]> git.cameronkatri.com Git - mandoc.git/blobdiff - roff.c
Three bugfixes related to the closing of conditional blocks:
[mandoc.git] / roff.c
diff --git a/roff.c b/roff.c
index b2ac8e38155b2f23b2cf3221ff5ff1ffb504d836..0772d8ab9d28287cea7652ed40d8fbd7cfc4cda8 100644 (file)
--- a/roff.c
+++ b/roff.c
-/* $Id: roff.c,v 1.63 2008/12/10 16:03:12 kristaps Exp $ */
+/*     $Id: roff.c,v 1.195 2014/03/07 02:22:05 schwarze Exp $ */
 /*
- * Copyright (c) 2008 Kristaps Dzonsons <kristaps@kth.se>
+ * Copyright (c) 2010, 2011, 2012 Kristaps Dzonsons <kristaps@bsd.lv>
+ * Copyright (c) 2010-2014 Ingo Schwarze <schwarze@openbsd.org>
  *
  * Permission to use, copy, modify, and distribute this software for any
- * purpose with or without fee is hereby granted, provided that the
- * above copyright notice and this permission notice appear in all
- * copies.
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
  *
- * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL
- * WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
- * WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
- * AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
- * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
- * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHORS DISCLAIM ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
-#include <sys/param.h>
-#include <sys/types.h>
+#ifdef HAVE_CONFIG_H
+#include "config.h"
+#endif
 
 #include <assert.h>
 #include <ctype.h>
-#include <err.h>
-#include <stdarg.h>
-#include <stdlib.h>
 #include <stdio.h>
+#include <stdlib.h>
 #include <string.h>
-#include <time.h>
 
-#include "private.h"
-#include "roff.h"
+#include "mandoc.h"
+#include "libroff.h"
+#include "libmandoc.h"
+
+/* Maximum number of nested if-else conditionals. */
+#define        RSTACK_MAX      128
+
+/* Maximum number of string expansions per line, to break infinite loops. */
+#define        EXPAND_LIMIT    1000
+
+enum   rofft {
+       ROFF_ad,
+       ROFF_am,
+       ROFF_ami,
+       ROFF_am1,
+       ROFF_as,
+       ROFF_cc,
+       ROFF_ce,
+       ROFF_de,
+       ROFF_dei,
+       ROFF_de1,
+       ROFF_ds,
+       ROFF_el,
+       ROFF_fam,
+       ROFF_hw,
+       ROFF_hy,
+       ROFF_ie,
+       ROFF_if,
+       ROFF_ig,
+       ROFF_it,
+       ROFF_ne,
+       ROFF_nh,
+       ROFF_nr,
+       ROFF_ns,
+       ROFF_ps,
+       ROFF_rm,
+       ROFF_so,
+       ROFF_ta,
+       ROFF_tr,
+       ROFF_Dd,
+       ROFF_TH,
+       ROFF_TS,
+       ROFF_TE,
+       ROFF_T_,
+       ROFF_EQ,
+       ROFF_EN,
+       ROFF_cblock,
+       ROFF_USERDEF,
+       ROFF_MAX
+};
 
-/* FIXME: First letters of quoted-text interpreted in rofffindtok. */
-/* FIXME: `No' not implemented. */
-/* TODO: warn if Pp occurs before/after Sh etc. (see mdoc.samples). */
-/* TODO: warn about empty lists. */
-/* TODO: (warn) some sections need specific elements. */
-/* TODO: (warn) NAME section has particular order. */
-/* TODO: macros with a set number of arguments? */
-/* FIXME: Bl -diag supposed to ignore callable children. */
+enum   roffrule {
+       ROFFRULE_DENY,
+       ROFFRULE_ALLOW
+};
 
-struct roffnode {
-       int               tok;          /* Token id. */
-       struct roffnode  *parent;       /* Parent (or NULL). */
+/*
+ * An incredibly-simple string buffer.
+ */
+struct roffstr {
+       char            *p; /* nil-terminated buffer */
+       size_t           sz; /* saved strlen(p) */
 };
 
-enum   rofferr {
-       ERR_ARGEQ1,                     /* Macro requires arg == 1. */
-       ERR_ARGEQ0,                     /* Macro requires arg == 0. */
-       ERR_ARGGE1,                     /* Macro requires arg >= 1. */
-       ERR_ARGGE2,                     /* Macro requires arg >= 2. */
-       ERR_ARGLEN,                     /* Macro argument too long. */
-       ERR_BADARG,                     /* Macro has bad arg. */
-       ERR_ARGMNY,                     /* Too many macro arguments. */
-       ERR_NOTSUP,                     /* Macro not supported. */
-       ERR_DEPREC,                     /* Macro deprecated. */
-       ERR_PR_OOO,                     /* Prelude macro bad order. */
-       ERR_PR_REP,                     /* Prelude macro repeated. */
-       ERR_NOT_PR,                     /* Not allowed in prelude. */
-       WRN_SECORD                      /* Sections out-of-order. */
+/*
+ * A key-value roffstr pair as part of a singly-linked list.
+ */
+struct roffkv {
+       struct roffstr   key;
+       struct roffstr   val;
+       struct roffkv   *next; /* next in list */
 };
 
-struct rofftree {
-       struct roffnode  *last;                 /* Last parsed node. */
-       char             *cur;                  /* Line start. */
-       struct tm         tm;                   /* `Dd' results. */
-       char              name[64];             /* `Nm' results. */
-       char              os[64];               /* `Os' results. */
-       char              title[64];            /* `Dt' results. */
-       enum roffmsec     section;
-       enum roffvol      volume;
-       struct roffcb     cb;                   /* Callbacks. */
-       void             *arg;                  /* Callbacks' arg. */
-       int               csec;                 /* Current section. */
-       int               asec;                 /* Thus-far sections. */
+/*
+ * A single number register as part of a singly-linked list.
+ */
+struct roffreg {
+       struct roffstr   key;
+       int              val;
+       struct roffreg  *next;
 };
 
-static struct roffnode  *roffnode_new(int, struct rofftree *);
-static void              roffnode_free(struct rofftree *);
-static int               roff_warn(const struct rofftree *, 
-                               const char *, char *, ...);
-static int               roff_warnp(const struct rofftree *, 
-                               const char *, int, enum rofferr);
-static int               roff_err(const struct rofftree *, 
-                               const char *, char *, ...);
-static int               roff_errp(const struct rofftree *, 
-                               const char *, int, enum rofferr);
-static int               roffpurgepunct(struct rofftree *, char **);
-static int               roffscan(int, const int *);
-static int               rofffindtok(const char *);
-static int               rofffindarg(const char *);
-static int               rofffindcallable(const char *);
-static int               roffispunct(const char *);
-static int               roffchecksec(struct rofftree *, 
-                               const char *, int, int);
-static int               roffargs(const struct rofftree *,
-                               int, char *, char **);
-static int               roffargok(int, int);
-static int               roffnextopt(const struct rofftree *,
-                               int, char ***, char **);
-static int               roffparseopts(struct rofftree *, int, 
-                               char ***, int *, char **);
-static int               roffcall(struct rofftree *, int, char **);
-static int               roffexit(struct rofftree *, int);
-static int               roffparse(struct rofftree *, char *);
-static int               textparse(struct rofftree *, char *);
-static int               roffdata(struct rofftree *, int, char *);
-static int               roffspecial(struct rofftree *, int, 
-                               const char *, const int *,
-                               const char **, size_t, char **);
-static int               roffsetname(struct rofftree *, char **);
-
-#ifdef __linux__ 
-extern size_t            strlcat(char *, const char *, size_t);
-extern size_t            strlcpy(char *, const char *, size_t);
-extern int               vsnprintf(char *, size_t, 
-                               const char *, va_list);
-extern char             *strptime(const char *, const char *,
-                               struct tm *);
-#endif
+struct roff {
+       enum mparset     parsetype; /* requested parse type */
+       struct mparse   *parse; /* parse point */
+       int              quick; /* skip standard macro deletion */
+       struct roffnode *last; /* leaf of stack */
+       enum roffrule    rstack[RSTACK_MAX]; /* stack of !`ie' rules */
+       char             control; /* control character */
+       int              rstackpos; /* position in rstack */
+       struct roffreg  *regtab; /* number registers */
+       struct roffkv   *strtab; /* user-defined strings & macros */
+       struct roffkv   *xmbtab; /* multi-byte trans table (`tr') */
+       struct roffstr  *xtab; /* single-byte trans table (`tr') */
+       const char      *current_string; /* value of last called user macro */
+       struct tbl_node *first_tbl; /* first table parsed */
+       struct tbl_node *last_tbl; /* last table parsed */
+       struct tbl_node *tbl; /* current table being parsed */
+       struct eqn_node *last_eqn; /* last equation parsed */
+       struct eqn_node *first_eqn; /* first equation parsed */
+       struct eqn_node *eqn; /* current equation being parsed */
+};
 
-int
-roff_free(struct rofftree *tree, int flush)
-{
-       int              error, t;
-       struct roffnode *n;
+struct roffnode {
+       enum rofft       tok; /* type of node */
+       struct roffnode *parent; /* up one in stack */
+       int              line; /* parse line */
+       int              col; /* parse col */
+       char            *name; /* node name, e.g. macro name */
+       char            *end; /* end-rules: custom token */
+       int              endspan; /* end-rules: next-line or infty */
+       enum roffrule    rule; /* current evaluation rule */
+};
 
-       error = 0;
+#define        ROFF_ARGS        struct roff *r, /* parse ctx */ \
+                        enum rofft tok, /* tok of macro */ \
+                        char **bufp, /* input buffer */ \
+                        size_t *szp, /* size of input buffer */ \
+                        int ln, /* parse line */ \
+                        int ppos, /* original pos in buffer */ \
+                        int pos, /* current pos in buffer */ \
+                        int *offs /* reset offset of buffer data */
+
+typedef        enum rofferr (*roffproc)(ROFF_ARGS);
+
+struct roffmac {
+       const char      *name; /* macro name */
+       roffproc         proc; /* process new macro */
+       roffproc         text; /* process as child text of macro */
+       roffproc         sub; /* process as child of macro */
+       int              flags;
+#define        ROFFMAC_STRUCT  (1 << 0) /* always interpret */
+       struct roffmac  *next;
+};
 
-       if ( ! flush)
-               goto end;
+struct predef {
+       const char      *name; /* predefined input name */
+       const char      *str; /* replacement symbol */
+};
 
-       error = 1;
+#define        PREDEF(__name, __str) \
+       { (__name), (__str) },
 
-       if ( ! (ROFFSec_NAME & tree->asec)) {
-               (void)roff_err(tree, NULL, "missing `NAME' section");
-               goto end;
-       } else if ( ! (ROFFSec_NMASK & tree->asec))
-               (void)roff_warn(tree, NULL, "missing suggested `NAME', "
-                               "`SYNOPSIS', `DESCRIPTION' sections");
+static enum rofft       roffhash_find(const char *, size_t);
+static void             roffhash_init(void);
+static void             roffnode_cleanscope(struct roff *);
+static void             roffnode_pop(struct roff *);
+static void             roffnode_push(struct roff *, enum rofft,
+                               const char *, int, int);
+static enum rofferr     roff_block(ROFF_ARGS);
+static enum rofferr     roff_block_text(ROFF_ARGS);
+static enum rofferr     roff_block_sub(ROFF_ARGS);
+static enum rofferr     roff_cblock(ROFF_ARGS);
+static enum rofferr     roff_cc(ROFF_ARGS);
+static void             roff_ccond(struct roff *, int, int);
+static enum rofferr     roff_cond(ROFF_ARGS);
+static enum rofferr     roff_cond_text(ROFF_ARGS);
+static enum rofferr     roff_cond_sub(ROFF_ARGS);
+static enum rofferr     roff_ds(ROFF_ARGS);
+static enum roffrule    roff_evalcond(const char *, int *);
+static void             roff_free1(struct roff *);
+static void             roff_freereg(struct roffreg *);
+static void             roff_freestr(struct roffkv *);
+static char            *roff_getname(struct roff *, char **, int, int);
+static int              roff_getnum(const char *, int *, int *);
+static int              roff_getop(const char *, int *, char *);
+static int              roff_getregn(const struct roff *,
+                               const char *, size_t);
+static int              roff_getregro(const char *name);
+static const char      *roff_getstrn(const struct roff *, 
+                               const char *, size_t);
+static enum rofferr     roff_it(ROFF_ARGS);
+static enum rofferr     roff_line_ignore(ROFF_ARGS);
+static enum rofferr     roff_nr(ROFF_ARGS);
+static void             roff_openeqn(struct roff *, const char *,
+                               int, int, const char *);
+static enum rofft       roff_parse(struct roff *, const char *, int *);
+static enum rofferr     roff_parsetext(char **, size_t *, int, int *);
+static enum rofferr     roff_res(struct roff *, 
+                               char **, size_t *, int, int);
+static enum rofferr     roff_rm(ROFF_ARGS);
+static void             roff_setstr(struct roff *,
+                               const char *, const char *, int);
+static void             roff_setstrn(struct roffkv **, const char *, 
+                               size_t, const char *, size_t, int);
+static enum rofferr     roff_so(ROFF_ARGS);
+static enum rofferr     roff_tr(ROFF_ARGS);
+static enum rofferr     roff_Dd(ROFF_ARGS);
+static enum rofferr     roff_TH(ROFF_ARGS);
+static enum rofferr     roff_TE(ROFF_ARGS);
+static enum rofferr     roff_TS(ROFF_ARGS);
+static enum rofferr     roff_EQ(ROFF_ARGS);
+static enum rofferr     roff_EN(ROFF_ARGS);
+static enum rofferr     roff_T_(ROFF_ARGS);
+static enum rofferr     roff_userdef(ROFF_ARGS);
+
+/* See roffhash_find() */
+
+#define        ASCII_HI         126
+#define        ASCII_LO         33
+#define        HASHWIDTH       (ASCII_HI - ASCII_LO + 1)
+
+static struct roffmac  *hash[HASHWIDTH];
+
+static struct roffmac   roffs[ROFF_MAX] = {
+       { "ad", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "am", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "ami", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "am1", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "as", roff_ds, NULL, NULL, 0, NULL },
+       { "cc", roff_cc, NULL, NULL, 0, NULL },
+       { "ce", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "de", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "dei", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "de1", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "ds", roff_ds, NULL, NULL, 0, NULL },
+       { "el", roff_cond, roff_cond_text, roff_cond_sub, ROFFMAC_STRUCT, NULL },
+       { "fam", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "hw", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "hy", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "ie", roff_cond, roff_cond_text, roff_cond_sub, ROFFMAC_STRUCT, NULL },
+       { "if", roff_cond, roff_cond_text, roff_cond_sub, ROFFMAC_STRUCT, NULL },
+       { "ig", roff_block, roff_block_text, roff_block_sub, 0, NULL },
+       { "it", roff_it, NULL, NULL, 0, NULL },
+       { "ne", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "nh", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "nr", roff_nr, NULL, NULL, 0, NULL },
+       { "ns", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "ps", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "rm", roff_rm, NULL, NULL, 0, NULL },
+       { "so", roff_so, NULL, NULL, 0, NULL },
+       { "ta", roff_line_ignore, NULL, NULL, 0, NULL },
+       { "tr", roff_tr, NULL, NULL, 0, NULL },
+       { "Dd", roff_Dd, NULL, NULL, 0, NULL },
+       { "TH", roff_TH, NULL, NULL, 0, NULL },
+       { "TS", roff_TS, NULL, NULL, 0, NULL },
+       { "TE", roff_TE, NULL, NULL, 0, NULL },
+       { "T&", roff_T_, NULL, NULL, 0, NULL },
+       { "EQ", roff_EQ, NULL, NULL, 0, NULL },
+       { "EN", roff_EN, NULL, NULL, 0, NULL },
+       { ".", roff_cblock, NULL, NULL, 0, NULL },
+       { NULL, roff_userdef, NULL, NULL, 0, NULL },
+};
 
-       for (n = tree->last; n; n = n->parent) {
-               if (0 != tokens[n->tok].ctx) 
-                       continue;
-               (void)roff_err(tree, NULL, "closing explicit scope "
-                               "`%s'", toknames[n->tok]);
-               goto end;
-       }
+const  char *const __mdoc_reserved[] = {
+       "Ac", "Ad", "An", "Ao", "Ap", "Aq", "Ar", "At",
+       "Bc", "Bd", "Bf", "Bk", "Bl", "Bo", "Bq",
+       "Brc", "Bro", "Brq", "Bsx", "Bt", "Bx",
+       "Cd", "Cm", "Db", "Dc", "Dd", "Dl", "Do", "Dq",
+       "Ds", "Dt", "Dv", "Dx", "D1",
+       "Ec", "Ed", "Ef", "Ek", "El", "Em", "em",
+       "En", "Eo", "Eq", "Er", "Es", "Ev", "Ex",
+       "Fa", "Fc", "Fd", "Fl", "Fn", "Fo", "Fr", "Ft", "Fx",
+       "Hf", "Ic", "In", "It", "Lb", "Li", "Lk", "Lp", "LP",
+       "Me", "Ms", "Mt", "Nd", "Nm", "No", "Ns", "Nx",
+       "Oc", "Oo", "Op", "Os", "Ot", "Ox",
+       "Pa", "Pc", "Pf", "Po", "Pp", "PP", "pp", "Pq",
+       "Qc", "Ql", "Qo", "Qq", "Or", "Rd", "Re", "Rs", "Rv",
+       "Sc", "Sf", "Sh", "SH", "Sm", "So", "Sq",
+       "Ss", "St", "Sx", "Sy",
+       "Ta", "Tn", "Ud", "Ux", "Va", "Vt", "Xc", "Xo", "Xr",
+       "%A", "%B", "%D", "%I", "%J", "%N", "%O",
+       "%P", "%Q", "%R", "%T", "%U", "%V",
+       NULL
+};
 
-       while (tree->last) {
-               t = tree->last->tok;
-               if ( ! roffexit(tree, t))
-                       goto end;
-       }
+const  char *const __man_reserved[] = {
+       "AT", "B", "BI", "BR", "BT", "DE", "DS", "DT",
+       "EE", "EN", "EQ", "EX", "HF", "HP", "I", "IB", "IP", "IR",
+       "LP", "ME", "MT", "OP", "P", "PD", "PP", "PT",
+       "R", "RB", "RE", "RI", "RS", "SB", "SH", "SM", "SS", "SY",
+       "TE", "TH", "TP", "TQ", "TS", "T&", "UC", "UE", "UR", "YS",
+       NULL
+};
 
-       if ( ! (*tree->cb.rofftail)(tree->arg, &tree->tm,
-                               tree->os, tree->title, 
-                               tree->section, tree->volume))
-               goto end;
+/* Array of injected predefined strings. */
+#define        PREDEFS_MAX      38
+static const struct predef predefs[PREDEFS_MAX] = {
+#include "predefs.in"
+};
 
-       error = 0;
+/* See roffhash_find() */
+#define        ROFF_HASH(p)    (p[0] - ASCII_LO)
 
-end:
+static int      roffit_lines;  /* number of lines to delay */
+static char    *roffit_macro;  /* nil-terminated macro line */
 
-       while (tree->last) 
-               roffnode_free(tree);
+static void
+roffhash_init(void)
+{
+       struct roffmac   *n;
+       int               buc, i;
 
-       free(tree);
+       for (i = 0; i < (int)ROFF_USERDEF; i++) {
+               assert(roffs[i].name[0] >= ASCII_LO);
+               assert(roffs[i].name[0] <= ASCII_HI);
 
-       return(error ? 0 : 1);
-}
+               buc = ROFF_HASH(roffs[i].name);
 
+               if (NULL != (n = hash[buc])) {
+                       for ( ; n->next; n = n->next)
+                               /* Do nothing. */ ;
+                       n->next = &roffs[i];
+               } else
+                       hash[buc] = &roffs[i];
+       }
+}
 
-struct rofftree *
-roff_alloc(const struct roffcb *cb, void *args)
+/*
+ * Look up a roff token by its name.  Returns ROFF_MAX if no macro by
+ * the nil-terminated string name could be found.
+ */
+static enum rofft
+roffhash_find(const char *p, size_t s)
 {
-       struct rofftree *tree;
+       int              buc;
+       struct roffmac  *n;
 
-       assert(args);
-       assert(cb);
+       /*
+        * libroff has an extremely simple hashtable, for the time
+        * being, which simply keys on the first character, which must
+        * be printable, then walks a chain.  It works well enough until
+        * optimised.
+        */
 
-       if (NULL == (tree = calloc(1, sizeof(struct rofftree))))
-               err(1, "calloc");
+       if (p[0] < ASCII_LO || p[0] > ASCII_HI)
+               return(ROFF_MAX);
 
-       tree->arg = args;
-       tree->section = ROFF_MSEC_MAX;
+       buc = ROFF_HASH(p);
 
-       (void)memcpy(&tree->cb, cb, sizeof(struct roffcb));
+       if (NULL == (n = hash[buc]))
+               return(ROFF_MAX);
+       for ( ; n; n = n->next)
+               if (0 == strncmp(n->name, p, s) && '\0' == n->name[(int)s])
+                       return((enum rofft)(n - roffs));
 
-       return(tree);
+       return(ROFF_MAX);
 }
 
 
-int
-roff_engine(struct rofftree *tree, char *buf)
+/*
+ * Pop the current node off of the stack of roff instructions currently
+ * pending.
+ */
+static void
+roffnode_pop(struct roff *r)
 {
+       struct roffnode *p;
 
-       tree->cur = buf;
-       assert(buf);
-
-       if (0 == *buf) 
-               return(roff_err(tree, buf, "blank line"));
-       else if ('.' != *buf)
-               return(textparse(tree, buf));
+       assert(r->last);
+       p = r->last; 
 
-       return(roffparse(tree, buf));
+       r->last = r->last->parent;
+       free(p->name);
+       free(p->end);
+       free(p);
 }
 
 
-static int
-textparse(struct rofftree *tree, char *buf)
+/*
+ * Push a roff node onto the instruction stack.  This must later be
+ * removed with roffnode_pop().
+ */
+static void
+roffnode_push(struct roff *r, enum rofft tok, const char *name,
+               int line, int col)
 {
-       char            *bufp;
-
-       /* TODO: literal parsing. */
+       struct roffnode *p;
 
-       if ( ! (ROFFSec_NAME & tree->asec))
-               return(roff_err(tree, buf, "data before `NAME' section"));
+       p = mandoc_calloc(1, sizeof(struct roffnode));
+       p->tok = tok;
+       if (name)
+               p->name = mandoc_strdup(name);
+       p->parent = r->last;
+       p->line = line;
+       p->col = col;
+       p->rule = p->parent ? p->parent->rule : ROFFRULE_DENY;
 
-       /* LINTED */
-       while (*buf) {
-               while (*buf && isspace(*buf))
-                       buf++;
+       r->last = p;
+}
 
-               if (0 == *buf)
-                       break;
 
-               bufp = buf++;
+static void
+roff_free1(struct roff *r)
+{
+       struct tbl_node *tbl;
+       struct eqn_node *e;
+       int              i;
 
-               while (*buf && ! isspace(*buf))
-                       buf++;
+       while (NULL != (tbl = r->first_tbl)) {
+               r->first_tbl = tbl->next;
+               tbl_free(tbl);
+       }
 
-               if (0 != *buf) {
-                       *buf++ = 0;
-                       if ( ! roffdata(tree, 1, bufp))
-                               return(0);
-                       continue;
-               }
+       r->first_tbl = r->last_tbl = r->tbl = NULL;
 
-               if ( ! roffdata(tree, 1, bufp))
-                       return(0);
-               break;
+       while (NULL != (e = r->first_eqn)) {
+               r->first_eqn = e->next;
+               eqn_free(e);
        }
 
-       return(1);
-}
+       r->first_eqn = r->last_eqn = r->eqn = NULL;
 
+       while (r->last)
+               roffnode_pop(r);
 
-static int
-roffargs(const struct rofftree *tree, 
-               int tok, char *buf, char **argv)
-{
-       int              i;
-       char            *p;
+       roff_freestr(r->strtab);
+       roff_freestr(r->xmbtab);
 
-       assert(tok >= 0 && tok < ROFF_MAX);
-       assert('.' == *buf);
+       r->strtab = r->xmbtab = NULL;
 
-       p = buf;
+       roff_freereg(r->regtab);
 
-       /*
-        * This is an ugly little loop.  It parses a line into
-        * space-delimited tokens.  If a quote mark is encountered, a
-        * token is alloted the entire quoted text.  If whitespace is
-        * escaped, it's included in the prior alloted token.
-        */
+       r->regtab = NULL;
 
-       /* LINTED */
-       for (i = 0; *buf && i < ROFF_MAXLINEARG; i++) {
-               if ('\"' == *buf) {
-                       argv[i] = ++buf;
-                       while (*buf && '\"' != *buf)
-                               buf++;
-                       if (0 == *buf)
-                               return(roff_err(tree, argv[i], 
-                                       "unclosed quote in arg list"));
-               } else { 
-                       argv[i] = buf++;
-                       while (*buf) {
-                               if ( ! isspace(*buf)) {
-                                       buf++;
-                                       continue;
-                               }
-                               if (*(buf - 1) == '\\') {
-                                       buf++;
-                                       continue;
-                               }
-                               break;
-                       }
-                       if (0 == *buf)
-                               continue;
-               }
-               *buf++ = 0;
-               while (*buf && isspace(*buf))
-                       buf++;
-       }
-
-       assert(i > 0);
-       if (ROFF_MAXLINEARG == i && *buf)
-               return(roff_err(tree, p, "too many args"));
+       if (r->xtab)
+               for (i = 0; i < 128; i++)
+                       free(r->xtab[i].p);
 
-       argv[i] = NULL;
-       return(1);
+       free(r->xtab);
+       r->xtab = NULL;
 }
 
-
-static int
-roffscan(int tok, const int *tokv)
+void
+roff_reset(struct roff *r)
 {
 
-       if (NULL == tokv)
-               return(1);
+       roff_free1(r);
+       r->control = 0;
+}
 
-       for ( ; ROFF_MAX != *tokv; tokv++) 
-               if (tok == *tokv)
-                       return(1);
 
-       return(0);
+void
+roff_free(struct roff *r)
+{
+
+       roff_free1(r);
+       free(r);
 }
 
 
-static int
-roffparse(struct rofftree *tree, char *buf)
+struct roff *
+roff_alloc(enum mparset type, struct mparse *parse, int quick)
 {
-       int               tok, t;
-       struct roffnode  *n;
-       char             *argv[ROFF_MAXLINEARG];
-       char            **argvp;
-
-       if (0 != *buf && 0 != *(buf + 1) && 0 != *(buf + 2))
-               if (0 == strncmp(buf, ".\\\"", 3))
-                       return(1);
-
-       if (ROFF_MAX == (tok = rofffindtok(buf + 1))) 
-               return(roff_err(tree, buf, "bogus line macro"));
-       else if ( ! roffargs(tree, tok, buf, argv)) 
-               return(0);
+       struct roff     *r;
 
-       argvp = (char **)argv;
-
-       /* 
-        * Prelude macros break some assumptions, so branch now. 
-        */
+       r = mandoc_calloc(1, sizeof(struct roff));
+       r->parsetype = type;
+       r->parse = parse;
+       r->quick = quick;
+       r->rstackpos = -1;
        
-       if ( ! (ROFFSec_PR_Dd & tree->asec)) {
-               assert(NULL == tree->last);
-               return(roffcall(tree, tok, argvp));
-       } 
+       roffhash_init();
 
-       /* 
-        * First check that our possible parents and parent's possible
-        * children are satisfied.  
-        */
+       return(r);
+}
 
-       if (tree->last && ! roffscan
-                       (tree->last->tok, tokens[tok].parents))
-               return(roff_err(tree, *argvp, "`%s' has invalid "
-                                       "parent `%s'", toknames[tok], 
-                                       toknames[tree->last->tok]));
+/*
+ * In the current line, expand user-defined strings ("\*")
+ * and references to number registers ("\n").
+ * Also check the syntax of other escape sequences.
+ */
+static enum rofferr
+roff_res(struct roff *r, char **bufp, size_t *szp, int ln, int pos)
+{
+       char             ubuf[12]; /* buffer to print the number */
+       const char      *stesc; /* start of an escape sequence ('\\') */
+       const char      *stnam; /* start of the name, after "[(*" */
+       const char      *cp;    /* end of the name, e.g. before ']' */
+       const char      *res;   /* the string to be substituted */
+       char            *nbuf;  /* new buffer to copy bufp to */
+       size_t           nsz;   /* size of the new buffer */
+       size_t           maxl;  /* expected length of the escape name */
+       size_t           naml;  /* actual length of the escape name */
+       int              expand_count;  /* to avoid infinite loops */
+
+       expand_count = 0;
+
+again:
+       cp = *bufp + pos;
+       while (NULL != (cp = strchr(cp, '\\'))) {
+               stesc = cp++;
 
-       if (tree->last && ! roffscan
-                       (tok, tokens[tree->last->tok].children))
-               return(roff_err(tree, *argvp, "`%s' has invalid "
-                                       "child `%s'", toknames[tok],
-                                       toknames[tree->last->tok]));
+               /*
+                * The second character must be an asterisk or an n.
+                * If it isn't, skip it anyway:  It is escaped,
+                * so it can't start another escape sequence.
+                */
 
-       /*
-        * Branch if we're not a layout token.
-        */
+               if ('\0' == *cp)
+                       return(ROFF_CONT);
 
-       if (ROFF_LAYOUT != tokens[tok].type)
-               return(roffcall(tree, tok, argvp));
-       if (0 == tokens[tok].ctx)
-               return(roffcall(tree, tok, argvp));
+               switch (*cp) {
+               case ('*'):
+                       res = NULL;
+                       break;
+               case ('n'):
+                       res = ubuf;
+                       break;
+               default:
+                       if (ESCAPE_ERROR != mandoc_escape(&cp, NULL, NULL))
+                               continue;
+                       mandoc_msg
+                               (MANDOCERR_BADESCAPE, r->parse, 
+                                ln, (int)(stesc - *bufp), NULL);
+                       return(ROFF_CONT);
+               }
 
-       /*
-        * First consider implicit-end tags, like as follows:
-        *      .Sh SECTION 1
-        *      .Sh SECTION 2
-        * In this, we want to close the scope of the NAME section.  If
-        * there's an intermediary implicit-end tag, such as
-        *      .Sh SECTION 1
-        *      .Ss Subsection 1
-        *      .Sh SECTION 2
-        * then it must be closed as well.
-        */
+               cp++;
 
-       if (tok == tokens[tok].ctx) {
-               /* 
-                * First search up to the point where we must close.
-                * If one doesn't exist, then we can open a new scope.
+               /*
+                * The third character decides the length
+                * of the name of the string or register.
+                * Save a pointer to the name.
                 */
 
-               for (n = tree->last; n; n = n->parent) {
-                       assert(0 == tokens[n->tok].ctx ||
-                                       n->tok == tokens[n->tok].ctx);
-                       if (n->tok == tok)
-                               break;
-                       if (ROFF_SHALLOW & tokens[tok].flags) {
-                               n = NULL;
-                               break;
+               switch (*cp) {
+               case ('\0'):
+                       return(ROFF_CONT);
+               case ('('):
+                       cp++;
+                       maxl = 2;
+                       break;
+               case ('['):
+                       cp++;
+                       maxl = 0;
+                       break;
+               default:
+                       maxl = 1;
+                       break;
+               }
+               stnam = cp;
+
+               /* Advance to the end of the name. */
+
+               for (naml = 0; 0 == maxl || naml < maxl; naml++, cp++) {
+                       if ('\0' == *cp) {
+                               mandoc_msg
+                                       (MANDOCERR_BADESCAPE, 
+                                        r->parse, ln, 
+                                        (int)(stesc - *bufp), NULL);
+                               return(ROFF_CONT);
                        }
-                       if (tokens[n->tok].ctx == n->tok)
-                               continue;
-                       return(roff_err(tree, *argv, "`%s' breaks "
-                                               "scope of prior`%s'",
-                                               toknames[tok], 
-                                               toknames[n->tok]));
+                       if (0 == maxl && ']' == *cp)
+                               break;
                }
 
                /*
-                * Create a new scope, as no previous one exists to
-                * close out.
+                * Retrieve the replacement string; if it is
+                * undefined, resume searching for escapes.
                 */
 
-               if (NULL == n)
-                       return(roffcall(tree, tok, argvp));
+               if (NULL == res)
+                       res = roff_getstrn(r, stnam, naml);
+               else
+                       snprintf(ubuf, sizeof(ubuf), "%d",
+                           roff_getregn(r, stnam, naml));
+
+               if (NULL == res) {
+                       mandoc_msg
+                               (MANDOCERR_BADESCAPE, r->parse, 
+                                ln, (int)(stesc - *bufp), NULL);
+                       res = "";
+               }
 
-               /* 
-                * Close out all intermediary scoped blocks, then hang
-                * the current scope from our predecessor's parent.
-                */
+               /* Replace the escape sequence by the string. */
+
+               pos = stesc - *bufp;
+
+               nsz = *szp + strlen(res) + 1;
+               nbuf = mandoc_malloc(nsz);
+
+               strlcpy(nbuf, *bufp, (size_t)(stesc - *bufp + 1));
+               strlcat(nbuf, res, nsz);
+               strlcat(nbuf, cp + (maxl ? 0 : 1), nsz);
 
-               do {
-                       t = tree->last->tok;
-                       if ( ! roffexit(tree, t))
-                               return(0);
-               } while (t != tok);
+               free(*bufp);
 
-               return(roffcall(tree, tok, argvp));
+               *bufp = nbuf;
+               *szp = nsz;
+
+               if (EXPAND_LIMIT >= ++expand_count)
+                       goto again;
+
+               /* Just leave the string unexpanded. */
+               mandoc_msg(MANDOCERR_ROFFLOOP, r->parse, ln, pos, NULL);
+               return(ROFF_IGN);
        }
+       return(ROFF_CONT);
+}
 
-       /*
-        * Now consider explicit-end tags, where we want to close back
-        * to a specific tag.  Example:
-        *      .Bl
-        *      .It Item.
-        *      .El
-        * In this, the `El' tag closes out the scope of `Bl'.
-        */
+/*
+ * Process text streams:
+ * Convert all breakable hyphens into ASCII_HYPH.
+ * Decrement and spring input line trap.
+ */
+static enum rofferr
+roff_parsetext(char **bufp, size_t *szp, int pos, int *offs)
+{
+       size_t           sz;
+       const char      *start;
+       char            *p;
+       int              isz;
+       enum mandoc_esc  esc;
 
-       assert(tok != tokens[tok].ctx && 0 != tokens[tok].ctx);
+       start = p = *bufp + pos;
 
-       /* LINTED */
-       for (n = tree->last; n; n = n->parent)
-               if (n->tok != tokens[tok].ctx) {
-                       if (n->tok == tokens[n->tok].ctx)
-                               continue;
-                       return(roff_err(tree, *argv, "`%s' breaks "
-                                               "scope of prior `%s'",
-                                               toknames[tok], 
-                                               toknames[n->tok]));
-               } else
+       while ('\0' != *p) {
+               sz = strcspn(p, "-\\");
+               p += sz;
+
+               if ('\0' == *p)
                        break;
 
-       if (NULL == n)
-               return(roff_err(tree, *argv, "`%s' has no starting "
-                                       "tag `%s'", toknames[tok], 
-                                       toknames[tokens[tok].ctx]));
+               if ('\\' == *p) {
+                       /* Skip over escapes. */
+                       p++;
+                       esc = mandoc_escape((const char **)&p, NULL, NULL);
+                       if (ESCAPE_ERROR == esc)
+                               break;
+                       continue;
+               } else if (p == start) {
+                       p++;
+                       continue;
+               }
 
-       /* LINTED */
-       do {
-               t = tree->last->tok;
-               if ( ! roffexit(tree, t))
-                       return(0);
-       } while (t != tokens[tok].ctx);
+               if (isalpha((unsigned char)p[-1]) &&
+                   isalpha((unsigned char)p[1]))
+                       *p = ASCII_HYPH;
+               p++;
+       }
 
-       return(1);
+       /* Spring the input line trap. */
+       if (1 == roffit_lines) {
+               isz = asprintf(&p, "%s\n.%s", *bufp, roffit_macro);
+               if (-1 == isz) {
+                       perror(NULL);
+                       exit((int)MANDOCLEVEL_SYSERR);
+               }
+               free(*bufp);
+               *bufp = p;
+               *szp = isz + 1;
+               *offs = 0;
+               free(roffit_macro);
+               roffit_lines = 0;
+               return(ROFF_REPARSE);
+       } else if (1 < roffit_lines)
+               --roffit_lines;
+       return(ROFF_CONT);
 }
 
-
-static int
-rofffindarg(const char *name)
+enum rofferr
+roff_parseln(struct roff *r, int ln, char **bufp, 
+               size_t *szp, int pos, int *offs)
 {
-       size_t           i;
+       enum rofft       t;
+       enum rofferr     e;
+       int              ppos, ctl;
 
-       /* FIXME: use a table, this is slow but ok for now. */
+       /*
+        * Run the reserved-word filter only if we have some reserved
+        * words to fill in.
+        */
 
-       /* LINTED */
-       for (i = 0; i < ROFF_ARGMAX; i++)
-               /* LINTED */
-               if (0 == strcmp(name, tokargnames[i]))
-                       return((int)i);
-       
-       return(ROFF_ARGMAX);
-}
+       e = roff_res(r, bufp, szp, ln, pos);
+       if (ROFF_IGN == e)
+               return(e);
+       assert(ROFF_CONT == e);
 
+       ppos = pos;
+       ctl = roff_getcontrol(r, *bufp, &pos);
 
-static int
-rofffindtok(const char *buf)
-{
-       char             token[4];
-       int              i;
+       /*
+        * First, if a scope is open and we're not a macro, pass the
+        * text through the macro's filter.  If a scope isn't open and
+        * we're not a macro, just let it through.
+        * Finally, if there's an equation scope open, divert it into it
+        * no matter our state.
+        */
 
-       for (i = 0; *buf && ! isspace(*buf) && i < 3; i++, buf++)
-               token[i] = *buf;
+       if (r->last && ! ctl) {
+               t = r->last->tok;
+               assert(roffs[t].text);
+               e = (*roffs[t].text)
+                       (r, t, bufp, szp, ln, pos, pos, offs);
+               assert(ROFF_IGN == e || ROFF_CONT == e);
+               if (ROFF_CONT != e)
+                       return(e);
+       }
+       if (r->eqn)
+               return(eqn_read(&r->eqn, ln, *bufp, ppos, offs));
+       if ( ! ctl) {
+               if (r->tbl)
+                       return(tbl_read(r->tbl, ln, *bufp, pos));
+               return(roff_parsetext(bufp, szp, pos, offs));
+       }
 
-       if (i == 3) 
-               return(ROFF_MAX);
+       /*
+        * If a scope is open, go to the child handler for that macro,
+        * as it may want to preprocess before doing anything with it.
+        * Don't do so if an equation is open.
+        */
 
-       token[i] = 0;
+       if (r->last) {
+               t = r->last->tok;
+               assert(roffs[t].sub);
+               return((*roffs[t].sub)
+                               (r, t, bufp, szp, 
+                                ln, ppos, pos, offs));
+       }
 
-       /* FIXME: use a table, this is slow but ok for now. */
+       /*
+        * Lastly, as we've no scope open, try to look up and execute
+        * the new macro.  If no macro is found, simply return and let
+        * the compilers handle it.
+        */
 
-       /* LINTED */
-       for (i = 0; i < ROFF_MAX; i++)
-               /* LINTED */
-               if (0 == strcmp(toknames[i], token))
-                       return((int)i);
+       if (ROFF_MAX == (t = roff_parse(r, *bufp, &pos)))
+               return(ROFF_CONT);
 
-       return(ROFF_MAX);
+       assert(roffs[t].proc);
+       return((*roffs[t].proc)
+                       (r, t, bufp, szp, 
+                        ln, ppos, pos, offs));
 }
 
 
-static int
-roffchecksec(struct rofftree *tree, 
-               const char *start, int sec, int fail)
+void
+roff_endparse(struct roff *r)
 {
 
-       switch (sec) {
-       case(ROFFSec_PR_Dd):
-               return(1);
-       case(ROFFSec_PR_Dt):
-               if (ROFFSec_PR_Dd & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_PR_Os):
-               if (ROFFSec_PR_Dt & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_NAME):
-               if (ROFFSec_PR_Os & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_SYNOP):
-               if (ROFFSec_NAME & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_DESC):
-               if (ROFFSec_SYNOP & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_RETVAL):
-               if (ROFFSec_DESC & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_ENV):
-               if (ROFFSec_RETVAL & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_FILES):
-               if (ROFFSec_ENV & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_EX):
-               if (ROFFSec_FILES & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_DIAG):
-               if (ROFFSec_EX & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_ERRS):
-               if (ROFFSec_DIAG & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_SEEALSO):
-               if (ROFFSec_ERRS & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_STAND):
-               if (ROFFSec_SEEALSO & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_HIST):
-               if (ROFFSec_STAND & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_AUTH):
-               if (ROFFSec_HIST & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_CAVEATS):
-               if (ROFFSec_AUTH & tree->asec)
-                       return(1);
-               break;
-       case(ROFFSec_BUGS):
-               if (ROFFSec_CAVEATS & tree->asec)
-                       return(1);
-               break;
-       default:
-               return(1);
+       if (r->last)
+               mandoc_msg(MANDOCERR_SCOPEEXIT, r->parse,
+                               r->last->line, r->last->col, NULL);
+
+       if (r->eqn) {
+               mandoc_msg(MANDOCERR_SCOPEEXIT, r->parse, 
+                               r->eqn->eqn.ln, r->eqn->eqn.pos, NULL);
+               eqn_end(&r->eqn);
        }
 
-       if (fail)
-               return(0);
-       return(roff_warnp(tree, start, ROFF_Sh, WRN_SECORD));
+       if (r->tbl) {
+               mandoc_msg(MANDOCERR_SCOPEEXIT, r->parse, 
+                               r->tbl->line, r->tbl->pos, NULL);
+               tbl_end(&r->tbl);
+       }
 }
 
+/*
+ * Parse a roff node's type from the input buffer.  This must be in the
+ * form of ".foo xxx" in the usual way.
+ */
+static enum rofft
+roff_parse(struct roff *r, const char *buf, int *pos)
+{
+       const char      *mac;
+       size_t           maclen;
+       enum rofft       t;
 
-static int
-roffispunct(const char *p)
+       if ('\0' == buf[*pos] || '"' == buf[*pos] || 
+                       '\t' == buf[*pos] || ' ' == buf[*pos])
+               return(ROFF_MAX);
+
+       /* We stop the macro parse at an escape, tab, space, or nil. */
+
+       mac = buf + *pos;
+       maclen = strcspn(mac, " \\\t\0");
+
+       t = (r->current_string = roff_getstrn(r, mac, maclen))
+           ? ROFF_USERDEF : roffhash_find(mac, maclen);
+
+       *pos += (int)maclen;
+
+       while (buf[*pos] && ' ' == buf[*pos])
+               (*pos)++;
+
+       return(t);
+}
+
+/* ARGSUSED */
+static enum rofferr
+roff_cblock(ROFF_ARGS)
 {
 
-       if (0 == *p)
-               return(0);
-       if (0 != *(p + 1))
-               return(0);
+       /*
+        * A block-close `..' should only be invoked as a child of an
+        * ignore macro, otherwise raise a warning and just ignore it.
+        */
 
-       switch (*p) {
-       case('{'):
-               /* FALLTHROUGH */
-       case('.'):
-               /* FALLTHROUGH */
-       case(','):
-               /* FALLTHROUGH */
-       case(';'):
-               /* FALLTHROUGH */
-       case(':'):
+       if (NULL == r->last) {
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+               return(ROFF_IGN);
+       }
+
+       switch (r->last->tok) {
+       case (ROFF_am):
                /* FALLTHROUGH */
-       case('?'):
+       case (ROFF_ami):
                /* FALLTHROUGH */
-       case('!'):
+       case (ROFF_am1):
                /* FALLTHROUGH */
-       case('('):
+       case (ROFF_de):
+               /* ROFF_de1 is remapped to ROFF_de in roff_block(). */
                /* FALLTHROUGH */
-       case(')'):
+       case (ROFF_dei):
                /* FALLTHROUGH */
-       case('['):
+       case (ROFF_ig):
+               break;
+       default:
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+               return(ROFF_IGN);
+       }
+
+       if ((*bufp)[pos])
+               mandoc_msg(MANDOCERR_ARGSLOST, r->parse, ln, pos, NULL);
+
+       roffnode_pop(r);
+       roffnode_cleanscope(r);
+       return(ROFF_IGN);
+
+}
+
+
+static void
+roffnode_cleanscope(struct roff *r)
+{
+
+       while (r->last) {
+               if (--r->last->endspan != 0)
+                       break;
+               roffnode_pop(r);
+       }
+}
+
+
+static void
+roff_ccond(struct roff *r, int ln, int ppos)
+{
+
+       if (NULL == r->last) {
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+               return;
+       }
+
+       switch (r->last->tok) {
+       case (ROFF_el):
                /* FALLTHROUGH */
-       case(']'):
+       case (ROFF_ie):
                /* FALLTHROUGH */
-       case('}'):
-               return(1);
-       default:
+       case (ROFF_if):
                break;
+       default:
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+               return;
        }
 
-       return(0);
+       if (r->last->endspan > -1) {
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+               return;
+       }
+
+       roffnode_pop(r);
+       roffnode_cleanscope(r);
+       return;
 }
 
 
-static int
-rofffindcallable(const char *name)
+/* ARGSUSED */
+static enum rofferr
+roff_block(ROFF_ARGS)
 {
-       int              c;
+       int             sv;
+       size_t          sz;
+       char            *name;
 
-       if (ROFF_MAX == (c = rofffindtok(name)))
-               return(ROFF_MAX);
-       assert(c >= 0 && c < ROFF_MAX);
-       return(ROFF_CALLABLE & tokens[c].flags ? c : ROFF_MAX);
+       name = NULL;
+
+       if (ROFF_ig != tok) {
+               if ('\0' == (*bufp)[pos]) {
+                       mandoc_msg(MANDOCERR_NOARGS, r->parse, ln, ppos, NULL);
+                       return(ROFF_IGN);
+               }
+
+               /*
+                * Re-write `de1', since we don't really care about
+                * groff's strange compatibility mode, into `de'.
+                */
+
+               if (ROFF_de1 == tok)
+                       tok = ROFF_de;
+               if (ROFF_de == tok)
+                       name = *bufp + pos;
+               else
+                       mandoc_msg(MANDOCERR_REQUEST, r->parse, ln, ppos,
+                           roffs[tok].name);
+
+               while ((*bufp)[pos] && ! isspace((unsigned char)(*bufp)[pos]))
+                       pos++;
+
+               while (isspace((unsigned char)(*bufp)[pos]))
+                       (*bufp)[pos++] = '\0';
+       }
+
+       roffnode_push(r, tok, name, ln, ppos);
+
+       /*
+        * At the beginning of a `de' macro, clear the existing string
+        * with the same name, if there is one.  New content will be
+        * appended from roff_block_text() in multiline mode.
+        */
+
+       if (ROFF_de == tok)
+               roff_setstr(r, name, "", 0);
+
+       if ('\0' == (*bufp)[pos])
+               return(ROFF_IGN);
+
+       /* If present, process the custom end-of-line marker. */
+
+       sv = pos;
+       while ((*bufp)[pos] && ! isspace((unsigned char)(*bufp)[pos]))
+               pos++;
+
+       /*
+        * Note: groff does NOT like escape characters in the input.
+        * Instead of detecting this, we're just going to let it fly and
+        * to hell with it.
+        */
+
+       assert(pos > sv);
+       sz = (size_t)(pos - sv);
+
+       if (1 == sz && '.' == (*bufp)[sv])
+               return(ROFF_IGN);
+
+       r->last->end = mandoc_malloc(sz + 1);
+
+       memcpy(r->last->end, *bufp + sv, sz);
+       r->last->end[(int)sz] = '\0';
+
+       if ((*bufp)[pos])
+               mandoc_msg(MANDOCERR_ARGSLOST, r->parse, ln, pos, NULL);
+
+       return(ROFF_IGN);
 }
 
 
-static struct roffnode *
-roffnode_new(int tokid, struct rofftree *tree)
+/* ARGSUSED */
+static enum rofferr
+roff_block_sub(ROFF_ARGS)
 {
-       struct roffnode *p;
-       
-       if (NULL == (p = malloc(sizeof(struct roffnode))))
-               err(1, "malloc");
+       enum rofft      t;
+       int             i, j;
+
+       /*
+        * First check whether a custom macro exists at this level.  If
+        * it does, then check against it.  This is some of groff's
+        * stranger behaviours.  If we encountered a custom end-scope
+        * tag and that tag also happens to be a "real" macro, then we
+        * need to try interpreting it again as a real macro.  If it's
+        * not, then return ignore.  Else continue.
+        */
+
+       if (r->last->end) {
+               for (i = pos, j = 0; r->last->end[j]; j++, i++)
+                       if ((*bufp)[i] != r->last->end[j])
+                               break;
+
+               if ('\0' == r->last->end[j] && 
+                               ('\0' == (*bufp)[i] ||
+                                ' ' == (*bufp)[i] ||
+                                '\t' == (*bufp)[i])) {
+                       roffnode_pop(r);
+                       roffnode_cleanscope(r);
 
-       p->tok = tokid;
-       p->parent = tree->last;
-       tree->last = p;
+                       while (' ' == (*bufp)[i] || '\t' == (*bufp)[i])
+                               i++;
 
-       return(p);
+                       pos = i;
+                       if (ROFF_MAX != roff_parse(r, *bufp, &pos))
+                               return(ROFF_RERUN);
+                       return(ROFF_IGN);
+               }
+       }
+
+       /*
+        * If we have no custom end-query or lookup failed, then try
+        * pulling it out of the hashtable.
+        */
+
+       t = roff_parse(r, *bufp, &pos);
+
+       /*
+        * Macros other than block-end are only significant
+        * in `de' blocks; elsewhere, simply throw them away.
+        */
+       if (ROFF_cblock != t) {
+               if (ROFF_de == tok)
+                       roff_setstr(r, r->last->name, *bufp + ppos, 2);
+               return(ROFF_IGN);
+       }
+
+       assert(roffs[t].proc);
+       return((*roffs[t].proc)(r, t, bufp, szp, 
+                               ln, ppos, pos, offs));
 }
 
 
-static int
-roffargok(int tokid, int argid)
+/* ARGSUSED */
+static enum rofferr
+roff_block_text(ROFF_ARGS)
 {
-       const int       *c;
 
-       if (NULL == (c = tokens[tokid].args))
-               return(0);
-
-       for ( ; ROFF_ARGMAX != *c; c++) 
-               if (argid == *c)
-                       return(1);
+       if (ROFF_de == tok)
+               roff_setstr(r, r->last->name, *bufp + pos, 2);
 
-       return(0);
+       return(ROFF_IGN);
 }
 
 
-static void
-roffnode_free(struct rofftree *tree)
+/* ARGSUSED */
+static enum rofferr
+roff_cond_sub(ROFF_ARGS)
 {
-       struct roffnode *p;
+       enum rofft       t;
+       enum roffrule    rr;
+       char            *ep;
 
-       assert(tree->last);
+       rr = r->last->rule;
+       roffnode_cleanscope(r);
+       t = roff_parse(r, *bufp, &pos);
 
-       p = tree->last;
-       tree->last = tree->last->parent;
-       free(p);
+       /*
+        * Fully handle known macros when they are structurally
+        * required or when the conditional evaluated to true.
+        */
+
+       if ((ROFF_MAX != t) &&
+           (ROFFRULE_ALLOW == rr ||
+            ROFFMAC_STRUCT & roffs[t].flags)) {
+               assert(roffs[t].proc);
+               return((*roffs[t].proc)(r, t, bufp, szp,
+                                       ln, ppos, pos, offs));
+       }
+
+       /* Always check for the closing delimiter `\}'. */
+
+       ep = &(*bufp)[pos];
+       while (NULL != (ep = strchr(ep, '\\'))) {
+               if ('}' != *(++ep))
+                       continue;
+
+               /*
+                * If we're at the end of line, then just chop
+                * off the \} and resize the buffer.
+                * If we aren't, then convert it to spaces.
+                */
+
+               if ('\0' == *(ep + 1)) {
+                       *--ep = '\0';
+                       *szp -= 2;
+               } else
+                       *(ep - 1) = *ep = ' ';
+
+               roff_ccond(r, ln, pos);
+       }
+       return(ROFFRULE_DENY == rr ? ROFF_IGN : ROFF_CONT);
 }
 
+/* ARGSUSED */
+static enum rofferr
+roff_cond_text(ROFF_ARGS)
+{
+       char            *ep;
+       enum roffrule    rr;
+
+       rr = r->last->rule;
+       roffnode_cleanscope(r);
+
+       ep = &(*bufp)[pos];
+       for ( ; NULL != (ep = strchr(ep, '\\')); ep++) {
+               ep++;
+               if ('}' != *ep)
+                       continue;
+               *ep = '&';
+               roff_ccond(r, ln, pos);
+       }
+       return(ROFFRULE_DENY == rr ? ROFF_IGN : ROFF_CONT);
+}
 
 static int
-roffspecial(struct rofftree *tree, int tok, const char *start, 
-               const int *argc, const char **argv, 
-               size_t sz, char **ordp)
+roff_getnum(const char *v, int *pos, int *res)
 {
+       int p, n;
 
-       switch (tok) {
-       case (ROFF_At):
-               if (0 == sz)
-                       break;
-               if (ROFF_ATT_MAX != roff_att(*ordp))
-                       break;
-               return(roff_errp(tree, *ordp, tok, ERR_BADARG));
-       
-       case (ROFF_Xr):
-               if (2 == sz) {
-                       assert(ordp[1]);
-                       if (ROFF_MSEC_MAX != roff_msec(ordp[1]))
-                               break;
-                       if ( ! roff_warn(tree, start, "invalid `%s' manual "
-                                               "section", toknames[tok]))
-                               return(0);
-               }
-               /* FALLTHROUGH */
+       p = *pos;
+       n = v[p] == '-';
+       if (n)
+               p++;
 
-       case (ROFF_Sx):
-               /* FALLTHROUGH*/
-       case (ROFF_Fn):
-               if (0 != sz) 
-                       break;
-               return(roff_errp(tree, start, tok, ERR_ARGGE1));
+       for (*res = 0; isdigit((unsigned char)v[p]); p++)
+               *res += 10 * *res + v[p] - '0';
+       if (p == *pos + n)
+               return 0;
 
-       case (ROFF_Nm):
-               if (0 == sz) {
-                       if (0 != tree->name[0]) {
-                               ordp[0] = tree->name;
-                               ordp[1] = NULL;
-                               break;
-                       }
-                       return(roff_err(tree, start, "`Nm' not set"));
-               } else if ( ! roffsetname(tree, ordp))
-                       return(0);
+       if (n)
+               *res = -*res;
+
+       *pos = p;
+       return 1;
+}
+
+static int
+roff_getop(const char *v, int *pos, char *res)
+{
+       int e;
+
+       *res = v[*pos];
+       e = v[*pos + 1] == '=';
+
+       switch (*res) {
+       case '=':
                break;
+       case '>':
+               if (e)
+                       *res = 'g';
+               break;
+       case '<':
+               if (e)
+                       *res = 'l';
+               break;
+       default:
+               return(0);
+       }
 
-       case (ROFF_Rv):
-               /* FALLTHROUGH*/
-       case (ROFF_Ex):
-               if (1 == sz) 
-                       break;
-               return(roff_errp(tree, start, tok, ERR_ARGEQ1));
+       *pos += 1 + e;
 
-       case (ROFF_Sm):
-               if (1 != sz)
-                       return(roff_errp(tree, start, tok, ERR_ARGEQ1));
-               else if (0 == strcmp(ordp[0], "on") || 
-                               0 == strcmp(ordp[0], "off"))
-                       break;
-               return(roff_errp(tree, *ordp, tok, ERR_BADARG));
-       
-       case (ROFF_Ud):
+       return(*res);
+}
+
+static enum roffrule
+roff_evalcond(const char *v, int *pos)
+{
+       int      not, lh, rh;
+       char     op;
+
+       switch (v[*pos]) {
+       case ('n'):
+               (*pos)++;
+               return(ROFFRULE_ALLOW);
+       case ('e'):
                /* FALLTHROUGH */
-       case (ROFF_Ux):
+       case ('o'):
                /* FALLTHROUGH */
-       case (ROFF_Bt):
-               if (0 == sz) 
-                       break;
-               return(roff_errp(tree, start, tok, ERR_ARGEQ0));
+       case ('t'):
+               (*pos)++;
+               return(ROFFRULE_DENY);
+       case ('!'):
+               (*pos)++;
+               not = 1;
+               break;
        default:
+               not = 0;
                break;
        }
 
-       return((*tree->cb.roffspecial)(tree->arg, tok, tree->cur, 
-                               argc, argv, (const char **)ordp));
+       if (!roff_getnum(v, pos, &lh))
+               return ROFFRULE_DENY;
+       if (!roff_getop(v, pos, &op)) {
+               if (lh < 0)
+                       lh = 0;
+               goto out;
+       }
+       if (!roff_getnum(v, pos, &rh))
+               return ROFFRULE_DENY;
+       switch (op) {
+       case 'g':
+               lh = lh >= rh;
+               break;
+       case 'l':
+               lh = lh <= rh;
+               break;
+       case '=':
+               lh = lh == rh;
+               break;
+       case '>':
+               lh = lh > rh;
+               break;
+       case '<':
+               lh = lh < rh;
+               break;
+       default:
+               return ROFFRULE_DENY;
+       }
+out:
+       if (not)
+               lh = !lh;
+       return lh ? ROFFRULE_ALLOW : ROFFRULE_DENY;
 }
 
-
-static int
-roffexit(struct rofftree *tree, int tok)
+/* ARGSUSED */
+static enum rofferr
+roff_line_ignore(ROFF_ARGS)
 {
 
-       assert(tokens[tok].cb);
-       return((*tokens[tok].cb)(tok, tree, NULL, ROFF_EXIT));
+       return(ROFF_IGN);
 }
 
-
-static int
-roffcall(struct rofftree *tree, int tok, char **argv)
+/* ARGSUSED */
+static enum rofferr
+roff_cond(ROFF_ARGS)
 {
-       int              i;
-       enum roffmsec    c;
 
-       if (NULL == tokens[tok].cb)
-               return(roff_errp(tree, *argv, tok, ERR_NOTSUP));
+       roffnode_push(r, tok, NULL, ln, ppos);
 
-       if (tokens[tok].sections && ROFF_MSEC_MAX != tree->section) {
-               i = 0;
-               while (ROFF_MSEC_MAX != 
-                               (c = tokens[tok].sections[i++]))
-                       if (c == tree->section)
-                               break;
-               if (ROFF_MSEC_MAX == c) {
-                       if ( ! roff_warn(tree, *argv, "`%s' is not a valid "
-                                       "macro in this manual section",
-                                       toknames[tok]))
-                               return(0);
+       /* 
+        * An `.el' has no conditional body: it will consume the value
+        * of the current rstack entry set in prior `ie' calls or
+        * defaults to DENY.  
+        *
+        * If we're not an `el', however, then evaluate the conditional.
+        */
+
+       r->last->rule = ROFF_el == tok ?
+               (r->rstackpos < 0 ? 
+                ROFFRULE_DENY : r->rstack[r->rstackpos--]) :
+               roff_evalcond(*bufp, &pos);
+
+       /*
+        * An if-else will put the NEGATION of the current evaluated
+        * conditional into the stack of rules.
+        */
+
+       if (ROFF_ie == tok) {
+               if (r->rstackpos == RSTACK_MAX - 1) {
+                       mandoc_msg(MANDOCERR_MEM, 
+                               r->parse, ln, ppos, NULL);
+                       return(ROFF_ERR);
                }
+               r->rstack[++r->rstackpos] = 
+                       ROFFRULE_DENY == r->last->rule ?
+                       ROFFRULE_ALLOW : ROFFRULE_DENY;
+       }
+
+       /* If the parent has false as its rule, then so do we. */
+
+       if (r->last->parent && ROFFRULE_DENY == r->last->parent->rule)
+               r->last->rule = ROFFRULE_DENY;
+
+       /*
+        * Determine scope.
+        * If there is nothing on the line after the conditional,
+        * not even whitespace, use next-line scope.
+        */
+
+       if ('\0' == (*bufp)[pos]) {
+               r->last->endspan = 2;
+               goto out;
        }
 
-       return((*tokens[tok].cb)(tok, tree, argv, ROFF_ENTER));
+       while (' ' == (*bufp)[pos])
+               pos++;
+
+       /* An opening brace requests multiline scope. */
+
+       if ('\\' == (*bufp)[pos] && '{' == (*bufp)[pos + 1]) {
+               r->last->endspan = -1;
+               pos += 2;
+               goto out;
+       } 
+
+       /*
+        * Anything else following the conditional causes
+        * single-line scope.  Warn if the scope contains
+        * nothing but trailing whitespace.
+        */
+
+       if ('\0' == (*bufp)[pos])
+               mandoc_msg(MANDOCERR_NOARGS, r->parse, ln, ppos, NULL);
+
+       r->last->endspan = 1;
+
+out:
+       *offs = pos;
+       return(ROFF_RERUN);
 }
 
 
-static int
-roffnextopt(const struct rofftree *tree, int tok, 
-               char ***in, char **val)
+/* ARGSUSED */
+static enum rofferr
+roff_ds(ROFF_ARGS)
 {
-       char            *arg, **argv;
-       int              v;
-
-       *val = NULL;
-       argv = *in;
-       assert(argv);
-
-       if (NULL == (arg = *argv))
-               return(-1);
-       if ('-' != *arg)
-               return(-1);
-
-       if (ROFF_ARGMAX == (v = rofffindarg(arg + 1))) {
-               if ( ! roff_warn(tree, arg, "argument-like parameter `%s' to "
-                                       "`%s'", arg, toknames[tok]))
-                       return(ROFF_ARGMAX);
-               return(-1);
-       } 
-       
-       if ( ! roffargok(tok, v)) {
-               if ( ! roff_warn(tree, arg, "invalid argument parameter `%s' to "
-                               "`%s'", tokargnames[v], toknames[tok]))
-                       return(ROFF_ARGMAX);
-               return(-1);
-       } 
-       
-       if ( ! (ROFF_VALUE & tokenargs[v]))
-               return(v);
+       char            *name, *string;
 
-       *in = ++argv;
+       /*
+        * A symbol is named by the first word following the macro
+        * invocation up to a space.  Its value is anything after the
+        * name's trailing whitespace and optional double-quote.  Thus,
+        *
+        *  [.ds foo "bar  "     ]
+        *
+        * will have `bar  "     ' as its value.
+        */
 
-       if (NULL == *argv) {
-               (void)roff_err(tree, arg, "empty value of `%s' for `%s'",
-                               tokargnames[v], toknames[tok]);
-               return(ROFF_ARGMAX);
-       }
+       string = *bufp + pos;
+       name = roff_getname(r, &string, ln, pos);
+       if ('\0' == *name)
+               return(ROFF_IGN);
 
-       return(v);
+       /* Read past initial double-quote. */
+       if ('"' == *string)
+               string++;
+
+       /* The rest is the value. */
+       roff_setstr(r, name, string, ROFF_as == tok);
+       return(ROFF_IGN);
 }
 
+void
+roff_setreg(struct roff *r, const char *name, int val, char sign)
+{
+       struct roffreg  *reg;
+
+       /* Search for an existing register with the same name. */
+       reg = r->regtab;
+
+       while (reg && strcmp(name, reg->key.p))
+               reg = reg->next;
+
+       if (NULL == reg) {
+               /* Create a new register. */
+               reg = mandoc_malloc(sizeof(struct roffreg));
+               reg->key.p = mandoc_strdup(name);
+               reg->key.sz = strlen(name);
+               reg->val = 0;
+               reg->next = r->regtab;
+               r->regtab = reg;
+       }
+
+       if ('+' == sign)
+               reg->val += val;
+       else if ('-' == sign)
+               reg->val -= val;
+       else
+               reg->val = val;
+}
 
+/*
+ * Handle some predefined read-only number registers.
+ * For now, return -1 if the requested register is not predefined;
+ * in case a predefined read-only register having the value -1
+ * were to turn up, another special value would have to be chosen.
+ */
 static int
-roffpurgepunct(struct rofftree *tree, char **argv)
+roff_getregro(const char *name)
 {
-       int              i;
 
-       i = 0;
-       while (argv[i])
-               i++;
-       assert(i > 0);
-       if ( ! roffispunct(argv[--i]))
+       switch (*name) {
+       case ('A'):  /* ASCII approximation mode is always off. */
+               return(0);
+       case ('g'):  /* Groff compatibility mode is always on. */
                return(1);
-       while (i >= 0 && roffispunct(argv[i]))
-               i--;
-       i++;
-
-       /* LINTED */
-       while (argv[i])
-               if ( ! roffdata(tree, 0, argv[i++]))
-                       return(0);
-       return(1);
+       case ('H'):  /* Fixed horizontal resolution. */
+               return (24);
+       case ('j'):  /* Always adjust left margin only. */
+               return(0);
+       case ('T'):  /* Some output device is always defined. */
+               return(1);
+       case ('V'):  /* Fixed vertical resolution. */
+               return (40);
+       default:
+               return (-1);
+       }
+}
+
+int
+roff_getreg(const struct roff *r, const char *name)
+{
+       struct roffreg  *reg;
+       int              val;
+
+       if ('.' == name[0] && '\0' != name[1] && '\0' == name[2]) {
+               val = roff_getregro(name + 1);
+               if (-1 != val)
+                       return (val);
+       }
+
+       for (reg = r->regtab; reg; reg = reg->next)
+               if (0 == strcmp(name, reg->key.p))
+                       return(reg->val);
+
+       return(0);
 }
 
-
 static int
-roffparseopts(struct rofftree *tree, int tok, 
-               char ***args, int *argc, char **argv)
+roff_getregn(const struct roff *r, const char *name, size_t len)
 {
-       int              i, c;
-       char            *v;
-
-       i = 0;
-
-       while (-1 != (c = roffnextopt(tree, tok, args, &v))) {
-               if (ROFF_ARGMAX == c) 
-                       return(0);
+       struct roffreg  *reg;
+       int              val;
 
-               argc[i] = c;
-               argv[i] = v;
-               i++;
-               *args = *args + 1;
+       if ('.' == name[0] && 2 == len) {
+               val = roff_getregro(name + 1);
+               if (-1 != val)
+                       return (val);
        }
 
-       argc[i] = ROFF_ARGMAX;
-       argv[i] = NULL;
-       return(1);
-}
+       for (reg = r->regtab; reg; reg = reg->next)
+               if (len == reg->key.sz &&
+                   0 == strncmp(name, reg->key.p, len))
+                       return(reg->val);
 
+       return(0);
+}
 
-static int
-roffdata(struct rofftree *tree, int space, char *buf)
+static void
+roff_freereg(struct roffreg *reg)
 {
+       struct roffreg  *old_reg;
 
-       if (0 == *buf)
-               return(1);
-       return((*tree->cb.roffdata)(tree->arg, 
-                               space != 0, tree->cur, buf));
+       while (NULL != reg) {
+               free(reg->key.p);
+               old_reg = reg;
+               reg = reg->next;
+               free(old_reg);
+       }
 }
 
-
 /* ARGSUSED */
-static int
-roff_Dd(ROFFCALL_ARGS)
+static enum rofferr
+roff_nr(ROFF_ARGS)
 {
-       time_t           t;
-       char            *p, buf[32];
+       const char      *key;
+       char            *val;
        size_t           sz;
+       int              iv;
+       char             sign;
 
-       if (ROFFSec_PR_Os & tree->asec)
-               return(roff_text(tok, tree, argv, type));
-       if (ROFFSec_PR_Dd & tree->asec)
-               return(roff_errp(tree, *argv, tok, ERR_PR_REP));
-       if ( ! roffchecksec(tree, *argv, ROFFSec_PR_Dd, 1))
-               return(roff_errp(tree, *argv, tok, ERR_PR_OOO));
+       val = *bufp + pos;
+       key = roff_getname(r, &val, ln, pos);
 
-       assert(NULL == tree->last);
-       argv++;
-       tree->asec |= (tree->csec = ROFFSec_PR_Dd);
+       sign = *val;
+       if ('+' == sign || '-' == sign)
+               val++;
 
-       /*
-        * This is a bit complex because there are many forms the date
-        * can be in:  it can be simply $Mdocdate: December 10 2008 $, $Mdocdate <date>$,
-        * or a raw date.  Process accordingly.
-        */
+       sz = strspn(val, "0123456789");
+       iv = sz ? mandoc_strntoi(val, sz, 10) : 0;
 
-       if (0 == strcmp(*argv, "$Mdocdate: December 10 2008 $")) {
-               t = time(NULL);
-               if (NULL == localtime_r(&t, &tree->tm))
-                       err(1, "localtime_r");
-               return(1);
-       } 
+       roff_setreg(r, key, iv, sign);
 
-       buf[0] = 0;
-       p = *argv;
-       sz = sizeof(buf);
+       return(ROFF_IGN);
+}
 
-       if (0 != strcmp(*argv, "$Mdocdate:")) {
-               while (*argv) {
-                       if (strlcat(buf, *argv++, sz) < sz)
-                               continue;
-                       return(roff_errp(tree, p, tok, ERR_BADARG));
-               }
-               if (strptime(buf, "%b%d,%Y", &tree->tm))
-                       return(1);
-               return(roff_errp(tree, p, tok, ERR_BADARG));
+/* ARGSUSED */
+static enum rofferr
+roff_rm(ROFF_ARGS)
+{
+       const char       *name;
+       char             *cp;
+
+       cp = *bufp + pos;
+       while ('\0' != *cp) {
+               name = roff_getname(r, &cp, ln, (int)(cp - *bufp));
+               if ('\0' != *name)
+                       roff_setstr(r, name, NULL, 0);
        }
+       return(ROFF_IGN);
+}
 
-       argv++;
-
-       while (*argv && **argv != '$') {
-               if (strlcat(buf, *argv++, sz) >= sz)
-                       return(roff_errp(tree, p, tok, ERR_BADARG));
-               if (strlcat(buf, " ", sz) >= sz) 
-                       return(roff_errp(tree, p, tok, ERR_BADARG));
+/* ARGSUSED */
+static enum rofferr
+roff_it(ROFF_ARGS)
+{
+       char            *cp;
+       size_t           len;
+       int              iv;
+
+       /* Parse the number of lines. */
+       cp = *bufp + pos;
+       len = strcspn(cp, " \t");
+       cp[len] = '\0';
+       if ((iv = mandoc_strntoi(cp, len, 10)) <= 0) {
+               mandoc_msg(MANDOCERR_NUMERIC, r->parse,
+                               ln, ppos, *bufp + 1);
+               return(ROFF_IGN);
        }
+       cp += len + 1;
 
-       if (NULL == *argv) 
-               return(roff_errp(tree, p, tok, ERR_BADARG));
-       if (NULL == strptime(buf, "%b %d %Y", &tree->tm)) 
-               return(roff_errp(tree, p, tok, ERR_BADARG));
-
-       return(1);
+       /* Arm the input line trap. */
+       roffit_lines = iv;
+       roffit_macro = mandoc_strdup(cp);
+       return(ROFF_IGN);
 }
 
-
 /* ARGSUSED */
-static int
-roff_Dt(ROFFCALL_ARGS)
+static enum rofferr
+roff_Dd(ROFF_ARGS)
 {
-       size_t           sz;
-
-       if (ROFFSec_PR_Os & tree->asec)
-               return(roff_text(tok, tree, argv, type));
-       if (ROFFSec_PR_Dt & tree->asec)
-               return(roff_errp(tree, *argv, tok, ERR_PR_REP));
-       if ( ! roffchecksec(tree, *argv, ROFFSec_PR_Dt, 1))
-               return(roff_errp(tree, *argv, tok, ERR_PR_OOO));
-
-       argv++;
-       tree->asec |= (tree->csec = ROFFSec_PR_Dt);
-       sz = sizeof(tree->title);
-
-       if (NULL == *argv) 
-               return(roff_errp(tree, *argv, tok, ERR_ARGGE2));
-       if (strlcpy(tree->title, *argv, sz) >= sz)
-               return(roff_errp(tree, *argv, tok, ERR_ARGLEN));
-
-       argv++;
-       if (NULL == *argv)
-               return(roff_errp(tree, *argv, tok, ERR_ARGGE2));
-
-       if (ROFF_MSEC_MAX == (tree->section = roff_msec(*argv)))
-               return(roff_errp(tree, *argv, tok, ERR_BADARG));
-
-       argv++;
-
-       if (NULL == *argv) {
-               switch (tree->section) {
-               case(ROFF_MSEC_1):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_6):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_7):
-                       tree->volume = ROFF_VOL_URM;
-                       break;
-               case(ROFF_MSEC_2):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_3):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_3p):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_4):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_5):
-                       tree->volume = ROFF_VOL_PRM;
-                       break;
-               case(ROFF_MSEC_8):
-                       tree->volume = ROFF_VOL_PRM;
-                       break;
-               case(ROFF_MSEC_9):
-                       tree->volume = ROFF_VOL_KM;
-                       break;
-               case(ROFF_MSEC_UNASS):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_DRAFT):
-                       /* FALLTHROUGH */
-               case(ROFF_MSEC_PAPER):
-                       tree->volume = ROFF_VOL_NONE;
-                       break;
-               default:
-                       abort();
-                       /* NOTREACHED */
-               }
-       } else if (ROFF_VOL_MAX == (tree->volume = roff_vol(*argv)))
-               return(roff_errp(tree, *argv, tok, ERR_BADARG));
+       const char *const       *cp;
 
-       assert(NULL == tree->last);
+       if (0 == r->quick && MPARSE_MDOC != r->parsetype)
+               for (cp = __mdoc_reserved; *cp; cp++)
+                       roff_setstr(r, *cp, NULL, 0);
 
-       return(1);
+       return(ROFF_CONT);
 }
 
-
-static int
-roffsetname(struct rofftree *tree, char **ordp)
+/* ARGSUSED */
+static enum rofferr
+roff_TH(ROFF_ARGS)
 {
-       size_t           sz;
-       
-       assert(*ordp);
+       const char *const       *cp;
 
-       /* FIXME: not all sections can set this. */
+       if (0 == r->quick && MPARSE_MDOC != r->parsetype)
+               for (cp = __man_reserved; *cp; cp++)
+                       roff_setstr(r, *cp, NULL, 0);
 
-       if (NULL != *(ordp + 1))
-               return(roff_errp(tree, *ordp, ROFF_Nm, ERR_ARGMNY));
-       
-       sz = sizeof(tree->name);
-       if (strlcpy(tree->name, *ordp, sz) >= sz)
-               return(roff_errp(tree, *ordp, ROFF_Nm, ERR_ARGLEN));
-
-       return(1);
+       return(ROFF_CONT);
 }
 
+/* ARGSUSED */
+static enum rofferr
+roff_TE(ROFF_ARGS)
+{
+
+       if (NULL == r->tbl)
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+       else
+               tbl_end(&r->tbl);
+
+       return(ROFF_IGN);
+}
 
 /* ARGSUSED */
-static int
-roff_Ns(ROFFCALL_ARGS)
+static enum rofferr
+roff_T_(ROFF_ARGS)
 {
-       int              j, c, first;
-       char            *morep[1];
 
-       first = (*argv++ == tree->cur);
-       morep[0] = NULL;
+       if (NULL == r->tbl)
+               mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+       else
+               tbl_restart(ppos, ln, r->tbl);
 
-       if ( ! roffspecial(tree, tok, *argv, NULL, NULL, 0, morep))
-               return(0);
+       return(ROFF_IGN);
+}
 
-       while (*argv) {
-               if (ROFF_MAX != (c = rofffindcallable(*argv))) {
-                       if ( ! roffcall(tree, c, argv))
-                               return(0);
-                       break;
-               }
+#if 0
+static int
+roff_closeeqn(struct roff *r)
+{
 
-               if ( ! roffispunct(*argv)) {
-                       if ( ! roffdata(tree, 1, *argv++))
-                               return(0);
-                       continue;
-               }
+       return(r->eqn && ROFF_EQN == eqn_end(&r->eqn) ? 1 : 0);
+}
+#endif
 
-               for (j = 0; argv[j]; j++)
-                       if ( ! roffispunct(argv[j]))
-                               break;
+static void
+roff_openeqn(struct roff *r, const char *name, int line, 
+               int offs, const char *buf)
+{
+       struct eqn_node *e;
+       int              poff;
 
-               if (argv[j]) {
-                       if ( ! roffdata(tree, 0, *argv++))
-                               return(0);
-                       continue;
-               }
+       assert(NULL == r->eqn);
+       e = eqn_alloc(name, offs, line, r->parse);
 
-               break;
-       }
+       if (r->last_eqn)
+               r->last_eqn->next = e;
+       else
+               r->first_eqn = r->last_eqn = e;
 
-       if ( ! first)
-               return(1);
+       r->eqn = r->last_eqn = e;
 
-       return(roffpurgepunct(tree, argv));
+       if (buf) {
+               poff = 0;
+               eqn_read(&r->eqn, line, buf, offs, &poff);
+       }
 }
 
-
 /* ARGSUSED */
-static int
-roff_Os(ROFFCALL_ARGS)
+static enum rofferr
+roff_EQ(ROFF_ARGS)
 {
-       char            *p;
-       size_t           sz;
 
-       if (ROFFSec_PR_Os & tree->asec)
-               return(roff_text(tok, tree, argv, type));
-       if ( ! roffchecksec(tree, *argv, ROFFSec_PR_Os, 1))
-               return(roff_errp(tree, *argv, tok, ERR_PR_OOO));
+       roff_openeqn(r, *bufp + pos, ln, ppos, NULL);
+       return(ROFF_IGN);
+}
 
-       p = *++argv;
-       sz = sizeof(tree->os);
-       tree->asec |= (tree->csec = ROFFSec_PR_Os);
+/* ARGSUSED */
+static enum rofferr
+roff_EN(ROFF_ARGS)
+{
 
-       tree->os[0] = 0;
+       mandoc_msg(MANDOCERR_NOSCOPE, r->parse, ln, ppos, NULL);
+       return(ROFF_IGN);
+}
 
-       while (*argv)
-               if (strlcat(tree->os, *argv++, sz) >= sz)
-                       return(roff_errp(tree, p, tok, ERR_ARGLEN));
+/* ARGSUSED */
+static enum rofferr
+roff_TS(ROFF_ARGS)
+{
+       struct tbl_node *tbl;
 
-       if (0 == tree->os[0])
-               if (strlcpy(tree->os, "LOCAL", sz) >= sz)
-                       return(roff_errp(tree, p, tok, ERR_ARGLEN));
+       if (r->tbl) {
+               mandoc_msg(MANDOCERR_SCOPEBROKEN, r->parse, ln, ppos, NULL);
+               tbl_end(&r->tbl);
+       }
 
-       assert(ROFF_MSEC_MAX != tree->section);
-       assert(0 != tree->title[0]);
-       assert(0 != tree->os[0]);
+       tbl = tbl_alloc(ppos, ln, r->parse);
 
-       assert(NULL == tree->last);
+       if (r->last_tbl)
+               r->last_tbl->next = tbl;
+       else
+               r->first_tbl = r->last_tbl = tbl;
 
-       return((*tree->cb.roffhead)(tree->arg, &tree->tm,
-                               tree->os, tree->title, 
-                               tree->section, tree->volume));
+       r->tbl = r->last_tbl = tbl;
+       return(ROFF_IGN);
 }
 
-
 /* ARGSUSED */
-static int
-roff_layout(ROFFCALL_ARGS) 
+static enum rofferr
+roff_cc(ROFF_ARGS)
 {
-       int              i, c, argcp[ROFF_MAXLINEARG];
-       char            *argvp[ROFF_MAXLINEARG], *p;
-
-       /*
-        * The roff_layout function is for multi-line macros.  A layout
-        * has a start and end point, which is either declared
-        * explicitly or implicitly.  An explicit start and end is
-        * embodied by `.Bl' and `.El', with the former being the start
-        * and the latter being an end.  The `.Sh' and `.Ss' tags, on
-        * the other hand, are implicit.  The scope of a layout is the
-        * space between start and end.  Explicit layouts may not close
-        * out implicit ones and vice versa; implicit layouts may close
-        * out other implicit layouts.
-        */
+       const char      *p;
 
-       assert( ! (ROFF_CALLABLE & tokens[tok].flags));
+       p = *bufp + pos;
 
-       if ( ! (ROFFSec_PR_Os & tree->asec))
-               return(roff_errp(tree, *argv, tok, ERR_NOT_PR));
-
-       if (ROFF_EXIT == type) {
-               roffnode_free(tree);
-               if ( ! (*tree->cb.roffblkbodyout)(tree->arg, tok))
-                       return(0);
-               return((*tree->cb.roffblkout)(tree->arg, tok));
-       } 
+       if ('\0' == *p || '.' == (r->control = *p++))
+               r->control = 0;
 
-       p = *argv++;
-       assert( ! (ROFF_CALLABLE & tokens[tok].flags));
+       if ('\0' != *p)
+               mandoc_msg(MANDOCERR_ARGCOUNT, r->parse, ln, ppos, NULL);
 
-       if ( ! roffparseopts(tree, tok, &argv, argcp, argvp))
-               return(0);
-       if (NULL == roffnode_new(tok, tree))
-               return(0);
+       return(ROFF_IGN);
+}
 
-       /*
-        * Layouts have two parts: the layout body and header.  The
-        * layout header is the trailing text of the line macro, while
-        * the layout body is everything following until termination.
-        * Example:
-        *
-        * .It Fl f ) ;
-        * Bar.
-        *
-        * ...Produces...
-        *
-        * <block>
-        *      <head>
-        *              <!Fl f!> ;
-        *      </head>
-        *      
-        *      <body>
-        *              Bar.
-        *      </body>
-        * </block>
-        */
+/* ARGSUSED */
+static enum rofferr
+roff_tr(ROFF_ARGS)
+{
+       const char      *p, *first, *second;
+       size_t           fsz, ssz;
+       enum mandoc_esc  esc;
 
-       if ( ! (*tree->cb.roffblkin)(tree->arg, tok, argcp, 
-                               (const char **)argvp))
-               return(0);
+       p = *bufp + pos;
 
-       /* +++ Begin run macro-specific hooks over argv. */
+       if ('\0' == *p) {
+               mandoc_msg(MANDOCERR_ARGCOUNT, r->parse, ln, ppos, NULL);
+               return(ROFF_IGN);
+       }
 
-       switch (tok) {
-       case (ROFF_Sh):
-               if (NULL == *argv) {
-                       argv--;
-                       return(roff_errp(tree, *argv, tok, ERR_ARGGE1));
+       while ('\0' != *p) {
+               fsz = ssz = 1;
+
+               first = p++;
+               if ('\\' == *first) {
+                       esc = mandoc_escape(&p, NULL, NULL);
+                       if (ESCAPE_ERROR == esc) {
+                               mandoc_msg
+                                       (MANDOCERR_BADESCAPE, r->parse, 
+                                        ln, (int)(p - *bufp), NULL);
+                               return(ROFF_IGN);
+                       }
+                       fsz = (size_t)(p - first);
                }
 
-               tree->csec = roff_sec((const char **)argv);
-
-               if ( ! (ROFFSec_OTHER & tree->csec) &&
-                               tree->asec & tree->csec) 
-                       if ( ! roff_warn(tree, *argv, "section repeated"))
-                               return(0);
+               second = p++;
+               if ('\\' == *second) {
+                       esc = mandoc_escape(&p, NULL, NULL);
+                       if (ESCAPE_ERROR == esc) {
+                               mandoc_msg
+                                       (MANDOCERR_BADESCAPE, r->parse, 
+                                        ln, (int)(p - *bufp), NULL);
+                               return(ROFF_IGN);
+                       }
+                       ssz = (size_t)(p - second);
+               } else if ('\0' == *second) {
+                       mandoc_msg(MANDOCERR_ARGCOUNT, r->parse, 
+                                       ln, (int)(p - *bufp), NULL);
+                       second = " ";
+                       p--;
+               }
 
-               if (0 == tree->asec && ! (ROFFSec_NAME & tree->csec))
-                       return(roff_err(tree, *argv, "`NAME' section "
-                                               "must be first"));
-               if ( ! roffchecksec(tree, *argv, tree->csec, 0))
-                       return(0);
+               if (fsz > 1) {
+                       roff_setstrn(&r->xmbtab, first, 
+                                       fsz, second, ssz, 0);
+                       continue;
+               }
 
-               tree->asec |= tree->csec;
+               if (NULL == r->xtab)
+                       r->xtab = mandoc_calloc
+                               (128, sizeof(struct roffstr));
 
-               if ( ! roffspecial(tree, tok, p, argcp, 
-                                       (const char **)argvp, 0, argv))
-                       return(0);
-               break;
-       default:
-               break;
+               free(r->xtab[(int)*first].p);
+               r->xtab[(int)*first].p = mandoc_strndup(second, ssz);
+               r->xtab[(int)*first].sz = ssz;
        }
 
-       /* --- End run macro-specific hooks over argv. */
+       return(ROFF_IGN);
+}
 
-       if (NULL == *argv)
-               return((*tree->cb.roffblkbodyin)
-                               (tree->arg, tok, argcp, 
-                                (const char **)argvp));
+/* ARGSUSED */
+static enum rofferr
+roff_so(ROFF_ARGS)
+{
+       char *name;
 
-       if ( ! (*tree->cb.roffblkheadin)(tree->arg, tok, argcp, 
-                               (const char **)argvp))
-               return(0);
+       mandoc_msg(MANDOCERR_SO, r->parse, ln, ppos, NULL);
 
        /*
-        * If there are no parsable parts, then write remaining tokens
-        * into the layout header and exit.
+        * Handle `so'.  Be EXTREMELY careful, as we shouldn't be
+        * opening anything that's not in our cwd or anything beneath
+        * it.  Thus, explicitly disallow traversing up the file-system
+        * or using absolute paths.
         */
 
-       if ( ! (ROFF_PARSED & tokens[tok].flags)) {
-               i = 0;
-               while (*argv)
-                       if ( ! roffdata(tree, i++, *argv++))
-                               return(0);
-
-               if ( ! (*tree->cb.roffblkheadout)(tree->arg, tok))
-                       return(0);
-               return((*tree->cb.roffblkbodyin)(tree->arg, tok, argcp,
-                                (const char **)argvp));
+       name = *bufp + pos;
+       if ('/' == *name || strstr(name, "../") || strstr(name, "/..")) {
+               mandoc_msg(MANDOCERR_SOPATH, r->parse, ln, pos, NULL);
+               return(ROFF_ERR);
        }
 
+       *offs = pos;
+       return(ROFF_SO);
+}
+
+/* ARGSUSED */
+static enum rofferr
+roff_userdef(ROFF_ARGS)
+{
+       const char       *arg[9];
+       char             *cp, *n1, *n2;
+       int               i;
+
        /*
-        * Parsable elements may be in the header (or be the header, for
-        * that matter).  Follow the regular parsing rules for these.
+        * Collect pointers to macro argument strings
+        * and NUL-terminate them.
         */
+       cp = *bufp + pos;
+       for (i = 0; i < 9; i++)
+               arg[i] = '\0' == *cp ? "" :
+                   mandoc_getarg(r->parse, &cp, ln, &pos);
 
-       i = 0;
-       while (*argv) {
-               if (ROFF_MAX == (c = rofffindcallable(*argv))) {
-                       assert(tree->arg);
-                       if ( ! roffdata(tree, i++, *argv++))
-                               return(0);
+       /*
+        * Expand macro arguments.
+        */
+       *szp = 0;
+       n1 = cp = mandoc_strdup(r->current_string);
+       while (NULL != (cp = strstr(cp, "\\$"))) {
+               i = cp[2] - '1';
+               if (0 > i || 8 < i) {
+                       /* Not an argument invocation. */
+                       cp += 2;
                        continue;
                }
-               if ( ! roffcall(tree, c, argv))
-                       return(0);
-               break;
-       }
 
-       /* 
-        * If there's trailing punctuation in the header, then write it
-        * out now.  Here we mimic the behaviour of a line-dominant text
-        * macro.
-        */
+               *szp = strlen(n1) - 3 + strlen(arg[i]) + 1;
+               n2 = mandoc_malloc(*szp);
 
-       if (NULL == *argv) {
-               if ( ! (*tree->cb.roffblkheadout)(tree->arg, tok))
-                       return(0);
-               return((*tree->cb.roffblkbodyin)
-                               (tree->arg, tok, argcp, 
-                                (const char **)argvp));
+               strlcpy(n2, n1, (size_t)(cp - n1 + 1));
+               strlcat(n2, arg[i], *szp);
+               strlcat(n2, cp + 3, *szp);
+
+               cp = n2 + (cp - n1);
+               free(n1);
+               n1 = n2;
        }
 
        /*
-        * Expensive.  Scan to the end of line then work backwards until
-        * a token isn't punctuation.
+        * Replace the macro invocation
+        * by the expanded macro.
         */
+       free(*bufp);
+       *bufp = n1;
+       if (0 == *szp)
+               *szp = strlen(*bufp) + 1;
 
-       if ( ! roffpurgepunct(tree, argv))
-               return(0);
-       if ( ! (*tree->cb.roffblkheadout)(tree->arg, tok))
-               return(0);
-       return((*tree->cb.roffblkbodyin)(tree->arg, 
-                               tok, argcp, (const char **)argvp));
+       return(*szp > 1 && '\n' == (*bufp)[(int)*szp - 2] ?
+          ROFF_REPARSE : ROFF_APPEND);
 }
 
-
-/* ARGSUSED */
-static int
-roff_ordered(ROFFCALL_ARGS) 
+static char *
+roff_getname(struct roff *r, char **cpp, int ln, int pos)
 {
-       int              i, first, c, argcp[ROFF_MAXLINEARG];
-       char            *ordp[ROFF_MAXLINEARG], *p,
-                       *argvp[ROFF_MAXLINEARG];
-
-       /*
-        * Ordered macros pass their arguments directly to handlers,
-        * instead of considering it free-form text.  Thus, the
-        * following macro looks as follows:
-        *
-        * .Xr foo 1 ) ,
-        *
-        * .Xr arg1 arg2 punctuation
-        */
-
-       if ( ! (ROFFSec_PR_Os & tree->asec))
-               return(roff_errp(tree, *argv, tok, ERR_NOT_PR));
-
-       first = (*argv == tree->cur);
-       p = *argv++;
-       ordp[0] = NULL;
-
-       if ( ! roffparseopts(tree, tok, &argv, argcp, argvp))
-               return(0);
-
-       if (NULL == *argv)
-               return(roffspecial(tree, tok, p, argcp, 
-                                       (const char **)argvp, 0, ordp));
+       char     *name, *cp;
 
-       i = 0;
-       while (*argv && i < ROFF_MAXLINEARG) {
-               c = ROFF_PARSED & tokens[tok].flags ?
-                       rofffindcallable(*argv) : ROFF_MAX;
+       name = *cpp;
+       if ('\0' == *name)
+               return(name);
 
-               if (ROFF_MAX == c && ! roffispunct(*argv)) {
-                       ordp[i++] = *argv++;
+       /* Read until end of name. */
+       for (cp = name; '\0' != *cp && ' ' != *cp; cp++) {
+               if ('\\' != *cp)
                        continue;
-               }
-               ordp[i] = NULL;
-
-               if (ROFF_MAX == c)
-                       break;
-
-               if ( ! roffspecial(tree, tok, p, argcp, 
-                                       (const char **)argvp,
-                                       (size_t)i, ordp))
-                       return(0);
-
-               return(roffcall(tree, c, argv));
+               cp++;
+               if ('\\' == *cp)
+                       continue;
+               mandoc_msg(MANDOCERR_NAMESC, r->parse, ln, pos, NULL);
+               *cp = '\0';
+               name = cp;
        }
 
-       assert(i != ROFF_MAXLINEARG);
-       ordp[i] = NULL;
+       /* Nil-terminate name. */
+       if ('\0' != *cp)
+               *(cp++) = '\0';
 
-       if ( ! roffspecial(tree, tok, p, argcp, 
-                               (const char**)argvp,
-                               (size_t)i, ordp))
-               return(0);
+       /* Read past spaces. */
+       while (' ' == *cp)
+               cp++;
 
-       /* FIXME: error if there's stuff after the punctuation. */
+       *cpp = cp;
+       return(name);
+}
 
-       if ( ! first || NULL == *argv)
-               return(1);
+/*
+ * Store *string into the user-defined string called *name.
+ * To clear an existing entry, call with (*r, *name, NULL, 0).
+ * append == 0: replace mode
+ * append == 1: single-line append mode
+ * append == 2: multiline append mode, append '\n' after each call
+ */
+static void
+roff_setstr(struct roff *r, const char *name, const char *string,
+       int append)
+{
 
-       return(roffpurgepunct(tree, argv));
+       roff_setstrn(&r->strtab, name, strlen(name), string,
+                       string ? strlen(string) : 0, append);
 }
 
-
-/* ARGSUSED */
-static int
-roff_text(ROFFCALL_ARGS) 
+static void
+roff_setstrn(struct roffkv **r, const char *name, size_t namesz,
+               const char *string, size_t stringsz, int append)
 {
-       int              i, j, first, c, argcp[ROFF_MAXLINEARG];
-       char            *argvp[ROFF_MAXLINEARG];
+       struct roffkv   *n;
+       char            *c;
+       int              i;
+       size_t           oldch, newch;
+
+       /* Search for an existing string with the same name. */
+       n = *r;
+
+       while (n && strcmp(name, n->key.p))
+               n = n->next;
+
+       if (NULL == n) {
+               /* Create a new string table entry. */
+               n = mandoc_malloc(sizeof(struct roffkv));
+               n->key.p = mandoc_strndup(name, namesz);
+               n->key.sz = namesz;
+               n->val.p = NULL;
+               n->val.sz = 0;
+               n->next = *r;
+               *r = n;
+       } else if (0 == append) {
+               free(n->val.p);
+               n->val.p = NULL;
+               n->val.sz = 0;
+       }
+
+       if (NULL == string)
+               return;
 
        /*
-        * Text macros are similar to special tokens, except that
-        * arguments are instead flushed as pure data: we're only
-        * concerned with the macro and its arguments.  Example:
-        * 
-        * .Fl v W f ;
-        *
-        * ...Produces...
-        *
-        * <fl> v W f </fl> ;
+        * One additional byte for the '\n' in multiline mode,
+        * and one for the terminating '\0'.
         */
-
-       if ( ! (ROFFSec_PR_Os & tree->asec))
-               return(roff_errp(tree, *argv, tok, ERR_NOT_PR));
-
-       first = (*argv == tree->cur);
-       argv++;
-
-       if ( ! roffparseopts(tree, tok, &argv, argcp, argvp))
-               return(0);
-       if ( ! (*tree->cb.roffin)(tree->arg, tok, argcp, 
-                               (const char **)argvp))
-               return(0);
-       if (NULL == *argv)
-               return((*tree->cb.roffout)(tree->arg, tok));
-
-       if ( ! (ROFF_PARSED & tokens[tok].flags)) {
-               i = 0;
-               while (*argv)
-                       if ( ! roffdata(tree, i++, *argv++))
-                               return(0);
-               return((*tree->cb.roffout)(tree->arg, tok));
+       newch = stringsz + (1 < append ? 2u : 1u);
+
+       if (NULL == n->val.p) {
+               n->val.p = mandoc_malloc(newch);
+               *n->val.p = '\0';
+               oldch = 0;
+       } else {
+               oldch = n->val.sz;
+               n->val.p = mandoc_realloc(n->val.p, oldch + newch);
        }
 
-       /*
-        * Deal with punctuation.  Ugly.  Work ahead until we encounter
-        * terminating punctuation.  If we encounter it and all
-        * subsequent tokens are punctuation, then stop processing (the
-        * line-dominant macro will print these tokens after closure).
-        * If the punctuation is followed by non-punctuation, then close
-        * and re-open our scope, then continue.
-        */
+       /* Skip existing content in the destination buffer. */
+       c = n->val.p + (int)oldch;
 
+       /* Append new content to the destination buffer. */
        i = 0;
-       while (*argv) {
-               if (ROFF_MAX != (c = rofffindcallable(*argv))) {
-                       if ( ! (ROFF_LSCOPE & tokens[tok].flags))
-                               if ( ! (*tree->cb.roffout)(tree->arg, tok))
-                                       return(0);
-       
-                       if ( ! roffcall(tree, c, argv))
-                               return(0);
-                       if (ROFF_LSCOPE & tokens[tok].flags)
-                               if ( ! (*tree->cb.roffout)(tree->arg, tok))
-                                       return(0);
-                       break;
-               }
-
-               if ( ! roffispunct(*argv)) {
-                       if ( ! roffdata(tree, i++, *argv++))
-                               return(0);
-                       continue;
-               }
-
-               i = 1;
-               for (j = 0; argv[j]; j++)
-                       if ( ! roffispunct(argv[j]))
-                               break;
-
-               if (argv[j]) {
-                       if (ROFF_LSCOPE & tokens[tok].flags) {
-                               if ( ! roffdata(tree, 0, *argv++))
-                                       return(0);
-                               continue;
-                       }
-                       if ( ! (*tree->cb.roffout)(tree->arg, tok))
-                               return(0);
-                       if ( ! roffdata(tree, 0, *argv++))
-                               return(0);
-                       if ( ! (*tree->cb.roffin)(tree->arg, tok, 
-                                               argcp, 
-                                               (const char **)argvp))
-                               return(0);
-
-                       i = 0;
-                       continue;
-               }
-
-               if ( ! (*tree->cb.roffout)(tree->arg, tok))
-                       return(0);
-               break;
+       while (i < (int)stringsz) {
+               /*
+                * Rudimentary roff copy mode:
+                * Handle escaped backslashes.
+                */
+               if ('\\' == string[i] && '\\' == string[i + 1])
+                       i++;
+               *c++ = string[i++];
        }
 
-       if (NULL == *argv)
-               return((*tree->cb.roffout)(tree->arg, tok));
-       if ( ! first)
-               return(1);
+       /* Append terminating bytes. */
+       if (1 < append)
+               *c++ = '\n';
 
-       return(roffpurgepunct(tree, argv));
+       *c = '\0';
+       n->val.sz = (int)(c - n->val.p);
 }
 
-
-/* ARGSUSED */
-static int
-roff_noop(ROFFCALL_ARGS)
+static const char *
+roff_getstrn(const struct roff *r, const char *name, size_t len)
 {
+       const struct roffkv *n;
+       int i;
 
-       return(1);
-}
-
+       for (n = r->strtab; n; n = n->next)
+               if (0 == strncmp(name, n->key.p, len) && 
+                               '\0' == n->key.p[(int)len])
+                       return(n->val.p);
 
-/* ARGSUSED */
-static int
-roff_depr(ROFFCALL_ARGS)
-{
+       for (i = 0; i < PREDEFS_MAX; i++)
+               if (0 == strncmp(name, predefs[i].name, len) &&
+                               '\0' == predefs[i].name[(int)len])
+                       return(predefs[i].str);
 
-       return(roff_errp(tree, *argv, tok, ERR_DEPREC));
+       return(NULL);
 }
 
-
-static int
-roff_warnp(const struct rofftree *tree, const char *pos,
-               int tok, enum rofferr type)
+static void
+roff_freestr(struct roffkv *r)
 {
-       char             *p;
+       struct roffkv    *n, *nn;
 
-       switch (type) {
-       case (WRN_SECORD):
-               p = "section at `%s' out of order";
-               break;
-       default:
-               abort();
-               /* NOTREACHED */
+       for (n = r; n; n = nn) {
+               free(n->key.p);
+               free(n->val.p);
+               nn = n->next;
+               free(n);
        }
+}
 
-       return(roff_warn(tree, pos, p, toknames[tok]));
+const struct tbl_span *
+roff_span(const struct roff *r)
+{
+       
+       return(r->tbl ? tbl_span(r->tbl) : NULL);
 }
 
+const struct eqn *
+roff_eqn(const struct roff *r)
+{
+       
+       return(r->last_eqn ? &r->last_eqn->eqn : NULL);
+}
 
-static int
-roff_warn(const struct rofftree *tree, const char *pos, char *fmt, ...)
+/*
+ * Duplicate an input string, making the appropriate character
+ * conversations (as stipulated by `tr') along the way.
+ * Returns a heap-allocated string with all the replacements made.
+ */
+char *
+roff_strdup(const struct roff *r, const char *p)
 {
-       va_list          ap;
-       char             buf[128];
+       const struct roffkv *cp;
+       char            *res;
+       const char      *pp;
+       size_t           ssz, sz;
+       enum mandoc_esc  esc;
 
-       va_start(ap, fmt);
-       (void)vsnprintf(buf, sizeof(buf), fmt, ap);
-       va_end(ap);
+       if (NULL == r->xmbtab && NULL == r->xtab)
+               return(mandoc_strdup(p));
+       else if ('\0' == *p)
+               return(mandoc_strdup(""));
 
-       return((*tree->cb.roffmsg)(tree->arg, 
-                               ROFF_WARN, tree->cur, pos, buf));
-}
+       /*
+        * Step through each character looking for term matches
+        * (remember that a `tr' can be invoked with an escape, which is
+        * a glyph but the escape is multi-character).
+        * We only do this if the character hash has been initialised
+        * and the string is >0 length.
+        */
 
+       res = NULL;
+       ssz = 0;
 
-static int
-roff_errp(const struct rofftree *tree, const char *pos, 
-               int tok, enum rofferr type)
-{
-       char             *p;
+       while ('\0' != *p) {
+               if ('\\' != *p && r->xtab && r->xtab[(int)*p].p) {
+                       sz = r->xtab[(int)*p].sz;
+                       res = mandoc_realloc(res, ssz + sz + 1);
+                       memcpy(res + ssz, r->xtab[(int)*p].p, sz);
+                       ssz += sz;
+                       p++;
+                       continue;
+               } else if ('\\' != *p) {
+                       res = mandoc_realloc(res, ssz + 2);
+                       res[ssz++] = *p++;
+                       continue;
+               }
 
-       switch (type) {
-       case (ERR_ARGEQ1):
-               p = "`%s' expects exactly one argument";
-               break;
-       case (ERR_ARGEQ0):
-               p = "`%s' expects exactly zero arguments";
-               break;
-       case (ERR_ARGGE1):
-               p = "`%s' expects one or more arguments";
-               break;
-       case (ERR_ARGGE2):
-               p = "`%s' expects two or more arguments";
-               break;
-       case (ERR_BADARG):
-               p = "invalid argument for `%s'";
-               break;
-       case (ERR_NOTSUP):
-               p = "macro `%s' is not supported";
-               break;
-       case(ERR_PR_OOO):
-               p = "prelude macro `%s' is out of order";
-               break;
-       case(ERR_PR_REP):
-               p = "prelude macro `%s' repeated";
-               break;
-       case(ERR_ARGLEN):
-               p = "macro argument for `%s' is too long";
-               break;
-       case(ERR_DEPREC):
-               p = "macro `%s' is deprecated";
-               break;
-       case(ERR_NOT_PR):
-               p = "macro `%s' disallowed in prelude";
-               break;
-       case(ERR_ARGMNY):
-               p = "too many arguments for macro `%s'";
-               break;
-       default:
-               abort();
-               /* NOTREACHED */
+               /* Search for term matches. */
+               for (cp = r->xmbtab; cp; cp = cp->next)
+                       if (0 == strncmp(p, cp->key.p, cp->key.sz))
+                               break;
+
+               if (NULL != cp) {
+                       /*
+                        * A match has been found.
+                        * Append the match to the array and move
+                        * forward by its keysize.
+                        */
+                       res = mandoc_realloc
+                               (res, ssz + cp->val.sz + 1);
+                       memcpy(res + ssz, cp->val.p, cp->val.sz);
+                       ssz += cp->val.sz;
+                       p += (int)cp->key.sz;
+                       continue;
+               }
+
+               /*
+                * Handle escapes carefully: we need to copy
+                * over just the escape itself, or else we might
+                * do replacements within the escape itself.
+                * Make sure to pass along the bogus string.
+                */
+               pp = p++;
+               esc = mandoc_escape(&p, NULL, NULL);
+               if (ESCAPE_ERROR == esc) {
+                       sz = strlen(pp);
+                       res = mandoc_realloc(res, ssz + sz + 1);
+                       memcpy(res + ssz, pp, sz);
+                       break;
+               }
+               /* 
+                * We bail out on bad escapes. 
+                * No need to warn: we already did so when
+                * roff_res() was called.
+                */
+               sz = (int)(p - pp);
+               res = mandoc_realloc(res, ssz + sz + 1);
+               memcpy(res + ssz, pp, sz);
+               ssz += sz;
        }
 
-       return(roff_err(tree, pos, p, toknames[tok]));
+       res[(int)ssz] = '\0';
+       return(res);
 }
 
-
-static int
-roff_err(const struct rofftree *tree, const char *pos, char *fmt, ...)
+/*
+ * Find out whether a line is a macro line or not.  
+ * If it is, adjust the current position and return one; if it isn't,
+ * return zero and don't change the current position.
+ * If the control character has been set with `.cc', then let that grain
+ * precedence.
+ * This is slighly contrary to groff, where using the non-breaking
+ * control character when `cc' has been invoked will cause the
+ * non-breaking macro contents to be printed verbatim.
+ */
+int
+roff_getcontrol(const struct roff *r, const char *cp, int *ppos)
 {
-       va_list          ap;
-       char             buf[128];
+       int             pos;
 
-       va_start(ap, fmt);
-       if (-1 == vsnprintf(buf, sizeof(buf), fmt, ap))
-               err(1, "vsnprintf");
-       va_end(ap);
+       pos = *ppos;
 
-       return((*tree->cb.roffmsg)
-                       (tree->arg, ROFF_ERROR, tree->cur, pos, buf));
-}
+       if (0 != r->control && cp[pos] == r->control)
+               pos++;
+       else if (0 != r->control)
+               return(0);
+       else if ('\\' == cp[pos] && '.' == cp[pos + 1])
+               pos += 2;
+       else if ('.' == cp[pos] || '\'' == cp[pos])
+               pos++;
+       else
+               return(0);
+
+       while (' ' == cp[pos] || '\t' == cp[pos])
+               pos++;
 
+       *ppos = pos;
+       return(1);
+}