sync to libunbound 1.16.0; heavy lifting by sthen

diff --git a/sbin/unwind/libunbound/config.h b/sbin/unwind/libunbound/config.h
index b09a31b..9588b75 100644 (file)
--- a/sbin/unwind/libunbound/config.h
+++ b/sbin/unwind/libunbound/config.h
@@ -515,7 +515,7 @@
 /* #undef HAVE_SHA512_UPDATE */
 
 /* Define to 1 if you have the `shmget' function. */
-/* #undef HAVE_SHMGET */
+#define HAVE_SHMGET 1
 
 /* Define to 1 if you have the `sigprocmask' function. */
 #define HAVE_SIGPROCMASK 1
@@ -760,7 +760,7 @@
 #define PACKAGE_NAME "unbound"
 
 /* Define to the full name and version of this package. */
-#define PACKAGE_STRING "unbound 1.15.0"
+#define PACKAGE_STRING "unbound 1.16.0"
 
 /* Define to the one symbol short name of this package. */
 #define PACKAGE_TARNAME "unbound"
@@ -769,7 +769,7 @@
 #define PACKAGE_URL ""
 
 /* Define to the version of this package. */
-#define PACKAGE_VERSION "1.15.0"
+#define PACKAGE_VERSION "1.16.0"
 
 /* default pidfile location */
 #define PIDFILE ""
@@ -792,7 +792,7 @@
 #define ROOT_CERT_FILE "/var/unbound/etc/icannbundle.pem"
 
 /* version number for resource files */
-#define RSRC_PACKAGE_VERSION 1,15,0,0
+#define RSRC_PACKAGE_VERSION 1,16,0,0
 
 /* Directory to chdir to */
 #define RUN_DIR "/var/unbound/etc"
@@ -975,6 +975,10 @@
 /* Define to 1 if you need to in order for `stat' and other things to work. */
 /* #undef _POSIX_SOURCE */
 
+/* defined to use gcc ansi snprintf and sscanf that understands %lld when
+   compiled for windows. */
+/* #undef __USE_MINGW_ANSI_STDIO */
+
 /* Define to empty if `const' does not conform to ANSI C. */
 /* #undef const */
 
@@ -1154,7 +1158,7 @@
 #include <ws2tcpip.h>
 #endif
 
-#ifndef USE_WINSOCK
+#if !defined(USE_WINSOCK) || !defined(HAVE_SNPRINTF) || defined(SNPRINTF_RET_BROKEN) || defined(__USE_MINGW_ANSI_STDIO)
 #define ARG_LL "%ll"
 #else
 #define ARG_LL "%I64"

diff --git a/sbin/unwind/libunbound/iterator/iter_delegpt.h b/sbin/unwind/libunbound/iterator/iter_delegpt.h
index 17db15a..998b98c 100644 (file)
--- a/sbin/unwind/libunbound/iterator/iter_delegpt.h
+++ b/sbin/unwind/libunbound/iterator/iter_delegpt.h
@@ -128,7 +128,7 @@ struct delegpt_ns {
        uint8_t done_pside6;
        /** the TLS authentication name, (if not NULL) to use. */
        char* tls_auth_name;
-       /** the port to use; it should mosty be the default 53 but configured
+       /** the port to use; it should mostly be the default 53 but configured
         *  upstreams can provide nondefault ports. */
        int port;
 };

diff --git a/sbin/unwind/libunbound/iterator/iter_utils.c b/sbin/unwind/libunbound/iterator/iter_utils.c
index 2482a1f..f3bea46 100644 (file)
--- a/sbin/unwind/libunbound/iterator/iter_utils.c
+++ b/sbin/unwind/libunbound/iterator/iter_utils.c
@@ -743,9 +743,10 @@ iter_mark_pside_cycle_targets(struct module_qstate* qstate, struct delegpt* dp)
 
 int
 iter_dp_is_useless(struct query_info* qinfo, uint16_t qflags,
-       struct delegpt* dp)
+       struct delegpt* dp, int supports_ipv4, int supports_ipv6)
 {
        struct delegpt_ns* ns;
+       struct delegpt_addr* a;
        /* check:
         *      o RD qflag is on.
         *      o no addresses are provided.
@@ -758,13 +759,24 @@ iter_dp_is_useless(struct query_info* qinfo, uint16_t qflags,
         */
        if(!(qflags&BIT_RD))
                return 0;
-       /* either available or unused targets */
-       if(dp->usable_list || dp->result_list)
-               return 0;
+       /* either available or unused targets,
+        * if they exist, the dp is not useless. */
+       for(a = dp->usable_list; a; a = a->next_usable) {
+               if(!addr_is_ip6(&a->addr, a->addrlen) && supports_ipv4)
+                       return 0;
+               else if(addr_is_ip6(&a->addr, a->addrlen) && supports_ipv6)
+                       return 0;
+       }
+       for(a = dp->result_list; a; a = a->next_result) {
+               if(!addr_is_ip6(&a->addr, a->addrlen) && supports_ipv4)
+                       return 0;
+               else if(addr_is_ip6(&a->addr, a->addrlen) && supports_ipv6)
+                       return 0;
+       }
 
        /* see if query is for one of the nameservers, which is glue */
-       if( (qinfo->qtype == LDNS_RR_TYPE_A ||
-               qinfo->qtype == LDNS_RR_TYPE_AAAA) &&
+       if( ((qinfo->qtype == LDNS_RR_TYPE_A && supports_ipv4) ||
+               (qinfo->qtype == LDNS_RR_TYPE_AAAA && supports_ipv6)) &&
                dname_subdomain_c(qinfo->qname, dp->name) &&
                delegpt_find_ns(dp, qinfo->qname, qinfo->qname_len))
                return 1;

diff --git a/sbin/unwind/libunbound/iterator/iter_utils.h b/sbin/unwind/libunbound/iterator/iter_utils.h
index 0a40916..c0e5181 100644 (file)
--- a/sbin/unwind/libunbound/iterator/iter_utils.h
+++ b/sbin/unwind/libunbound/iterator/iter_utils.h
@@ -175,10 +175,14 @@ void iter_mark_pside_cycle_targets(struct module_qstate* qstate,
  * @param qinfo: query name and type
  * @param qflags: query flags with RD flag
  * @param dp: delegpt to check.
+ * @param supports_ipv4: if we support ipv4 for lookups to the target.
+ *     if not, then the IPv4 addresses are useless.
+ * @param supports_ipv6: if we support ipv6 for lookups to the target.
+ *     if not, then the IPv6 addresses are useless.
  * @return true if dp is useless.
  */
 int iter_dp_is_useless(struct query_info* qinfo, uint16_t qflags, 
-       struct delegpt* dp);
+       struct delegpt* dp, int supports_ipv4, int supports_ipv6);
 
 /**
  * See if qname has DNSSEC needs.  This is true if there is a trust anchor above

diff --git a/sbin/unwind/libunbound/iterator/iterator.c b/sbin/unwind/libunbound/iterator/iterator.c
index 5400694..3cfb286 100644 (file)
--- a/sbin/unwind/libunbound/iterator/iterator.c
+++ b/sbin/unwind/libunbound/iterator/iterator.c
@@ -1547,7 +1547,7 @@ processInitRequest(struct module_qstate* qstate, struct iter_qstate* iq,
                 * same server reply) if useless-checked.
                 */
                if(iter_dp_is_useless(&qstate->qinfo, qstate->query_flags, 
-                       iq->dp)) {
+                       iq->dp, ie->supports_ipv4, ie->supports_ipv6)) {
                        struct delegpt* retdp = NULL;
                        if(!can_have_last_resort(qstate->env, iq->dp->name, iq->dp->namelen, iq->qchase.qclass, &retdp)) {
                                if(retdp) {
@@ -1831,6 +1831,23 @@ query_for_targets(struct module_qstate* qstate, struct iter_qstate* iq,
        int missing;
        int toget = 0;
 
+       iter_mark_cycle_targets(qstate, iq->dp);
+       missing = (int)delegpt_count_missing_targets(iq->dp);
+       log_assert(maxtargets != 0); /* that would not be useful */
+
+       /* Generate target requests. Basically, any missing targets
+        * are queried for here, regardless if it is necessary to do
+        * so to continue processing. */
+       if(maxtargets < 0 || maxtargets > missing)
+               toget = missing;
+       else    toget = maxtargets;
+       if(toget == 0) {
+               *num = 0;
+               return 1;
+       }
+
+       /* now that we are sure that a target query is going to be made,
+        * check the limits. */
        if(iq->depth == ie->max_dependency_depth)
                return 0;
        if(iq->depth > 0 && iq->target_count &&
@@ -1850,20 +1867,6 @@ query_for_targets(struct module_qstate* qstate, struct iter_qstate* iq,
                return 0;
        }
 
-       iter_mark_cycle_targets(qstate, iq->dp);
-       missing = (int)delegpt_count_missing_targets(iq->dp);
-       log_assert(maxtargets != 0); /* that would not be useful */
-
-       /* Generate target requests. Basically, any missing targets 
-        * are queried for here, regardless if it is necessary to do 
-        * so to continue processing. */
-       if(maxtargets < 0 || maxtargets > missing)
-               toget = missing;
-       else    toget = maxtargets;
-       if(toget == 0) {
-               *num = 0;
-               return 1;
-       }
        /* select 'toget' items from the total of 'missing' items */
        log_assert(toget <= missing);
 
@@ -2512,7 +2515,7 @@ processQueryTargets(struct module_qstate* qstate, struct iter_qstate* iq,
                        iq->response = forged_response;
                        next_state(iq, FINISHED_STATE);
                        if(!iter_prepend(iq, qstate->return_msg, qstate->region)) {
-                               log_err("rpz, prepend rrsets: out of memory");
+                               log_err("rpz: prepend rrsets: out of memory");
                                return error_response(qstate, id, LDNS_RCODE_SERVFAIL);
                        }
                        return 0;
@@ -2832,7 +2835,9 @@ processQueryResponse(struct module_qstate* qstate, struct iter_qstate* iq,
                }
                if(!qstate->no_cache_store)
                        iter_dns_store(qstate->env, &iq->response->qinfo,
-                               iq->response->rep, 0, qstate->prefetch_leeway,
+                               iq->response->rep,
+                               iq->qchase.qtype != iq->response->qinfo.qtype,
+                               qstate->prefetch_leeway,
                                iq->dp&&iq->dp->has_parent_side_NS,
                                qstate->region, qstate->query_flags);
                /* close down outstanding requests to be discarded */
@@ -3067,7 +3072,7 @@ processQueryResponse(struct module_qstate* qstate, struct iter_qstate* iq,
                                iq->response = forged_response;
                                next_state(iq, FINISHED_STATE);
                                if(!iter_prepend(iq, qstate->return_msg, qstate->region)) {
-                                       log_err("rpz after cname, prepend rrsets: out of memory");
+                                       log_err("rpz: after cname, prepend rrsets: out of memory");
                                        return error_response(qstate, id, LDNS_RCODE_SERVFAIL);
                                }
                                qstate->return_msg->qinfo = qstate->qinfo;

diff --git a/sbin/unwind/libunbound/libunbound/libworker.c b/sbin/unwind/libunbound/libunbound/libworker.c
index ab28dd5..11bf5f9 100644 (file)
--- a/sbin/unwind/libunbound/libunbound/libworker.c
+++ b/sbin/unwind/libunbound/libunbound/libworker.c
@@ -650,7 +650,7 @@ int libworker_fg(struct ub_ctx* ctx, struct ctx_query* q)
        }
        /* process new query */
        if(!mesh_new_callback(w->env->mesh, &qinfo, qflags, &edns, 
-               w->back->udp_buff, qid, libworker_fg_done_cb, q)) {
+               w->back->udp_buff, qid, libworker_fg_done_cb, q, 0)) {
                free(qinfo.qname);
                return UB_NOMEM;
        }
@@ -730,7 +730,7 @@ int libworker_attach_mesh(struct ub_ctx* ctx, struct ctx_query* q,
        if(async_id)
                *async_id = q->querynum;
        if(!mesh_new_callback(w->env->mesh, &qinfo, qflags, &edns, 
-               w->back->udp_buff, qid, libworker_event_done_cb, q)) {
+               w->back->udp_buff, qid, libworker_event_done_cb, q, 0)) {
                free(qinfo.qname);
                return UB_NOMEM;
        }
@@ -867,7 +867,7 @@ handle_newq(struct libworker* w, uint8_t* buf, uint32_t len)
        q->w = w;
        /* process new query */
        if(!mesh_new_callback(w->env->mesh, &qinfo, qflags, &edns, 
-               w->back->udp_buff, qid, libworker_bg_done_cb, q)) {
+               w->back->udp_buff, qid, libworker_bg_done_cb, q, 0)) {
                add_bg_result(w, q, NULL, UB_NOMEM, NULL, 0);
        }
        free(qinfo.qname);

diff --git a/sbin/unwind/libunbound/respip/respip.c b/sbin/unwind/libunbound/respip/respip.c
index 3d1b3fe..deff663 100644 (file)
--- a/sbin/unwind/libunbound/respip/respip.c
+++ b/sbin/unwind/libunbound/respip/respip.c
@@ -833,8 +833,11 @@ static int
 respip_use_rpz(struct resp_addr* raddr, struct rpz* r,
        enum respip_action* action,
        struct ub_packed_rrset_key** data, int* rpz_log, char** log_name,
-       int* rpz_cname_override, struct regional* region, int* is_rpz)
+       int* rpz_cname_override, struct regional* region, int* is_rpz,
+       int* rpz_passthru)
 {
+       if(rpz_passthru && *rpz_passthru)
+               return 0;
        if(r->action_override == RPZ_DISABLED_ACTION) {
                *is_rpz = 0;
                return 1;
@@ -848,6 +851,9 @@ respip_use_rpz(struct resp_addr* raddr, struct rpz* r,
                *data = r->cname_override;
                *rpz_cname_override = 1;
        }
+       if(*action == respip_always_transparent /* RPZ_PASSTHRU_ACTION */
+               && rpz_passthru)
+               *rpz_passthru = 1;
        *rpz_log = r->log;
        if(r->log_name)
                if(!(*log_name = regional_strdup(region, r->log_name)))
@@ -861,7 +867,7 @@ respip_rewrite_reply(const struct query_info* qinfo,
        const struct respip_client_info* cinfo, const struct reply_info* rep,
        struct reply_info** new_repp, struct respip_action_info* actinfo,
        struct ub_packed_rrset_key** alias_rrset, int search_only,
-       struct regional* region, struct auth_zones* az)
+       struct regional* region, struct auth_zones* az, int* rpz_passthru)
 {
        const uint8_t* ctaglist;
        size_t ctaglen;
@@ -934,7 +940,7 @@ respip_rewrite_reply(const struct query_info* qinfo,
                        ipset->tagname, ipset->num_tags);
        }
        lock_rw_rdlock(&az->rpz_lock);
-       for(a = az->rpz_first; a && !raddr; a = a->rpz_az_next) {
+       for(a = az->rpz_first; a && !raddr && !(rpz_passthru && *rpz_passthru); a = a->rpz_az_next) {
                lock_rw_rdlock(&a->lock);
                r = a->rpz;
                if(!r->taglist || taglist_intersect(r->taglist, 
@@ -943,7 +949,7 @@ respip_rewrite_reply(const struct query_info* qinfo,
                                r->respip_set, &rrset_id, &rr_id))) {
                                if(!respip_use_rpz(raddr, r, &action, &data,
                                        &rpz_log, &log_name, &rpz_cname_override,
-                                       region, &rpz_used)) {
+                                       region, &rpz_used, rpz_passthru)) {
                                        log_err("out of memory");
                                        lock_rw_unlock(&raddr->lock);
                                        lock_rw_unlock(&a->lock);
@@ -964,7 +970,7 @@ respip_rewrite_reply(const struct query_info* qinfo,
                                                addr_to_str(&raddr->node.addr,
                                                        raddr->node.addrlen,
                                                        nm, sizeof(nm));
-                                               verbose(VERB_ALGO, "respip: rpz response-ip trigger %s/%d on %s %s with action %s", nm, raddr->node.net, qn, ip, rpz_action_to_string(respip_action_to_rpz_action(action)));
+                                               verbose(VERB_ALGO, "respip: rpz: response-ip trigger %s/%d on %s %s with action %s", nm, raddr->node.net, qn, ip, rpz_action_to_string(respip_action_to_rpz_action(action)));
                                        }
                                        /* break to make sure 'a' stays pointed
                                         * to used auth_zone, and keeps lock */
@@ -1094,7 +1100,8 @@ respip_operate(struct module_qstate* qstate, enum module_ev event, int id,
                        if(!respip_rewrite_reply(&qstate->qinfo,
                                qstate->client_info, qstate->return_msg->rep,
                                &new_rep, &actinfo, &alias_rrset, 0,
-                               qstate->region, qstate->env->auth_zones)) {
+                               qstate->region, qstate->env->auth_zones,
+                               &qstate->rpz_passthru)) {
                                goto servfail;
                        }
                        if(actinfo.action != respip_none) {
@@ -1169,7 +1176,7 @@ respip_merge_cname(struct reply_info* base_rep,
 
        /* see if the target reply would be subject to a response-ip action. */
        if(!respip_rewrite_reply(qinfo, cinfo, tgt_rep, &tmp_rep, &actinfo,
-               &alias_rrset, 1, region, az))
+               &alias_rrset, 1, region, az, NULL))
                return 0;
        if(actinfo.action != respip_none) {
                log_info("CNAME target of redirect response-ip action would "
@@ -1301,7 +1308,7 @@ respip_inform_print(struct respip_action_info* respip_actinfo, uint8_t* qname,
                respip, sizeof(respip));
        if(respip_actinfo->rpz_log) {
                txtlen += snprintf(txt+txtlen, sizeof(txt)-txtlen, "%s",
-                       "RPZ applied ");
+                       "rpz: applied ");
                if(respip_actinfo->rpz_cname_override)
                        actionstr = rpz_action_to_string(
                                RPZ_CNAME_OVERRIDE_ACTION);

diff --git a/sbin/unwind/libunbound/respip/respip.h b/sbin/unwind/libunbound/respip/respip.h
index 3dfb4e9..988a722 100644 (file)
--- a/sbin/unwind/libunbound/respip/respip.h
+++ b/sbin/unwind/libunbound/respip/respip.h
@@ -176,6 +176,8 @@ int respip_merge_cname(struct reply_info* base_rep,
  *   will be set (or intact) accordingly but the modified reply won't be built.
  * @param az: auth zones containing RPZ information.
  * @param region: allocator to build *new_repp.
+ * @param rpz_passthru: keeps track of query state can have passthru that
+ *   stops further rpz processing. Or NULL for cached answer processing.
  * @return 1 on success, 0 on error.
  */
 int respip_rewrite_reply(const struct query_info* qinfo,
@@ -183,7 +185,8 @@ int respip_rewrite_reply(const struct query_info* qinfo,
        const struct reply_info *rep, struct reply_info** new_repp,
        struct respip_action_info* actinfo,
        struct ub_packed_rrset_key** alias_rrset,
-       int search_only, struct regional* region, struct auth_zones* az);
+       int search_only, struct regional* region, struct auth_zones* az,
+       int* rpz_passthru);
 
 /**
  * Get the response-ip function block.

diff --git a/sbin/unwind/libunbound/services/authzone.c b/sbin/unwind/libunbound/services/authzone.c
index e83af53..02fb621 100644 (file)
--- a/sbin/unwind/libunbound/services/authzone.c
+++ b/sbin/unwind/libunbound/services/authzone.c
@@ -132,6 +132,7 @@ msg_create(struct regional* region, struct query_info* qinfo)
                return NULL;
        msg->rep->flags = (uint16_t)(BIT_QR | BIT_AA);
        msg->rep->authoritative = 1;
+       msg->rep->reason_bogus = LDNS_EDE_NONE;
        msg->rep->qdcount = 1;
        /* rrsets is NULL, no rrsets yet */
        return msg;
@@ -1882,6 +1883,8 @@ static int auth_zone_zonemd_check_hash(struct auth_zone* z,
        struct regional* region = NULL;
        struct sldns_buffer* buf = NULL;
        uint32_t soa_serial = 0;
+       char* unsupported_reason = NULL;
+       int only_unsupported = 1;
        region = env->scratch;
        regional_free_all(region);
        buf = env->scratch_buffer;
@@ -1911,6 +1914,7 @@ static int auth_zone_zonemd_check_hash(struct auth_zone* z,
                        &hashalgo, &hash, &hashlen)) {
                        /* malformed RR */
                        *reason = "ZONEMD rdata malformed";
+                       only_unsupported = 0;
                        continue;
                }
                /* check for duplicates */
@@ -1920,25 +1924,51 @@ static int auth_zone_zonemd_check_hash(struct auth_zone* z,
                         * is not allowed. */
                        *reason = "ZONEMD RRSet contains more than one RR "
                                "with the same scheme and hash algorithm";
+                       only_unsupported = 0;
                        continue;
                }
                regional_free_all(region);
                if(serial != soa_serial) {
                        *reason = "ZONEMD serial is wrong";
+                       only_unsupported = 0;
                        continue;
                }
+               *reason = NULL;
                if(auth_zone_generate_zonemd_check(z, scheme, hashalgo,
                        hash, hashlen, region, buf, reason)) {
                        /* success */
+                       if(*reason) {
+                               if(!unsupported_reason)
+                                       unsupported_reason = *reason;
+                               /* continue to check for valid ZONEMD */
+                               if(verbosity >= VERB_ALGO) {
+                                       char zstr[255+1];
+                                       dname_str(z->name, zstr);
+                                       verbose(VERB_ALGO, "auth-zone %s ZONEMD %d %d is unsupported: %s", zstr, (int)scheme, (int)hashalgo, *reason);
+                               }
+                               *reason = NULL;
+                               continue;
+                       }
                        if(verbosity >= VERB_ALGO) {
                                char zstr[255+1];
                                dname_str(z->name, zstr);
-                               verbose(VERB_ALGO, "auth-zone %s ZONEMD hash is correct", zstr);
+                               if(!*reason)
+                                       verbose(VERB_ALGO, "auth-zone %s ZONEMD hash is correct", zstr);
                        }
                        return 1;
                }
+               only_unsupported = 0;
                /* try next one */
        }
+       /* have we seen no failures but only unsupported algo,
+        * and one unsupported algorithm, or more. */
+       if(only_unsupported && unsupported_reason) {
+               /* only unsupported algorithms, with valid serial, not
+                * malformed. Did not see supported algorithms, failed or
+                * successful ones. */
+               *reason = unsupported_reason;
+               return 1;
+       }
        /* fail, we may have reason */
        if(!*reason)
                *reason = "no ZONEMD records found";
@@ -4456,7 +4486,7 @@ chunkline_get_line_collated(struct auth_chunk** chunk, size_t* chunk_pos,
        return 1;
 }
 
-/** process $ORIGIN for http */
+/** process $ORIGIN for http, 0 nothing, 1 done, 2 error */
 static int
 http_parse_origin(sldns_buffer* buf, struct sldns_file_parse_state* pstate)
 {
@@ -4467,13 +4497,16 @@ http_parse_origin(sldns_buffer* buf, struct sldns_file_parse_state* pstate)
                pstate->origin_len = sizeof(pstate->origin);
                s = sldns_str2wire_dname_buf(sldns_strip_ws(line+8),
                        pstate->origin, &pstate->origin_len);
-               if(s) pstate->origin_len = 0;
+               if(s) {
+                       pstate->origin_len = 0;
+                       return 2;
+               }
                return 1;
        }
        return 0;
 }
 
-/** process $TTL for http */
+/** process $TTL for http, 0 nothing, 1 done, 2 error */
 static int
 http_parse_ttl(sldns_buffer* buf, struct sldns_file_parse_state* pstate)
 {
@@ -4481,8 +4514,12 @@ http_parse_ttl(sldns_buffer* buf, struct sldns_file_parse_state* pstate)
        if(strncmp(line, "$TTL", 4) == 0 &&
                isspace((unsigned char)line[4])) {
                const char* end = NULL;
+               int overflow = 0;
                pstate->default_ttl = sldns_str2period(
-                       sldns_strip_ws(line+5), &end);
+                       sldns_strip_ws(line+5), &end, &overflow);
+               if(overflow) {
+                       return 2;
+               }
                return 1;
        }
        return 0;
@@ -4493,15 +4530,20 @@ static int
 chunkline_non_comment_RR(struct auth_chunk** chunk, size_t* chunk_pos,
        sldns_buffer* buf, struct sldns_file_parse_state* pstate)
 {
+       int ret;
        while(chunkline_get_line_collated(chunk, chunk_pos, buf)) {
                if(chunkline_is_comment_line_or_empty(buf)) {
                        /* a comment, go to next line */
                        continue;
                }
-               if(http_parse_origin(buf, pstate)) {
+               if((ret=http_parse_origin(buf, pstate))!=0) {
+                       if(ret == 2)
+                               return 0;
                        continue; /* $ORIGIN has been handled */
                }
-               if(http_parse_ttl(buf, pstate)) {
+               if((ret=http_parse_ttl(buf, pstate))!=0) {
+                       if(ret == 2)
+                               return 0;
                        continue; /* $TTL has been handled */
                }
                return 1;
@@ -5007,6 +5049,7 @@ apply_http(struct auth_xfer* xfr, struct auth_zone* z,
        struct sldns_file_parse_state pstate;
        struct auth_chunk* chunk;
        size_t chunk_pos;
+       int ret;
        memset(&pstate, 0, sizeof(pstate));
        pstate.default_ttl = 3600;
        if(xfr->namelen < sizeof(pstate.origin)) {
@@ -5063,10 +5106,24 @@ apply_http(struct auth_xfer* xfr, struct auth_zone* z,
                        continue;
                }
                /* parse line and add RR */
-               if(http_parse_origin(scratch_buffer, &pstate)) {
+               if((ret=http_parse_origin(scratch_buffer, &pstate))!=0) {
+                       if(ret == 2) {
+                               verbose(VERB_ALGO, "error parsing ORIGIN on line [%s:%d] %s",
+                                       xfr->task_transfer->master->file,
+                                       pstate.lineno,
+                                       sldns_buffer_begin(scratch_buffer));
+                               return 0;
+                       }
                        continue; /* $ORIGIN has been handled */
                }
-               if(http_parse_ttl(scratch_buffer, &pstate)) {
+               if((ret=http_parse_ttl(scratch_buffer, &pstate))!=0) {
+                       if(ret == 2) {
+                               verbose(VERB_ALGO, "error parsing TTL on line [%s:%d] %s",
+                                       xfr->task_transfer->master->file,
+                                       pstate.lineno,
+                                       sldns_buffer_begin(scratch_buffer));
+                               return 0;
+                       }
                        continue; /* $TTL has been handled */
                }
                if(!http_parse_add_rr(xfr, z, scratch_buffer, &pstate)) {
@@ -5370,7 +5427,7 @@ xfr_transfer_lookup_host(struct auth_xfer* xfr, struct module_env* env)
         * called straight away */
        lock_basic_unlock(&xfr->lock);
        if(!mesh_new_callback(env->mesh, &qinfo, qflags, &edns, buf, 0,
-               &auth_xfer_transfer_lookup_callback, xfr)) {
+               &auth_xfer_transfer_lookup_callback, xfr, 0)) {
                lock_basic_lock(&xfr->lock);
                log_err("out of memory lookup up master %s", master->host);
                return 0;
@@ -6561,7 +6618,7 @@ xfr_probe_lookup_host(struct auth_xfer* xfr, struct module_env* env)
         * called straight away */
        lock_basic_unlock(&xfr->lock);
        if(!mesh_new_callback(env->mesh, &qinfo, qflags, &edns, buf, 0,
-               &auth_xfer_probe_lookup_callback, xfr)) {
+               &auth_xfer_probe_lookup_callback, xfr, 0)) {
                lock_basic_lock(&xfr->lock);
                log_err("out of memory lookup up master %s", master->host);
                return 0;
@@ -7632,13 +7689,16 @@ int auth_zone_generate_zonemd_check(struct auth_zone* z, int scheme,
 {
        uint8_t gen[512];
        size_t genlen = 0;
+       *reason = NULL;
        if(!zonemd_hashalgo_supported(hashalgo)) {
+               /* allow it */
                *reason = "unsupported algorithm";
-               return 0;
+               return 1;
        }
        if(!zonemd_scheme_supported(scheme)) {
+               /* allow it */
                *reason = "unsupported scheme";
-               return 0;
+               return 1;
        }
        if(hashlen < 12) {
                /* the ZONEMD draft requires digests to fail if too small */
@@ -7726,7 +7786,7 @@ static int zonemd_dnssec_verify_rrset(struct auth_zone* z,
                auth_zone_log(z->name, VERB_ALGO,
                        "zonemd: verify %s RRset with DNSKEY", typestr);
        }
-       sec = dnskeyset_verify_rrset(env, ve, &pk, dnskey, sigalg, why_bogus,
+       sec = dnskeyset_verify_rrset(env, ve, &pk, dnskey, sigalg, why_bogus, NULL,
                LDNS_SECTION_ANSWER, NULL);
        if(sec == sec_status_secure) {
                return 1;
@@ -8003,9 +8063,13 @@ auth_zone_verify_zonemd_with_key(struct auth_zone* z, struct module_env* env,
        }
 
        /* success! log the success */
-       auth_zone_log(z->name, VERB_ALGO, "ZONEMD verification successful");
+       if(reason)
+               auth_zone_log(z->name, VERB_ALGO, "ZONEMD %s", reason);
+       else    auth_zone_log(z->name, VERB_ALGO, "ZONEMD verification successful");
        if(result) {
-               *result = strdup("ZONEMD verification successful");
+               if(reason)
+                       *result = strdup(reason);
+               else    *result = strdup("ZONEMD verification successful");
                if(!*result) log_err("out of memory");
        }
 }
@@ -8065,7 +8129,7 @@ zonemd_get_dnskey_from_anchor(struct auth_zone* z, struct module_env* env,
        auth_zone_log(z->name, VERB_QUERY,
                "zonemd: verify DNSKEY RRset with trust anchor");
        sec = val_verify_DNSKEY_with_TA(env, ve, keystorage, anchor->ds_rrset,
-               anchor->dnskey_rrset, NULL, why_bogus, NULL);
+               anchor->dnskey_rrset, NULL, why_bogus, NULL, NULL);
        regional_free_all(env->scratch);
        if(sec == sec_status_secure) {
                /* success */
@@ -8123,8 +8187,9 @@ auth_zone_verify_zonemd_key_with_ds(struct auth_zone* z,
        keystorage->rk.type = htons(LDNS_RR_TYPE_DNSKEY);
        keystorage->rk.rrset_class = htons(z->dclass);
        auth_zone_log(z->name, VERB_QUERY, "zonemd: verify zone DNSKEY with DS");
+       // @TODO add EDE here? we currently just pass NULL
        sec = val_verify_DNSKEY_with_DS(env, ve, keystorage, ds, sigalg,
-               why_bogus, NULL);
+               why_bogus, NULL, NULL);
        regional_free_all(env->scratch);
        if(sec == sec_status_secure) {
                /* success */
@@ -8340,7 +8405,7 @@ zonemd_lookup_dnskey(struct auth_zone* z, struct module_env* env)
        /* the callback can be called straight away */
        lock_rw_unlock(&z->lock);
        if(!mesh_new_callback(env->mesh, &qinfo, qflags, &edns, buf, 0,
-               &auth_zonemd_dnskey_lookup_callback, z)) {
+               &auth_zonemd_dnskey_lookup_callback, z, 0)) {
                lock_rw_wrlock(&z->lock);
                log_err("out of memory lookup of %s for zonemd",
                        (fetch_ds?"DS":"DNSKEY"));

diff --git a/sbin/unwind/libunbound/services/authzone.h b/sbin/unwind/libunbound/services/authzone.h
index d24e569..07614ed 100644 (file)
--- a/sbin/unwind/libunbound/services/authzone.h
+++ b/sbin/unwind/libunbound/services/authzone.h
@@ -747,6 +747,9 @@ int zonemd_scheme_supported(int scheme);
  * @param region: temp region for allocs during canonicalisation.
  * @param buf: temp buffer during canonicalisation.
  * @param reason: string returned with failure reason.
+ *     If the hash cannot be checked, but it is allowed, for unknown
+ *     algorithms, the routine returns success, and the reason is nonNULL,
+ *     with the allowance reason.
  * @return false on failure.
  */
 int auth_zone_generate_zonemd_check(struct auth_zone* z, int scheme,

diff --git a/sbin/unwind/libunbound/services/cache/dns.c b/sbin/unwind/libunbound/services/cache/dns.c
index 5b64fe4..f6c1145 100644 (file)
--- a/sbin/unwind/libunbound/services/cache/dns.c
+++ b/sbin/unwind/libunbound/services/cache/dns.c
@@ -428,6 +428,7 @@ dns_msg_create(uint8_t* qname, size_t qnamelen, uint16_t qtype,
                return NULL; /* integer overflow protection */
        msg->rep->flags = BIT_QR; /* with QR, no AA */
        msg->rep->qdcount = 1;
+       msg->rep->reason_bogus = LDNS_EDE_NONE;
        msg->rep->rrsets = (struct ub_packed_rrset_key**)
                regional_alloc(region, 
                capacity*sizeof(struct ub_packed_rrset_key*));
@@ -524,6 +525,7 @@ gen_dns_msg(struct regional* region, struct query_info* q, size_t num)
                sizeof(struct reply_info) - sizeof(struct rrset_ref));
        if(!msg->rep)
                return NULL;
+       msg->rep->reason_bogus = LDNS_EDE_NONE;
        if(num > RR_COUNT_MAX)
                return NULL; /* integer overflow protection */
        msg->rep->rrsets = (struct ub_packed_rrset_key**)
@@ -577,6 +579,7 @@ tomsg(struct module_env* env, struct query_info* q, struct reply_info* r,
        msg->rep->ar_numrrsets = r->ar_numrrsets;
        msg->rep->rrset_count = r->rrset_count;
        msg->rep->authoritative = r->authoritative;
+       msg->rep->reason_bogus = r->reason_bogus;
        if(!rrset_array_lock(r->ref, r->rrset_count, now_control)) {
                return NULL;
        }
@@ -632,6 +635,7 @@ rrset_msg(struct ub_packed_rrset_key* rrset, struct regional* region,
        msg->rep->ns_numrrsets = 0;
        msg->rep->ar_numrrsets = 0;
        msg->rep->rrset_count = 1;
+       msg->rep->reason_bogus = LDNS_EDE_NONE;
        msg->rep->rrsets[0] = packed_rrset_copy_region(rrset, region, now);
        if(!msg->rep->rrsets[0]) /* copy CNAME */
                return NULL;
@@ -670,6 +674,7 @@ synth_dname_msg(struct ub_packed_rrset_key* rrset, struct regional* region,
        msg->rep->ns_numrrsets = 0;
        msg->rep->ar_numrrsets = 0;
        msg->rep->rrset_count = 1;
+       msg->rep->reason_bogus = LDNS_EDE_NONE;
        msg->rep->rrsets[0] = packed_rrset_copy_region(rrset, region, now);
        if(!msg->rep->rrsets[0]) /* copy DNAME */
                return NULL;

diff --git a/sbin/unwind/libunbound/services/listen_dnsport.c b/sbin/unwind/libunbound/services/listen_dnsport.c
index d6a90f1..03153bd 100644 (file)
--- a/sbin/unwind/libunbound/services/listen_dnsport.c
+++ b/sbin/unwind/libunbound/services/listen_dnsport.c
@@ -47,6 +47,7 @@
 #ifdef USE_TCP_FASTOPEN
 #include <netinet/tcp.h>
 #endif
+#include <ctype.h>
 #include "services/listen_dnsport.h"
 #include "services/outside_network.h"
 #include "util/netevent.h"
@@ -1157,7 +1158,7 @@ if_is_ssl(const char* ifname, const char* port, int ssl_port,
  * @param do_auto: use automatic interface detection.
  *     If enabled, then ifname must be the wildcard name.
  * @param do_udp: if udp should be used.
- * @param do_tcp: if udp should be used.
+ * @param do_tcp: if tcp should be used.
  * @param hints: for getaddrinfo. family and flags have to be set by caller.
  * @param port: Port number to use (as string).
  * @param list: list of open ports, appended to, changed to point to list head.
@@ -1716,6 +1717,63 @@ listening_ports_open(struct config_file* cfg, char** ifs, int num_ifs,
        }
        /* create ip4 and ip6 ports so that return addresses are nice. */
        if(do_auto || num_ifs == 0) {
+               if(do_auto && cfg->if_automatic_ports &&
+                       cfg->if_automatic_ports[0]!=0) {
+                       char* now = cfg->if_automatic_ports;
+                       while(now && *now) {
+                               char* after;
+                               int extraport;
+                               while(isspace((unsigned char)*now))
+                                       now++;
+                               if(!*now)
+                                       break;
+                               after = now;
+                               extraport = (int)strtol(now, &after, 10);
+                               if(extraport < 0 || extraport > 65535) {
+                                       log_err("interface-automatic-ports port number out of range, at position %d of '%s'", (int)(now-cfg->if_automatic_ports)+1, cfg->if_automatic_ports);
+                                       listening_ports_free(list);
+                                       return NULL;
+                               }
+                               if(extraport == 0 && now == after) {
+                                       log_err("interface-automatic-ports could not be parsed, at position %d of '%s'", (int)(now-cfg->if_automatic_ports)+1, cfg->if_automatic_ports);
+                                       listening_ports_free(list);
+                                       return NULL;
+                               }
+                               now = after;
+                               snprintf(portbuf, sizeof(portbuf), "%d", extraport);
+                               if(do_ip6) {
+                                       hints.ai_family = AF_INET6;
+                                       if(!ports_create_if("::0",
+                                               do_auto, cfg->do_udp, do_tcp,
+                                               &hints, portbuf, &list,
+                                               cfg->so_rcvbuf, cfg->so_sndbuf,
+                                               cfg->ssl_port, cfg->tls_additional_port,
+                                               cfg->https_port, reuseport, cfg->ip_transparent,
+                                               cfg->tcp_mss, cfg->ip_freebind,
+                                               cfg->http_nodelay, cfg->use_systemd,
+                                               cfg->dnscrypt_port, cfg->ip_dscp)) {
+                                               listening_ports_free(list);
+                                               return NULL;
+                                       }
+                               }
+                               if(do_ip4) {
+                                       hints.ai_family = AF_INET;
+                                       if(!ports_create_if("0.0.0.0",
+                                               do_auto, cfg->do_udp, do_tcp,
+                                               &hints, portbuf, &list,
+                                               cfg->so_rcvbuf, cfg->so_sndbuf,
+                                               cfg->ssl_port, cfg->tls_additional_port,
+                                               cfg->https_port, reuseport, cfg->ip_transparent,
+                                               cfg->tcp_mss, cfg->ip_freebind,
+                                               cfg->http_nodelay, cfg->use_systemd,
+                                               cfg->dnscrypt_port, cfg->ip_dscp)) {
+                                               listening_ports_free(list);
+                                               return NULL;
+                                       }
+                               }
+                       }
+                       return list;
+               }
                if(do_ip6) {
                        hints.ai_family = AF_INET6;
                        if(!ports_create_if(do_auto?"::0":"::1", 

diff --git a/sbin/unwind/libunbound/services/localzone.c b/sbin/unwind/libunbound/services/localzone.c
index 3e3a71a..3ed7d83 100644 (file)
--- a/sbin/unwind/libunbound/services/localzone.c
+++ b/sbin/unwind/libunbound/services/localzone.c
@@ -1328,7 +1328,8 @@ local_encode(struct query_info* qinfo, struct module_env* env,
 static void
 local_error_encode(struct query_info* qinfo, struct module_env* env,
        struct edns_data* edns, struct comm_reply* repinfo, sldns_buffer* buf,
-       struct regional* temp, int rcode, int r)
+       struct regional* temp, int rcode, int r, int ede_code,
+       const char* ede_txt)
 {
        edns->edns_version = EDNS_ADVERTISED_VERSION;
        edns->udp_size = EDNS_ADVERTISED_SIZE;
@@ -1338,6 +1339,12 @@ local_error_encode(struct query_info* qinfo, struct module_env* env,
        if(!inplace_cb_reply_local_call(env, qinfo, NULL, NULL,
                rcode, edns, repinfo, temp, env->now_tv))
                edns->opt_list_inplace_cb_out = NULL;
+
+       if(ede_code != LDNS_EDE_NONE && env->cfg->ede) {
+               edns_opt_list_append_ede(&edns->opt_list_out, temp,
+                       ede_code, ede_txt);
+       }
+
        error_encode(buf, r, qinfo, *(uint16_t*)sldns_buffer_begin(buf),
                sldns_buffer_read_u16_at(buf, 2), edns);
 }
@@ -1535,7 +1542,9 @@ local_data_answer(struct local_zone* z, struct module_env* env,
                                qinfo->local_alias = NULL;
                                local_error_encode(qinfo, env, edns, repinfo,
                                        buf, temp, LDNS_RCODE_YXDOMAIN,
-                                       (LDNS_RCODE_YXDOMAIN|BIT_AA));
+                                       (LDNS_RCODE_YXDOMAIN|BIT_AA),
+                                       LDNS_EDE_OTHER,
+                                       "DNAME expansion became too large");
                                return 1;
                        }
                        memset(&qinfo->local_alias->rrset->entry, 0,
@@ -1638,7 +1647,8 @@ local_zones_zone_answer(struct local_zone* z, struct module_env* env,
        } else if(lz_type == local_zone_refuse
                || lz_type == local_zone_always_refuse) {
                local_error_encode(qinfo, env, edns, repinfo, buf, temp,
-                       LDNS_RCODE_REFUSED, (LDNS_RCODE_REFUSED|BIT_AA));
+                       LDNS_RCODE_REFUSED, (LDNS_RCODE_REFUSED|BIT_AA),
+                       LDNS_EDE_NONE, NULL);
                return 1;
        } else if(lz_type == local_zone_static ||
                lz_type == local_zone_redirect ||
@@ -1663,8 +1673,8 @@ local_zones_zone_answer(struct local_zone* z, struct module_env* env,
                if(z != NULL && z->soa && z->soa_negative)
                        return local_encode(qinfo, env, edns, repinfo, buf, temp,
                                z->soa_negative, 0, rcode);
-               local_error_encode(qinfo, env, edns, repinfo, buf, temp, rcode,
-                       (rcode|BIT_AA));
+               local_error_encode(qinfo, env, edns, repinfo, buf, temp,
+                       rcode, (rcode|BIT_AA), LDNS_EDE_NONE, NULL);
                return 1;
        } else if(lz_type == local_zone_typetransparent
                || lz_type == local_zone_always_transparent) {
@@ -1705,9 +1715,10 @@ local_zones_zone_answer(struct local_zone* z, struct module_env* env,
                        return local_encode(qinfo, env, edns, repinfo, buf, temp,
                                &lrr, 1, LDNS_RCODE_NOERROR);
                } else {
+                       /* NODATA: No EDE needed */
                        local_error_encode(qinfo, env, edns, repinfo, buf,
                                temp, LDNS_RCODE_NOERROR,
-                               (LDNS_RCODE_NOERROR|BIT_AA));
+                               (LDNS_RCODE_NOERROR|BIT_AA), -1, NULL);
                }
                return 1;
        }
@@ -1720,8 +1731,9 @@ local_zones_zone_answer(struct local_zone* z, struct module_env* env,
                if(z != NULL && z->soa && z->soa_negative)
                        return local_encode(qinfo, env, edns, repinfo, buf, temp,
                                z->soa_negative, 0, rcode);
+               /* NODATA: No EDE needed */
                local_error_encode(qinfo, env, edns, repinfo, buf, temp, rcode,
-                       (rcode|BIT_AA));
+                       (rcode|BIT_AA), LDNS_EDE_NONE, NULL);
                return 1;
        }
 

diff --git a/sbin/unwind/libunbound/services/mesh.c b/sbin/unwind/libunbound/services/mesh.c
index cdcfedd..fbaa966 100644 (file)
--- a/sbin/unwind/libunbound/services/mesh.c
+++ b/sbin/unwind/libunbound/services/mesh.c
@@ -64,6 +64,11 @@
 #include "respip/respip.h"
 #include "services/listen_dnsport.h"
 
+#ifdef CLIENT_SUBNET
+#include "edns-subnet/subnetmod.h"
+#include "edns-subnet/edns-subnet.h"
+#endif
+
 /** subtract timers and the values do not overflow or become negative */
 static void
 timeval_subtract(struct timeval* d, const struct timeval* end, const struct timeval* start)
@@ -458,7 +463,8 @@ mesh_serve_expired_init(struct mesh_state* mstate, int timeout)
 
 void mesh_new_client(struct mesh_area* mesh, struct query_info* qinfo,
        struct respip_client_info* cinfo, uint16_t qflags,
-       struct edns_data* edns, struct comm_reply* rep, uint16_t qid)
+       struct edns_data* edns, struct comm_reply* rep, uint16_t qid,
+       int rpz_passthru)
 {
        struct mesh_state* s = NULL;
        int unique = unique_mesh_state(edns->opt_list_in, mesh->env);
@@ -513,6 +519,7 @@ void mesh_new_client(struct mesh_area* mesh, struct query_info* qinfo,
                }
                if(unique)
                        mesh_state_make_unique(s);
+               s->s.rpz_passthru = rpz_passthru;
                /* copy the edns options we got from the front */
                if(edns->opt_list_in) {
                        s->s.edns_opts_front_in = edns_opt_copy_region(edns->opt_list_in,
@@ -606,7 +613,7 @@ servfail_mem:
 int 
 mesh_new_callback(struct mesh_area* mesh, struct query_info* qinfo,
        uint16_t qflags, struct edns_data* edns, sldns_buffer* buf, 
-       uint16_t qid, mesh_cb_func_type cb, void* cb_arg)
+       uint16_t qid, mesh_cb_func_type cb, void* cb_arg, int rpz_passthru)
 {
        struct mesh_state* s = NULL;
        int unique = unique_mesh_state(edns->opt_list_in, mesh->env);
@@ -632,6 +639,7 @@ mesh_new_callback(struct mesh_area* mesh, struct query_info* qinfo,
                }
                if(unique)
                        mesh_state_make_unique(s);
+               s->s.rpz_passthru = rpz_passthru;
                if(edns->opt_list_in) {
                        s->s.edns_opts_front_in = edns_opt_copy_region(edns->opt_list_in,
                                s->s.region);
@@ -686,7 +694,8 @@ mesh_new_callback(struct mesh_area* mesh, struct query_info* qinfo,
  * 0 (false), in which case the new state is only made runnable so it
  * will not be run recursively on top of the current state. */
 static void mesh_schedule_prefetch(struct mesh_area* mesh,
-       struct query_info* qinfo, uint16_t qflags, time_t leeway, int run)
+       struct query_info* qinfo, uint16_t qflags, time_t leeway, int run,
+       int rpz_passthru)
 {
        struct mesh_state* s = mesh_area_find(mesh, NULL, qinfo,
                qflags&(BIT_RD|BIT_CD), 0, 0);
@@ -732,15 +741,109 @@ static void mesh_schedule_prefetch(struct mesh_area* mesh,
                /* move to either the forever or the jostle_list */
                if(mesh->num_forever_states < mesh->max_forever_states) {
                        mesh->num_forever_states ++;
-                       mesh_list_insert(s, &mesh->forever_first, 
+                       mesh_list_insert(s, &mesh->forever_first,
                                &mesh->forever_last);
                        s->list_select = mesh_forever_list;
                } else {
-                       mesh_list_insert(s, &mesh->jostle_first, 
+                       mesh_list_insert(s, &mesh->jostle_first,
+                               &mesh->jostle_last);
+                       s->list_select = mesh_jostle_list;
+               }
+       }
+       s->s.rpz_passthru = rpz_passthru;
+
+       if(!run) {
+#ifdef UNBOUND_DEBUG
+               n =
+#else
+               (void)
+#endif
+               rbtree_insert(&mesh->run, &s->run_node);
+               log_assert(n != NULL);
+               return;
+       }
+
+       mesh_run(mesh, s, module_event_new, NULL);
+}
+
+#ifdef CLIENT_SUBNET
+/* Same logic as mesh_schedule_prefetch but tailored to the subnet module logic
+ * like passing along the comm_reply info. This will be faked into an EDNS
+ * option for processing by the subnet module if the client has not already
+ * attached its own ECS data. */
+static void mesh_schedule_prefetch_subnet(struct mesh_area* mesh,
+       struct query_info* qinfo, uint16_t qflags, time_t leeway, int run,
+       int rpz_passthru, struct comm_reply* rep, struct edns_option* edns_list)
+{
+       struct mesh_state* s = NULL;
+       struct edns_option* opt = NULL;
+#ifdef UNBOUND_DEBUG
+       struct rbnode_type* n;
+#endif
+       if(!mesh_make_new_space(mesh, NULL)) {
+               verbose(VERB_ALGO, "Too many queries. dropped prefetch.");
+               mesh->stats_dropped ++;
+               return;
+       }
+
+       s = mesh_state_create(mesh->env, qinfo, NULL,
+               qflags&(BIT_RD|BIT_CD), 0, 0);
+       if(!s) {
+               log_err("prefetch_subnet mesh_state_create: out of memory");
+               return;
+       }
+       mesh_state_make_unique(s);
+
+       opt = edns_opt_list_find(edns_list, mesh->env->cfg->client_subnet_opcode);
+       if(opt) {
+               /* Use the client's ECS data */
+               if(!edns_opt_list_append(&s->s.edns_opts_front_in, opt->opt_code,
+                       opt->opt_len, opt->opt_data, s->s.region)) {
+                       log_err("prefetch_subnet edns_opt_list_append: out of memory");
+                       return;
+               }
+       } else {
+               /* Fake the ECS data from the client's IP */
+               struct ecs_data ecs;
+               memset(&ecs, 0, sizeof(ecs));
+               subnet_option_from_ss(&rep->addr, &ecs, mesh->env->cfg);
+               if(ecs.subnet_validdata == 0) {
+                       log_err("prefetch_subnet subnet_option_from_ss: invalid data");
+                       return;
+               }
+               subnet_ecs_opt_list_append(&ecs, &s->s.edns_opts_front_in, &s->s);
+               if(!s->s.edns_opts_front_in) {
+                       log_err("prefetch_subnet subnet_ecs_opt_list_append: out of memory");
+                       return;
+               }
+       }
+#ifdef UNBOUND_DEBUG
+       n =
+#else
+       (void)
+#endif
+       rbtree_insert(&mesh->all, &s->node);
+       log_assert(n != NULL);
+       /* set detached (it is now) */
+       mesh->num_detached_states++;
+       /* make it ignore the cache */
+       sock_list_insert(&s->s.blacklist, NULL, 0, s->s.region);
+       s->s.prefetch_leeway = leeway;
+
+       if(s->list_select == mesh_no_list) {
+               /* move to either the forever or the jostle_list */
+               if(mesh->num_forever_states < mesh->max_forever_states) {
+                       mesh->num_forever_states ++;
+                       mesh_list_insert(s, &mesh->forever_first,
+                               &mesh->forever_last);
+                       s->list_select = mesh_forever_list;
+               } else {
+                       mesh_list_insert(s, &mesh->jostle_first,
                                &mesh->jostle_last);
                        s->list_select = mesh_jostle_list;
                }
        }
+       s->s.rpz_passthru = rpz_passthru;
 
        if(!run) {
 #ifdef UNBOUND_DEBUG
@@ -755,11 +858,22 @@ static void mesh_schedule_prefetch(struct mesh_area* mesh,
 
        mesh_run(mesh, s, module_event_new, NULL);
 }
+#endif /* CLIENT_SUBNET */
 
 void mesh_new_prefetch(struct mesh_area* mesh, struct query_info* qinfo,
-        uint16_t qflags, time_t leeway)
+       uint16_t qflags, time_t leeway, int rpz_passthru,
+       struct comm_reply* rep, struct edns_option* opt_list)
 {
-       mesh_schedule_prefetch(mesh, qinfo, qflags, leeway, 1);
+       (void)opt_list;
+       (void)rep;
+#ifdef CLIENT_SUBNET
+       if(rep)
+               mesh_schedule_prefetch_subnet(mesh, qinfo, qflags, leeway, 1,
+                       rpz_passthru, rep, opt_list);
+       else
+#endif
+               mesh_schedule_prefetch(mesh, qinfo, qflags, leeway, 1,
+                       rpz_passthru);
 }
 
 void mesh_report_reply(struct mesh_area* mesh, struct outbound_entry* e,
@@ -1234,7 +1348,7 @@ mesh_send_reply(struct mesh_state* m, int rcode, struct reply_info* rep,
                (rep->security <= sec_status_bogus ||
                rep->security == sec_status_secure_sentinel_fail)) {
                rcode = LDNS_RCODE_SERVFAIL;
-               if(m->s.env->cfg->stat_extended) 
+               if(m->s.env->cfg->stat_extended)
                        m->s.env->mesh->ans_bogus++;
        }
        if(rep && rep->security == sec_status_secure)
@@ -1290,6 +1404,36 @@ mesh_send_reply(struct mesh_state* m, int rcode, struct reply_info* rep,
                                &r->edns, &r->query_reply, m->s.region, &r->start_time))
                                        r->edns.opt_list_inplace_cb_out = NULL;
                }
+               /* Send along EDE BOGUS EDNS0 option when answer is bogus */
+               if(m->s.env->cfg->ede && rcode == LDNS_RCODE_SERVFAIL &&
+                       m->s.env->need_to_validate && (!(r->qflags&BIT_CD) ||
+                       m->s.env->cfg->ignore_cd) && rep &&
+                       (rep->security <= sec_status_bogus ||
+                       rep->security == sec_status_secure_sentinel_fail)) {
+                       char *reason = m->s.env->cfg->val_log_level >= 2
+                               ? errinf_to_str_bogus(&m->s) : NULL;
+
+                       /* During validation the EDE code can be received via two
+                        * code paths. One code path fills the reply_info EDE, and
+                        * the other fills it in the errinf_strlist. These paths
+                        * intersect at some points, but where is opaque due to
+                        * the complexity of the validator. At the time of writing
+                        * we make the choice to prefer the EDE from errinf_strlist
+                        * but a compelling reason to do otherwise is just as valid
+                        */
+                       sldns_ede_code reason_bogus = errinf_to_reason_bogus(&m->s);
+                       if ((reason_bogus == LDNS_EDE_DNSSEC_BOGUS &&
+                               rep->reason_bogus != LDNS_EDE_NONE) ||
+                               reason_bogus == LDNS_EDE_NONE) {
+                                       reason_bogus = rep->reason_bogus;
+                       }
+
+                       if(reason_bogus != LDNS_EDE_NONE) {
+                               edns_opt_list_append_ede(&r->edns.opt_list_out,
+                                       m->s.region, reason_bogus, reason);
+                       }
+                       free(reason);
+               }
                error_encode(r_buffer, rcode, &m->s.qinfo, r->qid,
                        r->qflags, &r->edns);
                m->reply_list = NULL;
@@ -1313,6 +1457,8 @@ mesh_send_reply(struct mesh_state* m, int rcode, struct reply_info* rep,
                        if(!inplace_cb_reply_servfail_call(m->s.env, &m->s.qinfo, &m->s,
                        rep, LDNS_RCODE_SERVFAIL, &r->edns, &r->query_reply, m->s.region, &r->start_time))
                                r->edns.opt_list_inplace_cb_out = NULL;
+                       /* internal server error (probably malloc failure) so no
+                        * EDE (RFC8914) needed */
                        error_encode(r_buffer, LDNS_RCODE_SERVFAIL,
                                &m->s.qinfo, r->qid, r->qflags, &r->edns);
                }
@@ -1524,7 +1670,7 @@ int mesh_state_add_reply(struct mesh_state* s, struct edns_data* edns,
         struct comm_reply* rep, uint16_t qid, uint16_t qflags,
         const struct query_info* qinfo)
 {
-       struct mesh_reply* r = regional_alloc(s->s.region, 
+       struct mesh_reply* r = regional_alloc(s->s.region,
                sizeof(struct mesh_reply));
        if(!r)
                return 0;
@@ -1693,6 +1839,7 @@ mesh_continue(struct mesh_area* mesh, struct mesh_state* mstate,
                if(mstate->s.curmod == 0) {
                        struct query_info* qinfo = NULL;
                        uint16_t qflags;
+                       int rpz_p = 0;
 
                        mesh_query_done(mstate);
                        mesh_walk_supers(mesh, mstate);
@@ -1701,13 +1848,15 @@ mesh_continue(struct mesh_area* mesh, struct mesh_state* mstate,
                         * from an external DNS server, we'll need to schedule
                         * a prefetch after removing the current state, so
                         * we need to make a copy of the query info here. */
-                       if(mstate->s.need_refetch)
+                       if(mstate->s.need_refetch) {
                                mesh_copy_qinfo(mstate, &qinfo, &qflags);
+                               rpz_p = mstate->s.rpz_passthru;
+                       }
 
                        mesh_state_delete(&mstate->s);
                        if(qinfo) {
                                mesh_schedule_prefetch(mesh, qinfo, qflags,
-                                       0, 1);
+                                       0, 1, rpz_p);
                        }
                        return 0;
                }
@@ -1917,7 +2066,7 @@ apply_respip_action(struct module_qstate* qstate,
                return 1;
 
        if(!respip_rewrite_reply(qinfo, cinfo, rep, encode_repp, actinfo,
-               alias_rrset, 0, qstate->region, az))
+               alias_rrset, 0, qstate->region, az, NULL))
                return 0;
 
        /* xxx_deny actions mean dropping the reply, unless the original reply
@@ -2042,6 +2191,14 @@ mesh_serve_expired_callback(void* arg)
                        }
                }
 
+               /* Add EDE Stale Answer (RCF8914). Ignore global ede as this is
+                * warning instead of an error */
+               if (r->edns.edns_present && qstate->env->cfg->ede_serve_expired &&
+                       qstate->env->cfg->ede) {
+                       edns_opt_list_append_ede(&r->edns.opt_list_out,
+                               mstate->s.region, LDNS_EDE_STALE_ANSWER, NULL);
+               }
+
                r_buffer = r->query_reply.c->buffer;
                if(r->query_reply.c->tcp_req_info)
                        r_buffer = r->query_reply.c->tcp_req_info->spool_buffer;

diff --git a/sbin/unwind/libunbound/services/mesh.h b/sbin/unwind/libunbound/services/mesh.h
index d0a4b5f..3be9b63 100644 (file)
--- a/sbin/unwind/libunbound/services/mesh.h
+++ b/sbin/unwind/libunbound/services/mesh.h
@@ -296,10 +296,13 @@ void mesh_delete(struct mesh_area* mesh);
  * @param edns: edns data from client query.
  * @param rep: where to reply to.
  * @param qid: query id to reply with.
+ * @param rpz_passthru: if true, the rpz passthru was previously found and
+ *     further rpz processing is stopped.
  */
 void mesh_new_client(struct mesh_area* mesh, struct query_info* qinfo,
        struct respip_client_info* cinfo, uint16_t qflags,
-       struct edns_data* edns, struct comm_reply* rep, uint16_t qid);
+       struct edns_data* edns, struct comm_reply* rep, uint16_t qid,
+       int rpz_passthru);
 
 /**
  * New query with callback. Create new query state if needed, and
@@ -314,11 +317,13 @@ void mesh_new_client(struct mesh_area* mesh, struct query_info* qinfo,
  * @param qid: query id to reply with.
  * @param cb: callback function.
  * @param cb_arg: callback user arg.
+ * @param rpz_passthru: if true, the rpz passthru was previously found and
+ *     further rpz processing is stopped.
  * @return 0 on error.
  */
 int mesh_new_callback(struct mesh_area* mesh, struct query_info* qinfo,
        uint16_t qflags, struct edns_data* edns, struct sldns_buffer* buf, 
-       uint16_t qid, mesh_cb_func_type cb, void* cb_arg);
+       uint16_t qid, mesh_cb_func_type cb, void* cb_arg, int rpz_passthru);
 
 /**
  * New prefetch message. Create new query state if needed.
@@ -328,9 +333,15 @@ int mesh_new_callback(struct mesh_area* mesh, struct query_info* qinfo,
  * @param qinfo: query from client.
  * @param qflags: flags from client query.
  * @param leeway: TTL leeway what to expire earlier for this update.
+ * @param rpz_passthru: if true, the rpz passthru was previously found and
+ *     further rpz processing is stopped.
+ * @param rep: comm_reply for the client; to be used when subnet is enabled.
+ * @param opt_list: edns opt_list from the client; to be used when subnet is
+ *     enabled.
  */
 void mesh_new_prefetch(struct mesh_area* mesh, struct query_info* qinfo,
-       uint16_t qflags, time_t leeway);
+       uint16_t qflags, time_t leeway, int rpz_passthru,
+       struct comm_reply* rep, struct edns_option* opt_list);
 
 /**
  * Handle new event from the wire. A serviced query has returned.

diff --git a/sbin/unwind/libunbound/services/outside_network.c b/sbin/unwind/libunbound/services/outside_network.c
index a7e5fa3..ec37a4a 100644 (file)
--- a/sbin/unwind/libunbound/services/outside_network.c
+++ b/sbin/unwind/libunbound/services/outside_network.c
@@ -1994,6 +1994,9 @@ static int udp_connect_needs_log(int err)
 #  endif
 #  ifdef ENETDOWN
        case ENETDOWN:
+#  endif
+#  ifdef EADDRNOTAVAIL
+       case EADDRNOTAVAIL:
 #  endif
        case EPERM:
        case EACCES:
@@ -2294,7 +2297,7 @@ reuse_tcp_select_id(struct reuse_tcp* reuse, struct outside_network* outnet)
        node = rbtree_first(&reuse->tree_by_id);
        log_assert(node && node != RBTREE_NULL); /* tree not empty */
        /* see if select is before first node */
-       if(select < tree_by_id_get_id(node))
+       if(select < (unsigned)tree_by_id_get_id(node))
                return select;
        count += tree_by_id_get_id(node);
        /* perhaps select is between nodes */

diff --git a/sbin/unwind/libunbound/services/rpz.c b/sbin/unwind/libunbound/services/rpz.c
index 322e9d1..77b6266 100644 (file)
--- a/sbin/unwind/libunbound/services/rpz.c
+++ b/sbin/unwind/libunbound/services/rpz.c
@@ -526,13 +526,13 @@ rpz_create(struct config_auth* p)
                size_t nmlen = sizeof(nm);
 
                if(!p->rpz_cname) {
-                       log_err("RPZ override with cname action found, but no "
+                       log_err("rpz: override with cname action found, but no "
                                "rpz-cname-override configured");
                        goto err;
                }
 
                if(sldns_str2wire_dname_buf(p->rpz_cname, nm, &nmlen) != 0) {
-                       log_err("cannot parse RPZ cname override: %s",
+                       log_err("rpz: cannot parse cname override: %s",
                                p->rpz_cname);
                        goto err;
                }
@@ -614,7 +614,7 @@ rpz_insert_local_zones_trigger(struct local_zones* lz, uint8_t* dname,
                        return; /* no need to log these types as unsupported */
                }
                dname_str(dname, str);
-               verbose(VERB_ALGO, "RPZ: qname trigger, %s skipping unsupported action: %s",
+               verbose(VERB_ALGO, "rpz: qname trigger, %s skipping unsupported action: %s",
                        str, rpz_action_to_string(a));
                free(dname);
                return;
@@ -999,7 +999,7 @@ rpz_insert_response_ip_trigger(struct rpz* r, uint8_t* dname, size_t dnamelen,
                rpz_action_to_respip_action(a) == respip_invalid) {
                char str[255+1];
                dname_str(dname, str);
-               verbose(VERB_ALGO, "RPZ: respip trigger, %s skipping unsupported action: %s",
+               verbose(VERB_ALGO, "rpz: respip trigger, %s skipping unsupported action: %s",
                        str, rpz_action_to_string(a));
                return 0;
        }
@@ -1560,7 +1560,9 @@ rpz_local_encode(struct module_env* env, struct query_info* qinfo,
 }
 
 static struct local_rrset*
-rpz_find_synthesized_rrset(int qtype, struct clientip_synthesized_rr* data) {
+rpz_find_synthesized_rrset(uint16_t qtype,
+       struct clientip_synthesized_rr* data)
+{
        struct local_rrset* cursor = data->data;
        while( cursor != NULL) {
                struct packed_rrset_key* packed_rrset = &cursor->rrset->rk;
@@ -1997,6 +1999,7 @@ rpz_apply_nsip_trigger(struct module_qstate* ms, struct rpz* r,
                break;
        case RPZ_PASSTHRU_ACTION:
                ret = NULL;
+               ms->rpz_passthru = 1;
                break;
        default:
                verbose(VERB_ALGO, "rpz: nsip: bug: unhandled or invalid action: '%s'",
@@ -2051,6 +2054,7 @@ rpz_apply_nsdname_trigger(struct module_qstate* ms, struct rpz* r,
                break;
        case RPZ_PASSTHRU_ACTION:
                ret = NULL;
+               ms->rpz_passthru = 1;
                break;
        default:
                verbose(VERB_ALGO, "rpz: nsip: bug: unhandled or invalid action: '%s'",
@@ -2114,6 +2118,11 @@ rpz_callback_from_iterator_module(struct module_qstate* ms, struct iter_qstate*
        struct local_zone* z = NULL;
        struct matched_delegation_point match = {0};
 
+       if(ms->rpz_passthru) {
+               verbose(VERB_ALGO, "query is rpz_passthru, no further processing");
+               return NULL;
+       }
+
        if(ms->env == NULL || ms->env->auth_zones == NULL) { return 0; }
 
        az = ms->env->auth_zones;
@@ -2179,6 +2188,11 @@ struct dns_msg* rpz_callback_from_iterator_cname(struct module_qstate* ms,
        enum localzone_type lzt;
        struct dns_msg* ret = NULL;
 
+       if(ms->rpz_passthru) {
+               verbose(VERB_ALGO, "query is rpz_passthru, no further processing");
+               return NULL;
+       }
+
        if(ms->env == NULL || ms->env->auth_zones == NULL) { return 0; }
        az = ms->env->auth_zones;
 
@@ -2253,6 +2267,7 @@ struct dns_msg* rpz_callback_from_iterator_cname(struct module_qstate* ms,
                break;
        case RPZ_PASSTHRU_ACTION:
                ret = NULL;
+               ms->rpz_passthru = 1;
                break;
        default:
                verbose(VERB_ALGO, "rpz: qname trigger after cname: bug: unhandled or invalid action: '%s'",
@@ -2270,7 +2285,8 @@ rpz_apply_maybe_clientip_trigger(struct auth_zones* az, struct module_env* env,
        uint8_t* taglist, size_t taglen, struct ub_server_stats* stats,
        sldns_buffer* buf, struct regional* temp,
        /* output parameters */
-       struct local_zone** z_out, struct auth_zone** a_out, struct rpz** r_out)
+       struct local_zone** z_out, struct auth_zone** a_out, struct rpz** r_out,
+       int* passthru)
 {
        int ret = 0;
        enum rpz_action client_action;
@@ -2278,7 +2294,9 @@ rpz_apply_maybe_clientip_trigger(struct auth_zones* az, struct module_env* env,
                az, qinfo, repinfo, taglist, taglen, stats, z_out, a_out, r_out);
 
        client_action = ((node == NULL) ? RPZ_INVALID_ACTION : node->action);
-
+       if(client_action == RPZ_PASSTHRU_ACTION) {
+               *passthru = 1;
+       }
        if(*z_out == NULL || (client_action != RPZ_INVALID_ACTION &&
                              client_action != RPZ_PASSTHRU_ACTION)) {
                if(client_action == RPZ_PASSTHRU_ACTION
@@ -2323,7 +2341,7 @@ int
 rpz_callback_from_worker_request(struct auth_zones* az, struct module_env* env,
        struct query_info* qinfo, struct edns_data* edns, sldns_buffer* buf,
        struct regional* temp, struct comm_reply* repinfo, uint8_t* taglist,
-       size_t taglen, struct ub_server_stats* stats)
+       size_t taglen, struct ub_server_stats* stats, int* passthru)
 {
        struct rpz* r = NULL;
        struct auth_zone* a = NULL;
@@ -2332,7 +2350,8 @@ rpz_callback_from_worker_request(struct auth_zones* az, struct module_env* env,
        enum localzone_type lzt;
 
        int clientip_trigger = rpz_apply_maybe_clientip_trigger(az, env, qinfo,
-               edns, repinfo, taglist, taglen, stats, buf, temp, &z, &a, &r);
+               edns, repinfo, taglist, taglen, stats, buf, temp, &z, &a, &r,
+               passthru);
        if(clientip_trigger >= 0) {
                if(a) {
                        lock_rw_unlock(&a->lock);
@@ -2357,6 +2376,10 @@ rpz_callback_from_worker_request(struct auth_zones* az, struct module_env* env,
        } else {
                lzt = rpz_action_to_localzone_type(r->action_override);
        }
+       if(r->action_override == RPZ_PASSTHRU_ACTION ||
+               lzt == local_zone_always_transparent /* RPZ_PASSTHRU_ACTION */) {
+               *passthru = 1;
+       }
 
        if(verbosity >= VERB_ALGO) {
                char nm[255+1], zn[255+1];

diff --git a/sbin/unwind/libunbound/services/rpz.h b/sbin/unwind/libunbound/services/rpz.h
index c29d30d..5378119 100644 (file)
--- a/sbin/unwind/libunbound/services/rpz.h
+++ b/sbin/unwind/libunbound/services/rpz.h
@@ -176,12 +176,14 @@ void rpz_remove_rr(struct rpz* r, size_t aznamelen, uint8_t* dname,
  * @param taglist: taglist to lookup.
  * @param taglen: length of taglist.
  * @param stats: worker stats struct
+ * @param passthru: returns if the query can passthru further rpz processing.
  * @return: 1 if client answer is ready, 0 to continue resolving
  */
 int rpz_callback_from_worker_request(struct auth_zones* az, struct module_env* env,
        struct query_info* qinfo, struct edns_data* edns, sldns_buffer* buf,
        struct regional* temp, struct comm_reply* repinfo,
-       uint8_t* taglist, size_t taglen, struct ub_server_stats* stats);
+       uint8_t* taglist, size_t taglen, struct ub_server_stats* stats,
+       int* passthru);
 
 /**
  * Callback to process when the iterator module is about to send queries.

diff --git a/sbin/unwind/libunbound/sldns/parseutil.c b/sbin/unwind/libunbound/sldns/parseutil.c
index ba71df5..dd1f334 100644 (file)
--- a/sbin/unwind/libunbound/sldns/parseutil.c
+++ b/sbin/unwind/libunbound/sldns/parseutil.c
@@ -209,11 +209,13 @@ sldns_hexdigit_to_int(char ch)
 }
 
 uint32_t
-sldns_str2period(const char *nptr, const char **endptr)
+sldns_str2period(const char *nptr, const char **endptr, int* overflow)
 {
        int sign = 0;
        uint32_t i = 0;
        uint32_t seconds = 0;
+       const uint32_t maxint = 0xffffffff;
+       *overflow = 0;
 
        for(*endptr = nptr; **endptr; (*endptr)++) {
                switch (**endptr) {
@@ -236,26 +238,46 @@ sldns_str2period(const char *nptr, const char **endptr)
                                break;
                        case 's':
                        case 'S':
+                               if(seconds > maxint-i) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i;
                                i = 0;
                                break;
                        case 'm':
                        case 'M':
+                               if(i > maxint/60 || seconds > maxint-(i*60)) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i * 60;
                                i = 0;
                                break;
                        case 'h':
                        case 'H':
+                               if(i > maxint/(60*60) || seconds > maxint-(i*60*60)) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i * 60 * 60;
                                i = 0;
                                break;
                        case 'd':
                        case 'D':
+                               if(i > maxint/(60*60*24) || seconds > maxint-(i*60*60*24)) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i * 60 * 60 * 24;
                                i = 0;
                                break;
                        case 'w':
                        case 'W':
+                               if(i > maxint/(60*60*24*7) || seconds > maxint-(i*60*60*24*7)) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i * 60 * 60 * 24 * 7;
                                i = 0;
                                break;
@@ -269,15 +291,27 @@ sldns_str2period(const char *nptr, const char **endptr)
                        case '7':
                        case '8':
                        case '9':
+                               if(i > maxint/10 || i*10 > maxint - (**endptr - '0')) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                i *= 10;
                                i += (**endptr - '0');
                                break;
                        default:
+                               if(seconds > maxint-i) {
+                                       *overflow = 1;
+                                       return 0;
+                               }
                                seconds += i;
                                /* disregard signedness */
                                return seconds;
                }
        }
+       if(seconds > maxint-i) {
+               *overflow = 1;
+               return 0;
+       }
        seconds += i;
        /* disregard signedness */
        return seconds;

diff --git a/sbin/unwind/libunbound/sldns/parseutil.h b/sbin/unwind/libunbound/sldns/parseutil.h
index 208fd2f..683f34e 100644 (file)
--- a/sbin/unwind/libunbound/sldns/parseutil.h
+++ b/sbin/unwind/libunbound/sldns/parseutil.h
@@ -74,9 +74,11 @@ struct tm * sldns_serial_arithmetics_gmtime_r(int32_t time, time_t now, struct t
  * converts a ttl value (like 5d2h) to a long.
  * \param[in] nptr the start of the string
  * \param[out] endptr points to the last char in case of error
+ * \param[out] overflow returns if the string causes integer overflow error,
+ *            the number is too big, string of digits too long.
  * \return the convert duration value
  */
-uint32_t sldns_str2period(const char *nptr, const char **endptr);
+uint32_t sldns_str2period(const char *nptr, const char **endptr, int* overflow);
 
 /**
  * Returns the int value of the given (hex) digit

diff --git a/sbin/unwind/libunbound/sldns/pkthdr.h b/sbin/unwind/libunbound/sldns/pkthdr.h
index de9952e..c32e7d2 100644 (file)
--- a/sbin/unwind/libunbound/sldns/pkthdr.h
+++ b/sbin/unwind/libunbound/sldns/pkthdr.h
@@ -97,18 +97,22 @@ extern "C" {
 #define        QDCOUNT(wirebuf)                (ntohs(*(uint16_t *)(wirebuf+QDCOUNT_OFF)))
 */
 #define        LDNS_QDCOUNT(wirebuf)           (sldns_read_uint16(wirebuf+LDNS_QDCOUNT_OFF))
+#define LDNS_QDCOUNT_SET(wirebuf, i)    (sldns_write_uint16(wirebuf+LDNS_QDCOUNT_OFF, i))
 
 /* Counter of the answer section */
 #define LDNS_ANCOUNT_OFF               6
 #define        LDNS_ANCOUNT(wirebuf)           (sldns_read_uint16(wirebuf+LDNS_ANCOUNT_OFF))
+#define LDNS_ANCOUNT_SET(wirebuf, i)    (sldns_write_uint16(wirebuf+LDNS_ANCOUNT_OFF, i))
 
 /* Counter of the authority section */
 #define LDNS_NSCOUNT_OFF               8
 #define        LDNS_NSCOUNT(wirebuf)           (sldns_read_uint16(wirebuf+LDNS_NSCOUNT_OFF))
+#define LDNS_NSCOUNT_SET(wirebuf, i)    (sldns_write_uint16(wirebuf+LDNS_NSCOUNT_OFF, i))
 
 /* Counter of the additional section */
 #define LDNS_ARCOUNT_OFF               10
 #define        LDNS_ARCOUNT(wirebuf)           (sldns_read_uint16(wirebuf+LDNS_ARCOUNT_OFF))
+#define LDNS_ARCOUNT_SET(wirebuf, i)    (sldns_write_uint16(wirebuf+LDNS_ARCOUNT_OFF, i))
 
 /**
  * The sections of a packet

diff --git a/sbin/unwind/libunbound/sldns/rrdef.h b/sbin/unwind/libunbound/sldns/rrdef.h
index 42d5de0..999c223 100644 (file)
--- a/sbin/unwind/libunbound/sldns/rrdef.h
+++ b/sbin/unwind/libunbound/sldns/rrdef.h
@@ -435,10 +435,42 @@ enum sldns_enum_edns_option
        LDNS_EDNS_CLIENT_SUBNET = 8, /* RFC7871 */
        LDNS_EDNS_KEEPALIVE = 11, /* draft-ietf-dnsop-edns-tcp-keepalive*/
        LDNS_EDNS_PADDING = 12, /* RFC7830 */
+       LDNS_EDNS_EDE = 15, /* RFC8914 */
        LDNS_EDNS_CLIENT_TAG = 16 /* draft-bellis-dnsop-edns-tags-01 */
 };
 typedef enum sldns_enum_edns_option sldns_edns_option;
 
+enum sldns_enum_ede_code
+{
+       LDNS_EDE_NONE = -1, /* EDE undefined for internal use */
+       LDNS_EDE_OTHER = 0,
+       LDNS_EDE_UNSUPPORTED_DNSKEY_ALG = 1,
+       LDNS_EDE_UNSUPPORTED_DS_DIGEST = 2,
+       LDNS_EDE_STALE_ANSWER = 3,
+       LDNS_EDE_FORGED_ANSWER = 4,
+       LDNS_EDE_DNSSEC_INDETERMINATE = 5,
+       LDNS_EDE_DNSSEC_BOGUS = 6,
+       LDNS_EDE_SIGNATURE_EXPIRED = 7,
+       LDNS_EDE_SIGNATURE_NOT_YET_VALID = 8,
+       LDNS_EDE_DNSKEY_MISSING = 9,
+       LDNS_EDE_RRSIGS_MISSING = 10,
+       LDNS_EDE_NO_ZONE_KEY_BIT_SET = 11,
+       LDNS_EDE_NSEC_MISSING = 12,
+       LDNS_EDE_CACHED_ERROR = 13,
+       LDNS_EDE_NOT_READY = 14,
+       LDNS_EDE_BLOCKED = 15,
+       LDNS_EDE_CENSORED = 16,
+       LDNS_EDE_FILTERED = 17,
+       LDNS_EDE_PROHIBITED = 18,
+       LDNS_EDE_STALE_NXDOMAIN_ANSWER = 19,
+       LDNS_EDE_NOT_AUTHORITATIVE = 20,
+       LDNS_EDE_NOT_SUPPORTED = 21,
+       LDNS_EDE_NO_REACHABLE_AUTHORITY = 22,
+       LDNS_EDE_NETWORK_ERROR = 23,
+       LDNS_EDE_INVALID_DATA = 24,
+};
+typedef enum sldns_enum_ede_code sldns_ede_code;
+
 #define LDNS_EDNS_MASK_DO_BIT 0x8000
 
 /** TSIG and TKEY extended rcodes (16bit), 0-15 are the normal rcodes. */

diff --git a/sbin/unwind/libunbound/sldns/str2wire.c b/sbin/unwind/libunbound/sldns/str2wire.c
index d2cefae..303d49b 100644 (file)
--- a/sbin/unwind/libunbound/sldns/str2wire.c
+++ b/sbin/unwind/libunbound/sldns/str2wire.c
@@ -249,11 +249,16 @@ rrinternal_get_ttl(sldns_buffer* strbuf, char* token, size_t token_len,
        int* not_there, uint32_t* ttl, uint32_t default_ttl)
 {
        const char* endptr;
+       int overflow;
        if(sldns_bget_token(strbuf, token, "\t\n ", token_len) == -1) {
                return RET_ERR(LDNS_WIREPARSE_ERR_SYNTAX_TTL,
                        sldns_buffer_position(strbuf));
        }
-       *ttl = (uint32_t) sldns_str2period(token, &endptr);
+       *ttl = (uint32_t) sldns_str2period(token, &endptr, &overflow);
+       if(overflow) {
+               return RET_ERR(LDNS_WIREPARSE_ERR_SYNTAX_INTEGER_OVERFLOW,
+                       sldns_buffer_position(strbuf));
+       }
 
        if (strlen(token) > 0 && !isdigit((unsigned char)token[0])) {
                *not_there = 1;
@@ -373,7 +378,8 @@ rrinternal_get_quoted(sldns_buffer* strbuf, const char** delimiters,
 
                /* skip spaces */
                while(sldns_buffer_remaining(strbuf) > 0 &&
-                       *(sldns_buffer_current(strbuf)) == ' ') {
+                       (*(sldns_buffer_current(strbuf)) == ' ' ||
+                       *(sldns_buffer_current(strbuf)) == '\t')) {
                        sldns_buffer_skip(strbuf, 1);
                }
 
@@ -606,7 +612,7 @@ sldns_affix_token(sldns_buffer* strbuf, char* token, size_t* token_len,
        /* add space */
        /* when addlen < 2, the token buffer is full considering the NULL byte
         * from strlen and will lead to buffer overflow with the second
-        * assignement below. */
+        * assignment below. */
        if(addlen < 2) return 0;
        token[*token_strlen] = ' ';
        token[++(*token_strlen)] = 0;
@@ -670,10 +676,10 @@ static int sldns_str2wire_check_svcbparams(uint8_t* rdata, uint16_t rdata_len)
             ,sldns_str2wire_svcparam_key_cmp);
 
 
-       /* The code below revolves around sematic errors in the SVCParam set.
+       /* The code below revolves around semantic errors in the SVCParam set.
         * So long as we do not distinguish between running Unbound as a primary
         * or as a secondary, we default to secondary behavior and we ignore the
-        * sematic errors. */
+        * semantic errors. */
 
 #ifdef SVCB_SEMANTIC_ERRORS
        {
@@ -775,7 +781,8 @@ rrinternal_parse_rdata(sldns_buffer* strbuf, char* token, size_t token_len,
 
                /* unknown RR data */
                if(token_strlen>=2 && strncmp(token, "\\#", 2) == 0 &&
-                       !quoted && (token_strlen == 2 || token[2]==' ')) {
+                       !quoted && (token_strlen == 2 || token[2]==' ' ||
+                       token[2]=='\t')) {
                        was_unknown_rr_format = 1;
                        if((status=rrinternal_parse_unknown(strbuf, token,
                                token_len, rr, rr_len, &rr_cur_len, 
@@ -1055,12 +1062,15 @@ int sldns_fp2wire_rr_buf(FILE* in, uint8_t* rr, size_t* len, size_t* dname_len,
                return s;
        } else if(strncmp(line, "$TTL", 4) == 0 && isspace((unsigned char)line[4])) {
                const char* end = NULL;
+               int overflow = 0;
                strlcpy((char*)rr, line, *len);
                *len = 0;
                *dname_len = 0;
                if(!parse_state) return LDNS_WIREPARSE_ERR_OK;
                parse_state->default_ttl = sldns_str2period(
-                       sldns_strip_ws(line+5), &end);
+                       sldns_strip_ws(line+5), &end, &overflow);
+               if(overflow)
+                       return LDNS_WIREPARSE_ERR_SYNTAX_INTEGER_OVERFLOW;
        } else if (strncmp(line, "$INCLUDE", 8) == 0) {
                strlcpy((char*)rr, line, *len);
                *len = 0;
@@ -1117,7 +1127,7 @@ sldns_str2wire_svcparam_key_lookup(const char *key, size_t key_len)
                if (!strncmp(key, "mandatory", sizeof("mandatory")-1))
                        return SVCB_KEY_MANDATORY;
                if (!strncmp(key, "echconfig", sizeof("echconfig")-1))
-                       return SVCB_KEY_ECH; /* allow "echconfig as well as "ech" */
+                       return SVCB_KEY_ECH; /* allow "echconfig" as well as "ech" */
                break;
 
        case sizeof("alpn")-1:
@@ -1356,7 +1366,7 @@ sldns_str2wire_svcbparam_mandatory(const char* val, uint8_t* rd, size_t* rd_len)
         */
        qsort((void *)(rd + 4), count, sizeof(uint16_t), sldns_network_uint16_cmp);
 
-       /* The code below revolves around sematic errors in the SVCParam set.
+       /* The code below revolves around semantic errors in the SVCParam set.
         * So long as we do not distinguish between running Unbound as a primary
         * or as a secondary, we default to secondary behavior and we ignore the
         * semantic errors. */
@@ -1588,12 +1598,12 @@ static int sldns_str2wire_svcparam_buf(const char* str, uint8_t* rd, size_t* rd_
                if (*val_in == '"') {
                        val_in++;
                        while (*val_in != '"'
-                       && (unsigned)(val_out - unescaped_val + 1) < sizeof(unescaped_val)
+                       && (size_t)(val_out - unescaped_val + 1) < sizeof(unescaped_val)
                        && sldns_parse_char( (uint8_t*) val_out, &val_in)) {
                                val_out++;
                        }
                } else {
-                       while ((unsigned)(val_out - unescaped_val + 1) < sizeof(unescaped_val)
+                       while ((size_t)(val_out - unescaped_val + 1) < sizeof(unescaped_val)
                        && sldns_parse_char( (uint8_t*) val_out, &val_in)) {
                                val_out++;
                        }
@@ -2157,9 +2167,13 @@ int sldns_str2wire_tsigtime_buf(const char* str, uint8_t* rd, size_t* len)
 int sldns_str2wire_period_buf(const char* str, uint8_t* rd, size_t* len)
 {
        const char* end;
-       uint32_t p = sldns_str2period(str, &end);
+       int overflow;
+       uint32_t p = sldns_str2period(str, &end, &overflow);
        if(*end != 0)
                return RET_ERR(LDNS_WIREPARSE_ERR_SYNTAX_PERIOD, end-str);
+       if(overflow)
+               return RET_ERR(LDNS_WIREPARSE_ERR_SYNTAX_INTEGER_OVERFLOW,
+                       end-str);
        if(*len < 4)
                return LDNS_WIREPARSE_ERR_BUFFER_TOO_SMALL;
        sldns_write_uint32(rd, p);

diff --git a/sbin/unwind/libunbound/sldns/wire2str.c b/sbin/unwind/libunbound/sldns/wire2str.c
index b70efe2..d6fb289 100644 (file)
--- a/sbin/unwind/libunbound/sldns/wire2str.c
+++ b/sbin/unwind/libunbound/sldns/wire2str.c
@@ -194,6 +194,7 @@ static sldns_lookup_table sldns_edns_options_data[] = {
        { 8, "edns-client-subnet" },
        { 11, "edns-tcp-keepalive"},
        { 12, "Padding" },
+       { 15, "EDE"},
        { 0, NULL}
 };
 sldns_lookup_table* sldns_edns_options = sldns_edns_options_data;

diff --git a/sbin/unwind/libunbound/util/config_file.c b/sbin/unwind/libunbound/util/config_file.c
index 15a090c..d7bd37a 100644 (file)
--- a/sbin/unwind/libunbound/util/config_file.c
+++ b/sbin/unwind/libunbound/util/config_file.c
@@ -195,6 +195,7 @@ config_create(void)
        cfg->use_systemd = 0;
        cfg->do_daemonize = 1;
        cfg->if_automatic = 0;
+       cfg->if_automatic_ports = NULL;
        cfg->so_rcvbuf = 0;
        cfg->so_sndbuf = 0;
        cfg->so_reuseport = REUSEPORT_DEFAULT;
@@ -267,6 +268,7 @@ config_create(void)
        cfg->serve_expired_ttl_reset = 0;
        cfg->serve_expired_reply_ttl = 30;
        cfg->serve_expired_client_timeout = 0;
+       cfg->ede_serve_expired = 0;
        cfg->serve_original_ttl = 0;
        cfg->zonemd_permissive_mode = 0;
        cfg->add_holddown = 30*24*3600;
@@ -375,6 +377,7 @@ config_create(void)
        cfg->ipset_name_v4 = NULL;
        cfg->ipset_name_v6 = NULL;
 #endif
+       cfg->ede = 0;
        return cfg;
 error_exit:
        config_delete(cfg);
@@ -476,7 +479,7 @@ int config_set_option(struct config_file* cfg, const char* opt,
                else if(atoi(val) == 0)
                        return 0;
                else cfg->stat_interval = atoi(val);
-       } else if(strcmp(opt, "num_threads:") == 0) {
+       } else if(strcmp(opt, "num-threads:") == 0) {
                /* not supported, library must have 1 thread in bgworker */
                return 0;
        } else if(strcmp(opt, "outgoing-port-permit:") == 0) {
@@ -543,6 +546,7 @@ int config_set_option(struct config_file* cfg, const char* opt,
        else S_STR("ssl-cert-bundle:", tls_cert_bundle)
        else S_STR("tls-cert-bundle:", tls_cert_bundle)
        else S_YNO("tls-win-cert:", tls_win_cert)
+       else S_YNO("tls-system-cert:", tls_win_cert)
        else S_STRLIST("additional-ssl-port:", tls_additional_port)
        else S_STRLIST("additional-tls-port:", tls_additional_port)
        else S_STRLIST("tls-additional-ports:", tls_additional_port)
@@ -559,6 +563,7 @@ int config_set_option(struct config_file* cfg, const char* opt,
        else S_YNO("http-nodelay:", http_nodelay)
        else S_YNO("http-notls-downstream:", http_notls_downstream)
        else S_YNO("interface-automatic:", if_automatic)
+       else S_STR("interface-automatic-ports:", if_automatic_ports)
        else S_YNO("use-systemd:", use_systemd)
        else S_YNO("do-daemonize:", do_daemonize)
        else S_NUMBER_NONZERO("port:", port)
@@ -668,6 +673,8 @@ int config_set_option(struct config_file* cfg, const char* opt,
        else if(strcmp(opt, "serve-expired-reply-ttl:") == 0)
        { IS_NUMBER_OR_ZERO; cfg->serve_expired_reply_ttl = atoi(val); SERVE_EXPIRED_REPLY_TTL=(time_t)cfg->serve_expired_reply_ttl;}
        else S_NUMBER_OR_ZERO("serve-expired-client-timeout:", serve_expired_client_timeout)
+       else S_YNO("ede:", ede) 
+       else S_YNO("ede-serve-expired:", ede_serve_expired)
        else S_YNO("serve-original-ttl:", serve_original_ttl)
        else S_STR("val-nsec3-keysize-iterations:", val_nsec3_key_iterations)
        else S_YNO("zonemd-permissive-mode:", zonemd_permissive_mode)
@@ -990,6 +997,7 @@ config_get_option(struct config_file* cfg, const char* opt,
        else O_IFC(opt, "interface", num_ifs, ifs)
        else O_IFC(opt, "outgoing-interface", num_out_ifs, out_ifs)
        else O_YNO(opt, "interface-automatic", if_automatic)
+       else O_STR(opt, "interface-automatic-ports", if_automatic_ports)
        else O_DEC(opt, "port", port)
        else O_DEC(opt, "outgoing-range", outgoing_num_ports)
        else O_DEC(opt, "outgoing-num-tcp", outgoing_num_tcp)
@@ -1049,6 +1057,7 @@ config_get_option(struct config_file* cfg, const char* opt,
        else O_STR(opt, "ssl-cert-bundle", tls_cert_bundle)
        else O_STR(opt, "tls-cert-bundle", tls_cert_bundle)
        else O_YNO(opt, "tls-win-cert", tls_win_cert)
+       else O_YNO(opt, "tls-system-cert", tls_win_cert)
        else O_LST(opt, "additional-ssl-port", tls_additional_port)
        else O_LST(opt, "additional-tls-port", tls_additional_port)
        else O_LST(opt, "tls-additional-ports", tls_additional_port)
@@ -1108,6 +1117,8 @@ config_get_option(struct config_file* cfg, const char* opt,
        else O_YNO(opt, "serve-expired-ttl-reset", serve_expired_ttl_reset)
        else O_DEC(opt, "serve-expired-reply-ttl", serve_expired_reply_ttl)
        else O_DEC(opt, "serve-expired-client-timeout", serve_expired_client_timeout)
+       else O_YNO(opt, "ede", ede)
+       else O_YNO(opt, "ede-serve-expired", ede_serve_expired)
        else O_YNO(opt, "serve-original-ttl", serve_original_ttl)
        else O_STR(opt, "val-nsec3-keysize-iterations",val_nsec3_key_iterations)
        else O_YNO(opt, "zonemd-permissive-mode", zonemd_permissive_mode)
@@ -1534,6 +1545,7 @@ config_delete(struct config_file* cfg)
        free(cfg->directory);
        free(cfg->logfile);
        free(cfg->pidfile);
+       free(cfg->if_automatic_ports);
        free(cfg->target_fetch_policy);
        free(cfg->ssl_service_key);
        free(cfg->ssl_service_pem);
@@ -2482,7 +2494,7 @@ char* cfg_ptr_reverse(char* str)
        while(*ip_end && isspace((unsigned char)*ip_end))
                ip_end++;
        if(name>ip_end) {
-               snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), "%.*s", 
+               snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), "%.*s",
                        (int)(name-ip_end), ip_end);
        }
        snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), " PTR %s", name);
@@ -2553,126 +2565,6 @@ void w_config_adjust_directory(struct config_file* cfg)
 }
 #endif /* UB_ON_WINDOWS */
 
-void errinf(struct module_qstate* qstate, const char* str)
-{
-       struct config_strlist* p;
-       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !str)
-               return;
-       p = (struct config_strlist*)regional_alloc(qstate->region, sizeof(*p));
-       if(!p) {
-               log_err("malloc failure in validator-error-info string");
-               return;
-       }
-       p->next = NULL;
-       p->str = regional_strdup(qstate->region, str);
-       if(!p->str) {
-               log_err("malloc failure in validator-error-info string");
-               return;
-       }
-       /* add at end */
-       if(qstate->errinf) {
-               struct config_strlist* q = qstate->errinf;
-               while(q->next) 
-                       q = q->next;
-               q->next = p;
-       } else  qstate->errinf = p;
-}
-
-void errinf_origin(struct module_qstate* qstate, struct sock_list *origin)
-{
-       struct sock_list* p;
-       if(qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail)
-               return;
-       for(p=origin; p; p=p->next) {
-               char buf[256];
-               if(p == origin)
-                       snprintf(buf, sizeof(buf), "from ");
-               else    snprintf(buf, sizeof(buf), "and ");
-               if(p->len == 0)
-                       snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), 
-                               "cache");
-               else 
-                       addr_to_str(&p->addr, p->len, buf+strlen(buf),
-                               sizeof(buf)-strlen(buf));
-               errinf(qstate, buf);
-       }
-}
-
-char* errinf_to_str_bogus(struct module_qstate* qstate)
-{
-       char buf[20480];
-       char* p = buf;
-       size_t left = sizeof(buf);
-       struct config_strlist* s;
-       char dname[LDNS_MAX_DOMAINLEN+1];
-       char t[16], c[16];
-       sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t));
-       sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c));
-       dname_str(qstate->qinfo.qname, dname);
-       snprintf(p, left, "validation failure <%s %s %s>:", dname, t, c);
-       left -= strlen(p); p += strlen(p);
-       if(!qstate->errinf)
-               snprintf(p, left, " misc failure");
-       else for(s=qstate->errinf; s; s=s->next) {
-               snprintf(p, left, " %s", s->str);
-               left -= strlen(p); p += strlen(p);
-       }
-       p = strdup(buf);
-       if(!p)
-               log_err("malloc failure in errinf_to_str");
-       return p;
-}
-
-char* errinf_to_str_servfail(struct module_qstate* qstate)
-{
-       char buf[20480];
-       char* p = buf;
-       size_t left = sizeof(buf);
-       struct config_strlist* s;
-       char dname[LDNS_MAX_DOMAINLEN+1];
-       char t[16], c[16];
-       sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t));
-       sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c));
-       dname_str(qstate->qinfo.qname, dname);
-       snprintf(p, left, "SERVFAIL <%s %s %s>:", dname, t, c);
-       left -= strlen(p); p += strlen(p);
-       if(!qstate->errinf)
-               snprintf(p, left, " misc failure");
-       else for(s=qstate->errinf; s; s=s->next) {
-               snprintf(p, left, " %s", s->str);
-               left -= strlen(p); p += strlen(p);
-       }
-       p = strdup(buf);
-       if(!p)
-               log_err("malloc failure in errinf_to_str");
-       return p;
-}
-
-void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr)
-{
-       char buf[1024];
-       char dname[LDNS_MAX_DOMAINLEN+1];
-       char t[16], c[16];
-       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !rr)
-               return;
-       sldns_wire2str_type_buf(ntohs(rr->rk.type), t, sizeof(t));
-       sldns_wire2str_class_buf(ntohs(rr->rk.rrset_class), c, sizeof(c));
-       dname_str(rr->rk.dname, dname);
-       snprintf(buf, sizeof(buf), "for <%s %s %s>", dname, t, c);
-       errinf(qstate, buf);
-}
-
-void errinf_dname(struct module_qstate* qstate, const char* str, uint8_t* dname)
-{
-       char b[1024];
-       char buf[LDNS_MAX_DOMAINLEN+1];
-       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !str || !dname)
-               return;
-       dname_str(dname, buf);
-       snprintf(b, sizeof(b), "%s %s", str, buf);
-       errinf(qstate, b);
-}
-
 int options_remote_is_address(struct config_file* cfg)
 {
        if(!cfg->remote_control_enable) return 0;

diff --git a/sbin/unwind/libunbound/util/config_file.h b/sbin/unwind/libunbound/util/config_file.h
index c7c9a0a..0b457e3 100644 (file)
--- a/sbin/unwind/libunbound/util/config_file.h
+++ b/sbin/unwind/libunbound/util/config_file.h
@@ -41,6 +41,7 @@
 
 #ifndef UTIL_CONFIG_FILE_H
 #define UTIL_CONFIG_FILE_H
+#include "sldns/rrdef.h"
 struct config_stub;
 struct config_auth;
 struct config_view;
@@ -205,6 +206,8 @@ struct config_file {
        /** automatic interface for incoming messages. Uses ipv6 remapping,
         * and recvmsg/sendmsg ancillary data to detect interfaces, boolean */
        int if_automatic;
+       /** extra ports to open if if_automatic enabled, or NULL for default */
+       char* if_automatic_ports;
        /** SO_RCVBUF size to set on port 53 UDP socket */
        size_t so_rcvbuf;
        /** SO_SNDBUF size to set on port 53 UDP socket */
@@ -404,6 +407,8 @@ struct config_file {
        /** serve expired entries only after trying to update the entries and this
         *  timeout (in milliseconds) is reached */
        int serve_expired_client_timeout;
+       /** serve EDE code 3 - Stale Answer (RFC8914) for expired entries */
+       int ede_serve_expired;
        /** serve original TTLs rather than decrementing ones */
        int serve_original_ttl;
        /** nsec3 maximum iterations per key size, string */
@@ -677,6 +682,8 @@ struct config_file {
        char* ipset_name_v4;
        char* ipset_name_v6;
 #endif
+       /** respond with Extended DNS Errors (RFC8914) */
+       int ede;
 };
 
 /** from cfg username, after daemonize setup performed */
@@ -1239,56 +1246,6 @@ char* fname_after_chroot(const char* fname, struct config_file* cfg,
  */
 char* cfg_ptr_reverse(char* str);
 
-/**
- * Append text to the error info for validation.
- * @param qstate: query state.
- * @param str: copied into query region and appended.
- * Failures to allocate are logged.
- */
-void errinf(struct module_qstate* qstate, const char* str);
-
-/**
- * Append text to error info:  from 1.2.3.4
- * @param qstate: query state.
- * @param origin: sock list with origin of trouble. 
- *     Every element added.
- *     If NULL: nothing is added.
- *     if 0len element: 'from cache' is added.
- */
-void errinf_origin(struct module_qstate* qstate, struct sock_list *origin);
-
-/**
- * Append text to error info:  for RRset name type class
- * @param qstate: query state.
- * @param rr: rrset_key.
- */
-void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr);
-
-/**
- * Append text to error info:  str dname
- * @param qstate: query state.
- * @param str: explanation string
- * @param dname: the dname.
- */
-void errinf_dname(struct module_qstate* qstate, const char* str, 
-       uint8_t* dname);
-
-/**
- * Create error info in string.  For validation failures.
- * @param qstate: query state.
- * @return string or NULL on malloc failure (already logged).
- *    This string is malloced and has to be freed by caller.
- */
-char* errinf_to_str_bogus(struct module_qstate* qstate);
-
-/**
- * Create error info in string.  For other servfails.
- * @param qstate: query state.
- * @return string or NULL on malloc failure (already logged).
- *    This string is malloced and has to be freed by caller.
- */
-char* errinf_to_str_servfail(struct module_qstate* qstate);
-
 /**
  * Used during options parsing
  */

diff --git a/sbin/unwind/libunbound/util/configlexer.c b/sbin/unwind/libunbound/util/configlexer.c
index ed17129..9f6324f 100644 (file)
--- a/sbin/unwind/libunbound/util/configlexer.c
+++ b/sbin/unwind/libunbound/util/configlexer.c
@@ -5,7 +5,7 @@
 
 #define  YY_INT_ALIGNED short int
 
-/*     $OpenBSD: configlexer.c,v 1.12 2022/03/01 18:34:22 florian Exp $        */
+/*     $OpenBSD: configlexer.c,v 1.13 2022/06/18 16:20:14 florian Exp $        */
 
 /* A lexical scanner generated by flex */
 
@@ -27,7 +27,7 @@
 
 /* end standard C headers. */
 
-/* $OpenBSD: configlexer.c,v 1.12 2022/03/01 18:34:22 florian Exp $ */
+/* $OpenBSD: configlexer.c,v 1.13 2022/06/18 16:20:14 florian Exp $ */
 
 /* flex integer type definitions */
 
@@ -368,8 +368,8 @@ static void yy_fatal_error (yyconst char msg[]  );
        *yy_cp = '\0'; \
        (yy_c_buf_p) = yy_cp;
 
-#define YY_NUM_RULES 358
-#define YY_END_OF_BUFFER 359
+#define YY_NUM_RULES 362
+#define YY_END_OF_BUFFER 363
 /* This struct is not used in this scanner,
    but its presence is necessary. */
 struct yy_trans_info
@@ -377,399 +377,404 @@ struct yy_trans_info
        flex_int32_t yy_verify;
        flex_int32_t yy_nxt;
        };
-static yyconst flex_int16_t yy_accept[3558] =
+static yyconst flex_int16_t yy_accept[3593] =
     {   0,
-        1,    1,  332,  332,  336,  336,  340,  340,  344,  344,
-        1,    1,  348,  348,  352,  352,  359,  356,    1,  330,
-      330,  357,    2,  357,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  332,  333,  333,  334,
-      357,  336,  337,  337,  338,  357,  343,  340,  341,  341,
-      342,  357,  344,  345,  345,  346,  357,  355,  331,    2,
-      335,  357,  355,  351,  348,  349,  349,  350,  357,  352,
-      353,  353,  354,  357,  356,    0,    1,    2,    2,    2,
-        2,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  332,
-        0,  336,    0,  343,    0,  340,  344,    0,  355,    0,
-        2,    2,  355,  351,    0,  348,  352,    0,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  355,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  130,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      140,  356,  356,  356,  356,  356,  356,  356,  355,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  112,  356,
-      329,  356,  356,  356,  356,  356,  356,  356,  356,    8,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      131,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  145,  356,  356,  355,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  322,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  355,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,   67,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  251,  356,   14,
-       15,  356,   19,   18,  356,  356,  235,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      138,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  233,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,    3,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  355,  356,  356,
-      356,  356,  356,  356,  356,  316,  356,  356,  315,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  339,  356,
-
-      356,  356,  356,  356,  356,  356,  356,   66,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   70,  356,  285,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  323,  324,  356,  356,
-      356,  356,  356,  356,  356,  356,   71,  356,  356,  139,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  134,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  222,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,   21,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      165,  356,  356,  356,  356,  356,  355,  339,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  110,
-      356,  356,  356,  356,  356,  356,  356,  293,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  191,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  164,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  109,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   35,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,   36,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,   68,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  137,  356,  356,  356,  355,  356,
-      356,  356,  356,  356,  129,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-       69,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  255,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  192,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,   57,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  273,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   61,  356,   62,  356,  356,  356,
-      356,  356,  113,  356,  114,  356,  356,  356,  356,  356,
-      111,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,    7,  356,  356,  356,  356,  355,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  244,  356,  356,
-      356,  356,  168,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  256,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,   48,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,   58,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  214,  356,  213,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,   16,   17,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,   72,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  221,  356,  356,  356,
-      356,  356,  356,  116,  356,  115,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  205,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  146,  356,  356,  356,  355,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  104,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,   92,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  234,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,   97,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,   65,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  208,  209,  356,  356,  356,
-
-      287,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,    6,  356,  356,  356,  356,  356,
-      356,  356,  306,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  291,  356,  356,  356,  356,  356,  356,  356,  317,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   45,  356,  356,  356,  356,   47,
-      356,  356,  356,   93,  356,  356,  356,  356,  356,   55,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  355,  356,  201,  356,  356,  356,  141,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  226,  356,
-      202,  356,  356,  356,  241,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,   56,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  143,  122,  356,  123,
-      356,  356,  356,  356,  121,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  161,  356,  356,   53,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  272,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  203,  356,  356,  356,  356,
-      356,  206,  356,  212,  356,  356,  356,  356,  356,  356,
-      240,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  108,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  135,  356,
-      356,  356,  356,  356,  356,  356,  356,   63,  356,  356,
-      356,   29,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   20,  356,  356,  356,  356,  356,
-      356,   30,   39,  356,  173,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  199,
-      356,  356,  355,  356,  356,  356,  356,  356,  356,   80,
-       82,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  295,  356,  356,  356,  356,  252,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  124,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  160,  356,   49,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      310,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      167,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  304,  356,  356,  356,  232,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  320,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  185,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  117,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  180,  356,  193,  356,  356,
-
-      356,  356,  356,  356,  356,  355,  356,  149,  356,  356,
-      356,  356,  356,  103,  356,  356,  356,  356,  224,  356,
-      356,  356,  356,  356,  356,  242,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  264,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  142,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  184,  356,  356,  356,  356,  356,  356,   83,  356,
-       84,  356,  356,  356,  356,  356,  356,   64,  313,  356,
-      356,  356,  356,  356,   91,  194,  356,  215,  356,  245,
-
-      356,  356,  207,  288,  356,  356,  356,  356,  356,  356,
-       76,  356,  196,  356,  356,  356,  356,  356,  356,    9,
-      356,  356,  356,  356,  356,  107,  356,  356,  356,  356,
-      356,  277,  356,  356,  356,  356,  223,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      355,  356,  356,  356,  356,  183,  356,  356,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  169,  356,  294,  356,
-      356,  356,  356,  356,  263,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  236,  356,  356,  356,
-      356,  356,  286,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      166,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  314,  356,  195,
-      356,  356,  356,  356,  356,  356,  356,  356,   75,   77,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      106,  356,  356,  356,  356,  356,  275,  356,  356,  356,
-
-      356,  290,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  228,   37,   31,   33,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,   38,  356,   32,   34,  356,  356,  356,  356,  356,
-      356,  356,  356,  102,  356,  179,  356,  356,  356,  356,
-      356,  356,  356,  355,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  230,  227,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,   74,  356,  356,  356,  144,
-      356,  125,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  162,   50,  356,  356,  356,  347,   13,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      308,  356,  311,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,   12,  356,  356,   22,  356,
-      356,  356,  356,  356,  356,  281,  356,  356,  356,  356,
-      292,  356,  356,  356,  356,   78,  356,  238,  356,  356,
-      356,  356,  356,  229,  356,  356,   73,  356,  356,  356,
-      356,  356,  356,   23,  356,  356,   46,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  178,
-      177,  356,  356,  347,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  356,  231,  225,  356,  243,  356,  356,  296,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,   85,  356,  356,  356,  356,  356,
-      276,  356,  356,  356,  356,  211,  356,  356,  356,  356,
-      356,  237,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  283,  356,  356,  356,  318,  319,  175,  356,  356,
-      356,   79,  356,  356,  356,  356,  186,  356,  356,  356,
-      118,  120,  119,  356,  356,  356,   25,  356,  356,  170,
-
-      356,  172,  356,  216,  356,  356,  356,  356,  176,  356,
-      356,  356,  356,  246,  356,  356,  356,  356,  356,  356,
-      356,  151,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  254,  356,  356,  356,  356,  356,
-      356,  356,  327,  356,   27,  356,  289,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,   89,  217,  356,  356,  356,  274,  356,
-      312,  356,  210,  356,  356,  356,  356,  356,  284,   59,
-      356,  356,  356,  356,  356,  356,    4,  356,  356,  356,
-      356,  133,  356,  150,  356,  356,  356,  190,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  249,   40,   41,  356,
-      356,  356,  356,  356,  356,  356,  297,  356,  356,  356,
-      356,  356,  356,  356,  262,  356,  356,  356,  356,  356,
-      356,  356,  356,  220,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,   88,  356,
-       60,  356,  280,  356,  250,  356,  356,  356,  356,  356,
-       11,  356,  356,  356,  356,  356,  356,  356,  356,  132,
-      356,  356,  356,  356,  356,  218,   94,  356,  356,   43,
-      356,  356,  356,  356,  356,  356,  356,  356,  182,  356,
-
-      356,  356,  356,  356,  356,  356,  153,  356,  356,  356,
-      356,  253,  356,  356,  356,  356,  356,  261,  356,  356,
-      356,  356,  147,  356,  356,  356,  126,  128,  127,  356,
-      356,  356,   96,  100,   95,  163,  356,  356,  356,  356,
-       86,  282,  356,  356,  356,  356,  356,  356,   10,  356,
-      356,  356,  356,  356,  278,  321,  356,  356,  356,  356,
-      356,  356,  326,   42,  356,  356,  356,  356,  356,  181,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  101,   99,  356,   54,  356,
-
-      356,   87,  309,  356,  356,  356,  356,   24,  356,  356,
-      356,  356,  356,  204,  356,  356,  356,  356,  356,  356,
-      219,  356,  356,  356,  356,  356,  356,  356,  356,  200,
-      356,  356,  171,   81,  356,  356,  356,  356,  356,  298,
-      356,  356,  356,  356,  356,  356,  356,  258,  356,  356,
-      257,  148,  356,  356,   98,   51,  356,  154,  155,  158,
-      159,  156,  157,   90,  307,  356,  356,  279,  136,  356,
-      356,  356,   26,  356,  174,  356,  356,  356,  356,  198,
-      356,  248,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-
-      356,  356,  188,  187,   44,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  305,  356,  356,
-      356,  356,  105,  356,  247,  356,  271,  302,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  328,
-      356,   52,    5,  356,  356,  239,  356,  356,  303,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  259,   28,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  260,  356,  356,  356,  152,  356,  356,  356,
-      356,  356,  356,  356,  356,  189,  356,  197,  356,  356,
-
-      356,  356,  356,  356,  356,  356,  356,  299,  356,  356,
-      356,  356,  356,  356,  356,  356,  356,  356,  356,  356,
-      356,  356,  356,  356,  356,  325,  356,  356,  267,  356,
-      356,  356,  356,  356,  300,  356,  356,  356,  356,  356,
-      356,  301,  356,  356,  356,  265,  356,  268,  269,  356,
-      356,  356,  356,  356,  266,  270,    0
+        1,    1,  336,  336,  340,  340,  344,  344,  348,  348,
+        1,    1,  352,  352,  356,  356,  363,  360,    1,  334,
+      334,  361,    2,  361,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  336,  337,  337,  338,
+      361,  340,  341,  341,  342,  361,  347,  344,  345,  345,
+      346,  361,  348,  349,  349,  350,  361,  359,  335,    2,
+      339,  361,  359,  355,  352,  353,  353,  354,  361,  356,
+      357,  357,  358,  361,  360,    0,    1,    2,    2,    2,
+        2,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  336,
+        0,  340,    0,  347,    0,  344,  348,    0,  359,    0,
+        2,    2,  359,  355,    0,  352,  356,    0,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  359,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  333,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  132,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  142,  360,  360,  360,  360,  360,  360,
+      360,  359,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  114,  360,  332,  360,  360,  360,  360,  360,
+      360,  360,  360,    8,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  133,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  147,  360,
+      360,  359,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  325,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  359,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,   69,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  254,  360,   14,   15,  360,   19,   18,
+      360,  360,  238,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  140,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  236,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,    3,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  359,  360,  360,  360,  360,
+      360,  360,  360,  319,  360,  360,  318,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  343,  360,  360,
+      360,  360,  360,  360,  360,  360,   68,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,   72,  360,  288,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  326,  327,  360,  360,  360,
+      360,  360,  360,  360,  360,   73,  360,  360,  141,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  136,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  225,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,   21,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      167,  360,  360,  360,  360,  360,  359,  343,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  112,
+      360,  360,  360,  360,  360,  360,  360,  296,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  194,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  166,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  111,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,   35,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,   36,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,   70,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  139,  360,  360,  360,
+      359,  360,  360,  360,  360,  360,  131,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   71,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  258,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      195,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,   58,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  276,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,   63,  360,   64,
+      360,  360,  360,  360,  360,  115,  360,  116,  360,  360,
+      360,  360,  360,  113,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,    7,  360,  360,
+      360,  360,  359,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  247,  360,  360,  360,  360,  170,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  259,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,   49,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,   59,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  217,
+      360,  216,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   16,   17,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,   74,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  224,  360,  360,  360,  360,  360,  360,  118,  360,
+      117,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  208,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  148,  360,  360,
+
+      360,  359,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  106,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   94,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  237,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,   99,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,   67,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  211,  212,  360,  360,  360,  290,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,    6,  360,  360,  360,  360,  360,  360,  360,  309,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  294,  360,
+      360,  360,  360,  360,  360,  360,  320,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,   46,  360,  360,  360,  360,  360,   48,  360,  360,
+
+      360,   95,  360,  360,  360,  360,  360,   56,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  359,
+      360,  204,  360,  360,  360,  143,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  229,  360,  205,  360,
+      360,  360,  244,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,   57,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  145,  124,  360,  125,  360,
+      360,  360,  360,  123,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  163,  360,  360,   54,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  275,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  206,  360,  360,  360,  360,  360,
+      209,  360,  215,  360,  360,  360,  360,  360,  360,  243,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  110,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  137,  360,  360,
+      360,  360,  360,  360,  360,  360,   65,  360,  360,  360,
+       29,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,   20,  360,  360,  360,  360,  360,  360,
+      360,   30,   39,  360,  175,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  202,
+      360,  360,  359,  360,  360,  360,  360,  360,  360,   82,
+       84,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  298,  360,  360,  360,  360,  255,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  126,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  162,  360,   50,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  313,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  169,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  307,  360,  360,  360,  235,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      323,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  187,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  119,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  182,  360,  196,
+      360,  360,  360,  360,  360,  360,  360,  359,  360,  151,
+      360,  360,  360,  360,  360,  105,  360,  360,  360,  360,
+      227,  360,  360,  360,  360,  360,  360,  245,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  267,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  144,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  186,  360,  360,  360,  360,  360,
+
+      360,   85,  360,   86,  360,  360,  360,  360,  360,  360,
+       66,  316,  360,  360,  360,  360,  360,   93,  197,  360,
+      218,  360,  248,  360,  360,  210,  291,  360,  360,  360,
+      360,  360,  360,   78,  360,  199,  360,  360,  360,  360,
+      360,  360,    9,  360,  360,  360,  360,  360,  109,  360,
+      360,  360,  360,  360,  280,  360,  360,  360,  360,  226,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  359,  360,  360,  360,  360,  185,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      171,  360,  297,  360,  360,  360,  360,  360,  266,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      239,  360,  360,  360,  360,  360,  360,  289,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  168,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  317,  360,  198,  360,  360,  360,  360,  360,
+
+      360,  360,  360,   77,   79,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  108,  360,  360,  360,  360,
+      360,  278,  360,  360,  360,  360,  293,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      231,   37,   31,   33,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,   38,  360,   32,   34,
+      360,   40,  360,  360,  360,  360,  360,  360,  360,  104,
+      360,  181,  360,  360,  360,  360,  360,  360,  360,  359,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  233,  230,  360,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   76,  360,  360,  360,  146,  360,  127,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  164,
+       51,  360,  360,  360,  351,   13,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  311,  360,  314,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   12,  360,  360,   22,  360,  360,  360,  360,
+      360,  360,  284,  360,  360,  360,  360,  295,  360,  360,
+      360,  360,   80,  360,  241,  360,  360,  360,  360,  360,
+      232,  360,  360,   75,  360,  360,  360,  360,  360,  360,
+
+       23,  360,  360,   47,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  180,  179,  360,  360,
+      351,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      234,  228,  360,  246,  360,  360,  299,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  192,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,   87,  360,  360,  360,  360,  360,  279,  360,
+      360,  360,  360,  214,  360,  360,  360,  360,  360,  240,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  286,
+
+      360,  360,  360,  321,  322,  177,  360,  360,  360,   81,
+      360,  360,  360,  360,  188,  360,  360,  360,  120,  122,
+      121,  360,  360,  360,   25,  360,  360,  172,  360,  174,
+      360,  219,  360,  360,  360,  360,  178,  360,  360,  360,
+      360,  249,  360,  360,  360,  360,  360,  360,  360,  153,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  257,  360,  360,  360,  360,  360,  360,  360,
+      330,  360,   27,  360,  292,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,   91,  220,  360,  360,  360,  277,  360,  315,  360,
+
+      213,  360,  360,  360,  360,  360,  287,   60,  360,  360,
+      360,  360,  360,  360,    4,  360,  360,  360,  360,  135,
+      360,  152,  360,  360,  360,  193,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  252,   41,   42,  360,  360,  360,
+      360,  360,  360,  360,  300,  360,  360,  360,  360,  360,
+      360,  360,  265,  360,  360,  360,  360,  360,  360,  360,
+      360,  223,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,   90,  360,  360,   61,
+      360,  283,  360,  253,  360,  360,  360,  360,  360,   11,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  134,  360,
+      360,  360,  360,  360,  221,   96,  360,  360,   44,  360,
+      360,  360,  360,  360,  360,  360,  360,  184,  360,  360,
+      360,  360,  360,  360,  360,  155,  360,  360,  360,  360,
+      256,  360,  360,  360,  360,  360,  264,  360,  360,  360,
+      360,  149,  360,  360,  360,  128,  130,  129,  360,  360,
+      360,   98,  102,   97,  165,  360,  360,  360,  360,   88,
+      360,  285,  360,  360,  360,  360,  360,  360,   10,  360,
+      360,  360,  360,  360,  281,  324,  360,  360,  360,  360,
+      360,  360,  329,   43,  360,  360,  360,  360,  360,  183,
+
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  103,  101,  360,   55,  360,
+      360,   89,  360,  312,  360,  360,  360,  360,   24,  360,
+      360,  360,  360,  360,  207,  360,  360,  360,  360,  360,
+      360,  222,  360,  360,  360,  360,  360,  360,  360,  360,
+      203,  360,  360,  173,   83,  360,  360,  360,  360,  360,
+      301,  360,  360,  360,  360,  360,  360,  360,  261,  360,
+      360,  260,  150,  360,  360,  100,   52,  360,  360,  156,
+      157,  160,  161,  158,  159,   92,  310,  360,  360,  282,
+
+      138,  360,  360,  360,   26,  360,  176,  360,  360,  360,
+      360,  201,  360,  251,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  190,  189,   45,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  308,  360,  360,  360,  360,  107,  360,  250,  360,
+      274,  305,  360,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  331,  360,   53,   62,    5,  360,  360,
+      242,  360,  360,  306,  360,  360,  360,  360,  360,  360,
+
+      360,  360,  360,  262,   28,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  263,  360,  360,
+      360,  154,  360,  360,  360,  360,  360,  360,  360,  360,
+      191,  360,  200,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  302,  360,  360,  360,  360,  360,  360,  360,
+      360,  360,  360,  360,  360,  360,  360,  360,  360,  360,
+      328,  360,  360,  270,  360,  360,  360,  360,  360,  303,
+      360,  360,  360,  360,  360,  360,  304,  360,  360,  360,
+      268,  360,  271,  272,  360,  360,  360,  360,  360,  269,
+      273,    0
+
     } ;
 
 static yyconst flex_int32_t yy_ec[256] =
@@ -812,17 +817,17 @@ static yyconst flex_int32_t yy_meta[41] =
         1,    1,    1,    1,    1,    1,    1,    1,    1,    1
     } ;
 
-static yyconst flex_int16_t yy_base[3576] =
+static yyconst flex_int16_t yy_base[3611] =
     {   0,
         0,    0,   38,   41,   44,   46,   59,   65,   71,   77,
-       90,  112,   96,  118,  124,  136, 3060, 2545,   81, 6947,
-     6947, 6947,  129,   52,  130,   63,  131,  152,   70,  140,
+       90,  112,   96,  118,  124,  136, 4340, 4181,   81, 7005,
+     7005, 7005,  129,   52,  130,   63,  131,  152,   70,  140,
       149,  156,   57,   88,   76,  173,  175,   95,  197,  145,
-      185,  199,  208,  213,  178,  123, 2505, 6947, 6947, 6947,
-      107, 2460, 6947, 6947, 6947,  154, 2315, 2089, 6947, 6947,
-     6947,  245, 2007, 6947, 6947, 6947,  163, 1936, 6947,  249,
-     6947,  253,  148, 1835, 1793, 6947, 6947, 6947,  257, 1696,
-     6947, 6947, 6947,  233, 1543,  263,  201,    0,  267,    0,
+      185,  199,  208,  213,  178,  123, 3534, 7005, 7005, 7005,
+      107, 3162, 7005, 7005, 7005,  154, 3102, 2669, 7005, 7005,
+     7005,  245, 2592, 7005, 7005, 7005,  163, 2519, 7005,  249,
+     7005,  253,  148, 2320, 2287, 7005, 7005, 7005,  257, 2134,
+     7005, 7005, 7005,  233, 1825,  263,  201,    0,  267,    0,
         0,  165,  191,  221,  252,  205,  181,  265,   92,  261,
 
       216,  263,  271,  272,  210,  279,  274,  282,  278,  291,
@@ -830,783 +835,791 @@ static yyconst flex_int16_t yy_base[3576] =
       317,  311,  315,  319,  321,  331,  327,  332,  336,  322,
       339,  337,  346,  345,  347,  348,  353,  351,  357,  284,
       358,  359,  369,  360,  380,  365,  381,  379,  375,  366,
-      367,  389,  390,  394,  393,  395,  396,  403,  404, 1277,
-      419, 1241,  422, 1199,  429, 1020,  925,  433,  779,  437,
-      441,    0,  433,  705,  447,  479,  287,  452,  411,  445,
+      367,  389,  390,  394,  393,  395,  396,  403,  404, 1718,
+      419, 1459,  422, 1387,  429, 1205, 1013,  433,  984,  437,
+      441,    0,  433,  780,  447,  527,  467,  452,  411,  445,
       426,  446,  447,  448,  449,  450,  451,  453,  452,  456,
-      470,  234,  463,  473,  481,  479,  476,  483,  486,  487,
-
-      488,  489,  491,  492,  501,  500,  502,  505,  508,  510,
-      511,  460,  509,  513,  527,  515,  516,  519,  538,  529,
-      540,  543,  539,  548,  555,  400,  550,  551,  558,  553,
-      560,  561,  571,  562,  566,  567,  570,  569,  573,  577,
-      574,  580,  578,  583,  584,  598,  595,  585,  601,  586,
-      594,  596,  612,  602,  611,  362,  607,  610,  619,  624,
-      609,  627,  620,  623,  629,  634,  631,  641,  636,  639,
-      640,  642,  644,  643,  646,  647,  648,  656,  659,  660,
-      664,  667,  657,  668,  658,  670,  673,  674,  683,  675,
-      685,  679,  689,  688,  690,  692,  694,  696,  695,  697,
-
-      700,  703,  708,  704,  713,  714,  721,  719,  724,  717,
-      726,  733,  728,  729,  730,  731,  734,  736,  732,  737,
-      738,  742,  745,  743,  753,  754,  755,  759,  758,  774,
-      763,  764,  771,  784,  765,  767,  769,  775,  796,  785,
-      798,  799,  800,  803,  804,  801,  808,  807,  809,  811,
-      823,  813,  820,  826,  827,  829,  830,  837,  832, 6947,
-      834,  836,  848,  847,  850,  853,  843,  859,  860,  839,
-      870,  866,  863,  881,  903,  867,  871,  873,  876,  872,
-     6947,  893,  883,  927,  885,  889,  911,  895,  907,  913,
-      916,  909,  914,  921,  923,  917,  920,  944,  945,  935,
-
-      936,  947,  952,  951,  959,  960,  954,  958,  963,  971,
-      964,  967,  973,  982,  972,  969,  975,  976,  877,  984,
-      993,  994,  995,  981,  988,  999, 1001, 1002, 1009, 1032,
-     1011, 1012, 1020, 1006, 1014, 1028, 1026, 1024, 1034, 1033,
-     1035, 1007, 1041, 1039, 1044, 1051, 1048, 1054, 1063, 1058,
-     1059, 1060, 1064, 1065, 1066, 1068, 1071, 1072, 1073, 1076,
-     1077, 1083, 1084, 1088, 1092, 1078, 1093, 1086, 6947, 1100,
-     6947, 1095, 1098, 1102, 1103, 1104, 1105, 1107, 1109, 6947,
-     1111, 1114, 1113, 1120, 1124, 1117, 1128, 1130, 1136, 1137,
-     1138, 1139, 1140, 1142, 1149, 1144, 1154, 1152, 1147, 1158,
-
-     1156, 1159, 1115, 1160, 1162, 1166, 1167, 1168, 1169, 1188,
-     6947, 1172, 1174, 1175, 1181, 1179, 1186, 1184, 1193, 1201,
-     1203, 1211, 1205, 1213, 1215, 1212, 1217, 1173, 1219, 1223,
-     1225, 1228, 1229, 1231, 1232, 1234, 1235, 1237, 1238, 1240,
-     1239, 1247, 1250, 1251, 6947, 1252, 1254, 1255, 1268, 1263,
-     1264, 1267, 1269, 1270, 1271, 1272, 1274, 1278,  517, 1273,
-     1291, 1288, 1284, 1298, 1293, 1294, 1295, 1299, 1301, 1300,
-     1302, 1304, 1313, 1310, 1316, 1325, 1328, 1327, 1330, 1337,
-     1339, 1319, 1332, 1342, 1336, 1334, 1335, 1346, 1347, 1348,
-     1350, 1351, 1360, 1356, 1357, 1359, 1358, 1364, 1365, 1367,
-
-     1362, 1368, 1370, 1372, 1374, 1381, 1379, 1385, 1390, 1386,
-     1391, 1387, 1380, 1395, 1403, 1397, 1406, 6947, 1413, 1308,
-     1409, 1410, 1415, 1416, 1417, 1418, 1423, 1424, 1425, 1427,
-     1426, 1429, 1430, 1433, 1435, 1437, 1440, 1442, 1450, 1445,
-     1455, 1462, 1461, 1443, 1447, 1457, 1463, 1467, 1466, 1474,
-     1470, 1479, 1478, 1469, 1482, 1489, 1480, 1484, 1486, 1496,
-     1476, 1492, 1498, 1499, 1507, 1502, 1504, 1510, 1518, 1514,
-     1515, 1522, 1523, 1500, 1527, 1517, 1531, 1532, 1534, 1535,
-     1537, 1538, 1545, 1540, 1542, 1546, 1547, 1541, 1548, 1554,
-     1549, 1569, 1555, 1560, 1565, 1568, 1570, 1571, 1572, 1578,
-
-     1573, 1579, 1580, 1581, 1583, 1592, 1584, 1582, 1593, 1594,
-     1601, 1595, 1603, 1602, 1604, 1611, 1610, 1614, 1615, 1605,
-     1616, 1620, 1626, 1627, 1628, 1631, 1630, 1635, 1638, 1636,
-     1640, 1642, 1648, 1649, 1650, 1652, 1633, 1656, 1659, 1664,
-     1667, 1661, 6947, 1657, 1675, 1651, 1673, 1674, 1653, 1679,
-     1687, 1680, 1682, 1683, 1684, 1685, 1710, 6947, 1691, 6947,
-     6947, 1690, 6947, 6947, 1693, 1692, 6947, 1694, 1695, 1708,
-     1699, 1713, 1716, 1720, 1718, 1711, 1721, 1733, 1742, 1728,
-     1734, 1726, 1735, 1751, 1738, 1752, 1740, 1750, 1758, 1759,
-     1757, 1764, 1771, 1766, 1775, 1768, 1779, 1777, 1780, 1786,
-
-     1787, 1791, 1793, 1788, 1794, 1797, 1796, 1798, 1799, 1802,
-     1804, 1723, 1805, 1808, 1809, 1810, 1818, 1815, 1823, 1830,
-     6947, 1828, 1831, 1827, 1840, 1836, 1843, 1811, 1838, 1839,
-     1849, 1851, 1845, 1842, 1852, 1854, 1855, 1856, 1859, 1861,
-     1864, 1867, 1865, 1869, 1872, 1870, 6947, 1877, 1878, 1871,
-     1879, 1881, 1882, 1883, 1891, 1892, 1893, 1894, 1904, 1896,
-     1899, 1897, 1901, 1906, 1908, 1909, 1911, 6947, 1916, 1924,
-     1913, 1921, 1919, 1925, 1928, 1929, 1930, 1933, 1931, 1935,
-     1937, 1938, 1947, 1943, 1944, 1946, 1949, 1953, 1958, 1961,
-     1959, 1960, 1971, 1963, 1966, 1972, 1974, 1975, 1976, 1977,
-
-     1978, 1980, 1985, 1990, 1987, 1995, 1988, 1991, 1998, 2009,
-     2004, 1993, 2005, 2010, 2006, 2013, 2022, 2024, 2020, 2019,
-     2021, 2032, 2028, 2030, 2031, 2033, 2036, 2041, 2042, 2043,
-     2044, 2046, 2050, 2051, 2053, 6947, 2055, 2059, 6947, 2058,
-     2060, 2061, 2083, 2062, 2065, 2066, 2075, 2064, 2087, 2078,
-     2076, 2095, 2084, 2102, 2097, 2103, 2105, 2107, 2108, 2112,
-     2110, 2111, 2114, 2116, 2118, 2120, 2128, 2137, 2138, 2140,
-     2134, 2142, 2119, 2143, 2067, 2163, 2144, 2145, 2146, 2147,
-     2148, 2152, 2153, 2151, 2154, 2155, 2165, 2170, 2172, 2173,
-     2175, 2158, 2179, 2180, 2181, 2191, 2188, 2185, 6947, 2200,
-
-     2193, 2197, 2201, 2202, 2209, 2207, 2204, 6947, 2208, 2210,
-     2211, 2220, 2213, 2218, 2221, 2224, 2225, 2228, 2229, 2231,
-     2233, 2230, 2232, 2251, 6947, 2234, 6947, 2238, 2235, 2253,
-     2243, 2246, 2247, 2254, 2256, 2259, 6947, 6947, 2263, 2257,
-     2270, 2273, 2278, 2274, 2275, 2276, 6947, 2277, 2285, 6947,
-     2287, 2292, 2280, 2281, 2282, 2286, 2296, 2297, 2305, 2300,
-     2308, 2303, 2306, 2307, 6947, 2313, 2316, 2310, 2317, 2323,
-     2324, 2325, 2327, 2330, 2326, 6947, 2333, 2329, 2336, 2343,
-     2347, 2341, 2344, 2348, 2352, 2349, 2354, 2355, 2356, 2357,
-     2364, 2366, 2369, 2371, 2372, 2374, 2378, 2385, 6947, 2381,
-
-     2380, 2382, 2390, 2387, 2389, 2391, 2394, 2393, 2395, 2396,
-     2401, 2397, 2405, 2406, 2407, 2409, 2418, 2421, 2416, 2417,
-     2426, 2413, 2420, 2423, 2427, 2365, 2429, 2430, 2433, 2436,
-     6947, 2437, 2441, 2438, 2443, 2444, 2442,  171, 2450, 2451,
-     2453, 2454, 2458, 2469, 2455, 2463, 2476, 2471, 2472, 2478,
-     2474, 2481, 2482, 2483, 2484, 2473, 2486, 2485, 2489, 6947,
-     2491, 2497, 2494, 2498, 2501, 2502, 2504, 6947, 2506, 2514,
-     2516, 2525, 2519, 2503, 2527, 2528, 2531, 2529, 2532, 2533,
-     2534, 2535, 2536, 2542, 2539, 6947, 2544, 2551, 2554, 2541,
-     2555, 2562, 2548, 2563, 2564, 2565, 2568, 2567, 2569, 2573,
-
-     2570, 2572, 2574, 2575, 2583, 2594, 2577, 2586, 2587, 2590,
-     2591, 2595, 2599, 2600, 2601, 2608, 2603, 6947, 2615, 2604,
-     2612, 2613, 2611, 2614, 2617, 2620, 2634, 2624, 2627, 2629,
-     2635, 2644, 2637, 2638, 2646, 2654, 2651, 2639, 2664, 2660,
-     2661, 2668, 2659, 2670, 2672, 2662, 2673, 2684, 2674, 2676,
-     2681, 2679, 2685, 2694, 2695, 2687, 2697, 2698, 2690, 2700,
-     2702, 2712, 2717, 2707, 6947, 2719, 2709, 2720, 2721, 2728,
-     2725, 2726, 2731, 2729, 2732, 2733, 2735, 2737, 2745, 2746,
-     2744, 2742, 2749, 2753, 2755, 2757, 2760, 2759, 2740, 2768,
-     2762, 2764, 2771, 2772, 6947, 2775, 2776, 2780, 2782, 2784,
-
-     2785, 2787, 2788, 2790, 2792, 2793, 2794, 2797, 2798, 2800,
-     2801, 2802, 2809, 2806, 2807, 2808, 2812, 6947, 2820, 2819,
-     2821, 2824, 2827, 2825, 2831, 2837, 2839, 2828, 2841, 2835,
-     2842, 2843, 2845, 6947, 2855, 2857, 2847, 2854, 2862, 2860,
-     2861, 2863, 2865, 2866, 6947, 2867, 2870, 2868, 2875, 2871,
-     2873, 2882, 2883, 2879, 6947, 2887, 2884, 2889, 2892, 2893,
-     2894, 2895, 2899, 2897, 2901, 2902, 2906, 2915, 2907, 2916,
-     6947, 2903, 2924, 2910, 2925, 2919, 2929, 2931, 2932, 2933,
-     2935, 2937, 2940, 6947, 2942, 2945, 2948, 2957, 2952, 2953,
-     2955, 2958, 2960, 2962, 2961, 2964, 2966, 6947, 2968, 2967,
-
-     2970, 2974, 2972, 2977, 2978, 2989, 2984, 2987, 2990, 2991,
-     2992, 2993, 2994, 2999, 3010, 3001, 2998, 3000, 3002, 3014,
-     3012, 3019, 3018, 3022, 3026, 3030, 3025, 3031, 3034, 3029,
-     3036, 3037, 3040, 3047, 3048, 3049, 3050, 3053, 6947, 3056,
-     3057, 3059, 3044, 3060, 3063, 3064, 3066, 3069, 3065, 3067,
-     3071, 3074, 3078, 3087, 3090, 3080, 3082, 3091, 3092, 3093,
-     3094, 3095, 3096, 3101, 3104, 3103, 3105, 3106, 3113, 3109,
-     3112, 3121, 3117, 3120, 3122, 3123, 3124, 3126, 3127, 3129,
-     3130, 3134, 3133, 3135, 3138, 3146, 3156, 3153, 3147, 3149,
-     3157, 3159, 3161, 6947, 3160, 3164, 3168, 3165, 3170, 3174,
-
-     3171, 3181, 3177, 3182, 3190, 3188, 3187, 3194, 3179, 3189,
-     3196, 3197, 3206, 3202, 6947, 3203, 6947, 3204, 3208, 3209,
-     3218, 3211, 6947, 3215, 6947, 3216, 3223, 3220, 3224, 3226,
-     6947, 3227, 3228, 3232, 3229, 3233, 3234, 3239, 3237, 3241,
-     3243, 3245, 3246, 3255, 3244, 3250, 3251, 3257, 3266, 3256,
-     3261, 3263, 3269, 3272, 3274, 3273, 3280, 3275, 3282, 3283,
-     3285, 3286, 3287, 6947, 3291, 3295, 3296, 3299, 3300, 3288,
-     3303, 3302, 3310, 3307, 3311, 3308, 3314, 3315, 3319, 3320,
-     3323, 3325, 3331, 3336, 3343, 3326, 3344, 6947, 3339, 3348,
-     3330, 3350, 6947, 3352, 3327, 3354, 3358, 3360, 3361, 3362,
-
-     3363, 3364, 3367, 3368, 3369, 3370, 3378, 3381, 3384, 6947,
-     3382, 3390, 3371, 3394, 3393, 3404, 3405, 3401, 3407, 3409,
-     3417, 3413, 3402, 3412, 3400, 3414, 3420, 3422, 3427, 3431,
-     3424, 3432, 3428, 3433, 3436, 3437, 3439, 3440, 3443, 3441,
-     3444, 3445, 3449, 3446, 3447, 3448, 3340, 3450, 3466, 6947,
-     3453, 3455, 3468, 3476, 3454, 3471, 3475, 3477, 3478, 6947,
-     3480, 3482, 3483, 3484, 3485, 3489, 3492, 3490, 3493, 3494,
-     3497, 3498, 3501, 3500, 6947, 3507, 6947, 3508, 3515, 3520,
-     3524, 3509, 3517, 3525, 3530, 3526, 3531, 3532, 3538, 3540,
-     3534, 3536, 3542, 3543, 3546, 3547, 3554, 3560, 3557, 3549,
-
-     3561, 3563, 3565, 3566, 3573, 3570, 3568, 6947, 6947, 3571,
-     3576, 3577, 3583, 3584, 3585, 3587, 3589, 3592, 3591, 3595,
-     3600, 3611, 6947, 3603, 3604, 3606, 3607, 3608, 3620, 3613,
-     3624, 3621, 3625, 3626, 3633, 3629, 6947, 3632, 3634, 3642,
-     3637, 3638, 3645, 6947, 3375, 6947, 3643, 3644, 3646, 3649,
-     3651, 3655, 3653, 3658, 3659, 3654, 3660, 3670, 3677, 3679,
-     3675, 3681, 3676, 3682, 3678, 3684, 3685, 3692, 3687, 3689,
-     3690, 6947, 3694, 3695, 3699, 3701, 3702, 3707, 3711, 3704,
-     3710, 6947, 3714, 3717, 3718, 3719, 3720, 3724, 3727, 3728,
-     3729, 3737, 3730, 3732, 3738, 3741, 6947, 3742, 3734, 3749,
-
-     3745, 3747, 3752, 3756, 3759, 3764, 6947, 3766, 3751, 3773,
-     3769, 3770, 3772, 3775, 3776, 3777, 3779, 3780, 3781, 3783,
-     3784, 3789, 3785, 3787, 3794, 3790, 3802, 3804, 3791, 3812,
-     3819, 3805, 6947, 3808, 3815, 3817, 3818, 3820, 3821, 3823,
-     3829, 3831, 3825, 3840, 3841, 3832, 3836, 3843, 3847, 3844,
-     3855, 3851, 6947, 3856, 3852, 3865, 3858, 3860, 3866, 3862,
-     3867, 3868, 3872, 3874, 3875, 3876, 3877, 3878, 3883, 3886,
-     3890, 3891, 3892, 3893, 3900, 3895, 6947, 3907, 3884, 3897,
-     3914, 3908, 3905, 3923, 3918, 3921, 3922, 3925, 3926, 3928,
-     3930, 3931, 3932, 3935, 3936, 6947, 6947, 3938, 3939, 3940,
-
-     6947, 3942, 3944, 3954, 3945, 3947, 3955, 3957, 3959, 3958,
-     3960, 3962, 3968, 3969, 6947, 3977, 3970, 3979, 3978, 3974,
-     3988, 3987, 6947, 3980, 3990, 3992, 3995, 3993, 3983, 3996,
-     4001, 3997, 4005, 4006, 4007, 4010, 4018, 4019, 4014, 4016,
-     4017, 6947, 4020, 4022, 4023, 4026, 4027, 4029, 4030, 6947,
-     4035, 4032, 4038, 4041, 4043, 4050, 4042, 4053, 4056, 4057,
-     4058, 4060, 4061, 4062, 4063, 4065, 4073, 4059, 4071, 4070,
-     4068, 4088, 4089, 4076, 6947, 4084, 4091, 4074, 4096, 6947,
-     4098, 4105, 4106, 6947, 4109, 4092, 4108, 4110, 4117, 6947,
-     4112, 4115, 4114, 4120, 4116, 4129, 4125, 4133, 4131, 4132,
-
-     4128, 4134, 4137, 6947, 4138, 4135, 4140, 6947, 4143, 4152,
-     4156, 4158, 4142, 4165, 4160, 4163, 4161, 4164, 6947, 4169,
-     6947, 4172, 4170, 4176, 6947, 4171, 4178, 4179, 4181, 4185,
-     4186, 4187, 4193, 4189, 4195, 4197, 4198, 4199, 4200, 4202,
-     4209, 4201, 4205, 4208, 4210, 6947, 4211, 4213, 4220, 4217,
-     4221, 4225, 4227, 4228, 4230, 4232, 6947, 6947, 4241, 6947,
-     4233, 4238, 4242, 4243, 6947, 4246, 4248, 4250, 4247, 4251,
-     4253, 4256, 4266, 4136, 6947, 4268, 4269, 6947, 4257, 4271,
-     4278, 4273, 4275, 4263, 4276, 4283, 4279, 4260, 4286, 4289,
-     4290, 4291, 4292, 4293, 4300, 6947, 4294, 4297, 4295, 4310,
-
-     4299, 4304, 4312, 4311, 4313, 6947, 4321, 4323, 4322, 4327,
-     4328, 6947, 4329, 6947, 4330, 4334, 4337, 4339, 4331, 4342,
-     6947, 4344, 4345, 4352, 4347, 4353, 4354, 4355, 4357, 4361,
-     4363, 4364, 4371, 4367, 4369, 4366, 4376, 4377, 6947, 4368,
-     4374, 4390, 4391, 4383, 4380, 4386, 4399, 4396, 4398, 4397,
-     4402, 4404, 4405, 4407, 4411, 4413, 4409, 4416, 6947, 4419,
-     4420, 4424, 4421, 4431, 4427, 4428, 4433, 6947, 4435, 4436,
-     4438, 6947, 4440, 4444, 4446, 4449, 4450, 4451, 4452, 4456,
-     4454, 4457, 4458, 4460, 6947, 4462, 4463, 4461, 4477, 4478,
-     4467, 6947, 6947, 4480, 6947, 4484, 4466, 4485, 4487, 4488,
-
-     4492, 4494, 4495, 4497, 4491, 4498, 4502, 4503, 4507, 6947,
-     4510, 4518, 4511, 4522, 4525, 4530, 4523, 4527, 4514, 6947,
-     6947, 4532, 4536, 4538, 4540, 4541, 4543, 4528, 4550, 4548,
-     4556, 4559, 4549, 4566, 6947, 4561, 4552, 4563, 4564, 6947,
-     4545, 4568, 4569, 4571, 4574, 4575, 4578, 4576, 4577, 4580,
-     4588, 4581, 4583, 4590, 4589, 4591, 4599, 4597, 4600, 4601,
-     4603, 4607, 6947, 4604, 4608, 4610, 4613, 4617, 4618, 4619,
-     4620, 4622, 4623, 4630, 6947, 4628, 6947, 4626, 4631, 4646,
-     4633, 4636, 4648, 4649, 4650, 4651, 4655, 4657, 4658, 4661,
-     4663, 4667, 4662, 4668, 4671, 4673, 4675, 4679, 4683, 4680,
-
-     6947, 4686, 4676, 4688, 4625, 4690, 4693, 4694, 4698, 4699,
-     4701, 4695, 4702, 4704, 4706, 4709, 4711, 4712, 4714, 4715,
-     6947, 4716, 4719, 4722, 4725, 4726, 4727, 4730, 4735, 4739,
-     4743, 4731, 4733, 4745, 6947, 4737, 4746, 4754, 6947, 4749,
-     4751, 4756, 4757, 4758, 4760, 4761, 4763, 4767, 4770, 6947,
-     4774, 4764, 4771, 4775, 4776, 4777, 4781, 4783, 4786, 4788,
-     4790, 4798, 6947, 4799, 4791, 4800, 4802, 4804, 4806, 4810,
-     4808, 4811, 6947, 4812, 4815, 4821, 4823, 4828, 4830, 4814,
-     4825, 4833, 4834, 4836, 4832, 4842, 4843, 4844, 4845, 4847,
-     4849, 4848, 4865, 4866, 4863, 6947, 4850, 6947, 4851, 4852,
-
-     4868, 4878, 4873, 4875, 4876, 4880, 4879, 6947, 4881, 4886,
-     4888, 4883, 4891, 6947, 4892, 4889, 4893, 4894, 6947, 4907,
-     4890, 4896, 4903, 4912, 4913, 6947, 4918, 4919, 4920, 4927,
-     4929, 4924, 4931, 4926, 4934, 4932, 4928, 4936, 4937, 4945,
-     4943, 4941, 6947, 4947, 4949, 4954, 4956, 4950, 4958, 4948,
-     4960, 4963, 4965, 6947, 4966, 4969, 4970, 4972, 4973, 4975,
-     4974, 4976, 4983, 4980, 4984, 4982, 4988, 4991, 4993, 4995,
-     4997, 6947, 4999, 5001, 5003, 5012, 5005, 5002, 6947, 5009,
-     6947, 5014, 5019, 5021, 5022, 5015, 5026, 6947, 6947, 5029,
-     5036, 5023, 5032, 5034, 6947, 6947, 5038, 6947, 5039, 6947,
-
-     5040, 5042, 6947, 6947, 5044, 5045, 5046, 5047, 5048, 5051,
-     6947, 5056, 6947, 5065, 5060, 5061, 5063, 5064, 5068, 6947,
-     5066, 5069, 5070, 5075, 5077, 6947, 5074, 5078, 5094, 5081,
-     5089, 6947, 5091, 5092, 5093, 5096, 6947, 5097, 5101, 5102,
-     5103, 5106, 5105, 5108, 5109, 5110, 5116, 5117, 5120, 5119,
-     5122, 5123, 5127, 5132, 5134, 5136, 5137, 5138, 5140, 5143,
-     5146, 5150, 5141, 5148, 5152, 5154, 5155, 5157, 5159, 5160,
-     5162, 5166, 5167, 5163, 5170, 5169, 5171, 5180, 5172, 5182,
-     5184, 5186, 5188, 5189, 5190, 5193, 5194, 5197, 5198, 5199,
-     5196, 5203, 5200, 5207, 5212, 6947, 5205, 5213, 5214, 5216,
-
-     5217, 5221, 5224, 5233, 5239, 5240, 6947, 5242, 6947, 5244,
-     5228, 5225, 5230, 5247, 6947, 5234, 5248, 5250, 5251, 5252,
-     5253, 5255, 5256, 5259, 5260, 5263, 6947, 5268, 5265, 5258,
-     5274, 5270, 6947, 5275, 5282, 5285, 5286, 5287, 5288, 5291,
-     5289, 5290, 5293, 5292, 5294, 5297, 5299, 5300, 5310, 5312,
-     6947, 5314, 5316, 5323, 5319, 5321, 5322, 5324, 5325, 5326,
-     5329, 5327, 5334, 5331, 5343, 5348, 5345, 6947, 5332, 6947,
-     5349, 5335, 5352, 5353, 5355, 5356, 5357, 5359, 6947, 6947,
-     5362, 5363, 5365, 5367, 5369, 5370, 5372, 5374, 5375, 5376,
-     6947, 5379, 5383, 5387, 5393, 5386, 6947, 5395, 5396, 5397,
-
-     5401, 6947, 5402, 5398, 5404, 5405, 5412, 5403, 5419, 5415,
-     5421, 5409, 5423, 5413, 5427, 6947, 6947, 6947, 6947, 5428,
-     5424, 5432, 5434, 5436, 5437, 5439, 5442, 5443, 5441, 5438,
-     5444, 6947, 5454, 6947, 6947, 5455, 5456, 5457, 5462, 5464,
-     5463, 5465, 5468, 6947, 5466, 6947, 5470, 5473, 5469, 5480,
-     5486, 5483, 5477, 5490, 5487, 5492, 5491, 5493, 5501, 5498,
-     5499, 5502, 5505, 5507, 5513, 6947, 6947, 5508, 5515, 5516,
-     5524, 5520, 5522, 5526, 5534, 5529, 5530, 5532, 5531, 5536,
-     5537, 5545, 5548, 5538, 5547, 6947, 5549, 5550, 5551, 6947,
-     5552, 6947, 5557, 5560, 5561, 5553, 5563, 5568, 5569, 5572,
-
-     5570, 5575, 6947, 6947, 5567, 5587, 5582, 6947, 6947, 5574,
-     5583, 5586, 5590, 5584, 5592, 5595, 5594, 5597, 5599, 5596,
-     6947, 5601, 6947, 5600, 5602, 5608, 5610, 5619, 5623, 5614,
-     5624, 5622, 5625, 5626, 5629, 6947, 5627, 5628, 6947, 5637,
-     5639, 5640, 5638, 5646, 5643, 6947, 5647, 5649, 5654, 5656,
-     6947, 5660, 5657, 5663, 5662, 6947, 5665, 6947, 5630, 5669,
-     5666, 5676, 5672, 6947, 5673, 5679, 6947, 5682, 5686, 5688,
-     5689, 5677, 5683, 6947, 5695, 5691, 6947, 5697, 5699, 5700,
-     5703, 5704, 5706, 5707, 5708, 5710, 5718, 5714, 5711, 6947,
-     6947, 5722, 5723,  135, 5731, 5721, 5727, 5729, 5732, 5739,
-
-     5734, 5736, 5742, 6947, 6947, 5743, 6947, 5737, 5750, 6947,
-     5735, 5751, 5755, 5746, 5752, 5758, 5761, 5765, 5767, 5768,
-     5769, 5770, 5771, 5775, 5792, 5794, 5777, 5774, 5797, 5799,
-     5801, 5803, 5805, 5762, 5807, 5789, 5785, 5808, 5810, 5795,
-     5813, 5816, 5817, 5819, 6947, 5821, 5824, 5826, 5827, 5828,
-     6947, 5831, 5834, 5836, 5838, 6947, 5845, 5840, 5842, 5847,
-     5848, 6947, 5832, 5853, 5855, 5858, 5859, 5860, 5861, 5863,
-     5870, 6947, 5867, 5865, 5871, 6947, 6947, 6947, 5876, 5883,
-     5873, 6947, 5885, 5877, 5886, 5888, 6947, 5890, 5892, 5893,
-     6947, 6947, 6947, 5894, 5895, 5898, 6947, 5896, 5903, 6947,
-
-     5902, 6947, 5899, 6947, 5904, 5908, 5917, 5912, 6947, 5910,
-     5922, 5923, 5924, 6947, 5927, 5930, 5932, 5933, 5934, 5936,
-     5938, 6947, 5945, 5941, 5944, 5948, 5940, 5950, 5951, 5952,
-     5953, 5965, 5956, 5961, 6947, 5963, 5964, 5968, 5974, 5966,
-     5976, 5977, 6947, 5970, 6947, 5979, 6947, 5980, 5982, 5983,
-     5984, 5989, 5986, 5987, 5997, 5994, 6000, 6003, 6001, 6007,
-     6008, 6012, 6009, 6947, 6947, 6014, 6015, 6017, 6947, 6018,
-     6947, 6023, 6947, 6019, 6024, 6026, 6027, 6032, 6947, 6947,
-     6030, 6033, 6036, 6044, 6041, 6042, 6947, 6046, 6048, 6049,
-     6051, 6947, 6058, 6947, 6054, 6063, 6055, 6947, 6056, 6066,
-
-     6070, 6067, 6059, 6072, 6073, 6076, 6075, 6083, 6080, 6081,
-     6086, 6088, 6089, 6094, 6098, 6102, 6947, 6947, 6947, 6096,
-     6090, 6111, 6113, 6114, 6115, 6100, 6947, 6116, 6120, 6122,
-     6107, 6129, 6124, 6131, 6947, 6125, 6128, 6132, 6134, 6136,
-     6133, 6138, 6139, 6947, 6144, 6150, 6156, 6140, 6151, 6153,
-     6160, 6162, 6164, 6167, 6168, 6169, 6176, 6172, 6947, 6174,
-     6947, 6179, 6947, 6171, 6947, 6175, 6180, 6182, 6183, 6184,
-     6947, 6187, 6188, 6189, 6192, 6191, 6194, 6199, 6210, 6947,
-     6200, 6213, 6196, 6193, 6215, 6947, 6947, 6204, 6222, 6947,
-     6224, 6226, 6219, 6234, 6217, 6227, 6237, 6238, 6947, 6240,
-
-     6241, 6230, 6232, 6242, 6239, 6248, 6947, 6245, 6249, 6255,
-     6256, 6947, 6259, 6257, 6261, 6260, 6258, 6947, 6262, 6264,
-     6271, 6269, 6947, 6266, 6280, 6272, 6947, 6947, 6947, 6288,
-     6290, 6291, 6947, 6947, 6947, 6947, 6293, 6294, 6282, 6297,
-     6947, 6947, 6303, 6307, 6311, 6313, 6317, 6306, 6947, 6316,
-     6318, 6320, 6322, 6323, 6947, 6947, 6324, 6326, 6328, 6329,
-     6331, 6332, 6947, 6947, 6333, 6335, 6339, 6336, 6338, 6947,
-     6341, 6344, 6351, 6347, 6354, 6361, 6363, 6357, 6364, 6365,
-     6376, 6373, 6366, 6368, 6371, 6379, 6380, 6378, 6382, 6393,
-     6388, 6390, 6396, 6386, 6398, 6947, 6947, 6400, 6947, 6405,
-
-     6402, 6947, 6947, 6407, 6409, 6413, 6415, 6947, 6417, 6419,
-     6421, 6423, 6410, 6947, 6424, 6426, 6428, 6429, 6430, 6431,
-     6947, 6435, 6437, 6440, 6432, 6441, 6443, 6444, 6449, 6947,
-     6446, 6453, 6947, 6947, 6450, 6457, 6458, 6462, 6459, 6947,
-     6464, 6471, 6466, 6469, 6470, 6472, 6475, 6947, 6473, 6476,
-     6947, 6947, 6478, 6481, 6947, 6947, 6483, 6947, 6947, 6947,
-     6947, 6947, 6947, 6947, 6947, 6487, 6494, 6947, 6947, 6486,
-     6501, 6503, 6947, 6505, 6947, 6488, 6498, 6506, 6493, 6947,
-     6508, 6947, 6495, 6512, 6514, 6298, 6515, 6516, 6520, 6521,
-     6524, 6525, 6526, 6528, 6527, 6532, 6529, 6531, 6545, 6538,
-
-     6535, 6548, 6947, 6947, 6947, 6546, 6539, 6557, 6549, 6562,
-     6563, 6566, 6568, 6554, 6569, 6571, 6570, 6572, 6576, 6578,
-     6585, 6580, 6583, 6581, 6588, 6582, 6591, 6947, 6597, 6584,
-     6592, 6604, 6947, 6598, 6947, 6600, 6947, 6947, 6606, 6607,
-     6609, 6610, 6620, 6621, 6612, 6619, 6616, 6622, 6624, 6947,
-     6631, 6947, 6947, 6625, 6628, 6947, 6633, 6634, 6947, 6636,
-     6637, 6639, 6640, 6641, 6643, 6644, 6645, 6652, 6947, 6947,
-     6655, 6659, 6657, 6661, 6663, 6670, 6665, 6667, 6669, 6673,
-     6671, 6685, 6947, 6681, 6682, 6684, 6947, 6688, 6686, 6689,
-     6691, 6693, 6700, 6695, 6698, 6947, 6701, 6947, 6704, 6697,
-
-     6708, 6699, 6707, 6715, 6716, 6719, 6720, 6947, 6721, 6722,
-     6725, 6729, 6731, 6734, 6735, 6727, 6737, 6738, 6748, 6741,
-     6745, 6749, 6751, 6753, 6754, 6947, 6760, 6755, 6947, 6757,
-     6761, 6763, 6764, 6767, 6947, 6772, 6765, 6769, 6775, 6778,
-     6779, 6947, 6781, 6790, 6785, 6947, 6791, 6947, 6947, 6793,
-     6787, 6794, 6800, 6802, 6947, 6947, 6947, 6827, 6834, 6841,
-     6848, 6855, 6862, 6869,   88, 6876, 6883, 6890, 6897, 6904,
-     6911, 6918, 6925, 6932, 6939
+      470,  234,  463,  473,  481,  479,  476,  483,  486,  493,
+
+      488,  489,  495,  491,  501,  508,  505,  506,  504,  510,
+      512,  513,  460,  514,  517,  529,  518,  516,  526,  538,
+      539,  550,  543,  534,  551,  552,  400,  559,  555,  563,
+      558,  570,  565,  574,  566,  569,  571,  576,  573,  577,
+      580,  578,  581,  584,  587,  588,  598,  589,  596,  600,
+      601,  611,  602,  612,  607,  610,  362,  609,  541,  619,
+      622,  617,  624,  625,  626,  629,  632,  639,  641,  642,
+      643,  645,  634,  648,  647,  638,  649,  651,  659,  662,
+      660,  663,  670,  669,  671,  672,  673,  675,  652,  682,
+      678,  686,  679,  692,  691,  693,  695,  697,  699,  698,
+
+      700,  702,  703,  705, 7005,  716,  706,  721,  717,  728,
+      723,  707,  725,  732,  735,  718,  731,  734,  733,  736,
+      739,  740,  741,  743,  747,  750,  748,  753,  752,  763,
+      767,  759,  774,  760,  761,  772,  782,  775,  768,  776,
+      795,  790,  796,  802,  804,  805,  807,  808,  806,  809,
+      811,  812,  813,  827,  816,  829,  823,  819,  830,  832,
+      839,  840, 7005,  836,  837,  851,  844,  853,  857,  854,
+      863,  846,  869,  867,  872,  873,  885,  907,  875,  880,
+      874,  876,  890, 7005,  893,  897,  931,  877,  900,  919,
+      914,  881,  905,  917,  916,  921,  935,  915,  922,  937,
+
+      954,  952,  936,  939,  938,  955,  949,  967,  962,  965,
+      887,  966,  974,  969,  970,  971,  981,  972,  973,  977,
+      982,  988,  995,  999,  983, 1003,  997,  991, 1005, 1008,
+     1009, 1004, 1006, 1029, 1017, 1012, 1025, 1031, 1023, 1039,
+     1016, 1038, 1036, 1045, 1049, 1041, 1051, 1053, 1056, 1057,
+     1058, 1059, 1069, 1064, 1065, 1067, 1070, 1072, 1073, 1078,
+     1076, 1079, 1081, 1083, 1084, 1087, 1092, 1094, 1098, 1085,
+     1099, 1101, 7005, 1107, 7005, 1105, 1102, 1109, 1111, 1112,
+     1113, 1114, 1115, 7005, 1117, 1121, 1116, 1124, 1125, 1122,
+     1146, 1142, 1129, 1141, 1145, 1144, 1150, 1151, 1159, 1154,
+
+     1161, 1162, 1155, 1163, 1157, 1166, 1128, 1167, 1170, 1171,
+     1173, 1175, 1177, 1195, 7005, 1178, 1181, 1182, 1184, 1186,
+     1199, 1191, 1206, 1208, 1212, 1218, 1200, 1183, 1226, 1222,
+     1224, 1225, 1229, 1230, 1232, 1234, 1235, 1238, 1239, 1241,
+     1244, 1242, 1246, 1249, 1248, 1247, 1255, 1258, 7005, 1260,
+     1263, 1271, 1278, 1262, 1265, 1273, 1276, 1279, 1277, 1281,
+     1283, 1282, 1286, 1289, 1288, 1299, 1291, 1304, 1300, 1302,
+     1301, 1306, 1308, 1311, 1307, 1309, 1328, 1317, 1319, 1332,
+     1335, 1334, 1337, 1344, 1346, 1324, 1320, 1339, 1347, 1343,
+     1349, 1352, 1353, 1354, 1355, 1357, 1358, 1367, 1363, 1365,
+
+     1364, 1366, 1370, 1372, 1374, 1375, 1380, 1379, 1377, 1381,
+     1392, 1390, 1388, 1397, 1394, 1403, 1399, 1391, 1406, 1410,
+     1413, 1414, 7005, 1422, 1419, 1418, 1420, 1425, 1423, 1431,
+     1432, 1433, 1434, 1437, 1435, 1438, 1443, 1444, 1445, 1439,
+     1447, 1452, 1454, 1455, 1456, 1465, 1472, 1471, 1473, 1457,
+     1467, 1476, 1477, 1479, 1486, 1483, 1491, 1484, 1489, 1492,
+     1500, 1493, 1495, 1496, 1509, 1502, 1504, 1505, 1507, 1511,
+     1517, 1518, 1519, 1526, 1523, 1528, 1540, 1529, 1531, 1536,
+     1532, 1542, 1541, 1545, 1546, 1547, 1548, 1555, 1550, 1552,
+     1557, 1558, 1553, 1560, 1562, 1567, 1575, 1570, 1577, 1576,
+
+     1578, 1580, 1581, 1583, 1584, 1589, 1585, 1592, 1593, 1594,
+     1599, 1595, 1606, 1614, 1608, 1596, 1616, 1617, 1619, 1620,
+     1621, 1625, 1623, 1628, 1632, 1626, 1629, 1637, 1635, 1641,
+     1643, 1644, 1645, 1586, 1655, 1646, 1656, 1657, 1660, 1662,
+     1663, 1665, 1647, 1667, 1672, 1670, 1675, 1676, 7005, 1664,
+     1688, 1677, 1686, 1684, 1687, 1689, 1698, 1691, 1693, 1695,
+     1694, 1701, 1722, 7005, 1702, 7005, 7005,  848, 7005, 7005,
+     1705, 1703, 7005, 1704, 1710, 1706, 1720, 1725, 1732, 1737,
+     1728, 1730, 1735, 1723, 1746, 1750, 1745, 1753, 1755, 1756,
+     1759, 1747, 1760, 1761, 1767, 1770, 1772, 1773, 1708, 1783,
+
+     1778, 1788, 1779, 1790, 1791, 1796, 1781, 1797, 1800, 1803,
+     1804, 1793, 1806, 1807, 1809, 1811, 1813, 1808, 1815, 1817,
+     1820, 1821, 1822, 1830, 1826, 1835, 1842, 7005, 1832, 1845,
+     1840, 1849, 1846, 1853, 1852, 1848, 1850, 1857, 1861, 1862,
+     1863, 1864, 1867, 1865, 1866, 1873, 1868, 1875, 1876, 1878,
+     1880, 1883, 1882, 7005, 1888, 1890, 1891, 1893, 1894, 1892,
+     1900, 1896, 1902, 1904, 1906, 1917, 1907, 1908, 1914, 1912,
+     1923, 1918, 1920, 1922, 7005, 1924, 1935, 1928, 1936, 1930,
+     1937, 1939, 1940, 1943, 1944, 1945, 1946, 1947, 1948, 1958,
+     1955, 1954, 1956, 1960, 1961, 1970, 1969, 1971, 1973, 1981,
+
+     1974, 1982, 1983, 1984, 1986, 1987, 1988, 1989, 1991, 1995,
+     1996, 2003, 1998, 2005, 2000, 2001, 2019, 2022, 2020, 2006,
+     2017, 2018, 2009, 2026, 2034, 2038, 2033, 2031, 2035, 2045,
+     2040, 2042, 2043, 2046, 2047, 2058, 2044, 2062, 2053, 2055,
+     2056, 2064, 2067, 7005, 2068, 2070, 7005, 2072, 2071, 2073,
+     2095, 2074, 2078, 2081, 2080, 2083, 2089, 2087, 2099, 2105,
+     2101, 2118, 2088, 2107, 2119, 2109, 2122, 2114, 2120, 2128,
+     2129, 2130, 2131, 2133, 2139, 2136, 2149, 2152, 2148, 2156,
+     2159, 2132, 2155, 2157, 2176, 2158, 2160, 2164, 2161, 2162,
+     2166, 2172, 2167, 2179, 2168, 2169, 2181, 2191, 2189, 2186,
+
+     2192, 2199, 2200, 2201, 2204, 2205, 2206, 7005, 2213, 2208,
+     2212, 2216, 2090, 2220, 2217, 2223, 7005, 2224, 2225, 2227,
+     2235, 2228, 2230, 2236, 2232, 2239, 2238, 2244, 2245, 2246,
+     2251, 2247, 2265, 7005, 2250, 7005, 2248, 2240, 2263, 2261,
+     2267, 2269, 2270, 2271, 2272, 7005, 7005, 2273, 2274, 2288,
+     2290, 2292, 2282, 2279, 2293, 7005, 2295, 2302, 7005, 2299,
+     2304, 2298, 2297, 2305, 2308, 2309, 2310, 2319, 2314, 2324,
+     2315, 2323, 2327, 7005, 2331, 2333, 2316, 2335, 2338, 2329,
+     2339, 2342, 2344, 2346, 7005, 2350, 2351, 2353, 2360, 2362,
+     2355, 2352, 2363, 2368, 2357, 2365, 2371, 2373, 2372, 2380,
+
+     2383, 2387, 2388, 2389, 2392, 2390, 2402, 7005, 2398, 2379,
+     2399, 2406, 2404, 2408, 2401, 2405, 2411, 2412, 2413, 2415,
+     2417, 2422, 2421, 2423, 2424, 2425, 2434, 2435, 2427, 2438,
+     2440, 2431, 2437, 2445, 2446, 2382, 2447, 2449, 2448, 2452,
+     7005, 2453, 2455, 2460, 2456, 2466, 2459,  171, 2462, 2463,
+     2469, 2470, 2473, 2484, 2474, 2486, 2491, 2487, 2488, 2490,
+     2495, 2496, 2497, 2499, 2498, 2489, 2502, 2501, 2505, 7005,
+     2507, 2512, 2514, 2515, 2517, 2518, 2520, 7005, 2527, 2521,
+     2528, 2541, 2535, 2529, 2544, 2537, 2545, 2546, 2548, 2549,
+     2550, 2557, 2554, 2552, 2558, 2560, 7005, 2565, 2567, 2570,
+
+     2561, 2571, 2573, 2574, 2578, 2580, 2582, 2584, 2585, 2590,
+     2586, 2588, 2589, 2591, 2599, 2602, 2612, 2594, 2603, 2604,
+     2611, 2608, 2616, 2615, 2618, 2620, 2625, 2621, 7005, 2630,
+     2622, 2631, 2632, 2629, 2636, 2633, 2639, 2648, 2644, 2646,
+     2653, 2654, 2667, 2656, 2650, 2664, 2661, 2665, 2673, 2677,
+     2674, 2678, 2684, 2681, 2687, 2689, 2691, 2695, 2699, 2696,
+     2697, 2698, 2700, 2701, 2710, 2712, 2715, 2718, 2708, 2716,
+     2723, 2724, 2726, 2742, 2733, 7005, 2731, 2737, 2729, 2741,
+     2749, 2745, 2746, 2751, 2753, 2755, 2757, 2758, 2759, 2766,
+     2761, 2763, 2770, 2765, 2769, 2771, 2772, 2780, 2782, 2783,
+
+     2784, 2791, 2786, 2793, 2707, 7005, 2794, 2798, 2788, 2795,
+     2806, 2796, 2810, 2811, 2813, 2799, 2802, 2814, 2822, 2817,
+     2815, 2824, 2819, 2831, 2828, 2829, 2834, 2826, 7005, 2840,
+     2830, 2841, 2842, 2846, 2848, 2849, 2850, 2856, 2858, 2851,
+     2861, 2862, 2864, 2865, 2868, 7005, 2873, 2875, 2871, 2874,
+     2883, 2878, 2882, 2884, 2886, 2888, 7005, 2889, 2891, 2890,
+     2892, 2893, 2896, 2903, 2904, 2899, 7005, 2912, 2902, 2910,
+     2911, 2914, 2915, 2917, 2920, 2918, 2923, 2924, 2927, 2934,
+     2928, 2936, 7005, 2925, 2946, 2937, 2943, 2939, 2949, 2950,
+     2953, 2954, 2957, 2956, 2960, 7005, 2967, 2969, 2964, 2978,
+
+     2970, 2976, 2979, 2980, 2981, 2982, 2983, 2984, 2988, 2990,
+     7005, 2991, 2994, 2995, 2998, 2992, 3000, 3003, 3014, 3007,
+     3009, 3011, 3006, 3016, 3017, 3015, 3021, 3028, 3024, 3023,
+     3027, 3033, 3036, 3038, 3040, 3039, 3043, 3051, 3052, 3047,
+     3054, 3057, 3058, 3050, 3060, 3062, 3069, 3071, 3074, 3072,
+     3075, 7005, 3078, 3079, 3080, 3070, 3082, 3084, 3085, 3086,
+     3090, 3087, 3095, 3092, 3096, 3099, 3112, 3114, 3101, 3104,
+     3109, 3115, 3116, 3117, 3119, 3120, 3123, 3130, 3126, 3127,
+     3129, 3139, 3132, 3136, 3143, 3135, 3144, 3145, 3146, 3148,
+     3152, 3149, 3153, 3156, 3158, 3150, 3159, 3160, 3174, 3176,
+
+     3177, 3179, 3171, 3180, 3181, 3185, 7005, 3188, 3190, 3186,
+     3192, 3193, 3197, 3198, 3205, 3200, 3207, 3208, 3211, 3210,
+     3213, 3218, 3219, 3221, 3222, 3229, 3225, 7005, 3226, 7005,
+     3227, 3228, 3231, 3240, 3235, 7005, 3246, 7005, 3236, 3250,
+     3241, 3243, 3247, 7005, 3251, 3252, 3256, 3253, 3258, 3260,
+     3264, 3265, 3266, 3267, 3268, 3275, 3270, 3274, 3277, 3281,
+     3280, 3284, 3287, 3289, 3290, 3292, 3291, 3294, 3298, 3299,
+     3300, 3307, 3309, 3310, 3311, 3312, 3313, 7005, 3317, 3320,
+     3314, 3325, 3322, 3324, 3326, 3332, 3333, 3334, 3335, 3339,
+     3337, 3341, 3346, 3349, 3343, 3350, 3353, 3360, 3362, 3354,
+
+     3369, 7005, 3364, 3367, 3368, 3371, 7005, 3375, 3372, 3381,
+     3383, 3376, 3373, 3379, 3385, 3392, 3386, 3389, 3395, 3399,
+     3403, 3406, 3407, 7005, 3400, 3408, 3398, 3416, 3421, 3412,
+     3424, 3428, 3425, 3431, 3433, 3435, 3437, 3414, 3438, 3439,
+     3440, 3441, 3449, 3451, 3452, 3448, 3461, 3447, 3454, 3463,
+     3464, 3450, 3457, 3465, 3466, 3467, 3471, 3473, 3472, 3474,
+     3475, 3476, 3482, 3488, 7005, 3480, 3491, 3483, 3500, 3489,
+     3497, 3498, 3493, 3502, 7005, 3505, 3506, 3510, 3508, 3511,
+     3514, 3516, 3517, 3519, 3522, 3521, 3525, 3533, 3524, 7005,
+     3528, 7005, 3527, 3535, 3547, 3550, 3539, 3544, 3553, 3555,
+
+     3557, 3558, 3559, 3560, 3561, 3565, 3567, 3569, 3568, 3573,
+     3571, 3581, 3589, 3572, 3574, 3586, 3590, 3591, 3576, 3601,
+     3593, 3597, 7005, 7005, 3596, 3602, 3603, 3606, 3607, 3610,
+     3612, 3614, 3619, 3617, 3618, 3625, 3634, 7005, 3630, 3631,
+     3629, 3632, 3636, 3647, 3638, 3649, 3658, 3640, 3653, 3660,
+     3655, 7005, 3642, 3657, 3665, 3663, 3666, 3670, 7005, 3672,
+     7005, 3668, 3673, 3674, 3677, 3678, 3679, 3681, 3682, 3684,
+     3686, 3689, 3696, 3704, 3705, 3706, 3701, 3708, 3690, 3702,
+     3711, 3713, 3715, 3722, 3718, 3719, 3721, 7005, 3724, 3725,
+     3727, 3729, 3726, 3732, 3733, 3741, 3736, 7005, 3742, 3743,
+
+     3744, 3748, 3749, 3755, 3751, 3756, 3757, 3762, 3758, 3766,
+     3763, 3765, 7005, 3767, 3769, 3780, 3771, 3778, 3779, 3782,
+     3784, 3791, 7005, 3788, 3792, 3800, 3798, 3795, 3802, 3803,
+     3799, 3805, 3808, 3810, 3809, 3811, 3812, 3813, 3815, 3817,
+     3820, 3818, 3831, 3832, 3824, 3834, 3841, 3823, 7005, 3840,
+     3845, 3846, 3847, 3848, 3849, 3853, 3854, 3858, 3860, 3850,
+     3862, 3871, 3852, 3866, 3874, 3876, 3877, 3884, 3879, 7005,
+     3886, 3883, 3891, 3888, 3889, 3894, 3899, 3890, 3900, 3903,
+     3892, 3896, 3904, 3906, 3912, 3915, 3922, 3918, 3908, 3921,
+     3923, 3925, 3924, 7005, 3935, 3926, 3927, 3936, 3941, 3933,
+
+     3951, 3946, 3947, 3949, 3954, 3950, 3956, 3958, 3959, 3960,
+     3963, 3964, 7005, 7005, 3966, 3968, 3971, 7005, 3973, 3969,
+     3983, 3972, 3975, 3979, 3986, 3985, 3987, 3989, 3994, 3991,
+     3997, 7005, 4004, 4002, 4005, 4003, 4009, 4012, 4008, 7005,
+     4011, 4020, 4019, 4021, 4022, 4024, 4027, 4025, 4029, 4032,
+     4033, 4034, 4036, 4045, 4048, 4038, 4040, 4043, 7005, 4049,
+     4050, 4052, 4054, 4056, 4059, 4061, 7005, 4062, 4064, 4065,
+     4067, 4070, 4075, 4082, 4077, 4084, 4071, 4085, 4087, 4089,
+     4090, 4091, 4095, 4102, 4098, 4097, 4100, 4101, 4104, 4107,
+     4109, 7005, 4117, 4118, 4119, 4120, 4122, 7005, 4124, 4133,
+
+     4136, 7005, 4137, 4128, 4135, 4138, 4147, 7005, 4143, 4142,
+     4144, 4148, 4145, 4157, 4152, 4159, 4161, 4158, 4162, 4163,
+     4164, 7005, 4166, 4165, 4167, 7005, 4180, 4185, 4188, 4190,
+     4171, 4175, 4173, 4192, 4193, 4194, 7005, 4195, 7005, 4198,
+     4196, 4204, 7005, 4202, 4206, 4207, 4210, 4211, 4216, 4217,
+     4223, 4225, 4213, 4219, 4227, 4215, 4231, 4232, 4236, 4229,
+     4239, 4238, 4240, 7005, 4241, 4243, 4246, 4249, 4244, 4250,
+     4257, 4259, 4252, 4260, 4262, 7005, 7005, 4268, 7005, 4269,
+     4263, 4270, 4274, 7005, 4276, 4278, 4283, 4280, 4281, 4285,
+     4284, 4289, 4293, 7005, 4295, 4298, 7005, 4296, 4300, 4309,
+
+     4304, 4305, 4307, 4308, 4310, 4313, 4314, 4315, 4320, 4316,
+     4321, 4317, 4323, 4334, 7005, 4324, 4325, 4330, 4346, 4337,
+     4339, 4347, 4349, 4341, 7005, 4351, 4358, 4352, 4357, 4364,
+     7005, 4363, 7005, 4365, 4366, 4367, 4374, 4368, 4384, 7005,
+     4380, 4377, 4386, 4369, 4388, 4390, 4389, 4396, 4381, 4397,
+     4398, 4406, 4402, 4403, 4405, 4410, 4411, 7005, 4408, 4412,
+     4414, 4420, 4422, 4423, 4424, 4431, 4429, 4428, 4432, 4435,
+     4437, 4440, 4441, 4445, 4439, 4449, 4447, 7005, 4453, 4455,
+     4456, 4459, 4469, 4460, 4461, 4462, 7005, 4466, 4471, 4477,
+     7005, 4473, 4475, 4479, 4484, 4481, 4485, 4487, 4490, 4489,
+
+     4493, 4494, 4491, 7005, 4492, 4498, 4497, 4508, 4511, 4512,
+     4500, 7005, 7005, 4519, 7005, 4520, 4501, 4515, 4522, 4502,
+     4523, 4529, 4533, 4535, 4531, 4536, 4537, 4539, 4543, 7005,
+     4545, 4552, 4547, 4554, 4557, 4565, 4558, 4560, 4550, 7005,
+     7005, 4563, 4566, 4571, 4573, 4574, 4576, 4577, 4584, 4582,
+     4585, 4590, 4591, 4599, 7005, 4579, 4594, 4597, 4598, 7005,
+     4600, 4602, 4603, 4604, 4605, 4606, 4611, 4608, 4612, 4609,
+     4616, 4629, 4620, 4632, 4621, 4622, 4623, 4630, 4634, 4638,
+     4636, 4640, 4645, 7005, 4646, 4647, 4650, 4651, 4652, 4655,
+     4657, 4656, 4659, 4660, 4667, 7005, 4663, 7005, 4672, 4668,
+
+     4674, 4662, 4673, 4684, 4686, 4687, 4688, 4689, 4692, 4694,
+     4697, 4698, 4707, 4699, 4702, 4708, 4710, 4704, 4718, 4720,
+     4721, 7005, 4722, 4712, 4723, 4724, 4729, 4731, 4725, 4734,
+     4735, 4738, 4739, 4740, 4742, 4747, 4748, 4749, 4750, 4751,
+     4752, 7005, 4755, 4757, 4759, 4764, 4761, 4768, 4766, 4774,
+     4769, 4776, 4780, 4781, 4782, 7005, 4783, 4786, 4788, 7005,
+     4789, 4791, 4790, 4792, 4793, 4795, 4800, 4803, 4801, 4802,
+     7005, 4811, 4804, 4814, 4812, 4815, 4818, 4820, 4822, 4827,
+     4823, 4829, 4834, 7005, 4844, 4830, 4840, 4841, 4825, 4843,
+     4839, 4853, 4847, 7005, 4857, 4859, 4861, 4855, 4869, 4871,
+
+     4851, 4867, 4874, 4875, 4876, 4877, 4878, 4883, 4879, 4884,
+     4885, 4887, 4888, 4889, 4898, 4901, 4900, 7005, 4890, 7005,
+     4905, 4906, 4907, 4917, 4912, 4909, 4919, 4922, 4914, 7005,
+     4916, 4923, 4929, 4926, 4924, 7005, 4930, 4931, 4935, 4937,
+     7005, 4940, 4946, 4938, 4944, 4953, 4954, 7005, 4960, 4945,
+     4957, 4967, 4969, 4964, 4966, 4968, 4970, 4972, 4974, 4975,
+     4976, 4985, 4978, 4981, 7005, 4983, 4990, 4996, 4997, 4998,
+     4980, 4991, 4999, 5001, 5007, 5004, 7005, 5008, 5009, 5010,
+     5011, 5012, 5014, 5015, 5016, 5028, 5027, 5023, 5020, 5025,
+     5032, 5034, 5036, 5041, 7005, 5037, 5042, 5043, 5052, 5045,
+
+     5054, 7005, 5050, 7005, 5047, 5062, 5064, 5065, 5055, 5069,
+     7005, 7005, 5071, 5066, 5072, 5074, 5076, 7005, 7005, 5078,
+     7005, 5079, 7005, 5080, 5082, 7005, 7005, 5083, 5086, 5087,
+     5090, 5091, 5093, 7005, 5100, 7005, 5107, 5089, 5102, 5104,
+     5105, 5106, 7005, 5110, 5113, 5114, 5118, 5122, 7005, 5115,
+     5117, 5125, 5128, 5132, 7005, 5134, 5135, 5131, 5136, 7005,
+     5139, 5142, 5143, 5137, 5144, 5145, 5151, 5157, 5149, 5152,
+     5160, 5162, 5161, 5164, 5165, 5169, 5174, 5176, 5178, 5171,
+     5179, 5180, 5186, 5188, 5190, 5182, 5192, 5193, 5195, 5196,
+     5198, 5200, 5201, 5203, 5207, 5208, 5210, 5204, 5211, 5213,
+
+     5221, 5222, 5223, 5224, 5229, 5226, 5231, 5232, 5233, 5234,
+     5236, 5237, 5239, 5238, 5242, 5245, 5248, 5249, 5250, 7005,
+     5252, 5255, 5256, 5259, 5266, 5263, 5267, 5274, 5276, 5281,
+     7005, 5283, 7005, 5285, 5269, 5278, 5271, 5288, 7005, 5291,
+     5292, 5293, 5294, 5295, 5296, 5297, 5298, 5301, 5302, 5305,
+     7005, 5308, 5322, 5309, 5307, 5317, 5325, 7005, 5327, 5331,
+     5328, 5332, 5333, 5334, 5337, 5335, 5338, 5339, 5340, 5342,
+     5344, 5348, 5345, 5354, 5357, 7005, 5361, 5367, 5364, 5362,
+     5368, 5369, 5370, 5371, 5373, 5374, 5375, 5377, 5379, 5387,
+     5389, 5397, 7005, 5390, 7005, 5392, 5394, 5398, 5399, 5400,
+
+     5402, 5403, 5406, 7005, 7005, 5404, 5408, 5411, 5416, 5412,
+     5417, 5421, 5418, 5422, 5428, 7005, 5430, 5433, 5434, 5441,
+     5300, 7005, 5431, 5436, 5442, 5444, 7005, 5447, 5448, 5449,
+     5450, 5455, 5452, 5461, 5458, 5464, 5465, 5466, 5467, 5469,
+     7005, 7005, 7005, 7005, 5474, 5470, 5477, 5472, 5480, 5482,
+     5479, 5489, 5490, 5484, 5486, 5494, 7005, 5497, 7005, 7005,
+     5500, 7005, 5502, 5501, 5503, 5504, 5491, 5511, 5513, 7005,
+     5514, 7005, 5517, 5518, 5516, 5525, 5527, 5528, 5519, 5535,
+     5530, 5536, 5532, 5539, 5546, 5542, 5543, 5545, 5548, 5552,
+     5555, 7005, 7005, 5549, 5559, 5561, 5569, 5565, 5566, 5567,
+
+     5578, 5573, 5574, 5575, 5576, 5580, 5582, 5589, 5592, 5585,
+     5587, 5594, 7005, 5595, 5596, 5597, 7005, 5598, 7005, 5604,
+     5606, 5607, 5605, 5608, 5613, 5615, 5616, 5618, 5614, 7005,
+     7005, 5620, 5631, 5626, 7005, 7005, 5628, 5629, 5633, 5635,
+     5630, 5636, 5639, 5641, 5642, 5644, 5640, 7005, 5645, 7005,
+     5646, 5650, 5662, 5651, 5664, 5669, 5653, 5673, 5675, 5670,
+     5665, 5672, 7005, 5679, 5668, 7005, 5686, 5682, 5683, 5684,
+     5692, 5689, 7005, 5693, 5695, 5697, 5700, 7005, 5702, 5703,
+     5705, 5706, 7005, 5709, 7005, 5711, 5712, 5714, 5722, 5718,
+     7005, 5719, 5723, 7005, 5728, 5733, 5735, 5737, 5725, 5729,
+
+     7005, 5744, 5736, 7005, 5741, 5746, 5747, 5750, 5751, 5753,
+     5755, 5756, 5757, 5764, 5760, 5763, 7005, 7005, 5775, 5765,
+      135, 5778, 5762, 5773, 5776, 5780, 5787, 5779, 5784, 5783,
+     7005, 7005, 5789, 7005, 5790, 5792, 7005, 5791, 5797, 5801,
+     5803, 5805, 5799, 5806, 5808, 5812, 5809, 5824, 5814, 5813,
+     5807, 7005, 5831, 5839, 5818, 5841, 5842, 5844, 5846, 5848,
+     5850, 5836, 5829, 5853, 5854, 5855, 5856, 5857, 5858, 5859,
+     5862, 5864, 7005, 5866, 5871, 5872, 5877, 5860, 7005, 5886,
+     5867, 5888, 5889, 7005, 5891, 5892, 5893, 5895, 5896, 7005,
+     5879, 5899, 5907, 5908, 5900, 5903, 5910, 5911, 5919, 7005,
+
+     5914, 5915, 5916, 7005, 7005, 7005, 5923, 5930, 5917, 7005,
+     5933, 5925, 5934, 5935, 7005, 5937, 5938, 5940, 7005, 7005,
+     7005, 5941, 5943, 5942, 7005, 5944, 5955, 7005, 5945, 7005,
+     5946, 7005, 5956, 5958, 5968, 5962, 7005, 5960, 5970, 5972,
+     5973, 7005, 5976, 5979, 5981, 5982, 5984, 5987, 5985, 7005,
+     5994, 5992, 5993, 5996, 5989, 5999, 6000, 6003, 6001, 6015,
+     6002, 6013, 7005, 5950, 6005, 6017, 6023, 6014, 6016, 6020,
+     7005, 6018, 7005, 6026, 7005, 6028, 6029, 6030, 6032, 6037,
+     6034, 6039, 6040, 6044, 6045, 6051, 6047, 6053, 6054, 6060,
+     6055, 7005, 7005, 6063, 6061, 6069, 7005, 6064, 7005, 6073,
+
+     7005, 6066, 6070, 6076, 6075, 6078, 7005, 7005, 6088, 6077,
+     6084, 6095, 6079, 6090, 7005, 6098, 6092, 6094, 6101, 7005,
+     6110, 7005, 6096, 6111, 6103, 7005, 6107, 6115, 6118, 6112,
+     6119, 6121, 6122, 6123, 6124, 6131, 6126, 6130, 6128, 6135,
+     6136, 6138, 6143, 6149, 7005, 7005, 7005, 6147, 6137, 6158,
+     6154, 6160, 6161, 6156, 7005, 6162, 6165, 6166, 6168, 6175,
+     6172, 6177, 7005, 6170, 6173, 6178, 6179, 6181, 6183, 6184,
+     6185, 7005, 6196, 6198, 6205, 6188, 6199, 6201, 6208, 6210,
+     6212, 6215, 6216, 6217, 6224, 6220, 7005, 6222, 6219, 7005,
+     6227, 7005, 6223, 7005, 6228, 6230, 6232, 6231, 6233, 7005,
+
+     6237, 6238, 6239, 6240, 6241, 6246, 6245, 6248, 7005, 6249,
+     6262, 6257, 6259, 6260, 7005, 7005, 6263, 6269, 7005, 6271,
+     6274, 6266, 6281, 6273, 6282, 6287, 6283, 7005, 6272, 6289,
+     6291, 6292, 6293, 6295, 6296, 7005, 6297, 6299, 6300, 6301,
+     7005, 6304, 6303, 6306, 6308, 6309, 7005, 6310, 6313, 6331,
+     6327, 7005, 6316, 6334, 6317, 7005, 7005, 7005, 6339, 6341,
+     6342, 7005, 7005, 7005, 7005, 6344, 6345, 6328, 6349, 7005,
+     6351, 7005, 6353, 6357, 6361, 6363, 6367, 6356, 7005, 6368,
+     6326, 6370, 6371, 6372, 7005, 7005, 6374, 6376, 6377, 6378,
+     6380, 6381, 7005, 7005, 6382, 6384, 6388, 6385, 6387, 7005,
+
+     6390, 6393, 6400, 6395, 6405, 6410, 6412, 6403, 6414, 6413,
+     6421, 6423, 6416, 6424, 6426, 6427, 6428, 6429, 6431, 6440,
+     6436, 6438, 6444, 6435, 6446, 7005, 7005, 6453, 7005, 6455,
+     6449, 7005, 6445, 7005, 6457, 6460, 6462, 6465, 7005, 6467,
+     6469, 6471, 6473, 6474, 7005, 6475, 6477, 6479, 6480, 6481,
+     6482, 7005, 6486, 6487, 6491, 6483, 6488, 6492, 6494, 6497,
+     7005, 6499, 6508, 7005, 7005, 6503, 6509, 6505, 6510, 6515,
+     7005, 6513, 6523, 6518, 6519, 6520, 6522, 6525, 7005, 6528,
+     6526, 7005, 7005, 6538, 6529, 7005, 7005, 6527, 6530, 7005,
+     7005, 7005, 7005, 7005, 7005, 7005, 7005, 6543, 6546, 7005,
+
+     7005, 6545, 6537, 6552, 7005, 6555, 7005, 6547, 6556, 6557,
+     6559, 7005, 6560, 7005, 6562, 6564, 6563, 6567, 6566, 6571,
+     6573, 6576, 6578, 6577, 6580, 6582, 6583, 6587, 6584, 6588,
+     6598, 6591, 6601, 6594, 6602, 7005, 7005, 7005, 6590, 6606,
+     6612, 6608, 6616, 6618, 6621, 6623, 6613, 6624, 6625, 6629,
+     6630, 6627, 6631, 6639, 6636, 6637, 6638, 6641, 6642, 6648,
+     6654, 7005, 6656, 6645, 6651, 6658, 7005, 6659, 7005, 6661,
+     7005, 7005, 6664, 6665, 6667, 6668, 6677, 6678, 6669, 6673,
+     6676, 6680, 6682, 7005, 6689, 7005, 7005, 7005, 6684, 6690,
+     7005, 6692, 6693, 7005, 6691, 6694, 6696, 6700, 6701, 6698,
+
+     6702, 6703, 6719, 7005, 7005, 6704, 6709, 6712, 6721, 6723,
+     6722, 6725, 6729, 6730, 6732, 6733, 6742, 7005, 6739, 6740,
+     6744, 7005, 6746, 6741, 6747, 6748, 6749, 6757, 6753, 6756,
+     7005, 6758, 7005, 6762, 6764, 6765, 6755, 6763, 6766, 6777,
+     6775, 6771, 7005, 6781, 6785, 6783, 6787, 6789, 6791, 6792,
+     6793, 6795, 6798, 6804, 6801, 6808, 6809, 6805, 6813, 6810,
+     7005, 6820, 6811, 7005, 6817, 6821, 6814, 6823, 6827, 7005,
+     6832, 6825, 6834, 6835, 6838, 6839, 7005, 6841, 6848, 6843,
+     7005, 6849, 7005, 7005, 6851, 6845, 6852, 6858, 6860, 7005,
+     7005, 7005, 6885, 6892, 6899, 6906, 6913, 6920, 6927,   88,
+
+     6934, 6941, 6948, 6955, 6962, 6969, 6976, 6983, 6990, 6997
     } ;
 
-static yyconst flex_int16_t yy_def[3576] =
+static yyconst flex_int16_t yy_def[3611] =
     {   0,
-     3557,    1, 3558, 3558, 3559, 3559, 3560, 3560, 3561, 3561,
-     3562, 3562, 3563, 3563, 3564, 3564, 3557, 3565, 3557, 3557,
-     3557, 3557, 3566, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3567, 3557, 3557, 3557,
-     3567, 3568, 3557, 3557, 3557, 3568, 3569, 3557, 3557, 3557,
-     3557, 3569, 3570, 3557, 3557, 3557, 3570, 3571, 3557, 3572,
-     3557, 3571, 3571, 3573, 3557, 3557, 3557, 3557, 3573, 3574,
-     3557, 3557, 3557, 3574, 3565, 3565, 3557, 3575, 3566, 3575,
-     3566, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3567,
-     3567, 3568, 3568, 3569, 3569, 3557, 3570, 3570, 3571, 3571,
-     3572, 3572, 3571, 3573, 3573, 3557, 3574, 3574, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3571, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3571, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3571, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3571,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3557,
-     3557, 3565, 3557, 3557, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3571, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3571, 3571, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3571, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3571, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3571, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3565, 3565,
-
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3571, 3565, 3557, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3557, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3557,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3571, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3571, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3557, 3557, 3565, 3557, 3565, 3557,
-
-     3565, 3565, 3557, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3571, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3557, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3557, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3571, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3557,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3557, 3557, 3565, 3565, 3565, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3557, 3565, 3565, 3571, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3565, 3557, 3557, 3565, 3557, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3557, 3557, 3557, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3557, 3557, 3557, 3565, 3565, 3565, 3557, 3565, 3565, 3557,
-
-     3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3557, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3557, 3565, 3565, 3565, 3557, 3565,
-     3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3557, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3557, 3565, 3557, 3565, 3565, 3565, 3557, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3557, 3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3557, 3557, 3557, 3565,
-     3565, 3565, 3557, 3557, 3557, 3557, 3565, 3565, 3565, 3565,
-     3557, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3557, 3557, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3557, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3557, 3565, 3557, 3565,
-
-     3565, 3557, 3557, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565,
-     3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3557, 3557, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3557, 3557, 3565, 3565, 3557, 3557, 3565, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3565, 3565, 3557, 3557, 3565,
-     3565, 3565, 3557, 3565, 3557, 3565, 3565, 3565, 3565, 3557,
-     3565, 3557, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-
-     3565, 3565, 3557, 3557, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3557, 3565, 3557, 3565, 3557, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557,
-     3565, 3557, 3557, 3565, 3565, 3557, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3557,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3557, 3565, 3565, 3565, 3557, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3557, 3565, 3565,
-
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565, 3565,
-     3565, 3565, 3565, 3565, 3565, 3557, 3565, 3565, 3557, 3565,
-     3565, 3565, 3565, 3565, 3557, 3565, 3565, 3565, 3565, 3565,
-     3565, 3557, 3565, 3565, 3565, 3557, 3565, 3557, 3557, 3565,
-     3565, 3565, 3565, 3565, 3557, 3557,    0, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557
+     3592,    1, 3593, 3593, 3594, 3594, 3595, 3595, 3596, 3596,
+     3597, 3597, 3598, 3598, 3599, 3599, 3592, 3600, 3592, 3592,
+     3592, 3592, 3601, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3602, 3592, 3592, 3592,
+     3602, 3603, 3592, 3592, 3592, 3603, 3604, 3592, 3592, 3592,
+     3592, 3604, 3605, 3592, 3592, 3592, 3605, 3606, 3592, 3607,
+     3592, 3606, 3606, 3608, 3592, 3592, 3592, 3592, 3608, 3609,
+     3592, 3592, 3592, 3609, 3600, 3600, 3592, 3610, 3601, 3610,
+     3601, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3602,
+     3602, 3603, 3603, 3604, 3604, 3592, 3605, 3605, 3606, 3606,
+     3607, 3607, 3606, 3608, 3608, 3592, 3609, 3609, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3606, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3592, 3592, 3600, 3592, 3592,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3606, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3606, 3606, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3606, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+
+     3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3592, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3606,
+     3600, 3592, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600, 3592, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3592, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3606, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3606, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600,
+     3592, 3600, 3592, 3600, 3600, 3592, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3606, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3592, 3592, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592, 3592,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3606,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3592, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3592, 3600, 3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3592, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600, 3600,
+     3606, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3592, 3600, 3592, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+
+     3600, 3600, 3600, 3592, 3592, 3592, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3592, 3592,
+     3592, 3600, 3600, 3600, 3592, 3600, 3600, 3592, 3600, 3592,
+     3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3592, 3600, 3600, 3600, 3592, 3600, 3592, 3600,
+
+     3592, 3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3592,
+     3600, 3592, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3592, 3592, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3592,
+     3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3592, 3592, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3592, 3592, 3592, 3600, 3600,
+     3600, 3592, 3592, 3592, 3592, 3600, 3600, 3600, 3600, 3592,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600, 3592,
+
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3592, 3600, 3592, 3600,
+     3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600,
+     3600, 3592, 3592, 3600, 3600, 3592, 3592, 3600, 3600, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3600, 3600, 3592,
+
+     3592, 3600, 3600, 3600, 3592, 3600, 3592, 3600, 3600, 3600,
+     3600, 3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3592, 3592, 3592, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3592, 3600, 3592, 3600,
+     3592, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3592, 3600, 3592, 3592, 3592, 3600, 3600,
+     3592, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600,
+
+     3600, 3600, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600,
+     3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600, 3600,
+     3592, 3600, 3600, 3592, 3600, 3600, 3600, 3600, 3600, 3592,
+     3600, 3600, 3600, 3600, 3600, 3600, 3592, 3600, 3600, 3600,
+     3592, 3600, 3592, 3592, 3600, 3600, 3600, 3600, 3600, 3592,
+     3592,    0, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592
     } ;
 
-static yyconst flex_int16_t yy_nxt[6988] =
+static yyconst flex_int16_t yy_nxt[7046] =
     {   0,
        18,   19,   20,   21,   22,   23,   22,   18,   18,   18,
        18,   18,   22,   24,   25,   26,   27,   28,   29,   30,
@@ -1637,748 +1650,755 @@ static yyconst flex_int16_t yy_nxt[6988] =
       153,  181,  196,  189,  154,  155,  164,   86,  164,  164,
        90,  164,   90,   90,  169,   90,  169,  169,  174,  169,
       174,  174,  172,  174,   85,   86,   85,   85,   90,   85,
-       90,   90,  289,   90,   86,   85,   86,  182,   86,   90,
+       90,   90,  290,   90,   86,   85,   86,  182,   86,   90,
        91,  185,  190,  188,   86,   86,  197,   86,  191,   86,
-      192,   86,   86,  207,  186,   86,   86,   86,   86,   86,
-
-      178,  199,  193,  194,   86,  198,   86,  195,   86,  200,
-       86,  201,  245,  209,  205,  202,  203,  206,  208,   86,
-      210,  215,  211,  204,   86,  212,   86,   86,   86,  217,
-       86,  218,   86,  220,   86,   86,  226,  221,  213,  214,
-       86,  227,  225,  223,   86,   86,  216,  229,  224,   86,
-       86,  219,   86,  222,  230,  232,  233,  228,   86,   86,
-       86,   86,  231,  235,   86,  237,   86,  240,  234,  238,
-       86,   86,   86,   86,  242,   86,  236,  371,   86,   86,
-       86,  239,   86,  243,  241,  248,  251,  252,   86,  244,
-      253,  247,   86,   86,   86,  254,  249,  246,  260,  257,
-
-      250,  261,   86,   86,  259,  263,   86,   86,   86,   86,
-      258,  267,  255,   86,  264,  256,   86,   86,  262,  266,
-      268,  270,  160,  160,   86,  162,  265,  269,  162,  273,
-      164,  271,  164,  164,  337,  164,  167,  167,  169,   86,
-      169,  169,   90,  169,   90,   90,  170,   90,  174,  272,
-      174,  174,  274,  174,  172,  177,  177,  276,   86,   86,
-       86,   86,   86,   86,   86,   86,   86,  275,  278,   86,
-      281,  284,  280,   86,  277,  279,   86,  287,  286,  283,
-      176,  290,  282,   86,  288,  285,   86,  291,  292,   86,
-      293,  317,   86,  296,   86,  294,   86,  301,  297,   86,
-
-       86,   86,   86,  298,   86,   86,  304,  305,  308,  299,
-      300,  302,  295,   86,   86,   86,  306,  310,   86,  303,
-      311,   86,   86,   86,   86,  307,   86,  318,   86,   86,
-       86,  319,   86,  325,  312,  313,  315,  309,  314,  316,
-       86,  320,   86,  329,  321,  328,  322,  330,  327,  326,
-      332,   86,   86,   86,  741,  334,   86,  338,  323,  331,
-      324,   86,  335,   86,   86,  340,   86,  342,   86,  339,
-      341,   86,  333,   86,   86,   86,  343,  336,  345,   86,
-       86,  344,   86,   86,   86,  347,   86,   86,  346,  349,
-       86,   86,  354,   86,  352,  350,   86,   86,   86,   86,
-
-      348,  365,  355,  353,  351,  359,  356,   86,   86,   86,
-      360,   86,  357,  361,   86,   86,  362,  358,  363,  368,
-       86,  364,   86,   86,   86,   86,  374,  366,  367,  370,
-      373,  375,   86,   86,  377,  369,   86,   86,  382,  372,
-       86,  376,   86,  380,   86,  378,  381,   86,  384,   86,
-      379,  385,   86,   86,   86,  170,   86,   86,  388,   86,
-       86,   86,  383,  395,  391,  393,  396,  389,  386,   86,
-       86,   86,   86,   86,  399,  387,  390,   86,  397,  392,
-       86,   86,  398,   86,  394,  400,   86,   86,   86,  402,
-      406,  407,   86,  409,  404,  401,   86,  403,   86,  410,
-
-      408,   86,   86,   86,  412,   86,  413,   86,   86,   86,
-       86,  416,  405,   86,  417,  420,   86,   86,  175,  411,
-      422,   86,  418,  414,  415,  419,   86,   86,  424,  423,
-       86,  421,   86,  429,   86,  428,  425,   86,  427,   86,
-      430,   86,   86,   86,   86,   86,   86,   86,  436,   86,
-       86,   86,  437,  426,  439,   86,   86,  435,   86,  442,
-      433,  432,  447,  438,  434,  431,   86,   86,   86,  444,
-      440,   86,   86,  441,  443,  448,   86,   86,   86,  446,
-       86,  463,   86,  449,   86,  456,  445,   86,   86,  458,
-      466,  467,  170,  464,  465,  457,  450,   86,   86,  451,
-
-      459,  470,  460,  468,  452,  453,  454,  455,  469,   86,
-      471,   86,   86,   86,   86,  461,   86,   86,  462,  480,
-       86,   86,   86,  478,   86,  482,   86,  481,  474,  472,
-      479,  475,  473,   86,  476,  477,   86,  483,  485,   86,
-       86,  484,   86,   86,  490,   86,  491,   86,  492,   86,
-       86,  486,   86,  509,  496,  497,   86,  493,  489,  487,
-       86,   86,  488,   86,  494,  498,   86,  495,  499,  501,
-      503,  502,   86,   86,  500,  504,   86,  510,  511,   86,
-       86,  512,  508,   86,   86,   86,   86,  526,  505,   86,
-       86,  506,  581,  507,   86,  513,   86,  514,   86,  530,
-
-      525,  528,   86,  515,  529,  527,   86,  516,   86,  531,
-      533,  543,  517,  542,  546,  518,   86,  519,  544,  520,
-      170,  547,   86,  545,   86,  532,   86,   86,  553,   86,
-       86,  551,  521,   86,   86,  522,   86,  523,  168,  524,
-       86,  548,  534,  535,  550,  549,  552,  556,   86,   86,
-      555,  557,  536,  537,  538,  539,  540,   86,   86,  541,
-       86,  558,  554,  559,   86,   86,  566,   86,  561,  562,
-      564,   86,   86,   86,  567,  563,   86,   86,  571,  565,
-       86,  560,   86,  569,   86,   86,   86,  568,   86,   86,
-      570,  574,  575,  576,   86,   86,  573,   86,  578,  582,
-
-      583,   86,  572,  580,  579,  577,   86,   86,   86,  588,
-      585,  586,   86,  589,   86,   86,  590,  584,  604,   86,
-       86,  166,   86,  607,   86,   86,  587,   86,  591,  593,
-      594,  595,  592,   86,  605,  609,  608,   86,  606,   86,
-      615,   86,  596,  611,  597,   86,   86,   86,   86,  613,
-      598,  612,   86,  614,   86,  616,  618,   86,  599,  600,
-      610,   86,  601,  602,   86,  617,  603,   86,  621,  619,
-      622,   86,   86,   86,  620,  623,   86,   86,   86,   86,
-      628,   86,  626,  627,   86,   86,   86,  624,  629,   86,
-       86,   86,  634,  630,  625,  635,   86,   86,  633,   86,
-
-      636,   86,  638,  632,  631,   86,   86,  641,   86,  637,
-      639,   86,  640,   86,  643,   86,   86,   86,   86,  645,
-       86,  642,   86,  649,   86,  647,   86,   86,   86,  644,
-       86,  657,  677,   86,  651,  659,  646,   86,  648,  658,
-      650,   86,  652,   86,  653,  654,  655,  656,  660,   86,
-       86,   86,   86,   86,  664,   86,  668,   86,  662,  671,
-       86,  663,   86,  661,  667,   86,  665,   86,  666,   86,
-      670,   86,   86,   86,  673,   86,  674,  669,  678,   86,
-       86,   86,   86,  672,  680,   86,   86,   86,   86,  711,
-      679,  675,   86,  676,   86,  683,  681,   86,  695,   86,
-
-      682,   86,  684,  694,  697,  692,   86,  685,  693,  686,
-      699,  696,  165,  698,   86,  687,   86,  688,   86,  700,
-      689,  690,  707,  701,   86,   86,   86,  691,   86,  703,
-       86,  702,   86,  708,  704,  706,   86,  705,   86,  714,
-      709,   86,   86,  716,   86,   86,  710,   86,   86,  720,
-       86,   86,   86,   86,  163,  712,  713,  718,  723,  717,
-       86,  724,  719,   86,   86,   86,  715,   86,  170,  721,
-      727,  729,  730,  722,  728,  731,   86,   86,  726,  725,
-       86,   86,   86,   86,   86,   86,   86,   86,  732,  738,
-      161,   86,  733,  740,  742,  744,  735,   86,  736,  734,
-
-      739,   86,  737,  743,   86,  746,   86,   86,   86,  745,
-      748,   86,   86,   86,   86,   86,  752,   86,  747,  751,
-      757,   86,  749,   86,  753,  758,   86,  750,  760,   86,
-      808,  754,   86,  756,  755,  762,  759,  761,   86,  763,
-       86,   86,  764,   86,  765,   86,  766,   86,   86,   86,
-       86,  767,   86,  768,  771,   86,  773,  769,  770,   86,
-       86,   86,  774,   86,   86,  775,  772,  779,  778,   86,
-       86,   86,   86,   86,  781,   86,  783,   86,   86,  785,
-       86,   86,  777,   86,  776,   86,  788,   86,  792,  780,
-      782,  784,   86,   86,   86,  786,  787,  793,   86,   86,
-
-       86,  790,  789,   86,   86,  800,  795,  791,   86,  802,
-       86,  796,  794,  803,  797,  798,   86,  799,  801,   86,
-      807,  804,   86,   86,  805,  809,   86,  810,   86,   86,
-       86,   86,  813,  812,  806,  814,   86,   86,   86,   86,
-       86,  821,   86,   86,  817,  819,   86,  815,   86,  811,
-       86,  818,  822,   86,  816,   86,   86,  828,   86,  820,
-       86,  834,  826,   86,  829,  823,  825,  827,   86,  824,
-       86,  830,  831,  832,   86,   86,   86,  833,  835,   86,
-       86,  840,   86,   86,  836,  838,  842,   86,  841,   86,
-      837,   86,   86,   86,  843,   86,  846,   86,  839,   86,
-
-      845,  847,   86,  853,  850,   86,  848,  844,  854,   86,
-      849,   86,   86,   86,  855,   86,  856,   86,  851,  852,
-       86,  858,  859,   86,  860,  863,  861,   86,   86,  867,
-       86,   86,  857,  865,  868,   86,   86,  869,  870,  864,
-       86,  862,  871,  866,   86,   86,  873,   86,   86,  872,
-       86,   86,  879,   86,   86,   86,   86,  880,   86,   86,
-       86,   86,   86,  874,  881,  875,  876,   86,   86,  877,
-      886,  878,  884,   86,  882,  883,  889,  888,   86,  887,
-      885,   86,   86,   86,   86,   86,   86,  891,  890,  896,
-      892,   86,   86,   86,   86,   86,   86,   86,  905,  906,
-
-      893,  903,  898,  895,  894,   86,   86,   86,   86,  897,
-      899,  900,  901,  902,   86,   86,   86,   86,   86,  904,
-      907,  911,  910,   86,   86,  909,  908,   86,   86,   86,
-      915,  912,  916,   86,  919,  917,  913,  914,  920,   86,
-       86,   86,  918,   86,   86,  927,   86,  922,   86,  170,
-      923,   86,  925,   86,  928,   86,  929,  921,  924,  930,
-      926,   86,   86,   86,   86,   86,   86,  935,  936,   86,
-       86,  932,   86,  937,   86,  931,  939,   86,  933,  934,
-       86,  938,  943,  941,  944,  940,   86,   86,   86,  942,
-      945,  947,   86,   86,  949,   86,   86,   86,   86,  946,
-
-       86,  950,  951,   86,   86,   86,   86,   86,   86,  178,
-      948,  965,   86,  966,  952,  964,  969,  967,  954,  962,
-      963,   86,  953,   86,   86,  955,   86,  970,  956,   86,
-      971,   86,  957,   86,   86,  958,   86,  968,  974,   86,
-      976,   86,  959,  960,  972,  961,   86,   86,   86,  973,
-     1018,   86,  985,   86,  975,   86,  977,  978,  992,  979,
-      986,  984,  980,   86,   86,   86,  987,  981,  988,  990,
-       86,   86,   86,  982,  983,  989,  994,   86,  998,   86,
-      997,   86,  993,  999,   86,  991, 1000,  995,   86, 1001,
-       86, 1004,   86,   86,  176,  996, 1002, 1003, 1005,   86,
-
-       86,   86, 1006, 1008,   86, 1007,   86,   86, 1009,   86,
-       86,   86,   86, 1010, 1012,   86, 1016,   86,   86, 1019,
-     1015,   86,   86,   86,   86, 1023, 1011, 1034,   86, 1013,
-     1014,   86, 1017, 1024, 1021, 1025,   86, 1026, 1029, 1020,
-       86,   86, 1027,   86,   86, 1022, 1028, 1031,  175,   86,
-     1033,   86,   86,   86, 1032,   86,   86, 1035,   86, 1030,
-     1036, 1037,   86, 1038,   86,   86, 1039,   86,   86,   86,
-     1041, 1042,   86, 1040,   86, 1043, 1047,   86,   86, 1051,
-       86, 1050,   86,   86,   86,   86, 1049, 1044, 1045, 1048,
-       86,   86,   86, 1046,   86,   86,   86, 1056, 1058, 1053,
-
-     1054, 1059, 1052, 1057,   86,   86,   86,   86, 1055,   86,
-       86, 1064,   86, 1067,   86, 1062, 1065,   86, 1060,   86,
-     1063,   86,   86, 1066,   86, 1068,   86, 1073, 1070,   86,
-     1061, 1075,   86, 1069,   86, 1074, 1076,   86,   86, 1078,
-     1072,   86,   86,   86,   86, 1071,   86, 1077,   86,  170,
-       86,   86, 1086, 1079, 1089, 1084,   86,   86, 1080,   86,
-       86, 1081,   86, 1083, 1082, 1090,   86, 1085, 1087, 1091,
-     1088,   86,   86,   86,   86, 1092,   86, 1095, 1098,   86,
-     1094, 1093, 1096, 1099,   86,   86, 1097,   86,   86,   86,
-       86,   86, 1109,   86, 1102, 1100, 1104, 1110,   86, 1101,
-
-       86,   86, 1112,   86,   86, 1115,   86, 1103,   86, 1105,
-     1107,   86, 1106, 1108, 1111, 1113, 1116,   86,   86,   86,
-      168, 1117,   86,   86, 1114, 1118,   86, 1123, 1121, 1124,
-     1119, 1125,   86,   86,   86,   86, 1126,   86, 1120, 1129,
-     1122,   86, 1131,   86,   86,   86,   86, 1128, 1137,   86,
-     1127, 1133, 1134, 1138,  170,   86,   86,   86, 1141,   86,
-     1140, 1130, 1132,   86,   86, 1135,   86, 1136,   86, 1144,
-     1139,   86,   86,   86,   86,   86, 1157,   86,   86,   86,
-       86, 1142, 1158, 1143, 1148, 1145, 1147, 1160,   86,   86,
-      166,   86, 1146, 1149, 1159, 1150,   86,   86, 1191, 1151,
-
-       86, 1152, 1161, 1164, 1162, 1153, 1163, 1154,   86, 1167,
-       86, 1166, 1155, 1165, 1168,   86,   86, 1156,   86, 1169,
-       86,   86, 1171,   86,   86,   86, 1174,   86, 1177,   86,
-     1170,   86,   86,   86, 1172, 1173, 1175, 1176, 1178, 1182,
-     1181,   86, 1187, 1180, 1184, 1185, 1183,   86, 1179, 1188,
-       86,   86, 1186,   86, 1189,   86,   86,   86,   86,   86,
-       86,   86, 1203, 1200,   86,   86,   86,   86,   86, 1199,
-     1204,   86, 1202, 1201, 1205, 1190,   86, 1192,   86, 1211,
-     1206, 1207, 1193,   86, 1194,   86,   86, 1208,   86, 1214,
-     1195, 1212,   86,   86,   86, 1196, 1197, 1209,   86, 1210,
-
-     1213,   86, 1198, 1218,   86, 1219,   86, 1221, 1215, 1222,
-       86, 1216, 1217,   86,   86,   86, 1226,   86, 1220, 1224,
-       86,   86,   86,   86,   86, 1227,   86, 1232, 1225, 1223,
-     1229,   86, 1230,   86,   86, 1233, 1228,   86,   86, 1235,
-     1231,   86,   86,   86,   86,   86,   86,   86,   86, 1242,
-     1234,   86, 1237, 1240, 1239, 1241,   86, 1236, 1244,   86,
-       86, 1238, 1243, 1245,   86, 1246,   86,   86, 1247,   86,
-       86, 1248,   86, 1250, 1253, 1249,   86, 1254, 1251, 1256,
-     1258, 1255, 1252,   86, 1257, 1259,   86,   86,   86,   86,
-       86,   86, 1264,   86,   86,   86, 1260, 1265,   86,   86,
-
-       86, 1266, 1262, 1261, 1267,   86, 1263, 1269, 1268,   86,
-       86, 1271, 1275,   86, 1270, 1277,   86, 1272,   86,   86,
-       86,   86, 1273,   86, 1279, 1274,   86, 1281,  165,   86,
-       86, 1278, 1282, 1276, 1280, 1284,   86,   86,   86,   86,
-       86, 1285,   86,   86, 1283, 1288,   86, 1287, 1289,   86,
-     1294, 1290, 1291, 1286,   86, 1293,   86,   86, 1292, 1295,
-       86,   86,   86, 1296, 1298,   86, 1299,   86,   86,   86,
-       86, 1305, 1303, 1306, 1339, 1297, 1307,   86,   86,   86,
-     1300, 1310,   86, 1304,   86,   86, 1301,   86, 1302, 1308,
-     1309,   86, 1312,   86,   86,   86, 1311, 1316,   86, 1313,
-
-       86, 1318,   86,   86,   86, 1317,   86,   86,   86,   86,
-       86, 1314, 1323, 1319,   86, 1315, 1320, 1324,   86,   86,
-       86, 1325,   86, 1326, 1321, 1330,   86, 1322, 1331,   86,
-       86,   86, 1328,   86,   86, 1333,   86, 1327, 1334,   86,
-       86, 1329,   86,   86, 1332, 1335,   86, 1336, 1337,   86,
-       86,   86, 1341, 1345,   86,  170,   86,   86, 1338, 1346,
-     1340, 1347, 1348,   86,   86, 1342,   86,   86,   86, 1344,
-     1357,   86, 1353,  163, 1343, 1349,   86, 1350, 1352, 1351,
-     1354, 1355,   86, 1358,   86,   86,   86,   86, 1356,   86,
-     1360,   86, 1362, 1361,   86,   86,   86,   86,   86,   86,
-
-     1359, 1365,   86, 1371,   86, 1367, 1368,   86, 1363, 1364,
-       86,   86, 1366, 1369,   86,   86,   86,   86,  161,   86,
-     1375, 1370, 1377, 1381, 1372, 1373, 1374,   86, 1382,   86,
-     1386, 1378,   86, 1379, 1383, 1376, 1380, 1384,   86, 1385,
-       86,   86,   86, 1387,   86,   86,   86,   86,   86,   86,
-     1391, 1390,   86, 1394,   86,   86, 1398,   86,   86, 1393,
-     1388,   86, 1389, 1395,   86, 1392, 1396,   86,   86, 1399,
-     1404, 1397, 1400, 1402, 1401,   86,   86,   86,   86, 1403,
-       86,   86,   86,   86, 1408,   86,   86,   86,   86, 1411,
-       86, 1405, 1406, 1409, 1416, 1410,   86, 1407, 1412,   86,
-
-       86, 1418, 1413,   86,   86, 1415, 1414,   86,   86, 1421,
-     1419, 1417,   86,   86,   86, 1428,   86,   86, 1422, 1420,
-     1424,   86, 1430, 1423,   86,   86,   86,   86,   86, 1427,
-       86, 1425, 1431,   86, 1433, 1436, 1429,   86, 1426, 1432,
-       86, 1438,   86, 1435, 1434, 1437, 1439,   86,   86, 1443,
-       86,   86,   86, 1453, 1441, 1442, 1440,   86, 1444,   86,
-     1452, 1456, 1445, 1451,   86, 1446, 1447,   86, 1454, 1455,
-     1448, 1457,   86,   86,   86,   86, 1449,   86, 1458, 1459,
-     1450,   86, 1460,   86, 1462,   86,   86,   86, 1463,   86,
-     1464, 1467,   86, 1461,   86, 1465, 1468,   86,   86, 1470,
-
-       86, 1473, 1474,   86, 1466, 1475, 1471,   86,   86, 1469,
-       86,   86, 1478,   86, 1476,   86, 1472, 1479, 1483, 1480,
-       86, 1481,   86, 1482, 1477,   86, 1485, 1486, 1487, 1484,
-       86, 1488,   86,   86,   86, 1493, 1489, 1490,   86,   86,
-     1494,   86,   86, 1492,   86,   86,   86, 1495,   86, 1497,
-       86, 1491, 1503,   86, 1499,   86, 1498,   86,   86,   86,
-     1504, 1496,   86, 1506, 1502, 1500,   86, 1501,   86, 1505,
-       86, 1508,   86,   86, 1515,   86, 1507,   86, 1513, 1510,
-     1511,   86, 1509, 1517,   86,   86, 1514, 1518,   86,   86,
-     1512, 1519, 1516,   86, 1520,   86, 1523,   86,   86, 1525,
-
-       86,   86, 1526,   86, 1522,   86,   86,   86, 1527, 1531,
-       86,   86, 1521,   86,   86,   86, 1536, 1534, 1524,   86,
-       86,   86,   86, 1539, 1537,   86, 1528, 1529, 1530, 1538,
-     1533, 1532,   86,   86,   86, 1535, 1541,   86,   86, 1543,
-       86,   86, 1550, 1540,   86, 1545, 1546, 1542,   86, 1547,
-       86, 1544,   86, 1548,   86,   86,   86, 1549,   86, 1551,
-       86, 1553, 1556, 1554, 1557, 1558, 1552,   86,   86, 1560,
-       86, 1555, 1559,   86,   86,   86,   86, 1564,   86,   86,
-       86,   86, 1561,   86,   86, 1566,   86, 1563,  170, 1572,
-     1573, 1568,   86, 1562, 1575,   86,   86,   86, 1574, 1565,
-
-       86, 1567,   86, 1569, 1570,   86,   86,   86,   86, 1571,
-       86, 1576,   86, 1583,   86,   86,   86, 1577, 1580,   86,
-       86, 1581, 1578,   86, 1587, 1579, 1582, 1588,   86,   86,
-     1584, 1592,   86, 1586, 1590, 1591, 1593,   86,   86, 1585,
-     1596, 1594,   86, 1589,   86,   86,   86, 1595,   86, 1606,
-       86, 1601, 1604,   86, 1602,   86, 1597, 1603,   86, 1598,
-     1599,   86, 1607, 1600, 1609,   86,   86, 1605,   86, 1610,
-       86,   86, 1608,   86,   86,   86, 1614,   86, 1615,   86,
-       86,   86, 1618,   86, 1611,   86, 1613,   86, 1623, 1624,
-       86,   86, 1612, 1616, 1617, 1620, 1627,   86, 1621, 1619,
-
-       86, 1622,   86,   86,   86,   86,   86,   86, 1625, 1628,
-     1626,   86,   86,   86,   86,   86, 1629, 1635, 1631, 1637,
-     1632, 1633, 1630,   86, 1640,   86, 1634,   86, 1641, 1638,
-     1636,   86,   86, 1646, 1639,   86, 1645, 1647,   86,   86,
-     1642, 1643,   86,   86,   86, 1649, 1650,   86, 1651,   86,
-       86, 1644, 1648,   86, 1655, 1656, 1657,   86, 1654, 3557,
-       86,   86,   86,   86, 1658, 1652,   86, 1659, 1660,   86,
-       86, 1653,   86,   86, 1661, 1663,   86,   86,   86,   86,
-       86, 1662,   86, 1668,   86, 1664, 1667,   86, 1670, 1671,
-     1665,   86, 1666,   86, 1674,   86, 1679, 1676, 1669, 1675,
-
-       86, 1672, 1677,   86,   86,   86,   86,   86,   86,   86,
-     1673, 1687, 1683, 1678,   86, 1682,   86,   86,   86,   86,
-     1691, 1688,   86, 1680, 1681,   86,   86, 1684, 1694, 1685,
-       86, 1693, 1686,   86,   86,   86,   86,   86, 1689,   86,
-       86, 1692,   86,   86, 1703, 1690,   86,   86,   86, 1695,
-     1704,   86, 1696, 1700, 1697, 1698, 1699, 1702, 1708,   86,
-       86, 1701,   86, 1707, 1711, 1705,   86, 1706, 1709,   86,
-       86, 1710,   86,   86,   86, 1712, 1715,   86,   86, 1713,
-     1716,   86, 1719,   86,   86, 1714, 1723,   86, 1725, 1724,
-       86, 1718,   86, 1717,   86,   86, 1720, 1728, 1721, 1722,
-
-       86,   86,   86,   86, 1730, 1726, 1729,   86, 1727,   86,
-       86, 1731, 1732, 1736, 1737,   86,   86,   86, 1734,   86,
-     1733,   86,   86, 1741,   86, 1742, 1740, 1744,   86,   86,
-     1735,   86, 1745,   86, 1738, 1746,   86,   86, 1739,   86,
-       86,   86,   86, 1750, 1743,   86,   86,   86, 1755, 1747,
-       86, 1753,   86, 1748,   86, 1749,   86,   86,   86,   86,
-     1761, 1759, 1751,   86,   86, 1752, 1754, 1756,   86,   86,
-       86, 1757, 1760, 1758,   86, 1763,   86, 1762, 1764,   86,
-     1767, 1770,   86, 1768, 1772,   86,   86,   86,   86, 1765,
-     1766, 1773, 1769,   86, 1775,   86,   86, 1771,   86,   86,
-
-       86,   86, 1779, 1782,   86, 1781, 1774, 1778,   86,   86,
-     1776, 1783,   86,  170, 1777,   86,   86, 1785, 1780, 1787,
-       86,   86, 1784,   86,   86, 1793, 1794,   86,   86, 1786,
-     1788, 1797,   86,   86, 1789, 1790,   86, 1791,   86,   86,
-       86, 1799, 1798,   86,   86, 1792, 1801, 1795, 1796,   86,
-     1803, 1805,   86,   86, 1802, 1865,   86,   86, 1800, 1804,
-     1807,   86, 1808,   86, 1811,   86, 1806,   86, 1812, 1809,
-     1810,   86, 1813,   86,   86,   86,   86,   86, 1818, 1817,
-       86,   86,   86,   86,   86, 1825, 1822, 1814,   86, 1823,
-     1816,   86, 1815, 1820,   86,   86, 1963,   86, 1819, 1826,
-
-     1827, 1824, 1821,   86, 1829, 1833,   86,   86, 1830, 1831,
-     1832, 1834, 1835,   86,   86,   86, 1828,   86,   86, 1836,
-       86, 1837,   86, 1838, 1839,   86,   86,   86, 1841, 1846,
-       86, 1840, 1843,   86, 1847,   86, 1845,   86, 1848, 1850,
-       86,   86, 1849, 1842,   86,   86,   86, 1844, 1853,   86,
-       86, 1852,   86,   86,   86, 1854,   86,   86,   86,   86,
-       86,   86,   86,   86, 1851, 1864,   86,   86,   86, 3557,
-     1855, 1859, 1860, 1856, 1858, 1857, 1861, 1862, 1868,   86,
-     1869,   86, 1866, 1871,   86, 1863, 1867, 1872,   86,   86,
-       86,   86, 1877,   86, 1870,   86,   86,   86,   86, 1881,
-
-     1873, 1879,   86,   86, 1875,   86,   86,   86, 1874, 1880,
-       86,   86, 1876,   86,   86, 1878, 1886, 1882, 1888, 1883,
-       86,   86,   86, 1889, 1885, 1887, 1890, 1884,   86, 1891,
-       86, 1895, 1896,   86, 1898, 1892, 1897,   86,   86,   86,
-     1893, 1900, 1901,   86,   86,   86, 1894,   86, 1899,   86,
-     1904,   86, 1902,   86, 1905,   86,   86, 3557, 1906,   86,
-       86, 1914,   86, 1903, 1909, 1908, 1907,   86, 1911, 1913,
-       86, 1912, 1915,   86,   86, 1910,   86, 1916,   86,   86,
-     1922,   86, 1917,   86,   86, 1923,   86, 1918, 1924,   86,
-       86, 1928, 1920, 1925, 1919, 1921,   86,   86,   86, 1931,
-
-       86, 1933,   86, 1932,   86,   86, 1930, 1927,   86, 1926,
-     1937, 1935, 1929,   86, 1936, 1934,   86,   86, 1941,   86,
-       86,   86, 1938, 1942,   86, 1946,   86, 1948, 1951, 1939,
-     1943, 1940, 1944,   86,   86, 1947, 1950,   86,   86,   86,
-     1954, 1945,   86, 1952, 1949,   86,   86,   86, 1955, 1958,
-       86,   86, 1962, 1953, 1960,   86,   86,   86,   86,   86,
-     1961, 1957,   86, 1959,   86, 1956,   86,   86,   86, 1968,
-     1967,   86,   86,   86, 3557, 1964, 1965, 1969, 1966, 1970,
-     1971, 1973, 1975,   86, 1977, 1972, 1978, 1974,   86,   86,
-       86,   86,   86, 1980,   86,   86, 1984,   86,   86, 1986,
-
-       86, 1979,   86,   86, 1976,   86, 1990,   86,   86, 1981,
-     1983, 1985,   86, 1982,   86,   86, 1992,   86, 1988, 1993,
-       86, 1989, 1987,   86,   86, 1995, 1997,   86, 1991, 1996,
-       86,   86,  170,   86, 2001, 1994, 2004,   86, 1999, 2000,
-       86,   86,   86,   86, 2002,   86, 1998,   86, 2003, 2008,
-       86,   86, 2010, 2006,   86,   86, 2015, 2009,   86, 2005,
-       86, 2007,   86, 2011,   86,   86, 2012, 2014, 2019,   86,
-     2016, 2018,   86, 2023, 2013, 2020, 2021,   86, 2017,   86,
-     2024, 2025,   86,   86, 2022,   86,   86, 2027,   86,   86,
-       86, 2028,   86,   86,   86, 2026,   86,   86,   86, 2033,
-
-       86, 2034,   86,   86,   86, 2038, 2035,   86, 3557, 2029,
-     2031, 2032, 2030, 2037, 2036,   86, 2039,   86,   86, 2045,
-     2042,   86, 2044, 2041, 2046,   86, 2047, 2043,   86, 2040,
-       86,   86,   86,   86,   86, 2053,   86, 2056,   86, 2048,
-     2049, 2057,   86, 2058,   86,   86, 2051, 2050, 2054,   86,
-     2055, 2052, 2060,   86,   86, 2061,   86,   86, 2059, 2065,
-       86, 2066, 2067, 2069,   86,   86, 2062, 2068,   86,   86,
-     2063,   86, 2071,   86, 2075,   86, 2072, 2064,   86,   86,
-       86,   86, 2074, 2070, 2078,   86, 2077,   86,   86,   86,
-       86,   86, 2083, 2085, 2081, 2082,   86,   86, 2073,   86,
-
-     2076, 2084, 2079,   86,   86,   86,   86, 2093,   86, 2080,
-       86, 2097, 3557,   86, 2095, 2086, 2087, 2088,   86, 2096,
-       86,   86, 2089, 2091, 2090, 2098, 2092,   86, 2094, 2099,
-     2102,   86, 2100, 2101,   86,   86,   86, 2106,   86,   86,
-     2103,   86, 2108,   86,   86,   86, 2111, 2112,   86,   86,
-     2114,   86,   86,   86, 2104,   86, 2105,   86,   86, 2121,
-       86, 2119, 2116, 2109, 2117, 2107, 2110,   86,   86, 2113,
-       86,   86,   86,   86, 2120,   86, 2127, 2115, 2118, 2124,
-     2125,   86,   86,   86, 2130, 2123, 2132,   86, 2131, 2122,
-       86,   86,   86,   86, 2134, 2135,   86, 2138, 2129, 2126,
-
-       86,   86, 2136,   86, 2139,   86,   86, 2128,   86,   86,
-       86, 2133, 2137, 2140,   86, 2141, 2142, 2144,   86,   86,
-       86, 2146, 2145,   86, 2149, 2150, 2151,   86, 2143,   86,
-       86,   86,   86,   86, 2154,   86,   86, 2147, 2159,   86,
-       86, 2158,   86,   86, 2153,   86, 2148, 2152,   86, 2164,
-     2155,   86, 2165, 2156,   86,   86,   86, 2157, 2162, 2169,
-     2166, 2161, 2168,   86, 2160, 2167,   86, 2163, 2172,   86,
-       86,   86,   86,   86,   86,   86,   86, 2170,   86, 2176,
-     2180,   86, 2171,   86,   86, 2174,   86,   86, 2183,   86,
-     2181, 2173, 2175, 2187, 2184, 2177, 2178,   86, 2179, 2182,
-
-     2185,   86,   86, 2186,   86,   86, 2188, 2191, 2192,   86,
-     2193,   86, 2194, 2196, 3557, 2189, 2197, 2195,   86,   86,
-     2190,   86,   86,   86, 2201,   86, 2199,   86,   86,   86,
-       86, 2198, 2203,   86, 2205, 2200, 2207, 2202,   86, 2204,
-     2209,   86,   86, 2210,   86,   86,   86,  170,   86,   86,
-       86,   86, 2213,   86, 2206,   86,   86, 2276, 2217, 2218,
-     2208, 2212, 2214, 2215, 2211,   86, 2219, 2216, 2220,   86,
-     2221,   86, 2223,   86,   86, 2222,   86,   86,   86, 2224,
-     2226, 2225,   86,   86,   86,   86, 2227, 2228, 2229,   86,
-     2231,   86,   86, 2235,   86, 2230, 2232, 2234,   86,   86,
-
-       86, 2240,   86, 2233, 2237, 2238,   86, 2236,   86, 2239,
-       86,   86,   86,   86,   86,   86, 2247, 2245,   86, 2242,
-     2246,   86,   86,   86,   86, 2252,   86, 2249, 2241, 2243,
-       86, 2244, 2248,   86,   86, 2257, 2253, 2251,   86, 2250,
-       86,   86, 2255,   86, 2254,   86,   86, 2258, 2261, 2264,
-     2256,   86, 2259, 2263,   86,   86,   86, 2270, 2262,   86,
-       86,   86, 2260,   86,   86, 2272,   86, 2265, 2273,   86,
-       86, 2266, 2267,   86, 2268, 2269,   86, 2271, 2275,   86,
-     2277,   86,   86, 2278,   86, 2281,   86, 2274,   86,   86,
-     2280,   86,   86, 2279, 2288, 2283,   86, 2286, 2284,   86,
-
-     2282, 2287,   86,   86,   86,   86,   86,   86,   86, 2285,
-       86, 2289,   86,   86, 2290, 2295, 2292,   86, 2291, 2296,
-     2300, 2294, 2301,   86,   86,   86,   86, 2298, 2304, 2305,
-     2302, 2293, 2297, 2299,   86,   86,   86, 2303, 2308, 2307,
-       86,   86,   86,   86,   86, 2310, 2306,   86, 2311, 2318,
-       86, 2312,   86, 2309, 2316,   86, 2314,   86,   86, 2319,
-       86, 2313, 2315, 2317, 2321,   86,   86,   86,   86, 2324,
-       86, 2323, 2320, 2325,   86, 2326,   86,   86, 2330,   86,
-       86,   86,   86, 2334,   86, 2331, 2322,   86, 2335,   86,
-       86, 2333, 2327,   86, 2328, 2332,   86, 2329, 2336,   86,
-
-     2337, 2338, 2339,   86,   86, 2340, 2344, 2341, 2342,   86,
-       86,   86,   86, 2346, 2345,   86, 2350,   86,   86, 2343,
-       86, 2352,   86, 2348,   86, 2353,   86, 2355, 2347,   86,
-     2351, 2349,   86,   86,   86, 2354, 2357,   86, 2362, 2360,
-       86,   86, 2358, 2363,   86, 2359,   86, 2356,   86,   86,
-     2365,   86, 2364,   86, 2368, 2361, 2369,   86, 2366,   86,
-     2367, 2373,   86,   86,   86,   86, 2370,   86, 2372,   86,
-       86,   86, 3557,   86,   86,   86,   86, 2371, 2381,   86,
-       86, 2374, 2375, 2376, 2379, 2377, 2380, 2382, 2383, 2387,
-       86,   86, 2378,   86, 2384, 2385, 2386,   86,   86, 2388,
-
-       86,   86, 2391, 2390,   86,   86, 2396,   86,   86, 2398,
-       86,   86, 2389, 2392, 2395,   86,   86, 2397, 2393, 2401,
-       86, 2402, 2399,   86,  170, 2405, 2394,   86, 3557, 2407,
-     2400,   86, 2409, 2403, 2408,   86,   86, 2410,   86, 2411,
-       86,   86, 2404,   86, 2414,   86, 2406, 2413, 2412,   86,
-     2415,   86, 2419,   86,   86, 2420,   86, 2423,   86, 2422,
-     2418,   86,   86,   86, 2416,   86, 2424, 2427, 2421,   86,
-     2425, 2426,   86, 2428,   86, 2417,   86,   86, 2429,   86,
-     2431,   86,   86, 2433,   86, 2430, 2434,   86,   86,   86,
-       86,   86, 2437,   86,   86, 2441,   86, 2432, 2444, 2436,
-
-     2443,   86,   86,   86,   86, 2435, 2438, 2439, 2446, 2440,
-       86, 2445,   86,   86,   86, 2442,   86,   86, 2451, 2454,
-       86,   86, 2448,   86, 2449, 2455,   86, 2452, 2447, 2450,
-       86,   86,   86,   86, 2453,   86,   86, 2465,   86,   86,
-     2456,   86, 2457,   86,   86, 2458,   86, 2463, 2470,   86,
-     2494, 2461, 2467, 2459, 2462, 2460, 2466, 2464, 2468,   86,
-     2472,   86,   86,   86,   86, 2469, 2474, 2473,   86, 2471,
-       86,   86, 2478, 2479,   86,   86,   86, 2475, 2480, 2481,
-       86,   86, 2476, 2477,   86, 2484,   86, 2485,   86,   86,
-     2482, 2488,   86,   86, 2483, 2489,   86, 2486, 2490,   86,
-
-     2487,   86, 2495,   86, 2491, 2496,   86,   86,   86, 2492,
-     2498,   86,   86, 2500,   86,   86, 2503,   86, 2504,   86,
-     2502, 2493,   86, 2501,   86,   86, 2497,   86,   86,   86,
-     2499, 2511,   86, 2506, 2510,   86, 2505, 2513,   86,   86,
-       86, 2508, 2507,   86,   86, 2515,   86, 2509,   86, 2516,
-       86, 2517,   86, 2518, 2512, 2520,   86, 2514,   86,   86,
-     2523, 2522,   86, 2521,   86, 2524, 2526,   86, 2519,   86,
-       86,   86, 2532,   86,   86, 2531,   86,   86, 2525, 2528,
-       86, 2534, 2527,   86,   86, 2530, 2537,   86,   86,   86,
-       86, 2539, 2529, 2533,   86, 2535,   86, 2538, 2536,   86,
-
-     2545,   86, 2540,   86,   86, 2547, 2551, 2541, 2542, 2543,
-     2546,   86,   86,   86, 2548,   86, 2552,   86, 2553,   86,
-     2554,   86, 2544,   86,   86,   86, 2558,   86,   86, 2549,
-     2560, 2550, 2556, 2561,   86, 2564,   86, 2565,   86, 2562,
-     2568,   86, 2555,   86, 2557,   86,   86,   86, 2566,   86,
-     2559, 2563, 2569, 2567, 2570,   86,   86,   86,   86, 2573,
-       86,   86,   86,   86,   86,   86, 2574, 2575, 2572, 2576,
-     2571, 2577, 2579, 2580, 2584, 2578,   86, 3557,   86,   86,
-     2581,   86, 2585, 2582, 2583, 2586,   86, 2587,   86,   86,
-     2590,   86,   86,  170,   86, 2588,   86, 2589, 2591,   86,
-
-     2596,   86,   86,   86,   86,   86,   86,   86, 2604,   86,
-     2594, 2597, 2592, 2598, 2593, 2595,   86, 2599, 2600, 2602,
-       86, 2601, 3557, 2603, 2607,   86,   86, 2608, 2606, 2605,
-     2609,   86,   86,   86, 2612, 2610, 2613,   86, 2611,   86,
-       86,   86,   86, 2615,   86,   86, 2614,   86, 2617,   86,
-       86, 2621, 2622, 2616,   86, 2619,   86, 2618,   86, 2624,
-       86,   86,   86,   86, 2625, 2626, 2627,   86, 2620,   86,
-     2623,   86, 2629,   86, 2628, 2633,   86, 2632,   86,   86,
-     2630, 2631,   86,   86, 2635,   86,   86,   86,   86,   86,
-     2643, 2634, 2640,   86, 2642,   86,   86,   86, 2645, 2644,
-
-     2639,   86, 2636, 2637,   86, 2638,   86, 2641,   86, 2651,
-       86, 2649,   86, 2646,   86,   86,   86, 2657,   86, 2655,
-     2647, 2654,   86, 2648, 2652,   86, 2656,   86,   86, 2650,
-     2653, 2658,   86, 2660,   86,   86,   86, 2661, 2662,   86,
-     2664, 2659,   86, 2666, 2668,   86, 2665,   86, 2667,   86,
-     2670,   86,   86,   86, 2663,   86, 2669,   86,   86,   86,
-       86,   86, 2674, 2679,   86, 2677, 2678, 2672, 2680,   86,
-     2671, 2673, 2681,   86,   86, 2683,   86,   86,   86,   86,
-     2676,   86,   86,   86, 2675, 2688, 2686,   86,   86, 2691,
-       86,   86, 2684, 2682,   86, 2689, 2692, 2693, 2687, 2685,
-
-     2690, 2694,   86, 2697,   86,   86,   86,   86, 2698,   86,
-       86, 2701, 2695, 2702,   86,   86,   86, 2696,   86,   86,
-     2703,   86,   86,   86, 2708, 2699, 2707, 2700, 2705,   86,
-       86, 2706,   86,   86, 2704,   86,   86, 2709, 2712, 2716,
-       86, 2715, 2711, 2710, 2717,   86, 2718,   86, 2719,   86,
-       86,   86, 2713,   86,   86, 2714,   86, 2723, 2722,   86,
-     2724,   86, 2720,   86, 2725,   86, 2726,   86,   86, 2721,
-       86, 2732,   86,   86, 2734,   86,   86, 2728, 2735,   86,
-       86, 2727,   86,   86,   86,   86, 2731, 2729, 2737, 2730,
-     2738, 2736, 2733,   86, 2739,   86, 2744,   86, 2741,   86,
-
-     2746,   86,   86,   86, 2740, 2742,   86,   86, 2745,  170,
-       86,   86,   86,   86, 2753, 2743,   86, 2755,   86, 2749,
-       86, 2754, 2756, 2748, 2751,   86,   86,   86, 2747,   86,
-       86, 2750, 2762, 2752,   86, 2757, 2759,   86,   86, 2764,
-     2758,   86, 2765,   86, 2763, 2766,   86,   86, 2760, 2772,
-     2761, 2767,   86,   86, 2768,   86, 2769,   86, 2770, 2771,
-       86,   86, 2773,   86,   86,   86,   86, 2775,   86,   86,
-     2781,   86,   86,   86, 2779, 2774,   86, 2785,   86, 2776,
-     2786,   86, 2790,   86, 2778, 2777, 2780,   86,   86, 2782,
-     2783, 2784, 2787, 2788, 2792,   86, 2789, 2791,   86,   86,
-
-       86,   86,   86,   86,   86,   86,   86,   86, 2796, 2803,
-       86, 2804,   86,   86, 2802, 3557, 2793, 2794, 2795, 2797,
-     2798, 2799, 2800,   86, 2801,   86, 2808,   86, 2809,   86,
-     2810, 2807,   86, 2805,   86,   86,   86,   86,   86,   86,
-       86, 2806,   86, 2815,   86,   86, 2820,   86,   86, 2812,
-     2811, 2814, 2819, 2817, 2813, 2821,   86, 2823,   86, 2816,
-     2818,   86,   86, 2822, 2824,   86,   86, 2826,   86,   86,
-       86, 2825,   86, 2829, 2830,   86,   86, 2827,   86, 2836,
-       86, 2835,   86,   86, 2839,   86, 2828,   86,   86,   86,
-     2831, 2832,   86, 2842, 2834, 2833,   86, 2837, 2840,   86,
-
-       86, 2838, 2844, 2841, 2845, 2846,   86, 2843,   86,   86,
-       86,   86, 2847, 2851,   86,   86,   86,   86,   86, 2855,
-     2853, 2854,   86, 2848, 2856,   86,   86, 2852,   86, 2849,
-     2850, 2858,   86, 2859,   86, 2857,   86,   86, 2861, 2864,
-       86,   86, 2865, 2860, 2867,   86, 2863,   86, 2862,   86,
-       86,   86,   86, 2874,   86,   86,   86,   86, 3557, 2866,
-     2868, 2871, 2869, 2870, 2872, 2873, 2877,   86,   86,   86,
-       86, 2875, 2876, 2878, 2879,   86,   86,   86,   86,   86,
-     2881,   86,   86,   86, 2880, 2882,   86, 2884, 2887, 2885,
-       86, 2888, 2890,   86, 2886, 2883,   86, 2889, 2891,   86,
-
-       86, 2892, 2894,  170,   86,   86,   86, 2895, 2899, 2893,
-     2896,   86,   86, 2901,   86,   86, 2900, 3557,   86, 2904,
-       86,   86, 2897, 2903, 2898, 2905,   86, 2907,   86,   86,
-     2902, 2909, 2908,   86, 2906,   86, 2910,   86, 2911,   86,
-     2912, 2914,   86,   86,   86,   86, 2915,   86, 2916,   86,
-       86,   86, 2921, 2913, 2917, 2922, 2923, 2919,   86, 2918,
-       86,   86,   86,   86,   86,   86,   86, 2927, 2926, 2925,
-       86, 2920, 2924,   86,   86, 2929,   86, 2928, 2930, 2931,
-       86,   86,   86,   86, 2932,   86, 2936,   86,   86, 2933,
-     2934, 2935, 2937, 2938, 2940,   86,   86,   86, 2939,   86,
-
-       86, 2941, 2945,   86, 2946,   86, 2942,   86,   86,   86,
-       86, 2951,   86,   86,   86,   86, 2943, 2948, 2944, 2955,
-     2956,   86, 2949,   86, 2947, 2950, 2958,   86, 2952, 2953,
-     2959, 2961,   86, 2954, 2962,   86,   86,   86,   86,   86,
-       86,   86,   86,   86, 2968, 2960, 2963, 2965, 2957, 2966,
-       86,   86,   86,   86, 2967, 2969,   86, 2970, 2972,   86,
-       86, 2974,   86, 2983, 2964, 2971, 2976,   86, 2977,   86,
-       86, 2973, 2978,   86, 2979,   86,   86, 2982,   86,   86,
-     2975, 2980,   86, 2986, 2981,   86,   86, 2984, 2987,   86,
-       86, 2985,   86, 2990, 2991,   86,   86, 2988, 2992,   86,
-
-     2993,   86,   86, 2995,   86, 2994, 2989, 2997,   86, 2996,
-       86, 3000,   86,   86, 3001, 3002,   86,   86, 3004,   86,
-       86,   86, 2998,   86,   86, 3008, 3009,   86, 3010, 3011,
-     2999,   86, 3003, 3005,   86,   86,   86, 3007, 3013, 3006,
-       86, 3012,   86, 3014,   86,   86, 3019,   86,   86,   86,
-       86, 3018,   86, 3021, 3022,   86,   86, 3015, 3024,   86,
-     3016, 3023, 3017,   86,   86,   86, 3025, 3027,   86, 3028,
-     3031,   86, 3020, 3026,   86,   86, 3029, 3030,   86, 3035,
-       86,   86,   86,   86,   86, 3037, 3047,   86,   86, 3032,
-       86, 3053, 3034, 3038, 3033, 3036, 3041, 3039,   86, 3042,
-
-     3557, 3044,   86, 3040, 3043,   86, 3045,   86,   86, 3046,
-       86, 3048,   86, 3049,   86, 3050,   86, 3051,   86, 3052,
-       86,   86, 3055,   86, 3056, 3054,   86, 3059, 3058,   86,
-       86, 3060,   86, 3064,   86, 3057, 3065,   86, 3061,   86,
-       86,   86, 3066, 3069,   86,   86, 3067,   86, 3071,   86,
-     3062,   86, 3063,   86, 3070,   86, 3072, 3073,   86, 3068,
-       86,   86, 3074, 3078, 3075, 3079,   86, 3080,   86, 3076,
-     3077,   86,   86,   86,   86, 3081,   86, 3086,   86, 3557,
-       86, 3082, 3087,   86,   86, 3084,   86, 3089, 3090,   86,
-       86, 3085, 3083, 3088, 3091, 3092,   86, 3094,   86,   86,
-
-     3093,   86, 3098,   86, 3095,   86,   86,   86,   86,   86,
-     3105,   86,   86, 3102, 3099,   86,   86,   86, 3100, 3097,
-     3103,   86, 3108,   86, 3096,   86, 3109, 3106, 3112, 3104,
-       86, 3110, 3101, 3107, 3111,   86,   86,   86, 3115, 3117,
-       86, 3116, 3118,   86, 3119,   86,   86,   86, 3113,   86,
-     3114,   86, 3124,   86,   86, 3120, 3123,   86,   86, 3125,
-     3127,   86, 3126,   86,   86,   86,   86, 3121, 3122,   86,
-     3131, 3128, 3133, 3135,   86, 3129,   86,   86,   86,   86,
-     3136,   86, 3137,   86, 3132, 3130, 3138,   86, 3139,   86,
-       86, 3144,   86,   86, 3134,   86,   86,   86, 3140,   86,
-
-       86, 3148,   86, 3143, 3141, 3142, 3145,   86, 3146, 3147,
-       86, 3149, 3153,   86,   86, 3150,   86, 3155, 3152, 3151,
-       86,   86,   86, 3156, 3159,   86, 3161,   86,   86, 3163,
-       86,   86,   86, 3154, 3162, 3165,   86,   86, 3157,   86,
-       86, 3160, 3171,   86, 3168,   86,   86, 3158, 3166,   86,
-     3170, 3174, 3164, 3167,   86,   86, 3169,   86, 3173,   86,
-     3177,   86,   86, 3180,   86, 3181, 3172,   86,   86,   86,
-     3183,   86,   86, 3184, 3176, 3178,   86, 3175, 3186,   86,
-       86, 3179, 3187,   86, 3190,   86,   86, 3182,   86,   86,
-     3195, 3185, 3189,   86,   86, 3188,   86, 3192, 3193,   86,
-
-     3199,   86,   86,   86, 3191, 3557, 3197,   86, 3194,   86,
-     3201,   86, 3196,   86, 3202,   86, 3203, 3200, 3206, 3198,
-       86, 3204, 3209, 3205,   86, 3207,   86,   86,   86,   86,
-     3208, 3210, 3212,   86, 3211,   86, 3215,   86,   86, 3214,
-     3213,   86,   86, 3218,   86,   86,   86,   86, 3223,   86,
-     3219,   86,   86,   86, 3216, 3217, 3227,   86, 3230, 3220,
-     3222, 3226, 3228,   86,   86, 3224,   86, 3225, 3229,   86,
-     3221, 3232, 3233,   86, 3234,   86, 3235,   86, 3231, 3236,
-       86,   86,   86, 3239,   86,   86, 3241,   86,   86,   86,
-     3240, 3242,   86,   86, 3237,   86,   86,   86, 3248, 3249,
-
-       86,   86,   86, 3243,   86,   86,   86,   86, 3238,   86,
-     3244, 3255,   86,   86, 3246, 3245, 3254,   86, 3247, 3252,
-     3258, 3251, 3256,   86, 3253, 3260,   86, 3250,   86, 3259,
-       86, 3257,   86, 3261, 3263,   86, 3264,   86, 3262,   86,
-       86, 3267, 3268,   86, 3265,   86, 3266,   86, 3269, 3270,
-       86,   86,   86,   86,   86,   86, 3271, 3272,   86, 3273,
-     3276,   86,   86, 3274, 3277, 3275, 3279, 3278,   86,   86,
-       86,   86,   86,   86,   86,   86, 3288,   86, 3291,   86,
-     3289, 3280,   86, 3557,   86,   86, 3284, 3292, 3281, 3282,
-     3283, 3285, 3286,   86, 3287,   86, 3294, 3290, 3295, 3293,
-
-     3296,   86, 3297,   86,   86, 3299,   86,   86, 3298, 3302,
-       86,   86, 3300, 3414, 3301, 3303,   86, 3304, 3305,   86,
-       86, 3306, 3307, 3311,   86, 3308,   86, 3309, 3310,   86,
-       86,   86, 3314,   86, 3312,   86,   86,   86, 3317,   86,
-     3313,   86,   86, 3321,   86,   86,   86, 3320,   86,   86,
-     3316,   86,   86, 3315,   86, 3324, 3325,   86, 3326, 3318,
-       86, 3319, 3329, 3330,   86, 3322, 3327,   86, 3332, 3331,
-       86, 3323, 3328, 3333,   86, 3334,   86,   86,   86,   86,
-     3341,   86, 3336, 3339,   86, 3335,   86, 3337, 3340,   86,
-     3338,   86,   86,   86, 3348,   86, 3343, 3345, 3346,   86,
-
-     3349,   86, 3351,   86, 3342, 3344,   86, 3350, 3352,   86,
-     3347,   86, 3355,   86, 3353,   86, 3354, 3356,   86, 3358,
-       86, 3359,   86,   86, 3357, 3360,   86, 3361,   86, 3362,
-       86, 3363,   86, 3364,   86, 3365,   86,   86, 3368,   86,
-     3369,   86,   86,   86,   86,   86, 3367, 3373,   86, 3366,
-       86, 3370, 3375,   86,   86, 3371,   86,   86, 3379,   86,
-     3376, 3380,   86,   86, 3372, 3382,   86, 3377, 3378, 3374,
-       86,   86,   86, 3384, 3381,   86, 3386,   86, 3389,   86,
-     3388, 3383,   86,   86,   86,   86,   86, 3391,   86,   86,
-     3387,   86, 3395, 3390,   86, 3397,   86, 3385, 3396,   86,
-
-       86,   86, 3392, 3393, 3394, 3400,   86,   86,   86, 3398,
-     3401,   86, 3402, 3403,   86, 3404,   86, 3405,   86,   86,
-     3407,   86, 3399, 3408, 3406,   86, 3409,   86,   86,   86,
-     3416, 3411, 3413,   86,   86, 3410, 3412,   86,   86,   86,
-       86,   86,   86, 3415,   86,   86, 3417, 3425,   86, 3423,
-     3428,   86,   86, 3418, 3420, 3419, 3422, 3424,   86,   86,
-     3557,   86,   86, 3427, 3421, 3426, 3430,   86, 3429, 3433,
-       86, 3434, 3432, 3431, 3435,   86,   86, 3436, 3437,   86,
-     3438,   86,   86,   86,   86,   86, 3439, 3441, 3442,   86,
-     3443,   86, 3446,   86,   86,   86,   86,   86,   86, 3449,
-
-     3450,   86, 3440, 3452,   86,   86, 3445, 3447, 3448, 3453,
-       86,   86, 3454,   86, 3444, 3451, 3456,   86, 3459,   86,
-       86, 3460,   86,   86, 3455,   86, 3457, 3463, 3464,   86,
-     3461, 3458,   86,   86,   86,   86, 3469,   86,   86, 3465,
-     3468,   86, 3462, 3470,   86, 3466,   86,   86, 3467,   86,
-       86, 3474,   86,   86,   86, 3476,   86,   86,   86, 3471,
-     3473, 3472, 3481, 3482, 3483,   86, 3478, 3479,   86, 3475,
-       86, 3477,   86, 3487,   86, 3480,   86, 3489,   86, 3490,
-       86, 3488,   86,   86,   86, 3491,   86, 3492, 3484, 3486,
-     3485, 3493, 3495, 3496,   86,   86, 3498,   86,   86,   86,
-
-     3497,   86,   86, 3494,   86, 3499,   86, 3504,   86, 3501,
-       86,   86,   86,   86,   86, 3507, 3508,   86, 3500, 3509,
-       86,   86, 3510, 3502, 3506, 3503, 3511, 3505,   86,   86,
-     3515, 3512,   86,   86,   86,   86, 3519, 3516,   86, 3513,
-       86, 3514,   86, 3521,   86, 3522, 3517,   86,   86, 3526,
-       86,   86, 3523, 3529,   86, 3524, 3527, 3520,   86, 3525,
-     3518,   86,   86, 3528,   86, 3530,   86,   86,   86, 3531,
-       86, 3533, 3535,   86,   86, 3537,   86,   86,   86, 3538,
-       86, 3541,   86, 3532, 3542,   86, 3534, 3536,   86, 3545,
-     3546,   86,   86, 3548,   86, 3539, 3540, 3543,   86, 3547,
-
-       86, 3544, 3549,   86,   86, 3550,   86,   86, 3557, 3551,
-     3557, 3552, 3555,   86, 3556,   86, 3557, 3557, 3557, 3553,
-     3557, 3557, 3557, 3557, 3557, 3557, 3554,   47,   47,   47,
-       47,   47,   47,   47,   52,   52,   52,   52,   52,   52,
-       52,   57,   57,   57,   57,   57,   57,   57,   63,   63,
-       63,   63,   63,   63,   63,   68,   68,   68,   68,   68,
-       68,   68,   74,   74,   74,   74,   74,   74,   74,   80,
-       80,   80,   80,   80,   80,   80,   89,   89, 3557,   89,
-       89,   89,   89,  160,  160, 3557, 3557, 3557,  160,  160,
-      162,  162, 3557, 3557,  162, 3557,  162,  164, 3557, 3557,
-
-     3557, 3557, 3557,  164,  167,  167, 3557, 3557, 3557,  167,
-      167,  169, 3557, 3557, 3557, 3557, 3557,  169,  171,  171,
-     3557,  171,  171,  171,  171,  174, 3557, 3557, 3557, 3557,
-     3557,  174,  177,  177, 3557, 3557, 3557,  177,  177,   90,
-       90, 3557,   90,   90,   90,   90,   17, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557
+      192,   86,   86,  208,  186,   86,   86,   86,   86,   86,
+
+      200,  199,  193,  194,   86,  198,   86,  195,   86,  201,
+       86,  202,  246,  210,  206,  203,  204,  207,  209,   86,
+      211,  216,  212,  205,   86,  213,   86,   86,   86,  218,
+       86,  219,   86,  221,   86,   86,  227,  222,  214,  215,
+       86,  228,  226,  224,   86,   86,  217,  230,  225,   86,
+       86,  220,   86,  223,  231,  233,  234,  229,   86,   86,
+       86,   86,  232,  236,   86,  238,   86,  241,  235,  239,
+       86,   86,   86,   86,  243,   86,  237,  374,   86,   86,
+       86,  240,   86,  244,  242,  249,  252,  253,   86,  245,
+      254,  248,   86,   86,   86,  255,  250,  247,  261,  258,
+
+      251,  262,   86,   86,  260,  264,   86,   86,   86,   86,
+      259,  268,  256,   86,  265,  257,   86,   86,  263,  267,
+      269,  271,  160,  160,   86,  162,  266,  270,  162,  274,
+      164,  272,  164,  164,  340,  164,  167,  167,  169,   86,
+      169,  169,   90,  169,   90,   90,  170,   90,  174,  273,
+      174,  174,  275,  174,  172,  177,  177,  277,   86,   86,
+       86,   86,   86,   86,   86,   86,   86,  276,  279,   86,
+      282,  285,  281,   86,  278,  280,   86,  288,  287,  284,
+      178,  291,  283,   86,  289,  286,   86,  292,  293,   86,
+      294,  320,   86,  297,   86,  295,   86,  302,  298,   86,
+
+      304,   86,   86,  299,   86,  305,   86,  307,   86,  300,
+      301,  303,  296,  308,   86,  311,  309,   86,   86,   86,
+      306,   86,  313,   86,  314,   86,   86,   86,  176,   86,
+       86,   86,  321,  315,  310,  322,  328,  316,  318,   86,
+      317,  319,   86,  323,  312,  331,  324,   86,  325,  329,
+      335,   86,   86,  332,   86,  330,   86,  333,  337,  338,
+      326,  376,  327,   86,   86,   86,  341,  336,   86,  334,
+      343,   86,   86,  342,  339,  344,   86,  345,   86,   86,
+      346,  348,   86,   86,   86,  347,   86,   86,  350,   86,
+       86,   86,  349,   86,   86,  352,  357,   86,  355,  353,
+
+       86,   86,   86,  358,  351,  362,  356,  364,  354,   86,
+      363,   86,  359,   86,   86,   86,  360,  366,  368,  371,
+       86,  361,   86,   86,   86,   86,  377,  365,  373,  378,
+       86,  380,   86,  369,  370,   86,  367,   86,   86,   86,
+      372,  375,   86,  383,  384,   86,  385,  170,  387,  379,
+      381,   86,   86,  382,   86,   86,   86,  388,   86,  392,
+       86,   86,   86,  391,   86,   86,  398,  396,  394,  399,
+      386,  395,   86,   86,  389,   86,   86,  402,  400,  390,
+      393,  401,   86,   86,   86,   86,   86,  397,   86,  409,
+      408,   86,   86,  412,  410,   86,  407,  403,  404,   86,
+
+      406,  411,  413,  405,   86,   86,   86,  415,   86,  416,
+       86,   86,   86,   86,  419,   86,   86,  420,   86,   86,
+       86,  431,  414,  424,  421,  422,  417,  418,  426,   86,
+       86,   86,  427,  425,   86,  428,   86,  423,   86,  433,
+      429,   86,  434,  432,   86,   86,   86,   86,   86,   86,
+      440,  436,   86,   86,   86,  441,   86,  430,  443,  439,
+       86,   86,  437,   86,  446,   86,   86,  435,  438,  448,
+      451,  442,   86,   86,   86,  444,   86,  450,  445,  447,
+       86,   86,  460,  452,  453,   86,  449,   86,   86,   86,
+      462,  467,  461,  175,  468,   86,  454,  472,  463,  455,
+
+      464,  469,  473,   86,  456,  457,  458,  459,   86,   86,
+      470,  471,  474,  465,  475,   86,  466,   86,   86,   86,
+       86,   86,   86,  484,   86,   86,   86,  486,  482,   86,
+      485,  483,   86,  478,  476,  479,   86,  477,  480,  481,
+       86,  487,   86,   86,  488,   86,  494,  489,  490,   86,
+       86,  491,   86,   86,  495,  500,  496,   86,  501,   86,
+      493,   86,  502,  492,   86,  497,   86,   86,  512,  499,
+       86,  503,  498,  505,  514,  506,   86,  504,  971,  508,
+       86,  507,   86,  513,  515,   86,   86,   86,   86,   86,
+       86,  516,  509,   86,  170,  510,  530,  511,   86,  517,
+
+       86,  518,  532,   86,  533,  546,   86,  519,  529,  535,
+       86,  520,  573,   86,  531,  552,  521,  534,   86,  522,
+       86,  523,  547,  524,  537,  536,  548,   86,   86,   86,
+       86,  549,   86,  550,   86,   86,  525,  553,  555,  526,
+      551,  527,  557,  528,   86,  554,  538,  539,   86,   86,
+       86,   86,   86,  556,  558,  559,  540,  541,  542,  543,
+      544,  561,   86,  545,  560,   86,  567,   86,   86,  565,
+      563,  562,  566,  568,  570,   86,  571,  569,   86,   86,
+       86,  575,   86,   86,   86,   86,   86,   86,  564,  578,
+       86,  579,  580,  574,   86,   86,   86,  170,  572,  577,
+
+      590,   86,  582,  585,   86,  581,  583,  576,   86,  584,
+       86,  593,   86,  586,  587,  588,   86,   86,   86,   86,
+      591,   86,   86,  594,  609,   86,  168,  599,  600,   86,
+       86,  598,  589,  595,  610,  592,   86,  596,   86,  601,
+      597,  602,   86,  611,   86,  613,  614,  603,  612,   86,
+      615,   86,   86,  617,   86,  604,  605,  616,   86,  606,
+      607,  618,   86,  608,   86,  621,   86,  619,  623,   86,
+       86,   86,   86,  626,  620,  624,  627,   86,   86,  622,
+       86,  628,   86,   86,  625,   86,   86,  633,  631,   86,
+      632,   86,   86,  629,   86,  634,   86,   86,   86,  639,
+
+       86,  630,  640,  635,  641,   86,  638,   86,  643,  636,
+      637,   86,   86,  646,   86,   86,  644,  642,   86,  645,
+       86,  648,   86,  650,   86,   86,   86,   86,   86,   86,
+       86,  654,  662,  652,   86,   86,  647,   86,   86,  649,
+      656,   86,   86,  651,  663,  682,  653,  655,  657,  660,
+      658,  661,  659,  664,   86,   86,  666,   86,   86,   86,
+      665,  669,  667,   86,   86,  668,  673,   86,   86,  676,
+       86,  670,   86,  672,   86,   86,   86,  675,  671,   86,
+       86,  679,  678,   86,   86,  683,   86,  674,   86,  685,
+       86,   86,  680,  677,   86,   86,   86,   86,  684,   86,
+
+      681,  700,  686,  688,   86,  712,  166,  687,   86,  689,
+      699,  697,   86,   86,  690,  698,  691,  702,  701,   86,
+      703,   86,  692,  704,  693,   86,  705,  694,  695,  710,
+      706,   86,  711,  713,  696,   86,  708,   86,   86,   86,
+      707,  717,   86,   86,  714,   86,  720,   86,   86,  722,
+      715,   86,   86,  716,   86,   86,  709,   86,  726,   86,
+       86,   86,   86,  719,  724,  718,  723,  729,   86,  725,
+      730,   86,  721,   86,  727,   86,   86,  733,   86,  731,
+      735,  728,  734,  732,  170,  737,   86,  738,  736,   86,
+       86,   86,   86,  739,   86,   86,   86,  746,  744,   86,
+
+      749,   86,   86,  741,   86,  740,  750,  742,  743,  745,
+      748,  752,   86,   86,   86,   86,  751,   86,  754,   86,
+       86,   86,   86,  747,   86,  753,  757,  758,  755,  759,
+       86,  766,   86,   86,  756,  763,  760,   86,  762,  761,
+      764,   86,  768,  765,  767,   86,  769,   86,   86,  770,
+       86,  771,   86,  772,  775,  774,   86,   86,  773,   86,
+       86,  778,   86,  777,  776,   86,   86,   86,   86,  781,
+       86,   86,  782,  780,  786,  785,   86,   86,   86,   86,
+       86,  779,  788,   86,  790,   86,  792,   86,   86,  784,
+       86,  783,   86,   86,   86,  789,  787,  791,  795,  799,
+
+      165,   86,  793,   86,   86,   86,  797,   86,  800,  794,
+       86,  796,   86,  802,  798,  801,   86,  807,  803,   86,
+      809,  804,  805,   86,  810,  806,   86,   86,  811,  814,
+      808,   86,   86,   86,  816,   86,   86,  817,   86,  820,
+      812,  815,  813,  819,   86,   86,   86,   86,   86,  821,
+       86,   86,   86,  826,  824,  828,   86,   86,   86,  818,
+       86,  822,  835,  825,  823,   86,  829,   86,   86,   86,
+       86,  827,  163,  831,  833,  836,  832,  830,   86,  834,
+       86,  837,  838,  839,   86,   86,   86,  840,  842,   86,
+       86,  841,   86,  847,  843,  845,   86,   86,  849,   86,
+
+      850,  848,   86,  844,   86,   86,   86,  853,   86,   86,
+      852,  846,  854,   86,  857,   86,  860,   86,   86,  855,
+       86,  856,   86,  863,   86,  865,  862,  851,  858,  859,
+       86,   86,   86,  870,  861,  868,   86,  866,  867,   86,
+      864,   86,   86,  876,   86,   86,  872,  874,  871,   86,
+      869,  878,  875,   86,   86,   86,  873,  880,   86,   86,
+       86,   86,  886,   86,  879,   86,   86,  887,   86,  877,
+       86,   86,  881,   86,  888,   86,  882,  883,  893,  884,
+       86,  885,  896,   86,  891,  889,  890,  894,   86,   86,
+       86,   86,  892,   86,   86,  895,   86,   86,   86,   86,
+
+      903,  899,   86,  897,  898,   86,   86,   86,   86,   86,
+      900,  934,   86,  902,  901,  904,  906,  911,  905,   86,
+      913,   86,  912,  907,  908,  909,  910,   86,  916,   86,
+       86,  914,   86,   86,   86,  915,   86,  919,   86,   86,
+      917,   86,   86,  923,  918,   86,  924,  927,   86,  920,
+       86,  922,  925,  921,   86,  928,   86,   86,   86,  170,
+       86,  930,  935,  926,  936,  931,  929,  933,   86,   86,
+       86,  932,  937,   86,  938,   86,   86,   86,   86,  944,
+       86,  943,  947,   86,  940,   86,  945,  939,   86,   86,
+       86,  941,  942,  948,  946,  951,  950,   86,  949,   86,
+
+       86,   86,   86,  953,   86,  957,   86,   86,   86,  954,
+      952,   86,  958,  959,   86,   86,   86,   86,   86,   86,
+      956,   86,  973,   86, 1006,  955,  960,  972,  976,  975,
+      970,  161,  961,   86,  962,   86,   86,  963,   86,  974,
+      964,   86,  978,   86,  965,   86,  979,  966,   86,  977,
+       86,  980,  981,  985,  967,  968,  984,  969,   86,   86,
+       86,  982,  983,   86,  986,  987,   86,  988,   86,   86,
+      989,  994,   86,   86,   86,  990,  997,  999,  993, 1001,
+       86,  991,  992,   86,  998,   86,   86,  996, 1003,  995,
+     1007,   86,   86, 1000,   86, 1008,   86, 1015, 1009, 1002,
+
+     1004,   86, 1010,   86,   86, 1013,   86, 1011, 1012,   86,
+       86, 1005, 1017,   86, 1014, 1016,   86,   86, 1018,   86,
+       86,   86,   86, 1021,   86, 1020,   86, 1025,   86, 1019,
+       86, 1028, 1024,   86,   86,   86, 1026, 1032,   86,   86,
+     1022, 1023, 1027,   86, 1033,   86, 1030, 1034,   86, 1035,
+     1037, 1029, 1038,   86, 1036,   86, 1040, 1031,   86,   86,
+     1042,   86,   86,   86, 1041,   86,   86, 1044, 1043, 1046,
+       86, 1045, 1039, 1047,   86,   86,   86,   86,   86,   86,
+       86,   86, 1050, 1048, 1051, 1052,   86, 1056,   86,   86,
+     1060,   86, 1059,   86, 1049,   86,   86, 1053, 1057, 1058,
+
+     1055,   86, 1054,   86,   86,   86,   86,   86, 1067,   86,
+     1062, 1065, 1063,   86, 1061,   86, 1066,   86, 1068,   86,
+       86,   86, 1076, 1069, 1073,   86, 1071,   86, 1064, 1074,
+       86,   86, 1072,   86, 1075,   86,   86,   86, 1082, 1084,
+     1070,   86, 1077,   86, 1078, 1079, 1083, 1085,   86,   86,
+       86, 1081,   86,   86, 1087, 1080,   86,   86,   86,   86,
+       86,   86, 1086, 1095, 1088, 1098, 1093,   86,   86,   86,
+     1089,   86, 1090,   86,   86, 1091, 1092, 1099, 1096, 1100,
+     1097, 1094,   86,   86,   86, 1101,   86,   86, 1103, 1104,
+     1105, 1107, 1102, 1108,   86,   86,   86,   86, 1106,   86,
+
+       86,   86,   86, 1119,   86, 1111, 1109, 1113,   86,   86,
+     1120,   86, 1122,   86,   86, 1110,   86, 1112,   86,   86,
+     1114, 1116,   86, 1115, 1117, 1121, 1125, 1123, 1118, 1126,
+       86,   86,   86,   86, 1124,   86, 1131, 1127, 1128,   86,
+     1133, 1134, 1129, 1132,   86, 1135,   86,   86,   86, 1136,
+     1130,   86, 1139,   86, 1141,   86,   86,   86,   86,   86,
+       86, 1138, 1137, 1144, 1143, 1147,   86, 1151,   86,   86,
+     1148,  170, 1149, 1140, 1142,   86, 1145,   86, 1146, 1150,
+       86,   86, 1154,   86,   86,   86,   86,   86, 1167, 1153,
+     1152,   86, 1170,   86,   86, 1168,   86, 1157, 1158, 1155,
+
+       86,   86,   86,   86, 1159, 1156, 1172, 1160,   86, 1169,
+     1179, 1161,   86, 1162,   86, 1173, 1236, 1163,   86, 1164,
+       86, 1171,   86, 1175, 1165, 1177, 1174,   86, 1176, 1166,
+     1178,   86,   86,   86, 1180,   86, 1181, 1183, 1187, 1186,
+     1184,   86,   86,   86,   86,   86,   86,  178, 1182,   86,
+     1185, 1192,   86, 1191, 1194, 1188, 1195, 1190, 1193, 1196,
+     1197,   86,   86, 1189, 1198,   86, 1199, 1200,   86,   86,
+       86,   86,   86,   86,   86,   86, 1214,   86, 1211,   86,
+       86,   86,   86, 1210, 1215,   86, 1213, 1201, 1202,   86,
+     1203, 1212,   86, 1216,   86, 1204, 1217, 1205, 1222,   86,
+
+     1219, 1220,   86, 1206,   86,   86, 1218, 1223, 1207, 1208,
+     1221, 1224,   86,   86,   86, 1209, 1229,   86,   86,   86,
+     1232,   86, 1230, 1225, 1233,   86,   86, 1237, 1226,   86,
+       86, 1227, 1228,   86, 1235, 1238,   86,   86,   86, 1231,
+       86,   86, 1243,   86, 1234,   86, 1240, 1241,   86,   86,
+     1244,   86,   86,   86, 1246, 1239, 1242,   86,   86,   86,
+       86,   86, 1245,   86,   86, 1247, 1248, 1251, 1252, 1250,
+     1253, 1249, 1255, 1258,   86, 1257,   86, 1254,   86, 1256,
+       86, 1259,   86,   86,   86,   86,   86,   86,  176, 1264,
+     1265, 1266,   86, 1260, 1261,   86, 1267, 1269, 1263, 1270,
+
+     1262,   86, 1268,   86, 1271,   86,   86, 1272,   86, 1275,
+       86,   86,   86, 1277, 1276,   86, 1278,   86,   86, 1273,
+     1279,   86,   86,   86, 1274, 1280, 1286,   86,   86,   86,
+     1281, 1288,   86,  175, 1282, 1284,   86,   86, 1285, 1283,
+       86, 1290,   86, 1289,   86, 1292,   86, 1287,   86, 1293,
+     1294,   86,   86, 1295, 1291,   86, 1296,   86, 1297,   86,
+     1299, 1298, 1300,   86,   86,   86,   86, 1305,   86, 1302,
+       86, 1301, 1304,   86, 1306,   86,   86, 1307,   86, 1309,
+     1303,   86, 1310, 1308,   86,   86,   86, 1316, 1311, 1314,
+     1317, 1351,   86,   86, 1318,   86,   86, 1312, 1315, 1321,
+
+       86,   86,   86,   86, 1313,   86, 1319, 1320, 1322, 1323,
+     1325,   86,   86, 1327,   86,   86, 1324,   86,   86,   86,
+     1329,   86, 1328, 1330,   86,   86,   86, 1331,   86, 1332,
+       86, 1335, 1326, 1336,   86,   86,   86,   86,   86, 1338,
+       86, 1342, 1343, 1333,   86, 1334, 1337,   86,   86, 1340,
+       86,   86, 1346,   86, 1339, 1344, 1345, 1341,   86,   86,
+       86,   86,   86, 1347, 1348,   86,   86, 1357,   86,   86,
+     1349, 1353,  170,   86, 1359,   86,   86, 1350, 1352,   86,
+     1354, 1358,   86,   86, 1360, 1356,   86,   86, 1365, 1362,
+     1355, 1363, 1361, 1369, 1364, 1366, 1367,   86, 1370,   86,
+
+       86,   86,   86,   86,   86, 1373, 1372, 1368,   86,   86,
+       86,   86,   86, 1374,   86,   86, 1371, 1377,   86, 1383,
+       86, 1379, 1380, 1375, 1376,   86, 1378,   86,   86, 1381,
+       86,   86,  170,   86,   86, 1394, 1387, 1382, 1389, 1384,
+       86,   86,   86, 1386, 1393, 1385, 1395, 1390,   86, 1391,
+       86, 1388, 1392, 1396,   86, 1397, 1398,   86,   86,   86,
+     1399,   86,   86,   86, 1406,   86, 1403,   86, 1402, 1400,
+       86,   86, 1407,   86,   86, 1405, 1401, 1411,   86, 1408,
+       86, 1404, 1409,   86,   86, 1412,   86,   86, 1413, 1415,
+     1416,   86, 1410,   86, 1414,   86, 1417,   86,   86,   86,
+
+     1421,   86,   86,   86,   86,  168, 1418,   86, 1419, 1422,
+     1424, 1425,   86, 1423, 1420,   86,   86,   86, 1429, 1431,
+     1426,   86, 1428, 1427,   86,   86, 1434, 1432,   86,   86,
+     1430,   86, 1441,   86,   86,   86, 1433, 1443,   86, 1435,
+     1436, 1437,   86,   86,   86,   86,   86, 1438, 1440,   86,
+     1444, 1449,   86, 1446, 1442, 1451, 1439,   86, 1445,   86,
+     1452,   86, 1447,   86, 1450, 1448,   86,   86, 1456,   86,
+      166, 1466, 1465, 1454,   86, 1467, 1453,   86,   86, 1455,
+       86, 1457, 1464, 1468, 1470, 1458,   86,   86, 1459, 1460,
+       86,   86, 1471, 1461,   86, 1469, 1472,   86, 1473, 1462,
+
+       86, 1475,   86, 1463,   86, 1476, 1480, 1477,   86,   86,
+       86,   86,   86,   86,   86, 1474, 1483, 1486, 1481, 1487,
+       86,   86, 1531,   86, 1478,   86, 1479, 1484,   86,   86,
+     1482,   86, 1485, 1488, 1490, 1489,   86,   86, 1491,   86,
+     1498, 1496,   86, 1492,   86, 1493,   86, 1494, 1502, 1495,
+       86, 1497, 1499, 1500,   86,   86, 1506, 1501,   86,   86,
+     1504, 1507,   86, 1505,   86, 1503,   86, 1508,   86, 1510,
+       86,   86,   86, 1516,   86, 1517,   86, 1512,   86,   86,
+     1511, 1509,   86,   86,   86,   86, 1515, 1521, 1518, 1513,
+     1514, 1519, 1520,   86, 1523,   86,   86,   86, 1522,   86,
+
+     1524,   86, 1527, 1528,   86, 1530,   86,   86,   86,   86,
+     1532,   86,   86, 1525, 1529,   86, 1533, 1535, 1536,   86,
+     1534, 1526, 1538,   86,   86, 1539,   86,   86,   86, 1537,
+       86, 1540,   86, 1541, 1544,   86, 1542,   86, 1549,   86,
+     1547,   86,   86,   86,   86, 1546, 1550,   86, 1543, 1552,
+     1545, 1551, 1548,   86,   86,   86, 1554, 1553, 1555,   86,
+     1557,   86,   86,   86,   86, 1564, 1559, 1556, 1561,   86,
+     1560,   86, 1562, 1558,   86,   86, 1563,   86,   86, 1565,
+     1570,   86, 1571, 1567,   86, 1568,   86,   86,   86, 1572,
+     1574,   86, 1573, 1566, 1569,   86,   86,   86, 1578,   86,
+
+     1575,   86,   86,   86,   86,  170,   86, 1580, 1577,   86,
+     1586, 1587,   86, 1582, 1576,   86,   86,   86, 1588, 1589,
+     1583, 1579, 1581,   86,   86,   86, 1584,   86,   86, 1590,
+       86,   86, 1585,   86, 1597, 1591,   86,   86,   86, 1594,
+       86,   86, 1595, 1592, 1593, 1601, 1602,   86, 1596,   86,
+       86, 1598,   86, 1606, 1604, 1600,   86, 1605, 1607,   86,
+     1610, 1599,   86,   86, 1603, 1609,   86,   86, 1608,   86,
+       86, 1618, 1615,   86, 1620, 1616, 1611,   86, 1612, 1617,
+       86, 1613,   86,   86, 1614, 1623, 1621, 1619, 1622,   86,
+     1624,   86,   86,   86,   86,   86,   86,   86, 1628, 1629,
+
+     1630,   86, 1625,   86,   86,   86, 1633,   86,   86, 1639,
+     1627,   86, 1638,   86, 1631, 1626,   86, 1632, 1635,   86,
+       86, 1642,   86, 1634,   86, 1636, 1637,   86,   86,   86,
+       86, 1640, 1643, 1646,   86, 1641,   86,   86, 1644, 1650,
+       86,   86, 1652, 1645, 1647, 1648,   86, 1649, 1651,   86,
+     1656,   86,   86,   86, 1653, 1655,   86, 1660, 1661, 1662,
+       86, 1654, 1658,   86,   86,   86, 1657,   86, 1664, 1665,
+       86,   86, 1659,   86, 1663,   86, 1670, 1666, 1671, 1667,
+     1669, 1672,   86,   86,   86,   86, 1673,   86,   86, 1674,
+     1675,   86,   86,   86, 1668,   86, 1676,   86,   86,   86,
+
+       86, 1678, 1677,   86, 1683,   86, 1682, 1679,   86,   86,
+     1686, 1680,   86, 1681,   86,  165, 1685,   86, 1694, 1689,
+     1684, 1691,   86, 1687, 1690,   86, 1692,   86,   86,   86,
+       86, 1688,   86,   86, 1693, 1698,   86, 1702, 1697,   86,
+       86, 1695,   86,   86, 1703,   86, 1706, 1696,   86,   86,
+     1709, 1699,   86, 1700, 1701, 1708,   86,   86,   86,   86,
+     1704,   86,   86,   86, 1707,   86,   86, 1710, 1705,   86,
+     1718,   86,   86,   86, 1719,  163, 1711, 1712, 1713, 1715,
+     1714, 1717, 1720, 1716,   86, 1722, 1723,   86, 1724,   86,
+       86, 1721,   86,   86,   86, 1725, 1726, 1727,   86,   86,
+
+     1730,   86, 1728,   86, 1731,   86,   86, 1729, 1734, 1738,
+       86,   86, 1740,   86, 1735, 1743, 1739, 1732,   86, 1733,
+       86,   86, 1737,   86,   86, 1736,   86, 1745, 1741, 1744,
+     1746,   86,   86, 1742,   86,   86, 1751, 1752,   86,   86,
+       86,   86,   86, 1749,   86, 1756, 1755, 1757,   86,   86,
+     1748, 1747, 1760,   86,   86, 1750,   86, 1753, 1759,   86,
+       86, 1754, 1761,   86,   86,   86,   86, 1765, 1758,   86,
+     1762,   86, 1763,   86, 1770, 1768, 1764,   86,   86,   86,
+       86,   86, 1776,   86, 1777, 1774, 1766,   86,   86, 1767,
+       86, 1769, 1771,   86,   86, 1775, 1778,   86, 1773, 1772,
+
+       86, 1783,   86,   86,   86,   86, 1788,   86, 1779, 1780,
+     1786,   86,   86,   86, 1791, 1789, 1784, 1782, 1781, 1787,
+       86, 1785,   86,   86,   86,   86,   86,   86, 1795, 1798,
+       86, 1797, 1790,   86, 1794,  170, 1799,   86,   86,   86,
+     1800, 1793, 1792, 1801, 1796,   86,   86,   86,   86, 1809,
+       86, 1802,   86, 1804,   86, 1803,   86, 1810, 1813,   86,
+     1807, 1815,   86,   86, 1805, 1806,   86,   86, 1817, 1819,
+     1811, 1814, 1808,   86, 1812,   86, 1821,   86, 1818, 1823,
+       86,   86,   86, 1816,   86,   86,   86, 1820,   86,   86,
+     1825, 1822,   86, 1826,   86, 1828,   86, 1829,   86,   86,
+
+     1824, 1833,   86, 1830, 1831,   86, 1834, 1832,   86, 1827,
+     1841,   86,   86,   86, 1836, 1838,   86, 1835, 1839,   86,
+       86,   86, 1845, 1843, 1842,   86, 1846,   86, 1837,   86,
+     1840, 1851, 1848, 1849,   86, 1852, 1847,   86,   86, 1844,
+     1858,   86, 1856, 1853,   86, 1854,   86, 1855,   86, 1850,
+       86,   86,   86,   86,   86, 1857, 1863, 1862, 1864, 1865,
+       86,   86,   86,   86,   86,   86, 1866,   86, 1867, 1859,
+       86, 1860, 1869, 1861,   86, 1870,   86,   86,   86,   86,
+       86, 1872, 1871, 1868,   86,   86,   86,   86,   86,   86,
+     1873, 1882, 1881,   86, 1876,   86,   86, 1874, 1877, 1875,
+
+     1878,   86,   86, 1879,   86, 1885,   86, 1888, 1884, 1887,
+       86,   86, 1880,   86, 1883,   86, 1886, 1894,   86,   86,
+     1892,   86, 1889,   86,   86, 1898, 1890,   86, 1896,   86,
+       86, 1891,   86, 1897,   86,   86, 1893,   86,   86, 1895,
+       86,   86, 1899, 1900, 1903, 1905,   86,  161,   86, 1904,
+     1902, 1912,   86, 1908, 1901, 1906, 1909,   86, 1907, 1913,
+       86, 1910, 1914,   86, 1915, 1911,   86, 1918,   86, 1917,
+       86,   86,   86,   86,   86, 1916, 1922, 1921,   86, 1923,
+       86,   86,   86, 1919,   86,   86,   86,   86, 1931,   86,
+     1920, 1926, 1933, 1930,   86, 1928, 1925, 1924, 1929,   86,
+
+     1927, 1932,   86,   86,   86, 1938,   86, 1934, 1939,   86,
+       86, 1941, 1935, 1940,   86,   86,   86, 1945, 1937,   86,
+       86, 1936, 1942,   86, 1948,   86, 1950,   86, 1949, 1947,
+       86,   86,   86, 1944, 1943, 1946, 1952, 1954,   86, 1953,
+     1951, 1958,   86,   86,   86,   86, 1959,   86, 1955,   86,
+     1963,   86, 1956,   86, 1965,   86, 1957, 1960, 1969, 1961,
+       86, 1967,   86, 1964, 1962, 1968,   86, 1971,   86, 1966,
+       86,   86, 1975,   86, 1972, 1973,   86, 1979,   86,   86,
+     1970,   86, 1977,   86, 1974,   86,   86,   86, 1978, 1976,
+       86,   86,   86, 1980,   86,   86, 1985,   86, 1984,   86,
+
+     1981, 1986,   86,   86, 1988, 1982, 1983, 1987, 1992,   86,
+     1989, 1994, 1995, 1990,   86,   86, 1991,   86,   86,   86,
+     1998,   86, 1996, 1999,   86, 2002,   86, 1997,   86, 2004,
+     1993,   86,   86, 2000,   86,   86, 2008,   86,   86,   86,
+       86, 2003,   86, 2001, 2010,   86,   86, 2011, 2006,   86,
+     2013, 2014, 2007, 2005,   86,   86,   86,   86, 2009, 2012,
+     2019,  170,   86, 2015,   86, 2018, 2017, 2022,   86,   86,
+       86,   86, 2016, 2020, 2026,   86,   86, 2021,   86,   86,
+       86, 2024,   86, 2023,   86, 2027, 2028, 2033, 2029, 2025,
+     2030,   86,   86,   86, 2037,   86, 2034,   86, 2036, 2031,
+
+     2038,   86, 2032, 2039,   86,   86, 2040, 2042,   86, 2035,
+     2043,   86,   86,   86, 2041,   86,   86, 2045,   86, 2046,
+     2044,   86,   86,   86,   86,   86,   86, 2051,   86, 2052,
+       86,   86, 2047,   86, 2053, 2056,   86,   86, 2054, 2049,
+     2048, 2050, 2057, 2055,   86,   86, 2064,   86, 2065, 2060,
+     2062, 2059, 2063,   86,   86, 2058, 2061, 2066,   86,   86,
+       86,   86,   86,   86, 2072,   86,   86,   86, 2075, 2067,
+     2076,   86, 2077,   86, 2079,   86, 2070, 2068, 2069,   86,
+     2073, 2071, 2074, 2078,   86, 2080, 2081,   86, 2084,   86,
+       86, 2086,   86, 2088, 2085, 2087,   86,   86, 2090,   86,
+
+     2082,   86,   86,   86,   86,   86, 2091,   86, 2083,   86,
+     2093, 2094,   86,   86, 2089, 2097,   86,   86, 2096,   86,
+     2098,   86, 2100, 2095, 2101,   86, 2102, 2092,   86, 2104,
+     2099,   86, 2112, 2103,   86,   86,   86,   86,   86,   86,
+       86, 2109, 2114, 2105, 2106, 2107,   86, 2115,   86,   86,
+     2108, 2118, 2110, 2116,   86, 2117, 2111, 2113, 2121,   86,
+       86, 2120,   86,   86,   86, 2119, 2125,   86, 2122,   86,
+     2127,   86,   86,   86, 2130, 2131,   86,   86, 2133,   86,
+     2123,   86,   86, 2124,   86,   86,   86, 2140,   86, 2126,
+     2138, 2128,   86, 2135, 2129, 2136,   86, 2132,   86,   86,
+
+       86, 2139,   86, 2137,   86, 2143, 2134,   86, 2146, 2144,
+       86, 2149, 2151, 2141, 2142,   86,   86,   86,   86, 2154,
+     2150,   86,   86, 2155,   86,   86, 2148, 2157, 2145, 2153,
+     2147, 2158,   86,   86,   86,   86, 2152,   86,   86, 2159,
+       86, 2163,   86, 2156, 2160,   86,   86,   86, 2165,   86,
+     2168,   86, 2169,   86, 2164, 2170,   86, 2161,   86, 2162,
+     2173,   86,   86,   86, 2166,   86, 2178,   86, 2172,   86,
+     2177, 2171,   86, 2167,   86,   86, 2174,   86,   86, 2184,
+       86, 2183, 2175,   86,   86, 2176, 2185, 2187,   86, 2181,
+       86, 2180, 2186, 2179, 2182,   86, 2191,   86,   86, 2188,
+
+       86, 2189,   86,   86,   86, 2192, 2190, 2195,   86, 2199,
+       86,   86, 2193,   86,   86,   86, 2204,   86, 2202, 2194,
+       86, 2205,   86, 2196, 2197, 2201, 2206, 2203, 2198, 2200,
+       86,   86,   86,   86, 2212,   86, 2213,   86, 2211, 2207,
+     2214,   86, 2208, 2216, 2217, 2215,   86, 2209,   86,   86,
+       86,   86, 2210, 2219, 2221,   86,   86,   86,   86, 2223,
+       86,   86, 2225, 2220, 2227,   86, 2229, 2218, 2222, 2224,
+       86,   86,   86, 2230,   86,   86,  170,   86,   86,   86,
+       86, 2233, 2243, 2226,   86, 2237,   86, 2228,   86, 2234,
+     2231, 2235, 2244,   86,   86, 2232, 2238, 2236,   86, 2239,
+
+     2240,   86, 2241,   86, 2242,   86,   86,   86,   86,   86,
+     2245,   86, 2246, 2248, 2249,   86, 2247,   86, 2251,   86,
+       86, 2250, 2255,   86,   86, 2254,   86, 2252,   86,   86,
+       86, 2253,   86, 2256, 2257, 2258,   86, 2260,   86, 2259,
+       86, 2262,   86, 2267,   86,   86, 2261, 2264, 2265,   86,
+     2266,   86,   86,   86,   86, 2272,   86,   86, 2263,   86,
+     2268, 2269,   86,   86, 2278,   86, 2273, 2271, 2275, 2270,
+       86, 2276,   86,   86, 2274,   86,   86, 2277, 2282, 2279,
+     2284,   86,   86,   86, 2280, 2285, 2281,   86, 2283,   86,
+     2291,   86, 2286,   86,   86, 2293,   86,   86,   86, 2287,
+
+     2294, 2296,   86, 2288, 2289, 2290,   86, 2298,   86,   86,
+     2292,   86, 2299,   86, 2297, 2295, 2302,   86,   86, 2301,
+       86,   86,   86,   86, 2307, 2304,   86,   86,   86,   86,
+       86, 2303, 2300,   86,   86, 2308,   86,   86,   86, 3592,
+     2310, 2306, 2305,   86, 2312, 2311, 2313,   86, 2309, 2316,
+       86, 2315,   86, 2317,   86, 2321, 2314, 2319, 2322,   86,
+       86, 2320,   86, 2325,   86,   86, 2318, 2326, 2323, 2328,
+       86,   86, 2324, 2329, 2327, 2331,   86,   86,   86,   86,
+       86,   86,   86, 2330, 2332, 2333, 3592,   86, 2335, 2337,
+       86, 2339, 2336,   86,   86, 2340, 2334,   86, 2342,   86,
+
+     2338,   86,   86,   86, 2341, 2345, 2344, 2346, 2343,   86,
+       86,   86, 2348, 2351, 2347,   86,   86, 2355,   86,   86,
+     2352,   86, 2356,   86,   86,   86, 2360,   86, 2349, 2353,
+     2354, 2350, 2357,   86, 2361,   86,   86,   86, 2365, 2359,
+     2358,   86,   86, 2367,   86,   86, 2362, 2366,   86, 2371,
+       86, 2363,   86,   86,   86, 2373, 2369, 2364,   86, 2374,
+       86, 2375,   86, 2368, 2370, 2372,   86, 2376,   86,   86,
+     2378, 2381,   86,   86,   86,   86, 2383, 2379, 2377,   86,
+     2380, 2384,   86, 2386,   86, 2385,   86, 2387,   86, 2389,
+       86, 2388,   86, 2382,   86, 2390, 2394,   86,   86, 2391,
+
+       86, 2393,   86,   86,   86,   86,   86,   86, 2392, 2402,
+       86,   86, 2395,   86,   86,   86, 2396, 2403, 2397, 2398,
+     2400,   86, 2401, 2404,   86,   86, 2406, 2399,   86, 2407,
+     2405, 2409,   86,   86, 2408,   86,   86, 2413, 2410, 2412,
+     2416, 2418,   86, 2414,   86, 2417,   86, 2420,   86,   86,
+       86, 2411,   86, 2415, 2423, 2419,   86, 2424,   86, 2427,
+      170, 2429, 2421,   86, 2431,   86, 2430,   86, 2422, 2425,
+       86,   86, 2432,   86, 2433, 2436,   86, 2426,   86,   86,
+     2437, 2434, 2428, 2435,   86, 2441,   86,   86, 2442,   86,
+       86, 2445,   86, 2440, 2438,   86, 2451,   86,   86, 2447,
+
+     2446, 2443, 2448,   86,   86, 2439, 2450,   86, 2444, 2449,
+       86,   86,   86,   86, 2453,   86,   86,   86,   86,   86,
+     2456,   86,   86, 2459,   86,   86, 3592, 2452, 2465,   86,
+     2463, 2454, 2458,   86,   86,   86,   86, 2460, 2455, 2457,
+     2461, 2462,   86,   86, 2464,   86, 2466,   86, 2467,   86,
+     2468,   86, 2469,   86, 2471, 2472, 2474, 2477,   86,   86,
+       86, 2470, 2475,   86,   86,   86, 2473, 2478,   86,   86,
+       86, 2476,   86,   86, 2488,   86,   86, 2493, 3592, 2479,
+       86,   86, 2480, 2481, 2486,   86,   86,   86, 2482, 2484,
+     2485, 2489, 2483, 2492, 2487, 2491, 2495,   86, 2490,   86,
+
+       86,   86,   86, 2497, 2496,   86, 2494,   86, 2501, 2502,
+       86,   86,   86, 2503, 2498,   86, 2499,   86, 2500, 2504,
+       86,   86, 2507,   86, 2508,   86, 2509, 2505, 2506, 2510,
+     2511,   86, 2512,   86,   86,   86,   86,   86,   86, 2513,
+     2514, 2518,   86, 2519,   86, 2515, 2521,   86,   86, 2517,
+     2523,   86,   86,   86, 2526,   86, 2516, 2520, 2525, 2527,
+       86,   86,   86,   86,   86,   86, 2522, 2524,   86, 2534,
+       86, 2529,   86, 2533,   86, 2528, 2536,   86, 2531,   86,
+     2530,   86,   86, 2541, 2532, 2539, 2538,   86, 2543,   86,
+     2540, 2535, 2537,   86,   86,   86,   86, 2546, 2542,   86,
+
+     2549,   86,   86,   86,   86,   86,   86, 2555,   86, 2545,
+     2554, 2547, 2544,   86,   86,   86,   86,   86, 2548, 2551,
+     2553, 2557, 2550, 2560,   86,   86, 2552,   86,   86, 2558,
+     2559,   86, 2556,   86, 2562,   86,   86, 2561,   86, 2563,
+       86, 2568,   86,   86, 2570, 2569, 2564,   86, 2566, 2565,
+     2571, 2574,   86,   86,   86, 2575,   86,   86, 2576, 2577,
+       86, 2567, 3592, 2578,   86, 2572,   86, 2573,   86, 2579,
+       86, 2581,   86, 2580,   86, 2583, 2587, 2584, 2588, 2585,
+       86, 2591,   86, 2586,   86, 2589, 2582,   86,   86,   86,
+       86,   86,   86, 2592, 2593, 2590,   86,   86,   86, 2596,
+
+       86,   86,   86,   86, 2595, 2603, 2598, 2599, 2604, 2600,
+     2601,   86, 2597,   86,   86, 2594, 2602, 2605,   86,   86,
+       86, 2609,   86, 2606, 2610,   86, 2611,   86, 2608,   86,
+       86, 2613,   86, 2614, 2612,  170,   86,   86, 2607,   86,
+     2615, 2620,   86,   86,   86, 2618, 2622, 2616,   86, 2617,
+       86,   86, 2619,   86, 2621, 2623, 2627,   86,   86,   86,
+     2624, 2634, 2626, 2625, 2628, 2631,   86,   86, 2632, 2630,
+       86, 2629, 2633,   86, 2636, 2635, 2637,   86, 2639,   86,
+       86,   86,   86,   86, 2641,   86, 2638,   86,   86,   86,
+     2645,   86, 2646,   86,   86, 2640,   86, 2642,   86, 2648,
+
+     2649, 2643, 2654,   86,   86, 2647, 2650, 2644, 2651,   86,
+       86,   86,   86, 2655,   86, 2652, 2653,   86, 2657, 2658,
+       86,   86,   86,   86,   86,   86, 2660,   86,   86,   86,
+     2659, 2665, 2656,   86, 2667, 2668,   86, 2670,   86, 2664,
+       86,   86, 2661, 2662, 2663,   86, 2669,   86, 2666,   86,
+       86, 2671, 2674, 2676,   86,   86,   86, 2672,   86, 2680,
+       86, 2679, 2677,   86, 2673,   86, 2681,   86,   86, 2682,
+     2675, 2678, 2683, 2691, 2684,   86, 2685,   86,   86,   86,
+     2686, 2687,   86, 2689,   86,   86, 2693,   86, 2690,   86,
+     2695,   86,   86,   86, 2688,   86,   86, 2692, 2694,   86,
+
+       86, 2699,   86,   86,   86, 2704,   86, 2697, 2702, 2703,
+     2696, 2698, 2705,   86, 2706,   86, 2708,   86,   86,   86,
+       86, 2701, 2707,   86, 2711, 2700,   86,   86,   86, 2713,
+       86,   86, 2719, 2709, 2716,   86, 2718, 2717,   86, 2714,
+     2710,   86, 2712, 2715,   86,   86, 2722,   86,   86,   86,
+       86, 2723,   86, 2726, 2727,   86,   86,   86,   86, 2720,
+     2721, 2728,   86, 2724,   86,   86, 2730, 2725, 2729, 2732,
+       86, 2731, 2733,   86,   86,   86, 2734,   86,   86, 2735,
+     2737, 2741,   86, 2740,   86, 2736, 2742,   86, 2743,   86,
+     2744,   86,   86,   86, 2738,   86, 2745, 2739, 2747,   86,
+
+     2748,   86, 2749,   86, 2750,   86,   86, 2751,   86,   86,
+     2746,   86, 2757,   86,   86, 2759,   86,   86, 2753, 2760,
+       86,   86, 2762,   86,   86, 2752,   86, 2756, 2754, 2763,
+     2755, 2764, 2761, 2758,   86,   86,   86,   86, 2765,   86,
+     2767, 2770,   86, 2772,   86,   86,   86,   86, 2771,   86,
+       86,   86,   86, 2779, 2766,  170, 2768, 2769,   86, 2781,
+     2775,   86,   86,   86, 2777,   86, 2774, 2780,   86,   86,
+     2782, 2773,   86, 2776, 2778, 2788,   86, 2783, 2784,   86,
+       86, 2790,   86, 2785,   86, 2791, 2792,   86, 2793,   86,
+     2786,   86, 2787, 2789,   86, 2794,   86, 2795,   86, 2796,
+
+     2797,   86, 2798, 2799,   86,   86,   86,   86,   86,   86,
+       86,   86, 2807,   86,   86,   86, 2800, 2805,   86, 2811,
+       86,   86,   86, 2802, 2801, 2812, 2874, 2804, 2803, 2806,
+       86, 2808, 2809, 2810, 2813,   86, 2814, 2817,   86, 2816,
+       86,   86, 2815, 2819,   86,   86,   86,   86,   86, 2818,
+       86,   86,   86,   86, 2823,   86, 2830,   86,   86, 2820,
+     2831,   86, 2829, 2821, 2822, 2824, 2825,   86, 2827, 2826,
+       86, 2837, 2828, 2835,   86,   86, 2834,   86, 2832, 2836,
+       86,   86,   86,   86,   86, 2833,   86,   86,   86, 2842,
+       86, 3592,   86, 2838, 2847, 2846, 2839, 2841, 2844, 2848,
+
+       86, 2840,   86,   86, 2849,   86, 2843,   86, 2845, 2850,
+       86,   86,   86,   86, 2852,   86,   86,   86, 2856,   86,
+     2857,   86, 2851, 2854,   86,   86, 2853, 2862, 2863,   86,
+       86,   86, 2855, 2866,   86,   86, 2858, 2860, 2859, 2861,
+     2864,   86, 2867,   86,   86, 2869,   86,   86, 2865,   86,
+     2868, 2872, 2871, 2873,   86,   86, 2878,   86, 2870, 2875,
+       86,   86,   86,   86, 2882,   86, 2881, 2883,   86, 2876,
+     2880,   86, 2879, 2885,   86, 2877, 2886,   86,   86,   86,
+       86, 2891,   86,   86, 2884,   86, 2887,   86, 2892, 2894,
+       86, 2889,   86,   86, 2888,   86, 2901,   86, 2895,   86,
+
+     2890, 2898,   86,   86,   86, 2893, 2896,   86, 2897, 2904,
+       86, 2899, 2900,   86,   86,   86,   86,   86, 2905, 2902,
+     2906, 2908, 2903, 2910,   86, 2909,   86,   86, 2907,   86,
+       86,   86,   86, 2911, 2912, 2914, 2915, 2917,   86, 2918,
+       86,   86, 2913,   86, 2916,   86, 2919, 2921,  170,   86,
+     2922, 2920,   86, 2926, 2923,   86,   86, 2928,   86,   86,
+     2927,   86,   86, 2924, 2931,   86, 2930, 2932,   86, 3592,
+     2925, 2934,   86, 2929,   86, 2933, 2936, 2935,   86,   86,
+       86, 2937,   86, 2938, 2939, 2941,   86,   86,   86,   86,
+     2942,   86, 2943,   86, 2940,   86, 2948, 2944,   86, 2949,
+
+       86, 2946,   86, 2950, 2945,   86, 2952,   86,   86,   86,
+       86,   86, 2951, 2955, 2954, 2953, 2947,   86,   86,   86,
+       86,   86, 2957, 2956, 2958, 2959,   86,   86,   86,   86,
+     2964,   86, 2966,   86, 2961, 2962, 2960, 2963, 2968,   86,
+     2965,   86,   86,   86,   86, 2969,   86, 2973,   86,   86,
+     2974, 2967,   86,   86,   86,   86, 2979,   86,   86,   86,
+     2970, 2976, 2971,   86,   86, 2972,   86, 2983, 2975, 2977,
+     2978, 2986, 2980, 2981, 2984,   86, 2987,   86,   86, 2982,
+     2989,   86,   86,   86, 2988,   86,   86, 2990,   86, 2985,
+     2993, 2991,   86, 2996, 2995,   86,   86,   86, 2997,   86,
+
+     2998, 2994,   86, 2992, 3000,   86,   86, 3002,   86, 3004,
+       86, 2999, 3005,   86, 3006,   86,   86, 3001,   86,   86,
+     3007, 3010,   86, 3008,   86,   86, 3003,   86, 3009, 3014,
+     3012,   86,   86, 3592, 3015,   86,   86, 3018,   86, 3013,
+     3019,   86,   86, 3016, 3011, 3020,   86, 3021,   86,   86,
+       86, 3023, 3017, 3022,   86, 3024, 3025,   86, 3028,   86,
+       86, 3029, 3030,   86,   86, 3032,   86, 3026,   86,   86,
+       86, 3036, 3037,   86, 3027,   86,   86,   86,   86, 3031,
+     3038, 3033, 3039, 3040, 3035, 3041,   86, 3034,   86,   86,
+     3042,   86,   86,   86, 3047, 3050,   86,   86, 3043, 3046,
+
+       86, 3049,   86,   86,   86,   86, 3044, 3051, 3053, 3045,
+       86, 3052,   86, 3055,   86, 3056,   86, 3048,   86,   86,
+       86,   86,   86, 3059, 3063,   86,   86,   86, 3069, 3054,
+     3060,   86, 3592, 3057, 3058, 3062, 3064,   86, 3070, 3061,
+     3065, 3067,   86, 3071,   86, 3068, 3072, 3082, 3066,   86,
+     3074, 3073,   86, 3075,   86,   86, 3076,   86, 3077,   86,
+     3078,   86, 3079,   86, 3080, 3081,   86,   86,   86,   86,
+       86,   86,   86,   86, 3086,   86, 3088,   86, 3092,   86,
+       86, 3089, 3085, 3093,   86,   86, 3083, 3098, 3094, 3087,
+       86, 3096,   86, 3084, 3592, 3090, 3095, 3091, 3097,   86,
+
+     3099,   86,   86, 3101,   86,   86,   86, 3100,   86,   86,
+     3106, 3107,   86,   86, 3102, 3103,   86, 3104, 3105, 3108,
+       86,   86, 3110,   86,   86, 3109, 3114,   86,   86,   86,
+       86, 3115,   86, 3118, 3112, 3111,   86, 3117,   86, 3113,
+     3116, 3119, 3120,   86, 3121, 3122,   86,   86,   86, 3126,
+       86,   86, 3123,   86,   86,   86,   86,   86,   86,   86,
+     3127, 3130, 3133,   86, 3131, 3128, 3125, 3164,   86,   86,
+     3134,   86, 3124,   86, 3136,   86, 3137, 3132, 3140, 3129,
+     3135,   86, 3138,   86, 3139,   86,   86, 3143, 3145,   86,
+     3144, 3146,   86, 3147,   86,   86, 3141,   86,   86, 3142,
+
+       86, 3152,   86, 3151, 3148,   86,   86,   86, 3155,   86,
+     3153, 3154,   86,   86,   86,   86,   86, 3149,   86, 3150,
+     3156, 3159, 3161, 3165, 3157, 3163,   86,   86,   86,   86,
+       86,   86, 3160,   86, 3158, 3166,   86, 3167, 3172,   86,
+     3162,   86,   86,   86, 3169,   86, 3168,   86, 3170, 3176,
+       86, 3171,   86,   86, 3173, 3174, 3175,   86,   86, 3177,
+       86, 3180, 3181, 3178,   86, 3183,   86,   86,   86, 3184,
+     3189, 3179, 3187,   86,   86, 3190,   86,   86, 3182,   86,
+     3191, 3192,   86,   86, 3185, 3194,   86, 3188,   86,   86,
+       86,   86,   86, 3186, 3197, 3195, 3199,   86, 3193, 3196,
+
+     3200,   86, 3203,   86, 3198,   86, 3202,   86,   86,   86,
+     3201,   86, 3206, 3209,   86, 3204,   86, 3210, 3212, 3207,
+       86, 3213, 3205,   86,   86,   86, 3208, 3215,   86, 3211,
+     3216,   86,   86, 3219,   86,   86,   86,   86, 3224,   86,
+     3217,   86, 3214,   86,   86, 3222, 3221, 3228,   86,   86,
+       86,   86, 3218, 3220, 3230, 3226,   86, 3223, 3225, 3231,
+       86, 3227,   86, 3232, 3229, 3235, 3236,   86, 3238,   86,
+     3234,   86, 3233,   86,   86,   86, 3237, 3241,   86,   86,
+     3240,   86, 3244,   86, 3242,   86,   86, 3239,   86, 3247,
+       86,   86,   86, 3252,   86, 3248,   86,   86,   86, 3592,
+
+     3243,   86, 3245, 3246, 3249, 3251, 3259, 3255, 3256,   86,
+     3257,   86,   86, 3254,   86, 3253, 3250, 3258,   86, 3261,
+     3262,   86, 3263,   86, 3264,   86, 3260, 3265,   86,   86,
+       86, 3268,   86,   86, 3270,   86,   86,   86, 3269, 3272,
+       86,   86, 3266,   86,   86,   86,   86, 3278, 3271, 3279,
+       86,   86,   86,   86,   86, 3273, 3267, 3285,   86,   86,
+     3286,   86,   86, 3274, 3276, 3275, 3277, 3282, 3284, 3288,
+       86, 3281,   86,   86, 3283,   86,   86, 3280, 3291,   86,
+     3287, 3293,   86, 3294,   86,   86,   86,   86, 3297, 3302,
+     3289, 3290, 3295, 3296,   86,   86,   86, 3292, 3298, 3300,
+
+       86, 3301,   86, 3299,   86,   86,   86, 3303,   86,   86,
+       86, 3306,   86,   86,   86, 3308,   86,   86, 3309,   86,
+     3307,   86,   86,   86, 3304, 3305,   86, 3318, 3319,   86,
+       86, 3310, 3314, 3311, 3312, 3313, 3315, 3316, 3321,   86,
+       86,   86, 3317, 3325,   86, 3322, 3320,   86, 3344, 3323,
+     3324, 3326,   86, 3327,   86,   86, 3329,   86,   86, 3328,
+     3331, 3332,   86, 3330,   86, 3334,   86, 3335, 3336,   86,
+       86, 3337, 3338, 3342,   86, 3339,   86, 3340, 3341, 3333,
+       86,   86, 3345,   86,   86,   86, 3343,   86, 3348,   86,
+       86,   86, 3352,   86,   86,   86, 3351,   86,   86, 3347,
+
+       86,   86, 3346,   86, 3355, 3356,   86, 3357,   86, 3349,
+     3350, 3360, 3361,   86, 3353, 3358,   86, 3362,   86, 3363,
+     3354, 3359, 3364,   86, 3365,   86,   86,   86, 3370,   86,
+     3372, 3366, 3367, 3371,   86, 3368,   86,   86, 3369,   86,
+       86,   86,   86, 3379,   86, 3376, 3377, 3380,   86,   86,
+     3382,   86, 3374,   86, 3373, 3381, 3383,   86,   86,   86,
+     3375, 3378,   86, 3384, 3385, 3386,   86, 3387,   86, 3390,
+       86, 3388, 3391,   86, 3392,   86, 3389, 3393,   86, 3394,
+       86, 3395,   86, 3396,   86, 3397,   86,   86,   86, 3400,
+       86, 3401,   86,   86,   86,   86,   86, 3399, 3405,   86,
+
+       86,   86, 3402, 3407,   86,   86, 3403,   86, 3411, 3412,
+       86, 3408,   86, 3398, 3409, 3404,   86, 3410,   86, 3406,
+     3414,   86,   86,   86, 3418, 3416,   86, 3413,   86, 3420,
+     3421,   86,   86,   86, 3415,   86,   86, 3423,   86,   86,
+       86,   86,   86,   86, 3417, 3422, 3419, 3427, 3428, 3436,
+       86,   86, 3424, 3425, 3426, 3429,   86, 3430,   86,   86,
+       86, 3433, 3434, 3432, 3437,   86, 3431, 3438,   86,   86,
+       86, 3435,   86,   86, 3441,   86,   86,   86, 3440,   86,
+       86, 3446, 3447, 3439,   86, 3449,   86, 3443, 3445,   86,
+       86,   86, 3442,   86, 3448,   86,   86,   86, 3444, 3450,
+
+       86,   86, 3458,   86,   86, 3456, 3453,   86, 3451, 3452,
+     3455,   86, 3457, 3462,   86,   86, 3460, 3465, 3454,   86,
+     3464,   86, 3459, 3461, 3467,   86,   86, 3463, 3469,   86,
+     3468,   86, 3470, 3471,   86, 3472,   86,   86,   86, 3466,
+       86, 3475,   86,   86,   86, 3473, 3480, 3476, 3477,   86,
+       86,   86,   86, 3484,   86,   86, 3483, 3474,   86, 3479,
+     3486,   86, 3482, 3481,   86, 3478, 3487,   86, 3488,   86,
+     3491,   86,   86, 3489,   86, 3485, 3494,   86,   86, 3495,
+       86,   86,   86, 3490, 3498, 3499,   86, 3492, 3496,   86,
+       86,   86, 3493,   86, 3504,   86, 3500,   86, 3503, 3501,
+
+     3497, 3505,   86,   86,   86,   86,   86,   86, 3502,   86,
+     3509,   86, 3511,   86,   86,   86,   86,   86, 3506, 3508,
+     3516, 3517,   86, 3507, 3510,   86, 3513, 3514, 3512, 3524,
+     3515, 3518,   86, 3522,   86,   86,   86, 3519,   86, 3525,
+     3520, 3523,   86,   86, 3521,   86,   86, 3526, 3527, 3530,
+     3528, 3531,   86,   86,   86,   86, 3533,   86, 3532,   86,
+       86,   86,   86, 3534, 3539, 3529,   86, 3536,   86,   86,
+       86,   86, 3542, 3535, 3543,   86,   86,   86,   86,   86,
+     3537, 3538, 3541, 3546,   86, 3540, 3544, 3547,   86, 3545,
+       86, 3550, 3549, 3551,   86, 3548,   86, 3552,   86, 3554,
+
+       86, 3556,   86, 3557,   86,   86,   86, 3561,   86, 3558,
+     3592,   86, 3559, 3564,   86, 3555, 3562,   86,   86, 3563,
+     3553,   86,   86,   86,   86, 3560,   86,   86, 3565, 3566,
+       86, 3568, 3570,   86,   86, 3572,   86, 3567,   86, 3573,
+       86, 3576, 3569, 3571, 3577,   86, 3574,   86,   86, 3580,
+     3581,   86,   86, 3583,   86, 3575,   86, 3578,   86, 3582,
+     3584,   86,   86, 3585,   86,   86, 3579, 3586, 3592, 3587,
+     3590,   86, 3591,   86, 3592, 3592, 3592, 3588, 3592, 3592,
+     3592, 3592, 3592, 3592, 3589,   47,   47,   47,   47,   47,
+       47,   47,   52,   52,   52,   52,   52,   52,   52,   57,
+
+       57,   57,   57,   57,   57,   57,   63,   63,   63,   63,
+       63,   63,   63,   68,   68,   68,   68,   68,   68,   68,
+       74,   74,   74,   74,   74,   74,   74,   80,   80,   80,
+       80,   80,   80,   80,   89,   89, 3592,   89,   89,   89,
+       89,  160,  160, 3592, 3592, 3592,  160,  160,  162,  162,
+     3592, 3592,  162, 3592,  162,  164, 3592, 3592, 3592, 3592,
+     3592,  164,  167,  167, 3592, 3592, 3592,  167,  167,  169,
+     3592, 3592, 3592, 3592, 3592,  169,  171,  171, 3592,  171,
+      171,  171,  171,  174, 3592, 3592, 3592, 3592, 3592,  174,
+      177,  177, 3592, 3592, 3592,  177,  177,   90,   90, 3592,
+
+       90,   90,   90,   90,   17, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592
     } ;
 
-static yyconst flex_int16_t yy_chk[6988] =
+static yyconst flex_int16_t yy_chk[7046] =
     {   0,
         1,    1,    1,    1,    1,    1,    1,    1,    1,    1,
         1,    1,    1,    1,    1,    1,    1,    1,    1,    1,
@@ -2388,18 +2408,18 @@ static yyconst flex_int16_t yy_chk[6988] =
         5,    3,    6,   24,    4,   24,   24,    5,   24,    6,
         7,    7,    7,    7,   24,    7,    8,    8,    8,    8,
        33,    8,    7,    9,    9,    9,   26,   26,    8,   10,
-       10,   10,   19,   29,    9,   33,   19,   29, 3565,   35,
+       10,   10,   19,   29,    9,   33,   19,   29, 3600,   35,
        10,   11,   11,   11,   11,   11,   11,   13,   13,   13,
 
        13,   34,   13,   11,   35,   99,   34,   29,   38,   13,
        51,   51,   11,   12,   12,   12,   12,   12,   12,   14,
        14,   14,   14,   99,   14,   12,   15,   15,   15,   38,
        23,   14,   23,   23,   12,   23,   46,   15,   16,   16,
-       16,   23,   23,   25,   27,   27,   25,   25, 2894,   16,
+       16,   23,   23,   25,   27,   27,   25,   25, 2921,   16,
        25,   46,   27,   30,   30,   25,   27,   56,   40,   27,
        56,   73,   31,   31,   25,   28,   67,   67,   30,   32,
        28,   31,   40,   32,   28,   73,   32,   28,   92,   28,
-       28,   92,   31,   32, 1138,   32,   36,   36,   37,   37,
+       28,   92,   31,   32, 1148,   32,   36,   36,   37,   37,
        28,   45,   45,   37,   97,   36,   45,   97,   41,   41,
 
        45,   36,   87,   41,   93,   36,   87,   37,   93,   37,
@@ -2413,741 +2433,748 @@ static yyconst flex_int16_t yy_chk[6988] =
        89,   98,  102,  100,  103,  104,  106,  107,  102,  113,
       102,  109,  106,  113,   98,  108,  111,  140,  114,  112,
 
-      177,  107,  103,  103,  110,  106,  116,  104,  115,  108,
+      108,  107,  103,  103,  110,  106,  116,  104,  115,  108,
       119,  109,  140,  115,  111,  110,  110,  112,  114,  117,
       116,  118,  117,  110,  122,  117,  120,  118,  123,  119,
       121,  120,  124,  121,  125,  130,  124,  121,  117,  117,
       127,  125,  123,  122,  126,  128,  118,  127,  122,  129,
       132,  120,  131,  121,  128,  130,  131,  126,  134,  133,
       135,  136,  129,  133,  138,  135,  137,  137,  132,  135,
-      139,  141,  142,  144,  139,  256,  134,  256,  146,  150,
+      139,  141,  142,  144,  139,  257,  134,  257,  146,  150,
       151,  136,  143,  139,  138,  143,  144,  145,  149,  139,
       146,  142,  148,  145,  147,  147,  143,  141,  150,  148,
 
       143,  151,  152,  153,  149,  153,  155,  154,  156,  157,
-      148,  155,  147,  226,  153,  147,  158,  159,  152,  154,
+      148,  155,  147,  227,  153,  147,  158,  159,  152,  154,
       156,  158,  161,  161,  179,  163,  153,  157,  163,  179,
-      165,  159,  165,  165,  226,  165,  168,  168,  170,  181,
+      165,  159,  165,  165,  227,  165,  168,  168,  170,  181,
       170,  170,  171,  170,  171,  171,  173,  171,  175,  173,
       175,  175,  180,  175,  171,  178,  178,  181,  180,  182,
       183,  184,  185,  186,  187,  189,  188,  180,  183,  190,
-      185,  188,  184,  212,  182,  183,  193,  191,  190,  187,
-      176,  193,  186,  191,  191,  189,  194,  194,  195,  197,
-      196,  212,  196,  197,  195,  196,  198,  198,  197,  199,
-
-      200,  201,  202,  197,  203,  204,  201,  202,  205,  197,
-      197,  199,  196,  206,  205,  207,  203,  206,  208,  200,
-      207,  209,  213,  210,  211,  204,  214,  213,  216,  217,
-      559,  214,  218,  216,  208,  209,  211,  205,  210,  211,
-      215,  215,  220,  220,  215,  219,  215,  221,  218,  217,
-      222,  219,  223,  221,  559,  224,  222,  227,  215,  221,
-      215,  224,  225,  227,  228,  229,  230,  231,  225,  228,
-      230,  229,  223,  231,  232,  234,  232,  225,  233,  235,
-      236,  232,  238,  237,  233,  235,  239,  241,  234,  237,
-      240,  243,  241,  242,  239,  238,  244,  245,  248,  250,
-
-      236,  251,  242,  240,  238,  246,  243,  251,  247,  252,
-      246,  246,  244,  247,  249,  254,  248,  245,  249,  253,
-      257,  250,  261,  258,  255,  253,  259,  252,  252,  255,
-      258,  260,  259,  263,  262,  254,  264,  260,  267,  257,
-      262,  261,  265,  265,  267,  263,  266,  266,  268,  269,
-      264,  269,  270,  271,  268,  272,  274,  273,  271,  275,
-      276,  277,  267,  278,  274,  276,  279,  272,  269,  278,
-      283,  285,  279,  280,  282,  270,  273,  281,  280,  275,
-      282,  284,  281,  286,  277,  283,  287,  288,  290,  285,
-      289,  290,  292,  292,  287,  284,  289,  286,  291,  293,
-
-      291,  294,  293,  295,  295,  296,  296,  297,  299,  298,
-      300,  299,  288,  301,  300,  303,  302,  304,  174,  294,
-      305,  303,  301,  297,  298,  302,  305,  306,  307,  306,
-      310,  304,  308,  311,  307,  310,  308,  309,  309,  311,
-      312,  313,  314,  315,  316,  319,  312,  317,  317,  318,
-      320,  321,  318,  308,  320,  322,  324,  316,  323,  323,
-      314,  313,  327,  319,  315,  312,  325,  326,  327,  325,
-      321,  329,  328,  322,  324,  328,  331,  332,  335,  326,
-      336,  335,  337,  329,  333,  331,  325,  330,  338,  333,
-      338,  338,  169,  336,  337,  332,  330,  334,  340,  330,
-
-      334,  340,  334,  339,  330,  330,  330,  330,  339,  339,
-      341,  341,  342,  343,  346,  334,  344,  345,  334,  348,
-      348,  347,  349,  346,  350,  350,  352,  349,  343,  342,
-      347,  344,  342,  353,  345,  345,  351,  351,  353,  354,
-      355,  352,  356,  357,  358,  359,  359,  361,  359,  362,
-      358,  354,  370,  370,  362,  363,  367,  359,  357,  355,
-      364,  363,  356,  365,  359,  364,  366,  361,  365,  366,
-      367,  366,  368,  369,  365,  368,  373,  371,  372,  372,
-      376,  373,  369,  371,  377,  380,  378,  377,  368,  379,
-      419,  368,  419,  368,  374,  374,  383,  374,  385,  380,
-
-      376,  378,  386,  374,  379,  377,  382,  374,  388,  382,
-      383,  386,  374,  385,  388,  374,  375,  375,  387,  375,
-      389,  388,  392,  387,  387,  382,  390,  393,  394,  391,
-      396,  392,  375,  397,  394,  375,  395,  375,  167,  375,
-      384,  389,  384,  384,  391,  390,  393,  397,  400,  401,
-      396,  398,  384,  384,  384,  384,  384,  398,  399,  384,
-      402,  398,  395,  399,  404,  403,  405,  407,  400,  401,
-      403,  408,  405,  406,  406,  402,  409,  411,  410,  404,
-      412,  399,  416,  408,  410,  415,  413,  407,  417,  418,
-      409,  413,  414,  414,  424,  414,  412,  420,  416,  420,
-
-      420,  425,  411,  418,  417,  415,  421,  422,  423,  423,
-      421,  422,  426,  424,  427,  428,  425,  420,  431,  434,
-      442,  166,  429,  434,  431,  432,  422,  435,  426,  428,
-      429,  429,  427,  433,  432,  436,  435,  438,  433,  437,
-      442,  436,  429,  438,  429,  430,  440,  439,  441,  440,
-      430,  439,  444,  441,  443,  443,  445,  445,  430,  430,
-      437,  447,  430,  430,  446,  444,  430,  448,  448,  446,
-      449,  450,  451,  452,  447,  450,  449,  453,  454,  455,
-      455,  456,  453,  454,  457,  458,  459,  451,  455,  460,
-      461,  466,  460,  456,  452,  461,  462,  463,  459,  468,
-
-      462,  464,  464,  458,  457,  465,  467,  467,  472,  463,
-      465,  473,  466,  470,  470,  474,  475,  476,  477,  473,
-      478,  468,  479,  477,  481,  475,  483,  482,  503,  472,
-      486,  485,  503,  484,  479,  487,  474,  485,  476,  486,
-      478,  487,  481,  488,  481,  482,  483,  484,  488,  489,
-      490,  491,  492,  493,  491,  494,  495,  496,  490,  498,
-      499,  490,  495,  489,  494,  498,  492,  497,  493,  501,
-      497,  500,  502,  504,  499,  505,  500,  496,  504,  506,
-      507,  508,  509,  498,  506,  512,  528,  513,  514,  528,
-      505,  501,  516,  502,  515,  509,  507,  518,  515,  517,
-
-      508,  510,  510,  514,  517,  512,  519,  510,  513,  510,
-      519,  516,  164,  518,  520,  510,  521,  510,  523,  520,
-      510,  510,  525,  520,  522,  526,  524,  510,  525,  522,
-      527,  521,  529,  525,  523,  524,  530,  523,  531,  531,
-      526,  532,  533,  533,  534,  535,  527,  536,  537,  537,
-      538,  539,  541,  540,  162,  529,  530,  535,  540,  534,
-      542,  541,  536,  543,  544,  546,  532,  547,  548,  538,
-      544,  547,  548,  539,  546,  549,  550,  551,  543,  542,
-      552,  549,  553,  554,  555,  556,  560,  557,  550,  556,
-      160,  558,  551,  558,  560,  562,  553,  563,  554,  552,
-
-      557,  562,  555,  561,  561,  564,  565,  566,  567,  563,
-      566,  564,  568,  570,  569,  571,  570,  572,  565,  569,
-      573,  620,  567,  574,  571,  573,  573,  568,  575,  575,
-      620,  571,  582,  572,  571,  577,  574,  576,  576,  578,
-      578,  577,  579,  579,  580,  583,  581,  586,  587,  585,
-      580,  581,  581,  582,  585,  584,  587,  583,  584,  588,
-      589,  590,  588,  591,  592,  589,  586,  593,  592,  594,
-      595,  597,  596,  593,  595,  601,  597,  598,  599,  599,
-      600,  602,  591,  603,  590,  604,  602,  605,  606,  594,
-      596,  598,  607,  613,  606,  600,  601,  607,  608,  610,
-
-      612,  604,  603,  609,  611,  611,  609,  605,  614,  613,
-      616,  609,  608,  614,  609,  609,  615,  610,  612,  617,
-      619,  615,  621,  622,  616,  621,  619,  622,  623,  624,
-      625,  626,  624,  623,  617,  625,  627,  628,  629,  631,
-      630,  632,  632,  633,  628,  630,  634,  626,  635,  622,
-      636,  629,  633,  637,  627,  638,  644,  639,  640,  631,
-      645,  644,  637,  639,  640,  634,  636,  638,  641,  635,
-      646,  641,  642,  642,  643,  642,  647,  643,  645,  649,
-      648,  650,  654,  651,  646,  648,  652,  650,  651,  661,
-      647,  653,  652,  657,  653,  655,  656,  658,  649,  659,
-
-      655,  656,  656,  660,  659,  662,  657,  654,  661,  660,
-      658,  663,  664,  674,  662,  666,  663,  667,  659,  659,
-      665,  665,  666,  668,  667,  669,  668,  670,  671,  672,
-      676,  669,  664,  671,  672,  672,  673,  673,  674,  670,
-      675,  668,  675,  671,  677,  678,  677,  679,  680,  676,
-      681,  682,  683,  684,  688,  685,   85,  684,  683,  686,
-      687,  689,  691,  678,  685,  679,  680,  690,  693,  681,
-      690,  682,  688,  694,  686,  687,  692,  691,  695,  690,
-      689,  696,  692,  697,  698,  699,  701,  694,  693,  699,
-      695,  700,  702,  703,  704,  708,  705,  707,  707,  708,
-
-      696,  705,  701,  698,  697,  706,  709,  710,  712,  700,
-      702,  703,  703,  704,  711,  714,  713,  715,  720,  706,
-      709,  713,  712,  717,  716,  711,  710,  718,  719,  721,
-      717,  714,  718,  722,  721,  719,  715,  716,  722,  723,
-      724,  725,  720,  727,  726,  729,  737,  724,  728,  730,
-      725,  729,  727,  731,  730,  732,  731,  723,  726,  732,
-      728,  733,  734,  735,  746,  736,  749,  737,  738,  738,
-      744,  734,  739,  739,  742,  733,  740,  740,  735,  736,
-      741,  739,  745,  742,  746,  741,  747,  748,  745,  744,
-      747,  749,  750,  752,  751,  753,  754,  755,  756,  748,
-
-      751,  752,  753,  762,  759,  766,  765,  768,  769,   80,
-      750,  766,  771,  768,  754,  765,  771,  769,  756,  759,
-      762,  770,  755,  757,  776,  757,  772,  772,  757,  773,
-      773,  775,  757,  774,  777,  757,  812,  770,  776,  782,
-      778,  780,  757,  757,  774,  757,  778,  781,  783,  775,
-      812,  785,  781,  787,  777,  779,  779,  779,  787,  779,
-      782,  780,  779,  788,  784,  786,  783,  779,  784,  786,
-      791,  789,  790,  779,  779,  785,  789,  792,  793,  794,
-      792,  796,  788,  793,  793,  786,  794,  790,  795,  795,
-      798,  798,  797,  799,   75,  791,  796,  797,  799,  800,
-
-      801,  804,  800,  802,  802,  801,  803,  805,  803,  807,
-      806,  808,  809,  804,  806,  810,  810,  811,  813,  813,
-      809,  814,  815,  816,  828,  817,  805,  828,  818,  807,
-      808,  817,  811,  818,  815,  819,  819,  820,  823,  814,
-      824,  822,  820,  820,  823,  816,  822,  825,   74,  826,
-      827,  829,  830,  825,  826,  834,  827,  829,  833,  824,
-      830,  831,  831,  832,  832,  835,  833,  836,  837,  838,
-      835,  836,  839,  834,  840,  837,  841,  841,  843,  845,
-      842,  844,  844,  846,  850,  845,  843,  838,  839,  842,
-      848,  849,  851,  840,  852,  853,  854,  851,  853,  848,
-
-      849,  854,  846,  852,  855,  856,  857,  858,  850,  860,
-      862,  859,  861,  861,  863,  857,  859,  859,  855,  864,
-      858,  865,  866,  860,  867,  862,  871,  867,  864,  869,
-      856,  869,  873,  863,  872,  867,  870,  870,  874,  872,
-      866,  875,  876,  877,  879,  865,  878,  871,  880,   68,
-      881,  882,  880,  873,  883,  878,  884,  885,  874,  886,
-      883,  875,  887,  877,  876,  884,  888,  879,  881,  885,
-      882,  889,  891,  892,  890,  886,  894,  889,  892,  895,
-      888,  887,  890,  893,  893,  896,  891,  897,  898,  899,
-      900,  901,  903,  902,  896,  894,  898,  904,  903,  895,
-
-      905,  907,  906,  904,  908,  909,  912,  897,  906,  899,
-      901,  909,  900,  902,  905,  907,  910,  911,  913,  915,
-       63,  911,  910,  914,  908,  912,  916,  916,  914,  917,
-      913,  918,  920,  919,  921,  917,  919,  918,  913,  922,
-      915,  923,  924,  924,  925,  922,  926,  921,  928,  927,
-      920,  926,  927,  928,  928,  929,  930,  931,  931,  932,
-      930,  923,  925,  933,  934,  927,  935,  927,  937,  934,
-      929,  940,  938,  941,  942,  944,  944,  948,  945,  946,
-      975,  932,  945,  933,  940,  935,  938,  947,  947,  951,
-       58,  950,  937,  941,  946,  942,  943,  953,  975,  943,
-
-      949,  943,  948,  951,  949,  943,  950,  943,  952,  954,
-      955,  953,  943,  952,  954,  954,  956,  943,  957,  955,
-      958,  959,  957,  961,  962,  960,  959,  963,  961,  964,
-      956,  965,  973,  966,  957,  958,  959,  960,  962,  966,
-      965,  967,  971,  964,  968,  969,  967,  971,  963,  972,
-      968,  969,  970,  970,  973,  972,  974,  977,  978,  979,
-      980,  981,  981,  978,  984,  982,  983,  985,  986,  977,
-      982,  992,  980,  979,  983,  974,  976,  976,  987,  989,
-      984,  985,  976,  988,  976,  989,  990,  986,  991,  992,
-      976,  990,  993,  994,  995,  976,  976,  987,  998,  988,
-
-      991,  997,  976,  996,  996,  997, 1001, 1000,  993, 1001,
-     1002,  994,  995, 1000, 1003, 1004, 1005, 1007,  998, 1003,
-     1006, 1009, 1005, 1010, 1011, 1006, 1013, 1012, 1004, 1002,
-     1009, 1014, 1010, 1012, 1015, 1013, 1007, 1016, 1017, 1015,
-     1011, 1018, 1019, 1022, 1020, 1023, 1021, 1026, 1029, 1022,
-     1014, 1028, 1017, 1020, 1019, 1021, 1031, 1016, 1024, 1032,
-     1033, 1018, 1023, 1026, 1024, 1028, 1030, 1034, 1029, 1035,
-     1040, 1030, 1036, 1032, 1035, 1031, 1039, 1036, 1033, 1040,
-     1042, 1039, 1034, 1041, 1041, 1043, 1042, 1044, 1045, 1046,
-     1048, 1043, 1049, 1053, 1054, 1055, 1044, 1049, 1049, 1056,
-
-     1051, 1051, 1046, 1045, 1051, 1052, 1048, 1053, 1052, 1057,
-     1058, 1055, 1059, 1060, 1054, 1061, 1062, 1056, 1059, 1063,
-     1064, 1061, 1057, 1068, 1063, 1058, 1066, 1066,   57, 1067,
-     1069, 1062, 1067, 1060, 1064, 1069, 1070, 1071, 1072, 1075,
-     1073, 1070, 1078, 1074, 1068, 1073, 1077, 1072, 1074, 1079,
-     1080, 1075, 1077, 1071, 1082, 1079, 1080, 1083, 1078, 1081,
-     1081, 1084, 1086, 1082, 1084, 1085, 1085, 1087, 1088, 1089,
-     1090, 1091, 1089, 1092, 1126, 1083, 1093, 1091, 1126, 1092,
-     1086, 1096, 1093, 1090, 1094, 1095, 1087, 1096, 1088, 1094,
-     1095, 1097, 1098, 1101, 1100, 1102, 1097, 1103, 1098, 1100,
-
-     1104, 1105, 1105, 1103, 1106, 1104, 1108, 1107, 1109, 1110,
-     1112, 1101, 1110, 1106, 1111, 1102, 1107, 1111, 1113, 1114,
-     1115, 1112, 1116, 1113, 1108, 1117, 1122, 1109, 1118, 1119,
-     1120, 1117, 1115, 1123, 1118, 1120, 1124, 1114, 1121, 1121,
-     1125, 1116, 1127, 1128, 1119, 1122, 1129, 1123, 1124, 1130,
-     1132, 1134, 1128, 1133, 1133, 1137, 1135, 1136, 1125, 1134,
-     1127, 1135, 1136, 1139, 1140, 1129, 1141, 1142, 1145, 1132,
-     1146, 1143, 1142,   52, 1130, 1137, 1146, 1139, 1141, 1140,
-     1143, 1144, 1144, 1147, 1148, 1149, 1156, 1151, 1145, 1147,
-     1149, 1150, 1151, 1150, 1152, 1153, 1154, 1155, 1158, 1157,
-
-     1148, 1154, 1159, 1161, 1161, 1156, 1157, 1163, 1152, 1153,
-     1162, 1164, 1155, 1158, 1165, 1166, 1174, 1167,   47, 1169,
-     1165, 1159, 1167, 1169, 1162, 1163, 1164, 1170, 1170, 1171,
-     1174, 1167, 1173, 1167, 1171, 1166, 1167, 1172, 1172, 1173,
-     1175, 1176, 1178, 1175, 1177, 1179, 1180, 1181, 1182, 1183,
-     1179, 1178, 1185, 1182, 1190, 1184, 1187, 1187,   18, 1181,
-     1176, 1193, 1177, 1183, 1188, 1180, 1184, 1189, 1191, 1188,
-     1193, 1185, 1189, 1191, 1190, 1192, 1194, 1195, 1196, 1192,
-     1198, 1197, 1199, 1201, 1197, 1202, 1200, 1203, 1204, 1199,
-     1207, 1194, 1195, 1197, 1204, 1198, 1205, 1196, 1200, 1208,
-
-     1209, 1206, 1201, 1210, 1211, 1203, 1202, 1206, 1212, 1209,
-     1207, 1205, 1213, 1214, 1215, 1216, 1217, 1220, 1210, 1208,
-     1212, 1216, 1219, 1211, 1223, 1221, 1222, 1224, 1219, 1215,
-     1225, 1213, 1220, 1226, 1222, 1225, 1217, 1228, 1214, 1221,
-     1229, 1227, 1230, 1224, 1223, 1226, 1227, 1227, 1231, 1231,
-     1233, 1234, 1238, 1235, 1229, 1230, 1228, 1232, 1232, 1235,
-     1234, 1238, 1232, 1233, 1237, 1232, 1232, 1236, 1236, 1237,
-     1232, 1239, 1243, 1240, 1241, 1246, 1232, 1239, 1240, 1241,
-     1232, 1242, 1242, 1244, 1244, 1245, 1247, 1249, 1245, 1250,
-     1245, 1248, 1252, 1243, 1251, 1246, 1249, 1248, 1253, 1251,
-
-     1256, 1254, 1255, 1259, 1247, 1256, 1252, 1254, 1255, 1250,
-     1257, 1258, 1259, 1260, 1257, 1261, 1253, 1259, 1260, 1259,
-     1264, 1259, 1267, 1259, 1258, 1262, 1262, 1263, 1263, 1261,
-     1263, 1264, 1266, 1268, 1269, 1270, 1266, 1267, 1271, 1272,
-     1270, 1270, 1274, 1269, 1273, 1275, 1276, 1271, 1277, 1273,
-     1278, 1268, 1279, 1289, 1275, 1282, 1274, 1281, 1279, 1280,
-     1280, 1272, 1283, 1282, 1278, 1276, 1284, 1277, 1285, 1281,
-     1286, 1284, 1288, 1287, 1291, 1291, 1283, 1292, 1289, 1286,
-     1287, 1290, 1285, 1293, 1293, 1294, 1290, 1294, 1296, 1297,
-     1288, 1296, 1292, 1298, 1297, 1299, 1300, 1300, 1301, 1302,
-
-     1302, 1303, 1303, 1304, 1299, 1305, 1306, 1307, 1304, 1308,
-     1308, 1309, 1298, 1310, 1311, 1312, 1313, 1311, 1301, 1314,
-     1315, 1316, 1313, 1316, 1314, 1317, 1305, 1306, 1307, 1315,
-     1310, 1309, 1320, 1319, 1321, 1312, 1319, 1322, 1324, 1321,
-     1323, 1328, 1328, 1317, 1325, 1323, 1324, 1320, 1330, 1325,
-     1326, 1322, 1327, 1326, 1329, 1331, 1332, 1327, 1333, 1329,
-     1337, 1331, 1335, 1332, 1336, 1337, 1330, 1338, 1335, 1339,
-     1336, 1333, 1338, 1340, 1341, 1339, 1342, 1343, 1343, 1344,
-     1346, 1348, 1340, 1347, 1350, 1346, 1351, 1342, 1349, 1352,
-     1353, 1348, 1354, 1341, 1356, 1352, 1353, 1357, 1354, 1344,
-
-     1356, 1347, 1358, 1349, 1350, 1359, 1360, 1361, 1362, 1351,
-     1364, 1357, 1363, 1363, 1365, 1366, 1372, 1357, 1360, 1367,
-     1369, 1361, 1358, 1374, 1367, 1359, 1362, 1368, 1368, 1370,
-     1364, 1373, 1376, 1366, 1370, 1372, 1373, 1373, 1375, 1365,
-     1376, 1374, 1377, 1369, 1378, 1379, 1380, 1375, 1381, 1385,
-     1382, 1380, 1382, 1383, 1380, 1385, 1377, 1381, 1386, 1378,
-     1379, 1387, 1386, 1379, 1388, 1389, 1390, 1383, 1391, 1388,
-     1388, 1392, 1387, 1393, 1395, 1394, 1392, 1396, 1393, 1397,
-     1400, 1399, 1396, 1401, 1389, 1403, 1391, 1402, 1402, 1403,
-     1404, 1405, 1390, 1394, 1395, 1399, 1406, 1407, 1400, 1397,
-
-     1408, 1401, 1406, 1409, 1410, 1411, 1412, 1413, 1404, 1407,
-     1405, 1417, 1414, 1418, 1416, 1419, 1408, 1414, 1410, 1416,
-     1411, 1412, 1409, 1415, 1419, 1421, 1413, 1420, 1420, 1417,
-     1415, 1423, 1422, 1425, 1418, 1424, 1424, 1426, 1427, 1425,
-     1421, 1422, 1430, 1426, 1428, 1428, 1429, 1429, 1430, 1431,
-     1432, 1423, 1427, 1433, 1434, 1435, 1436, 1443, 1433,   17,
-     1434, 1435, 1436, 1437, 1437, 1431, 1438, 1438, 1440, 1440,
-     1441, 1432, 1442, 1444, 1441, 1443, 1445, 1446, 1449, 1447,
-     1450, 1442, 1448, 1448, 1451, 1444, 1447, 1452, 1450, 1451,
-     1445, 1453, 1446, 1456, 1454, 1457, 1457, 1455, 1449, 1454,
-
-     1454, 1452, 1455, 1455, 1458, 1459, 1460, 1461, 1462, 1463,
-     1453, 1465, 1461, 1456, 1464, 1460, 1466, 1465, 1467, 1468,
-     1469, 1466, 1470, 1458, 1459, 1471, 1469, 1462, 1472, 1463,
-     1473, 1471, 1464, 1474, 1472, 1475, 1476, 1477, 1467, 1478,
-     1479, 1470, 1480, 1481, 1481, 1468, 1483, 1482, 1484, 1473,
-     1482, 1485, 1474, 1478, 1475, 1476, 1477, 1480, 1486, 1486,
-     1489, 1479, 1490, 1485, 1489, 1483, 1488, 1484, 1487, 1487,
-     1491, 1488, 1492, 1495, 1493, 1490, 1493, 1496, 1498, 1491,
-     1493, 1497, 1496, 1499, 1501, 1492, 1500, 1500, 1502, 1501,
-     1503, 1495, 1509, 1493, 1502, 1504, 1497, 1505, 1498, 1499,
-
-     1507, 1506, 1510, 1505, 1507, 1503, 1506, 1508, 1504, 1511,
-     1512, 1508, 1509, 1513, 1514, 1514, 1516, 1518, 1511, 1513,
-     1510, 1519, 1520, 1520, 1522, 1521, 1519, 1524, 1524, 1526,
-     1512, 1521, 1526, 1528, 1516, 1527, 1527, 1529, 1518, 1530,
-     1532, 1533, 1535, 1532, 1522, 1534, 1536, 1537, 1537, 1528,
-     1539, 1535, 1538, 1529, 1540, 1530, 1541, 1545, 1542, 1543,
-     1543, 1541, 1533, 1546, 1547, 1534, 1536, 1538, 1544, 1550,
-     1548, 1539, 1542, 1540, 1551, 1545, 1552, 1544, 1546, 1549,
-     1549, 1552, 1553, 1550, 1554, 1554, 1556, 1555, 1558, 1547,
-     1548, 1555, 1551, 1557, 1557, 1559, 1560, 1553, 1561, 1562,
-
-     1563, 1570, 1561, 1565, 1565, 1563, 1556, 1560, 1566, 1567,
-     1558, 1566, 1568, 1569, 1559, 1572, 1571, 1568, 1562, 1570,
-     1574, 1576, 1567, 1573, 1575, 1575, 1576, 1577, 1578, 1569,
-     1571, 1579, 1579, 1580, 1572, 1572, 1581, 1573, 1582, 1586,
-     1595, 1581, 1580, 1591, 1583, 1574, 1583, 1577, 1578, 1584,
-     1585, 1587, 1589, 1647, 1584, 1647, 1585, 1587, 1582, 1586,
-     1590, 1590, 1591, 1592, 1595, 1594, 1589, 1596, 1596, 1592,
-     1594, 1597, 1597, 1598, 1599, 1600, 1601, 1602, 1602, 1601,
-     1603, 1604, 1605, 1606, 1613, 1607, 1606, 1598, 1745, 1606,
-     1600, 1607, 1599, 1604, 1608, 1611, 1745, 1609, 1603, 1608,
-
-     1609, 1606, 1605, 1612, 1611, 1615, 1615, 1614, 1612, 1613,
-     1614, 1616, 1617, 1625, 1618, 1623, 1609, 1616, 1617, 1618,
-     1619, 1619, 1620, 1620, 1621, 1624, 1622, 1626, 1623, 1628,
-     1621, 1622, 1625, 1627, 1629, 1628, 1627, 1631, 1630, 1632,
-     1629, 1633, 1631, 1624, 1630, 1632, 1634, 1626, 1635, 1635,
-     1636, 1634, 1637, 1638, 1640, 1636, 1639, 1641, 1642, 1644,
-     1645, 1646, 1643, 1648, 1633, 1646, 1651, 1655, 1652,    0,
-     1637, 1641, 1642, 1638, 1640, 1639, 1643, 1644, 1651, 1649,
-     1652, 1653, 1648, 1654, 1656, 1645, 1649, 1655, 1657, 1654,
-     1658, 1659, 1661, 1661, 1653, 1662, 1663, 1664, 1665, 1665,
-
-     1656, 1663, 1666, 1668, 1658, 1667, 1669, 1670, 1657, 1664,
-     1671, 1672, 1659, 1674, 1673, 1662, 1670, 1666, 1672, 1667,
-     1676, 1678, 1682, 1673, 1669, 1671, 1673, 1668, 1679, 1674,
-     1683, 1679, 1680, 1680, 1682, 1676, 1681, 1681, 1684, 1686,
-     1676, 1684, 1685, 1685, 1687, 1688, 1678, 1691, 1683, 1692,
-     1688, 1689, 1686, 1690, 1689, 1693, 1694,    0, 1690, 1695,
-     1696, 1697, 1700, 1687, 1693, 1692, 1691, 1697, 1695, 1696,
-     1699, 1695, 1698, 1698, 1701, 1694, 1702, 1699, 1703, 1704,
-     1705, 1707, 1700, 1706, 1710, 1705, 1705, 1701, 1706, 1711,
-     1712, 1712, 1703, 1707, 1702, 1704, 1713, 1714, 1715, 1715,
-
-     1716, 1716, 1717, 1715, 1719, 1718, 1714, 1711, 1720, 1710,
-     1718, 1717, 1713, 1721, 1717, 1716, 1724, 1725, 1722, 1726,
-     1727, 1728, 1719, 1722, 1722, 1727, 1730, 1729, 1732, 1720,
-     1724, 1721, 1725, 1729, 1732, 1728, 1731, 1731, 1733, 1734,
-     1735, 1726, 1736, 1733, 1730, 1738, 1735, 1739, 1736, 1740,
-     1741, 1742, 1743, 1734, 1742, 1740, 1747, 1748, 1743, 1749,
-     1742, 1739, 1750, 1741, 1751, 1738, 1753, 1756, 1752, 1751,
-     1750, 1754, 1755, 1757,    0, 1747, 1748, 1752, 1749, 1753,
-     1754, 1756, 1758, 1758, 1759, 1755, 1760, 1757, 1761, 1763,
-     1759, 1765, 1760, 1762, 1762, 1764, 1766, 1766, 1767, 1768,
-
-     1769, 1761, 1770, 1771, 1758, 1768, 1773, 1773, 1774, 1763,
-     1765, 1767, 1775, 1764, 1776, 1777, 1775, 1780, 1770, 1776,
-     1778, 1771, 1769, 1781, 1779, 1778, 1780, 1783, 1774, 1779,
-     1784, 1785, 1786, 1787, 1785, 1777, 1788, 1788, 1783, 1784,
-     1789, 1790, 1791, 1793, 1786, 1794, 1781, 1799, 1787, 1792,
-     1792, 1795, 1794, 1790, 1796, 1798, 1800, 1793, 1801, 1789,
-     1802, 1791, 1800, 1795, 1809, 1803, 1796, 1799, 1804, 1804,
-     1801, 1803, 1805, 1809, 1798, 1805, 1806, 1806, 1802, 1808,
-     1810, 1811, 1811, 1812, 1808, 1813, 1810, 1813, 1814, 1815,
-     1816, 1814, 1817, 1818, 1819, 1812, 1820, 1821, 1823, 1819,
-
-     1824, 1820, 1822, 1826, 1829, 1824, 1821, 1825,    0, 1815,
-     1817, 1818, 1816, 1823, 1822, 1827, 1825, 1828, 1832, 1829,
-     1827, 1834, 1828, 1826, 1830, 1830, 1831, 1827, 1835, 1825,
-     1836, 1837, 1831, 1838, 1839, 1838, 1840, 1840, 1843, 1832,
-     1834, 1841, 1841, 1842, 1842, 1846, 1836, 1835, 1839, 1847,
-     1839, 1837, 1844, 1844, 1845, 1845, 1848, 1850, 1843, 1849,
-     1849, 1850, 1851, 1854, 1852, 1855, 1846, 1852, 1851, 1854,
-     1847, 1857, 1856, 1858, 1860, 1860, 1857, 1848, 1856, 1859,
-     1861, 1862, 1859, 1855, 1863, 1863, 1862, 1864, 1865, 1866,
-     1867, 1868, 1868, 1870, 1866, 1867, 1869, 1879, 1858, 1870,
-
-     1861, 1869, 1864, 1871, 1872, 1873, 1874, 1875, 1876, 1865,
-     1880, 1879,    0, 1875, 1878, 1871, 1871, 1871, 1883, 1878,
-     1878, 1882, 1871, 1873, 1872, 1880, 1874, 1881, 1876, 1881,
-     1884, 1885, 1882, 1883, 1886, 1887, 1884, 1888, 1888, 1889,
-     1885, 1890, 1890, 1891, 1892, 1893, 1893, 1894, 1894, 1895,
-     1898, 1898, 1899, 1900, 1886, 1902, 1887, 1903, 1905, 1906,
-     1906, 1904, 1900, 1891, 1902, 1889, 1892, 1904, 1907, 1895,
-     1908, 1910, 1909, 1911, 1905, 1912, 1912, 1899, 1903, 1909,
-     1910, 1913, 1914, 1917, 1916, 1908, 1918, 1920, 1917, 1907,
-     1916, 1919, 1918, 1924, 1920, 1921, 1929, 1925, 1914, 1911,
-
-     1922, 1921, 1922, 1925, 1926, 1926, 1928, 1913, 1927, 1930,
-     1932, 1919, 1924, 1927, 1931, 1928, 1929, 1931, 1933, 1934,
-     1935, 1933, 1932, 1936, 1936, 1937, 1938, 1939, 1930, 1940,
-     1941, 1937, 1938, 1943, 1941, 1944, 1945, 1934, 1946, 1946,
-     1947, 1945, 1948, 1949, 1940, 1952, 1935, 1939, 1951, 1952,
-     1941, 1953, 1953, 1943, 1954, 1957, 1955, 1944, 1949, 1957,
-     1954, 1948, 1956, 1956, 1947, 1955, 1958, 1951, 1959, 1959,
-     1960, 1961, 1968, 1962, 1963, 1964, 1965, 1958, 1966, 1963,
-     1967, 1971, 1958, 1970, 1969, 1961, 1967, 1978, 1970, 1974,
-     1968, 1960, 1962, 1974, 1971, 1964, 1965, 1976, 1966, 1969,
-
-     1972, 1972, 1973, 1973, 1977, 1986, 1976, 1978, 1979, 1979,
-     1981, 1981, 1982, 1983,    0, 1977, 1985, 1982, 1982, 1983,
-     1977, 1987, 1985, 1988, 1989, 1991, 1987, 1993, 1992, 1995,
-     1989, 1986, 1992, 1994, 1994, 1988, 1996, 1991, 1997, 1993,
-     1998, 2001, 1996, 1999, 1999, 2000, 1998, 2002, 2006, 2074,
-     2003, 2005, 2002, 2007, 1995, 2013, 2009, 2074, 2007, 2009,
-     1997, 2001, 2003, 2005, 2000, 2010, 2010, 2006, 2011, 2011,
-     2012, 2012, 2014, 2015, 2017, 2013, 2016, 2018, 2014, 2015,
-     2017, 2016, 2020, 2023, 2026, 2022, 2018, 2020, 2022, 2024,
-     2024, 2027, 2028, 2029, 2029, 2023, 2026, 2028, 2030, 2031,
-
-     2032, 2034, 2034, 2027, 2031, 2032, 2033, 2030, 2035, 2033,
-     2036, 2037, 2038, 2039, 2042, 2040, 2041, 2039, 2043, 2036,
-     2040, 2044, 2041, 2045, 2047, 2047, 2048, 2043, 2035, 2037,
-     2050, 2038, 2042, 2049, 2051, 2051, 2047, 2045, 2052, 2044,
-     2053, 2054, 2049, 2055, 2048, 2056, 2061, 2052, 2055, 2061,
-     2050, 2062, 2053, 2059, 2059, 2063, 2064, 2068, 2056, 2066,
-     2069, 2067, 2054, 2068, 2070, 2070, 2071, 2062, 2071, 2072,
-     2079, 2063, 2064, 2088, 2066, 2067, 2084, 2069, 2073, 2073,
-     2076, 2076, 2077, 2077, 2080, 2081, 2082, 2072, 2083, 2085,
-     2080, 2081, 2087, 2079, 2088, 2083, 2086, 2086, 2084, 2089,
-
-     2082, 2087, 2090, 2091, 2092, 2093, 2094, 2097, 2099, 2085,
-     2098, 2089, 2101, 2095, 2090, 2095, 2092, 2102, 2091, 2095,
-     2099, 2094, 2100, 2100, 2104, 2103, 2105, 2097, 2103, 2104,
-     2101, 2093, 2095, 2098, 2107, 2109, 2108, 2102, 2108, 2107,
-     2110, 2111, 2113, 2115, 2119, 2110, 2105, 2116, 2111, 2120,
-     2117, 2113, 2118, 2109, 2118, 2120, 2116, 2122, 2123, 2122,
-     2125, 2115, 2117, 2119, 2124, 2124, 2126, 2127, 2128, 2127,
-     2129, 2126, 2123, 2128, 2130, 2129, 2131, 2132, 2133, 2136,
-     2134, 2140, 2135, 2137, 2133, 2134, 2125, 2141, 2137, 2137,
-     2138, 2136, 2130, 2145, 2131, 2135, 2144, 2132, 2138, 2146,
-
-     2140, 2141, 2142, 2142, 2143, 2143, 2147, 2144, 2145, 2148,
-     2150, 2149, 2147, 2149, 2148, 2151, 2152, 2152, 2153, 2146,
-     2154, 2154, 2157, 2151, 2155, 2155, 2156, 2157, 2150, 2158,
-     2153, 2151, 2160, 2161, 2163, 2156, 2160, 2162, 2164, 2162,
-     2165, 2166, 2161, 2164, 2164, 2161, 2167, 2158, 2169, 2170,
-     2166, 2171, 2165, 2173, 2170, 2163, 2171, 2174, 2167, 2175,
-     2169, 2176, 2176, 2177, 2178, 2179, 2173, 2181, 2175, 2180,
-     2182, 2183,    0, 2184, 2188, 2186, 2187, 2174, 2184, 2197,
-     2191, 2177, 2178, 2179, 2182, 2180, 2183, 2186, 2187, 2191,
-     2189, 2190, 2181, 2194, 2188, 2189, 2190, 2196, 2198, 2194,
-
-     2199, 2200, 2197, 2196, 2205, 2201, 2202, 2202, 2203, 2204,
-     2204, 2206, 2194, 2198, 2201, 2207, 2208, 2203, 2199, 2207,
-     2209, 2208, 2205, 2211, 2213, 2212, 2200, 2219,    0, 2214,
-     2206, 2212, 2215, 2209, 2214, 2214, 2217, 2216, 2215, 2217,
-     2218, 2228, 2211, 2216, 2222, 2222, 2213, 2219, 2218, 2223,
-     2223, 2224, 2225, 2225, 2226, 2226, 2227, 2229, 2241, 2228,
-     2224, 2230, 2233, 2229, 2223, 2237, 2230, 2233, 2227, 2231,
-     2231, 2232, 2232, 2234, 2236, 2223, 2238, 2239, 2236, 2234,
-     2238, 2242, 2243, 2241, 2244, 2237, 2242, 2245, 2246, 2248,
-     2249, 2247, 2245, 2250, 2252, 2249, 2253, 2239, 2252, 2244,
-
-     2251, 2251, 2255, 2254, 2256, 2243, 2246, 2247, 2254, 2248,
-     2258, 2253, 2257, 2259, 2260, 2250, 2261, 2264, 2259, 2262,
-     2262, 2265, 2256, 2266, 2257, 2264, 2267, 2260, 2255, 2258,
-     2268, 2269, 2270, 2271, 2261, 2272, 2273, 2274, 2305, 2278,
-     2265, 2276, 2266, 2274, 2279, 2267, 2281, 2272, 2281, 2282,
-     2305, 2270, 2278, 2268, 2271, 2269, 2276, 2273, 2279, 2280,
-     2283, 2283, 2284, 2285, 2286, 2280, 2285, 2284, 2287, 2282,
-     2288, 2289, 2289, 2290, 2290, 2293, 2291, 2286, 2291, 2292,
-     2292, 2294, 2287, 2288, 2295, 2295, 2296, 2296, 2297, 2303,
-     2293, 2298, 2298, 2300, 2294, 2299, 2299, 2297, 2300, 2302,
-
-     2297, 2304, 2306, 2306, 2302, 2307, 2307, 2308, 2312, 2303,
-     2309, 2309, 2310, 2311, 2311, 2313, 2314, 2314, 2315, 2315,
-     2313, 2304, 2316, 2312, 2317, 2318, 2308, 2319, 2320, 2322,
-     2310, 2323, 2323, 2317, 2322, 2324, 2316, 2325, 2325, 2326,
-     2327, 2319, 2318, 2328, 2332, 2327, 2333, 2320, 2329, 2328,
-     2336, 2329, 2330, 2330, 2324, 2331, 2331, 2326, 2334, 2337,
-     2334, 2333, 2340, 2332, 2341, 2336, 2338, 2338, 2330, 2342,
-     2343, 2344, 2345, 2345, 2346, 2344, 2347, 2352, 2337, 2341,
-     2348, 2347, 2340, 2349, 2353, 2343, 2351, 2351, 2354, 2355,
-     2356, 2353, 2342, 2346, 2357, 2348, 2358, 2352, 2349, 2359,
-
-     2359, 2360, 2354, 2361, 2365, 2361, 2364, 2355, 2356, 2357,
-     2360, 2362, 2364, 2366, 2362, 2367, 2365, 2368, 2366, 2369,
-     2367, 2371, 2358, 2370, 2372, 2374, 2371, 2380, 2375, 2362,
-     2374, 2362, 2369, 2375, 2376, 2378, 2377, 2379, 2381, 2376,
-     2382, 2378, 2368, 2379, 2370, 2385, 2382, 2383, 2380, 2384,
-     2372, 2377, 2383, 2381, 2384, 2386, 2387, 2388, 2389, 2387,
-     2390, 2392, 2391, 2397, 2399, 2400, 2388, 2389, 2386, 2390,
-     2385, 2391, 2393, 2394, 2400, 2392, 2395,    0, 2393, 2394,
-     2395, 2401, 2401, 2397, 2399, 2402, 2403, 2403, 2404, 2405,
-     2405, 2402, 2407, 2406, 2409, 2403, 2412, 2404, 2406, 2410,
-
-     2411, 2411, 2416, 2421, 2413, 2415, 2417, 2418, 2421, 2422,
-     2409, 2412, 2407, 2413, 2407, 2410, 2423, 2415, 2416, 2418,
-     2420, 2417,    0, 2420, 2424, 2424, 2425, 2425, 2423, 2422,
-     2427, 2427, 2428, 2429, 2430, 2428, 2431, 2432, 2429, 2434,
-     2430, 2437, 2431, 2433, 2433, 2436, 2432, 2435, 2435, 2438,
-     2439, 2439, 2440, 2434, 2442, 2437, 2441, 2436, 2440, 2442,
-     2444, 2450, 2445, 2448, 2444, 2445, 2446, 2446, 2438, 2447,
-     2441, 2449, 2448, 2451, 2447, 2452, 2452, 2451, 2453, 2455,
-     2449, 2450, 2456, 2457, 2455, 2458, 2459, 2461, 2460, 2462,
-     2463, 2453, 2460, 2464, 2462, 2466, 2463, 2465, 2465, 2464,
-
-     2459, 2467, 2456, 2457, 2468, 2458, 2469, 2461, 2470, 2471,
-     2471, 2469, 2473, 2466, 2474, 2478, 2475, 2478, 2477, 2476,
-     2467, 2475, 2480, 2468, 2473, 2476, 2477, 2482, 2486, 2470,
-     2474, 2480, 2483, 2483, 2484, 2485, 2492, 2484, 2485, 2487,
-     2487, 2482, 2490, 2491, 2493, 2493, 2490, 2494, 2492, 2491,
-     2497, 2497, 2499, 2501, 2486, 2502, 2494, 2505, 2506, 2507,
-     2508, 2509, 2505, 2510, 2510, 2508, 2509, 2501, 2512, 2512,
-     2499, 2502, 2514, 2515, 2516, 2516, 2517, 2518, 2514, 2521,
-     2507, 2519, 2522, 2523, 2506, 2522, 2519, 2527, 2524, 2525,
-     2525, 2528, 2517, 2515, 2530, 2523, 2527, 2528, 2521, 2518,
-
-     2524, 2529, 2531, 2533, 2533, 2534, 2535, 2529, 2534, 2536,
-     2538, 2538, 2530, 2539, 2539, 2540, 2541, 2531, 2543, 2542,
-     2540, 2544, 2545, 2546, 2545, 2535, 2544, 2536, 2542, 2547,
-     2548, 2543, 2550, 2549, 2541, 2551, 2552, 2546, 2549, 2553,
-     2553, 2552, 2548, 2547, 2554, 2554, 2555, 2555, 2556, 2556,
-     2557, 2558, 2550, 2559, 2563, 2551, 2560, 2560, 2559, 2561,
-     2561, 2564, 2557, 2562, 2562, 2565, 2563, 2566, 2567, 2558,
-     2568, 2569, 2569, 2570, 2571, 2571, 2574, 2565, 2572, 2572,
-     2573, 2564, 2576, 2575, 2577, 2579, 2568, 2566, 2574, 2567,
-     2575, 2573, 2570, 2578, 2576, 2580, 2581, 2581, 2578, 2582,
-
-     2583, 2583, 2584, 2585, 2577, 2579, 2586, 2587, 2582, 2591,
-     2588, 2589, 2590, 2593, 2590, 2580, 2592, 2592, 2597, 2586,
-     2594, 2591, 2593, 2585, 2588, 2595, 2598, 2599, 2584, 2600,
-     2601, 2587, 2600, 2589, 2602, 2594, 2597, 2603, 2612, 2602,
-     2595, 2611, 2603, 2613, 2601, 2604, 2604, 2616, 2598, 2612,
-     2599, 2605, 2605, 2606, 2606, 2608, 2608, 2610, 2610, 2611,
-     2614, 2617, 2613, 2618, 2619, 2620, 2621, 2616, 2622, 2623,
-     2622, 2630, 2624, 2625, 2620, 2614, 2626, 2626, 2629, 2617,
-     2628, 2628, 2632, 2632, 2619, 2618, 2621, 2631, 2634, 2623,
-     2624, 2625, 2629, 2630, 2635, 2635, 2631, 2634, 2636, 2637,
-
-     2638, 2639, 2641, 2642, 2640, 2644, 2643, 2645, 2639, 2646,
-     2646, 2647, 2647, 2648, 2645,    0, 2636, 2637, 2638, 2640,
-     2641, 2642, 2643, 2649, 2644, 2650, 2652, 2652, 2653, 2653,
-     2654, 2650, 2655, 2648, 2656, 2657, 2654, 2658, 2659, 2660,
-     2662, 2649, 2661, 2659, 2664, 2669, 2664, 2663, 2672, 2656,
-     2655, 2658, 2663, 2661, 2657, 2665, 2665, 2667, 2667, 2660,
-     2662, 2666, 2671, 2666, 2669, 2673, 2674, 2672, 2675, 2676,
-     2677, 2671, 2678, 2675, 2676, 2681, 2682, 2673, 2683, 2684,
-     2684, 2683, 2685, 2686, 2687, 2687, 2674, 2688, 2689, 2690,
-     2677, 2678, 2692, 2690, 2682, 2681, 2693, 2685, 2688, 2696,
-
-     2694, 2686, 2693, 2689, 2694, 2695, 2695, 2692, 2698, 2699,
-     2700, 2704, 2696, 2701, 2701, 2703, 2708, 2705, 2706, 2706,
-     2704, 2705, 2712, 2698, 2707, 2707, 2714, 2703, 2710, 2699,
-     2700, 2709, 2709, 2710, 2711, 2708, 2713, 2721, 2712, 2715,
-     2715, 2720, 2720, 2711, 2722, 2722, 2714, 2723, 2713, 2724,
-     2725, 2730, 2726, 2729, 2729, 2727, 2728, 2731,    0, 2721,
-     2723, 2726, 2724, 2725, 2727, 2728, 2733, 2733, 2736, 2737,
-     2738, 2730, 2731, 2736, 2737, 2739, 2741, 2740, 2742, 2745,
-     2739, 2743, 2749, 2747, 2738, 2740, 2748, 2742, 2747, 2743,
-     2753, 2748, 2750, 2750, 2745, 2741, 2752, 2749, 2751, 2751,
-
-     2755, 2752, 2754, 2754, 2757, 2756, 2758, 2755, 2759, 2753,
-     2756, 2760, 2761, 2761, 2759, 2762, 2760,    0, 2763, 2764,
-     2764, 2768, 2757, 2763, 2758, 2765, 2765, 2769, 2769, 2770,
-     2762, 2771, 2770, 2772, 2768, 2773, 2771, 2771, 2772, 2774,
-     2773, 2775, 2776, 2777, 2779, 2778, 2776, 2775, 2777, 2780,
-     2781, 2784, 2782, 2774, 2778, 2783, 2784, 2780, 2782, 2779,
-     2785, 2783, 2787, 2788, 2789, 2791, 2796, 2789, 2788, 2787,
-     2793, 2781, 2785, 2794, 2795, 2793, 2797, 2791, 2794, 2795,
-     2805, 2798, 2799, 2801, 2796, 2800, 2800, 2810, 2802, 2797,
-     2798, 2799, 2801, 2802, 2806, 2807, 2811, 2814, 2805, 2812,
-
-     2806, 2807, 2813, 2813, 2814, 2815, 2810, 2817, 2816, 2820,
-     2818, 2819, 2819, 2824, 2822, 2825, 2811, 2816, 2812, 2825,
-     2826, 2826, 2817, 2827, 2815, 2818, 2828, 2830, 2820, 2822,
-     2829, 2831, 2828, 2824, 2832, 2832, 2829, 2831, 2833, 2834,
-     2837, 2838, 2835, 2859, 2840, 2830, 2833, 2835, 2827, 2837,
-     2840, 2843, 2841, 2842, 2838, 2841, 2845, 2842, 2844, 2844,
-     2847, 2847, 2848, 2859, 2834, 2843, 2849, 2849, 2850, 2850,
-     2853, 2845, 2852, 2852, 2853, 2855, 2854, 2857, 2857, 2861,
-     2848, 2854, 2860, 2862, 2855, 2863, 2865, 2860, 2862, 2862,
-     2872, 2861, 2866, 2866, 2868, 2868, 2873, 2863, 2869, 2869,
-
-     2870, 2870, 2871, 2872, 2876, 2871, 2865, 2875, 2875, 2873,
-     2878, 2879, 2879, 2880, 2880, 2881, 2881, 2882, 2883, 2883,
-     2884, 2885, 2876, 2886, 2889, 2887, 2888, 2888, 2889, 2892,
-     2878, 2887, 2882, 2884, 2896, 2892, 2893, 2886, 2895, 2885,
-     2897, 2893, 2898, 2895, 2895, 2899, 2900, 2901, 2911, 2902,
-     2908, 2899, 2900, 2902, 2903, 2903, 2906, 2896, 2908, 2914,
-     2897, 2906, 2898, 2909, 2912, 2915, 2909, 2912, 2913, 2913,
-     2915, 2916, 2901, 2911, 2917, 2934, 2914, 2914, 2918, 2919,
-     2919, 2920, 2921, 2922, 2923, 2921, 2928, 2928, 2924, 2916,
-     2927, 2934, 2918, 2921, 2917, 2920, 2924, 2922, 2937, 2925,
-
-        0, 2926, 2936, 2923, 2925, 2925, 2926, 2926, 2940, 2927,
-     2929, 2929, 2930, 2930, 2931, 2931, 2932, 2932, 2933, 2933,
-     2935, 2938, 2936, 2939, 2937, 2935, 2941, 2940, 2939, 2942,
-     2943, 2941, 2944, 2946, 2946, 2938, 2947, 2947, 2942, 2948,
-     2949, 2950, 2948, 2952, 2952, 2963, 2949, 2953, 2954, 2954,
-     2943, 2955, 2944, 2958, 2953, 2959, 2955, 2957, 2957, 2950,
-     2960, 2961, 2958, 2963, 2959, 2964, 2964, 2965, 2965, 2960,
-     2961, 2966, 2967, 2968, 2969, 2966, 2970, 2971, 2974,    0,
-     2973, 2967, 2971, 2971, 2975, 2969, 2981, 2974, 2975, 2979,
-     2984, 2970, 2968, 2973, 2979, 2980, 2980, 2983, 2983, 2985,
-
-     2981, 2986, 2988, 2988, 2984, 2989, 2990, 2994, 2995, 2998,
-     2999, 2996, 3003, 2995, 2989, 3001, 2999, 3005, 2990, 2986,
-     2996, 3006, 3005, 3010, 2985, 3008, 3006, 3001, 3010, 2998,
-     3007, 3007, 2994, 3003, 3008, 3011, 3012, 3013, 3013, 3015,
-     3015, 3013, 3016, 3016, 3017, 3017, 3018, 3019, 3011, 3020,
-     3012, 3021, 3023, 3027, 3024, 3018, 3021, 3025, 3023, 3024,
-     3026, 3026, 3025, 3028, 3029, 3030, 3031, 3019, 3020, 3033,
-     3030, 3027, 3032, 3034, 3034, 3028, 3036, 3037, 3032, 3040,
-     3036, 3038, 3037, 3044, 3031, 3029, 3038, 3039, 3039, 3041,
-     3042, 3046, 3046, 3048, 3033, 3049, 3050, 3051, 3040, 3053,
-
-     3054, 3051, 3052, 3044, 3041, 3042, 3048, 3056, 3049, 3050,
-     3055, 3052, 3056, 3057, 3059, 3053, 3058, 3058, 3055, 3054,
-     3060, 3061, 3063, 3059, 3062, 3062, 3066, 3066, 3067, 3068,
-     3068, 3070, 3074, 3057, 3067, 3072, 3072, 3075, 3060, 3076,
-     3077, 3063, 3081, 3081, 3076, 3078, 3082, 3061, 3074, 3083,
-     3078, 3084, 3070, 3075, 3085, 3086, 3077, 3084, 3083, 3088,
-     3088, 3089, 3090, 3091, 3091, 3093, 3082, 3095, 3097, 3099,
-     3096, 3093, 3103, 3097, 3086, 3089, 3096, 3085, 3100, 3100,
-     3102, 3090, 3101, 3101, 3104, 3104, 3105, 3095, 3107, 3106,
-     3108, 3099, 3103, 3109, 3110, 3102, 3108, 3105, 3106, 3111,
-
-     3112, 3112, 3113, 3121, 3104,    0, 3110, 3114, 3107, 3120,
-     3114, 3115, 3109, 3126, 3115, 3116, 3116, 3113, 3122, 3111,
-     3131, 3120, 3125, 3121, 3122, 3123, 3123, 3124, 3125, 3128,
-     3124, 3126, 3129, 3129, 3128, 3130, 3132, 3133, 3136, 3131,
-     3130, 3137, 3132, 3134, 3134, 3138, 3141, 3139, 3140, 3140,
-     3136, 3142, 3143, 3148, 3133, 3133, 3145, 3145, 3148, 3137,
-     3139, 3143, 3146, 3146, 3149, 3141, 3150, 3142, 3147, 3147,
-     3138, 3150, 3151, 3151, 3152, 3152, 3153, 3153, 3149, 3154,
-     3154, 3155, 3156, 3157, 3164, 3158, 3160, 3160, 3166, 3157,
-     3158, 3162, 3162, 3167, 3155, 3168, 3169, 3170, 3170, 3172,
-
-     3172, 3173, 3174, 3164, 3176, 3175, 3184, 3177, 3156, 3183,
-     3166, 3178, 3178, 3181, 3168, 3167, 3177, 3188, 3169, 3175,
-     3182, 3174, 3179, 3179, 3176, 3184, 3182, 3173, 3185, 3183,
-     3195, 3181, 3193, 3185, 3189, 3189, 3191, 3191, 3188, 3192,
-     3196, 3194, 3195, 3202, 3192, 3203, 3193, 3194, 3196, 3197,
-     3197, 3198, 3205, 3200, 3201, 3204, 3198, 3200, 3208, 3201,
-     3204, 3206, 3209, 3202, 3205, 3203, 3208, 3206, 3210, 3211,
-     3214, 3217, 3213, 3216, 3215, 3219, 3217, 3220, 3221, 3224,
-     3219, 3209, 3222,    0, 3221, 3226, 3214, 3222, 3210, 3211,
-     3213, 3215, 3215, 3225, 3216, 3239, 3225, 3220, 3226, 3224,
-
-     3230, 3230, 3231, 3231, 3232, 3237, 3237, 3238, 3232, 3240,
-     3240, 3386, 3238, 3386, 3239, 3243, 3243, 3244, 3244, 3248,
-     3244, 3245, 3245, 3248, 3245, 3246, 3246, 3247, 3247, 3250,
-     3247, 3251, 3252, 3252, 3250, 3253, 3254, 3257, 3257, 3258,
-     3251, 3259, 3260, 3261, 3261, 3262, 3265, 3260, 3266, 3268,
-     3254, 3269, 3267, 3253, 3271, 3266, 3267, 3272, 3268, 3258,
-     3274, 3259, 3272, 3273, 3273, 3262, 3269, 3275, 3275, 3274,
-     3278, 3265, 3271, 3276, 3276, 3277, 3277, 3279, 3280, 3283,
-     3282, 3284, 3279, 3281, 3285, 3278, 3282, 3280, 3281, 3281,
-     3280, 3288, 3286, 3287, 3289, 3289, 3284, 3286, 3287, 3294,
-
-     3290, 3291, 3292, 3292, 3283, 3285, 3290, 3291, 3293, 3293,
-     3288, 3295, 3298, 3298, 3294, 3301, 3295, 3300, 3300, 3304,
-     3304, 3305, 3305, 3313, 3301, 3306, 3306, 3307, 3307, 3309,
-     3309, 3310, 3310, 3311, 3311, 3312, 3312, 3315, 3316, 3316,
-     3317, 3317, 3318, 3319, 3320, 3325, 3315, 3322, 3322, 3313,
-     3323, 3318, 3324, 3324, 3326, 3319, 3327, 3328, 3328, 3331,
-     3325, 3329, 3329, 3335, 3320, 3332, 3332, 3326, 3327, 3323,
-     3336, 3337, 3339, 3336, 3331, 3338, 3338, 3341, 3342, 3343,
-     3341, 3335, 3344, 3345, 3342, 3346, 3349, 3344, 3347, 3350,
-     3339, 3353, 3349, 3343, 3354, 3353, 3357, 3337, 3350, 3370,
-
-     3366, 3376, 3345, 3346, 3347, 3366, 3379, 3367, 3383, 3354,
-     3367, 3377, 3370, 3371, 3371, 3372, 3372, 3374, 3374, 3378,
-     3377, 3381, 3357, 3378, 3376, 3384, 3379, 3385, 3387, 3388,
-     3388, 3383, 3385, 3389, 3390, 3381, 3384, 3391, 3392, 3393,
-     3395, 3394, 3397, 3387, 3398, 3396, 3389, 3397, 3401, 3395,
-     3400, 3400, 3407, 3390, 3392, 3391, 3394, 3396, 3399, 3406,
-        0, 3402, 3409, 3399, 3393, 3398, 3402, 3414, 3401, 3408,
-     3408, 3409, 3407, 3406, 3410, 3410, 3411, 3411, 3412, 3412,
-     3413, 3413, 3415, 3417, 3416, 3418, 3414, 3416, 3417, 3419,
-     3418, 3420, 3421, 3422, 3424, 3426, 3423, 3430, 3421, 3424,
-
-     3425, 3425, 3415, 3427, 3427, 3431, 3420, 3422, 3423, 3429,
-     3429, 3434, 3430, 3436, 3419, 3426, 3432, 3432, 3439, 3439,
-     3440, 3440, 3441, 3442, 3431, 3445, 3434, 3443, 3444, 3447,
-     3441, 3436, 3446, 3443, 3444, 3448, 3449, 3449, 3454, 3445,
-     3448, 3455, 3442, 3451, 3451, 3446, 3457, 3458, 3447, 3460,
-     3461, 3458, 3462, 3463, 3464, 3461, 3465, 3466, 3467, 3454,
-     3457, 3455, 3466, 3467, 3468, 3468, 3463, 3464, 3471, 3460,
-     3473, 3462, 3472, 3474, 3474, 3465, 3475, 3476, 3477, 3477,
-     3478, 3475, 3479, 3476, 3481, 3478, 3480, 3479, 3471, 3473,
-     3472, 3480, 3482, 3484, 3484, 3485, 3486, 3486, 3482, 3489,
-
-     3485, 3488, 3490, 3481, 3491, 3488, 3492, 3493, 3494, 3490,
-     3500, 3495, 3502, 3493, 3497, 3497, 3499, 3499, 3489, 3500,
-     3503, 3501, 3500, 3491, 3495, 3492, 3501, 3494, 3504, 3505,
-     3505, 3502, 3506, 3507, 3509, 3510, 3510, 3506, 3511, 3503,
-     3516, 3504, 3512, 3512, 3513, 3513, 3507, 3514, 3515, 3517,
-     3517, 3518, 3514, 3520, 3520, 3515, 3518, 3511, 3521, 3516,
-     3509, 3519, 3522, 3519, 3523, 3521, 3524, 3525, 3528, 3522,
-     3530, 3524, 3527, 3527, 3531, 3530, 3532, 3533, 3537, 3531,
-     3534, 3534, 3538, 3523, 3536, 3536, 3525, 3528, 3539, 3539,
-     3540, 3540, 3541, 3543, 3543, 3532, 3533, 3537, 3545, 3541,
-
-     3551, 3538, 3544, 3544, 3547, 3545, 3550, 3552,    0, 3547,
-        0, 3550, 3553, 3553, 3554, 3554,    0,    0,    0, 3551,
-        0,    0,    0,    0,    0,    0, 3552, 3558, 3558, 3558,
-     3558, 3558, 3558, 3558, 3559, 3559, 3559, 3559, 3559, 3559,
-     3559, 3560, 3560, 3560, 3560, 3560, 3560, 3560, 3561, 3561,
-     3561, 3561, 3561, 3561, 3561, 3562, 3562, 3562, 3562, 3562,
-     3562, 3562, 3563, 3563, 3563, 3563, 3563, 3563, 3563, 3564,
-     3564, 3564, 3564, 3564, 3564, 3564, 3566, 3566,    0, 3566,
-     3566, 3566, 3566, 3567, 3567,    0,    0,    0, 3567, 3567,
-     3568, 3568,    0,    0, 3568,    0, 3568, 3569,    0,    0,
-
-        0,    0,    0, 3569, 3570, 3570,    0,    0,    0, 3570,
-     3570, 3571,    0,    0,    0,    0,    0, 3571, 3572, 3572,
-        0, 3572, 3572, 3572, 3572, 3573,    0,    0,    0,    0,
-        0, 3573, 3574, 3574,    0,    0,    0, 3574, 3574, 3575,
-     3575,    0, 3575, 3575, 3575, 3575, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557, 3557,
-     3557, 3557, 3557, 3557, 3557, 3557, 3557
+      185,  188,  184,  213,  182,  183,  193,  191,  190,  187,
+      177,  193,  186,  191,  191,  189,  194,  194,  195,  197,
+      196,  213,  196,  197,  195,  196,  198,  198,  197,  199,
+
+      200,  201,  202,  197,  204,  200,  200,  202,  203,  197,
+      197,  199,  196,  203,  205,  206,  204,  209,  207,  208,
+      201,  206,  207,  210,  208,  211,  212,  214,  176,  218,
+      215,  217,  214,  209,  205,  215,  217,  210,  212,  219,
+      211,  212,  216,  216,  206,  220,  216,  224,  216,  218,
+      223,  220,  221,  221,  259,  219,  223,  222,  225,  226,
+      216,  259,  216,  222,  225,  226,  228,  224,  229,  222,
+      230,  231,  228,  229,  226,  231,  230,  232,  233,  235,
+      233,  234,  236,  232,  237,  233,  239,  234,  236,  238,
+      240,  242,  235,  241,  243,  238,  242,  244,  240,  239,
+
+      245,  246,  248,  243,  237,  247,  241,  248,  239,  249,
+      247,  247,  244,  250,  251,  253,  245,  250,  252,  254,
+      255,  246,  258,  256,  252,  254,  260,  249,  256,  261,
+      262,  263,  260,  253,  253,  261,  251,  263,  264,  265,
+      255,  258,  266,  266,  267,  267,  268,  273,  269,  262,
+      264,  276,  268,  265,  269,  270,  271,  270,  272,  273,
+      275,  274,  277,  272,  278,  289,  279,  277,  275,  280,
+      268,  276,  279,  281,  270,  280,  282,  283,  281,  271,
+      274,  282,  284,  283,  285,  286,  287,  278,  288,  290,
+      289,  291,  293,  293,  291,  290,  288,  284,  285,  292,
+
+      287,  292,  294,  286,  295,  294,  296,  296,  297,  297,
+      298,  300,  299,  301,  300,  302,  303,  301,  304,  307,
+      312,  312,  295,  306,  302,  303,  298,  299,  308,  306,
+      309,  316,  309,  307,  308,  310,  311,  304,  313,  314,
+      311,  310,  315,  313,  317,  314,  319,  318,  315,  320,
+      320,  316,  321,  322,  323,  321,  324,  311,  323,  319,
+      325,  327,  317,  326,  326,  329,  328,  315,  318,  328,
+      330,  322,  332,  334,  335,  324,  330,  329,  325,  327,
+      331,  339,  334,  331,  332,  336,  328,  333,  338,  340,
+      336,  338,  335,  174,  339,  337,  333,  342,  337,  333,
+
+      337,  340,  342,  342,  333,  333,  333,  333,  341,  343,
+      341,  341,  343,  337,  344,  344,  337,  345,  346,  349,
+      347,  348,  350,  351,  351,  352,  353,  353,  349,  355,
+      352,  350,  358,  346,  345,  347,  357,  345,  348,  348,
+      354,  354,  356,  359,  355,  360,  361,  356,  357,  364,
+      365,  358,  361,  362,  362,  365,  362,  367,  366,  372,
+      360,  768,  367,  359,  366,  362,  368,  370,  372,  364,
+      369,  368,  362,  369,  374,  369,  371,  368,  768,  371,
+      374,  370,  373,  373,  375,  375,  376,  381,  379,  382,
+      388,  376,  371,  380,  392,  371,  380,  371,  377,  377,
+
+      411,  377,  381,  383,  382,  388,  385,  377,  379,  385,
+      386,  377,  411,  389,  380,  392,  377,  383,  393,  377,
+      378,  378,  389,  378,  386,  385,  390,  391,  398,  395,
+      394,  390,  390,  391,  396,  399,  378,  393,  395,  378,
+      391,  378,  397,  378,  387,  394,  387,  387,  397,  403,
+      400,  405,  404,  396,  398,  399,  387,  387,  387,  387,
+      387,  401,  407,  387,  400,  402,  405,  401,  406,  403,
+      402,  401,  404,  406,  408,  409,  409,  407,  410,  412,
+      408,  413,  414,  415,  416,  418,  419,  413,  402,  416,
+      420,  417,  417,  412,  417,  421,  425,  169,  410,  415,
+
+      425,  422,  419,  422,  428,  418,  420,  414,  423,  421,
+      427,  427,  424,  423,  424,  424,  426,  432,  429,  433,
+      426,  430,  431,  428,  435,  436,  167,  433,  433,  441,
+      435,  432,  424,  429,  436,  426,  439,  430,  437,  433,
+      431,  433,  434,  437,  438,  439,  440,  434,  438,  443,
+      441,  442,  440,  443,  446,  434,  434,  442,  444,  434,
+      434,  444,  445,  434,  447,  447,  448,  445,  449,  449,
+      450,  451,  452,  452,  446,  450,  453,  454,  455,  448,
+      456,  454,  453,  457,  451,  458,  459,  459,  457,  461,
+      458,  460,  462,  455,  463,  459,  464,  465,  470,  464,
+
+      466,  456,  465,  460,  466,  467,  463,  468,  468,  461,
+      462,  469,  471,  471,  472,  477,  469,  467,  476,  470,
+      474,  474,  478,  477,  479,  480,  481,  482,  483,  487,
+      485,  481,  489,  479,  486,  490,  472,  488,  489,  476,
+      483,  507,  493,  478,  490,  507,  480,  482,  485,  487,
+      485,  488,  486,  491,  494,  492,  493,  496,  495,  491,
+      492,  495,  494,  497,  498,  494,  499,  500,  503,  502,
+      505,  496,  499,  498,  501,  502,  504,  501,  497,  506,
+      508,  504,  503,  509,  510,  508,  511,  500,  512,  510,
+      513,  516,  505,  502,  517,  518,  528,  519,  509,  520,
+
+      506,  519,  511,  513,  522,  528,  166,  512,  514,  514,
+      518,  516,  521,  527,  514,  517,  514,  521,  520,  523,
+      522,  524,  514,  523,  514,  525,  524,  514,  514,  527,
+      524,  526,  527,  529,  514,  530,  526,  531,  532,  529,
+      525,  532,  533,  534,  529,  535,  535,  536,  537,  537,
+      530,  538,  539,  531,  540,  542,  526,  541,  541,  543,
+      546,  545,  544,  534,  539,  533,  538,  544,  547,  540,
+      545,  548,  536,  550,  542,  554,  551,  548,  555,  546,
+      551,  543,  550,  547,  552,  553,  556,  554,  552,  557,
+      559,  553,  558,  555,  560,  562,  561,  562,  560,  563,
+
+      565,  565,  564,  557,  567,  556,  566,  558,  559,  561,
+      564,  568,  566,  569,  571,  570,  567,  568,  570,  572,
+      575,  573,  576,  563,  574,  569,  573,  574,  571,  575,
+      578,  579,  579,  587,  572,  577,  575,  586,  576,  575,
+      577,  577,  581,  578,  580,  580,  582,  582,  581,  583,
+      583,  584,  588,  585,  587,  586,  590,  584,  585,  585,
+      589,  590,  591,  589,  588,  592,  593,  594,  595,  593,
+      596,  597,  594,  592,  598,  597,  599,  601,  600,  602,
+      598,  591,  600,  603,  602,  604,  604,  605,  606,  596,
+      609,  595,  608,  607,  610,  601,  599,  603,  607,  611,
+
+      164,  613,  605,  612,  618,  611,  609,  615,  612,  606,
+      614,  608,  617,  614,  610,  613,  616,  616,  614,  619,
+      618,  614,  614,  620,  619,  615,  621,  622,  620,  624,
+      617,  626,  625,  627,  626,  624,  629,  627,  628,  629,
+      621,  625,  622,  628,  630,  631,  632,  633,  635,  630,
+      634,  636,  640,  635,  633,  637,  637,  638,  639,  627,
+      641,  631,  644,  634,  632,  642,  638,  643,  644,  645,
+      650,  636,  162,  640,  642,  645,  641,  639,  646,  643,
+      651,  646,  647,  647,  648,  647,  649,  648,  650,  652,
+      653,  649,  654,  655,  651,  653,  656,  658,  657,  655,
+
+      658,  656,  659,  652,  657,  660,  662,  661,  663,  664,
+      660,  654,  661,  661,  664,  666,  665,  667,  668,  662,
+      669,  663,  665,  668,  670,  670,  667,  659,  664,  664,
+      671,  672,  673,  674,  666,  673,  675,  671,  672,  674,
+      669,  676,  678,  678,  679,  681,  676,  677,  675,  680,
+      673,  680,  677,  677,  683,  682,  676,  682,  684,  685,
+      686,  687,  688,  689,  681,  690,  693,  689,  688,  679,
+      691,  692,  683,  694,  690,  695,  684,  685,  695,  686,
+      696,  687,  697,  698,  693,  691,  692,  695,  697,  700,
+      699,  701,  694,  702,  703,  696,  704,  705,  707,  734,
+
+      704,  700,  706,  698,  699,  708,  709,  710,  712,  716,
+      701,  734,  711,  703,  702,  705,  707,  711,  706,  713,
+      713,  715,  712,  708,  708,  709,  710,  714,  716,  717,
+      718,  714,  719,  720,  721,  715,  723,  719,  722,  726,
+      717,  724,  727,  723,  718,  725,  724,  727,  729,  720,
+      728,  722,  725,  721,  730,  728,  731,  732,  733,  736,
+      743,  730,  735,  726,  736,  731,  729,  733,  735,  737,
+      738,  732,  737,  739,  738,  740,  741,  750,  742,  744,
+      744,  743,  746,  746,  740,  745,  745,  739,  747,  748,
+      752,  741,  742,  747,  745,  751,  750,  754,  748,  753,
+
+      755,  751,  756,  753,  758,  757,  759,  761,  760,  754,
+      752,  757,  758,  759,  762,  765,  772,  774,  771,  776,
+      756,  799,  772,  775,  799,  755,  760,  771,  776,  775,
+      765,  160,  761,  777,  762,  763,  784,  763,  778,  774,
+      763,  781,  778,  782,  763,  779,  779,  763,  783,  777,
+      780,  780,  781,  785,  763,  763,  784,  763,  787,  785,
+      792,  782,  783,  786,  786,  786,  788,  786,  789,  790,
+      786,  788,  791,  793,  794,  786,  791,  793,  787,  794,
+      795,  786,  786,  796,  792,  797,  798,  790,  796,  789,
+      800,  801,  803,  793,  807,  800,  800,  807,  801,  795,
+
+      797,  802,  802,  804,  805,  805,  812,  803,  804,  806,
+      808,  798,  809,  809,  806,  808,  810,  811,  810,  813,
+      814,  818,  815,  813,  816,  812,  817,  817,  819,  811,
+      820,  820,  816,  821,  822,  823,  818,  824,   85,  825,
+      814,  815,  819,  824,  825,  829,  822,  826,  826,  827,
+      829,  821,  830,  831,  827,  827,  832,  823,  830,  833,
+      834,  836,  832,  837,  833,  835,  834,  836,  835,  838,
+      838,  837,  831,  839,  839,  840,  841,  842,  844,  845,
+      843,  847,  842,  840,  843,  844,  846,  848,  848,  849,
+      852,  850,  851,  851,  841,  853,  852,  845,  849,  850,
+
+      847,  855,  846,  856,  857,  860,  858,  859,  860,  862,
+      855,  858,  856,  861,  853,  863,  859,  864,  861,  865,
+      867,  868,  868,  862,  866,  870,  864,  869,  857,  866,
+      866,  872,  865,  873,  867,  874,  871,  876,  874,  876,
+      863,  878,  869,  880,  870,  871,  874,  877,  877,  879,
+      881,  873,  882,  883,  879,  872,  884,  885,  886,  887,
+      888,  889,  878,  887,  880,  890,  885,  892,  891,  893,
+      881,  890,  882,  894,  895,  883,  884,  891,  888,  892,
+      889,  886,  897,  896,  898,  893,  899,  901,  895,  896,
+      897,  899,  894,  900,  900,  902,  903,  904,  898,  905,
+
+      906,  907,  908,  911,  909,  903,  901,  905,  910,  911,
+      912,  913,  914,  915,  916,  902,  912,  904,  914,  920,
+      906,  908,  923,  907,  909,  913,  917,  915,  910,  918,
+      921,  922,  917,  919,  916,  918,  922,  919,  920,  924,
+      924,  925,  921,  923,  928,  926,  927,  925,  929,  927,
+      921,  926,  930,  931,  932,  932,  933,  937,  930,  934,
+      935,  929,  928,  935,  934,  936,  939,  939,  940,  941,
+      936,  936,  937,  931,  933,  938,  935,  942,  935,  938,
+      943,  945,  942,  946,  949,  948,  950,  952,  952,  941,
+      940,  953,  955,  955,  954,  953,  956,  946,  948,  943,
+
+      958,  963,  957, 1013,  949,  945,  957,  950,  951,  954,
+      963,  951,  959,  951,  961,  958, 1013,  951,  960,  951,
+      964,  956,  966,  960,  951,  962,  959,  968,  961,  951,
+      962,  962,  965,  969,  964,  967,  965,  966,  969,  968,
+      967,  970,  971,  972,  973,  982,  974,   80,  965,  976,
+      967,  974,  975,  973,  976,  970,  977,  972,  975,  978,
+      979,  979,  977,  971,  980,  978,  981,  982,  983,  980,
+      984,  986,  981,  987,  989,  990,  990,  988,  987,  991,
+      993,  995,  996,  986,  991,  992,  989,  983,  984,  985,
+      985,  988,  994,  992,  997,  985,  993,  985,  998, 1000,
+
+      995,  996,  999,  985,  998, 1001,  994,  999,  985,  985,
+      997, 1000, 1002, 1003, 1004,  985, 1005, 1005, 1006, 1007,
+     1009, 1010, 1006, 1001, 1010, 1011, 1009, 1014, 1002, 1012,
+     1015, 1003, 1004, 1014, 1012, 1015, 1016, 1018, 1019, 1007,
+     1020, 1022, 1021, 1023, 1011, 1025, 1018, 1019, 1021, 1024,
+     1022, 1027, 1026, 1038, 1024, 1016, 1020, 1028, 1029, 1030,
+     1032, 1037, 1023, 1035, 1031, 1025, 1026, 1029, 1030, 1028,
+     1031, 1027, 1033, 1038, 1040, 1037, 1039, 1032, 1033, 1035,
+     1041, 1039, 1042, 1043, 1044, 1045, 1048, 1049,   75, 1044,
+     1045, 1048, 1054, 1040, 1041, 1053, 1049, 1051, 1043, 1052,
+
+     1042, 1050, 1050, 1051, 1053, 1052, 1055, 1054, 1057, 1058,
+     1063, 1062, 1060, 1060, 1058, 1058, 1060, 1061, 1064, 1055,
+     1061, 1065, 1066, 1067, 1057, 1062, 1068, 1069, 1071, 1077,
+     1063, 1070, 1068,   74, 1064, 1066, 1072, 1070, 1067, 1065,
+     1073, 1072, 1080, 1071, 1075, 1075, 1076, 1069, 1078, 1076,
+     1077, 1079, 1081, 1078, 1073, 1082, 1079, 1083, 1080, 1084,
+     1082, 1081, 1083, 1086, 1087, 1092, 1088, 1089, 1091, 1086,
+     1095, 1084, 1088, 1089, 1090, 1090, 1093, 1091, 1096, 1093,
+     1087, 1094, 1094, 1092, 1097, 1099, 1098, 1100, 1095, 1098,
+     1101, 1136, 1110, 1100, 1102, 1136, 1101, 1096, 1099, 1105,
+
+     1102, 1103, 1104, 1106, 1097, 1105, 1103, 1104, 1106, 1107,
+     1110, 1109, 1111, 1112, 1115, 1107, 1109, 1113, 1116, 1112,
+     1114, 1114, 1113, 1115, 1117, 1118, 1119, 1116, 1120, 1117,
+     1121, 1120, 1111, 1121, 1123, 1122, 1124, 1125, 1126, 1123,
+     1129, 1127, 1128, 1118, 1132, 1119, 1122, 1127, 1128, 1125,
+     1133, 1130, 1131, 1131, 1124, 1129, 1130, 1126, 1134, 1135,
+     1137, 1139, 1138, 1132, 1133, 1140, 1142, 1143, 1143, 1145,
+     1134, 1138, 1147, 1144, 1145, 1149, 1150, 1135, 1137, 1146,
+     1139, 1144, 1151, 1152, 1146, 1142, 1153, 1155, 1152, 1149,
+     1140, 1150, 1147, 1156, 1151, 1153, 1154, 1154, 1157, 1156,
+
+     1158, 1159, 1166, 1160, 1157, 1160, 1159, 1155, 1161, 1162,
+     1163, 1165, 1164, 1161, 1168, 1167, 1158, 1164, 1169, 1171,
+     1171, 1166, 1167, 1162, 1163, 1172, 1165, 1173, 1174, 1168,
+     1175, 1176,   68, 1177, 1180, 1180, 1175, 1169, 1177, 1172,
+     1179, 1181, 1184, 1174, 1179, 1173, 1181, 1177, 1183, 1177,
+     1186, 1176, 1177, 1182, 1182, 1183, 1184, 1185, 1187, 1188,
+     1185, 1189, 1190, 1191, 1192, 1194, 1189, 1193, 1188, 1186,
+     1192, 1195, 1193, 1196, 1201, 1191, 1187, 1198, 1198, 1194,
+     1199, 1190, 1195, 1200, 1202, 1199, 1203, 1204, 1200, 1202,
+     1203, 1205, 1196, 1206, 1201, 1207, 1204, 1208, 1209, 1211,
+
+     1208, 1212, 1213, 1210, 1214,   63, 1205, 1218, 1206, 1208,
+     1210, 1211, 1215, 1209, 1207, 1216, 1219, 1220, 1215, 1217,
+     1212, 1222, 1214, 1213, 1221, 1217, 1220, 1218, 1224, 1223,
+     1216, 1225, 1227, 1226, 1228, 1231, 1219, 1230, 1227, 1221,
+     1222, 1223, 1234, 1230, 1232, 1233, 1236, 1224, 1226, 1235,
+     1231, 1236, 1237, 1233, 1228, 1238, 1225, 1239, 1232, 1240,
+     1238, 1238, 1234, 1245, 1237, 1235, 1241, 1242, 1242, 1244,
+       58, 1246, 1245, 1240, 1247, 1247, 1239, 1246, 1248, 1241,
+     1243, 1243, 1244, 1248, 1250, 1243, 1249, 1251, 1243, 1243,
+     1250, 1252, 1251, 1243, 1254, 1249, 1252, 1253, 1253, 1243,
+
+     1255, 1255, 1256, 1243, 1257, 1256, 1259, 1256, 1258, 1260,
+     1261, 1262, 1259, 1263, 1264, 1254, 1262, 1265, 1260, 1266,
+     1305, 1269, 1305, 1265, 1257, 1266, 1258, 1263, 1267, 1270,
+     1261, 1268, 1264, 1267, 1269, 1268, 1271, 1272, 1270, 1273,
+     1273, 1271, 1279, 1270, 1277, 1270, 1275, 1270, 1277, 1270,
+     1278, 1272, 1274, 1274, 1280, 1274, 1281, 1275, 1282, 1283,
+     1279, 1281, 1281, 1280, 1284, 1278, 1285, 1282, 1286, 1284,
+     1287, 1288, 1289, 1290, 1291, 1291, 1292, 1286, 1294, 1290,
+     1285, 1283, 1295, 1293, 1296, 1297, 1289, 1295, 1292, 1287,
+     1288, 1293, 1294, 1298, 1297, 1299, 1300, 1301, 1296, 1303,
+
+     1298, 1309, 1301, 1302, 1302, 1304, 1304, 1307, 1310, 1312,
+     1307, 1308, 1316, 1299, 1303, 1317, 1308, 1310, 1311, 1311,
+     1309, 1300, 1313, 1313, 1314, 1314, 1315, 1318, 1321, 1312,
+     1320, 1315, 1323, 1316, 1319, 1319, 1317, 1322, 1324, 1328,
+     1322, 1325, 1326, 1331, 1324, 1321, 1325, 1327, 1318, 1327,
+     1320, 1326, 1323, 1330, 1332, 1333, 1330, 1328, 1331, 1334,
+     1333, 1335, 1336, 1337, 1340, 1340, 1335, 1332, 1337, 1338,
+     1336, 1339, 1338, 1334, 1341, 1342, 1339, 1343, 1344, 1341,
+     1347, 1345, 1348, 1343, 1349, 1344, 1347, 1350, 1348, 1349,
+     1351, 1352, 1350, 1342, 1345, 1353, 1351, 1354, 1355, 1355,
+
+     1352, 1356, 1358, 1360, 1359, 1361, 1362, 1358, 1354, 1363,
+     1364, 1365, 1366, 1360, 1353, 1369, 1364, 1365, 1366, 1368,
+     1361, 1356, 1359, 1370, 1371, 1368, 1362, 1372, 1373, 1369,
+     1374, 1376, 1363, 1375, 1375, 1369, 1377, 1378, 1384, 1372,
+     1379, 1381, 1373, 1370, 1371, 1379, 1380, 1380, 1374, 1382,
+     1386, 1376, 1388, 1385, 1382, 1378, 1387, 1384, 1385, 1385,
+     1388, 1377, 1389, 1390, 1381, 1387, 1391, 1392, 1386, 1394,
+     1393, 1394, 1392, 1395, 1397, 1392, 1389, 1399, 1390, 1393,
+     1397, 1391, 1398, 1401, 1391, 1400, 1398, 1395, 1399, 1402,
+     1400, 1400, 1403, 1404, 1405, 1406, 1407, 1408, 1404, 1405,
+
+     1406, 1409, 1401, 1410, 1412, 1416, 1409, 1413, 1414, 1416,
+     1403, 1415, 1415, 1417, 1407, 1402, 1418, 1408, 1412, 1423,
+     1420, 1419, 1421, 1410, 1422, 1413, 1414, 1419, 1426, 1424,
+     1425, 1417, 1420, 1423, 1427, 1418, 1430, 1429, 1421, 1427,
+     1431, 1428, 1429, 1422, 1424, 1425, 1432, 1426, 1428, 1433,
+     1433, 1434, 1436, 1435, 1430, 1432, 1437, 1437, 1438, 1439,
+     1440, 1431, 1435, 1444, 1438, 1439, 1434, 1441, 1441, 1442,
+     1442, 1443, 1436, 1445, 1440, 1446, 1447, 1443, 1448, 1444,
+     1446, 1449, 1447, 1456, 1448, 1450, 1450, 1449, 1451, 1451,
+     1453, 1453, 1454, 1455, 1445, 1457, 1454, 1458, 1459, 1460,
+
+     1462, 1456, 1455, 1461, 1461, 1464, 1460, 1457, 1463, 1465,
+     1464, 1458, 1466, 1459, 1469,   57, 1463, 1470, 1470, 1467,
+     1462, 1468, 1471, 1465, 1467, 1467, 1468, 1468, 1472, 1473,
+     1474, 1466, 1475, 1476, 1469, 1474, 1477, 1478, 1473, 1479,
+     1480, 1471, 1481, 1478, 1479, 1483, 1482, 1472, 1486, 1484,
+     1485, 1475, 1482, 1476, 1477, 1484, 1485, 1487, 1488, 1489,
+     1480, 1490, 1492, 1496, 1483, 1491, 1493, 1486, 1481, 1494,
+     1494, 1495, 1497, 1498, 1495,   52, 1487, 1488, 1489, 1491,
+     1490, 1493, 1496, 1492, 1503, 1498, 1499, 1499, 1500, 1500,
+     1501, 1497, 1502, 1504, 1505, 1501, 1502, 1503, 1506, 1510,
+
+     1506, 1508, 1504, 1509, 1506, 1511, 1512, 1505, 1509, 1513,
+     1513, 1514, 1515, 1516, 1510, 1518, 1514, 1506, 1515, 1508,
+     1517, 1518, 1512, 1520, 1519, 1511, 1521, 1520, 1516, 1519,
+     1521, 1522, 1523, 1517, 1524, 1525, 1526, 1527, 1527, 1529,
+     1531, 1532, 1526, 1524, 1533, 1533, 1532, 1534, 1535, 1539,
+     1523, 1522, 1539, 1534, 1541, 1525, 1542, 1529, 1537, 1537,
+     1543, 1531, 1540, 1540, 1545, 1546, 1548, 1545, 1535, 1547,
+     1541, 1549, 1542, 1550, 1550, 1548, 1543, 1551, 1552, 1553,
+     1554, 1555, 1556, 1557, 1557, 1554, 1546, 1558, 1556, 1547,
+     1559, 1549, 1551, 1561, 1560, 1555, 1558, 1562, 1553, 1552,
+
+     1563, 1563, 1564, 1565, 1567, 1566, 1568, 1568, 1559, 1560,
+     1566, 1569, 1570, 1571, 1571, 1569, 1564, 1562, 1561, 1567,
+     1572, 1565, 1573, 1574, 1575, 1576, 1577, 1581, 1575, 1579,
+     1579, 1577, 1570, 1580, 1574, 1583, 1580, 1584, 1582, 1585,
+     1581, 1573, 1572, 1582, 1576, 1586, 1587, 1588, 1589, 1589,
+     1591, 1583, 1590, 1585, 1592, 1584, 1595, 1590, 1593, 1593,
+     1587, 1595, 1594, 1596, 1586, 1586, 1597, 1600, 1597, 1599,
+     1591, 1594, 1588, 1598, 1592, 1599, 1601, 1603, 1598, 1604,
+     1604, 1605, 1601, 1596, 1606, 1609, 1613, 1600, 1608, 1612,
+     1606, 1603, 1614, 1608, 1610, 1610, 1611, 1611, 1615, 1617,
+
+     1605, 1615, 1618, 1612, 1613, 1616, 1616, 1614, 1619, 1609,
+     1621, 1627, 1620, 1625, 1618, 1620, 1621, 1617, 1620, 1622,
+     1623, 1626, 1625, 1623, 1622, 1630, 1626, 1638, 1619, 1628,
+     1620, 1631, 1628, 1629, 1629, 1632, 1627, 1631, 1633, 1623,
+     1638, 1632, 1636, 1633, 1634, 1634, 1635, 1635, 1636, 1630,
+     1637, 1639, 1640, 1641, 1642, 1637, 1643, 1642, 1644, 1645,
+     1648, 1646, 1643, 1652, 1644, 1645, 1646, 1649, 1647, 1639,
+     1653, 1640, 1649, 1641, 1647, 1650, 1650, 1651, 1654, 1655,
+     1656, 1652, 1651, 1648, 1657, 1659, 1658, 1660, 1661, 1662,
+     1653, 1662, 1661, 1666, 1656, 1663, 1668, 1654, 1657, 1655,
+
+     1658, 1664, 1670, 1659, 1667, 1666, 1673, 1669, 1664, 1668,
+     1671, 1672, 1660, 1669, 1663, 1674, 1667, 1676, 1676, 1677,
+     1673, 1679, 1670, 1678, 1680, 1680, 1671, 1681, 1678, 1682,
+     1683, 1672, 1684, 1679, 1686, 1685, 1674, 1689, 1687, 1677,
+     1693, 1691, 1681, 1682, 1685, 1687, 1688,   47, 1694, 1686,
+     1684, 1694, 1697, 1689, 1683, 1688, 1691, 1698, 1688, 1695,
+     1695, 1691, 1696, 1696, 1697, 1693, 1699, 1700, 1700, 1699,
+     1701, 1702, 1703, 1704, 1705, 1698, 1704, 1703, 1706, 1705,
+     1707, 1709, 1708, 1701, 1711, 1714, 1710, 1715, 1712, 1719,
+     1702, 1708, 1714, 1711, 1712, 1710, 1707, 1706, 1710, 1716,
+
+     1709, 1713, 1713, 1717, 1718, 1719, 1721, 1715, 1720, 1725,
+     1722, 1721, 1716, 1720, 1720, 1726, 1727, 1727, 1718, 1728,
+     1729, 1717, 1722, 1730, 1730, 1731, 1731, 1732, 1730, 1729,
+     1734, 1735, 1733, 1726, 1725, 1728, 1732, 1733, 1736, 1732,
+     1731, 1737, 1741, 1739, 1740, 1742, 1737, 1737, 1734, 1743,
+     1742, 1745, 1735, 1748, 1744, 1753, 1736, 1739, 1748, 1740,
+     1744, 1746, 1746, 1743, 1741, 1747, 1749, 1750, 1751, 1745,
+     1754, 1747, 1755, 1750, 1751, 1753, 1756, 1758, 1755, 1757,
+     1749, 1762, 1757, 1758, 1754, 1760, 1763, 1764, 1757, 1756,
+     1765, 1766, 1767, 1760, 1768, 1769, 1766, 1770, 1765, 1771,
+
+     1762, 1767, 1772, 1779, 1769, 1763, 1764, 1768, 1773, 1773,
+     1770, 1774, 1775, 1771, 1777, 1780, 1772, 1774, 1775, 1776,
+     1778, 1778, 1776, 1779, 1781, 1782, 1782, 1777, 1783, 1784,
+     1773, 1785, 1786, 1780, 1787, 1784, 1789, 1789, 1790, 1793,
+     1791, 1783, 1792, 1781, 1791, 1794, 1795, 1792, 1786, 1797,
+     1794, 1795, 1787, 1785, 1796, 1799, 1800, 1801, 1790, 1793,
+     1801, 1802, 1803, 1796, 1805, 1800, 1799, 1804, 1804, 1806,
+     1807, 1809, 1797, 1802, 1808, 1808, 1811, 1803, 1812, 1810,
+     1814, 1806, 1815, 1805, 1817, 1809, 1810, 1816, 1811, 1807,
+     1812, 1818, 1819, 1816, 1820, 1820, 1817, 1821, 1819, 1814,
+
+     1821, 1824, 1815, 1822, 1822, 1825, 1824, 1826, 1828, 1818,
+     1827, 1827, 1831, 1826, 1825, 1829, 1830, 1829, 1832, 1830,
+     1828, 1833, 1835, 1834, 1836, 1837, 1838, 1835, 1839, 1836,
+     1840, 1842, 1831, 1841, 1837, 1840, 1848, 1845, 1838, 1833,
+     1832, 1834, 1841, 1839, 1843, 1844, 1846, 1846, 1847, 1843,
+     1844, 1842, 1845, 1850, 1847, 1841, 1843, 1848, 1851, 1852,
+     1853, 1854, 1855, 1860, 1855, 1863, 1856, 1857, 1857, 1850,
+     1858, 1858, 1859, 1859, 1861, 1861, 1853, 1851, 1852, 1864,
+     1856, 1854, 1856, 1860, 1862, 1862, 1863, 1865, 1866, 1866,
+     1867, 1868, 1869, 1871, 1867, 1869, 1872, 1868, 1873, 1871,
+
+     1864, 1874, 1875, 1878, 1873, 1881, 1874, 1876, 1865, 1882,
+     1876, 1877, 1877, 1879, 1872, 1880, 1880, 1883, 1879, 1884,
+     1881, 1889, 1883, 1878, 1884, 1885, 1885, 1875, 1886, 1887,
+     1882, 1888, 1892, 1886, 1890, 1887, 1891, 1893, 1892, 1896,
+     1897, 1889, 1895, 1888, 1888, 1888, 1900, 1895, 1895, 1898,
+     1888, 1898, 1890, 1896, 1899, 1897, 1891, 1893, 1901, 1902,
+     1903, 1900, 1904, 1906, 1901, 1899, 1905, 1905, 1902, 1907,
+     1907, 1908, 1909, 1910, 1910, 1911, 1911, 1912, 1915, 1915,
+     1903, 1916, 1920, 1904, 1917, 1922, 1919, 1923, 1923, 1906,
+     1921, 1908, 1924, 1917, 1909, 1919, 1921, 1912, 1926, 1925,
+
+     1927, 1922, 1928, 1920, 1930, 1926, 1916, 1929, 1929, 1927,
+     1931, 1933, 1935, 1924, 1925, 1934, 1936, 1933, 1935, 1938,
+     1934, 1939, 1937, 1939, 1941, 1938, 1931, 1942, 1928, 1937,
+     1930, 1943, 1943, 1942, 1944, 1945, 1936, 1946, 1948, 1944,
+     1947, 1948, 1949, 1941, 1945, 1950, 1951, 1952, 1950, 1953,
+     1953, 1956, 1954, 1957, 1949, 1955, 1958, 1946, 1954, 1947,
+     1958, 1955, 1960, 1961, 1951, 1962, 1963, 1963, 1957, 1964,
+     1962, 1956, 1965, 1952, 1966, 1968, 1958, 1969, 1970, 1970,
+     1971, 1969, 1960, 1972, 1977, 1961, 1971, 1973, 1973, 1966,
+     1975, 1965, 1972, 1964, 1968, 1974, 1976, 1976, 1978, 1974,
+
+     1979, 1975, 1980, 1981, 1982, 1977, 1975, 1980, 1983, 1984,
+     1986, 1985, 1978, 1987, 1988, 1984, 1989, 1989, 1987, 1979,
+     1990, 1990, 1991, 1981, 1982, 1986, 1991, 1988, 1983, 1985,
+     1993, 1994, 1995, 1996, 1997, 1997, 1999, 1999, 1996, 1993,
+     2000, 2004, 1994, 2001, 2003, 2000, 2000, 1994, 2005, 2001,
+     2003, 2006, 1995, 2005, 2007, 2010, 2009, 2011, 2013, 2010,
+     2007, 2012, 2012, 2006, 2014, 2015, 2016, 2004, 2009, 2011,
+     2014, 2018, 2016, 2017, 2017, 2019, 2020, 2021, 2024, 2023,
+     2025, 2020, 2032, 2013, 2031, 2025, 2033, 2015, 2032, 2021,
+     2018, 2023, 2033, 2027,   18, 2019, 2027, 2024, 2028, 2028,
+
+     2029, 2029, 2030, 2030, 2031, 2034, 2035, 2036, 2038, 2041,
+     2034, 2040, 2035, 2038, 2040, 2044, 2036, 2042, 2042, 2045,
+     2046, 2041, 2047, 2047, 2048, 2046, 2053, 2044, 2056, 2049,
+     2050, 2045, 2054, 2048, 2049, 2050, 2051, 2052, 2052, 2051,
+     2055, 2054, 2060, 2059, 2057, 2058, 2053, 2056, 2057, 2059,
+     2058, 2062, 2061, 2063, 2065, 2065, 2066, 2069, 2055, 2067,
+     2060, 2061, 2068, 2070, 2070, 2073, 2065, 2063, 2067, 2062,
+     2071, 2068, 2072, 2074, 2066, 2075, 2081, 2069, 2074, 2071,
+     2078, 2078, 2080, 2082, 2072, 2080, 2073, 2083, 2075, 2085,
+     2087, 2086, 2081, 2088, 2089, 2089, 2087, 2091, 2090, 2082,
+
+     2090, 2092, 2092, 2083, 2085, 2086, 2093, 2095, 2095, 2098,
+     2088, 2096, 2096, 2099, 2093, 2091, 2100, 2101, 2102, 2099,
+     2103, 2104, 2100, 2105, 2105, 2102, 2106, 2107, 2108, 2110,
+     2112, 2101, 2098, 2109, 2111, 2106, 2113, 2116, 2117,   17,
+     2108, 2104, 2103, 2118, 2110, 2109, 2111, 2114, 2107, 2114,
+     2120, 2113, 2121, 2114, 2124, 2118, 2112, 2116, 2119, 2119,
+     2122, 2117, 2123, 2122, 2126, 2128, 2114, 2123, 2120, 2126,
+     2129, 2127, 2121, 2127, 2124, 2129, 2132, 2130, 2134, 2135,
+     2136, 2138, 2144, 2128, 2130, 2132,    0, 2137, 2135, 2137,
+     2142, 2139, 2136, 2141, 2149, 2141, 2134, 2139, 2143, 2143,
+
+     2138, 2145, 2147, 2146, 2142, 2146, 2145, 2147, 2144, 2148,
+     2150, 2151, 2149, 2152, 2148, 2153, 2154, 2156, 2155, 2152,
+     2153, 2159, 2156, 2156, 2157, 2160, 2161, 2161, 2150, 2154,
+     2155, 2151, 2157, 2162, 2162, 2163, 2164, 2165, 2166, 2160,
+     2159, 2168, 2167, 2168, 2166, 2169, 2163, 2167, 2170, 2171,
+     2171, 2164, 2175, 2172, 2173, 2173, 2170, 2165, 2174, 2174,
+     2177, 2175, 2176, 2169, 2170, 2172, 2179, 2176, 2180, 2181,
+     2179, 2181, 2182, 2184, 2185, 2186, 2183, 2180, 2177, 2188,
+     2180, 2183, 2183, 2185, 2189, 2184, 2192, 2186, 2193, 2189,
+     2190, 2188, 2194, 2182, 2196, 2190, 2195, 2195, 2197, 2192,
+
+     2198, 2194, 2200, 2199, 2203, 2205, 2201, 2202, 2193, 2203,
+     2207, 2206, 2196, 2211, 2217, 2220, 2197, 2205, 2198, 2199,
+     2201, 2208, 2202, 2206, 2209, 2210, 2208, 2200, 2218, 2209,
+     2207, 2211, 2214, 2216, 2210, 2219, 2221, 2217, 2214, 2216,
+     2220, 2222, 2222, 2218, 2225, 2221, 2223, 2224, 2224, 2226,
+     2227, 2214, 2228, 2219, 2227, 2223, 2229, 2228, 2231, 2232,
+     2233, 2234, 2225, 2239, 2235, 2232, 2234, 2234, 2226, 2229,
+     2235, 2237, 2236, 2238, 2237, 2242, 2242, 2231, 2236, 2243,
+     2243, 2238, 2233, 2239, 2244, 2245, 2245, 2246, 2246, 2247,
+     2248, 2249, 2256, 2244, 2243, 2250, 2256, 2249, 2251, 2251,
+
+     2250, 2247, 2252, 2252, 2253, 2243, 2254, 2257, 2248, 2253,
+     2258, 2259, 2254, 2261, 2258, 2262, 2263, 2264, 2265, 2266,
+     2262, 2268, 2270, 2265, 2267, 2269,    0, 2257, 2271, 2271,
+     2269, 2259, 2264, 2273, 2275, 2276, 2277, 2266, 2261, 2263,
+     2267, 2268, 2272, 2278, 2270, 2274, 2272, 2279, 2273, 2281,
+     2274, 2280, 2275, 2282, 2277, 2278, 2280, 2283, 2283, 2285,
+     2286, 2276, 2281, 2287, 2288, 2289, 2279, 2285, 2290, 2292,
+     2291, 2282, 2293, 2294, 2295, 2302, 2297, 2302,    0, 2286,
+     2295, 2300, 2287, 2288, 2293, 2299, 2303, 2301, 2289, 2291,
+     2292, 2297, 2290, 2301, 2294, 2300, 2304, 2304, 2299, 2305,
+
+     2306, 2307, 2308, 2306, 2305, 2309, 2303, 2310, 2310, 2311,
+     2311, 2312, 2314, 2312, 2307, 2315, 2308, 2318, 2309, 2313,
+     2313, 2316, 2316, 2317, 2317, 2324, 2318, 2314, 2315, 2318,
+     2319, 2319, 2320, 2320, 2321, 2323, 2325, 2326, 2329, 2321,
+     2323, 2327, 2327, 2328, 2328, 2324, 2330, 2330, 2331, 2326,
+     2332, 2332, 2333, 2334, 2335, 2335, 2325, 2329, 2334, 2336,
+     2336, 2337, 2338, 2339, 2340, 2341, 2331, 2333, 2343, 2344,
+     2344, 2338, 2345, 2343, 2347, 2337, 2346, 2346, 2340, 2349,
+     2339, 2348, 2351, 2351, 2341, 2349, 2348, 2350, 2352, 2352,
+     2350, 2345, 2347, 2353, 2354, 2355, 2357, 2355, 2351, 2358,
+
+     2359, 2359, 2361, 2363, 2362, 2364, 2365, 2366, 2366, 2354,
+     2365, 2357, 2353, 2367, 2369, 2370, 2368, 2373, 2358, 2362,
+     2364, 2368, 2361, 2372, 2372, 2375, 2363, 2374, 2376, 2369,
+     2370, 2377, 2367, 2378, 2374, 2379, 2381, 2373, 2389, 2375,
+     2380, 2380, 2382, 2386, 2382, 2381, 2376, 2383, 2378, 2377,
+     2383, 2385, 2391, 2387, 2388, 2386, 2390, 2385, 2387, 2388,
+     2393, 2379,    0, 2389, 2401, 2383, 2392, 2383, 2398, 2390,
+     2395, 2392, 2396, 2391, 2397, 2395, 2399, 2396, 2400, 2397,
+     2402, 2403, 2399, 2398, 2400, 2401, 2393, 2403, 2404, 2405,
+     2406, 2407, 2409, 2404, 2405, 2402, 2408, 2410, 2411, 2408,
+
+     2412, 2413, 2414, 2419, 2407, 2415, 2410, 2411, 2416, 2412,
+     2413, 2415, 2409, 2417, 2416, 2406, 2414, 2417, 2421, 2422,
+     2423, 2423, 2426, 2419, 2424, 2425, 2425, 2429, 2422, 2431,
+     2424, 2426, 2427, 2427, 2425, 2428, 2432, 2435, 2421, 2434,
+     2428, 2433, 2433, 2437, 2438, 2431, 2435, 2429, 2439, 2429,
+     2440, 2444, 2432, 2442, 2434, 2437, 2442, 2445, 2450, 2443,
+     2438, 2450, 2440, 2439, 2443, 2446, 2446, 2447, 2447, 2445,
+     2451, 2444, 2449, 2449, 2452, 2451, 2453, 2454, 2455, 2455,
+     2452, 2456, 2453, 2457, 2457, 2458, 2454, 2459, 2460, 2461,
+     2461, 2463, 2462, 2471, 2464, 2456, 2466, 2458, 2462, 2464,
+
+     2466, 2459, 2471, 2467, 2472, 2463, 2467, 2460, 2468, 2468,
+     2469, 2470, 2473, 2472, 2474, 2469, 2470, 2476, 2474, 2475,
+     2475, 2478, 2479, 2480, 2481, 2482, 2478, 2483, 2484, 2485,
+     2476, 2483, 2473, 2489, 2485, 2486, 2488, 2488, 2490, 2482,
+     2487, 2486, 2479, 2480, 2481, 2491, 2487, 2492, 2484, 2493,
+     2496, 2489, 2492, 2494, 2494, 2497, 2498, 2490, 2500, 2499,
+     2505, 2498, 2496, 2503, 2491, 2499, 2500, 2501, 2509, 2501,
+     2493, 2497, 2503, 2514, 2505, 2506, 2506, 2507, 2508, 2514,
+     2507, 2508, 2510, 2510, 2513, 2515, 2516, 2516, 2513, 2517,
+     2520, 2520, 2522, 2524, 2509, 2525, 2528, 2515, 2517, 2529,
+
+     2530, 2528, 2538, 2531, 2532, 2533, 2533, 2524, 2531, 2532,
+     2522, 2525, 2535, 2535, 2537, 2539, 2539, 2540, 2541, 2542,
+     2537, 2530, 2538, 2544, 2542, 2529, 2545, 2546, 2550, 2545,
+     2551, 2547, 2552, 2540, 2548, 2548, 2551, 2550, 2552, 2546,
+     2541, 2553, 2544, 2547, 2558, 2554, 2556, 2556, 2557, 2559,
+     2564, 2557, 2561, 2561, 2562, 2562, 2563, 2565, 2566, 2553,
+     2554, 2563, 2569, 2558, 2567, 2570, 2565, 2559, 2564, 2567,
+     2568, 2566, 2568, 2571, 2573, 2572, 2569, 2574, 2575, 2570,
+     2572, 2576, 2576, 2575, 2580, 2571, 2577, 2577, 2578, 2578,
+     2579, 2579, 2581, 2582, 2573, 2586, 2580, 2574, 2582, 2583,
+
+     2583, 2584, 2584, 2585, 2585, 2587, 2588, 2586, 2589, 2590,
+     2581, 2591, 2592, 2592, 2593, 2594, 2594, 2598, 2588, 2595,
+     2595, 2596, 2597, 2597, 2599, 2587, 2600, 2591, 2589, 2598,
+     2590, 2599, 2596, 2593, 2601, 2602, 2603, 2604, 2600, 2606,
+     2602, 2605, 2605, 2607, 2607, 2608, 2609, 2610, 2606, 2611,
+     2612, 2614, 2613, 2614, 2601, 2615, 2603, 2604, 2616, 2616,
+     2610, 2617, 2618, 2619, 2612, 2621, 2609, 2615, 2622, 2623,
+     2617, 2608, 2624, 2611, 2613, 2624, 2626, 2618, 2619, 2625,
+     2627, 2626, 2635, 2621, 2637, 2627, 2628, 2628, 2629, 2629,
+     2622, 2636, 2623, 2625, 2630, 2630, 2632, 2632, 2634, 2634,
+
+     2635, 2638, 2636, 2637, 2640, 2641, 2642, 2643, 2644, 2645,
+     2646, 2647, 2646, 2721, 2648, 2649, 2638, 2644, 2650, 2650,
+     2655, 2652, 2654, 2641, 2640, 2652, 2721, 2643, 2642, 2645,
+     2656, 2647, 2648, 2649, 2653, 2653, 2654, 2657, 2657, 2656,
+     2659, 2661, 2655, 2660, 2660, 2662, 2663, 2664, 2666, 2659,
+     2665, 2667, 2668, 2669, 2664, 2670, 2671, 2671, 2673, 2661,
+     2672, 2672, 2670, 2662, 2663, 2665, 2666, 2674, 2668, 2667,
+     2675, 2679, 2669, 2677, 2677, 2680, 2675, 2679, 2673, 2678,
+     2678, 2681, 2682, 2683, 2684, 2674, 2685, 2686, 2687, 2684,
+     2688,    0, 2689, 2680, 2689, 2688, 2681, 2683, 2686, 2690,
+
+     2690, 2682, 2691, 2694, 2691, 2696, 2685, 2697, 2687, 2692,
+     2692, 2698, 2699, 2700, 2696, 2701, 2702, 2706, 2700, 2703,
+     2701, 2707, 2694, 2698, 2708, 2710, 2697, 2708, 2709, 2709,
+     2711, 2713, 2699, 2712, 2712, 2714, 2702, 2706, 2703, 2707,
+     2710, 2715, 2713, 2717, 2723, 2715, 2718, 2719, 2711, 2724,
+     2714, 2719, 2718, 2720, 2720, 2725, 2726, 2726, 2717, 2723,
+     2728, 2729, 2730, 2731, 2731, 2733, 2730, 2732, 2732, 2724,
+     2729, 2735, 2728, 2734, 2734, 2725, 2735, 2736, 2737, 2738,
+     2739, 2740, 2740, 2746, 2733, 2748, 2736, 2745, 2745, 2747,
+     2747, 2738, 2751, 2749, 2737, 2750, 2754, 2754, 2748, 2755,
+
+     2739, 2751, 2752, 2753, 2767, 2746, 2749, 2756, 2750, 2758,
+     2758, 2752, 2753, 2761, 2764, 2763, 2765, 2766, 2761, 2755,
+     2763, 2765, 2756, 2767, 2768, 2766, 2769, 2771, 2764, 2775,
+     2773, 2774, 2779, 2768, 2769, 2773, 2774, 2776, 2776, 2777,
+     2777, 2778, 2771, 2781, 2775, 2783, 2778, 2780, 2780, 2782,
+     2781, 2779, 2784, 2785, 2782, 2786, 2787, 2787, 2788, 2785,
+     2786, 2789, 2794, 2783, 2790, 2790, 2789, 2791, 2791,    0,
+     2784, 2795, 2795, 2788, 2796, 2794, 2797, 2796, 2798, 2799,
+     2800, 2797, 2797, 2798, 2799, 2801, 2802, 2803, 2804, 2805,
+     2802, 2801, 2803, 2806, 2800, 2807, 2808, 2804, 2810, 2809,
+
+     2811, 2806, 2808, 2810, 2805, 2809, 2812, 2812, 2814, 2815,
+     2816, 2818, 2811, 2816, 2815, 2814, 2807, 2820, 2823, 2821,
+     2822, 2824, 2820, 2818, 2821, 2822, 2825, 2829, 2826, 2827,
+     2827, 2828, 2829, 2832, 2824, 2825, 2823, 2826, 2833, 2834,
+     2828, 2837, 2838, 2841, 2833, 2834, 2839, 2840, 2840, 2842,
+     2841, 2832, 2843, 2847, 2844, 2845, 2846, 2846, 2849, 2851,
+     2837, 2843, 2838, 2852, 2854, 2839, 2857, 2852, 2842, 2844,
+     2845, 2855, 2847, 2849, 2853, 2853, 2856, 2855, 2861, 2851,
+     2858, 2865, 2856, 2860, 2857, 2862, 2858, 2859, 2859, 2854,
+     2862, 2860, 2864, 2867, 2865, 2868, 2869, 2870, 2868, 2867,
+
+     2869, 2864, 2872, 2861, 2871, 2871, 2874, 2874, 2875, 2876,
+     2876, 2870, 2877, 2877, 2879, 2879, 2880, 2872, 2881, 2882,
+     2880, 2884, 2884, 2881, 2886, 2887, 2875, 2888, 2882, 2889,
+     2887, 2890, 2892,    0, 2889, 2889, 2893, 2893, 2899, 2888,
+     2895, 2895, 2900, 2890, 2886, 2896, 2896, 2897, 2897, 2903,
+     2898, 2899, 2892, 2898, 2905, 2900, 2902, 2902, 2906, 2906,
+     2907, 2907, 2908, 2908, 2909, 2910, 2910, 2903, 2911, 2912,
+     2913, 2914, 2915, 2915, 2905, 2923, 2916, 2914, 2920, 2909,
+     2916, 2911, 2919, 2920, 2913, 2922, 2924, 2912, 2919, 2925,
+     2922, 2922, 2928, 2926, 2927, 2930, 2930, 2929, 2923, 2926,
+
+     2927, 2929, 2933, 2935, 2938, 2936, 2924, 2933, 2936, 2925,
+     2939, 2935, 2943, 2939, 2940, 2940, 2941, 2928, 2942, 2944,
+     2951, 2945, 2947, 2942, 2946, 2946, 2950, 2949, 2951, 2938,
+     2943, 2955,    0, 2941, 2941, 2945, 2947, 2948, 2953, 2944,
+     2948, 2949, 2963, 2953, 2953, 2950, 2954, 2963, 2948, 2962,
+     2955, 2954, 2954, 2956, 2956, 2957, 2957, 2958, 2958, 2959,
+     2959, 2960, 2960, 2961, 2961, 2962, 2964, 2965, 2966, 2967,
+     2968, 2969, 2970, 2978, 2967, 2971, 2969, 2972, 2974, 2974,
+     2981, 2970, 2966, 2975, 2975, 2976, 2964, 2981, 2976, 2968,
+     2977, 2978, 2991, 2965,    0, 2971, 2977, 2972, 2980, 2980,
+
+     2982, 2982, 2983, 2985, 2985, 2986, 2987, 2983, 2988, 2989,
+     2991, 2992, 2992, 2995, 2986, 2987, 2996, 2988, 2989, 2993,
+     2993, 2994, 2995, 2997, 2998, 2994, 2999, 3001, 3002, 3003,
+     3009, 2999, 2999, 3003, 2997, 2996, 3007, 3002, 3012, 2998,
+     3001, 3007, 3008, 3008, 3009, 3011, 3011, 3013, 3014, 3016,
+     3016, 3017, 3012, 3018, 3022, 3024, 3023, 3026, 3029, 3031,
+     3017, 3023, 3027, 3064, 3024, 3018, 3014, 3064, 3027, 3033,
+     3029, 3034, 3013, 3038, 3033, 3036, 3034, 3026, 3038, 3022,
+     3031, 3035, 3035, 3039, 3036, 3040, 3041, 3041, 3043, 3043,
+     3041, 3044, 3044, 3045, 3045, 3046, 3039, 3047, 3049, 3040,
+
+     3048, 3051, 3055, 3049, 3046, 3052, 3053, 3051, 3054, 3054,
+     3052, 3053, 3056, 3057, 3059, 3061, 3058, 3047, 3065, 3048,
+     3055, 3058, 3060, 3065, 3056, 3062, 3062, 3068, 3060, 3069,
+     3066, 3072, 3059, 3070, 3057, 3066, 3067, 3067, 3074, 3074,
+     3061, 3076, 3077, 3078, 3069, 3079, 3068, 3081, 3070, 3079,
+     3080, 3072, 3082, 3083, 3076, 3077, 3078, 3084, 3085, 3080,
+     3087, 3083, 3084, 3081, 3086, 3086, 3088, 3089, 3091, 3087,
+     3094, 3082, 3090, 3090, 3095, 3094, 3094, 3098, 3085, 3102,
+     3095, 3096, 3096, 3103, 3088, 3100, 3100, 3091, 3105, 3104,
+     3110, 3106, 3113, 3089, 3104, 3102, 3106, 3111, 3098, 3103,
+
+     3109, 3109, 3112, 3114, 3105, 3117, 3111, 3118, 3112, 3123,
+     3110, 3116, 3116, 3119, 3119, 3113, 3125, 3121, 3124, 3117,
+     3127, 3125, 3114, 3121, 3124, 3130, 3118, 3128, 3128, 3123,
+     3129, 3129, 3131, 3132, 3132, 3133, 3134, 3135, 3136, 3137,
+     3130, 3139, 3127, 3138, 3136, 3134, 3133, 3140, 3140, 3141,
+     3149, 3142, 3131, 3132, 3142, 3138, 3143, 3135, 3137, 3143,
+     3148, 3139, 3144, 3144, 3141, 3150, 3151, 3151, 3153, 3154,
+     3149, 3150, 3148, 3152, 3153, 3156, 3152, 3157, 3157, 3158,
+     3156, 3159, 3160, 3164, 3158, 3161, 3165, 3154, 3160, 3162,
+     3162, 3166, 3167, 3168, 3168, 3164, 3169, 3170, 3171,    0,
+
+     3159, 3176, 3161, 3161, 3165, 3167, 3176, 3171, 3173, 3173,
+     3174, 3174, 3177, 3170, 3178, 3169, 3166, 3175, 3175, 3178,
+     3179, 3179, 3180, 3180, 3181, 3181, 3177, 3182, 3182, 3183,
+     3184, 3185, 3189, 3186, 3188, 3188, 3193, 3185, 3186, 3191,
+     3191, 3195, 3183, 3196, 3198, 3197, 3199, 3199, 3189, 3201,
+     3201, 3202, 3203, 3204, 3205, 3193, 3184, 3207, 3207, 3206,
+     3208, 3208, 3210, 3195, 3197, 3196, 3198, 3204, 3206, 3211,
+     3212, 3203, 3213, 3214, 3205, 3211, 3217, 3202, 3214, 3222,
+     3210, 3218, 3218, 3220, 3220, 3229, 3224, 3221, 3223, 3229,
+     3212, 3213, 3221, 3222, 3223, 3225, 3227, 3217, 3224, 3226,
+
+     3226, 3227, 3230, 3225, 3231, 3232, 3233, 3230, 3234, 3235,
+     3237, 3233, 3238, 3239, 3240, 3235, 3243, 3242, 3237, 3244,
+     3234, 3245, 3246, 3248, 3231, 3232, 3249, 3246, 3248, 3253,
+     3255, 3238, 3243, 3239, 3240, 3242, 3244, 3244, 3250, 3281,
+     3251, 3268, 3245, 3255, 3250, 3251, 3249, 3254, 3281, 3253,
+     3254, 3259, 3259, 3260, 3260, 3261, 3266, 3266, 3267, 3261,
+     3268, 3269, 3269, 3267, 3271, 3273, 3273, 3274, 3274, 3278,
+     3274, 3275, 3275, 3278, 3275, 3276, 3276, 3277, 3277, 3271,
+     3277, 3280, 3282, 3282, 3283, 3284, 3280, 3287, 3287, 3288,
+     3289, 3290, 3291, 3291, 3292, 3295, 3290, 3296, 3298, 3284,
+
+     3299, 3297, 3283, 3301, 3296, 3297, 3302, 3298, 3304, 3288,
+     3289, 3302, 3303, 3303, 3292, 3299, 3308, 3304, 3305, 3305,
+     3295, 3301, 3306, 3306, 3307, 3307, 3310, 3309, 3311, 3313,
+     3312, 3308, 3309, 3311, 3311, 3310, 3312, 3314, 3310, 3315,
+     3316, 3317, 3318, 3319, 3319, 3316, 3317, 3320, 3324, 3321,
+     3322, 3322, 3314, 3320, 3313, 3321, 3323, 3323, 3333, 3325,
+     3315, 3318, 3331, 3324, 3325, 3328, 3328, 3330, 3330, 3335,
+     3335, 3331, 3336, 3336, 3337, 3337, 3333, 3338, 3338, 3340,
+     3340, 3341, 3341, 3342, 3342, 3343, 3343, 3344, 3346, 3347,
+     3347, 3348, 3348, 3349, 3350, 3351, 3356, 3346, 3353, 3353,
+
+     3354, 3357, 3349, 3355, 3355, 3358, 3350, 3359, 3359, 3360,
+     3360, 3356, 3362, 3344, 3357, 3351, 3366, 3358, 3368, 3354,
+     3363, 3363, 3367, 3369, 3369, 3367, 3372, 3362, 3370, 3372,
+     3373, 3374, 3375, 3376, 3366, 3377, 3373, 3375, 3378, 3381,
+     3388, 3380, 3385, 3389, 3368, 3374, 3370, 3380, 3381, 3403,
+     3403, 3384, 3376, 3377, 3378, 3384, 3398, 3385, 3402, 3399,
+     3408, 3398, 3399, 3389, 3404, 3404, 3388, 3406, 3406, 3409,
+     3410, 3402, 3411, 3413, 3410, 3415, 3417, 3416, 3409, 3419,
+     3418, 3417, 3418, 3408, 3420, 3420, 3421, 3413, 3416, 3422,
+     3424, 3423, 3411, 3425, 3419, 3426, 3427, 3429, 3415, 3421,
+
+     3428, 3430, 3429, 3439, 3432, 3427, 3424, 3434, 3422, 3423,
+     3426, 3431, 3428, 3433, 3433, 3435, 3431, 3439, 3425, 3440,
+     3435, 3442, 3430, 3432, 3441, 3441, 3447, 3434, 3443, 3443,
+     3442, 3444, 3444, 3445, 3445, 3446, 3446, 3448, 3449, 3440,
+     3452, 3449, 3450, 3451, 3453, 3447, 3454, 3450, 3451, 3455,
+     3456, 3457, 3454, 3458, 3458, 3459, 3457, 3448, 3464, 3453,
+     3460, 3460, 3456, 3455, 3465, 3452, 3461, 3461, 3463, 3463,
+     3466, 3466, 3468, 3464, 3470, 3459, 3473, 3473, 3474, 3474,
+     3475, 3476, 3479, 3465, 3477, 3478, 3480, 3468, 3475, 3481,
+     3477, 3478, 3470, 3482, 3483, 3483, 3479, 3489, 3482, 3480,
+
+     3476, 3485, 3485, 3490, 3495, 3492, 3493, 3496, 3481, 3497,
+     3493, 3500, 3496, 3498, 3499, 3501, 3502, 3506, 3489, 3492,
+     3501, 3502, 3507, 3490, 3495, 3508, 3498, 3499, 3497, 3511,
+     3500, 3503, 3503, 3509, 3509, 3511, 3510, 3506, 3512, 3512,
+     3507, 3510, 3513, 3514, 3508, 3515, 3516, 3513, 3514, 3517,
+     3515, 3519, 3519, 3520, 3524, 3517, 3521, 3521, 3520, 3523,
+     3525, 3526, 3527, 3523, 3528, 3516, 3529, 3525, 3537, 3530,
+     3528, 3532, 3532, 3524, 3534, 3534, 3538, 3535, 3536, 3539,
+     3526, 3527, 3530, 3536, 3542, 3529, 3535, 3537, 3541, 3535,
+     3540, 3540, 3539, 3541, 3544, 3538, 3546, 3542, 3545, 3545,
+
+     3547, 3547, 3548, 3548, 3549, 3550, 3551, 3552, 3552, 3549,
+        0, 3553, 3550, 3555, 3555, 3546, 3553, 3554, 3558, 3554,
+     3544, 3556, 3557, 3560, 3563, 3551, 3559, 3567, 3556, 3557,
+     3565, 3559, 3562, 3562, 3566, 3565, 3568, 3558, 3572, 3566,
+     3569, 3569, 3560, 3563, 3571, 3571, 3567, 3573, 3574, 3574,
+     3575, 3575, 3576, 3578, 3578, 3568, 3580, 3572, 3586, 3576,
+     3579, 3579, 3582, 3580, 3585, 3587, 3573, 3582,    0, 3585,
+     3588, 3588, 3589, 3589,    0,    0,    0, 3586,    0,    0,
+        0,    0,    0,    0, 3587, 3593, 3593, 3593, 3593, 3593,
+     3593, 3593, 3594, 3594, 3594, 3594, 3594, 3594, 3594, 3595,
+
+     3595, 3595, 3595, 3595, 3595, 3595, 3596, 3596, 3596, 3596,
+     3596, 3596, 3596, 3597, 3597, 3597, 3597, 3597, 3597, 3597,
+     3598, 3598, 3598, 3598, 3598, 3598, 3598, 3599, 3599, 3599,
+     3599, 3599, 3599, 3599, 3601, 3601,    0, 3601, 3601, 3601,
+     3601, 3602, 3602,    0,    0,    0, 3602, 3602, 3603, 3603,
+        0,    0, 3603,    0, 3603, 3604,    0,    0,    0,    0,
+        0, 3604, 3605, 3605,    0,    0,    0, 3605, 3605, 3606,
+        0,    0,    0,    0,    0, 3606, 3607, 3607,    0, 3607,
+     3607, 3607, 3607, 3608,    0,    0,    0,    0,    0, 3608,
+     3609, 3609,    0,    0,    0, 3609, 3609, 3610, 3610,    0,
+
+     3610, 3610, 3610, 3610, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592, 3592,
+     3592, 3592, 3592, 3592, 3592
     } ;
 
 static yy_state_type yy_last_accepting_state;
@@ -3362,7 +3389,7 @@ static void config_end_include(void)
 #define YY_NO_INPUT 1
 #endif
 
-#line 3364 "<stdout>"
+#line 3391 "<stdout>"
 
 #define INITIAL 0
 #define quotedstring 1
@@ -3580,7 +3607,7 @@ YY_DECL
        {
 #line 211 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 
-#line 3582 "<stdout>"
+#line 3609 "<stdout>"
 
        while ( 1 )             /* loops until end-of-file is reached */
                {
@@ -3613,13 +3640,13 @@ yy_match:
                        while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
                                {
                                yy_current_state = (int) yy_def[yy_current_state];
-                               if ( yy_current_state >= 3558 )
+                               if ( yy_current_state >= 3593 )
                                        yy_c = yy_meta[(unsigned int) yy_c];
                                }
                        yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c];
                        ++yy_cp;
                        }
-               while ( yy_base[yy_current_state] != 6947 );
+               while ( yy_base[yy_current_state] != 7005 );
 
 yy_find_action:
                yy_act = yy_accept[yy_current_state];
@@ -3844,7 +3871,7 @@ YY_RULE_SETUP
 case 40:
 YY_RULE_SETUP
 #line 254 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
+{ YDVAR(1, VAR_TLS_WIN_CERT) }
        YY_BREAK
 case 41:
 YY_RULE_SETUP
@@ -3864,72 +3891,72 @@ YY_RULE_SETUP
 case 44:
 YY_RULE_SETUP
 #line 258 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TLS_SESSION_TICKET_KEYS) }
+{ YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
        YY_BREAK
 case 45:
 YY_RULE_SETUP
 #line 259 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TLS_CIPHERS) }
+{ YDVAR(1, VAR_TLS_SESSION_TICKET_KEYS) }
        YY_BREAK
 case 46:
 YY_RULE_SETUP
 #line 260 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TLS_CIPHERSUITES) }
+{ YDVAR(1, VAR_TLS_CIPHERS) }
        YY_BREAK
 case 47:
 YY_RULE_SETUP
 #line 261 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TLS_USE_SNI) }
+{ YDVAR(1, VAR_TLS_CIPHERSUITES) }
        YY_BREAK
 case 48:
 YY_RULE_SETUP
 #line 262 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTPS_PORT) }
+{ YDVAR(1, VAR_TLS_USE_SNI) }
        YY_BREAK
 case 49:
 YY_RULE_SETUP
 #line 263 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_ENDPOINT) }
+{ YDVAR(1, VAR_HTTPS_PORT) }
        YY_BREAK
 case 50:
 YY_RULE_SETUP
 #line 264 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_MAX_STREAMS) }
+{ YDVAR(1, VAR_HTTP_ENDPOINT) }
        YY_BREAK
 case 51:
 YY_RULE_SETUP
 #line 265 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_QUERY_BUFFER_SIZE) }
+{ YDVAR(1, VAR_HTTP_MAX_STREAMS) }
        YY_BREAK
 case 52:
 YY_RULE_SETUP
 #line 266 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_RESPONSE_BUFFER_SIZE) }
+{ YDVAR(1, VAR_HTTP_QUERY_BUFFER_SIZE) }
        YY_BREAK
 case 53:
 YY_RULE_SETUP
 #line 267 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_NODELAY) }
+{ YDVAR(1, VAR_HTTP_RESPONSE_BUFFER_SIZE) }
        YY_BREAK
 case 54:
 YY_RULE_SETUP
 #line 268 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_NOTLS_DOWNSTREAM) }
+{ YDVAR(1, VAR_HTTP_NODELAY) }
        YY_BREAK
 case 55:
 YY_RULE_SETUP
 #line 269 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_USE_SYSTEMD) }
+{ YDVAR(1, VAR_HTTP_NOTLS_DOWNSTREAM) }
        YY_BREAK
 case 56:
 YY_RULE_SETUP
 #line 270 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DO_DAEMONIZE) }
+{ YDVAR(1, VAR_USE_SYSTEMD) }
        YY_BREAK
 case 57:
 YY_RULE_SETUP
 #line 271 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INTERFACE) }
+{ YDVAR(1, VAR_DO_DAEMONIZE) }
        YY_BREAK
 case 58:
 YY_RULE_SETUP
@@ -3939,1404 +3966,1424 @@ YY_RULE_SETUP
 case 59:
 YY_RULE_SETUP
 #line 273 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_OUTGOING_INTERFACE) }
+{ YDVAR(1, VAR_INTERFACE) }
        YY_BREAK
 case 60:
 YY_RULE_SETUP
 #line 274 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INTERFACE_AUTOMATIC) }
+{ YDVAR(1, VAR_OUTGOING_INTERFACE) }
        YY_BREAK
 case 61:
 YY_RULE_SETUP
 #line 275 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SO_RCVBUF) }
+{ YDVAR(1, VAR_INTERFACE_AUTOMATIC) }
        YY_BREAK
 case 62:
 YY_RULE_SETUP
 #line 276 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SO_SNDBUF) }
+{ YDVAR(1, VAR_INTERFACE_AUTOMATIC_PORTS) }
        YY_BREAK
 case 63:
 YY_RULE_SETUP
 #line 277 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SO_REUSEPORT) }
+{ YDVAR(1, VAR_SO_RCVBUF) }
        YY_BREAK
 case 64:
 YY_RULE_SETUP
 #line 278 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_TRANSPARENT) }
+{ YDVAR(1, VAR_SO_SNDBUF) }
        YY_BREAK
 case 65:
 YY_RULE_SETUP
 #line 279 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_FREEBIND) }
+{ YDVAR(1, VAR_SO_REUSEPORT) }
        YY_BREAK
 case 66:
 YY_RULE_SETUP
 #line 280 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_DSCP) }
+{ YDVAR(1, VAR_IP_TRANSPARENT) }
        YY_BREAK
 case 67:
 YY_RULE_SETUP
 #line 281 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CHROOT) }
+{ YDVAR(1, VAR_IP_FREEBIND) }
        YY_BREAK
 case 68:
 YY_RULE_SETUP
 #line 282 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_USERNAME) }
+{ YDVAR(1, VAR_IP_DSCP) }
        YY_BREAK
 case 69:
 YY_RULE_SETUP
 #line 283 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DIRECTORY) }
+{ YDVAR(1, VAR_CHROOT) }
        YY_BREAK
 case 70:
 YY_RULE_SETUP
 #line 284 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOGFILE) }
+{ YDVAR(1, VAR_USERNAME) }
        YY_BREAK
 case 71:
 YY_RULE_SETUP
 #line 285 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PIDFILE) }
+{ YDVAR(1, VAR_DIRECTORY) }
        YY_BREAK
 case 72:
 YY_RULE_SETUP
 #line 286 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ROOT_HINTS) }
+{ YDVAR(1, VAR_LOGFILE) }
        YY_BREAK
 case 73:
 YY_RULE_SETUP
 #line 287 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STREAM_WAIT_SIZE) }
+{ YDVAR(1, VAR_PIDFILE) }
        YY_BREAK
 case 74:
 YY_RULE_SETUP
 #line 288 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_EDNS_BUFFER_SIZE) }
+{ YDVAR(1, VAR_ROOT_HINTS) }
        YY_BREAK
 case 75:
 YY_RULE_SETUP
 #line 289 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MSG_BUFFER_SIZE) }
+{ YDVAR(1, VAR_STREAM_WAIT_SIZE) }
        YY_BREAK
 case 76:
 YY_RULE_SETUP
 #line 290 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MSG_CACHE_SIZE) }
+{ YDVAR(1, VAR_EDNS_BUFFER_SIZE) }
        YY_BREAK
 case 77:
 YY_RULE_SETUP
 #line 291 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MSG_CACHE_SLABS) }
+{ YDVAR(1, VAR_MSG_BUFFER_SIZE) }
        YY_BREAK
 case 78:
 YY_RULE_SETUP
 #line 292 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RRSET_CACHE_SIZE) }
+{ YDVAR(1, VAR_MSG_CACHE_SIZE) }
        YY_BREAK
 case 79:
 YY_RULE_SETUP
 #line 293 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RRSET_CACHE_SLABS) }
+{ YDVAR(1, VAR_MSG_CACHE_SLABS) }
        YY_BREAK
 case 80:
 YY_RULE_SETUP
 #line 294 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHE_MAX_TTL) }
+{ YDVAR(1, VAR_RRSET_CACHE_SIZE) }
        YY_BREAK
 case 81:
 YY_RULE_SETUP
 #line 295 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHE_MAX_NEGATIVE_TTL) }
+{ YDVAR(1, VAR_RRSET_CACHE_SLABS) }
        YY_BREAK
 case 82:
 YY_RULE_SETUP
 #line 296 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHE_MIN_TTL) }
+{ YDVAR(1, VAR_CACHE_MAX_TTL) }
        YY_BREAK
 case 83:
 YY_RULE_SETUP
 #line 297 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_HOST_TTL) }
+{ YDVAR(1, VAR_CACHE_MAX_NEGATIVE_TTL) }
        YY_BREAK
 case 84:
 YY_RULE_SETUP
 #line 298 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_LAME_TTL) }
+{ YDVAR(1, VAR_CACHE_MIN_TTL) }
        YY_BREAK
 case 85:
 YY_RULE_SETUP
 #line 299 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_CACHE_SLABS) }
+{ YDVAR(1, VAR_INFRA_HOST_TTL) }
        YY_BREAK
 case 86:
 YY_RULE_SETUP
 #line 300 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_CACHE_NUMHOSTS) }
+{ YDVAR(1, VAR_INFRA_LAME_TTL) }
        YY_BREAK
 case 87:
 YY_RULE_SETUP
 #line 301 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_CACHE_LAME_SIZE) }
+{ YDVAR(1, VAR_INFRA_CACHE_SLABS) }
        YY_BREAK
 case 88:
 YY_RULE_SETUP
 #line 302 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_CACHE_MIN_RTT) }
+{ YDVAR(1, VAR_INFRA_CACHE_NUMHOSTS) }
        YY_BREAK
 case 89:
 YY_RULE_SETUP
 #line 303 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INFRA_KEEP_PROBING) }
+{ YDVAR(1, VAR_INFRA_CACHE_LAME_SIZE) }
        YY_BREAK
 case 90:
 YY_RULE_SETUP
 #line 304 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_NUM_QUERIES_PER_THREAD) }
+{ YDVAR(1, VAR_INFRA_CACHE_MIN_RTT) }
        YY_BREAK
 case 91:
 YY_RULE_SETUP
 #line 305 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_JOSTLE_TIMEOUT) }
+{ YDVAR(1, VAR_INFRA_KEEP_PROBING) }
        YY_BREAK
 case 92:
 YY_RULE_SETUP
 #line 306 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DELAY_CLOSE) }
+{ YDVAR(1, VAR_NUM_QUERIES_PER_THREAD) }
        YY_BREAK
 case 93:
 YY_RULE_SETUP
 #line 307 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_UDP_CONNECT) }
+{ YDVAR(1, VAR_JOSTLE_TIMEOUT) }
        YY_BREAK
 case 94:
 YY_RULE_SETUP
 #line 308 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TARGET_FETCH_POLICY) }
+{ YDVAR(1, VAR_DELAY_CLOSE) }
        YY_BREAK
 case 95:
 YY_RULE_SETUP
 #line 309 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_SHORT_BUFSIZE) }
+{ YDVAR(1, VAR_UDP_CONNECT) }
        YY_BREAK
 case 96:
 YY_RULE_SETUP
 #line 310 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_LARGE_QUERIES) }
+{ YDVAR(1, VAR_TARGET_FETCH_POLICY) }
        YY_BREAK
 case 97:
 YY_RULE_SETUP
 #line 311 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_GLUE) }
+{ YDVAR(1, VAR_HARDEN_SHORT_BUFSIZE) }
        YY_BREAK
 case 98:
 YY_RULE_SETUP
 #line 312 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_DNSSEC_STRIPPED) }
+{ YDVAR(1, VAR_HARDEN_LARGE_QUERIES) }
        YY_BREAK
 case 99:
 YY_RULE_SETUP
 #line 313 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_BELOW_NXDOMAIN) }
+{ YDVAR(1, VAR_HARDEN_GLUE) }
        YY_BREAK
 case 100:
 YY_RULE_SETUP
 #line 314 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_REFERRAL_PATH) }
+{ YDVAR(1, VAR_HARDEN_DNSSEC_STRIPPED) }
        YY_BREAK
 case 101:
 YY_RULE_SETUP
 #line 315 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HARDEN_ALGO_DOWNGRADE) }
+{ YDVAR(1, VAR_HARDEN_BELOW_NXDOMAIN) }
        YY_BREAK
 case 102:
 YY_RULE_SETUP
 #line 316 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_USE_CAPS_FOR_ID) }
+{ YDVAR(1, VAR_HARDEN_REFERRAL_PATH) }
        YY_BREAK
 case 103:
 YY_RULE_SETUP
 #line 317 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CAPS_WHITELIST) }
+{ YDVAR(1, VAR_HARDEN_ALGO_DOWNGRADE) }
        YY_BREAK
 case 104:
 YY_RULE_SETUP
 #line 318 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CAPS_WHITELIST) }
+{ YDVAR(1, VAR_USE_CAPS_FOR_ID) }
        YY_BREAK
 case 105:
 YY_RULE_SETUP
 #line 319 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_UNWANTED_REPLY_THRESHOLD) }
+{ YDVAR(1, VAR_CAPS_WHITELIST) }
        YY_BREAK
 case 106:
 YY_RULE_SETUP
 #line 320 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PRIVATE_ADDRESS) }
+{ YDVAR(1, VAR_CAPS_WHITELIST) }
        YY_BREAK
 case 107:
 YY_RULE_SETUP
 #line 321 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PRIVATE_DOMAIN) }
+{ YDVAR(1, VAR_UNWANTED_REPLY_THRESHOLD) }
        YY_BREAK
 case 108:
 YY_RULE_SETUP
 #line 322 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PREFETCH_KEY) }
+{ YDVAR(1, VAR_PRIVATE_ADDRESS) }
        YY_BREAK
 case 109:
 YY_RULE_SETUP
 #line 323 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PREFETCH) }
+{ YDVAR(1, VAR_PRIVATE_DOMAIN) }
        YY_BREAK
 case 110:
 YY_RULE_SETUP
 #line 324 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DENY_ANY) }
+{ YDVAR(1, VAR_PREFETCH_KEY) }
        YY_BREAK
 case 111:
 YY_RULE_SETUP
 #line 325 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_STUB_ZONE) }
+{ YDVAR(1, VAR_PREFETCH) }
        YY_BREAK
 case 112:
 YY_RULE_SETUP
 #line 326 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_NAME) }
+{ YDVAR(1, VAR_DENY_ANY) }
        YY_BREAK
 case 113:
 YY_RULE_SETUP
 #line 327 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_ADDR) }
+{ YDVAR(0, VAR_STUB_ZONE) }
        YY_BREAK
 case 114:
 YY_RULE_SETUP
 #line 328 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_HOST) }
+{ YDVAR(1, VAR_NAME) }
        YY_BREAK
 case 115:
 YY_RULE_SETUP
 #line 329 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_PRIME) }
+{ YDVAR(1, VAR_STUB_ADDR) }
        YY_BREAK
 case 116:
 YY_RULE_SETUP
 #line 330 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_FIRST) }
+{ YDVAR(1, VAR_STUB_HOST) }
        YY_BREAK
 case 117:
 YY_RULE_SETUP
 #line 331 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_NO_CACHE) }
+{ YDVAR(1, VAR_STUB_PRIME) }
        YY_BREAK
 case 118:
 YY_RULE_SETUP
 #line 332 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
+{ YDVAR(1, VAR_STUB_FIRST) }
        YY_BREAK
 case 119:
 YY_RULE_SETUP
 #line 333 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
+{ YDVAR(1, VAR_STUB_NO_CACHE) }
        YY_BREAK
 case 120:
 YY_RULE_SETUP
 #line 334 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STUB_TCP_UPSTREAM) }
+{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
        YY_BREAK
 case 121:
 YY_RULE_SETUP
 #line 335 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_FORWARD_ZONE) }
+{ YDVAR(1, VAR_STUB_SSL_UPSTREAM) }
        YY_BREAK
 case 122:
 YY_RULE_SETUP
 #line 336 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_ADDR) }
+{ YDVAR(1, VAR_STUB_TCP_UPSTREAM) }
        YY_BREAK
 case 123:
 YY_RULE_SETUP
 #line 337 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_HOST) }
+{ YDVAR(0, VAR_FORWARD_ZONE) }
        YY_BREAK
 case 124:
 YY_RULE_SETUP
 #line 338 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_FIRST) }
+{ YDVAR(1, VAR_FORWARD_ADDR) }
        YY_BREAK
 case 125:
 YY_RULE_SETUP
 #line 339 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_NO_CACHE) }
+{ YDVAR(1, VAR_FORWARD_HOST) }
        YY_BREAK
 case 126:
 YY_RULE_SETUP
 #line 340 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
+{ YDVAR(1, VAR_FORWARD_FIRST) }
        YY_BREAK
 case 127:
 YY_RULE_SETUP
 #line 341 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
+{ YDVAR(1, VAR_FORWARD_NO_CACHE) }
        YY_BREAK
 case 128:
 YY_RULE_SETUP
 #line 342 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FORWARD_TCP_UPSTREAM) }
+{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
        YY_BREAK
 case 129:
 YY_RULE_SETUP
 #line 343 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_AUTH_ZONE) }
+{ YDVAR(1, VAR_FORWARD_SSL_UPSTREAM) }
        YY_BREAK
 case 130:
 YY_RULE_SETUP
 #line 344 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_RPZ) }
+{ YDVAR(1, VAR_FORWARD_TCP_UPSTREAM) }
        YY_BREAK
 case 131:
 YY_RULE_SETUP
 #line 345 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TAGS) }
+{ YDVAR(0, VAR_AUTH_ZONE) }
        YY_BREAK
 case 132:
 YY_RULE_SETUP
 #line 346 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RPZ_ACTION_OVERRIDE) }
+{ YDVAR(0, VAR_RPZ) }
        YY_BREAK
 case 133:
 YY_RULE_SETUP
 #line 347 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RPZ_CNAME_OVERRIDE) }
+{ YDVAR(1, VAR_TAGS) }
        YY_BREAK
 case 134:
 YY_RULE_SETUP
 #line 348 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RPZ_LOG) }
+{ YDVAR(1, VAR_RPZ_ACTION_OVERRIDE) }
        YY_BREAK
 case 135:
 YY_RULE_SETUP
 #line 349 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RPZ_LOG_NAME) }
+{ YDVAR(1, VAR_RPZ_CNAME_OVERRIDE) }
        YY_BREAK
 case 136:
 YY_RULE_SETUP
 #line 350 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RPZ_SIGNAL_NXDOMAIN_RA) }
+{ YDVAR(1, VAR_RPZ_LOG) }
        YY_BREAK
 case 137:
 YY_RULE_SETUP
 #line 351 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ZONEFILE) }
+{ YDVAR(1, VAR_RPZ_LOG_NAME) }
        YY_BREAK
 case 138:
 YY_RULE_SETUP
 #line 352 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MASTER) }
+{ YDVAR(1, VAR_RPZ_SIGNAL_NXDOMAIN_RA) }
        YY_BREAK
 case 139:
 YY_RULE_SETUP
 #line 353 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MASTER) }
+{ YDVAR(1, VAR_ZONEFILE) }
        YY_BREAK
 case 140:
 YY_RULE_SETUP
 #line 354 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_URL) }
+{ YDVAR(1, VAR_MASTER) }
        YY_BREAK
 case 141:
 YY_RULE_SETUP
 #line 355 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ALLOW_NOTIFY) }
+{ YDVAR(1, VAR_MASTER) }
        YY_BREAK
 case 142:
 YY_RULE_SETUP
 #line 356 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FOR_DOWNSTREAM) }
+{ YDVAR(1, VAR_URL) }
        YY_BREAK
 case 143:
 YY_RULE_SETUP
 #line 357 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FOR_UPSTREAM) }
+{ YDVAR(1, VAR_ALLOW_NOTIFY) }
        YY_BREAK
 case 144:
 YY_RULE_SETUP
 #line 358 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FALLBACK_ENABLED) }
+{ YDVAR(1, VAR_FOR_DOWNSTREAM) }
        YY_BREAK
 case 145:
 YY_RULE_SETUP
 #line 359 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_VIEW) }
+{ YDVAR(1, VAR_FOR_UPSTREAM) }
        YY_BREAK
 case 146:
 YY_RULE_SETUP
 #line 360 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VIEW_FIRST) }
+{ YDVAR(1, VAR_FALLBACK_ENABLED) }
        YY_BREAK
 case 147:
 YY_RULE_SETUP
 #line 361 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DO_NOT_QUERY_ADDRESS) }
+{ YDVAR(0, VAR_VIEW) }
        YY_BREAK
 case 148:
 YY_RULE_SETUP
 #line 362 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DO_NOT_QUERY_LOCALHOST) }
+{ YDVAR(1, VAR_VIEW_FIRST) }
        YY_BREAK
 case 149:
 YY_RULE_SETUP
 #line 363 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_ACCESS_CONTROL) }
+{ YDVAR(1, VAR_DO_NOT_QUERY_ADDRESS) }
        YY_BREAK
 case 150:
 YY_RULE_SETUP
 #line 364 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SEND_CLIENT_SUBNET) }
+{ YDVAR(1, VAR_DO_NOT_QUERY_LOCALHOST) }
        YY_BREAK
 case 151:
 YY_RULE_SETUP
 #line 365 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CLIENT_SUBNET_ZONE) }
+{ YDVAR(2, VAR_ACCESS_CONTROL) }
        YY_BREAK
 case 152:
 YY_RULE_SETUP
 #line 366 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CLIENT_SUBNET_ALWAYS_FORWARD) }
+{ YDVAR(1, VAR_SEND_CLIENT_SUBNET) }
        YY_BREAK
 case 153:
 YY_RULE_SETUP
 #line 367 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CLIENT_SUBNET_OPCODE) }
+{ YDVAR(1, VAR_CLIENT_SUBNET_ZONE) }
        YY_BREAK
 case 154:
 YY_RULE_SETUP
 #line 368 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV4) }
+{ YDVAR(1, VAR_CLIENT_SUBNET_ALWAYS_FORWARD) }
        YY_BREAK
 case 155:
 YY_RULE_SETUP
 #line 369 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV6) }
+{ YDVAR(1, VAR_CLIENT_SUBNET_OPCODE) }
        YY_BREAK
 case 156:
 YY_RULE_SETUP
 #line 370 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV4) }
+{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV4) }
        YY_BREAK
 case 157:
 YY_RULE_SETUP
 #line 371 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV6) }
+{ YDVAR(1, VAR_MAX_CLIENT_SUBNET_IPV6) }
        YY_BREAK
 case 158:
 YY_RULE_SETUP
 #line 372 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV4) }
+{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV4) }
        YY_BREAK
 case 159:
 YY_RULE_SETUP
 #line 373 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV6) }
+{ YDVAR(1, VAR_MIN_CLIENT_SUBNET_IPV6) }
        YY_BREAK
 case 160:
 YY_RULE_SETUP
 #line 374 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HIDE_IDENTITY) }
+{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV4) }
        YY_BREAK
 case 161:
 YY_RULE_SETUP
 #line 375 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HIDE_VERSION) }
+{ YDVAR(1, VAR_MAX_ECS_TREE_SIZE_IPV6) }
        YY_BREAK
 case 162:
 YY_RULE_SETUP
 #line 376 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HIDE_TRUSTANCHOR) }
+{ YDVAR(1, VAR_HIDE_IDENTITY) }
        YY_BREAK
 case 163:
 YY_RULE_SETUP
 #line 377 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HIDE_HTTP_USER_AGENT) }
+{ YDVAR(1, VAR_HIDE_VERSION) }
        YY_BREAK
 case 164:
 YY_RULE_SETUP
 #line 378 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IDENTITY) }
+{ YDVAR(1, VAR_HIDE_TRUSTANCHOR) }
        YY_BREAK
 case 165:
 YY_RULE_SETUP
 #line 379 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VERSION) }
+{ YDVAR(1, VAR_HIDE_HTTP_USER_AGENT) }
        YY_BREAK
 case 166:
 YY_RULE_SETUP
 #line 380 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_HTTP_USER_AGENT) }
+{ YDVAR(1, VAR_IDENTITY) }
        YY_BREAK
 case 167:
 YY_RULE_SETUP
 #line 381 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MODULE_CONF) }
+{ YDVAR(1, VAR_VERSION) }
        YY_BREAK
 case 168:
 YY_RULE_SETUP
 #line 382 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DLV_ANCHOR) }
+{ YDVAR(1, VAR_HTTP_USER_AGENT) }
        YY_BREAK
 case 169:
 YY_RULE_SETUP
 #line 383 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DLV_ANCHOR_FILE) }
+{ YDVAR(1, VAR_MODULE_CONF) }
        YY_BREAK
 case 170:
 YY_RULE_SETUP
 #line 384 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TRUST_ANCHOR_FILE) }
+{ YDVAR(1, VAR_DLV_ANCHOR) }
        YY_BREAK
 case 171:
 YY_RULE_SETUP
 #line 385 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_AUTO_TRUST_ANCHOR_FILE) }
+{ YDVAR(1, VAR_DLV_ANCHOR_FILE) }
        YY_BREAK
 case 172:
 YY_RULE_SETUP
 #line 386 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TRUSTED_KEYS_FILE) }
+{ YDVAR(1, VAR_TRUST_ANCHOR_FILE) }
        YY_BREAK
 case 173:
 YY_RULE_SETUP
 #line 387 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TRUST_ANCHOR) }
+{ YDVAR(1, VAR_AUTO_TRUST_ANCHOR_FILE) }
        YY_BREAK
 case 174:
 YY_RULE_SETUP
 #line 388 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_TRUST_ANCHOR_SIGNALING) }
+{ YDVAR(1, VAR_TRUSTED_KEYS_FILE) }
        YY_BREAK
 case 175:
 YY_RULE_SETUP
 #line 389 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ROOT_KEY_SENTINEL) }
+{ YDVAR(1, VAR_TRUST_ANCHOR) }
        YY_BREAK
 case 176:
 YY_RULE_SETUP
 #line 390 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_OVERRIDE_DATE) }
+{ YDVAR(1, VAR_TRUST_ANCHOR_SIGNALING) }
        YY_BREAK
 case 177:
 YY_RULE_SETUP
 #line 391 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_SIG_SKEW_MIN) }
+{ YDVAR(1, VAR_ROOT_KEY_SENTINEL) }
        YY_BREAK
 case 178:
 YY_RULE_SETUP
 #line 392 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_SIG_SKEW_MAX) }
+{ YDVAR(1, VAR_VAL_OVERRIDE_DATE) }
        YY_BREAK
 case 179:
 YY_RULE_SETUP
 #line 393 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_MAX_RESTART) }
+{ YDVAR(1, VAR_VAL_SIG_SKEW_MIN) }
        YY_BREAK
 case 180:
 YY_RULE_SETUP
 #line 394 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_BOGUS_TTL) }
+{ YDVAR(1, VAR_VAL_SIG_SKEW_MAX) }
        YY_BREAK
 case 181:
 YY_RULE_SETUP
 #line 395 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_CLEAN_ADDITIONAL) }
+{ YDVAR(1, VAR_VAL_MAX_RESTART) }
        YY_BREAK
 case 182:
 YY_RULE_SETUP
 #line 396 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_PERMISSIVE_MODE) }
+{ YDVAR(1, VAR_BOGUS_TTL) }
        YY_BREAK
 case 183:
 YY_RULE_SETUP
 #line 397 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_AGGRESSIVE_NSEC) }
+{ YDVAR(1, VAR_VAL_CLEAN_ADDITIONAL) }
        YY_BREAK
 case 184:
 YY_RULE_SETUP
 #line 398 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IGNORE_CD_FLAG) }
+{ YDVAR(1, VAR_VAL_PERMISSIVE_MODE) }
        YY_BREAK
 case 185:
 YY_RULE_SETUP
 #line 399 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_EXPIRED) }
+{ YDVAR(1, VAR_AGGRESSIVE_NSEC) }
        YY_BREAK
 case 186:
 YY_RULE_SETUP
 #line 400 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_EXPIRED_TTL) }
+{ YDVAR(1, VAR_IGNORE_CD_FLAG) }
        YY_BREAK
 case 187:
 YY_RULE_SETUP
 #line 401 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_EXPIRED_TTL_RESET) }
+{ YDVAR(1, VAR_SERVE_EXPIRED) }
        YY_BREAK
 case 188:
 YY_RULE_SETUP
 #line 402 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_EXPIRED_REPLY_TTL) }
+{ YDVAR(1, VAR_SERVE_EXPIRED_TTL) }
        YY_BREAK
 case 189:
 YY_RULE_SETUP
 #line 403 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_EXPIRED_CLIENT_TIMEOUT) }
+{ YDVAR(1, VAR_SERVE_EXPIRED_TTL_RESET) }
        YY_BREAK
 case 190:
 YY_RULE_SETUP
 #line 404 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVE_ORIGINAL_TTL) }
+{ YDVAR(1, VAR_SERVE_EXPIRED_REPLY_TTL) }
        YY_BREAK
 case 191:
 YY_RULE_SETUP
 #line 405 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAKE_DSA) }
+{ YDVAR(1, VAR_SERVE_EXPIRED_CLIENT_TIMEOUT) }
        YY_BREAK
 case 192:
 YY_RULE_SETUP
 #line 406 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAKE_SHA1) }
+{ YDVAR(1, VAR_EDE_SERVE_EXPIRED) }
        YY_BREAK
 case 193:
 YY_RULE_SETUP
 #line 407 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_VAL_LOG_LEVEL) }
+{ YDVAR(1, VAR_SERVE_ORIGINAL_TTL) }
        YY_BREAK
 case 194:
 YY_RULE_SETUP
 #line 408 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_KEY_CACHE_SIZE) }
+{ YDVAR(1, VAR_FAKE_DSA) }
        YY_BREAK
 case 195:
 YY_RULE_SETUP
 #line 409 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_KEY_CACHE_SLABS) }
+{ YDVAR(1, VAR_FAKE_SHA1) }
        YY_BREAK
 case 196:
 YY_RULE_SETUP
 #line 410 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_NEG_CACHE_SIZE) }
+{ YDVAR(1, VAR_VAL_LOG_LEVEL) }
        YY_BREAK
 case 197:
 YY_RULE_SETUP
 #line 411 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ 
-                                 YDVAR(1, VAR_VAL_NSEC3_KEYSIZE_ITERATIONS) }
+{ YDVAR(1, VAR_KEY_CACHE_SIZE) }
        YY_BREAK
 case 198:
 YY_RULE_SETUP
-#line 413 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ZONEMD_PERMISSIVE_MODE) }
+#line 412 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_KEY_CACHE_SLABS) }
        YY_BREAK
 case 199:
 YY_RULE_SETUP
-#line 414 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ZONEMD_CHECK) }
+#line 413 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_NEG_CACHE_SIZE) }
        YY_BREAK
 case 200:
 YY_RULE_SETUP
-#line 415 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ZONEMD_REJECT_ABSENCE) }
+#line 414 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ 
+                                 YDVAR(1, VAR_VAL_NSEC3_KEYSIZE_ITERATIONS) }
        YY_BREAK
 case 201:
 YY_RULE_SETUP
 #line 416 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_ADD_HOLDDOWN) }
+{ YDVAR(1, VAR_ZONEMD_PERMISSIVE_MODE) }
        YY_BREAK
 case 202:
 YY_RULE_SETUP
 #line 417 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DEL_HOLDDOWN) }
+{ YDVAR(1, VAR_ZONEMD_CHECK) }
        YY_BREAK
 case 203:
 YY_RULE_SETUP
 #line 418 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_KEEP_MISSING) }
+{ YDVAR(1, VAR_ZONEMD_REJECT_ABSENCE) }
        YY_BREAK
 case 204:
 YY_RULE_SETUP
 #line 419 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PERMIT_SMALL_HOLDDOWN) }
+{ YDVAR(1, VAR_ADD_HOLDDOWN) }
        YY_BREAK
 case 205:
 YY_RULE_SETUP
 #line 420 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_USE_SYSLOG) }
+{ YDVAR(1, VAR_DEL_HOLDDOWN) }
        YY_BREAK
 case 206:
 YY_RULE_SETUP
 #line 421 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_IDENTITY) }
+{ YDVAR(1, VAR_KEEP_MISSING) }
        YY_BREAK
 case 207:
 YY_RULE_SETUP
 #line 422 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_TIME_ASCII) }
+{ YDVAR(1, VAR_PERMIT_SMALL_HOLDDOWN) }
        YY_BREAK
 case 208:
 YY_RULE_SETUP
 #line 423 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_QUERIES) }
+{ YDVAR(1, VAR_USE_SYSLOG) }
        YY_BREAK
 case 209:
 YY_RULE_SETUP
 #line 424 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_REPLIES) }
+{ YDVAR(1, VAR_LOG_IDENTITY) }
        YY_BREAK
 case 210:
 YY_RULE_SETUP
 #line 425 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_TAG_QUERYREPLY) }
+{ YDVAR(1, VAR_LOG_TIME_ASCII) }
        YY_BREAK
 case 211:
 YY_RULE_SETUP
 #line 426 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_LOCAL_ACTIONS) }
+{ YDVAR(1, VAR_LOG_QUERIES) }
        YY_BREAK
 case 212:
 YY_RULE_SETUP
 #line 427 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOG_SERVFAIL) }
+{ YDVAR(1, VAR_LOG_REPLIES) }
        YY_BREAK
 case 213:
 YY_RULE_SETUP
 #line 428 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_LOCAL_ZONE) }
+{ YDVAR(1, VAR_LOG_TAG_QUERYREPLY) }
        YY_BREAK
 case 214:
 YY_RULE_SETUP
 #line 429 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOCAL_DATA) }
+{ YDVAR(1, VAR_LOG_LOCAL_ACTIONS) }
        YY_BREAK
 case 215:
 YY_RULE_SETUP
 #line 430 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOCAL_DATA_PTR) }
+{ YDVAR(1, VAR_LOG_SERVFAIL) }
        YY_BREAK
 case 216:
 YY_RULE_SETUP
 #line 431 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_UNBLOCK_LAN_ZONES) }
+{ YDVAR(2, VAR_LOCAL_ZONE) }
        YY_BREAK
 case 217:
 YY_RULE_SETUP
 #line 432 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_INSECURE_LAN_ZONES) }
+{ YDVAR(1, VAR_LOCAL_DATA) }
        YY_BREAK
 case 218:
 YY_RULE_SETUP
 #line 433 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STATISTICS_INTERVAL) }
+{ YDVAR(1, VAR_LOCAL_DATA_PTR) }
        YY_BREAK
 case 219:
 YY_RULE_SETUP
 #line 434 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_STATISTICS_CUMULATIVE) }
+{ YDVAR(1, VAR_UNBLOCK_LAN_ZONES) }
        YY_BREAK
 case 220:
 YY_RULE_SETUP
 #line 435 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_EXTENDED_STATISTICS) }
+{ YDVAR(1, VAR_INSECURE_LAN_ZONES) }
        YY_BREAK
 case 221:
 YY_RULE_SETUP
 #line 436 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SHM_ENABLE) }
+{ YDVAR(1, VAR_STATISTICS_INTERVAL) }
        YY_BREAK
 case 222:
 YY_RULE_SETUP
 #line 437 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SHM_KEY) }
+{ YDVAR(1, VAR_STATISTICS_CUMULATIVE) }
        YY_BREAK
 case 223:
 YY_RULE_SETUP
 #line 438 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_REMOTE_CONTROL) }
+{ YDVAR(1, VAR_EXTENDED_STATISTICS) }
        YY_BREAK
 case 224:
 YY_RULE_SETUP
 #line 439 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_ENABLE) }
+{ YDVAR(1, VAR_SHM_ENABLE) }
        YY_BREAK
 case 225:
 YY_RULE_SETUP
 #line 440 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_INTERFACE) }
+{ YDVAR(1, VAR_SHM_KEY) }
        YY_BREAK
 case 226:
 YY_RULE_SETUP
 #line 441 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_PORT) }
+{ YDVAR(0, VAR_REMOTE_CONTROL) }
        YY_BREAK
 case 227:
 YY_RULE_SETUP
 #line 442 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_USE_CERT) }
+{ YDVAR(1, VAR_CONTROL_ENABLE) }
        YY_BREAK
 case 228:
 YY_RULE_SETUP
 #line 443 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVER_KEY_FILE) }
+{ YDVAR(1, VAR_CONTROL_INTERFACE) }
        YY_BREAK
 case 229:
 YY_RULE_SETUP
 #line 444 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_SERVER_CERT_FILE) }
+{ YDVAR(1, VAR_CONTROL_PORT) }
        YY_BREAK
 case 230:
 YY_RULE_SETUP
 #line 445 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_KEY_FILE) }
+{ YDVAR(1, VAR_CONTROL_USE_CERT) }
        YY_BREAK
 case 231:
 YY_RULE_SETUP
 #line 446 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CONTROL_CERT_FILE) }
+{ YDVAR(1, VAR_SERVER_KEY_FILE) }
        YY_BREAK
 case 232:
 YY_RULE_SETUP
 #line 447 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PYTHON_SCRIPT) }
+{ YDVAR(1, VAR_SERVER_CERT_FILE) }
        YY_BREAK
 case 233:
 YY_RULE_SETUP
 #line 448 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_PYTHON) }
+{ YDVAR(1, VAR_CONTROL_KEY_FILE) }
        YY_BREAK
 case 234:
 YY_RULE_SETUP
 #line 449 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DYNLIB_FILE) }
+{ YDVAR(1, VAR_CONTROL_CERT_FILE) }
        YY_BREAK
 case 235:
 YY_RULE_SETUP
 #line 450 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_DYNLIB) }
+{ YDVAR(1, VAR_PYTHON_SCRIPT) }
        YY_BREAK
 case 236:
 YY_RULE_SETUP
 #line 451 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DOMAIN_INSECURE) }
+{ YDVAR(0, VAR_PYTHON) }
        YY_BREAK
 case 237:
 YY_RULE_SETUP
 #line 452 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MINIMAL_RESPONSES) }
+{ YDVAR(1, VAR_DYNLIB_FILE) }
        YY_BREAK
 case 238:
 YY_RULE_SETUP
 #line 453 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RRSET_ROUNDROBIN) }
+{ YDVAR(0, VAR_DYNLIB) }
        YY_BREAK
 case 239:
 YY_RULE_SETUP
 #line 454 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_UNKNOWN_SERVER_TIME_LIMIT) }
+{ YDVAR(1, VAR_DOMAIN_INSECURE) }
        YY_BREAK
 case 240:
 YY_RULE_SETUP
 #line 455 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_MAX_UDP_SIZE) }
+{ YDVAR(1, VAR_MINIMAL_RESPONSES) }
        YY_BREAK
 case 241:
 YY_RULE_SETUP
 #line 456 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNS64_PREFIX) }
+{ YDVAR(1, VAR_RRSET_ROUNDROBIN) }
        YY_BREAK
 case 242:
 YY_RULE_SETUP
 #line 457 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNS64_SYNTHALL) }
+{ YDVAR(1, VAR_UNKNOWN_SERVER_TIME_LIMIT) }
        YY_BREAK
 case 243:
 YY_RULE_SETUP
 #line 458 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNS64_IGNORE_AAAA) }
+{ YDVAR(1, VAR_MAX_UDP_SIZE) }
        YY_BREAK
 case 244:
 YY_RULE_SETUP
 #line 459 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DEFINE_TAG) }
+{ YDVAR(1, VAR_DNS64_PREFIX) }
        YY_BREAK
 case 245:
 YY_RULE_SETUP
 #line 460 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_LOCAL_ZONE_TAG) }
+{ YDVAR(1, VAR_DNS64_SYNTHALL) }
        YY_BREAK
 case 246:
 YY_RULE_SETUP
 #line 461 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_ACCESS_CONTROL_TAG) }
+{ YDVAR(1, VAR_DNS64_IGNORE_AAAA) }
        YY_BREAK
 case 247:
 YY_RULE_SETUP
 #line 462 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_ACTION) }
+{ YDVAR(1, VAR_DEFINE_TAG) }
        YY_BREAK
 case 248:
 YY_RULE_SETUP
 #line 463 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_DATA) }
+{ YDVAR(2, VAR_LOCAL_ZONE_TAG) }
        YY_BREAK
 case 249:
 YY_RULE_SETUP
 #line 464 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_ACCESS_CONTROL_VIEW) }
+{ YDVAR(2, VAR_ACCESS_CONTROL_TAG) }
        YY_BREAK
 case 250:
 YY_RULE_SETUP
 #line 465 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) }
+{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_ACTION) }
        YY_BREAK
 case 251:
 YY_RULE_SETUP
 #line 466 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_DNSTAP) }
+{ YDVAR(3, VAR_ACCESS_CONTROL_TAG_DATA) }
        YY_BREAK
 case 252:
 YY_RULE_SETUP
 #line 467 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_ENABLE) }
+{ YDVAR(2, VAR_ACCESS_CONTROL_VIEW) }
        YY_BREAK
 case 253:
 YY_RULE_SETUP
 #line 468 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_BIDIRECTIONAL) }
+{ YDVAR(3, VAR_LOCAL_ZONE_OVERRIDE) }
        YY_BREAK
 case 254:
 YY_RULE_SETUP
 #line 469 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_SOCKET_PATH) }
+{ YDVAR(0, VAR_DNSTAP) }
        YY_BREAK
 case 255:
 YY_RULE_SETUP
 #line 470 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_IP) }
+{ YDVAR(1, VAR_DNSTAP_ENABLE) }
        YY_BREAK
 case 256:
 YY_RULE_SETUP
 #line 471 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_TLS) }
+{ YDVAR(1, VAR_DNSTAP_BIDIRECTIONAL) }
        YY_BREAK
 case 257:
 YY_RULE_SETUP
 #line 472 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_TLS_SERVER_NAME) }
+{ YDVAR(1, VAR_DNSTAP_SOCKET_PATH) }
        YY_BREAK
 case 258:
 YY_RULE_SETUP
 #line 473 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_TLS_CERT_BUNDLE) }
+{ YDVAR(1, VAR_DNSTAP_IP) }
        YY_BREAK
 case 259:
 YY_RULE_SETUP
 #line 474 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSTAP_TLS_CLIENT_KEY_FILE) }
+{ YDVAR(1, VAR_DNSTAP_TLS) }
        YY_BREAK
 case 260:
 YY_RULE_SETUP
-#line 476 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSTAP_TLS_CLIENT_CERT_FILE) }
+#line 475 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSTAP_TLS_SERVER_NAME) }
        YY_BREAK
 case 261:
 YY_RULE_SETUP
-#line 478 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) }
+#line 476 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSTAP_TLS_CERT_BUNDLE) }
        YY_BREAK
 case 262:
 YY_RULE_SETUP
-#line 479 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_SEND_VERSION) }
+#line 477 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSTAP_TLS_CLIENT_KEY_FILE) }
        YY_BREAK
 case 263:
 YY_RULE_SETUP
-#line 480 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_IDENTITY) }
+#line 479 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSTAP_TLS_CLIENT_CERT_FILE) }
        YY_BREAK
 case 264:
 YY_RULE_SETUP
 #line 481 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSTAP_VERSION) }
+{ YDVAR(1, VAR_DNSTAP_SEND_IDENTITY) }
        YY_BREAK
 case 265:
 YY_RULE_SETUP
 #line 482 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES) }
+{ YDVAR(1, VAR_DNSTAP_SEND_VERSION) }
        YY_BREAK
 case 266:
 YY_RULE_SETUP
-#line 484 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES) }
+#line 483 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSTAP_IDENTITY) }
        YY_BREAK
 case 267:
 YY_RULE_SETUP
-#line 486 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES) }
+#line 484 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSTAP_VERSION) }
        YY_BREAK
 case 268:
 YY_RULE_SETUP
-#line 488 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 485 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
-               YDVAR(1, VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES) }
+               YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_QUERY_MESSAGES) }
        YY_BREAK
 case 269:
 YY_RULE_SETUP
-#line 490 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 487 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
-               YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES) }
+               YDVAR(1, VAR_DNSTAP_LOG_RESOLVER_RESPONSE_MESSAGES) }
        YY_BREAK
 case 270:
 YY_RULE_SETUP
-#line 492 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 489 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
-               YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES) }
+               YDVAR(1, VAR_DNSTAP_LOG_CLIENT_QUERY_MESSAGES) }
        YY_BREAK
 case 271:
 YY_RULE_SETUP
-#line 494 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DISABLE_DNSSEC_LAME_CHECK) }
+#line 491 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSTAP_LOG_CLIENT_RESPONSE_MESSAGES) }
        YY_BREAK
 case 272:
 YY_RULE_SETUP
-#line 495 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_RATELIMIT) }
+#line 493 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_QUERY_MESSAGES) }
        YY_BREAK
 case 273:
 YY_RULE_SETUP
-#line 496 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RATELIMIT) }
+#line 495 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSTAP_LOG_FORWARDER_RESPONSE_MESSAGES) }
        YY_BREAK
 case 274:
 YY_RULE_SETUP
 #line 497 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_RATELIMIT_SLABS) }
+{ YDVAR(1, VAR_DISABLE_DNSSEC_LAME_CHECK) }
        YY_BREAK
 case 275:
 YY_RULE_SETUP
 #line 498 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RATELIMIT_SLABS) }
+{ YDVAR(1, VAR_IP_RATELIMIT) }
        YY_BREAK
 case 276:
 YY_RULE_SETUP
 #line 499 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_RATELIMIT_SIZE) }
+{ YDVAR(1, VAR_RATELIMIT) }
        YY_BREAK
 case 277:
 YY_RULE_SETUP
 #line 500 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RATELIMIT_SIZE) }
+{ YDVAR(1, VAR_IP_RATELIMIT_SLABS) }
        YY_BREAK
 case 278:
 YY_RULE_SETUP
 #line 501 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_RATELIMIT_FOR_DOMAIN) }
+{ YDVAR(1, VAR_RATELIMIT_SLABS) }
        YY_BREAK
 case 279:
 YY_RULE_SETUP
 #line 502 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_RATELIMIT_BELOW_DOMAIN) }
+{ YDVAR(1, VAR_IP_RATELIMIT_SIZE) }
        YY_BREAK
 case 280:
 YY_RULE_SETUP
 #line 503 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_RATELIMIT_FACTOR) }
+{ YDVAR(1, VAR_RATELIMIT_SIZE) }
        YY_BREAK
 case 281:
 YY_RULE_SETUP
 #line 504 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RATELIMIT_FACTOR) }
+{ YDVAR(2, VAR_RATELIMIT_FOR_DOMAIN) }
        YY_BREAK
 case 282:
 YY_RULE_SETUP
 #line 505 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IP_RATELIMIT_BACKOFF) }
+{ YDVAR(2, VAR_RATELIMIT_BELOW_DOMAIN) }
        YY_BREAK
 case 283:
 YY_RULE_SETUP
 #line 506 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_RATELIMIT_BACKOFF) }
+{ YDVAR(1, VAR_IP_RATELIMIT_FACTOR) }
        YY_BREAK
 case 284:
 YY_RULE_SETUP
 #line 507 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_OUTBOUND_MSG_RETRY) }
+{ YDVAR(1, VAR_RATELIMIT_FACTOR) }
        YY_BREAK
 case 285:
 YY_RULE_SETUP
 #line 508 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_LOW_RTT) }
+{ YDVAR(1, VAR_IP_RATELIMIT_BACKOFF) }
        YY_BREAK
 case 286:
 YY_RULE_SETUP
 #line 509 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAST_SERVER_NUM) }
+{ YDVAR(1, VAR_RATELIMIT_BACKOFF) }
        YY_BREAK
 case 287:
 YY_RULE_SETUP
 #line 510 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
+{ YDVAR(1, VAR_OUTBOUND_MSG_RETRY) }
        YY_BREAK
 case 288:
 YY_RULE_SETUP
 #line 511 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
+{ YDVAR(1, VAR_LOW_RTT) }
        YY_BREAK
 case 289:
 YY_RULE_SETUP
 #line 512 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
+{ YDVAR(1, VAR_FAST_SERVER_NUM) }
        YY_BREAK
 case 290:
 YY_RULE_SETUP
 #line 513 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_RESPONSE_IP_TAG) }
+{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
        YY_BREAK
 case 291:
 YY_RULE_SETUP
 #line 514 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_RESPONSE_IP) }
+{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
        YY_BREAK
 case 292:
 YY_RULE_SETUP
 #line 515 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_RESPONSE_IP_DATA) }
+{ YDVAR(1, VAR_FAST_SERVER_PERMIL) }
        YY_BREAK
 case 293:
 YY_RULE_SETUP
 #line 516 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_DNSCRYPT) }
+{ YDVAR(2, VAR_RESPONSE_IP_TAG) }
        YY_BREAK
 case 294:
 YY_RULE_SETUP
 #line 517 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_ENABLE) }
+{ YDVAR(2, VAR_RESPONSE_IP) }
        YY_BREAK
 case 295:
 YY_RULE_SETUP
 #line 518 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_PORT) }
+{ YDVAR(2, VAR_RESPONSE_IP_DATA) }
        YY_BREAK
 case 296:
 YY_RULE_SETUP
 #line 519 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_PROVIDER) }
+{ YDVAR(0, VAR_DNSCRYPT) }
        YY_BREAK
 case 297:
 YY_RULE_SETUP
 #line 520 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_SECRET_KEY) }
+{ YDVAR(1, VAR_DNSCRYPT_ENABLE) }
        YY_BREAK
 case 298:
 YY_RULE_SETUP
 #line 521 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT) }
+{ YDVAR(1, VAR_DNSCRYPT_PORT) }
        YY_BREAK
 case 299:
 YY_RULE_SETUP
 #line 522 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT_ROTATED) }
+{ YDVAR(1, VAR_DNSCRYPT_PROVIDER) }
        YY_BREAK
 case 300:
 YY_RULE_SETUP
 #line 523 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE) }
+{ YDVAR(1, VAR_DNSCRYPT_SECRET_KEY) }
        YY_BREAK
 case 301:
 YY_RULE_SETUP
-#line 525 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{
-               YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS) }
+#line 524 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT) }
        YY_BREAK
 case 302:
 YY_RULE_SETUP
-#line 527 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SIZE) }
+#line 525 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_DNSCRYPT_PROVIDER_CERT_ROTATED) }
        YY_BREAK
 case 303:
 YY_RULE_SETUP
-#line 528 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SLABS) }
+#line 526 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE) }
        YY_BREAK
 case 304:
 YY_RULE_SETUP
-#line 529 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PAD_RESPONSES) }
+#line 528 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{
+               YDVAR(1, VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS) }
        YY_BREAK
 case 305:
 YY_RULE_SETUP
 #line 530 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PAD_RESPONSES_BLOCK_SIZE) }
+{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SIZE) }
        YY_BREAK
 case 306:
 YY_RULE_SETUP
 #line 531 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PAD_QUERIES) }
+{ YDVAR(1, VAR_DNSCRYPT_NONCE_CACHE_SLABS) }
        YY_BREAK
 case 307:
 YY_RULE_SETUP
 #line 532 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_PAD_QUERIES_BLOCK_SIZE) }
+{ YDVAR(1, VAR_PAD_RESPONSES) }
        YY_BREAK
 case 308:
 YY_RULE_SETUP
 #line 533 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_ENABLED) }
+{ YDVAR(1, VAR_PAD_RESPONSES_BLOCK_SIZE) }
        YY_BREAK
 case 309:
 YY_RULE_SETUP
 #line 534 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_IGNORE_BOGUS) }
+{ YDVAR(1, VAR_PAD_QUERIES) }
        YY_BREAK
 case 310:
 YY_RULE_SETUP
 #line 535 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_HOOK) }
+{ YDVAR(1, VAR_PAD_QUERIES_BLOCK_SIZE) }
        YY_BREAK
 case 311:
 YY_RULE_SETUP
 #line 536 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_MAX_TTL) }
+{ YDVAR(1, VAR_IPSECMOD_ENABLED) }
        YY_BREAK
 case 312:
 YY_RULE_SETUP
 #line 537 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
+{ YDVAR(1, VAR_IPSECMOD_IGNORE_BOGUS) }
        YY_BREAK
 case 313:
 YY_RULE_SETUP
 #line 538 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
+{ YDVAR(1, VAR_IPSECMOD_HOOK) }
        YY_BREAK
 case 314:
 YY_RULE_SETUP
 #line 539 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSECMOD_STRICT) }
+{ YDVAR(1, VAR_IPSECMOD_MAX_TTL) }
        YY_BREAK
 case 315:
 YY_RULE_SETUP
 #line 540 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_CACHEDB) }
+{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
        YY_BREAK
 case 316:
 YY_RULE_SETUP
 #line 541 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_BACKEND) }
+{ YDVAR(1, VAR_IPSECMOD_WHITELIST) }
        YY_BREAK
 case 317:
 YY_RULE_SETUP
 #line 542 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_SECRETSEED) }
+{ YDVAR(1, VAR_IPSECMOD_STRICT) }
        YY_BREAK
 case 318:
 YY_RULE_SETUP
 #line 543 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_REDISHOST) }
+{ YDVAR(0, VAR_CACHEDB) }
        YY_BREAK
 case 319:
 YY_RULE_SETUP
 #line 544 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_REDISPORT) }
+{ YDVAR(1, VAR_CACHEDB_BACKEND) }
        YY_BREAK
 case 320:
 YY_RULE_SETUP
 #line 545 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_REDISTIMEOUT) }
+{ YDVAR(1, VAR_CACHEDB_SECRETSEED) }
        YY_BREAK
 case 321:
 YY_RULE_SETUP
 #line 546 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_CACHEDB_REDISEXPIRERECORDS) }
+{ YDVAR(1, VAR_CACHEDB_REDISHOST) }
        YY_BREAK
 case 322:
 YY_RULE_SETUP
 #line 547 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(0, VAR_IPSET) }
+{ YDVAR(1, VAR_CACHEDB_REDISPORT) }
        YY_BREAK
 case 323:
 YY_RULE_SETUP
 #line 548 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSET_NAME_V4) }
+{ YDVAR(1, VAR_CACHEDB_REDISTIMEOUT) }
        YY_BREAK
 case 324:
 YY_RULE_SETUP
 #line 549 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_IPSET_NAME_V6) }
+{ YDVAR(1, VAR_CACHEDB_REDISEXPIRERECORDS) }
        YY_BREAK
 case 325:
 YY_RULE_SETUP
 #line 550 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM) }
+{ YDVAR(0, VAR_IPSET) }
        YY_BREAK
 case 326:
 YY_RULE_SETUP
 #line 551 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_TCP_CONNECTION_LIMIT) }
+{ YDVAR(1, VAR_IPSET_NAME_V4) }
        YY_BREAK
 case 327:
 YY_RULE_SETUP
 #line 552 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(2, VAR_EDNS_CLIENT_STRING) }
+{ YDVAR(1, VAR_IPSET_NAME_V6) }
        YY_BREAK
 case 328:
 YY_RULE_SETUP
 #line 553 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_EDNS_CLIENT_STRING_OPCODE) }
+{ YDVAR(1, VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM) }
        YY_BREAK
 case 329:
 YY_RULE_SETUP
 #line 554 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ YDVAR(1, VAR_NSID ) }
+{ YDVAR(2, VAR_TCP_CONNECTION_LIMIT) }
        YY_BREAK
 case 330:
-/* rule 330 can match eol */
 YY_RULE_SETUP
 #line 555 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
-{ LEXOUT(("NL\n")); cfg_parser->line++; }
+{ YDVAR(2, VAR_EDNS_CLIENT_STRING) }
        YY_BREAK
-/* Quoted strings. Strip leading and ending quotes */
 case 331:
 YY_RULE_SETUP
+#line 556 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_EDNS_CLIENT_STRING_OPCODE) }
+       YY_BREAK
+case 332:
+YY_RULE_SETUP
+#line 557 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_NSID ) }
+       YY_BREAK
+case 333:
+YY_RULE_SETUP
 #line 558 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ YDVAR(1, VAR_EDE ) }
+       YY_BREAK
+case 334:
+/* rule 334 can match eol */
+YY_RULE_SETUP
+#line 559 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+{ LEXOUT(("NL\n")); cfg_parser->line++; }
+       YY_BREAK
+/* Quoted strings. Strip leading and ending quotes */
+case 335:
+YY_RULE_SETUP
+#line 562 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { BEGIN(quotedstring); LEXOUT(("QS ")); }
        YY_BREAK
 case YY_STATE_EOF(quotedstring):
-#line 559 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 563 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         yyerror("EOF inside quoted string");
        if(--num_args == 0) { BEGIN(INITIAL); }
        else                { BEGIN(val); }
 }
        YY_BREAK
-case 332:
+case 336:
 YY_RULE_SETUP
-#line 564 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 568 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("STR(%s) ", yytext)); yymore(); }
        YY_BREAK
-case 333:
-/* rule 333 can match eol */
+case 337:
+/* rule 337 can match eol */
 YY_RULE_SETUP
-#line 565 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 569 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { yyerror("newline inside quoted string, no end \""); 
                          cfg_parser->line++; BEGIN(INITIAL); }
        YY_BREAK
-case 334:
+case 338:
 YY_RULE_SETUP
-#line 567 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 571 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         LEXOUT(("QE "));
        if(--num_args == 0) { BEGIN(INITIAL); }
@@ -5349,34 +5396,34 @@ YY_RULE_SETUP
 }
        YY_BREAK
 /* Single Quoted strings. Strip leading and ending quotes */
-case 335:
+case 339:
 YY_RULE_SETUP
-#line 579 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 583 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { BEGIN(singlequotedstr); LEXOUT(("SQS ")); }
        YY_BREAK
 case YY_STATE_EOF(singlequotedstr):
-#line 580 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 584 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         yyerror("EOF inside quoted string");
        if(--num_args == 0) { BEGIN(INITIAL); }
        else                { BEGIN(val); }
 }
        YY_BREAK
-case 336:
+case 340:
 YY_RULE_SETUP
-#line 585 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 589 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("STR(%s) ", yytext)); yymore(); }
        YY_BREAK
-case 337:
-/* rule 337 can match eol */
+case 341:
+/* rule 341 can match eol */
 YY_RULE_SETUP
-#line 586 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 590 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { yyerror("newline inside quoted string, no end '"); 
                             cfg_parser->line++; BEGIN(INITIAL); }
        YY_BREAK
-case 338:
+case 342:
 YY_RULE_SETUP
-#line 588 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 592 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         LEXOUT(("SQE "));
        if(--num_args == 0) { BEGIN(INITIAL); }
@@ -5389,38 +5436,38 @@ YY_RULE_SETUP
 }
        YY_BREAK
 /* include: directive */
-case 339:
+case 343:
 YY_RULE_SETUP
-#line 600 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 604 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { 
        LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include); }
        YY_BREAK
 case YY_STATE_EOF(include):
-#line 602 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 606 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         yyerror("EOF inside include directive");
         BEGIN(inc_prev);
 }
        YY_BREAK
-case 340:
+case 344:
 YY_RULE_SETUP
-#line 606 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 610 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("ISP ")); /* ignore */ }
        YY_BREAK
-case 341:
-/* rule 341 can match eol */
+case 345:
+/* rule 345 can match eol */
 YY_RULE_SETUP
-#line 607 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 611 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("NL\n")); cfg_parser->line++;}
        YY_BREAK
-case 342:
+case 346:
 YY_RULE_SETUP
-#line 608 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 612 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("IQS ")); BEGIN(include_quoted); }
        YY_BREAK
-case 343:
+case 347:
 YY_RULE_SETUP
-#line 609 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 613 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("Iunquotedstr(%s) ", yytext));
        config_start_include_glob(yytext, 0);
@@ -5428,27 +5475,27 @@ YY_RULE_SETUP
 }
        YY_BREAK
 case YY_STATE_EOF(include_quoted):
-#line 614 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 618 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
         yyerror("EOF inside quoted string");
         BEGIN(inc_prev);
 }
        YY_BREAK
-case 344:
+case 348:
 YY_RULE_SETUP
-#line 618 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 622 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("ISTR(%s) ", yytext)); yymore(); }
        YY_BREAK
-case 345:
-/* rule 345 can match eol */
+case 349:
+/* rule 349 can match eol */
 YY_RULE_SETUP
-#line 619 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 623 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { yyerror("newline before \" in include name"); 
                                  cfg_parser->line++; BEGIN(inc_prev); }
        YY_BREAK
-case 346:
+case 350:
 YY_RULE_SETUP
-#line 621 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 625 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("IQE "));
        yytext[yyleng - 1] = '\0';
@@ -5458,7 +5505,7 @@ YY_RULE_SETUP
        YY_BREAK
 case YY_STATE_EOF(INITIAL):
 case YY_STATE_EOF(val):
-#line 627 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 631 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("LEXEOF "));
        yy_set_bol(1); /* Set beginning of line, so "^" rules match.  */
@@ -5473,39 +5520,39 @@ case YY_STATE_EOF(val):
 }
        YY_BREAK
 /* include-toplevel: directive */
-case 347:
+case 351:
 YY_RULE_SETUP
-#line 641 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 645 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("v(%s) ", yytext)); inc_prev = YYSTATE; BEGIN(include_toplevel);
 }
        YY_BREAK
 case YY_STATE_EOF(include_toplevel):
-#line 644 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 648 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        yyerror("EOF inside include_toplevel directive");
        BEGIN(inc_prev);
 }
        YY_BREAK
-case 348:
+case 352:
 YY_RULE_SETUP
-#line 648 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 652 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("ITSP ")); /* ignore */ }
        YY_BREAK
-case 349:
-/* rule 349 can match eol */
+case 353:
+/* rule 353 can match eol */
 YY_RULE_SETUP
-#line 649 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 653 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("NL\n")); cfg_parser->line++; }
        YY_BREAK
-case 350:
+case 354:
 YY_RULE_SETUP
-#line 650 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 654 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("ITQS ")); BEGIN(include_toplevel_quoted); }
        YY_BREAK
-case 351:
+case 355:
 YY_RULE_SETUP
-#line 651 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 655 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("ITunquotedstr(%s) ", yytext));
        config_start_include_glob(yytext, 1);
@@ -5514,29 +5561,29 @@ YY_RULE_SETUP
 }
        YY_BREAK
 case YY_STATE_EOF(include_toplevel_quoted):
-#line 657 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 661 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        yyerror("EOF inside quoted string");
        BEGIN(inc_prev);
 }
        YY_BREAK
-case 352:
+case 356:
 YY_RULE_SETUP
-#line 661 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 665 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("ITSTR(%s) ", yytext)); yymore(); }
        YY_BREAK
-case 353:
-/* rule 353 can match eol */
+case 357:
+/* rule 357 can match eol */
 YY_RULE_SETUP
-#line 662 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 666 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        yyerror("newline before \" in include name");
        cfg_parser->line++; BEGIN(inc_prev);
 }
        YY_BREAK
-case 354:
+case 358:
 YY_RULE_SETUP
-#line 666 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 670 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        LEXOUT(("ITQE "));
        yytext[yyleng - 1] = '\0';
@@ -5545,33 +5592,33 @@ YY_RULE_SETUP
        return (VAR_FORCE_TOPLEVEL);
 }
        YY_BREAK
-case 355:
+case 359:
 YY_RULE_SETUP
-#line 674 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 678 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 { LEXOUT(("unquotedstr(%s) ", yytext)); 
                        if(--num_args == 0) { BEGIN(INITIAL); }
                        yylval.str = strdup(yytext); return STRING_ARG; }
        YY_BREAK
-case 356:
+case 360:
 YY_RULE_SETUP
-#line 678 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 682 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        ub_c_error_msg("unknown keyword '%s'", yytext);
        }
        YY_BREAK
-case 357:
+case 361:
 YY_RULE_SETUP
-#line 682 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 686 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 {
        ub_c_error_msg("stray '%s'", yytext);
        }
        YY_BREAK
-case 358:
+case 362:
 YY_RULE_SETUP
-#line 686 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 690 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 ECHO;
        YY_BREAK
-#line 5573 "<stdout>"
+#line 5620 "<stdout>"
 
        case YY_END_OF_BUFFER:
                {
@@ -5864,7 +5911,7 @@ static int yy_get_next_buffer (void)
                while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
                        {
                        yy_current_state = (int) yy_def[yy_current_state];
-                       if ( yy_current_state >= 3558 )
+                       if ( yy_current_state >= 3593 )
                                yy_c = yy_meta[(unsigned int) yy_c];
                        }
                yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c];
@@ -5892,11 +5939,11 @@ static int yy_get_next_buffer (void)
        while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
                {
                yy_current_state = (int) yy_def[yy_current_state];
-               if ( yy_current_state >= 3558 )
+               if ( yy_current_state >= 3593 )
                        yy_c = yy_meta[(unsigned int) yy_c];
                }
        yy_current_state = yy_nxt[yy_base[yy_current_state] + (unsigned int) yy_c];
-       yy_is_jam = (yy_current_state == 3557);
+       yy_is_jam = (yy_current_state == 3592);
 
        return yy_is_jam ? 0 : yy_current_state;
 }
@@ -6529,7 +6576,7 @@ void yyfree (void * ptr )
 
 #define YYTABLES_NAME "yytables"
 
-#line 686 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
+#line 690 "/usr/src/usr.sbin/unbound/util/configlexer.lex"
 
 
 

diff --git a/sbin/unwind/libunbound/util/configlexer.lex b/sbin/unwind/libunbound/util/configlexer.lex
index 34a0e5d..2d59fbc 100644 (file)
--- a/sbin/unwind/libunbound/util/configlexer.lex
+++ b/sbin/unwind/libunbound/util/configlexer.lex
@@ -251,6 +251,7 @@ tls-port{COLON}                     { YDVAR(1, VAR_SSL_PORT) }
 ssl-cert-bundle{COLON}         { YDVAR(1, VAR_TLS_CERT_BUNDLE) }
 tls-cert-bundle{COLON}         { YDVAR(1, VAR_TLS_CERT_BUNDLE) }
 tls-win-cert{COLON}            { YDVAR(1, VAR_TLS_WIN_CERT) }
+tls-system-cert{COLON}         { YDVAR(1, VAR_TLS_WIN_CERT) }
 additional-ssl-port{COLON}     { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
 additional-tls-port{COLON}     { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
 tls-additional-ports{COLON}    { YDVAR(1, VAR_TLS_ADDITIONAL_PORT) }
@@ -272,6 +273,7 @@ interface{COLON}            { YDVAR(1, VAR_INTERFACE) }
 ip-address{COLON}              { YDVAR(1, VAR_INTERFACE) }
 outgoing-interface{COLON}      { YDVAR(1, VAR_OUTGOING_INTERFACE) }
 interface-automatic{COLON}     { YDVAR(1, VAR_INTERFACE_AUTOMATIC) }
+interface-automatic-ports{COLON} { YDVAR(1, VAR_INTERFACE_AUTOMATIC_PORTS) }
 so-rcvbuf{COLON}               { YDVAR(1, VAR_SO_RCVBUF) }
 so-sndbuf{COLON}               { YDVAR(1, VAR_SO_SNDBUF) }
 so-reuseport{COLON}            { YDVAR(1, VAR_SO_REUSEPORT) }
@@ -401,6 +403,7 @@ serve-expired-ttl{COLON}    { YDVAR(1, VAR_SERVE_EXPIRED_TTL) }
 serve-expired-ttl-reset{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_TTL_RESET) }
 serve-expired-reply-ttl{COLON} { YDVAR(1, VAR_SERVE_EXPIRED_REPLY_TTL) }
 serve-expired-client-timeout{COLON}    { YDVAR(1, VAR_SERVE_EXPIRED_CLIENT_TIMEOUT) }
+ede-serve-expired{COLON}       { YDVAR(1, VAR_EDE_SERVE_EXPIRED) }
 serve-original-ttl{COLON}      { YDVAR(1, VAR_SERVE_ORIGINAL_TTL) }
 fake-dsa{COLON}                        { YDVAR(1, VAR_FAKE_DSA) }
 fake-sha1{COLON}               { YDVAR(1, VAR_FAKE_SHA1) }
@@ -552,6 +555,7 @@ tcp-connection-limit{COLON} { YDVAR(2, VAR_TCP_CONNECTION_LIMIT) }
 edns-client-string{COLON}      { YDVAR(2, VAR_EDNS_CLIENT_STRING) }
 edns-client-string-opcode{COLON} { YDVAR(1, VAR_EDNS_CLIENT_STRING_OPCODE) }
 nsid{COLON}                    { YDVAR(1, VAR_NSID ) }
+ede{COLON}                     { YDVAR(1, VAR_EDE ) }
 <INITIAL,val>{NEWLINE}         { LEXOUT(("NL\n")); cfg_parser->line++; }
 
        /* Quoted strings. Strip leading and ending quotes */

diff --git a/sbin/unwind/libunbound/util/configparser.h b/sbin/unwind/libunbound/util/configparser.h
index ec40866..6c51709 100644 (file)
--- a/sbin/unwind/libunbound/util/configparser.h
+++ b/sbin/unwind/libunbound/util/configparser.h
@@ -233,92 +233,95 @@
 #define VAR_SERVE_EXPIRED_TTL_RESET 489
 #define VAR_SERVE_EXPIRED_REPLY_TTL 490
 #define VAR_SERVE_EXPIRED_CLIENT_TIMEOUT 491
-#define VAR_SERVE_ORIGINAL_TTL 492
-#define VAR_FAKE_DSA 493
-#define VAR_FAKE_SHA1 494
-#define VAR_LOG_IDENTITY 495
-#define VAR_HIDE_TRUSTANCHOR 496
-#define VAR_HIDE_HTTP_USER_AGENT 497
-#define VAR_HTTP_USER_AGENT 498
-#define VAR_TRUST_ANCHOR_SIGNALING 499
-#define VAR_AGGRESSIVE_NSEC 500
-#define VAR_USE_SYSTEMD 501
-#define VAR_SHM_ENABLE 502
-#define VAR_SHM_KEY 503
-#define VAR_ROOT_KEY_SENTINEL 504
-#define VAR_DNSCRYPT 505
-#define VAR_DNSCRYPT_ENABLE 506
-#define VAR_DNSCRYPT_PORT 507
-#define VAR_DNSCRYPT_PROVIDER 508
-#define VAR_DNSCRYPT_SECRET_KEY 509
-#define VAR_DNSCRYPT_PROVIDER_CERT 510
-#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 511
-#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 512
-#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 513
-#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 514
-#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 515
-#define VAR_PAD_RESPONSES 516
-#define VAR_PAD_RESPONSES_BLOCK_SIZE 517
-#define VAR_PAD_QUERIES 518
-#define VAR_PAD_QUERIES_BLOCK_SIZE 519
-#define VAR_IPSECMOD_ENABLED 520
-#define VAR_IPSECMOD_HOOK 521
-#define VAR_IPSECMOD_IGNORE_BOGUS 522
-#define VAR_IPSECMOD_MAX_TTL 523
-#define VAR_IPSECMOD_WHITELIST 524
-#define VAR_IPSECMOD_STRICT 525
-#define VAR_CACHEDB 526
-#define VAR_CACHEDB_BACKEND 527
-#define VAR_CACHEDB_SECRETSEED 528
-#define VAR_CACHEDB_REDISHOST 529
-#define VAR_CACHEDB_REDISPORT 530
-#define VAR_CACHEDB_REDISTIMEOUT 531
-#define VAR_CACHEDB_REDISEXPIRERECORDS 532
-#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 533
-#define VAR_FOR_UPSTREAM 534
-#define VAR_AUTH_ZONE 535
-#define VAR_ZONEFILE 536
-#define VAR_MASTER 537
-#define VAR_URL 538
-#define VAR_FOR_DOWNSTREAM 539
-#define VAR_FALLBACK_ENABLED 540
-#define VAR_TLS_ADDITIONAL_PORT 541
-#define VAR_LOW_RTT 542
-#define VAR_LOW_RTT_PERMIL 543
-#define VAR_FAST_SERVER_PERMIL 544
-#define VAR_FAST_SERVER_NUM 545
-#define VAR_ALLOW_NOTIFY 546
-#define VAR_TLS_WIN_CERT 547
-#define VAR_TCP_CONNECTION_LIMIT 548
-#define VAR_FORWARD_NO_CACHE 549
-#define VAR_STUB_NO_CACHE 550
-#define VAR_LOG_SERVFAIL 551
-#define VAR_DENY_ANY 552
-#define VAR_UNKNOWN_SERVER_TIME_LIMIT 553
-#define VAR_LOG_TAG_QUERYREPLY 554
-#define VAR_STREAM_WAIT_SIZE 555
-#define VAR_TLS_CIPHERS 556
-#define VAR_TLS_CIPHERSUITES 557
-#define VAR_TLS_USE_SNI 558
-#define VAR_IPSET 559
-#define VAR_IPSET_NAME_V4 560
-#define VAR_IPSET_NAME_V6 561
-#define VAR_TLS_SESSION_TICKET_KEYS 562
-#define VAR_RPZ 563
-#define VAR_TAGS 564
-#define VAR_RPZ_ACTION_OVERRIDE 565
-#define VAR_RPZ_CNAME_OVERRIDE 566
-#define VAR_RPZ_LOG 567
-#define VAR_RPZ_LOG_NAME 568
-#define VAR_DYNLIB 569
-#define VAR_DYNLIB_FILE 570
-#define VAR_EDNS_CLIENT_STRING 571
-#define VAR_EDNS_CLIENT_STRING_OPCODE 572
-#define VAR_NSID 573
-#define VAR_ZONEMD_PERMISSIVE_MODE 574
-#define VAR_ZONEMD_CHECK 575
-#define VAR_ZONEMD_REJECT_ABSENCE 576
-#define VAR_RPZ_SIGNAL_NXDOMAIN_RA 577
+#define VAR_EDE_SERVE_EXPIRED 492
+#define VAR_SERVE_ORIGINAL_TTL 493
+#define VAR_FAKE_DSA 494
+#define VAR_FAKE_SHA1 495
+#define VAR_LOG_IDENTITY 496
+#define VAR_HIDE_TRUSTANCHOR 497
+#define VAR_HIDE_HTTP_USER_AGENT 498
+#define VAR_HTTP_USER_AGENT 499
+#define VAR_TRUST_ANCHOR_SIGNALING 500
+#define VAR_AGGRESSIVE_NSEC 501
+#define VAR_USE_SYSTEMD 502
+#define VAR_SHM_ENABLE 503
+#define VAR_SHM_KEY 504
+#define VAR_ROOT_KEY_SENTINEL 505
+#define VAR_DNSCRYPT 506
+#define VAR_DNSCRYPT_ENABLE 507
+#define VAR_DNSCRYPT_PORT 508
+#define VAR_DNSCRYPT_PROVIDER 509
+#define VAR_DNSCRYPT_SECRET_KEY 510
+#define VAR_DNSCRYPT_PROVIDER_CERT 511
+#define VAR_DNSCRYPT_PROVIDER_CERT_ROTATED 512
+#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SIZE 513
+#define VAR_DNSCRYPT_SHARED_SECRET_CACHE_SLABS 514
+#define VAR_DNSCRYPT_NONCE_CACHE_SIZE 515
+#define VAR_DNSCRYPT_NONCE_CACHE_SLABS 516
+#define VAR_PAD_RESPONSES 517
+#define VAR_PAD_RESPONSES_BLOCK_SIZE 518
+#define VAR_PAD_QUERIES 519
+#define VAR_PAD_QUERIES_BLOCK_SIZE 520
+#define VAR_IPSECMOD_ENABLED 521
+#define VAR_IPSECMOD_HOOK 522
+#define VAR_IPSECMOD_IGNORE_BOGUS 523
+#define VAR_IPSECMOD_MAX_TTL 524
+#define VAR_IPSECMOD_WHITELIST 525
+#define VAR_IPSECMOD_STRICT 526
+#define VAR_CACHEDB 527
+#define VAR_CACHEDB_BACKEND 528
+#define VAR_CACHEDB_SECRETSEED 529
+#define VAR_CACHEDB_REDISHOST 530
+#define VAR_CACHEDB_REDISPORT 531
+#define VAR_CACHEDB_REDISTIMEOUT 532
+#define VAR_CACHEDB_REDISEXPIRERECORDS 533
+#define VAR_UDP_UPSTREAM_WITHOUT_DOWNSTREAM 534
+#define VAR_FOR_UPSTREAM 535
+#define VAR_AUTH_ZONE 536
+#define VAR_ZONEFILE 537
+#define VAR_MASTER 538
+#define VAR_URL 539
+#define VAR_FOR_DOWNSTREAM 540
+#define VAR_FALLBACK_ENABLED 541
+#define VAR_TLS_ADDITIONAL_PORT 542
+#define VAR_LOW_RTT 543
+#define VAR_LOW_RTT_PERMIL 544
+#define VAR_FAST_SERVER_PERMIL 545
+#define VAR_FAST_SERVER_NUM 546
+#define VAR_ALLOW_NOTIFY 547
+#define VAR_TLS_WIN_CERT 548
+#define VAR_TCP_CONNECTION_LIMIT 549
+#define VAR_FORWARD_NO_CACHE 550
+#define VAR_STUB_NO_CACHE 551
+#define VAR_LOG_SERVFAIL 552
+#define VAR_DENY_ANY 553
+#define VAR_UNKNOWN_SERVER_TIME_LIMIT 554
+#define VAR_LOG_TAG_QUERYREPLY 555
+#define VAR_STREAM_WAIT_SIZE 556
+#define VAR_TLS_CIPHERS 557
+#define VAR_TLS_CIPHERSUITES 558
+#define VAR_TLS_USE_SNI 559
+#define VAR_IPSET 560
+#define VAR_IPSET_NAME_V4 561
+#define VAR_IPSET_NAME_V6 562
+#define VAR_TLS_SESSION_TICKET_KEYS 563
+#define VAR_RPZ 564
+#define VAR_TAGS 565
+#define VAR_RPZ_ACTION_OVERRIDE 566
+#define VAR_RPZ_CNAME_OVERRIDE 567
+#define VAR_RPZ_LOG 568
+#define VAR_RPZ_LOG_NAME 569
+#define VAR_DYNLIB 570
+#define VAR_DYNLIB_FILE 571
+#define VAR_EDNS_CLIENT_STRING 572
+#define VAR_EDNS_CLIENT_STRING_OPCODE 573
+#define VAR_NSID 574
+#define VAR_ZONEMD_PERMISSIVE_MODE 575
+#define VAR_ZONEMD_CHECK 576
+#define VAR_ZONEMD_REJECT_ABSENCE 577
+#define VAR_RPZ_SIGNAL_NXDOMAIN_RA 578
+#define VAR_INTERFACE_AUTOMATIC_PORTS 579
+#define VAR_EDE 580
 #ifndef YYSTYPE_DEFINED
 #define YYSTYPE_DEFINED
 typedef union {

diff --git a/sbin/unwind/libunbound/util/configparser.y b/sbin/unwind/libunbound/util/configparser.y
index d4f965f..c003f33 100644 (file)
--- a/sbin/unwind/libunbound/util/configparser.y
+++ b/sbin/unwind/libunbound/util/configparser.y
@@ -155,7 +155,8 @@ extern struct config_parser_state* cfg_parser;
 %token VAR_ACCESS_CONTROL_TAG_DATA VAR_VIEW VAR_ACCESS_CONTROL_VIEW
 %token VAR_VIEW_FIRST VAR_SERVE_EXPIRED VAR_SERVE_EXPIRED_TTL
 %token VAR_SERVE_EXPIRED_TTL_RESET VAR_SERVE_EXPIRED_REPLY_TTL
-%token VAR_SERVE_EXPIRED_CLIENT_TIMEOUT VAR_SERVE_ORIGINAL_TTL VAR_FAKE_DSA
+%token VAR_SERVE_EXPIRED_CLIENT_TIMEOUT VAR_EDE_SERVE_EXPIRED
+%token VAR_SERVE_ORIGINAL_TTL VAR_FAKE_DSA
 %token VAR_FAKE_SHA1 VAR_LOG_IDENTITY VAR_HIDE_TRUSTANCHOR
 %token VAR_HIDE_HTTP_USER_AGENT VAR_HTTP_USER_AGENT
 %token VAR_TRUST_ANCHOR_SIGNALING VAR_AGGRESSIVE_NSEC VAR_USE_SYSTEMD
@@ -188,7 +189,7 @@ extern struct config_parser_state* cfg_parser;
 %token VAR_DYNLIB VAR_DYNLIB_FILE VAR_EDNS_CLIENT_STRING
 %token VAR_EDNS_CLIENT_STRING_OPCODE VAR_NSID
 %token VAR_ZONEMD_PERMISSIVE_MODE VAR_ZONEMD_CHECK VAR_ZONEMD_REJECT_ABSENCE
-%token VAR_RPZ_SIGNAL_NXDOMAIN_RA
+%token VAR_RPZ_SIGNAL_NXDOMAIN_RA VAR_INTERFACE_AUTOMATIC_PORTS VAR_EDE
 
 %%
 toplevelvars: /* empty */ | toplevelvars toplevelvar ;
@@ -292,7 +293,7 @@ content_server: server_num_threads | server_verbosity | server_port |
        server_serve_expired |
        server_serve_expired_ttl | server_serve_expired_ttl_reset |
        server_serve_expired_reply_ttl | server_serve_expired_client_timeout |
-       server_serve_original_ttl | server_fake_dsa | 
+       server_ede_serve_expired | server_serve_original_ttl | server_fake_dsa | 
        server_log_identity | server_use_systemd |
        server_response_ip_tag | server_response_ip | server_response_ip_data |
        server_shm_enable | server_shm_key | server_fake_sha1 |
@@ -311,7 +312,8 @@ content_server: server_num_threads | server_verbosity | server_port |
        server_tls_use_sni | server_edns_client_string |
        server_edns_client_string_opcode | server_nsid |
        server_zonemd_permissive_mode | server_max_reuse_tcp_queries |
-       server_tcp_reuse_timeout | server_tcp_auth_query_timeout
+       server_tcp_reuse_timeout | server_tcp_auth_query_timeout |
+       server_interface_automatic_ports | server_ede
 
        ;
 stubstart: VAR_STUB_ZONE
@@ -800,6 +802,13 @@ server_interface_automatic: VAR_INTERFACE_AUTOMATIC STRING_ARG
                free($2);
        }
        ;
+server_interface_automatic_ports: VAR_INTERFACE_AUTOMATIC_PORTS STRING_ARG
+       {
+               OUTYY(("P(server_interface_automatic_ports:%s)\n", $2));
+               free(cfg_parser->cfg->if_automatic_ports);
+               cfg_parser->cfg->if_automatic_ports = $2;
+       }
+       ;
 server_do_ip4: VAR_DO_IP4 STRING_ARG
        {
                OUTYY(("P(server_do_ip4:%s)\n", $2));
@@ -2026,6 +2035,15 @@ server_serve_expired_client_timeout: VAR_SERVE_EXPIRED_CLIENT_TIMEOUT STRING_ARG
                free($2);
        }
        ;
+server_ede_serve_expired: VAR_EDE_SERVE_EXPIRED STRING_ARG
+       {
+               OUTYY(("P(server_ede_serve_expired:%s)\n", $2));
+               if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
+                       yyerror("expected yes or no.");
+               else cfg_parser->cfg->ede_serve_expired = (strcmp($2, "yes")==0);
+               free($2);
+       }
+       ;
 server_serve_original_ttl: VAR_SERVE_ORIGINAL_TTL STRING_ARG
        {
                OUTYY(("P(server_serve_original_ttl:%s)\n", $2));
@@ -2167,7 +2185,7 @@ server_local_zone: VAR_LOCAL_ZONE STRING_ARG STRING_ARG
                   && strcmp($3, "noview")!=0
                   && strcmp($3, "inform")!=0 && strcmp($3, "inform_deny")!=0
                   && strcmp($3, "inform_redirect") != 0
-                        && strcmp($3, "ipset") != 0) {
+                  && strcmp($3, "ipset") != 0) {
                        yyerror("local-zone type: expected static, deny, "
                                "refuse, redirect, transparent, "
                                "typetransparent, inform, inform_deny, "
@@ -2184,6 +2202,16 @@ server_local_zone: VAR_LOCAL_ZONE STRING_ARG STRING_ARG
                        free($3);
 #ifdef USE_IPSET
                } else if(strcmp($3, "ipset")==0) {
+                       size_t len = strlen($2);
+                       /* Make sure to add the trailing dot.
+                        * These are str compared to domain names. */
+                       if($2[len-1] != '.') {
+                               if(!($2 = realloc($2, len+2))) {
+                                       fatal_exit("out of memory adding local-zone");
+                               }
+                               $2[len] = '.';
+                               $2[len+1] = 0;
+                       }
                        if(!cfg_strlist_insert(&cfg_parser->cfg->
                                local_zones_ipset, $2))
                                fatal_exit("out of memory adding local-zone");
@@ -2713,7 +2741,15 @@ server_edns_client_string_opcode: VAR_EDNS_CLIENT_STRING_OPCODE STRING_ARG
                        yyerror("option code must be in interval [0, 65535]");
                else cfg_parser->cfg->edns_client_string_opcode = atoi($2);
                free($2);
-
+       }
+       ;
+server_ede: VAR_EDE STRING_ARG
+       {
+               OUTYY(("P(server_ede:%s)\n", $2));
+               if(strcmp($2, "yes") != 0 && strcmp($2, "no") != 0)
+                       yyerror("expected yes or no.");
+               else cfg_parser->cfg->ede = (strcmp($2, "yes")==0);
+               free($2);
        }
        ;
 stub_name: VAR_NAME STRING_ARG
@@ -2982,6 +3018,16 @@ view_local_zone: VAR_LOCAL_ZONE STRING_ARG STRING_ARG
                        free($3);
 #ifdef USE_IPSET
                } else if(strcmp($3, "ipset")==0) {
+                       size_t len = strlen($2);
+                       /* Make sure to add the trailing dot.
+                        * These are str compared to domain names. */
+                       if($2[len-1] != '.') {
+                               if(!($2 = realloc($2, len+2))) {
+                                       fatal_exit("out of memory adding local-zone");
+                               }
+                               $2[len] = '.';
+                               $2[len+1] = 0;
+                       }
                        if(!cfg_strlist_insert(&cfg_parser->cfg->views->
                                local_zones_ipset, $2))
                                fatal_exit("out of memory adding local-zone");

diff --git a/sbin/unwind/libunbound/util/data/msgparse.c b/sbin/unwind/libunbound/util/data/msgparse.c
index a600a8c..5bb69d6 100644 (file)
--- a/sbin/unwind/libunbound/util/data/msgparse.c
+++ b/sbin/unwind/libunbound/util/data/msgparse.c
@@ -1157,7 +1157,7 @@ skip_pkt_rr(sldns_buffer* pkt)
 }
 
 /** skip RRs from packet */
-static int
+int
 skip_pkt_rrs(sldns_buffer* pkt, int num)
 {
        int i;
@@ -1235,3 +1235,4 @@ log_edns_opt_list(enum verbosity_value level, const char* info_str,
                }
        }
 }
+

diff --git a/sbin/unwind/libunbound/util/data/msgparse.h b/sbin/unwind/libunbound/util/data/msgparse.h
index 4c0559a..0c458e6 100644 (file)
--- a/sbin/unwind/libunbound/util/data/msgparse.h
+++ b/sbin/unwind/libunbound/util/data/msgparse.h
@@ -293,6 +293,15 @@ int parse_packet(struct sldns_buffer* pkt, struct msg_parse* msg,
 int parse_extract_edns_from_response_msg(struct msg_parse* msg,
        struct edns_data* edns, struct regional* region);
 
+/**
+ * Skip RRs from packet
+ * @param pkt: the packet. position at start must be right after the query
+ *     section. At end, right after EDNS data or no movement if failed.
+ * @param num: Limit of the number of records we want to parse.
+ * @return: 0 on success, 1 on failure.
+ */
+int skip_pkt_rrs(struct sldns_buffer* pkt, int num);
+
 /**
  * If EDNS data follows a query section, extract it and initialize edns struct.
  * @param pkt: the packet. position at start must be right after the query

diff --git a/sbin/unwind/libunbound/util/data/msgreply.c b/sbin/unwind/libunbound/util/data/msgreply.c
index ec46e47..e3ee607 100644 (file)
--- a/sbin/unwind/libunbound/util/data/msgreply.c
+++ b/sbin/unwind/libunbound/util/data/msgreply.c
@@ -117,6 +117,7 @@ construct_reply_info_base(struct regional* region, uint16_t flags, size_t qd,
        rep->ar_numrrsets = ar;
        rep->rrset_count = total;
        rep->security = sec;
+       rep->reason_bogus = LDNS_EDE_NONE;
        rep->authoritative = 0;
        /* array starts after the refs */
        if(region)
@@ -989,6 +990,36 @@ parse_reply_in_temp_region(sldns_buffer* pkt, struct regional* region,
        return rep;
 }
 
+int edns_opt_list_append_ede(struct edns_option** list, struct regional* region,
+       sldns_ede_code code, const char *txt)
+{
+       struct edns_option** prevp;
+       struct edns_option* opt;
+       size_t txt_len = txt ? strlen(txt) : 0;
+
+       /* allocate new element */
+       opt = (struct edns_option*)regional_alloc(region, sizeof(*opt));
+       if(!opt)
+               return 0;
+       opt->next = NULL;
+       opt->opt_code = LDNS_EDNS_EDE;
+       opt->opt_len = txt_len + sizeof(uint16_t);
+       opt->opt_data = regional_alloc(region, txt_len + sizeof(uint16_t));
+       if(!opt->opt_data)
+               return 0;
+       sldns_write_uint16(opt->opt_data, (uint16_t)code);
+       if (txt_len)
+               memmove(opt->opt_data + 2, txt, txt_len);
+
+       /* append at end of list */
+       prevp = list;
+       while(*prevp != NULL)
+               prevp = &((*prevp)->next);
+       verbose(VERB_ALGO, "attached EDE code: %d with message: %s", code, txt);
+       *prevp = opt;
+       return 1;
+}
+
 int edns_opt_list_append(struct edns_option** list, uint16_t code, size_t len,
        uint8_t* data, struct regional* region)
 {

diff --git a/sbin/unwind/libunbound/util/data/msgreply.h b/sbin/unwind/libunbound/util/data/msgreply.h
index 81c763f..9538adc 100644 (file)
--- a/sbin/unwind/libunbound/util/data/msgreply.h
+++ b/sbin/unwind/libunbound/util/data/msgreply.h
@@ -43,6 +43,7 @@
 #define UTIL_DATA_MSGREPLY_H
 #include "util/storage/lruhash.h"
 #include "util/data/packed_rrset.h"
+#include "sldns/rrdef.h"
 struct sldns_buffer;
 struct comm_reply;
 struct alloc_cache;
@@ -167,6 +168,11 @@ struct reply_info {
         */
        enum sec_status security;
 
+       /**
+        * EDE (rfc8914) code with reason for DNSSEC bogus status.
+        */
+       sldns_ede_code reason_bogus;
+
        /**
         * Number of RRsets in each section.
         * The answer section. Add up the RRs in every RRset to calculate
@@ -528,7 +534,38 @@ void log_query_info(enum verbosity_value v, const char* str,
  * @return false on failure.
  */
 int edns_opt_list_append(struct edns_option** list, uint16_t code, size_t len,
-       uint8_t* data, struct regional* region);
+        uint8_t* data, struct regional* region);
+
+/**
+ * Append edns EDE option to edns options list
+ * @param LIST: the edns option list to append the edns option to.
+ * @param REGION: region to allocate the new edns option.
+ * @param CODE: the EDE code.
+ * @param TXT: Additional text for the option
+ */
+#define EDNS_OPT_LIST_APPEND_EDE(LIST, REGION, CODE, TXT)              \
+       do {                                                            \
+               struct {                                                \
+                       uint16_t code;                                  \
+                       char text[sizeof(TXT) - 1];                     \
+               } ede = { htons(CODE), TXT };                           \
+                verbose(VERB_ALGO, "attached EDE code: %d with"                \
+                        " message: %s", CODE, TXT);                    \
+               edns_opt_list_append((LIST), LDNS_EDNS_EDE,             \
+                       sizeof(uint16_t) + sizeof(TXT) - 1,             \
+                       (void *)&ede, (REGION));                        \
+       } while(0)
+
+/**
+ * Append edns EDE option to edns options list
+ * @param list: the edns option list to append the edns option to.
+ * @param region: region to allocate the new edns option.
+ * @param code: the EDE code.
+ * @param txt: Additional text for the option
+ * @return false on failure.
+ */
+int edns_opt_list_append_ede(struct edns_option** list, struct regional* region,
+       sldns_ede_code code, const char *txt);
 
 /**
  * Remove any option found on the edns option list that matches the code.

diff --git a/sbin/unwind/libunbound/util/module.c b/sbin/unwind/libunbound/util/module.c
index f165831..6698f94 100644 (file)
--- a/sbin/unwind/libunbound/util/module.c
+++ b/sbin/unwind/libunbound/util/module.c
@@ -40,6 +40,10 @@
 #include "config.h"
 #include "util/module.h"
 #include "sldns/wire2str.h"
+#include "util/config_file.h"
+#include "util/regional.h"
+#include "util/data/dname.h"
+#include "util/net_help.h"
 
 const char* 
 strextstate(enum module_ext_state s)
@@ -71,6 +75,144 @@ strmodulevent(enum module_ev e)
        return "bad_event_value";
 }
 
+void errinf(struct module_qstate* qstate, const char* str)
+{
+       errinf_ede(qstate, str, LDNS_EDE_NONE);
+}
+
+void errinf_ede(struct module_qstate* qstate,
+       const char* str, sldns_ede_code reason_bogus)
+{
+       struct errinf_strlist* p;
+       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !str)
+               return;
+       p = (struct errinf_strlist*)regional_alloc(qstate->region, sizeof(*p));
+       if(!p) {
+               log_err("malloc failure in validator-error-info string");
+               return;
+       }
+       p->next = NULL;
+       p->str = regional_strdup(qstate->region, str);
+       p->reason_bogus = reason_bogus;
+       if(!p->str) {
+               log_err("malloc failure in validator-error-info string");
+               return;
+       }
+       /* add at end */
+       if(qstate->errinf) {
+               struct errinf_strlist* q = qstate->errinf;
+               while(q->next)
+                       q = q->next;
+               q->next = p;
+       } else  qstate->errinf = p;
+}
+
+void errinf_origin(struct module_qstate* qstate, struct sock_list *origin)
+{
+       struct sock_list* p;
+       if(qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail)
+               return;
+       for(p=origin; p; p=p->next) {
+               char buf[256];
+               if(p == origin)
+                       snprintf(buf, sizeof(buf), "from ");
+               else    snprintf(buf, sizeof(buf), "and ");
+               if(p->len == 0)
+                       snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), 
+                               "cache");
+               else 
+                       addr_to_str(&p->addr, p->len, buf+strlen(buf),
+                               sizeof(buf)-strlen(buf));
+               errinf(qstate, buf);
+       }
+}
+
+char* errinf_to_str_bogus(struct module_qstate* qstate)
+{
+       char buf[20480];
+       char* p = buf;
+       size_t left = sizeof(buf);
+       struct errinf_strlist* s;
+       char dname[LDNS_MAX_DOMAINLEN+1];
+       char t[16], c[16];
+       sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t));
+       sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c));
+       dname_str(qstate->qinfo.qname, dname);
+       snprintf(p, left, "validation failure <%s %s %s>:", dname, t, c);
+       left -= strlen(p); p += strlen(p);
+       if(!qstate->errinf)
+               snprintf(p, left, " misc failure");
+       else for(s=qstate->errinf; s; s=s->next) {
+               snprintf(p, left, " %s", s->str);
+               left -= strlen(p); p += strlen(p);
+       }
+       p = strdup(buf);
+       if(!p)
+               log_err("malloc failure in errinf_to_str");
+       return p;
+}
+
+sldns_ede_code errinf_to_reason_bogus(struct module_qstate* qstate)
+{
+       struct errinf_strlist* s;
+       for(s=qstate->errinf; s; s=s->next) {
+               if (s->reason_bogus != LDNS_EDE_NONE) {
+                       return s->reason_bogus;
+               }
+       }
+       return LDNS_EDE_NONE;
+}
+
+char* errinf_to_str_servfail(struct module_qstate* qstate)
+{
+       char buf[20480];
+       char* p = buf;
+       size_t left = sizeof(buf);
+       struct errinf_strlist* s;
+       char dname[LDNS_MAX_DOMAINLEN+1];
+       char t[16], c[16];
+       sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t));
+       sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c));
+       dname_str(qstate->qinfo.qname, dname);
+       snprintf(p, left, "SERVFAIL <%s %s %s>:", dname, t, c);
+       left -= strlen(p); p += strlen(p);
+       if(!qstate->errinf)
+               snprintf(p, left, " misc failure");
+       else for(s=qstate->errinf; s; s=s->next) {
+               snprintf(p, left, " %s", s->str);
+               left -= strlen(p); p += strlen(p);
+       }
+       p = strdup(buf);
+       if(!p)
+               log_err("malloc failure in errinf_to_str");
+       return p;
+}
+
+void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr)
+{
+       char buf[1024];
+       char dname[LDNS_MAX_DOMAINLEN+1];
+       char t[16], c[16];
+       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !rr)
+               return;
+       sldns_wire2str_type_buf(ntohs(rr->rk.type), t, sizeof(t));
+       sldns_wire2str_class_buf(ntohs(rr->rk.rrset_class), c, sizeof(c));
+       dname_str(rr->rk.dname, dname);
+       snprintf(buf, sizeof(buf), "for <%s %s %s>", dname, t, c);
+       errinf(qstate, buf);
+}
+
+void errinf_dname(struct module_qstate* qstate, const char* str, uint8_t* dname)
+{
+       char b[1024];
+       char buf[LDNS_MAX_DOMAINLEN+1];
+       if((qstate->env->cfg->val_log_level < 2 && !qstate->env->cfg->log_servfail) || !str || !dname)
+               return;
+       dname_str(dname, buf);
+       snprintf(b, sizeof(b), "%s %s", str, buf);
+       errinf(qstate, b);
+}
+
 int
 edns_known_options_init(struct module_env* env)
 {

diff --git a/sbin/unwind/libunbound/util/module.h b/sbin/unwind/libunbound/util/module.h
index 7a54800..33068a7 100644 (file)
--- a/sbin/unwind/libunbound/util/module.h
+++ b/sbin/unwind/libunbound/util/module.h
@@ -187,6 +187,15 @@ struct respip_addr_info;
 /** Maximum number of known edns options */
 #define MAX_KNOWN_EDNS_OPTS 256
 
+struct errinf_strlist {
+    /** next item in list */
+    struct errinf_strlist* next;
+    /** config option string */
+    char* str;
+    /** EDE code companion to the error str */
+    int reason_bogus;
+};
+
 enum inplace_cb_list_type {
        /* Inplace callbacks for when a resolved reply is ready to be sent to the
         * front.*/
@@ -624,8 +633,7 @@ struct module_qstate {
        /** region for this query. Cleared when query process finishes. */
        struct regional* region;
        /** failure reason information if val-log-level is high */
-       struct config_strlist* errinf;
-
+       struct errinf_strlist* errinf;
        /** which module is executing */
        int curmod;
        /** module states */
@@ -667,6 +675,8 @@ struct module_qstate {
        /** Extended result of response-ip action processing, mainly
         *  for logging purposes. */
        struct respip_action_info* respip_action_info;
+       /** if the query is rpz passthru, no further rpz processing for it */
+       int rpz_passthru;
 
        /** whether the reply should be dropped */
        int is_drop;
@@ -759,6 +769,65 @@ const char* strextstate(enum module_ext_state s);
  */
 const char* strmodulevent(enum module_ev e);
 
+/**
+ * Append text to the error info for validation.
+ * @param qstate: query state.
+ * @param str: copied into query region and appended.
+ * Failures to allocate are logged.
+ */
+void errinf(struct module_qstate* qstate, const char* str);
+void errinf_ede(struct module_qstate* qstate, const char* str,
+                sldns_ede_code reason_bogus);
+
+/**
+ * Append text to error info:  from 1.2.3.4
+ * @param qstate: query state.
+ * @param origin: sock list with origin of trouble. 
+ *  Every element added.
+ *  If NULL: nothing is added.
+ *  if 0len element: 'from cache' is added.
+ */
+void errinf_origin(struct module_qstate* qstate, struct sock_list *origin);
+
+/**
+ * Append text to error info:  for RRset name type class
+ * @param qstate: query state.
+ * @param rr: rrset_key.
+ */
+void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr);
+
+/**
+ * Append text to error info:  str dname
+ * @param qstate: query state.
+ * @param str: explanation string
+ * @param dname: the dname.
+ */
+void errinf_dname(struct module_qstate* qstate, const char* str, 
+    uint8_t* dname);
+
+/**
+ * Create error info in string.  For validation failures.
+ * @param qstate: query state.
+ * @return string or NULL on malloc failure (already logged).
+ *    This string is malloced and has to be freed by caller.
+ */
+char* errinf_to_str_bogus(struct module_qstate* qstate);
+/**
+ * Check the sldns_ede_code of the qstate.
+ * @param qstate: query state.
+ * @return LDNS_EDE_DNSSEC_BOGUS by default, or the first explicitly set
+ *   sldns_ede_code.
+ */
+sldns_ede_code errinf_to_reason_bogus(struct module_qstate* qstate);
+
+/**
+ * Create error info in string.  For other servfails.
+ * @param qstate: query state.
+ * @return string or NULL on malloc failure (already logged).
+ *    This string is malloced and has to be freed by caller.
+ */
+char* errinf_to_str_servfail(struct module_qstate* qstate);
+
 /**
  * Initialize the edns known options by allocating the required space.
  * @param env: the module environment.

diff --git a/sbin/unwind/libunbound/util/net_help.c b/sbin/unwind/libunbound/util/net_help.c
index 8bef568..114920e 100644 (file)
--- a/sbin/unwind/libunbound/util/net_help.c
+++ b/sbin/unwind/libunbound/util/net_help.c
@@ -1271,7 +1271,13 @@ void* connect_sslctx_create(char* key, char* pem, char* verifypem, int wincert)
                        }
                }
 #else
-               (void)wincert;
+               if(wincert) {
+                       if(!SSL_CTX_set_default_verify_paths(ctx)) {
+                               log_crypto_err("error in default_verify_paths");
+                               SSL_CTX_free(ctx);
+                               return NULL;
+                       }
+               }
 #endif
                SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
        }

diff --git a/sbin/unwind/libunbound/util/netevent.c b/sbin/unwind/libunbound/util/netevent.c
index b9b7230..841e097 100644 (file)
--- a/sbin/unwind/libunbound/util/netevent.c
+++ b/sbin/unwind/libunbound/util/netevent.c
@@ -1209,23 +1209,22 @@ squelch_err_ssl_handshake(unsigned long err)
 {
        if(verbosity >= VERB_QUERY)
                return 0; /* only squelch on low verbosity */
-       /* this is very specific, we could filter on ERR_GET_REASON()
-        * (the third element in ERR_PACK) */
-       if(err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_HTTPS_PROXY_REQUEST) ||
-               err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_HTTP_REQUEST) ||
-               err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_GET_RECORD, SSL_R_WRONG_VERSION_NUMBER) ||
-               err == ERR_PACK(ERR_LIB_SSL, SSL_F_SSL3_READ_BYTES, SSL_R_SSLV3_ALERT_BAD_CERTIFICATE)
+       if(ERR_GET_LIB(err) == ERR_LIB_SSL &&
+               (ERR_GET_REASON(err) == SSL_R_HTTPS_PROXY_REQUEST ||
+                ERR_GET_REASON(err) == SSL_R_HTTP_REQUEST ||
+                ERR_GET_REASON(err) == SSL_R_WRONG_VERSION_NUMBER ||
+                ERR_GET_REASON(err) == SSL_R_SSLV3_ALERT_BAD_CERTIFICATE
 #ifdef SSL_F_TLS_POST_PROCESS_CLIENT_HELLO
-               || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_POST_PROCESS_CLIENT_HELLO, SSL_R_NO_SHARED_CIPHER)
+                || ERR_GET_REASON(err) == SSL_R_NO_SHARED_CIPHER
 #endif
 #ifdef SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO
-               || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_UNKNOWN_PROTOCOL)
-               || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_UNSUPPORTED_PROTOCOL)
+                || ERR_GET_REASON(err) == SSL_R_UNKNOWN_PROTOCOL
+                || ERR_GET_REASON(err) == SSL_R_UNSUPPORTED_PROTOCOL
 #  ifdef SSL_R_VERSION_TOO_LOW
-               || err == ERR_PACK(ERR_LIB_SSL, SSL_F_TLS_EARLY_POST_PROCESS_CLIENT_HELLO, SSL_R_VERSION_TOO_LOW)
+                || ERR_GET_REASON(err) == SSL_R_VERSION_TOO_LOW
 #  endif
 #endif
-               )
+               ))
                return 1;
        return 0;
 }
@@ -1278,6 +1277,12 @@ ssl_handshake(struct comm_point* c)
                        if(errno == ECONNRESET && verbosity < 2)
                                return 0; /* silence reset by peer */
 #endif
+                       if(!tcp_connect_errno_needs_log(
+                               (struct sockaddr*)&c->repinfo.addr,
+                               c->repinfo.addrlen))
+                               return 0; /* silence connect failures that
+                               show up because after connect this is the
+                               first system call that accesses the socket */
                        if(errno != 0)
                                log_err("SSL_handshake syscall: %s",
                                        strerror(errno));
@@ -2480,7 +2485,7 @@ http_nonchunk_segment(struct comm_point* c)
        remainbufferlen = sldns_buffer_capacity(c->buffer) -
                sldns_buffer_limit(c->buffer);
        if(remainbufferlen+got_now >= c->tcp_byte_count ||
-               remainbufferlen >= (c->ssl?16384:2048)) {
+               remainbufferlen >= (size_t)(c->ssl?16384:2048)) {
                size_t total = sldns_buffer_limit(c->buffer);
                sldns_buffer_clear(c->buffer);
                sldns_buffer_set_position(c->buffer, total);

diff --git a/sbin/unwind/libunbound/validator/autotrust.c b/sbin/unwind/libunbound/validator/autotrust.c
index 55e82c1..3cdf9ce 100644 (file)
--- a/sbin/unwind/libunbound/validator/autotrust.c
+++ b/sbin/unwind/libunbound/validator/autotrust.c
@@ -1203,13 +1203,8 @@ void autr_write_file(struct module_env* env, struct trust_anchor* tp)
 #else
        llvalue = (unsigned long long)tp;
 #endif
-#ifndef USE_WINSOCK
-       snprintf(tempf, sizeof(tempf), "%s.%d-%d-%llx", fname, (int)getpid(),
+       snprintf(tempf, sizeof(tempf), "%s.%d-%d-" ARG_LL "x", fname, (int)getpid(),
                env->worker?*(int*)env->worker:0, llvalue);
-#else
-       snprintf(tempf, sizeof(tempf), "%s.%d-%d-%I64x", fname, (int)getpid(),
-               env->worker?*(int*)env->worker:0, llvalue);
-#endif
 #endif /* S_SPLINT_S */
        verbose(VERB_ALGO, "autotrust: write to disk: %s", tempf);
        out = fopen(tempf, "w");
@@ -1268,7 +1263,7 @@ verify_dnskey(struct module_env* env, struct val_env* ve,
        int downprot = env->cfg->harden_algo_downgrade;
        enum sec_status sec = val_verify_DNSKEY_with_TA(env, ve, rrset,
                tp->ds_rrset, tp->dnskey_rrset, downprot?sigalg:NULL, &reason,
-               qstate);
+               NULL, qstate);
        /* sigalg is ignored, it returns algorithms signalled to exist, but
         * in 5011 there are no other rrsets to check.  if downprot is
         * enabled, then it checks that the DNSKEY is signed with all
@@ -1317,7 +1312,7 @@ rr_is_selfsigned_revoked(struct module_env* env, struct val_env* ve,
        /* no algorithm downgrade protection necessary, if it is selfsigned
         * revoked it can be removed. */
        sec = dnskey_verify_rrset(env, ve, dnskey_rrset, dnskey_rrset, i, 
-               &reason, LDNS_SECTION_ANSWER, qstate);
+               &reason, NULL, LDNS_SECTION_ANSWER, qstate);
        return (sec == sec_status_secure);
 }
 
@@ -2397,7 +2392,7 @@ probe_anchor(struct module_env* env, struct trust_anchor* tp)
                qinfo.qclass);
 
        if(!mesh_new_callback(env->mesh, &qinfo, qflags, &edns, buf, 0, 
-               &probe_answer_cb, env)) {
+               &probe_answer_cb, env, 0)) {
                log_err("out of memory making 5011 probe");
        }
 }

diff --git a/sbin/unwind/libunbound/validator/val_kcache.c b/sbin/unwind/libunbound/validator/val_kcache.c
index e0b88b6..c190085 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_kcache.c
+++ b/sbin/unwind/libunbound/validator/val_kcache.c
@@ -90,6 +90,7 @@ key_cache_insert(struct key_cache* kcache, struct key_entry_key* kkey,
                qstate->env->cfg->val_log_level >= 2) {
                /* on malloc failure there is simply no reason string */
                key_entry_set_reason(k, errinf_to_str_bogus(qstate));
+               key_entry_set_reason_bogus(k, errinf_to_reason_bogus(qstate));
        }
        key_entry_hash(k);
        slabhash_insert(kcache->slab, k->entry.hash, &k->entry, 

diff --git a/sbin/unwind/libunbound/validator/val_kentry.c b/sbin/unwind/libunbound/validator/val_kentry.c
index 93fe214..a47feba 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_kentry.c
+++ b/sbin/unwind/libunbound/validator/val_kentry.c
@@ -244,6 +244,15 @@ key_entry_set_reason(struct key_entry_key* kkey, char* reason)
        d->reason = reason;
 }
 
+void
+key_entry_set_reason_bogus(struct key_entry_key* kkey, sldns_ede_code ede)
+{
+       struct key_entry_data* d = (struct key_entry_data*)kkey->entry.data;
+       if (ede != LDNS_EDE_NONE) { /* reason_bogus init is LDNS_EDE_NONE already */
+               d->reason_bogus = ede;
+       }
+}
+
 char*
 key_entry_get_reason(struct key_entry_key* kkey)
 {
@@ -251,6 +260,14 @@ key_entry_get_reason(struct key_entry_key* kkey)
        return d->reason;
 }
 
+sldns_ede_code
+key_entry_get_reason_bogus(struct key_entry_key* kkey)
+{
+       struct key_entry_data* d = (struct key_entry_data*)kkey->entry.data;
+       return d->reason_bogus;
+
+}
+
 /** setup key entry in region */
 static int
 key_entry_setup(struct regional* region,
@@ -286,6 +303,7 @@ key_entry_create_null(struct regional* region,
        d->ttl = now + ttl;
        d->isbad = 0;
        d->reason = NULL;
+       d->reason_bogus = LDNS_EDE_NONE;
        d->rrset_type = LDNS_RR_TYPE_DNSKEY;
        d->rrset_data = NULL;
        d->algo = NULL;
@@ -306,6 +324,7 @@ key_entry_create_rrset(struct regional* region,
        d->ttl = rd->ttl + now;
        d->isbad = 0;
        d->reason = NULL;
+       d->reason_bogus = LDNS_EDE_NONE;
        d->rrset_type = ntohs(rrset->rk.type);
        d->rrset_data = (struct packed_rrset_data*)regional_alloc_init(region,
                rd, packed_rrset_sizeof(rd));
@@ -332,6 +351,7 @@ key_entry_create_bad(struct regional* region,
        d->ttl = now + ttl;
        d->isbad = 1;
        d->reason = NULL;
+       d->reason_bogus = LDNS_EDE_NONE;
        d->rrset_type = LDNS_RR_TYPE_DNSKEY;
        d->rrset_data = NULL;
        d->algo = NULL;

diff --git a/sbin/unwind/libunbound/validator/val_kentry.h b/sbin/unwind/libunbound/validator/val_kentry.h
index ade6557..ded45be 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_kentry.h
+++ b/sbin/unwind/libunbound/validator/val_kentry.h
@@ -45,6 +45,7 @@ struct packed_rrset_data;
 struct regional;
 struct ub_packed_rrset_key;
 #include "util/storage/lruhash.h"
+#include "sldns/rrdef.h"
 
 /**
  * A key entry for the validator.
@@ -80,6 +81,8 @@ struct key_entry_data {
        struct packed_rrset_data* rrset_data;
        /** not NULL sometimes to give reason why bogus */
        char* reason;
+        /** not NULL to give reason why bogus */
+        sldns_ede_code reason_bogus;
        /** list of algorithms signalled, ends with 0, or NULL */
        uint8_t* algo;
        /** DNS RR type of the rrset data (host order) */
@@ -150,6 +153,15 @@ int key_entry_isbad(struct key_entry_key* kkey);
  */
 void key_entry_set_reason(struct key_entry_key* kkey, char* reason);
 
+/**
+ * Set the EDE (RFC8914) code why the key is bad, if it
+ * exists (so not LDNS_EDE_NONE).
+ * @param kkey: bad key.
+ * @param ede: EDE code to attach to this key.
+ */
+void key_entry_set_reason_bogus(struct key_entry_key* kkey, sldns_ede_code ede);
+
+
 /**
  * Get reason why a key is bad.
  * @param kkey: bad key
@@ -158,6 +170,13 @@ void key_entry_set_reason(struct key_entry_key* kkey, char* reason);
  */
 char* key_entry_get_reason(struct key_entry_key* kkey);
 
+/**
+ * Get the EDE (RFC8914) code why a key is bad. Can return LDNS_EDE_NONE.
+ * @param kkey: bad key
+ * @return the ede code.
+ */
+sldns_ede_code key_entry_get_reason_bogus(struct key_entry_key* kkey);
+
 /**
  * Create a null entry, in the given region.
  * @param region: where to allocate

diff --git a/sbin/unwind/libunbound/validator/val_nsec.c b/sbin/unwind/libunbound/validator/val_nsec.c
index a4e5b31..876bfab 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_nsec.c
+++ b/sbin/unwind/libunbound/validator/val_nsec.c
@@ -187,7 +187,7 @@ nsec_verify_rrset(struct module_env* env, struct val_env* ve,
        if(d->security == sec_status_secure)
                return 1;
        d->security = val_verify_rrset_entry(env, ve, nsec, kkey, reason,
-               LDNS_SECTION_AUTHORITY, qstate);
+               NULL, LDNS_SECTION_AUTHORITY, qstate);
        if(d->security == sec_status_secure) {
                rrset_update_sec_status(env->rrset_cache, nsec, *env->now);
                return 1;

diff --git a/sbin/unwind/libunbound/validator/val_nsec3.c b/sbin/unwind/libunbound/validator/val_nsec3.c
index 763b5ab..a2b3794 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_nsec3.c
+++ b/sbin/unwind/libunbound/validator/val_nsec3.c
@@ -1289,7 +1289,8 @@ nsec3_prove_wildcard(struct module_env* env, struct val_env* ve,
 static int
 list_is_secure(struct module_env* env, struct val_env* ve, 
        struct ub_packed_rrset_key** list, size_t num,
-       struct key_entry_key* kkey, char** reason, struct module_qstate* qstate)
+       struct key_entry_key* kkey, char** reason, sldns_ede_code *reason_bogus,
+       struct module_qstate* qstate)
 {
        struct packed_rrset_data* d;
        size_t i;
@@ -1303,7 +1304,7 @@ list_is_secure(struct module_env* env, struct val_env* ve,
                if(d->security == sec_status_secure)
                        continue;
                d->security = val_verify_rrset_entry(env, ve, list[i], kkey,
-                       reason, LDNS_SECTION_AUTHORITY, qstate);
+                       reason, reason_bogus, LDNS_SECTION_AUTHORITY, qstate);
                if(d->security != sec_status_secure) {
                        verbose(VERB_ALGO, "NSEC3 did not verify");
                        return 0;
@@ -1317,7 +1318,7 @@ enum sec_status
 nsec3_prove_nods(struct module_env* env, struct val_env* ve,
        struct ub_packed_rrset_key** list, size_t num,
        struct query_info* qinfo, struct key_entry_key* kkey, char** reason,
-       struct module_qstate* qstate)
+       sldns_ede_code* reason_bogus, struct module_qstate* qstate)
 {
        rbtree_type ct;
        struct nsec3_filter flt;
@@ -1330,8 +1331,10 @@ nsec3_prove_nods(struct module_env* env, struct val_env* ve,
                *reason = "no valid NSEC3s";
                return sec_status_bogus; /* no valid NSEC3s, bogus */
        }
-       if(!list_is_secure(env, ve, list, num, kkey, reason, qstate))
+       if(!list_is_secure(env, ve, list, num, kkey, reason, reason_bogus, qstate)) {
+               *reason = "not all NSEC3 records secure";
                return sec_status_bogus; /* not all NSEC3 records secure */
+       }
        rbtree_init(&ct, &nsec3_hash_cmp); /* init names-to-hash cache */
        filter_init(&flt, list, num, qinfo); /* init RR iterator */
        if(!flt.zone) {

diff --git a/sbin/unwind/libunbound/validator/val_nsec3.h b/sbin/unwind/libunbound/validator/val_nsec3.h
index 7fd37c1..7676fc8 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_nsec3.h
+++ b/sbin/unwind/libunbound/validator/val_nsec3.h
@@ -68,6 +68,7 @@
 #define VALIDATOR_VAL_NSEC3_H
 #include "util/rbtree.h"
 #include "util/data/packed_rrset.h"
+#include "sldns/rrdef.h"
 struct val_env;
 struct regional;
 struct module_env;
@@ -186,6 +187,7 @@ nsec3_prove_wildcard(struct module_env* env, struct val_env* ve,
  * @param qinfo: query that is verified for.
  * @param kkey: key entry that signed the NSEC3s.
  * @param reason: string for bogus result.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param qstate: qstate with region.
  * @return:
  *     sec_status SECURE of the proposition is proven by the NSEC3 RRs, 
@@ -197,7 +199,7 @@ enum sec_status
 nsec3_prove_nods(struct module_env* env, struct val_env* ve,
        struct ub_packed_rrset_key** list, size_t num, 
        struct query_info* qinfo, struct key_entry_key* kkey, char** reason,
-       struct module_qstate* qstate);
+       sldns_ede_code* reason_bogus, struct module_qstate* qstate);
 
 /**
  * Prove NXDOMAIN or NODATA.

diff --git a/sbin/unwind/libunbound/validator/val_sigcrypt.c b/sbin/unwind/libunbound/validator/val_sigcrypt.c
index b15fba3..d5f16b1 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_sigcrypt.c
+++ b/sbin/unwind/libunbound/validator/val_sigcrypt.c
@@ -525,11 +525,19 @@ int algo_needs_missing(struct algo_needs* n)
        return 0;
 }
 
+static enum sec_status
+dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve,
+       time_t now, struct ub_packed_rrset_key* rrset,
+       struct ub_packed_rrset_key* dnskey, size_t sig_idx,
+       struct rbtree_type** sortree,
+       char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate);
+
 enum sec_status 
 dnskeyset_verify_rrset(struct module_env* env, struct val_env* ve,
        struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey,
-       uint8_t* sigalg, char** reason, sldns_pkt_section section, 
-       struct module_qstate* qstate)
+       uint8_t* sigalg, char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate)
 {
        enum sec_status sec;
        size_t i, num;
@@ -543,6 +551,8 @@ dnskeyset_verify_rrset(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "rrset failed to verify due to a lack of "
                        "signatures");
                *reason = "no signatures";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_RRSIGS_MISSING;
                return sec_status_bogus;
        }
 
@@ -551,12 +561,15 @@ dnskeyset_verify_rrset(struct module_env* env, struct val_env* ve,
                if(algo_needs_num_missing(&needs) == 0) {
                        verbose(VERB_QUERY, "zone has no known algorithms");
                        *reason = "zone has no known algorithms";
+                       if(reason_bogus)
+                               *reason_bogus = LDNS_EDE_UNSUPPORTED_DNSKEY_ALG;
                        return sec_status_insecure;
                }
        }
        for(i=0; i<num; i++) {
                sec = dnskeyset_verify_rrset_sig(env, ve, *env->now, rrset, 
-                       dnskey, i, &sortree, reason, section, qstate);
+                       dnskey, i, &sortree, reason, reason_bogus,
+                       section, qstate);
                /* see which algorithm has been fixed up */
                if(sec == sec_status_secure) {
                        if(!sigalg)
@@ -597,8 +610,8 @@ void algo_needs_reason(struct module_env* env, int alg, char** reason, char* s)
 enum sec_status 
 dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
         struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey,
-       size_t dnskey_idx, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate)
+       size_t dnskey_idx, char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate)
 {
        enum sec_status sec;
        size_t i, num, numchecked = 0;
@@ -612,6 +625,8 @@ dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "rrset failed to verify due to a lack of "
                        "signatures");
                *reason = "no signatures";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_RRSIGS_MISSING;
                return sec_status_bogus;
        }
        for(i=0; i<num; i++) {
@@ -620,10 +635,10 @@ dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
                        tag != rrset_get_sig_keytag(rrset, i))
                        continue;
                buf_canon = 0;
-               sec = dnskey_verify_rrset_sig(env->scratch, 
+               sec = dnskey_verify_rrset_sig(env->scratch,
                        env->scratch_buffer, ve, *env->now, rrset, 
                        dnskey, dnskey_idx, i, &sortree, &buf_canon, reason,
-                       section, qstate);
+                       reason_bogus, section, qstate);
                if(sec == sec_status_secure)
                        return sec;
                numchecked ++;
@@ -633,12 +648,13 @@ dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
        return sec_status_bogus;
 }
 
-enum sec_status 
-dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve, 
-       time_t now, struct ub_packed_rrset_key* rrset, 
-       struct ub_packed_rrset_key* dnskey, size_t sig_idx, 
-       struct rbtree_type** sortree, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate)
+static enum sec_status
+dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve,
+       time_t now, struct ub_packed_rrset_key* rrset,
+       struct ub_packed_rrset_key* dnskey, size_t sig_idx,
+       struct rbtree_type** sortree,
+       char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate)
 {
        /* find matching keys and check them */
        enum sec_status sec = sec_status_bogus;
@@ -649,10 +665,12 @@ dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve,
        int buf_canon = 0;
        verbose(VERB_ALGO, "verify sig %d %d", (int)tag, algo);
        if(!dnskey_algo_id_is_supported(algo)) {
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_UNSUPPORTED_DNSKEY_ALG;
                verbose(VERB_QUERY, "verify sig: unknown algorithm");
                return sec_status_insecure;
        }
-       
+
        for(i=0; i<num; i++) {
                /* see if key matches keytag and algo */
                if(algo != dnskey_get_algo(dnskey, i) ||
@@ -661,14 +679,17 @@ dnskeyset_verify_rrset_sig(struct module_env* env, struct val_env* ve,
                numchecked ++;
 
                /* see if key verifies */
-               sec = dnskey_verify_rrset_sig(env->scratch, 
-                       env->scratch_buffer, ve, now, rrset, dnskey, i, 
-                       sig_idx, sortree, &buf_canon, reason, section, qstate);
+               sec = dnskey_verify_rrset_sig(env->scratch,
+                       env->scratch_buffer, ve, now, rrset, dnskey, i,
+                       sig_idx, sortree, &buf_canon, reason, reason_bogus,
+                       section, qstate);
                if(sec == sec_status_secure)
                        return sec;
        }
        if(numchecked == 0) {
                *reason = "signatures from unknown keys";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSKEY_MISSING;
                verbose(VERB_QUERY, "verify: could not find appropriate key");
                return sec_status_bogus;
        }
@@ -1361,8 +1382,8 @@ subtract_1982(uint32_t a, uint32_t b)
 
 /** check rrsig dates */
 static int
-check_dates(struct val_env* ve, uint32_t unow,
-       uint8_t* expi_p, uint8_t* incep_p, char** reason)
+check_dates(struct val_env* ve, uint32_t unow, uint8_t* expi_p,
+       uint8_t* incep_p, char** reason, sldns_ede_code *reason_bogus)
 {
        /* read out the dates */
        uint32_t expi, incep, now;
@@ -1386,6 +1407,14 @@ check_dates(struct val_env* ve, uint32_t unow,
                sigdate_error("verify: inception after expiration, "
                        "signature bad", expi, incep, now);
                *reason = "signature inception after expiration";
+               if(reason_bogus){
+                       /* from RFC8914 on Signature Not Yet Valid: The resolver
+                        * attempted to perform DNSSEC validation, but no
+                        * signatures are presently valid and at least some are
+                        * not yet valid. */
+                       *reason_bogus = LDNS_EDE_SIGNATURE_NOT_YET_VALID;
+               }
+
                return 0;
        }
        if(compare_1982(incep, now) > 0) {
@@ -1397,6 +1426,8 @@ check_dates(struct val_env* ve, uint32_t unow,
                        sigdate_error("verify: signature bad, current time is"
                                " before inception date", expi, incep, now);
                        *reason = "signature before inception date";
+                       if(reason_bogus)
+                               *reason_bogus = LDNS_EDE_SIGNATURE_NOT_YET_VALID;
                        return 0;
                }
                sigdate_error("verify warning suspicious signature inception "
@@ -1410,6 +1441,8 @@ check_dates(struct val_env* ve, uint32_t unow,
                        sigdate_error("verify: signature expired", expi, 
                                incep, now);
                        *reason = "signature expired";
+                       if(reason_bogus)
+                               *reason_bogus = LDNS_EDE_SIGNATURE_EXPIRED;
                        return 0;
                }
                sigdate_error("verify warning suspicious signature expiration "
@@ -1473,7 +1506,8 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
        struct val_env* ve, time_t now,
         struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey,
         size_t dnskey_idx, size_t sig_idx,
-       struct rbtree_type** sortree, int* buf_canon, char** reason,
+       struct rbtree_type** sortree, int* buf_canon,
+       char** reason, sldns_ede_code *reason_bogus,
        sldns_pkt_section section, struct module_qstate* qstate)
 {
        enum sec_status sec;
@@ -1492,12 +1526,16 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
        if(siglen < 2+20) {
                verbose(VERB_QUERY, "verify: signature too short");
                *reason = "signature too short";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
 
        if(!(dnskey_get_flags(dnskey, dnskey_idx) & DNSKEY_BIT_ZSK)) {
                verbose(VERB_QUERY, "verify: dnskey without ZSK flag");
                *reason = "dnskey without ZSK flag";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_NO_ZONE_KEY_BIT_SET;
                return sec_status_bogus; 
        }
 
@@ -1505,6 +1543,8 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
                /* RFC 4034 says DNSKEY PROTOCOL MUST be 3 */
                verbose(VERB_QUERY, "verify: dnskey has wrong key protocol");
                *reason = "dnskey has wrong protocolnumber";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
 
@@ -1514,17 +1554,23 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
        if(!signer_len) {
                verbose(VERB_QUERY, "verify: malformed signer name");
                *reason = "signer name malformed";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus; /* signer name invalid */
        }
        if(!dname_subdomain_c(rrset->rk.dname, signer)) {
                verbose(VERB_QUERY, "verify: signer name is off-tree");
                *reason = "signer name off-tree";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus; /* signer name offtree */
        }
        sigblock = (unsigned char*)signer+signer_len;
        if(siglen < 2+18+signer_len+1) {
                verbose(VERB_QUERY, "verify: too short, no signature data");
                *reason = "signature too short, no signature data";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus; /* sig rdf is < 1 byte */
        }
        sigblock_len = (unsigned int)(siglen - 2 - 18 - signer_len);
@@ -1537,6 +1583,8 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
                log_nametypeclass(VERB_QUERY, "the key name is", 
                        dnskey->rk.dname, 0, 0);
                *reason = "signer name mismatches key name";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
 
@@ -1545,18 +1593,24 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
        if(memcmp(sig+2, &rrset->rk.type, 2) != 0) {
                verbose(VERB_QUERY, "verify: wrong type covered");
                *reason = "signature covers wrong type";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
        /* verify keytag and sig algo (possibly again) */
        if((int)sig[2+2] != dnskey_get_algo(dnskey, dnskey_idx)) {
                verbose(VERB_QUERY, "verify: wrong algorithm");
                *reason = "signature has wrong algorithm";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
        ktag = htons(dnskey_calc_keytag(dnskey, dnskey_idx));
        if(memcmp(sig+2+16, &ktag, 2) != 0) {
                verbose(VERB_QUERY, "verify: wrong keytag");
                *reason = "signature has wrong keytag";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
 
@@ -1564,6 +1618,8 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
        if((int)sig[2+3] > dname_signame_label_count(rrset->rk.dname)) {
                verbose(VERB_QUERY, "verify: labelcount out of range");
                *reason = "signature labelcount out of range";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
                return sec_status_bogus;
        }
 
@@ -1598,7 +1654,8 @@ dnskey_verify_rrset_sig(struct regional* region, sldns_buffer* buf,
                /* verify inception, expiration dates 
                 * Do this last so that if you ignore expired-sigs the
                 * rest is sure to be OK. */
-               if(!check_dates(ve, now, sig+2+8, sig+2+12, reason)) {
+               if(!check_dates(ve, now, sig+2+8, sig+2+12,
+                       reason, reason_bogus)) {
                        return sec_status_bogus;
                }
        }

diff --git a/sbin/unwind/libunbound/validator/val_sigcrypt.h b/sbin/unwind/libunbound/validator/val_sigcrypt.h
index bbb9578..7f52b71 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_sigcrypt.h
+++ b/sbin/unwind/libunbound/validator/val_sigcrypt.h
@@ -45,6 +45,7 @@
 #define VALIDATOR_VAL_SIGCRYPT_H
 #include "util/data/packed_rrset.h"
 #include "sldns/pkthdr.h"
+#include "sldns/rrdef.h"
 struct val_env;
 struct module_env;
 struct module_qstate;
@@ -256,6 +257,7 @@ uint16_t dnskey_get_flags(struct ub_packed_rrset_key* k, size_t idx);
  * @param sigalg: if nonNULL provide downgrade protection otherwise one
  *   algorithm is enough.
  * @param reason: if bogus, a string returned, fixed or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param section: section of packet where this rrset comes from.
  * @param qstate: qstate with region.
  * @return SECURE if one key in the set verifies one rrsig.
@@ -264,9 +266,11 @@ uint16_t dnskey_get_flags(struct ub_packed_rrset_key* k, size_t idx);
  */
 enum sec_status dnskeyset_verify_rrset(struct module_env* env, 
        struct val_env* ve, struct ub_packed_rrset_key* rrset, 
-       struct ub_packed_rrset_key* dnskey, uint8_t* sigalg, char** reason,
+       struct ub_packed_rrset_key* dnskey, uint8_t* sigalg,
+       char** reason, sldns_ede_code *reason_bogus,
        sldns_pkt_section section, struct module_qstate* qstate);
 
+
 /** 
  * verify rrset against one specific dnskey (from rrset) 
  * @param env: module environment, scratch space is used.
@@ -275,38 +279,17 @@ enum sec_status dnskeyset_verify_rrset(struct module_env* env,
  * @param dnskey: DNSKEY rrset, keyset.
  * @param dnskey_idx: which key from the rrset to try.
  * @param reason: if bogus, a string returned, fixed or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param section: section of packet where this rrset comes from.
  * @param qstate: qstate with region.
  * @return secure if *this* key signs any of the signatures on rrset.
  *     unchecked on error or and bogus on bad signature.
  */
-enum sec_status dnskey_verify_rrset(struct module_env* env, 
-       struct val_env* ve, struct ub_packed_rrset_key* rrset, 
-       struct ub_packed_rrset_key* dnskey, size_t dnskey_idx, char** reason,
+enum sec_status dnskey_verify_rrset(struct module_env* env, struct val_env* ve,
+        struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey,
+       size_t dnskey_idx, char** reason, sldns_ede_code *reason_bogus,
        sldns_pkt_section section, struct module_qstate* qstate);
 
-/** 
- * verify rrset, with dnskey rrset, for a specific rrsig in rrset
- * @param env: module environment, scratch space is used.
- * @param ve: validator environment, date settings.
- * @param now: current time for validation (can be overridden).
- * @param rrset: to be validated.
- * @param dnskey: DNSKEY rrset, keyset to try.
- * @param sig_idx: which signature to try to validate.
- * @param sortree: reused sorted order. Stored in region. Pass NULL at start,
- *     and for a new rrset.
- * @param reason: if bogus, a string returned, fixed or alloced in scratch.
- * @param section: section of packet where this rrset comes from.
- * @param qstate: qstate with region.
- * @return secure if any key signs *this* signature. bogus if no key signs it,
- *     or unchecked on error.
- */
-enum sec_status dnskeyset_verify_rrset_sig(struct module_env* env, 
-       struct val_env* ve, time_t now, struct ub_packed_rrset_key* rrset, 
-       struct ub_packed_rrset_key* dnskey, size_t sig_idx, 
-       struct rbtree_type** sortree, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate);
-
 /** 
  * verify rrset, with specific dnskey(from set), for a specific rrsig 
  * @param region: scratch region used for temporary allocation.
@@ -323,17 +306,19 @@ enum sec_status dnskeyset_verify_rrset_sig(struct module_env* env,
  *     pass false at start. pass old value only for same rrset and same
  *     signature (but perhaps different key) for reuse.
  * @param reason: if bogus, a string returned, fixed or alloced in scratch.
+ * @param reason_bogus: EDE (8914) code paired with the reason of failure.
  * @param section: section of packet where this rrset comes from.
  * @param qstate: qstate with region.
  * @return secure if this key signs this signature. unchecked on error or 
  *     bogus if it did not validate.
  */
-enum sec_status dnskey_verify_rrset_sig(struct regional* region, 
-       struct sldns_buffer* buf, struct val_env* ve, time_t now,
-       struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey, 
-       size_t dnskey_idx, size_t sig_idx,
-       struct rbtree_type** sortree, int* buf_canon, char** reason,
-       sldns_pkt_section section, struct module_qstate* qstate);
+enum sec_status dnskey_verify_rrset_sig(struct regional* region,
+        struct sldns_buffer* buf, struct val_env* ve, time_t now,
+        struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* dnskey,
+        size_t dnskey_idx, size_t sig_idx,
+        struct rbtree_type** sortree, int* buf_canon,
+        char** reason, sldns_ede_code *reason_bogus,
+        sldns_pkt_section section, struct module_qstate* qstate);
 
 /**
  * canonical compare for two tree entries

diff --git a/sbin/unwind/libunbound/validator/val_utils.c b/sbin/unwind/libunbound/validator/val_utils.c
index bb366d3..18a7c9c 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_utils.c
+++ b/sbin/unwind/libunbound/validator/val_utils.c
@@ -332,11 +332,11 @@ rrset_get_ttl(struct ub_packed_rrset_key* rrset)
        return d->ttl;
 }
 
-enum sec_status 
+static enum sec_status 
 val_verify_rrset(struct module_env* env, struct val_env* ve,
         struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* keys,
-       uint8_t* sigalg, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate)
+       uint8_t* sigalg, char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate)
 {
        enum sec_status sec;
        struct packed_rrset_data* d = (struct packed_rrset_data*)rrset->
@@ -359,7 +359,7 @@ val_verify_rrset(struct module_env* env, struct val_env* ve,
        log_nametypeclass(VERB_ALGO, "verify rrset", rrset->rk.dname,
                ntohs(rrset->rk.type), ntohs(rrset->rk.rrset_class));
        sec = dnskeyset_verify_rrset(env, ve, rrset, keys, sigalg, reason,
-               section, qstate);
+               reason_bogus, section, qstate);
        verbose(VERB_ALGO, "verify result: %s", sec_status_to_string(sec));
        regional_free_all(env->scratch);
 
@@ -392,7 +392,8 @@ val_verify_rrset(struct module_env* env, struct val_env* ve,
 enum sec_status 
 val_verify_rrset_entry(struct module_env* env, struct val_env* ve,
         struct ub_packed_rrset_key* rrset, struct key_entry_key* kkey,
-       char** reason, sldns_pkt_section section, struct module_qstate* qstate)
+       char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate)
 {
        /* temporary dnskey rrset-key */
        struct ub_packed_rrset_key dnskey;
@@ -406,16 +407,16 @@ val_verify_rrset_entry(struct module_env* env, struct val_env* ve,
        dnskey.entry.key = &dnskey;
        dnskey.entry.data = kd->rrset_data;
        sec = val_verify_rrset(env, ve, rrset, &dnskey, kd->algo, reason,
-               section, qstate);
+               reason_bogus, section, qstate);
        return sec;
 }
 
 /** verify that a DS RR hashes to a key and that key signs the set */
 static enum sec_status
-verify_dnskeys_with_ds_rr(struct module_env* env, struct val_env* ve, 
-       struct ub_packed_rrset_key* dnskey_rrset, 
+verify_dnskeys_with_ds_rr(struct module_env* env, struct val_env* ve,
+       struct ub_packed_rrset_key* dnskey_rrset,
         struct ub_packed_rrset_key* ds_rrset, size_t ds_idx, char** reason,
-       struct module_qstate* qstate)
+       sldns_ede_code *reason_bogus, struct module_qstate* qstate)
 {
        enum sec_status sec = sec_status_bogus;
        size_t i, num, numchecked = 0, numhashok = 0, numsizesupp = 0;
@@ -450,8 +451,8 @@ verify_dnskeys_with_ds_rr(struct module_env* env, struct val_env* ve,
 
                /* Otherwise, we have a match! Make sure that the DNSKEY 
                 * verifies *with this key*  */
-               sec = dnskey_verify_rrset(env, ve, dnskey_rrset, 
-                       dnskey_rrset, i, reason, LDNS_SECTION_ANSWER, qstate);
+               sec = dnskey_verify_rrset(env, ve, dnskey_rrset, dnskey_rrset,
+                       i, reason, reason_bogus, LDNS_SECTION_ANSWER, qstate);
                if(sec == sec_status_secure) {
                        return sec;
                }
@@ -488,11 +489,12 @@ int val_favorite_ds_algo(struct ub_packed_rrset_key* ds_rrset)
        return digest_algo;
 }
 
-enum sec_status 
+// @TODO change the use of this function to _ede function in authzone.c:8111
+enum sec_status
 val_verify_DNSKEY_with_DS(struct module_env* env, struct val_env* ve,
        struct ub_packed_rrset_key* dnskey_rrset,
        struct ub_packed_rrset_key* ds_rrset, uint8_t* sigalg, char** reason,
-       struct module_qstate* qstate)
+       sldns_ede_code *reason_bogus, struct module_qstate* qstate)
 {
        /* as long as this is false, we can consider this DS rrset to be
         * equivalent to no DS rrset. */
@@ -529,7 +531,7 @@ val_verify_DNSKEY_with_DS(struct module_env* env, struct val_env* ve,
                }
 
                sec = verify_dnskeys_with_ds_rr(env, ve, dnskey_rrset,
-                       ds_rrset, i, reason, qstate);
+                       ds_rrset, i, reason, reason_bogus, qstate);
                if(sec == sec_status_insecure)
                        continue;
 
@@ -571,15 +573,16 @@ val_verify_DNSKEY_with_DS(struct module_env* env, struct val_env* ve,
        return sec_status_bogus;
 }
 
-struct key_entry_key* 
+struct key_entry_key*
 val_verify_new_DNSKEYs(struct regional* region, struct module_env* env, 
        struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset, 
        struct ub_packed_rrset_key* ds_rrset, int downprot, char** reason,
-       struct module_qstate* qstate)
+       sldns_ede_code *reason_bogus, struct module_qstate* qstate)
 {
        uint8_t sigalg[ALGO_NEEDS_MAX+1];
-       enum sec_status sec = val_verify_DNSKEY_with_DS(env, ve, 
-               dnskey_rrset, ds_rrset, downprot?sigalg:NULL, reason, qstate);
+       enum sec_status sec = val_verify_DNSKEY_with_DS(env, ve,
+               dnskey_rrset, ds_rrset, downprot?sigalg:NULL, reason, 
+               reason_bogus, qstate);
 
        if(sec == sec_status_secure) {
                return key_entry_create_rrset(region, 
@@ -597,12 +600,12 @@ val_verify_new_DNSKEYs(struct regional* region, struct module_env* env,
                BOGUS_KEY_TTL, *env->now);
 }
 
-enum sec_status 
+enum sec_status
 val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
        struct ub_packed_rrset_key* dnskey_rrset,
        struct ub_packed_rrset_key* ta_ds,
        struct ub_packed_rrset_key* ta_dnskey, uint8_t* sigalg, char** reason,
-       struct module_qstate* qstate)
+       sldns_ede_code *reason_bogus, struct module_qstate* qstate)
 {
        /* as long as this is false, we can consider this anchor to be
         * equivalent to no anchor. */
@@ -617,6 +620,8 @@ val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "DNSKEY RRset did not match DS RRset "
                        "by name");
                *reason = "DNSKEY RRset did not match DS RRset by name";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSKEY_MISSING;
                return sec_status_bogus;
        }
        if(ta_dnskey && (dnskey_rrset->rk.dname_len != ta_dnskey->rk.dname_len
@@ -625,6 +630,8 @@ val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "DNSKEY RRset did not match anchor RRset "
                        "by name");
                *reason = "DNSKEY RRset did not match anchor RRset by name";
+               if(reason_bogus)
+                       *reason_bogus = LDNS_EDE_DNSKEY_MISSING;
                return sec_status_bogus;
        }
 
@@ -648,7 +655,7 @@ val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
                        continue;
 
                sec = verify_dnskeys_with_ds_rr(env, ve, dnskey_rrset,
-                       ta_ds, i, reason, qstate);
+                       ta_ds, i, reason, reason_bogus, qstate);
                if(sec == sec_status_insecure)
                        continue;
 
@@ -688,7 +695,7 @@ val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
                has_useful_ta = 1;
 
                sec = dnskey_verify_rrset(env, ve, dnskey_rrset,
-                       ta_dnskey, i, reason, LDNS_SECTION_ANSWER, qstate);
+                       ta_dnskey, i, reason, NULL, LDNS_SECTION_ANSWER, qstate);
                if(sec == sec_status_secure) {
                        if(!sigalg || algo_needs_set_secure(&needs,
                                (uint8_t)dnskey_get_algo(ta_dnskey, i))) {
@@ -723,24 +730,24 @@ val_verify_DNSKEY_with_TA(struct module_env* env, struct val_env* ve,
 
 struct key_entry_key* 
 val_verify_new_DNSKEYs_with_ta(struct regional* region, struct module_env* env,
-       struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset, 
+       struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset,
        struct ub_packed_rrset_key* ta_ds_rrset,
        struct ub_packed_rrset_key* ta_dnskey_rrset, int downprot,
-       char** reason, struct module_qstate* qstate)
+       char** reason, sldns_ede_code *reason_bogus, struct module_qstate* qstate)
 {
        uint8_t sigalg[ALGO_NEEDS_MAX+1];
-       enum sec_status sec = val_verify_DNSKEY_with_TA(env, ve, 
+       enum sec_status sec = val_verify_DNSKEY_with_TA(env, ve,
                dnskey_rrset, ta_ds_rrset, ta_dnskey_rrset,
-               downprot?sigalg:NULL, reason, qstate);
+               downprot?sigalg:NULL, reason, reason_bogus, qstate);
 
        if(sec == sec_status_secure) {
-               return key_entry_create_rrset(region, 
+               return key_entry_create_rrset(region,
                        dnskey_rrset->rk.dname, dnskey_rrset->rk.dname_len,
                        ntohs(dnskey_rrset->rk.rrset_class), dnskey_rrset,
                        downprot?sigalg:NULL, *env->now);
        } else if(sec == sec_status_insecure) {
                return key_entry_create_null(region, dnskey_rrset->rk.dname,
-                       dnskey_rrset->rk.dname_len, 
+                       dnskey_rrset->rk.dname_len,
                        ntohs(dnskey_rrset->rk.rrset_class),
                        rrset_get_ttl(dnskey_rrset), *env->now);
        }
@@ -749,7 +756,7 @@ val_verify_new_DNSKEYs_with_ta(struct regional* region, struct module_env* env,
                BOGUS_KEY_TTL, *env->now);
 }
 
-int 
+int
 val_dsset_isusable(struct ub_packed_rrset_key* ds_rrset)
 {
        size_t i;
@@ -776,6 +783,7 @@ val_dsset_isusable(struct ub_packed_rrset_key* ds_rrset)
                if(lt) snprintf(aerr, sizeof(aerr), "%s", lt->name);
                else snprintf(aerr, sizeof(aerr), "%d",
                        (int)ds_get_key_algo(ds_rrset, 0));
+
                verbose(VERB_ALGO, "DS unsupported, hash %s %s, "
                        "key algorithm %s %s", herr,
                        (ds_digest_algo_is_supported(ds_rrset, 0)?

diff --git a/sbin/unwind/libunbound/validator/val_utils.h b/sbin/unwind/libunbound/validator/val_utils.h
index 6e9867f..83e3d0a 100644 (file)
--- a/sbin/unwind/libunbound/validator/val_utils.h
+++ b/sbin/unwind/libunbound/validator/val_utils.h
@@ -43,6 +43,7 @@
 #define VALIDATOR_VAL_UTILS_H
 #include "util/data/packed_rrset.h"
 #include "sldns/pkthdr.h"
+#include "sldns/rrdef.h"
 struct query_info;
 struct reply_info;
 struct val_env;
@@ -113,24 +114,6 @@ void val_find_signer(enum val_classification subtype,
        struct query_info* qinf, struct reply_info* rep,
        size_t cname_skip, uint8_t** signer_name, size_t* signer_len);
 
-/**
- * Verify RRset with keys
- * @param env: module environment (scratch buffer)
- * @param ve: validator environment (verification settings)
- * @param rrset: what to verify
- * @param keys: dnskey rrset to verify with.
- * @param sigalg: if nonNULL provide downgrade protection otherwise one
- *   algorithm is enough.  Algo list is constructed in here.
- * @param reason: reason of failure. Fixed string or alloced in scratch.
- * @param section: section of packet where this rrset comes from.
- * @param qstate: qstate with region.
- * @return security status of verification.
- */
-enum sec_status val_verify_rrset(struct module_env* env, struct val_env* ve,
-       struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* keys,
-       uint8_t* sigalg, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate);
-
 /**
  * Verify RRset with keys from a keyset.
  * @param env: module environment (scratch buffer)
@@ -138,14 +121,15 @@ enum sec_status val_verify_rrset(struct module_env* env, struct val_env* ve,
  * @param rrset: what to verify
  * @param kkey: key_entry to verify with.
  * @param reason: reason of failure. Fixed string or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param section: section of packet where this rrset comes from.
  * @param qstate: qstate with region.
  * @return security status of verification.
  */
 enum sec_status val_verify_rrset_entry(struct module_env* env, 
        struct val_env* ve, struct ub_packed_rrset_key* rrset, 
-       struct key_entry_key* kkey, char** reason, sldns_pkt_section section,
-       struct module_qstate* qstate);
+       struct key_entry_key* kkey, char** reason, sldns_ede_code *reason_bogus,
+       sldns_pkt_section section, struct module_qstate* qstate);
 
 /**
  * Verify DNSKEYs with DS rrset. Like val_verify_new_DNSKEYs but
@@ -158,15 +142,16 @@ enum sec_status val_verify_rrset_entry(struct module_env* env,
  *   algorithm is enough.  The list of signalled algorithms is returned,
  *   must have enough space for ALGO_NEEDS_MAX+1.
  * @param reason: reason of failure. Fixed string or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param qstate: qstate with region.
  * @return: sec_status_secure if a DS matches.
  *     sec_status_insecure if end of trust (i.e., unknown algorithms).
  *     sec_status_bogus if it fails.
  */
-enum sec_status val_verify_DNSKEY_with_DS(struct module_env* env, 
-       struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset, 
-       struct ub_packed_rrset_key* ds_rrset, uint8_t* sigalg, char** reason,
-       struct module_qstate* qstate);
+enum sec_status val_verify_DNSKEY_with_DS(struct module_env* env,
+    struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset,
+    struct ub_packed_rrset_key* ds_rrset, uint8_t* sigalg, char** reason,
+    sldns_ede_code *reason_bogus, struct module_qstate* qstate);
 
 /**
  * Verify DNSKEYs with DS and DNSKEY rrset.  Like val_verify_DNSKEY_with_DS
@@ -180,16 +165,17 @@ enum sec_status val_verify_DNSKEY_with_DS(struct module_env* env,
  *   algorithm is enough.  The list of signalled algorithms is returned,
  *   must have enough space for ALGO_NEEDS_MAX+1.
  * @param reason: reason of failure. Fixed string or alloced in scratch.
+* @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param qstate: qstate with region.
  * @return: sec_status_secure if a DS matches.
  *     sec_status_insecure if end of trust (i.e., unknown algorithms).
  *     sec_status_bogus if it fails.
  */
-enum sec_status val_verify_DNSKEY_with_TA(struct module_env* env, 
-       struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset, 
-       struct ub_packed_rrset_key* ta_ds,
-       struct ub_packed_rrset_key* ta_dnskey, uint8_t* sigalg, char** reason,
-       struct module_qstate* qstate);
+enum sec_status val_verify_DNSKEY_with_TA(struct module_env* env,
+    struct val_env* ve, struct ub_packed_rrset_key* dnskey_rrset,
+    struct ub_packed_rrset_key* ta_ds,
+    struct ub_packed_rrset_key* ta_dnskey, uint8_t* sigalg, char** reason,
+    sldns_ede_code *reason_bogus, struct module_qstate* qstate);
 
 /**
  * Verify new DNSKEYs with DS rrset. The DS contains hash values that should
@@ -204,6 +190,7 @@ enum sec_status val_verify_DNSKEY_with_TA(struct module_env* env,
  * @param downprot: if true provide downgrade protection otherwise one
  *   algorithm is enough.
  * @param reason: reason of failure. Fixed string or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param qstate: qstate with region.
  * @return a KeyEntry. This will either contain the now trusted
  *         dnskey_rrset, a "null" key entry indicating that this DS
@@ -215,12 +202,11 @@ enum sec_status val_verify_DNSKEY_with_TA(struct module_env* env,
  *         rrset.
  *         if downprot is set, a key entry with an algo list is made.
  */
-struct key_entry_key* val_verify_new_DNSKEYs(struct regional* region, 
-       struct module_env* env, struct val_env* ve, 
-       struct ub_packed_rrset_key* dnskey_rrset, 
-       struct ub_packed_rrset_key* ds_rrset, int downprot, char** reason,
-       struct module_qstate* qstate);
-
+struct key_entry_key* val_verify_new_DNSKEYs(struct regional* region,
+    struct module_env* env, struct val_env* ve,
+    struct ub_packed_rrset_key* dnskey_rrset, 
+    struct ub_packed_rrset_key* ds_rrset, int downprot, char** reason,
+    sldns_ede_code *reason_bogus, struct module_qstate* qstate);
 
 /**
  * Verify rrset with trust anchor: DS and DNSKEY rrset.
@@ -234,6 +220,7 @@ struct key_entry_key* val_verify_new_DNSKEYs(struct regional* region,
  * @param downprot: if true provide downgrade protection otherwise one
  *   algorithm is enough.
  * @param reason: reason of failure. Fixed string or alloced in scratch.
+ * @param reason_bogus: EDE (RFC8914) code paired with the reason of failure.
  * @param qstate: qstate with region.
  * @return a KeyEntry. This will either contain the now trusted
  *         dnskey_rrset, a "null" key entry indicating that this DS
@@ -246,11 +233,11 @@ struct key_entry_key* val_verify_new_DNSKEYs(struct regional* region,
  *         if downprot is set, a key entry with an algo list is made.
  */
 struct key_entry_key* val_verify_new_DNSKEYs_with_ta(struct regional* region, 
-       struct module_env* env, struct val_env* ve, 
-       struct ub_packed_rrset_key* dnskey_rrset, 
-       struct ub_packed_rrset_key* ta_ds_rrset, 
-       struct ub_packed_rrset_key* ta_dnskey_rrset,
-       int downprot, char** reason, struct module_qstate* qstate);
+    struct module_env* env, struct val_env* ve,
+    struct ub_packed_rrset_key* dnskey_rrset,
+    struct ub_packed_rrset_key* ta_ds_rrset,
+    struct ub_packed_rrset_key* ta_dnskey_rrset, int downprot,
+    char** reason, sldns_ede_code *reason_bogus, struct module_qstate* qstate);
 
 /**
  * Determine if DS rrset is usable for validator or not.

diff --git a/sbin/unwind/libunbound/validator/validator.c b/sbin/unwind/libunbound/validator/validator.c
index e630728..75f3220 100644 (file)
--- a/sbin/unwind/libunbound/validator/validator.c
+++ b/sbin/unwind/libunbound/validator/validator.c
@@ -69,6 +69,20 @@ static void process_ds_response(struct module_qstate* qstate,
        struct val_qstate* vq, int id, int rcode, struct dns_msg* msg, 
        struct query_info* qinfo, struct sock_list* origin);
 
+
+/* Updates the suplied EDE (RFC8914) code selectively so we don't loose
+ * a more specific code
+ */
+static void
+update_reason_bogus(struct reply_info* rep, sldns_ede_code reason_bogus)
+{
+       if (rep->reason_bogus == LDNS_EDE_DNSSEC_BOGUS ||
+               rep->reason_bogus == LDNS_EDE_NONE) {
+               rep->reason_bogus = reason_bogus;
+       }
+}
+
+
 /** fill up nsec3 key iterations config entry */
 static int
 fill_nsec3_iter(struct val_env* ve, char* s, int c)
@@ -230,6 +244,7 @@ val_new_getmsg(struct module_qstate* qstate, struct val_qstate* vq)
                vq->orig_msg->rep->flags = (uint16_t)(qstate->return_rcode&0xf)
                        |BIT_QR|BIT_RA|(qstate->query_flags|(BIT_CD|BIT_RD));
                vq->orig_msg->rep->qdcount = 1;
+               vq->orig_msg->rep->reason_bogus = LDNS_EDE_NONE;
        } else {
                vq->orig_msg = qstate->return_msg;
        }
@@ -592,6 +607,7 @@ validate_msg_signatures(struct module_qstate* qstate, struct module_env* env,
        enum sec_status sec;
        int dname_seen = 0;
        char* reason = NULL;
+       sldns_ede_code reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
 
        /* validate the ANSWER section */
        for(i=0; i<chase_reply->an_numrrsets; i++) {
@@ -613,20 +629,22 @@ validate_msg_signatures(struct module_qstate* qstate, struct module_env* env,
 
                /* Verify the answer rrset */
                sec = val_verify_rrset_entry(env, ve, s, key_entry, &reason,
-                       LDNS_SECTION_ANSWER, qstate);
+                       &reason_bogus, LDNS_SECTION_ANSWER, qstate);
                /* If the (answer) rrset failed to validate, then this 
                 * message is BAD. */
                if(sec != sec_status_secure) {
                        log_nametypeclass(VERB_QUERY, "validator: response "
                                "has failed ANSWER rrset:", s->rk.dname,
                                ntohs(s->rk.type), ntohs(s->rk.rrset_class));
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, reason_bogus);
                        if(ntohs(s->rk.type) == LDNS_RR_TYPE_CNAME)
                                errinf(qstate, "for CNAME");
                        else if(ntohs(s->rk.type) == LDNS_RR_TYPE_DNAME)
                                errinf(qstate, "for DNAME");
                        errinf_origin(qstate, qstate->reply_origin);
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, reason_bogus);
+
                        return 0;
                }
 
@@ -643,17 +661,18 @@ validate_msg_signatures(struct module_qstate* qstate, struct module_env* env,
                chase_reply->ns_numrrsets; i++) {
                s = chase_reply->rrsets[i];
                sec = val_verify_rrset_entry(env, ve, s, key_entry, &reason,
-                       LDNS_SECTION_AUTHORITY, qstate);
+                       &reason_bogus, LDNS_SECTION_AUTHORITY, qstate);
                /* If anything in the authority section fails to be secure, 
                 * we have a bad message. */
                if(sec != sec_status_secure) {
                        log_nametypeclass(VERB_QUERY, "validator: response "
                                "has failed AUTHORITY rrset:", s->rk.dname,
                                ntohs(s->rk.type), ntohs(s->rk.rrset_class));
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, reason_bogus);
                        errinf_origin(qstate, qstate->reply_origin);
                        errinf_rrset(qstate, s);
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, reason_bogus);
                        return 0;
                }
        }
@@ -669,9 +688,10 @@ validate_msg_signatures(struct module_qstate* qstate, struct module_env* env,
                /* only validate rrs that have signatures with the key */
                /* leave others unchecked, those get removed later on too */
                val_find_rrset_signer(s, &sname, &slen);
+
                if(sname && query_dname_compare(sname, key_entry->name)==0)
                        (void)val_verify_rrset_entry(env, ve, s, key_entry,
-                               &reason, LDNS_SECTION_ADDITIONAL, qstate);
+                               &reason, NULL, LDNS_SECTION_ADDITIONAL, qstate);
                /* the additional section can fail to be secure, 
                 * it is optional, check signature in case we need
                 * to clean the additional section later. */
@@ -804,6 +824,7 @@ validate_positive_response(struct module_env* env, struct val_env* ve,
                                "inconsistent wildcard sigs:", s->rk.dname,
                                ntohs(s->rk.type), ntohs(s->rk.rrset_class));
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                        return;
                }
                if(wc && !wc_cached && env->cfg->aggressive_nsec) {
@@ -861,6 +882,7 @@ validate_positive_response(struct module_env* env, struct val_env* ve,
                        "expansion and did not prove original data "
                        "did not exist");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -959,6 +981,7 @@ validate_nodata_response(struct module_env* env, struct val_env* ve,
                if(verbosity >= VERB_ALGO)
                        log_dns_msg("Failed NODATA", qchase, chase_reply);
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -1045,6 +1068,7 @@ validate_nameerror_response(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "NameError response has failed to prove: "
                          "qname does not exist");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                /* Be lenient with RCODE in NSEC NameError responses */
                validate_nodata_response(env, ve, qchase, chase_reply, kkey);
                if (chase_reply->security == sec_status_secure)
@@ -1056,6 +1080,7 @@ validate_nameerror_response(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "NameError response has failed to prove: "
                          "covering wildcard does not exist");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                /* Be lenient with RCODE in NSEC NameError responses */
                validate_nodata_response(env, ve, qchase, chase_reply, kkey);
                if (chase_reply->security == sec_status_secure)
@@ -1138,6 +1163,7 @@ validate_any_response(struct module_env* env, struct val_env* ve,
        if(qchase->qtype != LDNS_RR_TYPE_ANY) {
                log_err("internal error: ANY validation called for non-ANY");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -1154,6 +1180,7 @@ validate_any_response(struct module_env* env, struct val_env* ve,
                                s->rk.dname, ntohs(s->rk.type), 
                                ntohs(s->rk.rrset_class));
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                        return;
                }
        }
@@ -1208,6 +1235,7 @@ validate_any_response(struct module_env* env, struct val_env* ve,
                        "expansion and did not prove original data "
                        "did not exist");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -1255,6 +1283,7 @@ validate_cname_response(struct module_env* env, struct val_env* ve,
                                "inconsistent wildcard sigs:", s->rk.dname,
                                ntohs(s->rk.type), ntohs(s->rk.rrset_class));
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                        return;
                }
                
@@ -1267,6 +1296,7 @@ validate_cname_response(struct module_env* env, struct val_env* ve,
                                "wildcarded DNAME:", s->rk.dname, 
                                ntohs(s->rk.type), ntohs(s->rk.rrset_class));
                        chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                        return;
                }
 
@@ -1324,6 +1354,7 @@ validate_cname_response(struct module_env* env, struct val_env* ve,
                        "expansion and did not prove original data "
                        "did not exist");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -1424,6 +1455,7 @@ validate_cname_noanswer_response(struct module_env* env, struct val_env* ve,
                verbose(VERB_QUERY, "CNAMEchain to noanswer proves that name "
                        "exists and not exists, bogus");
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
        if(!nodata_valid_nsec && !nxdomain_valid_nsec && nsec3s_seen) {
@@ -1449,6 +1481,7 @@ validate_cname_noanswer_response(struct module_env* env, struct val_env* ve,
                if(verbosity >= VERB_ALGO)
                        log_dns_msg("Failed CNAMEnoanswer", qchase, chase_reply);
                chase_reply->security = sec_status_bogus;
+               update_reason_bogus(chase_reply, LDNS_EDE_DNSSEC_BOGUS);
                return;
        }
 
@@ -1492,6 +1525,10 @@ processInit(struct module_qstate* qstate, struct val_qstate* vq,
                verbose(VERB_ALGO, "restart count exceeded");
                return val_error(qstate, id);
        }
+
+       /* correctly initialize reason_bogus */
+       update_reason_bogus(vq->chase_reply, LDNS_EDE_DNSSEC_BOGUS);
+
        verbose(VERB_ALGO, "validator classification %s", 
                val_classification_to_string(subtype));
        if(subtype == VAL_CLASS_REFERRAL && 
@@ -1557,6 +1594,7 @@ processInit(struct module_qstate* qstate, struct val_qstate* vq,
                        verbose(VERB_QUERY, "unsigned parent zone denies"
                                " trust anchor, indeterminate");
                        vq->chase_reply->security = sec_status_indeterminate;
+                       update_reason_bogus(vq->chase_reply, LDNS_EDE_DNSSEC_INDETERMINATE);
                        vq->state = VAL_FINISHED_STATE;
                        return 1;
                }
@@ -1588,6 +1626,7 @@ processInit(struct module_qstate* qstate, struct val_qstate* vq,
        if(vq->key_entry == NULL && anchor == NULL) {
                /*response isn't under a trust anchor, so we cannot validate.*/
                vq->chase_reply->security = sec_status_indeterminate;
+               update_reason_bogus(vq->chase_reply, LDNS_EDE_DNSSEC_INDETERMINATE);
                /* go to finished state to cache this result */
                vq->state = VAL_FINISHED_STATE;
                return 1;
@@ -1633,16 +1672,25 @@ processInit(struct module_qstate* qstate, struct val_qstate* vq,
                vq->state = VAL_FINISHED_STATE;
                return 1;
        } else if(key_entry_isbad(vq->key_entry)) {
+               sldns_ede_code ede = LDNS_EDE_DNSSEC_BOGUS;
+
+               /* the key could have a more spefic EDE than just bogus */
+               if(key_entry_get_reason_bogus(vq->key_entry) != LDNS_EDE_NONE) {
+                       ede = key_entry_get_reason_bogus(vq->key_entry);
+               }
+
                /* key is bad, chain is bad, reply is bogus */
                errinf_dname(qstate, "key for validation", vq->key_entry->name);
-               errinf(qstate, "is marked as invalid");
+               errinf_ede(qstate, "is marked as invalid", ede);
                if(key_entry_get_reason(vq->key_entry)) {
                        errinf(qstate, "because of a previous");
                        errinf(qstate, key_entry_get_reason(vq->key_entry));
                }
+
                /* no retries, stop bothering the authority until timeout */
                vq->restart_count = ve->max_restart;
                vq->chase_reply->security = sec_status_bogus;
+               update_reason_bogus(vq->chase_reply, ede);
                vq->state = VAL_FINISHED_STATE;
                return 1;
        }
@@ -1713,9 +1761,10 @@ processFindKey(struct module_qstate* qstate, struct val_qstate* vq, int id)
                        vq->empty_DS_name) == 0) {
                        /* do not query for empty_DS_name again */
                        verbose(VERB_ALGO, "Cannot retrieve DS for signature");
-                       errinf(qstate, "no signatures");
+                       errinf_ede(qstate, "no signatures", LDNS_EDE_RRSIGS_MISSING);
                        errinf_origin(qstate, qstate->reply_origin);
                        vq->chase_reply->security = sec_status_bogus;
+                       update_reason_bogus(vq->chase_reply, LDNS_EDE_RRSIGS_MISSING);
                        vq->state = VAL_FINISHED_STATE;
                        return 1;
                }
@@ -1848,7 +1897,10 @@ processValidate(struct module_qstate* qstate, struct val_qstate* vq,
                        "of trust to keys for", vq->key_entry->name,
                        LDNS_RR_TYPE_DNSKEY, vq->key_entry->key_class);
                vq->chase_reply->security = sec_status_bogus;
-               errinf(qstate, "while building chain of trust");
+
+               update_reason_bogus(vq->chase_reply, LDNS_EDE_DNSKEY_MISSING);
+               errinf_ede(qstate, "while building chain of trust",
+                       LDNS_EDE_DNSKEY_MISSING);
                if(vq->restart_count >= ve->max_restart)
                        key_cache_insert(ve->kcache, vq->key_entry, qstate);
                return 1;
@@ -1861,9 +1913,10 @@ processValidate(struct module_qstate* qstate, struct val_qstate* vq,
                        "signer name", &vq->qchase);
                verbose(VERB_DETAIL, "Could not establish validation of "
                          "INSECURE status of unsigned response.");
-               errinf(qstate, "no signatures");
+               errinf_ede(qstate, "no signatures", LDNS_EDE_RRSIGS_MISSING);
                errinf_origin(qstate, qstate->reply_origin);
                vq->chase_reply->security = sec_status_bogus;
+               update_reason_bogus(vq->chase_reply, LDNS_EDE_RRSIGS_MISSING);
                return 1;
        }
        subtype = val_classify_response(qstate->query_flags, &qstate->qinfo,
@@ -2001,17 +2054,20 @@ processFinished(struct module_qstate* qstate, struct val_qstate* vq,
                vq->orig_msg->rep, vq->rrset_skip);
 
        /* store overall validation result in orig_msg */
-       if(vq->rrset_skip == 0)
+       if(vq->rrset_skip == 0) {
                vq->orig_msg->rep->security = vq->chase_reply->security;
-       else if(subtype != VAL_CLASS_REFERRAL ||
+               update_reason_bogus(vq->orig_msg->rep, vq->chase_reply->reason_bogus);
+       } else if(subtype != VAL_CLASS_REFERRAL ||
                vq->rrset_skip < vq->orig_msg->rep->an_numrrsets + 
                vq->orig_msg->rep->ns_numrrsets) {
                /* ignore sec status of additional section if a referral 
                 * type message skips there and
                 * use the lowest security status as end result. */
-               if(vq->chase_reply->security < vq->orig_msg->rep->security)
+               if(vq->chase_reply->security < vq->orig_msg->rep->security) {
                        vq->orig_msg->rep->security = 
                                vq->chase_reply->security;
+                       update_reason_bogus(vq->orig_msg->rep, vq->chase_reply->reason_bogus);
+               }
        }
 
        if(subtype == VAL_CLASS_REFERRAL) {
@@ -2034,6 +2090,7 @@ processFinished(struct module_qstate* qstate, struct val_qstate* vq,
                        &vq->rrset_skip)) {
                        verbose(VERB_ALGO, "validator: failed to chase CNAME");
                        vq->orig_msg->rep->security = sec_status_bogus;
+                       update_reason_bogus(vq->orig_msg->rep, LDNS_EDE_DNSSEC_BOGUS);
                } else {
                        /* restart process for new qchase at rrset_skip */
                        log_query_info(VERB_ALGO, "validator: chased to",
@@ -2247,9 +2304,11 @@ val_operate(struct module_qstate* qstate, enum module_ev event, int id,
                 * queries. If we get here, it is bogus or an internal error */
                if(qstate->qinfo.qclass == LDNS_RR_CLASS_ANY) {
                        verbose(VERB_ALGO, "cannot validate classANY: bogus");
-                       if(qstate->return_msg)
+                       if(qstate->return_msg) {
                                qstate->return_msg->rep->security =
                                        sec_status_bogus;
+                               update_reason_bogus(qstate->return_msg->rep, LDNS_EDE_DNSSEC_BOGUS);
+                       }
                        qstate->ext_state[id] = module_finished;
                        return;
                }
@@ -2304,6 +2363,7 @@ primeResponseToKE(struct ub_packed_rrset_key* dnskey_rrset,
        struct key_entry_key* kkey = NULL;
        enum sec_status sec = sec_status_unchecked;
        char* reason = NULL;
+       sldns_ede_code reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
        int downprot = qstate->env->cfg->harden_algo_downgrade;
 
        if(!dnskey_rrset) {
@@ -2311,7 +2371,7 @@ primeResponseToKE(struct ub_packed_rrset_key* dnskey_rrset,
                        "could not fetch DNSKEY rrset", 
                        ta->name, LDNS_RR_TYPE_DNSKEY, ta->dclass);
                if(qstate->env->cfg->harden_dnssec_stripped) {
-                       errinf(qstate, "no DNSKEY rrset");
+                       errinf_ede(qstate, "no DNSKEY rrset", LDNS_EDE_DNSKEY_MISSING);
                        kkey = key_entry_create_bad(qstate->region, ta->name,
                                ta->namelen, ta->dclass, BOGUS_KEY_TTL,
                                *qstate->env->now);
@@ -2327,7 +2387,7 @@ primeResponseToKE(struct ub_packed_rrset_key* dnskey_rrset,
        /* attempt to verify with trust anchor DS and DNSKEY */
        kkey = val_verify_new_DNSKEYs_with_ta(qstate->region, qstate->env, ve, 
                dnskey_rrset, ta->ds_rrset, ta->dnskey_rrset, downprot,
-               &reason, qstate);
+               &reason, &reason_bogus, qstate);
        if(!kkey) {
                log_err("out of memory: verifying prime TA");
                return NULL;
@@ -2346,7 +2406,7 @@ primeResponseToKE(struct ub_packed_rrset_key* dnskey_rrset,
                /* NOTE: in this case, we should probably reject the trust 
                 * anchor for longer, perhaps forever. */
                if(qstate->env->cfg->harden_dnssec_stripped) {
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, reason_bogus);
                        kkey = key_entry_create_bad(qstate->region, ta->name,
                                ta->namelen, ta->dclass, BOGUS_KEY_TTL,
                                *qstate->env->now);
@@ -2389,6 +2449,7 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
 {
        struct val_env* ve = (struct val_env*)qstate->env->modinfo[id];
        char* reason = NULL;
+       sldns_ede_code reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
        enum val_classification subtype;
        if(rcode != LDNS_RCODE_NOERROR) {
                char rc[16];
@@ -2397,7 +2458,8 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                /* errors here pretty much break validation */
                verbose(VERB_DETAIL, "DS response was error, thus bogus");
                errinf(qstate, rc);
-               errinf(qstate, "no DS");
+               errinf_ede(qstate, "no DS", LDNS_EDE_NETWORK_ERROR);
+
                goto return_bogus;
        }
 
@@ -2411,17 +2473,17 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                if(!ds) {
                        log_warn("internal error: POSITIVE DS response was "
                                "missing DS.");
-                       errinf(qstate, "no DS record");
+                       errinf_ede(qstate, "no DS record", LDNS_EDE_DNSSEC_BOGUS);
                        goto return_bogus;
                }
                /* Verify only returns BOGUS or SECURE. If the rrset is 
                 * bogus, then we are done. */
-               sec = val_verify_rrset_entry(qstate->env, ve, ds, 
-                       vq->key_entry, &reason, LDNS_SECTION_ANSWER, qstate);
+               sec = val_verify_rrset_entry(qstate->env, ve, ds,
+                       vq->key_entry, &reason, &reason_bogus, LDNS_SECTION_ANSWER, qstate);
                if(sec != sec_status_secure) {
                        verbose(VERB_DETAIL, "DS rrset in DS response did "
                                "not verify");
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, reason_bogus);
                        goto return_bogus;
                }
 
@@ -2430,6 +2492,9 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                if(!val_dsset_isusable(ds)) {
                        /* If they aren't usable, then we treat it like 
                         * there was no DS. */
+
+                       // @TODO add EDE Unsupported DS Digest Type
+
                        *ke = key_entry_create_null(qstate->region, 
                                qinfo->qname, qinfo->qname_len, qinfo->qclass, 
                                ub_packed_rrset_ttl(ds), *qstate->env->now);
@@ -2452,7 +2517,7 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                /* make sure there are NSECs or NSEC3s with signatures */
                if(!val_has_signed_nsecs(msg->rep, &reason)) {
                        verbose(VERB_ALGO, "no NSECs: %s", reason);
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, LDNS_EDE_NSEC_MISSING);
                        goto return_bogus;
                }
 
@@ -2493,7 +2558,7 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                sec = nsec3_prove_nods(qstate->env, ve, 
                        msg->rep->rrsets + msg->rep->an_numrrsets,
                        msg->rep->ns_numrrsets, qinfo, vq->key_entry, &reason,
-                       qstate);
+                       &reason_bogus, qstate);
                switch(sec) {
                        case sec_status_insecure:
                                /* case insecure also continues to unsigned
@@ -2515,7 +2580,7 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                        case sec_status_bogus:
                                verbose(VERB_DETAIL, "NSEC3s for the "
                                        "referral did not prove no DS.");
-                               errinf(qstate, reason);
+                               errinf_ede(qstate, reason, reason_bogus);
                                goto return_bogus;
                        case sec_status_unchecked:
                        default:
@@ -2554,7 +2619,7 @@ ds_response_to_ke(struct module_qstate* qstate, struct val_qstate* vq,
                        goto return_bogus;
                }
                sec = val_verify_rrset_entry(qstate->env, ve, cname, 
-                       vq->key_entry, &reason, LDNS_SECTION_ANSWER, qstate);
+                       vq->key_entry, &reason, NULL, LDNS_SECTION_ANSWER, qstate);
                if(sec == sec_status_secure) {
                        verbose(VERB_ALGO, "CNAME validated, "
                                "proof that DS does not exist");
@@ -2685,6 +2750,7 @@ process_dnskey_response(struct module_qstate* qstate, struct val_qstate* vq,
        struct ub_packed_rrset_key* dnskey = NULL;
        int downprot;
        char* reason = NULL;
+       sldns_ede_code reason_bogus = LDNS_EDE_DNSSEC_BOGUS;
 
        if(rcode == LDNS_RCODE_NOERROR)
                dnskey = reply_find_answer_rrset(qinfo, msg->rep);
@@ -2693,6 +2759,7 @@ process_dnskey_response(struct module_qstate* qstate, struct val_qstate* vq,
                /* bad response */
                verbose(VERB_DETAIL, "Missing DNSKEY RRset in response to "
                        "DNSKEY query.");
+
                if(vq->restart_count < ve->max_restart) {
                        val_blacklist(&vq->chain_blacklist, qstate->region,
                                origin, 1);
@@ -2707,7 +2774,7 @@ process_dnskey_response(struct module_qstate* qstate, struct val_qstate* vq,
                        log_err("alloc failure in missing dnskey response");
                        /* key_entry is NULL for failure in Validate */
                }
-               errinf(qstate, "No DNSKEY record");
+               errinf_ede(qstate, "No DNSKEY record", LDNS_EDE_DNSKEY_MISSING);
                errinf_origin(qstate, origin);
                errinf_dname(qstate, "for key", qinfo->qname);
                vq->state = VAL_VALIDATE_STATE;
@@ -2721,7 +2788,7 @@ process_dnskey_response(struct module_qstate* qstate, struct val_qstate* vq,
        }
        downprot = qstate->env->cfg->harden_algo_downgrade;
        vq->key_entry = val_verify_new_DNSKEYs(qstate->region, qstate->env,
-               ve, dnskey, vq->ds_rrset, downprot, &reason, qstate);
+               ve, dnskey, vq->ds_rrset, downprot, &reason, &reason_bogus, qstate);
 
        if(!vq->key_entry) {
                log_err("out of memory in verify new DNSKEYs");
@@ -2742,7 +2809,7 @@ process_dnskey_response(struct module_qstate* qstate, struct val_qstate* vq,
                        }
                        verbose(VERB_DETAIL, "Did not match a DS to a DNSKEY, "
                                "thus bogus.");
-                       errinf(qstate, reason);
+                       errinf_ede(qstate, reason, reason_bogus);
                        errinf_origin(qstate, origin);
                        errinf_dname(qstate, "for key", qinfo->qname);
                }

diff --git a/sbin/unwind/libunbound/validator/validator.h b/sbin/unwind/libunbound/validator/validator.h
index a97eab2..694e4c8 100644 (file)
--- a/sbin/unwind/libunbound/validator/validator.h
+++ b/sbin/unwind/libunbound/validator/validator.h
@@ -93,7 +93,7 @@ struct val_env {
        int32_t skew_max;
 
        /** max number of query restarts, number of IPs to probe */
-       int32_t max_restart;
+       int max_restart;
 
        /** TTL for bogus data; used instead of untrusted TTL from data.
         * Bogus data will not be verified more often than this interval.