ucl 0.1.4 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03ae85a910a91ff58975400ecfc0fa2d71a73491c448935e083c909e74a888b7
-  data.tar.gz: '07085efe0e973f192f82fbe5bb0afa4afada1ea7d4f8e97e83f550c615f66322'
+  metadata.gz: c42a6b4100d7e40d367f9328f9d3a34aef3269daf8c8c41a10b88488cc4c5317
+  data.tar.gz: 960751a96ec18a4edb15ad341c0c6d9cdc3736d43d2fc67fb33aecfa6855afac
 SHA512:
-  metadata.gz: 544b300d55a2599c199464048da8206a206e688f13dc6b6eebcf7954e5adaac886686e0c5be322ee48531b213de8d888514834cfff2d87949e84885f650399ab
-  data.tar.gz: 7deaa1b5f34932b98b7afcbf71904aa08bd9ad3fd3a87b5f7f29ba5e66be7ec651bb7ddd6e6182e84c4d9baa867e4c7f5f490e0db5bc5e6613d295a8fb0dc239
+  metadata.gz: a47ad9b9b5ab638c6b957bfcad4044f91bd252343ae8630bd035efc4ac82fb668dbeef27efa29995a4e467372017f8233c9e1c99e8f79a380193bca5a252b144
+  data.tar.gz: 11e52d228e3c71d9ef3a9e1415ac724996ea0f2531fb431f5ea8e4b4361cf981630a2d50c3eee04d40f85464b2a50c00a7592579a495d523e0bbe4569f90ebc4

data/LICENSE-DEPENDENCIES.md

@@ -0,0 +1,161 @@
+# Bundled Dependency Licences
+
+The `ucl` gem itself is MIT-licensed (see `LICENSE`). Built against a
+system-wide libucl, that is the whole story: nothing here is distributed.
+
+When no system libucl is found, the gem compiles the bundled copy in
+`ext/libucl` (a git submodule pinned to an upstream release tag) into the
+extension, and so redistributes the sources below. All are permissive and
+non-copyleft; each asks only that its notice be retained. Every file keeps
+its original header, and the texts are reproduced here so they travel with a
+compiled (binary) distribution too -- what the BSD-2-Clause binary clause
+requires.
+
+| Component | Licence | Copyright | Files |
+|---|---|---|---|
+| libucl | BSD-2-Clause | Vsevolod Stakhov | `ext/libucl/src/ucl_*.{c,h}`, `ext/libucl/include/ucl.h`, `ext/libucl/COPYING` |
+| uthash (uthash.h, utlist.h, utstring.h) | BSD-1-Clause | Troy D. Hanson | `ext/libucl/uthash/*.h` |
+| klib (khash.h, kvec.h) | MIT | Attractive Chaos | `ext/libucl/klib/*.h` |
+| mum hash (mum.h) | MIT | Vladimir Makarov | `ext/libucl/src/mum.h` |
+| tree.h (AVL trees) | MIT-style, no sublicence clause | Ian Piumarta | `ext/libucl/src/tree.h` |
+
+
+## Licence texts
+
+### libucl
+
+BSD-2-Clause
+
+```
+Copyright (c) 2013-2014, Vsevolod Stakhov <vsevolod@highsecure.ru>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+```
+
+### uthash (uthash.h, utlist.h, utstring.h)
+
+BSD-1-Clause
+
+```
+Copyright (c) 2003-2013, Troy D. Hanson     http://troydhanson.github.com/uthash/
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
+PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
+OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+```
+
+### klib (khash.h, kvec.h)
+
+MIT
+
+```
+ The MIT License
+
+   Copyright (c) 2008, 2009, 2011 by Attractive Chaos <attractor@live.co.uk>
+
+   Permission is hereby granted, free of charge, to any person obtaining
+   a copy of this software and associated documentation files (the
+   "Software"), to deal in the Software without restriction, including
+   without limitation the rights to use, copy, modify, merge, publish,
+   distribute, sublicense, and/or sell copies of the Software, and to
+   permit persons to whom the Software is furnished to do so, subject to
+   the following conditions:
+
+   The above copyright notice and this permission notice shall be
+   included in all copies or substantial portions of the Software.
+
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+   NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+   BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+   ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+   CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+   SOFTWARE.
+```
+
+### mum hash (mum.h)
+
+MIT
+
+```
+ Copyright (c) 2016 Vladimir Makarov <vmakarov@gcc.gnu.org>
+
+   Permission is hereby granted, free of charge, to any person
+   obtaining a copy of this software and associated documentation
+   files (the "Software"), to deal in the Software without
+   restriction, including without limitation the rights to use, copy,
+   modify, merge, publish, distribute, sublicense, and/or sell copies
+   of the Software, and to permit persons to whom the Software is
+   furnished to do so, subject to the following conditions:
+
+   The above copyright notice and this permission notice shall be
+   included in all copies or substantial portions of the Software.
+
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+   NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
+   BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
+   ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+   CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+   SOFTWARE.
+```
+
+### tree.h (AVL trees)
+
+MIT-style. Note it grants no sublicence right and asks that the notice
+appear in supporting documentation -- which this file provides.
+
+```
+ Copyright (c) 2005 Ian Piumarta
+
+All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the 'Software'), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, and/or sell copies of the
+Software, and to permit persons to whom the Software is furnished to do so,
+provided that the above copyright notice(s) and this permission notice appear
+in all copies of the Software and that both the above copyright notice(s) and
+this permission notice appear in supporting documentation.
+
+THE SOFTWARE IS PROVIDED 'AS IS'.  USE ENTIRELY AT YOUR OWN RISK.
+```
+

data/README.md

@@ -27,16 +27,29 @@ Or add it to your `Gemfile`:
 gem 'ucl'
 ~~~
 
-The extension binds to the native [libucl][1] library (version 0.8.2 or
-later). At build time it is located as follows:
+To track this repository instead of a released gem, **`submodules: true` is
+required**:
+
+~~~ruby
+gem 'ucl', github: 'sdalu/ruby-ucl', submodules: true
+~~~
+
+libucl is vendored as a git submodule (see below), and Bundler does not fetch
+submodules unless asked. Without that option `ext/libucl` stays empty and the
+build fails — except on a machine that happens to have a system-wide libucl,
+where it quietly links against that instead, and only fails once it is
+deployed somewhere that has none.
+
+The extension binds to the native [libucl][1] library. At build time it is
+resolved as follows:
 
 1. If a system-wide libucl is found (via `pkg-config`, or under `/opt` or
-   `/usr/local`), it is used.
-2. Otherwise libucl is **downloaded and compiled from source** automatically
-   (using [mini_portile2][4] and CMake). This requires `cmake` and a C
-   compiler to be available.
+   `/usr/local`), the extension links against it.
+2. Otherwise the copy bundled with the gem is compiled directly into the
+   extension. This needs nothing but a C compiler — no network access, no
+   `cmake`, no extra gems.
 
-You can force the source build regardless of any system installation:
+You can force the bundled copy regardless of any system installation:
 
 ~~~sh
 gem install ucl -- --enable-vendor-libucl
@@ -44,12 +57,16 @@ gem install ucl -- --enable-vendor-libucl
 bundle config set build.ucl --enable-vendor-libucl
 ~~~
 
+Building the bundled copy also compiles out `.include` over http/ftp, which
+is gated on libucl's optional fetch support. A system-wide libucl may have it
+enabled — see [Untrusted input](#untrusted-input).
+
 > **Debian/Ubuntu note:** do **not** `apt install libucl-dev`. That package
 > is an unrelated [UCL *data-compression* library][3] that merely shares the
-> name — it does not provide `ucl_parser_new`. Since the configuration
-> parser is not packaged for Debian, just install `cmake` and a compiler and
-> let the gem build libucl from source. (The parser *is* packaged on Fedora,
-> Homebrew and FreeBSD ports as `libucl`.)
+> name — it does not provide `ucl_parser_new`. The configuration parser is
+> not packaged for Debian, so just let the gem build its bundled copy — a C
+> compiler is all you need. (The parser *is* packaged on Fedora, Homebrew and
+> FreeBSD ports as `libucl`.)
 
 
 Usage
@@ -61,6 +78,9 @@ require 'ucl'
 # Parse a string of UCL data
 UCL.parse(File.read('foo.conf'))
 
+# Same, with macros disabled -- use this for input you do not control
+UCL.safe_parse(untrusted_string)
+
 # Parse a file directly (enables file-relative variables such as $FILENAME)
 UCL.load_file('foo.conf')
 
@@ -74,6 +94,8 @@ UCL.parse('name = value')          #=> { :name => "value" }
 
 Both `parse` and `load_file` accept an optional `flags` argument. When it
 is omitted, the value of `UCL.flags` (default: no flag) is used.
+`UCL.safe_parse` takes the same arguments as `parse` and always adds
+`UCL::DISABLE_MACRO` (see *Untrusted input* below).
 
 On a malformed configuration, or if conversion of the parsed tree fails,
 a `UCL::Error` is raised.
@@ -83,8 +105,9 @@ Given a configuration like:
 ~~~nginx
 # a sample configuration
 name = example
-timeout = 30s            # parsed as a number of seconds
-max_size = 10mb          # size multipliers are understood
+# timeout is parsed as a number of seconds, max_size understands multipliers
+timeout = 30s
+max_size = 10mb
 
 servers = [
     { host = a.example, port = 8080 },
@@ -119,10 +142,59 @@ Flags
 | `KEY_SYMBOL`     | Return object keys as `Symbol` instead of `String`.           |
 | `KEY_LOWERCASE`  | Convert all keys to lower case.                               |
 | `NO_TIME`        | Do not parse time values; keep them as strings.              |
-| `DISABLE_MACRO`  | Disable processing of macros (e.g. `.include`).              |
+| `DISABLE_MACRO`  | Disable processing of macros (e.g. `.include`); see *Untrusted input*. |
 | `NO_FILEVARS`    | Do not predefine `$FILENAME` / `$CURDIR` (affects `parse`; `load_file` still sets them from the file). |
 
 
+Untrusted input
+---------------
+
+`UCL.parse` and `UCL.load_file` process macros, so a configuration can pull
+in other files through `.include`:
+
+~~~ruby
+UCL.parse('.include "/etc/secrets.conf"')
+#=> the contents of that file, as Ruby objects
+~~~
+
+That is a feature of the format — it is how a configuration is split across
+several files — but it means **a configuration string from an untrusted
+source can read any file the process can read**. Parse such input with
+`UCL.safe_parse`, which is `UCL.parse` with `UCL::DISABLE_MACRO` always
+added:
+
+~~~ruby
+UCL.safe_parse(params[:config])      # `.include` is not executed
+~~~
+
+`load_file` has no `safe_` counterpart: the path comes from the caller, so
+the decision to trust the file has already been made. Pass
+`UCL::DISABLE_MACRO` explicitly if a trusted path holds untrusted content.
+
+If libucl was built with URL includes enabled (the bundled build disables
+them; a system-wide libucl may not), `.include` can also fetch over the
+network. One more reason to reach for `safe_parse`.
+
+
+Limits
+------
+
+Objects nested more than **1000 levels** deep are rejected with a
+`UCL::Error`. Converting the parsed tree recurses once per level, as does
+libucl's own handling of it, so an unbounded depth would exhaust the C
+stack — a 1 MiB thread stack (what a Puma or Sidekiq worker gets) is gone
+at roughly 15000 levels. Real configurations nest a handful of levels;
+Ruby's own JSON parser stops at 100.
+
+> **Known limitation.** The check happens when the parsed tree is converted,
+> which is too late for input that is *both* deeply nested *and* malformed:
+> libucl then releases its half-built tree recursively from inside
+> `ucl_parser_free()`, out of reach of this binding, and a document such as
+> `'a = ' + '[' * 20_000` raises `SystemStackError` instead of `UCL::Error`
+> and leaks the parser. Deeply nested *well-formed* input is handled
+> correctly. If you parse untrusted configurations, cap their size.
+
+
 Type mapping
 ------------
 
@@ -150,6 +222,13 @@ Notes:
 * Integers understand size multipliers (`1k` → 1000, `1kb` → 1024,
   `1mb` → 1048576), hexadecimal (`0x1f` → 31) and JSON is accepted as-is.
 
+* **A trailing `#` comment suppresses suffix parsing.** `t = 30s` is the
+  float `30.0` and `n = 10mb` the integer `10485760`, but `t = 30s # note`
+  and `n = 10mb # note` come back as the *strings* `"30s"` and `"10mb"`.
+  Plain integers and floats are unaffected (`n = 1 # note` is `1`). This is
+  libucl's behaviour, not the binding's; put the comment on its own line
+  when the value carries a unit or a multiplier.
+
 * Returned strings carry their verbatim bytes but are tagged with the
   `ASCII-8BIT` (binary) encoding; call `String#force_encoding('UTF-8')` if
   you need them as UTF-8.
@@ -159,6 +238,7 @@ Development
 -----------
 
 ~~~sh
+git submodule update --init   # populate ext/libucl (bundled libucl sources)
 bundle install          # install development dependencies
 rake compile            # build the C extension into ext/
 rake test               # compile and run the test suite
@@ -168,14 +248,23 @@ rake clobber            # remove all generated files
 `rake test` works with the development gems installed system-wide too; with
 a `Gemfile.lock` present, prefix commands with `bundle exec`.
 
+`ext/libucl` is a git submodule pinned to an upstream release tag; `rake
+compile` and `rake build` both refuse to run until it is populated. To move
+to a newer libucl, check out the new tag inside it and commit the pointer.
+
 
 License
 -------
 
 Released under the MIT License. See [LICENSE](LICENSE).
 
+When built against a system-wide libucl, nothing else is distributed. When
+the bundled copy is compiled in, the gem also redistributes libucl and the
+libraries vendored inside it (uthash, klib, mum, tree.h) — all permissive,
+all notice-retention only. Their texts are in
+[LICENSE-DEPENDENCIES.md](LICENSE-DEPENDENCIES.md).
+
 
 [1]: https://github.com/vstakhov/libucl
 [2]: https://nginx.org/
 [3]: https://www.oberhumer.com/opensource/ucl/
-[4]: https://github.com/flavorjones/mini_portile

data/ext/extconf.rb

@@ -1,12 +1,22 @@
 require 'mkmf'
 
-# Pinned libucl (vstakhov's Universal Configuration Language parser) used
-# when the library has to be built from source. NOTE: this is *not* the
-# Debian `libucl-dev` package, which is an unrelated compression library.
-LIBUCL_VERSION = '0.9.4'
-LIBUCL_SHA256  = '319d8ff13441f55d91cd7f3708a54bd03779733e26958c2346c5109014520aaf'
+# Vendored libucl (vstakhov's Universal Configuration Language parser), used
+# when no system-wide installation is found. It lives in ext/libucl, a git
+# submodule pinned to a release tag. NOTE: this is *not* the Debian
+# `libucl-dev` package, which is an unrelated compression library.
+#
+# Its sources are compiled straight into this extension rather than built as a
+# separate library: src/ucl_internal.h defines the HAVE_* macros itself when
+# HAVE_CONFIG_H is absent -- upstream calls this the "embedded build" and ships
+# a Makefile.unix for it -- so no configure step is needed, and with it go the
+# download, cmake, and any question of which libucl the linker picks up.
+#
+# One useful side effect: `.include` over http/ftp is gated on HAVE_FETCH_H and
+# CURL_H, which the embedded build never defines, so remote includes are
+# compiled out. A system-wide libucl may well have them enabled.
+LIBUCL_DIR = File.join(__dir__, 'libucl').freeze
 
-# Force building libucl from source, ignoring any system installation:
+# Force using the bundled copy, ignoring any system installation:
 #   gem install ucl -- --enable-vendor-libucl
 #   bundle config set build.ucl --enable-vendor-libucl
 #   UCL_VENDOR_LIBUCL=1 rake compile
@@ -21,49 +31,41 @@ def system_libucl
     find_library('ucl', 'ucl_parser_new', '/opt/lib',     '/usr/local/lib')
 end
 
+# The submodule is not populated in a fresh clone, and a gem packaged without
+# it would fail here rather than at `git submodule update` time.
+def bundled_libucl
+  File.exist?(File.join(LIBUCL_DIR, 'src', 'ucl_parser.c'))
+end
+
 if !force_vendor && system_libucl
   message "Using system libucl.\n"
 else
-  message "Building libucl #{LIBUCL_VERSION} from source.\n"
-
-  # Building from source needs cmake and a working C compiler.
-  missing = []
-  missing << 'cmake'          unless find_executable('cmake')
-  missing << 'a C compiler'   unless try_compile('int main(void) { return 0; }')
-  unless missing.empty?
-    abort "\nBuilding libucl from source requires #{missing.join(' and ')}, " \
-          "which #{missing.length > 1 ? 'are' : 'is'} not available.\n"      \
-          "Install the missing tool(s), or provide a system-wide libucl.\n"
+  unless bundled_libucl
+    abort "\nThe bundled libucl sources are missing from #{LIBUCL_DIR}.\n"     \
+          "In a git checkout, populate the submodule with:\n"                  \
+          "    git submodule update --init\n"                                  \
+          "In an installed gem this means the gem was packaged without them; " \
+          "please report it.\n"                                                \
+          "Failing that, install libucl system-wide and build again.\n"
   end
 
-  require 'mini_portile2'
+  # Prepended so that a system-wide ucl.h cannot shadow the bundled one.
+  $INCFLAGS = "-I#{LIBUCL_DIR}/include -I#{LIBUCL_DIR}/uthash " \
+              "-I#{LIBUCL_DIR}/src -I#{LIBUCL_DIR}/klib #{$INCFLAGS}"
 
-  recipe = MiniPortileCMake.new('libucl', LIBUCL_VERSION)
-  recipe.files = [{
-    url:    "https://github.com/vstakhov/libucl/archive/refs/tags/#{LIBUCL_VERSION}.tar.gz",
-    sha256: LIBUCL_SHA256,
-  }]
-  # Static, position-independent build with every optional feature disabled.
-  recipe.configure_options += %w[
-    -DCMAKE_BUILD_TYPE=Release
-    -DBUILD_SHARED_LIBS=OFF
-    -DCMAKE_POSITION_INDEPENDENT_CODE=ON
-    -DENABLE_URL_INCLUDE=OFF
-    -DENABLE_LUA=OFF
-    -DENABLE_UTILS=OFF
-  ]
-  recipe.cook     # download, verify checksum, cmake build + install into recipe.path
-  recipe.activate
+  # Every .c under src/ -- the same set CMakeLists.txt lists as UCLSRC.
+  $srcs = [File.join(__dir__, 'ucl.c')] +
+          Dir[File.join(LIBUCL_DIR, 'src', '*.c')].sort
+  $objs = $srcs.map { |src| "#{File.basename(src, '.c')}.o" }
+  $VPATH << "$(srcdir)/libucl/src"
+
+  # libucl's own build passes both; without them its sources emit a few hundred
+  # warning lines through an unrelated gem's install log.
+  $CFLAGS << ' -Wno-pointer-sign -Wno-unused-parameter'
 
-  $INCFLAGS << " -I#{recipe.path}/include"
-  $LIBPATH.unshift "#{recipe.path}/lib"
   have_library('m') # libucl relies on the math library
 
-  unless find_header( 'ucl.h',                 "#{recipe.path}/include") &&
-         find_library('ucl', 'ucl_parser_new', "#{recipe.path}/lib")
-    abort "\nlibucl was built but could not be linked " \
-          "(check the static archive name/dir under #{recipe.path}/lib).\n"
-  end
+  message "Compiling the bundled libucl into the extension.\n"
 end
 
 create_makefile('ucl')

data/ext/libucl/COPYING

@@ -0,0 +1,23 @@
+Copyright (c) 2013-2014, Vsevolod Stakhov <vsevolod@highsecure.ru>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.