src/src/globals.c

   1 /*************************************************
   2 *     Exim - an Internet mail transport agent    *
   3 *************************************************/
   4
   5 /* Copyright (c) University of Cambridge 1995 - 2018 */
   6 /* See the file NOTICE for conditions of use and distribution. */
   7
   8 /* All the global variables are defined together in this one module, so
   9 that they are easy to find. */
  10
  11 #include "exim.h"
  12
  13
  14 /* Generic options for auths, all of which live inside auth_instance
  15 data blocks and hence have the opt_public flag set. */
  16
  17 optionlist optionlist_auths[] = {
  18   { "client_condition", opt_stringptr | opt_public,
  19                  (void *)(offsetof(auth_instance, client_condition)) },
  20   { "client_set_id", opt_stringptr | opt_public,
  21                  (void *)(offsetof(auth_instance, set_client_id)) },
  22   { "driver",        opt_stringptr | opt_public,
  23                  (void *)(offsetof(auth_instance, driver_name)) },
  24   { "public_name",   opt_stringptr | opt_public,
  25                  (void *)(offsetof(auth_instance, public_name)) },
  26   { "server_advertise_condition", opt_stringptr | opt_public,
  27                  (void *)(offsetof(auth_instance, advertise_condition))},
  28   { "server_condition", opt_stringptr | opt_public,
  29                  (void *)(offsetof(auth_instance, server_condition)) },
  30   { "server_debug_print", opt_stringptr | opt_public,
  31                  (void *)(offsetof(auth_instance, server_debug_string)) },
  32   { "server_mail_auth_condition", opt_stringptr | opt_public,
  33                  (void *)(offsetof(auth_instance, mail_auth_condition)) },
  34   { "server_set_id", opt_stringptr | opt_public,
  35                  (void *)(offsetof(auth_instance, set_id)) }
  36 };
  37
  38 int     optionlist_auths_size = nelem(optionlist_auths);
  39
  40 /* An empty host aliases list. */
  41
  42 uschar *no_aliases             = NULL;
  43
  44
  45 /* For comments on these variables, see globals.h. I'm too idle to
  46 duplicate them here... */
  47
  48 #ifdef EXIM_PERL
  49 uschar *opt_perl_startup       = NULL;
  50 BOOL    opt_perl_at_start      = FALSE;
  51 BOOL    opt_perl_started       = FALSE;
  52 BOOL    opt_perl_taintmode     = FALSE;
  53 #endif
  54
  55 #ifdef EXPAND_DLFUNC
  56 tree_node *dlobj_anchor        = NULL;
  57 #endif
  58
  59 #ifdef LOOKUP_IBASE
  60 uschar *ibase_servers          = NULL;
  61 #endif
  62
  63 #ifdef LOOKUP_LDAP
  64 uschar *eldap_ca_cert_dir      = NULL;
  65 uschar *eldap_ca_cert_file     = NULL;
  66 uschar *eldap_cert_file        = NULL;
  67 uschar *eldap_cert_key         = NULL;
  68 uschar *eldap_cipher_suite     = NULL;
  69 uschar *eldap_default_servers  = NULL;
  70 uschar *eldap_require_cert     = NULL;
  71 int     eldap_version          = -1;
  72 BOOL    eldap_start_tls        = FALSE;
  73 #endif
  74
  75 #ifdef LOOKUP_MYSQL
  76 uschar *mysql_servers          = NULL;
  77 #endif
  78
  79 #ifdef LOOKUP_ORACLE
  80 uschar *oracle_servers         = NULL;
  81 #endif
  82
  83 #ifdef LOOKUP_PGSQL
  84 uschar *pgsql_servers          = NULL;
  85 #endif
  86
  87 #ifdef LOOKUP_REDIS
  88 uschar *redis_servers          = NULL;
  89 #endif
  90
  91 #ifdef LOOKUP_SQLITE
  92 int     sqlite_lock_timeout    = 5;
  93 #endif
  94
  95 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
  96 BOOL    move_frozen_messages   = FALSE;
  97 #endif
  98
  99 /* These variables are outside the #ifdef because it keeps the code less
 100 cluttered in several places (e.g. during logging) if we can always refer to
 101 them. Also, the tls_ variables are now always visible.  Note that these are
 102 only used for smtp connections, not for service-daemon access. */
 103
 104 tls_support tls_in = {
 105  .active =              {.sock = -1}
 106  /* all other elements zero */
 107 };
 108 tls_support tls_out = {
 109  .active =              {.sock = -1},
 110  /* all other elements zero */
 111 };
 112
 113 uschar *dsn_envid              = NULL;
 114 int     dsn_ret                = 0;
 115 const pcre  *regex_DSN         = NULL;
 116 uschar *dsn_advertise_hosts    = NULL;
 117
 118 #ifndef DISABLE_TLS
 119 BOOL    gnutls_compat_mode     = FALSE;
 120 BOOL    gnutls_allow_auto_pkcs11 = FALSE;
 121 uschar *openssl_options        = NULL;
 122 const pcre *regex_STARTTLS     = NULL;
 123 uschar *tls_advertise_hosts    = US"*";
 124 uschar *tls_certificate        = NULL;
 125 uschar *tls_crl                = NULL;
 126 /* This default matches NSS DH_MAX_P_BITS value at current time (2012), because
 127 that's the interop problem which has been observed: GnuTLS suggesting a higher
 128 bit-count as "NORMAL" (2432) and Thunderbird dropping connection. */
 129 int     tls_dh_max_bits        = 2236;
 130 uschar *tls_dhparam            = NULL;
 131 uschar *tls_eccurve            = US"auto";
 132 # ifndef DISABLE_OCSP
 133 uschar *tls_ocsp_file          = NULL;
 134 # endif
 135 uschar *tls_privatekey         = NULL;
 136 BOOL    tls_remember_esmtp     = FALSE;
 137 uschar *tls_require_ciphers    = NULL;
 138 # ifdef EXPERIMENTAL_TLS_RESUME
 139 uschar *tls_resumption_hosts   = NULL;
 140 # endif
 141 uschar *tls_try_verify_hosts   = NULL;
 142 uschar *tls_verify_certificates= US"system";
 143 uschar *tls_verify_hosts       = NULL;
 144 #else   /*DISABLE_TLS*/
 145 uschar *tls_advertise_hosts    = NULL;
 146 #endif
 147
 148 #ifndef DISABLE_PRDR
 149 /* Per Recipient Data Response variables */
 150 BOOL    prdr_enable            = FALSE;
 151 BOOL    prdr_requested         = FALSE;
 152 const pcre *regex_PRDR         = NULL;
 153 #endif
 154
 155 #ifdef SUPPORT_I18N
 156 const pcre *regex_UTF8         = NULL;
 157 #endif
 158
 159 /* Input-reading functions for messages, so we can use special ones for
 160 incoming TCP/IP. The defaults use stdin. We never need these for any
 161 stand-alone tests. */
 162
 163 #if !defined(STAND_ALONE) && !defined(MACRO_PREDEF)
 164 int (*lwr_receive_getc)(unsigned) = stdin_getc;
 165 uschar * (*lwr_receive_getbuf)(unsigned *) = NULL;
 166 int (*lwr_receive_ungetc)(int) = stdin_ungetc;
 167 int (*receive_getc)(unsigned)  = stdin_getc;
 168 uschar * (*receive_getbuf)(unsigned *)  = NULL;
 169 void (*receive_get_cache)(void)= NULL;
 170 int (*receive_ungetc)(int)     = stdin_ungetc;
 171 int (*receive_feof)(void)      = stdin_feof;
 172 int (*receive_ferror)(void)    = stdin_ferror;
 173 BOOL (*receive_smtp_buffered)(void) = NULL;   /* Only used for SMTP */
 174 #endif
 175
 176
 177 /* List of per-address expansion variables for clearing and saving/restoring
 178 when verifying one address while routing/verifying another. We have to have
 179 the size explicit, because it is referenced from more than one module. */
 180
 181 const uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT] = {
 182   CUSS &deliver_address_data,
 183   CUSS &deliver_domain,
 184   CUSS &deliver_domain_data,
 185   CUSS &deliver_domain_orig,
 186   CUSS &deliver_domain_parent,
 187   CUSS &deliver_localpart,
 188   CUSS &deliver_localpart_data,
 189   CUSS &deliver_localpart_orig,
 190   CUSS &deliver_localpart_parent,
 191   CUSS &deliver_localpart_prefix,
 192   CUSS &deliver_localpart_suffix,
 193   CUSS (uschar **)(&deliver_recipients),
 194   CUSS &deliver_host,
 195   CUSS &deliver_home,
 196   CUSS &address_file,
 197   CUSS &address_pipe,
 198   CUSS &self_hostname,
 199   NULL };
 200
 201 int address_expansions_count = sizeof(address_expansions)/sizeof(uschar **);
 202
 203 /******************************************************************************/
 204 /* General global variables.  Boolean flags are done as a group
 205 so that only one bit each is needed, packed, for all those we never
 206 need to take a pointer - and only a char for the rest.
 207 This means a struct, unfortunately since it clutters the sourcecode. */
 208
 209 struct global_flags f =
 210 {
 211         .acl_temp_details       = FALSE,
 212         .active_local_from_check = FALSE,
 213         .active_local_sender_retain = FALSE,
 214         .address_test_mode      = FALSE,
 215         .admin_user             = FALSE,
 216         .allow_auth_unadvertised= FALSE,
 217         .allow_unqualified_recipient = TRUE,    /* For local messages */
 218         .allow_unqualified_sender = TRUE,       /* Reset for SMTP */
 219         .authentication_local   = FALSE,
 220
 221         .background_daemon      = TRUE,
 222
 223         .chunking_offered       = FALSE,
 224         .config_changed         = FALSE,
 225         .continue_more          = FALSE,
 226
 227         .daemon_listen          = FALSE,
 228         .debug_daemon           = FALSE,
 229         .deliver_firsttime      = FALSE,
 230         .deliver_force          = FALSE,
 231         .deliver_freeze         = FALSE,
 232         .deliver_force_thaw     = FALSE,
 233         .deliver_manual_thaw    = FALSE,
 234         .deliver_selectstring_regex = FALSE,
 235         .deliver_selectstring_sender_regex = FALSE,
 236         .disable_callout_flush  = FALSE,
 237         .disable_delay_flush    = FALSE,
 238         .disable_logging        = FALSE,
 239 #ifndef DISABLE_DKIM
 240         .dkim_disable_verify      = FALSE,
 241 #endif
 242 #ifdef SUPPORT_DMARC
 243         .dmarc_has_been_checked  = FALSE,
 244         .dmarc_disable_verify    = FALSE,
 245         .dmarc_enable_forensic   = FALSE,
 246 #endif
 247         .dont_deliver           = FALSE,
 248         .dot_ends               = TRUE,
 249
 250         .enable_dollar_recipients = FALSE,
 251         .expand_string_forcedfail = FALSE,
 252
 253         .filter_running         = FALSE,
 254
 255         .header_rewritten       = FALSE,
 256         .helo_verified          = FALSE,
 257         .helo_verify_failed     = FALSE,
 258         .host_checking_callout  = FALSE,
 259         .host_find_failed_syntax= FALSE,
 260
 261         .inetd_wait_mode        = FALSE,
 262         .is_inetd               = FALSE,
 263
 264         .local_error_message    = FALSE,
 265         .log_testing_mode       = FALSE,
 266
 267 #ifdef WITH_CONTENT_SCAN
 268         .no_mbox_unspool        = FALSE,
 269 #endif
 270         .no_multiline_responses = FALSE,
 271
 272         .parse_allow_group      = FALSE,
 273         .parse_found_group      = FALSE,
 274         .pipelining_enable      = TRUE,
 275 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
 276         .proxy_session_failed   = FALSE,
 277 #endif
 278
 279         .queue_2stage           = FALSE,
 280         .queue_only_policy      = FALSE,
 281         .queue_run_first_delivery = FALSE,
 282         .queue_run_force        = FALSE,
 283         .queue_run_local        = FALSE,
 284         .queue_running          = FALSE,
 285         .queue_smtp             = FALSE,
 286
 287         .really_exim            = TRUE,
 288         .receive_call_bombout   = FALSE,
 289         .recipients_discarded   = FALSE,
 290         .running_in_test_harness = FALSE,
 291
 292         .search_find_defer      = FALSE,
 293         .sender_address_forced  = FALSE,
 294         .sender_host_notsocket  = FALSE,
 295         .sender_host_unknown    = FALSE,
 296         .sender_local           = FALSE,
 297         .sender_name_forced     = FALSE,
 298         .sender_set_untrusted   = FALSE,
 299         .smtp_authenticated     = FALSE,
 300 #ifdef SUPPORT_PIPE_CONNECT
 301         .smtp_in_early_pipe_advertised = FALSE,
 302         .smtp_in_early_pipe_no_auth = FALSE,
 303         .smtp_in_early_pipe_used = FALSE,
 304 #endif
 305         .smtp_in_pipelining_advertised = FALSE,
 306         .smtp_in_pipelining_used = FALSE,
 307         .spool_file_wireformat  = FALSE,
 308         .submission_mode        = FALSE,
 309         .suppress_local_fixups  = FALSE,
 310         .suppress_local_fixups_default = FALSE,
 311         .synchronous_delivery   = FALSE,
 312         .system_filtering       = FALSE,
 313
 314         .tcp_fastopen_ok        = FALSE,
 315         .tcp_in_fastopen        = FALSE,
 316         .tcp_in_fastopen_data   = FALSE,
 317         .tcp_in_fastopen_logged = FALSE,
 318         .tcp_out_fastopen_logged= FALSE,
 319         .timestamps_utc         = FALSE,
 320         .transport_filter_timed_out = FALSE,
 321         .trusted_caller         = FALSE,
 322         .trusted_config         = TRUE,
 323 };
 324
 325 /******************************************************************************/
 326 /* These are the flags which are either variables or mainsection options,
 327 so an address is needed for access, or are exported to local_scan. */
 328
 329 BOOL    accept_8bitmime        = TRUE; /* deliberately not RFC compliant */
 330 BOOL    allow_domain_literals  = FALSE;
 331 BOOL    allow_mx_to_ip         = FALSE;
 332 BOOL    allow_utf8_domains     = FALSE;
 333 BOOL    authentication_failed  = FALSE;
 334
 335 BOOL    bounce_return_body     = TRUE;
 336 BOOL    bounce_return_message  = TRUE;
 337 BOOL    check_rfc2047_length   = TRUE;
 338 BOOL    commandline_checks_require_admin = FALSE;
 339
 340 #ifdef EXPERIMENTAL_DCC
 341 BOOL    dcc_direct_add_header  = FALSE;
 342 #endif
 343 BOOL    debug_store            = FALSE;
 344 BOOL    delivery_date_remove   = TRUE;
 345 BOOL    deliver_drop_privilege = FALSE;
 346 #ifdef ENABLE_DISABLE_FSYNC
 347 BOOL    disable_fsync          = FALSE;
 348 #endif
 349 BOOL    disable_ipv6           = FALSE;
 350 BOOL    dns_csa_use_reverse    = TRUE;
 351 BOOL    drop_cr                = FALSE;         /* No longer used */
 352
 353 BOOL    envelope_to_remove     = TRUE;
 354 BOOL    exim_gid_set           = TRUE;          /* This gid is always set */
 355 BOOL    exim_uid_set           = TRUE;          /* This uid is always set */
 356 BOOL    extract_addresses_remove_arguments = TRUE;
 357
 358 BOOL    host_checking          = FALSE;
 359 BOOL    host_lookup_deferred   = FALSE;
 360 BOOL    host_lookup_failed     = FALSE;
 361 BOOL    ignore_fromline_local  = FALSE;
 362
 363 BOOL    local_from_check       = TRUE;
 364 BOOL    local_sender_retain    = FALSE;
 365 BOOL    log_timezone           = FALSE;
 366 BOOL    message_body_newlines  = FALSE;
 367 BOOL    message_logs           = TRUE;
 368 #ifdef SUPPORT_I18N
 369 BOOL    message_smtputf8       = FALSE;
 370 #endif
 371 BOOL    mua_wrapper            = FALSE;
 372
 373 BOOL    preserve_message_logs  = FALSE;
 374 BOOL    print_topbitchars      = FALSE;
 375 BOOL    prod_requires_admin    = TRUE;
 376 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
 377 BOOL    proxy_session          = FALSE;
 378 #endif
 379
 380 BOOL    queue_list_requires_admin = TRUE;
 381 BOOL    queue_only             = FALSE;
 382 BOOL    queue_only_load_latch  = TRUE;
 383 BOOL    queue_only_override    = TRUE;
 384 BOOL    queue_run_in_order     = FALSE;
 385 BOOL    recipients_max_reject  = FALSE;
 386 BOOL    return_path_remove     = TRUE;
 387
 388 BOOL    smtp_batched_input     = FALSE;
 389 BOOL    sender_helo_dnssec     = FALSE;
 390 BOOL    sender_host_dnssec     = FALSE;
 391 BOOL    smtp_accept_keepalive  = TRUE;
 392 BOOL    smtp_check_spool_space = TRUE;
 393 BOOL    smtp_enforce_sync      = TRUE;
 394 BOOL    smtp_etrn_serialize    = TRUE;
 395 BOOL    smtp_input             = FALSE;
 396 BOOL    smtp_return_error_details = FALSE;
 397 #ifdef SUPPORT_SPF
 398 BOOL    spf_result_guessed     = FALSE;
 399 #endif
 400 BOOL    split_spool_directory  = FALSE;
 401 BOOL    spool_wireformat       = FALSE;
 402 #ifdef EXPERIMENTAL_SRS
 403 BOOL    srs_usehash            = TRUE;
 404 BOOL    srs_usetimestamp       = TRUE;
 405 #endif
 406 BOOL    strict_acl_vars        = FALSE;
 407 BOOL    strip_excess_angle_brackets = FALSE;
 408 BOOL    strip_trailing_dot     = FALSE;
 409 BOOL    syslog_duplication     = TRUE;
 410 BOOL    syslog_pid             = TRUE;
 411 BOOL    syslog_timestamp       = TRUE;
 412 BOOL    system_filter_gid_set  = FALSE;
 413 BOOL    system_filter_uid_set  = FALSE;
 414
 415 BOOL    tcp_nodelay            = TRUE;
 416 BOOL    write_rejectlog        = TRUE;
 417
 418 /******************************************************************************/
 419
 420 header_line *acl_added_headers = NULL;
 421 tree_node *acl_anchor          = NULL;
 422 uschar *acl_arg[9]             = {NULL, NULL, NULL, NULL, NULL,
 423                                   NULL, NULL, NULL, NULL};
 424 int     acl_narg               = 0;
 425
 426 int     acl_level              = 0;
 427
 428 uschar *acl_not_smtp           = NULL;
 429 #ifdef WITH_CONTENT_SCAN
 430 uschar *acl_not_smtp_mime      = NULL;
 431 #endif
 432 uschar *acl_not_smtp_start     = NULL;
 433 uschar *acl_removed_headers    = NULL;
 434 uschar *acl_smtp_auth          = NULL;
 435 uschar *acl_smtp_connect       = NULL;
 436 uschar *acl_smtp_data          = NULL;
 437 #ifndef DISABLE_PRDR
 438 uschar *acl_smtp_data_prdr     = US"accept";
 439 #endif
 440 #ifndef DISABLE_DKIM
 441 uschar *acl_smtp_dkim          = NULL;
 442 #endif
 443 uschar *acl_smtp_etrn          = NULL;
 444 uschar *acl_smtp_expn          = NULL;
 445 uschar *acl_smtp_helo          = NULL;
 446 uschar *acl_smtp_mail          = NULL;
 447 uschar *acl_smtp_mailauth      = NULL;
 448 #ifdef WITH_CONTENT_SCAN
 449 uschar *acl_smtp_mime          = NULL;
 450 #endif
 451 uschar *acl_smtp_notquit       = NULL;
 452 uschar *acl_smtp_predata       = NULL;
 453 uschar *acl_smtp_quit          = NULL;
 454 uschar *acl_smtp_rcpt          = NULL;
 455 uschar *acl_smtp_starttls      = NULL;
 456 uschar *acl_smtp_vrfy          = NULL;
 457
 458 tree_node *acl_var_c           = NULL;
 459 tree_node *acl_var_m           = NULL;
 460 uschar *acl_verify_message     = NULL;
 461 string_item *acl_warn_logged   = NULL;
 462
 463 /* Names of SMTP places for use in ACL error messages, and corresponding SMTP
 464 error codes - keep in step with definitions of ACL_WHERE_xxxx in macros.h. */
 465
 466 uschar *acl_wherenames[]       = { US"RCPT",
 467                                    US"MAIL",
 468                                    US"PREDATA",
 469                                    US"MIME",
 470                                    US"DKIM",
 471                                    US"DATA",
 472 #ifndef DISABLE_PRDR
 473                                    US"PRDR",
 474 #endif
 475                                    US"non-SMTP",
 476                                    US"AUTH",
 477                                    US"connection",
 478                                    US"ETRN",
 479                                    US"EXPN",
 480                                    US"EHLO or HELO",
 481                                    US"MAILAUTH",
 482                                    US"non-SMTP-start",
 483                                    US"NOTQUIT",
 484                                    US"QUIT",
 485                                    US"STARTTLS",
 486                                    US"VRFY",
 487                                    US"delivery",
 488                                    US"unknown"
 489                                  };
 490
 491 uschar *acl_wherecodes[]       = { US"550",     /* RCPT */
 492                                    US"550",     /* MAIL */
 493                                    US"550",     /* PREDATA */
 494                                    US"550",     /* MIME */
 495                                    US"550",     /* DKIM */
 496                                    US"550",     /* DATA */
 497 #ifndef DISABLE_PRDR
 498                                    US"550",    /* RCPT PRDR */
 499 #endif
 500                                    US"0",       /* not SMTP; not relevant */
 501                                    US"503",     /* AUTH */
 502                                    US"550",     /* connect */
 503                                    US"458",     /* ETRN */
 504                                    US"550",     /* EXPN */
 505                                    US"550",     /* HELO/EHLO */
 506                                    US"0",       /* MAILAUTH; not relevant */
 507                                    US"0",       /* not SMTP; not relevant */
 508                                    US"0",       /* NOTQUIT; not relevant */
 509                                    US"0",       /* QUIT; not relevant */
 510                                    US"550",     /* STARTTLS */
 511                                    US"252",     /* VRFY */
 512                                    US"0",       /* delivery; not relevant */
 513                                    US"0"        /* unknown; not relevant */
 514                                  };
 515
 516 uschar *add_environment        = NULL;
 517 address_item  *addr_duplicate  = NULL;
 518
 519 address_item address_defaults = {
 520   .next =               NULL,
 521   .parent =             NULL,
 522   .first =              NULL,
 523   .dupof =              NULL,
 524   .start_router =       NULL,
 525   .router =             NULL,
 526   .transport =          NULL,
 527   .host_list =          NULL,
 528   .host_used =          NULL,
 529   .fallback_hosts =     NULL,
 530   .reply =              NULL,
 531   .retries =            NULL,
 532   .address =            NULL,
 533   .unique =             NULL,
 534   .cc_local_part =      NULL,
 535   .lc_local_part =      NULL,
 536   .local_part =         NULL,
 537   .prefix =             NULL,
 538   .suffix =             NULL,
 539   .domain =             NULL,
 540   .address_retry_key =  NULL,
 541   .domain_retry_key =   NULL,
 542   .current_dir =        NULL,
 543   .home_dir =           NULL,
 544   .message =            NULL,
 545   .user_message =       NULL,
 546   .onetime_parent =     NULL,
 547   .pipe_expandn =       NULL,
 548   .return_filename =    NULL,
 549   .self_hostname =      NULL,
 550   .shadow_message =     NULL,
 551 #ifndef DISABLE_TLS
 552   .cipher =             NULL,
 553   .ourcert =            NULL,
 554   .peercert =           NULL,
 555   .peerdn =             NULL,
 556   .ocsp =               OCSP_NOT_REQ,
 557 #endif
 558 #ifdef EXPERIMENTAL_DSN_INFO
 559   .smtp_greeting =      NULL,
 560   .helo_response =      NULL,
 561 #endif
 562   .authenticator =      NULL,
 563   .auth_id =            NULL,
 564   .auth_sndr =          NULL,
 565   .dsn_orcpt =          NULL,
 566   .dsn_flags =          0,
 567   .dsn_aware =          0,
 568   .uid =                (uid_t)(-1),
 569   .gid =                (gid_t)(-1),
 570   .flags =              { 0 },
 571   .domain_cache =       { 0 },                /* domain_cache - any larger array should be zeroed */
 572   .localpart_cache =    { 0 },                /* localpart_cache - ditto */
 573   .mode =               -1,
 574   .more_errno =         0,
 575   .delivery_usec =      0,
 576   .basic_errno =        ERRNO_UNKNOWNERROR,
 577   .child_count =        0,
 578   .return_file =        -1,
 579   .special_action =     SPECIAL_NONE,
 580   .transport_return =   DEFER,
 581   .prop = {                                     /* fields that are propagated to children */
 582     .address_data =     NULL,
 583     .domain_data =      NULL,
 584     .localpart_data =   NULL,
 585     .errors_address =   NULL,
 586     .extra_headers =    NULL,
 587     .remove_headers =   NULL,
 588     .variables =        NULL,
 589 #ifdef EXPERIMENTAL_SRS
 590     .srs_sender =       NULL,
 591 #endif
 592     .ignore_error =     FALSE,
 593 #ifdef SUPPORT_I18N
 594     .utf8_msg =         FALSE,
 595     .utf8_downcvt =     FALSE,
 596     .utf8_downcvt_maybe = FALSE
 597 #endif
 598   }
 599 };
 600
 601 uschar *address_file           = NULL;
 602 uschar *address_pipe           = NULL;
 603 tree_node *addresslist_anchor  = NULL;
 604 int     addresslist_count      = 0;
 605 gid_t  *admin_groups           = NULL;
 606
 607 #ifdef EXPERIMENTAL_ARC
 608 struct arc_set *arc_received    = NULL;
 609 int     arc_received_instance   = 0;
 610 int     arc_oldest_pass         = 0;
 611 const uschar *arc_state         = NULL;
 612 const uschar *arc_state_reason  = NULL;
 613 #endif
 614
 615 uschar *authenticated_fail_id  = NULL;
 616 uschar *authenticated_id       = NULL;
 617 uschar *authenticated_sender   = NULL;
 618 auth_instance  *auths          = NULL;
 619 uschar *auth_advertise_hosts   = US"*";
 620 auth_instance auth_defaults    = {
 621     .next =             NULL,
 622     .name =             NULL,
 623     .info =             NULL,
 624     .options_block =    NULL,
 625     .driver_name =      NULL,
 626     .advertise_condition = NULL,
 627     .client_condition = NULL,
 628     .public_name =      NULL,
 629     .set_id =           NULL,
 630     .set_client_id =    NULL,
 631     .mail_auth_condition = NULL,
 632     .server_debug_string = NULL,
 633     .server_condition = NULL,
 634     .client =           FALSE,
 635     .server =           FALSE,
 636     .advertised =       FALSE
 637 };
 638
 639 uschar *auth_defer_msg         = US"reason not recorded";
 640 uschar *auth_defer_user_msg    = US"";
 641 uschar *auth_vars[AUTH_VARS];
 642 int     auto_thaw              = 0;
 643 #ifdef WITH_CONTENT_SCAN
 644 int     av_failed              = FALSE; /* boolean but accessed as vtype_int*/
 645 uschar *av_scanner             = US"sophie:/var/run/sophie";  /* AV scanner */
 646 #endif
 647
 648 #if BASE_62 == 62
 649 uschar *base62_chars=
 650     US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 651 #else
 652 uschar *base62_chars= US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
 653 #endif
 654
 655 uschar *bi_command             = NULL;
 656 uschar *big_buffer             = NULL;
 657 int     big_buffer_size        = BIG_BUFFER_SIZE;
 658 #ifdef EXPERIMENTAL_BRIGHTMAIL
 659 uschar *bmi_alt_location       = NULL;
 660 uschar *bmi_base64_tracker_verdict = NULL;
 661 uschar *bmi_base64_verdict     = NULL;
 662 uschar *bmi_config_file        = US"/opt/brightmail/etc/brightmail.cfg";
 663 int     bmi_deliver            = 1;
 664 int     bmi_run                = 0;
 665 uschar *bmi_verdicts           = NULL;
 666 #endif
 667 int     bsmtp_transaction_linecount = 0;
 668 int     body_8bitmime          = 0;
 669 int     body_linecount         = 0;
 670 int     body_zerocount         = 0;
 671 uschar *bounce_message_file    = NULL;
 672 uschar *bounce_message_text    = NULL;
 673 uschar *bounce_recipient       = NULL;
 674 int     bounce_return_linesize_limit = 998;
 675 int     bounce_return_size_limit = 100*1024;
 676 uschar *bounce_sender_authentication = NULL;
 677
 678 uschar *callout_address        = NULL;
 679 int     callout_cache_domain_positive_expire = 7*24*60*60;
 680 int     callout_cache_domain_negative_expire = 3*60*60;
 681 int     callout_cache_positive_expire = 24*60*60;
 682 int     callout_cache_negative_expire = 2*60*60;
 683 uschar *callout_random_local_part = US"$primary_hostname-$tod_epoch-testing";
 684 uschar *check_dns_names_pattern= US"(?i)^(?>(?(1)\\.|())[^\\W](?>[a-z0-9/_-]*[^\\W])?)+(\\.?)$";
 685 int     check_log_inodes       = 100;
 686 int_eximarith_t check_log_space = 10*1024;      /* 10K Kbyte == 10MB */
 687 int     check_spool_inodes     = 100;
 688 int_eximarith_t check_spool_space = 10*1024;    /* 10K Kbyte == 10MB */
 689
 690 uschar *chunking_advertise_hosts = US"*";
 691 unsigned chunking_datasize     = 0;
 692 unsigned chunking_data_left    = 0;
 693 chunking_state_t chunking_state= CHUNKING_NOT_OFFERED;
 694 const pcre *regex_CHUNKING     = NULL;
 695
 696 uschar *client_authenticator   = NULL;
 697 uschar *client_authenticated_id = NULL;
 698 uschar *client_authenticated_sender = NULL;
 699 int     clmacro_count          = 0;
 700 uschar *clmacros[MAX_CLMACROS];
 701 FILE   *config_file            = NULL;
 702 const uschar *config_filename  = NULL;
 703 int     config_lineno          = 0;
 704 #ifdef CONFIGURE_GROUP
 705 gid_t   config_gid             = CONFIGURE_GROUP;
 706 #else
 707 gid_t   config_gid             = 0;
 708 #endif
 709 uschar *config_main_filelist   = US CONFIGURE_FILE
 710                          "\0<-----------Space to patch configure_filename->";
 711 uschar *config_main_filename   = NULL;
 712 uschar *config_main_directory  = NULL;
 713
 714 #ifdef CONFIGURE_OWNER
 715 uid_t   config_uid             = CONFIGURE_OWNER;
 716 #else
 717 uid_t   config_uid             = 0;
 718 #endif
 719
 720 int     connection_max_messages= -1;
 721 uschar *continue_proxy_cipher  = NULL;
 722 uschar *continue_hostname      = NULL;
 723 uschar *continue_host_address  = NULL;
 724 int     continue_sequence      = 1;
 725 uschar *continue_transport     = NULL;
 726
 727 uschar *csa_status             = NULL;
 728 cut_t   cutthrough = {
 729   .callout_hold_only =  FALSE,                          /* verify-only: normal delivery */
 730   .delivery =           FALSE,                          /* when to attempt */
 731   .defer_pass =         FALSE,                          /* on defer: spool locally */
 732   .is_tls =             FALSE,                          /* not a TLS conn yet */
 733   .cctx =               {.sock = -1},                   /* open connection */
 734   .nrcpt =              0,                              /* number of addresses */
 735 };
 736
 737 uschar *daemon_smtp_port       = US"smtp";
 738 int     daemon_startup_retries = 9;
 739 int     daemon_startup_sleep   = 30;
 740
 741 #ifdef EXPERIMENTAL_DCC
 742 uschar *dcc_header             = NULL;
 743 uschar *dcc_result             = NULL;
 744 uschar *dccifd_address         = US"/usr/local/dcc/var/dccifd";
 745 uschar *dccifd_options         = US"header";
 746 #endif
 747
 748 int     debug_fd               = -1;
 749 FILE   *debug_file             = NULL;
 750 int     debug_notall[]         = {
 751   Di_memory,
 752   Di_noutf8,
 753   -1
 754 };
 755 bit_table debug_options[]      = { /* must be in alphabetical order and use
 756                                  only the enum values from macro.h */
 757   BIT_TABLE(D, acl),
 758   BIT_TABLE(D, all),
 759   BIT_TABLE(D, auth),
 760   BIT_TABLE(D, deliver),
 761   BIT_TABLE(D, dns),
 762   BIT_TABLE(D, dnsbl),
 763   BIT_TABLE(D, exec),
 764   BIT_TABLE(D, expand),
 765   BIT_TABLE(D, filter),
 766   BIT_TABLE(D, hints_lookup),
 767   BIT_TABLE(D, host_lookup),
 768   BIT_TABLE(D, ident),
 769   BIT_TABLE(D, interface),
 770   BIT_TABLE(D, lists),
 771   BIT_TABLE(D, load),
 772   BIT_TABLE(D, local_scan),
 773   BIT_TABLE(D, lookup),
 774   BIT_TABLE(D, memory),
 775   BIT_TABLE(D, noutf8),
 776   BIT_TABLE(D, pid),
 777   BIT_TABLE(D, process_info),
 778   BIT_TABLE(D, queue_run),
 779   BIT_TABLE(D, receive),
 780   BIT_TABLE(D, resolver),
 781   BIT_TABLE(D, retry),
 782   BIT_TABLE(D, rewrite),
 783   BIT_TABLE(D, route),
 784   BIT_TABLE(D, timestamp),
 785   BIT_TABLE(D, tls),
 786   BIT_TABLE(D, transport),
 787   BIT_TABLE(D, uid),
 788   BIT_TABLE(D, verify),
 789 };
 790 int     debug_options_count    = nelem(debug_options);
 791
 792 unsigned int debug_selector    = 0;
 793 int     delay_warning[DELAY_WARNING_SIZE] = { DELAY_WARNING_SIZE, 1, 24*60*60 };
 794 uschar *delay_warning_condition=
 795   US"${if or {"
 796             "{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }"
 797             "{ match{$h_precedence:}{(?i)bulk|list|junk} }"
 798             "{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }"
 799             "} {no}{yes}}";
 800 uschar *deliver_address_data   = NULL;
 801 int     deliver_datafile       = -1;
 802 const uschar *deliver_domain   = NULL;
 803 uschar *deliver_domain_data    = NULL;
 804 const uschar *deliver_domain_orig = NULL;
 805 const uschar *deliver_domain_parent = NULL;
 806 time_t  deliver_frozen_at      = 0;
 807 uschar *deliver_home           = NULL;
 808 const uschar *deliver_host     = NULL;
 809 const uschar *deliver_host_address = NULL;
 810 int     deliver_host_port      = 0;
 811 uschar *deliver_in_buffer      = NULL;
 812 ino_t   deliver_inode          = 0;
 813 uschar *deliver_localpart      = NULL;
 814 uschar *deliver_localpart_data = NULL;
 815 uschar *deliver_localpart_orig = NULL;
 816 uschar *deliver_localpart_parent = NULL;
 817 uschar *deliver_localpart_prefix = NULL;
 818 uschar *deliver_localpart_suffix = NULL;
 819 uschar *deliver_out_buffer     = NULL;
 820 int     deliver_queue_load_max = -1;
 821 address_item  *deliver_recipients = NULL;
 822 uschar *deliver_selectstring   = NULL;
 823 uschar *deliver_selectstring_sender = NULL;
 824
 825 #ifndef DISABLE_DKIM
 826 unsigned dkim_collect_input      = 0;
 827 uschar *dkim_cur_signer          = NULL;
 828 int     dkim_key_length          = 0;
 829 void   *dkim_signatures          = NULL;
 830 uschar *dkim_signers             = NULL;
 831 uschar *dkim_signing_domain      = NULL;
 832 uschar *dkim_signing_selector    = NULL;
 833 uschar *dkim_verify_hashes       = US"sha256:sha512:sha1";
 834 uschar *dkim_verify_keytypes     = US"ed25519:rsa";
 835 BOOL    dkim_verify_minimal      = FALSE;
 836 uschar *dkim_verify_overall      = NULL;
 837 uschar *dkim_verify_signers      = US"$dkim_signers";
 838 uschar *dkim_verify_status       = NULL;
 839 uschar *dkim_verify_reason       = NULL;
 840 #endif
 841 #ifdef SUPPORT_DMARC
 842 uschar *dmarc_domain_policy     = NULL;
 843 uschar *dmarc_forensic_sender   = NULL;
 844 uschar *dmarc_history_file      = NULL;
 845 uschar *dmarc_status            = NULL;
 846 uschar *dmarc_status_text       = NULL;
 847 uschar *dmarc_tld_file          = US DMARC_TLD_FILE;
 848 uschar *dmarc_used_domain       = NULL;
 849 #endif
 850
 851 uschar *dns_again_means_nonexist = NULL;
 852 int     dns_csa_search_limit   = 5;
 853 int     dns_cname_loops        = 1;
 854 #ifdef SUPPORT_DANE
 855 int     dns_dane_ok            = -1;
 856 #endif
 857 uschar *dns_ipv4_lookup        = NULL;
 858 int     dns_retrans            = 0;
 859 int     dns_retry              = 0;
 860 int     dns_dnssec_ok          = -1; /* <0 = not coerced */
 861 uschar *dns_trust_aa           = NULL;
 862 int     dns_use_edns0          = -1; /* <0 = not coerced */
 863 uschar *dnslist_domain         = NULL;
 864 uschar *dnslist_matched        = NULL;
 865 uschar *dnslist_text           = NULL;
 866 uschar *dnslist_value          = NULL;
 867 tree_node *domainlist_anchor   = NULL;
 868 int     domainlist_count       = 0;
 869 uschar *dsn_from               = US DEFAULT_DSN_FROM;
 870
 871 int     errno_quota            = ERRNO_QUOTA;
 872 uschar *errors_copy            = NULL;
 873 int     error_handling         = ERRORS_SENDER;
 874 uschar *errors_reply_to        = NULL;
 875 int     errors_sender_rc       = EXIT_FAILURE;
 876 #ifndef DISABLE_EVENT
 877 uschar *event_action             = NULL;        /* expansion for delivery events */
 878 uschar *event_data               = NULL;        /* auxiliary data variable for event */
 879 int     event_defer_errno        = 0;
 880 const uschar *event_name         = NULL;        /* event name variable */
 881 #endif
 882
 883
 884 gid_t   exim_gid               = EXIM_GID;
 885 uschar *exim_path              = US BIN_DIRECTORY "/exim"
 886                         "\0<---------------Space to patch exim_path->";
 887 uid_t   exim_uid               = EXIM_UID;
 888 int     expand_level           = 0;             /* Nesting depth, indent for debug */
 889 int     expand_forbid          = 0;
 890 int     expand_nlength[EXPAND_MAXN+1];
 891 int     expand_nmax            = -1;
 892 uschar *expand_nstring[EXPAND_MAXN+1];
 893 uschar *expand_string_message;
 894 uschar *extra_local_interfaces = NULL;
 895
 896 int     fake_response          = OK;
 897 uschar *fake_response_text     = US"Your message has been rejected but is "
 898                                    "being kept for evaluation.\nIf it was a "
 899                                    "legitimate message, it may still be "
 900                                    "delivered to the target recipient(s).";
 901 int     filter_n[FILTER_VARIABLE_COUNT];
 902 int     filter_sn[FILTER_VARIABLE_COUNT];
 903 int     filter_test            = FTEST_NONE;
 904 uschar *filter_test_sfile      = NULL;
 905 uschar *filter_test_ufile      = NULL;
 906 uschar *filter_thisaddress     = NULL;
 907 int     finduser_retries       = 0;
 908 uid_t   fixed_never_users[]    = { FIXED_NEVER_USERS };
 909 uschar *freeze_tell            = NULL;
 910 uschar *freeze_tell_config     = NULL;
 911 uschar *fudged_queue_times     = US"";
 912
 913 uschar *gecos_name             = NULL;
 914 uschar *gecos_pattern          = NULL;
 915 rewrite_rule  *global_rewrite_rules = NULL;
 916
 917 volatile sig_atomic_t had_command_timeout = 0;
 918 volatile sig_atomic_t had_command_sigterm = 0;
 919 volatile sig_atomic_t had_data_timeout    = 0;
 920 volatile sig_atomic_t had_data_sigint     = 0;
 921 uschar *headers_charset        = US HEADERS_CHARSET;
 922 int     header_insert_maxlen   = 64 * 1024;
 923 header_line  *header_last      = NULL;
 924 header_line  *header_list      = NULL;
 925 int     header_maxsize         = HEADER_MAXSIZE;
 926 int     header_line_maxsize    = 0;
 927
 928 header_name header_names[] = {
 929   /* name               len     allow_resent    htype */
 930   { US"bcc",            3,      TRUE,           htype_bcc },
 931   { US"cc",             2,      TRUE,           htype_cc },
 932   { US"date",           4,      TRUE,           htype_date },
 933   { US"delivery-date", 13,      FALSE,          htype_delivery_date },
 934   { US"envelope-to",   11,      FALSE,          htype_envelope_to },
 935   { US"from",           4,      TRUE,           htype_from },
 936   { US"message-id",    10,      TRUE,           htype_id },
 937   { US"received",       8,      FALSE,          htype_received },
 938   { US"reply-to",       8,      FALSE,          htype_reply_to },
 939   { US"return-path",   11,      FALSE,          htype_return_path },
 940   { US"sender",         6,      TRUE,           htype_sender },
 941   { US"subject",        7,      FALSE,          htype_subject },
 942   { US"to",             2,      TRUE,           htype_to }
 943 };
 944
 945 int header_names_size          = nelem(header_names);
 946
 947 uschar *helo_accept_junk_hosts = NULL;
 948 uschar *helo_allow_chars       = US"";
 949 uschar *helo_lookup_domains    = US"@ : @[]";
 950 uschar *helo_try_verify_hosts  = NULL;
 951 uschar *helo_verify_hosts      = NULL;
 952 const uschar *hex_digits       = CUS"0123456789abcdef";
 953 uschar *hold_domains           = NULL;
 954 uschar *host_data              = NULL;
 955 uschar *host_lookup            = NULL;
 956 uschar *host_lookup_order      = US"bydns:byaddr";
 957 uschar *host_lookup_msg        = US"";
 958 int     host_number            = 0;
 959 uschar *host_number_string     = NULL;
 960 uschar *host_reject_connection = NULL;
 961 tree_node *hostlist_anchor     = NULL;
 962 int     hostlist_count         = 0;
 963 uschar *hosts_treat_as_local   = NULL;
 964 uschar *hosts_connection_nolog = NULL;
 965
 966 int     ignore_bounce_errors_after = 10*7*24*60*60;  /* 10 weeks */
 967 uschar *ignore_fromline_hosts  = NULL;
 968 int     inetd_wait_timeout     = -1;
 969 uschar *initial_cwd            = NULL;
 970 uschar *interface_address      = NULL;
 971 int     interface_port         = -1;
 972 uschar *iterate_item           = NULL;
 973
 974 int     journal_fd             = -1;
 975
 976 uschar *keep_environment       = NULL;
 977
 978 int     keep_malformed         = 4*24*60*60;    /* 4 days */
 979
 980 uschar *eldap_dn               = NULL;
 981 int     load_average           = -2;
 982 uschar *local_from_prefix      = NULL;
 983 uschar *local_from_suffix      = NULL;
 984
 985 #if HAVE_IPV6
 986 uschar *local_interfaces       = US"<; ::0 ; 0.0.0.0";
 987 #else
 988 uschar *local_interfaces       = US"0.0.0.0";
 989 #endif
 990
 991 #ifdef HAVE_LOCAL_SCAN
 992 uschar *local_scan_data        = NULL;
 993 int     local_scan_timeout     = 5*60;
 994 #endif
 995 gid_t   local_user_gid         = (gid_t)(-1);
 996 uid_t   local_user_uid         = (uid_t)(-1);
 997
 998 tree_node *localpartlist_anchor= NULL;
 999 int     localpartlist_count    = 0;
1000 uschar *log_buffer             = NULL;
1001
1002 int     log_default[]          = { /* for initializing log_selector */
1003   Li_acl_warn_skipped,
1004   Li_connection_reject,
1005   Li_delay_delivery,
1006   Li_dkim,
1007   Li_dnslist_defer,
1008   Li_etrn,
1009   Li_host_lookup_failed,
1010   Li_lost_incoming_connection,
1011   Li_outgoing_interface, /* see d_log_interface in deliver.c */
1012   Li_msg_id,
1013   Li_queue_run,
1014   Li_rejected_header,
1015   Li_retry_defer,
1016   Li_sender_verify_fail,
1017   Li_size_reject,
1018   Li_skip_delivery,
1019   Li_smtp_confirmation,
1020   Li_tls_certificate_verified,
1021   Li_tls_cipher,
1022   -1
1023 };
1024
1025 uschar *log_file_path          = US LOG_FILE_PATH
1026                            "\0<--------------Space to patch log_file_path->";
1027
1028 int     log_notall[]           = {
1029   -1
1030 };
1031 bit_table log_options[]        = { /* must be in alphabetical order,
1032                                 with definitions from enum logbit. */
1033   BIT_TABLE(L, 8bitmime),
1034   BIT_TABLE(L, acl_warn_skipped),
1035   BIT_TABLE(L, address_rewrite),
1036   BIT_TABLE(L, all),
1037   BIT_TABLE(L, all_parents),
1038   BIT_TABLE(L, arguments),
1039   BIT_TABLE(L, connection_reject),
1040   BIT_TABLE(L, delay_delivery),
1041   BIT_TABLE(L, deliver_time),
1042   BIT_TABLE(L, delivery_size),
1043 #ifndef DISABLE_DKIM
1044   BIT_TABLE(L, dkim),
1045   BIT_TABLE(L, dkim_verbose),
1046 #endif
1047   BIT_TABLE(L, dnslist_defer),
1048   BIT_TABLE(L, dnssec),
1049   BIT_TABLE(L, etrn),
1050   BIT_TABLE(L, host_lookup_failed),
1051   BIT_TABLE(L, ident_timeout),
1052   BIT_TABLE(L, incoming_interface),
1053   BIT_TABLE(L, incoming_port),
1054   BIT_TABLE(L, lost_incoming_connection),
1055   BIT_TABLE(L, millisec),
1056   BIT_TABLE(L, msg_id),
1057   BIT_TABLE(L, msg_id_created),
1058   BIT_TABLE(L, outgoing_interface),
1059   BIT_TABLE(L, outgoing_port),
1060   BIT_TABLE(L, pid),
1061   BIT_TABLE(L, pipelining),
1062 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1063   BIT_TABLE(L, proxy),
1064 #endif
1065   BIT_TABLE(L, queue_run),
1066   BIT_TABLE(L, queue_time),
1067   BIT_TABLE(L, queue_time_overall),
1068   BIT_TABLE(L, receive_time),
1069   BIT_TABLE(L, received_recipients),
1070   BIT_TABLE(L, received_sender),
1071   BIT_TABLE(L, rejected_header),
1072   { US"rejected_headers", Li_rejected_header },
1073   BIT_TABLE(L, retry_defer),
1074   BIT_TABLE(L, return_path_on_delivery),
1075   BIT_TABLE(L, sender_on_delivery),
1076   BIT_TABLE(L, sender_verify_fail),
1077   BIT_TABLE(L, size_reject),
1078   BIT_TABLE(L, skip_delivery),
1079   BIT_TABLE(L, smtp_confirmation),
1080   BIT_TABLE(L, smtp_connection),
1081   BIT_TABLE(L, smtp_incomplete_transaction),
1082   BIT_TABLE(L, smtp_mailauth),
1083   BIT_TABLE(L, smtp_no_mail),
1084   BIT_TABLE(L, smtp_protocol_error),
1085   BIT_TABLE(L, smtp_syntax_error),
1086   BIT_TABLE(L, subject),
1087   BIT_TABLE(L, tls_certificate_verified),
1088   BIT_TABLE(L, tls_cipher),
1089   BIT_TABLE(L, tls_peerdn),
1090   BIT_TABLE(L, tls_resumption),
1091   BIT_TABLE(L, tls_sni),
1092   BIT_TABLE(L, unknown_in_list),
1093 };
1094 int     log_options_count      = nelem(log_options);
1095
1096 int     log_reject_target      = 0;
1097 unsigned int log_selector[log_selector_size]; /* initialized in main() */
1098 uschar *log_selector_string    = NULL;
1099 FILE   *log_stderr             = NULL;
1100 uschar *login_sender_address   = NULL;
1101 uschar *lookup_dnssec_authenticated = NULL;
1102 int     lookup_open_max        = 25;
1103 uschar *lookup_value           = NULL;
1104
1105 macro_item *macros_user        = NULL;
1106 uschar *mailstore_basename     = NULL;
1107 #ifdef WITH_CONTENT_SCAN
1108 uschar *malware_name           = NULL;  /* Virus Name */
1109 #endif
1110 int     max_received_linelength= 0;
1111 int     max_username_length    = 0;
1112 int     message_age            = 0;
1113 uschar *message_body           = NULL;
1114 uschar *message_body_end       = NULL;
1115 int     message_body_size      = 0;
1116 int     message_body_visible   = 500;
1117 int     message_ended          = END_NOTSTARTED;
1118 uschar *message_headers        = NULL;
1119 uschar *message_id;
1120 uschar *message_id_domain      = NULL;
1121 uschar *message_id_text        = NULL;
1122 struct timeval message_id_tv   = { 0, 0 };
1123 uschar  message_id_option[MESSAGE_ID_LENGTH + 3];
1124 uschar *message_id_external;
1125 int     message_linecount      = 0;
1126 int     message_size           = 0;
1127 uschar *message_size_limit     = US"50M";
1128 #ifdef SUPPORT_I18N
1129 int     message_utf8_downconvert = 0;   /* -1 ifneeded; 0 never; 1 always */
1130 #endif
1131 uschar  message_subdir[2]      = { 0, 0 };
1132 uschar *message_reference      = NULL;
1133
1134 /* MIME ACL expandables */
1135 #ifdef WITH_CONTENT_SCAN
1136 int     mime_anomaly_level     = 0;
1137 const uschar *mime_anomaly_text      = NULL;
1138 uschar *mime_boundary          = NULL;
1139 uschar *mime_charset           = NULL;
1140 uschar *mime_content_description = NULL;
1141 uschar *mime_content_disposition = NULL;
1142 uschar *mime_content_id        = NULL;
1143 unsigned int mime_content_size = 0;
1144 uschar *mime_content_transfer_encoding = NULL;
1145 uschar *mime_content_type      = NULL;
1146 uschar *mime_decoded_filename  = NULL;
1147 uschar *mime_filename          = NULL;
1148 int     mime_is_multipart      = 0;
1149 int     mime_is_coverletter    = 0;
1150 int     mime_is_rfc822         = 0;
1151 int     mime_part_count        = -1;
1152 #endif
1153
1154 uid_t  *never_users            = NULL;
1155
1156 const int on                   = 1;     /* for setsockopt */
1157 const int off                  = 0;
1158
1159 uid_t   original_euid;
1160 gid_t   originator_gid;
1161 uschar *originator_login       = NULL;
1162 uschar *originator_name        = NULL;
1163 uid_t   originator_uid;
1164 uschar *override_local_interfaces = NULL;
1165 uschar *override_pid_file_path = NULL;
1166
1167 uschar *percent_hack_domains   = NULL;
1168 uschar *pid_file_path          = US PID_FILE_PATH
1169                            "\0<--------------Space to patch pid_file_path->";
1170 #ifdef SUPPORT_PIPE_CONNECT
1171 uschar *pipe_connect_advertise_hosts = US"*";
1172 #endif
1173 uschar *pipelining_advertise_hosts = US"*";
1174 uschar *primary_hostname       = NULL;
1175 uschar *process_info;
1176 int     process_info_len       = 0;
1177 uschar *process_log_path       = NULL;
1178
1179 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1180 uschar *hosts_proxy            = NULL;
1181 uschar *proxy_external_address = NULL;
1182 int     proxy_external_port    = 0;
1183 uschar *proxy_local_address    = NULL;
1184 int     proxy_local_port       = 0;
1185 #endif
1186
1187 uschar *prvscheck_address      = NULL;
1188 uschar *prvscheck_keynum       = NULL;
1189 uschar *prvscheck_result       = NULL;
1190
1191
1192 const uschar *qualify_domain_recipient = NULL;
1193 uschar *qualify_domain_sender  = NULL;
1194 uschar *queue_domains          = NULL;
1195 int     queue_interval         = -1;
1196 uschar *queue_name             = US"";
1197 uschar *queue_only_file        = NULL;
1198 int     queue_only_load        = -1;
1199 uschar *queue_run_max          = US"5";
1200 pid_t   queue_run_pid          = (pid_t)0;
1201 int     queue_run_pipe         = -1;
1202 uschar *queue_smtp_domains     = NULL;
1203
1204 uint32_t random_seed           = 0;
1205 tree_node *ratelimiters_cmd    = NULL;
1206 tree_node *ratelimiters_conn   = NULL;
1207 tree_node *ratelimiters_mail   = NULL;
1208 uschar *raw_active_hostname    = NULL;
1209 uschar *raw_sender             = NULL;
1210 uschar **raw_recipients        = NULL;
1211 int     raw_recipients_count   = 0;
1212
1213 int     rcpt_count             = 0;
1214 int     rcpt_fail_count        = 0;
1215 int     rcpt_defer_count       = 0;
1216 gid_t   real_gid;
1217 uid_t   real_uid;
1218 int     receive_linecount      = 0;
1219 int     receive_messagecount   = 0;
1220 int     receive_timeout        = 0;
1221 int     received_count         = 0;
1222 uschar *received_for           = NULL;
1223
1224 /*  This is the default text for Received headers generated by Exim. The
1225 date  will be automatically added on the end. */
1226
1227 uschar *received_header_text   = US
1228      "Received: "
1229      "${if def:sender_rcvhost {from $sender_rcvhost\n\t}"
1230        "{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}"
1231          "${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}"
1232      "by $primary_hostname "
1233      "${if def:received_protocol {with $received_protocol }}"
1234 #ifndef DISABLE_TLS
1235      "${if def:tls_in_cipher_std { tls $tls_in_cipher_std\n\t}}"
1236 #endif
1237      "(Exim $version_number)\n\t"
1238      "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
1239      "id $message_exim_id"
1240      "${if def:received_for {\n\tfor $received_for}}"
1241      "\0<---------------Space to patch received_header_text->";
1242
1243 int     received_headers_max   = 30;
1244 uschar *received_protocol      = NULL;
1245 struct timeval received_time   = { 0, 0 };
1246 struct timeval received_time_taken = { 0, 0 };
1247 uschar *recipient_data         = NULL;
1248 uschar *recipient_unqualified_hosts = NULL;
1249 uschar *recipient_verify_failure = NULL;
1250 int     recipients_count       = 0;
1251 recipient_item  *recipients_list = NULL;
1252 int     recipients_list_max    = 0;
1253 int     recipients_max         = 0;
1254 const pcre *regex_AUTH         = NULL;
1255 const pcre *regex_check_dns_names = NULL;
1256 const pcre *regex_From         = NULL;
1257 const pcre *regex_IGNOREQUOTA  = NULL;
1258 const pcre *regex_PIPELINING   = NULL;
1259 const pcre *regex_SIZE         = NULL;
1260 #ifdef SUPPORT_PIPE_CONNECT
1261 const pcre *regex_EARLY_PIPE   = NULL;
1262 #endif
1263 const pcre *regex_ismsgid      = NULL;
1264 const pcre *regex_smtp_code    = NULL;
1265 uschar *regex_vars[REGEX_VARS];
1266 #ifdef WHITELIST_D_MACROS
1267 const pcre *regex_whitelisted_macro = NULL;
1268 #endif
1269 #ifdef WITH_CONTENT_SCAN
1270 uschar *regex_match_string     = NULL;
1271 #endif
1272 int     remote_delivery_count  = 0;
1273 int     remote_max_parallel    = 2;
1274 uschar *remote_sort_domains    = NULL;
1275 int     retry_data_expire      = 7*24*60*60;
1276 int     retry_interval_max     = 24*60*60;
1277 int     retry_maximum_timeout  = 0;        /* set from retry config */
1278 retry_config  *retries         = NULL;
1279 uschar *return_path            = NULL;
1280 int     rewrite_existflags     = 0;
1281 uschar *rfc1413_hosts          = US"@[]";
1282 int     rfc1413_query_timeout  = 0;
1283 uid_t   root_gid               = ROOT_GID;
1284 uid_t   root_uid               = ROOT_UID;
1285
1286 router_instance  *routers  = NULL;
1287 router_instance  router_defaults = {
1288     .next =                     NULL,
1289     .name =                     NULL,
1290     .info =                     NULL,
1291     .options_block =            NULL,
1292     .driver_name =              NULL,
1293
1294     .address_data =             NULL,
1295 #ifdef EXPERIMENTAL_BRIGHTMAIL
1296     .bmi_rule =                 NULL,
1297 #endif
1298     .cannot_route_message =     NULL,
1299     .condition =                NULL,
1300     .current_directory =        NULL,
1301     .debug_string =             NULL,
1302     .domains =                  NULL,
1303     .errors_to =                NULL,
1304     .expand_gid =               NULL,
1305     .expand_uid =               NULL,
1306     .expand_more =              NULL,
1307     .expand_unseen =            NULL,
1308     .extra_headers =            NULL,
1309     .fallback_hosts =           NULL,
1310     .home_directory =           NULL,
1311     .ignore_target_hosts =      NULL,
1312     .local_parts =              NULL,
1313     .pass_router_name =         NULL,
1314     .prefix =                   NULL,
1315     .redirect_router_name =     NULL,
1316     .remove_headers =           NULL,
1317     .require_files =            NULL,
1318     .router_home_directory =    NULL,
1319     .self =                     US"freeze",
1320     .senders =                  NULL,
1321     .suffix =                   NULL,
1322     .translate_ip_address =     NULL,
1323     .transport_name =           NULL,
1324
1325     .address_test =             TRUE,
1326 #ifdef EXPERIMENTAL_BRIGHTMAIL
1327     .bmi_deliver_alternate =    FALSE,
1328     .bmi_deliver_default =      FALSE,
1329     .bmi_dont_deliver =         FALSE,
1330 #endif
1331     .expn =                     TRUE,
1332     .caseful_local_part =       FALSE,
1333     .check_local_user =         FALSE,
1334     .disable_logging =          FALSE,
1335     .fail_verify_recipient =    FALSE,
1336     .fail_verify_sender =       FALSE,
1337     .gid_set =                  FALSE,
1338     .initgroups =               FALSE,
1339     .log_as_local =             TRUE_UNSET,
1340     .more =                     TRUE,
1341     .pass_on_timeout =          FALSE,
1342     .prefix_optional =          FALSE,
1343     .repeat_use =               TRUE,
1344     .retry_use_local_part =     TRUE_UNSET,
1345     .same_domain_copy_routing = FALSE,
1346     .self_rewrite =             FALSE,
1347     .set =                      NULL,
1348     .suffix_optional =          FALSE,
1349     .verify_only =              FALSE,
1350     .verify_recipient =         TRUE,
1351     .verify_sender =            TRUE,
1352     .uid_set =                  FALSE,
1353     .unseen =                   FALSE,
1354     .dsn_lasthop =              FALSE,
1355
1356     .self_code =                self_freeze,
1357     .uid =                      (uid_t)(-1),
1358     .gid =                      (gid_t)(-1),
1359
1360     .fallback_hostlist =        NULL,
1361     .transport =                NULL,
1362     .pass_router =              NULL,
1363     .redirect_router =          NULL,
1364
1365     .dnssec =                   { NULL, NULL },            /* dnssec_domains {require,request} */
1366 };
1367
1368 uschar *router_name            = NULL;
1369 tree_node *router_var          = NULL;
1370
1371 ip_address_item *running_interfaces = NULL;
1372
1373 /* This is a weird one. The following string gets patched in the binary by the
1374 script that sets up a copy of Exim for running in the test harness. It seems
1375 that compilers are now clever, and share constant strings if they can.
1376 Elsewhere in Exim the string "<" is used. The compiler optimization seems to
1377 make use of the end of this string in order to save space. So the patching then
1378 wrecks this. We defeat this optimization by adding some additional characters
1379 onto the end of the string. */
1380
1381 uschar *running_status         = US">>>running<<<" "\0EXTRA";
1382
1383 int     runrc                  = 0;
1384
1385 uschar *search_error_message   = NULL;
1386 uschar *self_hostname          = NULL;
1387 uschar *sender_address         = NULL;
1388 unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32];
1389 uschar *sender_address_data    = NULL;
1390 uschar *sender_address_unrewritten = NULL;
1391 uschar *sender_data            = NULL;
1392 unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32];
1393 uschar *sender_fullhost        = NULL;
1394 uschar *sender_helo_name       = NULL;
1395 uschar **sender_host_aliases   = &no_aliases;
1396 uschar *sender_host_address    = NULL;
1397 uschar *sender_host_authenticated = NULL;
1398 uschar *sender_host_auth_pubname  = NULL;
1399 unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32];
1400 uschar *sender_host_name       = NULL;
1401 int     sender_host_port       = 0;
1402 uschar *sender_ident           = NULL;
1403 uschar *sender_rate            = NULL;
1404 uschar *sender_rate_limit      = NULL;
1405 uschar *sender_rate_period     = NULL;
1406 uschar *sender_rcvhost         = NULL;
1407 uschar *sender_unqualified_hosts = NULL;
1408 uschar *sender_verify_failure = NULL;
1409 address_item *sender_verified_list  = NULL;
1410 address_item *sender_verified_failed = NULL;
1411 int     sender_verified_rc     = -1;
1412 uschar *sending_ip_address     = NULL;
1413 int     sending_port           = -1;
1414 SIGNAL_BOOL sigalrm_seen       = FALSE;
1415 const uschar *sigalarm_setter  = NULL;
1416 uschar **sighup_argv           = NULL;
1417 int     slow_lookup_log        = 0;     /* millisecs, zero disables */
1418 int     smtp_accept_count      = 0;
1419 int     smtp_accept_max        = 20;
1420 int     smtp_accept_max_nonmail= 10;
1421 uschar *smtp_accept_max_nonmail_hosts = US"*";
1422 int     smtp_accept_max_per_connection = 1000;
1423 uschar *smtp_accept_max_per_host = NULL;
1424 int     smtp_accept_queue      = 0;
1425 int     smtp_accept_queue_per_connection = 10;
1426 int     smtp_accept_reserve    = 0;
1427 uschar *smtp_active_hostname   = NULL;
1428 uschar *smtp_banner            = US"$smtp_active_hostname ESMTP "
1429                              "Exim $version_number $tod_full"
1430                              "\0<---------------Space to patch smtp_banner->";
1431 int     smtp_ch_index          = 0;
1432 uschar *smtp_cmd_argument      = NULL;
1433 uschar *smtp_cmd_buffer        = NULL;
1434 struct timeval smtp_connection_start  = {0,0};
1435 uschar  smtp_connection_had[SMTP_HBUFF_SIZE];
1436 int     smtp_connect_backlog   = 20;
1437 double  smtp_delay_mail        = 0.0;
1438 double  smtp_delay_rcpt        = 0.0;
1439 FILE   *smtp_in                = NULL;
1440 int     smtp_load_reserve      = -1;
1441 int     smtp_mailcmd_count     = 0;
1442 FILE   *smtp_out               = NULL;
1443 uschar *smtp_etrn_command      = NULL;
1444 int     smtp_max_synprot_errors= 3;
1445 int     smtp_max_unknown_commands = 3;
1446 uschar *smtp_notquit_reason    = NULL;
1447 uschar *smtp_ratelimit_hosts   = NULL;
1448 uschar *smtp_ratelimit_mail    = NULL;
1449 uschar *smtp_ratelimit_rcpt    = NULL;
1450 uschar *smtp_read_error        = US"";
1451 int     smtp_receive_timeout   = 5*60;
1452 uschar *smtp_receive_timeout_s = NULL;
1453 uschar *smtp_reserve_hosts     = NULL;
1454 int     smtp_rlm_base          = 0;
1455 double  smtp_rlm_factor        = 0.0;
1456 int     smtp_rlm_limit         = 0;
1457 int     smtp_rlm_threshold     = INT_MAX;
1458 int     smtp_rlr_base          = 0;
1459 double  smtp_rlr_factor        = 0.0;
1460 int     smtp_rlr_limit         = 0;
1461 int     smtp_rlr_threshold     = INT_MAX;
1462 unsigned smtp_peer_options     = 0;
1463 unsigned smtp_peer_options_wrap= 0;
1464 #ifdef SUPPORT_I18N
1465 uschar *smtputf8_advertise_hosts = US"*";       /* overridden under test-harness */
1466 #endif
1467
1468 #ifdef WITH_CONTENT_SCAN
1469 uschar *spamd_address          = US"127.0.0.1 783";
1470 uschar *spam_bar               = NULL;
1471 uschar *spam_report            = NULL;
1472 uschar *spam_action            = NULL;
1473 uschar *spam_score             = NULL;
1474 uschar *spam_score_int         = NULL;
1475 #endif
1476 #ifdef SUPPORT_SPF
1477 uschar *spf_guess              = US"v=spf1 a/24 mx/24 ptr ?all";
1478 uschar *spf_header_comment     = NULL;
1479 uschar *spf_received           = NULL;
1480 uschar *spf_result             = NULL;
1481 uschar *spf_smtp_comment       = NULL;
1482 #endif
1483
1484 FILE   *spool_data_file        = NULL;
1485 uschar *spool_directory        = US SPOOL_DIRECTORY
1486                            "\0<--------------Space to patch spool_directory->";
1487 #ifdef EXPERIMENTAL_SRS
1488 uschar *srs_config             = NULL;
1489 uschar *srs_db_address         = NULL;
1490 uschar *srs_db_key             = NULL;
1491 int     srs_hashlength         = 6;
1492 int     srs_hashmin            = -1;
1493 int     srs_maxage             = 31;
1494 uschar *srs_orig_recipient     = NULL;
1495 uschar *srs_orig_sender        = NULL;
1496 uschar *srs_recipient          = NULL;
1497 uschar *srs_secrets            = NULL;
1498 uschar *srs_status             = NULL;
1499 #endif
1500 int     string_datestamp_offset= -1;
1501 int     string_datestamp_length= 0;
1502 int     string_datestamp_type  = -1;
1503 uschar *submission_domain      = NULL;
1504 uschar *submission_name        = NULL;
1505 int     syslog_facility        = LOG_MAIL;
1506 uschar *syslog_processname     = US"exim";
1507 uschar *system_filter          = NULL;
1508
1509 uschar *system_filter_directory_transport = NULL;
1510 uschar *system_filter_file_transport = NULL;
1511 uschar *system_filter_pipe_transport = NULL;
1512 uschar *system_filter_reply_transport = NULL;
1513
1514 gid_t   system_filter_gid      = 0;
1515 uid_t   system_filter_uid      = (uid_t)-1;
1516
1517 blob    tcp_fastopen_nodata    = { .data = NULL, .len = 0 };
1518 tfo_state_t tcp_out_fastopen   = TFO_NOT_USED;
1519 #ifdef USE_TCP_WRAPPERS
1520 uschar *tcp_wrappers_daemon_name = US TCP_WRAPPERS_DAEMON_NAME;
1521 #endif
1522 int     test_harness_load_avg  = 0;
1523 int     thismessage_size_limit = 0;
1524 int     timeout_frozen_after   = 0;
1525 #ifdef MEASURE_TIMING
1526 struct timeval timestamp_startup;
1527 #endif
1528
1529 transport_instance  *transports = NULL;
1530
1531 transport_instance  transport_defaults = {
1532     .next =                     NULL,
1533     .name =                     NULL,
1534     .info =                     NULL,
1535     .options_block =            NULL,
1536     .driver_name =              NULL,
1537     .setup =                    NULL,
1538     .batch_max =                1,
1539     .batch_id =                 NULL,
1540     .home_dir =                 NULL,
1541     .current_dir =              NULL,
1542     .expand_multi_domain =      NULL,
1543     .multi_domain =             TRUE,
1544     .overrides_hosts =          FALSE,
1545     .max_addresses =            100,
1546     .connection_max_messages =  500,
1547     .deliver_as_creator =       FALSE,
1548     .disable_logging =          FALSE,
1549     .initgroups =               FALSE,
1550     .uid_set =                  FALSE,
1551     .gid_set =                  FALSE,
1552     .uid =                      (uid_t)(-1),
1553     .gid =                      (gid_t)(-1),
1554     .expand_uid =               NULL,
1555     .expand_gid =               NULL,
1556     .warn_message =             NULL,
1557     .shadow =                   NULL,
1558     .shadow_condition =         NULL,
1559     .filter_command =           NULL,
1560     .add_headers =              NULL,
1561     .remove_headers =           NULL,
1562     .return_path =              NULL,
1563     .debug_string =             NULL,
1564     .max_parallel =             NULL,
1565     .message_size_limit =       NULL,
1566     .headers_rewrite =          NULL,
1567     .rewrite_rules =            NULL,
1568     .rewrite_existflags =       0,
1569     .filter_timeout =           300,
1570     .body_only =                FALSE,
1571     .delivery_date_add =        FALSE,
1572     .envelope_to_add =          FALSE,
1573     .headers_only =             FALSE,
1574     .rcpt_include_affixes =     FALSE,
1575     .return_path_add =          FALSE,
1576     .return_output =            FALSE,
1577     .return_fail_output =       FALSE,
1578     .log_output =               FALSE,
1579     .log_fail_output =          FALSE,
1580     .log_defer_output =         FALSE,
1581     .retry_use_local_part =     TRUE_UNSET,     /* retry_use_local_part: BOOL, but set neither
1582                                                  1 nor 0 so can detect unset */
1583 #ifndef DISABLE_EVENT
1584    .event_action =              NULL
1585 #endif
1586 };
1587
1588 int     transport_count;
1589 uschar *transport_name          = NULL;
1590 int     transport_newlines;
1591 const uschar **transport_filter_argv  = NULL;
1592 int     transport_filter_timeout;
1593 int     transport_write_timeout= 0;
1594
1595 tree_node  *tree_dns_fails     = NULL;
1596 tree_node  *tree_duplicates    = NULL;
1597 tree_node  *tree_nonrecipients = NULL;
1598 tree_node  *tree_unusable      = NULL;
1599
1600 gid_t  *trusted_groups         = NULL;
1601 uid_t  *trusted_users          = NULL;
1602 uschar *timezone_string        = US TIMEZONE_DEFAULT;
1603
1604 uschar *unknown_login          = NULL;
1605 uschar *unknown_username       = NULL;
1606 uschar *untrusted_set_sender   = NULL;
1607
1608 /*  A regex for matching a "From_" line in an incoming message, in the form
1609
1610     From ph10 Fri Jan  5 12:35 GMT 1996
1611
1612 which  the "mail" commands send to the MTA (undocumented, of course), or in
1613 the  form
1614
1615     From ph10 Fri, 7 Jan 97 14:00:00 GMT
1616
1617 which  is apparently used by some UUCPs, despite it not being in RFC 976.
1618 Because  of variations in time formats, just match up to the minutes. That
1619 should  be sufficient. Examples have been seen of time fields like 12:1:03,
1620 so  just require one digit for hours and minutes. The weekday is also absent
1621 in  some forms. */
1622
1623 uschar *uucp_from_pattern      = US
1624    "^From\\s+(\\S+)\\s+(?:[a-zA-Z]{3},?\\s+)?"    /* Common start */
1625    "(?:"                                          /* Non-extracting bracket */
1626    "[a-zA-Z]{3}\\s+\\d?\\d|"                      /* First form */
1627    "\\d?\\d\\s+[a-zA-Z]{3}\\s+\\d\\d(?:\\d\\d)?"  /* Second form */
1628    ")"                                            /* End alternation */
1629    "\\s+\\d\\d?:\\d\\d?";                         /* Start of time */
1630
1631 uschar *uucp_from_sender       = US"$1";
1632
1633 uschar *verify_mode            = NULL;
1634 uschar *version_copyright      =
1635  US"Copyright (c) University of Cambridge, 1995 - 2018\n"
1636    "(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2018";
1637 uschar *version_date           = US"?";
1638 uschar *version_cnumber        = US"????";
1639 uschar *version_string         = US"?";
1640
1641 uschar *warn_message_file      = NULL;
1642 int     warning_count          = 0;
1643 uschar *warnmsg_delay          = NULL;
1644 uschar *warnmsg_recipients     = NULL;
1645
1646
1647 /*  End of globals.c */