C"

#define	SCF__TMPL_ITER_NONE		0
#define	SCF__TMPL_ITER_INST		1
#define	SCF__TMPL_ITER_RESTARTER	2
#define	SCF__TMPL_ITER_GLOBAL		3

#define	SCF_TMPL_PG_NT		0
#define	SCF_TMPL_PG_N		1
#define	SCF_TMPL_PG_T		2
#define	SCF_TMPL_PG_WILD	3

struct scf_pg_tmpl {
	int pt_populated;
	scf_handle_t *pt_h;
	scf_propertygroup_t *pt_pg;
	scf_service_t *pt_orig_svc;
	scf_service_t *pt_svc;
	scf_instance_t *pt_orig_inst;
	scf_instance_t *pt_inst;
	scf_snapshot_t *pt_snap;
	int pt_is_iter;
	scf_iter_t *pt_iter;
	int pt_iter_last;
};

#define	SCF_WALK_ERROR		-1
#define	SCF_WALK_NEXT		0
#define	SCF_WALK_DONE		1

struct pg_tmpl_walk {
	const char *pw_snapname;
	const char *pw_pgname;
	const char *pw_pgtype;
	scf_instance_t *pw_inst;
	scf_service_t *pw_svc;
	scf_snapshot_t *pw_snap;
	scf_propertygroup_t *pw_pg;
	const char *pw_target;
	char *pw_tmpl_pgname;
};

typedef struct pg_tmpl_walk pg_tmpl_walk_t;

typedef int walk_template_inst_func_t(scf_service_t *_svc,
    scf_instance_t *_inst, pg_tmpl_walk_t *p);

struct scf_prop_tmpl {
	int prt_populated;
	scf_handle_t *prt_h;
	scf_pg_tmpl_t *prt_t;
	scf_propertygroup_t *prt_pg;
	char *prt_pg_name;
	scf_iter_t *prt_iter;
};

/*
 * Common server errors are usually passed back to the caller.  This
 * array defines them centrally so that they don't need to be enumerated
 * in every libscf call.
 */
static const scf_error_t errors_server[] = {
	SCF_ERROR_BACKEND_ACCESS,
	SCF_ERROR_CONNECTION_BROKEN,
	SCF_ERROR_DELETED,
	SCF_ERROR_HANDLE_DESTROYED,
	SCF_ERROR_INTERNAL,
	SCF_ERROR_NO_MEMORY,
	SCF_ERROR_NO_RESOURCES,
	SCF_ERROR_NOT_BOUND,
	SCF_ERROR_PERMISSION_DENIED,
	0
	};

/*
 * int ismember()
 *
 * Returns 1 if the supplied error is a member of the error array, 0
 * if it is not.
 */
int
ismember(const scf_error_t error, const scf_error_t error_array[])
{
	int i;

	for (i = 0; error_array[i] != 0; ++i) {
		if (error == error_array[i])
			return (1);
	}

	return (0);
}

/*
 * char *_scf_tmpl_get_fmri()
 *
 * Given a pg_tmpl, returns the FMRI of the service or instance that
 * template describes.  The allocated string must be freed with free().
 *
 * On failure, returns NULL and sets scf_error() to _CONNECTION_BROKEN,
 * _DELETED, or _NO_MEMORY.
 */
static char *
_scf_tmpl_get_fmri(const scf_pg_tmpl_t *t)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_FMRI_LENGTH) + 1;
	int r;
	char *buf = malloc(sz);

	assert(t->pt_svc != NULL || t->pt_inst != NULL);
	assert(t->pt_svc == NULL || t->pt_inst == NULL);

	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (buf);
	}

	if (t->pt_inst != NULL)
		r = scf_instance_to_fmri(t->pt_inst, buf, sz);
	else
		r = scf_service_to_fmri(t->pt_svc, buf, sz);

	if (r == -1) {
		if (ismember(scf_error(), errors_server)) {
			free(buf);
			buf = NULL;
		} else {
			assert(0);
			abort();
		}
	}

	return (buf);
}

/*
 * char *_scf_get_pg_type()
 *
 * Given a propertygroup, returns an allocated string containing the
 * type.  The string must be freed with free().
 *
 * On failure, returns NULL and sets scf_error() to: _CONNECTION_BROKEN,
 * _DELETED, or _NO_MEMORY.
 */
static char *
_scf_get_pg_type(scf_propertygroup_t *pg)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_PG_TYPE_LENGTH) + 1;
	char *buf = malloc(sz);

	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	} else if (scf_pg_get_type(pg, buf, sz) == -1) {
		if (ismember(scf_error(), errors_server)) {
			free(buf);
			buf = NULL;
		} else {
			assert(0);
			abort();
		}
	}

	return (buf);
}

/*
 * char *_scf_get_prop_name()
 *
 * Given a property, returns the name in an allocated string.  The string must
 * be freed with free().
 *
 * On error, returns NULL and sets scf_error() to _CONNECTION_BROKEN,
 * _DELETED, or _NO_MEMORY.
 */
static char *
_scf_get_prop_name(scf_property_t *prop)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	char *buf = malloc(sz);

	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	} else if (scf_property_get_name(prop, buf, sz) == -1) {
		if (ismember(scf_error(), errors_server)) {
			free(buf);
			buf = NULL;
		} else {
			assert(0);
			abort();
		}
	}

	return (buf);
}

/*
 * char *_scf_get_prop_type()
 *
 * Given a property, returns the type in an allocated string.  The string must
 * be freed with free().
 *
 * On error, returns NULL and sets scf_error() to _CONNECTION_BROKEN,
 * _DELETED, or _NO_MEMORY.
 */
static char *
_scf_get_prop_type(scf_property_t *prop)
{
	scf_type_t type;
	char *ret;

	if (scf_property_type(prop, &type) == -1) {
		if (ismember(scf_error(), errors_server)) {
			return (NULL);
		} else {
			assert(0);
			abort();
		}
	}

	ret = strdup(scf_type_to_string(type));
	if (ret == NULL)
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);

	return (ret);
}

/*
 * int _read_single_value_from_pg()
 *
 * Reads a single value from the pg and property name specified.  On success,
 * returns an allocated value that must be freed.
 *
 * Returns -1 on failure, sets scf_error() to:
 *  SCF_ERROR_BACKEND_ACCESS
 *  SCF_ERROR_CONNECTION_BROKEN
 *  SCF_ERROR_CONSTRAINT_VIOLATED
 *    Property has more than one value associated with it.
 *  SCF_ERROR_DELETED
 *  SCF_ERROR_HANDLE_DESTROYED
 *  SCF_ERROR_INTERNAL
 *  SCF_ERROR_INVALID_ARGUMENT
 *    prop_name not a valid property name.
 *  SCF_ERROR_NO_MEMORY
 *  SCF_ERROR_NO_RESOURCES
 *  SCF_ERROR_NOT_BOUND
 *  SCF_ERROR_NOT_FOUND
 *    Property doesn't exist or exists and has no value.
 *  SCF_ERROR_NOT_SET
 *    Property group specified by pg is not set.
 *  SCF_ERROR_PERMISSION_DENIED
 */
static int
_read_single_value_from_pg(scf_propertygroup_t *pg, const char *prop_name,
    scf_value_t **val)
{
	scf_handle_t *h;
	scf_property_t *prop;
	int ret = 0;

	assert(val != NULL);
	if ((h = scf_pg_handle(pg)) == NULL) {
		assert(scf_error() == SCF_ERROR_HANDLE_DESTROYED);
		return (-1);
	}

	prop = scf_property_create(h);
	*val = scf_value_create(h);

	if (prop == NULL || *val == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		goto read_single_value_from_pg_fail;
	}

	if (scf_pg_get_property(pg, prop_name, prop) != 0) {
		assert(scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto read_single_value_from_pg_fail;
	}

	if (scf_property_get_value(prop, *val) == -1) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		assert(scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto read_single_value_from_pg_fail;
	}

	goto read_single_value_from_pg_done;

read_single_value_from_pg_fail:
	scf_value_destroy(*val);
	*val = NULL;
	ret = -1;

read_single_value_from_pg_done:
	scf_property_destroy(prop);
	return (ret);
}

/*
 * char *_scf_read_single_astring_from_pg()
 *
 * Reads an astring from the pg and property name specified.  On success,
 * returns an allocated string.  The string must be freed with free().
 *
 * Returns NULL on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *     Property has more than one value associated with it.
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     prop_name not a valid property name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_NOT_SET
 *     The property group specified by pg is not set.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TYPE_MISMATCH
 */
char *
_scf_read_single_astring_from_pg(scf_propertygroup_t *pg, const char *prop_name)
{
	scf_value_t *val;
	char *ret = NULL;
	ssize_t rsize = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH) + 1;

	assert(rsize != 0);
	if (_read_single_value_from_pg(pg, prop_name, &val) == -1)
		return (NULL);

	ret = malloc(rsize);
	if (ret == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	if (scf_value_get_astring(val, ret, rsize) < 0) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		free(ret);
		ret = NULL;
	}

cleanup:
	scf_value_destroy(val);
	return (ret);
}

/*
 * char *_scf_read_tmpl_prop_type_as_string()
 *
 * Reads the property type and returns it as an allocated string.  The string
 * must be freed with free().
 *
 * Returns NULL on failure, sets scf_error() to _BACKEND_ACCESS,
 * _CONNECTION_BROKEN, _DELETED, _HANDLE_DESTROYED, _INTERNAL, _NO_MEMORY,
 * _NO_RESOURCES, _NOT_BOUND, _PERMISSION_DENIED, or _TEMPLATE_INVALID.
 */
char *
_scf_read_tmpl_prop_type_as_string(const scf_prop_tmpl_t *pt)
{
	char *type;

	type = _scf_read_single_astring_from_pg(pt->prt_pg,
	    SCF_PROPERTY_TM_TYPE);
	if (type == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (NULL);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_NOT_FOUND:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (NULL);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (type);
}

/*
 * int _read_single_boolean_from_pg()
 *
 * Reads a boolean from the pg and property name specified.
 *
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *     Property has more than one value associated with it.
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     prop_name is not a valid property name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_NOT_SET
 *     The property group specified by pg is not set.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TYPE_MISMATCH
 */
static int
_read_single_boolean_from_pg(scf_propertygroup_t *pg, const char *prop_name,
    uint8_t *bool)
{
	scf_value_t *val;
	int ret = 0;

	if (_read_single_value_from_pg(pg, prop_name, &val) == -1)
		return (-1);

	if (scf_value_get_boolean(val, bool) < 0) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		ret = -1;
	}

	scf_value_destroy(val);
	return (ret);
}

/*
 * static char ** _append_astrings_values()
 *
 * This function reads the values from the property prop_name in pg and
 * appends to an existing scf_values_t *vals.  vals may be empty, but
 * must exist.  The function skips over zero-length and duplicate values.
 *
 * Returns NULL on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     prop_name is not a valid property name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_NOT_SET
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TYPE_MISMATCH
 */
static char **
_append_astrings_values(scf_propertygroup_t *pg, const char *prop_name,
    scf_values_t *vals)
{
	scf_handle_t *h;
	scf_property_t *prop;
	scf_value_t *val;
	scf_iter_t *iter;
	ssize_t rsize = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH) + 1;
	int err, count, cursz, i;

	assert(vals != NULL);
	assert(vals->value_type == SCF_TYPE_ASTRING);
	assert(vals->reserved == NULL);
	count = vals->value_count;
	if (count == 0) {
		cursz = 8;
		vals->values.v_astring = calloc(cursz, sizeof (char *));
		if (vals->values.v_astring == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			return (NULL);
		}
	} else {
		/*
		 * The array may be bigger, but it is irrelevant since
		 * we will always re-allocate a new one.
		 */
		cursz = count;
	}

	if ((h = scf_pg_handle(pg)) == NULL) {
		assert(scf_error() == SCF_ERROR_HANDLE_DESTROYED);
		return (NULL);
	}

	prop = scf_property_create(h);
	val = scf_value_create(h);
	iter = scf_iter_create(h);

	if (prop == NULL || val == NULL || iter == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		goto append_single_astring_from_pg_fail;
	}

	if (scf_pg_get_property(pg, prop_name, prop) != 0) {
		assert(scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto append_single_astring_from_pg_fail;
	}

	if (scf_iter_property_values(iter, prop) != 0) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		assert(scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto append_single_astring_from_pg_fail;
	}

	while ((err = scf_iter_next_value(iter, val)) == 1) {
		int flag;
		int r;

		if (count + 1 >= cursz) {
			void *aux;

			cursz *= 2;
			if ((aux = calloc(cursz, sizeof (char *))) == NULL) {
				(void) scf_set_error(SCF_ERROR_NO_MEMORY);
				goto append_single_astring_from_pg_fail;
			}
			(void) memcpy(aux, vals->values.v_astring,
			    count * sizeof (char *));
			free(vals->values.v_astring);
			vals->values.v_astring = aux;
		}

		vals->values.v_astring[count] = malloc(rsize);
		if (vals->values.v_astring[count] == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto append_single_astring_from_pg_fail;
		}

		if ((r = scf_value_get_astring(val,
		    vals->values.v_astring[count], rsize)) <= 0) {
			/* discard zero length strings */
			if (r == 0) {
				free(vals->values.v_astring[count]);
				continue;
			}
			assert(scf_error() != SCF_ERROR_NOT_SET);
			goto append_single_astring_from_pg_fail;
		}
		for (i = 0, flag = 0; i < count; ++i) {
			/* find  and discard duplicates */
			if (strncmp(vals->values.v_astring[i],
			    vals->values.v_astring[count], rsize) == 0) {
				free(vals->values.v_astring[count]);
				flag = 1;
				break;
			}
		}
		if (flag == 1)
			continue;

		count++;
	}

	vals->value_count = count;

	if (err != 0) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		assert(scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto append_single_astring_from_pg_fail;
	} else {
		vals->values_as_strings = vals->values.v_astring;
	}

	goto append_single_astring_from_pg_done;

append_single_astring_from_pg_fail:
	for (i = 0; i <= count; ++i) {
		if (vals->values.v_astring[i] != NULL)
			free(vals->values.v_astring[i]);
		vals->values.v_astring[i] = NULL;
	}
	free(vals->values.v_astring);
	vals->values.v_astring = NULL;
	vals->value_count = 0;

append_single_astring_from_pg_done:
	scf_iter_destroy(iter);
	scf_property_destroy(prop);
	scf_value_destroy(val);
	return (vals->values.v_astring);
}

/*
 * Returns NULL on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     prop_name is not a valid property name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_NOT_SET
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TYPE_MISMATCH
 */
static char **
_read_astrings_values(scf_propertygroup_t *pg, const char *prop_name,
    scf_values_t *vals)
{
	assert(vals != NULL);
	vals->value_count = 0;
	vals->value_type = SCF_TYPE_ASTRING;
	vals->reserved = NULL;
	return (_append_astrings_values(pg, prop_name, vals));
}

void
_scf_sanitize_locale(char *locale)
{
	for (; *locale != '\0'; locale++)
		if (!isalnum(*locale) && *locale != '_')
			*locale = '_';
}

/*
 * The returned string needs to be freed by the caller
 * Returns NULL on failure.  Sets scf_error() to:
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_INVALID_ARGUMENT
 *     Name isn't short enough to add the locale to.
 */
static char *
_add_locale_to_name(const char *name, const char *locale)
{
	char *lname = NULL;
	ssize_t lsz;
	char *loc;

	if (locale == NULL)
		locale = setlocale(LC_MESSAGES, NULL);
	loc = strdup(locale);
	if (loc == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	} else {
		_scf_sanitize_locale(loc);
	}

	lsz = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	lname = malloc(lsz);
	if (lname == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	(void) strlcpy(lname, name, lsz);
	if (strlcat(lname, loc, lsz) >= lsz) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(lname);
		lname = NULL;
	}
cleanup:
	free(loc);

	return (lname);
}

/*
 * char *_tmpl_pg_name(pg, type, use_type)
 *
 * pg and type can both be NULL.  Returns the name of the most specific
 * template property group name based on the inputs.
 * If use_type is set and pg is not NULL, a property group name for a
 * property group template that has type defined is returned, even if no
 * type is provided.
 *
 * Returns NULL on failure and sets scf_error() to:
 *   SCF_ERROR_INVALID_ARGUMENT
 *     can't combine the arguments and get a reasonable length name
 *   SCF_ERROR_NO_MEMORY
 *
 */
static char *
_tmpl_pg_name(const char *pg, const char *type, int use_type)
{
	char *name;
	ssize_t limit, size = 0;

	limit = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	name = malloc(limit);
	if (name == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	if (pg == NULL && type == NULL) {
		if (strlcpy(name, SCF_PG_TM_PG_PATTERN_PREFIX, limit) >=
		    limit) {
			assert(0);
			abort();
		}
		return (name);
	} else if (pg != NULL && type != NULL) {
		size = snprintf(name, limit, "%s%s",
		    SCF_PG_TM_PG_PATTERN_NT_PREFIX, pg);
	} else if (pg != NULL && type == NULL && use_type == 1) {
		size = snprintf(name, limit, "%s%s",
		    SCF_PG_TM_PG_PATTERN_NT_PREFIX, pg);
	} else if (pg != NULL && type == NULL) {
		size = snprintf(name, limit, "%s%s",
		    SCF_PG_TM_PG_PATTERN_N_PREFIX, pg);
	} else if (type != NULL && pg == NULL) {
		size = snprintf(name, limit, "%s%s",
		    SCF_PG_TM_PG_PATTERN_T_PREFIX, type);
	} else {
		assert(0);
		abort();
	}

	if (size >= limit) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		return (NULL);
	} else {
		return (name);
	}
}

/*
 * _scf_get_pg_name()
 * Gets the name of the supplied property group.  On success, returns an
 * allocated string.  The string must be freed by free().
 *
 * Returns NULL on failure and sets scf_error() to _CONNECTION_BROKEN,
 * _DELETED, or _NO_MEMORY.
 */
static char *
_scf_get_pg_name(scf_propertygroup_t *pg)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	char *buf = malloc(sz);

	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	} else if (scf_pg_get_name(pg, buf, sz) == -1) {
		if (ismember(scf_error(), errors_server)) {
			free(buf);
			buf = NULL;
		} else {
			assert(0);
			abort();
		}
	}

	return (buf);
}

/*
 * char *_tmpl_prop_name()
 *
 * Returns the name of the property template prop (which is the name of
 * the property template property group) in the property group
 * template t. Returns NULL on failure and sets scf_error() to:
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_INVALID_ARGUMENT
 *     can't combine the arguments and get a reasonable length name
 *   SCF_ERROR_NO_MEMORY
 */
static char *
_tmpl_prop_name(const char *prop, scf_pg_tmpl_t *t)
{
	char *name = NULL, *pg_name = NULL;
	size_t prefix_size;
	ssize_t limit, size = 0;

	assert(prop != NULL);
	assert(t->pt_pg != NULL);

	limit = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	name = malloc(limit);
	if (name == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	if ((pg_name = _scf_get_pg_name(t->pt_pg)) == NULL) {
		free(name);
		return (NULL);
	}

	prefix_size = strlen(SCF_PG_TM_PG_PAT_BASE);
	if (strncmp(pg_name, SCF_PG_TM_PG_PAT_BASE, prefix_size) != 0) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(pg_name);
		return (NULL);
	}

	size = snprintf(name, limit, "%s%s_%s", SCF_PG_TM_PROP_PATTERN_PREFIX,
	    pg_name + prefix_size, prop);

	if (size >= limit) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(pg_name);
		return (NULL);
	} else {
		free(pg_name);
		return (name);
	}
}

/*
 *  int _get_snapshot()
 *
 *  Gets the specified snapshot.  If "snapshot" isn't defined, use the
 *  running snapshot.  If the snapshot isn't found, that may or may
 *  not be an error depending on the caller.  Return 0 in that case,
 *  but leave scf_error() set to SCF_ERROR_NOT_FOUND.  On all other
 *  errors, set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     The handle argument is NULL, or snaphot is not a valid snapshot name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 */
static int
_get_snapshot(scf_instance_t *inst, const char *snapshot,
    scf_snapshot_t **snap)
{
	int err;
	scf_handle_t *h;

	h = scf_instance_handle(inst);
	if (h == NULL) {
		*snap = NULL;
		return (-1);
	}

	if ((*snap = scf_snapshot_create(h)) == NULL) {
		return (-1);
	}

	/* Use running snapshot by default. */
	if (snapshot == NULL)
		err = scf_instance_get_snapshot(inst, "running", *snap);
	else
		err = scf_instance_get_snapshot(inst, snapshot, *snap);

	if (err != 0) {
		if (ismember(scf_error(), errors_server)) {
			scf_snapshot_destroy(*snap);
			*snap = NULL;
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_INVALID_ARGUMENT:
			scf_snapshot_destroy(*snap);
			*snap = NULL;
			return (-1);

		case SCF_ERROR_NOT_FOUND:
			scf_snapshot_destroy(*snap);
			*snap = NULL;
			return (0);

		case SCF_ERROR_NOT_SET:
		case SCF_ERROR_HANDLE_MISMATCH:
		default:
			assert(0);
			abort();
		}
	}

	/*
	 * Explicitly set SCF_ERROR_NONE so that the SCF_ERROR_NOT_FOUND
	 * return above is explicitly guaranteed to be from
	 * scf_instance_get_snapshot().
	 */
	(void) scf_set_error(SCF_ERROR_NONE);
	return (0);
}

/*
 * Returns NULL on error, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *     The restarter's FMRI does not match an existing instance.
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     The restarter's FMRI is not a valid FMRI.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_TEMPLATE_INVALID
 *     restarter property is not SCF_TYPE_ASTRING or has more than one value
 */
static scf_instance_t *
_get_restarter_inst(scf_handle_t *h, scf_service_t *svc,
    scf_instance_t *inst, scf_snapshot_t *s)
{
	char *restarter = NULL;
	scf_instance_t *ri = NULL;
	scf_propertygroup_t *pg = NULL;
	int ret = 0;

	assert(svc != NULL || inst != NULL);
	assert(svc ==  NULL || inst == NULL);

	if ((ri = scf_instance_create(h)) == NULL ||
	    (pg = scf_pg_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		goto _get_restarter_inst_fail;
	}

	if (inst != NULL)
		ret = scf_instance_get_pg_composed(inst, s, SCF_PG_GENERAL,
		    pg);
	else
		ret = scf_service_get_pg(svc, SCF_PG_GENERAL, pg);

	if (ret != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto _get_restarter_inst_fail;
		} else switch (scf_error()) {
		case SCF_ERROR_NOT_FOUND:
			/* Assume default restarter. */
			break;

		case SCF_ERROR_NOT_SET:
		case SCF_ERROR_HANDLE_MISMATCH:
			/*
			 * If the arguments to the above functions
			 * aren't derived from the same handle, there's
			 * something wrong with the internal implementation,
			 * not the public caller further up the chain.
			 */
		case SCF_ERROR_INVALID_ARGUMENT:
		default:
			assert(0);
			abort();
		}
	} else {
		restarter = _scf_read_single_astring_from_pg(pg,
		    SCF_PROPERTY_RESTARTER);
		/* zero length string is NOT a valid restarter */
		if (restarter != NULL && restarter[0] == '\0') {
			free(restarter);
			restarter = NULL;
		} else if (restarter == NULL) {
			if (ismember(scf_error(), errors_server)) {
				goto _get_restarter_inst_fail;
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				break;

			case SCF_ERROR_CONSTRAINT_VIOLATED:
			case SCF_ERROR_TYPE_MISMATCH:
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
				goto _get_restarter_inst_fail;

			case SCF_ERROR_NOT_SET:
			case SCF_ERROR_INVALID_ARGUMENT:
			default:
				assert(0);
				abort();
			}
		}
	}

	if (restarter == NULL) {
		/* Use default restarter */
		restarter = strdup(SCF_SERVICE_STARTD);
		if (restarter == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto _get_restarter_inst_fail;
		}
	}

	if (scf_handle_decode_fmri(h, restarter, NULL, NULL, ri, NULL, NULL,
	    SCF_DECODE_FMRI_EXACT|SCF_DECODE_FMRI_REQUIRE_INSTANCE) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto _get_restarter_inst_fail;
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_FOUND:
			goto _get_restarter_inst_fail;

		case SCF_ERROR_HANDLE_MISMATCH:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}
	free(restarter);
	scf_pg_destroy(pg);

	return (ri);

_get_restarter_inst_fail:
	free(restarter);
	scf_instance_destroy(ri);
	scf_pg_destroy(pg);
	return (NULL);
}

/*
 * Returns NULL on error, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *     Restarter property has more than one value associated with it,
 *     or FMRI does not meet restrictions in scf_handle_decode_fmri() flags.
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     The fmri argument in scf_handle_decode_fmri() is not a valid FMRI.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 */
static scf_instance_t *
_get_global_inst(scf_handle_t *h)
{
	scf_instance_t *ri;

	if ((ri = scf_instance_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		(void) scf_set_error(SCF_ERROR_NO_RESOURCES);
		return (NULL);
	}

	if (scf_handle_decode_fmri(h, SCF_INSTANCE_GLOBAL, NULL, NULL, ri,
	    NULL, NULL,
	    SCF_DECODE_FMRI_EXACT|SCF_DECODE_FMRI_REQUIRE_INSTANCE) != 0) {
		if (ismember(scf_error(), errors_server)) {
			scf_instance_destroy(ri);
			return (NULL);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_FOUND:
			scf_instance_destroy(ri);
			return (NULL);

		case SCF_ERROR_HANDLE_MISMATCH:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (ri);
}

/*
 * Call the supplied function for each of the service or instance, the
 * service's restarter, and the globally defined template instance.
 * If the function returns SCF_WALK_ERROR, the walk is ended.  If
 * the function returns SCF_WALK_NEXT, the next entity is tried.
 *
 * The function is only expected to return SCF_WALK_DONE if it has
 * found a property group match in the current entity, and has
 * populated p->pw_pg with the matching property group.
 *
 * The caller of _walk_template_instances() MUST check if the passed parameters
 * inst and svc match the fields pw_inst and pw_svc in the resulting
 * pg_tmpl_walk_t and call the destructor for the unmatching objects. The walker
 * may silently drop them if the template definition is in the restarter or in
 * the global instance.
 */
static void
_walk_template_instances(scf_service_t *svc, scf_instance_t *inst,
    scf_snapshot_t *snap, walk_template_inst_func_t *func,
    pg_tmpl_walk_t *p, int flag)
{
	scf_instance_t *tmpl_inst = NULL;
	scf_handle_t *h;
	int ret;
	char *tg = NULL;

	assert(svc != NULL || inst != NULL);
	assert(svc == NULL || inst == NULL);

	if (inst != NULL)
		h = scf_instance_handle(inst);
	else
		h = scf_service_handle(svc);
	if (h == NULL)
		goto done;

	/* First, use supplied service or instance */
	p->pw_target = SCF_TM_TARGET_THIS;
	ret = func(svc, inst, p);
	switch (ret) {
	case SCF_WALK_NEXT:
		break;
	case SCF_WALK_DONE:
		/*
		 * Check that the template scoping matches and if not,
		 * continue.
		 */
		assert(p->pw_pg != NULL);
		tg = _scf_read_single_astring_from_pg(p->pw_pg,
		    SCF_PROPERTY_TM_TARGET);
		if (tg == NULL || /* scf_error() was set */
		    (strcmp(tg, SCF_TM_TARGET_INSTANCE) != 0 &&
		    strcmp(tg, SCF_TM_TARGET_THIS) != 0 &&
		    (flag & SCF_PG_TMPL_FLAG_EXACT) !=
		    SCF_PG_TMPL_FLAG_EXACT)) {
			scf_pg_destroy(p->pw_pg);
			p->pw_pg = NULL;
			if (tg != NULL) {
				free(tg);
				tg = NULL;
				break;
			}
		}
		/*FALLTHROUGH*/
	case SCF_WALK_ERROR:
		goto done;
		/*NOTREACHED*/
	default:
		assert(0);
		abort();
	}

	/* Next the restarter. */
	p->pw_target = SCF_TM_TARGET_DELEGATE;
	tmpl_inst = _get_restarter_inst(h, svc, inst, snap);
	if (tmpl_inst != NULL) {
		ret = func(NULL, tmpl_inst, p);
		switch (ret) {
		case SCF_WALK_NEXT:
			break;
		case SCF_WALK_DONE:
			/*
			 * Check that the template scoping matches and if not,
			 * continue.
			 */
			assert(p->pw_pg != NULL);
			tg = _scf_read_single_astring_from_pg(p->pw_pg,
			    SCF_PROPERTY_TM_TARGET);
			if (tg == NULL || /* scf_error() was set */
			    strcmp(tg, SCF_TM_TARGET_DELEGATE) != 0) {
				scf_pg_destroy(p->pw_pg);
				p->pw_pg = NULL;
				if (tg != NULL) {
					free(tg);
					tg = NULL;
					break;
				}
			}
			/*FALLTHROUGH*/
		case SCF_WALK_ERROR:
			goto done;
			/*NOTREACHED*/
		default:
			assert(0);
			abort();
		}
	}

	p->pw_target = SCF_TM_TARGET_ALL;
	scf_instance_destroy(tmpl_inst);
	tmpl_inst = _get_global_inst(h);
	if (tmpl_inst != NULL) {
		ret = func(NULL, tmpl_inst, p);
		switch (ret) {
		case SCF_WALK_NEXT:
			break;
		case SCF_WALK_DONE:
			/*
			 * Check that the template scoping matches and if not,
			 * continue.
			 */
			assert(p->pw_pg != NULL);
			tg = _scf_read_single_astring_from_pg(p->pw_pg,
			    SCF_PROPERTY_TM_TARGET);
			if (tg == NULL || /* scf_error() was set */
			    strcmp(tg, SCF_TM_TARGET_ALL) != 0) {
				scf_pg_destroy(p->pw_pg);
				p->pw_pg = NULL;
				if (tg != NULL) {
					free(tg);
					tg = NULL;
					break;
				}
			}
			/*FALLTHROUGH*/
		case SCF_WALK_ERROR:
			goto done;
			/*NOTREACHED*/
		default:
			assert(0);
			abort();
		}
	}

done:
	free(tg);
	if (ret != SCF_WALK_DONE)
		scf_instance_destroy(tmpl_inst);
	p->pw_target = NULL;
}

/*
 * _get_pg() returns 0 on success and -1 on failure.  Sets scf_error()
 * on failure.
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_MISMATCH
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     name is not a valid property group.
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_NOT_SET
 */
static int
_get_pg(scf_service_t *svc, scf_instance_t *inst,
    const scf_snapshot_t *snap, const char *name, scf_propertygroup_t *pg)
{
	int ret;

	assert(svc != NULL || inst != NULL);
	assert(svc == NULL || inst == NULL);
	assert(pg != NULL);

	if (inst != NULL)
		ret = scf_instance_get_pg_composed(inst, snap, name, pg);
	else
		ret = scf_service_get_pg(svc, name, pg);

	return (ret);
}

/*
 * Returns SCF_WALK_NEXT for not found, SCF_WALK_ERROR for error,
 * and SCF_WALK_DONE for found.
 * On error, destroy pg and set it to NULL.
 *
 * Sets scf_error() if SCF_WALK_ERROR is returned to _BACKEND_ACCESS,
 * _CONNECTION_BROKEN, _INTERNAL, _INVALID_ARGUMENT (name is not a
 *  valid property group), _NO_RESOURCES, or _NOT_BOUND.
 */
static int
_lookup_pg(scf_service_t *svc, scf_instance_t *inst,
    const scf_snapshot_t *snap, const char *name, scf_propertygroup_t *pg)
{
	int ret;

	ret = _get_pg(svc, inst, snap, name, pg);

	if (ret == 0) {
		return (SCF_WALK_DONE);
	} else {
		switch (scf_error()) {
		case SCF_ERROR_NOT_FOUND:
		case SCF_ERROR_DELETED:
			return (SCF_WALK_NEXT);

		case SCF_ERROR_BACKEND_ACCESS:
		case SCF_ERROR_CONNECTION_BROKEN:
		case SCF_ERROR_INTERNAL:
		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_BOUND:
		case SCF_ERROR_NO_RESOURCES:
			scf_pg_destroy(pg);
			pg = NULL;
			return (SCF_WALK_ERROR);

		case SCF_ERROR_NOT_SET:
		case SCF_ERROR_HANDLE_MISMATCH:
		default:
			assert(0);
			abort();
		}
	}

	/*NOTREACHED*/
}

/*
 * If match, return 0.  If no match, return 1.  If error, return -1.
 * On error set scf_error() to _BACKEND_ACCESS, _CONNECTION_BROKEN,
 * _HANDLE_DESTROYED, _INTERNAL, _NO_MEMORY, _NO_RESOURCES, _NOT_BOUND,
 * _NOT_SET (property group specified by pg is not set), _PERMISSION_DENIED,
 * or _TEMPLATE_INVALID (target property is not SCF_TYPE_ASTRING or has
 * more than one value).
 */
static int
check_target_match(scf_propertygroup_t *pg, const char *target)
{
	char *pg_target;
	int ret = 0;

	pg_target = _scf_read_single_astring_from_pg(pg,
	    SCF_PROPERTY_TM_TARGET);
	if (pg_target == NULL) {
		switch (scf_error()) {
		case SCF_ERROR_DELETED:
		case SCF_ERROR_NOT_FOUND:
			return (1);

		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(
			    SCF_ERROR_TEMPLATE_INVALID);
			/*FALLTHROUGH*/

		case SCF_ERROR_BACKEND_ACCESS:
		case SCF_ERROR_CONNECTION_BROKEN:
		case SCF_ERROR_HANDLE_DESTROYED:
		case SCF_ERROR_INTERNAL:
		case SCF_ERROR_NO_RESOURCES:
		case SCF_ERROR_NOT_BOUND:
		case SCF_ERROR_PERMISSION_DENIED:
			return (-1);

		case SCF_ERROR_NOT_SET:
		case SCF_ERROR_INVALID_ARGUMENT:
		default:
			assert(0);
			abort();
		}
		/*NOTREACHED*/
	}

	/* For a desired target of 'this', check for 'this' and 'instance'. */
	if ((strcmp(target, SCF_TM_TARGET_INSTANCE) == 0 ||
	    strcmp(target, SCF_TM_TARGET_THIS) == 0) &&
	    (strcmp(pg_target, SCF_TM_TARGET_INSTANCE) == 0 ||
	    strcmp(pg_target, SCF_TM_TARGET_THIS) == 0)) {
		goto cleanup;
	}

	if (strcmp(target, SCF_TM_TARGET_DELEGATE) == 0 &&
	    strcmp(pg_target, SCF_TM_TARGET_DELEGATE) == 0) {
		goto cleanup;
	}

	if (strcmp(target, SCF_TM_TARGET_ALL) == 0 &&
	    strcmp(pg_target, SCF_TM_TARGET_ALL) == 0) {
		goto cleanup;
	}

	ret = 1;
cleanup:
	free(pg_target);
	return (ret);
}

/*
 * Check if a matching template property group exists for each of:
 * name and type, name only, type only, and completely wildcarded
 * template.
 *
 * Both pg_name and pg_type are optional.
 *
 * Returns NULL on failure, sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     can't combine the _tmpl_pg_name arguments and get a reasonable
 *     length name, or pg_name is not a valid property group.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     target property is not SCF_TYPE_ASTRING or has more than one value.
 */
static scf_propertygroup_t *
_find_template_pg_match(scf_service_t *svc, scf_instance_t *inst,
    const scf_snapshot_t *snap, const char *pg_name, const char *pg_type,
    const char *target, char **tmpl_pg_name)
{
	int ret, r;
	scf_propertygroup_t *pg = NULL;
	scf_handle_t *h;
	scf_iter_t *iter;
	char *name, *type;

	assert(inst != NULL || svc != NULL);
	assert(inst == NULL || svc == NULL);

	if (inst != NULL)
		h = scf_instance_handle(inst);
	else
		h = scf_service_handle(svc);
	if (h == NULL) {
		return (NULL);
	}

	if ((pg = scf_pg_create(h)) == NULL ||
	    (iter = scf_iter_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		scf_pg_destroy(pg);
		return (NULL);
	}

	/*
	 * We're going to walk through the possible pg templates that
	 * could match the supplied name and type.  We do this
	 * by explicit name lookups when possible to avoid having to
	 * keep track of a most-explicit-match during iteration.
	 */

	/* First look for a template with name and type set and matching. */
	*tmpl_pg_name = _tmpl_pg_name(pg_name, pg_type, 1);
	if (*tmpl_pg_name == NULL)
		goto fail;
	ret = _lookup_pg(svc, inst, snap, *tmpl_pg_name, pg);
	if (ret != SCF_WALK_NEXT) {
		if (pg != NULL) {
			if ((r = check_target_match(pg, target)) == 0)
				goto done;
			else if (r == -1)
				goto fail;
		} else {
			goto done;
		}
	}
	free(*tmpl_pg_name);

	/*
	 * Need to search on a name-only match before searching on
	 * type matches.
	 */

	*tmpl_pg_name = _tmpl_pg_name(pg_name, NULL, 0);
	if (*tmpl_pg_name == NULL)
		goto fail;
	ret = _lookup_pg(svc, inst, snap, *tmpl_pg_name, pg);
	if (ret != SCF_WALK_NEXT) {
		if (pg != NULL) {
			if ((r = check_target_match(pg, target)) == 0)
				goto done;
			else if (r == -1)
				goto fail;
		} else {
			goto done;
		}
	}
	free(*tmpl_pg_name);

	/* Next, see if there's an "nt" template where the type matches. */
	if (pg_type != NULL && pg_name == NULL) {
		if (inst != NULL)
			ret = scf_iter_instance_pgs_typed_composed(iter, inst,
			    snap, SCF_GROUP_TEMPLATE_PG_PATTERN);
		else
			ret = scf_iter_service_pgs_typed(iter, svc,
			    SCF_GROUP_TEMPLATE_PG_PATTERN);

		if (ret != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto fail;
			} else {
				assert(0);
				abort();
			}
		}

		while ((ret = scf_iter_next_pg(iter, pg)) == 1) {
			/* Make sure this is a name and type specified pg. */
			name = _scf_read_single_astring_from_pg(pg,
			    SCF_PROPERTY_TM_NAME);
			if (name == NULL)
				continue;
			type = _scf_read_single_astring_from_pg(pg,
			    SCF_PROPERTY_TM_TYPE);
			if (type == NULL) {
				free(name);
				continue;
			}
			if (strcmp(pg_type, type) == 0 &&
			    check_target_match(pg, target) == 0) {
				*tmpl_pg_name = name;
				free(type);
				goto done;
			}
			free(type);
			free(name);
		}
		if (ret == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto fail;
			} else {
				assert(0);
				abort();
			}
		}
	}

	*tmpl_pg_name = _tmpl_pg_name(NULL, pg_type, 0);
	if (*tmpl_pg_name == NULL)
		goto fail;
	ret = _lookup_pg(svc, inst, snap, *tmpl_pg_name, pg);
	if (ret != SCF_WALK_NEXT) {
		if (pg != NULL) {
			if ((r = check_target_match(pg, target)) == 0)
				goto done;
			else if (r == -1)
				goto fail;
		} else {
			goto done;
		}
	}
	free(*tmpl_pg_name);

	*tmpl_pg_name = _tmpl_pg_name(NULL, NULL, 0);
	if (*tmpl_pg_name == NULL)
		goto fail;
	ret = _lookup_pg(svc, inst, snap, *tmpl_pg_name, pg);
	if (ret != SCF_WALK_NEXT) {
		if (pg != NULL) {
			if ((r = check_target_match(pg, target)) == 0)
				goto done;
			else if (r == -1)
				goto fail;
		} else {
			goto done;
		}
	}

	(void) scf_set_error(SCF_ERROR_NOT_FOUND);
fail:
	scf_pg_destroy(pg);
	if (*tmpl_pg_name != NULL)
		free(*tmpl_pg_name);
	*tmpl_pg_name = NULL;
	pg = NULL;
done:
	if (ret == SCF_WALK_ERROR)
		free(*tmpl_pg_name);
	scf_iter_destroy(iter);
	return (pg);
}

/*
 * Finds the pg match in either the supplied service or instance.
 * Returns SCF_WALK_ERROR, SCF_WALK_NEXT, or SCF_WALK_DONE.
 * If returning SCF_WALK_ERROR, sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     The snaphot is not a valid snapshot name,
 *     or can't create a reasonable property group template name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     target property is not SCF_TYPE_ASTRING or has more than one value.
 */
static int
find_pg_match(scf_service_t *svc, scf_instance_t *inst, pg_tmpl_walk_t *p)
{
	scf_snapshot_t *tmpl_snap = NULL;
	scf_propertygroup_t *pg;
	scf_handle_t *h;
	char *tmpl_pg_name;

	assert(svc != NULL || inst != NULL);
	assert(svc == NULL || inst == NULL);

	if (inst != NULL)
		h = scf_instance_handle(inst);
	else
		h = scf_service_handle(svc);
	if (h == NULL)
		return (SCF_WALK_ERROR);

	if (p->pw_snapname != NULL) {
		if (_get_snapshot(inst, p->pw_snapname, &tmpl_snap) == -1)
			return (SCF_WALK_ERROR);
	}
	pg = _find_template_pg_match(svc, inst, tmpl_snap, p->pw_pgname,
	    p->pw_pgtype, p->pw_target, &tmpl_pg_name);

	if (pg != NULL) {
		p->pw_snap = tmpl_snap;
		p->pw_pg = pg;
		p->pw_tmpl_pgname = tmpl_pg_name;
		p->pw_inst = inst;
		p->pw_svc = svc;
		return (SCF_WALK_DONE);
	}

	scf_snapshot_destroy(tmpl_snap);
	return (SCF_WALK_NEXT);
}

/*
 * return 0 on success and -1 on failure.
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_HANDLE_MISMATCH
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     FMRI argument, snapshot name, pg_name, or pg is invalid.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_NOT_SET
 */
int
scf_tmpl_get_by_pg(scf_propertygroup_t *pg, scf_pg_tmpl_t *pg_tmpl, int flags)
{
	char *fmribuf = NULL, *snapbuf = NULL, *pg_name = NULL, *pg_type = NULL;
	int ret;
	ssize_t fbufsz = scf_limit(SCF_LIMIT_MAX_FMRI_LENGTH) + 1;
	ssize_t nbufsz = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	ssize_t tbufsz = scf_limit(SCF_LIMIT_MAX_PG_TYPE_LENGTH) + 1;
	scf_instance_t *inst = NULL;
	scf_snaplevel_t *snaplvl = NULL;
	scf_service_t *svc = NULL;
	scf_handle_t *h;
	scf_snapshot_t *snap = NULL;
	pg_tmpl_walk_t *p = NULL;

	assert(fbufsz != 0 && nbufsz != 0 && tbufsz != 0);

	scf_tmpl_pg_reset(pg_tmpl);

	if ((h = scf_pg_handle(pg)) == NULL)
		return (-1);

	if ((inst = scf_instance_create(h)) == NULL ||
	    (svc = scf_service_create(h)) == NULL ||
	    (snaplvl = scf_snaplevel_create(h)) == NULL) {
		goto fail;
	}

	if ((fmribuf = malloc(fbufsz)) == NULL ||
	    (pg_name = malloc(nbufsz)) == NULL ||
	    (pg_type = malloc(tbufsz)) == NULL ||
	    (p = calloc(1, sizeof (pg_tmpl_walk_t))) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto fail;
	}

	if (scf_pg_get_name(pg, pg_name, nbufsz) < 0) {
		goto fail;
	}

	if (scf_pg_get_type(pg, pg_type, tbufsz) < 0) {
		goto fail;
	}
	p->pw_pgname = pg_name;
	p->pw_pgtype = pg_type;

	ret = scf_pg_get_parent_snaplevel(pg, snaplvl);
	if (ret == -1) {
		switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
			/* Parent type doesn't match.  Keep looking. */
			break;

		case SCF_ERROR_DELETED:
		case SCF_ERROR_NOT_BOUND:
		case SCF_ERROR_NOT_SET:
			/* Pass these back to the caller. */
			goto fail;

		case SCF_ERROR_HANDLE_MISMATCH:
		default:
			assert(0);
			abort();
		}

		/*
		 * No snapshot.  We'll use 'editing' by default since
		 * snap and snapbuf are NULL.
		 */
		p->pw_snapname = NULL;

	} else {
		if ((snap = scf_snapshot_create(h)) == NULL) {
			goto fail;
		}

		ret = scf_snaplevel_get_parent(snaplvl, snap);
		if (ret == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto fail;
			} else {
				assert(0);
				abort();
			}
		}

		/* Grab snapshot name while we're here. */
		if ((snapbuf = malloc(nbufsz)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto fail;
		}
		if (scf_snapshot_get_name(snap, snapbuf, nbufsz) < 0) {
			if (ismember(scf_error(), errors_server)) {
				goto fail;
			} else {
				assert(0);
				abort();
			}
		}
		p->pw_snapname = snapbuf;

		ret = scf_snapshot_get_parent(snap, inst);
		if (ret == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto fail;
			} else {
				assert(0);
				abort();
			}
		}

		_walk_template_instances(NULL, inst, snap,
		    (walk_template_inst_func_t *)find_pg_match, p, flags);
	}

	/* No snapshot parent.  Go looking for instance parent. */
	if (snapbuf == NULL) {
		/* First look for instance parent. */
		ret = scf_pg_get_parent_instance(pg, inst);
		if (ret == 0) {
			_walk_template_instances(NULL, inst, snap,
			    (walk_template_inst_func_t *)find_pg_match,
			    p, flags);
		/* OK, check for service parent */
		} else if (ret == -1 &&
		    scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED) {
			ret = scf_pg_get_parent_service(pg, svc);
			if (ret == 0) {
				_walk_template_instances(svc, NULL, snap,
				    (walk_template_inst_func_t *)find_pg_match,
				    p, flags);
			} else {
				switch (scf_error()) {
				case SCF_ERROR_CONSTRAINT_VIOLATED:
					(void) scf_set_error(
					    SCF_ERROR_NOT_FOUND);
					/*FALLTHROUGH*/

				case SCF_ERROR_CONNECTION_BROKEN:
				case SCF_ERROR_DELETED:
				case SCF_ERROR_HANDLE_MISMATCH:
				case SCF_ERROR_NOT_BOUND:
				case SCF_ERROR_NOT_SET:
					goto fail;

				default:
					assert(0);
					abort();
				}
			}
		} else {
			goto fail;
		}
	}

	if (p->pw_pg != NULL) {
		pg_tmpl->pt_h = h;
		pg_tmpl->pt_pg = p->pw_pg;
		pg_tmpl->pt_inst = p->pw_inst;
		/* we may get a different instance back */
		if (p->pw_inst != inst)
			scf_instance_destroy(inst);
		pg_tmpl->pt_snap = p->pw_snap;
		pg_tmpl->pt_svc = p->pw_svc;
		/* we may get a different service back */
		if (p->pw_svc != svc)
			scf_service_destroy(svc);
		pg_tmpl->pt_populated = 1;
		free(p->pw_tmpl_pgname);
		ret = 0;
		goto done;
	}

	(void) scf_set_error(SCF_ERROR_NOT_FOUND);

fail:
	ret = -1;
	scf_instance_destroy(inst);
	scf_service_destroy(svc);
done:
	scf_snapshot_destroy(snap);
	free(snapbuf);
	free(fmribuf);
	free(pg_name);
	free(pg_type);
	free(p);
	scf_snaplevel_destroy(snaplvl);
	return (ret);
}

/*
 * int scf_tmpl_get_by_pg_name()
 *
 * Get a template by a combination of the name and type.  Either name
 * or type can be null, which indicates a wildcard.  flags may be
 * SCF_PG_TMPL_FLAG_CURRENT (use current properties rather than
 * the defined or running snapshot), and SCF_PG_TMPL_FLAG_EXACT (match
 * only templates defined by the FMRI in question, not by its restarter
 * or globally).  Returns 0 on success and -1 on error, and sets
 * scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *     The connection to the repository was lost.
 *   SCF_ERROR_DELETED
 *     The instance has been deleted.
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     FMRI isn't valid, pg_name is too long to look for a template, or
 *     snapshot specified isn't a valid name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *     The server does not have adequate resources to complete the request.
 *   SCF_ERROR_NOT_BOUND
 *     The handle is not currently bound.
 *   SCF_ERROR_NOT_FOUND
 *     Object matching FMRI doesn't exist in the repository, or snapshot
 *     doesn't exist.
 */
int
scf_tmpl_get_by_pg_name(const char *fmri, const char *snapshot,
    const char *pg_name, const char *pg_type, scf_pg_tmpl_t *pg_tmpl, int flags)
{
	scf_instance_t *inst = NULL;
	scf_service_t *svc = NULL;
	scf_snapshot_t *snap = NULL;
	pg_tmpl_walk_t *p = NULL;
	scf_handle_t *h;
	int ret;

	assert(pg_tmpl != NULL);
	h = pg_tmpl->pt_h;
	assert(h != NULL);

	scf_tmpl_pg_reset(pg_tmpl);

	if ((inst = scf_instance_create(h)) == NULL ||
	    (svc = scf_service_create(h)) == NULL) {
		goto fail;
	}

	p = calloc(1, sizeof (pg_tmpl_walk_t));
	if (p == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto fail;
	}

	ret = scf_handle_decode_fmri(h, fmri, NULL, NULL, inst, NULL,
	    NULL, SCF_DECODE_FMRI_EXACT);
	if (ret == 0) {
		scf_service_destroy(svc);
		svc = NULL;
	} else if (ret != 0 &&
	    scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED) {
		ret = scf_handle_decode_fmri(h, fmri, NULL, svc,
		    NULL, NULL, NULL, SCF_DECODE_FMRI_EXACT);
		if (ret == 0) {
			scf_instance_destroy(inst);
			inst = NULL;
		}
	}
	if (ret != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto fail;
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
			(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
			goto fail;

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_FOUND:
			goto fail;

		case SCF_ERROR_HANDLE_MISMATCH:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	assert(svc == NULL || inst == NULL);
	assert(svc != NULL || inst != NULL);

	/* If we have a service fmri, snapshot is ignored. */
	if (inst != NULL) {
		if (snapshot == NULL || strcmp(snapshot, "running") == 0 ||
		    (flags & SCF_PG_TMPL_FLAG_CURRENT) ==
		    SCF_PG_TMPL_FLAG_CURRENT) {
			if (_get_snapshot(inst, NULL, &snap) == -1)
				goto fail;
		} else {
			if (_get_snapshot(inst, snapshot, &snap) == -1) {
				goto fail;
			} else if (scf_error() == SCF_ERROR_NOT_FOUND) {
				goto fail;
			}
		}
	}

	p->pw_snapname = snapshot;
	p->pw_pgname = pg_name;
	p->pw_pgtype = pg_type;

	/*
	 * For each of instance, restarter, global
	 *    - check for a tm_pg_pattern_nt_<name> matching type
	 *    - check for a tm_pg_pattern_t_<type> matching type
	 *    - check for any tm_pg_pattern_
	 * Currently plan to return the most specific match only.
	 */
	_walk_template_instances(svc, inst, snap,
	    (walk_template_inst_func_t *)find_pg_match, p, flags);

	if (p->pw_pg != NULL) {
		pg_tmpl->pt_h = h;
		pg_tmpl->pt_pg = p->pw_pg;
		pg_tmpl->pt_inst = p->pw_inst;
		/* we may get a different instance back */
		if (p->pw_inst != inst)
			scf_instance_destroy(inst);
		pg_tmpl->pt_snap = p->pw_snap;
		pg_tmpl->pt_svc = p->pw_svc;
		/* we may get a different service back */
		if (p->pw_svc != svc)
			scf_service_destroy(svc);
		pg_tmpl->pt_populated = 1;
		scf_snapshot_destroy(snap);
		free(p->pw_tmpl_pgname);
		free(p);
		return (0);
	}

	(void) scf_set_error(SCF_ERROR_NOT_FOUND);
fail:
	free(p);
	scf_instance_destroy(inst);
	scf_service_destroy(svc);
	scf_snapshot_destroy(snap);
	return (-1);
}

/*
 * Returns NULL on failure, sets scf_error() to _CONNECTION_BROKEN,
 * _DELETED, _NO_RESOURCES, or _NOT_BOUND.
 */
static scf_iter_t *
_get_svc_or_inst_iter(scf_handle_t *h, scf_pg_tmpl_t *t)
{
	scf_iter_t *iter;
	int ret;

	assert(t->pt_svc != NULL || t->pt_inst != NULL);
	assert(t->pt_svc == NULL || t->pt_inst == NULL);

	if ((iter = scf_iter_create(h)) == NULL) {
		return (NULL);
	}

	/* Iterate on property groups of type template_pg_pattern */

	if (t->pt_inst != NULL)
		ret = scf_iter_instance_pgs_typed_composed(iter,
		    t->pt_inst, t->pt_snap,
		    SCF_GROUP_TEMPLATE_PG_PATTERN);
	if (t->pt_svc != NULL)
		ret = scf_iter_service_pgs_typed(iter, t->pt_svc,
		    SCF_GROUP_TEMPLATE_PG_PATTERN);

	if (ret != 0) {
		if (ismember(scf_error(), errors_server)) {
			scf_iter_destroy(iter);
			return (NULL);
		} else {
			assert(0);
			abort();
		}
	}

	return (iter);
}

/*
 * Returns NULL on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     Handle argument is NULL, or snaphot is not a valid snapshot name.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 */
static scf_iter_t *
_get_next_iterator(scf_handle_t *h, scf_pg_tmpl_t *t, const char *snapshot,
    int exact)
{
	scf_iter_t  *iter = NULL;
	ssize_t limit;

	limit = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	assert(limit != 0);

	/*
	 * Check what level we last iterated on: none, service,
	 * restarter, or global.  Make sure that if one in the middle
	 * doesn't exist, we move on to the next entity.
	 *
	 * Before we drop any references to pt_inst or pt_svc we must
	 * destroy them so we don't leak them.
	 */
	do {
		switch (t->pt_iter_last) {
		case SCF__TMPL_ITER_NONE:
			t->pt_iter_last = SCF__TMPL_ITER_INST;
			if (t->pt_inst != t->pt_orig_inst)
				scf_instance_destroy(t->pt_inst);
			t->pt_inst = t->pt_orig_inst;
			if (t->pt_svc != t->pt_orig_svc)
				scf_service_destroy(t->pt_svc);
			t->pt_svc = t->pt_orig_svc;
			break;

		case SCF__TMPL_ITER_INST:
			/*
			 * Don't go any further than the specified instance
			 * if exact was set.
			 */
			if (exact == 1) {
				(void) scf_set_error(SCF_ERROR_NOT_FOUND);
				goto fail;
			}
			t->pt_iter_last = SCF__TMPL_ITER_RESTARTER;
			if (t->pt_inst != t->pt_orig_inst)
				scf_instance_destroy(t->pt_inst);
			t->pt_inst = _get_restarter_inst(h, t->pt_orig_svc,
			    t->pt_orig_inst, t->pt_snap);
			if (t->pt_svc != t->pt_orig_svc)
				scf_service_destroy(t->pt_svc);
			t->pt_svc = NULL;
			break;

		case SCF__TMPL_ITER_RESTARTER:
			t->pt_iter_last = SCF__TMPL_ITER_GLOBAL;
			if (t->pt_inst != t->pt_orig_inst)
				scf_instance_destroy(t->pt_inst);
			t->pt_inst = _get_global_inst(h);
			if (t->pt_svc != t->pt_orig_svc)
				scf_service_destroy(t->pt_svc);
			t->pt_svc = NULL;
			break;

		case SCF__TMPL_ITER_GLOBAL:
			(void) scf_set_error(SCF_ERROR_NOT_FOUND);
			return (NULL);

		default:
			assert(0);
			abort();
		}
	} while (t->pt_inst == NULL && t->pt_svc == NULL);

	/* Set pt_snap to the snapshot for this instance */
	if (t->pt_inst != NULL) {
		scf_snapshot_destroy(t->pt_snap);
		if (_get_snapshot(t->pt_inst, snapshot,
		    &t->pt_snap) == -1)
			goto fail;
	}

	iter = _get_svc_or_inst_iter(h, t);
fail:
	return (iter);
}

/*
 * scf_pg_tmpl_t *scf_tmpl_pg_create(scf_handle_t *)
 *
 * Returns NULL on failure, sets scf_error() to _INVALID_ARGUMENT
 * or _NO_MEMORY.
 */
scf_pg_tmpl_t *
scf_tmpl_pg_create(scf_handle_t *handle)
{
	scf_pg_tmpl_t *pg_tmpl = NULL;

	if (handle == NULL) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (NULL);
	}
	pg_tmpl = calloc(1, sizeof (scf_pg_tmpl_t));
	if (pg_tmpl == NULL)
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	else
		pg_tmpl->pt_h = handle;

	return (pg_tmpl);
}

/*
 * Retrieves name or type of a template pg.
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     pname property is not SCF_TYPE_ASTRING or has more than one value.
 */
static ssize_t
_scf_tmpl_prop_value(scf_propertygroup_t *pg, const char *pname, char **out)
{
	assert(strcmp(pname, SCF_PROPERTY_TM_NAME) == 0 ||
	    strcmp(pname, SCF_PROPERTY_TM_TYPE) == 0);

	*out = _scf_read_single_astring_from_pg(pg, pname);

	if (*out != NULL && *out[0] == '\0') {
		(void) scf_set_error(SCF_ERROR_NONE);
		free(*out);
		*out = strdup(SCF_TMPL_WILDCARD);
		if (*out == NULL)
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	}
	if (*out == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_NOT_FOUND:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (strlen(*out));
}

/*
 * int scf_tmpl_iter_pgs()
 *
 * Iterates through the property group templates for the fmri given.
 * When t is uninitialized or reset, sets t to the first property group
 * template in fmri. On subsequent calls, sets t to the next property group
 * template in frmi.
 * Returns 1 on success, 0 when no property group templates are left to
 * iterate, -1 on error.
 * The flags argument may include SCF_PG_TMPL_FLAG_REQUIRED,
 * SCF_PG_TMPL_FLAG_CURRENT,  and/or SCF_PG_TMPL_FLAG_EXACT.
 *
 * Returns -1 on error and sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *      The handle argument is NULL, fmri is invalid, or snapshot is invalid.
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_PERMISSION_DENIED
 */
int
scf_tmpl_iter_pgs(scf_pg_tmpl_t *t, const char *fmri, const char *snapshot,
    const char *type, int flags)
{
	scf_handle_t *h;
	scf_service_t *svc = NULL;
	scf_instance_t *inst = NULL;
	scf_propertygroup_t *pg = NULL;
	scf_snapshot_t *snap = NULL;
	scf_pg_tmpl_t *pg_tmpl = NULL;
	int err;
	int found = 0;
	char *tmpl_type;
	uint8_t required;
	int ret;

	if (t == NULL) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (-1);
	}

	h = t->pt_h;

	if (t->pt_populated == 0) {
		if ((svc = scf_service_create(h)) == NULL ||
		    (inst = scf_instance_create(h)) == NULL ||
		    (pg = scf_pg_create(h)) == NULL) {
			goto fail_non_populated;
		}

		ret = scf_handle_decode_fmri(h, fmri, NULL, NULL, inst, NULL,
		    NULL, SCF_DECODE_FMRI_EXACT);
		if (ret == 0) {
			scf_service_destroy(svc);
			svc = NULL;
		} else if (ret != 0 &&
		    scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED) {
			ret = scf_handle_decode_fmri(h, fmri, NULL, svc,
			    NULL, NULL, NULL, SCF_DECODE_FMRI_EXACT);
			if (ret == 0) {
				scf_instance_destroy(inst);
				inst = NULL;
			}
		}

		if (ret != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto fail_non_populated;
			} else switch (scf_error()) {
			case SCF_ERROR_CONSTRAINT_VIOLATED:
				(void) scf_set_error(
				    SCF_ERROR_INVALID_ARGUMENT);
				goto fail_non_populated;

			case SCF_ERROR_INVALID_ARGUMENT:
			case SCF_ERROR_NOT_FOUND:
				goto fail_non_populated;

			case SCF_ERROR_HANDLE_MISMATCH:
			case SCF_ERROR_NOT_SET:
			default:
				assert(0);
				abort();
			}
		}

		assert(svc == NULL || inst == NULL);
		assert(svc != NULL || inst != NULL);

		if (inst != NULL) {
			if (snapshot == NULL ||
			    strcmp(snapshot, "running") == 0 ||
			    (flags & SCF_PG_TMPL_FLAG_CURRENT) ==
			    SCF_PG_TMPL_FLAG_CURRENT) {
				if (_get_snapshot(inst, NULL, &snap) == -1)
					goto fail_non_populated;
			} else {
				(void) scf_set_error(SCF_ERROR_NONE);
				if (_get_snapshot(inst, snapshot,
				    &snap) == -1) {
					goto fail_non_populated;
				} else if (scf_error() == SCF_ERROR_NOT_FOUND) {
					goto fail_non_populated;
				}
			}
		} else {
			scf_snapshot_destroy(snap);
			snap = NULL;
		}

		pg_tmpl = t;
		pg_tmpl->pt_orig_inst = inst;
		pg_tmpl->pt_orig_svc = svc;
		pg_tmpl->pt_snap = snap;
		pg_tmpl->pt_is_iter = 1;
		pg_tmpl->pt_iter_last = SCF__TMPL_ITER_NONE;
		pg_tmpl->pt_pg = pg;
		pg_tmpl->pt_populated = 1;
	} else {
		if (t->pt_is_iter != 1) {
			(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
			return (-1);
		}
		pg_tmpl = t;
		assert(pg_tmpl->pt_pg != NULL);
	}

	if (pg_tmpl->pt_iter == NULL) {
		pg_tmpl->pt_iter = _get_next_iterator(h, pg_tmpl, snapshot,
		    (flags & SCF_PG_TMPL_FLAG_EXACT) ? 1 : 0);
		if (pg_tmpl->pt_iter == NULL) {
			if (scf_error() == SCF_ERROR_NOT_FOUND)
				return (0);
			else
				return (-1);
		}
	}

	while (found == 0) {
		while ((err = scf_iter_next_pg(pg_tmpl->pt_iter,
		    pg_tmpl->pt_pg)) != 1) {
			if (err == -1) {
				if (ismember(scf_error(), errors_server)) {
					return (-1);
				} else switch (scf_error()) {
				case SCF_ERROR_HANDLE_MISMATCH:
					return (-1);

				case SCF_ERROR_NOT_SET:
				case SCF_ERROR_INVALID_ARGUMENT:
				default:
					assert(0);
					abort();
				}
			} else if (err == 0)  {
				/* This iteration is done.  Get the next one */
				scf_iter_destroy(pg_tmpl->pt_iter);
				pg_tmpl->pt_iter = _get_next_iterator(h,
				    pg_tmpl, snapshot,
				    (flags & SCF_PG_TMPL_FLAG_EXACT) ? 1 : 0);
				if (pg_tmpl->pt_iter == NULL) {
					if (scf_error() == SCF_ERROR_NOT_FOUND)
						return (0);
					else
						return (-1);
				}
				continue;
			} else {
				assert(0);
				abort();
			}
		}

		/*
		 * Discard pgs which don't exist at the right scoping.  This
		 * check also makes sure that if we're looking at, for
		 * example, svc:/system/svc/restarter:default, that we
		 * don't hand back the same property groups twice.
		 */
		switch (t->pt_iter_last) {
		case SCF__TMPL_ITER_INST:
			ret = check_target_match(pg_tmpl->pt_pg,
			    SCF_TM_TARGET_THIS);
			break;
		case SCF__TMPL_ITER_RESTARTER:
			ret = check_target_match(pg_tmpl->pt_pg,
			    SCF_TM_TARGET_DELEGATE);
			break;
		case SCF__TMPL_ITER_GLOBAL:
			ret = check_target_match(pg_tmpl->pt_pg,
			    SCF_TM_TARGET_ALL);
			break;
		case SCF__TMPL_ITER_NONE:
		default:
			assert(0);
			abort();
		}

		if (ret != 0)
			continue;

		/*
		 * If walking only required property groups, check if
		 * the retrieved group is required.
		 */
		if (flags & SCF_PG_TMPL_FLAG_REQUIRED) {
			if (scf_tmpl_pg_required(pg_tmpl, &required) == 0) {
				if (required == 0)
					continue;
			} else {
				return (-1);
			}
		}

		/*
		 * If type != NULL, check if type property matches.  If no
		 * type property exists, consider it a match.
		 */
		if (type != NULL) {
			if (scf_tmpl_pg_type(pg_tmpl, &tmpl_type) != -1) {
				if (strcmp(tmpl_type, SCF_TMPL_WILDCARD)
				    == 0 || strcmp(type, tmpl_type) == 0) {
					free(tmpl_type);
					break;
				}
				free(tmpl_type);
			} else if (scf_error() == SCF_ERROR_NOT_FOUND ||
			    scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED ||
			    scf_error() == SCF_ERROR_TYPE_MISMATCH) {
				break;
			} else {
				return (-1);
			}
		} else {
			break;
		}
	}

	return (1);

fail_non_populated:
	scf_service_destroy(svc);
	scf_instance_destroy(inst);
	scf_pg_destroy(pg);
	scf_snapshot_destroy(snap);
	return (-1);
}

void
scf_tmpl_pg_destroy(scf_pg_tmpl_t *t)
{
	if (t == NULL)
		return;

	scf_pg_destroy(t->pt_pg);
	scf_instance_destroy(t->pt_inst);
	if (t->pt_inst != t->pt_orig_inst)
		scf_instance_destroy(t->pt_orig_inst);
	scf_snapshot_destroy(t->pt_snap);
	scf_service_destroy(t->pt_orig_svc);
	if (t->pt_svc != t->pt_orig_svc)
		scf_service_destroy(t->pt_svc);
	scf_iter_destroy(t->pt_iter);
	free(t);
}

void
scf_tmpl_pg_reset(scf_pg_tmpl_t *t)
{
	scf_pg_destroy(t->pt_pg);
	t->pt_pg = NULL;

	scf_instance_destroy(t->pt_inst);
	if (t->pt_inst != t->pt_orig_inst)
		scf_instance_destroy(t->pt_orig_inst);
	t->pt_inst = NULL;
	t->pt_orig_inst = NULL;

	scf_snapshot_destroy(t->pt_snap);
	t->pt_snap = NULL;

	scf_service_destroy(t->pt_orig_svc);
	if (t->pt_svc != t->pt_orig_svc)
		scf_service_destroy(t->pt_svc);
	t->pt_orig_svc = NULL;
	t->pt_svc = NULL;

	scf_iter_destroy(t->pt_iter);
	t->pt_iter = NULL;

	t->pt_populated = 0;
	t->pt_is_iter = 0;
	t->pt_iter_last = 0;

	/* Do not reset t->pt_h. */
}

/*
 * int scf_tmpl_get_by_prop()
 *
 * Get the property template given a property group template and property
 * name.  No flags are currently defined for this function.
 *
 * Returns NULL on failure, and sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Template object matching property doesn't exist in the repository.
 *   SCF_ERROR_TYPE_MISMATCH
 *     Matching template object is the wrong type in the repository.
 */
int
scf_tmpl_get_by_prop(scf_pg_tmpl_t *t, const char *prop,
    scf_prop_tmpl_t *prop_tmpl, int flags)
{
	char *tmpl_prop_name;
	scf_propertygroup_t *pg = NULL;
	char *pg_type;
	int found = 0;

	if (flags != 0) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (-1);
	}

	scf_tmpl_prop_reset(prop_tmpl);
	if ((pg = scf_pg_create(scf_pg_handle(t->pt_pg))) == NULL)
		return (-1);

	tmpl_prop_name = _tmpl_prop_name(prop, t);
	if (tmpl_prop_name == NULL) {
		assert(scf_error() != SCF_ERROR_NOT_SET);
		return (-1);
	}

	if (_get_pg(t->pt_svc, t->pt_inst, t->pt_snap,
	    tmpl_prop_name, pg) != 0) {
		if (!ismember(scf_error(), errors_server)) {
			switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
			case SCF_ERROR_INVALID_ARGUMENT:
				break;

			case SCF_ERROR_NOT_SET:
			case SCF_ERROR_HANDLE_MISMATCH:
			default:
				assert(0);
				abort();
			}
		}
	} else {
		/*
		 * We've only found a template property group if the type
		 * is correct.
		 */
		if ((pg_type = _scf_get_pg_type(pg)) != NULL &&
		    strcmp(pg_type, SCF_GROUP_TEMPLATE_PROP_PATTERN) == 0)
			found++;
		else
			(void) scf_set_error(SCF_ERROR_TYPE_MISMATCH);


		free(pg_type);
	}

	if (found == 0) {
		scf_pg_destroy(pg);
		free(tmpl_prop_name);
		return (-1);
	}

	prop_tmpl->prt_h = scf_pg_handle(t->pt_pg);
	prop_tmpl->prt_t = t;
	prop_tmpl->prt_pg = pg;
	prop_tmpl->prt_pg_name = tmpl_prop_name;
	prop_tmpl->prt_populated = 1;

	return (0);
}

/*
 * scf_prop_tmpl_t *scf_tmpl_prop_create(scf_handle_t *);
 *
 * Returns NULL on failure, sets scf_error() to _INVALID_ARGUMENT, or
 * _NO_MEMORY.
 */
scf_prop_tmpl_t *
scf_tmpl_prop_create(scf_handle_t *handle)
{
	scf_prop_tmpl_t *pt;

	if (handle == NULL) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (NULL);
	}
	pt = calloc(1, sizeof (scf_prop_tmpl_t));
	if (pt == NULL)
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	else
		pt->prt_h = handle;

	return (pt);
}

/*
 * int scf_tmpl_iter_props()
 *
 * Iterates over all property templates defined in the specified property
 * group template.  The iterator state is stored on the property template
 * data structure, and the data structure should be allocated with
 * scf_tmpl_prop_create().  To continue the iteration, the previously
 * returned structure should be passed in as an argument to this function.
 * flags can include SCF_PROP_TMPL_FLAG_REQUIRED.  The function returns
 * 1 when a result was found, and 0 when the iteration is complete.
 *
 * Returns -1 on failure, and sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     Template data is invalid.  One of the property templates in this
 *     pg_tmpl is malformed.
 */
int
scf_tmpl_iter_props(scf_pg_tmpl_t *t, scf_prop_tmpl_t *pt, int flags)
{
	scf_prop_tmpl_t *prop_tmpl;
	char *pg_pat;
	char *pg_name = NULL;
	int err;
	int ret;
	ssize_t size = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	uint8_t required;
	scf_handle_t *h;
	scf_propertygroup_t *pg = NULL;
	scf_iter_t *iter = NULL;

	assert(size != 0);
	if (t == NULL || pt == NULL) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (-1);
	}

	assert(t->pt_inst == NULL || t->pt_svc == NULL);
	assert(t->pt_inst != NULL || t->pt_svc != NULL);

	if ((pg_name = malloc(size)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (-1);
	}

	if (pt->prt_populated == 0) {
		if ((h = scf_pg_handle(t->pt_pg)) == NULL)
			goto fail_non_populated;

		if ((pg = scf_pg_create(h)) == NULL ||
		    (iter = scf_iter_create(h)) == NULL)
			goto fail_non_populated;

		if (t->pt_inst != NULL)
			err = scf_iter_instance_pgs_typed_composed(iter,
			    t->pt_inst, t->pt_snap,
			    SCF_GROUP_TEMPLATE_PROP_PATTERN);
		else if (t->pt_svc != NULL)
			err = scf_iter_service_pgs_typed(iter, t->pt_svc,
			    SCF_GROUP_TEMPLATE_PROP_PATTERN);

		if (err != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto fail_non_populated;
			} else switch (scf_error()) {
			case SCF_ERROR_INVALID_ARGUMENT:
				goto fail_non_populated;

			case SCF_ERROR_NOT_SET:
			case SCF_ERROR_HANDLE_MISMATCH:
			default:
				assert(0);
				abort();
			}

		}
		prop_tmpl = pt;
		prop_tmpl->prt_t = t;
		prop_tmpl->prt_populated = 1;
		prop_tmpl->prt_pg = pg;
		prop_tmpl->prt_iter = iter;
	} else {
		prop_tmpl = pt;
	}

	while ((err = scf_iter_next_pg(prop_tmpl->prt_iter,
	    prop_tmpl->prt_pg)) > 0) {
		/*
		 * Check if the name matches the appropriate property
		 * group template name.
		 */
		pg_pat = _scf_read_single_astring_from_pg(prop_tmpl->prt_pg,
		    SCF_PROPERTY_TM_PG_PATTERN);
		if (pg_pat == NULL) {
			if (ismember(scf_error(), errors_server)) {
				uu_free(pg_name);
				return (-1);
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				continue;

			case SCF_ERROR_CONSTRAINT_VIOLATED:
			case SCF_ERROR_TYPE_MISMATCH:
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
				free(pg_name);
				return (-1);

			case SCF_ERROR_INVALID_ARGUMENT:
			case SCF_ERROR_NOT_SET:
			default:
				assert(0);
				abort();
			}
		}
		if ((ret = scf_pg_get_name(t->pt_pg, pg_name, size)) <= 0) {
			free(pg_pat);
			if (ret == 0)
				continue;

			if (ismember(scf_error(), errors_server)) {
				free(pg_name);
				return (-1);
			} else {
				assert(0);
				abort();
			}
		}
		if (strcmp(pg_pat, pg_name) != 0) {
			free(pg_pat);
			continue;
		}
		free(pg_pat);

		/*
		 * If walking only required properties, check if
		 * the retrieved property is required.
		 */
		if (flags & SCF_PROP_TMPL_FLAG_REQUIRED) {
			if (scf_tmpl_prop_required(prop_tmpl, &required) == 0) {
				if (required == 0)
					continue;
			} else {
				free(pg_name);
				return (-1);
			}
		}
		free(pg_name);
		return (0);
	}

	if (err == -1) {
		if (ismember(scf_error(), errors_server)) {
			free(pg_name);
			return (-1);
		} else {
			assert(0);
			abort();
		}
	} else if (err == 0)  {
		scf_iter_destroy(prop_tmpl->prt_iter);
		prop_tmpl->prt_iter = NULL;
		prop_tmpl->prt_populated = 0;
	}
	free(pg_name);

	return (1);

fail_non_populated:
	free(pg_name);
	scf_pg_destroy(pg);
	scf_iter_destroy(iter);
	return (-1);
}

void
scf_tmpl_prop_destroy(scf_prop_tmpl_t *t)
{
	if (t == NULL)
		return;

	scf_pg_destroy(t->prt_pg);
	free(t->prt_pg_name);
	free(t->prt_iter);
	free(t);
}

void
scf_tmpl_prop_reset(scf_prop_tmpl_t *t)
{
	scf_pg_destroy(t->prt_pg);
	t->prt_pg = NULL;

	free(t->prt_pg_name);
	t->prt_pg_name = NULL;

	free(t->prt_iter);
	t->prt_iter = NULL;

	t->prt_populated = 0;
	t->prt_h = NULL;
	t->prt_t = NULL;
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     The name of the template property group (the pname property) has
 *     an improper repository format and is not type astring or has
 *     more than one value.
 */
ssize_t
scf_tmpl_pg_name(const scf_pg_tmpl_t *t, char **out)
{
	return (_scf_tmpl_prop_value(t->pt_pg, SCF_PROPERTY_TM_NAME, out));
}

/*
 * returns an allocated string that must be freed
 *
 * Returns NULL on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     name not a valid property name
 *     name and locale are too long to make a property name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static char *
_read_localized_astring_from_pg(scf_propertygroup_t *pg, const char *name,
    const char *locale)
{
	char *str;
	char *lname_prop;

	str = _add_locale_to_name(name, locale);
	if (str == NULL)
		return (NULL);
	lname_prop = _scf_read_single_astring_from_pg(pg, str);
	if (lname_prop == NULL) {
		free(str);
		if (scf_error() != SCF_ERROR_NOT_FOUND)
			return (NULL);
		str = _add_locale_to_name(name, "C");
		if (str == NULL)
			return (NULL);
		lname_prop = _scf_read_single_astring_from_pg(pg, str);
	}
	free(str);
	if (lname_prop == NULL) {
		if (scf_error() == SCF_ERROR_TYPE_MISMATCH ||
		    scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED)
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
	}
	return (lname_prop);
}

/*
 * returns an allocated string that must be freed
 *
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     locale is too long to make a valid property name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
ssize_t
scf_tmpl_pg_common_name(const scf_pg_tmpl_t *t, const char *locale, char **out)
{
	assert(out != NULL);
	if ((*out = _read_localized_astring_from_pg(t->pt_pg,
	    SCF_PROPERTY_TM_COMMON_NAME_PREFIX, locale)) == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * returns an allocated string that must be freed
 *
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     locale is too long to make a valid property name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
ssize_t
scf_tmpl_pg_description(const scf_pg_tmpl_t *t, const char *locale, char **out)
{
	assert(out != NULL);
	if ((*out = _read_localized_astring_from_pg(t->pt_pg,
	    SCF_PROPERTY_TM_DESCRIPTION_PREFIX, locale)) == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     'type' property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     'type' property is not SCF_TYPE_ASTRING or has more than one value.
 */
ssize_t
scf_tmpl_pg_type(const scf_pg_tmpl_t *t, char **out)
{
	return (_scf_tmpl_prop_value(t->pt_pg, SCF_PROPERTY_TM_TYPE, out));
}

/*
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     required property is not SCF_TYPE_BOOLEAN or has more than one value.
 */
int
scf_tmpl_pg_required(const scf_pg_tmpl_t *t, uint8_t *out)
{

	if (_read_single_boolean_from_pg(t->pt_pg, SCF_PROPERTY_TM_REQUIRED,
	    out) == -1) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_NOT_FOUND:
			*out = 0;
			return (0);

		case SCF_ERROR_INVALID_ARGUMENT:
		default:
			assert(0);
			abort();
		}
	}

	return (0);
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     target property is not SCF_TYPE_ASTRING or has more than one value.
 */
ssize_t
scf_tmpl_pg_target(const scf_pg_tmpl_t *t, char **out)
{
	*out = _scf_read_single_astring_from_pg(t->pt_pg,
	    SCF_PROPERTY_TM_TARGET);

	if (*out == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_NOT_FOUND:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
ssize_t
scf_tmpl_prop_name(const scf_prop_tmpl_t *t, char **out)
{
	*out = _scf_read_single_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_NAME);

	if (*out != NULL && *out[0] == '\0') {
		free(*out);
		*out = NULL;
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
	}
	if (*out == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_NOT_FOUND:
		case SCF_ERROR_TEMPLATE_INVALID:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     'type' property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     'type' property is not SCF_TYPE_ASTRING, has more than one value,
 *     is SCF_TYPE_INVALID, or is the empty string.
 */
int
scf_tmpl_prop_type(const scf_prop_tmpl_t *t, scf_type_t *out)
{
	char *type;

	type = _scf_read_single_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_TYPE);
	if (type != NULL && type[0] == '\0') {
		free(type);
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		return (-1);
	}
	if (type == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			/*FALLTHROUGH*/

		case SCF_ERROR_NOT_FOUND:
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	*out = scf_string_to_type(type);
	free(type);

	if (*out == SCF_TYPE_INVALID) {
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		return (-1);
	}

	return (0);
}

/*
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *    Property group which represents t was deleted.
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     required property is not SCF_TYPE_ASTRING has more than one value.
 */
int
scf_tmpl_prop_required(const scf_prop_tmpl_t *t, uint8_t *out)
{
	if (_read_single_boolean_from_pg(t->prt_pg, SCF_PROPERTY_TM_REQUIRED,
	    out) == -1) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_NOT_FOUND:
			*out = 0;
			return (0);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	return (0);
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_INVALID_ARGUMENT
 *     locale is too long to make a property name
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     common_name property is not SCF_TYPE_ASTRING has more than one value.
 */
ssize_t
scf_tmpl_prop_common_name(const scf_prop_tmpl_t *t, const char *locale,
    char **out)
{
	assert(out != NULL);
	if ((*out = _read_localized_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_COMMON_NAME_PREFIX, locale)) == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_INVALID_ARGUMENT
 *     locale is too long to make a property name
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     description property is not SCF_TYPE_ASTRING has more than one value.
 */
ssize_t
scf_tmpl_prop_description(const scf_prop_tmpl_t *t, const char *locale,
    char **out)
{
	assert(out != NULL);
	if ((*out = _read_localized_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_DESCRIPTION_PREFIX, locale)) == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_INVALID_ARGUMENT
 *     locale is too long to make a property name
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     units property is not SCF_TYPE_ASTRING has more than one value.
 */
ssize_t
scf_tmpl_prop_units(const scf_prop_tmpl_t *t, const char *locale, char **out)
{
	assert(out != NULL);
	if ((*out = _read_localized_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_UNITS_PREFIX, locale)) == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     visibility property is not SCF_TYPE_ASTRING has more than one value.
 */
int
scf_tmpl_prop_visibility(const scf_prop_tmpl_t *t, uint8_t *out)
{
	char *visibility;

	visibility = _scf_read_single_astring_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_VISIBILITY);
	if (visibility == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		/* prop doesn't exist we take the default value */
		case SCF_ERROR_NOT_FOUND:
			*out = SCF_TMPL_VISIBILITY_READWRITE;
			return (0);

		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	} else if (strcmp(visibility, SCF_TM_VISIBILITY_READWRITE) == 0) {
		*out = SCF_TMPL_VISIBILITY_READWRITE;
	} else if (strcmp(visibility, SCF_TM_VISIBILITY_HIDDEN) == 0) {
		*out = SCF_TMPL_VISIBILITY_HIDDEN;
	} else if (strcmp(visibility, SCF_TM_VISIBILITY_READONLY) == 0) {
		*out = SCF_TMPL_VISIBILITY_READONLY;
	} else {
		free(visibility);
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		return (-1);
	}

	free(visibility);
	return (0);
}

/*
 * Return an allocated string containing the value that must be freed
 * with free().
 *
 * On error set scf_error() _NO_MEMORY, or _NOT_SET (val has not been set
 * to a value).
 */
static char *
_scf_value_get_as_string(scf_value_t *val)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH) + 1;
	char *buf = malloc(sz);

	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
	} else if (scf_value_get_as_string(val, buf, sz) == -1) {
		free(buf);
		buf = NULL;
	}

	return (buf);
}

/*
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_prop_cardinality(const scf_prop_tmpl_t *t, uint64_t *min,
    uint64_t *max)
{
	scf_value_t *val_min = NULL;
	scf_value_t *val_max = NULL;
	int ret = 0;

	if (_read_single_value_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_CARDINALITY_MIN, &val_min) == 0) {
		if (scf_value_get_count(val_min, min) < 0)
			goto error;
	} else {
		if (scf_error() == SCF_ERROR_NOT_FOUND)
			*min = 0;
		else
			goto error;
	}

	if (_read_single_value_from_pg(t->prt_pg,
	    SCF_PROPERTY_TM_CARDINALITY_MAX, &val_max) == 0) {
		if (scf_value_get_count(val_max, max) < 0)
			goto error;
	} else {
		if (scf_error() == SCF_ERROR_NOT_FOUND)
			*max = UINT64_MAX;
		else
			goto error;
	}
	goto cleanup;

error:
	if (ismember(scf_error(), errors_server)) {
		ret = -1;
	} else switch (scf_error()) {
	case SCF_ERROR_TYPE_MISMATCH:
	case SCF_ERROR_CONSTRAINT_VIOLATED:
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		/*FALLTHROUGH*/

	case SCF_ERROR_NOT_FOUND:
	case SCF_ERROR_TEMPLATE_INVALID:
		ret = -1;
		break;

	case SCF_ERROR_NOT_SET:
	case SCF_ERROR_INVALID_ARGUMENT:
	default:
		assert(0);
		abort();
	}

cleanup:
	scf_value_destroy(val_min);
	scf_value_destroy(val_max);

	return (ret);
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_prop_internal_seps(const scf_prop_tmpl_t *t, scf_values_t *vals)
{
	if (_read_astrings_values(t->prt_pg,
	    SCF_PROPERTY_INTERNAL_SEPARATORS, vals) == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			/*FALLTHROUGH*/

		case SCF_ERROR_NOT_FOUND:
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	} else if (vals->value_count == 0) {
		/* property has no value */
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		scf_values_destroy(vals);
		return (-1);
	}

	return (0);
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_value_name_constraints(const scf_prop_tmpl_t *t,
    scf_values_t *vals)
{
	char **ret;

	ret = _read_astrings_values(t->prt_pg,
	    SCF_PROPERTY_TM_CONSTRAINT_NAME, vals);

	if (ret == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			/*FALLTHROUGH*/

		case SCF_ERROR_NOT_FOUND:
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	} else if (vals->value_count == 0) {
		/* property has no value */
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		scf_values_destroy(vals);
		return (-1);
	}

	return (0);
}

/*
 * Returns NULL on failure.  Sets scf_error():
 * Caller is responsible for freeing returned pointer after use.
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *    More tokens than the array size supplied.
 *   SCF_ERROR_NO_MEMORY
 */
static void *
_separate_by_separator(char *string, const char *sep, char **array, int size)
{
	char *str, *token;
	char *lasts;
	int n = 0;

	assert(array != NULL);
	assert(string != NULL);
	assert(sep != NULL);
	assert(size > 0);

	str = strdup(string);
	if (str == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	if ((array[n] = strtok_r(str, sep, &lasts)) == NULL) {
		assert(0);
		abort();
	}

	n++;
	while ((token = strtok_r(NULL, sep, &lasts)) != NULL) {
		if (n >= size) {
			goto error;
		}
		array[n] = token;
		n++;
	}
	if (n < size) {
		goto error;
	}

	return (str);
error:
	free(str);
	(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
	return (NULL);
}

/*
 * check if name is among values of CHOICES_INCLUDE_VALUES
 * return 0 if name is present, 1 name is not present, -1 on failure
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_check_choices_include_values(scf_propertygroup_t *pg, const char *name)
{
	int n = 0, r = 1;
	char **ret;
	scf_values_t vals;

	if ((ret = _read_astrings_values(pg,
	    SCF_PROPERTY_TM_CHOICES_INCLUDE_VALUES, &vals)) == NULL) {
		if (ismember(scf_error(), errors_server)) {
			return (-1);
		} else switch (scf_error()) {
		case SCF_ERROR_NOT_FOUND:
			return (1);

		case SCF_ERROR_TYPE_MISMATCH:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			return (-1);

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	for (n = 0; n < vals.value_count; ++n) {
		if (strcmp(name, ret[n]) == 0) {
			r = 0;
			break;
		}
	}
	scf_values_destroy(&vals);
	return (r);
}

void
scf_count_ranges_destroy(scf_count_ranges_t *ranges)
{
	if (ranges == NULL)
		return;

	ranges->scr_num_ranges = 0;
	free(ranges->scr_min);
	free(ranges->scr_max);
	ranges->scr_min = NULL;
	ranges->scr_max = NULL;
}

void
scf_int_ranges_destroy(scf_int_ranges_t *ranges)
{
	if (ranges == NULL)
		return;

	ranges->sir_num_ranges = 0;
	free(ranges->sir_min);
	free(ranges->sir_max);
	ranges->sir_min = NULL;
	ranges->sir_max = NULL;
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_scf_tmpl_get_count_ranges(const scf_prop_tmpl_t *t, const char *prop,
    scf_count_ranges_t *ranges)
{
	scf_values_t vals;
	int i = 0;
	char **ret;
	char *one_range[2];
	char *endptr;
	char *str = NULL;
	uint64_t *min = NULL;
	uint64_t *max = NULL;

	assert(ranges != NULL);
	if ((ret = _read_astrings_values(t->prt_pg, prop, &vals)) == NULL)
		goto error;
	if (vals.value_count == 0) {
		/* range values are empty */
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		goto cleanup;
	}

	min = malloc(vals.value_count * sizeof (uint64_t));
	max = malloc(vals.value_count * sizeof (uint64_t));
	if (min == NULL || max == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}
	for (i = 0; i < vals.value_count; ++i) {
		/* min and max should be separated by a "," */
		if ((str = _separate_by_separator(ret[i], ",", one_range,
		    2)) == NULL)
			goto cleanup;
		errno = 0;
		min[i] = strtoull(one_range[0], &endptr, 10);
		if (errno != 0 || endptr == one_range[0] || *endptr) {
			(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
			goto cleanup;
		}
		errno = 0;
		max[i] = strtoull(one_range[1], &endptr, 10);
		if (errno != 0 || endptr == one_range[1] || *endptr) {
			(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
			goto cleanup;
		}
		if (min[i] > max[i]) {
			(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
			goto cleanup;
		}
		free(str);
		str = NULL;
	}
	ranges->scr_num_ranges = vals.value_count;
	ranges->scr_min = min;
	ranges->scr_max = max;
	scf_values_destroy(&vals);
	return (0);
cleanup:
	free(str);
	free(min);
	free(max);
	scf_values_destroy(&vals);
error:
	if (ismember(scf_error(), errors_server)) {
		return (-1);
	} else switch (scf_error()) {
	case SCF_ERROR_TYPE_MISMATCH:
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		/*FALLTHROUGH*/

	case SCF_ERROR_CONSTRAINT_VIOLATED:
	case SCF_ERROR_NOT_FOUND:
		return (-1);

	case SCF_ERROR_INVALID_ARGUMENT:
	case SCF_ERROR_NOT_SET:
	default:
		assert(0);
		abort();
	}
	/*NOTREACHED*/
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_scf_tmpl_get_int_ranges(const scf_prop_tmpl_t *t, const char *prop,
    scf_int_ranges_t *ranges)
{
	scf_values_t vals;
	int n = 0;
	char **ret;
	char *one_range[2];
	char *endptr;
	char *str = NULL;
	int64_t *min = NULL;
	int64_t *max = NULL;

	assert(ranges != NULL);
	if ((ret = _read_astrings_values(t->prt_pg, prop, &vals)) == NULL)
		goto error;
	if (vals.value_count == 0) {
		/* range values are empty */
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		goto cleanup;
	}

	min = malloc(vals.value_count * sizeof (int64_t));
	max = malloc(vals.value_count * sizeof (int64_t));
	if (min == NULL || max == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}
	while (n < vals.value_count) {
		/* min and max should be separated by a "," */
		if ((str = _separate_by_separator(ret[n], ",", one_range, 2))
		    == NULL)
			goto cleanup;
		errno = 0;
		min[n] = strtoll(one_range[0], &endptr, 10);
		if (errno != 0 || endptr == one_range[0] || *endptr) {
			(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
			goto cleanup;
		}
		errno = 0;
		max[n] = strtoll(one_range[1], &endptr, 10);
		if (errno != 0 || endptr == one_range[1] || *endptr) {
			(void) scf_set_error(SCF_ERROR_CONSTRAINT_VIOLATED);
			goto cleanup;
		}
		if (min[n] > max[n]) {
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			goto cleanup;
		}
		++n;
		free(str);
		str = NULL;
	}
	ranges->sir_num_ranges = vals.value_count;
	ranges->sir_min = min;
	ranges->sir_max = max;
	scf_values_destroy(&vals);
	return (0);
cleanup:
	free(str);
	free(min);
	free(max);
	scf_values_destroy(&vals);
error:
	if (ismember(scf_error(), errors_server)) {
		return (-1);
	} else switch (scf_error()) {
	case SCF_ERROR_TYPE_MISMATCH:
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		/*FALLTHROUGH*/

	case SCF_ERROR_CONSTRAINT_VIOLATED:
	case SCF_ERROR_NOT_FOUND:
	case SCF_ERROR_TEMPLATE_INVALID:
		return (-1);

	case SCF_ERROR_INVALID_ARGUMENT:
	case SCF_ERROR_NOT_SET:
	default:
		assert(0);
		abort();
	}
	/*NOTREACHED*/
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_CONSTRAINT_VIOLATED
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_value_count_range_constraints(const scf_prop_tmpl_t *t,
    scf_count_ranges_t *ranges)
{
	return (_scf_tmpl_get_count_ranges(t, SCF_PROPERTY_TM_CONSTRAINT_RANGE,
	    ranges));
}

int
scf_tmpl_value_int_range_constraints(const scf_prop_tmpl_t *t,
    scf_int_ranges_t *ranges)
{
	return (_scf_tmpl_get_int_ranges(t, SCF_PROPERTY_TM_CONSTRAINT_RANGE,
	    ranges));
}

int
scf_tmpl_value_count_range_choices(const scf_prop_tmpl_t *t,
    scf_count_ranges_t *ranges)
{
	return (_scf_tmpl_get_count_ranges(t, SCF_PROPERTY_TM_CHOICES_RANGE,
	    ranges));
}

int
scf_tmpl_value_int_range_choices(const scf_prop_tmpl_t *t,
    scf_int_ranges_t *ranges)
{
	return (_scf_tmpl_get_int_ranges(t, SCF_PROPERTY_TM_CHOICES_RANGE,
	    ranges));
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_value_name_choices(const scf_prop_tmpl_t *t, scf_values_t *vals)
{
	int c_flag = 0; /* have not read any value yet */
	int r;
	char **ret;

	/* First, look for explicitly declared choices. */
	if ((ret = _read_astrings_values(t->prt_pg,
	    SCF_PROPERTY_TM_CHOICES_NAME, vals)) != NULL) {
		c_flag = 1;
	} else if (scf_error() != SCF_ERROR_NOT_FOUND) {
		goto error;
	}

	/* Next, check for choices included by 'values'. */
	if ((r = _check_choices_include_values(t->prt_pg, "values")) == 0) {
		/* read values_name */
		if (c_flag == 1)
			/* append values */
			ret = _append_astrings_values(t->prt_pg,
			    SCF_PROPERTY_TM_VALUES_NAME, vals);
		else
			/* read values */
			ret = _read_astrings_values(t->prt_pg,
			    SCF_PROPERTY_TM_VALUES_NAME, vals);
		if (ret != NULL) {
			c_flag = 1;
		} else if (scf_error() != SCF_ERROR_NOT_FOUND) {
			goto error;
		}
	} else if (r == -1) {
		goto error;
	}

	/* Finally check for choices included by 'constraints'. */
	if ((r = _check_choices_include_values(t->prt_pg, "constraints")) ==
	    0) {
		/* read constraint_name */
		if (c_flag == 1)
			/* append values */
			ret = _append_astrings_values(t->prt_pg,
			    SCF_PROPERTY_TM_CONSTRAINT_NAME, vals);
		else
			/* read values */
			ret = _read_astrings_values(t->prt_pg,
			    SCF_PROPERTY_TM_CONSTRAINT_NAME, vals);
		if (ret != NULL) {
			c_flag = 1;
		} else if (scf_error() != SCF_ERROR_NOT_FOUND) {
			goto error;
		}
	} else if (r == -1) {
		goto error;
	}

	if (c_flag == 0 || vals->value_count == 0) {
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		return (-1);
	}

	return (0);

error:
	if (ismember(scf_error(), errors_server)) {
		return (-1);
	} else switch (scf_error()) {
	case SCF_ERROR_TYPE_MISMATCH:
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		return (-1);

	case SCF_ERROR_NOT_SET:
	case SCF_ERROR_INVALID_ARGUMENT:
	default:
		assert(0);
		abort();
	}
	/*NOTREACHED*/
}

void
scf_values_destroy(scf_values_t *vals)
{
	int i;
	char **items = NULL;
	char **str = NULL;

	if (vals == NULL)
		return;

	str = vals->values_as_strings;

	/* free values */
	switch (vals->value_type) {
	case SCF_TYPE_BOOLEAN:
		free(vals->values.v_boolean);
		break;
	case SCF_TYPE_COUNT:
		free(vals->values.v_count);
		break;
	case SCF_TYPE_INTEGER:
		free(vals->values.v_integer);
		break;
	case SCF_TYPE_ASTRING:
		items = vals->values.v_astring;
		str = NULL;
		break;
	case SCF_TYPE_USTRING:
		items = vals->values.v_ustring;
		str = NULL;
		break;
	case SCF_TYPE_OPAQUE:
		items = vals->values.v_opaque;
		str = NULL;
		break;
	case SCF_TYPE_TIME:
		free(vals->values.v_time);
		break;
	default:
		assert(0);
		abort();
	}
	for (i = 0; i < vals->value_count; ++i) {
		if (items != NULL)
			free(items[i]);
		if (str != NULL)
			free(str[i]);
	}
	vals->value_count = 0;
	free(items);
	free(str);
}

/*
 * char *_make_value_name()
 *
 * Construct the prefix for a value common name or value description property.
 * It takes the form:
 *   value_<BASE32 name>_<common_name|description>_
 * This is then combined with a localized suffix by the caller to look
 * up the property in the repository:
 *   value_<BASE32 name>_<common_name|description>_<lang>
 *
 * Returns NULL on failure.  Sets scf_error():
 *   SCF_ERROR_INVALID_ARGUMENT
 *     Name isn't short enough make a value name with.
 *   SCF_ERROR_NO_MEMORY
 */
static char *
_make_value_name(char *desc_name, const char *value)
{
	char *name = NULL;
	char *encoded = NULL;
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;

	name = malloc(sz);
	encoded = malloc(sz);
	if (name == NULL || encoded == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		free(name);
		free(encoded);
		return (NULL);
	}

	if (scf_encode32(value, strlen(value), encoded, sz, NULL,
	    SCF_ENCODE32_PAD) != 0) {
		/* Shouldn't happen. */
		assert(0);
	}

	(void) strlcpy(name, SCF_PROPERTY_TM_VALUE_PREFIX, sz);

	if (strlcat(name, encoded, sz) >= sz) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(encoded);
		return (NULL);
	}

	if (strlcat(name, "_", sz) >= sz) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(encoded);
		return (NULL);
	}

	if (strlcat(name, desc_name, sz) >= sz) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(encoded);
		return (NULL);
	}

	if (strlcat(name, "_", sz) >= sz) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		free(name);
		free(encoded);
		return (NULL);
	}

	free(encoded);
	return (name);
}

/*
 * ssize_t scf_tmpl_value_common_name()
 *
 * Populates "out" with an allocated string containing the value's
 * common name.  Returns the size of the string on successful return.
 * out must be freed with free() on successful return.
 *
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *     Property group was deleted.
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     name not a valid property name
 *     name and locale are too long to make a property name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     property is not SCF_TYPE_ASTRING has more than one value.
 */
ssize_t
scf_tmpl_value_common_name(const scf_prop_tmpl_t *t, const char *locale,
    const char *value, char **out)
{
	char *value_name = NULL;

	value_name = _make_value_name("common_name", value);
	if (value_name == NULL)
		return (-1);

	*out = _read_localized_astring_from_pg(t->prt_pg, value_name, locale);

	free(value_name);

	if (*out == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * ssize_t scf_tmpl_value_description()
 *
 * Populates "out" with an allocated string containing the value's
 * description.  Returns the size of the string on successful return.
 * out must be freed with free() on successful return.
 *
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *     Property group was deleted.
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *     name not a valid property name
 *     name and locale are too long to make a property name
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *     Property doesn't exist or exists and has no value.
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 *     property is not SCF_TYPE_ASTRING has more than one value.
 */
ssize_t
scf_tmpl_value_description(const scf_prop_tmpl_t *t, const char *locale,
    const char *value, char **out)
{
	char *value_name = NULL;

	value_name = _make_value_name("description", value);
	if (value_name == NULL)
		return (-1);


	*out = _read_localized_astring_from_pg(t->prt_pg, value_name, locale);

	free(value_name);

	if (*out == NULL)
		return (-1);

	return (strlen(*out));
}

/*
 * Templates error messages format, in human readable form.
 * Each line is one error item:
 *
 * prefix error message
 * 	FMRI="err->te_errs->tes_fmri"
 * 	Property group="err->te_pg_name"
 * 	Property name="err->te_prop_name"
 * 	expected value 1="err->te_ev1"
 * 	expected value 2="err->te_ev2"
 * 	actual value="err->te_actual"
 * 	Tempalte source="err->te_tmpl_fmri"
 * 	pg_pattern name="err->tmpl_pg_name"
 * 	pg_pattern type="err->tmpl_pg_type"
 * 	prop_pattern name="err->tmpl_prop_name"
 * 	prop_pattern type="err->tmpl_prop_type"
 *
 * To add a new error type, include scf_tmpl_error_type_t in libscf.h
 * add one entry in em_desc[], and update the functions pointed by the
 * _tmpl_error_access array with the new error code. Also, update the
 * scf_tmpl_error_* functions to provide access to desired
 * scf_tmpl_error_t fields.
 *
 * To add a new error item, add a new field to scf_tmpl_error_t, a new field
 * in _scf_tmpl_error_desc or a new non-error-dependent string, add a new entry
 * in _tmpl_error_access array and create the appropriate get_val, get_desc
 * functions.
 *
 * Changes to both the validation logic and the error types and items must
 * be coordinated with the code in svccfg to ensure both libscf and svccfg's
 * manifest validation validate the same things.
 */

/*
 * Container for all template errors on a validated object.
 */
struct scf_tmpl_errors {
	int			tes_index;
	int			tes_num_errs;
	scf_tmpl_error_t	**tes_errs;
	int			tes_errs_size;
	const char		*tes_fmri;
	const char		*tes_prefix;
	int			tes_flag; /* if set, scf_tmpl_error_destroy */
					    /* will free strings in tes_errs  */
};

/*
 * Templates error-dependent labels
 */
struct _scf_tmpl_error_desc {
	const char *em_msg;
	const char *em_ev1;
	const char *em_ev2;
	const char *em_actual;
};

/*
 * This array MUST be kept in synch with the template error definition of
 * scf_tmpl_error_type_t in libscf.h
 */
static struct _scf_tmpl_error_desc em_desc[] = {
	/* SCF_TERR_MISSING_PG */
	{ "Required property group missing", "Name of missing property group",
	    "Type of missing property group", NULL },
	/* SCF_TERR_WRONG_PG_TYPE */
	{ "Property group has bad type", "Specified type", NULL,
	    "Actual type" },
	/* SCF_TERR_MISSING_PROP */
	{ "Required property missing", "Name of missing property", NULL, NULL },
	/* SCF_TERR_WRONG_PROP_TYPE */
	{ "Property has bad type", "Specified property type", NULL,
	    "Actual property type" },
	/* SCF_TERR_CARDINALITY_VIOLATION */
	{ "Number of property values violates cardinality restriction",
	    "Cardinality minimum", "Cardinality maximum",
	    "Actual number of values" },
	/* SCF_TERR_VALUE_CONSTRAINT_VIOLATED */
	{ "Property has illegal value", NULL, NULL, "Illegal value" },
	/* SCF_TERR_RANGE_VIOLATION */
	{ "Property value is out of range", NULL, NULL, "Actual value" },
	/* SCF_TERR_PG_REDEFINE */
	{ "Instance redefines pg_pattern", "Instance pg_pattern name",
	    "Instance pg_pattern type", NULL },
	/* SCF_TERR_PROP_TYPE_MISMATCH */
	{ "Property type and value type mismatch", NULL, NULL, "Value type" },
	/* SCF_TERR_VALUE_OUT_OF_RANGE */
	{ "Value is out of range", NULL, NULL, "Value" },
	/* SCF_TERR_INVALID_VALUE */
	{ "Value is not valid", NULL, NULL, "Value" },
	/* SCF_TERR_PG_PATTERN_CONFLICT */
	{ "Conflicting pg_pattern specifications", "Template source",
	    "pg_pattern name", "pg_pattern type" },
	/* SCF_TERR_PROP_PATTERN_CONFLICT */
	{ "Conflicting prop_pattern specifications", "Template source",
	    "prop_pattern name", "prop_pattern type" },
	/* SCF_TERR_GENERAL_REDEFINE */
	{ "Service or instance pg_pattern redefines a global or restarter "
	    "pg_pattern", "Template source", "pg_pattern name",
	    "pg_pattern type" },
	/* SCF_TERR_INCLUDE_VALUES */
	{ "Missing constraints or values for include_values element",
	    "include_values type", NULL, NULL },
	/* SCF_TERR_PG_PATTERN_INCOMPLETE */
	{ "Required pg_pattern is missing a name or type attribute",
	    NULL, NULL, NULL },
	/* SCF_TERR_PROP_PATTERN_INCOMPLETE */
	{ "Required prop_pattern is missing a type attribute",
	    NULL, NULL, NULL }
};

/*
 * Templates non error-dependent labels
 */
static const char *em_fmri = "FMRI";
static const char *em_pg_name = "Property group";
static const char *em_prop_name = "Property name";
static const char *em_tmpl_fmri = "Template source";
static const char *em_tmpl_pg_name = "pg_pattern name";
static const char *em_tmpl_pg_type = "pg_pattern type";
static const char *em_tmpl_prop_name = "prop_pattern name";
static const char *em_tmpl_prop_type = "prop_pattern type";

static const char *
_get_fmri_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	case SCF_TERR_INCLUDE_VALUES:
		return (dgettext(TEXT_DOMAIN, em_fmri));
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	default:
		return (NULL);
	}
}

static const char *
_get_pg_name_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
		return (dgettext(TEXT_DOMAIN, em_pg_name));
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_prop_name_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
		return (dgettext(TEXT_DOMAIN, em_prop_name));
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_ev1_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
		return (dgettext(TEXT_DOMAIN, em_desc[err->te_type].em_ev1));
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_ev2_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
		return (dgettext(TEXT_DOMAIN, em_desc[err->te_type].em_ev2));
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_actual_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
		return (dgettext(TEXT_DOMAIN,
		    em_desc[err->te_type].em_actual));
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_tmpl_fmri_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
		return (dgettext(TEXT_DOMAIN, em_tmpl_fmri));
	default:
		return (NULL);
	}
}

static const char *
_get_tmpl_pg_name_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
		return (dgettext(TEXT_DOMAIN, em_tmpl_pg_name));
	default:
		return (NULL);
	}
}

static const char *
_get_tmpl_pg_type_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
		return (dgettext(TEXT_DOMAIN, em_tmpl_pg_type));
	default:
		return (NULL);
	}
}

static const char *
_get_tmpl_prop_name_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_INCLUDE_VALUES:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
		return (dgettext(TEXT_DOMAIN, em_tmpl_prop_name));
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_tmpl_prop_type_desc(scf_tmpl_error_t *err)
{
	switch (err->te_type) {
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PROP_PATTERN_CONFLICT:
	case SCF_TERR_INCLUDE_VALUES:
		return (dgettext(TEXT_DOMAIN, em_tmpl_prop_type));
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_PG_REDEFINE:
	case SCF_TERR_PG_PATTERN_CONFLICT:
	case SCF_TERR_GENERAL_REDEFINE:
	case SCF_TERR_PG_PATTERN_INCOMPLETE:
	case SCF_TERR_PROP_PATTERN_INCOMPLETE:
	default:
		return (NULL);
	}
}

static const char *
_get_fmri_val(scf_tmpl_error_t *err)
{
	assert(err != NULL && err->te_errs != NULL &&
	    err->te_errs->tes_fmri != NULL);
	return (err->te_errs->tes_fmri);
}

static const char *
_get_pg_name_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_pg_name);
}

static const char *
_get_prop_name_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_prop_name);
}

static const char *
_get_ev1_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_ev1);
}

static const char *
_get_ev2_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_ev2);
}

static const char *
_get_actual_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_actual);
}

static const char *
_get_tmpl_fmri_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_tmpl_fmri);
}

static const char *
_get_tmpl_pg_name_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_tmpl_pg_name);
}

static const char *
_get_tmpl_pg_type_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_tmpl_pg_type);
}

static const char *
_get_tmpl_prop_name_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_tmpl_prop_name);
}

static const char *
_get_tmpl_prop_type_val(scf_tmpl_error_t *err)
{
	assert(err != NULL);
	return (err->te_tmpl_prop_type);
}

/*
 * Templates error item retrival functions
 */
typedef const char *(*get_em)(scf_tmpl_error_t *);

/*
 * if new items (lines) are added to the templates error messages,
 * new entries in this array (and new fuctions) will be required.
 */
static struct _tmpl_error_access {
	get_em get_desc;
	get_em get_val;
} _tmpl_error_items[] = {
	{ (get_em)_get_fmri_desc, (get_em)_get_fmri_val },
	{ (get_em)_get_pg_name_desc, (get_em)_get_pg_name_val },
	{ (get_em)_get_prop_name_desc, (get_em)_get_prop_name_val },
	{ (get_em)_get_ev1_desc, (get_em)_get_ev1_val },
	{ (get_em)_get_ev2_desc, (get_em)_get_ev2_val },
	{ (get_em)_get_actual_desc, (get_em)_get_actual_val },
	{ (get_em)_get_tmpl_fmri_desc, (get_em)_get_tmpl_fmri_val },
	{ (get_em)_get_tmpl_pg_name_desc, (get_em)_get_tmpl_pg_name_val },
	{ (get_em)_get_tmpl_pg_type_desc, (get_em)_get_tmpl_pg_type_val },
	{ (get_em)_get_tmpl_prop_name_desc, (get_em)_get_tmpl_prop_name_val },
	{ (get_em)_get_tmpl_prop_type_desc, (get_em)_get_tmpl_prop_type_val },
	{ NULL }
};

/*
 * Allocate a new scf_tmpl_error_t and add it to the errs list provided.
 * Returns NULL on failure.  Sets scf_error():
 *   SCF_ERROR_NO_MEMORY
 */
static scf_tmpl_error_t *
_create_error(scf_tmpl_errors_t *errs)
{
	scf_tmpl_error_t *ret;
	scf_tmpl_error_t **saved_errs;

	assert(errs != NULL);
	ret = calloc(1, sizeof (scf_tmpl_error_t));
	if (ret == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	ret->te_errs = errs;

	assert(errs->tes_num_errs <= errs->tes_errs_size);
	if (errs->tes_num_errs == errs->tes_errs_size) {
		/* Time to grow the pointer array. */
		saved_errs = errs->tes_errs;
		errs->tes_errs = calloc(2 * errs->tes_errs_size,
		    sizeof (scf_tmpl_error_t *));
		if (errs->tes_errs == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			errs->tes_errs = saved_errs;
			free(ret);
			return (NULL);
		}
		(void) memcpy(errs->tes_errs, saved_errs, errs->tes_errs_size *
		    sizeof (scf_tmpl_error_t *));
		errs->tes_errs_size = 2 * errs->tes_errs_size;
		free(saved_errs);
	}

	errs->tes_errs[errs->tes_num_errs] = ret;
	errs->tes_num_errs++;

	return (ret);
}

/*
 *
 * If destroy_strings is set, scf_tmpl_errors_destroy will free the
 * strings in scf_tmpl_error_t entries.
 *
 * Returns NULL on failure.  Sets scf_error():
 *    SCF_ERROR_NO_MEMORY
 */
scf_tmpl_errors_t *
_scf_create_errors(const char *fmri, int destroy_strings)
{
	scf_tmpl_errors_t *ret;
	int errs_size = 20;

	assert(fmri != NULL);

	ret = calloc(1, sizeof (scf_tmpl_errors_t));
	if (ret == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	ret->tes_index = 0;
	ret->tes_num_errs = 0;
	if ((ret->tes_fmri = strdup(fmri)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		free(ret);
		return (NULL);
	}

	ret->tes_prefix = strdup("");
	if (ret->tes_prefix == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		free((char *)ret->tes_fmri);
		free(ret);
		return (NULL);
	}
	ret->tes_flag = destroy_strings;

	/* Make space for a few errors. */
	ret->tes_errs = calloc(errs_size, sizeof (scf_tmpl_error_t *));
	if (ret->tes_errs == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		free((char *)ret->tes_fmri);
		free((char *)ret->tes_prefix);
		free(ret);
		return (NULL);
	}
	ret->tes_errs_size = errs_size;

	return (ret);
}

/*
 * return 0 on success, if fails set scf_error() to:
 *
 *    SCF_ERROR_NO_MEMORY
 */
int
_scf_tmpl_error_set_prefix(scf_tmpl_errors_t *errs, const char *prefix)
{
	free((void *) errs->tes_prefix);
	if (prefix == NULL)
		errs->tes_prefix = strdup("");
	else
		errs->tes_prefix = strdup(prefix);
	if (errs->tes_prefix == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (-1);
	}
	return (0);
}

/*
 *
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_NO_MEMORY
 */
int
_scf_tmpl_add_error(scf_tmpl_errors_t *errs, scf_tmpl_error_type_t type,
    const char *pg_name, const char *prop_name,
    const char *ev1, const char *ev2, const char *actual,
    const char *tmpl_fmri, const char *tmpl_pg_name, const char *tmpl_pg_type,
    const char *tmpl_prop_name, const char *tmpl_prop_type)
{
	scf_tmpl_error_t *err;

	assert(errs != NULL);
	assert(tmpl_fmri != NULL);

	err = _create_error(errs);
	if (err == NULL)
		return (-1);

	err->te_type = type;
	err->te_pg_name = pg_name;
	err->te_prop_name = prop_name;
	err->te_ev1 = ev1;
	err->te_ev2 = ev2;
	err->te_actual = actual;
	err->te_tmpl_fmri = tmpl_fmri;
	err->te_tmpl_pg_name = tmpl_pg_name;
	err->te_tmpl_pg_type = tmpl_pg_type;
	err->te_tmpl_prop_name = tmpl_prop_name;
	err->te_tmpl_prop_type = tmpl_prop_type;

	return (0);
}

/*
 * returns an allocated string that must be freed with free()
 * string contains converted 64-bit integer value
 * flag set for signed values
 * if fails return NULL and set scf_error() to:
 *   SCF_ERROR_NO_MEMORY
 */
static char *
_val_to_string(uint64_t val, int flag)
{
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH) + 1;
	char *buf;

	buf = malloc(sz);
	if (buf == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (NULL);
	}

	if (flag == 0)
		(void) snprintf(buf, sz, "%" PRIu64, val);
	else
		(void) snprintf(buf, sz, "%" PRIi64, (int64_t)val);

	return (buf);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_missing_pg_error(scf_tmpl_errors_t *errs, scf_pg_tmpl_t *t)
{
	char *ev1 = NULL;
	char *ev2 = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(t)) == NULL)
		return (-1);
	if (scf_tmpl_pg_name(t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if ((ev1 = strdup(t_pg_name)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}
	if ((ev2 = strdup(t_pg_type)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, SCF_TERR_MISSING_PG, NULL, NULL, ev1,
	    ev2, NULL, t_fmri, t_pg_name, t_pg_type, NULL, NULL));
cleanup:
	free(ev1);
	free(ev2);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_wrong_pg_type_error(scf_tmpl_errors_t *errs, scf_pg_tmpl_t *t,
    scf_propertygroup_t *pg)
{
	char *pg_name = NULL;
	char *ev1 = NULL;
	char *actual = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(t)) == NULL)
		return (-1);
	if ((pg_name = _scf_get_pg_name(pg)) == NULL)
		goto cleanup;
	if ((actual = _scf_get_pg_type(pg)) == NULL)
		goto cleanup;
	if (scf_tmpl_pg_name(t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if ((ev1 = strdup(t_pg_type)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, SCF_TERR_WRONG_PG_TYPE, pg_name, NULL,
	    ev1, NULL, actual, t_fmri, t_pg_name, t_pg_type, NULL, NULL));
cleanup:
	free(pg_name);
	free(ev1);
	free(actual);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_missing_prop_error(scf_tmpl_errors_t *errs, scf_pg_tmpl_t *t,
    scf_propertygroup_t *pg, const scf_prop_tmpl_t *pt)
{
	char *pg_name = NULL;
	char *ev1 = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;
	char *t_prop_name = NULL;
	char *t_prop_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(t)) == NULL)
		return (-1);
	if ((pg_name = _scf_get_pg_name(pg)) == NULL)
		goto cleanup;
	if (scf_tmpl_pg_name(t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_prop_name(pt, &t_prop_name) == -1) {
		goto cleanup;
	}
	t_prop_type = _scf_read_tmpl_prop_type_as_string(pt);
	if (t_prop_type != NULL && t_prop_type[0] == '\0') {
		free(t_prop_type);
		t_prop_type = NULL;
	} else if (t_prop_type == NULL) {
		goto cleanup;
	}
	if (t_prop_type == NULL)
		if ((t_prop_type = strdup(SCF_TMPL_WILDCARD)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	if ((ev1 = strdup(t_prop_name)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, SCF_TERR_MISSING_PROP, pg_name, NULL,
	    ev1, NULL, NULL, t_fmri, t_pg_name, t_pg_type, t_prop_name,
	    t_prop_type));
cleanup:
	free(pg_name);
	free(ev1);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	free(t_prop_name);
	free(t_prop_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_wrong_prop_type_error(scf_tmpl_errors_t *errs,
    scf_propertygroup_t *pg, const scf_prop_tmpl_t *pt, scf_property_t *prop)
{
	char *pg_name = NULL;
	char *prop_name = NULL;
	char *ev1 = NULL;
	char *actual = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;
	char *t_prop_name = NULL;
	char *t_prop_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(pt->prt_t)) == NULL)
		return (-1);
	if ((pg_name = _scf_get_pg_name(pg)) == NULL)
		goto cleanup;
	if ((prop_name = _scf_get_prop_name(prop)) == NULL)
		goto cleanup;
	if ((actual = _scf_get_prop_type(prop)) == NULL)
		goto cleanup;
	if (scf_tmpl_pg_name(pt->prt_t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(pt->prt_t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_prop_name(pt, &t_prop_name) == -1) {
		goto cleanup;
	}
	t_prop_type = _scf_read_tmpl_prop_type_as_string(pt);
	if (t_prop_type != NULL && t_prop_type[0] == '\0') {
		free(t_prop_type);
		t_prop_type = NULL;
	} else if (t_prop_type == NULL) {
		goto cleanup;
	}
	if (t_prop_type == NULL)
		if ((t_prop_type = strdup(SCF_TMPL_WILDCARD)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	if ((ev1 = strdup(t_prop_type)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, SCF_TERR_WRONG_PROP_TYPE, pg_name,
	    prop_name, ev1, NULL, actual, t_fmri, t_pg_name, t_pg_type,
	    t_prop_name, t_prop_type));
cleanup:
	free(pg_name);
	free(prop_name);
	free(ev1);
	free(actual);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	free(t_prop_name);
	free(t_prop_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_count_error(scf_tmpl_errors_t *errs, scf_tmpl_error_type_t type,
    scf_propertygroup_t *pg, const scf_prop_tmpl_t *pt, scf_property_t *prop,
    uint64_t count, uint64_t *min, uint64_t *max)
{
	char *pg_name = NULL;
	char *prop_name = NULL;
	char *s_min = NULL;
	char *s_max = NULL;
	char *num = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;
	char *t_prop_name = NULL;
	char *t_prop_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(pt->prt_t)) == NULL)
		return (-1);
	switch (type) {
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_CARDINALITY_VIOLATION:
		if ((pg_name = _scf_get_pg_name(pg)) == NULL)
			goto cleanup;
		if ((prop_name = _scf_get_prop_name(prop)) == NULL)
			goto cleanup;
		break;
	case SCF_TERR_VALUE_OUT_OF_RANGE:
		/* keep pg_name = NULL and prop_name = NULL */
		break;
	}
	if (scf_tmpl_pg_name(pt->prt_t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(pt->prt_t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_prop_name(pt, &t_prop_name) == -1) {
		goto cleanup;
	}
	t_prop_type = _scf_read_tmpl_prop_type_as_string(pt);
	if (t_prop_type != NULL && t_prop_type[0] == '\0') {
		free(t_prop_type);
		t_prop_type = NULL;
	} else if (t_prop_type == NULL) {
		goto cleanup;
	}
	if (t_prop_type == NULL)
		if ((t_prop_type = strdup(SCF_TMPL_WILDCARD)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	if (min == NULL) {
		if ((s_min = strdup("")) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	} else {
		if ((s_min = _val_to_string(*min, 0)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	}
	if (max == NULL) {
		if ((s_max = strdup("")) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	} else {
		if ((s_max = _val_to_string(*max, 0)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	}
	if ((num = _val_to_string(count, 0)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, type, pg_name, prop_name, s_min,
	    s_max, num, t_fmri, t_pg_name, t_pg_type, t_prop_name,
	    t_prop_type));
cleanup:
	free(pg_name);
	free(prop_name);
	free(s_min);
	free(s_max);
	free(num);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	free(t_prop_name);
	free(t_prop_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_constraint_error(scf_tmpl_errors_t *errs, scf_tmpl_error_type_t type,
    scf_propertygroup_t *pg, const scf_prop_tmpl_t *pt, scf_property_t *prop,
    scf_value_t *val)
{
	scf_type_t val_type;
	char *pg_name = NULL;
	char *prop_name = NULL;
	char *value = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;
	char *t_prop_name = NULL;
	char *t_prop_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(pt->prt_t)) == NULL)
		return (-1);
	switch (type) {
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
		if ((pg_name = _scf_get_pg_name(pg)) == NULL)
			goto cleanup;
		if ((prop_name = _scf_get_prop_name(prop)) == NULL)
			goto cleanup;
		/*FALLTHROUGH*/
	case SCF_TERR_INVALID_VALUE:
		/* keep pg_name = NULL and prop_name = NULL */
		if ((value = _scf_value_get_as_string(val)) == NULL)
			goto cleanup;
		break;
	case SCF_TERR_PROP_TYPE_MISMATCH:
		/* keep pg_name = NULL and prop_name = NULL */
		/* use value for value type */
		val_type = scf_value_type(val);
		if ((value = strdup(scf_type_to_string(val_type))) ==
		    NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
		break;
	}
	if (scf_tmpl_pg_name(pt->prt_t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(pt->prt_t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_prop_name(pt, &t_prop_name) == -1) {
		goto cleanup;
	}
	t_prop_type = _scf_read_tmpl_prop_type_as_string(pt);
	if (t_prop_type != NULL && t_prop_type[0] == '\0') {
		free(t_prop_type);
		t_prop_type = NULL;
	} else if (t_prop_type == NULL) {
		goto cleanup;
	}
	if (t_prop_type == NULL)
		if ((t_prop_type = strdup(SCF_TMPL_WILDCARD)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}

	return (_scf_tmpl_add_error(errs, type, pg_name, prop_name, NULL, NULL,
	    value, t_fmri, t_pg_name, t_pg_type, t_prop_name, t_prop_type));
cleanup:
	assert(scf_error() != SCF_ERROR_NOT_SET);
	free(pg_name);
	free(prop_name);
	free(value);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	free(t_prop_name);
	free(t_prop_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_int_error(scf_tmpl_errors_t *errs, scf_tmpl_error_type_t type,
    scf_propertygroup_t *pg, const scf_prop_tmpl_t *pt, scf_property_t *prop,
    int64_t val, int64_t *min, int64_t *max)
{
	char *pg_name = NULL;
	char *prop_name = NULL;
	char *s_min = NULL;
	char *s_max = NULL;
	char *value = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;
	char *t_prop_name = NULL;
	char *t_prop_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(pt->prt_t)) == NULL)
		return (-1);

	switch (type) {
	case SCF_TERR_RANGE_VIOLATION:
		if ((pg_name = _scf_get_pg_name(pg)) == NULL)
			goto cleanup;
		if ((prop_name = _scf_get_prop_name(prop)) == NULL)
			goto cleanup;
		break;
	case SCF_TERR_VALUE_OUT_OF_RANGE:
		/* keep pg_name = NULL and prop_name = NULL */
		break;
	}
	if (scf_tmpl_pg_name(pt->prt_t, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(pt->prt_t, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_prop_name(pt, &t_prop_name) == -1) {
		goto cleanup;
	}
	t_prop_type = _scf_read_tmpl_prop_type_as_string(pt);
	if (t_prop_type != NULL && t_prop_type[0] == '\0') {
		free(t_prop_type);
		t_prop_type = NULL;
	} else if (t_prop_type == NULL) {
		goto cleanup;
	}
	if (t_prop_type == NULL)
		if ((t_prop_type = strdup(SCF_TMPL_WILDCARD)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	if (min == NULL) {
		if ((s_min = strdup("")) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	} else {
		if ((s_min = _val_to_string(*((uint64_t *)min), 1)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	}
	if (max == NULL) {
		if ((s_max = strdup("")) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	} else {
		if ((s_max = _val_to_string(*((uint64_t *)max), 1)) == NULL) {
			(void) scf_set_error(SCF_ERROR_NO_MEMORY);
			goto cleanup;
		}
	}
	if ((value = _val_to_string((uint64_t)val, 1)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, type, pg_name, prop_name, s_min,
	    s_max, value, t_fmri, t_pg_name, t_pg_type, t_prop_name,
	    t_prop_type));
cleanup:
	free(pg_name);
	free(prop_name);
	free(s_min);
	free(s_max);
	free(value);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	free(t_prop_name);
	free(t_prop_type);
	return (-1);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_add_tmpl_pg_redefine_error(scf_tmpl_errors_t *errs, scf_pg_tmpl_t *t,
    scf_pg_tmpl_t *r)
{
	char *ev1 = NULL;
	char *ev2 = NULL;
	char *t_fmri = NULL;
	char *t_pg_name = NULL;
	char *t_pg_type = NULL;

	if ((t_fmri = _scf_tmpl_get_fmri(r)) == NULL)
		return (-1);
	if (scf_tmpl_pg_name(r, &t_pg_name) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(r, &t_pg_type) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_name(t, &ev1) == -1) {
		goto cleanup;
	}
	if (scf_tmpl_pg_type(t, &ev2) == -1) {
		goto cleanup;
	}

	return (_scf_tmpl_add_error(errs, SCF_TERR_PG_REDEFINE, NULL, NULL,
	    ev1, ev2, NULL, t_fmri, t_pg_name, t_pg_type, NULL, NULL));
cleanup:
	free(ev1);
	free(ev2);
	free(t_fmri);
	free(t_pg_name);
	free(t_pg_type);
	return (-1);
}

/*
 * return 0 if value is within count ranges constraint.
 * return -1 otherwise
 */
static int
_check_count_ranges(scf_count_ranges_t *cr, uint64_t v)
{
	int i;

	for (i = 0; i < cr->scr_num_ranges; ++i) {
		if (v >= cr->scr_min[i] &&
		    v <= cr->scr_max[i]) {
			/* value is within ranges constraint */
			return (0);
		}
	}
	return (-1);
}

/*
 * return 0 if value is within count ranges constraint.
 * return -1 otherwise
 */
static int
_check_int_ranges(scf_int_ranges_t *ir, int64_t v)
{
	int i;

	for (i = 0; i < ir->sir_num_ranges; ++i) {
		if (v >= ir->sir_min[i] &&
		    v <= ir->sir_max[i]) {
			/* value is within integer ranges constraint */
			return (0);
		}
	}
	return (-1);
}

/*
 * int _value_in_constraint()
 *
 * Checks whether the supplied value violates any of the constraints
 * specified in the supplied property template.  If it does, an appropriate
 * error is appended to "errs".  pg and prop, if supplied, are used to
 * augment the information in the error.  Returns 0 on success.
 *
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_value_in_constraint(scf_propertygroup_t *pg, scf_property_t *prop,
    const scf_prop_tmpl_t *pt, scf_value_t *value, scf_tmpl_errors_t *errs)
{
	scf_type_t type, tmpl_type;
	scf_values_t vals;
	scf_tmpl_error_type_t terr_type;
	uint64_t v_count;
	int64_t v_int;
	char *vstr;
	ssize_t sz = scf_limit(SCF_LIMIT_MAX_VALUE_LENGTH) + 1;
	ssize_t ret = 0;
	char **constraints;
	int n = 0;
	int r;
	int err_flag = 0;
	scf_count_ranges_t cr;
	scf_int_ranges_t ir;

	type = scf_value_type(value);
	if (type == SCF_TYPE_INVALID) {
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
		return (-1);
	}

	/* Check if template type matches value type. */
	if (scf_tmpl_prop_type(pt, &tmpl_type) == -1) {
		if (scf_error() != SCF_ERROR_NOT_FOUND)
			/* type is not wildcarded */
			return (-1);
	} else if (tmpl_type != type) {
		if (errs != NULL) {
			if (pg == NULL && prop == NULL) {
				if (_add_tmpl_constraint_error(errs,
				    SCF_TERR_PROP_TYPE_MISMATCH, NULL, pt,
				    NULL, value) == -1)
					return (-1);
			}
		}
		return (1);
	}

	/* Numeric values should be checked against any range constraints. */
	switch (type) {
	case SCF_TYPE_COUNT:
		r = scf_value_get_count(value, &v_count);
		assert(r == 0);

		if (scf_tmpl_value_count_range_constraints(pt, &cr) != 0) {
			if (scf_error() == SCF_ERROR_NOT_FOUND)
				break;
			if (scf_error() == SCF_ERROR_CONSTRAINT_VIOLATED)
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
			return (-1);
		} else {
			if (_check_count_ranges(&cr, v_count) == 0) {
				/* value is within ranges constraint */
				scf_count_ranges_destroy(&cr);
				return (0);
			}
			scf_count_ranges_destroy(&cr);
		}

		/*
		 * If we get here, we have a possible constraint
		 * violation.
		 */
		err_flag |= 0x1; /* RANGE_VIOLATION, count */
		break;
	case SCF_TYPE_INTEGER:
		if (scf_value_get_integer(value, &v_int) != 0)
			assert(0);
		if (scf_tmpl_value_int_range_constraints(pt, &ir) != 0) {
			if (scf_error() == SCF_ERROR_NOT_FOUND)
				break;
			if (scf_error() != SCF_ERROR_CONSTRAINT_VIOLATED)
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
			return (-1);
		} else {
			if (_check_int_ranges(&ir, v_int) == 0) {
				/* value is within ranges constraint */
				scf_int_ranges_destroy(&ir);
				return (0);
			}
			scf_int_ranges_destroy(&ir);
		}
		/*
		 * If we get here, we have a possible constraint
		 * violation.
		 */
		err_flag |= 0x2; /* RANGE_VIOLATION, integer */
		break;
	default:
		break;
	}

	vstr = malloc(sz);
	if (vstr == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		return (-1);
	}

	/*
	 * If a set of names is provided, confirm value has one of
	 * those names.
	 */
	if (scf_tmpl_value_name_constraints(pt, &vals) != 0) {
		free(vstr);
		if (scf_error() != SCF_ERROR_NOT_FOUND) {
			return (-1);
		}
	} else {
		r = scf_value_get_as_string_typed(value, type, vstr, sz);

		/*
		 * All errors (INVALID_ARGUMENT, NOT_SET, TYPE_MISMATCH)
		 * should be impossible or already caught above.
		 */
		assert(r > 0);

		constraints = vals.values.v_astring;
		for (n = 0; constraints[n] != NULL; ++n) {
			if (strcmp(constraints[n], vstr) == 0) {
				/* value is within constraint */
				scf_values_destroy(&vals);
				free(vstr);
				return (0);
			}
		}
		/* if we get here, we have a constraint violation */
		err_flag |= 0x4; /* CONSTRAINT_VIOLATED */
		scf_values_destroy(&vals);
		free(vstr);
	}
	if (err_flag != 0)
		ret = 1;
	/* register the errors found */
	if (ret == 1 && errs != NULL) {
		if ((err_flag & 0x1) == 0x1) {
			/*
			 * Help make the error more human-friendly.  If
			 * pg and prop are provided, we know we're
			 * validating repository data.  If they're not,
			 * we're validating a potentially hypothetical
			 * value.
			 */
			if (pg == NULL && prop == NULL)
				terr_type = SCF_TERR_VALUE_OUT_OF_RANGE;
			else
				terr_type = SCF_TERR_RANGE_VIOLATION;
			if (_add_tmpl_count_error(errs, terr_type, pg, pt,
			    prop, v_count, 0, 0) == -1)
				ret = -1;
		}
		if ((err_flag & 0x2) == 0x2) {
			if (pg == NULL && prop == NULL)
				terr_type = SCF_TERR_VALUE_OUT_OF_RANGE;
			else
				terr_type = SCF_TERR_RANGE_VIOLATION;
			if (_add_tmpl_int_error(errs, terr_type, pg, pt, prop,
			    v_int, 0, 0) == -1)
				ret = -1;
		}
		if ((err_flag & 0x4) == 0x4) {
			if (pg == NULL && prop == NULL)
				terr_type = SCF_TERR_INVALID_VALUE;
			else
				terr_type = SCF_TERR_VALUE_CONSTRAINT_VIOLATED;
			if (_add_tmpl_constraint_error(errs, terr_type, pg,
			    pt, prop, value) == -1)
				ret = -1;
		}
	}
	return (ret);
}

/*
 * Returns -1 on failure.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_value_in_constraint(const scf_prop_tmpl_t *pt, scf_value_t *value,
    scf_tmpl_errors_t **errs)
{
	scf_tmpl_errors_t *e = NULL;

	if (errs != NULL) {
		char *fmri;

		if ((fmri = _scf_tmpl_get_fmri(pt->prt_t)) == NULL)
			return (-1);
		*errs = _scf_create_errors(fmri, 1);
		free(fmri);
		if (*errs == NULL)
			return (-1);
		e = *errs;
	}

	return (_value_in_constraint(NULL, NULL, pt, value, e));
}

scf_tmpl_error_t *
scf_tmpl_next_error(scf_tmpl_errors_t *errs)
{
	if (errs->tes_index < errs->tes_num_errs) {
		assert(errs->tes_errs[errs->tes_index] != NULL);
		return (errs->tes_errs[errs->tes_index++]);
	} else {
		return (NULL);
	}
}

void
scf_tmpl_reset_errors(scf_tmpl_errors_t *errs)
{
	errs->tes_index = 0;
}

int
scf_tmpl_strerror(scf_tmpl_error_t *err,  char *s, size_t n, int flag)
{
	const char *str;
	int i;
	int ret = -1;
	int nsz = 0;	/* err msg length */
	int sz = n;	/* available buffer size */
	char *buf = s;	/* where to append in buffer */
	char *s0 = (flag == SCF_TMPL_STRERROR_HUMAN) ? ":\n\t" : ": ";
	char *s1 = (flag == SCF_TMPL_STRERROR_HUMAN) ? "\n\t" : "; ";
	char *sep = s0;
	const char *val;

	/* prefix */
	if (err->te_errs->tes_prefix != NULL) {
		ret = snprintf(buf, sz, "%s", dgettext(TEXT_DOMAIN,
		    err->te_errs->tes_prefix));
		nsz += ret;
		sz = (sz - ret) > 0 ? sz - ret : 0;
		buf = (sz > 0) ? s + nsz : NULL;
	}
	/* error message */
	ret = snprintf(buf, sz, "%s", dgettext(TEXT_DOMAIN,
	    em_desc[err->te_type].em_msg));
	nsz += ret;
	sz = (sz - ret) > 0 ? sz - ret : 0;
	buf = (sz > 0) ? s + nsz : NULL;

	for (i = 0; _tmpl_error_items[i].get_desc != NULL; ++i) {
		if ((str = _tmpl_error_items[i].get_desc(err)) == NULL)
			/* no item to print */
			continue;
		val = _tmpl_error_items[i].get_val(err);
		ret = snprintf(buf, sz, "%s%s=\"%s\"", sep, str,
		    (val == NULL) ? "" : val);
		nsz += ret;
		sz = (sz - ret) > 0 ? sz - ret : 0;
		buf = (sz > 0) ? s + nsz : NULL;
		sep = s1;
	}
	return (nsz);
}

/*
 * return 0 on success, -1 on failure.
 * set scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_validate_cardinality(scf_propertygroup_t *pg, scf_prop_tmpl_t *pt,
    scf_property_t *prop, scf_tmpl_errors_t *errs)
{
	uint64_t min, max;
	scf_handle_t *h;
	scf_iter_t *iter = NULL;
	scf_value_t *val = NULL;
	int count = 0;
	int ret = -1;
	int r;

	if (scf_tmpl_prop_cardinality(pt, &min, &max) != 0) {
		if (scf_error() == SCF_ERROR_NOT_FOUND)
			return (0);
		else
			return (-1);
	}

	/* Any number of values permitted.  Just return success. */
	if (min == 0 && max == UINT64_MAX) {
		return (0);
	}

	h = scf_property_handle(prop);
	if (h == NULL) {
		assert(scf_error() == SCF_ERROR_HANDLE_DESTROYED);
		goto cleanup;
	}

	iter = scf_iter_create(h);
	val = scf_value_create(h);
	if (iter == NULL || val == NULL) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	if (scf_iter_property_values(iter, prop) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	while ((r = scf_iter_next_value(iter, val)) == 1)
		count++;

	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	if (count < min || count > max)
		if (_add_tmpl_count_error(errs, SCF_TERR_CARDINALITY_VIOLATION,
		    pg, pt, prop, (uint64_t)count, &min, &max) == -1)
			goto cleanup;

	ret = 0;

cleanup:
	scf_iter_destroy(iter);
	scf_value_destroy(val);
	return (ret);
}

/*
 * Returns -1 on error.  Sets scf_error():
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_check_property(scf_prop_tmpl_t *pt, scf_propertygroup_t *pg,
    scf_property_t *prop, scf_tmpl_errors_t *errs)
{
	scf_type_t tmpl_type;
	uint8_t required;
	scf_handle_t *h;
	scf_iter_t *iter = NULL;
	scf_value_t *val = NULL;
	int r;
	int ret = -1;

	h = scf_pg_handle(pg);
	if (h == NULL) {
		assert(scf_error() == SCF_ERROR_HANDLE_DESTROYED);
		return (-1);
	}

	iter = scf_iter_create(h);
	val = scf_value_create(h);
	if (iter == NULL || val == NULL) {
		if (ismember(scf_error(), errors_server)) {
			scf_iter_destroy(iter);
			scf_value_destroy(val);
			return (-1);
		} else {
			assert(0);
			abort();
		}
	}

	if (scf_tmpl_prop_required(pt, &required) != 0)
		goto cleanup;

	/* Check type */
	if (scf_tmpl_prop_type(pt, &tmpl_type) == -1) {
		if (scf_error() != SCF_ERROR_NOT_FOUND) {
			goto cleanup;
		} else if (required) {
			/* If required, type must be specified. */
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			goto cleanup;
		}
	} else if (scf_property_is_type(prop, tmpl_type) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else switch (scf_error()) {
		case SCF_ERROR_TYPE_MISMATCH:
			if (_add_tmpl_wrong_prop_type_error(errs, pg, pt,
			    prop) == -1)
				goto cleanup;
			break;

		case SCF_ERROR_INVALID_ARGUMENT:
			/*
			 * tmpl_prop_type shouldn't have handed back
			 * an invalid property type.
			 */
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}


	/* Cardinality */
	if (_validate_cardinality(pg, pt, prop, errs) == -1)
		goto cleanup;

	/* Value constraints */
	/*
	 * Iterate through each value, and confirm it is defined as
	 * constrained.
	 */
	if (scf_iter_property_values(iter, prop) != 0) {
		assert(scf_error() != SCF_ERROR_NOT_SET &&
		    scf_error() != SCF_ERROR_HANDLE_MISMATCH);
		goto cleanup;
	}

	while ((r = scf_iter_next_value(iter, val)) == 1) {
		if (_value_in_constraint(pg, prop, pt, val, errs) == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else switch (scf_error()) {
			case SCF_ERROR_TEMPLATE_INVALID:
				goto cleanup;

			case SCF_ERROR_INVALID_ARGUMENT:
			default:
				assert(0);
				abort();
			}
		}
	}

	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	ret = 0;

cleanup:
	scf_iter_destroy(iter);
	scf_value_destroy(val);
	return (ret);
}

/*
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_check_pg(scf_pg_tmpl_t *t, scf_propertygroup_t *pg, char *pg_name,
    char *type, scf_tmpl_errors_t *errs)
{
	scf_prop_tmpl_t *pt = NULL;
	char *pg_type = NULL;
	scf_iter_t *iter = NULL;
	uint8_t pg_required;
	scf_property_t *prop = NULL;
	scf_handle_t *h;
	int r;
	char *prop_name = NULL;
	ssize_t nsize = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	int ret = -1;

	assert(pg_name != NULL);
	assert(t != NULL);
	assert(pg != NULL);
	assert(type != NULL);
	assert(nsize != 0);

	if ((h = scf_pg_handle(pg)) == NULL) {
		assert(scf_error() == SCF_ERROR_HANDLE_DESTROYED);
		return (-1);
	}
	if ((pt = scf_tmpl_prop_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		return (-1);
	}

	if ((prop = scf_property_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		goto cleanup;
	}

	if ((iter = scf_iter_create(h)) == NULL) {
		assert(scf_error() != SCF_ERROR_INVALID_ARGUMENT);
		goto cleanup;
	}
	if ((prop_name = malloc(nsize)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	if (scf_tmpl_pg_required(t, &pg_required) != 0)
		goto cleanup;

	if (scf_tmpl_pg_type(t, &pg_type) == -1) {
		goto cleanup;
	} else if (pg_required != 0 &&
	    strcmp(SCF_TMPL_WILDCARD, pg_type) == 0) {
		/* Type must be specified for required pgs. */
		(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
		goto cleanup;
	}

	if (pg_type != NULL) {
		if (strcmp(pg_type, type) != 0 &&
		    strcmp(pg_type, SCF_TMPL_WILDCARD) != 0) {
			if (_add_tmpl_wrong_pg_type_error(errs, t, pg) == -1)
				goto cleanup;
		}
	}


	/* Iterate through properties in the repository and check them. */
	if (scf_iter_pg_properties(iter, pg) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	while ((r = scf_iter_next_property(iter, prop)) == 1) {
		if (scf_property_get_name(prop, prop_name, nsize) == -1) {
			assert(scf_error() != SCF_ERROR_NOT_SET);
			goto cleanup;
		}
		if (scf_tmpl_get_by_prop(t, prop_name, pt, 0) != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				/* No template.  Continue. */
				continue;

			case SCF_ERROR_INVALID_ARGUMENT:
			default:
				assert(0);
				abort();
			}
		}

		if (_check_property(pt, pg, prop, errs) != 0)
			goto cleanup;
	}

	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	scf_tmpl_prop_reset(pt);
	free(prop_name);
	prop_name = NULL;
	/*
	 * Confirm required properties are present.
	 */
	while ((r = scf_tmpl_iter_props(t, pt,
	    SCF_PROP_TMPL_FLAG_REQUIRED)) == 0) {
		scf_type_t prop_type;

		if (scf_tmpl_prop_name(pt, &prop_name) == -1)
			goto cleanup;

		/* required properties cannot have type wildcarded */
		if (scf_tmpl_prop_type(pt, &prop_type) == -1) {
			if (scf_error() == SCF_ERROR_NOT_FOUND)
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
			goto cleanup;
		}

		if (scf_pg_get_property(pg, prop_name, prop) != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				if (_add_tmpl_missing_prop_error(errs, t, pg,
				    pt) == -1)
					goto cleanup;
				break;

			case SCF_ERROR_INVALID_ARGUMENT:
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
				goto cleanup;

			case SCF_ERROR_HANDLE_MISMATCH:
			case SCF_ERROR_NOT_SET:
			default:
				assert(0);
				abort();
			}
		}
		free(prop_name);
		prop_name = NULL;
	}
	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else switch (scf_error()) {
		case SCF_ERROR_NOT_FOUND:
			break;

		case SCF_ERROR_TEMPLATE_INVALID:
			goto cleanup;

		case SCF_ERROR_INVALID_ARGUMENT:
		default:
			assert(0);
			abort();
		}
	}

	ret = 0;
cleanup:
	scf_tmpl_prop_destroy(pt);
	scf_iter_destroy(iter);
	scf_property_destroy(prop);
	free(prop_name);
	free(pg_type);
	return (ret);
}

/*
 * Checks if instance fmri redefines any pgs defined in restarter or global
 * Return -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
static int
_scf_tmpl_check_pg_redef(scf_handle_t *h, const char *fmri,
    const char *snapname, scf_tmpl_errors_t *errs)
{
	scf_pg_tmpl_t *t = NULL;
	scf_pg_tmpl_t *r = NULL;
	char *pg_name = NULL;
	char *pg_name_r = NULL;
	char *pg_type = NULL;
	char *pg_type_r = NULL;
	char *target = NULL;
	int ret_val = -1;
	int ret;

	t = scf_tmpl_pg_create(h);
	r = scf_tmpl_pg_create(h);
	if (t == NULL || r == NULL)
		goto cleanup;

	while ((ret = scf_tmpl_iter_pgs(t, fmri, snapname, NULL,
	    SCF_PG_TMPL_FLAG_EXACT)) == 1) {
		if (scf_tmpl_pg_name(t, &pg_name) == -1) {
			goto cleanup;
		}
		if (scf_tmpl_pg_type(t, &pg_type) == -1) {
			goto cleanup;
		}
		/* look for a redefinition of a global/restarter pg_pattern */
		while ((ret = scf_tmpl_iter_pgs(r, fmri, snapname, pg_type,
		    0)) == 1) {
			if (scf_tmpl_pg_name(r, &pg_name_r) == -1) {
				goto cleanup;
			} else if (strcmp(pg_name_r, SCF_TMPL_WILDCARD) != 0 &&
			    strcmp(pg_name, SCF_TMPL_WILDCARD) != 0 &&
			    strcmp(pg_name, pg_name_r) != 0) {
				/* not a match */
				free(pg_name_r);
				pg_name_r = NULL;
				continue;
			}
			if (scf_tmpl_pg_type(r, &pg_type_r) == -1) {
				goto cleanup;
			} else if (strcmp(pg_type_r, SCF_TMPL_WILDCARD) != 0 &&
			    strcmp(pg_type, SCF_TMPL_WILDCARD) != 0 &&
			    strcmp(pg_type, pg_type_r) != 0) {
				/* not a match */
				free(pg_name_r);
				pg_name_r = NULL;
				free(pg_type_r);
				pg_type_r = NULL;
				continue;
			}
			if (scf_tmpl_pg_target(r, &target) == -1) {
				target = NULL;
				goto cleanup;
			}
			if (strcmp(target, SCF_TM_TARGET_ALL) == 0 ||
			    strcmp(target, SCF_TM_TARGET_DELEGATE) == 0) {
				/* found a pg_pattern redefinition */
				if (_add_tmpl_pg_redefine_error(errs, t,
				    r) == -1)
					goto cleanup;
				free(pg_name_r);
				pg_name_r = NULL;
				free(pg_type_r);
				pg_type_r = NULL;
				free(target);
				target = NULL;
				break;
			}
			free(pg_name_r);
			pg_name_r = NULL;
			free(pg_type_r);
			pg_type_r = NULL;
			free(target);
			target = NULL;
		}
		if (ret == -1)
			goto cleanup;
		scf_tmpl_pg_reset(r);

		free(pg_name);
		free(pg_type);
		pg_name = NULL;
		pg_type = NULL;
	}
	if (ret == -1)
		goto cleanup;

	ret_val = 0;

cleanup:
	scf_tmpl_pg_destroy(t);
	scf_tmpl_pg_destroy(r);
	free(pg_name);
	free(pg_type);
	free(pg_name_r);
	free(pg_type_r);
	free(target);

	if (ret_val == -1) {
		if (!ismember(scf_error(), errors_server)) {
			switch (scf_error()) {
			case SCF_ERROR_TYPE_MISMATCH:
				(void) scf_set_error(
				    SCF_ERROR_TEMPLATE_INVALID);
				/*FALLTHROUGH*/

			case SCF_ERROR_CONSTRAINT_VIOLATED:
			case SCF_ERROR_INVALID_ARGUMENT:
			case SCF_ERROR_NOT_FOUND:
			case SCF_ERROR_TEMPLATE_INVALID:
				break;

			case SCF_ERROR_HANDLE_MISMATCH:
			case SCF_ERROR_NOT_SET:
			default:
				assert(0);
				abort();
			}
		}
	}
	return (ret_val);
}

/*
 * Returns -1 on failure, sets scf_error() to:
 *   SCF_ERROR_BACKEND_ACCESS
 *   SCF_ERROR_CONNECTION_BROKEN
 *   SCF_ERROR_DELETED
 *   SCF_ERROR_HANDLE_DESTROYED
 *   SCF_ERROR_INTERNAL
 *   SCF_ERROR_INVALID_ARGUMENT
 *   SCF_ERROR_NO_MEMORY
 *   SCF_ERROR_NO_RESOURCES
 *   SCF_ERROR_NOT_BOUND
 *   SCF_ERROR_NOT_FOUND
 *   SCF_ERROR_PERMISSION_DENIED
 *   SCF_ERROR_TEMPLATE_INVALID
 */
int
scf_tmpl_validate_fmri(scf_handle_t *h, const char *fmri, const char *snapshot,
    scf_tmpl_errors_t **errs, int flags)
{
	scf_pg_tmpl_t *t = NULL;
	scf_iter_t *iter = NULL;
	scf_propertygroup_t *pg = NULL;
	scf_instance_t *inst = NULL;
	scf_snapshot_t *snap = NULL;
	char *type = NULL;
	char *pg_name = NULL;
	ssize_t rsize = scf_limit(SCF_LIMIT_MAX_PG_TYPE_LENGTH) + 1;
	ssize_t nsize = scf_limit(SCF_LIMIT_MAX_NAME_LENGTH) + 1;
	int ret = -1;
	int r;

	assert(errs != NULL);

	if ((*errs = _scf_create_errors(fmri, 1)) == NULL)
		return (-1);

	if ((pg = scf_pg_create(h)) == NULL ||
	    (iter = scf_iter_create(h)) == NULL ||
	    (inst = scf_instance_create(h)) == NULL ||
	    (t = scf_tmpl_pg_create(h)) == NULL) {
		/*
		 * Sets SCF_ERROR_INVALID_ARGUMENT, SCF_ERROR_NO_MEMORY,
		 * SCF_ERROR_NO_RESOURCES, SCF_ERROR_INTERNAL or
		 * SCF_ERROR_HANDLE_DESTROYED.
		 */
		goto cleanup;
	}

	if ((type = malloc(rsize)) == NULL ||
	    (pg_name = malloc(nsize)) == NULL) {
		(void) scf_set_error(SCF_ERROR_NO_MEMORY);
		goto cleanup;
	}

	if (scf_handle_decode_fmri(h, fmri, NULL, NULL, inst, NULL, NULL,
	    SCF_DECODE_FMRI_EXACT|SCF_DECODE_FMRI_REQUIRE_INSTANCE) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else switch (scf_error()) {
		case SCF_ERROR_CONSTRAINT_VIOLATED:
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			/*FALLTHROUGH*/

		case SCF_ERROR_INVALID_ARGUMENT:
		case SCF_ERROR_NOT_FOUND:
			goto cleanup;

		case SCF_ERROR_HANDLE_MISMATCH:
		case SCF_ERROR_NOT_SET:
		default:
			assert(0);
			abort();
		}
	}

	if (snapshot == NULL || strcmp(snapshot, "running") == 0 ||
	    (flags & SCF_TMPL_VALIDATE_FLAG_CURRENT)) {
		if (_get_snapshot(inst, NULL, &snap) == -1)
			goto cleanup;
	} else {
		(void) scf_set_error(SCF_ERROR_NONE);
		if (_get_snapshot(inst, snapshot, &snap) == -1) {
			goto cleanup;
		} else if (scf_error() == SCF_ERROR_NOT_FOUND) {
			goto cleanup;
		}
	}
	if (_scf_tmpl_check_pg_redef(h, fmri, snapshot, *errs) != 0) {
		goto cleanup;
	}

	/*
	 * Check that property groups on this instance conform to the template.
	 */
	if (scf_iter_instance_pgs_composed(iter, inst, snap) != 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	while ((r = scf_iter_next_pg(iter, pg)) == 1) {
		if (scf_pg_get_name(pg, pg_name, nsize) == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else {
				assert(0);
				abort();
			}
		}

		if (scf_pg_get_type(pg, type, rsize) == -1) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else {
				assert(0);
				abort();
			}
		}

		if (scf_tmpl_get_by_pg_name(fmri, snapshot, pg_name, type, t,
		    0) != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				continue;

			case SCF_ERROR_INVALID_ARGUMENT:
				goto cleanup;

			default:
				assert(0);
				abort();
			}
		}

		if (_check_pg(t, pg, pg_name, type, *errs) != 0)
			goto cleanup;
	}
	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else {
			assert(0);
			abort();
		}
	}

	scf_tmpl_pg_reset(t);

	/*
	 * Confirm required property groups are present.
	 */
	while ((r = scf_tmpl_iter_pgs(t, fmri, snapshot, NULL,
	    SCF_PG_TMPL_FLAG_REQUIRED)) == 1) {
		free(pg_name);
		free(type);

		if (scf_tmpl_pg_name(t, &pg_name) == -1)
			goto cleanup;
		if (scf_tmpl_pg_type(t, &type) == -1)
			goto cleanup;
		/*
		 * required property group templates should not have
		 * wildcarded name or type
		 */
		if (strcmp(pg_name, SCF_TMPL_WILDCARD) == 0 ||
		    strcmp(type, SCF_TMPL_WILDCARD) == 0) {
			(void) scf_set_error(SCF_ERROR_TEMPLATE_INVALID);
			goto cleanup;
		}

		if (_get_pg(NULL, inst, snap, pg_name, pg) != 0) {
			if (ismember(scf_error(), errors_server)) {
				goto cleanup;
			} else switch (scf_error()) {
			case SCF_ERROR_NOT_FOUND:
				if (_add_tmpl_missing_pg_error(*errs, t) == -1)
					goto cleanup;
				continue;

			case SCF_ERROR_INVALID_ARGUMENT:
			case SCF_ERROR_HANDLE_MISMATCH:
			case SCF_ERROR_NOT_SET:
			default:
				assert(0);
				abort();
			}
		}
	}
	if (r < 0) {
		if (ismember(scf_error(), errors_server)) {
			goto cleanup;
		} else switch (scf_error()) {
		case SCF_ERROR_NOT_FOUND:
			break;

		case SCF_ERROR_INVALID_ARGUMENT:
			goto cleanup;

		default:
			assert(0);
			abort();
		}
	}

	ret = 0;
	if ((*errs)->tes_num_errs > 0)
		ret = 1;
cleanup:
	if (ret != 1) {
		/* there are no errors to report */
		scf_tmpl_errors_destroy(*errs);
		*errs = NULL;
	}
	scf_tmpl_pg_destroy(t);
	free(type);
	free(pg_name);

	scf_iter_destroy(iter);
	scf_pg_destroy(pg);
	scf_instance_destroy(inst);
	scf_snapshot_destroy(snap);

	return (ret);
}

void
scf_tmpl_errors_destroy(scf_tmpl_errors_t *errs)
{
	int i;
	scf_tmpl_error_t *e;

	if (errs == NULL)
		return;

	for (i = 0; i < errs->tes_num_errs; ++i) {
		e = errs->tes_errs[i];
		if (errs->tes_flag != 0) {
			free((char *)e->te_pg_name);
			free((char *)e->te_prop_name);
			free((char *)e->te_ev1);
			free((char *)e->te_ev2);
			free((char *)e->te_actual);
			free((char *)e->te_tmpl_fmri);
			free((char *)e->te_tmpl_pg_name);
			free((char *)e->te_tmpl_pg_type);
			free((char *)e->te_tmpl_prop_name);
			free((char *)e->te_tmpl_prop_type);
		}
		free(e);
	}
	free((char *)errs->tes_fmri);
	free((char *)errs->tes_prefix);
	free(errs->tes_errs);
	free(errs);
}

int
scf_tmpl_error_source_fmri(const scf_tmpl_error_t *err, char **fmri)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_REDEFINE:
		*fmri = (char *)err->te_tmpl_fmri;
		return (0);
		/*NOTREACHED*/
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_type(const scf_tmpl_error_t *err, scf_tmpl_error_type_t *type)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_REDEFINE:
		*type = err->te_type;
		return (0);
		/*NOTREACHED*/
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_pg_tmpl(const scf_tmpl_error_t *err, char **name, char **type)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_REDEFINE:
		if (err->te_tmpl_pg_name != NULL &&
		    err->te_tmpl_pg_type != NULL) {
			if (name != NULL)
				*name = (char *)err->te_tmpl_pg_name;
			if (type != NULL)
				*type = (char *)err->te_tmpl_pg_type;
			return (0);
		}
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_pg(const scf_tmpl_error_t *err, char **name, char **type)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_WRONG_PG_TYPE:
		if (err->te_pg_name != NULL &&
		    err->te_actual != NULL) {
			if (name != NULL)
				*name = (char *)err->te_pg_name;
			if (type != NULL)
				*type = (char *)err->te_actual;
			return (0);
		}
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
		if (err->te_pg_name != NULL &&
		    err->te_tmpl_pg_type != NULL) {
			if (name != NULL)
				*name = (char *)err->te_pg_name;
			if (type != NULL)
				*type = (char *)err->te_tmpl_pg_type;
			return (0);
		}
		/*FALLTHROUGH*/
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	case SCF_TERR_PG_REDEFINE:
		if (err->te_ev1 != NULL && err->te_ev2 != NULL) {
			if (name != NULL)
				*name = (char *)err->te_ev1;
			if (type != NULL)
				*type = (char *)err->te_ev2;
			return (0);
		}
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_prop_tmpl(const scf_tmpl_error_t *err, char **name, char **type)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
		if (err->te_tmpl_prop_name != NULL &&
		    err->te_tmpl_prop_type != NULL) {
			if (name != NULL)
				*name = (char *)err->te_tmpl_prop_name;
			if (type != NULL)
				*type = (char *)err->te_tmpl_prop_type;
			return (0);
		}
		/*FALLTHROUGH*/
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_PG_REDEFINE:
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_prop(const scf_tmpl_error_t *err, char **name, char **type)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
		if (err->te_prop_name != NULL &&
		    err->te_tmpl_prop_type != NULL) {
			if (name != NULL)
				*name = (char *)err->te_prop_name;
			if (type != NULL)
				*type = (char *)err->te_tmpl_prop_type;
			return (0);
		}
		/*FALLTHROUGH*/
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
	case SCF_TERR_PG_REDEFINE:
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

int
scf_tmpl_error_value(const scf_tmpl_error_t *err, char **val)
{
	assert(err != NULL);
	switch (err->te_type) {
	case SCF_TERR_VALUE_CONSTRAINT_VIOLATED:
	case SCF_TERR_RANGE_VIOLATION:
	case SCF_TERR_VALUE_OUT_OF_RANGE:
	case SCF_TERR_INVALID_VALUE:
		if (err->te_actual != NULL) {
			if (val != NULL)
				*val = (char *)err->te_actual;
			return (0);
		}
		/*FALLTHROUGH*/
	case SCF_TERR_MISSING_PG:
	case SCF_TERR_WRONG_PG_TYPE:
	case SCF_TERR_MISSING_PROP:
	case SCF_TERR_WRONG_PROP_TYPE:
	case SCF_TERR_CARDINALITY_VIOLATION:
	case SCF_TERR_PROP_TYPE_MISMATCH:
	case SCF_TERR_PG_REDEFINE:
		(void) scf_set_error(SCF_ERROR_NOT_FOUND);
		break;
	default:
		(void) scf_set_error(SCF_ERROR_INVALID_ARGUMENT);
	}
	return (-1);
}

const char *
scf_tmpl_visibility_to_string(uint8_t vis)
{
	if (vis == SCF_TMPL_VISIBILITY_READONLY)
		return (SCF_TM_VISIBILITY_READONLY);
	else if (vis == SCF_TMPL_VISIBILITY_HIDDEN)
		return (SCF_TM_VISIBILITY_HIDDEN);
	else if (vis == SCF_TMPL_VISIBILITY_READWRITE)
		return (SCF_TM_VISIBILITY_READWRITE);
	else
		return ("unknown");
}