token.l revision 126843
162473Sphk/* $FreeBSD: head/sbin/setkey/token.l 126843 2004-03-11 11:41:54Z bde $ */ 262473Sphk/* $KAME: token.l,v 1.43 2003/07/25 09:35:28 itojun Exp $ */ 362473Sphk 462473Sphk/* 562473Sphk * Copyright (C) 1995, 1996, 1997, 1998, and 1999 WIDE Project. 662473Sphk * All rights reserved. 762473Sphk * 862473Sphk * Redistribution and use in source and binary forms, with or without 962473Sphk * modification, are permitted provided that the following conditions 1062473Sphk * are met: 1162473Sphk * 1. Redistributions of source code must retain the above copyright 1262473Sphk * notice, this list of conditions and the following disclaimer. 1362473Sphk * 2. Redistributions in binary form must reproduce the above copyright 1462473Sphk * notice, this list of conditions and the following disclaimer in the 1562473Sphk * documentation and/or other materials provided with the distribution. 1662473Sphk * 3. Neither the name of the project nor the names of its contributors 1762473Sphk * may be used to endorse or promote products derived from this software 1862473Sphk * without specific prior written permission. 1962473Sphk * 2062473Sphk * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 2162473Sphk * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 2262473Sphk * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 2362473Sphk * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 2462473Sphk * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 2562473Sphk * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 2662473Sphk * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2762473Sphk * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 2862473Sphk * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 2962473Sphk * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 3062473Sphk * SUCH DAMAGE. 3162473Sphk */ 3262473Sphk 3362473Sphk%{ 3462473Sphk#include <sys/types.h> 3562473Sphk#include <sys/param.h> 3662473Sphk#include <sys/socket.h> 3762473Sphk#include <net/route.h> 3862473Sphk#include <net/pfkeyv2.h> 3962473Sphk#include <netkey/keydb.h> 4062473Sphk#include <netkey/key_debug.h> 4162473Sphk#include <netinet/in.h> 4262473Sphk#include <netinet6/ipsec.h> 4362473Sphk 4462473Sphk#include <stdlib.h> 4562473Sphk#include <limits.h> 4662473Sphk#include <string.h> 4762473Sphk#include <unistd.h> 4862473Sphk#include <errno.h> 49125011Sru#include <netdb.h> 50125011Sru 5162473Sphk#include "vchar.h" 5262473Sphk#include "y.tab.h" 5362473Sphk 5462473Sphkint lineno = 1; 5562473Sphk 5662473Sphkextern u_char m_buf[BUFSIZ]; 5762473Sphkextern u_int m_len; 5862473Sphkextern int f_debug; 5962473Sphk 6062473Sphkint yylex __P((void)); 6163673Sarchievoid yyfatal __P((const char *s)); 6262473Sphkvoid yyerror __P((const char *s)); 6362473Sphkextern void parse_init __P((void)); 6462473Sphkint parse __P((FILE **)); 6562473Sphkint yyparse __P((void)); 6662473Sphk%} 6762473Sphk 6862473Sphk/* common section */ 6962473Sphknl \n 7062473Sphkws [ \t]+ 7162473Sphkdigit [0-9] 7262473Sphkletter [0-9A-Za-z] 7362473Sphkhexdigit [0-9A-Fa-f] 7462473Sphkdot \. 7562473Sphkhyphen \- 7662473Sphkslash \/ 7762473Sphkblcl \[ 7862473Sphkelcl \] 7962473Sphksemi \; 8062473Sphkcomment \#.* 8162473Sphkquotedstring \"[^"]*\" 8262473Sphkdecstring {digit}+ 8362473Sphkhexstring 0[xX]{hexdigit}+ 8462473Sphkipaddress [a-fA-F0-9:]([a-fA-F0-9:\.]*|[a-fA-F0-9:\.]*%[a-zA-Z0-9]*) 8562473Sphkipaddrmask {slash}{digit}{1,3} 8662473Sphkname {letter}(({letter}|{digit}|{hyphen})*({letter}|{digit}))* 8762473Sphkhostname {name}(({dot}{name})+{dot}?)? 8862473Sphk 8962473Sphk%s S_PL S_AUTHALG S_ENCALG 9062473Sphk 9162473Sphk%% 9262473Sphk 9362473Sphkadd { return(ADD); } 9462473Sphkdelete { return(DELETE); } 9562473Sphkdeleteall { return(DELETEALL); } 9662473Sphkget { return(GET); } 9762473Sphkflush { return(FLUSH); } 9862473Sphkdump { return(DUMP); } 9962473Sphk 10062473Sphk /* for management SPD */ 10162473Sphkspdadd { return(SPDADD); } 10262473Sphkspddelete { return(SPDDELETE); } 10362473Sphkspddump { return(SPDDUMP); } 10462473Sphkspdflush { return(SPDFLUSH); } 105tagged { return(TAGGED); } 106{hyphen}P { BEGIN S_PL; return(F_POLICY); } 107<S_PL>[a-zA-Z0-9:\.\-_/ \n\t][a-zA-Z0-9:\.%\-_/ \n\t]* { 108 yymore(); 109 110 /* count up for nl */ 111 { 112 char *p; 113 for (p = yytext; *p != '\0'; p++) 114 if (*p == '\n') 115 lineno++; 116 } 117 118 yylval.val.len = strlen(yytext); 119 yylval.val.buf = strdup(yytext); 120 if (!yylval.val.buf) 121 yyfatal("insufficient memory"); 122 123 return(PL_REQUESTS); 124 } 125<S_PL>{semi} { BEGIN INITIAL; return(EOT); } 126 127 /* address resolution flags */ 128{hyphen}[n46][n46]* { 129 yylval.val.len = strlen(yytext); 130 yylval.val.buf = strdup(yytext); 131 if (!yylval.val.buf) 132 yyfatal("insufficient memory"); 133 return(F_AIFLAGS); 134 } 135 136 /* security protocols */ 137ah { yylval.num = 0; return(PR_AH); } 138esp { yylval.num = 0; return(PR_ESP); } 139ah-old { yylval.num = 1; return(PR_AH); } 140esp-old { yylval.num = 1; return(PR_ESP); } 141ipcomp { yylval.num = 0; return(PR_IPCOMP); } 142tcp { yylval.num = 0; return(PR_TCP); } 143 144 /* authentication alogorithm */ 145{hyphen}A { BEGIN S_AUTHALG; return(F_AUTH); } 146<S_AUTHALG>hmac-md5 { yylval.num = SADB_AALG_MD5HMAC; BEGIN INITIAL; return(ALG_AUTH); } 147<S_AUTHALG>hmac-sha1 { yylval.num = SADB_AALG_SHA1HMAC; BEGIN INITIAL; return(ALG_AUTH); } 148<S_AUTHALG>keyed-md5 { yylval.num = SADB_X_AALG_MD5; BEGIN INITIAL; return(ALG_AUTH); } 149<S_AUTHALG>keyed-sha1 { yylval.num = SADB_X_AALG_SHA; BEGIN INITIAL; return(ALG_AUTH); } 150<S_AUTHALG>hmac-sha2-256 { yylval.num = SADB_X_AALG_SHA2_256; BEGIN INITIAL; return(ALG_AUTH); } 151<S_AUTHALG>hmac-sha2-384 { yylval.num = SADB_X_AALG_SHA2_384; BEGIN INITIAL; return(ALG_AUTH); } 152<S_AUTHALG>hmac-sha2-512 { yylval.num = SADB_X_AALG_SHA2_512; BEGIN INITIAL; return(ALG_AUTH); } 153<S_AUTHALG>hmac-ripemd160 { yylval.num = SADB_X_AALG_RIPEMD160HMAC; BEGIN INITIAL; return(ALG_AUTH); } 154<S_AUTHALG>aes-xcbc-mac { yylval.num = SADB_X_AALG_AES_XCBC_MAC; BEGIN INITIAL; return(ALG_AUTH); } 155<S_AUTHALG>tcp-md5 { yylval.num = SADB_X_AALG_TCP_MD5; BEGIN INITIAL; return(ALG_AUTH); } 156<S_AUTHALG>null { yylval.num = SADB_X_AALG_NULL; BEGIN INITIAL; return(ALG_AUTH_NOKEY); } 157 158 /* encryption alogorithm */ 159{hyphen}E { BEGIN S_ENCALG; return(F_ENC); } 160<S_ENCALG>des-cbc { yylval.num = SADB_EALG_DESCBC; BEGIN INITIAL; return(ALG_ENC); } 161<S_ENCALG>3des-cbc { yylval.num = SADB_EALG_3DESCBC; BEGIN INITIAL; return(ALG_ENC); } 162<S_ENCALG>null { yylval.num = SADB_EALG_NULL; BEGIN INITIAL; return(ALG_ENC_NOKEY); } 163<S_ENCALG>simple { yylval.num = SADB_EALG_NULL; BEGIN INITIAL; return(ALG_ENC_OLD); } 164<S_ENCALG>blowfish-cbc { yylval.num = SADB_X_EALG_BLOWFISHCBC; BEGIN INITIAL; return(ALG_ENC); } 165<S_ENCALG>cast128-cbc { yylval.num = SADB_X_EALG_CAST128CBC; BEGIN INITIAL; return(ALG_ENC); } 166<S_ENCALG>des-deriv { yylval.num = SADB_EALG_DESCBC; BEGIN INITIAL; return(ALG_ENC_DESDERIV); } 167<S_ENCALG>des-32iv { yylval.num = SADB_EALG_DESCBC; BEGIN INITIAL; return(ALG_ENC_DES32IV); } 168<S_ENCALG>rijndael-cbc { yylval.num = SADB_X_EALG_RIJNDAELCBC; BEGIN INITIAL; return(ALG_ENC); } 169<S_ENCALG>aes-ctr { yylval.num = SADB_X_EALG_AESCTR; BEGIN INITIAL; return(ALG_ENC); } 170 171 /* compression algorithms */ 172{hyphen}C { return(F_COMP); } 173oui { yylval.num = SADB_X_CALG_OUI; return(ALG_COMP); } 174deflate { yylval.num = SADB_X_CALG_DEFLATE; return(ALG_COMP); } 175lzs { yylval.num = SADB_X_CALG_LZS; return(ALG_COMP); } 176{hyphen}R { return(F_RAWCPI); } 177 178 /* extension */ 179{hyphen}m { return(F_MODE); } 180transport { yylval.num = IPSEC_MODE_TRANSPORT; return(MODE); } 181tunnel { yylval.num = IPSEC_MODE_TUNNEL; return(MODE); } 182{hyphen}u { return(F_REQID); } 183{hyphen}f { return(F_EXT); } 184random-pad { yylval.num = SADB_X_EXT_PRAND; return(EXTENSION); } 185seq-pad { yylval.num = SADB_X_EXT_PSEQ; return(EXTENSION); } 186zero-pad { yylval.num = SADB_X_EXT_PZERO; return(EXTENSION); } 187nocyclic-seq { return(NOCYCLICSEQ); } 188{hyphen}r { return(F_REPLAY); } 189{hyphen}lh { return(F_LIFETIME_HARD); } 190{hyphen}ls { return(F_LIFETIME_SOFT); } 191 192 /* ... */ 193any { return(ANY); } 194{ws} { } 195{nl} { lineno++; } 196{comment} 197{semi} { return(EOT); } 198 199 /* for address parameters: /prefix, [port] */ 200{slash} { return SLASH; } 201{blcl} { return BLCL; } 202{elcl} { return ELCL; } 203 204 /* parameter */ 205{decstring} { 206 char *bp; 207 208 yylval.ulnum = strtoul(yytext, &bp, 10); 209 return(DECSTRING); 210 } 211 212{hexstring} { 213 yylval.val.buf = strdup(yytext + 2); 214 if (!yylval.val.buf) 215 yyfatal("insufficient memory"); 216 yylval.val.len = strlen(yylval.val.buf); 217 218 return(HEXSTRING); 219 } 220 221{quotedstring} { 222 char *p = yytext; 223 while (*++p != '"') ; 224 *p = '\0'; 225 yytext++; 226 yylval.val.len = yyleng - 2; 227 yylval.val.buf = strdup(yytext); 228 if (!yylval.val.buf) 229 yyfatal("insufficient memory"); 230 231 return(QUOTEDSTRING); 232 } 233 234[A-Za-z0-9:][A-Za-z0-9:%\.-]* { 235 yylval.val.len = yyleng; 236 yylval.val.buf = strdup(yytext); 237 if (!yylval.val.buf) 238 yyfatal("insufficient memory"); 239 return(STRING); 240 } 241 242[0-9,]+ { 243 yylval.val.len = yyleng; 244 yylval.val.buf = strdup(yytext); 245 if (!yylval.val.buf) 246 yyfatal("insufficient memory"); 247 return(STRING); 248 } 249 250. { 251 yyfatal("Syntax error"); 252 /*NOTREACHED*/ 253 } 254 255%% 256 257void 258yyfatal(s) 259 const char *s; 260{ 261 yyerror(s); 262 exit(1); 263} 264 265void 266yyerror(s) 267 const char *s; 268{ 269 printf("line %d: %s at [%s]\n", lineno, s, yytext); 270} 271 272int 273parse(fp) 274 FILE **fp; 275{ 276 yyin = *fp; 277 278 parse_init(); 279 280 if (yyparse()) { 281 printf("parse failed, line %d.\n", lineno); 282 return(-1); 283 } 284 285 return(0); 286} 287