ViewVC Help

View File | Revision Log | Show Annotations | View Changeset | Root Listing

root/svn/ircd-hybrid/trunk/src/conf_parser.y

Comparing:
ircd-hybrid-7.2/src/ircd_parser.y (file contents), Revision 298 by db, Mon Dec 5 22:49:18 2005 UTC vs.
ircd-hybrid/trunk/src/conf_parser.y (file contents), Revision 2336 by michael, Wed Jul 3 12:58:28 2013 UTC

#	Line 1 | Line 1
1		/*
2		*  ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd).
3	<	*  ircd_parser.y: Parses the ircd configuration file.
3	>	*  conf_parser.y: Parses the ircd configuration file.
4		*
5		*  Copyright (C) 2005 by the past and present ircd coders, and others.
6		*
#	Line 26 | Line 26
26
27		#define YY_NO_UNPUT
28		#include <sys/types.h>
29	+	#include <string.h>
30
31	+	#include "config.h"
32		#include "stdinc.h"
31	–	#include "dalloca.h"
33		#include "ircd.h"
33	–	#include "tools.h"
34		#include "list.h"
35	<	#include "s_conf.h"
35	>	#include "conf.h"
36	>	#include "conf_class.h"
37		#include "event.h"
38	<	#include "s_log.h"
38	>	#include "log.h"
39		#include "client.h"     /* for UMODE_ALL only */
39	–	#include "pcre.h"
40		#include "irc_string.h"
41	–	#include "irc_getaddrinfo.h"
42	–	#include "sprintf_irc.h"
41		#include "memory.h"
42		#include "modules.h"
43	<	#include "s_serv.h" /* for CAP_LL / IsCapable */
43	>	#include "s_serv.h"
44		#include "hostmask.h"
45		#include "send.h"
46		#include "listener.h"
47		#include "resv.h"
48		#include "numeric.h"
49		#include "s_user.h"
50	+	#include "motd.h"
51
52		#ifdef HAVE_LIBCRYPTO
53		#include <openssl/rsa.h>
54		#include <openssl/bio.h>
55		#include <openssl/pem.h>
56	+	#include <openssl/dh.h>
57		#endif
58
59	<	static char *class_name = NULL;
60	<	static struct ConfItem *yy_conf = NULL;
61	<	static struct AccessItem *yy_aconf = NULL;
62	<	static struct MatchItem *yy_match_item = NULL;
63	<	static struct ClassItem *yy_class = NULL;
64	<	static char *yy_class_name = NULL;
65	<
66	<	static dlink_list col_conf_list  = { NULL, NULL, 0 };
67	<	static dlink_list hub_conf_list  = { NULL, NULL, 0 };
68	<	static dlink_list leaf_conf_list = { NULL, NULL, 0 };
69	<	static unsigned int listener_flags = 0;
70	<	static unsigned int regex_ban = 0;
71	<	static char userbuf[IRCD_BUFSIZE];
72	<	static char hostbuf[IRCD_BUFSIZE];
73	<	static char reasonbuf[REASONLEN + 1];
74	<	static char gecos_name[REALLEN * 4];
75	<
76	<	extern dlink_list gdeny_items; /* XXX */
77	<
78	<	static char *resv_reason = NULL;
79	<	static char *listener_address = NULL;
80	<	static int not_atom = 0;
81	<
82	<	struct CollectItem {
83	<	dlink_node node;
84	<	char *name;
85	<	char *user;
86	<	char *host;
87	<	char *passwd;
88	<	int  port;
89	<	int  flags;
90	<	#ifdef HAVE_LIBCRYPTO
91	<	char *rsa_public_key_file;
92	<	RSA *rsa_public_key;
93	<	#endif
94	<	};
59	>	#include "rsa.h"
60
61	<	static void
62	<	free_collect_item(struct CollectItem *item)
61	>	int yylex(void);
62	>
63	>	static struct
64		{
65	<	MyFree(item->name);
66	<	MyFree(item->user);
67	<	MyFree(item->host);
68	<	MyFree(item->passwd);
69	<	#ifdef HAVE_LIBCRYPTO
70	<	MyFree(item->rsa_public_key_file);
71	<	#endif
72	<	MyFree(item);
73	<	}
65	>	struct {
66	>	dlink_list list;
67	>	} mask,
68	>	leaf,
69	>	hub;
70	>
71	>	struct {
72	>	char buf[IRCD_BUFSIZE];
73	>	} name,
74	>	user,
75	>	host,
76	>	addr,
77	>	bind,
78	>	file,
79	>	ciph,
80	>	cert,
81	>	rpass,
82	>	spass,
83	>	class;
84	>
85	>	struct {
86	>	unsigned int value;
87	>	} flags,
88	>	modes,
89	>	size,
90	>	type,
91	>	port,
92	>	aftype,
93	>	ping_freq,
94	>	max_perip,
95	>	con_freq,
96	>	min_idle,
97	>	max_idle,
98	>	max_total,
99	>	max_global,
100	>	max_local,
101	>	max_ident,
102	>	max_sendq,
103	>	max_recvq,
104	>	cidr_bitlen_ipv4,
105	>	cidr_bitlen_ipv6,
106	>	number_per_cidr;
107	>	} block_state;
108
109		static void
110	<	unhook_hub_leaf_confs(void)
110	>	reset_block_state(void)
111		{
112	<	dlink_node *ptr;
113	<	dlink_node *next_ptr;
114	<	struct CollectItem *yy_hconf;
115	<	struct CollectItem *yy_lconf;
112	>	dlink_node *ptr = NULL, *ptr_next = NULL;
113
114	<	DLINK_FOREACH_SAFE(ptr, next_ptr, hub_conf_list.head)
114	>	DLINK_FOREACH_SAFE(ptr, ptr_next, block_state.mask.list.head)
115		{
116	<	yy_hconf = ptr->data;
117	<	dlinkDelete(&yy_hconf->node, &hub_conf_list);
118	<	free_collect_item(yy_hconf);
116	>	MyFree(ptr->data);
117	>	dlinkDelete(ptr, &block_state.mask.list);
118	>	free_dlink_node(ptr);
119		}
120
121	<	DLINK_FOREACH_SAFE(ptr, next_ptr, leaf_conf_list.head)
121	>	DLINK_FOREACH_SAFE(ptr, ptr_next, block_state.leaf.list.head)
122		{
123	<	yy_lconf = ptr->data;
124	<	dlinkDelete(&yy_lconf->node, &leaf_conf_list);
125	<	free_collect_item(yy_lconf);
123	>	MyFree(ptr->data);
124	>	dlinkDelete(ptr, &block_state.leaf.list);
125	>	free_dlink_node(ptr);
126		}
127	+
128	+	DLINK_FOREACH_SAFE(ptr, ptr_next, block_state.hub.list.head)
129	+	{
130	+	MyFree(ptr->data);
131	+	dlinkDelete(ptr, &block_state.hub.list);
132	+	free_dlink_node(ptr);
133	+	}
134	+
135	+	memset(&block_state, 0, sizeof(block_state));
136		}
137
138		%}
#	Line 137 | Line 143 | unhook_hub_leaf_confs(void)
143		}
144
145		%token  ACCEPT_PASSWORD
140	–	%token  ACTION
146		%token  ADMIN
147		%token  AFTYPE
143	–	%token  T_ALLOW
148		%token  ANTI_NICK_FLOOD
149		%token  ANTI_SPAM_EXIT_MESSAGE_TIME
150		%token  AUTOCONN
151	<	%token  T_BLOCK
148	<	%token  BURST_AWAY
149	<	%token  BURST_TOPICWHO
150	<	%token  BYTES KBYTES MBYTES GBYTES TBYTES
151	>	%token  BYTES KBYTES MBYTES
152		%token  CALLER_ID_WAIT
153		%token  CAN_FLOOD
153	–	%token  CAN_IDLE
154		%token  CHANNEL
155	<	%token  CIDR_BITLEN_IPV4
156	<	%token  CIDR_BITLEN_IPV6
157	<	%token  CIPHER_PREFERENCE
155	>	%token  CIDR_BITLEN_IPV4
156	>	%token  CIDR_BITLEN_IPV6
157		%token  CLASS
159	–	%token  COMPRESSED
160	–	%token  COMPRESSION_LEVEL
158		%token  CONNECT
159		%token  CONNECTFREQ
160	<	%token  CRYPTLINK
164	<	%token  DEFAULT_CIPHER_PREFERENCE
160	>	%token  CYCLE_ON_HOST_CHANGE
161		%token  DEFAULT_FLOODCOUNT
162		%token  DEFAULT_SPLIT_SERVER_COUNT
163		%token  DEFAULT_SPLIT_USER_COUNT
#	Line 169 | Line 165 | unhook_hub_leaf_confs(void)
165		%token  DESCRIPTION
166		%token  DIE
167		%token  DISABLE_AUTH
168	<	%token  DISABLE_HIDDEN
173	<	%token  DISABLE_LOCAL_CHANNELS
168	>	%token  DISABLE_FAKE_CHANNELS
169		%token  DISABLE_REMOTE_COMMANDS
175	–	%token  DOT_IN_IP6_ADDR
170		%token  DOTS_IN_IDENT
177	–	%token  DURATION
171		%token  EGDPOOL_PATH
172		%token  EMAIL
180	–	%token  ENABLE
173		%token  ENCRYPTED
174		%token  EXCEED_LIMIT
175		%token  EXEMPT
176		%token  FAILED_OPER_NOTICE
185	–	%token  FAKENAME
186	–	%token  IRCD_FLAGS
177		%token  FLATTEN_LINKS
188	–	%token  FFAILED_OPERLOG
189	–	%token  FKILLLOG
190	–	%token  FKLINELOG
191	–	%token  FGLINELOG
192	–	%token  FIOERRLOG
193	–	%token  FOPERLOG
194	–	%token  FOPERSPYLOG
195	–	%token  FUSERLOG
178		%token  GECOS
179		%token  GENERAL
180		%token  GLINE
181	<	%token  GLINES
181	>	%token  GLINE_DURATION
182	>	%token  GLINE_ENABLE
183		%token  GLINE_EXEMPT
201	–	%token  GLINE_LOG
202	–	%token  GLINE_TIME
184		%token  GLINE_MIN_CIDR
185		%token  GLINE_MIN_CIDR6
186	+	%token  GLINE_REQUEST_DURATION
187		%token  GLOBAL_KILL
206	–	%token  IRCD_AUTH
207	–	%token  NEED_IDENT
188		%token  HAVENT_READ_CONF
189		%token  HIDDEN
190	<	%token  HIDDEN_ADMIN
191	<	%token  HIDDEN_NAME
212	<	%token  HIDDEN_OPER
190	>	%token  HIDDEN_NAME
191	>	%token  HIDE_IDLE_FROM_OPERS
192		%token  HIDE_SERVER_IPS
193		%token  HIDE_SERVERS
194	<	%token  HIDE_SPOOF_IPS
194	>	%token  HIDE_SERVICES
195	>	%token  HIDE_SPOOF_IPS
196		%token  HOST
197		%token  HUB
198		%token  HUB_MASK
219	–	%token  IDLETIME
199		%token  IGNORE_BOGUS_TS
200		%token  INVISIBLE_ON_CONNECT
201		%token  IP
202	+	%token  IRCD_AUTH
203	+	%token  IRCD_FLAGS
204	+	%token  IRCD_SID
205	+	%token  JOIN_FLOOD_COUNT
206	+	%token  JOIN_FLOOD_TIME
207		%token  KILL
208	<	%token  KILL_CHASE_TIME_LIMIT
208	>	%token  KILL_CHASE_TIME_LIMIT
209		%token  KLINE
210		%token  KLINE_EXEMPT
227	–	%token  KLINE_REASON
228	–	%token  KLINE_WITH_REASON
211		%token  KNOCK_DELAY
212		%token  KNOCK_DELAY_CHANNEL
231	–	%token  LAZYLINK
213		%token  LEAF_MASK
214		%token  LINKS_DELAY
215		%token  LISTEN
216	<	%token  T_LOG
236	<	%token  LOGGING
237	<	%token  LOG_LEVEL
216	>	%token  MASK
217		%token  MAX_ACCEPT
218		%token  MAX_BANS
219	+	%token  MAX_CHANS_PER_OPER
220		%token  MAX_CHANS_PER_USER
221		%token  MAX_GLOBAL
222		%token  MAX_IDENT
223	+	%token  MAX_IDLE
224		%token  MAX_LOCAL
225		%token  MAX_NICK_CHANGES
226	+	%token  MAX_NICK_LENGTH
227		%token  MAX_NICK_TIME
228		%token  MAX_NUMBER
229		%token  MAX_TARGETS
230	<	%token  MESSAGE_LOCALE
230	>	%token  MAX_TOPIC_LENGTH
231	>	%token  MAX_WATCH
232	>	%token  MIN_IDLE
233		%token  MIN_NONWILDCARD
234		%token  MIN_NONWILDCARD_SIMPLE
235		%token  MODULE
236		%token  MODULES
237	+	%token  MOTD
238		%token  NAME
239	+	%token  NEED_IDENT
240		%token  NEED_PASSWORD
241		%token  NETWORK_DESC
242		%token  NETWORK_NAME
243		%token  NICK
258	–	%token  NICK_CHANGES
244		%token  NO_CREATE_ON_SPLIT
245		%token  NO_JOIN_ON_SPLIT
246		%token  NO_OPER_FLOOD
247		%token  NO_TILDE
263	–	%token  NOT
248		%token  NUMBER
265	–	%token  NUMBER_PER_IDENT
249		%token  NUMBER_PER_CIDR
250		%token  NUMBER_PER_IP
268	–	%token  NUMBER_PER_IP_GLOBAL
269	–	%token  OPERATOR
270	–	%token  OPERS_BYPASS_CALLERID
271	–	%token  OPER_LOG
251		%token  OPER_ONLY_UMODES
252		%token  OPER_PASS_RESV
274	–	%token  OPER_SPY_T
253		%token  OPER_UMODES
254	<	%token  JOIN_FLOOD_COUNT
255	<	%token  JOIN_FLOOD_TIME
254	>	%token  OPERATOR
255	>	%token  OPERS_BYPASS_CALLERID
256		%token  PACE_WAIT
257		%token  PACE_WAIT_SIMPLE
258		%token  PASSWORD
259		%token  PATH
260		%token  PING_COOKIE
261		%token  PING_TIME
284	–	%token  PING_WARNING
262		%token  PORT
263		%token  QSTRING
264	<	%token  QUIET_ON_BAN
264	>	%token  RANDOM_IDLE
265		%token  REASON
266		%token  REDIRPORT
267		%token  REDIRSERV
291	–	%token  REGEX_T
268		%token  REHASH
293	–	%token  TREJECT_HOLD_TIME
269		%token  REMOTE
270		%token  REMOTEBAN
296	–	%token  RESTRICT_CHANNELS
297	–	%token  RESTRICTED
298	–	%token  RSA_PRIVATE_KEY_FILE
299	–	%token  RSA_PUBLIC_KEY_FILE
300	–	%token  SSL_CERTIFICATE_FILE
271		%token  RESV
272		%token  RESV_EXEMPT
273	<	%token  SECONDS MINUTES HOURS DAYS WEEKS
274	<	%token  SENDQ
273	>	%token  RSA_PRIVATE_KEY_FILE
274	>	%token  RSA_PUBLIC_KEY_FILE
275	>	%token  SECONDS MINUTES HOURS DAYS WEEKS MONTHS YEARS
276		%token  SEND_PASSWORD
277	+	%token  SENDQ
278		%token  SERVERHIDE
279		%token  SERVERINFO
308	–	%token  SERVLINK_PATH
309	–	%token  IRCD_SID
310	–	%token  TKLINE_EXPIRE_NOTICES
311	–	%token  T_SHARED
312	–	%token  T_CLUSTER
313	–	%token  TYPE
280		%token  SHORT_MOTD
315	–	%token  SILENT
281		%token  SPOOF
282		%token  SPOOF_NOTICE
283	+	%token  SQUIT
284	+	%token  SSL_CERTIFICATE_FILE
285	+	%token  SSL_CERTIFICATE_FINGERPRINT
286	+	%token  SSL_CONNECTION_REQUIRED
287	+	%token  SSL_DH_PARAM_FILE
288	+	%token  STATS_E_DISABLED
289		%token  STATS_I_OPER_ONLY
290		%token  STATS_K_OPER_ONLY
291		%token  STATS_O_OPER_ONLY
292		%token  STATS_P_OPER_ONLY
293	<	%token  TBOOL
323	<	%token  TMASKED
324	<	%token  T_REJECT
325	<	%token  TS_MAX_DELTA
326	<	%token  TS_WARN_DELTA
327	<	%token  TWODOTS
293	>	%token  STATS_U_OPER_ONLY
294		%token  T_ALL
295		%token  T_BOTS
330	–	%token  T_SOFTCALLERID
296		%token  T_CALLERID
297		%token  T_CCONN
298	<	%token  T_CLIENT_FLOOD
298	>	%token  T_CLUSTER
299		%token  T_DEAF
300		%token  T_DEBUG
301	<	%token  T_DRONE
301	>	%token  T_DLINE
302		%token  T_EXTERNAL
303	+	%token  T_FARCONNECT
304	+	%token  T_FILE
305		%token  T_FULL
306	+	%token  T_GLOBOPS
307		%token  T_INVISIBLE
308		%token  T_IPV4
309		%token  T_IPV6
310		%token  T_LOCOPS
311	<	%token  T_LOGPATH
344	<	%token  T_L_CRIT
345	<	%token  T_L_DEBUG
346	<	%token  T_L_ERROR
347	<	%token  T_L_INFO
348	<	%token  T_L_NOTICE
349	<	%token  T_L_TRACE
350	<	%token  T_L_WARN
311	>	%token  T_LOG
312		%token  T_MAX_CLIENTS
313		%token  T_NCHANGE
314	+	%token  T_NONONREG
315		%token  T_OPERWALL
316	+	%token  T_RECVQ
317		%token  T_REJ
318	+	%token  T_RESTART
319	+	%token  T_SERVER
320	+	%token  T_SERVICE
321	+	%token  T_SERVICES_NAME
322		%token  T_SERVNOTICE
323	+	%token  T_SET
324	+	%token  T_SHARED
325	+	%token  T_SIZE
326		%token  T_SKILL
327	+	%token  T_SOFTCALLERID
328		%token  T_SPY
329		%token  T_SSL
330	+	%token  T_SSL_CIPHER_LIST
331	+	%token  T_SSL_CLIENT_METHOD
332	+	%token  T_SSL_SERVER_METHOD
333	+	%token  T_SSLV3
334	+	%token  T_TLSV1
335		%token  T_UMODES
336		%token  T_UNAUTH
337	+	%token  T_UNDLINE
338	+	%token  T_UNLIMITED
339		%token  T_UNRESV
340		%token  T_UNXLINE
341		%token  T_WALLOP
342	+	%token  T_WALLOPS
343	+	%token  T_WEBIRC
344	+	%token  TBOOL
345		%token  THROTTLE_TIME
346	<	%token  TOPICBURST
346	>	%token  TKLINE_EXPIRE_NOTICES
347	>	%token  TMASKED
348		%token  TRUE_NO_OPER_FLOOD
349	<	%token  TKLINE
350	<	%token  TXLINE
351	<	%token  TRESV
349	>	%token  TS_MAX_DELTA
350	>	%token  TS_WARN_DELTA
351	>	%token  TWODOTS
352	>	%token  TYPE
353		%token  UNKLINE
371	–	%token  USER
354		%token  USE_EGD
373	–	%token  USE_EXCEPT
374	–	%token  USE_INVEX
375	–	%token  USE_KNOCK
355		%token  USE_LOGGING
356	<	%token  USE_WHOIS_ACTUALLY
356	>	%token  USER
357		%token  VHOST
358		%token  VHOST6
380	–	%token  XLINE
381	–	%token  WARN
359		%token  WARN_NO_NLINE
360	+	%token  XLINE
361
362	<	%type <string> QSTRING
363	<	%type <number> NUMBER
364	<	%type <number> timespec
365	<	%type <number> timespec_
366	<	%type <number> sizespec
367	<	%type <number> sizespec_
362	>	%type  <string> QSTRING
363	>	%type  <number> NUMBER
364	>	%type  <number> timespec
365	>	%type  <number> timespec_
366	>	%type  <number> sizespec
367	>	%type  <number> sizespec_
368
369		%%
370		conf:
#	Line 403 | Line 381 | conf_item:        admin_entry
381		| serverinfo_entry
382		| serverhide_entry
383		| resv_entry
384	+	| service_entry
385		| shared_entry
386		| cluster_entry
387		| connect_entry
#	Line 410 | Line 389 | conf_item:        admin_entry
389		| deny_entry
390		| exempt_entry
391		| general_entry
413	–	| gline_entry
392		| gecos_entry
393		| modules_entry
394	+	| motd_entry
395		| error ';'
396		| error '}'
397		;
#	Line 443 | Line 422 | timespec:      NUMBER timespec_
422		{
423		$$ = $1 * 60 * 60 * 24 * 7 + $3;
424		}
425	+	| NUMBER MONTHS timespec_
426	+	{
427	+	$$ = $1 * 60 * 60 * 24 * 7 * 4 + $3;
428	+	}
429	+	| NUMBER YEARS timespec_
430	+	{
431	+	$$ = $1 * 60 * 60 * 24 * 365 + $3;
432	+	}
433		;
434
435		sizespec_:      { $$ = 0; } | sizespec;
#	Line 464 | Line 451 | modules_item:   modules_module | modules
451
452		modules_module: MODULE '=' QSTRING ';'
453		{
454	<	#ifndef STATIC_MODULES /* NOOP in the static case */
455	<	if (ypass == 2)
469	<	{
470	<	char *m_bn;
471	<
472	<	m_bn = basename(yylval.string);
473	<
474	<	/* I suppose we should just ignore it if it is already loaded(since
475	<	* otherwise we would flood the opers on rehash) -A1kmm.
476	<	*/
477	<	add_conf_module(yylval.string);
478	<	}
479	<	#endif
454	>	if (conf_parser_ctx.pass == 2)
455	>	add_conf_module(libio_basename(yylval.string));
456		};
457
458		modules_path: PATH '=' QSTRING ';'
459		{
460	<	#ifndef STATIC_MODULES
485	<	if (ypass == 2)
460	>	if (conf_parser_ctx.pass == 2)
461		mod_add_path(yylval.string);
487	–	#endif
462		};
463
490	–	/***************************************************************************
491	–	*  section serverinfo
492	–	***************************************************************************/
493	–	serverinfo_entry: SERVERINFO
494	–	'{' serverinfo_items '}' ';';
464
465	<	serverinfo_items:       serverinfo_items serverinfo_item |
466	<	serverinfo_item ;
465	>	serverinfo_entry: SERVERINFO '{' serverinfo_items '}' ';';
466	>
467	>	serverinfo_items:       serverinfo_items serverinfo_item | serverinfo_item ;
468		serverinfo_item:        serverinfo_name | serverinfo_vhost |
469		serverinfo_hub | serverinfo_description |
470		serverinfo_network_name | serverinfo_network_desc |
471	<	serverinfo_max_clients |
471	>	serverinfo_max_clients | serverinfo_max_nick_length |
472	>	serverinfo_max_topic_length | serverinfo_ssl_dh_param_file |
473		serverinfo_rsa_private_key_file | serverinfo_vhost6 |
474		serverinfo_sid | serverinfo_ssl_certificate_file |
475	+	serverinfo_ssl_client_method | serverinfo_ssl_server_method |
476	+	serverinfo_ssl_cipher_list |
477		error ';' ;
478
479	+
480	+	serverinfo_ssl_client_method: T_SSL_CLIENT_METHOD '=' client_method_types ';' ;
481	+	serverinfo_ssl_server_method: T_SSL_SERVER_METHOD '=' server_method_types ';' ;
482	+
483	+	client_method_types: client_method_types ',' client_method_type_item | client_method_type_item;
484	+	client_method_type_item: T_SSLV3
485	+	{
486	+	#ifdef HAVE_LIBCRYPTO
487	+	if (conf_parser_ctx.pass == 2 && ServerInfo.client_ctx)
488	+	SSL_CTX_clear_options(ServerInfo.client_ctx, SSL_OP_NO_SSLv3);
489	+	#endif
490	+	} | T_TLSV1
491	+	{
492	+	#ifdef HAVE_LIBCRYPTO
493	+	if (conf_parser_ctx.pass == 2 && ServerInfo.client_ctx)
494	+	SSL_CTX_clear_options(ServerInfo.client_ctx, SSL_OP_NO_TLSv1);
495	+	#endif
496	+	};
497	+
498	+	server_method_types: server_method_types ',' server_method_type_item | server_method_type_item;
499	+	server_method_type_item: T_SSLV3
500	+	{
501	+	#ifdef HAVE_LIBCRYPTO
502	+	if (conf_parser_ctx.pass == 2 && ServerInfo.server_ctx)
503	+	SSL_CTX_clear_options(ServerInfo.server_ctx, SSL_OP_NO_SSLv3);
504	+	#endif
505	+	} | T_TLSV1
506	+	{
507	+	#ifdef HAVE_LIBCRYPTO
508	+	if (conf_parser_ctx.pass == 2 && ServerInfo.server_ctx)
509	+	SSL_CTX_clear_options(ServerInfo.server_ctx, SSL_OP_NO_TLSv1);
510	+	#endif
511	+	};
512	+
513		serverinfo_ssl_certificate_file: SSL_CERTIFICATE_FILE '=' QSTRING ';'
514		{
515		#ifdef HAVE_LIBCRYPTO
516	<	if (ypass == 2 && ServerInfo.ctx)
516	>	if (conf_parser_ctx.pass == 2 && ServerInfo.server_ctx)
517		{
518		if (!ServerInfo.rsa_private_key_file)
519		{
520	<	yyerror("No rsa_private_key_file specified, SSL disabled");
520	>	conf_error_report("No rsa_private_key_file specified, SSL disabled");
521		break;
522		}
523
524	<	if (SSL_CTX_use_certificate_file(ServerInfo.ctx,
525	<	yylval.string, SSL_FILETYPE_PEM) <= 0)
524	>	if (SSL_CTX_use_certificate_file(ServerInfo.server_ctx, yylval.string,
525	>	SSL_FILETYPE_PEM) <= 0 ||
526	>	SSL_CTX_use_certificate_file(ServerInfo.client_ctx, yylval.string,
527	>	SSL_FILETYPE_PEM) <= 0)
528		{
529	<	yyerror(ERR_lib_error_string(ERR_get_error()));
529	>	report_crypto_errors();
530	>	conf_error_report("Could not open/read certificate file");
531		break;
532		}
533
534	<	if (SSL_CTX_use_PrivateKey_file(ServerInfo.ctx,
535	<	ServerInfo.rsa_private_key_file, SSL_FILETYPE_PEM) <= 0)
534	>	if (SSL_CTX_use_PrivateKey_file(ServerInfo.server_ctx, ServerInfo.rsa_private_key_file,
535	>	SSL_FILETYPE_PEM) <= 0 ||
536	>	SSL_CTX_use_PrivateKey_file(ServerInfo.client_ctx, ServerInfo.rsa_private_key_file,
537	>	SSL_FILETYPE_PEM) <= 0)
538		{
539	<	yyerror(ERR_lib_error_string(ERR_get_error()));
539	>	report_crypto_errors();
540	>	conf_error_report("Could not read RSA private key");
541		break;
542		}
543
544	<	if (!SSL_CTX_check_private_key(ServerInfo.ctx))
544	>	if (!SSL_CTX_check_private_key(ServerInfo.server_ctx) ||
545	>	!SSL_CTX_check_private_key(ServerInfo.client_ctx))
546		{
547	<	yyerror("RSA private key does not match the SSL certificate public key!");
547	>	report_crypto_errors();
548	>	conf_error_report("Could not read RSA private key");
549		break;
550		}
551		}
#	Line 540 | Line 555 | serverinfo_ssl_certificate_file: SSL_CER
555		serverinfo_rsa_private_key_file: RSA_PRIVATE_KEY_FILE '=' QSTRING ';'
556		{
557		#ifdef HAVE_LIBCRYPTO
558	<	if (ypass == 1)
558	>	BIO *file = NULL;
559	>
560	>	if (conf_parser_ctx.pass != 1)
561	>	break;
562	>
563	>	if (ServerInfo.rsa_private_key)
564		{
565	<	BIO *file;
565	>	RSA_free(ServerInfo.rsa_private_key);
566	>	ServerInfo.rsa_private_key = NULL;
567	>	}
568
569	<	if (ServerInfo.rsa_private_key)
570	<	{
571	<	RSA_free(ServerInfo.rsa_private_key);
572	<	ServerInfo.rsa_private_key = NULL;
573	<	}
569	>	if (ServerInfo.rsa_private_key_file)
570	>	{
571	>	MyFree(ServerInfo.rsa_private_key_file);
572	>	ServerInfo.rsa_private_key_file = NULL;
573	>	}
574
575	<	if (ServerInfo.rsa_private_key_file)
554	<	{
555	<	MyFree(ServerInfo.rsa_private_key_file);
556	<	ServerInfo.rsa_private_key_file = NULL;
557	<	}
575	>	ServerInfo.rsa_private_key_file = xstrdup(yylval.string);
576
577	<	DupString(ServerInfo.rsa_private_key_file, yylval.string);
577	>	if ((file = BIO_new_file(yylval.string, "r")) == NULL)
578	>	{
579	>	conf_error_report("File open failed, ignoring");
580	>	break;
581	>	}
582
583	<	if ((file = BIO_new_file(yylval.string, "r")) == NULL)
562	<	{
563	<	yyerror("File open failed, ignoring");
564	<	break;
565	<	}
583	>	ServerInfo.rsa_private_key = PEM_read_bio_RSAPrivateKey(file, NULL, 0, NULL);
584
585	<	ServerInfo.rsa_private_key = (RSA *)PEM_read_bio_RSAPrivateKey(file, NULL,
586	<	0, NULL);
585	>	BIO_set_close(file, BIO_CLOSE);
586	>	BIO_free(file);
587
588	<	BIO_set_close(file, BIO_CLOSE);
589	<	BIO_free(file);
588	>	if (ServerInfo.rsa_private_key == NULL)
589	>	{
590	>	conf_error_report("Couldn't extract key, ignoring");
591	>	break;
592	>	}
593
594	<	if (ServerInfo.rsa_private_key == NULL)
595	<	{
596	<	yyerror("Couldn't extract key, ignoring");
597	<	break;
577	<	}
594	>	if (!RSA_check_key(ServerInfo.rsa_private_key))
595	>	{
596	>	RSA_free(ServerInfo.rsa_private_key);
597	>	ServerInfo.rsa_private_key = NULL;
598
599	<	if (!RSA_check_key(ServerInfo.rsa_private_key))
600	<	{
601	<	RSA_free(ServerInfo.rsa_private_key);
582	<	ServerInfo.rsa_private_key = NULL;
599	>	conf_error_report("Invalid key, ignoring");
600	>	break;
601	>	}
602
603	<	yyerror("Invalid key, ignoring");
604	<	break;
605	<	}
603	>	/* require 2048 bit (256 byte) key */
604	>	if (RSA_size(ServerInfo.rsa_private_key) != 256)
605	>	{
606	>	RSA_free(ServerInfo.rsa_private_key);
607	>	ServerInfo.rsa_private_key = NULL;
608	>
609	>	conf_error_report("Not a 2048 bit key, ignoring");
610	>	}
611	>	#endif
612	>	};
613	>
614	>	serverinfo_ssl_dh_param_file: SSL_DH_PARAM_FILE '=' QSTRING ';'
615	>	{
616	>	/* TBD - XXX: error reporting */
617	>	#ifdef HAVE_LIBCRYPTO
618	>	if (conf_parser_ctx.pass == 2 && ServerInfo.server_ctx)
619	>	{
620	>	BIO *file = BIO_new_file(yylval.string, "r");
621
622	<	/* require 2048 bit (256 byte) key */
589	<	if (RSA_size(ServerInfo.rsa_private_key) != 256)
622	>	if (file)
623		{
624	<	RSA_free(ServerInfo.rsa_private_key);
625	<	ServerInfo.rsa_private_key = NULL;
624	>	DH *dh = PEM_read_bio_DHparams(file, NULL, NULL, NULL);
625	>
626	>	BIO_free(file);
627	>
628	>	if (dh)
629	>	{
630	>	if (DH_size(dh) < 128)
631	>	conf_error_report("Ignoring serverinfo::ssl_dh_param_file -- need at least a 1024 bit DH prime size");
632	>	else
633	>	SSL_CTX_set_tmp_dh(ServerInfo.server_ctx, dh);
634
635	<	yyerror("Not a 2048 bit key, ignoring");
635	>	DH_free(dh);
636	>	}
637		}
638		}
639		#endif
640		};
641
642	+	serverinfo_ssl_cipher_list: T_SSL_CIPHER_LIST '=' QSTRING ';'
643	+	{
644	+	#ifdef HAVE_LIBCRYPTO
645	+	if (conf_parser_ctx.pass == 2 && ServerInfo.server_ctx)
646	+	SSL_CTX_set_cipher_list(ServerInfo.server_ctx, yylval.string);
647	+	#endif
648	+	};
649	+
650		serverinfo_name: NAME '=' QSTRING ';'
651		{
652		/* this isn't rehashable */
653	<	if (ypass == 2)
653	>	if (conf_parser_ctx.pass == 2 && !ServerInfo.name)
654		{
655	<	if (ServerInfo.name == NULL)
655	>	if (valid_servname(yylval.string))
656	>	ServerInfo.name = xstrdup(yylval.string);
657	>	else
658		{
659	<	/* the ircd will exit() in main() if we dont set one */
660	<	if (strlen(yylval.string) <= HOSTLEN)
609	<	DupString(ServerInfo.name, yylval.string);
659	>	conf_error_report("Ignoring serverinfo::name -- invalid name. Aborting.");
660	>	exit(0);
661		}
662		}
663		};
#	Line 614 | Line 665 | serverinfo_name: NAME '=' QSTRING ';'
665		serverinfo_sid: IRCD_SID '=' QSTRING ';'
666		{
667		/* this isn't rehashable */
668	<	if (ypass == 2 && !ServerInfo.sid)
668	>	if (conf_parser_ctx.pass == 2 && !ServerInfo.sid)
669		{
670	<	if ((strlen(yylval.string) == IRC_MAXSID) && IsDigit(yylval.string[0])
671	<	&& IsAlNum(yylval.string[1]) && IsAlNum(yylval.string[2]))
621	<	{
622	<	DupString(ServerInfo.sid, yylval.string);
623	<	}
670	>	if (valid_sid(yylval.string))
671	>	ServerInfo.sid = xstrdup(yylval.string);
672		else
673		{
674	<	ilog(L_ERROR, "Ignoring config file entry SID -- invalid SID. Aborting.");
674	>	conf_error_report("Ignoring serverinfo::sid -- invalid SID. Aborting.");
675		exit(0);
676		}
677		}
#	Line 631 | Line 679 | serverinfo_sid: IRCD_SID '=' QSTRING ';'
679
680		serverinfo_description: DESCRIPTION '=' QSTRING ';'
681		{
682	<	if (ypass == 2)
682	>	if (conf_parser_ctx.pass == 2)
683		{
684		MyFree(ServerInfo.description);
685	<	DupString(ServerInfo.description,yylval.string);
685	>	ServerInfo.description = xstrdup(yylval.string);
686		}
687		};
688
689		serverinfo_network_name: NETWORK_NAME '=' QSTRING ';'
690		{
691	<	if (ypass == 2)
691	>	if (conf_parser_ctx.pass == 2)
692		{
693		char *p;
694
#	Line 648 | Line 696 | serverinfo_network_name: NETWORK_NAME '=
696		p = '\0';
697
698		MyFree(ServerInfo.network_name);
699	<	DupString(ServerInfo.network_name, yylval.string);
699	>	ServerInfo.network_name = xstrdup(yylval.string);
700		}
701		};
702
703		serverinfo_network_desc: NETWORK_DESC '=' QSTRING ';'
704		{
705	<	if (ypass == 2)
706	<	{
707	<	MyFree(ServerInfo.network_desc);
708	<	DupString(ServerInfo.network_desc, yylval.string);
709	<	}
705	>	if (conf_parser_ctx.pass != 2)
706	>	break;
707	>
708	>	MyFree(ServerInfo.network_desc);
709	>	ServerInfo.network_desc = xstrdup(yylval.string);
710		};
711
712		serverinfo_vhost: VHOST '=' QSTRING ';'
713		{
714	<	if (ypass == 2 && *yylval.string != '*')
714	>	if (conf_parser_ctx.pass == 2 && *yylval.string != '*')
715		{
716		struct addrinfo hints, *res;
717
#	Line 673 | Line 721 | serverinfo_vhost: VHOST '=' QSTRING ';'
721		hints.ai_socktype = SOCK_STREAM;
722		hints.ai_flags    = AI_PASSIVE | AI_NUMERICHOST;
723
724	<	if (irc_getaddrinfo(yylval.string, NULL, &hints, &res))
725	<	ilog(L_ERROR, "Invalid netmask for server vhost(%s)", yylval.string);
724	>	if (getaddrinfo(yylval.string, NULL, &hints, &res))
725	>	ilog(LOG_TYPE_IRCD, "Invalid netmask for server vhost(%s)", yylval.string);
726		else
727		{
728		assert(res != NULL);
#	Line 682 | Line 730 | serverinfo_vhost: VHOST '=' QSTRING ';'
730		memcpy(&ServerInfo.ip, res->ai_addr, res->ai_addrlen);
731		ServerInfo.ip.ss.ss_family = res->ai_family;
732		ServerInfo.ip.ss_len = res->ai_addrlen;
733	<	irc_freeaddrinfo(res);
733	>	freeaddrinfo(res);
734
735		ServerInfo.specific_ipv4_vhost = 1;
736		}
#	Line 692 | Line 740 | serverinfo_vhost: VHOST '=' QSTRING ';'
740		serverinfo_vhost6: VHOST6 '=' QSTRING ';'
741		{
742		#ifdef IPV6
743	<	if (ypass == 2 && *yylval.string != '*')
743	>	if (conf_parser_ctx.pass == 2 && *yylval.string != '*')
744		{
745		struct addrinfo hints, *res;
746
#	Line 702 | Line 750 | serverinfo_vhost6: VHOST6 '=' QSTRING ';
750		hints.ai_socktype = SOCK_STREAM;
751		hints.ai_flags    = AI_PASSIVE | AI_NUMERICHOST;
752
753	<	if (irc_getaddrinfo(yylval.string, NULL, &hints, &res))
754	<	ilog(L_ERROR, "Invalid netmask for server vhost6(%s)", yylval.string);
753	>	if (getaddrinfo(yylval.string, NULL, &hints, &res))
754	>	ilog(LOG_TYPE_IRCD, "Invalid netmask for server vhost6(%s)", yylval.string);
755		else
756		{
757		assert(res != NULL);
#	Line 711 | Line 759 | serverinfo_vhost6: VHOST6 '=' QSTRING ';
759		memcpy(&ServerInfo.ip6, res->ai_addr, res->ai_addrlen);
760		ServerInfo.ip6.ss.ss_family = res->ai_family;
761		ServerInfo.ip6.ss_len = res->ai_addrlen;
762	<	irc_freeaddrinfo(res);
762	>	freeaddrinfo(res);
763
764		ServerInfo.specific_ipv6_vhost = 1;
765		}
#	Line 721 | Line 769 | serverinfo_vhost6: VHOST6 '=' QSTRING ';
769
770		serverinfo_max_clients: T_MAX_CLIENTS '=' NUMBER ';'
771		{
772	<	if (ypass == 2)
772	>	if (conf_parser_ctx.pass != 2)
773	>	break;
774	>
775	>	if ($3 < MAXCLIENTS_MIN)
776		{
777	<	recalc_fdlimit(NULL);
777	>	char buf[IRCD_BUFSIZE];
778
779	<	if ($3 < MAXCLIENTS_MIN)
780	<	{
781	<	char buf[IRCD_BUFSIZE];
731	<	ircsprintf(buf, "MAXCLIENTS too low, setting to %d", MAXCLIENTS_MIN);
732	<	yyerror(buf);
733	<	}
734	<	else if ($3 > MAXCLIENTS_MAX)
735	<	{
736	<	char buf[IRCD_BUFSIZE];
737	<	ircsprintf(buf, "MAXCLIENTS too high, setting to %d", MAXCLIENTS_MAX);
738	<	yyerror(buf);
739	<	}
740	<	else
741	<	ServerInfo.max_clients = $3;
779	>	snprintf(buf, sizeof(buf), "MAXCLIENTS too low, setting to %d", MAXCLIENTS_MIN);
780	>	conf_error_report(buf);
781	>	ServerInfo.max_clients = MAXCLIENTS_MIN;
782		}
783	+	else if ($3 > MAXCLIENTS_MAX)
784	+	{
785	+	char buf[IRCD_BUFSIZE];
786	+
787	+	snprintf(buf, sizeof(buf), "MAXCLIENTS too high, setting to %d", MAXCLIENTS_MAX);
788	+	conf_error_report(buf);
789	+	ServerInfo.max_clients = MAXCLIENTS_MAX;
790	+	}
791	+	else
792	+	ServerInfo.max_clients = $3;
793		};
794
795	<	serverinfo_hub: HUB '=' TBOOL ';'
795	>	serverinfo_max_nick_length: MAX_NICK_LENGTH '=' NUMBER ';'
796		{
797	<	if (ypass == 2)
797	>	if (conf_parser_ctx.pass != 2)
798	>	break;
799	>
800	>	if ($3 < 9)
801		{
802	<	if (yylval.number)
803	<	{
804	<	/* Don't become a hub if we have a lazylink active. */
805	<	if (!ServerInfo.hub && uplink && IsCapable(uplink, CAP_LL))
806	<	{
807	<	sendto_realops_flags(UMODE_ALL, L_ALL,
755	<	"Ignoring config file line hub=yes; "
756	<	"due to active LazyLink (%s)", uplink->name);
757	<	}
758	<	else
759	<	{
760	<	ServerInfo.hub = 1;
761	<	uplink = NULL;
762	<	delete_capability("HUB");
763	<	add_capability("HUB", CAP_HUB, 1);
764	<	}
765	<	}
766	<	else if (ServerInfo.hub)
767	<	{
768	<	dlink_node *ptr = NULL;
802	>	conf_error_report("max_nick_length too low, setting to 9");
803	>	ServerInfo.max_nick_length = 9;
804	>	}
805	>	else if ($3 > NICKLEN)
806	>	{
807	>	char buf[IRCD_BUFSIZE];
808
809	<	ServerInfo.hub = 0;
810	<	delete_capability("HUB");
809	>	snprintf(buf, sizeof(buf), "max_nick_length too high, setting to %d", NICKLEN);
810	>	conf_error_report(buf);
811	>	ServerInfo.max_nick_length = NICKLEN;
812	>	}
813	>	else
814	>	ServerInfo.max_nick_length = $3;
815	>	};
816
817	<	/* Don't become a leaf if we have a lazylink active. */
818	<	DLINK_FOREACH(ptr, serv_list.head)
819	<	{
820	<	const struct Client *acptr = ptr->data;
821	<	if (MyConnect(acptr) && IsCapable(acptr, CAP_LL))
822	<	{
823	<	sendto_realops_flags(UMODE_ALL, L_ALL,
824	<	"Ignoring config file line hub=no; "
825	<	"due to active LazyLink (%s)",
826	<	acptr->name);
827	<	add_capability("HUB", CAP_HUB, 1);
828	<	ServerInfo.hub = 1;
829	<	break;
830	<	}
831	<	}
832	<	}
817	>	serverinfo_max_topic_length: MAX_TOPIC_LENGTH '=' NUMBER ';'
818	>	{
819	>	if (conf_parser_ctx.pass != 2)
820	>	break;
821	>
822	>	if ($3 < 80)
823	>	{
824	>	conf_error_report("max_topic_length too low, setting to 80");
825	>	ServerInfo.max_topic_length = 80;
826	>	}
827	>	else if ($3 > TOPICLEN)
828	>	{
829	>	char buf[IRCD_BUFSIZE];
830	>
831	>	snprintf(buf, sizeof(buf), "max_topic_length too high, setting to %d", TOPICLEN);
832	>	conf_error_report(buf);
833	>	ServerInfo.max_topic_length = TOPICLEN;
834		}
835	+	else
836	+	ServerInfo.max_topic_length = $3;
837	+	};
838	+
839	+	serverinfo_hub: HUB '=' TBOOL ';'
840	+	{
841	+	if (conf_parser_ctx.pass == 2)
842	+	ServerInfo.hub = yylval.number;
843		};
844
845		/***************************************************************************
#	Line 800 | Line 853 | admin_item:  admin_name | admin_descript
853
854		admin_name: NAME '=' QSTRING ';'
855		{
856	<	if (ypass == 2)
857	<	{
858	<	MyFree(AdminInfo.name);
859	<	DupString(AdminInfo.name, yylval.string);
860	<	}
856	>	if (conf_parser_ctx.pass != 2)
857	>	break;
858	>
859	>	MyFree(AdminInfo.name);
860	>	AdminInfo.name = xstrdup(yylval.string);
861		};
862
863		admin_email: EMAIL '=' QSTRING ';'
864		{
865	<	if (ypass == 2)
866	<	{
867	<	MyFree(AdminInfo.email);
868	<	DupString(AdminInfo.email, yylval.string);
869	<	}
865	>	if (conf_parser_ctx.pass != 2)
866	>	break;
867	>
868	>	MyFree(AdminInfo.email);
869	>	AdminInfo.email = xstrdup(yylval.string);
870		};
871
872		admin_description: DESCRIPTION '=' QSTRING ';'
873		{
874	<	if (ypass == 2)
875	<	{
876	<	MyFree(AdminInfo.description);
877	<	DupString(AdminInfo.description, yylval.string);
878	<	}
874	>	if (conf_parser_ctx.pass != 2)
875	>	break;
876	>
877	>	MyFree(AdminInfo.description);
878	>	AdminInfo.description = xstrdup(yylval.string);
879		};
880
881		/***************************************************************************
882	<	*  section logging
882	>	* motd section
883		***************************************************************************/
884	<	/* XXX */
885	<	logging_entry:          LOGGING  '{' logging_items '}' ';' ;
884	>	motd_entry: MOTD
885	>	{
886	>	if (conf_parser_ctx.pass == 2)
887	>	reset_block_state();
888	>	} '{' motd_items '}' ';'
889	>	{
890	>	dlink_node *ptr = NULL;
891
892	<	logging_items:          logging_items logging_item |
893	<	logging_item ;
892	>	if (conf_parser_ctx.pass != 2)
893	>	break;
894
895	<	logging_item:           logging_path | logging_oper_log |
896	<	logging_log_level |
839	<	logging_use_logging | logging_fuserlog |
840	<	logging_foperlog | logging_fglinelog |
841	<	logging_fklinelog | logging_killlog |
842	<	logging_foperspylog | logging_ioerrlog |
843	<	logging_ffailed_operlog |
844	<	error ';' ;
895	>	if (!block_state.file.buf[0])
896	>	break;
897
898	<	logging_path:           T_LOGPATH '=' QSTRING ';'
899	<	{
900	<	};
898	>	DLINK_FOREACH(ptr, block_state.mask.list.head)
899	>	motd_add(ptr->data, block_state.file.buf);
900	>	};
901
902	<	logging_oper_log:       OPER_LOG '=' QSTRING ';'
903	<	{
852	<	};
902	>	motd_items: motd_items motd_item | motd_item;
903	>	motd_item:  motd_mask | motd_file | error ';' ;
904
905	<	logging_fuserlog: FUSERLOG '=' QSTRING ';'
905	>	motd_mask: MASK '=' QSTRING ';'
906		{
907	<	if (ypass == 2)
908	<	strlcpy(ConfigLoggingEntry.userlog, yylval.string,
858	<	sizeof(ConfigLoggingEntry.userlog));
907	>	if (conf_parser_ctx.pass == 2)
908	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.mask.list);
909		};
910
911	<	logging_ffailed_operlog: FFAILED_OPERLOG '=' QSTRING ';'
911	>	motd_file: T_FILE '=' QSTRING ';'
912		{
913	<	if (ypass == 2)
914	<	strlcpy(ConfigLoggingEntry.failed_operlog, yylval.string,
865	<	sizeof(ConfigLoggingEntry.failed_operlog));
913	>	if (conf_parser_ctx.pass == 2)
914	>	strlcpy(block_state.file.buf, yylval.string, sizeof(block_state.file.buf));
915		};
916
917	<	logging_foperlog: FOPERLOG '=' QSTRING ';'
918	<	{
919	<	if (ypass == 2)
920	<	strlcpy(ConfigLoggingEntry.operlog, yylval.string,
921	<	sizeof(ConfigLoggingEntry.operlog));
873	<	};
917	>	/***************************************************************************
918	>	*  section logging
919	>	***************************************************************************/
920	>	logging_entry:          T_LOG  '{' logging_items '}' ';' ;
921	>	logging_items:          logging_items logging_item | logging_item ;
922
923	<	logging_foperspylog: FOPERSPYLOG '=' QSTRING ';'
924	<	{
877	<	if (ypass == 2)
878	<	strlcpy(ConfigLoggingEntry.operspylog, yylval.string,
879	<	sizeof(ConfigLoggingEntry.operspylog));
880	<	};
923	>	logging_item:           logging_use_logging | logging_file_entry |
924	>	error ';' ;
925
926	<	logging_fglinelog: FGLINELOG '=' QSTRING ';'
926	>	logging_use_logging: USE_LOGGING '=' TBOOL ';'
927		{
928	<	if (ypass == 2)
929	<	strlcpy(ConfigLoggingEntry.glinelog, yylval.string,
886	<	sizeof(ConfigLoggingEntry.glinelog));
928	>	if (conf_parser_ctx.pass == 2)
929	>	ConfigLoggingEntry.use_logging = yylval.number;
930		};
931
932	<	logging_fklinelog: FKLINELOG '=' QSTRING ';'
932	>	logging_file_entry:
933	>	{
934	>	if (conf_parser_ctx.pass == 2)
935	>	reset_block_state();
936	>	} T_FILE  '{' logging_file_items '}' ';'
937		{
938	<	if (ypass == 2)
939	<	strlcpy(ConfigLoggingEntry.klinelog, yylval.string,
940	<	sizeof(ConfigLoggingEntry.klinelog));
938	>	if (conf_parser_ctx.pass != 2)
939	>	break;
940	>
941	>	if (block_state.type.value && block_state.file.buf[0])
942	>	log_set_file(block_state.type.value, block_state.size.value,
943	>	block_state.file.buf);
944		};
945
946	<	logging_ioerrlog: FIOERRLOG '=' QSTRING ';'
946	>	logging_file_items: logging_file_items logging_file_item |
947	>	logging_file_item ;
948	>
949	>	logging_file_item:  logging_file_name | logging_file_type |
950	>	logging_file_size | error ';' ;
951	>
952	>	logging_file_name: NAME '=' QSTRING ';'
953		{
954	<	if (ypass == 2)
955	<	strlcpy(ConfigLoggingEntry.ioerrlog, yylval.string,
956	<	sizeof(ConfigLoggingEntry.ioerrlog));
957	<	};
954	>	if (conf_parser_ctx.pass != 2)
955	>	break;
956	>
957	>	strlcpy(block_state.file.buf, yylval.string, sizeof(block_state.file.buf));
958	>	}
959
960	<	logging_killlog: FKILLLOG '=' QSTRING ';'
960	>	logging_file_size: T_SIZE '=' sizespec ';'
961		{
962	<	if (ypass == 2)
963	<	strlcpy(ConfigLoggingEntry.killlog, yylval.string,
964	<	sizeof(ConfigLoggingEntry.killlog));
962	>	block_state.size.value = $3;
963	>	} | T_SIZE '=' T_UNLIMITED ';'
964	>	{
965	>	block_state.size.value = 0;
966		};
967
968	<	logging_log_level: LOG_LEVEL '=' T_L_CRIT ';'
911	<	{
912	<	if (ypass == 2)
913	<	set_log_level(L_CRIT);
914	<	} | LOG_LEVEL '=' T_L_ERROR ';'
915	<	{
916	<	if (ypass == 2)
917	<	set_log_level(L_ERROR);
918	<	} | LOG_LEVEL '=' T_L_WARN ';'
919	<	{
920	<	if (ypass == 2)
921	<	set_log_level(L_WARN);
922	<	} | LOG_LEVEL '=' T_L_NOTICE ';'
923	<	{
924	<	if (ypass == 2)
925	<	set_log_level(L_NOTICE);
926	<	} | LOG_LEVEL '=' T_L_TRACE ';'
927	<	{
928	<	if (ypass == 2)
929	<	set_log_level(L_TRACE);
930	<	} | LOG_LEVEL '=' T_L_INFO ';'
931	<	{
932	<	if (ypass == 2)
933	<	set_log_level(L_INFO);
934	<	} | LOG_LEVEL '=' T_L_DEBUG ';'
968	>	logging_file_type: TYPE
969		{
970	<	if (ypass == 2)
971	<	set_log_level(L_DEBUG);
972	<	};
970	>	if (conf_parser_ctx.pass == 2)
971	>	block_state.type.value = 0;
972	>	} '='  logging_file_type_items ';' ;
973
974	<	logging_use_logging: USE_LOGGING '=' TBOOL ';'
974	>	logging_file_type_items: logging_file_type_items ',' logging_file_type_item | logging_file_type_item;
975	>	logging_file_type_item:  USER
976		{
977	<	if (ypass == 2)
978	<	ConfigLoggingEntry.use_logging = yylval.number;
977	>	if (conf_parser_ctx.pass == 2)
978	>	block_state.type.value = LOG_TYPE_USER;
979	>	} | OPERATOR
980	>	{
981	>	if (conf_parser_ctx.pass == 2)
982	>	block_state.type.value = LOG_TYPE_OPER;
983	>	} | GLINE
984	>	{
985	>	if (conf_parser_ctx.pass == 2)
986	>	block_state.type.value = LOG_TYPE_GLINE;
987	>	} | XLINE
988	>	{
989	>	if (conf_parser_ctx.pass == 2)
990	>	block_state.type.value = LOG_TYPE_XLINE;
991	>	} | RESV
992	>	{
993	>	if (conf_parser_ctx.pass == 2)
994	>	block_state.type.value = LOG_TYPE_RESV;
995	>	} | T_DLINE
996	>	{
997	>	if (conf_parser_ctx.pass == 2)
998	>	block_state.type.value = LOG_TYPE_DLINE;
999	>	} | KLINE
1000	>	{
1001	>	if (conf_parser_ctx.pass == 2)
1002	>	block_state.type.value = LOG_TYPE_KLINE;
1003	>	} | KILL
1004	>	{
1005	>	if (conf_parser_ctx.pass == 2)
1006	>	block_state.type.value = LOG_TYPE_KILL;
1007	>	} | T_DEBUG
1008	>	{
1009	>	if (conf_parser_ctx.pass == 2)
1010	>	block_state.type.value = LOG_TYPE_DEBUG;
1011		};
1012
1013	+
1014		/***************************************************************************
1015		* section oper
1016		***************************************************************************/
1017		oper_entry: OPERATOR
1018		{
1019	<	if (ypass == 2)
1020	<	{
953	<	yy_conf = make_conf_item(OPER_TYPE);
954	<	yy_aconf = map_to_conf(yy_conf);
955	<	SetConfEncrypted(yy_aconf); /* Yes, the default is encrypted */
956	<	}
957	<	else
958	<	{
959	<	MyFree(class_name);
960	<	class_name = NULL;
961	<	}
962	<	} oper_name_b '{' oper_items '}' ';'
963	<	{
964	<	if (ypass == 2)
965	<	{
966	<	struct CollectItem *yy_tmp;
967	<	dlink_node *ptr;
968	<	dlink_node *next_ptr;
1019	>	if (conf_parser_ctx.pass != 2)
1020	>	break;
1021
1022	<	conf_add_class_to_conf(yy_conf, class_name);
1023	<
1024	<	/* Now, make sure there is a copy of the "base" given oper
1025	<	* block in each of the collected copies
1026	<	*/
1022	>	reset_block_state();
1023	>	block_state.flags.value |= CONF_FLAGS_ENCRYPTED;
1024	>	} '{' oper_items '}' ';'
1025	>	{
1026	>	dlink_node *ptr = NULL;
1027
1028	<	DLINK_FOREACH_SAFE(ptr, next_ptr, col_conf_list.head)
1029	<	{
978	<	struct AccessItem *new_aconf;
979	<	struct ConfItem *new_conf;
980	<	yy_tmp = ptr->data;
981	<
982	<	new_conf = make_conf_item(OPER_TYPE);
983	<	new_aconf = (struct AccessItem *)map_to_conf(new_conf);
984	<
985	<	new_aconf->flags = yy_aconf->flags;
986	<
987	<	if (yy_conf->name != NULL)
988	<	DupString(new_conf->name, yy_conf->name);
989	<	if (yy_tmp->user != NULL)
990	<	DupString(new_aconf->user, yy_tmp->user);
991	<	else
992	<	DupString(new_aconf->user, "*");
993	<	if (yy_tmp->host != NULL)
994	<	DupString(new_aconf->host, yy_tmp->host);
995	<	else
996	<	DupString(new_aconf->host, "*");
997	<	conf_add_class_to_conf(new_conf, class_name);
998	<	if (yy_aconf->passwd != NULL)
999	<	DupString(new_aconf->passwd, yy_aconf->passwd);
1028	>	if (conf_parser_ctx.pass != 2)
1029	>	break;
1030
1031	<	new_aconf->port = yy_aconf->port;
1031	>	if (!block_state.name.buf[0])
1032	>	break;
1033		#ifdef HAVE_LIBCRYPTO
1034	<	if (yy_aconf->rsa_public_key_file != NULL)
1035	<	{
1036	<	BIO *file;
1034	>	if (!block_state.file.buf[0] &&
1035	>	!block_state.rpass.buf[0])
1036	>	break;
1037	>	#else
1038	>	if (!block_state.rpass.buf[0])
1039	>	break;
1040	>	#endif
1041
1042	<	DupString(new_aconf->rsa_public_key_file,
1043	<	yy_aconf->rsa_public_key_file);
1042	>	DLINK_FOREACH(ptr, block_state.mask.list.head)
1043	>	{
1044	>	struct MaskItem *conf = NULL;
1045	>	struct split_nuh_item nuh;
1046
1047	<	file = BIO_new_file(yy_aconf->rsa_public_key_file, "r");
1048	<	new_aconf->rsa_public_key = (RSA *)PEM_read_bio_RSA_PUBKEY(file,
1049	<	NULL, 0, NULL);
1050	<	BIO_set_close(file, BIO_CLOSE);
1051	<	BIO_free(file);
1052	<	}
1053	<	#endif
1047	>	nuh.nuhmask  = ptr->data;
1048	>	nuh.nickptr  = NULL;
1049	>	nuh.userptr  = block_state.user.buf;
1050	>	nuh.hostptr  = block_state.host.buf;
1051	>	nuh.nicksize = 0;
1052	>	nuh.usersize = sizeof(block_state.user.buf);
1053	>	nuh.hostsize = sizeof(block_state.host.buf);
1054	>	split_nuh(&nuh);
1055	>
1056	>	conf         = conf_make(CONF_OPER);
1057	>	conf->name   = xstrdup(block_state.name.buf);
1058	>	conf->user   = xstrdup(block_state.user.buf);
1059	>	conf->host   = xstrdup(block_state.host.buf);
1060	>
1061	>	if (block_state.cert.buf[0])
1062	>	conf->certfp = xstrdup(block_state.cert.buf);
1063	>
1064	>	if (block_state.rpass.buf[0])
1065	>	conf->passwd = xstrdup(block_state.rpass.buf);
1066	>
1067	>	conf->flags = block_state.flags.value;
1068	>	conf->modes = block_state.modes.value;
1069	>	conf->port  = block_state.port.value;
1070	>	conf->htype = parse_netmask(conf->host, &conf->addr, &conf->bits);
1071	>
1072	>	conf_add_class_to_conf(conf, block_state.class.buf);
1073
1074		#ifdef HAVE_LIBCRYPTO
1075	<	if (yy_tmp->name && (yy_tmp->passwd || yy_aconf->rsa_public_key)
1076	<	&& yy_tmp->host)
1077	<	#else
1078	<	if (yy_tmp->name && yy_tmp->passwd && yy_tmp->host)
1079	<	#endif
1075	>	if (block_state.file.buf[0])
1076	>	{
1077	>	BIO *file = NULL;
1078	>	RSA *pkey = NULL;
1079	>
1080	>	if ((file = BIO_new_file(block_state.file.buf, "r")) == NULL)
1081		{
1082	<	conf_add_class_to_conf(new_conf, class_name);
1083	<	if (yy_tmp->name != NULL)
1027	<	DupString(new_conf->name, yy_tmp->name);
1082	>	conf_error_report("Ignoring rsa_public_key_file -- file doesn't exist");
1083	>	break;
1084		}
1085
1086	<	dlinkDelete(&yy_tmp->node, &col_conf_list);
1087	<	free_collect_item(yy_tmp);
1032	<	}
1033	<
1034	<	yy_conf = NULL;
1035	<	yy_aconf = NULL;
1036	<
1086	>	if ((pkey = PEM_read_bio_RSA_PUBKEY(file, NULL, 0, NULL)) == NULL)
1087	>	conf_error_report("Ignoring rsa_public_key_file -- Key invalid; check key syntax.");
1088
1089	<	MyFree(class_name);
1090	<	class_name = NULL;
1089	>	conf->rsa_public_key = pkey;
1090	>	BIO_set_close(file, BIO_CLOSE);
1091	>	BIO_free(file);
1092	>	}
1093	>	#endif /* HAVE_LIBCRYPTO */
1094		}
1095	<	};
1095	>	};
1096
1043	–	oper_name_b: | oper_name_t;
1097		oper_items:     oper_items oper_item | oper_item;
1098	<	oper_item:      oper_name | oper_user | oper_password | oper_hidden_admin |
1099	<	oper_hidden_oper | oper_umodes |
1100	<	oper_class | oper_global_kill | oper_remote |
1101	<	oper_kline | oper_xline | oper_unkline |
1102	<	oper_gline | oper_nick_changes | oper_remoteban |
1050	<	oper_die | oper_rehash | oper_admin | oper_operwall |
1051	<	oper_encrypted | oper_rsa_public_key_file |
1052	<	oper_flags | error ';' ;
1098	>	oper_item:      oper_name | oper_user | oper_password |
1099	>	oper_umodes | oper_class | oper_encrypted |
1100	>	oper_rsa_public_key_file | oper_ssl_certificate_fingerprint |
1101	>	oper_ssl_connection_required |
1102	>	oper_flags | error ';' ;
1103
1104		oper_name: NAME '=' QSTRING ';'
1105		{
1106	<	if (ypass == 2)
1107	<	{
1058	<	if (strlen(yylval.string) > OPERNICKLEN)
1059	<	yylval.string[OPERNICKLEN] = '\0';
1060	<
1061	<	MyFree(yy_conf->name);
1062	<	DupString(yy_conf->name, yylval.string);
1063	<	}
1064	<	};
1065	<
1066	<	oper_name_t: QSTRING
1067	<	{
1068	<	if (ypass == 2)
1069	<	{
1070	<	if (strlen(yylval.string) > OPERNICKLEN)
1071	<	yylval.string[OPERNICKLEN] = '\0';
1072	<
1073	<	MyFree(yy_conf->name);
1074	<	DupString(yy_conf->name, yylval.string);
1075	<	}
1106	>	if (conf_parser_ctx.pass == 2)
1107	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1108		};
1109
1110		oper_user: USER '=' QSTRING ';'
1111		{
1112	<	if (ypass == 2)
1113	<	{
1082	<	struct CollectItem *yy_tmp;
1083	<
1084	<	if (yy_aconf->user == NULL)
1085	<	{
1086	<	split_nuh(yylval.string, NULL, &yy_aconf->user, &yy_aconf->host);
1087	<	}
1088	<	else
1089	<	{
1090	<	yy_tmp = (struct CollectItem *)MyMalloc(sizeof(struct CollectItem));
1091	<	split_nuh(yylval.string, NULL, &yy_tmp->user, &yy_tmp->host);
1092	<	dlinkAdd(yy_tmp, &yy_tmp->node, &col_conf_list);
1093	<	}
1094	<	}
1112	>	if (conf_parser_ctx.pass == 2)
1113	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.mask.list);
1114		};
1115
1116		oper_password: PASSWORD '=' QSTRING ';'
1117		{
1118	<	if (ypass == 2)
1119	<	{
1101	<	if (yy_aconf->passwd != NULL)
1102	<	memset(yy_aconf->passwd, 0, strlen(yy_aconf->passwd));
1103	<
1104	<	MyFree(yy_aconf->passwd);
1105	<	DupString(yy_aconf->passwd, yylval.string);
1106	<	}
1118	>	if (conf_parser_ctx.pass == 2)
1119	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
1120		};
1121
1122		oper_encrypted: ENCRYPTED '=' TBOOL ';'
1123		{
1124	<	if (ypass == 2)
1125	<	{
1126	<	if (yylval.number)
1127	<	SetConfEncrypted(yy_aconf);
1128	<	else
1129	<	ClearConfEncrypted(yy_aconf);
1130	<	}
1124	>	if (conf_parser_ctx.pass != 2)
1125	>	break;
1126	>
1127	>	if (yylval.number)
1128	>	block_state.flags.value |= CONF_FLAGS_ENCRYPTED;
1129	>	else
1130	>	block_state.flags.value &= ~CONF_FLAGS_ENCRYPTED;
1131		};
1132
1133		oper_rsa_public_key_file: RSA_PUBLIC_KEY_FILE '=' QSTRING ';'
1134		{
1135	<	#ifdef HAVE_LIBCRYPTO
1136	<	if (ypass == 2)
1137	<	{
1125	<	BIO *file;
1126	<
1127	<	if (yy_aconf->rsa_public_key != NULL)
1128	<	{
1129	<	RSA_free(yy_aconf->rsa_public_key);
1130	<	yy_aconf->rsa_public_key = NULL;
1131	<	}
1132	<
1133	<	if (yy_aconf->rsa_public_key_file != NULL)
1134	<	{
1135	<	MyFree(yy_aconf->rsa_public_key_file);
1136	<	yy_aconf->rsa_public_key_file = NULL;
1137	<	}
1138	<
1139	<	DupString(yy_aconf->rsa_public_key_file, yylval.string);
1140	<	file = BIO_new_file(yylval.string, "r");
1141	<
1142	<	if (file == NULL)
1143	<	{
1144	<	yyerror("Ignoring rsa_public_key_file -- file doesn't exist");
1145	<	break;
1146	<	}
1135	>	if (conf_parser_ctx.pass == 2)
1136	>	strlcpy(block_state.file.buf, yylval.string, sizeof(block_state.file.buf));
1137	>	};
1138
1139	<	yy_aconf->rsa_public_key = (RSA *)PEM_read_bio_RSA_PUBKEY(file, NULL, 0, NULL);
1139	>	oper_ssl_certificate_fingerprint: SSL_CERTIFICATE_FINGERPRINT '=' QSTRING ';'
1140	>	{
1141	>	if (conf_parser_ctx.pass == 2)
1142	>	strlcpy(block_state.cert.buf, yylval.string, sizeof(block_state.cert.buf));
1143	>	};
1144
1145	<	if (yy_aconf->rsa_public_key == NULL)
1146	<	{
1147	<	yyerror("Ignoring rsa_public_key_file -- Key invalid; check key syntax.");
1148	<	break;
1154	<	}
1145	>	oper_ssl_connection_required: SSL_CONNECTION_REQUIRED '=' TBOOL ';'
1146	>	{
1147	>	if (conf_parser_ctx.pass != 2)
1148	>	break;
1149
1150	<	BIO_set_close(file, BIO_CLOSE);
1151	<	BIO_free(file);
1152	<	}
1153	<	#endif /* HAVE_LIBCRYPTO */
1150	>	if (yylval.number)
1151	>	block_state.flags.value |= CONF_FLAGS_SSL;
1152	>	else
1153	>	block_state.flags.value &= ~CONF_FLAGS_SSL;
1154		};
1155
1156		oper_class: CLASS '=' QSTRING ';'
1157		{
1158	<	if (ypass == 2)
1159	<	{
1166	<	MyFree(class_name);
1167	<	DupString(class_name, yylval.string);
1168	<	}
1158	>	if (conf_parser_ctx.pass == 2)
1159	>	strlcpy(block_state.class.buf, yylval.string, sizeof(block_state.class.buf));
1160		};
1161
1162		oper_umodes: T_UMODES
1163		{
1164	<	if (ypass == 2)
1165	<	yy_aconf->modes = 0;
1164	>	if (conf_parser_ctx.pass == 2)
1165	>	block_state.modes.value = 0;
1166		} '='  oper_umodes_items ';' ;
1167
1168		oper_umodes_items: oper_umodes_items ',' oper_umodes_item | oper_umodes_item;
1169		oper_umodes_item:  T_BOTS
1170		{
1171	<	if (ypass == 2)
1172	<	yy_aconf->modes |= UMODE_BOTS;
1171	>	if (conf_parser_ctx.pass == 2)
1172	>	block_state.modes.value |= UMODE_BOTS;
1173		} | T_CCONN
1174		{
1175	<	if (ypass == 2)
1176	<	yy_aconf->modes |= UMODE_CCONN;
1175	>	if (conf_parser_ctx.pass == 2)
1176	>	block_state.modes.value |= UMODE_CCONN;
1177		} | T_DEAF
1178		{
1179	<	if (ypass == 2)
1180	<	yy_aconf->modes |= UMODE_DEAF;
1179	>	if (conf_parser_ctx.pass == 2)
1180	>	block_state.modes.value |= UMODE_DEAF;
1181		} | T_DEBUG
1182		{
1183	<	if (ypass == 2)
1184	<	yy_aconf->modes |= UMODE_DEBUG;
1183	>	if (conf_parser_ctx.pass == 2)
1184	>	block_state.modes.value |= UMODE_DEBUG;
1185		} | T_FULL
1186		{
1187	<	if (ypass == 2)
1188	<	yy_aconf->modes |= UMODE_FULL;
1187	>	if (conf_parser_ctx.pass == 2)
1188	>	block_state.modes.value |= UMODE_FULL;
1189	>	} | HIDDEN
1190	>	{
1191	>	if (conf_parser_ctx.pass == 2)
1192	>	block_state.modes.value |= UMODE_HIDDEN;
1193		} | T_SKILL
1194		{
1195	<	if (ypass == 2)
1196	<	yy_aconf->modes |= UMODE_SKILL;
1195	>	if (conf_parser_ctx.pass == 2)
1196	>	block_state.modes.value |= UMODE_SKILL;
1197		} | T_NCHANGE
1198		{
1199	<	if (ypass == 2)
1200	<	yy_aconf->modes |= UMODE_NCHANGE;
1199	>	if (conf_parser_ctx.pass == 2)
1200	>	block_state.modes.value |= UMODE_NCHANGE;
1201		} | T_REJ
1202		{
1203	<	if (ypass == 2)
1204	<	yy_aconf->modes |= UMODE_REJ;
1203	>	if (conf_parser_ctx.pass == 2)
1204	>	block_state.modes.value |= UMODE_REJ;
1205		} | T_UNAUTH
1206		{
1207	<	if (ypass == 2)
1208	<	yy_aconf->modes |= UMODE_UNAUTH;
1207	>	if (conf_parser_ctx.pass == 2)
1208	>	block_state.modes.value |= UMODE_UNAUTH;
1209		} | T_SPY
1210		{
1211	<	if (ypass == 2)
1212	<	yy_aconf->modes |= UMODE_SPY;
1211	>	if (conf_parser_ctx.pass == 2)
1212	>	block_state.modes.value |= UMODE_SPY;
1213		} | T_EXTERNAL
1214		{
1215	<	if (ypass == 2)
1216	<	yy_aconf->modes |= UMODE_EXTERNAL;
1215	>	if (conf_parser_ctx.pass == 2)
1216	>	block_state.modes.value |= UMODE_EXTERNAL;
1217		} | T_OPERWALL
1218		{
1219	<	if (ypass == 2)
1220	<	yy_aconf->modes |= UMODE_OPERWALL;
1219	>	if (conf_parser_ctx.pass == 2)
1220	>	block_state.modes.value |= UMODE_OPERWALL;
1221		} | T_SERVNOTICE
1222		{
1223	<	if (ypass == 2)
1224	<	yy_aconf->modes |= UMODE_SERVNOTICE;
1223	>	if (conf_parser_ctx.pass == 2)
1224	>	block_state.modes.value |= UMODE_SERVNOTICE;
1225		} | T_INVISIBLE
1226		{
1227	<	if (ypass == 2)
1228	<	yy_aconf->modes |= UMODE_INVISIBLE;
1227	>	if (conf_parser_ctx.pass == 2)
1228	>	block_state.modes.value |= UMODE_INVISIBLE;
1229		} | T_WALLOP
1230		{
1231	<	if (ypass == 2)
1232	<	yy_aconf->modes |= UMODE_WALLOP;
1231	>	if (conf_parser_ctx.pass == 2)
1232	>	block_state.modes.value |= UMODE_WALLOP;
1233		} | T_SOFTCALLERID
1234		{
1235	<	if (ypass == 2)
1236	<	yy_aconf->modes |= UMODE_SOFTCALLERID;
1235	>	if (conf_parser_ctx.pass == 2)
1236	>	block_state.modes.value |= UMODE_SOFTCALLERID;
1237		} | T_CALLERID
1238		{
1239	<	if (ypass == 2)
1240	<	yy_aconf->modes |= UMODE_CALLERID;
1239	>	if (conf_parser_ctx.pass == 2)
1240	>	block_state.modes.value |= UMODE_CALLERID;
1241		} | T_LOCOPS
1242		{
1243	<	if (ypass == 2)
1244	<	yy_aconf->modes |= UMODE_LOCOPS;
1245	<	};
1246	<
1247	<	oper_global_kill: GLOBAL_KILL '=' TBOOL ';'
1248	<	{
1249	<	if (ypass == 2)
1255	<	{
1256	<	if (yylval.number)
1257	<	yy_aconf->port |= OPER_FLAG_GLOBAL_KILL;
1258	<	else
1259	<	yy_aconf->port &= ~OPER_FLAG_GLOBAL_KILL;
1260	<	}
1261	<	};
1262	<
1263	<	oper_remote: REMOTE '=' TBOOL ';'
1264	<	{
1265	<	if (ypass == 2)
1266	<	{
1267	<	if (yylval.number)
1268	<	yy_aconf->port |= OPER_FLAG_REMOTE;
1269	<	else
1270	<	yy_aconf->port &= ~OPER_FLAG_REMOTE;
1271	<	}
1272	<	};
1273	<
1274	<	oper_remoteban: REMOTEBAN '=' TBOOL ';'
1275	<	{
1276	<	if (ypass == 2)
1277	<	{
1278	<	if (yylval.number)
1279	<	yy_aconf->port |= OPER_FLAG_REMOTEBAN;
1280	<	else
1281	<	yy_aconf->port &= ~OPER_FLAG_REMOTEBAN;
1282	<	}
1283	<	};
1284	<
1285	<	oper_kline: KLINE '=' TBOOL ';'
1286	<	{
1287	<	if (ypass == 2)
1288	<	{
1289	<	if (yylval.number)
1290	<	yy_aconf->port |= OPER_FLAG_K;
1291	<	else
1292	<	yy_aconf->port &= ~OPER_FLAG_K;
1293	<	}
1294	<	};
1295	<
1296	<	oper_xline: XLINE '=' TBOOL ';'
1297	<	{
1298	<	if (ypass == 2)
1299	<	{
1300	<	if (yylval.number)
1301	<	yy_aconf->port |= OPER_FLAG_X;
1302	<	else
1303	<	yy_aconf->port &= ~OPER_FLAG_X;
1304	<	}
1305	<	};
1306	<
1307	<	oper_unkline: UNKLINE '=' TBOOL ';'
1308	<	{
1309	<	if (ypass == 2)
1310	<	{
1311	<	if (yylval.number)
1312	<	yy_aconf->port |= OPER_FLAG_UNKLINE;
1313	<	else
1314	<	yy_aconf->port &= ~OPER_FLAG_UNKLINE;
1315	<	}
1316	<	};
1317	<
1318	<	oper_gline: GLINE '=' TBOOL ';'
1319	<	{
1320	<	if (ypass == 2)
1321	<	{
1322	<	if (yylval.number)
1323	<	yy_aconf->port |= OPER_FLAG_GLINE;
1324	<	else
1325	<	yy_aconf->port &= ~OPER_FLAG_GLINE;
1326	<	}
1327	<	};
1328	<
1329	<	oper_nick_changes: NICK_CHANGES '=' TBOOL ';'
1330	<	{
1331	<	if (ypass == 2)
1332	<	{
1333	<	if (yylval.number)
1334	<	yy_aconf->port |= OPER_FLAG_N;
1335	<	else
1336	<	yy_aconf->port &= ~OPER_FLAG_N;
1337	<	}
1338	<	};
1339	<
1340	<	oper_die: DIE '=' TBOOL ';'
1341	<	{
1342	<	if (ypass == 2)
1343	<	{
1344	<	if (yylval.number)
1345	<	yy_aconf->port |= OPER_FLAG_DIE;
1346	<	else
1347	<	yy_aconf->port &= ~OPER_FLAG_DIE;
1348	<	}
1349	<	};
1350	<
1351	<	oper_rehash: REHASH '=' TBOOL ';'
1352	<	{
1353	<	if (ypass == 2)
1354	<	{
1355	<	if (yylval.number)
1356	<	yy_aconf->port |= OPER_FLAG_REHASH;
1357	<	else
1358	<	yy_aconf->port &= ~OPER_FLAG_REHASH;
1359	<	}
1360	<	};
1361	<
1362	<	oper_admin: ADMIN '=' TBOOL ';'
1363	<	{
1364	<	if (ypass == 2)
1365	<	{
1366	<	if (yylval.number)
1367	<	yy_aconf->port |= OPER_FLAG_ADMIN;
1368	<	else
1369	<	yy_aconf->port &= ~OPER_FLAG_ADMIN;
1370	<	}
1371	<	};
1372	<
1373	<	oper_hidden_admin: HIDDEN_ADMIN '=' TBOOL ';'
1374	<	{
1375	<	if (ypass == 2)
1376	<	{
1377	<	if (yylval.number)
1378	<	yy_aconf->port |= OPER_FLAG_HIDDEN_ADMIN;
1379	<	else
1380	<	yy_aconf->port &= ~OPER_FLAG_HIDDEN_ADMIN;
1381	<	}
1382	<	};
1383	<
1384	<	oper_hidden_oper: HIDDEN_OPER '=' TBOOL ';'
1243	>	if (conf_parser_ctx.pass == 2)
1244	>	block_state.modes.value |= UMODE_LOCOPS;
1245	>	} | T_NONONREG
1246	>	{
1247	>	if (conf_parser_ctx.pass == 2)
1248	>	block_state.modes.value |= UMODE_REGONLY;
1249	>	} | T_FARCONNECT
1250		{
1251	<	if (ypass == 2)
1252	<	{
1388	<	if (yylval.number)
1389	<	yy_aconf->port |= OPER_FLAG_HIDDEN_OPER;
1390	<	else
1391	<	yy_aconf->port &= ~OPER_FLAG_HIDDEN_OPER;
1392	<	}
1393	<	};
1394	<
1395	<	oper_operwall: T_OPERWALL '=' TBOOL ';'
1396	<	{
1397	<	if (ypass == 2)
1398	<	{
1399	<	if (yylval.number)
1400	<	yy_aconf->port |= OPER_FLAG_OPERWALL;
1401	<	else
1402	<	yy_aconf->port &= ~OPER_FLAG_OPERWALL;
1403	<	}
1251	>	if (conf_parser_ctx.pass == 2)
1252	>	block_state.modes.value |= UMODE_FARCONNECT;
1253		};
1254
1255		oper_flags: IRCD_FLAGS
1256		{
1257	+	if (conf_parser_ctx.pass == 2)
1258	+	block_state.port.value = 0;
1259		} '='  oper_flags_items ';';
1260
1261		oper_flags_items: oper_flags_items ',' oper_flags_item | oper_flags_item;
1262	<	oper_flags_item: NOT { not_atom = 1; } oper_flags_item_atom
1412	<	| { not_atom = 0; } oper_flags_item_atom;
1413	<
1414	<	oper_flags_item_atom: GLOBAL_KILL
1262	>	oper_flags_item: KILL ':' REMOTE
1263		{
1264	<	if (ypass == 2)
1265	<	{
1266	<	if (not_atom)yy_aconf->port &= ~OPER_FLAG_GLOBAL_KILL;
1267	<	else yy_aconf->port |= OPER_FLAG_GLOBAL_KILL;
1268	<	}
1269	<	} | REMOTE
1264	>	if (conf_parser_ctx.pass == 2)
1265	>	block_state.port.value |= OPER_FLAG_KILL_REMOTE;
1266	>	} | KILL
1267	>	{
1268	>	if (conf_parser_ctx.pass == 2)
1269	>	block_state.port.value |= OPER_FLAG_KILL;
1270	>	} | CONNECT ':' REMOTE
1271	>	{
1272	>	if (conf_parser_ctx.pass == 2)
1273	>	block_state.port.value |= OPER_FLAG_CONNECT_REMOTE;
1274	>	} | CONNECT
1275	>	{
1276	>	if (conf_parser_ctx.pass == 2)
1277	>	block_state.port.value |= OPER_FLAG_CONNECT;
1278	>	} | SQUIT ':' REMOTE
1279	>	{
1280	>	if (conf_parser_ctx.pass == 2)
1281	>	block_state.port.value |= OPER_FLAG_SQUIT_REMOTE;
1282	>	} | SQUIT
1283		{
1284	<	if (ypass == 2)
1285	<	{
1425	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_REMOTE;
1426	<	else yy_aconf->port |= OPER_FLAG_REMOTE;
1427	<	}
1284	>	if (conf_parser_ctx.pass == 2)
1285	>	block_state.port.value |= OPER_FLAG_SQUIT;
1286		} | KLINE
1287		{
1288	<	if (ypass == 2)
1289	<	{
1432	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_K;
1433	<	else yy_aconf->port |= OPER_FLAG_K;
1434	<	}
1288	>	if (conf_parser_ctx.pass == 2)
1289	>	block_state.port.value |= OPER_FLAG_K;
1290		} | UNKLINE
1291		{
1292	<	if (ypass == 2)
1293	<	{
1294	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_UNKLINE;
1295	<	else yy_aconf->port |= OPER_FLAG_UNKLINE;
1296	<	}
1292	>	if (conf_parser_ctx.pass == 2)
1293	>	block_state.port.value |= OPER_FLAG_UNKLINE;
1294	>	} | T_DLINE
1295	>	{
1296	>	if (conf_parser_ctx.pass == 2)
1297	>	block_state.port.value |= OPER_FLAG_DLINE;
1298	>	} | T_UNDLINE
1299	>	{
1300	>	if (conf_parser_ctx.pass == 2)
1301	>	block_state.port.value |= OPER_FLAG_UNDLINE;
1302		} | XLINE
1303		{
1304	<	if (ypass == 2)
1305	<	{
1446	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_X;
1447	<	else yy_aconf->port |= OPER_FLAG_X;
1448	<	}
1304	>	if (conf_parser_ctx.pass == 2)
1305	>	block_state.port.value |= OPER_FLAG_X;
1306		} | GLINE
1307		{
1308	<	if (ypass == 2)
1309	<	{
1453	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_GLINE;
1454	<	else yy_aconf->port |= OPER_FLAG_GLINE;
1455	<	}
1308	>	if (conf_parser_ctx.pass == 2)
1309	>	block_state.port.value |= OPER_FLAG_GLINE;
1310		} | DIE
1311		{
1312	<	if (ypass == 2)
1313	<	{
1314	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_DIE;
1315	<	else yy_aconf->port |= OPER_FLAG_DIE;
1316	<	}
1312	>	if (conf_parser_ctx.pass == 2)
1313	>	block_state.port.value |= OPER_FLAG_DIE;
1314	>	} | T_RESTART
1315	>	{
1316	>	if (conf_parser_ctx.pass == 2)
1317	>	block_state.port.value |= OPER_FLAG_RESTART;
1318		} | REHASH
1319		{
1320	<	if (ypass == 2)
1321	<	{
1467	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_REHASH;
1468	<	else yy_aconf->port |= OPER_FLAG_REHASH;
1469	<	}
1320	>	if (conf_parser_ctx.pass == 2)
1321	>	block_state.port.value |= OPER_FLAG_REHASH;
1322		} | ADMIN
1323		{
1324	<	if (ypass == 2)
1325	<	{
1474	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_ADMIN;
1475	<	else yy_aconf->port |= OPER_FLAG_ADMIN;
1476	<	}
1477	<	} | HIDDEN_ADMIN
1478	<	{
1479	<	if (ypass == 2)
1480	<	{
1481	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_HIDDEN_ADMIN;
1482	<	else yy_aconf->port |= OPER_FLAG_HIDDEN_ADMIN;
1483	<	}
1484	<	} | NICK_CHANGES
1485	<	{
1486	<	if (ypass == 2)
1487	<	{
1488	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_N;
1489	<	else yy_aconf->port |= OPER_FLAG_N;
1490	<	}
1324	>	if (conf_parser_ctx.pass == 2)
1325	>	block_state.port.value |= OPER_FLAG_ADMIN;
1326		} | T_OPERWALL
1327		{
1328	<	if (ypass == 2)
1329	<	{
1330	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_OPERWALL;
1331	<	else yy_aconf->port |= OPER_FLAG_OPERWALL;
1332	<	}
1333	<	} | OPER_SPY_T
1328	>	if (conf_parser_ctx.pass == 2)
1329	>	block_state.port.value |= OPER_FLAG_OPERWALL;
1330	>	} | T_GLOBOPS
1331	>	{
1332	>	if (conf_parser_ctx.pass == 2)
1333	>	block_state.port.value |= OPER_FLAG_GLOBOPS;
1334	>	} | T_WALLOPS
1335		{
1336	<	if (ypass == 2)
1337	<	{
1338	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_OPER_SPY;
1503	<	else yy_aconf->port |= OPER_FLAG_OPER_SPY;
1504	<	}
1505	<	} | HIDDEN_OPER
1336	>	if (conf_parser_ctx.pass == 2)
1337	>	block_state.port.value |= OPER_FLAG_WALLOPS;
1338	>	} | T_LOCOPS
1339		{
1340	<	if (ypass == 2)
1341	<	{
1509	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_HIDDEN_OPER;
1510	<	else yy_aconf->port |= OPER_FLAG_HIDDEN_OPER;
1511	<	}
1340	>	if (conf_parser_ctx.pass == 2)
1341	>	block_state.port.value |= OPER_FLAG_LOCOPS;
1342		} | REMOTEBAN
1343		{
1344	<	if (ypass == 2)
1345	<	{
1346	<	if (not_atom) yy_aconf->port &= ~OPER_FLAG_REMOTEBAN;
1347	<	else yy_aconf->port |= OPER_FLAG_REMOTEBAN;
1348	<	}
1349	<	} | ENCRYPTED
1344	>	if (conf_parser_ctx.pass == 2)
1345	>	block_state.port.value |= OPER_FLAG_REMOTEBAN;
1346	>	} | T_SET
1347	>	{
1348	>	if (conf_parser_ctx.pass == 2)
1349	>	block_state.port.value |= OPER_FLAG_SET;
1350	>	} | MODULE
1351		{
1352	<	if (ypass == 2)
1353	<	{
1523	<	if (not_atom) ClearConfEncrypted(yy_aconf);
1524	<	else SetConfEncrypted(yy_aconf);
1525	<	}
1352	>	if (conf_parser_ctx.pass == 2)
1353	>	block_state.port.value |= OPER_FLAG_MODULE;
1354		};
1355
1356
#	Line 1531 | Line 1359 | oper_flags_item_atom: GLOBAL_KILL
1359		***************************************************************************/
1360		class_entry: CLASS
1361		{
1362	<	if (ypass == 1)
1363	<	{
1536	<	yy_conf = make_conf_item(CLASS_TYPE);
1537	<	yy_class = (struct ClassItem *)map_to_conf(yy_conf);
1538	<	}
1539	<	} class_name_b '{' class_items '}' ';'
1540	<	{
1541	<	if (ypass == 1)
1542	<	{
1543	<	struct ConfItem *cconf;
1544	<	struct ClassItem *class = NULL;
1545	<
1546	<	if (yy_class_name == NULL)
1547	<	{
1548	<	delete_conf_item(yy_conf);
1549	<	}
1550	<	else
1551	<	{
1552	<	cconf = find_exact_name_conf(CLASS_TYPE, yy_class_name, NULL, NULL);
1362	>	if (conf_parser_ctx.pass != 1)
1363	>	break;
1364
1365	<	if (cconf != NULL)                /* The class existed already */
1555	<	{
1556	<	rebuild_cidr_class(cconf, yy_class);
1557	<	class = (struct ClassItem *) map_to_conf(cconf);
1558	<	*class = *yy_class;
1559	<	delete_conf_item(yy_conf);
1365	>	reset_block_state();
1366
1367	<	MyFree(cconf->name);            /* Allows case change of class name */
1368	<	cconf->name = yy_class_name;
1369	<	}
1370	<	else      /* Brand new class */
1371	<	{
1372	<	MyFree(yy_conf->name);          /* just in case it was allocated */
1373	<	yy_conf->name = yy_class_name;
1374	<	}
1375	<	}
1376	<	yy_class_name = NULL;
1377	<	}
1367	>	block_state.ping_freq.value = DEFAULT_PINGFREQUENCY;
1368	>	block_state.con_freq.value  = DEFAULT_CONNECTFREQUENCY;
1369	>	block_state.max_total.value = MAXIMUM_LINKS_DEFAULT;
1370	>	block_state.max_sendq.value = DEFAULT_SENDQ;
1371	>	block_state.max_recvq.value = DEFAULT_RECVQ;
1372	>	} '{' class_items '}' ';'
1373	>	{
1374	>	struct ClassItem *class = NULL;
1375	>
1376	>	if (conf_parser_ctx.pass != 1)
1377	>	break;
1378	>
1379	>	if (!block_state.class.buf[0])
1380	>	break;
1381	>
1382	>	if (!(class = class_find(block_state.class.buf, 0)))
1383	>	class = class_make();
1384	>
1385	>	class->active = 1;
1386	>	MyFree(class->name);
1387	>	class->name = xstrdup(block_state.class.buf);
1388	>	class->ping_freq = block_state.ping_freq.value;
1389	>	class->max_perip = block_state.max_perip.value;
1390	>	class->con_freq = block_state.con_freq.value;
1391	>	class->max_total = block_state.max_total.value;
1392	>	class->max_global = block_state.max_global.value;
1393	>	class->max_local = block_state.max_local.value;
1394	>	class->max_ident = block_state.max_ident.value;
1395	>	class->max_sendq = block_state.max_sendq.value;
1396	>	class->max_recvq = block_state.max_recvq.value;
1397	>
1398	>	if (block_state.min_idle.value > block_state.max_idle.value)
1399	>	{
1400	>	block_state.min_idle.value = 0;
1401	>	block_state.max_idle.value = 0;
1402	>	block_state.flags.value &= ~CLASS_FLAGS_FAKE_IDLE;
1403	>	}
1404	>
1405	>	class->flags = block_state.flags.value;
1406	>	class->min_idle = block_state.min_idle.value;
1407	>	class->max_idle = block_state.max_idle.value;
1408	>
1409	>	if (class->number_per_cidr && block_state.number_per_cidr.value)
1410	>	if ((class->cidr_bitlen_ipv4 && block_state.cidr_bitlen_ipv4.value) ||
1411	>	(class->cidr_bitlen_ipv6 && block_state.cidr_bitlen_ipv6.value))
1412	>	if ((class->cidr_bitlen_ipv4 != block_state.cidr_bitlen_ipv4.value) ||
1413	>	(class->cidr_bitlen_ipv6 != block_state.cidr_bitlen_ipv6.value))
1414	>	rebuild_cidr_list(class);
1415	>
1416	>	class->cidr_bitlen_ipv4 = block_state.cidr_bitlen_ipv4.value;
1417	>	class->cidr_bitlen_ipv6 = block_state.cidr_bitlen_ipv6.value;
1418	>	class->number_per_cidr = block_state.number_per_cidr.value;
1419		};
1420
1574	–	class_name_b: | class_name_t;
1575	–
1421		class_items:    class_items class_item | class_item;
1422		class_item:     class_name |
1423		class_cidr_bitlen_ipv4 | class_cidr_bitlen_ipv6 |
1424		class_ping_time |
1580	–	class_ping_warning |
1425		class_number_per_cidr |
1426		class_number_per_ip |
1427		class_connectfreq |
#	Line 1585 | Line 1429 | class_item:     class_name |
1429		class_max_global |
1430		class_max_local |
1431		class_max_ident |
1432	<	class_sendq |
1432	>	class_sendq | class_recvq |
1433	>	class_min_idle |
1434	>	class_max_idle |
1435	>	class_flags |
1436		error ';' ;
1437
1438		class_name: NAME '=' QSTRING ';'
1439		{
1440	<	if (ypass == 1)
1441	<	{
1595	<	MyFree(yy_class_name);
1596	<	DupString(yy_class_name, yylval.string);
1597	<	}
1598	<	};
1599	<
1600	<	class_name_t: QSTRING
1601	<	{
1602	<	if (ypass == 1)
1603	<	{
1604	<	MyFree(yy_class_name);
1605	<	DupString(yy_class_name, yylval.string);
1606	<	}
1440	>	if (conf_parser_ctx.pass == 1)
1441	>	strlcpy(block_state.class.buf, yylval.string, sizeof(block_state.class.buf));
1442		};
1443
1444		class_ping_time: PING_TIME '=' timespec ';'
1445		{
1446	<	if (ypass == 1)
1447	<	PingFreq(yy_class) = $3;
1613	<	};
1614	<
1615	<	class_ping_warning: PING_WARNING '=' timespec ';'
1616	<	{
1617	<	if (ypass == 1)
1618	<	PingWarning(yy_class) = $3;
1446	>	if (conf_parser_ctx.pass == 1)
1447	>	block_state.ping_freq.value = $3;
1448		};
1449
1450		class_number_per_ip: NUMBER_PER_IP '=' NUMBER ';'
1451		{
1452	<	if (ypass == 1)
1453	<	MaxPerIp(yy_class) = $3;
1452	>	if (conf_parser_ctx.pass == 1)
1453	>	block_state.max_perip.value = $3;
1454		};
1455
1456		class_connectfreq: CONNECTFREQ '=' timespec ';'
1457		{
1458	<	if (ypass == 1)
1459	<	ConFreq(yy_class) = $3;
1458	>	if (conf_parser_ctx.pass == 1)
1459	>	block_state.con_freq.value = $3;
1460		};
1461
1462		class_max_number: MAX_NUMBER '=' NUMBER ';'
1463		{
1464	<	if (ypass == 1)
1465	<	MaxTotal(yy_class) = $3;
1464	>	if (conf_parser_ctx.pass == 1)
1465	>	block_state.max_total.value = $3;
1466		};
1467
1468		class_max_global: MAX_GLOBAL '=' NUMBER ';'
1469		{
1470	<	if (ypass == 1)
1471	<	MaxGlobal(yy_class) = $3;
1470	>	if (conf_parser_ctx.pass == 1)
1471	>	block_state.max_global.value = $3;
1472		};
1473
1474		class_max_local: MAX_LOCAL '=' NUMBER ';'
1475		{
1476	<	if (ypass == 1)
1477	<	MaxLocal(yy_class) = $3;
1476	>	if (conf_parser_ctx.pass == 1)
1477	>	block_state.max_local.value = $3;
1478		};
1479
1480		class_max_ident: MAX_IDENT '=' NUMBER ';'
1481		{
1482	<	if (ypass == 1)
1483	<	MaxIdent(yy_class) = $3;
1482	>	if (conf_parser_ctx.pass == 1)
1483	>	block_state.max_ident.value = $3;
1484		};
1485
1486		class_sendq: SENDQ '=' sizespec ';'
1487		{
1488	<	if (ypass == 1)
1489	<	MaxSendq(yy_class) = $3;
1488	>	if (conf_parser_ctx.pass == 1)
1489	>	block_state.max_sendq.value = $3;
1490	>	};
1491	>
1492	>	class_recvq: T_RECVQ '=' sizespec ';'
1493	>	{
1494	>	if (conf_parser_ctx.pass == 1)
1495	>	if ($3 >= CLIENT_FLOOD_MIN && $3 <= CLIENT_FLOOD_MAX)
1496	>	block_state.max_recvq.value = $3;
1497		};
1498
1499		class_cidr_bitlen_ipv4: CIDR_BITLEN_IPV4 '=' NUMBER ';'
1500		{
1501	<	if (ypass == 1)
1502	<	CidrBitlenIPV4(yy_class) = $3;
1501	>	if (conf_parser_ctx.pass == 1)
1502	>	block_state.cidr_bitlen_ipv4.value = $3 > 32 ? 32 : $3;
1503		};
1504
1505		class_cidr_bitlen_ipv6: CIDR_BITLEN_IPV6 '=' NUMBER ';'
1506		{
1507	<	if (ypass == 1)
1508	<	CidrBitlenIPV6(yy_class) = $3;
1507	>	if (conf_parser_ctx.pass == 1)
1508	>	block_state.cidr_bitlen_ipv6.value = $3 > 128 ? 128 : $3;
1509		};
1510
1511		class_number_per_cidr: NUMBER_PER_CIDR '=' NUMBER ';'
1512		{
1513	<	if (ypass == 1)
1514	<	NumberPerCidr(yy_class) = $3;
1513	>	if (conf_parser_ctx.pass == 1)
1514	>	block_state.number_per_cidr.value = $3;
1515	>	};
1516	>
1517	>	class_min_idle: MIN_IDLE '=' timespec ';'
1518	>	{
1519	>	if (conf_parser_ctx.pass != 1)
1520	>	break;
1521	>
1522	>	block_state.min_idle.value = $3;
1523	>	block_state.flags.value |= CLASS_FLAGS_FAKE_IDLE;
1524	>	};
1525	>
1526	>	class_max_idle: MAX_IDLE '=' timespec ';'
1527	>	{
1528	>	if (conf_parser_ctx.pass != 1)
1529	>	break;
1530	>
1531	>	block_state.max_idle.value = $3;
1532	>	block_state.flags.value |= CLASS_FLAGS_FAKE_IDLE;
1533	>	};
1534	>
1535	>	class_flags: IRCD_FLAGS
1536	>	{
1537	>	if (conf_parser_ctx.pass == 1)
1538	>	block_state.flags.value &= CLASS_FLAGS_FAKE_IDLE;
1539	>	} '='  class_flags_items ';';
1540	>
1541	>	class_flags_items: class_flags_items ',' class_flags_item | class_flags_item;
1542	>	class_flags_item: RANDOM_IDLE
1543	>	{
1544	>	if (conf_parser_ctx.pass == 1)
1545	>	block_state.flags.value |= CLASS_FLAGS_RANDOM_IDLE;
1546	>	} | HIDE_IDLE_FROM_OPERS
1547	>	{
1548	>	if (conf_parser_ctx.pass == 1)
1549	>	block_state.flags.value |= CLASS_FLAGS_HIDE_IDLE_FROM_OPERS;
1550		};
1551
1552	+
1553		/***************************************************************************
1554		*  section listen
1555		***************************************************************************/
1556		listen_entry: LISTEN
1557		{
1558	<	if (ypass == 2)
1559	<	{
1560	<	listener_address = NULL;
1689	<	listener_flags = 0;
1690	<	}
1691	<	} '{' listen_items '}' ';'
1692	<	{
1693	<	if (ypass == 2)
1694	<	{
1695	<	MyFree(listener_address);
1696	<	listener_address = NULL;
1697	<	}
1698	<	};
1558	>	if (conf_parser_ctx.pass == 2)
1559	>	reset_block_state();
1560	>	} '{' listen_items '}' ';';
1561
1562		listen_flags: IRCD_FLAGS
1563		{
1564	+	block_state.flags.value = 0;
1565		} '='  listen_flags_items ';';
1566
1567		listen_flags_items: listen_flags_items ',' listen_flags_item | listen_flags_item;
1568		listen_flags_item: T_SSL
1569		{
1570	<	if (ypass == 2)
1571	<	listener_flags |= LISTENER_SSL;
1570	>	if (conf_parser_ctx.pass == 2)
1571	>	block_state.flags.value |= LISTENER_SSL;
1572		} | HIDDEN
1573		{
1574	<	if (ypass == 2)
1575	<	listener_flags |= LISTENER_HIDDEN;
1574	>	if (conf_parser_ctx.pass == 2)
1575	>	block_state.flags.value |= LISTENER_HIDDEN;
1576	>	} | T_SERVER
1577	>	{
1578	>	if (conf_parser_ctx.pass == 2)
1579	>	block_state.flags.value |= LISTENER_SERVER;
1580		};
1581
1582		listen_items:   listen_items listen_item | listen_item;
1583	<	listen_item:    listen_port | listen_flags | listen_address | listen_host | error ';' ;
1583	>	listen_item:    listen_port | listen_flags | listen_address | listen_host | error ';';
1584
1585	<	listen_port: PORT '=' port_items ';' ;
1585	>	listen_port: PORT '=' port_items { block_state.flags.value = 0; } ';';
1586
1587		port_items: port_items ',' port_item | port_item;
1588
1589		port_item: NUMBER
1590		{
1591	<	if (ypass == 2)
1591	>	if (conf_parser_ctx.pass == 2)
1592		{
1593	<	if ((listener_flags & LISTENER_SSL))
1593	>	if (block_state.flags.value & LISTENER_SSL)
1594		#ifdef HAVE_LIBCRYPTO
1595	<	if (!ServerInfo.ctx)
1595	>	if (!ServerInfo.server_ctx)
1596		#endif
1597		{
1598	<	yyerror("SSL not available - port closed");
1598	>	conf_error_report("SSL not available - port closed");
1599		break;
1600		}
1601	<	add_listener($1, listener_address, listener_flags);
1735	<	listener_flags = 0;
1601	>	add_listener($1, block_state.addr.buf, block_state.flags.value);
1602		}
1603		} | NUMBER TWODOTS NUMBER
1604		{
1605	<	if (ypass == 2)
1605	>	if (conf_parser_ctx.pass == 2)
1606		{
1607		int i;
1608
1609	<	if ((listener_flags & LISTENER_SSL))
1609	>	if (block_state.flags.value & LISTENER_SSL)
1610		#ifdef HAVE_LIBCRYPTO
1611	<	if (!ServerInfo.ctx)
1611	>	if (!ServerInfo.server_ctx)
1612		#endif
1613		{
1614	<	yyerror("SSL not available - port closed");
1614	>	conf_error_report("SSL not available - port closed");
1615		break;
1616		}
1617
1618		for (i = $1; i <= $3; ++i)
1619	<	add_listener(i, listener_address, listener_flags);
1754	<
1755	<	listener_flags = 0;
1619	>	add_listener(i, block_state.addr.buf, block_state.flags.value);
1620		}
1621		};
1622
1623		listen_address: IP '=' QSTRING ';'
1624		{
1625	<	if (ypass == 2)
1626	<	{
1763	<	MyFree(listener_address);
1764	<	DupString(listener_address, yylval.string);
1765	<	}
1625	>	if (conf_parser_ctx.pass == 2)
1626	>	strlcpy(block_state.addr.buf, yylval.string, sizeof(block_state.addr.buf));
1627		};
1628
1629		listen_host: HOST '=' QSTRING ';'
1630		{
1631	<	if (ypass == 2)
1632	<	{
1772	<	MyFree(listener_address);
1773	<	DupString(listener_address, yylval.string);
1774	<	}
1631	>	if (conf_parser_ctx.pass == 2)
1632	>	strlcpy(block_state.addr.buf, yylval.string, sizeof(block_state.addr.buf));
1633		};
1634
1635		/***************************************************************************
#	Line 1779 | Line 1637 | listen_host: HOST '=' QSTRING ';'
1637		***************************************************************************/
1638		auth_entry: IRCD_AUTH
1639		{
1640	<	if (ypass == 2)
1641	<	{
1784	<	yy_conf = make_conf_item(CLIENT_TYPE);
1785	<	yy_aconf = map_to_conf(yy_conf);
1786	<	}
1787	<	else
1788	<	{
1789	<	MyFree(class_name);
1790	<	class_name = NULL;
1791	<	}
1640	>	if (conf_parser_ctx.pass == 2)
1641	>	reset_block_state();
1642		} '{' auth_items '}' ';'
1643		{
1644	<	if (ypass == 2)
1795	<	{
1796	<	struct CollectItem *yy_tmp = NULL;
1797	<	dlink_node *ptr = NULL, *next_ptr = NULL;
1798	<
1799	<	if (yy_aconf->user && yy_aconf->host)
1800	<	{
1801	<	conf_add_class_to_conf(yy_conf, class_name);
1802	<	add_conf_by_address(CONF_CLIENT, yy_aconf);
1803	<	}
1804	<	else
1805	<	delete_conf_item(yy_conf);
1806	<
1807	<	/* copy over settings from first struct */
1808	<	DLINK_FOREACH_SAFE(ptr, next_ptr, col_conf_list.head)
1809	<	{
1810	<	struct AccessItem *new_aconf;
1811	<	struct ConfItem *new_conf;
1812	<
1813	<	new_conf = make_conf_item(CLIENT_TYPE);
1814	<	new_aconf = map_to_conf(new_conf);
1815	<
1816	<	yy_tmp = ptr->data;
1817	<
1818	<	assert(yy_tmp->user && yy_tmp->host);
1644	>	dlink_node *ptr = NULL;
1645
1646	<	if (yy_aconf->passwd != NULL)
1647	<	DupString(new_aconf->passwd, yy_aconf->passwd);
1822	<	if (yy_conf->name != NULL)
1823	<	DupString(new_conf->name, yy_conf->name);
1824	<	if (yy_aconf->passwd != NULL)
1825	<	DupString(new_aconf->passwd, yy_aconf->passwd);
1646	>	if (conf_parser_ctx.pass != 2)
1647	>	break;
1648
1649	<	new_aconf->flags = yy_aconf->flags;
1650	<	new_aconf->port  = yy_aconf->port;
1651	<
1652	<	DupString(new_aconf->user, yy_tmp->user);
1653	<	collapse(new_aconf->user);
1654	<
1655	<	DupString(new_aconf->host, yy_tmp->host);
1656	<	collapse(new_aconf->host);
1649	>	DLINK_FOREACH(ptr, block_state.mask.list.head)
1650	>	{
1651	>	struct MaskItem *conf = NULL;
1652	>	struct split_nuh_item nuh;
1653	>
1654	>	nuh.nuhmask  = ptr->data;
1655	>	nuh.nickptr  = NULL;
1656	>	nuh.userptr  = block_state.user.buf;
1657	>	nuh.hostptr  = block_state.host.buf;
1658	>	nuh.nicksize = 0;
1659	>	nuh.usersize = sizeof(block_state.user.buf);
1660	>	nuh.hostsize = sizeof(block_state.host.buf);
1661	>	split_nuh(&nuh);
1662	>
1663	>	conf        = conf_make(CONF_CLIENT);
1664	>	conf->user  = xstrdup(block_state.user.buf);
1665	>	conf->host  = xstrdup(block_state.host.buf);
1666	>
1667	>	if (block_state.rpass.buf[0])
1668	>	conf->passwd = xstrdup(block_state.rpass.buf);
1669	>	if (block_state.name.buf[0])
1670	>	conf->name = xstrdup(block_state.name.buf);
1671
1672	<	conf_add_class_to_conf(new_conf, class_name);
1673	<	add_conf_by_address(CONF_CLIENT, new_aconf);
1838	<	dlinkDelete(&yy_tmp->node, &col_conf_list);
1839	<	free_collect_item(yy_tmp);
1840	<	}
1672	>	conf->flags = block_state.flags.value;
1673	>	conf->port  = block_state.port.value;
1674
1675	<	MyFree(class_name);
1676	<	class_name = NULL;
1844	<	yy_conf = NULL;
1845	<	yy_aconf = NULL;
1675	>	conf_add_class_to_conf(conf, block_state.class.buf);
1676	>	add_conf_by_address(CONF_CLIENT, conf);
1677		}
1678		};
1679
1680		auth_items:     auth_items auth_item | auth_item;
1681		auth_item:      auth_user | auth_passwd | auth_class | auth_flags |
1682	<	auth_kline_exempt | auth_need_ident |
1683	<	auth_exceed_limit | auth_no_tilde | auth_gline_exempt |
1853	<	auth_spoof | auth_spoof_notice |
1854	<	auth_redir_serv | auth_redir_port | auth_can_flood |
1855	<	auth_need_password | auth_encrypted | error ';' ;
1682	>	auth_spoof | auth_redir_serv | auth_redir_port |
1683	>	auth_encrypted | error ';' ;
1684
1685		auth_user: USER '=' QSTRING ';'
1686		{
1687	<	if (ypass == 2)
1688	<	{
1861	<	struct CollectItem *yy_tmp;
1862	<
1863	<	if (yy_aconf->user == NULL)
1864	<	split_nuh(yylval.string, NULL, &yy_aconf->user, &yy_aconf->host);
1865	<	else
1866	<	{
1867	<	yy_tmp = MyMalloc(sizeof(struct CollectItem));
1868	<	split_nuh(yylval.string, NULL, &yy_tmp->user, &yy_tmp->host);
1869	<	dlinkAdd(yy_tmp, &yy_tmp->node, &col_conf_list);
1870	<	}
1871	<	}
1687	>	if (conf_parser_ctx.pass == 2)
1688	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.mask.list);
1689		};
1690
1874	–	/* XXX - IP/IPV6 tags don't exist anymore - put IP/IPV6 into user. */
1875	–
1691		auth_passwd: PASSWORD '=' QSTRING ';'
1692		{
1693	<	if (ypass == 2)
1694	<	{
1880	<	/* be paranoid */
1881	<	if (yy_aconf->passwd != NULL)
1882	<	memset(yy_aconf->passwd, 0, strlen(yy_aconf->passwd));
1883	<
1884	<	MyFree(yy_aconf->passwd);
1885	<	DupString(yy_aconf->passwd, yylval.string);
1886	<	}
1887	<	};
1888	<
1889	<	auth_spoof_notice: SPOOF_NOTICE '=' TBOOL ';'
1890	<	{
1891	<	if (ypass == 2)
1892	<	{
1893	<	if (yylval.number)
1894	<	yy_aconf->flags |= CONF_FLAGS_SPOOF_NOTICE;
1895	<	else
1896	<	yy_aconf->flags &= ~CONF_FLAGS_SPOOF_NOTICE;
1897	<	}
1693	>	if (conf_parser_ctx.pass == 2)
1694	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
1695		};
1696
1697		auth_class: CLASS '=' QSTRING ';'
1698		{
1699	<	if (ypass == 2)
1700	<	{
1904	<	MyFree(class_name);
1905	<	DupString(class_name, yylval.string);
1906	<	}
1699	>	if (conf_parser_ctx.pass == 2)
1700	>	strlcpy(block_state.class.buf, yylval.string, sizeof(block_state.class.buf));
1701		};
1702
1703		auth_encrypted: ENCRYPTED '=' TBOOL ';'
1704		{
1705	<	if (ypass == 2)
1705	>	if (conf_parser_ctx.pass == 2)
1706		{
1707		if (yylval.number)
1708	<	SetConfEncrypted(yy_aconf);
1708	>	block_state.flags.value |= CONF_FLAGS_ENCRYPTED;
1709		else
1710	<	ClearConfEncrypted(yy_aconf);
1710	>	block_state.flags.value &= ~CONF_FLAGS_ENCRYPTED;
1711		}
1712		};
1713
1714		auth_flags: IRCD_FLAGS
1715		{
1716	+	if (conf_parser_ctx.pass == 2)
1717	+	block_state.flags.value &= (CONF_FLAGS_ENCRYPTED | CONF_FLAGS_SPOOF_IP);
1718		} '='  auth_flags_items ';';
1719
1720		auth_flags_items: auth_flags_items ',' auth_flags_item | auth_flags_item;
1721	<	auth_flags_item: NOT { not_atom = 1; } auth_flags_item_atom
1926	<	| { not_atom = 0; } auth_flags_item_atom;
1927	<
1928	<	auth_flags_item_atom: SPOOF_NOTICE
1721	>	auth_flags_item: SPOOF_NOTICE
1722		{
1723	<	if (ypass == 2)
1724	<	{
1932	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_SPOOF_NOTICE;
1933	<	else yy_aconf->flags |= CONF_FLAGS_SPOOF_NOTICE;
1934	<	}
1935	<
1723	>	if (conf_parser_ctx.pass == 2)
1724	>	block_state.flags.value |= CONF_FLAGS_SPOOF_NOTICE;
1725		} | EXCEED_LIMIT
1726		{
1727	<	if (ypass == 2)
1728	<	{
1940	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_NOLIMIT;
1941	<	else yy_aconf->flags |= CONF_FLAGS_NOLIMIT;
1942	<	}
1727	>	if (conf_parser_ctx.pass == 2)
1728	>	block_state.flags.value |= CONF_FLAGS_NOLIMIT;
1729		} | KLINE_EXEMPT
1730		{
1731	<	if (ypass == 2)
1732	<	{
1947	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_EXEMPTKLINE;
1948	<	else yy_aconf->flags |= CONF_FLAGS_EXEMPTKLINE;
1949	<	}
1731	>	if (conf_parser_ctx.pass == 2)
1732	>	block_state.flags.value |= CONF_FLAGS_EXEMPTKLINE;
1733		} | NEED_IDENT
1734		{
1735	<	if (ypass == 2)
1736	<	{
1954	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_NEED_IDENTD;
1955	<	else yy_aconf->flags |= CONF_FLAGS_NEED_IDENTD;
1956	<	}
1735	>	if (conf_parser_ctx.pass == 2)
1736	>	block_state.flags.value |= CONF_FLAGS_NEED_IDENTD;
1737		} | CAN_FLOOD
1738		{
1739	<	if (ypass == 2)
1740	<	{
1961	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_CAN_FLOOD;
1962	<	else yy_aconf->flags |= CONF_FLAGS_CAN_FLOOD;
1963	<	}
1964	<	} | CAN_IDLE
1965	<	{
1966	<	if (ypass == 2)
1967	<	{
1968	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_IDLE_LINED;
1969	<	else yy_aconf->flags |= CONF_FLAGS_IDLE_LINED;
1970	<	}
1739	>	if (conf_parser_ctx.pass == 2)
1740	>	block_state.flags.value |= CONF_FLAGS_CAN_FLOOD;
1741		} | NO_TILDE
1742		{
1743	<	if (ypass == 2)
1744	<	{
1975	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_NO_TILDE;
1976	<	else yy_aconf->flags |= CONF_FLAGS_NO_TILDE;
1977	<	}
1743	>	if (conf_parser_ctx.pass == 2)
1744	>	block_state.flags.value |= CONF_FLAGS_NO_TILDE;
1745		} | GLINE_EXEMPT
1746		{
1747	<	if (ypass == 2)
1748	<	{
1982	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_EXEMPTGLINE;
1983	<	else yy_aconf->flags |= CONF_FLAGS_EXEMPTGLINE;
1984	<	}
1747	>	if (conf_parser_ctx.pass == 2)
1748	>	block_state.flags.value |= CONF_FLAGS_EXEMPTGLINE;
1749		} | RESV_EXEMPT
1750		{
1751	<	if (ypass == 2)
1752	<	{
1753	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_EXEMPTRESV;
1990	<	else yy_aconf->flags |= CONF_FLAGS_EXEMPTRESV;
1991	<	}
1992	<	} | NEED_PASSWORD
1993	<	{
1994	<	if (ypass == 2)
1995	<	{
1996	<	if (not_atom) yy_aconf->flags &= ~CONF_FLAGS_NEED_PASSWORD;
1997	<	else yy_aconf->flags |= CONF_FLAGS_NEED_PASSWORD;
1998	<	}
1999	<	};
2000	<
2001	<	auth_kline_exempt: KLINE_EXEMPT '=' TBOOL ';'
2002	<	{
2003	<	if (ypass == 2)
2004	<	{
2005	<	if (yylval.number)
2006	<	yy_aconf->flags |= CONF_FLAGS_EXEMPTKLINE;
2007	<	else
2008	<	yy_aconf->flags &= ~CONF_FLAGS_EXEMPTKLINE;
2009	<	}
2010	<	};
2011	<
2012	<	auth_need_ident: NEED_IDENT '=' TBOOL ';'
2013	<	{
2014	<	if (ypass == 2)
2015	<	{
2016	<	if (yylval.number)
2017	<	yy_aconf->flags |= CONF_FLAGS_NEED_IDENTD;
2018	<	else
2019	<	yy_aconf->flags &= ~CONF_FLAGS_NEED_IDENTD;
2020	<	}
2021	<	};
2022	<
2023	<	auth_exceed_limit: EXCEED_LIMIT '=' TBOOL ';'
2024	<	{
2025	<	if (ypass == 2)
2026	<	{
2027	<	if (yylval.number)
2028	<	yy_aconf->flags |= CONF_FLAGS_NOLIMIT;
2029	<	else
2030	<	yy_aconf->flags &= ~CONF_FLAGS_NOLIMIT;
2031	<	}
2032	<	};
2033	<
2034	<	auth_can_flood: CAN_FLOOD '=' TBOOL ';'
1751	>	if (conf_parser_ctx.pass == 2)
1752	>	block_state.flags.value |= CONF_FLAGS_EXEMPTRESV;
1753	>	} | T_WEBIRC
1754		{
1755	<	if (ypass == 2)
1756	<	{
1757	<	if (yylval.number)
2039	<	yy_aconf->flags |= CONF_FLAGS_CAN_FLOOD;
2040	<	else
2041	<	yy_aconf->flags &= ~CONF_FLAGS_CAN_FLOOD;
2042	<	}
2043	<	};
2044	<
2045	<	auth_no_tilde: NO_TILDE '=' TBOOL ';'
2046	<	{
2047	<	if (ypass == 2)
2048	<	{
2049	<	if (yylval.number)
2050	<	yy_aconf->flags |= CONF_FLAGS_NO_TILDE;
2051	<	else
2052	<	yy_aconf->flags &= ~CONF_FLAGS_NO_TILDE;
2053	<	}
2054	<	};
2055	<
2056	<	auth_gline_exempt: GLINE_EXEMPT '=' TBOOL ';'
1755	>	if (conf_parser_ctx.pass == 2)
1756	>	block_state.flags.value |= CONF_FLAGS_WEBIRC;
1757	>	} | NEED_PASSWORD
1758		{
1759	<	if (ypass == 2)
1760	<	{
2060	<	if (yylval.number)
2061	<	yy_aconf->flags |= CONF_FLAGS_EXEMPTGLINE;
2062	<	else
2063	<	yy_aconf->flags &= ~CONF_FLAGS_EXEMPTGLINE;
2064	<	}
1759	>	if (conf_parser_ctx.pass == 2)
1760	>	block_state.flags.value |= CONF_FLAGS_NEED_PASSWORD;
1761		};
1762
2067	–	/* XXX - need check for illegal hostnames here */
1763		auth_spoof: SPOOF '=' QSTRING ';'
1764		{
1765	<	if (ypass == 2)
1766	<	{
2072	<	MyFree(yy_conf->name);
1765	>	if (conf_parser_ctx.pass != 2)
1766	>	break;
1767
1768	<	if (strlen(yylval.string) < HOSTLEN)
1769	<	{
1770	<	DupString(yy_conf->name, yylval.string);
1771	<	yy_aconf->flags |= CONF_FLAGS_SPOOF_IP;
2078	<	}
2079	<	else
2080	<	{
2081	<	ilog(L_ERROR, "Spoofs must be less than %d..ignoring it", HOSTLEN);
2082	<	yy_conf->name = NULL;
2083	<	}
1768	>	if (strlen(yylval.string) <= HOSTLEN && valid_hostname(yylval.string))
1769	>	{
1770	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1771	>	block_state.flags.value |= CONF_FLAGS_SPOOF_IP;
1772		}
1773	+	else
1774	+	ilog(LOG_TYPE_IRCD, "Spoof either is too long or contains invalid characters. Ignoring it.");
1775		};
1776
1777		auth_redir_serv: REDIRSERV '=' QSTRING ';'
1778		{
1779	<	if (ypass == 2)
1780	<	{
1781	<	yy_aconf->flags |= CONF_FLAGS_REDIR;
1782	<	MyFree(yy_conf->name);
1783	<	DupString(yy_conf->name, yylval.string);
2094	<	}
1779	>	if (conf_parser_ctx.pass != 2)
1780	>	break;
1781	>
1782	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1783	>	block_state.flags.value |= CONF_FLAGS_REDIR;
1784		};
1785
1786		auth_redir_port: REDIRPORT '=' NUMBER ';'
1787		{
1788	<	if (ypass == 2)
1789	<	{
2101	<	yy_aconf->flags |= CONF_FLAGS_REDIR;
2102	<	yy_aconf->port = $3;
2103	<	}
2104	<	};
1788	>	if (conf_parser_ctx.pass != 2)
1789	>	break;
1790
1791	<	auth_need_password: NEED_PASSWORD '=' TBOOL ';'
1792	<	{
2108	<	if (ypass == 2)
2109	<	{
2110	<	if (yylval.number)
2111	<	yy_aconf->flags |= CONF_FLAGS_NEED_PASSWORD;
2112	<	else
2113	<	yy_aconf->flags &= ~CONF_FLAGS_NEED_PASSWORD;
2114	<	}
1791	>	block_state.flags.value |= CONF_FLAGS_REDIR;
1792	>	block_state.port.value = $3;
1793		};
1794
1795
#	Line 2120 | Line 1798 | auth_need_password: NEED_PASSWORD '=' TB
1798		***************************************************************************/
1799		resv_entry: RESV
1800		{
1801	<	if (ypass == 2)
1802	<	{
1803	<	MyFree(resv_reason);
1804	<	resv_reason = NULL;
1805	<	}
1801	>	if (conf_parser_ctx.pass != 2)
1802	>	break;
1803	>
1804	>	reset_block_state();
1805	>	strlcpy(block_state.rpass.buf, CONF_NOREASON, sizeof(block_state.rpass.buf));
1806		} '{' resv_items '}' ';'
1807		{
1808	<	if (ypass == 2)
1809	<	{
1810	<	MyFree(resv_reason);
1811	<	resv_reason = NULL;
2134	<	}
1808	>	if (conf_parser_ctx.pass != 2)
1809	>	break;
1810	>
1811	>	create_resv(block_state.name.buf, block_state.rpass.buf, &block_state.mask.list);
1812		};
1813
1814		resv_items:     resv_items resv_item | resv_item;
1815	<	resv_item:      resv_creason | resv_channel | resv_nick | error ';' ;
1815	>	resv_item:      resv_mask | resv_reason | resv_exempt | error ';' ;
1816
1817	<	resv_creason: REASON '=' QSTRING ';'
1817	>	resv_mask: MASK '=' QSTRING ';'
1818		{
1819	<	if (ypass == 2)
1820	<	{
2144	<	MyFree(resv_reason);
2145	<	DupString(resv_reason, yylval.string);
2146	<	}
1819	>	if (conf_parser_ctx.pass == 2)
1820	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1821		};
1822
1823	<	resv_channel: CHANNEL '=' QSTRING ';'
1823	>	resv_reason: REASON '=' QSTRING ';'
1824		{
1825	<	if (ypass == 2)
1826	<	{
1827	<	if (IsChanPrefix(*yylval.string))
2154	<	{
2155	<	char def_reason[] = "No reason";
1825	>	if (conf_parser_ctx.pass == 2)
1826	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
1827	>	};
1828
1829	<	create_channel_resv(yylval.string, resv_reason != NULL ? resv_reason : def_reason, 1);
1830	<	}
1831	<	}
1832	<	/* ignore it for now.. but we really should make a warning if
2161	<	* its an erroneous name --fl_ */
1829	>	resv_exempt: EXEMPT '=' QSTRING ';'
1830	>	{
1831	>	if (conf_parser_ctx.pass == 2)
1832	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.mask.list);
1833		};
1834
1835	<	resv_nick: NICK '=' QSTRING ';'
1835	>
1836	>	/***************************************************************************
1837	>	*  section service
1838	>	***************************************************************************/
1839	>	service_entry: T_SERVICE '{' service_items '}' ';';
1840	>
1841	>	service_items:     service_items service_item | service_item;
1842	>	service_item:      service_name | error;
1843	>
1844	>	service_name: NAME '=' QSTRING ';'
1845		{
1846	<	if (ypass == 2)
1847	<	{
2168	<	char def_reason[] = "No reason";
1846	>	if (conf_parser_ctx.pass != 2)
1847	>	break;
1848
1849	<	create_nick_resv(yylval.string, resv_reason != NULL ? resv_reason : def_reason, 1);
1849	>	if (valid_servname(yylval.string))
1850	>	{
1851	>	struct MaskItem *conf = conf_make(CONF_SERVICE);
1852	>	conf->name = xstrdup(yylval.string);
1853		}
1854		};
1855
#	Line 2176 | Line 1858 | resv_nick: NICK '=' QSTRING ';'
1858		***************************************************************************/
1859		shared_entry: T_SHARED
1860		{
1861	<	if (ypass == 2)
1862	<	{
1863	<	yy_conf = make_conf_item(ULINE_TYPE);
1864	<	yy_match_item = map_to_conf(yy_conf);
1865	<	yy_match_item->action = SHARED_ALL;
1866	<	}
1861	>	if (conf_parser_ctx.pass != 2)
1862	>	break;
1863	>
1864	>	reset_block_state();
1865	>
1866	>	strlcpy(block_state.name.buf, "*", sizeof(block_state.name.buf));
1867	>	strlcpy(block_state.user.buf, "*", sizeof(block_state.user.buf));
1868	>	strlcpy(block_state.host.buf, "*", sizeof(block_state.host.buf));
1869	>	block_state.flags.value = SHARED_ALL;
1870		} '{' shared_items '}' ';'
1871		{
1872	<	if (ypass == 2)
1873	<	{
1874	<	yy_conf = NULL;
1875	<	}
1872	>	struct MaskItem *conf = NULL;
1873	>
1874	>	if (conf_parser_ctx.pass != 2)
1875	>	break;
1876	>
1877	>	conf = conf_make(CONF_ULINE);
1878	>	conf->flags = block_state.flags.value;
1879	>	conf->name = xstrdup(block_state.name.buf);
1880	>	conf->user = xstrdup(block_state.user.buf);
1881	>	conf->host = xstrdup(block_state.host.buf);
1882		};
1883
1884		shared_items: shared_items shared_item | shared_item;
#	Line 2195 | Line 1886 | shared_item:  shared_name | shared_user
1886
1887		shared_name: NAME '=' QSTRING ';'
1888		{
1889	<	if (ypass == 2)
1890	<	{
2200	<	MyFree(yy_conf->name);
2201	<	DupString(yy_conf->name, yylval.string);
2202	<	}
1889	>	if (conf_parser_ctx.pass == 2)
1890	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1891		};
1892
1893		shared_user: USER '=' QSTRING ';'
1894		{
1895	<	if (ypass == 2)
1895	>	if (conf_parser_ctx.pass == 2)
1896		{
1897	<	split_nuh(yylval.string, NULL, &yy_match_item->user, &yy_match_item->host);
1897	>	struct split_nuh_item nuh;
1898	>
1899	>	nuh.nuhmask  = yylval.string;
1900	>	nuh.nickptr  = NULL;
1901	>	nuh.userptr  = block_state.user.buf;
1902	>	nuh.hostptr  = block_state.host.buf;
1903	>
1904	>	nuh.nicksize = 0;
1905	>	nuh.usersize = sizeof(block_state.user.buf);
1906	>	nuh.hostsize = sizeof(block_state.host.buf);
1907	>
1908	>	split_nuh(&nuh);
1909		}
1910		};
1911
1912		shared_type: TYPE
1913		{
1914	<	if (ypass == 2)
1915	<	yy_match_item->action = 0;
1914	>	if (conf_parser_ctx.pass == 2)
1915	>	block_state.flags.value = 0;
1916		} '=' shared_types ';' ;
1917
1918		shared_types: shared_types ',' shared_type_item | shared_type_item;
1919		shared_type_item: KLINE
1920		{
1921	<	if (ypass == 2)
1922	<	yy_match_item->action |= SHARED_KLINE;
2224	<	} | TKLINE
2225	<	{
2226	<	if (ypass == 2)
2227	<	yy_match_item->action |= SHARED_TKLINE;
1921	>	if (conf_parser_ctx.pass == 2)
1922	>	block_state.flags.value |= SHARED_KLINE;
1923		} | UNKLINE
1924		{
1925	<	if (ypass == 2)
1926	<	yy_match_item->action |= SHARED_UNKLINE;
1927	<	} | XLINE
1925	>	if (conf_parser_ctx.pass == 2)
1926	>	block_state.flags.value |= SHARED_UNKLINE;
1927	>	} | T_DLINE
1928	>	{
1929	>	if (conf_parser_ctx.pass == 2)
1930	>	block_state.flags.value |= SHARED_DLINE;
1931	>	} | T_UNDLINE
1932		{
1933	<	if (ypass == 2)
1934	<	yy_match_item->action |= SHARED_XLINE;
1935	<	} | TXLINE
1933	>	if (conf_parser_ctx.pass == 2)
1934	>	block_state.flags.value |= SHARED_UNDLINE;
1935	>	} | XLINE
1936		{
1937	<	if (ypass == 2)
1938	<	yy_match_item->action |= SHARED_TXLINE;
1937	>	if (conf_parser_ctx.pass == 2)
1938	>	block_state.flags.value |= SHARED_XLINE;
1939		} | T_UNXLINE
1940		{
1941	<	if (ypass == 2)
1942	<	yy_match_item->action |= SHARED_UNXLINE;
1941	>	if (conf_parser_ctx.pass == 2)
1942	>	block_state.flags.value |= SHARED_UNXLINE;
1943		} | RESV
1944		{
1945	<	if (ypass == 2)
1946	<	yy_match_item->action |= SHARED_RESV;
2248	<	} | TRESV
2249	<	{
2250	<	if (ypass == 2)
2251	<	yy_match_item->action |= SHARED_TRESV;
1945	>	if (conf_parser_ctx.pass == 2)
1946	>	block_state.flags.value |= SHARED_RESV;
1947		} | T_UNRESV
1948		{
1949	<	if (ypass == 2)
1950	<	yy_match_item->action |= SHARED_UNRESV;
1949	>	if (conf_parser_ctx.pass == 2)
1950	>	block_state.flags.value |= SHARED_UNRESV;
1951		} | T_LOCOPS
1952		{
1953	<	if (ypass == 2)
1954	<	yy_match_item->action |= SHARED_LOCOPS;
1953	>	if (conf_parser_ctx.pass == 2)
1954	>	block_state.flags.value |= SHARED_LOCOPS;
1955		} | T_ALL
1956		{
1957	<	if (ypass == 2)
1958	<	yy_match_item->action = SHARED_ALL;
1957	>	if (conf_parser_ctx.pass == 2)
1958	>	block_state.flags.value = SHARED_ALL;
1959		};
1960
1961		/***************************************************************************
#	Line 2268 | Line 1963 | shared_type_item: KLINE
1963		***************************************************************************/
1964		cluster_entry: T_CLUSTER
1965		{
1966	<	if (ypass == 2)
1967	<	{
1968	<	yy_conf = make_conf_item(CLUSTER_TYPE);
1969	<	yy_conf->flags = SHARED_ALL;
1970	<	}
1966	>	if (conf_parser_ctx.pass != 2)
1967	>	break;
1968	>
1969	>	reset_block_state();
1970	>
1971	>	strlcpy(block_state.name.buf, "*", sizeof(block_state.name.buf));
1972	>	block_state.flags.value = SHARED_ALL;
1973		} '{' cluster_items '}' ';'
1974		{
1975	<	if (ypass == 2)
1976	<	{
1977	<	if (yy_conf->name == NULL)
1978	<	DupString(yy_conf->name, "*");
1979	<	yy_conf = NULL;
1980	<	}
1975	>	struct MaskItem *conf = NULL;
1976	>
1977	>	if (conf_parser_ctx.pass != 2)
1978	>	break;
1979	>
1980	>	conf = conf_make(CONF_CLUSTER);
1981	>	conf->flags = block_state.flags.value;
1982	>	conf->name = xstrdup(block_state.name.buf);
1983		};
1984
1985		cluster_items:  cluster_items cluster_item | cluster_item;
#	Line 2288 | Line 1987 | cluster_item:  cluster_name | cluster_typ
1987
1988		cluster_name: NAME '=' QSTRING ';'
1989		{
1990	<	if (ypass == 2)
1991	<	DupString(yy_conf->name, yylval.string);
1990	>	if (conf_parser_ctx.pass == 2)
1991	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
1992		};
1993
1994		cluster_type: TYPE
1995		{
1996	<	if (ypass == 2)
1997	<	yy_conf->flags = 0;
1996	>	if (conf_parser_ctx.pass == 2)
1997	>	block_state.flags.value = 0;
1998		} '=' cluster_types ';' ;
1999
2000		cluster_types:  cluster_types ',' cluster_type_item | cluster_type_item;
2001		cluster_type_item: KLINE
2002		{
2003	<	if (ypass == 2)
2004	<	yy_conf->flags |= SHARED_KLINE;
2306	<	} | TKLINE
2307	<	{
2308	<	if (ypass == 2)
2309	<	yy_conf->flags |= SHARED_TKLINE;
2003	>	if (conf_parser_ctx.pass == 2)
2004	>	block_state.flags.value |= SHARED_KLINE;
2005		} | UNKLINE
2006		{
2007	<	if (ypass == 2)
2008	<	yy_conf->flags |= SHARED_UNKLINE;
2009	<	} | XLINE
2007	>	if (conf_parser_ctx.pass == 2)
2008	>	block_state.flags.value |= SHARED_UNKLINE;
2009	>	} | T_DLINE
2010	>	{
2011	>	if (conf_parser_ctx.pass == 2)
2012	>	block_state.flags.value |= SHARED_DLINE;
2013	>	} | T_UNDLINE
2014		{
2015	<	if (ypass == 2)
2016	<	yy_conf->flags |= SHARED_XLINE;
2017	<	} | TXLINE
2015	>	if (conf_parser_ctx.pass == 2)
2016	>	block_state.flags.value |= SHARED_UNDLINE;
2017	>	} | XLINE
2018		{
2019	<	if (ypass == 2)
2020	<	yy_conf->flags |= SHARED_TXLINE;
2019	>	if (conf_parser_ctx.pass == 2)
2020	>	block_state.flags.value |= SHARED_XLINE;
2021		} | T_UNXLINE
2022		{
2023	<	if (ypass == 2)
2024	<	yy_conf->flags |= SHARED_UNXLINE;
2023	>	if (conf_parser_ctx.pass == 2)
2024	>	block_state.flags.value |= SHARED_UNXLINE;
2025		} | RESV
2026		{
2027	<	if (ypass == 2)
2028	<	yy_conf->flags |= SHARED_RESV;
2330	<	} | TRESV
2331	<	{
2332	<	if (ypass == 2)
2333	<	yy_conf->flags |= SHARED_TRESV;
2027	>	if (conf_parser_ctx.pass == 2)
2028	>	block_state.flags.value |= SHARED_RESV;
2029		} | T_UNRESV
2030		{
2031	<	if (ypass == 2)
2032	<	yy_conf->flags |= SHARED_UNRESV;
2031	>	if (conf_parser_ctx.pass == 2)
2032	>	block_state.flags.value |= SHARED_UNRESV;
2033		} | T_LOCOPS
2034		{
2035	<	if (ypass == 2)
2036	<	yy_conf->flags |= SHARED_LOCOPS;
2035	>	if (conf_parser_ctx.pass == 2)
2036	>	block_state.flags.value |= SHARED_LOCOPS;
2037		} | T_ALL
2038		{
2039	<	if (ypass == 2)
2040	<	yy_conf->flags = SHARED_ALL;
2039	>	if (conf_parser_ctx.pass == 2)
2040	>	block_state.flags.value = SHARED_ALL;
2041		};
2042
2043		/***************************************************************************
#	Line 2350 | Line 2045 | cluster_type_item: KLINE
2045		***************************************************************************/
2046		connect_entry: CONNECT
2047		{
2353	–	if (ypass == 2)
2354	–	{
2355	–	yy_conf = make_conf_item(SERVER_TYPE);
2356	–	yy_aconf = (struct AccessItem *)map_to_conf(yy_conf);
2357	–	yy_aconf->passwd = NULL;
2358	–	/* defaults */
2359	–	yy_aconf->port = PORTNUM;
2048
2049	<	if (ConfigFileEntry.burst_away)
2050	<	yy_aconf->flags = CONF_FLAGS_BURST_AWAY;
2363	<	}
2364	<	else
2365	<	{
2366	<	MyFree(class_name);
2367	<	class_name = NULL;
2368	<	}
2369	<	} connect_name_b '{' connect_items '}' ';'
2370	<	{
2371	<	if (ypass == 2)
2372	<	{
2373	<	struct CollectItem *yy_hconf=NULL;
2374	<	struct CollectItem *yy_lconf=NULL;
2375	<	dlink_node *ptr;
2376	<	dlink_node *next_ptr;
2377	<	#ifdef HAVE_LIBCRYPTO
2378	<	if (yy_aconf->host &&
2379	<	((yy_aconf->passwd && yy_aconf->spasswd) ||
2380	<	(yy_aconf->rsa_public_key && IsConfCryptLink(yy_aconf))))
2381	<	#else /* !HAVE_LIBCRYPTO */
2382	<	if (yy_aconf->host && !IsConfCryptLink(yy_aconf) &&
2383	<	yy_aconf->passwd && yy_aconf->spasswd)
2384	<	#endif /* !HAVE_LIBCRYPTO */
2385	<	{
2386	<	if (conf_add_server(yy_conf, scount, class_name) >= 0)
2387	<	{
2388	<	++scount;
2389	<	}
2390	<	else
2391	<	{
2392	<	delete_conf_item(yy_conf);
2393	<	yy_conf = NULL;
2394	<	yy_aconf = NULL;
2395	<	}
2396	<	}
2397	<	else
2398	<	{
2399	<	/* Even if yy_conf ->name is NULL
2400	<	* should still unhook any hub/leaf confs still pending
2401	<	*/
2402	<	unhook_hub_leaf_confs();
2403	<
2404	<	if (yy_conf->name != NULL)
2405	<	{
2406	<	#ifndef HAVE_LIBCRYPTO
2407	<	if (IsConfCryptLink(yy_aconf))
2408	<	yyerror("Ignoring connect block -- no OpenSSL support");
2409	<	#else
2410	<	if (IsConfCryptLink(yy_aconf) && !yy_aconf->rsa_public_key)
2411	<	yyerror("Ignoring connect block -- missing key");
2412	<	#endif
2413	<	if (yy_aconf->host == NULL)
2414	<	yyerror("Ignoring connect block -- missing host");
2415	<	else if (!IsConfCryptLink(yy_aconf) &&
2416	<	(!yy_aconf->passwd || !yy_aconf->spasswd))
2417	<	yyerror("Ignoring connect block -- missing password");
2418	<	}
2419	<
2420	<
2421	<	/* XXX
2422	<	* This fixes a try_connections() core (caused by invalid class_ptr
2423	<	* pointers) reported by metalrock. That's an ugly fix, but there
2424	<	* is currently no better way. The entire config subsystem needs an
2425	<	* rewrite ASAP. make_conf_item() shouldn't really add things onto
2426	<	* a doubly linked list immediately without any sanity checks!  -Michael
2427	<	*/
2428	<	delete_conf_item(yy_conf);
2429	<
2430	<	yy_aconf = NULL;
2431	<	yy_conf = NULL;
2432	<	}
2433	<
2434	<	/*
2435	<	* yy_conf is still pointing at the server that is having
2436	<	* a connect block built for it. This means, y_aconf->name
2437	<	* points to the actual irc name this server will be known as.
2438	<	* Now this new server has a set or even just one hub_mask (or leaf_mask)
2439	<	* given in the link list at yy_hconf. Fill in the HUB confs
2440	<	* from this link list now.
2441	<	*/
2442	<	DLINK_FOREACH_SAFE(ptr, next_ptr, hub_conf_list.head)
2443	<	{
2444	<	struct ConfItem *new_hub_conf;
2445	<	struct MatchItem *match_item;
2049	>	if (conf_parser_ctx.pass != 2)
2050	>	break;
2051
2052	<	yy_hconf = ptr->data;
2052	>	reset_block_state();
2053	>	block_state.port.value = PORTNUM;
2054	>	} '{' connect_items '}' ';'
2055	>	{
2056	>	struct MaskItem *conf = NULL;
2057	>	struct addrinfo hints, *res;
2058	>
2059	>	if (conf_parser_ctx.pass != 2)
2060	>	break;
2061	>
2062	>	if (!block_state.name.buf[0] ||
2063	>	!block_state.host.buf[0])
2064	>	break;
2065	>
2066	>	if (!block_state.rpass.buf[0] ||
2067	>	!block_state.spass.buf[0])
2068	>	break;
2069	>
2070	>	if (has_wildcards(block_state.name.buf) ||
2071	>	has_wildcards(block_state.host.buf))
2072	>	break;
2073	>
2074	>	conf = conf_make(CONF_SERVER);
2075	>	conf->port = block_state.port.value;
2076	>	conf->flags = block_state.flags.value;
2077	>	conf->aftype = block_state.aftype.value;
2078	>	conf->host = xstrdup(block_state.host.buf);
2079	>	conf->name = xstrdup(block_state.name.buf);
2080	>	conf->passwd = xstrdup(block_state.rpass.buf);
2081	>	conf->spasswd = xstrdup(block_state.spass.buf);
2082	>
2083	>	if (block_state.cert.buf[0])
2084	>	conf->certfp = xstrdup(block_state.cert.buf);
2085
2086	<	/* yy_conf == NULL is a fatal error for this connect block! */
2087	<	if ((yy_conf != NULL) && (yy_conf->name != NULL))
2451	<	{
2452	<	new_hub_conf = make_conf_item(HUB_TYPE);
2453	<	match_item = (struct MatchItem *)map_to_conf(new_hub_conf);
2454	<	DupString(new_hub_conf->name, yy_conf->name);
2455	<	if (yy_hconf->user != NULL)
2456	<	DupString(match_item->user, yy_hconf->user);
2457	<	else
2458	<	DupString(match_item->user, "*");
2459	<	if (yy_hconf->host != NULL)
2460	<	DupString(match_item->host, yy_hconf->host);
2461	<	else
2462	<	DupString(match_item->host, "*");
2463	<	}
2464	<	dlinkDelete(&yy_hconf->node, &hub_conf_list);
2465	<	free_collect_item(yy_hconf);
2466	<	}
2086	>	if (block_state.ciph.buf[0])
2087	>	conf->cipher_list = xstrdup(block_state.ciph.buf);
2088
2089	<	/* Ditto for the LEAF confs */
2089	>	dlinkMoveList(&block_state.leaf.list, &conf->leaf_list);
2090	>	dlinkMoveList(&block_state.hub.list, &conf->hub_list);
2091
2092	<	DLINK_FOREACH_SAFE(ptr, next_ptr, leaf_conf_list.head)
2093	<	{
2094	<	struct ConfItem *new_leaf_conf;
2473	<	struct MatchItem *match_item;
2092	>	if (block_state.bind.buf[0])
2093	>	{
2094	>	memset(&hints, 0, sizeof(hints));
2095
2096	<	yy_lconf = ptr->data;
2096	>	hints.ai_family   = AF_UNSPEC;
2097	>	hints.ai_socktype = SOCK_STREAM;
2098	>	hints.ai_flags    = AI_PASSIVE | AI_NUMERICHOST;
2099
2100	<	if ((yy_conf != NULL) && (yy_conf->name != NULL))
2101	<	{
2102	<	new_leaf_conf = make_conf_item(LEAF_TYPE);
2103	<	match_item = (struct MatchItem *)map_to_conf(new_leaf_conf);
2104	<	DupString(new_leaf_conf->name, yy_conf->name);
2105	<	if (yy_lconf->user != NULL)
2106	<	DupString(match_item->user, yy_lconf->user);
2107	<	else
2108	<	DupString(match_item->user, "*");
2109	<	if (yy_lconf->host != NULL)
2110	<	DupString(match_item->host, yy_lconf->host);
2488	<	else
2489	<	DupString(match_item->host, "*");
2490	<	}
2491	<	dlinkDelete(&yy_lconf->node, &leaf_conf_list);
2492	<	free_collect_item(yy_lconf);
2493	<	}
2494	<	MyFree(class_name);
2495	<	class_name = NULL;
2496	<	yy_conf = NULL;
2497	<	yy_aconf = NULL;
2100	>	if (getaddrinfo(block_state.bind.buf, NULL, &hints, &res))
2101	>	ilog(LOG_TYPE_IRCD, "Invalid netmask for server vhost(%s)", block_state.bind.buf);
2102	>	else
2103	>	{
2104	>	assert(res != NULL);
2105	>
2106	>	memcpy(&conf->bind, res->ai_addr, res->ai_addrlen);
2107	>	conf->bind.ss.ss_family = res->ai_family;
2108	>	conf->bind.ss_len = res->ai_addrlen;
2109	>	freeaddrinfo(res);
2110	>	}
2111		}
2112	+
2113	+	conf_add_class_to_conf(conf, block_state.class.buf);
2114	+	lookup_confhost(conf);
2115		};
2116
2501	–	connect_name_b: | connect_name_t;
2117		connect_items:  connect_items connect_item | connect_item;
2118		connect_item:   connect_name | connect_host | connect_vhost |
2119		connect_send_password | connect_accept_password |
2120	<	connect_aftype | connect_port |
2121	<	connect_fakename | connect_flags | connect_hub_mask |
2122	<	connect_leaf_mask | connect_class | connect_auto |
2123	<	connect_encrypted | connect_compressed | connect_cryptlink |
2509	<	connect_rsa_public_key_file | connect_cipher_preference |
2120	>	connect_ssl_certificate_fingerprint |
2121	>	connect_aftype | connect_port | connect_ssl_cipher_list |
2122	>	connect_flags | connect_hub_mask | connect_leaf_mask |
2123	>	connect_class | connect_encrypted |
2124		error ';' ;
2125
2126		connect_name: NAME '=' QSTRING ';'
2127		{
2128	<	if (ypass == 2)
2129	<	{
2516	<	if (yy_conf->name != NULL)
2517	<	yyerror("Multiple connect name entry");
2518	<
2519	<	MyFree(yy_conf->name);
2520	<	DupString(yy_conf->name, yylval.string);
2521	<	}
2522	<	};
2523	<
2524	<	connect_name_t: QSTRING
2525	<	{
2526	<	if (ypass == 2)
2527	<	{
2528	<	if (yy_conf->name != NULL)
2529	<	yyerror("Multiple connect name entry");
2530	<
2531	<	MyFree(yy_conf->name);
2532	<	DupString(yy_conf->name, yylval.string);
2533	<	}
2128	>	if (conf_parser_ctx.pass == 2)
2129	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
2130		};
2131
2132		connect_host: HOST '=' QSTRING ';'
2133		{
2134	<	if (ypass == 2)
2135	<	{
2540	<	MyFree(yy_aconf->host);
2541	<	DupString(yy_aconf->host, yylval.string);
2542	<	}
2134	>	if (conf_parser_ctx.pass == 2)
2135	>	strlcpy(block_state.host.buf, yylval.string, sizeof(block_state.host.buf));
2136		};
2137
2138		connect_vhost: VHOST '=' QSTRING ';'
2139		{
2140	<	if (ypass == 2)
2141	<	{
2549	<	struct addrinfo hints, *res;
2550	<
2551	<	memset(&hints, 0, sizeof(hints));
2552	<
2553	<	hints.ai_family   = AF_UNSPEC;
2554	<	hints.ai_socktype = SOCK_STREAM;
2555	<	hints.ai_flags    = AI_PASSIVE | AI_NUMERICHOST;
2556	<
2557	<	if (irc_getaddrinfo(yylval.string, NULL, &hints, &res))
2558	<	ilog(L_ERROR, "Invalid netmask for server vhost(%s)", yylval.string);
2559	<	else
2560	<	{
2561	<	assert(res != NULL);
2562	<
2563	<	memcpy(&yy_aconf->my_ipnum, res->ai_addr, res->ai_addrlen);
2564	<	yy_aconf->my_ipnum.ss.ss_family = res->ai_family;
2565	<	yy_aconf->my_ipnum.ss_len = res->ai_addrlen;
2566	<	irc_freeaddrinfo(res);
2567	<	}
2568	<	}
2140	>	if (conf_parser_ctx.pass == 2)
2141	>	strlcpy(block_state.bind.buf, yylval.string, sizeof(block_state.bind.buf));
2142		};
2143
2144		connect_send_password: SEND_PASSWORD '=' QSTRING ';'
2145		{
2146	<	if (ypass == 2)
2147	<	{
2575	<	if ($3[0] == ':')
2576	<	yyerror("Server passwords cannot begin with a colon");
2577	<	else if (strchr($3, ' ') != NULL)
2578	<	yyerror("Server passwords cannot contain spaces");
2579	<	else {
2580	<	if (yy_aconf->spasswd != NULL)
2581	<	memset(yy_aconf->spasswd, 0, strlen(yy_aconf->spasswd));
2146	>	if (conf_parser_ctx.pass != 2)
2147	>	break;
2148
2149	<	MyFree(yy_aconf->spasswd);
2150	<	DupString(yy_aconf->spasswd, yylval.string);
2151	<	}
2152	<	}
2149	>	if ($3[0] == ':')
2150	>	conf_error_report("Server passwords cannot begin with a colon");
2151	>	else if (strchr($3, ' ') != NULL)
2152	>	conf_error_report("Server passwords cannot contain spaces");
2153	>	else
2154	>	strlcpy(block_state.spass.buf, yylval.string, sizeof(block_state.spass.buf));
2155		};
2156
2157		connect_accept_password: ACCEPT_PASSWORD '=' QSTRING ';'
2158		{
2159	<	if (ypass == 2)
2160	<	{
2593	<	if ($3[0] == ':')
2594	<	yyerror("Server passwords cannot begin with a colon");
2595	<	else if (strchr($3, ' ') != NULL)
2596	<	yyerror("Server passwords cannot contain spaces");
2597	<	else {
2598	<	if (yy_aconf->passwd != NULL)
2599	<	memset(yy_aconf->passwd, 0, strlen(yy_aconf->passwd));
2159	>	if (conf_parser_ctx.pass != 2)
2160	>	break;
2161
2162	<	MyFree(yy_aconf->passwd);
2163	<	DupString(yy_aconf->passwd, yylval.string);
2164	<	}
2165	<	}
2162	>	if ($3[0] == ':')
2163	>	conf_error_report("Server passwords cannot begin with a colon");
2164	>	else if (strchr($3, ' ') != NULL)
2165	>	conf_error_report("Server passwords cannot contain spaces");
2166	>	else
2167	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
2168	>	};
2169	>
2170	>	connect_ssl_certificate_fingerprint: SSL_CERTIFICATE_FINGERPRINT '=' QSTRING ';'
2171	>	{
2172	>	if (conf_parser_ctx.pass == 2)
2173	>	strlcpy(block_state.cert.buf, yylval.string, sizeof(block_state.cert.buf));
2174		};
2175
2176		connect_port: PORT '=' NUMBER ';'
2177		{
2178	<	if (ypass == 2)
2179	<	yy_aconf->port = $3;
2178	>	if (conf_parser_ctx.pass == 2)
2179	>	block_state.port.value = $3;
2180		};
2181
2182		connect_aftype: AFTYPE '=' T_IPV4 ';'
2183		{
2184	<	if (ypass == 2)
2185	<	yy_aconf->aftype = AF_INET;
2184	>	if (conf_parser_ctx.pass == 2)
2185	>	block_state.aftype.value = AF_INET;
2186		} | AFTYPE '=' T_IPV6 ';'
2187		{
2188		#ifdef IPV6
2189	<	if (ypass == 2)
2190	<	yy_aconf->aftype = AF_INET6;
2189	>	if (conf_parser_ctx.pass == 2)
2190	>	block_state.aftype.value = AF_INET6;
2191		#endif
2192		};
2193
2625	–	connect_fakename: FAKENAME '=' QSTRING ';'
2626	–	{
2627	–	if (ypass == 2)
2628	–	{
2629	–	MyFree(yy_aconf->fakename);
2630	–	DupString(yy_aconf->fakename, yylval.string);
2631	–	}
2632	–	};
2633	–
2194		connect_flags: IRCD_FLAGS
2195		{
2196	+	block_state.flags.value &= CONF_FLAGS_ENCRYPTED;
2197		} '='  connect_flags_items ';';
2198
2199		connect_flags_items: connect_flags_items ',' connect_flags_item | connect_flags_item;
2200	<	connect_flags_item: NOT  { not_atom = 1; } connect_flags_item_atom
2640	<	|  { not_atom = 0; } connect_flags_item_atom;
2641	<
2642	<	connect_flags_item_atom: LAZYLINK
2643	<	{
2644	<	if (ypass == 2)
2645	<	{
2646	<	if (not_atom)ClearConfLazyLink(yy_aconf);
2647	<	else SetConfLazyLink(yy_aconf);
2648	<	}
2649	<	} | COMPRESSED
2650	<	{
2651	<	if (ypass == 2)
2652	<	#ifndef HAVE_LIBZ
2653	<	yyerror("Ignoring flags = compressed; -- no zlib support");
2654	<	#else
2655	<	{
2656	<	if (not_atom)ClearConfCompressed(yy_aconf);
2657	<	else SetConfCompressed(yy_aconf);
2658	<	}
2659	<	#endif
2660	<	} | CRYPTLINK
2661	<	{
2662	<	if (ypass == 2)
2663	<	{
2664	<	if (not_atom)ClearConfCryptLink(yy_aconf);
2665	<	else SetConfCryptLink(yy_aconf);
2666	<	}
2667	<	} | AUTOCONN
2668	<	{
2669	<	if (ypass == 2)
2670	<	{
2671	<	if (not_atom)ClearConfAllowAutoConn(yy_aconf);
2672	<	else SetConfAllowAutoConn(yy_aconf);
2673	<	}
2674	<	} | BURST_AWAY
2200	>	connect_flags_item: AUTOCONN
2201		{
2202	<	if (ypass == 2)
2203	<	{
2204	<	if (not_atom)ClearConfAwayBurst(yy_aconf);
2679	<	else SetConfAwayBurst(yy_aconf);
2680	<	}
2681	<	} | TOPICBURST
2682	<	{
2683	<	if (ypass == 2)
2684	<	{
2685	<	if (not_atom)ClearConfTopicBurst(yy_aconf);
2686	<	else SetConfTopicBurst(yy_aconf);
2687	<	}
2688	<	}
2689	<	;
2690	<
2691	<	connect_rsa_public_key_file: RSA_PUBLIC_KEY_FILE '=' QSTRING ';'
2202	>	if (conf_parser_ctx.pass == 2)
2203	>	block_state.flags.value |= CONF_FLAGS_ALLOW_AUTO_CONN;
2204	>	} | T_SSL
2205		{
2206	<	#ifdef HAVE_LIBCRYPTO
2207	<	if (ypass == 2)
2695	<	{
2696	<	BIO *file;
2697	<
2698	<	if (yy_aconf->rsa_public_key != NULL)
2699	<	{
2700	<	RSA_free(yy_aconf->rsa_public_key);
2701	<	yy_aconf->rsa_public_key = NULL;
2702	<	}
2703	<
2704	<	if (yy_aconf->rsa_public_key_file != NULL)
2705	<	{
2706	<	MyFree(yy_aconf->rsa_public_key_file);
2707	<	yy_aconf->rsa_public_key_file = NULL;
2708	<	}
2709	<
2710	<	DupString(yy_aconf->rsa_public_key_file, yylval.string);
2711	<
2712	<	if ((file = BIO_new_file(yylval.string, "r")) == NULL)
2713	<	{
2714	<	yyerror("Ignoring rsa_public_key_file -- file doesn't exist");
2715	<	break;
2716	<	}
2717	<
2718	<	yy_aconf->rsa_public_key = (RSA *)PEM_read_bio_RSA_PUBKEY(file, NULL, 0, NULL);
2719	<
2720	<	if (yy_aconf->rsa_public_key == NULL)
2721	<	{
2722	<	yyerror("Ignoring rsa_public_key_file -- Key invalid; check key syntax.");
2723	<	break;
2724	<	}
2725	<
2726	<	BIO_set_close(file, BIO_CLOSE);
2727	<	BIO_free(file);
2728	<	}
2729	<	#endif /* HAVE_LIBCRYPTO */
2206	>	if (conf_parser_ctx.pass == 2)
2207	>	block_state.flags.value |= CONF_FLAGS_SSL;
2208		};
2209
2210		connect_encrypted: ENCRYPTED '=' TBOOL ';'
2211		{
2212	<	if (ypass == 2)
2735	<	{
2736	<	if (yylval.number)
2737	<	yy_aconf->flags |= CONF_FLAGS_ENCRYPTED;
2738	<	else
2739	<	yy_aconf->flags &= ~CONF_FLAGS_ENCRYPTED;
2740	<	}
2741	<	};
2742	<
2743	<	connect_cryptlink: CRYPTLINK '=' TBOOL ';'
2744	<	{
2745	<	if (ypass == 2)
2212	>	if (conf_parser_ctx.pass == 2)
2213		{
2214		if (yylval.number)
2215	<	yy_aconf->flags |= CONF_FLAGS_CRYPTLINK;
2215	>	block_state.flags.value |= CONF_FLAGS_ENCRYPTED;
2216		else
2217	<	yy_aconf->flags &= ~CONF_FLAGS_CRYPTLINK;
2751	<	}
2752	<	};
2753	<
2754	<	connect_compressed: COMPRESSED '=' TBOOL ';'
2755	<	{
2756	<	if (ypass == 2)
2757	<	{
2758	<	if (yylval.number)
2759	<	#ifndef HAVE_LIBZ
2760	<	yyerror("Ignoring compressed=yes; -- no zlib support");
2761	<	#else
2762	<	yy_aconf->flags |= CONF_FLAGS_COMPRESSED;
2763	<	#endif
2764	<	else
2765	<	yy_aconf->flags &= ~CONF_FLAGS_COMPRESSED;
2766	<	}
2767	<	};
2768	<
2769	<	connect_auto: AUTOCONN '=' TBOOL ';'
2770	<	{
2771	<	if (ypass == 2)
2772	<	{
2773	<	if (yylval.number)
2774	<	yy_aconf->flags |= CONF_FLAGS_ALLOW_AUTO_CONN;
2775	<	else
2776	<	yy_aconf->flags &= ~CONF_FLAGS_ALLOW_AUTO_CONN;
2217	>	block_state.flags.value &= ~CONF_FLAGS_ENCRYPTED;
2218		}
2219		};
2220
2221		connect_hub_mask: HUB_MASK '=' QSTRING ';'
2222		{
2223	<	if (ypass == 2)
2224	<	{
2784	<	struct CollectItem *yy_tmp;
2785	<
2786	<	yy_tmp = (struct CollectItem *)MyMalloc(sizeof(struct CollectItem));
2787	<	DupString(yy_tmp->host, yylval.string);
2788	<	DupString(yy_tmp->user, "*");
2789	<	dlinkAdd(yy_tmp, &yy_tmp->node, &hub_conf_list);
2790	<	}
2223	>	if (conf_parser_ctx.pass == 2)
2224	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.hub.list);
2225		};
2226
2227		connect_leaf_mask: LEAF_MASK '=' QSTRING ';'
2228		{
2229	<	if (ypass == 2)
2230	<	{
2797	<	struct CollectItem *yy_tmp;
2798	<
2799	<	yy_tmp = (struct CollectItem *)MyMalloc(sizeof(struct CollectItem));
2800	<	DupString(yy_tmp->host, yylval.string);
2801	<	DupString(yy_tmp->user, "*");
2802	<	dlinkAdd(yy_tmp, &yy_tmp->node, &leaf_conf_list);
2803	<	}
2229	>	if (conf_parser_ctx.pass == 2)
2230	>	dlinkAdd(xstrdup(yylval.string), make_dlink_node(), &block_state.leaf.list);
2231		};
2232
2233		connect_class: CLASS '=' QSTRING ';'
2234		{
2235	<	if (ypass == 2)
2236	<	{
2810	<	MyFree(class_name);
2811	<	DupString(class_name, yylval.string);
2812	<	}
2235	>	if (conf_parser_ctx.pass == 2)
2236	>	strlcpy(block_state.class.buf, yylval.string, sizeof(block_state.class.buf));
2237		};
2238
2239	<	connect_cipher_preference: CIPHER_PREFERENCE '=' QSTRING ';'
2239	>	connect_ssl_cipher_list: T_SSL_CIPHER_LIST '=' QSTRING ';'
2240		{
2241		#ifdef HAVE_LIBCRYPTO
2242	<	if (ypass == 2)
2243	<	{
2820	<	struct EncCapability *ecap;
2821	<	const char *cipher_name;
2822	<	int found = 0;
2823	<
2824	<	yy_aconf->cipher_preference = NULL;
2825	<	cipher_name = yylval.string;
2826	<
2827	<	for (ecap = CipherTable; ecap->name; ecap++)
2828	<	{
2829	<	if ((irccmp(ecap->name, cipher_name) == 0) &&
2830	<	(ecap->cap & CAP_ENC_MASK))
2831	<	{
2832	<	yy_aconf->cipher_preference = ecap;
2833	<	found = 1;
2834	<	break;
2835	<	}
2836	<	}
2837	<
2838	<	if (!found)
2839	<	yyerror("Invalid cipher");
2840	<	}
2242	>	if (conf_parser_ctx.pass == 2)
2243	>	strlcpy(block_state.ciph.buf, yylval.string, sizeof(block_state.ciph.buf));
2244		#else
2245	<	if (ypass == 2)
2246	<	yyerror("Ignoring cipher_preference -- no OpenSSL support");
2245	>	if (conf_parser_ctx.pass == 2)
2246	>	conf_error_report("Ignoring connect::ciphers -- no OpenSSL support");
2247		#endif
2248		};
2249
2250	+
2251		/***************************************************************************
2252		*  section kill
2253		***************************************************************************/
2254		kill_entry: KILL
2255		{
2256	<	if (ypass == 2)
2257	<	{
2854	<	userbuf[0] = hostbuf[0] = reasonbuf[0] = '\0';
2855	<	regex_ban = 0;
2856	<	}
2256	>	if (conf_parser_ctx.pass == 2)
2257	>	reset_block_state();
2258		} '{' kill_items '}' ';'
2259		{
2260	<	if (ypass == 2)
2860	<	{
2861	<	if (userbuf[0] && hostbuf[0])
2862	<	{
2863	<	if (regex_ban)
2864	<	{
2865	<	pcre *exp_user = NULL;
2866	<	pcre *exp_host = NULL;
2867	<	const char *errptr = NULL;
2868	<
2869	<	if (!(exp_user = ircd_pcre_compile(userbuf, &errptr)) ||
2870	<	!(exp_host = ircd_pcre_compile(hostbuf, &errptr)))
2871	<	{
2872	<	ilog(L_ERROR, "Failed to add regular expression based K-Line: %s", errptr);
2873	<	break;
2874	<	}
2875	<
2876	<	yy_conf = make_conf_item(RKLINE_TYPE);
2877	<	yy_aconf->regexuser = exp_user;
2878	<	yy_aconf->regexhost = exp_host;
2879	<
2880	<	DupString(yy_aconf->user, userbuf);
2881	<	DupString(yy_aconf->host, hostbuf);
2260	>	struct MaskItem *conf = NULL;
2261
2262	<	if (reasonbuf[0])
2263	<	DupString(yy_aconf->reason, reasonbuf);
2885	<	else
2886	<	DupString(yy_aconf->reason, "No reason");
2887	<	}
2888	<	else
2889	<	{
2890	<	yy_conf = make_conf_item(KLINE_TYPE);
2891	<	yy_aconf = map_to_conf(yy_conf);
2262	>	if (conf_parser_ctx.pass != 2)
2263	>	break;
2264
2265	<	DupString(yy_aconf->user, userbuf);
2266	<	DupString(yy_aconf->host, hostbuf);
2265	>	if (!block_state.user.buf[0] ||
2266	>	!block_state.host.buf[0])
2267	>	break;
2268
2269	<	if (reasonbuf[0])
2270	<	DupString(yy_aconf->reason, reasonbuf);
2271	<	else
2899	<	DupString(yy_aconf->reason, "No reason");
2900	<	add_conf_by_address(CONF_KILL, yy_aconf);
2901	<	}
2902	<	}
2903	<	else
2904	<	delete_conf_item(yy_conf);
2269	>	conf = conf_make(CONF_KLINE);
2270	>	conf->user = xstrdup(block_state.user.buf);
2271	>	conf->host = xstrdup(block_state.host.buf);
2272
2273	<	yy_conf = NULL;
2274	<	yy_aconf = NULL;
2275	<	}
2273	>	if (block_state.rpass.buf[0])
2274	>	conf->reason = xstrdup(block_state.rpass.buf);
2275	>	else
2276	>	conf->reason = xstrdup(CONF_NOREASON);
2277	>	add_conf_by_address(CONF_KLINE, conf);
2278		};
2279
2911	–	kill_type: TYPE
2912	–	{
2913	–	} '='  kill_type_items ';';
2914	–
2915	–	kill_type_items: kill_type_items ',' kill_type_item | kill_type_item;
2916	–	kill_type_item: REGEX_T
2917	–	{
2918	–	if (ypass == 2)
2919	–	regex_ban = 1;
2920	–	};
2921	–
2280		kill_items:     kill_items kill_item | kill_item;
2281	<	kill_item:      kill_user | kill_reason | kill_type | error;
2281	>	kill_item:      kill_user | kill_reason | error;
2282
2283		kill_user: USER '=' QSTRING ';'
2284		{
2285	<	if (ypass == 2)
2285	>
2286	>	if (conf_parser_ctx.pass == 2)
2287		{
2288	<	char *user = NULL, *host = NULL;
2288	>	struct split_nuh_item nuh;
2289
2290	<	split_nuh(yylval.string, NULL, &user, &host);
2290	>	nuh.nuhmask  = yylval.string;
2291	>	nuh.nickptr  = NULL;
2292	>	nuh.userptr  = block_state.user.buf;
2293	>	nuh.hostptr  = block_state.host.buf;
2294
2295	<	strlcpy(userbuf, user, sizeof(userbuf));
2296	<	strlcpy(hostbuf, host, sizeof(hostbuf));
2295	>	nuh.nicksize = 0;
2296	>	nuh.usersize = sizeof(block_state.user.buf);
2297	>	nuh.hostsize = sizeof(block_state.host.buf);
2298
2299	<	MyFree(user);
2937	<	MyFree(host);
2299	>	split_nuh(&nuh);
2300		}
2301		};
2302
2303		kill_reason: REASON '=' QSTRING ';'
2304		{
2305	<	if (ypass == 2)
2306	<	strlcpy(reasonbuf, yylval.string, sizeof(reasonbuf));
2305	>	if (conf_parser_ctx.pass == 2)
2306	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
2307		};
2308
2309		/***************************************************************************
#	Line 2949 | Line 2311 | kill_reason: REASON '=' QSTRING ';'
2311		***************************************************************************/
2312		deny_entry: DENY
2313		{
2314	<	if (ypass == 2)
2315	<	{
2954	<	yy_conf = make_conf_item(DLINE_TYPE);
2955	<	yy_aconf = map_to_conf(yy_conf);
2956	<	/* default reason */
2957	<	DupString(yy_aconf->reason, "No reason");
2958	<	}
2314	>	if (conf_parser_ctx.pass == 2)
2315	>	reset_block_state();
2316		} '{' deny_items '}' ';'
2317		{
2318	<	if (ypass == 2)
2318	>	struct MaskItem *conf = NULL;
2319	>
2320	>	if (conf_parser_ctx.pass != 2)
2321	>	break;
2322	>
2323	>	if (!block_state.addr.buf[0])
2324	>	break;
2325	>
2326	>	if (parse_netmask(block_state.addr.buf, NULL, NULL) != HM_HOST)
2327		{
2328	<	if (yy_aconf->host && parse_netmask(yy_aconf->host, NULL, NULL) != HM_HOST)
2329	<	add_conf_by_address(CONF_DLINE, yy_aconf);
2328	>	conf = conf_make(CONF_DLINE);
2329	>	conf->host = xstrdup(block_state.addr.buf);
2330	>
2331	>	if (block_state.rpass.buf[0])
2332	>	conf->reason = xstrdup(block_state.rpass.buf);
2333		else
2334	<	delete_conf_item(yy_conf);
2335	<	yy_conf = NULL;
2968	<	yy_aconf = NULL;
2334	>	conf->reason = xstrdup(CONF_NOREASON);
2335	>	add_conf_by_address(CONF_DLINE, conf);
2336		}
2337		};
2338
#	Line 2974 | Line 2341 | deny_item:      deny_ip | deny_reason |
2341
2342		deny_ip: IP '=' QSTRING ';'
2343		{
2344	<	if (ypass == 2)
2345	<	{
2979	<	MyFree(yy_aconf->host);
2980	<	DupString(yy_aconf->host, yylval.string);
2981	<	}
2344	>	if (conf_parser_ctx.pass == 2)
2345	>	strlcpy(block_state.addr.buf, yylval.string, sizeof(block_state.addr.buf));
2346		};
2347
2348		deny_reason: REASON '=' QSTRING ';'
2349		{
2350	<	if (ypass == 2)
2351	<	{
2988	<	MyFree(yy_aconf->reason);
2989	<	DupString(yy_aconf->reason, yylval.string);
2990	<	}
2350	>	if (conf_parser_ctx.pass == 2)
2351	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
2352		};
2353
2354		/***************************************************************************
#	Line 3000 | Line 2361 | exempt_item:      exempt_ip | error;
2361
2362		exempt_ip: IP '=' QSTRING ';'
2363		{
2364	<	if (ypass == 2)
2364	>	if (conf_parser_ctx.pass == 2)
2365		{
2366		if (yylval.string[0] && parse_netmask(yylval.string, NULL, NULL) != HM_HOST)
2367		{
2368	<	yy_conf = make_conf_item(EXEMPTDLINE_TYPE);
2369	<	yy_aconf = map_to_conf(yy_conf);
3009	<	DupString(yy_aconf->host, yylval.string);
3010	<
3011	<	add_conf_by_address(CONF_EXEMPTDLINE, yy_aconf);
2368	>	struct MaskItem *conf = conf_make(CONF_EXEMPT);
2369	>	conf->host = xstrdup(yylval.string);
2370
2371	<	yy_conf = NULL;
3014	<	yy_aconf = NULL;
2371	>	add_conf_by_address(CONF_EXEMPT, conf);
2372		}
2373		}
2374		};
#	Line 3021 | Line 2378 | exempt_ip: IP '=' QSTRING ';'
2378		***************************************************************************/
2379		gecos_entry: GECOS
2380		{
2381	<	if (ypass == 2)
2382	<	{
3026	<	regex_ban = 0;
3027	<	reasonbuf[0] = gecos_name[0] = '\0';
3028	<	}
2381	>	if (conf_parser_ctx.pass == 2)
2382	>	reset_block_state();
2383		} '{' gecos_items '}' ';'
2384		{
2385	<	if (ypass == 2)
3032	<	{
3033	<	if (gecos_name[0])
3034	<	{
3035	<	if (regex_ban)
3036	<	{
3037	<	pcre *exp_p = NULL;
3038	<	const char *errptr = NULL;
3039	<
3040	<	if (!(exp_p = ircd_pcre_compile(gecos_name, &errptr)))
3041	<	{
3042	<	ilog(L_ERROR, "Failed to add regular expression based X-Line: %s", errptr);
3043	<	break;
3044	<	}
3045	<
3046	<	yy_conf = make_conf_item(RXLINE_TYPE);
3047	<	yy_conf->regexpname = exp_p;
3048	<	}
3049	<	else
3050	<	yy_conf = make_conf_item(XLINE_TYPE);
2385	>	struct MaskItem *conf = NULL;
2386
2387	<	yy_match_item = map_to_conf(yy_conf);
2388	<	DupString(yy_conf->name, gecos_name);
2387	>	if (conf_parser_ctx.pass != 2)
2388	>	break;
2389
2390	<	if (reasonbuf[0])
2391	<	DupString(yy_match_item->reason, reasonbuf);
3057	<	else
3058	<	DupString(yy_match_item->reason, "No reason");
3059	<	}
3060	<	}
3061	<	};
2390	>	if (!block_state.name.buf[0])
2391	>	break;
2392
2393	<	gecos_flags: TYPE
2394	<	{
3065	<	} '='  gecos_flags_items ';';
2393	>	conf = conf_make(CONF_XLINE);
2394	>	conf->name = xstrdup(block_state.name.buf);
2395
2396	<	gecos_flags_items: gecos_flags_items ',' gecos_flags_item | gecos_flags_item;
2397	<	gecos_flags_item: REGEX_T
2398	<	{
2399	<	if (ypass == 2)
3071	<	regex_ban = 1;
2396	>	if (block_state.rpass.buf[0])
2397	>	conf->reason = xstrdup(block_state.rpass.buf);
2398	>	else
2399	>	conf->reason = xstrdup(CONF_NOREASON);
2400		};
2401
2402		gecos_items: gecos_items gecos_item | gecos_item;
2403	<	gecos_item:  gecos_name | gecos_reason | gecos_flags | error;
2403	>	gecos_item:  gecos_name | gecos_reason | error;
2404
2405		gecos_name: NAME '=' QSTRING ';'
2406		{
2407	<	if (ypass == 2)
2408	<	strlcpy(gecos_name, yylval.string, sizeof(gecos_name));
2407	>	if (conf_parser_ctx.pass == 2)
2408	>	strlcpy(block_state.name.buf, yylval.string, sizeof(block_state.name.buf));
2409		};
2410
2411		gecos_reason: REASON '=' QSTRING ';'
2412		{
2413	<	if (ypass == 2)
2414	<	strlcpy(reasonbuf, yylval.string, sizeof(reasonbuf));
2413	>	if (conf_parser_ctx.pass == 2)
2414	>	strlcpy(block_state.rpass.buf, yylval.string, sizeof(block_state.rpass.buf));
2415		};
2416
2417		/***************************************************************************
#	Line 3098 | Line 2426 | general_item:       general_hide_spoof_i
2426		general_max_nick_time | general_max_nick_changes |
2427		general_max_accept | general_anti_spam_exit_message_time |
2428		general_ts_warn_delta | general_ts_max_delta |
2429	<	general_kill_chase_time_limit | general_kline_with_reason |
2430	<	general_kline_reason | general_invisible_on_connect |
2429	>	general_kill_chase_time_limit |
2430	>	general_invisible_on_connect |
2431		general_warn_no_nline | general_dots_in_ident |
2432		general_stats_o_oper_only | general_stats_k_oper_only |
2433		general_pace_wait | general_stats_i_oper_only |
2434		general_pace_wait_simple | general_stats_P_oper_only |
2435	+	general_stats_u_oper_only |
2436		general_short_motd | general_no_oper_flood |
2437		general_true_no_oper_flood | general_oper_pass_resv |
3109	–	general_idletime | general_message_locale |
2438		general_oper_only_umodes | general_max_targets |
2439		general_use_egd | general_egdpool_path |
2440		general_oper_umodes | general_caller_id_wait |
2441		general_opers_bypass_callerid | general_default_floodcount |
2442		general_min_nonwildcard | general_min_nonwildcard_simple |
3115	–	general_servlink_path | general_disable_remote_commands |
3116	–	general_default_cipher_preference |
3117	–	general_compression_level | general_client_flood |
2443		general_throttle_time | general_havent_read_conf |
2444	<	general_dot_in_ip6_addr | general_ping_cookie |
2445	<	general_disable_auth | general_burst_away |
2446	<	general_tkline_expire_notices | general_gline_min_cidr |
2447	<	general_gline_min_cidr6 | general_use_whois_actually |
2448	<	general_reject_hold_time |
2444	>	general_ping_cookie |
2445	>	general_disable_auth |
2446	>	general_tkline_expire_notices | general_gline_enable |
2447	>	general_gline_duration | general_gline_request_duration |
2448	>	general_gline_min_cidr |
2449	>	general_gline_min_cidr6 |
2450	>	general_stats_e_disabled |
2451	>	general_max_watch | general_services_name |
2452	>	general_cycle_on_host_change |
2453		error;
2454
2455
2456	+	general_max_watch: MAX_WATCH '=' NUMBER ';'
2457	+	{
2458	+	ConfigFileEntry.max_watch = $3;
2459	+	};
2460	+
2461	+	general_cycle_on_host_change: CYCLE_ON_HOST_CHANGE '=' TBOOL ';'
2462	+	{
2463	+	if (conf_parser_ctx.pass == 2)
2464	+	ConfigFileEntry.cycle_on_host_change = yylval.number;
2465	+	};
2466
2467	<	general_gline_min_cidr: GLINE_MIN_CIDR '=' NUMBER ';'
2467	>	general_gline_enable: GLINE_ENABLE '=' TBOOL ';'
2468		{
2469	<	ConfigFileEntry.gline_min_cidr = $3;
2469	>	if (conf_parser_ctx.pass == 2)
2470	>	ConfigFileEntry.glines = yylval.number;
2471		};
2472
2473	<	general_gline_min_cidr6: GLINE_MIN_CIDR6 '=' NUMBER ';'
2473	>	general_gline_duration: GLINE_DURATION '=' timespec ';'
2474		{
2475	<	ConfigFileEntry.gline_min_cidr6 = $3;
2475	>	if (conf_parser_ctx.pass == 2)
2476	>	ConfigFileEntry.gline_time = $3;
2477		};
2478
2479	<	general_burst_away: BURST_AWAY '=' TBOOL ';'
2479	>	general_gline_request_duration: GLINE_REQUEST_DURATION '=' timespec ';'
2480		{
2481	<	ConfigFileEntry.burst_away = yylval.number;
2481	>	if (conf_parser_ctx.pass == 2)
2482	>	ConfigFileEntry.gline_request_time = $3;
2483		};
2484
2485	<	general_use_whois_actually: USE_WHOIS_ACTUALLY '=' TBOOL ';'
2485	>	general_gline_min_cidr: GLINE_MIN_CIDR '=' NUMBER ';'
2486		{
2487	<	ConfigFileEntry.use_whois_actually = yylval.number;
2487	>	ConfigFileEntry.gline_min_cidr = $3;
2488		};
2489
2490	<	general_reject_hold_time: TREJECT_HOLD_TIME '=' timespec ';'
2490	>	general_gline_min_cidr6: GLINE_MIN_CIDR6 '=' NUMBER ';'
2491		{
2492	<	GlobalSetOptions.rejecttime = yylval.number;
2492	>	ConfigFileEntry.gline_min_cidr6 = $3;
2493		};
2494
2495		general_tkline_expire_notices: TKLINE_EXPIRE_NOTICES '=' TBOOL ';'
#	Line 3155 | Line 2497 | general_tkline_expire_notices: TKLINE_EX
2497		ConfigFileEntry.tkline_expire_notices = yylval.number;
2498		};
2499
2500	<	general_kill_chase_time_limit: KILL_CHASE_TIME_LIMIT '=' NUMBER ';'
2500	>	general_kill_chase_time_limit: KILL_CHASE_TIME_LIMIT '=' timespec ';'
2501		{
2502		ConfigFileEntry.kill_chase_time_limit = $3;
2503		};
#	Line 3170 | Line 2512 | general_ignore_bogus_ts: IGNORE_BOGUS_TS
2512		ConfigFileEntry.ignore_bogus_ts = yylval.number;
2513		};
2514
3173	–	general_disable_remote_commands: DISABLE_REMOTE_COMMANDS '=' TBOOL ';'
3174	–	{
3175	–	ConfigFileEntry.disable_remote = yylval.number;
3176	–	};
3177	–
2515		general_failed_oper_notice: FAILED_OPER_NOTICE '=' TBOOL ';'
2516		{
2517		ConfigFileEntry.failed_oper_notice = yylval.number;
#	Line 3212 | Line 2549 | general_ts_warn_delta: TS_WARN_DELTA '='
2549
2550		general_ts_max_delta: TS_MAX_DELTA '=' timespec ';'
2551		{
2552	<	if (ypass == 2)
2552	>	if (conf_parser_ctx.pass == 2)
2553		ConfigFileEntry.ts_max_delta = $3;
2554		};
2555
2556		general_havent_read_conf: HAVENT_READ_CONF '=' NUMBER ';'
2557		{
2558	<	if (($3 > 0) && ypass == 1)
2558	>	if (($3 > 0) && conf_parser_ctx.pass == 1)
2559		{
2560	<	ilog(L_CRIT, "You haven't read your config file properly.");
2561	<	ilog(L_CRIT, "There is a line in the example conf that will kill your server if not removed.");
2562	<	ilog(L_CRIT, "Consider actually reading/editing the conf file, and removing this line.");
2560	>	ilog(LOG_TYPE_IRCD, "You haven't read your config file properly.");
2561	>	ilog(LOG_TYPE_IRCD, "There is a line in the example conf that will kill your server if not removed.");
2562	>	ilog(LOG_TYPE_IRCD, "Consider actually reading/editing the conf file, and removing this line.");
2563		exit(0);
2564		}
2565		};
2566
3230	–	general_kline_with_reason: KLINE_WITH_REASON '=' TBOOL ';'
3231	–	{
3232	–	ConfigFileEntry.kline_with_reason = yylval.number;
3233	–	};
3234	–
3235	–	general_kline_reason: KLINE_REASON '=' QSTRING ';'
3236	–	{
3237	–	if (ypass == 2)
3238	–	{
3239	–	MyFree(ConfigFileEntry.kline_reason);
3240	–	DupString(ConfigFileEntry.kline_reason, yylval.string);
3241	–	}
3242	–	};
3243	–
2567		general_invisible_on_connect: INVISIBLE_ON_CONNECT '=' TBOOL ';'
2568		{
2569		ConfigFileEntry.invisible_on_connect = yylval.number;
#	Line 3251 | Line 2574 | general_warn_no_nline: WARN_NO_NLINE '='
2574		ConfigFileEntry.warn_no_nline = yylval.number;
2575		};
2576
2577	+	general_stats_e_disabled: STATS_E_DISABLED '=' TBOOL ';'
2578	+	{
2579	+	ConfigFileEntry.stats_e_disabled = yylval.number;
2580	+	};
2581	+
2582		general_stats_o_oper_only: STATS_O_OPER_ONLY '=' TBOOL ';'
2583		{
2584		ConfigFileEntry.stats_o_oper_only = yylval.number;
#	Line 3261 | Line 2589 | general_stats_P_oper_only: STATS_P_OPER_
2589		ConfigFileEntry.stats_P_oper_only = yylval.number;
2590		};
2591
2592	+	general_stats_u_oper_only: STATS_U_OPER_ONLY '=' TBOOL ';'
2593	+	{
2594	+	ConfigFileEntry.stats_u_oper_only = yylval.number;
2595	+	};
2596	+
2597		general_stats_k_oper_only: STATS_K_OPER_ONLY '=' TBOOL ';'
2598		{
2599		ConfigFileEntry.stats_k_oper_only = 2 * yylval.number;
#	Line 3317 | Line 2650 | general_oper_pass_resv: OPER_PASS_RESV '
2650		ConfigFileEntry.oper_pass_resv = yylval.number;
2651		};
2652
3320	–	general_message_locale: MESSAGE_LOCALE '=' QSTRING ';'
3321	–	{
3322	–	if (ypass == 2)
3323	–	{
3324	–	if (strlen(yylval.string) > LOCALE_LENGTH-2)
3325	–	yylval.string[LOCALE_LENGTH-1] = '\0';
3326	–
3327	–	set_locale(yylval.string);
3328	–	}
3329	–	};
3330	–
3331	–	general_idletime: IDLETIME '=' timespec ';'
3332	–	{
3333	–	ConfigFileEntry.idletime = $3;
3334	–	};
3335	–
2653		general_dots_in_ident: DOTS_IN_IDENT '=' NUMBER ';'
2654		{
2655		ConfigFileEntry.dots_in_ident = $3;
#	Line 3343 | Line 2660 | general_max_targets: MAX_TARGETS '=' NUM
2660		ConfigFileEntry.max_targets = $3;
2661		};
2662
2663	<	general_servlink_path: SERVLINK_PATH '=' QSTRING ';'
3347	<	{
3348	<	if (ypass == 2)
3349	<	{
3350	<	MyFree(ConfigFileEntry.servlink_path);
3351	<	DupString(ConfigFileEntry.servlink_path, yylval.string);
3352	<	}
3353	<	};
3354	<
3355	<	general_default_cipher_preference: DEFAULT_CIPHER_PREFERENCE '=' QSTRING ';'
2663	>	general_use_egd: USE_EGD '=' TBOOL ';'
2664		{
2665	<	#ifdef HAVE_LIBCRYPTO
3358	<	if (ypass == 2)
3359	<	{
3360	<	struct EncCapability *ecap;
3361	<	const char *cipher_name;
3362	<	int found = 0;
3363	<
3364	<	ConfigFileEntry.default_cipher_preference = NULL;
3365	<	cipher_name = yylval.string;
3366	<
3367	<	for (ecap = CipherTable; ecap->name; ecap++)
3368	<	{
3369	<	if ((irccmp(ecap->name, cipher_name) == 0) &&
3370	<	(ecap->cap & CAP_ENC_MASK))
3371	<	{
3372	<	ConfigFileEntry.default_cipher_preference = ecap;
3373	<	found = 1;
3374	<	break;
3375	<	}
3376	<	}
3377	<
3378	<	if (!found)
3379	<	yyerror("Invalid cipher");
3380	<	}
3381	<	#else
3382	<	if (ypass == 2)
3383	<	yyerror("Ignoring default_cipher_preference -- no OpenSSL support");
3384	<	#endif
2665	>	ConfigFileEntry.use_egd = yylval.number;
2666		};
2667
2668	<	general_compression_level: COMPRESSION_LEVEL '=' NUMBER ';'
2668	>	general_egdpool_path: EGDPOOL_PATH '=' QSTRING ';'
2669		{
2670	<	if (ypass == 2)
2670	>	if (conf_parser_ctx.pass == 2)
2671		{
2672	<	ConfigFileEntry.compression_level = $3;
2673	<	#ifndef HAVE_LIBZ
3393	<	yyerror("Ignoring compression_level -- no zlib support");
3394	<	#else
3395	<	if ((ConfigFileEntry.compression_level < 1) ||
3396	<	(ConfigFileEntry.compression_level > 9))
3397	<	{
3398	<	yyerror("Ignoring invalid compression_level, using default");
3399	<	ConfigFileEntry.compression_level = 0;
3400	<	}
3401	<	#endif
2672	>	MyFree(ConfigFileEntry.egdpool_path);
2673	>	ConfigFileEntry.egdpool_path = xstrdup(yylval.string);
2674		}
2675		};
2676
2677	<	general_use_egd: USE_EGD '=' TBOOL ';'
3406	<	{
3407	<	ConfigFileEntry.use_egd = yylval.number;
3408	<	};
3409	<
3410	<	general_egdpool_path: EGDPOOL_PATH '=' QSTRING ';'
2677	>	general_services_name: T_SERVICES_NAME '=' QSTRING ';'
2678		{
2679	<	if (ypass == 2)
2679	>	if (conf_parser_ctx.pass == 2 && valid_servname(yylval.string))
2680		{
2681	<	MyFree(ConfigFileEntry.egdpool_path);
2682	<	DupString(ConfigFileEntry.egdpool_path, yylval.string);
2681	>	MyFree(ConfigFileEntry.service_name);
2682	>	ConfigFileEntry.service_name = xstrdup(yylval.string);
2683		}
2684		};
2685
#	Line 3452 | Line 2719 | umode_oitem:     T_BOTS
2719		} | T_FULL
2720		{
2721		ConfigFileEntry.oper_umodes |= UMODE_FULL;
2722	+	} | HIDDEN
2723	+	{
2724	+	ConfigFileEntry.oper_umodes |= UMODE_HIDDEN;
2725		} | T_SKILL
2726		{
2727		ConfigFileEntry.oper_umodes |= UMODE_SKILL;
#	Line 3491 | Line 2761 | umode_oitem:     T_BOTS
2761		} | T_LOCOPS
2762		{
2763		ConfigFileEntry.oper_umodes |= UMODE_LOCOPS;
2764	+	} | T_NONONREG
2765	+	{
2766	+	ConfigFileEntry.oper_umodes |= UMODE_REGONLY;
2767	+	} | T_FARCONNECT
2768	+	{
2769	+	ConfigFileEntry.oper_umodes |= UMODE_FARCONNECT;
2770		};
2771
2772		general_oper_only_umodes: OPER_ONLY_UMODES
#	Line 3517 | Line 2793 | umode_item:    T_BOTS
2793		} | T_SKILL
2794		{
2795		ConfigFileEntry.oper_only_umodes |= UMODE_SKILL;
2796	+	} | HIDDEN
2797	+	{
2798	+	ConfigFileEntry.oper_only_umodes |= UMODE_HIDDEN;
2799		} | T_NCHANGE
2800		{
2801		ConfigFileEntry.oper_only_umodes |= UMODE_NCHANGE;
#	Line 3553 | Line 2832 | umode_item:    T_BOTS
2832		} | T_LOCOPS
2833		{
2834		ConfigFileEntry.oper_only_umodes |= UMODE_LOCOPS;
2835	+	} | T_NONONREG
2836	+	{
2837	+	ConfigFileEntry.oper_only_umodes |= UMODE_REGONLY;
2838	+	} | T_FARCONNECT
2839	+	{
2840	+	ConfigFileEntry.oper_only_umodes |= UMODE_FARCONNECT;
2841		};
2842
2843		general_min_nonwildcard: MIN_NONWILDCARD '=' NUMBER ';'
#	Line 3570 | Line 2855 | general_default_floodcount: DEFAULT_FLOO
2855		ConfigFileEntry.default_floodcount = $3;
2856		};
2857
3573	–	general_client_flood: T_CLIENT_FLOOD '=' sizespec ';'
3574	–	{
3575	–	ConfigFileEntry.client_flood = $3;
3576	–	};
3577	–
3578	–	general_dot_in_ip6_addr: DOT_IN_IP6_ADDR '=' TBOOL ';'
3579	–	{
3580	–	ConfigFileEntry.dot_in_ip6_addr = yylval.number;
3581	–	};
3582	–
3583	–	/***************************************************************************
3584	–	*  section glines
3585	–	***************************************************************************/
3586	–	gline_entry: GLINES
3587	–	{
3588	–	if (ypass == 2)
3589	–	{
3590	–	yy_conf = make_conf_item(GDENY_TYPE);
3591	–	yy_aconf = map_to_conf(yy_conf);
3592	–	}
3593	–	} '{' gline_items '}' ';'
3594	–	{
3595	–	if (ypass == 2)
3596	–	{
3597	–	/*
3598	–	* since we re-allocate yy_conf/yy_aconf after the end of action=, at the
3599	–	* end we will have one extra, so we should free it.
3600	–	*/
3601	–	if (yy_conf->name == NULL || yy_aconf->user == NULL)
3602	–	{
3603	–	delete_conf_item(yy_conf);
3604	–	yy_conf = NULL;
3605	–	yy_aconf = NULL;
3606	–	}
3607	–	}
3608	–	};
3609	–
3610	–	gline_items:        gline_items gline_item | gline_item;
3611	–	gline_item:         gline_enable |
3612	–	gline_duration |
3613	–	gline_logging |
3614	–	gline_user |
3615	–	gline_server |
3616	–	gline_action |
3617	–	error;
3618	–
3619	–	gline_enable: ENABLE '=' TBOOL ';'
3620	–	{
3621	–	if (ypass == 2)
3622	–	ConfigFileEntry.glines = yylval.number;
3623	–	};
3624	–
3625	–	gline_duration: DURATION '=' timespec ';'
3626	–	{
3627	–	if (ypass == 2)
3628	–	ConfigFileEntry.gline_time = $3;
3629	–	};
3630	–
3631	–	gline_logging: LOGGING
3632	–	{
3633	–	if (ypass == 2)
3634	–	ConfigFileEntry.gline_logging = 0;
3635	–	} '=' gline_logging_types ';';
3636	–	gline_logging_types:     gline_logging_types ',' gline_logging_type_item | gline_logging_type_item;
3637	–	gline_logging_type_item: T_REJECT
3638	–	{
3639	–	if (ypass == 2)
3640	–	ConfigFileEntry.gline_logging |= GDENY_REJECT;
3641	–	} | T_BLOCK
3642	–	{
3643	–	if (ypass == 2)
3644	–	ConfigFileEntry.gline_logging |= GDENY_BLOCK;
3645	–	};
3646	–
3647	–	gline_user: USER '=' QSTRING ';'
3648	–	{
3649	–	if (ypass == 2)
3650	–	{
3651	–	struct CollectItem *yy_tmp = NULL;
3652	–
3653	–	if (yy_aconf->user == NULL)
3654	–	{
3655	–	split_nuh(yylval.string, NULL, &yy_aconf->user, &yy_aconf->host);
3656	–	}
3657	–	else
3658	–	{
3659	–	yy_tmp = MyMalloc(sizeof(struct CollectItem));
3660	–	split_nuh(yylval.string, NULL, &yy_tmp->user, &yy_tmp->host);
3661	–	dlinkAdd(yy_tmp, &yy_tmp->node, &col_conf_list);
3662	–	}
3663	–	}
3664	–	};
3665	–
3666	–	gline_server: NAME '=' QSTRING ';'
3667	–	{
3668	–	if (ypass == 2)
3669	–	{
3670	–	MyFree(yy_conf->name);
3671	–	DupString(yy_conf->name, yylval.string);
3672	–	}
3673	–	};
3674	–
3675	–	gline_action: ACTION
3676	–	{
3677	–	if (ypass == 2)
3678	–	yy_aconf->flags = 0;
3679	–	} '=' gdeny_types ';'
3680	–	{
3681	–	if (ypass == 2)
3682	–	{
3683	–	struct CollectItem *yy_tmp = NULL;
3684	–	dlink_node *ptr, *next_ptr;
3685	–
3686	–	DLINK_FOREACH_SAFE(ptr, next_ptr, col_conf_list.head)
3687	–	{
3688	–	struct AccessItem *new_aconf;
3689	–	struct ConfItem *new_conf;
3690	–
3691	–	yy_tmp = ptr->data;
3692	–	new_conf = make_conf_item(GDENY_TYPE);
3693	–	new_aconf = map_to_conf(new_conf);
3694	–
3695	–	new_aconf->flags = yy_aconf->flags;
3696	–
3697	–	if (yy_conf->name != NULL)
3698	–	DupString(new_conf->name, yy_conf->name);
3699	–	else
3700	–	DupString(new_conf->name, "*");
3701	–	if (yy_aconf->user != NULL)
3702	–	DupString(new_aconf->user, yy_tmp->user);
3703	–	else
3704	–	DupString(new_aconf->user, "*");
3705	–	if (yy_aconf->host != NULL)
3706	–	DupString(new_aconf->host, yy_tmp->host);
3707	–	else
3708	–	DupString(new_aconf->host, "*");
3709	–
3710	–	dlinkDelete(&yy_tmp->node, &col_conf_list);
3711	–	}
3712	–
3713	–	/*
3714	–	* In case someone has fed us with more than one action= after user/name
3715	–	* which would leak memory  -Michael
3716	–	*/
3717	–	if (yy_conf->name == NULL || yy_aconf->user == NULL)
3718	–	delete_conf_item(yy_conf);
3719	–
3720	–	yy_conf = make_conf_item(GDENY_TYPE);
3721	–	yy_aconf = map_to_conf(yy_conf);
3722	–	}
3723	–	};
3724	–
3725	–	gdeny_types: gdeny_types ',' gdeny_type_item | gdeny_type_item;
3726	–	gdeny_type_item: T_REJECT
3727	–	{
3728	–	if (ypass == 2)
3729	–	yy_aconf->flags |= GDENY_REJECT;
3730	–	} | T_BLOCK
3731	–	{
3732	–	if (ypass == 2)
3733	–	yy_aconf->flags |= GDENY_BLOCK;
3734	–	};
2858
2859		/***************************************************************************
2860		*  section channel
#	Line 3740 | Line 2863 | channel_entry: CHANNEL
2863		'{' channel_items '}' ';';
2864
2865		channel_items:      channel_items channel_item | channel_item;
2866	<	channel_item:       channel_disable_local_channels | channel_use_except |
2867	<	channel_use_invex | channel_use_knock |
2868	<	channel_max_bans | channel_knock_delay |
2869	<	channel_knock_delay_channel | channel_max_chans_per_user |
3747	<	channel_quiet_on_ban | channel_default_split_user_count |
2866	>	channel_item:       channel_max_bans |
2867	>	channel_knock_delay | channel_knock_delay_channel |
2868	>	channel_max_chans_per_user | channel_max_chans_per_oper |
2869	>	channel_default_split_user_count |
2870		channel_default_split_server_count |
2871	<	channel_no_create_on_split | channel_restrict_channels |
2872	<	channel_no_join_on_split | channel_burst_topicwho |
2871	>	channel_no_create_on_split |
2872	>	channel_no_join_on_split |
2873		channel_jflood_count | channel_jflood_time |
2874	<	error;
3753	<
3754	<	channel_restrict_channels: RESTRICT_CHANNELS '=' TBOOL ';'
3755	<	{
3756	<	ConfigChannel.restrict_channels = yylval.number;
3757	<	};
3758	<
3759	<	channel_disable_local_channels: DISABLE_LOCAL_CHANNELS '=' TBOOL ';'
3760	<	{
3761	<	ConfigChannel.disable_local_channels = yylval.number;
3762	<	};
3763	<
3764	<	channel_use_except: USE_EXCEPT '=' TBOOL ';'
3765	<	{
3766	<	ConfigChannel.use_except = yylval.number;
3767	<	};
3768	<
3769	<	channel_use_invex: USE_INVEX '=' TBOOL ';'
3770	<	{
3771	<	ConfigChannel.use_invex = yylval.number;
3772	<	};
2874	>	channel_disable_fake_channels | error;
2875
2876	<	channel_use_knock: USE_KNOCK '=' TBOOL ';'
2876	>	channel_disable_fake_channels: DISABLE_FAKE_CHANNELS '=' TBOOL ';'
2877		{
2878	<	ConfigChannel.use_knock = yylval.number;
2878	>	ConfigChannel.disable_fake_channels = yylval.number;
2879		};
2880
2881		channel_knock_delay: KNOCK_DELAY '=' timespec ';'
#	Line 3791 | Line 2893 | channel_max_chans_per_user: MAX_CHANS_PE
2893		ConfigChannel.max_chans_per_user = $3;
2894		};
2895
2896	<	channel_quiet_on_ban: QUIET_ON_BAN '=' TBOOL ';'
2896	>	channel_max_chans_per_oper: MAX_CHANS_PER_OPER '=' NUMBER ';'
2897		{
2898	<	ConfigChannel.quiet_on_ban = yylval.number;
2898	>	ConfigChannel.max_chans_per_oper = $3;
2899		};
2900
2901		channel_max_bans: MAX_BANS '=' NUMBER ';'
#	Line 3821 | Line 2923 | channel_no_join_on_split: NO_JOIN_ON_SPL
2923		ConfigChannel.no_join_on_split = yylval.number;
2924		};
2925
3824	–	channel_burst_topicwho: BURST_TOPICWHO '=' TBOOL ';'
3825	–	{
3826	–	ConfigChannel.burst_topicwho = yylval.number;
3827	–	};
3828	–
2926		channel_jflood_count: JOIN_FLOOD_COUNT '=' NUMBER ';'
2927		{
2928		GlobalSetOptions.joinfloodcount = yylval.number;
#	Line 3843 | Line 2940 | serverhide_entry: SERVERHIDE
2940		'{' serverhide_items '}' ';';
2941
2942		serverhide_items:   serverhide_items serverhide_item | serverhide_item;
2943	<	serverhide_item:    serverhide_flatten_links | serverhide_hide_servers |
2943	>	serverhide_item:    serverhide_flatten_links | serverhide_disable_remote_commands |
2944	>	serverhide_hide_servers |
2945	>	serverhide_hide_services |
2946		serverhide_links_delay |
3848	–	serverhide_disable_hidden |
2947		serverhide_hidden | serverhide_hidden_name |
2948		serverhide_hide_server_ips |
2949		error;
2950
2951		serverhide_flatten_links: FLATTEN_LINKS '=' TBOOL ';'
2952		{
2953	<	if (ypass == 2)
2953	>	if (conf_parser_ctx.pass == 2)
2954		ConfigServerHide.flatten_links = yylval.number;
2955		};
2956
2957	+	serverhide_disable_remote_commands: DISABLE_REMOTE_COMMANDS '=' TBOOL ';'
2958	+	{
2959	+	if (conf_parser_ctx.pass == 2)
2960	+	ConfigServerHide.disable_remote_commands = yylval.number;
2961	+	};
2962	+
2963		serverhide_hide_servers: HIDE_SERVERS '=' TBOOL ';'
2964		{
2965	<	if (ypass == 2)
2965	>	if (conf_parser_ctx.pass == 2)
2966		ConfigServerHide.hide_servers = yylval.number;
2967		};
2968
2969	+	serverhide_hide_services: HIDE_SERVICES '=' TBOOL ';'
2970	+	{
2971	+	if (conf_parser_ctx.pass == 2)
2972	+	ConfigServerHide.hide_services = yylval.number;
2973	+	};
2974	+
2975		serverhide_hidden_name: HIDDEN_NAME '=' QSTRING ';'
2976		{
2977	<	if (ypass == 2)
2977	>	if (conf_parser_ctx.pass == 2)
2978		{
2979		MyFree(ConfigServerHide.hidden_name);
2980	<	DupString(ConfigServerHide.hidden_name, yylval.string);
2980	>	ConfigServerHide.hidden_name = xstrdup(yylval.string);
2981		}
2982		};
2983
2984		serverhide_links_delay: LINKS_DELAY '=' timespec ';'
2985		{
2986	<	if (ypass == 2)
2986	>	if (conf_parser_ctx.pass == 2)
2987		{
2988		if (($3 > 0) && ConfigServerHide.links_disabled == 1)
2989		{
#	Line 3887 | Line 2997 | serverhide_links_delay: LINKS_DELAY '='
2997
2998		serverhide_hidden: HIDDEN '=' TBOOL ';'
2999		{
3000	<	if (ypass == 2)
3000	>	if (conf_parser_ctx.pass == 2)
3001		ConfigServerHide.hidden = yylval.number;
3002		};
3003
3894	–	serverhide_disable_hidden: DISABLE_HIDDEN '=' TBOOL ';'
3895	–	{
3896	–	if (ypass == 2)
3897	–	ConfigServerHide.disable_hidden = yylval.number;
3898	–	};
3899	–
3004		serverhide_hide_server_ips: HIDE_SERVER_IPS '=' TBOOL ';'
3005		{
3006	<	if (ypass == 2)
3006	>	if (conf_parser_ctx.pass == 2)
3007		ConfigServerHide.hide_server_ips = yylval.number;
3008		};

Diff Legend

–	Removed lines
+	Added lines
<	Changed lines (old)
>	Changed lines (new)