chiark / gitweb /
udev: convert 'uaccess' to a builtin
[elogind.git] / src / udev / udev-rules.c
1 /*
2  * Copyright (C) 2003-2010 Kay Sievers <kay.sievers@vrfy.org>
3  * Copyright (C) 2008 Alan Jenkins <alan-jenkins@tuffmail.co.uk>
4  *
5  * This program is free software: you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License as published by
7  * the Free Software Foundation, either version 2 of the License, or
8  * (at your option) any later version.
9  *
10  * This program is distributed in the hope that it will be useful,
11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13  * GNU General Public License for more details.
14  *
15  * You should have received a copy of the GNU General Public License
16  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
17  */
18
19 #include <stddef.h>
20 #include <limits.h>
21 #include <stdlib.h>
22 #include <stdbool.h>
23 #include <string.h>
24 #include <stdio.h>
25 #include <fcntl.h>
26 #include <ctype.h>
27 #include <unistd.h>
28 #include <errno.h>
29 #include <dirent.h>
30 #include <fnmatch.h>
31 #include <time.h>
32
33 #include "udev.h"
34
35 #define PREALLOC_TOKEN          2048
36 #define PREALLOC_STRBUF         32 * 1024
37 #define PREALLOC_TRIE           256
38
39 struct uid_gid {
40         unsigned int name_off;
41         union {
42                 uid_t uid;
43                 gid_t gid;
44         };
45 };
46
47 struct trie_node {
48         /* this node's first child */
49         unsigned int child_idx;
50         /* the next child of our parent node's child list */
51         unsigned int next_child_idx;
52         /* this node's last child (shortcut for append) */
53         unsigned int last_child_idx;
54         unsigned int value_off;
55         unsigned short value_len;
56         unsigned char key;
57 };
58
59 struct udev_rules {
60         struct udev *udev;
61         int resolve_names;
62
63         /* every key in the rules file becomes a token */
64         struct token *tokens;
65         unsigned int token_cur;
66         unsigned int token_max;
67
68         /* all key strings are copied to a single string buffer */
69         char *buf;
70         size_t buf_cur;
71         size_t buf_max;
72         unsigned int buf_count;
73
74         /* during rule parsing, strings are indexed to find duplicates */
75         struct trie_node *trie_nodes;
76         unsigned int trie_nodes_cur;
77         unsigned int trie_nodes_max;
78
79         /* during rule parsing, uid/gid lookup results are cached */
80         struct uid_gid *uids;
81         unsigned int uids_cur;
82         unsigned int uids_max;
83         struct uid_gid *gids;
84         unsigned int gids_cur;
85         unsigned int gids_max;
86 };
87
88 /* KEY=="", KEY!="", KEY+="", KEY="", KEY:="" */
89 enum operation_type {
90         OP_UNSET,
91
92         OP_MATCH,
93         OP_NOMATCH,
94         OP_MATCH_MAX,
95
96         OP_ADD,
97         OP_ASSIGN,
98         OP_ASSIGN_FINAL,
99 };
100
101 enum string_glob_type {
102         GL_UNSET,
103         GL_PLAIN,                       /* no special chars */
104         GL_GLOB,                        /* shell globs ?,*,[] */
105         GL_SPLIT,                       /* multi-value A|B */
106         GL_SPLIT_GLOB,                  /* multi-value with glob A*|B* */
107         GL_SOMETHING,                   /* commonly used "?*" */
108 };
109
110 enum string_subst_type {
111         SB_UNSET,
112         SB_NONE,
113         SB_FORMAT,
114         SB_SUBSYS,
115 };
116
117 /* tokens of a rule are sorted/handled in this order */
118 enum token_type {
119         TK_UNSET,
120         TK_RULE,
121
122         TK_M_ACTION,                    /* val */
123         TK_M_DEVPATH,                   /* val */
124         TK_M_KERNEL,                    /* val */
125         TK_M_DEVLINK,                   /* val */
126         TK_M_NAME,                      /* val */
127         TK_M_ENV,                       /* val, attr */
128         TK_M_TAG,                       /* val */
129         TK_M_SUBSYSTEM,                 /* val */
130         TK_M_DRIVER,                    /* val */
131         TK_M_WAITFOR,                   /* val */
132         TK_M_ATTR,                      /* val, attr */
133
134         TK_M_PARENTS_MIN,
135         TK_M_KERNELS,                   /* val */
136         TK_M_SUBSYSTEMS,                /* val */
137         TK_M_DRIVERS,                   /* val */
138         TK_M_ATTRS,                     /* val, attr */
139         TK_M_TAGS,                      /* val */
140         TK_M_PARENTS_MAX,
141
142         TK_M_TEST,                      /* val, mode_t */
143         TK_M_EVENT_TIMEOUT,             /* int */
144         TK_M_PROGRAM,                   /* val */
145         TK_M_IMPORT_FILE,               /* val */
146         TK_M_IMPORT_PROG,               /* val */
147         TK_M_IMPORT_BUILTIN,            /* val */
148         TK_M_IMPORT_DB,                 /* val */
149         TK_M_IMPORT_CMDLINE,            /* val */
150         TK_M_IMPORT_PARENT,             /* val */
151         TK_M_RESULT,                    /* val */
152         TK_M_MAX,
153
154         TK_A_STRING_ESCAPE_NONE,
155         TK_A_STRING_ESCAPE_REPLACE,
156         TK_A_DB_PERSIST,
157         TK_A_INOTIFY_WATCH,             /* int */
158         TK_A_DEVLINK_PRIO,              /* int */
159         TK_A_OWNER,                     /* val */
160         TK_A_GROUP,                     /* val */
161         TK_A_MODE,                      /* val */
162         TK_A_OWNER_ID,                  /* uid_t */
163         TK_A_GROUP_ID,                  /* gid_t */
164         TK_A_MODE_ID,                   /* mode_t */
165         TK_A_STATIC_NODE,               /* val */
166         TK_A_ENV,                       /* val, attr */
167         TK_A_TAG,                       /* val */
168         TK_A_NAME,                      /* val */
169         TK_A_DEVLINK,                   /* val */
170         TK_A_ATTR,                      /* val, attr */
171         TK_A_RUN_BUILTIN,               /* val, bool */
172         TK_A_RUN_PROGRAM,               /* val, bool */
173         TK_A_GOTO,                      /* size_t */
174
175         TK_END,
176 };
177
178 /* we try to pack stuff in a way that we take only 12 bytes per token */
179 struct token {
180         union {
181                 unsigned char type;                /* same in rule and key */
182                 struct {
183                         enum token_type type:8;
184                         bool can_set_name:1;
185                         bool has_static_node:1;
186                         unsigned int unused:6;
187                         unsigned short token_count;
188                         unsigned int label_off;
189                         unsigned short filename_off;
190                         unsigned short filename_line;
191                 } rule;
192                 struct {
193                         enum token_type type:8;
194                         enum operation_type op:8;
195                         enum string_glob_type glob:8;
196                         enum string_subst_type subst:4;
197                         enum string_subst_type attrsubst:4;
198                         unsigned int value_off;
199                         union {
200                                 unsigned int attr_off;
201                                 int devlink_unique;
202                                 unsigned int rule_goto;
203                                 mode_t  mode;
204                                 uid_t uid;
205                                 gid_t gid;
206                                 int devlink_prio;
207                                 int event_timeout;
208                                 int watch;
209                                 enum udev_builtin_cmd builtin_cmd;
210                         };
211                 } key;
212         };
213 };
214
215 #define MAX_TK                64
216 struct rule_tmp {
217         struct udev_rules *rules;
218         struct token rule;
219         struct token token[MAX_TK];
220         unsigned int token_cur;
221 };
222
223 #ifdef DEBUG
224 static const char *operation_str(enum operation_type type)
225 {
226         static const char *operation_strs[] = {
227                 [OP_UNSET] =            "UNSET",
228                 [OP_MATCH] =            "match",
229                 [OP_NOMATCH] =          "nomatch",
230                 [OP_MATCH_MAX] =        "MATCH_MAX",
231
232                 [OP_ADD] =              "add",
233                 [OP_ASSIGN] =           "assign",
234                 [OP_ASSIGN_FINAL] =     "assign-final",
235 }        ;
236
237         return operation_strs[type];
238 }
239
240 static const char *string_glob_str(enum string_glob_type type)
241 {
242         static const char *string_glob_strs[] = {
243                 [GL_UNSET] =            "UNSET",
244                 [GL_PLAIN] =            "plain",
245                 [GL_GLOB] =             "glob",
246                 [GL_SPLIT] =            "split",
247                 [GL_SPLIT_GLOB] =       "split-glob",
248                 [GL_SOMETHING] =        "split-glob",
249         };
250
251         return string_glob_strs[type];
252 }
253
254 static const char *token_str(enum token_type type)
255 {
256         static const char *token_strs[] = {
257                 [TK_UNSET] =                    "UNSET",
258                 [TK_RULE] =                     "RULE",
259
260                 [TK_M_ACTION] =                 "M ACTION",
261                 [TK_M_DEVPATH] =                "M DEVPATH",
262                 [TK_M_KERNEL] =                 "M KERNEL",
263                 [TK_M_DEVLINK] =                "M DEVLINK",
264                 [TK_M_NAME] =                   "M NAME",
265                 [TK_M_ENV] =                    "M ENV",
266                 [TK_M_TAG] =                    "M TAG",
267                 [TK_M_SUBSYSTEM] =              "M SUBSYSTEM",
268                 [TK_M_DRIVER] =                 "M DRIVER",
269                 [TK_M_WAITFOR] =                "M WAITFOR",
270                 [TK_M_ATTR] =                   "M ATTR",
271
272                 [TK_M_PARENTS_MIN] =            "M PARENTS_MIN",
273                 [TK_M_KERNELS] =                "M KERNELS",
274                 [TK_M_SUBSYSTEMS] =             "M SUBSYSTEMS",
275                 [TK_M_DRIVERS] =                "M DRIVERS",
276                 [TK_M_ATTRS] =                  "M ATTRS",
277                 [TK_M_TAGS] =                   "M TAGS",
278                 [TK_M_PARENTS_MAX] =            "M PARENTS_MAX",
279
280                 [TK_M_TEST] =                   "M TEST",
281                 [TK_M_EVENT_TIMEOUT] =          "M EVENT_TIMEOUT",
282                 [TK_M_PROGRAM] =                "M PROGRAM",
283                 [TK_M_IMPORT_FILE] =            "M IMPORT_FILE",
284                 [TK_M_IMPORT_PROG] =            "M IMPORT_PROG",
285                 [TK_M_IMPORT_BUILTIN] =         "M IMPORT_BUILTIN",
286                 [TK_M_IMPORT_DB] =              "M IMPORT_DB",
287                 [TK_M_IMPORT_CMDLINE] =         "M IMPORT_CMDLINE",
288                 [TK_M_IMPORT_PARENT] =          "M IMPORT_PARENT",
289                 [TK_M_RESULT] =                 "M RESULT",
290                 [TK_M_MAX] =                    "M MAX",
291
292                 [TK_A_STRING_ESCAPE_NONE] =     "A STRING_ESCAPE_NONE",
293                 [TK_A_STRING_ESCAPE_REPLACE] =  "A STRING_ESCAPE_REPLACE",
294                 [TK_A_DB_PERSIST] =             "A DB_PERSIST",
295                 [TK_A_INOTIFY_WATCH] =          "A INOTIFY_WATCH",
296                 [TK_A_DEVLINK_PRIO] =           "A DEVLINK_PRIO",
297                 [TK_A_OWNER] =                  "A OWNER",
298                 [TK_A_GROUP] =                  "A GROUP",
299                 [TK_A_MODE] =                   "A MODE",
300                 [TK_A_OWNER_ID] =               "A OWNER_ID",
301                 [TK_A_GROUP_ID] =               "A GROUP_ID",
302                 [TK_A_STATIC_NODE] =            "A STATIC_NODE",
303                 [TK_A_MODE_ID] =                "A MODE_ID",
304                 [TK_A_ENV] =                    "A ENV",
305                 [TK_A_TAG] =                    "A ENV",
306                 [TK_A_NAME] =                   "A NAME",
307                 [TK_A_DEVLINK] =                "A DEVLINK",
308                 [TK_A_ATTR] =                   "A ATTR",
309                 [TK_A_RUN_BUILTIN] =            "A RUN_BUILTIN",
310                 [TK_A_RUN_PROGRAM] =            "A RUN_PROGRAM",
311                 [TK_A_GOTO] =                   "A GOTO",
312
313                 [TK_END] =                      "END",
314         };
315
316         return token_strs[type];
317 }
318
319 static void dump_token(struct udev_rules *rules, struct token *token)
320 {
321         enum token_type type = token->type;
322         enum operation_type op = token->key.op;
323         enum string_glob_type glob = token->key.glob;
324         const char *value = &rules->buf[token->key.value_off];
325         const char *attr = &rules->buf[token->key.attr_off];
326
327         switch (type) {
328         case TK_RULE:
329                 {
330                         const char *tks_ptr = (char *)rules->tokens;
331                         const char *tk_ptr = (char *)token;
332                         unsigned int idx = (tk_ptr - tks_ptr) / sizeof(struct token);
333
334                         log_debug("* RULE %s:%u, token: %u, count: %u, label: '%s'\n",
335                                   &rules->buf[token->rule.filename_off], token->rule.filename_line,
336                                   idx, token->rule.token_count,
337                                   &rules->buf[token->rule.label_off]);
338                         break;
339                 }
340         case TK_M_ACTION:
341         case TK_M_DEVPATH:
342         case TK_M_KERNEL:
343         case TK_M_SUBSYSTEM:
344         case TK_M_DRIVER:
345         case TK_M_WAITFOR:
346         case TK_M_DEVLINK:
347         case TK_M_NAME:
348         case TK_M_KERNELS:
349         case TK_M_SUBSYSTEMS:
350         case TK_M_DRIVERS:
351         case TK_M_TAGS:
352         case TK_M_PROGRAM:
353         case TK_M_IMPORT_FILE:
354         case TK_M_IMPORT_PROG:
355         case TK_M_IMPORT_DB:
356         case TK_M_IMPORT_CMDLINE:
357         case TK_M_IMPORT_PARENT:
358         case TK_M_RESULT:
359         case TK_A_NAME:
360         case TK_A_DEVLINK:
361         case TK_A_OWNER:
362         case TK_A_GROUP:
363         case TK_A_MODE:
364         case TK_A_RUN_BUILTIN:
365         case TK_A_RUN_PROGRAM:
366                 log_debug("%s %s '%s'(%s)\n",
367                           token_str(type), operation_str(op), value, string_glob_str(glob));
368                 break;
369         case TK_M_IMPORT_BUILTIN:
370                 log_debug("%s %i '%s'\n", token_str(type), token->key.builtin_cmd, value);
371                 break;
372         case TK_M_ATTR:
373         case TK_M_ATTRS:
374         case TK_M_ENV:
375         case TK_A_ATTR:
376         case TK_A_ENV:
377                 log_debug("%s %s '%s' '%s'(%s)\n",
378                           token_str(type), operation_str(op), attr, value, string_glob_str(glob));
379                 break;
380         case TK_M_TAG:
381         case TK_A_TAG:
382                 log_debug("%s %s '%s'\n", token_str(type), operation_str(op), value);
383                 break;
384         case TK_A_STRING_ESCAPE_NONE:
385         case TK_A_STRING_ESCAPE_REPLACE:
386         case TK_A_DB_PERSIST:
387                 log_debug("%s\n", token_str(type));
388                 break;
389         case TK_M_TEST:
390                 log_debug("%s %s '%s'(%s) %#o\n",
391                           token_str(type), operation_str(op), value, string_glob_str(glob), token->key.mode);
392                 break;
393         case TK_A_INOTIFY_WATCH:
394                 log_debug("%s %u\n", token_str(type), token->key.watch);
395                 break;
396         case TK_A_DEVLINK_PRIO:
397                 log_debug("%s %u\n", token_str(type), token->key.devlink_prio);
398                 break;
399         case TK_A_OWNER_ID:
400                 log_debug("%s %s %u\n", token_str(type), operation_str(op), token->key.uid);
401                 break;
402         case TK_A_GROUP_ID:
403                 log_debug("%s %s %u\n", token_str(type), operation_str(op), token->key.gid);
404                 break;
405         case TK_A_MODE_ID:
406                 log_debug("%s %s %#o\n", token_str(type), operation_str(op), token->key.mode);
407                 break;
408         case TK_A_STATIC_NODE:
409                 log_debug("%s '%s'\n", token_str(type), value);
410                 break;
411         case TK_M_EVENT_TIMEOUT:
412                 log_debug("%s %u\n", token_str(type), token->key.event_timeout);
413                 break;
414         case TK_A_GOTO:
415                 log_debug("%s '%s' %u\n", token_str(type), value, token->key.rule_goto);
416                 break;
417         case TK_END:
418                 log_debug("* %s\n", token_str(type));
419                 break;
420         case TK_M_PARENTS_MIN:
421         case TK_M_PARENTS_MAX:
422         case TK_M_MAX:
423         case TK_UNSET:
424                 log_debug("unknown type %u\n", type);
425                 break;
426         }
427 }
428
429 static void dump_rules(struct udev_rules *rules)
430 {
431         unsigned int i;
432
433         log_debug("dumping %u (%zu bytes) tokens, %u (%zu bytes) strings\n",
434                   rules->token_cur,
435                   rules->token_cur * sizeof(struct token),
436                   rules->buf_count,
437                   rules->buf_cur);
438         for(i = 0; i < rules->token_cur; i++)
439                 dump_token(rules, &rules->tokens[i]);
440 }
441 #else
442 static inline const char *operation_str(enum operation_type type) { return NULL; }
443 static inline const char *token_str(enum token_type type) { return NULL; }
444 static inline void dump_token(struct udev_rules *rules, struct token *token) {}
445 static inline void dump_rules(struct udev_rules *rules) {}
446 #endif /* DEBUG */
447
448 static int add_new_string(struct udev_rules *rules, const char *str, size_t bytes)
449 {
450         int off;
451
452         /* grow buffer if needed */
453         if (rules->buf_cur + bytes+1 >= rules->buf_max) {
454                 char *buf;
455                 unsigned int add;
456
457                 /* double the buffer size */
458                 add = rules->buf_max;
459                 if (add < bytes * 8)
460                         add = bytes * 8;
461
462                 buf = realloc(rules->buf, rules->buf_max + add);
463                 if (buf == NULL)
464                         return -1;
465                 rules->buf = buf;
466                 rules->buf_max += add;
467         }
468         off = rules->buf_cur;
469         memcpy(&rules->buf[rules->buf_cur], str, bytes);
470         rules->buf_cur += bytes;
471         rules->buf_count++;
472         return off;
473 }
474
475 static int add_string(struct udev_rules *rules, const char *str)
476 {
477         unsigned int node_idx;
478         struct trie_node *new_node;
479         unsigned int new_node_idx;
480         unsigned char key;
481         unsigned short len;
482         unsigned int depth;
483         unsigned int off;
484         struct trie_node *parent;
485
486         /* walk trie, start from last character of str to find matching tails */
487         len = strlen(str);
488         key = str[len-1];
489         node_idx = 0;
490         for (depth = 0; depth <= len; depth++) {
491                 struct trie_node *node;
492                 unsigned int child_idx;
493
494                 node = &rules->trie_nodes[node_idx];
495                 off = node->value_off + node->value_len - len;
496
497                 /* match against current node */
498                 if (depth == len || (node->value_len >= len && memcmp(&rules->buf[off], str, len) == 0))
499                         return off;
500
501                 /* lookup child node */
502                 key = str[len - 1 - depth];
503                 child_idx = node->child_idx;
504                 while (child_idx > 0) {
505                         struct trie_node *child;
506
507                         child = &rules->trie_nodes[child_idx];
508                         if (child->key == key)
509                                 break;
510                         child_idx = child->next_child_idx;
511                 }
512                 if (child_idx == 0)
513                         break;
514                 node_idx = child_idx;
515         }
516
517         /* string not found, add it */
518         off = add_new_string(rules, str, len + 1);
519
520         /* grow trie nodes if needed */
521         if (rules->trie_nodes_cur >= rules->trie_nodes_max) {
522                 struct trie_node *nodes;
523                 unsigned int add;
524
525                 /* double the buffer size */
526                 add = rules->trie_nodes_max;
527                 if (add < 8)
528                         add = 8;
529
530                 nodes = realloc(rules->trie_nodes, (rules->trie_nodes_max + add) * sizeof(struct trie_node));
531                 if (nodes == NULL)
532                         return -1;
533                 rules->trie_nodes = nodes;
534                 rules->trie_nodes_max += add;
535         }
536
537         /* get a new node */
538         new_node_idx = rules->trie_nodes_cur;
539         rules->trie_nodes_cur++;
540         new_node = &rules->trie_nodes[new_node_idx];
541         memset(new_node, 0x00, sizeof(struct trie_node));
542         new_node->value_off = off;
543         new_node->value_len = len;
544         new_node->key = key;
545
546         /* join the parent's child list */
547         parent = &rules->trie_nodes[node_idx];
548         if (parent->child_idx == 0) {
549                 parent->child_idx = new_node_idx;
550         } else {
551                 struct trie_node *last_child;
552
553                 last_child = &rules->trie_nodes[parent->last_child_idx];
554                 last_child->next_child_idx = new_node_idx;
555         }
556         parent->last_child_idx = new_node_idx;
557         return off;
558 }
559
560 static int add_token(struct udev_rules *rules, struct token *token)
561 {
562         /* grow buffer if needed */
563         if (rules->token_cur+1 >= rules->token_max) {
564                 struct token *tokens;
565                 unsigned int add;
566
567                 /* double the buffer size */
568                 add = rules->token_max;
569                 if (add < 8)
570                         add = 8;
571
572                 tokens = realloc(rules->tokens, (rules->token_max + add ) * sizeof(struct token));
573                 if (tokens == NULL)
574                         return -1;
575                 rules->tokens = tokens;
576                 rules->token_max += add;
577         }
578         memcpy(&rules->tokens[rules->token_cur], token, sizeof(struct token));
579         rules->token_cur++;
580         return 0;
581 }
582
583 static uid_t add_uid(struct udev_rules *rules, const char *owner)
584 {
585         unsigned int i;
586         uid_t uid;
587         unsigned int off;
588
589         /* lookup, if we know it already */
590         for (i = 0; i < rules->uids_cur; i++) {
591                 off = rules->uids[i].name_off;
592                 if (strcmp(&rules->buf[off], owner) == 0) {
593                         uid = rules->uids[i].uid;
594                         return uid;
595                 }
596         }
597         uid = util_lookup_user(rules->udev, owner);
598
599         /* grow buffer if needed */
600         if (rules->uids_cur+1 >= rules->uids_max) {
601                 struct uid_gid *uids;
602                 unsigned int add;
603
604                 /* double the buffer size */
605                 add = rules->uids_max;
606                 if (add < 1)
607                         add = 8;
608
609                 uids = realloc(rules->uids, (rules->uids_max + add ) * sizeof(struct uid_gid));
610                 if (uids == NULL)
611                         return uid;
612                 rules->uids = uids;
613                 rules->uids_max += add;
614         }
615         rules->uids[rules->uids_cur].uid = uid;
616         off = add_string(rules, owner);
617         if (off <= 0)
618                 return uid;
619         rules->uids[rules->uids_cur].name_off = off;
620         rules->uids_cur++;
621         return uid;
622 }
623
624 static gid_t add_gid(struct udev_rules *rules, const char *group)
625 {
626         unsigned int i;
627         gid_t gid;
628         unsigned int off;
629
630         /* lookup, if we know it already */
631         for (i = 0; i < rules->gids_cur; i++) {
632                 off = rules->gids[i].name_off;
633                 if (strcmp(&rules->buf[off], group) == 0) {
634                         gid = rules->gids[i].gid;
635                         return gid;
636                 }
637         }
638         gid = util_lookup_group(rules->udev, group);
639
640         /* grow buffer if needed */
641         if (rules->gids_cur+1 >= rules->gids_max) {
642                 struct uid_gid *gids;
643                 unsigned int add;
644
645                 /* double the buffer size */
646                 add = rules->gids_max;
647                 if (add < 1)
648                         add = 8;
649
650                 gids = realloc(rules->gids, (rules->gids_max + add ) * sizeof(struct uid_gid));
651                 if (gids == NULL)
652                         return gid;
653                 rules->gids = gids;
654                 rules->gids_max += add;
655         }
656         rules->gids[rules->gids_cur].gid = gid;
657         off = add_string(rules, group);
658         if (off <= 0)
659                 return gid;
660         rules->gids[rules->gids_cur].name_off = off;
661         rules->gids_cur++;
662         return gid;
663 }
664
665 static int import_property_from_string(struct udev_device *dev, char *line)
666 {
667         struct udev *udev = udev_device_get_udev(dev);
668         char *key;
669         char *val;
670         size_t len;
671
672         /* find key */
673         key = line;
674         while (isspace(key[0]))
675                 key++;
676
677         /* comment or empty line */
678         if (key[0] == '#' || key[0] == '\0')
679                 return -1;
680
681         /* split key/value */
682         val = strchr(key, '=');
683         if (val == NULL)
684                 return -1;
685         val[0] = '\0';
686         val++;
687
688         /* find value */
689         while (isspace(val[0]))
690                 val++;
691
692         /* terminate key */
693         len = strlen(key);
694         if (len == 0)
695                 return -1;
696         while (isspace(key[len-1]))
697                 len--;
698         key[len] = '\0';
699
700         /* terminate value */
701         len = strlen(val);
702         if (len == 0)
703                 return -1;
704         while (isspace(val[len-1]))
705                 len--;
706         val[len] = '\0';
707
708         if (len == 0)
709                 return -1;
710
711         /* unquote */
712         if (val[0] == '"' || val[0] == '\'') {
713                 if (val[len-1] != val[0]) {
714                         log_debug("inconsistent quoting: '%s', skip\n", line);
715                         return -1;
716                 }
717                 val[len-1] = '\0';
718                 val++;
719         }
720
721         /* handle device, renamed by external tool, returning new path */
722         if (strcmp(key, "DEVPATH") == 0) {
723                 char syspath[UTIL_PATH_SIZE];
724
725                 log_debug("updating devpath from '%s' to '%s'\n",
726                           udev_device_get_devpath(dev), val);
727                 util_strscpyl(syspath, sizeof(syspath), udev_get_sys_path(udev), val, NULL);
728                 udev_device_set_syspath(dev, syspath);
729         } else {
730                 struct udev_list_entry *entry;
731
732                 entry = udev_device_add_property(dev, key, val);
733                 /* store in db, skip private keys */
734                 if (key[0] != '.')
735                         udev_list_entry_set_num(entry, true);
736         }
737         return 0;
738 }
739
740 static int import_file_into_properties(struct udev_device *dev, const char *filename)
741 {
742         FILE *f;
743         char line[UTIL_LINE_SIZE];
744
745         f = fopen(filename, "r");
746         if (f == NULL)
747                 return -1;
748         while (fgets(line, sizeof(line), f) != NULL)
749                 import_property_from_string(dev, line);
750         fclose(f);
751         return 0;
752 }
753
754 static int import_program_into_properties(struct udev_event *event, const char *program, const sigset_t *sigmask)
755 {
756         struct udev_device *dev = event->dev;
757         char **envp;
758         char result[UTIL_LINE_SIZE];
759         char *line;
760         int err;
761
762         envp = udev_device_get_properties_envp(dev);
763         err = udev_event_spawn(event, program, envp, sigmask, result, sizeof(result));
764         if (err < 0)
765                 return err;
766
767         line = result;
768         while (line != NULL) {
769                 char *pos;
770
771                 pos = strchr(line, '\n');
772                 if (pos != NULL) {
773                         pos[0] = '\0';
774                         pos = &pos[1];
775                 }
776                 import_property_from_string(dev, line);
777                 line = pos;
778         }
779         return 0;
780 }
781
782 static int import_parent_into_properties(struct udev_device *dev, const char *filter)
783 {
784         struct udev *udev = udev_device_get_udev(dev);
785         struct udev_device *dev_parent;
786         struct udev_list_entry *list_entry;
787
788         dev_parent = udev_device_get_parent(dev);
789         if (dev_parent == NULL)
790                 return -1;
791
792         udev_list_entry_foreach(list_entry, udev_device_get_properties_list_entry(dev_parent)) {
793                 const char *key = udev_list_entry_get_name(list_entry);
794                 const char *val = udev_list_entry_get_value(list_entry);
795
796                 if (fnmatch(filter, key, 0) == 0) {
797                         struct udev_list_entry *entry;
798
799                         entry = udev_device_add_property(dev, key, val);
800                         /* store in db, skip private keys */
801                         if (key[0] != '.')
802                                 udev_list_entry_set_num(entry, true);
803                 }
804         }
805         return 0;
806 }
807
808 #define WAIT_LOOP_PER_SECOND                50
809 static int wait_for_file(struct udev_device *dev, const char *file, int timeout)
810 {
811         struct udev *udev = udev_device_get_udev(dev);
812         char filepath[UTIL_PATH_SIZE];
813         char devicepath[UTIL_PATH_SIZE];
814         struct stat stats;
815         int loop = timeout * WAIT_LOOP_PER_SECOND;
816
817         /* a relative path is a device attribute */
818         devicepath[0] = '\0';
819         if (file[0] != '/') {
820                 util_strscpyl(devicepath, sizeof(devicepath),
821                               udev_get_sys_path(udev), udev_device_get_devpath(dev), NULL);
822                 util_strscpyl(filepath, sizeof(filepath), devicepath, "/", file, NULL);
823                 file = filepath;
824         }
825
826         while (--loop) {
827                 const struct timespec duration = { 0, 1000 * 1000 * 1000 / WAIT_LOOP_PER_SECOND };
828
829                 /* lookup file */
830                 if (stat(file, &stats) == 0) {
831                         log_debug("file '%s' appeared after %i loops\n", file, (timeout * WAIT_LOOP_PER_SECOND) - loop-1);
832                         return 0;
833                 }
834                 /* make sure, the device did not disappear in the meantime */
835                 if (devicepath[0] != '\0' && stat(devicepath, &stats) != 0) {
836                         log_debug("device disappeared while waiting for '%s'\n", file);
837                         return -2;
838                 }
839                 log_debug("wait for '%s' for %i mseconds\n", file, 1000 / WAIT_LOOP_PER_SECOND);
840                 nanosleep(&duration, NULL);
841         }
842         log_debug("waiting for '%s' failed\n", file);
843         return -1;
844 }
845
846 static int attr_subst_subdir(char *attr, size_t len)
847 {
848         bool found = false;
849
850         if (strstr(attr, "/*/")) {
851                 char *pos;
852                 char dirname[UTIL_PATH_SIZE];
853                 const char *tail;
854                 DIR *dir;
855
856                 util_strscpy(dirname, sizeof(dirname), attr);
857                 pos = strstr(dirname, "/*/");
858                 if (pos == NULL)
859                         return -1;
860                 pos[0] = '\0';
861                 tail = &pos[2];
862                 dir = opendir(dirname);
863                 if (dir != NULL) {
864                         struct dirent *dent;
865
866                         for (dent = readdir(dir); dent != NULL; dent = readdir(dir)) {
867                                 struct stat stats;
868
869                                 if (dent->d_name[0] == '.')
870                                         continue;
871                                 util_strscpyl(attr, len, dirname, "/", dent->d_name, tail, NULL);
872                                 if (stat(attr, &stats) == 0) {
873                                         found = true;
874                                         break;
875                                 }
876                         }
877                         closedir(dir);
878                 }
879         }
880
881         return found;
882 }
883
884 static int get_key(struct udev *udev, char **line, char **key, enum operation_type *op, char **value)
885 {
886         char *linepos;
887         char *temp;
888
889         linepos = *line;
890         if (linepos == NULL || linepos[0] == '\0')
891                 return -1;
892
893         /* skip whitespace */
894         while (isspace(linepos[0]) || linepos[0] == ',')
895                 linepos++;
896
897         /* get the key */
898         if (linepos[0] == '\0')
899                 return -1;
900         *key = linepos;
901
902         for (;;) {
903                 linepos++;
904                 if (linepos[0] == '\0')
905                         return -1;
906                 if (isspace(linepos[0]))
907                         break;
908                 if (linepos[0] == '=')
909                         break;
910                 if ((linepos[0] == '+') || (linepos[0] == '!') || (linepos[0] == ':'))
911                         if (linepos[1] == '=')
912                                 break;
913         }
914
915         /* remember end of key */
916         temp = linepos;
917
918         /* skip whitespace after key */
919         while (isspace(linepos[0]))
920                 linepos++;
921         if (linepos[0] == '\0')
922                 return -1;
923
924         /* get operation type */
925         if (linepos[0] == '=' && linepos[1] == '=') {
926                 *op = OP_MATCH;
927                 linepos += 2;
928         } else if (linepos[0] == '!' && linepos[1] == '=') {
929                 *op = OP_NOMATCH;
930                 linepos += 2;
931         } else if (linepos[0] == '+' && linepos[1] == '=') {
932                 *op = OP_ADD;
933                 linepos += 2;
934         } else if (linepos[0] == '=') {
935                 *op = OP_ASSIGN;
936                 linepos++;
937         } else if (linepos[0] == ':' && linepos[1] == '=') {
938                 *op = OP_ASSIGN_FINAL;
939                 linepos += 2;
940         } else
941                 return -1;
942
943         /* terminate key */
944         temp[0] = '\0';
945
946         /* skip whitespace after operator */
947         while (isspace(linepos[0]))
948                 linepos++;
949         if (linepos[0] == '\0')
950                 return -1;
951
952         /* get the value */
953         if (linepos[0] == '"')
954                 linepos++;
955         else
956                 return -1;
957         *value = linepos;
958
959         /* terminate */
960         temp = strchr(linepos, '"');
961         if (!temp)
962                 return -1;
963         temp[0] = '\0';
964         temp++;
965
966         /* move line to next key */
967         *line = temp;
968         return 0;
969 }
970
971 /* extract possible KEY{attr} */
972 static char *get_key_attribute(struct udev *udev, char *str)
973 {
974         char *pos;
975         char *attr;
976
977         attr = strchr(str, '{');
978         if (attr != NULL) {
979                 attr++;
980                 pos = strchr(attr, '}');
981                 if (pos == NULL) {
982                         log_error("missing closing brace for format\n");
983                         return NULL;
984                 }
985                 pos[0] = '\0';
986                 return attr;
987         }
988         return NULL;
989 }
990
991 static int rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
992                         enum operation_type op,
993                         const char *value, const void *data)
994 {
995         struct token *token = &rule_tmp->token[rule_tmp->token_cur];
996         const char *attr = NULL;
997
998         memset(token, 0x00, sizeof(struct token));
999
1000         switch (type) {
1001         case TK_M_ACTION:
1002         case TK_M_DEVPATH:
1003         case TK_M_KERNEL:
1004         case TK_M_SUBSYSTEM:
1005         case TK_M_DRIVER:
1006         case TK_M_WAITFOR:
1007         case TK_M_DEVLINK:
1008         case TK_M_NAME:
1009         case TK_M_KERNELS:
1010         case TK_M_SUBSYSTEMS:
1011         case TK_M_DRIVERS:
1012         case TK_M_TAGS:
1013         case TK_M_PROGRAM:
1014         case TK_M_IMPORT_FILE:
1015         case TK_M_IMPORT_PROG:
1016         case TK_M_IMPORT_DB:
1017         case TK_M_IMPORT_CMDLINE:
1018         case TK_M_IMPORT_PARENT:
1019         case TK_M_RESULT:
1020         case TK_A_OWNER:
1021         case TK_A_GROUP:
1022         case TK_A_MODE:
1023         case TK_A_NAME:
1024         case TK_A_GOTO:
1025         case TK_M_TAG:
1026         case TK_A_TAG:
1027                 token->key.value_off = add_string(rule_tmp->rules, value);
1028                 break;
1029         case TK_M_IMPORT_BUILTIN:
1030                 token->key.value_off = add_string(rule_tmp->rules, value);
1031                 token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
1032                 break;
1033         case TK_M_ENV:
1034         case TK_M_ATTR:
1035         case TK_M_ATTRS:
1036         case TK_A_ATTR:
1037         case TK_A_ENV:
1038                 attr = data;
1039                 token->key.value_off = add_string(rule_tmp->rules, value);
1040                 token->key.attr_off = add_string(rule_tmp->rules, attr);
1041                 break;
1042         case TK_A_DEVLINK:
1043                 token->key.value_off = add_string(rule_tmp->rules, value);
1044                 token->key.devlink_unique = *(int *)data;
1045                 break;
1046         case TK_M_TEST:
1047                 token->key.value_off = add_string(rule_tmp->rules, value);
1048                 if (data != NULL)
1049                         token->key.mode = *(mode_t *)data;
1050                 break;
1051         case TK_A_STRING_ESCAPE_NONE:
1052         case TK_A_STRING_ESCAPE_REPLACE:
1053         case TK_A_DB_PERSIST:
1054                 break;
1055         case TK_A_RUN_BUILTIN:
1056                 token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
1057         case TK_A_RUN_PROGRAM:
1058                 token->key.value_off = add_string(rule_tmp->rules, value);
1059                 break;
1060         case TK_A_INOTIFY_WATCH:
1061         case TK_A_DEVLINK_PRIO:
1062                 token->key.devlink_prio = *(int *)data;
1063                 break;
1064         case TK_A_OWNER_ID:
1065                 token->key.uid = *(uid_t *)data;
1066                 break;
1067         case TK_A_GROUP_ID:
1068                 token->key.gid = *(gid_t *)data;
1069                 break;
1070         case TK_A_MODE_ID:
1071                 token->key.mode = *(mode_t *)data;
1072                 break;
1073         case TK_A_STATIC_NODE:
1074                 token->key.value_off = add_string(rule_tmp->rules, value);
1075                 break;
1076         case TK_M_EVENT_TIMEOUT:
1077                 token->key.event_timeout = *(int *)data;
1078                 break;
1079         case TK_RULE:
1080         case TK_M_PARENTS_MIN:
1081         case TK_M_PARENTS_MAX:
1082         case TK_M_MAX:
1083         case TK_END:
1084         case TK_UNSET:
1085                 log_error("wrong type %u\n", type);
1086                 return -1;
1087         }
1088
1089         if (value != NULL && type < TK_M_MAX) {
1090                 /* check if we need to split or call fnmatch() while matching rules */
1091                 enum string_glob_type glob;
1092                 int has_split;
1093                 int has_glob;
1094
1095                 has_split = (strchr(value, '|') != NULL);
1096                 has_glob = (strchr(value, '*') != NULL || strchr(value, '?') != NULL || strchr(value, '[') != NULL);
1097                 if (has_split && has_glob) {
1098                         glob = GL_SPLIT_GLOB;
1099                 } else if (has_split) {
1100                         glob = GL_SPLIT;
1101                 } else if (has_glob) {
1102                         if (strcmp(value, "?*") == 0)
1103                                 glob = GL_SOMETHING;
1104                         else
1105                                 glob = GL_GLOB;
1106                 } else {
1107                         glob = GL_PLAIN;
1108                 }
1109                 token->key.glob = glob;
1110         }
1111
1112         if (value != NULL && type > TK_M_MAX) {
1113                 /* check if assigned value has substitution chars */
1114                 if (value[0] == '[')
1115                         token->key.subst = SB_SUBSYS;
1116                 else if (strchr(value, '%') != NULL || strchr(value, '$') != NULL)
1117                         token->key.subst = SB_FORMAT;
1118                 else
1119                         token->key.subst = SB_NONE;
1120         }
1121
1122         if (attr != NULL) {
1123                 /* check if property/attribut name has substitution chars */
1124                 if (attr[0] == '[')
1125                         token->key.attrsubst = SB_SUBSYS;
1126                 else if (strchr(attr, '%') != NULL || strchr(attr, '$') != NULL)
1127                         token->key.attrsubst = SB_FORMAT;
1128                 else
1129                         token->key.attrsubst = SB_NONE;
1130         }
1131
1132         token->key.type = type;
1133         token->key.op = op;
1134         rule_tmp->token_cur++;
1135         if (rule_tmp->token_cur >= ARRAY_SIZE(rule_tmp->token)) {
1136                 log_error("temporary rule array too small\n");
1137                 return -1;
1138         }
1139         return 0;
1140 }
1141
1142 static int sort_token(struct udev_rules *rules, struct rule_tmp *rule_tmp)
1143 {
1144         unsigned int i;
1145         unsigned int start = 0;
1146         unsigned int end = rule_tmp->token_cur;
1147
1148         for (i = 0; i < rule_tmp->token_cur; i++) {
1149                 enum token_type next_val = TK_UNSET;
1150                 unsigned int next_idx = 0;
1151                 unsigned int j;
1152
1153                 /* find smallest value */
1154                 for (j = start; j < end; j++) {
1155                         if (rule_tmp->token[j].type == TK_UNSET)
1156                                 continue;
1157                         if (next_val == TK_UNSET || rule_tmp->token[j].type < next_val) {
1158                                 next_val = rule_tmp->token[j].type;
1159                                 next_idx = j;
1160                         }
1161                 }
1162
1163                 /* add token and mark done */
1164                 if (add_token(rules, &rule_tmp->token[next_idx]) != 0)
1165                         return -1;
1166                 rule_tmp->token[next_idx].type = TK_UNSET;
1167
1168                 /* shrink range */
1169                 if (next_idx == start)
1170                         start++;
1171                 if (next_idx+1 == end)
1172                         end--;
1173         }
1174         return 0;
1175 }
1176
1177 static int add_rule(struct udev_rules *rules, char *line,
1178                     const char *filename, unsigned int filename_off, unsigned int lineno)
1179 {
1180         char *linepos;
1181         char *attr;
1182         struct rule_tmp rule_tmp;
1183
1184         memset(&rule_tmp, 0x00, sizeof(struct rule_tmp));
1185         rule_tmp.rules = rules;
1186         rule_tmp.rule.type = TK_RULE;
1187         rule_tmp.rule.rule.filename_off = filename_off;
1188         rule_tmp.rule.rule.filename_line = lineno;
1189
1190         linepos = line;
1191         for (;;) {
1192                 char *key;
1193                 char *value;
1194                 enum operation_type op;
1195
1196                 if (get_key(rules->udev, &linepos, &key, &op, &value) != 0)
1197                         break;
1198
1199                 if (strcmp(key, "ACTION") == 0) {
1200                         if (op > OP_MATCH_MAX) {
1201                                 log_error("invalid ACTION operation\n");
1202                                 goto invalid;
1203                         }
1204                         rule_add_key(&rule_tmp, TK_M_ACTION, op, value, NULL);
1205                         continue;
1206                 }
1207
1208                 if (strcmp(key, "DEVPATH") == 0) {
1209                         if (op > OP_MATCH_MAX) {
1210                                 log_error("invalid DEVPATH operation\n");
1211                                 goto invalid;
1212                         }
1213                         rule_add_key(&rule_tmp, TK_M_DEVPATH, op, value, NULL);
1214                         continue;
1215                 }
1216
1217                 if (strcmp(key, "KERNEL") == 0) {
1218                         if (op > OP_MATCH_MAX) {
1219                                 log_error("invalid KERNEL operation\n");
1220                                 goto invalid;
1221                         }
1222                         rule_add_key(&rule_tmp, TK_M_KERNEL, op, value, NULL);
1223                         continue;
1224                 }
1225
1226                 if (strcmp(key, "SUBSYSTEM") == 0) {
1227                         if (op > OP_MATCH_MAX) {
1228                                 log_error("invalid SUBSYSTEM operation\n");
1229                                 goto invalid;
1230                         }
1231                         /* bus, class, subsystem events should all be the same */
1232                         if (strcmp(value, "subsystem") == 0 ||
1233                             strcmp(value, "bus") == 0 ||
1234                             strcmp(value, "class") == 0) {
1235                                 if (strcmp(value, "bus") == 0 || strcmp(value, "class") == 0)
1236                                         log_error("'%s' must be specified as 'subsystem' \n"
1237                                             "please fix it in %s:%u", value, filename, lineno);
1238                                 rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, "subsystem|class|bus", NULL);
1239                         } else
1240                                 rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, value, NULL);
1241                         continue;
1242                 }
1243
1244                 if (strcmp(key, "DRIVER") == 0) {
1245                         if (op > OP_MATCH_MAX) {
1246                                 log_error("invalid DRIVER operation\n");
1247                                 goto invalid;
1248                         }
1249                         rule_add_key(&rule_tmp, TK_M_DRIVER, op, value, NULL);
1250                         continue;
1251                 }
1252
1253                 if (strncmp(key, "ATTR{", sizeof("ATTR{")-1) == 0) {
1254                         attr = get_key_attribute(rules->udev, key + sizeof("ATTR")-1);
1255                         if (attr == NULL) {
1256                                 log_error("error parsing ATTR attribute\n");
1257                                 goto invalid;
1258                         }
1259                         if (op < OP_MATCH_MAX) {
1260                                 rule_add_key(&rule_tmp, TK_M_ATTR, op, value, attr);
1261                         } else {
1262                                 rule_add_key(&rule_tmp, TK_A_ATTR, op, value, attr);
1263                         }
1264                         continue;
1265                 }
1266
1267                 if (strcmp(key, "KERNELS") == 0) {
1268                         if (op > OP_MATCH_MAX) {
1269                                 log_error("invalid KERNELS operation\n");
1270                                 goto invalid;
1271                         }
1272                         rule_add_key(&rule_tmp, TK_M_KERNELS, op, value, NULL);
1273                         continue;
1274                 }
1275
1276                 if (strcmp(key, "SUBSYSTEMS") == 0) {
1277                         if (op > OP_MATCH_MAX) {
1278                                 log_error("invalid SUBSYSTEMS operation\n");
1279                                 goto invalid;
1280                         }
1281                         rule_add_key(&rule_tmp, TK_M_SUBSYSTEMS, op, value, NULL);
1282                         continue;
1283                 }
1284
1285                 if (strcmp(key, "DRIVERS") == 0) {
1286                         if (op > OP_MATCH_MAX) {
1287                                 log_error("invalid DRIVERS operation\n");
1288                                 goto invalid;
1289                         }
1290                         rule_add_key(&rule_tmp, TK_M_DRIVERS, op, value, NULL);
1291                         continue;
1292                 }
1293
1294                 if (strncmp(key, "ATTRS{", sizeof("ATTRS{")-1) == 0) {
1295                         if (op > OP_MATCH_MAX) {
1296                                 log_error("invalid ATTRS operation\n");
1297                                 goto invalid;
1298                         }
1299                         attr = get_key_attribute(rules->udev, key + sizeof("ATTRS")-1);
1300                         if (attr == NULL) {
1301                                 log_error("error parsing ATTRS attribute\n");
1302                                 goto invalid;
1303                         }
1304                         if (strncmp(attr, "device/", 7) == 0)
1305                                 log_error("the 'device' link may not be available in a future kernel, "
1306                                     "please fix it in %s:%u", filename, lineno);
1307                         else if (strstr(attr, "../") != NULL)
1308                                 log_error("do not reference parent sysfs directories directly, "
1309                                     "it may break with a future kernel, please fix it in %s:%u", filename, lineno);
1310                         rule_add_key(&rule_tmp, TK_M_ATTRS, op, value, attr);
1311                         continue;
1312                 }
1313
1314                 if (strcmp(key, "TAGS") == 0) {
1315                         if (op > OP_MATCH_MAX) {
1316                                 log_error("invalid TAGS operation\n");
1317                                 goto invalid;
1318                         }
1319                         rule_add_key(&rule_tmp, TK_M_TAGS, op, value, NULL);
1320                         continue;
1321                 }
1322
1323                 if (strncmp(key, "ENV{", sizeof("ENV{")-1) == 0) {
1324                         attr = get_key_attribute(rules->udev, key + sizeof("ENV")-1);
1325                         if (attr == NULL) {
1326                                 log_error("error parsing ENV attribute\n");
1327                                 goto invalid;
1328                         }
1329                         if (op < OP_MATCH_MAX) {
1330                                 if (rule_add_key(&rule_tmp, TK_M_ENV, op, value, attr) != 0)
1331                                         goto invalid;
1332                         } else {
1333                                 static const char *blacklist[] = {
1334                                         "ACTION",
1335                                         "SUBSYSTEM",
1336                                         "DEVTYPE",
1337                                         "MAJOR",
1338                                         "MINOR",
1339                                         "DRIVER",
1340                                         "IFINDEX",
1341                                         "DEVNAME",
1342                                         "DEVLINKS",
1343                                         "DEVPATH",
1344                                         "TAGS",
1345                                 };
1346                                 unsigned int i;
1347
1348                                 for (i = 0; i < ARRAY_SIZE(blacklist); i++)
1349                                         if (strcmp(attr, blacklist[i]) == 0) {
1350                                                 log_error("invalid ENV attribute, '%s' can not be set %s:%u\n", attr, filename, lineno);
1351                                                 continue;
1352                                         }
1353                                 if (rule_add_key(&rule_tmp, TK_A_ENV, op, value, attr) != 0)
1354                                         goto invalid;
1355                         }
1356                         continue;
1357                 }
1358
1359                 if (strcmp(key, "TAG") == 0) {
1360                         if (op < OP_MATCH_MAX)
1361                                 rule_add_key(&rule_tmp, TK_M_TAG, op, value, NULL);
1362                         else
1363                                 rule_add_key(&rule_tmp, TK_A_TAG, op, value, NULL);
1364                         continue;
1365                 }
1366
1367                 if (strcmp(key, "PROGRAM") == 0) {
1368                         rule_add_key(&rule_tmp, TK_M_PROGRAM, op, value, NULL);
1369                         continue;
1370                 }
1371
1372                 if (strcmp(key, "RESULT") == 0) {
1373                         if (op > OP_MATCH_MAX) {
1374                                 log_error("invalid RESULT operation\n");
1375                                 goto invalid;
1376                         }
1377                         rule_add_key(&rule_tmp, TK_M_RESULT, op, value, NULL);
1378                         continue;
1379                 }
1380
1381                 if (strncmp(key, "IMPORT", sizeof("IMPORT")-1) == 0) {
1382                         attr = get_key_attribute(rules->udev, key + sizeof("IMPORT")-1);
1383                         if (attr == NULL) {
1384                                 log_error("IMPORT{} type missing, ignoring IMPORT %s:%u\n", filename, lineno);
1385                                 continue;
1386                         }
1387                         if (strcmp(attr, "program") == 0) {
1388                                 /* find known built-in command */
1389                                 if (value[0] != '/') {
1390                                         enum udev_builtin_cmd cmd;
1391
1392                                         cmd = udev_builtin_lookup(value);
1393                                         if (cmd < UDEV_BUILTIN_MAX) {
1394                                                 log_debug("IMPORT found builtin '%s', replacing %s:%u\n",
1395                                                           value, filename, lineno);
1396                                                 rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
1397                                                 continue;
1398                                         }
1399                                 }
1400                                 rule_add_key(&rule_tmp, TK_M_IMPORT_PROG, op, value, NULL);
1401                         } else if (strcmp(attr, "builtin") == 0) {
1402                                 enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
1403
1404                                 if (cmd < UDEV_BUILTIN_MAX)
1405                                         rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
1406                                 else
1407                                         log_error("IMPORT{builtin}: '%s' unknown %s:%u\n", value, filename, lineno);
1408                         } else if (strcmp(attr, "file") == 0) {
1409                                 rule_add_key(&rule_tmp, TK_M_IMPORT_FILE, op, value, NULL);
1410                         } else if (strcmp(attr, "db") == 0) {
1411                                 rule_add_key(&rule_tmp, TK_M_IMPORT_DB, op, value, NULL);
1412                         } else if (strcmp(attr, "cmdline") == 0) {
1413                                 rule_add_key(&rule_tmp, TK_M_IMPORT_CMDLINE, op, value, NULL);
1414                         } else if (strcmp(attr, "parent") == 0) {
1415                                 rule_add_key(&rule_tmp, TK_M_IMPORT_PARENT, op, value, NULL);
1416                         } else
1417                                 log_error("IMPORT{} unknown type, ignoring IMPORT %s:%u\n", filename, lineno);
1418                         continue;
1419                 }
1420
1421                 if (strncmp(key, "TEST", sizeof("TEST")-1) == 0) {
1422                         mode_t mode = 0;
1423
1424                         if (op > OP_MATCH_MAX) {
1425                                 log_error("invalid TEST operation\n");
1426                                 goto invalid;
1427                         }
1428                         attr = get_key_attribute(rules->udev, key + sizeof("TEST")-1);
1429                         if (attr != NULL) {
1430                                 mode = strtol(attr, NULL, 8);
1431                                 rule_add_key(&rule_tmp, TK_M_TEST, op, value, &mode);
1432                         } else {
1433                                 rule_add_key(&rule_tmp, TK_M_TEST, op, value, NULL);
1434                         }
1435                         continue;
1436                 }
1437
1438                 if (strncmp(key, "RUN", sizeof("RUN")-1) == 0) {
1439                         attr = get_key_attribute(rules->udev, key + sizeof("RUN")-1);
1440                         if (attr == NULL)
1441                                 attr = "program";
1442
1443                         if (strcmp(attr, "builtin") == 0) {
1444                                 enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
1445
1446                                 if (cmd < UDEV_BUILTIN_MAX)
1447                                         rule_add_key(&rule_tmp, TK_A_RUN_BUILTIN, op, value, &cmd);
1448                                 else
1449                                         log_error("IMPORT{builtin}: '%s' unknown %s:%u\n", value, filename, lineno);
1450                         } else if (strcmp(attr, "program") == 0) {
1451                                 enum udev_builtin_cmd cmd = UDEV_BUILTIN_MAX;
1452
1453                                 if (strncmp(value, "socket:", 7) == 0)
1454                                         log_error("RUN+=\"socket:...\" support will be removed from a future udev release. "
1455                                             "Please remove it from: %s:%u and use libudev to subscribe to events.\n", filename, lineno);
1456                                 rule_add_key(&rule_tmp, TK_A_RUN_PROGRAM, op, value, &cmd);
1457                         } else {
1458                                 log_error("RUN{} unknown type, ignoring RUN %s:%u\n", filename, lineno);
1459                         }
1460
1461                         continue;
1462                 }
1463
1464                 if (strcmp(key, "WAIT_FOR") == 0 || strcmp(key, "WAIT_FOR_SYSFS") == 0) {
1465                         rule_add_key(&rule_tmp, TK_M_WAITFOR, 0, value, NULL);
1466                         continue;
1467                 }
1468
1469                 if (strcmp(key, "LABEL") == 0) {
1470                         rule_tmp.rule.rule.label_off = add_string(rules, value);
1471                         continue;
1472                 }
1473
1474                 if (strcmp(key, "GOTO") == 0) {
1475                         rule_add_key(&rule_tmp, TK_A_GOTO, 0, value, NULL);
1476                         continue;
1477                 }
1478
1479                 if (strncmp(key, "NAME", sizeof("NAME")-1) == 0) {
1480                         if (op < OP_MATCH_MAX) {
1481                                 rule_add_key(&rule_tmp, TK_M_NAME, op, value, NULL);
1482                         } else {
1483                                 if (strcmp(value, "%k") == 0) {
1484                                         log_error("NAME=\"%%k\" is ignored, because it breaks kernel supplied names, "
1485                                             "please remove it from %s:%u\n", filename, lineno);
1486                                         continue;
1487                                 }
1488                                 if (value[0] == '\0') {
1489                                         log_debug("NAME=\"\" is ignored, because udev will not delete any device nodes, "
1490                                                   "please remove it from %s:%u\n", filename, lineno);
1491                                         continue;
1492                                 }
1493                                 rule_add_key(&rule_tmp, TK_A_NAME, op, value, NULL);
1494                         }
1495                         rule_tmp.rule.rule.can_set_name = true;
1496                         continue;
1497                 }
1498
1499                 if (strncmp(key, "SYMLINK", sizeof("SYMLINK")-1) == 0) {
1500                         if (op < OP_MATCH_MAX) {
1501                                 rule_add_key(&rule_tmp, TK_M_DEVLINK, op, value, NULL);
1502                         } else {
1503                                 int flag = 0;
1504
1505                                 attr = get_key_attribute(rules->udev, key + sizeof("SYMLINK")-1);
1506                                 if (attr != NULL && strstr(attr, "unique") != NULL)
1507                                         flag = 1;
1508                                 rule_add_key(&rule_tmp, TK_A_DEVLINK, op, value, &flag);
1509                         }
1510                         rule_tmp.rule.rule.can_set_name = true;
1511                         continue;
1512                 }
1513
1514                 if (strcmp(key, "OWNER") == 0) {
1515                         uid_t uid;
1516                         char *endptr;
1517
1518                         uid = strtoul(value, &endptr, 10);
1519                         if (endptr[0] == '\0') {
1520                                 rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
1521                         } else if ((rules->resolve_names > 0) && strchr("$%", value[0]) == NULL) {
1522                                 uid = add_uid(rules, value);
1523                                 rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
1524                         } else if (rules->resolve_names >= 0) {
1525                                 rule_add_key(&rule_tmp, TK_A_OWNER, op, value, NULL);
1526                         }
1527                         rule_tmp.rule.rule.can_set_name = true;
1528                         continue;
1529                 }
1530
1531                 if (strcmp(key, "GROUP") == 0) {
1532                         gid_t gid;
1533                         char *endptr;
1534
1535                         gid = strtoul(value, &endptr, 10);
1536                         if (endptr[0] == '\0') {
1537                                 rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
1538                         } else if ((rules->resolve_names > 0) && strchr("$%", value[0]) == NULL) {
1539                                 gid = add_gid(rules, value);
1540                                 rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
1541                         } else if (rules->resolve_names >= 0) {
1542                                 rule_add_key(&rule_tmp, TK_A_GROUP, op, value, NULL);
1543                         }
1544                         rule_tmp.rule.rule.can_set_name = true;
1545                         continue;
1546                 }
1547
1548                 if (strcmp(key, "MODE") == 0) {
1549                         mode_t mode;
1550                         char *endptr;
1551
1552                         mode = strtol(value, &endptr, 8);
1553                         if (endptr[0] == '\0')
1554                                 rule_add_key(&rule_tmp, TK_A_MODE_ID, op, NULL, &mode);
1555                         else
1556                                 rule_add_key(&rule_tmp, TK_A_MODE, op, value, NULL);
1557                         rule_tmp.rule.rule.can_set_name = true;
1558                         continue;
1559                 }
1560
1561                 if (strcmp(key, "OPTIONS") == 0) {
1562                         const char *pos;
1563
1564                         pos = strstr(value, "link_priority=");
1565                         if (pos != NULL) {
1566                                 int prio = atoi(&pos[strlen("link_priority=")]);
1567
1568                                 rule_add_key(&rule_tmp, TK_A_DEVLINK_PRIO, op, NULL, &prio);
1569                         }
1570
1571                         pos = strstr(value, "event_timeout=");
1572                         if (pos != NULL) {
1573                                 int tout = atoi(&pos[strlen("event_timeout=")]);
1574
1575                                 rule_add_key(&rule_tmp, TK_M_EVENT_TIMEOUT, op, NULL, &tout);
1576                         }
1577
1578                         pos = strstr(value, "string_escape=");
1579                         if (pos != NULL) {
1580                                 pos = &pos[strlen("string_escape=")];
1581                                 if (strncmp(pos, "none", strlen("none")) == 0)
1582                                         rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_NONE, op, NULL, NULL);
1583                                 else if (strncmp(pos, "replace", strlen("replace")) == 0)
1584                                         rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_REPLACE, op, NULL, NULL);
1585                         }
1586
1587                         pos = strstr(value, "db_persist");
1588                         if (pos != NULL)
1589                                 rule_add_key(&rule_tmp, TK_A_DB_PERSIST, op, NULL, NULL);
1590
1591                         pos = strstr(value, "nowatch");
1592                         if (pos != NULL) {
1593                                 const int off = 0;
1594
1595                                 rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &off);
1596                         } else {
1597                                 pos = strstr(value, "watch");
1598                                 if (pos != NULL) {
1599                                         const int on = 1;
1600
1601                                         rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &on);
1602                                 }
1603                         }
1604
1605                         pos = strstr(value, "static_node=");
1606                         if (pos != NULL) {
1607                                 rule_add_key(&rule_tmp, TK_A_STATIC_NODE, op, &pos[strlen("static_node=")], NULL);
1608                                 rule_tmp.rule.rule.has_static_node = true;
1609                         }
1610
1611                         continue;
1612                 }
1613
1614                 log_error("unknown key '%s' in %s:%u\n", key, filename, lineno);
1615                 goto invalid;
1616         }
1617
1618         /* add rule token */
1619         rule_tmp.rule.rule.token_count = 1 + rule_tmp.token_cur;
1620         if (add_token(rules, &rule_tmp.rule) != 0)
1621                 goto invalid;
1622
1623         /* add tokens to list, sorted by type */
1624         if (sort_token(rules, &rule_tmp) != 0)
1625                 goto invalid;
1626
1627         return 0;
1628 invalid:
1629         log_error("invalid rule '%s:%u'\n", filename, lineno);
1630         return -1;
1631 }
1632
1633 static int parse_file(struct udev_rules *rules, const char *filename, unsigned short filename_off)
1634 {
1635         FILE *f;
1636         unsigned int first_token;
1637         char line[UTIL_LINE_SIZE];
1638         int line_nr = 0;
1639         unsigned int i;
1640
1641         log_debug("reading '%s' as rules file\n", filename);
1642
1643         f = fopen(filename, "r");
1644         if (f == NULL)
1645                 return -1;
1646
1647         first_token = rules->token_cur;
1648
1649         while (fgets(line, sizeof(line), f) != NULL) {
1650                 char *key;
1651                 size_t len;
1652
1653                 /* skip whitespace */
1654                 line_nr++;
1655                 key = line;
1656                 while (isspace(key[0]))
1657                         key++;
1658
1659                 /* comment */
1660                 if (key[0] == '#')
1661                         continue;
1662
1663                 len = strlen(line);
1664                 if (len < 3)
1665                         continue;
1666
1667                 /* continue reading if backslash+newline is found */
1668                 while (line[len-2] == '\\') {
1669                         if (fgets(&line[len-2], (sizeof(line)-len)+2, f) == NULL)
1670                                 break;
1671                         if (strlen(&line[len-2]) < 2)
1672                                 break;
1673                         line_nr++;
1674                         len = strlen(line);
1675                 }
1676
1677                 if (len+1 >= sizeof(line)) {
1678                         log_error("line too long '%s':%u, ignored\n", filename, line_nr);
1679                         continue;
1680                 }
1681                 add_rule(rules, key, filename, filename_off, line_nr);
1682         }
1683         fclose(f);
1684
1685         /* link GOTOs to LABEL rules in this file to be able to fast-forward */
1686         for (i = first_token+1; i < rules->token_cur; i++) {
1687                 if (rules->tokens[i].type == TK_A_GOTO) {
1688                         char *label = &rules->buf[rules->tokens[i].key.value_off];
1689                         unsigned int j;
1690
1691                         for (j = i+1; j < rules->token_cur; j++) {
1692                                 if (rules->tokens[j].type != TK_RULE)
1693                                         continue;
1694                                 if (rules->tokens[j].rule.label_off == 0)
1695                                         continue;
1696                                 if (strcmp(label, &rules->buf[rules->tokens[j].rule.label_off]) != 0)
1697                                         continue;
1698                                 rules->tokens[i].key.rule_goto = j;
1699                                 break;
1700                         }
1701                         if (rules->tokens[i].key.rule_goto == 0)
1702                                 log_error("GOTO '%s' has no matching label in: '%s'\n", label, filename);
1703                 }
1704         }
1705         return 0;
1706 }
1707
1708 static int add_matching_files(struct udev *udev, struct udev_list *file_list, const char *dirname, const char *suffix)
1709 {
1710         DIR *dir;
1711         struct dirent *dent;
1712         char filename[UTIL_PATH_SIZE];
1713
1714         dir = opendir(dirname);
1715         if (dir == NULL) {
1716                 log_debug("unable to open '%s': %m\n", dirname);
1717                 return -1;
1718         }
1719
1720         for (dent = readdir(dir); dent != NULL; dent = readdir(dir)) {
1721                 if (dent->d_name[0] == '.')
1722                         continue;
1723
1724                 /* look for file matching with specified suffix */
1725                 if (suffix != NULL) {
1726                         const char *ext;
1727
1728                         ext = strrchr(dent->d_name, '.');
1729                         if (ext == NULL)
1730                                 continue;
1731                         if (strcmp(ext, suffix) != 0)
1732                                 continue;
1733                 }
1734                 util_strscpyl(filename, sizeof(filename), dirname, "/", dent->d_name, NULL);
1735                 /*
1736                  * the basename is the key, the filename the value
1737                  * identical basenames from different directories override each other
1738                  * entries are sorted after basename
1739                  */
1740                 udev_list_entry_add(file_list, dent->d_name, filename);
1741         }
1742
1743         closedir(dir);
1744         return 0;
1745 }
1746
1747 struct udev_rules *udev_rules_new(struct udev *udev, int resolve_names)
1748 {
1749         struct udev_rules *rules;
1750         struct udev_list file_list;
1751         struct udev_list_entry *file_loop;
1752         struct token end_token;
1753         char **s;
1754
1755         rules = calloc(1, sizeof(struct udev_rules));
1756         if (rules == NULL)
1757                 return NULL;
1758         rules->udev = udev;
1759         rules->resolve_names = resolve_names;
1760         udev_list_init(udev, &file_list, true);
1761
1762         /* init token array and string buffer */
1763         rules->tokens = malloc(PREALLOC_TOKEN * sizeof(struct token));
1764         if (rules->tokens == NULL) {
1765                 free(rules);
1766                 return NULL;
1767         }
1768         rules->token_max = PREALLOC_TOKEN;
1769
1770         rules->buf = malloc(PREALLOC_STRBUF);
1771         if (rules->buf == NULL) {
1772                 free(rules->tokens);
1773                 free(rules);
1774                 return NULL;
1775         }
1776         rules->buf_max = PREALLOC_STRBUF;
1777         /* offset 0 is always '\0' */
1778         rules->buf[0] = '\0';
1779         rules->buf_cur = 1;
1780
1781         rules->trie_nodes = malloc(PREALLOC_TRIE * sizeof(struct trie_node));
1782         if (rules->trie_nodes == NULL) {
1783                 free(rules->buf);
1784                 free(rules->tokens);
1785                 free(rules);
1786                 return NULL;
1787         }
1788         rules->trie_nodes_max = PREALLOC_TRIE;
1789         /* offset 0 is the trie root, with an empty string */
1790         memset(rules->trie_nodes, 0x00, sizeof(struct trie_node));
1791         rules->trie_nodes_cur = 1;
1792
1793         for (udev_get_rules_path(udev, &s, NULL); *s != NULL; s++)
1794                 add_matching_files(udev, &file_list, *s, ".rules");
1795
1796         /* add all filenames to the string buffer */
1797         udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
1798                 const char *filename = udev_list_entry_get_value(file_loop);
1799                 unsigned int filename_off;
1800
1801                 filename_off = add_string(rules, filename);
1802                 /* the offset in the rule is limited to unsigned short */
1803                 if (filename_off < USHRT_MAX)
1804                         udev_list_entry_set_num(file_loop, filename_off);
1805         }
1806
1807         /* parse all rules files */
1808         udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
1809                 const char *filename = udev_list_entry_get_value(file_loop);
1810                 unsigned int filename_off = udev_list_entry_get_num(file_loop);
1811                 struct stat st;
1812
1813                 if (stat(filename, &st) != 0) {
1814                         log_error("can not find '%s': %m\n", filename);
1815                         continue;
1816                 }
1817                 if (S_ISREG(st.st_mode) && st.st_size <= 0) {
1818                         log_debug("ignore empty '%s'\n", filename);
1819                         continue;
1820                 }
1821                 if (S_ISCHR(st.st_mode)) {
1822                         log_debug("ignore masked '%s'\n", filename);
1823                         continue;
1824                 }
1825                 parse_file(rules, filename, filename_off);
1826         }
1827         udev_list_cleanup(&file_list);
1828
1829         memset(&end_token, 0x00, sizeof(struct token));
1830         end_token.type = TK_END;
1831         add_token(rules, &end_token);
1832
1833         /* shrink allocated token and string buffer */
1834         if (rules->token_cur < rules->token_max) {
1835                 struct token *tokens;
1836
1837                 tokens = realloc(rules->tokens, rules->token_cur * sizeof(struct token));
1838                 if (tokens != NULL || rules->token_cur == 0) {
1839                         rules->tokens = tokens;
1840                         rules->token_max = rules->token_cur;
1841                 }
1842         }
1843         if (rules->buf_cur < rules->buf_max) {
1844                 char *buf;
1845
1846                 buf = realloc(rules->buf, rules->buf_cur);
1847                 if (buf != NULL || rules->buf_cur == 0) {
1848                         rules->buf = buf;
1849                         rules->buf_max = rules->buf_cur;
1850                 }
1851         }
1852         log_debug("rules use %zu bytes tokens (%u * %zu bytes), %zu bytes buffer\n",
1853                   rules->token_max * sizeof(struct token), rules->token_max, sizeof(struct token), rules->buf_max);
1854         log_debug("temporary index used %zu bytes (%u * %zu bytes)\n",
1855                   rules->trie_nodes_cur * sizeof(struct trie_node),
1856                   rules->trie_nodes_cur, sizeof(struct trie_node));
1857
1858         /* cleanup trie */
1859         free(rules->trie_nodes);
1860         rules->trie_nodes = NULL;
1861         rules->trie_nodes_cur = 0;
1862         rules->trie_nodes_max = 0;
1863
1864         /* cleanup uid/gid cache */
1865         free(rules->uids);
1866         rules->uids = NULL;
1867         rules->uids_cur = 0;
1868         rules->uids_max = 0;
1869         free(rules->gids);
1870         rules->gids = NULL;
1871         rules->gids_cur = 0;
1872         rules->gids_max = 0;
1873
1874         dump_rules(rules);
1875         return rules;
1876 }
1877
1878 struct udev_rules *udev_rules_unref(struct udev_rules *rules)
1879 {
1880         if (rules == NULL)
1881                 return NULL;
1882         free(rules->tokens);
1883         free(rules->buf);
1884         free(rules->trie_nodes);
1885         free(rules->uids);
1886         free(rules->gids);
1887         free(rules);
1888         return NULL;
1889 }
1890
1891 static int match_key(struct udev_rules *rules, struct token *token, const char *val)
1892 {
1893         char *key_value = &rules->buf[token->key.value_off];
1894         char *pos;
1895         bool match = false;
1896
1897         if (val == NULL)
1898                 val = "";
1899
1900         switch (token->key.glob) {
1901         case GL_PLAIN:
1902                 match = (strcmp(key_value, val) == 0);
1903                 break;
1904         case GL_GLOB:
1905                 match = (fnmatch(key_value, val, 0) == 0);
1906                 break;
1907         case GL_SPLIT:
1908                 {
1909                         const char *split;
1910                         size_t len;
1911
1912                         split = &rules->buf[token->key.value_off];
1913                         len = strlen(val);
1914                         for (;;) {
1915                                 const char *next;
1916
1917                                 next = strchr(split, '|');
1918                                 if (next != NULL) {
1919                                         size_t matchlen = (size_t)(next - split);
1920
1921                                         match = (matchlen == len && strncmp(split, val, matchlen) == 0);
1922                                         if (match)
1923                                                 break;
1924                                 } else {
1925                                         match = (strcmp(split, val) == 0);
1926                                         break;
1927                                 }
1928                                 split = &next[1];
1929                         }
1930                         break;
1931                 }
1932         case GL_SPLIT_GLOB:
1933                 {
1934                         char value[UTIL_PATH_SIZE];
1935
1936                         util_strscpy(value, sizeof(value), &rules->buf[token->key.value_off]);
1937                         key_value = value;
1938                         while (key_value != NULL) {
1939                                 pos = strchr(key_value, '|');
1940                                 if (pos != NULL) {
1941                                         pos[0] = '\0';
1942                                         pos = &pos[1];
1943                                 }
1944                                 match = (fnmatch(key_value, val, 0) == 0);
1945                                 if (match)
1946                                         break;
1947                                 key_value = pos;
1948                         }
1949                         break;
1950                 }
1951         case GL_SOMETHING:
1952                 match = (val[0] != '\0');
1953                 break;
1954         case GL_UNSET:
1955                 return -1;
1956         }
1957
1958         if (match && (token->key.op == OP_MATCH))
1959                 return 0;
1960         if (!match && (token->key.op == OP_NOMATCH))
1961                 return 0;
1962         return -1;
1963 }
1964
1965 static int match_attr(struct udev_rules *rules, struct udev_device *dev, struct udev_event *event, struct token *cur)
1966 {
1967         const char *name;
1968         char nbuf[UTIL_NAME_SIZE];
1969         const char *value;
1970         char vbuf[UTIL_NAME_SIZE];
1971         size_t len;
1972
1973         name = &rules->buf[cur->key.attr_off];
1974         switch (cur->key.attrsubst) {
1975         case SB_FORMAT:
1976                 udev_event_apply_format(event, name, nbuf, sizeof(nbuf));
1977                 name = nbuf;
1978                 /* fall through */
1979         case SB_NONE:
1980                 value = udev_device_get_sysattr_value(dev, name);
1981                 if (value == NULL)
1982                         return -1;
1983                 break;
1984         case SB_SUBSYS:
1985                 if (util_resolve_subsys_kernel(event->udev, name, vbuf, sizeof(vbuf), 1) != 0)
1986                         return -1;
1987                 value = vbuf;
1988                 break;
1989         default:
1990                 return -1;
1991         }
1992
1993         /* remove trailing whitespace, if not asked to match for it */
1994         len = strlen(value);
1995         if (len > 0 && isspace(value[len-1])) {
1996                 const char *key_value;
1997                 size_t klen;
1998
1999                 key_value = &rules->buf[cur->key.value_off];
2000                 klen = strlen(key_value);
2001                 if (klen > 0 && !isspace(key_value[klen-1])) {
2002                         if (value != vbuf) {
2003                                 util_strscpy(vbuf, sizeof(vbuf), value);
2004                                 value = vbuf;
2005                         }
2006                         while (len > 0 && isspace(vbuf[--len]))
2007                                 vbuf[len] = '\0';
2008                 }
2009         }
2010
2011         return match_key(rules, cur, value);
2012 }
2013
2014 enum escape_type {
2015         ESCAPE_UNSET,
2016         ESCAPE_NONE,
2017         ESCAPE_REPLACE,
2018 };
2019
2020 int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event, const sigset_t *sigmask)
2021 {
2022         struct token *cur;
2023         struct token *rule;
2024         enum escape_type esc = ESCAPE_UNSET;
2025         bool can_set_name;
2026
2027         if (rules->tokens == NULL)
2028                 return -1;
2029
2030         can_set_name = ((strcmp(udev_device_get_action(event->dev), "remove") != 0) &&
2031                         (major(udev_device_get_devnum(event->dev)) > 0 ||
2032                          udev_device_get_ifindex(event->dev) > 0));
2033
2034         /* loop through token list, match, run actions or forward to next rule */
2035         cur = &rules->tokens[0];
2036         rule = cur;
2037         for (;;) {
2038                 dump_token(rules, cur);
2039                 switch (cur->type) {
2040                 case TK_RULE:
2041                         /* current rule */
2042                         rule = cur;
2043                         /* possibly skip rules which want to set NAME, SYMLINK, OWNER, GROUP, MODE */
2044                         if (!can_set_name && rule->rule.can_set_name)
2045                                 goto nomatch;
2046                         esc = ESCAPE_UNSET;
2047                         break;
2048                 case TK_M_ACTION:
2049                         if (match_key(rules, cur, udev_device_get_action(event->dev)) != 0)
2050                                 goto nomatch;
2051                         break;
2052                 case TK_M_DEVPATH:
2053                         if (match_key(rules, cur, udev_device_get_devpath(event->dev)) != 0)
2054                                 goto nomatch;
2055                         break;
2056                 case TK_M_KERNEL:
2057                         if (match_key(rules, cur, udev_device_get_sysname(event->dev)) != 0)
2058                                 goto nomatch;
2059                         break;
2060                 case TK_M_DEVLINK: {
2061                         size_t devlen = strlen(udev_get_dev_path(event->udev))+1;
2062                         struct udev_list_entry *list_entry;
2063                         bool match = false;
2064
2065                         udev_list_entry_foreach(list_entry, udev_device_get_devlinks_list_entry(event->dev)) {
2066                                 const char *devlink;
2067
2068                                 devlink =  &udev_list_entry_get_name(list_entry)[devlen];
2069                                 if (match_key(rules, cur, devlink) == 0) {
2070                                         match = true;
2071                                         break;
2072                                 }
2073                         }
2074                         if (!match)
2075                                 goto nomatch;
2076                         break;
2077                 }
2078                 case TK_M_NAME:
2079                         if (match_key(rules, cur, event->name) != 0)
2080                                 goto nomatch;
2081                         break;
2082                 case TK_M_ENV: {
2083                         const char *key_name = &rules->buf[cur->key.attr_off];
2084                         const char *value;
2085
2086                         value = udev_device_get_property_value(event->dev, key_name);
2087                         if (value == NULL)
2088                                 value = "";
2089                         if (match_key(rules, cur, value))
2090                                 goto nomatch;
2091                         break;
2092                 }
2093                 case TK_M_TAG: {
2094                         struct udev_list_entry *list_entry;
2095                         bool match = false;
2096
2097                         udev_list_entry_foreach(list_entry, udev_device_get_tags_list_entry(event->dev)) {
2098                                 if (strcmp(&rules->buf[cur->key.value_off], udev_list_entry_get_name(list_entry)) == 0) {
2099                                         match = true;
2100                                         break;
2101                                 }
2102                         }
2103                         if (!match && (cur->key.op != OP_NOMATCH))
2104                                 goto nomatch;
2105                         break;
2106                 }
2107                 case TK_M_SUBSYSTEM:
2108                         if (match_key(rules, cur, udev_device_get_subsystem(event->dev)) != 0)
2109                                 goto nomatch;
2110                         break;
2111                 case TK_M_DRIVER:
2112                         if (match_key(rules, cur, udev_device_get_driver(event->dev)) != 0)
2113                                 goto nomatch;
2114                         break;
2115                 case TK_M_WAITFOR: {
2116                         char filename[UTIL_PATH_SIZE];
2117                         int found;
2118
2119                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
2120                         found = (wait_for_file(event->dev, filename, 10) == 0);
2121                         if (!found && (cur->key.op != OP_NOMATCH))
2122                                 goto nomatch;
2123                         break;
2124                 }
2125                 case TK_M_ATTR:
2126                         if (match_attr(rules, event->dev, event, cur) != 0)
2127                                 goto nomatch;
2128                         break;
2129                 case TK_M_KERNELS:
2130                 case TK_M_SUBSYSTEMS:
2131                 case TK_M_DRIVERS:
2132                 case TK_M_ATTRS:
2133                 case TK_M_TAGS: {
2134                         struct token *next;
2135
2136                         /* get whole sequence of parent matches */
2137                         next = cur;
2138                         while (next->type > TK_M_PARENTS_MIN && next->type < TK_M_PARENTS_MAX)
2139                                 next++;
2140
2141                         /* loop over parents */
2142                         event->dev_parent = event->dev;
2143                         for (;;) {
2144                                 struct token *key;
2145
2146                                 /* loop over sequence of parent match keys */
2147                                 for (key = cur; key < next; key++ ) {
2148                                         dump_token(rules, key);
2149                                         switch(key->type) {
2150                                         case TK_M_KERNELS:
2151                                                 if (match_key(rules, key, udev_device_get_sysname(event->dev_parent)) != 0)
2152                                                         goto try_parent;
2153                                                 break;
2154                                         case TK_M_SUBSYSTEMS:
2155                                                 if (match_key(rules, key, udev_device_get_subsystem(event->dev_parent)) != 0)
2156                                                         goto try_parent;
2157                                                 break;
2158                                         case TK_M_DRIVERS:
2159                                                 if (match_key(rules, key, udev_device_get_driver(event->dev_parent)) != 0)
2160                                                         goto try_parent;
2161                                                 break;
2162                                         case TK_M_ATTRS:
2163                                                 if (match_attr(rules, event->dev_parent, event, key) != 0)
2164                                                         goto try_parent;
2165                                                 break;
2166                                         case TK_M_TAGS: {
2167                                                 bool match = udev_device_has_tag(event->dev_parent, &rules->buf[cur->key.value_off]);
2168
2169                                                 if (match && key->key.op == OP_NOMATCH)
2170                                                         goto try_parent;
2171                                                 if (!match && key->key.op == OP_MATCH)
2172                                                         goto try_parent;
2173                                                 break;
2174                                         }
2175                                         default:
2176                                                 goto nomatch;
2177                                         }
2178                                 }
2179                                 break;
2180
2181                         try_parent:
2182                                 event->dev_parent = udev_device_get_parent(event->dev_parent);
2183                                 if (event->dev_parent == NULL)
2184                                         goto nomatch;
2185                         }
2186                         /* move behind our sequence of parent match keys */
2187                         cur = next;
2188                         continue;
2189                 }
2190                 case TK_M_TEST: {
2191                         char filename[UTIL_PATH_SIZE];
2192                         struct stat statbuf;
2193                         int match;
2194
2195                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
2196                         if (util_resolve_subsys_kernel(event->udev, filename, filename, sizeof(filename), 0) != 0) {
2197                                 if (filename[0] != '/') {
2198                                         char tmp[UTIL_PATH_SIZE];
2199
2200                                         util_strscpy(tmp, sizeof(tmp), filename);
2201                                         util_strscpyl(filename, sizeof(filename),
2202                                                       udev_device_get_syspath(event->dev), "/", tmp, NULL);
2203                                 }
2204                         }
2205                         attr_subst_subdir(filename, sizeof(filename));
2206
2207                         match = (stat(filename, &statbuf) == 0);
2208                         if (match && cur->key.mode > 0)
2209                                 match = ((statbuf.st_mode & cur->key.mode) > 0);
2210                         if (match && cur->key.op == OP_NOMATCH)
2211                                 goto nomatch;
2212                         if (!match && cur->key.op == OP_MATCH)
2213                                 goto nomatch;
2214                         break;
2215                 }
2216                 case TK_M_EVENT_TIMEOUT:
2217                         log_debug("OPTIONS event_timeout=%u\n", cur->key.event_timeout);
2218                         event->timeout_usec = cur->key.event_timeout * 1000 * 1000;
2219                         break;
2220                 case TK_M_PROGRAM: {
2221                         char program[UTIL_PATH_SIZE];
2222                         char **envp;
2223                         char result[UTIL_PATH_SIZE];
2224
2225                         free(event->program_result);
2226                         event->program_result = NULL;
2227                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], program, sizeof(program));
2228                         envp = udev_device_get_properties_envp(event->dev);
2229                         log_debug("PROGRAM '%s' %s:%u\n",
2230                                   program,
2231                                   &rules->buf[rule->rule.filename_off],
2232                                   rule->rule.filename_line);
2233
2234                         if (udev_event_spawn(event, program, envp, sigmask, result, sizeof(result)) < 0) {
2235                                 if (cur->key.op != OP_NOMATCH)
2236                                         goto nomatch;
2237                         } else {
2238                                 int count;
2239
2240                                 util_remove_trailing_chars(result, '\n');
2241                                 if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
2242                                         count = util_replace_chars(result, UDEV_ALLOWED_CHARS_INPUT);
2243                                         if (count > 0)
2244                                                 log_debug("%i character(s) replaced\n" , count);
2245                                 }
2246                                 event->program_result = strdup(result);
2247                                 if (cur->key.op == OP_NOMATCH)
2248                                         goto nomatch;
2249                         }
2250                         break;
2251                 }
2252                 case TK_M_IMPORT_FILE: {
2253                         char import[UTIL_PATH_SIZE];
2254
2255                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
2256                         if (import_file_into_properties(event->dev, import) != 0)
2257                                 if (cur->key.op != OP_NOMATCH)
2258                                         goto nomatch;
2259                         break;
2260                 }
2261                 case TK_M_IMPORT_PROG: {
2262                         char import[UTIL_PATH_SIZE];
2263
2264                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
2265                         log_debug("IMPORT '%s' %s:%u\n",
2266                                   import,
2267                                   &rules->buf[rule->rule.filename_off],
2268                                   rule->rule.filename_line);
2269
2270                         if (import_program_into_properties(event, import, sigmask) != 0)
2271                                 if (cur->key.op != OP_NOMATCH)
2272                                         goto nomatch;
2273                         break;
2274                 }
2275                 case TK_M_IMPORT_BUILTIN: {
2276                         char command[UTIL_PATH_SIZE];
2277
2278                         if (udev_builtin_run_once(cur->key.builtin_cmd)) {
2279                                 /* check if we ran already */
2280                                 if (event->builtin_run & (1 << cur->key.builtin_cmd)) {
2281                                         log_debug("IMPORT builtin skip '%s' %s:%u\n",
2282                                                   udev_builtin_name(cur->key.builtin_cmd),
2283                                                   &rules->buf[rule->rule.filename_off],
2284                                                   rule->rule.filename_line);
2285                                         /* return the result from earlier run */
2286                                         if (event->builtin_ret & (1 << cur->key.builtin_cmd))
2287                                         if (cur->key.op != OP_NOMATCH)
2288                                                         goto nomatch;
2289                                         break;
2290                                 }
2291                                 /* mark as ran */
2292                                 event->builtin_run |= (1 << cur->key.builtin_cmd);
2293                         }
2294
2295                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], command, sizeof(command));
2296                         log_debug("IMPORT builtin '%s' %s:%u\n",
2297                                   udev_builtin_name(cur->key.builtin_cmd),
2298                                   &rules->buf[rule->rule.filename_off],
2299                                   rule->rule.filename_line);
2300
2301                         if (udev_builtin_run(event->dev, cur->key.builtin_cmd, command, false) != 0) {
2302                                 /* remember failure */
2303                                 log_debug("IMPORT builtin '%s' returned non-zero\n",
2304                                           udev_builtin_name(cur->key.builtin_cmd));
2305                                 event->builtin_ret |= (1 << cur->key.builtin_cmd);
2306                                 if (cur->key.op != OP_NOMATCH)
2307                                         goto nomatch;
2308                         }
2309                         break;
2310                 }
2311                 case TK_M_IMPORT_DB: {
2312                         const char *key = &rules->buf[cur->key.value_off];
2313                         const char *value;
2314
2315                         value = udev_device_get_property_value(event->dev_db, key);
2316                         if (value != NULL) {
2317                                 struct udev_list_entry *entry;
2318
2319                                 entry = udev_device_add_property(event->dev, key, value);
2320                                 udev_list_entry_set_num(entry, true);
2321                         } else {
2322                                 if (cur->key.op != OP_NOMATCH)
2323                                         goto nomatch;
2324                         }
2325                         break;
2326                 }
2327                 case TK_M_IMPORT_CMDLINE: {
2328                         FILE *f;
2329                         bool imported = false;
2330
2331                         f = fopen("/proc/cmdline", "r");
2332                         if (f != NULL) {
2333                                 char cmdline[4096];
2334
2335                                 if (fgets(cmdline, sizeof(cmdline), f) != NULL) {
2336                                         const char *key = &rules->buf[cur->key.value_off];
2337                                         char *pos;
2338
2339                                         pos = strstr(cmdline, key);
2340                                         if (pos != NULL) {
2341                                                 struct udev_list_entry *entry;
2342
2343                                                 pos += strlen(key);
2344                                                 if (pos[0] == '\0' || isspace(pos[0])) {
2345                                                         /* we import simple flags as 'FLAG=1' */
2346                                                         entry = udev_device_add_property(event->dev, key, "1");
2347                                                         udev_list_entry_set_num(entry, true);
2348                                                         imported = true;
2349                                                 } else if (pos[0] == '=') {
2350                                                         const char *value;
2351
2352                                                         pos++;
2353                                                         value = pos;
2354                                                         while (pos[0] != '\0' && !isspace(pos[0]))
2355                                                                 pos++;
2356                                                         pos[0] = '\0';
2357                                                         entry = udev_device_add_property(event->dev, key, value);
2358                                                         udev_list_entry_set_num(entry, true);
2359                                                         imported = true;
2360                                                 }
2361                                         }
2362                                 }
2363                                 fclose(f);
2364                         }
2365                         if (!imported && cur->key.op != OP_NOMATCH)
2366                                 goto nomatch;
2367                         break;
2368                 }
2369                 case TK_M_IMPORT_PARENT: {
2370                         char import[UTIL_PATH_SIZE];
2371
2372                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
2373                         if (import_parent_into_properties(event->dev, import) != 0)
2374                                 if (cur->key.op != OP_NOMATCH)
2375                                         goto nomatch;
2376                         break;
2377                 }
2378                 case TK_M_RESULT:
2379                         if (match_key(rules, cur, event->program_result) != 0)
2380                                 goto nomatch;
2381                         break;
2382                 case TK_A_STRING_ESCAPE_NONE:
2383                         esc = ESCAPE_NONE;
2384                         break;
2385                 case TK_A_STRING_ESCAPE_REPLACE:
2386                         esc = ESCAPE_REPLACE;
2387                         break;
2388                 case TK_A_DB_PERSIST:
2389                         udev_device_set_db_persist(event->dev);
2390                         break;
2391                 case TK_A_INOTIFY_WATCH:
2392                         if (event->inotify_watch_final)
2393                                 break;
2394                         if (cur->key.op == OP_ASSIGN_FINAL)
2395                                 event->inotify_watch_final = true;
2396                         event->inotify_watch = cur->key.watch;
2397                         break;
2398                 case TK_A_DEVLINK_PRIO:
2399                         udev_device_set_devlink_priority(event->dev, cur->key.devlink_prio);
2400                         break;
2401                 case TK_A_OWNER: {
2402                         char owner[UTIL_NAME_SIZE];
2403
2404                         if (event->owner_final)
2405                                 break;
2406                         if (cur->key.op == OP_ASSIGN_FINAL)
2407                                 event->owner_final = true;
2408                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], owner, sizeof(owner));
2409                         event->uid = util_lookup_user(event->udev, owner);
2410                         log_debug("OWNER %u %s:%u\n",
2411                                   event->uid,
2412                                   &rules->buf[rule->rule.filename_off],
2413                                   rule->rule.filename_line);
2414                         break;
2415                 }
2416                 case TK_A_GROUP: {
2417                         char group[UTIL_NAME_SIZE];
2418
2419                         if (event->group_final)
2420                                 break;
2421                         if (cur->key.op == OP_ASSIGN_FINAL)
2422                                 event->group_final = true;
2423                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], group, sizeof(group));
2424                         event->gid = util_lookup_group(event->udev, group);
2425                         log_debug("GROUP %u %s:%u\n",
2426                                   event->gid,
2427                                   &rules->buf[rule->rule.filename_off],
2428                                   rule->rule.filename_line);
2429                         break;
2430                 }
2431                 case TK_A_MODE: {
2432                         char mode_str[UTIL_NAME_SIZE];
2433                         mode_t mode;
2434                         char *endptr;
2435
2436                         if (event->mode_final)
2437                                 break;
2438                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], mode_str, sizeof(mode_str));
2439                         mode = strtol(mode_str, &endptr, 8);
2440                         if (endptr[0] != '\0') {
2441                                 log_error("ignoring invalid mode '%s'\n", mode_str);
2442                                 break;
2443                         }
2444                         if (cur->key.op == OP_ASSIGN_FINAL)
2445                                 event->mode_final = true;
2446                         event->mode_set = true;
2447                         event->mode = mode;
2448                         log_debug("MODE %#o %s:%u\n",
2449                                   event->mode,
2450                                   &rules->buf[rule->rule.filename_off],
2451                                   rule->rule.filename_line);
2452                         break;
2453                 }
2454                 case TK_A_OWNER_ID:
2455                         if (event->owner_final)
2456                                 break;
2457                         if (cur->key.op == OP_ASSIGN_FINAL)
2458                                 event->owner_final = true;
2459                         event->uid = cur->key.uid;
2460                         log_debug("OWNER %u %s:%u\n",
2461                                   event->uid,
2462                                   &rules->buf[rule->rule.filename_off],
2463                                   rule->rule.filename_line);
2464                         break;
2465                 case TK_A_GROUP_ID:
2466                         if (event->group_final)
2467                                 break;
2468                         if (cur->key.op == OP_ASSIGN_FINAL)
2469                                 event->group_final = true;
2470                         event->gid = cur->key.gid;
2471                         log_debug("GROUP %u %s:%u\n",
2472                                   event->gid,
2473                                   &rules->buf[rule->rule.filename_off],
2474                                   rule->rule.filename_line);
2475                         break;
2476                 case TK_A_MODE_ID:
2477                         if (event->mode_final)
2478                                 break;
2479                         if (cur->key.op == OP_ASSIGN_FINAL)
2480                                 event->mode_final = true;
2481                         event->mode_set = true;
2482                         event->mode = cur->key.mode;
2483                         log_debug("MODE %#o %s:%u\n",
2484                                   event->mode,
2485                                   &rules->buf[rule->rule.filename_off],
2486                                   rule->rule.filename_line);
2487                         break;
2488                 case TK_A_ENV: {
2489                         const char *name = &rules->buf[cur->key.attr_off];
2490                         char *value = &rules->buf[cur->key.value_off];
2491
2492                         if (value[0] != '\0') {
2493                                 char temp_value[UTIL_NAME_SIZE];
2494                                 struct udev_list_entry *entry;
2495
2496                                 udev_event_apply_format(event, value, temp_value, sizeof(temp_value));
2497                                 entry = udev_device_add_property(event->dev, name, temp_value);
2498                                 /* store in db, skip private keys */
2499                                 if (name[0] != '.')
2500                                         udev_list_entry_set_num(entry, true);
2501                         } else {
2502                                 udev_device_add_property(event->dev, name, NULL);
2503                         }
2504                         break;
2505                 }
2506                 case TK_A_TAG: {
2507                         char tag[UTIL_PATH_SIZE];
2508                         const char *p;
2509
2510                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], tag, sizeof(tag));
2511                         if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
2512                                 udev_device_cleanup_tags_list(event->dev);
2513                         for (p = tag; *p != '\0'; p++) {
2514                                 if ((*p >= 'a' && *p <= 'z') ||
2515                                     (*p >= 'A' && *p <= 'Z') ||
2516                                     (*p >= '0' && *p <= '9') ||
2517                                     *p == '-' || *p == '_')
2518                                         continue;
2519                                 log_error("ignoring invalid tag name '%s'\n", tag);
2520                                 break;
2521                         }
2522                         udev_device_add_tag(event->dev, tag);
2523                         break;
2524                 }
2525                 case TK_A_NAME: {
2526                         const char *name  = &rules->buf[cur->key.value_off];
2527
2528                         char name_str[UTIL_PATH_SIZE];
2529                         int count;
2530
2531                         if (event->name_final)
2532                                 break;
2533                         if (cur->key.op == OP_ASSIGN_FINAL)
2534                                 event->name_final = true;
2535                         udev_event_apply_format(event, name, name_str, sizeof(name_str));
2536                         if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
2537                                 count = util_replace_chars(name_str, "/");
2538                                 if (count > 0)
2539                                         log_debug("%i character(s) replaced\n", count);
2540                         }
2541                         if (major(udev_device_get_devnum(event->dev))) {
2542                                 size_t devlen = strlen(udev_get_dev_path(event->udev))+1;
2543
2544                                 if (strcmp(name_str, &udev_device_get_devnode(event->dev)[devlen]) != 0) {
2545                                         log_error("NAME=\"%s\" ignored, kernel device nodes "
2546                                             "can not be renamed; please fix it in %s:%u\n", name,
2547                                             &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
2548                                         break;
2549                                 }
2550                         }
2551                         free(event->name);
2552                         event->name = strdup(name_str);
2553                         log_debug("NAME '%s' %s:%u\n",
2554                                   event->name,
2555                                   &rules->buf[rule->rule.filename_off],
2556                                   rule->rule.filename_line);
2557                         break;
2558                 }
2559                 case TK_A_DEVLINK: {
2560                         char temp[UTIL_PATH_SIZE];
2561                         char filename[UTIL_PATH_SIZE];
2562                         char *pos, *next;
2563                         int count = 0;
2564
2565                         if (event->devlink_final)
2566                                 break;
2567                         if (major(udev_device_get_devnum(event->dev)) == 0)
2568                                 break;
2569                         if (cur->key.op == OP_ASSIGN_FINAL)
2570                                 event->devlink_final = true;
2571                         if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
2572                                 udev_device_cleanup_devlinks_list(event->dev);
2573
2574                         /* allow  multiple symlinks separated by spaces */
2575                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], temp, sizeof(temp));
2576                         if (esc == ESCAPE_UNSET)
2577                                 count = util_replace_chars(temp, "/ ");
2578                         else if (esc == ESCAPE_REPLACE)
2579                                 count = util_replace_chars(temp, "/");
2580                         if (count > 0)
2581                                 log_debug("%i character(s) replaced\n" , count);
2582                         pos = temp;
2583                         while (isspace(pos[0]))
2584                                 pos++;
2585                         next = strchr(pos, ' ');
2586                         while (next != NULL) {
2587                                 next[0] = '\0';
2588                                 log_debug("LINK '%s' %s:%u\n", pos,
2589                                           &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
2590                                 util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
2591                                 udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
2592                                 while (isspace(next[1]))
2593                                         next++;
2594                                 pos = &next[1];
2595                                 next = strchr(pos, ' ');
2596                         }
2597                         if (pos[0] != '\0') {
2598                                 log_debug("LINK '%s' %s:%u\n", pos,
2599                                           &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
2600                                 util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
2601                                 udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
2602                         }
2603                         break;
2604                 }
2605                 case TK_A_ATTR: {
2606                         const char *key_name = &rules->buf[cur->key.attr_off];
2607                         char attr[UTIL_PATH_SIZE];
2608                         char value[UTIL_NAME_SIZE];
2609                         FILE *f;
2610
2611                         if (util_resolve_subsys_kernel(event->udev, key_name, attr, sizeof(attr), 0) != 0)
2612                                 util_strscpyl(attr, sizeof(attr), udev_device_get_syspath(event->dev), "/", key_name, NULL);
2613                         attr_subst_subdir(attr, sizeof(attr));
2614
2615                         udev_event_apply_format(event, &rules->buf[cur->key.value_off], value, sizeof(value));
2616                         log_debug("ATTR '%s' writing '%s' %s:%u\n", attr, value,
2617                                   &rules->buf[rule->rule.filename_off],
2618                                   rule->rule.filename_line);
2619                         f = fopen(attr, "w");
2620                         if (f != NULL) {
2621                                 if (fprintf(f, "%s", value) <= 0)
2622                                         log_error("error writing ATTR{%s}: %m\n", attr);
2623                                 fclose(f);
2624                         } else {
2625                                 log_error("error opening ATTR{%s} for writing: %m\n", attr);
2626                         }
2627                         break;
2628                 }
2629                 case TK_A_RUN_BUILTIN:
2630                 case TK_A_RUN_PROGRAM: {
2631                         struct udev_list_entry *entry;
2632
2633                         if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
2634                                 udev_list_cleanup(&event->run_list);
2635                         log_debug("RUN '%s' %s:%u\n",
2636                                   &rules->buf[cur->key.value_off],
2637                                   &rules->buf[rule->rule.filename_off],
2638                                   rule->rule.filename_line);
2639                         entry = udev_list_entry_add(&event->run_list, &rules->buf[cur->key.value_off], NULL);
2640                         udev_list_entry_set_num(entry, cur->key.builtin_cmd);
2641                         break;
2642                 }
2643                 case TK_A_GOTO:
2644                         if (cur->key.rule_goto == 0)
2645                                 break;
2646                         cur = &rules->tokens[cur->key.rule_goto];
2647                         continue;
2648                 case TK_END:
2649                         return 0;
2650
2651                 case TK_M_PARENTS_MIN:
2652                 case TK_M_PARENTS_MAX:
2653                 case TK_M_MAX:
2654                 case TK_UNSET:
2655                         log_error("wrong type %u\n", cur->type);
2656                         goto nomatch;
2657                 }
2658
2659                 cur++;
2660                 continue;
2661         nomatch:
2662                 /* fast-forward to next rule */
2663                 cur = rule + rule->rule.token_count;
2664         }
2665 }
2666
2667 void udev_rules_apply_static_dev_perms(struct udev_rules *rules)
2668 {
2669         struct token *cur;
2670         struct token *rule;
2671         uid_t uid = 0;
2672         gid_t gid = 0;
2673         mode_t mode = 0;
2674
2675         if (rules->tokens == NULL)
2676                 return;
2677
2678         cur = &rules->tokens[0];
2679         rule = cur;
2680         for (;;) {
2681                 switch (cur->type) {
2682                 case TK_RULE:
2683                         /* current rule */
2684                         rule = cur;
2685
2686                         /* skip rules without a static_node tag */
2687                         if (!rule->rule.has_static_node)
2688                                 goto next;
2689
2690                         uid = 0;
2691                         gid = 0;
2692                         mode = 0;
2693                         break;
2694                 case TK_A_OWNER_ID:
2695                         uid = cur->key.uid;
2696                         break;
2697                 case TK_A_GROUP_ID:
2698                         gid = cur->key.gid;
2699                         break;
2700                 case TK_A_MODE_ID:
2701                         mode = cur->key.mode;
2702                         break;
2703                 case TK_A_STATIC_NODE: {
2704                         char filename[UTIL_PATH_SIZE];
2705                         struct stat stats;
2706
2707                         /* we assure, that the permissions tokens are sorted before the static token */
2708                         if (mode == 0 && uid == 0 && gid == 0)
2709                                 goto next;
2710                         util_strscpyl(filename, sizeof(filename), udev_get_dev_path(rules->udev), "/",
2711                                       &rules->buf[cur->key.value_off], NULL);
2712                         if (stat(filename, &stats) != 0)
2713                                 goto next;
2714                         if (!S_ISBLK(stats.st_mode) && !S_ISCHR(stats.st_mode))
2715                                 goto next;
2716                         if (mode == 0) {
2717                                 if (gid > 0)
2718                                         mode = 0660;
2719                                 else
2720                                         mode = 0600;
2721                         }
2722                         if (mode != (stats.st_mode & 01777)) {
2723                                 chmod(filename, mode);
2724                                 log_debug("chmod '%s' %#o\n", filename, mode);
2725                         }
2726
2727                         if ((uid != 0 && uid != stats.st_uid) || (gid != 0 && gid != stats.st_gid)) {
2728                                 chown(filename, uid, gid);
2729                                 log_debug("chown '%s' %u %u\n", filename, uid, gid);
2730                         }
2731
2732                         utimensat(AT_FDCWD, filename, NULL, 0);
2733                         break;
2734                 }
2735                 case TK_END:
2736                         return;
2737                 }
2738
2739                 cur++;
2740                 continue;
2741 next:
2742                 /* fast-forward to next rule */
2743                 cur = rule + rule->rule.token_count;
2744                 continue;
2745         }
2746 }