/* A Bison parser, made by GNU Bison 3.8.2. */ /* Bison implementation for Yacc-like parsers in C Copyright (C) 1984, 1989-1990, 2000-2015, 2018-2021 Free Software Foundation, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ /* As a special exception, you may create a larger work that contains part or all of the Bison parser skeleton and distribute that work under terms of your choice, so long as that work isn't itself a parser generator using the skeleton or a modified version thereof as a parser skeleton. Alternatively, if you modify or redistribute the parser skeleton itself, you may (at your option) remove this special exception, which will cause the skeleton and the resulting Bison output files to be licensed under the GNU General Public License without this special exception. This special exception was added by the Free Software Foundation in version 2.2 of Bison. */ /* C LALR(1) parser skeleton written by Richard Stallman, by simplifying the original so-called "semantic" parser. */ /* DO NOT RELY ON FEATURES THAT ARE NOT DOCUMENTED in the manual, especially those whose name start with YY_ or yy_. They are private implementation details that can be changed or removed. */ /* All symbols defined below should begin with yy or YY, to avoid infringing on user name space. This should be done even for local variables, as they might otherwise be expanded by user macros. There are some unavoidable exceptions within include files to define necessary library symbols; they are noted "INFRINGES ON USER NAME SPACE" below. */ /* Identify Bison output, and Bison version. */ #define YYBISON 30802 /* Bison version string. */ #define YYBISON_VERSION "3.8.2" /* Skeleton name. */ #define YYSKELETON_NAME "yacc.c" /* Pure parsers. */ #define YYPURE 1 /* Push parsers. */ #define YYPUSH 0 /* Pull parsers. */ #define YYPULL 1 /* Substitute the variable and function names. */ #define yyparse yara_yyparse #define yylex yara_yylex #define yyerror yara_yyerror #define yydebug yara_yydebug #define yynerrs yara_yynerrs /* First part of user prologue. */ #line 32 "libyara/grammar.y" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #if defined(_MSC_VER) #define llabs _abs64 #endif #define YYERROR_VERBOSE #define YYMALLOC yr_malloc #define YYFREE yr_free #define FOR_EXPRESSION_ALL 1 #define FOR_EXPRESSION_ANY 2 #define FOR_EXPRESSION_NONE 3 #define FOR_ITERATION_ITERATOR 1 #define FOR_ITERATION_STRING_SET 2 // fail_with_error() is used in parser actions for aborting the parsing with // an error. If the error is recoverable (like syntax errors), the parser will // report the error and continue parsing the next rule. If the error is a // fatal, non-recoverable error, the parser will be completely aborted. #define fail_with_error(e) \ { \ compiler->last_error = e; \ yyerror(yyscanner, compiler, NULL); \ switch (e) \ { \ case ERROR_INSUFFICIENT_MEMORY: \ YYABORT; \ default: \ YYERROR; \ } \ } // fail_if_error() is used in parser actions for aborting the parsing if an // error has occurred. See fail_with_error for details. #define fail_if_error(e) \ if (e != ERROR_SUCCESS && e != ERROR_UNKNOWN_ESCAPE_SEQUENCE) \ { \ fail_with_error(e); \ } // check_type(expression, EXPRESSION_TYPE_INTEGER | EXPRESSION_TYPE_FLOAT) is // used to ensure that the type of "expression" is either integer or float, // the cleanup statements are executed if the condition is not met. #define check_type_with_cleanup(expression, expected_type, op, cleanup) \ if (((expression.type) & (expected_type)) == 0) \ { \ switch(expression.type) \ { \ case EXPRESSION_TYPE_INTEGER: \ yr_compiler_set_error_extra_info( \ compiler, "wrong type \"integer\" for " op " operator"); \ break; \ case EXPRESSION_TYPE_FLOAT: \ yr_compiler_set_error_extra_info( \ compiler, "wrong type \"float\" for " op " operator"); \ break; \ case EXPRESSION_TYPE_STRING: \ yr_compiler_set_error_extra_info( \ compiler, "wrong type \"string\" for " op " operator"); \ break; \ case EXPRESSION_TYPE_BOOLEAN: \ yr_compiler_set_error_extra_info( \ compiler, "wrong type \"boolean\" for " op " operator"); \ break; \ } \ cleanup; \ compiler->last_error = ERROR_WRONG_TYPE; \ yyerror(yyscanner, compiler, NULL); \ YYERROR; \ } // check_type(expression, EXPRESSION_TYPE_INTEGER | EXPRESSION_TYPE_FLOAT) is // used to ensure that the type of "expression" is either integer or float. #define check_type(expression, expected_type, op) \ check_type_with_cleanup(expression, expected_type, op, ) #define loop_vars_cleanup(loop_index) \ { \ YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[loop_index]; \ for (int i = 0; i < loop_ctx->vars_count; i++) \ { \ yr_free((void*) loop_ctx->vars[i].identifier.ptr); \ loop_ctx->vars[i].identifier.ptr = NULL; \ loop_ctx->vars[i].identifier.ref = YR_ARENA_NULL_REF; \ } \ loop_ctx->vars_count = 0; \ } \ // Given a YR_EXPRESSION returns its identifier. It returns identifier.ptr if // not NULL and relies on identifier.ref if otherwise. #define expression_identifier(expr) \ ((expr).identifier.ptr != NULL ? \ (expr).identifier.ptr : \ (const char*) yr_arena_ref_to_ptr(compiler->arena, &(expr).identifier.ref)) #define DEFAULT_BASE64_ALPHABET \ "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" #line 204 "libyara/grammar.c" # ifndef YY_CAST # ifdef __cplusplus # define YY_CAST(Type, Val) static_cast (Val) # define YY_REINTERPRET_CAST(Type, Val) reinterpret_cast (Val) # else # define YY_CAST(Type, Val) ((Type) (Val)) # define YY_REINTERPRET_CAST(Type, Val) ((Type) (Val)) # endif # endif # ifndef YY_NULLPTR # if defined __cplusplus # if 201103L <= __cplusplus # define YY_NULLPTR nullptr # else # define YY_NULLPTR 0 # endif # else # define YY_NULLPTR ((void*)0) # endif # endif /* Use api.header.include to #include this header instead of duplicating it here. */ #ifndef YY_YARA_YY_LIBYARA_GRAMMAR_H_INCLUDED # define YY_YARA_YY_LIBYARA_GRAMMAR_H_INCLUDED /* Debug traces. */ #ifndef YYDEBUG # define YYDEBUG 0 #endif #if YYDEBUG extern int yara_yydebug; #endif /* Token kinds. */ #ifndef YYTOKENTYPE # define YYTOKENTYPE enum yytokentype { YYEMPTY = -2, _END_OF_FILE_ = 0, /* "end of file" */ YYerror = 256, /* error */ YYUNDEF = 257, /* "invalid token" */ _END_OF_INCLUDED_FILE_ = 258, /* "end of included file" */ _DOT_DOT_ = 259, /* ".." */ _RULE_ = 260, /* "" */ _PRIVATE_ = 261, /* "" */ _GLOBAL_ = 262, /* "" */ _META_ = 263, /* "" */ _STRINGS_ = 264, /* "" */ _CONDITION_ = 265, /* "" */ _IDENTIFIER_ = 266, /* "identifier" */ _STRING_IDENTIFIER_ = 267, /* "string identifier" */ _STRING_COUNT_ = 268, /* "string count" */ _STRING_OFFSET_ = 269, /* "string offset" */ _STRING_LENGTH_ = 270, /* "string length" */ _STRING_IDENTIFIER_WITH_WILDCARD_ = 271, /* "string identifier with wildcard" */ _NUMBER_ = 272, /* "integer number" */ _DOUBLE_ = 273, /* "floating point number" */ _INTEGER_FUNCTION_ = 274, /* "integer function" */ _TEXT_STRING_ = 275, /* "text string" */ _HEX_STRING_ = 276, /* "hex string" */ _REGEXP_ = 277, /* "regular expression" */ _ASCII_ = 278, /* "" */ _WIDE_ = 279, /* "" */ _XOR_ = 280, /* "" */ _BASE64_ = 281, /* "" */ _BASE64_WIDE_ = 282, /* "" */ _NOCASE_ = 283, /* "" */ _FULLWORD_ = 284, /* "" */ _AT_ = 285, /* "" */ _FILESIZE_ = 286, /* "" */ _ENTRYPOINT_ = 287, /* "" */ _ALL_ = 288, /* "" */ _ANY_ = 289, /* "" */ _NONE_ = 290, /* "" */ _IN_ = 291, /* "" */ _OF_ = 292, /* "" */ _FOR_ = 293, /* "" */ _THEM_ = 294, /* "" */ _MATCHES_ = 295, /* "" */ _CONTAINS_ = 296, /* "" */ _STARTSWITH_ = 297, /* "" */ _ENDSWITH_ = 298, /* "" */ _ICONTAINS_ = 299, /* "" */ _ISTARTSWITH_ = 300, /* "" */ _IENDSWITH_ = 301, /* "" */ _IEQUALS_ = 302, /* "" */ _IMPORT_ = 303, /* "" */ _TRUE_ = 304, /* "" */ _FALSE_ = 305, /* "" */ _OR_ = 306, /* "" */ _AND_ = 307, /* "" */ _NOT_ = 308, /* "" */ _DEFINED_ = 309, /* "" */ _EQ_ = 310, /* "==" */ _NEQ_ = 311, /* "!=" */ _LT_ = 312, /* "<" */ _LE_ = 313, /* "<=" */ _GT_ = 314, /* ">" */ _GE_ = 315, /* ">=" */ _SHIFT_LEFT_ = 316, /* "<<" */ _SHIFT_RIGHT_ = 317, /* ">>" */ UNARY_MINUS = 318 /* UNARY_MINUS */ }; typedef enum yytokentype yytoken_kind_t; #endif /* Token kinds. */ #define YYEMPTY -2 #define _END_OF_FILE_ 0 #define YYerror 256 #define YYUNDEF 257 #define _END_OF_INCLUDED_FILE_ 258 #define _DOT_DOT_ 259 #define _RULE_ 260 #define _PRIVATE_ 261 #define _GLOBAL_ 262 #define _META_ 263 #define _STRINGS_ 264 #define _CONDITION_ 265 #define _IDENTIFIER_ 266 #define _STRING_IDENTIFIER_ 267 #define _STRING_COUNT_ 268 #define _STRING_OFFSET_ 269 #define _STRING_LENGTH_ 270 #define _STRING_IDENTIFIER_WITH_WILDCARD_ 271 #define _NUMBER_ 272 #define _DOUBLE_ 273 #define _INTEGER_FUNCTION_ 274 #define _TEXT_STRING_ 275 #define _HEX_STRING_ 276 #define _REGEXP_ 277 #define _ASCII_ 278 #define _WIDE_ 279 #define _XOR_ 280 #define _BASE64_ 281 #define _BASE64_WIDE_ 282 #define _NOCASE_ 283 #define _FULLWORD_ 284 #define _AT_ 285 #define _FILESIZE_ 286 #define _ENTRYPOINT_ 287 #define _ALL_ 288 #define _ANY_ 289 #define _NONE_ 290 #define _IN_ 291 #define _OF_ 292 #define _FOR_ 293 #define _THEM_ 294 #define _MATCHES_ 295 #define _CONTAINS_ 296 #define _STARTSWITH_ 297 #define _ENDSWITH_ 298 #define _ICONTAINS_ 299 #define _ISTARTSWITH_ 300 #define _IENDSWITH_ 301 #define _IEQUALS_ 302 #define _IMPORT_ 303 #define _TRUE_ 304 #define _FALSE_ 305 #define _OR_ 306 #define _AND_ 307 #define _NOT_ 308 #define _DEFINED_ 309 #define _EQ_ 310 #define _NEQ_ 311 #define _LT_ 312 #define _LE_ 313 #define _GT_ 314 #define _GE_ 315 #define _SHIFT_LEFT_ 316 #define _SHIFT_RIGHT_ 317 #define UNARY_MINUS 318 /* Value type. */ #if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED union YYSTYPE { #line 343 "libyara/grammar.y" YR_EXPRESSION expression; SIZED_STRING* sized_string; char* c_string; int64_t integer; double double_; YR_MODIFIER modifier; YR_ENUMERATION enumeration; YR_ARENA_REF tag; YR_ARENA_REF rule; YR_ARENA_REF meta; YR_ARENA_REF string; #line 398 "libyara/grammar.c" }; typedef union YYSTYPE YYSTYPE; # define YYSTYPE_IS_TRIVIAL 1 # define YYSTYPE_IS_DECLARED 1 #endif int yara_yyparse (void *yyscanner, YR_COMPILER* compiler); #endif /* !YY_YARA_YY_LIBYARA_GRAMMAR_H_INCLUDED */ /* Symbol kind. */ enum yysymbol_kind_t { YYSYMBOL_YYEMPTY = -2, YYSYMBOL_YYEOF = 0, /* "end of file" */ YYSYMBOL_YYerror = 1, /* error */ YYSYMBOL_YYUNDEF = 2, /* "invalid token" */ YYSYMBOL__END_OF_INCLUDED_FILE_ = 3, /* "end of included file" */ YYSYMBOL__DOT_DOT_ = 4, /* ".." */ YYSYMBOL__RULE_ = 5, /* "" */ YYSYMBOL__PRIVATE_ = 6, /* "" */ YYSYMBOL__GLOBAL_ = 7, /* "" */ YYSYMBOL__META_ = 8, /* "" */ YYSYMBOL__STRINGS_ = 9, /* "" */ YYSYMBOL__CONDITION_ = 10, /* "" */ YYSYMBOL__IDENTIFIER_ = 11, /* "identifier" */ YYSYMBOL__STRING_IDENTIFIER_ = 12, /* "string identifier" */ YYSYMBOL__STRING_COUNT_ = 13, /* "string count" */ YYSYMBOL__STRING_OFFSET_ = 14, /* "string offset" */ YYSYMBOL__STRING_LENGTH_ = 15, /* "string length" */ YYSYMBOL__STRING_IDENTIFIER_WITH_WILDCARD_ = 16, /* "string identifier with wildcard" */ YYSYMBOL__NUMBER_ = 17, /* "integer number" */ YYSYMBOL__DOUBLE_ = 18, /* "floating point number" */ YYSYMBOL__INTEGER_FUNCTION_ = 19, /* "integer function" */ YYSYMBOL__TEXT_STRING_ = 20, /* "text string" */ YYSYMBOL__HEX_STRING_ = 21, /* "hex string" */ YYSYMBOL__REGEXP_ = 22, /* "regular expression" */ YYSYMBOL__ASCII_ = 23, /* "" */ YYSYMBOL__WIDE_ = 24, /* "" */ YYSYMBOL__XOR_ = 25, /* "" */ YYSYMBOL__BASE64_ = 26, /* "" */ YYSYMBOL__BASE64_WIDE_ = 27, /* "" */ YYSYMBOL__NOCASE_ = 28, /* "" */ YYSYMBOL__FULLWORD_ = 29, /* "" */ YYSYMBOL__AT_ = 30, /* "" */ YYSYMBOL__FILESIZE_ = 31, /* "" */ YYSYMBOL__ENTRYPOINT_ = 32, /* "" */ YYSYMBOL__ALL_ = 33, /* "" */ YYSYMBOL__ANY_ = 34, /* "" */ YYSYMBOL__NONE_ = 35, /* "" */ YYSYMBOL__IN_ = 36, /* "" */ YYSYMBOL__OF_ = 37, /* "" */ YYSYMBOL__FOR_ = 38, /* "" */ YYSYMBOL__THEM_ = 39, /* "" */ YYSYMBOL__MATCHES_ = 40, /* "" */ YYSYMBOL__CONTAINS_ = 41, /* "" */ YYSYMBOL__STARTSWITH_ = 42, /* "" */ YYSYMBOL__ENDSWITH_ = 43, /* "" */ YYSYMBOL__ICONTAINS_ = 44, /* "" */ YYSYMBOL__ISTARTSWITH_ = 45, /* "" */ YYSYMBOL__IENDSWITH_ = 46, /* "" */ YYSYMBOL__IEQUALS_ = 47, /* "" */ YYSYMBOL__IMPORT_ = 48, /* "" */ YYSYMBOL__TRUE_ = 49, /* "" */ YYSYMBOL__FALSE_ = 50, /* "" */ YYSYMBOL__OR_ = 51, /* "" */ YYSYMBOL__AND_ = 52, /* "" */ YYSYMBOL__NOT_ = 53, /* "" */ YYSYMBOL__DEFINED_ = 54, /* "" */ YYSYMBOL__EQ_ = 55, /* "==" */ YYSYMBOL__NEQ_ = 56, /* "!=" */ YYSYMBOL__LT_ = 57, /* "<" */ YYSYMBOL__LE_ = 58, /* "<=" */ YYSYMBOL__GT_ = 59, /* ">" */ YYSYMBOL__GE_ = 60, /* ">=" */ YYSYMBOL__SHIFT_LEFT_ = 61, /* "<<" */ YYSYMBOL__SHIFT_RIGHT_ = 62, /* ">>" */ YYSYMBOL_63_ = 63, /* '|' */ YYSYMBOL_64_ = 64, /* '^' */ YYSYMBOL_65_ = 65, /* '&' */ YYSYMBOL_66_ = 66, /* '+' */ YYSYMBOL_67_ = 67, /* '-' */ YYSYMBOL_68_ = 68, /* '*' */ YYSYMBOL_69_ = 69, /* '\\' */ YYSYMBOL_70_ = 70, /* '%' */ YYSYMBOL_71_ = 71, /* '~' */ YYSYMBOL_UNARY_MINUS = 72, /* UNARY_MINUS */ YYSYMBOL_73_include_ = 73, /* "include" */ YYSYMBOL_74_ = 74, /* '{' */ YYSYMBOL_75_ = 75, /* '}' */ YYSYMBOL_76_ = 76, /* ':' */ YYSYMBOL_77_ = 77, /* '=' */ YYSYMBOL_78_ = 78, /* '(' */ YYSYMBOL_79_ = 79, /* ')' */ YYSYMBOL_80_ = 80, /* '.' */ YYSYMBOL_81_ = 81, /* '[' */ YYSYMBOL_82_ = 82, /* ']' */ YYSYMBOL_83_ = 83, /* ',' */ YYSYMBOL_YYACCEPT = 84, /* $accept */ YYSYMBOL_rules = 85, /* rules */ YYSYMBOL_import = 86, /* import */ YYSYMBOL_rule = 87, /* rule */ YYSYMBOL_88_1 = 88, /* @1 */ YYSYMBOL_89_2 = 89, /* $@2 */ YYSYMBOL_meta = 90, /* meta */ YYSYMBOL_strings = 91, /* strings */ YYSYMBOL_condition = 92, /* condition */ YYSYMBOL_rule_modifiers = 93, /* rule_modifiers */ YYSYMBOL_rule_modifier = 94, /* rule_modifier */ YYSYMBOL_tags = 95, /* tags */ YYSYMBOL_tag_list = 96, /* tag_list */ YYSYMBOL_meta_declarations = 97, /* meta_declarations */ YYSYMBOL_meta_declaration = 98, /* meta_declaration */ YYSYMBOL_string_declarations = 99, /* string_declarations */ YYSYMBOL_string_declaration = 100, /* string_declaration */ YYSYMBOL_101_3 = 101, /* $@3 */ YYSYMBOL_102_4 = 102, /* $@4 */ YYSYMBOL_103_5 = 103, /* $@5 */ YYSYMBOL_string_modifiers = 104, /* string_modifiers */ YYSYMBOL_string_modifier = 105, /* string_modifier */ YYSYMBOL_regexp_modifiers = 106, /* regexp_modifiers */ YYSYMBOL_regexp_modifier = 107, /* regexp_modifier */ YYSYMBOL_hex_modifiers = 108, /* hex_modifiers */ YYSYMBOL_hex_modifier = 109, /* hex_modifier */ YYSYMBOL_identifier = 110, /* identifier */ YYSYMBOL_arguments = 111, /* arguments */ YYSYMBOL_arguments_list = 112, /* arguments_list */ YYSYMBOL_regexp = 113, /* regexp */ YYSYMBOL_boolean_expression = 114, /* boolean_expression */ YYSYMBOL_expression = 115, /* expression */ YYSYMBOL_116_6 = 116, /* $@6 */ YYSYMBOL_117_7 = 117, /* $@7 */ YYSYMBOL_118_8 = 118, /* $@8 */ YYSYMBOL_119_9 = 119, /* $@9 */ YYSYMBOL_for_iteration = 120, /* for_iteration */ YYSYMBOL_for_variables = 121, /* for_variables */ YYSYMBOL_iterator = 122, /* iterator */ YYSYMBOL_set = 123, /* set */ YYSYMBOL_range = 124, /* range */ YYSYMBOL_enumeration = 125, /* enumeration */ YYSYMBOL_string_iterator = 126, /* string_iterator */ YYSYMBOL_string_set = 127, /* string_set */ YYSYMBOL_128_10 = 128, /* $@10 */ YYSYMBOL_string_enumeration = 129, /* string_enumeration */ YYSYMBOL_string_enumeration_item = 130, /* string_enumeration_item */ YYSYMBOL_rule_set = 131, /* rule_set */ YYSYMBOL_132_11 = 132, /* $@11 */ YYSYMBOL_rule_enumeration = 133, /* rule_enumeration */ YYSYMBOL_rule_enumeration_item = 134, /* rule_enumeration_item */ YYSYMBOL_for_expression = 135, /* for_expression */ YYSYMBOL_for_quantifier = 136, /* for_quantifier */ YYSYMBOL_primary_expression = 137 /* primary_expression */ }; typedef enum yysymbol_kind_t yysymbol_kind_t; #ifdef short # undef short #endif /* On compilers that do not define __PTRDIFF_MAX__ etc., make sure and (if available) are included so that the code can choose integer types of a good width. */ #ifndef __PTRDIFF_MAX__ # include /* INFRINGES ON USER NAME SPACE */ # if defined __STDC_VERSION__ && 199901 <= __STDC_VERSION__ # include /* INFRINGES ON USER NAME SPACE */ # define YY_STDINT_H # endif #endif /* Narrow types that promote to a signed type and that can represent a signed or unsigned integer of at least N bits. In tables they can save space and decrease cache pressure. Promoting to a signed type helps avoid bugs in integer arithmetic. */ #ifdef __INT_LEAST8_MAX__ typedef __INT_LEAST8_TYPE__ yytype_int8; #elif defined YY_STDINT_H typedef int_least8_t yytype_int8; #else typedef signed char yytype_int8; #endif #ifdef __INT_LEAST16_MAX__ typedef __INT_LEAST16_TYPE__ yytype_int16; #elif defined YY_STDINT_H typedef int_least16_t yytype_int16; #else typedef short yytype_int16; #endif /* Work around bug in HP-UX 11.23, which defines these macros incorrectly for preprocessor constants. This workaround can likely be removed in 2023, as HPE has promised support for HP-UX 11.23 (aka HP-UX 11i v2) only through the end of 2022; see Table 2 of . */ #ifdef __hpux # undef UINT_LEAST8_MAX # undef UINT_LEAST16_MAX # define UINT_LEAST8_MAX 255 # define UINT_LEAST16_MAX 65535 #endif #if defined __UINT_LEAST8_MAX__ && __UINT_LEAST8_MAX__ <= __INT_MAX__ typedef __UINT_LEAST8_TYPE__ yytype_uint8; #elif (!defined __UINT_LEAST8_MAX__ && defined YY_STDINT_H \ && UINT_LEAST8_MAX <= INT_MAX) typedef uint_least8_t yytype_uint8; #elif !defined __UINT_LEAST8_MAX__ && UCHAR_MAX <= INT_MAX typedef unsigned char yytype_uint8; #else typedef short yytype_uint8; #endif #if defined __UINT_LEAST16_MAX__ && __UINT_LEAST16_MAX__ <= __INT_MAX__ typedef __UINT_LEAST16_TYPE__ yytype_uint16; #elif (!defined __UINT_LEAST16_MAX__ && defined YY_STDINT_H \ && UINT_LEAST16_MAX <= INT_MAX) typedef uint_least16_t yytype_uint16; #elif !defined __UINT_LEAST16_MAX__ && USHRT_MAX <= INT_MAX typedef unsigned short yytype_uint16; #else typedef int yytype_uint16; #endif #ifndef YYPTRDIFF_T # if defined __PTRDIFF_TYPE__ && defined __PTRDIFF_MAX__ # define YYPTRDIFF_T __PTRDIFF_TYPE__ # define YYPTRDIFF_MAXIMUM __PTRDIFF_MAX__ # elif defined PTRDIFF_MAX # ifndef ptrdiff_t # include /* INFRINGES ON USER NAME SPACE */ # endif # define YYPTRDIFF_T ptrdiff_t # define YYPTRDIFF_MAXIMUM PTRDIFF_MAX # else # define YYPTRDIFF_T long # define YYPTRDIFF_MAXIMUM LONG_MAX # endif #endif #ifndef YYSIZE_T # ifdef __SIZE_TYPE__ # define YYSIZE_T __SIZE_TYPE__ # elif defined size_t # define YYSIZE_T size_t # elif defined __STDC_VERSION__ && 199901 <= __STDC_VERSION__ # include /* INFRINGES ON USER NAME SPACE */ # define YYSIZE_T size_t # else # define YYSIZE_T unsigned # endif #endif #define YYSIZE_MAXIMUM \ YY_CAST (YYPTRDIFF_T, \ (YYPTRDIFF_MAXIMUM < YY_CAST (YYSIZE_T, -1) \ ? YYPTRDIFF_MAXIMUM \ : YY_CAST (YYSIZE_T, -1))) #define YYSIZEOF(X) YY_CAST (YYPTRDIFF_T, sizeof (X)) /* Stored state numbers (used for stacks). */ typedef yytype_int16 yy_state_t; /* State numbers in computations. */ typedef int yy_state_fast_t; #ifndef YY_ # if defined YYENABLE_NLS && YYENABLE_NLS # if ENABLE_NLS # include /* INFRINGES ON USER NAME SPACE */ # define YY_(Msgid) dgettext ("bison-runtime", Msgid) # endif # endif # ifndef YY_ # define YY_(Msgid) Msgid # endif #endif #ifndef YY_ATTRIBUTE_PURE # if defined __GNUC__ && 2 < __GNUC__ + (96 <= __GNUC_MINOR__) # define YY_ATTRIBUTE_PURE __attribute__ ((__pure__)) # else # define YY_ATTRIBUTE_PURE # endif #endif #ifndef YY_ATTRIBUTE_UNUSED # if defined __GNUC__ && 2 < __GNUC__ + (7 <= __GNUC_MINOR__) # define YY_ATTRIBUTE_UNUSED __attribute__ ((__unused__)) # else # define YY_ATTRIBUTE_UNUSED # endif #endif /* Suppress unused-variable warnings by "using" E. */ #if ! defined lint || defined __GNUC__ # define YY_USE(E) ((void) (E)) #else # define YY_USE(E) /* empty */ #endif /* Suppress an incorrect diagnostic about yylval being uninitialized. */ #if defined __GNUC__ && ! defined __ICC && 406 <= __GNUC__ * 100 + __GNUC_MINOR__ # if __GNUC__ * 100 + __GNUC_MINOR__ < 407 # define YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN \ _Pragma ("GCC diagnostic push") \ _Pragma ("GCC diagnostic ignored \"-Wuninitialized\"") # else # define YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN \ _Pragma ("GCC diagnostic push") \ _Pragma ("GCC diagnostic ignored \"-Wuninitialized\"") \ _Pragma ("GCC diagnostic ignored \"-Wmaybe-uninitialized\"") # endif # define YY_IGNORE_MAYBE_UNINITIALIZED_END \ _Pragma ("GCC diagnostic pop") #else # define YY_INITIAL_VALUE(Value) Value #endif #ifndef YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN # define YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN # define YY_IGNORE_MAYBE_UNINITIALIZED_END #endif #ifndef YY_INITIAL_VALUE # define YY_INITIAL_VALUE(Value) /* Nothing. */ #endif #if defined __cplusplus && defined __GNUC__ && ! defined __ICC && 6 <= __GNUC__ # define YY_IGNORE_USELESS_CAST_BEGIN \ _Pragma ("GCC diagnostic push") \ _Pragma ("GCC diagnostic ignored \"-Wuseless-cast\"") # define YY_IGNORE_USELESS_CAST_END \ _Pragma ("GCC diagnostic pop") #endif #ifndef YY_IGNORE_USELESS_CAST_BEGIN # define YY_IGNORE_USELESS_CAST_BEGIN # define YY_IGNORE_USELESS_CAST_END #endif #define YY_ASSERT(E) ((void) (0 && (E))) #if 1 /* The parser invokes alloca or malloc; define the necessary symbols. */ # ifdef YYSTACK_USE_ALLOCA # if YYSTACK_USE_ALLOCA # ifdef __GNUC__ # define YYSTACK_ALLOC __builtin_alloca # elif defined __BUILTIN_VA_ARG_INCR # include /* INFRINGES ON USER NAME SPACE */ # elif defined _AIX # define YYSTACK_ALLOC __alloca # elif defined _MSC_VER # include /* INFRINGES ON USER NAME SPACE */ # define alloca _alloca # else # define YYSTACK_ALLOC alloca # if ! defined _ALLOCA_H && ! defined EXIT_SUCCESS # include /* INFRINGES ON USER NAME SPACE */ /* Use EXIT_SUCCESS as a witness for stdlib.h. */ # ifndef EXIT_SUCCESS # define EXIT_SUCCESS 0 # endif # endif # endif # endif # endif # ifdef YYSTACK_ALLOC /* Pacify GCC's 'empty if-body' warning. */ # define YYSTACK_FREE(Ptr) do { /* empty */; } while (0) # ifndef YYSTACK_ALLOC_MAXIMUM /* The OS might guarantee only one guard page at the bottom of the stack, and a page size can be as small as 4096 bytes. So we cannot safely invoke alloca (N) if N exceeds 4096. Use a slightly smaller number to allow for a few compiler-allocated temporary stack slots. */ # define YYSTACK_ALLOC_MAXIMUM 4032 /* reasonable circa 2006 */ # endif # else # define YYSTACK_ALLOC YYMALLOC # define YYSTACK_FREE YYFREE # ifndef YYSTACK_ALLOC_MAXIMUM # define YYSTACK_ALLOC_MAXIMUM YYSIZE_MAXIMUM # endif # if (defined __cplusplus && ! defined EXIT_SUCCESS \ && ! ((defined YYMALLOC || defined malloc) \ && (defined YYFREE || defined free))) # include /* INFRINGES ON USER NAME SPACE */ # ifndef EXIT_SUCCESS # define EXIT_SUCCESS 0 # endif # endif # ifndef YYMALLOC # define YYMALLOC malloc # if ! defined malloc && ! defined EXIT_SUCCESS void *malloc (YYSIZE_T); /* INFRINGES ON USER NAME SPACE */ # endif # endif # ifndef YYFREE # define YYFREE free # if ! defined free && ! defined EXIT_SUCCESS void free (void *); /* INFRINGES ON USER NAME SPACE */ # endif # endif # endif #endif /* 1 */ #if (! defined yyoverflow \ && (! defined __cplusplus \ || (defined YYSTYPE_IS_TRIVIAL && YYSTYPE_IS_TRIVIAL))) /* A type that is properly aligned for any stack member. */ union yyalloc { yy_state_t yyss_alloc; YYSTYPE yyvs_alloc; }; /* The size of the maximum gap between one aligned stack and the next. */ # define YYSTACK_GAP_MAXIMUM (YYSIZEOF (union yyalloc) - 1) /* The size of an array large to enough to hold all stacks, each with N elements. */ # define YYSTACK_BYTES(N) \ ((N) * (YYSIZEOF (yy_state_t) + YYSIZEOF (YYSTYPE)) \ + YYSTACK_GAP_MAXIMUM) # define YYCOPY_NEEDED 1 /* Relocate STACK from its old location to the new one. The local variables YYSIZE and YYSTACKSIZE give the old and new number of elements in the stack, and YYPTR gives the new location of the stack. Advance YYPTR to a properly aligned location for the next stack. */ # define YYSTACK_RELOCATE(Stack_alloc, Stack) \ do \ { \ YYPTRDIFF_T yynewbytes; \ YYCOPY (&yyptr->Stack_alloc, Stack, yysize); \ Stack = &yyptr->Stack_alloc; \ yynewbytes = yystacksize * YYSIZEOF (*Stack) + YYSTACK_GAP_MAXIMUM; \ yyptr += yynewbytes / YYSIZEOF (*yyptr); \ } \ while (0) #endif #if defined YYCOPY_NEEDED && YYCOPY_NEEDED /* Copy COUNT objects from SRC to DST. The source and destination do not overlap. */ # ifndef YYCOPY # if defined __GNUC__ && 1 < __GNUC__ # define YYCOPY(Dst, Src, Count) \ __builtin_memcpy (Dst, Src, YY_CAST (YYSIZE_T, (Count)) * sizeof (*(Src))) # else # define YYCOPY(Dst, Src, Count) \ do \ { \ YYPTRDIFF_T yyi; \ for (yyi = 0; yyi < (Count); yyi++) \ (Dst)[yyi] = (Src)[yyi]; \ } \ while (0) # endif # endif #endif /* !YYCOPY_NEEDED */ /* YYFINAL -- State number of the termination state. */ #define YYFINAL 2 /* YYLAST -- Last index in YYTABLE. */ #define YYLAST 480 /* YYNTOKENS -- Number of terminals. */ #define YYNTOKENS 84 /* YYNNTS -- Number of nonterminals. */ #define YYNNTS 54 /* YYNRULES -- Number of rules. */ #define YYNRULES 169 /* YYNSTATES -- Number of states. */ #define YYNSTATES 276 /* YYMAXUTOK -- Last valid token kind. */ #define YYMAXUTOK 319 /* YYTRANSLATE(TOKEN-NUM) -- Symbol number corresponding to TOKEN-NUM as returned by yylex, with out-of-bounds checking. */ #define YYTRANSLATE(YYX) \ (0 <= (YYX) && (YYX) <= YYMAXUTOK \ ? YY_CAST (yysymbol_kind_t, yytranslate[YYX]) \ : YYSYMBOL_YYUNDEF) /* YYTRANSLATE[TOKEN-NUM] -- Symbol number corresponding to TOKEN-NUM as returned by yylex. */ static const yytype_int8 yytranslate[] = { 0, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 70, 65, 2, 78, 79, 68, 66, 83, 67, 80, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 76, 2, 2, 77, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 81, 69, 82, 64, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 74, 63, 75, 71, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 72, 73 }; #if YYDEBUG /* YYRLINE[YYN] -- Source line where rule number YYN was defined. */ static const yytype_int16 yyrline[] = { 0, 362, 362, 363, 364, 365, 366, 367, 368, 372, 380, 393, 398, 392, 429, 432, 448, 451, 466, 474, 475, 480, 481, 487, 490, 506, 515, 557, 558, 563, 580, 594, 608, 622, 640, 641, 647, 646, 663, 662, 683, 682, 707, 713, 773, 774, 775, 776, 777, 778, 784, 805, 836, 841, 858, 863, 883, 884, 898, 899, 900, 901, 902, 906, 907, 921, 925, 1021, 1069, 1130, 1175, 1176, 1180, 1215, 1268, 1323, 1354, 1361, 1368, 1381, 1392, 1403, 1414, 1425, 1436, 1447, 1458, 1473, 1489, 1501, 1576, 1614, 1518, 1743, 1766, 1778, 1806, 1825, 1848, 1896, 1903, 1910, 1909, 1956, 1955, 2006, 2014, 2022, 2030, 2038, 2046, 2054, 2058, 2066, 2067, 2092, 2112, 2140, 2214, 2246, 2264, 2275, 2318, 2334, 2354, 2364, 2363, 2372, 2386, 2387, 2392, 2402, 2417, 2416, 2429, 2430, 2435, 2468, 2493, 2549, 2556, 2562, 2568, 2578, 2582, 2590, 2602, 2616, 2623, 2630, 2655, 2667, 2679, 2691, 2706, 2718, 2733, 2776, 2797, 2832, 2867, 2901, 2926, 2943, 2953, 2963, 2973, 2983, 3003, 3023 }; #endif /** Accessing symbol of state STATE. */ #define YY_ACCESSING_SYMBOL(State) YY_CAST (yysymbol_kind_t, yystos[State]) #if 1 /* The user-facing name of the symbol whose (internal) number is YYSYMBOL. No bounds checking. */ static const char *yysymbol_name (yysymbol_kind_t yysymbol) YY_ATTRIBUTE_UNUSED; /* YYTNAME[SYMBOL-NUM] -- String name of the symbol SYMBOL-NUM. First, the terminals, then, starting at YYNTOKENS, nonterminals. */ static const char *const yytname[] = { "\"end of file\"", "error", "\"invalid token\"", "\"end of included file\"", "\"..\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"identifier\"", "\"string identifier\"", "\"string count\"", "\"string offset\"", "\"string length\"", "\"string identifier with wildcard\"", "\"integer number\"", "\"floating point number\"", "\"integer function\"", "\"text string\"", "\"hex string\"", "\"regular expression\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"\"", "\"==\"", "\"!=\"", "\"<\"", "\"<=\"", "\">\"", "\">=\"", "\"<<\"", "\">>\"", "'|'", "'^'", "'&'", "'+'", "'-'", "'*'", "'\\\\'", "'%'", "'~'", "UNARY_MINUS", "\"include\"", "'{'", "'}'", "':'", "'='", "'('", "')'", "'.'", "'['", "']'", "','", "$accept", "rules", "import", "rule", "@1", "$@2", "meta", "strings", "condition", "rule_modifiers", "rule_modifier", "tags", "tag_list", "meta_declarations", "meta_declaration", "string_declarations", "string_declaration", "$@3", "$@4", "$@5", "string_modifiers", "string_modifier", "regexp_modifiers", "regexp_modifier", "hex_modifiers", "hex_modifier", "identifier", "arguments", "arguments_list", "regexp", "boolean_expression", "expression", "$@6", "$@7", "$@8", "$@9", "for_iteration", "for_variables", "iterator", "set", "range", "enumeration", "string_iterator", "string_set", "$@10", "string_enumeration", "string_enumeration_item", "rule_set", "$@11", "rule_enumeration", "rule_enumeration_item", "for_expression", "for_quantifier", "primary_expression", YY_NULLPTR }; static const char * yysymbol_name (yysymbol_kind_t yysymbol) { return yytname[yysymbol]; } #endif #define YYPACT_NINF (-170) #define yypact_value_is_default(Yyn) \ ((Yyn) == YYPACT_NINF) #define YYTABLE_NINF (-139) #define yytable_value_is_error(Yyn) \ 0 /* YYPACT[STATE-NUM] -- Index in YYTABLE of the portion describing STATE-NUM. */ static const yytype_int16 yypact[] = { -170, 32, -170, 28, -170, 0, -170, -170, 137, -170, -170, -170, -170, -170, 11, -170, -170, -170, -170, -40, 59, 1, -170, 83, 91, -170, 39, 99, 106, 53, -170, 46, 106, -170, 122, 127, 54, -170, 71, 122, -170, 74, 77, -170, -170, -170, -170, 148, 118, -170, 78, -170, -170, 134, 158, 165, -170, 42, 131, 110, 119, -170, -170, 121, -170, -170, -170, -170, -170, -170, -170, 144, -170, -170, 78, 78, 212, 212, 78, 55, -170, 95, -170, 166, -170, 291, -170, -170, -170, 212, 130, 130, 212, 212, 212, 212, 7, 390, -170, -170, -170, -170, 95, 125, 251, 78, 194, 212, -170, -170, -35, 187, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 212, 170, 145, 96, 204, 390, 212, -170, -170, 199, 301, 333, 352, -170, 68, 212, -170, -170, 149, 141, 146, -170, 311, 78, 78, -170, 222, 47, -170, -170, 390, 390, 390, 390, 390, 390, 390, 390, 390, 390, 390, 390, 390, 18, 18, 400, 151, 410, 126, 126, -170, -170, -35, -170, -170, -170, -170, 157, 160, 161, -170, -170, -170, -170, -170, -170, -170, -170, -170, -170, -170, 189, -170, -170, -170, -170, -33, 164, -2, -170, 78, -170, 184, -170, -3, 231, 212, 130, -170, -170, 228, 226, 227, 212, -170, -170, -170, -170, -9, 238, 146, -170, -170, -62, -170, 202, 35, -170, 390, -170, -60, 192, 193, 371, 195, 212, 55, -170, -170, -170, -170, -170, -3, -170, -170, 231, 257, -170, -170, -170, -170, 78, 43, 189, -170, -170, 196, -37, -170, 212, -170, -170, 390 }; /* YYDEFACT[STATE-NUM] -- Default reduction number in state STATE-NUM. Performed when YYTABLE does not specify something else to do. Zero means the default is an error. */ static const yytype_uint8 yydefact[] = { 2, 0, 1, 19, 8, 0, 4, 3, 0, 9, 7, 6, 5, 10, 0, 21, 22, 20, 11, 23, 0, 0, 25, 24, 14, 26, 0, 16, 0, 0, 12, 0, 15, 27, 0, 0, 0, 28, 0, 17, 34, 0, 0, 30, 29, 32, 33, 0, 36, 35, 0, 13, 31, 0, 0, 0, 66, 86, 151, 153, 155, 147, 148, 0, 149, 74, 144, 145, 140, 141, 142, 0, 76, 77, 0, 0, 0, 0, 0, 156, 169, 18, 75, 0, 139, 111, 42, 56, 63, 0, 0, 0, 0, 0, 0, 0, 0, 138, 99, 100, 157, 166, 0, 75, 111, 70, 0, 0, 103, 101, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 37, 39, 41, 87, 0, 88, 150, 0, 0, 0, 0, 89, 0, 0, 112, 143, 0, 71, 72, 67, 0, 0, 0, 127, 125, 93, 94, 78, 79, 81, 83, 80, 82, 84, 85, 109, 110, 105, 107, 106, 108, 167, 168, 165, 163, 164, 158, 159, 160, 161, 0, 162, 48, 45, 44, 49, 52, 54, 46, 47, 43, 62, 59, 58, 60, 61, 57, 65, 64, 0, 152, 154, 146, 115, 0, 0, 0, 69, 0, 68, 104, 102, 0, 0, 0, 0, 95, 96, 0, 0, 0, 0, 125, 114, 124, 91, 0, 0, 73, 130, 131, 0, 128, 136, 0, 134, 98, 97, 0, 0, 0, 0, 0, 0, 117, 113, 118, 120, 116, 126, 0, 137, 133, 0, 0, 50, 53, 55, 121, 0, 0, 122, 129, 135, 0, 0, 119, 0, 51, 92, 123 }; /* YYPGOTO[NTERM-NUM]. */ static const yytype_int16 yypgoto[] = { -170, -170, 273, 274, -170, -170, -170, -170, -170, -170, -170, -170, -170, -170, 246, -170, 241, -170, -170, -170, -170, -170, -170, -170, -170, -170, 51, -170, -170, 173, -50, -75, -170, -170, -170, -170, -170, -170, -170, -170, -90, -170, -170, -169, -170, -170, 30, 101, -170, -170, 29, 218, -170, -66 }; /* YYDEFGOTO[NTERM-NUM]. */ static const yytype_int16 yydefgoto[] = { 0, 1, 6, 7, 19, 35, 27, 30, 42, 8, 17, 21, 23, 32, 33, 39, 40, 53, 54, 55, 135, 195, 136, 201, 137, 203, 79, 151, 152, 80, 102, 82, 147, 247, 157, 156, 210, 211, 250, 251, 140, 265, 228, 160, 217, 236, 237, 161, 218, 239, 240, 83, 84, 85 }; /* YYTABLE[YYPACT[STATE-NUM]] -- What to do in state STATE-NUM. If positive, shift that token. If negative, reduce the rule whose number is the opposite. If YYTABLE_NINF, syntax error. */ static const yytype_int16 yytable[] = { 81, 141, 56, 103, 158, 97, 158, 259, 146, 234, 100, 101, 104, 235, 108, 109, 221, 254, -90, 260, 13, 255, 18, 138, 98, 99, 142, 143, 144, 145, 153, 9, 2, 3, 231, 4, 20, -19, -19, -19, 229, 155, 274, 159, -90, 227, 163, 164, 165, 166, 167, 168, 169, 170, 171, 172, 173, 174, 175, 176, 177, 178, 179, 180, 181, 182, 183, 184, 186, 248, 22, 43, 89, 204, 44, 24, 5, 219, 90, 208, 5, 232, 186, 220, 130, 131, 132, 133, 148, 56, 57, 58, 59, 60, 25, 61, 62, 63, 64, 26, 65, 10, 196, 45, 46, 209, 215, 216, 29, 66, 67, 68, 69, 70, 257, 28, 71, 31, 258, 197, 198, 47, 271, 36, 199, 200, 272, 72, 73, 34, 242, 74, 75, 105, 38, 106, 107, 41, 233, -40, -38, 252, 14, 15, 16, 76, 108, 109, 48, 77, 50, 187, 51, 241, 86, 56, 78, 58, 59, 60, 246, 61, 62, 63, 64, 52, 65, 91, 188, 189, 190, 191, 192, 193, 194, 66, 67, 68, 69, 70, 87, 56, 266, 58, 59, 60, 88, 61, 62, 63, 64, 92, 65, 226, 132, 133, 148, -75, -75, 94, 93, 66, 67, 110, 149, 154, 275, 185, 139, 65, 202, 76, 125, 126, 270, 77, 129, 130, 131, 132, 133, 148, 95, 56, 213, 58, 59, 60, 212, 61, 62, 63, 64, -132, 65, 223, 109, 76, 224, 225, 230, 77, 238, 66, 67, 243, 244, 245, 95, 253, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 256, 261, 262, 264, 269, 273, 11, 12, 37, 76, 49, 205, 249, 77, 162, 267, 222, 268, -138, 96, 95, 111, 112, 113, 114, 115, 116, 117, 118, 0, 0, 0, 0, 0, 0, 0, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 0, 0, 0, 0, 0, 0, -138, 0, 150, 111, 112, 113, 114, 115, 116, 117, 118, 0, 0, 0, 0, 0, 0, 0, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 0, 206, 0, 0, 0, 0, 0, 0, 0, 0, 0, 214, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 0, 0, 0, 0, 0, 0, 0, 0, 207, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 0, 0, 0, 0, 0, 0, 0, 0, 150, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 0, 0, 0, 0, 0, 0, 0, 0, 263, 125, 126, 127, 128, 129, 130, 131, 132, 133, 148, 125, 126, 0, 128, 129, 130, 131, 132, 133, 148, 125, 126, 0, 0, 0, 130, 131, 132, 133, 148 }; static const yytype_int16 yycheck[] = { 50, 91, 11, 78, 39, 71, 39, 67, 1, 12, 76, 77, 78, 16, 51, 52, 185, 79, 11, 79, 20, 83, 11, 89, 74, 75, 92, 93, 94, 95, 105, 3, 0, 1, 36, 3, 76, 5, 6, 7, 209, 107, 79, 78, 37, 78, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131, 132, 133, 134, 78, 11, 17, 30, 139, 20, 74, 48, 30, 36, 11, 48, 83, 148, 36, 66, 67, 68, 69, 70, 11, 12, 13, 14, 15, 11, 17, 18, 19, 20, 8, 22, 73, 6, 49, 50, 37, 156, 157, 9, 31, 32, 33, 34, 35, 79, 76, 38, 11, 83, 23, 24, 67, 79, 77, 28, 29, 83, 49, 50, 76, 220, 53, 54, 78, 12, 80, 81, 10, 213, 21, 22, 231, 5, 6, 7, 67, 51, 52, 77, 71, 76, 6, 75, 219, 20, 11, 78, 13, 14, 15, 226, 17, 18, 19, 20, 17, 22, 36, 23, 24, 25, 26, 27, 28, 29, 31, 32, 33, 34, 35, 22, 11, 248, 13, 14, 15, 21, 17, 18, 19, 20, 81, 22, 4, 68, 69, 70, 51, 52, 78, 81, 31, 32, 37, 79, 11, 272, 37, 78, 22, 6, 67, 61, 62, 264, 71, 65, 66, 67, 68, 69, 70, 78, 11, 83, 13, 14, 15, 79, 17, 18, 19, 20, 11, 22, 78, 52, 67, 78, 78, 76, 71, 11, 31, 32, 17, 20, 20, 78, 11, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 68, 79, 79, 78, 17, 79, 3, 3, 32, 67, 39, 82, 231, 71, 111, 255, 185, 258, 37, 71, 78, 40, 41, 42, 43, 44, 45, 46, 47, -1, -1, -1, -1, -1, -1, -1, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, -1, -1, -1, -1, -1, -1, 37, -1, 79, 40, 41, 42, 43, 44, 45, 46, 47, -1, -1, -1, -1, -1, -1, -1, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, -1, 82, -1, -1, -1, -1, -1, -1, -1, -1, -1, 82, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, -1, -1, -1, -1, -1, -1, -1, -1, 79, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, -1, -1, -1, -1, -1, -1, -1, -1, 79, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, -1, -1, -1, -1, -1, -1, -1, -1, 79, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 61, 62, -1, 64, 65, 66, 67, 68, 69, 70, 61, 62, -1, -1, -1, 66, 67, 68, 69, 70 }; /* YYSTOS[STATE-NUM] -- The symbol kind of the accessing symbol of state STATE-NUM. */ static const yytype_uint8 yystos[] = { 0, 85, 0, 1, 3, 48, 86, 87, 93, 3, 73, 86, 87, 20, 5, 6, 7, 94, 11, 88, 76, 95, 11, 96, 74, 11, 8, 90, 76, 9, 91, 11, 97, 98, 76, 89, 77, 98, 12, 99, 100, 10, 92, 17, 20, 49, 50, 67, 77, 100, 76, 75, 17, 101, 102, 103, 11, 12, 13, 14, 15, 17, 18, 19, 20, 22, 31, 32, 33, 34, 35, 38, 49, 50, 53, 54, 67, 71, 78, 110, 113, 114, 115, 135, 136, 137, 20, 22, 21, 30, 36, 36, 81, 81, 78, 78, 135, 137, 114, 114, 137, 137, 114, 115, 137, 78, 80, 81, 51, 52, 37, 40, 41, 42, 43, 44, 45, 46, 47, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 104, 106, 108, 137, 78, 124, 124, 137, 137, 137, 137, 1, 116, 70, 79, 79, 111, 112, 115, 11, 137, 119, 118, 39, 78, 127, 131, 113, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 37, 137, 6, 23, 24, 25, 26, 27, 28, 29, 105, 6, 23, 24, 28, 29, 107, 6, 109, 137, 82, 82, 79, 11, 37, 120, 121, 79, 83, 82, 114, 114, 128, 132, 30, 36, 127, 131, 78, 78, 78, 4, 78, 126, 127, 76, 36, 83, 115, 12, 16, 129, 130, 11, 133, 134, 137, 124, 17, 20, 20, 137, 117, 78, 110, 122, 123, 124, 11, 79, 83, 68, 79, 83, 67, 79, 79, 79, 79, 78, 125, 137, 130, 134, 17, 114, 79, 83, 79, 79, 137 }; /* YYR1[RULE-NUM] -- Symbol kind of the left-hand side of rule RULE-NUM. */ static const yytype_uint8 yyr1[] = { 0, 84, 85, 85, 85, 85, 85, 85, 85, 85, 86, 88, 89, 87, 90, 90, 91, 91, 92, 93, 93, 94, 94, 95, 95, 96, 96, 97, 97, 98, 98, 98, 98, 98, 99, 99, 101, 100, 102, 100, 103, 100, 104, 104, 105, 105, 105, 105, 105, 105, 105, 105, 105, 105, 105, 105, 106, 106, 107, 107, 107, 107, 107, 108, 108, 109, 110, 110, 110, 110, 111, 111, 112, 112, 113, 114, 115, 115, 115, 115, 115, 115, 115, 115, 115, 115, 115, 115, 115, 115, 116, 117, 115, 115, 115, 115, 115, 115, 115, 115, 115, 118, 115, 119, 115, 115, 115, 115, 115, 115, 115, 115, 115, 120, 120, 121, 121, 122, 122, 123, 123, 124, 125, 125, 126, 128, 127, 127, 129, 129, 130, 130, 132, 131, 133, 133, 134, 134, 135, 135, 136, 136, 136, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137, 137 }; /* YYR2[RULE-NUM] -- Number of symbols on the right-hand side of rule RULE-NUM. */ static const yytype_int8 yyr2[] = { 0, 2, 0, 2, 2, 3, 3, 3, 2, 3, 2, 0, 0, 11, 0, 3, 0, 3, 3, 0, 2, 1, 1, 0, 2, 1, 2, 1, 2, 3, 3, 4, 3, 3, 1, 2, 0, 5, 0, 5, 0, 5, 0, 2, 1, 1, 1, 1, 1, 1, 4, 6, 1, 4, 1, 4, 0, 2, 1, 1, 1, 1, 1, 0, 2, 1, 1, 3, 4, 4, 0, 1, 1, 3, 1, 1, 1, 1, 3, 3, 3, 3, 3, 3, 3, 3, 1, 3, 3, 3, 0, 0, 9, 3, 3, 4, 4, 5, 5, 2, 2, 0, 4, 0, 4, 3, 3, 3, 3, 3, 3, 1, 3, 3, 2, 1, 3, 1, 1, 3, 1, 5, 1, 3, 1, 0, 4, 1, 1, 3, 1, 1, 0, 4, 1, 3, 1, 2, 1, 1, 1, 1, 1, 3, 1, 1, 4, 1, 1, 1, 3, 1, 4, 1, 4, 1, 1, 2, 3, 3, 3, 3, 3, 3, 3, 3, 2, 3, 3, 1 }; enum { YYENOMEM = -2 }; #define yyerrok (yyerrstatus = 0) #define yyclearin (yychar = YYEMPTY) #define YYACCEPT goto yyacceptlab #define YYABORT goto yyabortlab #define YYERROR goto yyerrorlab #define YYNOMEM goto yyexhaustedlab #define YYRECOVERING() (!!yyerrstatus) #define YYBACKUP(Token, Value) \ do \ if (yychar == YYEMPTY) \ { \ yychar = (Token); \ yylval = (Value); \ YYPOPSTACK (yylen); \ yystate = *yyssp; \ goto yybackup; \ } \ else \ { \ yyerror (yyscanner, compiler, YY_("syntax error: cannot back up")); \ YYERROR; \ } \ while (0) /* Backward compatibility with an undocumented macro. Use YYerror or YYUNDEF. */ #define YYERRCODE YYUNDEF /* Enable debugging if requested. */ #if YYDEBUG # ifndef YYFPRINTF # include /* INFRINGES ON USER NAME SPACE */ # define YYFPRINTF fprintf # endif # define YYDPRINTF(Args) \ do { \ if (yydebug) \ YYFPRINTF Args; \ } while (0) # define YY_SYMBOL_PRINT(Title, Kind, Value, Location) \ do { \ if (yydebug) \ { \ YYFPRINTF (stderr, "%s ", Title); \ yy_symbol_print (stderr, \ Kind, Value, yyscanner, compiler); \ YYFPRINTF (stderr, "\n"); \ } \ } while (0) /*-----------------------------------. | Print this symbol's value on YYO. | `-----------------------------------*/ static void yy_symbol_value_print (FILE *yyo, yysymbol_kind_t yykind, YYSTYPE const * const yyvaluep, void *yyscanner, YR_COMPILER* compiler) { FILE *yyoutput = yyo; YY_USE (yyoutput); YY_USE (yyscanner); YY_USE (compiler); if (!yyvaluep) return; YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN YY_USE (yykind); YY_IGNORE_MAYBE_UNINITIALIZED_END } /*---------------------------. | Print this symbol on YYO. | `---------------------------*/ static void yy_symbol_print (FILE *yyo, yysymbol_kind_t yykind, YYSTYPE const * const yyvaluep, void *yyscanner, YR_COMPILER* compiler) { YYFPRINTF (yyo, "%s %s (", yykind < YYNTOKENS ? "token" : "nterm", yysymbol_name (yykind)); yy_symbol_value_print (yyo, yykind, yyvaluep, yyscanner, compiler); YYFPRINTF (yyo, ")"); } /*------------------------------------------------------------------. | yy_stack_print -- Print the state stack from its BOTTOM up to its | | TOP (included). | `------------------------------------------------------------------*/ static void yy_stack_print (yy_state_t *yybottom, yy_state_t *yytop) { YYFPRINTF (stderr, "Stack now"); for (; yybottom <= yytop; yybottom++) { int yybot = *yybottom; YYFPRINTF (stderr, " %d", yybot); } YYFPRINTF (stderr, "\n"); } # define YY_STACK_PRINT(Bottom, Top) \ do { \ if (yydebug) \ yy_stack_print ((Bottom), (Top)); \ } while (0) /*------------------------------------------------. | Report that the YYRULE is going to be reduced. | `------------------------------------------------*/ static void yy_reduce_print (yy_state_t *yyssp, YYSTYPE *yyvsp, int yyrule, void *yyscanner, YR_COMPILER* compiler) { int yylno = yyrline[yyrule]; int yynrhs = yyr2[yyrule]; int yyi; YYFPRINTF (stderr, "Reducing stack by rule %d (line %d):\n", yyrule - 1, yylno); /* The symbols being reduced. */ for (yyi = 0; yyi < yynrhs; yyi++) { YYFPRINTF (stderr, " $%d = ", yyi + 1); yy_symbol_print (stderr, YY_ACCESSING_SYMBOL (+yyssp[yyi + 1 - yynrhs]), &yyvsp[(yyi + 1) - (yynrhs)], yyscanner, compiler); YYFPRINTF (stderr, "\n"); } } # define YY_REDUCE_PRINT(Rule) \ do { \ if (yydebug) \ yy_reduce_print (yyssp, yyvsp, Rule, yyscanner, compiler); \ } while (0) /* Nonzero means print parse trace. It is left uninitialized so that multiple parsers can coexist. */ int yydebug; #else /* !YYDEBUG */ # define YYDPRINTF(Args) ((void) 0) # define YY_SYMBOL_PRINT(Title, Kind, Value, Location) # define YY_STACK_PRINT(Bottom, Top) # define YY_REDUCE_PRINT(Rule) #endif /* !YYDEBUG */ /* YYINITDEPTH -- initial size of the parser's stacks. */ #ifndef YYINITDEPTH # define YYINITDEPTH 200 #endif /* YYMAXDEPTH -- maximum size the stacks can grow to (effective only if the built-in stack extension method is used). Do not make this value too large; the results are undefined if YYSTACK_ALLOC_MAXIMUM < YYSTACK_BYTES (YYMAXDEPTH) evaluated with infinite-precision integer arithmetic. */ #ifndef YYMAXDEPTH # define YYMAXDEPTH 10000 #endif /* Context of a parse error. */ typedef struct { yy_state_t *yyssp; yysymbol_kind_t yytoken; } yypcontext_t; /* Put in YYARG at most YYARGN of the expected tokens given the current YYCTX, and return the number of tokens stored in YYARG. If YYARG is null, return the number of expected tokens (guaranteed to be less than YYNTOKENS). Return YYENOMEM on memory exhaustion. Return 0 if there are more than YYARGN expected tokens, yet fill YYARG up to YYARGN. */ static int yypcontext_expected_tokens (const yypcontext_t *yyctx, yysymbol_kind_t yyarg[], int yyargn) { /* Actual size of YYARG. */ int yycount = 0; int yyn = yypact[+*yyctx->yyssp]; if (!yypact_value_is_default (yyn)) { /* Start YYX at -YYN if negative to avoid negative indexes in YYCHECK. In other words, skip the first -YYN actions for this state because they are default actions. */ int yyxbegin = yyn < 0 ? -yyn : 0; /* Stay within bounds of both yycheck and yytname. */ int yychecklim = YYLAST - yyn + 1; int yyxend = yychecklim < YYNTOKENS ? yychecklim : YYNTOKENS; int yyx; for (yyx = yyxbegin; yyx < yyxend; ++yyx) if (yycheck[yyx + yyn] == yyx && yyx != YYSYMBOL_YYerror && !yytable_value_is_error (yytable[yyx + yyn])) { if (!yyarg) ++yycount; else if (yycount == yyargn) return 0; else yyarg[yycount++] = YY_CAST (yysymbol_kind_t, yyx); } } if (yyarg && yycount == 0 && 0 < yyargn) yyarg[0] = YYSYMBOL_YYEMPTY; return yycount; } #ifndef yystrlen # if defined __GLIBC__ && defined _STRING_H # define yystrlen(S) (YY_CAST (YYPTRDIFF_T, strlen (S))) # else /* Return the length of YYSTR. */ static YYPTRDIFF_T yystrlen (const char *yystr) { YYPTRDIFF_T yylen; for (yylen = 0; yystr[yylen]; yylen++) continue; return yylen; } # endif #endif #ifndef yystpcpy # if defined __GLIBC__ && defined _STRING_H && defined _GNU_SOURCE # define yystpcpy stpcpy # else /* Copy YYSRC to YYDEST, returning the address of the terminating '\0' in YYDEST. */ static char * yystpcpy (char *yydest, const char *yysrc) { char *yyd = yydest; const char *yys = yysrc; while ((*yyd++ = *yys++) != '\0') continue; return yyd - 1; } # endif #endif #ifndef yytnamerr /* Copy to YYRES the contents of YYSTR after stripping away unnecessary quotes and backslashes, so that it's suitable for yyerror. The heuristic is that double-quoting is unnecessary unless the string contains an apostrophe, a comma, or backslash (other than backslash-backslash). YYSTR is taken from yytname. If YYRES is null, do not copy; instead, return the length of what the result would have been. */ static YYPTRDIFF_T yytnamerr (char *yyres, const char *yystr) { if (*yystr == '"') { YYPTRDIFF_T yyn = 0; char const *yyp = yystr; for (;;) switch (*++yyp) { case '\'': case ',': goto do_not_strip_quotes; case '\\': if (*++yyp != '\\') goto do_not_strip_quotes; else goto append; append: default: if (yyres) yyres[yyn] = *yyp; yyn++; break; case '"': if (yyres) yyres[yyn] = '\0'; return yyn; } do_not_strip_quotes: ; } if (yyres) return yystpcpy (yyres, yystr) - yyres; else return yystrlen (yystr); } #endif static int yy_syntax_error_arguments (const yypcontext_t *yyctx, yysymbol_kind_t yyarg[], int yyargn) { /* Actual size of YYARG. */ int yycount = 0; /* There are many possibilities here to consider: - If this state is a consistent state with a default action, then the only way this function was invoked is if the default action is an error action. In that case, don't check for expected tokens because there are none. - The only way there can be no lookahead present (in yychar) is if this state is a consistent state with a default action. Thus, detecting the absence of a lookahead is sufficient to determine that there is no unexpected or expected token to report. In that case, just report a simple "syntax error". - Don't assume there isn't a lookahead just because this state is a consistent state with a default action. There might have been a previous inconsistent state, consistent state with a non-default action, or user semantic action that manipulated yychar. - Of course, the expected token list depends on states to have correct lookahead information, and it depends on the parser not to perform extra reductions after fetching a lookahead from the scanner and before detecting a syntax error. Thus, state merging (from LALR or IELR) and default reductions corrupt the expected token list. However, the list is correct for canonical LR with one exception: it will still contain any token that will not be accepted due to an error action in a later state. */ if (yyctx->yytoken != YYSYMBOL_YYEMPTY) { int yyn; if (yyarg) yyarg[yycount] = yyctx->yytoken; ++yycount; yyn = yypcontext_expected_tokens (yyctx, yyarg ? yyarg + 1 : yyarg, yyargn - 1); if (yyn == YYENOMEM) return YYENOMEM; else yycount += yyn; } return yycount; } /* Copy into *YYMSG, which is of size *YYMSG_ALLOC, an error message about the unexpected token YYTOKEN for the state stack whose top is YYSSP. Return 0 if *YYMSG was successfully written. Return -1 if *YYMSG is not large enough to hold the message. In that case, also set *YYMSG_ALLOC to the required number of bytes. Return YYENOMEM if the required number of bytes is too large to store. */ static int yysyntax_error (YYPTRDIFF_T *yymsg_alloc, char **yymsg, const yypcontext_t *yyctx) { enum { YYARGS_MAX = 5 }; /* Internationalized format string. */ const char *yyformat = YY_NULLPTR; /* Arguments of yyformat: reported tokens (one for the "unexpected", one per "expected"). */ yysymbol_kind_t yyarg[YYARGS_MAX]; /* Cumulated lengths of YYARG. */ YYPTRDIFF_T yysize = 0; /* Actual size of YYARG. */ int yycount = yy_syntax_error_arguments (yyctx, yyarg, YYARGS_MAX); if (yycount == YYENOMEM) return YYENOMEM; switch (yycount) { #define YYCASE_(N, S) \ case N: \ yyformat = S; \ break default: /* Avoid compiler warnings. */ YYCASE_(0, YY_("syntax error")); YYCASE_(1, YY_("syntax error, unexpected %s")); YYCASE_(2, YY_("syntax error, unexpected %s, expecting %s")); YYCASE_(3, YY_("syntax error, unexpected %s, expecting %s or %s")); YYCASE_(4, YY_("syntax error, unexpected %s, expecting %s or %s or %s")); YYCASE_(5, YY_("syntax error, unexpected %s, expecting %s or %s or %s or %s")); #undef YYCASE_ } /* Compute error message size. Don't count the "%s"s, but reserve room for the terminator. */ yysize = yystrlen (yyformat) - 2 * yycount + 1; { int yyi; for (yyi = 0; yyi < yycount; ++yyi) { YYPTRDIFF_T yysize1 = yysize + yytnamerr (YY_NULLPTR, yytname[yyarg[yyi]]); if (yysize <= yysize1 && yysize1 <= YYSTACK_ALLOC_MAXIMUM) yysize = yysize1; else return YYENOMEM; } } if (*yymsg_alloc < yysize) { *yymsg_alloc = 2 * yysize; if (! (yysize <= *yymsg_alloc && *yymsg_alloc <= YYSTACK_ALLOC_MAXIMUM)) *yymsg_alloc = YYSTACK_ALLOC_MAXIMUM; return -1; } /* Avoid sprintf, as that infringes on the user's name space. Don't have undefined behavior even if the translation produced a string with the wrong number of "%s"s. */ { char *yyp = *yymsg; int yyi = 0; while ((*yyp = *yyformat) != '\0') if (*yyp == '%' && yyformat[1] == 's' && yyi < yycount) { yyp += yytnamerr (yyp, yytname[yyarg[yyi++]]); yyformat += 2; } else { ++yyp; ++yyformat; } } return 0; } /*-----------------------------------------------. | Release the memory associated to this symbol. | `-----------------------------------------------*/ static void yydestruct (const char *yymsg, yysymbol_kind_t yykind, YYSTYPE *yyvaluep, void *yyscanner, YR_COMPILER* compiler) { YY_USE (yyvaluep); YY_USE (yyscanner); YY_USE (compiler); if (!yymsg) yymsg = "Deleting"; YY_SYMBOL_PRINT (yymsg, yykind, yyvaluep, yylocationp); YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN switch (yykind) { case YYSYMBOL__IDENTIFIER_: /* "identifier" */ #line 313 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1780 "libyara/grammar.c" break; case YYSYMBOL__STRING_IDENTIFIER_: /* "string identifier" */ #line 317 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1786 "libyara/grammar.c" break; case YYSYMBOL__STRING_COUNT_: /* "string count" */ #line 314 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1792 "libyara/grammar.c" break; case YYSYMBOL__STRING_OFFSET_: /* "string offset" */ #line 315 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1798 "libyara/grammar.c" break; case YYSYMBOL__STRING_LENGTH_: /* "string length" */ #line 316 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1804 "libyara/grammar.c" break; case YYSYMBOL__STRING_IDENTIFIER_WITH_WILDCARD_: /* "string identifier with wildcard" */ #line 318 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1810 "libyara/grammar.c" break; case YYSYMBOL__TEXT_STRING_: /* "text string" */ #line 319 "libyara/grammar.y" { yr_free(((*yyvaluep).sized_string)); ((*yyvaluep).sized_string) = NULL; } #line 1816 "libyara/grammar.c" break; case YYSYMBOL__HEX_STRING_: /* "hex string" */ #line 320 "libyara/grammar.y" { yr_free(((*yyvaluep).sized_string)); ((*yyvaluep).sized_string) = NULL; } #line 1822 "libyara/grammar.c" break; case YYSYMBOL__REGEXP_: /* "regular expression" */ #line 321 "libyara/grammar.y" { yr_free(((*yyvaluep).sized_string)); ((*yyvaluep).sized_string) = NULL; } #line 1828 "libyara/grammar.c" break; case YYSYMBOL_string_modifiers: /* string_modifiers */ #line 334 "libyara/grammar.y" { if (((*yyvaluep).modifier).alphabet != NULL) { yr_free(((*yyvaluep).modifier).alphabet); ((*yyvaluep).modifier).alphabet = NULL; } } #line 1840 "libyara/grammar.c" break; case YYSYMBOL_string_modifier: /* string_modifier */ #line 326 "libyara/grammar.y" { if (((*yyvaluep).modifier).alphabet != NULL) { yr_free(((*yyvaluep).modifier).alphabet); ((*yyvaluep).modifier).alphabet = NULL; } } #line 1852 "libyara/grammar.c" break; case YYSYMBOL_arguments: /* arguments */ #line 323 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1858 "libyara/grammar.c" break; case YYSYMBOL_arguments_list: /* arguments_list */ #line 324 "libyara/grammar.y" { yr_free(((*yyvaluep).c_string)); ((*yyvaluep).c_string) = NULL; } #line 1864 "libyara/grammar.c" break; default: break; } YY_IGNORE_MAYBE_UNINITIALIZED_END } /*----------. | yyparse. | `----------*/ int yyparse (void *yyscanner, YR_COMPILER* compiler) { /* Lookahead token kind. */ int yychar; /* The semantic value of the lookahead symbol. */ /* Default value used for initialization, for pacifying older GCCs or non-GCC compilers. */ YY_INITIAL_VALUE (static YYSTYPE yyval_default;) YYSTYPE yylval YY_INITIAL_VALUE (= yyval_default); /* Number of syntax errors so far. */ int yynerrs = 0; yy_state_fast_t yystate = 0; /* Number of tokens to shift before error messages enabled. */ int yyerrstatus = 0; /* Refer to the stacks through separate pointers, to allow yyoverflow to reallocate them elsewhere. */ /* Their size. */ YYPTRDIFF_T yystacksize = YYINITDEPTH; /* The state stack: array, bottom, top. */ yy_state_t yyssa[YYINITDEPTH]; yy_state_t *yyss = yyssa; yy_state_t *yyssp = yyss; /* The semantic value stack: array, bottom, top. */ YYSTYPE yyvsa[YYINITDEPTH]; YYSTYPE *yyvs = yyvsa; YYSTYPE *yyvsp = yyvs; int yyn; /* The return value of yyparse. */ int yyresult; /* Lookahead symbol kind. */ yysymbol_kind_t yytoken = YYSYMBOL_YYEMPTY; /* The variables used to return semantic value and location from the action routines. */ YYSTYPE yyval; /* Buffer for error messages, and its allocated size. */ char yymsgbuf[128]; char *yymsg = yymsgbuf; YYPTRDIFF_T yymsg_alloc = sizeof yymsgbuf; #define YYPOPSTACK(N) (yyvsp -= (N), yyssp -= (N)) /* The number of symbols on the RHS of the reduced rule. Keep to zero when no symbol should be popped. */ int yylen = 0; YYDPRINTF ((stderr, "Starting parse\n")); yychar = YYEMPTY; /* Cause a token to be read. */ goto yysetstate; /*------------------------------------------------------------. | yynewstate -- push a new state, which is found in yystate. | `------------------------------------------------------------*/ yynewstate: /* In all cases, when you get here, the value and location stacks have just been pushed. So pushing a state here evens the stacks. */ yyssp++; /*--------------------------------------------------------------------. | yysetstate -- set current state (the top of the stack) to yystate. | `--------------------------------------------------------------------*/ yysetstate: YYDPRINTF ((stderr, "Entering state %d\n", yystate)); YY_ASSERT (0 <= yystate && yystate < YYNSTATES); YY_IGNORE_USELESS_CAST_BEGIN *yyssp = YY_CAST (yy_state_t, yystate); YY_IGNORE_USELESS_CAST_END YY_STACK_PRINT (yyss, yyssp); if (yyss + yystacksize - 1 <= yyssp) #if !defined yyoverflow && !defined YYSTACK_RELOCATE YYNOMEM; #else { /* Get the current used size of the three stacks, in elements. */ YYPTRDIFF_T yysize = yyssp - yyss + 1; # if defined yyoverflow { /* Give user a chance to reallocate the stack. Use copies of these so that the &'s don't force the real ones into memory. */ yy_state_t *yyss1 = yyss; YYSTYPE *yyvs1 = yyvs; /* Each stack pointer address is followed by the size of the data in use in that stack, in bytes. This used to be a conditional around just the two extra args, but that might be undefined if yyoverflow is a macro. */ yyoverflow (YY_("memory exhausted"), &yyss1, yysize * YYSIZEOF (*yyssp), &yyvs1, yysize * YYSIZEOF (*yyvsp), &yystacksize); yyss = yyss1; yyvs = yyvs1; } # else /* defined YYSTACK_RELOCATE */ /* Extend the stack our own way. */ if (YYMAXDEPTH <= yystacksize) YYNOMEM; yystacksize *= 2; if (YYMAXDEPTH < yystacksize) yystacksize = YYMAXDEPTH; { yy_state_t *yyss1 = yyss; union yyalloc *yyptr = YY_CAST (union yyalloc *, YYSTACK_ALLOC (YY_CAST (YYSIZE_T, YYSTACK_BYTES (yystacksize)))); if (! yyptr) YYNOMEM; YYSTACK_RELOCATE (yyss_alloc, yyss); YYSTACK_RELOCATE (yyvs_alloc, yyvs); # undef YYSTACK_RELOCATE if (yyss1 != yyssa) YYSTACK_FREE (yyss1); } # endif yyssp = yyss + yysize - 1; yyvsp = yyvs + yysize - 1; YY_IGNORE_USELESS_CAST_BEGIN YYDPRINTF ((stderr, "Stack size increased to %ld\n", YY_CAST (long, yystacksize))); YY_IGNORE_USELESS_CAST_END if (yyss + yystacksize - 1 <= yyssp) YYABORT; } #endif /* !defined yyoverflow && !defined YYSTACK_RELOCATE */ if (yystate == YYFINAL) YYACCEPT; goto yybackup; /*-----------. | yybackup. | `-----------*/ yybackup: /* Do appropriate processing given the current state. Read a lookahead token if we need one and don't already have one. */ /* First try to decide what to do without reference to lookahead token. */ yyn = yypact[yystate]; if (yypact_value_is_default (yyn)) goto yydefault; /* Not known => get a lookahead token if don't already have one. */ /* YYCHAR is either empty, or end-of-input, or a valid lookahead. */ if (yychar == YYEMPTY) { YYDPRINTF ((stderr, "Reading a token\n")); yychar = yylex (&yylval, yyscanner, compiler); } if (yychar <= _END_OF_FILE_) { yychar = _END_OF_FILE_; yytoken = YYSYMBOL_YYEOF; YYDPRINTF ((stderr, "Now at end of input.\n")); } else if (yychar == YYerror) { /* The scanner already issued an error message, process directly to error recovery. But do not keep the error token as lookahead, it is too special and may lead us to an endless loop in error recovery. */ yychar = YYUNDEF; yytoken = YYSYMBOL_YYerror; goto yyerrlab1; } else { yytoken = YYTRANSLATE (yychar); YY_SYMBOL_PRINT ("Next token is", yytoken, &yylval, &yylloc); } /* If the proper action on seeing token YYTOKEN is to reduce or to detect an error, take that action. */ yyn += yytoken; if (yyn < 0 || YYLAST < yyn || yycheck[yyn] != yytoken) goto yydefault; yyn = yytable[yyn]; if (yyn <= 0) { if (yytable_value_is_error (yyn)) goto yyerrlab; yyn = -yyn; goto yyreduce; } /* Count tokens shifted since error; after three, turn off error status. */ if (yyerrstatus) yyerrstatus--; /* Shift the lookahead token. */ YY_SYMBOL_PRINT ("Shifting", yytoken, &yylval, &yylloc); yystate = yyn; YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN *++yyvsp = yylval; YY_IGNORE_MAYBE_UNINITIALIZED_END /* Discard the shifted token. */ yychar = YYEMPTY; goto yynewstate; /*-----------------------------------------------------------. | yydefault -- do the default action for the current state. | `-----------------------------------------------------------*/ yydefault: yyn = yydefact[yystate]; if (yyn == 0) goto yyerrlab; goto yyreduce; /*-----------------------------. | yyreduce -- do a reduction. | `-----------------------------*/ yyreduce: /* yyn is the number of a rule to reduce with. */ yylen = yyr2[yyn]; /* If YYLEN is nonzero, implement the default value of the action: '$$ = $1'. Otherwise, the following line sets YYVAL to garbage. This behavior is undocumented and Bison users should not rely upon it. Assigning to YYVAL unconditionally makes the parser a bit smaller, and it avoids a GCC warning that YYVAL may be used uninitialized. */ yyval = yyvsp[1-yylen]; YY_REDUCE_PRINT (yyn); switch (yyn) { case 8: /* rules: rules "end of included file" */ #line 369 "libyara/grammar.y" { _yr_compiler_pop_file_name(compiler); } #line 2145 "libyara/grammar.c" break; case 9: /* rules: rules error "end of included file" */ #line 373 "libyara/grammar.y" { _yr_compiler_pop_file_name(compiler); } #line 2153 "libyara/grammar.c" break; case 10: /* import: "" "text string" */ #line 381 "libyara/grammar.y" { int result = yr_parser_reduce_import(yyscanner, (yyvsp[0].sized_string)); yr_free((yyvsp[0].sized_string)); fail_if_error(result); } #line 2165 "libyara/grammar.c" break; case 11: /* @1: %empty */ #line 393 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_rule_declaration_phase_1( yyscanner, (int32_t) (yyvsp[-2].integer), (yyvsp[0].c_string), &(yyval.rule))); } #line 2174 "libyara/grammar.c" break; case 12: /* $@2: %empty */ #line 398 "libyara/grammar.y" { YR_RULE* rule = (YR_RULE*) yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[-4].rule)); rule->tags = (char*) yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[-3].tag)); rule->metas = (YR_META*) yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[-1].meta)); rule->strings = (YR_STRING*) yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[0].string)); } #line 2192 "libyara/grammar.c" break; case 13: /* rule: rule_modifiers "" "identifier" @1 tags '{' meta strings $@2 condition '}' */ #line 412 "libyara/grammar.y" { YR_RULE* rule = (YR_RULE*) yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[-7].rule)); rule->required_strings = (yyvsp[-1].expression).required_strings.count; int result = yr_parser_reduce_rule_declaration_phase_2( yyscanner, &(yyvsp[-7].rule)); // rule created in phase 1 yr_free((yyvsp[-8].c_string)); fail_if_error(result); } #line 2209 "libyara/grammar.c" break; case 14: /* meta: %empty */ #line 429 "libyara/grammar.y" { (yyval.meta) = YR_ARENA_NULL_REF; } #line 2217 "libyara/grammar.c" break; case 15: /* meta: "" ':' meta_declarations */ #line 433 "libyara/grammar.y" { YR_META* meta = yr_arena_get_ptr( compiler->arena, YR_METAS_TABLE, (compiler->current_meta_idx - 1) * sizeof(YR_META)); meta->flags |= META_FLAGS_LAST_IN_RULE; (yyval.meta) = (yyvsp[0].meta); } #line 2232 "libyara/grammar.c" break; case 16: /* strings: %empty */ #line 448 "libyara/grammar.y" { (yyval.string) = YR_ARENA_NULL_REF; } #line 2240 "libyara/grammar.c" break; case 17: /* strings: "" ':' string_declarations */ #line 452 "libyara/grammar.y" { YR_STRING* string = (YR_STRING*) yr_arena_get_ptr( compiler->arena, YR_STRINGS_TABLE, (compiler->current_string_idx - 1) * sizeof(YR_STRING)); string->flags |= STRING_FLAGS_LAST_IN_RULE; (yyval.string) = (yyvsp[0].string); } #line 2255 "libyara/grammar.c" break; case 18: /* condition: "" ':' boolean_expression */ #line 467 "libyara/grammar.y" { (yyval.expression) = (yyvsp[0].expression); } #line 2263 "libyara/grammar.c" break; case 19: /* rule_modifiers: %empty */ #line 474 "libyara/grammar.y" { (yyval.integer) = 0; } #line 2269 "libyara/grammar.c" break; case 20: /* rule_modifiers: rule_modifiers rule_modifier */ #line 475 "libyara/grammar.y" { (yyval.integer) = (yyvsp[-1].integer) | (yyvsp[0].integer); } #line 2275 "libyara/grammar.c" break; case 21: /* rule_modifier: "" */ #line 480 "libyara/grammar.y" { (yyval.integer) = RULE_FLAGS_PRIVATE; } #line 2281 "libyara/grammar.c" break; case 22: /* rule_modifier: "" */ #line 481 "libyara/grammar.y" { (yyval.integer) = RULE_FLAGS_GLOBAL; } #line 2287 "libyara/grammar.c" break; case 23: /* tags: %empty */ #line 487 "libyara/grammar.y" { (yyval.tag) = YR_ARENA_NULL_REF; } #line 2295 "libyara/grammar.c" break; case 24: /* tags: ':' tag_list */ #line 491 "libyara/grammar.y" { // Tags list is represented in the arena as a sequence // of null-terminated strings, the sequence ends with an // additional null character. Here we write the ending null //character. Example: tag1\0tag2\0tag3\0\0 fail_if_error(yr_arena_write_string( yyget_extra(yyscanner)->arena, YR_SZ_POOL, "", NULL)); (yyval.tag) = (yyvsp[0].tag); } #line 2311 "libyara/grammar.c" break; case 25: /* tag_list: "identifier" */ #line 507 "libyara/grammar.y" { int result = yr_arena_write_string( yyget_extra(yyscanner)->arena, YR_SZ_POOL, (yyvsp[0].c_string), &(yyval.tag)); yr_free((yyvsp[0].c_string)); fail_if_error(result); } #line 2324 "libyara/grammar.c" break; case 26: /* tag_list: tag_list "identifier" */ #line 516 "libyara/grammar.y" { YR_ARENA_REF ref; // Write the new tag identifier. int result = yr_arena_write_string( yyget_extra(yyscanner)->arena, YR_SZ_POOL, (yyvsp[0].c_string), &ref); yr_free((yyvsp[0].c_string)); fail_if_error(result); // Get the address for the tag identifier just written. char* new_tag = (char*) yr_arena_ref_to_ptr( compiler->arena, &ref); // Take the address of first tag's identifier in the list. char* tag = (char*) yr_arena_ref_to_ptr( compiler->arena, &(yyval.tag)); // Search for duplicated tags. Tags are written one after // the other, with zeroes in between (i.e: tag1/0tag2/0tag3) // that's why can use tag < new_tag as the condition for the // loop. while (tag < new_tag) { if (strcmp(tag, new_tag) == 0) { yr_compiler_set_error_extra_info(compiler, tag); fail_with_error(ERROR_DUPLICATED_TAG_IDENTIFIER); } tag += strlen(tag) + 1; } (yyval.tag) = (yyvsp[-1].tag); } #line 2365 "libyara/grammar.c" break; case 27: /* meta_declarations: meta_declaration */ #line 557 "libyara/grammar.y" { (yyval.meta) = (yyvsp[0].meta); } #line 2371 "libyara/grammar.c" break; case 28: /* meta_declarations: meta_declarations meta_declaration */ #line 558 "libyara/grammar.y" { (yyval.meta) = (yyvsp[-1].meta); } #line 2377 "libyara/grammar.c" break; case 29: /* meta_declaration: "identifier" '=' "text string" */ #line 564 "libyara/grammar.y" { SIZED_STRING* sized_string = (yyvsp[0].sized_string); int result = yr_parser_reduce_meta_declaration( yyscanner, META_TYPE_STRING, (yyvsp[-2].c_string), sized_string->c_string, 0, &(yyval.meta)); yr_free((yyvsp[-2].c_string)); yr_free((yyvsp[0].sized_string)); fail_if_error(result); } #line 2398 "libyara/grammar.c" break; case 30: /* meta_declaration: "identifier" '=' "integer number" */ #line 581 "libyara/grammar.y" { int result = yr_parser_reduce_meta_declaration( yyscanner, META_TYPE_INTEGER, (yyvsp[-2].c_string), NULL, (yyvsp[0].integer), &(yyval.meta)); yr_free((yyvsp[-2].c_string)); fail_if_error(result); } #line 2416 "libyara/grammar.c" break; case 31: /* meta_declaration: "identifier" '=' '-' "integer number" */ #line 595 "libyara/grammar.y" { int result = yr_parser_reduce_meta_declaration( yyscanner, META_TYPE_INTEGER, (yyvsp[-3].c_string), NULL, -(yyvsp[0].integer), &(yyval.meta)); yr_free((yyvsp[-3].c_string)); fail_if_error(result); } #line 2434 "libyara/grammar.c" break; case 32: /* meta_declaration: "identifier" '=' "" */ #line 609 "libyara/grammar.y" { int result = yr_parser_reduce_meta_declaration( yyscanner, META_TYPE_BOOLEAN, (yyvsp[-2].c_string), NULL, true, &(yyval.meta)); yr_free((yyvsp[-2].c_string)); fail_if_error(result); } #line 2452 "libyara/grammar.c" break; case 33: /* meta_declaration: "identifier" '=' "" */ #line 623 "libyara/grammar.y" { int result = yr_parser_reduce_meta_declaration( yyscanner, META_TYPE_BOOLEAN, (yyvsp[-2].c_string), NULL, false, &(yyval.meta)); yr_free((yyvsp[-2].c_string)); fail_if_error(result); } #line 2470 "libyara/grammar.c" break; case 34: /* string_declarations: string_declaration */ #line 640 "libyara/grammar.y" { (yyval.string) = (yyvsp[0].string); } #line 2476 "libyara/grammar.c" break; case 35: /* string_declarations: string_declarations string_declaration */ #line 641 "libyara/grammar.y" { (yyval.string) = (yyvsp[-1].string); } #line 2482 "libyara/grammar.c" break; case 36: /* $@3: %empty */ #line 647 "libyara/grammar.y" { compiler->current_line = yyget_lineno(yyscanner); } #line 2490 "libyara/grammar.c" break; case 37: /* string_declaration: "string identifier" '=' $@3 "text string" string_modifiers */ #line 651 "libyara/grammar.y" { int result = yr_parser_reduce_string_declaration( yyscanner, (yyvsp[0].modifier), (yyvsp[-4].c_string), (yyvsp[-1].sized_string), &(yyval.string)); yr_free((yyvsp[-4].c_string)); yr_free((yyvsp[-1].sized_string)); yr_free((yyvsp[0].modifier).alphabet); fail_if_error(result); compiler->current_line = 0; } #line 2506 "libyara/grammar.c" break; case 38: /* $@4: %empty */ #line 663 "libyara/grammar.y" { compiler->current_line = yyget_lineno(yyscanner); } #line 2514 "libyara/grammar.c" break; case 39: /* string_declaration: "string identifier" '=' $@4 "regular expression" regexp_modifiers */ #line 667 "libyara/grammar.y" { int result; (yyvsp[0].modifier).flags |= STRING_FLAGS_REGEXP; result = yr_parser_reduce_string_declaration( yyscanner, (yyvsp[0].modifier), (yyvsp[-4].c_string), (yyvsp[-1].sized_string), &(yyval.string)); yr_free((yyvsp[-4].c_string)); yr_free((yyvsp[-1].sized_string)); fail_if_error(result); compiler->current_line = 0; } #line 2534 "libyara/grammar.c" break; case 40: /* $@5: %empty */ #line 683 "libyara/grammar.y" { compiler->current_line = yyget_lineno(yyscanner); } #line 2542 "libyara/grammar.c" break; case 41: /* string_declaration: "string identifier" '=' $@5 "hex string" hex_modifiers */ #line 687 "libyara/grammar.y" { int result; (yyvsp[0].modifier).flags |= STRING_FLAGS_HEXADECIMAL; result = yr_parser_reduce_string_declaration( yyscanner, (yyvsp[0].modifier), (yyvsp[-4].c_string), (yyvsp[-1].sized_string), &(yyval.string)); yr_free((yyvsp[-4].c_string)); yr_free((yyvsp[-1].sized_string)); fail_if_error(result); compiler->current_line = 0; } #line 2562 "libyara/grammar.c" break; case 42: /* string_modifiers: %empty */ #line 707 "libyara/grammar.y" { (yyval.modifier).flags = 0; (yyval.modifier).xor_min = 0; (yyval.modifier).xor_max = 0; (yyval.modifier).alphabet = NULL; } #line 2573 "libyara/grammar.c" break; case 43: /* string_modifiers: string_modifiers string_modifier */ #line 714 "libyara/grammar.y" { (yyval.modifier) = (yyvsp[-1].modifier); // Only set the xor minimum and maximum if we are dealing with the // xor modifier. If we don't check for this then we can end up with // "xor wide" resulting in whatever is on the stack for "wide" // overwriting the values for xor. if ((yyvsp[0].modifier).flags & STRING_FLAGS_XOR) { (yyval.modifier).xor_min = (yyvsp[0].modifier).xor_min; (yyval.modifier).xor_max = (yyvsp[0].modifier).xor_max; } // Only set the base64 alphabet if we are dealing with the base64 // modifier. If we don't check for this then we can end up with // "base64 ascii" resulting in whatever is on the stack for "ascii" // overwriting the values for base64. if (((yyvsp[0].modifier).flags & STRING_FLAGS_BASE64) || ((yyvsp[0].modifier).flags & STRING_FLAGS_BASE64_WIDE)) { if ((yyval.modifier).alphabet != NULL) { if (ss_compare((yyval.modifier).alphabet, (yyvsp[0].modifier).alphabet) != 0) { yr_compiler_set_error_extra_info( compiler, "can not specify multiple alphabets"); yr_free((yyvsp[0].modifier).alphabet); yr_free((yyval.modifier).alphabet); fail_with_error(ERROR_INVALID_MODIFIER); } else { yr_free((yyvsp[0].modifier).alphabet); } } else { (yyval.modifier).alphabet = (yyvsp[0].modifier).alphabet; } } if ((yyval.modifier).flags & (yyvsp[0].modifier).flags) { if ((yyval.modifier).alphabet != NULL) yr_free((yyval.modifier).alphabet); fail_with_error(ERROR_DUPLICATED_MODIFIER); } else { (yyval.modifier).flags = (yyval.modifier).flags | (yyvsp[0].modifier).flags; } } #line 2633 "libyara/grammar.c" break; case 44: /* string_modifier: "" */ #line 773 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_WIDE; } #line 2639 "libyara/grammar.c" break; case 45: /* string_modifier: "" */ #line 774 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_ASCII; } #line 2645 "libyara/grammar.c" break; case 46: /* string_modifier: "" */ #line 775 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_NO_CASE; } #line 2651 "libyara/grammar.c" break; case 47: /* string_modifier: "" */ #line 776 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_FULL_WORD; } #line 2657 "libyara/grammar.c" break; case 48: /* string_modifier: "" */ #line 777 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_PRIVATE; } #line 2663 "libyara/grammar.c" break; case 49: /* string_modifier: "" */ #line 779 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_XOR; (yyval.modifier).xor_min = 0; (yyval.modifier).xor_max = 255; } #line 2673 "libyara/grammar.c" break; case 50: /* string_modifier: "" '(' "integer number" ')' */ #line 785 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[-1].integer) < 0 || (yyvsp[-1].integer) > 255) { yr_compiler_set_error_extra_info(compiler, "invalid xor range"); result = ERROR_INVALID_MODIFIER; } fail_if_error(result); (yyval.modifier).flags = STRING_FLAGS_XOR; (yyval.modifier).xor_min = (uint8_t) (yyvsp[-1].integer); (yyval.modifier).xor_max = (uint8_t) (yyvsp[-1].integer); } #line 2693 "libyara/grammar.c" break; case 51: /* string_modifier: "" '(' "integer number" '-' "integer number" ')' */ #line 806 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[-3].integer) < 0) { yr_compiler_set_error_extra_info( compiler, "lower bound for xor range exceeded (min: 0)"); result = ERROR_INVALID_MODIFIER; } if ((yyvsp[-1].integer) > 255) { yr_compiler_set_error_extra_info( compiler, "upper bound for xor range exceeded (max: 255)"); result = ERROR_INVALID_MODIFIER; } if ((yyvsp[-3].integer) > (yyvsp[-1].integer)) { yr_compiler_set_error_extra_info( compiler, "xor lower bound exceeds upper bound"); result = ERROR_INVALID_MODIFIER; } fail_if_error(result); (yyval.modifier).flags = STRING_FLAGS_XOR; (yyval.modifier).xor_min = (uint8_t) (yyvsp[-3].integer); (yyval.modifier).xor_max = (uint8_t) (yyvsp[-1].integer); } #line 2728 "libyara/grammar.c" break; case 52: /* string_modifier: "" */ #line 837 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_BASE64; (yyval.modifier).alphabet = ss_new(DEFAULT_BASE64_ALPHABET); } #line 2737 "libyara/grammar.c" break; case 53: /* string_modifier: "" '(' "text string" ')' */ #line 842 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[-1].sized_string)->length != 64) { yr_free((yyvsp[-1].sized_string)); yr_compiler_set_error_extra_info( compiler, "length of base64 alphabet must be 64"); result = ERROR_INVALID_MODIFIER; } fail_if_error(result); (yyval.modifier).flags = STRING_FLAGS_BASE64; (yyval.modifier).alphabet = (yyvsp[-1].sized_string); } #line 2758 "libyara/grammar.c" break; case 54: /* string_modifier: "" */ #line 859 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_BASE64_WIDE; (yyval.modifier).alphabet = ss_new(DEFAULT_BASE64_ALPHABET); } #line 2767 "libyara/grammar.c" break; case 55: /* string_modifier: "" '(' "text string" ')' */ #line 864 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[-1].sized_string)->length != 64) { yr_free((yyvsp[-1].sized_string)); yr_compiler_set_error_extra_info( compiler, "length of base64 alphabet must be 64"); result = ERROR_INVALID_MODIFIER; } fail_if_error(result); (yyval.modifier).flags = STRING_FLAGS_BASE64_WIDE; (yyval.modifier).alphabet = (yyvsp[-1].sized_string); } #line 2788 "libyara/grammar.c" break; case 56: /* regexp_modifiers: %empty */ #line 883 "libyara/grammar.y" { (yyval.modifier).flags = 0; } #line 2794 "libyara/grammar.c" break; case 57: /* regexp_modifiers: regexp_modifiers regexp_modifier */ #line 885 "libyara/grammar.y" { if ((yyvsp[-1].modifier).flags & (yyvsp[0].modifier).flags) { fail_with_error(ERROR_DUPLICATED_MODIFIER); } else { (yyval.modifier).flags = (yyvsp[-1].modifier).flags | (yyvsp[0].modifier).flags; } } #line 2809 "libyara/grammar.c" break; case 58: /* regexp_modifier: "" */ #line 898 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_WIDE; } #line 2815 "libyara/grammar.c" break; case 59: /* regexp_modifier: "" */ #line 899 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_ASCII; } #line 2821 "libyara/grammar.c" break; case 60: /* regexp_modifier: "" */ #line 900 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_NO_CASE; } #line 2827 "libyara/grammar.c" break; case 61: /* regexp_modifier: "" */ #line 901 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_FULL_WORD; } #line 2833 "libyara/grammar.c" break; case 62: /* regexp_modifier: "" */ #line 902 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_PRIVATE; } #line 2839 "libyara/grammar.c" break; case 63: /* hex_modifiers: %empty */ #line 906 "libyara/grammar.y" { (yyval.modifier).flags = 0; } #line 2845 "libyara/grammar.c" break; case 64: /* hex_modifiers: hex_modifiers hex_modifier */ #line 908 "libyara/grammar.y" { if ((yyvsp[-1].modifier).flags & (yyvsp[0].modifier).flags) { fail_with_error(ERROR_DUPLICATED_MODIFIER); } else { (yyval.modifier).flags = (yyvsp[-1].modifier).flags | (yyvsp[0].modifier).flags; } } #line 2860 "libyara/grammar.c" break; case 65: /* hex_modifier: "" */ #line 921 "libyara/grammar.y" { (yyval.modifier).flags = STRING_FLAGS_PRIVATE; } #line 2866 "libyara/grammar.c" break; case 66: /* identifier: "identifier" */ #line 926 "libyara/grammar.y" { YR_EXPRESSION expr; int result = ERROR_SUCCESS; int var_index = yr_parser_lookup_loop_variable(yyscanner, (yyvsp[0].c_string), &expr); if (var_index >= 0) { // The identifier corresponds to a loop variable. result = yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_index, NULL, NULL); // The expression associated to this identifier is the same one // associated to the loop variable. (yyval.expression) = expr; } else { // Search for identifier within the global namespace, where the // externals variables reside. YR_OBJECT* object = (YR_OBJECT*) yr_hash_table_lookup( compiler->objects_table, (yyvsp[0].c_string), NULL); YR_NAMESPACE* ns = (YR_NAMESPACE*) yr_arena_get_ptr( compiler->arena, YR_NAMESPACES_TABLE, compiler->current_namespace_idx * sizeof(struct YR_NAMESPACE)); if (object == NULL) { // If not found, search within the current namespace. object = (YR_OBJECT*) yr_hash_table_lookup( compiler->objects_table, (yyvsp[0].c_string), ns->name); } if (object != NULL) { YR_ARENA_REF ref; result = _yr_compiler_store_string( compiler, (yyvsp[0].c_string), &ref); if (result == ERROR_SUCCESS) result = yr_parser_emit_with_arg_reloc( yyscanner, OP_OBJ_LOAD, yr_arena_ref_to_ptr(compiler->arena, &ref), NULL, NULL); (yyval.expression).type = EXPRESSION_TYPE_OBJECT; (yyval.expression).value.object = object; (yyval.expression).identifier.ptr = NULL; (yyval.expression).identifier.ref = ref; } else { uint32_t rule_idx = yr_hash_table_lookup_uint32( compiler->rules_table, (yyvsp[0].c_string), ns->name); if (rule_idx != UINT32_MAX) { result = yr_parser_emit_with_arg( yyscanner, OP_PUSH_RULE, rule_idx, NULL, NULL); YR_RULE* rule = _yr_compiler_get_rule_by_idx(compiler, rule_idx); yr_arena_ptr_to_ref(compiler->arena, rule->identifier, &(yyval.expression).identifier.ref); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).value.integer = YR_UNDEFINED; (yyval.expression).identifier.ptr = NULL; (yyval.expression).required_strings.count = 0; } else { yr_compiler_set_error_extra_info(compiler, (yyvsp[0].c_string)); result = ERROR_UNDEFINED_IDENTIFIER; } } } yr_free((yyvsp[0].c_string)); fail_if_error(result); } #line 2966 "libyara/grammar.c" break; case 67: /* identifier: identifier '.' "identifier" */ #line 1022 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_OBJECT* field = NULL; if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_OBJECT && (yyvsp[-2].expression).value.object->type == OBJECT_TYPE_STRUCTURE) { field = yr_object_lookup_field((yyvsp[-2].expression).value.object, (yyvsp[0].c_string)); if (field != NULL) { YR_ARENA_REF ref; result = _yr_compiler_store_string( compiler, (yyvsp[0].c_string), &ref); if (result == ERROR_SUCCESS) result = yr_parser_emit_with_arg_reloc( yyscanner, OP_OBJ_FIELD, yr_arena_ref_to_ptr(compiler->arena, &ref), NULL, NULL); (yyval.expression).type = EXPRESSION_TYPE_OBJECT; (yyval.expression).value.object = field; (yyval.expression).identifier.ref = ref; (yyval.expression).identifier.ptr = NULL; } else { yr_compiler_set_error_extra_info(compiler, (yyvsp[0].c_string)); result = ERROR_INVALID_FIELD_NAME; } } else { yr_compiler_set_error_extra_info( compiler, expression_identifier((yyvsp[-2].expression))); result = ERROR_NOT_A_STRUCTURE; } yr_free((yyvsp[0].c_string)); fail_if_error(result); } #line 3018 "libyara/grammar.c" break; case 68: /* identifier: identifier '[' primary_expression ']' */ #line 1070 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_OBJECT_ARRAY* array; YR_OBJECT_DICTIONARY* dict; if ((yyvsp[-3].expression).type == EXPRESSION_TYPE_OBJECT && (yyvsp[-3].expression).value.object->type == OBJECT_TYPE_ARRAY) { if ((yyvsp[-1].expression).type != EXPRESSION_TYPE_INTEGER) { yr_compiler_set_error_extra_info( compiler, "array indexes must be of integer type"); result = ERROR_WRONG_TYPE; } fail_if_error(result); result = yr_parser_emit( yyscanner, OP_INDEX_ARRAY, NULL); array = object_as_array((yyvsp[-3].expression).value.object); (yyval.expression).type = EXPRESSION_TYPE_OBJECT; (yyval.expression).value.object = array->prototype_item; (yyval.expression).identifier.ptr = array->identifier; (yyval.expression).identifier.ref = YR_ARENA_NULL_REF; } else if ((yyvsp[-3].expression).type == EXPRESSION_TYPE_OBJECT && (yyvsp[-3].expression).value.object->type == OBJECT_TYPE_DICTIONARY) { if ((yyvsp[-1].expression).type != EXPRESSION_TYPE_STRING) { yr_compiler_set_error_extra_info( compiler, "dictionary keys must be of string type"); result = ERROR_WRONG_TYPE; } fail_if_error(result); result = yr_parser_emit( yyscanner, OP_LOOKUP_DICT, NULL); dict = object_as_dictionary((yyvsp[-3].expression).value.object); (yyval.expression).type = EXPRESSION_TYPE_OBJECT; (yyval.expression).value.object = dict->prototype_item; (yyval.expression).identifier.ptr = dict->identifier; (yyval.expression).identifier.ref = YR_ARENA_NULL_REF; } else { yr_compiler_set_error_extra_info( compiler, expression_identifier((yyvsp[-3].expression))); result = ERROR_NOT_INDEXABLE; } fail_if_error(result); } #line 3082 "libyara/grammar.c" break; case 69: /* identifier: identifier '(' arguments ')' */ #line 1131 "libyara/grammar.y" { YR_ARENA_REF ref = YR_ARENA_NULL_REF; int result = ERROR_SUCCESS; if ((yyvsp[-3].expression).type == EXPRESSION_TYPE_OBJECT && (yyvsp[-3].expression).value.object->type == OBJECT_TYPE_FUNCTION) { YR_OBJECT_FUNCTION* function = object_as_function((yyvsp[-3].expression).value.object); result = yr_parser_check_types(compiler, function, (yyvsp[-1].c_string)); if (result == ERROR_SUCCESS) result = _yr_compiler_store_string( compiler, (yyvsp[-1].c_string), &ref); if (result == ERROR_SUCCESS) result = yr_parser_emit_with_arg_reloc( yyscanner, OP_CALL, yr_arena_ref_to_ptr(compiler->arena, &ref), NULL, NULL); (yyval.expression).type = EXPRESSION_TYPE_OBJECT; (yyval.expression).value.object = function->return_obj; (yyval.expression).identifier.ref = ref; (yyval.expression).identifier.ptr = NULL; } else { yr_compiler_set_error_extra_info( compiler, expression_identifier((yyvsp[-3].expression))); result = ERROR_NOT_A_FUNCTION; } yr_free((yyvsp[-1].c_string)); fail_if_error(result); } #line 3127 "libyara/grammar.c" break; case 70: /* arguments: %empty */ #line 1175 "libyara/grammar.y" { (yyval.c_string) = yr_strdup(""); } #line 3133 "libyara/grammar.c" break; case 71: /* arguments: arguments_list */ #line 1176 "libyara/grammar.y" { (yyval.c_string) = (yyvsp[0].c_string); } #line 3139 "libyara/grammar.c" break; case 72: /* arguments_list: expression */ #line 1181 "libyara/grammar.y" { (yyval.c_string) = (char*) yr_malloc(YR_MAX_FUNCTION_ARGS + 1); if ((yyval.c_string) == NULL) fail_with_error(ERROR_INSUFFICIENT_MEMORY); switch((yyvsp[0].expression).type) { case EXPRESSION_TYPE_INTEGER: strlcpy((yyval.c_string), "i", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_FLOAT: strlcpy((yyval.c_string), "f", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_BOOLEAN: strlcpy((yyval.c_string), "b", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_STRING: strlcpy((yyval.c_string), "s", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_REGEXP: strlcpy((yyval.c_string), "r", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_UNKNOWN: yr_free((yyval.c_string)); yr_compiler_set_error_extra_info( compiler, "unknown type for argument 1 in function call"); fail_with_error(ERROR_WRONG_TYPE); break; default: // An unknown expression type is OK iff an error ocurred. assert(compiler->last_error != ERROR_SUCCESS); } } #line 3178 "libyara/grammar.c" break; case 73: /* arguments_list: arguments_list ',' expression */ #line 1216 "libyara/grammar.y" { int result = ERROR_SUCCESS; if (strlen((yyvsp[-2].c_string)) == YR_MAX_FUNCTION_ARGS) { result = ERROR_TOO_MANY_ARGUMENTS; } else { switch((yyvsp[0].expression).type) { case EXPRESSION_TYPE_INTEGER: strlcat((yyvsp[-2].c_string), "i", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_FLOAT: strlcat((yyvsp[-2].c_string), "f", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_BOOLEAN: strlcat((yyvsp[-2].c_string), "b", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_STRING: strlcat((yyvsp[-2].c_string), "s", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_REGEXP: strlcat((yyvsp[-2].c_string), "r", YR_MAX_FUNCTION_ARGS); break; case EXPRESSION_TYPE_UNKNOWN: result = ERROR_WRONG_TYPE; yr_compiler_set_error_extra_info_fmt( compiler, "unknown type for argument %zu in function call", // As we add one character per argument, the length of $1 is // the number of arguments parsed so far, and the argument // represented by is length of $1 plus one. strlen((yyvsp[-2].c_string)) + 1); break; default: // An unknown expression type is OK iff an error ocurred. assert(compiler->last_error != ERROR_SUCCESS); } } if (result != ERROR_SUCCESS) yr_free((yyvsp[-2].c_string)); fail_if_error(result); (yyval.c_string) = (yyvsp[-2].c_string); } #line 3231 "libyara/grammar.c" break; case 74: /* regexp: "regular expression" */ #line 1269 "libyara/grammar.y" { YR_ARENA_REF re_ref; RE_ERROR error; int result = ERROR_SUCCESS; int re_flags = 0; int parser_flags = RE_PARSER_FLAG_NONE; if ((yyvsp[0].sized_string)->flags & SIZED_STRING_FLAGS_NO_CASE) re_flags |= RE_FLAGS_NO_CASE; if ((yyvsp[0].sized_string)->flags & SIZED_STRING_FLAGS_DOT_ALL) re_flags |= RE_FLAGS_DOT_ALL; if (compiler->strict_escape) parser_flags |= RE_PARSER_FLAG_ENABLE_STRICT_ESCAPE_SEQUENCES; result = yr_re_compile( (yyvsp[0].sized_string)->c_string, re_flags, parser_flags, compiler->arena, &re_ref, &error); yr_free((yyvsp[0].sized_string)); if (result == ERROR_INVALID_REGULAR_EXPRESSION) yr_compiler_set_error_extra_info(compiler, error.message); if (result == ERROR_SUCCESS || result == ERROR_UNKNOWN_ESCAPE_SEQUENCE) { if (result == ERROR_UNKNOWN_ESCAPE_SEQUENCE) { yywarning( yyscanner, "unknown escape sequence"); } result = yr_parser_emit_with_arg_reloc( yyscanner, OP_PUSH, yr_arena_ref_to_ptr(compiler->arena, &re_ref), NULL, NULL); } fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_REGEXP; } #line 3286 "libyara/grammar.c" break; case 75: /* boolean_expression: expression */ #line 1324 "libyara/grammar.y" { if ((yyvsp[0].expression).type == EXPRESSION_TYPE_STRING) { if (!YR_ARENA_IS_NULL_REF((yyvsp[0].expression).value.sized_string_ref)) { SIZED_STRING* sized_string = yr_arena_ref_to_ptr( compiler->arena, &(yyvsp[0].expression).value.sized_string_ref); yywarning(yyscanner, "using literal string \"%s\" in a boolean operation.", sized_string->c_string); } fail_if_error(yr_parser_emit( yyscanner, OP_STR_TO_BOOL, NULL)); } if ((yyvsp[0].expression).type != EXPRESSION_TYPE_BOOLEAN) { (yyval.expression).required_strings.count = 0; } else { (yyval.expression).required_strings.count = (yyvsp[0].expression).required_strings.count; } (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3318 "libyara/grammar.c" break; case 76: /* expression: "" */ #line 1355 "libyara/grammar.y" { fail_if_error(yr_parser_emit_push_const(yyscanner, 1)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3329 "libyara/grammar.c" break; case 77: /* expression: "" */ #line 1362 "libyara/grammar.y" { fail_if_error(yr_parser_emit_push_const(yyscanner, 0)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3340 "libyara/grammar.c" break; case 78: /* expression: primary_expression "" regexp */ #line 1369 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "matches"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_REGEXP, "matches"); fail_if_error(yr_parser_emit( yyscanner, OP_MATCHES, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3357 "libyara/grammar.c" break; case 79: /* expression: primary_expression "" primary_expression */ #line 1382 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "contains"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "contains"); fail_if_error(yr_parser_emit( yyscanner, OP_CONTAINS, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3372 "libyara/grammar.c" break; case 80: /* expression: primary_expression "" primary_expression */ #line 1393 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "icontains"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "icontains"); fail_if_error(yr_parser_emit( yyscanner, OP_ICONTAINS, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3387 "libyara/grammar.c" break; case 81: /* expression: primary_expression "" primary_expression */ #line 1404 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "startswith"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "startswith"); fail_if_error(yr_parser_emit( yyscanner, OP_STARTSWITH, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3402 "libyara/grammar.c" break; case 82: /* expression: primary_expression "" primary_expression */ #line 1415 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "istartswith"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "istartswith"); fail_if_error(yr_parser_emit( yyscanner, OP_ISTARTSWITH, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3417 "libyara/grammar.c" break; case 83: /* expression: primary_expression "" primary_expression */ #line 1426 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "endswith"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "endswith"); fail_if_error(yr_parser_emit( yyscanner, OP_ENDSWITH, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3432 "libyara/grammar.c" break; case 84: /* expression: primary_expression "" primary_expression */ #line 1437 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "iendswith"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "iendswith"); fail_if_error(yr_parser_emit( yyscanner, OP_IENDSWITH, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3447 "libyara/grammar.c" break; case 85: /* expression: primary_expression "" primary_expression */ #line 1448 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_STRING, "iequals"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_STRING, "iequals"); fail_if_error(yr_parser_emit( yyscanner, OP_IEQUALS, NULL)); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3462 "libyara/grammar.c" break; case 86: /* expression: "string identifier" */ #line 1459 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[0].c_string), OP_FOUND, YR_UNDEFINED); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 1; } #line 3481 "libyara/grammar.c" break; case 87: /* expression: "string identifier" "" primary_expression */ #line 1474 "libyara/grammar.y" { int result; check_type_with_cleanup((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "at", yr_free((yyvsp[-2].c_string))); result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[-2].c_string), OP_FOUND_AT, (yyvsp[0].expression).value.integer); yr_free((yyvsp[-2].c_string)); fail_if_error(result); (yyval.expression).required_strings.count = 1; (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3501 "libyara/grammar.c" break; case 88: /* expression: "string identifier" "" range */ #line 1490 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[-2].c_string), OP_FOUND_IN, YR_UNDEFINED); yr_free((yyvsp[-2].c_string)); fail_if_error(result); (yyval.expression).required_strings.count = 1; (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3517 "libyara/grammar.c" break; case 89: /* expression: "" for_expression error */ #line 1502 "libyara/grammar.y" { // Free all the loop variable identifiers, including the variables for // the current loop (represented by loop_index), and set loop_index to // -1. This is OK even if we have nested loops. If an error occurs while // parsing the inner loop, it will be propagated to the outer loop // anyways, so it's safe to do this cleanup while processing the error // for the inner loop. for (int i = 0; i <= compiler->loop_index; i++) { loop_vars_cleanup(i); } compiler->loop_index = -1; YYERROR; } #line 3538 "libyara/grammar.c" break; case 90: /* $@6: %empty */ #line 1576 "libyara/grammar.y" { // var_frame is used for accessing local variables used in this loop. // All local variables are accessed using var_frame as a reference, // like var_frame + 0, var_frame + 1, etc. Here we initialize var_frame // with the correct value, which depends on the number of variables // defined by any outer loops. int var_frame; int result = ERROR_SUCCESS; if (compiler->loop_index + 1 == YR_MAX_LOOP_NESTING) result = ERROR_LOOP_NESTING_LIMIT_EXCEEDED; fail_if_error(result); compiler->loop_index++; // This loop uses internal variables besides the ones explicitly // defined by the user. compiler->loop[compiler->loop_index].vars_internal_count = \ YR_INTERNAL_LOOP_VARS; // Initialize the number of variables, this number will be incremented // as variable declaration are processed by for_variables. compiler->loop[compiler->loop_index].vars_count = 0; var_frame = _yr_compiler_get_var_frame(compiler); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_CLEAR_M, var_frame + 0, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_CLEAR_M, var_frame + 1, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_POP_M, var_frame + 2, NULL, NULL)); } #line 3580 "libyara/grammar.c" break; case 91: /* $@7: %empty */ #line 1614 "libyara/grammar.y" { YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[compiler->loop_index]; YR_FIXUP* fixup; YR_ARENA_REF loop_start_ref; YR_ARENA_REF jmp_offset_ref; int var_frame = _yr_compiler_get_var_frame(compiler); fail_if_error(yr_parser_emit( yyscanner, OP_ITER_NEXT, &loop_start_ref)); // For each variable generate an instruction that pops the value from // the stack and store it into one memory slot starting at var_frame + // YR_INTERNAL_LOOP_VARS because the first YR_INTERNAL_LOOP_VARS slots // in the frame are for the internal variables. for (int i = 0; i < loop_ctx->vars_count; i++) { fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_POP_M, var_frame + YR_INTERNAL_LOOP_VARS + i, NULL, NULL)); } fail_if_error(yr_parser_emit_with_arg_int32( yyscanner, OP_JTRUE_P, 0, // still don't know the jump offset, use 0 for now. NULL, &jmp_offset_ref)); // We still don't know the jump's target, so we push a fixup entry // in the stack, so that the jump's offset can be set once we know it. fixup = (YR_FIXUP*) yr_malloc(sizeof(YR_FIXUP)); if (fixup == NULL) fail_with_error(ERROR_INSUFFICIENT_MEMORY); fixup->ref = jmp_offset_ref; fixup->next = compiler->fixup_stack_head; compiler->fixup_stack_head = fixup; loop_ctx->start_ref = loop_start_ref; } #line 3633 "libyara/grammar.c" break; case 92: /* expression: "" for_expression $@6 for_iteration ':' $@7 '(' boolean_expression ')' */ #line 1663 "libyara/grammar.y" { int32_t jmp_offset; YR_FIXUP* fixup; YR_ARENA_REF pop_ref; int var_frame = _yr_compiler_get_var_frame(compiler); if ((yyvsp[-5].integer) == FOR_ITERATION_STRING_SET) { compiler->loop_for_of_var_index = -1; } fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_INCR_M, var_frame + 1, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_frame + 0, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_frame + 2, NULL, NULL)); fail_if_error(yr_parser_emit(yyscanner, OP_ITER_CONDITION, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_ADD_M, var_frame + 0, NULL, NULL)); jmp_offset = \ compiler->loop[compiler->loop_index].start_ref.offset - yr_arena_get_current_offset(compiler->arena, YR_CODE_SECTION); fail_if_error(yr_parser_emit_with_arg_int32( yyscanner, OP_JTRUE_P, jmp_offset, NULL, NULL)); fail_if_error(yr_parser_emit( yyscanner, OP_POP, &pop_ref)); // Pop from the stack the fixup entry containing the reference to // the jump offset that needs to be fixed. fixup = compiler->fixup_stack_head; compiler->fixup_stack_head = fixup->next; // The fixup entry has a reference to the jump offset that need // to be fixed, convert the address into a pointer. int32_t* jmp_offset_addr = (int32_t*) yr_arena_ref_to_ptr( compiler->arena, &fixup->ref); // The reference in the fixup entry points to the jump's offset // but the jump instruction is one byte before, that's why we add // one to the offset. jmp_offset = pop_ref.offset - fixup->ref.offset + 1; // Fix the jump's offset. memcpy(jmp_offset_addr, &jmp_offset, sizeof(jmp_offset)); yr_free(fixup); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_frame + 1, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_frame + 0, NULL, NULL)); fail_if_error(yr_parser_emit_with_arg( yyscanner, OP_PUSH_M, var_frame + 2, NULL, NULL)); fail_if_error(yr_parser_emit( yyscanner, OP_ITER_END, NULL)); loop_vars_cleanup(compiler->loop_index); compiler->loop_index--; (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3718 "libyara/grammar.c" break; case 93: /* expression: for_expression "" string_set */ #line 1744 "libyara/grammar.y" { if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-2].expression).value.integer > (yyvsp[0].integer)) { yywarning(yyscanner, "expression always false - requesting %" PRId64 " of %" PRId64 ".", (yyvsp[-2].expression).value.integer, (yyvsp[0].integer)); } if (((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-2].expression).value.integer > 0) || ((yyvsp[-2].expression).type == EXPRESSION_TYPE_QUANTIFIER && ((yyvsp[-2].expression).value.integer == FOR_EXPRESSION_ALL || (yyvsp[-2].expression).value.integer == FOR_EXPRESSION_ANY))) { (yyval.expression).required_strings.count = 1; } else { (yyval.expression).required_strings.count = 0; } yr_parser_emit_with_arg(yyscanner, OP_OF, OF_STRING_SET, NULL, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3745 "libyara/grammar.c" break; case 94: /* expression: for_expression "" rule_set */ #line 1767 "libyara/grammar.y" { if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-2].expression).value.integer > (yyvsp[0].integer)) { yywarning(yyscanner, "expression always false - requesting %" PRId64 " of %" PRId64 ".", (yyvsp[-2].expression).value.integer, (yyvsp[0].integer)); } yr_parser_emit_with_arg(yyscanner, OP_OF, OF_RULE_SET, NULL, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3761 "libyara/grammar.c" break; case 95: /* expression: primary_expression '%' "" string_set */ #line 1779 "libyara/grammar.y" { check_type((yyvsp[-3].expression), EXPRESSION_TYPE_INTEGER, "%"); // The value of primary_expression can be undefined because // it could be a variable for which don't know the value during // compiling time. However, if the value is defined it should be // in the range [1,100]. if (!IS_UNDEFINED((yyvsp[-3].expression).value.integer) && ((yyvsp[-3].expression).value.integer < 1 || (yyvsp[-3].expression).value.integer > 100)) { yr_compiler_set_error_extra_info( compiler, "percentage must be between 1 and 100 (inclusive)"); fail_with_error(ERROR_INVALID_PERCENTAGE); } if (!IS_UNDEFINED((yyvsp[-3].expression).value.integer)) { (yyval.expression).required_strings.count = 1; } else { (yyval.expression).required_strings.count = 0; } yr_parser_emit_with_arg(yyscanner, OP_OF_PERCENT, OF_STRING_SET, NULL, NULL); } #line 3793 "libyara/grammar.c" break; case 96: /* expression: primary_expression '%' "" rule_set */ #line 1807 "libyara/grammar.y" { check_type((yyvsp[-3].expression), EXPRESSION_TYPE_INTEGER, "%"); // The value of primary_expression can be undefined because // it could be a variable for which don't know the value during // compiling time. However, if the value is defined it should be // in the range [1,100]. if (!IS_UNDEFINED((yyvsp[-3].expression).value.integer) && ((yyvsp[-3].expression).value.integer < 1 || (yyvsp[-3].expression).value.integer > 100)) { yr_compiler_set_error_extra_info( compiler, "percentage must be between 1 and 100 (inclusive)"); fail_with_error(ERROR_INVALID_PERCENTAGE); } yr_parser_emit_with_arg(yyscanner, OP_OF_PERCENT, OF_RULE_SET, NULL, NULL); } #line 3816 "libyara/grammar.c" break; case 97: /* expression: for_expression "" string_set "" range */ #line 1826 "libyara/grammar.y" { if ((yyvsp[-4].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-4].expression).value.integer > (yyvsp[-2].integer)) { yywarning(yyscanner, "expression always false - requesting %" PRId64 " of %" PRId64 ".", (yyvsp[-4].expression).value.integer, (yyvsp[-2].integer)); } if (((yyvsp[-4].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-4].expression).value.integer > 0) || ((yyvsp[-4].expression).type == EXPRESSION_TYPE_QUANTIFIER && ((yyvsp[-4].expression).value.integer == FOR_EXPRESSION_ALL || (yyvsp[-4].expression).value.integer == FOR_EXPRESSION_ANY))) { (yyval.expression).required_strings.count = 1; } else { (yyval.expression).required_strings.count = 0; } yr_parser_emit(yyscanner, OP_OF_FOUND_IN, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3843 "libyara/grammar.c" break; case 98: /* expression: for_expression "" string_set "" primary_expression */ #line 1849 "libyara/grammar.y" { if ((yyvsp[0].expression).type != EXPRESSION_TYPE_INTEGER) { yr_compiler_set_error_extra_info(compiler, "at expression must be an integer"); fail_with_error(ERROR_INVALID_VALUE); } if ((yyvsp[-4].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-4].expression).value.integer > (yyvsp[-2].integer)) { yywarning(yyscanner, "expression always false - requesting %" PRId64 " of %" PRId64 ".", (yyvsp[-4].expression).value.integer, (yyvsp[-2].integer)); } // Both of these are warnings: // // "N of them at 0" where N > 1 // //"all of them at 0" where there is more than 1 in "them". // // This means you can do "all of them at 0" if you only have one string // defined in the set. if (((yyvsp[-4].expression).type == EXPRESSION_TYPE_INTEGER && !IS_UNDEFINED((yyvsp[-4].expression).value.integer) && (yyvsp[-4].expression).value.integer > 1) || ((yyvsp[-4].expression).type == EXPRESSION_TYPE_QUANTIFIER && (yyvsp[-4].expression).value.integer == FOR_EXPRESSION_ALL && (yyvsp[-2].integer) > 1)) { yywarning(yyscanner, "multiple strings at an offset is usually false."); } if (((yyvsp[-4].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[-4].expression).value.integer > 0) || ((yyvsp[-4].expression).type == EXPRESSION_TYPE_QUANTIFIER && ((yyvsp[-4].expression).value.integer == FOR_EXPRESSION_ALL || (yyvsp[-4].expression).value.integer == FOR_EXPRESSION_ANY))) { (yyval.expression).required_strings.count = 1; } else { (yyval.expression).required_strings.count = 0; } yr_parser_emit(yyscanner, OP_OF_FOUND_AT, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; } #line 3895 "libyara/grammar.c" break; case 99: /* expression: "" boolean_expression */ #line 1897 "libyara/grammar.y" { yr_parser_emit(yyscanner, OP_NOT, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3906 "libyara/grammar.c" break; case 100: /* expression: "" boolean_expression */ #line 1904 "libyara/grammar.y" { yr_parser_emit(yyscanner, OP_DEFINED, NULL); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 3916 "libyara/grammar.c" break; case 101: /* $@8: %empty */ #line 1910 "libyara/grammar.y" { YR_FIXUP* fixup; YR_ARENA_REF jmp_offset_ref; fail_if_error(yr_parser_emit_with_arg_int32( yyscanner, OP_JFALSE, 0, // still don't know the jump offset, use 0 for now. NULL, &jmp_offset_ref)); // Create a fixup entry for the jump and push it in the stack. fixup = (YR_FIXUP*) yr_malloc(sizeof(YR_FIXUP)); if (fixup == NULL) fail_with_error(ERROR_INSUFFICIENT_MEMORY); fixup->ref = jmp_offset_ref; fixup->next = compiler->fixup_stack_head; compiler->fixup_stack_head = fixup; } #line 3942 "libyara/grammar.c" break; case 102: /* expression: boolean_expression "" $@8 boolean_expression */ #line 1932 "libyara/grammar.y" { YR_FIXUP* fixup; fail_if_error(yr_parser_emit(yyscanner, OP_AND, NULL)); fixup = compiler->fixup_stack_head; int32_t* jmp_offset_addr = (int32_t*) yr_arena_ref_to_ptr( compiler->arena, &fixup->ref); int32_t jmp_offset = \ yr_arena_get_current_offset(compiler->arena, YR_CODE_SECTION) - fixup->ref.offset + 1; memcpy(jmp_offset_addr, &jmp_offset, sizeof(jmp_offset)); // Remove fixup from the stack. compiler->fixup_stack_head = fixup->next; yr_free(fixup); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = (yyvsp[0].expression).required_strings.count + (yyvsp[-3].expression).required_strings.count; } #line 3970 "libyara/grammar.c" break; case 103: /* $@9: %empty */ #line 1956 "libyara/grammar.y" { YR_FIXUP* fixup; YR_ARENA_REF jmp_offset_ref; fail_if_error(yr_parser_emit_with_arg_int32( yyscanner, OP_JTRUE, 0, // still don't know the jump destination, use 0 for now. NULL, &jmp_offset_ref)); fixup = (YR_FIXUP*) yr_malloc(sizeof(YR_FIXUP)); if (fixup == NULL) fail_with_error(ERROR_INSUFFICIENT_MEMORY); fixup->ref = jmp_offset_ref; fixup->next = compiler->fixup_stack_head; compiler->fixup_stack_head = fixup; } #line 3995 "libyara/grammar.c" break; case 104: /* expression: boolean_expression "" $@9 boolean_expression */ #line 1977 "libyara/grammar.y" { YR_FIXUP* fixup; fail_if_error(yr_parser_emit(yyscanner, OP_OR, NULL)); fixup = compiler->fixup_stack_head; int32_t jmp_offset = \ yr_arena_get_current_offset(compiler->arena, YR_CODE_SECTION) - fixup->ref.offset + 1; int32_t* jmp_offset_addr = (int32_t*) yr_arena_ref_to_ptr( compiler->arena, &fixup->ref); memcpy(jmp_offset_addr, &jmp_offset, sizeof(jmp_offset)); // Remove fixup from the stack. compiler->fixup_stack_head = fixup->next; yr_free(fixup); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; // Set required string count to minimum from both parts if ((yyvsp[-3].expression).required_strings.count > (yyvsp[0].expression).required_strings.count) { (yyval.expression).required_strings.count = (yyvsp[0].expression).required_strings.count; } else { (yyval.expression).required_strings.count = (yyvsp[-3].expression).required_strings.count; } } #line 4029 "libyara/grammar.c" break; case 105: /* expression: primary_expression "<" primary_expression */ #line 2007 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, "<", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4041 "libyara/grammar.c" break; case 106: /* expression: primary_expression ">" primary_expression */ #line 2015 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, ">", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4053 "libyara/grammar.c" break; case 107: /* expression: primary_expression "<=" primary_expression */ #line 2023 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, "<=", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4065 "libyara/grammar.c" break; case 108: /* expression: primary_expression ">=" primary_expression */ #line 2031 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, ">=", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4077 "libyara/grammar.c" break; case 109: /* expression: primary_expression "==" primary_expression */ #line 2039 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, "==", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4089 "libyara/grammar.c" break; case 110: /* expression: primary_expression "!=" primary_expression */ #line 2047 "libyara/grammar.y" { fail_if_error(yr_parser_reduce_operation( yyscanner, "!=", (yyvsp[-2].expression), (yyvsp[0].expression))); (yyval.expression).type = EXPRESSION_TYPE_BOOLEAN; (yyval.expression).required_strings.count = 0; } #line 4101 "libyara/grammar.c" break; case 111: /* expression: primary_expression */ #line 2055 "libyara/grammar.y" { (yyval.expression) = (yyvsp[0].expression); } #line 4109 "libyara/grammar.c" break; case 112: /* expression: '(' expression ')' */ #line 2059 "libyara/grammar.y" { (yyval.expression) = (yyvsp[-1].expression); } #line 4117 "libyara/grammar.c" break; case 113: /* for_iteration: for_variables "" iterator */ #line 2066 "libyara/grammar.y" { (yyval.integer) = FOR_ITERATION_ITERATOR; } #line 4123 "libyara/grammar.c" break; case 114: /* for_iteration: "" string_iterator */ #line 2068 "libyara/grammar.y" { int var_frame; int result = ERROR_SUCCESS; if (compiler->loop_for_of_var_index != -1) result = ERROR_NESTED_FOR_OF_LOOP; fail_if_error(result); // Simulate that we have 1 variable with string loops compiler->loop[compiler->loop_index].vars_count = 1; // Set where we can find our string in case $ is in // the body of the loop var_frame = _yr_compiler_get_var_frame(compiler); compiler->loop_for_of_var_index = var_frame + compiler->loop[compiler->loop_index].vars_internal_count; (yyval.integer) = FOR_ITERATION_STRING_SET; } #line 4148 "libyara/grammar.c" break; case 115: /* for_variables: "identifier" */ #line 2093 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[compiler->loop_index]; if (yr_parser_lookup_loop_variable(yyscanner, (yyvsp[0].c_string), NULL) >= 0) { yr_compiler_set_error_extra_info(compiler, (yyvsp[0].c_string)); yr_free((yyvsp[0].c_string)); result = ERROR_DUPLICATED_LOOP_IDENTIFIER; } fail_if_error(result); loop_ctx->vars[loop_ctx->vars_count++].identifier.ptr = (yyvsp[0].c_string); assert(loop_ctx->vars_count <= YR_MAX_LOOP_VARS); } #line 4172 "libyara/grammar.c" break; case 116: /* for_variables: for_variables ',' "identifier" */ #line 2113 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[compiler->loop_index]; if (loop_ctx->vars_count == YR_MAX_LOOP_VARS) { yr_compiler_set_error_extra_info(compiler, "too many loop variables"); yr_free((yyvsp[0].c_string)); result = ERROR_SYNTAX_ERROR; } else if (yr_parser_lookup_loop_variable(yyscanner, (yyvsp[0].c_string), NULL) >= 0) { yr_compiler_set_error_extra_info(compiler, (yyvsp[0].c_string)); yr_free((yyvsp[0].c_string)); result = ERROR_DUPLICATED_LOOP_IDENTIFIER; } fail_if_error(result); loop_ctx->vars[loop_ctx->vars_count++].identifier.ptr = (yyvsp[0].c_string); } #line 4201 "libyara/grammar.c" break; case 117: /* iterator: identifier */ #line 2141 "libyara/grammar.y" { YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[compiler->loop_index]; // Initially we assume that the identifier is from a non-iterable type, // this will change later if it's iterable. int result = ERROR_WRONG_TYPE; if ((yyvsp[0].expression).type == EXPRESSION_TYPE_OBJECT) { switch((yyvsp[0].expression).value.object->type) { case OBJECT_TYPE_ARRAY: // If iterating an array the loop must define a single variable // that will hold the current item. If a different number of // variables were defined that's an error. if (loop_ctx->vars_count == 1) { loop_ctx->vars[0].type = EXPRESSION_TYPE_OBJECT; loop_ctx->vars[0].value.object = \ object_as_array((yyvsp[0].expression).value.object)->prototype_item; result = yr_parser_emit(yyscanner, OP_ITER_START_ARRAY, NULL); } else { yr_compiler_set_error_extra_info_fmt( compiler, "iterator for \"%s\" yields a single item on each iteration" ", but the loop expects %d", expression_identifier((yyvsp[0].expression)), loop_ctx->vars_count); result = ERROR_SYNTAX_ERROR; } break; case OBJECT_TYPE_DICTIONARY: // If iterating a dictionary the loop must define exactly two // variables, one for the key and another for the value . If a // different number of variables were defined that's an error. if (loop_ctx->vars_count == 2) { loop_ctx->vars[0].type = EXPRESSION_TYPE_STRING; loop_ctx->vars[0].value.sized_string_ref = YR_ARENA_NULL_REF; loop_ctx->vars[1].type = EXPRESSION_TYPE_OBJECT; loop_ctx->vars[1].value.object = \ object_as_array((yyvsp[0].expression).value.object)->prototype_item; result = yr_parser_emit(yyscanner, OP_ITER_START_DICT, NULL); } else { yr_compiler_set_error_extra_info_fmt( compiler, "iterator for \"%s\" yields a key,value pair item on each iteration", expression_identifier((yyvsp[0].expression))); result = ERROR_SYNTAX_ERROR; } break; } } if (result == ERROR_WRONG_TYPE) { yr_compiler_set_error_extra_info_fmt( compiler, "identifier \"%s\" is not iterable", expression_identifier((yyvsp[0].expression))); } fail_if_error(result); } #line 4279 "libyara/grammar.c" break; case 118: /* iterator: set */ #line 2215 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_LOOP_CONTEXT* loop_ctx = &compiler->loop[compiler->loop_index]; if (loop_ctx->vars_count == 1) { loop_ctx->vars[0].type = (yyvsp[0].enumeration).type; if ((yyvsp[0].enumeration).type == EXPRESSION_TYPE_STRING) loop_ctx->vars[0].value.sized_string_ref = YR_ARENA_NULL_REF; else loop_ctx->vars[0].value.integer = YR_UNDEFINED; } else { yr_compiler_set_error_extra_info_fmt( compiler, "iterator yields one value on each iteration " ", but the loop expects %d", loop_ctx->vars_count); result = ERROR_SYNTAX_ERROR; } fail_if_error(result); } #line 4311 "libyara/grammar.c" break; case 119: /* set: '(' enumeration ')' */ #line 2247 "libyara/grammar.y" { // $2.count contains the number of items in the enumeration fail_if_error(yr_parser_emit_push_const(yyscanner, (yyvsp[-1].enumeration).count)); if ((yyvsp[-1].enumeration).type == EXPRESSION_TYPE_INTEGER) { fail_if_error(yr_parser_emit( yyscanner, OP_ITER_START_INT_ENUM, NULL)); } else { fail_if_error(yr_parser_emit( yyscanner, OP_ITER_START_TEXT_STRING_SET, NULL)); } (yyval.enumeration).type = (yyvsp[-1].enumeration).type; } #line 4333 "libyara/grammar.c" break; case 120: /* set: range */ #line 2265 "libyara/grammar.y" { fail_if_error(yr_parser_emit( yyscanner, OP_ITER_START_INT_RANGE, NULL)); (yyval.enumeration).type = EXPRESSION_TYPE_INTEGER; } #line 4344 "libyara/grammar.c" break; case 121: /* range: '(' primary_expression ".." primary_expression ')' */ #line 2276 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[-3].expression).type != EXPRESSION_TYPE_INTEGER) { yr_compiler_set_error_extra_info( compiler, "wrong type for range's lower bound"); result = ERROR_WRONG_TYPE; } if ((yyvsp[-1].expression).type != EXPRESSION_TYPE_INTEGER) { yr_compiler_set_error_extra_info( compiler, "wrong type for range's upper bound"); result = ERROR_WRONG_TYPE; } // If we can statically determine lower and upper bounds, ensure // lower < upper. Check for upper bound here because some things (like // string count) are EXPRESSION_TYPE_INTEGER. if ((yyvsp[-3].expression).value.integer != YR_UNDEFINED && (yyvsp[-1].expression).value.integer != YR_UNDEFINED) { if ((yyvsp[-3].expression).value.integer > (yyvsp[-1].expression).value.integer) { yr_compiler_set_error_extra_info( compiler, "range lower bound must be less than upper bound"); result = ERROR_INVALID_VALUE; } else if ((yyvsp[-3].expression).value.integer < 0) { yr_compiler_set_error_extra_info( compiler, "range lower bound can not be negative"); result = ERROR_INVALID_VALUE; } } fail_if_error(result); } #line 4387 "libyara/grammar.c" break; case 122: /* enumeration: primary_expression */ #line 2319 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[0].expression).type != EXPRESSION_TYPE_INTEGER && (yyvsp[0].expression).type != EXPRESSION_TYPE_STRING) { yr_compiler_set_error_extra_info( compiler, "wrong type for enumeration item"); result = ERROR_WRONG_TYPE; } fail_if_error(result); (yyval.enumeration).type = (yyvsp[0].expression).type; (yyval.enumeration).count = 1; } #line 4407 "libyara/grammar.c" break; case 123: /* enumeration: enumeration ',' primary_expression */ #line 2335 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[0].expression).type != (yyvsp[-2].enumeration).type) { yr_compiler_set_error_extra_info( compiler, "enumerations must be all the same type"); result = ERROR_WRONG_TYPE; } fail_if_error(result); (yyval.enumeration).type = (yyvsp[-2].enumeration).type; (yyval.enumeration).count = (yyvsp[-2].enumeration).count + 1; } #line 4427 "libyara/grammar.c" break; case 124: /* string_iterator: string_set */ #line 2355 "libyara/grammar.y" { fail_if_error(yr_parser_emit_push_const(yyscanner, (yyvsp[0].integer))); fail_if_error(yr_parser_emit(yyscanner, OP_ITER_START_STRING_SET, NULL)); } #line 4437 "libyara/grammar.c" break; case 125: /* $@10: %empty */ #line 2364 "libyara/grammar.y" { // Push end-of-list marker yr_parser_emit_push_const(yyscanner, YR_UNDEFINED); } #line 4446 "libyara/grammar.c" break; case 126: /* string_set: '(' $@10 string_enumeration ')' */ #line 2369 "libyara/grammar.y" { (yyval.integer) = (yyvsp[-1].integer); } #line 4454 "libyara/grammar.c" break; case 127: /* string_set: "" */ #line 2373 "libyara/grammar.y" { fail_if_error(yr_parser_emit_push_const(yyscanner, YR_UNDEFINED)); int count = 0; fail_if_error(yr_parser_emit_pushes_for_strings( yyscanner, "$*", &count)); (yyval.integer) = count; } #line 4468 "libyara/grammar.c" break; case 128: /* string_enumeration: string_enumeration_item */ #line 2386 "libyara/grammar.y" { (yyval.integer) = (yyvsp[0].integer); } #line 4474 "libyara/grammar.c" break; case 129: /* string_enumeration: string_enumeration ',' string_enumeration_item */ #line 2387 "libyara/grammar.y" { (yyval.integer) = (yyvsp[-2].integer) + (yyvsp[0].integer); } #line 4480 "libyara/grammar.c" break; case 130: /* string_enumeration_item: "string identifier" */ #line 2393 "libyara/grammar.y" { int count = 0; int result = yr_parser_emit_pushes_for_strings(yyscanner, (yyvsp[0].c_string), &count); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.integer) = count; } #line 4494 "libyara/grammar.c" break; case 131: /* string_enumeration_item: "string identifier with wildcard" */ #line 2403 "libyara/grammar.y" { int count = 0; int result = yr_parser_emit_pushes_for_strings(yyscanner, (yyvsp[0].c_string), &count); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.integer) = count; } #line 4508 "libyara/grammar.c" break; case 132: /* $@11: %empty */ #line 2417 "libyara/grammar.y" { // Push end-of-list marker yr_parser_emit_push_const(yyscanner, YR_UNDEFINED); } #line 4517 "libyara/grammar.c" break; case 133: /* rule_set: '(' $@11 rule_enumeration ')' */ #line 2422 "libyara/grammar.y" { (yyval.integer) = (yyvsp[-1].integer); } #line 4525 "libyara/grammar.c" break; case 134: /* rule_enumeration: rule_enumeration_item */ #line 2429 "libyara/grammar.y" { (yyval.integer) = (yyvsp[0].integer); } #line 4531 "libyara/grammar.c" break; case 135: /* rule_enumeration: rule_enumeration ',' rule_enumeration_item */ #line 2430 "libyara/grammar.y" { (yyval.integer) = (yyvsp[-2].integer) + (yyvsp[0].integer); } #line 4537 "libyara/grammar.c" break; case 136: /* rule_enumeration_item: "identifier" */ #line 2436 "libyara/grammar.y" { int result = ERROR_SUCCESS; YR_NAMESPACE* ns = (YR_NAMESPACE*) yr_arena_get_ptr( compiler->arena, YR_NAMESPACES_TABLE, compiler->current_namespace_idx * sizeof(struct YR_NAMESPACE)); uint32_t rule_idx = yr_hash_table_lookup_uint32( compiler->rules_table, (yyvsp[0].c_string), ns->name); if (rule_idx != UINT32_MAX) { result = yr_parser_emit_with_arg( yyscanner, OP_PUSH_RULE, rule_idx, NULL, NULL); } else { yr_compiler_set_error_extra_info(compiler, (yyvsp[0].c_string)); result = ERROR_UNDEFINED_IDENTIFIER; } yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.integer) = 1; } #line 4574 "libyara/grammar.c" break; case 137: /* rule_enumeration_item: "identifier" '*' */ #line 2469 "libyara/grammar.y" { int count = 0; YR_NAMESPACE* ns = (YR_NAMESPACE*) yr_arena_get_ptr( compiler->arena, YR_NAMESPACES_TABLE, compiler->current_namespace_idx * sizeof(struct YR_NAMESPACE)); yr_hash_table_add_uint32( compiler->wildcard_identifiers_table, (yyvsp[-1].c_string), ns->name, 1); int result = yr_parser_emit_pushes_for_rules(yyscanner, (yyvsp[-1].c_string), &count); yr_free((yyvsp[-1].c_string)); fail_if_error(result); (yyval.integer) = count; } #line 4599 "libyara/grammar.c" break; case 138: /* for_expression: primary_expression */ #line 2494 "libyara/grammar.y" { if ((yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER && !IS_UNDEFINED((yyvsp[0].expression).value.integer)) { if ((yyvsp[0].expression).value.integer == 0) { yywarning(yyscanner, "consider using \"none\" keyword, it is less ambiguous."); } if ((yyvsp[0].expression).value.integer < 0) { yr_compiler_set_error_extra_info_fmt(compiler, "%" PRId64, (yyvsp[0].expression).value.integer); fail_with_error(ERROR_INVALID_VALUE); } } if ((yyvsp[0].expression).type == EXPRESSION_TYPE_FLOAT) { yr_compiler_set_error_extra_info_fmt(compiler, "%a", (yyvsp[0].expression).value.double_); fail_with_error(ERROR_INVALID_VALUE); } if ((yyvsp[0].expression).type == EXPRESSION_TYPE_STRING) { SIZED_STRING* ss = yr_arena_ref_to_ptr(compiler->arena, &(yyvsp[0].expression).value.sized_string_ref); // If the expression is an external string variable we need to get // it some other way. if (ss != NULL) { yr_compiler_set_error_extra_info_fmt(compiler, "%s", ss->c_string); } else { yr_compiler_set_error_extra_info(compiler, "string in for_expression is invalid"); } fail_with_error(ERROR_INVALID_VALUE); } if ((yyvsp[0].expression).type == EXPRESSION_TYPE_REGEXP) { yr_compiler_set_error_extra_info(compiler, "regexp in for_expression is invalid"); fail_with_error(ERROR_INVALID_VALUE); } (yyval.expression).value.integer = (yyvsp[0].expression).value.integer; } #line 4659 "libyara/grammar.c" break; case 139: /* for_expression: for_quantifier */ #line 2550 "libyara/grammar.y" { (yyval.expression).value.integer = (yyvsp[0].expression).value.integer; } #line 4667 "libyara/grammar.c" break; case 140: /* for_quantifier: "" */ #line 2557 "libyara/grammar.y" { yr_parser_emit_push_const(yyscanner, YR_UNDEFINED); (yyval.expression).type = EXPRESSION_TYPE_QUANTIFIER; (yyval.expression).value.integer = FOR_EXPRESSION_ALL; } #line 4677 "libyara/grammar.c" break; case 141: /* for_quantifier: "" */ #line 2563 "libyara/grammar.y" { yr_parser_emit_push_const(yyscanner, 1); (yyval.expression).type = EXPRESSION_TYPE_QUANTIFIER; (yyval.expression).value.integer = FOR_EXPRESSION_ANY; } #line 4687 "libyara/grammar.c" break; case 142: /* for_quantifier: "" */ #line 2569 "libyara/grammar.y" { yr_parser_emit_push_const(yyscanner, 0); (yyval.expression).type = EXPRESSION_TYPE_QUANTIFIER; (yyval.expression).value.integer = FOR_EXPRESSION_NONE; } #line 4697 "libyara/grammar.c" break; case 143: /* primary_expression: '(' primary_expression ')' */ #line 2579 "libyara/grammar.y" { (yyval.expression) = (yyvsp[-1].expression); } #line 4705 "libyara/grammar.c" break; case 144: /* primary_expression: "" */ #line 2583 "libyara/grammar.y" { fail_if_error(yr_parser_emit( yyscanner, OP_FILESIZE, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4717 "libyara/grammar.c" break; case 145: /* primary_expression: "" */ #line 2591 "libyara/grammar.y" { yywarning(yyscanner, "using deprecated \"entrypoint\" keyword. Use the \"entry_point\" " "function from PE module instead."); fail_if_error(yr_parser_emit( yyscanner, OP_ENTRYPOINT, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4733 "libyara/grammar.c" break; case 146: /* primary_expression: "integer function" '(' primary_expression ')' */ #line 2603 "libyara/grammar.y" { check_type((yyvsp[-1].expression), EXPRESSION_TYPE_INTEGER, "intXXXX or uintXXXX"); // _INTEGER_FUNCTION_ could be any of int8, int16, int32, uint8, // uint32, etc. $1 contains an index that added to OP_READ_INT results // in the proper OP_INTXX opcode. fail_if_error(yr_parser_emit( yyscanner, (uint8_t) (OP_READ_INT + (yyvsp[-3].integer)), NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4751 "libyara/grammar.c" break; case 147: /* primary_expression: "integer number" */ #line 2617 "libyara/grammar.y" { fail_if_error(yr_parser_emit_push_const(yyscanner, (yyvsp[0].integer))); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = (yyvsp[0].integer); } #line 4762 "libyara/grammar.c" break; case 148: /* primary_expression: "floating point number" */ #line 2624 "libyara/grammar.y" { fail_if_error(yr_parser_emit_with_arg_double( yyscanner, OP_PUSH, (yyvsp[0].double_), NULL, NULL)); (yyval.expression).type = EXPRESSION_TYPE_FLOAT; } #line 4773 "libyara/grammar.c" break; case 149: /* primary_expression: "text string" */ #line 2631 "libyara/grammar.y" { YR_ARENA_REF ref; int result = _yr_compiler_store_data( compiler, (yyvsp[0].sized_string), (yyvsp[0].sized_string)->length + sizeof(SIZED_STRING), &ref); yr_free((yyvsp[0].sized_string)); if (result == ERROR_SUCCESS) result = yr_parser_emit_with_arg_reloc( yyscanner, OP_PUSH, yr_arena_ref_to_ptr(compiler->arena, &ref), NULL, NULL); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_STRING; (yyval.expression).value.sized_string_ref = ref; } #line 4802 "libyara/grammar.c" break; case 150: /* primary_expression: "string count" "" range */ #line 2656 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[-2].c_string), OP_COUNT_IN, YR_UNDEFINED); yr_free((yyvsp[-2].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4818 "libyara/grammar.c" break; case 151: /* primary_expression: "string count" */ #line 2668 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[0].c_string), OP_COUNT, YR_UNDEFINED); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4834 "libyara/grammar.c" break; case 152: /* primary_expression: "string offset" '[' primary_expression ']' */ #line 2680 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[-3].c_string), OP_OFFSET, YR_UNDEFINED); yr_free((yyvsp[-3].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4850 "libyara/grammar.c" break; case 153: /* primary_expression: "string offset" */ #line 2692 "libyara/grammar.y" { int result = yr_parser_emit_push_const(yyscanner, 1); if (result == ERROR_SUCCESS) result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[0].c_string), OP_OFFSET, YR_UNDEFINED); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4869 "libyara/grammar.c" break; case 154: /* primary_expression: "string length" '[' primary_expression ']' */ #line 2707 "libyara/grammar.y" { int result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[-3].c_string), OP_LENGTH, YR_UNDEFINED); yr_free((yyvsp[-3].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4885 "libyara/grammar.c" break; case 155: /* primary_expression: "string length" */ #line 2719 "libyara/grammar.y" { int result = yr_parser_emit_push_const(yyscanner, 1); if (result == ERROR_SUCCESS) result = yr_parser_reduce_string_identifier( yyscanner, (yyvsp[0].c_string), OP_LENGTH, YR_UNDEFINED); yr_free((yyvsp[0].c_string)); fail_if_error(result); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = YR_UNDEFINED; } #line 4904 "libyara/grammar.c" break; case 156: /* primary_expression: identifier */ #line 2734 "libyara/grammar.y" { int result = ERROR_SUCCESS; if ((yyvsp[0].expression).type == EXPRESSION_TYPE_OBJECT) { result = yr_parser_emit( yyscanner, OP_OBJ_VALUE, NULL); switch((yyvsp[0].expression).value.object->type) { case OBJECT_TYPE_INTEGER: (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = (yyvsp[0].expression).value.object->value.i; break; case OBJECT_TYPE_FLOAT: (yyval.expression).type = EXPRESSION_TYPE_FLOAT; break; case OBJECT_TYPE_STRING: (yyval.expression).type = EXPRESSION_TYPE_STRING; (yyval.expression).value.sized_string_ref = YR_ARENA_NULL_REF; break; default: // In a primary expression any identifier that corresponds to an // object must be of type integer, float or string. If "foobar" is // either a function, structure, dictionary or array you can not // use it as: // condition: foobar yr_compiler_set_error_extra_info_fmt( compiler, "wrong usage of identifier \"%s\"", expression_identifier((yyvsp[0].expression))); result = ERROR_WRONG_TYPE; } } else { (yyval.expression) = (yyvsp[0].expression); } fail_if_error(result); } #line 4951 "libyara/grammar.c" break; case 157: /* primary_expression: '-' primary_expression */ #line 2777 "libyara/grammar.y" { int result = ERROR_SUCCESS; check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER | EXPRESSION_TYPE_FLOAT, "-"); if ((yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER) { (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = ((yyvsp[0].expression).value.integer == YR_UNDEFINED) ? YR_UNDEFINED : -((yyvsp[0].expression).value.integer); result = yr_parser_emit(yyscanner, OP_INT_MINUS, NULL); } else if ((yyvsp[0].expression).type == EXPRESSION_TYPE_FLOAT) { (yyval.expression).type = EXPRESSION_TYPE_FLOAT; result = yr_parser_emit(yyscanner, OP_DBL_MINUS, NULL); } fail_if_error(result); } #line 4976 "libyara/grammar.c" break; case 158: /* primary_expression: primary_expression '+' primary_expression */ #line 2798 "libyara/grammar.y" { int result = yr_parser_reduce_operation( yyscanner, "+", (yyvsp[-2].expression), (yyvsp[0].expression)); if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER) { int64_t i1 = (yyvsp[-2].expression).value.integer; int64_t i2 = (yyvsp[0].expression).value.integer; if (!IS_UNDEFINED(i1) && !IS_UNDEFINED(i2) && ( (i2 > 0 && i1 > INT64_MAX - i2) || (i2 < 0 && i1 < INT64_MIN - i2) )) { yr_compiler_set_error_extra_info_fmt( compiler, "%" PRId64 " + %" PRId64, i1, i2); result = ERROR_INTEGER_OVERFLOW; } else { (yyval.expression).value.integer = OPERATION(+, i1, i2); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; } } else { (yyval.expression).type = EXPRESSION_TYPE_FLOAT; } fail_if_error(result); } #line 5015 "libyara/grammar.c" break; case 159: /* primary_expression: primary_expression '-' primary_expression */ #line 2833 "libyara/grammar.y" { int result = yr_parser_reduce_operation( yyscanner, "-", (yyvsp[-2].expression), (yyvsp[0].expression)); if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER) { int64_t i1 = (yyvsp[-2].expression).value.integer; int64_t i2 = (yyvsp[0].expression).value.integer; if (!IS_UNDEFINED(i1) && !IS_UNDEFINED(i2) && ( (i2 < 0 && i1 > INT64_MAX + i2) || (i2 > 0 && i1 < INT64_MIN + i2) )) { yr_compiler_set_error_extra_info_fmt( compiler, "%" PRId64 " - %" PRId64, i1, i2); result = ERROR_INTEGER_OVERFLOW; } else { (yyval.expression).value.integer = OPERATION(-, i1, i2); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; } } else { (yyval.expression).type = EXPRESSION_TYPE_FLOAT; } fail_if_error(result); } #line 5054 "libyara/grammar.c" break; case 160: /* primary_expression: primary_expression '*' primary_expression */ #line 2868 "libyara/grammar.y" { int result = yr_parser_reduce_operation( yyscanner, "*", (yyvsp[-2].expression), (yyvsp[0].expression)); if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER) { int64_t i1 = (yyvsp[-2].expression).value.integer; int64_t i2 = (yyvsp[0].expression).value.integer; if (!IS_UNDEFINED(i1) && !IS_UNDEFINED(i2) && ( i2 != 0 && llabs(i1) > INT64_MAX / llabs(i2) )) { yr_compiler_set_error_extra_info_fmt( compiler, "%" PRId64 " * %" PRId64, i1, i2); result = ERROR_INTEGER_OVERFLOW; } else { (yyval.expression).value.integer = OPERATION(*, i1, i2); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; } } else { (yyval.expression).type = EXPRESSION_TYPE_FLOAT; } fail_if_error(result); } #line 5092 "libyara/grammar.c" break; case 161: /* primary_expression: primary_expression '\\' primary_expression */ #line 2902 "libyara/grammar.y" { int result = yr_parser_reduce_operation( yyscanner, "\\", (yyvsp[-2].expression), (yyvsp[0].expression)); if ((yyvsp[-2].expression).type == EXPRESSION_TYPE_INTEGER && (yyvsp[0].expression).type == EXPRESSION_TYPE_INTEGER) { if ((yyvsp[0].expression).value.integer != 0) { (yyval.expression).value.integer = OPERATION(/, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; } else { result = ERROR_DIVISION_BY_ZERO; } } else { (yyval.expression).type = EXPRESSION_TYPE_FLOAT; } fail_if_error(result); } #line 5121 "libyara/grammar.c" break; case 162: /* primary_expression: primary_expression '%' primary_expression */ #line 2927 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, "%"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "%"); fail_if_error(yr_parser_emit(yyscanner, OP_MOD, NULL)); if ((yyvsp[0].expression).value.integer != 0) { (yyval.expression).value.integer = OPERATION(%, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; } else { fail_if_error(ERROR_DIVISION_BY_ZERO); } } #line 5142 "libyara/grammar.c" break; case 163: /* primary_expression: primary_expression '^' primary_expression */ #line 2944 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, "^"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "^"); fail_if_error(yr_parser_emit(yyscanner, OP_BITWISE_XOR, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = OPERATION(^, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); } #line 5156 "libyara/grammar.c" break; case 164: /* primary_expression: primary_expression '&' primary_expression */ #line 2954 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, "^"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "^"); fail_if_error(yr_parser_emit(yyscanner, OP_BITWISE_AND, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = OPERATION(&, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); } #line 5170 "libyara/grammar.c" break; case 165: /* primary_expression: primary_expression '|' primary_expression */ #line 2964 "libyara/grammar.y" { check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, "|"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "|"); fail_if_error(yr_parser_emit(yyscanner, OP_BITWISE_OR, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = OPERATION(|, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); } #line 5184 "libyara/grammar.c" break; case 166: /* primary_expression: '~' primary_expression */ #line 2974 "libyara/grammar.y" { check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "~"); fail_if_error(yr_parser_emit(yyscanner, OP_BITWISE_NOT, NULL)); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; (yyval.expression).value.integer = ((yyvsp[0].expression).value.integer == YR_UNDEFINED) ? YR_UNDEFINED : ~((yyvsp[0].expression).value.integer); } #line 5198 "libyara/grammar.c" break; case 167: /* primary_expression: primary_expression "<<" primary_expression */ #line 2984 "libyara/grammar.y" { int result; check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, "<<"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, "<<"); result = yr_parser_emit(yyscanner, OP_SHL, NULL); if (!IS_UNDEFINED((yyvsp[0].expression).value.integer) && (yyvsp[0].expression).value.integer < 0) result = ERROR_INVALID_OPERAND; else if (!IS_UNDEFINED((yyvsp[0].expression).value.integer) && (yyvsp[0].expression).value.integer >= 64) (yyval.expression).value.integer = 0; else (yyval.expression).value.integer = OPERATION(<<, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; fail_if_error(result); } #line 5222 "libyara/grammar.c" break; case 168: /* primary_expression: primary_expression ">>" primary_expression */ #line 3004 "libyara/grammar.y" { int result; check_type((yyvsp[-2].expression), EXPRESSION_TYPE_INTEGER, ">>"); check_type((yyvsp[0].expression), EXPRESSION_TYPE_INTEGER, ">>"); result = yr_parser_emit(yyscanner, OP_SHR, NULL); if (!IS_UNDEFINED((yyvsp[0].expression).value.integer) && (yyvsp[0].expression).value.integer < 0) result = ERROR_INVALID_OPERAND; else if (!IS_UNDEFINED((yyvsp[0].expression).value.integer) && (yyvsp[0].expression).value.integer >= 64) (yyval.expression).value.integer = 0; else (yyval.expression).value.integer = OPERATION(<<, (yyvsp[-2].expression).value.integer, (yyvsp[0].expression).value.integer); (yyval.expression).type = EXPRESSION_TYPE_INTEGER; fail_if_error(result); } #line 5246 "libyara/grammar.c" break; case 169: /* primary_expression: regexp */ #line 3024 "libyara/grammar.y" { (yyval.expression) = (yyvsp[0].expression); } #line 5254 "libyara/grammar.c" break; #line 5258 "libyara/grammar.c" default: break; } /* User semantic actions sometimes alter yychar, and that requires that yytoken be updated with the new translation. We take the approach of translating immediately before every use of yytoken. One alternative is translating here after every semantic action, but that translation would be missed if the semantic action invokes YYABORT, YYACCEPT, or YYERROR immediately after altering yychar or if it invokes YYBACKUP. In the case of YYABORT or YYACCEPT, an incorrect destructor might then be invoked immediately. In the case of YYERROR or YYBACKUP, subsequent parser actions might lead to an incorrect destructor call or verbose syntax error message before the lookahead is translated. */ YY_SYMBOL_PRINT ("-> $$ =", YY_CAST (yysymbol_kind_t, yyr1[yyn]), &yyval, &yyloc); YYPOPSTACK (yylen); yylen = 0; *++yyvsp = yyval; /* Now 'shift' the result of the reduction. Determine what state that goes to, based on the state we popped back to and the rule number reduced by. */ { const int yylhs = yyr1[yyn] - YYNTOKENS; const int yyi = yypgoto[yylhs] + *yyssp; yystate = (0 <= yyi && yyi <= YYLAST && yycheck[yyi] == *yyssp ? yytable[yyi] : yydefgoto[yylhs]); } goto yynewstate; /*--------------------------------------. | yyerrlab -- here on detecting error. | `--------------------------------------*/ yyerrlab: /* Make sure we have latest lookahead translation. See comments at user semantic actions for why this is necessary. */ yytoken = yychar == YYEMPTY ? YYSYMBOL_YYEMPTY : YYTRANSLATE (yychar); /* If not already recovering from an error, report this error. */ if (!yyerrstatus) { ++yynerrs; { yypcontext_t yyctx = {yyssp, yytoken}; char const *yymsgp = YY_("syntax error"); int yysyntax_error_status; yysyntax_error_status = yysyntax_error (&yymsg_alloc, &yymsg, &yyctx); if (yysyntax_error_status == 0) yymsgp = yymsg; else if (yysyntax_error_status == -1) { if (yymsg != yymsgbuf) YYSTACK_FREE (yymsg); yymsg = YY_CAST (char *, YYSTACK_ALLOC (YY_CAST (YYSIZE_T, yymsg_alloc))); if (yymsg) { yysyntax_error_status = yysyntax_error (&yymsg_alloc, &yymsg, &yyctx); yymsgp = yymsg; } else { yymsg = yymsgbuf; yymsg_alloc = sizeof yymsgbuf; yysyntax_error_status = YYENOMEM; } } yyerror (yyscanner, compiler, yymsgp); if (yysyntax_error_status == YYENOMEM) YYNOMEM; } } if (yyerrstatus == 3) { /* If just tried and failed to reuse lookahead token after an error, discard it. */ if (yychar <= _END_OF_FILE_) { /* Return failure if at end of input. */ if (yychar == _END_OF_FILE_) YYABORT; } else { yydestruct ("Error: discarding", yytoken, &yylval, yyscanner, compiler); yychar = YYEMPTY; } } /* Else will try to reuse lookahead token after shifting the error token. */ goto yyerrlab1; /*---------------------------------------------------. | yyerrorlab -- error raised explicitly by YYERROR. | `---------------------------------------------------*/ yyerrorlab: /* Pacify compilers when the user code never invokes YYERROR and the label yyerrorlab therefore never appears in user code. */ if (0) YYERROR; ++yynerrs; /* Do not reclaim the symbols of the rule whose action triggered this YYERROR. */ YYPOPSTACK (yylen); yylen = 0; YY_STACK_PRINT (yyss, yyssp); yystate = *yyssp; goto yyerrlab1; /*-------------------------------------------------------------. | yyerrlab1 -- common code for both syntax error and YYERROR. | `-------------------------------------------------------------*/ yyerrlab1: yyerrstatus = 3; /* Each real token shifted decrements this. */ /* Pop stack until we find a state that shifts the error token. */ for (;;) { yyn = yypact[yystate]; if (!yypact_value_is_default (yyn)) { yyn += YYSYMBOL_YYerror; if (0 <= yyn && yyn <= YYLAST && yycheck[yyn] == YYSYMBOL_YYerror) { yyn = yytable[yyn]; if (0 < yyn) break; } } /* Pop the current state because it cannot handle the error token. */ if (yyssp == yyss) YYABORT; yydestruct ("Error: popping", YY_ACCESSING_SYMBOL (yystate), yyvsp, yyscanner, compiler); YYPOPSTACK (1); yystate = *yyssp; YY_STACK_PRINT (yyss, yyssp); } YY_IGNORE_MAYBE_UNINITIALIZED_BEGIN *++yyvsp = yylval; YY_IGNORE_MAYBE_UNINITIALIZED_END /* Shift the error token. */ YY_SYMBOL_PRINT ("Shifting", YY_ACCESSING_SYMBOL (yyn), yyvsp, yylsp); yystate = yyn; goto yynewstate; /*-------------------------------------. | yyacceptlab -- YYACCEPT comes here. | `-------------------------------------*/ yyacceptlab: yyresult = 0; goto yyreturnlab; /*-----------------------------------. | yyabortlab -- YYABORT comes here. | `-----------------------------------*/ yyabortlab: yyresult = 1; goto yyreturnlab; /*-----------------------------------------------------------. | yyexhaustedlab -- YYNOMEM (memory exhaustion) comes here. | `-----------------------------------------------------------*/ yyexhaustedlab: yyerror (yyscanner, compiler, YY_("memory exhausted")); yyresult = 2; goto yyreturnlab; /*----------------------------------------------------------. | yyreturnlab -- parsing is finished, clean up and return. | `----------------------------------------------------------*/ yyreturnlab: if (yychar != YYEMPTY) { /* Make sure we have latest lookahead translation. See comments at user semantic actions for why this is necessary. */ yytoken = YYTRANSLATE (yychar); yydestruct ("Cleanup: discarding lookahead", yytoken, &yylval, yyscanner, compiler); } /* Do not reclaim the symbols of the rule whose action triggered this YYABORT or YYACCEPT. */ YYPOPSTACK (yylen); YY_STACK_PRINT (yyss, yyssp); while (yyssp != yyss) { yydestruct ("Cleanup: popping", YY_ACCESSING_SYMBOL (+*yyssp), yyvsp, yyscanner, compiler); YYPOPSTACK (1); } #ifndef yyoverflow if (yyss != yyssa) YYSTACK_FREE (yyss); #endif if (yymsg != yymsgbuf) YYSTACK_FREE (yymsg); return yyresult; } #line 3029 "libyara/grammar.y"