ViewVC Help
View File | Revision Log | Show Annotations | View Changeset | Root Listing
root/svn/ircd-hybrid/trunk/src/conf.c
(Generate patch)

Comparing:
ircd-hybrid-8/src/conf.c (file contents), Revision 1353 by michael, Sun Apr 15 18:35:55 2012 UTC vs.
ircd-hybrid/trunk/src/conf.c (file contents), Revision 4265 by michael, Sat Jul 19 17:21:27 2014 UTC

# Line 1 | Line 1
1   /*
2 < *  ircd-hybrid: an advanced Internet Relay Chat Daemon(ircd).
3 < *  conf.c: Configuration file functions.
2 > *  ircd-hybrid: an advanced, lightweight Internet Relay Chat Daemon (ircd)
3   *
4 < *  Copyright (C) 2002 by the past and present ircd coders, and others.
4 > *  Copyright (c) 1997-2014 ircd-hybrid development team
5   *
6   *  This program is free software; you can redistribute it and/or modify
7   *  it under the terms of the GNU General Public License as published by
# Line 18 | Line 17
17   *  along with this program; if not, write to the Free Software
18   *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
19   *  USA
20 < *
21 < *  $Id$
20 > */
21 >
22 > /*! \file conf.c
23 > * \brief Configuration file functions.
24 > * \version $Id$
25   */
26  
27   #include "stdinc.h"
28   #include "list.h"
29   #include "ircd_defs.h"
28 #include "balloc.h"
30   #include "conf.h"
31 < #include "s_serv.h"
31 > #include "server.h"
32   #include "resv.h"
33   #include "channel.h"
34   #include "client.h"
35   #include "event.h"
35 #include "hash.h"
36 #include "hook.h"
36   #include "irc_string.h"
38 #include "sprintf_irc.h"
37   #include "s_bsd.h"
38   #include "ircd.h"
39   #include "listener.h"
# Line 45 | Line 43
43   #include "fdlist.h"
44   #include "log.h"
45   #include "send.h"
48 #include "s_gline.h"
46   #include "memory.h"
47 < #include "irc_res.h"
47 > #include "mempool.h"
48 > #include "res.h"
49   #include "userhost.h"
50 < #include "s_user.h"
50 > #include "user.h"
51   #include "channel_mode.h"
52   #include "parse.h"
53 < #include "s_misc.h"
53 > #include "misc.h"
54 > #include "conf_db.h"
55 > #include "conf_class.h"
56 > #include "motd.h"
57  
57 struct Callback *client_check_cb = NULL;
58 struct config_server_hide ConfigServerHide;
58  
59   /* general conf items link list root, other than k lines etc. */
60   dlink_list service_items = { NULL, NULL, 0 };
61   dlink_list server_items  = { NULL, NULL, 0 };
62   dlink_list cluster_items = { NULL, NULL, 0 };
64 dlink_list hub_items     = { NULL, NULL, 0 };
65 dlink_list leaf_items    = { NULL, NULL, 0 };
63   dlink_list oconf_items   = { NULL, NULL, 0 };
64   dlink_list uconf_items   = { NULL, NULL, 0 };
65   dlink_list xconf_items   = { NULL, NULL, 0 };
69 dlink_list rxconf_items  = { NULL, NULL, 0 };
70 dlink_list rkconf_items  = { NULL, NULL, 0 };
66   dlink_list nresv_items   = { NULL, NULL, 0 };
67 < dlink_list class_items   = { NULL, NULL, 0 };
73 < dlink_list gdeny_items   = { NULL, NULL, 0 };
74 <
75 < dlink_list temporary_klines  = { NULL, NULL, 0 };
76 < dlink_list temporary_dlines  = { NULL, NULL, 0 };
77 < dlink_list temporary_xlines  = { NULL, NULL, 0 };
78 < dlink_list temporary_rklines = { NULL, NULL, 0 };
79 < dlink_list temporary_glines  = { NULL, NULL, 0 };
80 < dlink_list temporary_rxlines = { NULL, NULL, 0 };
81 < dlink_list temporary_resv = { NULL, NULL, 0 };
67 > dlink_list cresv_items   = { NULL, NULL, 0 };
68  
69   extern unsigned int lineno;
70   extern char linebuf[];
71   extern char conffilebuf[IRCD_BUFSIZE];
86 extern char yytext[];
72   extern int yyparse(); /* defined in y.tab.c */
73  
89 struct conf_parser_context conf_parser_ctx = { 0, 0, NULL };
90
74   /* internally defined functions */
92 static void lookup_confhost(struct ConfItem *);
93 static void set_default_conf(void);
94 static void validate_conf(void);
75   static void read_conf(FILE *);
76   static void clear_out_old_conf(void);
97 static void flush_deleted_I_P(void);
77   static void expire_tklines(dlink_list *);
78   static void garbage_collect_ip_entries(void);
79   static int hash_ip(struct irc_ssaddr *);
80 < static int verify_access(struct Client *, const char *);
81 < static int attach_iline(struct Client *, struct ConfItem *);
80 > static int verify_access(struct Client *);
81 > static int attach_iline(struct Client *, struct MaskItem *);
82   static struct ip_entry *find_or_add_ip(struct irc_ssaddr *);
83 < static void parse_conf_file(int, int);
105 < static dlink_list *map_to_list(ConfType);
106 < static struct AccessItem *find_regexp_kline(const char *[]);
83 > static dlink_list *map_to_list(enum maskitem_type);
84   static int find_user_host(struct Client *, char *, char *, char *, unsigned int);
85  
109 /*
110 * bit_len
111 */
112 static int cidr_limit_reached(int, struct irc_ssaddr *, struct ClassItem *);
113 static void remove_from_cidr_check(struct irc_ssaddr *, struct ClassItem *);
114 static void destroy_cidr_class(struct ClassItem *);
115
116 static void flags_to_ascii(unsigned int, const unsigned int[], char *, int);
117
118 /* address of default class conf */
119 static struct ConfItem *class_default;
86  
87   /* usually, with hash tables, you use a prime number...
88   * but in this case I am dealing with ip addresses,
# Line 127 | Line 93 | static struct ConfItem *class_default;
93   struct ip_entry
94   {
95    struct irc_ssaddr ip;
96 <  int count;
97 <  time_t last_attempt;
96 >  unsigned int count;  /**< Number of registered users using this IP */
97 >  unsigned int connection_count;  /**< Number of connections from this IP in the last throttle_time duration */
98 >  time_t last_attempt;  /**< The last time someone connected from this IP */
99    struct ip_entry *next;
100   };
101  
102   static struct ip_entry *ip_hash_table[IP_HASH_SIZE];
103 < static BlockHeap *ip_entry_heap = NULL;
103 > static mp_pool_t *ip_entry_pool = NULL;
104   static int ip_entries_count = 0;
105  
106  
140 void *
141 map_to_conf(struct ConfItem *aconf)
142 {
143  void *conf;
144  conf = (void *)((uintptr_t)aconf +
145                  (uintptr_t)sizeof(struct ConfItem));
146  return(conf);
147 }
148
149 struct ConfItem *
150 unmap_conf_item(void *aconf)
151 {
152  struct ConfItem *conf;
153
154  conf = (struct ConfItem *)((uintptr_t)aconf -
155                             (uintptr_t)sizeof(struct ConfItem));
156  return(conf);
157 }
158
107   /* conf_dns_callback()
108   *
109 < * inputs       - pointer to struct AccessItem
109 > * inputs       - pointer to struct MaskItem
110   *              - pointer to DNSReply reply
111   * output       - none
112   * side effects - called when resolver query finishes
# Line 169 | Line 117 | unmap_conf_item(void *aconf)
117   static void
118   conf_dns_callback(void *vptr, const struct irc_ssaddr *addr, const char *name)
119   {
120 <  struct AccessItem *aconf = vptr;
120 >  struct MaskItem *conf = vptr;
121  
122 <  aconf->dns_pending = 0;
122 >  conf->dns_pending = 0;
123  
124 <  if (addr != NULL)
125 <    memcpy(&aconf->ipnum, addr, sizeof(aconf->ipnum));
124 >  if (addr)
125 >    memcpy(&conf->addr, addr, sizeof(conf->addr));
126    else
127 <    aconf->dns_failed = 1;
127 >    conf->dns_failed = 1;
128   }
129  
130   /* conf_dns_lookup()
# Line 186 | Line 134 | conf_dns_callback(void *vptr, const stru
134   * allocate a dns_query and start ns lookup.
135   */
136   static void
137 < conf_dns_lookup(struct AccessItem *aconf)
137 > conf_dns_lookup(struct MaskItem *conf)
138   {
139 <  if (!aconf->dns_pending)
139 >  if (!conf->dns_pending)
140    {
141 <    aconf->dns_pending = 1;
142 <    gethost_byname(conf_dns_callback, aconf, aconf->host);
141 >    conf->dns_pending = 1;
142 >    gethost_byname(conf_dns_callback, conf, conf->host);
143    }
144   }
145  
146 < /* make_conf_item()
147 < *
200 < * inputs       - type of item
201 < * output       - pointer to new conf entry
202 < * side effects - none
203 < */
204 < struct ConfItem *
205 < make_conf_item(ConfType type)
146 > struct MaskItem *
147 > conf_make(enum maskitem_type type)
148   {
149 <  struct ConfItem *conf = NULL;
150 <  struct AccessItem *aconf = NULL;
209 <  struct ClassItem *aclass = NULL;
210 <  int status = 0;
211 <
212 <  switch (type)
213 <  {
214 <  case DLINE_TYPE:
215 <  case EXEMPTDLINE_TYPE:
216 <  case GLINE_TYPE:
217 <  case KLINE_TYPE:
218 <  case CLIENT_TYPE:
219 <  case OPER_TYPE:
220 <  case SERVER_TYPE:
221 <    conf = MyMalloc(sizeof(struct ConfItem) +
222 <                    sizeof(struct AccessItem));
223 <    aconf = map_to_conf(conf);
224 <    aconf->aftype = AF_INET;
225 <
226 <    /* Yes, sigh. switch on type again */
227 <    switch (type)
228 <    {
229 <    case EXEMPTDLINE_TYPE:
230 <      status = CONF_EXEMPTDLINE;
231 <      break;
232 <
233 <    case DLINE_TYPE:
234 <      status = CONF_DLINE;
235 <      break;
236 <
237 <    case KLINE_TYPE:
238 <      status = CONF_KLINE;
239 <      break;
240 <
241 <    case GLINE_TYPE:
242 <      status = CONF_GLINE;
243 <      break;
244 <
245 <    case CLIENT_TYPE:
246 <      status = CONF_CLIENT;
247 <      break;
248 <
249 <    case OPER_TYPE:
250 <      status = CONF_OPERATOR;
251 <      dlinkAdd(conf, &conf->node, &oconf_items);
252 <      break;
253 <
254 <    case SERVER_TYPE:
255 <      status = CONF_SERVER;
256 <      dlinkAdd(conf, &conf->node, &server_items);
257 <      break;
258 <
259 <    default:
260 <      break;
261 <    }
262 <    aconf->status = status;
263 <    break;
264 <
265 <  case LEAF_TYPE:
266 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
267 <                                       sizeof(struct MatchItem));
268 <    dlinkAdd(conf, &conf->node, &leaf_items);
269 <    break;
270 <
271 <  case HUB_TYPE:
272 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
273 <                                       sizeof(struct MatchItem));
274 <    dlinkAdd(conf, &conf->node, &hub_items);
275 <    break;
276 <
277 <  case ULINE_TYPE:
278 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
279 <                                       sizeof(struct MatchItem));
280 <    dlinkAdd(conf, &conf->node, &uconf_items);
281 <    break;
282 <
283 <  case GDENY_TYPE:
284 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
285 <                                       sizeof(struct AccessItem));
286 <    dlinkAdd(conf, &conf->node, &gdeny_items);
287 <    break;
288 <
289 <  case XLINE_TYPE:
290 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
291 <                                       sizeof(struct MatchItem));
292 <    dlinkAdd(conf, &conf->node, &xconf_items);
293 <    break;
294 < #ifdef HAVE_LIBPCRE
295 <  case RXLINE_TYPE:
296 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
297 <                                       sizeof(struct MatchItem));
298 <    dlinkAdd(conf, &conf->node, &rxconf_items);
299 <    break;
300 <
301 <  case RKLINE_TYPE:
302 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
303 <                                       sizeof(struct AccessItem));
304 <    aconf = map_to_conf(conf);
305 <    aconf->status = CONF_KLINE;
306 <    dlinkAdd(conf, &conf->node, &rkconf_items);
307 <    break;
308 < #endif
309 <  case CLUSTER_TYPE:
310 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem));
311 <    dlinkAdd(conf, &conf->node, &cluster_items);
312 <    break;
313 <
314 <  case CRESV_TYPE:
315 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
316 <                                       sizeof(struct ResvChannel));
317 <    break;
318 <
319 <  case NRESV_TYPE:
320 <    conf = (struct ConfItem *)MyMalloc(sizeof(struct ConfItem) +
321 <                                       sizeof(struct MatchItem));
322 <    dlinkAdd(conf, &conf->node, &nresv_items);
323 <    break;
149 >  struct MaskItem *conf = MyCalloc(sizeof(*conf));
150 >  dlink_list *list = NULL;
151  
152 <  case SERVICE_TYPE:
153 <    status = CONF_SERVICE;
154 <    conf = MyMalloc(sizeof(struct ConfItem));
328 <    dlinkAdd(conf, &conf->node, &service_items);
329 <    break;
330 <
331 <  case CLASS_TYPE:
332 <    conf = MyMalloc(sizeof(struct ConfItem) +
333 <                           sizeof(struct ClassItem));
334 <    dlinkAdd(conf, &conf->node, &class_items);
335 <
336 <    aclass = map_to_conf(conf);
337 <    aclass->active = 1;
338 <    ConFreq(aclass) = DEFAULT_CONNECTFREQUENCY;
339 <    PingFreq(aclass) = DEFAULT_PINGFREQUENCY;
340 <    MaxTotal(aclass) = MAXIMUM_LINKS_DEFAULT;
341 <    MaxSendq(aclass) = DEFAULT_SENDQ;
342 <
343 <    break;
344 <
345 <  default:
346 <    conf = NULL;
347 <    break;
348 <  }
349 <
350 <  /* XXX Yes, this will core if default is hit. I want it to for now - db */
351 <  conf->type = type;
152 >  conf->type   = type;
153 >  conf->active = 1;
154 >  conf->aftype = AF_INET;
155  
156 +  if ((list = map_to_list(type)))
157 +    dlinkAdd(conf, &conf->node, list);
158    return conf;
159   }
160  
161   void
162 < delete_conf_item(struct ConfItem *conf)
162 > conf_free(struct MaskItem *conf)
163   {
164 <  dlink_node *m = NULL;
165 <  struct MatchItem *match_item;
166 <  struct AccessItem *aconf;
167 <  ConfType type = conf->type;
164 >  dlink_node *ptr = NULL, *ptr_next = NULL;
165 >  dlink_list *list = NULL;
166 >
167 >  if (conf->node.next)
168 >    if ((list = map_to_list(conf->type)))
169 >      dlinkDelete(&conf->node, list);
170  
171    MyFree(conf->name);
365  conf->name = NULL;
172  
173 <  switch(type)
174 <  {
175 <  case DLINE_TYPE:
176 <  case EXEMPTDLINE_TYPE:
177 <  case GLINE_TYPE:
178 <  case KLINE_TYPE:
179 <  case CLIENT_TYPE:
180 <  case OPER_TYPE:
181 <  case SERVER_TYPE:
182 <    aconf = map_to_conf(conf);
183 <
184 <    if (aconf->dns_pending)
185 <      delete_resolver_queries(aconf);
186 <    if (aconf->passwd != NULL)
187 <      memset(aconf->passwd, 0, strlen(aconf->passwd));
382 <    if (aconf->spasswd != NULL)
383 <      memset(aconf->spasswd, 0, strlen(aconf->spasswd));
384 <    aconf->class_ptr = NULL;
385 <
386 <    MyFree(aconf->passwd);
387 <    MyFree(aconf->spasswd);
388 <    MyFree(aconf->reason);
389 <    MyFree(aconf->oper_reason);
390 <    MyFree(aconf->user);
391 <    MyFree(aconf->host);
392 <    MyFree(aconf->cipher_list);
173 >  if (conf->dns_pending)
174 >    delete_resolver_queries(conf);
175 >  if (conf->passwd)
176 >    memset(conf->passwd, 0, strlen(conf->passwd));
177 >  if (conf->spasswd)
178 >    memset(conf->spasswd, 0, strlen(conf->spasswd));
179 >
180 >  conf->class = NULL;
181 >
182 >  MyFree(conf->passwd);
183 >  MyFree(conf->spasswd);
184 >  MyFree(conf->reason);
185 >  MyFree(conf->certfp);
186 >  MyFree(conf->user);
187 >  MyFree(conf->host);
188   #ifdef HAVE_LIBCRYPTO
189 <    if (aconf->rsa_public_key)
395 <      RSA_free(aconf->rsa_public_key);
396 <    MyFree(aconf->rsa_public_key_file);
397 < #endif
398 <
399 <    /* Yes, sigh. switch on type again */
400 <    switch(type)
401 <    {
402 <    case EXEMPTDLINE_TYPE:
403 <    case DLINE_TYPE:
404 <    case GLINE_TYPE:
405 <    case KLINE_TYPE:
406 <    case CLIENT_TYPE:
407 <      MyFree(conf);
408 <      break;
409 <
410 <    case OPER_TYPE:
411 <      aconf = map_to_conf(conf);
412 <      if (!IsConfIllegal(aconf))
413 <        dlinkDelete(&conf->node, &oconf_items);
414 <      MyFree(conf);
415 <      break;
416 <
417 <    case SERVER_TYPE:
418 <      aconf = map_to_conf(conf);
419 <      if (!IsConfIllegal(aconf))
420 <        dlinkDelete(&conf->node, &server_items);
421 <      MyFree(conf);
422 <      break;
189 >  MyFree(conf->cipher_list);
190  
191 <    default:
192 <      break;
426 <    }
427 <    break;
428 <
429 <  case HUB_TYPE:
430 <    match_item = map_to_conf(conf);
431 <    MyFree(match_item->user);
432 <    MyFree(match_item->host);
433 <    MyFree(match_item->reason);
434 <    MyFree(match_item->oper_reason);
435 <    /* If marked illegal, its already been pulled off of the hub_items list */
436 <    if (!match_item->illegal)
437 <      dlinkDelete(&conf->node, &hub_items);
438 <    MyFree(conf);
439 <    break;
440 <
441 <  case LEAF_TYPE:
442 <    match_item = map_to_conf(conf);
443 <    MyFree(match_item->user);
444 <    MyFree(match_item->host);
445 <    MyFree(match_item->reason);
446 <    MyFree(match_item->oper_reason);
447 <    /* If marked illegal, its already been pulled off of the leaf_items list */
448 <    if (!match_item->illegal)
449 <      dlinkDelete(&conf->node, &leaf_items);
450 <    MyFree(conf);
451 <    break;
452 <
453 <  case ULINE_TYPE:
454 <    match_item = map_to_conf(conf);
455 <    MyFree(match_item->user);
456 <    MyFree(match_item->host);
457 <    MyFree(match_item->reason);
458 <    MyFree(match_item->oper_reason);
459 <    dlinkDelete(&conf->node, &uconf_items);
460 <    MyFree(conf);
461 <    break;
462 <
463 <  case XLINE_TYPE:
464 <    match_item = map_to_conf(conf);
465 <    MyFree(match_item->user);
466 <    MyFree(match_item->host);
467 <    MyFree(match_item->reason);
468 <    MyFree(match_item->oper_reason);
469 <    dlinkDelete(&conf->node, &xconf_items);
470 <    MyFree(conf);
471 <    break;
472 < #ifdef HAVE_LIBPCRE
473 <  case RKLINE_TYPE:
474 <    aconf = map_to_conf(conf);
475 <    MyFree(aconf->regexuser);
476 <    MyFree(aconf->regexhost);
477 <    MyFree(aconf->user);
478 <    MyFree(aconf->host);
479 <    MyFree(aconf->reason);
480 <    MyFree(aconf->oper_reason);
481 <    dlinkDelete(&conf->node, &rkconf_items);
482 <    MyFree(conf);
483 <    break;
484 <
485 <  case RXLINE_TYPE:
486 <    MyFree(conf->regexpname);
487 <    match_item = map_to_conf(conf);
488 <    MyFree(match_item->user);
489 <    MyFree(match_item->host);
490 <    MyFree(match_item->reason);
491 <    MyFree(match_item->oper_reason);
492 <    dlinkDelete(&conf->node, &rxconf_items);
493 <    MyFree(conf);
494 <    break;
191 >  if (conf->rsa_public_key)
192 >    RSA_free(conf->rsa_public_key);
193   #endif
194 <  case NRESV_TYPE:
195 <    match_item = map_to_conf(conf);
196 <    MyFree(match_item->user);
197 <    MyFree(match_item->host);
198 <    MyFree(match_item->reason);
501 <    MyFree(match_item->oper_reason);
502 <    dlinkDelete(&conf->node, &nresv_items);
503 <
504 <    if (conf->flags & CONF_FLAGS_TEMPORARY)
505 <      if ((m = dlinkFindDelete(&temporary_resv, conf)) != NULL)
506 <        free_dlink_node(m);
507 <
508 <    MyFree(conf);
509 <    break;
510 <
511 <  case GDENY_TYPE:
512 <    aconf = map_to_conf(conf);
513 <    MyFree(aconf->user);
514 <    MyFree(aconf->host);
515 <    dlinkDelete(&conf->node, &gdeny_items);
516 <    MyFree(conf);
517 <    break;
518 <
519 <  case CLUSTER_TYPE:
520 <    dlinkDelete(&conf->node, &cluster_items);
521 <    MyFree(conf);
522 <    break;
523 <
524 <  case CRESV_TYPE:
525 <    if (conf->flags & CONF_FLAGS_TEMPORARY)
526 <      if ((m = dlinkFindDelete(&temporary_resv, conf)) != NULL)
527 <        free_dlink_node(m);
528 <
529 <    MyFree(conf);
530 <    break;
531 <
532 <  case CLASS_TYPE:
533 <    dlinkDelete(&conf->node, &class_items);
534 <    MyFree(conf);
535 <    break;
536 <
537 <  case SERVICE_TYPE:
538 <    dlinkDelete(&conf->node, &service_items);
539 <    MyFree(conf);
540 <    break;
541 <
542 <  default:
543 <    break;
194 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->hub_list.head)
195 >  {
196 >    MyFree(ptr->data);
197 >    dlinkDelete(ptr, &conf->hub_list);
198 >    free_dlink_node(ptr);
199    }
545 }
200  
201 < /* free_access_item()
548 < *
549 < * inputs       - pointer to conf to free
550 < * output       - none
551 < * side effects - crucial password fields are zeroed, conf is freed
552 < */
553 < void
554 < free_access_item(struct AccessItem *aconf)
555 < {
556 <  struct ConfItem *conf;
557 <
558 <  if (aconf == NULL)
559 <    return;
560 <  conf = unmap_conf_item(aconf);
561 <  delete_conf_item(conf);
562 < }
563 <
564 < static const unsigned int shared_bit_table[] =
565 <  { 'K', 'k', 'U', 'X', 'x', 'Y', 'Q', 'q', 'R', 'L', 0};
566 <
567 < /* report_confitem_types()
568 < *
569 < * inputs       - pointer to client requesting confitem report
570 < *              - ConfType to report
571 < * output       - none
572 < * side effects -
573 < */
574 < void
575 < report_confitem_types(struct Client *source_p, ConfType type, int temp)
576 < {
577 <  dlink_node *ptr = NULL;
578 <  struct ConfItem *conf = NULL;
579 <  struct AccessItem *aconf = NULL;
580 <  struct MatchItem *matchitem = NULL;
581 <  struct ClassItem *classitem = NULL;
582 <  char buf[12];
583 <  char *p = NULL;
584 <  const char *pfx = NULL;
585 <
586 <  switch (type)
201 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->leaf_list.head)
202    {
203 <  case GDENY_TYPE:
204 <    DLINK_FOREACH(ptr, gdeny_items.head)
205 <    {
206 <      conf = ptr->data;
592 <      aconf = map_to_conf(conf);
593 <
594 <      p = buf;
595 <
596 <      if (aconf->flags & GDENY_BLOCK)
597 <        *p++ = 'B';
598 <      else
599 <        *p++ = 'b';
600 <
601 <      if (aconf->flags & GDENY_REJECT)
602 <        *p++ = 'R';
603 <      else
604 <        *p++ = 'r';
605 <
606 <      *p = '\0';
607 <
608 <      sendto_one(source_p, ":%s %d %s V %s@%s %s %s",
609 <                 me.name, RPL_STATSDEBUG, source_p->name,
610 <                 aconf->user, aconf->host, conf->name, buf);
611 <    }
612 <    break;
613 <
614 <  case XLINE_TYPE:
615 <    DLINK_FOREACH(ptr, xconf_items.head)
616 <    {
617 <      conf = ptr->data;
618 <      matchitem = map_to_conf(conf);
619 <
620 <      sendto_one(source_p, form_str(RPL_STATSXLINE),
621 <                 me.name, source_p->name,
622 <                 matchitem->hold ? "x": "X", matchitem->count,
623 <                 conf->name, matchitem->reason);
624 <    }
625 <    break;
626 <
627 < #ifdef HAVE_LIBPCRE
628 <  case RXLINE_TYPE:
629 <    DLINK_FOREACH(ptr, rxconf_items.head)
630 <    {
631 <      conf = ptr->data;
632 <      matchitem = map_to_conf(conf);
633 <
634 <      sendto_one(source_p, form_str(RPL_STATSXLINE),
635 <                 me.name, source_p->name,
636 <                 matchitem->hold ? "xR": "XR", matchitem->count,
637 <                 conf->name, matchitem->reason);
638 <    }
639 <    break;
640 <
641 <  case RKLINE_TYPE:
642 <    pfx = temp ? "kR" : "KR";
643 <
644 <    DLINK_FOREACH(ptr, rkconf_items.head)
645 <    {
646 <      aconf = map_to_conf((conf = ptr->data));
647 <
648 <      if (temp && !(conf->flags & CONF_FLAGS_TEMPORARY))
649 <        continue;
650 <
651 <      sendto_one(source_p, form_str(RPL_STATSKLINE), me.name,
652 <                 source_p->name, pfx, aconf->host, aconf->user,
653 <                 aconf->reason, aconf->oper_reason ? aconf->oper_reason : "");
654 <    }
655 <    break;
656 < #endif
657 <
658 <  case ULINE_TYPE:
659 <    DLINK_FOREACH(ptr, uconf_items.head)
660 <    {
661 <      conf = ptr->data;
662 <      matchitem = map_to_conf(conf);
663 <
664 <      p = buf;
665 <
666 <      /* some of these are redundant for the sake of
667 <       * consistency with cluster{} flags
668 <       */
669 <      *p++ = 'c';
670 <      flags_to_ascii(matchitem->action, shared_bit_table, p, 0);
671 <
672 <      sendto_one(source_p, form_str(RPL_STATSULINE),
673 <                 me.name, source_p->name, conf->name,
674 <                 matchitem->user?matchitem->user: "*",
675 <                 matchitem->host?matchitem->host: "*", buf);
676 <    }
677 <
678 <    DLINK_FOREACH(ptr, cluster_items.head)
679 <    {
680 <      conf = ptr->data;
681 <
682 <      p = buf;
683 <
684 <      *p++ = 'C';
685 <      flags_to_ascii(conf->flags, shared_bit_table, p, 0);
686 <
687 <      sendto_one(source_p, form_str(RPL_STATSULINE),
688 <                 me.name, source_p->name, conf->name,
689 <                 "*", "*", buf);
690 <    }
691 <
692 <    break;
693 <
694 <  case OPER_TYPE:
695 <    DLINK_FOREACH(ptr, oconf_items.head)
696 <    {
697 <      conf = ptr->data;
698 <      aconf = map_to_conf(conf);
699 <
700 <      /* Don't allow non opers to see oper privs */
701 <      if (HasUMode(source_p, UMODE_OPER))
702 <        sendto_one(source_p, form_str(RPL_STATSOLINE),
703 <                   me.name, source_p->name, 'O', aconf->user, aconf->host,
704 <                   conf->name, oper_privs_as_string(aconf->port),
705 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
706 <      else
707 <        sendto_one(source_p, form_str(RPL_STATSOLINE),
708 <                   me.name, source_p->name, 'O', aconf->user, aconf->host,
709 <                   conf->name, "0",
710 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
711 <    }
712 <    break;
713 <
714 <  case CLASS_TYPE:
715 <    DLINK_FOREACH(ptr, class_items.head)
716 <    {
717 <      conf = ptr->data;
718 <      classitem = map_to_conf(conf);
719 <      sendto_one(source_p, form_str(RPL_STATSYLINE),
720 <                 me.name, source_p->name, 'Y',
721 <                 conf->name, PingFreq(classitem),
722 <                 ConFreq(classitem),
723 <                 MaxTotal(classitem), MaxSendq(classitem),
724 <                 CurrUserCount(classitem),
725 <                 classitem->active ? "active" : "disabled");
726 <    }
727 <    break;
728 <
729 <  case CONF_TYPE:
730 <  case CLIENT_TYPE:
731 <    break;
732 <
733 <  case SERVICE_TYPE:
734 <    DLINK_FOREACH(ptr, service_items.head)
735 <    {
736 <      conf = ptr->data;
737 <      sendto_one(source_p, form_str(RPL_STATSSERVICE),
738 <                 me.name, source_p->name, 'S', "*", conf->name, 0, 0);
739 <    }
740 <    break;
741 <
742 <  case SERVER_TYPE:
743 <    DLINK_FOREACH(ptr, server_items.head)
744 <    {
745 <      p = buf;
746 <
747 <      conf = ptr->data;
748 <      aconf = map_to_conf(conf);
749 <
750 <      buf[0] = '\0';
751 <
752 <      if (IsConfAllowAutoConn(aconf))
753 <        *p++ = 'A';
754 <      if (IsConfSSL(aconf))
755 <        *p++ = 'S';
756 <      if (IsConfTopicBurst(aconf))
757 <        *p++ = 'T';
758 <      if (buf[0] == '\0')
759 <        *p++ = '*';
760 <
761 <      *p = '\0';
762 <
763 <      /*
764 <       * Allow admins to see actual ips unless hide_server_ips is enabled
765 <       */
766 <      if (!ConfigServerHide.hide_server_ips && HasUMode(source_p, UMODE_ADMIN))
767 <        sendto_one(source_p, form_str(RPL_STATSCLINE),
768 <                   me.name, source_p->name, 'C', aconf->host,
769 <                   buf, conf->name, aconf->port,
770 <                   aconf->class_ptr ? aconf->class_ptr->name : "<default>");
771 <        else
772 <          sendto_one(source_p, form_str(RPL_STATSCLINE),
773 <                     me.name, source_p->name, 'C',
774 <                     "*@127.0.0.1", buf, conf->name, aconf->port,
775 <                     aconf->class_ptr ? aconf->class_ptr->name : "<default>");
776 <    }
777 <    break;
778 <
779 <  case HUB_TYPE:
780 <    DLINK_FOREACH(ptr, hub_items.head)
781 <    {
782 <      conf = ptr->data;
783 <      matchitem = map_to_conf(conf);
784 <      sendto_one(source_p, form_str(RPL_STATSHLINE), me.name,
785 <                 source_p->name, 'H', matchitem->host, conf->name, 0, "*");
786 <    }
787 <    break;
203 >    MyFree(ptr->data);
204 >    dlinkDelete(ptr, &conf->leaf_list);
205 >    free_dlink_node(ptr);
206 >  }
207  
208 <  case LEAF_TYPE:
209 <    DLINK_FOREACH(ptr, leaf_items.head)
210 <    {
792 <      conf = ptr->data;
793 <      matchitem = map_to_conf(conf);
794 <      sendto_one(source_p, form_str(RPL_STATSLLINE), me.name,
795 <                 source_p->name, 'L', matchitem->host, conf->name, 0, "*");
796 <    }
797 <    break;
208 >  DLINK_FOREACH_SAFE(ptr, ptr_next, conf->exempt_list.head)
209 >  {
210 >    struct exempt *exptr = ptr->data;
211  
212 <  case GLINE_TYPE:
213 <  case KLINE_TYPE:
214 <  case DLINE_TYPE:
215 <  case EXEMPTDLINE_TYPE:
216 <  case CRESV_TYPE:
804 <  case NRESV_TYPE:
805 <  case CLUSTER_TYPE:
806 <  default:
807 <    break;
212 >    dlinkDelete(ptr, &conf->exempt_list);
213 >    MyFree(exptr->name);
214 >    MyFree(exptr->user);
215 >    MyFree(exptr->host);
216 >    MyFree(exptr);
217    }
218 +
219 +  MyFree(conf);
220   }
221  
222   /* check_client()
# Line 821 | Line 232 | report_confitem_types(struct Client *sou
232   *                Look for conf lines which have the same
233   *                status as the flags passed.
234   */
235 < static void *
236 < check_client(va_list args)
235 > int
236 > check_client(struct Client *source_p)
237   {
827  struct Client *source_p = va_arg(args, struct Client *);
828  const char *username = va_arg(args, const char *);
238    int i;
239 <
240 <  /* I'm already in big trouble if source_p->localClient is NULL -db */
241 <  if ((i = verify_access(source_p, username)))
833 <    ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
239 >
240 >  if ((i = verify_access(source_p)))
241 >    ilog(LOG_TYPE_IRCD, "Access denied: %s[%s]",
242           source_p->name, source_p->sockhost);
243  
244    switch (i)
245    {
246      case TOO_MANY:
247 <      sendto_realops_flags(UMODE_FULL, L_ALL,
247 >      sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
248                             "Too many on IP for %s (%s).",
249 <                           get_client_name(source_p, SHOW_IP),
250 <                           source_p->sockhost);
249 >                           get_client_name(source_p, SHOW_IP),
250 >                           source_p->sockhost);
251        ilog(LOG_TYPE_IRCD, "Too many connections on IP from %s.",
252 <           get_client_name(source_p, SHOW_IP));
252 >           get_client_name(source_p, SHOW_IP));
253        ++ServerStats.is_ref;
254 <      exit_client(source_p, &me, "No more connections allowed on that IP");
254 >      exit_client(source_p, "No more connections allowed on that IP");
255        break;
256  
257      case I_LINE_FULL:
258 <      sendto_realops_flags(UMODE_FULL, L_ALL,
259 <                           "I-line is full for %s (%s).",
260 <                           get_client_name(source_p, SHOW_IP),
261 <                           source_p->sockhost);
258 >      sendto_realops_flags(UMODE_FULL, L_ALL, SEND_NOTICE,
259 >                           "auth{} block is full for %s (%s).",
260 >                           get_client_name(source_p, SHOW_IP),
261 >                           source_p->sockhost);
262        ilog(LOG_TYPE_IRCD, "Too many connections from %s.",
263 <           get_client_name(source_p, SHOW_IP));
263 >           get_client_name(source_p, SHOW_IP));
264        ++ServerStats.is_ref;
265 <      exit_client(source_p, &me,
858 <                "No more connections allowed in your connection class");
265 >      exit_client(source_p, "No more connections allowed in your connection class");
266        break;
267  
268      case NOT_AUTHORIZED:
269        ++ServerStats.is_ref;
270        /* jdc - lists server name & port connections are on */
271        /*       a purely cosmetical change */
272 <      sendto_realops_flags(UMODE_UNAUTH, L_ALL,
273 <                           "Unauthorized client connection from %s [%s] on [%s/%u].",
274 <                           get_client_name(source_p, SHOW_IP),
275 <                           source_p->sockhost,
276 <                           source_p->localClient->listener->name,
277 <                           source_p->localClient->listener->port);
272 >      sendto_realops_flags(UMODE_UNAUTH, L_ALL, SEND_NOTICE,
273 >                           "Unauthorized client connection from %s [%s] on [%s/%u].",
274 >                           get_client_name(source_p, SHOW_IP),
275 >                           source_p->sockhost,
276 >                           source_p->localClient->listener->name,
277 >                           source_p->localClient->listener->port);
278        ilog(LOG_TYPE_IRCD,
279 <          "Unauthorized client connection from %s on [%s/%u].",
280 <          get_client_name(source_p, SHOW_IP),
281 <          source_p->localClient->listener->name,
282 <          source_p->localClient->listener->port);
283 <
284 <      /* XXX It is prolematical whether it is better to use the
878 <       * capture reject code here or rely on the connecting too fast code.
879 <       * - Dianora
880 <       */
881 <      if (REJECT_HOLD_TIME > 0)
882 <      {
883 <        sendto_one(source_p, ":%s NOTICE %s :You are not authorized to use this server",
884 <                   me.name, source_p->name);
885 <        source_p->localClient->reject_delay = CurrentTime + REJECT_HOLD_TIME;
886 <        SetCaptured(source_p);
887 <      }
888 <      else
889 <        exit_client(source_p, &me, "You are not authorized to use this server");
279 >           "Unauthorized client connection from %s on [%s/%u].",
280 >           get_client_name(source_p, SHOW_IP),
281 >           source_p->localClient->listener->name,
282 >           source_p->localClient->listener->port);
283 >
284 >      exit_client(source_p, "You are not authorized to use this server");
285        break;
286  
287     case BANNED_CLIENT:
288 <     /*
894 <      * Don't exit them immediately, play with them a bit.
895 <      * - Dianora
896 <      */
897 <     if (REJECT_HOLD_TIME > 0)
898 <     {
899 <       source_p->localClient->reject_delay = CurrentTime + REJECT_HOLD_TIME;
900 <       SetCaptured(source_p);
901 <     }
902 <     else
903 <       exit_client(source_p, &me, "Banned");
288 >     exit_client(source_p, "Banned");
289       ++ServerStats.is_ref;
290       break;
291  
# Line 909 | Line 294 | check_client(va_list args)
294       break;
295    }
296  
297 <  return (i < 0 ? NULL : source_p);
297 >  return (i < 0 ? 0 : 1);
298   }
299  
300   /* verify_access()
301   *
302   * inputs       - pointer to client to verify
918 *              - pointer to proposed username
303   * output       - 0 if success -'ve if not
304   * side effect  - find the first (best) I line to attach.
305   */
306   static int
307 < verify_access(struct Client *client_p, const char *username)
307 > verify_access(struct Client *client_p)
308   {
309 <  struct AccessItem *aconf = NULL, *rkconf = NULL;
310 <  struct ConfItem *conf = NULL;
927 <  char non_ident[USERLEN + 1] = { '~', '\0' };
928 <  const char *uhi[3];
309 >  struct MaskItem *conf = NULL;
310 >  char non_ident[USERLEN + 1] = "~";
311  
312    if (IsGotId(client_p))
313    {
314 <    aconf = find_address_conf(client_p->host, client_p->username,
315 <                             &client_p->localClient->ip,
316 <                             client_p->localClient->aftype,
314 >    conf = find_address_conf(client_p->host, client_p->username,
315 >                             &client_p->localClient->ip,
316 >                             client_p->localClient->aftype,
317                               client_p->localClient->passwd);
318    }
319    else
320    {
321 <    strlcpy(non_ident+1, username, sizeof(non_ident)-1);
322 <    aconf = find_address_conf(client_p->host,non_ident,
323 <                             &client_p->localClient->ip,
324 <                             client_p->localClient->aftype,
325 <                             client_p->localClient->passwd);
321 >    strlcpy(non_ident + 1, client_p->username, sizeof(non_ident) - 1);
322 >    conf = find_address_conf(client_p->host,non_ident,
323 >                             &client_p->localClient->ip,
324 >                             client_p->localClient->aftype,
325 >                             client_p->localClient->passwd);
326    }
327  
328 <  uhi[0] = IsGotId(client_p) ? client_p->username : non_ident;
947 <  uhi[1] = client_p->host;
948 <  uhi[2] = client_p->sockhost;
949 <
950 <  rkconf = find_regexp_kline(uhi);
951 <
952 <  if (aconf != NULL)
328 >  if (conf)
329    {
330 <    if (IsConfClient(aconf) && !rkconf)
330 >    if (IsConfClient(conf))
331      {
332 <      conf = unmap_conf_item(aconf);
957 <
958 <      if (IsConfRedir(aconf))
332 >      if (IsConfRedir(conf))
333        {
334 <        sendto_one(client_p, form_str(RPL_REDIR),
335 <                   me.name, client_p->name,
336 <                   conf->name ? conf->name : "",
337 <                   aconf->port);
964 <        return(NOT_AUTHORIZED);
334 >        sendto_one_numeric(client_p, &me, RPL_REDIR,
335 >                           conf->name ? conf->name : "",
336 >                           conf->port);
337 >        return NOT_AUTHORIZED;
338        }
339  
340 <      if (IsConfDoIdentd(aconf))
341 <        SetNeedId(client_p);
340 >      if (IsConfDoIdentd(conf))
341 >        SetNeedId(client_p);
342  
343        /* Thanks for spoof idea amm */
344 <      if (IsConfDoSpoofIp(aconf))
344 >      if (IsConfDoSpoofIp(conf))
345        {
346 <        conf = unmap_conf_item(aconf);
347 <
348 <        if (!ConfigFileEntry.hide_spoof_ips && IsConfSpoofNotice(aconf))
976 <          sendto_realops_flags(UMODE_ALL, L_ADMIN, "%s spoofing: %s as %s",
346 >        if (!ConfigFileEntry.hide_spoof_ips && IsConfSpoofNotice(conf))
347 >          sendto_realops_flags(UMODE_ALL, L_ADMIN, SEND_NOTICE,
348 >                               "%s spoofing: %s as %s",
349                                 client_p->name, client_p->host, conf->name);
350          strlcpy(client_p->host, conf->name, sizeof(client_p->host));
351 <        SetIPSpoof(client_p);
351 >        AddFlag(client_p, FLAGS_IP_SPOOFING | FLAGS_AUTH_SPOOF);
352        }
353  
354 <      return(attach_iline(client_p, conf));
354 >      return attach_iline(client_p, conf);
355      }
356 <    else if (rkconf || IsConfKill(aconf) || (ConfigFileEntry.glines && IsConfGline(aconf)))
356 >    else if (IsConfKill(conf) || (ConfigFileEntry.glines && IsConfGline(conf)))
357      {
358 <      /* XXX */
359 <      aconf = rkconf ? rkconf : aconf;
360 <      if (IsConfGline(aconf))
361 <        sendto_one(client_p, ":%s NOTICE %s :*** G-lined", me.name,
990 <                   client_p->name);
991 <      if (ConfigFileEntry.kline_with_reason)
992 <        sendto_one(client_p, ":%s NOTICE %s :*** Banned %s",
993 <                  me.name, client_p->name, aconf->reason);
994 <      return(BANNED_CLIENT);
358 >      if (IsConfGline(conf))
359 >        sendto_one_notice(client_p, &me, ":*** G-lined");
360 >      sendto_one_notice(client_p, &me, ":*** Banned: %s", conf->reason);
361 >      return BANNED_CLIENT;
362      }
363    }
364  
365 <  return(NOT_AUTHORIZED);
365 >  return NOT_AUTHORIZED;
366   }
367  
368   /* attach_iline()
# Line 1006 | Line 373 | verify_access(struct Client *client_p, c
373   * side effects - do actual attach
374   */
375   static int
376 < attach_iline(struct Client *client_p, struct ConfItem *conf)
376 > attach_iline(struct Client *client_p, struct MaskItem *conf)
377   {
378 <  struct AccessItem *aconf;
1012 <  struct ClassItem *aclass;
378 >  struct ClassItem *class = NULL;
379    struct ip_entry *ip_found;
380    int a_limit_reached = 0;
381 <  int local = 0, global = 0, ident = 0;
381 >  unsigned int local = 0, global = 0, ident = 0;
382 >
383 >  assert(conf->class);
384  
385    ip_found = find_or_add_ip(&client_p->localClient->ip);
386    ip_found->count++;
387    SetIpHash(client_p);
388  
389 <  aconf = map_to_conf(conf);
1022 <  if (aconf->class_ptr == NULL)
1023 <    return NOT_AUTHORIZED;  /* If class is missing, this is best */
1024 <
1025 <  aclass = map_to_conf(aconf->class_ptr);
389 >  class = conf->class;
390  
391    count_user_host(client_p->username, client_p->host,
392                    &global, &local, &ident);
# Line 1031 | Line 395 | attach_iline(struct Client *client_p, st
395     * setting a_limit_reached if any limit is reached.
396     * - Dianora
397     */
398 <  if (MaxTotal(aclass) != 0 && CurrUserCount(aclass) >= MaxTotal(aclass))
398 >  if (class->max_total && class->ref_count >= class->max_total)
399      a_limit_reached = 1;
400 <  else if (MaxPerIp(aclass) != 0 && ip_found->count > MaxPerIp(aclass))
400 >  else if (class->max_perip && ip_found->count > class->max_perip)
401      a_limit_reached = 1;
402 <  else if (MaxLocal(aclass) != 0 && local >= MaxLocal(aclass))
402 >  else if (class->max_local && local >= class->max_local)
403      a_limit_reached = 1;
404 <  else if (MaxGlobal(aclass) != 0 && global >= MaxGlobal(aclass))
404 >  else if (class->max_global && global >= class->max_global)
405      a_limit_reached = 1;
406 <  else if (MaxIdent(aclass) != 0 && ident >= MaxIdent(aclass) &&
406 >  else if (class->max_ident && ident >= class->max_ident &&
407             client_p->username[0] != '~')
408      a_limit_reached = 1;
409  
410    if (a_limit_reached)
411    {
412 <    if (!IsConfExemptLimits(aconf))
412 >    if (!IsConfExemptLimits(conf))
413        return TOO_MANY;   /* Already at maximum allowed */
414  
415 <    sendto_one(client_p,
416 <               ":%s NOTICE %s :*** Your connection class is full, "
1053 <               "but you have exceed_limit = yes;", me.name, client_p->name);
415 >    sendto_one_notice(client_p, &me, ":*** Your connection class is full, "
416 >                      "but you have exceed_limit = yes;");
417    }
418  
419    return attach_conf(client_p, conf);
# Line 1066 | Line 429 | attach_iline(struct Client *client_p, st
429   void
430   init_ip_hash_table(void)
431   {
432 <  ip_entry_heap = BlockHeapCreate("ip", sizeof(struct ip_entry),
1070 <    2 * hard_fdlimit);
432 >  ip_entry_pool = mp_pool_new(sizeof(struct ip_entry), MP_CHUNK_SIZE_IP_ENTRY);
433    memset(ip_hash_table, 0, sizeof(ip_hash_table));
434   }
435  
# Line 1116 | Line 478 | find_or_add_ip(struct irc_ssaddr *ip_in)
478    if (ip_entries_count >= 2 * hard_fdlimit)
479      garbage_collect_ip_entries();
480  
481 <  newptr = BlockHeapAlloc(ip_entry_heap);
481 >  newptr = mp_pool_get(ip_entry_pool);
482 >
483    ip_entries_count++;
484    memcpy(&newptr->ip, ip_in, sizeof(struct irc_ssaddr));
485  
# Line 1167 | Line 530 | remove_one_ip(struct irc_ssaddr *ip_in)
530      if (ptr->count > 0)
531        ptr->count--;
532      if (ptr->count == 0 &&
533 <        (CurrentTime-ptr->last_attempt) >= ConfigFileEntry.throttle_time)
533 >        (CurrentTime-ptr->last_attempt) >= ConfigFileEntry.throttle_time)
534      {
535        if (last_ptr != NULL)
536 <        last_ptr->next = ptr->next;
536 >        last_ptr->next = ptr->next;
537        else
538 <        ip_hash_table[hash_index] = ptr->next;
538 >        ip_hash_table[hash_index] = ptr->next;
539  
540 <      BlockHeapFree(ip_entry_heap, ptr);
540 >      mp_pool_release(ptr);
541        ip_entries_count--;
542        return;
543      }
# Line 1209 | Line 572 | hash_ip(struct irc_ssaddr *addr)
572      uint32_t *ip = (uint32_t *)&v6->sin6_addr.s6_addr;
573  
574      hash  = ip[0] ^ ip[3];
575 <    hash ^= hash >> 16;  
576 <    hash ^= hash >> 8;  
575 >    hash ^= hash >> 16;
576 >    hash ^= hash >> 8;
577      hash  = hash & (IP_HASH_SIZE - 1);
578      return hash;
579    }
# Line 1221 | Line 584 | hash_ip(struct irc_ssaddr *addr)
584  
585   /* count_ip_hash()
586   *
587 < * inputs        - pointer to counter of number of ips hashed
587 > * inputs        - pointer to counter of number of ips hashed
588   *               - pointer to memory used for ip hash
589   * output        - returned via pointers input
590   * side effects  - NONE
# Line 1233 | Line 596 | void
596   count_ip_hash(unsigned int *number_ips_stored, uint64_t *mem_ips_stored)
597   {
598    struct ip_entry *ptr;
1236  int i;
599  
600    *number_ips_stored = 0;
601    *mem_ips_stored    = 0;
602  
603 <  for (i = 0; i < IP_HASH_SIZE; i++)
603 >  for (unsigned int i = 0; i < IP_HASH_SIZE; ++i)
604    {
605      for (ptr = ip_hash_table[i]; ptr; ptr = ptr->next)
606      {
# Line 1260 | Line 622 | garbage_collect_ip_entries(void)
622    struct ip_entry *ptr;
623    struct ip_entry *last_ptr;
624    struct ip_entry *next_ptr;
1263  int i;
625  
626 <  for (i = 0; i < IP_HASH_SIZE; i++)
626 >  for (unsigned int i = 0; i < IP_HASH_SIZE; ++i)
627    {
628      last_ptr = NULL;
629  
# Line 1277 | Line 638 | garbage_collect_ip_entries(void)
638            last_ptr->next = ptr->next;
639          else
640            ip_hash_table[i] = ptr->next;
641 <        BlockHeapFree(ip_entry_heap, ptr);
641 >        mp_pool_release(ptr);
642          ip_entries_count--;
643        }
644        else
# Line 1294 | Line 655 | garbage_collect_ip_entries(void)
655   * side effects - Disassociate configuration from the client.
656   *                Also removes a class from the list if marked for deleting.
657   */
658 < int
659 < detach_conf(struct Client *client_p, ConfType type)
658 > void
659 > detach_conf(struct Client *client_p, enum maskitem_type type)
660   {
661 <  dlink_node *ptr, *next_ptr;
1301 <  struct ConfItem *conf;
1302 <  struct ClassItem *aclass;
1303 <  struct AccessItem *aconf;
1304 <  struct ConfItem *aclass_conf;
1305 <  struct MatchItem *match_item;
661 >  dlink_node *ptr = NULL, *ptr_next = NULL;
662  
663 <  DLINK_FOREACH_SAFE(ptr, next_ptr, client_p->localClient->confs.head)
663 >  DLINK_FOREACH_SAFE(ptr, ptr_next, client_p->localClient->confs.head)
664    {
665 <    conf = ptr->data;
1310 <
1311 <    if (type == CONF_TYPE || conf->type == type)
1312 <    {
1313 <      dlinkDelete(ptr, &client_p->localClient->confs);
1314 <      free_dlink_node(ptr);
1315 <
1316 <      switch (conf->type)
1317 <      {
1318 <      case CLIENT_TYPE:
1319 <      case OPER_TYPE:
1320 <      case SERVER_TYPE:
1321 <        aconf = map_to_conf(conf);
1322 <
1323 <        assert(aconf->clients > 0);
665 >    struct MaskItem *conf = ptr->data;
666  
667 <        if ((aclass_conf = ClassPtr(aconf)) != NULL)
668 <        {
669 <          aclass = map_to_conf(aclass_conf);
1328 <
1329 <          assert(aclass->curr_user_count > 0);
1330 <
1331 <          if (conf->type == CLIENT_TYPE)
1332 <            remove_from_cidr_check(&client_p->localClient->ip, aclass);
1333 <          if (--aclass->curr_user_count == 0 && aclass->active == 0)
1334 <            delete_conf_item(aclass_conf);
1335 <        }
667 >    assert(conf->type & (CONF_CLIENT | CONF_OPER | CONF_SERVER));
668 >    assert(conf->ref_count > 0);
669 >    assert(conf->class->ref_count > 0);
670  
671 <        if (--aconf->clients == 0 && IsConfIllegal(aconf))
672 <          delete_conf_item(conf);
671 >    if (!(conf->type & type))
672 >      continue;
673  
674 <        break;
674 >    dlinkDelete(ptr, &client_p->localClient->confs);
675 >    free_dlink_node(ptr);
676  
677 <      case LEAF_TYPE:
678 <      case HUB_TYPE:
1344 <        match_item = map_to_conf(conf);
1345 <        if (match_item->ref_count == 0 && match_item->illegal)
1346 <          delete_conf_item(conf);
1347 <        break;
1348 <      default:
1349 <        break;
1350 <      }
677 >    if (conf->type == CONF_CLIENT)
678 >      remove_from_cidr_check(&client_p->localClient->ip, conf->class);
679  
680 <      if (type != CONF_TYPE)
681 <        return 0;
680 >    if (--conf->class->ref_count == 0 && conf->class->active == 0)
681 >    {
682 >      class_free(conf->class);
683 >      conf->class = NULL;
684      }
1355  }
685  
686 <  return -1;
686 >    if (--conf->ref_count == 0 && conf->active == 0)
687 >      conf_free(conf);
688 >  }
689   }
690  
691   /* attach_conf()
# Line 1368 | Line 699 | detach_conf(struct Client *client_p, Con
699   *                attachment if there was an old one...
700   */
701   int
702 < attach_conf(struct Client *client_p, struct ConfItem *conf)
702 > attach_conf(struct Client *client_p, struct MaskItem *conf)
703   {
704 <  if (dlinkFind(&client_p->localClient->confs, conf) != NULL)
704 >  if (dlinkFind(&client_p->localClient->confs, conf))
705      return 1;
706  
707 <  if (conf->type == CLIENT_TYPE ||
708 <      conf->type == SERVER_TYPE ||
709 <      conf->type == OPER_TYPE)
710 <  {
1380 <    struct AccessItem *aconf = map_to_conf(conf);
1381 <    struct ClassItem *aclass = map_to_conf(aconf->class_ptr);
1382 <
1383 <    if (IsConfIllegal(aconf))
1384 <      return NOT_AUTHORIZED;
1385 <
1386 <    if (conf->type == CLIENT_TYPE)
1387 <      if (cidr_limit_reached(IsConfExemptLimits(aconf),
1388 <                             &client_p->localClient->ip, aclass))
1389 <        return TOO_MANY;    /* Already at maximum allowed */
707 >  if (conf->type == CONF_CLIENT)
708 >    if (cidr_limit_reached(IsConfExemptLimits(conf),
709 >                           &client_p->localClient->ip, conf->class))
710 >      return TOO_MANY;    /* Already at maximum allowed */
711  
712 <    CurrUserCount(aclass)++;
713 <    aconf->clients++;
1393 <  }
1394 <  else if (conf->type == HUB_TYPE || conf->type == LEAF_TYPE)
1395 <  {
1396 <    struct MatchItem *match_item = map_to_conf(conf);
1397 <    match_item->ref_count++;
1398 <  }
712 >  conf->class->ref_count++;
713 >  conf->ref_count++;
714  
715    dlinkAdd(conf, make_dlink_node(), &client_p->localClient->confs);
716  
# Line 1415 | Line 730 | attach_connect_block(struct Client *clie
730                       const char *host)
731   {
732    dlink_node *ptr;
733 <  struct ConfItem *conf;
1419 <  struct AccessItem *aconf;
733 >  struct MaskItem *conf = NULL;
734  
735    assert(client_p != NULL);
736    assert(host != NULL);
# Line 1427 | Line 741 | attach_connect_block(struct Client *clie
741    DLINK_FOREACH(ptr, server_items.head)
742    {
743      conf = ptr->data;
1430    aconf = map_to_conf(conf);
744  
745 <    if (match(conf->name, name) == 0 || match(aconf->host, host) == 0)
745 >    if (match(conf->name, name) || match(conf->host, host))
746        continue;
747  
748      attach_conf(client_p, conf);
# Line 1439 | Line 752 | attach_connect_block(struct Client *clie
752    return 0;
753   }
754  
1442 /* find_conf_exact()
1443 *
1444 * inputs       - type of ConfItem
1445 *              - pointer to name to find
1446 *              - pointer to username to find
1447 *              - pointer to host to find
1448 * output       - NULL or pointer to conf found
1449 * side effects - find a conf entry which matches the hostname
1450 *                and has the same name.
1451 */
1452 struct ConfItem *
1453 find_conf_exact(ConfType type, const char *name, const char *user,
1454                const char *host)
1455 {
1456  dlink_node *ptr;
1457  dlink_list *list_p;
1458  struct ConfItem *conf = NULL;
1459  struct AccessItem *aconf;
1460
1461  /* Only valid for OPER_TYPE and ...? */
1462  list_p = map_to_list(type);
1463
1464  DLINK_FOREACH(ptr, (*list_p).head)
1465  {
1466    conf = ptr->data;
1467
1468    if (conf->name == NULL)
1469      continue;
1470    aconf = map_to_conf(conf);
1471    if (aconf->host == NULL)
1472      continue;
1473    if (irccmp(conf->name, name) != 0)
1474      continue;
1475
1476    /*
1477    ** Accept if the *real* hostname (usually sockethost)
1478    ** socket host) matches *either* host or name field
1479    ** of the configuration.
1480    */
1481    if (!match(aconf->host, host) || !match(aconf->user, user))
1482      continue;
1483    if (type == OPER_TYPE)
1484    {
1485      struct ClassItem *aclass = map_to_conf(aconf->class_ptr);
1486
1487      if (aconf->clients >= MaxTotal(aclass))
1488        continue;
1489    }
1490
1491    return conf;
1492  }
1493
1494  return NULL;
1495 }
1496
755   /* find_conf_name()
756   *
757   * inputs       - pointer to conf link list to search
# Line 1503 | Line 761 | find_conf_exact(ConfType type, const cha
761   * side effects - find a conf entry which matches the name
762   *                and has the given mask.
763   */
764 < struct ConfItem *
765 < find_conf_name(dlink_list *list, const char *name, ConfType type)
764 > struct MaskItem *
765 > find_conf_name(dlink_list *list, const char *name, enum maskitem_type type)
766   {
767    dlink_node *ptr;
768 <  struct ConfItem* conf;
768 >  struct MaskItem* conf;
769  
770    DLINK_FOREACH(ptr, list->head)
771    {
772      conf = ptr->data;
773 <    
773 >
774      if (conf->type == type)
775      {
776 <      if (conf->name && (irccmp(conf->name, name) == 0 ||
777 <                         match(conf->name, name)))
776 >      if (conf->name && (!irccmp(conf->name, name) ||
777 >                         !match(conf->name, name)))
778        return conf;
779      }
780    }
# Line 1531 | Line 789 | find_conf_name(dlink_list *list, const c
789   * side effects - none
790   */
791   static dlink_list *
792 < map_to_list(ConfType type)
792 > map_to_list(enum maskitem_type type)
793   {
794    switch(type)
795    {
796 <  case RXLINE_TYPE:
1539 <    return(&rxconf_items);
1540 <    break;
1541 <  case XLINE_TYPE:
796 >  case CONF_XLINE:
797      return(&xconf_items);
798      break;
799 <  case ULINE_TYPE:
799 >  case CONF_ULINE:
800      return(&uconf_items);
801      break;
802 <  case NRESV_TYPE:
802 >  case CONF_NRESV:
803      return(&nresv_items);
804      break;
805 <  case OPER_TYPE:
805 >  case CONF_CRESV:
806 >    return(&cresv_items);
807 >  case CONF_OPER:
808      return(&oconf_items);
809      break;
810 <  case CLASS_TYPE:
1554 <    return(&class_items);
1555 <    break;
1556 <  case SERVER_TYPE:
810 >  case CONF_SERVER:
811      return(&server_items);
812      break;
813 <  case SERVICE_TYPE:
813 >  case CONF_SERVICE:
814      return(&service_items);
815      break;
816 <  case CLUSTER_TYPE:
816 >  case CONF_CLUSTER:
817      return(&cluster_items);
818      break;
1565  case CONF_TYPE:
1566  case GLINE_TYPE:
1567  case KLINE_TYPE:
1568  case DLINE_TYPE:
1569  case CRESV_TYPE:
819    default:
820      return NULL;
821    }
# Line 1578 | Line 827 | map_to_list(ConfType type)
827   *              - pointer to name string to find
828   *              - pointer to user
829   *              - pointer to host
830 < *              - optional action to match on as well
831 < * output       - NULL or pointer to found struct MatchItem
830 > *              - optional flags to match on as well
831 > * output       - NULL or pointer to found struct MaskItem
832   * side effects - looks for a match on name field
833   */
834 < struct ConfItem *
835 < find_matching_name_conf(ConfType type, const char *name, const char *user,
836 <                        const char *host, int action)
834 > struct MaskItem *
835 > find_matching_name_conf(enum maskitem_type type, const char *name, const char *user,
836 >                        const char *host, unsigned int flags)
837   {
838    dlink_node *ptr=NULL;
839 <  struct ConfItem *conf=NULL;
1591 <  struct AccessItem *aconf=NULL;
1592 <  struct MatchItem *match_item=NULL;
839 >  struct MaskItem *conf=NULL;
840    dlink_list *list_p = map_to_list(type);
841  
842    switch (type)
843    {
844 < #ifdef HAVE_LIBPCRE
1598 <  case RXLINE_TYPE:
1599 <      DLINK_FOREACH(ptr, list_p->head)
1600 <      {
1601 <        conf = ptr->data;
1602 <        assert(conf->regexpname);
1603 <
1604 <        if (!ircd_pcre_exec(conf->regexpname, name))
1605 <          return conf;
1606 <      }
1607 <      break;
1608 < #endif
1609 <  case SERVICE_TYPE:
844 >  case CONF_SERVICE:
845      DLINK_FOREACH(ptr, list_p->head)
846      {
847        conf = ptr->data;
# Line 1618 | Line 853 | find_matching_name_conf(ConfType type, c
853      }
854      break;
855  
856 <  case XLINE_TYPE:
857 <  case ULINE_TYPE:
858 <  case NRESV_TYPE:
856 >  case CONF_XLINE:
857 >  case CONF_ULINE:
858 >  case CONF_NRESV:
859 >  case CONF_CRESV:
860      DLINK_FOREACH(ptr, list_p->head)
861      {
862        conf = ptr->data;
863  
1628      match_item = map_to_conf(conf);
864        if (EmptyString(conf->name))
865 <        continue;
866 <      if ((name != NULL) && match_esc(conf->name, name))
865 >        continue;
866 >      if ((name != NULL) && !match(conf->name, name))
867        {
868 <        if ((user == NULL && (host == NULL)))
869 <          return conf;
870 <        if ((match_item->action & action) != action)
868 >        if ((user == NULL && (host == NULL)))
869 >          return conf;
870 >        if ((conf->flags & flags) != flags)
871            continue;
872 <        if (EmptyString(match_item->user) || EmptyString(match_item->host))
873 <          return conf;
874 <        if (match(match_item->user, user) && match(match_item->host, host))
875 <          return conf;
872 >        if (EmptyString(conf->user) || EmptyString(conf->host))
873 >          return conf;
874 >        if (!match(conf->user, user) && !match(conf->host, host))
875 >          return conf;
876        }
877      }
878        break;
879  
880 <  case SERVER_TYPE:
880 >  case CONF_SERVER:
881      DLINK_FOREACH(ptr, list_p->head)
882      {
883        conf = ptr->data;
1649      aconf = map_to_conf(conf);
884  
885 <      if ((name != NULL) && match_esc(name, conf->name))
885 >      if ((name != NULL) && !match(name, conf->name))
886          return conf;
887 <      else if ((host != NULL) && match_esc(host, aconf->host))
887 >      else if ((host != NULL) && !match(host, conf->host))
888          return conf;
889      }
890      break;
891 <  
891 >
892    default:
893      break;
894    }
# Line 1667 | Line 901 | find_matching_name_conf(ConfType type, c
901   *              - pointer to name string to find
902   *              - pointer to user
903   *              - pointer to host
904 < * output       - NULL or pointer to found struct MatchItem
904 > * output       - NULL or pointer to found struct MaskItem
905   * side effects - looks for an exact match on name field
906   */
907 < struct ConfItem *
908 < find_exact_name_conf(ConfType type, const struct Client *who, const char *name,
907 > struct MaskItem *
908 > find_exact_name_conf(enum maskitem_type type, const struct Client *who, const char *name,
909                       const char *user, const char *host)
910   {
911    dlink_node *ptr = NULL;
912 <  struct AccessItem *aconf;
913 <  struct ConfItem *conf;
1680 <  struct MatchItem *match_item;
1681 <  dlink_list *list_p;
1682 <
1683 <  list_p = map_to_list(type);
912 >  struct MaskItem *conf;
913 >  dlink_list *list_p = map_to_list(type);
914  
915    switch(type)
916    {
917 <  case RXLINE_TYPE:
918 <  case XLINE_TYPE:
919 <  case ULINE_TYPE:
920 <  case NRESV_TYPE:
917 >  case CONF_XLINE:
918 >  case CONF_ULINE:
919 >  case CONF_NRESV:
920 >  case CONF_CRESV:
921  
922      DLINK_FOREACH(ptr, list_p->head)
923      {
924        conf = ptr->data;
925 <      match_item = (struct MatchItem *)map_to_conf(conf);
925 >
926        if (EmptyString(conf->name))
927 <        continue;
928 <    
927 >        continue;
928 >
929        if (irccmp(conf->name, name) == 0)
930        {
931 <        if ((user == NULL && (host == NULL)))
932 <          return (conf);
933 <        if (EmptyString(match_item->user) || EmptyString(match_item->host))
934 <          return (conf);
935 <        if (match(match_item->user, user) && match(match_item->host, host))
936 <          return (conf);
931 >        if ((user == NULL && (host == NULL)))
932 >          return conf;
933 >        if (EmptyString(conf->user) || EmptyString(conf->host))
934 >          return conf;
935 >        if (!match(conf->user, user) && !match(conf->host, host))
936 >          return conf;
937        }
938      }
939      break;
940  
941 <  case OPER_TYPE:
941 >  case CONF_OPER:
942      DLINK_FOREACH(ptr, list_p->head)
943      {
944        conf = ptr->data;
1715      aconf = map_to_conf(conf);
945  
946        if (EmptyString(conf->name))
947          continue;
# Line 1721 | Line 950 | find_exact_name_conf(ConfType type, cons
950        {
951          if (!who)
952            return conf;
953 <        if (EmptyString(aconf->user) || EmptyString(aconf->host))
954 <          return conf;
955 <        if (match(aconf->user, who->username))
953 >        if (EmptyString(conf->user) || EmptyString(conf->host))
954 >          return NULL;
955 >        if (!match(conf->user, who->username))
956          {
957 <          switch (aconf->type)
957 >          switch (conf->htype)
958            {
959              case HM_HOST:
960 <              if (match(aconf->host, who->host) || match(aconf->host, who->sockhost))
961 <                return conf;
960 >              if (!match(conf->host, who->host) || !match(conf->host, who->sockhost))
961 >                if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
962 >                  return conf;
963                break;
964              case HM_IPV4:
965                if (who->localClient->aftype == AF_INET)
966 <                if (match_ipv4(&who->localClient->ip, &aconf->ipnum, aconf->bits))
967 <                  return conf;
966 >                if (match_ipv4(&who->localClient->ip, &conf->addr, conf->bits))
967 >                  if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
968 >                    return conf;
969                break;
970   #ifdef IPV6
971              case HM_IPV6:
972                if (who->localClient->aftype == AF_INET6)
973 <                if (match_ipv6(&who->localClient->ip, &aconf->ipnum, aconf->bits))
974 <                  return conf;
973 >                if (match_ipv6(&who->localClient->ip, &conf->addr, conf->bits))
974 >                  if (!conf->class->max_total || conf->class->ref_count < conf->class->max_total)
975 >                    return conf;
976                break;
977   #endif
978              default:
# Line 1752 | Line 984 | find_exact_name_conf(ConfType type, cons
984  
985      break;
986  
987 <  case SERVER_TYPE:
987 >  case CONF_SERVER:
988      DLINK_FOREACH(ptr, list_p->head)
989      {
990        conf = ptr->data;
991 <      aconf = (struct AccessItem *)map_to_conf(conf);
991 >
992        if (EmptyString(conf->name))
993 <        continue;
994 <    
993 >        continue;
994 >
995        if (name == NULL)
996        {
997 <        if (EmptyString(aconf->host))
998 <          continue;
999 <        if (irccmp(aconf->host, host) == 0)
1000 <          return(conf);
997 >        if (EmptyString(conf->host))
998 >          continue;
999 >        if (irccmp(conf->host, host) == 0)
1000 >          return conf;
1001        }
1002        else if (irccmp(conf->name, name) == 0)
1003 <      {
1772 <          return (conf);
1773 <      }
1003 >        return conf;
1004      }
1775    break;
1005  
1777  case CLASS_TYPE:
1778    DLINK_FOREACH(ptr, list_p->head)
1779    {
1780      conf = ptr->data;
1781      if (EmptyString(conf->name))
1782        continue;
1783    
1784      if (irccmp(conf->name, name) == 0)
1785        return (conf);
1786    }
1006      break;
1007  
1008    default:
1009      break;
1010    }
1011 <  return(NULL);
1011 >
1012 >  return NULL;
1013   }
1014  
1015   /* rehash()
# Line 1801 | Line 1021 | find_exact_name_conf(ConfType type, cons
1021   int
1022   rehash(int sig)
1023   {
1024 <  if (sig != 0)
1025 <    sendto_realops_flags(UMODE_ALL, L_ALL,
1026 <                         "Got signal SIGHUP, reloading ircd.conf file");
1024 >  if (sig)
1025 >    sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1026 >                         "Got signal SIGHUP, reloading configuration file(s)");
1027  
1028    restart_resolver();
1029  
# Line 1814 | Line 1034 | rehash(int sig)
1034  
1035    read_conf_files(0);
1036  
1037 <  if (ServerInfo.description != NULL)
1037 >  if (ServerInfo.description)
1038      strlcpy(me.info, ServerInfo.description, sizeof(me.info));
1039  
1040    load_conf_modules();
1041 +  check_conf_klines();
1042  
1043 <  flush_deleted_I_P();
1823 <
1824 <  rehashed_klines = 1;
1825 < /* XXX */
1826 <  if (ConfigLoggingEntry.use_logging)
1827 <    log_close_all();
1828 <
1829 <  return(0);
1043 >  return 0;
1044   }
1045  
1046   /* set_default_conf()
# Line 1844 | Line 1058 | set_default_conf(void)
1058    /* verify init_class() ran, this should be an unnecessary check
1059     * but its not much work.
1060     */
1061 <  assert(class_default == (struct ConfItem *) class_items.tail->data);
1061 >  assert(class_default == class_get_list()->tail->data);
1062  
1063   #ifdef HAVE_LIBCRYPTO
1064 +  ServerInfo.message_digest_algorithm = EVP_sha256();
1065    ServerInfo.rsa_private_key = NULL;
1066    ServerInfo.rsa_private_key_file = NULL;
1067   #endif
# Line 1854 | Line 1069 | set_default_conf(void)
1069    /* ServerInfo.name is not rehashable */
1070    /* ServerInfo.name = ServerInfo.name; */
1071    ServerInfo.description = NULL;
1072 <  DupString(ServerInfo.network_name, NETWORK_NAME_DEFAULT);
1073 <  DupString(ServerInfo.network_desc, NETWORK_DESC_DEFAULT);
1072 >  ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
1073 >  ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
1074  
1075    memset(&ServerInfo.ip, 0, sizeof(ServerInfo.ip));
1076    ServerInfo.specific_ipv4_vhost = 0;
# Line 1863 | Line 1078 | set_default_conf(void)
1078    ServerInfo.specific_ipv6_vhost = 0;
1079  
1080    ServerInfo.max_clients = MAXCLIENTS_MAX;
1081 +  ServerInfo.max_nick_length = 9;
1082 +  ServerInfo.max_topic_length = 80;
1083  
1084    ServerInfo.hub = 0;
1085    ServerInfo.dns_host.sin_addr.s_addr = 0;
# Line 1871 | Line 1088 | set_default_conf(void)
1088    AdminInfo.email = NULL;
1089    AdminInfo.description = NULL;
1090  
1091 <  log_close_all();
1091 >  log_del_all();
1092  
1093    ConfigLoggingEntry.use_logging = 1;
1094  
1095    ConfigChannel.disable_fake_channels = 0;
1096 <  ConfigChannel.restrict_channels = 0;
1097 <  ConfigChannel.disable_local_channels = 0;
1098 <  ConfigChannel.use_invex = 1;
1099 <  ConfigChannel.use_except = 1;
1883 <  ConfigChannel.use_knock = 1;
1884 <  ConfigChannel.knock_delay = 300;
1096 >  ConfigChannel.invite_client_count = 10;
1097 >  ConfigChannel.invite_client_time = 300;
1098 >  ConfigChannel.knock_client_count = 1;
1099 >  ConfigChannel.knock_client_time = 300;
1100    ConfigChannel.knock_delay_channel = 60;
1101 <  ConfigChannel.max_chans_per_user = 15;
1887 <  ConfigChannel.quiet_on_ban = 1;
1101 >  ConfigChannel.max_channels = 25;
1102    ConfigChannel.max_bans = 25;
1103    ConfigChannel.default_split_user_count = 0;
1104    ConfigChannel.default_split_server_count = 0;
1105    ConfigChannel.no_join_on_split = 0;
1106    ConfigChannel.no_create_on_split = 0;
1893  ConfigChannel.burst_topicwho = 1;
1107  
1108    ConfigServerHide.flatten_links = 0;
1109    ConfigServerHide.links_delay = 300;
1110    ConfigServerHide.hidden = 0;
1898  ConfigServerHide.disable_hidden = 0;
1111    ConfigServerHide.hide_servers = 0;
1112 <  DupString(ConfigServerHide.hidden_name, NETWORK_NAME_DEFAULT);
1112 >  ConfigServerHide.hide_services = 0;
1113 >  ConfigServerHide.hidden_name = xstrdup(NETWORK_NAME_DEFAULT);
1114    ConfigServerHide.hide_server_ips = 0;
1115 +  ConfigServerHide.disable_remote_commands = 0;
1116  
1117 <  
1904 <  DupString(ConfigFileEntry.service_name, SERVICE_NAME_DEFAULT);
1117 >  ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
1118    ConfigFileEntry.max_watch = WATCHSIZE_DEFAULT;
1119 +  ConfigFileEntry.cycle_on_host_change = 1;
1120 +  ConfigFileEntry.glines = 0;
1121 +  ConfigFileEntry.gline_time = 12 * 3600;
1122 +  ConfigFileEntry.gline_request_time = GLINE_REQUEST_EXPIRE_DEFAULT;
1123    ConfigFileEntry.gline_min_cidr = 16;
1124    ConfigFileEntry.gline_min_cidr6 = 48;
1125    ConfigFileEntry.invisible_on_connect = 1;
1909  ConfigFileEntry.burst_away = 0;
1910  ConfigFileEntry.use_whois_actually = 1;
1126    ConfigFileEntry.tkline_expire_notices = 1;
1127    ConfigFileEntry.hide_spoof_ips = 1;
1128    ConfigFileEntry.ignore_bogus_ts = 0;
1129    ConfigFileEntry.disable_auth = 0;
1915  ConfigFileEntry.disable_remote = 0;
1130    ConfigFileEntry.kill_chase_time_limit = 90;
1131    ConfigFileEntry.default_floodcount = 8;
1132    ConfigFileEntry.failed_oper_notice = 1;
# Line 1926 | Line 1140 | set_default_conf(void)
1140    ConfigFileEntry.anti_spam_exit_message_time = 0;
1141    ConfigFileEntry.ts_warn_delta = TS_WARN_DELTA_DEFAULT;
1142    ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
1143 <  ConfigFileEntry.kline_with_reason = 1;
1144 <  ConfigFileEntry.kline_reason = NULL;
1931 <  ConfigFileEntry.warn_no_nline = 1;
1143 >  ConfigFileEntry.warn_no_connect_block = 1;
1144 >  ConfigFileEntry.stats_e_disabled = 0;
1145    ConfigFileEntry.stats_o_oper_only = 0;
1146 <  ConfigFileEntry.stats_k_oper_only = 1;  /* masked */
1147 <  ConfigFileEntry.stats_i_oper_only = 1;  /* masked */
1146 >  ConfigFileEntry.stats_k_oper_only = 1;  /* 1 = masked */
1147 >  ConfigFileEntry.stats_i_oper_only = 1;  /* 1 = masked */
1148    ConfigFileEntry.stats_P_oper_only = 0;
1149 +  ConfigFileEntry.stats_u_oper_only = 0;
1150    ConfigFileEntry.caller_id_wait = 60;
1151    ConfigFileEntry.opers_bypass_callerid = 0;
1152    ConfigFileEntry.pace_wait = 10;
# Line 1942 | Line 1156 | set_default_conf(void)
1156    ConfigFileEntry.no_oper_flood = 0;
1157    ConfigFileEntry.true_no_oper_flood = 0;
1158    ConfigFileEntry.oper_pass_resv = 1;
1945  ConfigFileEntry.glines = 0;
1946  ConfigFileEntry.gline_time = 12 * 3600;
1159    ConfigFileEntry.max_targets = MAX_TARGETS_DEFAULT;
1948  ConfigFileEntry.client_flood = CLIENT_FLOOD_DEFAULT;
1160    ConfigFileEntry.oper_only_umodes = UMODE_DEBUG;
1161 <  ConfigFileEntry.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE |
1162 <    UMODE_OPERWALL | UMODE_WALLOP;
1163 <  ConfigFileEntry.use_egd = 0;
1953 <  ConfigFileEntry.egdpool_path = NULL;
1954 <  ConfigFileEntry.throttle_time = 10;
1955 < }
1956 <
1957 < /* read_conf()
1958 < *
1959 < * inputs       - file descriptor pointing to config file to use
1960 < * output       - None
1961 < * side effects - Read configuration file.
1962 < */
1963 < static void
1964 < read_conf(FILE *file)
1965 < {
1966 <  lineno = 0;
1967 <
1968 <  set_default_conf(); /* Set default values prior to conf parsing */
1969 <  conf_parser_ctx.pass = 1;
1970 <  yyparse();          /* pick up the classes first */
1971 <
1972 <  rewind(file);
1973 <
1974 <  conf_parser_ctx.pass = 2;
1975 <  yyparse();          /* Load the values from the conf */
1976 <  validate_conf();    /* Check to make sure some values are still okay. */
1977 <                      /* Some global values are also loaded here. */
1978 <  check_class();      /* Make sure classes are valid */
1161 >  ConfigFileEntry.oper_umodes = UMODE_BOTS | UMODE_LOCOPS | UMODE_SERVNOTICE | UMODE_WALLOP;
1162 >  ConfigFileEntry.throttle_count = 1;
1163 >  ConfigFileEntry.throttle_time = 1;
1164   }
1165  
1166   static void
# Line 1988 | Line 1173 | validate_conf(void)
1173      ConfigFileEntry.ts_max_delta = TS_MAX_DELTA_DEFAULT;
1174  
1175    if (ServerInfo.network_name == NULL)
1176 <    DupString(ServerInfo.network_name,NETWORK_NAME_DEFAULT);
1176 >    ServerInfo.network_name = xstrdup(NETWORK_NAME_DEFAULT);
1177  
1178    if (ServerInfo.network_desc == NULL)
1179 <    DupString(ServerInfo.network_desc,NETWORK_DESC_DEFAULT);
1179 >    ServerInfo.network_desc = xstrdup(NETWORK_DESC_DEFAULT);
1180  
1181    if (ConfigFileEntry.service_name == NULL)
1182 <    DupString(ConfigFileEntry.service_name, SERVICE_NAME_DEFAULT);
1998 <
1999 <  if ((ConfigFileEntry.client_flood < CLIENT_FLOOD_MIN) ||
2000 <      (ConfigFileEntry.client_flood > CLIENT_FLOOD_MAX))
2001 <    ConfigFileEntry.client_flood = CLIENT_FLOOD_MAX;
1182 >    ConfigFileEntry.service_name = xstrdup(SERVICE_NAME_DEFAULT);
1183  
1184    ConfigFileEntry.max_watch = IRCD_MAX(ConfigFileEntry.max_watch, WATCHSIZE_MIN);
1185   }
1186  
1187 < /* lookup_confhost()
1187 > /* read_conf()
1188   *
1189 < * start DNS lookups of all hostnames in the conf
1190 < * line and convert an IP addresses in a.b.c.d number for to IP#s.
1189 > * inputs       - file descriptor pointing to config file to use
1190 > * output       - None
1191 > * side effects - Read configuration file.
1192   */
1193   static void
1194 < lookup_confhost(struct ConfItem *conf)
1194 > read_conf(FILE *file)
1195   {
1196 <  struct AccessItem *aconf;
2015 <  struct addrinfo hints, *res;
1196 >  lineno = 0;
1197  
1198 <  aconf = map_to_conf(conf);
1198 >  set_default_conf();  /* Set default values prior to conf parsing */
1199 >  conf_parser_ctx.pass = 1;
1200 >  yyparse();  /* Pick up the classes first */
1201  
1202 <  if (EmptyString(aconf->host) ||
2020 <      EmptyString(aconf->user))
2021 <  {
2022 <    ilog(LOG_TYPE_IRCD, "Host/server name error: (%s) (%s)",
2023 <         aconf->host, conf->name);
2024 <    return;
2025 <  }
1202 >  rewind(file);
1203  
1204 <  if (strchr(aconf->host, '*') ||
1205 <      strchr(aconf->host, '?'))
1206 <    return;
1204 >  conf_parser_ctx.pass = 2;
1205 >  yyparse();  /* Load the values from the conf */
1206 >  validate_conf();  /* Check to make sure some values are still okay. */
1207 >                    /* Some global values are also loaded here. */
1208 >  class_delete_marked();  /* Delete unused classes that are marked for deletion */
1209 > }
1210 >
1211 > /* lookup_confhost()
1212 > *
1213 > * start DNS lookups of all hostnames in the conf
1214 > * line and convert an IP addresses in a.b.c.d number for to IP#s.
1215 > */
1216 > void
1217 > lookup_confhost(struct MaskItem *conf)
1218 > {
1219 >  struct addrinfo hints, *res;
1220  
1221 <  /* Do name lookup now on hostnames given and store the
1221 >  /*
1222 >   * Do name lookup now on hostnames given and store the
1223     * ip numbers in conf structure.
1224     */
1225    memset(&hints, 0, sizeof(hints));
# Line 2039 | Line 1230 | lookup_confhost(struct ConfItem *conf)
1230    /* Get us ready for a bind() and don't bother doing dns lookup */
1231    hints.ai_flags = AI_PASSIVE | AI_NUMERICHOST;
1232  
1233 <  if (getaddrinfo(aconf->host, NULL, &hints, &res))
1233 >  if (getaddrinfo(conf->host, NULL, &hints, &res))
1234    {
1235 <    conf_dns_lookup(aconf);
1235 >    conf_dns_lookup(conf);
1236      return;
1237    }
1238  
1239 <  assert(res != NULL);
1239 >  assert(res);
1240 >
1241 >  memcpy(&conf->addr, res->ai_addr, res->ai_addrlen);
1242 >  conf->addr.ss_len = res->ai_addrlen;
1243 >  conf->addr.ss.ss_family = res->ai_family;
1244  
2050  memcpy(&aconf->ipnum, res->ai_addr, res->ai_addrlen);
2051  aconf->ipnum.ss_len = res->ai_addrlen;
2052  aconf->ipnum.ss.ss_family = res->ai_family;
1245    freeaddrinfo(res);
1246   }
1247  
# Line 2063 | Line 1255 | lookup_confhost(struct ConfItem *conf)
1255   int
1256   conf_connect_allowed(struct irc_ssaddr *addr, int aftype)
1257   {
1258 <  struct ip_entry *ip_found;
1259 <  struct AccessItem *aconf = find_dline_conf(addr, aftype);
1258 >  struct ip_entry *ip_found = NULL;
1259 >  struct MaskItem *conf = find_dline_conf(addr, aftype);
1260  
1261    /* DLINE exempt also gets you out of static limits/pacing... */
1262 <  if (aconf && (aconf->status & CONF_EXEMPTDLINE))
1262 >  if (conf && (conf->type == CONF_EXEMPT))
1263      return 0;
1264  
1265 <  if (aconf != NULL)
1265 >  if (conf)
1266      return BANNED_CLIENT;
1267  
1268    ip_found = find_or_add_ip(addr);
1269  
1270 <  if ((CurrentTime - ip_found->last_attempt) <
2079 <      ConfigFileEntry.throttle_time)
1270 >  if ((CurrentTime - ip_found->last_attempt) < ConfigFileEntry.throttle_time)
1271    {
1272 <    ip_found->last_attempt = CurrentTime;
1273 <    return TOO_FAST;
1272 >    if (ip_found->connection_count >= ConfigFileEntry.throttle_count)
1273 >      return TOO_FAST;
1274 >
1275 >    ++ip_found->connection_count;
1276    }
1277 +  else
1278 +    ip_found->connection_count = 1;
1279  
1280    ip_found->last_attempt = CurrentTime;
1281    return 0;
1282   }
1283  
2089 static struct AccessItem *
2090 find_regexp_kline(const char *uhi[])
2091 {
2092 #ifdef HAVE_LIBPCRE
2093  const dlink_node *ptr = NULL;
2094
2095  DLINK_FOREACH(ptr, rkconf_items.head)
2096  {
2097    struct AccessItem *aptr = map_to_conf(ptr->data);
2098
2099    assert(aptr->regexuser);
2100    assert(aptr->regexhost);
2101
2102    if (!ircd_pcre_exec(aptr->regexuser, uhi[0]) &&
2103        (!ircd_pcre_exec(aptr->regexhost, uhi[1]) ||
2104         !ircd_pcre_exec(aptr->regexhost, uhi[2])))
2105      return aptr;
2106  }
2107 #endif
2108  return NULL;
2109 }
2110
2111 /* find_kill()
2112 *
2113 * inputs       - pointer to client structure
2114 * output       - pointer to struct AccessItem if found
2115 * side effects - See if this user is klined already,
2116 *                and if so, return struct AccessItem pointer
2117 */
2118 struct AccessItem *
2119 find_kill(struct Client *client_p)
2120 {
2121  struct AccessItem *aconf = NULL;
2122  const char *uhi[3];
2123
2124  uhi[0] = client_p->username;
2125  uhi[1] = client_p->host;
2126  uhi[2] = client_p->sockhost;
2127
2128  assert(client_p != NULL);
2129
2130  aconf = find_kline_conf(client_p->host, client_p->username,
2131                          &client_p->localClient->ip,
2132                          client_p->localClient->aftype);
2133  if (aconf == NULL)
2134    aconf = find_regexp_kline(uhi);
2135
2136  if (aconf && (aconf->status & CONF_KLINE))
2137    return aconf;
2138
2139  return NULL;
2140 }
2141
2142 struct AccessItem *
2143 find_gline(struct Client *client_p)
2144 {
2145  struct AccessItem *aconf;
2146
2147  assert(client_p != NULL);
2148
2149  aconf = find_gline_conf(client_p->host, client_p->username,
2150                          &client_p->localClient->ip,
2151                          client_p->localClient->aftype);
2152
2153  if (aconf && (aconf->status & CONF_GLINE))
2154    return aconf;
2155
2156  return NULL;
2157 }
2158
2159 /* add_temp_line()
2160 *
2161 * inputs        - pointer to struct ConfItem
2162 * output        - none
2163 * Side effects  - links in given struct ConfItem into
2164 *                 temporary *line link list
2165 */
2166 void
2167 add_temp_line(struct ConfItem *conf)
2168 {
2169  struct AccessItem *aconf;
2170
2171  if (conf->type == DLINE_TYPE)
2172  {
2173    aconf = map_to_conf(conf);
2174    SetConfTemporary(aconf);
2175    dlinkAdd(conf, &conf->node, &temporary_dlines);
2176    MyFree(aconf->user);
2177    aconf->user = NULL;
2178    add_conf_by_address(CONF_DLINE, aconf);
2179  }
2180  else if (conf->type == KLINE_TYPE)
2181  {
2182    aconf = map_to_conf(conf);
2183    SetConfTemporary(aconf);
2184    dlinkAdd(conf, &conf->node, &temporary_klines);
2185    add_conf_by_address(CONF_KILL, aconf);
2186  }
2187  else if (conf->type == GLINE_TYPE)
2188  {
2189    aconf = map_to_conf(conf);
2190    SetConfTemporary(aconf);
2191    dlinkAdd(conf, &conf->node, &temporary_glines);
2192    add_conf_by_address(CONF_GLINE, aconf);
2193  }
2194  else if (conf->type == XLINE_TYPE)
2195  {
2196    conf->flags |= CONF_FLAGS_TEMPORARY;
2197    dlinkAdd(conf, make_dlink_node(), &temporary_xlines);
2198  }
2199  else if (conf->type == RXLINE_TYPE)
2200  {
2201    conf->flags |= CONF_FLAGS_TEMPORARY;
2202    dlinkAdd(conf, make_dlink_node(), &temporary_rxlines);
2203  }
2204  else if (conf->type == RKLINE_TYPE)
2205  {
2206    conf->flags |= CONF_FLAGS_TEMPORARY;
2207    dlinkAdd(conf, make_dlink_node(), &temporary_rklines);
2208  }
2209  else if ((conf->type == NRESV_TYPE) || (conf->type == CRESV_TYPE))
2210  {
2211    conf->flags |= CONF_FLAGS_TEMPORARY;
2212    dlinkAdd(conf, make_dlink_node(), &temporary_resv);
2213  }
2214 }
2215
1284   /* cleanup_tklines()
1285   *
1286   * inputs       - NONE
# Line 2223 | Line 1291 | add_temp_line(struct ConfItem *conf)
1291   void
1292   cleanup_tklines(void *notused)
1293   {
1294 <  expire_tklines(&temporary_glines);
1295 <  expire_tklines(&temporary_klines);
1296 <  expire_tklines(&temporary_dlines);
1297 <  expire_tklines(&temporary_xlines);
2230 <  expire_tklines(&temporary_rxlines);
2231 <  expire_tklines(&temporary_rklines);
2232 <  expire_tklines(&temporary_resv);
1294 >  hostmask_expire_temporary();
1295 >  expire_tklines(&xconf_items);
1296 >  expire_tklines(&nresv_items);
1297 >  expire_tklines(&cresv_items);
1298   }
1299  
1300   /* expire_tklines()
# Line 2241 | Line 1306 | cleanup_tklines(void *notused)
1306   static void
1307   expire_tklines(dlink_list *tklist)
1308   {
1309 <  dlink_node *ptr;
1310 <  dlink_node *next_ptr;
2246 <  struct ConfItem *conf;
2247 <  struct MatchItem *xconf;
2248 <  struct MatchItem *nconf;
2249 <  struct AccessItem *aconf;
2250 <  struct ResvChannel *cconf;
1309 >  dlink_node *ptr = NULL, *ptr_next = NULL;
1310 >  struct MaskItem *conf = NULL;
1311  
1312 <  DLINK_FOREACH_SAFE(ptr, next_ptr, tklist->head)
1312 >  DLINK_FOREACH_SAFE(ptr, ptr_next, tklist->head)
1313    {
1314      conf = ptr->data;
2255    if (conf->type == GLINE_TYPE ||
2256        conf->type == KLINE_TYPE ||
2257        conf->type == DLINE_TYPE)
2258    {
2259      aconf = (struct AccessItem *)map_to_conf(conf);
2260      if (aconf->hold <= CurrentTime)
2261      {
2262        /* XXX - Do we want GLINE expiry notices?? */
2263        /* Alert opers that a TKline expired - Hwy */
2264        if (ConfigFileEntry.tkline_expire_notices)
2265        {
2266          if (aconf->status & CONF_KILL)
2267          {
2268            sendto_realops_flags(UMODE_ALL, L_ALL,
2269                                 "Temporary K-line for [%s@%s] expired",
2270                                 (aconf->user) ? aconf->user : "*",
2271                                 (aconf->host) ? aconf->host : "*");
2272          }
2273          else if (conf->type == DLINE_TYPE)
2274          {
2275            sendto_realops_flags(UMODE_ALL, L_ALL,
2276                                 "Temporary D-line for [%s] expired",
2277                                 (aconf->host) ? aconf->host : "*");
2278          }
2279        }
1315  
1316 <        dlinkDelete(ptr, tklist);
1317 <        delete_one_address_conf(aconf->host, aconf);
1318 <      }
1319 <    }
2285 <    else if (conf->type == XLINE_TYPE ||
2286 <             conf->type == RXLINE_TYPE)
1316 >    if (!conf->until || conf->until > CurrentTime)
1317 >      continue;
1318 >
1319 >    if (conf->type == CONF_XLINE)
1320      {
1321 <      xconf = (struct MatchItem *)map_to_conf(conf);
1322 <      if (xconf->hold <= CurrentTime)
1323 <      {
1324 <        if (ConfigFileEntry.tkline_expire_notices)
2292 <          sendto_realops_flags(UMODE_ALL, L_ALL,
2293 <                               "Temporary X-line for [%s] %sexpired", conf->name,
2294 <                               conf->type == RXLINE_TYPE ? "(REGEX) " : "");
2295 <        dlinkDelete(ptr, tklist);
2296 <        free_dlink_node(ptr);
2297 <        delete_conf_item(conf);
2298 <      }
1321 >      if (ConfigFileEntry.tkline_expire_notices)
1322 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1323 >                               "Temporary X-line for [%s] expired", conf->name);
1324 >      conf_free(conf);
1325      }
1326 <    else if (conf->type == RKLINE_TYPE)
1326 >    else if (conf->type == CONF_NRESV || conf->type == CONF_CRESV)
1327      {
1328 <      aconf = map_to_conf(conf);
1329 <      if (aconf->hold <= CurrentTime)
2304 <      {
2305 <        if (ConfigFileEntry.tkline_expire_notices)
2306 <           sendto_realops_flags(UMODE_ALL, L_ALL,
2307 <                                "Temporary K-line for [%s@%s] (REGEX) expired",
2308 <                                (aconf->user) ? aconf->user : "*",
2309 <                                (aconf->host) ? aconf->host : "*");
2310 <        dlinkDelete(ptr, tklist);
2311 <        free_dlink_node(ptr);
2312 <        delete_conf_item(conf);
2313 <      }
2314 <    }
2315 <    else if (conf->type == NRESV_TYPE)
2316 <    {
2317 <      nconf = (struct MatchItem *)map_to_conf(conf);
2318 <      if (nconf->hold <= CurrentTime)
2319 <      {
2320 <        if (ConfigFileEntry.tkline_expire_notices)
2321 <          sendto_realops_flags(UMODE_ALL, L_ALL,
1328 >      if (ConfigFileEntry.tkline_expire_notices)
1329 >        sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1330                                 "Temporary RESV for [%s] expired", conf->name);
1331 <        dlinkDelete(ptr, tklist);
2324 <        free_dlink_node(ptr);
2325 <        delete_conf_item(conf);
2326 <      }
2327 <    }
2328 <    else if (conf->type == CRESV_TYPE)
2329 <    {
2330 <      cconf = (struct ResvChannel *)map_to_conf(conf);
2331 <      if (cconf->hold <= CurrentTime)
2332 <      {
2333 <        if (ConfigFileEntry.tkline_expire_notices)
2334 <          sendto_realops_flags(UMODE_ALL, L_ALL,
2335 <                               "Temporary RESV for [%s] expired", cconf->name);
2336 <        delete_channel_resv(cconf);
2337 <      }
1331 >      conf_free(conf);
1332      }
1333    }
1334   }
# Line 2347 | Line 1341 | expire_tklines(dlink_list *tklist)
1341   */
1342   static const struct oper_privs
1343   {
1344 <  const unsigned int oprivs;
1344 >  const unsigned int flag;
1345    const unsigned char c;
1346   } flag_list[] = {
1347 <  { OPER_FLAG_ADMIN,       'A' },
1348 <  { OPER_FLAG_REMOTEBAN,   'B' },
1349 <  { OPER_FLAG_DIE,         'D' },
1350 <  { OPER_FLAG_GLINE,       'G' },
1351 <  { OPER_FLAG_REHASH,      'H' },
1352 <  { OPER_FLAG_K,           'K' },
1353 <  { OPER_FLAG_OPERWALL,    'L' },
1354 <  { OPER_FLAG_N,           'N' },
1355 <  { OPER_FLAG_GLOBAL_KILL, 'O' },
1356 <  { OPER_FLAG_REMOTE,      'R' },
1357 <  { OPER_FLAG_OPER_SPY,    'S' },
1358 <  { OPER_FLAG_UNKLINE,     'U' },
1359 <  { OPER_FLAG_X,           'X' },
1347 >  { OPER_FLAG_ADMIN,          'A' },
1348 >  { OPER_FLAG_REMOTEBAN,      'B' },
1349 >  { OPER_FLAG_DIE,            'D' },
1350 >  { OPER_FLAG_GLINE,          'G' },
1351 >  { OPER_FLAG_REHASH,         'H' },
1352 >  { OPER_FLAG_KLINE,          'K' },
1353 >  { OPER_FLAG_KILL,           'N' },
1354 >  { OPER_FLAG_KILL_REMOTE,    'O' },
1355 >  { OPER_FLAG_CONNECT,        'P' },
1356 >  { OPER_FLAG_CONNECT_REMOTE, 'Q' },
1357 >  { OPER_FLAG_SQUIT,          'R' },
1358 >  { OPER_FLAG_SQUIT_REMOTE,   'S' },
1359 >  { OPER_FLAG_UNKLINE,        'U' },
1360 >  { OPER_FLAG_XLINE,          'X' },
1361    { 0, '\0' }
1362   };
1363  
1364   char *
1365   oper_privs_as_string(const unsigned int port)
1366   {
1367 <  static char privs_out[16];
1367 >  static char privs_out[IRCD_BUFSIZE];
1368    char *privs_ptr = privs_out;
2374  unsigned int i = 0;
1369  
1370 <  for (; flag_list[i].oprivs; ++i)
1370 >  for (const struct oper_privs *opriv = flag_list; opriv->flag; ++opriv)
1371    {
1372 <    if (port & flag_list[i].oprivs)
1373 <      *privs_ptr++ = flag_list[i].c;
1372 >    if (port & opriv->flag)
1373 >      *privs_ptr++ = opriv->c;
1374      else
1375 <      *privs_ptr++ = ToLowerTab[flag_list[i].c];
1375 >      *privs_ptr++ = ToLower(opriv->c);
1376    }
1377  
1378    *privs_ptr = '\0';
# Line 2392 | Line 1386 | oper_privs_as_string(const unsigned int
1386   *         "oper" is server name for remote opers
1387   * Side effects: None.
1388   */
1389 < char *
1389 > const char *
1390   get_oper_name(const struct Client *client_p)
1391   {
1392 <  dlink_node *cnode;
2399 <  struct ConfItem *conf;
2400 <  struct AccessItem *aconf;
2401 <
1392 >  const dlink_node *cnode = NULL;
1393    /* +5 for !,@,{,} and null */
1394    static char buffer[NICKLEN + USERLEN + HOSTLEN + HOSTLEN + 5];
1395  
1396    if (MyConnect(client_p))
1397    {
1398 <    DLINK_FOREACH(cnode, client_p->localClient->confs.head)
1398 >    if ((cnode = client_p->localClient->confs.head))
1399      {
1400 <      conf = cnode->data;
2410 <      aconf = map_to_conf(conf);
1400 >      const struct MaskItem *conf = cnode->data;
1401  
1402 <      if (IsConfOperator(aconf))
1402 >      if (IsConfOperator(conf))
1403        {
1404 <        snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1404 >        snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1405                   client_p->username, client_p->host, conf->name);
1406 <        return buffer;
1406 >        return buffer;
1407        }
1408      }
1409  
1410 <    /* Probably should assert here for now. If there is an oper out there
1410 >    /* Probably should assert here for now. If there is an oper out there
1411       * with no oper{} conf attached, it would be good for us to know...
1412       */
1413      assert(0); /* Oper without oper conf! */
1414    }
1415  
1416    snprintf(buffer, sizeof(buffer), "%s!%s@%s{%s}", client_p->name,
1417 <           client_p->username, client_p->host, client_p->servptr->name);
1417 >           client_p->username, client_p->host, client_p->servptr->name);
1418    return buffer;
1419   }
1420  
# Line 2437 | Line 1427 | get_oper_name(const struct Client *clien
1427   void
1428   read_conf_files(int cold)
1429   {
1430 <  const char *filename;
1431 <  char chanmodes[32];
1432 <  char chanlimit[32];
1430 >  const char *filename = NULL;
1431 >  char chanmodes[IRCD_BUFSIZE] = "";
1432 >  char chanlimit[IRCD_BUFSIZE] = "";
1433  
1434    conf_parser_ctx.boot = cold;
1435 <  filename = get_conf_name(CONF_TYPE);
1435 >  filename = ConfigFileEntry.configfile;
1436  
1437    /* We need to know the initial filename for the yyerror() to report
1438       FIXME: The full path is in conffilenamebuf first time since we
1439               dont know anything else
1440  
1441 <     - Gozem 2002-07-21
1441 >     - Gozem 2002-07-21
1442    */
1443    strlcpy(conffilebuf, filename, sizeof(conffilebuf));
1444  
# Line 2462 | Line 1452 | read_conf_files(int cold)
1452      }
1453      else
1454      {
1455 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1456 <                           "Unable to read configuration file '%s': %s",
1457 <                           filename, strerror(errno));
1455 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1456 >                           "Unable to read configuration file '%s': %s",
1457 >                           filename, strerror(errno));
1458        return;
1459      }
1460    }
# Line 2475 | Line 1465 | read_conf_files(int cold)
1465    read_conf(conf_parser_ctx.conf_file);
1466    fclose(conf_parser_ctx.conf_file);
1467  
1468 +  log_reopen_all();
1469 +
1470 +  add_isupport("NICKLEN", NULL, ServerInfo.max_nick_length);
1471    add_isupport("NETWORK", ServerInfo.network_name, -1);
1472 <  snprintf(chanmodes, sizeof(chanmodes), "b%s%s:%d",
1473 <           ConfigChannel.use_except ? "e" : "",
2481 <           ConfigChannel.use_invex ? "I" : "", ConfigChannel.max_bans);
1472 >
1473 >  snprintf(chanmodes, sizeof(chanmodes), "beI:%d", ConfigChannel.max_bans);
1474    add_isupport("MAXLIST", chanmodes, -1);
1475    add_isupport("MAXTARGETS", NULL, ConfigFileEntry.max_targets);
1476 +  add_isupport("CHANTYPES", "#", -1);
1477  
1478 <  if (ConfigChannel.disable_local_channels)
1479 <    add_isupport("CHANTYPES", "#", -1);
2487 <  else
2488 <    add_isupport("CHANTYPES", "#&", -1);
2489 <
2490 <  snprintf(chanlimit, sizeof(chanlimit), "%s:%d",
2491 <           ConfigChannel.disable_local_channels ? "#" : "#&",
2492 <           ConfigChannel.max_chans_per_user);
1478 >  snprintf(chanlimit, sizeof(chanlimit), "#:%d",
1479 >           ConfigChannel.max_channels);
1480    add_isupport("CHANLIMIT", chanlimit, -1);
1481 <  snprintf(chanmodes, sizeof(chanmodes), "%s%s%s",
1482 <           ConfigChannel.use_except ? "e" : "",
1483 <           ConfigChannel.use_invex ? "I" : "", "b,k,l,imnprstORS");
2497 <  add_isupport("CHANNELLEN", NULL, LOCAL_CHANNELLEN);
2498 <
2499 <  if (ConfigChannel.use_except)
2500 <    add_isupport("EXCEPTS", "e", -1);
2501 <  if (ConfigChannel.use_invex)
2502 <    add_isupport("INVEX", "I", -1);
1481 >  snprintf(chanmodes, sizeof(chanmodes), "%s", "beI,k,l,cimnprstMORS");
1482 >  add_isupport("CHANNELLEN", NULL, CHANNELLEN);
1483 >  add_isupport("TOPICLEN", NULL, ServerInfo.max_topic_length);
1484    add_isupport("CHANMODES", chanmodes, -1);
1485  
1486    /*
# Line 2507 | Line 1488 | read_conf_files(int cold)
1488     * on strlen(form_str(RPL_ISUPPORT))
1489     */
1490    rebuild_isupport_message_line();
2510
2511 #ifdef HAVE_LIBPCRE
2512  parse_conf_file(RKLINE_TYPE, cold);
2513  parse_conf_file(RXLINE_TYPE, cold);
2514 #endif
2515  parse_conf_file(KLINE_TYPE, cold);
2516  parse_conf_file(DLINE_TYPE, cold);
2517  parse_conf_file(XLINE_TYPE, cold);
2518  parse_conf_file(NRESV_TYPE, cold);
2519  parse_conf_file(CRESV_TYPE, cold);
2520 }
2521
2522 /* parse_conf_file()
2523 *
2524 * inputs       - type of conf file to parse
2525 * output       - none
2526 * side effects - conf file for givenconf type is opened and read then parsed
2527 */
2528 static void
2529 parse_conf_file(int type, int cold)
2530 {
2531  FILE *file = NULL;
2532  const char *filename = get_conf_name(type);
2533
2534  if ((file = fopen(filename, "r")) == NULL)
2535  {
2536    if (cold)
2537      ilog(LOG_TYPE_IRCD, "Unable to read configuration file '%s': %s",
2538           filename, strerror(errno));
2539    else
2540      sendto_realops_flags(UMODE_ALL, L_ALL,
2541                    "Unable to read configuration file '%s': %s",
2542                           filename, strerror(errno));
2543  }
2544  else
2545  {
2546    parse_csv_file(file, type);
2547    fclose(file);
2548  }
1491   }
1492  
1493   /* clear_out_old_conf()
# Line 2558 | Line 1500 | static void
1500   clear_out_old_conf(void)
1501   {
1502    dlink_node *ptr = NULL, *next_ptr = NULL;
1503 <  struct ConfItem *conf;
2562 <  struct AccessItem *aconf;
2563 <  struct ClassItem *cltmp;
2564 <  struct MatchItem *match_item;
1503 >  struct MaskItem *conf;
1504    dlink_list *free_items [] = {
1505 <    &server_items,   &oconf_items,    &hub_items, &leaf_items,
1506 <     &uconf_items,   &xconf_items, &rxconf_items, &rkconf_items,
1507 <     &nresv_items, &cluster_items,  &gdeny_items, &service_items, NULL
1505 >    &server_items,   &oconf_items,
1506 >     &uconf_items,   &xconf_items,
1507 >     &nresv_items, &cluster_items,  &service_items, &cresv_items, NULL
1508    };
1509  
1510    dlink_list ** iterator = free_items; /* C is dumb */
# Line 2573 | Line 1512 | clear_out_old_conf(void)
1512    /* We only need to free anything allocated by yyparse() here.
1513     * Resetting structs, etc, is taken care of by set_default_conf().
1514     */
1515 <  
1515 >
1516    for (; *iterator != NULL; iterator++)
1517    {
1518      DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
1519      {
1520        conf = ptr->data;
2582      /* XXX This is less than pretty */
2583      if (conf->type == SERVER_TYPE)
2584      {
2585        aconf = map_to_conf(conf);
1521  
1522 <        if (aconf->clients != 0)
2588 <        {
2589 <          SetConfIllegal(aconf);
2590 <          dlinkDelete(&conf->node, &server_items);
2591 <        }
2592 <        else
2593 <        {
2594 <          delete_conf_item(conf);
2595 <        }
2596 <      }
2597 <      else if (conf->type == OPER_TYPE)
2598 <      {
2599 <        aconf = map_to_conf(conf);
1522 >      dlinkDelete(&conf->node, map_to_list(conf->type));
1523  
1524 <        if (aconf->clients != 0)
1525 <        {
2603 <          SetConfIllegal(aconf);
2604 <          dlinkDelete(&conf->node, &oconf_items);
2605 <        }
2606 <        else
2607 <        {
2608 <          delete_conf_item(conf);
2609 <        }
2610 <      }
2611 <      else if (conf->type == CLIENT_TYPE)
1524 >      /* XXX This is less than pretty */
1525 >      if (conf->type == CONF_SERVER || conf->type == CONF_OPER)
1526        {
1527 <        aconf = map_to_conf(conf);
1528 <
2615 <        if (aconf->clients != 0)
2616 <        {
2617 <          SetConfIllegal(aconf);
2618 <        }
2619 <        else
2620 <        {
2621 <          delete_conf_item(conf);
2622 <        }
1527 >        if (!conf->ref_count)
1528 >          conf_free(conf);
1529        }
1530 <      else if (conf->type == XLINE_TYPE  ||
2625 <               conf->type == RXLINE_TYPE ||
2626 <               conf->type == RKLINE_TYPE)
1530 >      else if (conf->type == CONF_XLINE)
1531        {
1532 <        /* temporary (r)xlines are also on
1533 <         * the (r)xconf items list */
2630 <        if (conf->flags & CONF_FLAGS_TEMPORARY)
2631 <          continue;
2632 <
2633 <        delete_conf_item(conf);
1532 >        if (!conf->until)
1533 >          conf_free(conf);
1534        }
1535        else
1536 <      {
2637 <        if ((conf->type == LEAF_TYPE) || (conf->type == HUB_TYPE))
2638 <        {
2639 <          match_item = map_to_conf(conf);
2640 <          if (match_item->ref_count <= 0)
2641 <            delete_conf_item(conf);
2642 <          else
2643 <          {
2644 <            match_item->illegal = 1;
2645 <            dlinkDelete(&conf->node, *iterator);
2646 <          }
2647 <        }
2648 <        else
2649 <          delete_conf_item(conf);
2650 <      }
1536 >        conf_free(conf);
1537      }
1538    }
1539  
1540 +  motd_clear();
1541 +
1542    /*
1543     * don't delete the class table, rather mark all entries
1544 <   * for deletion. The table is cleaned up by check_class. - avalon
1544 >   * for deletion. The table is cleaned up by class_delete_marked. - avalon
1545     */
1546 <  DLINK_FOREACH(ptr, class_items.head)
2659 <  {
2660 <    cltmp = map_to_conf(ptr->data);
2661 <
2662 <    if (ptr != class_items.tail)  /* never mark the "default" class */
2663 <      cltmp->active = 0;
2664 <  }
1546 >  class_mark_for_deletion();
1547  
1548    clear_out_address_conf();
1549  
# Line 2675 | Line 1557 | clear_out_old_conf(void)
1557    ServerInfo.network_name = NULL;
1558    MyFree(ServerInfo.network_desc);
1559    ServerInfo.network_desc = NULL;
2678  MyFree(ConfigFileEntry.egdpool_path);
2679  ConfigFileEntry.egdpool_path = NULL;
1560   #ifdef HAVE_LIBCRYPTO
1561 <  if (ServerInfo.rsa_private_key != NULL)
1561 >  if (ServerInfo.rsa_private_key)
1562    {
1563      RSA_free(ServerInfo.rsa_private_key);
1564      ServerInfo.rsa_private_key = NULL;
# Line 2686 | Line 1566 | clear_out_old_conf(void)
1566  
1567    MyFree(ServerInfo.rsa_private_key_file);
1568    ServerInfo.rsa_private_key_file = NULL;
2689
2690  if (ServerInfo.server_ctx)
2691    SSL_CTX_set_options(ServerInfo.server_ctx, SSL_OP_NO_SSLv2|
2692                                               SSL_OP_NO_SSLv3|
2693                                               SSL_OP_NO_TLSv1);
2694  if (ServerInfo.client_ctx)
2695    SSL_CTX_set_options(ServerInfo.client_ctx, SSL_OP_NO_SSLv2|
2696                                               SSL_OP_NO_SSLv3|
2697                                               SSL_OP_NO_TLSv1);
1569   #endif
1570  
2700  /* clean out old resvs from the conf */
2701  clear_conf_resv();
2702
1571    /* clean out AdminInfo */
1572    MyFree(AdminInfo.name);
1573    AdminInfo.name = NULL;
# Line 2708 | Line 1576 | clear_out_old_conf(void)
1576    MyFree(AdminInfo.description);
1577    AdminInfo.description = NULL;
1578  
2711  /* operator{} and class{} blocks are freed above */
1579    /* clean out listeners */
1580    close_listeners();
1581  
2715  /* auth{}, quarantine{}, shared{}, connect{}, kill{}, deny{},
2716   * exempt{} and gecos{} blocks are freed above too
2717   */
2718
1582    /* clean out general */
1583    MyFree(ConfigFileEntry.service_name);
1584    ConfigFileEntry.service_name = NULL;
2722
2723  delete_isupport("INVEX");
2724  delete_isupport("EXCEPTS");
2725 }
2726
2727 /* flush_deleted_I_P()
2728 *
2729 * inputs       - none
2730 * output       - none
2731 * side effects - This function removes I/P conf items
2732 */
2733 static void
2734 flush_deleted_I_P(void)
2735 {
2736  dlink_node *ptr;
2737  dlink_node *next_ptr;
2738  struct ConfItem *conf;
2739  struct AccessItem *aconf;
2740  dlink_list * free_items [] = {
2741    &server_items, &oconf_items, NULL
2742  };
2743  dlink_list ** iterator = free_items; /* C is dumb */
2744
2745  /* flush out deleted I and P lines
2746   * although still in use.
2747   */
2748  for (; *iterator != NULL; iterator++)
2749  {
2750    DLINK_FOREACH_SAFE(ptr, next_ptr, (*iterator)->head)
2751    {
2752      conf = ptr->data;
2753      aconf = (struct AccessItem *)map_to_conf(conf);
2754
2755      if (IsConfIllegal(aconf))
2756      {
2757        dlinkDelete(ptr, *iterator);
2758
2759        if (aconf->clients == 0)
2760          delete_conf_item(conf);
2761      }
2762    }
2763  }
2764 }
2765
2766 /* get_conf_name()
2767 *
2768 * inputs       - type of conf file to return name of file for
2769 * output       - pointer to filename for type of conf
2770 * side effects - none
2771 */
2772 const char *
2773 get_conf_name(ConfType type)
2774 {
2775  switch (type)
2776  {
2777    case CONF_TYPE:
2778      return ConfigFileEntry.configfile;
2779      break;
2780    case KLINE_TYPE:
2781      return ConfigFileEntry.klinefile;
2782      break;
2783    case RKLINE_TYPE:
2784      return ConfigFileEntry.rklinefile;
2785      break;
2786    case DLINE_TYPE:
2787      return ConfigFileEntry.dlinefile;
2788      break;
2789    case XLINE_TYPE:
2790      return ConfigFileEntry.xlinefile;
2791      break;
2792    case RXLINE_TYPE:
2793      return ConfigFileEntry.rxlinefile;
2794      break;
2795    case CRESV_TYPE:
2796      return ConfigFileEntry.cresvfile;
2797      break;
2798    case NRESV_TYPE:
2799      return ConfigFileEntry.nresvfile;
2800      break;
2801    case GLINE_TYPE:
2802      return ConfigFileEntry.glinefile;
2803      break;
2804
2805    default:
2806      return NULL;  /* This should NEVER HAPPEN since we call this function
2807                       only with the above values, this will cause us to core
2808                       at some point if this happens so we know where it was */
2809  }
2810 }
2811
2812 #define BAD_PING (-1)
2813
2814 /* get_conf_ping()
2815 *
2816 * inputs       - pointer to struct AccessItem
2817 *              - pointer to a variable that receives ping warning time
2818 * output       - ping frequency
2819 * side effects - NONE
2820 */
2821 static int
2822 get_conf_ping(struct ConfItem *conf, int *pingwarn)
2823 {
2824  struct ClassItem *aclass;
2825  struct AccessItem *aconf;
2826
2827  if (conf != NULL)
2828  {
2829    aconf = (struct AccessItem *)map_to_conf(conf);
2830    if (aconf->class_ptr != NULL)
2831    {
2832      aclass = (struct ClassItem *)map_to_conf(aconf->class_ptr);
2833      *pingwarn = PingWarning(aclass);
2834      return PingFreq(aclass);
2835    }
2836  }
2837
2838  return BAD_PING;
2839 }
2840
2841 /* get_client_class()
2842 *
2843 * inputs       - pointer to client struct
2844 * output       - pointer to name of class
2845 * side effects - NONE
2846 */
2847 const char *
2848 get_client_class(struct Client *target_p)
2849 {
2850  dlink_node *ptr;
2851  struct ConfItem *conf;
2852  struct AccessItem *aconf;
2853
2854  if (target_p != NULL && !IsMe(target_p) &&
2855      target_p->localClient->confs.head != NULL)
2856  {
2857    DLINK_FOREACH(ptr, target_p->localClient->confs.head)
2858    {
2859      conf = ptr->data;
2860
2861      if (conf->type == CLIENT_TYPE || conf->type == SERVER_TYPE ||
2862          conf->type == OPER_TYPE)
2863      {
2864        aconf = (struct AccessItem *) map_to_conf(conf);
2865        if (aconf->class_ptr != NULL)
2866          return aconf->class_ptr->name;
2867      }
2868    }
2869  }
2870
2871  return "default";
2872 }
2873
2874 /* get_client_ping()
2875 *
2876 * inputs       - pointer to client struct
2877 *              - pointer to a variable that receives ping warning time
2878 * output       - ping frequency
2879 * side effects - NONE
2880 */
2881 int
2882 get_client_ping(struct Client *target_p, int *pingwarn)
2883 {
2884  int ping;
2885  struct ConfItem *conf;
2886  dlink_node *nlink;
2887
2888  if (target_p->localClient->confs.head != NULL)
2889    DLINK_FOREACH(nlink, target_p->localClient->confs.head)
2890    {
2891      conf = nlink->data;
2892
2893      if ((conf->type == CLIENT_TYPE) || (conf->type == SERVER_TYPE) ||
2894          (conf->type == OPER_TYPE))
2895      {
2896        ping = get_conf_ping(conf, pingwarn);
2897        if (ping > 0)
2898          return ping;
2899      }
2900    }
2901
2902  *pingwarn = 0;
2903  return DEFAULT_PINGFREQUENCY;
2904 }
2905
2906 /* find_class()
2907 *
2908 * inputs       - string name of class
2909 * output       - corresponding Class pointer
2910 * side effects - NONE
2911 */
2912 struct ConfItem *
2913 find_class(const char *classname)
2914 {
2915  struct ConfItem *conf;
2916
2917  if ((conf = find_exact_name_conf(CLASS_TYPE, NULL, classname, NULL, NULL)) != NULL)
2918    return conf;
2919
2920  return class_default;
2921 }
2922
2923 /* check_class()
2924 *
2925 * inputs       - NONE
2926 * output       - NONE
2927 * side effects -
2928 */
2929 void
2930 check_class(void)
2931 {
2932  dlink_node *ptr = NULL, *next_ptr = NULL;
2933
2934  DLINK_FOREACH_SAFE(ptr, next_ptr, class_items.head)
2935  {
2936    struct ClassItem *aclass = map_to_conf(ptr->data);
2937
2938    if (!aclass->active && !CurrUserCount(aclass))
2939    {
2940      destroy_cidr_class(aclass);
2941      delete_conf_item(ptr->data);
2942    }
2943  }
2944 }
2945
2946 /* init_class()
2947 *
2948 * inputs       - NONE
2949 * output       - NONE
2950 * side effects -
2951 */
2952 void
2953 init_class(void)
2954 {
2955  struct ClassItem *aclass;
2956
2957  class_default = make_conf_item(CLASS_TYPE);
2958
2959  aclass = map_to_conf(class_default);
2960  aclass->active = 1;
2961  DupString(class_default->name, "default");
2962  ConFreq(aclass)  = DEFAULT_CONNECTFREQUENCY;
2963  PingFreq(aclass) = DEFAULT_PINGFREQUENCY;
2964  MaxTotal(aclass) = MAXIMUM_LINKS_DEFAULT;
2965  MaxSendq(aclass) = DEFAULT_SENDQ;
2966
2967  client_check_cb = register_callback("check_client", check_client);
2968 }
2969
2970 /* get_sendq()
2971 *
2972 * inputs       - pointer to client
2973 * output       - sendq for this client as found from its class
2974 * side effects - NONE
2975 */
2976 unsigned int
2977 get_sendq(struct Client *client_p)
2978 {
2979  unsigned int sendq = DEFAULT_SENDQ;
2980  dlink_node *ptr;
2981  struct ConfItem *conf;
2982  struct ConfItem *class_conf;
2983  struct ClassItem *aclass;
2984  struct AccessItem *aconf;
2985
2986  if (client_p && !IsMe(client_p) && (client_p->localClient->confs.head))
2987  {
2988    DLINK_FOREACH(ptr, client_p->localClient->confs.head)
2989    {
2990      conf = ptr->data;
2991      if ((conf->type == SERVER_TYPE) || (conf->type == OPER_TYPE)
2992          || (conf->type == CLIENT_TYPE))
2993      {
2994        aconf = (struct AccessItem *)map_to_conf(conf);
2995        if ((class_conf = aconf->class_ptr) == NULL)
2996          continue;
2997        aclass = (struct ClassItem *)map_to_conf(class_conf);
2998        sendq = MaxSendq(aclass);
2999        return sendq;
3000      }
3001    }
3002  }
3003  /* XXX return a default?
3004   * if here, then there wasn't an attached conf with a sendq
3005   * that is very bad -Dianora
3006   */
3007  return DEFAULT_SENDQ;
1585   }
1586  
1587   /* conf_add_class_to_conf()
1588   *
1589   * inputs       - pointer to config item
1590   * output       - NONE
1591 < * side effects - Add a class pointer to a conf
1591 > * side effects - Add a class pointer to a conf
1592   */
1593   void
1594 < conf_add_class_to_conf(struct ConfItem *conf, const char *class_name)
1594 > conf_add_class_to_conf(struct MaskItem *conf, const char *class_name)
1595   {
1596 <  struct AccessItem *aconf = map_to_conf(conf);
3020 <  struct ClassItem *class = NULL;
3021 <
3022 <  if (class_name == NULL)
1596 >  if (class_name == NULL)
1597    {
1598 <    aconf->class_ptr = class_default;
1598 >    conf->class = class_default;
1599  
1600 <    if (conf->type == CLIENT_TYPE)
1601 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1602 <                           "Warning *** Defaulting to default class for %s@%s",
1603 <                           aconf->user, aconf->host);
1600 >    if (conf->type == CONF_CLIENT)
1601 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1602 >                           "Warning *** Defaulting to default class for %s@%s",
1603 >                           conf->user, conf->host);
1604      else
1605 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1606 <                           "Warning *** Defaulting to default class for %s",
1607 <                           conf->name);
1605 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1606 >                           "Warning *** Defaulting to default class for %s",
1607 >                           conf->name);
1608    }
1609    else
1610 <    aconf->class_ptr = find_class(class_name);
1610 >    conf->class = class_find(class_name, 1);
1611  
1612 <  if (aconf->class_ptr)
3039 <    class = map_to_conf(aconf->class_ptr);
3040 <
3041 <  if (aconf->class_ptr == NULL || !class->active)
1612 >  if (conf->class == NULL)
1613    {
1614 <    if (conf->type == CLIENT_TYPE)
1615 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1616 <                           "Warning *** Defaulting to default class for %s@%s",
1617 <                           aconf->user, aconf->host);
1614 >    if (conf->type == CONF_CLIENT)
1615 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1616 >                           "Warning *** Defaulting to default class for %s@%s",
1617 >                           conf->user, conf->host);
1618      else
1619 <      sendto_realops_flags(UMODE_ALL, L_ALL,
1620 <                           "Warning *** Defaulting to default class for %s",
1621 <                           conf->name);
1622 <    aconf->class_ptr = class_default;
1619 >      sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1620 >                           "Warning *** Defaulting to default class for %s",
1621 >                           conf->name);
1622 >    conf->class = class_default;
1623    }
1624   }
1625  
3055 /* conf_add_server()
3056 *
3057 * inputs       - pointer to config item
3058 *              - pointer to link count already on this conf
3059 * output       - NONE
3060 * side effects - Add a connect block
3061 */
3062 int
3063 conf_add_server(struct ConfItem *conf, const char *class_name)
3064 {
3065  struct AccessItem *aconf;
3066  struct split_nuh_item nuh;
3067  char conf_user[USERLEN + 1];
3068  char conf_host[HOSTLEN + 1];
3069
3070  aconf = map_to_conf(conf);
3071
3072  conf_add_class_to_conf(conf, class_name);
3073
3074  if (!aconf->host || !conf->name)
3075  {
3076    sendto_realops_flags(UMODE_ALL, L_ALL, "Bad connect block");
3077    ilog(LOG_TYPE_IRCD, "Bad connect block");
3078    return -1;
3079  }
3080
3081  if (EmptyString(aconf->passwd))
3082  {
3083    sendto_realops_flags(UMODE_ALL, L_ALL, "Bad connect block, name %s",
3084                         conf->name);
3085    ilog(LOG_TYPE_IRCD, "Bad connect block, host %s", conf->name);
3086    return -1;
3087  }
3088
3089  nuh.nuhmask  = aconf->host;
3090  nuh.nickptr  = NULL;
3091  nuh.userptr  = conf_user;
3092  nuh.hostptr  = conf_host;
3093
3094  nuh.nicksize = 0;
3095  nuh.usersize = sizeof(conf_user);
3096  nuh.hostsize = sizeof(conf_host);
3097
3098  split_nuh(&nuh);
3099
3100  MyFree(aconf->host);
3101  aconf->host = NULL;
3102
3103  DupString(aconf->user, conf_user); /* somehow username checking for servers
3104                                 got lost in H6/7, will have to be re-added */
3105  DupString(aconf->host, conf_host);
3106
3107  lookup_confhost(conf);
3108
3109  return 0;
3110 }
3111
1626   /* yyerror()
1627   *
1628   * inputs       - message from parser
# Line 3124 | Line 1638 | yyerror(const char *msg)
1638      return;
1639  
1640    strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1641 <  sendto_realops_flags(UMODE_ALL, L_ALL, "\"%s\", line %u: %s: %s",
1641 >  sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1642 >                       "\"%s\", line %u: %s: %s",
1643 >                       conffilebuf, lineno + 1, msg, newlinebuf);
1644 >  ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1645 >       conffilebuf, lineno + 1, msg, newlinebuf);
1646 > }
1647 >
1648 > void
1649 > conf_error_report(const char *msg)
1650 > {
1651 >  char newlinebuf[IRCD_BUFSIZE];
1652 >
1653 >  strip_tabs(newlinebuf, linebuf, sizeof(newlinebuf));
1654 >  sendto_realops_flags(UMODE_ALL, L_ALL, SEND_NOTICE,
1655 >                       "\"%s\", line %u: %s: %s",
1656                         conffilebuf, lineno + 1, msg, newlinebuf);
1657    ilog(LOG_TYPE_IRCD, "\"%s\", line %u: %s: %s",
1658         conffilebuf, lineno + 1, msg, newlinebuf);
# Line 3132 | Line 1660 | yyerror(const char *msg)
1660  
1661   /*
1662   * valid_tkline()
1663 < *
1663 > *
1664   * inputs       - pointer to ascii string to check
1665   *              - whether the specified time is in seconds or minutes
1666   * output       - -1 not enough parameters
# Line 3141 | Line 1669 | yyerror(const char *msg)
1669   * Originally written by Dianora (Diane, db@db.net)
1670   */
1671   time_t
1672 < valid_tkline(const char *p, int minutes)
1672 > valid_tkline(const char *data, const int minutes)
1673   {
1674 +  const unsigned char *p = (const unsigned char *)data;
1675 +  unsigned char tmpch = '\0';
1676    time_t result = 0;
1677  
1678 <  for (; *p; ++p)
1678 >  while ((tmpch = *p++))
1679    {
1680 <    if (!IsDigit(*p))
1680 >    if (!IsDigit(tmpch))
1681        return 0;
1682  
1683      result *= 10;
1684 <    result += ((*p) & 0xF);
1684 >    result += (tmpch & 0xF);
1685    }
1686  
1687    /*
1688 <   * In the degenerate case where oper does a /quote kline 0 user@host :reason
1688 >   * In the degenerate case where oper does a /quote kline 0 user@host :reason
1689     * i.e. they specifically use 0, I am going to return 1 instead
1690     * as a return value of non-zero is used to flag it as a temporary kline
1691     */
1692    if (result == 0)
1693      result = 1;
1694  
1695 <  /*
1695 >  /*
1696     * If the incoming time is in seconds convert it to minutes for the purpose
1697     * of this calculation
1698     */
1699    if (!minutes)
1700 <    result = result / (time_t)60;
1700 >    result = result / 60;
1701  
1702    if (result > MAX_TDKLINE_TIME)
1703      result = MAX_TDKLINE_TIME;
1704  
1705 <  result = result * (time_t)60;  /* turn it into seconds */
1705 >  result = result * 60;  /* turn it into seconds */
1706  
1707    return result;
1708   }
1709  
1710 + /* valid_wild_card_simple()
1711 + *
1712 + * inputs       - data to check for sufficient non-wildcard characters
1713 + * outputs      - 1 if valid, else 0
1714 + * side effects - none
1715 + */
1716 + int
1717 + valid_wild_card_simple(const char *data)
1718 + {
1719 +  const unsigned char *p = (const unsigned char *)data;
1720 +  unsigned char tmpch = '\0';
1721 +  unsigned int nonwild = 0;
1722 +
1723 +  while ((tmpch = *p++))
1724 +  {
1725 +    if (tmpch == '\\' && *p)
1726 +    {
1727 +      ++p;
1728 +      if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1729 +        return 1;
1730 +    }
1731 +    else if (!IsMWildChar(tmpch))
1732 +    {
1733 +      if (++nonwild >= ConfigFileEntry.min_nonwildcard_simple)
1734 +        return 1;
1735 +    }
1736 +  }
1737 +
1738 +  return 0;
1739 + }
1740 +
1741   /* valid_wild_card()
1742   *
1743   * input        - pointer to client
# Line 3188 | Line 1749 | valid_tkline(const char *p, int minutes)
1749   int
1750   valid_wild_card(struct Client *source_p, int warn, int count, ...)
1751   {
1752 <  char *p;
1753 <  char tmpch;
3193 <  int nonwild = 0;
1752 >  unsigned char tmpch = '\0';
1753 >  unsigned int nonwild = 0;
1754    va_list args;
1755  
1756    /*
# Line 3209 | Line 1769 | valid_wild_card(struct Client *source_p,
1769  
1770    while (count--)
1771    {
1772 <    p = va_arg(args, char *);
1772 >    const unsigned char *p = va_arg(args, const unsigned char *);
1773      if (p == NULL)
1774        continue;
1775  
# Line 3222 | Line 1782 | valid_wild_card(struct Client *source_p,
1782           * break - no point in searching further.
1783           */
1784          if (++nonwild >= ConfigFileEntry.min_nonwildcard)
1785 +        {
1786 +          va_end(args);
1787            return 1;
1788 +        }
1789        }
1790      }
1791    }
1792  
1793    if (warn)
1794 <    sendto_one(source_p, ":%s NOTICE %s :Please include at least %d non-wildcard characters with the mask",
1795 <               me.name, source_p->name, ConfigFileEntry.min_nonwildcard);
1794 >    sendto_one_notice(source_p, &me,
1795 >                      ":Please include at least %u non-wildcard characters with the mask",
1796 >                      ConfigFileEntry.min_nonwildcard);
1797 >  va_end(args);
1798    return 0;
1799   }
1800  
# Line 3243 | Line 1808 | valid_wild_card(struct Client *source_p,
1808   *              - parse_flags bit map of things to test
1809   *              - pointer to user or string to parse into
1810   *              - pointer to host or NULL to parse into if non NULL
1811 < *              - pointer to optional tkline time or NULL
1811 > *              - pointer to optional tkline time or NULL
1812   *              - pointer to target_server to parse into if non NULL
1813   *              - pointer to reason to parse into
1814   *
# Line 3265 | Line 1830 | valid_wild_card(struct Client *source_p,
1830   */
1831   int
1832   parse_aline(const char *cmd, struct Client *source_p,
1833 <            int parc, char **parv,
1834 <            int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1835 <            char **target_server, char **reason)
1833 >            int parc, char **parv,
1834 >            int parse_flags, char **up_p, char **h_p, time_t *tkline_time,
1835 >            char **target_server, char **reason)
1836   {
1837    int found_tkline_time=0;
1838 <  static char def_reason[] = "No Reason";
1838 >  static char def_reason[] = CONF_NOREASON;
1839    static char user[USERLEN*4+1];
1840    static char host[HOSTLEN*4+1];
1841  
# Line 3288 | Line 1853 | parse_aline(const char *cmd, struct Clie
1853        *tkline_time = found_tkline_time;
1854      else
1855      {
1856 <      sendto_one(source_p, ":%s NOTICE %s :temp_line not supported by %s",
3292 <                 me.name, source_p->name, cmd);
1856 >      sendto_one_notice(source_p, &me, ":temp_line not supported by %s", cmd);
1857        return -1;
1858      }
1859    }
1860  
1861    if (parc == 0)
1862    {
1863 <    sendto_one(source_p, form_str(ERR_NEEDMOREPARAMS),
3300 <               me.name, source_p->name, cmd);
1863 >    sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1864      return -1;
1865    }
1866  
# Line 3311 | Line 1874 | parse_aline(const char *cmd, struct Clie
1874      *up_p = user;
1875      *h_p = host;
1876    }
1877 <
1877 >
1878    parc--;
1879    parv++;
1880  
# Line 3324 | Line 1887 | parse_aline(const char *cmd, struct Clie
1887  
1888        if (target_server == NULL)
1889        {
1890 <        sendto_one(source_p, ":%s NOTICE %s :ON server not supported by %s",
1891 <                   me.name, source_p->name, cmd);
3329 <        return -1;
1890 >        sendto_one_notice(source_p, &me, ":ON server not supported by %s", cmd);
1891 >        return -1;
1892        }
1893  
1894        if (!HasOFlag(source_p, OPER_FLAG_REMOTEBAN))
1895        {
1896 <        sendto_one(source_p, form_str(ERR_NOPRIVS),
3335 <                   me.name, source_p->name, "remoteban");
1896 >        sendto_one_numeric(source_p, &me, ERR_NOPRIVS, "remoteban");
1897          return -1;
1898        }
1899  
1900        if (parc == 0 || EmptyString(*parv))
1901        {
1902 <        sendto_one(source_p, form_str(ERR_NEEDMOREPARAMS),
1903 <                   me.name, source_p->name, cmd);
3343 <        return -1;
1902 >        sendto_one_numeric(source_p, &me, ERR_NEEDMOREPARAMS, cmd);
1903 >        return -1;
1904        }
1905  
1906        *target_server = *parv;
# Line 3353 | Line 1913 | parse_aline(const char *cmd, struct Clie
1913         * caller probably NULL'd it first, but no harm to do it again -db
1914         */
1915        if (target_server != NULL)
1916 <        *target_server = NULL;
1916 >        *target_server = NULL;
1917      }
1918    }
1919  
# Line 3361 | Line 1921 | parse_aline(const char *cmd, struct Clie
1921    {
1922      if (strchr(user, '!') != NULL)
1923      {
1924 <      sendto_one(source_p, ":%s NOTICE %s :Invalid character '!' in kline",
3365 <                 me.name, source_p->name);
1924 >      sendto_one_notice(source_p, &me, ":Invalid character '!' in kline");
1925        return -1;
1926      }
1927  
# Line 3379 | Line 1938 | parse_aline(const char *cmd, struct Clie
1938      {
1939        *reason = *parv;
1940        if (!valid_comment(source_p, *reason, 1))
1941 <        return -1;
1941 >        return -1;
1942      }
1943      else
1944        *reason = def_reason;
# Line 3418 | Line 1977 | find_user_host(struct Client *source_p,
1977      {
1978        *(hostp++) = '\0';                       /* short and squat */
1979        if (*user_host_or_nick)
1980 <        strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1980 >        strlcpy(luser, user_host_or_nick, USERLEN*4 + 1); /* here is my user */
1981        else
1982 <        strcpy(luser, "*");
1982 >        strcpy(luser, "*");
1983 >
1984        if (*hostp)
1985 <        strlcpy(lhost, hostp, HOSTLEN + 1);    /* here is my host */
1985 >        strlcpy(lhost, hostp, HOSTLEN + 1);    /* here is my host */
1986        else
1987 <        strcpy(lhost, "*");
1987 >        strcpy(lhost, "*");
1988      }
1989      else
1990      {
1991        luser[0] = '*';             /* no @ found, assume its *@somehost */
1992 <      luser[1] = '\0';    
1992 >      luser[1] = '\0';
1993        strlcpy(lhost, user_host_or_nick, HOSTLEN*4 + 1);
1994      }
1995 <    
1995 >
1996      return 1;
1997    }
1998 <  else if (!(flags & NOUSERLOOKUP))
1998 >  else
1999    {
2000      /* Try to find user@host mask from nick */
2001      /* Okay to use source_p as the first param, because source_p == client_p */
2002 <    if ((target_p =
2003 <        find_chasing(source_p, source_p, user_host_or_nick, NULL)) == NULL)
2004 <      return 0;
2002 >    if ((target_p =
2003 >        find_chasing(source_p, user_host_or_nick)) == NULL)
2004 >      return 0;  /* find_chasing sends ERR_NOSUCHNICK */
2005  
2006      if (IsExemptKline(target_p))
2007      {
2008        if (!IsServer(source_p))
2009 <        sendto_one(source_p,
3450 <                   ":%s NOTICE %s :%s is E-lined",
3451 <                   me.name, source_p->name, target_p->name);
2009 >        sendto_one_notice(source_p, &me, ":%s is E-lined", target_p->name);
2010        return 0;
2011      }
2012  
# Line 3483 | Line 2041 | find_user_host(struct Client *source_p,
2041   int
2042   valid_comment(struct Client *source_p, char *comment, int warn)
2043   {
3486  if (strchr(comment, '"'))
3487  {
3488    if (warn)
3489      sendto_one(source_p, ":%s NOTICE %s :Invalid character '\"' in comment",
3490                 me.name, source_p->name);
3491    return 0;
3492  }
3493
2044    if (strlen(comment) > REASONLEN)
2045      comment[REASONLEN-1] = '\0';
2046  
# Line 3505 | Line 2055 | valid_comment(struct Client *source_p, c
2055   * side effects - none
2056   */
2057   int
2058 < match_conf_password(const char *password, const struct AccessItem *aconf)
2058 > match_conf_password(const char *password, const struct MaskItem *conf)
2059   {
2060    const char *encr = NULL;
2061  
2062 <  if (password == NULL || aconf->passwd == NULL)
2062 >  if (EmptyString(password) || EmptyString(conf->passwd))
2063      return 0;
2064  
2065 <  if (aconf->flags & CONF_FLAGS_ENCRYPTED)
2066 <  {
3517 <    /* use first two chars of the password they send in as salt */
3518 <    /* If the password in the conf is MD5, and ircd is linked
3519 <     * to scrypt on FreeBSD, or the standard crypt library on
3520 <     * glibc Linux, then this code will work fine on generating
3521 <     * the proper encrypted hash for comparison.
3522 <     */
3523 <    if (*aconf->passwd)
3524 <      encr = crypt(password, aconf->passwd);
3525 <    else
3526 <      encr = "";
3527 <  }
2065 >  if (conf->flags & CONF_FLAGS_ENCRYPTED)
2066 >    encr = crypt(password, conf->passwd);
2067    else
2068      encr = password;
2069  
2070 <  return !strcmp(encr, aconf->passwd);
2070 >  return encr && !strcmp(encr, conf->passwd);
2071   }
2072  
2073   /*
# Line 3536 | Line 2075 | match_conf_password(const char *password
2075   *
2076   * inputs       - client sending the cluster
2077   *              - command name "KLINE" "XLINE" etc.
2078 < *              - capab -- CAP_KLN etc. from s_serv.h
2078 > *              - capab -- CAP_KLN etc. from server.h
2079   *              - cluster type -- CLUSTER_KLINE etc. from conf.h
2080   *              - pattern and args to send along
2081   * output       - none
# Line 3548 | Line 2087 | cluster_a_line(struct Client *source_p,
2087                 int capab, int cluster_type, const char *pattern, ...)
2088   {
2089    va_list args;
2090 <  char buffer[IRCD_BUFSIZE];
2090 >  char buffer[IRCD_BUFSIZE] = "";
2091    const dlink_node *ptr = NULL;
2092  
2093    va_start(args, pattern);
# Line 3557 | Line 2096 | cluster_a_line(struct Client *source_p,
2096  
2097    DLINK_FOREACH(ptr, cluster_items.head)
2098    {
2099 <    const struct ConfItem *conf = ptr->data;
2099 >    const struct MaskItem *conf = ptr->data;
2100  
2101      if (conf->flags & cluster_type)
2102        sendto_match_servs(source_p, conf->name, CAP_CLUSTER|capab,
2103 <                         "%s %s %s", command, conf->name, buffer);
2103 >                         "%s %s %s", command, conf->name, buffer);
2104    }
2105   }
2106  
# Line 3609 | Line 2148 | split_nuh(struct split_nuh_item *const i
2148    {
2149      *p = '\0';
2150  
2151 <    if (iptr->nickptr && *iptr->nuhmask != '\0')
2151 >    if (iptr->nickptr && *iptr->nuhmask)
2152        strlcpy(iptr->nickptr, iptr->nuhmask, iptr->nicksize);
2153  
2154 <    if ((q = strchr(++p, '@'))) {
2154 >    if ((q = strchr(++p, '@')))
2155 >    {
2156        *q++ = '\0';
2157  
2158 <      if (*p != '\0')
2158 >      if (*p)
2159          strlcpy(iptr->userptr, p, iptr->usersize);
2160  
2161 <      if (*q != '\0')
2161 >      if (*q)
2162          strlcpy(iptr->hostptr, q, iptr->hostsize);
2163      }
2164      else
2165      {
2166 <      if (*p != '\0')
2166 >      if (*p)
2167          strlcpy(iptr->userptr, p, iptr->usersize);
2168      }
2169    }
# Line 3635 | Line 2175 | split_nuh(struct split_nuh_item *const i
2175        /* if found a @ */
2176        *p++ = '\0';
2177  
2178 <      if (*iptr->nuhmask != '\0')
2178 >      if (*iptr->nuhmask)
2179          strlcpy(iptr->userptr, iptr->nuhmask, iptr->usersize);
2180  
2181 <      if (*p != '\0')
2181 >      if (*p)
2182          strlcpy(iptr->hostptr, p, iptr->hostsize);
2183      }
2184      else
# Line 3651 | Line 2191 | split_nuh(struct split_nuh_item *const i
2191      }
2192    }
2193   }
3654
3655 /*
3656 * flags_to_ascii
3657 *
3658 * inputs       - flags is a bitmask
3659 *              - pointer to table of ascii letters corresponding
3660 *                to each bit
3661 *              - flag 1 for convert ToLower if bit missing
3662 *                0 if ignore.
3663 * output       - none
3664 * side effects - string pointed to by p has bitmap chars written to it
3665 */
3666 static void
3667 flags_to_ascii(unsigned int flags, const unsigned int bit_table[], char *p,
3668               int lowerit)
3669 {
3670  unsigned int mask = 1;
3671  int i = 0;
3672
3673  for (mask = 1; (mask != 0) && (bit_table[i] != 0); mask <<= 1, i++)
3674  {
3675    if (flags & mask)
3676      *p++ = bit_table[i];
3677    else if (lowerit)
3678      *p++ = ToLower(bit_table[i]);
3679  }
3680  *p = '\0';
3681 }
3682
3683 /*
3684 * cidr_limit_reached
3685 *
3686 * inputs       - int flag allowing over_rule of limits
3687 *              - pointer to the ip to be added
3688 *              - pointer to the class
3689 * output       - non zero if limit reached
3690 *                0 if limit not reached
3691 * side effects -
3692 */
3693 static int
3694 cidr_limit_reached(int over_rule,
3695                   struct irc_ssaddr *ip, struct ClassItem *aclass)
3696 {
3697  dlink_node *ptr = NULL;
3698  struct CidrItem *cidr;
3699
3700  if (NumberPerCidr(aclass) <= 0)
3701    return 0;
3702
3703  if (ip->ss.ss_family == AF_INET)
3704  {
3705    if (CidrBitlenIPV4(aclass) <= 0)
3706      return 0;
3707
3708    DLINK_FOREACH(ptr, aclass->list_ipv4.head)
3709    {
3710      cidr = ptr->data;
3711      if (match_ipv4(ip, &cidr->mask, CidrBitlenIPV4(aclass)))
3712      {
3713        if (!over_rule && (cidr->number_on_this_cidr >= NumberPerCidr(aclass)))
3714          return -1;
3715        cidr->number_on_this_cidr++;
3716        return 0;
3717      }
3718    }
3719    cidr = MyMalloc(sizeof(struct CidrItem));
3720    cidr->number_on_this_cidr = 1;
3721    cidr->mask = *ip;
3722    mask_addr(&cidr->mask, CidrBitlenIPV4(aclass));
3723    dlinkAdd(cidr, &cidr->node, &aclass->list_ipv4);
3724  }
3725 #ifdef IPV6
3726  else if (CidrBitlenIPV6(aclass) > 0)
3727  {
3728    DLINK_FOREACH(ptr, aclass->list_ipv6.head)
3729    {
3730      cidr = ptr->data;
3731      if (match_ipv6(ip, &cidr->mask, CidrBitlenIPV6(aclass)))
3732      {
3733        if (!over_rule && (cidr->number_on_this_cidr >= NumberPerCidr(aclass)))
3734          return -1;
3735        cidr->number_on_this_cidr++;
3736        return 0;
3737      }
3738    }
3739    cidr = MyMalloc(sizeof(struct CidrItem));
3740    cidr->number_on_this_cidr = 1;
3741    cidr->mask = *ip;
3742    mask_addr(&cidr->mask, CidrBitlenIPV6(aclass));
3743    dlinkAdd(cidr, &cidr->node, &aclass->list_ipv6);
3744  }
3745 #endif
3746  return 0;
3747 }
3748
3749 /*
3750 * remove_from_cidr_check
3751 *
3752 * inputs       - pointer to the ip to be removed
3753 *              - pointer to the class
3754 * output       - NONE
3755 * side effects -
3756 */
3757 static void
3758 remove_from_cidr_check(struct irc_ssaddr *ip, struct ClassItem *aclass)
3759 {
3760  dlink_node *ptr = NULL;
3761  dlink_node *next_ptr = NULL;
3762  struct CidrItem *cidr;
3763
3764  if (NumberPerCidr(aclass) == 0)
3765    return;
3766
3767  if (ip->ss.ss_family == AF_INET)
3768  {
3769    if (CidrBitlenIPV4(aclass) <= 0)
3770      return;
3771
3772    DLINK_FOREACH_SAFE(ptr, next_ptr, aclass->list_ipv4.head)
3773    {
3774      cidr = ptr->data;
3775      if (match_ipv4(ip, &cidr->mask, CidrBitlenIPV4(aclass)))
3776      {
3777        cidr->number_on_this_cidr--;
3778        if (cidr->number_on_this_cidr == 0)
3779        {
3780          dlinkDelete(ptr, &aclass->list_ipv4);
3781          MyFree(cidr);
3782          return;
3783        }
3784      }
3785    }
3786  }
3787 #ifdef IPV6
3788  else if (CidrBitlenIPV6(aclass) > 0)
3789  {
3790    DLINK_FOREACH_SAFE(ptr, next_ptr, aclass->list_ipv6.head)
3791    {
3792      cidr = ptr->data;
3793      if (match_ipv6(ip, &cidr->mask, CidrBitlenIPV6(aclass)))
3794      {
3795        cidr->number_on_this_cidr--;
3796        if (cidr->number_on_this_cidr == 0)
3797        {
3798          dlinkDelete(ptr, &aclass->list_ipv6);
3799          MyFree(cidr);
3800          return;
3801        }
3802      }
3803    }
3804  }
3805 #endif
3806 }
3807
3808 static void
3809 rebuild_cidr_list(int aftype, struct ConfItem *oldcl, struct ClassItem *newcl,
3810                  dlink_list *old_list, dlink_list *new_list, int changed)
3811 {
3812  dlink_node *ptr;
3813  struct Client *client_p;
3814  struct ConfItem *conf;
3815  struct AccessItem *aconf;
3816
3817  if (!changed)
3818  {
3819    *new_list = *old_list;
3820    old_list->head = old_list->tail = NULL;
3821    old_list->length = 0;
3822    return;
3823  }
3824
3825  DLINK_FOREACH(ptr, local_client_list.head)
3826  {
3827    client_p = ptr->data;
3828    if (client_p->localClient->aftype != aftype)
3829      continue;
3830    if (dlink_list_length(&client_p->localClient->confs) == 0)
3831      continue;
3832
3833    conf = client_p->localClient->confs.tail->data;
3834    if (conf->type == CLIENT_TYPE)
3835    {
3836      aconf = map_to_conf(conf);
3837      if (aconf->class_ptr == oldcl)
3838        cidr_limit_reached(1, &client_p->localClient->ip, newcl);
3839    }
3840  }
3841 }
3842
3843 /*
3844 * rebuild_cidr_class
3845 *
3846 * inputs       - pointer to old conf
3847 *              - pointer to new_class
3848 * output       - none
3849 * side effects - rebuilds the class link list of cidr blocks
3850 */
3851 void
3852 rebuild_cidr_class(struct ConfItem *conf, struct ClassItem *new_class)
3853 {
3854  struct ClassItem *old_class = map_to_conf(conf);
3855
3856  if (NumberPerCidr(old_class) > 0 && NumberPerCidr(new_class) > 0)
3857  {
3858    if (CidrBitlenIPV4(old_class) > 0 && CidrBitlenIPV4(new_class) > 0)
3859      rebuild_cidr_list(AF_INET, conf, new_class,
3860                        &old_class->list_ipv4, &new_class->list_ipv4,
3861                        CidrBitlenIPV4(old_class) != CidrBitlenIPV4(new_class));
3862
3863 #ifdef IPV6
3864    if (CidrBitlenIPV6(old_class) > 0 && CidrBitlenIPV6(new_class) > 0)
3865      rebuild_cidr_list(AF_INET6, conf, new_class,
3866                        &old_class->list_ipv6, &new_class->list_ipv6,
3867                        CidrBitlenIPV6(old_class) != CidrBitlenIPV6(new_class));
3868 #endif
3869  }
3870
3871  destroy_cidr_class(old_class);
3872 }
3873
3874 /*
3875 * destroy_cidr_list
3876 *
3877 * inputs       - pointer to class dlink list of cidr blocks
3878 * output       - none
3879 * side effects - completely destroys the class link list of cidr blocks
3880 */
3881 static void
3882 destroy_cidr_list(dlink_list *list)
3883 {
3884  dlink_node *ptr = NULL, *next_ptr = NULL;
3885
3886  DLINK_FOREACH_SAFE(ptr, next_ptr, list->head)
3887  {
3888    dlinkDelete(ptr, list);
3889    MyFree(ptr->data);
3890  }
3891 }
3892
3893 /*
3894 * destroy_cidr_class
3895 *
3896 * inputs       - pointer to class
3897 * output       - none
3898 * side effects - completely destroys the class link list of cidr blocks
3899 */
3900 static void
3901 destroy_cidr_class(struct ClassItem *aclass)
3902 {
3903  destroy_cidr_list(&aclass->list_ipv4);
3904  destroy_cidr_list(&aclass->list_ipv6);
3905 }

Diff Legend

Removed lines
+ Added lines
< Changed lines (old)
> Changed lines (new)