Annotation of embedaddon/pcre/pcre_compile.c, revision 1.1

1.1     ! misho       1: /*************************************************
        !             2: *      Perl-Compatible Regular Expressions       *
        !             3: *************************************************/
        !             4: 
        !             5: /* PCRE is a library of functions to support regular expressions whose syntax
        !             6: and semantics are as close as possible to those of the Perl 5 language.
        !             7: 
        !             8:                        Written by Philip Hazel
        !             9:            Copyright (c) 1997-2011 University of Cambridge
        !            10: 
        !            11: -----------------------------------------------------------------------------
        !            12: Redistribution and use in source and binary forms, with or without
        !            13: modification, are permitted provided that the following conditions are met:
        !            14: 
        !            15:     * Redistributions of source code must retain the above copyright notice,
        !            16:       this list of conditions and the following disclaimer.
        !            17: 
        !            18:     * Redistributions in binary form must reproduce the above copyright
        !            19:       notice, this list of conditions and the following disclaimer in the
        !            20:       documentation and/or other materials provided with the distribution.
        !            21: 
        !            22:     * Neither the name of the University of Cambridge nor the names of its
        !            23:       contributors may be used to endorse or promote products derived from
        !            24:       this software without specific prior written permission.
        !            25: 
        !            26: THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
        !            27: AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
        !            28: IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
        !            29: ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
        !            30: LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
        !            31: CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
        !            32: SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
        !            33: INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
        !            34: CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
        !            35: ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
        !            36: POSSIBILITY OF SUCH DAMAGE.
        !            37: -----------------------------------------------------------------------------
        !            38: */
        !            39: 
        !            40: 
        !            41: /* This module contains the external function pcre_compile(), along with
        !            42: supporting internal functions that are not used by other modules. */
        !            43: 
        !            44: 
        !            45: #ifdef HAVE_CONFIG_H
        !            46: #include "config.h"
        !            47: #endif
        !            48: 
        !            49: #define NLBLOCK cd             /* Block containing newline information */
        !            50: #define PSSTART start_pattern  /* Field containing processed string start */
        !            51: #define PSEND   end_pattern    /* Field containing processed string end */
        !            52: 
        !            53: #include "pcre_internal.h"
        !            54: 
        !            55: 
        !            56: /* When PCRE_DEBUG is defined, we need the pcre_printint() function, which is
        !            57: also used by pcretest. PCRE_DEBUG is not defined when building a production
        !            58: library. */
        !            59: 
        !            60: #ifdef PCRE_DEBUG
        !            61: #include "pcre_printint.src"
        !            62: #endif
        !            63: 
        !            64: 
        !            65: /* Macro for setting individual bits in class bitmaps. */
        !            66: 
        !            67: #define SETBIT(a,b) a[b/8] |= (1 << (b%8))
        !            68: 
        !            69: /* Maximum length value to check against when making sure that the integer that
        !            70: holds the compiled pattern length does not overflow. We make it a bit less than
        !            71: INT_MAX to allow for adding in group terminating bytes, so that we don't have
        !            72: to check them every time. */
        !            73: 
        !            74: #define OFLOW_MAX (INT_MAX - 20)
        !            75: 
        !            76: 
        !            77: /*************************************************
        !            78: *      Code parameters and static tables         *
        !            79: *************************************************/
        !            80: 
        !            81: /* This value specifies the size of stack workspace that is used during the
        !            82: first pre-compile phase that determines how much memory is required. The regex
        !            83: is partly compiled into this space, but the compiled parts are discarded as
        !            84: soon as they can be, so that hopefully there will never be an overrun. The code
        !            85: does, however, check for an overrun. The largest amount I've seen used is 218,
        !            86: so this number is very generous.
        !            87: 
        !            88: The same workspace is used during the second, actual compile phase for
        !            89: remembering forward references to groups so that they can be filled in at the
        !            90: end. Each entry in this list occupies LINK_SIZE bytes, so even when LINK_SIZE
        !            91: is 4 there is plenty of room for most patterns. However, the memory can get
        !            92: filled up by repetitions of forward references, for example patterns like
        !            93: /(?1){0,1999}(b)/, and one user did hit the limit. The code has been changed so
        !            94: that the workspace is expanded using malloc() in this situation. The value
        !            95: below is therefore a minimum, and we put a maximum on it for safety. The
        !            96: minimum is now also defined in terms of LINK_SIZE so that the use of malloc()
        !            97: kicks in at the same number of forward references in all cases. */
        !            98: 
        !            99: #define COMPILE_WORK_SIZE (2048*LINK_SIZE)
        !           100: #define COMPILE_WORK_SIZE_MAX (100*COMPILE_WORK_SIZE)
        !           101: 
        !           102: /* The overrun tests check for a slightly smaller size so that they detect the
        !           103: overrun before it actually does run off the end of the data block. */
        !           104: 
        !           105: #define WORK_SIZE_SAFETY_MARGIN (100)
        !           106: 
        !           107: 
        !           108: /* Table for handling escaped characters in the range '0'-'z'. Positive returns
        !           109: are simple data values; negative values are for special things like \d and so
        !           110: on. Zero means further processing is needed (for things like \x), or the escape
        !           111: is invalid. */
        !           112: 
        !           113: #ifndef EBCDIC
        !           114: 
        !           115: /* This is the "normal" table for ASCII systems or for EBCDIC systems running
        !           116: in UTF-8 mode. */
        !           117: 
        !           118: static const short int escapes[] = {
        !           119:      0,                       0,
        !           120:      0,                       0,
        !           121:      0,                       0,
        !           122:      0,                       0,
        !           123:      0,                       0,
        !           124:      CHAR_COLON,              CHAR_SEMICOLON,
        !           125:      CHAR_LESS_THAN_SIGN,     CHAR_EQUALS_SIGN,
        !           126:      CHAR_GREATER_THAN_SIGN,  CHAR_QUESTION_MARK,
        !           127:      CHAR_COMMERCIAL_AT,      -ESC_A,
        !           128:      -ESC_B,                  -ESC_C,
        !           129:      -ESC_D,                  -ESC_E,
        !           130:      0,                       -ESC_G,
        !           131:      -ESC_H,                  0,
        !           132:      0,                       -ESC_K,
        !           133:      0,                       0,
        !           134:      -ESC_N,                  0,
        !           135:      -ESC_P,                  -ESC_Q,
        !           136:      -ESC_R,                  -ESC_S,
        !           137:      0,                       0,
        !           138:      -ESC_V,                  -ESC_W,
        !           139:      -ESC_X,                  0,
        !           140:      -ESC_Z,                  CHAR_LEFT_SQUARE_BRACKET,
        !           141:      CHAR_BACKSLASH,          CHAR_RIGHT_SQUARE_BRACKET,
        !           142:      CHAR_CIRCUMFLEX_ACCENT,  CHAR_UNDERSCORE,
        !           143:      CHAR_GRAVE_ACCENT,       7,
        !           144:      -ESC_b,                  0,
        !           145:      -ESC_d,                  ESC_e,
        !           146:      ESC_f,                   0,
        !           147:      -ESC_h,                  0,
        !           148:      0,                       -ESC_k,
        !           149:      0,                       0,
        !           150:      ESC_n,                   0,
        !           151:      -ESC_p,                  0,
        !           152:      ESC_r,                   -ESC_s,
        !           153:      ESC_tee,                 0,
        !           154:      -ESC_v,                  -ESC_w,
        !           155:      0,                       0,
        !           156:      -ESC_z
        !           157: };
        !           158: 
        !           159: #else
        !           160: 
        !           161: /* This is the "abnormal" table for EBCDIC systems without UTF-8 support. */
        !           162: 
        !           163: static const short int escapes[] = {
        !           164: /*  48 */     0,     0,      0,     '.',    '<',   '(',    '+',    '|',
        !           165: /*  50 */   '&',     0,      0,       0,      0,     0,      0,      0,
        !           166: /*  58 */     0,     0,    '!',     '$',    '*',   ')',    ';',    '~',
        !           167: /*  60 */   '-',   '/',      0,       0,      0,     0,      0,      0,
        !           168: /*  68 */     0,     0,    '|',     ',',    '%',   '_',    '>',    '?',
        !           169: /*  70 */     0,     0,      0,       0,      0,     0,      0,      0,
        !           170: /*  78 */     0,   '`',    ':',     '#',    '@',  '\'',    '=',    '"',
        !           171: /*  80 */     0,     7, -ESC_b,       0, -ESC_d, ESC_e,  ESC_f,      0,
        !           172: /*  88 */-ESC_h,     0,      0,     '{',      0,     0,      0,      0,
        !           173: /*  90 */     0,     0, -ESC_k,     'l',      0, ESC_n,      0, -ESC_p,
        !           174: /*  98 */     0, ESC_r,      0,     '}',      0,     0,      0,      0,
        !           175: /*  A0 */     0,   '~', -ESC_s, ESC_tee,      0,-ESC_v, -ESC_w,      0,
        !           176: /*  A8 */     0,-ESC_z,      0,       0,      0,   '[',      0,      0,
        !           177: /*  B0 */     0,     0,      0,       0,      0,     0,      0,      0,
        !           178: /*  B8 */     0,     0,      0,       0,      0,   ']',    '=',    '-',
        !           179: /*  C0 */   '{',-ESC_A, -ESC_B,  -ESC_C, -ESC_D,-ESC_E,      0, -ESC_G,
        !           180: /*  C8 */-ESC_H,     0,      0,       0,      0,     0,      0,      0,
        !           181: /*  D0 */   '}',     0, -ESC_K,       0,      0,-ESC_N,      0, -ESC_P,
        !           182: /*  D8 */-ESC_Q,-ESC_R,      0,       0,      0,     0,      0,      0,
        !           183: /*  E0 */  '\\',     0, -ESC_S,       0,      0,-ESC_V, -ESC_W, -ESC_X,
        !           184: /*  E8 */     0,-ESC_Z,      0,       0,      0,     0,      0,      0,
        !           185: /*  F0 */     0,     0,      0,       0,      0,     0,      0,      0,
        !           186: /*  F8 */     0,     0,      0,       0,      0,     0,      0,      0
        !           187: };
        !           188: #endif
        !           189: 
        !           190: 
        !           191: /* Table of special "verbs" like (*PRUNE). This is a short table, so it is
        !           192: searched linearly. Put all the names into a single string, in order to reduce
        !           193: the number of relocations when a shared library is dynamically linked. The
        !           194: string is built from string macros so that it works in UTF-8 mode on EBCDIC
        !           195: platforms. */
        !           196: 
        !           197: typedef struct verbitem {
        !           198:   int   len;                 /* Length of verb name */
        !           199:   int   op;                  /* Op when no arg, or -1 if arg mandatory */
        !           200:   int   op_arg;              /* Op when arg present, or -1 if not allowed */
        !           201: } verbitem;
        !           202: 
        !           203: static const char verbnames[] =
        !           204:   "\0"                       /* Empty name is a shorthand for MARK */
        !           205:   STRING_MARK0
        !           206:   STRING_ACCEPT0
        !           207:   STRING_COMMIT0
        !           208:   STRING_F0
        !           209:   STRING_FAIL0
        !           210:   STRING_PRUNE0
        !           211:   STRING_SKIP0
        !           212:   STRING_THEN;
        !           213: 
        !           214: static const verbitem verbs[] = {
        !           215:   { 0, -1,        OP_MARK },
        !           216:   { 4, -1,        OP_MARK },
        !           217:   { 6, OP_ACCEPT, -1 },
        !           218:   { 6, OP_COMMIT, -1 },
        !           219:   { 1, OP_FAIL,   -1 },
        !           220:   { 4, OP_FAIL,   -1 },
        !           221:   { 5, OP_PRUNE,  OP_PRUNE_ARG },
        !           222:   { 4, OP_SKIP,   OP_SKIP_ARG  },
        !           223:   { 4, OP_THEN,   OP_THEN_ARG  }
        !           224: };
        !           225: 
        !           226: static const int verbcount = sizeof(verbs)/sizeof(verbitem);
        !           227: 
        !           228: 
        !           229: /* Tables of names of POSIX character classes and their lengths. The names are
        !           230: now all in a single string, to reduce the number of relocations when a shared
        !           231: library is dynamically loaded. The list of lengths is terminated by a zero
        !           232: length entry. The first three must be alpha, lower, upper, as this is assumed
        !           233: for handling case independence. */
        !           234: 
        !           235: static const char posix_names[] =
        !           236:   STRING_alpha0 STRING_lower0 STRING_upper0 STRING_alnum0
        !           237:   STRING_ascii0 STRING_blank0 STRING_cntrl0 STRING_digit0
        !           238:   STRING_graph0 STRING_print0 STRING_punct0 STRING_space0
        !           239:   STRING_word0  STRING_xdigit;
        !           240: 
        !           241: static const uschar posix_name_lengths[] = {
        !           242:   5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 6, 0 };
        !           243: 
        !           244: /* Table of class bit maps for each POSIX class. Each class is formed from a
        !           245: base map, with an optional addition or removal of another map. Then, for some
        !           246: classes, there is some additional tweaking: for [:blank:] the vertical space
        !           247: characters are removed, and for [:alpha:] and [:alnum:] the underscore
        !           248: character is removed. The triples in the table consist of the base map offset,
        !           249: second map offset or -1 if no second map, and a non-negative value for map
        !           250: addition or a negative value for map subtraction (if there are two maps). The
        !           251: absolute value of the third field has these meanings: 0 => no tweaking, 1 =>
        !           252: remove vertical space characters, 2 => remove underscore. */
        !           253: 
        !           254: static const int posix_class_maps[] = {
        !           255:   cbit_word,  cbit_digit, -2,             /* alpha */
        !           256:   cbit_lower, -1,          0,             /* lower */
        !           257:   cbit_upper, -1,          0,             /* upper */
        !           258:   cbit_word,  -1,          2,             /* alnum - word without underscore */
        !           259:   cbit_print, cbit_cntrl,  0,             /* ascii */
        !           260:   cbit_space, -1,          1,             /* blank - a GNU extension */
        !           261:   cbit_cntrl, -1,          0,             /* cntrl */
        !           262:   cbit_digit, -1,          0,             /* digit */
        !           263:   cbit_graph, -1,          0,             /* graph */
        !           264:   cbit_print, -1,          0,             /* print */
        !           265:   cbit_punct, -1,          0,             /* punct */
        !           266:   cbit_space, -1,          0,             /* space */
        !           267:   cbit_word,  -1,          0,             /* word - a Perl extension */
        !           268:   cbit_xdigit,-1,          0              /* xdigit */
        !           269: };
        !           270: 
        !           271: /* Table of substitutes for \d etc when PCRE_UCP is set. The POSIX class
        !           272: substitutes must be in the order of the names, defined above, and there are
        !           273: both positive and negative cases. NULL means no substitute. */
        !           274: 
        !           275: #ifdef SUPPORT_UCP
        !           276: static const uschar *substitutes[] = {
        !           277:   (uschar *)"\\P{Nd}",    /* \D */
        !           278:   (uschar *)"\\p{Nd}",    /* \d */
        !           279:   (uschar *)"\\P{Xsp}",   /* \S */       /* NOTE: Xsp is Perl space */
        !           280:   (uschar *)"\\p{Xsp}",   /* \s */
        !           281:   (uschar *)"\\P{Xwd}",   /* \W */
        !           282:   (uschar *)"\\p{Xwd}"    /* \w */
        !           283: };
        !           284: 
        !           285: static const uschar *posix_substitutes[] = {
        !           286:   (uschar *)"\\p{L}",     /* alpha */
        !           287:   (uschar *)"\\p{Ll}",    /* lower */
        !           288:   (uschar *)"\\p{Lu}",    /* upper */
        !           289:   (uschar *)"\\p{Xan}",   /* alnum */
        !           290:   NULL,                   /* ascii */
        !           291:   (uschar *)"\\h",        /* blank */
        !           292:   NULL,                   /* cntrl */
        !           293:   (uschar *)"\\p{Nd}",    /* digit */
        !           294:   NULL,                   /* graph */
        !           295:   NULL,                   /* print */
        !           296:   NULL,                   /* punct */
        !           297:   (uschar *)"\\p{Xps}",   /* space */    /* NOTE: Xps is POSIX space */
        !           298:   (uschar *)"\\p{Xwd}",   /* word */
        !           299:   NULL,                   /* xdigit */
        !           300:   /* Negated cases */
        !           301:   (uschar *)"\\P{L}",     /* ^alpha */
        !           302:   (uschar *)"\\P{Ll}",    /* ^lower */
        !           303:   (uschar *)"\\P{Lu}",    /* ^upper */
        !           304:   (uschar *)"\\P{Xan}",   /* ^alnum */
        !           305:   NULL,                   /* ^ascii */
        !           306:   (uschar *)"\\H",        /* ^blank */
        !           307:   NULL,                   /* ^cntrl */
        !           308:   (uschar *)"\\P{Nd}",    /* ^digit */
        !           309:   NULL,                   /* ^graph */
        !           310:   NULL,                   /* ^print */
        !           311:   NULL,                   /* ^punct */
        !           312:   (uschar *)"\\P{Xps}",   /* ^space */   /* NOTE: Xps is POSIX space */
        !           313:   (uschar *)"\\P{Xwd}",   /* ^word */
        !           314:   NULL                    /* ^xdigit */
        !           315: };
        !           316: #define POSIX_SUBSIZE (sizeof(posix_substitutes)/sizeof(uschar *))
        !           317: #endif
        !           318: 
        !           319: #define STRING(a)  # a
        !           320: #define XSTRING(s) STRING(s)
        !           321: 
        !           322: /* The texts of compile-time error messages. These are "char *" because they
        !           323: are passed to the outside world. Do not ever re-use any error number, because
        !           324: they are documented. Always add a new error instead. Messages marked DEAD below
        !           325: are no longer used. This used to be a table of strings, but in order to reduce
        !           326: the number of relocations needed when a shared library is loaded dynamically,
        !           327: it is now one long string. We cannot use a table of offsets, because the
        !           328: lengths of inserts such as XSTRING(MAX_NAME_SIZE) are not known. Instead, we
        !           329: simply count through to the one we want - this isn't a performance issue
        !           330: because these strings are used only when there is a compilation error.
        !           331: 
        !           332: Each substring ends with \0 to insert a null character. This includes the final
        !           333: substring, so that the whole string ends with \0\0, which can be detected when
        !           334: counting through. */
        !           335: 
        !           336: static const char error_texts[] =
        !           337:   "no error\0"
        !           338:   "\\ at end of pattern\0"
        !           339:   "\\c at end of pattern\0"
        !           340:   "unrecognized character follows \\\0"
        !           341:   "numbers out of order in {} quantifier\0"
        !           342:   /* 5 */
        !           343:   "number too big in {} quantifier\0"
        !           344:   "missing terminating ] for character class\0"
        !           345:   "invalid escape sequence in character class\0"
        !           346:   "range out of order in character class\0"
        !           347:   "nothing to repeat\0"
        !           348:   /* 10 */
        !           349:   "operand of unlimited repeat could match the empty string\0"  /** DEAD **/
        !           350:   "internal error: unexpected repeat\0"
        !           351:   "unrecognized character after (? or (?-\0"
        !           352:   "POSIX named classes are supported only within a class\0"
        !           353:   "missing )\0"
        !           354:   /* 15 */
        !           355:   "reference to non-existent subpattern\0"
        !           356:   "erroffset passed as NULL\0"
        !           357:   "unknown option bit(s) set\0"
        !           358:   "missing ) after comment\0"
        !           359:   "parentheses nested too deeply\0"  /** DEAD **/
        !           360:   /* 20 */
        !           361:   "regular expression is too large\0"
        !           362:   "failed to get memory\0"
        !           363:   "unmatched parentheses\0"
        !           364:   "internal error: code overflow\0"
        !           365:   "unrecognized character after (?<\0"
        !           366:   /* 25 */
        !           367:   "lookbehind assertion is not fixed length\0"
        !           368:   "malformed number or name after (?(\0"
        !           369:   "conditional group contains more than two branches\0"
        !           370:   "assertion expected after (?(\0"
        !           371:   "(?R or (?[+-]digits must be followed by )\0"
        !           372:   /* 30 */
        !           373:   "unknown POSIX class name\0"
        !           374:   "POSIX collating elements are not supported\0"
        !           375:   "this version of PCRE is not compiled with PCRE_UTF8 support\0"
        !           376:   "spare error\0"  /** DEAD **/
        !           377:   "character value in \\x{...} sequence is too large\0"
        !           378:   /* 35 */
        !           379:   "invalid condition (?(0)\0"
        !           380:   "\\C not allowed in lookbehind assertion\0"
        !           381:   "PCRE does not support \\L, \\l, \\N{name}, \\U, or \\u\0"
        !           382:   "number after (?C is > 255\0"
        !           383:   "closing ) for (?C expected\0"
        !           384:   /* 40 */
        !           385:   "recursive call could loop indefinitely\0"
        !           386:   "unrecognized character after (?P\0"
        !           387:   "syntax error in subpattern name (missing terminator)\0"
        !           388:   "two named subpatterns have the same name\0"
        !           389:   "invalid UTF-8 string\0"
        !           390:   /* 45 */
        !           391:   "support for \\P, \\p, and \\X has not been compiled\0"
        !           392:   "malformed \\P or \\p sequence\0"
        !           393:   "unknown property name after \\P or \\p\0"
        !           394:   "subpattern name is too long (maximum " XSTRING(MAX_NAME_SIZE) " characters)\0"
        !           395:   "too many named subpatterns (maximum " XSTRING(MAX_NAME_COUNT) ")\0"
        !           396:   /* 50 */
        !           397:   "repeated subpattern is too long\0"    /** DEAD **/
        !           398:   "octal value is greater than \\377 (not in UTF-8 mode)\0"
        !           399:   "internal error: overran compiling workspace\0"
        !           400:   "internal error: previously-checked referenced subpattern not found\0"
        !           401:   "DEFINE group contains more than one branch\0"
        !           402:   /* 55 */
        !           403:   "repeating a DEFINE group is not allowed\0"  /** DEAD **/
        !           404:   "inconsistent NEWLINE options\0"
        !           405:   "\\g is not followed by a braced, angle-bracketed, or quoted name/number or by a plain number\0"
        !           406:   "a numbered reference must not be zero\0"
        !           407:   "an argument is not allowed for (*ACCEPT), (*FAIL), or (*COMMIT)\0"
        !           408:   /* 60 */
        !           409:   "(*VERB) not recognized\0"
        !           410:   "number is too big\0"
        !           411:   "subpattern name expected\0"
        !           412:   "digit expected after (?+\0"
        !           413:   "] is an invalid data character in JavaScript compatibility mode\0"
        !           414:   /* 65 */
        !           415:   "different names for subpatterns of the same number are not allowed\0"
        !           416:   "(*MARK) must have an argument\0"
        !           417:   "this version of PCRE is not compiled with PCRE_UCP support\0"
        !           418:   "\\c must be followed by an ASCII character\0"
        !           419:   "\\k is not followed by a braced, angle-bracketed, or quoted name\0"
        !           420:   /* 70 */
        !           421:   "internal error: unknown opcode in find_fixedlength()\0"
        !           422:   "\\N is not supported in a class\0"
        !           423:   "too many forward references\0"
        !           424:   ;
        !           425: 
        !           426: /* Table to identify digits and hex digits. This is used when compiling
        !           427: patterns. Note that the tables in chartables are dependent on the locale, and
        !           428: may mark arbitrary characters as digits - but the PCRE compiling code expects
        !           429: to handle only 0-9, a-z, and A-Z as digits when compiling. That is why we have
        !           430: a private table here. It costs 256 bytes, but it is a lot faster than doing
        !           431: character value tests (at least in some simple cases I timed), and in some
        !           432: applications one wants PCRE to compile efficiently as well as match
        !           433: efficiently.
        !           434: 
        !           435: For convenience, we use the same bit definitions as in chartables:
        !           436: 
        !           437:   0x04   decimal digit
        !           438:   0x08   hexadecimal digit
        !           439: 
        !           440: Then we can use ctype_digit and ctype_xdigit in the code. */
        !           441: 
        !           442: #ifndef EBCDIC
        !           443: 
        !           444: /* This is the "normal" case, for ASCII systems, and EBCDIC systems running in
        !           445: UTF-8 mode. */
        !           446: 
        !           447: static const unsigned char digitab[] =
        !           448:   {
        !           449:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7 */
        !           450:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   8- 15 */
        !           451:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  16- 23 */
        !           452:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  24- 31 */
        !           453:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - '  */
        !           454:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  ( - /  */
        !           455:   0x0c,0x0c,0x0c,0x0c,0x0c,0x0c,0x0c,0x0c, /*  0 - 7  */
        !           456:   0x0c,0x0c,0x00,0x00,0x00,0x00,0x00,0x00, /*  8 - ?  */
        !           457:   0x00,0x08,0x08,0x08,0x08,0x08,0x08,0x00, /*  @ - G  */
        !           458:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  H - O  */
        !           459:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  P - W  */
        !           460:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  X - _  */
        !           461:   0x00,0x08,0x08,0x08,0x08,0x08,0x08,0x00, /*  ` - g  */
        !           462:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  h - o  */
        !           463:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  p - w  */
        !           464:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  x -127 */
        !           465:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 128-135 */
        !           466:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 136-143 */
        !           467:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 144-151 */
        !           468:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 152-159 */
        !           469:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 160-167 */
        !           470:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 168-175 */
        !           471:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 176-183 */
        !           472:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 184-191 */
        !           473:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 192-199 */
        !           474:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 200-207 */
        !           475:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 208-215 */
        !           476:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 216-223 */
        !           477:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 224-231 */
        !           478:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 232-239 */
        !           479:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 240-247 */
        !           480:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00};/* 248-255 */
        !           481: 
        !           482: #else
        !           483: 
        !           484: /* This is the "abnormal" case, for EBCDIC systems not running in UTF-8 mode. */
        !           485: 
        !           486: static const unsigned char digitab[] =
        !           487:   {
        !           488:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   0-  7  0 */
        !           489:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*   8- 15    */
        !           490:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  16- 23 10 */
        !           491:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  24- 31    */
        !           492:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  32- 39 20 */
        !           493:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  40- 47    */
        !           494:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  48- 55 30 */
        !           495:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  56- 63    */
        !           496:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 40 */
        !           497:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  72- |     */
        !           498:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 50 */
        !           499:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  88- 95    */
        !           500:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 60 */
        !           501:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 104- ?     */
        !           502:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 70 */
        !           503:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 120- "     */
        !           504:   0x00,0x08,0x08,0x08,0x08,0x08,0x08,0x00, /* 128- g  80 */
        !           505:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  h -143    */
        !           506:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 144- p  90 */
        !           507:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  q -159    */
        !           508:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 160- x  A0 */
        !           509:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  y -175    */
        !           510:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  ^ -183 B0 */
        !           511:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 184-191    */
        !           512:   0x00,0x08,0x08,0x08,0x08,0x08,0x08,0x00, /*  { - G  C0 */
        !           513:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  H -207    */
        !           514:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  } - P  D0 */
        !           515:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  Q -223    */
        !           516:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  \ - X  E0 */
        !           517:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  Y -239    */
        !           518:   0x0c,0x0c,0x0c,0x0c,0x0c,0x0c,0x0c,0x0c, /*  0 - 7  F0 */
        !           519:   0x0c,0x0c,0x00,0x00,0x00,0x00,0x00,0x00};/*  8 -255    */
        !           520: 
        !           521: static const unsigned char ebcdic_chartab[] = { /* chartable partial dup */
        !           522:   0x80,0x00,0x00,0x00,0x00,0x01,0x00,0x00, /*   0-  7 */
        !           523:   0x00,0x00,0x00,0x00,0x01,0x01,0x00,0x00, /*   8- 15 */
        !           524:   0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00, /*  16- 23 */
        !           525:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  24- 31 */
        !           526:   0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00, /*  32- 39 */
        !           527:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  40- 47 */
        !           528:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  48- 55 */
        !           529:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  56- 63 */
        !           530:   0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*    - 71 */
        !           531:   0x00,0x00,0x00,0x80,0x00,0x80,0x80,0x80, /*  72- |  */
        !           532:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  & - 87 */
        !           533:   0x00,0x00,0x00,0x80,0x80,0x80,0x00,0x00, /*  88- 95 */
        !           534:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  - -103 */
        !           535:   0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x80, /* 104- ?  */
        !           536:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 112-119 */
        !           537:   0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* 120- "  */
        !           538:   0x00,0x1a,0x1a,0x1a,0x1a,0x1a,0x1a,0x12, /* 128- g  */
        !           539:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  h -143 */
        !           540:   0x00,0x12,0x12,0x12,0x12,0x12,0x12,0x12, /* 144- p  */
        !           541:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  q -159 */
        !           542:   0x00,0x00,0x12,0x12,0x12,0x12,0x12,0x12, /* 160- x  */
        !           543:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  y -175 */
        !           544:   0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /*  ^ -183 */
        !           545:   0x00,0x00,0x80,0x00,0x00,0x00,0x00,0x00, /* 184-191 */
        !           546:   0x80,0x1a,0x1a,0x1a,0x1a,0x1a,0x1a,0x12, /*  { - G  */
        !           547:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  H -207 */
        !           548:   0x00,0x12,0x12,0x12,0x12,0x12,0x12,0x12, /*  } - P  */
        !           549:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  Q -223 */
        !           550:   0x00,0x00,0x12,0x12,0x12,0x12,0x12,0x12, /*  \ - X  */
        !           551:   0x12,0x12,0x00,0x00,0x00,0x00,0x00,0x00, /*  Y -239 */
        !           552:   0x1c,0x1c,0x1c,0x1c,0x1c,0x1c,0x1c,0x1c, /*  0 - 7  */
        !           553:   0x1c,0x1c,0x00,0x00,0x00,0x00,0x00,0x00};/*  8 -255 */
        !           554: #endif
        !           555: 
        !           556: 
        !           557: /* Definition to allow mutual recursion */
        !           558: 
        !           559: static BOOL
        !           560:   compile_regex(int, uschar **, const uschar **, int *, BOOL, BOOL, int, int,
        !           561:     int *, int *, branch_chain *, compile_data *, int *);
        !           562: 
        !           563: 
        !           564: 
        !           565: /*************************************************
        !           566: *            Find an error text                  *
        !           567: *************************************************/
        !           568: 
        !           569: /* The error texts are now all in one long string, to save on relocations. As
        !           570: some of the text is of unknown length, we can't use a table of offsets.
        !           571: Instead, just count through the strings. This is not a performance issue
        !           572: because it happens only when there has been a compilation error.
        !           573: 
        !           574: Argument:   the error number
        !           575: Returns:    pointer to the error string
        !           576: */
        !           577: 
        !           578: static const char *
        !           579: find_error_text(int n)
        !           580: {
        !           581: const char *s = error_texts;
        !           582: for (; n > 0; n--)
        !           583:   {
        !           584:   while (*s++ != 0) {};
        !           585:   if (*s == 0) return "Error text not found (please report)";
        !           586:   }
        !           587: return s;
        !           588: }
        !           589: 
        !           590: 
        !           591: /*************************************************
        !           592: *           Expand the workspace                 *
        !           593: *************************************************/
        !           594: 
        !           595: /* This function is called during the second compiling phase, if the number of
        !           596: forward references fills the existing workspace, which is originally a block on
        !           597: the stack. A larger block is obtained from malloc() unless the ultimate limit
        !           598: has been reached or the increase will be rather small.
        !           599: 
        !           600: Argument: pointer to the compile data block
        !           601: Returns:  0 if all went well, else an error number
        !           602: */
        !           603: 
        !           604: static int
        !           605: expand_workspace(compile_data *cd)
        !           606: {
        !           607: uschar *newspace;
        !           608: int newsize = cd->workspace_size * 2;
        !           609: 
        !           610: if (newsize > COMPILE_WORK_SIZE_MAX) newsize = COMPILE_WORK_SIZE_MAX;
        !           611: if (cd->workspace_size >= COMPILE_WORK_SIZE_MAX ||
        !           612:     newsize - cd->workspace_size < WORK_SIZE_SAFETY_MARGIN)
        !           613:  return ERR72;
        !           614: 
        !           615: newspace = (pcre_malloc)(newsize);
        !           616: if (newspace == NULL) return ERR21;
        !           617: 
        !           618: memcpy(newspace, cd->start_workspace, cd->workspace_size);
        !           619: cd->hwm = (uschar *)newspace + (cd->hwm - cd->start_workspace);
        !           620: if (cd->workspace_size > COMPILE_WORK_SIZE)
        !           621:   (pcre_free)((void *)cd->start_workspace);
        !           622: cd->start_workspace = newspace;
        !           623: cd->workspace_size = newsize;
        !           624: return 0;
        !           625: }
        !           626: 
        !           627: 
        !           628: 
        !           629: /*************************************************
        !           630: *            Check for counted repeat            *
        !           631: *************************************************/
        !           632: 
        !           633: /* This function is called when a '{' is encountered in a place where it might
        !           634: start a quantifier. It looks ahead to see if it really is a quantifier or not.
        !           635: It is only a quantifier if it is one of the forms {ddd} {ddd,} or {ddd,ddd}
        !           636: where the ddds are digits.
        !           637: 
        !           638: Arguments:
        !           639:   p         pointer to the first char after '{'
        !           640: 
        !           641: Returns:    TRUE or FALSE
        !           642: */
        !           643: 
        !           644: static BOOL
        !           645: is_counted_repeat(const uschar *p)
        !           646: {
        !           647: if ((digitab[*p++] & ctype_digit) == 0) return FALSE;
        !           648: while ((digitab[*p] & ctype_digit) != 0) p++;
        !           649: if (*p == CHAR_RIGHT_CURLY_BRACKET) return TRUE;
        !           650: 
        !           651: if (*p++ != CHAR_COMMA) return FALSE;
        !           652: if (*p == CHAR_RIGHT_CURLY_BRACKET) return TRUE;
        !           653: 
        !           654: if ((digitab[*p++] & ctype_digit) == 0) return FALSE;
        !           655: while ((digitab[*p] & ctype_digit) != 0) p++;
        !           656: 
        !           657: return (*p == CHAR_RIGHT_CURLY_BRACKET);
        !           658: }
        !           659: 
        !           660: 
        !           661: 
        !           662: /*************************************************
        !           663: *            Handle escapes                      *
        !           664: *************************************************/
        !           665: 
        !           666: /* This function is called when a \ has been encountered. It either returns a
        !           667: positive value for a simple escape such as \n, or a negative value which
        !           668: encodes one of the more complicated things such as \d. A backreference to group
        !           669: n is returned as -(ESC_REF + n); ESC_REF is the highest ESC_xxx macro. When
        !           670: UTF-8 is enabled, a positive value greater than 255 may be returned. On entry,
        !           671: ptr is pointing at the \. On exit, it is on the final character of the escape
        !           672: sequence.
        !           673: 
        !           674: Arguments:
        !           675:   ptrptr         points to the pattern position pointer
        !           676:   errorcodeptr   points to the errorcode variable
        !           677:   bracount       number of previous extracting brackets
        !           678:   options        the options bits
        !           679:   isclass        TRUE if inside a character class
        !           680: 
        !           681: Returns:         zero or positive => a data character
        !           682:                  negative => a special escape sequence
        !           683:                  on error, errorcodeptr is set
        !           684: */
        !           685: 
        !           686: static int
        !           687: check_escape(const uschar **ptrptr, int *errorcodeptr, int bracount,
        !           688:   int options, BOOL isclass)
        !           689: {
        !           690: BOOL utf8 = (options & PCRE_UTF8) != 0;
        !           691: const uschar *ptr = *ptrptr + 1;
        !           692: int c, i;
        !           693: 
        !           694: GETCHARINCTEST(c, ptr);           /* Get character value, increment pointer */
        !           695: ptr--;                            /* Set pointer back to the last byte */
        !           696: 
        !           697: /* If backslash is at the end of the pattern, it's an error. */
        !           698: 
        !           699: if (c == 0) *errorcodeptr = ERR1;
        !           700: 
        !           701: /* Non-alphanumerics are literals. For digits or letters, do an initial lookup
        !           702: in a table. A non-zero result is something that can be returned immediately.
        !           703: Otherwise further processing may be required. */
        !           704: 
        !           705: #ifndef EBCDIC  /* ASCII/UTF-8 coding */
        !           706: else if (c < CHAR_0 || c > CHAR_z) {}                     /* Not alphanumeric */
        !           707: else if ((i = escapes[c - CHAR_0]) != 0) c = i;
        !           708: 
        !           709: #else           /* EBCDIC coding */
        !           710: else if (c < 'a' || (ebcdic_chartab[c] & 0x0E) == 0) {}   /* Not alphanumeric */
        !           711: else if ((i = escapes[c - 0x48]) != 0)  c = i;
        !           712: #endif
        !           713: 
        !           714: /* Escapes that need further processing, or are illegal. */
        !           715: 
        !           716: else
        !           717:   {
        !           718:   const uschar *oldptr;
        !           719:   BOOL braced, negated;
        !           720: 
        !           721:   switch (c)
        !           722:     {
        !           723:     /* A number of Perl escapes are not handled by PCRE. We give an explicit
        !           724:     error. */
        !           725: 
        !           726:     case CHAR_l:
        !           727:     case CHAR_L:
        !           728:     *errorcodeptr = ERR37;
        !           729:     break;
        !           730: 
        !           731:     case CHAR_u:
        !           732:     if ((options & PCRE_JAVASCRIPT_COMPAT) != 0)
        !           733:       {
        !           734:       /* In JavaScript, \u must be followed by four hexadecimal numbers.
        !           735:       Otherwise it is a lowercase u letter. */
        !           736:       if ((digitab[ptr[1]] & ctype_xdigit) != 0 && (digitab[ptr[2]] & ctype_xdigit) != 0
        !           737:            && (digitab[ptr[3]] & ctype_xdigit) != 0 && (digitab[ptr[4]] & ctype_xdigit) != 0)
        !           738:         {
        !           739:         c = 0;
        !           740:         for (i = 0; i < 4; ++i)
        !           741:           {
        !           742:           register int cc = *(++ptr);
        !           743: #ifndef EBCDIC  /* ASCII/UTF-8 coding */
        !           744:           if (cc >= CHAR_a) cc -= 32;               /* Convert to upper case */
        !           745:           c = (c << 4) + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
        !           746: #else           /* EBCDIC coding */
        !           747:           if (cc >= CHAR_a && cc <= CHAR_z) cc += 64;  /* Convert to upper case */
        !           748:           c = (c << 4) + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
        !           749: #endif
        !           750:           }
        !           751:         }
        !           752:       }
        !           753:     else
        !           754:       *errorcodeptr = ERR37;
        !           755:     break;
        !           756: 
        !           757:     case CHAR_U:
        !           758:     /* In JavaScript, \U is an uppercase U letter. */
        !           759:     if ((options & PCRE_JAVASCRIPT_COMPAT) == 0) *errorcodeptr = ERR37;
        !           760:     break;
        !           761: 
        !           762:     /* In a character class, \g is just a literal "g". Outside a character
        !           763:     class, \g must be followed by one of a number of specific things:
        !           764: 
        !           765:     (1) A number, either plain or braced. If positive, it is an absolute
        !           766:     backreference. If negative, it is a relative backreference. This is a Perl
        !           767:     5.10 feature.
        !           768: 
        !           769:     (2) Perl 5.10 also supports \g{name} as a reference to a named group. This
        !           770:     is part of Perl's movement towards a unified syntax for back references. As
        !           771:     this is synonymous with \k{name}, we fudge it up by pretending it really
        !           772:     was \k.
        !           773: 
        !           774:     (3) For Oniguruma compatibility we also support \g followed by a name or a
        !           775:     number either in angle brackets or in single quotes. However, these are
        !           776:     (possibly recursive) subroutine calls, _not_ backreferences. Just return
        !           777:     the -ESC_g code (cf \k). */
        !           778: 
        !           779:     case CHAR_g:
        !           780:     if (isclass) break;
        !           781:     if (ptr[1] == CHAR_LESS_THAN_SIGN || ptr[1] == CHAR_APOSTROPHE)
        !           782:       {
        !           783:       c = -ESC_g;
        !           784:       break;
        !           785:       }
        !           786: 
        !           787:     /* Handle the Perl-compatible cases */
        !           788: 
        !           789:     if (ptr[1] == CHAR_LEFT_CURLY_BRACKET)
        !           790:       {
        !           791:       const uschar *p;
        !           792:       for (p = ptr+2; *p != 0 && *p != CHAR_RIGHT_CURLY_BRACKET; p++)
        !           793:         if (*p != CHAR_MINUS && (digitab[*p] & ctype_digit) == 0) break;
        !           794:       if (*p != 0 && *p != CHAR_RIGHT_CURLY_BRACKET)
        !           795:         {
        !           796:         c = -ESC_k;
        !           797:         break;
        !           798:         }
        !           799:       braced = TRUE;
        !           800:       ptr++;
        !           801:       }
        !           802:     else braced = FALSE;
        !           803: 
        !           804:     if (ptr[1] == CHAR_MINUS)
        !           805:       {
        !           806:       negated = TRUE;
        !           807:       ptr++;
        !           808:       }
        !           809:     else negated = FALSE;
        !           810: 
        !           811:     c = 0;
        !           812:     while ((digitab[ptr[1]] & ctype_digit) != 0)
        !           813:       c = c * 10 + *(++ptr) - CHAR_0;
        !           814: 
        !           815:     if (c < 0)   /* Integer overflow */
        !           816:       {
        !           817:       *errorcodeptr = ERR61;
        !           818:       break;
        !           819:       }
        !           820: 
        !           821:     if (braced && *(++ptr) != CHAR_RIGHT_CURLY_BRACKET)
        !           822:       {
        !           823:       *errorcodeptr = ERR57;
        !           824:       break;
        !           825:       }
        !           826: 
        !           827:     if (c == 0)
        !           828:       {
        !           829:       *errorcodeptr = ERR58;
        !           830:       break;
        !           831:       }
        !           832: 
        !           833:     if (negated)
        !           834:       {
        !           835:       if (c > bracount)
        !           836:         {
        !           837:         *errorcodeptr = ERR15;
        !           838:         break;
        !           839:         }
        !           840:       c = bracount - (c - 1);
        !           841:       }
        !           842: 
        !           843:     c = -(ESC_REF + c);
        !           844:     break;
        !           845: 
        !           846:     /* The handling of escape sequences consisting of a string of digits
        !           847:     starting with one that is not zero is not straightforward. By experiment,
        !           848:     the way Perl works seems to be as follows:
        !           849: 
        !           850:     Outside a character class, the digits are read as a decimal number. If the
        !           851:     number is less than 10, or if there are that many previous extracting
        !           852:     left brackets, then it is a back reference. Otherwise, up to three octal
        !           853:     digits are read to form an escaped byte. Thus \123 is likely to be octal
        !           854:     123 (cf \0123, which is octal 012 followed by the literal 3). If the octal
        !           855:     value is greater than 377, the least significant 8 bits are taken. Inside a
        !           856:     character class, \ followed by a digit is always an octal number. */
        !           857: 
        !           858:     case CHAR_1: case CHAR_2: case CHAR_3: case CHAR_4: case CHAR_5:
        !           859:     case CHAR_6: case CHAR_7: case CHAR_8: case CHAR_9:
        !           860: 
        !           861:     if (!isclass)
        !           862:       {
        !           863:       oldptr = ptr;
        !           864:       c -= CHAR_0;
        !           865:       while ((digitab[ptr[1]] & ctype_digit) != 0)
        !           866:         c = c * 10 + *(++ptr) - CHAR_0;
        !           867:       if (c < 0)    /* Integer overflow */
        !           868:         {
        !           869:         *errorcodeptr = ERR61;
        !           870:         break;
        !           871:         }
        !           872:       if (c < 10 || c <= bracount)
        !           873:         {
        !           874:         c = -(ESC_REF + c);
        !           875:         break;
        !           876:         }
        !           877:       ptr = oldptr;      /* Put the pointer back and fall through */
        !           878:       }
        !           879: 
        !           880:     /* Handle an octal number following \. If the first digit is 8 or 9, Perl
        !           881:     generates a binary zero byte and treats the digit as a following literal.
        !           882:     Thus we have to pull back the pointer by one. */
        !           883: 
        !           884:     if ((c = *ptr) >= CHAR_8)
        !           885:       {
        !           886:       ptr--;
        !           887:       c = 0;
        !           888:       break;
        !           889:       }
        !           890: 
        !           891:     /* \0 always starts an octal number, but we may drop through to here with a
        !           892:     larger first octal digit. The original code used just to take the least
        !           893:     significant 8 bits of octal numbers (I think this is what early Perls used
        !           894:     to do). Nowadays we allow for larger numbers in UTF-8 mode, but no more
        !           895:     than 3 octal digits. */
        !           896: 
        !           897:     case CHAR_0:
        !           898:     c -= CHAR_0;
        !           899:     while(i++ < 2 && ptr[1] >= CHAR_0 && ptr[1] <= CHAR_7)
        !           900:         c = c * 8 + *(++ptr) - CHAR_0;
        !           901:     if (!utf8 && c > 255) *errorcodeptr = ERR51;
        !           902:     break;
        !           903: 
        !           904:     /* \x is complicated. \x{ddd} is a character number which can be greater
        !           905:     than 0xff in utf8 mode, but only if the ddd are hex digits. If not, { is
        !           906:     treated as a data character. */
        !           907: 
        !           908:     case CHAR_x:
        !           909:     if ((options & PCRE_JAVASCRIPT_COMPAT) != 0)
        !           910:       {
        !           911:       /* In JavaScript, \x must be followed by two hexadecimal numbers.
        !           912:       Otherwise it is a lowercase x letter. */
        !           913:       if ((digitab[ptr[1]] & ctype_xdigit) != 0 && (digitab[ptr[2]] & ctype_xdigit) != 0)
        !           914:         {
        !           915:         c = 0;
        !           916:         for (i = 0; i < 2; ++i)
        !           917:           {
        !           918:           register int cc = *(++ptr);
        !           919: #ifndef EBCDIC  /* ASCII/UTF-8 coding */
        !           920:           if (cc >= CHAR_a) cc -= 32;               /* Convert to upper case */
        !           921:           c = (c << 4) + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
        !           922: #else           /* EBCDIC coding */
        !           923:           if (cc >= CHAR_a && cc <= CHAR_z) cc += 64;  /* Convert to upper case */
        !           924:           c = (c << 4) + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
        !           925: #endif
        !           926:           }
        !           927:         }
        !           928:       break;
        !           929:       }
        !           930: 
        !           931:     if (ptr[1] == CHAR_LEFT_CURLY_BRACKET)
        !           932:       {
        !           933:       const uschar *pt = ptr + 2;
        !           934:       int count = 0;
        !           935: 
        !           936:       c = 0;
        !           937:       while ((digitab[*pt] & ctype_xdigit) != 0)
        !           938:         {
        !           939:         register int cc = *pt++;
        !           940:         if (c == 0 && cc == CHAR_0) continue;     /* Leading zeroes */
        !           941:         count++;
        !           942: 
        !           943: #ifndef EBCDIC  /* ASCII/UTF-8 coding */
        !           944:         if (cc >= CHAR_a) cc -= 32;               /* Convert to upper case */
        !           945:         c = (c << 4) + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
        !           946: #else           /* EBCDIC coding */
        !           947:         if (cc >= CHAR_a && cc <= CHAR_z) cc += 64;  /* Convert to upper case */
        !           948:         c = (c << 4) + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
        !           949: #endif
        !           950:         }
        !           951: 
        !           952:       if (*pt == CHAR_RIGHT_CURLY_BRACKET)
        !           953:         {
        !           954:         if (c < 0 || count > (utf8? 8 : 2)) *errorcodeptr = ERR34;
        !           955:         ptr = pt;
        !           956:         break;
        !           957:         }
        !           958: 
        !           959:       /* If the sequence of hex digits does not end with '}', then we don't
        !           960:       recognize this construct; fall through to the normal \x handling. */
        !           961:       }
        !           962: 
        !           963:     /* Read just a single-byte hex-defined char */
        !           964: 
        !           965:     c = 0;
        !           966:     while (i++ < 2 && (digitab[ptr[1]] & ctype_xdigit) != 0)
        !           967:       {
        !           968:       int cc;                                  /* Some compilers don't like */
        !           969:       cc = *(++ptr);                           /* ++ in initializers */
        !           970: #ifndef EBCDIC  /* ASCII/UTF-8 coding */
        !           971:       if (cc >= CHAR_a) cc -= 32;              /* Convert to upper case */
        !           972:       c = c * 16 + cc - ((cc < CHAR_A)? CHAR_0 : (CHAR_A - 10));
        !           973: #else           /* EBCDIC coding */
        !           974:       if (cc <= CHAR_z) cc += 64;              /* Convert to upper case */
        !           975:       c = c * 16 + cc - ((cc >= CHAR_0)? CHAR_0 : (CHAR_A - 10));
        !           976: #endif
        !           977:       }
        !           978:     break;
        !           979: 
        !           980:     /* For \c, a following letter is upper-cased; then the 0x40 bit is flipped.
        !           981:     An error is given if the byte following \c is not an ASCII character. This
        !           982:     coding is ASCII-specific, but then the whole concept of \cx is
        !           983:     ASCII-specific. (However, an EBCDIC equivalent has now been added.) */
        !           984: 
        !           985:     case CHAR_c:
        !           986:     c = *(++ptr);
        !           987:     if (c == 0)
        !           988:       {
        !           989:       *errorcodeptr = ERR2;
        !           990:       break;
        !           991:       }
        !           992: #ifndef EBCDIC    /* ASCII/UTF-8 coding */
        !           993:     if (c > 127)  /* Excludes all non-ASCII in either mode */
        !           994:       {
        !           995:       *errorcodeptr = ERR68;
        !           996:       break;
        !           997:       }
        !           998:     if (c >= CHAR_a && c <= CHAR_z) c -= 32;
        !           999:     c ^= 0x40;
        !          1000: #else             /* EBCDIC coding */
        !          1001:     if (c >= CHAR_a && c <= CHAR_z) c += 64;
        !          1002:     c ^= 0xC0;
        !          1003: #endif
        !          1004:     break;
        !          1005: 
        !          1006:     /* PCRE_EXTRA enables extensions to Perl in the matter of escapes. Any
        !          1007:     other alphanumeric following \ is an error if PCRE_EXTRA was set;
        !          1008:     otherwise, for Perl compatibility, it is a literal. This code looks a bit
        !          1009:     odd, but there used to be some cases other than the default, and there may
        !          1010:     be again in future, so I haven't "optimized" it. */
        !          1011: 
        !          1012:     default:
        !          1013:     if ((options & PCRE_EXTRA) != 0) switch(c)
        !          1014:       {
        !          1015:       default:
        !          1016:       *errorcodeptr = ERR3;
        !          1017:       break;
        !          1018:       }
        !          1019:     break;
        !          1020:     }
        !          1021:   }
        !          1022: 
        !          1023: /* Perl supports \N{name} for character names, as well as plain \N for "not
        !          1024: newline". PCRE does not support \N{name}. However, it does support
        !          1025: quantification such as \N{2,3}. */
        !          1026: 
        !          1027: if (c == -ESC_N && ptr[1] == CHAR_LEFT_CURLY_BRACKET &&
        !          1028:      !is_counted_repeat(ptr+2))
        !          1029:   *errorcodeptr = ERR37;
        !          1030: 
        !          1031: /* If PCRE_UCP is set, we change the values for \d etc. */
        !          1032: 
        !          1033: if ((options & PCRE_UCP) != 0 && c <= -ESC_D && c >= -ESC_w)
        !          1034:   c -= (ESC_DU - ESC_D);
        !          1035: 
        !          1036: /* Set the pointer to the final character before returning. */
        !          1037: 
        !          1038: *ptrptr = ptr;
        !          1039: return c;
        !          1040: }
        !          1041: 
        !          1042: 
        !          1043: 
        !          1044: #ifdef SUPPORT_UCP
        !          1045: /*************************************************
        !          1046: *               Handle \P and \p                 *
        !          1047: *************************************************/
        !          1048: 
        !          1049: /* This function is called after \P or \p has been encountered, provided that
        !          1050: PCRE is compiled with support for Unicode properties. On entry, ptrptr is
        !          1051: pointing at the P or p. On exit, it is pointing at the final character of the
        !          1052: escape sequence.
        !          1053: 
        !          1054: Argument:
        !          1055:   ptrptr         points to the pattern position pointer
        !          1056:   negptr         points to a boolean that is set TRUE for negation else FALSE
        !          1057:   dptr           points to an int that is set to the detailed property value
        !          1058:   errorcodeptr   points to the error code variable
        !          1059: 
        !          1060: Returns:         type value from ucp_type_table, or -1 for an invalid type
        !          1061: */
        !          1062: 
        !          1063: static int
        !          1064: get_ucp(const uschar **ptrptr, BOOL *negptr, int *dptr, int *errorcodeptr)
        !          1065: {
        !          1066: int c, i, bot, top;
        !          1067: const uschar *ptr = *ptrptr;
        !          1068: char name[32];
        !          1069: 
        !          1070: c = *(++ptr);
        !          1071: if (c == 0) goto ERROR_RETURN;
        !          1072: 
        !          1073: *negptr = FALSE;
        !          1074: 
        !          1075: /* \P or \p can be followed by a name in {}, optionally preceded by ^ for
        !          1076: negation. */
        !          1077: 
        !          1078: if (c == CHAR_LEFT_CURLY_BRACKET)
        !          1079:   {
        !          1080:   if (ptr[1] == CHAR_CIRCUMFLEX_ACCENT)
        !          1081:     {
        !          1082:     *negptr = TRUE;
        !          1083:     ptr++;
        !          1084:     }
        !          1085:   for (i = 0; i < (int)sizeof(name) - 1; i++)
        !          1086:     {
        !          1087:     c = *(++ptr);
        !          1088:     if (c == 0) goto ERROR_RETURN;
        !          1089:     if (c == CHAR_RIGHT_CURLY_BRACKET) break;
        !          1090:     name[i] = c;
        !          1091:     }
        !          1092:   if (c != CHAR_RIGHT_CURLY_BRACKET) goto ERROR_RETURN;
        !          1093:   name[i] = 0;
        !          1094:   }
        !          1095: 
        !          1096: /* Otherwise there is just one following character */
        !          1097: 
        !          1098: else
        !          1099:   {
        !          1100:   name[0] = c;
        !          1101:   name[1] = 0;
        !          1102:   }
        !          1103: 
        !          1104: *ptrptr = ptr;
        !          1105: 
        !          1106: /* Search for a recognized property name using binary chop */
        !          1107: 
        !          1108: bot = 0;
        !          1109: top = _pcre_utt_size;
        !          1110: 
        !          1111: while (bot < top)
        !          1112:   {
        !          1113:   i = (bot + top) >> 1;
        !          1114:   c = strcmp(name, _pcre_utt_names + _pcre_utt[i].name_offset);
        !          1115:   if (c == 0)
        !          1116:     {
        !          1117:     *dptr = _pcre_utt[i].value;
        !          1118:     return _pcre_utt[i].type;
        !          1119:     }
        !          1120:   if (c > 0) bot = i + 1; else top = i;
        !          1121:   }
        !          1122: 
        !          1123: *errorcodeptr = ERR47;
        !          1124: *ptrptr = ptr;
        !          1125: return -1;
        !          1126: 
        !          1127: ERROR_RETURN:
        !          1128: *errorcodeptr = ERR46;
        !          1129: *ptrptr = ptr;
        !          1130: return -1;
        !          1131: }
        !          1132: #endif
        !          1133: 
        !          1134: 
        !          1135: 
        !          1136: 
        !          1137: /*************************************************
        !          1138: *         Read repeat counts                     *
        !          1139: *************************************************/
        !          1140: 
        !          1141: /* Read an item of the form {n,m} and return the values. This is called only
        !          1142: after is_counted_repeat() has confirmed that a repeat-count quantifier exists,
        !          1143: so the syntax is guaranteed to be correct, but we need to check the values.
        !          1144: 
        !          1145: Arguments:
        !          1146:   p              pointer to first char after '{'
        !          1147:   minp           pointer to int for min
        !          1148:   maxp           pointer to int for max
        !          1149:                  returned as -1 if no max
        !          1150:   errorcodeptr   points to error code variable
        !          1151: 
        !          1152: Returns:         pointer to '}' on success;
        !          1153:                  current ptr on error, with errorcodeptr set non-zero
        !          1154: */
        !          1155: 
        !          1156: static const uschar *
        !          1157: read_repeat_counts(const uschar *p, int *minp, int *maxp, int *errorcodeptr)
        !          1158: {
        !          1159: int min = 0;
        !          1160: int max = -1;
        !          1161: 
        !          1162: /* Read the minimum value and do a paranoid check: a negative value indicates
        !          1163: an integer overflow. */
        !          1164: 
        !          1165: while ((digitab[*p] & ctype_digit) != 0) min = min * 10 + *p++ - CHAR_0;
        !          1166: if (min < 0 || min > 65535)
        !          1167:   {
        !          1168:   *errorcodeptr = ERR5;
        !          1169:   return p;
        !          1170:   }
        !          1171: 
        !          1172: /* Read the maximum value if there is one, and again do a paranoid on its size.
        !          1173: Also, max must not be less than min. */
        !          1174: 
        !          1175: if (*p == CHAR_RIGHT_CURLY_BRACKET) max = min; else
        !          1176:   {
        !          1177:   if (*(++p) != CHAR_RIGHT_CURLY_BRACKET)
        !          1178:     {
        !          1179:     max = 0;
        !          1180:     while((digitab[*p] & ctype_digit) != 0) max = max * 10 + *p++ - CHAR_0;
        !          1181:     if (max < 0 || max > 65535)
        !          1182:       {
        !          1183:       *errorcodeptr = ERR5;
        !          1184:       return p;
        !          1185:       }
        !          1186:     if (max < min)
        !          1187:       {
        !          1188:       *errorcodeptr = ERR4;
        !          1189:       return p;
        !          1190:       }
        !          1191:     }
        !          1192:   }
        !          1193: 
        !          1194: /* Fill in the required variables, and pass back the pointer to the terminating
        !          1195: '}'. */
        !          1196: 
        !          1197: *minp = min;
        !          1198: *maxp = max;
        !          1199: return p;
        !          1200: }
        !          1201: 
        !          1202: 
        !          1203: 
        !          1204: /*************************************************
        !          1205: *  Subroutine for finding forward reference      *
        !          1206: *************************************************/
        !          1207: 
        !          1208: /* This recursive function is called only from find_parens() below. The
        !          1209: top-level call starts at the beginning of the pattern. All other calls must
        !          1210: start at a parenthesis. It scans along a pattern's text looking for capturing
        !          1211: subpatterns, and counting them. If it finds a named pattern that matches the
        !          1212: name it is given, it returns its number. Alternatively, if the name is NULL, it
        !          1213: returns when it reaches a given numbered subpattern. Recursion is used to keep
        !          1214: track of subpatterns that reset the capturing group numbers - the (?| feature.
        !          1215: 
        !          1216: This function was originally called only from the second pass, in which we know
        !          1217: that if (?< or (?' or (?P< is encountered, the name will be correctly
        !          1218: terminated because that is checked in the first pass. There is now one call to
        !          1219: this function in the first pass, to check for a recursive back reference by
        !          1220: name (so that we can make the whole group atomic). In this case, we need check
        !          1221: only up to the current position in the pattern, and that is still OK because
        !          1222: and previous occurrences will have been checked. To make this work, the test
        !          1223: for "end of pattern" is a check against cd->end_pattern in the main loop,
        !          1224: instead of looking for a binary zero. This means that the special first-pass
        !          1225: call can adjust cd->end_pattern temporarily. (Checks for binary zero while
        !          1226: processing items within the loop are OK, because afterwards the main loop will
        !          1227: terminate.)
        !          1228: 
        !          1229: Arguments:
        !          1230:   ptrptr       address of the current character pointer (updated)
        !          1231:   cd           compile background data
        !          1232:   name         name to seek, or NULL if seeking a numbered subpattern
        !          1233:   lorn         name length, or subpattern number if name is NULL
        !          1234:   xmode        TRUE if we are in /x mode
        !          1235:   utf8         TRUE if we are in UTF-8 mode
        !          1236:   count        pointer to the current capturing subpattern number (updated)
        !          1237: 
        !          1238: Returns:       the number of the named subpattern, or -1 if not found
        !          1239: */
        !          1240: 
        !          1241: static int
        !          1242: find_parens_sub(uschar **ptrptr, compile_data *cd, const uschar *name, int lorn,
        !          1243:   BOOL xmode, BOOL utf8, int *count)
        !          1244: {
        !          1245: uschar *ptr = *ptrptr;
        !          1246: int start_count = *count;
        !          1247: int hwm_count = start_count;
        !          1248: BOOL dup_parens = FALSE;
        !          1249: 
        !          1250: /* If the first character is a parenthesis, check on the type of group we are
        !          1251: dealing with. The very first call may not start with a parenthesis. */
        !          1252: 
        !          1253: if (ptr[0] == CHAR_LEFT_PARENTHESIS)
        !          1254:   {
        !          1255:   /* Handle specials such as (*SKIP) or (*UTF8) etc. */
        !          1256: 
        !          1257:   if (ptr[1] == CHAR_ASTERISK) ptr += 2;
        !          1258: 
        !          1259:   /* Handle a normal, unnamed capturing parenthesis. */
        !          1260: 
        !          1261:   else if (ptr[1] != CHAR_QUESTION_MARK)
        !          1262:     {
        !          1263:     *count += 1;
        !          1264:     if (name == NULL && *count == lorn) return *count;
        !          1265:     ptr++;
        !          1266:     }
        !          1267: 
        !          1268:   /* All cases now have (? at the start. Remember when we are in a group
        !          1269:   where the parenthesis numbers are duplicated. */
        !          1270: 
        !          1271:   else if (ptr[2] == CHAR_VERTICAL_LINE)
        !          1272:     {
        !          1273:     ptr += 3;
        !          1274:     dup_parens = TRUE;
        !          1275:     }
        !          1276: 
        !          1277:   /* Handle comments; all characters are allowed until a ket is reached. */
        !          1278: 
        !          1279:   else if (ptr[2] == CHAR_NUMBER_SIGN)
        !          1280:     {
        !          1281:     for (ptr += 3; *ptr != 0; ptr++) if (*ptr == CHAR_RIGHT_PARENTHESIS) break;
        !          1282:     goto FAIL_EXIT;
        !          1283:     }
        !          1284: 
        !          1285:   /* Handle a condition. If it is an assertion, just carry on so that it
        !          1286:   is processed as normal. If not, skip to the closing parenthesis of the
        !          1287:   condition (there can't be any nested parens). */
        !          1288: 
        !          1289:   else if (ptr[2] == CHAR_LEFT_PARENTHESIS)
        !          1290:     {
        !          1291:     ptr += 2;
        !          1292:     if (ptr[1] != CHAR_QUESTION_MARK)
        !          1293:       {
        !          1294:       while (*ptr != 0 && *ptr != CHAR_RIGHT_PARENTHESIS) ptr++;
        !          1295:       if (*ptr != 0) ptr++;
        !          1296:       }
        !          1297:     }
        !          1298: 
        !          1299:   /* Start with (? but not a condition. */
        !          1300: 
        !          1301:   else
        !          1302:     {
        !          1303:     ptr += 2;
        !          1304:     if (*ptr == CHAR_P) ptr++;                      /* Allow optional P */
        !          1305: 
        !          1306:     /* We have to disambiguate (?<! and (?<= from (?<name> for named groups */
        !          1307: 
        !          1308:     if ((*ptr == CHAR_LESS_THAN_SIGN && ptr[1] != CHAR_EXCLAMATION_MARK &&
        !          1309:         ptr[1] != CHAR_EQUALS_SIGN) || *ptr == CHAR_APOSTROPHE)
        !          1310:       {
        !          1311:       int term;
        !          1312:       const uschar *thisname;
        !          1313:       *count += 1;
        !          1314:       if (name == NULL && *count == lorn) return *count;
        !          1315:       term = *ptr++;
        !          1316:       if (term == CHAR_LESS_THAN_SIGN) term = CHAR_GREATER_THAN_SIGN;
        !          1317:       thisname = ptr;
        !          1318:       while (*ptr != term) ptr++;
        !          1319:       if (name != NULL && lorn == ptr - thisname &&
        !          1320:           strncmp((const char *)name, (const char *)thisname, lorn) == 0)
        !          1321:         return *count;
        !          1322:       term++;
        !          1323:       }
        !          1324:     }
        !          1325:   }
        !          1326: 
        !          1327: /* Past any initial parenthesis handling, scan for parentheses or vertical
        !          1328: bars. Stop if we get to cd->end_pattern. Note that this is important for the
        !          1329: first-pass call when this value is temporarily adjusted to stop at the current
        !          1330: position. So DO NOT change this to a test for binary zero. */
        !          1331: 
        !          1332: for (; ptr < cd->end_pattern; ptr++)
        !          1333:   {
        !          1334:   /* Skip over backslashed characters and also entire \Q...\E */
        !          1335: 
        !          1336:   if (*ptr == CHAR_BACKSLASH)
        !          1337:     {
        !          1338:     if (*(++ptr) == 0) goto FAIL_EXIT;
        !          1339:     if (*ptr == CHAR_Q) for (;;)
        !          1340:       {
        !          1341:       while (*(++ptr) != 0 && *ptr != CHAR_BACKSLASH) {};
        !          1342:       if (*ptr == 0) goto FAIL_EXIT;
        !          1343:       if (*(++ptr) == CHAR_E) break;
        !          1344:       }
        !          1345:     continue;
        !          1346:     }
        !          1347: 
        !          1348:   /* Skip over character classes; this logic must be similar to the way they
        !          1349:   are handled for real. If the first character is '^', skip it. Also, if the
        !          1350:   first few characters (either before or after ^) are \Q\E or \E we skip them
        !          1351:   too. This makes for compatibility with Perl. Note the use of STR macros to
        !          1352:   encode "Q\\E" so that it works in UTF-8 on EBCDIC platforms. */
        !          1353: 
        !          1354:   if (*ptr == CHAR_LEFT_SQUARE_BRACKET)
        !          1355:     {
        !          1356:     BOOL negate_class = FALSE;
        !          1357:     for (;;)
        !          1358:       {
        !          1359:       if (ptr[1] == CHAR_BACKSLASH)
        !          1360:         {
        !          1361:         if (ptr[2] == CHAR_E)
        !          1362:           ptr+= 2;
        !          1363:         else if (strncmp((const char *)ptr+2,
        !          1364:                  STR_Q STR_BACKSLASH STR_E, 3) == 0)
        !          1365:           ptr += 4;
        !          1366:         else
        !          1367:           break;
        !          1368:         }
        !          1369:       else if (!negate_class && ptr[1] == CHAR_CIRCUMFLEX_ACCENT)
        !          1370:         {
        !          1371:         negate_class = TRUE;
        !          1372:         ptr++;
        !          1373:         }
        !          1374:       else break;
        !          1375:       }
        !          1376: 
        !          1377:     /* If the next character is ']', it is a data character that must be
        !          1378:     skipped, except in JavaScript compatibility mode. */
        !          1379: 
        !          1380:     if (ptr[1] == CHAR_RIGHT_SQUARE_BRACKET &&
        !          1381:         (cd->external_options & PCRE_JAVASCRIPT_COMPAT) == 0)
        !          1382:       ptr++;
        !          1383: 
        !          1384:     while (*(++ptr) != CHAR_RIGHT_SQUARE_BRACKET)
        !          1385:       {
        !          1386:       if (*ptr == 0) return -1;
        !          1387:       if (*ptr == CHAR_BACKSLASH)
        !          1388:         {
        !          1389:         if (*(++ptr) == 0) goto FAIL_EXIT;
        !          1390:         if (*ptr == CHAR_Q) for (;;)
        !          1391:           {
        !          1392:           while (*(++ptr) != 0 && *ptr != CHAR_BACKSLASH) {};
        !          1393:           if (*ptr == 0) goto FAIL_EXIT;
        !          1394:           if (*(++ptr) == CHAR_E) break;
        !          1395:           }
        !          1396:         continue;
        !          1397:         }
        !          1398:       }
        !          1399:     continue;
        !          1400:     }
        !          1401: 
        !          1402:   /* Skip comments in /x mode */
        !          1403: 
        !          1404:   if (xmode && *ptr == CHAR_NUMBER_SIGN)
        !          1405:     {
        !          1406:     ptr++;
        !          1407:     while (*ptr != 0)
        !          1408:       {
        !          1409:       if (IS_NEWLINE(ptr)) { ptr += cd->nllen - 1; break; }
        !          1410:       ptr++;
        !          1411: #ifdef SUPPORT_UTF8
        !          1412:       if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
        !          1413: #endif
        !          1414:       }
        !          1415:     if (*ptr == 0) goto FAIL_EXIT;
        !          1416:     continue;
        !          1417:     }
        !          1418: 
        !          1419:   /* Check for the special metacharacters */
        !          1420: 
        !          1421:   if (*ptr == CHAR_LEFT_PARENTHESIS)
        !          1422:     {
        !          1423:     int rc = find_parens_sub(&ptr, cd, name, lorn, xmode, utf8, count);
        !          1424:     if (rc > 0) return rc;
        !          1425:     if (*ptr == 0) goto FAIL_EXIT;
        !          1426:     }
        !          1427: 
        !          1428:   else if (*ptr == CHAR_RIGHT_PARENTHESIS)
        !          1429:     {
        !          1430:     if (dup_parens && *count < hwm_count) *count = hwm_count;
        !          1431:     goto FAIL_EXIT;
        !          1432:     }
        !          1433: 
        !          1434:   else if (*ptr == CHAR_VERTICAL_LINE && dup_parens)
        !          1435:     {
        !          1436:     if (*count > hwm_count) hwm_count = *count;
        !          1437:     *count = start_count;
        !          1438:     }
        !          1439:   }
        !          1440: 
        !          1441: FAIL_EXIT:
        !          1442: *ptrptr = ptr;
        !          1443: return -1;
        !          1444: }
        !          1445: 
        !          1446: 
        !          1447: 
        !          1448: 
        !          1449: /*************************************************
        !          1450: *       Find forward referenced subpattern       *
        !          1451: *************************************************/
        !          1452: 
        !          1453: /* This function scans along a pattern's text looking for capturing
        !          1454: subpatterns, and counting them. If it finds a named pattern that matches the
        !          1455: name it is given, it returns its number. Alternatively, if the name is NULL, it
        !          1456: returns when it reaches a given numbered subpattern. This is used for forward
        !          1457: references to subpatterns. We used to be able to start this scan from the
        !          1458: current compiling point, using the current count value from cd->bracount, and
        !          1459: do it all in a single loop, but the addition of the possibility of duplicate
        !          1460: subpattern numbers means that we have to scan from the very start, in order to
        !          1461: take account of such duplicates, and to use a recursive function to keep track
        !          1462: of the different types of group.
        !          1463: 
        !          1464: Arguments:
        !          1465:   cd           compile background data
        !          1466:   name         name to seek, or NULL if seeking a numbered subpattern
        !          1467:   lorn         name length, or subpattern number if name is NULL
        !          1468:   xmode        TRUE if we are in /x mode
        !          1469:   utf8         TRUE if we are in UTF-8 mode
        !          1470: 
        !          1471: Returns:       the number of the found subpattern, or -1 if not found
        !          1472: */
        !          1473: 
        !          1474: static int
        !          1475: find_parens(compile_data *cd, const uschar *name, int lorn, BOOL xmode,
        !          1476:   BOOL utf8)
        !          1477: {
        !          1478: uschar *ptr = (uschar *)cd->start_pattern;
        !          1479: int count = 0;
        !          1480: int rc;
        !          1481: 
        !          1482: /* If the pattern does not start with an opening parenthesis, the first call
        !          1483: to find_parens_sub() will scan right to the end (if necessary). However, if it
        !          1484: does start with a parenthesis, find_parens_sub() will return when it hits the
        !          1485: matching closing parens. That is why we have to have a loop. */
        !          1486: 
        !          1487: for (;;)
        !          1488:   {
        !          1489:   rc = find_parens_sub(&ptr, cd, name, lorn, xmode, utf8, &count);
        !          1490:   if (rc > 0 || *ptr++ == 0) break;
        !          1491:   }
        !          1492: 
        !          1493: return rc;
        !          1494: }
        !          1495: 
        !          1496: 
        !          1497: 
        !          1498: 
        !          1499: /*************************************************
        !          1500: *      Find first significant op code            *
        !          1501: *************************************************/
        !          1502: 
        !          1503: /* This is called by several functions that scan a compiled expression looking
        !          1504: for a fixed first character, or an anchoring op code etc. It skips over things
        !          1505: that do not influence this. For some calls, it makes sense to skip negative
        !          1506: forward and all backward assertions, and also the \b assertion; for others it
        !          1507: does not.
        !          1508: 
        !          1509: Arguments:
        !          1510:   code         pointer to the start of the group
        !          1511:   skipassert   TRUE if certain assertions are to be skipped
        !          1512: 
        !          1513: Returns:       pointer to the first significant opcode
        !          1514: */
        !          1515: 
        !          1516: static const uschar*
        !          1517: first_significant_code(const uschar *code, BOOL skipassert)
        !          1518: {
        !          1519: for (;;)
        !          1520:   {
        !          1521:   switch ((int)*code)
        !          1522:     {
        !          1523:     case OP_ASSERT_NOT:
        !          1524:     case OP_ASSERTBACK:
        !          1525:     case OP_ASSERTBACK_NOT:
        !          1526:     if (!skipassert) return code;
        !          1527:     do code += GET(code, 1); while (*code == OP_ALT);
        !          1528:     code += _pcre_OP_lengths[*code];
        !          1529:     break;
        !          1530: 
        !          1531:     case OP_WORD_BOUNDARY:
        !          1532:     case OP_NOT_WORD_BOUNDARY:
        !          1533:     if (!skipassert) return code;
        !          1534:     /* Fall through */
        !          1535: 
        !          1536:     case OP_CALLOUT:
        !          1537:     case OP_CREF:
        !          1538:     case OP_NCREF:
        !          1539:     case OP_RREF:
        !          1540:     case OP_NRREF:
        !          1541:     case OP_DEF:
        !          1542:     code += _pcre_OP_lengths[*code];
        !          1543:     break;
        !          1544: 
        !          1545:     default:
        !          1546:     return code;
        !          1547:     }
        !          1548:   }
        !          1549: /* Control never reaches here */
        !          1550: }
        !          1551: 
        !          1552: 
        !          1553: 
        !          1554: 
        !          1555: /*************************************************
        !          1556: *        Find the fixed length of a branch       *
        !          1557: *************************************************/
        !          1558: 
        !          1559: /* Scan a branch and compute the fixed length of subject that will match it,
        !          1560: if the length is fixed. This is needed for dealing with backward assertions.
        !          1561: In UTF8 mode, the result is in characters rather than bytes. The branch is
        !          1562: temporarily terminated with OP_END when this function is called.
        !          1563: 
        !          1564: This function is called when a backward assertion is encountered, so that if it
        !          1565: fails, the error message can point to the correct place in the pattern.
        !          1566: However, we cannot do this when the assertion contains subroutine calls,
        !          1567: because they can be forward references. We solve this by remembering this case
        !          1568: and doing the check at the end; a flag specifies which mode we are running in.
        !          1569: 
        !          1570: Arguments:
        !          1571:   code     points to the start of the pattern (the bracket)
        !          1572:   utf8     TRUE in UTF-8 mode
        !          1573:   atend    TRUE if called when the pattern is complete
        !          1574:   cd       the "compile data" structure
        !          1575: 
        !          1576: Returns:   the fixed length,
        !          1577:              or -1 if there is no fixed length,
        !          1578:              or -2 if \C was encountered (in UTF-8 mode only)
        !          1579:              or -3 if an OP_RECURSE item was encountered and atend is FALSE
        !          1580:              or -4 if an unknown opcode was encountered (internal error)
        !          1581: */
        !          1582: 
        !          1583: static int
        !          1584: find_fixedlength(uschar *code, BOOL utf8, BOOL atend, compile_data *cd)
        !          1585: {
        !          1586: int length = -1;
        !          1587: 
        !          1588: register int branchlength = 0;
        !          1589: register uschar *cc = code + 1 + LINK_SIZE;
        !          1590: 
        !          1591: /* Scan along the opcodes for this branch. If we get to the end of the
        !          1592: branch, check the length against that of the other branches. */
        !          1593: 
        !          1594: for (;;)
        !          1595:   {
        !          1596:   int d;
        !          1597:   uschar *ce, *cs;
        !          1598:   register int op = *cc;
        !          1599:   switch (op)
        !          1600:     {
        !          1601:     /* We only need to continue for OP_CBRA (normal capturing bracket) and
        !          1602:     OP_BRA (normal non-capturing bracket) because the other variants of these
        !          1603:     opcodes are all concerned with unlimited repeated groups, which of course
        !          1604:     are not of fixed length. */
        !          1605: 
        !          1606:     case OP_CBRA:
        !          1607:     case OP_BRA:
        !          1608:     case OP_ONCE:
        !          1609:     case OP_ONCE_NC:
        !          1610:     case OP_COND:
        !          1611:     d = find_fixedlength(cc + ((op == OP_CBRA)? 2:0), utf8, atend, cd);
        !          1612:     if (d < 0) return d;
        !          1613:     branchlength += d;
        !          1614:     do cc += GET(cc, 1); while (*cc == OP_ALT);
        !          1615:     cc += 1 + LINK_SIZE;
        !          1616:     break;
        !          1617: 
        !          1618:     /* Reached end of a branch; if it's a ket it is the end of a nested call.
        !          1619:     If it's ALT it is an alternation in a nested call. An ACCEPT is effectively
        !          1620:     an ALT. If it is END it's the end of the outer call. All can be handled by
        !          1621:     the same code. Note that we must not include the OP_KETRxxx opcodes here,
        !          1622:     because they all imply an unlimited repeat. */
        !          1623: 
        !          1624:     case OP_ALT:
        !          1625:     case OP_KET:
        !          1626:     case OP_END:
        !          1627:     case OP_ACCEPT:
        !          1628:     case OP_ASSERT_ACCEPT:
        !          1629:     if (length < 0) length = branchlength;
        !          1630:       else if (length != branchlength) return -1;
        !          1631:     if (*cc != OP_ALT) return length;
        !          1632:     cc += 1 + LINK_SIZE;
        !          1633:     branchlength = 0;
        !          1634:     break;
        !          1635: 
        !          1636:     /* A true recursion implies not fixed length, but a subroutine call may
        !          1637:     be OK. If the subroutine is a forward reference, we can't deal with
        !          1638:     it until the end of the pattern, so return -3. */
        !          1639: 
        !          1640:     case OP_RECURSE:
        !          1641:     if (!atend) return -3;
        !          1642:     cs = ce = (uschar *)cd->start_code + GET(cc, 1);  /* Start subpattern */
        !          1643:     do ce += GET(ce, 1); while (*ce == OP_ALT);       /* End subpattern */
        !          1644:     if (cc > cs && cc < ce) return -1;                /* Recursion */
        !          1645:     d = find_fixedlength(cs + 2, utf8, atend, cd);
        !          1646:     if (d < 0) return d;
        !          1647:     branchlength += d;
        !          1648:     cc += 1 + LINK_SIZE;
        !          1649:     break;
        !          1650: 
        !          1651:     /* Skip over assertive subpatterns */
        !          1652: 
        !          1653:     case OP_ASSERT:
        !          1654:     case OP_ASSERT_NOT:
        !          1655:     case OP_ASSERTBACK:
        !          1656:     case OP_ASSERTBACK_NOT:
        !          1657:     do cc += GET(cc, 1); while (*cc == OP_ALT);
        !          1658:     /* Fall through */
        !          1659: 
        !          1660:     /* Skip over things that don't match chars */
        !          1661: 
        !          1662:     case OP_MARK:
        !          1663:     case OP_PRUNE_ARG:
        !          1664:     case OP_SKIP_ARG:
        !          1665:     case OP_THEN_ARG:
        !          1666:     cc += cc[1] + _pcre_OP_lengths[*cc];
        !          1667:     break;
        !          1668: 
        !          1669:     case OP_CALLOUT:
        !          1670:     case OP_CIRC:
        !          1671:     case OP_CIRCM:
        !          1672:     case OP_CLOSE:
        !          1673:     case OP_COMMIT:
        !          1674:     case OP_CREF:
        !          1675:     case OP_DEF:
        !          1676:     case OP_DOLL:
        !          1677:     case OP_DOLLM:
        !          1678:     case OP_EOD:
        !          1679:     case OP_EODN:
        !          1680:     case OP_FAIL:
        !          1681:     case OP_NCREF:
        !          1682:     case OP_NRREF:
        !          1683:     case OP_NOT_WORD_BOUNDARY:
        !          1684:     case OP_PRUNE:
        !          1685:     case OP_REVERSE:
        !          1686:     case OP_RREF:
        !          1687:     case OP_SET_SOM:
        !          1688:     case OP_SKIP:
        !          1689:     case OP_SOD:
        !          1690:     case OP_SOM:
        !          1691:     case OP_THEN:
        !          1692:     case OP_WORD_BOUNDARY:
        !          1693:     cc += _pcre_OP_lengths[*cc];
        !          1694:     break;
        !          1695: 
        !          1696:     /* Handle literal characters */
        !          1697: 
        !          1698:     case OP_CHAR:
        !          1699:     case OP_CHARI:
        !          1700:     case OP_NOT:
        !          1701:     case OP_NOTI:
        !          1702:     branchlength++;
        !          1703:     cc += 2;
        !          1704: #ifdef SUPPORT_UTF8
        !          1705:     if (utf8 && cc[-1] >= 0xc0) cc += _pcre_utf8_table4[cc[-1] & 0x3f];
        !          1706: #endif
        !          1707:     break;
        !          1708: 
        !          1709:     /* Handle exact repetitions. The count is already in characters, but we
        !          1710:     need to skip over a multibyte character in UTF8 mode.  */
        !          1711: 
        !          1712:     case OP_EXACT:
        !          1713:     case OP_EXACTI:
        !          1714:     case OP_NOTEXACT:
        !          1715:     case OP_NOTEXACTI:
        !          1716:     branchlength += GET2(cc,1);
        !          1717:     cc += 4;
        !          1718: #ifdef SUPPORT_UTF8
        !          1719:     if (utf8 && cc[-1] >= 0xc0) cc += _pcre_utf8_table4[cc[-1] & 0x3f];
        !          1720: #endif
        !          1721:     break;
        !          1722: 
        !          1723:     case OP_TYPEEXACT:
        !          1724:     branchlength += GET2(cc,1);
        !          1725:     if (cc[3] == OP_PROP || cc[3] == OP_NOTPROP) cc += 2;
        !          1726:     cc += 4;
        !          1727:     break;
        !          1728: 
        !          1729:     /* Handle single-char matchers */
        !          1730: 
        !          1731:     case OP_PROP:
        !          1732:     case OP_NOTPROP:
        !          1733:     cc += 2;
        !          1734:     /* Fall through */
        !          1735: 
        !          1736:     case OP_HSPACE:
        !          1737:     case OP_VSPACE:
        !          1738:     case OP_NOT_HSPACE:
        !          1739:     case OP_NOT_VSPACE:
        !          1740:     case OP_NOT_DIGIT:
        !          1741:     case OP_DIGIT:
        !          1742:     case OP_NOT_WHITESPACE:
        !          1743:     case OP_WHITESPACE:
        !          1744:     case OP_NOT_WORDCHAR:
        !          1745:     case OP_WORDCHAR:
        !          1746:     case OP_ANY:
        !          1747:     case OP_ALLANY:
        !          1748:     branchlength++;
        !          1749:     cc++;
        !          1750:     break;
        !          1751: 
        !          1752:     /* The single-byte matcher isn't allowed. This only happens in UTF-8 mode;
        !          1753:     otherwise \C is coded as OP_ALLANY. */
        !          1754: 
        !          1755:     case OP_ANYBYTE:
        !          1756:     return -2;
        !          1757: 
        !          1758:     /* Check a class for variable quantification */
        !          1759: 
        !          1760: #ifdef SUPPORT_UTF8
        !          1761:     case OP_XCLASS:
        !          1762:     cc += GET(cc, 1) - 33;
        !          1763:     /* Fall through */
        !          1764: #endif
        !          1765: 
        !          1766:     case OP_CLASS:
        !          1767:     case OP_NCLASS:
        !          1768:     cc += 33;
        !          1769: 
        !          1770:     switch (*cc)
        !          1771:       {
        !          1772:       case OP_CRPLUS:
        !          1773:       case OP_CRMINPLUS:
        !          1774:       case OP_CRSTAR:
        !          1775:       case OP_CRMINSTAR:
        !          1776:       case OP_CRQUERY:
        !          1777:       case OP_CRMINQUERY:
        !          1778:       return -1;
        !          1779: 
        !          1780:       case OP_CRRANGE:
        !          1781:       case OP_CRMINRANGE:
        !          1782:       if (GET2(cc,1) != GET2(cc,3)) return -1;
        !          1783:       branchlength += GET2(cc,1);
        !          1784:       cc += 5;
        !          1785:       break;
        !          1786: 
        !          1787:       default:
        !          1788:       branchlength++;
        !          1789:       }
        !          1790:     break;
        !          1791: 
        !          1792:     /* Anything else is variable length */
        !          1793: 
        !          1794:     case OP_ANYNL:
        !          1795:     case OP_BRAMINZERO:
        !          1796:     case OP_BRAPOS:
        !          1797:     case OP_BRAPOSZERO:
        !          1798:     case OP_BRAZERO:
        !          1799:     case OP_CBRAPOS:
        !          1800:     case OP_EXTUNI:
        !          1801:     case OP_KETRMAX:
        !          1802:     case OP_KETRMIN:
        !          1803:     case OP_KETRPOS:
        !          1804:     case OP_MINPLUS:
        !          1805:     case OP_MINPLUSI:
        !          1806:     case OP_MINQUERY:
        !          1807:     case OP_MINQUERYI:
        !          1808:     case OP_MINSTAR:
        !          1809:     case OP_MINSTARI:
        !          1810:     case OP_MINUPTO:
        !          1811:     case OP_MINUPTOI:
        !          1812:     case OP_NOTMINPLUS:
        !          1813:     case OP_NOTMINPLUSI:
        !          1814:     case OP_NOTMINQUERY:
        !          1815:     case OP_NOTMINQUERYI:
        !          1816:     case OP_NOTMINSTAR:
        !          1817:     case OP_NOTMINSTARI:
        !          1818:     case OP_NOTMINUPTO:
        !          1819:     case OP_NOTMINUPTOI:
        !          1820:     case OP_NOTPLUS:
        !          1821:     case OP_NOTPLUSI:
        !          1822:     case OP_NOTPOSPLUS:
        !          1823:     case OP_NOTPOSPLUSI:
        !          1824:     case OP_NOTPOSQUERY:
        !          1825:     case OP_NOTPOSQUERYI:
        !          1826:     case OP_NOTPOSSTAR:
        !          1827:     case OP_NOTPOSSTARI:
        !          1828:     case OP_NOTPOSUPTO:
        !          1829:     case OP_NOTPOSUPTOI:
        !          1830:     case OP_NOTQUERY:
        !          1831:     case OP_NOTQUERYI:
        !          1832:     case OP_NOTSTAR:
        !          1833:     case OP_NOTSTARI:
        !          1834:     case OP_NOTUPTO:
        !          1835:     case OP_NOTUPTOI:
        !          1836:     case OP_PLUS:
        !          1837:     case OP_PLUSI:
        !          1838:     case OP_POSPLUS:
        !          1839:     case OP_POSPLUSI:
        !          1840:     case OP_POSQUERY:
        !          1841:     case OP_POSQUERYI:
        !          1842:     case OP_POSSTAR:
        !          1843:     case OP_POSSTARI:
        !          1844:     case OP_POSUPTO:
        !          1845:     case OP_POSUPTOI:
        !          1846:     case OP_QUERY:
        !          1847:     case OP_QUERYI:
        !          1848:     case OP_REF:
        !          1849:     case OP_REFI:
        !          1850:     case OP_SBRA:
        !          1851:     case OP_SBRAPOS:
        !          1852:     case OP_SCBRA:
        !          1853:     case OP_SCBRAPOS:
        !          1854:     case OP_SCOND:
        !          1855:     case OP_SKIPZERO:
        !          1856:     case OP_STAR:
        !          1857:     case OP_STARI:
        !          1858:     case OP_TYPEMINPLUS:
        !          1859:     case OP_TYPEMINQUERY:
        !          1860:     case OP_TYPEMINSTAR:
        !          1861:     case OP_TYPEMINUPTO:
        !          1862:     case OP_TYPEPLUS:
        !          1863:     case OP_TYPEPOSPLUS:
        !          1864:     case OP_TYPEPOSQUERY:
        !          1865:     case OP_TYPEPOSSTAR:
        !          1866:     case OP_TYPEPOSUPTO:
        !          1867:     case OP_TYPEQUERY:
        !          1868:     case OP_TYPESTAR:
        !          1869:     case OP_TYPEUPTO:
        !          1870:     case OP_UPTO:
        !          1871:     case OP_UPTOI:
        !          1872:     return -1;
        !          1873: 
        !          1874:     /* Catch unrecognized opcodes so that when new ones are added they
        !          1875:     are not forgotten, as has happened in the past. */
        !          1876: 
        !          1877:     default:
        !          1878:     return -4;
        !          1879:     }
        !          1880:   }
        !          1881: /* Control never gets here */
        !          1882: }
        !          1883: 
        !          1884: 
        !          1885: 
        !          1886: 
        !          1887: /*************************************************
        !          1888: *    Scan compiled regex for specific bracket    *
        !          1889: *************************************************/
        !          1890: 
        !          1891: /* This little function scans through a compiled pattern until it finds a
        !          1892: capturing bracket with the given number, or, if the number is negative, an
        !          1893: instance of OP_REVERSE for a lookbehind. The function is global in the C sense
        !          1894: so that it can be called from pcre_study() when finding the minimum matching
        !          1895: length.
        !          1896: 
        !          1897: Arguments:
        !          1898:   code        points to start of expression
        !          1899:   utf8        TRUE in UTF-8 mode
        !          1900:   number      the required bracket number or negative to find a lookbehind
        !          1901: 
        !          1902: Returns:      pointer to the opcode for the bracket, or NULL if not found
        !          1903: */
        !          1904: 
        !          1905: const uschar *
        !          1906: _pcre_find_bracket(const uschar *code, BOOL utf8, int number)
        !          1907: {
        !          1908: for (;;)
        !          1909:   {
        !          1910:   register int c = *code;
        !          1911: 
        !          1912:   if (c == OP_END) return NULL;
        !          1913: 
        !          1914:   /* XCLASS is used for classes that cannot be represented just by a bit
        !          1915:   map. This includes negated single high-valued characters. The length in
        !          1916:   the table is zero; the actual length is stored in the compiled code. */
        !          1917: 
        !          1918:   if (c == OP_XCLASS) code += GET(code, 1);
        !          1919: 
        !          1920:   /* Handle recursion */
        !          1921: 
        !          1922:   else if (c == OP_REVERSE)
        !          1923:     {
        !          1924:     if (number < 0) return (uschar *)code;
        !          1925:     code += _pcre_OP_lengths[c];
        !          1926:     }
        !          1927: 
        !          1928:   /* Handle capturing bracket */
        !          1929: 
        !          1930:   else if (c == OP_CBRA || c == OP_SCBRA ||
        !          1931:            c == OP_CBRAPOS || c == OP_SCBRAPOS)
        !          1932:     {
        !          1933:     int n = GET2(code, 1+LINK_SIZE);
        !          1934:     if (n == number) return (uschar *)code;
        !          1935:     code += _pcre_OP_lengths[c];
        !          1936:     }
        !          1937: 
        !          1938:   /* Otherwise, we can get the item's length from the table, except that for
        !          1939:   repeated character types, we have to test for \p and \P, which have an extra
        !          1940:   two bytes of parameters, and for MARK/PRUNE/SKIP/THEN with an argument, we
        !          1941:   must add in its length. */
        !          1942: 
        !          1943:   else
        !          1944:     {
        !          1945:     switch(c)
        !          1946:       {
        !          1947:       case OP_TYPESTAR:
        !          1948:       case OP_TYPEMINSTAR:
        !          1949:       case OP_TYPEPLUS:
        !          1950:       case OP_TYPEMINPLUS:
        !          1951:       case OP_TYPEQUERY:
        !          1952:       case OP_TYPEMINQUERY:
        !          1953:       case OP_TYPEPOSSTAR:
        !          1954:       case OP_TYPEPOSPLUS:
        !          1955:       case OP_TYPEPOSQUERY:
        !          1956:       if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
        !          1957:       break;
        !          1958: 
        !          1959:       case OP_TYPEUPTO:
        !          1960:       case OP_TYPEMINUPTO:
        !          1961:       case OP_TYPEEXACT:
        !          1962:       case OP_TYPEPOSUPTO:
        !          1963:       if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
        !          1964:       break;
        !          1965: 
        !          1966:       case OP_MARK:
        !          1967:       case OP_PRUNE_ARG:
        !          1968:       case OP_SKIP_ARG:
        !          1969:       code += code[1];
        !          1970:       break;
        !          1971: 
        !          1972:       case OP_THEN_ARG:
        !          1973:       code += code[1];
        !          1974:       break;
        !          1975:       }
        !          1976: 
        !          1977:     /* Add in the fixed length from the table */
        !          1978: 
        !          1979:     code += _pcre_OP_lengths[c];
        !          1980: 
        !          1981:   /* In UTF-8 mode, opcodes that are followed by a character may be followed by
        !          1982:   a multi-byte character. The length in the table is a minimum, so we have to
        !          1983:   arrange to skip the extra bytes. */
        !          1984: 
        !          1985: #ifdef SUPPORT_UTF8
        !          1986:     if (utf8) switch(c)
        !          1987:       {
        !          1988:       case OP_CHAR:
        !          1989:       case OP_CHARI:
        !          1990:       case OP_EXACT:
        !          1991:       case OP_EXACTI:
        !          1992:       case OP_UPTO:
        !          1993:       case OP_UPTOI:
        !          1994:       case OP_MINUPTO:
        !          1995:       case OP_MINUPTOI:
        !          1996:       case OP_POSUPTO:
        !          1997:       case OP_POSUPTOI:
        !          1998:       case OP_STAR:
        !          1999:       case OP_STARI:
        !          2000:       case OP_MINSTAR:
        !          2001:       case OP_MINSTARI:
        !          2002:       case OP_POSSTAR:
        !          2003:       case OP_POSSTARI:
        !          2004:       case OP_PLUS:
        !          2005:       case OP_PLUSI:
        !          2006:       case OP_MINPLUS:
        !          2007:       case OP_MINPLUSI:
        !          2008:       case OP_POSPLUS:
        !          2009:       case OP_POSPLUSI:
        !          2010:       case OP_QUERY:
        !          2011:       case OP_QUERYI:
        !          2012:       case OP_MINQUERY:
        !          2013:       case OP_MINQUERYI:
        !          2014:       case OP_POSQUERY:
        !          2015:       case OP_POSQUERYI:
        !          2016:       if (code[-1] >= 0xc0) code += _pcre_utf8_table4[code[-1] & 0x3f];
        !          2017:       break;
        !          2018:       }
        !          2019: #else
        !          2020:     (void)(utf8);  /* Keep compiler happy by referencing function argument */
        !          2021: #endif
        !          2022:     }
        !          2023:   }
        !          2024: }
        !          2025: 
        !          2026: 
        !          2027: 
        !          2028: /*************************************************
        !          2029: *   Scan compiled regex for recursion reference  *
        !          2030: *************************************************/
        !          2031: 
        !          2032: /* This little function scans through a compiled pattern until it finds an
        !          2033: instance of OP_RECURSE.
        !          2034: 
        !          2035: Arguments:
        !          2036:   code        points to start of expression
        !          2037:   utf8        TRUE in UTF-8 mode
        !          2038: 
        !          2039: Returns:      pointer to the opcode for OP_RECURSE, or NULL if not found
        !          2040: */
        !          2041: 
        !          2042: static const uschar *
        !          2043: find_recurse(const uschar *code, BOOL utf8)
        !          2044: {
        !          2045: for (;;)
        !          2046:   {
        !          2047:   register int c = *code;
        !          2048:   if (c == OP_END) return NULL;
        !          2049:   if (c == OP_RECURSE) return code;
        !          2050: 
        !          2051:   /* XCLASS is used for classes that cannot be represented just by a bit
        !          2052:   map. This includes negated single high-valued characters. The length in
        !          2053:   the table is zero; the actual length is stored in the compiled code. */
        !          2054: 
        !          2055:   if (c == OP_XCLASS) code += GET(code, 1);
        !          2056: 
        !          2057:   /* Otherwise, we can get the item's length from the table, except that for
        !          2058:   repeated character types, we have to test for \p and \P, which have an extra
        !          2059:   two bytes of parameters, and for MARK/PRUNE/SKIP/THEN with an argument, we
        !          2060:   must add in its length. */
        !          2061: 
        !          2062:   else
        !          2063:     {
        !          2064:     switch(c)
        !          2065:       {
        !          2066:       case OP_TYPESTAR:
        !          2067:       case OP_TYPEMINSTAR:
        !          2068:       case OP_TYPEPLUS:
        !          2069:       case OP_TYPEMINPLUS:
        !          2070:       case OP_TYPEQUERY:
        !          2071:       case OP_TYPEMINQUERY:
        !          2072:       case OP_TYPEPOSSTAR:
        !          2073:       case OP_TYPEPOSPLUS:
        !          2074:       case OP_TYPEPOSQUERY:
        !          2075:       if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
        !          2076:       break;
        !          2077: 
        !          2078:       case OP_TYPEPOSUPTO:
        !          2079:       case OP_TYPEUPTO:
        !          2080:       case OP_TYPEMINUPTO:
        !          2081:       case OP_TYPEEXACT:
        !          2082:       if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
        !          2083:       break;
        !          2084: 
        !          2085:       case OP_MARK:
        !          2086:       case OP_PRUNE_ARG:
        !          2087:       case OP_SKIP_ARG:
        !          2088:       code += code[1];
        !          2089:       break;
        !          2090: 
        !          2091:       case OP_THEN_ARG:
        !          2092:       code += code[1];
        !          2093:       break;
        !          2094:       }
        !          2095: 
        !          2096:     /* Add in the fixed length from the table */
        !          2097: 
        !          2098:     code += _pcre_OP_lengths[c];
        !          2099: 
        !          2100:     /* In UTF-8 mode, opcodes that are followed by a character may be followed
        !          2101:     by a multi-byte character. The length in the table is a minimum, so we have
        !          2102:     to arrange to skip the extra bytes. */
        !          2103: 
        !          2104: #ifdef SUPPORT_UTF8
        !          2105:     if (utf8) switch(c)
        !          2106:       {
        !          2107:       case OP_CHAR:
        !          2108:       case OP_CHARI:
        !          2109:       case OP_EXACT:
        !          2110:       case OP_EXACTI:
        !          2111:       case OP_UPTO:
        !          2112:       case OP_UPTOI:
        !          2113:       case OP_MINUPTO:
        !          2114:       case OP_MINUPTOI:
        !          2115:       case OP_POSUPTO:
        !          2116:       case OP_POSUPTOI:
        !          2117:       case OP_STAR:
        !          2118:       case OP_STARI:
        !          2119:       case OP_MINSTAR:
        !          2120:       case OP_MINSTARI:
        !          2121:       case OP_POSSTAR:
        !          2122:       case OP_POSSTARI:
        !          2123:       case OP_PLUS:
        !          2124:       case OP_PLUSI:
        !          2125:       case OP_MINPLUS:
        !          2126:       case OP_MINPLUSI:
        !          2127:       case OP_POSPLUS:
        !          2128:       case OP_POSPLUSI:
        !          2129:       case OP_QUERY:
        !          2130:       case OP_QUERYI:
        !          2131:       case OP_MINQUERY:
        !          2132:       case OP_MINQUERYI:
        !          2133:       case OP_POSQUERY:
        !          2134:       case OP_POSQUERYI:
        !          2135:       if (code[-1] >= 0xc0) code += _pcre_utf8_table4[code[-1] & 0x3f];
        !          2136:       break;
        !          2137:       }
        !          2138: #else
        !          2139:     (void)(utf8);  /* Keep compiler happy by referencing function argument */
        !          2140: #endif
        !          2141:     }
        !          2142:   }
        !          2143: }
        !          2144: 
        !          2145: 
        !          2146: 
        !          2147: /*************************************************
        !          2148: *    Scan compiled branch for non-emptiness      *
        !          2149: *************************************************/
        !          2150: 
        !          2151: /* This function scans through a branch of a compiled pattern to see whether it
        !          2152: can match the empty string or not. It is called from could_be_empty()
        !          2153: below and from compile_branch() when checking for an unlimited repeat of a
        !          2154: group that can match nothing. Note that first_significant_code() skips over
        !          2155: backward and negative forward assertions when its final argument is TRUE. If we
        !          2156: hit an unclosed bracket, we return "empty" - this means we've struck an inner
        !          2157: bracket whose current branch will already have been scanned.
        !          2158: 
        !          2159: Arguments:
        !          2160:   code        points to start of search
        !          2161:   endcode     points to where to stop
        !          2162:   utf8        TRUE if in UTF8 mode
        !          2163:   cd          contains pointers to tables etc.
        !          2164: 
        !          2165: Returns:      TRUE if what is matched could be empty
        !          2166: */
        !          2167: 
        !          2168: static BOOL
        !          2169: could_be_empty_branch(const uschar *code, const uschar *endcode, BOOL utf8,
        !          2170:   compile_data *cd)
        !          2171: {
        !          2172: register int c;
        !          2173: for (code = first_significant_code(code + _pcre_OP_lengths[*code], TRUE);
        !          2174:      code < endcode;
        !          2175:      code = first_significant_code(code + _pcre_OP_lengths[c], TRUE))
        !          2176:   {
        !          2177:   const uschar *ccode;
        !          2178: 
        !          2179:   c = *code;
        !          2180: 
        !          2181:   /* Skip over forward assertions; the other assertions are skipped by
        !          2182:   first_significant_code() with a TRUE final argument. */
        !          2183: 
        !          2184:   if (c == OP_ASSERT)
        !          2185:     {
        !          2186:     do code += GET(code, 1); while (*code == OP_ALT);
        !          2187:     c = *code;
        !          2188:     continue;
        !          2189:     }
        !          2190: 
        !          2191:   /* For a recursion/subroutine call, if its end has been reached, which
        !          2192:   implies a backward reference subroutine call, we can scan it. If it's a
        !          2193:   forward reference subroutine call, we can't. To detect forward reference
        !          2194:   we have to scan up the list that is kept in the workspace. This function is
        !          2195:   called only when doing the real compile, not during the pre-compile that
        !          2196:   measures the size of the compiled pattern. */
        !          2197: 
        !          2198:   if (c == OP_RECURSE)
        !          2199:     {
        !          2200:     const uschar *scode;
        !          2201:     BOOL empty_branch;
        !          2202: 
        !          2203:     /* Test for forward reference */
        !          2204: 
        !          2205:     for (scode = cd->start_workspace; scode < cd->hwm; scode += LINK_SIZE)
        !          2206:       if (GET(scode, 0) == code + 1 - cd->start_code) return TRUE;
        !          2207: 
        !          2208:     /* Not a forward reference, test for completed backward reference */
        !          2209: 
        !          2210:     empty_branch = FALSE;
        !          2211:     scode = cd->start_code + GET(code, 1);
        !          2212:     if (GET(scode, 1) == 0) return TRUE;    /* Unclosed */
        !          2213: 
        !          2214:     /* Completed backwards reference */
        !          2215: 
        !          2216:     do
        !          2217:       {
        !          2218:       if (could_be_empty_branch(scode, endcode, utf8, cd))
        !          2219:         {
        !          2220:         empty_branch = TRUE;
        !          2221:         break;
        !          2222:         }
        !          2223:       scode += GET(scode, 1);
        !          2224:       }
        !          2225:     while (*scode == OP_ALT);
        !          2226: 
        !          2227:     if (!empty_branch) return FALSE;  /* All branches are non-empty */
        !          2228:     continue;
        !          2229:     }
        !          2230: 
        !          2231:   /* Groups with zero repeats can of course be empty; skip them. */
        !          2232: 
        !          2233:   if (c == OP_BRAZERO || c == OP_BRAMINZERO || c == OP_SKIPZERO ||
        !          2234:       c == OP_BRAPOSZERO)
        !          2235:     {
        !          2236:     code += _pcre_OP_lengths[c];
        !          2237:     do code += GET(code, 1); while (*code == OP_ALT);
        !          2238:     c = *code;
        !          2239:     continue;
        !          2240:     }
        !          2241: 
        !          2242:   /* A nested group that is already marked as "could be empty" can just be
        !          2243:   skipped. */
        !          2244: 
        !          2245:   if (c == OP_SBRA  || c == OP_SBRAPOS ||
        !          2246:       c == OP_SCBRA || c == OP_SCBRAPOS)
        !          2247:     {
        !          2248:     do code += GET(code, 1); while (*code == OP_ALT);
        !          2249:     c = *code;
        !          2250:     continue;
        !          2251:     }
        !          2252: 
        !          2253:   /* For other groups, scan the branches. */
        !          2254: 
        !          2255:   if (c == OP_BRA  || c == OP_BRAPOS ||
        !          2256:       c == OP_CBRA || c == OP_CBRAPOS ||
        !          2257:       c == OP_ONCE || c == OP_ONCE_NC ||
        !          2258:       c == OP_COND)
        !          2259:     {
        !          2260:     BOOL empty_branch;
        !          2261:     if (GET(code, 1) == 0) return TRUE;    /* Hit unclosed bracket */
        !          2262: 
        !          2263:     /* If a conditional group has only one branch, there is a second, implied,
        !          2264:     empty branch, so just skip over the conditional, because it could be empty.
        !          2265:     Otherwise, scan the individual branches of the group. */
        !          2266: 
        !          2267:     if (c == OP_COND && code[GET(code, 1)] != OP_ALT)
        !          2268:       code += GET(code, 1);
        !          2269:     else
        !          2270:       {
        !          2271:       empty_branch = FALSE;
        !          2272:       do
        !          2273:         {
        !          2274:         if (!empty_branch && could_be_empty_branch(code, endcode, utf8, cd))
        !          2275:           empty_branch = TRUE;
        !          2276:         code += GET(code, 1);
        !          2277:         }
        !          2278:       while (*code == OP_ALT);
        !          2279:       if (!empty_branch) return FALSE;   /* All branches are non-empty */
        !          2280:       }
        !          2281: 
        !          2282:     c = *code;
        !          2283:     continue;
        !          2284:     }
        !          2285: 
        !          2286:   /* Handle the other opcodes */
        !          2287: 
        !          2288:   switch (c)
        !          2289:     {
        !          2290:     /* Check for quantifiers after a class. XCLASS is used for classes that
        !          2291:     cannot be represented just by a bit map. This includes negated single
        !          2292:     high-valued characters. The length in _pcre_OP_lengths[] is zero; the
        !          2293:     actual length is stored in the compiled code, so we must update "code"
        !          2294:     here. */
        !          2295: 
        !          2296: #ifdef SUPPORT_UTF8
        !          2297:     case OP_XCLASS:
        !          2298:     ccode = code += GET(code, 1);
        !          2299:     goto CHECK_CLASS_REPEAT;
        !          2300: #endif
        !          2301: 
        !          2302:     case OP_CLASS:
        !          2303:     case OP_NCLASS:
        !          2304:     ccode = code + 33;
        !          2305: 
        !          2306: #ifdef SUPPORT_UTF8
        !          2307:     CHECK_CLASS_REPEAT:
        !          2308: #endif
        !          2309: 
        !          2310:     switch (*ccode)
        !          2311:       {
        !          2312:       case OP_CRSTAR:            /* These could be empty; continue */
        !          2313:       case OP_CRMINSTAR:
        !          2314:       case OP_CRQUERY:
        !          2315:       case OP_CRMINQUERY:
        !          2316:       break;
        !          2317: 
        !          2318:       default:                   /* Non-repeat => class must match */
        !          2319:       case OP_CRPLUS:            /* These repeats aren't empty */
        !          2320:       case OP_CRMINPLUS:
        !          2321:       return FALSE;
        !          2322: 
        !          2323:       case OP_CRRANGE:
        !          2324:       case OP_CRMINRANGE:
        !          2325:       if (GET2(ccode, 1) > 0) return FALSE;  /* Minimum > 0 */
        !          2326:       break;
        !          2327:       }
        !          2328:     break;
        !          2329: 
        !          2330:     /* Opcodes that must match a character */
        !          2331: 
        !          2332:     case OP_PROP:
        !          2333:     case OP_NOTPROP:
        !          2334:     case OP_EXTUNI:
        !          2335:     case OP_NOT_DIGIT:
        !          2336:     case OP_DIGIT:
        !          2337:     case OP_NOT_WHITESPACE:
        !          2338:     case OP_WHITESPACE:
        !          2339:     case OP_NOT_WORDCHAR:
        !          2340:     case OP_WORDCHAR:
        !          2341:     case OP_ANY:
        !          2342:     case OP_ALLANY:
        !          2343:     case OP_ANYBYTE:
        !          2344:     case OP_CHAR:
        !          2345:     case OP_CHARI:
        !          2346:     case OP_NOT:
        !          2347:     case OP_NOTI:
        !          2348:     case OP_PLUS:
        !          2349:     case OP_MINPLUS:
        !          2350:     case OP_POSPLUS:
        !          2351:     case OP_EXACT:
        !          2352:     case OP_NOTPLUS:
        !          2353:     case OP_NOTMINPLUS:
        !          2354:     case OP_NOTPOSPLUS:
        !          2355:     case OP_NOTEXACT:
        !          2356:     case OP_TYPEPLUS:
        !          2357:     case OP_TYPEMINPLUS:
        !          2358:     case OP_TYPEPOSPLUS:
        !          2359:     case OP_TYPEEXACT:
        !          2360:     return FALSE;
        !          2361: 
        !          2362:     /* These are going to continue, as they may be empty, but we have to
        !          2363:     fudge the length for the \p and \P cases. */
        !          2364: 
        !          2365:     case OP_TYPESTAR:
        !          2366:     case OP_TYPEMINSTAR:
        !          2367:     case OP_TYPEPOSSTAR:
        !          2368:     case OP_TYPEQUERY:
        !          2369:     case OP_TYPEMINQUERY:
        !          2370:     case OP_TYPEPOSQUERY:
        !          2371:     if (code[1] == OP_PROP || code[1] == OP_NOTPROP) code += 2;
        !          2372:     break;
        !          2373: 
        !          2374:     /* Same for these */
        !          2375: 
        !          2376:     case OP_TYPEUPTO:
        !          2377:     case OP_TYPEMINUPTO:
        !          2378:     case OP_TYPEPOSUPTO:
        !          2379:     if (code[3] == OP_PROP || code[3] == OP_NOTPROP) code += 2;
        !          2380:     break;
        !          2381: 
        !          2382:     /* End of branch */
        !          2383: 
        !          2384:     case OP_KET:
        !          2385:     case OP_KETRMAX:
        !          2386:     case OP_KETRMIN:
        !          2387:     case OP_KETRPOS:
        !          2388:     case OP_ALT:
        !          2389:     return TRUE;
        !          2390: 
        !          2391:     /* In UTF-8 mode, STAR, MINSTAR, POSSTAR, QUERY, MINQUERY, POSQUERY, UPTO,
        !          2392:     MINUPTO, and POSUPTO may be followed by a multibyte character */
        !          2393: 
        !          2394: #ifdef SUPPORT_UTF8
        !          2395:     case OP_STAR:
        !          2396:     case OP_STARI:
        !          2397:     case OP_MINSTAR:
        !          2398:     case OP_MINSTARI:
        !          2399:     case OP_POSSTAR:
        !          2400:     case OP_POSSTARI:
        !          2401:     case OP_QUERY:
        !          2402:     case OP_QUERYI:
        !          2403:     case OP_MINQUERY:
        !          2404:     case OP_MINQUERYI:
        !          2405:     case OP_POSQUERY:
        !          2406:     case OP_POSQUERYI:
        !          2407:     if (utf8 && code[1] >= 0xc0) code += _pcre_utf8_table4[code[1] & 0x3f];
        !          2408:     break;
        !          2409: 
        !          2410:     case OP_UPTO:
        !          2411:     case OP_UPTOI:
        !          2412:     case OP_MINUPTO:
        !          2413:     case OP_MINUPTOI:
        !          2414:     case OP_POSUPTO:
        !          2415:     case OP_POSUPTOI:
        !          2416:     if (utf8 && code[3] >= 0xc0) code += _pcre_utf8_table4[code[3] & 0x3f];
        !          2417:     break;
        !          2418: #endif
        !          2419: 
        !          2420:     /* MARK, and PRUNE/SKIP/THEN with an argument must skip over the argument
        !          2421:     string. */
        !          2422: 
        !          2423:     case OP_MARK:
        !          2424:     case OP_PRUNE_ARG:
        !          2425:     case OP_SKIP_ARG:
        !          2426:     code += code[1];
        !          2427:     break;
        !          2428: 
        !          2429:     case OP_THEN_ARG:
        !          2430:     code += code[1];
        !          2431:     break;
        !          2432: 
        !          2433:     /* None of the remaining opcodes are required to match a character. */
        !          2434: 
        !          2435:     default:
        !          2436:     break;
        !          2437:     }
        !          2438:   }
        !          2439: 
        !          2440: return TRUE;
        !          2441: }
        !          2442: 
        !          2443: 
        !          2444: 
        !          2445: /*************************************************
        !          2446: *    Scan compiled regex for non-emptiness       *
        !          2447: *************************************************/
        !          2448: 
        !          2449: /* This function is called to check for left recursive calls. We want to check
        !          2450: the current branch of the current pattern to see if it could match the empty
        !          2451: string. If it could, we must look outwards for branches at other levels,
        !          2452: stopping when we pass beyond the bracket which is the subject of the recursion.
        !          2453: This function is called only during the real compile, not during the
        !          2454: pre-compile.
        !          2455: 
        !          2456: Arguments:
        !          2457:   code        points to start of the recursion
        !          2458:   endcode     points to where to stop (current RECURSE item)
        !          2459:   bcptr       points to the chain of current (unclosed) branch starts
        !          2460:   utf8        TRUE if in UTF-8 mode
        !          2461:   cd          pointers to tables etc
        !          2462: 
        !          2463: Returns:      TRUE if what is matched could be empty
        !          2464: */
        !          2465: 
        !          2466: static BOOL
        !          2467: could_be_empty(const uschar *code, const uschar *endcode, branch_chain *bcptr,
        !          2468:   BOOL utf8, compile_data *cd)
        !          2469: {
        !          2470: while (bcptr != NULL && bcptr->current_branch >= code)
        !          2471:   {
        !          2472:   if (!could_be_empty_branch(bcptr->current_branch, endcode, utf8, cd))
        !          2473:     return FALSE;
        !          2474:   bcptr = bcptr->outer;
        !          2475:   }
        !          2476: return TRUE;
        !          2477: }
        !          2478: 
        !          2479: 
        !          2480: 
        !          2481: /*************************************************
        !          2482: *           Check for POSIX class syntax         *
        !          2483: *************************************************/
        !          2484: 
        !          2485: /* This function is called when the sequence "[:" or "[." or "[=" is
        !          2486: encountered in a character class. It checks whether this is followed by a
        !          2487: sequence of characters terminated by a matching ":]" or ".]" or "=]". If we
        !          2488: reach an unescaped ']' without the special preceding character, return FALSE.
        !          2489: 
        !          2490: Originally, this function only recognized a sequence of letters between the
        !          2491: terminators, but it seems that Perl recognizes any sequence of characters,
        !          2492: though of course unknown POSIX names are subsequently rejected. Perl gives an
        !          2493: "Unknown POSIX class" error for [:f\oo:] for example, where previously PCRE
        !          2494: didn't consider this to be a POSIX class. Likewise for [:1234:].
        !          2495: 
        !          2496: The problem in trying to be exactly like Perl is in the handling of escapes. We
        !          2497: have to be sure that [abc[:x\]pqr] is *not* treated as containing a POSIX
        !          2498: class, but [abc[:x\]pqr:]] is (so that an error can be generated). The code
        !          2499: below handles the special case of \], but does not try to do any other escape
        !          2500: processing. This makes it different from Perl for cases such as [:l\ower:]
        !          2501: where Perl recognizes it as the POSIX class "lower" but PCRE does not recognize
        !          2502: "l\ower". This is a lesser evil that not diagnosing bad classes when Perl does,
        !          2503: I think.
        !          2504: 
        !          2505: A user pointed out that PCRE was rejecting [:a[:digit:]] whereas Perl was not.
        !          2506: It seems that the appearance of a nested POSIX class supersedes an apparent
        !          2507: external class. For example, [:a[:digit:]b:] matches "a", "b", ":", or
        !          2508: a digit.
        !          2509: 
        !          2510: In Perl, unescaped square brackets may also appear as part of class names. For
        !          2511: example, [:a[:abc]b:] gives unknown POSIX class "[:abc]b:]". However, for
        !          2512: [:a[:abc]b][b:] it gives unknown POSIX class "[:abc]b][b:]", which does not
        !          2513: seem right at all. PCRE does not allow closing square brackets in POSIX class
        !          2514: names.
        !          2515: 
        !          2516: Arguments:
        !          2517:   ptr      pointer to the initial [
        !          2518:   endptr   where to return the end pointer
        !          2519: 
        !          2520: Returns:   TRUE or FALSE
        !          2521: */
        !          2522: 
        !          2523: static BOOL
        !          2524: check_posix_syntax(const uschar *ptr, const uschar **endptr)
        !          2525: {
        !          2526: int terminator;          /* Don't combine these lines; the Solaris cc */
        !          2527: terminator = *(++ptr);   /* compiler warns about "non-constant" initializer. */
        !          2528: for (++ptr; *ptr != 0; ptr++)
        !          2529:   {
        !          2530:   if (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_RIGHT_SQUARE_BRACKET)
        !          2531:     ptr++;
        !          2532:   else if (*ptr == CHAR_RIGHT_SQUARE_BRACKET) return FALSE;
        !          2533:   else
        !          2534:     {
        !          2535:     if (*ptr == terminator && ptr[1] == CHAR_RIGHT_SQUARE_BRACKET)
        !          2536:       {
        !          2537:       *endptr = ptr;
        !          2538:       return TRUE;
        !          2539:       }
        !          2540:     if (*ptr == CHAR_LEFT_SQUARE_BRACKET &&
        !          2541:          (ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
        !          2542:           ptr[1] == CHAR_EQUALS_SIGN) &&
        !          2543:         check_posix_syntax(ptr, endptr))
        !          2544:       return FALSE;
        !          2545:     }
        !          2546:   }
        !          2547: return FALSE;
        !          2548: }
        !          2549: 
        !          2550: 
        !          2551: 
        !          2552: 
        !          2553: /*************************************************
        !          2554: *          Check POSIX class name                *
        !          2555: *************************************************/
        !          2556: 
        !          2557: /* This function is called to check the name given in a POSIX-style class entry
        !          2558: such as [:alnum:].
        !          2559: 
        !          2560: Arguments:
        !          2561:   ptr        points to the first letter
        !          2562:   len        the length of the name
        !          2563: 
        !          2564: Returns:     a value representing the name, or -1 if unknown
        !          2565: */
        !          2566: 
        !          2567: static int
        !          2568: check_posix_name(const uschar *ptr, int len)
        !          2569: {
        !          2570: const char *pn = posix_names;
        !          2571: register int yield = 0;
        !          2572: while (posix_name_lengths[yield] != 0)
        !          2573:   {
        !          2574:   if (len == posix_name_lengths[yield] &&
        !          2575:     strncmp((const char *)ptr, pn, len) == 0) return yield;
        !          2576:   pn += posix_name_lengths[yield] + 1;
        !          2577:   yield++;
        !          2578:   }
        !          2579: return -1;
        !          2580: }
        !          2581: 
        !          2582: 
        !          2583: /*************************************************
        !          2584: *    Adjust OP_RECURSE items in repeated group   *
        !          2585: *************************************************/
        !          2586: 
        !          2587: /* OP_RECURSE items contain an offset from the start of the regex to the group
        !          2588: that is referenced. This means that groups can be replicated for fixed
        !          2589: repetition simply by copying (because the recursion is allowed to refer to
        !          2590: earlier groups that are outside the current group). However, when a group is
        !          2591: optional (i.e. the minimum quantifier is zero), OP_BRAZERO or OP_SKIPZERO is
        !          2592: inserted before it, after it has been compiled. This means that any OP_RECURSE
        !          2593: items within it that refer to the group itself or any contained groups have to
        !          2594: have their offsets adjusted. That one of the jobs of this function. Before it
        !          2595: is called, the partially compiled regex must be temporarily terminated with
        !          2596: OP_END.
        !          2597: 
        !          2598: This function has been extended with the possibility of forward references for
        !          2599: recursions and subroutine calls. It must also check the list of such references
        !          2600: for the group we are dealing with. If it finds that one of the recursions in
        !          2601: the current group is on this list, it adjusts the offset in the list, not the
        !          2602: value in the reference (which is a group number).
        !          2603: 
        !          2604: Arguments:
        !          2605:   group      points to the start of the group
        !          2606:   adjust     the amount by which the group is to be moved
        !          2607:   utf8       TRUE in UTF-8 mode
        !          2608:   cd         contains pointers to tables etc.
        !          2609:   save_hwm   the hwm forward reference pointer at the start of the group
        !          2610: 
        !          2611: Returns:     nothing
        !          2612: */
        !          2613: 
        !          2614: static void
        !          2615: adjust_recurse(uschar *group, int adjust, BOOL utf8, compile_data *cd,
        !          2616:   uschar *save_hwm)
        !          2617: {
        !          2618: uschar *ptr = group;
        !          2619: 
        !          2620: while ((ptr = (uschar *)find_recurse(ptr, utf8)) != NULL)
        !          2621:   {
        !          2622:   int offset;
        !          2623:   uschar *hc;
        !          2624: 
        !          2625:   /* See if this recursion is on the forward reference list. If so, adjust the
        !          2626:   reference. */
        !          2627: 
        !          2628:   for (hc = save_hwm; hc < cd->hwm; hc += LINK_SIZE)
        !          2629:     {
        !          2630:     offset = GET(hc, 0);
        !          2631:     if (cd->start_code + offset == ptr + 1)
        !          2632:       {
        !          2633:       PUT(hc, 0, offset + adjust);
        !          2634:       break;
        !          2635:       }
        !          2636:     }
        !          2637: 
        !          2638:   /* Otherwise, adjust the recursion offset if it's after the start of this
        !          2639:   group. */
        !          2640: 
        !          2641:   if (hc >= cd->hwm)
        !          2642:     {
        !          2643:     offset = GET(ptr, 1);
        !          2644:     if (cd->start_code + offset >= group) PUT(ptr, 1, offset + adjust);
        !          2645:     }
        !          2646: 
        !          2647:   ptr += 1 + LINK_SIZE;
        !          2648:   }
        !          2649: }
        !          2650: 
        !          2651: 
        !          2652: 
        !          2653: /*************************************************
        !          2654: *        Insert an automatic callout point       *
        !          2655: *************************************************/
        !          2656: 
        !          2657: /* This function is called when the PCRE_AUTO_CALLOUT option is set, to insert
        !          2658: callout points before each pattern item.
        !          2659: 
        !          2660: Arguments:
        !          2661:   code           current code pointer
        !          2662:   ptr            current pattern pointer
        !          2663:   cd             pointers to tables etc
        !          2664: 
        !          2665: Returns:         new code pointer
        !          2666: */
        !          2667: 
        !          2668: static uschar *
        !          2669: auto_callout(uschar *code, const uschar *ptr, compile_data *cd)
        !          2670: {
        !          2671: *code++ = OP_CALLOUT;
        !          2672: *code++ = 255;
        !          2673: PUT(code, 0, (int)(ptr - cd->start_pattern));  /* Pattern offset */
        !          2674: PUT(code, LINK_SIZE, 0);                       /* Default length */
        !          2675: return code + 2*LINK_SIZE;
        !          2676: }
        !          2677: 
        !          2678: 
        !          2679: 
        !          2680: /*************************************************
        !          2681: *         Complete a callout item                *
        !          2682: *************************************************/
        !          2683: 
        !          2684: /* A callout item contains the length of the next item in the pattern, which
        !          2685: we can't fill in till after we have reached the relevant point. This is used
        !          2686: for both automatic and manual callouts.
        !          2687: 
        !          2688: Arguments:
        !          2689:   previous_callout   points to previous callout item
        !          2690:   ptr                current pattern pointer
        !          2691:   cd                 pointers to tables etc
        !          2692: 
        !          2693: Returns:             nothing
        !          2694: */
        !          2695: 
        !          2696: static void
        !          2697: complete_callout(uschar *previous_callout, const uschar *ptr, compile_data *cd)
        !          2698: {
        !          2699: int length = (int)(ptr - cd->start_pattern - GET(previous_callout, 2));
        !          2700: PUT(previous_callout, 2 + LINK_SIZE, length);
        !          2701: }
        !          2702: 
        !          2703: 
        !          2704: 
        !          2705: #ifdef SUPPORT_UCP
        !          2706: /*************************************************
        !          2707: *           Get othercase range                  *
        !          2708: *************************************************/
        !          2709: 
        !          2710: /* This function is passed the start and end of a class range, in UTF-8 mode
        !          2711: with UCP support. It searches up the characters, looking for internal ranges of
        !          2712: characters in the "other" case. Each call returns the next one, updating the
        !          2713: start address.
        !          2714: 
        !          2715: Arguments:
        !          2716:   cptr        points to starting character value; updated
        !          2717:   d           end value
        !          2718:   ocptr       where to put start of othercase range
        !          2719:   odptr       where to put end of othercase range
        !          2720: 
        !          2721: Yield:        TRUE when range returned; FALSE when no more
        !          2722: */
        !          2723: 
        !          2724: static BOOL
        !          2725: get_othercase_range(unsigned int *cptr, unsigned int d, unsigned int *ocptr,
        !          2726:   unsigned int *odptr)
        !          2727: {
        !          2728: unsigned int c, othercase, next;
        !          2729: 
        !          2730: for (c = *cptr; c <= d; c++)
        !          2731:   { if ((othercase = UCD_OTHERCASE(c)) != c) break; }
        !          2732: 
        !          2733: if (c > d) return FALSE;
        !          2734: 
        !          2735: *ocptr = othercase;
        !          2736: next = othercase + 1;
        !          2737: 
        !          2738: for (++c; c <= d; c++)
        !          2739:   {
        !          2740:   if (UCD_OTHERCASE(c) != next) break;
        !          2741:   next++;
        !          2742:   }
        !          2743: 
        !          2744: *odptr = next - 1;
        !          2745: *cptr = c;
        !          2746: 
        !          2747: return TRUE;
        !          2748: }
        !          2749: 
        !          2750: 
        !          2751: 
        !          2752: /*************************************************
        !          2753: *        Check a character and a property        *
        !          2754: *************************************************/
        !          2755: 
        !          2756: /* This function is called by check_auto_possessive() when a property item
        !          2757: is adjacent to a fixed character.
        !          2758: 
        !          2759: Arguments:
        !          2760:   c            the character
        !          2761:   ptype        the property type
        !          2762:   pdata        the data for the type
        !          2763:   negated      TRUE if it's a negated property (\P or \p{^)
        !          2764: 
        !          2765: Returns:       TRUE if auto-possessifying is OK
        !          2766: */
        !          2767: 
        !          2768: static BOOL
        !          2769: check_char_prop(int c, int ptype, int pdata, BOOL negated)
        !          2770: {
        !          2771: const ucd_record *prop = GET_UCD(c);
        !          2772: switch(ptype)
        !          2773:   {
        !          2774:   case PT_LAMP:
        !          2775:   return (prop->chartype == ucp_Lu ||
        !          2776:           prop->chartype == ucp_Ll ||
        !          2777:           prop->chartype == ucp_Lt) == negated;
        !          2778: 
        !          2779:   case PT_GC:
        !          2780:   return (pdata == _pcre_ucp_gentype[prop->chartype]) == negated;
        !          2781: 
        !          2782:   case PT_PC:
        !          2783:   return (pdata == prop->chartype) == negated;
        !          2784: 
        !          2785:   case PT_SC:
        !          2786:   return (pdata == prop->script) == negated;
        !          2787: 
        !          2788:   /* These are specials */
        !          2789: 
        !          2790:   case PT_ALNUM:
        !          2791:   return (_pcre_ucp_gentype[prop->chartype] == ucp_L ||
        !          2792:           _pcre_ucp_gentype[prop->chartype] == ucp_N) == negated;
        !          2793: 
        !          2794:   case PT_SPACE:    /* Perl space */
        !          2795:   return (_pcre_ucp_gentype[prop->chartype] == ucp_Z ||
        !          2796:           c == CHAR_HT || c == CHAR_NL || c == CHAR_FF || c == CHAR_CR)
        !          2797:           == negated;
        !          2798: 
        !          2799:   case PT_PXSPACE:  /* POSIX space */
        !          2800:   return (_pcre_ucp_gentype[prop->chartype] == ucp_Z ||
        !          2801:           c == CHAR_HT || c == CHAR_NL || c == CHAR_VT ||
        !          2802:           c == CHAR_FF || c == CHAR_CR)
        !          2803:           == negated;
        !          2804: 
        !          2805:   case PT_WORD:
        !          2806:   return (_pcre_ucp_gentype[prop->chartype] == ucp_L ||
        !          2807:           _pcre_ucp_gentype[prop->chartype] == ucp_N ||
        !          2808:           c == CHAR_UNDERSCORE) == negated;
        !          2809:   }
        !          2810: return FALSE;
        !          2811: }
        !          2812: #endif  /* SUPPORT_UCP */
        !          2813: 
        !          2814: 
        !          2815: 
        !          2816: /*************************************************
        !          2817: *     Check if auto-possessifying is possible    *
        !          2818: *************************************************/
        !          2819: 
        !          2820: /* This function is called for unlimited repeats of certain items, to see
        !          2821: whether the next thing could possibly match the repeated item. If not, it makes
        !          2822: sense to automatically possessify the repeated item.
        !          2823: 
        !          2824: Arguments:
        !          2825:   previous      pointer to the repeated opcode
        !          2826:   utf8          TRUE in UTF-8 mode
        !          2827:   ptr           next character in pattern
        !          2828:   options       options bits
        !          2829:   cd            contains pointers to tables etc.
        !          2830: 
        !          2831: Returns:        TRUE if possessifying is wanted
        !          2832: */
        !          2833: 
        !          2834: static BOOL
        !          2835: check_auto_possessive(const uschar *previous, BOOL utf8, const uschar *ptr,
        !          2836:   int options, compile_data *cd)
        !          2837: {
        !          2838: int c, next;
        !          2839: int op_code = *previous++;
        !          2840: 
        !          2841: /* Skip whitespace and comments in extended mode */
        !          2842: 
        !          2843: if ((options & PCRE_EXTENDED) != 0)
        !          2844:   {
        !          2845:   for (;;)
        !          2846:     {
        !          2847:     while ((cd->ctypes[*ptr] & ctype_space) != 0) ptr++;
        !          2848:     if (*ptr == CHAR_NUMBER_SIGN)
        !          2849:       {
        !          2850:       ptr++;
        !          2851:       while (*ptr != 0)
        !          2852:         {
        !          2853:         if (IS_NEWLINE(ptr)) { ptr += cd->nllen; break; }
        !          2854:         ptr++;
        !          2855: #ifdef SUPPORT_UTF8
        !          2856:         if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
        !          2857: #endif
        !          2858:         }
        !          2859:       }
        !          2860:     else break;
        !          2861:     }
        !          2862:   }
        !          2863: 
        !          2864: /* If the next item is one that we can handle, get its value. A non-negative
        !          2865: value is a character, a negative value is an escape value. */
        !          2866: 
        !          2867: if (*ptr == CHAR_BACKSLASH)
        !          2868:   {
        !          2869:   int temperrorcode = 0;
        !          2870:   next = check_escape(&ptr, &temperrorcode, cd->bracount, options, FALSE);
        !          2871:   if (temperrorcode != 0) return FALSE;
        !          2872:   ptr++;    /* Point after the escape sequence */
        !          2873:   }
        !          2874: 
        !          2875: else if ((cd->ctypes[*ptr] & ctype_meta) == 0)
        !          2876:   {
        !          2877: #ifdef SUPPORT_UTF8
        !          2878:   if (utf8) { GETCHARINC(next, ptr); } else
        !          2879: #endif
        !          2880:   next = *ptr++;
        !          2881:   }
        !          2882: 
        !          2883: else return FALSE;
        !          2884: 
        !          2885: /* Skip whitespace and comments in extended mode */
        !          2886: 
        !          2887: if ((options & PCRE_EXTENDED) != 0)
        !          2888:   {
        !          2889:   for (;;)
        !          2890:     {
        !          2891:     while ((cd->ctypes[*ptr] & ctype_space) != 0) ptr++;
        !          2892:     if (*ptr == CHAR_NUMBER_SIGN)
        !          2893:       {
        !          2894:       ptr++;
        !          2895:       while (*ptr != 0)
        !          2896:         {
        !          2897:         if (IS_NEWLINE(ptr)) { ptr += cd->nllen; break; }
        !          2898:         ptr++;
        !          2899: #ifdef SUPPORT_UTF8
        !          2900:         if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
        !          2901: #endif
        !          2902:         }
        !          2903:       }
        !          2904:     else break;
        !          2905:     }
        !          2906:   }
        !          2907: 
        !          2908: /* If the next thing is itself optional, we have to give up. */
        !          2909: 
        !          2910: if (*ptr == CHAR_ASTERISK || *ptr == CHAR_QUESTION_MARK ||
        !          2911:   strncmp((char *)ptr, STR_LEFT_CURLY_BRACKET STR_0 STR_COMMA, 3) == 0)
        !          2912:     return FALSE;
        !          2913: 
        !          2914: /* Now compare the next item with the previous opcode. First, handle cases when
        !          2915: the next item is a character. */
        !          2916: 
        !          2917: if (next >= 0) switch(op_code)
        !          2918:   {
        !          2919:   case OP_CHAR:
        !          2920: #ifdef SUPPORT_UTF8
        !          2921:   GETCHARTEST(c, previous);
        !          2922: #else
        !          2923:   c = *previous;
        !          2924: #endif
        !          2925:   return c != next;
        !          2926: 
        !          2927:   /* For CHARI (caseless character) we must check the other case. If we have
        !          2928:   Unicode property support, we can use it to test the other case of
        !          2929:   high-valued characters. */
        !          2930: 
        !          2931:   case OP_CHARI:
        !          2932: #ifdef SUPPORT_UTF8
        !          2933:   GETCHARTEST(c, previous);
        !          2934: #else
        !          2935:   c = *previous;
        !          2936: #endif
        !          2937:   if (c == next) return FALSE;
        !          2938: #ifdef SUPPORT_UTF8
        !          2939:   if (utf8)
        !          2940:     {
        !          2941:     unsigned int othercase;
        !          2942:     if (next < 128) othercase = cd->fcc[next]; else
        !          2943: #ifdef SUPPORT_UCP
        !          2944:     othercase = UCD_OTHERCASE((unsigned int)next);
        !          2945: #else
        !          2946:     othercase = NOTACHAR;
        !          2947: #endif
        !          2948:     return (unsigned int)c != othercase;
        !          2949:     }
        !          2950:   else
        !          2951: #endif  /* SUPPORT_UTF8 */
        !          2952:   return (c != cd->fcc[next]);  /* Non-UTF-8 mode */
        !          2953: 
        !          2954:   /* For OP_NOT and OP_NOTI, the data is always a single-byte character. These
        !          2955:   opcodes are not used for multi-byte characters, because they are coded using
        !          2956:   an XCLASS instead. */
        !          2957: 
        !          2958:   case OP_NOT:
        !          2959:   return (c = *previous) == next;
        !          2960: 
        !          2961:   case OP_NOTI:
        !          2962:   if ((c = *previous) == next) return TRUE;
        !          2963: #ifdef SUPPORT_UTF8
        !          2964:   if (utf8)
        !          2965:     {
        !          2966:     unsigned int othercase;
        !          2967:     if (next < 128) othercase = cd->fcc[next]; else
        !          2968: #ifdef SUPPORT_UCP
        !          2969:     othercase = UCD_OTHERCASE(next);
        !          2970: #else
        !          2971:     othercase = NOTACHAR;
        !          2972: #endif
        !          2973:     return (unsigned int)c == othercase;
        !          2974:     }
        !          2975:   else
        !          2976: #endif  /* SUPPORT_UTF8 */
        !          2977:   return (c == cd->fcc[next]);  /* Non-UTF-8 mode */
        !          2978: 
        !          2979:   /* Note that OP_DIGIT etc. are generated only when PCRE_UCP is *not* set.
        !          2980:   When it is set, \d etc. are converted into OP_(NOT_)PROP codes. */
        !          2981: 
        !          2982:   case OP_DIGIT:
        !          2983:   return next > 127 || (cd->ctypes[next] & ctype_digit) == 0;
        !          2984: 
        !          2985:   case OP_NOT_DIGIT:
        !          2986:   return next <= 127 && (cd->ctypes[next] & ctype_digit) != 0;
        !          2987: 
        !          2988:   case OP_WHITESPACE:
        !          2989:   return next > 127 || (cd->ctypes[next] & ctype_space) == 0;
        !          2990: 
        !          2991:   case OP_NOT_WHITESPACE:
        !          2992:   return next <= 127 && (cd->ctypes[next] & ctype_space) != 0;
        !          2993: 
        !          2994:   case OP_WORDCHAR:
        !          2995:   return next > 127 || (cd->ctypes[next] & ctype_word) == 0;
        !          2996: 
        !          2997:   case OP_NOT_WORDCHAR:
        !          2998:   return next <= 127 && (cd->ctypes[next] & ctype_word) != 0;
        !          2999: 
        !          3000:   case OP_HSPACE:
        !          3001:   case OP_NOT_HSPACE:
        !          3002:   switch(next)
        !          3003:     {
        !          3004:     case 0x09:
        !          3005:     case 0x20:
        !          3006:     case 0xa0:
        !          3007:     case 0x1680:
        !          3008:     case 0x180e:
        !          3009:     case 0x2000:
        !          3010:     case 0x2001:
        !          3011:     case 0x2002:
        !          3012:     case 0x2003:
        !          3013:     case 0x2004:
        !          3014:     case 0x2005:
        !          3015:     case 0x2006:
        !          3016:     case 0x2007:
        !          3017:     case 0x2008:
        !          3018:     case 0x2009:
        !          3019:     case 0x200A:
        !          3020:     case 0x202f:
        !          3021:     case 0x205f:
        !          3022:     case 0x3000:
        !          3023:     return op_code == OP_NOT_HSPACE;
        !          3024:     default:
        !          3025:     return op_code != OP_NOT_HSPACE;
        !          3026:     }
        !          3027: 
        !          3028:   case OP_ANYNL:
        !          3029:   case OP_VSPACE:
        !          3030:   case OP_NOT_VSPACE:
        !          3031:   switch(next)
        !          3032:     {
        !          3033:     case 0x0a:
        !          3034:     case 0x0b:
        !          3035:     case 0x0c:
        !          3036:     case 0x0d:
        !          3037:     case 0x85:
        !          3038:     case 0x2028:
        !          3039:     case 0x2029:
        !          3040:     return op_code == OP_NOT_VSPACE;
        !          3041:     default:
        !          3042:     return op_code != OP_NOT_VSPACE;
        !          3043:     }
        !          3044: 
        !          3045: #ifdef SUPPORT_UCP
        !          3046:   case OP_PROP:
        !          3047:   return check_char_prop(next, previous[0], previous[1], FALSE);
        !          3048: 
        !          3049:   case OP_NOTPROP:
        !          3050:   return check_char_prop(next, previous[0], previous[1], TRUE);
        !          3051: #endif
        !          3052: 
        !          3053:   default:
        !          3054:   return FALSE;
        !          3055:   }
        !          3056: 
        !          3057: 
        !          3058: /* Handle the case when the next item is \d, \s, etc. Note that when PCRE_UCP
        !          3059: is set, \d turns into ESC_du rather than ESC_d, etc., so ESC_d etc. are
        !          3060: generated only when PCRE_UCP is *not* set, that is, when only ASCII
        !          3061: characteristics are recognized. Similarly, the opcodes OP_DIGIT etc. are
        !          3062: replaced by OP_PROP codes when PCRE_UCP is set. */
        !          3063: 
        !          3064: switch(op_code)
        !          3065:   {
        !          3066:   case OP_CHAR:
        !          3067:   case OP_CHARI:
        !          3068: #ifdef SUPPORT_UTF8
        !          3069:   GETCHARTEST(c, previous);
        !          3070: #else
        !          3071:   c = *previous;
        !          3072: #endif
        !          3073:   switch(-next)
        !          3074:     {
        !          3075:     case ESC_d:
        !          3076:     return c > 127 || (cd->ctypes[c] & ctype_digit) == 0;
        !          3077: 
        !          3078:     case ESC_D:
        !          3079:     return c <= 127 && (cd->ctypes[c] & ctype_digit) != 0;
        !          3080: 
        !          3081:     case ESC_s:
        !          3082:     return c > 127 || (cd->ctypes[c] & ctype_space) == 0;
        !          3083: 
        !          3084:     case ESC_S:
        !          3085:     return c <= 127 && (cd->ctypes[c] & ctype_space) != 0;
        !          3086: 
        !          3087:     case ESC_w:
        !          3088:     return c > 127 || (cd->ctypes[c] & ctype_word) == 0;
        !          3089: 
        !          3090:     case ESC_W:
        !          3091:     return c <= 127 && (cd->ctypes[c] & ctype_word) != 0;
        !          3092: 
        !          3093:     case ESC_h:
        !          3094:     case ESC_H:
        !          3095:     switch(c)
        !          3096:       {
        !          3097:       case 0x09:
        !          3098:       case 0x20:
        !          3099:       case 0xa0:
        !          3100:       case 0x1680:
        !          3101:       case 0x180e:
        !          3102:       case 0x2000:
        !          3103:       case 0x2001:
        !          3104:       case 0x2002:
        !          3105:       case 0x2003:
        !          3106:       case 0x2004:
        !          3107:       case 0x2005:
        !          3108:       case 0x2006:
        !          3109:       case 0x2007:
        !          3110:       case 0x2008:
        !          3111:       case 0x2009:
        !          3112:       case 0x200A:
        !          3113:       case 0x202f:
        !          3114:       case 0x205f:
        !          3115:       case 0x3000:
        !          3116:       return -next != ESC_h;
        !          3117:       default:
        !          3118:       return -next == ESC_h;
        !          3119:       }
        !          3120: 
        !          3121:     case ESC_v:
        !          3122:     case ESC_V:
        !          3123:     switch(c)
        !          3124:       {
        !          3125:       case 0x0a:
        !          3126:       case 0x0b:
        !          3127:       case 0x0c:
        !          3128:       case 0x0d:
        !          3129:       case 0x85:
        !          3130:       case 0x2028:
        !          3131:       case 0x2029:
        !          3132:       return -next != ESC_v;
        !          3133:       default:
        !          3134:       return -next == ESC_v;
        !          3135:       }
        !          3136: 
        !          3137:     /* When PCRE_UCP is set, these values get generated for \d etc. Find
        !          3138:     their substitutions and process them. The result will always be either
        !          3139:     -ESC_p or -ESC_P. Then fall through to process those values. */
        !          3140: 
        !          3141: #ifdef SUPPORT_UCP
        !          3142:     case ESC_du:
        !          3143:     case ESC_DU:
        !          3144:     case ESC_wu:
        !          3145:     case ESC_WU:
        !          3146:     case ESC_su:
        !          3147:     case ESC_SU:
        !          3148:       {
        !          3149:       int temperrorcode = 0;
        !          3150:       ptr = substitutes[-next - ESC_DU];
        !          3151:       next = check_escape(&ptr, &temperrorcode, 0, options, FALSE);
        !          3152:       if (temperrorcode != 0) return FALSE;
        !          3153:       ptr++;    /* For compatibility */
        !          3154:       }
        !          3155:     /* Fall through */
        !          3156: 
        !          3157:     case ESC_p:
        !          3158:     case ESC_P:
        !          3159:       {
        !          3160:       int ptype, pdata, errorcodeptr;
        !          3161:       BOOL negated;
        !          3162: 
        !          3163:       ptr--;      /* Make ptr point at the p or P */
        !          3164:       ptype = get_ucp(&ptr, &negated, &pdata, &errorcodeptr);
        !          3165:       if (ptype < 0) return FALSE;
        !          3166:       ptr++;      /* Point past the final curly ket */
        !          3167: 
        !          3168:       /* If the property item is optional, we have to give up. (When generated
        !          3169:       from \d etc by PCRE_UCP, this test will have been applied much earlier,
        !          3170:       to the original \d etc. At this point, ptr will point to a zero byte. */
        !          3171: 
        !          3172:       if (*ptr == CHAR_ASTERISK || *ptr == CHAR_QUESTION_MARK ||
        !          3173:         strncmp((char *)ptr, STR_LEFT_CURLY_BRACKET STR_0 STR_COMMA, 3) == 0)
        !          3174:           return FALSE;
        !          3175: 
        !          3176:       /* Do the property check. */
        !          3177: 
        !          3178:       return check_char_prop(c, ptype, pdata, (next == -ESC_P) != negated);
        !          3179:       }
        !          3180: #endif
        !          3181: 
        !          3182:     default:
        !          3183:     return FALSE;
        !          3184:     }
        !          3185: 
        !          3186:   /* In principle, support for Unicode properties should be integrated here as
        !          3187:   well. It means re-organizing the above code so as to get hold of the property
        !          3188:   values before switching on the op-code. However, I wonder how many patterns
        !          3189:   combine ASCII \d etc with Unicode properties? (Note that if PCRE_UCP is set,
        !          3190:   these op-codes are never generated.) */
        !          3191: 
        !          3192:   case OP_DIGIT:
        !          3193:   return next == -ESC_D || next == -ESC_s || next == -ESC_W ||
        !          3194:          next == -ESC_h || next == -ESC_v || next == -ESC_R;
        !          3195: 
        !          3196:   case OP_NOT_DIGIT:
        !          3197:   return next == -ESC_d;
        !          3198: 
        !          3199:   case OP_WHITESPACE:
        !          3200:   return next == -ESC_S || next == -ESC_d || next == -ESC_w || next == -ESC_R;
        !          3201: 
        !          3202:   case OP_NOT_WHITESPACE:
        !          3203:   return next == -ESC_s || next == -ESC_h || next == -ESC_v;
        !          3204: 
        !          3205:   case OP_HSPACE:
        !          3206:   return next == -ESC_S || next == -ESC_H || next == -ESC_d ||
        !          3207:          next == -ESC_w || next == -ESC_v || next == -ESC_R;
        !          3208: 
        !          3209:   case OP_NOT_HSPACE:
        !          3210:   return next == -ESC_h;
        !          3211: 
        !          3212:   /* Can't have \S in here because VT matches \S (Perl anomaly) */
        !          3213:   case OP_ANYNL:
        !          3214:   case OP_VSPACE:
        !          3215:   return next == -ESC_V || next == -ESC_d || next == -ESC_w;
        !          3216: 
        !          3217:   case OP_NOT_VSPACE:
        !          3218:   return next == -ESC_v || next == -ESC_R;
        !          3219: 
        !          3220:   case OP_WORDCHAR:
        !          3221:   return next == -ESC_W || next == -ESC_s || next == -ESC_h ||
        !          3222:          next == -ESC_v || next == -ESC_R;
        !          3223: 
        !          3224:   case OP_NOT_WORDCHAR:
        !          3225:   return next == -ESC_w || next == -ESC_d;
        !          3226: 
        !          3227:   default:
        !          3228:   return FALSE;
        !          3229:   }
        !          3230: 
        !          3231: /* Control does not reach here */
        !          3232: }
        !          3233: 
        !          3234: 
        !          3235: 
        !          3236: /*************************************************
        !          3237: *           Compile one branch                   *
        !          3238: *************************************************/
        !          3239: 
        !          3240: /* Scan the pattern, compiling it into the a vector. If the options are
        !          3241: changed during the branch, the pointer is used to change the external options
        !          3242: bits. This function is used during the pre-compile phase when we are trying
        !          3243: to find out the amount of memory needed, as well as during the real compile
        !          3244: phase. The value of lengthptr distinguishes the two phases.
        !          3245: 
        !          3246: Arguments:
        !          3247:   optionsptr     pointer to the option bits
        !          3248:   codeptr        points to the pointer to the current code point
        !          3249:   ptrptr         points to the current pattern pointer
        !          3250:   errorcodeptr   points to error code variable
        !          3251:   firstbyteptr   set to initial literal character, or < 0 (REQ_UNSET, REQ_NONE)
        !          3252:   reqbyteptr     set to the last literal character required, else < 0
        !          3253:   bcptr          points to current branch chain
        !          3254:   cond_depth     conditional nesting depth
        !          3255:   cd             contains pointers to tables etc.
        !          3256:   lengthptr      NULL during the real compile phase
        !          3257:                  points to length accumulator during pre-compile phase
        !          3258: 
        !          3259: Returns:         TRUE on success
        !          3260:                  FALSE, with *errorcodeptr set non-zero on error
        !          3261: */
        !          3262: 
        !          3263: static BOOL
        !          3264: compile_branch(int *optionsptr, uschar **codeptr, const uschar **ptrptr,
        !          3265:   int *errorcodeptr, int *firstbyteptr, int *reqbyteptr, branch_chain *bcptr,
        !          3266:   int cond_depth, compile_data *cd, int *lengthptr)
        !          3267: {
        !          3268: int repeat_type, op_type;
        !          3269: int repeat_min = 0, repeat_max = 0;      /* To please picky compilers */
        !          3270: int bravalue = 0;
        !          3271: int greedy_default, greedy_non_default;
        !          3272: int firstbyte, reqbyte;
        !          3273: int zeroreqbyte, zerofirstbyte;
        !          3274: int req_caseopt, reqvary, tempreqvary;
        !          3275: int options = *optionsptr;               /* May change dynamically */
        !          3276: int after_manual_callout = 0;
        !          3277: int length_prevgroup = 0;
        !          3278: register int c;
        !          3279: register uschar *code = *codeptr;
        !          3280: uschar *last_code = code;
        !          3281: uschar *orig_code = code;
        !          3282: uschar *tempcode;
        !          3283: BOOL inescq = FALSE;
        !          3284: BOOL groupsetfirstbyte = FALSE;
        !          3285: const uschar *ptr = *ptrptr;
        !          3286: const uschar *tempptr;
        !          3287: const uschar *nestptr = NULL;
        !          3288: uschar *previous = NULL;
        !          3289: uschar *previous_callout = NULL;
        !          3290: uschar *save_hwm = NULL;
        !          3291: uschar classbits[32];
        !          3292: 
        !          3293: /* We can fish out the UTF-8 setting once and for all into a BOOL, but we
        !          3294: must not do this for other options (e.g. PCRE_EXTENDED) because they may change
        !          3295: dynamically as we process the pattern. */
        !          3296: 
        !          3297: #ifdef SUPPORT_UTF8
        !          3298: BOOL class_utf8;
        !          3299: BOOL utf8 = (options & PCRE_UTF8) != 0;
        !          3300: uschar *class_utf8data;
        !          3301: uschar *class_utf8data_base;
        !          3302: uschar utf8_char[6];
        !          3303: #else
        !          3304: BOOL utf8 = FALSE;
        !          3305: #endif
        !          3306: 
        !          3307: #ifdef PCRE_DEBUG
        !          3308: if (lengthptr != NULL) DPRINTF((">> start branch\n"));
        !          3309: #endif
        !          3310: 
        !          3311: /* Set up the default and non-default settings for greediness */
        !          3312: 
        !          3313: greedy_default = ((options & PCRE_UNGREEDY) != 0);
        !          3314: greedy_non_default = greedy_default ^ 1;
        !          3315: 
        !          3316: /* Initialize no first byte, no required byte. REQ_UNSET means "no char
        !          3317: matching encountered yet". It gets changed to REQ_NONE if we hit something that
        !          3318: matches a non-fixed char first char; reqbyte just remains unset if we never
        !          3319: find one.
        !          3320: 
        !          3321: When we hit a repeat whose minimum is zero, we may have to adjust these values
        !          3322: to take the zero repeat into account. This is implemented by setting them to
        !          3323: zerofirstbyte and zeroreqbyte when such a repeat is encountered. The individual
        !          3324: item types that can be repeated set these backoff variables appropriately. */
        !          3325: 
        !          3326: firstbyte = reqbyte = zerofirstbyte = zeroreqbyte = REQ_UNSET;
        !          3327: 
        !          3328: /* The variable req_caseopt contains either the REQ_CASELESS value or zero,
        !          3329: according to the current setting of the caseless flag. REQ_CASELESS is a bit
        !          3330: value > 255. It is added into the firstbyte or reqbyte variables to record the
        !          3331: case status of the value. This is used only for ASCII characters. */
        !          3332: 
        !          3333: req_caseopt = ((options & PCRE_CASELESS) != 0)? REQ_CASELESS : 0;
        !          3334: 
        !          3335: /* Switch on next character until the end of the branch */
        !          3336: 
        !          3337: for (;; ptr++)
        !          3338:   {
        !          3339:   BOOL negate_class;
        !          3340:   BOOL should_flip_negation;
        !          3341:   BOOL possessive_quantifier;
        !          3342:   BOOL is_quantifier;
        !          3343:   BOOL is_recurse;
        !          3344:   BOOL reset_bracount;
        !          3345:   int class_charcount;
        !          3346:   int class_lastchar;
        !          3347:   int newoptions;
        !          3348:   int recno;
        !          3349:   int refsign;
        !          3350:   int skipbytes;
        !          3351:   int subreqbyte;
        !          3352:   int subfirstbyte;
        !          3353:   int terminator;
        !          3354:   int mclength;
        !          3355:   int tempbracount;
        !          3356:   uschar mcbuffer[8];
        !          3357: 
        !          3358:   /* Get next byte in the pattern */
        !          3359: 
        !          3360:   c = *ptr;
        !          3361: 
        !          3362:   /* If we are at the end of a nested substitution, revert to the outer level
        !          3363:   string. Nesting only happens one level deep. */
        !          3364: 
        !          3365:   if (c == 0 && nestptr != NULL)
        !          3366:     {
        !          3367:     ptr = nestptr;
        !          3368:     nestptr = NULL;
        !          3369:     c = *ptr;
        !          3370:     }
        !          3371: 
        !          3372:   /* If we are in the pre-compile phase, accumulate the length used for the
        !          3373:   previous cycle of this loop. */
        !          3374: 
        !          3375:   if (lengthptr != NULL)
        !          3376:     {
        !          3377: #ifdef PCRE_DEBUG
        !          3378:     if (code > cd->hwm) cd->hwm = code;                 /* High water info */
        !          3379: #endif
        !          3380:     if (code > cd->start_workspace + cd->workspace_size -
        !          3381:         WORK_SIZE_SAFETY_MARGIN)                       /* Check for overrun */
        !          3382:       {
        !          3383:       *errorcodeptr = ERR52;
        !          3384:       goto FAILED;
        !          3385:       }
        !          3386: 
        !          3387:     /* There is at least one situation where code goes backwards: this is the
        !          3388:     case of a zero quantifier after a class (e.g. [ab]{0}). At compile time,
        !          3389:     the class is simply eliminated. However, it is created first, so we have to
        !          3390:     allow memory for it. Therefore, don't ever reduce the length at this point.
        !          3391:     */
        !          3392: 
        !          3393:     if (code < last_code) code = last_code;
        !          3394: 
        !          3395:     /* Paranoid check for integer overflow */
        !          3396: 
        !          3397:     if (OFLOW_MAX - *lengthptr < code - last_code)
        !          3398:       {
        !          3399:       *errorcodeptr = ERR20;
        !          3400:       goto FAILED;
        !          3401:       }
        !          3402: 
        !          3403:     *lengthptr += (int)(code - last_code);
        !          3404:     DPRINTF(("length=%d added %d c=%c\n", *lengthptr, (int)(code - last_code),
        !          3405:       c));
        !          3406: 
        !          3407:     /* If "previous" is set and it is not at the start of the work space, move
        !          3408:     it back to there, in order to avoid filling up the work space. Otherwise,
        !          3409:     if "previous" is NULL, reset the current code pointer to the start. */
        !          3410: 
        !          3411:     if (previous != NULL)
        !          3412:       {
        !          3413:       if (previous > orig_code)
        !          3414:         {
        !          3415:         memmove(orig_code, previous, code - previous);
        !          3416:         code -= previous - orig_code;
        !          3417:         previous = orig_code;
        !          3418:         }
        !          3419:       }
        !          3420:     else code = orig_code;
        !          3421: 
        !          3422:     /* Remember where this code item starts so we can pick up the length
        !          3423:     next time round. */
        !          3424: 
        !          3425:     last_code = code;
        !          3426:     }
        !          3427: 
        !          3428:   /* In the real compile phase, just check the workspace used by the forward
        !          3429:   reference list. */
        !          3430: 
        !          3431:   else if (cd->hwm > cd->start_workspace + cd->workspace_size -
        !          3432:            WORK_SIZE_SAFETY_MARGIN)
        !          3433:     {
        !          3434:     *errorcodeptr = ERR52;
        !          3435:     goto FAILED;
        !          3436:     }
        !          3437: 
        !          3438:   /* If in \Q...\E, check for the end; if not, we have a literal */
        !          3439: 
        !          3440:   if (inescq && c != 0)
        !          3441:     {
        !          3442:     if (c == CHAR_BACKSLASH && ptr[1] == CHAR_E)
        !          3443:       {
        !          3444:       inescq = FALSE;
        !          3445:       ptr++;
        !          3446:       continue;
        !          3447:       }
        !          3448:     else
        !          3449:       {
        !          3450:       if (previous_callout != NULL)
        !          3451:         {
        !          3452:         if (lengthptr == NULL)  /* Don't attempt in pre-compile phase */
        !          3453:           complete_callout(previous_callout, ptr, cd);
        !          3454:         previous_callout = NULL;
        !          3455:         }
        !          3456:       if ((options & PCRE_AUTO_CALLOUT) != 0)
        !          3457:         {
        !          3458:         previous_callout = code;
        !          3459:         code = auto_callout(code, ptr, cd);
        !          3460:         }
        !          3461:       goto NORMAL_CHAR;
        !          3462:       }
        !          3463:     }
        !          3464: 
        !          3465:   /* Fill in length of a previous callout, except when the next thing is
        !          3466:   a quantifier. */
        !          3467: 
        !          3468:   is_quantifier =
        !          3469:     c == CHAR_ASTERISK || c == CHAR_PLUS || c == CHAR_QUESTION_MARK ||
        !          3470:     (c == CHAR_LEFT_CURLY_BRACKET && is_counted_repeat(ptr+1));
        !          3471: 
        !          3472:   if (!is_quantifier && previous_callout != NULL &&
        !          3473:        after_manual_callout-- <= 0)
        !          3474:     {
        !          3475:     if (lengthptr == NULL)      /* Don't attempt in pre-compile phase */
        !          3476:       complete_callout(previous_callout, ptr, cd);
        !          3477:     previous_callout = NULL;
        !          3478:     }
        !          3479: 
        !          3480:   /* In extended mode, skip white space and comments. */
        !          3481: 
        !          3482:   if ((options & PCRE_EXTENDED) != 0)
        !          3483:     {
        !          3484:     if ((cd->ctypes[c] & ctype_space) != 0) continue;
        !          3485:     if (c == CHAR_NUMBER_SIGN)
        !          3486:       {
        !          3487:       ptr++;
        !          3488:       while (*ptr != 0)
        !          3489:         {
        !          3490:         if (IS_NEWLINE(ptr)) { ptr += cd->nllen - 1; break; }
        !          3491:         ptr++;
        !          3492: #ifdef SUPPORT_UTF8
        !          3493:         if (utf8) while ((*ptr & 0xc0) == 0x80) ptr++;
        !          3494: #endif
        !          3495:         }
        !          3496:       if (*ptr != 0) continue;
        !          3497: 
        !          3498:       /* Else fall through to handle end of string */
        !          3499:       c = 0;
        !          3500:       }
        !          3501:     }
        !          3502: 
        !          3503:   /* No auto callout for quantifiers. */
        !          3504: 
        !          3505:   if ((options & PCRE_AUTO_CALLOUT) != 0 && !is_quantifier)
        !          3506:     {
        !          3507:     previous_callout = code;
        !          3508:     code = auto_callout(code, ptr, cd);
        !          3509:     }
        !          3510: 
        !          3511:   switch(c)
        !          3512:     {
        !          3513:     /* ===================================================================*/
        !          3514:     case 0:                        /* The branch terminates at string end */
        !          3515:     case CHAR_VERTICAL_LINE:       /* or | or ) */
        !          3516:     case CHAR_RIGHT_PARENTHESIS:
        !          3517:     *firstbyteptr = firstbyte;
        !          3518:     *reqbyteptr = reqbyte;
        !          3519:     *codeptr = code;
        !          3520:     *ptrptr = ptr;
        !          3521:     if (lengthptr != NULL)
        !          3522:       {
        !          3523:       if (OFLOW_MAX - *lengthptr < code - last_code)
        !          3524:         {
        !          3525:         *errorcodeptr = ERR20;
        !          3526:         goto FAILED;
        !          3527:         }
        !          3528:       *lengthptr += (int)(code - last_code);   /* To include callout length */
        !          3529:       DPRINTF((">> end branch\n"));
        !          3530:       }
        !          3531:     return TRUE;
        !          3532: 
        !          3533: 
        !          3534:     /* ===================================================================*/
        !          3535:     /* Handle single-character metacharacters. In multiline mode, ^ disables
        !          3536:     the setting of any following char as a first character. */
        !          3537: 
        !          3538:     case CHAR_CIRCUMFLEX_ACCENT:
        !          3539:     previous = NULL;
        !          3540:     if ((options & PCRE_MULTILINE) != 0)
        !          3541:       {
        !          3542:       if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          3543:       *code++ = OP_CIRCM;
        !          3544:       }
        !          3545:     else *code++ = OP_CIRC;
        !          3546:     break;
        !          3547: 
        !          3548:     case CHAR_DOLLAR_SIGN:
        !          3549:     previous = NULL;
        !          3550:     *code++ = ((options & PCRE_MULTILINE) != 0)? OP_DOLLM : OP_DOLL;
        !          3551:     break;
        !          3552: 
        !          3553:     /* There can never be a first char if '.' is first, whatever happens about
        !          3554:     repeats. The value of reqbyte doesn't change either. */
        !          3555: 
        !          3556:     case CHAR_DOT:
        !          3557:     if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          3558:     zerofirstbyte = firstbyte;
        !          3559:     zeroreqbyte = reqbyte;
        !          3560:     previous = code;
        !          3561:     *code++ = ((options & PCRE_DOTALL) != 0)? OP_ALLANY: OP_ANY;
        !          3562:     break;
        !          3563: 
        !          3564: 
        !          3565:     /* ===================================================================*/
        !          3566:     /* Character classes. If the included characters are all < 256, we build a
        !          3567:     32-byte bitmap of the permitted characters, except in the special case
        !          3568:     where there is only one such character. For negated classes, we build the
        !          3569:     map as usual, then invert it at the end. However, we use a different opcode
        !          3570:     so that data characters > 255 can be handled correctly.
        !          3571: 
        !          3572:     If the class contains characters outside the 0-255 range, a different
        !          3573:     opcode is compiled. It may optionally have a bit map for characters < 256,
        !          3574:     but those above are are explicitly listed afterwards. A flag byte tells
        !          3575:     whether the bitmap is present, and whether this is a negated class or not.
        !          3576: 
        !          3577:     In JavaScript compatibility mode, an isolated ']' causes an error. In
        !          3578:     default (Perl) mode, it is treated as a data character. */
        !          3579: 
        !          3580:     case CHAR_RIGHT_SQUARE_BRACKET:
        !          3581:     if ((cd->external_options & PCRE_JAVASCRIPT_COMPAT) != 0)
        !          3582:       {
        !          3583:       *errorcodeptr = ERR64;
        !          3584:       goto FAILED;
        !          3585:       }
        !          3586:     goto NORMAL_CHAR;
        !          3587: 
        !          3588:     case CHAR_LEFT_SQUARE_BRACKET:
        !          3589:     previous = code;
        !          3590: 
        !          3591:     /* PCRE supports POSIX class stuff inside a class. Perl gives an error if
        !          3592:     they are encountered at the top level, so we'll do that too. */
        !          3593: 
        !          3594:     if ((ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
        !          3595:          ptr[1] == CHAR_EQUALS_SIGN) &&
        !          3596:         check_posix_syntax(ptr, &tempptr))
        !          3597:       {
        !          3598:       *errorcodeptr = (ptr[1] == CHAR_COLON)? ERR13 : ERR31;
        !          3599:       goto FAILED;
        !          3600:       }
        !          3601: 
        !          3602:     /* If the first character is '^', set the negation flag and skip it. Also,
        !          3603:     if the first few characters (either before or after ^) are \Q\E or \E we
        !          3604:     skip them too. This makes for compatibility with Perl. */
        !          3605: 
        !          3606:     negate_class = FALSE;
        !          3607:     for (;;)
        !          3608:       {
        !          3609:       c = *(++ptr);
        !          3610:       if (c == CHAR_BACKSLASH)
        !          3611:         {
        !          3612:         if (ptr[1] == CHAR_E)
        !          3613:           ptr++;
        !          3614:         else if (strncmp((const char *)ptr+1,
        !          3615:                           STR_Q STR_BACKSLASH STR_E, 3) == 0)
        !          3616:           ptr += 3;
        !          3617:         else
        !          3618:           break;
        !          3619:         }
        !          3620:       else if (!negate_class && c == CHAR_CIRCUMFLEX_ACCENT)
        !          3621:         negate_class = TRUE;
        !          3622:       else break;
        !          3623:       }
        !          3624: 
        !          3625:     /* Empty classes are allowed in JavaScript compatibility mode. Otherwise,
        !          3626:     an initial ']' is taken as a data character -- the code below handles
        !          3627:     that. In JS mode, [] must always fail, so generate OP_FAIL, whereas
        !          3628:     [^] must match any character, so generate OP_ALLANY. */
        !          3629: 
        !          3630:     if (c == CHAR_RIGHT_SQUARE_BRACKET &&
        !          3631:         (cd->external_options & PCRE_JAVASCRIPT_COMPAT) != 0)
        !          3632:       {
        !          3633:       *code++ = negate_class? OP_ALLANY : OP_FAIL;
        !          3634:       if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          3635:       zerofirstbyte = firstbyte;
        !          3636:       break;
        !          3637:       }
        !          3638: 
        !          3639:     /* If a class contains a negative special such as \S, we need to flip the
        !          3640:     negation flag at the end, so that support for characters > 255 works
        !          3641:     correctly (they are all included in the class). */
        !          3642: 
        !          3643:     should_flip_negation = FALSE;
        !          3644: 
        !          3645:     /* Keep a count of chars with values < 256 so that we can optimize the case
        !          3646:     of just a single character (as long as it's < 256). However, For higher
        !          3647:     valued UTF-8 characters, we don't yet do any optimization. */
        !          3648: 
        !          3649:     class_charcount = 0;
        !          3650:     class_lastchar = -1;
        !          3651: 
        !          3652:     /* Initialize the 32-char bit map to all zeros. We build the map in a
        !          3653:     temporary bit of memory, in case the class contains only 1 character (less
        !          3654:     than 256), because in that case the compiled code doesn't use the bit map.
        !          3655:     */
        !          3656: 
        !          3657:     memset(classbits, 0, 32 * sizeof(uschar));
        !          3658: 
        !          3659: #ifdef SUPPORT_UTF8
        !          3660:     class_utf8 = FALSE;                       /* No chars >= 256 */
        !          3661:     class_utf8data = code + LINK_SIZE + 2;    /* For UTF-8 items */
        !          3662:     class_utf8data_base = class_utf8data;     /* For resetting in pass 1 */
        !          3663: #endif
        !          3664: 
        !          3665:     /* Process characters until ] is reached. By writing this as a "do" it
        !          3666:     means that an initial ] is taken as a data character. At the start of the
        !          3667:     loop, c contains the first byte of the character. */
        !          3668: 
        !          3669:     if (c != 0) do
        !          3670:       {
        !          3671:       const uschar *oldptr;
        !          3672: 
        !          3673: #ifdef SUPPORT_UTF8
        !          3674:       if (utf8 && c > 127)
        !          3675:         {                           /* Braces are required because the */
        !          3676:         GETCHARLEN(c, ptr, ptr);    /* macro generates multiple statements */
        !          3677:         }
        !          3678: 
        !          3679:       /* In the pre-compile phase, accumulate the length of any UTF-8 extra
        !          3680:       data and reset the pointer. This is so that very large classes that
        !          3681:       contain a zillion UTF-8 characters no longer overwrite the work space
        !          3682:       (which is on the stack). */
        !          3683: 
        !          3684:       if (lengthptr != NULL)
        !          3685:         {
        !          3686:         *lengthptr += (int)(class_utf8data - class_utf8data_base);
        !          3687:         class_utf8data = class_utf8data_base;
        !          3688:         }
        !          3689: 
        !          3690: #endif
        !          3691: 
        !          3692:       /* Inside \Q...\E everything is literal except \E */
        !          3693: 
        !          3694:       if (inescq)
        !          3695:         {
        !          3696:         if (c == CHAR_BACKSLASH && ptr[1] == CHAR_E)  /* If we are at \E */
        !          3697:           {
        !          3698:           inescq = FALSE;                   /* Reset literal state */
        !          3699:           ptr++;                            /* Skip the 'E' */
        !          3700:           continue;                         /* Carry on with next */
        !          3701:           }
        !          3702:         goto CHECK_RANGE;                   /* Could be range if \E follows */
        !          3703:         }
        !          3704: 
        !          3705:       /* Handle POSIX class names. Perl allows a negation extension of the
        !          3706:       form [:^name:]. A square bracket that doesn't match the syntax is
        !          3707:       treated as a literal. We also recognize the POSIX constructions
        !          3708:       [.ch.] and [=ch=] ("collating elements") and fault them, as Perl
        !          3709:       5.6 and 5.8 do. */
        !          3710: 
        !          3711:       if (c == CHAR_LEFT_SQUARE_BRACKET &&
        !          3712:           (ptr[1] == CHAR_COLON || ptr[1] == CHAR_DOT ||
        !          3713:            ptr[1] == CHAR_EQUALS_SIGN) && check_posix_syntax(ptr, &tempptr))
        !          3714:         {
        !          3715:         BOOL local_negate = FALSE;
        !          3716:         int posix_class, taboffset, tabopt;
        !          3717:         register const uschar *cbits = cd->cbits;
        !          3718:         uschar pbits[32];
        !          3719: 
        !          3720:         if (ptr[1] != CHAR_COLON)
        !          3721:           {
        !          3722:           *errorcodeptr = ERR31;
        !          3723:           goto FAILED;
        !          3724:           }
        !          3725: 
        !          3726:         ptr += 2;
        !          3727:         if (*ptr == CHAR_CIRCUMFLEX_ACCENT)
        !          3728:           {
        !          3729:           local_negate = TRUE;
        !          3730:           should_flip_negation = TRUE;  /* Note negative special */
        !          3731:           ptr++;
        !          3732:           }
        !          3733: 
        !          3734:         posix_class = check_posix_name(ptr, (int)(tempptr - ptr));
        !          3735:         if (posix_class < 0)
        !          3736:           {
        !          3737:           *errorcodeptr = ERR30;
        !          3738:           goto FAILED;
        !          3739:           }
        !          3740: 
        !          3741:         /* If matching is caseless, upper and lower are converted to
        !          3742:         alpha. This relies on the fact that the class table starts with
        !          3743:         alpha, lower, upper as the first 3 entries. */
        !          3744: 
        !          3745:         if ((options & PCRE_CASELESS) != 0 && posix_class <= 2)
        !          3746:           posix_class = 0;
        !          3747: 
        !          3748:         /* When PCRE_UCP is set, some of the POSIX classes are converted to
        !          3749:         different escape sequences that use Unicode properties. */
        !          3750: 
        !          3751: #ifdef SUPPORT_UCP
        !          3752:         if ((options & PCRE_UCP) != 0)
        !          3753:           {
        !          3754:           int pc = posix_class + ((local_negate)? POSIX_SUBSIZE/2 : 0);
        !          3755:           if (posix_substitutes[pc] != NULL)
        !          3756:             {
        !          3757:             nestptr = tempptr + 1;
        !          3758:             ptr = posix_substitutes[pc] - 1;
        !          3759:             continue;
        !          3760:             }
        !          3761:           }
        !          3762: #endif
        !          3763:         /* In the non-UCP case, we build the bit map for the POSIX class in a
        !          3764:         chunk of local store because we may be adding and subtracting from it,
        !          3765:         and we don't want to subtract bits that may be in the main map already.
        !          3766:         At the end we or the result into the bit map that is being built. */
        !          3767: 
        !          3768:         posix_class *= 3;
        !          3769: 
        !          3770:         /* Copy in the first table (always present) */
        !          3771: 
        !          3772:         memcpy(pbits, cbits + posix_class_maps[posix_class],
        !          3773:           32 * sizeof(uschar));
        !          3774: 
        !          3775:         /* If there is a second table, add or remove it as required. */
        !          3776: 
        !          3777:         taboffset = posix_class_maps[posix_class + 1];
        !          3778:         tabopt = posix_class_maps[posix_class + 2];
        !          3779: 
        !          3780:         if (taboffset >= 0)
        !          3781:           {
        !          3782:           if (tabopt >= 0)
        !          3783:             for (c = 0; c < 32; c++) pbits[c] |= cbits[c + taboffset];
        !          3784:           else
        !          3785:             for (c = 0; c < 32; c++) pbits[c] &= ~cbits[c + taboffset];
        !          3786:           }
        !          3787: 
        !          3788:         /* Not see if we need to remove any special characters. An option
        !          3789:         value of 1 removes vertical space and 2 removes underscore. */
        !          3790: 
        !          3791:         if (tabopt < 0) tabopt = -tabopt;
        !          3792:         if (tabopt == 1) pbits[1] &= ~0x3c;
        !          3793:           else if (tabopt == 2) pbits[11] &= 0x7f;
        !          3794: 
        !          3795:         /* Add the POSIX table or its complement into the main table that is
        !          3796:         being built and we are done. */
        !          3797: 
        !          3798:         if (local_negate)
        !          3799:           for (c = 0; c < 32; c++) classbits[c] |= ~pbits[c];
        !          3800:         else
        !          3801:           for (c = 0; c < 32; c++) classbits[c] |= pbits[c];
        !          3802: 
        !          3803:         ptr = tempptr + 1;
        !          3804:         class_charcount = 10;  /* Set > 1; assumes more than 1 per class */
        !          3805:         continue;    /* End of POSIX syntax handling */
        !          3806:         }
        !          3807: 
        !          3808:       /* Backslash may introduce a single character, or it may introduce one
        !          3809:       of the specials, which just set a flag. The sequence \b is a special
        !          3810:       case. Inside a class (and only there) it is treated as backspace. We
        !          3811:       assume that other escapes have more than one character in them, so set
        !          3812:       class_charcount bigger than one. Unrecognized escapes fall through and
        !          3813:       are either treated as literal characters (by default), or are faulted if
        !          3814:       PCRE_EXTRA is set. */
        !          3815: 
        !          3816:       if (c == CHAR_BACKSLASH)
        !          3817:         {
        !          3818:         c = check_escape(&ptr, errorcodeptr, cd->bracount, options, TRUE);
        !          3819:         if (*errorcodeptr != 0) goto FAILED;
        !          3820: 
        !          3821:         if (-c == ESC_b) c = CHAR_BS;    /* \b is backspace in a class */
        !          3822:         else if (-c == ESC_N)            /* \N is not supported in a class */
        !          3823:           {
        !          3824:           *errorcodeptr = ERR71;
        !          3825:           goto FAILED;
        !          3826:           }
        !          3827:         else if (-c == ESC_Q)            /* Handle start of quoted string */
        !          3828:           {
        !          3829:           if (ptr[1] == CHAR_BACKSLASH && ptr[2] == CHAR_E)
        !          3830:             {
        !          3831:             ptr += 2; /* avoid empty string */
        !          3832:             }
        !          3833:           else inescq = TRUE;
        !          3834:           continue;
        !          3835:           }
        !          3836:         else if (-c == ESC_E) continue;  /* Ignore orphan \E */
        !          3837: 
        !          3838:         if (c < 0)
        !          3839:           {
        !          3840:           register const uschar *cbits = cd->cbits;
        !          3841:           class_charcount += 2;     /* Greater than 1 is what matters */
        !          3842: 
        !          3843:           switch (-c)
        !          3844:             {
        !          3845: #ifdef SUPPORT_UCP
        !          3846:             case ESC_du:     /* These are the values given for \d etc */
        !          3847:             case ESC_DU:     /* when PCRE_UCP is set. We replace the */
        !          3848:             case ESC_wu:     /* escape sequence with an appropriate \p */
        !          3849:             case ESC_WU:     /* or \P to test Unicode properties instead */
        !          3850:             case ESC_su:     /* of the default ASCII testing. */
        !          3851:             case ESC_SU:
        !          3852:             nestptr = ptr;
        !          3853:             ptr = substitutes[-c - ESC_DU] - 1;  /* Just before substitute */
        !          3854:             class_charcount -= 2;                /* Undo! */
        !          3855:             continue;
        !          3856: #endif
        !          3857:             case ESC_d:
        !          3858:             for (c = 0; c < 32; c++) classbits[c] |= cbits[c+cbit_digit];
        !          3859:             continue;
        !          3860: 
        !          3861:             case ESC_D:
        !          3862:             should_flip_negation = TRUE;
        !          3863:             for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_digit];
        !          3864:             continue;
        !          3865: 
        !          3866:             case ESC_w:
        !          3867:             for (c = 0; c < 32; c++) classbits[c] |= cbits[c+cbit_word];
        !          3868:             continue;
        !          3869: 
        !          3870:             case ESC_W:
        !          3871:             should_flip_negation = TRUE;
        !          3872:             for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_word];
        !          3873:             continue;
        !          3874: 
        !          3875:             /* Perl 5.004 onwards omits VT from \s, but we must preserve it
        !          3876:             if it was previously set by something earlier in the character
        !          3877:             class. */
        !          3878: 
        !          3879:             case ESC_s:
        !          3880:             classbits[0] |= cbits[cbit_space];
        !          3881:             classbits[1] |= cbits[cbit_space+1] & ~0x08;
        !          3882:             for (c = 2; c < 32; c++) classbits[c] |= cbits[c+cbit_space];
        !          3883:             continue;
        !          3884: 
        !          3885:             case ESC_S:
        !          3886:             should_flip_negation = TRUE;
        !          3887:             for (c = 0; c < 32; c++) classbits[c] |= ~cbits[c+cbit_space];
        !          3888:             classbits[1] |= 0x08;    /* Perl 5.004 onwards omits VT from \s */
        !          3889:             continue;
        !          3890: 
        !          3891:             case ESC_h:
        !          3892:             SETBIT(classbits, 0x09); /* VT */
        !          3893:             SETBIT(classbits, 0x20); /* SPACE */
        !          3894:             SETBIT(classbits, 0xa0); /* NSBP */
        !          3895: #ifdef SUPPORT_UTF8
        !          3896:             if (utf8)
        !          3897:               {
        !          3898:               class_utf8 = TRUE;
        !          3899:               *class_utf8data++ = XCL_SINGLE;
        !          3900:               class_utf8data += _pcre_ord2utf8(0x1680, class_utf8data);
        !          3901:               *class_utf8data++ = XCL_SINGLE;
        !          3902:               class_utf8data += _pcre_ord2utf8(0x180e, class_utf8data);
        !          3903:               *class_utf8data++ = XCL_RANGE;
        !          3904:               class_utf8data += _pcre_ord2utf8(0x2000, class_utf8data);
        !          3905:               class_utf8data += _pcre_ord2utf8(0x200A, class_utf8data);
        !          3906:               *class_utf8data++ = XCL_SINGLE;
        !          3907:               class_utf8data += _pcre_ord2utf8(0x202f, class_utf8data);
        !          3908:               *class_utf8data++ = XCL_SINGLE;
        !          3909:               class_utf8data += _pcre_ord2utf8(0x205f, class_utf8data);
        !          3910:               *class_utf8data++ = XCL_SINGLE;
        !          3911:               class_utf8data += _pcre_ord2utf8(0x3000, class_utf8data);
        !          3912:               }
        !          3913: #endif
        !          3914:             continue;
        !          3915: 
        !          3916:             case ESC_H:
        !          3917:             for (c = 0; c < 32; c++)
        !          3918:               {
        !          3919:               int x = 0xff;
        !          3920:               switch (c)
        !          3921:                 {
        !          3922:                 case 0x09/8: x ^= 1 << (0x09%8); break;
        !          3923:                 case 0x20/8: x ^= 1 << (0x20%8); break;
        !          3924:                 case 0xa0/8: x ^= 1 << (0xa0%8); break;
        !          3925:                 default: break;
        !          3926:                 }
        !          3927:               classbits[c] |= x;
        !          3928:               }
        !          3929: 
        !          3930: #ifdef SUPPORT_UTF8
        !          3931:             if (utf8)
        !          3932:               {
        !          3933:               class_utf8 = TRUE;
        !          3934:               *class_utf8data++ = XCL_RANGE;
        !          3935:               class_utf8data += _pcre_ord2utf8(0x0100, class_utf8data);
        !          3936:               class_utf8data += _pcre_ord2utf8(0x167f, class_utf8data);
        !          3937:               *class_utf8data++ = XCL_RANGE;
        !          3938:               class_utf8data += _pcre_ord2utf8(0x1681, class_utf8data);
        !          3939:               class_utf8data += _pcre_ord2utf8(0x180d, class_utf8data);
        !          3940:               *class_utf8data++ = XCL_RANGE;
        !          3941:               class_utf8data += _pcre_ord2utf8(0x180f, class_utf8data);
        !          3942:               class_utf8data += _pcre_ord2utf8(0x1fff, class_utf8data);
        !          3943:               *class_utf8data++ = XCL_RANGE;
        !          3944:               class_utf8data += _pcre_ord2utf8(0x200B, class_utf8data);
        !          3945:               class_utf8data += _pcre_ord2utf8(0x202e, class_utf8data);
        !          3946:               *class_utf8data++ = XCL_RANGE;
        !          3947:               class_utf8data += _pcre_ord2utf8(0x2030, class_utf8data);
        !          3948:               class_utf8data += _pcre_ord2utf8(0x205e, class_utf8data);
        !          3949:               *class_utf8data++ = XCL_RANGE;
        !          3950:               class_utf8data += _pcre_ord2utf8(0x2060, class_utf8data);
        !          3951:               class_utf8data += _pcre_ord2utf8(0x2fff, class_utf8data);
        !          3952:               *class_utf8data++ = XCL_RANGE;
        !          3953:               class_utf8data += _pcre_ord2utf8(0x3001, class_utf8data);
        !          3954:               class_utf8data += _pcre_ord2utf8(0x7fffffff, class_utf8data);
        !          3955:               }
        !          3956: #endif
        !          3957:             continue;
        !          3958: 
        !          3959:             case ESC_v:
        !          3960:             SETBIT(classbits, 0x0a); /* LF */
        !          3961:             SETBIT(classbits, 0x0b); /* VT */
        !          3962:             SETBIT(classbits, 0x0c); /* FF */
        !          3963:             SETBIT(classbits, 0x0d); /* CR */
        !          3964:             SETBIT(classbits, 0x85); /* NEL */
        !          3965: #ifdef SUPPORT_UTF8
        !          3966:             if (utf8)
        !          3967:               {
        !          3968:               class_utf8 = TRUE;
        !          3969:               *class_utf8data++ = XCL_RANGE;
        !          3970:               class_utf8data += _pcre_ord2utf8(0x2028, class_utf8data);
        !          3971:               class_utf8data += _pcre_ord2utf8(0x2029, class_utf8data);
        !          3972:               }
        !          3973: #endif
        !          3974:             continue;
        !          3975: 
        !          3976:             case ESC_V:
        !          3977:             for (c = 0; c < 32; c++)
        !          3978:               {
        !          3979:               int x = 0xff;
        !          3980:               switch (c)
        !          3981:                 {
        !          3982:                 case 0x0a/8: x ^= 1 << (0x0a%8);
        !          3983:                              x ^= 1 << (0x0b%8);
        !          3984:                              x ^= 1 << (0x0c%8);
        !          3985:                              x ^= 1 << (0x0d%8);
        !          3986:                              break;
        !          3987:                 case 0x85/8: x ^= 1 << (0x85%8); break;
        !          3988:                 default: break;
        !          3989:                 }
        !          3990:               classbits[c] |= x;
        !          3991:               }
        !          3992: 
        !          3993: #ifdef SUPPORT_UTF8
        !          3994:             if (utf8)
        !          3995:               {
        !          3996:               class_utf8 = TRUE;
        !          3997:               *class_utf8data++ = XCL_RANGE;
        !          3998:               class_utf8data += _pcre_ord2utf8(0x0100, class_utf8data);
        !          3999:               class_utf8data += _pcre_ord2utf8(0x2027, class_utf8data);
        !          4000:               *class_utf8data++ = XCL_RANGE;
        !          4001:               class_utf8data += _pcre_ord2utf8(0x2029, class_utf8data);
        !          4002:               class_utf8data += _pcre_ord2utf8(0x7fffffff, class_utf8data);
        !          4003:               }
        !          4004: #endif
        !          4005:             continue;
        !          4006: 
        !          4007: #ifdef SUPPORT_UCP
        !          4008:             case ESC_p:
        !          4009:             case ESC_P:
        !          4010:               {
        !          4011:               BOOL negated;
        !          4012:               int pdata;
        !          4013:               int ptype = get_ucp(&ptr, &negated, &pdata, errorcodeptr);
        !          4014:               if (ptype < 0) goto FAILED;
        !          4015:               class_utf8 = TRUE;
        !          4016:               *class_utf8data++ = ((-c == ESC_p) != negated)?
        !          4017:                 XCL_PROP : XCL_NOTPROP;
        !          4018:               *class_utf8data++ = ptype;
        !          4019:               *class_utf8data++ = pdata;
        !          4020:               class_charcount -= 2;   /* Not a < 256 character */
        !          4021:               continue;
        !          4022:               }
        !          4023: #endif
        !          4024:             /* Unrecognized escapes are faulted if PCRE is running in its
        !          4025:             strict mode. By default, for compatibility with Perl, they are
        !          4026:             treated as literals. */
        !          4027: 
        !          4028:             default:
        !          4029:             if ((options & PCRE_EXTRA) != 0)
        !          4030:               {
        !          4031:               *errorcodeptr = ERR7;
        !          4032:               goto FAILED;
        !          4033:               }
        !          4034:             class_charcount -= 2;  /* Undo the default count from above */
        !          4035:             c = *ptr;              /* Get the final character and fall through */
        !          4036:             break;
        !          4037:             }
        !          4038:           }
        !          4039: 
        !          4040:         /* Fall through if we have a single character (c >= 0). This may be
        !          4041:         greater than 256 in UTF-8 mode. */
        !          4042: 
        !          4043:         }   /* End of backslash handling */
        !          4044: 
        !          4045:       /* A single character may be followed by '-' to form a range. However,
        !          4046:       Perl does not permit ']' to be the end of the range. A '-' character
        !          4047:       at the end is treated as a literal. Perl ignores orphaned \E sequences
        !          4048:       entirely. The code for handling \Q and \E is messy. */
        !          4049: 
        !          4050:       CHECK_RANGE:
        !          4051:       while (ptr[1] == CHAR_BACKSLASH && ptr[2] == CHAR_E)
        !          4052:         {
        !          4053:         inescq = FALSE;
        !          4054:         ptr += 2;
        !          4055:         }
        !          4056: 
        !          4057:       oldptr = ptr;
        !          4058: 
        !          4059:       /* Remember \r or \n */
        !          4060: 
        !          4061:       if (c == CHAR_CR || c == CHAR_NL) cd->external_flags |= PCRE_HASCRORLF;
        !          4062: 
        !          4063:       /* Check for range */
        !          4064: 
        !          4065:       if (!inescq && ptr[1] == CHAR_MINUS)
        !          4066:         {
        !          4067:         int d;
        !          4068:         ptr += 2;
        !          4069:         while (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_E) ptr += 2;
        !          4070: 
        !          4071:         /* If we hit \Q (not followed by \E) at this point, go into escaped
        !          4072:         mode. */
        !          4073: 
        !          4074:         while (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_Q)
        !          4075:           {
        !          4076:           ptr += 2;
        !          4077:           if (*ptr == CHAR_BACKSLASH && ptr[1] == CHAR_E)
        !          4078:             { ptr += 2; continue; }
        !          4079:           inescq = TRUE;
        !          4080:           break;
        !          4081:           }
        !          4082: 
        !          4083:         if (*ptr == 0 || (!inescq && *ptr == CHAR_RIGHT_SQUARE_BRACKET))
        !          4084:           {
        !          4085:           ptr = oldptr;
        !          4086:           goto LONE_SINGLE_CHARACTER;
        !          4087:           }
        !          4088: 
        !          4089: #ifdef SUPPORT_UTF8
        !          4090:         if (utf8)
        !          4091:           {                           /* Braces are required because the */
        !          4092:           GETCHARLEN(d, ptr, ptr);    /* macro generates multiple statements */
        !          4093:           }
        !          4094:         else
        !          4095: #endif
        !          4096:         d = *ptr;  /* Not UTF-8 mode */
        !          4097: 
        !          4098:         /* The second part of a range can be a single-character escape, but
        !          4099:         not any of the other escapes. Perl 5.6 treats a hyphen as a literal
        !          4100:         in such circumstances. */
        !          4101: 
        !          4102:         if (!inescq && d == CHAR_BACKSLASH)
        !          4103:           {
        !          4104:           d = check_escape(&ptr, errorcodeptr, cd->bracount, options, TRUE);
        !          4105:           if (*errorcodeptr != 0) goto FAILED;
        !          4106: 
        !          4107:           /* \b is backspace; any other special means the '-' was literal */
        !          4108: 
        !          4109:           if (d < 0)
        !          4110:             {
        !          4111:             if (d == -ESC_b) d = CHAR_BS; else
        !          4112:               {
        !          4113:               ptr = oldptr;
        !          4114:               goto LONE_SINGLE_CHARACTER;  /* A few lines below */
        !          4115:               }
        !          4116:             }
        !          4117:           }
        !          4118: 
        !          4119:         /* Check that the two values are in the correct order. Optimize
        !          4120:         one-character ranges */
        !          4121: 
        !          4122:         if (d < c)
        !          4123:           {
        !          4124:           *errorcodeptr = ERR8;
        !          4125:           goto FAILED;
        !          4126:           }
        !          4127: 
        !          4128:         if (d == c) goto LONE_SINGLE_CHARACTER;  /* A few lines below */
        !          4129: 
        !          4130:         /* Remember \r or \n */
        !          4131: 
        !          4132:         if (d == CHAR_CR || d == CHAR_NL) cd->external_flags |= PCRE_HASCRORLF;
        !          4133: 
        !          4134:         /* In UTF-8 mode, if the upper limit is > 255, or > 127 for caseless
        !          4135:         matching, we have to use an XCLASS with extra data items. Caseless
        !          4136:         matching for characters > 127 is available only if UCP support is
        !          4137:         available. */
        !          4138: 
        !          4139: #ifdef SUPPORT_UTF8
        !          4140:         if (utf8 && (d > 255 || ((options & PCRE_CASELESS) != 0 && d > 127)))
        !          4141:           {
        !          4142:           class_utf8 = TRUE;
        !          4143: 
        !          4144:           /* With UCP support, we can find the other case equivalents of
        !          4145:           the relevant characters. There may be several ranges. Optimize how
        !          4146:           they fit with the basic range. */
        !          4147: 
        !          4148: #ifdef SUPPORT_UCP
        !          4149:           if ((options & PCRE_CASELESS) != 0)
        !          4150:             {
        !          4151:             unsigned int occ, ocd;
        !          4152:             unsigned int cc = c;
        !          4153:             unsigned int origd = d;
        !          4154:             while (get_othercase_range(&cc, origd, &occ, &ocd))
        !          4155:               {
        !          4156:               if (occ >= (unsigned int)c &&
        !          4157:                   ocd <= (unsigned int)d)
        !          4158:                 continue;                          /* Skip embedded ranges */
        !          4159: 
        !          4160:               if (occ < (unsigned int)c  &&
        !          4161:                   ocd >= (unsigned int)c - 1)      /* Extend the basic range */
        !          4162:                 {                                  /* if there is overlap,   */
        !          4163:                 c = occ;                           /* noting that if occ < c */
        !          4164:                 continue;                          /* we can't have ocd > d  */
        !          4165:                 }                                  /* because a subrange is  */
        !          4166:               if (ocd > (unsigned int)d &&
        !          4167:                   occ <= (unsigned int)d + 1)      /* always shorter than    */
        !          4168:                 {                                  /* the basic range.       */
        !          4169:                 d = ocd;
        !          4170:                 continue;
        !          4171:                 }
        !          4172: 
        !          4173:               if (occ == ocd)
        !          4174:                 {
        !          4175:                 *class_utf8data++ = XCL_SINGLE;
        !          4176:                 }
        !          4177:               else
        !          4178:                 {
        !          4179:                 *class_utf8data++ = XCL_RANGE;
        !          4180:                 class_utf8data += _pcre_ord2utf8(occ, class_utf8data);
        !          4181:                 }
        !          4182:               class_utf8data += _pcre_ord2utf8(ocd, class_utf8data);
        !          4183:               }
        !          4184:             }
        !          4185: #endif  /* SUPPORT_UCP */
        !          4186: 
        !          4187:           /* Now record the original range, possibly modified for UCP caseless
        !          4188:           overlapping ranges. */
        !          4189: 
        !          4190:           *class_utf8data++ = XCL_RANGE;
        !          4191:           class_utf8data += _pcre_ord2utf8(c, class_utf8data);
        !          4192:           class_utf8data += _pcre_ord2utf8(d, class_utf8data);
        !          4193: 
        !          4194:           /* With UCP support, we are done. Without UCP support, there is no
        !          4195:           caseless matching for UTF-8 characters > 127; we can use the bit map
        !          4196:           for the smaller ones. */
        !          4197: 
        !          4198: #ifdef SUPPORT_UCP
        !          4199:           continue;    /* With next character in the class */
        !          4200: #else
        !          4201:           if ((options & PCRE_CASELESS) == 0 || c > 127) continue;
        !          4202: 
        !          4203:           /* Adjust upper limit and fall through to set up the map */
        !          4204: 
        !          4205:           d = 127;
        !          4206: 
        !          4207: #endif  /* SUPPORT_UCP */
        !          4208:           }
        !          4209: #endif  /* SUPPORT_UTF8 */
        !          4210: 
        !          4211:         /* We use the bit map for all cases when not in UTF-8 mode; else
        !          4212:         ranges that lie entirely within 0-127 when there is UCP support; else
        !          4213:         for partial ranges without UCP support. */
        !          4214: 
        !          4215:         class_charcount += d - c + 1;
        !          4216:         class_lastchar = d;
        !          4217: 
        !          4218:         /* We can save a bit of time by skipping this in the pre-compile. */
        !          4219: 
        !          4220:         if (lengthptr == NULL) for (; c <= d; c++)
        !          4221:           {
        !          4222:           classbits[c/8] |= (1 << (c&7));
        !          4223:           if ((options & PCRE_CASELESS) != 0)
        !          4224:             {
        !          4225:             int uc = cd->fcc[c];           /* flip case */
        !          4226:             classbits[uc/8] |= (1 << (uc&7));
        !          4227:             }
        !          4228:           }
        !          4229: 
        !          4230:         continue;   /* Go get the next char in the class */
        !          4231:         }
        !          4232: 
        !          4233:       /* Handle a lone single character - we can get here for a normal
        !          4234:       non-escape char, or after \ that introduces a single character or for an
        !          4235:       apparent range that isn't. */
        !          4236: 
        !          4237:       LONE_SINGLE_CHARACTER:
        !          4238: 
        !          4239:       /* Handle a character that cannot go in the bit map */
        !          4240: 
        !          4241: #ifdef SUPPORT_UTF8
        !          4242:       if (utf8 && (c > 255 || ((options & PCRE_CASELESS) != 0 && c > 127)))
        !          4243:         {
        !          4244:         class_utf8 = TRUE;
        !          4245:         *class_utf8data++ = XCL_SINGLE;
        !          4246:         class_utf8data += _pcre_ord2utf8(c, class_utf8data);
        !          4247: 
        !          4248: #ifdef SUPPORT_UCP
        !          4249:         if ((options & PCRE_CASELESS) != 0)
        !          4250:           {
        !          4251:           unsigned int othercase;
        !          4252:           if ((othercase = UCD_OTHERCASE(c)) != c)
        !          4253:             {
        !          4254:             *class_utf8data++ = XCL_SINGLE;
        !          4255:             class_utf8data += _pcre_ord2utf8(othercase, class_utf8data);
        !          4256:             }
        !          4257:           }
        !          4258: #endif  /* SUPPORT_UCP */
        !          4259: 
        !          4260:         }
        !          4261:       else
        !          4262: #endif  /* SUPPORT_UTF8 */
        !          4263: 
        !          4264:       /* Handle a single-byte character */
        !          4265:         {
        !          4266:         classbits[c/8] |= (1 << (c&7));
        !          4267:         if ((options & PCRE_CASELESS) != 0)
        !          4268:           {
        !          4269:           c = cd->fcc[c];   /* flip case */
        !          4270:           classbits[c/8] |= (1 << (c&7));
        !          4271:           }
        !          4272:         class_charcount++;
        !          4273:         class_lastchar = c;
        !          4274:         }
        !          4275:       }
        !          4276: 
        !          4277:     /* Loop until ']' reached. This "while" is the end of the "do" far above.
        !          4278:     If we are at the end of an internal nested string, revert to the outer
        !          4279:     string. */
        !          4280: 
        !          4281:     while (((c = *(++ptr)) != 0 ||
        !          4282:            (nestptr != NULL &&
        !          4283:              (ptr = nestptr, nestptr = NULL, c = *(++ptr)) != 0)) &&
        !          4284:            (c != CHAR_RIGHT_SQUARE_BRACKET || inescq));
        !          4285: 
        !          4286:     /* Check for missing terminating ']' */
        !          4287: 
        !          4288:     if (c == 0)
        !          4289:       {
        !          4290:       *errorcodeptr = ERR6;
        !          4291:       goto FAILED;
        !          4292:       }
        !          4293: 
        !          4294:     /* If class_charcount is 1, we saw precisely one character whose value is
        !          4295:     less than 256. As long as there were no characters >= 128 and there was no
        !          4296:     use of \p or \P, in other words, no use of any XCLASS features, we can
        !          4297:     optimize.
        !          4298: 
        !          4299:     In UTF-8 mode, we can optimize the negative case only if there were no
        !          4300:     characters >= 128 because OP_NOT and the related opcodes like OP_NOTSTAR
        !          4301:     operate on single-bytes characters only. This is an historical hangover.
        !          4302:     Maybe one day we can tidy these opcodes to handle multi-byte characters.
        !          4303: 
        !          4304:     The optimization throws away the bit map. We turn the item into a
        !          4305:     1-character OP_CHAR[I] if it's positive, or OP_NOT[I] if it's negative.
        !          4306:     Note that OP_NOT[I] does not support multibyte characters. In the positive
        !          4307:     case, it can cause firstbyte to be set. Otherwise, there can be no first
        !          4308:     char if this item is first, whatever repeat count may follow. In the case
        !          4309:     of reqbyte, save the previous value for reinstating. */
        !          4310: 
        !          4311: #ifdef SUPPORT_UTF8
        !          4312:     if (class_charcount == 1 && !class_utf8 &&
        !          4313:       (!utf8 || !negate_class || class_lastchar < 128))
        !          4314: #else
        !          4315:     if (class_charcount == 1)
        !          4316: #endif
        !          4317:       {
        !          4318:       zeroreqbyte = reqbyte;
        !          4319: 
        !          4320:       /* The OP_NOT[I] opcodes work on one-byte characters only. */
        !          4321: 
        !          4322:       if (negate_class)
        !          4323:         {
        !          4324:         if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          4325:         zerofirstbyte = firstbyte;
        !          4326:         *code++ = ((options & PCRE_CASELESS) != 0)? OP_NOTI: OP_NOT;
        !          4327:         *code++ = class_lastchar;
        !          4328:         break;
        !          4329:         }
        !          4330: 
        !          4331:       /* For a single, positive character, get the value into mcbuffer, and
        !          4332:       then we can handle this with the normal one-character code. */
        !          4333: 
        !          4334: #ifdef SUPPORT_UTF8
        !          4335:       if (utf8 && class_lastchar > 127)
        !          4336:         mclength = _pcre_ord2utf8(class_lastchar, mcbuffer);
        !          4337:       else
        !          4338: #endif
        !          4339:         {
        !          4340:         mcbuffer[0] = class_lastchar;
        !          4341:         mclength = 1;
        !          4342:         }
        !          4343:       goto ONE_CHAR;
        !          4344:       }       /* End of 1-char optimization */
        !          4345: 
        !          4346:     /* The general case - not the one-char optimization. If this is the first
        !          4347:     thing in the branch, there can be no first char setting, whatever the
        !          4348:     repeat count. Any reqbyte setting must remain unchanged after any kind of
        !          4349:     repeat. */
        !          4350: 
        !          4351:     if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          4352:     zerofirstbyte = firstbyte;
        !          4353:     zeroreqbyte = reqbyte;
        !          4354: 
        !          4355:     /* If there are characters with values > 255, we have to compile an
        !          4356:     extended class, with its own opcode, unless there was a negated special
        !          4357:     such as \S in the class, and PCRE_UCP is not set, because in that case all
        !          4358:     characters > 255 are in the class, so any that were explicitly given as
        !          4359:     well can be ignored. If (when there are explicit characters > 255 that must
        !          4360:     be listed) there are no characters < 256, we can omit the bitmap in the
        !          4361:     actual compiled code. */
        !          4362: 
        !          4363: #ifdef SUPPORT_UTF8
        !          4364:     if (class_utf8 && (!should_flip_negation || (options & PCRE_UCP) != 0))
        !          4365:       {
        !          4366:       *class_utf8data++ = XCL_END;    /* Marks the end of extra data */
        !          4367:       *code++ = OP_XCLASS;
        !          4368:       code += LINK_SIZE;
        !          4369:       *code = negate_class? XCL_NOT : 0;
        !          4370: 
        !          4371:       /* If the map is required, move up the extra data to make room for it;
        !          4372:       otherwise just move the code pointer to the end of the extra data. */
        !          4373: 
        !          4374:       if (class_charcount > 0)
        !          4375:         {
        !          4376:         *code++ |= XCL_MAP;
        !          4377:         memmove(code + 32, code, class_utf8data - code);
        !          4378:         memcpy(code, classbits, 32);
        !          4379:         code = class_utf8data + 32;
        !          4380:         }
        !          4381:       else code = class_utf8data;
        !          4382: 
        !          4383:       /* Now fill in the complete length of the item */
        !          4384: 
        !          4385:       PUT(previous, 1, (int)(code - previous));
        !          4386:       break;   /* End of class handling */
        !          4387:       }
        !          4388: #endif
        !          4389: 
        !          4390:     /* If there are no characters > 255, or they are all to be included or
        !          4391:     excluded, set the opcode to OP_CLASS or OP_NCLASS, depending on whether the
        !          4392:     whole class was negated and whether there were negative specials such as \S
        !          4393:     (non-UCP) in the class. Then copy the 32-byte map into the code vector,
        !          4394:     negating it if necessary. */
        !          4395: 
        !          4396:     *code++ = (negate_class == should_flip_negation) ? OP_CLASS : OP_NCLASS;
        !          4397:     if (negate_class)
        !          4398:       {
        !          4399:       if (lengthptr == NULL)    /* Save time in the pre-compile phase */
        !          4400:         for (c = 0; c < 32; c++) code[c] = ~classbits[c];
        !          4401:       }
        !          4402:     else
        !          4403:       {
        !          4404:       memcpy(code, classbits, 32);
        !          4405:       }
        !          4406:     code += 32;
        !          4407:     break;
        !          4408: 
        !          4409: 
        !          4410:     /* ===================================================================*/
        !          4411:     /* Various kinds of repeat; '{' is not necessarily a quantifier, but this
        !          4412:     has been tested above. */
        !          4413: 
        !          4414:     case CHAR_LEFT_CURLY_BRACKET:
        !          4415:     if (!is_quantifier) goto NORMAL_CHAR;
        !          4416:     ptr = read_repeat_counts(ptr+1, &repeat_min, &repeat_max, errorcodeptr);
        !          4417:     if (*errorcodeptr != 0) goto FAILED;
        !          4418:     goto REPEAT;
        !          4419: 
        !          4420:     case CHAR_ASTERISK:
        !          4421:     repeat_min = 0;
        !          4422:     repeat_max = -1;
        !          4423:     goto REPEAT;
        !          4424: 
        !          4425:     case CHAR_PLUS:
        !          4426:     repeat_min = 1;
        !          4427:     repeat_max = -1;
        !          4428:     goto REPEAT;
        !          4429: 
        !          4430:     case CHAR_QUESTION_MARK:
        !          4431:     repeat_min = 0;
        !          4432:     repeat_max = 1;
        !          4433: 
        !          4434:     REPEAT:
        !          4435:     if (previous == NULL)
        !          4436:       {
        !          4437:       *errorcodeptr = ERR9;
        !          4438:       goto FAILED;
        !          4439:       }
        !          4440: 
        !          4441:     if (repeat_min == 0)
        !          4442:       {
        !          4443:       firstbyte = zerofirstbyte;    /* Adjust for zero repeat */
        !          4444:       reqbyte = zeroreqbyte;        /* Ditto */
        !          4445:       }
        !          4446: 
        !          4447:     /* Remember whether this is a variable length repeat */
        !          4448: 
        !          4449:     reqvary = (repeat_min == repeat_max)? 0 : REQ_VARY;
        !          4450: 
        !          4451:     op_type = 0;                    /* Default single-char op codes */
        !          4452:     possessive_quantifier = FALSE;  /* Default not possessive quantifier */
        !          4453: 
        !          4454:     /* Save start of previous item, in case we have to move it up in order to
        !          4455:     insert something before it. */
        !          4456: 
        !          4457:     tempcode = previous;
        !          4458: 
        !          4459:     /* If the next character is '+', we have a possessive quantifier. This
        !          4460:     implies greediness, whatever the setting of the PCRE_UNGREEDY option.
        !          4461:     If the next character is '?' this is a minimizing repeat, by default,
        !          4462:     but if PCRE_UNGREEDY is set, it works the other way round. We change the
        !          4463:     repeat type to the non-default. */
        !          4464: 
        !          4465:     if (ptr[1] == CHAR_PLUS)
        !          4466:       {
        !          4467:       repeat_type = 0;                  /* Force greedy */
        !          4468:       possessive_quantifier = TRUE;
        !          4469:       ptr++;
        !          4470:       }
        !          4471:     else if (ptr[1] == CHAR_QUESTION_MARK)
        !          4472:       {
        !          4473:       repeat_type = greedy_non_default;
        !          4474:       ptr++;
        !          4475:       }
        !          4476:     else repeat_type = greedy_default;
        !          4477: 
        !          4478:     /* If previous was a recursion call, wrap it in atomic brackets so that
        !          4479:     previous becomes the atomic group. All recursions were so wrapped in the
        !          4480:     past, but it no longer happens for non-repeated recursions. In fact, the
        !          4481:     repeated ones could be re-implemented independently so as not to need this,
        !          4482:     but for the moment we rely on the code for repeating groups. */
        !          4483: 
        !          4484:     if (*previous == OP_RECURSE)
        !          4485:       {
        !          4486:       memmove(previous + 1 + LINK_SIZE, previous, 1 + LINK_SIZE);
        !          4487:       *previous = OP_ONCE;
        !          4488:       PUT(previous, 1, 2 + 2*LINK_SIZE);
        !          4489:       previous[2 + 2*LINK_SIZE] = OP_KET;
        !          4490:       PUT(previous, 3 + 2*LINK_SIZE, 2 + 2*LINK_SIZE);
        !          4491:       code += 2 + 2 * LINK_SIZE;
        !          4492:       length_prevgroup = 3 + 3*LINK_SIZE;
        !          4493: 
        !          4494:       /* When actually compiling, we need to check whether this was a forward
        !          4495:       reference, and if so, adjust the offset. */
        !          4496: 
        !          4497:       if (lengthptr == NULL && cd->hwm >= cd->start_workspace + LINK_SIZE)
        !          4498:         {
        !          4499:         int offset = GET(cd->hwm, -LINK_SIZE);
        !          4500:         if (offset == previous + 1 - cd->start_code)
        !          4501:           PUT(cd->hwm, -LINK_SIZE, offset + 1 + LINK_SIZE);
        !          4502:         }
        !          4503:       }
        !          4504: 
        !          4505:     /* Now handle repetition for the different types of item. */
        !          4506: 
        !          4507:     /* If previous was a character match, abolish the item and generate a
        !          4508:     repeat item instead. If a char item has a minumum of more than one, ensure
        !          4509:     that it is set in reqbyte - it might not be if a sequence such as x{3} is
        !          4510:     the first thing in a branch because the x will have gone into firstbyte
        !          4511:     instead.  */
        !          4512: 
        !          4513:     if (*previous == OP_CHAR || *previous == OP_CHARI)
        !          4514:       {
        !          4515:       op_type = (*previous == OP_CHAR)? 0 : OP_STARI - OP_STAR;
        !          4516: 
        !          4517:       /* Deal with UTF-8 characters that take up more than one byte. It's
        !          4518:       easier to write this out separately than try to macrify it. Use c to
        !          4519:       hold the length of the character in bytes, plus 0x80 to flag that it's a
        !          4520:       length rather than a small character. */
        !          4521: 
        !          4522: #ifdef SUPPORT_UTF8
        !          4523:       if (utf8 && (code[-1] & 0x80) != 0)
        !          4524:         {
        !          4525:         uschar *lastchar = code - 1;
        !          4526:         while((*lastchar & 0xc0) == 0x80) lastchar--;
        !          4527:         c = (int)(code - lastchar);     /* Length of UTF-8 character */
        !          4528:         memcpy(utf8_char, lastchar, c); /* Save the char */
        !          4529:         c |= 0x80;                      /* Flag c as a length */
        !          4530:         }
        !          4531:       else
        !          4532: #endif
        !          4533: 
        !          4534:       /* Handle the case of a single byte - either with no UTF8 support, or
        !          4535:       with UTF-8 disabled, or for a UTF-8 character < 128. */
        !          4536: 
        !          4537:         {
        !          4538:         c = code[-1];
        !          4539:         if (repeat_min > 1) reqbyte = c | req_caseopt | cd->req_varyopt;
        !          4540:         }
        !          4541: 
        !          4542:       /* If the repetition is unlimited, it pays to see if the next thing on
        !          4543:       the line is something that cannot possibly match this character. If so,
        !          4544:       automatically possessifying this item gains some performance in the case
        !          4545:       where the match fails. */
        !          4546: 
        !          4547:       if (!possessive_quantifier &&
        !          4548:           repeat_max < 0 &&
        !          4549:           check_auto_possessive(previous, utf8, ptr + 1, options, cd))
        !          4550:         {
        !          4551:         repeat_type = 0;    /* Force greedy */
        !          4552:         possessive_quantifier = TRUE;
        !          4553:         }
        !          4554: 
        !          4555:       goto OUTPUT_SINGLE_REPEAT;   /* Code shared with single character types */
        !          4556:       }
        !          4557: 
        !          4558:     /* If previous was a single negated character ([^a] or similar), we use
        !          4559:     one of the special opcodes, replacing it. The code is shared with single-
        !          4560:     character repeats by setting opt_type to add a suitable offset into
        !          4561:     repeat_type. We can also test for auto-possessification. OP_NOT and OP_NOTI
        !          4562:     are currently used only for single-byte chars. */
        !          4563: 
        !          4564:     else if (*previous == OP_NOT || *previous == OP_NOTI)
        !          4565:       {
        !          4566:       op_type = ((*previous == OP_NOT)? OP_NOTSTAR : OP_NOTSTARI) - OP_STAR;
        !          4567:       c = previous[1];
        !          4568:       if (!possessive_quantifier &&
        !          4569:           repeat_max < 0 &&
        !          4570:           check_auto_possessive(previous, utf8, ptr + 1, options, cd))
        !          4571:         {
        !          4572:         repeat_type = 0;    /* Force greedy */
        !          4573:         possessive_quantifier = TRUE;
        !          4574:         }
        !          4575:       goto OUTPUT_SINGLE_REPEAT;
        !          4576:       }
        !          4577: 
        !          4578:     /* If previous was a character type match (\d or similar), abolish it and
        !          4579:     create a suitable repeat item. The code is shared with single-character
        !          4580:     repeats by setting op_type to add a suitable offset into repeat_type. Note
        !          4581:     the the Unicode property types will be present only when SUPPORT_UCP is
        !          4582:     defined, but we don't wrap the little bits of code here because it just
        !          4583:     makes it horribly messy. */
        !          4584: 
        !          4585:     else if (*previous < OP_EODN)
        !          4586:       {
        !          4587:       uschar *oldcode;
        !          4588:       int prop_type, prop_value;
        !          4589:       op_type = OP_TYPESTAR - OP_STAR;  /* Use type opcodes */
        !          4590:       c = *previous;
        !          4591: 
        !          4592:       if (!possessive_quantifier &&
        !          4593:           repeat_max < 0 &&
        !          4594:           check_auto_possessive(previous, utf8, ptr + 1, options, cd))
        !          4595:         {
        !          4596:         repeat_type = 0;    /* Force greedy */
        !          4597:         possessive_quantifier = TRUE;
        !          4598:         }
        !          4599: 
        !          4600:       OUTPUT_SINGLE_REPEAT:
        !          4601:       if (*previous == OP_PROP || *previous == OP_NOTPROP)
        !          4602:         {
        !          4603:         prop_type = previous[1];
        !          4604:         prop_value = previous[2];
        !          4605:         }
        !          4606:       else prop_type = prop_value = -1;
        !          4607: 
        !          4608:       oldcode = code;
        !          4609:       code = previous;                  /* Usually overwrite previous item */
        !          4610: 
        !          4611:       /* If the maximum is zero then the minimum must also be zero; Perl allows
        !          4612:       this case, so we do too - by simply omitting the item altogether. */
        !          4613: 
        !          4614:       if (repeat_max == 0) goto END_REPEAT;
        !          4615: 
        !          4616:       /*--------------------------------------------------------------------*/
        !          4617:       /* This code is obsolete from release 8.00; the restriction was finally
        !          4618:       removed: */
        !          4619: 
        !          4620:       /* All real repeats make it impossible to handle partial matching (maybe
        !          4621:       one day we will be able to remove this restriction). */
        !          4622: 
        !          4623:       /* if (repeat_max != 1) cd->external_flags |= PCRE_NOPARTIAL; */
        !          4624:       /*--------------------------------------------------------------------*/
        !          4625: 
        !          4626:       /* Combine the op_type with the repeat_type */
        !          4627: 
        !          4628:       repeat_type += op_type;
        !          4629: 
        !          4630:       /* A minimum of zero is handled either as the special case * or ?, or as
        !          4631:       an UPTO, with the maximum given. */
        !          4632: 
        !          4633:       if (repeat_min == 0)
        !          4634:         {
        !          4635:         if (repeat_max == -1) *code++ = OP_STAR + repeat_type;
        !          4636:           else if (repeat_max == 1) *code++ = OP_QUERY + repeat_type;
        !          4637:         else
        !          4638:           {
        !          4639:           *code++ = OP_UPTO + repeat_type;
        !          4640:           PUT2INC(code, 0, repeat_max);
        !          4641:           }
        !          4642:         }
        !          4643: 
        !          4644:       /* A repeat minimum of 1 is optimized into some special cases. If the
        !          4645:       maximum is unlimited, we use OP_PLUS. Otherwise, the original item is
        !          4646:       left in place and, if the maximum is greater than 1, we use OP_UPTO with
        !          4647:       one less than the maximum. */
        !          4648: 
        !          4649:       else if (repeat_min == 1)
        !          4650:         {
        !          4651:         if (repeat_max == -1)
        !          4652:           *code++ = OP_PLUS + repeat_type;
        !          4653:         else
        !          4654:           {
        !          4655:           code = oldcode;                 /* leave previous item in place */
        !          4656:           if (repeat_max == 1) goto END_REPEAT;
        !          4657:           *code++ = OP_UPTO + repeat_type;
        !          4658:           PUT2INC(code, 0, repeat_max - 1);
        !          4659:           }
        !          4660:         }
        !          4661: 
        !          4662:       /* The case {n,n} is just an EXACT, while the general case {n,m} is
        !          4663:       handled as an EXACT followed by an UPTO. */
        !          4664: 
        !          4665:       else
        !          4666:         {
        !          4667:         *code++ = OP_EXACT + op_type;  /* NB EXACT doesn't have repeat_type */
        !          4668:         PUT2INC(code, 0, repeat_min);
        !          4669: 
        !          4670:         /* If the maximum is unlimited, insert an OP_STAR. Before doing so,
        !          4671:         we have to insert the character for the previous code. For a repeated
        !          4672:         Unicode property match, there are two extra bytes that define the
        !          4673:         required property. In UTF-8 mode, long characters have their length in
        !          4674:         c, with the 0x80 bit as a flag. */
        !          4675: 
        !          4676:         if (repeat_max < 0)
        !          4677:           {
        !          4678: #ifdef SUPPORT_UTF8
        !          4679:           if (utf8 && c >= 128)
        !          4680:             {
        !          4681:             memcpy(code, utf8_char, c & 7);
        !          4682:             code += c & 7;
        !          4683:             }
        !          4684:           else
        !          4685: #endif
        !          4686:             {
        !          4687:             *code++ = c;
        !          4688:             if (prop_type >= 0)
        !          4689:               {
        !          4690:               *code++ = prop_type;
        !          4691:               *code++ = prop_value;
        !          4692:               }
        !          4693:             }
        !          4694:           *code++ = OP_STAR + repeat_type;
        !          4695:           }
        !          4696: 
        !          4697:         /* Else insert an UPTO if the max is greater than the min, again
        !          4698:         preceded by the character, for the previously inserted code. If the
        !          4699:         UPTO is just for 1 instance, we can use QUERY instead. */
        !          4700: 
        !          4701:         else if (repeat_max != repeat_min)
        !          4702:           {
        !          4703: #ifdef SUPPORT_UTF8
        !          4704:           if (utf8 && c >= 128)
        !          4705:             {
        !          4706:             memcpy(code, utf8_char, c & 7);
        !          4707:             code += c & 7;
        !          4708:             }
        !          4709:           else
        !          4710: #endif
        !          4711:           *code++ = c;
        !          4712:           if (prop_type >= 0)
        !          4713:             {
        !          4714:             *code++ = prop_type;
        !          4715:             *code++ = prop_value;
        !          4716:             }
        !          4717:           repeat_max -= repeat_min;
        !          4718: 
        !          4719:           if (repeat_max == 1)
        !          4720:             {
        !          4721:             *code++ = OP_QUERY + repeat_type;
        !          4722:             }
        !          4723:           else
        !          4724:             {
        !          4725:             *code++ = OP_UPTO + repeat_type;
        !          4726:             PUT2INC(code, 0, repeat_max);
        !          4727:             }
        !          4728:           }
        !          4729:         }
        !          4730: 
        !          4731:       /* The character or character type itself comes last in all cases. */
        !          4732: 
        !          4733: #ifdef SUPPORT_UTF8
        !          4734:       if (utf8 && c >= 128)
        !          4735:         {
        !          4736:         memcpy(code, utf8_char, c & 7);
        !          4737:         code += c & 7;
        !          4738:         }
        !          4739:       else
        !          4740: #endif
        !          4741:       *code++ = c;
        !          4742: 
        !          4743:       /* For a repeated Unicode property match, there are two extra bytes that
        !          4744:       define the required property. */
        !          4745: 
        !          4746: #ifdef SUPPORT_UCP
        !          4747:       if (prop_type >= 0)
        !          4748:         {
        !          4749:         *code++ = prop_type;
        !          4750:         *code++ = prop_value;
        !          4751:         }
        !          4752: #endif
        !          4753:       }
        !          4754: 
        !          4755:     /* If previous was a character class or a back reference, we put the repeat
        !          4756:     stuff after it, but just skip the item if the repeat was {0,0}. */
        !          4757: 
        !          4758:     else if (*previous == OP_CLASS ||
        !          4759:              *previous == OP_NCLASS ||
        !          4760: #ifdef SUPPORT_UTF8
        !          4761:              *previous == OP_XCLASS ||
        !          4762: #endif
        !          4763:              *previous == OP_REF ||
        !          4764:              *previous == OP_REFI)
        !          4765:       {
        !          4766:       if (repeat_max == 0)
        !          4767:         {
        !          4768:         code = previous;
        !          4769:         goto END_REPEAT;
        !          4770:         }
        !          4771: 
        !          4772:       /*--------------------------------------------------------------------*/
        !          4773:       /* This code is obsolete from release 8.00; the restriction was finally
        !          4774:       removed: */
        !          4775: 
        !          4776:       /* All real repeats make it impossible to handle partial matching (maybe
        !          4777:       one day we will be able to remove this restriction). */
        !          4778: 
        !          4779:       /* if (repeat_max != 1) cd->external_flags |= PCRE_NOPARTIAL; */
        !          4780:       /*--------------------------------------------------------------------*/
        !          4781: 
        !          4782:       if (repeat_min == 0 && repeat_max == -1)
        !          4783:         *code++ = OP_CRSTAR + repeat_type;
        !          4784:       else if (repeat_min == 1 && repeat_max == -1)
        !          4785:         *code++ = OP_CRPLUS + repeat_type;
        !          4786:       else if (repeat_min == 0 && repeat_max == 1)
        !          4787:         *code++ = OP_CRQUERY + repeat_type;
        !          4788:       else
        !          4789:         {
        !          4790:         *code++ = OP_CRRANGE + repeat_type;
        !          4791:         PUT2INC(code, 0, repeat_min);
        !          4792:         if (repeat_max == -1) repeat_max = 0;  /* 2-byte encoding for max */
        !          4793:         PUT2INC(code, 0, repeat_max);
        !          4794:         }
        !          4795:       }
        !          4796: 
        !          4797:     /* If previous was a bracket group, we may have to replicate it in certain
        !          4798:     cases. Note that at this point we can encounter only the "basic" bracket
        !          4799:     opcodes such as BRA and CBRA, as this is the place where they get converted
        !          4800:     into the more special varieties such as BRAPOS and SBRA. A test for >=
        !          4801:     OP_ASSERT and <= OP_COND includes ASSERT, ASSERT_NOT, ASSERTBACK,
        !          4802:     ASSERTBACK_NOT, ONCE, BRA, CBRA, and COND. Originally, PCRE did not allow
        !          4803:     repetition of assertions, but now it does, for Perl compatibility. */
        !          4804: 
        !          4805:     else if (*previous >= OP_ASSERT && *previous <= OP_COND)
        !          4806:       {
        !          4807:       register int i;
        !          4808:       int len = (int)(code - previous);
        !          4809:       uschar *bralink = NULL;
        !          4810:       uschar *brazeroptr = NULL;
        !          4811: 
        !          4812:       /* Repeating a DEFINE group is pointless, but Perl allows the syntax, so
        !          4813:       we just ignore the repeat. */
        !          4814: 
        !          4815:       if (*previous == OP_COND && previous[LINK_SIZE+1] == OP_DEF)
        !          4816:         goto END_REPEAT;
        !          4817: 
        !          4818:       /* There is no sense in actually repeating assertions. The only potential
        !          4819:       use of repetition is in cases when the assertion is optional. Therefore,
        !          4820:       if the minimum is greater than zero, just ignore the repeat. If the
        !          4821:       maximum is not not zero or one, set it to 1. */
        !          4822: 
        !          4823:       if (*previous < OP_ONCE)    /* Assertion */
        !          4824:         {
        !          4825:         if (repeat_min > 0) goto END_REPEAT;
        !          4826:         if (repeat_max < 0 || repeat_max > 1) repeat_max = 1;
        !          4827:         }
        !          4828: 
        !          4829:       /* The case of a zero minimum is special because of the need to stick
        !          4830:       OP_BRAZERO in front of it, and because the group appears once in the
        !          4831:       data, whereas in other cases it appears the minimum number of times. For
        !          4832:       this reason, it is simplest to treat this case separately, as otherwise
        !          4833:       the code gets far too messy. There are several special subcases when the
        !          4834:       minimum is zero. */
        !          4835: 
        !          4836:       if (repeat_min == 0)
        !          4837:         {
        !          4838:         /* If the maximum is also zero, we used to just omit the group from the
        !          4839:         output altogether, like this:
        !          4840: 
        !          4841:         ** if (repeat_max == 0)
        !          4842:         **   {
        !          4843:         **   code = previous;
        !          4844:         **   goto END_REPEAT;
        !          4845:         **   }
        !          4846: 
        !          4847:         However, that fails when a group or a subgroup within it is referenced
        !          4848:         as a subroutine from elsewhere in the pattern, so now we stick in
        !          4849:         OP_SKIPZERO in front of it so that it is skipped on execution. As we
        !          4850:         don't have a list of which groups are referenced, we cannot do this
        !          4851:         selectively.
        !          4852: 
        !          4853:         If the maximum is 1 or unlimited, we just have to stick in the BRAZERO
        !          4854:         and do no more at this point. However, we do need to adjust any
        !          4855:         OP_RECURSE calls inside the group that refer to the group itself or any
        !          4856:         internal or forward referenced group, because the offset is from the
        !          4857:         start of the whole regex. Temporarily terminate the pattern while doing
        !          4858:         this. */
        !          4859: 
        !          4860:         if (repeat_max <= 1)    /* Covers 0, 1, and unlimited */
        !          4861:           {
        !          4862:           *code = OP_END;
        !          4863:           adjust_recurse(previous, 1, utf8, cd, save_hwm);
        !          4864:           memmove(previous+1, previous, len);
        !          4865:           code++;
        !          4866:           if (repeat_max == 0)
        !          4867:             {
        !          4868:             *previous++ = OP_SKIPZERO;
        !          4869:             goto END_REPEAT;
        !          4870:             }
        !          4871:           brazeroptr = previous;    /* Save for possessive optimizing */
        !          4872:           *previous++ = OP_BRAZERO + repeat_type;
        !          4873:           }
        !          4874: 
        !          4875:         /* If the maximum is greater than 1 and limited, we have to replicate
        !          4876:         in a nested fashion, sticking OP_BRAZERO before each set of brackets.
        !          4877:         The first one has to be handled carefully because it's the original
        !          4878:         copy, which has to be moved up. The remainder can be handled by code
        !          4879:         that is common with the non-zero minimum case below. We have to
        !          4880:         adjust the value or repeat_max, since one less copy is required. Once
        !          4881:         again, we may have to adjust any OP_RECURSE calls inside the group. */
        !          4882: 
        !          4883:         else
        !          4884:           {
        !          4885:           int offset;
        !          4886:           *code = OP_END;
        !          4887:           adjust_recurse(previous, 2 + LINK_SIZE, utf8, cd, save_hwm);
        !          4888:           memmove(previous + 2 + LINK_SIZE, previous, len);
        !          4889:           code += 2 + LINK_SIZE;
        !          4890:           *previous++ = OP_BRAZERO + repeat_type;
        !          4891:           *previous++ = OP_BRA;
        !          4892: 
        !          4893:           /* We chain together the bracket offset fields that have to be
        !          4894:           filled in later when the ends of the brackets are reached. */
        !          4895: 
        !          4896:           offset = (bralink == NULL)? 0 : (int)(previous - bralink);
        !          4897:           bralink = previous;
        !          4898:           PUTINC(previous, 0, offset);
        !          4899:           }
        !          4900: 
        !          4901:         repeat_max--;
        !          4902:         }
        !          4903: 
        !          4904:       /* If the minimum is greater than zero, replicate the group as many
        !          4905:       times as necessary, and adjust the maximum to the number of subsequent
        !          4906:       copies that we need. If we set a first char from the group, and didn't
        !          4907:       set a required char, copy the latter from the former. If there are any
        !          4908:       forward reference subroutine calls in the group, there will be entries on
        !          4909:       the workspace list; replicate these with an appropriate increment. */
        !          4910: 
        !          4911:       else
        !          4912:         {
        !          4913:         if (repeat_min > 1)
        !          4914:           {
        !          4915:           /* In the pre-compile phase, we don't actually do the replication. We
        !          4916:           just adjust the length as if we had. Do some paranoid checks for
        !          4917:           potential integer overflow. The INT64_OR_DOUBLE type is a 64-bit
        !          4918:           integer type when available, otherwise double. */
        !          4919: 
        !          4920:           if (lengthptr != NULL)
        !          4921:             {
        !          4922:             int delta = (repeat_min - 1)*length_prevgroup;
        !          4923:             if ((INT64_OR_DOUBLE)(repeat_min - 1)*
        !          4924:                   (INT64_OR_DOUBLE)length_prevgroup >
        !          4925:                     (INT64_OR_DOUBLE)INT_MAX ||
        !          4926:                 OFLOW_MAX - *lengthptr < delta)
        !          4927:               {
        !          4928:               *errorcodeptr = ERR20;
        !          4929:               goto FAILED;
        !          4930:               }
        !          4931:             *lengthptr += delta;
        !          4932:             }
        !          4933: 
        !          4934:           /* This is compiling for real. If there is a set first byte for
        !          4935:           the group, and we have not yet set a "required byte", set it. Make
        !          4936:           sure there is enough workspace for copying forward references before
        !          4937:           doing the copy. */
        !          4938: 
        !          4939:           else
        !          4940:             {
        !          4941:             if (groupsetfirstbyte && reqbyte < 0) reqbyte = firstbyte;
        !          4942: 
        !          4943:             for (i = 1; i < repeat_min; i++)
        !          4944:               {
        !          4945:               uschar *hc;
        !          4946:               uschar *this_hwm = cd->hwm;
        !          4947:               memcpy(code, previous, len);
        !          4948: 
        !          4949:               while (cd->hwm > cd->start_workspace + cd->workspace_size -
        !          4950:                      WORK_SIZE_SAFETY_MARGIN - (this_hwm - save_hwm))
        !          4951:                 {
        !          4952:                 int save_offset = save_hwm - cd->start_workspace;
        !          4953:                 int this_offset = this_hwm - cd->start_workspace;
        !          4954:                 *errorcodeptr = expand_workspace(cd);
        !          4955:                 if (*errorcodeptr != 0) goto FAILED;
        !          4956:                 save_hwm = (uschar *)cd->start_workspace + save_offset;
        !          4957:                 this_hwm = (uschar *)cd->start_workspace + this_offset;
        !          4958:                 }
        !          4959: 
        !          4960:               for (hc = save_hwm; hc < this_hwm; hc += LINK_SIZE)
        !          4961:                 {
        !          4962:                 PUT(cd->hwm, 0, GET(hc, 0) + len);
        !          4963:                 cd->hwm += LINK_SIZE;
        !          4964:                 }
        !          4965:               save_hwm = this_hwm;
        !          4966:               code += len;
        !          4967:               }
        !          4968:             }
        !          4969:           }
        !          4970: 
        !          4971:         if (repeat_max > 0) repeat_max -= repeat_min;
        !          4972:         }
        !          4973: 
        !          4974:       /* This code is common to both the zero and non-zero minimum cases. If
        !          4975:       the maximum is limited, it replicates the group in a nested fashion,
        !          4976:       remembering the bracket starts on a stack. In the case of a zero minimum,
        !          4977:       the first one was set up above. In all cases the repeat_max now specifies
        !          4978:       the number of additional copies needed. Again, we must remember to
        !          4979:       replicate entries on the forward reference list. */
        !          4980: 
        !          4981:       if (repeat_max >= 0)
        !          4982:         {
        !          4983:         /* In the pre-compile phase, we don't actually do the replication. We
        !          4984:         just adjust the length as if we had. For each repetition we must add 1
        !          4985:         to the length for BRAZERO and for all but the last repetition we must
        !          4986:         add 2 + 2*LINKSIZE to allow for the nesting that occurs. Do some
        !          4987:         paranoid checks to avoid integer overflow. The INT64_OR_DOUBLE type is
        !          4988:         a 64-bit integer type when available, otherwise double. */
        !          4989: 
        !          4990:         if (lengthptr != NULL && repeat_max > 0)
        !          4991:           {
        !          4992:           int delta = repeat_max * (length_prevgroup + 1 + 2 + 2*LINK_SIZE) -
        !          4993:                       2 - 2*LINK_SIZE;   /* Last one doesn't nest */
        !          4994:           if ((INT64_OR_DOUBLE)repeat_max *
        !          4995:                 (INT64_OR_DOUBLE)(length_prevgroup + 1 + 2 + 2*LINK_SIZE)
        !          4996:                   > (INT64_OR_DOUBLE)INT_MAX ||
        !          4997:               OFLOW_MAX - *lengthptr < delta)
        !          4998:             {
        !          4999:             *errorcodeptr = ERR20;
        !          5000:             goto FAILED;
        !          5001:             }
        !          5002:           *lengthptr += delta;
        !          5003:           }
        !          5004: 
        !          5005:         /* This is compiling for real */
        !          5006: 
        !          5007:         else for (i = repeat_max - 1; i >= 0; i--)
        !          5008:           {
        !          5009:           uschar *hc;
        !          5010:           uschar *this_hwm = cd->hwm;
        !          5011: 
        !          5012:           *code++ = OP_BRAZERO + repeat_type;
        !          5013: 
        !          5014:           /* All but the final copy start a new nesting, maintaining the
        !          5015:           chain of brackets outstanding. */
        !          5016: 
        !          5017:           if (i != 0)
        !          5018:             {
        !          5019:             int offset;
        !          5020:             *code++ = OP_BRA;
        !          5021:             offset = (bralink == NULL)? 0 : (int)(code - bralink);
        !          5022:             bralink = code;
        !          5023:             PUTINC(code, 0, offset);
        !          5024:             }
        !          5025: 
        !          5026:           memcpy(code, previous, len);
        !          5027: 
        !          5028:           /* Ensure there is enough workspace for forward references before
        !          5029:           copying them. */
        !          5030: 
        !          5031:           while (cd->hwm > cd->start_workspace + cd->workspace_size -
        !          5032:                  WORK_SIZE_SAFETY_MARGIN - (this_hwm - save_hwm))
        !          5033:             {
        !          5034:             int save_offset = save_hwm - cd->start_workspace;
        !          5035:             int this_offset = this_hwm - cd->start_workspace;
        !          5036:             *errorcodeptr = expand_workspace(cd);
        !          5037:             if (*errorcodeptr != 0) goto FAILED;
        !          5038:             save_hwm = (uschar *)cd->start_workspace + save_offset;
        !          5039:             this_hwm = (uschar *)cd->start_workspace + this_offset;
        !          5040:             }
        !          5041: 
        !          5042:           for (hc = save_hwm; hc < this_hwm; hc += LINK_SIZE)
        !          5043:             {
        !          5044:             PUT(cd->hwm, 0, GET(hc, 0) + len + ((i != 0)? 2+LINK_SIZE : 1));
        !          5045:             cd->hwm += LINK_SIZE;
        !          5046:             }
        !          5047:           save_hwm = this_hwm;
        !          5048:           code += len;
        !          5049:           }
        !          5050: 
        !          5051:         /* Now chain through the pending brackets, and fill in their length
        !          5052:         fields (which are holding the chain links pro tem). */
        !          5053: 
        !          5054:         while (bralink != NULL)
        !          5055:           {
        !          5056:           int oldlinkoffset;
        !          5057:           int offset = (int)(code - bralink + 1);
        !          5058:           uschar *bra = code - offset;
        !          5059:           oldlinkoffset = GET(bra, 1);
        !          5060:           bralink = (oldlinkoffset == 0)? NULL : bralink - oldlinkoffset;
        !          5061:           *code++ = OP_KET;
        !          5062:           PUTINC(code, 0, offset);
        !          5063:           PUT(bra, 1, offset);
        !          5064:           }
        !          5065:         }
        !          5066: 
        !          5067:       /* If the maximum is unlimited, set a repeater in the final copy. For
        !          5068:       ONCE brackets, that's all we need to do. However, possessively repeated
        !          5069:       ONCE brackets can be converted into non-capturing brackets, as the
        !          5070:       behaviour of (?:xx)++ is the same as (?>xx)++ and this saves having to
        !          5071:       deal with possessive ONCEs specially.
        !          5072: 
        !          5073:       Otherwise, when we are doing the actual compile phase, check to see
        !          5074:       whether this group is one that could match an empty string. If so,
        !          5075:       convert the initial operator to the S form (e.g. OP_BRA -> OP_SBRA) so
        !          5076:       that runtime checking can be done. [This check is also applied to ONCE
        !          5077:       groups at runtime, but in a different way.]
        !          5078: 
        !          5079:       Then, if the quantifier was possessive and the bracket is not a
        !          5080:       conditional, we convert the BRA code to the POS form, and the KET code to
        !          5081:       KETRPOS. (It turns out to be convenient at runtime to detect this kind of
        !          5082:       subpattern at both the start and at the end.) The use of special opcodes
        !          5083:       makes it possible to reduce greatly the stack usage in pcre_exec(). If
        !          5084:       the group is preceded by OP_BRAZERO, convert this to OP_BRAPOSZERO.
        !          5085: 
        !          5086:       Then, if the minimum number of matches is 1 or 0, cancel the possessive
        !          5087:       flag so that the default action below, of wrapping everything inside
        !          5088:       atomic brackets, does not happen. When the minimum is greater than 1,
        !          5089:       there will be earlier copies of the group, and so we still have to wrap
        !          5090:       the whole thing. */
        !          5091: 
        !          5092:       else
        !          5093:         {
        !          5094:         uschar *ketcode = code - 1 - LINK_SIZE;
        !          5095:         uschar *bracode = ketcode - GET(ketcode, 1);
        !          5096: 
        !          5097:         /* Convert possessive ONCE brackets to non-capturing */
        !          5098: 
        !          5099:         if ((*bracode == OP_ONCE || *bracode == OP_ONCE_NC) &&
        !          5100:             possessive_quantifier) *bracode = OP_BRA;
        !          5101: 
        !          5102:         /* For non-possessive ONCE brackets, all we need to do is to
        !          5103:         set the KET. */
        !          5104: 
        !          5105:         if (*bracode == OP_ONCE || *bracode == OP_ONCE_NC)
        !          5106:           *ketcode = OP_KETRMAX + repeat_type;
        !          5107: 
        !          5108:         /* Handle non-ONCE brackets and possessive ONCEs (which have been
        !          5109:         converted to non-capturing above). */
        !          5110: 
        !          5111:         else
        !          5112:           {
        !          5113:           /* In the compile phase, check for empty string matching. */
        !          5114: 
        !          5115:           if (lengthptr == NULL)
        !          5116:             {
        !          5117:             uschar *scode = bracode;
        !          5118:             do
        !          5119:               {
        !          5120:               if (could_be_empty_branch(scode, ketcode, utf8, cd))
        !          5121:                 {
        !          5122:                 *bracode += OP_SBRA - OP_BRA;
        !          5123:                 break;
        !          5124:                 }
        !          5125:               scode += GET(scode, 1);
        !          5126:               }
        !          5127:             while (*scode == OP_ALT);
        !          5128:             }
        !          5129: 
        !          5130:           /* Handle possessive quantifiers. */
        !          5131: 
        !          5132:           if (possessive_quantifier)
        !          5133:             {
        !          5134:             /* For COND brackets, we wrap the whole thing in a possessively
        !          5135:             repeated non-capturing bracket, because we have not invented POS
        !          5136:             versions of the COND opcodes. Because we are moving code along, we
        !          5137:             must ensure that any pending recursive references are updated. */
        !          5138: 
        !          5139:             if (*bracode == OP_COND || *bracode == OP_SCOND)
        !          5140:               {
        !          5141:               int nlen = (int)(code - bracode);
        !          5142:               *code = OP_END;
        !          5143:               adjust_recurse(bracode, 1 + LINK_SIZE, utf8, cd, save_hwm);
        !          5144:               memmove(bracode + 1+LINK_SIZE, bracode, nlen);
        !          5145:               code += 1 + LINK_SIZE;
        !          5146:               nlen += 1 + LINK_SIZE;
        !          5147:               *bracode = OP_BRAPOS;
        !          5148:               *code++ = OP_KETRPOS;
        !          5149:               PUTINC(code, 0, nlen);
        !          5150:               PUT(bracode, 1, nlen);
        !          5151:               }
        !          5152: 
        !          5153:             /* For non-COND brackets, we modify the BRA code and use KETRPOS. */
        !          5154: 
        !          5155:             else
        !          5156:               {
        !          5157:               *bracode += 1;              /* Switch to xxxPOS opcodes */
        !          5158:               *ketcode = OP_KETRPOS;
        !          5159:               }
        !          5160: 
        !          5161:             /* If the minimum is zero, mark it as possessive, then unset the
        !          5162:             possessive flag when the minimum is 0 or 1. */
        !          5163: 
        !          5164:             if (brazeroptr != NULL) *brazeroptr = OP_BRAPOSZERO;
        !          5165:             if (repeat_min < 2) possessive_quantifier = FALSE;
        !          5166:             }
        !          5167: 
        !          5168:           /* Non-possessive quantifier */
        !          5169: 
        !          5170:           else *ketcode = OP_KETRMAX + repeat_type;
        !          5171:           }
        !          5172:         }
        !          5173:       }
        !          5174: 
        !          5175:     /* If previous is OP_FAIL, it was generated by an empty class [] in
        !          5176:     JavaScript mode. The other ways in which OP_FAIL can be generated, that is
        !          5177:     by (*FAIL) or (?!) set previous to NULL, which gives a "nothing to repeat"
        !          5178:     error above. We can just ignore the repeat in JS case. */
        !          5179: 
        !          5180:     else if (*previous == OP_FAIL) goto END_REPEAT;
        !          5181: 
        !          5182:     /* Else there's some kind of shambles */
        !          5183: 
        !          5184:     else
        !          5185:       {
        !          5186:       *errorcodeptr = ERR11;
        !          5187:       goto FAILED;
        !          5188:       }
        !          5189: 
        !          5190:     /* If the character following a repeat is '+', or if certain optimization
        !          5191:     tests above succeeded, possessive_quantifier is TRUE. For some opcodes,
        !          5192:     there are special alternative opcodes for this case. For anything else, we
        !          5193:     wrap the entire repeated item inside OP_ONCE brackets. Logically, the '+'
        !          5194:     notation is just syntactic sugar, taken from Sun's Java package, but the
        !          5195:     special opcodes can optimize it.
        !          5196: 
        !          5197:     Some (but not all) possessively repeated subpatterns have already been
        !          5198:     completely handled in the code just above. For them, possessive_quantifier
        !          5199:     is always FALSE at this stage.
        !          5200: 
        !          5201:     Note that the repeated item starts at tempcode, not at previous, which
        !          5202:     might be the first part of a string whose (former) last char we repeated.
        !          5203: 
        !          5204:     Possessifying an 'exact' quantifier has no effect, so we can ignore it. But
        !          5205:     an 'upto' may follow. We skip over an 'exact' item, and then test the
        !          5206:     length of what remains before proceeding. */
        !          5207: 
        !          5208:     if (possessive_quantifier)
        !          5209:       {
        !          5210:       int len;
        !          5211: 
        !          5212:       if (*tempcode == OP_TYPEEXACT)
        !          5213:         tempcode += _pcre_OP_lengths[*tempcode] +
        !          5214:           ((tempcode[3] == OP_PROP || tempcode[3] == OP_NOTPROP)? 2 : 0);
        !          5215: 
        !          5216:       else if (*tempcode == OP_EXACT || *tempcode == OP_NOTEXACT)
        !          5217:         {
        !          5218:         tempcode += _pcre_OP_lengths[*tempcode];
        !          5219: #ifdef SUPPORT_UTF8
        !          5220:         if (utf8 && tempcode[-1] >= 0xc0)
        !          5221:           tempcode += _pcre_utf8_table4[tempcode[-1] & 0x3f];
        !          5222: #endif
        !          5223:         }
        !          5224: 
        !          5225:       len = (int)(code - tempcode);
        !          5226:       if (len > 0) switch (*tempcode)
        !          5227:         {
        !          5228:         case OP_STAR:  *tempcode = OP_POSSTAR; break;
        !          5229:         case OP_PLUS:  *tempcode = OP_POSPLUS; break;
        !          5230:         case OP_QUERY: *tempcode = OP_POSQUERY; break;
        !          5231:         case OP_UPTO:  *tempcode = OP_POSUPTO; break;
        !          5232: 
        !          5233:         case OP_STARI:  *tempcode = OP_POSSTARI; break;
        !          5234:         case OP_PLUSI:  *tempcode = OP_POSPLUSI; break;
        !          5235:         case OP_QUERYI: *tempcode = OP_POSQUERYI; break;
        !          5236:         case OP_UPTOI:  *tempcode = OP_POSUPTOI; break;
        !          5237: 
        !          5238:         case OP_NOTSTAR:  *tempcode = OP_NOTPOSSTAR; break;
        !          5239:         case OP_NOTPLUS:  *tempcode = OP_NOTPOSPLUS; break;
        !          5240:         case OP_NOTQUERY: *tempcode = OP_NOTPOSQUERY; break;
        !          5241:         case OP_NOTUPTO:  *tempcode = OP_NOTPOSUPTO; break;
        !          5242: 
        !          5243:         case OP_NOTSTARI:  *tempcode = OP_NOTPOSSTARI; break;
        !          5244:         case OP_NOTPLUSI:  *tempcode = OP_NOTPOSPLUSI; break;
        !          5245:         case OP_NOTQUERYI: *tempcode = OP_NOTPOSQUERYI; break;
        !          5246:         case OP_NOTUPTOI:  *tempcode = OP_NOTPOSUPTOI; break;
        !          5247: 
        !          5248:         case OP_TYPESTAR:  *tempcode = OP_TYPEPOSSTAR; break;
        !          5249:         case OP_TYPEPLUS:  *tempcode = OP_TYPEPOSPLUS; break;
        !          5250:         case OP_TYPEQUERY: *tempcode = OP_TYPEPOSQUERY; break;
        !          5251:         case OP_TYPEUPTO:  *tempcode = OP_TYPEPOSUPTO; break;
        !          5252: 
        !          5253:         /* Because we are moving code along, we must ensure that any
        !          5254:         pending recursive references are updated. */
        !          5255: 
        !          5256:         default:
        !          5257:         *code = OP_END;
        !          5258:         adjust_recurse(tempcode, 1 + LINK_SIZE, utf8, cd, save_hwm);
        !          5259:         memmove(tempcode + 1+LINK_SIZE, tempcode, len);
        !          5260:         code += 1 + LINK_SIZE;
        !          5261:         len += 1 + LINK_SIZE;
        !          5262:         tempcode[0] = OP_ONCE;
        !          5263:         *code++ = OP_KET;
        !          5264:         PUTINC(code, 0, len);
        !          5265:         PUT(tempcode, 1, len);
        !          5266:         break;
        !          5267:         }
        !          5268:       }
        !          5269: 
        !          5270:     /* In all case we no longer have a previous item. We also set the
        !          5271:     "follows varying string" flag for subsequently encountered reqbytes if
        !          5272:     it isn't already set and we have just passed a varying length item. */
        !          5273: 
        !          5274:     END_REPEAT:
        !          5275:     previous = NULL;
        !          5276:     cd->req_varyopt |= reqvary;
        !          5277:     break;
        !          5278: 
        !          5279: 
        !          5280:     /* ===================================================================*/
        !          5281:     /* Start of nested parenthesized sub-expression, or comment or lookahead or
        !          5282:     lookbehind or option setting or condition or all the other extended
        !          5283:     parenthesis forms.  */
        !          5284: 
        !          5285:     case CHAR_LEFT_PARENTHESIS:
        !          5286:     newoptions = options;
        !          5287:     skipbytes = 0;
        !          5288:     bravalue = OP_CBRA;
        !          5289:     save_hwm = cd->hwm;
        !          5290:     reset_bracount = FALSE;
        !          5291: 
        !          5292:     /* First deal with various "verbs" that can be introduced by '*'. */
        !          5293: 
        !          5294:     if (*(++ptr) == CHAR_ASTERISK &&
        !          5295:          ((cd->ctypes[ptr[1]] & ctype_letter) != 0 || ptr[1] == ':'))
        !          5296:       {
        !          5297:       int i, namelen;
        !          5298:       int arglen = 0;
        !          5299:       const char *vn = verbnames;
        !          5300:       const uschar *name = ptr + 1;
        !          5301:       const uschar *arg = NULL;
        !          5302:       previous = NULL;
        !          5303:       while ((cd->ctypes[*++ptr] & ctype_letter) != 0) {};
        !          5304:       namelen = (int)(ptr - name);
        !          5305: 
        !          5306:       /* It appears that Perl allows any characters whatsoever, other than
        !          5307:       a closing parenthesis, to appear in arguments, so we no longer insist on
        !          5308:       letters, digits, and underscores. */
        !          5309: 
        !          5310:       if (*ptr == CHAR_COLON)
        !          5311:         {
        !          5312:         arg = ++ptr;
        !          5313:         while (*ptr != 0 && *ptr != CHAR_RIGHT_PARENTHESIS) ptr++;
        !          5314:         arglen = (int)(ptr - arg);
        !          5315:         }
        !          5316: 
        !          5317:       if (*ptr != CHAR_RIGHT_PARENTHESIS)
        !          5318:         {
        !          5319:         *errorcodeptr = ERR60;
        !          5320:         goto FAILED;
        !          5321:         }
        !          5322: 
        !          5323:       /* Scan the table of verb names */
        !          5324: 
        !          5325:       for (i = 0; i < verbcount; i++)
        !          5326:         {
        !          5327:         if (namelen == verbs[i].len &&
        !          5328:             strncmp((char *)name, vn, namelen) == 0)
        !          5329:           {
        !          5330:           /* Check for open captures before ACCEPT and convert it to
        !          5331:           ASSERT_ACCEPT if in an assertion. */
        !          5332: 
        !          5333:           if (verbs[i].op == OP_ACCEPT)
        !          5334:             {
        !          5335:             open_capitem *oc;
        !          5336:             if (arglen != 0)
        !          5337:               {
        !          5338:               *errorcodeptr = ERR59;
        !          5339:               goto FAILED;
        !          5340:               }
        !          5341:             cd->had_accept = TRUE;
        !          5342:             for (oc = cd->open_caps; oc != NULL; oc = oc->next)
        !          5343:               {
        !          5344:               *code++ = OP_CLOSE;
        !          5345:               PUT2INC(code, 0, oc->number);
        !          5346:               }
        !          5347:             *code++ = (cd->assert_depth > 0)? OP_ASSERT_ACCEPT : OP_ACCEPT;
        !          5348: 
        !          5349:             /* Do not set firstbyte after *ACCEPT */
        !          5350:             if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          5351:             }
        !          5352: 
        !          5353:           /* Handle other cases with/without an argument */
        !          5354: 
        !          5355:           else if (arglen == 0)
        !          5356:             {
        !          5357:             if (verbs[i].op < 0)   /* Argument is mandatory */
        !          5358:               {
        !          5359:               *errorcodeptr = ERR66;
        !          5360:               goto FAILED;
        !          5361:               }
        !          5362:             *code = verbs[i].op;
        !          5363:             if (*code++ == OP_THEN) cd->external_flags |= PCRE_HASTHEN;
        !          5364:             }
        !          5365: 
        !          5366:           else
        !          5367:             {
        !          5368:             if (verbs[i].op_arg < 0)   /* Argument is forbidden */
        !          5369:               {
        !          5370:               *errorcodeptr = ERR59;
        !          5371:               goto FAILED;
        !          5372:               }
        !          5373:             *code = verbs[i].op_arg;
        !          5374:             if (*code++ == OP_THEN_ARG) cd->external_flags |= PCRE_HASTHEN;
        !          5375:             *code++ = arglen;
        !          5376:             memcpy(code, arg, arglen);
        !          5377:             code += arglen;
        !          5378:             *code++ = 0;
        !          5379:             }
        !          5380: 
        !          5381:           break;  /* Found verb, exit loop */
        !          5382:           }
        !          5383: 
        !          5384:         vn += verbs[i].len + 1;
        !          5385:         }
        !          5386: 
        !          5387:       if (i < verbcount) continue;    /* Successfully handled a verb */
        !          5388:       *errorcodeptr = ERR60;          /* Verb not recognized */
        !          5389:       goto FAILED;
        !          5390:       }
        !          5391: 
        !          5392:     /* Deal with the extended parentheses; all are introduced by '?', and the
        !          5393:     appearance of any of them means that this is not a capturing group. */
        !          5394: 
        !          5395:     else if (*ptr == CHAR_QUESTION_MARK)
        !          5396:       {
        !          5397:       int i, set, unset, namelen;
        !          5398:       int *optset;
        !          5399:       const uschar *name;
        !          5400:       uschar *slot;
        !          5401: 
        !          5402:       switch (*(++ptr))
        !          5403:         {
        !          5404:         case CHAR_NUMBER_SIGN:                 /* Comment; skip to ket */
        !          5405:         ptr++;
        !          5406:         while (*ptr != 0 && *ptr != CHAR_RIGHT_PARENTHESIS) ptr++;
        !          5407:         if (*ptr == 0)
        !          5408:           {
        !          5409:           *errorcodeptr = ERR18;
        !          5410:           goto FAILED;
        !          5411:           }
        !          5412:         continue;
        !          5413: 
        !          5414: 
        !          5415:         /* ------------------------------------------------------------ */
        !          5416:         case CHAR_VERTICAL_LINE:  /* Reset capture count for each branch */
        !          5417:         reset_bracount = TRUE;
        !          5418:         /* Fall through */
        !          5419: 
        !          5420:         /* ------------------------------------------------------------ */
        !          5421:         case CHAR_COLON:          /* Non-capturing bracket */
        !          5422:         bravalue = OP_BRA;
        !          5423:         ptr++;
        !          5424:         break;
        !          5425: 
        !          5426: 
        !          5427:         /* ------------------------------------------------------------ */
        !          5428:         case CHAR_LEFT_PARENTHESIS:
        !          5429:         bravalue = OP_COND;       /* Conditional group */
        !          5430: 
        !          5431:         /* A condition can be an assertion, a number (referring to a numbered
        !          5432:         group), a name (referring to a named group), or 'R', referring to
        !          5433:         recursion. R<digits> and R&name are also permitted for recursion tests.
        !          5434: 
        !          5435:         There are several syntaxes for testing a named group: (?(name)) is used
        !          5436:         by Python; Perl 5.10 onwards uses (?(<name>) or (?('name')).
        !          5437: 
        !          5438:         There are two unfortunate ambiguities, caused by history. (a) 'R' can
        !          5439:         be the recursive thing or the name 'R' (and similarly for 'R' followed
        !          5440:         by digits), and (b) a number could be a name that consists of digits.
        !          5441:         In both cases, we look for a name first; if not found, we try the other
        !          5442:         cases. */
        !          5443: 
        !          5444:         /* For conditions that are assertions, check the syntax, and then exit
        !          5445:         the switch. This will take control down to where bracketed groups,
        !          5446:         including assertions, are processed. */
        !          5447: 
        !          5448:         if (ptr[1] == CHAR_QUESTION_MARK && (ptr[2] == CHAR_EQUALS_SIGN ||
        !          5449:             ptr[2] == CHAR_EXCLAMATION_MARK || ptr[2] == CHAR_LESS_THAN_SIGN))
        !          5450:           break;
        !          5451: 
        !          5452:         /* Most other conditions use OP_CREF (a couple change to OP_RREF
        !          5453:         below), and all need to skip 3 bytes at the start of the group. */
        !          5454: 
        !          5455:         code[1+LINK_SIZE] = OP_CREF;
        !          5456:         skipbytes = 3;
        !          5457:         refsign = -1;
        !          5458: 
        !          5459:         /* Check for a test for recursion in a named group. */
        !          5460: 
        !          5461:         if (ptr[1] == CHAR_R && ptr[2] == CHAR_AMPERSAND)
        !          5462:           {
        !          5463:           terminator = -1;
        !          5464:           ptr += 2;
        !          5465:           code[1+LINK_SIZE] = OP_RREF;    /* Change the type of test */
        !          5466:           }
        !          5467: 
        !          5468:         /* Check for a test for a named group's having been set, using the Perl
        !          5469:         syntax (?(<name>) or (?('name') */
        !          5470: 
        !          5471:         else if (ptr[1] == CHAR_LESS_THAN_SIGN)
        !          5472:           {
        !          5473:           terminator = CHAR_GREATER_THAN_SIGN;
        !          5474:           ptr++;
        !          5475:           }
        !          5476:         else if (ptr[1] == CHAR_APOSTROPHE)
        !          5477:           {
        !          5478:           terminator = CHAR_APOSTROPHE;
        !          5479:           ptr++;
        !          5480:           }
        !          5481:         else
        !          5482:           {
        !          5483:           terminator = 0;
        !          5484:           if (ptr[1] == CHAR_MINUS || ptr[1] == CHAR_PLUS) refsign = *(++ptr);
        !          5485:           }
        !          5486: 
        !          5487:         /* We now expect to read a name; any thing else is an error */
        !          5488: 
        !          5489:         if ((cd->ctypes[ptr[1]] & ctype_word) == 0)
        !          5490:           {
        !          5491:           ptr += 1;  /* To get the right offset */
        !          5492:           *errorcodeptr = ERR28;
        !          5493:           goto FAILED;
        !          5494:           }
        !          5495: 
        !          5496:         /* Read the name, but also get it as a number if it's all digits */
        !          5497: 
        !          5498:         recno = 0;
        !          5499:         name = ++ptr;
        !          5500:         while ((cd->ctypes[*ptr] & ctype_word) != 0)
        !          5501:           {
        !          5502:           if (recno >= 0)
        !          5503:             recno = ((digitab[*ptr] & ctype_digit) != 0)?
        !          5504:               recno * 10 + *ptr - CHAR_0 : -1;
        !          5505:           ptr++;
        !          5506:           }
        !          5507:         namelen = (int)(ptr - name);
        !          5508: 
        !          5509:         if ((terminator > 0 && *ptr++ != terminator) ||
        !          5510:             *ptr++ != CHAR_RIGHT_PARENTHESIS)
        !          5511:           {
        !          5512:           ptr--;      /* Error offset */
        !          5513:           *errorcodeptr = ERR26;
        !          5514:           goto FAILED;
        !          5515:           }
        !          5516: 
        !          5517:         /* Do no further checking in the pre-compile phase. */
        !          5518: 
        !          5519:         if (lengthptr != NULL) break;
        !          5520: 
        !          5521:         /* In the real compile we do the work of looking for the actual
        !          5522:         reference. If the string started with "+" or "-" we require the rest to
        !          5523:         be digits, in which case recno will be set. */
        !          5524: 
        !          5525:         if (refsign > 0)
        !          5526:           {
        !          5527:           if (recno <= 0)
        !          5528:             {
        !          5529:             *errorcodeptr = ERR58;
        !          5530:             goto FAILED;
        !          5531:             }
        !          5532:           recno = (refsign == CHAR_MINUS)?
        !          5533:             cd->bracount - recno + 1 : recno +cd->bracount;
        !          5534:           if (recno <= 0 || recno > cd->final_bracount)
        !          5535:             {
        !          5536:             *errorcodeptr = ERR15;
        !          5537:             goto FAILED;
        !          5538:             }
        !          5539:           PUT2(code, 2+LINK_SIZE, recno);
        !          5540:           break;
        !          5541:           }
        !          5542: 
        !          5543:         /* Otherwise (did not start with "+" or "-"), start by looking for the
        !          5544:         name. If we find a name, add one to the opcode to change OP_CREF or
        !          5545:         OP_RREF into OP_NCREF or OP_NRREF. These behave exactly the same,
        !          5546:         except they record that the reference was originally to a name. The
        !          5547:         information is used to check duplicate names. */
        !          5548: 
        !          5549:         slot = cd->name_table;
        !          5550:         for (i = 0; i < cd->names_found; i++)
        !          5551:           {
        !          5552:           if (strncmp((char *)name, (char *)slot+2, namelen) == 0) break;
        !          5553:           slot += cd->name_entry_size;
        !          5554:           }
        !          5555: 
        !          5556:         /* Found a previous named subpattern */
        !          5557: 
        !          5558:         if (i < cd->names_found)
        !          5559:           {
        !          5560:           recno = GET2(slot, 0);
        !          5561:           PUT2(code, 2+LINK_SIZE, recno);
        !          5562:           code[1+LINK_SIZE]++;
        !          5563:           }
        !          5564: 
        !          5565:         /* Search the pattern for a forward reference */
        !          5566: 
        !          5567:         else if ((i = find_parens(cd, name, namelen,
        !          5568:                         (options & PCRE_EXTENDED) != 0, utf8)) > 0)
        !          5569:           {
        !          5570:           PUT2(code, 2+LINK_SIZE, i);
        !          5571:           code[1+LINK_SIZE]++;
        !          5572:           }
        !          5573: 
        !          5574:         /* If terminator == 0 it means that the name followed directly after
        !          5575:         the opening parenthesis [e.g. (?(abc)...] and in this case there are
        !          5576:         some further alternatives to try. For the cases where terminator != 0
        !          5577:         [things like (?(<name>... or (?('name')... or (?(R&name)... ] we have
        !          5578:         now checked all the possibilities, so give an error. */
        !          5579: 
        !          5580:         else if (terminator != 0)
        !          5581:           {
        !          5582:           *errorcodeptr = ERR15;
        !          5583:           goto FAILED;
        !          5584:           }
        !          5585: 
        !          5586:         /* Check for (?(R) for recursion. Allow digits after R to specify a
        !          5587:         specific group number. */
        !          5588: 
        !          5589:         else if (*name == CHAR_R)
        !          5590:           {
        !          5591:           recno = 0;
        !          5592:           for (i = 1; i < namelen; i++)
        !          5593:             {
        !          5594:             if ((digitab[name[i]] & ctype_digit) == 0)
        !          5595:               {
        !          5596:               *errorcodeptr = ERR15;
        !          5597:               goto FAILED;
        !          5598:               }
        !          5599:             recno = recno * 10 + name[i] - CHAR_0;
        !          5600:             }
        !          5601:           if (recno == 0) recno = RREF_ANY;
        !          5602:           code[1+LINK_SIZE] = OP_RREF;      /* Change test type */
        !          5603:           PUT2(code, 2+LINK_SIZE, recno);
        !          5604:           }
        !          5605: 
        !          5606:         /* Similarly, check for the (?(DEFINE) "condition", which is always
        !          5607:         false. */
        !          5608: 
        !          5609:         else if (namelen == 6 && strncmp((char *)name, STRING_DEFINE, 6) == 0)
        !          5610:           {
        !          5611:           code[1+LINK_SIZE] = OP_DEF;
        !          5612:           skipbytes = 1;
        !          5613:           }
        !          5614: 
        !          5615:         /* Check for the "name" actually being a subpattern number. We are
        !          5616:         in the second pass here, so final_bracount is set. */
        !          5617: 
        !          5618:         else if (recno > 0 && recno <= cd->final_bracount)
        !          5619:           {
        !          5620:           PUT2(code, 2+LINK_SIZE, recno);
        !          5621:           }
        !          5622: 
        !          5623:         /* Either an unidentified subpattern, or a reference to (?(0) */
        !          5624: 
        !          5625:         else
        !          5626:           {
        !          5627:           *errorcodeptr = (recno == 0)? ERR35: ERR15;
        !          5628:           goto FAILED;
        !          5629:           }
        !          5630:         break;
        !          5631: 
        !          5632: 
        !          5633:         /* ------------------------------------------------------------ */
        !          5634:         case CHAR_EQUALS_SIGN:                 /* Positive lookahead */
        !          5635:         bravalue = OP_ASSERT;
        !          5636:         cd->assert_depth += 1;
        !          5637:         ptr++;
        !          5638:         break;
        !          5639: 
        !          5640: 
        !          5641:         /* ------------------------------------------------------------ */
        !          5642:         case CHAR_EXCLAMATION_MARK:            /* Negative lookahead */
        !          5643:         ptr++;
        !          5644:         if (*ptr == CHAR_RIGHT_PARENTHESIS)    /* Optimize (?!) */
        !          5645:           {
        !          5646:           *code++ = OP_FAIL;
        !          5647:           previous = NULL;
        !          5648:           continue;
        !          5649:           }
        !          5650:         bravalue = OP_ASSERT_NOT;
        !          5651:         cd->assert_depth += 1;
        !          5652:         break;
        !          5653: 
        !          5654: 
        !          5655:         /* ------------------------------------------------------------ */
        !          5656:         case CHAR_LESS_THAN_SIGN:              /* Lookbehind or named define */
        !          5657:         switch (ptr[1])
        !          5658:           {
        !          5659:           case CHAR_EQUALS_SIGN:               /* Positive lookbehind */
        !          5660:           bravalue = OP_ASSERTBACK;
        !          5661:           cd->assert_depth += 1;
        !          5662:           ptr += 2;
        !          5663:           break;
        !          5664: 
        !          5665:           case CHAR_EXCLAMATION_MARK:          /* Negative lookbehind */
        !          5666:           bravalue = OP_ASSERTBACK_NOT;
        !          5667:           cd->assert_depth += 1;
        !          5668:           ptr += 2;
        !          5669:           break;
        !          5670: 
        !          5671:           default:                /* Could be name define, else bad */
        !          5672:           if ((cd->ctypes[ptr[1]] & ctype_word) != 0) goto DEFINE_NAME;
        !          5673:           ptr++;                  /* Correct offset for error */
        !          5674:           *errorcodeptr = ERR24;
        !          5675:           goto FAILED;
        !          5676:           }
        !          5677:         break;
        !          5678: 
        !          5679: 
        !          5680:         /* ------------------------------------------------------------ */
        !          5681:         case CHAR_GREATER_THAN_SIGN:           /* One-time brackets */
        !          5682:         bravalue = OP_ONCE;
        !          5683:         ptr++;
        !          5684:         break;
        !          5685: 
        !          5686: 
        !          5687:         /* ------------------------------------------------------------ */
        !          5688:         case CHAR_C:                 /* Callout - may be followed by digits; */
        !          5689:         previous_callout = code;     /* Save for later completion */
        !          5690:         after_manual_callout = 1;    /* Skip one item before completing */
        !          5691:         *code++ = OP_CALLOUT;
        !          5692:           {
        !          5693:           int n = 0;
        !          5694:           while ((digitab[*(++ptr)] & ctype_digit) != 0)
        !          5695:             n = n * 10 + *ptr - CHAR_0;
        !          5696:           if (*ptr != CHAR_RIGHT_PARENTHESIS)
        !          5697:             {
        !          5698:             *errorcodeptr = ERR39;
        !          5699:             goto FAILED;
        !          5700:             }
        !          5701:           if (n > 255)
        !          5702:             {
        !          5703:             *errorcodeptr = ERR38;
        !          5704:             goto FAILED;
        !          5705:             }
        !          5706:           *code++ = n;
        !          5707:           PUT(code, 0, (int)(ptr - cd->start_pattern + 1)); /* Pattern offset */
        !          5708:           PUT(code, LINK_SIZE, 0);                          /* Default length */
        !          5709:           code += 2 * LINK_SIZE;
        !          5710:           }
        !          5711:         previous = NULL;
        !          5712:         continue;
        !          5713: 
        !          5714: 
        !          5715:         /* ------------------------------------------------------------ */
        !          5716:         case CHAR_P:              /* Python-style named subpattern handling */
        !          5717:         if (*(++ptr) == CHAR_EQUALS_SIGN ||
        !          5718:             *ptr == CHAR_GREATER_THAN_SIGN)  /* Reference or recursion */
        !          5719:           {
        !          5720:           is_recurse = *ptr == CHAR_GREATER_THAN_SIGN;
        !          5721:           terminator = CHAR_RIGHT_PARENTHESIS;
        !          5722:           goto NAMED_REF_OR_RECURSE;
        !          5723:           }
        !          5724:         else if (*ptr != CHAR_LESS_THAN_SIGN)  /* Test for Python-style defn */
        !          5725:           {
        !          5726:           *errorcodeptr = ERR41;
        !          5727:           goto FAILED;
        !          5728:           }
        !          5729:         /* Fall through to handle (?P< as (?< is handled */
        !          5730: 
        !          5731: 
        !          5732:         /* ------------------------------------------------------------ */
        !          5733:         DEFINE_NAME:    /* Come here from (?< handling */
        !          5734:         case CHAR_APOSTROPHE:
        !          5735:           {
        !          5736:           terminator = (*ptr == CHAR_LESS_THAN_SIGN)?
        !          5737:             CHAR_GREATER_THAN_SIGN : CHAR_APOSTROPHE;
        !          5738:           name = ++ptr;
        !          5739: 
        !          5740:           while ((cd->ctypes[*ptr] & ctype_word) != 0) ptr++;
        !          5741:           namelen = (int)(ptr - name);
        !          5742: 
        !          5743:           /* In the pre-compile phase, just do a syntax check. */
        !          5744: 
        !          5745:           if (lengthptr != NULL)
        !          5746:             {
        !          5747:             if (*ptr != terminator)
        !          5748:               {
        !          5749:               *errorcodeptr = ERR42;
        !          5750:               goto FAILED;
        !          5751:               }
        !          5752:             if (cd->names_found >= MAX_NAME_COUNT)
        !          5753:               {
        !          5754:               *errorcodeptr = ERR49;
        !          5755:               goto FAILED;
        !          5756:               }
        !          5757:             if (namelen + 3 > cd->name_entry_size)
        !          5758:               {
        !          5759:               cd->name_entry_size = namelen + 3;
        !          5760:               if (namelen > MAX_NAME_SIZE)
        !          5761:                 {
        !          5762:                 *errorcodeptr = ERR48;
        !          5763:                 goto FAILED;
        !          5764:                 }
        !          5765:               }
        !          5766:             }
        !          5767: 
        !          5768:           /* In the real compile, create the entry in the table, maintaining
        !          5769:           alphabetical order. Duplicate names for different numbers are
        !          5770:           permitted only if PCRE_DUPNAMES is set. Duplicate names for the same
        !          5771:           number are always OK. (An existing number can be re-used if (?|
        !          5772:           appears in the pattern.) In either event, a duplicate name results in
        !          5773:           a duplicate entry in the table, even if the number is the same. This
        !          5774:           is because the number of names, and hence the table size, is computed
        !          5775:           in the pre-compile, and it affects various numbers and pointers which
        !          5776:           would all have to be modified, and the compiled code moved down, if
        !          5777:           duplicates with the same number were omitted from the table. This
        !          5778:           doesn't seem worth the hassle. However, *different* names for the
        !          5779:           same number are not permitted. */
        !          5780: 
        !          5781:           else
        !          5782:             {
        !          5783:             BOOL dupname = FALSE;
        !          5784:             slot = cd->name_table;
        !          5785: 
        !          5786:             for (i = 0; i < cd->names_found; i++)
        !          5787:               {
        !          5788:               int crc = memcmp(name, slot+2, namelen);
        !          5789:               if (crc == 0)
        !          5790:                 {
        !          5791:                 if (slot[2+namelen] == 0)
        !          5792:                   {
        !          5793:                   if (GET2(slot, 0) != cd->bracount + 1 &&
        !          5794:                       (options & PCRE_DUPNAMES) == 0)
        !          5795:                     {
        !          5796:                     *errorcodeptr = ERR43;
        !          5797:                     goto FAILED;
        !          5798:                     }
        !          5799:                   else dupname = TRUE;
        !          5800:                   }
        !          5801:                 else crc = -1;      /* Current name is a substring */
        !          5802:                 }
        !          5803: 
        !          5804:               /* Make space in the table and break the loop for an earlier
        !          5805:               name. For a duplicate or later name, carry on. We do this for
        !          5806:               duplicates so that in the simple case (when ?(| is not used) they
        !          5807:               are in order of their numbers. */
        !          5808: 
        !          5809:               if (crc < 0)
        !          5810:                 {
        !          5811:                 memmove(slot + cd->name_entry_size, slot,
        !          5812:                   (cd->names_found - i) * cd->name_entry_size);
        !          5813:                 break;
        !          5814:                 }
        !          5815: 
        !          5816:               /* Continue the loop for a later or duplicate name */
        !          5817: 
        !          5818:               slot += cd->name_entry_size;
        !          5819:               }
        !          5820: 
        !          5821:             /* For non-duplicate names, check for a duplicate number before
        !          5822:             adding the new name. */
        !          5823: 
        !          5824:             if (!dupname)
        !          5825:               {
        !          5826:               uschar *cslot = cd->name_table;
        !          5827:               for (i = 0; i < cd->names_found; i++)
        !          5828:                 {
        !          5829:                 if (cslot != slot)
        !          5830:                   {
        !          5831:                   if (GET2(cslot, 0) == cd->bracount + 1)
        !          5832:                     {
        !          5833:                     *errorcodeptr = ERR65;
        !          5834:                     goto FAILED;
        !          5835:                     }
        !          5836:                   }
        !          5837:                 else i--;
        !          5838:                 cslot += cd->name_entry_size;
        !          5839:                 }
        !          5840:               }
        !          5841: 
        !          5842:             PUT2(slot, 0, cd->bracount + 1);
        !          5843:             memcpy(slot + 2, name, namelen);
        !          5844:             slot[2+namelen] = 0;
        !          5845:             }
        !          5846:           }
        !          5847: 
        !          5848:         /* In both pre-compile and compile, count the number of names we've
        !          5849:         encountered. */
        !          5850: 
        !          5851:         cd->names_found++;
        !          5852:         ptr++;                    /* Move past > or ' */
        !          5853:         goto NUMBERED_GROUP;
        !          5854: 
        !          5855: 
        !          5856:         /* ------------------------------------------------------------ */
        !          5857:         case CHAR_AMPERSAND:            /* Perl recursion/subroutine syntax */
        !          5858:         terminator = CHAR_RIGHT_PARENTHESIS;
        !          5859:         is_recurse = TRUE;
        !          5860:         /* Fall through */
        !          5861: 
        !          5862:         /* We come here from the Python syntax above that handles both
        !          5863:         references (?P=name) and recursion (?P>name), as well as falling
        !          5864:         through from the Perl recursion syntax (?&name). We also come here from
        !          5865:         the Perl \k<name> or \k'name' back reference syntax and the \k{name}
        !          5866:         .NET syntax, and the Oniguruma \g<...> and \g'...' subroutine syntax. */
        !          5867: 
        !          5868:         NAMED_REF_OR_RECURSE:
        !          5869:         name = ++ptr;
        !          5870:         while ((cd->ctypes[*ptr] & ctype_word) != 0) ptr++;
        !          5871:         namelen = (int)(ptr - name);
        !          5872: 
        !          5873:         /* In the pre-compile phase, do a syntax check. We used to just set
        !          5874:         a dummy reference number, because it was not used in the first pass.
        !          5875:         However, with the change of recursive back references to be atomic,
        !          5876:         we have to look for the number so that this state can be identified, as
        !          5877:         otherwise the incorrect length is computed. If it's not a backwards
        !          5878:         reference, the dummy number will do. */
        !          5879: 
        !          5880:         if (lengthptr != NULL)
        !          5881:           {
        !          5882:           const uschar *temp;
        !          5883: 
        !          5884:           if (namelen == 0)
        !          5885:             {
        !          5886:             *errorcodeptr = ERR62;
        !          5887:             goto FAILED;
        !          5888:             }
        !          5889:           if (*ptr != terminator)
        !          5890:             {
        !          5891:             *errorcodeptr = ERR42;
        !          5892:             goto FAILED;
        !          5893:             }
        !          5894:           if (namelen > MAX_NAME_SIZE)
        !          5895:             {
        !          5896:             *errorcodeptr = ERR48;
        !          5897:             goto FAILED;
        !          5898:             }
        !          5899: 
        !          5900:           /* The name table does not exist in the first pass, so we cannot
        !          5901:           do a simple search as in the code below. Instead, we have to scan the
        !          5902:           pattern to find the number. It is important that we scan it only as
        !          5903:           far as we have got because the syntax of named subpatterns has not
        !          5904:           been checked for the rest of the pattern, and find_parens() assumes
        !          5905:           correct syntax. In any case, it's a waste of resources to scan
        !          5906:           further. We stop the scan at the current point by temporarily
        !          5907:           adjusting the value of cd->endpattern. */
        !          5908: 
        !          5909:           temp = cd->end_pattern;
        !          5910:           cd->end_pattern = ptr;
        !          5911:           recno = find_parens(cd, name, namelen,
        !          5912:             (options & PCRE_EXTENDED) != 0, utf8);
        !          5913:           cd->end_pattern = temp;
        !          5914:           if (recno < 0) recno = 0;    /* Forward ref; set dummy number */
        !          5915:           }
        !          5916: 
        !          5917:         /* In the real compile, seek the name in the table. We check the name
        !          5918:         first, and then check that we have reached the end of the name in the
        !          5919:         table. That way, if the name that is longer than any in the table,
        !          5920:         the comparison will fail without reading beyond the table entry. */
        !          5921: 
        !          5922:         else
        !          5923:           {
        !          5924:           slot = cd->name_table;
        !          5925:           for (i = 0; i < cd->names_found; i++)
        !          5926:             {
        !          5927:             if (strncmp((char *)name, (char *)slot+2, namelen) == 0 &&
        !          5928:                 slot[2+namelen] == 0)
        !          5929:               break;
        !          5930:             slot += cd->name_entry_size;
        !          5931:             }
        !          5932: 
        !          5933:           if (i < cd->names_found)         /* Back reference */
        !          5934:             {
        !          5935:             recno = GET2(slot, 0);
        !          5936:             }
        !          5937:           else if ((recno =                /* Forward back reference */
        !          5938:                     find_parens(cd, name, namelen,
        !          5939:                       (options & PCRE_EXTENDED) != 0, utf8)) <= 0)
        !          5940:             {
        !          5941:             *errorcodeptr = ERR15;
        !          5942:             goto FAILED;
        !          5943:             }
        !          5944:           }
        !          5945: 
        !          5946:         /* In both phases, we can now go to the code than handles numerical
        !          5947:         recursion or backreferences. */
        !          5948: 
        !          5949:         if (is_recurse) goto HANDLE_RECURSION;
        !          5950:           else goto HANDLE_REFERENCE;
        !          5951: 
        !          5952: 
        !          5953:         /* ------------------------------------------------------------ */
        !          5954:         case CHAR_R:              /* Recursion */
        !          5955:         ptr++;                    /* Same as (?0)      */
        !          5956:         /* Fall through */
        !          5957: 
        !          5958: 
        !          5959:         /* ------------------------------------------------------------ */
        !          5960:         case CHAR_MINUS: case CHAR_PLUS:  /* Recursion or subroutine */
        !          5961:         case CHAR_0: case CHAR_1: case CHAR_2: case CHAR_3: case CHAR_4:
        !          5962:         case CHAR_5: case CHAR_6: case CHAR_7: case CHAR_8: case CHAR_9:
        !          5963:           {
        !          5964:           const uschar *called;
        !          5965:           terminator = CHAR_RIGHT_PARENTHESIS;
        !          5966: 
        !          5967:           /* Come here from the \g<...> and \g'...' code (Oniguruma
        !          5968:           compatibility). However, the syntax has been checked to ensure that
        !          5969:           the ... are a (signed) number, so that neither ERR63 nor ERR29 will
        !          5970:           be called on this path, nor with the jump to OTHER_CHAR_AFTER_QUERY
        !          5971:           ever be taken. */
        !          5972: 
        !          5973:           HANDLE_NUMERICAL_RECURSION:
        !          5974: 
        !          5975:           if ((refsign = *ptr) == CHAR_PLUS)
        !          5976:             {
        !          5977:             ptr++;
        !          5978:             if ((digitab[*ptr] & ctype_digit) == 0)
        !          5979:               {
        !          5980:               *errorcodeptr = ERR63;
        !          5981:               goto FAILED;
        !          5982:               }
        !          5983:             }
        !          5984:           else if (refsign == CHAR_MINUS)
        !          5985:             {
        !          5986:             if ((digitab[ptr[1]] & ctype_digit) == 0)
        !          5987:               goto OTHER_CHAR_AFTER_QUERY;
        !          5988:             ptr++;
        !          5989:             }
        !          5990: 
        !          5991:           recno = 0;
        !          5992:           while((digitab[*ptr] & ctype_digit) != 0)
        !          5993:             recno = recno * 10 + *ptr++ - CHAR_0;
        !          5994: 
        !          5995:           if (*ptr != terminator)
        !          5996:             {
        !          5997:             *errorcodeptr = ERR29;
        !          5998:             goto FAILED;
        !          5999:             }
        !          6000: 
        !          6001:           if (refsign == CHAR_MINUS)
        !          6002:             {
        !          6003:             if (recno == 0)
        !          6004:               {
        !          6005:               *errorcodeptr = ERR58;
        !          6006:               goto FAILED;
        !          6007:               }
        !          6008:             recno = cd->bracount - recno + 1;
        !          6009:             if (recno <= 0)
        !          6010:               {
        !          6011:               *errorcodeptr = ERR15;
        !          6012:               goto FAILED;
        !          6013:               }
        !          6014:             }
        !          6015:           else if (refsign == CHAR_PLUS)
        !          6016:             {
        !          6017:             if (recno == 0)
        !          6018:               {
        !          6019:               *errorcodeptr = ERR58;
        !          6020:               goto FAILED;
        !          6021:               }
        !          6022:             recno += cd->bracount;
        !          6023:             }
        !          6024: 
        !          6025:           /* Come here from code above that handles a named recursion */
        !          6026: 
        !          6027:           HANDLE_RECURSION:
        !          6028: 
        !          6029:           previous = code;
        !          6030:           called = cd->start_code;
        !          6031: 
        !          6032:           /* When we are actually compiling, find the bracket that is being
        !          6033:           referenced. Temporarily end the regex in case it doesn't exist before
        !          6034:           this point. If we end up with a forward reference, first check that
        !          6035:           the bracket does occur later so we can give the error (and position)
        !          6036:           now. Then remember this forward reference in the workspace so it can
        !          6037:           be filled in at the end. */
        !          6038: 
        !          6039:           if (lengthptr == NULL)
        !          6040:             {
        !          6041:             *code = OP_END;
        !          6042:             if (recno != 0)
        !          6043:               called = _pcre_find_bracket(cd->start_code, utf8, recno);
        !          6044: 
        !          6045:             /* Forward reference */
        !          6046: 
        !          6047:             if (called == NULL)
        !          6048:               {
        !          6049:               if (find_parens(cd, NULL, recno,
        !          6050:                     (options & PCRE_EXTENDED) != 0, utf8) < 0)
        !          6051:                 {
        !          6052:                 *errorcodeptr = ERR15;
        !          6053:                 goto FAILED;
        !          6054:                 }
        !          6055: 
        !          6056:               /* Fudge the value of "called" so that when it is inserted as an
        !          6057:               offset below, what it actually inserted is the reference number
        !          6058:               of the group. Then remember the forward reference. */
        !          6059: 
        !          6060:               called = cd->start_code + recno;
        !          6061:               if (cd->hwm >= cd->start_workspace + cd->workspace_size -
        !          6062:                   WORK_SIZE_SAFETY_MARGIN)
        !          6063:                 {
        !          6064:                 *errorcodeptr = expand_workspace(cd);
        !          6065:                 if (*errorcodeptr != 0) goto FAILED;
        !          6066:                 }
        !          6067:               PUTINC(cd->hwm, 0, (int)(code + 1 - cd->start_code));
        !          6068:               }
        !          6069: 
        !          6070:             /* If not a forward reference, and the subpattern is still open,
        !          6071:             this is a recursive call. We check to see if this is a left
        !          6072:             recursion that could loop for ever, and diagnose that case. We
        !          6073:             must not, however, do this check if we are in a conditional
        !          6074:             subpattern because the condition might be testing for recursion in
        !          6075:             a pattern such as /(?(R)a+|(?R)b)/, which is perfectly valid.
        !          6076:             Forever loops are also detected at runtime, so those that occur in
        !          6077:             conditional subpatterns will be picked up then. */
        !          6078: 
        !          6079:             else if (GET(called, 1) == 0 && cond_depth <= 0 &&
        !          6080:                      could_be_empty(called, code, bcptr, utf8, cd))
        !          6081:               {
        !          6082:               *errorcodeptr = ERR40;
        !          6083:               goto FAILED;
        !          6084:               }
        !          6085:             }
        !          6086: 
        !          6087:           /* Insert the recursion/subroutine item. It does not have a set first
        !          6088:           byte (relevant if it is repeated, because it will then be wrapped
        !          6089:           with ONCE brackets). */
        !          6090: 
        !          6091:           *code = OP_RECURSE;
        !          6092:           PUT(code, 1, (int)(called - cd->start_code));
        !          6093:           code += 1 + LINK_SIZE;
        !          6094:           groupsetfirstbyte = FALSE;
        !          6095:           }
        !          6096: 
        !          6097:         /* Can't determine a first byte now */
        !          6098: 
        !          6099:         if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          6100:         continue;
        !          6101: 
        !          6102: 
        !          6103:         /* ------------------------------------------------------------ */
        !          6104:         default:              /* Other characters: check option setting */
        !          6105:         OTHER_CHAR_AFTER_QUERY:
        !          6106:         set = unset = 0;
        !          6107:         optset = &set;
        !          6108: 
        !          6109:         while (*ptr != CHAR_RIGHT_PARENTHESIS && *ptr != CHAR_COLON)
        !          6110:           {
        !          6111:           switch (*ptr++)
        !          6112:             {
        !          6113:             case CHAR_MINUS: optset = &unset; break;
        !          6114: 
        !          6115:             case CHAR_J:    /* Record that it changed in the external options */
        !          6116:             *optset |= PCRE_DUPNAMES;
        !          6117:             cd->external_flags |= PCRE_JCHANGED;
        !          6118:             break;
        !          6119: 
        !          6120:             case CHAR_i: *optset |= PCRE_CASELESS; break;
        !          6121:             case CHAR_m: *optset |= PCRE_MULTILINE; break;
        !          6122:             case CHAR_s: *optset |= PCRE_DOTALL; break;
        !          6123:             case CHAR_x: *optset |= PCRE_EXTENDED; break;
        !          6124:             case CHAR_U: *optset |= PCRE_UNGREEDY; break;
        !          6125:             case CHAR_X: *optset |= PCRE_EXTRA; break;
        !          6126: 
        !          6127:             default:  *errorcodeptr = ERR12;
        !          6128:                       ptr--;    /* Correct the offset */
        !          6129:                       goto FAILED;
        !          6130:             }
        !          6131:           }
        !          6132: 
        !          6133:         /* Set up the changed option bits, but don't change anything yet. */
        !          6134: 
        !          6135:         newoptions = (options | set) & (~unset);
        !          6136: 
        !          6137:         /* If the options ended with ')' this is not the start of a nested
        !          6138:         group with option changes, so the options change at this level. If this
        !          6139:         item is right at the start of the pattern, the options can be
        !          6140:         abstracted and made external in the pre-compile phase, and ignored in
        !          6141:         the compile phase. This can be helpful when matching -- for instance in
        !          6142:         caseless checking of required bytes.
        !          6143: 
        !          6144:         If the code pointer is not (cd->start_code + 1 + LINK_SIZE), we are
        !          6145:         definitely *not* at the start of the pattern because something has been
        !          6146:         compiled. In the pre-compile phase, however, the code pointer can have
        !          6147:         that value after the start, because it gets reset as code is discarded
        !          6148:         during the pre-compile. However, this can happen only at top level - if
        !          6149:         we are within parentheses, the starting BRA will still be present. At
        !          6150:         any parenthesis level, the length value can be used to test if anything
        !          6151:         has been compiled at that level. Thus, a test for both these conditions
        !          6152:         is necessary to ensure we correctly detect the start of the pattern in
        !          6153:         both phases.
        !          6154: 
        !          6155:         If we are not at the pattern start, reset the greedy defaults and the
        !          6156:         case value for firstbyte and reqbyte. */
        !          6157: 
        !          6158:         if (*ptr == CHAR_RIGHT_PARENTHESIS)
        !          6159:           {
        !          6160:           if (code == cd->start_code + 1 + LINK_SIZE &&
        !          6161:                (lengthptr == NULL || *lengthptr == 2 + 2*LINK_SIZE))
        !          6162:             {
        !          6163:             cd->external_options = newoptions;
        !          6164:             }
        !          6165:           else
        !          6166:             {
        !          6167:             greedy_default = ((newoptions & PCRE_UNGREEDY) != 0);
        !          6168:             greedy_non_default = greedy_default ^ 1;
        !          6169:             req_caseopt = ((newoptions & PCRE_CASELESS) != 0)? REQ_CASELESS : 0;
        !          6170:             }
        !          6171: 
        !          6172:           /* Change options at this level, and pass them back for use
        !          6173:           in subsequent branches. */
        !          6174: 
        !          6175:           *optionsptr = options = newoptions;
        !          6176:           previous = NULL;       /* This item can't be repeated */
        !          6177:           continue;              /* It is complete */
        !          6178:           }
        !          6179: 
        !          6180:         /* If the options ended with ':' we are heading into a nested group
        !          6181:         with possible change of options. Such groups are non-capturing and are
        !          6182:         not assertions of any kind. All we need to do is skip over the ':';
        !          6183:         the newoptions value is handled below. */
        !          6184: 
        !          6185:         bravalue = OP_BRA;
        !          6186:         ptr++;
        !          6187:         }     /* End of switch for character following (? */
        !          6188:       }       /* End of (? handling */
        !          6189: 
        !          6190:     /* Opening parenthesis not followed by '*' or '?'. If PCRE_NO_AUTO_CAPTURE
        !          6191:     is set, all unadorned brackets become non-capturing and behave like (?:...)
        !          6192:     brackets. */
        !          6193: 
        !          6194:     else if ((options & PCRE_NO_AUTO_CAPTURE) != 0)
        !          6195:       {
        !          6196:       bravalue = OP_BRA;
        !          6197:       }
        !          6198: 
        !          6199:     /* Else we have a capturing group. */
        !          6200: 
        !          6201:     else
        !          6202:       {
        !          6203:       NUMBERED_GROUP:
        !          6204:       cd->bracount += 1;
        !          6205:       PUT2(code, 1+LINK_SIZE, cd->bracount);
        !          6206:       skipbytes = 2;
        !          6207:       }
        !          6208: 
        !          6209:     /* Process nested bracketed regex. Assertions used not to be repeatable,
        !          6210:     but this was changed for Perl compatibility, so all kinds can now be
        !          6211:     repeated. We copy code into a non-register variable (tempcode) in order to
        !          6212:     be able to pass its address because some compilers complain otherwise. */
        !          6213: 
        !          6214:     previous = code;                      /* For handling repetition */
        !          6215:     *code = bravalue;
        !          6216:     tempcode = code;
        !          6217:     tempreqvary = cd->req_varyopt;        /* Save value before bracket */
        !          6218:     tempbracount = cd->bracount;          /* Save value before bracket */
        !          6219:     length_prevgroup = 0;                 /* Initialize for pre-compile phase */
        !          6220: 
        !          6221:     if (!compile_regex(
        !          6222:          newoptions,                      /* The complete new option state */
        !          6223:          &tempcode,                       /* Where to put code (updated) */
        !          6224:          &ptr,                            /* Input pointer (updated) */
        !          6225:          errorcodeptr,                    /* Where to put an error message */
        !          6226:          (bravalue == OP_ASSERTBACK ||
        !          6227:           bravalue == OP_ASSERTBACK_NOT), /* TRUE if back assert */
        !          6228:          reset_bracount,                  /* True if (?| group */
        !          6229:          skipbytes,                       /* Skip over bracket number */
        !          6230:          cond_depth +
        !          6231:            ((bravalue == OP_COND)?1:0),   /* Depth of condition subpatterns */
        !          6232:          &subfirstbyte,                   /* For possible first char */
        !          6233:          &subreqbyte,                     /* For possible last char */
        !          6234:          bcptr,                           /* Current branch chain */
        !          6235:          cd,                              /* Tables block */
        !          6236:          (lengthptr == NULL)? NULL :      /* Actual compile phase */
        !          6237:            &length_prevgroup              /* Pre-compile phase */
        !          6238:          ))
        !          6239:       goto FAILED;
        !          6240: 
        !          6241:     /* If this was an atomic group and there are no capturing groups within it,
        !          6242:     generate OP_ONCE_NC instead of OP_ONCE. */
        !          6243: 
        !          6244:     if (bravalue == OP_ONCE && cd->bracount <= tempbracount)
        !          6245:       *code = OP_ONCE_NC;
        !          6246: 
        !          6247:     if (bravalue >= OP_ASSERT && bravalue <= OP_ASSERTBACK_NOT)
        !          6248:       cd->assert_depth -= 1;
        !          6249: 
        !          6250:     /* At the end of compiling, code is still pointing to the start of the
        !          6251:     group, while tempcode has been updated to point past the end of the group.
        !          6252:     The pattern pointer (ptr) is on the bracket.
        !          6253: 
        !          6254:     If this is a conditional bracket, check that there are no more than
        !          6255:     two branches in the group, or just one if it's a DEFINE group. We do this
        !          6256:     in the real compile phase, not in the pre-pass, where the whole group may
        !          6257:     not be available. */
        !          6258: 
        !          6259:     if (bravalue == OP_COND && lengthptr == NULL)
        !          6260:       {
        !          6261:       uschar *tc = code;
        !          6262:       int condcount = 0;
        !          6263: 
        !          6264:       do {
        !          6265:          condcount++;
        !          6266:          tc += GET(tc,1);
        !          6267:          }
        !          6268:       while (*tc != OP_KET);
        !          6269: 
        !          6270:       /* A DEFINE group is never obeyed inline (the "condition" is always
        !          6271:       false). It must have only one branch. */
        !          6272: 
        !          6273:       if (code[LINK_SIZE+1] == OP_DEF)
        !          6274:         {
        !          6275:         if (condcount > 1)
        !          6276:           {
        !          6277:           *errorcodeptr = ERR54;
        !          6278:           goto FAILED;
        !          6279:           }
        !          6280:         bravalue = OP_DEF;   /* Just a flag to suppress char handling below */
        !          6281:         }
        !          6282: 
        !          6283:       /* A "normal" conditional group. If there is just one branch, we must not
        !          6284:       make use of its firstbyte or reqbyte, because this is equivalent to an
        !          6285:       empty second branch. */
        !          6286: 
        !          6287:       else
        !          6288:         {
        !          6289:         if (condcount > 2)
        !          6290:           {
        !          6291:           *errorcodeptr = ERR27;
        !          6292:           goto FAILED;
        !          6293:           }
        !          6294:         if (condcount == 1) subfirstbyte = subreqbyte = REQ_NONE;
        !          6295:         }
        !          6296:       }
        !          6297: 
        !          6298:     /* Error if hit end of pattern */
        !          6299: 
        !          6300:     if (*ptr != CHAR_RIGHT_PARENTHESIS)
        !          6301:       {
        !          6302:       *errorcodeptr = ERR14;
        !          6303:       goto FAILED;
        !          6304:       }
        !          6305: 
        !          6306:     /* In the pre-compile phase, update the length by the length of the group,
        !          6307:     less the brackets at either end. Then reduce the compiled code to just a
        !          6308:     set of non-capturing brackets so that it doesn't use much memory if it is
        !          6309:     duplicated by a quantifier.*/
        !          6310: 
        !          6311:     if (lengthptr != NULL)
        !          6312:       {
        !          6313:       if (OFLOW_MAX - *lengthptr < length_prevgroup - 2 - 2*LINK_SIZE)
        !          6314:         {
        !          6315:         *errorcodeptr = ERR20;
        !          6316:         goto FAILED;
        !          6317:         }
        !          6318:       *lengthptr += length_prevgroup - 2 - 2*LINK_SIZE;
        !          6319:       code++;   /* This already contains bravalue */
        !          6320:       PUTINC(code, 0, 1 + LINK_SIZE);
        !          6321:       *code++ = OP_KET;
        !          6322:       PUTINC(code, 0, 1 + LINK_SIZE);
        !          6323:       break;    /* No need to waste time with special character handling */
        !          6324:       }
        !          6325: 
        !          6326:     /* Otherwise update the main code pointer to the end of the group. */
        !          6327: 
        !          6328:     code = tempcode;
        !          6329: 
        !          6330:     /* For a DEFINE group, required and first character settings are not
        !          6331:     relevant. */
        !          6332: 
        !          6333:     if (bravalue == OP_DEF) break;
        !          6334: 
        !          6335:     /* Handle updating of the required and first characters for other types of
        !          6336:     group. Update for normal brackets of all kinds, and conditions with two
        !          6337:     branches (see code above). If the bracket is followed by a quantifier with
        !          6338:     zero repeat, we have to back off. Hence the definition of zeroreqbyte and
        !          6339:     zerofirstbyte outside the main loop so that they can be accessed for the
        !          6340:     back off. */
        !          6341: 
        !          6342:     zeroreqbyte = reqbyte;
        !          6343:     zerofirstbyte = firstbyte;
        !          6344:     groupsetfirstbyte = FALSE;
        !          6345: 
        !          6346:     if (bravalue >= OP_ONCE)
        !          6347:       {
        !          6348:       /* If we have not yet set a firstbyte in this branch, take it from the
        !          6349:       subpattern, remembering that it was set here so that a repeat of more
        !          6350:       than one can replicate it as reqbyte if necessary. If the subpattern has
        !          6351:       no firstbyte, set "none" for the whole branch. In both cases, a zero
        !          6352:       repeat forces firstbyte to "none". */
        !          6353: 
        !          6354:       if (firstbyte == REQ_UNSET)
        !          6355:         {
        !          6356:         if (subfirstbyte >= 0)
        !          6357:           {
        !          6358:           firstbyte = subfirstbyte;
        !          6359:           groupsetfirstbyte = TRUE;
        !          6360:           }
        !          6361:         else firstbyte = REQ_NONE;
        !          6362:         zerofirstbyte = REQ_NONE;
        !          6363:         }
        !          6364: 
        !          6365:       /* If firstbyte was previously set, convert the subpattern's firstbyte
        !          6366:       into reqbyte if there wasn't one, using the vary flag that was in
        !          6367:       existence beforehand. */
        !          6368: 
        !          6369:       else if (subfirstbyte >= 0 && subreqbyte < 0)
        !          6370:         subreqbyte = subfirstbyte | tempreqvary;
        !          6371: 
        !          6372:       /* If the subpattern set a required byte (or set a first byte that isn't
        !          6373:       really the first byte - see above), set it. */
        !          6374: 
        !          6375:       if (subreqbyte >= 0) reqbyte = subreqbyte;
        !          6376:       }
        !          6377: 
        !          6378:     /* For a forward assertion, we take the reqbyte, if set. This can be
        !          6379:     helpful if the pattern that follows the assertion doesn't set a different
        !          6380:     char. For example, it's useful for /(?=abcde).+/. We can't set firstbyte
        !          6381:     for an assertion, however because it leads to incorrect effect for patterns
        !          6382:     such as /(?=a)a.+/ when the "real" "a" would then become a reqbyte instead
        !          6383:     of a firstbyte. This is overcome by a scan at the end if there's no
        !          6384:     firstbyte, looking for an asserted first char. */
        !          6385: 
        !          6386:     else if (bravalue == OP_ASSERT && subreqbyte >= 0) reqbyte = subreqbyte;
        !          6387:     break;     /* End of processing '(' */
        !          6388: 
        !          6389: 
        !          6390:     /* ===================================================================*/
        !          6391:     /* Handle metasequences introduced by \. For ones like \d, the ESC_ values
        !          6392:     are arranged to be the negation of the corresponding OP_values in the
        !          6393:     default case when PCRE_UCP is not set. For the back references, the values
        !          6394:     are ESC_REF plus the reference number. Only back references and those types
        !          6395:     that consume a character may be repeated. We can test for values between
        !          6396:     ESC_b and ESC_Z for the latter; this may have to change if any new ones are
        !          6397:     ever created. */
        !          6398: 
        !          6399:     case CHAR_BACKSLASH:
        !          6400:     tempptr = ptr;
        !          6401:     c = check_escape(&ptr, errorcodeptr, cd->bracount, options, FALSE);
        !          6402:     if (*errorcodeptr != 0) goto FAILED;
        !          6403: 
        !          6404:     if (c < 0)
        !          6405:       {
        !          6406:       if (-c == ESC_Q)            /* Handle start of quoted string */
        !          6407:         {
        !          6408:         if (ptr[1] == CHAR_BACKSLASH && ptr[2] == CHAR_E)
        !          6409:           ptr += 2;               /* avoid empty string */
        !          6410:             else inescq = TRUE;
        !          6411:         continue;
        !          6412:         }
        !          6413: 
        !          6414:       if (-c == ESC_E) continue;  /* Perl ignores an orphan \E */
        !          6415: 
        !          6416:       /* For metasequences that actually match a character, we disable the
        !          6417:       setting of a first character if it hasn't already been set. */
        !          6418: 
        !          6419:       if (firstbyte == REQ_UNSET && -c > ESC_b && -c < ESC_Z)
        !          6420:         firstbyte = REQ_NONE;
        !          6421: 
        !          6422:       /* Set values to reset to if this is followed by a zero repeat. */
        !          6423: 
        !          6424:       zerofirstbyte = firstbyte;
        !          6425:       zeroreqbyte = reqbyte;
        !          6426: 
        !          6427:       /* \g<name> or \g'name' is a subroutine call by name and \g<n> or \g'n'
        !          6428:       is a subroutine call by number (Oniguruma syntax). In fact, the value
        !          6429:       -ESC_g is returned only for these cases. So we don't need to check for <
        !          6430:       or ' if the value is -ESC_g. For the Perl syntax \g{n} the value is
        !          6431:       -ESC_REF+n, and for the Perl syntax \g{name} the result is -ESC_k (as
        !          6432:       that is a synonym for a named back reference). */
        !          6433: 
        !          6434:       if (-c == ESC_g)
        !          6435:         {
        !          6436:         const uschar *p;
        !          6437:         save_hwm = cd->hwm;   /* Normally this is set when '(' is read */
        !          6438:         terminator = (*(++ptr) == CHAR_LESS_THAN_SIGN)?
        !          6439:           CHAR_GREATER_THAN_SIGN : CHAR_APOSTROPHE;
        !          6440: 
        !          6441:         /* These two statements stop the compiler for warning about possibly
        !          6442:         unset variables caused by the jump to HANDLE_NUMERICAL_RECURSION. In
        !          6443:         fact, because we actually check for a number below, the paths that
        !          6444:         would actually be in error are never taken. */
        !          6445: 
        !          6446:         skipbytes = 0;
        !          6447:         reset_bracount = FALSE;
        !          6448: 
        !          6449:         /* Test for a name */
        !          6450: 
        !          6451:         if (ptr[1] != CHAR_PLUS && ptr[1] != CHAR_MINUS)
        !          6452:           {
        !          6453:           BOOL isnumber = TRUE;
        !          6454:           for (p = ptr + 1; *p != 0 && *p != terminator; p++)
        !          6455:             {
        !          6456:             if ((cd->ctypes[*p] & ctype_digit) == 0) isnumber = FALSE;
        !          6457:             if ((cd->ctypes[*p] & ctype_word) == 0) break;
        !          6458:             }
        !          6459:           if (*p != terminator)
        !          6460:             {
        !          6461:             *errorcodeptr = ERR57;
        !          6462:             break;
        !          6463:             }
        !          6464:           if (isnumber)
        !          6465:             {
        !          6466:             ptr++;
        !          6467:             goto HANDLE_NUMERICAL_RECURSION;
        !          6468:             }
        !          6469:           is_recurse = TRUE;
        !          6470:           goto NAMED_REF_OR_RECURSE;
        !          6471:           }
        !          6472: 
        !          6473:         /* Test a signed number in angle brackets or quotes. */
        !          6474: 
        !          6475:         p = ptr + 2;
        !          6476:         while ((digitab[*p] & ctype_digit) != 0) p++;
        !          6477:         if (*p != terminator)
        !          6478:           {
        !          6479:           *errorcodeptr = ERR57;
        !          6480:           break;
        !          6481:           }
        !          6482:         ptr++;
        !          6483:         goto HANDLE_NUMERICAL_RECURSION;
        !          6484:         }
        !          6485: 
        !          6486:       /* \k<name> or \k'name' is a back reference by name (Perl syntax).
        !          6487:       We also support \k{name} (.NET syntax).  */
        !          6488: 
        !          6489:       if (-c == ESC_k)
        !          6490:         {
        !          6491:         if ((ptr[1] != CHAR_LESS_THAN_SIGN &&
        !          6492:           ptr[1] != CHAR_APOSTROPHE && ptr[1] != CHAR_LEFT_CURLY_BRACKET))
        !          6493:           {
        !          6494:           *errorcodeptr = ERR69;
        !          6495:           break;
        !          6496:           }
        !          6497:         is_recurse = FALSE;
        !          6498:         terminator = (*(++ptr) == CHAR_LESS_THAN_SIGN)?
        !          6499:           CHAR_GREATER_THAN_SIGN : (*ptr == CHAR_APOSTROPHE)?
        !          6500:           CHAR_APOSTROPHE : CHAR_RIGHT_CURLY_BRACKET;
        !          6501:         goto NAMED_REF_OR_RECURSE;
        !          6502:         }
        !          6503: 
        !          6504:       /* Back references are handled specially; must disable firstbyte if
        !          6505:       not set to cope with cases like (?=(\w+))\1: which would otherwise set
        !          6506:       ':' later. */
        !          6507: 
        !          6508:       if (-c >= ESC_REF)
        !          6509:         {
        !          6510:         open_capitem *oc;
        !          6511:         recno = -c - ESC_REF;
        !          6512: 
        !          6513:         HANDLE_REFERENCE:    /* Come here from named backref handling */
        !          6514:         if (firstbyte == REQ_UNSET) firstbyte = REQ_NONE;
        !          6515:         previous = code;
        !          6516:         *code++ = ((options & PCRE_CASELESS) != 0)? OP_REFI : OP_REF;
        !          6517:         PUT2INC(code, 0, recno);
        !          6518:         cd->backref_map |= (recno < 32)? (1 << recno) : 1;
        !          6519:         if (recno > cd->top_backref) cd->top_backref = recno;
        !          6520: 
        !          6521:         /* Check to see if this back reference is recursive, that it, it
        !          6522:         is inside the group that it references. A flag is set so that the
        !          6523:         group can be made atomic. */
        !          6524: 
        !          6525:         for (oc = cd->open_caps; oc != NULL; oc = oc->next)
        !          6526:           {
        !          6527:           if (oc->number == recno)
        !          6528:             {
        !          6529:             oc->flag = TRUE;
        !          6530:             break;
        !          6531:             }
        !          6532:           }
        !          6533:         }
        !          6534: 
        !          6535:       /* So are Unicode property matches, if supported. */
        !          6536: 
        !          6537: #ifdef SUPPORT_UCP
        !          6538:       else if (-c == ESC_P || -c == ESC_p)
        !          6539:         {
        !          6540:         BOOL negated;
        !          6541:         int pdata;
        !          6542:         int ptype = get_ucp(&ptr, &negated, &pdata, errorcodeptr);
        !          6543:         if (ptype < 0) goto FAILED;
        !          6544:         previous = code;
        !          6545:         *code++ = ((-c == ESC_p) != negated)? OP_PROP : OP_NOTPROP;
        !          6546:         *code++ = ptype;
        !          6547:         *code++ = pdata;
        !          6548:         }
        !          6549: #else
        !          6550: 
        !          6551:       /* If Unicode properties are not supported, \X, \P, and \p are not
        !          6552:       allowed. */
        !          6553: 
        !          6554:       else if (-c == ESC_X || -c == ESC_P || -c == ESC_p)
        !          6555:         {
        !          6556:         *errorcodeptr = ERR45;
        !          6557:         goto FAILED;
        !          6558:         }
        !          6559: #endif
        !          6560: 
        !          6561:       /* For the rest (including \X when Unicode properties are supported), we
        !          6562:       can obtain the OP value by negating the escape value in the default
        !          6563:       situation when PCRE_UCP is not set. When it *is* set, we substitute
        !          6564:       Unicode property tests. */
        !          6565: 
        !          6566:       else
        !          6567:         {
        !          6568: #ifdef SUPPORT_UCP
        !          6569:         if (-c >= ESC_DU && -c <= ESC_wu)
        !          6570:           {
        !          6571:           nestptr = ptr + 1;                   /* Where to resume */
        !          6572:           ptr = substitutes[-c - ESC_DU] - 1;  /* Just before substitute */
        !          6573:           }
        !          6574:         else
        !          6575: #endif
        !          6576:         /* In non-UTF-8 mode, we turn \C into OP_ALLANY instead of OP_ANYBYTE
        !          6577:         so that it works in DFA mode and in lookbehinds. */
        !          6578: 
        !          6579:           {
        !          6580:           previous = (-c > ESC_b && -c < ESC_Z)? code : NULL;
        !          6581:           *code++ = (!utf8 && c == -ESC_C)? OP_ALLANY : -c;
        !          6582:           }
        !          6583:         }
        !          6584:       continue;
        !          6585:       }
        !          6586: 
        !          6587:     /* We have a data character whose value is in c. In UTF-8 mode it may have
        !          6588:     a value > 127. We set its representation in the length/buffer, and then
        !          6589:     handle it as a data character. */
        !          6590: 
        !          6591: #ifdef SUPPORT_UTF8
        !          6592:     if (utf8 && c > 127)
        !          6593:       mclength = _pcre_ord2utf8(c, mcbuffer);
        !          6594:     else
        !          6595: #endif
        !          6596: 
        !          6597:      {
        !          6598:      mcbuffer[0] = c;
        !          6599:      mclength = 1;
        !          6600:      }
        !          6601:     goto ONE_CHAR;
        !          6602: 
        !          6603: 
        !          6604:     /* ===================================================================*/
        !          6605:     /* Handle a literal character. It is guaranteed not to be whitespace or #
        !          6606:     when the extended flag is set. If we are in UTF-8 mode, it may be a
        !          6607:     multi-byte literal character. */
        !          6608: 
        !          6609:     default:
        !          6610:     NORMAL_CHAR:
        !          6611:     mclength = 1;
        !          6612:     mcbuffer[0] = c;
        !          6613: 
        !          6614: #ifdef SUPPORT_UTF8
        !          6615:     if (utf8 && c >= 0xc0)
        !          6616:       {
        !          6617:       while ((ptr[1] & 0xc0) == 0x80)
        !          6618:         mcbuffer[mclength++] = *(++ptr);
        !          6619:       }
        !          6620: #endif
        !          6621: 
        !          6622:     /* At this point we have the character's bytes in mcbuffer, and the length
        !          6623:     in mclength. When not in UTF-8 mode, the length is always 1. */
        !          6624: 
        !          6625:     ONE_CHAR:
        !          6626:     previous = code;
        !          6627:     *code++ = ((options & PCRE_CASELESS) != 0)? OP_CHARI : OP_CHAR;
        !          6628:     for (c = 0; c < mclength; c++) *code++ = mcbuffer[c];
        !          6629: 
        !          6630:     /* Remember if \r or \n were seen */
        !          6631: 
        !          6632:     if (mcbuffer[0] == CHAR_CR || mcbuffer[0] == CHAR_NL)
        !          6633:       cd->external_flags |= PCRE_HASCRORLF;
        !          6634: 
        !          6635:     /* Set the first and required bytes appropriately. If no previous first
        !          6636:     byte, set it from this character, but revert to none on a zero repeat.
        !          6637:     Otherwise, leave the firstbyte value alone, and don't change it on a zero
        !          6638:     repeat. */
        !          6639: 
        !          6640:     if (firstbyte == REQ_UNSET)
        !          6641:       {
        !          6642:       zerofirstbyte = REQ_NONE;
        !          6643:       zeroreqbyte = reqbyte;
        !          6644: 
        !          6645:       /* If the character is more than one byte long, we can set firstbyte
        !          6646:       only if it is not to be matched caselessly. */
        !          6647: 
        !          6648:       if (mclength == 1 || req_caseopt == 0)
        !          6649:         {
        !          6650:         firstbyte = mcbuffer[0] | req_caseopt;
        !          6651:         if (mclength != 1) reqbyte = code[-1] | cd->req_varyopt;
        !          6652:         }
        !          6653:       else firstbyte = reqbyte = REQ_NONE;
        !          6654:       }
        !          6655: 
        !          6656:     /* firstbyte was previously set; we can set reqbyte only if the length is
        !          6657:     1 or the matching is caseful. */
        !          6658: 
        !          6659:     else
        !          6660:       {
        !          6661:       zerofirstbyte = firstbyte;
        !          6662:       zeroreqbyte = reqbyte;
        !          6663:       if (mclength == 1 || req_caseopt == 0)
        !          6664:         reqbyte = code[-1] | req_caseopt | cd->req_varyopt;
        !          6665:       }
        !          6666: 
        !          6667:     break;            /* End of literal character handling */
        !          6668:     }
        !          6669:   }                   /* end of big loop */
        !          6670: 
        !          6671: 
        !          6672: /* Control never reaches here by falling through, only by a goto for all the
        !          6673: error states. Pass back the position in the pattern so that it can be displayed
        !          6674: to the user for diagnosing the error. */
        !          6675: 
        !          6676: FAILED:
        !          6677: *ptrptr = ptr;
        !          6678: return FALSE;
        !          6679: }
        !          6680: 
        !          6681: 
        !          6682: 
        !          6683: 
        !          6684: /*************************************************
        !          6685: *     Compile sequence of alternatives           *
        !          6686: *************************************************/
        !          6687: 
        !          6688: /* On entry, ptr is pointing past the bracket character, but on return it
        !          6689: points to the closing bracket, or vertical bar, or end of string. The code
        !          6690: variable is pointing at the byte into which the BRA operator has been stored.
        !          6691: This function is used during the pre-compile phase when we are trying to find
        !          6692: out the amount of memory needed, as well as during the real compile phase. The
        !          6693: value of lengthptr distinguishes the two phases.
        !          6694: 
        !          6695: Arguments:
        !          6696:   options        option bits, including any changes for this subpattern
        !          6697:   codeptr        -> the address of the current code pointer
        !          6698:   ptrptr         -> the address of the current pattern pointer
        !          6699:   errorcodeptr   -> pointer to error code variable
        !          6700:   lookbehind     TRUE if this is a lookbehind assertion
        !          6701:   reset_bracount TRUE to reset the count for each branch
        !          6702:   skipbytes      skip this many bytes at start (for brackets and OP_COND)
        !          6703:   cond_depth     depth of nesting for conditional subpatterns
        !          6704:   firstbyteptr   place to put the first required character, or a negative number
        !          6705:   reqbyteptr     place to put the last required character, or a negative number
        !          6706:   bcptr          pointer to the chain of currently open branches
        !          6707:   cd             points to the data block with tables pointers etc.
        !          6708:   lengthptr      NULL during the real compile phase
        !          6709:                  points to length accumulator during pre-compile phase
        !          6710: 
        !          6711: Returns:         TRUE on success
        !          6712: */
        !          6713: 
        !          6714: static BOOL
        !          6715: compile_regex(int options, uschar **codeptr, const uschar **ptrptr,
        !          6716:   int *errorcodeptr, BOOL lookbehind, BOOL reset_bracount, int skipbytes,
        !          6717:   int cond_depth, int *firstbyteptr, int *reqbyteptr, branch_chain *bcptr,
        !          6718:   compile_data *cd, int *lengthptr)
        !          6719: {
        !          6720: const uschar *ptr = *ptrptr;
        !          6721: uschar *code = *codeptr;
        !          6722: uschar *last_branch = code;
        !          6723: uschar *start_bracket = code;
        !          6724: uschar *reverse_count = NULL;
        !          6725: open_capitem capitem;
        !          6726: int capnumber = 0;
        !          6727: int firstbyte, reqbyte;
        !          6728: int branchfirstbyte, branchreqbyte;
        !          6729: int length;
        !          6730: int orig_bracount;
        !          6731: int max_bracount;
        !          6732: branch_chain bc;
        !          6733: 
        !          6734: bc.outer = bcptr;
        !          6735: bc.current_branch = code;
        !          6736: 
        !          6737: firstbyte = reqbyte = REQ_UNSET;
        !          6738: 
        !          6739: /* Accumulate the length for use in the pre-compile phase. Start with the
        !          6740: length of the BRA and KET and any extra bytes that are required at the
        !          6741: beginning. We accumulate in a local variable to save frequent testing of
        !          6742: lenthptr for NULL. We cannot do this by looking at the value of code at the
        !          6743: start and end of each alternative, because compiled items are discarded during
        !          6744: the pre-compile phase so that the work space is not exceeded. */
        !          6745: 
        !          6746: length = 2 + 2*LINK_SIZE + skipbytes;
        !          6747: 
        !          6748: /* WARNING: If the above line is changed for any reason, you must also change
        !          6749: the code that abstracts option settings at the start of the pattern and makes
        !          6750: them global. It tests the value of length for (2 + 2*LINK_SIZE) in the
        !          6751: pre-compile phase to find out whether anything has yet been compiled or not. */
        !          6752: 
        !          6753: /* If this is a capturing subpattern, add to the chain of open capturing items
        !          6754: so that we can detect them if (*ACCEPT) is encountered. This is also used to
        !          6755: detect groups that contain recursive back references to themselves. Note that
        !          6756: only OP_CBRA need be tested here; changing this opcode to one of its variants,
        !          6757: e.g. OP_SCBRAPOS, happens later, after the group has been compiled. */
        !          6758: 
        !          6759: if (*code == OP_CBRA)
        !          6760:   {
        !          6761:   capnumber = GET2(code, 1 + LINK_SIZE);
        !          6762:   capitem.number = capnumber;
        !          6763:   capitem.next = cd->open_caps;
        !          6764:   capitem.flag = FALSE;
        !          6765:   cd->open_caps = &capitem;
        !          6766:   }
        !          6767: 
        !          6768: /* Offset is set zero to mark that this bracket is still open */
        !          6769: 
        !          6770: PUT(code, 1, 0);
        !          6771: code += 1 + LINK_SIZE + skipbytes;
        !          6772: 
        !          6773: /* Loop for each alternative branch */
        !          6774: 
        !          6775: orig_bracount = max_bracount = cd->bracount;
        !          6776: for (;;)
        !          6777:   {
        !          6778:   /* For a (?| group, reset the capturing bracket count so that each branch
        !          6779:   uses the same numbers. */
        !          6780: 
        !          6781:   if (reset_bracount) cd->bracount = orig_bracount;
        !          6782: 
        !          6783:   /* Set up dummy OP_REVERSE if lookbehind assertion */
        !          6784: 
        !          6785:   if (lookbehind)
        !          6786:     {
        !          6787:     *code++ = OP_REVERSE;
        !          6788:     reverse_count = code;
        !          6789:     PUTINC(code, 0, 0);
        !          6790:     length += 1 + LINK_SIZE;
        !          6791:     }
        !          6792: 
        !          6793:   /* Now compile the branch; in the pre-compile phase its length gets added
        !          6794:   into the length. */
        !          6795: 
        !          6796:   if (!compile_branch(&options, &code, &ptr, errorcodeptr, &branchfirstbyte,
        !          6797:         &branchreqbyte, &bc, cond_depth, cd,
        !          6798:         (lengthptr == NULL)? NULL : &length))
        !          6799:     {
        !          6800:     *ptrptr = ptr;
        !          6801:     return FALSE;
        !          6802:     }
        !          6803: 
        !          6804:   /* Keep the highest bracket count in case (?| was used and some branch
        !          6805:   has fewer than the rest. */
        !          6806: 
        !          6807:   if (cd->bracount > max_bracount) max_bracount = cd->bracount;
        !          6808: 
        !          6809:   /* In the real compile phase, there is some post-processing to be done. */
        !          6810: 
        !          6811:   if (lengthptr == NULL)
        !          6812:     {
        !          6813:     /* If this is the first branch, the firstbyte and reqbyte values for the
        !          6814:     branch become the values for the regex. */
        !          6815: 
        !          6816:     if (*last_branch != OP_ALT)
        !          6817:       {
        !          6818:       firstbyte = branchfirstbyte;
        !          6819:       reqbyte = branchreqbyte;
        !          6820:       }
        !          6821: 
        !          6822:     /* If this is not the first branch, the first char and reqbyte have to
        !          6823:     match the values from all the previous branches, except that if the
        !          6824:     previous value for reqbyte didn't have REQ_VARY set, it can still match,
        !          6825:     and we set REQ_VARY for the regex. */
        !          6826: 
        !          6827:     else
        !          6828:       {
        !          6829:       /* If we previously had a firstbyte, but it doesn't match the new branch,
        !          6830:       we have to abandon the firstbyte for the regex, but if there was
        !          6831:       previously no reqbyte, it takes on the value of the old firstbyte. */
        !          6832: 
        !          6833:       if (firstbyte >= 0 && firstbyte != branchfirstbyte)
        !          6834:         {
        !          6835:         if (reqbyte < 0) reqbyte = firstbyte;
        !          6836:         firstbyte = REQ_NONE;
        !          6837:         }
        !          6838: 
        !          6839:       /* If we (now or from before) have no firstbyte, a firstbyte from the
        !          6840:       branch becomes a reqbyte if there isn't a branch reqbyte. */
        !          6841: 
        !          6842:       if (firstbyte < 0 && branchfirstbyte >= 0 && branchreqbyte < 0)
        !          6843:           branchreqbyte = branchfirstbyte;
        !          6844: 
        !          6845:       /* Now ensure that the reqbytes match */
        !          6846: 
        !          6847:       if ((reqbyte & ~REQ_VARY) != (branchreqbyte & ~REQ_VARY))
        !          6848:         reqbyte = REQ_NONE;
        !          6849:       else reqbyte |= branchreqbyte;   /* To "or" REQ_VARY */
        !          6850:       }
        !          6851: 
        !          6852:     /* If lookbehind, check that this branch matches a fixed-length string, and
        !          6853:     put the length into the OP_REVERSE item. Temporarily mark the end of the
        !          6854:     branch with OP_END. If the branch contains OP_RECURSE, the result is -3
        !          6855:     because there may be forward references that we can't check here. Set a
        !          6856:     flag to cause another lookbehind check at the end. Why not do it all at the
        !          6857:     end? Because common, erroneous checks are picked up here and the offset of
        !          6858:     the problem can be shown. */
        !          6859: 
        !          6860:     if (lookbehind)
        !          6861:       {
        !          6862:       int fixed_length;
        !          6863:       *code = OP_END;
        !          6864:       fixed_length = find_fixedlength(last_branch,  (options & PCRE_UTF8) != 0,
        !          6865:         FALSE, cd);
        !          6866:       DPRINTF(("fixed length = %d\n", fixed_length));
        !          6867:       if (fixed_length == -3)
        !          6868:         {
        !          6869:         cd->check_lookbehind = TRUE;
        !          6870:         }
        !          6871:       else if (fixed_length < 0)
        !          6872:         {
        !          6873:         *errorcodeptr = (fixed_length == -2)? ERR36 :
        !          6874:                         (fixed_length == -4)? ERR70: ERR25;
        !          6875:         *ptrptr = ptr;
        !          6876:         return FALSE;
        !          6877:         }
        !          6878:       else { PUT(reverse_count, 0, fixed_length); }
        !          6879:       }
        !          6880:     }
        !          6881: 
        !          6882:   /* Reached end of expression, either ')' or end of pattern. In the real
        !          6883:   compile phase, go back through the alternative branches and reverse the chain
        !          6884:   of offsets, with the field in the BRA item now becoming an offset to the
        !          6885:   first alternative. If there are no alternatives, it points to the end of the
        !          6886:   group. The length in the terminating ket is always the length of the whole
        !          6887:   bracketed item. Return leaving the pointer at the terminating char. */
        !          6888: 
        !          6889:   if (*ptr != CHAR_VERTICAL_LINE)
        !          6890:     {
        !          6891:     if (lengthptr == NULL)
        !          6892:       {
        !          6893:       int branch_length = (int)(code - last_branch);
        !          6894:       do
        !          6895:         {
        !          6896:         int prev_length = GET(last_branch, 1);
        !          6897:         PUT(last_branch, 1, branch_length);
        !          6898:         branch_length = prev_length;
        !          6899:         last_branch -= branch_length;
        !          6900:         }
        !          6901:       while (branch_length > 0);
        !          6902:       }
        !          6903: 
        !          6904:     /* Fill in the ket */
        !          6905: 
        !          6906:     *code = OP_KET;
        !          6907:     PUT(code, 1, (int)(code - start_bracket));
        !          6908:     code += 1 + LINK_SIZE;
        !          6909: 
        !          6910:     /* If it was a capturing subpattern, check to see if it contained any
        !          6911:     recursive back references. If so, we must wrap it in atomic brackets.
        !          6912:     In any event, remove the block from the chain. */
        !          6913: 
        !          6914:     if (capnumber > 0)
        !          6915:       {
        !          6916:       if (cd->open_caps->flag)
        !          6917:         {
        !          6918:         memmove(start_bracket + 1 + LINK_SIZE, start_bracket,
        !          6919:           code - start_bracket);
        !          6920:         *start_bracket = OP_ONCE;
        !          6921:         code += 1 + LINK_SIZE;
        !          6922:         PUT(start_bracket, 1, (int)(code - start_bracket));
        !          6923:         *code = OP_KET;
        !          6924:         PUT(code, 1, (int)(code - start_bracket));
        !          6925:         code += 1 + LINK_SIZE;
        !          6926:         length += 2 + 2*LINK_SIZE;
        !          6927:         }
        !          6928:       cd->open_caps = cd->open_caps->next;
        !          6929:       }
        !          6930: 
        !          6931:     /* Retain the highest bracket number, in case resetting was used. */
        !          6932: 
        !          6933:     cd->bracount = max_bracount;
        !          6934: 
        !          6935:     /* Set values to pass back */
        !          6936: 
        !          6937:     *codeptr = code;
        !          6938:     *ptrptr = ptr;
        !          6939:     *firstbyteptr = firstbyte;
        !          6940:     *reqbyteptr = reqbyte;
        !          6941:     if (lengthptr != NULL)
        !          6942:       {
        !          6943:       if (OFLOW_MAX - *lengthptr < length)
        !          6944:         {
        !          6945:         *errorcodeptr = ERR20;
        !          6946:         return FALSE;
        !          6947:         }
        !          6948:       *lengthptr += length;
        !          6949:       }
        !          6950:     return TRUE;
        !          6951:     }
        !          6952: 
        !          6953:   /* Another branch follows. In the pre-compile phase, we can move the code
        !          6954:   pointer back to where it was for the start of the first branch. (That is,
        !          6955:   pretend that each branch is the only one.)
        !          6956: 
        !          6957:   In the real compile phase, insert an ALT node. Its length field points back
        !          6958:   to the previous branch while the bracket remains open. At the end the chain
        !          6959:   is reversed. It's done like this so that the start of the bracket has a
        !          6960:   zero offset until it is closed, making it possible to detect recursion. */
        !          6961: 
        !          6962:   if (lengthptr != NULL)
        !          6963:     {
        !          6964:     code = *codeptr + 1 + LINK_SIZE + skipbytes;
        !          6965:     length += 1 + LINK_SIZE;
        !          6966:     }
        !          6967:   else
        !          6968:     {
        !          6969:     *code = OP_ALT;
        !          6970:     PUT(code, 1, (int)(code - last_branch));
        !          6971:     bc.current_branch = last_branch = code;
        !          6972:     code += 1 + LINK_SIZE;
        !          6973:     }
        !          6974: 
        !          6975:   ptr++;
        !          6976:   }
        !          6977: /* Control never reaches here */
        !          6978: }
        !          6979: 
        !          6980: 
        !          6981: 
        !          6982: 
        !          6983: /*************************************************
        !          6984: *          Check for anchored expression         *
        !          6985: *************************************************/
        !          6986: 
        !          6987: /* Try to find out if this is an anchored regular expression. Consider each
        !          6988: alternative branch. If they all start with OP_SOD or OP_CIRC, or with a bracket
        !          6989: all of whose alternatives start with OP_SOD or OP_CIRC (recurse ad lib), then
        !          6990: it's anchored. However, if this is a multiline pattern, then only OP_SOD will
        !          6991: be found, because ^ generates OP_CIRCM in that mode.
        !          6992: 
        !          6993: We can also consider a regex to be anchored if OP_SOM starts all its branches.
        !          6994: This is the code for \G, which means "match at start of match position, taking
        !          6995: into account the match offset".
        !          6996: 
        !          6997: A branch is also implicitly anchored if it starts with .* and DOTALL is set,
        !          6998: because that will try the rest of the pattern at all possible matching points,
        !          6999: so there is no point trying again.... er ....
        !          7000: 
        !          7001: .... except when the .* appears inside capturing parentheses, and there is a
        !          7002: subsequent back reference to those parentheses. We haven't enough information
        !          7003: to catch that case precisely.
        !          7004: 
        !          7005: At first, the best we could do was to detect when .* was in capturing brackets
        !          7006: and the highest back reference was greater than or equal to that level.
        !          7007: However, by keeping a bitmap of the first 31 back references, we can catch some
        !          7008: of the more common cases more precisely.
        !          7009: 
        !          7010: Arguments:
        !          7011:   code           points to start of expression (the bracket)
        !          7012:   bracket_map    a bitmap of which brackets we are inside while testing; this
        !          7013:                   handles up to substring 31; after that we just have to take
        !          7014:                   the less precise approach
        !          7015:   backref_map    the back reference bitmap
        !          7016: 
        !          7017: Returns:     TRUE or FALSE
        !          7018: */
        !          7019: 
        !          7020: static BOOL
        !          7021: is_anchored(register const uschar *code, unsigned int bracket_map,
        !          7022:   unsigned int backref_map)
        !          7023: {
        !          7024: do {
        !          7025:    const uschar *scode = first_significant_code(code + _pcre_OP_lengths[*code],
        !          7026:      FALSE);
        !          7027:    register int op = *scode;
        !          7028: 
        !          7029:    /* Non-capturing brackets */
        !          7030: 
        !          7031:    if (op == OP_BRA  || op == OP_BRAPOS ||
        !          7032:        op == OP_SBRA || op == OP_SBRAPOS)
        !          7033:      {
        !          7034:      if (!is_anchored(scode, bracket_map, backref_map)) return FALSE;
        !          7035:      }
        !          7036: 
        !          7037:    /* Capturing brackets */
        !          7038: 
        !          7039:    else if (op == OP_CBRA  || op == OP_CBRAPOS ||
        !          7040:             op == OP_SCBRA || op == OP_SCBRAPOS)
        !          7041:      {
        !          7042:      int n = GET2(scode, 1+LINK_SIZE);
        !          7043:      int new_map = bracket_map | ((n < 32)? (1 << n) : 1);
        !          7044:      if (!is_anchored(scode, new_map, backref_map)) return FALSE;
        !          7045:      }
        !          7046: 
        !          7047:    /* Other brackets */
        !          7048: 
        !          7049:    else if (op == OP_ASSERT || op == OP_ONCE || op == OP_ONCE_NC ||
        !          7050:             op == OP_COND)
        !          7051:      {
        !          7052:      if (!is_anchored(scode, bracket_map, backref_map)) return FALSE;
        !          7053:      }
        !          7054: 
        !          7055:    /* .* is not anchored unless DOTALL is set (which generates OP_ALLANY) and
        !          7056:    it isn't in brackets that are or may be referenced. */
        !          7057: 
        !          7058:    else if ((op == OP_TYPESTAR || op == OP_TYPEMINSTAR ||
        !          7059:              op == OP_TYPEPOSSTAR))
        !          7060:      {
        !          7061:      if (scode[1] != OP_ALLANY || (bracket_map & backref_map) != 0)
        !          7062:        return FALSE;
        !          7063:      }
        !          7064: 
        !          7065:    /* Check for explicit anchoring */
        !          7066: 
        !          7067:    else if (op != OP_SOD && op != OP_SOM && op != OP_CIRC) return FALSE;
        !          7068:    code += GET(code, 1);
        !          7069:    }
        !          7070: while (*code == OP_ALT);   /* Loop for each alternative */
        !          7071: return TRUE;
        !          7072: }
        !          7073: 
        !          7074: 
        !          7075: 
        !          7076: /*************************************************
        !          7077: *         Check for starting with ^ or .*        *
        !          7078: *************************************************/
        !          7079: 
        !          7080: /* This is called to find out if every branch starts with ^ or .* so that
        !          7081: "first char" processing can be done to speed things up in multiline
        !          7082: matching and for non-DOTALL patterns that start with .* (which must start at
        !          7083: the beginning or after \n). As in the case of is_anchored() (see above), we
        !          7084: have to take account of back references to capturing brackets that contain .*
        !          7085: because in that case we can't make the assumption.
        !          7086: 
        !          7087: Arguments:
        !          7088:   code           points to start of expression (the bracket)
        !          7089:   bracket_map    a bitmap of which brackets we are inside while testing; this
        !          7090:                   handles up to substring 31; after that we just have to take
        !          7091:                   the less precise approach
        !          7092:   backref_map    the back reference bitmap
        !          7093: 
        !          7094: Returns:         TRUE or FALSE
        !          7095: */
        !          7096: 
        !          7097: static BOOL
        !          7098: is_startline(const uschar *code, unsigned int bracket_map,
        !          7099:   unsigned int backref_map)
        !          7100: {
        !          7101: do {
        !          7102:    const uschar *scode = first_significant_code(code + _pcre_OP_lengths[*code],
        !          7103:      FALSE);
        !          7104:    register int op = *scode;
        !          7105: 
        !          7106:    /* If we are at the start of a conditional assertion group, *both* the
        !          7107:    conditional assertion *and* what follows the condition must satisfy the test
        !          7108:    for start of line. Other kinds of condition fail. Note that there may be an
        !          7109:    auto-callout at the start of a condition. */
        !          7110: 
        !          7111:    if (op == OP_COND)
        !          7112:      {
        !          7113:      scode += 1 + LINK_SIZE;
        !          7114:      if (*scode == OP_CALLOUT) scode += _pcre_OP_lengths[OP_CALLOUT];
        !          7115:      switch (*scode)
        !          7116:        {
        !          7117:        case OP_CREF:
        !          7118:        case OP_NCREF:
        !          7119:        case OP_RREF:
        !          7120:        case OP_NRREF:
        !          7121:        case OP_DEF:
        !          7122:        return FALSE;
        !          7123: 
        !          7124:        default:     /* Assertion */
        !          7125:        if (!is_startline(scode, bracket_map, backref_map)) return FALSE;
        !          7126:        do scode += GET(scode, 1); while (*scode == OP_ALT);
        !          7127:        scode += 1 + LINK_SIZE;
        !          7128:        break;
        !          7129:        }
        !          7130:      scode = first_significant_code(scode, FALSE);
        !          7131:      op = *scode;
        !          7132:      }
        !          7133: 
        !          7134:    /* Non-capturing brackets */
        !          7135: 
        !          7136:    if (op == OP_BRA  || op == OP_BRAPOS ||
        !          7137:        op == OP_SBRA || op == OP_SBRAPOS)
        !          7138:      {
        !          7139:      if (!is_startline(scode, bracket_map, backref_map)) return FALSE;
        !          7140:      }
        !          7141: 
        !          7142:    /* Capturing brackets */
        !          7143: 
        !          7144:    else if (op == OP_CBRA  || op == OP_CBRAPOS ||
        !          7145:             op == OP_SCBRA || op == OP_SCBRAPOS)
        !          7146:      {
        !          7147:      int n = GET2(scode, 1+LINK_SIZE);
        !          7148:      int new_map = bracket_map | ((n < 32)? (1 << n) : 1);
        !          7149:      if (!is_startline(scode, new_map, backref_map)) return FALSE;
        !          7150:      }
        !          7151: 
        !          7152:    /* Other brackets */
        !          7153: 
        !          7154:    else if (op == OP_ASSERT || op == OP_ONCE || op == OP_ONCE_NC)
        !          7155:      {
        !          7156:      if (!is_startline(scode, bracket_map, backref_map)) return FALSE;
        !          7157:      }
        !          7158: 
        !          7159:    /* .* means "start at start or after \n" if it isn't in brackets that
        !          7160:    may be referenced. */
        !          7161: 
        !          7162:    else if (op == OP_TYPESTAR || op == OP_TYPEMINSTAR || op == OP_TYPEPOSSTAR)
        !          7163:      {
        !          7164:      if (scode[1] != OP_ANY || (bracket_map & backref_map) != 0) return FALSE;
        !          7165:      }
        !          7166: 
        !          7167:    /* Check for explicit circumflex */
        !          7168: 
        !          7169:    else if (op != OP_CIRC && op != OP_CIRCM) return FALSE;
        !          7170: 
        !          7171:    /* Move on to the next alternative */
        !          7172: 
        !          7173:    code += GET(code, 1);
        !          7174:    }
        !          7175: while (*code == OP_ALT);  /* Loop for each alternative */
        !          7176: return TRUE;
        !          7177: }
        !          7178: 
        !          7179: 
        !          7180: 
        !          7181: /*************************************************
        !          7182: *       Check for asserted fixed first char      *
        !          7183: *************************************************/
        !          7184: 
        !          7185: /* During compilation, the "first char" settings from forward assertions are
        !          7186: discarded, because they can cause conflicts with actual literals that follow.
        !          7187: However, if we end up without a first char setting for an unanchored pattern,
        !          7188: it is worth scanning the regex to see if there is an initial asserted first
        !          7189: char. If all branches start with the same asserted char, or with a bracket all
        !          7190: of whose alternatives start with the same asserted char (recurse ad lib), then
        !          7191: we return that char, otherwise -1.
        !          7192: 
        !          7193: Arguments:
        !          7194:   code       points to start of expression (the bracket)
        !          7195:   inassert   TRUE if in an assertion
        !          7196: 
        !          7197: Returns:     -1 or the fixed first char
        !          7198: */
        !          7199: 
        !          7200: static int
        !          7201: find_firstassertedchar(const uschar *code, BOOL inassert)
        !          7202: {
        !          7203: register int c = -1;
        !          7204: do {
        !          7205:    int d;
        !          7206:    int xl = (*code == OP_CBRA || *code == OP_SCBRA ||
        !          7207:              *code == OP_CBRAPOS || *code == OP_SCBRAPOS)? 2:0;
        !          7208:    const uschar *scode = first_significant_code(code + 1+LINK_SIZE + xl, TRUE);
        !          7209:    register int op = *scode;
        !          7210: 
        !          7211:    switch(op)
        !          7212:      {
        !          7213:      default:
        !          7214:      return -1;
        !          7215: 
        !          7216:      case OP_BRA:
        !          7217:      case OP_BRAPOS:
        !          7218:      case OP_CBRA:
        !          7219:      case OP_SCBRA:
        !          7220:      case OP_CBRAPOS:
        !          7221:      case OP_SCBRAPOS:
        !          7222:      case OP_ASSERT:
        !          7223:      case OP_ONCE:
        !          7224:      case OP_ONCE_NC:
        !          7225:      case OP_COND:
        !          7226:      if ((d = find_firstassertedchar(scode, op == OP_ASSERT)) < 0)
        !          7227:        return -1;
        !          7228:      if (c < 0) c = d; else if (c != d) return -1;
        !          7229:      break;
        !          7230: 
        !          7231:      case OP_EXACT:
        !          7232:      scode += 2;
        !          7233:      /* Fall through */
        !          7234: 
        !          7235:      case OP_CHAR:
        !          7236:      case OP_PLUS:
        !          7237:      case OP_MINPLUS:
        !          7238:      case OP_POSPLUS:
        !          7239:      if (!inassert) return -1;
        !          7240:      if (c < 0) c = scode[1];
        !          7241:        else if (c != scode[1]) return -1;
        !          7242:      break;
        !          7243: 
        !          7244:      case OP_EXACTI:
        !          7245:      scode += 2;
        !          7246:      /* Fall through */
        !          7247: 
        !          7248:      case OP_CHARI:
        !          7249:      case OP_PLUSI:
        !          7250:      case OP_MINPLUSI:
        !          7251:      case OP_POSPLUSI:
        !          7252:      if (!inassert) return -1;
        !          7253:      if (c < 0) c = scode[1] | REQ_CASELESS;
        !          7254:        else if (c != scode[1]) return -1;
        !          7255:      break;
        !          7256:      }
        !          7257: 
        !          7258:    code += GET(code, 1);
        !          7259:    }
        !          7260: while (*code == OP_ALT);
        !          7261: return c;
        !          7262: }
        !          7263: 
        !          7264: 
        !          7265: 
        !          7266: /*************************************************
        !          7267: *        Compile a Regular Expression            *
        !          7268: *************************************************/
        !          7269: 
        !          7270: /* This function takes a string and returns a pointer to a block of store
        !          7271: holding a compiled version of the expression. The original API for this
        !          7272: function had no error code return variable; it is retained for backwards
        !          7273: compatibility. The new function is given a new name.
        !          7274: 
        !          7275: Arguments:
        !          7276:   pattern       the regular expression
        !          7277:   options       various option bits
        !          7278:   errorcodeptr  pointer to error code variable (pcre_compile2() only)
        !          7279:                   can be NULL if you don't want a code value
        !          7280:   errorptr      pointer to pointer to error text
        !          7281:   erroroffset   ptr offset in pattern where error was detected
        !          7282:   tables        pointer to character tables or NULL
        !          7283: 
        !          7284: Returns:        pointer to compiled data block, or NULL on error,
        !          7285:                 with errorptr and erroroffset set
        !          7286: */
        !          7287: 
        !          7288: PCRE_EXP_DEFN pcre * PCRE_CALL_CONVENTION
        !          7289: pcre_compile(const char *pattern, int options, const char **errorptr,
        !          7290:   int *erroroffset, const unsigned char *tables)
        !          7291: {
        !          7292: return pcre_compile2(pattern, options, NULL, errorptr, erroroffset, tables);
        !          7293: }
        !          7294: 
        !          7295: 
        !          7296: PCRE_EXP_DEFN pcre * PCRE_CALL_CONVENTION
        !          7297: pcre_compile2(const char *pattern, int options, int *errorcodeptr,
        !          7298:   const char **errorptr, int *erroroffset, const unsigned char *tables)
        !          7299: {
        !          7300: real_pcre *re;
        !          7301: int length = 1;  /* For final END opcode */
        !          7302: int firstbyte, reqbyte, newline;
        !          7303: int errorcode = 0;
        !          7304: int skipatstart = 0;
        !          7305: BOOL utf8;
        !          7306: size_t size;
        !          7307: uschar *code;
        !          7308: const uschar *codestart;
        !          7309: const uschar *ptr;
        !          7310: compile_data compile_block;
        !          7311: compile_data *cd = &compile_block;
        !          7312: 
        !          7313: /* This space is used for "compiling" into during the first phase, when we are
        !          7314: computing the amount of memory that is needed. Compiled items are thrown away
        !          7315: as soon as possible, so that a fairly large buffer should be sufficient for
        !          7316: this purpose. The same space is used in the second phase for remembering where
        !          7317: to fill in forward references to subpatterns. That may overflow, in which case
        !          7318: new memory is obtained from malloc(). */
        !          7319: 
        !          7320: uschar cworkspace[COMPILE_WORK_SIZE];
        !          7321: 
        !          7322: /* Set this early so that early errors get offset 0. */
        !          7323: 
        !          7324: ptr = (const uschar *)pattern;
        !          7325: 
        !          7326: /* We can't pass back an error message if errorptr is NULL; I guess the best we
        !          7327: can do is just return NULL, but we can set a code value if there is a code
        !          7328: pointer. */
        !          7329: 
        !          7330: if (errorptr == NULL)
        !          7331:   {
        !          7332:   if (errorcodeptr != NULL) *errorcodeptr = 99;
        !          7333:   return NULL;
        !          7334:   }
        !          7335: 
        !          7336: *errorptr = NULL;
        !          7337: if (errorcodeptr != NULL) *errorcodeptr = ERR0;
        !          7338: 
        !          7339: /* However, we can give a message for this error */
        !          7340: 
        !          7341: if (erroroffset == NULL)
        !          7342:   {
        !          7343:   errorcode = ERR16;
        !          7344:   goto PCRE_EARLY_ERROR_RETURN2;
        !          7345:   }
        !          7346: 
        !          7347: *erroroffset = 0;
        !          7348: 
        !          7349: /* Set up pointers to the individual character tables */
        !          7350: 
        !          7351: if (tables == NULL) tables = _pcre_default_tables;
        !          7352: cd->lcc = tables + lcc_offset;
        !          7353: cd->fcc = tables + fcc_offset;
        !          7354: cd->cbits = tables + cbits_offset;
        !          7355: cd->ctypes = tables + ctypes_offset;
        !          7356: 
        !          7357: /* Check that all undefined public option bits are zero */
        !          7358: 
        !          7359: if ((options & ~PUBLIC_COMPILE_OPTIONS) != 0)
        !          7360:   {
        !          7361:   errorcode = ERR17;
        !          7362:   goto PCRE_EARLY_ERROR_RETURN;
        !          7363:   }
        !          7364: 
        !          7365: /* Check for global one-time settings at the start of the pattern, and remember
        !          7366: the offset for later. */
        !          7367: 
        !          7368: while (ptr[skipatstart] == CHAR_LEFT_PARENTHESIS &&
        !          7369:        ptr[skipatstart+1] == CHAR_ASTERISK)
        !          7370:   {
        !          7371:   int newnl = 0;
        !          7372:   int newbsr = 0;
        !          7373: 
        !          7374:   if (strncmp((char *)(ptr+skipatstart+2), STRING_UTF8_RIGHTPAR, 5) == 0)
        !          7375:     { skipatstart += 7; options |= PCRE_UTF8; continue; }
        !          7376:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_UCP_RIGHTPAR, 4) == 0)
        !          7377:     { skipatstart += 6; options |= PCRE_UCP; continue; }
        !          7378:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_NO_START_OPT_RIGHTPAR, 13) == 0)
        !          7379:     { skipatstart += 15; options |= PCRE_NO_START_OPTIMIZE; continue; }
        !          7380: 
        !          7381:   if (strncmp((char *)(ptr+skipatstart+2), STRING_CR_RIGHTPAR, 3) == 0)
        !          7382:     { skipatstart += 5; newnl = PCRE_NEWLINE_CR; }
        !          7383:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_LF_RIGHTPAR, 3)  == 0)
        !          7384:     { skipatstart += 5; newnl = PCRE_NEWLINE_LF; }
        !          7385:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_CRLF_RIGHTPAR, 5)  == 0)
        !          7386:     { skipatstart += 7; newnl = PCRE_NEWLINE_CR + PCRE_NEWLINE_LF; }
        !          7387:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_ANY_RIGHTPAR, 4) == 0)
        !          7388:     { skipatstart += 6; newnl = PCRE_NEWLINE_ANY; }
        !          7389:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_ANYCRLF_RIGHTPAR, 8) == 0)
        !          7390:     { skipatstart += 10; newnl = PCRE_NEWLINE_ANYCRLF; }
        !          7391: 
        !          7392:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_BSR_ANYCRLF_RIGHTPAR, 12) == 0)
        !          7393:     { skipatstart += 14; newbsr = PCRE_BSR_ANYCRLF; }
        !          7394:   else if (strncmp((char *)(ptr+skipatstart+2), STRING_BSR_UNICODE_RIGHTPAR, 12) == 0)
        !          7395:     { skipatstart += 14; newbsr = PCRE_BSR_UNICODE; }
        !          7396: 
        !          7397:   if (newnl != 0)
        !          7398:     options = (options & ~PCRE_NEWLINE_BITS) | newnl;
        !          7399:   else if (newbsr != 0)
        !          7400:     options = (options & ~(PCRE_BSR_ANYCRLF|PCRE_BSR_UNICODE)) | newbsr;
        !          7401:   else break;
        !          7402:   }
        !          7403: 
        !          7404: utf8 = (options & PCRE_UTF8) != 0;
        !          7405: 
        !          7406: /* Can't support UTF8 unless PCRE has been compiled to include the code. The
        !          7407: return of an error code from _pcre_valid_utf8() is a new feature, introduced in
        !          7408: release 8.13. It is passed back from pcre_[dfa_]exec(), but at the moment is
        !          7409: not used here. */
        !          7410: 
        !          7411: #ifdef SUPPORT_UTF8
        !          7412: if (utf8 && (options & PCRE_NO_UTF8_CHECK) == 0 &&
        !          7413:      (errorcode = _pcre_valid_utf8((USPTR)pattern, -1, erroroffset)) != 0)
        !          7414:   {
        !          7415:   errorcode = ERR44;
        !          7416:   goto PCRE_EARLY_ERROR_RETURN2;
        !          7417:   }
        !          7418: #else
        !          7419: if (utf8)
        !          7420:   {
        !          7421:   errorcode = ERR32;
        !          7422:   goto PCRE_EARLY_ERROR_RETURN;
        !          7423:   }
        !          7424: #endif
        !          7425: 
        !          7426: /* Can't support UCP unless PCRE has been compiled to include the code. */
        !          7427: 
        !          7428: #ifndef SUPPORT_UCP
        !          7429: if ((options & PCRE_UCP) != 0)
        !          7430:   {
        !          7431:   errorcode = ERR67;
        !          7432:   goto PCRE_EARLY_ERROR_RETURN;
        !          7433:   }
        !          7434: #endif
        !          7435: 
        !          7436: /* Check validity of \R options. */
        !          7437: 
        !          7438: if ((options & (PCRE_BSR_ANYCRLF|PCRE_BSR_UNICODE)) ==
        !          7439:      (PCRE_BSR_ANYCRLF|PCRE_BSR_UNICODE))
        !          7440:   {
        !          7441:   errorcode = ERR56;
        !          7442:   goto PCRE_EARLY_ERROR_RETURN;
        !          7443:   }
        !          7444: 
        !          7445: /* Handle different types of newline. The three bits give seven cases. The
        !          7446: current code allows for fixed one- or two-byte sequences, plus "any" and
        !          7447: "anycrlf". */
        !          7448: 
        !          7449: switch (options & PCRE_NEWLINE_BITS)
        !          7450:   {
        !          7451:   case 0: newline = NEWLINE; break;   /* Build-time default */
        !          7452:   case PCRE_NEWLINE_CR: newline = CHAR_CR; break;
        !          7453:   case PCRE_NEWLINE_LF: newline = CHAR_NL; break;
        !          7454:   case PCRE_NEWLINE_CR+
        !          7455:        PCRE_NEWLINE_LF: newline = (CHAR_CR << 8) | CHAR_NL; break;
        !          7456:   case PCRE_NEWLINE_ANY: newline = -1; break;
        !          7457:   case PCRE_NEWLINE_ANYCRLF: newline = -2; break;
        !          7458:   default: errorcode = ERR56; goto PCRE_EARLY_ERROR_RETURN;
        !          7459:   }
        !          7460: 
        !          7461: if (newline == -2)
        !          7462:   {
        !          7463:   cd->nltype = NLTYPE_ANYCRLF;
        !          7464:   }
        !          7465: else if (newline < 0)
        !          7466:   {
        !          7467:   cd->nltype = NLTYPE_ANY;
        !          7468:   }
        !          7469: else
        !          7470:   {
        !          7471:   cd->nltype = NLTYPE_FIXED;
        !          7472:   if (newline > 255)
        !          7473:     {
        !          7474:     cd->nllen = 2;
        !          7475:     cd->nl[0] = (newline >> 8) & 255;
        !          7476:     cd->nl[1] = newline & 255;
        !          7477:     }
        !          7478:   else
        !          7479:     {
        !          7480:     cd->nllen = 1;
        !          7481:     cd->nl[0] = newline;
        !          7482:     }
        !          7483:   }
        !          7484: 
        !          7485: /* Maximum back reference and backref bitmap. The bitmap records up to 31 back
        !          7486: references to help in deciding whether (.*) can be treated as anchored or not.
        !          7487: */
        !          7488: 
        !          7489: cd->top_backref = 0;
        !          7490: cd->backref_map = 0;
        !          7491: 
        !          7492: /* Reflect pattern for debugging output */
        !          7493: 
        !          7494: DPRINTF(("------------------------------------------------------------------\n"));
        !          7495: DPRINTF(("%s\n", pattern));
        !          7496: 
        !          7497: /* Pretend to compile the pattern while actually just accumulating the length
        !          7498: of memory required. This behaviour is triggered by passing a non-NULL final
        !          7499: argument to compile_regex(). We pass a block of workspace (cworkspace) for it
        !          7500: to compile parts of the pattern into; the compiled code is discarded when it is
        !          7501: no longer needed, so hopefully this workspace will never overflow, though there
        !          7502: is a test for its doing so. */
        !          7503: 
        !          7504: cd->bracount = cd->final_bracount = 0;
        !          7505: cd->names_found = 0;
        !          7506: cd->name_entry_size = 0;
        !          7507: cd->name_table = NULL;
        !          7508: cd->start_code = cworkspace;
        !          7509: cd->hwm = cworkspace;
        !          7510: cd->start_workspace = cworkspace;
        !          7511: cd->workspace_size = COMPILE_WORK_SIZE;
        !          7512: cd->start_pattern = (const uschar *)pattern;
        !          7513: cd->end_pattern = (const uschar *)(pattern + strlen(pattern));
        !          7514: cd->req_varyopt = 0;
        !          7515: cd->external_options = options;
        !          7516: cd->external_flags = 0;
        !          7517: cd->open_caps = NULL;
        !          7518: 
        !          7519: /* Now do the pre-compile. On error, errorcode will be set non-zero, so we
        !          7520: don't need to look at the result of the function here. The initial options have
        !          7521: been put into the cd block so that they can be changed if an option setting is
        !          7522: found within the regex right at the beginning. Bringing initial option settings
        !          7523: outside can help speed up starting point checks. */
        !          7524: 
        !          7525: ptr += skipatstart;
        !          7526: code = cworkspace;
        !          7527: *code = OP_BRA;
        !          7528: (void)compile_regex(cd->external_options, &code, &ptr, &errorcode, FALSE,
        !          7529:   FALSE, 0, 0, &firstbyte, &reqbyte, NULL, cd, &length);
        !          7530: if (errorcode != 0) goto PCRE_EARLY_ERROR_RETURN;
        !          7531: 
        !          7532: DPRINTF(("end pre-compile: length=%d workspace=%d\n", length,
        !          7533:   cd->hwm - cworkspace));
        !          7534: 
        !          7535: if (length > MAX_PATTERN_SIZE)
        !          7536:   {
        !          7537:   errorcode = ERR20;
        !          7538:   goto PCRE_EARLY_ERROR_RETURN;
        !          7539:   }
        !          7540: 
        !          7541: /* Compute the size of data block needed and get it, either from malloc or
        !          7542: externally provided function. Integer overflow should no longer be possible
        !          7543: because nowadays we limit the maximum value of cd->names_found and
        !          7544: cd->name_entry_size. */
        !          7545: 
        !          7546: size = length + sizeof(real_pcre) + cd->names_found * cd->name_entry_size;
        !          7547: re = (real_pcre *)(pcre_malloc)(size);
        !          7548: 
        !          7549: if (re == NULL)
        !          7550:   {
        !          7551:   errorcode = ERR21;
        !          7552:   goto PCRE_EARLY_ERROR_RETURN;
        !          7553:   }
        !          7554: 
        !          7555: /* Put in the magic number, and save the sizes, initial options, internal
        !          7556: flags, and character table pointer. NULL is used for the default character
        !          7557: tables. The nullpad field is at the end; it's there to help in the case when a
        !          7558: regex compiled on a system with 4-byte pointers is run on another with 8-byte
        !          7559: pointers. */
        !          7560: 
        !          7561: re->magic_number = MAGIC_NUMBER;
        !          7562: re->size = (int)size;
        !          7563: re->options = cd->external_options;
        !          7564: re->flags = cd->external_flags;
        !          7565: re->dummy1 = 0;
        !          7566: re->first_byte = 0;
        !          7567: re->req_byte = 0;
        !          7568: re->name_table_offset = sizeof(real_pcre);
        !          7569: re->name_entry_size = cd->name_entry_size;
        !          7570: re->name_count = cd->names_found;
        !          7571: re->ref_count = 0;
        !          7572: re->tables = (tables == _pcre_default_tables)? NULL : tables;
        !          7573: re->nullpad = NULL;
        !          7574: 
        !          7575: /* The starting points of the name/number translation table and of the code are
        !          7576: passed around in the compile data block. The start/end pattern and initial
        !          7577: options are already set from the pre-compile phase, as is the name_entry_size
        !          7578: field. Reset the bracket count and the names_found field. Also reset the hwm
        !          7579: field; this time it's used for remembering forward references to subpatterns.
        !          7580: */
        !          7581: 
        !          7582: cd->final_bracount = cd->bracount;  /* Save for checking forward references */
        !          7583: cd->assert_depth = 0;
        !          7584: cd->bracount = 0;
        !          7585: cd->names_found = 0;
        !          7586: cd->name_table = (uschar *)re + re->name_table_offset;
        !          7587: codestart = cd->name_table + re->name_entry_size * re->name_count;
        !          7588: cd->start_code = codestart;
        !          7589: cd->hwm = (uschar *)(cd->start_workspace);
        !          7590: cd->req_varyopt = 0;
        !          7591: cd->had_accept = FALSE;
        !          7592: cd->check_lookbehind = FALSE;
        !          7593: cd->open_caps = NULL;
        !          7594: 
        !          7595: /* Set up a starting, non-extracting bracket, then compile the expression. On
        !          7596: error, errorcode will be set non-zero, so we don't need to look at the result
        !          7597: of the function here. */
        !          7598: 
        !          7599: ptr = (const uschar *)pattern + skipatstart;
        !          7600: code = (uschar *)codestart;
        !          7601: *code = OP_BRA;
        !          7602: (void)compile_regex(re->options, &code, &ptr, &errorcode, FALSE, FALSE, 0, 0,
        !          7603:   &firstbyte, &reqbyte, NULL, cd, NULL);
        !          7604: re->top_bracket = cd->bracount;
        !          7605: re->top_backref = cd->top_backref;
        !          7606: re->flags = cd->external_flags;
        !          7607: 
        !          7608: if (cd->had_accept) reqbyte = REQ_NONE;   /* Must disable after (*ACCEPT) */
        !          7609: 
        !          7610: /* If not reached end of pattern on success, there's an excess bracket. */
        !          7611: 
        !          7612: if (errorcode == 0 && *ptr != 0) errorcode = ERR22;
        !          7613: 
        !          7614: /* Fill in the terminating state and check for disastrous overflow, but
        !          7615: if debugging, leave the test till after things are printed out. */
        !          7616: 
        !          7617: *code++ = OP_END;
        !          7618: 
        !          7619: #ifndef PCRE_DEBUG
        !          7620: if (code - codestart > length) errorcode = ERR23;
        !          7621: #endif
        !          7622: 
        !          7623: /* Fill in any forward references that are required. There may be repeated
        !          7624: references; optimize for them, as searching a large regex takes time. */
        !          7625: 
        !          7626: if (cd->hwm > cd->start_workspace)
        !          7627:   {
        !          7628:   int prev_recno = -1;
        !          7629:   const uschar *groupptr = NULL;
        !          7630:   while (errorcode == 0 && cd->hwm > cd->start_workspace)
        !          7631:     {
        !          7632:     int offset, recno;
        !          7633:     cd->hwm -= LINK_SIZE;
        !          7634:     offset = GET(cd->hwm, 0);
        !          7635:     recno = GET(codestart, offset);
        !          7636:     if (recno != prev_recno)
        !          7637:       {
        !          7638:       groupptr = _pcre_find_bracket(codestart, utf8, recno);
        !          7639:       prev_recno = recno;
        !          7640:       }
        !          7641:     if (groupptr == NULL) errorcode = ERR53;
        !          7642:       else PUT(((uschar *)codestart), offset, (int)(groupptr - codestart));
        !          7643:     }
        !          7644:   }
        !          7645: 
        !          7646: /* If the workspace had to be expanded, free the new memory. */
        !          7647: 
        !          7648: if (cd->workspace_size > COMPILE_WORK_SIZE)
        !          7649:   (pcre_free)((void *)cd->start_workspace);
        !          7650: 
        !          7651: /* Give an error if there's back reference to a non-existent capturing
        !          7652: subpattern. */
        !          7653: 
        !          7654: if (errorcode == 0 && re->top_backref > re->top_bracket) errorcode = ERR15;
        !          7655: 
        !          7656: /* If there were any lookbehind assertions that contained OP_RECURSE
        !          7657: (recursions or subroutine calls), a flag is set for them to be checked here,
        !          7658: because they may contain forward references. Actual recursions can't be fixed
        !          7659: length, but subroutine calls can. It is done like this so that those without
        !          7660: OP_RECURSE that are not fixed length get a diagnosic with a useful offset. The
        !          7661: exceptional ones forgo this. We scan the pattern to check that they are fixed
        !          7662: length, and set their lengths. */
        !          7663: 
        !          7664: if (cd->check_lookbehind)
        !          7665:   {
        !          7666:   uschar *cc = (uschar *)codestart;
        !          7667: 
        !          7668:   /* Loop, searching for OP_REVERSE items, and process those that do not have
        !          7669:   their length set. (Actually, it will also re-process any that have a length
        !          7670:   of zero, but that is a pathological case, and it does no harm.) When we find
        !          7671:   one, we temporarily terminate the branch it is in while we scan it. */
        !          7672: 
        !          7673:   for (cc = (uschar *)_pcre_find_bracket(codestart, utf8, -1);
        !          7674:        cc != NULL;
        !          7675:        cc = (uschar *)_pcre_find_bracket(cc, utf8, -1))
        !          7676:     {
        !          7677:     if (GET(cc, 1) == 0)
        !          7678:       {
        !          7679:       int fixed_length;
        !          7680:       uschar *be = cc - 1 - LINK_SIZE + GET(cc, -LINK_SIZE);
        !          7681:       int end_op = *be;
        !          7682:       *be = OP_END;
        !          7683:       fixed_length = find_fixedlength(cc, (re->options & PCRE_UTF8) != 0, TRUE,
        !          7684:         cd);
        !          7685:       *be = end_op;
        !          7686:       DPRINTF(("fixed length = %d\n", fixed_length));
        !          7687:       if (fixed_length < 0)
        !          7688:         {
        !          7689:         errorcode = (fixed_length == -2)? ERR36 :
        !          7690:                     (fixed_length == -4)? ERR70 : ERR25;
        !          7691:         break;
        !          7692:         }
        !          7693:       PUT(cc, 1, fixed_length);
        !          7694:       }
        !          7695:     cc += 1 + LINK_SIZE;
        !          7696:     }
        !          7697:   }
        !          7698: 
        !          7699: /* Failed to compile, or error while post-processing */
        !          7700: 
        !          7701: if (errorcode != 0)
        !          7702:   {
        !          7703:   (pcre_free)(re);
        !          7704:   PCRE_EARLY_ERROR_RETURN:
        !          7705:   *erroroffset = (int)(ptr - (const uschar *)pattern);
        !          7706:   PCRE_EARLY_ERROR_RETURN2:
        !          7707:   *errorptr = find_error_text(errorcode);
        !          7708:   if (errorcodeptr != NULL) *errorcodeptr = errorcode;
        !          7709:   return NULL;
        !          7710:   }
        !          7711: 
        !          7712: /* If the anchored option was not passed, set the flag if we can determine that
        !          7713: the pattern is anchored by virtue of ^ characters or \A or anything else (such
        !          7714: as starting with .* when DOTALL is set).
        !          7715: 
        !          7716: Otherwise, if we know what the first byte has to be, save it, because that
        !          7717: speeds up unanchored matches no end. If not, see if we can set the
        !          7718: PCRE_STARTLINE flag. This is helpful for multiline matches when all branches
        !          7719: start with ^. and also when all branches start with .* for non-DOTALL matches.
        !          7720: */
        !          7721: 
        !          7722: if ((re->options & PCRE_ANCHORED) == 0)
        !          7723:   {
        !          7724:   if (is_anchored(codestart, 0, cd->backref_map))
        !          7725:     re->options |= PCRE_ANCHORED;
        !          7726:   else
        !          7727:     {
        !          7728:     if (firstbyte < 0)
        !          7729:       firstbyte = find_firstassertedchar(codestart, FALSE);
        !          7730:     if (firstbyte >= 0)   /* Remove caseless flag for non-caseable chars */
        !          7731:       {
        !          7732:       int ch = firstbyte & 255;
        !          7733:       re->first_byte = ((firstbyte & REQ_CASELESS) != 0 &&
        !          7734:          cd->fcc[ch] == ch)? ch : firstbyte;
        !          7735:       re->flags |= PCRE_FIRSTSET;
        !          7736:       }
        !          7737:     else if (is_startline(codestart, 0, cd->backref_map))
        !          7738:       re->flags |= PCRE_STARTLINE;
        !          7739:     }
        !          7740:   }
        !          7741: 
        !          7742: /* For an anchored pattern, we use the "required byte" only if it follows a
        !          7743: variable length item in the regex. Remove the caseless flag for non-caseable
        !          7744: bytes. */
        !          7745: 
        !          7746: if (reqbyte >= 0 &&
        !          7747:      ((re->options & PCRE_ANCHORED) == 0 || (reqbyte & REQ_VARY) != 0))
        !          7748:   {
        !          7749:   int ch = reqbyte & 255;
        !          7750:   re->req_byte = ((reqbyte & REQ_CASELESS) != 0 &&
        !          7751:     cd->fcc[ch] == ch)? (reqbyte & ~REQ_CASELESS) : reqbyte;
        !          7752:   re->flags |= PCRE_REQCHSET;
        !          7753:   }
        !          7754: 
        !          7755: /* Print out the compiled data if debugging is enabled. This is never the
        !          7756: case when building a production library. */
        !          7757: 
        !          7758: #ifdef PCRE_DEBUG
        !          7759: printf("Length = %d top_bracket = %d top_backref = %d\n",
        !          7760:   length, re->top_bracket, re->top_backref);
        !          7761: 
        !          7762: printf("Options=%08x\n", re->options);
        !          7763: 
        !          7764: if ((re->flags & PCRE_FIRSTSET) != 0)
        !          7765:   {
        !          7766:   int ch = re->first_byte & 255;
        !          7767:   const char *caseless = ((re->first_byte & REQ_CASELESS) == 0)?
        !          7768:     "" : " (caseless)";
        !          7769:   if (isprint(ch)) printf("First char = %c%s\n", ch, caseless);
        !          7770:     else printf("First char = \\x%02x%s\n", ch, caseless);
        !          7771:   }
        !          7772: 
        !          7773: if ((re->flags & PCRE_REQCHSET) != 0)
        !          7774:   {
        !          7775:   int ch = re->req_byte & 255;
        !          7776:   const char *caseless = ((re->req_byte & REQ_CASELESS) == 0)?
        !          7777:     "" : " (caseless)";
        !          7778:   if (isprint(ch)) printf("Req char = %c%s\n", ch, caseless);
        !          7779:     else printf("Req char = \\x%02x%s\n", ch, caseless);
        !          7780:   }
        !          7781: 
        !          7782: pcre_printint(re, stdout, TRUE);
        !          7783: 
        !          7784: /* This check is done here in the debugging case so that the code that
        !          7785: was compiled can be seen. */
        !          7786: 
        !          7787: if (code - codestart > length)
        !          7788:   {
        !          7789:   (pcre_free)(re);
        !          7790:   *errorptr = find_error_text(ERR23);
        !          7791:   *erroroffset = ptr - (uschar *)pattern;
        !          7792:   if (errorcodeptr != NULL) *errorcodeptr = ERR23;
        !          7793:   return NULL;
        !          7794:   }
        !          7795: #endif   /* PCRE_DEBUG */
        !          7796: 
        !          7797: return (pcre *)re;
        !          7798: }
        !          7799: 
        !          7800: /* End of pcre_compile.c */

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>