1/*-
2 * Copyright (c) 2011-2012 The NetBSD Foundation, Inc.
3 * All rights reserved.
4 *
5 * This code is derived from software contributed to The NetBSD Foundation
6 * by Martin Husemann.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
18 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
19 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
20 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
21 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
22 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
23 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
24 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
25 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
26 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
27 * POSSIBILITY OF SUCH DAMAGE.
28 */
29
30%{
31#include <stdio.h>
32#include <stdlib.h>
33#include <unistd.h>
34#include <err.h>
35
36#include "npfctl.h"
37#include "npf_parse.h"
38
39int	yycolumn;
40
41#define	YY_USER_ACTION	yycolumn += yyleng;
42
43extern int		yystarttoken;
44extern int		yylineno;
45extern const char *	yyfilename;
46extern int		yyparse(void);
47extern void		yyrestart(FILE *);
48
49void
50npfctl_parse_file(const char *name)
51{
52	const bool use_stdin = strcmp(name, "-") == 0;
53	FILE *fp;
54
55	fp = use_stdin ? fdopen(STDIN_FILENO, "r") : fopen(name, "r");
56	if (fp == NULL) {
57		err(EXIT_FAILURE, "open '%s'", name);
58	}
59	yystarttoken = 0;
60	yyrestart(fp);
61	yylineno = 1;
62	yycolumn = 0;
63	yyfilename = use_stdin ? "stdin" : name;
64	yyparse();
65	fclose(fp);
66}
67
68void
69npfctl_parse_string(const char *str, parse_entry_t entry)
70{
71	YY_BUFFER_STATE bs;
72
73	switch (entry) {
74	case NPFCTL_PARSE_RULE:
75		yystarttoken = RULE_ENTRY_TOKEN;
76		break;
77	case NPFCTL_PARSE_MAP:
78		yystarttoken = MAP_ENTRY_TOKEN;
79		break;
80	default:
81		abort();
82	}
83
84	bs = yy_scan_string(str);
85	yyfilename = "stdin";
86	yyparse();
87	yy_delete_buffer(bs);
88}
89
90%}
91
92%option noyywrap nounput noinput
93
94ID	[a-zA-Z_][a-zA-Z_0-9]*
95DID	[a-zA-Z_][a-zA-Z_0-9-]*
96SPID	[a-zA-Z][a-zA-Z_0-9.]*
97NUMBER	[0-9]+
98HEXDIG	[0-9a-fA-F]+
99
100%%
101%{
102	/* This is prepended to yylex(). */
103	if (yystarttoken) {
104		int token = yystarttoken;
105		yystarttoken = 0;
106		return token;
107	}
108%}
109
110alg			return ALG;
111table			return TABLE;
112type			return TYPE;
113hash			return HASH;
114tree			return TREE;
115lpm			return LPM;
116cdb			return CDB;
117const			return CONST;
118static			return TSTATIC;
119dynamic			return TDYNAMIC;
120file			return TFILE;
121map			return MAP;
122no-ports		return NO_PORTS;
123set			return SET;
124"<->"			return ARROWBOTH;
125"<-"			return ARROWLEFT;
126"->"			return ARROWRIGHT;
127algo			return ALGO;
128netmap			return NETMAP;
129ipset			return IPSET;
130"ip-hash"		return IPHASH;
131"round-robin"		return ROUNDROBIN;
132npt66			return NPT66;
133"-"			return MINUS;
134procedure		return PROCEDURE;
135\\\n			yylineno++; yycolumn = 0;
136\n			yylineno++; yycolumn = 0; return SEPLINE;
137;			return SEPLINE;
138name			return NAME;
139group			return GROUP;
140default			return DEFAULT;
141in			return IN;
142out			return OUT;
143forw			return FORW;
144interface		return INTERFACE;
145all			return ALL;
146block			return BLOCK;
147pass			return PASS;
148pcap-filter		return PCAP_FILTER;
149stateful		return STATEFUL;
150stateful-all		return STATEFUL_ALL;
151apply			return APPLY;
152final			return FINAL;
153quick			return FINAL;
154on			return ON;
155off			return OFF;
156inet6			return INET6;
157inet4			return INET4;
158ifaddrs			return IFADDRS;
159proto			return PROTO;
160family			return FAMILY;
161tcp			return TCP;
162icmp			{ yylval.num = IPPROTO_ICMP; return ICMP; }
163ipv6-icmp		{ yylval.num = IPPROTO_ICMPV6; return ICMP6; }
164\"ipv6-icmp\"		{ yylval.num = IPPROTO_ICMPV6; return ICMP6; }
165return-rst		return RETURNRST;
166return-icmp		return RETURNICMP;
167return			return RETURN;
168ruleset			return RULESET;
169from			return FROM;
170to			return TO;
171port			return PORT;
172flags			return FLAGS;
173icmp-type		return ICMPTYPE;
174code			return CODE;
175any			return ANY;
176
177"/"			return SLASH;
178"{"			return CURLY_OPEN;
179"}"			return CURLY_CLOSE;
180"("			return PAR_OPEN;
181")"			return PAR_CLOSE;
182","			return COMMA;
183"="			return EQ;
184"!"			return EXCL_MARK;
185
186"0x"{HEXDIG} {
187			char *endp, *buf = ecalloc(1, yyleng + 1);
188			buf[yyleng] = 0;
189			yylval.num = strtoul(buf+2, &endp, 16);
190			free(buf);
191			return HEX;
192		}
193
194{NUMBER}"."{NUMBER} {
195			char *endp, *buf = estrndup(yytext, yyleng);
196			yylval.fpnum = strtod(buf, &endp);
197			free(buf);
198			return FPNUM;
199		}
200
201{HEXDIG}":"[0-9a-fA-F:]* {
202			yylval.str = estrndup(yytext, yyleng);
203			return IPV6ADDR;
204		}
205
206"::"{HEXDIG}[0-9a-fA-F:.]* {
207			yylval.str = estrndup(yytext, yyleng);
208			return IPV6ADDR;
209		}
210
211{NUMBER}"."[0-9][0-9.]* {
212			yylval.str = estrndup(yytext, yyleng);
213			return IPV4ADDR;
214		}
215
216{NUMBER}	{
217			char *endp, *buf = estrndup(yytext, yyleng);
218			yylval.num = strtoul(buf, &endp, 10);
219			free(buf);
220			return NUM;
221		}
222
223"<"{DID}">"	{
224			yylval.str = estrndup(yytext + 1, yyleng - 2);
225			return TABLE_ID;
226		}
227
228"$"{ID}		{
229			yylval.str = estrndup(yytext + 1, yyleng - 1);
230			return VAR_ID;
231		}
232
233{ID}"."{SPID}+	{
234			yylval.str = estrndup(yytext, yyleng);
235			return PARAM;
236		}
237
238{ID}		{
239			yylval.str = estrndup(yytext, yyleng);
240			return IDENTIFIER;
241		}
242
243\"[^\"]*\"	{
244			yylval.str = estrndup(yytext + 1, yyleng - 2);
245			return STRING;
246		}
247
248#.*$		/* drop comment until end of line */
249[ \t]		/* eat whitespace */
250
251:		return COLON;
252
253.		return INVALID;
254