===================================================================
RCS file: /cvs/cvs/blind/parse.y,v
retrieving revision 1.2
retrieving revision 1.4
diff -u -p -r1.2 -r1.4
--- blind/parse.y	2022/03/20 17:33:18	1.2
+++ blind/parse.y	2022/03/20 20:40:36	1.4
@@ -15,21 +15,43 @@
  */
 
 %{
+#include <sys/queue.h>
+#include <sys/stat.h>
+
+#include <stdio.h>        
 #include <stdarg.h>
+#include <unistd.h>
         
 #include "blind.h"
+#include "log.h"
 
-int yylex(void);
-int yyerror(const char *, ...);
-int config_load(struct blind *, const char *);
+TAILQ_HEAD(files, file)		 files = TAILQ_HEAD_INITIALIZER(files);
+static struct file {
+	TAILQ_ENTRY(file)	 entry;
+      	FILE			*stream;
+	char			*name;
+	size_t			 ungetpos;
+	size_t			 ungetsize;
+	u_char			*ungetbuf;
+	int			 eof_reached;
+	int			 lineno;
+	int			 errors;
+} *file, *top;
 
-struct blind *env = NULL;
-static int    errors = 0;
+int		yylex(void);
+int		yyerror(const char *, ...);
+int		config_load(struct blind *);
+struct file    *config_push(const char *);
+int		config_pop(void);
+int		config_perm(int, const char *);
 
+struct blind   *env = NULL;
+static int	errors = 0;
+
 typedef struct {
 	union {
-		int64_t		 number;
-		char		*string;
+		int64_t	 number;
+		char	*string;
 	} v;
 	int lineno;
 } YYSTYPE;
@@ -66,12 +88,103 @@ yylex(void)
 }
 
 int
-config_load(struct blind *temp, const char *filename)
+config_load(struct blind *temp)
 {
         env = temp;
         errors = 0;
 
-        //
+        if ((file = config_push(env->bl_conf)) == NULL) {
+                //       config_purge(PURGE_ALL);
+                return (-1);
+        }
+        top = file;
 
+        // parse file
+
+        errors = file->errors;
+        config_pop();
+
+        // setup
+
+        return (0);
+}
+
+struct file *
+config_push(const char *name)
+{
+        struct file *nfile;
+
+        if ((nfile = calloc(1, sizeof(struct file))) == NULL) {
+                log_debug("%s: calloc()", __func__);
+                return (NULL);
+        }
+        if ((nfile->name = strdup(name)) == NULL) {
+                log_debug("%s: strdup()", __func__);
+                free(nfile);
+                return (NULL);
+        }
+        if ((nfile->stream = fopen(nfile->name, "r")) == NULL) {
+                log_debug("%s: fopen()", __func__);
+                free(nfile->name);
+                free(nfile);
+                return (NULL);
+        }
+        if (config_perm(fileno(nfile->stream), nfile->name)) {
+                fclose(nfile->stream);
+                free(nfile->name);
+                free(nfile);
+                return (NULL);
+        }
+        nfile->lineno = TAILQ_EMPTY(&files) ? 1 : 0;
+        nfile->ungetsize = 16;
+        nfile->ungetbuf = malloc(nfile->ungetsize);
+        if (nfile->ungetbuf == NULL) {
+                log_debug("%s: malloc()", __func__);
+                fclose(nfile->stream);
+                free(nfile->name);
+                free(nfile);
+                return (NULL);
+        }
+        TAILQ_INSERT_TAIL(&files, nfile, entry);
+        return (nfile);
+}
+
+int
+config_pop(void)
+{
+        struct file *prv;
+
+        if ((prv = TAILQ_PREV(file, files, entry)) != NULL)
+                prv->errors += file->errors;
+
+        TAILQ_REMOVE(&files, file, entry);
+        fclose(file->stream);
+        free(file->name);
+        free(file->ungetbuf);
+        free(file);
+        file = prv;
+        
+        return (file ? 0 : EOF);
+}
+
+int
+config_perm(int fd, const char *name)
+{
+        struct stat st;
+
+        if (fstat(fd, &st)) {
+                log_debug("%s: fstat(%s)", __func__, name);
+                return (-1);
+        }
+        if (st.st_uid != 0 && st.st_uid != getuid()) {
+                log_debug("%s: %s: wrong file permission", \
+                          __func__, name);
+                return (-1);
+        }
+        if (st.st_mode & (S_IWGRP | S_IXGRP | S_IRWXO)) {
+                log_debug("%s: %s: group/world readable/writable", \
+                          __func__, name);
+                return (-1);
+        }
         return (0);
 }