/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to dracut-module/password-agent.c

  • Committer: Teddy Hogeborn
  • Date: 2017-08-20 14:14:14 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 360.
  • Revision ID: teddy@recompile.se-20170820141414-m034xuebg7ccaeui
Add some more restrictions to the systemd service file.

* mandos.service ([Service]/ProtectKernelTunables): New; set to "yes".
  ([Service]/ProtectControlGroups): - '' -

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
/* -*- mode: c; coding: utf-8; after-save-hook: (lambda () (let* ((find-build-directory (lambda (try-directory &optional base-directory) (let ((base-directory (or base-directory try-directory))) (cond ((equal try-directory "/") base-directory) ((file-readable-p (concat (file-name-as-directory try-directory) "Makefile")) try-directory) ((funcall find-build-directory (directory-file-name (file-name-directory try-directory)) base-directory)))))) (build-directory (funcall find-build-directory (buffer-file-name))) (local-build-directory (if (fboundp 'file-local-name) (file-local-name build-directory) (or (file-remote-p build-directory 'localname) build-directory))) (command (file-relative-name (file-name-sans-extension (buffer-file-name)) build-directory))) (pcase (progn (if (get-buffer "*Test*") (kill-buffer "*Test*")) (process-file-shell-command (let ((qbdir (shell-quote-argument local-build-directory)) (qcmd (shell-quote-argument command))) (format "cd %s && CFLAGS=-Werror make --silent %s && %s --test --verbose" qbdir qcmd qcmd)) nil "*Test*")) (0 (let ((w (get-buffer-window "*Test*"))) (if w (delete-window w)))) (_ (with-current-buffer "*Test*" (compilation-mode) (cd-absolute build-directory)) (display-buffer "*Test*" '(display-buffer-in-side-window)))))); -*- */
2
 
/*
3
 
 * Mandos password agent - Simple password agent to run Mandos client
4
 
 *
5
 
 * Copyright © 2019 Teddy Hogeborn
6
 
 * Copyright © 2019 Björn Påhlsson
7
 
 * 
8
 
 * This file is part of Mandos.
9
 
 * 
10
 
 * Mandos is free software: you can redistribute it and/or modify it
11
 
 * under the terms of the GNU General Public License as published by
12
 
 * the Free Software Foundation, either version 3 of the License, or
13
 
 * (at your option) any later version.
14
 
 * 
15
 
 * Mandos is distributed in the hope that it will be useful, but
16
 
 * WITHOUT ANY WARRANTY; without even the implied warranty of
17
 
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
18
 
 * General Public License for more details.
19
 
 * 
20
 
 * You should have received a copy of the GNU General Public License
21
 
 * along with Mandos.  If not, see <http://www.gnu.org/licenses/>.
22
 
 * 
23
 
 * Contact the authors at <mandos@recompile.se>.
24
 
 */
25
 
 
26
 
#define _GNU_SOURCE
27
 
#include <inttypes.h>           /* uintmax_t, PRIuMAX, PRIdMAX,
28
 
                                   intmax_t, uint32_t, SCNx32,
29
 
                                   SCNuMAX, SCNxMAX */
30
 
#include <stddef.h>             /* size_t */
31
 
#include <sys/types.h>          /* pid_t, uid_t, gid_t, getuid(),
32
 
                                   getpid() */
33
 
#include <stdbool.h>            /* bool, true, false */
34
 
#include <signal.h>             /* struct sigaction, sigset_t,
35
 
                                   sigemptyset(), sigaddset(),
36
 
                                   SIGCHLD, pthread_sigmask(),
37
 
                                   SIG_BLOCK, SIG_SETMASK, SA_RESTART,
38
 
                                   SA_NOCLDSTOP, sigfillset(), kill(),
39
 
                                   SIGTERM, sigdelset(), SIGKILL,
40
 
                                   NSIG, sigismember(), SA_ONSTACK,
41
 
                                   SIG_DFL, SIG_IGN, SIGINT, SIGQUIT,
42
 
                                   SIGHUP, SIGSTOP, SIG_UNBLOCK */
43
 
#include <stdlib.h>             /* EXIT_SUCCESS, EXIT_FAILURE,
44
 
                                   malloc(), free(), strtoumax(),
45
 
                                   realloc(), setenv(), calloc(),
46
 
                                   mkdtemp(), mkostemp() */
47
 
#include <iso646.h>             /* not, or, and, xor */
48
 
#include <error.h>              /* error() */
49
 
#include <sysexits.h>           /* EX_USAGE, EX_OSERR, EX_OSFILE */
50
 
#include <errno.h>              /* errno, error_t, EACCES,
51
 
                                   ENAMETOOLONG, ENOENT, EEXIST,
52
 
                                   ECHILD, EPERM, ENOMEM, EAGAIN,
53
 
                                   EINTR, ENOBUFS, EADDRINUSE,
54
 
                                   ECONNREFUSED, ECONNRESET,
55
 
                                   ETOOMANYREFS, EMSGSIZE, EBADF,
56
 
                                   EINVAL */
57
 
#include <string.h>             /* strdup(), memcpy(),
58
 
                                   explicit_bzero(), memset(),
59
 
                                   strcmp(), strlen(), strncpy(),
60
 
                                   memcmp(), basename() */
61
 
#include <argz.h>               /* argz_create(), argz_count(),
62
 
                                   argz_extract(), argz_next(),
63
 
                                   argz_add() */
64
 
#include <sys/epoll.h>          /* epoll_create1(), EPOLL_CLOEXEC,
65
 
                                   epoll_ctl(), EPOLL_CTL_ADD,
66
 
                                   struct epoll_event, EPOLLIN,
67
 
                                   EPOLLRDHUP, EPOLLOUT,
68
 
                                   epoll_pwait() */
69
 
#include <time.h>               /* struct timespec, clock_gettime(),
70
 
                                   CLOCK_MONOTONIC */
71
 
#include <argp.h>               /* struct argp_option, OPTION_HIDDEN,
72
 
                                   OPTION_ALIAS, struct argp_state,
73
 
                                   ARGP_ERR_UNKNOWN, ARGP_KEY_ARGS,
74
 
                                   struct argp, argp_parse(),
75
 
                                   ARGP_NO_EXIT */
76
 
#include <unistd.h>             /* uid_t, gid_t, close(), pipe2(),
77
 
                                   fork(), _exit(), dup2(),
78
 
                                   STDOUT_FILENO, setresgid(),
79
 
                                   setresuid(), execv(), ssize_t,
80
 
                                   read(), dup3(), getuid(), dup(),
81
 
                                   STDERR_FILENO, pause(), write(),
82
 
                                   rmdir(), unlink(), getpid() */
83
 
#include <sys/mman.h>           /* munlock(), mlock() */
84
 
#include <fcntl.h>              /* O_CLOEXEC, O_NONBLOCK, fcntl(),
85
 
                                   F_GETFD, F_GETFL, FD_CLOEXEC,
86
 
                                   open(), O_WRONLY, O_RDONLY */
87
 
#include <sys/wait.h>           /* waitpid(), WNOHANG, WIFEXITED(),
88
 
                                   WEXITSTATUS() */
89
 
#include <limits.h>             /* PIPE_BUF, NAME_MAX, INT_MAX */
90
 
#include <sys/inotify.h>        /* inotify_init1(), IN_NONBLOCK,
91
 
                                   IN_CLOEXEC, inotify_add_watch(),
92
 
                                   IN_CLOSE_WRITE, IN_MOVED_TO,
93
 
                                   IN_DELETE, struct inotify_event */
94
 
#include <fnmatch.h>            /* fnmatch(), FNM_FILE_NAME */
95
 
#include <stdio.h>              /* asprintf(), FILE, fopen(),
96
 
                                   getline(), sscanf(), feof(),
97
 
                                   ferror(), fclose(), stderr,
98
 
                                   rename(), fdopen(), fprintf(),
99
 
                                   fscanf() */
100
 
#include <glib.h>    /* GKeyFile, g_key_file_free(), g_key_file_new(),
101
 
                        GError, g_key_file_load_from_file(),
102
 
                        G_KEY_FILE_NONE, TRUE, G_FILE_ERROR_NOENT,
103
 
                        g_key_file_get_string(), guint64,
104
 
                        g_key_file_get_uint64(),
105
 
                        G_KEY_FILE_ERROR_KEY_NOT_FOUND, gconstpointer,
106
 
                        g_assert_true(), g_assert_nonnull(),
107
 
                        g_assert_null(), g_assert_false(),
108
 
                        g_assert_cmpint(), g_assert_cmpuint(),
109
 
                        g_test_skip(), g_assert_cmpstr(),
110
 
                        g_test_init(), g_test_add(), g_test_run(),
111
 
                        GOptionContext, g_option_context_new(),
112
 
                        g_option_context_set_help_enabled(), FALSE,
113
 
                        g_option_context_set_ignore_unknown_options(),
114
 
                        gboolean, GOptionEntry, G_OPTION_ARG_NONE,
115
 
                        g_option_context_add_main_entries(),
116
 
                        g_option_context_parse(),
117
 
                        g_option_context_free(), g_error() */
118
 
#include <sys/un.h>             /* struct sockaddr_un, SUN_LEN */
119
 
#include <sys/socket.h>         /* AF_LOCAL, socket(), PF_LOCAL,
120
 
                                   SOCK_DGRAM, SOCK_NONBLOCK,
121
 
                                   SOCK_CLOEXEC, connect(),
122
 
                                   struct sockaddr, socklen_t,
123
 
                                   shutdown(), SHUT_RD, send(),
124
 
                                   MSG_NOSIGNAL, bind(), recv(),
125
 
                                   socketpair() */
126
 
#include <glob.h>               /* globfree(), glob_t, glob(),
127
 
                                   GLOB_ERR, GLOB_NOSORT, GLOB_MARK,
128
 
                                   GLOB_ABORTED, GLOB_NOMATCH,
129
 
                                   GLOB_NOSPACE */
130
 
 
131
 
/* End of includes */
132
 
 
133
 
/* Start of declarations of private types and functions */
134
 
 
135
 
/* microseconds of CLOCK_MONOTONIC absolute time; 0 means unset */
136
 
typedef uintmax_t mono_microsecs;
137
 
 
138
 
/* "task_queue" - A queue of tasks to be run */
139
 
typedef struct {
140
 
  struct task_struct *tasks;    /* Tasks in this queue */
141
 
  size_t length;                /* Number of tasks */
142
 
  /* Memory allocated for "tasks", in bytes */
143
 
  size_t allocated;             
144
 
  /* Time when this queue should be run, at the latest */
145
 
  mono_microsecs next_run;
146
 
} __attribute__((designated_init)) task_queue;
147
 
 
148
 
/* "func_type" - A function type for task functions
149
 
 
150
 
   I.e. functions for the code which runs when a task is run, all have
151
 
   this type */
152
 
typedef void (task_func) (const struct task_struct,
153
 
                          task_queue *const)
154
 
  __attribute__((nonnull));
155
 
 
156
 
/* "buffer" - A data buffer for a growing array of bytes
157
 
 
158
 
   Used for the "password" variable */
159
 
typedef struct {
160
 
  char *data;
161
 
  size_t length;
162
 
  size_t allocated;
163
 
} __attribute__((designated_init)) buffer;
164
 
 
165
 
/* "string_set" - A set type which can contain strings
166
 
 
167
 
   Used by the "cancelled_filenames" variable */
168
 
typedef struct {
169
 
  char *argz;                   /* Do not access these except in */
170
 
  size_t argz_len;              /* the string_set_* functions */
171
 
} __attribute__((designated_init)) string_set;
172
 
 
173
 
/* "task_context" - local variables for tasks
174
 
 
175
 
   This data structure distinguishes between different tasks which are
176
 
   using the same function.  This data structure is passed to every
177
 
   task function when each task is run.
178
 
 
179
 
   Note that not every task uses every struct member. */
180
 
typedef struct task_struct {
181
 
  task_func *const func;         /* The function run by this task */
182
 
  char *const question_filename; /* The question file */
183
 
  const pid_t pid;               /* Mandos client process ID */
184
 
  const int epoll_fd;            /* The epoll set file descriptor */
185
 
  bool *const quit_now;          /* Set to true on fatal errors */
186
 
  const int fd;                  /* General purpose file descriptor */
187
 
  bool *const mandos_client_exited; /* Set true when client exits */
188
 
  buffer *const password;           /* As read from client process */
189
 
  bool *const password_is_read;     /* "password" is done growing */
190
 
  char *filename;                   /* General purpose file name */
191
 
  /* A set of strings of all the file names of questions which have
192
 
     been cancelled for any reason; tasks pertaining to these question
193
 
     files should not be run */
194
 
  string_set *const cancelled_filenames;
195
 
  const mono_microsecs notafter; /* "NotAfter" from question file */
196
 
  /* Updated before each queue run; is compared with queue.next_run */
197
 
  const mono_microsecs *const current_time;
198
 
} __attribute__((designated_init)) task_context;
199
 
 
200
 
/* Declare all our functions here so we can define them in any order
201
 
   below.  Note: test functions are *not* declared here, they are
202
 
   declared in the test section. */
203
 
__attribute__((warn_unused_result))
204
 
static bool should_only_run_tests(int *, char **[]);
205
 
__attribute__((warn_unused_result, cold))
206
 
static bool run_tests(int, char *[]);
207
 
static void handle_sigchld(__attribute__((unused)) int sig){}
208
 
__attribute__((warn_unused_result, malloc))
209
 
task_queue *create_queue(void);
210
 
__attribute__((nonnull, warn_unused_result))
211
 
bool add_to_queue(task_queue *const, const task_context);
212
 
__attribute__((nonnull))
213
 
void cleanup_task(const task_context *const);
214
 
__attribute__((nonnull))
215
 
void cleanup_queue(task_queue *const *const);
216
 
__attribute__((pure, nonnull, warn_unused_result))
217
 
bool queue_has_question(const task_queue *const);
218
 
__attribute__((nonnull))
219
 
void cleanup_close(const int *const);
220
 
__attribute__((nonnull))
221
 
void cleanup_string(char *const *const);
222
 
__attribute__((nonnull))
223
 
void cleanup_buffer(buffer *const);
224
 
__attribute__((pure, nonnull, warn_unused_result))
225
 
bool string_set_contains(const string_set, const char *const);
226
 
__attribute__((nonnull, warn_unused_result))
227
 
bool string_set_add(string_set *const, const char *const);
228
 
__attribute__((nonnull))
229
 
void string_set_clear(string_set *);
230
 
void string_set_swap(string_set *const, string_set *const);
231
 
__attribute__((nonnull, warn_unused_result))
232
 
bool start_mandos_client(task_queue *const, const int, bool *const,
233
 
                         bool *const, buffer *const, bool *const,
234
 
                         const struct sigaction *const,
235
 
                         const sigset_t, const char *const,
236
 
                         const uid_t, const gid_t,
237
 
                         const char *const *const);
238
 
__attribute__((nonnull))
239
 
task_func wait_for_mandos_client_exit;
240
 
__attribute__((nonnull))
241
 
task_func read_mandos_client_output;
242
 
__attribute__((warn_unused_result))
243
 
bool add_inotify_dir_watch(task_queue *const, const int, bool *const,
244
 
                           buffer *const, const char *const,
245
 
                           string_set *, const mono_microsecs *const,
246
 
                           bool *const, bool *const);
247
 
__attribute__((nonnull))
248
 
task_func read_inotify_event;
249
 
__attribute__((nonnull))
250
 
task_func open_and_parse_question;
251
 
__attribute__((nonnull))
252
 
task_func cancel_old_question;
253
 
__attribute__((nonnull))
254
 
task_func connect_question_socket;
255
 
__attribute__((nonnull))
256
 
task_func send_password_to_socket;
257
 
__attribute__((warn_unused_result))
258
 
bool add_existing_questions(task_queue *const, const int,
259
 
                            buffer *const, string_set *,
260
 
                            const mono_microsecs *const,
261
 
                            bool *const, bool *const,
262
 
                            const char *const);
263
 
__attribute__((nonnull, warn_unused_result))
264
 
bool wait_for_event(const int, const mono_microsecs,
265
 
                    const mono_microsecs);
266
 
bool run_queue(task_queue **const, string_set *const, bool *const);
267
 
bool clear_all_fds_from_epoll_set(const int);
268
 
mono_microsecs get_current_time(void);
269
 
__attribute__((nonnull, warn_unused_result))
270
 
bool setup_signal_handler(struct sigaction *const);
271
 
__attribute__((nonnull))
272
 
bool restore_signal_handler(const struct sigaction *const);
273
 
__attribute__((nonnull, warn_unused_result))
274
 
bool block_sigchld(sigset_t *const);
275
 
__attribute__((nonnull))
276
 
bool restore_sigmask(const sigset_t *const);
277
 
__attribute__((nonnull))
278
 
bool parse_arguments(int, char *[], const bool, char **, char **,
279
 
                     uid_t *const , gid_t *const, char **, size_t *);
280
 
 
281
 
/* End of declarations of private types and functions */
282
 
 
283
 
/* Start of "main" section; this section LACKS TESTS!
284
 
 
285
 
   Code here should be as simple as possible. */
286
 
 
287
 
/* These are required to be global by Argp */
288
 
const char *argp_program_version = "password-agent " VERSION;
289
 
const char *argp_program_bug_address = "<mandos@recompile.se>";
290
 
 
291
 
int main(int argc, char *argv[]){
292
 
 
293
 
  /* If the --test option is passed, skip all normal operations and
294
 
     instead only run the run_tests() function, which also does all
295
 
     its own option parsing, so we don't have to do anything here. */
296
 
  if(should_only_run_tests(&argc, &argv)){
297
 
    if(run_tests(argc, argv)){
298
 
      return EXIT_SUCCESS;      /* All tests successful */
299
 
    }
300
 
    return EXIT_FAILURE;        /* Some test(s) failed */
301
 
  }
302
 
 
303
 
  __attribute__((cleanup(cleanup_string)))
304
 
    char *agent_directory = NULL;
305
 
 
306
 
  __attribute__((cleanup(cleanup_string)))
307
 
    char *helper_directory = NULL;
308
 
 
309
 
  uid_t user = 0;
310
 
  gid_t group = 0;
311
 
 
312
 
  __attribute__((cleanup(cleanup_string)))
313
 
    char *mandos_argz = NULL;
314
 
  size_t mandos_argz_length = 0;
315
 
 
316
 
  if(not parse_arguments(argc, argv, true, &agent_directory,
317
 
                         &helper_directory, &user, &group,
318
 
                         &mandos_argz, &mandos_argz_length)){
319
 
    /* This should never happen, since "true" is passed as the third
320
 
       argument to parse_arguments() above, which should make
321
 
       argp_parse() call exit() if any parsing error occurs. */
322
 
    error(EX_USAGE, errno, "Failed to parse arguments");
323
 
  }
324
 
 
325
 
  const char default_agent_directory[] = "/run/systemd/ask-password";
326
 
  const char default_helper_directory[]
327
 
    = "/lib/mandos/plugin-helpers";
328
 
  const char *const default_argv[]
329
 
    = {"/lib/mandos/plugins.d/mandos-client", NULL };
330
 
 
331
 
  /* Set variables to default values if unset */
332
 
  if(agent_directory == NULL){
333
 
    agent_directory = strdup(default_agent_directory);
334
 
    if(agent_directory == NULL){
335
 
      error(EX_OSERR, errno, "Failed strdup()");
336
 
    }
337
 
  }
338
 
  if(helper_directory == NULL){
339
 
    helper_directory = strdup(default_helper_directory);
340
 
    if(helper_directory == NULL){
341
 
      error(EX_OSERR, errno, "Failed strdup()");
342
 
    }
343
 
  }
344
 
  if(user == 0){
345
 
    user = 65534;               /* nobody */
346
 
  }
347
 
  if(group == 0){
348
 
    group = 65534;              /* nogroup */
349
 
  }
350
 
  /* If parse_opt did not create an argz vector, create one with
351
 
     default values */
352
 
  if(mandos_argz == NULL){
353
 
#ifdef __GNUC__
354
 
#pragma GCC diagnostic push
355
 
    /* argz_create() takes a non-const argv for some unknown reason -
356
 
       argz_create() isn't modifying the strings, just copying them.
357
 
       Therefore, this cast to non-const should be safe. */
358
 
#pragma GCC diagnostic ignored "-Wcast-qual"
359
 
#endif
360
 
    errno = argz_create((char *const *)default_argv, &mandos_argz,
361
 
                        &mandos_argz_length);
362
 
#ifdef __GNUC__
363
 
#pragma GCC diagnostic pop
364
 
#endif
365
 
    if(errno != 0){
366
 
      error(EX_OSERR, errno, "Failed argz_create()");
367
 
    }
368
 
  }
369
 
  /* Use argz vector to create a normal argv, usable by execv() */
370
 
 
371
 
  char **mandos_argv = malloc((argz_count(mandos_argz,
372
 
                                          mandos_argz_length)
373
 
                               + 1) * sizeof(char *));
374
 
  if(mandos_argv == NULL){
375
 
    error_t saved_errno = errno;
376
 
    free(mandos_argz);
377
 
    error(EX_OSERR, saved_errno, "Failed malloc()");
378
 
  }
379
 
  argz_extract(mandos_argz, mandos_argz_length, mandos_argv);
380
 
 
381
 
  sigset_t orig_sigmask;
382
 
  if(not block_sigchld(&orig_sigmask)){
383
 
    return EX_OSERR;
384
 
  }
385
 
 
386
 
  struct sigaction old_sigchld_action;
387
 
  if(not setup_signal_handler(&old_sigchld_action)){
388
 
    return EX_OSERR;
389
 
  }
390
 
 
391
 
  mono_microsecs current_time = 0;
392
 
 
393
 
  bool mandos_client_exited = false;
394
 
  bool quit_now = false;
395
 
  __attribute__((cleanup(cleanup_close)))
396
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
397
 
  if(epoll_fd < 0){
398
 
    error(EX_OSERR, errno, "Failed to create epoll set fd");
399
 
  }
400
 
  __attribute__((cleanup(cleanup_queue)))
401
 
    task_queue *queue = create_queue();
402
 
  if(queue == NULL){
403
 
    error(EX_OSERR, errno, "Failed to create task queue");
404
 
  }
405
 
 
406
 
  __attribute__((cleanup(cleanup_buffer)))
407
 
    buffer password = {};
408
 
  bool password_is_read = false;
409
 
 
410
 
  __attribute__((cleanup(string_set_clear)))
411
 
    string_set cancelled_filenames = {};
412
 
 
413
 
  /* Add tasks to queue */
414
 
  if(not start_mandos_client(queue, epoll_fd, &mandos_client_exited,
415
 
                             &quit_now, &password, &password_is_read,
416
 
                             &old_sigchld_action, orig_sigmask,
417
 
                             helper_directory, user, group,
418
 
                             (const char *const *)mandos_argv)){
419
 
    return EX_OSERR;            /* Error has already been printed */
420
 
  }
421
 
  /* These variables were only for start_mandos_client() and are not
422
 
     needed anymore */
423
 
  free(mandos_argv);
424
 
  free(mandos_argz);
425
 
  mandos_argz = NULL;
426
 
  if(not add_inotify_dir_watch(queue, epoll_fd, &quit_now, &password,
427
 
                               agent_directory, &cancelled_filenames,
428
 
                               &current_time, &mandos_client_exited,
429
 
                               &password_is_read)){
430
 
    switch(errno){              /* Error has already been printed */
431
 
    case EACCES:
432
 
    case ENAMETOOLONG:
433
 
    case ENOENT:
434
 
      return EX_OSFILE;
435
 
    default:
436
 
      return EX_OSERR;
437
 
    }
438
 
  }
439
 
  if(not add_existing_questions(queue, epoll_fd, &password,
440
 
                                &cancelled_filenames, &current_time,
441
 
                                &mandos_client_exited,
442
 
                                &password_is_read, agent_directory)){
443
 
    return EXIT_FAILURE;        /* Error has already been printed */
444
 
  }
445
 
 
446
 
  /* Run queue */
447
 
  do {
448
 
    current_time = get_current_time();
449
 
    if(not wait_for_event(epoll_fd, queue->next_run, current_time)){
450
 
      const error_t saved_errno = errno;
451
 
      error(EXIT_FAILURE, saved_errno, "Failure while waiting for"
452
 
            " events");
453
 
    }
454
 
 
455
 
    current_time = get_current_time();
456
 
    if(not run_queue(&queue, &cancelled_filenames, &quit_now)){
457
 
      const error_t saved_errno = errno;
458
 
      error(EXIT_FAILURE, saved_errno, "Failure while running queue");
459
 
    }
460
 
 
461
 
    /*  When no tasks about questions are left in the queue, break out
462
 
        of the loop (and implicitly exit the program) */
463
 
  } while(queue_has_question(queue));
464
 
 
465
 
  restore_signal_handler(&old_sigchld_action);
466
 
  restore_sigmask(&orig_sigmask);
467
 
 
468
 
  return EXIT_SUCCESS;
469
 
}
470
 
 
471
 
__attribute__((warn_unused_result))
472
 
mono_microsecs get_current_time(void){
473
 
  struct timespec currtime;
474
 
  if(clock_gettime(CLOCK_MONOTONIC, &currtime) != 0){
475
 
    error(0, errno, "Failed to get current time");
476
 
    return 0;
477
 
  }
478
 
  return ((mono_microsecs)currtime.tv_sec * 1000000) /* seconds */
479
 
    + ((mono_microsecs)currtime.tv_nsec / 1000);     /* nanoseconds */
480
 
}
481
 
 
482
 
/* End of "main" section */
483
 
 
484
 
/* Start of regular code section; ALL this code has tests */
485
 
 
486
 
__attribute__((nonnull))
487
 
bool parse_arguments(int argc, char *argv[], const bool exit_failure,
488
 
                     char **agent_directory, char **helper_directory,
489
 
                     uid_t *const user, gid_t *const group,
490
 
                     char **mandos_argz, size_t *mandos_argz_length){
491
 
 
492
 
  const struct argp_option options[] = {
493
 
    { .name="agent-directory",.key='d', .arg="DIRECTORY",
494
 
      .doc="Systemd password agent directory" },
495
 
    { .name="helper-directory",.key=128, .arg="DIRECTORY",
496
 
      .doc="Mandos Client password helper directory" },
497
 
    { .name="plugin-helper-dir", .key=129, /* From plugin-runner */
498
 
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
499
 
    { .name="user", .key='u', .arg="USERID",
500
 
      .doc="User ID the Mandos Client will use as its unprivileged"
501
 
      " user" },
502
 
    { .name="userid", .key=130, /* From plugin--runner */
503
 
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
504
 
    { .name="group", .key='g', .arg="GROUPID",
505
 
      .doc="Group ID the Mandos Client will use as its unprivileged"
506
 
      " group" },
507
 
    { .name="groupid", .key=131, /* From plugin--runner */
508
 
      .flags=OPTION_HIDDEN | OPTION_ALIAS },
509
 
    { .name="test", .key=255, /* See should_only_run_tests() */
510
 
      .doc="Skip normal operation, and only run self-tests.  See"
511
 
      " --test --help.", .group=10, },
512
 
    { NULL },
513
 
  };
514
 
 
515
 
  __attribute__((nonnull(3)))
516
 
    error_t parse_opt(int key, char *arg, struct argp_state *state){
517
 
    errno = 0;
518
 
    switch(key){
519
 
    case 'd':                   /* --agent-directory */
520
 
      *agent_directory = strdup(arg);
521
 
      break;
522
 
    case 128:                   /* --helper-directory */
523
 
    case 129:                   /* --plugin-helper-dir */
524
 
      *helper_directory = strdup(arg);
525
 
      break;
526
 
    case 'u':                   /* --user */
527
 
    case 130:                   /* --userid */
528
 
      {
529
 
        char *tmp;
530
 
        uintmax_t tmp_id = 0;
531
 
        errno = 0;
532
 
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
533
 
        if(errno != 0 or tmp == arg or *tmp != '\0'
534
 
           or tmp_id != (uid_t)tmp_id or (uid_t)tmp_id == 0){
535
 
          return ARGP_ERR_UNKNOWN;
536
 
        }
537
 
        *user = (uid_t)tmp_id;
538
 
        errno = 0;
539
 
        break;
540
 
      }
541
 
    case 'g':                   /* --group */
542
 
    case 131:                   /* --groupid */
543
 
      {
544
 
        char *tmp;
545
 
        uintmax_t tmp_id = 0;
546
 
        errno = 0;
547
 
        tmp_id = (uid_t)strtoumax(arg, &tmp, 10);
548
 
        if(errno != 0 or tmp == arg or *tmp != '\0'
549
 
           or tmp_id != (gid_t)tmp_id or (gid_t)tmp_id == 0){
550
 
          return ARGP_ERR_UNKNOWN;
551
 
        }
552
 
        *group = (gid_t)tmp_id;
553
 
        errno = 0;
554
 
        break;
555
 
      }
556
 
    case ARGP_KEY_ARGS:
557
 
      /* Copy arguments into argz vector */
558
 
      return argz_create(state->argv + state->next, mandos_argz,
559
 
                         mandos_argz_length);
560
 
    default:
561
 
      return ARGP_ERR_UNKNOWN;
562
 
    }
563
 
    return errno;
564
 
  }
565
 
 
566
 
  const struct argp argp = {
567
 
    .options=options,
568
 
    .parser=parse_opt,
569
 
    .args_doc="[MANDOS_CLIENT [OPTION...]]\n--test",
570
 
    .doc = "Mandos password agent -- runs Mandos client as a"
571
 
    " systemd password agent",
572
 
  };
573
 
 
574
 
  errno = argp_parse(&argp, argc, argv,
575
 
                     exit_failure ? 0 : ARGP_NO_EXIT, NULL, NULL);
576
 
 
577
 
  return errno == 0;
578
 
}
579
 
 
580
 
__attribute__((nonnull, warn_unused_result))
581
 
bool block_sigchld(sigset_t *const orig_sigmask){
582
 
  sigset_t sigchld_sigmask;
583
 
  if(sigemptyset(&sigchld_sigmask) < 0){
584
 
    error(0, errno, "Failed to empty signal set");
585
 
    return false;
586
 
  }
587
 
  if(sigaddset(&sigchld_sigmask, SIGCHLD) < 0){
588
 
    error(0, errno, "Failed to add SIGCHLD to signal set");
589
 
    return false;
590
 
  }
591
 
  if(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask, orig_sigmask) != 0){
592
 
    error(0, errno, "Failed to block SIGCHLD signal");
593
 
    return false;
594
 
  }
595
 
  return true;
596
 
}
597
 
 
598
 
__attribute__((nonnull, warn_unused_result, const))
599
 
bool restore_sigmask(const sigset_t *const orig_sigmask){
600
 
  if(pthread_sigmask(SIG_SETMASK, orig_sigmask, NULL) != 0){
601
 
    error(0, errno, "Failed to restore blocked signals");
602
 
    return false;
603
 
  }
604
 
  return true;
605
 
}
606
 
 
607
 
__attribute__((nonnull, warn_unused_result))
608
 
bool setup_signal_handler(struct sigaction *const old_sigchld_action){
609
 
  struct sigaction sigchld_action = {
610
 
    .sa_handler=handle_sigchld,
611
 
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
612
 
  };
613
 
  /* Set all signals in "sa_mask" struct member; this makes all
614
 
     signals automatically blocked during signal handler */
615
 
  if(sigfillset(&sigchld_action.sa_mask) != 0){
616
 
    error(0, errno, "Failed to do sigfillset()");
617
 
    return false;
618
 
  }
619
 
  if(sigaction(SIGCHLD, &sigchld_action, old_sigchld_action) != 0){
620
 
    error(0, errno, "Failed to set SIGCHLD signal handler");
621
 
    return false;
622
 
  }
623
 
  return true;
624
 
}
625
 
 
626
 
__attribute__((nonnull, warn_unused_result))
627
 
bool restore_signal_handler(const struct sigaction *const
628
 
                            old_sigchld_action){
629
 
  if(sigaction(SIGCHLD, old_sigchld_action, NULL) != 0){
630
 
    error(0, errno, "Failed to restore signal handler");
631
 
    return false;
632
 
  }
633
 
  return true;
634
 
}
635
 
 
636
 
__attribute__((warn_unused_result, malloc))
637
 
task_queue *create_queue(void){
638
 
  task_queue *queue = malloc(sizeof(task_queue));
639
 
  if(queue){
640
 
    queue->tasks = NULL;
641
 
    queue->length = 0;
642
 
    queue->allocated = 0;
643
 
    queue->next_run = 0;
644
 
  }
645
 
  return queue;
646
 
}
647
 
 
648
 
__attribute__((nonnull, warn_unused_result))
649
 
bool add_to_queue(task_queue *const queue, const task_context task){
650
 
  const size_t needed_size = sizeof(task_context)*(queue->length + 1);
651
 
  if(needed_size > (queue->allocated)){
652
 
    task_context *const new_tasks = realloc(queue->tasks,
653
 
                                            needed_size);
654
 
    if(new_tasks == NULL){
655
 
      error(0, errno, "Failed to allocate %" PRIuMAX
656
 
            " bytes for queue->tasks", (uintmax_t)needed_size);
657
 
      return false;
658
 
    }
659
 
    queue->tasks = new_tasks;
660
 
    queue->allocated = needed_size;
661
 
  }
662
 
  /* Using memcpy here is necessary because doing */
663
 
  /* queue->tasks[queue->length++] = task; */
664
 
  /* would violate const-ness of task members */
665
 
  memcpy(&(queue->tasks[queue->length++]), &task,
666
 
         sizeof(task_context));
667
 
  return true;
668
 
}
669
 
 
670
 
__attribute__((nonnull))
671
 
void cleanup_task(const task_context *const task){
672
 
  const error_t saved_errno = errno;
673
 
  /* free and close all task data */
674
 
  free(task->question_filename);
675
 
  if(task->filename != task->question_filename){
676
 
    free(task->filename);
677
 
  }
678
 
  if(task->pid > 0){
679
 
    kill(task->pid, SIGTERM);
680
 
  }
681
 
  if(task->fd > 0){
682
 
    close(task->fd);
683
 
  }
684
 
  errno = saved_errno;
685
 
}
686
 
 
687
 
__attribute__((nonnull))
688
 
void free_queue(task_queue *const queue){
689
 
  free(queue->tasks);
690
 
  free(queue);
691
 
}
692
 
 
693
 
__attribute__((nonnull))
694
 
void cleanup_queue(task_queue *const *const queue){
695
 
  if(*queue == NULL){
696
 
    return;
697
 
  }
698
 
  for(size_t i = 0; i < (*queue)->length; i++){
699
 
    const task_context *const task = ((*queue)->tasks)+i;
700
 
    cleanup_task(task);
701
 
  }
702
 
  free_queue(*queue);
703
 
}
704
 
 
705
 
__attribute__((pure, nonnull, warn_unused_result))
706
 
bool queue_has_question(const task_queue *const queue){
707
 
  for(size_t i=0; i < queue->length; i++){
708
 
    if(queue->tasks[i].question_filename != NULL){
709
 
      return true;
710
 
    }
711
 
  }
712
 
  return false;
713
 
}
714
 
 
715
 
__attribute__((nonnull))
716
 
void cleanup_close(const int *const fd){
717
 
  const error_t saved_errno = errno;
718
 
  close(*fd);
719
 
  errno = saved_errno;
720
 
}
721
 
 
722
 
__attribute__((nonnull))
723
 
void cleanup_string(char *const *const ptr){
724
 
  free(*ptr);
725
 
}
726
 
 
727
 
__attribute__((nonnull))
728
 
void cleanup_buffer(buffer *buf){
729
 
  if(buf->allocated > 0){
730
 
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
731
 
    explicit_bzero(buf->data, buf->allocated);
732
 
#else
733
 
    memset(buf->data, '\0', buf->allocated);
734
 
#endif
735
 
  }
736
 
  if(buf->data != NULL){
737
 
    if(munlock(buf->data, buf->allocated) != 0){
738
 
      error(0, errno, "Failed to unlock memory of old buffer");
739
 
    }
740
 
    free(buf->data);
741
 
    buf->data = NULL;
742
 
  }
743
 
  buf->length = 0;
744
 
  buf->allocated = 0;
745
 
}
746
 
 
747
 
__attribute__((pure, nonnull, warn_unused_result))
748
 
bool string_set_contains(const string_set set, const char *const str){
749
 
  for(const char *s = set.argz; s != NULL and set.argz_len > 0;
750
 
      s = argz_next(set.argz, set.argz_len, s)){
751
 
    if(strcmp(s, str) == 0){
752
 
      return true;
753
 
    }
754
 
  }
755
 
  return false;
756
 
}
757
 
 
758
 
__attribute__((nonnull, warn_unused_result))
759
 
bool string_set_add(string_set *const set, const char *const str){
760
 
  if(string_set_contains(*set, str)){
761
 
    return true;
762
 
  }
763
 
  error_t error = argz_add(&set->argz, &set->argz_len, str);
764
 
  if(error == 0){
765
 
    return true;
766
 
  }
767
 
  errno = error;
768
 
  return false;
769
 
}
770
 
 
771
 
__attribute__((nonnull))
772
 
void string_set_clear(string_set *set){
773
 
  free(set->argz);
774
 
  set->argz = NULL;
775
 
  set->argz_len = 0;
776
 
}
777
 
 
778
 
__attribute__((nonnull))
779
 
void string_set_swap(string_set *const set1, string_set *const set2){
780
 
  /* Swap contents of two string sets */
781
 
  {
782
 
    char *const tmp_argz = set1->argz;
783
 
    set1->argz = set2->argz;
784
 
    set2->argz = tmp_argz;
785
 
  }
786
 
  {
787
 
    const size_t tmp_argz_len = set1->argz_len;
788
 
    set1->argz_len = set2->argz_len;
789
 
    set2->argz_len = tmp_argz_len;
790
 
  }
791
 
}
792
 
 
793
 
__attribute__((nonnull, warn_unused_result))
794
 
bool start_mandos_client(task_queue *const queue,
795
 
                         const int epoll_fd,
796
 
                         bool *const mandos_client_exited,
797
 
                         bool *const quit_now, buffer *const password,
798
 
                         bool *const password_is_read,
799
 
                         const struct sigaction *const
800
 
                         old_sigchld_action, const sigset_t sigmask,
801
 
                         const char *const helper_directory,
802
 
                         const uid_t user, const gid_t group,
803
 
                         const char *const *const argv){
804
 
  int pipefds[2];
805
 
  if(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK) != 0){
806
 
    error(0, errno, "Failed to pipe2(..., O_CLOEXEC | O_NONBLOCK)");
807
 
    return false;
808
 
  }
809
 
 
810
 
  const pid_t pid = fork();
811
 
  if(pid == 0){
812
 
    if(not restore_signal_handler(old_sigchld_action)){
813
 
      _exit(EXIT_FAILURE);
814
 
    }
815
 
    if(not restore_sigmask(&sigmask)){
816
 
      _exit(EXIT_FAILURE);
817
 
    }
818
 
    if(close(pipefds[0]) != 0){
819
 
      error(0, errno, "Failed to close() parent pipe fd");
820
 
      _exit(EXIT_FAILURE);
821
 
    }
822
 
    if(dup2(pipefds[1], STDOUT_FILENO) == -1){
823
 
      error(0, errno, "Failed to dup2() pipe fd to stdout");
824
 
      _exit(EXIT_FAILURE);
825
 
    }
826
 
    if(close(pipefds[1]) != 0){
827
 
      error(0, errno, "Failed to close() old child pipe fd");
828
 
      _exit(EXIT_FAILURE);
829
 
    }
830
 
    if(setenv("MANDOSPLUGINHELPERDIR", helper_directory, 1) != 0){
831
 
      error(0, errno, "Failed to setenv(\"MANDOSPLUGINHELPERDIR\","
832
 
            " \"%s\", 1)", helper_directory);
833
 
      _exit(EXIT_FAILURE);
834
 
    }
835
 
    if(group != 0 and setresgid(group, 0, 0) == -1){
836
 
      error(0, errno, "Failed to setresgid(-1, %" PRIuMAX ", %"
837
 
            PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
838
 
      _exit(EXIT_FAILURE);
839
 
    }
840
 
    if(user != 0 and setresuid(user, 0, 0) == -1){
841
 
      error(0, errno, "Failed to setresuid(-1, %" PRIuMAX ", %"
842
 
            PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
843
 
      _exit(EXIT_FAILURE);
844
 
    }
845
 
#ifdef __GNUC__
846
 
#pragma GCC diagnostic push
847
 
    /* For historical reasons, the "argv" argument to execv() is not
848
 
       const, but it is safe to override this. */
849
 
#pragma GCC diagnostic ignored "-Wcast-qual"
850
 
#endif
851
 
    execv(argv[0], (char **)argv);
852
 
#ifdef __GNUC__
853
 
#pragma GCC diagnostic pop
854
 
#endif
855
 
    error(0, errno, "execv(\"%s\", ...) failed", argv[0]);
856
 
    _exit(EXIT_FAILURE);
857
 
  }
858
 
  close(pipefds[1]);
859
 
 
860
 
  if(not add_to_queue(queue, (task_context){
861
 
        .func=wait_for_mandos_client_exit,
862
 
        .pid=pid,
863
 
        .mandos_client_exited=mandos_client_exited,
864
 
        .quit_now=quit_now,
865
 
      })){
866
 
    error(0, errno, "Failed to add wait_for_mandos_client to queue");
867
 
    close(pipefds[0]);
868
 
    return false;
869
 
  }
870
 
 
871
 
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, pipefds[0],
872
 
                            &(struct epoll_event)
873
 
                            { .events=EPOLLIN | EPOLLRDHUP });
874
 
  if(ret != 0 and errno != EEXIST){
875
 
    error(0, errno, "Failed to add file descriptor to epoll set");
876
 
    close(pipefds[0]);
877
 
    return false;
878
 
  }
879
 
 
880
 
  return add_to_queue(queue, (task_context){
881
 
      .func=read_mandos_client_output,
882
 
      .epoll_fd=epoll_fd,
883
 
      .fd=pipefds[0],
884
 
      .quit_now=quit_now,
885
 
      .password=password,
886
 
      .password_is_read=password_is_read,
887
 
    });
888
 
}
889
 
 
890
 
__attribute__((nonnull))
891
 
void wait_for_mandos_client_exit(const task_context task,
892
 
                                 task_queue *const queue){
893
 
  const pid_t pid = task.pid;
894
 
  bool *const mandos_client_exited = task.mandos_client_exited;
895
 
  bool *const quit_now = task.quit_now;
896
 
 
897
 
  int status;
898
 
  switch(waitpid(pid, &status, WNOHANG)){
899
 
  case 0:                       /* Not exited yet */
900
 
    if(not add_to_queue(queue, task)){
901
 
      error(0, errno, "Failed to add myself to queue");
902
 
      *quit_now = true;
903
 
    }
904
 
    break;
905
 
  case -1:                      /* Error */
906
 
    error(0, errno, "waitpid(%" PRIdMAX ") failed", (intmax_t)pid);
907
 
    if(errno != ECHILD){
908
 
      kill(pid, SIGTERM);
909
 
    }
910
 
    *quit_now = true;
911
 
    break;
912
 
  default:                      /* Has exited */
913
 
    *mandos_client_exited = true;
914
 
    if((not WIFEXITED(status))
915
 
       or (WEXITSTATUS(status) != EXIT_SUCCESS)){
916
 
      error(0, 0, "Mandos client failed or was killed");
917
 
      *quit_now = true;
918
 
    }
919
 
  }
920
 
}
921
 
 
922
 
__attribute__((nonnull))
923
 
void read_mandos_client_output(const task_context task,
924
 
                               task_queue *const queue){
925
 
  buffer *const password = task.password;
926
 
  bool *const quit_now = task.quit_now;
927
 
  bool *const password_is_read = task.password_is_read;
928
 
  const int fd = task.fd;
929
 
  const int epoll_fd = task.epoll_fd;
930
 
 
931
 
  const size_t new_potential_size = (password->length + PIPE_BUF);
932
 
  if(password->allocated < new_potential_size){
933
 
    char *const new_buffer = calloc(new_potential_size, 1);
934
 
    if(new_buffer == NULL){
935
 
      error(0, errno, "Failed to allocate %" PRIuMAX
936
 
            " bytes for password", (uintmax_t)new_potential_size);
937
 
      *quit_now = true;
938
 
      close(fd);
939
 
      return;
940
 
    }
941
 
    if(mlock(new_buffer, new_potential_size) != 0){
942
 
      /* Warn but do not treat as fatal error */
943
 
      if(errno != EPERM and errno != ENOMEM){
944
 
        error(0, errno, "Failed to lock memory for password");
945
 
      }
946
 
    }
947
 
    if(password->length > 0){
948
 
      memcpy(new_buffer, password->data, password->length);
949
 
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
950
 
      explicit_bzero(password->data, password->allocated);
951
 
#else
952
 
      memset(password->data, '\0', password->allocated);
953
 
#endif
954
 
    }
955
 
    if(password->data != NULL){
956
 
      if(munlock(password->data, password->allocated) != 0){
957
 
        error(0, errno, "Failed to unlock memory of old buffer");
958
 
      }
959
 
      free(password->data);
960
 
    }
961
 
    password->data = new_buffer;
962
 
    password->allocated = new_potential_size;
963
 
  }
964
 
 
965
 
  const ssize_t read_length = read(fd, password->data
966
 
                                   + password->length, PIPE_BUF);
967
 
 
968
 
  if(read_length == 0){ /* EOF */
969
 
    *password_is_read = true;
970
 
    close(fd);
971
 
    return;
972
 
  }
973
 
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
974
 
    error(0, errno, "Failed to read password from Mandos client");
975
 
    *quit_now = true;
976
 
    close(fd);
977
 
    return;
978
 
  }
979
 
  if(read_length > 0){          /* Data has been read */
980
 
    password->length += (size_t)read_length;
981
 
  }
982
 
 
983
 
  /* Either data was read, or EAGAIN was indicated, meaning no data
984
 
     available yet */
985
 
 
986
 
  /* Re-add the fd to the epoll set */
987
 
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
988
 
                            &(struct epoll_event)
989
 
                            { .events=EPOLLIN | EPOLLRDHUP });
990
 
  if(ret != 0 and errno != EEXIST){
991
 
    error(0, errno, "Failed to re-add file descriptor to epoll set");
992
 
    *quit_now = true;
993
 
    close(fd);
994
 
    return;
995
 
  }
996
 
 
997
 
  /* Re-add myself to the queue */
998
 
  if(not add_to_queue(queue, task)){
999
 
    error(0, errno, "Failed to add myself to queue");
1000
 
    *quit_now = true;
1001
 
    close(fd);
1002
 
  }
1003
 
}
1004
 
 
1005
 
__attribute__((nonnull, warn_unused_result))
1006
 
bool add_inotify_dir_watch(task_queue *const queue,
1007
 
                           const int epoll_fd, bool *const quit_now,
1008
 
                           buffer *const password,
1009
 
                           const char *const dir,
1010
 
                           string_set *cancelled_filenames,
1011
 
                           const mono_microsecs *const current_time,
1012
 
                           bool *const mandos_client_exited,
1013
 
                           bool *const password_is_read){
1014
 
  const int fd = inotify_init1(IN_NONBLOCK | IN_CLOEXEC);
1015
 
  if(fd == -1){
1016
 
    error(0, errno, "Failed to create inotify instance");
1017
 
    return false;
1018
 
  }
1019
 
 
1020
 
  if(inotify_add_watch(fd, dir, IN_CLOSE_WRITE
1021
 
                       | IN_MOVED_TO | IN_DELETE)
1022
 
     == -1){
1023
 
    error(0, errno, "Failed to create inotify watch on %s", dir);
1024
 
    return false;
1025
 
  }
1026
 
 
1027
 
  /* Add the inotify fd to the epoll set */
1028
 
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1029
 
                            &(struct epoll_event)
1030
 
                            { .events=EPOLLIN | EPOLLRDHUP });
1031
 
  if(ret != 0 and errno != EEXIST){
1032
 
    error(0, errno, "Failed to add file descriptor to epoll set");
1033
 
    close(fd);
1034
 
    return false;
1035
 
  }
1036
 
 
1037
 
  const task_context read_inotify_event_task = {
1038
 
    .func=read_inotify_event,
1039
 
    .epoll_fd=epoll_fd,
1040
 
    .quit_now=quit_now,
1041
 
    .password=password,
1042
 
    .fd=fd,
1043
 
    .filename=strdup(dir),
1044
 
    .cancelled_filenames=cancelled_filenames,
1045
 
    .current_time=current_time,
1046
 
    .mandos_client_exited=mandos_client_exited,
1047
 
    .password_is_read=password_is_read,
1048
 
  };
1049
 
  if(read_inotify_event_task.filename == NULL){
1050
 
    error(0, errno, "Failed to strdup(\"%s\")", dir);
1051
 
    close(fd);
1052
 
    return false;
1053
 
  }
1054
 
 
1055
 
  return add_to_queue(queue, read_inotify_event_task);
1056
 
}
1057
 
 
1058
 
__attribute__((nonnull))
1059
 
void read_inotify_event(const task_context task,
1060
 
                        task_queue *const queue){
1061
 
  const int fd = task.fd;
1062
 
  const int epoll_fd = task.epoll_fd;
1063
 
  char *const filename = task.filename;
1064
 
  bool *quit_now = task.quit_now;
1065
 
  buffer *const password = task.password;
1066
 
  string_set *const cancelled_filenames = task.cancelled_filenames;
1067
 
  const mono_microsecs *const current_time = task.current_time;
1068
 
  bool *const mandos_client_exited = task.mandos_client_exited;
1069
 
  bool *const password_is_read = task.password_is_read;
1070
 
 
1071
 
  /* "sufficient to read at least one event." - inotify(7) */
1072
 
  const size_t ievent_size = (sizeof(struct inotify_event)
1073
 
                              + NAME_MAX + 1);
1074
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
1075
 
  struct inotify_event *ievent = ((struct inotify_event *)
1076
 
                                  ievent_buffer);
1077
 
 
1078
 
  const ssize_t read_length = read(fd, ievent, ievent_size);
1079
 
  if(read_length == 0){ /* EOF */
1080
 
    error(0, 0, "Got EOF from inotify fd for directory %s", filename);
1081
 
    *quit_now = true;
1082
 
    cleanup_task(&task);
1083
 
    return;
1084
 
  }
1085
 
  if(read_length < 0 and errno != EAGAIN){ /* Actual error */
1086
 
    error(0, errno, "Failed to read from inotify fd for directory %s",
1087
 
          filename);
1088
 
    *quit_now = true;
1089
 
    cleanup_task(&task);
1090
 
    return;
1091
 
  }
1092
 
  if(read_length > 0            /* Data has been read */
1093
 
     and fnmatch("ask.*", ievent->name, FNM_FILE_NAME) == 0){
1094
 
    char *question_filename = NULL;
1095
 
    const ssize_t question_filename_length
1096
 
      = asprintf(&question_filename, "%s/%s", filename, ievent->name);
1097
 
    if(question_filename_length < 0){
1098
 
      error(0, errno, "Failed to create file name from directory name"
1099
 
            " %s and file name %s", filename, ievent->name);
1100
 
    } else {
1101
 
      if(ievent->mask & (IN_CLOSE_WRITE | IN_MOVED_TO)){
1102
 
        if(not add_to_queue(queue, (task_context){
1103
 
              .func=open_and_parse_question,
1104
 
              .epoll_fd=epoll_fd,
1105
 
              .question_filename=question_filename,
1106
 
              .filename=question_filename,
1107
 
              .password=password,
1108
 
              .cancelled_filenames=cancelled_filenames,
1109
 
              .current_time=current_time,
1110
 
              .mandos_client_exited=mandos_client_exited,
1111
 
              .password_is_read=password_is_read,
1112
 
            })){
1113
 
          error(0, errno, "Failed to add open_and_parse_question task"
1114
 
                " for file name %s to queue", filename);
1115
 
        } else {
1116
 
          /* Force the added task (open_and_parse_question) to run
1117
 
             immediately */
1118
 
          queue->next_run = 1;
1119
 
        }
1120
 
      } else if(ievent->mask & IN_DELETE){
1121
 
        if(not string_set_add(cancelled_filenames,
1122
 
                              question_filename)){
1123
 
          error(0, errno, "Could not add question %s to"
1124
 
                " cancelled_questions", question_filename);
1125
 
          *quit_now = true;
1126
 
          free(question_filename);
1127
 
          cleanup_task(&task);
1128
 
          return;
1129
 
        }
1130
 
        free(question_filename);
1131
 
      }
1132
 
    }
1133
 
  }
1134
 
 
1135
 
  /* Either data was read, or EAGAIN was indicated, meaning no data
1136
 
     available yet */
1137
 
 
1138
 
  /* Re-add myself to the queue */
1139
 
  if(not add_to_queue(queue, task)){
1140
 
    error(0, errno, "Failed to re-add read_inotify_event(%s) to"
1141
 
          " queue", filename);
1142
 
    *quit_now = true;
1143
 
    cleanup_task(&task);
1144
 
    return;
1145
 
  }
1146
 
 
1147
 
  /* Re-add the fd to the epoll set */
1148
 
  const int ret = epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1149
 
                            &(struct epoll_event)
1150
 
                            { .events=EPOLLIN | EPOLLRDHUP });
1151
 
  if(ret != 0 and errno != EEXIST){
1152
 
    error(0, errno, "Failed to re-add inotify file descriptor %d for"
1153
 
          " directory %s to epoll set", fd, filename);
1154
 
    /* Force the added task (read_inotify_event) to run again, at most
1155
 
       one second from now */
1156
 
    if((queue->next_run == 0)
1157
 
       or (queue->next_run > (*current_time + 1000000))){
1158
 
      queue->next_run = *current_time + 1000000;
1159
 
    }
1160
 
  }
1161
 
}
1162
 
 
1163
 
__attribute__((nonnull))
1164
 
void open_and_parse_question(const task_context task,
1165
 
                             task_queue *const queue){
1166
 
  __attribute__((cleanup(cleanup_string)))
1167
 
    char *question_filename = task.question_filename;
1168
 
  const int epoll_fd = task.epoll_fd;
1169
 
  buffer *const password = task.password;
1170
 
  string_set *const cancelled_filenames = task.cancelled_filenames;
1171
 
  const mono_microsecs *const current_time = task.current_time;
1172
 
  bool *const mandos_client_exited = task.mandos_client_exited;
1173
 
  bool *const password_is_read = task.password_is_read;
1174
 
 
1175
 
  /* We use the GLib "Key-value file parser" functions to parse the
1176
 
     question file.  See <https://www.freedesktop.org/wiki/Software
1177
 
     /systemd/PasswordAgents/> for specification of contents */
1178
 
  __attribute__((nonnull))
1179
 
    void cleanup_g_key_file(GKeyFile **key_file){
1180
 
    if(*key_file != NULL){
1181
 
      g_key_file_free(*key_file);
1182
 
    }
1183
 
  }
1184
 
 
1185
 
  __attribute__((cleanup(cleanup_g_key_file)))
1186
 
    GKeyFile *key_file = g_key_file_new();
1187
 
  if(key_file == NULL){
1188
 
    error(0, errno, "Failed g_key_file_new() for \"%s\"",
1189
 
          question_filename);
1190
 
    return;
1191
 
  }
1192
 
  GError *glib_error = NULL;
1193
 
  if(g_key_file_load_from_file(key_file, question_filename,
1194
 
                               G_KEY_FILE_NONE, &glib_error) != TRUE){
1195
 
    /* If a file was removed, we should ignore it, so */
1196
 
    /* only show error message if file actually existed */
1197
 
    if(glib_error->code != G_FILE_ERROR_NOENT){
1198
 
      error(0, 0, "Failed to load question data from file \"%s\": %s",
1199
 
            question_filename, glib_error->message);
1200
 
    }
1201
 
    return;
1202
 
  }
1203
 
 
1204
 
  __attribute__((cleanup(cleanup_string)))
1205
 
    char *socket_name = g_key_file_get_string(key_file, "Ask",
1206
 
                                              "Socket",
1207
 
                                              &glib_error);
1208
 
  if(socket_name == NULL){
1209
 
    error(0, 0, "Question file \"%s\" did not contain \"Socket\": %s",
1210
 
          question_filename, glib_error->message);
1211
 
    return;
1212
 
  }
1213
 
 
1214
 
  if(strlen(socket_name) == 0){
1215
 
    error(0, 0, "Question file \"%s\" had empty \"Socket\" value",
1216
 
          question_filename);
1217
 
    return;
1218
 
  }
1219
 
 
1220
 
  const guint64 pid = g_key_file_get_uint64(key_file, "Ask", "PID",
1221
 
                                            &glib_error);
1222
 
  if(glib_error != NULL){
1223
 
    error(0, 0, "Question file \"%s\" contained bad \"PID\": %s",
1224
 
          question_filename, glib_error->message);
1225
 
    return;
1226
 
  }
1227
 
 
1228
 
  if((pid != (guint64)((pid_t)pid))
1229
 
     or (kill((pid_t)pid, 0) != 0)){
1230
 
    error(0, 0, "PID %" PRIuMAX " in question file \"%s\" is bad or"
1231
 
          " does not exist", (uintmax_t)pid, question_filename);
1232
 
    return;
1233
 
  }
1234
 
 
1235
 
  guint64 notafter = g_key_file_get_uint64(key_file, "Ask",
1236
 
                                           "NotAfter", &glib_error);
1237
 
  if(glib_error != NULL){
1238
 
    if(glib_error->code != G_KEY_FILE_ERROR_KEY_NOT_FOUND){
1239
 
      error(0, 0, "Question file \"%s\" contained bad \"NotAfter\":"
1240
 
            " %s", question_filename, glib_error->message);
1241
 
    }
1242
 
    notafter = 0;
1243
 
  }
1244
 
  if(notafter != 0){
1245
 
    if(queue->next_run == 0 or (queue->next_run > notafter)){
1246
 
      queue->next_run = notafter;
1247
 
    }
1248
 
    if(*current_time >= notafter){
1249
 
      return;
1250
 
    }
1251
 
  }
1252
 
 
1253
 
  const task_context connect_question_socket_task = {
1254
 
    .func=connect_question_socket,
1255
 
    .question_filename=strdup(question_filename),
1256
 
    .epoll_fd=epoll_fd,
1257
 
    .password=password,
1258
 
    .filename=strdup(socket_name),
1259
 
    .cancelled_filenames=task.cancelled_filenames,
1260
 
    .mandos_client_exited=mandos_client_exited,
1261
 
    .password_is_read=password_is_read,
1262
 
    .current_time=current_time,
1263
 
  };
1264
 
  if(connect_question_socket_task.question_filename == NULL
1265
 
     or connect_question_socket_task.filename == NULL
1266
 
     or not add_to_queue(queue, connect_question_socket_task)){
1267
 
    error(0, errno, "Failed to add connect_question_socket for socket"
1268
 
          " %s (from \"%s\") to queue", socket_name,
1269
 
          question_filename);
1270
 
    cleanup_task(&connect_question_socket_task);
1271
 
    return;
1272
 
  }
1273
 
  /* Force the added task (connect_question_socket) to run
1274
 
     immediately */
1275
 
  queue->next_run = 1;
1276
 
 
1277
 
  if(notafter > 0){
1278
 
    char *const dup_filename = strdup(question_filename);
1279
 
    const task_context cancel_old_question_task = {
1280
 
      .func=cancel_old_question,
1281
 
      .question_filename=dup_filename,
1282
 
      .notafter=notafter,
1283
 
      .filename=dup_filename,
1284
 
      .cancelled_filenames=cancelled_filenames,
1285
 
      .current_time=current_time,
1286
 
    };
1287
 
    if(cancel_old_question_task.question_filename == NULL
1288
 
       or not add_to_queue(queue, cancel_old_question_task)){
1289
 
      error(0, errno, "Failed to add cancel_old_question for file "
1290
 
            "\"%s\" to queue", question_filename);
1291
 
      cleanup_task(&cancel_old_question_task);
1292
 
      return;
1293
 
    }
1294
 
  }
1295
 
}
1296
 
 
1297
 
__attribute__((nonnull))
1298
 
void cancel_old_question(const task_context task,
1299
 
                         task_queue *const queue){
1300
 
  char *const question_filename = task.question_filename;
1301
 
  string_set *const cancelled_filenames = task.cancelled_filenames;
1302
 
  const mono_microsecs notafter = task.notafter;
1303
 
  const mono_microsecs *const current_time = task.current_time;
1304
 
 
1305
 
  if(*current_time >= notafter){
1306
 
    if(not string_set_add(cancelled_filenames, question_filename)){
1307
 
      error(0, errno, "Failed to cancel question for file %s",
1308
 
            question_filename);
1309
 
    }
1310
 
    cleanup_task(&task);
1311
 
    return;
1312
 
  }
1313
 
 
1314
 
  if(not add_to_queue(queue, task)){
1315
 
    error(0, errno, "Failed to add cancel_old_question for file "
1316
 
          "%s to queue", question_filename);
1317
 
    cleanup_task(&task);
1318
 
    return;
1319
 
  }
1320
 
 
1321
 
  if((queue->next_run == 0) or (queue->next_run > notafter)){
1322
 
    queue->next_run = notafter;
1323
 
  }
1324
 
}
1325
 
 
1326
 
__attribute__((nonnull))
1327
 
void connect_question_socket(const task_context task,
1328
 
                             task_queue *const queue){
1329
 
  char *const question_filename = task.question_filename;
1330
 
  char *const filename = task.filename;
1331
 
  const int epoll_fd = task.epoll_fd;
1332
 
  buffer *const password = task.password;
1333
 
  string_set *const cancelled_filenames = task.cancelled_filenames;
1334
 
  bool *const mandos_client_exited = task.mandos_client_exited;
1335
 
  bool *const password_is_read = task.password_is_read;
1336
 
  const mono_microsecs *const current_time = task.current_time;
1337
 
 
1338
 
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
1339
 
 
1340
 
  if(sizeof(sock_name.sun_path) <= strlen(filename)){
1341
 
    error(0, 0, "Socket filename is larger than"
1342
 
          " sizeof(sockaddr_un.sun_path); %" PRIuMAX ": \"%s\"",
1343
 
          (uintmax_t)sizeof(sock_name.sun_path), filename);
1344
 
    if(not string_set_add(cancelled_filenames, question_filename)){
1345
 
      error(0, errno, "Failed to cancel question for file %s",
1346
 
            question_filename);
1347
 
    }
1348
 
    cleanup_task(&task);
1349
 
    return;
1350
 
  }
1351
 
 
1352
 
  const int fd = socket(PF_LOCAL, SOCK_DGRAM
1353
 
                        | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
1354
 
  if(fd < 0){
1355
 
    error(0, errno,
1356
 
          "Failed to create socket(PF_LOCAL, SOCK_DGRAM, 0)");
1357
 
    if(not add_to_queue(queue, task)){
1358
 
      error(0, errno, "Failed to add connect_question_socket for file"
1359
 
            " \"%s\" and socket \"%s\" to queue", question_filename,
1360
 
            filename);
1361
 
      cleanup_task(&task);
1362
 
    } else {
1363
 
      /* Force the added task (connect_question_socket) to run
1364
 
         immediately */
1365
 
      queue->next_run = 1;
1366
 
    }
1367
 
    return;
1368
 
  }
1369
 
 
1370
 
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
1371
 
  if(connect(fd, (struct sockaddr *)&sock_name,
1372
 
             (socklen_t)SUN_LEN(&sock_name)) != 0){
1373
 
    error(0, errno, "Failed to connect socket to \"%s\"", filename);
1374
 
    if(not add_to_queue(queue, task)){
1375
 
      error(0, errno, "Failed to add connect_question_socket for file"
1376
 
            " \"%s\" and socket \"%s\" to queue", question_filename,
1377
 
            filename);
1378
 
      cleanup_task(&task);
1379
 
    } else {
1380
 
      /* Force the added task (connect_question_socket) to run again,
1381
 
         at most one second from now */
1382
 
      if((queue->next_run == 0)
1383
 
         or (queue->next_run > (*current_time + 1000000))){
1384
 
        queue->next_run = *current_time + 1000000;
1385
 
      }
1386
 
    }
1387
 
    return;
1388
 
  }
1389
 
 
1390
 
  /* Not necessary, but we can try, and merely warn on failure */
1391
 
  if(shutdown(fd, SHUT_RD) != 0){
1392
 
    error(0, errno, "Failed to shutdown reading from socket \"%s\"",
1393
 
          filename);
1394
 
  }
1395
 
 
1396
 
  /* Add the fd to the epoll set */
1397
 
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1398
 
               &(struct epoll_event){ .events=EPOLLOUT })
1399
 
     != 0){
1400
 
    error(0, errno, "Failed to add inotify file descriptor %d for"
1401
 
          " socket %s to epoll set", fd, filename);
1402
 
    if(not add_to_queue(queue, task)){
1403
 
      error(0, errno, "Failed to add connect_question_socket for file"
1404
 
            " \"%s\" and socket \"%s\" to queue", question_filename,
1405
 
            filename);
1406
 
      cleanup_task(&task);
1407
 
    } else {
1408
 
      /* Force the added task (connect_question_socket) to run again,
1409
 
         at most one second from now */
1410
 
      if((queue->next_run == 0)
1411
 
         or (queue->next_run > (*current_time + 1000000))){
1412
 
        queue->next_run = *current_time + 1000000;
1413
 
      }
1414
 
    }
1415
 
    return;
1416
 
  }
1417
 
 
1418
 
  /* add task send_password_to_socket to queue */
1419
 
  const task_context send_password_to_socket_task = {
1420
 
    .func=send_password_to_socket,
1421
 
    .question_filename=question_filename,
1422
 
    .filename=filename,
1423
 
    .epoll_fd=epoll_fd,
1424
 
    .fd=fd,
1425
 
    .password=password,
1426
 
    .cancelled_filenames=cancelled_filenames,
1427
 
    .mandos_client_exited=mandos_client_exited,
1428
 
    .password_is_read=password_is_read,
1429
 
    .current_time=current_time,
1430
 
  };
1431
 
 
1432
 
  if(not add_to_queue(queue, send_password_to_socket_task)){
1433
 
    error(0, errno, "Failed to add send_password_to_socket for"
1434
 
          " file \"%s\" and socket \"%s\" to queue",
1435
 
          question_filename, filename);
1436
 
    cleanup_task(&send_password_to_socket_task);
1437
 
  }
1438
 
}
1439
 
 
1440
 
__attribute__((nonnull))
1441
 
void send_password_to_socket(const task_context task,
1442
 
                             task_queue *const queue){
1443
 
  char *const question_filename=task.question_filename;
1444
 
  char *const filename=task.filename;
1445
 
  const int epoll_fd=task.epoll_fd;
1446
 
  const int fd=task.fd;
1447
 
  buffer *const password=task.password;
1448
 
  string_set *const cancelled_filenames=task.cancelled_filenames;
1449
 
  bool *const mandos_client_exited = task.mandos_client_exited;
1450
 
  bool *const password_is_read = task.password_is_read;
1451
 
  const mono_microsecs *const current_time = task.current_time;
1452
 
 
1453
 
  if(*mandos_client_exited and *password_is_read){
1454
 
 
1455
 
    const size_t send_buffer_length = password->length + 2;
1456
 
    char *send_buffer = malloc(send_buffer_length);
1457
 
    if(send_buffer == NULL){
1458
 
      error(0, errno, "Failed to allocate send_buffer");
1459
 
    } else {
1460
 
      if(mlock(send_buffer, send_buffer_length) != 0){
1461
 
        /* Warn but do not treat as fatal error */
1462
 
        if(errno != EPERM and errno != ENOMEM){
1463
 
          error(0, errno, "Failed to lock memory for password"
1464
 
                " buffer");
1465
 
        }
1466
 
      }
1467
 
      /* “[…] send a single datagram to the socket consisting of the
1468
 
         password string either prefixed with "+" or with "-"
1469
 
         depending on whether the password entry was successful or
1470
 
         not. You may but don't have to include a final NUL byte in
1471
 
         your message.
1472
 
 
1473
 
         — <https://www.freedesktop.org/wiki/Software/systemd/
1474
 
         PasswordAgents/> (Wed 08 Oct 2014 02:14:28 AM UTC)
1475
 
      */
1476
 
      send_buffer[0] = '+';     /* Prefix with "+" */
1477
 
      /* Always add an extra NUL */
1478
 
      send_buffer[password->length + 1] = '\0';
1479
 
      if(password->length > 0){
1480
 
        memcpy(send_buffer + 1, password->data, password->length);
1481
 
      }
1482
 
      errno = 0;
1483
 
      ssize_t ssret = send(fd, send_buffer, send_buffer_length,
1484
 
                           MSG_NOSIGNAL);
1485
 
      const error_t saved_errno = errno;
1486
 
#if defined(__GLIBC_PREREQ) and __GLIBC_PREREQ(2, 25)
1487
 
      explicit_bzero(send_buffer, send_buffer_length);
1488
 
#else
1489
 
      memset(send_buffer, '\0', send_buffer_length);
1490
 
#endif
1491
 
      if(munlock(send_buffer, send_buffer_length) != 0){
1492
 
        error(0, errno, "Failed to unlock memory of send buffer");
1493
 
      }
1494
 
      free(send_buffer);
1495
 
      if(ssret < 0 or ssret < (ssize_t)send_buffer_length){
1496
 
        switch(saved_errno){
1497
 
        case EINTR:
1498
 
        case ENOBUFS:
1499
 
        case ENOMEM:
1500
 
        case EADDRINUSE:
1501
 
        case ECONNREFUSED:
1502
 
        case ECONNRESET:
1503
 
        case ENOENT:
1504
 
        case ETOOMANYREFS:
1505
 
        case EAGAIN:
1506
 
          /* Retry, below */
1507
 
          break;
1508
 
        case EMSGSIZE:
1509
 
          error(0, 0, "Password of size %" PRIuMAX " is too big",
1510
 
                (uintmax_t)password->length);
1511
 
#if __GNUC__ < 7
1512
 
          /* FALLTHROUGH */
1513
 
#else
1514
 
          __attribute__((fallthrough));
1515
 
#endif
1516
 
        case 0:
1517
 
          if(ssret >= 0 and ssret < (ssize_t)send_buffer_length){
1518
 
            error(0, 0, "Password only partially sent to socket");
1519
 
          }
1520
 
#if __GNUC__ < 7
1521
 
          /* FALLTHROUGH */
1522
 
#else
1523
 
          __attribute__((fallthrough));
1524
 
#endif
1525
 
        default:
1526
 
          error(0, saved_errno, "Failed to send() to socket %s",
1527
 
                filename);
1528
 
          if(not string_set_add(cancelled_filenames,
1529
 
                                question_filename)){
1530
 
            error(0, errno, "Failed to cancel question for file %s",
1531
 
                  question_filename);
1532
 
          }
1533
 
          cleanup_task(&task);
1534
 
          return;
1535
 
        }
1536
 
      } else {
1537
 
        /* Success */
1538
 
        cleanup_task(&task);
1539
 
        return;
1540
 
      }
1541
 
    }
1542
 
  }
1543
 
 
1544
 
  /* We failed or are not ready yet; retry later */
1545
 
 
1546
 
  if(not add_to_queue(queue, task)){
1547
 
    error(0, errno, "Failed to add send_password_to_socket for"
1548
 
          " file %s and socket %s to queue", question_filename,
1549
 
          filename);
1550
 
    cleanup_task(&task);
1551
 
  }
1552
 
 
1553
 
  /* Add the fd to the epoll set */
1554
 
  if(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, fd,
1555
 
               &(struct epoll_event){ .events=EPOLLOUT })
1556
 
     != 0){
1557
 
    error(0, errno, "Failed to add socket file descriptor %d for"
1558
 
          " socket %s to epoll set", fd, filename);
1559
 
    /* Force the added task (send_password_to_socket) to run again, at
1560
 
       most one second from now */
1561
 
    if((queue->next_run == 0)
1562
 
       or (queue->next_run > (*current_time + 1000000))){
1563
 
      queue->next_run = *current_time + 1000000;
1564
 
    }
1565
 
  }
1566
 
}
1567
 
 
1568
 
__attribute__((warn_unused_result))
1569
 
bool add_existing_questions(task_queue *const queue,
1570
 
                            const int epoll_fd,
1571
 
                            buffer *const password,
1572
 
                            string_set *cancelled_filenames,
1573
 
                            const mono_microsecs *const current_time,
1574
 
                            bool *const mandos_client_exited,
1575
 
                            bool *const password_is_read,
1576
 
                            const char *const dirname){
1577
 
  __attribute__((cleanup(cleanup_string)))
1578
 
    char *dir_pattern = NULL;
1579
 
  const int ret = asprintf(&dir_pattern, "%s/ask.*", dirname);
1580
 
  if(ret < 0 or dir_pattern == NULL){
1581
 
    error(0, errno, "Could not create glob pattern for directory %s",
1582
 
          dirname);
1583
 
    return false;
1584
 
  }
1585
 
  __attribute__((cleanup(globfree)))
1586
 
    glob_t question_filenames = {};
1587
 
  switch(glob(dir_pattern, GLOB_ERR | GLOB_NOSORT | GLOB_MARK,
1588
 
              NULL, &question_filenames)){
1589
 
  case GLOB_ABORTED:
1590
 
  default:
1591
 
    error(0, errno, "Failed to open directory %s", dirname);
1592
 
    return false;
1593
 
  case GLOB_NOMATCH:
1594
 
    error(0, errno, "There are no question files in %s", dirname);
1595
 
    return false;
1596
 
  case GLOB_NOSPACE:
1597
 
    error(0, errno, "Could not allocate memory for question file"
1598
 
          " names in %s", dirname);
1599
 
#if __GNUC__ < 7
1600
 
    /* FALLTHROUGH */
1601
 
#else
1602
 
    __attribute__((fallthrough));
1603
 
#endif
1604
 
  case 0:
1605
 
    for(size_t i = 0; i < question_filenames.gl_pathc; i++){
1606
 
      char *const question_filename = strdup(question_filenames
1607
 
                                             .gl_pathv[i]);
1608
 
      const task_context task = {
1609
 
        .func=open_and_parse_question,
1610
 
        .epoll_fd=epoll_fd,
1611
 
        .question_filename=question_filename,
1612
 
        .filename=question_filename,
1613
 
        .password=password,
1614
 
        .cancelled_filenames=cancelled_filenames,
1615
 
        .current_time=current_time,
1616
 
        .mandos_client_exited=mandos_client_exited,
1617
 
        .password_is_read=password_is_read,
1618
 
      };
1619
 
 
1620
 
      if(question_filename == NULL
1621
 
         or not add_to_queue(queue, task)){
1622
 
        error(0, errno, "Failed to add open_and_parse_question for"
1623
 
              " file %s to queue",
1624
 
              question_filenames.gl_pathv[i]);
1625
 
        free(question_filename);
1626
 
      } else {
1627
 
        queue->next_run = 1;
1628
 
      }
1629
 
    }
1630
 
    return true;
1631
 
  }
1632
 
}
1633
 
 
1634
 
__attribute__((nonnull, warn_unused_result))
1635
 
bool wait_for_event(const int epoll_fd,
1636
 
                    const mono_microsecs queue_next_run,
1637
 
                    const mono_microsecs current_time){
1638
 
  __attribute__((const))
1639
 
    int milliseconds_to_wait(const mono_microsecs currtime,
1640
 
                             const mono_microsecs nextrun){
1641
 
    if(currtime >= nextrun){
1642
 
      return 0;
1643
 
    }
1644
 
    const uintmax_t wait_time_ms = (nextrun - currtime) / 1000;
1645
 
    if(wait_time_ms > (uintmax_t)INT_MAX){
1646
 
      return INT_MAX;
1647
 
    }
1648
 
    return (int)wait_time_ms;
1649
 
  }
1650
 
 
1651
 
  const int wait_time_ms = milliseconds_to_wait(current_time,
1652
 
                                                queue_next_run);
1653
 
 
1654
 
  /* Prepare unblocking of SIGCHLD during epoll_pwait */
1655
 
  sigset_t temporary_unblocked_sigmask;
1656
 
  /* Get current signal mask */
1657
 
  if(pthread_sigmask(-1, NULL, &temporary_unblocked_sigmask) != 0){
1658
 
    return false;
1659
 
  }
1660
 
  /* Remove SIGCHLD from the signal mask */
1661
 
  if(sigdelset(&temporary_unblocked_sigmask, SIGCHLD) != 0){
1662
 
    return false;
1663
 
  }
1664
 
  struct epoll_event events[8]; /* Ignored */
1665
 
  int ret = epoll_pwait(epoll_fd, events,
1666
 
                        sizeof(events) / sizeof(struct epoll_event),
1667
 
                        queue_next_run == 0 ? -1 : (int)wait_time_ms,
1668
 
                        &temporary_unblocked_sigmask);
1669
 
  if(ret < 0 and errno != EINTR){
1670
 
    error(0, errno, "Failed epoll_pwait(epfd=%d, ..., timeout=%d,"
1671
 
          " ...", epoll_fd,
1672
 
          queue_next_run == 0 ? -1 : (int)wait_time_ms);
1673
 
    return false;
1674
 
  }
1675
 
  return clear_all_fds_from_epoll_set(epoll_fd);
1676
 
}
1677
 
 
1678
 
bool clear_all_fds_from_epoll_set(const int epoll_fd){
1679
 
  /* Create a new empty epoll set */
1680
 
  __attribute__((cleanup(cleanup_close)))
1681
 
    const int new_epoll_fd = epoll_create1(EPOLL_CLOEXEC);
1682
 
  if(new_epoll_fd < 0){
1683
 
    return false;
1684
 
  }
1685
 
  /* dup3() the new epoll set fd over the old one, replacing it */
1686
 
  if(dup3(new_epoll_fd, epoll_fd, O_CLOEXEC) < 0){
1687
 
    return false;
1688
 
  }
1689
 
  return true;
1690
 
}
1691
 
 
1692
 
__attribute__((nonnull, warn_unused_result))
1693
 
bool run_queue(task_queue **const queue,
1694
 
               string_set *const cancelled_filenames,
1695
 
               bool *const quit_now){
1696
 
 
1697
 
  task_queue *new_queue = create_queue();
1698
 
  if(new_queue == NULL){
1699
 
    return false;
1700
 
  }
1701
 
 
1702
 
  __attribute__((cleanup(string_set_clear)))
1703
 
    string_set old_cancelled_filenames = {};
1704
 
  string_set_swap(cancelled_filenames, &old_cancelled_filenames);
1705
 
 
1706
 
  /* Declare i outside the for loop, since we might need i after the
1707
 
     loop in case we aborted in the middle */
1708
 
  size_t i;
1709
 
  for(i=0; i < (*queue)->length and not *quit_now; i++){
1710
 
    task_context *const task = &((*queue)->tasks[i]);
1711
 
    const char *const question_filename = task->question_filename;
1712
 
    /* Skip any task referencing a cancelled question filename */
1713
 
    if(question_filename != NULL
1714
 
       and string_set_contains(old_cancelled_filenames,
1715
 
                               question_filename)){
1716
 
      cleanup_task(task);
1717
 
      continue;
1718
 
    }
1719
 
    task->func(*task, new_queue);
1720
 
  }
1721
 
 
1722
 
  if(*quit_now){
1723
 
    /* we might be in the middle of the queue, so clean up any
1724
 
       remaining tasks in the current queue */
1725
 
    for(; i < (*queue)->length; i++){
1726
 
      cleanup_task(&((*queue)->tasks[i]));
1727
 
    }
1728
 
    free_queue(*queue);
1729
 
    *queue = new_queue;
1730
 
    new_queue = NULL;
1731
 
    return false;
1732
 
  }
1733
 
  free_queue(*queue);
1734
 
  *queue = new_queue;
1735
 
  new_queue = NULL;
1736
 
 
1737
 
  return true;
1738
 
}
1739
 
 
1740
 
/* End of regular code section */
1741
 
 
1742
 
/* Start of tests section; here are the tests for the above code */
1743
 
 
1744
 
/* This "fixture" data structure is used by the test setup and
1745
 
   teardown functions */
1746
 
typedef struct {
1747
 
  struct sigaction orig_sigaction;
1748
 
  sigset_t orig_sigmask;
1749
 
} test_fixture;
1750
 
 
1751
 
static void test_setup(test_fixture *fixture,
1752
 
                       __attribute__((unused))
1753
 
                       gconstpointer user_data){
1754
 
  g_assert_true(setup_signal_handler(&fixture->orig_sigaction));
1755
 
  g_assert_true(block_sigchld(&fixture->orig_sigmask));
1756
 
}
1757
 
 
1758
 
static void test_teardown(test_fixture *fixture,
1759
 
                          __attribute__((unused))
1760
 
                          gconstpointer user_data){
1761
 
  g_assert_true(restore_signal_handler(&fixture->orig_sigaction));
1762
 
  g_assert_true(restore_sigmask(&fixture->orig_sigmask));
1763
 
}
1764
 
 
1765
 
/* Utility function used by tests to search queue for matching task */
1766
 
__attribute__((pure, nonnull, warn_unused_result))
1767
 
static task_context *find_matching_task(const task_queue *const queue,
1768
 
                                        const task_context task){
1769
 
  /* The argument "task" structure is a pattern to match; 0 in any
1770
 
     member means any value matches, otherwise the value must match.
1771
 
     The filename strings are compared by strcmp(), not by pointer. */
1772
 
  for(size_t i = 0; i < queue->length; i++){
1773
 
    task_context *const current_task = queue->tasks+i;
1774
 
    /* Check all members of task_context, if set to a non-zero value.
1775
 
       If a member does not match, continue to next task in queue */
1776
 
 
1777
 
    /* task_func *const func */
1778
 
    if(task.func != NULL and current_task->func != task.func){
1779
 
      continue;
1780
 
    }
1781
 
    /* char *const question_filename; */
1782
 
    if(task.question_filename != NULL
1783
 
       and (current_task->question_filename == NULL
1784
 
            or strcmp(current_task->question_filename,
1785
 
                      task.question_filename) != 0)){
1786
 
      continue;
1787
 
    }
1788
 
    /* const pid_t pid; */
1789
 
    if(task.pid != 0 and current_task->pid != task.pid){
1790
 
      continue;
1791
 
    }
1792
 
    /* const int epoll_fd; */
1793
 
    if(task.epoll_fd != 0
1794
 
       and current_task->epoll_fd != task.epoll_fd){
1795
 
      continue;
1796
 
    }
1797
 
    /* bool *const quit_now; */
1798
 
    if(task.quit_now != NULL
1799
 
       and current_task->quit_now != task.quit_now){
1800
 
      continue;
1801
 
    }
1802
 
    /* const int fd; */
1803
 
    if(task.fd != 0 and current_task->fd != task.fd){
1804
 
      continue;
1805
 
    }
1806
 
    /* bool *const mandos_client_exited; */
1807
 
    if(task.mandos_client_exited != NULL
1808
 
       and current_task->mandos_client_exited
1809
 
       != task.mandos_client_exited){
1810
 
      continue;
1811
 
    }
1812
 
    /* buffer *const password; */
1813
 
    if(task.password != NULL
1814
 
       and current_task->password != task.password){
1815
 
      continue;
1816
 
    }
1817
 
    /* bool *const password_is_read; */
1818
 
    if(task.password_is_read != NULL
1819
 
       and current_task->password_is_read != task.password_is_read){
1820
 
      continue;
1821
 
    }
1822
 
    /* char *filename; */
1823
 
    if(task.filename != NULL
1824
 
       and (current_task->filename == NULL
1825
 
            or strcmp(current_task->filename, task.filename) != 0)){
1826
 
      continue;
1827
 
    }
1828
 
    /* string_set *const cancelled_filenames; */
1829
 
    if(task.cancelled_filenames != NULL
1830
 
       and current_task->cancelled_filenames
1831
 
       != task.cancelled_filenames){
1832
 
      continue;
1833
 
    }
1834
 
    /* const mono_microsecs notafter; */
1835
 
    if(task.notafter != 0
1836
 
       and current_task->notafter != task.notafter){
1837
 
      continue;
1838
 
    }
1839
 
    /* const mono_microsecs *const current_time; */
1840
 
    if(task.current_time != NULL
1841
 
       and current_task->current_time != task.current_time){
1842
 
      continue;
1843
 
    }
1844
 
    /* Current task matches all members; return it */
1845
 
    return current_task;
1846
 
  }
1847
 
  /* No task in queue matches passed pattern task */
1848
 
  return NULL;
1849
 
}
1850
 
 
1851
 
static void test_create_queue(__attribute__((unused))
1852
 
                              test_fixture *fixture,
1853
 
                              __attribute__((unused))
1854
 
                              gconstpointer user_data){
1855
 
  __attribute__((cleanup(cleanup_queue)))
1856
 
    task_queue *const queue = create_queue();
1857
 
  g_assert_nonnull(queue);
1858
 
  g_assert_null(queue->tasks);
1859
 
  g_assert_true(queue->length == 0);
1860
 
  g_assert_true(queue->next_run == 0);
1861
 
}
1862
 
 
1863
 
static task_func dummy_func;
1864
 
 
1865
 
static void test_add_to_queue(__attribute__((unused))
1866
 
                              test_fixture *fixture,
1867
 
                              __attribute__((unused))
1868
 
                              gconstpointer user_data){
1869
 
  __attribute__((cleanup(cleanup_queue)))
1870
 
    task_queue *queue = create_queue();
1871
 
  g_assert_nonnull(queue);
1872
 
 
1873
 
  g_assert_true(add_to_queue(queue,
1874
 
                             (task_context){ .func=dummy_func }));
1875
 
  g_assert_true(queue->length == 1);
1876
 
  g_assert_nonnull(queue->tasks);
1877
 
  g_assert_true(queue->tasks[0].func == dummy_func);
1878
 
}
1879
 
 
1880
 
static void dummy_func(__attribute__((unused))
1881
 
                       const task_context task,
1882
 
                       __attribute__((unused))
1883
 
                       task_queue *const queue){
1884
 
}
1885
 
 
1886
 
static void test_queue_has_question_empty(__attribute__((unused))
1887
 
                                          test_fixture *fixture,
1888
 
                                          __attribute__((unused))
1889
 
                                          gconstpointer user_data){
1890
 
  __attribute__((cleanup(cleanup_queue)))
1891
 
    task_queue *queue = create_queue();
1892
 
  g_assert_nonnull(queue);
1893
 
  g_assert_false(queue_has_question(queue));
1894
 
}
1895
 
 
1896
 
static void test_queue_has_question_false(__attribute__((unused))
1897
 
                                          test_fixture *fixture,
1898
 
                                          __attribute__((unused))
1899
 
                                          gconstpointer user_data){
1900
 
  __attribute__((cleanup(cleanup_queue)))
1901
 
    task_queue *queue = create_queue();
1902
 
  g_assert_nonnull(queue);
1903
 
  g_assert_true(add_to_queue(queue,
1904
 
                             (task_context){ .func=dummy_func }));
1905
 
  g_assert_false(queue_has_question(queue));
1906
 
}
1907
 
 
1908
 
static void test_queue_has_question_true(__attribute__((unused))
1909
 
                                         test_fixture *fixture,
1910
 
                                         __attribute__((unused))
1911
 
                                         gconstpointer user_data){
1912
 
  __attribute__((cleanup(cleanup_queue)))
1913
 
    task_queue *queue = create_queue();
1914
 
  g_assert_nonnull(queue);
1915
 
  char *const question_filename
1916
 
    = strdup("/nonexistent/question_filename");
1917
 
  g_assert_nonnull(question_filename);
1918
 
  task_context task = {
1919
 
    .func=dummy_func,
1920
 
    .question_filename=question_filename,
1921
 
  };
1922
 
  g_assert_true(add_to_queue(queue, task));
1923
 
  g_assert_true(queue_has_question(queue));
1924
 
}
1925
 
 
1926
 
static void test_queue_has_question_false2(__attribute__((unused))
1927
 
                                           test_fixture *fixture,
1928
 
                                           __attribute__((unused))
1929
 
                                           gconstpointer user_data){
1930
 
  __attribute__((cleanup(cleanup_queue)))
1931
 
    task_queue *queue = create_queue();
1932
 
  g_assert_nonnull(queue);
1933
 
  task_context task = { .func=dummy_func };
1934
 
  g_assert_true(add_to_queue(queue, task));
1935
 
  g_assert_true(add_to_queue(queue, task));
1936
 
  g_assert_cmpint((int)queue->length, ==, 2);
1937
 
  g_assert_false(queue_has_question(queue));
1938
 
}
1939
 
 
1940
 
static void test_queue_has_question_true2(__attribute__((unused))
1941
 
                                          test_fixture *fixture,
1942
 
                                          __attribute__((unused))
1943
 
                                          gconstpointer user_data){
1944
 
  __attribute__((cleanup(cleanup_queue)))
1945
 
    task_queue *queue = create_queue();
1946
 
  g_assert_nonnull(queue);
1947
 
  task_context task1 = { .func=dummy_func };
1948
 
  g_assert_true(add_to_queue(queue, task1));
1949
 
  char *const question_filename
1950
 
    = strdup("/nonexistent/question_filename");
1951
 
  g_assert_nonnull(question_filename);
1952
 
  task_context task2 = {
1953
 
    .func=dummy_func,
1954
 
    .question_filename=question_filename,
1955
 
  };
1956
 
  g_assert_true(add_to_queue(queue, task2));
1957
 
  g_assert_cmpint((int)queue->length, ==, 2);
1958
 
  g_assert_true(queue_has_question(queue));
1959
 
}
1960
 
 
1961
 
static void test_cleanup_buffer(__attribute__((unused))
1962
 
                                test_fixture *fixture,
1963
 
                                __attribute__((unused))
1964
 
                                gconstpointer user_data){
1965
 
  buffer buf = {};
1966
 
 
1967
 
  const size_t buffersize = 10;
1968
 
 
1969
 
  buf.data = malloc(buffersize);
1970
 
  g_assert_nonnull(buf.data);
1971
 
  if(mlock(buf.data, buffersize) != 0){
1972
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
1973
 
  }
1974
 
 
1975
 
  cleanup_buffer(&buf);
1976
 
  g_assert_null(buf.data);
1977
 
}
1978
 
 
1979
 
static
1980
 
void test_string_set_new_set_contains_nothing(__attribute__((unused))
1981
 
                                              test_fixture *fixture,
1982
 
                                              __attribute__((unused))
1983
 
                                              gconstpointer
1984
 
                                              user_data){
1985
 
  __attribute__((cleanup(string_set_clear)))
1986
 
    string_set set = {};
1987
 
  g_assert_false(string_set_contains(set, "")); /* Empty string */
1988
 
  g_assert_false(string_set_contains(set, "test_string"));
1989
 
}
1990
 
 
1991
 
static void
1992
 
test_string_set_with_added_string_contains_it(__attribute__((unused))
1993
 
                                              test_fixture *fixture,
1994
 
                                              __attribute__((unused))
1995
 
                                              gconstpointer
1996
 
                                              user_data){
1997
 
  __attribute__((cleanup(string_set_clear)))
1998
 
    string_set set = {};
1999
 
  g_assert_true(string_set_add(&set, "test_string"));
2000
 
  g_assert_true(string_set_contains(set, "test_string"));
2001
 
}
2002
 
 
2003
 
static void
2004
 
test_string_set_cleared_does_not_contain_str(__attribute__((unused))
2005
 
                                             test_fixture *fixture,
2006
 
                                             __attribute__((unused))
2007
 
                                             gconstpointer user_data){
2008
 
  __attribute__((cleanup(string_set_clear)))
2009
 
    string_set set = {};
2010
 
  g_assert_true(string_set_add(&set, "test_string"));
2011
 
  string_set_clear(&set);
2012
 
  g_assert_false(string_set_contains(set, "test_string"));
2013
 
}
2014
 
 
2015
 
static
2016
 
void test_string_set_swap_one_with_empty(__attribute__((unused))
2017
 
                                         test_fixture *fixture,
2018
 
                                         __attribute__((unused))
2019
 
                                         gconstpointer user_data){
2020
 
  __attribute__((cleanup(string_set_clear)))
2021
 
    string_set set1 = {};
2022
 
  __attribute__((cleanup(string_set_clear)))
2023
 
    string_set set2 = {};
2024
 
  g_assert_true(string_set_add(&set1, "test_string1"));
2025
 
  string_set_swap(&set1, &set2);
2026
 
  g_assert_false(string_set_contains(set1, "test_string1"));
2027
 
  g_assert_true(string_set_contains(set2, "test_string1"));
2028
 
}
2029
 
 
2030
 
static
2031
 
void test_string_set_swap_empty_with_one(__attribute__((unused))
2032
 
                                         test_fixture *fixture,
2033
 
                                         __attribute__((unused))
2034
 
                                         gconstpointer user_data){
2035
 
  __attribute__((cleanup(string_set_clear)))
2036
 
    string_set set1 = {};
2037
 
  __attribute__((cleanup(string_set_clear)))
2038
 
    string_set set2 = {};
2039
 
  g_assert_true(string_set_add(&set2, "test_string2"));
2040
 
  string_set_swap(&set1, &set2);
2041
 
  g_assert_true(string_set_contains(set1, "test_string2"));
2042
 
  g_assert_false(string_set_contains(set2, "test_string2"));
2043
 
}
2044
 
 
2045
 
static void test_string_set_swap_one_with_one(__attribute__((unused))
2046
 
                                              test_fixture *fixture,
2047
 
                                              __attribute__((unused))
2048
 
                                              gconstpointer
2049
 
                                              user_data){
2050
 
  __attribute__((cleanup(string_set_clear)))
2051
 
    string_set set1 = {};
2052
 
  __attribute__((cleanup(string_set_clear)))
2053
 
    string_set set2 = {};
2054
 
  g_assert_true(string_set_add(&set1, "test_string1"));
2055
 
  g_assert_true(string_set_add(&set2, "test_string2"));
2056
 
  string_set_swap(&set1, &set2);
2057
 
  g_assert_false(string_set_contains(set1, "test_string1"));
2058
 
  g_assert_true(string_set_contains(set1, "test_string2"));
2059
 
  g_assert_false(string_set_contains(set2, "test_string2"));
2060
 
  g_assert_true(string_set_contains(set2, "test_string1"));
2061
 
}
2062
 
 
2063
 
static bool fd_has_cloexec_and_nonblock(const int);
2064
 
 
2065
 
static bool epoll_set_contains(int, int, uint32_t);
2066
 
 
2067
 
static void test_start_mandos_client(test_fixture *fixture,
2068
 
                                     __attribute__((unused))
2069
 
                                     gconstpointer user_data){
2070
 
 
2071
 
  bool mandos_client_exited = false;
2072
 
  bool quit_now = false;
2073
 
  __attribute__((cleanup(cleanup_close)))
2074
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2075
 
  g_assert_cmpint(epoll_fd, >=, 0);
2076
 
  __attribute__((cleanup(cleanup_queue)))
2077
 
    task_queue *queue = create_queue();
2078
 
  g_assert_nonnull(queue);
2079
 
  buffer password = {};
2080
 
  bool password_is_read = false;
2081
 
  const char helper_directory[] = "/nonexistent";
2082
 
  const char *const argv[] = { "/bin/true", NULL };
2083
 
 
2084
 
  g_assert_true(start_mandos_client(queue, epoll_fd,
2085
 
                                    &mandos_client_exited, &quit_now,
2086
 
                                    &password, &password_is_read,
2087
 
                                    &fixture->orig_sigaction,
2088
 
                                    fixture->orig_sigmask,
2089
 
                                    helper_directory, 0, 0, argv));
2090
 
 
2091
 
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
2092
 
 
2093
 
  const task_context *const added_wait_task
2094
 
    = find_matching_task(queue, (task_context){
2095
 
        .func=wait_for_mandos_client_exit,
2096
 
        .mandos_client_exited=&mandos_client_exited,
2097
 
        .quit_now=&quit_now,
2098
 
      });
2099
 
  g_assert_nonnull(added_wait_task);
2100
 
  g_assert_cmpint(added_wait_task->pid, >, 0);
2101
 
  g_assert_cmpint(kill(added_wait_task->pid, SIGKILL), ==, 0);
2102
 
  waitpid(added_wait_task->pid, NULL, 0);
2103
 
 
2104
 
  const task_context *const added_read_task
2105
 
    = find_matching_task(queue, (task_context){
2106
 
        .func=read_mandos_client_output,
2107
 
        .epoll_fd=epoll_fd,
2108
 
        .password=&password,
2109
 
        .password_is_read=&password_is_read,
2110
 
        .quit_now=&quit_now,
2111
 
      });
2112
 
  g_assert_nonnull(added_read_task);
2113
 
  g_assert_cmpint(added_read_task->fd, >, 2);
2114
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
2115
 
  g_assert_true(epoll_set_contains(epoll_fd, added_read_task->fd,
2116
 
                                   EPOLLIN | EPOLLRDHUP));
2117
 
}
2118
 
 
2119
 
static bool fd_has_cloexec_and_nonblock(const int fd){
2120
 
  const int socket_fd_flags = fcntl(fd, F_GETFD, 0);
2121
 
  const int socket_file_flags = fcntl(fd, F_GETFL, 0);
2122
 
  return ((socket_fd_flags >= 0)
2123
 
          and (socket_fd_flags & FD_CLOEXEC)
2124
 
          and (socket_file_flags >= 0)
2125
 
          and (socket_file_flags & O_NONBLOCK));
2126
 
}
2127
 
 
2128
 
__attribute__((const))
2129
 
bool is_privileged(void){
2130
 
  uid_t user = getuid() + 1;
2131
 
  if(user == 0){                /* Overflow check */
2132
 
    user++;
2133
 
  }
2134
 
  gid_t group = getuid() + 1;
2135
 
  if(group == 0){               /* Overflow check */
2136
 
    group++;
2137
 
  }
2138
 
  const pid_t pid = fork();
2139
 
  if(pid == 0){                 /* Child */
2140
 
    if(setresgid((uid_t)-1, group, group) == -1){
2141
 
      if(errno != EPERM){
2142
 
        error(EXIT_FAILURE, errno, "Failed to setresgid(-1, %" PRIuMAX
2143
 
              ", %" PRIuMAX")", (uintmax_t)group, (uintmax_t)group);
2144
 
      }
2145
 
      exit(EXIT_FAILURE);
2146
 
    }
2147
 
    if(setresuid((uid_t)-1, user, user) == -1){
2148
 
      if(errno != EPERM){
2149
 
        error(EXIT_FAILURE, errno, "Failed to setresuid(-1, %" PRIuMAX
2150
 
              ", %" PRIuMAX")", (uintmax_t)user, (uintmax_t)user);
2151
 
      }
2152
 
      exit(EXIT_FAILURE);
2153
 
    }
2154
 
    exit(EXIT_SUCCESS);
2155
 
  }
2156
 
  int status;
2157
 
  waitpid(pid, &status, 0);
2158
 
  if(WIFEXITED(status) and (WEXITSTATUS(status) == EXIT_SUCCESS)){
2159
 
    return true;
2160
 
  }
2161
 
  return false;
2162
 
}
2163
 
 
2164
 
static bool epoll_set_contains(int epoll_fd, int fd, uint32_t events){
2165
 
  /* Only scan for events in this eventmask */
2166
 
  const uint32_t eventmask = EPOLLIN | EPOLLOUT | EPOLLRDHUP;
2167
 
  __attribute__((cleanup(cleanup_string)))
2168
 
    char *fdinfo_name = NULL;
2169
 
  int ret = asprintf(&fdinfo_name, "/proc/self/fdinfo/%d", epoll_fd);
2170
 
  g_assert_cmpint(ret, >, 0);
2171
 
  g_assert_nonnull(fdinfo_name);
2172
 
 
2173
 
  FILE *fdinfo = fopen(fdinfo_name, "r");
2174
 
  g_assert_nonnull(fdinfo);
2175
 
  uint32_t reported_events;
2176
 
  buffer line = {};
2177
 
  int found_fd = -1;
2178
 
 
2179
 
  do {
2180
 
    if(getline(&line.data, &line.allocated, fdinfo) < 0){
2181
 
      break;
2182
 
    }
2183
 
    /* See proc(5) for format of /proc/PID/fdinfo/FD for epoll fd's */
2184
 
    if(sscanf(line.data, "tfd: %d events: %" SCNx32 " ",
2185
 
              &found_fd, &reported_events) == 2){
2186
 
      if(found_fd == fd){
2187
 
        break;
2188
 
      }
2189
 
    }
2190
 
  } while(not feof(fdinfo) and not ferror(fdinfo));
2191
 
  g_assert_cmpint(fclose(fdinfo), ==, 0);
2192
 
  free(line.data);
2193
 
  if(found_fd != fd){
2194
 
    return false;
2195
 
  }
2196
 
 
2197
 
  if(events == 0){
2198
 
    /* Don't check events if none are given */
2199
 
    return true;
2200
 
  }
2201
 
  return (reported_events & eventmask) == (events & eventmask);
2202
 
}
2203
 
 
2204
 
static void test_start_mandos_client_execv(test_fixture *fixture,
2205
 
                                           __attribute__((unused))
2206
 
                                           gconstpointer user_data){
2207
 
  bool mandos_client_exited = false;
2208
 
  bool quit_now = false;
2209
 
  __attribute__((cleanup(cleanup_close)))
2210
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2211
 
  g_assert_cmpint(epoll_fd, >=, 0);
2212
 
  __attribute__((cleanup(cleanup_queue)))
2213
 
    task_queue *queue = create_queue();
2214
 
  g_assert_nonnull(queue);
2215
 
  __attribute__((cleanup(cleanup_buffer)))
2216
 
    buffer password = {};
2217
 
  const char helper_directory[] = "/nonexistent";
2218
 
  /* Can't execv("/", ...), so this should fail */
2219
 
  const char *const argv[] = { "/", NULL };
2220
 
 
2221
 
  {
2222
 
    __attribute__((cleanup(cleanup_close)))
2223
 
      const int devnull_fd = open("/dev/null", O_WRONLY | O_CLOEXEC);
2224
 
    g_assert_cmpint(devnull_fd, >=, 0);
2225
 
    __attribute__((cleanup(cleanup_close)))
2226
 
      const int real_stderr_fd = dup(STDERR_FILENO);
2227
 
    g_assert_cmpint(real_stderr_fd, >=, 0);
2228
 
    dup2(devnull_fd, STDERR_FILENO);
2229
 
 
2230
 
    const bool success = start_mandos_client(queue, epoll_fd,
2231
 
                                             &mandos_client_exited,
2232
 
                                             &quit_now,
2233
 
                                             &password,
2234
 
                                             (bool[]){false},
2235
 
                                             &fixture->orig_sigaction,
2236
 
                                             fixture->orig_sigmask,
2237
 
                                             helper_directory, 0, 0,
2238
 
                                             argv);
2239
 
    dup2(real_stderr_fd, STDERR_FILENO);
2240
 
    g_assert_true(success);
2241
 
  }
2242
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
2243
 
 
2244
 
  struct timespec starttime, currtime;
2245
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2246
 
  do {
2247
 
    queue->next_run = 0;
2248
 
    string_set cancelled_filenames = {};
2249
 
 
2250
 
    {
2251
 
      __attribute__((cleanup(cleanup_close)))
2252
 
        const int devnull_fd = open("/dev/null",
2253
 
                                    O_WRONLY | O_CLOEXEC);
2254
 
      g_assert_cmpint(devnull_fd, >=, 0);
2255
 
      __attribute__((cleanup(cleanup_close)))
2256
 
        const int real_stderr_fd = dup(STDERR_FILENO);
2257
 
      g_assert_cmpint(real_stderr_fd, >=, 0);
2258
 
      g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2259
 
      dup2(devnull_fd, STDERR_FILENO);
2260
 
      const bool success = run_queue(&queue, &cancelled_filenames,
2261
 
                                     &quit_now);
2262
 
      dup2(real_stderr_fd, STDERR_FILENO);
2263
 
      if(not success){
2264
 
        break;
2265
 
      }
2266
 
    }
2267
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2268
 
  } while(((queue->length) > 0)
2269
 
          and (not quit_now)
2270
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2271
 
 
2272
 
  g_assert_true(quit_now);
2273
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2274
 
  g_assert_true(mandos_client_exited);
2275
 
}
2276
 
 
2277
 
static void test_start_mandos_client_suid_euid(test_fixture *fixture,
2278
 
                                               __attribute__((unused))
2279
 
                                               gconstpointer
2280
 
                                               user_data){
2281
 
  if(not is_privileged()){
2282
 
    g_test_skip("Not privileged");
2283
 
    return;
2284
 
  }
2285
 
 
2286
 
  bool mandos_client_exited = false;
2287
 
  bool quit_now = false;
2288
 
  __attribute__((cleanup(cleanup_close)))
2289
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2290
 
  g_assert_cmpint(epoll_fd, >=, 0);
2291
 
  __attribute__((cleanup(cleanup_queue)))
2292
 
    task_queue *queue = create_queue();
2293
 
  g_assert_nonnull(queue);
2294
 
  __attribute__((cleanup(cleanup_buffer)))
2295
 
    buffer password = {};
2296
 
  bool password_is_read = false;
2297
 
  const char helper_directory[] = "/nonexistent";
2298
 
  const char *const argv[] = { "/usr/bin/id", "--user", NULL };
2299
 
  uid_t user = 1000;
2300
 
  gid_t group = 1001;
2301
 
 
2302
 
  const bool success = start_mandos_client(queue, epoll_fd,
2303
 
                                           &mandos_client_exited,
2304
 
                                           &quit_now, &password,
2305
 
                                           &password_is_read,
2306
 
                                           &fixture->orig_sigaction,
2307
 
                                           fixture->orig_sigmask,
2308
 
                                           helper_directory, user,
2309
 
                                           group, argv);
2310
 
  g_assert_true(success);
2311
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2312
 
 
2313
 
  struct timespec starttime, currtime;
2314
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2315
 
  do {
2316
 
    queue->next_run = 0;
2317
 
    string_set cancelled_filenames = {};
2318
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2319
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2320
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2321
 
  } while(((queue->length) > 0)
2322
 
          and (not quit_now)
2323
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2324
 
 
2325
 
  g_assert_false(quit_now);
2326
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2327
 
  g_assert_true(mandos_client_exited);
2328
 
 
2329
 
  g_assert_true(password_is_read);
2330
 
  g_assert_nonnull(password.data);
2331
 
 
2332
 
  uintmax_t id;
2333
 
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2334
 
                  ==, 1);
2335
 
  g_assert_true((uid_t)id == id);
2336
 
 
2337
 
  g_assert_cmpuint((unsigned int)id, ==, 0);
2338
 
}
2339
 
 
2340
 
static void test_start_mandos_client_suid_egid(test_fixture *fixture,
2341
 
                                               __attribute__((unused))
2342
 
                                               gconstpointer
2343
 
                                               user_data){
2344
 
  if(not is_privileged()){
2345
 
    g_test_skip("Not privileged");
2346
 
    return;
2347
 
  }
2348
 
 
2349
 
  bool mandos_client_exited = false;
2350
 
  bool quit_now = false;
2351
 
  __attribute__((cleanup(cleanup_close)))
2352
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2353
 
  g_assert_cmpint(epoll_fd, >=, 0);
2354
 
  __attribute__((cleanup(cleanup_queue)))
2355
 
    task_queue *queue = create_queue();
2356
 
  g_assert_nonnull(queue);
2357
 
  __attribute__((cleanup(cleanup_buffer)))
2358
 
    buffer password = {};
2359
 
  bool password_is_read = false;
2360
 
  const char helper_directory[] = "/nonexistent";
2361
 
  const char *const argv[] = { "/usr/bin/id", "--group", NULL };
2362
 
  uid_t user = 1000;
2363
 
  gid_t group = 1001;
2364
 
 
2365
 
  const bool success = start_mandos_client(queue, epoll_fd,
2366
 
                                           &mandos_client_exited,
2367
 
                                           &quit_now, &password,
2368
 
                                           &password_is_read,
2369
 
                                           &fixture->orig_sigaction,
2370
 
                                           fixture->orig_sigmask,
2371
 
                                           helper_directory, user,
2372
 
                                           group, argv);
2373
 
  g_assert_true(success);
2374
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2375
 
 
2376
 
  struct timespec starttime, currtime;
2377
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2378
 
  do {
2379
 
    queue->next_run = 0;
2380
 
    string_set cancelled_filenames = {};
2381
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2382
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2383
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2384
 
  } while(((queue->length) > 0)
2385
 
          and (not quit_now)
2386
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2387
 
 
2388
 
  g_assert_false(quit_now);
2389
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2390
 
  g_assert_true(mandos_client_exited);
2391
 
 
2392
 
  g_assert_true(password_is_read);
2393
 
  g_assert_nonnull(password.data);
2394
 
 
2395
 
  uintmax_t id;
2396
 
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2397
 
                  ==, 1);
2398
 
  g_assert_true((gid_t)id == id);
2399
 
 
2400
 
  g_assert_cmpuint((unsigned int)id, ==, 0);
2401
 
}
2402
 
 
2403
 
static void test_start_mandos_client_suid_ruid(test_fixture *fixture,
2404
 
                                               __attribute__((unused))
2405
 
                                               gconstpointer
2406
 
                                               user_data){
2407
 
  if(not is_privileged()){
2408
 
    g_test_skip("Not privileged");
2409
 
    return;
2410
 
  }
2411
 
 
2412
 
  bool mandos_client_exited = false;
2413
 
  bool quit_now = false;
2414
 
  __attribute__((cleanup(cleanup_close)))
2415
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2416
 
  g_assert_cmpint(epoll_fd, >=, 0);
2417
 
  __attribute__((cleanup(cleanup_queue)))
2418
 
    task_queue *queue = create_queue();
2419
 
  g_assert_nonnull(queue);
2420
 
  __attribute__((cleanup(cleanup_buffer)))
2421
 
    buffer password = {};
2422
 
  bool password_is_read = false;
2423
 
  const char helper_directory[] = "/nonexistent";
2424
 
  const char *const argv[] = { "/usr/bin/id", "--user", "--real",
2425
 
    NULL };
2426
 
  uid_t user = 1000;
2427
 
  gid_t group = 1001;
2428
 
 
2429
 
  const bool success = start_mandos_client(queue, epoll_fd,
2430
 
                                           &mandos_client_exited,
2431
 
                                           &quit_now, &password,
2432
 
                                           &password_is_read,
2433
 
                                           &fixture->orig_sigaction,
2434
 
                                           fixture->orig_sigmask,
2435
 
                                           helper_directory, user,
2436
 
                                           group, argv);
2437
 
  g_assert_true(success);
2438
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2439
 
 
2440
 
  struct timespec starttime, currtime;
2441
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2442
 
  do {
2443
 
    queue->next_run = 0;
2444
 
    string_set cancelled_filenames = {};
2445
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2446
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2447
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2448
 
  } while(((queue->length) > 0)
2449
 
          and (not quit_now)
2450
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2451
 
 
2452
 
  g_assert_false(quit_now);
2453
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2454
 
  g_assert_true(mandos_client_exited);
2455
 
 
2456
 
  g_assert_true(password_is_read);
2457
 
  g_assert_nonnull(password.data);
2458
 
 
2459
 
  uintmax_t id;
2460
 
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2461
 
                  ==, 1);
2462
 
  g_assert_true((uid_t)id == id);
2463
 
 
2464
 
  g_assert_cmpuint((unsigned int)id, ==, user);
2465
 
}
2466
 
 
2467
 
static void test_start_mandos_client_suid_rgid(test_fixture *fixture,
2468
 
                                               __attribute__((unused))
2469
 
                                               gconstpointer
2470
 
                                               user_data){
2471
 
  if(not is_privileged()){
2472
 
    g_test_skip("Not privileged");
2473
 
    return;
2474
 
  }
2475
 
 
2476
 
  bool mandos_client_exited = false;
2477
 
  bool quit_now = false;
2478
 
  __attribute__((cleanup(cleanup_close)))
2479
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2480
 
  g_assert_cmpint(epoll_fd, >=, 0);
2481
 
  __attribute__((cleanup(cleanup_queue)))
2482
 
    task_queue *queue = create_queue();
2483
 
  g_assert_nonnull(queue);
2484
 
  __attribute__((cleanup(cleanup_buffer)))
2485
 
    buffer password = {};
2486
 
  bool password_is_read = false;
2487
 
  const char helper_directory[] = "/nonexistent";
2488
 
  const char *const argv[] = { "/usr/bin/id", "--group", "--real",
2489
 
    NULL };
2490
 
  uid_t user = 1000;
2491
 
  gid_t group = 1001;
2492
 
 
2493
 
  const bool success = start_mandos_client(queue, epoll_fd,
2494
 
                                           &mandos_client_exited,
2495
 
                                           &quit_now, &password,
2496
 
                                           &password_is_read,
2497
 
                                           &fixture->orig_sigaction,
2498
 
                                           fixture->orig_sigmask,
2499
 
                                           helper_directory, user,
2500
 
                                           group, argv);
2501
 
  g_assert_true(success);
2502
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2503
 
 
2504
 
  struct timespec starttime, currtime;
2505
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2506
 
  do {
2507
 
    queue->next_run = 0;
2508
 
    string_set cancelled_filenames = {};
2509
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2510
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2511
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2512
 
  } while(((queue->length) > 0)
2513
 
          and (not quit_now)
2514
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2515
 
 
2516
 
  g_assert_false(quit_now);
2517
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2518
 
  g_assert_true(mandos_client_exited);
2519
 
 
2520
 
  g_assert_true(password_is_read);
2521
 
  g_assert_nonnull(password.data);
2522
 
 
2523
 
  uintmax_t id;
2524
 
  g_assert_cmpint(sscanf(password.data, "%" SCNuMAX "\n", &id),
2525
 
                  ==, 1);
2526
 
  g_assert_true((gid_t)id == id);
2527
 
 
2528
 
  g_assert_cmpuint((unsigned int)id, ==, group);
2529
 
}
2530
 
 
2531
 
static void test_start_mandos_client_read(test_fixture *fixture,
2532
 
                                          __attribute__((unused))
2533
 
                                          gconstpointer user_data){
2534
 
  bool mandos_client_exited = false;
2535
 
  bool quit_now = false;
2536
 
  __attribute__((cleanup(cleanup_close)))
2537
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2538
 
  g_assert_cmpint(epoll_fd, >=, 0);
2539
 
  __attribute__((cleanup(cleanup_queue)))
2540
 
    task_queue *queue = create_queue();
2541
 
  g_assert_nonnull(queue);
2542
 
  __attribute__((cleanup(cleanup_buffer)))
2543
 
    buffer password = {};
2544
 
  bool password_is_read = false;
2545
 
  const char dummy_test_password[] = "dummy test password";
2546
 
  const char helper_directory[] = "/nonexistent";
2547
 
  const char *const argv[] = { "/bin/echo", "-n", dummy_test_password,
2548
 
    NULL };
2549
 
 
2550
 
  const bool success = start_mandos_client(queue, epoll_fd,
2551
 
                                           &mandos_client_exited,
2552
 
                                           &quit_now, &password,
2553
 
                                           &password_is_read,
2554
 
                                           &fixture->orig_sigaction,
2555
 
                                           fixture->orig_sigmask,
2556
 
                                           helper_directory, 0, 0,
2557
 
                                           argv);
2558
 
  g_assert_true(success);
2559
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2560
 
 
2561
 
  struct timespec starttime, currtime;
2562
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2563
 
  do {
2564
 
    queue->next_run = 0;
2565
 
    string_set cancelled_filenames = {};
2566
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2567
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2568
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2569
 
  } while(((queue->length) > 0)
2570
 
          and (not quit_now)
2571
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2572
 
 
2573
 
  g_assert_false(quit_now);
2574
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2575
 
  g_assert_true(mandos_client_exited);
2576
 
 
2577
 
  g_assert_true(password_is_read);
2578
 
  g_assert_cmpint((int)password.length, ==,
2579
 
                  sizeof(dummy_test_password)-1);
2580
 
  g_assert_nonnull(password.data);
2581
 
  g_assert_cmpint(memcmp(dummy_test_password, password.data,
2582
 
                         sizeof(dummy_test_password)-1), ==, 0);
2583
 
}
2584
 
 
2585
 
static
2586
 
void test_start_mandos_client_helper_directory(test_fixture *fixture,
2587
 
                                               __attribute__((unused))
2588
 
                                               gconstpointer
2589
 
                                               user_data){
2590
 
  bool mandos_client_exited = false;
2591
 
  bool quit_now = false;
2592
 
  __attribute__((cleanup(cleanup_close)))
2593
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2594
 
  g_assert_cmpint(epoll_fd, >=, 0);
2595
 
  __attribute__((cleanup(cleanup_queue)))
2596
 
    task_queue *queue = create_queue();
2597
 
  g_assert_nonnull(queue);
2598
 
  __attribute__((cleanup(cleanup_buffer)))
2599
 
    buffer password = {};
2600
 
  bool password_is_read = false;
2601
 
  const char helper_directory[] = "/nonexistent";
2602
 
  const char *const argv[] = { "/bin/sh", "-c",
2603
 
    "echo -n ${MANDOSPLUGINHELPERDIR}", NULL };
2604
 
 
2605
 
  const bool success = start_mandos_client(queue, epoll_fd,
2606
 
                                           &mandos_client_exited,
2607
 
                                           &quit_now, &password,
2608
 
                                           &password_is_read,
2609
 
                                           &fixture->orig_sigaction,
2610
 
                                           fixture->orig_sigmask,
2611
 
                                           helper_directory, 0, 0,
2612
 
                                           argv);
2613
 
  g_assert_true(success);
2614
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
2615
 
 
2616
 
  struct timespec starttime, currtime;
2617
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2618
 
  do {
2619
 
    queue->next_run = 0;
2620
 
    string_set cancelled_filenames = {};
2621
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2622
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2623
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2624
 
  } while(((queue->length) > 0)
2625
 
          and (not quit_now)
2626
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2627
 
 
2628
 
  g_assert_false(quit_now);
2629
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2630
 
  g_assert_true(mandos_client_exited);
2631
 
 
2632
 
  g_assert_true(password_is_read);
2633
 
  g_assert_cmpint((int)password.length, ==,
2634
 
                  sizeof(helper_directory)-1);
2635
 
  g_assert_nonnull(password.data);
2636
 
  g_assert_cmpint(memcmp(helper_directory, password.data,
2637
 
                         sizeof(helper_directory)-1), ==, 0);
2638
 
}
2639
 
 
2640
 
__attribute__((nonnull, warn_unused_result))
2641
 
static bool proc_status_sigblk_to_sigset(const char *const,
2642
 
                                         sigset_t *const);
2643
 
 
2644
 
static void test_start_mandos_client_sigmask(test_fixture *fixture,
2645
 
                                             __attribute__((unused))
2646
 
                                             gconstpointer user_data){
2647
 
  bool mandos_client_exited = false;
2648
 
  bool quit_now = false;
2649
 
  __attribute__((cleanup(cleanup_close)))
2650
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2651
 
  g_assert_cmpint(epoll_fd, >=, 0);
2652
 
  __attribute__((cleanup(cleanup_queue)))
2653
 
    task_queue *queue = create_queue();
2654
 
  g_assert_nonnull(queue);
2655
 
  __attribute__((cleanup(cleanup_buffer)))
2656
 
    buffer password = {};
2657
 
  bool password_is_read = false;
2658
 
  const char helper_directory[] = "/nonexistent";
2659
 
  /* see proc(5) for format of /proc/self/status */
2660
 
  const char *const argv[] = { "/usr/bin/awk",
2661
 
    "$1==\"SigBlk:\"{ print $2 }", "/proc/self/status", NULL };
2662
 
 
2663
 
  g_assert_true(start_mandos_client(queue, epoll_fd,
2664
 
                                    &mandos_client_exited, &quit_now,
2665
 
                                    &password, &password_is_read,
2666
 
                                    &fixture->orig_sigaction,
2667
 
                                    fixture->orig_sigmask,
2668
 
                                    helper_directory, 0, 0, argv));
2669
 
 
2670
 
  struct timespec starttime, currtime;
2671
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2672
 
  do {
2673
 
    queue->next_run = 0;
2674
 
    string_set cancelled_filenames = {};
2675
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2676
 
    g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
2677
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2678
 
  } while((not (mandos_client_exited and password_is_read))
2679
 
          and (not quit_now)
2680
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2681
 
  g_assert_true(mandos_client_exited);
2682
 
  g_assert_true(password_is_read);
2683
 
 
2684
 
  sigset_t parsed_sigmask;
2685
 
  g_assert_true(proc_status_sigblk_to_sigset(password.data,
2686
 
                                             &parsed_sigmask));
2687
 
 
2688
 
  for(int signum = 1; signum < NSIG; signum++){
2689
 
    const bool has_signal = sigismember(&parsed_sigmask, signum);
2690
 
    if(sigismember(&fixture->orig_sigmask, signum)){
2691
 
      g_assert_true(has_signal);
2692
 
    } else {
2693
 
      g_assert_false(has_signal);
2694
 
    }
2695
 
  }
2696
 
}
2697
 
 
2698
 
__attribute__((nonnull, warn_unused_result))
2699
 
static bool proc_status_sigblk_to_sigset(const char *const sigblk,
2700
 
                                         sigset_t *const sigmask){
2701
 
  /* parse /proc/PID/status SigBlk value and convert to a sigset_t */
2702
 
  uintmax_t scanned_sigmask;
2703
 
  if(sscanf(sigblk, "%" SCNxMAX " ", &scanned_sigmask) != 1){
2704
 
    return false;
2705
 
  }
2706
 
  if(sigemptyset(sigmask) != 0){
2707
 
    return false;
2708
 
  }
2709
 
  for(int signum = 1; signum < NSIG; signum++){
2710
 
    if(scanned_sigmask & ((uintmax_t)1 << (signum-1))){
2711
 
      if(sigaddset(sigmask, signum) != 0){
2712
 
        return false;
2713
 
      }
2714
 
    }
2715
 
  }
2716
 
  return true;
2717
 
}
2718
 
 
2719
 
static void run_task_with_stderr_to_dev_null(const task_context task,
2720
 
                                             task_queue *const queue);
2721
 
 
2722
 
static
2723
 
void test_wait_for_mandos_client_exit_badpid(__attribute__((unused))
2724
 
                                             test_fixture *fixture,
2725
 
                                             __attribute__((unused))
2726
 
                                             gconstpointer user_data){
2727
 
 
2728
 
  bool mandos_client_exited = false;
2729
 
  bool quit_now = false;
2730
 
 
2731
 
  __attribute__((cleanup(cleanup_queue)))
2732
 
    task_queue *queue = create_queue();
2733
 
  g_assert_nonnull(queue);
2734
 
  const task_context task = {
2735
 
    .func=wait_for_mandos_client_exit,
2736
 
    .pid=1,
2737
 
    .mandos_client_exited=&mandos_client_exited,
2738
 
    .quit_now=&quit_now,
2739
 
  };
2740
 
  run_task_with_stderr_to_dev_null(task, queue);
2741
 
 
2742
 
  g_assert_false(mandos_client_exited);
2743
 
  g_assert_true(quit_now);
2744
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2745
 
}
2746
 
 
2747
 
static void run_task_with_stderr_to_dev_null(const task_context task,
2748
 
                                             task_queue *const queue){
2749
 
  FILE *real_stderr = stderr;
2750
 
  FILE *devnull = fopen("/dev/null", "we");
2751
 
  g_assert_nonnull(devnull);
2752
 
 
2753
 
  stderr = devnull;
2754
 
  task.func(task, queue);
2755
 
  stderr = real_stderr;
2756
 
 
2757
 
  g_assert_cmpint(fclose(devnull), ==, 0);
2758
 
}
2759
 
 
2760
 
static
2761
 
void test_wait_for_mandos_client_exit_noexit(test_fixture *fixture,
2762
 
                                             __attribute__((unused))
2763
 
                                             gconstpointer user_data){
2764
 
  bool mandos_client_exited = false;
2765
 
  bool quit_now = false;
2766
 
 
2767
 
  pid_t create_eternal_process(void){
2768
 
    const pid_t pid = fork();
2769
 
    if(pid == 0){               /* Child */
2770
 
      if(not restore_signal_handler(&fixture->orig_sigaction)){
2771
 
        _exit(EXIT_FAILURE);
2772
 
      }
2773
 
      if(not restore_sigmask(&fixture->orig_sigmask)){
2774
 
        _exit(EXIT_FAILURE);
2775
 
      }
2776
 
      while(true){
2777
 
        pause();
2778
 
      }
2779
 
    }
2780
 
    return pid;
2781
 
  }
2782
 
  pid_t pid = create_eternal_process();
2783
 
  g_assert_true(pid != -1);
2784
 
 
2785
 
  __attribute__((cleanup(cleanup_queue)))
2786
 
    task_queue *queue = create_queue();
2787
 
  g_assert_nonnull(queue);
2788
 
  const task_context task = {
2789
 
    .func=wait_for_mandos_client_exit,
2790
 
    .pid=pid,
2791
 
    .mandos_client_exited=&mandos_client_exited,
2792
 
    .quit_now=&quit_now,
2793
 
  };
2794
 
  task.func(task, queue);
2795
 
 
2796
 
  g_assert_false(mandos_client_exited);
2797
 
  g_assert_false(quit_now);
2798
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
2799
 
 
2800
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
2801
 
        .func=wait_for_mandos_client_exit,
2802
 
        .pid=task.pid,
2803
 
        .mandos_client_exited=&mandos_client_exited,
2804
 
        .quit_now=&quit_now,
2805
 
      }));
2806
 
}
2807
 
 
2808
 
static
2809
 
void test_wait_for_mandos_client_exit_success(test_fixture *fixture,
2810
 
                                              __attribute__((unused))
2811
 
                                              gconstpointer
2812
 
                                              user_data){
2813
 
  bool mandos_client_exited = false;
2814
 
  bool quit_now = false;
2815
 
 
2816
 
  pid_t create_successful_process(void){
2817
 
    const pid_t pid = fork();
2818
 
    if(pid == 0){               /* Child */
2819
 
      if(not restore_signal_handler(&fixture->orig_sigaction)){
2820
 
        _exit(EXIT_FAILURE);
2821
 
      }
2822
 
      if(not restore_sigmask(&fixture->orig_sigmask)){
2823
 
        _exit(EXIT_FAILURE);
2824
 
      }
2825
 
      exit(EXIT_SUCCESS);
2826
 
    }
2827
 
    return pid;
2828
 
  }
2829
 
  const pid_t pid = create_successful_process();
2830
 
  g_assert_true(pid != -1);
2831
 
 
2832
 
  __attribute__((cleanup(cleanup_queue)))
2833
 
    task_queue *queue = create_queue();
2834
 
  g_assert_nonnull(queue);
2835
 
  const task_context initial_task = {
2836
 
    .func=wait_for_mandos_client_exit,
2837
 
    .pid=pid,
2838
 
    .mandos_client_exited=&mandos_client_exited,
2839
 
    .quit_now=&quit_now,
2840
 
  };
2841
 
  g_assert_true(add_to_queue(queue, initial_task));
2842
 
 
2843
 
  struct timespec starttime, currtime;
2844
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2845
 
  __attribute__((cleanup(cleanup_close)))
2846
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2847
 
  do {
2848
 
    queue->next_run = 0;
2849
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2850
 
    g_assert_true(run_queue(&queue, (string_set[]){{}}, &quit_now));
2851
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2852
 
  } while((not mandos_client_exited)
2853
 
          and (not quit_now)
2854
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2855
 
 
2856
 
  g_assert_true(mandos_client_exited);
2857
 
  g_assert_false(quit_now);
2858
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2859
 
}
2860
 
 
2861
 
static
2862
 
void test_wait_for_mandos_client_exit_failure(test_fixture *fixture,
2863
 
                                              __attribute__((unused))
2864
 
                                              gconstpointer
2865
 
                                              user_data){
2866
 
  bool mandos_client_exited = false;
2867
 
  bool quit_now = false;
2868
 
 
2869
 
  pid_t create_failing_process(void){
2870
 
    const pid_t pid = fork();
2871
 
    if(pid == 0){               /* Child */
2872
 
      if(not restore_signal_handler(&fixture->orig_sigaction)){
2873
 
        _exit(EXIT_FAILURE);
2874
 
      }
2875
 
      if(not restore_sigmask(&fixture->orig_sigmask)){
2876
 
        _exit(EXIT_FAILURE);
2877
 
      }
2878
 
      exit(EXIT_FAILURE);
2879
 
    }
2880
 
    return pid;
2881
 
  }
2882
 
  const pid_t pid = create_failing_process();
2883
 
  g_assert_true(pid != -1);
2884
 
 
2885
 
  __attribute__((cleanup(string_set_clear)))
2886
 
    string_set cancelled_filenames = {};
2887
 
  __attribute__((cleanup(cleanup_close)))
2888
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2889
 
  g_assert_cmpint(epoll_fd, >=, 0);
2890
 
  __attribute__((cleanup(cleanup_queue)))
2891
 
    task_queue *queue = create_queue();
2892
 
  g_assert_nonnull(queue);
2893
 
  g_assert_true(add_to_queue(queue, (task_context){
2894
 
        .func=wait_for_mandos_client_exit,
2895
 
        .pid=pid,
2896
 
        .mandos_client_exited=&mandos_client_exited,
2897
 
        .quit_now=&quit_now,
2898
 
      }));
2899
 
 
2900
 
  g_assert_true(sigismember(&fixture->orig_sigmask, SIGCHLD) == 0);
2901
 
 
2902
 
  __attribute__((cleanup(cleanup_close)))
2903
 
    const int devnull_fd = open("/dev/null",
2904
 
                                O_WRONLY | O_CLOEXEC);
2905
 
  g_assert_cmpint(devnull_fd, >=, 0);
2906
 
  __attribute__((cleanup(cleanup_close)))
2907
 
    const int real_stderr_fd = dup(STDERR_FILENO);
2908
 
  g_assert_cmpint(real_stderr_fd, >=, 0);
2909
 
 
2910
 
  struct timespec starttime, currtime;
2911
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2912
 
  do {
2913
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2914
 
    dup2(devnull_fd, STDERR_FILENO);
2915
 
    const bool success = run_queue(&queue, &cancelled_filenames,
2916
 
                                   &quit_now);
2917
 
    dup2(real_stderr_fd, STDERR_FILENO);
2918
 
    if(not success){
2919
 
      break;
2920
 
    }
2921
 
 
2922
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2923
 
  } while((not mandos_client_exited)
2924
 
          and (not quit_now)
2925
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2926
 
 
2927
 
  g_assert_true(quit_now);
2928
 
  g_assert_true(mandos_client_exited);
2929
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
2930
 
}
2931
 
 
2932
 
static
2933
 
void test_wait_for_mandos_client_exit_killed(test_fixture *fixture,
2934
 
                                             __attribute__((unused))
2935
 
                                             gconstpointer user_data){
2936
 
  bool mandos_client_exited = false;
2937
 
  bool quit_now = false;
2938
 
 
2939
 
  pid_t create_killed_process(void){
2940
 
    const pid_t pid = fork();
2941
 
    if(pid == 0){               /* Child */
2942
 
      if(not restore_signal_handler(&fixture->orig_sigaction)){
2943
 
        _exit(EXIT_FAILURE);
2944
 
      }
2945
 
      if(not restore_sigmask(&fixture->orig_sigmask)){
2946
 
        _exit(EXIT_FAILURE);
2947
 
      }
2948
 
      while(true){
2949
 
        pause();
2950
 
      }
2951
 
    }
2952
 
    kill(pid, SIGKILL);
2953
 
    return pid;
2954
 
  }
2955
 
  const pid_t pid = create_killed_process();
2956
 
  g_assert_true(pid != -1);
2957
 
 
2958
 
  __attribute__((cleanup(string_set_clear)))
2959
 
    string_set cancelled_filenames = {};
2960
 
  __attribute__((cleanup(cleanup_close)))
2961
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
2962
 
  g_assert_cmpint(epoll_fd, >=, 0);
2963
 
  __attribute__((cleanup(cleanup_queue)))
2964
 
    task_queue *queue = create_queue();
2965
 
  g_assert_nonnull(queue);
2966
 
  g_assert_true(add_to_queue(queue, (task_context){
2967
 
        .func=wait_for_mandos_client_exit,
2968
 
        .pid=pid,
2969
 
        .mandos_client_exited=&mandos_client_exited,
2970
 
        .quit_now=&quit_now,
2971
 
      }));
2972
 
 
2973
 
  __attribute__((cleanup(cleanup_close)))
2974
 
    const int devnull_fd = open("/dev/null",
2975
 
                                O_WRONLY | O_CLOEXEC);
2976
 
  g_assert_cmpint(devnull_fd, >=, 0);
2977
 
  __attribute__((cleanup(cleanup_close)))
2978
 
    const int real_stderr_fd = dup(STDERR_FILENO);
2979
 
  g_assert_cmpint(real_stderr_fd, >=, 0);
2980
 
 
2981
 
  struct timespec starttime, currtime;
2982
 
  g_assert_true(clock_gettime(CLOCK_MONOTONIC, &starttime) == 0);
2983
 
  do {
2984
 
    g_assert_true(wait_for_event(epoll_fd, queue->next_run, 0));
2985
 
    dup2(devnull_fd, STDERR_FILENO);
2986
 
    const bool success = run_queue(&queue, &cancelled_filenames,
2987
 
                                   &quit_now);
2988
 
    dup2(real_stderr_fd, STDERR_FILENO);
2989
 
    if(not success){
2990
 
      break;
2991
 
    }
2992
 
 
2993
 
    g_assert_true(clock_gettime(CLOCK_MONOTONIC, &currtime) == 0);
2994
 
  } while((not mandos_client_exited)
2995
 
          and (not quit_now)
2996
 
          and ((currtime.tv_sec - starttime.tv_sec) < 10));
2997
 
 
2998
 
  g_assert_true(mandos_client_exited);
2999
 
  g_assert_true(quit_now);
3000
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3001
 
}
3002
 
 
3003
 
static bool epoll_set_does_not_contain(int, int);
3004
 
 
3005
 
static
3006
 
void test_read_mandos_client_output_readerror(__attribute__((unused))
3007
 
                                              test_fixture *fixture,
3008
 
                                              __attribute__((unused))
3009
 
                                              gconstpointer
3010
 
                                              user_data){
3011
 
  __attribute__((cleanup(cleanup_close)))
3012
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3013
 
  g_assert_cmpint(epoll_fd, >=, 0);
3014
 
 
3015
 
  __attribute__((cleanup(cleanup_buffer)))
3016
 
    buffer password = {};
3017
 
 
3018
 
  /* Reading /proc/self/mem from offset 0 will always give EIO */
3019
 
  const int fd = open("/proc/self/mem", O_RDONLY | O_CLOEXEC);
3020
 
 
3021
 
  bool password_is_read = false;
3022
 
  bool quit_now = false;
3023
 
  __attribute__((cleanup(cleanup_queue)))
3024
 
    task_queue *queue = create_queue();
3025
 
  g_assert_nonnull(queue);
3026
 
 
3027
 
  task_context task = {
3028
 
    .func=read_mandos_client_output,
3029
 
    .epoll_fd=epoll_fd,
3030
 
    .fd=fd,
3031
 
    .password=&password,
3032
 
    .password_is_read=&password_is_read,
3033
 
    .quit_now=&quit_now,
3034
 
  };
3035
 
  run_task_with_stderr_to_dev_null(task, queue);
3036
 
  g_assert_false(password_is_read);
3037
 
  g_assert_cmpint((int)password.length, ==, 0);
3038
 
  g_assert_true(quit_now);
3039
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3040
 
 
3041
 
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
3042
 
 
3043
 
  g_assert_cmpint(close(fd), ==, -1);
3044
 
}
3045
 
 
3046
 
static bool epoll_set_does_not_contain(int epoll_fd, int fd){
3047
 
  return not epoll_set_contains(epoll_fd, fd, 0);
3048
 
}
3049
 
 
3050
 
static
3051
 
void test_read_mandos_client_output_nodata(__attribute__((unused))
3052
 
                                           test_fixture *fixture,
3053
 
                                           __attribute__((unused))
3054
 
                                           gconstpointer user_data){
3055
 
  __attribute__((cleanup(cleanup_close)))
3056
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3057
 
  g_assert_cmpint(epoll_fd, >=, 0);
3058
 
 
3059
 
  int pipefds[2];
3060
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3061
 
 
3062
 
  __attribute__((cleanup(cleanup_buffer)))
3063
 
    buffer password = {};
3064
 
 
3065
 
  bool password_is_read = false;
3066
 
  bool quit_now = false;
3067
 
  __attribute__((cleanup(cleanup_queue)))
3068
 
    task_queue *queue = create_queue();
3069
 
  g_assert_nonnull(queue);
3070
 
 
3071
 
  task_context task = {
3072
 
    .func=read_mandos_client_output,
3073
 
    .epoll_fd=epoll_fd,
3074
 
    .fd=pipefds[0],
3075
 
    .password=&password,
3076
 
    .password_is_read=&password_is_read,
3077
 
    .quit_now=&quit_now,
3078
 
  };
3079
 
  task.func(task, queue);
3080
 
  g_assert_false(password_is_read);
3081
 
  g_assert_cmpint((int)password.length, ==, 0);
3082
 
  g_assert_false(quit_now);
3083
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3084
 
 
3085
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3086
 
        .func=read_mandos_client_output,
3087
 
        .epoll_fd=epoll_fd,
3088
 
        .fd=pipefds[0],
3089
 
        .password=&password,
3090
 
        .password_is_read=&password_is_read,
3091
 
        .quit_now=&quit_now,
3092
 
      }));
3093
 
 
3094
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3095
 
                                   EPOLLIN | EPOLLRDHUP));
3096
 
 
3097
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3098
 
}
3099
 
 
3100
 
static void test_read_mandos_client_output_eof(__attribute__((unused))
3101
 
                                               test_fixture *fixture,
3102
 
                                               __attribute__((unused))
3103
 
                                               gconstpointer
3104
 
                                               user_data){
3105
 
  __attribute__((cleanup(cleanup_close)))
3106
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3107
 
  g_assert_cmpint(epoll_fd, >=, 0);
3108
 
 
3109
 
  int pipefds[2];
3110
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3111
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3112
 
 
3113
 
  __attribute__((cleanup(cleanup_buffer)))
3114
 
    buffer password = {};
3115
 
 
3116
 
  bool password_is_read = false;
3117
 
  bool quit_now = false;
3118
 
  __attribute__((cleanup(cleanup_queue)))
3119
 
    task_queue *queue = create_queue();
3120
 
  g_assert_nonnull(queue);
3121
 
 
3122
 
  task_context task = {
3123
 
    .func=read_mandos_client_output,
3124
 
    .epoll_fd=epoll_fd,
3125
 
    .fd=pipefds[0],
3126
 
    .password=&password,
3127
 
    .password_is_read=&password_is_read,
3128
 
    .quit_now=&quit_now,
3129
 
  };
3130
 
  task.func(task, queue);
3131
 
  g_assert_true(password_is_read);
3132
 
  g_assert_cmpint((int)password.length, ==, 0);
3133
 
  g_assert_false(quit_now);
3134
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3135
 
 
3136
 
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
3137
 
 
3138
 
  g_assert_cmpint(close(pipefds[0]), ==, -1);
3139
 
}
3140
 
 
3141
 
static
3142
 
void test_read_mandos_client_output_once(__attribute__((unused))
3143
 
                                         test_fixture *fixture,
3144
 
                                         __attribute__((unused))
3145
 
                                         gconstpointer user_data){
3146
 
  __attribute__((cleanup(cleanup_close)))
3147
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3148
 
  g_assert_cmpint(epoll_fd, >=, 0);
3149
 
 
3150
 
  int pipefds[2];
3151
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3152
 
 
3153
 
  const char dummy_test_password[] = "dummy test password";
3154
 
  /* Start with a pre-allocated buffer */
3155
 
  __attribute__((cleanup(cleanup_buffer)))
3156
 
    buffer password = {
3157
 
    .data=malloc(sizeof(dummy_test_password)),
3158
 
    .length=0,
3159
 
    .allocated=sizeof(dummy_test_password),
3160
 
  };
3161
 
  g_assert_nonnull(password.data);
3162
 
  if(mlock(password.data, password.allocated) != 0){
3163
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
3164
 
  }
3165
 
 
3166
 
  bool password_is_read = false;
3167
 
  bool quit_now = false;
3168
 
  __attribute__((cleanup(cleanup_queue)))
3169
 
    task_queue *queue = create_queue();
3170
 
  g_assert_nonnull(queue);
3171
 
 
3172
 
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3173
 
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3174
 
                             sizeof(dummy_test_password)),
3175
 
                  ==, (int)sizeof(dummy_test_password));
3176
 
 
3177
 
  task_context task = {
3178
 
    .func=read_mandos_client_output,
3179
 
    .epoll_fd=epoll_fd,
3180
 
    .fd=pipefds[0],
3181
 
    .password=&password,
3182
 
    .password_is_read=&password_is_read,
3183
 
    .quit_now=&quit_now,
3184
 
  };
3185
 
  task.func(task, queue);
3186
 
 
3187
 
  g_assert_false(password_is_read);
3188
 
  g_assert_cmpint((int)password.length, ==,
3189
 
                  (int)sizeof(dummy_test_password));
3190
 
  g_assert_nonnull(password.data);
3191
 
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
3192
 
                         sizeof(dummy_test_password)), ==, 0);
3193
 
 
3194
 
  g_assert_false(quit_now);
3195
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3196
 
 
3197
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3198
 
        .func=read_mandos_client_output,
3199
 
        .epoll_fd=epoll_fd,
3200
 
        .fd=pipefds[0],
3201
 
        .password=&password,
3202
 
        .password_is_read=&password_is_read,
3203
 
        .quit_now=&quit_now,
3204
 
      }));
3205
 
 
3206
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3207
 
                                   EPOLLIN | EPOLLRDHUP));
3208
 
 
3209
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3210
 
}
3211
 
 
3212
 
static
3213
 
void test_read_mandos_client_output_malloc(__attribute__((unused))
3214
 
                                           test_fixture *fixture,
3215
 
                                           __attribute__((unused))
3216
 
                                           gconstpointer user_data){
3217
 
  __attribute__((cleanup(cleanup_close)))
3218
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3219
 
  g_assert_cmpint(epoll_fd, >=, 0);
3220
 
 
3221
 
  int pipefds[2];
3222
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3223
 
 
3224
 
  const char dummy_test_password[] = "dummy test password";
3225
 
  /* Start with an empty buffer */
3226
 
  __attribute__((cleanup(cleanup_buffer)))
3227
 
    buffer password = {};
3228
 
 
3229
 
  bool password_is_read = false;
3230
 
  bool quit_now = false;
3231
 
  __attribute__((cleanup(cleanup_queue)))
3232
 
    task_queue *queue = create_queue();
3233
 
  g_assert_nonnull(queue);
3234
 
 
3235
 
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3236
 
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3237
 
                             sizeof(dummy_test_password)),
3238
 
                  ==, (int)sizeof(dummy_test_password));
3239
 
 
3240
 
  task_context task = {
3241
 
    .func=read_mandos_client_output,
3242
 
    .epoll_fd=epoll_fd,
3243
 
    .fd=pipefds[0],
3244
 
    .password=&password,
3245
 
    .password_is_read=&password_is_read,
3246
 
    .quit_now=&quit_now,
3247
 
  };
3248
 
  task.func(task, queue);
3249
 
 
3250
 
  g_assert_false(password_is_read);
3251
 
  g_assert_cmpint((int)password.length, ==,
3252
 
                  (int)sizeof(dummy_test_password));
3253
 
  g_assert_nonnull(password.data);
3254
 
  g_assert_cmpint(memcmp(password.data, dummy_test_password,
3255
 
                         sizeof(dummy_test_password)), ==, 0);
3256
 
 
3257
 
  g_assert_false(quit_now);
3258
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3259
 
 
3260
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3261
 
        .func=read_mandos_client_output,
3262
 
        .epoll_fd=epoll_fd,
3263
 
        .fd=pipefds[0],
3264
 
        .password=&password,
3265
 
        .password_is_read=&password_is_read,
3266
 
        .quit_now=&quit_now,
3267
 
      }));
3268
 
 
3269
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3270
 
                                   EPOLLIN | EPOLLRDHUP));
3271
 
 
3272
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3273
 
}
3274
 
 
3275
 
static
3276
 
void test_read_mandos_client_output_append(__attribute__((unused))
3277
 
                                           test_fixture *fixture,
3278
 
                                           __attribute__((unused))
3279
 
                                           gconstpointer user_data){
3280
 
  __attribute__((cleanup(cleanup_close)))
3281
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3282
 
  g_assert_cmpint(epoll_fd, >=, 0);
3283
 
 
3284
 
  int pipefds[2];
3285
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3286
 
 
3287
 
  const char dummy_test_password[] = "dummy test password";
3288
 
  __attribute__((cleanup(cleanup_buffer)))
3289
 
    buffer password = {
3290
 
    .data=malloc(PIPE_BUF),
3291
 
    .length=PIPE_BUF,
3292
 
    .allocated=PIPE_BUF,
3293
 
  };
3294
 
  g_assert_nonnull(password.data);
3295
 
  if(mlock(password.data, password.allocated) != 0){
3296
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
3297
 
  }
3298
 
 
3299
 
  memset(password.data, 'x', PIPE_BUF);
3300
 
  char password_expected[PIPE_BUF];
3301
 
  memcpy(password_expected, password.data, PIPE_BUF);
3302
 
 
3303
 
  bool password_is_read = false;
3304
 
  bool quit_now = false;
3305
 
  __attribute__((cleanup(cleanup_queue)))
3306
 
    task_queue *queue = create_queue();
3307
 
  g_assert_nonnull(queue);
3308
 
 
3309
 
  g_assert_true(sizeof(dummy_test_password) <= PIPE_BUF);
3310
 
  g_assert_cmpint((int)write(pipefds[1], dummy_test_password,
3311
 
                             sizeof(dummy_test_password)),
3312
 
                  ==, (int)sizeof(dummy_test_password));
3313
 
 
3314
 
  task_context task = {
3315
 
    .func=read_mandos_client_output,
3316
 
    .epoll_fd=epoll_fd,
3317
 
    .fd=pipefds[0],
3318
 
    .password=&password,
3319
 
    .password_is_read=&password_is_read,
3320
 
    .quit_now=&quit_now,
3321
 
  };
3322
 
  task.func(task, queue);
3323
 
 
3324
 
  g_assert_false(password_is_read);
3325
 
  g_assert_cmpint((int)password.length, ==,
3326
 
                  PIPE_BUF + sizeof(dummy_test_password));
3327
 
  g_assert_nonnull(password.data);
3328
 
  g_assert_cmpint(memcmp(password_expected, password.data, PIPE_BUF),
3329
 
                  ==, 0);
3330
 
  g_assert_cmpint(memcmp(password.data + PIPE_BUF,
3331
 
                         dummy_test_password,
3332
 
                         sizeof(dummy_test_password)), ==, 0);
3333
 
  g_assert_false(quit_now);
3334
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3335
 
 
3336
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3337
 
        .func=read_mandos_client_output,
3338
 
        .epoll_fd=epoll_fd,
3339
 
        .fd=pipefds[0],
3340
 
        .password=&password,
3341
 
        .password_is_read=&password_is_read,
3342
 
        .quit_now=&quit_now,
3343
 
      }));
3344
 
 
3345
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3346
 
                                   EPOLLIN | EPOLLRDHUP));
3347
 
}
3348
 
 
3349
 
static char *make_temporary_directory(void);
3350
 
 
3351
 
static void test_add_inotify_dir_watch(__attribute__((unused))
3352
 
                                       test_fixture *fixture,
3353
 
                                       __attribute__((unused))
3354
 
                                       gconstpointer user_data){
3355
 
  __attribute__((cleanup(cleanup_close)))
3356
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3357
 
  g_assert_cmpint(epoll_fd, >=, 0);
3358
 
  __attribute__((cleanup(cleanup_queue)))
3359
 
    task_queue *queue = create_queue();
3360
 
  g_assert_nonnull(queue);
3361
 
  __attribute__((cleanup(string_set_clear)))
3362
 
    string_set cancelled_filenames = {};
3363
 
  const mono_microsecs current_time = 0;
3364
 
 
3365
 
  bool quit_now = false;
3366
 
  buffer password = {};
3367
 
  bool mandos_client_exited = false;
3368
 
  bool password_is_read = false;
3369
 
 
3370
 
  __attribute__((cleanup(cleanup_string)))
3371
 
    char *tempdir = make_temporary_directory();
3372
 
  g_assert_nonnull(tempdir);
3373
 
 
3374
 
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3375
 
                                      &password, tempdir,
3376
 
                                      &cancelled_filenames,
3377
 
                                      &current_time,
3378
 
                                      &mandos_client_exited,
3379
 
                                      &password_is_read));
3380
 
 
3381
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
3382
 
 
3383
 
  const task_context *const added_read_task
3384
 
    = find_matching_task(queue, (task_context){
3385
 
        .func=read_inotify_event,
3386
 
        .epoll_fd=epoll_fd,
3387
 
        .quit_now=&quit_now,
3388
 
        .password=&password,
3389
 
        .filename=tempdir,
3390
 
        .cancelled_filenames=&cancelled_filenames,
3391
 
        .current_time=&current_time,
3392
 
        .mandos_client_exited=&mandos_client_exited,
3393
 
        .password_is_read=&password_is_read,
3394
 
      });
3395
 
  g_assert_nonnull(added_read_task);
3396
 
 
3397
 
  g_assert_cmpint(added_read_task->fd, >, 2);
3398
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3399
 
  g_assert_true(epoll_set_contains(added_read_task->epoll_fd,
3400
 
                                   added_read_task->fd,
3401
 
                                   EPOLLIN | EPOLLRDHUP));
3402
 
 
3403
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
3404
 
}
3405
 
 
3406
 
static char *make_temporary_directory(void){
3407
 
  char *name = strdup("/tmp/mandosXXXXXX");
3408
 
  g_assert_nonnull(name);
3409
 
  char *result = mkdtemp(name);
3410
 
  if(result == NULL){
3411
 
    free(name);
3412
 
  }
3413
 
  return result;
3414
 
}
3415
 
 
3416
 
static void test_add_inotify_dir_watch_fail(__attribute__((unused))
3417
 
                                            test_fixture *fixture,
3418
 
                                            __attribute__((unused))
3419
 
                                            gconstpointer user_data){
3420
 
  __attribute__((cleanup(cleanup_close)))
3421
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3422
 
  g_assert_cmpint(epoll_fd, >=, 0);
3423
 
  __attribute__((cleanup(cleanup_queue)))
3424
 
    task_queue *queue = create_queue();
3425
 
  g_assert_nonnull(queue);
3426
 
  __attribute__((cleanup(string_set_clear)))
3427
 
    string_set cancelled_filenames = {};
3428
 
  const mono_microsecs current_time = 0;
3429
 
 
3430
 
  bool quit_now = false;
3431
 
  buffer password = {};
3432
 
  bool mandos_client_exited = false;
3433
 
  bool password_is_read = false;
3434
 
 
3435
 
  const char nonexistent_dir[] = "/nonexistent";
3436
 
 
3437
 
  FILE *real_stderr = stderr;
3438
 
  FILE *devnull = fopen("/dev/null", "we");
3439
 
  g_assert_nonnull(devnull);
3440
 
  stderr = devnull;
3441
 
  g_assert_false(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3442
 
                                       &password, nonexistent_dir,
3443
 
                                       &cancelled_filenames,
3444
 
                                       &current_time,
3445
 
                                       &mandos_client_exited,
3446
 
                                       &password_is_read));
3447
 
  stderr = real_stderr;
3448
 
  g_assert_cmpint(fclose(devnull), ==, 0);
3449
 
 
3450
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3451
 
}
3452
 
 
3453
 
static void test_add_inotify_dir_watch_EAGAIN(__attribute__((unused))
3454
 
                                              test_fixture *fixture,
3455
 
                                              __attribute__((unused))
3456
 
                                              gconstpointer
3457
 
                                              user_data){
3458
 
  __attribute__((cleanup(cleanup_close)))
3459
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3460
 
  g_assert_cmpint(epoll_fd, >=, 0);
3461
 
  __attribute__((cleanup(cleanup_queue)))
3462
 
    task_queue *queue = create_queue();
3463
 
  g_assert_nonnull(queue);
3464
 
  __attribute__((cleanup(string_set_clear)))
3465
 
    string_set cancelled_filenames = {};
3466
 
  const mono_microsecs current_time = 0;
3467
 
 
3468
 
  bool quit_now = false;
3469
 
  buffer password = {};
3470
 
  bool mandos_client_exited = false;
3471
 
  bool password_is_read = false;
3472
 
 
3473
 
  __attribute__((cleanup(cleanup_string)))
3474
 
    char *tempdir = make_temporary_directory();
3475
 
  g_assert_nonnull(tempdir);
3476
 
 
3477
 
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3478
 
                                      &password, tempdir,
3479
 
                                      &cancelled_filenames,
3480
 
                                      &current_time,
3481
 
                                      &mandos_client_exited,
3482
 
                                      &password_is_read));
3483
 
 
3484
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
3485
 
 
3486
 
  const task_context *const added_read_task
3487
 
    = find_matching_task(queue,
3488
 
                         (task_context){ .func=read_inotify_event });
3489
 
  g_assert_nonnull(added_read_task);
3490
 
 
3491
 
  g_assert_cmpint(added_read_task->fd, >, 2);
3492
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3493
 
 
3494
 
  /* "sufficient to read at least one event." - inotify(7) */
3495
 
  const size_t ievent_size = (sizeof(struct inotify_event)
3496
 
                              + NAME_MAX + 1);
3497
 
  struct inotify_event *ievent = malloc(ievent_size);
3498
 
  g_assert_nonnull(ievent);
3499
 
 
3500
 
  g_assert_cmpint(read(added_read_task->fd, ievent, ievent_size), ==,
3501
 
                  -1);
3502
 
  g_assert_cmpint(errno, ==, EAGAIN);
3503
 
 
3504
 
  free(ievent);
3505
 
 
3506
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
3507
 
}
3508
 
 
3509
 
static char *make_temporary_file_in_directory(const char
3510
 
                                              *const dir);
3511
 
 
3512
 
static
3513
 
void test_add_inotify_dir_watch_IN_CLOSE_WRITE(__attribute__((unused))
3514
 
                                               test_fixture *fixture,
3515
 
                                               __attribute__((unused))
3516
 
                                               gconstpointer
3517
 
                                               user_data){
3518
 
  __attribute__((cleanup(cleanup_close)))
3519
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3520
 
  g_assert_cmpint(epoll_fd, >=, 0);
3521
 
  __attribute__((cleanup(cleanup_queue)))
3522
 
    task_queue *queue = create_queue();
3523
 
  g_assert_nonnull(queue);
3524
 
  __attribute__((cleanup(string_set_clear)))
3525
 
    string_set cancelled_filenames = {};
3526
 
  const mono_microsecs current_time = 0;
3527
 
 
3528
 
  bool quit_now = false;
3529
 
  buffer password = {};
3530
 
  bool mandos_client_exited = false;
3531
 
  bool password_is_read = false;
3532
 
 
3533
 
  __attribute__((cleanup(cleanup_string)))
3534
 
    char *tempdir = make_temporary_directory();
3535
 
  g_assert_nonnull(tempdir);
3536
 
 
3537
 
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3538
 
                                      &password, tempdir,
3539
 
                                      &cancelled_filenames,
3540
 
                                      &current_time,
3541
 
                                      &mandos_client_exited,
3542
 
                                      &password_is_read));
3543
 
 
3544
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
3545
 
 
3546
 
  const task_context *const added_read_task
3547
 
    = find_matching_task(queue,
3548
 
                         (task_context){ .func=read_inotify_event });
3549
 
  g_assert_nonnull(added_read_task);
3550
 
 
3551
 
  g_assert_cmpint(added_read_task->fd, >, 2);
3552
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3553
 
 
3554
 
  __attribute__((cleanup(cleanup_string)))
3555
 
    char *filename = make_temporary_file_in_directory(tempdir);
3556
 
  g_assert_nonnull(filename);
3557
 
 
3558
 
  /* "sufficient to read at least one event." - inotify(7) */
3559
 
  const size_t ievent_size = (sizeof(struct inotify_event)
3560
 
                              + NAME_MAX + 1);
3561
 
  struct inotify_event *ievent = malloc(ievent_size);
3562
 
  g_assert_nonnull(ievent);
3563
 
 
3564
 
  ssize_t read_size = 0;
3565
 
  read_size = read(added_read_task->fd, ievent, ievent_size);
3566
 
 
3567
 
  g_assert_cmpint((int)read_size, >, 0);
3568
 
  g_assert_true(ievent->mask & IN_CLOSE_WRITE);
3569
 
  g_assert_cmpstr(ievent->name, ==, basename(filename));
3570
 
 
3571
 
  free(ievent);
3572
 
 
3573
 
  g_assert_cmpint(unlink(filename), ==, 0);
3574
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
3575
 
}
3576
 
 
3577
 
static char *make_temporary_prefixed_file_in_directory(const char
3578
 
                                                       *const prefix,
3579
 
                                                       const char
3580
 
                                                       *const dir){
3581
 
  char *filename = NULL;
3582
 
  g_assert_cmpint(asprintf(&filename, "%s/%sXXXXXX", dir, prefix),
3583
 
                  >, 0);
3584
 
  g_assert_nonnull(filename);
3585
 
  const int fd = mkostemp(filename, O_CLOEXEC);
3586
 
  g_assert_cmpint(fd, >=, 0);
3587
 
  g_assert_cmpint(close(fd), ==, 0);
3588
 
  return filename;
3589
 
}
3590
 
 
3591
 
static char *make_temporary_file_in_directory(const char
3592
 
                                              *const dir){
3593
 
  return make_temporary_prefixed_file_in_directory("temp", dir);
3594
 
}
3595
 
 
3596
 
static
3597
 
void test_add_inotify_dir_watch_IN_MOVED_TO(__attribute__((unused))
3598
 
                                            test_fixture *fixture,
3599
 
                                            __attribute__((unused))
3600
 
                                            gconstpointer user_data){
3601
 
  __attribute__((cleanup(cleanup_close)))
3602
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3603
 
  g_assert_cmpint(epoll_fd, >=, 0);
3604
 
  __attribute__((cleanup(cleanup_queue)))
3605
 
    task_queue *queue = create_queue();
3606
 
  g_assert_nonnull(queue);
3607
 
  __attribute__((cleanup(string_set_clear)))
3608
 
    string_set cancelled_filenames = {};
3609
 
  const mono_microsecs current_time = 0;
3610
 
 
3611
 
  bool quit_now = false;
3612
 
  buffer password = {};
3613
 
  bool mandos_client_exited = false;
3614
 
  bool password_is_read = false;
3615
 
 
3616
 
  __attribute__((cleanup(cleanup_string)))
3617
 
    char *watchdir = make_temporary_directory();
3618
 
  g_assert_nonnull(watchdir);
3619
 
 
3620
 
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3621
 
                                      &password, watchdir,
3622
 
                                      &cancelled_filenames,
3623
 
                                      &current_time,
3624
 
                                      &mandos_client_exited,
3625
 
                                      &password_is_read));
3626
 
 
3627
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
3628
 
 
3629
 
  const task_context *const added_read_task
3630
 
    = find_matching_task(queue,
3631
 
                         (task_context){ .func=read_inotify_event });
3632
 
  g_assert_nonnull(added_read_task);
3633
 
 
3634
 
  g_assert_cmpint(added_read_task->fd, >, 2);
3635
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3636
 
 
3637
 
  char *sourcedir = make_temporary_directory();
3638
 
  g_assert_nonnull(sourcedir);
3639
 
 
3640
 
  __attribute__((cleanup(cleanup_string)))
3641
 
    char *filename = make_temporary_file_in_directory(sourcedir);
3642
 
  g_assert_nonnull(filename);
3643
 
 
3644
 
  __attribute__((cleanup(cleanup_string)))
3645
 
    char *targetfilename = NULL;
3646
 
  g_assert_cmpint(asprintf(&targetfilename, "%s/%s", watchdir,
3647
 
                           basename(filename)), >, 0);
3648
 
  g_assert_nonnull(targetfilename);
3649
 
 
3650
 
  g_assert_cmpint(rename(filename, targetfilename), ==, 0);
3651
 
  g_assert_cmpint(rmdir(sourcedir), ==, 0);
3652
 
  free(sourcedir);
3653
 
 
3654
 
  /* "sufficient to read at least one event." - inotify(7) */
3655
 
  const size_t ievent_size = (sizeof(struct inotify_event)
3656
 
                              + NAME_MAX + 1);
3657
 
  struct inotify_event *ievent = malloc(ievent_size);
3658
 
  g_assert_nonnull(ievent);
3659
 
 
3660
 
  ssize_t read_size = read(added_read_task->fd, ievent, ievent_size);
3661
 
 
3662
 
  g_assert_cmpint((int)read_size, >, 0);
3663
 
  g_assert_true(ievent->mask & IN_MOVED_TO);
3664
 
  g_assert_cmpstr(ievent->name, ==, basename(targetfilename));
3665
 
 
3666
 
  free(ievent);
3667
 
 
3668
 
  g_assert_cmpint(unlink(targetfilename), ==, 0);
3669
 
  g_assert_cmpint(rmdir(watchdir), ==, 0);
3670
 
}
3671
 
 
3672
 
static
3673
 
void test_add_inotify_dir_watch_IN_DELETE(__attribute__((unused))
3674
 
                                          test_fixture *fixture,
3675
 
                                          __attribute__((unused))
3676
 
                                          gconstpointer user_data){
3677
 
  __attribute__((cleanup(cleanup_close)))
3678
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3679
 
  g_assert_cmpint(epoll_fd, >=, 0);
3680
 
  __attribute__((cleanup(cleanup_queue)))
3681
 
    task_queue *queue = create_queue();
3682
 
  g_assert_nonnull(queue);
3683
 
  __attribute__((cleanup(string_set_clear)))
3684
 
    string_set cancelled_filenames = {};
3685
 
  const mono_microsecs current_time = 0;
3686
 
 
3687
 
  bool quit_now = false;
3688
 
  buffer password = {};
3689
 
  bool mandos_client_exited = false;
3690
 
  bool password_is_read = false;
3691
 
 
3692
 
  __attribute__((cleanup(cleanup_string)))
3693
 
    char *tempdir = make_temporary_directory();
3694
 
  g_assert_nonnull(tempdir);
3695
 
 
3696
 
  __attribute__((cleanup(cleanup_string)))
3697
 
    char *tempfile = make_temporary_file_in_directory(tempdir);
3698
 
  g_assert_nonnull(tempfile);
3699
 
 
3700
 
  g_assert_true(add_inotify_dir_watch(queue, epoll_fd, &quit_now,
3701
 
                                      &password, tempdir,
3702
 
                                      &cancelled_filenames,
3703
 
                                      &current_time,
3704
 
                                      &mandos_client_exited,
3705
 
                                      &password_is_read));
3706
 
  g_assert_cmpint(unlink(tempfile), ==, 0);
3707
 
 
3708
 
  g_assert_cmpuint((unsigned int)queue->length, >, 0);
3709
 
 
3710
 
  const task_context *const added_read_task
3711
 
    = find_matching_task(queue,
3712
 
                         (task_context){ .func=read_inotify_event });
3713
 
  g_assert_nonnull(added_read_task);
3714
 
 
3715
 
  g_assert_cmpint(added_read_task->fd, >, 2);
3716
 
  g_assert_true(fd_has_cloexec_and_nonblock(added_read_task->fd));
3717
 
 
3718
 
  /* "sufficient to read at least one event." - inotify(7) */
3719
 
  const size_t ievent_size = (sizeof(struct inotify_event)
3720
 
                              + NAME_MAX + 1);
3721
 
  struct inotify_event *ievent = malloc(ievent_size);
3722
 
  g_assert_nonnull(ievent);
3723
 
 
3724
 
  ssize_t read_size = 0;
3725
 
  read_size = read(added_read_task->fd, ievent, ievent_size);
3726
 
 
3727
 
  g_assert_cmpint((int)read_size, >, 0);
3728
 
  g_assert_true(ievent->mask & IN_DELETE);
3729
 
  g_assert_cmpstr(ievent->name, ==, basename(tempfile));
3730
 
 
3731
 
  free(ievent);
3732
 
 
3733
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
3734
 
}
3735
 
 
3736
 
static void test_read_inotify_event_readerror(__attribute__((unused))
3737
 
                                              test_fixture *fixture,
3738
 
                                              __attribute__((unused))
3739
 
                                              gconstpointer
3740
 
                                              user_data){
3741
 
  __attribute__((cleanup(cleanup_close)))
3742
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3743
 
  g_assert_cmpint(epoll_fd, >=, 0);
3744
 
  const mono_microsecs current_time = 0;
3745
 
 
3746
 
  /* Reading /proc/self/mem from offset 0 will always result in EIO */
3747
 
  const int fd = open("/proc/self/mem", O_RDONLY | O_CLOEXEC);
3748
 
 
3749
 
  bool quit_now = false;
3750
 
  __attribute__((cleanup(cleanup_queue)))
3751
 
    task_queue *queue = create_queue();
3752
 
  g_assert_nonnull(queue);
3753
 
 
3754
 
  task_context task = {
3755
 
    .func=read_inotify_event,
3756
 
    .epoll_fd=epoll_fd,
3757
 
    .fd=fd,
3758
 
    .quit_now=&quit_now,
3759
 
    .filename=strdup("/nonexistent"),
3760
 
    .cancelled_filenames = &(string_set){},
3761
 
    .notafter=0,
3762
 
    .current_time=&current_time,
3763
 
  };
3764
 
  g_assert_nonnull(task.filename);
3765
 
  run_task_with_stderr_to_dev_null(task, queue);
3766
 
  g_assert_true(quit_now);
3767
 
  g_assert_true(queue->next_run == 0);
3768
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3769
 
 
3770
 
  g_assert_true(epoll_set_does_not_contain(epoll_fd, fd));
3771
 
 
3772
 
  g_assert_cmpint(close(fd), ==, -1);
3773
 
}
3774
 
 
3775
 
static void test_read_inotify_event_bad_epoll(__attribute__((unused))
3776
 
                                              test_fixture *fixture,
3777
 
                                              __attribute__((unused))
3778
 
                                              gconstpointer
3779
 
                                              user_data){
3780
 
  const mono_microsecs current_time = 17;
3781
 
 
3782
 
  int pipefds[2];
3783
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3784
 
  const int epoll_fd = pipefds[0]; /* This will obviously fail */
3785
 
 
3786
 
  bool quit_now = false;
3787
 
  buffer password = {};
3788
 
  bool mandos_client_exited = false;
3789
 
  bool password_is_read = false;
3790
 
  __attribute__((cleanup(cleanup_queue)))
3791
 
    task_queue *queue = create_queue();
3792
 
  g_assert_nonnull(queue);
3793
 
 
3794
 
  task_context task = {
3795
 
    .func=read_inotify_event,
3796
 
    .epoll_fd=epoll_fd,
3797
 
    .fd=pipefds[0],
3798
 
    .quit_now=&quit_now,
3799
 
    .password=&password,
3800
 
    .filename=strdup("/nonexistent"),
3801
 
    .cancelled_filenames = &(string_set){},
3802
 
    .notafter=0,
3803
 
    .current_time=&current_time,
3804
 
    .mandos_client_exited=&mandos_client_exited,
3805
 
    .password_is_read=&password_is_read,
3806
 
  };
3807
 
  g_assert_nonnull(task.filename);
3808
 
  run_task_with_stderr_to_dev_null(task, queue);
3809
 
 
3810
 
  g_assert_nonnull(find_matching_task(queue, task));
3811
 
  g_assert_true(queue->next_run == 1000000 + current_time);
3812
 
 
3813
 
  g_assert_cmpint(close(pipefds[0]), ==, 0);
3814
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3815
 
}
3816
 
 
3817
 
static void test_read_inotify_event_nodata(__attribute__((unused))
3818
 
                                           test_fixture *fixture,
3819
 
                                           __attribute__((unused))
3820
 
                                           gconstpointer user_data){
3821
 
  __attribute__((cleanup(cleanup_close)))
3822
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3823
 
  g_assert_cmpint(epoll_fd, >=, 0);
3824
 
  const mono_microsecs current_time = 0;
3825
 
 
3826
 
  int pipefds[2];
3827
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3828
 
 
3829
 
  bool quit_now = false;
3830
 
  buffer password = {};
3831
 
  bool mandos_client_exited = false;
3832
 
  bool password_is_read = false;
3833
 
  __attribute__((cleanup(cleanup_queue)))
3834
 
    task_queue *queue = create_queue();
3835
 
  g_assert_nonnull(queue);
3836
 
 
3837
 
  task_context task = {
3838
 
    .func=read_inotify_event,
3839
 
    .epoll_fd=epoll_fd,
3840
 
    .fd=pipefds[0],
3841
 
    .quit_now=&quit_now,
3842
 
    .password=&password,
3843
 
    .filename=strdup("/nonexistent"),
3844
 
    .cancelled_filenames = &(string_set){},
3845
 
    .notafter=0,
3846
 
    .current_time=&current_time,
3847
 
    .mandos_client_exited=&mandos_client_exited,
3848
 
    .password_is_read=&password_is_read,
3849
 
  };
3850
 
  g_assert_nonnull(task.filename);
3851
 
  task.func(task, queue);
3852
 
  g_assert_false(quit_now);
3853
 
  g_assert_true(queue->next_run == 0);
3854
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
3855
 
 
3856
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3857
 
        .func=read_inotify_event,
3858
 
        .epoll_fd=epoll_fd,
3859
 
        .fd=pipefds[0],
3860
 
        .quit_now=&quit_now,
3861
 
        .password=&password,
3862
 
        .filename=task.filename,
3863
 
        .cancelled_filenames=task.cancelled_filenames,
3864
 
        .current_time=&current_time,
3865
 
        .mandos_client_exited=&mandos_client_exited,
3866
 
        .password_is_read=&password_is_read,
3867
 
      }));
3868
 
 
3869
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3870
 
                                   EPOLLIN | EPOLLRDHUP));
3871
 
 
3872
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3873
 
}
3874
 
 
3875
 
static void test_read_inotify_event_eof(__attribute__((unused))
3876
 
                                        test_fixture *fixture,
3877
 
                                        __attribute__((unused))
3878
 
                                        gconstpointer user_data){
3879
 
  __attribute__((cleanup(cleanup_close)))
3880
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3881
 
  g_assert_cmpint(epoll_fd, >=, 0);
3882
 
  const mono_microsecs current_time = 0;
3883
 
 
3884
 
  int pipefds[2];
3885
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3886
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3887
 
 
3888
 
  bool quit_now = false;
3889
 
  buffer password = {};
3890
 
  __attribute__((cleanup(cleanup_queue)))
3891
 
    task_queue *queue = create_queue();
3892
 
  g_assert_nonnull(queue);
3893
 
 
3894
 
  task_context task = {
3895
 
    .func=read_inotify_event,
3896
 
    .epoll_fd=epoll_fd,
3897
 
    .fd=pipefds[0],
3898
 
    .quit_now=&quit_now,
3899
 
    .password=&password,
3900
 
    .filename=strdup("/nonexistent"),
3901
 
    .cancelled_filenames = &(string_set){},
3902
 
    .notafter=0,
3903
 
    .current_time=&current_time,
3904
 
  };
3905
 
  run_task_with_stderr_to_dev_null(task, queue);
3906
 
  g_assert_true(quit_now);
3907
 
  g_assert_true(queue->next_run == 0);
3908
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
3909
 
 
3910
 
  g_assert_true(epoll_set_does_not_contain(epoll_fd, pipefds[0]));
3911
 
 
3912
 
  g_assert_cmpint(close(pipefds[0]), ==, -1);
3913
 
}
3914
 
 
3915
 
static
3916
 
void test_read_inotify_event_IN_CLOSE_WRITE(__attribute__((unused))
3917
 
                                            test_fixture *fixture,
3918
 
                                            __attribute__((unused))
3919
 
                                            gconstpointer user_data){
3920
 
  __attribute__((cleanup(cleanup_close)))
3921
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
3922
 
  g_assert_cmpint(epoll_fd, >=, 0);
3923
 
  const mono_microsecs current_time = 0;
3924
 
 
3925
 
  int pipefds[2];
3926
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
3927
 
 
3928
 
  /* "sufficient to read at least one event." - inotify(7) */
3929
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
3930
 
                                  + NAME_MAX + 1);
3931
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
3932
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
3933
 
  struct inotify_event *ievent = ((struct inotify_event *)
3934
 
                                  ievent_buffer);
3935
 
 
3936
 
  const char dummy_file_name[] = "ask.dummy_file_name";
3937
 
  ievent->mask = IN_CLOSE_WRITE;
3938
 
  ievent->len = sizeof(dummy_file_name);
3939
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
3940
 
  const size_t ievent_size = (sizeof(struct inotify_event)
3941
 
                              + sizeof(dummy_file_name));
3942
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
3943
 
                  ==, ievent_size);
3944
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
3945
 
 
3946
 
  bool quit_now = false;
3947
 
  buffer password = {};
3948
 
  bool mandos_client_exited = false;
3949
 
  bool password_is_read = false;
3950
 
  __attribute__((cleanup(cleanup_queue)))
3951
 
    task_queue *queue = create_queue();
3952
 
  g_assert_nonnull(queue);
3953
 
 
3954
 
  task_context task = {
3955
 
    .func=read_inotify_event,
3956
 
    .epoll_fd=epoll_fd,
3957
 
    .fd=pipefds[0],
3958
 
    .quit_now=&quit_now,
3959
 
    .password=&password,
3960
 
    .filename=strdup("/nonexistent"),
3961
 
    .cancelled_filenames = &(string_set){},
3962
 
    .notafter=0,
3963
 
    .current_time=&current_time,
3964
 
    .mandos_client_exited=&mandos_client_exited,
3965
 
    .password_is_read=&password_is_read,
3966
 
  };
3967
 
  task.func(task, queue);
3968
 
  g_assert_false(quit_now);
3969
 
  g_assert_true(queue->next_run != 0);
3970
 
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
3971
 
 
3972
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3973
 
        .func=read_inotify_event,
3974
 
        .epoll_fd=epoll_fd,
3975
 
        .fd=pipefds[0],
3976
 
        .quit_now=&quit_now,
3977
 
        .password=&password,
3978
 
        .filename=task.filename,
3979
 
        .cancelled_filenames=task.cancelled_filenames,
3980
 
        .current_time=&current_time,
3981
 
        .mandos_client_exited=&mandos_client_exited,
3982
 
        .password_is_read=&password_is_read,
3983
 
      }));
3984
 
 
3985
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
3986
 
                                   EPOLLIN | EPOLLRDHUP));
3987
 
 
3988
 
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
3989
 
 
3990
 
  __attribute__((cleanup(cleanup_string)))
3991
 
    char *filename = NULL;
3992
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
3993
 
                           dummy_file_name), >, 0);
3994
 
  g_assert_nonnull(filename);
3995
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
3996
 
        .func=open_and_parse_question,
3997
 
        .epoll_fd=epoll_fd,
3998
 
        .filename=filename,
3999
 
        .question_filename=filename,
4000
 
        .password=&password,
4001
 
        .cancelled_filenames=task.cancelled_filenames,
4002
 
        .current_time=&current_time,
4003
 
        .mandos_client_exited=&mandos_client_exited,
4004
 
        .password_is_read=&password_is_read,
4005
 
      }));
4006
 
}
4007
 
 
4008
 
static
4009
 
void test_read_inotify_event_IN_MOVED_TO(__attribute__((unused))
4010
 
                                         test_fixture *fixture,
4011
 
                                         __attribute__((unused))
4012
 
                                         gconstpointer user_data){
4013
 
  __attribute__((cleanup(cleanup_close)))
4014
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4015
 
  g_assert_cmpint(epoll_fd, >=, 0);
4016
 
  const mono_microsecs current_time = 0;
4017
 
 
4018
 
  int pipefds[2];
4019
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4020
 
 
4021
 
  /* "sufficient to read at least one event." - inotify(7) */
4022
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
4023
 
                                  + NAME_MAX + 1);
4024
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4025
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
4026
 
  struct inotify_event *ievent = ((struct inotify_event *)
4027
 
                                  ievent_buffer);
4028
 
 
4029
 
  const char dummy_file_name[] = "ask.dummy_file_name";
4030
 
  ievent->mask = IN_MOVED_TO;
4031
 
  ievent->len = sizeof(dummy_file_name);
4032
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4033
 
  const size_t ievent_size = (sizeof(struct inotify_event)
4034
 
                              + sizeof(dummy_file_name));
4035
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
4036
 
                  ==, ievent_size);
4037
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
4038
 
 
4039
 
  bool quit_now = false;
4040
 
  buffer password = {};
4041
 
  bool mandos_client_exited = false;
4042
 
  bool password_is_read = false;
4043
 
  __attribute__((cleanup(cleanup_queue)))
4044
 
    task_queue *queue = create_queue();
4045
 
  g_assert_nonnull(queue);
4046
 
 
4047
 
  task_context task = {
4048
 
    .func=read_inotify_event,
4049
 
    .epoll_fd=epoll_fd,
4050
 
    .fd=pipefds[0],
4051
 
    .quit_now=&quit_now,
4052
 
    .password=&password,
4053
 
    .filename=strdup("/nonexistent"),
4054
 
    .cancelled_filenames = &(string_set){},
4055
 
    .notafter=0,
4056
 
    .current_time=&current_time,
4057
 
    .mandos_client_exited=&mandos_client_exited,
4058
 
    .password_is_read=&password_is_read,
4059
 
  };
4060
 
  task.func(task, queue);
4061
 
  g_assert_false(quit_now);
4062
 
  g_assert_true(queue->next_run != 0);
4063
 
  g_assert_cmpuint((unsigned int)queue->length, >=, 1);
4064
 
 
4065
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4066
 
        .func=read_inotify_event,
4067
 
        .epoll_fd=epoll_fd,
4068
 
        .fd=pipefds[0],
4069
 
        .quit_now=&quit_now,
4070
 
        .password=&password,
4071
 
        .filename=task.filename,
4072
 
        .cancelled_filenames=task.cancelled_filenames,
4073
 
        .current_time=&current_time,
4074
 
        .mandos_client_exited=&mandos_client_exited,
4075
 
        .password_is_read=&password_is_read,
4076
 
      }));
4077
 
 
4078
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4079
 
                                   EPOLLIN | EPOLLRDHUP));
4080
 
 
4081
 
  g_assert_cmpuint((unsigned int)queue->length, >=, 2);
4082
 
 
4083
 
  __attribute__((cleanup(cleanup_string)))
4084
 
    char *filename = NULL;
4085
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4086
 
                           dummy_file_name), >, 0);
4087
 
  g_assert_nonnull(filename);
4088
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4089
 
        .func=open_and_parse_question,
4090
 
        .epoll_fd=epoll_fd,
4091
 
        .filename=filename,
4092
 
        .question_filename=filename,
4093
 
        .password=&password,
4094
 
        .cancelled_filenames=task.cancelled_filenames,
4095
 
        .current_time=&current_time,
4096
 
        .mandos_client_exited=&mandos_client_exited,
4097
 
        .password_is_read=&password_is_read,
4098
 
      }));
4099
 
}
4100
 
 
4101
 
static void test_read_inotify_event_IN_DELETE(__attribute__((unused))
4102
 
                                              test_fixture *fixture,
4103
 
                                              __attribute__((unused))
4104
 
                                              gconstpointer
4105
 
                                              user_data){
4106
 
  __attribute__((cleanup(cleanup_close)))
4107
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4108
 
  g_assert_cmpint(epoll_fd, >=, 0);
4109
 
  __attribute__((cleanup(string_set_clear)))
4110
 
    string_set cancelled_filenames = {};
4111
 
  const mono_microsecs current_time = 0;
4112
 
 
4113
 
  int pipefds[2];
4114
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4115
 
 
4116
 
  /* "sufficient to read at least one event." - inotify(7) */
4117
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
4118
 
                                  + NAME_MAX + 1);
4119
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4120
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
4121
 
  struct inotify_event *ievent = ((struct inotify_event *)
4122
 
                                  ievent_buffer);
4123
 
 
4124
 
  const char dummy_file_name[] = "ask.dummy_file_name";
4125
 
  ievent->mask = IN_DELETE;
4126
 
  ievent->len = sizeof(dummy_file_name);
4127
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4128
 
  const size_t ievent_size = (sizeof(struct inotify_event)
4129
 
                              + sizeof(dummy_file_name));
4130
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
4131
 
                  ==, ievent_size);
4132
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
4133
 
 
4134
 
  bool quit_now = false;
4135
 
  buffer password = {};
4136
 
  bool mandos_client_exited = false;
4137
 
  bool password_is_read = false;
4138
 
  __attribute__((cleanup(cleanup_queue)))
4139
 
    task_queue *queue = create_queue();
4140
 
  g_assert_nonnull(queue);
4141
 
 
4142
 
  task_context task = {
4143
 
    .func=read_inotify_event,
4144
 
    .epoll_fd=epoll_fd,
4145
 
    .fd=pipefds[0],
4146
 
    .quit_now=&quit_now,
4147
 
    .password=&password,
4148
 
    .filename=strdup("/nonexistent"),
4149
 
    .cancelled_filenames=&cancelled_filenames,
4150
 
    .current_time=&current_time,
4151
 
    .mandos_client_exited=&mandos_client_exited,
4152
 
    .password_is_read=&password_is_read,
4153
 
  };
4154
 
  task.func(task, queue);
4155
 
  g_assert_false(quit_now);
4156
 
  g_assert_true(queue->next_run == 0);
4157
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4158
 
 
4159
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4160
 
        .func=read_inotify_event,
4161
 
        .epoll_fd=epoll_fd,
4162
 
        .fd=pipefds[0],
4163
 
        .quit_now=&quit_now,
4164
 
        .password=&password,
4165
 
        .filename=task.filename,
4166
 
        .cancelled_filenames=&cancelled_filenames,
4167
 
        .current_time=&current_time,
4168
 
        .mandos_client_exited=&mandos_client_exited,
4169
 
        .password_is_read=&password_is_read,
4170
 
      }));
4171
 
 
4172
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4173
 
                                   EPOLLIN | EPOLLRDHUP));
4174
 
 
4175
 
  __attribute__((cleanup(cleanup_string)))
4176
 
    char *filename = NULL;
4177
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4178
 
                           dummy_file_name), >, 0);
4179
 
  g_assert_nonnull(filename);
4180
 
  g_assert_true(string_set_contains(*task.cancelled_filenames,
4181
 
                                    filename));
4182
 
}
4183
 
 
4184
 
static void
4185
 
test_read_inotify_event_IN_CLOSE_WRITE_badname(__attribute__((unused))
4186
 
                                               test_fixture *fixture,
4187
 
                                               __attribute__((unused))
4188
 
                                               gconstpointer
4189
 
                                               user_data){
4190
 
  __attribute__((cleanup(cleanup_close)))
4191
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4192
 
  g_assert_cmpint(epoll_fd, >=, 0);
4193
 
  const mono_microsecs current_time = 0;
4194
 
 
4195
 
  int pipefds[2];
4196
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4197
 
 
4198
 
  /* "sufficient to read at least one event." - inotify(7) */
4199
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
4200
 
                                  + NAME_MAX + 1);
4201
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4202
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
4203
 
  struct inotify_event *ievent = ((struct inotify_event *)
4204
 
                                  ievent_buffer);
4205
 
 
4206
 
  const char dummy_file_name[] = "ignored.dummy_file_name";
4207
 
  ievent->mask = IN_CLOSE_WRITE;
4208
 
  ievent->len = sizeof(dummy_file_name);
4209
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4210
 
  const size_t ievent_size = (sizeof(struct inotify_event)
4211
 
                              + sizeof(dummy_file_name));
4212
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
4213
 
                  ==, ievent_size);
4214
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
4215
 
 
4216
 
  bool quit_now = false;
4217
 
  buffer password = {};
4218
 
  bool mandos_client_exited = false;
4219
 
  bool password_is_read = false;
4220
 
  __attribute__((cleanup(cleanup_queue)))
4221
 
    task_queue *queue = create_queue();
4222
 
  g_assert_nonnull(queue);
4223
 
 
4224
 
  task_context task = {
4225
 
    .func=read_inotify_event,
4226
 
    .epoll_fd=epoll_fd,
4227
 
    .fd=pipefds[0],
4228
 
    .quit_now=&quit_now,
4229
 
    .password=&password,
4230
 
    .filename=strdup("/nonexistent"),
4231
 
    .cancelled_filenames = &(string_set){},
4232
 
    .notafter=0,
4233
 
    .current_time=&current_time,
4234
 
    .mandos_client_exited=&mandos_client_exited,
4235
 
    .password_is_read=&password_is_read,
4236
 
  };
4237
 
  task.func(task, queue);
4238
 
  g_assert_false(quit_now);
4239
 
  g_assert_true(queue->next_run == 0);
4240
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4241
 
 
4242
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4243
 
        .func=read_inotify_event,
4244
 
        .epoll_fd=epoll_fd,
4245
 
        .fd=pipefds[0],
4246
 
        .quit_now=&quit_now,
4247
 
        .password=&password,
4248
 
        .filename=task.filename,
4249
 
        .cancelled_filenames=task.cancelled_filenames,
4250
 
        .current_time=&current_time,
4251
 
        .mandos_client_exited=&mandos_client_exited,
4252
 
        .password_is_read=&password_is_read,
4253
 
      }));
4254
 
 
4255
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4256
 
                                   EPOLLIN | EPOLLRDHUP));
4257
 
}
4258
 
 
4259
 
static void
4260
 
test_read_inotify_event_IN_MOVED_TO_badname(__attribute__((unused))
4261
 
                                            test_fixture *fixture,
4262
 
                                            __attribute__((unused))
4263
 
                                            gconstpointer user_data){
4264
 
  __attribute__((cleanup(cleanup_close)))
4265
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4266
 
  g_assert_cmpint(epoll_fd, >=, 0);
4267
 
  const mono_microsecs current_time = 0;
4268
 
 
4269
 
  int pipefds[2];
4270
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4271
 
 
4272
 
  /* "sufficient to read at least one event." - inotify(7) */
4273
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
4274
 
                                  + NAME_MAX + 1);
4275
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4276
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
4277
 
  struct inotify_event *ievent = ((struct inotify_event *)
4278
 
                                  ievent_buffer);
4279
 
 
4280
 
  const char dummy_file_name[] = "ignored.dummy_file_name";
4281
 
  ievent->mask = IN_MOVED_TO;
4282
 
  ievent->len = sizeof(dummy_file_name);
4283
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4284
 
  const size_t ievent_size = (sizeof(struct inotify_event)
4285
 
                              + sizeof(dummy_file_name));
4286
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
4287
 
                  ==, ievent_size);
4288
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
4289
 
 
4290
 
  bool quit_now = false;
4291
 
  buffer password = {};
4292
 
  bool mandos_client_exited = false;
4293
 
  bool password_is_read = false;
4294
 
  __attribute__((cleanup(cleanup_queue)))
4295
 
    task_queue *queue = create_queue();
4296
 
  g_assert_nonnull(queue);
4297
 
 
4298
 
  task_context task = {
4299
 
    .func=read_inotify_event,
4300
 
    .epoll_fd=epoll_fd,
4301
 
    .fd=pipefds[0],
4302
 
    .quit_now=&quit_now,
4303
 
    .password=&password,
4304
 
    .filename=strdup("/nonexistent"),
4305
 
    .cancelled_filenames = &(string_set){},
4306
 
    .notafter=0,
4307
 
    .current_time=&current_time,
4308
 
    .mandos_client_exited=&mandos_client_exited,
4309
 
    .password_is_read=&password_is_read,
4310
 
  };
4311
 
  task.func(task, queue);
4312
 
  g_assert_false(quit_now);
4313
 
  g_assert_true(queue->next_run == 0);
4314
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4315
 
 
4316
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4317
 
        .func=read_inotify_event,
4318
 
        .epoll_fd=epoll_fd,
4319
 
        .fd=pipefds[0],
4320
 
        .quit_now=&quit_now,
4321
 
        .password=&password,
4322
 
        .filename=task.filename,
4323
 
        .cancelled_filenames=task.cancelled_filenames,
4324
 
        .current_time=&current_time,
4325
 
        .mandos_client_exited=&mandos_client_exited,
4326
 
        .password_is_read=&password_is_read,
4327
 
      }));
4328
 
 
4329
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4330
 
                                   EPOLLIN | EPOLLRDHUP));
4331
 
}
4332
 
 
4333
 
static
4334
 
void test_read_inotify_event_IN_DELETE_badname(__attribute__((unused))
4335
 
                                               test_fixture *fixture,
4336
 
                                               __attribute__((unused))
4337
 
                                               gconstpointer
4338
 
                                               user_data){
4339
 
  __attribute__((cleanup(cleanup_close)))
4340
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4341
 
  g_assert_cmpint(epoll_fd, >=, 0);
4342
 
  __attribute__((cleanup(string_set_clear)))
4343
 
    string_set cancelled_filenames = {};
4344
 
  const mono_microsecs current_time = 0;
4345
 
 
4346
 
  int pipefds[2];
4347
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
4348
 
 
4349
 
  /* "sufficient to read at least one event." - inotify(7) */
4350
 
  const size_t ievent_max_size = (sizeof(struct inotify_event)
4351
 
                                  + NAME_MAX + 1);
4352
 
  g_assert_cmpint(ievent_max_size, <=, PIPE_BUF);
4353
 
  char ievent_buffer[sizeof(struct inotify_event) + NAME_MAX + 1];
4354
 
  struct inotify_event *ievent = ((struct inotify_event *)
4355
 
                                  ievent_buffer);
4356
 
 
4357
 
  const char dummy_file_name[] = "ignored.dummy_file_name";
4358
 
  ievent->mask = IN_DELETE;
4359
 
  ievent->len = sizeof(dummy_file_name);
4360
 
  memcpy(ievent->name, dummy_file_name, sizeof(dummy_file_name));
4361
 
  const size_t ievent_size = (sizeof(struct inotify_event)
4362
 
                              + sizeof(dummy_file_name));
4363
 
  g_assert_cmpint(write(pipefds[1], ievent_buffer, ievent_size),
4364
 
                  ==, ievent_size);
4365
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
4366
 
 
4367
 
  bool quit_now = false;
4368
 
  buffer password = {};
4369
 
  bool mandos_client_exited = false;
4370
 
  bool password_is_read = false;
4371
 
  __attribute__((cleanup(cleanup_queue)))
4372
 
    task_queue *queue = create_queue();
4373
 
  g_assert_nonnull(queue);
4374
 
 
4375
 
  task_context task = {
4376
 
    .func=read_inotify_event,
4377
 
    .epoll_fd=epoll_fd,
4378
 
    .fd=pipefds[0],
4379
 
    .quit_now=&quit_now,
4380
 
    .password=&password,
4381
 
    .filename=strdup("/nonexistent"),
4382
 
    .cancelled_filenames=&cancelled_filenames,
4383
 
    .current_time=&current_time,
4384
 
    .mandos_client_exited=&mandos_client_exited,
4385
 
    .password_is_read=&password_is_read,
4386
 
  };
4387
 
  task.func(task, queue);
4388
 
  g_assert_false(quit_now);
4389
 
  g_assert_true(queue->next_run == 0);
4390
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4391
 
 
4392
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4393
 
        .func=read_inotify_event,
4394
 
        .epoll_fd=epoll_fd,
4395
 
        .fd=pipefds[0],
4396
 
        .quit_now=&quit_now,
4397
 
        .password=&password,
4398
 
        .filename=task.filename,
4399
 
        .cancelled_filenames=&cancelled_filenames,
4400
 
        .current_time=&current_time,
4401
 
        .mandos_client_exited=&mandos_client_exited,
4402
 
        .password_is_read=&password_is_read,
4403
 
      }));
4404
 
 
4405
 
  g_assert_true(epoll_set_contains(epoll_fd, pipefds[0],
4406
 
                                   EPOLLIN | EPOLLRDHUP));
4407
 
 
4408
 
  __attribute__((cleanup(cleanup_string)))
4409
 
    char *filename = NULL;
4410
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", task.filename,
4411
 
                           dummy_file_name), >, 0);
4412
 
  g_assert_nonnull(filename);
4413
 
  g_assert_false(string_set_contains(cancelled_filenames, filename));
4414
 
}
4415
 
 
4416
 
static
4417
 
void test_open_and_parse_question_ENOENT(__attribute__((unused))
4418
 
                                         test_fixture *fixture,
4419
 
                                         __attribute__((unused))
4420
 
                                         gconstpointer user_data){
4421
 
  __attribute__((cleanup(cleanup_close)))
4422
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4423
 
  g_assert_cmpint(epoll_fd, >=, 0);
4424
 
  __attribute__((cleanup(string_set_clear)))
4425
 
    string_set cancelled_filenames = {};
4426
 
  bool mandos_client_exited = false;
4427
 
  bool password_is_read = false;
4428
 
  __attribute__((cleanup(cleanup_queue)))
4429
 
    task_queue *queue = create_queue();
4430
 
  g_assert_nonnull(queue);
4431
 
 
4432
 
  char *const filename = strdup("/nonexistent");
4433
 
  g_assert_nonnull(filename);
4434
 
  task_context task = {
4435
 
    .func=open_and_parse_question,
4436
 
    .question_filename=filename,
4437
 
    .epoll_fd=epoll_fd,
4438
 
    .password=(buffer[]){{}},
4439
 
    .filename=filename,
4440
 
    .cancelled_filenames=&cancelled_filenames,
4441
 
    .current_time=(mono_microsecs[]){0},
4442
 
    .mandos_client_exited=&mandos_client_exited,
4443
 
    .password_is_read=&password_is_read,
4444
 
  };
4445
 
  task.func(task, queue);
4446
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4447
 
}
4448
 
 
4449
 
static void test_open_and_parse_question_EIO(__attribute__((unused))
4450
 
                                             test_fixture *fixture,
4451
 
                                             __attribute__((unused))
4452
 
                                             gconstpointer user_data){
4453
 
  __attribute__((cleanup(cleanup_close)))
4454
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4455
 
  g_assert_cmpint(epoll_fd, >=, 0);
4456
 
  __attribute__((cleanup(string_set_clear)))
4457
 
    string_set cancelled_filenames = {};
4458
 
  buffer password = {};
4459
 
  bool mandos_client_exited = false;
4460
 
  bool password_is_read = false;
4461
 
  __attribute__((cleanup(cleanup_queue)))
4462
 
    task_queue *queue = create_queue();
4463
 
  g_assert_nonnull(queue);
4464
 
  const mono_microsecs current_time = 0;
4465
 
 
4466
 
  char *filename = strdup("/proc/self/mem");
4467
 
  task_context task = {
4468
 
    .func=open_and_parse_question,
4469
 
    .question_filename=filename,
4470
 
    .epoll_fd=epoll_fd,
4471
 
    .password=&password,
4472
 
    .filename=filename,
4473
 
    .cancelled_filenames=&cancelled_filenames,
4474
 
    .current_time=&current_time,
4475
 
    .mandos_client_exited=&mandos_client_exited,
4476
 
    .password_is_read=&password_is_read,
4477
 
  };
4478
 
  run_task_with_stderr_to_dev_null(task, queue);
4479
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4480
 
}
4481
 
 
4482
 
static void
4483
 
test_open_and_parse_question_parse_error(__attribute__((unused))
4484
 
                                         test_fixture *fixture,
4485
 
                                         __attribute__((unused))
4486
 
                                         gconstpointer user_data){
4487
 
  __attribute__((cleanup(cleanup_close)))
4488
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4489
 
  g_assert_cmpint(epoll_fd, >=, 0);
4490
 
  __attribute__((cleanup(string_set_clear)))
4491
 
    string_set cancelled_filenames = {};
4492
 
  __attribute__((cleanup(cleanup_queue)))
4493
 
    task_queue *queue = create_queue();
4494
 
  g_assert_nonnull(queue);
4495
 
 
4496
 
  __attribute__((cleanup(cleanup_string)))
4497
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4498
 
  g_assert_nonnull(tempfilename);
4499
 
  int tempfile = mkostemp(tempfilename, O_CLOEXEC);
4500
 
  g_assert_cmpint(tempfile, >, 0);
4501
 
  const char bad_data[] = "this is bad syntax\n";
4502
 
  g_assert_cmpint(write(tempfile, bad_data, sizeof(bad_data)),
4503
 
                  ==, sizeof(bad_data));
4504
 
  g_assert_cmpint(close(tempfile), ==, 0);
4505
 
 
4506
 
  char *const filename = strdup(tempfilename);
4507
 
  g_assert_nonnull(filename);
4508
 
  task_context task = {
4509
 
    .func=open_and_parse_question,
4510
 
    .question_filename=filename,
4511
 
    .epoll_fd=epoll_fd,
4512
 
    .password=(buffer[]){{}},
4513
 
    .filename=filename,
4514
 
    .cancelled_filenames=&cancelled_filenames,
4515
 
    .current_time=(mono_microsecs[]){0},
4516
 
    .mandos_client_exited=(bool[]){false},
4517
 
    .password_is_read=(bool[]){false},
4518
 
  };
4519
 
  run_task_with_stderr_to_dev_null(task, queue);
4520
 
 
4521
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4522
 
 
4523
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4524
 
}
4525
 
 
4526
 
static
4527
 
void test_open_and_parse_question_nosocket(__attribute__((unused))
4528
 
                                           test_fixture *fixture,
4529
 
                                           __attribute__((unused))
4530
 
                                           gconstpointer user_data){
4531
 
  __attribute__((cleanup(cleanup_close)))
4532
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4533
 
  g_assert_cmpint(epoll_fd, >=, 0);
4534
 
  __attribute__((cleanup(string_set_clear)))
4535
 
    string_set cancelled_filenames = {};
4536
 
  __attribute__((cleanup(cleanup_queue)))
4537
 
    task_queue *queue = create_queue();
4538
 
  g_assert_nonnull(queue);
4539
 
 
4540
 
  __attribute__((cleanup(cleanup_string)))
4541
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4542
 
  g_assert_nonnull(tempfilename);
4543
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4544
 
  g_assert_cmpint(questionfile, >, 0);
4545
 
  FILE *qf = fdopen(questionfile, "w");
4546
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nPID=1\n"), >, 0);
4547
 
  g_assert_cmpint(fclose(qf), ==, 0);
4548
 
 
4549
 
  char *const filename = strdup(tempfilename);
4550
 
  g_assert_nonnull(filename);
4551
 
  task_context task = {
4552
 
    .func=open_and_parse_question,
4553
 
    .question_filename=filename,
4554
 
    .epoll_fd=epoll_fd,
4555
 
    .password=(buffer[]){{}},
4556
 
    .filename=filename,
4557
 
    .cancelled_filenames=&cancelled_filenames,
4558
 
    .current_time=(mono_microsecs[]){0},
4559
 
    .mandos_client_exited=(bool[]){false},
4560
 
    .password_is_read=(bool[]){false},
4561
 
  };
4562
 
  run_task_with_stderr_to_dev_null(task, queue);
4563
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4564
 
 
4565
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4566
 
}
4567
 
 
4568
 
static
4569
 
void test_open_and_parse_question_badsocket(__attribute__((unused))
4570
 
                                            test_fixture *fixture,
4571
 
                                            __attribute__((unused))
4572
 
                                            gconstpointer user_data){
4573
 
  __attribute__((cleanup(cleanup_close)))
4574
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4575
 
  g_assert_cmpint(epoll_fd, >=, 0);
4576
 
  __attribute__((cleanup(string_set_clear)))
4577
 
    string_set cancelled_filenames = {};
4578
 
  __attribute__((cleanup(cleanup_queue)))
4579
 
    task_queue *queue = create_queue();
4580
 
  g_assert_nonnull(queue);
4581
 
 
4582
 
  __attribute__((cleanup(cleanup_string)))
4583
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4584
 
  g_assert_nonnull(tempfilename);
4585
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4586
 
  g_assert_cmpint(questionfile, >, 0);
4587
 
  FILE *qf = fdopen(questionfile, "w");
4588
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=\nPID=1\n"), >, 0);
4589
 
  g_assert_cmpint(fclose(qf), ==, 0);
4590
 
 
4591
 
  char *const filename = strdup(tempfilename);
4592
 
  g_assert_nonnull(filename);
4593
 
  task_context task = {
4594
 
    .func=open_and_parse_question,
4595
 
    .question_filename=filename,
4596
 
    .epoll_fd=epoll_fd,
4597
 
    .password=(buffer[]){{}},
4598
 
    .filename=filename,
4599
 
    .cancelled_filenames=&cancelled_filenames,
4600
 
    .current_time=(mono_microsecs[]){0},
4601
 
    .mandos_client_exited=(bool[]){false},
4602
 
    .password_is_read=(bool[]){false},
4603
 
  };
4604
 
  run_task_with_stderr_to_dev_null(task, queue);
4605
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4606
 
 
4607
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4608
 
}
4609
 
 
4610
 
static
4611
 
void test_open_and_parse_question_nopid(__attribute__((unused))
4612
 
                                        test_fixture *fixture,
4613
 
                                        __attribute__((unused))
4614
 
                                        gconstpointer user_data){
4615
 
  __attribute__((cleanup(cleanup_close)))
4616
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4617
 
  g_assert_cmpint(epoll_fd, >=, 0);
4618
 
  __attribute__((cleanup(string_set_clear)))
4619
 
    string_set cancelled_filenames = {};
4620
 
  __attribute__((cleanup(cleanup_queue)))
4621
 
    task_queue *queue = create_queue();
4622
 
  g_assert_nonnull(queue);
4623
 
 
4624
 
  __attribute__((cleanup(cleanup_string)))
4625
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4626
 
  g_assert_nonnull(tempfilename);
4627
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4628
 
  g_assert_cmpint(questionfile, >, 0);
4629
 
  FILE *qf = fdopen(questionfile, "w");
4630
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\n"), >, 0);
4631
 
  g_assert_cmpint(fclose(qf), ==, 0);
4632
 
 
4633
 
  char *const filename = strdup(tempfilename);
4634
 
  g_assert_nonnull(filename);
4635
 
  task_context task = {
4636
 
    .func=open_and_parse_question,
4637
 
    .question_filename=filename,
4638
 
    .epoll_fd=epoll_fd,
4639
 
    .password=(buffer[]){{}},
4640
 
    .filename=filename,
4641
 
    .cancelled_filenames=&cancelled_filenames,
4642
 
    .current_time=(mono_microsecs[]){0},
4643
 
    .mandos_client_exited=(bool[]){false},
4644
 
    .password_is_read=(bool[]){false},
4645
 
  };
4646
 
  run_task_with_stderr_to_dev_null(task, queue);
4647
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4648
 
 
4649
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4650
 
}
4651
 
 
4652
 
static
4653
 
void test_open_and_parse_question_badpid(__attribute__((unused))
4654
 
                                         test_fixture *fixture,
4655
 
                                         __attribute__((unused))
4656
 
                                         gconstpointer user_data){
4657
 
  __attribute__((cleanup(cleanup_close)))
4658
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4659
 
  g_assert_cmpint(epoll_fd, >=, 0);
4660
 
  __attribute__((cleanup(string_set_clear)))
4661
 
    string_set cancelled_filenames = {};
4662
 
  __attribute__((cleanup(cleanup_queue)))
4663
 
    task_queue *queue = create_queue();
4664
 
  g_assert_nonnull(queue);
4665
 
 
4666
 
  __attribute__((cleanup(cleanup_string)))
4667
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4668
 
  g_assert_nonnull(tempfilename);
4669
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4670
 
  g_assert_cmpint(questionfile, >, 0);
4671
 
  FILE *qf = fdopen(questionfile, "w");
4672
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=\n"),
4673
 
                  >, 0);
4674
 
  g_assert_cmpint(fclose(qf), ==, 0);
4675
 
 
4676
 
  char *const filename = strdup(tempfilename);
4677
 
  g_assert_nonnull(filename);
4678
 
  task_context task = {
4679
 
    .func=open_and_parse_question,
4680
 
    .question_filename=filename,
4681
 
    .epoll_fd=epoll_fd,
4682
 
    .password=(buffer[]){{}},
4683
 
    .filename=filename,
4684
 
    .cancelled_filenames=&cancelled_filenames,
4685
 
    .current_time=(mono_microsecs[]){0},
4686
 
    .mandos_client_exited=(bool[]){false},
4687
 
    .password_is_read=(bool[]){false},
4688
 
  };
4689
 
  run_task_with_stderr_to_dev_null(task, queue);
4690
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4691
 
 
4692
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4693
 
}
4694
 
 
4695
 
static void
4696
 
test_open_and_parse_question_noexist_pid(__attribute__((unused))
4697
 
                                         test_fixture *fixture,
4698
 
                                         __attribute__((unused))
4699
 
                                         gconstpointer user_data){
4700
 
  __attribute__((cleanup(cleanup_close)))
4701
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4702
 
  g_assert_cmpint(epoll_fd, >=, 0);
4703
 
  __attribute__((cleanup(string_set_clear)))
4704
 
    string_set cancelled_filenames = {};
4705
 
  buffer password = {};
4706
 
  bool mandos_client_exited = false;
4707
 
  bool password_is_read = false;
4708
 
  __attribute__((cleanup(cleanup_queue)))
4709
 
    task_queue *queue = create_queue();
4710
 
  g_assert_nonnull(queue);
4711
 
  const mono_microsecs current_time = 0;
4712
 
 
4713
 
  /* Find value of sysctl kernel.pid_max */
4714
 
  uintmax_t pid_max = 0;
4715
 
  FILE *sysctl_pid_max = fopen("/proc/sys/kernel/pid_max", "r");
4716
 
  g_assert_nonnull(sysctl_pid_max);
4717
 
  g_assert_cmpint(fscanf(sysctl_pid_max, "%" PRIuMAX, &pid_max),
4718
 
                  ==, 1);
4719
 
  g_assert_cmpint(fclose(sysctl_pid_max), ==, 0);
4720
 
 
4721
 
  pid_t nonexisting_pid = ((pid_t)pid_max)+1;
4722
 
  g_assert_true(nonexisting_pid > 0); /* Overflow check */
4723
 
 
4724
 
  __attribute__((cleanup(cleanup_string)))
4725
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4726
 
  g_assert_nonnull(tempfilename);
4727
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4728
 
  g_assert_cmpint(questionfile, >, 0);
4729
 
  FILE *qf = fdopen(questionfile, "w");
4730
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
4731
 
                          PRIuMAX"\n", (uintmax_t)nonexisting_pid),
4732
 
                  >, 0);
4733
 
  g_assert_cmpint(fclose(qf), ==, 0);
4734
 
 
4735
 
  char *const question_filename = strdup(tempfilename);
4736
 
  g_assert_nonnull(question_filename);
4737
 
  task_context task = {
4738
 
    .func=open_and_parse_question,
4739
 
    .question_filename=question_filename,
4740
 
    .epoll_fd=epoll_fd,
4741
 
    .password=&password,
4742
 
    .filename=question_filename,
4743
 
    .cancelled_filenames=&cancelled_filenames,
4744
 
    .current_time=&current_time,
4745
 
    .mandos_client_exited=&mandos_client_exited,
4746
 
    .password_is_read=&password_is_read,
4747
 
  };
4748
 
  run_task_with_stderr_to_dev_null(task, queue);
4749
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4750
 
 
4751
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4752
 
}
4753
 
 
4754
 
static void
4755
 
test_open_and_parse_question_no_notafter(__attribute__((unused))
4756
 
                                         test_fixture *fixture,
4757
 
                                         __attribute__((unused))
4758
 
                                         gconstpointer user_data){
4759
 
  __attribute__((cleanup(cleanup_close)))
4760
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4761
 
  g_assert_cmpint(epoll_fd, >=, 0);
4762
 
  __attribute__((cleanup(string_set_clear)))
4763
 
    string_set cancelled_filenames = {};
4764
 
  buffer password = {};
4765
 
  bool mandos_client_exited = false;
4766
 
  bool password_is_read = false;
4767
 
  __attribute__((cleanup(cleanup_queue)))
4768
 
    task_queue *queue = create_queue();
4769
 
  g_assert_nonnull(queue);
4770
 
  const mono_microsecs current_time = 0;
4771
 
 
4772
 
  __attribute__((cleanup(cleanup_string)))
4773
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4774
 
  g_assert_nonnull(tempfilename);
4775
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4776
 
  g_assert_cmpint(questionfile, >, 0);
4777
 
  FILE *qf = fdopen(questionfile, "w");
4778
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
4779
 
                          PRIuMAX "\n", (uintmax_t)getpid()), >, 0);
4780
 
  g_assert_cmpint(fclose(qf), ==, 0);
4781
 
 
4782
 
  char *const filename = strdup(tempfilename);
4783
 
  g_assert_nonnull(filename);
4784
 
  task_context task = {
4785
 
    .func=open_and_parse_question,
4786
 
    .question_filename=filename,
4787
 
    .epoll_fd=epoll_fd,
4788
 
    .password=&password,
4789
 
    .filename=filename,
4790
 
    .cancelled_filenames=&cancelled_filenames,
4791
 
    .current_time=&current_time,
4792
 
    .mandos_client_exited=&mandos_client_exited,
4793
 
    .password_is_read=&password_is_read,
4794
 
  };
4795
 
  task.func(task, queue);
4796
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4797
 
 
4798
 
  __attribute__((cleanup(cleanup_string)))
4799
 
    char *socket_filename = strdup("/nonexistent");
4800
 
  g_assert_nonnull(socket_filename);
4801
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4802
 
        .func=connect_question_socket,
4803
 
        .question_filename=tempfilename,
4804
 
        .filename=socket_filename,
4805
 
        .epoll_fd=epoll_fd,
4806
 
        .password=&password,
4807
 
        .current_time=&current_time,
4808
 
        .mandos_client_exited=&mandos_client_exited,
4809
 
        .password_is_read=&password_is_read,
4810
 
      }));
4811
 
 
4812
 
  g_assert_true(queue->next_run != 0);
4813
 
 
4814
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4815
 
}
4816
 
 
4817
 
static void
4818
 
test_open_and_parse_question_bad_notafter(__attribute__((unused))
4819
 
                                          test_fixture *fixture,
4820
 
                                          __attribute__((unused))
4821
 
                                          gconstpointer user_data){
4822
 
  __attribute__((cleanup(cleanup_close)))
4823
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4824
 
  g_assert_cmpint(epoll_fd, >=, 0);
4825
 
  __attribute__((cleanup(string_set_clear)))
4826
 
    string_set cancelled_filenames = {};
4827
 
  buffer password = {};
4828
 
  bool mandos_client_exited = false;
4829
 
  bool password_is_read = false;
4830
 
  __attribute__((cleanup(cleanup_queue)))
4831
 
    task_queue *queue = create_queue();
4832
 
  g_assert_nonnull(queue);
4833
 
  const mono_microsecs current_time = 0;
4834
 
 
4835
 
  __attribute__((cleanup(cleanup_string)))
4836
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4837
 
  g_assert_nonnull(tempfilename);
4838
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4839
 
  g_assert_cmpint(questionfile, >, 0);
4840
 
  FILE *qf = fdopen(questionfile, "w");
4841
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
4842
 
                          PRIuMAX "\nNotAfter=\n",
4843
 
                          (uintmax_t)getpid()), >, 0);
4844
 
  g_assert_cmpint(fclose(qf), ==, 0);
4845
 
 
4846
 
  char *const filename = strdup(tempfilename);
4847
 
  g_assert_nonnull(filename);
4848
 
  task_context task = {
4849
 
    .func=open_and_parse_question,
4850
 
    .question_filename=filename,
4851
 
    .epoll_fd=epoll_fd,
4852
 
    .password=&password,
4853
 
    .filename=filename,
4854
 
    .cancelled_filenames=&cancelled_filenames,
4855
 
    .current_time=&current_time,
4856
 
    .mandos_client_exited=&mandos_client_exited,
4857
 
    .password_is_read=&password_is_read,
4858
 
  };
4859
 
  run_task_with_stderr_to_dev_null(task, queue);
4860
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4861
 
 
4862
 
  __attribute__((cleanup(cleanup_string)))
4863
 
    char *socket_filename = strdup("/nonexistent");
4864
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
4865
 
        .func=connect_question_socket,
4866
 
        .question_filename=tempfilename,
4867
 
        .filename=socket_filename,
4868
 
        .epoll_fd=epoll_fd,
4869
 
        .password=&password,
4870
 
        .current_time=&current_time,
4871
 
        .mandos_client_exited=&mandos_client_exited,
4872
 
        .password_is_read=&password_is_read,
4873
 
      }));
4874
 
  g_assert_true(queue->next_run != 0);
4875
 
 
4876
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4877
 
}
4878
 
 
4879
 
static
4880
 
void assert_open_and_parse_question_with_notafter(const mono_microsecs
4881
 
                                                  current_time,
4882
 
                                                  const mono_microsecs
4883
 
                                                  notafter,
4884
 
                                                  const mono_microsecs
4885
 
                                                  next_queue_run){
4886
 
  __attribute__((cleanup(cleanup_close)))
4887
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
4888
 
  g_assert_cmpint(epoll_fd, >=, 0);
4889
 
  __attribute__((cleanup(string_set_clear)))
4890
 
    string_set cancelled_filenames = {};
4891
 
  buffer password = {};
4892
 
  bool mandos_client_exited = false;
4893
 
  bool password_is_read = false;
4894
 
  __attribute__((cleanup(cleanup_queue)))
4895
 
    task_queue *queue = create_queue();
4896
 
  g_assert_nonnull(queue);
4897
 
  queue->next_run = next_queue_run;
4898
 
 
4899
 
  __attribute__((cleanup(cleanup_string)))
4900
 
    char *tempfilename = strdup("/tmp/mandosXXXXXX");
4901
 
  g_assert_nonnull(tempfilename);
4902
 
  int questionfile = mkostemp(tempfilename, O_CLOEXEC);
4903
 
  g_assert_cmpint(questionfile, >, 0);
4904
 
  FILE *qf = fdopen(questionfile, "w");
4905
 
  g_assert_cmpint(fprintf(qf, "[Ask]\nSocket=/nonexistent\nPID=%"
4906
 
                          PRIuMAX "\nNotAfter=%" PRIuMAX "\n",
4907
 
                          (uintmax_t)getpid(), notafter), >, 0);
4908
 
  g_assert_cmpint(fclose(qf), ==, 0);
4909
 
 
4910
 
  char *const filename = strdup(tempfilename);
4911
 
  g_assert_nonnull(filename);
4912
 
  task_context task = {
4913
 
    .func=open_and_parse_question,
4914
 
    .question_filename=filename,
4915
 
    .epoll_fd=epoll_fd,
4916
 
    .password=&password,
4917
 
    .filename=filename,
4918
 
    .cancelled_filenames=&cancelled_filenames,
4919
 
    .current_time=&current_time,
4920
 
    .mandos_client_exited=&mandos_client_exited,
4921
 
    .password_is_read=&password_is_read,
4922
 
  };
4923
 
  task.func(task, queue);
4924
 
 
4925
 
  if(queue->length >= 1){
4926
 
    __attribute__((cleanup(cleanup_string)))
4927
 
      char *socket_filename = strdup("/nonexistent");
4928
 
    g_assert_nonnull(find_matching_task(queue, (task_context){
4929
 
          .func=connect_question_socket,
4930
 
          .filename=socket_filename,
4931
 
          .epoll_fd=epoll_fd,
4932
 
          .password=&password,
4933
 
          .current_time=&current_time,
4934
 
          .cancelled_filenames=&cancelled_filenames,
4935
 
          .mandos_client_exited=&mandos_client_exited,
4936
 
          .password_is_read=&password_is_read,
4937
 
        }));
4938
 
    g_assert_true(queue->next_run != 0);
4939
 
  }
4940
 
 
4941
 
  if(notafter == 0){
4942
 
    g_assert_cmpuint((unsigned int)queue->length, ==, 1);
4943
 
  } else if(current_time >= notafter) {
4944
 
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
4945
 
  } else {
4946
 
    g_assert_nonnull(find_matching_task(queue, (task_context){
4947
 
          .func=cancel_old_question,
4948
 
          .question_filename=tempfilename,
4949
 
          .filename=tempfilename,
4950
 
          .notafter=notafter,
4951
 
          .cancelled_filenames=&cancelled_filenames,
4952
 
          .current_time=&current_time,
4953
 
        }));
4954
 
  }
4955
 
  g_assert_true(queue->next_run == 1);
4956
 
 
4957
 
  g_assert_cmpint(unlink(tempfilename), ==, 0);
4958
 
}
4959
 
 
4960
 
static void
4961
 
test_open_and_parse_question_notafter_0(__attribute__((unused))
4962
 
                                        test_fixture *fixture,
4963
 
                                        __attribute__((unused))
4964
 
                                        gconstpointer user_data){
4965
 
  /* current_time, notafter, next_queue_run */
4966
 
  assert_open_and_parse_question_with_notafter(0, 0, 0);
4967
 
}
4968
 
 
4969
 
static void
4970
 
test_open_and_parse_question_notafter_1(__attribute__((unused))
4971
 
                                        test_fixture *fixture,
4972
 
                                        __attribute__((unused))
4973
 
                                        gconstpointer user_data){
4974
 
  /* current_time, notafter, next_queue_run */
4975
 
  assert_open_and_parse_question_with_notafter(0, 1, 0);
4976
 
}
4977
 
 
4978
 
static void
4979
 
test_open_and_parse_question_notafter_1_1(__attribute__((unused))
4980
 
                                          test_fixture *fixture,
4981
 
                                          __attribute__((unused))
4982
 
                                          gconstpointer user_data){
4983
 
  /* current_time, notafter, next_queue_run */
4984
 
  assert_open_and_parse_question_with_notafter(0, 1, 1);
4985
 
}
4986
 
 
4987
 
static void
4988
 
test_open_and_parse_question_notafter_1_2(__attribute__((unused))
4989
 
                                          test_fixture *fixture,
4990
 
                                          __attribute__((unused))
4991
 
                                          gconstpointer user_data){
4992
 
  /* current_time, notafter, next_queue_run */
4993
 
  assert_open_and_parse_question_with_notafter(0, 1, 2);
4994
 
}
4995
 
 
4996
 
static void
4997
 
test_open_and_parse_question_equal_notafter(__attribute__((unused))
4998
 
                                            test_fixture *fixture,
4999
 
                                            __attribute__((unused))
5000
 
                                            gconstpointer user_data){
5001
 
  /* current_time, notafter, next_queue_run */
5002
 
  assert_open_and_parse_question_with_notafter(1, 1, 0);
5003
 
}
5004
 
 
5005
 
static void
5006
 
test_open_and_parse_question_late_notafter(__attribute__((unused))
5007
 
                                           test_fixture *fixture,
5008
 
                                           __attribute__((unused))
5009
 
                                           gconstpointer user_data){
5010
 
  /* current_time, notafter, next_queue_run */
5011
 
  assert_open_and_parse_question_with_notafter(2, 1, 0);
5012
 
}
5013
 
 
5014
 
static void assert_cancel_old_question_param(const mono_microsecs
5015
 
                                             next_queue_run,
5016
 
                                             const mono_microsecs
5017
 
                                             notafter,
5018
 
                                             const mono_microsecs
5019
 
                                             current_time,
5020
 
                                             const mono_microsecs
5021
 
                                             next_set_to){
5022
 
  __attribute__((cleanup(string_set_clear)))
5023
 
    string_set cancelled_filenames = {};
5024
 
  __attribute__((cleanup(cleanup_queue)))
5025
 
    task_queue *queue = create_queue();
5026
 
  g_assert_nonnull(queue);
5027
 
  queue->next_run = next_queue_run;
5028
 
 
5029
 
  char *const question_filename = strdup("/nonexistent");
5030
 
  g_assert_nonnull(question_filename);
5031
 
  task_context task = {
5032
 
    .func=cancel_old_question,
5033
 
    .question_filename=question_filename,
5034
 
    .filename=question_filename,
5035
 
    .notafter=notafter,
5036
 
    .cancelled_filenames=&cancelled_filenames,
5037
 
    .current_time=&current_time,
5038
 
  };
5039
 
  task.func(task, queue);
5040
 
 
5041
 
  if(current_time >= notafter){
5042
 
    g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5043
 
    g_assert_true(string_set_contains(cancelled_filenames,
5044
 
                                      "/nonexistent"));
5045
 
  } else {
5046
 
    g_assert_nonnull(find_matching_task(queue, (task_context){
5047
 
          .func=cancel_old_question,
5048
 
          .question_filename=question_filename,
5049
 
          .filename=question_filename,
5050
 
          .notafter=notafter,
5051
 
          .cancelled_filenames=&cancelled_filenames,
5052
 
          .current_time=&current_time,
5053
 
        }));
5054
 
 
5055
 
    g_assert_false(string_set_contains(cancelled_filenames,
5056
 
                                       question_filename));
5057
 
  }
5058
 
  g_assert_cmpuint((unsigned int)queue->next_run, ==,
5059
 
                   (unsigned int)next_set_to);
5060
 
}
5061
 
 
5062
 
static void test_cancel_old_question_0_1_2(__attribute__((unused))
5063
 
                                           test_fixture *fixture,
5064
 
                                           __attribute__((unused))
5065
 
                                           gconstpointer user_data){
5066
 
  /* next_queue_run unset,
5067
 
     cancellation should happen because time has come,
5068
 
     next_queue_run should be unchanged */
5069
 
  /* next_queue_run, notafter, current_time, next_set_to */
5070
 
  assert_cancel_old_question_param(0, 1, 2, 0);
5071
 
}
5072
 
 
5073
 
static void test_cancel_old_question_0_2_1(__attribute__((unused))
5074
 
                                           test_fixture *fixture,
5075
 
                                           __attribute__((unused))
5076
 
                                           gconstpointer user_data){
5077
 
  /* If next_queue_run is 0, meaning unset, and notafter is 2,
5078
 
     and current_time is not yet notafter or greater,
5079
 
     update value of next_queue_run to value of notafter */
5080
 
  /* next_queue_run, notafter, current_time, next_set_to */
5081
 
  assert_cancel_old_question_param(0, 2, 1, 2);
5082
 
}
5083
 
 
5084
 
static void test_cancel_old_question_1_2_3(__attribute__((unused))
5085
 
                                           test_fixture *fixture,
5086
 
                                           __attribute__((unused))
5087
 
                                           gconstpointer user_data){
5088
 
  /* next_queue_run 1,
5089
 
     cancellation should happen because time has come,
5090
 
     next_queue_run should be unchanged */
5091
 
  /* next_queue_run, notafter, current_time, next_set_to */
5092
 
  assert_cancel_old_question_param(1, 2, 3, 1);
5093
 
}
5094
 
 
5095
 
static void test_cancel_old_question_1_3_2(__attribute__((unused))
5096
 
                                           test_fixture *fixture,
5097
 
                                           __attribute__((unused))
5098
 
                                           gconstpointer user_data){
5099
 
  /* If next_queue_run is set,
5100
 
     and current_time is not yet notafter or greater,
5101
 
     and notafter is larger than next_queue_run
5102
 
     next_queue_run should be unchanged */
5103
 
  /* next_queue_run, notafter, current_time, next_set_to */
5104
 
  assert_cancel_old_question_param(1, 3, 2, 1);
5105
 
}
5106
 
 
5107
 
static void test_cancel_old_question_2_1_3(__attribute__((unused))
5108
 
                                           test_fixture *fixture,
5109
 
                                           __attribute__((unused))
5110
 
                                           gconstpointer user_data){
5111
 
  /* next_queue_run 2,
5112
 
     cancellation should happen because time has come,
5113
 
     next_queue_run should be unchanged */
5114
 
  /* next_queue_run, notafter, current_time, next_set_to */
5115
 
  assert_cancel_old_question_param(2, 1, 3, 2);
5116
 
}
5117
 
 
5118
 
static void test_cancel_old_question_2_3_1(__attribute__((unused))
5119
 
                                           test_fixture *fixture,
5120
 
                                           __attribute__((unused))
5121
 
                                           gconstpointer user_data){
5122
 
  /* If next_queue_run is set,
5123
 
     and current_time is not yet notafter or greater,
5124
 
     and notafter is larger than next_queue_run
5125
 
     next_queue_run should be unchanged */
5126
 
  /* next_queue_run, notafter, current_time, next_set_to */
5127
 
  assert_cancel_old_question_param(2, 3, 1, 2);
5128
 
}
5129
 
 
5130
 
static void test_cancel_old_question_3_1_2(__attribute__((unused))
5131
 
                                           test_fixture *fixture,
5132
 
                                           __attribute__((unused))
5133
 
                                           gconstpointer user_data){
5134
 
  /* next_queue_run 3,
5135
 
     cancellation should happen because time has come,
5136
 
     next_queue_run should be unchanged */
5137
 
  /* next_queue_run, notafter, current_time, next_set_to */
5138
 
  assert_cancel_old_question_param(3, 1, 2, 3);
5139
 
}
5140
 
 
5141
 
static void test_cancel_old_question_3_2_1(__attribute__((unused))
5142
 
                                           test_fixture *fixture,
5143
 
                                           __attribute__((unused))
5144
 
                                           gconstpointer user_data){
5145
 
  /* If next_queue_run is set,
5146
 
     and current_time is not yet notafter or greater,
5147
 
     and notafter is smaller than next_queue_run
5148
 
     update value of next_queue_run to value of notafter */
5149
 
  /* next_queue_run, notafter, current_time, next_set_to */
5150
 
  assert_cancel_old_question_param(3, 2, 1, 2);
5151
 
}
5152
 
 
5153
 
static void
5154
 
test_connect_question_socket_name_too_long(__attribute__((unused))
5155
 
                                           test_fixture *fixture,
5156
 
                                           __attribute__((unused))
5157
 
                                           gconstpointer user_data){
5158
 
  __attribute__((cleanup(cleanup_close)))
5159
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5160
 
  g_assert_cmpint(epoll_fd, >=, 0);
5161
 
  const char question_filename[] = "/nonexistent/question";
5162
 
  __attribute__((cleanup(string_set_clear)))
5163
 
    string_set cancelled_filenames = {};
5164
 
  __attribute__((cleanup(cleanup_queue)))
5165
 
    task_queue *queue = create_queue();
5166
 
  g_assert_nonnull(queue);
5167
 
  __attribute__((cleanup(cleanup_string)))
5168
 
    char *tempdir = make_temporary_directory();
5169
 
  g_assert_nonnull(tempdir);
5170
 
  struct sockaddr_un unix_socket = { .sun_family=AF_LOCAL };
5171
 
  char socket_name[sizeof(unix_socket.sun_path)];
5172
 
  memset(socket_name, 'x', sizeof(socket_name));
5173
 
  socket_name[sizeof(socket_name)-1] = '\0';
5174
 
  char *filename = NULL;
5175
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5176
 
                  >, 0);
5177
 
  g_assert_nonnull(filename);
5178
 
 
5179
 
  task_context task = {
5180
 
    .func=connect_question_socket,
5181
 
    .question_filename=strdup(question_filename),
5182
 
    .epoll_fd=epoll_fd,
5183
 
    .password=(buffer[]){{}},
5184
 
    .filename=filename,
5185
 
    .cancelled_filenames=&cancelled_filenames,
5186
 
    .mandos_client_exited=(bool[]){false},
5187
 
    .password_is_read=(bool[]){false},
5188
 
    .current_time=(mono_microsecs[]){0},
5189
 
  };
5190
 
  g_assert_nonnull(task.question_filename);
5191
 
  run_task_with_stderr_to_dev_null(task, queue);
5192
 
 
5193
 
  g_assert_true(string_set_contains(cancelled_filenames,
5194
 
                                    question_filename));
5195
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5196
 
  g_assert_true(queue->next_run == 0);
5197
 
 
5198
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
5199
 
}
5200
 
 
5201
 
static
5202
 
void test_connect_question_socket_connect_fail(__attribute__((unused))
5203
 
                                               test_fixture *fixture,
5204
 
                                               __attribute__((unused))
5205
 
                                               gconstpointer
5206
 
                                               user_data){
5207
 
  __attribute__((cleanup(cleanup_close)))
5208
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5209
 
  g_assert_cmpint(epoll_fd, >=, 0);
5210
 
  const char question_filename[] = "/nonexistent/question";
5211
 
  __attribute__((cleanup(string_set_clear)))
5212
 
    string_set cancelled_filenames = {};
5213
 
  const mono_microsecs current_time = 3;
5214
 
  __attribute__((cleanup(cleanup_queue)))
5215
 
    task_queue *queue = create_queue();
5216
 
  g_assert_nonnull(queue);
5217
 
  __attribute__((cleanup(cleanup_string)))
5218
 
    char *tempdir = make_temporary_directory();
5219
 
  g_assert_nonnull(tempdir);
5220
 
  char socket_name[] = "nonexistent";
5221
 
  char *filename = NULL;
5222
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5223
 
                  >, 0);
5224
 
  g_assert_nonnull(filename);
5225
 
 
5226
 
  task_context task = {
5227
 
    .func=connect_question_socket,
5228
 
    .question_filename=strdup(question_filename),
5229
 
    .epoll_fd=epoll_fd,
5230
 
    .password=(buffer[]){{}},
5231
 
    .filename=filename,
5232
 
    .cancelled_filenames=&cancelled_filenames,
5233
 
    .mandos_client_exited=(bool[]){false},
5234
 
    .password_is_read=(bool[]){false},
5235
 
    .current_time=&current_time,
5236
 
  };
5237
 
  g_assert_nonnull(task.question_filename);
5238
 
  run_task_with_stderr_to_dev_null(task, queue);
5239
 
 
5240
 
  g_assert_nonnull(find_matching_task(queue, task));
5241
 
 
5242
 
  g_assert_false(string_set_contains(cancelled_filenames,
5243
 
                                     question_filename));
5244
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5245
 
  g_assert_true(queue->next_run == 1000000 + current_time);
5246
 
 
5247
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
5248
 
}
5249
 
 
5250
 
static
5251
 
void test_connect_question_socket_bad_epoll(__attribute__((unused))
5252
 
                                            test_fixture *fixture,
5253
 
                                            __attribute__((unused))
5254
 
                                            gconstpointer user_data){
5255
 
  __attribute__((cleanup(cleanup_close)))
5256
 
    const int epoll_fd = open("/dev/null", O_WRONLY | O_CLOEXEC);
5257
 
  __attribute__((cleanup(cleanup_string)))
5258
 
    char *const question_filename = strdup("/nonexistent/question");
5259
 
  g_assert_nonnull(question_filename);
5260
 
  __attribute__((cleanup(string_set_clear)))
5261
 
    string_set cancelled_filenames = {};
5262
 
  const mono_microsecs current_time = 5;
5263
 
  __attribute__((cleanup(cleanup_queue)))
5264
 
    task_queue *queue = create_queue();
5265
 
  g_assert_nonnull(queue);
5266
 
  __attribute__((cleanup(cleanup_string)))
5267
 
    char *tempdir = make_temporary_directory();
5268
 
  g_assert_nonnull(tempdir);
5269
 
  __attribute__((cleanup(cleanup_close)))
5270
 
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
5271
 
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
5272
 
  g_assert_cmpint(sock_fd, >=, 0);
5273
 
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
5274
 
  const char socket_name[] = "socket_name";
5275
 
  __attribute__((cleanup(cleanup_string)))
5276
 
    char *filename = NULL;
5277
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5278
 
                  >, 0);
5279
 
  g_assert_nonnull(filename);
5280
 
  g_assert_cmpint((int)strlen(filename), <,
5281
 
                  (int)sizeof(sock_name.sun_path));
5282
 
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
5283
 
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
5284
 
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
5285
 
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
5286
 
  task_context task = {
5287
 
    .func=connect_question_socket,
5288
 
    .question_filename=strdup(question_filename),
5289
 
    .epoll_fd=epoll_fd,
5290
 
    .password=(buffer[]){{}},
5291
 
    .filename=strdup(filename),
5292
 
    .cancelled_filenames=&cancelled_filenames,
5293
 
    .mandos_client_exited=(bool[]){false},
5294
 
    .password_is_read=(bool[]){false},
5295
 
    .current_time=&current_time,
5296
 
  };
5297
 
  g_assert_nonnull(task.question_filename);
5298
 
  run_task_with_stderr_to_dev_null(task, queue);
5299
 
 
5300
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5301
 
  const task_context *const added_task
5302
 
    = find_matching_task(queue, task);
5303
 
  g_assert_nonnull(added_task);
5304
 
  g_assert_true(queue->next_run == 1000000 + current_time);
5305
 
 
5306
 
  g_assert_cmpint(unlink(filename), ==, 0);
5307
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
5308
 
}
5309
 
 
5310
 
static
5311
 
void test_connect_question_socket_usable(__attribute__((unused))
5312
 
                                         test_fixture *fixture,
5313
 
                                         __attribute__((unused))
5314
 
                                         gconstpointer user_data){
5315
 
  __attribute__((cleanup(cleanup_close)))
5316
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5317
 
  g_assert_cmpint(epoll_fd, >=, 0);
5318
 
  __attribute__((cleanup(cleanup_string)))
5319
 
    char *const question_filename = strdup("/nonexistent/question");
5320
 
  g_assert_nonnull(question_filename);
5321
 
  __attribute__((cleanup(string_set_clear)))
5322
 
    string_set cancelled_filenames = {};
5323
 
  buffer password = {};
5324
 
  bool mandos_client_exited = false;
5325
 
  bool password_is_read = false;
5326
 
  const mono_microsecs current_time = 0;
5327
 
  __attribute__((cleanup(cleanup_queue)))
5328
 
    task_queue *queue = create_queue();
5329
 
  g_assert_nonnull(queue);
5330
 
  __attribute__((cleanup(cleanup_string)))
5331
 
    char *tempdir = make_temporary_directory();
5332
 
  g_assert_nonnull(tempdir);
5333
 
  __attribute__((cleanup(cleanup_close)))
5334
 
    const int sock_fd = socket(PF_LOCAL, SOCK_DGRAM
5335
 
                               | SOCK_NONBLOCK | SOCK_CLOEXEC, 0);
5336
 
  g_assert_cmpint(sock_fd, >=, 0);
5337
 
  struct sockaddr_un sock_name = { .sun_family=AF_LOCAL };
5338
 
  const char socket_name[] = "socket_name";
5339
 
  __attribute__((cleanup(cleanup_string)))
5340
 
    char *filename = NULL;
5341
 
  g_assert_cmpint(asprintf(&filename, "%s/%s", tempdir, socket_name),
5342
 
                  >, 0);
5343
 
  g_assert_nonnull(filename);
5344
 
  g_assert_cmpint((int)strlen(filename), <,
5345
 
                  (int)sizeof(sock_name.sun_path));
5346
 
  strncpy(sock_name.sun_path, filename, sizeof(sock_name.sun_path));
5347
 
  sock_name.sun_path[sizeof(sock_name.sun_path)-1] = '\0';
5348
 
  g_assert_cmpint((int)bind(sock_fd, (struct sockaddr *)&sock_name,
5349
 
                            (socklen_t)SUN_LEN(&sock_name)), >=, 0);
5350
 
  task_context task = {
5351
 
    .func=connect_question_socket,
5352
 
    .question_filename=strdup(question_filename),
5353
 
    .epoll_fd=epoll_fd,
5354
 
    .password=&password,
5355
 
    .filename=strdup(filename),
5356
 
    .cancelled_filenames=&cancelled_filenames,
5357
 
    .mandos_client_exited=&mandos_client_exited,
5358
 
    .password_is_read=&password_is_read,
5359
 
    .current_time=&current_time,
5360
 
  };
5361
 
  g_assert_nonnull(task.question_filename);
5362
 
  task.func(task, queue);
5363
 
 
5364
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5365
 
  const task_context *const added_task
5366
 
    = find_matching_task(queue, (task_context){
5367
 
        .func=send_password_to_socket,
5368
 
        .question_filename=question_filename,
5369
 
        .filename=filename,
5370
 
        .epoll_fd=epoll_fd,
5371
 
        .password=&password,
5372
 
        .cancelled_filenames=&cancelled_filenames,
5373
 
        .mandos_client_exited=&mandos_client_exited,
5374
 
        .password_is_read=&password_is_read,
5375
 
        .current_time=&current_time,
5376
 
      });
5377
 
  g_assert_nonnull(added_task);
5378
 
  g_assert_cmpint(added_task->fd, >, 0);
5379
 
 
5380
 
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5381
 
                                   EPOLLOUT));
5382
 
 
5383
 
  const int fd = added_task->fd;
5384
 
  g_assert_cmpint(fd, >, 0);
5385
 
  g_assert_true(fd_has_cloexec_and_nonblock(fd));
5386
 
 
5387
 
  /* write to fd */
5388
 
  char write_data[PIPE_BUF];
5389
 
  {
5390
 
    /* Construct test password buffer */
5391
 
    /* Start with + since that is what the real procotol uses */
5392
 
    write_data[0] = '+';
5393
 
    /* Set a special character at string end just to mark the end */
5394
 
    write_data[sizeof(write_data)-2] = 'y';
5395
 
    /* Set NUL at buffer end, as suggested by the protocol */
5396
 
    write_data[sizeof(write_data)-1] = '\0';
5397
 
    /* Fill rest of password with 'x' */
5398
 
    memset(write_data+1, 'x', sizeof(write_data)-3);
5399
 
    g_assert_cmpint((int)send(fd, write_data, sizeof(write_data),
5400
 
                              MSG_NOSIGNAL), ==, sizeof(write_data));
5401
 
  }
5402
 
 
5403
 
  /* read from sock_fd */
5404
 
  char read_data[sizeof(write_data)];
5405
 
  g_assert_cmpint((int)read(sock_fd, read_data, sizeof(read_data)),
5406
 
                  ==, sizeof(read_data));
5407
 
 
5408
 
  g_assert_true(memcmp(write_data, read_data, sizeof(write_data))
5409
 
                == 0);
5410
 
 
5411
 
  /* writing to sock_fd should fail */
5412
 
  g_assert_cmpint(send(sock_fd, write_data, sizeof(write_data),
5413
 
                       MSG_NOSIGNAL), <, 0);
5414
 
 
5415
 
  /* reading from fd should fail */
5416
 
  g_assert_cmpint((int)recv(fd, read_data, sizeof(read_data),
5417
 
                            MSG_NOSIGNAL), <, 0);
5418
 
 
5419
 
  g_assert_cmpint(unlink(filename), ==, 0);
5420
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
5421
 
}
5422
 
 
5423
 
static void
5424
 
test_send_password_to_socket_client_not_exited(__attribute__((unused))
5425
 
                                               test_fixture *fixture,
5426
 
                                               __attribute__((unused))
5427
 
                                               gconstpointer
5428
 
                                               user_data){
5429
 
  __attribute__((cleanup(cleanup_close)))
5430
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5431
 
  g_assert_cmpint(epoll_fd, >=, 0);
5432
 
  __attribute__((cleanup(cleanup_string)))
5433
 
    char *const question_filename = strdup("/nonexistent/question");
5434
 
  g_assert_nonnull(question_filename);
5435
 
  __attribute__((cleanup(cleanup_string)))
5436
 
    char *const filename = strdup("/nonexistent/socket");
5437
 
  g_assert_nonnull(filename);
5438
 
  __attribute__((cleanup(string_set_clear)))
5439
 
    string_set cancelled_filenames = {};
5440
 
  buffer password = {};
5441
 
  bool password_is_read = true;
5442
 
  __attribute__((cleanup(cleanup_queue)))
5443
 
    task_queue *queue = create_queue();
5444
 
  g_assert_nonnull(queue);
5445
 
  int socketfds[2];
5446
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5447
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5448
 
                             socketfds), ==, 0);
5449
 
  __attribute__((cleanup(cleanup_close)))
5450
 
    const int read_socket = socketfds[0];
5451
 
  const int write_socket = socketfds[1];
5452
 
  task_context task = {
5453
 
    .func=send_password_to_socket,
5454
 
    .question_filename=strdup(question_filename),
5455
 
    .filename=strdup(filename),
5456
 
    .epoll_fd=epoll_fd,
5457
 
    .fd=write_socket,
5458
 
    .password=&password,
5459
 
    .cancelled_filenames=&cancelled_filenames,
5460
 
    .mandos_client_exited=(bool[]){false},
5461
 
    .password_is_read=&password_is_read,
5462
 
    .current_time=(mono_microsecs[]){0},
5463
 
  };
5464
 
  g_assert_nonnull(task.question_filename);
5465
 
 
5466
 
  task.func(task, queue);
5467
 
 
5468
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5469
 
 
5470
 
  const task_context *const added_task
5471
 
    = find_matching_task(queue, task);
5472
 
  g_assert_nonnull(added_task);
5473
 
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
5474
 
  g_assert_true(password_is_read);
5475
 
 
5476
 
  g_assert_cmpint(added_task->fd, >, 0);
5477
 
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5478
 
                                   EPOLLOUT));
5479
 
}
5480
 
 
5481
 
static void
5482
 
test_send_password_to_socket_password_not_read(__attribute__((unused))
5483
 
                                               test_fixture *fixture,
5484
 
                                               __attribute__((unused))
5485
 
                                               gconstpointer
5486
 
                                               user_data){
5487
 
  __attribute__((cleanup(cleanup_close)))
5488
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5489
 
  g_assert_cmpint(epoll_fd, >=, 0);
5490
 
  __attribute__((cleanup(cleanup_string)))
5491
 
    char *const question_filename = strdup("/nonexistent/question");
5492
 
  g_assert_nonnull(question_filename);
5493
 
  __attribute__((cleanup(cleanup_string)))
5494
 
    char *const filename = strdup("/nonexistent/socket");
5495
 
  __attribute__((cleanup(string_set_clear)))
5496
 
    string_set cancelled_filenames = {};
5497
 
  buffer password = {};
5498
 
  __attribute__((cleanup(cleanup_queue)))
5499
 
    task_queue *queue = create_queue();
5500
 
  g_assert_nonnull(queue);
5501
 
  int socketfds[2];
5502
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5503
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5504
 
                             socketfds), ==, 0);
5505
 
  __attribute__((cleanup(cleanup_close)))
5506
 
    const int read_socket = socketfds[0];
5507
 
  const int write_socket = socketfds[1];
5508
 
  task_context task = {
5509
 
    .func=send_password_to_socket,
5510
 
    .question_filename=strdup(question_filename),
5511
 
    .filename=strdup(filename),
5512
 
    .epoll_fd=epoll_fd,
5513
 
    .fd=write_socket,
5514
 
    .password=&password,
5515
 
    .cancelled_filenames=&cancelled_filenames,
5516
 
    .mandos_client_exited=(bool[]){false},
5517
 
    .password_is_read=(bool[]){false},
5518
 
    .current_time=(mono_microsecs[]){0},
5519
 
  };
5520
 
  g_assert_nonnull(task.question_filename);
5521
 
 
5522
 
  task.func(task, queue);
5523
 
 
5524
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5525
 
 
5526
 
  const task_context *const added_task = find_matching_task(queue,
5527
 
                                                            task);
5528
 
  g_assert_nonnull(added_task);
5529
 
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
5530
 
  g_assert_true(queue->next_run == 0);
5531
 
 
5532
 
  g_assert_cmpint(added_task->fd, >, 0);
5533
 
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5534
 
                                   EPOLLOUT));
5535
 
}
5536
 
 
5537
 
static
5538
 
void test_send_password_to_socket_EMSGSIZE(__attribute__((unused))
5539
 
                                           test_fixture *fixture,
5540
 
                                           __attribute__((unused))
5541
 
                                           gconstpointer user_data){
5542
 
  __attribute__((cleanup(cleanup_close)))
5543
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5544
 
  g_assert_cmpint(epoll_fd, >=, 0);
5545
 
  const char question_filename[] = "/nonexistent/question";
5546
 
  char *const filename = strdup("/nonexistent/socket");
5547
 
  __attribute__((cleanup(string_set_clear)))
5548
 
    string_set cancelled_filenames = {};
5549
 
  const size_t oversized = 1024*1024; /* Limit seems to be 212960 */
5550
 
  __attribute__((cleanup(cleanup_buffer)))
5551
 
    buffer password = {
5552
 
    .data=malloc(oversized),
5553
 
    .length=oversized,
5554
 
    .allocated=oversized,
5555
 
  };
5556
 
  g_assert_nonnull(password.data);
5557
 
  if(mlock(password.data, password.allocated) != 0){
5558
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
5559
 
  }
5560
 
  /* Construct test password buffer */
5561
 
  /* Start with + since that is what the real procotol uses */
5562
 
  password.data[0] = '+';
5563
 
  /* Set a special character at string end just to mark the end */
5564
 
  password.data[oversized-3] = 'y';
5565
 
  /* Set NUL at buffer end, as suggested by the protocol */
5566
 
  password.data[oversized-2] = '\0';
5567
 
  /* Fill rest of password with 'x' */
5568
 
  memset(password.data+1, 'x', oversized-3);
5569
 
 
5570
 
  __attribute__((cleanup(cleanup_queue)))
5571
 
    task_queue *queue = create_queue();
5572
 
  g_assert_nonnull(queue);
5573
 
  int socketfds[2];
5574
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5575
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5576
 
                             socketfds), ==, 0);
5577
 
  __attribute__((cleanup(cleanup_close)))
5578
 
    const int read_socket = socketfds[0];
5579
 
  __attribute__((cleanup(cleanup_close)))
5580
 
    const int write_socket = socketfds[1];
5581
 
  task_context task = {
5582
 
    .func=send_password_to_socket,
5583
 
    .question_filename=strdup(question_filename),
5584
 
    .filename=filename,
5585
 
    .epoll_fd=epoll_fd,
5586
 
    .fd=write_socket,
5587
 
    .password=&password,
5588
 
    .cancelled_filenames=&cancelled_filenames,
5589
 
    .mandos_client_exited=(bool[]){true},
5590
 
    .password_is_read=(bool[]){true},
5591
 
    .current_time=(mono_microsecs[]){0},
5592
 
  };
5593
 
  g_assert_nonnull(task.question_filename);
5594
 
 
5595
 
  run_task_with_stderr_to_dev_null(task, queue);
5596
 
 
5597
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5598
 
  g_assert_true(string_set_contains(cancelled_filenames,
5599
 
                                    question_filename));
5600
 
}
5601
 
 
5602
 
static void test_send_password_to_socket_retry(__attribute__((unused))
5603
 
                                               test_fixture *fixture,
5604
 
                                               __attribute__((unused))
5605
 
                                               gconstpointer
5606
 
                                               user_data){
5607
 
  __attribute__((cleanup(cleanup_close)))
5608
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5609
 
  g_assert_cmpint(epoll_fd, >=, 0);
5610
 
  __attribute__((cleanup(cleanup_string)))
5611
 
    char *const question_filename = strdup("/nonexistent/question");
5612
 
  g_assert_nonnull(question_filename);
5613
 
  __attribute__((cleanup(cleanup_string)))
5614
 
    char *const filename = strdup("/nonexistent/socket");
5615
 
  g_assert_nonnull(filename);
5616
 
  __attribute__((cleanup(string_set_clear)))
5617
 
    string_set cancelled_filenames = {};
5618
 
  __attribute__((cleanup(cleanup_buffer)))
5619
 
    buffer password = {};
5620
 
 
5621
 
  __attribute__((cleanup(cleanup_queue)))
5622
 
    task_queue *queue = create_queue();
5623
 
  g_assert_nonnull(queue);
5624
 
  int socketfds[2];
5625
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5626
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5627
 
                             socketfds), ==, 0);
5628
 
  __attribute__((cleanup(cleanup_close)))
5629
 
    const int read_socket = socketfds[0];
5630
 
  const int write_socket = socketfds[1];
5631
 
  /* Close the server side socket to force ECONNRESET on client */
5632
 
  g_assert_cmpint(close(read_socket), ==, 0);
5633
 
  task_context task = {
5634
 
    .func=send_password_to_socket,
5635
 
    .question_filename=strdup(question_filename),
5636
 
    .filename=strdup(filename),
5637
 
    .epoll_fd=epoll_fd,
5638
 
    .fd=write_socket,
5639
 
    .password=&password,
5640
 
    .cancelled_filenames=&cancelled_filenames,
5641
 
    .mandos_client_exited=(bool[]){true},
5642
 
    .password_is_read=(bool[]){true},
5643
 
    .current_time=(mono_microsecs[]){0},
5644
 
  };
5645
 
  g_assert_nonnull(task.question_filename);
5646
 
 
5647
 
  task.func(task, queue);
5648
 
 
5649
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5650
 
 
5651
 
  const task_context *const added_task = find_matching_task(queue,
5652
 
                                                            task);
5653
 
  g_assert_nonnull(added_task);
5654
 
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
5655
 
 
5656
 
  g_assert_true(epoll_set_contains(epoll_fd, added_task->fd,
5657
 
                                   EPOLLOUT));
5658
 
}
5659
 
 
5660
 
static
5661
 
void test_send_password_to_socket_bad_epoll(__attribute__((unused))
5662
 
                                            test_fixture *fixture,
5663
 
                                            __attribute__((unused))
5664
 
                                            gconstpointer user_data){
5665
 
  __attribute__((cleanup(cleanup_close)))
5666
 
    const int epoll_fd = open("/dev/null", O_WRONLY | O_CLOEXEC);
5667
 
  __attribute__((cleanup(cleanup_string)))
5668
 
    char *const question_filename = strdup("/nonexistent/question");
5669
 
  g_assert_nonnull(question_filename);
5670
 
  __attribute__((cleanup(cleanup_string)))
5671
 
    char *const filename = strdup("/nonexistent/socket");
5672
 
  g_assert_nonnull(filename);
5673
 
  __attribute__((cleanup(string_set_clear)))
5674
 
    string_set cancelled_filenames = {};
5675
 
  __attribute__((cleanup(cleanup_buffer)))
5676
 
    buffer password = {};
5677
 
 
5678
 
  const mono_microsecs current_time = 11;
5679
 
  __attribute__((cleanup(cleanup_queue)))
5680
 
    task_queue *queue = create_queue();
5681
 
  g_assert_nonnull(queue);
5682
 
  int socketfds[2];
5683
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5684
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5685
 
                             socketfds), ==, 0);
5686
 
  __attribute__((cleanup(cleanup_close)))
5687
 
    const int read_socket = socketfds[0];
5688
 
  const int write_socket = socketfds[1];
5689
 
  /* Close the server side socket to force ECONNRESET on client */
5690
 
  g_assert_cmpint(close(read_socket), ==, 0);
5691
 
  task_context task = {
5692
 
    .func=send_password_to_socket,
5693
 
    .question_filename=strdup(question_filename),
5694
 
    .filename=strdup(filename),
5695
 
    .epoll_fd=epoll_fd,
5696
 
    .fd=write_socket,
5697
 
    .password=&password,
5698
 
    .cancelled_filenames=&cancelled_filenames,
5699
 
    .mandos_client_exited=(bool[]){true},
5700
 
    .password_is_read=(bool[]){true},
5701
 
    .current_time=&current_time,
5702
 
  };
5703
 
  g_assert_nonnull(task.question_filename);
5704
 
 
5705
 
  run_task_with_stderr_to_dev_null(task, queue);
5706
 
 
5707
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
5708
 
 
5709
 
  const task_context *const added_task = find_matching_task(queue,
5710
 
                                                            task);
5711
 
  g_assert_nonnull(added_task);
5712
 
  g_assert_true(queue->next_run == current_time + 1000000);
5713
 
  g_assert_cmpuint((unsigned int)password.length, ==, 0);
5714
 
}
5715
 
 
5716
 
static void assert_send_password_to_socket_password(buffer password){
5717
 
  __attribute__((cleanup(cleanup_close)))
5718
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5719
 
  g_assert_cmpint(epoll_fd, >=, 0);
5720
 
  char *const question_filename = strdup("/nonexistent/question");
5721
 
  g_assert_nonnull(question_filename);
5722
 
  char *const filename = strdup("/nonexistent/socket");
5723
 
  g_assert_nonnull(filename);
5724
 
  __attribute__((cleanup(string_set_clear)))
5725
 
    string_set cancelled_filenames = {};
5726
 
 
5727
 
  __attribute__((cleanup(cleanup_queue)))
5728
 
    task_queue *queue = create_queue();
5729
 
  g_assert_nonnull(queue);
5730
 
  int socketfds[2];
5731
 
  g_assert_cmpint(socketpair(PF_LOCAL, SOCK_DGRAM
5732
 
                             | SOCK_NONBLOCK | SOCK_CLOEXEC, 0,
5733
 
                             socketfds), ==, 0);
5734
 
  __attribute__((cleanup(cleanup_close)))
5735
 
    const int read_socket = socketfds[0];
5736
 
  const int write_socket = socketfds[1];
5737
 
  task_context task = {
5738
 
    .func=send_password_to_socket,
5739
 
    .question_filename=question_filename,
5740
 
    .filename=filename,
5741
 
    .epoll_fd=epoll_fd,
5742
 
    .fd=write_socket,
5743
 
    .password=&password,
5744
 
    .cancelled_filenames=&cancelled_filenames,
5745
 
    .mandos_client_exited=(bool[]){true},
5746
 
    .password_is_read=(bool[]){true},
5747
 
    .current_time=(mono_microsecs[]){0},
5748
 
  };
5749
 
 
5750
 
  char *expected_written_data = malloc(password.length + 2);
5751
 
  g_assert_nonnull(expected_written_data);
5752
 
  expected_written_data[0] = '+';
5753
 
  expected_written_data[password.length + 1] = '\0';
5754
 
  if(password.length > 0){
5755
 
    g_assert_nonnull(password.data);
5756
 
    memcpy(expected_written_data + 1, password.data, password.length);
5757
 
  }
5758
 
 
5759
 
  task.func(task, queue);
5760
 
 
5761
 
  char buf[PIPE_BUF];
5762
 
  g_assert_cmpint((int)read(read_socket, buf, PIPE_BUF), ==,
5763
 
                  (int)(password.length + 2));
5764
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5765
 
 
5766
 
  g_assert_true(memcmp(expected_written_data, buf,
5767
 
                       password.length + 2) == 0);
5768
 
 
5769
 
  g_assert_true(epoll_set_does_not_contain(epoll_fd, write_socket));
5770
 
 
5771
 
  free(expected_written_data);
5772
 
}
5773
 
 
5774
 
static void
5775
 
test_send_password_to_socket_null_password(__attribute__((unused))
5776
 
                                           test_fixture *fixture,
5777
 
                                           __attribute__((unused))
5778
 
                                           gconstpointer user_data){
5779
 
  __attribute__((cleanup(cleanup_buffer)))
5780
 
    buffer password = {};
5781
 
  assert_send_password_to_socket_password(password);
5782
 
}
5783
 
 
5784
 
static void
5785
 
test_send_password_to_socket_empty_password(__attribute__((unused))
5786
 
                                            test_fixture *fixture,
5787
 
                                            __attribute__((unused))
5788
 
                                            gconstpointer user_data){
5789
 
  __attribute__((cleanup(cleanup_buffer)))
5790
 
    buffer password = {
5791
 
    .data=malloc(1),           /* because malloc(0) may return NULL */
5792
 
    .length=0,
5793
 
    .allocated=0,               /* deliberate lie */
5794
 
  };
5795
 
  g_assert_nonnull(password.data);
5796
 
  assert_send_password_to_socket_password(password);
5797
 
}
5798
 
 
5799
 
static void
5800
 
test_send_password_to_socket_empty_str_pass(__attribute__((unused))
5801
 
                                            test_fixture *fixture,
5802
 
                                            __attribute__((unused))
5803
 
                                            gconstpointer user_data){
5804
 
  __attribute__((cleanup(cleanup_buffer)))
5805
 
    buffer password = {
5806
 
    .data=strdup(""),
5807
 
    .length=0,
5808
 
    .allocated=1,
5809
 
  };
5810
 
  if(mlock(password.data, password.allocated) != 0){
5811
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
5812
 
  }
5813
 
  assert_send_password_to_socket_password(password);
5814
 
}
5815
 
 
5816
 
static void
5817
 
test_send_password_to_socket_text_password(__attribute__((unused))
5818
 
                                           test_fixture *fixture,
5819
 
                                           __attribute__((unused))
5820
 
                                           gconstpointer user_data){
5821
 
  const char dummy_test_password[] = "dummy test password";
5822
 
  __attribute__((cleanup(cleanup_buffer)))
5823
 
    buffer password = {
5824
 
    .data = strdup(dummy_test_password),
5825
 
    .length = strlen(dummy_test_password),
5826
 
    .allocated = sizeof(dummy_test_password),
5827
 
  };
5828
 
  if(mlock(password.data, password.allocated) != 0){
5829
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
5830
 
  }
5831
 
  assert_send_password_to_socket_password(password);
5832
 
}
5833
 
 
5834
 
static void
5835
 
test_send_password_to_socket_binary_password(__attribute__((unused))
5836
 
                                             test_fixture *fixture,
5837
 
                                             __attribute__((unused))
5838
 
                                             gconstpointer user_data){
5839
 
  __attribute__((cleanup(cleanup_buffer)))
5840
 
    buffer password = {
5841
 
    .data=malloc(255),
5842
 
    .length=255,
5843
 
    .allocated=255,
5844
 
  };
5845
 
  g_assert_nonnull(password.data);
5846
 
  if(mlock(password.data, password.allocated) != 0){
5847
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
5848
 
  }
5849
 
  char c = 1;                   /* Start at 1, avoiding NUL */
5850
 
  for(int i=0; i < 255; i++){
5851
 
    password.data[i] = c++;
5852
 
  }
5853
 
  assert_send_password_to_socket_password(password);
5854
 
}
5855
 
 
5856
 
static void
5857
 
test_send_password_to_socket_nuls_in_password(__attribute__((unused))
5858
 
                                              test_fixture *fixture,
5859
 
                                              __attribute__((unused))
5860
 
                                              gconstpointer
5861
 
                                              user_data){
5862
 
  char test_password[] = {'\0', 'a', '\0', 'b', '\0', 'c', '\0'};
5863
 
  __attribute__((cleanup(cleanup_buffer)))
5864
 
    buffer password = {
5865
 
    .data=malloc(sizeof(test_password)),
5866
 
    .length=sizeof(test_password),
5867
 
    .allocated=sizeof(test_password),
5868
 
  };
5869
 
  g_assert_nonnull(password.data);
5870
 
  if(mlock(password.data, password.allocated) !=0){
5871
 
    g_assert_true(errno == EPERM or errno == ENOMEM);
5872
 
  }
5873
 
  memcpy(password.data, test_password, password.allocated);
5874
 
  assert_send_password_to_socket_password(password);
5875
 
}
5876
 
 
5877
 
static bool assert_add_existing_questions_to_devnull(task_queue
5878
 
                                                     *const,
5879
 
                                                     const int,
5880
 
                                                     buffer *const,
5881
 
                                                     string_set *,
5882
 
                                                     const
5883
 
                                                     mono_microsecs
5884
 
                                                     *const,
5885
 
                                                     bool *const,
5886
 
                                                     bool *const,
5887
 
                                                     const char
5888
 
                                                     *const);
5889
 
 
5890
 
static void test_add_existing_questions_ENOENT(__attribute__((unused))
5891
 
                                               test_fixture *fixture,
5892
 
                                               __attribute__((unused))
5893
 
                                               gconstpointer
5894
 
                                               user_data){
5895
 
  __attribute__((cleanup(cleanup_queue)))
5896
 
    task_queue *queue = create_queue();
5897
 
  g_assert_nonnull(queue);
5898
 
  __attribute__((cleanup(cleanup_close)))
5899
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5900
 
  g_assert_cmpint(epoll_fd, >=, 0);
5901
 
  __attribute__((cleanup(string_set_clear)))
5902
 
    string_set cancelled_filenames = {};
5903
 
 
5904
 
  g_assert_false(assert_add_existing_questions_to_devnull
5905
 
                 (queue,
5906
 
                  epoll_fd,
5907
 
                  (buffer[]){{}}, /* password */
5908
 
                  &cancelled_filenames,
5909
 
                  (mono_microsecs[]){0}, /* current_time */
5910
 
                  (bool[]){false},       /* mandos_client_exited */
5911
 
                  (bool[]){false},       /* password_is_read */
5912
 
                  "/nonexistent"));      /* dirname */
5913
 
 
5914
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5915
 
}
5916
 
 
5917
 
static
5918
 
bool assert_add_existing_questions_to_devnull(task_queue
5919
 
                                              *const queue,
5920
 
                                              const int
5921
 
                                              epoll_fd,
5922
 
                                              buffer *const
5923
 
                                              password,
5924
 
                                              string_set
5925
 
                                              *cancelled_filenames,
5926
 
                                              const mono_microsecs
5927
 
                                              *const current_time,
5928
 
                                              bool *const
5929
 
                                              mandos_client_exited,
5930
 
                                              bool *const
5931
 
                                              password_is_read,
5932
 
                                              const char *const
5933
 
                                              dirname){
5934
 
  __attribute__((cleanup(cleanup_close)))
5935
 
    const int devnull_fd = open("/dev/null", O_WRONLY | O_CLOEXEC);
5936
 
  g_assert_cmpint(devnull_fd, >=, 0);
5937
 
  __attribute__((cleanup(cleanup_close)))
5938
 
    const int real_stderr_fd = dup(STDERR_FILENO);
5939
 
  g_assert_cmpint(real_stderr_fd, >=, 0);
5940
 
  dup2(devnull_fd, STDERR_FILENO);
5941
 
  const bool ret = add_existing_questions(queue, epoll_fd, password,
5942
 
                                          cancelled_filenames,
5943
 
                                          current_time,
5944
 
                                          mandos_client_exited,
5945
 
                                          password_is_read, dirname);
5946
 
  dup2(real_stderr_fd, STDERR_FILENO);
5947
 
  return ret;
5948
 
}
5949
 
 
5950
 
static
5951
 
void test_add_existing_questions_no_questions(__attribute__((unused))
5952
 
                                              test_fixture *fixture,
5953
 
                                              __attribute__((unused))
5954
 
                                              gconstpointer
5955
 
                                              user_data){
5956
 
  __attribute__((cleanup(cleanup_queue)))
5957
 
    task_queue *queue = create_queue();
5958
 
  g_assert_nonnull(queue);
5959
 
  __attribute__((cleanup(cleanup_close)))
5960
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5961
 
  g_assert_cmpint(epoll_fd, >=, 0);
5962
 
  __attribute__((cleanup(string_set_clear)))
5963
 
    string_set cancelled_filenames = {};
5964
 
  __attribute__((cleanup(cleanup_string)))
5965
 
    char *tempdir = make_temporary_directory();
5966
 
  g_assert_nonnull(tempdir);
5967
 
 
5968
 
  g_assert_false(assert_add_existing_questions_to_devnull
5969
 
                 (queue,
5970
 
                  epoll_fd,
5971
 
                  (buffer[]){{}}, /* password */
5972
 
                  &cancelled_filenames,
5973
 
                  (mono_microsecs[]){0}, /* current_time */
5974
 
                  (bool[]){false},       /* mandos_client_exited */
5975
 
                  (bool[]){false},       /* password_is_read */
5976
 
                  tempdir));
5977
 
 
5978
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
5979
 
 
5980
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
5981
 
}
5982
 
 
5983
 
static char *make_question_file_in_directory(const char *const);
5984
 
 
5985
 
static
5986
 
void test_add_existing_questions_one_question(__attribute__((unused))
5987
 
                                              test_fixture *fixture,
5988
 
                                              __attribute__((unused))
5989
 
                                              gconstpointer
5990
 
                                              user_data){
5991
 
  __attribute__((cleanup(cleanup_queue)))
5992
 
    task_queue *queue = create_queue();
5993
 
  g_assert_nonnull(queue);
5994
 
  __attribute__((cleanup(cleanup_close)))
5995
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
5996
 
  g_assert_cmpint(epoll_fd, >=, 0);
5997
 
  __attribute__((cleanup(cleanup_buffer)))
5998
 
    buffer password = {};
5999
 
  __attribute__((cleanup(string_set_clear)))
6000
 
    string_set cancelled_filenames = {};
6001
 
  const mono_microsecs current_time = 0;
6002
 
  bool mandos_client_exited = false;
6003
 
  bool password_is_read = false;
6004
 
  __attribute__((cleanup(cleanup_string)))
6005
 
    char *tempdir = make_temporary_directory();
6006
 
  g_assert_nonnull(tempdir);
6007
 
  __attribute__((cleanup(cleanup_string)))
6008
 
    char *question_filename
6009
 
    = make_question_file_in_directory(tempdir);
6010
 
  g_assert_nonnull(question_filename);
6011
 
 
6012
 
  g_assert_true(assert_add_existing_questions_to_devnull
6013
 
                (queue,
6014
 
                 epoll_fd,
6015
 
                 &password,
6016
 
                 &cancelled_filenames,
6017
 
                 &current_time,
6018
 
                 &mandos_client_exited,
6019
 
                 &password_is_read,
6020
 
                 tempdir));
6021
 
 
6022
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6023
 
 
6024
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
6025
 
        .func=open_and_parse_question,
6026
 
        .epoll_fd=epoll_fd,
6027
 
        .filename=question_filename,
6028
 
        .question_filename=question_filename,
6029
 
        .password=&password,
6030
 
        .cancelled_filenames=&cancelled_filenames,
6031
 
        .current_time=&current_time,
6032
 
        .mandos_client_exited=&mandos_client_exited,
6033
 
        .password_is_read=&password_is_read,
6034
 
      }));
6035
 
 
6036
 
  g_assert_true(queue->next_run == 1);
6037
 
 
6038
 
  g_assert_cmpint(unlink(question_filename), ==, 0);
6039
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
6040
 
}
6041
 
 
6042
 
static char *make_question_file_in_directory(const char
6043
 
                                             *const dir){
6044
 
  return make_temporary_prefixed_file_in_directory("ask.", dir);
6045
 
}
6046
 
 
6047
 
static
6048
 
void test_add_existing_questions_two_questions(__attribute__((unused))
6049
 
                                               test_fixture *fixture,
6050
 
                                               __attribute__((unused))
6051
 
                                               gconstpointer
6052
 
                                               user_data){
6053
 
  __attribute__((cleanup(cleanup_queue)))
6054
 
    task_queue *queue = create_queue();
6055
 
  g_assert_nonnull(queue);
6056
 
  __attribute__((cleanup(cleanup_close)))
6057
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6058
 
  g_assert_cmpint(epoll_fd, >=, 0);
6059
 
  __attribute__((cleanup(cleanup_buffer)))
6060
 
    buffer password = {};
6061
 
  __attribute__((cleanup(string_set_clear)))
6062
 
    string_set cancelled_filenames = {};
6063
 
  const mono_microsecs current_time = 0;
6064
 
  bool mandos_client_exited = false;
6065
 
  bool password_is_read = false;
6066
 
  __attribute__((cleanup(cleanup_string)))
6067
 
    char *tempdir = make_temporary_directory();
6068
 
  g_assert_nonnull(tempdir);
6069
 
  __attribute__((cleanup(cleanup_string)))
6070
 
    char *question_filename1
6071
 
    = make_question_file_in_directory(tempdir);
6072
 
  g_assert_nonnull(question_filename1);
6073
 
  __attribute__((cleanup(cleanup_string)))
6074
 
    char *question_filename2
6075
 
    = make_question_file_in_directory(tempdir);
6076
 
  g_assert_nonnull(question_filename2);
6077
 
 
6078
 
  g_assert_true(assert_add_existing_questions_to_devnull
6079
 
                (queue,
6080
 
                 epoll_fd,
6081
 
                 &password,
6082
 
                 &cancelled_filenames,
6083
 
                 &current_time,
6084
 
                 &mandos_client_exited,
6085
 
                 &password_is_read,
6086
 
                 tempdir));
6087
 
 
6088
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 2);
6089
 
 
6090
 
  g_assert_true(queue->next_run == 1);
6091
 
 
6092
 
  __attribute__((cleanup(string_set_clear)))
6093
 
    string_set seen_questions = {};
6094
 
 
6095
 
  bool queue_contains_question_opener(char *const question_filename){
6096
 
    return(find_matching_task(queue, (task_context){
6097
 
          .func=open_and_parse_question,
6098
 
          .epoll_fd=epoll_fd,
6099
 
          .question_filename=question_filename,
6100
 
          .password=&password,
6101
 
          .cancelled_filenames=&cancelled_filenames,
6102
 
          .current_time=&current_time,
6103
 
          .mandos_client_exited=&mandos_client_exited,
6104
 
          .password_is_read=&password_is_read,
6105
 
        }) != NULL);
6106
 
  }
6107
 
 
6108
 
  g_assert_true(queue_contains_question_opener(question_filename1));
6109
 
  g_assert_true(queue_contains_question_opener(question_filename2));
6110
 
 
6111
 
  g_assert_true(queue->next_run == 1);
6112
 
 
6113
 
  g_assert_cmpint(unlink(question_filename1), ==, 0);
6114
 
  g_assert_cmpint(unlink(question_filename2), ==, 0);
6115
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
6116
 
}
6117
 
 
6118
 
static void
6119
 
test_add_existing_questions_non_questions(__attribute__((unused))
6120
 
                                          test_fixture *fixture,
6121
 
                                          __attribute__((unused))
6122
 
                                          gconstpointer user_data){
6123
 
  __attribute__((cleanup(cleanup_queue)))
6124
 
    task_queue *queue = create_queue();
6125
 
  g_assert_nonnull(queue);
6126
 
  __attribute__((cleanup(cleanup_close)))
6127
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6128
 
  g_assert_cmpint(epoll_fd, >=, 0);
6129
 
  __attribute__((cleanup(string_set_clear)))
6130
 
    string_set cancelled_filenames = {};
6131
 
  __attribute__((cleanup(cleanup_string)))
6132
 
    char *tempdir = make_temporary_directory();
6133
 
  g_assert_nonnull(tempdir);
6134
 
  __attribute__((cleanup(cleanup_string)))
6135
 
    char *question_filename1
6136
 
    = make_temporary_file_in_directory(tempdir);
6137
 
  g_assert_nonnull(question_filename1);
6138
 
  __attribute__((cleanup(cleanup_string)))
6139
 
    char *question_filename2
6140
 
    = make_temporary_file_in_directory(tempdir);
6141
 
  g_assert_nonnull(question_filename2);
6142
 
 
6143
 
  g_assert_false(assert_add_existing_questions_to_devnull
6144
 
                 (queue,
6145
 
                  epoll_fd,
6146
 
                  (buffer[]){{}}, /* password */
6147
 
                  &cancelled_filenames,
6148
 
                  (mono_microsecs[]){0}, /* current_time */
6149
 
                  (bool[]){false},       /* mandos_client_exited */
6150
 
                  (bool[]){false},       /* password_is_read */
6151
 
                  tempdir));
6152
 
 
6153
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 0);
6154
 
 
6155
 
  g_assert_cmpint(unlink(question_filename1), ==, 0);
6156
 
  g_assert_cmpint(unlink(question_filename2), ==, 0);
6157
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
6158
 
}
6159
 
 
6160
 
static void
6161
 
test_add_existing_questions_both_types(__attribute__((unused))
6162
 
                                       test_fixture *fixture,
6163
 
                                       __attribute__((unused))
6164
 
                                       gconstpointer user_data){
6165
 
  __attribute__((cleanup(cleanup_queue)))
6166
 
    task_queue *queue = create_queue();
6167
 
  g_assert_nonnull(queue);
6168
 
  __attribute__((cleanup(cleanup_close)))
6169
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6170
 
  g_assert_cmpint(epoll_fd, >=, 0);
6171
 
  __attribute__((cleanup(cleanup_buffer)))
6172
 
    buffer password = {};
6173
 
  __attribute__((cleanup(string_set_clear)))
6174
 
    string_set cancelled_filenames = {};
6175
 
  const mono_microsecs current_time = 0;
6176
 
  bool mandos_client_exited = false;
6177
 
  bool password_is_read = false;
6178
 
  __attribute__((cleanup(cleanup_string)))
6179
 
    char *tempdir = make_temporary_directory();
6180
 
  g_assert_nonnull(tempdir);
6181
 
  __attribute__((cleanup(cleanup_string)))
6182
 
    char *tempfilename1 = make_temporary_file_in_directory(tempdir);
6183
 
  g_assert_nonnull(tempfilename1);
6184
 
  __attribute__((cleanup(cleanup_string)))
6185
 
    char *tempfilename2 = make_temporary_file_in_directory(tempdir);
6186
 
  g_assert_nonnull(tempfilename2);
6187
 
  __attribute__((cleanup(cleanup_string)))
6188
 
    char *question_filename
6189
 
    = make_question_file_in_directory(tempdir);
6190
 
  g_assert_nonnull(question_filename);
6191
 
 
6192
 
  g_assert_true(assert_add_existing_questions_to_devnull
6193
 
                (queue,
6194
 
                 epoll_fd,
6195
 
                 &password,
6196
 
                 &cancelled_filenames,
6197
 
                 &current_time,
6198
 
                 &mandos_client_exited,
6199
 
                 &password_is_read,
6200
 
                 tempdir));
6201
 
 
6202
 
  g_assert_cmpuint((unsigned int)queue->length, ==, 1);
6203
 
 
6204
 
  g_assert_nonnull(find_matching_task(queue, (task_context){
6205
 
        .func=open_and_parse_question,
6206
 
        .epoll_fd=epoll_fd,
6207
 
        .filename=question_filename,
6208
 
        .question_filename=question_filename,
6209
 
        .password=&password,
6210
 
        .cancelled_filenames=&cancelled_filenames,
6211
 
        .current_time=&current_time,
6212
 
        .mandos_client_exited=&mandos_client_exited,
6213
 
        .password_is_read=&password_is_read,
6214
 
      }));
6215
 
 
6216
 
  g_assert_true(queue->next_run == 1);
6217
 
 
6218
 
  g_assert_cmpint(unlink(tempfilename1), ==, 0);
6219
 
  g_assert_cmpint(unlink(tempfilename2), ==, 0);
6220
 
  g_assert_cmpint(unlink(question_filename), ==, 0);
6221
 
  g_assert_cmpint(rmdir(tempdir), ==, 0);
6222
 
}
6223
 
 
6224
 
static void test_wait_for_event_timeout(__attribute__((unused))
6225
 
                                        test_fixture *fixture,
6226
 
                                        __attribute__((unused))
6227
 
                                        gconstpointer user_data){
6228
 
  __attribute__((cleanup(cleanup_close)))
6229
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6230
 
  g_assert_cmpint(epoll_fd, >=, 0);
6231
 
 
6232
 
  g_assert_true(wait_for_event(epoll_fd, 1, 0));
6233
 
}
6234
 
 
6235
 
static void test_wait_for_event_event(__attribute__((unused))
6236
 
                                      test_fixture *fixture,
6237
 
                                      __attribute__((unused))
6238
 
                                      gconstpointer user_data){
6239
 
  __attribute__((cleanup(cleanup_close)))
6240
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6241
 
  g_assert_cmpint(epoll_fd, >=, 0);
6242
 
  int pipefds[2];
6243
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6244
 
  __attribute__((cleanup(cleanup_close)))
6245
 
    const int read_pipe = pipefds[0];
6246
 
  __attribute__((cleanup(cleanup_close)))
6247
 
    const int write_pipe = pipefds[1];
6248
 
  g_assert_cmpint(epoll_ctl(epoll_fd, EPOLL_CTL_ADD, read_pipe,
6249
 
                            &(struct epoll_event)
6250
 
                            { .events=EPOLLIN | EPOLLRDHUP }), ==, 0);
6251
 
  g_assert_cmpint((int)write(write_pipe, "x", 1), ==, 1);
6252
 
 
6253
 
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
6254
 
}
6255
 
 
6256
 
static void test_wait_for_event_sigchld(test_fixture *fixture,
6257
 
                                        __attribute__((unused))
6258
 
                                        gconstpointer user_data){
6259
 
  const pid_t pid = fork();
6260
 
  if(pid == 0){         /* Child */
6261
 
    if(not restore_signal_handler(&fixture->orig_sigaction)){
6262
 
      _exit(EXIT_FAILURE);
6263
 
    }
6264
 
    if(not restore_sigmask(&fixture->orig_sigmask)){
6265
 
      _exit(EXIT_FAILURE);
6266
 
    }
6267
 
    exit(EXIT_SUCCESS);
6268
 
  }
6269
 
  g_assert_true(pid != -1);
6270
 
  __attribute__((cleanup(cleanup_close)))
6271
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6272
 
  g_assert_cmpint(epoll_fd, >=, 0);
6273
 
 
6274
 
  g_assert_true(wait_for_event(epoll_fd, 0, 0));
6275
 
 
6276
 
  int status;
6277
 
  g_assert_true(waitpid(pid, &status, 0) == pid);
6278
 
  g_assert_true(WIFEXITED(status));
6279
 
  g_assert_cmpint(WEXITSTATUS(status), ==, EXIT_SUCCESS);
6280
 
}
6281
 
 
6282
 
static void test_run_queue_zeroes_next_run(__attribute__((unused))
6283
 
                                           test_fixture *fixture,
6284
 
                                           __attribute__((unused))
6285
 
                                           gconstpointer user_data){
6286
 
  __attribute__((cleanup(cleanup_queue)))
6287
 
    task_queue *queue = create_queue();
6288
 
  g_assert_nonnull(queue);
6289
 
  queue->next_run = 1;
6290
 
  __attribute__((cleanup(cleanup_close)))
6291
 
    const int epoll_fd = epoll_create1(EPOLL_CLOEXEC);
6292
 
  __attribute__((cleanup(string_set_clear)))
6293
 
    string_set cancelled_filenames = {};
6294
 
  bool quit_now = false;
6295
 
 
6296
 
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6297
 
  g_assert_false(quit_now);
6298
 
  g_assert_cmpuint((unsigned int)queue->next_run, ==, 0);
6299
 
}
6300
 
 
6301
 
static
6302
 
void test_run_queue_clears_cancelled_filenames(__attribute__((unused))
6303
 
                                               test_fixture *fixture,
6304
 
                                               __attribute__((unused))
6305
 
                                               gconstpointer
6306
 
                                               user_data){
6307
 
  __attribute__((cleanup(cleanup_queue)))
6308
 
    task_queue *queue = create_queue();
6309
 
  g_assert_nonnull(queue);
6310
 
  __attribute__((cleanup(string_set_clear)))
6311
 
    string_set cancelled_filenames = {};
6312
 
  bool quit_now = false;
6313
 
  const char question_filename[] = "/nonexistent/question_filename";
6314
 
  g_assert_true(string_set_add(&cancelled_filenames,
6315
 
                               question_filename));
6316
 
 
6317
 
  g_assert_true(add_to_queue(queue,
6318
 
                             (task_context){ .func=dummy_func }));
6319
 
 
6320
 
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6321
 
  g_assert_false(quit_now);
6322
 
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6323
 
  g_assert_false(string_set_contains(cancelled_filenames,
6324
 
                                     question_filename));
6325
 
}
6326
 
 
6327
 
static
6328
 
void test_run_queue_skips_cancelled_filenames(__attribute__((unused))
6329
 
                                              test_fixture *fixture,
6330
 
                                              __attribute__((unused))
6331
 
                                              gconstpointer
6332
 
                                              user_data){
6333
 
  __attribute__((cleanup(cleanup_queue)))
6334
 
    task_queue *queue = create_queue();
6335
 
  g_assert_nonnull(queue);
6336
 
  __attribute__((cleanup(string_set_clear)))
6337
 
    string_set cancelled_filenames = {};
6338
 
  bool quit_now = false;
6339
 
  int pipefds[2];
6340
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6341
 
  __attribute__((cleanup(cleanup_close)))
6342
 
    const int read_pipe = pipefds[0];
6343
 
  g_assert_cmpint(close(pipefds[1]), ==, 0);
6344
 
  const char question_filename[] = "/nonexistent/question_filename";
6345
 
  g_assert_true(string_set_add(&cancelled_filenames,
6346
 
                               question_filename));
6347
 
  __attribute__((nonnull))
6348
 
    void quit_func(const task_context task,
6349
 
                   __attribute__((unused)) task_queue *const q){
6350
 
    g_assert_nonnull(task.quit_now);
6351
 
    *task.quit_now = true;
6352
 
  }
6353
 
  task_context task = {
6354
 
    .func=quit_func,
6355
 
    .question_filename=strdup(question_filename),
6356
 
    .quit_now=&quit_now,
6357
 
    .fd=read_pipe,
6358
 
  };
6359
 
  g_assert_nonnull(task.question_filename);
6360
 
 
6361
 
  g_assert_true(add_to_queue(queue, task));
6362
 
 
6363
 
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6364
 
  g_assert_false(quit_now);
6365
 
 
6366
 
  /* read_pipe should be closed already */
6367
 
  errno = 0;
6368
 
  bool read_pipe_closed = (close(read_pipe) == -1);
6369
 
  read_pipe_closed &= (errno == EBADF);
6370
 
  g_assert_true(read_pipe_closed);
6371
 
}
6372
 
 
6373
 
static void test_run_queue_one_task(__attribute__((unused))
6374
 
                                    test_fixture *fixture,
6375
 
                                    __attribute__((unused))
6376
 
                                    gconstpointer user_data){
6377
 
  __attribute__((cleanup(cleanup_queue)))
6378
 
    task_queue *queue = create_queue();
6379
 
  g_assert_nonnull(queue);
6380
 
  __attribute__((cleanup(string_set_clear)))
6381
 
    string_set cancelled_filenames = {};
6382
 
  bool quit_now = false;
6383
 
 
6384
 
  __attribute__((nonnull))
6385
 
    void next_run_func(__attribute__((unused))
6386
 
                       const task_context task,
6387
 
                       task_queue *const q){
6388
 
    q->next_run = 1;
6389
 
  }
6390
 
 
6391
 
  task_context task = {
6392
 
    .func=next_run_func,
6393
 
  };
6394
 
  g_assert_true(add_to_queue(queue, task));
6395
 
 
6396
 
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6397
 
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
6398
 
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6399
 
}
6400
 
 
6401
 
static void test_run_queue_two_tasks(__attribute__((unused))
6402
 
                                     test_fixture *fixture,
6403
 
                                     __attribute__((unused))
6404
 
                                     gconstpointer user_data){
6405
 
  __attribute__((cleanup(cleanup_queue)))
6406
 
    task_queue *queue = create_queue();
6407
 
  g_assert_nonnull(queue);
6408
 
  queue->next_run = 1;
6409
 
  __attribute__((cleanup(string_set_clear)))
6410
 
    string_set cancelled_filenames = {};
6411
 
  bool quit_now = false;
6412
 
  bool mandos_client_exited = false;
6413
 
 
6414
 
  __attribute__((nonnull))
6415
 
    void next_run_func(__attribute__((unused))
6416
 
                       const task_context task,
6417
 
                       task_queue *const q){
6418
 
    q->next_run = 1;
6419
 
  }
6420
 
 
6421
 
  __attribute__((nonnull))
6422
 
    void exited_func(const task_context task,
6423
 
                     __attribute__((unused)) task_queue *const q){
6424
 
    *task.mandos_client_exited = true;
6425
 
  }
6426
 
 
6427
 
  task_context task1 = {
6428
 
    .func=next_run_func,
6429
 
  };
6430
 
  g_assert_true(add_to_queue(queue, task1));
6431
 
 
6432
 
  task_context task2 = {
6433
 
    .func=exited_func,
6434
 
    .mandos_client_exited=&mandos_client_exited,
6435
 
  };
6436
 
  g_assert_true(add_to_queue(queue, task2));
6437
 
 
6438
 
  g_assert_true(run_queue(&queue, &cancelled_filenames, &quit_now));
6439
 
  g_assert_false(quit_now);
6440
 
  g_assert_cmpuint((unsigned int)(queue->next_run), ==, 1);
6441
 
  g_assert_true(mandos_client_exited);
6442
 
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6443
 
}
6444
 
 
6445
 
static void test_run_queue_two_tasks_quit(__attribute__((unused))
6446
 
                                          test_fixture *fixture,
6447
 
                                          __attribute__((unused))
6448
 
                                          gconstpointer user_data){
6449
 
  __attribute__((cleanup(cleanup_queue)))
6450
 
    task_queue *queue = create_queue();
6451
 
  g_assert_nonnull(queue);
6452
 
  __attribute__((cleanup(string_set_clear)))
6453
 
    string_set cancelled_filenames = {};
6454
 
  bool quit_now = false;
6455
 
  bool mandos_client_exited = false;
6456
 
  bool password_is_read = false;
6457
 
 
6458
 
  __attribute__((nonnull))
6459
 
    void set_exited_func(const task_context task,
6460
 
                         __attribute__((unused)) task_queue *const q){
6461
 
    *task.mandos_client_exited = true;
6462
 
    *task.quit_now = true;
6463
 
  }
6464
 
  task_context task1 = {
6465
 
    .func=set_exited_func,
6466
 
    .quit_now=&quit_now,
6467
 
    .mandos_client_exited=&mandos_client_exited,
6468
 
  };
6469
 
  g_assert_true(add_to_queue(queue, task1));
6470
 
 
6471
 
  __attribute__((nonnull))
6472
 
    void set_read_func(const task_context task,
6473
 
                       __attribute__((unused)) task_queue *const q){
6474
 
    *task.quit_now = true;
6475
 
    *task.password_is_read = true;
6476
 
  }
6477
 
  task_context task2 = {
6478
 
    .func=set_read_func,
6479
 
    .quit_now=&quit_now,
6480
 
    .password_is_read=&password_is_read,
6481
 
  };
6482
 
  g_assert_true(add_to_queue(queue, task2));
6483
 
 
6484
 
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
6485
 
  g_assert_true(quit_now);
6486
 
  g_assert_true(mandos_client_exited xor password_is_read);
6487
 
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6488
 
}
6489
 
 
6490
 
static void test_run_queue_two_tasks_cleanup(__attribute__((unused))
6491
 
                                             test_fixture *fixture,
6492
 
                                             __attribute__((unused))
6493
 
                                             gconstpointer user_data){
6494
 
  __attribute__((cleanup(cleanup_queue)))
6495
 
    task_queue *queue = create_queue();
6496
 
  g_assert_nonnull(queue);
6497
 
  __attribute__((cleanup(string_set_clear)))
6498
 
    string_set cancelled_filenames = {};
6499
 
  int pipefds[2];
6500
 
  g_assert_cmpint(pipe2(pipefds, O_CLOEXEC | O_NONBLOCK), ==, 0);
6501
 
  __attribute__((cleanup(cleanup_close)))
6502
 
    const int read_pipe = pipefds[0];
6503
 
  __attribute__((cleanup(cleanup_close)))
6504
 
    const int write_pipe = pipefds[1];
6505
 
  bool quit_now = false;
6506
 
 
6507
 
  __attribute__((nonnull))
6508
 
    void read_func(const task_context task,
6509
 
                   __attribute__((unused)) task_queue *const q){
6510
 
    *task.quit_now = true;
6511
 
  }
6512
 
  task_context task1 = {
6513
 
    .func=read_func,
6514
 
    .quit_now=&quit_now,
6515
 
    .fd=read_pipe,
6516
 
  };
6517
 
  g_assert_true(add_to_queue(queue, task1));
6518
 
 
6519
 
  __attribute__((nonnull))
6520
 
    void write_func(const task_context task,
6521
 
                    __attribute__((unused)) task_queue *const q){
6522
 
    *task.quit_now = true;
6523
 
  }
6524
 
  task_context task2 = {
6525
 
    .func=write_func,
6526
 
    .quit_now=&quit_now,
6527
 
    .fd=write_pipe,
6528
 
  };
6529
 
  g_assert_true(add_to_queue(queue, task2));
6530
 
 
6531
 
  g_assert_false(run_queue(&queue, &cancelled_filenames, &quit_now));
6532
 
  g_assert_true(quit_now);
6533
 
 
6534
 
  /* Either read_pipe or write_pipe should be closed already */
6535
 
  errno = 0;
6536
 
  bool close_read_pipe = (close(read_pipe) == -1);
6537
 
  close_read_pipe &= (errno == EBADF);
6538
 
  errno = 0;
6539
 
  bool close_write_pipe = (close(write_pipe) == -1);
6540
 
  close_write_pipe &= (errno == EBADF);
6541
 
  g_assert_true(close_read_pipe xor close_write_pipe);
6542
 
  g_assert_cmpuint((unsigned int)(queue->length), ==, 0);
6543
 
}
6544
 
 
6545
 
static void test_setup_signal_handler(__attribute__((unused))
6546
 
                                      test_fixture *fixture,
6547
 
                                      __attribute__((unused))
6548
 
                                      gconstpointer user_data){
6549
 
  /* Save current SIGCHLD action, whatever it is */
6550
 
  struct sigaction expected_sigchld_action;
6551
 
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
6552
 
                  ==, 0);
6553
 
 
6554
 
  /* Act; i.e. run the setup_signal_handler() function */
6555
 
  struct sigaction actual_old_sigchld_action;
6556
 
  g_assert_true(setup_signal_handler(&actual_old_sigchld_action));
6557
 
 
6558
 
  /* Check that the function correctly set "actual_old_sigchld_action"
6559
 
     to the same values as the previously saved
6560
 
     "expected_sigchld_action" */
6561
 
  /* Check member sa_handler */
6562
 
  g_assert_true(actual_old_sigchld_action.sa_handler
6563
 
                == expected_sigchld_action.sa_handler);
6564
 
  /* Check member sa_mask */
6565
 
  for(int signum = 1; signum < NSIG; signum++){
6566
 
    const int expected_old_block_state
6567
 
      = sigismember(&expected_sigchld_action.sa_mask, signum);
6568
 
    g_assert_cmpint(expected_old_block_state, >=, 0);
6569
 
    const int actual_old_block_state
6570
 
      = sigismember(&actual_old_sigchld_action.sa_mask, signum);
6571
 
    g_assert_cmpint(actual_old_block_state, >=, 0);
6572
 
    g_assert_cmpint(actual_old_block_state,
6573
 
                    ==, expected_old_block_state);
6574
 
  }
6575
 
  /* Check member sa_flags */
6576
 
  g_assert_true((actual_old_sigchld_action.sa_flags
6577
 
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
6578
 
                == (expected_sigchld_action.sa_flags
6579
 
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
6580
 
 
6581
 
  /* Retrieve the current signal handler for SIGCHLD as set by
6582
 
     setup_signal_handler() */
6583
 
  struct sigaction actual_new_sigchld_action;
6584
 
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
6585
 
                            &actual_new_sigchld_action), ==, 0);
6586
 
  /* Check that the signal handler (member sa_handler) is correctly
6587
 
     set to the "handle_sigchld" function */
6588
 
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_DFL);
6589
 
  g_assert_true(actual_new_sigchld_action.sa_handler != SIG_IGN);
6590
 
  g_assert_true(actual_new_sigchld_action.sa_handler
6591
 
                == handle_sigchld);
6592
 
  /* Check (in member sa_mask) that at least a handful of signals are
6593
 
     actually blocked during the signal handler */
6594
 
  for(int signum = 1; signum < NSIG; signum++){
6595
 
    int actual_new_block_state;
6596
 
    switch(signum){
6597
 
    case SIGTERM:
6598
 
    case SIGINT:
6599
 
    case SIGQUIT:
6600
 
    case SIGHUP:
6601
 
      actual_new_block_state
6602
 
        = sigismember(&actual_new_sigchld_action.sa_mask, signum);
6603
 
      g_assert_cmpint(actual_new_block_state, ==, 1);
6604
 
      continue;
6605
 
    case SIGKILL:               /* non-blockable */
6606
 
    case SIGSTOP:               /* non-blockable */
6607
 
    case SIGCHLD:               /* always blocked */
6608
 
    default:
6609
 
      continue;
6610
 
    }
6611
 
  }
6612
 
  /* Check member sa_flags */
6613
 
  g_assert_true((actual_new_sigchld_action.sa_flags
6614
 
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
6615
 
                == (SA_NOCLDSTOP | SA_RESTART));
6616
 
 
6617
 
  /* Restore signal handler */
6618
 
  g_assert_cmpint(sigaction(SIGCHLD, &expected_sigchld_action, NULL),
6619
 
                  ==, 0);
6620
 
}
6621
 
 
6622
 
static void test_restore_signal_handler(__attribute__((unused))
6623
 
                                        test_fixture *fixture,
6624
 
                                        __attribute__((unused))
6625
 
                                        gconstpointer user_data){
6626
 
  /* Save current SIGCHLD action, whatever it is */
6627
 
  struct sigaction expected_sigchld_action;
6628
 
  g_assert_cmpint(sigaction(SIGCHLD, NULL, &expected_sigchld_action),
6629
 
                  ==, 0);
6630
 
  /* Since we haven't established a signal handler yet, there should
6631
 
     not be one established.  But another test may have relied on
6632
 
     restore_signal_handler() to restore the signal handler, and if
6633
 
     restore_signal_handler() is buggy (which we should be prepared
6634
 
     for in this test) the signal handler may not have been restored
6635
 
     properly; check for this: */
6636
 
  g_assert_true(expected_sigchld_action.sa_handler != handle_sigchld);
6637
 
 
6638
 
  /* Establish a signal handler */
6639
 
  struct sigaction sigchld_action = {
6640
 
    .sa_handler=handle_sigchld,
6641
 
    .sa_flags=SA_RESTART | SA_NOCLDSTOP,
6642
 
  };
6643
 
  g_assert_cmpint(sigfillset(&sigchld_action.sa_mask), ==, 0);
6644
 
  g_assert_cmpint(sigaction(SIGCHLD, &sigchld_action, NULL), ==, 0);
6645
 
 
6646
 
  /* Act; i.e. run the restore_signal_handler() function */
6647
 
  g_assert_true(restore_signal_handler(&expected_sigchld_action));
6648
 
 
6649
 
  /* Retrieve the restored signal handler data */
6650
 
  struct sigaction actual_restored_sigchld_action;
6651
 
  g_assert_cmpint(sigaction(SIGCHLD, NULL,
6652
 
                            &actual_restored_sigchld_action), ==, 0);
6653
 
 
6654
 
  /* Check that the function correctly restored the signal action, as
6655
 
     saved in "actual_restored_sigchld_action", to the same values as
6656
 
     the previously saved "expected_sigchld_action" */
6657
 
  /* Check member sa_handler */
6658
 
  g_assert_true(actual_restored_sigchld_action.sa_handler
6659
 
                == expected_sigchld_action.sa_handler);
6660
 
  /* Check member sa_mask */
6661
 
  for(int signum = 1; signum < NSIG; signum++){
6662
 
    const int expected_old_block_state
6663
 
      = sigismember(&expected_sigchld_action.sa_mask, signum);
6664
 
    g_assert_cmpint(expected_old_block_state, >=, 0);
6665
 
    const int actual_restored_block_state
6666
 
      = sigismember(&actual_restored_sigchld_action.sa_mask, signum);
6667
 
    g_assert_cmpint(actual_restored_block_state, >=, 0);
6668
 
    g_assert_cmpint(actual_restored_block_state,
6669
 
                    ==, expected_old_block_state);
6670
 
  }
6671
 
  /* Check member sa_flags */
6672
 
  g_assert_true((actual_restored_sigchld_action.sa_flags
6673
 
                 & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART))
6674
 
                == (expected_sigchld_action.sa_flags
6675
 
                    & (SA_NOCLDSTOP | SA_ONSTACK | SA_RESTART)));
6676
 
}
6677
 
 
6678
 
static void test_block_sigchld(__attribute__((unused))
6679
 
                               test_fixture *fixture,
6680
 
                               __attribute__((unused))
6681
 
                               gconstpointer user_data){
6682
 
  /* Save original signal mask */
6683
 
  sigset_t expected_sigmask;
6684
 
  g_assert_cmpint(pthread_sigmask(-1, NULL, &expected_sigmask),
6685
 
                  ==, 0);
6686
 
 
6687
 
  /* Make sure SIGCHLD is unblocked for this test */
6688
 
  sigset_t sigchld_sigmask;
6689
 
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
6690
 
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
6691
 
  g_assert_cmpint(pthread_sigmask(SIG_UNBLOCK, &sigchld_sigmask,
6692
 
                                  NULL), ==, 0);
6693
 
 
6694
 
  /* Act; i.e. run the block_sigchld() function */
6695
 
  sigset_t actual_old_sigmask;
6696
 
  g_assert_true(block_sigchld(&actual_old_sigmask));
6697
 
 
6698
 
  /* Check the actual_old_sigmask; it should be the same as the
6699
 
     previously saved signal mask "expected_sigmask". */
6700
 
  for(int signum = 1; signum < NSIG; signum++){
6701
 
    const int expected_old_block_state
6702
 
      = sigismember(&expected_sigmask, signum);
6703
 
    g_assert_cmpint(expected_old_block_state, >=, 0);
6704
 
    const int actual_old_block_state
6705
 
      = sigismember(&actual_old_sigmask, signum);
6706
 
    g_assert_cmpint(actual_old_block_state, >=, 0);
6707
 
    g_assert_cmpint(actual_old_block_state,
6708
 
                    ==, expected_old_block_state);
6709
 
  }
6710
 
 
6711
 
  /* Retrieve the newly set signal mask */
6712
 
  sigset_t actual_sigmask;
6713
 
  g_assert_cmpint(pthread_sigmask(-1, NULL, &actual_sigmask), ==, 0);
6714
 
 
6715
 
  /* SIGCHLD should be blocked */
6716
 
  g_assert_cmpint(sigismember(&actual_sigmask, SIGCHLD), ==, 1);
6717
 
 
6718
 
  /* Restore signal mask */
6719
 
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &expected_sigmask,
6720
 
                                  NULL), ==, 0);
6721
 
}
6722
 
 
6723
 
static void test_restore_sigmask(__attribute__((unused))
6724
 
                                 test_fixture *fixture,
6725
 
                                 __attribute__((unused))
6726
 
                                 gconstpointer user_data){
6727
 
  /* Save original signal mask */
6728
 
  sigset_t orig_sigmask;
6729
 
  g_assert_cmpint(pthread_sigmask(-1, NULL, &orig_sigmask), ==, 0);
6730
 
 
6731
 
  /* Make sure SIGCHLD is blocked for this test */
6732
 
  sigset_t sigchld_sigmask;
6733
 
  g_assert_cmpint(sigemptyset(&sigchld_sigmask), ==, 0);
6734
 
  g_assert_cmpint(sigaddset(&sigchld_sigmask, SIGCHLD), ==, 0);
6735
 
  g_assert_cmpint(pthread_sigmask(SIG_BLOCK, &sigchld_sigmask,
6736
 
                                  NULL), ==, 0);
6737
 
 
6738
 
  /* Act; i.e. run the restore_sigmask() function */
6739
 
  g_assert_true(restore_sigmask(&orig_sigmask));
6740
 
 
6741
 
  /* Retrieve the newly restored signal mask */
6742
 
  sigset_t restored_sigmask;
6743
 
  g_assert_cmpint(pthread_sigmask(-1, NULL, &restored_sigmask),
6744
 
                  ==, 0);
6745
 
 
6746
 
  /* Check the restored_sigmask; it should be the same as the
6747
 
     previously saved signal mask "orig_sigmask". */
6748
 
  for(int signum = 1; signum < NSIG; signum++){
6749
 
    const int orig_block_state = sigismember(&orig_sigmask, signum);
6750
 
    g_assert_cmpint(orig_block_state, >=, 0);
6751
 
    const int restored_block_state = sigismember(&restored_sigmask,
6752
 
                                                 signum);
6753
 
    g_assert_cmpint(restored_block_state, >=, 0);
6754
 
    g_assert_cmpint(restored_block_state, ==, orig_block_state);
6755
 
  }
6756
 
 
6757
 
  /* Restore signal mask */
6758
 
  g_assert_cmpint(pthread_sigmask(SIG_SETMASK, &orig_sigmask,
6759
 
                                  NULL), ==, 0);
6760
 
}
6761
 
 
6762
 
static void test_parse_arguments_noargs(__attribute__((unused))
6763
 
                                        test_fixture *fixture,
6764
 
                                        __attribute__((unused))
6765
 
                                        gconstpointer user_data){
6766
 
  char *argv[] = {
6767
 
    strdup("prgname"),
6768
 
    NULL };
6769
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6770
 
 
6771
 
  char *agent_directory = NULL;
6772
 
  char *helper_directory = NULL;
6773
 
  uid_t user = 0;
6774
 
  gid_t group = 0;
6775
 
  char *mandos_argz = NULL;
6776
 
  size_t mandos_argz_length = 0;
6777
 
 
6778
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
6779
 
                                &helper_directory, &user, &group,
6780
 
                                &mandos_argz, &mandos_argz_length));
6781
 
  g_assert_null(agent_directory);
6782
 
  g_assert_null(helper_directory);
6783
 
  g_assert_true(user == 0);
6784
 
  g_assert_true(group == 0);
6785
 
  g_assert_null(mandos_argz);
6786
 
  g_assert_true(mandos_argz_length == 0);
6787
 
 
6788
 
  for(char **arg = argv; *arg != NULL; arg++){
6789
 
    free(*arg);
6790
 
  }
6791
 
}
6792
 
 
6793
 
__attribute__((nonnull))
6794
 
static bool parse_arguments_devnull(int argc, char *argv[],
6795
 
                                    const bool exit_failure,
6796
 
                                    char **agent_directory,
6797
 
                                    char **helper_directory,
6798
 
                                    uid_t *const user,
6799
 
                                    gid_t *const group,
6800
 
                                    char **mandos_argz,
6801
 
                                    size_t *mandos_argz_length){
6802
 
 
6803
 
  FILE *real_stderr = stderr;
6804
 
  FILE *devnull = fopen("/dev/null", "we");
6805
 
  g_assert_nonnull(devnull);
6806
 
  stderr = devnull;
6807
 
 
6808
 
  const bool ret = parse_arguments(argc, argv, exit_failure,
6809
 
                                   agent_directory,
6810
 
                                   helper_directory, user, group,
6811
 
                                   mandos_argz, mandos_argz_length);
6812
 
  const error_t saved_errno = errno;
6813
 
 
6814
 
  stderr = real_stderr;
6815
 
  g_assert_cmpint(fclose(devnull), ==, 0);
6816
 
 
6817
 
  errno = saved_errno;
6818
 
 
6819
 
  return ret;
6820
 
}
6821
 
 
6822
 
static void test_parse_arguments_invalid(__attribute__((unused))
6823
 
                                         test_fixture *fixture,
6824
 
                                         __attribute__((unused))
6825
 
                                         gconstpointer user_data){
6826
 
  char *argv[] = {
6827
 
    strdup("prgname"),
6828
 
    strdup("--invalid"),
6829
 
    NULL };
6830
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6831
 
 
6832
 
  char *agent_directory = NULL;
6833
 
  char *helper_directory = NULL;
6834
 
  uid_t user = 0;
6835
 
  gid_t group = 0;
6836
 
  char *mandos_argz = NULL;
6837
 
  size_t mandos_argz_length = 0;
6838
 
 
6839
 
  g_assert_false(parse_arguments_devnull(argc, argv, false,
6840
 
                                         &agent_directory,
6841
 
                                         &helper_directory, &user,
6842
 
                                         &group, &mandos_argz,
6843
 
                                         &mandos_argz_length));
6844
 
 
6845
 
  g_assert_true(errno == EINVAL);
6846
 
  g_assert_null(agent_directory);
6847
 
  g_assert_null(helper_directory);
6848
 
  g_assert_null(mandos_argz);
6849
 
  g_assert_true(mandos_argz_length == 0);
6850
 
 
6851
 
  for(char **arg = argv; *arg != NULL; arg++){
6852
 
    free(*arg);
6853
 
  }
6854
 
}
6855
 
 
6856
 
static void test_parse_arguments_long_dir(__attribute__((unused))
6857
 
                                          test_fixture *fixture,
6858
 
                                          __attribute__((unused))
6859
 
                                          gconstpointer user_data){
6860
 
  char *argv[] = {
6861
 
    strdup("prgname"),
6862
 
    strdup("--agent-directory"),
6863
 
    strdup("/tmp"),
6864
 
    NULL };
6865
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6866
 
 
6867
 
  __attribute__((cleanup(cleanup_string)))
6868
 
    char *agent_directory = NULL;
6869
 
  char *helper_directory = NULL;
6870
 
  uid_t user = 0;
6871
 
  gid_t group = 0;
6872
 
  __attribute__((cleanup(cleanup_string)))
6873
 
    char *mandos_argz = NULL;
6874
 
  size_t mandos_argz_length = 0;
6875
 
 
6876
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
6877
 
                                &helper_directory, &user, &group,
6878
 
                                &mandos_argz, &mandos_argz_length));
6879
 
 
6880
 
  g_assert_cmpstr(agent_directory, ==, "/tmp");
6881
 
  g_assert_null(helper_directory);
6882
 
  g_assert_true(user == 0);
6883
 
  g_assert_true(group == 0);
6884
 
  g_assert_null(mandos_argz);
6885
 
  g_assert_true(mandos_argz_length == 0);
6886
 
 
6887
 
  for(char **arg = argv; *arg != NULL; arg++){
6888
 
    free(*arg);
6889
 
  }
6890
 
}
6891
 
 
6892
 
static void test_parse_arguments_short_dir(__attribute__((unused))
6893
 
                                           test_fixture *fixture,
6894
 
                                           __attribute__((unused))
6895
 
                                           gconstpointer user_data){
6896
 
  char *argv[] = {
6897
 
    strdup("prgname"),
6898
 
    strdup("-d"),
6899
 
    strdup("/tmp"),
6900
 
    NULL };
6901
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6902
 
 
6903
 
  __attribute__((cleanup(cleanup_string)))
6904
 
    char *agent_directory = NULL;
6905
 
  char *helper_directory = NULL;
6906
 
  uid_t user = 0;
6907
 
  gid_t group = 0;
6908
 
  __attribute__((cleanup(cleanup_string)))
6909
 
    char *mandos_argz = NULL;
6910
 
  size_t mandos_argz_length = 0;
6911
 
 
6912
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
6913
 
                                &helper_directory, &user, &group,
6914
 
                                &mandos_argz, &mandos_argz_length));
6915
 
 
6916
 
  g_assert_cmpstr(agent_directory, ==, "/tmp");
6917
 
  g_assert_null(helper_directory);
6918
 
  g_assert_true(user == 0);
6919
 
  g_assert_true(group == 0);
6920
 
  g_assert_null(mandos_argz);
6921
 
  g_assert_true(mandos_argz_length == 0);
6922
 
 
6923
 
  for(char **arg = argv; *arg != NULL; arg++){
6924
 
    free(*arg);
6925
 
  }
6926
 
}
6927
 
 
6928
 
static
6929
 
void test_parse_arguments_helper_directory(__attribute__((unused))
6930
 
                                           test_fixture *fixture,
6931
 
                                           __attribute__((unused))
6932
 
                                           gconstpointer user_data){
6933
 
  char *argv[] = {
6934
 
    strdup("prgname"),
6935
 
    strdup("--helper-directory"),
6936
 
    strdup("/tmp"),
6937
 
    NULL };
6938
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6939
 
 
6940
 
  char *agent_directory = NULL;
6941
 
  __attribute__((cleanup(cleanup_string)))
6942
 
    char *helper_directory = NULL;
6943
 
  uid_t user = 0;
6944
 
  gid_t group = 0;
6945
 
  __attribute__((cleanup(cleanup_string)))
6946
 
    char *mandos_argz = NULL;
6947
 
  size_t mandos_argz_length = 0;
6948
 
 
6949
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
6950
 
                                &helper_directory, &user, &group,
6951
 
                                &mandos_argz, &mandos_argz_length));
6952
 
 
6953
 
  g_assert_cmpstr(helper_directory, ==, "/tmp");
6954
 
  g_assert_null(agent_directory);
6955
 
  g_assert_true(user == 0);
6956
 
  g_assert_true(group == 0);
6957
 
  g_assert_null(mandos_argz);
6958
 
  g_assert_true(mandos_argz_length == 0);
6959
 
 
6960
 
  for(char **arg = argv; *arg != NULL; arg++){
6961
 
    free(*arg);
6962
 
  }
6963
 
}
6964
 
 
6965
 
static
6966
 
void test_parse_arguments_plugin_helper_dir(__attribute__((unused))
6967
 
                                            test_fixture *fixture,
6968
 
                                            __attribute__((unused))
6969
 
                                            gconstpointer user_data){
6970
 
  char *argv[] = {
6971
 
    strdup("prgname"),
6972
 
    strdup("--plugin-helper-dir"),
6973
 
    strdup("/tmp"),
6974
 
    NULL };
6975
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
6976
 
 
6977
 
  char *agent_directory = NULL;
6978
 
  __attribute__((cleanup(cleanup_string)))
6979
 
    char *helper_directory = NULL;
6980
 
  uid_t user = 0;
6981
 
  gid_t group = 0;
6982
 
  __attribute__((cleanup(cleanup_string)))
6983
 
    char *mandos_argz = NULL;
6984
 
  size_t mandos_argz_length = 0;
6985
 
 
6986
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
6987
 
                                &helper_directory, &user, &group,
6988
 
                                &mandos_argz, &mandos_argz_length));
6989
 
 
6990
 
  g_assert_cmpstr(helper_directory, ==, "/tmp");
6991
 
  g_assert_null(agent_directory);
6992
 
  g_assert_true(user == 0);
6993
 
  g_assert_true(group == 0);
6994
 
  g_assert_null(mandos_argz);
6995
 
  g_assert_true(mandos_argz_length == 0);
6996
 
 
6997
 
  for(char **arg = argv; *arg != NULL; arg++){
6998
 
    free(*arg);
6999
 
  }
7000
 
}
7001
 
 
7002
 
static void test_parse_arguments_user(__attribute__((unused))
7003
 
                                      test_fixture *fixture,
7004
 
                                      __attribute__((unused))
7005
 
                                      gconstpointer user_data){
7006
 
  char *argv[] = {
7007
 
    strdup("prgname"),
7008
 
    strdup("--user"),
7009
 
    strdup("1000"),
7010
 
    NULL };
7011
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7012
 
 
7013
 
  char *agent_directory = NULL;
7014
 
  __attribute__((cleanup(cleanup_string)))
7015
 
    char *helper_directory = NULL;
7016
 
  uid_t user = 0;
7017
 
  gid_t group = 0;
7018
 
  __attribute__((cleanup(cleanup_string)))
7019
 
    char *mandos_argz = NULL;
7020
 
  size_t mandos_argz_length = 0;
7021
 
 
7022
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7023
 
                                &helper_directory, &user, &group,
7024
 
                                &mandos_argz, &mandos_argz_length));
7025
 
 
7026
 
  g_assert_null(helper_directory);
7027
 
  g_assert_null(agent_directory);
7028
 
  g_assert_cmpuint((unsigned int)user, ==, 1000);
7029
 
  g_assert_true(group == 0);
7030
 
  g_assert_null(mandos_argz);
7031
 
  g_assert_true(mandos_argz_length == 0);
7032
 
 
7033
 
  for(char **arg = argv; *arg != NULL; arg++){
7034
 
    free(*arg);
7035
 
  }
7036
 
}
7037
 
 
7038
 
static void test_parse_arguments_user_invalid(__attribute__((unused))
7039
 
                                              test_fixture *fixture,
7040
 
                                              __attribute__((unused))
7041
 
                                              gconstpointer
7042
 
                                              user_data){
7043
 
  char *argv[] = {
7044
 
    strdup("prgname"),
7045
 
    strdup("--user"),
7046
 
    strdup("invalid"),
7047
 
    NULL };
7048
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7049
 
 
7050
 
  char *agent_directory = NULL;
7051
 
  __attribute__((cleanup(cleanup_string)))
7052
 
    char *helper_directory = NULL;
7053
 
  uid_t user = 0;
7054
 
  gid_t group = 0;
7055
 
  __attribute__((cleanup(cleanup_string)))
7056
 
    char *mandos_argz = NULL;
7057
 
  size_t mandos_argz_length = 0;
7058
 
 
7059
 
  g_assert_false(parse_arguments_devnull(argc, argv, false,
7060
 
                                         &agent_directory,
7061
 
                                         &helper_directory, &user,
7062
 
                                         &group, &mandos_argz,
7063
 
                                         &mandos_argz_length));
7064
 
 
7065
 
  g_assert_null(helper_directory);
7066
 
  g_assert_null(agent_directory);
7067
 
  g_assert_cmpuint((unsigned int)user, ==, 0);
7068
 
  g_assert_true(group == 0);
7069
 
  g_assert_null(mandos_argz);
7070
 
  g_assert_true(mandos_argz_length == 0);
7071
 
 
7072
 
  for(char **arg = argv; *arg != NULL; arg++){
7073
 
    free(*arg);
7074
 
  }
7075
 
}
7076
 
 
7077
 
static
7078
 
void test_parse_arguments_user_zero_invalid(__attribute__((unused))
7079
 
                                            test_fixture *fixture,
7080
 
                                            __attribute__((unused))
7081
 
                                            gconstpointer user_data){
7082
 
  char *argv[] = {
7083
 
    strdup("prgname"),
7084
 
    strdup("--user"),
7085
 
    strdup("0"),
7086
 
    NULL };
7087
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7088
 
 
7089
 
  char *agent_directory = NULL;
7090
 
  __attribute__((cleanup(cleanup_string)))
7091
 
    char *helper_directory = NULL;
7092
 
  uid_t user = 0;
7093
 
  gid_t group = 0;
7094
 
  __attribute__((cleanup(cleanup_string)))
7095
 
    char *mandos_argz = NULL;
7096
 
  size_t mandos_argz_length = 0;
7097
 
 
7098
 
  g_assert_false(parse_arguments_devnull(argc, argv, false,
7099
 
                                         &agent_directory,
7100
 
                                         &helper_directory, &user,
7101
 
                                         &group, &mandos_argz,
7102
 
                                         &mandos_argz_length));
7103
 
 
7104
 
  g_assert_null(helper_directory);
7105
 
  g_assert_null(agent_directory);
7106
 
  g_assert_cmpuint((unsigned int)user, ==, 0);
7107
 
  g_assert_true(group == 0);
7108
 
  g_assert_null(mandos_argz);
7109
 
  g_assert_true(mandos_argz_length == 0);
7110
 
 
7111
 
  for(char **arg = argv; *arg != NULL; arg++){
7112
 
    free(*arg);
7113
 
  }
7114
 
}
7115
 
 
7116
 
static void test_parse_arguments_group(__attribute__((unused))
7117
 
                                       test_fixture *fixture,
7118
 
                                       __attribute__((unused))
7119
 
                                       gconstpointer user_data){
7120
 
  char *argv[] = {
7121
 
    strdup("prgname"),
7122
 
    strdup("--group"),
7123
 
    strdup("1000"),
7124
 
    NULL };
7125
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7126
 
 
7127
 
  char *agent_directory = NULL;
7128
 
  __attribute__((cleanup(cleanup_string)))
7129
 
    char *helper_directory = NULL;
7130
 
  uid_t user = 0;
7131
 
  gid_t group = 0;
7132
 
  __attribute__((cleanup(cleanup_string)))
7133
 
    char *mandos_argz = NULL;
7134
 
  size_t mandos_argz_length = 0;
7135
 
 
7136
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7137
 
                                &helper_directory, &user, &group,
7138
 
                                &mandos_argz, &mandos_argz_length));
7139
 
 
7140
 
  g_assert_null(helper_directory);
7141
 
  g_assert_null(agent_directory);
7142
 
  g_assert_true(user == 0);
7143
 
  g_assert_cmpuint((unsigned int)group, ==, 1000);
7144
 
  g_assert_null(mandos_argz);
7145
 
  g_assert_true(mandos_argz_length == 0);
7146
 
 
7147
 
  for(char **arg = argv; *arg != NULL; arg++){
7148
 
    free(*arg);
7149
 
  }
7150
 
}
7151
 
 
7152
 
static void test_parse_arguments_group_invalid(__attribute__((unused))
7153
 
                                               test_fixture *fixture,
7154
 
                                               __attribute__((unused))
7155
 
                                               gconstpointer
7156
 
                                               user_data){
7157
 
  char *argv[] = {
7158
 
    strdup("prgname"),
7159
 
    strdup("--group"),
7160
 
    strdup("invalid"),
7161
 
    NULL };
7162
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7163
 
 
7164
 
  char *agent_directory = NULL;
7165
 
  __attribute__((cleanup(cleanup_string)))
7166
 
    char *helper_directory = NULL;
7167
 
  uid_t user = 0;
7168
 
  gid_t group = 0;
7169
 
  __attribute__((cleanup(cleanup_string)))
7170
 
    char *mandos_argz = NULL;
7171
 
  size_t mandos_argz_length = 0;
7172
 
 
7173
 
  g_assert_false(parse_arguments_devnull(argc, argv, false,
7174
 
                                         &agent_directory,
7175
 
                                         &helper_directory, &user,
7176
 
                                         &group, &mandos_argz,
7177
 
                                         &mandos_argz_length));
7178
 
 
7179
 
  g_assert_null(helper_directory);
7180
 
  g_assert_null(agent_directory);
7181
 
  g_assert_true(user == 0);
7182
 
  g_assert_true(group == 0);
7183
 
  g_assert_null(mandos_argz);
7184
 
  g_assert_true(mandos_argz_length == 0);
7185
 
 
7186
 
  for(char **arg = argv; *arg != NULL; arg++){
7187
 
    free(*arg);
7188
 
  }
7189
 
}
7190
 
 
7191
 
static
7192
 
void test_parse_arguments_group_zero_invalid(__attribute__((unused))
7193
 
                                             test_fixture *fixture,
7194
 
                                             __attribute__((unused))
7195
 
                                             gconstpointer user_data){
7196
 
  char *argv[] = {
7197
 
    strdup("prgname"),
7198
 
    strdup("--group"),
7199
 
    strdup("0"),
7200
 
    NULL };
7201
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7202
 
 
7203
 
  char *agent_directory = NULL;
7204
 
  __attribute__((cleanup(cleanup_string)))
7205
 
    char *helper_directory = NULL;
7206
 
  uid_t user = 0;
7207
 
  gid_t group = 0;
7208
 
  __attribute__((cleanup(cleanup_string)))
7209
 
    char *mandos_argz = NULL;
7210
 
  size_t mandos_argz_length = 0;
7211
 
 
7212
 
  g_assert_false(parse_arguments_devnull(argc, argv, false,
7213
 
                                         &agent_directory,
7214
 
                                         &helper_directory, &user,
7215
 
                                         &group, &mandos_argz,
7216
 
                                         &mandos_argz_length));
7217
 
 
7218
 
  g_assert_null(helper_directory);
7219
 
  g_assert_null(agent_directory);
7220
 
  g_assert_cmpuint((unsigned int)group, ==, 0);
7221
 
  g_assert_true(group == 0);
7222
 
  g_assert_null(mandos_argz);
7223
 
  g_assert_true(mandos_argz_length == 0);
7224
 
 
7225
 
  for(char **arg = argv; *arg != NULL; arg++){
7226
 
    free(*arg);
7227
 
  }
7228
 
}
7229
 
 
7230
 
static void test_parse_arguments_mandos_noargs(__attribute__((unused))
7231
 
                                               test_fixture *fixture,
7232
 
                                               __attribute__((unused))
7233
 
                                               gconstpointer
7234
 
                                               user_data){
7235
 
  char *argv[] = {
7236
 
    strdup("prgname"),
7237
 
    strdup("mandos-client"),
7238
 
    NULL };
7239
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7240
 
 
7241
 
  __attribute__((cleanup(cleanup_string)))
7242
 
    char *agent_directory = NULL;
7243
 
  __attribute__((cleanup(cleanup_string)))
7244
 
    char *helper_directory = NULL;
7245
 
  uid_t user = 0;
7246
 
  gid_t group = 0;
7247
 
  __attribute__((cleanup(cleanup_string)))
7248
 
    char *mandos_argz = NULL;
7249
 
  size_t mandos_argz_length = 0;
7250
 
 
7251
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7252
 
                                &helper_directory, &user, &group,
7253
 
                                &mandos_argz, &mandos_argz_length));
7254
 
 
7255
 
  g_assert_null(agent_directory);
7256
 
  g_assert_null(helper_directory);
7257
 
  g_assert_true(user == 0);
7258
 
  g_assert_true(group == 0);
7259
 
  g_assert_cmpstr(mandos_argz, ==, "mandos-client");
7260
 
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7261
 
                                            mandos_argz_length),
7262
 
                   ==, 1);
7263
 
 
7264
 
  for(char **arg = argv; *arg != NULL; arg++){
7265
 
    free(*arg);
7266
 
  }
7267
 
}
7268
 
 
7269
 
static void test_parse_arguments_mandos_args(__attribute__((unused))
7270
 
                                             test_fixture *fixture,
7271
 
                                             __attribute__((unused))
7272
 
                                             gconstpointer user_data){
7273
 
  char *argv[] = {
7274
 
    strdup("prgname"),
7275
 
    strdup("mandos-client"),
7276
 
    strdup("one"),
7277
 
    strdup("two"),
7278
 
    strdup("three"),
7279
 
    NULL };
7280
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7281
 
 
7282
 
  __attribute__((cleanup(cleanup_string)))
7283
 
    char *agent_directory = NULL;
7284
 
  __attribute__((cleanup(cleanup_string)))
7285
 
    char *helper_directory = NULL;
7286
 
  uid_t user = 0;
7287
 
  gid_t group = 0;
7288
 
  __attribute__((cleanup(cleanup_string)))
7289
 
    char *mandos_argz = NULL;
7290
 
  size_t mandos_argz_length = 0;
7291
 
 
7292
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7293
 
                                &helper_directory, &user, &group,
7294
 
                                &mandos_argz, &mandos_argz_length));
7295
 
 
7296
 
  g_assert_null(agent_directory);
7297
 
  g_assert_null(helper_directory);
7298
 
  g_assert_true(user == 0);
7299
 
  g_assert_true(group == 0);
7300
 
  char *marg = mandos_argz;
7301
 
  g_assert_cmpstr(marg, ==, "mandos-client");
7302
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7303
 
  g_assert_cmpstr(marg, ==, "one");
7304
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7305
 
  g_assert_cmpstr(marg, ==, "two");
7306
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7307
 
  g_assert_cmpstr(marg, ==, "three");
7308
 
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7309
 
                                            mandos_argz_length),
7310
 
                   ==, 4);
7311
 
 
7312
 
  for(char **arg = argv; *arg != NULL; arg++){
7313
 
    free(*arg);
7314
 
  }
7315
 
}
7316
 
 
7317
 
static void test_parse_arguments_all_args(__attribute__((unused))
7318
 
                                          test_fixture *fixture,
7319
 
                                          __attribute__((unused))
7320
 
                                          gconstpointer user_data){
7321
 
  char *argv[] = {
7322
 
    strdup("prgname"),
7323
 
    strdup("--agent-directory"),
7324
 
    strdup("/tmp"),
7325
 
    strdup("--helper-directory"),
7326
 
    strdup("/var/tmp"),
7327
 
    strdup("--user"),
7328
 
    strdup("1"),
7329
 
    strdup("--group"),
7330
 
    strdup("2"),
7331
 
    strdup("mandos-client"),
7332
 
    strdup("one"),
7333
 
    strdup("two"),
7334
 
    strdup("three"),
7335
 
    NULL };
7336
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7337
 
 
7338
 
  __attribute__((cleanup(cleanup_string)))
7339
 
    char *agent_directory = NULL;
7340
 
  __attribute__((cleanup(cleanup_string)))
7341
 
    char *helper_directory = NULL;
7342
 
  uid_t user = 0;
7343
 
  gid_t group = 0;
7344
 
  __attribute__((cleanup(cleanup_string)))
7345
 
    char *mandos_argz = NULL;
7346
 
  size_t mandos_argz_length = 0;
7347
 
 
7348
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7349
 
                                &helper_directory, &user, &group,
7350
 
                                &mandos_argz, &mandos_argz_length));
7351
 
 
7352
 
  g_assert_cmpstr(agent_directory, ==, "/tmp");
7353
 
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
7354
 
  g_assert_true(user == 1);
7355
 
  g_assert_true(group == 2);
7356
 
  char *marg = mandos_argz;
7357
 
  g_assert_cmpstr(marg, ==, "mandos-client");
7358
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7359
 
  g_assert_cmpstr(marg, ==, "one");
7360
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7361
 
  g_assert_cmpstr(marg, ==, "two");
7362
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7363
 
  g_assert_cmpstr(marg, ==, "three");
7364
 
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7365
 
                                            mandos_argz_length),
7366
 
                   ==, 4);
7367
 
 
7368
 
  for(char **arg = argv; *arg != NULL; arg++){
7369
 
    free(*arg);
7370
 
  }
7371
 
}
7372
 
 
7373
 
static void test_parse_arguments_mixed(__attribute__((unused))
7374
 
                                       test_fixture *fixture,
7375
 
                                       __attribute__((unused))
7376
 
                                       gconstpointer user_data){
7377
 
  char *argv[] = {
7378
 
    strdup("prgname"),
7379
 
    strdup("mandos-client"),
7380
 
    strdup("--user"),
7381
 
    strdup("1"),
7382
 
    strdup("one"),
7383
 
    strdup("--agent-directory"),
7384
 
    strdup("/tmp"),
7385
 
    strdup("two"),
7386
 
    strdup("three"),
7387
 
    strdup("--helper-directory=/var/tmp"),
7388
 
    NULL };
7389
 
  const int argc = (sizeof(argv) / sizeof(char *)) - 1;
7390
 
 
7391
 
  __attribute__((cleanup(cleanup_string)))
7392
 
    char *agent_directory = NULL;
7393
 
  __attribute__((cleanup(cleanup_string)))
7394
 
    char *helper_directory = NULL;
7395
 
  uid_t user = 0;
7396
 
  gid_t group = 0;
7397
 
  __attribute__((cleanup(cleanup_string)))
7398
 
    char *mandos_argz = NULL;
7399
 
  size_t mandos_argz_length = 0;
7400
 
 
7401
 
  g_assert_true(parse_arguments(argc, argv, false, &agent_directory,
7402
 
                                &helper_directory, &user, &group,
7403
 
                                &mandos_argz, &mandos_argz_length));
7404
 
 
7405
 
  g_assert_cmpstr(agent_directory, ==, "/tmp");
7406
 
  g_assert_cmpstr(helper_directory, ==, "/var/tmp");
7407
 
  g_assert_true(user == 1);
7408
 
  g_assert_true(group == 0);
7409
 
  char *marg = mandos_argz;
7410
 
  g_assert_cmpstr(marg, ==, "mandos-client");
7411
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7412
 
  g_assert_cmpstr(marg, ==, "one");
7413
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7414
 
  g_assert_cmpstr(marg, ==, "two");
7415
 
  marg = argz_next(mandos_argz, mandos_argz_length, marg);
7416
 
  g_assert_cmpstr(marg, ==, "three");
7417
 
  g_assert_cmpuint((unsigned int)argz_count(mandos_argz,
7418
 
                                            mandos_argz_length),
7419
 
                   ==, 4);
7420
 
 
7421
 
  for(char **arg = argv; *arg != NULL; arg++){
7422
 
    free(*arg);
7423
 
  }
7424
 
}
7425
 
 
7426
 
/* End of tests section */
7427
 
 
7428
 
/* Test boilerplate section; New tests should be added to the test
7429
 
   suite definition here, in the "run_tests" function.
7430
 
 
7431
 
   Finally, this section also contains the should_only_run_tests()
7432
 
   function used by main() for deciding if tests should be run or to
7433
 
   start normally. */
7434
 
 
7435
 
__attribute__((cold))
7436
 
static bool run_tests(int argc, char *argv[]){
7437
 
  g_test_init(&argc, &argv, NULL);
7438
 
 
7439
 
  /* A macro to add a test with no setup or teardown functions */
7440
 
#define test_add(testpath, testfunc)                    \
7441
 
  do {                                                  \
7442
 
    g_test_add((testpath), test_fixture, NULL, NULL,    \
7443
 
               (testfunc), NULL);                       \
7444
 
  } while(false)
7445
 
 
7446
 
  /* Test the signal-related functions first, since some other tests
7447
 
     depend on these functions in their setups and teardowns */
7448
 
  test_add("/signal-handling/setup", test_setup_signal_handler);
7449
 
  test_add("/signal-handling/restore", test_restore_signal_handler);
7450
 
  test_add("/signal-handling/block", test_block_sigchld);
7451
 
  test_add("/signal-handling/restore-sigmask", test_restore_sigmask);
7452
 
 
7453
 
  /* Regular non-signal-related tests; these use no setups or
7454
 
     teardowns */
7455
 
  test_add("/parse_arguments/noargs", test_parse_arguments_noargs);
7456
 
  test_add("/parse_arguments/invalid", test_parse_arguments_invalid);
7457
 
  test_add("/parse_arguments/long-dir",
7458
 
           test_parse_arguments_long_dir);
7459
 
  test_add("/parse_arguments/short-dir",
7460
 
           test_parse_arguments_short_dir);
7461
 
  test_add("/parse_arguments/helper-directory",
7462
 
           test_parse_arguments_helper_directory);
7463
 
  test_add("/parse_arguments/plugin-helper-dir",
7464
 
           test_parse_arguments_plugin_helper_dir);
7465
 
  test_add("/parse_arguments/user", test_parse_arguments_user);
7466
 
  test_add("/parse_arguments/user-invalid",
7467
 
           test_parse_arguments_user_invalid);
7468
 
  test_add("/parse_arguments/user-zero-invalid",
7469
 
           test_parse_arguments_user_zero_invalid);
7470
 
  test_add("/parse_arguments/group", test_parse_arguments_group);
7471
 
  test_add("/parse_arguments/group-invalid",
7472
 
           test_parse_arguments_group_invalid);
7473
 
  test_add("/parse_arguments/group-zero-invalid",
7474
 
           test_parse_arguments_group_zero_invalid);
7475
 
  test_add("/parse_arguments/mandos-noargs",
7476
 
           test_parse_arguments_mandos_noargs);
7477
 
  test_add("/parse_arguments/mandos-args",
7478
 
           test_parse_arguments_mandos_args);
7479
 
  test_add("/parse_arguments/all-args",
7480
 
           test_parse_arguments_all_args);
7481
 
  test_add("/parse_arguments/mixed", test_parse_arguments_mixed);
7482
 
  test_add("/queue/create", test_create_queue);
7483
 
  test_add("/queue/add", test_add_to_queue);
7484
 
  test_add("/queue/has_question/empty",
7485
 
           test_queue_has_question_empty);
7486
 
  test_add("/queue/has_question/false",
7487
 
           test_queue_has_question_false);
7488
 
  test_add("/queue/has_question/true", test_queue_has_question_true);
7489
 
  test_add("/queue/has_question/false2",
7490
 
           test_queue_has_question_false2);
7491
 
  test_add("/queue/has_question/true2",
7492
 
           test_queue_has_question_true2);
7493
 
  test_add("/buffer/cleanup", test_cleanup_buffer);
7494
 
  test_add("/string_set/net-set-contains-nothing",
7495
 
           test_string_set_new_set_contains_nothing);
7496
 
  test_add("/string_set/with-added-string-contains-it",
7497
 
           test_string_set_with_added_string_contains_it);
7498
 
  test_add("/string_set/cleared-does-not-contain-string",
7499
 
           test_string_set_cleared_does_not_contain_str);
7500
 
  test_add("/string_set/swap/one-with-empty",
7501
 
           test_string_set_swap_one_with_empty);
7502
 
  test_add("/string_set/swap/empty-with-one",
7503
 
           test_string_set_swap_empty_with_one);
7504
 
  test_add("/string_set/swap/one-with-one",
7505
 
           test_string_set_swap_one_with_one);
7506
 
 
7507
 
  /* A macro to add a test using the setup and teardown functions */
7508
 
#define test_add_st(path, func)                                 \
7509
 
  do {                                                          \
7510
 
    g_test_add((path), test_fixture, NULL, test_setup, (func),  \
7511
 
               test_teardown);                                  \
7512
 
  } while(false)
7513
 
 
7514
 
  /* Signal-related tests; these use setups and teardowns which
7515
 
     establish, during each test run, a signal handler for, and a
7516
 
     signal mask blocking, the SIGCHLD signal, just like main() */
7517
 
  test_add_st("/wait_for_event/timeout", test_wait_for_event_timeout);
7518
 
  test_add_st("/wait_for_event/event", test_wait_for_event_event);
7519
 
  test_add_st("/wait_for_event/sigchld", test_wait_for_event_sigchld);
7520
 
  test_add_st("/run_queue/zeroes-next-run",
7521
 
              test_run_queue_zeroes_next_run);
7522
 
  test_add_st("/run_queue/clears-cancelled_filenames",
7523
 
              test_run_queue_clears_cancelled_filenames);
7524
 
  test_add_st("/run_queue/skips-cancelled-filenames",
7525
 
              test_run_queue_skips_cancelled_filenames);
7526
 
  test_add_st("/run_queue/one-task", test_run_queue_one_task);
7527
 
  test_add_st("/run_queue/two-tasks", test_run_queue_two_tasks);
7528
 
  test_add_st("/run_queue/two-tasks/quit",
7529
 
              test_run_queue_two_tasks_quit);
7530
 
  test_add_st("/run_queue/two-tasks-cleanup",
7531
 
              test_run_queue_two_tasks_cleanup);
7532
 
  test_add_st("/task-creators/start_mandos_client",
7533
 
              test_start_mandos_client);
7534
 
  test_add_st("/task-creators/start_mandos_client/execv",
7535
 
              test_start_mandos_client_execv);
7536
 
  test_add_st("/task-creators/start_mandos_client/suid/euid",
7537
 
              test_start_mandos_client_suid_euid);
7538
 
  test_add_st("/task-creators/start_mandos_client/suid/egid",
7539
 
              test_start_mandos_client_suid_egid);
7540
 
  test_add_st("/task-creators/start_mandos_client/suid/ruid",
7541
 
              test_start_mandos_client_suid_ruid);
7542
 
  test_add_st("/task-creators/start_mandos_client/suid/rgid",
7543
 
              test_start_mandos_client_suid_rgid);
7544
 
  test_add_st("/task-creators/start_mandos_client/read",
7545
 
              test_start_mandos_client_read);
7546
 
  test_add_st("/task-creators/start_mandos_client/helper-directory",
7547
 
              test_start_mandos_client_helper_directory);
7548
 
  test_add_st("/task-creators/start_mandos_client/sigmask",
7549
 
              test_start_mandos_client_sigmask);
7550
 
  test_add_st("/task/wait_for_mandos_client_exit/badpid",
7551
 
              test_wait_for_mandos_client_exit_badpid);
7552
 
  test_add_st("/task/wait_for_mandos_client_exit/noexit",
7553
 
              test_wait_for_mandos_client_exit_noexit);
7554
 
  test_add_st("/task/wait_for_mandos_client_exit/success",
7555
 
              test_wait_for_mandos_client_exit_success);
7556
 
  test_add_st("/task/wait_for_mandos_client_exit/failure",
7557
 
              test_wait_for_mandos_client_exit_failure);
7558
 
  test_add_st("/task/wait_for_mandos_client_exit/killed",
7559
 
              test_wait_for_mandos_client_exit_killed);
7560
 
  test_add_st("/task/read_mandos_client_output/readerror",
7561
 
              test_read_mandos_client_output_readerror);
7562
 
  test_add_st("/task/read_mandos_client_output/nodata",
7563
 
              test_read_mandos_client_output_nodata);
7564
 
  test_add_st("/task/read_mandos_client_output/eof",
7565
 
              test_read_mandos_client_output_eof);
7566
 
  test_add_st("/task/read_mandos_client_output/once",
7567
 
              test_read_mandos_client_output_once);
7568
 
  test_add_st("/task/read_mandos_client_output/malloc",
7569
 
              test_read_mandos_client_output_malloc);
7570
 
  test_add_st("/task/read_mandos_client_output/append",
7571
 
              test_read_mandos_client_output_append);
7572
 
  test_add_st("/task-creators/add_inotify_dir_watch",
7573
 
              test_add_inotify_dir_watch);
7574
 
  test_add_st("/task-creators/add_inotify_dir_watch/fail",
7575
 
              test_add_inotify_dir_watch_fail);
7576
 
  test_add_st("/task-creators/add_inotify_dir_watch/EAGAIN",
7577
 
              test_add_inotify_dir_watch_EAGAIN);
7578
 
  test_add_st("/task-creators/add_inotify_dir_watch/IN_CLOSE_WRITE",
7579
 
              test_add_inotify_dir_watch_IN_CLOSE_WRITE);
7580
 
  test_add_st("/task-creators/add_inotify_dir_watch/IN_MOVED_TO",
7581
 
              test_add_inotify_dir_watch_IN_MOVED_TO);
7582
 
  test_add_st("/task-creators/add_inotify_dir_watch/IN_DELETE",
7583
 
              test_add_inotify_dir_watch_IN_DELETE);
7584
 
  test_add_st("/task/read_inotify_event/readerror",
7585
 
              test_read_inotify_event_readerror);
7586
 
  test_add_st("/task/read_inotify_event/bad-epoll",
7587
 
              test_read_inotify_event_bad_epoll);
7588
 
  test_add_st("/task/read_inotify_event/nodata",
7589
 
              test_read_inotify_event_nodata);
7590
 
  test_add_st("/task/read_inotify_event/eof",
7591
 
              test_read_inotify_event_eof);
7592
 
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE",
7593
 
              test_read_inotify_event_IN_CLOSE_WRITE);
7594
 
  test_add_st("/task/read_inotify_event/IN_MOVED_TO",
7595
 
              test_read_inotify_event_IN_MOVED_TO);
7596
 
  test_add_st("/task/read_inotify_event/IN_DELETE",
7597
 
              test_read_inotify_event_IN_DELETE);
7598
 
  test_add_st("/task/read_inotify_event/IN_CLOSE_WRITE/badname",
7599
 
              test_read_inotify_event_IN_CLOSE_WRITE_badname);
7600
 
  test_add_st("/task/read_inotify_event/IN_MOVED_TO/badname",
7601
 
              test_read_inotify_event_IN_MOVED_TO_badname);
7602
 
  test_add_st("/task/read_inotify_event/IN_DELETE/badname",
7603
 
              test_read_inotify_event_IN_DELETE_badname);
7604
 
  test_add_st("/task/open_and_parse_question/ENOENT",
7605
 
              test_open_and_parse_question_ENOENT);
7606
 
  test_add_st("/task/open_and_parse_question/EIO",
7607
 
              test_open_and_parse_question_EIO);
7608
 
  test_add_st("/task/open_and_parse_question/parse-error",
7609
 
              test_open_and_parse_question_parse_error);
7610
 
  test_add_st("/task/open_and_parse_question/nosocket",
7611
 
              test_open_and_parse_question_nosocket);
7612
 
  test_add_st("/task/open_and_parse_question/badsocket",
7613
 
              test_open_and_parse_question_badsocket);
7614
 
  test_add_st("/task/open_and_parse_question/nopid",
7615
 
              test_open_and_parse_question_nopid);
7616
 
  test_add_st("/task/open_and_parse_question/badpid",
7617
 
              test_open_and_parse_question_badpid);
7618
 
  test_add_st("/task/open_and_parse_question/noexist_pid",
7619
 
              test_open_and_parse_question_noexist_pid);
7620
 
  test_add_st("/task/open_and_parse_question/no-notafter",
7621
 
              test_open_and_parse_question_no_notafter);
7622
 
  test_add_st("/task/open_and_parse_question/bad-notafter",
7623
 
              test_open_and_parse_question_bad_notafter);
7624
 
  test_add_st("/task/open_and_parse_question/notafter-0",
7625
 
              test_open_and_parse_question_notafter_0);
7626
 
  test_add_st("/task/open_and_parse_question/notafter-1",
7627
 
              test_open_and_parse_question_notafter_1);
7628
 
  test_add_st("/task/open_and_parse_question/notafter-1-1",
7629
 
              test_open_and_parse_question_notafter_1_1);
7630
 
  test_add_st("/task/open_and_parse_question/notafter-1-2",
7631
 
              test_open_and_parse_question_notafter_1_2);
7632
 
  test_add_st("/task/open_and_parse_question/equal-notafter",
7633
 
              test_open_and_parse_question_equal_notafter);
7634
 
  test_add_st("/task/open_and_parse_question/late-notafter",
7635
 
              test_open_and_parse_question_late_notafter);
7636
 
  test_add_st("/task/cancel_old_question/0-1-2",
7637
 
              test_cancel_old_question_0_1_2);
7638
 
  test_add_st("/task/cancel_old_question/0-2-1",
7639
 
              test_cancel_old_question_0_2_1);
7640
 
  test_add_st("/task/cancel_old_question/1-2-3",
7641
 
              test_cancel_old_question_1_2_3);
7642
 
  test_add_st("/task/cancel_old_question/1-3-2",
7643
 
              test_cancel_old_question_1_3_2);
7644
 
  test_add_st("/task/cancel_old_question/2-1-3",
7645
 
              test_cancel_old_question_2_1_3);
7646
 
  test_add_st("/task/cancel_old_question/2-3-1",
7647
 
              test_cancel_old_question_2_3_1);
7648
 
  test_add_st("/task/cancel_old_question/3-1-2",
7649
 
              test_cancel_old_question_3_1_2);
7650
 
  test_add_st("/task/cancel_old_question/3-2-1",
7651
 
              test_cancel_old_question_3_2_1);
7652
 
  test_add_st("/task/connect_question_socket/name-too-long",
7653
 
              test_connect_question_socket_name_too_long);
7654
 
  test_add_st("/task/connect_question_socket/connect-fail",
7655
 
              test_connect_question_socket_connect_fail);
7656
 
  test_add_st("/task/connect_question_socket/bad-epoll",
7657
 
              test_connect_question_socket_bad_epoll);
7658
 
  test_add_st("/task/connect_question_socket/usable",
7659
 
              test_connect_question_socket_usable);
7660
 
  test_add_st("/task/send_password_to_socket/client-not-exited",
7661
 
              test_send_password_to_socket_client_not_exited);
7662
 
  test_add_st("/task/send_password_to_socket/password-not-read",
7663
 
              test_send_password_to_socket_password_not_read);
7664
 
  test_add_st("/task/send_password_to_socket/EMSGSIZE",
7665
 
              test_send_password_to_socket_EMSGSIZE);
7666
 
  test_add_st("/task/send_password_to_socket/retry",
7667
 
              test_send_password_to_socket_retry);
7668
 
  test_add_st("/task/send_password_to_socket/bad-epoll",
7669
 
              test_send_password_to_socket_bad_epoll);
7670
 
  test_add_st("/task/send_password_to_socket/null-password",
7671
 
              test_send_password_to_socket_null_password);
7672
 
  test_add_st("/task/send_password_to_socket/empty-password",
7673
 
              test_send_password_to_socket_empty_password);
7674
 
  test_add_st("/task/send_password_to_socket/empty-str-password",
7675
 
              test_send_password_to_socket_empty_str_pass);
7676
 
  test_add_st("/task/send_password_to_socket/text-password",
7677
 
              test_send_password_to_socket_text_password);
7678
 
  test_add_st("/task/send_password_to_socket/binary-password",
7679
 
              test_send_password_to_socket_binary_password);
7680
 
  test_add_st("/task/send_password_to_socket/nuls-in-password",
7681
 
              test_send_password_to_socket_nuls_in_password);
7682
 
  test_add_st("/task-creators/add_existing_questions/ENOENT",
7683
 
              test_add_existing_questions_ENOENT);
7684
 
  test_add_st("/task-creators/add_existing_questions/no-questions",
7685
 
              test_add_existing_questions_no_questions);
7686
 
  test_add_st("/task-creators/add_existing_questions/one-question",
7687
 
              test_add_existing_questions_one_question);
7688
 
  test_add_st("/task-creators/add_existing_questions/two-questions",
7689
 
              test_add_existing_questions_two_questions);
7690
 
  test_add_st("/task-creators/add_existing_questions/non-questions",
7691
 
              test_add_existing_questions_non_questions);
7692
 
  test_add_st("/task-creators/add_existing_questions/both-types",
7693
 
              test_add_existing_questions_both_types);
7694
 
 
7695
 
  return g_test_run() == 0;
7696
 
}
7697
 
 
7698
 
static bool should_only_run_tests(int *argc_p, char **argv_p[]){
7699
 
  GOptionContext *context = g_option_context_new("");
7700
 
 
7701
 
  g_option_context_set_help_enabled(context, FALSE);
7702
 
  g_option_context_set_ignore_unknown_options(context, TRUE);
7703
 
 
7704
 
  gboolean run_tests = FALSE;
7705
 
  GOptionEntry entries[] = {
7706
 
    { "test", 0, 0, G_OPTION_ARG_NONE,
7707
 
      &run_tests, "Run tests", NULL },
7708
 
    { NULL }
7709
 
  };
7710
 
  g_option_context_add_main_entries(context, entries, NULL);
7711
 
 
7712
 
  GError *error = NULL;
7713
 
 
7714
 
  if(g_option_context_parse(context, argc_p, argv_p, &error) != TRUE){
7715
 
    g_option_context_free(context);
7716
 
    g_error("Failed to parse options: %s", error->message);
7717
 
  }
7718
 
 
7719
 
  g_option_context_free(context);
7720
 
  return run_tests != FALSE;
7721
 
}