contrib/unbound/util/config_file.c

   1 /*
   2  * util/config_file.c - reads and stores the config file for unbound.
   3  *
   4  * Copyright (c) 2007, NLnet Labs. All rights reserved.
   5  *
   6  * This software is open source.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * Redistributions of source code must retain the above copyright notice,
  13  * this list of conditions and the following disclaimer.
  14  *
  15  * Redistributions in binary form must reproduce the above copyright notice,
  16  * this list of conditions and the following disclaimer in the documentation
  17  * and/or other materials provided with the distribution.
  18  *
  19  * Neither the name of the NLNET LABS nor the names of its contributors may
  20  * be used to endorse or promote products derived from this software without
  21  * specific prior written permission.
  22  *
  23  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  24  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  25  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  26  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  27  * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  28  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
  29  * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
  30  * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  31  * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  32  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  33  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  34  */
  35
  36 /**
  37  * \file
  38  *
  39  * This file contains functions for the config file.
  40  */
  41
  42 #include "config.h"
  43 #include <ctype.h>
  44 #include <stdarg.h>
  45 #ifdef HAVE_TIME_H
  46 #include <time.h>
  47 #endif
  48 #include "util/log.h"
  49 #include "util/configyyrename.h"
  50 #include "util/config_file.h"
  51 #include "configparser.h"
  52 #include "util/net_help.h"
  53 #include "util/data/msgparse.h"
  54 #include "util/module.h"
  55 #include "util/regional.h"
  56 #include "util/fptr_wlist.h"
  57 #include "util/data/dname.h"
  58 #include "util/rtt.h"
  59 #include "services/cache/infra.h"
  60 #include "sldns/wire2str.h"
  61 #include "sldns/parseutil.h"
  62 #ifdef HAVE_GLOB_H
  63 # include <glob.h>
  64 #endif
  65 #ifdef CLIENT_SUBNET
  66 #include "edns-subnet/edns-subnet.h"
  67 #endif
  68 #ifdef HAVE_PWD_H
  69 #include <pwd.h>
  70 #endif
  71
  72 /** from cfg username, after daemonize setup performed */
  73 uid_t cfg_uid = (uid_t)-1;
  74 /** from cfg username, after daemonize setup performed */
  75 gid_t cfg_gid = (gid_t)-1;
  76 /** for debug allow small timeout values for fast rollovers */
  77 int autr_permit_small_holddown = 0;
  78
  79 /** global config during parsing */
  80 struct config_parser_state* cfg_parser = 0;
  81
  82 /** init ports possible for use */
  83 static void init_outgoing_availports(int* array, int num);
  84
  85 struct config_file*
  86 config_create(void)
  87 {
  88         struct config_file* cfg;
  89         cfg = (struct config_file*)calloc(1, sizeof(struct config_file));
  90         if(!cfg)
  91                 return NULL;
  92         /* the defaults if no config is present */
  93         cfg->verbosity = 1;
  94         cfg->stat_interval = 0;
  95         cfg->stat_cumulative = 0;
  96         cfg->stat_extended = 0;
  97         cfg->num_threads = 1;
  98         cfg->port = UNBOUND_DNS_PORT;
  99         cfg->do_ip4 = 1;
 100         cfg->do_ip6 = 1;
 101         cfg->do_udp = 1;
 102         cfg->do_tcp = 1;
 103         cfg->tcp_upstream = 0;
 104         cfg->udp_upstream_without_downstream = 0;
 105         cfg->tcp_mss = 0;
 106         cfg->outgoing_tcp_mss = 0;
 107         cfg->ssl_service_key = NULL;
 108         cfg->ssl_service_pem = NULL;
 109         cfg->ssl_port = UNBOUND_DNS_OVER_TLS_PORT;
 110         cfg->ssl_upstream = 0;
 111         cfg->tls_cert_bundle = NULL;
 112         cfg->tls_win_cert = 0;
 113         cfg->use_syslog = 1;
 114         cfg->log_identity = NULL; /* changed later with argv[0] */
 115         cfg->log_time_ascii = 0;
 116         cfg->log_queries = 0;
 117         cfg->log_replies = 0;
 118 #ifndef USE_WINSOCK
 119 #  ifdef USE_MINI_EVENT
 120         /* select max 1024 sockets */
 121         cfg->outgoing_num_ports = 960;
 122         cfg->num_queries_per_thread = 512;
 123 #  else
 124         /* libevent can use many sockets */
 125         cfg->outgoing_num_ports = 4096;
 126         cfg->num_queries_per_thread = 1024;
 127 #  endif
 128         cfg->outgoing_num_tcp = 10;
 129         cfg->incoming_num_tcp = 10;
 130 #else
 131         cfg->outgoing_num_ports = 48; /* windows is limited in num fds */
 132         cfg->num_queries_per_thread = 24;
 133         cfg->outgoing_num_tcp = 2; /* leaves 64-52=12 for: 4if,1stop,thread4 */
 134         cfg->incoming_num_tcp = 2;
 135 #endif
 136         cfg->edns_buffer_size = 4096; /* 4k from rfc recommendation */
 137         cfg->msg_buffer_size = 65552; /* 64 k + a small margin */
 138         cfg->msg_cache_size = 4 * 1024 * 1024;
 139         cfg->msg_cache_slabs = 4;
 140         cfg->jostle_time = 200;
 141         cfg->rrset_cache_size = 4 * 1024 * 1024;
 142         cfg->rrset_cache_slabs = 4;
 143         cfg->host_ttl = 900;
 144         cfg->bogus_ttl = 60;
 145         cfg->min_ttl = 0;
 146         cfg->max_ttl = 3600 * 24;
 147         cfg->max_negative_ttl = 3600;
 148         cfg->prefetch = 0;
 149         cfg->prefetch_key = 0;
 150         cfg->infra_cache_slabs = 4;
 151         cfg->infra_cache_numhosts = 10000;
 152         cfg->infra_cache_min_rtt = 50;
 153         cfg->delay_close = 0;
 154         if(!(cfg->outgoing_avail_ports = (int*)calloc(65536, sizeof(int))))
 155                 goto error_exit;
 156         init_outgoing_availports(cfg->outgoing_avail_ports, 65536);
 157         if(!(cfg->username = strdup(UB_USERNAME))) goto error_exit;
 158 #ifdef HAVE_CHROOT
 159         if(!(cfg->chrootdir = strdup(CHROOT_DIR))) goto error_exit;
 160 #endif
 161         if(!(cfg->directory = strdup(RUN_DIR))) goto error_exit;
 162         if(!(cfg->logfile = strdup(""))) goto error_exit;
 163         if(!(cfg->pidfile = strdup(PIDFILE))) goto error_exit;
 164         if(!(cfg->target_fetch_policy = strdup("3 2 1 0 0"))) goto error_exit;
 165         cfg->low_rtt_permil = 0;
 166         cfg->low_rtt = 45;
 167         cfg->donotqueryaddrs = NULL;
 168         cfg->donotquery_localhost = 1;
 169         cfg->root_hints = NULL;
 170         cfg->use_systemd = 0;
 171         cfg->do_daemonize = 1;
 172         cfg->if_automatic = 0;
 173         cfg->so_rcvbuf = 0;
 174         cfg->so_sndbuf = 0;
 175         cfg->so_reuseport = 0;
 176         cfg->ip_transparent = 0;
 177         cfg->ip_freebind = 0;
 178         cfg->num_ifs = 0;
 179         cfg->ifs = NULL;
 180         cfg->num_out_ifs = 0;
 181         cfg->out_ifs = NULL;
 182         cfg->stubs = NULL;
 183         cfg->forwards = NULL;
 184         cfg->auths = NULL;
 185 #ifdef CLIENT_SUBNET
 186         cfg->client_subnet = NULL;
 187         cfg->client_subnet_zone = NULL;
 188         cfg->client_subnet_opcode = LDNS_EDNS_CLIENT_SUBNET;
 189         cfg->client_subnet_always_forward = 0;
 190         cfg->max_client_subnet_ipv4 = 24;
 191         cfg->max_client_subnet_ipv6 = 56;
 192 #endif
 193         cfg->views = NULL;
 194         cfg->acls = NULL;
 195         cfg->harden_short_bufsize = 0;
 196         cfg->harden_large_queries = 0;
 197         cfg->harden_glue = 1;
 198         cfg->harden_dnssec_stripped = 1;
 199         cfg->harden_below_nxdomain = 0;
 200         cfg->harden_referral_path = 0;
 201         cfg->harden_algo_downgrade = 0;
 202         cfg->use_caps_bits_for_id = 0;
 203         cfg->caps_whitelist = NULL;
 204         cfg->private_address = NULL;
 205         cfg->private_domain = NULL;
 206         cfg->unwanted_threshold = 0;
 207         cfg->hide_identity = 0;
 208         cfg->hide_version = 0;
 209         cfg->hide_trustanchor = 0;
 210         cfg->identity = NULL;
 211         cfg->version = NULL;
 212         cfg->auto_trust_anchor_file_list = NULL;
 213         cfg->trust_anchor_file_list = NULL;
 214         cfg->trust_anchor_list = NULL;
 215         cfg->trusted_keys_file_list = NULL;
 216         cfg->trust_anchor_signaling = 1;
 217         cfg->root_key_sentinel = 1;
 218         cfg->dlv_anchor_file = NULL;
 219         cfg->dlv_anchor_list = NULL;
 220         cfg->domain_insecure = NULL;
 221         cfg->val_date_override = 0;
 222         cfg->val_sig_skew_min = 3600; /* at least daylight savings trouble */
 223         cfg->val_sig_skew_max = 86400; /* at most timezone settings trouble */
 224         cfg->val_clean_additional = 1;
 225         cfg->val_log_level = 0;
 226         cfg->val_log_squelch = 0;
 227         cfg->val_permissive_mode = 0;
 228         cfg->aggressive_nsec = 0;
 229         cfg->ignore_cd = 0;
 230         cfg->serve_expired = 0;
 231         cfg->add_holddown = 30*24*3600;
 232         cfg->del_holddown = 30*24*3600;
 233         cfg->keep_missing = 366*24*3600; /* one year plus a little leeway */
 234         cfg->permit_small_holddown = 0;
 235         cfg->key_cache_size = 4 * 1024 * 1024;
 236         cfg->key_cache_slabs = 4;
 237         cfg->neg_cache_size = 1 * 1024 * 1024;
 238         cfg->local_zones = NULL;
 239         cfg->local_zones_nodefault = NULL;
 240         cfg->local_zones_disable_default = 0;
 241         cfg->local_data = NULL;
 242         cfg->local_zone_overrides = NULL;
 243         cfg->unblock_lan_zones = 0;
 244         cfg->insecure_lan_zones = 0;
 245         cfg->python_script = NULL;
 246         cfg->remote_control_enable = 0;
 247         cfg->control_ifs.first = NULL;
 248         cfg->control_ifs.last = NULL;
 249         cfg->control_port = UNBOUND_CONTROL_PORT;
 250         cfg->control_use_cert = 1;
 251         cfg->minimal_responses = 0;
 252         cfg->rrset_roundrobin = 0;
 253         cfg->max_udp_size = 4096;
 254         if(!(cfg->server_key_file = strdup(RUN_DIR"/unbound_server.key")))
 255                 goto error_exit;
 256         if(!(cfg->server_cert_file = strdup(RUN_DIR"/unbound_server.pem")))
 257                 goto error_exit;
 258         if(!(cfg->control_key_file = strdup(RUN_DIR"/unbound_control.key")))
 259                 goto error_exit;
 260         if(!(cfg->control_cert_file = strdup(RUN_DIR"/unbound_control.pem")))
 261                 goto error_exit;
 262
 263 #ifdef CLIENT_SUBNET
 264         if(!(cfg->module_conf = strdup("subnetcache validator iterator"))) goto error_exit;
 265 #else
 266         if(!(cfg->module_conf = strdup("validator iterator"))) goto error_exit;
 267 #endif
 268         if(!(cfg->val_nsec3_key_iterations =
 269                 strdup("1024 150 2048 500 4096 2500"))) goto error_exit;
 270 #if defined(DNSTAP_SOCKET_PATH)
 271         if(!(cfg->dnstap_socket_path = strdup(DNSTAP_SOCKET_PATH)))
 272                 goto error_exit;
 273 #endif
 274         cfg->disable_dnssec_lame_check = 0;
 275         cfg->ip_ratelimit = 0;
 276         cfg->ratelimit = 0;
 277         cfg->ip_ratelimit_slabs = 4;
 278         cfg->ratelimit_slabs = 4;
 279         cfg->ip_ratelimit_size = 4*1024*1024;
 280         cfg->ratelimit_size = 4*1024*1024;
 281         cfg->ratelimit_for_domain = NULL;
 282         cfg->ratelimit_below_domain = NULL;
 283         cfg->ip_ratelimit_factor = 10;
 284         cfg->ratelimit_factor = 10;
 285         cfg->qname_minimisation = 1;
 286         cfg->qname_minimisation_strict = 0;
 287         cfg->shm_enable = 0;
 288         cfg->shm_key = 11777;
 289         cfg->dnscrypt = 0;
 290         cfg->dnscrypt_port = 0;
 291         cfg->dnscrypt_provider = NULL;
 292         cfg->dnscrypt_provider_cert = NULL;
 293         cfg->dnscrypt_provider_cert_rotated = NULL;
 294         cfg->dnscrypt_secret_key = NULL;
 295         cfg->dnscrypt_shared_secret_cache_size = 4*1024*1024;
 296         cfg->dnscrypt_shared_secret_cache_slabs = 4;
 297         cfg->dnscrypt_nonce_cache_size = 4*1024*1024;
 298         cfg->dnscrypt_nonce_cache_slabs = 4;
 299 #ifdef USE_IPSECMOD
 300         cfg->ipsecmod_enabled = 1;
 301         cfg->ipsecmod_ignore_bogus = 0;
 302         cfg->ipsecmod_hook = NULL;
 303         cfg->ipsecmod_max_ttl = 3600;
 304         cfg->ipsecmod_whitelist = NULL;
 305         cfg->ipsecmod_strict = 0;
 306 #endif
 307 #ifdef USE_CACHEDB
 308         cfg->cachedb_backend = NULL;
 309         cfg->cachedb_secret = NULL;
 310 #endif
 311         return cfg;
 312 error_exit:
 313         config_delete(cfg);
 314         return NULL;
 315 }
 316
 317 struct config_file* config_create_forlib(void)
 318 {
 319         struct config_file* cfg = config_create();
 320         if(!cfg) return NULL;
 321         /* modifications for library use, less verbose, less memory */
 322         free(cfg->chrootdir);
 323         cfg->chrootdir = NULL;
 324         cfg->verbosity = 0;
 325         cfg->outgoing_num_ports = 16; /* in library use, this is 'reasonable'
 326                 and probably within the ulimit(maxfds) of the user */
 327         cfg->outgoing_num_tcp = 2;
 328         cfg->msg_cache_size = 1024*1024;
 329         cfg->msg_cache_slabs = 1;
 330         cfg->rrset_cache_size = 1024*1024;
 331         cfg->rrset_cache_slabs = 1;
 332         cfg->infra_cache_slabs = 1;
 333         cfg->use_syslog = 0;
 334         cfg->key_cache_size = 1024*1024;
 335         cfg->key_cache_slabs = 1;
 336         cfg->neg_cache_size = 100 * 1024;
 337         cfg->donotquery_localhost = 0; /* allow, so that you can ask a
 338                 forward nameserver running on localhost */
 339         cfg->val_log_level = 2; /* to fill why_bogus with */
 340         cfg->val_log_squelch = 1;
 341         return cfg;
 342 }
 343
 344 /** check that the value passed is >= 0 */
 345 #define IS_NUMBER_OR_ZERO \
 346         if(atoi(val) == 0 && strcmp(val, "0") != 0) return 0
 347 /** check that the value passed is > 0 */
 348 #define IS_NONZERO_NUMBER \
 349         if(atoi(val) == 0) return 0
 350 /** check that the value passed is not 0 and a power of 2 */
 351 #define IS_POW2_NUMBER \
 352         if(atoi(val) == 0 || !is_pow2((size_t)atoi(val))) return 0
 353 /** check that the value passed is yes or no */
 354 #define IS_YES_OR_NO \
 355         if(strcmp(val, "yes") != 0 && strcmp(val, "no") != 0) return 0
 356 /** put integer_or_zero into variable */
 357 #define S_NUMBER_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
 358         { IS_NUMBER_OR_ZERO; cfg->var = atoi(val); }
 359 /** put integer_nonzero into variable */
 360 #define S_NUMBER_NONZERO(str, var) if(strcmp(opt, str) == 0) \
 361         { IS_NONZERO_NUMBER; cfg->var = atoi(val); }
 362 /** put integer_or_zero into unsigned */
 363 #define S_UNSIGNED_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
 364         { IS_NUMBER_OR_ZERO; cfg->var = (unsigned)atoi(val); }
 365 /** put integer_or_zero into size_t */
 366 #define S_SIZET_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
 367         { IS_NUMBER_OR_ZERO; cfg->var = (size_t)atoi(val); }
 368 /** put integer_nonzero into size_t */
 369 #define S_SIZET_NONZERO(str, var) if(strcmp(opt, str) == 0) \
 370         { IS_NONZERO_NUMBER; cfg->var = (size_t)atoi(val); }
 371 /** put yesno into variable */
 372 #define S_YNO(str, var) if(strcmp(opt, str) == 0) \
 373         { IS_YES_OR_NO; cfg->var = (strcmp(val, "yes") == 0); }
 374 /** put memsize into variable */
 375 #define S_MEMSIZE(str, var) if(strcmp(opt, str)==0) \
 376         { return cfg_parse_memsize(val, &cfg->var); }
 377 /** put pow2 number into variable */
 378 #define S_POW2(str, var) if(strcmp(opt, str)==0) \
 379         { IS_POW2_NUMBER; cfg->var = (size_t)atoi(val); }
 380 /** put string into variable */
 381 #define S_STR(str, var) if(strcmp(opt, str)==0) \
 382         { free(cfg->var); return (cfg->var = strdup(val)) != NULL; }
 383 /** put string into strlist */
 384 #define S_STRLIST(str, var) if(strcmp(opt, str)==0) \
 385         { return cfg_strlist_insert(&cfg->var, strdup(val)); }
 386 /** put string into strlist if not present yet*/
 387 #define S_STRLIST_UNIQ(str, var) if(strcmp(opt, str)==0) \
 388         { if(cfg_strlist_find(cfg->var, val)) { return 0;} \
 389           return cfg_strlist_insert(&cfg->var, strdup(val)); }
 390 /** append string to strlist */
 391 #define S_STRLIST_APPEND(str, var) if(strcmp(opt, str)==0) \
 392         { return cfg_strlist_append(&cfg->var, strdup(val)); }
 393
 394 int config_set_option(struct config_file* cfg, const char* opt,
 395         const char* val)
 396 {
 397         char buf[64];
 398         if(!opt) return 0;
 399         if(opt[strlen(opt)-1] != ':' && strlen(opt)+2<sizeof(buf)) {
 400                 snprintf(buf, sizeof(buf), "%s:", opt);
 401                 opt = buf;
 402         }
 403         S_NUMBER_OR_ZERO("verbosity:", verbosity)
 404         else if(strcmp(opt, "statistics-interval:") == 0) {
 405                 if(strcmp(val, "0") == 0 || strcmp(val, "") == 0)
 406                         cfg->stat_interval = 0;
 407                 else if(atoi(val) == 0)
 408                         return 0;
 409                 else cfg->stat_interval = atoi(val);
 410         } else if(strcmp(opt, "num_threads:") == 0) {
 411                 /* not supported, library must have 1 thread in bgworker */
 412                 return 0;
 413         } else if(strcmp(opt, "outgoing-port-permit:") == 0) {
 414                 return cfg_mark_ports(val, 1,
 415                         cfg->outgoing_avail_ports, 65536);
 416         } else if(strcmp(opt, "outgoing-port-avoid:") == 0) {
 417                 return cfg_mark_ports(val, 0,
 418                         cfg->outgoing_avail_ports, 65536);
 419         } else if(strcmp(opt, "local-zone:") == 0) {
 420                 return cfg_parse_local_zone(cfg, val);
 421         } else if(strcmp(opt, "val-override-date:") == 0) {
 422                 if(strcmp(val, "") == 0 || strcmp(val, "0") == 0) {
 423                         cfg->val_date_override = 0;
 424                 } else if(strlen(val) == 14) {
 425                         cfg->val_date_override = cfg_convert_timeval(val);
 426                         return cfg->val_date_override != 0;
 427                 } else {
 428                         if(atoi(val) == 0) return 0;
 429                         cfg->val_date_override = (uint32_t)atoi(val);
 430                 }
 431         } else if(strcmp(opt, "local-data-ptr:") == 0) {
 432                 char* ptr = cfg_ptr_reverse((char*)opt);
 433                 return cfg_strlist_insert(&cfg->local_data, ptr);
 434         } else if(strcmp(opt, "logfile:") == 0) {
 435                 cfg->use_syslog = 0;
 436                 free(cfg->logfile);
 437                 return (cfg->logfile = strdup(val)) != NULL;
 438         }
 439         else if(strcmp(opt, "log-time-ascii:") == 0)
 440         { IS_YES_OR_NO; cfg->log_time_ascii = (strcmp(val, "yes") == 0);
 441           log_set_time_asc(cfg->log_time_ascii); }
 442         else S_SIZET_NONZERO("max-udp-size:", max_udp_size)
 443         else S_YNO("use-syslog:", use_syslog)
 444         else S_STR("log-identity:", log_identity)
 445         else S_YNO("extended-statistics:", stat_extended)
 446         else S_YNO("statistics-cumulative:", stat_cumulative)
 447         else S_YNO("shm-enable:", shm_enable)
 448         else S_NUMBER_OR_ZERO("shm-key:", shm_key)
 449         else S_YNO("do-ip4:", do_ip4)
 450         else S_YNO("do-ip6:", do_ip6)
 451         else S_YNO("do-udp:", do_udp)
 452         else S_YNO("do-tcp:", do_tcp)
 453         else S_YNO("tcp-upstream:", tcp_upstream)
 454         else S_YNO("udp-upstream-without-downstream:",
 455                 udp_upstream_without_downstream)
 456         else S_NUMBER_NONZERO("tcp-mss:", tcp_mss)
 457         else S_NUMBER_NONZERO("outgoing-tcp-mss:", outgoing_tcp_mss)
 458         else S_YNO("ssl-upstream:", ssl_upstream)
 459         else S_STR("ssl-service-key:", ssl_service_key)
 460         else S_STR("ssl-service-pem:", ssl_service_pem)
 461         else S_NUMBER_NONZERO("ssl-port:", ssl_port)
 462         else S_STR("tls-cert-bundle:", tls_cert_bundle)
 463         else S_YNO("tls-win-cert:", tls_win_cert)
 464         else S_STRLIST("additional-tls-port:", tls_additional_port)
 465         else S_STRLIST("tls-additional-ports:", tls_additional_port)
 466         else S_STRLIST("tls-additional-port:", tls_additional_port)
 467         else S_YNO("interface-automatic:", if_automatic)
 468         else S_YNO("use-systemd:", use_systemd)
 469         else S_YNO("do-daemonize:", do_daemonize)
 470         else S_NUMBER_NONZERO("port:", port)
 471         else S_NUMBER_NONZERO("outgoing-range:", outgoing_num_ports)
 472         else S_SIZET_OR_ZERO("outgoing-num-tcp:", outgoing_num_tcp)
 473         else S_SIZET_OR_ZERO("incoming-num-tcp:", incoming_num_tcp)
 474         else S_SIZET_NONZERO("edns-buffer-size:", edns_buffer_size)
 475         else S_SIZET_NONZERO("msg-buffer-size:", msg_buffer_size)
 476         else S_MEMSIZE("msg-cache-size:", msg_cache_size)
 477         else S_POW2("msg-cache-slabs:", msg_cache_slabs)
 478         else S_SIZET_NONZERO("num-queries-per-thread:",num_queries_per_thread)
 479         else S_SIZET_OR_ZERO("jostle-timeout:", jostle_time)
 480         else S_MEMSIZE("so-rcvbuf:", so_rcvbuf)
 481         else S_MEMSIZE("so-sndbuf:", so_sndbuf)
 482         else S_YNO("so-reuseport:", so_reuseport)
 483         else S_YNO("ip-transparent:", ip_transparent)
 484         else S_YNO("ip-freebind:", ip_freebind)
 485         else S_MEMSIZE("rrset-cache-size:", rrset_cache_size)
 486         else S_POW2("rrset-cache-slabs:", rrset_cache_slabs)
 487         else S_YNO("prefetch:", prefetch)
 488         else S_YNO("prefetch-key:", prefetch_key)
 489         else if(strcmp(opt, "cache-max-ttl:") == 0)
 490         { IS_NUMBER_OR_ZERO; cfg->max_ttl = atoi(val); MAX_TTL=(time_t)cfg->max_ttl;}
 491         else if(strcmp(opt, "cache-max-negative-ttl:") == 0)
 492         { IS_NUMBER_OR_ZERO; cfg->max_negative_ttl = atoi(val); MAX_NEG_TTL=(time_t)cfg->max_negative_ttl;}
 493         else if(strcmp(opt, "cache-min-ttl:") == 0)
 494         { IS_NUMBER_OR_ZERO; cfg->min_ttl = atoi(val); MIN_TTL=(time_t)cfg->min_ttl;}
 495         else if(strcmp(opt, "infra-cache-min-rtt:") == 0) {
 496             IS_NUMBER_OR_ZERO; cfg->infra_cache_min_rtt = atoi(val);
 497             RTT_MIN_TIMEOUT=cfg->infra_cache_min_rtt;
 498         }
 499         else S_NUMBER_OR_ZERO("infra-host-ttl:", host_ttl)
 500         else S_POW2("infra-cache-slabs:", infra_cache_slabs)
 501         else S_SIZET_NONZERO("infra-cache-numhosts:", infra_cache_numhosts)
 502         else S_NUMBER_OR_ZERO("delay-close:", delay_close)
 503         else S_STR("chroot:", chrootdir)
 504         else S_STR("username:", username)
 505         else S_STR("directory:", directory)
 506         else S_STR("pidfile:", pidfile)
 507         else S_YNO("hide-identity:", hide_identity)
 508         else S_YNO("hide-version:", hide_version)
 509         else S_YNO("hide-trustanchor:", hide_trustanchor)
 510         else S_STR("identity:", identity)
 511         else S_STR("version:", version)
 512         else S_STRLIST("root-hints:", root_hints)
 513         else S_STR("target-fetch-policy:", target_fetch_policy)
 514         else S_YNO("harden-glue:", harden_glue)
 515         else S_YNO("harden-short-bufsize:", harden_short_bufsize)
 516         else S_YNO("harden-large-queries:", harden_large_queries)
 517         else S_YNO("harden-dnssec-stripped:", harden_dnssec_stripped)
 518         else S_YNO("harden-below-nxdomain:", harden_below_nxdomain)
 519         else S_YNO("harden-referral-path:", harden_referral_path)
 520         else S_YNO("harden-algo-downgrade:", harden_algo_downgrade)
 521         else S_YNO("use-caps-for-id:", use_caps_bits_for_id)
 522         else S_STRLIST("caps-whitelist:", caps_whitelist)
 523         else S_SIZET_OR_ZERO("unwanted-reply-threshold:", unwanted_threshold)
 524         else S_STRLIST("private-address:", private_address)
 525         else S_STRLIST("private-domain:", private_domain)
 526         else S_YNO("do-not-query-localhost:", donotquery_localhost)
 527         else S_STRLIST("do-not-query-address:", donotqueryaddrs)
 528         else S_STRLIST("auto-trust-anchor-file:", auto_trust_anchor_file_list)
 529         else S_STRLIST("trust-anchor-file:", trust_anchor_file_list)
 530         else S_STRLIST("trust-anchor:", trust_anchor_list)
 531         else S_STRLIST("trusted-keys-file:", trusted_keys_file_list)
 532         else S_YNO("trust-anchor-signaling:", trust_anchor_signaling)
 533         else S_YNO("root-key-sentinel:", root_key_sentinel)
 534         else S_STR("dlv-anchor-file:", dlv_anchor_file)
 535         else S_STRLIST("dlv-anchor:", dlv_anchor_list)
 536         else S_STRLIST("domain-insecure:", domain_insecure)
 537         else S_NUMBER_OR_ZERO("val-bogus-ttl:", bogus_ttl)
 538         else S_YNO("val-clean-additional:", val_clean_additional)
 539         else S_NUMBER_OR_ZERO("val-log-level:", val_log_level)
 540         else S_YNO("val-log-squelch:", val_log_squelch)
 541         else S_YNO("log-queries:", log_queries)
 542         else S_YNO("log-replies:", log_replies)
 543         else S_YNO("val-permissive-mode:", val_permissive_mode)
 544         else S_YNO("aggressive-nsec:", aggressive_nsec)
 545         else S_YNO("ignore-cd-flag:", ignore_cd)
 546         else S_YNO("serve-expired:", serve_expired)
 547         else S_STR("val-nsec3-keysize-iterations:", val_nsec3_key_iterations)
 548         else S_UNSIGNED_OR_ZERO("add-holddown:", add_holddown)
 549         else S_UNSIGNED_OR_ZERO("del-holddown:", del_holddown)
 550         else S_UNSIGNED_OR_ZERO("keep-missing:", keep_missing)
 551         else if(strcmp(opt, "permit-small-holddown:") == 0)
 552         { IS_YES_OR_NO; cfg->permit_small_holddown = (strcmp(val, "yes") == 0);
 553           autr_permit_small_holddown = cfg->permit_small_holddown; }
 554         else S_MEMSIZE("key-cache-size:", key_cache_size)
 555         else S_POW2("key-cache-slabs:", key_cache_slabs)
 556         else S_MEMSIZE("neg-cache-size:", neg_cache_size)
 557         else S_YNO("minimal-responses:", minimal_responses)
 558         else S_YNO("rrset-roundrobin:", rrset_roundrobin)
 559         else S_STRLIST("local-data:", local_data)
 560         else S_YNO("unblock-lan-zones:", unblock_lan_zones)
 561         else S_YNO("insecure-lan-zones:", insecure_lan_zones)
 562         else S_YNO("control-enable:", remote_control_enable)
 563         else S_STRLIST_APPEND("control-interface:", control_ifs)
 564         else S_NUMBER_NONZERO("control-port:", control_port)
 565         else S_STR("server-key-file:", server_key_file)
 566         else S_STR("server-cert-file:", server_cert_file)
 567         else S_STR("control-key-file:", control_key_file)
 568         else S_STR("control-cert-file:", control_cert_file)
 569         else S_STR("module-config:", module_conf)
 570         else S_STR("python-script:", python_script)
 571         else S_YNO("disable-dnssec-lame-check:", disable_dnssec_lame_check)
 572 #ifdef CLIENT_SUBNET
 573         /* Can't set max subnet prefix here, since that value is used when
 574          * generating the address tree. */
 575         /* No client-subnet-always-forward here, module registration depends on
 576          * this option. */
 577 #endif
 578 #ifdef USE_DNSTAP
 579         else S_YNO("dnstap-enable:", dnstap)
 580         else S_STR("dnstap-socket-path:", dnstap_socket_path)
 581         else S_YNO("dnstap-send-identity:", dnstap_send_identity)
 582         else S_YNO("dnstap-send-version:", dnstap_send_version)
 583         else S_STR("dnstap-identity:", dnstap_identity)
 584         else S_STR("dnstap-version:", dnstap_version)
 585         else S_YNO("dnstap-log-resolver-query-messages:",
 586                 dnstap_log_resolver_query_messages)
 587         else S_YNO("dnstap-log-resolver-response-messages:",
 588                 dnstap_log_resolver_response_messages)
 589         else S_YNO("dnstap-log-client-query-messages:",
 590                 dnstap_log_client_query_messages)
 591         else S_YNO("dnstap-log-client-response-messages:",
 592                 dnstap_log_client_response_messages)
 593         else S_YNO("dnstap-log-forwarder-query-messages:",
 594                 dnstap_log_forwarder_query_messages)
 595         else S_YNO("dnstap-log-forwarder-response-messages:",
 596                 dnstap_log_forwarder_response_messages)
 597 #endif
 598 #ifdef USE_DNSCRYPT
 599         else S_YNO("dnscrypt-enable:", dnscrypt)
 600         else S_NUMBER_NONZERO("dnscrypt-port:", dnscrypt_port)
 601         else S_STR("dnscrypt-provider:", dnscrypt_provider)
 602         else S_STRLIST_UNIQ("dnscrypt-provider-cert:", dnscrypt_provider_cert)
 603         else S_STRLIST("dnscrypt-provider-cert-rotated:", dnscrypt_provider_cert_rotated)
 604         else S_STRLIST_UNIQ("dnscrypt-secret-key:", dnscrypt_secret_key)
 605         else S_MEMSIZE("dnscrypt-shared-secret-cache-size:",
 606                 dnscrypt_shared_secret_cache_size)
 607         else S_POW2("dnscrypt-shared-secret-cache-slabs:",
 608                 dnscrypt_shared_secret_cache_slabs)
 609         else S_MEMSIZE("dnscrypt-nonce-cache-size:",
 610                 dnscrypt_nonce_cache_size)
 611         else S_POW2("dnscrypt-nonce-cache-slabs:",
 612                 dnscrypt_nonce_cache_slabs)
 613 #endif
 614         else if(strcmp(opt, "ip-ratelimit:") == 0) {
 615             IS_NUMBER_OR_ZERO; cfg->ip_ratelimit = atoi(val);
 616             infra_ip_ratelimit=cfg->ip_ratelimit;
 617         }
 618         else if(strcmp(opt, "ratelimit:") == 0) {
 619             IS_NUMBER_OR_ZERO; cfg->ratelimit = atoi(val);
 620             infra_dp_ratelimit=cfg->ratelimit;
 621         }
 622         else S_MEMSIZE("ip-ratelimit-size:", ip_ratelimit_size)
 623         else S_MEMSIZE("ratelimit-size:", ratelimit_size)
 624         else S_POW2("ip-ratelimit-slabs:", ip_ratelimit_slabs)
 625         else S_POW2("ratelimit-slabs:", ratelimit_slabs)
 626         else S_NUMBER_OR_ZERO("ip-ratelimit-factor:", ip_ratelimit_factor)
 627         else S_NUMBER_OR_ZERO("ratelimit-factor:", ratelimit_factor)
 628         else S_NUMBER_OR_ZERO("low-rtt:", low_rtt)
 629         else S_NUMBER_OR_ZERO("low-rtt-pct:", low_rtt_permil)
 630         else S_NUMBER_OR_ZERO("low-rtt-permil:", low_rtt_permil)
 631         else S_YNO("qname-minimisation:", qname_minimisation)
 632         else S_YNO("qname-minimisation-strict:", qname_minimisation_strict)
 633 #ifdef USE_IPSECMOD
 634         else S_YNO("ipsecmod-enabled:", ipsecmod_enabled)
 635         else S_YNO("ipsecmod-ignore-bogus:", ipsecmod_ignore_bogus)
 636         else if(strcmp(opt, "ipsecmod-max-ttl:") == 0)
 637         { IS_NUMBER_OR_ZERO; cfg->ipsecmod_max_ttl = atoi(val); }
 638         else S_YNO("ipsecmod-strict:", ipsecmod_strict)
 639 #endif
 640         else if(strcmp(opt, "define-tag:") ==0) {
 641                 return config_add_tag(cfg, val);
 642         /* val_sig_skew_min and max are copied into val_env during init,
 643          * so this does not update val_env with set_option */
 644         } else if(strcmp(opt, "val-sig-skew-min:") == 0)
 645         { IS_NUMBER_OR_ZERO; cfg->val_sig_skew_min = (int32_t)atoi(val); }
 646         else if(strcmp(opt, "val-sig-skew-max:") == 0)
 647         { IS_NUMBER_OR_ZERO; cfg->val_sig_skew_max = (int32_t)atoi(val); }
 648         else if (strcmp(opt, "outgoing-interface:") == 0) {
 649                 char* d = strdup(val);
 650                 char** oi =
 651                 (char**)reallocarray(NULL, (size_t)cfg->num_out_ifs+1, sizeof(char*));
 652                 if(!d || !oi) { free(d); free(oi); return -1; }
 653                 if(cfg->out_ifs && cfg->num_out_ifs) {
 654                         memmove(oi, cfg->out_ifs, cfg->num_out_ifs*sizeof(char*));
 655                         free(cfg->out_ifs);
 656                 }
 657                 oi[cfg->num_out_ifs++] = d;
 658                 cfg->out_ifs = oi;
 659         } else {
 660                 /* unknown or unsupported (from the set_option interface):
 661                  * interface, outgoing-interface, access-control,
 662                  * stub-zone, name, stub-addr, stub-host, stub-prime
 663                  * forward-first, stub-first, forward-ssl-upstream,
 664                  * stub-ssl-upstream, forward-zone, auth-zone
 665                  * name, forward-addr, forward-host,
 666                  * ratelimit-for-domain, ratelimit-below-domain,
 667                  * local-zone-tag, access-control-view,
 668                  * send-client-subnet, client-subnet-always-forward,
 669                  * max-client-subnet-ipv4, max-client-subnet-ipv6, ipsecmod_hook,
 670                  * ipsecmod_whitelist. */
 671                 return 0;
 672         }
 673         return 1;
 674 }
 675
 676 void config_print_func(char* line, void* arg)
 677 {
 678         FILE* f = (FILE*)arg;
 679         (void)fprintf(f, "%s\n", line);
 680 }
 681
 682 /** collate func arg */
 683 struct config_collate_arg {
 684         /** list of result items */
 685         struct config_strlist_head list;
 686         /** if a malloc error occurred, 0 is OK */
 687         int status;
 688 };
 689
 690 void config_collate_func(char* line, void* arg)
 691 {
 692         struct config_collate_arg* m = (struct config_collate_arg*)arg;
 693         if(m->status)
 694                 return;
 695         if(!cfg_strlist_append(&m->list, strdup(line)))
 696                 m->status = 1;
 697 }
 698
 699 int config_get_option_list(struct config_file* cfg, const char* opt,
 700         struct config_strlist** list)
 701 {
 702         struct config_collate_arg m;
 703         memset(&m, 0, sizeof(m));
 704         *list = NULL;
 705         if(!config_get_option(cfg, opt, config_collate_func, &m))
 706                 return 1;
 707         if(m.status) {
 708                 config_delstrlist(m.list.first);
 709                 return 2;
 710         }
 711         *list = m.list.first;
 712         return 0;
 713 }
 714
 715 int
 716 config_get_option_collate(struct config_file* cfg, const char* opt, char** str)
 717 {
 718         struct config_strlist* list = NULL;
 719         int r;
 720         *str = NULL;
 721         if((r = config_get_option_list(cfg, opt, &list)) != 0)
 722                 return r;
 723         *str = config_collate_cat(list);
 724         config_delstrlist(list);
 725         if(!*str) return 2;
 726         return 0;
 727 }
 728
 729 char*
 730 config_collate_cat(struct config_strlist* list)
 731 {
 732         size_t total = 0, left;
 733         struct config_strlist* s;
 734         char *r, *w;
 735         if(!list) /* no elements */
 736                 return strdup("");
 737         if(list->next == NULL) /* one element , no newline at end. */
 738                 return strdup(list->str);
 739         /* count total length */
 740         for(s=list; s; s=s->next)
 741                 total += strlen(s->str) + 1; /* len + newline */
 742         left = total+1; /* one extra for nul at end */
 743         r = malloc(left);
 744         if(!r)
 745                 return NULL;
 746         w = r;
 747         for(s=list; s; s=s->next) {
 748                 size_t this = strlen(s->str);
 749                 if(this+2 > left) { /* sanity check */
 750                         free(r);
 751                         return NULL;
 752                 }
 753                 snprintf(w, left, "%s\n", s->str);
 754                 this = strlen(w);
 755                 w += this;
 756                 left -= this;
 757         }
 758         return r;
 759 }
 760
 761 /** compare and print decimal option */
 762 #define O_DEC(opt, str, var) if(strcmp(opt, str)==0) \
 763         {snprintf(buf, len, "%d", (int)cfg->var); \
 764         func(buf, arg);}
 765 /** compare and print unsigned option */
 766 #define O_UNS(opt, str, var) if(strcmp(opt, str)==0) \
 767         {snprintf(buf, len, "%u", (unsigned)cfg->var); \
 768         func(buf, arg);}
 769 /** compare and print yesno option */
 770 #define O_YNO(opt, str, var) if(strcmp(opt, str)==0) \
 771         {func(cfg->var?"yes":"no", arg);}
 772 /** compare and print string option */
 773 #define O_STR(opt, str, var) if(strcmp(opt, str)==0) \
 774         {func(cfg->var?cfg->var:"", arg);}
 775 /** compare and print array option */
 776 #define O_IFC(opt, str, num, arr) if(strcmp(opt, str)==0) \
 777         {int i; for(i=0; i<cfg->num; i++) func(cfg->arr[i], arg);}
 778 /** compare and print memorysize option */
 779 #define O_MEM(opt, str, var) if(strcmp(opt, str)==0) { \
 780         if(cfg->var > 1024*1024*1024) { \
 781           size_t f=cfg->var/(size_t)1000000, b=cfg->var%(size_t)1000000; \
 782           snprintf(buf, len, "%u%6.6u", (unsigned)f, (unsigned)b); \
 783         } else snprintf(buf, len, "%u", (unsigned)cfg->var); \
 784         func(buf, arg);}
 785 /** compare and print list option */
 786 #define O_LST(opt, name, lst) if(strcmp(opt, name)==0) { \
 787         struct config_strlist* p = cfg->lst; \
 788         for(p = cfg->lst; p; p = p->next) \
 789                 func(p->str, arg); \
 790         }
 791 /** compare and print list option */
 792 #define O_LS2(opt, name, lst) if(strcmp(opt, name)==0) { \
 793         struct config_str2list* p = cfg->lst; \
 794         for(p = cfg->lst; p; p = p->next) { \
 795                 snprintf(buf, len, "%s %s", p->str, p->str2); \
 796                 func(buf, arg); \
 797         } \
 798         }
 799 /** compare and print list option */
 800 #define O_LS3(opt, name, lst) if(strcmp(opt, name)==0) { \
 801         struct config_str3list* p = cfg->lst; \
 802         for(p = cfg->lst; p; p = p->next) { \
 803                 snprintf(buf, len, "%s %s %s", p->str, p->str2, p->str3); \
 804                 func(buf, arg); \
 805         } \
 806         }
 807 /** compare and print taglist option */
 808 #define O_LTG(opt, name, lst) if(strcmp(opt, name)==0) { \
 809         char* tmpstr = NULL; \
 810         struct config_strbytelist *p = cfg->lst; \
 811         for(p = cfg->lst; p; p = p->next) {\
 812                 tmpstr = config_taglist2str(cfg, p->str2, p->str2len); \
 813                 if(tmpstr) {\
 814                         snprintf(buf, len, "%s %s", p->str, tmpstr); \
 815                         func(buf, arg); \
 816                         free(tmpstr); \
 817                 } \
 818         } \
 819         }
 820
 821 int
 822 config_get_option(struct config_file* cfg, const char* opt,
 823         void (*func)(char*,void*), void* arg)
 824 {
 825         char buf[1024], nopt[64];
 826         size_t len = sizeof(buf);
 827         if(opt && opt[strlen(opt)-1] == ':' && strlen(opt)<sizeof(nopt)) {
 828                 memmove(nopt, opt, strlen(opt));
 829                 nopt[strlen(opt)-1] = 0;
 830                 opt = nopt;
 831         }
 832         fptr_ok(fptr_whitelist_print_func(func));
 833         O_DEC(opt, "verbosity", verbosity)
 834         else O_DEC(opt, "statistics-interval", stat_interval)
 835         else O_YNO(opt, "statistics-cumulative", stat_cumulative)
 836         else O_YNO(opt, "extended-statistics", stat_extended)
 837         else O_YNO(opt, "shm-enable", shm_enable)
 838         else O_DEC(opt, "shm-key", shm_key)
 839         else O_YNO(opt, "use-syslog", use_syslog)
 840         else O_STR(opt, "log-identity", log_identity)
 841         else O_YNO(opt, "log-time-ascii", log_time_ascii)
 842         else O_DEC(opt, "num-threads", num_threads)
 843         else O_IFC(opt, "interface", num_ifs, ifs)
 844         else O_IFC(opt, "outgoing-interface", num_out_ifs, out_ifs)
 845         else O_YNO(opt, "interface-automatic", if_automatic)
 846         else O_DEC(opt, "port", port)
 847         else O_DEC(opt, "outgoing-range", outgoing_num_ports)
 848         else O_DEC(opt, "outgoing-num-tcp", outgoing_num_tcp)
 849         else O_DEC(opt, "incoming-num-tcp", incoming_num_tcp)
 850         else O_DEC(opt, "edns-buffer-size", edns_buffer_size)
 851         else O_DEC(opt, "msg-buffer-size", msg_buffer_size)
 852         else O_MEM(opt, "msg-cache-size", msg_cache_size)
 853         else O_DEC(opt, "msg-cache-slabs", msg_cache_slabs)
 854         else O_DEC(opt, "num-queries-per-thread", num_queries_per_thread)
 855         else O_UNS(opt, "jostle-timeout", jostle_time)
 856         else O_MEM(opt, "so-rcvbuf", so_rcvbuf)
 857         else O_MEM(opt, "so-sndbuf", so_sndbuf)
 858         else O_YNO(opt, "so-reuseport", so_reuseport)
 859         else O_YNO(opt, "ip-transparent", ip_transparent)
 860         else O_YNO(opt, "ip-freebind", ip_freebind)
 861         else O_MEM(opt, "rrset-cache-size", rrset_cache_size)
 862         else O_DEC(opt, "rrset-cache-slabs", rrset_cache_slabs)
 863         else O_YNO(opt, "prefetch-key", prefetch_key)
 864         else O_YNO(opt, "prefetch", prefetch)
 865         else O_DEC(opt, "cache-max-ttl", max_ttl)
 866         else O_DEC(opt, "cache-max-negative-ttl", max_negative_ttl)
 867         else O_DEC(opt, "cache-min-ttl", min_ttl)
 868         else O_DEC(opt, "infra-host-ttl", host_ttl)
 869         else O_DEC(opt, "infra-cache-slabs", infra_cache_slabs)
 870         else O_DEC(opt, "infra-cache-min-rtt", infra_cache_min_rtt)
 871         else O_MEM(opt, "infra-cache-numhosts", infra_cache_numhosts)
 872         else O_UNS(opt, "delay-close", delay_close)
 873         else O_YNO(opt, "do-ip4", do_ip4)
 874         else O_YNO(opt, "do-ip6", do_ip6)
 875         else O_YNO(opt, "do-udp", do_udp)
 876         else O_YNO(opt, "do-tcp", do_tcp)
 877         else O_YNO(opt, "tcp-upstream", tcp_upstream)
 878         else O_YNO(opt, "udp-upstream-without-downstream", udp_upstream_without_downstream)
 879         else O_DEC(opt, "tcp-mss", tcp_mss)
 880         else O_DEC(opt, "outgoing-tcp-mss", outgoing_tcp_mss)
 881         else O_YNO(opt, "ssl-upstream", ssl_upstream)
 882         else O_STR(opt, "ssl-service-key", ssl_service_key)
 883         else O_STR(opt, "ssl-service-pem", ssl_service_pem)
 884         else O_DEC(opt, "ssl-port", ssl_port)
 885         else O_STR(opt, "tls-cert-bundle", tls_cert_bundle)
 886         else O_YNO(opt, "tls-win-cert", tls_win_cert)
 887         else O_LST(opt, "tls-additional-port", tls_additional_port)
 888         else O_YNO(opt, "use-systemd", use_systemd)
 889         else O_YNO(opt, "do-daemonize", do_daemonize)
 890         else O_STR(opt, "chroot", chrootdir)
 891         else O_STR(opt, "username", username)
 892         else O_STR(opt, "directory", directory)
 893         else O_STR(opt, "logfile", logfile)
 894         else O_YNO(opt, "log-queries", log_queries)
 895         else O_YNO(opt, "log-replies", log_replies)
 896         else O_STR(opt, "pidfile", pidfile)
 897         else O_YNO(opt, "hide-identity", hide_identity)
 898         else O_YNO(opt, "hide-version", hide_version)
 899         else O_YNO(opt, "hide-trustanchor", hide_trustanchor)
 900         else O_STR(opt, "identity", identity)
 901         else O_STR(opt, "version", version)
 902         else O_STR(opt, "target-fetch-policy", target_fetch_policy)
 903         else O_YNO(opt, "harden-short-bufsize", harden_short_bufsize)
 904         else O_YNO(opt, "harden-large-queries", harden_large_queries)
 905         else O_YNO(opt, "harden-glue", harden_glue)
 906         else O_YNO(opt, "harden-dnssec-stripped", harden_dnssec_stripped)
 907         else O_YNO(opt, "harden-below-nxdomain", harden_below_nxdomain)
 908         else O_YNO(opt, "harden-referral-path", harden_referral_path)
 909         else O_YNO(opt, "harden-algo-downgrade", harden_algo_downgrade)
 910         else O_YNO(opt, "use-caps-for-id", use_caps_bits_for_id)
 911         else O_LST(opt, "caps-whitelist", caps_whitelist)
 912         else O_DEC(opt, "unwanted-reply-threshold", unwanted_threshold)
 913         else O_YNO(opt, "do-not-query-localhost", donotquery_localhost)
 914         else O_STR(opt, "module-config", module_conf)
 915         else O_STR(opt, "dlv-anchor-file", dlv_anchor_file)
 916         else O_DEC(opt, "val-bogus-ttl", bogus_ttl)
 917         else O_YNO(opt, "val-clean-additional", val_clean_additional)
 918         else O_DEC(opt, "val-log-level", val_log_level)
 919         else O_YNO(opt, "val-permissive-mode", val_permissive_mode)
 920         else O_YNO(opt, "aggressive-nsec", aggressive_nsec)
 921         else O_YNO(opt, "ignore-cd-flag", ignore_cd)
 922         else O_YNO(opt, "serve-expired", serve_expired)
 923         else O_STR(opt, "val-nsec3-keysize-iterations",val_nsec3_key_iterations)
 924         else O_UNS(opt, "add-holddown", add_holddown)
 925         else O_UNS(opt, "del-holddown", del_holddown)
 926         else O_UNS(opt, "keep-missing", keep_missing)
 927         else O_YNO(opt, "permit-small-holddown", permit_small_holddown)
 928         else O_MEM(opt, "key-cache-size", key_cache_size)
 929         else O_DEC(opt, "key-cache-slabs", key_cache_slabs)
 930         else O_MEM(opt, "neg-cache-size", neg_cache_size)
 931         else O_YNO(opt, "control-enable", remote_control_enable)
 932         else O_DEC(opt, "control-port", control_port)
 933         else O_STR(opt, "server-key-file", server_key_file)
 934         else O_STR(opt, "server-cert-file", server_cert_file)
 935         else O_STR(opt, "control-key-file", control_key_file)
 936         else O_STR(opt, "control-cert-file", control_cert_file)
 937         else O_LST(opt, "root-hints", root_hints)
 938         else O_LS2(opt, "access-control", acls)
 939         else O_LST(opt, "do-not-query-address", donotqueryaddrs)
 940         else O_LST(opt, "private-address", private_address)
 941         else O_LST(opt, "private-domain", private_domain)
 942         else O_LST(opt, "auto-trust-anchor-file", auto_trust_anchor_file_list)
 943         else O_LST(opt, "trust-anchor-file", trust_anchor_file_list)
 944         else O_LST(opt, "trust-anchor", trust_anchor_list)
 945         else O_LST(opt, "trusted-keys-file", trusted_keys_file_list)
 946         else O_YNO(opt, "trust-anchor-signaling", trust_anchor_signaling)
 947         else O_YNO(opt, "root-key-sentinel", root_key_sentinel)
 948         else O_LST(opt, "dlv-anchor", dlv_anchor_list)
 949         else O_LST(opt, "control-interface", control_ifs.first)
 950         else O_LST(opt, "domain-insecure", domain_insecure)
 951         else O_UNS(opt, "val-override-date", val_date_override)
 952         else O_YNO(opt, "minimal-responses", minimal_responses)
 953         else O_YNO(opt, "rrset-roundrobin", rrset_roundrobin)
 954 #ifdef CLIENT_SUBNET
 955         else O_LST(opt, "send-client-subnet", client_subnet)
 956         else O_LST(opt, "client-subnet-zone", client_subnet_zone)
 957         else O_DEC(opt, "max-client-subnet-ipv4", max_client_subnet_ipv4)
 958         else O_DEC(opt, "max-client-subnet-ipv6", max_client_subnet_ipv6)
 959         else O_YNO(opt, "client-subnet-always-forward:",
 960                 client_subnet_always_forward)
 961 #endif
 962 #ifdef USE_DNSTAP
 963         else O_YNO(opt, "dnstap-enable", dnstap)
 964         else O_STR(opt, "dnstap-socket-path", dnstap_socket_path)
 965         else O_YNO(opt, "dnstap-send-identity", dnstap_send_identity)
 966         else O_YNO(opt, "dnstap-send-version", dnstap_send_version)
 967         else O_STR(opt, "dnstap-identity", dnstap_identity)
 968         else O_STR(opt, "dnstap-version", dnstap_version)
 969         else O_YNO(opt, "dnstap-log-resolver-query-messages",
 970                 dnstap_log_resolver_query_messages)
 971         else O_YNO(opt, "dnstap-log-resolver-response-messages",
 972                 dnstap_log_resolver_response_messages)
 973         else O_YNO(opt, "dnstap-log-client-query-messages",
 974                 dnstap_log_client_query_messages)
 975         else O_YNO(opt, "dnstap-log-client-response-messages",
 976                 dnstap_log_client_response_messages)
 977         else O_YNO(opt, "dnstap-log-forwarder-query-messages",
 978                 dnstap_log_forwarder_query_messages)
 979         else O_YNO(opt, "dnstap-log-forwarder-response-messages",
 980                 dnstap_log_forwarder_response_messages)
 981 #endif
 982 #ifdef USE_DNSCRYPT
 983         else O_YNO(opt, "dnscrypt-enable", dnscrypt)
 984         else O_DEC(opt, "dnscrypt-port", dnscrypt_port)
 985         else O_STR(opt, "dnscrypt-provider", dnscrypt_provider)
 986         else O_LST(opt, "dnscrypt-provider-cert", dnscrypt_provider_cert)
 987         else O_LST(opt, "dnscrypt-provider-cert-rotated", dnscrypt_provider_cert_rotated)
 988         else O_LST(opt, "dnscrypt-secret-key", dnscrypt_secret_key)
 989         else O_MEM(opt, "dnscrypt-shared-secret-cache-size",
 990                 dnscrypt_shared_secret_cache_size)
 991         else O_DEC(opt, "dnscrypt-shared-secret-cache-slabs",
 992                 dnscrypt_shared_secret_cache_slabs)
 993         else O_MEM(opt, "dnscrypt-nonce-cache-size",
 994                 dnscrypt_nonce_cache_size)
 995         else O_DEC(opt, "dnscrypt-nonce-cache-slabs",
 996                 dnscrypt_nonce_cache_slabs)
 997 #endif
 998         else O_YNO(opt, "unblock-lan-zones", unblock_lan_zones)
 999         else O_YNO(opt, "insecure-lan-zones", insecure_lan_zones)
1000         else O_DEC(opt, "max-udp-size", max_udp_size)
1001         else O_STR(opt, "python-script", python_script)
1002         else O_YNO(opt, "disable-dnssec-lame-check", disable_dnssec_lame_check)
1003         else O_DEC(opt, "ip-ratelimit", ip_ratelimit)
1004         else O_DEC(opt, "ratelimit", ratelimit)
1005         else O_MEM(opt, "ip-ratelimit-size", ip_ratelimit_size)
1006         else O_MEM(opt, "ratelimit-size", ratelimit_size)
1007         else O_DEC(opt, "ip-ratelimit-slabs", ip_ratelimit_slabs)
1008         else O_DEC(opt, "ratelimit-slabs", ratelimit_slabs)
1009         else O_LS2(opt, "ratelimit-for-domain", ratelimit_for_domain)
1010         else O_LS2(opt, "ratelimit-below-domain", ratelimit_below_domain)
1011         else O_DEC(opt, "ip-ratelimit-factor", ip_ratelimit_factor)
1012         else O_DEC(opt, "ratelimit-factor", ratelimit_factor)
1013         else O_DEC(opt, "low-rtt", low_rtt)
1014         else O_DEC(opt, "low-rtt-pct", low_rtt_permil)
1015         else O_DEC(opt, "low-rtt-permil", low_rtt_permil)
1016         else O_DEC(opt, "val-sig-skew-min", val_sig_skew_min)
1017         else O_DEC(opt, "val-sig-skew-max", val_sig_skew_max)
1018         else O_YNO(opt, "qname-minimisation", qname_minimisation)
1019         else O_YNO(opt, "qname-minimisation-strict", qname_minimisation_strict)
1020         else O_IFC(opt, "define-tag", num_tags, tagname)
1021         else O_LTG(opt, "local-zone-tag", local_zone_tags)
1022         else O_LTG(opt, "access-control-tag", acl_tags)
1023         else O_LTG(opt, "response-ip-tag", respip_tags)
1024         else O_LS3(opt, "local-zone-override", local_zone_overrides)
1025         else O_LS3(opt, "access-control-tag-action", acl_tag_actions)
1026         else O_LS3(opt, "access-control-tag-data", acl_tag_datas)
1027         else O_LS2(opt, "access-control-view", acl_view)
1028 #ifdef USE_IPSECMOD
1029         else O_YNO(opt, "ipsecmod-enabled", ipsecmod_enabled)
1030         else O_YNO(opt, "ipsecmod-ignore-bogus", ipsecmod_ignore_bogus)
1031         else O_STR(opt, "ipsecmod-hook", ipsecmod_hook)
1032         else O_DEC(opt, "ipsecmod-max-ttl", ipsecmod_max_ttl)
1033         else O_LST(opt, "ipsecmod-whitelist", ipsecmod_whitelist)
1034         else O_YNO(opt, "ipsecmod-strict", ipsecmod_strict)
1035 #endif
1036 #ifdef USE_CACHEDB
1037         else O_STR(opt, "backend", cachedb_backend)
1038         else O_STR(opt, "secret-seed", cachedb_secret)
1039 #endif
1040         /* not here:
1041          * outgoing-permit, outgoing-avoid - have list of ports
1042          * local-zone - zones and nodefault variables
1043          * local-data - see below
1044          * local-data-ptr - converted to local-data entries
1045          * stub-zone, name, stub-addr, stub-host, stub-prime
1046          * forward-zone, name, forward-addr, forward-host
1047          */
1048         else return 0;
1049         return 1;
1050 }
1051
1052 /** initialize the global cfg_parser object */
1053 static void
1054 create_cfg_parser(struct config_file* cfg, char* filename, const char* chroot)
1055 {
1056         static struct config_parser_state st;
1057         cfg_parser = &st;
1058         cfg_parser->filename = filename;
1059         cfg_parser->line = 1;
1060         cfg_parser->errors = 0;
1061         cfg_parser->cfg = cfg;
1062         cfg_parser->chroot = chroot;
1063         init_cfg_parse();
1064 }
1065
1066 int
1067 config_read(struct config_file* cfg, const char* filename, const char* chroot)
1068 {
1069         FILE *in;
1070         char *fname = (char*)filename;
1071 #ifdef HAVE_GLOB
1072         glob_t g;
1073         size_t i;
1074         int r, flags;
1075 #endif
1076         if(!fname)
1077                 return 1;
1078
1079         /* check for wildcards */
1080 #ifdef HAVE_GLOB
1081         if(!(!strchr(fname, '*') && !strchr(fname, '?') && !strchr(fname, '[') &&
1082                 !strchr(fname, '{') && !strchr(fname, '~'))) {
1083                 verbose(VERB_QUERY, "wildcard found, processing %s", fname);
1084                 flags = 0
1085 #ifdef GLOB_ERR
1086                         | GLOB_ERR
1087 #endif
1088 #ifdef GLOB_NOSORT
1089                         | GLOB_NOSORT
1090 #endif
1091 #ifdef GLOB_BRACE
1092                         | GLOB_BRACE
1093 #endif
1094 #ifdef GLOB_TILDE
1095                         | GLOB_TILDE
1096 #endif
1097                 ;
1098                 memset(&g, 0, sizeof(g));
1099                 r = glob(fname, flags, NULL, &g);
1100                 if(r) {
1101                         /* some error */
1102                         globfree(&g);
1103                         if(r == GLOB_NOMATCH) {
1104                                 verbose(VERB_QUERY, "include: "
1105                                 "no matches for %s", fname);
1106                                 return 1;
1107                         } else if(r == GLOB_NOSPACE) {
1108                                 log_err("include: %s: "
1109                                         "fnametern out of memory", fname);
1110                         } else if(r == GLOB_ABORTED) {
1111                                 log_err("wildcard include: %s: expansion "
1112                                         "aborted (%s)", fname, strerror(errno));
1113                         } else {
1114                                 log_err("wildcard include: %s: expansion "
1115                                         "failed (%s)", fname, strerror(errno));
1116                         }
1117                         /* ignore globs that yield no files */
1118                         return 1;
1119                 }
1120                 /* process files found, if any */
1121                 for(i=0; i<(size_t)g.gl_pathc; i++) {
1122                         if(!config_read(cfg, g.gl_pathv[i], chroot)) {
1123                                 log_err("error reading wildcard "
1124                                         "include: %s", g.gl_pathv[i]);
1125                                 globfree(&g);
1126                                 return 0;
1127                         }
1128                 }
1129                 globfree(&g);
1130                 return 1;
1131         }
1132 #endif /* HAVE_GLOB */
1133
1134         in = fopen(fname, "r");
1135         if(!in) {
1136                 log_err("Could not open %s: %s", fname, strerror(errno));
1137                 return 0;
1138         }
1139         create_cfg_parser(cfg, fname, chroot);
1140         ub_c_in = in;
1141         ub_c_parse();
1142         fclose(in);
1143
1144         if(!cfg->dnscrypt) cfg->dnscrypt_port = 0;
1145
1146         if(cfg_parser->errors != 0) {
1147                 fprintf(stderr, "read %s failed: %d errors in configuration file\n",
1148                         fname, cfg_parser->errors);
1149                 errno=EINVAL;
1150                 return 0;
1151         }
1152
1153         return 1;
1154 }
1155
1156 struct config_stub* cfg_stub_find(struct config_stub*** pp, const char* nm)
1157 {
1158         struct config_stub* p = *(*pp);
1159         while(p) {
1160                 if(strcmp(p->name, nm) == 0)
1161                         return p;
1162                 (*pp) = &p->next;
1163                 p = p->next;
1164         }
1165         return NULL;
1166 }
1167
1168 void
1169 config_delstrlist(struct config_strlist* p)
1170 {
1171         struct config_strlist *np;
1172         while(p) {
1173                 np = p->next;
1174                 free(p->str);
1175                 free(p);
1176                 p = np;
1177         }
1178 }
1179
1180 void
1181 config_deldblstrlist(struct config_str2list* p)
1182 {
1183         struct config_str2list *np;
1184         while(p) {
1185                 np = p->next;
1186                 free(p->str);
1187                 free(p->str2);
1188                 free(p);
1189                 p = np;
1190         }
1191 }
1192
1193 void
1194 config_deltrplstrlist(struct config_str3list* p)
1195 {
1196         struct config_str3list *np;
1197         while(p) {
1198                 np = p->next;
1199                 free(p->str);
1200                 free(p->str2);
1201                 free(p->str3);
1202                 free(p);
1203                 p = np;
1204         }
1205 }
1206
1207 void
1208 config_delauth(struct config_auth* p)
1209 {
1210         if(!p) return;
1211         free(p->name);
1212         config_delstrlist(p->masters);
1213         config_delstrlist(p->urls);
1214         config_delstrlist(p->allow_notify);
1215         free(p->zonefile);
1216         free(p);
1217 }
1218
1219 void
1220 config_delauths(struct config_auth* p)
1221 {
1222         struct config_auth* np;
1223         while(p) {
1224                 np = p->next;
1225                 config_delauth(p);
1226                 p = np;
1227         }
1228 }
1229
1230 void
1231 config_delstub(struct config_stub* p)
1232 {
1233         if(!p) return;
1234         free(p->name);
1235         config_delstrlist(p->hosts);
1236         config_delstrlist(p->addrs);
1237         free(p);
1238 }
1239
1240 void
1241 config_delstubs(struct config_stub* p)
1242 {
1243         struct config_stub* np;
1244         while(p) {
1245                 np = p->next;
1246                 config_delstub(p);
1247                 p = np;
1248         }
1249 }
1250
1251 void
1252 config_delview(struct config_view* p)
1253 {
1254         if(!p) return;
1255         free(p->name);
1256         config_deldblstrlist(p->local_zones);
1257         config_delstrlist(p->local_zones_nodefault);
1258         config_delstrlist(p->local_data);
1259         free(p);
1260 }
1261
1262 void
1263 config_delviews(struct config_view* p)
1264 {
1265         struct config_view* np;
1266         while(p) {
1267                 np = p->next;
1268                 config_delview(p);
1269                 p = np;
1270         }
1271 }
1272 /** delete string array */
1273 static void
1274 config_del_strarray(char** array, int num)
1275 {
1276         int i;
1277         if(!array)
1278                 return;
1279         for(i=0; i<num; i++) {
1280                 free(array[i]);
1281         }
1282         free(array);
1283 }
1284
1285 void
1286 config_del_strbytelist(struct config_strbytelist* p)
1287 {
1288         struct config_strbytelist* np;
1289         while(p) {
1290                 np = p->next;
1291                 free(p->str);
1292                 free(p->str2);
1293                 free(p);
1294                 p = np;
1295         }
1296 }
1297
1298 void
1299 config_delete(struct config_file* cfg)
1300 {
1301         if(!cfg) return;
1302         free(cfg->username);
1303         free(cfg->chrootdir);
1304         free(cfg->directory);
1305         free(cfg->logfile);
1306         free(cfg->pidfile);
1307         free(cfg->target_fetch_policy);
1308         free(cfg->ssl_service_key);
1309         free(cfg->ssl_service_pem);
1310         free(cfg->tls_cert_bundle);
1311         config_delstrlist(cfg->tls_additional_port);
1312         free(cfg->log_identity);
1313         config_del_strarray(cfg->ifs, cfg->num_ifs);
1314         config_del_strarray(cfg->out_ifs, cfg->num_out_ifs);
1315         config_delstubs(cfg->stubs);
1316         config_delstubs(cfg->forwards);
1317         config_delauths(cfg->auths);
1318         config_delviews(cfg->views);
1319         config_delstrlist(cfg->donotqueryaddrs);
1320         config_delstrlist(cfg->root_hints);
1321 #ifdef CLIENT_SUBNET
1322         config_delstrlist(cfg->client_subnet);
1323         config_delstrlist(cfg->client_subnet_zone);
1324 #endif
1325         free(cfg->identity);
1326         free(cfg->version);
1327         free(cfg->module_conf);
1328         free(cfg->outgoing_avail_ports);
1329         free(cfg->python_script);
1330         config_delstrlist(cfg->caps_whitelist);
1331         config_delstrlist(cfg->private_address);
1332         config_delstrlist(cfg->private_domain);
1333         config_delstrlist(cfg->auto_trust_anchor_file_list);
1334         config_delstrlist(cfg->trust_anchor_file_list);
1335         config_delstrlist(cfg->trusted_keys_file_list);
1336         config_delstrlist(cfg->trust_anchor_list);
1337         config_delstrlist(cfg->domain_insecure);
1338         free(cfg->dlv_anchor_file);
1339         config_delstrlist(cfg->dlv_anchor_list);
1340         config_deldblstrlist(cfg->acls);
1341         free(cfg->val_nsec3_key_iterations);
1342         config_deldblstrlist(cfg->local_zones);
1343         config_delstrlist(cfg->local_zones_nodefault);
1344         config_delstrlist(cfg->local_data);
1345         config_deltrplstrlist(cfg->local_zone_overrides);
1346         config_del_strarray(cfg->tagname, cfg->num_tags);
1347         config_del_strbytelist(cfg->local_zone_tags);
1348         config_del_strbytelist(cfg->acl_tags);
1349         config_del_strbytelist(cfg->respip_tags);
1350         config_deltrplstrlist(cfg->acl_tag_actions);
1351         config_deltrplstrlist(cfg->acl_tag_datas);
1352         config_delstrlist(cfg->control_ifs.first);
1353         free(cfg->server_key_file);
1354         free(cfg->server_cert_file);
1355         free(cfg->control_key_file);
1356         free(cfg->control_cert_file);
1357         free(cfg->dns64_prefix);
1358         free(cfg->dnstap_socket_path);
1359         free(cfg->dnstap_identity);
1360         free(cfg->dnstap_version);
1361         config_deldblstrlist(cfg->ratelimit_for_domain);
1362         config_deldblstrlist(cfg->ratelimit_below_domain);
1363 #ifdef USE_IPSECMOD
1364         free(cfg->ipsecmod_hook);
1365         config_delstrlist(cfg->ipsecmod_whitelist);
1366 #endif
1367 #ifdef USE_CACHEDB
1368         free(cfg->cachedb_backend);
1369         free(cfg->cachedb_secret);
1370 #endif
1371         free(cfg);
1372 }
1373
1374 static void
1375 init_outgoing_availports(int* a, int num)
1376 {
1377         /* generated with make iana_update */
1378         const int iana_assigned[] = {
1379 #include "util/iana_ports.inc"
1380                 -1 }; /* end marker to put behind trailing comma */
1381
1382         int i;
1383         /* do not use <1024, that could be trouble with the system, privs */
1384         for(i=1024; i<num; i++) {
1385                 a[i] = i;
1386         }
1387         /* create empty spot at 49152 to keep ephemeral ports available
1388          * to other programs */
1389         for(i=49152; i<49152+256; i++)
1390                 a[i] = 0;
1391         /* pick out all the IANA assigned ports */
1392         for(i=0; iana_assigned[i]!=-1; i++) {
1393                 if(iana_assigned[i] < num)
1394                         a[iana_assigned[i]] = 0;
1395         }
1396 }
1397
1398 int
1399 cfg_mark_ports(const char* str, int allow, int* avail, int num)
1400 {
1401         char* mid = strchr(str, '-');
1402         if(!mid) {
1403                 int port = atoi(str);
1404                 if(port == 0 && strcmp(str, "0") != 0) {
1405                         log_err("cannot parse port number '%s'", str);
1406                         return 0;
1407                 }
1408                 if(port < num)
1409                         avail[port] = (allow?port:0);
1410         } else {
1411                 int i, low, high = atoi(mid+1);
1412                 char buf[16];
1413                 if(high == 0 && strcmp(mid+1, "0") != 0) {
1414                         log_err("cannot parse port number '%s'", mid+1);
1415                         return 0;
1416                 }
1417                 if( (int)(mid-str)+1 >= (int)sizeof(buf) ) {
1418                         log_err("cannot parse port number '%s'", str);
1419                         return 0;
1420                 }
1421                 if(mid > str)
1422                         memcpy(buf, str, (size_t)(mid-str));
1423                 buf[mid-str] = 0;
1424                 low = atoi(buf);
1425                 if(low == 0 && strcmp(buf, "0") != 0) {
1426                         log_err("cannot parse port number '%s'", buf);
1427                         return 0;
1428                 }
1429                 for(i=low; i<=high; i++) {
1430                         if(i < num)
1431                                 avail[i] = (allow?i:0);
1432                 }
1433                 return 1;
1434         }
1435         return 1;
1436 }
1437
1438 int
1439 cfg_scan_ports(int* avail, int num)
1440 {
1441         int i;
1442         int count = 0;
1443         for(i=0; i<num; i++) {
1444                 if(avail[i])
1445                         count++;
1446         }
1447         return count;
1448 }
1449
1450 int cfg_condense_ports(struct config_file* cfg, int** avail)
1451 {
1452         int num = cfg_scan_ports(cfg->outgoing_avail_ports, 65536);
1453         int i, at = 0;
1454         *avail = NULL;
1455         if(num == 0)
1456                 return 0;
1457         *avail = (int*)reallocarray(NULL, (size_t)num, sizeof(int));
1458         if(!*avail)
1459                 return 0;
1460         for(i=0; i<65536; i++) {
1461                 if(cfg->outgoing_avail_ports[i])
1462                         (*avail)[at++] = cfg->outgoing_avail_ports[i];
1463         }
1464         log_assert(at == num);
1465         return num;
1466 }
1467
1468 /** print error with file and line number */
1469 static void ub_c_error_va_list(const char *fmt, va_list args)
1470 {
1471         cfg_parser->errors++;
1472         fprintf(stderr, "%s:%d: error: ", cfg_parser->filename,
1473         cfg_parser->line);
1474         vfprintf(stderr, fmt, args);
1475         fprintf(stderr, "\n");
1476 }
1477
1478 /** print error with file and line number */
1479 void ub_c_error_msg(const char* fmt, ...)
1480 {
1481         va_list args;
1482         va_start(args, fmt);
1483         ub_c_error_va_list(fmt, args);
1484         va_end(args);
1485 }
1486
1487 void ub_c_error(const char *str)
1488 {
1489         cfg_parser->errors++;
1490         fprintf(stderr, "%s:%d: error: %s\n", cfg_parser->filename,
1491                 cfg_parser->line, str);
1492 }
1493
1494 int ub_c_wrap(void)
1495 {
1496         return 1;
1497 }
1498
1499 int cfg_strlist_append(struct config_strlist_head* list, char* item)
1500 {
1501         struct config_strlist *s;
1502         if(!item || !list)
1503                 return 0;
1504         s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist));
1505         if(!s)
1506                 return 0;
1507         s->str = item;
1508         s->next = NULL;
1509         if(list->last)
1510                 list->last->next = s;
1511         else
1512                 list->first = s;
1513         list->last = s;
1514         return 1;
1515 }
1516
1517 int
1518 cfg_region_strlist_insert(struct regional* region,
1519         struct config_strlist** head, char* item)
1520 {
1521         struct config_strlist *s;
1522         if(!item || !head)
1523                 return 0;
1524         s = (struct config_strlist*)regional_alloc_zero(region,
1525                 sizeof(struct config_strlist));
1526         if(!s)
1527                 return 0;
1528         s->str = item;
1529         s->next = *head;
1530         *head = s;
1531         return 1;
1532 }
1533
1534 struct config_strlist*
1535 cfg_strlist_find(struct config_strlist* head, const char *item)
1536 {
1537         struct config_strlist *s = head;
1538         if(!head){
1539                 return NULL;
1540         }
1541         while(s) {
1542                 if(strcmp(s->str, item) == 0) {
1543                         return s;
1544                 }
1545                 s = s->next;
1546         }
1547         return NULL;
1548 }
1549
1550 int
1551 cfg_strlist_insert(struct config_strlist** head, char* item)
1552 {
1553         struct config_strlist *s;
1554         if(!item || !head)
1555                 return 0;
1556         s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist));
1557         if(!s)
1558                 return 0;
1559         s->str = item;
1560         s->next = *head;
1561         *head = s;
1562         return 1;
1563 }
1564
1565 int
1566 cfg_str2list_insert(struct config_str2list** head, char* item, char* i2)
1567 {
1568         struct config_str2list *s;
1569         if(!item || !i2 || !head)
1570                 return 0;
1571         s = (struct config_str2list*)calloc(1, sizeof(struct config_str2list));
1572         if(!s)
1573                 return 0;
1574         s->str = item;
1575         s->str2 = i2;
1576         s->next = *head;
1577         *head = s;
1578         return 1;
1579 }
1580
1581 int
1582 cfg_str3list_insert(struct config_str3list** head, char* item, char* i2,
1583         char* i3)
1584 {
1585         struct config_str3list *s;
1586         if(!item || !i2 || !i3 || !head)
1587                 return 0;
1588         s = (struct config_str3list*)calloc(1, sizeof(struct config_str3list));
1589         if(!s)
1590                 return 0;
1591         s->str = item;
1592         s->str2 = i2;
1593         s->str3 = i3;
1594         s->next = *head;
1595         *head = s;
1596         return 1;
1597 }
1598
1599 int
1600 cfg_strbytelist_insert(struct config_strbytelist** head, char* item,
1601         uint8_t* i2, size_t i2len)
1602 {
1603         struct config_strbytelist* s;
1604         if(!item || !i2 || !head)
1605                 return 0;
1606         s = (struct config_strbytelist*)calloc(1, sizeof(*s));
1607         if(!s)
1608                 return 0;
1609         s->str = item;
1610         s->str2 = i2;
1611         s->str2len = i2len;
1612         s->next = *head;
1613         *head = s;
1614         return 1;
1615 }
1616
1617 time_t
1618 cfg_convert_timeval(const char* str)
1619 {
1620         time_t t;
1621         struct tm tm;
1622         memset(&tm, 0, sizeof(tm));
1623         if(strlen(str) < 14)
1624                 return 0;
1625         if(sscanf(str, "%4d%2d%2d%2d%2d%2d", &tm.tm_year, &tm.tm_mon,
1626                 &tm.tm_mday, &tm.tm_hour, &tm.tm_min, &tm.tm_sec) != 6)
1627                 return 0;
1628         tm.tm_year -= 1900;
1629         tm.tm_mon--;
1630         /* Check values */
1631         if (tm.tm_year < 70)    return 0;
1632         if (tm.tm_mon < 0 || tm.tm_mon > 11)    return 0;
1633         if (tm.tm_mday < 1 || tm.tm_mday > 31)  return 0;
1634         if (tm.tm_hour < 0 || tm.tm_hour > 23)  return 0;
1635         if (tm.tm_min < 0 || tm.tm_min > 59)    return 0;
1636         if (tm.tm_sec < 0 || tm.tm_sec > 59)    return 0;
1637         /* call ldns conversion function */
1638         t = sldns_mktime_from_utc(&tm);
1639         return t;
1640 }
1641
1642 int
1643 cfg_count_numbers(const char* s)
1644 {
1645         /* format ::= (sp num)+ sp  */
1646         /* num ::= [-](0-9)+        */
1647         /* sp ::= (space|tab)*      */
1648         int num = 0;
1649         while(*s) {
1650                 while(*s && isspace((unsigned char)*s))
1651                         s++;
1652                 if(!*s) /* end of string */
1653                         break;
1654                 if(*s == '-')
1655                         s++;
1656                 if(!*s) /* only - not allowed */
1657                         return 0;
1658                 if(!isdigit((unsigned char)*s)) /* bad character */
1659                         return 0;
1660                 while(*s && isdigit((unsigned char)*s))
1661                         s++;
1662                 num++;
1663         }
1664         return num;
1665 }
1666
1667 /** all digit number */
1668 static int isalldigit(const char* str, size_t l)
1669 {
1670         size_t i;
1671         for(i=0; i<l; i++)
1672                 if(!isdigit((unsigned char)str[i]))
1673                         return 0;
1674         return 1;
1675 }
1676
1677 int
1678 cfg_parse_memsize(const char* str, size_t* res)
1679 {
1680         size_t len;
1681         size_t mult = 1;
1682         if(!str || (len=(size_t)strlen(str)) == 0) {
1683                 log_err("not a size: '%s'", str);
1684                 return 0;
1685         }
1686         if(isalldigit(str, len)) {
1687                 *res = (size_t)atol(str);
1688                 return 1;
1689         }
1690         /* check appended num */
1691         while(len>0 && str[len-1]==' ')
1692                 len--;
1693         if(len > 1 && str[len-1] == 'b')
1694                 len--;
1695         else if(len > 1 && str[len-1] == 'B')
1696                 len--;
1697
1698         if(len > 1 && tolower((unsigned char)str[len-1]) == 'g')
1699                 mult = 1024*1024*1024;
1700         else if(len > 1 && tolower((unsigned char)str[len-1]) == 'm')
1701                 mult = 1024*1024;
1702         else if(len > 1 && tolower((unsigned char)str[len-1]) == 'k')
1703                 mult = 1024;
1704         else if(len > 0 && isdigit((unsigned char)str[len-1]))
1705                 mult = 1;
1706         else {
1707                 log_err("unknown size specifier: '%s'", str);
1708                 return 0;
1709         }
1710         while(len>1 && str[len-2]==' ')
1711                 len--;
1712
1713         if(!isalldigit(str, len-1)) {
1714                 log_err("unknown size specifier: '%s'", str);
1715                 return 0;
1716         }
1717         *res = ((size_t)atol(str)) * mult;
1718         return 1;
1719 }
1720
1721 int
1722 find_tag_id(struct config_file* cfg, const char* tag)
1723 {
1724         int i;
1725         for(i=0; i<cfg->num_tags; i++) {
1726                 if(strcmp(cfg->tagname[i], tag) == 0)
1727                         return i;
1728         }
1729         return -1;
1730 }
1731
1732 int
1733 config_add_tag(struct config_file* cfg, const char* tag)
1734 {
1735         char** newarray;
1736         char* newtag;
1737         if(find_tag_id(cfg, tag) != -1)
1738                 return 1; /* nothing to do */
1739         newarray = (char**)malloc(sizeof(char*)*(cfg->num_tags+1));
1740         if(!newarray)
1741                 return 0;
1742         newtag = strdup(tag);
1743         if(!newtag) {
1744                 free(newarray);
1745                 return 0;
1746         }
1747         if(cfg->tagname) {
1748                 memcpy(newarray, cfg->tagname, sizeof(char*)*cfg->num_tags);
1749                 free(cfg->tagname);
1750         }
1751         newarray[cfg->num_tags++] = newtag;
1752         cfg->tagname = newarray;
1753         return 1;
1754 }
1755
1756 /** set a bit in a bit array */
1757 static void
1758 cfg_set_bit(uint8_t* bitlist, size_t len, int id)
1759 {
1760         int pos = id/8;
1761         log_assert((size_t)pos < len);
1762         (void)len;
1763         bitlist[pos] |= 1<<(id%8);
1764 }
1765
1766 uint8_t* config_parse_taglist(struct config_file* cfg, char* str,
1767         size_t* listlen)
1768 {
1769         uint8_t* taglist = NULL;
1770         size_t len = 0;
1771         char* p, *s;
1772
1773         /* allocate */
1774         if(cfg->num_tags == 0) {
1775                 log_err("parse taglist, but no tags defined");
1776                 return 0;
1777         }
1778         len = (size_t)(cfg->num_tags+7)/8;
1779         taglist = calloc(1, len);
1780         if(!taglist) {
1781                 log_err("out of memory");
1782                 return 0;
1783         }
1784
1785         /* parse */
1786         s = str;
1787         while((p=strsep(&s, " \t\n")) != NULL) {
1788                 if(*p) {
1789                         int id = find_tag_id(cfg, p);
1790                         /* set this bit in the bitlist */
1791                         if(id == -1) {
1792                                 log_err("unknown tag: %s", p);
1793                                 free(taglist);
1794                                 return 0;
1795                         }
1796                         cfg_set_bit(taglist, len, id);
1797                 }
1798         }
1799
1800         *listlen = len;
1801         return taglist;
1802 }
1803
1804 char* config_taglist2str(struct config_file* cfg, uint8_t* taglist,
1805         size_t taglen)
1806 {
1807         char buf[10240];
1808         size_t i, j, len = 0;
1809         buf[0] = 0;
1810         for(i=0; i<taglen; i++) {
1811                 if(taglist[i] == 0)
1812                         continue;
1813                 for(j=0; j<8; j++) {
1814                         if((taglist[i] & (1<<j)) != 0) {
1815                                 size_t id = i*8 + j;
1816                                 snprintf(buf+len, sizeof(buf)-len, "%s%s",
1817                                         (len==0?"":" "), cfg->tagname[id]);
1818                                 len += strlen(buf+len);
1819                         }
1820                 }
1821         }
1822         return strdup(buf);
1823 }
1824
1825 int taglist_intersect(uint8_t* list1, size_t list1len, uint8_t* list2,
1826         size_t list2len)
1827 {
1828         size_t i;
1829         if(!list1 || !list2)
1830                 return 0;
1831         for(i=0; i<list1len && i<list2len; i++) {
1832                 if((list1[i] & list2[i]) != 0)
1833                         return 1;
1834         }
1835         return 0;
1836 }
1837
1838 void
1839 config_apply(struct config_file* config)
1840 {
1841         MAX_TTL = (time_t)config->max_ttl;
1842         MIN_TTL = (time_t)config->min_ttl;
1843         MAX_NEG_TTL = (time_t)config->max_negative_ttl;
1844         RTT_MIN_TIMEOUT = config->infra_cache_min_rtt;
1845         EDNS_ADVERTISED_SIZE = (uint16_t)config->edns_buffer_size;
1846         MINIMAL_RESPONSES = config->minimal_responses;
1847         RRSET_ROUNDROBIN = config->rrset_roundrobin;
1848         log_set_time_asc(config->log_time_ascii);
1849         autr_permit_small_holddown = config->permit_small_holddown;
1850 }
1851
1852 void config_lookup_uid(struct config_file* cfg)
1853 {
1854 #ifdef HAVE_GETPWNAM
1855         /* translate username into uid and gid */
1856         if(cfg->username && cfg->username[0]) {
1857                 struct passwd *pwd;
1858                 if((pwd = getpwnam(cfg->username)) != NULL) {
1859                         cfg_uid = pwd->pw_uid;
1860                         cfg_gid = pwd->pw_gid;
1861                 }
1862         }
1863 #else
1864         (void)cfg;
1865 #endif
1866 }
1867
1868 /**
1869  * Calculate string length of full pathname in original filesys
1870  * @param fname: the path name to convert.
1871  *      Must not be null or empty.
1872  * @param cfg: config struct for chroot and chdir (if set).
1873  * @param use_chdir: if false, only chroot is applied.
1874  * @return length of string.
1875  *      remember to allocate one more for 0 at end in mallocs.
1876  */
1877 static size_t
1878 strlen_after_chroot(const char* fname, struct config_file* cfg, int use_chdir)
1879 {
1880         size_t len = 0;
1881         int slashit = 0;
1882         if(cfg->chrootdir && cfg->chrootdir[0] &&
1883                 strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) {
1884                 /* already full pathname, return it */
1885                 return strlen(fname);
1886         }
1887         /* chroot */
1888         if(cfg->chrootdir && cfg->chrootdir[0]) {
1889                 /* start with chrootdir */
1890                 len += strlen(cfg->chrootdir);
1891                 slashit = 1;
1892         }
1893         /* chdir */
1894 #ifdef UB_ON_WINDOWS
1895         if(fname[0] != 0 && fname[1] == ':') {
1896                 /* full path, no chdir */
1897         } else
1898 #endif
1899         if(fname[0] == '/' || !use_chdir) {
1900                 /* full path, no chdir */
1901         } else if(cfg->directory && cfg->directory[0]) {
1902                 /* prepend chdir */
1903                 if(slashit && cfg->directory[0] != '/')
1904                         len++;
1905                 if(cfg->chrootdir && cfg->chrootdir[0] &&
1906                         strncmp(cfg->chrootdir, cfg->directory,
1907                         strlen(cfg->chrootdir)) == 0)
1908                         len += strlen(cfg->directory)-strlen(cfg->chrootdir);
1909                 else    len += strlen(cfg->directory);
1910                 slashit = 1;
1911         }
1912         /* fname */
1913         if(slashit && fname[0] != '/')
1914                 len++;
1915         len += strlen(fname);
1916         return len;
1917 }
1918
1919 char*
1920 fname_after_chroot(const char* fname, struct config_file* cfg, int use_chdir)
1921 {
1922         size_t len = strlen_after_chroot(fname, cfg, use_chdir)+1;
1923         int slashit = 0;
1924         char* buf = (char*)malloc(len);
1925         if(!buf)
1926                 return NULL;
1927         buf[0] = 0;
1928         /* is fname already in chroot ? */
1929         if(cfg->chrootdir && cfg->chrootdir[0] &&
1930                 strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) {
1931                 /* already full pathname, return it */
1932                 (void)strlcpy(buf, fname, len);
1933                 buf[len-1] = 0;
1934                 return buf;
1935         }
1936         /* chroot */
1937         if(cfg->chrootdir && cfg->chrootdir[0]) {
1938                 /* start with chrootdir */
1939                 (void)strlcpy(buf, cfg->chrootdir, len);
1940                 slashit = 1;
1941         }
1942 #ifdef UB_ON_WINDOWS
1943         if(fname[0] != 0 && fname[1] == ':') {
1944                 /* full path, no chdir */
1945         } else
1946 #endif
1947         /* chdir */
1948         if(fname[0] == '/' || !use_chdir) {
1949                 /* full path, no chdir */
1950         } else if(cfg->directory && cfg->directory[0]) {
1951                 /* prepend chdir */
1952                 if(slashit && cfg->directory[0] != '/')
1953                         (void)strlcat(buf, "/", len);
1954                 /* is the directory already in the chroot? */
1955                 if(cfg->chrootdir && cfg->chrootdir[0] &&
1956                         strncmp(cfg->chrootdir, cfg->directory,
1957                         strlen(cfg->chrootdir)) == 0)
1958                         (void)strlcat(buf, cfg->directory+strlen(cfg->chrootdir),
1959                                    len);
1960                 else (void)strlcat(buf, cfg->directory, len);
1961                 slashit = 1;
1962         }
1963         /* fname */
1964         if(slashit && fname[0] != '/')
1965                 (void)strlcat(buf, "/", len);
1966         (void)strlcat(buf, fname, len);
1967         buf[len-1] = 0;
1968         return buf;
1969 }
1970
1971 /** return next space character in string */
1972 static char* next_space_pos(const char* str)
1973 {
1974         char* sp = strchr(str, ' ');
1975         char* tab = strchr(str, '\t');
1976         if(!tab && !sp)
1977                 return NULL;
1978         if(!sp) return tab;
1979         if(!tab) return sp;
1980         return (sp<tab)?sp:tab;
1981 }
1982
1983 /** return last space character in string */
1984 static char* last_space_pos(const char* str)
1985 {
1986         char* sp = strrchr(str, ' ');
1987         char* tab = strrchr(str, '\t');
1988         if(!tab && !sp)
1989                 return NULL;
1990         if(!sp) return tab;
1991         if(!tab) return sp;
1992         return (sp>tab)?sp:tab;
1993 }
1994
1995 int
1996 cfg_parse_local_zone(struct config_file* cfg, const char* val)
1997 {
1998         const char *type, *name_end, *name;
1999         char buf[256];
2000
2001         /* parse it as: [zone_name] [between stuff] [zone_type] */
2002         name = val;
2003         while(*name && isspace((unsigned char)*name))
2004                 name++;
2005         if(!*name) {
2006                 log_err("syntax error: too short: %s", val);
2007                 return 0;
2008         }
2009         name_end = next_space_pos(name);
2010         if(!name_end || !*name_end) {
2011                 log_err("syntax error: expected zone type: %s", val);
2012                 return 0;
2013         }
2014         if (name_end - name > 255) {
2015                 log_err("syntax error: bad zone name: %s", val);
2016                 return 0;
2017         }
2018         (void)strlcpy(buf, name, sizeof(buf));
2019         buf[name_end-name] = '\0';
2020
2021         type = last_space_pos(name_end);
2022         while(type && *type && isspace((unsigned char)*type))
2023                 type++;
2024         if(!type || !*type) {
2025                 log_err("syntax error: expected zone type: %s", val);
2026                 return 0;
2027         }
2028
2029         if(strcmp(type, "nodefault")==0) {
2030                 return cfg_strlist_insert(&cfg->local_zones_nodefault,
2031                         strdup(name));
2032         } else {
2033                 return cfg_str2list_insert(&cfg->local_zones, strdup(buf),
2034                         strdup(type));
2035         }
2036 }
2037
2038 char* cfg_ptr_reverse(char* str)
2039 {
2040         char* ip, *ip_end;
2041         char* name;
2042         char* result;
2043         char buf[1024];
2044         struct sockaddr_storage addr;
2045         socklen_t addrlen;
2046
2047         /* parse it as: [IP] [between stuff] [name] */
2048         ip = str;
2049         while(*ip && isspace((unsigned char)*ip))
2050                 ip++;
2051         if(!*ip) {
2052                 log_err("syntax error: too short: %s", str);
2053                 return NULL;
2054         }
2055         ip_end = next_space_pos(ip);
2056         if(!ip_end || !*ip_end) {
2057                 log_err("syntax error: expected name: %s", str);
2058                 return NULL;
2059         }
2060
2061         name = last_space_pos(ip_end);
2062         if(!name || !*name) {
2063                 log_err("syntax error: expected name: %s", str);
2064                 return NULL;
2065         }
2066
2067         sscanf(ip, "%100s", buf);
2068         buf[sizeof(buf)-1]=0;
2069
2070         if(!ipstrtoaddr(buf, UNBOUND_DNS_PORT, &addr, &addrlen)) {
2071                 log_err("syntax error: cannot parse address: %s", str);
2072                 return NULL;
2073         }
2074
2075         /* reverse IPv4:
2076          * ddd.ddd.ddd.ddd.in-addr-arpa.
2077          * IPv6: (h.){32}.ip6.arpa.  */
2078
2079         if(addr_is_ip6(&addr, addrlen)) {
2080                 uint8_t ad[16];
2081                 const char* hex = "0123456789abcdef";
2082                 char *p = buf;
2083                 int i;
2084                 memmove(ad, &((struct sockaddr_in6*)&addr)->sin6_addr,
2085                         sizeof(ad));
2086                 for(i=15; i>=0; i--) {
2087                         uint8_t b = ad[i];
2088                         *p++ = hex[ (b&0x0f) ];
2089                         *p++ = '.';
2090                         *p++ = hex[ (b&0xf0) >> 4 ];
2091                         *p++ = '.';
2092                 }
2093                 snprintf(buf+16*4, sizeof(buf)-16*4, "ip6.arpa. ");
2094         } else {
2095                 uint8_t ad[4];
2096                 memmove(ad, &((struct sockaddr_in*)&addr)->sin_addr,
2097                         sizeof(ad));
2098                 snprintf(buf, sizeof(buf), "%u.%u.%u.%u.in-addr.arpa. ",
2099                         (unsigned)ad[3], (unsigned)ad[2],
2100                         (unsigned)ad[1], (unsigned)ad[0]);
2101         }
2102
2103         /* printed the reverse address, now the between goop and name on end */
2104         while(*ip_end && isspace((unsigned char)*ip_end))
2105                 ip_end++;
2106         if(name>ip_end) {
2107                 snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), "%.*s",
2108                         (int)(name-ip_end), ip_end);
2109         }
2110         snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), " PTR %s", name);
2111
2112         result = strdup(buf);
2113         if(!result) {
2114                 log_err("out of memory parsing %s", str);
2115                 return NULL;
2116         }
2117         return result;
2118 }
2119
2120 #ifdef UB_ON_WINDOWS
2121 char*
2122 w_lookup_reg_str(const char* key, const char* name)
2123 {
2124         HKEY hk = NULL;
2125         DWORD type = 0;
2126         BYTE buf[1024];
2127         DWORD len = (DWORD)sizeof(buf);
2128         LONG ret;
2129         char* result = NULL;
2130         ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, key, 0, KEY_READ, &hk);
2131         if(ret == ERROR_FILE_NOT_FOUND)
2132                 return NULL; /* key does not exist */
2133         else if(ret != ERROR_SUCCESS) {
2134                 log_err("RegOpenKeyEx failed");
2135                 return NULL;
2136         }
2137         ret = RegQueryValueEx(hk, (LPCTSTR)name, 0, &type, buf, &len);
2138         if(RegCloseKey(hk))
2139                 log_err("RegCloseKey");
2140         if(ret == ERROR_FILE_NOT_FOUND)
2141                 return NULL; /* name does not exist */
2142         else if(ret != ERROR_SUCCESS) {
2143                 log_err("RegQueryValueEx failed");
2144                 return NULL;
2145         }
2146         if(type == REG_SZ || type == REG_MULTI_SZ || type == REG_EXPAND_SZ) {
2147                 buf[sizeof(buf)-1] = 0;
2148                 buf[sizeof(buf)-2] = 0; /* for multi_sz */
2149                 result = strdup((char*)buf);
2150                 if(!result) log_err("out of memory");
2151         }
2152         return result;
2153 }
2154
2155 void w_config_adjust_directory(struct config_file* cfg)
2156 {
2157         if(cfg->directory && cfg->directory[0]) {
2158                 TCHAR dirbuf[2*MAX_PATH+4];
2159                 if(strcmp(cfg->directory, "%EXECUTABLE%") == 0) {
2160                         /* get executable path, and if that contains
2161                          * directories, snip off the filename part */
2162                         dirbuf[0] = 0;
2163                         if(!GetModuleFileName(NULL, dirbuf, MAX_PATH))
2164                                 log_err("could not GetModuleFileName");
2165                         if(strrchr(dirbuf, '\\')) {
2166                                 (strrchr(dirbuf, '\\'))[0] = 0;
2167                         } else log_err("GetModuleFileName had no path");
2168                         if(dirbuf[0]) {
2169                                 /* adjust directory for later lookups to work*/
2170                                 free(cfg->directory);
2171                                 cfg->directory = memdup(dirbuf, strlen(dirbuf)+1);
2172                         }
2173                 }
2174         }
2175 }
2176 #endif /* UB_ON_WINDOWS */
2177
2178 void errinf(struct module_qstate* qstate, const char* str)
2179 {
2180         struct config_strlist* p;
2181         if(qstate->env->cfg->val_log_level < 2 || !str)
2182                 return;
2183         p = (struct config_strlist*)regional_alloc(qstate->region, sizeof(*p));
2184         if(!p) {
2185                 log_err("malloc failure in validator-error-info string");
2186                 return;
2187         }
2188         p->next = NULL;
2189         p->str = regional_strdup(qstate->region, str);
2190         if(!p->str) {
2191                 log_err("malloc failure in validator-error-info string");
2192                 return;
2193         }
2194         /* add at end */
2195         if(qstate->errinf) {
2196                 struct config_strlist* q = qstate->errinf;
2197                 while(q->next)
2198                         q = q->next;
2199                 q->next = p;
2200         } else  qstate->errinf = p;
2201 }
2202
2203 void errinf_origin(struct module_qstate* qstate, struct sock_list *origin)
2204 {
2205         struct sock_list* p;
2206         if(qstate->env->cfg->val_log_level < 2)
2207                 return;
2208         for(p=origin; p; p=p->next) {
2209                 char buf[256];
2210                 if(p == origin)
2211                         snprintf(buf, sizeof(buf), "from ");
2212                 else    snprintf(buf, sizeof(buf), "and ");
2213                 if(p->len == 0)
2214                         snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf),
2215                                 "cache");
2216                 else
2217                         addr_to_str(&p->addr, p->len, buf+strlen(buf),
2218                                 sizeof(buf)-strlen(buf));
2219                 errinf(qstate, buf);
2220         }
2221 }
2222
2223 char* errinf_to_str(struct module_qstate* qstate)
2224 {
2225         char buf[20480];
2226         char* p = buf;
2227         size_t left = sizeof(buf);
2228         struct config_strlist* s;
2229         char dname[LDNS_MAX_DOMAINLEN+1];
2230         char t[16], c[16];
2231         sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t));
2232         sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c));
2233         dname_str(qstate->qinfo.qname, dname);
2234         snprintf(p, left, "validation failure <%s %s %s>:", dname, t, c);
2235         left -= strlen(p); p += strlen(p);
2236         if(!qstate->errinf)
2237                 snprintf(p, left, " misc failure");
2238         else for(s=qstate->errinf; s; s=s->next) {
2239                 snprintf(p, left, " %s", s->str);
2240                 left -= strlen(p); p += strlen(p);
2241         }
2242         p = strdup(buf);
2243         if(!p)
2244                 log_err("malloc failure in errinf_to_str");
2245         return p;
2246 }
2247
2248 void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr)
2249 {
2250         char buf[1024];
2251         char dname[LDNS_MAX_DOMAINLEN+1];
2252         char t[16], c[16];
2253         if(qstate->env->cfg->val_log_level < 2 || !rr)
2254                 return;
2255         sldns_wire2str_type_buf(ntohs(rr->rk.type), t, sizeof(t));
2256         sldns_wire2str_class_buf(ntohs(rr->rk.rrset_class), c, sizeof(c));
2257         dname_str(rr->rk.dname, dname);
2258         snprintf(buf, sizeof(buf), "for <%s %s %s>", dname, t, c);
2259         errinf(qstate, buf);
2260 }
2261
2262 void errinf_dname(struct module_qstate* qstate, const char* str, uint8_t* dname)
2263 {
2264         char b[1024];
2265         char buf[LDNS_MAX_DOMAINLEN+1];
2266         if(qstate->env->cfg->val_log_level < 2 || !str || !dname)
2267                 return;
2268         dname_str(dname, buf);
2269         snprintf(b, sizeof(b), "%s %s", str, buf);
2270         errinf(qstate, b);
2271 }
2272
2273 int options_remote_is_address(struct config_file* cfg)
2274 {
2275         if(!cfg->remote_control_enable) return 0;
2276         if(!cfg->control_ifs.first) return 1;
2277         if(!cfg->control_ifs.first->str) return 1;
2278         if(cfg->control_ifs.first->str[0] == 0) return 1;
2279         return (cfg->control_ifs.first->str[0] != '/');
2280 }