string.c: do not interpret '\\' before '\0' (CVE-2019-15846)
[exim.git] / src / src / globals.c
1 /*************************************************
2 *     Exim - an Internet mail transport agent    *
3 *************************************************/
4
5 /* Copyright (c) University of Cambridge 1995 - 2018 */
6 /* See the file NOTICE for conditions of use and distribution. */
7
8 /* All the global variables are defined together in this one module, so
9 that they are easy to find. */
10
11 #include "exim.h"
12
13
14 /* Generic options for auths, all of which live inside auth_instance
15 data blocks and hence have the opt_public flag set. */
16
17 optionlist optionlist_auths[] = {
18   { "client_condition", opt_stringptr | opt_public,
19                  (void *)(offsetof(auth_instance, client_condition)) },
20   { "client_set_id", opt_stringptr | opt_public,
21                  (void *)(offsetof(auth_instance, set_client_id)) },
22   { "driver",        opt_stringptr | opt_public,
23                  (void *)(offsetof(auth_instance, driver_name)) },
24   { "public_name",   opt_stringptr | opt_public,
25                  (void *)(offsetof(auth_instance, public_name)) },
26   { "server_advertise_condition", opt_stringptr | opt_public,
27                  (void *)(offsetof(auth_instance, advertise_condition))},
28   { "server_condition", opt_stringptr | opt_public,
29                  (void *)(offsetof(auth_instance, server_condition)) },
30   { "server_debug_print", opt_stringptr | opt_public,
31                  (void *)(offsetof(auth_instance, server_debug_string)) },
32   { "server_mail_auth_condition", opt_stringptr | opt_public,
33                  (void *)(offsetof(auth_instance, mail_auth_condition)) },
34   { "server_set_id", opt_stringptr | opt_public,
35                  (void *)(offsetof(auth_instance, set_id)) }
36 };
37
38 int     optionlist_auths_size = nelem(optionlist_auths);
39
40 /* An empty host aliases list. */
41
42 uschar *no_aliases             = NULL;
43
44
45 /* For comments on these variables, see globals.h. I'm too idle to
46 duplicate them here... */
47
48 #ifdef EXIM_PERL
49 uschar *opt_perl_startup       = NULL;
50 BOOL    opt_perl_at_start      = FALSE;
51 BOOL    opt_perl_started       = FALSE;
52 BOOL    opt_perl_taintmode     = FALSE;
53 #endif
54
55 #ifdef EXPAND_DLFUNC
56 tree_node *dlobj_anchor        = NULL;
57 #endif
58
59 #ifdef LOOKUP_IBASE
60 uschar *ibase_servers          = NULL;
61 #endif
62
63 #ifdef LOOKUP_LDAP
64 uschar *eldap_ca_cert_dir      = NULL;
65 uschar *eldap_ca_cert_file     = NULL;
66 uschar *eldap_cert_file        = NULL;
67 uschar *eldap_cert_key         = NULL;
68 uschar *eldap_cipher_suite     = NULL;
69 uschar *eldap_default_servers  = NULL;
70 uschar *eldap_require_cert     = NULL;
71 int     eldap_version          = -1;
72 BOOL    eldap_start_tls        = FALSE;
73 #endif
74
75 #ifdef LOOKUP_MYSQL
76 uschar *mysql_servers          = NULL;
77 #endif
78
79 #ifdef LOOKUP_ORACLE
80 uschar *oracle_servers         = NULL;
81 #endif
82
83 #ifdef LOOKUP_PGSQL
84 uschar *pgsql_servers          = NULL;
85 #endif
86
87 #ifdef LOOKUP_REDIS
88 uschar *redis_servers          = NULL;
89 #endif
90
91 #ifdef LOOKUP_SQLITE
92 int     sqlite_lock_timeout    = 5;
93 #endif
94
95 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
96 BOOL    move_frozen_messages   = FALSE;
97 #endif
98
99 /* These variables are outside the #ifdef because it keeps the code less
100 cluttered in several places (e.g. during logging) if we can always refer to
101 them. Also, the tls_ variables are now always visible.  Note that these are
102 only used for smtp connections, not for service-daemon access. */
103
104 tls_support tls_in = {
105  .active =              {.sock = -1},
106  .bits =                0,
107  .certificate_verified = FALSE,
108 #ifdef SUPPORT_DANE
109  .dane_verified =       FALSE,
110  .tlsa_usage =          0,
111 #endif
112  .cipher =              NULL,
113  .on_connect =          FALSE,
114  .on_connect_ports =    NULL,
115  .ourcert =             NULL,
116  .peercert =            NULL,
117  .peerdn =              NULL,
118  .sni =                 NULL,
119  .ocsp =                OCSP_NOT_REQ
120 };
121 tls_support tls_out = {
122  .active =              {.sock = -1},
123  .bits =                0,
124  .certificate_verified = FALSE,
125 #ifdef SUPPORT_DANE
126  .dane_verified =       FALSE,
127  .tlsa_usage =          0,
128 #endif
129  .cipher =              NULL,
130  .on_connect =          FALSE,
131  .on_connect_ports =    NULL,
132  .ourcert =             NULL,
133  .peercert =            NULL,
134  .peerdn =              NULL,
135  .sni =                 NULL,
136  .ocsp =                OCSP_NOT_REQ
137 };
138
139 uschar *dsn_envid              = NULL;
140 int     dsn_ret                = 0;
141 const pcre  *regex_DSN         = NULL;
142 uschar *dsn_advertise_hosts    = NULL;
143
144 #ifdef SUPPORT_TLS
145 BOOL    gnutls_compat_mode     = FALSE;
146 BOOL    gnutls_allow_auto_pkcs11 = FALSE;
147 uschar *openssl_options        = NULL;
148 const pcre *regex_STARTTLS     = NULL;
149 uschar *tls_advertise_hosts    = US"*";
150 uschar *tls_certificate        = NULL;
151 uschar *tls_crl                = NULL;
152 /* This default matches NSS DH_MAX_P_BITS value at current time (2012), because
153 that's the interop problem which has been observed: GnuTLS suggesting a higher
154 bit-count as "NORMAL" (2432) and Thunderbird dropping connection. */
155 int     tls_dh_max_bits        = 2236;
156 uschar *tls_dhparam            = NULL;
157 uschar *tls_eccurve            = US"auto";
158 # ifndef DISABLE_OCSP
159 uschar *tls_ocsp_file          = NULL;
160 # endif
161 uschar *tls_privatekey         = NULL;
162 BOOL    tls_remember_esmtp     = FALSE;
163 uschar *tls_require_ciphers    = NULL;
164 # ifdef EXPERIMENTAL_REQUIRETLS
165 uschar  tls_requiretls         = 0;     /* REQUIRETLS_MSG etc. bit #defines */
166 uschar *tls_advertise_requiretls = US"*";
167 const pcre *regex_REQUIRETLS   = NULL;
168 # endif
169 uschar *tls_try_verify_hosts   = NULL;
170 uschar *tls_verify_certificates= US"system";
171 uschar *tls_verify_hosts       = NULL;
172 #else   /*!SUPPORT_TLS*/
173 uschar *tls_advertise_hosts    = NULL;
174 #endif
175
176 #ifndef DISABLE_PRDR
177 /* Per Recipient Data Response variables */
178 BOOL    prdr_enable            = FALSE;
179 BOOL    prdr_requested         = FALSE;
180 const pcre *regex_PRDR         = NULL;
181 #endif
182
183 #ifdef SUPPORT_I18N
184 const pcre *regex_UTF8         = NULL;
185 #endif
186
187 /* Input-reading functions for messages, so we can use special ones for
188 incoming TCP/IP. The defaults use stdin. We never need these for any
189 stand-alone tests. */
190
191 #if !defined(STAND_ALONE) && !defined(MACRO_PREDEF)
192 int (*lwr_receive_getc)(unsigned) = stdin_getc;
193 uschar * (*lwr_receive_getbuf)(unsigned *) = NULL;
194 int (*lwr_receive_ungetc)(int) = stdin_ungetc;
195 int (*receive_getc)(unsigned)  = stdin_getc;
196 uschar * (*receive_getbuf)(unsigned *)  = NULL;
197 void (*receive_get_cache)(void)= NULL;
198 int (*receive_ungetc)(int)     = stdin_ungetc;
199 int (*receive_feof)(void)      = stdin_feof;
200 int (*receive_ferror)(void)    = stdin_ferror;
201 BOOL (*receive_smtp_buffered)(void) = NULL;   /* Only used for SMTP */
202 #endif
203
204
205 /* List of per-address expansion variables for clearing and saving/restoring
206 when verifying one address while routing/verifying another. We have to have
207 the size explicit, because it is referenced from more than one module. */
208
209 const uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT] = {
210   CUSS &deliver_address_data,
211   CUSS &deliver_domain,
212   CUSS &deliver_domain_data,
213   CUSS &deliver_domain_orig,
214   CUSS &deliver_domain_parent,
215   CUSS &deliver_localpart,
216   CUSS &deliver_localpart_data,
217   CUSS &deliver_localpart_orig,
218   CUSS &deliver_localpart_parent,
219   CUSS &deliver_localpart_prefix,
220   CUSS &deliver_localpart_suffix,
221   CUSS (uschar **)(&deliver_recipients),
222   CUSS &deliver_host,
223   CUSS &deliver_home,
224   CUSS &address_file,
225   CUSS &address_pipe,
226   CUSS &self_hostname,
227   NULL };
228
229 int address_expansions_count = sizeof(address_expansions)/sizeof(uschar **);
230
231 /******************************************************************************/
232 /* General global variables.  Boolean flags are done as a group
233 so that only one bit each is needed, packed, for all those we never
234 need to take a pointer - and only a char for the rest.
235 This means a struct, unfortunately since it clutters the sourcecode. */
236
237 struct global_flags f =
238 {
239         .acl_temp_details       = FALSE,
240         .active_local_from_check = FALSE,
241         .active_local_sender_retain = FALSE,
242         .address_test_mode      = FALSE,
243         .admin_user             = FALSE,
244         .allow_auth_unadvertised= FALSE,
245         .allow_unqualified_recipient = TRUE,    /* For local messages */
246         .allow_unqualified_sender = TRUE,       /* Reset for SMTP */
247         .authentication_local   = FALSE,
248
249         .background_daemon      = TRUE,
250
251         .chunking_offered       = FALSE,
252         .config_changed         = FALSE,
253         .continue_more          = FALSE,
254
255         .daemon_listen          = FALSE,
256         .debug_daemon           = FALSE,
257         .deliver_firsttime      = FALSE,
258         .deliver_force          = FALSE,
259         .deliver_freeze         = FALSE,
260         .deliver_force_thaw     = FALSE,
261         .deliver_manual_thaw    = FALSE,
262         .deliver_selectstring_regex = FALSE,
263         .deliver_selectstring_sender_regex = FALSE,
264         .disable_callout_flush  = FALSE,
265         .disable_delay_flush    = FALSE,
266         .disable_logging        = FALSE,
267 #ifndef DISABLE_DKIM
268         .dkim_disable_verify      = FALSE,
269 #endif
270 #ifdef EXPERIMENTAL_DMARC
271         .dmarc_has_been_checked  = FALSE,
272         .dmarc_disable_verify    = FALSE,
273         .dmarc_enable_forensic   = FALSE,
274 #endif
275         .dont_deliver           = FALSE,
276         .dot_ends               = TRUE,
277
278         .enable_dollar_recipients = FALSE,
279         .expand_string_forcedfail = FALSE,
280
281         .filter_running         = FALSE,
282
283         .header_rewritten       = FALSE,
284         .helo_verified          = FALSE,
285         .helo_verify_failed     = FALSE,
286         .host_checking_callout  = FALSE,
287         .host_find_failed_syntax= FALSE,
288
289         .inetd_wait_mode        = FALSE,
290         .is_inetd               = FALSE,
291
292         .local_error_message    = FALSE,
293         .log_testing_mode       = FALSE,
294
295 #ifdef WITH_CONTENT_SCAN
296         .no_mbox_unspool        = FALSE,
297 #endif
298         .no_multiline_responses = FALSE,
299
300         .parse_allow_group      = FALSE,
301         .parse_found_group      = FALSE,
302         .pipelining_enable      = TRUE,
303 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
304         .proxy_session_failed   = FALSE,
305 #endif
306
307         .queue_2stage           = FALSE,
308         .queue_only_policy      = FALSE,
309         .queue_run_first_delivery = FALSE,
310         .queue_run_force        = FALSE,
311         .queue_run_local        = FALSE,
312         .queue_running          = FALSE,
313         .queue_smtp             = FALSE,
314
315         .really_exim            = TRUE,
316         .receive_call_bombout   = FALSE,
317         .recipients_discarded   = FALSE,
318         .running_in_test_harness = FALSE,
319
320         .search_find_defer      = FALSE,
321         .sender_address_forced  = FALSE,
322         .sender_host_notsocket  = FALSE,
323         .sender_host_unknown    = FALSE,
324         .sender_local           = FALSE,
325         .sender_name_forced     = FALSE,
326         .sender_set_untrusted   = FALSE,
327         .smtp_authenticated     = FALSE,
328 #ifdef EXPERIMENTAL_PIPE_CONNECT
329         .smtp_in_early_pipe_advertised = FALSE,
330         .smtp_in_early_pipe_no_auth = FALSE,
331         .smtp_in_early_pipe_used = FALSE,
332 #endif
333         .smtp_in_pipelining_advertised = FALSE,
334         .smtp_in_pipelining_used = FALSE,
335         .spool_file_wireformat  = FALSE,
336         .submission_mode        = FALSE,
337         .suppress_local_fixups  = FALSE,
338         .suppress_local_fixups_default = FALSE,
339         .synchronous_delivery   = FALSE,
340         .system_filtering       = FALSE,
341
342         .tcp_fastopen_ok        = FALSE,
343         .tcp_in_fastopen        = FALSE,
344         .tcp_in_fastopen_data   = FALSE,
345         .tcp_in_fastopen_logged = FALSE,
346         .tcp_out_fastopen_logged= FALSE,
347         .timestamps_utc         = FALSE,
348         .transport_filter_timed_out = FALSE,
349         .trusted_caller         = FALSE,
350         .trusted_config         = TRUE,
351 };
352
353 /******************************************************************************/
354 /* These are the flags which are either variables or mainsection options,
355 so an address is needed for access, or are exported to local_scan. */
356
357 BOOL    accept_8bitmime        = TRUE; /* deliberately not RFC compliant */
358 BOOL    allow_domain_literals  = FALSE;
359 BOOL    allow_mx_to_ip         = FALSE;
360 BOOL    allow_utf8_domains     = FALSE;
361 BOOL    authentication_failed  = FALSE;
362
363 BOOL    bounce_return_body     = TRUE;
364 BOOL    bounce_return_message  = TRUE;
365 BOOL    check_rfc2047_length   = TRUE;
366 BOOL    commandline_checks_require_admin = FALSE;
367
368 #ifdef EXPERIMENTAL_DCC
369 BOOL    dcc_direct_add_header  = FALSE;
370 #endif
371 BOOL    debug_store            = FALSE;
372 BOOL    delivery_date_remove   = TRUE;
373 BOOL    deliver_drop_privilege = FALSE;
374 #ifdef ENABLE_DISABLE_FSYNC
375 BOOL    disable_fsync          = FALSE;
376 #endif
377 BOOL    disable_ipv6           = FALSE;
378 BOOL    dns_csa_use_reverse    = TRUE;
379 BOOL    drop_cr                = FALSE;         /* No longer used */
380
381 BOOL    envelope_to_remove     = TRUE;
382 BOOL    exim_gid_set           = TRUE;          /* This gid is always set */
383 BOOL    exim_uid_set           = TRUE;          /* This uid is always set */
384 BOOL    extract_addresses_remove_arguments = TRUE;
385
386 BOOL    host_checking          = FALSE;
387 BOOL    host_lookup_deferred   = FALSE;
388 BOOL    host_lookup_failed     = FALSE;
389 BOOL    ignore_fromline_local  = FALSE;
390
391 BOOL    local_from_check       = TRUE;
392 BOOL    local_sender_retain    = FALSE;
393 BOOL    log_timezone           = FALSE;
394 BOOL    message_body_newlines  = FALSE;
395 BOOL    message_logs           = TRUE;
396 #ifdef SUPPORT_I18N
397 BOOL    message_smtputf8       = FALSE;
398 #endif
399 BOOL    mua_wrapper            = FALSE;
400
401 BOOL    preserve_message_logs  = FALSE;
402 BOOL    print_topbitchars      = FALSE;
403 BOOL    prod_requires_admin    = TRUE;
404 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
405 BOOL    proxy_session          = FALSE;
406 #endif
407
408 BOOL    queue_list_requires_admin = TRUE;
409 BOOL    queue_only             = FALSE;
410 BOOL    queue_only_load_latch  = TRUE;
411 BOOL    queue_only_override    = TRUE;
412 BOOL    queue_run_in_order     = FALSE;
413 BOOL    recipients_max_reject  = FALSE;
414 BOOL    return_path_remove     = TRUE;
415
416 BOOL    smtp_batched_input     = FALSE;
417 BOOL    sender_helo_dnssec     = FALSE;
418 BOOL    sender_host_dnssec     = FALSE;
419 BOOL    smtp_accept_keepalive  = TRUE;
420 BOOL    smtp_check_spool_space = TRUE;
421 BOOL    smtp_enforce_sync      = TRUE;
422 BOOL    smtp_etrn_serialize    = TRUE;
423 BOOL    smtp_input             = FALSE;
424 BOOL    smtp_return_error_details = FALSE;
425 #ifdef SUPPORT_SPF
426 BOOL    spf_result_guessed     = FALSE;
427 #endif
428 BOOL    split_spool_directory  = FALSE;
429 BOOL    spool_wireformat       = FALSE;
430 #ifdef EXPERIMENTAL_SRS
431 BOOL    srs_usehash            = TRUE;
432 BOOL    srs_usetimestamp       = TRUE;
433 #endif
434 BOOL    strict_acl_vars        = FALSE;
435 BOOL    strip_excess_angle_brackets = FALSE;
436 BOOL    strip_trailing_dot     = FALSE;
437 BOOL    syslog_duplication     = TRUE;
438 BOOL    syslog_pid             = TRUE;
439 BOOL    syslog_timestamp       = TRUE;
440 BOOL    system_filter_gid_set  = FALSE;
441 BOOL    system_filter_uid_set  = FALSE;
442
443 BOOL    tcp_nodelay            = TRUE;
444 BOOL    write_rejectlog        = TRUE;
445
446 /******************************************************************************/
447
448 header_line *acl_added_headers = NULL;
449 tree_node *acl_anchor          = NULL;
450 uschar *acl_arg[9]             = {NULL, NULL, NULL, NULL, NULL,
451                                   NULL, NULL, NULL, NULL};
452 int     acl_narg               = 0;
453
454 int     acl_level              = 0;
455
456 uschar *acl_not_smtp           = NULL;
457 #ifdef WITH_CONTENT_SCAN
458 uschar *acl_not_smtp_mime      = NULL;
459 #endif
460 uschar *acl_not_smtp_start     = NULL;
461 uschar *acl_removed_headers    = NULL;
462 uschar *acl_smtp_auth          = NULL;
463 uschar *acl_smtp_connect       = NULL;
464 uschar *acl_smtp_data          = NULL;
465 #ifndef DISABLE_PRDR
466 uschar *acl_smtp_data_prdr     = US"accept";
467 #endif
468 #ifndef DISABLE_DKIM
469 uschar *acl_smtp_dkim          = NULL;
470 #endif
471 uschar *acl_smtp_etrn          = NULL;
472 uschar *acl_smtp_expn          = NULL;
473 uschar *acl_smtp_helo          = NULL;
474 uschar *acl_smtp_mail          = NULL;
475 uschar *acl_smtp_mailauth      = NULL;
476 #ifdef WITH_CONTENT_SCAN
477 uschar *acl_smtp_mime          = NULL;
478 #endif
479 uschar *acl_smtp_notquit       = NULL;
480 uschar *acl_smtp_predata       = NULL;
481 uschar *acl_smtp_quit          = NULL;
482 uschar *acl_smtp_rcpt          = NULL;
483 uschar *acl_smtp_starttls      = NULL;
484 uschar *acl_smtp_vrfy          = NULL;
485
486 tree_node *acl_var_c           = NULL;
487 tree_node *acl_var_m           = NULL;
488 uschar *acl_verify_message     = NULL;
489 string_item *acl_warn_logged   = NULL;
490
491 /* Names of SMTP places for use in ACL error messages, and corresponding SMTP
492 error codes - keep in step with definitions of ACL_WHERE_xxxx in macros.h. */
493
494 uschar *acl_wherenames[]       = { US"RCPT",
495                                    US"MAIL",
496                                    US"PREDATA",
497                                    US"MIME",
498                                    US"DKIM",
499                                    US"DATA",
500 #ifndef DISABLE_PRDR
501                                    US"PRDR",
502 #endif
503                                    US"non-SMTP",
504                                    US"AUTH",
505                                    US"connection",
506                                    US"ETRN",
507                                    US"EXPN",
508                                    US"EHLO or HELO",
509                                    US"MAILAUTH",
510                                    US"non-SMTP-start",
511                                    US"NOTQUIT",
512                                    US"QUIT",
513                                    US"STARTTLS",
514                                    US"VRFY",
515                                    US"delivery",
516                                    US"unknown"
517                                  };
518
519 uschar *acl_wherecodes[]       = { US"550",     /* RCPT */
520                                    US"550",     /* MAIL */
521                                    US"550",     /* PREDATA */
522                                    US"550",     /* MIME */
523                                    US"550",     /* DKIM */
524                                    US"550",     /* DATA */
525 #ifndef DISABLE_PRDR
526                                    US"550",    /* RCPT PRDR */
527 #endif
528                                    US"0",       /* not SMTP; not relevant */
529                                    US"503",     /* AUTH */
530                                    US"550",     /* connect */
531                                    US"458",     /* ETRN */
532                                    US"550",     /* EXPN */
533                                    US"550",     /* HELO/EHLO */
534                                    US"0",       /* MAILAUTH; not relevant */
535                                    US"0",       /* not SMTP; not relevant */
536                                    US"0",       /* NOTQUIT; not relevant */
537                                    US"0",       /* QUIT; not relevant */
538                                    US"550",     /* STARTTLS */
539                                    US"252",     /* VRFY */
540                                    US"0",       /* delivery; not relevant */
541                                    US"0"        /* unknown; not relevant */
542                                  };
543
544 uschar *add_environment        = NULL;
545 address_item  *addr_duplicate  = NULL;
546
547 address_item address_defaults = {
548   .next =               NULL,
549   .parent =             NULL,
550   .first =              NULL,
551   .dupof =              NULL,
552   .start_router =       NULL,
553   .router =             NULL,
554   .transport =          NULL,
555   .host_list =          NULL,
556   .host_used =          NULL,
557   .fallback_hosts =     NULL,
558   .reply =              NULL,
559   .retries =            NULL,
560   .address =            NULL,
561   .unique =             NULL,
562   .cc_local_part =      NULL,
563   .lc_local_part =      NULL,
564   .local_part =         NULL,
565   .prefix =             NULL,
566   .suffix =             NULL,
567   .domain =             NULL,
568   .address_retry_key =  NULL,
569   .domain_retry_key =   NULL,
570   .current_dir =        NULL,
571   .home_dir =           NULL,
572   .message =            NULL,
573   .user_message =       NULL,
574   .onetime_parent =     NULL,
575   .pipe_expandn =       NULL,
576   .return_filename =    NULL,
577   .self_hostname =      NULL,
578   .shadow_message =     NULL,
579 #ifdef SUPPORT_TLS
580   .cipher =             NULL,
581   .ourcert =            NULL,
582   .peercert =           NULL,
583   .peerdn =             NULL,
584   .ocsp =               OCSP_NOT_REQ,
585 #endif
586 #ifdef EXPERIMENTAL_DSN_INFO
587   .smtp_greeting =      NULL,
588   .helo_response =      NULL,
589 #endif
590   .authenticator =      NULL,
591   .auth_id =            NULL,
592   .auth_sndr =          NULL,
593   .dsn_orcpt =          NULL,
594   .dsn_flags =          0,
595   .dsn_aware =          0,
596   .uid =                (uid_t)(-1),
597   .gid =                (gid_t)(-1),
598   .flags =              { 0 },
599   .domain_cache =       { 0 },                /* domain_cache - any larger array should be zeroed */
600   .localpart_cache =    { 0 },                /* localpart_cache - ditto */
601   .mode =               -1,
602   .more_errno =         0,
603   .delivery_usec =      0,
604   .basic_errno =        ERRNO_UNKNOWNERROR,
605   .child_count =        0,
606   .return_file =        -1,
607   .special_action =     SPECIAL_NONE,
608   .transport_return =   DEFER,
609   .prop = {                                     /* fields that are propagated to children */
610     .address_data =     NULL,
611     .domain_data =      NULL,
612     .localpart_data =   NULL,
613     .errors_address =   NULL,
614     .extra_headers =    NULL,
615     .remove_headers =   NULL,
616 #ifdef EXPERIMENTAL_SRS
617     .srs_sender =       NULL,
618 #endif
619     .ignore_error =     FALSE,
620 #ifdef SUPPORT_I18N
621     .utf8_msg =         FALSE,
622     .utf8_downcvt =     FALSE,
623     .utf8_downcvt_maybe = FALSE
624 #endif
625   }
626 };
627
628 uschar *address_file           = NULL;
629 uschar *address_pipe           = NULL;
630 tree_node *addresslist_anchor  = NULL;
631 int     addresslist_count      = 0;
632 gid_t  *admin_groups           = NULL;
633
634 #ifdef EXPERIMENTAL_ARC
635 struct arc_set *arc_received    = NULL;
636 int     arc_received_instance   = 0;
637 int     arc_oldest_pass         = 0;
638 const uschar *arc_state         = NULL;
639 const uschar *arc_state_reason  = NULL;
640 #endif
641
642 uschar *authenticated_fail_id  = NULL;
643 uschar *authenticated_id       = NULL;
644 uschar *authenticated_sender   = NULL;
645 auth_instance  *auths          = NULL;
646 uschar *auth_advertise_hosts   = US"*";
647 auth_instance auth_defaults    = {
648     .next =             NULL,
649     .name =             NULL,
650     .info =             NULL,
651     .options_block =    NULL,
652     .driver_name =      NULL,
653     .advertise_condition = NULL,
654     .client_condition = NULL,
655     .public_name =      NULL,
656     .set_id =           NULL,
657     .set_client_id =    NULL,
658     .mail_auth_condition = NULL,
659     .server_debug_string = NULL,
660     .server_condition = NULL,
661     .client =           FALSE,
662     .server =           FALSE,
663     .advertised =       FALSE
664 };
665
666 uschar *auth_defer_msg         = US"reason not recorded";
667 uschar *auth_defer_user_msg    = US"";
668 uschar *auth_vars[AUTH_VARS];
669 int     auto_thaw              = 0;
670 #ifdef WITH_CONTENT_SCAN
671 int     av_failed              = FALSE; /* boolean but accessed as vtype_int*/
672 uschar *av_scanner             = US"sophie:/var/run/sophie";  /* AV scanner */
673 #endif
674
675 #if BASE_62 == 62
676 uschar *base62_chars=
677     US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
678 #else
679 uschar *base62_chars= US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
680 #endif
681
682 uschar *bi_command             = NULL;
683 uschar *big_buffer             = NULL;
684 int     big_buffer_size        = BIG_BUFFER_SIZE;
685 #ifdef EXPERIMENTAL_BRIGHTMAIL
686 uschar *bmi_alt_location       = NULL;
687 uschar *bmi_base64_tracker_verdict = NULL;
688 uschar *bmi_base64_verdict     = NULL;
689 uschar *bmi_config_file        = US"/opt/brightmail/etc/brightmail.cfg";
690 int     bmi_deliver            = 1;
691 int     bmi_run                = 0;
692 uschar *bmi_verdicts           = NULL;
693 #endif
694 int     bsmtp_transaction_linecount = 0;
695 int     body_8bitmime          = 0;
696 int     body_linecount         = 0;
697 int     body_zerocount         = 0;
698 uschar *bounce_message_file    = NULL;
699 uschar *bounce_message_text    = NULL;
700 uschar *bounce_recipient       = NULL;
701 int     bounce_return_linesize_limit = 998;
702 int     bounce_return_size_limit = 100*1024;
703 uschar *bounce_sender_authentication = NULL;
704
705 uschar *callout_address        = NULL;
706 int     callout_cache_domain_positive_expire = 7*24*60*60;
707 int     callout_cache_domain_negative_expire = 3*60*60;
708 int     callout_cache_positive_expire = 24*60*60;
709 int     callout_cache_negative_expire = 2*60*60;
710 uschar *callout_random_local_part = US"$primary_hostname-$tod_epoch-testing";
711 uschar *check_dns_names_pattern= US"(?i)^(?>(?(1)\\.|())[^\\W](?>[a-z0-9/_-]*[^\\W])?)+(\\.?)$";
712 int     check_log_inodes       = 100;
713 int_eximarith_t check_log_space = 10*1024;      /* 10K Kbyte == 10MB */
714 int     check_spool_inodes     = 100;
715 int_eximarith_t check_spool_space = 10*1024;    /* 10K Kbyte == 10MB */
716
717 uschar *chunking_advertise_hosts = US"*";
718 unsigned chunking_datasize     = 0;
719 unsigned chunking_data_left    = 0;
720 chunking_state_t chunking_state= CHUNKING_NOT_OFFERED;
721 const pcre *regex_CHUNKING     = NULL;
722
723 uschar *client_authenticator   = NULL;
724 uschar *client_authenticated_id = NULL;
725 uschar *client_authenticated_sender = NULL;
726 int     clmacro_count          = 0;
727 uschar *clmacros[MAX_CLMACROS];
728 FILE   *config_file            = NULL;
729 const uschar *config_filename  = NULL;
730 int     config_lineno          = 0;
731 #ifdef CONFIGURE_GROUP
732 gid_t   config_gid             = CONFIGURE_GROUP;
733 #else
734 gid_t   config_gid             = 0;
735 #endif
736 uschar *config_main_filelist   = US CONFIGURE_FILE
737                          "\0<-----------Space to patch configure_filename->";
738 uschar *config_main_filename   = NULL;
739 uschar *config_main_directory  = NULL;
740
741 #ifdef CONFIGURE_OWNER
742 uid_t   config_uid             = CONFIGURE_OWNER;
743 #else
744 uid_t   config_uid             = 0;
745 #endif
746
747 int     connection_max_messages= -1;
748 uschar *continue_proxy_cipher  = NULL;
749 uschar *continue_hostname      = NULL;
750 uschar *continue_host_address  = NULL;
751 int     continue_sequence      = 1;
752 uschar *continue_transport     = NULL;
753
754 uschar *csa_status             = NULL;
755 cut_t   cutthrough = {
756   .callout_hold_only =  FALSE,                          /* verify-only: normal delivery */
757   .delivery =           FALSE,                          /* when to attempt */
758   .defer_pass =         FALSE,                          /* on defer: spool locally */
759   .is_tls =             FALSE,                          /* not a TLS conn yet */
760   .cctx =               {.sock = -1},                   /* open connection */
761   .nrcpt =              0,                              /* number of addresses */
762 };
763
764 uschar *daemon_smtp_port       = US"smtp";
765 int     daemon_startup_retries = 9;
766 int     daemon_startup_sleep   = 30;
767
768 #ifdef EXPERIMENTAL_DCC
769 uschar *dcc_header             = NULL;
770 uschar *dcc_result             = NULL;
771 uschar *dccifd_address         = US"/usr/local/dcc/var/dccifd";
772 uschar *dccifd_options         = US"header";
773 #endif
774
775 int     debug_fd               = -1;
776 FILE   *debug_file             = NULL;
777 int     debug_notall[]         = {
778   Di_memory,
779   Di_noutf8,
780   -1
781 };
782 bit_table debug_options[]      = { /* must be in alphabetical order and use
783                                  only the enum values from macro.h */
784   BIT_TABLE(D, acl),
785   BIT_TABLE(D, all),
786   BIT_TABLE(D, auth),
787   BIT_TABLE(D, deliver),
788   BIT_TABLE(D, dns),
789   BIT_TABLE(D, dnsbl),
790   BIT_TABLE(D, exec),
791   BIT_TABLE(D, expand),
792   BIT_TABLE(D, filter),
793   BIT_TABLE(D, hints_lookup),
794   BIT_TABLE(D, host_lookup),
795   BIT_TABLE(D, ident),
796   BIT_TABLE(D, interface),
797   BIT_TABLE(D, lists),
798   BIT_TABLE(D, load),
799   BIT_TABLE(D, local_scan),
800   BIT_TABLE(D, lookup),
801   BIT_TABLE(D, memory),
802   BIT_TABLE(D, noutf8),
803   BIT_TABLE(D, pid),
804   BIT_TABLE(D, process_info),
805   BIT_TABLE(D, queue_run),
806   BIT_TABLE(D, receive),
807   BIT_TABLE(D, resolver),
808   BIT_TABLE(D, retry),
809   BIT_TABLE(D, rewrite),
810   BIT_TABLE(D, route),
811   BIT_TABLE(D, timestamp),
812   BIT_TABLE(D, tls),
813   BIT_TABLE(D, transport),
814   BIT_TABLE(D, uid),
815   BIT_TABLE(D, verify),
816 };
817 int     debug_options_count    = nelem(debug_options);
818
819 unsigned int debug_selector    = 0;
820 int     delay_warning[DELAY_WARNING_SIZE] = { DELAY_WARNING_SIZE, 1, 24*60*60 };
821 uschar *delay_warning_condition=
822   US"${if or {"
823             "{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }"
824             "{ match{$h_precedence:}{(?i)bulk|list|junk} }"
825             "{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }"
826             "} {no}{yes}}";
827 uschar *deliver_address_data   = NULL;
828 int     deliver_datafile       = -1;
829 const uschar *deliver_domain   = NULL;
830 uschar *deliver_domain_data    = NULL;
831 const uschar *deliver_domain_orig = NULL;
832 const uschar *deliver_domain_parent = NULL;
833 time_t  deliver_frozen_at      = 0;
834 uschar *deliver_home           = NULL;
835 const uschar *deliver_host     = NULL;
836 const uschar *deliver_host_address = NULL;
837 int     deliver_host_port      = 0;
838 uschar *deliver_in_buffer      = NULL;
839 ino_t   deliver_inode          = 0;
840 uschar *deliver_localpart      = NULL;
841 uschar *deliver_localpart_data = NULL;
842 uschar *deliver_localpart_orig = NULL;
843 uschar *deliver_localpart_parent = NULL;
844 uschar *deliver_localpart_prefix = NULL;
845 uschar *deliver_localpart_suffix = NULL;
846 uschar *deliver_out_buffer     = NULL;
847 int     deliver_queue_load_max = -1;
848 address_item  *deliver_recipients = NULL;
849 uschar *deliver_selectstring   = NULL;
850 uschar *deliver_selectstring_sender = NULL;
851
852 #ifndef DISABLE_DKIM
853 unsigned dkim_collect_input      = 0;
854 uschar *dkim_cur_signer          = NULL;
855 int     dkim_key_length          = 0;
856 void   *dkim_signatures          = NULL;
857 uschar *dkim_signers             = NULL;
858 uschar *dkim_signing_domain      = NULL;
859 uschar *dkim_signing_selector    = NULL;
860 uschar *dkim_verify_overall      = NULL;
861 uschar *dkim_verify_signers      = US"$dkim_signers";
862 uschar *dkim_verify_status       = NULL;
863 uschar *dkim_verify_reason       = NULL;
864 #endif
865 #ifdef EXPERIMENTAL_DMARC
866 uschar *dmarc_domain_policy     = NULL;
867 uschar *dmarc_forensic_sender   = NULL;
868 uschar *dmarc_history_file      = NULL;
869 uschar *dmarc_status            = NULL;
870 uschar *dmarc_status_text       = NULL;
871 uschar *dmarc_tld_file          = NULL;
872 uschar *dmarc_used_domain       = NULL;
873 #endif
874
875 uschar *dns_again_means_nonexist = NULL;
876 int     dns_csa_search_limit   = 5;
877 int     dns_cname_loops        = 1;
878 #ifdef SUPPORT_DANE
879 int     dns_dane_ok            = -1;
880 #endif
881 uschar *dns_ipv4_lookup        = NULL;
882 int     dns_retrans            = 0;
883 int     dns_retry              = 0;
884 int     dns_dnssec_ok          = -1; /* <0 = not coerced */
885 uschar *dns_trust_aa           = NULL;
886 int     dns_use_edns0          = -1; /* <0 = not coerced */
887 uschar *dnslist_domain         = NULL;
888 uschar *dnslist_matched        = NULL;
889 uschar *dnslist_text           = NULL;
890 uschar *dnslist_value          = NULL;
891 tree_node *domainlist_anchor   = NULL;
892 int     domainlist_count       = 0;
893 uschar *dsn_from               = US DEFAULT_DSN_FROM;
894
895 int     errno_quota            = ERRNO_QUOTA;
896 uschar *errors_copy            = NULL;
897 int     error_handling         = ERRORS_SENDER;
898 uschar *errors_reply_to        = NULL;
899 int     errors_sender_rc       = EXIT_FAILURE;
900 #ifndef DISABLE_EVENT
901 uschar *event_action             = NULL;        /* expansion for delivery events */
902 uschar *event_data               = NULL;        /* auxiliary data variable for event */
903 int     event_defer_errno        = 0;
904 const uschar *event_name         = NULL;        /* event name variable */
905 #endif
906
907
908 gid_t   exim_gid               = EXIM_GID;
909 uschar *exim_path              = US BIN_DIRECTORY "/exim"
910                         "\0<---------------Space to patch exim_path->";
911 uid_t   exim_uid               = EXIM_UID;
912 int     expand_level           = 0;             /* Nesting depth, indent for debug */
913 int     expand_forbid          = 0;
914 int     expand_nlength[EXPAND_MAXN+1];
915 int     expand_nmax            = -1;
916 uschar *expand_nstring[EXPAND_MAXN+1];
917 uschar *expand_string_message;
918 uschar *extra_local_interfaces = NULL;
919
920 int     fake_response          = OK;
921 uschar *fake_response_text     = US"Your message has been rejected but is "
922                                    "being kept for evaluation.\nIf it was a "
923                                    "legitimate message, it may still be "
924                                    "delivered to the target recipient(s).";
925 int     filter_n[FILTER_VARIABLE_COUNT];
926 int     filter_sn[FILTER_VARIABLE_COUNT];
927 int     filter_test            = FTEST_NONE;
928 uschar *filter_test_sfile      = NULL;
929 uschar *filter_test_ufile      = NULL;
930 uschar *filter_thisaddress     = NULL;
931 int     finduser_retries       = 0;
932 uid_t   fixed_never_users[]    = { FIXED_NEVER_USERS };
933 uschar *freeze_tell            = NULL;
934 uschar *freeze_tell_config     = NULL;
935 uschar *fudged_queue_times     = US"";
936
937 uschar *gecos_name             = NULL;
938 uschar *gecos_pattern          = NULL;
939 rewrite_rule  *global_rewrite_rules = NULL;
940
941 volatile sig_atomic_t had_command_timeout = 0;
942 volatile sig_atomic_t had_command_sigterm = 0;
943 volatile sig_atomic_t had_data_timeout    = 0;
944 volatile sig_atomic_t had_data_sigint     = 0;
945 uschar *headers_charset        = US HEADERS_CHARSET;
946 int     header_insert_maxlen   = 64 * 1024;
947 header_line  *header_last      = NULL;
948 header_line  *header_list      = NULL;
949 int     header_maxsize         = HEADER_MAXSIZE;
950 int     header_line_maxsize    = 0;
951
952 header_name header_names[] = {
953   /* name               len     allow_resent    htype */
954   { US"bcc",            3,      TRUE,           htype_bcc },
955   { US"cc",             2,      TRUE,           htype_cc },
956   { US"date",           4,      TRUE,           htype_date },
957   { US"delivery-date", 13,      FALSE,          htype_delivery_date },
958   { US"envelope-to",   11,      FALSE,          htype_envelope_to },
959   { US"from",           4,      TRUE,           htype_from },
960   { US"message-id",    10,      TRUE,           htype_id },
961   { US"received",       8,      FALSE,          htype_received },
962   { US"reply-to",       8,      FALSE,          htype_reply_to },
963   { US"return-path",   11,      FALSE,          htype_return_path },
964   { US"sender",         6,      TRUE,           htype_sender },
965   { US"subject",        7,      FALSE,          htype_subject },
966   { US"to",             2,      TRUE,           htype_to }
967 };
968
969 int header_names_size          = nelem(header_names);
970
971 uschar *helo_accept_junk_hosts = NULL;
972 uschar *helo_allow_chars       = US"";
973 uschar *helo_lookup_domains    = US"@ : @[]";
974 uschar *helo_try_verify_hosts  = NULL;
975 uschar *helo_verify_hosts      = NULL;
976 const uschar *hex_digits       = CUS"0123456789abcdef";
977 uschar *hold_domains           = NULL;
978 uschar *host_data              = NULL;
979 uschar *host_lookup            = NULL;
980 uschar *host_lookup_order      = US"bydns:byaddr";
981 uschar *host_lookup_msg        = US"";
982 int     host_number            = 0;
983 uschar *host_number_string     = NULL;
984 uschar *host_reject_connection = NULL;
985 tree_node *hostlist_anchor     = NULL;
986 int     hostlist_count         = 0;
987 uschar *hosts_treat_as_local   = NULL;
988 uschar *hosts_connection_nolog = NULL;
989
990 int     ignore_bounce_errors_after = 10*7*24*60*60;  /* 10 weeks */
991 uschar *ignore_fromline_hosts  = NULL;
992 int     inetd_wait_timeout     = -1;
993 uschar *initial_cwd            = NULL;
994 uschar *interface_address      = NULL;
995 int     interface_port         = -1;
996 uschar *iterate_item           = NULL;
997
998 int     journal_fd             = -1;
999
1000 uschar *keep_environment       = NULL;
1001
1002 int     keep_malformed         = 4*24*60*60;    /* 4 days */
1003
1004 uschar *eldap_dn               = NULL;
1005 int     load_average           = -2;
1006 uschar *local_from_prefix      = NULL;
1007 uschar *local_from_suffix      = NULL;
1008
1009 #if HAVE_IPV6
1010 uschar *local_interfaces       = US"<; ::0 ; 0.0.0.0";
1011 #else
1012 uschar *local_interfaces       = US"0.0.0.0";
1013 #endif
1014
1015 #ifdef HAVE_LOCAL_SCAN
1016 uschar *local_scan_data        = NULL;
1017 int     local_scan_timeout     = 5*60;
1018 #endif
1019 gid_t   local_user_gid         = (gid_t)(-1);
1020 uid_t   local_user_uid         = (uid_t)(-1);
1021
1022 tree_node *localpartlist_anchor= NULL;
1023 int     localpartlist_count    = 0;
1024 uschar *log_buffer             = NULL;
1025
1026 int     log_default[]          = { /* for initializing log_selector */
1027   Li_acl_warn_skipped,
1028   Li_connection_reject,
1029   Li_delay_delivery,
1030   Li_dkim,
1031   Li_dnslist_defer,
1032   Li_etrn,
1033   Li_host_lookup_failed,
1034   Li_lost_incoming_connection,
1035   Li_outgoing_interface, /* see d_log_interface in deliver.c */
1036   Li_queue_run,
1037   Li_rejected_header,
1038   Li_retry_defer,
1039   Li_sender_verify_fail,
1040   Li_size_reject,
1041   Li_skip_delivery,
1042   Li_smtp_confirmation,
1043   Li_tls_certificate_verified,
1044   Li_tls_cipher,
1045   -1
1046 };
1047
1048 uschar *log_file_path          = US LOG_FILE_PATH
1049                            "\0<--------------Space to patch log_file_path->";
1050
1051 int     log_notall[]           = {
1052   -1
1053 };
1054 bit_table log_options[]        = { /* must be in alphabetical order */
1055   BIT_TABLE(L, 8bitmime),
1056   BIT_TABLE(L, acl_warn_skipped),
1057   BIT_TABLE(L, address_rewrite),
1058   BIT_TABLE(L, all),
1059   BIT_TABLE(L, all_parents),
1060   BIT_TABLE(L, arguments),
1061   BIT_TABLE(L, connection_reject),
1062   BIT_TABLE(L, delay_delivery),
1063   BIT_TABLE(L, deliver_time),
1064   BIT_TABLE(L, delivery_size),
1065 #ifndef DISABLE_DKIM
1066   BIT_TABLE(L, dkim),
1067   BIT_TABLE(L, dkim_verbose),
1068 #endif
1069   BIT_TABLE(L, dnslist_defer),
1070   BIT_TABLE(L, dnssec),
1071   BIT_TABLE(L, etrn),
1072   BIT_TABLE(L, host_lookup_failed),
1073   BIT_TABLE(L, ident_timeout),
1074   BIT_TABLE(L, incoming_interface),
1075   BIT_TABLE(L, incoming_port),
1076   BIT_TABLE(L, lost_incoming_connection),
1077   BIT_TABLE(L, millisec),
1078   BIT_TABLE(L, outgoing_interface),
1079   BIT_TABLE(L, outgoing_port),
1080   BIT_TABLE(L, pid),
1081   BIT_TABLE(L, pipelining),
1082 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1083   BIT_TABLE(L, proxy),
1084 #endif
1085   BIT_TABLE(L, queue_run),
1086   BIT_TABLE(L, queue_time),
1087   BIT_TABLE(L, queue_time_overall),
1088   BIT_TABLE(L, receive_time),
1089   BIT_TABLE(L, received_recipients),
1090   BIT_TABLE(L, received_sender),
1091   BIT_TABLE(L, rejected_header),
1092   { US"rejected_headers", Li_rejected_header },
1093   BIT_TABLE(L, retry_defer),
1094   BIT_TABLE(L, return_path_on_delivery),
1095   BIT_TABLE(L, sender_on_delivery),
1096   BIT_TABLE(L, sender_verify_fail),
1097   BIT_TABLE(L, size_reject),
1098   BIT_TABLE(L, skip_delivery),
1099   BIT_TABLE(L, smtp_confirmation),
1100   BIT_TABLE(L, smtp_connection),
1101   BIT_TABLE(L, smtp_incomplete_transaction),
1102   BIT_TABLE(L, smtp_mailauth),
1103   BIT_TABLE(L, smtp_no_mail),
1104   BIT_TABLE(L, smtp_protocol_error),
1105   BIT_TABLE(L, smtp_syntax_error),
1106   BIT_TABLE(L, subject),
1107   BIT_TABLE(L, tls_certificate_verified),
1108   BIT_TABLE(L, tls_cipher),
1109   BIT_TABLE(L, tls_peerdn),
1110   BIT_TABLE(L, tls_sni),
1111   BIT_TABLE(L, unknown_in_list),
1112 };
1113 int     log_options_count      = nelem(log_options);
1114
1115 int     log_reject_target      = 0;
1116 unsigned int log_selector[log_selector_size]; /* initialized in main() */
1117 uschar *log_selector_string    = NULL;
1118 FILE   *log_stderr             = NULL;
1119 uschar *login_sender_address   = NULL;
1120 uschar *lookup_dnssec_authenticated = NULL;
1121 int     lookup_open_max        = 25;
1122 uschar *lookup_value           = NULL;
1123
1124 macro_item *macros_user        = NULL;
1125 uschar *mailstore_basename     = NULL;
1126 #ifdef WITH_CONTENT_SCAN
1127 uschar *malware_name           = NULL;  /* Virus Name */
1128 #endif
1129 int     max_received_linelength= 0;
1130 int     max_username_length    = 0;
1131 int     message_age            = 0;
1132 uschar *message_body           = NULL;
1133 uschar *message_body_end       = NULL;
1134 int     message_body_size      = 0;
1135 int     message_body_visible   = 500;
1136 int     message_ended          = END_NOTSTARTED;
1137 uschar *message_headers        = NULL;
1138 uschar *message_id;
1139 uschar *message_id_domain      = NULL;
1140 uschar *message_id_text        = NULL;
1141 struct timeval message_id_tv   = { 0, 0 };
1142 uschar  message_id_option[MESSAGE_ID_LENGTH + 3];
1143 uschar *message_id_external;
1144 int     message_linecount      = 0;
1145 int     message_size           = 0;
1146 uschar *message_size_limit     = US"50M";
1147 #ifdef SUPPORT_I18N
1148 int     message_utf8_downconvert = 0;   /* -1 ifneeded; 0 never; 1 always */
1149 #endif
1150 uschar  message_subdir[2]      = { 0, 0 };
1151 uschar *message_reference      = NULL;
1152
1153 /* MIME ACL expandables */
1154 #ifdef WITH_CONTENT_SCAN
1155 int     mime_anomaly_level     = 0;
1156 const uschar *mime_anomaly_text      = NULL;
1157 uschar *mime_boundary          = NULL;
1158 uschar *mime_charset           = NULL;
1159 uschar *mime_content_description = NULL;
1160 uschar *mime_content_disposition = NULL;
1161 uschar *mime_content_id        = NULL;
1162 unsigned int mime_content_size = 0;
1163 uschar *mime_content_transfer_encoding = NULL;
1164 uschar *mime_content_type      = NULL;
1165 uschar *mime_decoded_filename  = NULL;
1166 uschar *mime_filename          = NULL;
1167 int     mime_is_multipart      = 0;
1168 int     mime_is_coverletter    = 0;
1169 int     mime_is_rfc822         = 0;
1170 int     mime_part_count        = -1;
1171 #endif
1172
1173 uid_t  *never_users            = NULL;
1174
1175 const int on                   = 1;     /* for setsockopt */
1176 const int off                  = 0;
1177
1178 uid_t   original_euid;
1179 gid_t   originator_gid;
1180 uschar *originator_login       = NULL;
1181 uschar *originator_name        = NULL;
1182 uid_t   originator_uid;
1183 uschar *override_local_interfaces = NULL;
1184 uschar *override_pid_file_path = NULL;
1185
1186 uschar *percent_hack_domains   = NULL;
1187 uschar *pid_file_path          = US PID_FILE_PATH
1188                            "\0<--------------Space to patch pid_file_path->";
1189 #ifdef EXPERIMENTAL_PIPE_CONNECT
1190 uschar *pipe_connect_advertise_hosts = US"*";
1191 #endif
1192 uschar *pipelining_advertise_hosts = US"*";
1193 uschar *primary_hostname       = NULL;
1194 uschar  process_info[PROCESS_INFO_SIZE];
1195 int     process_info_len       = 0;
1196 uschar *process_log_path       = NULL;
1197
1198 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1199 uschar *hosts_proxy            = NULL;
1200 uschar *proxy_external_address = NULL;
1201 int     proxy_external_port    = 0;
1202 uschar *proxy_local_address    = NULL;
1203 int     proxy_local_port       = 0;
1204 #endif
1205
1206 uschar *prvscheck_address      = NULL;
1207 uschar *prvscheck_keynum       = NULL;
1208 uschar *prvscheck_result       = NULL;
1209
1210
1211 const uschar *qualify_domain_recipient = NULL;
1212 uschar *qualify_domain_sender  = NULL;
1213 uschar *queue_domains          = NULL;
1214 int     queue_interval         = -1;
1215 uschar *queue_name             = US"";
1216 uschar *queue_only_file        = NULL;
1217 int     queue_only_load        = -1;
1218 uschar *queue_run_max          = US"5";
1219 pid_t   queue_run_pid          = (pid_t)0;
1220 int     queue_run_pipe         = -1;
1221 uschar *queue_smtp_domains     = NULL;
1222
1223 uint32_t random_seed           = 0;
1224 tree_node *ratelimiters_cmd    = NULL;
1225 tree_node *ratelimiters_conn   = NULL;
1226 tree_node *ratelimiters_mail   = NULL;
1227 uschar *raw_active_hostname    = NULL;
1228 uschar *raw_sender             = NULL;
1229 uschar **raw_recipients        = NULL;
1230 int     raw_recipients_count   = 0;
1231
1232 int     rcpt_count             = 0;
1233 int     rcpt_fail_count        = 0;
1234 int     rcpt_defer_count       = 0;
1235 gid_t   real_gid;
1236 uid_t   real_uid;
1237 int     receive_linecount      = 0;
1238 int     receive_messagecount   = 0;
1239 int     receive_timeout        = 0;
1240 int     received_count         = 0;
1241 uschar *received_for           = NULL;
1242
1243 /*  This is the default text for Received headers generated by Exim. The
1244 date  will be automatically added on the end. */
1245
1246 uschar *received_header_text   = US
1247      "Received: "
1248      "${if def:sender_rcvhost {from $sender_rcvhost\n\t}"
1249      "{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}"
1250      "${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}"
1251      "by $primary_hostname "
1252      "${if def:received_protocol {with $received_protocol}} "
1253      #ifdef SUPPORT_TLS
1254      "${if def:tls_cipher {($tls_cipher)\n\t}}"
1255      #endif
1256      "(Exim $version_number)\n\t"
1257      "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
1258      "id $message_exim_id"
1259      "${if def:received_for {\n\tfor $received_for}}"
1260      "\0<---------------Space to patch received_header_text->";
1261
1262 int     received_headers_max   = 30;
1263 uschar *received_protocol      = NULL;
1264 struct timeval received_time   = { 0, 0 };
1265 struct timeval received_time_taken = { 0, 0 };
1266 uschar *recipient_data         = NULL;
1267 uschar *recipient_unqualified_hosts = NULL;
1268 uschar *recipient_verify_failure = NULL;
1269 int     recipients_count       = 0;
1270 recipient_item  *recipients_list = NULL;
1271 int     recipients_list_max    = 0;
1272 int     recipients_max         = 0;
1273 const pcre *regex_AUTH         = NULL;
1274 const pcre *regex_check_dns_names = NULL;
1275 const pcre *regex_From         = NULL;
1276 const pcre *regex_IGNOREQUOTA  = NULL;
1277 const pcre *regex_PIPELINING   = NULL;
1278 const pcre *regex_SIZE         = NULL;
1279 #ifdef EXPERIMENTAL_PIPE_CONNECT
1280 const pcre *regex_EARLY_PIPE   = NULL;
1281 #endif
1282 const pcre *regex_ismsgid      = NULL;
1283 const pcre *regex_smtp_code    = NULL;
1284 uschar *regex_vars[REGEX_VARS];
1285 #ifdef WHITELIST_D_MACROS
1286 const pcre *regex_whitelisted_macro = NULL;
1287 #endif
1288 #ifdef WITH_CONTENT_SCAN
1289 uschar *regex_match_string     = NULL;
1290 #endif
1291 int     remote_delivery_count  = 0;
1292 int     remote_max_parallel    = 2;
1293 uschar *remote_sort_domains    = NULL;
1294 int     retry_data_expire      = 7*24*60*60;
1295 int     retry_interval_max     = 24*60*60;
1296 int     retry_maximum_timeout  = 0;        /* set from retry config */
1297 retry_config  *retries         = NULL;
1298 uschar *return_path            = NULL;
1299 int     rewrite_existflags     = 0;
1300 uschar *rfc1413_hosts          = US"@[]";
1301 int     rfc1413_query_timeout  = 0;
1302 uid_t   root_gid               = ROOT_GID;
1303 uid_t   root_uid               = ROOT_UID;
1304
1305 router_instance  *routers  = NULL;
1306 router_instance  router_defaults = {
1307     .next =                     NULL,
1308     .name =                     NULL,
1309     .info =                     NULL,
1310     .options_block =            NULL,
1311     .driver_name =              NULL,
1312
1313     .address_data =             NULL,
1314 #ifdef EXPERIMENTAL_BRIGHTMAIL
1315     .bmi_rule =                 NULL,
1316 #endif
1317     .cannot_route_message =     NULL,
1318     .condition =                NULL,
1319     .current_directory =        NULL,
1320     .debug_string =             NULL,
1321     .domains =                  NULL,
1322     .errors_to =                NULL,
1323     .expand_gid =               NULL,
1324     .expand_uid =               NULL,
1325     .expand_more =              NULL,
1326     .expand_unseen =            NULL,
1327     .extra_headers =            NULL,
1328     .fallback_hosts =           NULL,
1329     .home_directory =           NULL,
1330     .ignore_target_hosts =      NULL,
1331     .local_parts =              NULL,
1332     .pass_router_name =         NULL,
1333     .prefix =                   NULL,
1334     .redirect_router_name =     NULL,
1335     .remove_headers =           NULL,
1336     .require_files =            NULL,
1337     .router_home_directory =    NULL,
1338     .self =                     US"freeze",
1339     .senders =                  NULL,
1340     .suffix =                   NULL,
1341     .translate_ip_address =     NULL,
1342     .transport_name =           NULL,
1343
1344     .address_test =             TRUE,
1345 #ifdef EXPERIMENTAL_BRIGHTMAIL
1346     .bmi_deliver_alternate =    FALSE,
1347     .bmi_deliver_default =      FALSE,
1348     .bmi_dont_deliver =         FALSE,
1349 #endif
1350     .expn =                     TRUE,
1351     .caseful_local_part =       FALSE,
1352     .check_local_user =         FALSE,
1353     .disable_logging =          FALSE,
1354     .fail_verify_recipient =    FALSE,
1355     .fail_verify_sender =       FALSE,
1356     .gid_set =                  FALSE,
1357     .initgroups =               FALSE,
1358     .log_as_local =             TRUE_UNSET,
1359     .more =                     TRUE,
1360     .pass_on_timeout =          FALSE,
1361     .prefix_optional =          FALSE,
1362     .repeat_use =               TRUE,
1363     .retry_use_local_part =     TRUE_UNSET,
1364     .same_domain_copy_routing = FALSE,
1365     .self_rewrite =             FALSE,
1366     .suffix_optional =          FALSE,
1367     .verify_only =              FALSE,
1368     .verify_recipient =         TRUE,
1369     .verify_sender =            TRUE,
1370     .uid_set =                  FALSE,
1371     .unseen =                   FALSE,
1372     .dsn_lasthop =              FALSE,
1373
1374     .self_code =                self_freeze,
1375     .uid =                      (uid_t)(-1),
1376     .gid =                      (gid_t)(-1),
1377
1378     .fallback_hostlist =        NULL,
1379     .transport =                NULL,
1380     .pass_router =              NULL,
1381     .redirect_router =          NULL,
1382
1383     .dnssec =                   { NULL, NULL },            /* dnssec_domains {require,request} */
1384 };
1385
1386 uschar *router_name            = NULL;
1387
1388 ip_address_item *running_interfaces = NULL;
1389
1390 /* This is a weird one. The following string gets patched in the binary by the
1391 script that sets up a copy of Exim for running in the test harness. It seems
1392 that compilers are now clever, and share constant strings if they can.
1393 Elsewhere in Exim the string "<" is used. The compiler optimization seems to
1394 make use of the end of this string in order to save space. So the patching then
1395 wrecks this. We defeat this optimization by adding some additional characters
1396 onto the end of the string. */
1397
1398 uschar *running_status         = US">>>running<<<" "\0EXTRA";
1399
1400 int     runrc                  = 0;
1401
1402 uschar *search_error_message   = NULL;
1403 uschar *self_hostname          = NULL;
1404 uschar *sender_address         = NULL;
1405 unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32];
1406 uschar *sender_address_data    = NULL;
1407 uschar *sender_address_unrewritten = NULL;
1408 uschar *sender_data            = NULL;
1409 unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32];
1410 uschar *sender_fullhost        = NULL;
1411 uschar *sender_helo_name       = NULL;
1412 uschar **sender_host_aliases   = &no_aliases;
1413 uschar *sender_host_address    = NULL;
1414 uschar *sender_host_authenticated = NULL;
1415 uschar *sender_host_auth_pubname  = NULL;
1416 unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32];
1417 uschar *sender_host_name       = NULL;
1418 int     sender_host_port       = 0;
1419 uschar *sender_ident           = NULL;
1420 uschar *sender_rate            = NULL;
1421 uschar *sender_rate_limit      = NULL;
1422 uschar *sender_rate_period     = NULL;
1423 uschar *sender_rcvhost         = NULL;
1424 uschar *sender_unqualified_hosts = NULL;
1425 uschar *sender_verify_failure = NULL;
1426 address_item *sender_verified_list  = NULL;
1427 address_item *sender_verified_failed = NULL;
1428 int     sender_verified_rc     = -1;
1429 uschar *sending_ip_address     = NULL;
1430 int     sending_port           = -1;
1431 SIGNAL_BOOL sigalrm_seen       = FALSE;
1432 const uschar *sigalarm_setter  = NULL;
1433 uschar **sighup_argv           = NULL;
1434 int     slow_lookup_log        = 0;     /* millisecs, zero disables */
1435 int     smtp_accept_count      = 0;
1436 int     smtp_accept_max        = 20;
1437 int     smtp_accept_max_nonmail= 10;
1438 uschar *smtp_accept_max_nonmail_hosts = US"*";
1439 int     smtp_accept_max_per_connection = 1000;
1440 uschar *smtp_accept_max_per_host = NULL;
1441 int     smtp_accept_queue      = 0;
1442 int     smtp_accept_queue_per_connection = 10;
1443 int     smtp_accept_reserve    = 0;
1444 uschar *smtp_active_hostname   = NULL;
1445 uschar *smtp_banner            = US"$smtp_active_hostname ESMTP "
1446                              "Exim $version_number $tod_full"
1447                              "\0<---------------Space to patch smtp_banner->";
1448 int     smtp_ch_index          = 0;
1449 uschar *smtp_cmd_argument      = NULL;
1450 uschar *smtp_cmd_buffer        = NULL;
1451 struct timeval smtp_connection_start  = {0,0};
1452 uschar  smtp_connection_had[SMTP_HBUFF_SIZE];
1453 int     smtp_connect_backlog   = 20;
1454 double  smtp_delay_mail        = 0.0;
1455 double  smtp_delay_rcpt        = 0.0;
1456 FILE   *smtp_in                = NULL;
1457 int     smtp_load_reserve      = -1;
1458 int     smtp_mailcmd_count     = 0;
1459 FILE   *smtp_out               = NULL;
1460 uschar *smtp_etrn_command      = NULL;
1461 int     smtp_max_synprot_errors= 3;
1462 int     smtp_max_unknown_commands = 3;
1463 uschar *smtp_notquit_reason    = NULL;
1464 uschar *smtp_ratelimit_hosts   = NULL;
1465 uschar *smtp_ratelimit_mail    = NULL;
1466 uschar *smtp_ratelimit_rcpt    = NULL;
1467 uschar *smtp_read_error        = US"";
1468 int     smtp_receive_timeout   = 5*60;
1469 uschar *smtp_receive_timeout_s = NULL;
1470 uschar *smtp_reserve_hosts     = NULL;
1471 int     smtp_rlm_base          = 0;
1472 double  smtp_rlm_factor        = 0.0;
1473 int     smtp_rlm_limit         = 0;
1474 int     smtp_rlm_threshold     = INT_MAX;
1475 int     smtp_rlr_base          = 0;
1476 double  smtp_rlr_factor        = 0.0;
1477 int     smtp_rlr_limit         = 0;
1478 int     smtp_rlr_threshold     = INT_MAX;
1479 unsigned smtp_peer_options     = 0;
1480 unsigned smtp_peer_options_wrap= 0;
1481 #ifdef SUPPORT_I18N
1482 uschar *smtputf8_advertise_hosts = US"*";       /* overridden under test-harness */
1483 #endif
1484
1485 #ifdef WITH_CONTENT_SCAN
1486 uschar *spamd_address          = US"127.0.0.1 783";
1487 uschar *spam_bar               = NULL;
1488 uschar *spam_report            = NULL;
1489 uschar *spam_action            = NULL;
1490 uschar *spam_score             = NULL;
1491 uschar *spam_score_int         = NULL;
1492 #endif
1493 #ifdef SUPPORT_SPF
1494 uschar *spf_guess              = US"v=spf1 a/24 mx/24 ptr ?all";
1495 uschar *spf_header_comment     = NULL;
1496 uschar *spf_received           = NULL;
1497 uschar *spf_result             = NULL;
1498 uschar *spf_smtp_comment       = NULL;
1499 #endif
1500
1501 FILE   *spool_data_file        = NULL;
1502 uschar *spool_directory        = US SPOOL_DIRECTORY
1503                            "\0<--------------Space to patch spool_directory->";
1504 #ifdef EXPERIMENTAL_SRS
1505 uschar *srs_config             = NULL;
1506 uschar *srs_db_address         = NULL;
1507 uschar *srs_db_key             = NULL;
1508 int     srs_hashlength         = 6;
1509 int     srs_hashmin            = -1;
1510 int     srs_maxage             = 31;
1511 uschar *srs_orig_recipient     = NULL;
1512 uschar *srs_orig_sender        = NULL;
1513 uschar *srs_recipient          = NULL;
1514 uschar *srs_secrets            = NULL;
1515 uschar *srs_status             = NULL;
1516 #endif
1517 int     string_datestamp_offset= -1;
1518 int     string_datestamp_length= 0;
1519 int     string_datestamp_type  = -1;
1520 uschar *submission_domain      = NULL;
1521 uschar *submission_name        = NULL;
1522 int     syslog_facility        = LOG_MAIL;
1523 uschar *syslog_processname     = US"exim";
1524 uschar *system_filter          = NULL;
1525
1526 uschar *system_filter_directory_transport = NULL;
1527 uschar *system_filter_file_transport = NULL;
1528 uschar *system_filter_pipe_transport = NULL;
1529 uschar *system_filter_reply_transport = NULL;
1530
1531 gid_t   system_filter_gid      = 0;
1532 uid_t   system_filter_uid      = (uid_t)-1;
1533
1534 blob    tcp_fastopen_nodata    = { .data = NULL, .len = 0 };
1535 tfo_state_t tcp_out_fastopen   = TFO_NOT_USED;
1536 #ifdef USE_TCP_WRAPPERS
1537 uschar *tcp_wrappers_daemon_name = US TCP_WRAPPERS_DAEMON_NAME;
1538 #endif
1539 int     test_harness_load_avg  = 0;
1540 int     thismessage_size_limit = 0;
1541 int     timeout_frozen_after   = 0;
1542
1543 transport_instance  *transports = NULL;
1544
1545 transport_instance  transport_defaults = {
1546     .next =                     NULL,
1547     .name =                     NULL,
1548     .info =                     NULL,
1549     .options_block =            NULL,
1550     .driver_name =              NULL,
1551     .setup =                    NULL,
1552     .batch_max =                1,
1553     .batch_id =                 NULL,
1554     .home_dir =                 NULL,
1555     .current_dir =              NULL,
1556     .expand_multi_domain =      NULL,
1557     .multi_domain =             TRUE,
1558     .overrides_hosts =          FALSE,
1559     .max_addresses =            100,
1560     .connection_max_messages =  500,
1561     .deliver_as_creator =       FALSE,
1562     .disable_logging =          FALSE,
1563     .initgroups =               FALSE,
1564     .uid_set =                  FALSE,
1565     .gid_set =                  FALSE,
1566     .uid =                      (uid_t)(-1),
1567     .gid =                      (gid_t)(-1),
1568     .expand_uid =               NULL,
1569     .expand_gid =               NULL,
1570     .warn_message =             NULL,
1571     .shadow =                   NULL,
1572     .shadow_condition =         NULL,
1573     .filter_command =           NULL,
1574     .add_headers =              NULL,
1575     .remove_headers =           NULL,
1576     .return_path =              NULL,
1577     .debug_string =             NULL,
1578     .max_parallel =             NULL,
1579     .message_size_limit =       NULL,
1580     .headers_rewrite =          NULL,
1581     .rewrite_rules =            NULL,
1582     .rewrite_existflags =       0,
1583     .filter_timeout =           300,
1584     .body_only =                FALSE,
1585     .delivery_date_add =        FALSE,
1586     .envelope_to_add =          FALSE,
1587     .headers_only =             FALSE,
1588     .rcpt_include_affixes =     FALSE,
1589     .return_path_add =          FALSE,
1590     .return_output =            FALSE,
1591     .return_fail_output =       FALSE,
1592     .log_output =               FALSE,
1593     .log_fail_output =          FALSE,
1594     .log_defer_output =         FALSE,
1595     .retry_use_local_part =     TRUE_UNSET,     /* retry_use_local_part: BOOL, but set neither
1596                                                  1 nor 0 so can detect unset */
1597 #ifndef DISABLE_EVENT
1598    .event_action =              NULL
1599 #endif
1600 };
1601
1602 int     transport_count;
1603 uschar *transport_name          = NULL;
1604 int     transport_newlines;
1605 const uschar **transport_filter_argv  = NULL;
1606 int     transport_filter_timeout;
1607 int     transport_write_timeout= 0;
1608
1609 tree_node  *tree_dns_fails     = NULL;
1610 tree_node  *tree_duplicates    = NULL;
1611 tree_node  *tree_nonrecipients = NULL;
1612 tree_node  *tree_unusable      = NULL;
1613
1614 gid_t  *trusted_groups         = NULL;
1615 uid_t  *trusted_users          = NULL;
1616 uschar *timezone_string        = US TIMEZONE_DEFAULT;
1617
1618 uschar *unknown_login          = NULL;
1619 uschar *unknown_username       = NULL;
1620 uschar *untrusted_set_sender   = NULL;
1621
1622 /*  A regex for matching a "From_" line in an incoming message, in the form
1623
1624     From ph10 Fri Jan  5 12:35 GMT 1996
1625
1626 which  the "mail" commands send to the MTA (undocumented, of course), or in
1627 the  form
1628
1629     From ph10 Fri, 7 Jan 97 14:00:00 GMT
1630
1631 which  is apparently used by some UUCPs, despite it not being in RFC 976.
1632 Because  of variations in time formats, just match up to the minutes. That
1633 should  be sufficient. Examples have been seen of time fields like 12:1:03,
1634 so  just require one digit for hours and minutes. The weekday is also absent
1635 in  some forms. */
1636
1637 uschar *uucp_from_pattern      = US
1638    "^From\\s+(\\S+)\\s+(?:[a-zA-Z]{3},?\\s+)?"    /* Common start */
1639    "(?:"                                          /* Non-extracting bracket */
1640    "[a-zA-Z]{3}\\s+\\d?\\d|"                      /* First form */
1641    "\\d?\\d\\s+[a-zA-Z]{3}\\s+\\d\\d(?:\\d\\d)?"  /* Second form */
1642    ")"                                            /* End alternation */
1643    "\\s+\\d\\d?:\\d\\d?";                         /* Start of time */
1644
1645 uschar *uucp_from_sender       = US"$1";
1646
1647 uschar *verify_mode            = NULL;
1648 uschar *version_copyright      =
1649  US"Copyright (c) University of Cambridge, 1995 - 2018\n"
1650    "(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2018";
1651 uschar *version_date           = US"?";
1652 uschar *version_cnumber        = US"????";
1653 uschar *version_string         = US"?";
1654
1655 uschar *warn_message_file      = NULL;
1656 int     warning_count          = 0;
1657 uschar *warnmsg_delay          = NULL;
1658 uschar *warnmsg_recipients     = NULL;
1659
1660
1661 /*  End of globals.c */