WIP: allow_insecure_tainted_data
[users/heiko/exim.git] / src / src / globals.c
1 /*************************************************
2 *     Exim - an Internet mail transport agent    *
3 *************************************************/
4
5 /* Copyright (c) University of Cambridge 1995 - 2018 */
6 /* Copyright (c) The Exim Maintainers 2020 */
7 /* See the file NOTICE for conditions of use and distribution. */
8
9 /* All the global variables are defined together in this one module, so
10 that they are easy to find. */
11
12 #include "exim.h"
13
14
15 /* Generic options for auths, all of which live inside auth_instance
16 data blocks and hence have the opt_public flag set. */
17
18 optionlist optionlist_auths[] = {
19   { "client_condition", opt_stringptr | opt_public,
20                  OPT_OFF(auth_instance, client_condition) },
21   { "client_set_id", opt_stringptr | opt_public,
22                  OPT_OFF(auth_instance, set_client_id) },
23   { "driver",        opt_stringptr | opt_public,
24                  OPT_OFF(auth_instance, driver_name) },
25   { "public_name",   opt_stringptr | opt_public,
26                  OPT_OFF(auth_instance, public_name) },
27   { "server_advertise_condition", opt_stringptr | opt_public,
28                  OPT_OFF(auth_instance, advertise_condition)},
29   { "server_condition", opt_stringptr | opt_public,
30                  OPT_OFF(auth_instance, server_condition) },
31   { "server_debug_print", opt_stringptr | opt_public,
32                  OPT_OFF(auth_instance, server_debug_string) },
33   { "server_mail_auth_condition", opt_stringptr | opt_public,
34                  OPT_OFF(auth_instance, mail_auth_condition) },
35   { "server_set_id", opt_stringptr | opt_public,
36                  OPT_OFF(auth_instance, set_id) }
37 };
38
39 int     optionlist_auths_size = nelem(optionlist_auths);
40
41 /* An empty host aliases list. */
42
43 uschar *no_aliases             = NULL;
44
45
46 /* For comments on these variables, see globals.h. I'm too idle to
47 duplicate them here... */
48
49 #ifdef EXIM_PERL
50 uschar *opt_perl_startup       = NULL;
51 BOOL    opt_perl_at_start      = FALSE;
52 BOOL    opt_perl_started       = FALSE;
53 BOOL    opt_perl_taintmode     = FALSE;
54 #endif
55
56 #ifdef EXPAND_DLFUNC
57 tree_node *dlobj_anchor        = NULL;
58 #endif
59
60 #ifdef LOOKUP_IBASE
61 uschar *ibase_servers          = NULL;
62 #endif
63
64 #ifdef LOOKUP_LDAP
65 uschar *eldap_ca_cert_dir      = NULL;
66 uschar *eldap_ca_cert_file     = NULL;
67 uschar *eldap_cert_file        = NULL;
68 uschar *eldap_cert_key         = NULL;
69 uschar *eldap_cipher_suite     = NULL;
70 uschar *eldap_default_servers  = NULL;
71 uschar *eldap_require_cert     = NULL;
72 int     eldap_version          = -1;
73 BOOL    eldap_start_tls        = FALSE;
74 #endif
75
76 #ifdef LOOKUP_MYSQL
77 uschar *mysql_servers          = NULL;
78 #endif
79
80 #ifdef LOOKUP_ORACLE
81 uschar *oracle_servers         = NULL;
82 #endif
83
84 #ifdef LOOKUP_PGSQL
85 uschar *pgsql_servers          = NULL;
86 #endif
87
88 #ifdef LOOKUP_REDIS
89 uschar *redis_servers          = NULL;
90 #endif
91
92 #ifdef LOOKUP_SQLITE
93 uschar *sqlite_dbfile          = NULL;
94 int     sqlite_lock_timeout    = 5;
95 #endif
96
97 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
98 BOOL    move_frozen_messages   = FALSE;
99 #endif
100
101 #ifdef ALLOW_INSECURE_TAINTED_DATA
102 BOOL    allow_insecure_tainted_data = FALSE;
103 #endif
104
105 /* These variables are outside the #ifdef because it keeps the code less
106 cluttered in several places (e.g. during logging) if we can always refer to
107 them. Also, the tls_ variables are now always visible.  Note that these are
108 only used for smtp connections, not for service-daemon access. */
109
110 tls_support tls_in = {
111  .active =              {.sock = -1}
112  /* all other elements zero */
113 };
114 tls_support tls_out = {
115  .active =              {.sock = -1},
116  /* all other elements zero */
117 };
118
119 uschar *dsn_envid              = NULL;
120 int     dsn_ret                = 0;
121 const pcre  *regex_DSN         = NULL;
122 uschar *dsn_advertise_hosts    = NULL;
123
124 #ifndef DISABLE_TLS
125 BOOL    gnutls_compat_mode     = FALSE;
126 BOOL    gnutls_allow_auto_pkcs11 = FALSE;
127 uschar *openssl_options        = NULL;
128 const pcre *regex_STARTTLS     = NULL;
129 uschar *tls_advertise_hosts    = US"*";
130 uschar *tls_certificate        = NULL;
131 uschar *tls_crl                = NULL;
132 /* This default matches NSS DH_MAX_P_BITS value at current time (2012), because
133 that's the interop problem which has been observed: GnuTLS suggesting a higher
134 bit-count as "NORMAL" (2432) and Thunderbird dropping connection. */
135 int     tls_dh_max_bits        = 2236;
136 uschar *tls_dhparam            = NULL;
137 uschar *tls_eccurve            = US"auto";
138 # ifndef DISABLE_OCSP
139 uschar *tls_ocsp_file          = NULL;
140 # endif
141 uschar *tls_privatekey         = NULL;
142 BOOL    tls_remember_esmtp     = FALSE;
143 uschar *tls_require_ciphers    = NULL;
144 # ifndef DISABLE_TLS_RESUME
145 uschar *tls_resumption_hosts   = NULL;
146 # endif
147 uschar *tls_try_verify_hosts   = NULL;
148 #if defined(SUPPORT_SYSDEFAULT_CABUNDLE) || !defined(USE_GNUTLS)
149 uschar *tls_verify_certificates= US"system";
150 #else
151 uschar *tls_verify_certificates= NULL;
152 #endif
153 uschar *tls_verify_hosts       = NULL;
154 int     tls_watch_fd           = -1;
155 time_t  tls_watch_trigger_time = (time_t)0;
156 #else   /*DISABLE_TLS*/
157 uschar *tls_advertise_hosts    = NULL;
158 #endif
159
160 #ifndef DISABLE_PRDR
161 /* Per Recipient Data Response variables */
162 BOOL    prdr_enable            = FALSE;
163 BOOL    prdr_requested         = FALSE;
164 const pcre *regex_PRDR         = NULL;
165 #endif
166
167 #ifdef SUPPORT_I18N
168 const pcre *regex_UTF8         = NULL;
169 #endif
170
171 /* Input-reading functions for messages, so we can use special ones for
172 incoming TCP/IP. The defaults use stdin. We never need these for any
173 stand-alone tests. */
174
175 #if !defined(STAND_ALONE) && !defined(MACRO_PREDEF)
176 int (*lwr_receive_getc)(unsigned) = stdin_getc;
177 uschar * (*lwr_receive_getbuf)(unsigned *) = NULL;
178 int (*lwr_receive_ungetc)(int) = stdin_ungetc;
179 int (*receive_getc)(unsigned)  = stdin_getc;
180 uschar * (*receive_getbuf)(unsigned *)  = NULL;
181 void (*receive_get_cache)(void)= NULL;
182 int (*receive_ungetc)(int)     = stdin_ungetc;
183 int (*receive_feof)(void)      = stdin_feof;
184 int (*receive_ferror)(void)    = stdin_ferror;
185 BOOL (*receive_smtp_buffered)(void) = NULL;   /* Only used for SMTP */
186 #endif
187
188
189 /* List of per-address expansion variables for clearing and saving/restoring
190 when verifying one address while routing/verifying another. We have to have
191 the size explicit, because it is referenced from more than one module. */
192
193 const uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT] = {
194   CUSS &deliver_address_data,
195   CUSS &deliver_domain,
196   CUSS &deliver_domain_data,
197   CUSS &deliver_domain_orig,
198   CUSS &deliver_domain_parent,
199   CUSS &deliver_localpart,
200   CUSS &deliver_localpart_data,
201   CUSS &deliver_localpart_orig,
202   CUSS &deliver_localpart_parent,
203   CUSS &deliver_localpart_prefix,
204   CUSS &deliver_localpart_suffix,
205   CUSS (uschar **)(&deliver_recipients),
206   CUSS &deliver_host,
207   CUSS &deliver_home,
208   CUSS &address_file,
209   CUSS &address_pipe,
210   CUSS &self_hostname,
211   NULL };
212
213 int address_expansions_count = sizeof(address_expansions)/sizeof(uschar **);
214
215 /******************************************************************************/
216 /* General global variables.  Boolean flags are done as a group
217 so that only one bit each is needed, packed, for all those we never
218 need to take a pointer - and only a char for the rest.
219 This means a struct, unfortunately since it clutters the sourcecode. */
220
221 struct global_flags f =
222 {
223         .acl_temp_details       = FALSE,
224         .active_local_from_check = FALSE,
225         .active_local_sender_retain = FALSE,
226         .address_test_mode      = FALSE,
227         .admin_user             = FALSE,
228         .allow_auth_unadvertised= FALSE,
229         .allow_unqualified_recipient = TRUE,    /* For local messages */
230         .allow_unqualified_sender = TRUE,       /* Reset for SMTP */
231         .authentication_local   = FALSE,
232
233         .background_daemon      = TRUE,
234
235         .chunking_offered       = FALSE,
236         .config_changed         = FALSE,
237         .continue_more          = FALSE,
238
239         .daemon_listen          = FALSE,
240         .debug_daemon           = FALSE,
241         .deliver_firsttime      = FALSE,
242         .deliver_force          = FALSE,
243         .deliver_freeze         = FALSE,
244         .deliver_force_thaw     = FALSE,
245         .deliver_manual_thaw    = FALSE,
246         .deliver_selectstring_regex = FALSE,
247         .deliver_selectstring_sender_regex = FALSE,
248         .disable_callout_flush  = FALSE,
249         .disable_delay_flush    = FALSE,
250         .disable_logging        = FALSE,
251 #ifndef DISABLE_DKIM
252         .dkim_disable_verify      = FALSE,
253         .dkim_init_done           = FALSE,
254 #endif
255 #ifdef SUPPORT_DMARC
256         .dmarc_has_been_checked  = FALSE,
257         .dmarc_disable_verify    = FALSE,
258         .dmarc_enable_forensic   = FALSE,
259 #endif
260         .dont_deliver           = FALSE,
261         .dot_ends               = TRUE,
262
263         .enable_dollar_recipients = FALSE,
264         .expand_string_forcedfail = FALSE,
265
266         .filter_running         = FALSE,
267
268         .header_rewritten       = FALSE,
269         .helo_verified          = FALSE,
270         .helo_verify_failed     = FALSE,
271         .host_checking_callout  = FALSE,
272         .host_find_failed_syntax= FALSE,
273
274         .inetd_wait_mode        = FALSE,
275         .is_inetd               = FALSE,
276
277         .local_error_message    = FALSE,
278         .log_testing_mode       = FALSE,
279
280 #ifdef WITH_CONTENT_SCAN
281         .no_mbox_unspool        = FALSE,
282 #endif
283         .no_multiline_responses = FALSE,
284
285         .parse_allow_group      = FALSE,
286         .parse_found_group      = FALSE,
287         .pipelining_enable      = TRUE,
288 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
289         .proxy_session_failed   = FALSE,
290 #endif
291
292         .queue_2stage           = FALSE,
293         .queue_only_policy      = FALSE,
294         .queue_run_first_delivery = FALSE,
295         .queue_run_force        = FALSE,
296         .queue_run_local        = FALSE,
297         .queue_running          = FALSE,
298         .queue_smtp             = FALSE,
299
300         .really_exim            = TRUE,
301         .receive_call_bombout   = FALSE,
302         .recipients_discarded   = FALSE,
303         .running_in_test_harness = FALSE,
304
305         .search_find_defer      = FALSE,
306         .sender_address_forced  = FALSE,
307         .sender_host_notsocket  = FALSE,
308         .sender_host_unknown    = FALSE,
309         .sender_local           = FALSE,
310         .sender_name_forced     = FALSE,
311         .sender_set_untrusted   = FALSE,
312         .smtp_authenticated     = FALSE,
313 #ifndef DISABLE_PIPE_CONNECT
314         .smtp_in_early_pipe_advertised = FALSE,
315         .smtp_in_early_pipe_no_auth = FALSE,
316         .smtp_in_early_pipe_used = FALSE,
317 #endif
318         .smtp_in_pipelining_advertised = FALSE,
319         .smtp_in_pipelining_used = FALSE,
320         .smtp_in_quit           = FALSE,
321         .spool_file_wireformat  = FALSE,
322         .submission_mode        = FALSE,
323         .suppress_local_fixups  = FALSE,
324         .suppress_local_fixups_default = FALSE,
325         .synchronous_delivery   = FALSE,
326         .system_filtering       = FALSE,
327
328         .taint_check_slow       = FALSE,
329         .testsuite_delays       = TRUE,
330         .tcp_fastopen_ok        = FALSE,
331         .tcp_in_fastopen        = FALSE,
332         .tcp_in_fastopen_data   = FALSE,
333         .tcp_in_fastopen_logged = FALSE,
334         .tcp_out_fastopen_logged= FALSE,
335         .timestamps_utc         = FALSE,
336         .transport_filter_timed_out = FALSE,
337         .trusted_caller         = FALSE,
338         .trusted_config         = TRUE,
339 };
340
341 /******************************************************************************/
342 /* These are the flags which are either variables or mainsection options,
343 so an address is needed for access, or are exported to local_scan. */
344
345 BOOL    accept_8bitmime        = TRUE; /* deliberately not RFC compliant */
346 BOOL    allow_domain_literals  = FALSE;
347 BOOL    allow_mx_to_ip         = FALSE;
348 BOOL    allow_utf8_domains     = FALSE;
349 BOOL    authentication_failed  = FALSE;
350
351 BOOL    bounce_return_body     = TRUE;
352 BOOL    bounce_return_message  = TRUE;
353 BOOL    check_rfc2047_length   = TRUE;
354 BOOL    commandline_checks_require_admin = FALSE;
355
356 #ifdef EXPERIMENTAL_DCC
357 BOOL    dcc_direct_add_header  = FALSE;
358 #endif
359 BOOL    debug_store            = FALSE;
360 BOOL    delivery_date_remove   = TRUE;
361 BOOL    deliver_drop_privilege = FALSE;
362 #ifdef ENABLE_DISABLE_FSYNC
363 BOOL    disable_fsync          = FALSE;
364 #endif
365 BOOL    disable_ipv6           = FALSE;
366 BOOL    dns_csa_use_reverse    = TRUE;
367 BOOL    drop_cr                = FALSE;         /* No longer used */
368
369 BOOL    envelope_to_remove     = TRUE;
370 BOOL    exim_gid_set           = TRUE;          /* This gid is always set */
371 BOOL    exim_uid_set           = TRUE;          /* This uid is always set */
372 BOOL    extract_addresses_remove_arguments = TRUE;
373
374 BOOL    host_checking          = FALSE;
375 BOOL    host_lookup_deferred   = FALSE;
376 BOOL    host_lookup_failed     = FALSE;
377 BOOL    ignore_fromline_local  = FALSE;
378
379 BOOL    local_from_check       = TRUE;
380 BOOL    local_sender_retain    = FALSE;
381 BOOL    log_timezone           = FALSE;
382 BOOL    message_body_newlines  = FALSE;
383 BOOL    message_logs           = TRUE;
384 #ifdef SUPPORT_I18N
385 BOOL    message_smtputf8       = FALSE;
386 #endif
387 BOOL    mua_wrapper            = FALSE;
388
389 BOOL    preserve_message_logs  = FALSE;
390 BOOL    print_topbitchars      = FALSE;
391 BOOL    prod_requires_admin    = TRUE;
392 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
393 BOOL    proxy_session          = FALSE;
394 #endif
395
396 #ifndef DISABLE_QUEUE_RAMP
397 BOOL    queue_fast_ramp         = FALSE;
398 #endif
399 BOOL    queue_list_requires_admin = TRUE;
400 BOOL    queue_only             = FALSE;
401 BOOL    queue_only_load_latch  = TRUE;
402 BOOL    queue_only_override    = TRUE;
403 BOOL    queue_run_in_order     = FALSE;
404 BOOL    recipients_max_reject  = FALSE;
405 BOOL    return_path_remove     = TRUE;
406
407 BOOL    smtp_batched_input     = FALSE;
408 BOOL    sender_helo_dnssec     = FALSE;
409 BOOL    sender_host_dnssec     = FALSE;
410 BOOL    smtp_accept_keepalive  = TRUE;
411 BOOL    smtp_check_spool_space = TRUE;
412 BOOL    smtp_enforce_sync      = TRUE;
413 BOOL    smtp_etrn_serialize    = TRUE;
414 BOOL    smtp_input             = FALSE;
415 BOOL    smtp_return_error_details = FALSE;
416 #ifdef SUPPORT_SPF
417 BOOL    spf_result_guessed     = FALSE;
418 #endif
419 BOOL    split_spool_directory  = FALSE;
420 BOOL    spool_wireformat       = FALSE;
421 #ifdef EXPERIMENTAL_SRS_ALT
422 BOOL    srs_usehash            = TRUE;
423 BOOL    srs_usetimestamp       = TRUE;
424 #endif
425 BOOL    strict_acl_vars        = FALSE;
426 BOOL    strip_excess_angle_brackets = FALSE;
427 BOOL    strip_trailing_dot     = FALSE;
428 BOOL    syslog_duplication     = TRUE;
429 BOOL    syslog_pid             = TRUE;
430 BOOL    syslog_timestamp       = TRUE;
431 BOOL    system_filter_gid_set  = FALSE;
432 BOOL    system_filter_uid_set  = FALSE;
433
434 BOOL    tcp_nodelay            = TRUE;
435 BOOL    write_rejectlog        = TRUE;
436
437 /******************************************************************************/
438
439 header_line *acl_added_headers = NULL;
440 tree_node *acl_anchor          = NULL;
441 uschar *acl_arg[9]             = {NULL, NULL, NULL, NULL, NULL,
442                                   NULL, NULL, NULL, NULL};
443 int     acl_narg               = 0;
444
445 int     acl_level              = 0;
446
447 uschar *acl_not_smtp           = NULL;
448 #ifdef WITH_CONTENT_SCAN
449 uschar *acl_not_smtp_mime      = NULL;
450 #endif
451 uschar *acl_not_smtp_start     = NULL;
452 uschar *acl_removed_headers    = NULL;
453 uschar *acl_smtp_auth          = NULL;
454 uschar *acl_smtp_connect       = NULL;
455 uschar *acl_smtp_data          = NULL;
456 #ifndef DISABLE_PRDR
457 uschar *acl_smtp_data_prdr     = US"accept";
458 #endif
459 #ifndef DISABLE_DKIM
460 uschar *acl_smtp_dkim          = NULL;
461 #endif
462 uschar *acl_smtp_etrn          = NULL;
463 uschar *acl_smtp_expn          = NULL;
464 uschar *acl_smtp_helo          = NULL;
465 uschar *acl_smtp_mail          = NULL;
466 uschar *acl_smtp_mailauth      = NULL;
467 #ifdef WITH_CONTENT_SCAN
468 uschar *acl_smtp_mime          = NULL;
469 #endif
470 uschar *acl_smtp_notquit       = NULL;
471 uschar *acl_smtp_predata       = NULL;
472 uschar *acl_smtp_quit          = NULL;
473 uschar *acl_smtp_rcpt          = NULL;
474 uschar *acl_smtp_starttls      = NULL;
475 uschar *acl_smtp_vrfy          = NULL;
476
477 tree_node *acl_var_c           = NULL;
478 tree_node *acl_var_m           = NULL;
479 uschar *acl_verify_message     = NULL;
480 string_item *acl_warn_logged   = NULL;
481
482 /* Names of SMTP places for use in ACL error messages, and corresponding SMTP
483 error codes - keep in step with definitions of ACL_WHERE_xxxx in macros.h. */
484
485 uschar *acl_wherenames[]       = { US"RCPT",
486                                    US"MAIL",
487                                    US"PREDATA",
488                                    US"MIME",
489                                    US"DKIM",
490                                    US"DATA",
491 #ifndef DISABLE_PRDR
492                                    US"PRDR",
493 #endif
494                                    US"non-SMTP",
495                                    US"AUTH",
496                                    US"connection",
497                                    US"ETRN",
498                                    US"EXPN",
499                                    US"EHLO or HELO",
500                                    US"MAILAUTH",
501                                    US"non-SMTP-start",
502                                    US"NOTQUIT",
503                                    US"QUIT",
504                                    US"STARTTLS",
505                                    US"VRFY",
506                                    US"delivery",
507                                    US"unknown"
508                                  };
509
510 uschar *acl_wherecodes[]       = { US"550",     /* RCPT */
511                                    US"550",     /* MAIL */
512                                    US"550",     /* PREDATA */
513                                    US"550",     /* MIME */
514                                    US"550",     /* DKIM */
515                                    US"550",     /* DATA */
516 #ifndef DISABLE_PRDR
517                                    US"550",    /* RCPT PRDR */
518 #endif
519                                    US"0",       /* not SMTP; not relevant */
520                                    US"503",     /* AUTH */
521                                    US"550",     /* connect */
522                                    US"458",     /* ETRN */
523                                    US"550",     /* EXPN */
524                                    US"550",     /* HELO/EHLO */
525                                    US"0",       /* MAILAUTH; not relevant */
526                                    US"0",       /* not SMTP; not relevant */
527                                    US"0",       /* NOTQUIT; not relevant */
528                                    US"0",       /* QUIT; not relevant */
529                                    US"550",     /* STARTTLS */
530                                    US"252",     /* VRFY */
531                                    US"0",       /* delivery; not relevant */
532                                    US"0"        /* unknown; not relevant */
533                                  };
534
535 uschar *add_environment        = NULL;
536 address_item  *addr_duplicate  = NULL;
537
538 address_item address_defaults = {
539   .next =               NULL,
540   .parent =             NULL,
541   .first =              NULL,
542   .dupof =              NULL,
543   .start_router =       NULL,
544   .router =             NULL,
545   .transport =          NULL,
546   .host_list =          NULL,
547   .host_used =          NULL,
548   .fallback_hosts =     NULL,
549   .reply =              NULL,
550   .retries =            NULL,
551   .address =            NULL,
552   .unique =             NULL,
553   .cc_local_part =      NULL,
554   .lc_local_part =      NULL,
555   .local_part =         NULL,
556   .prefix =             NULL,
557   .prefix_v =           NULL,
558   .suffix =             NULL,
559   .suffix_v =           NULL,
560   .domain =             NULL,
561   .address_retry_key =  NULL,
562   .domain_retry_key =   NULL,
563   .current_dir =        NULL,
564   .home_dir =           NULL,
565   .message =            NULL,
566   .user_message =       NULL,
567   .onetime_parent =     NULL,
568   .pipe_expandn =       NULL,
569   .return_filename =    NULL,
570   .self_hostname =      NULL,
571   .shadow_message =     NULL,
572 #ifndef DISABLE_TLS
573   .cipher =             NULL,
574   .ourcert =            NULL,
575   .peercert =           NULL,
576   .peerdn =             NULL,
577   .ocsp =               OCSP_NOT_REQ,
578 #endif
579 #ifdef EXPERIMENTAL_DSN_INFO
580   .smtp_greeting =      NULL,
581   .helo_response =      NULL,
582 #endif
583   .authenticator =      NULL,
584   .auth_id =            NULL,
585   .auth_sndr =          NULL,
586   .dsn_orcpt =          NULL,
587   .dsn_flags =          0,
588   .dsn_aware =          0,
589   .uid =                (uid_t)(-1),
590   .gid =                (gid_t)(-1),
591   .flags =              { 0 },
592   .domain_cache =       { 0 },                /* domain_cache - any larger array should be zeroed */
593   .localpart_cache =    { 0 },                /* localpart_cache - ditto */
594   .mode =               -1,
595   .more_errno =         0,
596   .delivery_time =      {.tv_sec = 0, .tv_usec = 0},
597   .basic_errno =        ERRNO_UNKNOWNERROR,
598   .child_count =        0,
599   .return_file =        -1,
600   .special_action =     SPECIAL_NONE,
601   .transport_return =   DEFER,
602   .prop = {                                     /* fields that are propagated to children */
603     .address_data =     NULL,
604     .domain_data =      NULL,
605     .localpart_data =   NULL,
606     .errors_address =   NULL,
607     .extra_headers =    NULL,
608     .remove_headers =   NULL,
609     .variables =        NULL,
610 #ifdef EXPERIMENTAL_SRS_ALT
611     .srs_sender =       NULL,
612 #endif
613     .ignore_error =     FALSE,
614 #ifdef SUPPORT_I18N
615     .utf8_msg =         FALSE,
616     .utf8_downcvt =     FALSE,
617     .utf8_downcvt_maybe = FALSE
618 #endif
619   }
620 };
621
622 uschar *address_file           = NULL;
623 uschar *address_pipe           = NULL;
624 tree_node *addresslist_anchor  = NULL;
625 int     addresslist_count      = 0;
626 gid_t  *admin_groups           = NULL;
627
628 #ifdef EXPERIMENTAL_ARC
629 struct arc_set *arc_received    = NULL;
630 int     arc_received_instance   = 0;
631 int     arc_oldest_pass         = 0;
632 const uschar *arc_state         = NULL;
633 const uschar *arc_state_reason  = NULL;
634 #endif
635
636 uschar *authenticated_fail_id  = NULL;
637 uschar *authenticated_id       = NULL;
638 uschar *authenticated_sender   = NULL;
639 auth_instance  *auths          = NULL;
640 uschar *auth_advertise_hosts   = US"*";
641 auth_instance auth_defaults    = {
642     .next =             NULL,
643     .name =             NULL,
644     .info =             NULL,
645     .options_block =    NULL,
646     .driver_name =      NULL,
647     .advertise_condition = NULL,
648     .client_condition = NULL,
649     .public_name =      NULL,
650     .set_id =           NULL,
651     .set_client_id =    NULL,
652     .mail_auth_condition = NULL,
653     .server_debug_string = NULL,
654     .server_condition = NULL,
655     .client =           FALSE,
656     .server =           FALSE,
657     .advertised =       FALSE
658 };
659
660 uschar *auth_defer_msg         = US"reason not recorded";
661 uschar *auth_defer_user_msg    = US"";
662 uschar *auth_vars[AUTH_VARS];
663 int     auto_thaw              = 0;
664 #ifdef WITH_CONTENT_SCAN
665 int     av_failed              = FALSE; /* boolean but accessed as vtype_int*/
666 uschar *av_scanner             = US"sophie:/var/run/sophie";  /* AV scanner */
667 #endif
668
669 #if BASE_62 == 62
670 uschar *base62_chars=
671     US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
672 #else
673 uschar *base62_chars= US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
674 #endif
675
676 uschar *bi_command             = NULL;
677 uschar *big_buffer             = NULL;
678 int     big_buffer_size        = BIG_BUFFER_SIZE;
679 #ifdef EXPERIMENTAL_BRIGHTMAIL
680 uschar *bmi_alt_location       = NULL;
681 uschar *bmi_base64_tracker_verdict = NULL;
682 uschar *bmi_base64_verdict     = NULL;
683 uschar *bmi_config_file        = US"/opt/brightmail/etc/brightmail.cfg";
684 int     bmi_deliver            = 1;
685 int     bmi_run                = 0;
686 uschar *bmi_verdicts           = NULL;
687 #endif
688 int     bsmtp_transaction_linecount = 0;
689 int     body_8bitmime          = 0;
690 int     body_linecount         = 0;
691 int     body_zerocount         = 0;
692 uschar *bounce_message_file    = NULL;
693 uschar *bounce_message_text    = NULL;
694 uschar *bounce_recipient       = NULL;
695 int     bounce_return_linesize_limit = 998;
696 int     bounce_return_size_limit = 100*1024;
697 uschar *bounce_sender_authentication = NULL;
698
699 uschar *callout_address        = NULL;
700 int     callout_cache_domain_positive_expire = 7*24*60*60;
701 int     callout_cache_domain_negative_expire = 3*60*60;
702 int     callout_cache_positive_expire = 24*60*60;
703 int     callout_cache_negative_expire = 2*60*60;
704 uschar *callout_random_local_part = US"$primary_hostname-$tod_epoch-testing";
705 uschar *check_dns_names_pattern= US"(?i)^(?>(?(1)\\.|())[^\\W](?>[a-z0-9/_-]*[^\\W])?)+(\\.?)$";
706 int     check_log_inodes       = 100;
707 int_eximarith_t check_log_space = 10*1024;      /* 10K Kbyte == 10MB */
708 int     check_spool_inodes     = 100;
709 int_eximarith_t check_spool_space = 10*1024;    /* 10K Kbyte == 10MB */
710
711 uschar *chunking_advertise_hosts = US"*";
712 unsigned chunking_datasize     = 0;
713 unsigned chunking_data_left    = 0;
714 chunking_state_t chunking_state= CHUNKING_NOT_OFFERED;
715 const pcre *regex_CHUNKING     = NULL;
716
717 uschar *client_authenticator   = NULL;
718 uschar *client_authenticated_id = NULL;
719 uschar *client_authenticated_sender = NULL;
720 int     clmacro_count          = 0;
721 uschar *clmacros[MAX_CLMACROS];
722 FILE   *config_file            = NULL;
723 const uschar *config_filename  = NULL;
724 int     config_lineno          = 0;
725 #ifdef CONFIGURE_GROUP
726 gid_t   config_gid             = CONFIGURE_GROUP;
727 #else
728 gid_t   config_gid             = 0;
729 #endif
730 uschar *config_main_filelist   = US CONFIGURE_FILE
731                          "\0<-----------Space to patch configure_filename->";
732 uschar *config_main_filename   = NULL;
733 uschar *config_main_directory  = NULL;
734
735 #ifdef CONFIGURE_OWNER
736 uid_t   config_uid             = CONFIGURE_OWNER;
737 #else
738 uid_t   config_uid             = 0;
739 #endif
740
741 int     connection_max_messages= -1;
742 uschar *continue_proxy_cipher  = NULL;
743 BOOL    continue_proxy_dane    = FALSE;
744 uschar *continue_proxy_sni     = NULL;
745 uschar *continue_hostname      = NULL;
746 uschar *continue_host_address  = NULL;
747 int     continue_sequence      = 1;
748 uschar *continue_transport     = NULL;
749
750 uschar *csa_status             = NULL;
751 cut_t   cutthrough = {
752   .callout_hold_only =  FALSE,                          /* verify-only: normal delivery */
753   .delivery =           FALSE,                          /* when to attempt */
754   .defer_pass =         FALSE,                          /* on defer: spool locally */
755   .is_tls =             FALSE,                          /* not a TLS conn yet */
756   .cctx =               {.sock = -1},                   /* open connection */
757   .nrcpt =              0,                              /* number of addresses */
758 };
759
760 int     daemon_notifier_fd     = -1;
761 uschar *daemon_smtp_port       = US"smtp";
762 int     daemon_startup_retries = 9;
763 int     daemon_startup_sleep   = 30;
764
765 #ifdef EXPERIMENTAL_DCC
766 uschar *dcc_header             = NULL;
767 uschar *dcc_result             = NULL;
768 uschar *dccifd_address         = US"/usr/local/dcc/var/dccifd";
769 uschar *dccifd_options         = US"header";
770 #endif
771
772 int     debug_fd               = -1;
773 FILE   *debug_file             = NULL;
774 int     debug_notall[]         = {
775   Di_memory,
776   Di_noutf8,
777   -1
778 };
779 bit_table debug_options[]      = { /* must be in alphabetical order and use
780                                  only the enum values from macro.h */
781   BIT_TABLE(D, acl),
782   BIT_TABLE(D, all),
783   BIT_TABLE(D, auth),
784   BIT_TABLE(D, deliver),
785   BIT_TABLE(D, dns),
786   BIT_TABLE(D, dnsbl),
787   BIT_TABLE(D, exec),
788   BIT_TABLE(D, expand),
789   BIT_TABLE(D, filter),
790   BIT_TABLE(D, hints_lookup),
791   BIT_TABLE(D, host_lookup),
792   BIT_TABLE(D, ident),
793   BIT_TABLE(D, interface),
794   BIT_TABLE(D, lists),
795   BIT_TABLE(D, load),
796   BIT_TABLE(D, local_scan),
797   BIT_TABLE(D, lookup),
798   BIT_TABLE(D, memory),
799   BIT_TABLE(D, noutf8),
800   BIT_TABLE(D, pid),
801   BIT_TABLE(D, process_info),
802   BIT_TABLE(D, queue_run),
803   BIT_TABLE(D, receive),
804   BIT_TABLE(D, resolver),
805   BIT_TABLE(D, retry),
806   BIT_TABLE(D, rewrite),
807   BIT_TABLE(D, route),
808   BIT_TABLE(D, timestamp),
809   BIT_TABLE(D, tls),
810   BIT_TABLE(D, transport),
811   BIT_TABLE(D, uid),
812   BIT_TABLE(D, verify),
813 };
814 int     debug_options_count    = nelem(debug_options);
815
816 unsigned int debug_selector    = 0;
817 int     delay_warning[DELAY_WARNING_SIZE] = { DELAY_WARNING_SIZE, 1, 24*60*60 };
818 uschar *delay_warning_condition=
819   US"${if or {"
820             "{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }"
821             "{ match{$h_precedence:}{(?i)bulk|list|junk} }"
822             "{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }"
823             "} {no}{yes}}";
824 uschar *deliver_address_data   = NULL;
825 int     deliver_datafile       = -1;
826 const uschar *deliver_domain   = NULL;
827 uschar *deliver_domain_data    = NULL;
828 const uschar *deliver_domain_orig = NULL;
829 const uschar *deliver_domain_parent = NULL;
830 time_t  deliver_frozen_at      = 0;
831 uschar *deliver_home           = NULL;
832 const uschar *deliver_host     = NULL;
833 const uschar *deliver_host_address = NULL;
834 int     deliver_host_port      = 0;
835 uschar *deliver_in_buffer      = NULL;
836 ino_t   deliver_inode          = 0;
837 uschar *deliver_localpart      = NULL;
838 uschar *deliver_localpart_data = NULL;
839 uschar *deliver_localpart_orig = NULL;
840 uschar *deliver_localpart_parent = NULL;
841 uschar *deliver_localpart_prefix = NULL;
842 uschar *deliver_localpart_prefix_v = NULL;
843 uschar *deliver_localpart_suffix = NULL;
844 uschar *deliver_localpart_suffix_v = NULL;
845 uschar *deliver_out_buffer     = NULL;
846 int     deliver_queue_load_max = -1;
847 address_item  *deliver_recipients = NULL;
848 uschar *deliver_selectstring   = NULL;
849 uschar *deliver_selectstring_sender = NULL;
850
851 #ifndef DISABLE_DKIM
852 unsigned dkim_collect_input      = 0;
853 uschar *dkim_cur_signer          = NULL;
854 int     dkim_key_length          = 0;
855 void   *dkim_signatures          = NULL;
856 uschar *dkim_signers             = NULL;
857 uschar *dkim_signing_domain      = NULL;
858 uschar *dkim_signing_selector    = NULL;
859 uschar *dkim_verify_hashes       = US"sha256:sha512";
860 uschar *dkim_verify_keytypes     = US"ed25519:rsa";
861 uschar *dkim_verify_min_keysizes = US"rsa=1024 ed25519=250";
862 BOOL    dkim_verify_minimal      = FALSE;
863 uschar *dkim_verify_overall      = NULL;
864 uschar *dkim_verify_signers      = US"$dkim_signers";
865 uschar *dkim_verify_status       = NULL;
866 uschar *dkim_verify_reason       = NULL;
867 #endif
868 #ifdef SUPPORT_DMARC
869 uschar *dmarc_domain_policy     = NULL;
870 uschar *dmarc_forensic_sender   = NULL;
871 uschar *dmarc_history_file      = NULL;
872 uschar *dmarc_status            = NULL;
873 uschar *dmarc_status_text       = NULL;
874 uschar *dmarc_tld_file          = NULL;
875 uschar *dmarc_used_domain       = NULL;
876 #endif
877
878 uschar *dns_again_means_nonexist = NULL;
879 int     dns_csa_search_limit   = 5;
880 int     dns_cname_loops        = 1;
881 #ifdef SUPPORT_DANE
882 int     dns_dane_ok            = -1;
883 #endif
884 uschar *dns_ipv4_lookup        = NULL;
885 int     dns_retrans            = 0;
886 int     dns_retry              = 0;
887 int     dns_dnssec_ok          = -1; /* <0 = not coerced */
888 uschar *dns_trust_aa           = NULL;
889 int     dns_use_edns0          = -1; /* <0 = not coerced */
890 uschar *dnslist_domain         = NULL;
891 uschar *dnslist_matched        = NULL;
892 uschar *dnslist_text           = NULL;
893 uschar *dnslist_value          = NULL;
894 tree_node *domainlist_anchor   = NULL;
895 int     domainlist_count       = 0;
896 uschar *dsn_from               = US DEFAULT_DSN_FROM;
897
898 int     errno_quota            = ERRNO_QUOTA;
899 uschar *errors_copy            = NULL;
900 int     error_handling         = ERRORS_SENDER;
901 uschar *errors_reply_to        = NULL;
902 int     errors_sender_rc       = EXIT_FAILURE;
903 #ifndef DISABLE_EVENT
904 uschar *event_action             = NULL;        /* expansion for delivery events */
905 uschar *event_data               = NULL;        /* auxiliary data variable for event */
906 int     event_defer_errno        = 0;
907 const uschar *event_name         = NULL;        /* event name variable */
908 #endif
909
910
911 gid_t   exim_gid               = EXIM_GID;
912 uschar *exim_path              = US BIN_DIRECTORY "/exim"
913                         "\0<---------------Space to patch exim_path->";
914 uid_t   exim_uid               = EXIM_UID;
915 int     expand_level           = 0;             /* Nesting depth, indent for debug */
916 int     expand_forbid          = 0;
917 int     expand_nlength[EXPAND_MAXN+1];
918 int     expand_nmax            = -1;
919 uschar *expand_nstring[EXPAND_MAXN+1];
920 uschar *expand_string_message;
921 uschar *extra_local_interfaces = NULL;
922
923 int     fake_response          = OK;
924 uschar *fake_response_text     = US"Your message has been rejected but is "
925                                    "being kept for evaluation.\nIf it was a "
926                                    "legitimate message, it may still be "
927                                    "delivered to the target recipient(s).";
928 int     filter_n[FILTER_VARIABLE_COUNT];
929 int     filter_sn[FILTER_VARIABLE_COUNT];
930 int     filter_test            = FTEST_NONE;
931 uschar *filter_test_sfile      = NULL;
932 uschar *filter_test_ufile      = NULL;
933 uschar *filter_thisaddress     = NULL;
934 int     finduser_retries       = 0;
935 uid_t   fixed_never_users[]    = { FIXED_NEVER_USERS };
936 uschar *freeze_tell            = NULL;
937 uschar *freeze_tell_config     = NULL;
938 uschar *fudged_queue_times     = US"";
939
940 uschar *gecos_name             = NULL;
941 uschar *gecos_pattern          = NULL;
942 rewrite_rule  *global_rewrite_rules = NULL;
943
944 volatile sig_atomic_t had_command_timeout = 0;
945 volatile sig_atomic_t had_command_sigterm = 0;
946 volatile sig_atomic_t had_data_timeout    = 0;
947 volatile sig_atomic_t had_data_sigint     = 0;
948 uschar *headers_charset        = US HEADERS_CHARSET;
949 int     header_insert_maxlen   = 64 * 1024;
950 header_line  *header_last      = NULL;
951 header_line  *header_list      = NULL;
952 int     header_maxsize         = HEADER_MAXSIZE;
953 int     header_line_maxsize    = 0;
954
955 header_name header_names[] = {
956   /* name               len     allow_resent    htype */
957   { US"bcc",            3,      TRUE,           htype_bcc },
958   { US"cc",             2,      TRUE,           htype_cc },
959   { US"date",           4,      TRUE,           htype_date },
960   { US"delivery-date", 13,      FALSE,          htype_delivery_date },
961   { US"envelope-to",   11,      FALSE,          htype_envelope_to },
962   { US"from",           4,      TRUE,           htype_from },
963   { US"message-id",    10,      TRUE,           htype_id },
964   { US"received",       8,      FALSE,          htype_received },
965   { US"reply-to",       8,      FALSE,          htype_reply_to },
966   { US"return-path",   11,      FALSE,          htype_return_path },
967   { US"sender",         6,      TRUE,           htype_sender },
968   { US"subject",        7,      FALSE,          htype_subject },
969   { US"to",             2,      TRUE,           htype_to }
970 };
971
972 int header_names_size          = nelem(header_names);
973
974 uschar *helo_accept_junk_hosts = NULL;
975 uschar *helo_allow_chars       = US"";
976 uschar *helo_lookup_domains    = US"@ : @[]";
977 uschar *helo_try_verify_hosts  = NULL;
978 uschar *helo_verify_hosts      = NULL;
979 const uschar *hex_digits       = CUS"0123456789abcdef";
980 uschar *hold_domains           = NULL;
981 uschar *host_data              = NULL;
982 uschar *host_lookup            = NULL;
983 uschar *host_lookup_order      = US"bydns:byaddr";
984 uschar *host_lookup_msg        = US"";
985 int     host_number            = 0;
986 uschar *host_number_string     = NULL;
987 uschar *host_reject_connection = NULL;
988 tree_node *hostlist_anchor     = NULL;
989 int     hostlist_count         = 0;
990 uschar *hosts_treat_as_local   = NULL;
991 uschar *hosts_connection_nolog = NULL;
992
993 int     ignore_bounce_errors_after = 10*7*24*60*60;  /* 10 weeks */
994 uschar *ignore_fromline_hosts  = NULL;
995 int     inetd_wait_timeout     = -1;
996 uschar *initial_cwd            = NULL;
997 uschar *interface_address      = NULL;
998 int     interface_port         = -1;
999 uschar *iterate_item           = NULL;
1000
1001 int     journal_fd             = -1;
1002
1003 uschar *keep_environment       = NULL;
1004
1005 int     keep_malformed         = 4*24*60*60;    /* 4 days */
1006
1007 uschar *eldap_dn               = NULL;
1008 int     load_average           = -2;
1009 uschar *local_from_prefix      = NULL;
1010 uschar *local_from_suffix      = NULL;
1011
1012 #if HAVE_IPV6
1013 uschar *local_interfaces       = US"<; ::0 ; 0.0.0.0";
1014 #else
1015 uschar *local_interfaces       = US"0.0.0.0";
1016 #endif
1017
1018 #ifdef HAVE_LOCAL_SCAN
1019 uschar *local_scan_data        = NULL;
1020 int     local_scan_timeout     = 5*60;
1021 #endif
1022 gid_t   local_user_gid         = (gid_t)(-1);
1023 uid_t   local_user_uid         = (uid_t)(-1);
1024
1025 tree_node *localpartlist_anchor= NULL;
1026 int     localpartlist_count    = 0;
1027 uschar *log_buffer             = NULL;
1028
1029 int     log_default[]          = { /* for initializing log_selector */
1030   Li_acl_warn_skipped,
1031   Li_connection_reject,
1032   Li_delay_delivery,
1033   Li_dkim,
1034   Li_dnslist_defer,
1035   Li_etrn,
1036   Li_host_lookup_failed,
1037   Li_lost_incoming_connection,
1038   Li_outgoing_interface, /* see d_log_interface in deliver.c */
1039   Li_msg_id,
1040   Li_queue_run,
1041   Li_rejected_header,
1042   Li_retry_defer,
1043   Li_sender_verify_fail,
1044   Li_size_reject,
1045   Li_skip_delivery,
1046   Li_smtp_confirmation,
1047 #ifdef ALLOW_INSECURE_TAINTED_DATA
1048   Li_tainted,
1049 #endif
1050   Li_tls_certificate_verified,
1051   Li_tls_cipher,
1052   -1
1053 };
1054
1055 uschar *log_file_path          = US LOG_FILE_PATH
1056                            "\0<--------------Space to patch log_file_path->";
1057
1058 int     log_notall[]           = {
1059   -1
1060 };
1061 bit_table log_options[]        = { /* must be in alphabetical order,
1062                                 with definitions from enum logbit. */
1063   BIT_TABLE(L, 8bitmime),
1064   BIT_TABLE(L, acl_warn_skipped),
1065   BIT_TABLE(L, address_rewrite),
1066   BIT_TABLE(L, all),
1067   BIT_TABLE(L, all_parents),
1068   BIT_TABLE(L, arguments),
1069   BIT_TABLE(L, connection_reject),
1070   BIT_TABLE(L, delay_delivery),
1071   BIT_TABLE(L, deliver_time),
1072   BIT_TABLE(L, delivery_size),
1073 #ifndef DISABLE_DKIM
1074   BIT_TABLE(L, dkim),
1075   BIT_TABLE(L, dkim_verbose),
1076 #endif
1077   BIT_TABLE(L, dnslist_defer),
1078   BIT_TABLE(L, dnssec),
1079   BIT_TABLE(L, etrn),
1080   BIT_TABLE(L, host_lookup_failed),
1081   BIT_TABLE(L, ident_timeout),
1082   BIT_TABLE(L, incoming_interface),
1083   BIT_TABLE(L, incoming_port),
1084   BIT_TABLE(L, lost_incoming_connection),
1085   BIT_TABLE(L, millisec),
1086   BIT_TABLE(L, msg_id),
1087   BIT_TABLE(L, msg_id_created),
1088   BIT_TABLE(L, outgoing_interface),
1089   BIT_TABLE(L, outgoing_port),
1090   BIT_TABLE(L, pid),
1091   BIT_TABLE(L, pipelining),
1092   BIT_TABLE(L, protocol_detail),
1093 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1094   BIT_TABLE(L, proxy),
1095 #endif
1096   BIT_TABLE(L, queue_run),
1097   BIT_TABLE(L, queue_time),
1098   BIT_TABLE(L, queue_time_overall),
1099   BIT_TABLE(L, receive_time),
1100   BIT_TABLE(L, received_recipients),
1101   BIT_TABLE(L, received_sender),
1102   BIT_TABLE(L, rejected_header),
1103   { US"rejected_headers", Li_rejected_header },
1104   BIT_TABLE(L, retry_defer),
1105   BIT_TABLE(L, return_path_on_delivery),
1106   BIT_TABLE(L, sender_on_delivery),
1107   BIT_TABLE(L, sender_verify_fail),
1108   BIT_TABLE(L, size_reject),
1109   BIT_TABLE(L, skip_delivery),
1110   BIT_TABLE(L, smtp_confirmation),
1111   BIT_TABLE(L, smtp_connection),
1112   BIT_TABLE(L, smtp_incomplete_transaction),
1113   BIT_TABLE(L, smtp_mailauth),
1114   BIT_TABLE(L, smtp_no_mail),
1115   BIT_TABLE(L, smtp_protocol_error),
1116   BIT_TABLE(L, smtp_syntax_error),
1117   BIT_TABLE(L, subject),
1118 #ifdef ALLOW_INSECURE_TAINTED_DATA
1119   BIT_TABLE(L, tainted),
1120 #endif
1121   BIT_TABLE(L, tls_certificate_verified),
1122   BIT_TABLE(L, tls_cipher),
1123   BIT_TABLE(L, tls_peerdn),
1124   BIT_TABLE(L, tls_resumption),
1125   BIT_TABLE(L, tls_sni),
1126   BIT_TABLE(L, unknown_in_list),
1127 };
1128 int     log_options_count      = nelem(log_options);
1129
1130 int     log_reject_target      = 0;
1131 unsigned int log_selector[log_selector_size]; /* initialized in main() */
1132 uschar *log_selector_string    = NULL;
1133 FILE   *log_stderr             = NULL;
1134 uschar *login_sender_address   = NULL;
1135 uschar *lookup_dnssec_authenticated = NULL;
1136 int     lookup_open_max        = 25;
1137 uschar *lookup_value           = NULL;
1138
1139 macro_item *macros_user        = NULL;
1140 uschar *mailstore_basename     = NULL;
1141 #ifdef WITH_CONTENT_SCAN
1142 uschar *malware_name           = NULL;  /* Virus Name */
1143 #endif
1144 int     max_received_linelength= 0;
1145 int     max_username_length    = 0;
1146 int     message_age            = 0;
1147 uschar *message_body           = NULL;
1148 uschar *message_body_end       = NULL;
1149 int     message_body_size      = 0;
1150 int     message_body_visible   = 500;
1151 int     message_ended          = END_NOTSTARTED;
1152 uschar *message_headers        = NULL;
1153 uschar *message_id;
1154 uschar *message_id_domain      = NULL;
1155 uschar *message_id_text        = NULL;
1156 struct timeval message_id_tv   = { 0, 0 };
1157 uschar  message_id_option[MESSAGE_ID_LENGTH + 3];
1158 uschar *message_id_external;
1159 int     message_linecount      = 0;
1160 int     message_size           = 0;
1161 uschar *message_size_limit     = US"50M";
1162 #ifdef SUPPORT_I18N
1163 int     message_utf8_downconvert = 0;   /* -1 ifneeded; 0 never; 1 always */
1164 #endif
1165 uschar  message_subdir[2]      = { 0, 0 };
1166 uschar *message_reference      = NULL;
1167
1168 /* MIME ACL expandables */
1169 #ifdef WITH_CONTENT_SCAN
1170 int     mime_anomaly_level     = 0;
1171 const uschar *mime_anomaly_text      = NULL;
1172 uschar *mime_boundary          = NULL;
1173 uschar *mime_charset           = NULL;
1174 uschar *mime_content_description = NULL;
1175 uschar *mime_content_disposition = NULL;
1176 uschar *mime_content_id        = NULL;
1177 unsigned int mime_content_size = 0;
1178 uschar *mime_content_transfer_encoding = NULL;
1179 uschar *mime_content_type      = NULL;
1180 uschar *mime_decoded_filename  = NULL;
1181 uschar *mime_filename          = NULL;
1182 int     mime_is_multipart      = 0;
1183 int     mime_is_coverletter    = 0;
1184 int     mime_is_rfc822         = 0;
1185 int     mime_part_count        = -1;
1186 #endif
1187
1188 uid_t  *never_users            = NULL;
1189 uschar *notifier_socket        = US"$spool_directory/" NOTIFIER_SOCKET_NAME ;
1190
1191 const int on                   = 1;     /* for setsockopt */
1192 const int off                  = 0;
1193
1194 uid_t   original_euid;
1195 gid_t   originator_gid;
1196 uschar *originator_login       = NULL;
1197 uschar *originator_name        = NULL;
1198 uid_t   originator_uid;
1199 uschar *override_local_interfaces = NULL;
1200 uschar *override_pid_file_path = NULL;
1201
1202 uschar *percent_hack_domains   = NULL;
1203 uschar *pid_file_path          = US PID_FILE_PATH
1204                            "\0<--------------Space to patch pid_file_path->";
1205 #ifndef DISABLE_PIPE_CONNECT
1206 uschar *pipe_connect_advertise_hosts = US"*";
1207 #endif
1208 uschar *pipelining_advertise_hosts = US"*";
1209 uschar *primary_hostname       = NULL;
1210 uschar *process_info;
1211 int     process_info_len       = 0;
1212 uschar *process_log_path       = NULL;
1213 const uschar *process_purpose  = US"fresh-exec";
1214
1215 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1216 uschar *hosts_proxy            = NULL;
1217 uschar *proxy_external_address = NULL;
1218 int     proxy_external_port    = 0;
1219 uschar *proxy_local_address    = NULL;
1220 int     proxy_local_port       = 0;
1221 int     proxy_protocol_timeout = 3;
1222 #endif
1223
1224 uschar *prvscheck_address      = NULL;
1225 uschar *prvscheck_keynum       = NULL;
1226 uschar *prvscheck_result       = NULL;
1227
1228
1229 const uschar *qualify_domain_recipient = NULL;
1230 uschar *qualify_domain_sender  = NULL;
1231 uschar *queue_domains          = NULL;
1232 int     queue_interval         = -1;
1233 uschar *queue_name             = US"";
1234 uschar *queue_name_dest        = NULL;
1235 uschar *queue_only_file        = NULL;
1236 int     queue_only_load        = -1;
1237 uschar *queue_run_max          = US"5";
1238 pid_t   queue_run_pid          = (pid_t)0;
1239 int     queue_run_pipe         = -1;
1240 unsigned queue_size            = 0;
1241 time_t  queue_size_next        = 0;
1242 uschar *queue_smtp_domains     = NULL;
1243
1244 uint32_t random_seed           = 0;
1245 tree_node *ratelimiters_cmd    = NULL;
1246 tree_node *ratelimiters_conn   = NULL;
1247 tree_node *ratelimiters_mail   = NULL;
1248 uschar *raw_active_hostname    = NULL;
1249 uschar *raw_sender             = NULL;
1250 uschar **raw_recipients        = NULL;
1251 int     raw_recipients_count   = 0;
1252
1253 int     rcpt_count             = 0;
1254 int     rcpt_fail_count        = 0;
1255 int     rcpt_defer_count       = 0;
1256 gid_t   real_gid;
1257 uid_t   real_uid;
1258 int     receive_linecount      = 0;
1259 int     receive_messagecount   = 0;
1260 int     receive_timeout        = 0;
1261 int     received_count         = 0;
1262 uschar *received_for           = NULL;
1263
1264 /*  This is the default text for Received headers generated by Exim. The
1265 date  will be automatically added on the end. */
1266
1267 uschar *received_header_text   = US
1268      "Received: "
1269      "${if def:sender_rcvhost {from $sender_rcvhost\n\t}"
1270        "{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}"
1271          "${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}"
1272      "by $primary_hostname "
1273      "${if def:received_protocol {with $received_protocol }}"
1274 #ifndef DISABLE_TLS
1275      "${if def:tls_in_ver        { ($tls_in_ver)}}"
1276      "${if def:tls_in_cipher_std { tls $tls_in_cipher_std\n\t}}"
1277 #endif
1278      "(Exim $version_number)\n\t"
1279      "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
1280      "id $message_exim_id"
1281      "${if def:received_for {\n\tfor $received_for}}"
1282      "\0<---------------Space to patch received_header_text->";
1283
1284 int     received_headers_max   = 30;
1285 uschar *received_protocol      = NULL;
1286 struct timeval received_time   = { 0, 0 };
1287 struct timeval received_time_taken = { 0, 0 };
1288 uschar *recipient_data         = NULL;
1289 uschar *recipient_unqualified_hosts = NULL;
1290 uschar *recipient_verify_failure = NULL;
1291 int     recipients_count       = 0;
1292 recipient_item  *recipients_list = NULL;
1293 int     recipients_list_max    = 0;
1294 int     recipients_max         = 0;
1295 const pcre *regex_AUTH         = NULL;
1296 const pcre *regex_check_dns_names = NULL;
1297 const pcre *regex_From         = NULL;
1298 const pcre *regex_IGNOREQUOTA  = NULL;
1299 const pcre *regex_PIPELINING   = NULL;
1300 const pcre *regex_SIZE         = NULL;
1301 #ifndef DISABLE_PIPE_CONNECT
1302 const pcre *regex_EARLY_PIPE   = NULL;
1303 #endif
1304 const pcre *regex_ismsgid      = NULL;
1305 const pcre *regex_smtp_code    = NULL;
1306 uschar *regex_vars[REGEX_VARS];
1307 #ifdef WHITELIST_D_MACROS
1308 const pcre *regex_whitelisted_macro = NULL;
1309 #endif
1310 #ifdef WITH_CONTENT_SCAN
1311 uschar *regex_match_string     = NULL;
1312 #endif
1313 int     remote_delivery_count  = 0;
1314 int     remote_max_parallel    = 2;
1315 uschar *remote_sort_domains    = NULL;
1316 int     retry_data_expire      = 7*24*60*60;
1317 int     retry_interval_max     = 24*60*60;
1318 int     retry_maximum_timeout  = 0;        /* set from retry config */
1319 retry_config  *retries         = NULL;
1320 uschar *return_path            = NULL;
1321 int     rewrite_existflags     = 0;
1322 uschar *rfc1413_hosts          = US"@[]";
1323 int     rfc1413_query_timeout  = 0;
1324 uid_t   root_gid               = ROOT_GID;
1325 uid_t   root_uid               = ROOT_UID;
1326
1327 router_instance  *routers  = NULL;
1328 router_instance  router_defaults = {
1329     .next =                     NULL,
1330     .name =                     NULL,
1331     .info =                     NULL,
1332     .options_block =            NULL,
1333     .driver_name =              NULL,
1334
1335     .address_data =             NULL,
1336 #ifdef EXPERIMENTAL_BRIGHTMAIL
1337     .bmi_rule =                 NULL,
1338 #endif
1339     .cannot_route_message =     NULL,
1340     .condition =                NULL,
1341     .current_directory =        NULL,
1342     .debug_string =             NULL,
1343     .domains =                  NULL,
1344     .errors_to =                NULL,
1345     .expand_gid =               NULL,
1346     .expand_uid =               NULL,
1347     .expand_more =              NULL,
1348     .expand_unseen =            NULL,
1349     .extra_headers =            NULL,
1350     .fallback_hosts =           NULL,
1351     .home_directory =           NULL,
1352     .ignore_target_hosts =      NULL,
1353     .local_parts =              NULL,
1354     .pass_router_name =         NULL,
1355     .prefix =                   NULL,
1356     .redirect_router_name =     NULL,
1357     .remove_headers =           NULL,
1358     .require_files =            NULL,
1359     .router_home_directory =    NULL,
1360     .self =                     US"freeze",
1361     .senders =                  NULL,
1362     .suffix =                   NULL,
1363     .translate_ip_address =     NULL,
1364     .transport_name =           NULL,
1365
1366     .address_test =             TRUE,
1367 #ifdef EXPERIMENTAL_BRIGHTMAIL
1368     .bmi_deliver_alternate =    FALSE,
1369     .bmi_deliver_default =      FALSE,
1370     .bmi_dont_deliver =         FALSE,
1371 #endif
1372     .expn =                     TRUE,
1373     .caseful_local_part =       FALSE,
1374     .check_local_user =         FALSE,
1375     .disable_logging =          FALSE,
1376     .fail_verify_recipient =    FALSE,
1377     .fail_verify_sender =       FALSE,
1378     .gid_set =                  FALSE,
1379     .initgroups =               FALSE,
1380     .log_as_local =             TRUE_UNSET,
1381     .more =                     TRUE,
1382     .pass_on_timeout =          FALSE,
1383     .prefix_optional =          FALSE,
1384     .repeat_use =               TRUE,
1385     .retry_use_local_part =     TRUE_UNSET,
1386     .same_domain_copy_routing = FALSE,
1387     .self_rewrite =             FALSE,
1388     .set =                      NULL,
1389     .suffix_optional =          FALSE,
1390     .verify_only =              FALSE,
1391     .verify_recipient =         TRUE,
1392     .verify_sender =            TRUE,
1393     .uid_set =                  FALSE,
1394     .unseen =                   FALSE,
1395     .dsn_lasthop =              FALSE,
1396
1397     .self_code =                self_freeze,
1398     .uid =                      (uid_t)(-1),
1399     .gid =                      (gid_t)(-1),
1400
1401     .fallback_hostlist =        NULL,
1402     .transport =                NULL,
1403     .pass_router =              NULL,
1404     .redirect_router =          NULL,
1405
1406     .dnssec =                   { .request= US"*", .require=NULL },
1407 };
1408
1409 uschar *router_name            = NULL;
1410 tree_node *router_var          = NULL;
1411
1412 ip_address_item *running_interfaces = NULL;
1413
1414 /* This is a weird one. The following string gets patched in the binary by the
1415 script that sets up a copy of Exim for running in the test harness. It seems
1416 that compilers are now clever, and share constant strings if they can.
1417 Elsewhere in Exim the string "<" is used. The compiler optimization seems to
1418 make use of the end of this string in order to save space. So the patching then
1419 wrecks this. We defeat this optimization by adding some additional characters
1420 onto the end of the string. */
1421
1422 uschar *running_status         = US">>>running<<<" "\0EXTRA";
1423
1424 int     runrc                  = 0;
1425
1426 uschar *search_error_message   = NULL;
1427 uschar *self_hostname          = NULL;
1428 uschar *sender_address         = NULL;
1429 unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32];
1430 uschar *sender_address_data    = NULL;
1431 uschar *sender_address_unrewritten = NULL;
1432 uschar *sender_data            = NULL;
1433 unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32];
1434 uschar *sender_fullhost        = NULL;
1435 uschar *sender_helo_name       = NULL;
1436 uschar **sender_host_aliases   = &no_aliases;
1437 uschar *sender_host_address    = NULL;
1438 uschar *sender_host_authenticated = NULL;
1439 uschar *sender_host_auth_pubname  = NULL;
1440 unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32];
1441 uschar *sender_host_name       = NULL;
1442 int     sender_host_port       = 0;
1443 uschar *sender_ident           = NULL;
1444 uschar *sender_rate            = NULL;
1445 uschar *sender_rate_limit      = NULL;
1446 uschar *sender_rate_period     = NULL;
1447 uschar *sender_rcvhost         = NULL;
1448 uschar *sender_unqualified_hosts = NULL;
1449 uschar *sender_verify_failure = NULL;
1450 address_item *sender_verified_list  = NULL;
1451 address_item *sender_verified_failed = NULL;
1452 int     sender_verified_rc     = -1;
1453 uschar *sending_ip_address     = NULL;
1454 int     sending_port           = -1;
1455 SIGNAL_BOOL sigalrm_seen       = FALSE;
1456 const uschar *sigalarm_setter  = NULL;
1457 uschar **sighup_argv           = NULL;
1458 int     slow_lookup_log        = 0;     /* millisecs, zero disables */
1459 int     smtp_accept_count      = 0;
1460 int     smtp_accept_max        = 20;
1461 int     smtp_accept_max_nonmail= 10;
1462 uschar *smtp_accept_max_nonmail_hosts = US"*";
1463 uschar *smtp_accept_max_per_connection = US"1000";
1464 uschar *smtp_accept_max_per_host = NULL;
1465 int     smtp_accept_queue      = 0;
1466 int     smtp_accept_queue_per_connection = 10;
1467 int     smtp_accept_reserve    = 0;
1468 uschar *smtp_active_hostname   = NULL;
1469 uschar *smtp_banner            = US"$smtp_active_hostname ESMTP "
1470                              "Exim $version_number $tod_full"
1471                              "\0<---------------Space to patch smtp_banner->";
1472 int     smtp_ch_index          = 0;
1473 uschar *smtp_cmd_argument      = NULL;
1474 uschar *smtp_cmd_buffer        = NULL;
1475 struct timeval smtp_connection_start  = {0,0};
1476 uschar  smtp_connection_had[SMTP_HBUFF_SIZE];
1477 int     smtp_connect_backlog   = 20;
1478 double  smtp_delay_mail        = 0.0;
1479 double  smtp_delay_rcpt        = 0.0;
1480 FILE   *smtp_in                = NULL;
1481 int     smtp_load_reserve      = -1;
1482 int     smtp_mailcmd_count     = 0;
1483 FILE   *smtp_out               = NULL;
1484 uschar *smtp_etrn_command      = NULL;
1485 int     smtp_max_synprot_errors= 3;
1486 int     smtp_max_unknown_commands = 3;
1487 uschar *smtp_notquit_reason    = NULL;
1488 unsigned smtp_peer_options     = 0;
1489 unsigned smtp_peer_options_wrap= 0;
1490 uschar *smtp_ratelimit_hosts   = NULL;
1491 uschar *smtp_ratelimit_mail    = NULL;
1492 uschar *smtp_ratelimit_rcpt    = NULL;
1493 uschar *smtp_read_error        = US"";
1494 int     smtp_receive_timeout   = 5*60;
1495 uschar *smtp_receive_timeout_s = NULL;
1496 uschar *smtp_reserve_hosts     = NULL;
1497 int     smtp_rlm_base          = 0;
1498 double  smtp_rlm_factor        = 0.0;
1499 int     smtp_rlm_limit         = 0;
1500 int     smtp_rlm_threshold     = INT_MAX;
1501 int     smtp_rlr_base          = 0;
1502 double  smtp_rlr_factor        = 0.0;
1503 int     smtp_rlr_limit         = 0;
1504 int     smtp_rlr_threshold     = INT_MAX;
1505 #ifdef SUPPORT_I18N
1506 uschar *smtputf8_advertise_hosts = US"*";       /* overridden under test-harness */
1507 #endif
1508
1509 #ifdef WITH_CONTENT_SCAN
1510 uschar *spamd_address          = US"127.0.0.1 783";
1511 uschar *spam_bar               = NULL;
1512 uschar *spam_report            = NULL;
1513 uschar *spam_action            = NULL;
1514 uschar *spam_score             = NULL;
1515 uschar *spam_score_int         = NULL;
1516 #endif
1517 #ifdef SUPPORT_SPF
1518 uschar *spf_guess              = US"v=spf1 a/24 mx/24 ptr ?all";
1519 uschar *spf_header_comment     = NULL;
1520 uschar *spf_received           = NULL;
1521 uschar *spf_result             = NULL;
1522 uschar *spf_smtp_comment       = NULL;
1523 uschar *spf_smtp_comment_template
1524                     /* Used to be: "Please%_see%_http://www.open-spf.org/Why?id=%{S}&ip=%{C}&receiver=%{R}" */
1525                                = US"Please%_see%_http://www.open-spf.org/Why";
1526
1527 #endif
1528
1529 FILE   *spool_data_file        = NULL;
1530 uschar *spool_directory        = US SPOOL_DIRECTORY
1531                            "\0<--------------Space to patch spool_directory->";
1532 #ifdef EXPERIMENTAL_SRS_ALT
1533 uschar *srs_config             = NULL;
1534 uschar *srs_db_address         = NULL;
1535 uschar *srs_db_key             = NULL;
1536 int     srs_hashlength         = 6;
1537 int     srs_hashmin            = -1;
1538 int     srs_maxage             = 31;
1539 uschar *srs_orig_recipient     = NULL;
1540 uschar *srs_orig_sender        = NULL;
1541 uschar *srs_recipient          = NULL;
1542 uschar *srs_secrets            = NULL;
1543 uschar *srs_status             = NULL;
1544 #endif
1545 #ifdef SUPPORT_SRS
1546 uschar *srs_recipient          = NULL;
1547 #endif
1548 int     string_datestamp_offset= -1;
1549 int     string_datestamp_length= 0;
1550 int     string_datestamp_type  = -1;
1551 const uschar *submission_domain = NULL;
1552 const uschar *submission_name  = NULL;
1553 int     syslog_facility        = LOG_MAIL;
1554 uschar *syslog_processname     = US"exim";
1555 uschar *system_filter          = NULL;
1556
1557 uschar *system_filter_directory_transport = NULL;
1558 uschar *system_filter_file_transport = NULL;
1559 uschar *system_filter_pipe_transport = NULL;
1560 uschar *system_filter_reply_transport = NULL;
1561
1562 gid_t   system_filter_gid      = 0;
1563 uid_t   system_filter_uid      = (uid_t)-1;
1564
1565 blob    tcp_fastopen_nodata    = { .data = NULL, .len = 0 };
1566 tfo_state_t tcp_out_fastopen   = TFO_NOT_USED;
1567 #ifdef USE_TCP_WRAPPERS
1568 uschar *tcp_wrappers_daemon_name = US TCP_WRAPPERS_DAEMON_NAME;
1569 #endif
1570 int     test_harness_load_avg  = 0;
1571 int     thismessage_size_limit = 0;
1572 int     timeout_frozen_after   = 0;
1573 #ifdef MEASURE_TIMING
1574 struct timeval timestamp_startup;
1575 #endif
1576
1577 transport_instance  *transports = NULL;
1578
1579 transport_instance  transport_defaults = {
1580     /* All non-mentioned elements zero/NULL/FALSE */
1581     .batch_max =                1,
1582     .multi_domain =             TRUE,
1583     .max_addresses =            100,
1584     .connection_max_messages =  500,
1585     .uid =                      (uid_t)(-1),
1586     .gid =                      (gid_t)(-1),
1587     .filter_timeout =           300,
1588     .retry_use_local_part =     TRUE_UNSET,     /* retry_use_local_part: BOOL, but set neither
1589                                                  1 nor 0 so can detect unset */
1590 };
1591
1592 int     transport_count;
1593 uschar *transport_name          = NULL;
1594 int     transport_newlines;
1595 const uschar **transport_filter_argv  = NULL;
1596 int     transport_filter_timeout;
1597 int     transport_write_timeout= 0;
1598
1599 tree_node  *tree_dns_fails     = NULL;
1600 tree_node  *tree_duplicates    = NULL;
1601 tree_node  *tree_nonrecipients = NULL;
1602 tree_node  *tree_unusable      = NULL;
1603
1604 gid_t  *trusted_groups         = NULL;
1605 uid_t  *trusted_users          = NULL;
1606 uschar *timezone_string        = US TIMEZONE_DEFAULT;
1607
1608 uschar *unknown_login          = NULL;
1609 uschar *unknown_username       = NULL;
1610 uschar *untrusted_set_sender   = NULL;
1611
1612 /*  A regex for matching a "From_" line in an incoming message, in the form
1613
1614     From ph10 Fri Jan  5 12:35 GMT 1996
1615
1616 which  the "mail" commands send to the MTA (undocumented, of course), or in
1617 the  form
1618
1619     From ph10 Fri, 7 Jan 97 14:00:00 GMT
1620
1621 which  is apparently used by some UUCPs, despite it not being in RFC 976.
1622 Because  of variations in time formats, just match up to the minutes. That
1623 should  be sufficient. Examples have been seen of time fields like 12:1:03,
1624 so  just require one digit for hours and minutes. The weekday is also absent
1625 in  some forms. */
1626
1627 uschar *uucp_from_pattern      = US
1628    "^From\\s+(\\S+)\\s+(?:[a-zA-Z]{3},?\\s+)?"    /* Common start */
1629    "(?:"                                          /* Non-extracting bracket */
1630    "[a-zA-Z]{3}\\s+\\d?\\d|"                      /* First form */
1631    "\\d?\\d\\s+[a-zA-Z]{3}\\s+\\d\\d(?:\\d\\d)?"  /* Second form */
1632    ")"                                            /* End alternation */
1633    "\\s+\\d\\d?:\\d\\d?";                         /* Start of time */
1634
1635 uschar *uucp_from_sender       = US"$1";
1636
1637 uschar *verify_mode            = NULL;
1638 uschar *version_copyright      =
1639  US"Copyright (c) University of Cambridge, 1995 - 2018\n"
1640    "(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2020";
1641 uschar *version_date           = US"?";
1642 uschar *version_cnumber        = US"????";
1643 uschar *version_string         = US"?";
1644
1645 uschar *warn_message_file      = NULL;
1646 int     warning_count          = 0;
1647 uschar *warnmsg_delay          = NULL;
1648 uschar *warnmsg_recipients     = NULL;
1649
1650
1651 /*  End of globals.c */