1%{
2/*
3 * configlexer.lex - lexical analyzer for unbound config file
4 *
5 * Copyright (c) 2001-2006, NLnet Labs. All rights reserved
6 *
7 * See LICENSE for the license.
8 *
9 */
10
11/* because flex keeps having sign-unsigned compare problems that are unfixed*/
12#if defined(__clang__)||(defined(__GNUC__)&&((__GNUC__ >4)||(defined(__GNUC_MINOR__)&&(__GNUC__ ==4)&&(__GNUC_MINOR__ >=2))))
13#pragma GCC diagnostic ignored "-Wsign-compare"
14#endif
15
16#include <ctype.h>
17#include <strings.h>
18#ifdef HAVE_GLOB_H
19# include <glob.h>
20#endif
21
22#include "util/config_file.h"
23#include "util/configparser.h"
24void ub_c_error(const char *message);
25
26#if 0
27#define LEXOUT(s)  printf s /* used ONLY when debugging */
28#else
29#define LEXOUT(s)
30#endif
31
32/** avoid warning in about fwrite return value */
33#define ECHO ub_c_error_msg("syntax error at text: %s", yytext)
34
35/** A parser variable, this is a statement in the config file which is
36 * of the form variable: value1 value2 ...  nargs is the number of values. */
37#define YDVAR(nargs, var) \
38	num_args=(nargs); \
39	LEXOUT(("v(%s%d) ", yytext, num_args)); \
40	if(num_args > 0) { BEGIN(val); } \
41	return (var);
42
43struct inc_state {
44	char* filename;
45	int line;
46	YY_BUFFER_STATE buffer;
47	struct inc_state* next;
48	int inc_toplevel;
49};
50static struct inc_state* config_include_stack = NULL;
51static int inc_depth = 0;
52static int inc_prev = 0;
53static int num_args = 0;
54static int inc_toplevel = 0;
55
56void init_cfg_parse(void)
57{
58	config_include_stack = NULL;
59	inc_depth = 0;
60	inc_prev = 0;
61	num_args = 0;
62	inc_toplevel = 0;
63}
64
65static void config_start_include(const char* filename, int toplevel)
66{
67	FILE *input;
68	struct inc_state* s;
69	char* nm;
70	if(inc_depth+1 > 100000) {
71		ub_c_error_msg("too many include files");
72		return;
73	}
74	if(*filename == '\0') {
75		ub_c_error_msg("empty include file name");
76		return;
77	}
78	s = (struct inc_state*)malloc(sizeof(*s));
79	if(!s) {
80		ub_c_error_msg("include %s: malloc failure", filename);
81		return;
82	}
83	if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot,
84		strlen(cfg_parser->chroot)) == 0) {
85		filename += strlen(cfg_parser->chroot);
86	}
87	nm = strdup(filename);
88	if(!nm) {
89		ub_c_error_msg("include %s: strdup failure", filename);
90		free(s);
91		return;
92	}
93	input = fopen(filename, "r");
94	if(!input) {
95		ub_c_error_msg("cannot open include file '%s': %s",
96			filename, strerror(errno));
97		free(s);
98		free(nm);
99		return;
100	}
101	LEXOUT(("switch_to_include_file(%s)\n", filename));
102	inc_depth++;
103	s->filename = cfg_parser->filename;
104	s->line = cfg_parser->line;
105	s->buffer = YY_CURRENT_BUFFER;
106	s->inc_toplevel = inc_toplevel;
107	s->next = config_include_stack;
108	config_include_stack = s;
109	cfg_parser->filename = nm;
110	cfg_parser->line = 1;
111	inc_toplevel = toplevel;
112	yy_switch_to_buffer(yy_create_buffer(input, YY_BUF_SIZE));
113}
114
115static void config_start_include_glob(const char* filename, int toplevel)
116{
117
118	/* check for wildcards */
119#ifdef HAVE_GLOB
120	glob_t g;
121	int i, r, flags;
122	if(!(!strchr(filename, '*') && !strchr(filename, '?') && !strchr(filename, '[') &&
123		!strchr(filename, '{') && !strchr(filename, '~'))) {
124		flags = 0
125#ifdef GLOB_ERR
126			| GLOB_ERR
127#endif
128			 /* do not set GLOB_NOSORT so the results are sorted
129			    and in a predictable order. */
130#ifdef GLOB_BRACE
131			| GLOB_BRACE
132#endif
133#ifdef GLOB_TILDE
134			| GLOB_TILDE
135#endif
136		;
137		memset(&g, 0, sizeof(g));
138		if(cfg_parser->chroot && strncmp(filename, cfg_parser->chroot,
139			strlen(cfg_parser->chroot)) == 0) {
140			filename += strlen(cfg_parser->chroot);
141		}
142		r = glob(filename, flags, NULL, &g);
143		if(r) {
144			/* some error */
145			globfree(&g);
146			if(r == GLOB_NOMATCH)
147				return; /* no matches for pattern */
148			config_start_include(filename, toplevel); /* let original deal with it */
149			return;
150		}
151		/* process files found, if any */
152		for(i=(int)g.gl_pathc-1; i>=0; i--) {
153			config_start_include(g.gl_pathv[i], toplevel);
154		}
155		globfree(&g);
156		return;
157	}
158#endif /* HAVE_GLOB */
159
160	config_start_include(filename, toplevel);
161}
162
163static void config_end_include(void)
164{
165	struct inc_state* s = config_include_stack;
166	--inc_depth;
167	if(!s) return;
168	free(cfg_parser->filename);
169	cfg_parser->filename = s->filename;
170	cfg_parser->line = s->line;
171	yy_delete_buffer(YY_CURRENT_BUFFER);
172	yy_switch_to_buffer(s->buffer);
173	config_include_stack = s->next;
174	inc_toplevel = s->inc_toplevel;
175	free(s);
176}
177
178#ifndef yy_set_bol /* compat definition, for flex 2.4.6 */
179#define yy_set_bol(at_bol) \
180        { \
181	        if ( ! yy_current_buffer ) \
182	                yy_current_buffer = yy_create_buffer( yyin, YY_BUF_SIZE ); \
183	        yy_current_buffer->yy_ch_buf[0] = ((at_bol)?'\n':' '); \
184        }
185#endif
186
187%}
188%option noinput
189%option nounput
190%{
191#ifndef YY_NO_UNPUT
192#define YY_NO_UNPUT 1
193#endif
194#ifndef YY_NO_INPUT
195#define YY_NO_INPUT 1
196#endif
197%}
198
199SPACE   [ \t]
200LETTER  [a-zA-Z]
201UNQUOTEDLETTER [^\'\"\n\r \t\\]|\\.
202UNQUOTEDLETTER_NOCOLON [^\:\'\"\n\r \t\\]|\\.
203NEWLINE [\r\n]
204COMMENT \#
205COLON 	\:
206DQANY     [^\"\n\r\\]|\\.
207SQANY     [^\'\n\r\\]|\\.
208
209%x	quotedstring singlequotedstr include include_quoted val include_toplevel include_toplevel_quoted
210
211%%
212<INITIAL,val>{SPACE}*	{
213	LEXOUT(("SP ")); /* ignore */ }
214<INITIAL,val>{SPACE}*{COMMENT}.*	{
215	/* note that flex makes the longest match and '.' is any but not nl */
216	LEXOUT(("comment(%s) ", yytext)); /* ignore */ }
217server{COLON}			{ YDVAR(0, VAR_SERVER) }
218qname-minimisation{COLON}	{ YDVAR(1, VAR_QNAME_MINIMISATION) }
219qname-minimisation-strict{COLON} { YDVAR(1, VAR_QNAME_MINIMISATION_STRICT) }
220num-threads{COLON}		{ YDVAR(1, VAR_NUM_THREADS) }
221verbosity{COLON}		{ YDVAR(1, VAR_VERBOSITY) }
222port{COLON}			{ YDVAR(1, VAR_PORT) }
223outgoing-range{COLON}		{ YDVAR(1, VAR_OUTGOING_RANGE) }
224outgoing-port-permit{COLON}	{ YDVAR(1, VAR_OUTGOING_PORT_PERMIT) }
225outgoing-port-avoid{COLON}	{ YDVAR(1, VAR_OUTGOING_PORT_AVOID) }
226outgoing-num-tcp{COLON}		{ YDVAR(1, VAR_OUTGOING_NUM_TCP) }
227incoming-num-tcp{COLON}		{ YDVAR(1, VAR_INCOMING_NUM_TCP) }
228do-ip4{COLON}			{ YDVAR(1, VAR_DO_IP4) }
229do-ip6{COLON}			{ YDVAR(1, VAR_DO_IP6) }
230do-nat64{COLON}			{ YDVAR(1, VAR_DO_NAT64) }
231prefer-ip4{COLON}		{ YDVAR(1, VAR_PREFER_IP4) }
232prefer-ip6{COLON}		{ YDVAR(1, VAR_PREFER_IP6) }
233do-udp{COLON}			{ YDVAR(1, VAR_DO_UDP) }
234do-tcp{COLON}			{ YDVAR(1, VAR_DO_TCP) }
235tcp-upstream{COLON}		{ YDVAR(1, VAR_TCP_UPSTREAM) }
236tcp-mss{COLON}			{ YDVAR(1, VAR_TCP_MSS) }
237outgoing-tcp-mss{COLON}		{ YDVAR(1, VAR_OUTGOING_TCP_MSS) }
238tcp-idle-timeout{COLON}		{ YDVAR(1, VAR_TCP_IDLE_TIMEOUT) }
239max-reuse-tcp-queries{COLON}	{ YDVAR(1, VAR_MAX_REUSE_TCP_QUERIES) }
240tcp-reuse-timeout{COLON}	{ YDVAR(1, VAR_TCP_REUSE_TIMEOUT) }
241tcp-auth-query-timeout{COLON}	{ YDVAR(1, VAR_TCP_AUTH_QUERY_TIMEOUT) }
242edns-tcp-keepalive{COLON}	{ YDVAR(1, VAR_EDNS_TCP_KEEPALIVE) }
243edns-tcp-keepalive-timeout{COLON} { YDVAR(1, VAR_EDNS_TCP_KEEPALIVE_TIMEOUT) }
244sock-queue-timeout{COLON} { YDVAR(1, VAR_SOCK_QUEUE_TIMEOUT) }
245ssl-upstream{COLON}		{ YDVAR(1, VAR_SSL_UPSTREAM) }
246tls-upstream{COLON}		{ YDVAR(1, VAR_SSL_UPSTREAM) }
247ssl-service-key{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_KEY) }
248tls-service-key{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_KEY) }
249ssl-service-pem{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_PEM) }
250tls-service-pem{COLON}		{ YDVAR(1, VAR_SSL_SERVICE_PEM) }
251ssl-port{COLON}			{ YDVAR(1, VAR_SSL_PORT) }
252tls-port{COLON}			{ YDVAR(1, VAR_SSL_PORT) }
253ssl-cert-bundle{COLON}		{ YDVAR(1, VAR_TLS_CERT_BUNDLE) }
254tls-cert-bundle{COLON}		{ YDVAR(1, VAR_TLS_CERT_BUNDLE) }
255tls-win-cert{COLON}		{ YDVAR(1, VAR_TLS_WIN_CERT) }
256tls-system-cert{COLON}		{ YDVAR(1, VAR_TLS_WIN_CERT) }
257additional-ssl-port{COLON}	{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
258additional-tls-port{COLON}	{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
259tls-additional-ports{COLON}	{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
260tls-additional-port{COLON}	{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
261tls-session-ticket-keys{COLON}	{ YDVAR(1, VAR_TLS_SESSION_TICKET_KEYS) }
262tls-ciphers{COLON}		{ YDVAR(1, VAR_TLS_CIPHERS) }
263tls-ciphersuites{COLON}		{ YDVAR(1, VAR_TLS_CIPHERSUITES) }
264tls-use-sni{COLON}		{ YDVAR(1, VAR_TLS_USE_SNI) }
265https-port{COLON}		{ YDVAR(1, VAR_HTTPS_PORT) }
266http-endpoint{COLON}		{ YDVAR(1, VAR_HTTP_ENDPOINT) }
267http-max-streams{COLON}		{ YDVAR(1, VAR_HTTP_MAX_STREAMS) }
268http-query-buffer-size{COLON}	{ YDVAR(1, VAR_HTTP_QUERY_BUFFER_SIZE) }
269http-response-buffer-size{COLON} { YDVAR(1, VAR_HTTP_RESPONSE_BUFFER_SIZE) }
270http-nodelay{COLON}		{ YDVAR(1, VAR_HTTP_NODELAY) }
271http-notls-downstream{COLON}	{ YDVAR(1, VAR_HTTP_NOTLS_DOWNSTREAM) }
272use-systemd{COLON}		{ YDVAR(1, VAR_USE_SYSTEMD) }
273do-daemonize{COLON}		{ YDVAR(1, VAR_DO_DAEMONIZE) }
274interface{COLON}		{ YDVAR(1, VAR_INTERFACE) }
275ip-address{COLON}		{ YDVAR(1, VAR_INTERFACE) }
276outgoing-interface{COLON}	{ YDVAR(1, VAR_OUTGOING_INTERFACE) }
277interface-automatic{COLON}	{ YDVAR(1, VAR_INTERFACE_AUTOMATIC) }
278interface-automatic-ports{COLON} { YDVAR(1, VAR_INTERFACE_AUTOMATIC_PORTS) }
279so-rcvbuf{COLON}		{ YDVAR(1, VAR_SO_RCVBUF) }
280so-sndbuf{COLON}		{ YDVAR(1, VAR_SO_SNDBUF) }
281so-reuseport{COLON}		{ YDVAR(1, VAR_SO_REUSEPORT) }
282ip-transparent{COLON}		{ YDVAR(1, VAR_IP_TRANSPARENT) }
283ip-freebind{COLON}		{ YDVAR(1, VAR_IP_FREEBIND) }
284ip-dscp{COLON}		{ YDVAR(1, VAR_IP_DSCP) }
285chroot{COLON}			{ YDVAR(1, VAR_CHROOT) }
286username{COLON}			{ YDVAR(1, VAR_USERNAME) }
287directory{COLON}		{ YDVAR(1, VAR_DIRECTORY) }
288logfile{COLON}			{ YDVAR(1, VAR_LOGFILE) }
289pidfile{COLON}			{ YDVAR(1, VAR_PIDFILE) }
290root-hints{COLON}		{ YDVAR(1, VAR_ROOT_HINTS) }
291stream-wait-size{COLON}		{ YDVAR(1, VAR_STREAM_WAIT_SIZE) }
292edns-buffer-size{COLON}		{ YDVAR(1, VAR_EDNS_BUFFER_SIZE) }
293msg-buffer-size{COLON}		{ YDVAR(1, VAR_MSG_BUFFER_SIZE) }
294msg-cache-size{COLON}		{ YDVAR(1, VAR_MSG_CACHE_SIZE) }
295msg-cache-slabs{COLON}		{ YDVAR(1, VAR_MSG_CACHE_SLABS) }
296rrset-cache-size{COLON}		{ YDVAR(1, VAR_RRSET_CACHE_SIZE) }
297rrset-cache-slabs{COLON}	{ YDVAR(1, VAR_RRSET_CACHE_SLABS) }
298cache-max-ttl{COLON}     	{ YDVAR(1, VAR_CACHE_MAX_TTL) }
299cache-max-negative-ttl{COLON}   { YDVAR(1, VAR_CACHE_MAX_NEGATIVE_TTL) }
300cache-min-ttl{COLON}     	{ YDVAR(1, VAR_CACHE_MIN_TTL) }
301infra-host-ttl{COLON}		{ YDVAR(1, VAR_INFRA_HOST_TTL) }
302infra-lame-ttl{COLON}		{ YDVAR(1, VAR_INFRA_LAME_TTL) }
303infra-cache-slabs{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_SLABS) }
304infra-cache-numhosts{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_NUMHOSTS) }
305infra-cache-lame-size{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_LAME_SIZE) }
306infra-cache-min-rtt{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_MIN_RTT) }
307infra-cache-max-rtt{COLON}	{ YDVAR(1, VAR_INFRA_CACHE_MAX_RTT) }
308infra-keep-probing{COLON}	{ YDVAR(1, VAR_INFRA_KEEP_PROBING) }
309num-queries-per-thread{COLON}	{ YDVAR(1, VAR_NUM_QUERIES_PER_THREAD) }
310jostle-timeout{COLON}		{ YDVAR(1, VAR_JOSTLE_TIMEOUT) }
311delay-close{COLON}		{ YDVAR(1, VAR_DELAY_CLOSE) }
312udp-connect{COLON}		{ YDVAR(1, VAR_UDP_CONNECT) }
313target-fetch-policy{COLON}	{ YDVAR(1, VAR_TARGET_FETCH_POLICY) }
314harden-short-bufsize{COLON}	{ YDVAR(1, VAR_HARDEN_SHORT_BUFSIZE) }
315harden-large-queries{COLON}	{ YDVAR(1, VAR_HARDEN_LARGE_QUERIES) }
316harden-glue{COLON}		{ YDVAR(1, VAR_HARDEN_GLUE) }
317harden-dnssec-stripped{COLON}	{ YDVAR(1, VAR_HARDEN_DNSSEC_STRIPPED) }
318harden-below-nxdomain{COLON}	{ YDVAR(1, VAR_HARDEN_BELOW_NXDOMAIN) }
319harden-referral-path{COLON}	{ YDVAR(1, VAR_HARDEN_REFERRAL_PATH) }
320harden-algo-downgrade{COLON}	{ YDVAR(1, VAR_HARDEN_ALGO_DOWNGRADE) }
321harden-unknown-additional{COLON}	{ YDVAR(1, VAR_HARDEN_UNKNOWN_ADDITIONAL) }
322use-caps-for-id{COLON}		{ YDVAR(1, VAR_USE_CAPS_FOR_ID) }
323caps-whitelist{COLON}		{ YDVAR(1, VAR_CAPS_WHITELIST) }
324caps-exempt{COLON}		{ YDVAR(1, VAR_CAPS_WHITELIST) }
325unwanted-reply-threshold{COLON}	{ YDVAR(1, VAR_UNWANTED_REPLY_THRESHOLD) }
326private-address{COLON}		{ YDVAR(1, VAR_PRIVATE_ADDRESS) }
327private-domain{COLON}		{ YDVAR(1, VAR_PRIVATE_DOMAIN) }
328prefetch-key{COLON}		{ YDVAR(1, VAR_PREFETCH_KEY) }
329prefetch{COLON}			{ YDVAR(1, VAR_PREFETCH) }
330deny-any{COLON}			{ YDVAR(1, VAR_DENY_ANY) }
331stub-zone{COLON}		{ YDVAR(0, VAR_STUB_ZONE) }
332name{COLON}			{ YDVAR(1, VAR_NAME) }
333stub-addr{COLON}		{ YDVAR(1, VAR_STUB_ADDR) }
334stub-host{COLON}		{ YDVAR(1, VAR_STUB_HOST) }
335stub-prime{COLON}		{ YDVAR(1, VAR_STUB_PRIME) }
336stub-first{COLON}		{ YDVAR(1, VAR_STUB_FIRST) }
337stub-no-cache{COLON}		{ YDVAR(1, VAR_STUB_NO_CACHE) }
338stub-ssl-upstream{COLON}	{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
339stub-tls-upstream{COLON}	{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
340stub-tcp-upstream{COLON}	{ YDVAR(1, VAR_STUB_TCP_UPSTREAM) }
341forward-zone{COLON}		{ YDVAR(0, VAR_FORWARD_ZONE) }
342forward-addr{COLON}		{ YDVAR(1, VAR_FORWARD_ADDR) }
343forward-host{COLON}		{ YDVAR(1, VAR_FORWARD_HOST) }
344forward-first{COLON}		{ YDVAR(1, VAR_FORWARD_FIRST) }
345forward-no-cache{COLON}		{ YDVAR(1, VAR_FORWARD_NO_CACHE) }
346forward-ssl-upstream{COLON}	{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
347forward-tls-upstream{COLON}	{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
348forward-tcp-upstream{COLON}	{ YDVAR(1, VAR_FORWARD_TCP_UPSTREAM) }
349auth-zone{COLON}		{ YDVAR(0, VAR_AUTH_ZONE) }
350rpz{COLON}			{ YDVAR(0, VAR_RPZ) }
351tags{COLON}			{ YDVAR(1, VAR_TAGS) }
352rpz-action-override{COLON}	{ YDVAR(1, VAR_RPZ_ACTION_OVERRIDE) }
353rpz-cname-override{COLON}	{ YDVAR(1, VAR_RPZ_CNAME_OVERRIDE) }
354rpz-log{COLON}			{ YDVAR(1, VAR_RPZ_LOG) }
355rpz-log-name{COLON}		{ YDVAR(1, VAR_RPZ_LOG_NAME) }
356rpz-signal-nxdomain-ra{COLON}	{ YDVAR(1, VAR_RPZ_SIGNAL_NXDOMAIN_RA) }
357zonefile{COLON}			{ YDVAR(1, VAR_ZONEFILE) }
358master{COLON}			{ YDVAR(1, VAR_MASTER) }
359primary{COLON}			{ YDVAR(1, VAR_MASTER) }
360url{COLON}			{ YDVAR(1, VAR_URL) }
361allow-notify{COLON}		{ YDVAR(1, VAR_ALLOW_NOTIFY) }
362for-downstream{COLON}		{ YDVAR(1, VAR_FOR_DOWNSTREAM) }
363for-upstream{COLON}		{ YDVAR(1, VAR_FOR_UPSTREAM) }
364fallback-enabled{COLON}		{ YDVAR(1, VAR_FALLBACK_ENABLED) }
365view{COLON}			{ YDVAR(0, VAR_VIEW) }
366view-first{COLON}		{ YDVAR(1, VAR_VIEW_FIRST) }
367do-not-query-address{COLON}	{ YDVAR(1, VAR_DO_NOT_QUERY_ADDRESS) }
368do-not-query-localhost{COLON}	{ YDVAR(1, VAR_DO_NOT_QUERY_LOCALHOST) }
369access-control{COLON}		{ YDVAR(2, VAR_ACCESS_CONTROL) }
370interface-action{COLON}		{ YDVAR(2, VAR_INTERFACE_ACTION) }
371send-client-subnet{COLON}	{ YDVAR(1, VAR_SEND_CLIENT_SUBNET) }
372client-subnet-zone{COLON}	{ YDVAR(1, VAR_CLIENT_SUBNET_ZONE) }
373client-subnet-always-forward{COLON} { YDVAR(1, VAR_CLIENT_SUBNET_ALWAYS_FORWARD) }
374client-subnet-opcode{COLON}	{ YDVAR(1, VAR_CLIENT_SUBNET_OPCODE) }
375max-client-subnet-ipv4{COLON}	{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV4) }
376max-client-subnet-ipv6{COLON}	{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV6) }
377min-client-subnet-ipv4{COLON}	{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV4) }
378min-client-subnet-ipv6{COLON}	{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV6) }
379max-ecs-tree-size-ipv4{COLON}	{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV4) }
380max-ecs-tree-size-ipv6{COLON}	{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV6) }
381hide-identity{COLON}		{ YDVAR(1, VAR_HIDE_IDENTITY) }
382hide-version{COLON}		{ YDVAR(1, VAR_HIDE_VERSION) }
383hide-trustanchor{COLON}		{ YDVAR(1, VAR_HIDE_TRUSTANCHOR) }
384hide-http-user-agent{COLON}		{ YDVAR(1, VAR_HIDE_HTTP_USER_AGENT) }
385identity{COLON}			{ YDVAR(1, VAR_IDENTITY) }
386version{COLON}			{ YDVAR(1, VAR_VERSION) }
387http-user-agent{COLON}			{ YDVAR(1, VAR_HTTP_USER_AGENT) }
388module-config{COLON}     	{ YDVAR(1, VAR_MODULE_CONF) }
389dlv-anchor{COLON}		{ YDVAR(1, VAR_DLV_ANCHOR) }
390dlv-anchor-file{COLON}		{ YDVAR(1, VAR_DLV_ANCHOR_FILE) }
391trust-anchor-file{COLON}	{ YDVAR(1, VAR_TRUST_ANCHOR_FILE) }
392auto-trust-anchor-file{COLON}	{ YDVAR(1, VAR_AUTO_TRUST_ANCHOR_FILE) }
393trusted-keys-file{COLON}	{ YDVAR(1, VAR_TRUSTED_KEYS_FILE) }
394trust-anchor{COLON}		{ YDVAR(1, VAR_TRUST_ANCHOR) }
395trust-anchor-signaling{COLON}	{ YDVAR(1, VAR_TRUST_ANCHOR_SIGNALING) }
396root-key-sentinel{COLON}	{ YDVAR(1, VAR_ROOT_KEY_SENTINEL) }
397val-override-date{COLON}	{ YDVAR(1, VAR_VAL_OVERRIDE_DATE) }
398val-sig-skew-min{COLON}		{ YDVAR(1, VAR_VAL_SIG_SKEW_MIN) }
399val-sig-skew-max{COLON}		{ YDVAR(1, VAR_VAL_SIG_SKEW_MAX) }
400val-max-restart{COLON}		{ YDVAR(1, VAR_VAL_MAX_RESTART) }
401val-bogus-ttl{COLON}		{ YDVAR(1, VAR_BOGUS_TTL) }
402val-clean-additional{COLON}	{ YDVAR(1, VAR_VAL_CLEAN_ADDITIONAL) }
403val-permissive-mode{COLON}	{ YDVAR(1, VAR_VAL_PERMISSIVE_MODE) }
404aggressive-nsec{COLON}		{ YDVAR(1, VAR_AGGRESSIVE_NSEC) }
405ignore-cd-flag{COLON}		{ YDVAR(1, VAR_IGNORE_CD_FLAG) }
406disable-edns-do{COLON}		{ YDVAR(1, VAR_DISABLE_EDNS_DO) }
407serve-expired{COLON}		{ YDVAR(1, VAR_SERVE_EXPIRED) }
408serve-expired-ttl{COLON}	{ YDVAR(1, VAR_SERVE_EXPIRED_TTL) }
409serve-expired-ttl-reset{COLON}	{ YDVAR(1, VAR_SERVE_EXPIRED_TTL_RESET) }
410serve-expired-reply-ttl{COLON}	{ YDVAR(1, VAR_SERVE_EXPIRED_REPLY_TTL) }
411serve-expired-client-timeout{COLON}	{ YDVAR(1, VAR_SERVE_EXPIRED_CLIENT_TIMEOUT) }
412ede-serve-expired{COLON}	{ YDVAR(1, VAR_EDE_SERVE_EXPIRED) }
413serve-original-ttl{COLON}	{ YDVAR(1, VAR_SERVE_ORIGINAL_TTL) }
414fake-dsa{COLON}			{ YDVAR(1, VAR_FAKE_DSA) }
415fake-sha1{COLON}		{ YDVAR(1, VAR_FAKE_SHA1) }
416val-log-level{COLON}		{ YDVAR(1, VAR_VAL_LOG_LEVEL) }
417key-cache-size{COLON}		{ YDVAR(1, VAR_KEY_CACHE_SIZE) }
418key-cache-slabs{COLON}		{ YDVAR(1, VAR_KEY_CACHE_SLABS) }
419neg-cache-size{COLON}		{ YDVAR(1, VAR_NEG_CACHE_SIZE) }
420val-nsec3-keysize-iterations{COLON}	{
421				  YDVAR(1, VAR_VAL_NSEC3_KEYSIZE_ITERATIONS) }
422zonemd-permissive-mode{COLON}	{ YDVAR(1, VAR_ZONEMD_PERMISSIVE_MODE) }
423zonemd-check{COLON}		{ YDVAR(1, VAR_ZONEMD_CHECK) }
424zonemd-reject-absence{COLON}	{ YDVAR(1, VAR_ZONEMD_REJECT_ABSENCE) }
425add-holddown{COLON}		{ YDVAR(1, VAR_ADD_HOLDDOWN) }
426del-holddown{COLON}		{ YDVAR(1, VAR_DEL_HOLDDOWN) }
427keep-missing{COLON}		{ YDVAR(1, VAR_KEEP_MISSING) }
428permit-small-holddown{COLON}	{ YDVAR(1, VAR_PERMIT_SMALL_HOLDDOWN) }
429use-syslog{COLON}		{ YDVAR(1, VAR_USE_SYSLOG) }
430log-identity{COLON}		{ YDVAR(1, VAR_LOG_IDENTITY) }
431log-time-ascii{COLON}		{ YDVAR(1, VAR_LOG_TIME_ASCII) }
432log-queries{COLON}		{ YDVAR(1, VAR_LOG_QUERIES) }
433log-replies{COLON}		{ YDVAR(1, VAR_LOG_REPLIES) }
434log-tag-queryreply{COLON}	{ YDVAR(1, VAR_LOG_TAG_QUERYREPLY) }
435log-local-actions{COLON}       { YDVAR(1, VAR_LOG_LOCAL_ACTIONS) }
436log-servfail{COLON}		{ YDVAR(1, VAR_LOG_SERVFAIL) }
437local-zone{COLON}		{ YDVAR(2, VAR_LOCAL_ZONE) }
438local-data{COLON}		{ YDVAR(1, VAR_LOCAL_DATA) }
439local-data-ptr{COLON}		{ YDVAR(1, VAR_LOCAL_DATA_PTR) }
440unblock-lan-zones{COLON}	{ YDVAR(1, VAR_UNBLOCK_LAN_ZONES) }
441insecure-lan-zones{COLON}	{ YDVAR(1, VAR_INSECURE_LAN_ZONES) }
442statistics-interval{COLON}	{ YDVAR(1, VAR_STATISTICS_INTERVAL) }
443statistics-cumulative{COLON}	{ YDVAR(1, VAR_STATISTICS_CUMULATIVE) }
444extended-statistics{COLON}	{ YDVAR(1, VAR_EXTENDED_STATISTICS) }
445statistics-inhibit-zero{COLON}	{ YDVAR(1, VAR_STATISTICS_INHIBIT_ZERO) }
446shm-enable{COLON}		{ YDVAR(1, VAR_SHM_ENABLE) }
447shm-key{COLON}			{ YDVAR(1, VAR_SHM_KEY) }
448remote-control{COLON}		{ YDVAR(0, VAR_REMOTE_CONTROL) }
449control-enable{COLON}		{ YDVAR(1, VAR_CONTROL_ENABLE) }
450control-interface{COLON}	{ YDVAR(1, VAR_CONTROL_INTERFACE) }
451control-port{COLON}		{ YDVAR(1, VAR_CONTROL_PORT) }
452control-use-cert{COLON}		{ YDVAR(1, VAR_CONTROL_USE_CERT) }
453server-key-file{COLON}		{ YDVAR(1, VAR_SERVER_KEY_FILE) }
454server-cert-file{COLON}		{ YDVAR(1, VAR_SERVER_CERT_FILE) }
455control-key-file{COLON}		{ YDVAR(1, VAR_CONTROL_KEY_FILE) }
456control-cert-file{COLON}	{ YDVAR(1, VAR_CONTROL_CERT_FILE) }
457python-script{COLON}		{ YDVAR(1, VAR_PYTHON_SCRIPT) }
458python{COLON}			{ YDVAR(0, VAR_PYTHON) }
459dynlib-file{COLON}		{ YDVAR(1, VAR_DYNLIB_FILE) }
460dynlib{COLON}			{ YDVAR(0, VAR_DYNLIB) }
461domain-insecure{COLON}		{ YDVAR(1, VAR_DOMAIN_INSECURE) }
462minimal-responses{COLON}	{ YDVAR(1, VAR_MINIMAL_RESPONSES) }
463rrset-roundrobin{COLON}		{ YDVAR(1, VAR_RRSET_ROUNDROBIN) }
464unknown-server-time-limit{COLON} { YDVAR(1, VAR_UNKNOWN_SERVER_TIME_LIMIT) }
465max-udp-size{COLON}		{ YDVAR(1, VAR_MAX_UDP_SIZE) }
466dns64-prefix{COLON}		{ YDVAR(1, VAR_DNS64_PREFIX) }
467dns64-synthall{COLON}		{ YDVAR(1, VAR_DNS64_SYNTHALL) }
468dns64-ignore-aaaa{COLON}	{ YDVAR(1, VAR_DNS64_IGNORE_AAAA) }
469nat64-prefix{COLON}		{ YDVAR(1, VAR_NAT64_PREFIX) }
470define-tag{COLON}		{ YDVAR(1, VAR_DEFINE_TAG) }
471local-zone-tag{COLON}		{ YDVAR(2, VAR_LOCAL_ZONE_TAG) }
472access-control-tag{COLON}	{ YDVAR(2, VAR_ACCESS_CONTROL_TAG) }
473access-control-tag-action{COLON} { YDVAR(3, VAR_ACCESS_CONTROL_TAG_ACTION) }
474access-control-tag-data{COLON}	{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_DATA) }
475access-control-view{COLON}	{ YDVAR(2, VAR_ACCESS_CONTROL_VIEW) }
476interface-tag{COLON}		{ YDVAR(2, VAR_INTERFACE_TAG) }
477interface-tag-action{COLON}	{ YDVAR(3, VAR_INTERFACE_TAG_ACTION) }
478interface-tag-data{COLON}	{ YDVAR(3, VAR_INTERFACE_TAG_DATA) }
479interface-view{COLON}		{ YDVAR(2, VAR_INTERFACE_VIEW) }
480local-zone-override{COLON}	{ YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) }
481dnstap{COLON}			{ YDVAR(0, VAR_DNSTAP) }
482dnstap-enable{COLON}		{ YDVAR(1, VAR_DNSTAP_ENABLE) }
483dnstap-bidirectional{COLON}	{ YDVAR(1, VAR_DNSTAP_BIDIRECTIONAL) }
484dnstap-socket-path{COLON}	{ YDVAR(1, VAR_DNSTAP_SOCKET_PATH) }
485dnstap-ip{COLON}		{ YDVAR(1, VAR_DNSTAP_IP) }
486dnstap-tls{COLON}		{ YDVAR(1, VAR_DNSTAP_TLS) }
487dnstap-tls-server-name{COLON}	{ YDVAR(1, VAR_DNSTAP_TLS_SERVER_NAME) }
488dnstap-tls-cert-bundle{COLON}	{ YDVAR(1, VAR_DNSTAP_TLS_CERT_BUNDLE) }
489dnstap-tls-client-key-file{COLON}	{
490		YDVAR(1, VAR_DNSTAP_TLS_CLIENT_KEY_FILE) }
491dnstap-tls-client-cert-file{COLON}	{
492		YDVAR(1, VAR_DNSTAP_TLS_CLIENT_CERT_FILE) }
493dnstap-send-identity{COLON}	{ YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) }
494dnstap-send-version{COLON}	{ YDVAR(1, VAR_DNSTAP_SEND_VERSION) }
495dnstap-identity{COLON}		{ YDVAR(1, VAR_DNSTAP_IDENTITY) }
496dnstap-version{COLON}		{ YDVAR(1, VAR_DNSTAP_VERSION) }
497dnstap-log-resolver-query-messages{COLON}	{
498		YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES) }
499dnstap-log-resolver-response-messages{COLON}	{
500		YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES) }
501dnstap-log-client-query-messages{COLON}		{
502		YDVAR(1, VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES) }
503dnstap-log-client-response-messages{COLON}	{
504		YDVAR(1, VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES) }
505dnstap-log-forwarder-query-messages{COLON}	{
506		YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES) }
507dnstap-log-forwarder-response-messages{COLON}	{
508		YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES) }
509disable-dnssec-lame-check{COLON} { YDVAR(1, VAR_DISABLE_DNSSEC_LAME_CHECK) }
510ip-ratelimit{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT) }
511ip-ratelimit-cookie{COLON}	{ YDVAR(1, VAR_IP_RATELIMIT_COOKIE) }
512ratelimit{COLON}		{ YDVAR(1, VAR_RATELIMIT) }
513ip-ratelimit-slabs{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_SLABS) }
514ratelimit-slabs{COLON}		{ YDVAR(1, VAR_RATELIMIT_SLABS) }
515ip-ratelimit-size{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_SIZE) }
516ratelimit-size{COLON}		{ YDVAR(1, VAR_RATELIMIT_SIZE) }
517ratelimit-for-domain{COLON}	{ YDVAR(2, VAR_RATELIMIT_FOR_DOMAIN) }
518ratelimit-below-domain{COLON}	{ YDVAR(2, VAR_RATELIMIT_BELOW_DOMAIN) }
519ip-ratelimit-factor{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_FACTOR) }
520ratelimit-factor{COLON}		{ YDVAR(1, VAR_RATELIMIT_FACTOR) }
521ip-ratelimit-backoff{COLON}		{ YDVAR(1, VAR_IP_RATELIMIT_BACKOFF) }
522ratelimit-backoff{COLON}		{ YDVAR(1, VAR_RATELIMIT_BACKOFF) }
523outbound-msg-retry{COLON}		{ YDVAR(1, VAR_OUTBOUND_MSG_RETRY) }
524max-sent-count{COLON}		{ YDVAR(1, VAR_MAX_SENT_COUNT) }
525max-query-restarts{COLON}	{ YDVAR(1, VAR_MAX_QUERY_RESTARTS) }
526low-rtt{COLON}			{ YDVAR(1, VAR_LOW_RTT) }
527fast-server-num{COLON}		{ YDVAR(1, VAR_FAST_SERVER_NUM) }
528low-rtt-pct{COLON}		{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
529low-rtt-permil{COLON}		{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
530fast-server-permil{COLON}	{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
531response-ip-tag{COLON}		{ YDVAR(2, VAR_RESPONSE_IP_TAG) }
532response-ip{COLON}		{ YDVAR(2, VAR_RESPONSE_IP) }
533response-ip-data{COLON}		{ YDVAR(2, VAR_RESPONSE_IP_DATA) }
534dnscrypt{COLON}			{ YDVAR(0, VAR_DNSCRYPT) }
535dnscrypt-enable{COLON}		{ YDVAR(1, VAR_DNSCRYPT_ENABLE) }
536dnscrypt-port{COLON}		{ YDVAR(1, VAR_DNSCRYPT_PORT) }
537dnscrypt-provider{COLON}	{ YDVAR(1, VAR_DNSCRYPT_PROVIDER) }
538dnscrypt-secret-key{COLON}	{ YDVAR(1, VAR_DNSCRYPT_SECRET_KEY) }
539dnscrypt-provider-cert{COLON}	{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT) }
540dnscrypt-provider-cert-rotated{COLON}	{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT_ROTATED) }
541dnscrypt-shared-secret-cache-size{COLON}	{
542		YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE) }
543dnscrypt-shared-secret-cache-slabs{COLON}	{
544		YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS) }
545dnscrypt-nonce-cache-size{COLON}	{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SIZE) }
546dnscrypt-nonce-cache-slabs{COLON}	{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SLABS) }
547pad-responses{COLON}		{ YDVAR(1, VAR_PAD_RESPONSES) }
548pad-responses-block-size{COLON}	{ YDVAR(1, VAR_PAD_RESPONSES_BLOCK_SIZE) }
549pad-queries{COLON}		{ YDVAR(1, VAR_PAD_QUERIES) }
550pad-queries-block-size{COLON}	{ YDVAR(1, VAR_PAD_QUERIES_BLOCK_SIZE) }
551ipsecmod-enabled{COLON}		{ YDVAR(1, VAR_IPSECMOD_ENABLED) }
552ipsecmod-ignore-bogus{COLON}	{ YDVAR(1, VAR_IPSECMOD_IGNORE_BOGUS) }
553ipsecmod-hook{COLON}		{ YDVAR(1, VAR_IPSECMOD_HOOK) }
554ipsecmod-max-ttl{COLON}		{ YDVAR(1, VAR_IPSECMOD_MAX_TTL) }
555ipsecmod-whitelist{COLON}	{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
556ipsecmod-allow{COLON}		{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
557ipsecmod-strict{COLON}		{ YDVAR(1, VAR_IPSECMOD_STRICT) }
558cachedb{COLON}			{ YDVAR(0, VAR_CACHEDB) }
559backend{COLON}			{ YDVAR(1, VAR_CACHEDB_BACKEND) }
560secret-seed{COLON}		{ YDVAR(1, VAR_CACHEDB_SECRETSEED) }
561cachedb-no-store{COLON}		{ YDVAR(1, VAR_CACHEDB_NO_STORE) }
562redis-server-host{COLON}	{ YDVAR(1, VAR_CACHEDB_REDISHOST) }
563redis-server-port{COLON}	{ YDVAR(1, VAR_CACHEDB_REDISPORT) }
564redis-server-path{COLON}	{ YDVAR(1, VAR_CACHEDB_REDISPATH) }
565redis-server-password{COLON}	{ YDVAR(1, VAR_CACHEDB_REDISPASSWORD) }
566redis-timeout{COLON}		{ YDVAR(1, VAR_CACHEDB_REDISTIMEOUT) }
567redis-expire-records{COLON}	{ YDVAR(1, VAR_CACHEDB_REDISEXPIRERECORDS) }
568redis-logical-db{COLON}		{ YDVAR(1, VAR_CACHEDB_REDISLOGICALDB) }
569ipset{COLON}			{ YDVAR(0, VAR_IPSET) }
570name-v4{COLON}			{ YDVAR(1, VAR_IPSET_NAME_V4) }
571name-v6{COLON}			{ YDVAR(1, VAR_IPSET_NAME_V6) }
572udp-upstream-without-downstream{COLON} { YDVAR(1, VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM) }
573tcp-connection-limit{COLON}	{ YDVAR(2, VAR_TCP_CONNECTION_LIMIT) }
574answer-cookie{COLON}		{ YDVAR(1, VAR_ANSWER_COOKIE ) }
575cookie-secret{COLON}		{ YDVAR(1, VAR_COOKIE_SECRET) }
576edns-client-string{COLON}	{ YDVAR(2, VAR_EDNS_CLIENT_STRING) }
577edns-client-string-opcode{COLON} { YDVAR(1, VAR_EDNS_CLIENT_STRING_OPCODE) }
578nsid{COLON}			{ YDVAR(1, VAR_NSID ) }
579ede{COLON}			{ YDVAR(1, VAR_EDE ) }
580proxy-protocol-port{COLON}	{ YDVAR(1, VAR_PROXY_PROTOCOL_PORT) }
581<INITIAL,val>{NEWLINE}		{ LEXOUT(("NL\n")); cfg_parser->line++; }
582
583	/* Quoted strings. Strip leading and ending quotes */
584<val>\"			{ BEGIN(quotedstring); LEXOUT(("QS ")); }
585<quotedstring><<EOF>>   {
586        yyerror("EOF inside quoted string");
587	if(--num_args == 0) { BEGIN(INITIAL); }
588	else		    { BEGIN(val); }
589}
590<quotedstring>{DQANY}*  { LEXOUT(("STR(%s) ", yytext)); yymore(); }
591<quotedstring>{NEWLINE} { yyerror("newline inside quoted string, no end \"");
592			  cfg_parser->line++; BEGIN(INITIAL); }
593<quotedstring>\" {
594        LEXOUT(("QE "));
595	if(--num_args == 0) { BEGIN(INITIAL); }
596	else		    { BEGIN(val); }
597        yytext[yyleng - 1] = '\0';
598	yylval.str = strdup(yytext);
599	if(!yylval.str)
600		yyerror("out of memory");
601        return STRING_ARG;
602}
603
604	/* Single Quoted strings. Strip leading and ending quotes */
605<val>\'			{ BEGIN(singlequotedstr); LEXOUT(("SQS ")); }
606<singlequotedstr><<EOF>>   {
607        yyerror("EOF inside quoted string");
608	if(--num_args == 0) { BEGIN(INITIAL); }
609	else		    { BEGIN(val); }
610}
611<singlequotedstr>{SQANY}*  { LEXOUT(("STR(%s) ", yytext)); yymore(); }
612<singlequotedstr>{NEWLINE} { yyerror("newline inside quoted string, no end '");
613			     cfg_parser->line++; BEGIN(INITIAL); }
614<singlequotedstr>\' {
615        LEXOUT(("SQE "));
616	if(--num_args == 0) { BEGIN(INITIAL); }
617	else		    { BEGIN(val); }
618        yytext[yyleng - 1] = '\0';
619	yylval.str = strdup(yytext);
620	if(!yylval.str)
621		yyerror("out of memory");
622        return STRING_ARG;
623}
624
625	/* include: directive */
626<INITIAL,val>include{COLON}	{
627	LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include); }
628<include><<EOF>>	{
629        yyerror("EOF inside include directive");
630        BEGIN(inc_prev);
631}
632<include>{SPACE}*	{ LEXOUT(("ISP ")); /* ignore */ }
633<include>{NEWLINE}	{ LEXOUT(("NL\n")); cfg_parser->line++;}
634<include>\"		{ LEXOUT(("IQS ")); BEGIN(include_quoted); }
635<include>{UNQUOTEDLETTER}*	{
636	LEXOUT(("Iunquotedstr(%s) ", yytext));
637	config_start_include_glob(yytext, 0);
638	BEGIN(inc_prev);
639}
640<include_quoted><<EOF>>	{
641        yyerror("EOF inside quoted string");
642        BEGIN(inc_prev);
643}
644<include_quoted>{DQANY}*	{ LEXOUT(("ISTR(%s) ", yytext)); yymore(); }
645<include_quoted>{NEWLINE}	{ yyerror("newline before \" in include name");
646				  cfg_parser->line++; BEGIN(inc_prev); }
647<include_quoted>\"	{
648	LEXOUT(("IQE "));
649	yytext[yyleng - 1] = '\0';
650	config_start_include_glob(yytext, 0);
651	BEGIN(inc_prev);
652}
653<INITIAL,val><<EOF>>	{
654	LEXOUT(("LEXEOF "));
655	yy_set_bol(1); /* Set beginning of line, so "^" rules match.  */
656	if (!config_include_stack) {
657		yyterminate();
658	} else {
659		int prev_toplevel = inc_toplevel;
660		fclose(yyin);
661		config_end_include();
662		if(prev_toplevel) return (VAR_FORCE_TOPLEVEL);
663	}
664}
665
666	/* include-toplevel: directive */
667<INITIAL,val>include-toplevel{COLON} {
668	LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include_toplevel);
669}
670<include_toplevel><<EOF>> {
671	yyerror("EOF inside include_toplevel directive");
672	BEGIN(inc_prev);
673}
674<include_toplevel>{SPACE}* { LEXOUT(("ITSP ")); /* ignore */ }
675<include_toplevel>{NEWLINE} { LEXOUT(("NL\n")); cfg_parser->line++; }
676<include_toplevel>\" { LEXOUT(("ITQS ")); BEGIN(include_toplevel_quoted); }
677<include_toplevel>{UNQUOTEDLETTER}* {
678	LEXOUT(("ITunquotedstr(%s) ", yytext));
679	config_start_include_glob(yytext, 1);
680	BEGIN(inc_prev);
681	return (VAR_FORCE_TOPLEVEL);
682}
683<include_toplevel_quoted><<EOF>> {
684	yyerror("EOF inside quoted string");
685	BEGIN(inc_prev);
686}
687<include_toplevel_quoted>{DQANY}* { LEXOUT(("ITSTR(%s) ", yytext)); yymore(); }
688<include_toplevel_quoted>{NEWLINE} {
689	yyerror("newline before \" in include name");
690	cfg_parser->line++; BEGIN(inc_prev);
691}
692<include_toplevel_quoted>\" {
693	LEXOUT(("ITQE "));
694	yytext[yyleng - 1] = '\0';
695	config_start_include_glob(yytext, 1);
696	BEGIN(inc_prev);
697	return (VAR_FORCE_TOPLEVEL);
698}
699
700<val>{UNQUOTEDLETTER}*	{ LEXOUT(("unquotedstr(%s) ", yytext));
701			if(--num_args == 0) { BEGIN(INITIAL); }
702			yylval.str = strdup(yytext); return STRING_ARG; }
703
704{UNQUOTEDLETTER_NOCOLON}*	{
705	ub_c_error_msg("unknown keyword '%s'", yytext);
706	}
707
708<*>.	{
709	ub_c_error_msg("stray '%s'", yytext);
710	}
711
712%%
713