[src/netbsd-3]: src/sbin/veriexecctl Pull up revision 1.3 (requested by elad ...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7082f1394677
branches:  netbsd-3
changeset: 576088:7082f1394677
user:      tron <tron%NetBSD.org@localhost>
date:      Fri Jun 10 14:47:23 2005 +0000

description:
Pull up revision 1.3 (requested by elad in ticket #389):
Rototill of the verified exec functionality.
* We now use hash tables instead of a list to store the in kernel
fingerprints.
* Fingerprint methods handling has been made more flexible, it is now
even simpler to add new methods.
* the loader no longer passes in magic numbers representing the
fingerprint method so veriexecctl is not longer kernel specific.
* fingerprint methods can be tailored out using options in the kernel
config file.
* more fingerprint methods added - rmd160, sha256/384/512
* veriexecctl can now report the fingerprint methods supported by the
running kernel.
* regularised the naming of some portions of veriexec.

diffstat:

 sbin/veriexecctl/veriexecctl_conf.l |  124 ++++++++++++++++++++++++++---------
 1 files changed, 92 insertions(+), 32 deletions(-)

diffs (148 lines):

diff -r 68f0322856fc -r 7082f1394677 sbin/veriexecctl/veriexecctl_conf.l
--- a/sbin/veriexecctl/veriexecctl_conf.l       Fri Jun 10 14:47:17 2005 +0000
+++ b/sbin/veriexecctl/veriexecctl_conf.l       Fri Jun 10 14:47:23 2005 +0000
@@ -1,52 +1,112 @@
 %{
-/*
- * Configuration file lexer for Verified exec
+/*     $NetBSD: veriexecctl_conf.l,v 1.2.2.1 2005/06/10 14:47:23 tron Exp $    */
+
+/*-
+ * Copyright 2005 Elad Efrat <elad%bsd.org.il@localhost>
+ * Copyright 2005 Brett Lymn <blymn%netbsd.org@localhost> 
+ *
+ * All rights reserved.
+ *
+ * This code has been donated to The NetBSD Foundation by the Author.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. The name of the author may not be used to endorse or promote products
+ *    derived from this software withough specific prior written permission
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  *
  */
 
-#include <stdio.h>
-#include <string.h>
-#include "veriexecctl_parse.h"
-
-int lineno = 1;
+#include <sys/param.h>
+#include <sys/types.h>
+#include <sys/queue.h>
+#include <sys/verified_exec.h>
 
-void yyerror(const char *message);
-void warning(const char *message);
-int yylex(void);
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <err.h>
 
+#include "veriexecctl_parse.h"
+#include "veriexecctl.h"
+
+u_int64_t entries;
+char *filename;
 %}
 
+STRING         [0-9a-zA-Z]+
+
 %%
 
-path     { return PATH; }
-string   { return STRING; }
-eol      { return EOL; }
+       /* path */
+\/[^ \t]+      {
+                       yylval.string = strdup(yytext);
+                       return (PATH);
+               }
 
-\/[^   ]+  {
-       yylval.string = strdup(yytext);
-       return PATH;
-}
+       /* string (fingerprint, type, options) */
+{STRING}       {
+                       yylval.string = strdup(yytext);
+                       if (!(yylval.string)) {
+                               (void) fprintf(stderr, "WARNING: Out"
+                                   " of memory during run-time! "
+                                   "Attempting recover...\n");
+
+                               /*
+                                * Sleep a little bit and let the
+                                * machine calm down. ;)
+                                */
+                               usleep(60000);
 
-[0-9a-zA-Z]+  {
-       yylval.string = strdup(yytext);
-       return STRING;
-}
+                               yylval.string = strdup(yytext);
+                               if (!(yylval.string)) {
+                                       (void) fprintf(stderr, "ERROR:"
+                                           " No memory. Aborting.\n");
+                                       exit(1);
+                               }
+
+                               (void) fprintf(stderr, "Recovered.\n");
+                       }
+
+                       return (STRING);
+               }
+
 
-\n      {
-       lineno++;  /* for error reporting */
-       return EOL;
-}
+       /* comments, white-outs */
+[ \t\r]                |
+#.*            ;
+#.*\n          |
+^\n            { line++; }
 
-[ \t\r] ;  /* eat white ones */
+       /* eol on a line with data. need a call to ioctl, return eol */
+\n             {
+                       line++;
+                       return (EOL);
+               }
 
-#.* ;      /* comment */
-
-.    yyerror("invalid character");
+.              { yyerror("Invalid character"); }
 
 %%
 
-void yyerror(const char *string)
-{
-  fprintf(stderr, "%d: %s at %s\n", lineno, string, yytext);
+int yywrap(void) {
+       return (1);
 }
+
+void yyerror(const char *string) {
+       fprintf(stderr, "%s at \"%s\", line %d\n", string, yytext, line);
+}