root/usr.sbin/bgpctl/parser.c
/*      $OpenBSD: parser.c,v 1.139 2025/11/04 15:30:50 claudio Exp $ */

/*
 * Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org>
 * Copyright (c) 2016 Job Snijders <job@instituut.net>
 * Copyright (c) 2016 Peter Hessler <phessler@openbsd.org>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <sys/types.h>
#include <sys/socket.h>
#include <arpa/inet.h>

#include <endian.h>
#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <limits.h>
#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>

#include "parser.h"

enum token_type {
        ENDTOKEN,
        NOTOKEN,
        ANYTOKEN,
        KEYWORD,
        ADDRESS,
        PEERADDRESS,
        FLAG,
        ASNUM,
        ASTYPE,
        PREFIX,
        PEERDESC,
        GROUPDESC,
        RIBNAME,
        COMMUNICATION,
        COMMUNITY,
        EXTCOMMUNITY,
        LRGCOMMUNITY,
        LOCALPREF,
        MED,
        NEXTHOP,
        PFTABLE,
        PREPNBR,
        PREPSELF,
        WEIGHT,
        RD,
        FAMILY,
        RTABLE,
        FILENAME,
        PATHID,
        FLOW_PROTO,
        FLOW_SRC,
        FLOW_DST,
        FLOW_SRCPORT,
        FLOW_DSTPORT,
        FLOW_ICMPTYPE,
        FLOW_ICMPCODE,
        FLOW_LENGTH,
        FLOW_DSCP,
        FLOW_FLAGS,
        FLOW_FRAGS,
};

struct token {
        enum token_type          type;
        const char              *keyword;
        int                      value;
        const struct token      *next;
};

static const struct token *prevtable;

static const struct token t_main[];
static const struct token t_show[];
static const struct token t_show_summary[];
static const struct token t_show_fib[];
static const struct token t_show_rib[];
static const struct token t_show_avs[];
static const struct token t_show_ovs[];
static const struct token t_show_mrt[];
static const struct token t_show_mrt_file[];
static const struct token t_show_rib_neigh[];
static const struct token t_show_mrt_neigh[];
static const struct token t_show_rib_rib[];
static const struct token t_show_neighbor[];
static const struct token t_show_neighbor_modifiers[];
static const struct token t_fib[];
static const struct token t_neighbor[];
static const struct token t_neighbor_modifiers[];
static const struct token t_show_rib_as[];
static const struct token t_show_mrt_as[];
static const struct token t_show_prefix[];
static const struct token t_show_ip[];
static const struct token t_network[];
static const struct token t_flowspec[];
static const struct token t_flowfamily[];
static const struct token t_flowrule[];
static const struct token t_flowsrc[];
static const struct token t_flowdst[];
static const struct token t_flowsrcport[];
static const struct token t_flowdstport[];
static const struct token t_flowicmp[];
static const struct token t_bulk[];
static const struct token t_network_show[];
static const struct token t_prefix[];
static const struct token t_set[];
static const struct token t_nexthop[];
static const struct token t_pftable[];
static const struct token t_log[];
static const struct token t_communication[];

static const struct token t_main[] = {
        { KEYWORD,      "fib",          FIB,            t_fib},
        { KEYWORD,      "flowspec",     NONE,           t_flowspec},
        { KEYWORD,      "log",          NONE,           t_log},
        { KEYWORD,      "neighbor",     NEIGHBOR,       t_neighbor},
        { KEYWORD,      "network",      NONE,           t_network},
        { KEYWORD,      "reload",       RELOAD,         t_communication},
        { KEYWORD,      "show",         SHOW,           t_show},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { KEYWORD,      "fib",          SHOW_FIB,       t_show_fib},
        { KEYWORD,      "flowspec",     FLOWSPEC_SHOW,  t_network_show},
        { KEYWORD,      "interfaces",   SHOW_INTERFACE, NULL},
        { KEYWORD,      "ip",           NONE,           t_show_ip},
        { KEYWORD,      "metrics",      SHOW_METRICS,   NULL},
        { KEYWORD,      "mrt",          SHOW_MRT,       t_show_mrt},
        { KEYWORD,      "neighbor",     SHOW_NEIGHBOR,  t_show_neighbor},
        { KEYWORD,      "network",      NETWORK_SHOW,   t_network_show},
        { KEYWORD,      "nexthop",      SHOW_NEXTHOP,   NULL},
        { KEYWORD,      "rib",          SHOW_RIB,       t_show_rib},
        { KEYWORD,      "rtr",          SHOW_RTR,       NULL},
        { KEYWORD,      "sets",         SHOW_SET,       NULL},
        { KEYWORD,      "summary",      SHOW_SUMMARY,   t_show_summary},
        { KEYWORD,      "tables",       SHOW_FIB_TABLES, NULL},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_summary[] = {
        { NOTOKEN,      "",             NONE,                   NULL},
        { KEYWORD,      "terse",        SHOW_SUMMARY_TERSE,     NULL},
        { ENDTOKEN,     "",             NONE,                   NULL}
};

static const struct token t_show_fib[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { FLAG,         "bgp",          F_BGPD,         t_show_fib},
        { FLAG,         "connected",    F_CONNECTED,    t_show_fib},
        { FLAG,         "nexthop",      F_NEXTHOP,      t_show_fib},
        { FLAG,         "static",       F_STATIC,       t_show_fib},
        { RTABLE,       "table",        NONE,           t_show_fib},
        { FAMILY,       "",             NONE,           t_show_fib},
        { ADDRESS,      "",             NONE,           NULL},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_rib[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { ASTYPE,       "as",           AS_ALL,         t_show_rib_as},
        { KEYWORD,      "avs",          NONE,           t_show_avs},
        { FLAG,         "best",         F_CTL_BEST,     t_show_rib},
        { COMMUNITY,    "community",    NONE,           t_show_rib},
        { FLAG,         "detail",       F_CTL_DETAIL,   t_show_rib},
        { FLAG,         "disqualified", F_CTL_INELIGIBLE, t_show_rib},
        { ASTYPE,       "empty-as",     AS_EMPTY,       t_show_rib},
        { FLAG,         "error",        F_CTL_INVALID,  t_show_rib},
        { EXTCOMMUNITY, "ext-community", NONE,          t_show_rib},
        { FLAG,         "filtered",     F_CTL_FILTERED, t_show_rib},
        { FLAG,         "in",           F_CTL_ADJ_IN,   t_show_rib},
        { LRGCOMMUNITY, "large-community", NONE,        t_show_rib},
        { FLAG,         "leaked",       F_CTL_LEAKED,   t_show_rib},
        { KEYWORD,      "memory",       SHOW_RIB_MEM,   NULL},
        { KEYWORD,      "neighbor",     NONE,           t_show_rib_neigh},
        { FLAG,         "out",          F_CTL_ADJ_OUT,  t_show_rib},
        { KEYWORD,      "ovs",          NONE,           t_show_ovs},
        { PATHID,       "path-id",      NONE,           t_show_rib},
        { ASTYPE,       "peer-as",      AS_PEER,        t_show_rib_as},
        { FLAG,         "selected",     F_CTL_BEST,     t_show_rib},
        { ASTYPE,       "source-as",    AS_SOURCE,      t_show_rib_as},
        { FLAG,         "ssv",          F_CTL_SSV,      t_show_rib},
        { KEYWORD,      "summary",      SHOW_SUMMARY,   t_show_summary},
        { KEYWORD,      "table",        NONE,           t_show_rib_rib},
        { ASTYPE,       "transit-as",   AS_TRANSIT,     t_show_rib_as},
        { FAMILY,       "",             NONE,           t_show_rib},
        { PREFIX,       "",             NONE,           t_show_prefix},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_avs[] = {
        { FLAG,         "invalid",      F_CTL_AVS_INVALID,      t_show_rib},
        { FLAG,         "unknown",      F_CTL_AVS_UNKNOWN,      t_show_rib},
        { FLAG,         "valid" ,       F_CTL_AVS_VALID,        t_show_rib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_ovs[] = {
        { FLAG,         "invalid",      F_CTL_OVS_INVALID,      t_show_rib},
        { FLAG,         "not-found",    F_CTL_OVS_NOTFOUND,     t_show_rib},
        { FLAG,         "valid" ,       F_CTL_OVS_VALID,        t_show_rib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_mrt[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { ASTYPE,       "as",           AS_ALL,         t_show_mrt_as},
        { FLAG,         "detail",       F_CTL_DETAIL,   t_show_mrt},
        { ASTYPE,       "empty-as",     AS_EMPTY,       t_show_mrt},
        { KEYWORD,      "file",         NONE,           t_show_mrt_file},
        { KEYWORD,      "neighbor",     NONE,           t_show_mrt_neigh},
        { ASTYPE,       "peer-as",      AS_PEER,        t_show_mrt_as},
        { FLAG,         "peers",        F_CTL_NEIGHBORS,t_show_mrt},
        { ASTYPE,       "source-as",    AS_SOURCE,      t_show_mrt_as},
        { FLAG,         "ssv",          F_CTL_SSV,      t_show_mrt},
        { ASTYPE,       "transit-as",   AS_TRANSIT,     t_show_mrt_as},
        { FAMILY,       "",             NONE,           t_show_mrt},
        { PREFIX,       "",             NONE,           t_show_prefix},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_mrt_file[] = {
        { FILENAME,     "",             NONE,           t_show_mrt},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_rib_neigh_group[] = {
        { GROUPDESC,    "",             NONE,   t_show_rib},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_rib_neigh[] = {
        { KEYWORD,      "group",        NONE,   t_show_rib_neigh_group},
        { PEERADDRESS,  "",             NONE,   t_show_rib},
        { PEERDESC,     "",             NONE,   t_show_rib},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_mrt_neigh[] = {
        { PEERADDRESS,  "",             NONE,   t_show_mrt},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_rib_rib[] = {
        { RIBNAME,      "",             NONE,   t_show_rib},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_neighbor_modifiers[] = {
        { NOTOKEN,      "",             NONE,                   NULL},
        { KEYWORD,      "messages",     SHOW_NEIGHBOR,          NULL},
        { KEYWORD,      "terse",        SHOW_NEIGHBOR_TERSE,    NULL},
        { KEYWORD,      "timers",       SHOW_NEIGHBOR_TIMERS,   NULL},
        { ENDTOKEN,     "",             NONE,                   NULL}
};

static const struct token t_show_neighbor_group[] = {
        { GROUPDESC,    "",             NONE,   t_show_neighbor_modifiers},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_show_neighbor[] = {
        { NOTOKEN,      "",             NONE,   NULL},
        { KEYWORD,      "group",        NONE,   t_show_neighbor_group},
        { PEERADDRESS,  "",             NONE,   t_show_neighbor_modifiers},
        { PEERDESC,     "",             NONE,   t_show_neighbor_modifiers},
        { ENDTOKEN,     "",             NONE,   NULL}
};

static const struct token t_fib[] = {
        { KEYWORD,      "couple",       FIB_COUPLE,     NULL},
        { KEYWORD,      "decouple",     FIB_DECOUPLE,   NULL},
        { RTABLE,       "table",        NONE,           t_fib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_neighbor_group[] = {
        { GROUPDESC,    "",             NONE,           t_neighbor_modifiers},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_neighbor[] = {
        { KEYWORD,      "group",        NONE,           t_neighbor_group},
        { PEERADDRESS,  "",             NONE,           t_neighbor_modifiers},
        { PEERDESC,     "",             NONE,           t_neighbor_modifiers},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_communication[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { COMMUNICATION, "",            NONE,           NULL},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_neighbor_modifiers[] = {
        { KEYWORD,      "clear",        NEIGHBOR_CLEAR, t_communication},
        { KEYWORD,      "destroy",      NEIGHBOR_DESTROY,       NULL},
        { KEYWORD,      "down",         NEIGHBOR_DOWN,  t_communication},
        { KEYWORD,      "refresh",      NEIGHBOR_RREFRESH,      NULL},
        { KEYWORD,      "up",           NEIGHBOR_UP,            NULL},
        { ENDTOKEN,     "",             NONE,                   NULL}
};

static const struct token t_show_rib_as[] = {
        { ASNUM,        "",             NONE,           t_show_rib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_mrt_as[] = {
        { ASNUM,        "",             NONE,           t_show_mrt},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_prefix[] = {
        { FLAG,         "all",          F_LONGER,       t_show_rib},
        { FLAG,         "longer-prefixes", F_LONGER,    t_show_rib},
        { FLAG,         "or-longer",    F_LONGER,       t_show_rib},
        { FLAG,         "or-shorter",   F_SHORTER,      t_show_rib},
        { ANYTOKEN,     "",             NONE,           t_show_rib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_show_ip[] = {
        { KEYWORD,      "bgp",          SHOW_RIB,       t_show_rib},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_network[] = {
        { KEYWORD,      "add",          NETWORK_ADD,    t_prefix},
        { KEYWORD,      "bulk",         NONE,           t_bulk},
        { KEYWORD,      "delete",       NETWORK_REMOVE, t_prefix},
        { KEYWORD,      "flush",        NETWORK_FLUSH,  NULL},
        { KEYWORD,      "mrt",          NETWORK_MRT,    t_show_mrt},
        { KEYWORD,      "show",         NETWORK_SHOW,   t_network_show},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowspec[] = {
        { KEYWORD,      "add",          FLOWSPEC_ADD,   t_flowfamily},
        { KEYWORD,      "delete",       FLOWSPEC_REMOVE,t_flowfamily},
        { KEYWORD,      "flush",        FLOWSPEC_FLUSH, NULL},
        { KEYWORD,      "show",         FLOWSPEC_SHOW,  t_network_show},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowfamily[] = {
        { FAMILY,       "",             NONE,           t_flowrule},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowrule[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { FLOW_FLAGS,   "flags",        NONE,           t_flowrule},
        { FLOW_FRAGS,   "fragment",     NONE,           t_flowrule},
        { KEYWORD,      "from",         NONE,           t_flowsrc},
        { FLOW_ICMPTYPE,"icmp-type",    NONE,           t_flowicmp},
        { FLOW_LENGTH,  "length",       NONE,           t_flowrule},
        { FLOW_PROTO,   "proto",        NONE,           t_flowrule},
        { KEYWORD,      "set",          NONE,           t_set},
        { KEYWORD,      "to",           NONE,           t_flowdst},
        { FLOW_DSCP,    "dscp",         NONE,           t_flowrule},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowsrc[] = {
        { KEYWORD,      "any",          NONE,           t_flowsrcport},
        { FLOW_SRC,     "",             NONE,           t_flowsrcport},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowdst[] = {
        { KEYWORD,      "any",          NONE,           t_flowdstport},
        { FLOW_DST,     "",             NONE,           t_flowdstport},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowsrcport[] = {
        { FLOW_SRCPORT, "port",         NONE,           t_flowrule},
        { ANYTOKEN,     "",             NONE,           t_flowrule},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowdstport[] = {
        { FLOW_DSTPORT, "port",         NONE,           t_flowrule},
        { ANYTOKEN,     "",             NONE,           t_flowrule},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_flowicmp[] = {
        { FLOW_ICMPCODE,"code",         NONE,           t_flowrule},
        { ANYTOKEN,     "",             NONE,           t_flowrule},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_bulk[] = {
        { KEYWORD,      "add",          NETWORK_BULK_ADD,       t_set},
        { KEYWORD,      "delete",       NETWORK_BULK_REMOVE,    NULL},
        { ENDTOKEN,     "",             NONE,                   NULL}
};

static const struct token t_prefix[] = {
        { PREFIX,       "",             NONE,           t_set},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_network_show[] = {
        { NOTOKEN,      "",             NONE,           NULL},
        { FAMILY,       "",             NONE,           NULL},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static const struct token t_rd[] = {
        { RD,           "",                     NONE,   t_set},
        { ENDTOKEN,     "",                     NONE,   NULL}
};

static const struct token t_set[] = {
        { NOTOKEN,      "",                     NONE,   NULL},
        { COMMUNITY,    "community",            NONE,   t_set},
        { EXTCOMMUNITY, "ext-community",        NONE,   t_set},
        { LRGCOMMUNITY, "large-community",      NONE,   t_set},
        { LOCALPREF,    "localpref",            NONE,   t_set},
        { MED,          "med",                  NONE,   t_set},
        { MED,          "metric",               NONE,   t_set},
        { KEYWORD,      "nexthop",              NONE,   t_nexthop},
        { KEYWORD,      "pftable",              NONE,   t_pftable},
        { PREPNBR,      "prepend-neighbor",     NONE,   t_set},
        { PREPSELF,     "prepend-self",         NONE,   t_set},
        { KEYWORD,      "rd",                   NONE,   t_rd},
        { WEIGHT,       "weight",               NONE,   t_set},
        { ENDTOKEN,     "",                     NONE,   NULL}
};

static const struct token t_nexthop[] = {
        { NEXTHOP,      "",                     NONE,   t_set},
        { ENDTOKEN,     "",                     NONE,   NULL}
};

static const struct token t_pftable[] = {
        { PFTABLE,      "",                     NONE,   t_set},
        { ENDTOKEN,     "",                     NONE,   NULL}
};

static const struct token t_log[] = {
        { KEYWORD,      "brief",        LOG_BRIEF,      NULL},
        { KEYWORD,      "verbose",      LOG_VERBOSE,    NULL},
        { ENDTOKEN,     "",             NONE,           NULL}
};

static struct parse_result      res;

const struct token      *match_token(int, char *[], const struct token [],
                            int *);
void                     show_valid_args(const struct token []);

int     parse_addr(const char *, struct bgpd_addr *);
int     parse_asnum(const char *, size_t, uint32_t *);
int     parse_number(const char *, struct parse_result *, enum token_type);
void    parsecommunity(struct community *c, char *s);
void    parselargecommunity(struct community *c, char *s);
void    parseextcommunity(struct community *c, const char *t, char *s);
int     parse_nexthop(const char *, struct parse_result *);
int     parse_flow_numop(int, char *[], struct parse_result *, enum token_type);

struct parse_result *
parse(int argc, char *argv[])
{
        const struct token      *table = t_main;
        const struct token      *match;
        int                      used;

        memset(&res, 0, sizeof(res));
        res.rtableid = getrtable();
        res.mrtfd = -1;
        TAILQ_INIT(&res.set);

        while (argc >= 0) {
                if ((match = match_token(argc, argv, table, &used)) == NULL) {
                        fprintf(stderr, "valid commands/args:\n");
                        show_valid_args(table);
                        return (NULL);
                }
                if (match->type == ANYTOKEN) {
                        if (prevtable == NULL)
                                prevtable = table;
                        table = match->next;
                        continue;
                }

                argc -= used;
                argv += used;

                if (match->type == NOTOKEN || match->next == NULL)
                        break;
                table = match->next;
        }

        if (argc > 0) {
                fprintf(stderr, "superfluous argument: %s\n", argv[0]);
                return (NULL);
        }

        return (&res);
}

const struct token *
match_token(int argc, char *argv[], const struct token table[], int *argsused)
{
        u_int                    i, match;
        const struct token      *t = NULL;
        struct filter_set       *fs;
        const char              *word = argv[0];
        size_t                   wordlen = 0;

        *argsused = 1;
        match = 0;
        if (word != NULL)
                wordlen = strlen(word);
        for (i = 0; table[i].type != ENDTOKEN; i++) {
                switch (table[i].type) {
                case NOTOKEN:
                        if (word == NULL || wordlen == 0) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case ANYTOKEN:
                        /* match anything if nothing else matched before */
                        if (match == 0) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case KEYWORD:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0) {
                                match++;
                                t = &table[i];
                                if (t->value)
                                        res.action = t->value;
                        }
                        break;
                case FLAG:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0) {
                                match++;
                                t = &table[i];
                                res.flags |= t->value;
                        }
                        break;
                case FAMILY:
                        if (word == NULL)
                                break;
                        if (!strcmp(word, "inet") ||
                            !strcasecmp(word, "IPv4")) {
                                match++;
                                t = &table[i];
                                res.aid = AID_INET;
                        }
                        if (!strcmp(word, "inet6") ||
                            !strcasecmp(word, "IPv6")) {
                                match++;
                                t = &table[i];
                                res.aid = AID_INET6;
                        }
                        if (!strcasecmp(word, "VPNv4")) {
                                match++;
                                t = &table[i];
                                res.aid = AID_VPN_IPv4;
                        }
                        if (!strcasecmp(word, "VPNv6")) {
                                match++;
                                t = &table[i];
                                res.aid = AID_VPN_IPv6;
                        }
                        break;
                case ADDRESS:
                        if (parse_addr(word, &res.addr)) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case PEERADDRESS:
                        if (parse_addr(word, &res.peeraddr)) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case FLOW_SRC:
                        if (parse_prefix(word, wordlen, &res.flow.src,
                            &res.flow.srclen)) {
                                match++;
                                t = &table[i];
                                if (res.aid != res.flow.src.aid)
                                        errx(1, "wrong address family in "
                                            "flowspec rule");
                        }
                        break;
                case FLOW_DST:
                        if (parse_prefix(word, wordlen, &res.flow.dst,
                            &res.flow.dstlen)) {
                                match++;
                                t = &table[i];
                                if (res.aid != res.flow.dst.aid)
                                        errx(1, "wrong address family in "
                                            "flowspec rule");
                        }
                        break;
                case PREFIX:
                        if (parse_prefix(word, wordlen, &res.addr,
                            &res.prefixlen)) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case ASTYPE:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0) {
                                match++;
                                t = &table[i];
                                res.as.type = t->value;
                        }
                        break;
                case ASNUM:
                        if (parse_asnum(word, wordlen, &res.as.as_min)) {
                                res.as.as_max = res.as.as_min;
                                match++;
                                t = &table[i];
                        }
                        break;
                case GROUPDESC:
                        res.is_group = 1;
                        /* FALLTHROUGH */
                case PEERDESC:
                        if (!match && word != NULL && wordlen > 0) {
                                if (strlcpy(res.peerdesc, word,
                                    sizeof(res.peerdesc)) >=
                                    sizeof(res.peerdesc))
                                        errx(1, "neighbor description too "
                                            "long");
                                match++;
                                t = &table[i];
                        }
                        break;
                case RIBNAME:
                        if (!match && word != NULL && wordlen > 0) {
                                if (strlcpy(res.rib, word, sizeof(res.rib)) >=
                                    sizeof(res.rib))
                                        errx(1, "rib name too long");
                                match++;
                                t = &table[i];
                        }
                        break;
                case COMMUNICATION:
                        if (!match && word != NULL && wordlen > 0) {
                                if (strlcpy(res.reason, word,
                                    sizeof(res.reason)) >=
                                    sizeof(res.reason))
                                        errx(1, "shutdown reason too long");
                                match++;
                                t = &table[i];
                        }
                        break;
                case COMMUNITY:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0 && argc > 1) {
                                parsecommunity(&res.community, argv[1]);
                                *argsused += 1;

                                if ((fs = calloc(1, sizeof(*fs))) == NULL)
                                        err(1, NULL);
                                fs->type = ACTION_SET_COMMUNITY;
                                fs->action.community = res.community;
                                TAILQ_INSERT_TAIL(&res.set, fs, entry);

                                match++;
                                t = &table[i];
                        }
                        break;
                case LRGCOMMUNITY:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0 && argc > 1) {
                                parselargecommunity(&res.community, argv[1]);
                                *argsused += 1;

                                if ((fs = calloc(1, sizeof(*fs))) == NULL)
                                        err(1, NULL);
                                fs->type = ACTION_SET_COMMUNITY;
                                fs->action.community = res.community;
                                TAILQ_INSERT_TAIL(&res.set, fs, entry);

                                match++;
                                t = &table[i];
                        }
                        break;
                case EXTCOMMUNITY:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0 && argc > 2) {
                                parseextcommunity(&res.community,
                                    argv[1], argv[2]);
                                *argsused += 2;

                                if ((fs = calloc(1, sizeof(*fs))) == NULL)
                                        err(1, NULL);
                                fs->type = ACTION_SET_COMMUNITY;
                                fs->action.community = res.community;
                                TAILQ_INSERT_TAIL(&res.set, fs, entry);

                                match++;
                                t = &table[i];
                        }
                        break;
                case RD:
                        if (word != NULL && wordlen > 0) {
                                char *p = strdup(word);
                                struct community ext = { 0 };
                                uint64_t rd;

                                if (p == NULL)
                                        err(1, NULL);
                                parseextcommunity(&ext, "rt", p);
                                free(p);

                                switch (ext.data3 >> 8) {
                                case EXT_COMMUNITY_TRANS_TWO_AS:
                                        rd = (0ULL << 48);
                                        rd |= ((uint64_t)ext.data1 & 0xffff)
                                            << 32;
                                        rd |= (uint64_t)ext.data2;
                                        break;
                                case EXT_COMMUNITY_TRANS_IPV4:
                                        rd = (1ULL << 48);
                                        rd |= (uint64_t)ext.data1 << 16;
                                        rd |= (uint64_t)ext.data2 & 0xffff;
                                        break;
                                case EXT_COMMUNITY_TRANS_FOUR_AS:
                                        rd = (2ULL << 48);
                                        rd |= (uint64_t)ext.data1 << 16;
                                        rd |= (uint64_t)ext.data2 & 0xffff;
                                        break;
                                default:
                                        errx(1, "bad encoding of rd");
                                }
                                res.rd = htobe64(rd);
                                match++;
                                t = &table[i];
                        }
                        break;
                case LOCALPREF:
                case MED:
                case PREPNBR:
                case PREPSELF:
                case WEIGHT:
                case RTABLE:
                case PATHID:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0 && argc > 1 &&
                            parse_number(argv[1], &res, table[i].type)) {
                                *argsused += 1;
                                match++;
                                t = &table[i];
                        }
                        break;
                case NEXTHOP:
                        if (word != NULL && wordlen > 0 &&
                            parse_nexthop(word, &res)) {
                                match++;
                                t = &table[i];
                        }
                        break;
                case PFTABLE:
                        if (word != NULL && wordlen > 0) {
                                if ((fs = calloc(1,
                                    sizeof(struct filter_set))) == NULL)
                                        err(1, NULL);
                                if (strlcpy(fs->action.pftable, word,
                                    sizeof(fs->action.pftable)) >=
                                    sizeof(fs->action.pftable))
                                        errx(1, "pftable name too long");
                                TAILQ_INSERT_TAIL(&res.set, fs, entry);
                                match++;
                                t = &table[i];
                        }
                        break;
                case FILENAME:
                        if (word != NULL && wordlen > 0) {
                                if (res.mrtfd != -1)
                                        errx(1, "mrt file already set");
                                if ((res.mrtfd = open(word, O_RDONLY)) == -1) {
                                        /*
                                         * ignore error if path has no / and
                                         * does not exist. In hope to print
                                         * usage.
                                         */
                                        if (errno == ENOENT &&
                                            !strchr(word, '/'))
                                                break;
                                        err(1, "mrt open(%s)", word);
                                }
                                match++;
                                t = &table[i];
                        }
                        break;
                case FLOW_SRCPORT:
                case FLOW_DSTPORT:
                case FLOW_PROTO:
                case FLOW_ICMPTYPE:
                case FLOW_ICMPCODE:
                case FLOW_LENGTH:
                case FLOW_DSCP:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0 && argc > 1) {
                                *argsused += parse_flow_numop(argc, argv, &res,
                                    table[i].type);

                                match++;
                                t = &table[i];
                        }
                        break;
                case FLOW_FLAGS:
                case FLOW_FRAGS:
                        if (word != NULL && strncmp(word, table[i].keyword,
                            wordlen) == 0) {
                                errx(1, "%s not yet implemented", word);
                        }
                        break;
                case ENDTOKEN:
                        break;
                }
        }

        if (match != 1) {
                if (word == NULL)
                        fprintf(stderr, "missing argument:\n");
                else if (match > 1)
                        fprintf(stderr, "ambiguous argument: %s\n", word);
                else if (match < 1)
                        fprintf(stderr, "unknown argument: %s\n", word);
                return (NULL);
        }

        return (t);
}

void
show_valid_args(const struct token table[])
{
        int     i;

        if (prevtable != NULL) {
                const struct token *t = prevtable;
                prevtable = NULL;
                show_valid_args(t);
                fprintf(stderr, "or any of\n");
        }

        for (i = 0; table[i].type != ENDTOKEN; i++) {
                switch (table[i].type) {
                case NOTOKEN:
                        fprintf(stderr, "  <cr>\n");
                        break;
                case ANYTOKEN:
                        break;
                case KEYWORD:
                case FLAG:
                case ASTYPE:
                        fprintf(stderr, "  %s\n", table[i].keyword);
                        break;
                case ADDRESS:
                case PEERADDRESS:
                        fprintf(stderr, "  <address>\n");
                        break;
                case PREFIX:
                case FLOW_SRC:
                case FLOW_DST:
                        fprintf(stderr, "  <address>[/<len>]\n");
                        break;
                case ASNUM:
                        fprintf(stderr, "  <asnum>\n");
                        break;
                case GROUPDESC:
                case PEERDESC:
                        fprintf(stderr, "  <neighbor description>\n");
                        break;
                case RIBNAME:
                        fprintf(stderr, "  <rib name>\n");
                        break;
                case COMMUNICATION:
                        fprintf(stderr, "  <reason>\n");
                        break;
                case COMMUNITY:
                        fprintf(stderr, "  %s <community>\n",
                            table[i].keyword);
                        break;
                case LRGCOMMUNITY:
                        fprintf(stderr, "  %s <large-community>\n",
                            table[i].keyword);
                        break;
                case EXTCOMMUNITY:
                        fprintf(stderr, "  %s <extended-community>\n",
                            table[i].keyword);
                        break;
                case RD:
                        fprintf(stderr, "  <route-distinguisher>\n");
                        break;
                case LOCALPREF:
                case MED:
                case PREPNBR:
                case PREPSELF:
                case WEIGHT:
                case RTABLE:
                case PATHID:
                        fprintf(stderr, "  %s <number>\n", table[i].keyword);
                        break;
                case NEXTHOP:
                        fprintf(stderr, "  <address>\n");
                        break;
                case PFTABLE:
                        fprintf(stderr, "  <pftable>\n");
                        break;
                case FAMILY:
                        fprintf(stderr, "  [ inet | inet6 | IPv4 | IPv6 | "
                            "VPNv4 | VPNv6 ]\n");
                        break;
                case FILENAME:
                        fprintf(stderr, "  <filename>\n");
                        break;
                case FLOW_SRCPORT:
                case FLOW_DSTPORT:
                case FLOW_PROTO:
                case FLOW_ICMPTYPE:
                case FLOW_ICMPCODE:
                case FLOW_LENGTH:
                case FLOW_DSCP:
                        fprintf(stderr, "  %s <numberspec>\n",
                            table[i].keyword);
                        break;
                case FLOW_FLAGS:
                case FLOW_FRAGS:
                        fprintf(stderr, "  %s <flagspec>\n",
                            table[i].keyword);
                        break;
                case ENDTOKEN:
                        break;
                }
        }
}

int
parse_addr(const char *word, struct bgpd_addr *addr)
{
        struct in_addr  ina;
        struct addrinfo hints, *r;

        if (word == NULL)
                return (0);

        memset(&ina, 0, sizeof(ina));

        if (inet_net_pton(AF_INET, word, &ina, sizeof(ina)) != -1) {
                memset(addr, 0, sizeof(*addr));
                addr->aid = AID_INET;
                addr->v4 = ina;
                return (1);
        }

        memset(&hints, 0, sizeof(hints));
        hints.ai_family = AF_INET6;
        hints.ai_socktype = SOCK_DGRAM; /*dummy*/
        hints.ai_flags = AI_NUMERICHOST;
        if (getaddrinfo(word, "0", &hints, &r) == 0) {
                sa2addr(r->ai_addr, addr, NULL);
                freeaddrinfo(r);
                return (1);
        }

        return (0);
}

int
parse_prefix(const char *word, size_t wordlen, struct bgpd_addr *addr,
    uint8_t *prefixlen)
{
        struct bgpd_addr tmp;
        char            *p, *ps;
        const char      *errstr;
        int              mask = -1;

        if (word == NULL)
                return (0);

        memset(&tmp, 0, sizeof(tmp));

        if ((p = strrchr(word, '/')) != NULL) {
                size_t plen = strlen(p);
                mask = strtonum(p + 1, 0, 128, &errstr);
                if (errstr)
                        errx(1, "netmask %s", errstr);

                if ((ps = malloc(wordlen - plen + 1)) == NULL)
                        err(1, "parse_prefix: malloc");
                strlcpy(ps, word, wordlen - plen + 1);

                if (parse_addr(ps, &tmp) == 0) {
                        free(ps);
                        return (0);
                }

                free(ps);
        } else
                if (parse_addr(word, &tmp) == 0)
                        return (0);

        switch (tmp.aid) {
        case AID_INET:
                if (mask == -1)
                        mask = 32;
                if (mask > 32)
                        errx(1, "invalid netmask: too large");
                break;
        case AID_INET6:
                if (mask == -1)
                        mask = 128;
                break;
        default:
                return (0);
        }

        applymask(addr, &tmp, mask);
        *prefixlen = mask;
        return (1);
}

int
parse_asnum(const char *word, size_t wordlen, uint32_t *asnum)
{
        const char      *errstr;
        char            *dot, *parseword;
        uint32_t         uval, uvalh = 0;

        if (word == NULL)
                return (0);

        if (wordlen < 1 || word[0] < '0' || word[0] > '9')
                return (0);

        parseword = strdup(word);
        if ((dot = strchr(parseword, '.')) != NULL) {
                *dot++ = '\0';
                uvalh = strtonum(parseword, 0, USHRT_MAX, &errstr);
                if (errstr)
                        errx(1, "AS number is %s: %s", errstr, word);
                uval = strtonum(dot, 0, USHRT_MAX, &errstr);
                if (errstr)
                        errx(1, "AS number is %s: %s", errstr, word);
        } else {
                uval = strtonum(parseword, 0, UINT_MAX, &errstr);
                if (errstr)
                        errx(1, "AS number is %s: %s", errstr, word);
        }

        free(parseword);
        *asnum = uval | (uvalh << 16);
        return (1);
}

int
parse_number(const char *word, struct parse_result *r, enum token_type type)
{
        struct filter_set       *fs;
        const char              *errstr;
        u_int                    uval;

        if (word == NULL)
                return (0);

        uval = strtonum(word, 0, UINT_MAX, &errstr);
        if (errstr)
                errx(1, "number is %s: %s", errstr, word);

        /* number was parseable */
        switch (type) {
        case RTABLE:
                r->rtableid = uval;
                return (1);
        case PATHID:
                r->pathid = uval;
                r->flags |= F_CTL_HAS_PATHID;
                return (1);
        default:
                break;
        }

        if ((fs = calloc(1, sizeof(struct filter_set))) == NULL)
                err(1, NULL);
        switch (type) {
        case LOCALPREF:
                fs->type = ACTION_SET_LOCALPREF;
                fs->action.metric = uval;
                break;
        case MED:
                fs->type = ACTION_SET_MED;
                fs->action.metric = uval;
                break;
        case PREPNBR:
                if (uval > 128) {
                        free(fs);
                        return (0);
                }
                fs->type = ACTION_SET_PREPEND_PEER;
                fs->action.prepend = uval;
                break;
        case PREPSELF:
                if (uval > 128) {
                        free(fs);
                        return (0);
                }
                fs->type = ACTION_SET_PREPEND_SELF;
                fs->action.prepend = uval;
                break;
        case WEIGHT:
                fs->type = ACTION_SET_WEIGHT;
                fs->action.metric = uval;
                break;
        default:
                errx(1, "king bula sez bad things happen");
        }

        TAILQ_INSERT_TAIL(&r->set, fs, entry);
        return (1);
}

static void
getcommunity(char *s, int large, uint32_t *val, uint32_t *flag)
{
        long long        max = USHRT_MAX;
        const char      *errstr;

        *flag = 0;
        *val = 0;
        if (strcmp(s, "*") == 0) {
                *flag = COMMUNITY_ANY;
                return;
        } else if (strcmp(s, "neighbor-as") == 0) {
                *flag = COMMUNITY_NEIGHBOR_AS;
                return;
        } else if (strcmp(s, "local-as") == 0) {
                *flag =  COMMUNITY_LOCAL_AS;
                return;
        }
        if (large)
                max = UINT_MAX;
        *val = strtonum(s, 0, max, &errstr);
        if (errstr)
                errx(1, "Community %s is %s (max: %llu)", s, errstr, max);
}

static void
setcommunity(struct community *c, uint32_t as, uint32_t data,
    uint32_t asflag, uint32_t dataflag)
{
        c->flags = COMMUNITY_TYPE_BASIC;
        c->flags |= asflag << 8;
        c->flags |= dataflag << 16;
        c->data1 = as;
        c->data2 = data;
        c->data3 = 0;
}

void
parsecommunity(struct community *c, char *s)
{
        char *p;
        uint32_t as, data, asflag, dataflag;

        /* Well-known communities */
        if (strcasecmp(s, "GRACEFUL_SHUTDOWN") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_GRACEFUL_SHUTDOWN, 0, 0);
                return;
        } else if (strcasecmp(s, "NO_EXPORT") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_NO_EXPORT, 0, 0);
                return;
        } else if (strcasecmp(s, "NO_ADVERTISE") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_NO_ADVERTISE, 0, 0);
                return;
        } else if (strcasecmp(s, "NO_EXPORT_SUBCONFED") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_NO_EXPSUBCONFED, 0, 0);
                return;
        } else if (strcasecmp(s, "NO_PEER") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_NO_PEER, 0, 0);
                return;
        } else if (strcasecmp(s, "BLACKHOLE") == 0) {
                setcommunity(c, COMMUNITY_WELLKNOWN,
                    COMMUNITY_BLACKHOLE, 0, 0);
                return;
        }

        if ((p = strchr(s, ':')) == NULL)
                errx(1, "Bad community syntax");
        *p++ = 0;

        getcommunity(s, 0, &as, &asflag);
        getcommunity(p, 0, &data, &dataflag);
        setcommunity(c, as, data, asflag, dataflag);
}

void
parselargecommunity(struct community *c, char *s)
{
        char *p, *q;
        uint32_t dflag1, dflag2, dflag3;

        if ((p = strchr(s, ':')) == NULL)
                errx(1, "Bad community syntax");
        *p++ = 0;

        if ((q = strchr(p, ':')) == NULL)
                errx(1, "Bad community syntax");
        *q++ = 0;

        getcommunity(s, 1, &c->data1, &dflag1);
        getcommunity(p, 1, &c->data2, &dflag2);
        getcommunity(q, 1, &c->data3, &dflag3);

        c->flags = COMMUNITY_TYPE_LARGE;
        c->flags |= dflag1 << 8;
        c->flags |= dflag2 << 16;
        c->flags |= dflag3 << 24;
}

static int
parsesubtype(const char *name, int *type, int *subtype)
{
        const struct ext_comm_pairs *cp;
        int found = 0;

        for (cp = iana_ext_comms; cp->subname != NULL; cp++) {
                if (strcmp(name, cp->subname) == 0) {
                        if (found == 0) {
                                *type = cp->type;
                                *subtype = cp->subtype;
                        }
                        found++;
                }
        }
        if (found > 1)
                *type = -1;
        return (found);
}

static int
parseextvalue(int type, char *s, uint32_t *v, uint32_t *flag)
{
        const char      *errstr;
        char            *p;
        struct in_addr   ip;
        uint32_t         uvalh, uval;

        if (type != -1) {
                /* nothing */
        } else if (strcmp(s, "neighbor-as") == 0) {
                *flag = COMMUNITY_NEIGHBOR_AS;
                *v = 0;
                return EXT_COMMUNITY_TRANS_TWO_AS;
        } else if (strcmp(s, "local-as") == 0) {
                *flag = COMMUNITY_LOCAL_AS;
                *v = 0;
                return EXT_COMMUNITY_TRANS_TWO_AS;
        } else if ((p = strchr(s, '.')) == NULL) {
                /* AS_PLAIN number (4 or 2 byte) */
                strtonum(s, 0, USHRT_MAX, &errstr);
                if (errstr == NULL)
                        type = EXT_COMMUNITY_TRANS_TWO_AS;
                else
                        type = EXT_COMMUNITY_TRANS_FOUR_AS;
        } else if (strchr(p + 1, '.') == NULL) {
                /* AS_DOT number (4-byte) */
                type = EXT_COMMUNITY_TRANS_FOUR_AS;
        } else {
                /* more than one dot -> IP address */
                type = EXT_COMMUNITY_TRANS_IPV4;
        }

        switch (type & EXT_COMMUNITY_VALUE) {
        case EXT_COMMUNITY_TRANS_TWO_AS:
                uval = strtonum(s, 0, USHRT_MAX, &errstr);
                if (errstr)
                        errx(1, "Bad ext-community %s is %s", s, errstr);
                *v = uval;
                break;
        case EXT_COMMUNITY_TRANS_FOUR_AS:
                if ((p = strchr(s, '.')) == NULL) {
                        uval = strtonum(s, 0, UINT_MAX, &errstr);
                        if (errstr)
                                errx(1, "Bad ext-community %s is %s", s,
                                    errstr);
                        *v = uval;
                        break;
                }
                *p++ = '\0';
                uvalh = strtonum(s, 0, USHRT_MAX, &errstr);
                if (errstr)
                        errx(1, "Bad ext-community %s is %s", s, errstr);
                uval = strtonum(p, 0, USHRT_MAX, &errstr);
                if (errstr)
                        errx(1, "Bad ext-community %s is %s", p, errstr);
                *v = uval | (uvalh << 16);
                break;
        case EXT_COMMUNITY_TRANS_IPV4:
                if (inet_pton(AF_INET, s, &ip) != 1)
                        errx(1, "Bad ext-community %s not parseable", s);
                *v = ntohl(ip.s_addr);
                break;
        default:
                errx(1, "%s: unexpected type %d", __func__, type);
        }
        return (type);
}

void
parseextcommunity(struct community *c, const char *t, char *s)
{
        const struct ext_comm_pairs *cp;
        char            *p, *ep;
        uint64_t         ullval;
        uint32_t         uval, uval2, dflag1 = 0, dflag2 = 0;
        int              type = 0, subtype = 0;

        if (strcmp(t, "*") == 0 && strcmp(s, "*") == 0) {
                c->flags = COMMUNITY_TYPE_EXT;
                c->flags |= COMMUNITY_ANY << 24;
                return;
        }
        if (parsesubtype(t, &type, &subtype) == 0)
                errx(1, "Bad ext-community unknown type");

        switch (type) {
        case EXT_COMMUNITY_TRANS_TWO_AS:
        case EXT_COMMUNITY_TRANS_FOUR_AS:
        case EXT_COMMUNITY_TRANS_IPV4:
        case EXT_COMMUNITY_GEN_TWO_AS:
        case EXT_COMMUNITY_GEN_FOUR_AS:
        case EXT_COMMUNITY_GEN_IPV4:
        case -1:
                if (strcmp(s, "*") == 0) {
                        dflag1 = COMMUNITY_ANY;
                        break;
                }
                if ((p = strchr(s, ':')) == NULL)
                        errx(1, "Bad ext-community %s", s);
                *p++ = '\0';
                type = parseextvalue(type, s, &uval, &dflag1);

                switch (type) {
                case EXT_COMMUNITY_TRANS_TWO_AS:
                case EXT_COMMUNITY_GEN_TWO_AS:
                        getcommunity(p, 1, &uval2, &dflag2);
                        break;
                case EXT_COMMUNITY_TRANS_IPV4:
                case EXT_COMMUNITY_TRANS_FOUR_AS:
                case EXT_COMMUNITY_GEN_IPV4:
                case EXT_COMMUNITY_GEN_FOUR_AS:
                        getcommunity(p, 0, &uval2, &dflag2);
                        break;
                default:
                        errx(1, "parseextcommunity: unexpected result");
                }

                c->data1 = uval;
                c->data2 = uval2;
                break;
        case EXT_COMMUNITY_TRANS_OPAQUE:
        case EXT_COMMUNITY_TRANS_EVPN:
                if (strcmp(s, "*") == 0) {
                        dflag1 = COMMUNITY_ANY;
                        break;
                }
                errno = 0;
                ullval = strtoull(s, &ep, 0);
                if (s[0] == '\0' || *ep != '\0')
                        errx(1, "Bad ext-community bad value");
                if (errno == ERANGE && ullval > EXT_COMMUNITY_OPAQUE_MAX)
                        errx(1, "Bad ext-community value too big");
                c->data1 = ullval >> 32;
                c->data2 = ullval;
                break;
        case EXT_COMMUNITY_NON_TRANS_OPAQUE:
                if (subtype == EXT_COMMUNITY_SUBTYPE_OVS) {
                        if (strcmp(s, "valid") == 0) {
                                c->data2 = EXT_COMMUNITY_OVS_VALID;
                                break;
                        } else if (strcmp(s, "invalid") == 0) {
                                c->data2 = EXT_COMMUNITY_OVS_INVALID;
                                break;
                        } else if (strcmp(s, "not-found") == 0) {
                                c->data2 = EXT_COMMUNITY_OVS_NOTFOUND;
                                break;
                        } else if (strcmp(s, "*") == 0) {
                                dflag1 = COMMUNITY_ANY;
                                break;
                        }
                }
                errx(1, "Bad ext-community %s", s);
        }

        c->data3 = type << 8 | subtype;

        /* special handling of ext-community rt * since type is not known */
        if (dflag1 == COMMUNITY_ANY && type == -1) {
                c->flags = COMMUNITY_TYPE_EXT;
                c->flags |= dflag1 << 8;
                return;
        }

        /* verify type/subtype combo */
        for (cp = iana_ext_comms; cp->subname != NULL; cp++) {
                if (cp->type == type && cp->subtype == subtype) {
                        c->flags = COMMUNITY_TYPE_EXT;
                        c->flags |= dflag1 << 8;
                        c->flags |= dflag2 << 16;
                        return;
                }
        }

        errx(1, "Bad ext-community bad format for type");
}

int
parse_nexthop(const char *word, struct parse_result *r)
{
        struct filter_set       *fs;

        if ((fs = calloc(1, sizeof(struct filter_set))) == NULL)
                err(1, NULL);

        if (strcmp(word, "blackhole") == 0)
                fs->type = ACTION_SET_NEXTHOP_BLACKHOLE;
        else if (strcmp(word, "reject") == 0)
                fs->type = ACTION_SET_NEXTHOP_REJECT;
        else if (strcmp(word, "no-modify") == 0)
                fs->type = ACTION_SET_NEXTHOP_NOMODIFY;
        else if (parse_addr(word, &fs->action.nexthop)) {
                fs->type = ACTION_SET_NEXTHOP;
        } else {
                free(fs);
                return (0);
        }

        TAILQ_INSERT_TAIL(&r->set, fs, entry);
        return (1);
}

static int
unary_op(const char *op)
{
        if (strcmp(op, "=") == 0)
                return FLOWSPEC_OP_NUM_EQ;
        if (strcmp(op, "!=") == 0)
                return FLOWSPEC_OP_NUM_NOT;
        if (strcmp(op, ">") == 0)
                return FLOWSPEC_OP_NUM_GT;
        if (strcmp(op, ">=") == 0)
                return FLOWSPEC_OP_NUM_GE;
        if (strcmp(op, "<") == 0)
                return FLOWSPEC_OP_NUM_LT;
        if (strcmp(op, "<=") == 0)
                return FLOWSPEC_OP_NUM_LE;
        return -1;
}

static enum comp_ops
binary_op(const char *op)
{
        if (strcmp(op, "-") == 0)
                return OP_RANGE;
        if (strcmp(op, "><") == 0)
                return OP_XRANGE;
        return OP_NONE;
}

static void
push_numop(struct parse_result *r, int type, uint8_t op, int and, long long val)
{
        uint8_t *comp;
        void *data;
        uint32_t u32;
        uint16_t u16;
        uint8_t u8, flag = 0;
        int len, complen;

        flag |= op;
        if (and)
                flag |= FLOWSPEC_OP_AND;

        if (val < 0 || val > 0xffffffff) {
                errx(1, "unsupported value for flowspec num_op");
        } else if (val <= 255) {
                len = 1;
                u8 = val;
                data = &u8;
        } else if (val <= 0xffff) {
                len = 2;
                u16 = htons(val);
                data = &u16;
                flag |= 1 << FLOWSPEC_OP_LEN_SHIFT;
        } else {
                len = 4;
                u32 = htonl(val);
                data = &u32;
                flag |= 2 << FLOWSPEC_OP_LEN_SHIFT;
        }

        complen = r->flow.complen[type];
        comp = realloc(r->flow.components[type], complen + len + 1);
        if (comp == NULL)
                err(1, NULL);

        comp[complen++] = flag;
        memcpy(comp + complen, data, len);
        complen += len;
        r->flow.complen[type] = complen;
        r->flow.components[type] = comp;
}

int
parse_flow_numop(int argc, char *argv[], struct parse_result *r,
    enum token_type toktype)
{
        const char *errstr;
        long long val, val2;
        int numargs, type;
        int is_list = 0;
        int op;

        switch (toktype) {
        case FLOW_PROTO:
                type = FLOWSPEC_TYPE_PROTO;
                break;
        case FLOW_SRCPORT:
                type = FLOWSPEC_TYPE_SRC_PORT;
                break;
        case FLOW_DSTPORT:
                type = FLOWSPEC_TYPE_DST_PORT;
                break;
        case FLOW_ICMPTYPE:
                type = FLOWSPEC_TYPE_ICMP_TYPE;
                break;
        case FLOW_ICMPCODE:
                type = FLOWSPEC_TYPE_ICMP_CODE;
                break;
        case FLOW_LENGTH:
                type = FLOWSPEC_TYPE_PKT_LEN;
                break;
        case FLOW_DSCP:
                type = FLOWSPEC_TYPE_DSCP;
                break;
        default:
                errx(1, "parse_flow_numop called with unsupported type");
        }

        /* skip keyword (which is already accounted for) */
        argc--;
        argv++;
        numargs = argc;

        while (argc > 0) {
                if (strcmp(argv[0], "{") == 0) {
                        is_list = 1;
                        argc--;
                        argv++;
                } else if (is_list && strcmp(argv[0], "}") == 0) {
                        is_list = 0;
                        argc--;
                        argv++;
                } else if ((op = unary_op(argv[0])) != -1) {
                        if (argc < 2)
                                errx(1, "missing argument in flowspec "
                                    "definition");

                        val = strtonum(argv[1], LLONG_MIN, LLONG_MAX, &errstr);
                        if (errstr)
                                errx(1, "\"%s\" invalid number: %s", argv[0],
                                    errstr);
                        push_numop(r, type, op, 0, val);
                        argc -= 2;
                        argv += 2;
                } else {
                        val = strtonum(argv[0], LLONG_MIN, LLONG_MAX, &errstr);
                        if (errstr)
                                errx(1, "\"%s\" invalid number: %s", argv[0],
                                    errstr);
                        if (argc >= 3 && (op = binary_op(argv[1])) != OP_NONE) {
                                val2 = strtonum(argv[2], LLONG_MIN, LLONG_MAX,
                                    &errstr);
                                if (errstr)
                                        errx(1, "\"%s\" invalid number: %s",
                                            argv[2], errstr);
                                switch (op) {
                                case OP_RANGE:
                                        push_numop(r, type, FLOWSPEC_OP_NUM_GE,
                                            0, val);
                                        push_numop(r, type, FLOWSPEC_OP_NUM_LE,
                                            1, val2);
                                        break;
                                case OP_XRANGE:
                                        push_numop(r, type, FLOWSPEC_OP_NUM_LT,
                                            0, val);
                                        push_numop(r, type, FLOWSPEC_OP_NUM_GT,
                                            0, val2);
                                        break;
                                }
                                argc -= 3;
                                argv += 3;
                        } else {
                                push_numop(r, type, FLOWSPEC_OP_NUM_EQ, 0, val);
                                argc--;
                                argv++;
                        }
                }
                if (is_list == 0)
                        break;
        }

        return numargs - argc;
}