npf_scan.l revision 1.24
1 /* $NetBSD: npf_scan.l,v 1.24 2016/12/27 22:35:33 rmind Exp $ */ 2 3 /*- 4 * Copyright (c) 2011-2012 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * 7 * This code is derived from software contributed to The NetBSD Foundation 8 * by Martin Husemann. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 29 * POSSIBILITY OF SUCH DAMAGE. 30 */ 31 32 %{ 33 #include <stdio.h> 34 #include <stdlib.h> 35 #include <err.h> 36 37 #include "npfctl.h" 38 #include "npf_parse.h" 39 40 int yycolumn; 41 42 #define YY_USER_ACTION yycolumn += yyleng; 43 44 extern int yyparsetarget; 45 extern int yylineno; 46 extern const char * yyfilename; 47 extern int yyparse(void); 48 extern void yyrestart(FILE *); 49 50 void 51 npfctl_parse_file(const char *name) 52 { 53 FILE *fp; 54 55 fp = fopen(name, "r"); 56 if (fp == NULL) { 57 err(EXIT_FAILURE, "open '%s'", name); 58 } 59 yyparsetarget = NPFCTL_PARSE_FILE; 60 yyrestart(fp); 61 yylineno = 1; 62 yycolumn = 0; 63 yyfilename = name; 64 yyparse(); 65 fclose(fp); 66 } 67 68 void 69 npfctl_parse_string(const char *str) 70 { 71 YY_BUFFER_STATE bs; 72 73 yyparsetarget = NPFCTL_PARSE_STRING; 74 bs = yy_scan_string(str); 75 yyfilename = "stdin"; 76 yyparse(); 77 yy_delete_buffer(bs); 78 } 79 80 %} 81 82 %option noyywrap nounput noinput 83 84 ID [a-zA-Z_][a-zA-Z_0-9]* 85 DID [a-zA-Z_][a-zA-Z_0-9-]* 86 NUMBER [0-9]+ 87 HEXDIG [0-9a-fA-F]+ 88 89 %% 90 alg return ALG; 91 table return TABLE; 92 type return TYPE; 93 hash return HASH; 94 tree return TREE; 95 cdb return CDB; 96 static return TSTATIC; 97 dynamic return TDYNAMIC; 98 file return TFILE; 99 map return MAP; 100 set return SET; 101 "<->" return ARROWBOTH; 102 "<-" return ARROWLEFT; 103 "->" return ARROWRIGHT; 104 algo return ALGO; 105 npt66 return NPT66; 106 "-" return MINUS; 107 procedure return PROCEDURE; 108 \\\n yylineno++; yycolumn = 0; 109 \n yylineno++; yycolumn = 0; return SEPLINE; 110 ; return SEPLINE; 111 name return NAME; 112 group return GROUP; 113 default return DEFAULT; 114 in return IN; 115 out return OUT; 116 forw return FORW; 117 interface return INTERFACE; 118 all return ALL; 119 block return BLOCK; 120 pass return PASS; 121 pcap-filter return PCAP_FILTER; 122 stateful return STATEFUL; 123 stateful-ends return STATEFUL_ENDS; 124 apply return APPLY; 125 final return FINAL; 126 quick return FINAL; 127 on return ON; 128 off return OFF; 129 bpf.jit return BPFJIT; 130 inet6 return INET6; 131 inet4 return INET4; 132 proto return PROTO; 133 family return FAMILY; 134 tcp return TCP; 135 icmp { yylval.num = IPPROTO_ICMP; return ICMP; } 136 ipv6-icmp { yylval.num = IPPROTO_ICMPV6; return ICMP6; } 137 \"ipv6-icmp\" { yylval.num = IPPROTO_ICMPV6; return ICMP6; } 138 return-rst return RETURNRST; 139 return-icmp return RETURNICMP; 140 return return RETURN; 141 ruleset return RULESET; 142 from return FROM; 143 to return TO; 144 port return PORT; 145 flags return FLAGS; 146 icmp-type return ICMPTYPE; 147 code return CODE; 148 any return ANY; 149 150 "/" return SLASH; 151 "{" return CURLY_OPEN; 152 "}" return CURLY_CLOSE; 153 "(" return PAR_OPEN; 154 ")" return PAR_CLOSE; 155 "," return COMMA; 156 "=" return EQ; 157 "!" return EXCL_MARK; 158 159 "0x"{HEXDIG} { 160 char *endp, *buf = ecalloc(1, yyleng + 1); 161 buf[yyleng] = 0; 162 yylval.num = strtoul(buf+2, &endp, 16); 163 free(buf); 164 return HEX; 165 } 166 167 {NUMBER}"."{NUMBER} { 168 char *endp, *buf = estrndup(yytext, yyleng); 169 yylval.fpnum = strtod(buf, &endp); 170 free(buf); 171 return FPNUM; 172 } 173 174 {HEXDIG}":"[0-9a-fA-F:]* { 175 yylval.str = estrndup(yytext, yyleng); 176 return IPV6ADDR; 177 } 178 179 "::"{HEXDIG}[0-9a-fA-F:.]* { 180 yylval.str = estrndup(yytext, yyleng); 181 return IPV6ADDR; 182 } 183 184 {NUMBER}"."[0-9][0-9.]* { 185 yylval.str = estrndup(yytext, yyleng); 186 return IPV4ADDR; 187 } 188 189 {NUMBER} { 190 char *endp, *buf = estrndup(yytext, yyleng); 191 yylval.num = strtoul(buf, &endp, 10); 192 free(buf); 193 return NUM; 194 } 195 196 "<"{DID}">" { 197 yylval.str = estrndup(yytext + 1, yyleng - 2); 198 return TABLE_ID; 199 } 200 201 "$"{ID} { 202 yylval.str = estrndup(yytext + 1, yyleng - 1); 203 return VAR_ID; 204 } 205 206 {ID} { 207 yylval.str = estrndup(yytext, yyleng); 208 return IDENTIFIER; 209 } 210 211 \"[^\"]*\" { 212 yylval.str = estrndup(yytext + 1, yyleng - 2); 213 return STRING; 214 } 215 216 #.*$ /* drop comment until end of line */ 217 [ \t] /* eat whitespace */ 218 219 : return COLON; 220
Indexes created Tue Oct 28 12:10:06 GMT 2025