/[pcre]/code/trunk/pcre_compile.c
ViewVC logotype

Diff of /code/trunk/pcre_compile.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 79 by nigel, Sat Feb 24 21:40:52 2007 UTC revision 702 by ph10, Tue Sep 20 15:45:06 2011 UTC
# Line 6  Line 6 
6  and semantics are as close as possible to those of the Perl 5 language.  and semantics are as close as possible to those of the Perl 5 language.
7    
8                         Written by Philip Hazel                         Written by Philip Hazel
9             Copyright (c) 1997-2005 University of Cambridge             Copyright (c) 1997-2011 University of Cambridge
10    
11  -----------------------------------------------------------------------------  -----------------------------------------------------------------------------
12  Redistribution and use in source and binary forms, with or without  Redistribution and use in source and binary forms, with or without
# Line 42  POSSIBILITY OF SUCH DAMAGE. Line 42  POSSIBILITY OF SUCH DAMAGE.
42  supporting internal functions that are not used by other modules. */  supporting internal functions that are not used by other modules. */
43    
44    
45    #ifdef HAVE_CONFIG_H
46    #include "config.h"
47    #endif
48    
49    #define NLBLOCK cd             /* Block containing newline information */
50    #define PSSTART start_pattern  /* Field containing processed string start */
51    #define PSEND   end_pattern    /* Field containing processed string end */
52    
53  #include "pcre_internal.h"  #include "pcre_internal.h"
54    
55    
56    /* When PCRE_DEBUG is defined, we need the pcre_printint() function, which is
57    also used by pcretest. PCRE_DEBUG is not defined when building a production
58    library. */
59    
60    #ifdef PCRE_DEBUG
61    #include "pcre_printint.src"
62    #endif
63    
64    
65    /* Macro for setting individual bits in class bitmaps. */
66    
67    #define SETBIT(a,b) a[b/8] |= (1 << (b%8))
68    
69    /* Maximum length value to check against when making sure that the integer that
70    holds the compiled pattern length does not overflow. We make it a bit less than
71    INT_MAX to allow for adding in group terminating bytes, so that we don't have
72    to check them every time. */
73    
74    #define OFLOW_MAX (INT_MAX - 20)
75    
76    
77  /*************************************************  /*************************************************
78  *      Code parameters and static tables         *  *      Code parameters and static tables         *
79  *************************************************/  *************************************************/
80    
81  /* Maximum number of items on the nested bracket stacks at compile time. This  /* This value specifies the size of stack workspace that is used during the
82  applies to the nesting of all kinds of parentheses. It does not limit  first pre-compile phase that determines how much memory is required. The regex
83  un-nested, non-capturing parentheses. This number can be made bigger if  is partly compiled into this space, but the compiled parts are discarded as
84  necessary - it is used to dimension one int and one unsigned char vector at  soon as they can be, so that hopefully there will never be an overrun. The code
85  compile time. */  does, however, check for an overrun. The largest amount I've seen used is 218,
86    so this number is very generous.
87    
88    The same workspace is used during the second, actual compile phase for
89    remembering forward references to groups so that they can be filled in at the
90    end. Each entry in this list occupies LINK_SIZE bytes, so even when LINK_SIZE
91    is 4 there is plenty of room. */
92    
93  #define BRASTACK_SIZE 200  #define COMPILE_WORK_SIZE (4096)
94    
95    /* The overrun tests check for a slightly smaller size so that they detect the
96    overrun before it actually does run off the end of the data block. */
97    
98    #define WORK_SIZE_CHECK (COMPILE_WORK_SIZE - 100)
99    
100    
101  /* Table for handling escaped characters in the range '0'-'z'. Positive returns  /* Table for handling escaped characters in the range '0'-'z'. Positive returns
# Line 63  are simple data values; negative values Line 103  are simple data values; negative values
103  on. Zero means further processing is needed (for things like \x), or the escape  on. Zero means further processing is needed (for things like \x), or the escape
104  is invalid. */  is invalid. */
105    
106  #if !EBCDIC   /* This is the "normal" table for ASCII systems */  #ifndef EBCDIC
107    
108    /* This is the "normal" table for ASCII systems or for EBCDIC systems running
109    in UTF-8 mode. */
110    
111  static const short int escapes[] = {  static const short int escapes[] = {
112       0,      0,      0,      0,      0,      0,      0,      0,   /* 0 - 7 */       0,                       0,
113       0,      0,    ':',    ';',    '<',    '=',    '>',    '?',   /* 8 - ? */       0,                       0,
114     '@', -ESC_A, -ESC_B, -ESC_C, -ESC_D, -ESC_E,      0, -ESC_G,   /* @ - G */       0,                       0,
115       0,      0,      0,      0,      0,      0,      0,      0,   /* H - O */       0,                       0,
116  -ESC_P, -ESC_Q,      0, -ESC_S,      0,      0,      0, -ESC_W,   /* P - W */       0,                       0,
117  -ESC_X,      0, -ESC_Z,    '[',   '\\',    ']',    '^',    '_',   /* X - _ */       CHAR_COLON,              CHAR_SEMICOLON,
118     '`',      7, -ESC_b,      0, -ESC_d,  ESC_e,  ESC_f,      0,   /* ` - g */       CHAR_LESS_THAN_SIGN,     CHAR_EQUALS_SIGN,
119       0,      0,      0,      0,      0,      0,  ESC_n,      0,   /* h - o */       CHAR_GREATER_THAN_SIGN,  CHAR_QUESTION_MARK,
120  -ESC_p,      0,  ESC_r, -ESC_s,  ESC_tee,    0,      0, -ESC_w,   /* p - w */       CHAR_COMMERCIAL_AT,      -ESC_A,
121       0,      0, -ESC_z                                            /* x - z */       -ESC_B,                  -ESC_C,
122         -ESC_D,                  -ESC_E,
123         0,                       -ESC_G,
124         -ESC_H,                  0,
125         0,                       -ESC_K,
126         0,                       0,
127         -ESC_N,                  0,
128         -ESC_P,                  -ESC_Q,
129         -ESC_R,                  -ESC_S,
130         0,                       0,
131         -ESC_V,                  -ESC_W,
132         -ESC_X,                  0,
133         -ESC_Z,                  CHAR_LEFT_SQUARE_BRACKET,
134         CHAR_BACKSLASH,          CHAR_RIGHT_SQUARE_BRACKET,
135         CHAR_CIRCUMFLEX_ACCENT,  CHAR_UNDERSCORE,
136         CHAR_GRAVE_ACCENT,       7,
137         -ESC_b,                  0,
138         -ESC_d,                  ESC_e,
139         ESC_f,                   0,
140         -ESC_h,                  0,
141         0,                       -ESC_k,
142         0,                       0,
143         ESC_n,                   0,
144         -ESC_p,                  0,
145         ESC_r,                   -ESC_s,
146         ESC_tee,                 0,
147         -ESC_v,                  -ESC_w,
148         0,                       0,
149         -ESC_z
150  };  };
151    
152  #else         /* This is the "abnormal" table for EBCDIC systems */  #else
153    
154    /* This is the "abnormal" table for EBCDIC systems without UTF-8 support. */
155    
156  static const short int escapes[] = {  static const short int escapes[] = {
157  /*  48 */     0,     0,      0,     '.',    '<',   '(',    '+',    '|',  /*  48 */     0,     0,      0,     '.',    '<',   '(',    '+',    '|',
158  /*  50 */   '&',     0,      0,       0,      0,     0,      0,      0,  /*  50 */   '&',     0,      0,       0,      0,     0,      0,      0,
# Line 87  static const short int escapes[] = { Line 162  static const short int escapes[] = {
162  /*  70 */     0,     0,      0,       0,      0,     0,      0,      0,  /*  70 */     0,     0,      0,       0,      0,     0,      0,      0,
163  /*  78 */     0,   '`',    ':',     '#',    '@',  '\'',    '=',    '"',  /*  78 */     0,   '`',    ':',     '#',    '@',  '\'',    '=',    '"',
164  /*  80 */     0,     7, -ESC_b,       0, -ESC_d, ESC_e,  ESC_f,      0,  /*  80 */     0,     7, -ESC_b,       0, -ESC_d, ESC_e,  ESC_f,      0,
165  /*  88 */     0,     0,      0,     '{',      0,     0,      0,      0,  /*  88 */-ESC_h,     0,      0,     '{',      0,     0,      0,      0,
166  /*  90 */     0,     0,      0,     'l',      0, ESC_n,      0, -ESC_p,  /*  90 */     0,     0, -ESC_k,     'l',      0, ESC_n,      0, -ESC_p,
167  /*  98 */     0, ESC_r,      0,     '}',      0,     0,      0,      0,  /*  98 */     0, ESC_r,      0,     '}',      0,     0,      0,      0,
168  /*  A0 */     0,   '~', -ESC_s, ESC_tee,      0,     0, -ESC_w,      0,  /*  A0 */     0,   '~', -ESC_s, ESC_tee,      0,-ESC_v, -ESC_w,      0,
169  /*  A8 */     0,-ESC_z,      0,       0,      0,   '[',      0,      0,  /*  A8 */     0,-ESC_z,      0,       0,      0,   '[',      0,      0,
170  /*  B0 */     0,     0,      0,       0,      0,     0,      0,      0,  /*  B0 */     0,     0,      0,       0,      0,     0,      0,      0,
171  /*  B8 */     0,     0,      0,       0,      0,   ']',    '=',    '-',  /*  B8 */     0,     0,      0,       0,      0,   ']',    '=',    '-',
172  /*  C0 */   '{',-ESC_A, -ESC_B,  -ESC_C, -ESC_D,-ESC_E,      0, -ESC_G,  /*  C0 */   '{',-ESC_A, -ESC_B,  -ESC_C, -ESC_D,-ESC_E,      0, -ESC_G,
173  /*  C8 */     0,     0,      0,       0,      0,     0,      0,      0,  /*  C8 */-ESC_H,     0,      0,       0,      0,     0,      0,      0,
174  /*  D0 */   '}',     0,      0,       0,      0,     0,      0, -ESC_P,  /*  D0 */   '}',     0, -ESC_K,       0,      0,-ESC_N,      0, -ESC_P,
175  /*  D8 */-ESC_Q,     0,      0,       0,      0,     0,      0,      0,  /*  D8 */-ESC_Q,-ESC_R,      0,       0,      0,     0,      0,      0,
176  /*  E0 */  '\\',     0, -ESC_S,       0,      0,     0, -ESC_W, -ESC_X,  /*  E0 */  '\\',     0, -ESC_S,       0,      0,-ESC_V, -ESC_W, -ESC_X,
177  /*  E8 */     0,-ESC_Z,      0,       0,      0,     0,      0,      0,  /*  E8 */     0,-ESC_Z,      0,       0,      0,     0,      0,      0,
178  /*  F0 */     0,     0,      0,       0,      0,     0,      0,      0,  /*  F0 */     0,     0,      0,       0,      0,     0,      0,      0,
179  /*  F8 */     0,     0,      0,       0,      0,     0,      0,      0  /*  F8 */     0,     0,      0,       0,      0,     0,      0,      0
# Line 106  static const short int escapes[] = { Line 181  static const short int escapes[] = {
181  #endif  #endif
182    
183    
184  /* Tables of names of POSIX character classes and their lengths. The list is  /* Table of special "verbs" like (*PRUNE). This is a short table, so it is
185  terminated by a zero length entry. The first three must be alpha, upper, lower,  searched linearly. Put all the names into a single string, in order to reduce
186  as this is assumed for handling case independence. */  the number of relocations when a shared library is dynamically linked. The
187    string is built from string macros so that it works in UTF-8 mode on EBCDIC
188  static const char *const posix_names[] = {  platforms. */
189    "alpha", "lower", "upper",  
190    "alnum", "ascii", "blank", "cntrl", "digit", "graph",  typedef struct verbitem {
191    "print", "punct", "space", "word",  "xdigit" };    int   len;                 /* Length of verb name */
192      int   op;                  /* Op when no arg, or -1 if arg mandatory */
193      int   op_arg;              /* Op when arg present, or -1 if not allowed */
194    } verbitem;
195    
196    static const char verbnames[] =
197      "\0"                       /* Empty name is a shorthand for MARK */
198      STRING_MARK0
199      STRING_ACCEPT0
200      STRING_COMMIT0
201      STRING_F0
202      STRING_FAIL0
203      STRING_PRUNE0
204      STRING_SKIP0
205      STRING_THEN;
206    
207    static const verbitem verbs[] = {
208      { 0, -1,        OP_MARK },
209      { 4, -1,        OP_MARK },
210      { 6, OP_ACCEPT, -1 },
211      { 6, OP_COMMIT, -1 },
212      { 1, OP_FAIL,   -1 },
213      { 4, OP_FAIL,   -1 },
214      { 5, OP_PRUNE,  OP_PRUNE_ARG },
215      { 4, OP_SKIP,   OP_SKIP_ARG  },
216      { 4, OP_THEN,   OP_THEN_ARG  }
217    };
218    
219    static const int verbcount = sizeof(verbs)/sizeof(verbitem);
220    
221    
222    /* Tables of names of POSIX character classes and their lengths. The names are
223    now all in a single string, to reduce the number of relocations when a shared
224    library is dynamically loaded. The list of lengths is terminated by a zero
225    length entry. The first three must be alpha, lower, upper, as this is assumed
226    for handling case independence. */
227    
228    static const char posix_names[] =
229      STRING_alpha0 STRING_lower0 STRING_upper0 STRING_alnum0
230      STRING_ascii0 STRING_blank0 STRING_cntrl0 STRING_digit0
231      STRING_graph0 STRING_print0 STRING_punct0 STRING_space0
232      STRING_word0  STRING_xdigit;
233    
234  static const uschar posix_name_lengths[] = {  static const uschar posix_name_lengths[] = {
235    5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 6, 0 };    5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 6, 0 };
236    
237  /* Table of class bit maps for each POSIX class; up to three may be combined  /* Table of class bit maps for each POSIX class. Each class is formed from a
238  to form the class. The table for [:blank:] is dynamically modified to remove  base map, with an optional addition or removal of another map. Then, for some
239  the vertical space characters. */  classes, there is some additional tweaking: for [:blank:] the vertical space
240    characters are removed, and for [:alpha:] and [:alnum:] the underscore
241    character is removed. The triples in the table consist of the base map offset,
242    second map offset or -1 if no second map, and a non-negative value for map
243    addition or a negative value for map subtraction (if there are two maps). The
244    absolute value of the third field has these meanings: 0 => no tweaking, 1 =>
245    remove vertical space characters, 2 => remove underscore. */
246    
247  static const int posix_class_maps[] = {  static const int posix_class_maps[] = {
248    cbit_lower, cbit_upper, -1,             /* alpha */    cbit_word,  cbit_digit, -2,             /* alpha */
249    cbit_lower, -1,         -1,             /* lower */    cbit_lower, -1,          0,             /* lower */
250    cbit_upper, -1,         -1,             /* upper */    cbit_upper, -1,          0,             /* upper */
251    cbit_digit, cbit_lower, cbit_upper,     /* alnum */    cbit_word,  -1,          2,             /* alnum - word without underscore */
252    cbit_print, cbit_cntrl, -1,             /* ascii */    cbit_print, cbit_cntrl,  0,             /* ascii */
253    cbit_space, -1,         -1,             /* blank - a GNU extension */    cbit_space, -1,          1,             /* blank - a GNU extension */
254    cbit_cntrl, -1,         -1,             /* cntrl */    cbit_cntrl, -1,          0,             /* cntrl */
255    cbit_digit, -1,         -1,             /* digit */    cbit_digit, -1,          0,             /* digit */
256    cbit_graph, -1,         -1,             /* graph */    cbit_graph, -1,          0,             /* graph */
257    cbit_print, -1,         -1,             /* print */    cbit_print, -1,          0,             /* print */
258    cbit_punct, -1,         -1,             /* punct */    cbit_punct, -1,          0,             /* punct */
259    cbit_space, -1,         -1,             /* space */    cbit_space, -1,          0,             /* space */
260    cbit_word,  -1,         -1,             /* word - a Perl extension */    cbit_word,  -1,          0,             /* word - a Perl extension */
261    cbit_xdigit,-1,         -1              /* xdigit */    cbit_xdigit,-1,          0              /* xdigit */
262  };  };
263    
264    /* Table of substitutes for \d etc when PCRE_UCP is set. The POSIX class
265    substitutes must be in the order of the names, defined above, and there are
266    both positive and negative cases. NULL means no substitute. */
267    
268  /* The texts of compile-time error messages. These are "char *" because they  #ifdef SUPPORT_UCP
269  are passed to the outside world. */  static const uschar *substitutes[] = {
270      (uschar *)"\\P{Nd}",    /* \D */
271      (uschar *)"\\p{Nd}",    /* \d */
272      (uschar *)"\\P{Xsp}",   /* \S */       /* NOTE: Xsp is Perl space */
273      (uschar *)"\\p{Xsp}",   /* \s */
274      (uschar *)"\\P{Xwd}",   /* \W */
275      (uschar *)"\\p{Xwd}"    /* \w */
276    };
277    
278    static const uschar *posix_substitutes[] = {
279      (uschar *)"\\p{L}",     /* alpha */
280      (uschar *)"\\p{Ll}",    /* lower */
281      (uschar *)"\\p{Lu}",    /* upper */
282      (uschar *)"\\p{Xan}",   /* alnum */
283      NULL,                   /* ascii */
284      (uschar *)"\\h",        /* blank */
285      NULL,                   /* cntrl */
286      (uschar *)"\\p{Nd}",    /* digit */
287      NULL,                   /* graph */
288      NULL,                   /* print */
289      NULL,                   /* punct */
290      (uschar *)"\\p{Xps}",   /* space */    /* NOTE: Xps is POSIX space */
291      (uschar *)"\\p{Xwd}",   /* word */
292      NULL,                   /* xdigit */
293      /* Negated cases */
294      (uschar *)"\\P{L}",     /* ^alpha */
295      (uschar *)"\\P{Ll}",    /* ^lower */
296      (uschar *)"\\P{Lu}",    /* ^upper */
297      (uschar *)"\\P{Xan}",   /* ^alnum */
298      NULL,                   /* ^ascii */
299      (uschar *)"\\H",        /* ^blank */
300      NULL,                   /* ^cntrl */
301      (uschar *)"\\P{Nd}",    /* ^digit */
302      NULL,                   /* ^graph */
303      NULL,                   /* ^print */
304      NULL,                   /* ^punct */
305      (uschar *)"\\P{Xps}",   /* ^space */   /* NOTE: Xps is POSIX space */
306      (uschar *)"\\P{Xwd}",   /* ^word */
307      NULL                    /* ^xdigit */
308    };
309    #define POSIX_SUBSIZE (sizeof(posix_substitutes)/sizeof(uschar *))
310    #endif
311    
312    #define STRING(a)  # a
313    #define XSTRING(s) STRING(s)
314    
315  static const char *error_texts[] = {  /* The texts of compile-time error messages. These are "char *" because they
316    "no error",  are passed to the outside world. Do not ever re-use any error number, because
317    "\\ at end of pattern",  they are documented. Always add a new error instead. Messages marked DEAD below
318    "\\c at end of pattern",  are no longer used. This used to be a table of strings, but in order to reduce
319    "unrecognized character follows \\",  the number of relocations needed when a shared library is loaded dynamically,
320    "numbers out of order in {} quantifier",  it is now one long string. We cannot use a table of offsets, because the
321    lengths of inserts such as XSTRING(MAX_NAME_SIZE) are not known. Instead, we
322    simply count through to the one we want - this isn't a performance issue
323    because these strings are used only when there is a compilation error.
324    
325    Each substring ends with \0 to insert a null character. This includes the final
326    substring, so that the whole string ends with \0\0, which can be detected when
327    counting through. */
328    
329    static const char error_texts[] =
330      "no error\0"
331      "\\ at end of pattern\0"
332      "\\c at end of pattern\0"
333      "unrecognized character follows \\\0"
334      "numbers out of order in {} quantifier\0"
335    /* 5 */    /* 5 */
336    "number too big in {} quantifier",    "number too big in {} quantifier\0"
337    "missing terminating ] for character class",    "missing terminating ] for character class\0"
338    "invalid escape sequence in character class",    "invalid escape sequence in character class\0"
339    "range out of order in character class",    "range out of order in character class\0"
340    "nothing to repeat",    "nothing to repeat\0"
341    /* 10 */    /* 10 */
342    "operand of unlimited repeat could match the empty string",    "operand of unlimited repeat could match the empty string\0"  /** DEAD **/
343    "internal error: unexpected repeat",    "internal error: unexpected repeat\0"
344    "unrecognized character after (?",    "unrecognized character after (? or (?-\0"
345    "POSIX named classes are supported only within a class",    "POSIX named classes are supported only within a class\0"
346    "missing )",    "missing )\0"
347    /* 15 */    /* 15 */
348    "reference to non-existent subpattern",    "reference to non-existent subpattern\0"
349    "erroffset passed as NULL",    "erroffset passed as NULL\0"
350    "unknown option bit(s) set",    "unknown option bit(s) set\0"
351    "missing ) after comment",    "missing ) after comment\0"
352    "parentheses nested too deeply",    "parentheses nested too deeply\0"  /** DEAD **/
353    /* 20 */    /* 20 */
354    "regular expression too large",    "regular expression is too large\0"
355    "failed to get memory",    "failed to get memory\0"
356    "unmatched parentheses",    "unmatched parentheses\0"
357    "internal error: code overflow",    "internal error: code overflow\0"
358    "unrecognized character after (?<",    "unrecognized character after (?<\0"
359    /* 25 */    /* 25 */
360    "lookbehind assertion is not fixed length",    "lookbehind assertion is not fixed length\0"
361    "malformed number after (?(",    "malformed number or name after (?(\0"
362    "conditional group contains more than two branches",    "conditional group contains more than two branches\0"
363    "assertion expected after (?(",    "assertion expected after (?(\0"
364    "(?R or (?digits must be followed by )",    "(?R or (?[+-]digits must be followed by )\0"
365    /* 30 */    /* 30 */
366    "unknown POSIX class name",    "unknown POSIX class name\0"
367    "POSIX collating elements are not supported",    "POSIX collating elements are not supported\0"
368    "this version of PCRE is not compiled with PCRE_UTF8 support",    "this version of PCRE is not compiled with PCRE_UTF8 support\0"
369    "spare error",    "spare error\0"  /** DEAD **/
370    "character value in \\x{...} sequence is too large",    "character value in \\x{...} sequence is too large\0"
371    /* 35 */    /* 35 */
372    "invalid condition (?(0)",    "invalid condition (?(0)\0"
373    "\\C not allowed in lookbehind assertion",    "\\C not allowed in lookbehind assertion\0"
374    "PCRE does not support \\L, \\l, \\N, \\U, or \\u",    "PCRE does not support \\L, \\l, \\N{name}, \\U, or \\u\0"
375    "number after (?C is > 255",    "number after (?C is > 255\0"
376    "closing ) for (?C expected",    "closing ) for (?C expected\0"
377    /* 40 */    /* 40 */
378    "recursive call could loop indefinitely",    "recursive call could loop indefinitely\0"
379    "unrecognized character after (?P",    "unrecognized character after (?P\0"
380    "syntax error after (?P",    "syntax error in subpattern name (missing terminator)\0"
381    "two named groups have the same name",    "two named subpatterns have the same name\0"
382    "invalid UTF-8 string",    "invalid UTF-8 string\0"
383    /* 45 */    /* 45 */
384    "support for \\P, \\p, and \\X has not been compiled",    "support for \\P, \\p, and \\X has not been compiled\0"
385    "malformed \\P or \\p sequence",    "malformed \\P or \\p sequence\0"
386    "unknown property name after \\P or \\p"    "unknown property name after \\P or \\p\0"
387  };    "subpattern name is too long (maximum " XSTRING(MAX_NAME_SIZE) " characters)\0"
388      "too many named subpatterns (maximum " XSTRING(MAX_NAME_COUNT) ")\0"
389      /* 50 */
390      "repeated subpattern is too long\0"    /** DEAD **/
391      "octal value is greater than \\377 (not in UTF-8 mode)\0"
392      "internal error: overran compiling workspace\0"
393      "internal error: previously-checked referenced subpattern not found\0"
394      "DEFINE group contains more than one branch\0"
395      /* 55 */
396      "repeating a DEFINE group is not allowed\0"  /** DEAD **/
397      "inconsistent NEWLINE options\0"
398      "\\g is not followed by a braced, angle-bracketed, or quoted name/number or by a plain number\0"
399      "a numbered reference must not be zero\0"
400      "an argument is not allowed for (*ACCEPT), (*FAIL), or (*COMMIT)\0"
401      /* 60 */
402      "(*VERB) not recognized\0"
403      "number is too big\0"
404      "subpattern name expected\0"
405      "digit expected after (?+\0"
406      "] is an invalid data character in JavaScript compatibility mode\0"
407      /* 65 */
408      "different names for subpatterns of the same number are not allowed\0"
409      "(*MARK) must have an argument\0"
410      "this version of PCRE is not compiled with PCRE_UCP support\0"
411      "\\c must be followed by an ASCII character\0"
412      "\\k is not followed by a braced, angle-bracketed, or quoted name\0"
413      ;
414    
415  /* Table to identify digits and hex digits. This is used when compiling  /* Table to identify digits and hex digits. This is used when compiling
416  patterns. Note that the tables in chartables are dependent on the locale, and  patterns. Note that the tables in chartables are dependent on the locale, and
# Line 220  For convenience, we use the same bit def Line 428  For convenience, we use the same bit def
428    
429  Then we can use ctype_digit and ctype_xdigit in the code. */  Then we can use ctype_digit and ctype_xdigit in the code. */
430    
431  #if !EBCDIC    /* This is the "normal" case, for ASCII systems */  #ifndef EBCDIC
432    
433    /* This is the "normal" case, for ASCII systems, and EBCDIC systems running in
434    UTF-8 mode. */
435    
436  static const unsigned char digitab[] =  static const unsigned char digitab[] =
437    {    {
438    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7 */
# Line 256  static const unsigned char digitab[] = Line 468  static const unsigned char digitab[] =
468    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 240-247 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 240-247 */
469    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00};/* 248-255 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00};/* 248-255 */
470    
471  #else          /* This is the "abnormal" case, for EBCDIC systems */  #else
472    
473    /* This is the "abnormal" case, for EBCDIC systems not running in UTF-8 mode. */
474    
475  static const unsigned char digitab[] =  static const unsigned char digitab[] =
476    {    {
477    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7  0 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7  0 */
# Line 270  static const unsigned char digitab[] = Line 485  static const unsigned char digitab[] =
485    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 40 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 40 */
486    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  72- |     */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  72- |     */
487    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 50 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 50 */
488    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  88-     */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  88- 95    */
489    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 60 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 60 */
490    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 104- ?     */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 104- ?     */
491    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 70 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 70 */
# Line 304  static const unsigned char ebcdic_charta Line 519  static const unsigned char ebcdic_charta
519    0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 */    0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 */
520    0x00,0x00,0x00,0x80,0x00,0x80,0x80,0x80, /*  72- |  */    0x00,0x00,0x00,0x80,0x00,0x80,0x80,0x80, /*  72- |  */
521    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 */
522    0x00,0x00,0x00,0x80,0x80,0x80,0x00,0x00, /*  88-  */    0x00,0x00,0x00,0x80,0x80,0x80,0x00,0x00, /*  88- 95 */
523    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 */
524    0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x80, /* 104- ?  */    0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x80, /* 104- ?  */
525    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 */    0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 */
# Line 331  static const unsigned char ebcdic_charta Line 546  static const unsigned char ebcdic_charta
546  /* Definition to allow mutual recursion */  /* Definition to allow mutual recursion */
547    
548  static BOOL  static BOOL
549    compile_regex(int, int, int *, uschar **, const uschar **, int *, BOOL, int,    compile_regex(int, uschar **, const uschar **, int *, BOOL, BOOL, int, int,
550      int *, int *, branch_chain *, compile_data *);      int *, int *, branch_chain *, compile_data *, int *);
551    
552    
553    
554    /*************************************************
555    *            Find an error text                  *
556    *************************************************/
557    
558    /* The error texts are now all in one long string, to save on relocations. As
559    some of the text is of unknown length, we can't use a table of offsets.
560    Instead, just count through the strings. This is not a performance issue
561    because it happens only when there has been a compilation error.
562    
563    Argument:   the error number
564    Returns:    pointer to the error string
565    */
566    
567    static const char *
568    find_error_text(int n)
569    {
570    const char *s = error_texts;
571    for (; n > 0; n--)
572      {
573      while (*s++ != 0) {};
574      if (*s == 0) return "Error text not found (please report)";
575      }
576    return s;
577    }
578    
579    
580    /*************************************************
581    *            Check for counted repeat            *
582    *************************************************/
583    
584    /* This function is called when a '{' is encountered in a place where it might
585    start a quantifier. It looks ahead to see if it really is a quantifier or not.
586    It is only a quantifier if it is one of the forms {ddd} {ddd,} or {ddd,ddd}
587    where the ddds are digits.
588    
589    Arguments:
590      p         pointer to the first char after '{'
591    
592    Returns:    TRUE or FALSE
593    */
594    
595    static BOOL
596    is_counted_repeat(const uschar *p)
597    {
598    if ((digitab[*p++] & ctype_digit) == 0) return FALSE;
599    while ((digitab[*p] & ctype_digit) != 0) p++;
600    if (*p == CHAR_RIGHT_CURLY_BRACKET) return TRUE;
601    
602    if (*p++ != CHAR_COMMA) return FALSE;
603    if (*p == CHAR_RIGHT_CURLY_BRACKET) return TRUE;
604    
605    if ((digitab[*p++] & ctype_digit) == 0) return FALSE;
606    while ((digitab[*p] & ctype_digit) != 0) p++;
607    
608    return (*p == CHAR_RIGHT_CURLY_BRACKET);
609    }
610    
611    
612    
# Line 342  static BOOL Line 616  static BOOL
616    
617  /* This function is called when a \ has been encountered. It either returns a  /* This function is called when a \ has been encountered. It either returns a
618  positive value for a simple escape such as \n, or a negative value which  positive value for a simple escape such as \n, or a negative value which
619  encodes one of the more complicated things such as \d. When UTF-8 is enabled,  encodes one of the more complicated things such as \d. A backreference to group
620  a positive value greater than 255 may be returned. On entry, ptr is pointing at  n is returned as -(ESC_REF + n); ESC_REF is the highest ESC_xxx macro. When
621  the \. On exit, it is on the final character of the escape sequence.  UTF-8 is enabled, a positive value greater than 255 may be returned. On entry,
622    ptr is pointing at the \. On exit, it is on the final character of the escape
623    sequence.
624    
625  Arguments:  Arguments:
626    ptrptr         points to the pattern position pointer    ptrptr         points to the pattern position pointer
# Line 355  Arguments: Line 631  Arguments:
631    
632  Returns:         zero or positive => a data character  Returns:         zero or positive => a data character
633                   negative => a special escape sequence                   negative => a special escape sequence
634                   on error, errorptr is set                   on error, errorcodeptr is set
635  */  */
636    
637  static int  static int
638  check_escape(const uschar **ptrptr, int *errorcodeptr, int bracount,  check_escape(const uschar **ptrptr, int *errorcodeptr, int bracount,
639    int options, BOOL isclass)    int options, BOOL isclass)
640  {  {
641  const uschar *ptr = *ptrptr;  BOOL utf8 = (options & PCRE_UTF8) != 0;
642    const uschar *ptr = *ptrptr + 1;
643  int c, i;  int c, i;
644    
645    GETCHARINCTEST(c, ptr);           /* Get character value, increment pointer */
646    ptr--;                            /* Set pointer back to the last byte */
647    
648  /* If backslash is at the end of the pattern, it's an error. */  /* If backslash is at the end of the pattern, it's an error. */
649    
 c = *(++ptr);  
650  if (c == 0) *errorcodeptr = ERR1;  if (c == 0) *errorcodeptr = ERR1;
651    
652  /* Non-alphamerics are literals. For digits or letters, do an initial lookup in  /* Non-alphanumerics are literals. For digits or letters, do an initial lookup
653  a table. A non-zero result is something that can be returned immediately.  in a table. A non-zero result is something that can be returned immediately.
654  Otherwise further processing may be required. */  Otherwise further processing may be required. */
655    
656  #if !EBCDIC    /* ASCII coding */  #ifndef EBCDIC  /* ASCII/UTF-8 coding */
657  else if (c < '0' || c > 'z') {}                           /* Not alphameric */  else if (c < CHAR_0 || c > CHAR_z) {}                     /* Not alphanumeric */
658  else if ((i = escapes[c - '0']) != 0) c = i;  else if ((i = escapes[c - CHAR_0]) != 0) c = i;
659    
660  #else          /* EBCDIC coding */  #else           /* EBCDIC coding */
661  else if (c < 'a' || (ebcdic_chartab[c] & 0x0E) == 0) {}   /* Not alphameric */  else if (c < 'a' || (ebcdic_chartab[c] & 0x0E) == 0) {}   /* Not alphanumeric */
662  else if ((i = escapes[c - 0x48]) != 0)  c = i;  else if ((i = escapes[c - 0x48]) != 0)  c = i;
663  #endif  #endif
664    
# Line 388  else if ((i = escapes[c - 0x48]) != 0) Line 667  else if ((i = escapes[c - 0x48]) != 0)
667  else  else
668    {    {
669    const uschar *oldptr;    const uschar *oldptr;
670      BOOL braced, negated;
671    
672    switch (c)    switch (c)
673      {      {
674      /* A number of Perl escapes are not handled by PCRE. We give an explicit      /* A number of Perl escapes are not handled by PCRE. We give an explicit
675      error. */      error. */
676    
677      case 'l':      case CHAR_l:
678      case 'L':      case CHAR_L:
679      case 'N':      case CHAR_u:
680      case 'u':      case CHAR_U:
     case 'U':  
681      *errorcodeptr = ERR37;      *errorcodeptr = ERR37;
682      break;      break;
683    
684        /* In a character class, \g is just a literal "g". Outside a character
685        class, \g must be followed by one of a number of specific things:
686    
687        (1) A number, either plain or braced. If positive, it is an absolute
688        backreference. If negative, it is a relative backreference. This is a Perl
689        5.10 feature.
690    
691        (2) Perl 5.10 also supports \g{name} as a reference to a named group. This
692        is part of Perl's movement towards a unified syntax for back references. As
693        this is synonymous with \k{name}, we fudge it up by pretending it really
694        was \k.
695    
696        (3) For Oniguruma compatibility we also support \g followed by a name or a
697        number either in angle brackets or in single quotes. However, these are
698        (possibly recursive) subroutine calls, _not_ backreferences. Just return
699        the -ESC_g code (cf \k). */
700    
701        case CHAR_g:
702        if (isclass) break;
703        if (ptr[1] == CHAR_LESS_THAN_SIGN || ptr[1] == CHAR_APOSTROPHE)
704          {
705          c = -ESC_g;
706          break;
707          }
708    
709        /* Handle the Perl-compatible cases */
710    
711        if (ptr[1] == CHAR_LEFT_CURLY_BRACKET)
712          {
713          const uschar *p;
714          for (p = ptr+2; *p != 0 && *p != CHAR_RIGHT_CURLY_BRACKET; p++)
715            if (*p != CHAR_MINUS && (digitab[*p] & ctype_digit) == 0) break;
716          if (*p != 0 && *p != CHAR_RIGHT_CURLY_BRACKET)
717            {
718            c = -ESC_k;
719            break;
720            }
721          braced = TRUE;
722          ptr++;
723          }
724        else braced = FALSE;
725    
726        if (ptr[1] == CHAR_MINUS)
727          {
728          negated = TRUE;
729          ptr++;
730          }
731        else negated = FALSE;
732    
733        c = 0;
734        while ((digitab[ptr[1]] & ctype_digit) != 0)
735          c = c * 10 + *(++ptr) - CHAR_0;
736    
737        if (c < 0)   /* Integer overflow */
738          {
739          *errorcodeptr = ERR61;
740          break;
741          }
742    
743        if (braced && *(++ptr) != CHAR_RIGHT_CURLY_BRACKET)
744          {
745          *errorcodeptr = ERR57;
746          break;
747          }
748    
749        if (c == 0)
750          {
751          *errorcodeptr = ERR58;
752          break;
753          }
754    
755        if (negated)
756          {
757          if (c > bracount)
758            {
759            *errorcodeptr = ERR15;
760            break;
761            }
762          c = bracount - (c - 1);
763          }
764    
765        c = -(ESC_REF + c);
766        break;
767    
768      /* The handling of escape sequences consisting of a string of digits      /* The handling of escape sequences consisting of a string of digits
769      starting with one that is not zero is not straightforward. By experiment,      starting with one that is not zero is not straightforward. By experiment,
770      the way Perl works seems to be as follows:      the way Perl works seems to be as follows:
# Line 413  else Line 777  else
777      value is greater than 377, the least significant 8 bits are taken. Inside a      value is greater than 377, the least significant 8 bits are taken. Inside a
778      character class, \ followed by a digit is always an octal number. */      character class, \ followed by a digit is always an octal number. */
779    
780      case '1': case '2': case '3': case '4': case '5':      case CHAR_1: case CHAR_2: case CHAR_3: case CHAR_4: case CHAR_5:
781      case '6': case '7': case '8': case '9':      case CHAR_6: case CHAR_7: case CHAR_8: case CHAR_9:
782    
783      if (!isclass)      if (!isclass)
784        {        {
785        oldptr = ptr;        oldptr = ptr;
786        c -= '0';        c -= CHAR_0;
787        while ((digitab[ptr[1]] & ctype_digit) != 0)        while ((digitab[ptr[1]] & ctype_digit) != 0)
788          c = c * 10 + *(++ptr) - '0';          c = c * 10 + *(++ptr) - CHAR_0;
789          if (c < 0)    /* Integer overflow */
790            {
791            *errorcodeptr = ERR61;
792            break;
793            }
794        if (c < 10 || c <= bracount)        if (c < 10 || c <= bracount)
795          {          {
796          c = -(ESC_REF + c);          c = -(ESC_REF + c);
# Line 434  else Line 803  else
803      generates a binary zero byte and treats the digit as a following literal.      generates a binary zero byte and treats the digit as a following literal.
804      Thus we have to pull back the pointer by one. */      Thus we have to pull back the pointer by one. */
805    
806      if ((c = *ptr) >= '8')      if ((c = *ptr) >= CHAR_8)
807        {        {
808        ptr--;        ptr--;
809        c = 0;        c = 0;
# Line 442  else Line 811  else
811        }        }
812    
813      /* \0 always starts an octal number, but we may drop through to here with a      /* \0 always starts an octal number, but we may drop through to here with a
814      larger first octal digit. */      larger first octal digit. The original code used just to take the least
815        significant 8 bits of octal numbers (I think this is what early Perls used
816      case '0':      to do). Nowadays we allow for larger numbers in UTF-8 mode, but no more
817      c -= '0';      than 3 octal digits. */
818      while(i++ < 2 && ptr[1] >= '0' && ptr[1] <= '7')  
819          c = c * 8 + *(++ptr) - '0';      case CHAR_0:
820      c &= 255;     /* Take least significant 8 bits */      c -= CHAR_0;
821        while(i++ < 2 && ptr[1] >= CHAR_0 && ptr[1] <= CHAR_7)
822            c = c * 8 + *(++ptr) - CHAR_0;
823        if (!utf8 && c > 255) *errorcodeptr = ERR51;
824      break;      break;
825    
826      /* \x is complicated when UTF-8 is enabled. \x{ddd} is a character number      /* \x is complicated. \x{ddd} is a character number which can be greater
827      which can be greater than 0xff, but only if the ddd are hex digits. */      than 0xff in utf8 mode, but only if the ddd are hex digits. If not, { is
828        treated as a data character. */
829    
830      case 'x':      case CHAR_x:
831  #ifdef SUPPORT_UTF8      if (ptr[1] == CHAR_LEFT_CURLY_BRACKET)
     if (ptr[1] == '{' && (options & PCRE_UTF8) != 0)  
832        {        {
833        const uschar *pt = ptr + 2;        const uschar *pt = ptr + 2;
834        register int count = 0;        int count = 0;
835    
836        c = 0;        c = 0;
837        while ((digitab[*pt] & ctype_xdigit) != 0)        while ((digitab[*pt] & ctype_xdigit) != 0)
838          {          {
839          int cc = *pt++;          register int cc = *pt++;
840            if (c == 0 && cc == CHAR_0) continue;     /* Leading zeroes */
841          count++;          count++;
842  #if !EBCDIC    /* ASCII coding */  
843          if (cc >= 'a') cc -= 32;               /* Convert to upper case */  #ifndef EBCDIC  /* ASCII/UTF-8 coding */
844          c = c * 16 + cc - ((cc < 'A')? '0' : ('A' - 10));          if (cc >= CHAR_a) cc -= 32;               /* Convert to upper case */
845  #else          /* EBCDIC coding */          c = (c << 4) + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
846          if (cc >= 'a' && cc <= 'z') cc += 64;  /* Convert to upper case */  #else           /* EBCDIC coding */
847          c = c * 16 + cc - ((cc >= '0')? '0' : ('A' - 10));          if (cc >= CHAR_a && cc <= CHAR_z) cc += 64;  /* Convert to upper case */
848            c = (c << 4) + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
849  #endif  #endif
850          }          }
851        if (*pt == '}')  
852          if (*pt == CHAR_RIGHT_CURLY_BRACKET)
853          {          {
854          if (c < 0 || count > 8) *errorcodeptr = ERR34;          if (c < 0 || count > (utf8? 8 : 2)) *errorcodeptr = ERR34;
855          ptr = pt;          ptr = pt;
856          break;          break;
857          }          }
858    
859        /* If the sequence of hex digits does not end with '}', then we don't        /* If the sequence of hex digits does not end with '}', then we don't
860        recognize this construct; fall through to the normal \x handling. */        recognize this construct; fall through to the normal \x handling. */
861        }        }
 #endif  
862    
863      /* Read just a single hex char */      /* Read just a single-byte hex-defined char */
864    
865      c = 0;      c = 0;
866      while (i++ < 2 && (digitab[ptr[1]] & ctype_xdigit) != 0)      while (i++ < 2 && (digitab[ptr[1]] & ctype_xdigit) != 0)
867        {        {
868        int cc;                               /* Some compilers don't like ++ */        int cc;                                  /* Some compilers don't like */
869        cc = *(++ptr);                        /* in initializers */        cc = *(++ptr);                           /* ++ in initializers */
870  #if !EBCDIC    /* ASCII coding */  #ifndef EBCDIC  /* ASCII/UTF-8 coding */
871        if (cc >= 'a') cc -= 32;              /* Convert to upper case */        if (cc >= CHAR_a) cc -= 32;              /* Convert to upper case */
872        c = c * 16 + cc - ((cc < 'A')? '0' : ('A' - 10));        c = c * 16 + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
873  #else          /* EBCDIC coding */  #else           /* EBCDIC coding */
874        if (cc <= 'z') cc += 64;              /* Convert to upper case */        if (cc <= CHAR_z) cc += 64;              /* Convert to upper case */
875        c = c * 16 + cc - ((cc >= '0')? '0' : ('A' - 10));        c = c * 16 + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
876  #endif  #endif
877        }        }
878      break;      break;
879    
880      /* Other special escapes not starting with a digit are straightforward */      /* For \c, a following letter is upper-cased; then the 0x40 bit is flipped.
881        An error is given if the byte following \c is not an ASCII character. This
882        coding is ASCII-specific, but then the whole concept of \cx is
883        ASCII-specific. (However, an EBCDIC equivalent has now been added.) */
884    
885      case 'c':      case CHAR_c:
886      c = *(++ptr);      c = *(++ptr);
887      if (c == 0)      if (c == 0)
888        {        {
889        *errorcodeptr = ERR2;        *errorcodeptr = ERR2;
890        return 0;        break;
891        }        }
892    #ifndef EBCDIC    /* ASCII/UTF-8 coding */
893      /* A letter is upper-cased; then the 0x40 bit is flipped. This coding      if (c > 127)  /* Excludes all non-ASCII in either mode */
894      is ASCII-specific, but then the whole concept of \cx is ASCII-specific.        {
895      (However, an EBCDIC equivalent has now been added.) */        *errorcodeptr = ERR68;
896          break;
897  #if !EBCDIC    /* ASCII coding */        }
898      if (c >= 'a' && c <= 'z') c -= 32;      if (c >= CHAR_a && c <= CHAR_z) c -= 32;
899      c ^= 0x40;      c ^= 0x40;
900  #else          /* EBCDIC coding */  #else             /* EBCDIC coding */
901      if (c >= 'a' && c <= 'z') c += 64;      if (c >= CHAR_a && c <= CHAR_z) c += 64;
902      c ^= 0xC0;      c ^= 0xC0;
903  #endif  #endif
904      break;      break;
905    
906      /* PCRE_EXTRA enables extensions to Perl in the matter of escapes. Any      /* PCRE_EXTRA enables extensions to Perl in the matter of escapes. Any
907      other alphameric following \ is an error if PCRE_EXTRA was set; otherwise,      other alphanumeric following \ is an error if PCRE_EXTRA was set;
908      for Perl compatibility, it is a literal. This code looks a bit odd, but      otherwise, for Perl compatibility, it is a literal. This code looks a bit
909      there used to be some cases other than the default, and there may be again      odd, but there used to be some cases other than the default, and there may
910      in future, so I haven't "optimized" it. */      be again in future, so I haven't "optimized" it. */
911    
912      default:      default:
913      if ((options & PCRE_EXTRA) != 0) switch(c)      if ((options & PCRE_EXTRA) != 0) switch(c)
# Line 541  else Line 920  else
920      }      }
921    }    }
922    
923    /* Perl supports \N{name} for character names, as well as plain \N for "not
924    newline". PCRE does not support \N{name}. However, it does support
925    quantification such as \N{2,3}. */
926    
927    if (c == -ESC_N && ptr[1] == CHAR_LEFT_CURLY_BRACKET &&
928         !is_counted_repeat(ptr+2))
929      *errorcodeptr = ERR37;
930    
931    /* If PCRE_UCP is set, we change the values for \d etc. */
932    
933    if ((options & PCRE_UCP) != 0 && c <= -ESC_D && c >= -ESC_w)
934      c -= (ESC_DU - ESC_D);
935    
936    /* Set the pointer to the final character before returning. */
937    
938  *ptrptr = ptr;  *ptrptr = ptr;
939  return c;  return c;
940  }  }
# Line 560  escape sequence. Line 954  escape sequence.
954  Argument:  Argument:
955    ptrptr         points to the pattern position pointer    ptrptr         points to the pattern position pointer
956    negptr         points to a boolean that is set TRUE for negation else FALSE    negptr         points to a boolean that is set TRUE for negation else FALSE
957      dptr           points to an int that is set to the detailed property value
958    errorcodeptr   points to the error code variable    errorcodeptr   points to the error code variable
959    
960  Returns:     value from ucp_type_table, or -1 for an invalid type  Returns:         type value from ucp_type_table, or -1 for an invalid type
961  */  */
962    
963  static int  static int
964  get_ucp(const uschar **ptrptr, BOOL *negptr, int *errorcodeptr)  get_ucp(const uschar **ptrptr, BOOL *negptr, int *dptr, int *errorcodeptr)
965  {  {
966  int c, i, bot, top;  int c, i, bot, top;
967  const uschar *ptr = *ptrptr;  const uschar *ptr = *ptrptr;
968  char name[4];  char name[32];
969    
970  c = *(++ptr);  c = *(++ptr);
971  if (c == 0) goto ERROR_RETURN;  if (c == 0) goto ERROR_RETURN;
972    
973  *negptr = FALSE;  *negptr = FALSE;
974    
975  /* \P or \p can be followed by a one- or two-character name in {}, optionally  /* \P or \p can be followed by a name in {}, optionally preceded by ^ for
976  preceded by ^ for negation. */  negation. */
977    
978  if (c == '{')  if (c == CHAR_LEFT_CURLY_BRACKET)
979    {    {
980    if (ptr[1] == '^')    if (ptr[1] == CHAR_CIRCUMFLEX_ACCENT)
981      {      {
982      *negptr = TRUE;      *negptr = TRUE;
983      ptr++;      ptr++;
984      }      }
985    for (i = 0; i <= 2; i++)    for (i = 0; i < (int)sizeof(name) - 1; i++)
986      {      {
987      c = *(++ptr);      c = *(++ptr);
988      if (c == 0) goto ERROR_RETURN;      if (c == 0) goto ERROR_RETURN;
989      if (c == '}') break;      if (c == CHAR_RIGHT_CURLY_BRACKET) break;
990      name[i] = c;      name[i] = c;
991      }      }
992    if (c !='}')   /* Try to distinguish error cases */    if (c != CHAR_RIGHT_CURLY_BRACKET) goto ERROR_RETURN;
     {  
     while (*(++ptr) != 0 && *ptr != '}');  
     if (*ptr == '}') goto UNKNOWN_RETURN; else goto ERROR_RETURN;  
     }  
993    name[i] = 0;    name[i] = 0;
994    }    }
995    
# Line 619  top = _pcre_utt_size; Line 1010  top = _pcre_utt_size;
1010    
1011  while (bot < top)  while (bot < top)
1012    {    {
1013    i = (bot + top)/2;    i = (bot + top) >> 1;
1014    c = strcmp(name, _pcre_utt[i].name);    c = strcmp(name, _pcre_utt_names + _pcre_utt[i].name_offset);
1015    if (c == 0) return _pcre_utt[i].value;    if (c == 0)
1016        {
1017        *dptr = _pcre_utt[i].value;
1018        return _pcre_utt[i].type;
1019        }
1020    if (c > 0) bot = i + 1; else top = i;    if (c > 0) bot = i + 1; else top = i;
1021    }    }
1022    
 UNKNOWN_RETURN:  
1023  *errorcodeptr = ERR47;  *errorcodeptr = ERR47;
1024  *ptrptr = ptr;  *ptrptr = ptr;
1025  return -1;  return -1;
# Line 641  return -1; Line 1035  return -1;
1035    
1036    
1037  /*************************************************  /*************************************************
 *            Check for counted repeat            *  
 *************************************************/  
   
 /* This function is called when a '{' is encountered in a place where it might  
 start a quantifier. It looks ahead to see if it really is a quantifier or not.  
 It is only a quantifier if it is one of the forms {ddd} {ddd,} or {ddd,ddd}  
 where the ddds are digits.  
   
 Arguments:  
   p         pointer to the first char after '{'  
   
 Returns:    TRUE or FALSE  
 */  
   
 static BOOL  
 is_counted_repeat(const uschar *p)  
 {  
 if ((digitab[*p++] & ctype_digit) == 0) return FALSE;  
 while ((digitab[*p] & ctype_digit) != 0) p++;  
 if (*p == '}') return TRUE;  
   
 if (*p++ != ',') return FALSE;  
 if (*p == '}') return TRUE;  
   
 if ((digitab[*p++] & ctype_digit) == 0) return FALSE;  
 while ((digitab[*p] & ctype_digit) != 0) p++;  
   
 return (*p == '}');  
 }  
   
   
   
 /*************************************************  
1038  *         Read repeat counts                     *  *         Read repeat counts                     *
1039  *************************************************/  *************************************************/
1040    
# Line 698  read_repeat_counts(const uschar *p, int Line 1059  read_repeat_counts(const uschar *p, int
1059  int min = 0;  int min = 0;
1060  int max = -1;  int max = -1;
1061    
1062  while ((digitab[*p] & ctype_digit) != 0) min = min * 10 + *p++ - '0';  /* Read the minimum value and do a paranoid check: a negative value indicates
1063    an integer overflow. */
1064    
1065    while ((digitab[*p] & ctype_digit) != 0) min = min * 10 + *p++ - CHAR_0;
1066    if (min < 0 || min > 65535)
1067      {
1068      *errorcodeptr = ERR5;
1069      return p;
1070      }
1071    
1072    /* Read the maximum value if there is one, and again do a paranoid on its size.
1073    Also, max must not be less than min. */
1074    
1075  if (*p == '}') max = min; else  if (*p == CHAR_RIGHT_CURLY_BRACKET) max = min; else
1076    {    {
1077    if (*(++p) != '}')    if (*(++p) != CHAR_RIGHT_CURLY_BRACKET)
1078      {      {
1079      max = 0;      max = 0;
1080      while((digitab[*p] & ctype_digit) != 0) max = max * 10 + *p++ - '0';      while((digitab[*p] & ctype_digit) != 0) max = max * 10 + *p++ - CHAR_0;
1081        if (max < 0 || max > 65535)
1082          {
1083          *errorcodeptr = ERR5;
1084          return p;
1085          }
1086      if (max < min)      if (max < min)
1087        {        {
1088        *errorcodeptr = ERR4;        *errorcodeptr = ERR4;
# Line 714  if (*p == '}') max = min; else Line 1091  if (*p == '}') max = min; else
1091      }      }
1092    }    }
1093    
1094  /* Do paranoid checks, then fill in the required variables, and pass back the  /* Fill in the required variables, and pass back the pointer to the terminating
1095  pointer to the terminating '}'. */  '}'. */
1096    
1097  if (min > 65535 || max > 65535)  *minp = min;
1098    *errorcodeptr = ERR5;  *maxp = max;
 else  
   {  
   *minp = min;  
   *maxp = max;  
   }  
1099  return p;  return p;
1100  }  }
1101    
1102    
1103    
1104  /*************************************************  /*************************************************
1105  *      Find first significant op code            *  *  Subroutine for finding forward reference      *
1106  *************************************************/  *************************************************/
1107    
1108  /* This is called by several functions that scan a compiled expression looking  /* This recursive function is called only from find_parens() below. The
1109  for a fixed first character, or an anchoring op code etc. It skips over things  top-level call starts at the beginning of the pattern. All other calls must
1110  that do not influence this. For some calls, a change of option is important.  start at a parenthesis. It scans along a pattern's text looking for capturing
1111  For some calls, it makes sense to skip negative forward and all backward  subpatterns, and counting them. If it finds a named pattern that matches the
1112  assertions, and also the \b assertion; for others it does not.  name it is given, it returns its number. Alternatively, if the name is NULL, it
1113    returns when it reaches a given numbered subpattern. Recursion is used to keep
1114    track of subpatterns that reset the capturing group numbers - the (?| feature.
1115    
1116    This function was originally called only from the second pass, in which we know
1117    that if (?< or (?' or (?P< is encountered, the name will be correctly
1118    terminated because that is checked in the first pass. There is now one call to
1119    this function in the first pass, to check for a recursive back reference by
1120    name (so that we can make the whole group atomic). In this case, we need check
1121    only up to the current position in the pattern, and that is still OK because
1122    and previous occurrences will have been checked. To make this work, the test
1123    for "end of pattern" is a check against cd->end_pattern in the main loop,
1124    instead of looking for a binary zero. This means that the special first-pass
1125    call can adjust cd->end_pattern temporarily. (Checks for binary zero while
1126    processing items within the loop are OK, because afterwards the main loop will
1127    terminate.)
1128    
1129  Arguments:  Arguments:
1130    code         pointer to the start of the group    ptrptr       address of the current character pointer (updated)
1131    options      pointer to external options    cd           compile background data
1132    optbit       the option bit whose changing is significant, or    name         name to seek, or NULL if seeking a numbered subpattern
1133                   zero if none are    lorn         name length, or subpattern number if name is NULL
1134    skipassert   TRUE if certain assertions are to be skipped    xmode        TRUE if we are in /x mode
1135      utf8         TRUE if we are in UTF-8 mode
1136      count        pointer to the current capturing subpattern number (updated)
1137    
1138  Returns:       pointer to the first significant opcode  Returns:       the number of the named subpattern, or -1 if not found
1139  */  */
1140    
1141  static const uschar*  static int
1142  first_significant_code(const uschar *code, int *options, int optbit,  find_parens_sub(uschar **ptrptr, compile_data *cd, const uschar *name, int lorn,
1143    BOOL skipassert)    BOOL xmode, BOOL utf8, int *count)
1144  {  {
1145  for (;;)  uschar *ptr = *ptrptr;
1146    int start_count = *count;
1147    int hwm_count = start_count;
1148    BOOL dup_parens = FALSE;
1149    
1150    /* If the first character is a parenthesis, check on the type of group we are
1151    dealing with. The very first call may not start with a parenthesis. */
1152    
1153    if (ptr[0] == CHAR_LEFT_PARENTHESIS)
1154    {    {
1155    switch ((int)*code)    /* Handle specials such as (*SKIP) or (*UTF8) etc. */
     {  
     case OP_OPT:  
     if (optbit > 0 && ((int)code[1] & optbit) != (*options & optbit))  
       *options = (int)code[1];  
     code += 2;  
     break;  
1156    
1157      case OP_ASSERT_NOT:    if (ptr[1] == CHAR_ASTERISK) ptr += 2;
     case OP_ASSERTBACK:  
     case OP_ASSERTBACK_NOT:  
     if (!skipassert) return code;  
     do code += GET(code, 1); while (*code == OP_ALT);  
     code += _pcre_OP_lengths[*code];  
     break;  
1158    
1159      case OP_WORD_BOUNDARY:    /* Handle a normal, unnamed capturing parenthesis. */
     case OP_NOT_WORD_BOUNDARY:  
     if (!skipassert) return code;  
     /* Fall through */  
1160    
1161      case OP_CALLOUT:    else if (ptr[1] != CHAR_QUESTION_MARK)
1162      case OP_CREF:      {
1163      case OP_BRANUMBER:      *count += 1;
1164      code += _pcre_OP_lengths[*code];      if (name == NULL && *count == lorn) return *count;
1165      break;      ptr++;
1166        }
1167    
1168      default:    /* All cases now have (? at the start. Remember when we are in a group
1169      return code;    where the parenthesis numbers are duplicated. */
1170    
1171      else if (ptr[2] == CHAR_VERTICAL_LINE)
1172        {
1173        ptr += 3;
1174        dup_parens = TRUE;
1175      }      }
   }  
 /* Control never reaches here */  
 }  
1176    
1177      /* Handle comments; all characters are allowed until a ket is reached. */
1178    
1179      else if (ptr[2] == CHAR_NUMBER_SIGN)
1180        {
1181        for (ptr += 3; *ptr != 0; ptr++) if (*ptr == CHAR_RIGHT_PARENTHESIS) break;
1182        goto FAIL_EXIT;
1183        }
1184    
1185      /* Handle a condition. If it is an assertion, just carry on so that it
1186      is processed as normal. If not, skip to the closing parenthesis of the
1187      condition (there can't be any nested parens). */
1188    
1189  /*************************************************    else if (ptr[2] == CHAR_LEFT_PARENTHESIS)
1190  *        Find the fixed length of a pattern      *      {
1191  *************************************************/      ptr += 2;
1192        if (ptr[1] != CHAR_QUESTION_MARK)
1193          {
1194          while (*ptr != 0 && *ptr != CHAR_RIGHT_PARENTHESIS) ptr++;
1195          if (*ptr != 0) ptr++;
1196          }
1197        }
1198    
1199  /* Scan a pattern and compute the fixed length of subject that will match it,    /* Start with (? but not a condition. */
 if the length is fixed. This is needed for dealing with backward assertions.  
 In UTF8 mode, the result is in characters rather than bytes.  
1200    
1201  Arguments:    else
1202    code     points to the start of the pattern (the bracket)      {
1203    options  the compiling options      ptr += 2;
1204        if (*ptr == CHAR_P) ptr++;                      /* Allow optional P */
1205    
1206  Returns:   the fixed length, or -1 if there is no fixed length,      /* We have to disambiguate (?<! and (?<= from (?<name> for named groups */
              or -2 if \C was encountered  
 */  
1207    
1208  static int      if ((*ptr == CHAR_LESS_THAN_SIGN && ptr[1] != CHAR_EXCLAMATION_MARK &&
1209  find_fixedlength(uschar *code, int options)          ptr[1] != CHAR_EQUALS_SIGN) || *ptr == CHAR_APOSTROPHE)
1210  {        {
1211  int length = -1;        int term;
1212          const uschar *thisname;
1213          *count += 1;
1214          if (name == NULL && *count == lorn) return *count;
1215          term = *ptr++;
1216          if (term == CHAR_LESS_THAN_SIGN) term = CHAR_GREATER_THAN_SIGN;
1217          thisname = ptr;
1218          while (*ptr != term) ptr++;
1219          if (name != NULL && lorn == ptr - thisname &&
1220              strncmp((const char *)name, (const char *)thisname, lorn) == 0)
1221            return *count;
1222          term++;
1223          }
1224        }
1225      }
1226    
1227  register int branchlength = 0;  /* Past any initial parenthesis handling, scan for parentheses or vertical
1228  register uschar *cc = code + 1 + LINK_SIZE;  bars. Stop if we get to cd->end_pattern. Note that this is important for the
1229    first-pass call when this value is temporarily adjusted to stop at the current
1230    position. So DO NOT change this to a test for binary zero. */
1231    
1232  /* Scan along the opcodes for this branch. If we get to the end of the  for (; ptr < cd->end_pattern; ptr++)
1233  branch, check the length against that of the other branches. */    {
1234      /* Skip over backslashed characters and also entire \Q...\E */
1235    
1236      if (*ptr == CHAR_BACKSLASH)
1237        {
1238        if (*(++ptr) == 0) goto FAIL_EXIT;
1239        if (*ptr == CHAR_Q) for (;;)
1240          {
1241          while (*(++ptr) != 0 && *ptr != CHAR_BACKSLASH) {};
1242          if (*ptr == 0) goto FAIL_EXIT;
1243          if (*(++ptr) == CHAR_E) break;
1244          }
1245        continue;
1246        }
1247    
1248      /* Skip over character classes; this logic must be similar to the way they
1249      are handled for real. If the first character is '^', skip it. Also, if the
1250      first few characters (either before or after ^) are \Q\E or \E we skip them
1251      too. This makes for compatibility with Perl. Note the use of STR macros to
1252      encode "Q\\E" so that it works in UTF-8 on EBCDIC platforms. */
1253    
1254      if (*ptr == CHAR_LEFT_SQUARE_BRACKET)
1255        {
1256        BOOL negate_class = FALSE;
1257        for (;;)
1258          {
1259          if (ptr[1] == CHAR_BACKSLASH)
1260            {
1261            if (ptr[2] == CHAR_E)
1262              ptr+= 2;
1263            else if (strncmp((const char *)ptr+2,
1264                     STR_Q STR_BACKSLASH STR_E, 3) == 0)
1265              ptr += 4;
1266            else
1267              break;
1268            }
1269          else if (!negate_class && ptr[1] == CHAR_CIRCUMFLEX_ACCENT)
1270            {
1271            negate_class = TRUE;
1272            ptr++;
1273            }
1274          else break;
1275          }
1276    
1277        /* If the next character is ']', it is a data character that must be
1278        skipped, except in JavaScript compatibility mode. */
1279    
1280        if (ptr[1] == CHAR_RIGHT_SQUARE_BRACKET &&
1281            (cd->external_options & PCRE_JAVASCRIPT_COMPAT) == 0)
1282          ptr++;
1283    
1284        while (*(++ptr) != CHAR_RIGHT_SQUARE_BRACKET)
1285          {
1286          if (*ptr == 0) return -1;
1287          if (*ptr == CHAR_BACKSLASH)
1288            {
1289            if (*(++ptr) == 0) goto FAIL_EXIT;
1290            if (*ptr == CHAR_Q) for (;;)
1291              {
1292              while (*(++ptr) != 0 && *ptr != CHAR_BACKSLASH) {};
1293              if (*ptr == 0) goto FAIL_EXIT;
1294              if (*(++ptr) == CHAR_E) break;
1295              }
1296            continue;
1297            }
1298          }
1299        continue;
1300        }
1301    
1302      /* Skip comments in /x mode */
1303    
1304      if (xmode && *ptr == CHAR_NUMBER_SIGN)
1305        {
1306        ptr++;
1307        while (*ptr != 0)
1308          {
1309          if (IS_NEWLINE(ptr)) { ptr += cd->nllen - 1; break; }
1310          ptr++;
1311    #ifdef SUPPORT_UTF8
1312          if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
1313    #endif
1314          }
1315        if (*ptr == 0) goto FAIL_EXIT;
1316        continue;
1317        }
1318    
1319      /* Check for the special metacharacters */
1320    
1321      if (*ptr == CHAR_LEFT_PARENTHESIS)
1322        {
1323        int rc = find_parens_sub(&ptr, cd, name, lorn, xmode, utf8, count);
1324        if (rc > 0) return rc;
1325        if (*ptr == 0) goto FAIL_EXIT;
1326        }
1327    
1328      else if (*ptr == CHAR_RIGHT_PARENTHESIS)
1329        {
1330        if (dup_parens && *count < hwm_count) *count = hwm_count;
1331        goto FAIL_EXIT;
1332        }
1333    
1334      else if (*ptr == CHAR_VERTICAL_LINE && dup_parens)
1335        {
1336        if (*count > hwm_count) hwm_count = *count;
1337        *count = start_count;
1338        }
1339      }
1340    
1341    FAIL_EXIT:
1342    *ptrptr = ptr;
1343    return -1;
1344    }
1345    
1346    
1347    
1348    
1349    /*************************************************
1350    *       Find forward referenced subpattern       *
1351    *************************************************/
1352    
1353    /* This function scans along a pattern's text looking for capturing
1354    subpatterns, and counting them. If it finds a named pattern that matches the
1355    name it is given, it returns its number. Alternatively, if the name is NULL, it
1356    returns when it reaches a given numbered subpattern. This is used for forward
1357    references to subpatterns. We used to be able to start this scan from the
1358    current compiling point, using the current count value from cd->bracount, and
1359    do it all in a single loop, but the addition of the possibility of duplicate
1360    subpattern numbers means that we have to scan from the very start, in order to
1361    take account of such duplicates, and to use a recursive function to keep track
1362    of the different types of group.
1363    
1364    Arguments:
1365      cd           compile background data
1366      name         name to seek, or NULL if seeking a numbered subpattern
1367      lorn         name length, or subpattern number if name is NULL
1368      xmode        TRUE if we are in /x mode
1369      utf8         TRUE if we are in UTF-8 mode
1370    
1371    Returns:       the number of the found subpattern, or -1 if not found
1372    */
1373    
1374    static int
1375    find_parens(compile_data *cd, const uschar *name, int lorn, BOOL xmode,
1376      BOOL utf8)
1377    {
1378    uschar *ptr = (uschar *)cd->start_pattern;
1379    int count = 0;
1380    int rc;
1381    
1382    /* If the pattern does not start with an opening parenthesis, the first call
1383    to find_parens_sub() will scan right to the end (if necessary). However, if it
1384    does start with a parenthesis, find_parens_sub() will return when it hits the
1385    matching closing parens. That is why we have to have a loop. */
1386    
1387    for (;;)
1388      {
1389      rc = find_parens_sub(&ptr, cd, name, lorn, xmode, utf8, &count);
1390      if (rc > 0 || *ptr++ == 0) break;
1391      }
1392    
1393    return rc;
1394    }
1395    
1396    
1397    
1398    
1399    /*************************************************
1400    *      Find first significant op code            *
1401    *************************************************/
1402    
1403    /* This is called by several functions that scan a compiled expression looking
1404    for a fixed first character, or an anchoring op code etc. It skips over things
1405    that do not influence this. For some calls, it makes sense to skip negative
1406    forward and all backward assertions, and also the \b assertion; for others it
1407    does not.
1408    
1409    Arguments:
1410      code         pointer to the start of the group
1411      skipassert   TRUE if certain assertions are to be skipped
1412    
1413    Returns:       pointer to the first significant opcode
1414    */
1415    
1416    static const uschar*
1417    first_significant_code(const uschar *code, BOOL skipassert)
1418    {
1419    for (;;)
1420      {
1421      switch ((int)*code)
1422        {
1423        case OP_ASSERT_NOT:
1424        case OP_ASSERTBACK:
1425        case OP_ASSERTBACK_NOT:
1426        if (!skipassert) return code;
1427        do code += GET(code, 1); while (*code == OP_ALT);
1428        code += _pcre_OP_lengths[*code];
1429        break;
1430    
1431        case OP_WORD_BOUNDARY:
1432        case OP_NOT_WORD_BOUNDARY:
1433        if (!skipassert) return code;
1434        /* Fall through */
1435    
1436        case OP_CALLOUT:
1437        case OP_CREF:
1438        case OP_NCREF:
1439        case OP_RREF:
1440        case OP_NRREF:
1441        case OP_DEF:
1442        code += _pcre_OP_lengths[*code];
1443        break;
1444    
1445        default:
1446        return code;
1447        }
1448      }
1449    /* Control never reaches here */
1450    }
1451    
1452    
1453    
1454    
1455    /*************************************************
1456    *        Find the fixed length of a branch       *
1457    *************************************************/
1458    
1459    /* Scan a branch and compute the fixed length of subject that will match it,
1460    if the length is fixed. This is needed for dealing with backward assertions.
1461    In UTF8 mode, the result is in characters rather than bytes. The branch is
1462    temporarily terminated with OP_END when this function is called.
1463    
1464    This function is called when a backward assertion is encountered, so that if it
1465    fails, the error message can point to the correct place in the pattern.
1466    However, we cannot do this when the assertion contains subroutine calls,
1467    because they can be forward references. We solve this by remembering this case
1468    and doing the check at the end; a flag specifies which mode we are running in.
1469    
1470    Arguments:
1471      code     points to the start of the pattern (the bracket)
1472      utf8     TRUE in UTF-8 mode
1473      atend    TRUE if called when the pattern is complete
1474      cd       the "compile data" structure
1475    
1476    Returns:   the fixed length,
1477                 or -1 if there is no fixed length,
1478                 or -2 if \C was encountered
1479                 or -3 if an OP_RECURSE item was encountered and atend is FALSE
1480    */
1481    
1482    static int
1483    find_fixedlength(uschar *code, BOOL utf8, BOOL atend, compile_data *cd)
1484    {
1485    int length = -1;
1486    
1487    register int branchlength = 0;
1488    register uschar *cc = code + 1 + LINK_SIZE;
1489    
1490    /* Scan along the opcodes for this branch. If we get to the end of the
1491    branch, check the length against that of the other branches. */
1492    
1493  for (;;)  for (;;)
1494    {    {
1495    int d;    int d;
1496      uschar *ce, *cs;
1497    register int op = *cc;    register int op = *cc;
   if (op >= OP_BRA) op = OP_BRA;  
   
1498    switch (op)    switch (op)
1499      {      {
1500        /* We only need to continue for OP_CBRA (normal capturing bracket) and
1501        OP_BRA (normal non-capturing bracket) because the other variants of these
1502        opcodes are all concerned with unlimited repeated groups, which of course
1503        are not of fixed length. They will cause a -1 response from the default
1504        case of this switch. */
1505    
1506        case OP_CBRA:
1507      case OP_BRA:      case OP_BRA:
1508      case OP_ONCE:      case OP_ONCE:
1509      case OP_COND:      case OP_COND:
1510      d = find_fixedlength(cc, options);      d = find_fixedlength(cc + ((op == OP_CBRA)? 2:0), utf8, atend, cd);
1511      if (d < 0) return d;      if (d < 0) return d;
1512      branchlength += d;      branchlength += d;
1513      do cc += GET(cc, 1); while (*cc == OP_ALT);      do cc += GET(cc, 1); while (*cc == OP_ALT);
# Line 839  for (;;) Line 1516  for (;;)
1516    
1517      /* Reached end of a branch; if it's a ket it is the end of a nested      /* Reached end of a branch; if it's a ket it is the end of a nested
1518      call. If it's ALT it is an alternation in a nested call. If it is      call. If it's ALT it is an alternation in a nested call. If it is
1519      END it's the end of the outer call. All can be handled by the same code. */      END it's the end of the outer call. All can be handled by the same code.
1520        Note that we must not include the OP_KETRxxx opcodes here, because they
1521        all imply an unlimited repeat. */
1522    
1523      case OP_ALT:      case OP_ALT:
1524      case OP_KET:      case OP_KET:
     case OP_KETRMAX:  
     case OP_KETRMIN:  
1525      case OP_END:      case OP_END:
1526      if (length < 0) length = branchlength;      if (length < 0) length = branchlength;
1527        else if (length != branchlength) return -1;        else if (length != branchlength) return -1;
# Line 853  for (;;) Line 1530  for (;;)
1530      branchlength = 0;      branchlength = 0;
1531      break;      break;
1532    
1533        /* A true recursion implies not fixed length, but a subroutine call may
1534        be OK. If the subroutine is a forward reference, we can't deal with
1535        it until the end of the pattern, so return -3. */
1536    
1537        case OP_RECURSE:
1538        if (!atend) return -3;
1539        cs = ce = (uschar *)cd->start_code + GET(cc, 1);  /* Start subpattern */
1540        do ce += GET(ce, 1); while (*ce == OP_ALT);       /* End subpattern */
1541        if (cc > cs && cc < ce) return -1;                /* Recursion */
1542        d = find_fixedlength(cs + 2, utf8, atend, cd);
1543        if (d < 0) return d;
1544        branchlength += d;
1545        cc += 1 + LINK_SIZE;
1546        break;
1547    
1548      /* Skip over assertive subpatterns */      /* Skip over assertive subpatterns */
1549    
1550      case OP_ASSERT:      case OP_ASSERT:
# Line 865  for (;;) Line 1557  for (;;)
1557      /* Skip over things that don't match chars */      /* Skip over things that don't match chars */
1558    
1559      case OP_REVERSE:      case OP_REVERSE:
     case OP_BRANUMBER:  
1560      case OP_CREF:      case OP_CREF:
1561      case OP_OPT:      case OP_NCREF:
1562        case OP_RREF:
1563        case OP_NRREF:
1564        case OP_DEF:
1565      case OP_CALLOUT:      case OP_CALLOUT:
1566      case OP_SOD:      case OP_SOD:
1567      case OP_SOM:      case OP_SOM:
1568        case OP_SET_SOM:
1569      case OP_EOD:      case OP_EOD:
1570      case OP_EODN:      case OP_EODN:
1571      case OP_CIRC:      case OP_CIRC:
1572        case OP_CIRCM:
1573      case OP_DOLL:      case OP_DOLL:
1574        case OP_DOLLM:
1575      case OP_NOT_WORD_BOUNDARY:      case OP_NOT_WORD_BOUNDARY:
1576      case OP_WORD_BOUNDARY:      case OP_WORD_BOUNDARY:
1577      cc += _pcre_OP_lengths[*cc];      cc += _pcre_OP_lengths[*cc];
# Line 883  for (;;) Line 1580  for (;;)
1580      /* Handle literal characters */      /* Handle literal characters */
1581    
1582      case OP_CHAR:      case OP_CHAR:
1583      case OP_CHARNC:      case OP_CHARI:
1584        case OP_NOT:
1585        case OP_NOTI:
1586      branchlength++;      branchlength++;
1587      cc += 2;      cc += 2;
1588  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
1589      if ((options & PCRE_UTF8) != 0)      if (utf8 && cc[-1] >= 0xc0) cc += _pcre_utf8_table4[cc[-1] & 0x3f];
       {  
       while ((*cc & 0xc0) == 0x80) cc++;  
       }  
1590  #endif  #endif
1591      break;      break;
1592    
# Line 901  for (;;) Line 1597  for (;;)
1597      branchlength += GET2(cc,1);      branchlength += GET2(cc,1);
1598      cc += 4;      cc += 4;
1599  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
1600      if ((options & PCRE_UTF8) != 0)      if (utf8 && cc[-1] >= 0xc0) cc += _pcre_utf8_table4[cc[-1] & 0x3f];
       {  
       while((*cc & 0x80) == 0x80) cc++;  
       }  
1601  #endif  #endif
1602      break;      break;
1603    
1604      case OP_TYPEEXACT:      case OP_TYPEEXACT:
1605      branchlength += GET2(cc,1);      branchlength += GET2(cc,1);
1606        if (cc[3] == OP_PROP || cc[3] == OP_NOTPROP) cc += 2;
1607      cc += 4;      cc += 4;
1608      break;      break;
1609    
# Line 917  for (;;) Line 1611  for (;;)
1611    
1612      case OP_PROP:      case OP_PROP:
1613      case OP_NOTPROP:      case OP_NOTPROP:
1614      cc++;      cc += 2;
1615      /* Fall through */      /* Fall through */
1616    
1617      case OP_NOT_DIGIT:      case OP_NOT_DIGIT:
# Line 927  for (;;) Line 1621  for (;;)
1621      case OP_NOT_WORDCHAR:      case OP_NOT_WORDCHAR:
1622      case OP_WORDCHAR:      case OP_WORDCHAR:
1623      case OP_ANY:      case OP_ANY:
1624        case OP_ALLANY:
1625      branchlength++;      branchlength++;
1626      cc++;      cc++;
1627      break;      break;
# Line 981  for (;;) Line 1676  for (;;)
1676    
1677    
1678  /*************************************************  /*************************************************
1679  *    Scan compiled regex for numbered bracket    *  *    Scan compiled regex for specific bracket    *
1680  *************************************************/  *************************************************/
1681    
1682  /* This little function scans through a compiled pattern until it finds a  /* This little function scans through a compiled pattern until it finds a
1683  capturing bracket with the given number.  capturing bracket with the given number, or, if the number is negative, an
1684    instance of OP_REVERSE for a lookbehind. The function is global in the C sense
1685    so that it can be called from pcre_study() when finding the minimum matching
1686    length.
1687    
1688  Arguments:  Arguments:
1689    code        points to start of expression    code        points to start of expression
1690    utf8        TRUE in UTF-8 mode    utf8        TRUE in UTF-8 mode
1691    number      the required bracket number    number      the required bracket number or negative to find a lookbehind
1692    
1693  Returns:      pointer to the opcode for the bracket, or NULL if not found  Returns:      pointer to the opcode for the bracket, or NULL if not found
1694  */  */
1695    
1696  static const uschar *  const uschar *
1697  find_bracket(const uschar *code, BOOL utf8, int number)  _pcre_find_bracket(const uschar *code, BOOL utf8, int number)
1698  {  {
 #ifndef SUPPORT_UTF8  
 utf8 = utf8;               /* Stop pedantic compilers complaining */  
 #endif  
   
1699  for (;;)  for (;;)
1700    {    {
1701    register int c = *code;    register int c = *code;
1702    
1703    if (c == OP_END) return NULL;    if (c == OP_END) return NULL;
1704    else if (c > OP_BRA)  
1705      /* XCLASS is used for classes that cannot be represented just by a bit
1706      map. This includes negated single high-valued characters. The length in
1707      the table is zero; the actual length is stored in the compiled code. */
1708    
1709      if (c == OP_XCLASS) code += GET(code, 1);
1710    
1711      /* Handle recursion */
1712    
1713      else if (c == OP_REVERSE)
1714      {      {
1715      int n = c - OP_BRA;      if (number < 0) return (uschar *)code;
1716      if (n > EXTRACT_BASIC_MAX) n = GET2(code, 2+LINK_SIZE);      code += _pcre_OP_lengths[c];
1717        }
1718    
1719      /* Handle capturing bracket */
1720    
1721      else if (c == OP_CBRA || c == OP_SCBRA ||
1722               c == OP_CBRAPOS || c == OP_SCBRAPOS)
1723        {
1724        int n = GET2(code, 1+LINK_SIZE);
1725      if (n == number) return (uschar *)code;      if (n == number) return (uschar *)code;
1726      code += _pcre_OP_lengths[OP_BRA];      code += _pcre_OP_lengths[c];
1727      }      }
1728    
1729      /* Otherwise, we can get the item's length from the table, except that for
1730      repeated character types, we have to test for \p and \P, which have an extra
1731      two bytes of parameters, and for MARK/PRUNE/SKIP/THEN with an argument, we
1732      must add in its length. */
1733    
1734    else    else
1735      {      {
1736      code += _pcre_OP_lengths[c];      switch(c)
1737          {
1738          case OP_TYPESTAR:
1739          case OP_TYPEMINSTAR:
1740          case OP_TYPEPLUS:
1741          case OP_TYPEMINPLUS:
1742          case OP_TYPEQUERY:
1743          case OP_TYPEMINQUERY:
1744          case OP_TYPEPOSSTAR:
1745          case OP_TYPEPOSPLUS:
1746          case OP_TYPEPOSQUERY:
1747          if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
1748          break;
1749    
1750  #ifdef SUPPORT_UTF8        case OP_TYPEUPTO:
1751          case OP_TYPEMINUPTO:
1752          case OP_TYPEEXACT:
1753          case OP_TYPEPOSUPTO:
1754          if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
1755          break;
1756    
1757      /* In UTF-8 mode, opcodes that are followed by a character may be followed        case OP_MARK:
1758      by a multi-byte character. The length in the table is a minimum, so we have        case OP_PRUNE_ARG:
1759      to scan along to skip the extra bytes. All opcodes are less than 128, so we        case OP_SKIP_ARG:
1760      can use relatively efficient code. */        code += code[1];
1761          break;
1762    
1763          case OP_THEN_ARG:
1764          code += code[1+LINK_SIZE];
1765          break;
1766          }
1767    
1768        /* Add in the fixed length from the table */
1769    
1770        code += _pcre_OP_lengths[c];
1771    
1772      /* In UTF-8 mode, opcodes that are followed by a character may be followed by
1773      a multi-byte character. The length in the table is a minimum, so we have to
1774      arrange to skip the extra bytes. */
1775    
1776    #ifdef SUPPORT_UTF8
1777      if (utf8) switch(c)      if (utf8) switch(c)
1778        {        {
1779        case OP_CHAR:        case OP_CHAR:
1780        case OP_CHARNC:        case OP_CHARI:
1781        case OP_EXACT:        case OP_EXACT:
1782          case OP_EXACTI:
1783        case OP_UPTO:        case OP_UPTO:
1784          case OP_UPTOI:
1785        case OP_MINUPTO:        case OP_MINUPTO:
1786          case OP_MINUPTOI:
1787          case OP_POSUPTO:
1788          case OP_POSUPTOI:
1789        case OP_STAR:        case OP_STAR:
1790          case OP_STARI:
1791        case OP_MINSTAR:        case OP_MINSTAR:
1792          case OP_MINSTARI:
1793          case OP_POSSTAR:
1794          case OP_POSSTARI:
1795        case OP_PLUS:        case OP_PLUS:
1796          case OP_PLUSI:
1797        case OP_MINPLUS:        case OP_MINPLUS:
1798          case OP_MINPLUSI:
1799          case OP_POSPLUS:
1800          case OP_POSPLUSI:
1801        case OP_QUERY:        case OP_QUERY:
1802          case OP_QUERYI:
1803        case OP_MINQUERY:        case OP_MINQUERY:
1804        while ((*code & 0xc0) == 0x80) code++;        case OP_MINQUERYI:
1805        break;        case OP_POSQUERY:
1806          case OP_POSQUERYI:
1807        /* XCLASS is used for classes that cannot be represented just by a bit        if (code[-1] >= 0xc0) code += _pcre_utf8_table4[code[-1] & 0x3f];
       map. This includes negated single high-valued characters. The length in  
       the table is zero; the actual length is stored in the compiled code. */  
   
       case OP_XCLASS:  
       code += GET(code, 1) + 1;  
1808        break;        break;
1809        }        }
1810    #else
1811        (void)(utf8);  /* Keep compiler happy by referencing function argument */
1812  #endif  #endif
1813      }      }
1814    }    }
# Line 1072  Returns:      pointer to the opcode for Line 1833  Returns:      pointer to the opcode for
1833  static const uschar *  static const uschar *
1834  find_recurse(const uschar *code, BOOL utf8)  find_recurse(const uschar *code, BOOL utf8)
1835  {  {
 #ifndef SUPPORT_UTF8  
 utf8 = utf8;               /* Stop pedantic compilers complaining */  
 #endif  
   
1836  for (;;)  for (;;)
1837    {    {
1838    register int c = *code;    register int c = *code;
1839    if (c == OP_END) return NULL;    if (c == OP_END) return NULL;
1840    else if (c == OP_RECURSE) return code;    if (c == OP_RECURSE) return code;
1841    else if (c > OP_BRA)  
1842      {    /* XCLASS is used for classes that cannot be represented just by a bit
1843      code += _pcre_OP_lengths[OP_BRA];    map. This includes negated single high-valued characters. The length in
1844      }    the table is zero; the actual length is stored in the compiled code. */
1845    
1846      if (c == OP_XCLASS) code += GET(code, 1);
1847    
1848      /* Otherwise, we can get the item's length from the table, except that for
1849      repeated character types, we have to test for \p and \P, which have an extra
1850      two bytes of parameters, and for MARK/PRUNE/SKIP/THEN with an argument, we
1851      must add in its length. */
1852    
1853    else    else
1854      {      {
1855      code += _pcre_OP_lengths[c];      switch(c)
1856          {
1857          case OP_TYPESTAR:
1858          case OP_TYPEMINSTAR:
1859          case OP_TYPEPLUS:
1860          case OP_TYPEMINPLUS:
1861          case OP_TYPEQUERY:
1862          case OP_TYPEMINQUERY:
1863          case OP_TYPEPOSSTAR:
1864          case OP_TYPEPOSPLUS:
1865          case OP_TYPEPOSQUERY:
1866          if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
1867          break;
1868    
1869  #ifdef SUPPORT_UTF8        case OP_TYPEPOSUPTO:
1870          case OP_TYPEUPTO:
1871          case OP_TYPEMINUPTO:
1872          case OP_TYPEEXACT:
1873          if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
1874          break;
1875    
1876          case OP_MARK:
1877          case OP_PRUNE_ARG:
1878          case OP_SKIP_ARG:
1879          code += code[1];
1880          break;
1881    
1882          case OP_THEN_ARG:
1883          code += code[1+LINK_SIZE];
1884          break;
1885          }
1886    
1887        /* Add in the fixed length from the table */
1888    
1889        code += _pcre_OP_lengths[c];
1890    
1891      /* In UTF-8 mode, opcodes that are followed by a character may be followed      /* In UTF-8 mode, opcodes that are followed by a character may be followed
1892      by a multi-byte character. The length in the table is a minimum, so we have      by a multi-byte character. The length in the table is a minimum, so we have
1893      to scan along to skip the extra bytes. All opcodes are less than 128, so we      to arrange to skip the extra bytes. */
     can use relatively efficient code. */  
1894    
1895    #ifdef SUPPORT_UTF8
1896      if (utf8) switch(c)      if (utf8) switch(c)
1897        {        {
1898        case OP_CHAR:        case OP_CHAR:
1899        case OP_CHARNC:        case OP_CHARI:
1900        case OP_EXACT:        case OP_EXACT:
1901          case OP_EXACTI:
1902        case OP_UPTO:        case OP_UPTO:
1903          case OP_UPTOI:
1904        case OP_MINUPTO:        case OP_MINUPTO:
1905          case OP_MINUPTOI:
1906          case OP_POSUPTO:
1907          case OP_POSUPTOI:
1908        case OP_STAR:        case OP_STAR:
1909          case OP_STARI:
1910        case OP_MINSTAR:        case OP_MINSTAR:
1911          case OP_MINSTARI:
1912          case OP_POSSTAR:
1913          case OP_POSSTARI:
1914        case OP_PLUS:        case OP_PLUS:
1915          case OP_PLUSI:
1916        case OP_MINPLUS:        case OP_MINPLUS:
1917          case OP_MINPLUSI:
1918          case OP_POSPLUS:
1919          case OP_POSPLUSI:
1920        case OP_QUERY:        case OP_QUERY:
1921          case OP_QUERYI:
1922        case OP_MINQUERY:        case OP_MINQUERY:
1923        while ((*code & 0xc0) == 0x80) code++;        case OP_MINQUERYI:
1924        break;        case OP_POSQUERY:
1925          case OP_POSQUERYI:
1926        /* XCLASS is used for classes that cannot be represented just by a bit        if (code[-1] >= 0xc0) code += _pcre_utf8_table4[code[-1] & 0x3f];
       map. This includes negated single high-valued characters. The length in  
       the table is zero; the actual length is stored in the compiled code. */  
   
       case OP_XCLASS:  
       code += GET(code, 1) + 1;  
1927        break;        break;
1928        }        }
1929    #else
1930        (void)(utf8);  /* Keep compiler happy by referencing function argument */
1931  #endif  #endif
1932      }      }
1933    }    }
# Line 1132  for (;;) Line 1940  for (;;)
1940  *************************************************/  *************************************************/
1941    
1942  /* This function scans through a branch of a compiled pattern to see whether it  /* This function scans through a branch of a compiled pattern to see whether it
1943  can match the empty string or not. It is called only from could_be_empty()  can match the empty string or not. It is called from could_be_empty()
1944  below. Note that first_significant_code() skips over assertions. If we hit an  below and from compile_branch() when checking for an unlimited repeat of a
1945  unclosed bracket, we return "empty" - this means we've struck an inner bracket  group that can match nothing. Note that first_significant_code() skips over
1946  whose current branch will already have been scanned.  backward and negative forward assertions when its final argument is TRUE. If we
1947    hit an unclosed bracket, we return "empty" - this means we've struck an inner
1948    bracket whose current branch will already have been scanned.
1949    
1950  Arguments:  Arguments:
1951    code        points to start of search    code        points to start of search
1952    endcode     points to where to stop    endcode     points to where to stop
1953    utf8        TRUE if in UTF8 mode    utf8        TRUE if in UTF8 mode
1954      cd          contains pointers to tables etc.
1955    
1956  Returns:      TRUE if what is matched could be empty  Returns:      TRUE if what is matched could be empty
1957  */  */
1958    
1959  static BOOL  static BOOL
1960  could_be_empty_branch(const uschar *code, const uschar *endcode, BOOL utf8)  could_be_empty_branch(const uschar *code, const uschar *endcode, BOOL utf8,
1961      compile_data *cd)
1962  {  {
1963  register int c;  register int c;
1964  for (code = first_significant_code(code + 1 + LINK_SIZE, NULL, 0, TRUE);  for (code = first_significant_code(code + _pcre_OP_lengths[*code], TRUE);
1965       code < endcode;       code < endcode;
1966       code = first_significant_code(code + _pcre_OP_lengths[c], NULL, 0, TRUE))       code = first_significant_code(code + _pcre_OP_lengths[c], TRUE))
1967    {    {
1968    const uschar *ccode;    const uschar *ccode;
1969    
1970    c = *code;    c = *code;
1971    
1972    if (c >= OP_BRA)    /* Skip over forward assertions; the other assertions are skipped by
1973      first_significant_code() with a TRUE final argument. */
1974    
1975      if (c == OP_ASSERT)
1976        {
1977        do code += GET(code, 1); while (*code == OP_ALT);
1978        c = *code;
1979        continue;
1980        }
1981    
1982      /* For a recursion/subroutine call, if its end has been reached, which
1983      implies a backward reference subroutine call, we can scan it. If it's a
1984      forward reference subroutine call, we can't. To detect forward reference
1985      we have to scan up the list that is kept in the workspace. This function is
1986      called only when doing the real compile, not during the pre-compile that
1987      measures the size of the compiled pattern. */
1988    
1989      if (c == OP_RECURSE)
1990      {      {
1991        const uschar *scode;
1992      BOOL empty_branch;      BOOL empty_branch;
     if (GET(code, 1) == 0) return TRUE;    /* Hit unclosed bracket */  
1993    
1994      /* Scan a closed bracket */      /* Test for forward reference */
1995    
1996        for (scode = cd->start_workspace; scode < cd->hwm; scode += LINK_SIZE)
1997          if (GET(scode, 0) == code + 1 - cd->start_code) return TRUE;
1998    
1999        /* Not a forward reference, test for completed backward reference */
2000    
2001      empty_branch = FALSE;      empty_branch = FALSE;
2002        scode = cd->start_code + GET(code, 1);
2003        if (GET(scode, 1) == 0) return TRUE;    /* Unclosed */
2004    
2005        /* Completed backwards reference */
2006    
2007      do      do
2008        {        {
2009        if (!empty_branch && could_be_empty_branch(code, endcode, utf8))        if (could_be_empty_branch(scode, endcode, utf8, cd))
2010            {
2011          empty_branch = TRUE;          empty_branch = TRUE;
2012        code += GET(code, 1);          break;
2013            }
2014          scode += GET(scode, 1);
2015        }        }
2016      while (*code == OP_ALT);      while (*scode == OP_ALT);
2017      if (!empty_branch) return FALSE;   /* All branches are non-empty */  
2018      code += 1 + LINK_SIZE;      if (!empty_branch) return FALSE;  /* All branches are non-empty */
2019      c = *code;      continue;
2020      }      }
2021    
2022    else switch (c)    /* Groups with zero repeats can of course be empty; skip them. */
2023    
2024      if (c == OP_BRAZERO || c == OP_BRAMINZERO || c == OP_SKIPZERO ||
2025          c == OP_BRAPOSZERO)
2026      {      {
2027      /* Check for quantifiers after a class */      code += _pcre_OP_lengths[c];
2028        do code += GET(code, 1); while (*code == OP_ALT);
2029        c = *code;
2030        continue;
2031        }
2032    
2033  #ifdef SUPPORT_UTF8    /* A nested group that is already marked as "could be empty" can just be
2034      skipped. */
2035    
2036      if (c == OP_SBRA  || c == OP_SBRAPOS ||
2037          c == OP_SCBRA || c == OP_SCBRAPOS)
2038        {
2039        do code += GET(code, 1); while (*code == OP_ALT);
2040        c = *code;
2041        continue;
2042        }
2043    
2044      /* For other groups, scan the branches. */
2045    
2046      if (c == OP_BRA  || c == OP_BRAPOS ||
2047          c == OP_CBRA || c == OP_CBRAPOS ||
2048          c == OP_ONCE || c == OP_COND)
2049        {
2050        BOOL empty_branch;
2051        if (GET(code, 1) == 0) return TRUE;    /* Hit unclosed bracket */
2052    
2053        /* If a conditional group has only one branch, there is a second, implied,
2054        empty branch, so just skip over the conditional, because it could be empty.
2055        Otherwise, scan the individual branches of the group. */
2056    
2057        if (c == OP_COND && code[GET(code, 1)] != OP_ALT)
2058          code += GET(code, 1);
2059        else
2060          {
2061          empty_branch = FALSE;
2062          do
2063            {
2064            if (!empty_branch && could_be_empty_branch(code, endcode, utf8, cd))
2065              empty_branch = TRUE;
2066            code += GET(code, 1);
2067            }
2068          while (*code == OP_ALT);
2069          if (!empty_branch) return FALSE;   /* All branches are non-empty */
2070          }
2071    
2072        c = *code;
2073        continue;
2074        }
2075    
2076      /* Handle the other opcodes */
2077    
2078      switch (c)
2079        {
2080        /* Check for quantifiers after a class. XCLASS is used for classes that
2081        cannot be represented just by a bit map. This includes negated single
2082        high-valued characters. The length in _pcre_OP_lengths[] is zero; the
2083        actual length is stored in the compiled code, so we must update "code"
2084        here. */
2085    
2086    #ifdef SUPPORT_UTF8
2087      case OP_XCLASS:      case OP_XCLASS:
2088      ccode = code + GET(code, 1);      ccode = code += GET(code, 1);
2089      goto CHECK_CLASS_REPEAT;      goto CHECK_CLASS_REPEAT;
2090  #endif  #endif
2091    
# Line 1227  for (code = first_significant_code(code Line 2129  for (code = first_significant_code(code
2129      case OP_NOT_WORDCHAR:      case OP_NOT_WORDCHAR:
2130      case OP_WORDCHAR:      case OP_WORDCHAR:
2131      case OP_ANY:      case OP_ANY:
2132        case OP_ALLANY:
2133      case OP_ANYBYTE:      case OP_ANYBYTE:
2134      case OP_CHAR:      case OP_CHAR:
2135      case OP_CHARNC:      case OP_CHARI:
2136      case OP_NOT:      case OP_NOT:
2137        case OP_NOTI:
2138      case OP_PLUS:      case OP_PLUS:
2139      case OP_MINPLUS:      case OP_MINPLUS:
2140        case OP_POSPLUS:
2141      case OP_EXACT:      case OP_EXACT:
2142      case OP_NOTPLUS:      case OP_NOTPLUS:
2143      case OP_NOTMINPLUS:      case OP_NOTMINPLUS:
2144        case OP_NOTPOSPLUS:
2145      case OP_NOTEXACT:      case OP_NOTEXACT:
2146      case OP_TYPEPLUS:      case OP_TYPEPLUS:
2147      case OP_TYPEMINPLUS:      case OP_TYPEMINPLUS:
2148        case OP_TYPEPOSPLUS:
2149      case OP_TYPEEXACT:      case OP_TYPEEXACT:
2150      return FALSE;      return FALSE;
2151    
2152        /* These are going to continue, as they may be empty, but we have to
2153        fudge the length for the \p and \P cases. */
2154    
2155        case OP_TYPESTAR:
2156        case OP_TYPEMINSTAR:
2157        case OP_TYPEPOSSTAR:
2158        case OP_TYPEQUERY:
2159        case OP_TYPEMINQUERY:
2160        case OP_TYPEPOSQUERY:
2161        if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
2162        break;
2163    
2164        /* Same for these */
2165    
2166        case OP_TYPEUPTO:
2167        case OP_TYPEMINUPTO:
2168        case OP_TYPEPOSUPTO:
2169        if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
2170        break;
2171    
2172      /* End of branch */      /* End of branch */
2173    
2174      case OP_KET:      case OP_KET:
2175      case OP_KETRMAX:      case OP_KETRMAX:
2176      case OP_KETRMIN:      case OP_KETRMIN:
2177        case OP_KETRPOS:
2178      case OP_ALT:      case OP_ALT:
2179      return TRUE;      return TRUE;
2180    
2181      /* In UTF-8 mode, STAR, MINSTAR, QUERY, MINQUERY, UPTO, and MINUPTO  may be      /* In UTF-8 mode, STAR, MINSTAR, POSSTAR, QUERY, MINQUERY, POSQUERY, UPTO,
2182      followed by a multibyte character */      MINUPTO, and POSUPTO may be followed by a multibyte character */
2183    
2184  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
2185      case OP_STAR:      case OP_STAR:
2186        case OP_STARI:
2187      case OP_MINSTAR:      case OP_MINSTAR:
2188        case OP_MINSTARI:
2189        case OP_POSSTAR:
2190        case OP_POSSTARI:
2191      case OP_QUERY:      case OP_QUERY:
2192        case OP_QUERYI:
2193      case OP_MINQUERY:      case OP_MINQUERY:
2194        case OP_MINQUERYI:
2195        case OP_POSQUERY:
2196        case OP_POSQUERYI:
2197        if (utf8 && code[1] >= 0xc0) code += _pcre_utf8_table4[code[1] & 0x3f];
2198        break;
2199    
2200      case OP_UPTO:      case OP_UPTO:
2201        case OP_UPTOI:
2202      case OP_MINUPTO:      case OP_MINUPTO:
2203      if (utf8) while ((code[2] & 0xc0) == 0x80) code++;      case OP_MINUPTOI:
2204        case OP_POSUPTO:
2205        case OP_POSUPTOI:
2206        if (utf8 && code[3] >= 0xc0) code += _pcre_utf8_table4[code[3] & 0x3f];
2207      break;      break;
2208  #endif  #endif
2209    
2210        /* MARK, and PRUNE/SKIP/THEN with an argument must skip over the argument
2211        string. */
2212    
2213        case OP_MARK:
2214        case OP_PRUNE_ARG:
2215        case OP_SKIP_ARG:
2216        code += code[1];
2217        break;
2218    
2219        case OP_THEN_ARG:
2220        code += code[1+LINK_SIZE];
2221        break;
2222    
2223        /* None of the remaining opcodes are required to match a character. */
2224    
2225        default:
2226        break;
2227      }      }
2228    }    }
2229    
# Line 1279  return TRUE; Line 2240  return TRUE;
2240  the current branch of the current pattern to see if it could match the empty  the current branch of the current pattern to see if it could match the empty
2241  string. If it could, we must look outwards for branches at other levels,  string. If it could, we must look outwards for branches at other levels,
2242  stopping when we pass beyond the bracket which is the subject of the recursion.  stopping when we pass beyond the bracket which is the subject of the recursion.
2243    This function is called only during the real compile, not during the
2244    pre-compile.
2245    
2246  Arguments:  Arguments:
2247    code        points to start of the recursion    code        points to start of the recursion
2248    endcode     points to where to stop (current RECURSE item)    endcode     points to where to stop (current RECURSE item)
2249    bcptr       points to the chain of current (unclosed) branch starts    bcptr       points to the chain of current (unclosed) branch starts
2250    utf8        TRUE if in UTF-8 mode    utf8        TRUE if in UTF-8 mode
2251      cd          pointers to tables etc
2252    
2253  Returns:      TRUE if what is matched could be empty  Returns:      TRUE if what is matched could be empty
2254  */  */
2255    
2256  static BOOL  static BOOL
2257  could_be_empty(const uschar *code, const uschar *endcode, branch_chain *bcptr,  could_be_empty(const uschar *code, const uschar *endcode, branch_chain *bcptr,
2258    BOOL utf8)    BOOL utf8, compile_data *cd)
2259  {  {
2260  while (bcptr != NULL && bcptr->current >= code)  while (bcptr != NULL && bcptr->current_branch >= code)
2261    {    {
2262    if (!could_be_empty_branch(bcptr->current, endcode, utf8)) return FALSE;    if (!could_be_empty_branch(bcptr->current_branch, endcode, utf8, cd))
2263        return FALSE;
2264    bcptr = bcptr->outer;    bcptr = bcptr->outer;
2265    }    }
2266  return TRUE;  return TRUE;
# Line 1308  return TRUE; Line 2273  return TRUE;
2273  *************************************************/  *************************************************/
2274    
2275  /* This function is called when the sequence "[:" or "[." or "[=" is  /* This function is called when the sequence "[:" or "[." or "[=" is
2276  encountered in a character class. It checks whether this is followed by an  encountered in a character class. It checks whether this is followed by a
2277  optional ^ and then a sequence of letters, terminated by a matching ":]" or  sequence of characters terminated by a matching ":]" or ".]" or "=]". If we
2278  ".]" or "=]".  reach an unescaped ']' without the special preceding character, return FALSE.
2279    
2280    Originally, this function only recognized a sequence of letters between the
2281    terminators, but it seems that Perl recognizes any sequence of characters,
2282    though of course unknown POSIX names are subsequently rejected. Perl gives an
2283    "Unknown POSIX class" error for [:f\oo:] for example, where previously PCRE
2284    didn't consider this to be a POSIX class. Likewise for [:1234:].
2285    
2286    The problem in trying to be exactly like Perl is in the handling of escapes. We
2287    have to be sure that [abc[:x\]pqr] is *not* treated as containing a POSIX
2288    class, but [abc[:x\]pqr:]] is (so that an error can be generated). The code
2289    below handles the special case of \], but does not try to do any other escape
2290    processing. This makes it different from Perl for cases such as [:l\ower:]
2291    where Perl recognizes it as the POSIX class "lower" but PCRE does not recognize
2292    "l\ower". This is a lesser evil that not diagnosing bad classes when Perl does,
2293    I think.
2294    
2295    A user pointed out that PCRE was rejecting [:a[:digit:]] whereas Perl was not.
2296    It seems that the appearance of a nested POSIX class supersedes an apparent
2297    external class. For example, [:a[:digit:]b:] matches "a", "b", ":", or
2298    a digit.
2299    
2300    In Perl, unescaped square brackets may also appear as part of class names. For
2301    example, [:a[:abc]b:] gives unknown POSIX class "[:abc]b:]". However, for
2302    [:a[:abc]b][b:] it gives unknown POSIX class "[:abc]b][b:]", which does not
2303    seem right at all. PCRE does not allow closing square brackets in POSIX class
2304    names.
2305    
2306  Argument:  Arguments:
2307    ptr      pointer to the initial [    ptr      pointer to the initial [
2308    endptr   where to return the end pointer    endptr   where to return the end pointer
   cd       pointer to compile data  
2309    
2310  Returns:   TRUE or FALSE  Returns:   TRUE or FALSE
2311  */  */
2312    
2313  static BOOL  static BOOL
2314  check_posix_syntax(const uschar *ptr, const uschar **endptr, compile_data *cd)  check_posix_syntax(const uschar *ptr, const uschar **endptr)
2315  {  {
2316  int terminator;          /* Don't combine these lines; the Solaris cc */  int terminator;          /* Don't combine these lines; the Solaris cc */
2317  terminator = *(++ptr);   /* compiler warns about "non-constant" initializer. */  terminator = *(++ptr);   /* compiler warns about "non-constant" initializer. */
2318  if (*(++ptr) == '^') ptr++;  for (++ptr; *ptr != 0; ptr++)
 while ((cd->ctypes[*ptr] & ctype_letter) != 0) ptr++;  
 if (*ptr == terminator && ptr[1] == ']')  
2319    {    {
2320    *endptr = ptr;    if (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_RIGHT_SQUARE_BRACKET)
2321    return TRUE;      ptr++;
2322      else if (*ptr == CHAR_RIGHT_SQUARE_BRACKET) return FALSE;
2323      else
2324        {
2325        if (*ptr == terminator && ptr[1] == CHAR_RIGHT_SQUARE_BRACKET)
2326          {
2327          *endptr = ptr;
2328          return TRUE;
2329          }
2330        if (*ptr == CHAR_LEFT_SQUARE_BRACKET &&
2331             (ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
2332              ptr[1] == CHAR_EQUALS_SIGN) &&
2333            check_posix_syntax(ptr, endptr))
2334          return FALSE;
2335        }
2336    }    }
2337  return FALSE;  return FALSE;
2338  }  }
# Line 1355  Returns:     a value representing the na Line 2357  Returns:     a value representing the na
2357  static int  static int
2358  check_posix_name(const uschar *ptr, int len)  check_posix_name(const uschar *ptr, int len)
2359  {  {
2360    const char *pn = posix_names;
2361  register int yield = 0;  register int yield = 0;
2362  while (posix_name_lengths[yield] != 0)  while (posix_name_lengths[yield] != 0)
2363    {    {
2364    if (len == posix_name_lengths[yield] &&    if (len == posix_name_lengths[yield] &&
2365      strncmp((const char *)ptr, posix_names[yield], len) == 0) return yield;      strncmp((const char *)ptr, pn, len) == 0) return yield;
2366      pn += posix_name_lengths[yield] + 1;
2367    yield++;    yield++;
2368    }    }
2369  return -1;  return -1;
# Line 1374  return -1; Line 2378  return -1;
2378  that is referenced. This means that groups can be replicated for fixed  that is referenced. This means that groups can be replicated for fixed
2379  repetition simply by copying (because the recursion is allowed to refer to  repetition simply by copying (because the recursion is allowed to refer to
2380  earlier groups that are outside the current group). However, when a group is  earlier groups that are outside the current group). However, when a group is
2381  optional (i.e. the minimum quantifier is zero), OP_BRAZERO is inserted before  optional (i.e. the minimum quantifier is zero), OP_BRAZERO or OP_SKIPZERO is
2382  it, after it has been compiled. This means that any OP_RECURSE items within it  inserted before it, after it has been compiled. This means that any OP_RECURSE
2383  that refer to the group itself or any contained groups have to have their  items within it that refer to the group itself or any contained groups have to
2384  offsets adjusted. That is the job of this function. Before it is called, the  have their offsets adjusted. That one of the jobs of this function. Before it
2385  partially compiled regex must be temporarily terminated with OP_END.  is called, the partially compiled regex must be temporarily terminated with
2386    OP_END.
2387    
2388    This function has been extended with the possibility of forward references for
2389    recursions and subroutine calls. It must also check the list of such references
2390    for the group we are dealing with. If it finds that one of the recursions in
2391    the current group is on this list, it adjusts the offset in the list, not the
2392    value in the reference (which is a group number).
2393    
2394  Arguments:  Arguments:
2395    group      points to the start of the group    group      points to the start of the group
2396    adjust     the amount by which the group is to be moved    adjust     the amount by which the group is to be moved
2397    utf8       TRUE in UTF-8 mode    utf8       TRUE in UTF-8 mode
2398    cd         contains pointers to tables etc.    cd         contains pointers to tables etc.
2399      save_hwm   the hwm forward reference pointer at the start of the group
2400    
2401  Returns:     nothing  Returns:     nothing
2402  */  */
2403    
2404  static void  static void
2405  adjust_recurse(uschar *group, int adjust, BOOL utf8, compile_data *cd)  adjust_recurse(uschar *group, int adjust, BOOL utf8, compile_data *cd,
2406      uschar *save_hwm)
2407  {  {
2408  uschar *ptr = group;  uschar *ptr = group;
2409    
2410  while ((ptr = (uschar *)find_recurse(ptr, utf8)) != NULL)  while ((ptr = (uschar *)find_recurse(ptr, utf8)) != NULL)
2411    {    {
2412    int offset = GET(ptr, 1);    int offset;
2413    if (cd->start_code + offset >= group) PUT(ptr, 1, offset + adjust);    uschar *hc;
2414    
2415      /* See if this recursion is on the forward reference list. If so, adjust the
2416      reference. */
2417    
2418      for (hc = save_hwm; hc < cd->hwm; hc += LINK_SIZE)
2419        {
2420        offset = GET(hc, 0);
2421        if (cd->start_code + offset == ptr + 1)
2422          {
2423          PUT(hc, 0, offset + adjust);
2424          break;
2425          }
2426        }
2427    
2428      /* Otherwise, adjust the recursion offset if it's after the start of this
2429      group. */
2430    
2431      if (hc >= cd->hwm)
2432        {
2433        offset = GET(ptr, 1);
2434        if (cd->start_code + offset >= group) PUT(ptr, 1, offset + adjust);
2435        }
2436    
2437    ptr += 1 + LINK_SIZE;    ptr += 1 + LINK_SIZE;
2438    }    }
2439  }  }
# Line 1423  auto_callout(uschar *code, const uschar Line 2460  auto_callout(uschar *code, const uschar
2460  {  {
2461  *code++ = OP_CALLOUT;  *code++ = OP_CALLOUT;
2462  *code++ = 255;  *code++ = 255;
2463  PUT(code, 0, ptr - cd->start_pattern);  /* Pattern offset */  PUT(code, 0, (int)(ptr - cd->start_pattern));  /* Pattern offset */
2464  PUT(code, LINK_SIZE, 0);                /* Default length */  PUT(code, LINK_SIZE, 0);                       /* Default length */
2465  return code + 2*LINK_SIZE;  return code + 2*LINK_SIZE;
2466  }  }
2467    
# Line 1449  Returns:             nothing Line 2486  Returns:             nothing
2486  static void  static void
2487  complete_callout(uschar *previous_callout, const uschar *ptr, compile_data *cd)  complete_callout(uschar *previous_callout, const uschar *ptr, compile_data *cd)
2488  {  {
2489  int length = ptr - cd->start_pattern - GET(previous_callout, 2);  int length = (int)(ptr - cd->start_pattern - GET(previous_callout, 2));
2490  PUT(previous_callout, 2 + LINK_SIZE, length);  PUT(previous_callout, 2 + LINK_SIZE, length);
2491  }  }
2492    
# Line 1475  Yield:        TRUE when range returned; Line 2512  Yield:        TRUE when range returned;
2512  */  */
2513    
2514  static BOOL  static BOOL
2515  get_othercase_range(int *cptr, int d, int *ocptr, int *odptr)  get_othercase_range(unsigned int *cptr, unsigned int d, unsigned int *ocptr,
2516      unsigned int *odptr)
2517  {  {
2518  int c, chartype, othercase, next;  unsigned int c, othercase, next;
2519    
2520  for (c = *cptr; c <= d; c++)  for (c = *cptr; c <= d; c++)
2521    {    { if ((othercase = UCD_OTHERCASE(c)) != c) break; }
   if (_pcre_ucp_findchar(c, &chartype, &othercase) == ucp_L && othercase != 0)  
     break;  
   }  
2522    
2523  if (c > d) return FALSE;  if (c > d) return FALSE;
2524    
# Line 1492  next = othercase + 1; Line 2527  next = othercase + 1;
2527    
2528  for (++c; c <= d; c++)  for (++c; c <= d; c++)
2529    {    {
2530    if (_pcre_ucp_findchar(c, &chartype, &othercase) != ucp_L ||    if (UCD_OTHERCASE(c) != next) break;
         othercase != next)  
     break;  
2531    next++;    next++;
2532    }    }
2533    
# Line 1503  for (++c; c <= d; c++) Line 2536  for (++c; c <= d; c++)
2536    
2537  return TRUE;  return TRUE;
2538  }  }
2539    
2540    
2541    
2542    /*************************************************
2543    *        Check a character and a property        *
2544    *************************************************/
2545    
2546    /* This function is called by check_auto_possessive() when a property item
2547    is adjacent to a fixed character.
2548    
2549    Arguments:
2550      c            the character
2551      ptype        the property type
2552      pdata        the data for the type
2553      negated      TRUE if it's a negated property (\P or \p{^)
2554    
2555    Returns:       TRUE if auto-possessifying is OK
2556    */
2557    
2558    static BOOL
2559    check_char_prop(int c, int ptype, int pdata, BOOL negated)
2560    {
2561    const ucd_record *prop = GET_UCD(c);
2562    switch(ptype)
2563      {
2564      case PT_LAMP:
2565      return (prop->chartype == ucp_Lu ||
2566              prop->chartype == ucp_Ll ||
2567              prop->chartype == ucp_Lt) == negated;
2568    
2569      case PT_GC:
2570      return (pdata == _pcre_ucp_gentype[prop->chartype]) == negated;
2571    
2572      case PT_PC:
2573      return (pdata == prop->chartype) == negated;
2574    
2575      case PT_SC:
2576      return (pdata == prop->script) == negated;
2577    
2578      /* These are specials */
2579    
2580      case PT_ALNUM:
2581      return (_pcre_ucp_gentype[prop->chartype] == ucp_L ||
2582              _pcre_ucp_gentype[prop->chartype] == ucp_N) == negated;
2583    
2584      case PT_SPACE:    /* Perl space */
2585      return (_pcre_ucp_gentype[prop->chartype] == ucp_Z ||
2586              c == CHAR_HT || c == CHAR_NL || c == CHAR_FF || c == CHAR_CR)
2587              == negated;
2588    
2589      case PT_PXSPACE:  /* POSIX space */
2590      return (_pcre_ucp_gentype[prop->chartype] == ucp_Z ||
2591              c == CHAR_HT || c == CHAR_NL || c == CHAR_VT ||
2592              c == CHAR_FF || c == CHAR_CR)
2593              == negated;
2594    
2595      case PT_WORD:
2596      return (_pcre_ucp_gentype[prop->chartype] == ucp_L ||
2597              _pcre_ucp_gentype[prop->chartype] == ucp_N ||
2598              c == CHAR_UNDERSCORE) == negated;
2599      }
2600    return FALSE;
2601    }
2602  #endif  /* SUPPORT_UCP */  #endif  /* SUPPORT_UCP */
2603    
2604    
2605    
2606    /*************************************************
2607    *     Check if auto-possessifying is possible    *
2608    *************************************************/
2609    
2610    /* This function is called for unlimited repeats of certain items, to see
2611    whether the next thing could possibly match the repeated item. If not, it makes
2612    sense to automatically possessify the repeated item.
2613    
2614    Arguments:
2615      previous      pointer to the repeated opcode
2616      utf8          TRUE in UTF-8 mode
2617      ptr           next character in pattern
2618      options       options bits
2619      cd            contains pointers to tables etc.
2620    
2621    Returns:        TRUE if possessifying is wanted
2622    */
2623    
2624    static BOOL
2625    check_auto_possessive(const uschar *previous, BOOL utf8, const uschar *ptr,
2626      int options, compile_data *cd)
2627    {
2628    int c, next;
2629    int op_code = *previous++;
2630    
2631    /* Skip whitespace and comments in extended mode */
2632    
2633    if ((options & PCRE_EXTENDED) != 0)
2634      {
2635      for (;;)
2636        {
2637        while ((cd->ctypes[*ptr] & ctype_space) != 0) ptr++;
2638        if (*ptr == CHAR_NUMBER_SIGN)
2639          {
2640          ptr++;
2641          while (*ptr != 0)
2642            {
2643            if (IS_NEWLINE(ptr)) { ptr += cd->nllen; break; }
2644            ptr++;
2645    #ifdef SUPPORT_UTF8
2646            if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
2647    #endif
2648            }
2649          }
2650        else break;
2651        }
2652      }
2653    
2654    /* If the next item is one that we can handle, get its value. A non-negative
2655    value is a character, a negative value is an escape value. */
2656    
2657    if (*ptr == CHAR_BACKSLASH)
2658      {
2659      int temperrorcode = 0;
2660      next = check_escape(&ptr, &temperrorcode, cd->bracount, options, FALSE);
2661      if (temperrorcode != 0) return FALSE;
2662      ptr++;    /* Point after the escape sequence */
2663      }
2664    
2665    else if ((cd->ctypes[*ptr] & ctype_meta) == 0)
2666      {
2667    #ifdef SUPPORT_UTF8
2668      if (utf8) { GETCHARINC(next, ptr); } else
2669    #endif
2670      next = *ptr++;
2671      }
2672    
2673    else return FALSE;
2674    
2675    /* Skip whitespace and comments in extended mode */
2676    
2677    if ((options & PCRE_EXTENDED) != 0)
2678      {
2679      for (;;)
2680        {
2681        while ((cd->ctypes[*ptr] & ctype_space) != 0) ptr++;
2682        if (*ptr == CHAR_NUMBER_SIGN)
2683          {
2684          ptr++;
2685          while (*ptr != 0)
2686            {
2687            if (IS_NEWLINE(ptr)) { ptr += cd->nllen; break; }
2688            ptr++;
2689    #ifdef SUPPORT_UTF8
2690            if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
2691    #endif
2692            }
2693          }
2694        else break;
2695        }
2696      }
2697    
2698    /* If the next thing is itself optional, we have to give up. */
2699    
2700    if (*ptr == CHAR_ASTERISK || *ptr == CHAR_QUESTION_MARK ||
2701      strncmp((char *)ptr, STR_LEFT_CURLY_BRACKET STR_0 STR_COMMA, 3) == 0)
2702        return FALSE;
2703    
2704    /* Now compare the next item with the previous opcode. First, handle cases when
2705    the next item is a character. */
2706    
2707    if (next >= 0) switch(op_code)
2708      {
2709      case OP_CHAR:
2710    #ifdef SUPPORT_UTF8
2711      GETCHARTEST(c, previous);
2712    #else
2713      c = *previous;
2714    #endif
2715      return c != next;
2716    
2717      /* For CHARI (caseless character) we must check the other case. If we have
2718      Unicode property support, we can use it to test the other case of
2719      high-valued characters. */
2720    
2721      case OP_CHARI:
2722    #ifdef SUPPORT_UTF8
2723      GETCHARTEST(c, previous);
2724    #else
2725      c = *previous;
2726    #endif
2727      if (c == next) return FALSE;
2728    #ifdef SUPPORT_UTF8
2729      if (utf8)
2730        {
2731        unsigned int othercase;
2732        if (next < 128) othercase = cd->fcc[next]; else
2733    #ifdef SUPPORT_UCP
2734        othercase = UCD_OTHERCASE((unsigned int)next);
2735    #else
2736        othercase = NOTACHAR;
2737    #endif
2738        return (unsigned int)c != othercase;
2739        }
2740      else
2741    #endif  /* SUPPORT_UTF8 */
2742      return (c != cd->fcc[next]);  /* Non-UTF-8 mode */
2743    
2744      /* For OP_NOT and OP_NOTI, the data is always a single-byte character. These
2745      opcodes are not used for multi-byte characters, because they are coded using
2746      an XCLASS instead. */
2747    
2748      case OP_NOT:
2749      return (c = *previous) == next;
2750    
2751      case OP_NOTI:
2752      if ((c = *previous) == next) return TRUE;
2753    #ifdef SUPPORT_UTF8
2754      if (utf8)
2755        {
2756        unsigned int othercase;
2757        if (next < 128) othercase = cd->fcc[next]; else
2758    #ifdef SUPPORT_UCP
2759        othercase = UCD_OTHERCASE(next);
2760    #else
2761        othercase = NOTACHAR;
2762    #endif
2763        return (unsigned int)c == othercase;
2764        }
2765      else
2766    #endif  /* SUPPORT_UTF8 */
2767      return (c == cd->fcc[next]);  /* Non-UTF-8 mode */
2768    
2769      /* Note that OP_DIGIT etc. are generated only when PCRE_UCP is *not* set.
2770      When it is set, \d etc. are converted into OP_(NOT_)PROP codes. */
2771    
2772      case OP_DIGIT:
2773      return next > 127 || (cd->ctypes[next] & ctype_digit) == 0;
2774    
2775      case OP_NOT_DIGIT:
2776      return next <= 127 && (cd->ctypes[next] & ctype_digit) != 0;
2777    
2778      case OP_WHITESPACE:
2779      return next > 127 || (cd->ctypes[next] & ctype_space) == 0;
2780    
2781      case OP_NOT_WHITESPACE:
2782      return next <= 127 && (cd->ctypes[next] & ctype_space) != 0;
2783    
2784      case OP_WORDCHAR:
2785      return next > 127 || (cd->ctypes[next] & ctype_word) == 0;
2786    
2787      case OP_NOT_WORDCHAR:
2788      return next <= 127 && (cd->ctypes[next] & ctype_word) != 0;
2789    
2790      case OP_HSPACE:
2791      case OP_NOT_HSPACE:
2792      switch(next)
2793        {
2794        case 0x09:
2795        case 0x20:
2796        case 0xa0:
2797        case 0x1680:
2798        case 0x180e:
2799        case 0x2000:
2800        case 0x2001:
2801        case 0x2002:
2802        case 0x2003:
2803        case 0x2004:
2804        case 0x2005:
2805        case 0x2006:
2806        case 0x2007:
2807        case 0x2008:
2808        case 0x2009:
2809        case 0x200A:
2810        case 0x202f:
2811        case 0x205f:
2812        case 0x3000:
2813        return op_code == OP_NOT_HSPACE;
2814        default:
2815        return op_code != OP_NOT_HSPACE;
2816        }
2817    
2818      case OP_ANYNL:
2819      case OP_VSPACE:
2820      case OP_NOT_VSPACE:
2821      switch(next)
2822        {
2823        case 0x0a:
2824        case 0x0b:
2825        case 0x0c:
2826        case 0x0d:
2827        case 0x85:
2828        case 0x2028:
2829        case 0x2029:
2830        return op_code == OP_NOT_VSPACE;
2831        default:
2832        return op_code != OP_NOT_VSPACE;
2833        }
2834    
2835    #ifdef SUPPORT_UCP
2836      case OP_PROP:
2837      return check_char_prop(next, previous[0], previous[1], FALSE);
2838    
2839      case OP_NOTPROP:
2840      return check_char_prop(next, previous[0], previous[1], TRUE);
2841    #endif
2842    
2843      default:
2844      return FALSE;
2845      }
2846    
2847    
2848    /* Handle the case when the next item is \d, \s, etc. Note that when PCRE_UCP
2849    is set, \d turns into ESC_du rather than ESC_d, etc., so ESC_d etc. are
2850    generated only when PCRE_UCP is *not* set, that is, when only ASCII
2851    characteristics are recognized. Similarly, the opcodes OP_DIGIT etc. are
2852    replaced by OP_PROP codes when PCRE_UCP is set. */
2853    
2854    switch(op_code)
2855      {
2856      case OP_CHAR:
2857      case OP_CHARI:
2858    #ifdef SUPPORT_UTF8
2859      GETCHARTEST(c, previous);
2860    #else
2861      c = *previous;
2862    #endif
2863      switch(-next)
2864        {
2865        case ESC_d:
2866        return c > 127 || (cd->ctypes[c] & ctype_digit) == 0;
2867    
2868        case ESC_D:
2869        return c <= 127 && (cd->ctypes[c] & ctype_digit) != 0;
2870    
2871        case ESC_s:
2872        return c > 127 || (cd->ctypes[c] & ctype_space) == 0;
2873    
2874        case ESC_S:
2875        return c <= 127 && (cd->ctypes[c] & ctype_space) != 0;
2876    
2877        case ESC_w:
2878        return c > 127 || (cd->ctypes[c] & ctype_word) == 0;
2879    
2880        case ESC_W:
2881        return c <= 127 && (cd->ctypes[c] & ctype_word) != 0;
2882    
2883        case ESC_h:
2884        case ESC_H:
2885        switch(c)
2886          {
2887          case 0x09:
2888          case 0x20:
2889          case 0xa0:
2890          case 0x1680:
2891          case 0x180e:
2892          case 0x2000:
2893          case 0x2001:
2894          case 0x2002:
2895          case 0x2003:
2896          case 0x2004:
2897          case 0x2005:
2898          case 0x2006:
2899          case 0x2007:
2900          case 0x2008:
2901          case 0x2009:
2902          case 0x200A:
2903          case 0x202f:
2904          case 0x205f:
2905          case 0x3000:
2906          return -next != ESC_h;
2907          default:
2908          return -next == ESC_h;
2909          }
2910    
2911        case ESC_v:
2912        case ESC_V:
2913        switch(c)
2914          {
2915          case 0x0a:
2916          case 0x0b:
2917          case 0x0c:
2918          case 0x0d:
2919          case 0x85:
2920          case 0x2028:
2921          case 0x2029:
2922          return -next != ESC_v;
2923          default:
2924          return -next == ESC_v;
2925          }
2926    
2927        /* When PCRE_UCP is set, these values get generated for \d etc. Find
2928        their substitutions and process them. The result will always be either
2929        -ESC_p or -ESC_P. Then fall through to process those values. */
2930    
2931    #ifdef SUPPORT_UCP
2932        case ESC_du:
2933        case ESC_DU:
2934        case ESC_wu:
2935        case ESC_WU:
2936        case ESC_su:
2937        case ESC_SU:
2938          {
2939          int temperrorcode = 0;
2940          ptr = substitutes[-next - ESC_DU];
2941          next = check_escape(&ptr, &temperrorcode, 0, options, FALSE);
2942          if (temperrorcode != 0) return FALSE;
2943          ptr++;    /* For compatibility */
2944          }
2945        /* Fall through */
2946    
2947        case ESC_p:
2948        case ESC_P:
2949          {
2950          int ptype, pdata, errorcodeptr;
2951          BOOL negated;
2952    
2953          ptr--;      /* Make ptr point at the p or P */
2954          ptype = get_ucp(&ptr, &negated, &pdata, &errorcodeptr);
2955          if (ptype < 0) return FALSE;
2956          ptr++;      /* Point past the final curly ket */
2957    
2958          /* If the property item is optional, we have to give up. (When generated
2959          from \d etc by PCRE_UCP, this test will have been applied much earlier,
2960          to the original \d etc. At this point, ptr will point to a zero byte. */
2961    
2962          if (*ptr == CHAR_ASTERISK || *ptr == CHAR_QUESTION_MARK ||
2963            strncmp((char *)ptr, STR_LEFT_CURLY_BRACKET STR_0 STR_COMMA, 3) == 0)
2964              return FALSE;
2965    
2966          /* Do the property check. */
2967    
2968          return check_char_prop(c, ptype, pdata, (next == -ESC_P) != negated);
2969          }
2970    #endif
2971    
2972        default:
2973        return FALSE;
2974        }
2975    
2976      /* In principle, support for Unicode properties should be integrated here as
2977      well. It means re-organizing the above code so as to get hold of the property
2978      values before switching on the op-code. However, I wonder how many patterns
2979      combine ASCII \d etc with Unicode properties? (Note that if PCRE_UCP is set,
2980      these op-codes are never generated.) */
2981    
2982      case OP_DIGIT:
2983      return next == -ESC_D || next == -ESC_s || next == -ESC_W ||
2984             next == -ESC_h || next == -ESC_v || next == -ESC_R;
2985    
2986      case OP_NOT_DIGIT:
2987      return next == -ESC_d;
2988    
2989      case OP_WHITESPACE:
2990      return next == -ESC_S || next == -ESC_d || next == -ESC_w || next == -ESC_R;
2991    
2992      case OP_NOT_WHITESPACE:
2993      return next == -ESC_s || next == -ESC_h || next == -ESC_v;
2994    
2995      case OP_HSPACE:
2996      return next == -ESC_S || next == -ESC_H || next == -ESC_d ||
2997             next == -ESC_w || next == -ESC_v || next == -ESC_R;
2998    
2999      case OP_NOT_HSPACE:
3000      return next == -ESC_h;
3001    
3002      /* Can't have \S in here because VT matches \S (Perl anomaly) */
3003      case OP_ANYNL:
3004      case OP_VSPACE:
3005      return next == -ESC_V || next == -ESC_d || next == -ESC_w;
3006    
3007      case OP_NOT_VSPACE:
3008      return next == -ESC_v || next == -ESC_R;
3009    
3010      case OP_WORDCHAR:
3011      return next == -ESC_W || next == -ESC_s || next == -ESC_h ||
3012             next == -ESC_v || next == -ESC_R;
3013    
3014      case OP_NOT_WORDCHAR:
3015      return next == -ESC_w || next == -ESC_d;
3016    
3017      default:
3018      return FALSE;
3019      }
3020    
3021    /* Control does not reach here */
3022    }
3023    
3024    
3025    
3026  /*************************************************  /*************************************************
3027  *           Compile one branch                   *  *           Compile one branch                   *
3028  *************************************************/  *************************************************/
3029    
3030  /* Scan the pattern, compiling it into the code vector. If the options are  /* Scan the pattern, compiling it into the a vector. If the options are
3031  changed during the branch, the pointer is used to change the external options  changed during the branch, the pointer is used to change the external options
3032  bits.  bits. This function is used during the pre-compile phase when we are trying
3033    to find out the amount of memory needed, as well as during the real compile
3034    phase. The value of lengthptr distinguishes the two phases.
3035    
3036  Arguments:  Arguments:
3037    optionsptr     pointer to the option bits    optionsptr     pointer to the option bits
   brackets       points to number of extracting brackets used  
3038    codeptr        points to the pointer to the current code point    codeptr        points to the pointer to the current code point
3039    ptrptr         points to the current pattern pointer    ptrptr         points to the current pattern pointer
3040    errorcodeptr   points to error code variable    errorcodeptr   points to error code variable
3041    firstbyteptr   set to initial literal character, or < 0 (REQ_UNSET, REQ_NONE)    firstbyteptr   set to initial literal character, or < 0 (REQ_UNSET, REQ_NONE)
3042    reqbyteptr     set to the last literal character required, else < 0    reqbyteptr     set to the last literal character required, else < 0
3043    bcptr          points to current branch chain    bcptr          points to current branch chain
3044      cond_depth     conditional nesting depth
3045    cd             contains pointers to tables etc.    cd             contains pointers to tables etc.
3046      lengthptr      NULL during the real compile phase
3047                     points to length accumulator during pre-compile phase
3048    
3049  Returns:         TRUE on success  Returns:         TRUE on success
3050                   FALSE, with *errorcodeptr set non-zero on error                   FALSE, with *errorcodeptr set non-zero on error
3051  */  */
3052    
3053  static BOOL  static BOOL
3054  compile_branch(int *optionsptr, int *brackets, uschar **codeptr,  compile_branch(int *optionsptr, uschar **codeptr, const uschar **ptrptr,
3055    const uschar **ptrptr, int *errorcodeptr, int *firstbyteptr,    int *errorcodeptr, int *firstbyteptr, int *reqbyteptr, branch_chain *bcptr,
3056    int *reqbyteptr, branch_chain *bcptr, compile_data *cd)    int cond_depth, compile_data *cd, int *lengthptr)
3057  {  {
3058  int repeat_type, op_type;  int repeat_type, op_type;
3059  int repeat_min = 0, repeat_max = 0;      /* To please picky compilers */  int repeat_min = 0, repeat_max = 0;      /* To please picky compilers */
# Line 1541  int greedy_default, greedy_non_default; Line 3062  int greedy_default, greedy_non_default;
3062  int firstbyte, reqbyte;  int firstbyte, reqbyte;
3063  int zeroreqbyte, zerofirstbyte;  int zeroreqbyte, zerofirstbyte;
3064  int req_caseopt, reqvary, tempreqvary;  int req_caseopt, reqvary, tempreqvary;
3065  int condcount = 0;  int options = *optionsptr;               /* May change dynamically */
 int options = *optionsptr;  
3066  int after_manual_callout = 0;  int after_manual_callout = 0;
3067    int length_prevgroup = 0;
3068  register int c;  register int c;
3069  register uschar *code = *codeptr;  register uschar *code = *codeptr;
3070    uschar *last_code = code;
3071    uschar *orig_code = code;
3072  uschar *tempcode;  uschar *tempcode;
3073  BOOL inescq = FALSE;  BOOL inescq = FALSE;
3074  BOOL groupsetfirstbyte = FALSE;  BOOL groupsetfirstbyte = FALSE;
3075  const uschar *ptr = *ptrptr;  const uschar *ptr = *ptrptr;
3076  const uschar *tempptr;  const uschar *tempptr;
3077    const uschar *nestptr = NULL;
3078  uschar *previous = NULL;  uschar *previous = NULL;
3079  uschar *previous_callout = NULL;  uschar *previous_callout = NULL;
3080    uschar *save_hwm = NULL;
3081  uschar classbits[32];  uschar classbits[32];
3082    
3083    /* We can fish out the UTF-8 setting once and for all into a BOOL, but we
3084    must not do this for other options (e.g. PCRE_EXTENDED) because they may change
3085    dynamically as we process the pattern. */
3086    
3087  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
3088  BOOL class_utf8;  BOOL class_utf8;
3089  BOOL utf8 = (options & PCRE_UTF8) != 0;  BOOL utf8 = (options & PCRE_UTF8) != 0;
3090  uschar *class_utf8data;  uschar *class_utf8data;
3091    uschar *class_utf8data_base;
3092  uschar utf8_char[6];  uschar utf8_char[6];
3093  #else  #else
3094  BOOL utf8 = FALSE;  BOOL utf8 = FALSE;
3095  #endif  #endif
3096    
3097    #ifdef PCRE_DEBUG
3098    if (lengthptr != NULL) DPRINTF((">> start branch\n"));
3099    #endif
3100    
3101  /* Set up the default and non-default settings for greediness */  /* Set up the default and non-default settings for greediness */
3102    
3103  greedy_default = ((options & PCRE_UNGREEDY) != 0);  greedy_default = ((options & PCRE_UNGREEDY) != 0);
# Line 1593  req_caseopt = ((options & PCRE_CASELESS) Line 3127  req_caseopt = ((options & PCRE_CASELESS)
3127  for (;; ptr++)  for (;; ptr++)
3128    {    {
3129    BOOL negate_class;    BOOL negate_class;
3130      BOOL should_flip_negation;
3131    BOOL possessive_quantifier;    BOOL possessive_quantifier;
3132    BOOL is_quantifier;    BOOL is_quantifier;
3133      BOOL is_recurse;
3134      BOOL reset_bracount;
3135    int class_charcount;    int class_charcount;
3136    int class_lastchar;    int class_lastchar;
3137    int newoptions;    int newoptions;
3138    int recno;    int recno;
3139      int refsign;
3140    int skipbytes;    int skipbytes;
3141    int subreqbyte;    int subreqbyte;
3142    int subfirstbyte;    int subfirstbyte;
3143      int terminator;
3144    int mclength;    int mclength;
3145    uschar mcbuffer[8];    uschar mcbuffer[8];
3146    
3147    /* Next byte in the pattern */    /* Get next byte in the pattern */
3148    
3149    c = *ptr;    c = *ptr;
3150    
3151    /* If in \Q...\E, check for the end; if not, we have a literal */    /* If we are at the end of a nested substitution, revert to the outer level
3152      string. Nesting only happens one level deep. */
3153    
3154    if (inescq && c != 0)    if (c == 0 && nestptr != NULL)
3155        {
3156        ptr = nestptr;
3157        nestptr = NULL;
3158        c = *ptr;
3159        }
3160    
3161      /* If we are in the pre-compile phase, accumulate the length used for the
3162      previous cycle of this loop. */
3163    
3164      if (lengthptr != NULL)
3165      {      {
3166      if (c == '\\' && ptr[1] == 'E')  #ifdef PCRE_DEBUG
3167        if (code > cd->hwm) cd->hwm = code;                 /* High water info */
3168    #endif
3169        if (code > cd->start_workspace + WORK_SIZE_CHECK)   /* Check for overrun */
3170        {        {
3171        inescq = FALSE;        *errorcodeptr = ERR52;
3172          goto FAILED;
3173          }
3174    
3175        /* There is at least one situation where code goes backwards: this is the
3176        case of a zero quantifier after a class (e.g. [ab]{0}). At compile time,
3177        the class is simply eliminated. However, it is created first, so we have to
3178        allow memory for it. Therefore, don't ever reduce the length at this point.
3179        */
3180    
3181        if (code < last_code) code = last_code;
3182    
3183        /* Paranoid check for integer overflow */
3184    
3185        if (OFLOW_MAX - *lengthptr < code - last_code)
3186          {
3187          *errorcodeptr = ERR20;
3188          goto FAILED;
3189          }
3190    
3191        *lengthptr += (int)(code - last_code);
3192        DPRINTF(("length=%d added %d c=%c\n", *lengthptr, code - last_code, c));
3193    
3194        /* If "previous" is set and it is not at the start of the work space, move
3195        it back to there, in order to avoid filling up the work space. Otherwise,
3196        if "previous" is NULL, reset the current code pointer to the start. */
3197    
3198        if (previous != NULL)
3199          {
3200          if (previous > orig_code)
3201            {
3202            memmove(orig_code, previous, code - previous);
3203            code -= previous - orig_code;
3204            previous = orig_code;
3205            }
3206          }
3207        else code = orig_code;
3208    
3209        /* Remember where this code item starts so we can pick up the length
3210        next time round. */
3211    
3212        last_code = code;
3213        }
3214    
3215      /* In the real compile phase, just check the workspace used by the forward
3216      reference list. */
3217    
3218      else if (cd->hwm > cd->start_workspace + WORK_SIZE_CHECK)
3219        {
3220        *errorcodeptr = ERR52;
3221        goto FAILED;
3222        }
3223    
3224      /* If in \Q...\E, check for the end; if not, we have a literal */
3225    
3226      if (inescq && c != 0)
3227        {
3228        if (c == CHAR_BACKSLASH && ptr[1] == CHAR_E)
3229          {
3230          inescq = FALSE;
3231        ptr++;        ptr++;
3232        continue;        continue;
3233        }        }
# Line 1623  for (;; ptr++) Line 3235  for (;; ptr++)
3235        {        {
3236        if (previous_callout != NULL)        if (previous_callout != NULL)
3237          {          {
3238          complete_callout(previous_callout, ptr, cd);          if (lengthptr == NULL)  /* Don't attempt in pre-compile phase */
3239              complete_callout(previous_callout, ptr, cd);
3240          previous_callout = NULL;          previous_callout = NULL;
3241          }          }
3242        if ((options & PCRE_AUTO_CALLOUT) != 0)        if ((options & PCRE_AUTO_CALLOUT) != 0)
# Line 1638  for (;; ptr++) Line 3251  for (;; ptr++)
3251    /* Fill in length of a previous callout, except when the next thing is    /* Fill in length of a previous callout, except when the next thing is
3252    a quantifier. */    a quantifier. */
3253    
3254    is_quantifier = c == '*' || c == '+' || c == '?' ||    is_quantifier =
3255      (c == '{' && is_counted_repeat(ptr+1));      c == CHAR_ASTERISK || c == CHAR_PLUS || c == CHAR_QUESTION_MARK ||
3256        (c == CHAR_LEFT_CURLY_BRACKET && is_counted_repeat(ptr+1));
3257    
3258    if (!is_quantifier && previous_callout != NULL &&    if (!is_quantifier && previous_callout != NULL &&
3259         after_manual_callout-- <= 0)         after_manual_callout-- <= 0)
3260      {      {
3261      complete_callout(previous_callout, ptr, cd);      if (lengthptr == NULL)      /* Don't attempt in pre-compile phase */
3262          complete_callout(previous_callout, ptr, cd);
3263      previous_callout = NULL;      previous_callout = NULL;
3264      }      }
3265    
3266    /* In extended mode, skip white space and comments */    /* In extended mode, skip white space and comments. */
3267    
3268    if ((options & PCRE_EXTENDED) != 0)    if ((options & PCRE_EXTENDED) != 0)
3269      {      {
3270      if ((cd->ctypes[c] & ctype_space) != 0) continue;      if ((cd->ctypes[c] & ctype_space) != 0) continue;
3271      if (c == '#')      if (c == CHAR_NUMBER_SIGN)
3272        {        {
3273        /* The space before the ; is to avoid a warning on a silly compiler        ptr++;
3274        on the Macintosh. */        while (*ptr != 0)
3275        while ((c = *(++ptr)) != 0 && c != NEWLINE) ;          {
3276        if (c != 0) continue;   /* Else fall through to handle end of string */          if (IS_NEWLINE(ptr)) { ptr += cd->nllen - 1; break; }
3277            ptr++;
3278    #ifdef SUPPORT_UTF8
3279            if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
3280    #endif
3281            }
3282          if (*ptr != 0) continue;
3283    
3284          /* Else fall through to handle end of string */
3285          c = 0;
3286        }        }
3287      }      }
3288    
# Line 1672  for (;; ptr++) Line 3296  for (;; ptr++)
3296    
3297    switch(c)    switch(c)
3298      {      {
3299      /* The branch terminates at end of string, |, or ). */      /* ===================================================================*/
3300        case 0:                        /* The branch terminates at string end */
3301      case 0:      case CHAR_VERTICAL_LINE:       /* or | or ) */
3302      case '|':      case CHAR_RIGHT_PARENTHESIS:
     case ')':  
3303      *firstbyteptr = firstbyte;      *firstbyteptr = firstbyte;
3304      *reqbyteptr = reqbyte;      *reqbyteptr = reqbyte;
3305      *codeptr = code;      *codeptr = code;
3306      *ptrptr = ptr;      *ptrptr = ptr;
3307        if (lengthptr != NULL)
3308          {
3309          if (OFLOW_MAX - *lengthptr < code - last_code)
3310            {
3311            *errorcodeptr = ERR20;
3312            goto FAILED;
3313            }
3314          *lengthptr += (int)(code - last_code);   /* To include callout length */
3315          DPRINTF((">> end branch\n"));
3316          }
3317      return TRUE;      return TRUE;
3318    
3319    
3320        /* ===================================================================*/
3321      /* Handle single-character metacharacters. In multiline mode, ^ disables      /* Handle single-character metacharacters. In multiline mode, ^ disables
3322      the setting of any following char as a first character. */      the setting of any following char as a first character. */
3323    
3324      case '^':      case CHAR_CIRCUMFLEX_ACCENT:
3325        previous = NULL;
3326      if ((options & PCRE_MULTILINE) != 0)      if ((options & PCRE_MULTILINE) != 0)
3327        {        {
3328        if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;        if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
3329          *code++ = OP_CIRCM;
3330        }        }
3331      previous = NULL;      else *code++ = OP_CIRC;
     *code++ = OP_CIRC;  
3332      break;      break;
3333    
3334      case '$':      case CHAR_DOLLAR_SIGN:
3335      previous = NULL;      previous = NULL;
3336      *code++ = OP_DOLL;      *code++ = ((options & PCRE_MULTILINE) != 0)? OP_DOLLM : OP_DOLL;
3337      break;      break;
3338    
3339      /* There can never be a first char if '.' is first, whatever happens about      /* There can never be a first char if '.' is first, whatever happens about
3340      repeats. The value of reqbyte doesn't change either. */      repeats. The value of reqbyte doesn't change either. */
3341    
3342      case '.':      case CHAR_DOT:
3343      if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;      if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
3344      zerofirstbyte = firstbyte;      zerofirstbyte = firstbyte;
3345      zeroreqbyte = reqbyte;      zeroreqbyte = reqbyte;
3346      previous = code;      previous = code;
3347      *code++ = OP_ANY;      *code++ = ((options & PCRE_DOTALL) != 0)? OP_ALLANY: OP_ANY;
3348      break;      break;
3349    
3350      /* Character classes. If the included characters are all < 255 in value, we  
3351      build a 32-byte bitmap of the permitted characters, except in the special      /* ===================================================================*/
3352      case where there is only one such character. For negated classes, we build      /* Character classes. If the included characters are all < 256, we build a
3353      the map as usual, then invert it at the end. However, we use a different      32-byte bitmap of the permitted characters, except in the special case
3354      opcode so that data characters > 255 can be handled correctly.      where there is only one such character. For negated classes, we build the
3355        map as usual, then invert it at the end. However, we use a different opcode
3356        so that data characters > 255 can be handled correctly.
3357    
3358      If the class contains characters outside the 0-255 range, a different      If the class contains characters outside the 0-255 range, a different
3359      opcode is compiled. It may optionally have a bit map for characters < 256,      opcode is compiled. It may optionally have a bit map for characters < 256,
3360      but those above are are explicitly listed afterwards. A flag byte tells      but those above are are explicitly listed afterwards. A flag byte tells
3361      whether the bitmap is present, and whether this is a negated class or not.      whether the bitmap is present, and whether this is a negated class or not.
     */  
3362    
3363      case '[':      In JavaScript compatibility mode, an isolated ']' causes an error. In
3364        default (Perl) mode, it is treated as a data character. */
3365    
3366        case CHAR_RIGHT_SQUARE_BRACKET:
3367        if ((cd->external_options & PCRE_JAVASCRIPT_COMPAT) != 0)
3368          {
3369          *errorcodeptr = ERR64;
3370          goto FAILED;
3371          }
3372        goto NORMAL_CHAR;
3373    
3374        case CHAR_LEFT_SQUARE_BRACKET:
3375      previous = code;      previous = code;
3376    
3377      /* PCRE supports POSIX class stuff inside a class. Perl gives an error if      /* PCRE supports POSIX class stuff inside a class. Perl gives an error if
3378      they are encountered at the top level, so we'll do that too. */      they are encountered at the top level, so we'll do that too. */
3379    
3380      if ((ptr[1] == ':' || ptr[1] == '.' || ptr[1] == '=') &&      if ((ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
3381          check_posix_syntax(ptr, &tempptr, cd))           ptr[1] == CHAR_EQUALS_SIGN) &&
3382            check_posix_syntax(ptr, &tempptr))
3383        {        {
3384        *errorcodeptr = (ptr[1] == ':')? ERR13 : ERR31;        *errorcodeptr = (ptr[1] == CHAR_COLON)? ERR13 : ERR31;
3385        goto FAILED;        goto FAILED;
3386        }        }
3387    
3388      /* If the first character is '^', set the negation flag and skip it. */      /* If the first character is '^', set the negation flag and skip it. Also,
3389        if the first few characters (either before or after ^) are \Q\E or \E we
3390        skip them too. This makes for compatibility with Perl. */
3391    
3392      if ((c = *(++ptr)) == '^')      negate_class = FALSE;
3393        for (;;)
3394        {        {
       negate_class = TRUE;  
3395        c = *(++ptr);        c = *(++ptr);
3396          if (c == CHAR_BACKSLASH)
3397            {
3398            if (ptr[1] == CHAR_E)
3399              ptr++;
3400            else if (strncmp((const char *)ptr+1,
3401                              STR_Q STR_BACKSLASH STR_E, 3) == 0)
3402              ptr += 3;
3403            else
3404              break;
3405            }
3406          else if (!negate_class && c == CHAR_CIRCUMFLEX_ACCENT)
3407            negate_class = TRUE;
3408          else break;
3409        }        }
3410      else  
3411        /* Empty classes are allowed in JavaScript compatibility mode. Otherwise,
3412        an initial ']' is taken as a data character -- the code below handles
3413        that. In JS mode, [] must always fail, so generate OP_FAIL, whereas
3414        [^] must match any character, so generate OP_ALLANY. */
3415    
3416        if (c == CHAR_RIGHT_SQUARE_BRACKET &&
3417            (cd->external_options & PCRE_JAVASCRIPT_COMPAT) != 0)
3418        {        {
3419        negate_class = FALSE;        *code++ = negate_class? OP_ALLANY : OP_FAIL;
3420          if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
3421          zerofirstbyte = firstbyte;
3422          break;
3423        }        }
3424    
3425        /* If a class contains a negative special such as \S, we need to flip the
3426        negation flag at the end, so that support for characters > 255 works
3427        correctly (they are all included in the class). */
3428    
3429        should_flip_negation = FALSE;
3430    
3431      /* Keep a count of chars with values < 256 so that we can optimize the case      /* Keep a count of chars with values < 256 so that we can optimize the case
3432      of just a single character (as long as it's < 256). For higher valued UTF-8      of just a single character (as long as it's < 256). However, For higher
3433      characters, we don't yet do any optimization. */      valued UTF-8 characters, we don't yet do any optimization. */
3434    
3435      class_charcount = 0;      class_charcount = 0;
3436      class_lastchar = -1;      class_lastchar = -1;
3437    
3438        /* Initialize the 32-char bit map to all zeros. We build the map in a
3439        temporary bit of memory, in case the class contains only 1 character (less
3440        than 256), because in that case the compiled code doesn't use the bit map.
3441        */
3442    
3443        memset(classbits, 0, 32 * sizeof(uschar));
3444    
3445  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
3446      class_utf8 = FALSE;                       /* No chars >= 256 */      class_utf8 = FALSE;                       /* No chars >= 256 */
3447      class_utf8data = code + LINK_SIZE + 34;   /* For UTF-8 items */      class_utf8data = code + LINK_SIZE + 2;    /* For UTF-8 items */
3448        class_utf8data_base = class_utf8data;     /* For resetting in pass 1 */
3449  #endif  #endif
3450    
     /* Initialize the 32-char bit map to all zeros. We have to build the  
     map in a temporary bit of store, in case the class contains only 1  
     character (< 256), because in that case the compiled code doesn't use the  
     bit map. */  
   
     memset(classbits, 0, 32 * sizeof(uschar));  
   
3451      /* Process characters until ] is reached. By writing this as a "do" it      /* Process characters until ] is reached. By writing this as a "do" it
3452      means that an initial ] is taken as a data character. The first pass      means that an initial ] is taken as a data character. At the start of the
3453      through the regex checked the overall syntax, so we don't need to be very      loop, c contains the first byte of the character. */
     strict here. At the start of the loop, c contains the first byte of the  
     character. */  
3454    
3455      do      if (c != 0) do
3456        {        {
3457          const uschar *oldptr;
3458    
3459  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
3460        if (utf8 && c > 127)        if (utf8 && c > 127)
3461          {                           /* Braces are required because the */          {                           /* Braces are required because the */
3462          GETCHARLEN(c, ptr, ptr);    /* macro generates multiple statements */          GETCHARLEN(c, ptr, ptr);    /* macro generates multiple statements */
3463          }          }
3464    
3465          /* In the pre-compile phase, accumulate the length of any UTF-8 extra
3466          data and reset the pointer. This is so that very large classes that
3467          contain a zillion UTF-8 characters no longer overwrite the work space
3468          (which is on the stack). */
3469    
3470          if (lengthptr != NULL)
3471            {
3472            *lengthptr += class_utf8data - class_utf8data_base;
3473            class_utf8data = class_utf8data_base;
3474            }
3475    
3476  #endif  #endif
3477    
3478        /* Inside \Q...\E everything is literal except \E */        /* Inside \Q...\E everything is literal except \E */
3479    
3480        if (inescq)        if (inescq)
3481          {          {
3482          if (c == '\\' && ptr[1] == 'E')          if (c == CHAR_BACKSLASH && ptr[1] == CHAR_E)  /* If we are at \E */
3483            {            {
3484            inescq = FALSE;            inescq = FALSE;                   /* Reset literal state */
3485            ptr++;            ptr++;                            /* Skip the 'E' */
3486            continue;            continue;                         /* Carry on with next */
3487            }            }
3488          else goto LONE_SINGLE_CHARACTER;          goto CHECK_RANGE;                   /* Could be range if \E follows */
3489          }          }
3490    
3491        /* Handle POSIX class names. Perl allows a negation extension of the        /* Handle POSIX class names. Perl allows a negation extension of the
# Line 1801  for (;; ptr++) Line 3494  for (;; ptr++)
3494        [.ch.] and [=ch=] ("collating elements") and fault them, as Perl        [.ch.] and [=ch=] ("collating elements") and fault them, as Perl
3495        5.6 and 5.8 do. */        5.6 and 5.8 do. */
3496    
3497        if (c == '[' &&        if (c == CHAR_LEFT_SQUARE_BRACKET &&
3498            (ptr[1] == ':' || ptr[1] == '.' || ptr[1] == '=') &&            (ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
3499            check_posix_syntax(ptr, &tempptr, cd))             ptr[1] == CHAR_EQUALS_SIGN) && check_posix_syntax(ptr, &tempptr))
3500          {          {
3501          BOOL local_negate = FALSE;          BOOL local_negate = FALSE;
3502          int posix_class, i;          int posix_class, taboffset, tabopt;
3503          register const uschar *cbits = cd->cbits;          register const uschar *cbits = cd->cbits;
3504            uschar pbits[32];
3505    
3506          if (ptr[1] != ':')          if (ptr[1] != CHAR_COLON)
3507            {            {
3508            *errorcodeptr = ERR31;            *errorcodeptr = ERR31;
3509            goto FAILED;            goto FAILED;
3510            }            }
3511    
3512          ptr += 2;          ptr += 2;
3513          if (*ptr == '^')          if (*ptr == CHAR_CIRCUMFLEX_ACCENT)
3514            {            {
3515            local_negate = TRUE;            local_negate = TRUE;
3516              should_flip_negation = TRUE;  /* Note negative special */
3517            ptr++;            ptr++;
3518            }            }
3519    
3520          posix_class = check_posix_name(ptr, tempptr - ptr);          posix_class = check_posix_name(ptr, (int)(tempptr - ptr));
3521          if (posix_class < 0)          if (posix_class < 0)
3522            {            {
3523            *errorcodeptr = ERR30;            *errorcodeptr = ERR30;
# Line 1836  for (;; ptr++) Line 3531  for (;; ptr++)
3531          if ((options & PCRE_CASELESS) != 0 && posix_class <= 2)          if ((options & PCRE_CASELESS) != 0 && posix_class <= 2)
3532            posix_class = 0;            posix_class = 0;
3533    
3534          /* Or into the map we are building up to 3 of the static class          /* When PCRE_UCP is set, some of the POSIX classes are converted to
3535          tables, or their negations. The [:blank:] class sets up the same          different escape sequences that use Unicode properties. */
         chars as the [:space:] class (all white space). We remove the vertical  
         white space chars afterwards. */  
3536    
3537          posix_class *= 3;  #ifdef SUPPORT_UCP
3538          for (i = 0; i < 3; i++)          if ((options & PCRE_UCP) != 0)
3539            {            {
3540            BOOL blankclass = strncmp((char *)ptr, "blank", 5) == 0;            int pc = posix_class + ((local_negate)? POSIX_SUBSIZE/2 : 0);
3541            int taboffset = posix_class_maps[posix_class + i];            if (posix_substitutes[pc] != NULL)
           if (taboffset < 0) break;  
           if (local_negate)  
             {  
             if (i == 0)  
               for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+taboffset];  
             else  
               for (c = 0; c < 32; c++) classbits[c] &= ~cbits[c+taboffset];  
             if (blankclass) classbits[1] |= 0x3c;  
             }  
           else  
3542              {              {
3543              for (c = 0; c < 32; c++) classbits[c] |= cbits[c+taboffset];              nestptr = tempptr + 1;
3544              if (blankclass) classbits[1] &= ~0x3c;              ptr = posix_substitutes[pc] - 1;
3545                continue;
3546              }              }
3547            }            }
3548    #endif
3549            /* In the non-UCP case, we build the bit map for the POSIX class in a
3550            chunk of local store because we may be adding and subtracting from it,
3551            and we don't want to subtract bits that may be in the main map already.
3552            At the end we or the result into the bit map that is being built. */
3553    
3554            posix_class *= 3;
3555    
3556            /* Copy in the first table (always present) */
3557    
3558            memcpy(pbits, cbits + posix_class_maps[posix_class],
3559              32 * sizeof(uschar));
3560    
3561            /* If there is a second table, add or remove it as required. */
3562    
3563            taboffset = posix_class_maps[posix_class + 1];
3564            tabopt = posix_class_maps[posix_class + 2];
3565    
3566            if (taboffset >= 0)
3567              {
3568              if (tabopt >= 0)
3569                for (c = 0; c < 32; c++) pbits[c] |= cbits[c + taboffset];
3570              else
3571                for (c = 0; c < 32; c++) pbits[c] &= ~cbits[c + taboffset];
3572              }
3573    
3574            /* Not see if we need to remove any special characters. An option
3575            value of 1 removes vertical space and 2 removes underscore. */
3576    
3577            if (tabopt < 0) tabopt = -tabopt;
3578            if (tabopt == 1) pbits[1] &= ~0x3c;
3579              else if (tabopt == 2) pbits[11] &= 0x7f;
3580    
3581            /* Add the POSIX table or its complement into the main table that is
3582            being built and we are done. */
3583    
3584            if (local_negate)
3585              for (c = 0; c < 32; c++) classbits[c] |= ~pbits[c];
3586            else
3587              for (c = 0; c < 32; c++) classbits[c] |= pbits[c];
3588    
3589          ptr = tempptr + 1;          ptr = tempptr + 1;
3590          class_charcount = 10;  /* Set > 1; assumes more than 1 per class */          class_charcount = 10;  /* Set > 1; assumes more than 1 per class */
# Line 1868  for (;; ptr++) Line 3592  for (;; ptr++)
3592          }          }
3593    
3594        /* Backslash may introduce a single character, or it may introduce one        /* Backslash may introduce a single character, or it may introduce one
3595        of the specials, which just set a flag. Escaped items are checked for        of the specials, which just set a flag. The sequence \b is a special
3596        validity in the pre-compiling pass. The sequence \b is a special case.        case. Inside a class (and only there) it is treated as backspace. We
3597        Inside a class (and only there) it is treated as backspace. Elsewhere        assume that other escapes have more than one character in them, so set
3598        it marks a word boundary. Other escapes have preset maps ready to        class_charcount bigger than one. Unrecognized escapes fall through and
3599        or into the one we are building. We assume they have more than one        are either treated as literal characters (by default), or are faulted if
3600        character in them, so set class_charcount bigger than one. */        PCRE_EXTRA is set. */
3601    
3602        if (c == '\\')        if (c == CHAR_BACKSLASH)
3603          {          {
3604          c = check_escape(&ptr, errorcodeptr, *brackets, options, TRUE);          c = check_escape(&ptr, errorcodeptr, cd->bracount, options, TRUE);
3605            if (*errorcodeptr != 0) goto FAILED;
3606    
3607          if (-c == ESC_b) c = '\b';       /* \b is backslash in a class */          if (-c == ESC_b) c = CHAR_BS;    /* \b is backspace in a class */
         else if (-c == ESC_X) c = 'X';   /* \X is literal X in a class */  
3608          else if (-c == ESC_Q)            /* Handle start of quoted string */          else if (-c == ESC_Q)            /* Handle start of quoted string */
3609            {            {
3610            if (ptr[1] == '\\' && ptr[2] == 'E')            if (ptr[1] == CHAR_BACKSLASH && ptr[2] == CHAR_E)
3611              {              {
3612              ptr += 2; /* avoid empty string */              ptr += 2; /* avoid empty string */
3613              }              }
3614            else inescq = TRUE;            else inescq = TRUE;
3615            continue;            continue;
3616            }            }
3617            else if (-c == ESC_E) continue;  /* Ignore orphan \E */
3618    
3619          if (c < 0)          if (c < 0)
3620            {            {
3621            register const uschar *cbits = cd->cbits;            register const uschar *cbits = cd->cbits;
3622            class_charcount += 2;     /* Greater than 1 is what matters */            class_charcount += 2;     /* Greater than 1 is what matters */
3623    
3624            switch (-c)            switch (-c)
3625              {              {
3626    #ifdef SUPPORT_UCP
3627                case ESC_du:     /* These are the values given for \d etc */
3628                case ESC_DU:     /* when PCRE_UCP is set. We replace the */
3629                case ESC_wu:     /* escape sequence with an appropriate \p */
3630                case ESC_WU:     /* or \P to test Unicode properties instead */
3631                case ESC_su:     /* of the default ASCII testing. */
3632                case ESC_SU:
3633                nestptr = ptr;
3634                ptr = substitutes[-c - ESC_DU] - 1;  /* Just before substitute */
3635                class_charcount -= 2;                /* Undo! */
3636                continue;
3637    #endif
3638              case ESC_d:              case ESC_d:
3639              for (c = 0; c < 32; c++) classbits[c] |= cbits[c+cbit_digit];              for (c = 0; c < 32; c++) classbits[c] |= cbits[c+cbit_digit];
3640              continue;              continue;
3641    
3642              case ESC_D:              case ESC_D:
3643                should_flip_negation = TRUE;
3644              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_digit];              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_digit];
3645              continue;              continue;
3646    
# Line 1910  for (;; ptr++) Line 3649  for (;; ptr++)
3649              continue;              continue;
3650    
3651              case ESC_W:              case ESC_W:
3652                should_flip_negation = TRUE;
3653              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_word];              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_word];
3654              continue;              continue;
3655    
3656                /* Perl 5.004 onwards omits VT from \s, but we must preserve it
3657                if it was previously set by something earlier in the character
3658                class. */
3659    
3660              case ESC_s:              case ESC_s:
3661              for (c = 0; c < 32; c++) classbits[c] |= cbits[c+cbit_space];              classbits[0] |= cbits[cbit_space];
3662              classbits[1] &= ~0x08;   /* Perl 5.004 onwards omits VT from \s */              classbits[1] |= cbits[cbit_space+1] & ~0x08;
3663                for (c = 2; c < 32; c++) classbits[c] |= cbits[c+cbit_space];
3664              continue;              continue;
3665    
3666              case ESC_S:              case ESC_S:
3667                should_flip_negation = TRUE;
3668              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_space];              for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_space];
3669              classbits[1] |= 0x08;    /* Perl 5.004 onwards omits VT from \s */              classbits[1] |= 0x08;    /* Perl 5.004 onwards omits VT from \s */
3670              continue;              continue;
3671    
3672                case ESC_h:
3673                SETBIT(classbits, 0x09); /* VT */
3674                SETBIT(classbits, 0x20); /* SPACE */
3675                SETBIT(classbits, 0xa0); /* NSBP */
3676    #ifdef SUPPORT_UTF8
3677                if (utf8)
3678                  {
3679                  class_utf8 = TRUE;
3680                  *class_utf8data++ = XCL_SINGLE;
3681                  class_utf8data += _pcre_ord2utf8(0x1680, class_utf8data);
3682                  *class_utf8data++ = XCL_SINGLE;
3683                  class_utf8data += _pcre_ord2utf8(0x180e, class_utf8data);
3684                  *class_utf8data++ = XCL_RANGE;
3685                  class_utf8data += _pcre_ord2utf8(0x2000, class_utf8data);
3686                  class_utf8data += _pcre_ord2utf8(0x200A, class_utf8data);
3687                  *class_utf8data++ = XCL_SINGLE;
3688                  class_utf8data += _pcre_ord2utf8(0x202f, class_utf8data);
3689                  *class_utf8data++ = XCL_SINGLE;
3690                  class_utf8data += _pcre_ord2utf8(0x205f, class_utf8data);
3691                  *class_utf8data++ = XCL_SINGLE;
3692                  class_utf8data += _pcre_ord2utf8(0x3000, class_utf8data);
3693                  }
3694    #endif
3695                continue;
3696    
3697                case ESC_H:
3698                for (c = 0; c < 32; c++)
3699                  {
3700                  int x = 0xff;
3701                  switch (c)
3702                    {
3703                    case 0x09/8: x ^= 1 << (0x09%8); break;
3704                    case 0x20/8: x ^= 1 << (0x20%8); break;
3705                    case 0xa0/8: x ^= 1 << (0xa0%8); break;
3706                    default: break;
3707                    }
3708                  classbits[c] |= x;
3709                  }
3710    
3711    #ifdef SUPPORT_UTF8
3712                if (utf8)
3713                  {
3714                  class_utf8 = TRUE;
3715                  *class_utf8data++ = XCL_RANGE;
3716                  class_utf8data += _pcre_ord2utf8(0x0100, class_utf8data);
3717                  class_utf8data += _pcre_ord2utf8(0x167f, class_utf8data);
3718                  *class_utf8data++ = XCL_RANGE;
3719                  class_utf8data += _pcre_ord2utf8(0x1681, class_utf8data);
3720                  class_utf8data += _pcre_ord2utf8(0x180d, class_utf8data);
3721                  *class_utf8data++ = XCL_RANGE;
3722                  class_utf8data += _pcre_ord2utf8(0x180f, class_utf8data);
3723                  class_utf8data += _pcre_ord2utf8(0x1fff, class_utf8data);
3724                  *class_utf8data++ = XCL_RANGE;
3725                  class_utf8data += _pcre_ord2utf8(0x200B, class_utf8data);
3726                  class_utf8data += _pcre_ord2utf8(0x202e, class_utf8data);
3727                  *class_utf8data++ = XCL_RANGE;
3728                  class_utf8data += _pcre_ord2utf8(0x2030, class_utf8data);
3729                  class_utf8data += _pcre_ord2utf8(0x205e, class_utf8data);
3730                  *class_utf8data++ = XCL_RANGE;
3731                  class_utf8data += _pcre_ord2utf8(0x2060, class_utf8data);
3732                  class_utf8data += _pcre_ord2utf8(0x2fff, class_utf8data);
3733                  *class_utf8data++ = XCL_RANGE;
3734                  class_utf8data += _pcre_ord2utf8(0x3001, class_utf8data);
3735                  class_utf8data += _pcre_ord2utf8(0x7fffffff, class_utf8data);
3736                  }
3737    #endif
3738                continue;
3739    
3740                case ESC_v:
3741                SETBIT(classbits, 0x0a); /* LF */
3742                SETBIT(classbits, 0x0b); /* VT */
3743                SETBIT(classbits, 0x0c); /* FF */
3744                SETBIT(classbits, 0x0d); /* CR */
3745                SETBIT(classbits, 0x85); /* NEL */
3746    #ifdef SUPPORT_UTF8
3747                if (utf8)
3748                  {
3749                  class_utf8 = TRUE;
3750                  *class_utf8data++ = XCL_RANGE;
3751                  class_utf8data += _pcre_ord2utf8(0x2028, class_utf8data);
3752                  class_utf8data += _pcre_ord2utf8(0x2029, class_utf8data);
3753                  }
3754    #endif
3755                continue;
3756    
3757                case ESC_V:
3758                for (c = 0; c < 32; c++)
3759                  {
3760                  int x = 0xff;
3761                  switch (c)
3762                    {
3763                    case 0x0a/8: x ^= 1 << (0x0a%8);
3764                                 x ^= 1 << (0x0b%8);
3765                                 x ^= 1 << (0x0c%8);
3766                                 x ^= 1 << (0x0d%8);
3767                                 break;
3768                    case 0x85/8: x ^= 1 << (0x85%8); break;
3769                    default: break;
3770                    }
3771                  classbits[c] |= x;
3772                  }
3773    
3774    #ifdef SUPPORT_UTF8
3775                if (utf8)
3776                  {
3777                  class_utf8 = TRUE;
3778                  *class_utf8data++ = XCL_RANGE;
3779                  class_utf8data += _pcre_ord2utf8(0x0100, class_utf8data);
3780                  class_utf8data += _pcre_ord2utf8(0x2027, class_utf8data);
3781                  *class_utf8data++ = XCL_RANGE;
3782                  class_utf8data += _pcre_ord2utf8(0x2029, class_utf8data);
3783                  class_utf8data += _pcre_ord2utf8(0x7fffffff, class_utf8data);
3784                  }
3785    #endif
3786                continue;
3787    
3788  #ifdef SUPPORT_UCP  #ifdef SUPPORT_UCP
3789              case ESC_p:              case ESC_p:
3790              case ESC_P:              case ESC_P:
3791                {                {
3792                BOOL negated;                BOOL negated;
3793                int property = get_ucp(&ptr, &negated, errorcodeptr);                int pdata;
3794                if (property < 0) goto FAILED;                int ptype = get_ucp(&ptr, &negated, &pdata, errorcodeptr);
3795                  if (ptype < 0) goto FAILED;
3796                class_utf8 = TRUE;                class_utf8 = TRUE;
3797                *class_utf8data++ = ((-c == ESC_p) != negated)?                *class_utf8data++ = ((-c == ESC_p) != negated)?
3798                  XCL_PROP : XCL_NOTPROP;                  XCL_PROP : XCL_NOTPROP;
3799                *class_utf8data++ = property;                *class_utf8data++ = ptype;
3800                  *class_utf8data++ = pdata;
3801                class_charcount -= 2;   /* Not a < 256 character */                class_charcount -= 2;   /* Not a < 256 character */
3802                  continue;
3803                }                }
             continue;  
3804  #endif  #endif
   
3805              /* Unrecognized escapes are faulted if PCRE is running in its              /* Unrecognized escapes are faulted if PCRE is running in its
3806              strict mode. By default, for compatibility with Perl, they are              strict mode. By default, for compatibility with Perl, they are
3807              treated as literals. */              treated as literals. */
# Line 1949  for (;; ptr++) Line 3812  for (;; ptr++)
3812                *errorcodeptr = ERR7;                *errorcodeptr = ERR7;
3813                goto FAILED;                goto FAILED;
3814                }                }
             c = *ptr;              /* The final character */  
3815              class_charcount -= 2;  /* Undo the default count from above */              class_charcount -= 2;  /* Undo the default count from above */
3816                c = *ptr;              /* Get the final character and fall through */
3817                break;
3818              }              }
3819            }            }
3820    
3821          /* Fall through if we have a single character (c >= 0). This may be          /* Fall through if we have a single character (c >= 0). This may be
3822          > 256 in UTF-8 mode. */          greater than 256 in UTF-8 mode. */
3823    
3824          }   /* End of backslash handling */          }   /* End of backslash handling */
3825    
3826        /* A single character may be followed by '-' to form a range. However,        /* A single character may be followed by '-' to form a range. However,
3827        Perl does not permit ']' to be the end of the range. A '-' character        Perl does not permit ']' to be the end of the range. A '-' character
3828        here is treated as a literal. */        at the end is treated as a literal. Perl ignores orphaned \E sequences
3829          entirely. The code for handling \Q and \E is messy. */
3830    
3831          CHECK_RANGE:
3832          while (ptr[1] == CHAR_BACKSLASH && ptr[2] == CHAR_E)
3833            {
3834            inescq = FALSE;
3835            ptr += 2;
3836            }
3837    
3838          oldptr = ptr;
3839    
3840          /* Remember \r or \n */
3841    
3842        if (ptr[1] == '-' && ptr[2] != ']')        if (c == CHAR_CR || c == CHAR_NL) cd->external_flags |= PCRE_HASCRORLF;
3843    
3844          /* Check for range */
3845    
3846          if (!inescq && ptr[1] == CHAR_MINUS)
3847          {          {
3848          int d;          int d;
3849          ptr += 2;          ptr += 2;
3850            while (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_E) ptr += 2;
3851    
3852            /* If we hit \Q (not followed by \E) at this point, go into escaped
3853            mode. */
3854    
3855            while (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_Q)
3856              {
3857              ptr += 2;
3858              if (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_E)
3859                { ptr += 2; continue; }
3860              inescq = TRUE;
3861              break;
3862              }
3863    
3864            if (*ptr == 0 || (!inescq && *ptr == CHAR_RIGHT_SQUARE_BRACKET))
3865              {
3866              ptr = oldptr;
3867              goto LONE_SINGLE_CHARACTER;
3868              }
3869    
3870  #ifdef SUPPORT_UTF8  #ifdef SUPPORT_UTF8
3871          if (utf8)          if (utf8)
# Line 1981  for (;; ptr++) Line 3880  for (;; ptr++)
3880          not any of the other escapes. Perl 5.6 treats a hyphen as a literal          not any of the other escapes. Perl 5.6 treats a hyphen as a literal
3881          in such circumstances. */          in such circumstances. */
3882    
3883          if (d == '\\')          if (!inescq && d == CHAR_BACKSLASH)
3884            {            {
3885            const uschar *oldptr = ptr;            d = check_escape(&ptr, errorcodeptr, cd->bracount, options, TRUE);
3886            d = check_escape(&ptr, errorcodeptr, *brackets, options, TRUE);            if (*errorcodeptr != 0) goto FAILED;
3887    
3888            /* \b is backslash; \X is literal X; any other special means the '-'            /* \b is backspace; any other special means the '-' was literal */
           was literal */  
3889    
3890            if (d < 0)            if (d < 0)
3891              {              {
3892              if (d == -ESC_b) d = '\b';              if (d == -ESC_b) d = CHAR_BS; else
             else if (d == -ESC_X) d = 'X'; else  
3893                {                {
3894                ptr = oldptr - 2;                ptr = oldptr;
3895                goto LONE_SINGLE_CHARACTER;  /* A few lines below */                goto LONE_SINGLE_CHARACTER;  /* A few lines below */
3896                }                }
3897              }              }
3898            }            }
3899    
3900          /* The check that the two values are in the correct order happens in          /* Check that the two values are in the correct order. Optimize
3901          the pre-pass. Optimize one-character ranges */          one-character ranges */
3902    
3903            if (d < c)
3904              {
3905              *errorcodeptr = ERR8;
3906              goto FAILED;
3907              }
3908    
3909          if (d == c) goto LONE_SINGLE_CHARACTER;  /* A few lines below */          if (d == c) goto LONE_SINGLE_CHARACTER;  /* A few lines below */
3910    
3911            /* Remember \r or \n */
3912    
3913            if (d == CHAR_CR || d == CHAR_NL) cd->external_flags |= PCRE_HASCRORLF;
3914    
3915          /* In UTF-8 mode, if the upper limit is > 255, or > 127 for caseless          /* In UTF-8 mode, if the upper limit is > 255, or > 127 for caseless
3916          matching, we have to use an XCLASS with extra data items. Caseless          matching, we have to use an XCLASS with extra data items. Caseless
3917          matching for characters > 127 is available only if UCP support is          matching for characters > 127 is available only if UCP support is
# Line 2022  for (;; ptr++) Line 3929  for (;; ptr++)
3929  #ifdef SUPPORT_UCP  #ifdef SUPPORT_UCP
3930            if ((options & PCRE_CASELESS) != 0)            if ((options & PCRE_CASELESS) != 0)
3931              {              {
3932              int occ, ocd;              unsigned int occ, ocd;
3933              int cc = c;              unsigned int cc = c;
3934              int origd = d;              unsigned int origd = d;
3935              while (get_othercase_range(&cc, origd, &occ, &ocd))              while (get_othercase_range(&cc, origd, &occ, &ocd))
3936                {                {
3937                if (occ >= c && ocd <= d) continue;  /* Skip embedded ranges */                if (occ >= (unsigned int)c &&
3938                      ocd <= (unsigned int)d)
3939                    continue;                          /* Skip embedded ranges */
3940    
3941                if (occ < c  && ocd >= c - 1)        /* Extend the basic range */                if (occ < (unsigned int)c  &&
3942                      ocd >= (unsigned int)c - 1)      /* Extend the basic range */
3943                  {